From 367785b36946ebaba4baed083db0511c2af89db1 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 13 Oct 2020 21:40:38 +0500 Subject: [PATCH 001/958] Removed a content There is no need to create a custom device policy to enable PIN reset recovery. So removing this portion. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8284#issuecomment-707356130 --- .../hello-for-business/hello-feature-pin-reset.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index f6a0ebc776..13403b0f92 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -66,9 +66,6 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput 3. Enable the **Use PIN Recovery** policy setting located under **Computer Configuration->Administrative Templates->Windows Components->Windows Hello for Business**. 4. Close the Group Policy Management Editor to save the Group Policy object. Close the GPMC. -### Configure Windows devices to use PIN reset using Microsoft Intune - -To configure PIN reset on Windows devices you manage, use an [Intune Windows 10 custom device policy](https://docs.microsoft.com/intune/custom-settings-windows-10) to enable the feature. Configure the policy using the following Windows policy configuration service provider (CSP): #### Create a PIN Reset Device configuration profile using Microsoft Intune From fe2a13a56101da89ba4d5e165924f5c2a7998ef5 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Wed, 14 Oct 2020 10:00:29 +0500 Subject: [PATCH 002/958] Update windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-feature-pin-reset.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 13403b0f92..f680e26e79 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -66,7 +66,6 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput 3. Enable the **Use PIN Recovery** policy setting located under **Computer Configuration->Administrative Templates->Windows Components->Windows Hello for Business**. 4. Close the Group Policy Management Editor to save the Group Policy object. Close the GPMC. - #### Create a PIN Reset Device configuration profile using Microsoft Intune 1. Sign-in to [Azure Portal](https://portal.azure.com) using a Global administrator account. From 72674159bab321398987df8a7c2addcb43972b43 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 19 Oct 2020 14:09:51 +0500 Subject: [PATCH 003/958] Updated Instruction and screenshots. As requested by user, I have updated the instruction and added a screenshot. --- .../control-usb-devices-using-intune.md | 13 +++++-------- .../create-device-configuration-profile.png | Bin 44895 -> 51871 bytes .../device-control/images/create-profile.png | Bin 19760 -> 15388 bytes 3 files changed, 5 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md index e8f58439cb..054620ee11 100644 --- a/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md +++ b/windows/security/threat-protection/device-control/control-usb-devices-using-intune.md @@ -197,29 +197,26 @@ For more information about controlling USB devices, see the [Microsoft Secure bl ### Block installation and usage of removable storage -1. Sign in to the [Microsoft Azure portal](https://portal.azure.com/). -2. Click **Intune** > **Device configuration** > **Profiles** > **Create profile**. +1. Sign in to the [Microsoft Endpoint Manager](https://endpoint.microsoft.com/). +2. Click **Devices** > **Windows** > **Configuration Policies** > **Create profile**. ![Create device configuration profile](images/create-device-configuration-profile.png) 3. Use the following settings: - - Name: Type a name for the profile - - Description: Type a description - Platform: Windows 10 and later - - Profile type: Device restrictions + - Profile type: Device restrictions ![Create profile](images/create-profile.png) -4. Click **Configure** > **General**. +4. Click **Create**. 5. For **Removable storage** and **USB connection (mobile only)**, choose **Block**. **Removable storage** includes USB drives, where **USB connection (mobile only)** excludes USB charging but includes other USB connections on mobile devices only. ![General settings](images/general-settings.png) -6. Click **OK** to close **General** settings and **Device restrictions**. +6. Click **OK** to close settings and **Device restrictions**. -7. Click **Create** to save the profile. ### Only allow installation and usage of specifically approved peripherals diff --git a/windows/security/threat-protection/device-control/images/create-device-configuration-profile.png b/windows/security/threat-protection/device-control/images/create-device-configuration-profile.png index 1b6d4aa7086610bd1c0c1b4b63a9a6686e6d4294..4b8c80fdd7f99646bb6e6dde30134bb005cc9104 100644 GIT binary patch literal 51871 zcmcF~WmH^2w`BuC6C}ZsV8Pwp6Wrb1HPEXn znfdXi)?#&Y@9L^kr;gseZ@7|zBs$thGynjAE-fXd0stU10swGFDDbc=F8C>vun$xR zDQ#x}0Hg2a4=$M=g8+6B*+p7j9C-%~8-<=drgEJe0Qdxu7W<;+@#A>SQxAJ_8TpKa z>zA5FJ!|wMe~+d9oChCfz2wg~q%Jokgba555&z5uX|wb;M}3 zUUekXP-;@-GIab=VthYGgO>Lyq1|8Z-8&R4y#C!gzx$tw>FmxE=}~7pJL&9H*aOjU zq(N9BD5PTfvXen^<|FB4+=-h+Ha#$-P_= z2_r^}NBuX=v?wXtf9CU|5u^Ig#F+o5$%^zzAv48uJBcO3)TY9OguzHsQA}GCmlI&& z^YI~sx{Sx`eozt}{HZI2^06aAyD|YsxG@AC@JD0q8*+I{1Y(5{%Xp%?kI_H`xjg>g zH|b-dF@9RL*EHPqSp=hi!K`|*W^vIjV8 zxsR_pByhIhR5#c(VmBMA&#$=+%{gK{=Na^Ruk^w-fmaV^SIVDGe00Pav)<23t2^to zp1qtUWXH-s%%|-Z%|pNv%Jai4uf}n9_2g3rMZ@Wuq$<_%Q6dy$G2sa$1_;pa4yCvB z;=MYsN24i4i-EE;(EYn@&Pz5+n%!7#+ZC17l)TOFf48!|%Bulzc-HXqn%fgBDgf|w zMhgERf4{nj7Vv04;SQ|id9~RefSDQ!Au87@3}`>h*bki)j_hLF9VG#^xg!H^c&Sx4 z-sLd6ee9`&H|o#K$q--|6rf}lBEs6m5bVA?1*}@+S z8Dt&?0G>-u36pkZy)O?cXxaVlx%J_X$Ih7}Qy4tdOYb$Dz78g{?FMHXIGpZo2dM zQ0?OnX@*mA#51`3tEDH%>vzqSHNZVxoicfSzHyHtfw@0X?|E^x*c9ZoT$>wbh<*Cx zVw$J+pmF*H8kEfR)xGii^KD2Ag@+Z z3nu#``+95#rloF6^4<)nI~KNw|22>m&ICW0kRk?0XjK@fI%;`2{>Ovz4hJ%KyhETv%-)K8-4OEhpm4tUIt+k%C8@Q&wZph4EsbtAcl*{QVBjBvT`B2EfT_of8MTnQB2_JZTV zaI8*v&#w5 zbQK=7z5UCii^0|!nq(0X8ui?zj=uK1%Tr{@bX1SV(>(b95Ax;M+Yf3 zz~ZYsn&Igt3Vr znNf<*%hO7x=FEkL)_ge3-l)!${i$PXAOTHIVI&BWPh@}QeU+xf94rnOJ@dL zFh-PcL|TXF|5==dVqA;*zV$b=jDZG&p3`pt3t8oY7mHc19ONc=*>bpt2Jy$@ge$Xj z@m*WbJ-A+i1aTrpi#{{REPig$J!}$w;%8}U7Q+r=I)B0KjL~$70%30H=RY(;NDiP@ zs!f8i19ZIy5^NF#EL|d=L7o?dB*+)V`U!jM)BHPpn;@Ait3^~^wfVyVg{1)O! zUe!9<$77@UHb-2EsTTdJLz!?lSM@va82-bIZByB1x5?G3X5UtXnRnyv7v|oPz>ck7 z{Po(Dj6-V7#B_-v?Ht`BNYz`HNR|3aCA$-N6%w z_CAt*T|2VAh=F&JyvSwkKeQklb=OJ8kqU4{!^X~o9z6V)tfn=vL}s5?-s5%hiqx6v z0vWyfWWq$-3he0}IE!E0S}N~_r{C&jNJRGVrW#Q$%P>}9K3z7b;Awf&t!3*6uos>E z?^i=(1*7D4yny;N=@?-ZKW~h3quUT=QD7O9y8`gDmvxntdjWkBH(;`QC(-zdo{_^^ zeAyyNze67pnO%c~gDY*8AYgGOvE+)~NzGbTV=YC==cQtEDa1gHCl!iwHCGFmm7T>i zLOJ^4w*Z%W=h=W`S4n5N@_6$aFGzuC_q6-Mu-dhFHe+dV*@s0`$Ggp-LWE%4K}%k7 zwTIRB_=3hvGO`lIz@3oIoE1rT=(X5%zyzV&Hdm$L=6u^>>As!}6tQLTJ2z631JA^d z`OzZ2t%-v2*;J;8lR{sf5eIvea#$r(ac!;+jTaoOoC8+2F8c_MbBztvq33ECEcply z%$C$=UoMU#vmF_Z0Cy2Wx_GQrv3h(&z~pXZ$xw9c!9iYa0e$Q0lhW!LM@i_!-8Y@ z_Xr`kf0gb|c;B-ar3uHBVlyILA`+_!LcTR;sylTrI0_+q!$LzLdi6ZBk+HcgauVF8 zoFmNonkWJG8-oDkqJF|+*pHmc0S6}u7{DBt*ydYTYS6h~cUE~K@>SyT#N?jlWhY+1c!_mAv~Fot^V2vg{P05dp~?AsxU16~~YzBD0hNkAZj{ zkkSezpJwKa32bVO8M99$zc@VzA@RJy*d`Sz?@BNguK#3bsasW31~YV{(GPlYl~1Mr z>Tksu47B)fG{(>)1yQYLMkr@Xy2%VUp`UpYbS|>(?zN*=X0n8F;B2R%6}ZxHwjJ*b z4IJd{>U0(cHT^9mo-oKJTpj0i{Dh41@D-$Ft+RZva(u2wPqm+9K^1A3J$a#r(=lI` zOGuc#X!QE7!4TtP)LhkC<@dnkI&j8(yUck;*mg8p+SU2(S#MXF;p*5OS?j?mA&)ML zCknVfAgtoY52uuiQ3DM00Z#d>LI0MHSS>VNcSY)40nm^#K-jFE%dB0syRzd)Ila1u zfcMMvrrrJpP5JJv{+VPYwNtP4 zk}nhlnuGMs*Onp&z@!Q_#<1|e`B*4VGQ`W&IYPo6&}H&$*@Zi57wUnrV4pzz4)=kN z$D1i8`fQA@({z4t+A~1FbNz4+=^*o~R;1;FGS9u}fUW2N|E>SKHQ}Po#`e%U_5@Ic z!leJ~+AOWnqJct)78-rb1xwlA4`A;0h%3(KGX=wpfeSZ3Uy$F#5+Q9lkHV>jW+C@| z=x3Pq#!XB+V&)2YH0GkwObX9DdKfRol1M(%v{Hee@=~jE0>DG1t=73oR!619^?&&b z5d@xIb@uW!r@XE6>W^mw%&efrfOe)ZMG-s%OVJdLSKaENX+KhZe4c!e+{@^AYOZE0 zw2_X4oj9IG^j-X?LxscassW=tql=2U(AW*1>z>#ZH%fz+(Zi>NSnxjSEu-?P(fUd$ zp|K;$^|MiD&_|-mW~m&4=7^17hcYCzM1@_EJ?iYx zcLAXI9I*I=D6mpmb{G4T|HVaEBZh+|935UA_M}Nuty-3KU}Ob zwB-KwufHYwDE|M_mH&71{a;%A9YZPg&d>Y8vD0ro4rU4#78bJBXkG$(TnOv|LM&?k;6Ekl zz?7724%%i`lTmh6$4> z3rC+!j0+c4GDLMP$(8*g(8L?q_$q2U&;Jg#LM%$~&<<-lk0V*YuU{0lwnqiBsrD<4 z(Jj_sPZqaht)EI(Uz4KjL0p*Xtk1#P=7ak7qH>dOn~Q%NY}UJRZ@*t5$}~{5!$}}m zUUZ*z#%aF$q))KCUOpW1VR3J|G38}{2x#%c+ZO_o!|WDgR`N;Z#uvZi$B)rHaTS-t zN*vb?hIfq`w6Hfe%6Xh-T_O~w7{P;k2~=)Ip&|!OsC%Zkt;Ek7h;nE&SvjYo98Vxwj?Olot)!*5o->89)p3QxFXIB*US~?`SQCSW#4Qj=QjNc= z-D&u!rrclqEc{DCIH}p!4Zk?>ZAWX{@FLKSe`tVZB;l;JN;$lU%F} z2|y5CgU+FA-H<__GwGneBE7m*2xsbb#xvhvD0gx$b-=}ee_r@NPHd`qta-$mAW#q9 zWpwSsvahI~_`UqArOo!+Eu?JhBE#{dA0KJEdk}`@Rqcfl_$y-C{OvE4a2Bjg2sI;VGnOYK zNfaEx1^A_got)SjZRyttieG}AGkqLQeH@edqyyzNXz&Zd^WqHgj zmGzKDnJ5U)=VF{Y5DES7#a)F>iCAgc?;5LGl}vmg2lMaV)?Nm_gu`(ui{DKvg*)wT zdC0$qWCzM|f5;bY%_oNM(oU?v2%G;>SKr=f%&`#_0!*7{ z*ot)yx=JZbW2xnTIfRm%ZQce4@FZc}D61e{MH-#@8v@|vnOz|Fk%c^0xB87ZRSVqy zb?}|krVT6Q74&X&$PL_vCWu&>I?F8FEzf?^>{|98HxkVs+VM1>wJja*jbFZ-V>0}Z zz9`Q!HH*>H(_74y$$meveJ+eY}AZO7pohXad1bFl!E&xdzy_PvcpI{+W4rl0Nwu2N)U?u z<%uU@ncIsM!`A>cwM9Er!l}3N|MDN{FZKp{F+bm%f^vF)^kXpK)BWP(W9>*Eq9}i{ z@r%f?#wMmQbSTly@SXnMX!1i|W@4mF!J)nJov!2bk+<3)e*4_Flb0vQuyD+3E6e0` z*Rd?^%@khwcm*+9S2~S!l_^jO{u$%%@5#bkc3TCz=juWKpNI9HU*$$dM|B%S?>cn4 zq^8H)ZlGJgonc}W%NgaVlo*-77ekYvlyq1tm&fsqW3!E+OXM~jo_?1{i&b@*|LRtd z!jVLL!HvxmnKll=z18bCjmk6T1^zb-G{~^)fYDHM+H3XyY~cnnCBR zNRk|ibqK?5zH)D0M`onhP&odTIkr3Jd==+riCEzcG&bv5FBInV3wemn27XjRa>3W~|ap-u_44-riX{xTKsX z-iCJp6nko0rdBtzl`3R1s~t8yy4yZ!>;i|;o0vk+q@pvo^7~rms3h&!#5aZ>3Ypl) zEBLN)AaTSyk0>b3T}fn0&U#9dj;sC7>Rr6_yVE}Hx}tMHu7GE7w`rfQGSQu95*Fmr zwm%Bbd*hnrWckW1xN(=ApjSkFXxMj1(mKF*;kW*o1yuP-SO~8*mbk;(LEEO1r=s<{Cm9Wz|59DSdE80 zBNP~dsuh-uaB%l7%5`?7kY-Fqh56$jI$9hyNe2Qe^zQ5AZd#_i`~oI$w4>*n6TgUI z%J580-*_c8^zID)z5-@Izr3_x28D3N+~XX^Ug}_eiO%~v1uZ*a{=GiR~`19cD00;Qma|oWO@?)@rZP&SJ5+ypmdm6YDI=X&YZ<%h>NJB^Y z8;o6=xze(R)-MfsCB&E0uU+Z=S>LGz_y-D+7sZl%7>9Seux@yf@>nM6CpnScu8aCcsLTD-<-ovgNB&cRW;K zIJw7{#qUeB4-^}n0A>_pyCUl&!z#_s=i_|auie?%?{t}GQ${(1`!9Y3^wNG#Z_XtQ z{Cd<>9B3r#tl=8nE~lo%Wf_;{W?Deegau$g%$~5Tdh}GyX!h}o3gSH6zLlSCNx5H< zt7ysJWAN@nFZQe_oDk5)m&HGug=R#^au0s6J*;Rc9< z7&<;xeCcl)bEm8cTsnd3=U zQPxg+SM#@ml{|x1)le%Xv)OwdelLKy7f}^@HGG;xmX)~{kp~~*`G#cgyehwdugx0x z`HkWtt#10qb)y0XYEq|`Jp;ZR)-SJrZ#yk}Q|ntFeoL}J!5hEg;1jB37!G?dgA%}x zGy1~r`z5O##?rDS`iboUl7neigpJT*vmsy1BE&!%OnYmn;RpeLl=gnH){$_qVt;2~ z*Kqdg80=`H{8{{t_igW$3>z5yHz)*{`0c7?h10f@(w~^k=9VRP`oYQd;r$M{;&dB= zvUbDzFP0PkWCdW|REDl!Qpt~RDbc2VlCQSE zwpwYNH<*B~BYj~G;~id%;3f)I0fz3COwaiUqG5K00+ncYb`YkC^(l?HL=-y1V2-!a zQ}x;vFXZu9Ne!u`_%l2=Rh?Egy$oEUDG7l8g`V4H*=%7@T`k^zgSC-+0<777%}-OS59(=|ZvZ~b z*_;6F`{fq;ca&GiRVldUR5w}G0?qn25yOz6mH^C+-XT(d&uMPwjiqGzP|ij7`>&R^ zYEm<*uq;a@8NKG>kl5uL*z@4s5>HAxSpGz zz-GN))6%M4^V#@eXKA3C;>tklHh&N$Y=Xh)U=C;0Hl8ksUy!a$>*dG0Ne&-Qls0>T?optahW40r;35tW2!oIiF*B_B=H;Z}eLe=o7e3=>QK$B&e|ogq#?gT-Idl!qTxLRni2k(5#J)P@!go|Q?GDF_*J6c2t0*tn5lZ$0`;VVGXCgF{k zJ%B#}E%6Tt&OMpXbrEik5;j-6-k^h<-*n<{e_ojCu2~B@8IPUnvfn`2CL=4*Kg-*} zFZwmP)#&3ZXCkZsm>o@1#DbnIvAMKq?1h0Hg)34L# zv^?pEl~rBnAjz(_QO3Cmu4-q43gVu_FAz% z#|@9EY;5fr+Ag?k`+mWG7O(Y7O5Aftbrd~{_Is<<{$3?Rk^BV;`*|0Kb&=`HIRF0g z$oJcIj^&((pb@E=iR2nNWo?R|={qQ%It_f&B0qlz@`<}<{r!@aC*hCNBJtB~L35E7 z=j5p~BQB=LM@O|ZS0$a}S#^5hG8ah?`W6K+goV%MPxM;6gcERUAE*r&9e0KY;6ywR zMnTxH$-51@w?Dexew?h%%8_%f1Do5~9YOXo z3mxT4F+#7eeQ%WW^`2&aRX9=t#_nvp9=ckD^mJ{H3>L0WXN8xZ=QC3PHY$z&hQAg| zE>}&iI>*q%zQKJ1$S~uTb}2B?<0Qj5oZr+VD|zN8@ghDt3SG+u44F7fj%#!MBp;X; zI6jG{)AaE0t|j!dCEMFapUqrWM0viImzC<2#^OXVrLw=biI}L#Dw<43`t(I_Zkfua z)SxVt#qQ+8^={~R-~7PP2#bF6wqVxn`+%czMfm!2RzUaCpg&3+SqjH$hq<^UxoRn? zRs{^^1RPVBKU#(G%H(~_YUqy6gg+YGmTv)0WMX_GT?{Mf7~Oe{)v)<%3IMEFE``o& z(?s*d7idP)1YWH(t=+y)wnlc7HfnO%roP`m(rOzwXc|N3q;(WNDnxFO-r71Db{ah} zJaC;_W;d$@aMBjlrTGsh?*<2SMAj+5YBgluSu8eE#WIc1q3Z>zd?XiFP#WZG+hr5i za96=lS3$FnY`nkh^ak44y{6&54RCGD1usZIh%SvLNvWip;+aOhlqyyC_PSRqKK2!iK zi*S0lT!>Q&N34y)lP+>!No+7pNnncvqk`_xj*1bo?*Ep9p_2Ij_!sCSV zsANxnG?j92Dw#k$L$8ZzlN;HBGw!;Lift-oy|EeLsXI+rMt{{(XeL3Pvi*VDZyz<{ zo^^9TO($pX9KC2+1eKxwVU>n~O;vVjwQFldmlu^#$PW8ZsGkIA#5XZ$ik& z85Dam0|YelNH&o=uS*RQ(-;cB^!NpSEOO?FN*_aputAp7G4;q4=n-s}Z6A@s!5w-6 zu0r1<~GoK3?6~D}RV4#D*|fx#k6nV$K2)yxyx6%O8)*wZV6bWob@Z zrPD6Km9GijNxc>hWaTTg zLN1TEt#O-!VX?wC(En!vVi!E1+4q49jro4r>6^+YSto>Qgz}C@s!x=N;w}Da6Pr5h z+@BQATuSS-9<>og$vfzd>LsAN%3G&~kmQ-q4k7 zZBan?vL8wuGi_qv%3oks#0;4c*5bO+7w<~yIAu>oj5#3K*7SBxUC7FO-+3ETc~-qC zb}@HAkXcr@%ST;A86A*P@j7+%YUkqqC3o8Pp3}=-d?VH450nQBPhn$e?B{Txq5q4%0<=Plk=udY9w;y*{3KHP{??rLa^20a@vL^Kd@*~s1Y9pH@ z;iY)vL-K2}jn3WjjfQn+2ryLSLy=mE8jCU=95#0HJC<*y;pPRU44t51T@1z~lrWaC*V(lOyzc|Kstu5hiacrR`56MEFuN;s(N$EI^b|k8lCob@ z38)}(vPOG&vtSkmE8~zz^HDwozvGong9VA^nxCG>ZU_A$+Pr<{0QioOeWH=&X=;xS z#WU*Kyd?dy1uCgh=Nli7Zcra#M-gUYZECynw{lTfro45owlwO!qxo39Z;TlhLE-fN z{WxQC7~p|8mMjd>$YugQ=()|r=uKT?{t+D?fiC=mI6Z#U%(!(It*z)sHbAx4AGo~V z?*c7P?n%hHJKYDf8u&SHKIY^@ged?}*6O<`=e_Uv`tjX$j%;1Wu_l0H;*-Zm>*-$N zX5Re|a*rC$zlTNcqsi%#J#!jI451$63byu9FrKph==>xAS)&m*>@I>*f9&v2f0-5^~XY zcsP{08Ncy&@M)V%4jD{Hk%BZv~U|3^-aZ5_t zkvC1{X|H30ehlwRJS~b&r2h)wCj;~_CD{3`8hW)@eL@5mMzMIMscD89ETP^{@rUQS zVOm$0Y{F_At2T1d%zN`8=yD*u53>6FYt&eHY30vqZp!X61D$oVg3~=U>E?jDEp#@& z0Ynd{#f1x8y>~a*aFb7BZyA-ATD4t&LP_6;X1P`+>xN2Q|qoe8s&4TZ9kB zMuwSWC$(Zp_EYo+WqXSj)3jC(`BwmA87EqRBJ&f_s={+!2ykW_f<^SSY8|?0AkhO zKm5)<+xqy0S;|CYfHBO*BQQyi>W-6+O&keO$n*_-R~^^L#6YLXy{?*6_*I8M(_+FO zoP%_Fd5E=8C5Krfd3BQmlv#LcR`GJVEBzH>uD|;DEu;BqV=+}NiK<*b)m~5iYvt?L zScTaY8y#%)Yz(#4)A{PhEkXdN=f&R~n1S$k5XSgU<7ucs2Tcoy`GqBGLAmm4giwwK zTY?=4zrveSwFoi|pZM3K2hLQD9Cp&oUE0nqG%Fo89qZB(=BLnP-Js10jB8uqJM2;V zGkvBJx2oj~(%A|T*i(gOCWWWlgb}iMXrdSnr1T-6pu-pJrlE*(K$v9pCEHOZIpTx3 z2CeaL0j9OSGbhP$D>#5r%Tq6jFaj*xif9Uz$=gP0R`#m2J@kw|5GA@z^?Y3c&(h)hK&C z*~?$VTr+Bay+S7mAWQA5Ko8el$qioJLWbnTMYd<&!^=_`<*h| ztljq7pTf7`x=yj9uC{As#EWK}ZGE^xI$CT3*XM>7zBl3XP=VjtqrQK*2nsj2ropA8 z)QoxZfb$=fmj0 zj(j3j2@9wyYghWF1{THgu+jy#ap;oY9j33TjYHLF)Mb)OtE;PPYiIiV`6qvTz4+w56gN^9c-rE5ECboO;igoKcY&jVPW|5TG~2#wDw1l zzvq~&hl}A?nUrQJD&%q^eF4KPAzO)D-R*Ddq(a|PYC_AVKW(K6hFQi&sc`rJA{ulz zkHaBR&k>O$wo{MsD2P=b3zWY?rR)vy8QR@2EHy^LBzt$ z_G&Z6_nO}Hi@qNzv@drpeDYvG+_0oO_y(xfO&;#}y-)v-aE)?Wb z+f@6RE6WME-=z4HtQ#5x8t6@ilh)ynLpUIOtPMHUwANF7LB*oNsEH=da48j$ll3s# zj(cm3BuidIcST8{>Wz5+ux%lJ2#i!pvQPrpsIpWK&ql7IdOq;u5l!qv3 zPu^YWcxufqzo+H8HkshX>-Ds=gy5>k0vW`;JI{<3hQm}`SIBZksPIm@fJd=I6%SqN zsGy)=M|-0-9{tWvx5%Njp2SGN@L27ES3P6xz-3GM%rp+YPW?i^ z&hP5N_DY+7D)rlBC=zzeu6%F`3JMUAF^=06;)>GsYAt(y33fDR`;c(+UyS^Xs^35} zpEruW_jvF&;FyQKW+PAod&&+|hm2svo8lrtjRS^fTD%l|koD_WuPb$Sc6I=4GD5De zT5fJ!0XsWpFiuL-hTj8g(+>fJKiERhu8cpugSBGPHDrL4<1hA5;A9$q3-rS@4E@U% z!y!ww{2@}HLgOkCf90>Cxi6?bQ7FlMQX3o`?AB6Sd(J*El>he{+W#8t?ncgsHoES- zJeV!7Sbn|gtefKNsBOs&!$v>m>%mlArdpa5AcB}Y(ye$px^4J=&(@|8I`HuO`PVYh zYc#YpM5a`J-}_4iE4~+w4yYY-qf3W7@^DkJcQtIuo#q$ zCX_jj7cSNW+^~q*1c5B=*UzTMUtmkmkOnd_=*1Ux0y>YL-=*l@Z)cPbldf8Z0QJtK zM@$);MbdGXE0k=MGK#*^qr&D_yPM^TvUoTe#xm5BM)NV>d?2jC-^?dHKOl|zDHxm9w_G`^PgCi@uL~bGrMg_-WX*ZPufxG+x9)sipJf3E! zLTWT>#s84iER|sf;d0g8l*K1k&7blY#YpCf9-t4*9ij^MjyR?VrzJr-n z?yZ}V-tpD+c_o^SN=U=f@N-tYKzAuX&wuu+Lza;H-ozjn_czWl84KTTn`{iXPVx% zQE%k+Qq4|ZM?@;L!?E1Gv*E8#NB3--D|3O+kGxAQS!CtsqG=KRYE;l;>cuQ;hC#>w zcCUk;)iJ$MYduE7`|S&^9%pF)JMRJ&Yg79z@TMB6zlWj01*n5R7`Mq@*eBPBCK)Xl z=1wJQN;K+)`f_S?$s#{lPXAPP_JAhLh5_l-W-clgu(8*&JflU;?`iU1ktOxwIhy%_ zJBR9W*&#>tU#@fmZ%Ujq9uR{{O;6hc39vd}02cUc0b>d20UiL9PB8o<29|&SHXEk|)ve*4KPCvy z?W&BZ<*B}GNw3Jcs0!if6AYVn?B%sM8JZ8l*y^*>!vD9lCq_M)Sjy-wgKXm4r#Hf) zTYpFp8yXs5hli+cXIFt%+S=L*!~oG10iZ{j|RIRACAOwEsce+E;GZzrx0( zv7;S8Aaa~V&H!U== zVN=3HtD9=DLslhr;+Fr@p$Y%n^- zzxBsOZlwmW!x+Sc=mAt=Mm`xGQv)F?>fm;M&1>QYyh1FS^><|>`+jYX#6sR1f*3ns z0R&$dQ6-zk9Q?z$z~ORs8EWX)dA>30*d5$}_aAV+vZ(gDN}G6S1++3gTqE`8aH>W8 z(}IBW3!fyK!Rs!ihSC-N#C9d51I74-EwU@}&q|0&ar1|8j$hc9u(V4@N-q!h^#!5EyZXNq$yRxJ zrFF;|hJmoc)u@zkd=Spomj0ld&lH`U|qhDT&_3UIhceJx(3?7OVfqigDZSEm-eHfg3*cG2u8g|9oa;+cOc_$kBm zn7G;5XDffXnEg`?Y_4?nq79F2d4*?a)*2Q>FV3I~x*Z#uvxAl16Gg_25^rm3+Xj=M z!B#UOHrfo9`JdW*ekh($wdmQysyZc_debqOYrKWE@99^$tr>q!A%7h1Z~P%$wNpe= z3(@PXZYMSt76T?Vu&5~~FHalTC_ZLgURG9CQ8E8i4VQb~%tpFnJr{x1^4Rl?cKYMc z^8ALhV^E+K2^PXVf7L73x<$icDy+h3c^SOyDdp(#>{S{FXT(NJymr1S))(q&W7|lX z^?YTXifQyWH0$3+`PWfi4TAxkkG<9zwbu`A1}+<hL zZ8$(z&l&;Aq31vp_UNt?ED_S+AVn%Ct&+{}{e&&s)uH5gW8CY!-?=Tbe`XM$$dfh0 zGDF;&;}iAs;b4DwIs$8{RrVR#{pjnG!dI@9`T6-Y{qpj1o%xST;nm@kKhq=i8eUf{ zuf6wdYX_NZ?MU78?>t3KTJQh5b zONhIzE}(Ynr~mtCqhcq&>&8H{xXpTnVq%$<3;d{bKl!Ijc>Lp(HY0`IY+dF-x@XMk zQ(J=;8|c1w+Avk%91US#K->7v6hZD#g2Qb49I@@fLvOK1+DOP)jLZQmO@P*yY_pPMF8m6)Is2wCyr_@S)xHK4iyWvg{ ziyEISL+QL8)jsZcQbG`ou+QnoH4gL&VH9NY{n@nCG<%G0e=fkc=W%YI8r#wQlSOvIf$UyyPIjEAekxZ2|-UV{H& zP8*b7aCy>c)8({rG&OpJ?O-~8aI+^69f+M1gLysfgSc*ak#ZJAAldoC**YKuyeb*Y zCa8#qWj`%8zQ>V5c~GDbM$Gd(E3L^p0zh0-??XLs@7*yZW}y-Xe3nfTi_`|>K?d|> zm_-dFCs_W5`Od_c^Be|2+YPwUEoyuQdl5V1UIM&OqCRRml4jmBvL8npTa@*YJJugB zg_q1^TPrgp+7WH(_TWALssL2`PmZbye#cy=mwlE_Ly-+ljNZb6IB^HC>xqknrCPJf z02db*6%`fSelcNc9}rHuY-eQ(`TVcZyn>YPA6Ikv-=(#!kwu;CB5W~gdV=eoca!zhcgFKBc z|3G0s_|(glU4H~z$0)imXT<(VR!hL5L+PUQPE|P@3wO4%>>M=#oAq%`>!fTG$i(Cf z{)1+Q8aXIs(R5zDOtWN!_0`9RK~_(|-Y#S>d6IgV9|6J50A+uukgEWf)Tv)k`)X~u zwzTZ#VeR>-sw--#e_^4qMBdYKJJ3KIp7{HoBz5P9w^I=2&~_p?O9^TViA(l+iS}M^ zZ4(tU0H81Hi;0DW@aHH-SZkRG|3^u3M>aswT2{Kv}743YP;kwN+k{e0PnqNz(?r(ckU=yi8G1r#tu7i7cdxfZ%bw|Mi$*IV5OEEPaJM)^R14 zzk0Y!M-fl^?_WpTb7@FFkzAlN8JY9c^xK*IWYz1ltgVhH+7CSSlAGVk#_`VYC_F85 z838-?H(IH;GR`E$w+NXL4LL%jtoZBxPWexTc{>X+Bo~W9A&NsturPj2z|+J$TH>#0 zsjItEqFU5gwoDK{?fB(qB;bX)6*-ZBC}&f1;TA(ak*tTzF|!qq`ON+K)Q$S7`nR~Vd#b-?!oWxzt(+mU)=q|&a&>gT?xT z5uAG``g-3}T_-ty`{@lLUXUCZ5Vg>_VaJ=eGc%kIy!UUX-b;r@XOT$IzW~`~&Xe!d zG08J}_%NHrUiupjqqsgjHYuJ!H@19?RB=x@g(du&!Uz+lUuzvmqLNLzqZ&QY?K57nwq%0U+3ACj}%Y{VIIU<0)Y zIOu@<7kiE2b=LK;nI0a$vpr}?wcoC*ynH}wechnGsFaY!weH1g_Sfd>e%z$%NA4Zc zK%N}ywC9yw-5Yei*?47OPBV;Oyd6UcW0RzUY)P$`lO)CDjHwGu*Q1A9RU%f6*tDYP zuG$<+Q_~H08rXWu*PYw<`Q#P?lkKoHlLONFk@|i9Xy? zNv_*^<(#-#4K2h`d_S=jH2`(TC*|ni;GkJ1y@gD025f65rbH)5vcJAJuqm?gCZYvL zB0hiSMPFiUR3rr}wxpqR)6Gd8O)PP7g4q4yK||(E&f0s5G-cVtfiwBR!W8fO8erIk z5VM-(n409&p7JL1-n888RPcx}2#7G4pqRMj7b1jL){SFxSB#}yYgcLYqVCCL&bzk9 z>zF1#be@23FBWku4TyQy=|N15Ol-Iw0wjy%l}rpKVYtC%Munf=<&1HJa(u#&@V-u| ztYqk!R7CdtwQkDKfcR088nPBfFk$Ab+I@0wz)i+wUYs0JALA1ns@0Qwdmra>B7NEY zDUhqLvU24Ci_Wkq#^%ny<##! zx|7uPy_GBDfz+mG=oH)Xw`ChVk%JQSZ^&^|P0bojCMqt0`WQ}|G`B)U4o-t#4DAkR zw^CX^oiyrI)T_|JugkCc>|DL?dV6s$p-8QT4|;fEM9uHlDBP$$(X(5(lWi^pPdjS- zuFVab%6VfV7vDVc4b_B~KYn5N}3e6X&?NZ}=_kS14)`7M%;twH0L$ zH9BC_cBfK^SNnxQQ)AmgbkJl+79W_2%WcOlC<1mChtF7^e;)4pl{l9#u||8H9&Q^I zO{|hooCz^GpP@epjYf9_=S^rr+G{CB;ajE|A0ucCi*O7Zoa0PSekrW9kG8nad^mZ*SjwaSof!Il1C(U(vM56f8iz%9EFT zq|N?A&iio>4-bIhY$RYdD=l!@NM%ViH>5^Ue5&U-$a9OyTmNY?7Yeh6^6`KAe0G~( z;l^DhE#o5Z$$9UMM@^cF7SbYS&uBcyj&>w!rvCj)@)~VM%|!kzVryQMHD@Tt%a8I! zS0ra&3|9&Kxx-UTFSk5JyYHA0Z>6K-n=cVEGc(m`8!!0x{!p$VNl!epAOdIpc09Wt zi(^KeEJ21YAC6Q)Gu5O;@E;KeDgxL^2S1JVgpdef+N_twj4<-1NG?(fs~Y%3D86kcNXQdvpo{mfW^eZ&dw5P7j2!HGB? zDv@R)KTl9@9irIo`_ztTmz#=ZZ|v-w>Of@wT9ywlT71CE#^SA^qK0N_u~Z*|1tkQj zk_c;Fpl6d}i4KQO*4zn~B*UBa2-z$W>>?Y-*WD@{ry-jm&qkZ+p~JcZ_R{0Gve7@o zHhBihatbTulS<6}WK6n=_Zm3fh&M}N?zE>9!c=cIf4R2q-Wgov;?BiFpnXxoj{F#HOM73uFj2R*+u}mTpR(x}JOw*xsPJ1AA4dt zW%JyYae26{0jlR4>iKJupMIe~o?UCVpg~YkwqUkSi=O4|`sN!8heg8lz`gzFGF$B7 zaQ4>gX8R@QgQQ(qD0;n+%Qa`zGbyH`(zw?}y@Ox+G+uuV4JivvCu9W4 zos2yLz1bA?j-_Z?Lk-UdNrRD1sexb zH`d%6?kCsy3lzv#keB;it=+T=C|EDl>XhxAawpeYAF#?tNN26t7XjSz-5b9M+Ml2S0D zlnLh~vbSy!j#m)wjb)tZ3-DHLYC8ruoN7k9RCBH@p=!IDpCsPR6O`mWOl{~5YWEv( zy8lW3?s@o_Ct`6dPX2|nY{lt~!mMj7a!=jMz05+n?Gh#YKA6jb_~OqtW>-kdog>4` zoDD@*-QQeH&fVr$(VpC2EoGZ#Ps2y(PUVMRmR+P@7PQ**f%k_}z8!=`Tq|wi?%Vgy zek?ssKwg{zm?8hlB!_-?Gsd*79D?h3|1N$wAj{a#y(|+`u z%(dSv%lrk*BkEc&Hgrhr&}w>_A6s(&u00OxUKB=0kMJC^>29tKeEUllsqFefnm#v8 zLy^fNU1^SQ2C`OXnAOwK;uTTymUl5~Oqe9Hv#We#%rjky9j+@XyE6+N2q)hDVJ6~S z|IWzZ$5F!{;T$zn@50%~0$2Fw^lci@YCC>MaPy@bsBP;Ibz1tn!ND%-A#D&ew8Pd* zzXU#!f2c23KkJ&hl)|~3p;5cym}v@~?K#><=8sJ$=NyLrDuRD?=ubI%?iN~WJySZA zE_hTkWAL6OF`j(v09T9|TFMuKZ|0R?UMknw^!p+zx74NV(Vie1 zbUe|vCLvcO6yNesczDUl-(}{W+uvi4EzqzM{<_+&;o@*I1|QvznOk)= z`pnBy%oF#6k0exY5HJ%ou*g-uXPmh-OcK7UcPYywAEzG<^>tE`= z%SSoQ?k^Vp`%d8@YWR|En(?GfSvOm|YU&m~k>f2Bn<`S0BttwlyL^isVN5_Q6S+pN=^3=UZTS_~bY;{TK_Sh07+I;$>$zI6_nUr%_+2C3424yC zD7)s&$UXmdH~*`tT4;b!$lBMSQH^INe2HwSUDvGrGRf2%R{vbI6J1Kz02LfVp{iPJ z!`MZ-9{#l}GbBtF8S0`!h*5++fH&`0(nn9oseP3`eDuN3;Nnvtw1&KL`DpKMXLZ&| z;gbI_eB7>VA(fS&r>Z2!=LU;`U2@X+F*1?4dVzM)U{&@lG+I*FjR^z050*6@?#^zk z%!X2!)MYzMn7f2Q<;d8oO2mn~Q|wis6d0-4 z-yaK!i@W3y@wf&BN44Ij^Kxa46D zshhTso4IHyXim!Rg&&?`Ei@SUi7i~|=DcRe*cm#I>ph-b&+RjG3OxIEpXA)Rr07^k zyuijoJ)ygEwvw`s)dOo+5b%3fzH!~Pcrtt;-MlQ>Tz%yv&%6bF(e^1>5!(s8jdgm2}KpgLDq73RVGm`VK11h&RD>bJO=2FwKk)$O-m8Mm zz;2(lPxLZX`o+x?Gvs; z+3I#oZ^ew&=Kt1iFa)ZoX?}WbQS1tf^Sf%ivRi5rp8Fc3L(L@QvDC2H7iDrs6wD2F z6e80NG&Zxb7%a7Zt;0jji<8@H*7Jo+_t@xMmh)b=*M)yL{Ua7=T5jcU1U63qaPF7X zRZFLqS*iP2dBl)6+(a*t4qbi2#?7TIkP3l~I%4L&^VEmR>?Fky`)dH%fK)jfxgJeh zF~`4jxI75&ej-u_4st+>PWU*R&G<+n<#Sq}ie&OY&5}==Q)6t!1ytr=*%vk=>VZNT zxwwugV8nUOZ+ffcnE`M-NMN&kdDZ%O4?IQ`gt;>~_$D zja3-p=WHlQNO)3J$S|NIBb-!JM#CAx?d|Q(+kI?LyH-%@*xKn_V88-k*vF_Q<-QBY7`y-EeT;JbJ4jEtz@1*Vm> z^nnq`xxfyjJgl=V_g5De7gtx9FJE${sj2N+Kd6 zEG(n+=SJWE{|E`V(f+x(yg#`kCvuQN_UNZ8#M@W1&&h*k{PQv2_5>h2S!MSlj zj8){nwq+M0ivp?ypOOTVa`EwXZ8^<-dj_?OC)}tu2G0#8(NyVF0*wp)rt+aTP{lgo zDR;!SuI;c7*bG3cFvQzRyHw_+C(Vkb42AlXFiA3)H8dhHpSB_qfecZ9v?2o6lRFnD zEFfp0RZ%`f`94g{F3Nmyf7cu}mRXs>?6v{;aAWqx3T~U{I{0g?Bp#3?YivvE`^vK+ z+Eo#kzLa;D5@U6M@w@jZ<6sB$uL9Ll$y;xkM2Z3j(P|s%hH}ePvM(@v=0#n0Stp3x z8h^38Deu=J27wOXxHvdCC{aWpq9{B%I=nxn<<01Y-qy7crv+adwSg)D_=4?5a;>mr zw*<`XQzte!;NUw@;ZDciu9SVjBrGS(2up&SiRGVVz~unvDBwh|j1*N{#$rExoPI6| zx_aS2p~rRGyNk@{$vus%rTKv$G^$x9U=w%zu@oE-7oSZ;m+n#bOTv@H+5qpQ^bZPz z+~90|Z2Ya5o;v;;0fN;}y9^*H`CJCZd57Od8;2}Yrnxu+Kg1MM<(~(z_?h;tE4@|a z1L=*4lHZ0E8o9@ttNcrQO7|qw__6!PU#<86)e;t%HX!@cECgBwqu$}gdG(0ot;NT` zeN!gpzi-Ppr9~I_ZmeO7sX&WVK=HV*kD-`Zug}`A?6;Ncnz}$TdZL+mg4s+Fdb;c| zt=y^1S8i1#@abs<(%U@9-QC^tvH>*d$mhrl^l%&^>EiC5u99>lPKVQ1H6kJU>I9od zQNng6Q_ORHdMG`f9LRC1===H_BRo8Kx?TtV4PV^26IjWxt4Bvqld1}&0?2p zwy#3kRY4)ZMhP*o_~ZdDX30%69DSh#xuxxg@q4T|zLvNj3B#n(_rmRDGJvGsOVH;^ z+|N(5T7Cob28@uTeUFpPo+WxxT&41c<4>uu!{rQ09)A5@n4q6&r0Kws1nil^hVM_u zWexB~z4OkYn^~X=kl<9igZhcNt#kzaUsXAF%dTcMXStOr-ut5Md=81v|2i@EiXY^k zhI=49HkMvF?rxcVCp)DRaE^dO(PoHNXVzCl+xbk~KSF89^!B-8UluKmy%GbNwHPov zh z{5!dYC;E8Q3ki}Sojdl4FAZV0Z4K8J^edisw7PMVYdqc*L?yyZp0B)YhhS8oZxGK? zxl{Est{9E)V41f?`Ot%Pri8eeF!j<7JvA~f^mZ|4fsk=A|E#j=bz-_@y{79rQ9^xv zKgAIo*1x{dugl0m0dyj>FGP>O>>o*tB$|XkMliin6a0&?p3*X zApew27cvR&LUB$85ug(MA+fP!Lv9g$6J%1)!L-k`%POiEiN}N!clqb&y*~URlo$S; zJNkS#v9Om#Q4x3HGph>&?~H4XRr|`r!efK+MeRl#*D4R?#rfTNzNF7qqL%!uaxLc} zy03nH4I1=E|B{2)g?7;7X*$(jA?mI-1CQlVONRyG3#jV0E{AH)=VWoPJ}m)UxvtIiDS) zE(beKhnYbWCg~nq|a~dwg7td(l(*2p* zYiJM&mBk?>L|)ySDtgM}WC%M~R#qNL|=4b!$)0^ z{*ruNDGVX$1KYRclD2zHByX8dQDLY!bdfEV#X>SmW9FVeinPoudPy#l=R$(tLrHJ0 z&Om=JyDMsN8+;r+Su%M9Rf#AWBRGL*;GF4feIxM1u|v;1x%0Te$41S|a!CT*9`HJq z)RMigoIrK9$B}HY|3|;M!oYiB^527%sNgTg@3uuIHG%IsB_jRpUq1*UhByY+D+M@b zKya|VD9cz?dhy)Pw%;ZyT`W3}RNQd;1NUHOb91rIapU@ABc7C$I&hJHW8~A!U3zPB zWS|Nn1JX>S3`gYs@-)4|vE0;!jr5$Z7A@{h*--J#8)T4pKFMTiK}D(PpRGiX3b}+t%HPoqmDRTi^8~ie;g@nv)b?gxB%1X)gke$qwV%?#)gdv7MSP&=3)g?gX|ZoP z1}b9G@V2>BoxiqiwUy+OM&(!L;Qw?=o_E4BFGUN{tsY{ZpPvk_)*$y#gyEKi_^)wZ zXlHK<{j_Cfu(BHysMRc~?Rgahsh3;OOLo%Jo8EI_J8+wk>gCJ*ShTUe{w*Lte?Hq| zJv1*buaTsGs)3xR`%SlUjvG~A%*iiBLmqJ54wNBy_sXpg$4j~Z{zt^L1O(uRFcEV9 z0rJnOv*O}-eOor30YbM0;@pAo9U#C!E_Z*C$FqF5=CqjOdB)b+3d4*FNDgMS*BcWhLxg(JyV_M3#n8 zV-TpbVB?L>Rswalh+VW2RqW}kP&U@=aPWgO0)c$!emu-9xXu-pWcx5Xc6W2eso$_^ z98%;eYL=?A?-y2uOF;?TJ^YPUz37;NksaJzTljQhQ40euNOh71(ha*K0zCzRP*Jq+ zf9qm;{l2~BgNc6ek1mw+o_piP5mC9cEZ-G{VcM?@f*$c&UTh)>=KTE-vK@zJGpc^&S)pcrgwbj*Z`VEtv7~ygqH%V{TzEsp)?EB6cu!Gpjlq+~XwbP=VZi^68s?)NALkcscC^3DW0Gg7H(1_37Yeo{CQFjQ zh;^alTvm5B{tdL-1TMaA3^6Q3@@|c@*udvvN~!3_4`C3}P(-M44-WZod3s# zCHL7kO)vEt(!#ow*RnLR?MCm4rlKMR?U%i;mfTz6OGgctS(NdhZj71Ru%`%&aO8s) zb77GIzEzg_K+s5559)`oJr=oL3nl|eyLw@7_qQ{jJ2xPUhZT^-FGR0-LCnPHL}0NBZo-!d1nsOu1+?9L%FIdE%^#utBuTJ zM5Y_ zvirPulBid;v9wNW9|i}ciR|;zGFH(%)?8K zNew_@@3nDhu5X!f7!rf%m_h!uom9Xg1zs$G`!fYWR4Td#YeL^je!tc|EYERkgrAT> zcb@1X#=%Wz$Sz-6*Oz@RE6=LQlCq8R{a*Y_e-`=)+DuELi~F_p^QkWXI7hRLvbU8 zQQbON%}LNK^i8SaRVp_SRaRkKWj}iDmJvQ)Y$ZdI0O;}7L@ZDRJL-lT6#Is6k0UCu za(syMUdihN83txheNvjy|JbdI`_*&Q9#V;8Ijt)M){bX`g!aBaw7vL|@?(!p?UDAM zPW(8lr+-1!c+XmfX;oIu5ID%C8bpAW`jY`RWBvIHFgJUe@q2HsM*H1um?6vc(mD4< zH(wNVXe6Qnw=Fm`$j2e5S$Ag7=_=^hK>&O(mDRE;q2ZCiv$o_y$vj0#T47qf0&0yhbvRmjof^Qu>0!3FLC`rzczX474<|IWx8bj zBONbNNavb^(0=d%BX!_x1g|90@hUB5Q$p&6^5s`sC0EbkqDt}+T~;iDfy+BRwuEK} z-H$OJ5R5{(%tJ$dZiinrp}-831zK4yN1+Ig&wUf=8$oXLVaT>$OSG>Cnmz2g5Qz_x zcEku%FKo7vK?LDJ;R*-#*exwg`JxjaHE5oO*7n#dsz4RejDciM1g`WUr^`E8e(e=oH#^ysYQAE*nNQ$qzTq604@D$q&)HZI z^_Y>IP2HP)AtoU?1;YE2r(#TGL1Nw)7!!JVI>4#s_R?MZ>g0;k@-F4nRJynBru^n) zb#>KDL7HKDb@fM|nTaI!TQ@df25DS6eGp@QD8zo-ce_w`8jZyRyQ#Q2X>0Q@QPkJm z6dHIl5jhdAjKszQS#}J=BK**t2;Yk|2&`2Y|`|#j##bQc}_l{RL!t zz3AC?7HH-dDnWOsxm)`J7GFm6{QzhD>29juIdjophZ1$4kD&JDuXBrfRV=8 zYB3y(3y#muP|?uPUcNM{G82${I8E}b+S9$B$*|KV-yHEgPk(KQdTs^pxIWoIh*BFu zJ#S97_LU=ZayLLSu3+W?zh67u4ccRUa*w5(%oIJz%lbB)>YqJ(W|K6iO6M$;v1;Tm z>fph;V(w?y_JU6Q`y*`8_m;9&!UoPGB;;Yz$v8aA`65DoV|A4ZY`u2Pw)JnXSL)^C zv(e2Rs72rF*RLUX#2~0-3@Opz@LQ3G^9={0U}7Gc6jX2{C1J~A+m9bV8Xv+e_yMLe zVEU=v`rnN?If3OU3J6jk32>^Kv!{=I}JB0U7pQyWdi!a>N02vhPcTJWF+u0A=N>49j0C+@8#S&T9V4K z(sIm&0bFfF8)f)I;5S+%>z&Kfz*Dy!`Oetq0~9wbkOH4p*Oylk@CE33+<#YM!wbQi zGy9ghhIWQ4V^P(2knfJ5z-Y;rdDjIZ(!7}y`T<1oBvTFXai?xT;NDzdV5{i5ph`CU z#x28EfQ)%oyY=voe9qV>miO%JbAKj*4-bvGUXTtf_(Pn)lxao(ZB|T63jC@YSqPzZ zImh(_?UR2TGl7%ISafS|e?Or7GL4&1%l?bx zAq6k!+*S0%fD=z%FnPc3Kmf_w$AJ#E8rA=poEc>?xeoOyBNa#JIXA?Ue;uR%7P|qZ zQyk_&n+QK_JZb^{0Xsge88Is)1&4Wee%f|u<3d9=Y7?>}eH$@mw%u0Qg9wgA<1$dy zbaxk!V>kh=y7ct~;()zw&8hfAglXZjV1sk%4^!P8x^ic|ie1 zCCmiiK7n=<)5Ox`v*_Ip7yHmtk0_nWpq7m-bxuWoApev3#0Nh&zwV@WpnzGl4U^LHqv(J7GF!k+RSFt5Ms&ZQuH(8+j_UfoBkZ zQhRY_NffM4h2ihIfcnJfc6EfMNLP0on*aVj-+zA~`CTk@lHBf%(?IX3u}bEw#28WL{e?KNe7y38*1gQ@wH_)XRsW-I$tJNqDj@E*KZe=t7Qaqx zT=RHJc5FFX7aSW+KBYap!Y_yAB{y``$nOo~fa)cz+lG1D$3$N;XFVRf|C&9k*i}hR z?Ofxs=xG>74B_T&`{Z6$_lqSaL6%}v7U8?1>PnJ+)+Pi=PsQmLf@^PSv}DTh7$*<( zHuIwoq5X7XKkmP?c*oNT(~5feRqmv11Zg^Qlh)jAq;1IHc4oACFPT|@e!uEyB7R*i z@ZRS*;k8NMX2W^pyA91~O%fzf@W{ol3!d9t8bH0vDq!;J|7PR_5muGR0Bjay zJ1xgU$2e2)XVe7J=v}hHmn7{8`VM3#MH|>KT`s}~(R6Yic;KTBdmglpz7!y!ONb@5 zH~f6R-ScV#ARW0P3qs=kP1i!k-Wgn4b6Z@%4z~*v%R053rNvV`Ej%+kY)0?4w^_W% z{>MFPA|Ps(q$}bS0W4Z|Y6XKeH30G0&~rPN)gs6)(oC!rAJF~!F~qi3%Pdmw=}$H_ z!Od!xuZ*nuC%Z{AuIS^3jP5^#;xdF)U9wyVLd&aED{}WcXv-#j@A~DJry%Y{eqMRj z=b2>HNhli|ACGMLM9_3B9_46&ANw&-4R>Izv|eCTB=%+< z)0va>IUocnDT#{{A9$C=0DDXqY`j-R?6=zp*|y?~BD{&6gZ23DW()Q>zCVB2@~7dS zMN&OI)!Q{+gXQ~sAR7P2j%I+!*)GZq`Q&N;6G|a+0U*|8Xw3qme<@puL@p#(ETZJZ zHjoU2R=8M2iXvGm9#yL6lQWbe9e%BmiD#N&=%JM|<0|L9=JugB-IA-`gOZV2`S z2{FwNN{)D*?Q0R#Pf@Zs3DWhHsIuObHy$<7xXYMiaG8ULbYN!Zx%0{9n833(-8cL0 z6?IqS*-Eo$5{+bhn>cg2vxdOVj-v01&bMI3opQ{h$?L$ymZF)+`+(BqL(fn^%X0bI z36g;Z$v#L^u`$d2KKlFhFy}M2q{(k_Liy0*^v?55g}I#oPjzL0ZjwW1@{8m0`q`lC zDNt+s9aCOam7P?m$v@ebcu4$)@w_>2pg8^7vY}__6g7f1p=`VfP zub~X?T2ja27|{u~uO%ht7UL+x&ro!xTUx5`T^UJz4XgL#^}(CyGak_i-g*x&%GWJJ zNF^RZp=kmW^#MGoJbDkJLxxdzmR*#!_)YG8&A7>r_t^)VT1U4RjHP`xD^ju+-Pt6M zPQ}unJs$I0KmV<&E_xj8d7L})gNIGlxbW7cEHU$Ar zia(oH}Y8l4w<{nzT!uV>T^*GF~H+DS(mIFEVKwAY62rhtH{j^H(w1mYG+q> zXjoADc;mvoeiljoHcWeeJnLl8+w^iQ+V}K$XddW)i!m`VAb(OWKZBPu8(XZFu$8|m zgE92-4)sl&3UNQJCq2{NTt>!7zvJgKx9Mop<25Ow2{8m$3}@T{AZA010{%({z;- z3uk>dt-kz^dHbiPKTs42(D{V{B8^9m;TW_r8}r4!mB-eaXHH0)pXP)2!FDp&CY7Tl<IatbnBCAo+fH%Xg8eLnPAZibiN~vCiEX&z^h19p*O8tKVAc?dc4?6r|L6H+a zo0RINIZuRdciSi-`eJsX@~{UskGQZ?W3RXZ>eZ|mPuky2-zH1$0^rIkxV;k{aMxDP z`_A6{qK_UGpl&Be`MUkcnS?va++bwy+{YY@%4*|QyW=g%k9Sq`L#-YoJjOP4U$C)W zyfFCz+mI~!>TqO$V*jD=%|p21oqRbQzS3m5TBy5JW8zH1{!99$G!J;;O7$!JWc5d)>iG zdll_{XDNJ?cVxK}j<~}9`#cEhQWXfUtDasXA1RF+iCbXs&UK=)~@#NS~;dbx&hB3k1 z$7Ur9oc@%5p;(h_&HrB6D)bZ2lK`ManjcmF9frm0r<|?t!{}(t*r)TervgOj`{PCu z5()BZq&ECP083fvZ*PAcYz!cd=LiTps%|#_;@^oN%8Jc%AmgC&D~LJ8|20H+G8n6T2r!say{D=w51i`4|*IkD=XOy z|HY{CTb9Z{LDz72)dfD}#Q=RW$@#^`H4m8sQ5$F5Ai9}%UCVS(7m?kMId}igwObGX z3TUy&RG3fc9K7MP_OE86rS@kK0VMNuQz8aOW@eI?Oj=_pNk~krW5qAGui@q0{SstR zoXKlQ&mNA~9AagH~bJwd?kkJI|iqtjoS6mPnRgg%cHbZxNIM?fg3WETt1#8^gT}o*y zUErdqq)Vj?kZ>y)uKX2rKzb8<)D96sOOiIl*jbTIDfiSSLwX_u{sE*qzFW2P$GCd7Ke787_&yV z3RAA2ZQVWa@4_DW>m!WikSvB?tMYI-Q zJNq+>C$8v|YxTaq&TQks4HQg^_#e243e|h~>Tj^d~5^&g^Vr{6Y z&e*q`D=(iRv|&8~oe5(G7mOW0wCz?uD@cu5_pKL6&yQ03j@`UK60eB`+c>e>@XH3# zbeeb%soM82e4m}YUI!4!{(XT3E}8<0z~PRy(=X_`?!R-qJo#k9e7gI{?^G;YIo9>! z2F`zfM1^cLQ-&3I<2`MCYkd_{5^ebp;r!{5II;%RkrPcX0~J2dq$VJKCk8&Z-J0Xy zO%%3C&WpR6rxzace_d1i0?@;EB0R%s)XM~^(*F0r_Z|S0#)gjGS~D4saLqNgHS0l33uj(v_=rC?wOqzmnWmr^|<`)}U}p&J3*Y*K``DUa(^R$5vB z1fVm4lQxFw#&i%sXGmD8|GhAGKtc>oOKX}gBNUB*6ZFLKFgMWkQL+u(}O!rf@1#sI_t^Ju7-dP*5Bvt@n{@F4CZ4I5+; zz|kHSF2R!fo>P(AyW{IpraVyfs$CV+UhqkviRVxcTsQeJuHPG)j|YS?l`?hVvg%d4 zQ#d>preH$PUnc^IUvyJwMAY81yvhvp=(RE0FD_H(b3<Oc_2|dD+|C}-OzuC15iAod7~S6ltVN!Wr|)W z4jj@i<|Ft|YZ#Y~Lt5<&^>kR#3iSr6R5!FA)hs2eCwd{YOwRhxtD=o4AquI4hK1Jb zuKNWGgtf1i|0IRa#k#`xIp5Zf5CoJCI_WJ0i#uswY9w_-E6N5SIa}tCB$SD;sXxOe znEkp7bQ-?y^*I!-+$D~?*20X?^ zVfl+?A>*FLFECSpuMlM$jo68pn}A0`>ta7G~C>+cUn z^>G)br1Tz)#rw&)_E!M5edjHFW65AiiL6*@VDT zn8ZB&=G+O={pDTwUU78Ses2uW>_FaCm_ZG%4_2Ktj{y5oxX8vdi>)CUH)VwP*;C;& zP#Nj|fYRkk(cV$^f^pSTo@z#{4|Z{YS6u zJ)+={tMEu!O_$<&ddX>@chULtC$^c@w^q`J3`((mD&6?rqUe^S3v7=T=QUO&U%%oG z0m})H^fzu+6Y!O>;`Ce^e!juu@r+#-XxR^#XdT-0^5&p(wcLP;Ql<@aMyn*vek-K! z?jAntvS}~nFI!gxJo=kn&*zmNDp2LrbVUFc-@FpejQP=0%$(Vdpm<0V)(8Sp_3D19 zOGTyf3~mi7#WlmeKe!6`lEhsg^upm!04_s<;4PHaF##NFR6t)}yJm)k z_Z6F1M|H+&$W9Z9{aZf8$maM8!pajY31*Acv+%+H<~`tQ|CH&cJ>ZqjnC5*_Rh&GV zhsm*k)dkbD$AkgOL^-X7Sso%&O@HV|{ZzO5%?JRGc~G1BTOti#R;$qqkm*7y{b3Kz z|G5B|$+>{A(F(xDY7)!QBz=2&PEiyZK3g#3p*TqR2->{E3Gva~ks-bCQ$ z^%_Xb8<$yfUF_AuJa-lA?H(t>hs2|KPkf+awIMGcrDR`T|dW`*}7+%LGY zYL85^*DQ9QXiCvk;kwJEHnilC>T-8^ff-Cl$*6*7dGKLxiJ=Lw!)y$-Nr#(G7PmtH z=c;JJ_vfK=DcbHt1*fg6?qNGG(tt9l1cmgA1@Q#15dJ<#1dje+hoST&Sx+|O(z(wi z^s~B=sN_geK%%LqJ@zKR?`emVWpjET z;TVayzhhv9d2LD^KpFj54c+pDeBAFH%yE0B$88suiDs(}r;bmK3|29P7$)+Zk+amsTFGukzDwG%dK}?!eHJr=Q~^zFVFT>gPa7RtAcJFZy?EKj>c|N17Kc+d>d6Da zuX;XAc*=j0u2yAo7kK4OYz;~K+06Z6U$&{TT8OV0;U8hTb#d}#zX-l^)Ia=H<~X#& zG%Kk>W5BYZm7}$)zQ0Gwj9IGuYP#HduISXfz%0`YX#@IOmT2VeEoO$jUE6J zMyYrX@A~-4@S=(y_3=C3avIwA)l7l4cd>Zb!|oT)kuJt`H*yefFy#UV!?Dc8>O02O zwfx?+^5w5qY&FGrV*jGN-&{+txv;#&sE(H~K?Kh3)u&!&fL#Bgr@?MgD zZ7DLmp!H{*y{!wGQfU2fJcv8saps{+IpmGj&_jSQJl#50&-R!KO%4tUWK+63i5`!j zoX$SU7`)_f(JD!9I_>}Xx(mRJArxwkDpXG&Pfej#j#zc_?2D$8nfb#TL4iqKf%ri= ztg86z#}ioz8cd@melpUgMIP6mM%-?D9g)AwmHWNQx6Sg=b|SbwK_< zY%_biW!d}fMrwtf7VBi_1NIL84qB$|#a*IW9-Z{PpwCr3@6veUK>J%J4`(k~pS8Rx z82KJk1_tK9nh*P<^=LM)38G)@gk#I8x8u);MW{CQYNJ{t7;3ecXaV2Gn_zyHGdx}{l0zc818SWHoFDsCP9q;!Du<+Q~#(>Zg|qLVZfA$Q7@ z`e{W@SM37^w4S|#s@MMG@s`P@pq`)PNIg9u&MpZ}m*d)$EqJzTIK69~cBAkBR^PC@ z(o%*NnPsV^U5q;2oF1)xi}f%^9OAg%ytvq&mS_;q_1+ErR*rSXi=e|5o1zMHY%Iue^%lDGzf32H-qB*55f z^nVHBYS#!SBdB2`iX^5y=<9x>t8`topd_a;<{v0gO!t?wX@#w)^k8h9DSnl_|5NZp?-Gun$ z_hTV4u`)rL4sqq}r4i)kmwZj9$71;aiK4E;R?}5qTcqi=x2upOxyT|MCa<2(Pyx*0 z#-$QxfC0^|&Bmd?#YGn}@xVW9Ifx$G0MwIor>;9|O#a2j9$Onz|8Vrv(l%fRvAqV| zR~vdP)mUwLhgs_s8PUuaP%beSHxYcSO+l}W`^d_W9cm9yXOp4vxDzbhMl@yudr7qh z_BBI|mYNrHh$fymlC)~w_>Xnr)UQNtYLFNDiq010)U&>mfhJNK8Vhtv`&NUz-94D_ z)pELk!}!%O$!)1?f#3aYNUU0Z$?9_(1K;gt%<}?AZ--Xmvv-}=Wz2G~ zDyaR}It7kZx5p$dsp+?PkAp+xtA#4>+X8BTWMfp4!qBf64SbzZ`|>^z2)G4 z*qf=j+gJDqh&f1{yKAzC@LbNKVd7HabIO*5)obxx0AP9Cla?`$T%BL&!^Z!g^4>bC zt)P1sPF;ZFt_|+))|TK}w0M!?QrrR*DTLxsTvCdAarfZX6!+o|#U1Vm@B3Td_wQZz z{&%z5l@`vKnR8}l?`J<-hSADp9wG6(jDx`~GE+SOi%TDsFjO6d-)pHqr!Ozb8SguZ z(jjgxF7jGzXRgnEq&nFtJ1Kn|Ej!|CesRv|godHms+cE@3DgD&hrZt$C@)I;;Lj%q z;(#}^=(H}ZrpfZ4RX4eHzoAPR?;q&%I>xA2gM&+Z!QG^I)WP(yh{Dvj=9**ZqMIt; z%`pUWYrn#H1X}o{tU=*EeKu!niCKKr+{nD!>PPuf#JmS&zg!r+$}DVfbsO|Od`4_1 zW#4^YzJ%&-f|glqp@nug!zIP^)7s6eK-pSoPN130op=STB*5>dIm0W`&5tQ;tP56vvAUomu_cVVjMKXzaeo=Li7^Lh5L;oU^;r9J;Ws!-CKEwp4fGnL@Q|&;y0@ z?N5}pk(iGjUw+goaCrER_I^|=c0>~2X1%R{orIRo&IpnL5jGqFoB{=plH(i7ZLn;u)1o-+J<|G#`71thY`|g}Zd9<5F z&-CG*)nEah+G zTFO=`Pmo*fnV)byl!sMh^QE{{QT}v(YI?q>=8cNk$%;EUsLPx}>Dbro$W!iH3R`nk zTk(ladc=YL=+!gOGa@c8ZtkWW6%D40s+T>GpZ@Y(o$uQo0p_H(iA?l9#^FWRwIEx# z{>=?rY?o7je>ZmUqD))YP?4Oe`9!OrpB=k$j~F^ {pmAZUz#bR@H`?wlgrgU^g z@)63*?rdgx_!DW6u7dCJajw^vRuRO-#4Csd*bP!Q{s$<&K;RXNa6C`ltJT>hyw`t# z&=i7#m#46V|_&oA#s6PbV;vA@(jnpH@y^vFh7LtiM0dXnJ$3BubzuTdQ_dy0`U{MH{CR1f zdV;jOhaxTDx>uwCbzoQ13Mo7B{L!>Pj$iDgSas0xo#O^`m-GCW5L5`_)GMLaL42+g zyOGFwz-@A6>E(LmKYqu(-|n`4(~&?df+B&r&4q-8gDHWSkC;{_0plh+*36hR#A>l# z&6=}0|Cj0-d6n}={R4K+^M1}(pz)#SKqAt85KU!E6X{p>58QK!lz2;7(3b8txEqK zDQ`*?-_mdf7^I?^r)!6A9~)$rm2|tzKGVs^2v8n zG(ER?;K}&kz!ztQtB~a5l~iFKrhBPDoLRNTw$ZEP_%O?|~ zmCQ&n5@O;PKWb2)GuKCrc{PK_By298JAdY;@akZSS;8l$mL>tWOUXS(hbH@wbxR%+ zMcQiZ@i5(^rT5`!w4L_l1K0BpkdgSV=~mJ+AsxiMJi$PCAHb+EG#V{gCT8%uA`To2TU7@@VVDZ`vzn4dHCEy(FB zA9c|6a8>klME|m}5|$IwG=35^Gtbs0gd}HJuTs|oQr$ZCMA^2PkAR#vwOIWjDR;?i zt4HrHqH|fFPy|tX?O4xvP^(w&ErlGarDc9Mz2ECmAv|lk!BFA$#`TOJzp(h^s|Uan z=ros4h9CU{ax>>nxkW_unBrb>hcyuhzRrN2&-g*s^8q@tY)*+rcnnR-Y^3MTh;(vnW?&9l3Z0f#kz2VzWqnbs5RuEzi4OIHw0CVUhqCx;1{?l7}A#$jTt zl4KAJ`3m~!`wu*6=M|+<>$zfbM5Fr$(_a49ylf!7+^z`pAj0(YKZ_?7NL?0Pp4=Uw zfX`ViC-r+v#d=7dPrTG}O4@6w)q@if6W1AceiO#c;dVvxD-NNjTJZvLUIFCe*$dC# zNo+1ZL@k27YKM8Dl{Su}(vfTV6nBtMrT>eTZs_$+RZovhCUSCauIXc&{}VKVS)_n@ z2#|jzZDt81RHBBEq_Eu5Fh3EHsGlFUy9l^v9sv0^nGFrXe0;8`+;gh>slcX9*~x-)oV#%pcW68;LAke{bbelEH=#;OT zknrcA|FYbzImdlI0RquErZ1csKir3Wx$oPrOFUGeXVlH4^?F6ZiRCQdamRyTBO>q8 z&CtTN-dEwM`Ba-o)T*R1CE0gzbhOu2vD zM5-qNjtU^Gj*1y`4JLsudIWy6a3%FB03o3dI=*!HePT=U3-R+vB`yc(L9?bdV>1mW zzrPWZTXXoJun$~gB?@StX?WpLYlJaLygKc%6>09S-NATG^I|W@8E$jA^ zP9{IIZZI(l5KS!CoDr~*&!6G^F+-S;`-jnKuB&VxKVkh;w$%V*$p;erOO#^zRA)9A zrMz=qp{y4(E|VU_FO42R@AmSTl3cMkTI+{1@G=hEya?dZ%1M|gQ|s4=5;XN0!-%p@ z(T(UWV`eRxtZtgo?9@#=iT*G%`_r~$#^Ws?v@fqPxcv`CXJ@tDJqxwY>GG-CV{aNP zHWQ->SDpE3YlozG7oYpkxT+C{y`22K;m@R=rdGV>K+Qk`iYw49w^c5yBS$VW)<^(s zt#hU$l!yCORnOngzb}SO*6%!K1uT5z&F@whYO}r&Lhl$% zSVIn@M*dULhj#`Sh! z4e4ewczf&W8jw&aR@OGoqV`K|`jk_5+sgDMtMD*6U0hJxkAkA;Pu5cdVw$NLB^4CY zN;C=btmLM`l1rE4{;*-@-Q_PpYij4wY~tf;b5%3gMrpyP?iOt~P_liFH*cnZvreNJ z@8=&QDd{!0z?V(8aO49$BDxwUg*2eRO!}YSNY*eM zjJqr##P98Vk6q}BopLa$!b|JFIs-)HXK&5dxJ)*fI2WQ=?ulsT2S4NA3{!MEq<($> z6QFe5WuiqX9Rek~3CMKe4X>Mte*QGUSC#t?yiEmdAd5fA2JkGVq?ttzzWUU&_`1LO zX#ehFeu_|!-yz^Xfa zCt9&wPtaOJkQErrVsf-x<2-W}T;jzU^H)~THCs^sw`L9(6)=+OiD%oW5+O9D^wNb3 zzjpGNXLQoa#+{lcv+XN~MoE;&?a7P;fOMefcV-Q8%2O{`MhEz){FO^`#e}aEf6Ap9RQbiQy-F zBK6nVU!7XsPo;WW=dt(fQ`iSB$ud=*CA=H~>NZ76N_I23gMhX8q{efVZ+NQV*lU$D>)XFuK^ZVlK&-5aV$ z05a9&mG>xFrdp2b5TeMWKpp@)Kv+G@R1x^{y*7;>8SGOyGwXiYcc3 zN*Ui0EPnn);9+qjn`ywh&^EsG*_NzdT`dowb91x~JO}^t84F$?NZP+h-%s*LUmHvq zzDVzq5_yhBp=V@dbmn;eQ#4_p=t)FoPw;9P_o`%77iSwi1^mPsoJ_=1)#;uF^Z&G5 z9)H3sEX+U>I-+HG+51Bbia@LK`Z=$9iMRa#1d@6(0PcW&sw^LK>i&%2G;ZUvnz z%dT`vdu3ka$okhr7$6V`ol*=>N1?Z_PJwtyZ67{b!*3?Ca+L?#*(>|~5cqv7X0ze} z#hqoX@@}2)U3=~+@G}rdVrW=$L5LWi-`Qu(_~3jGJ|kn_82lFK7-*5)7kqeEt=5Ne zdB$D5a1mLWe%+z5ek+ITZA%Mg%D>I28gcS`in`Rj^#aO1mtf|3#@56UK~S1}J#U&{ ze;nkxH+lSI8J2f0CEY(3Pni2meB9No6CwT7s1iiMu{NWh#X;sk#y=_n0)2UpScmDE z=SY7##(WK->HSb}KH?EjQo`xoR_iP3b(L%Kq=P!6rB)G{7Qei1j~Mo@O%Ow`56jw7 zi_ntil6QLgNq@XvubHY*z2d2LbHp2Cmc0vHDVm671Z?LL7Xw z9jaKX;$o)%2MWg7t0wey35CTo=DHtzVN#RRD)D!w!bZ|nc(B@6TLi|2pJ+@nw zbD)1W($fX|piSKEfD;0Nsw}BQJ_jb13r_6_<-o5&o|@@k$-w8h+&<5;FPUS%pSO?P zJ2#@izS%jESPDu2FU2q`=~1gbId)zM zD9dwyDvr0m6p3Su+Egs+9TdUQa@oKz-(~u+dHgZGZXp7-QXL9{pE-T!4H2`+91hP) z#Ztd0^i3rpc>@vlAtDxcdx?$2q+VWEdI2Zf()WEj*C5$DoQsP+W)U0Fm9WM8@@KuC zfxazlmMH1W0;<{KlO9}L`65nabe+4^4zp6W}H ztZtr&LEPMbgj`G-x9MkO0%u`F_lGRkZ?OSu=V^#|WOE8rCM#}g>5lTjpyL49nSuXK z0a&-w92dLObnAH2Xr-smvuwWI#Y)g@M)NAme&uq2R<_&fPp&>AgIurMivHKF3)5SO zzNhJ9?Du_A%G`*Tt2RPDoo}KU)`?EZ)Oz?rJB_)LQm;<5g^4(a-hcLc&Z{73-IumN z2d`3_UB0gGbVP%8fgtHBbp>r&cWufw2M!_eHNF? zNL9pGI#?X3cU8uStoyK#S(XAD%swENz1}M+KqqP@GT}=ZG%h0v*T=4_D%N0mkMD$k zIKuI%h6$t$2sQqHXxlFKN^0Az!BH@h5 zgW7L%`(wqjkyKpY8Dn;89ixE0WUF=_gpN-DWHq(|kk#igwJ3H>JTUnw20F z0)9;#a^~2^(dnQ!L7v3dW>qD$P@c#-4k{cpqwbEO1J*+T0A5a9zq**v- z%-e7s_XURdq!1PU0Q6VvF9|8>jaco{yCbz0(Ou}py01PSxA~tpVFhRucbt8_v*v-F zOr|M=#Ud@Z ziboq?H)jt|W0R1O02P$X6n+6kUF5PeFPOW2+5^wuH>|zFJean*KcS&#;W~FQYOmZq zkd)=kX55wKBNz2x@2e9y+R5Xi%oh99-ySRX3` z>oLO>;p;Hv0z^5}9U7}oyg)F{v(Gf3GYDP6lc!G~1Am`9>0jl_SGU5hjbYCw!=@&| zr7}W1%yw>wbwDt_3#1J68ZzLhMCiQCSEq}XNu>Hvq`$hB=`lnEL}GG_Qy+%Oww;+5 z2pCrwI8iD+>VN}>7WA0{RchE0dRHAoAmH`dl=vSGZ82qUQ(LjIlLWc6Lts-h1WD+T zyA+OGT=7%L+X0%5|3tFRChxF*)EFH3Ze zwIQV6b98OlPm`2<$X4CNiXijsaPX&ku9~k72s?onVAP|&xL$uI^?c}7-FPVOO=_!v z6po)mm~86IXz|?5(dv9$A&yqb^i^kq*Zmh2d{Cv@c9s1V$b?I%kx7&dk{kpqO!?}ZP|N`;qJp14jfqwqBmHujuQqSiQ< z{VK$;L7V5uXkl2?MpUezgaFV)ukdtQWz29BTLlVRZ5~cN#;JMIbwLq5yq;g07uv@s zx;Dw_F-GSlCI(Nab^LnHe%E+2r~9miZco(BwY1jPS{n^Jt>5rsXFFH9<#zTPqG^2t zYOr+rsAgwycy-3BN7ze@-CFvDsRo8fVfJX?kmW}A-j^mH>n4vxW=v1d< zF;7{Md;#=z+G8Sfr>Rr?i*@oe=kV^{CO>arAL1@#@mV`hIYLW(a`iGo29PMJquTEzx+Rwv26=d00X0Cpi_LcJDk;wc*iECEh%=!_;QZWt@QlIHnu zwFt{(|R`c{m4@rP4sl6 zLy|ajL)z(v5HN2g0JMX>~>72ckQm7S4AzZ?IQ8=|Uw`IQ=>DgmrF8*7k zi#dWrXg?qQ@|at??;1%_w&s4glpP6ghGy3I4Ez2Q%7-Ug@4wy+ce%kZMKUW3=q(%<_r5gEPAn!A>}DbOAnZtxK5_Ox zu>k)NW8$~S;M}3Joi6=;KXGW~UUwlP(s@3HGOZaJV6l|B=zO7b)@uf!x+~18`?;%_ zMtGgTU@|}c9=uE`WBt67HMQV*JX`1V`t|Dvj&)kzywEuXC($g^i4BnpWD*=+`*vmC z2GvqsX^FYWmXXgi^Wdi$xcA&G*12Tq@zm&uz}(BP^x{Gl`$jmTA|p;%Zp^=Y+}D22 zi!r-V7HGLDCW(txB&`j}d-+V^E=a~fPC`>d7uPk_CEh9E!G z_2gWHzGT|_Bds-C@AW}*FJ)26;uRKvx1Tpg-KAeca%Co?$We=n<^pxVaEhxceXZH+4>eb zKNaAult__&aV|}dm{}g$^WJ=fDLr2co#ynOIh@MP6|MYSpWxu5V%oA*;bnOFSK2}J zWhlL5H{0dkPu*!y)@Qf>koB}qSKH3OA~{yQRDkd}bY&h7R?Qf^!UDi_D^LSciYr#} z*NY+i=p-JCok_+;w-SD+-eH?V2m~t-RHv7ZewI@x%j`y;-s~oMD0hX6q#Qn9F2oI? zvlBX&GFWnAHlPRV9QR$7UN)o8HddaE>B4oRWgwMGM_u)pN?6e!MjPI-NV;E!iz@p% zw|Ds24^+ZEk@dOcv{ryHmC(`?w;fezpC7CE;p>!n3*)^$lcd!_XJ3TYgL{0;2y)R3E z)(`eX2Q|gi-K7O^npI2{XizrIaGcufNo|UwsUvokN1aJOd)c!^sM!4G;02z2UEj+_^{VrH%Dl z544Bc4Em$T_ly30!G7$=2?Tiq0iRx8Ue?yk04{}YSEOkJ`vdrxbUl{OR!vgqa>zWJ z@`|Mk#yA0HL5l0%oGe#uXL*5*o%u!(Eow4;IOcTM897u z*=5@mri>V1uMt)4F@k;V;tAZIrdG)iBhO5$t4vrz9~C{~<@(}<$B+r{eq6sFE3`mE z;@k3UG}P&Wxj`-*?z8-BKbr(VXdJ(;BYU#b4)3fmjZZr(^SYRXoun_>Gw3vaxfKpP z1Yu(j$}nun3$!>uo#1HTM+Uq zCmqLItjBLZlF^5)dDR86a}uNZx57g1f;=I>AW1HWqf1F`{gHBr)H~|#u)`Cj7vTw~ z6AxNJpVK~7b~9ehQqxfdGrz@3T((9)P|yJ%Ks1lbr@{y#sOcu}X!@`@>98DdW%eA^ z@LIjgX|@w2L?09B!TLd<&kN_;p^Y?wk7K9CEpZg+QjixTHrym8U8ghVY4KXy$$G9l zo1?@+0lpG`@6mm~Qri9l6nyK=qB$fTpGDC_#>%O`n@%^^()&Yejl{2UE_62YXin)o zJ_`NR1%a1?4}gkS7nJ6N%H$JNJ;w``&P0O<27xzy!->bE16bfigQunp@9B3-sK9c) z6ZR4RYIE5V*q;xhFQn;L(p2zByRarGGt+>-O=%WrXVxZEbOhwgP$N>6C(zLMp4-?b z^sHPO-u?lw`Jh>y9#E#>(Zh#8L4b1$(X6~hnIiFOonp;GjcYSv6Pyql1_q03pwv`X zI4(S61NsFpdI^E0N9PN66khi6;LjUp!64>eQ!dP%Sm4Epc7*;`-c}suuc&H^SInRj z4_3=m6e2M!m|zgu&F^0wqdmpaD{C;yG=M7skC6Mm*?@9!o!F>$k&Ff>~6-!)zF5mqY5nTQG2Pr_b#!8n8>f#H3gF{H{ElS|!nzd#25@`}i!6 zYu|t`k0Y|@Y>XhjcB|7xhgx*!C!py3Mb2E35^O z%MDHBhQ6+~z%^X4`9(APW)HV3dNcdQ7L8a+ylMPe9@ckhK6AbpxopQe5e|;uW)(oa zHQ)p=I;NFe>{j5Yx30v*$N+zTAZw!Y@}&X|u#`R?v4R(V{R*gISwW`^OXEwjS9(G7 zb2xcg?`+?C1xMmjM*5uuA1hQ=vcm;z9=CZC^leIca>UlO9(eP-I${!9$++@(vH2r; zvs>>slfB%&@siw-aDC5!lJv z#RMS#VJKuJg90$w!c3bbS1|2$9#`C8P7T3xG01l{-*V{coh=yceB>@p*(vjtw0Wm+ z+E9OTD!U-G3!I?R=v+g0`VCFP<{@oUPUwlTClNkjW?)61KMWy`&@CSS@&$CDd{i?fP zM|b8!4qQdc2$KFeheS&bv>DUI3sF%5uiCqnmygeLLFg1h-Hpu&jv&hPsZnN2<8qe> zMpCh`3@rPslj{TT$?28|+au6{m5s2Y>;o+9J37jk3)WuQmMZ+nhZ{}wMbg{ekY6YF z>7p!{gCR93Bq~grXX4V)f%F0pkWW)EFI=pmShygnb2gRAcxPu$Qym#S-5fHXb>|rZ z_W{YfN4oHm6|`3||B|)QVaB4c&h9wp)5_?N7jIQtfIL|ch#K9@!wBKIoMp6*Oqs8o zjsB-H?s!)r0Q@S9MH>LP%Bdyq&o#! z$j!z&A490IqZhe4yT%Q1sMqMP)Zz!}3kJ2lk9!}D#c7Pi?f;fCpPY01Uag^}nZF(j zwtKRxGskV5K6}Eqn^#a$G@YQ@d~{~){f}62X)#a&xI<&?$@gjB)iQZ6uZ$jI#bY#e z6%BoD4Q~c(0vF1#l*1zEG+l&Vopn`CJf8JJ5t~f*WD#|o#@0ni0^j$}*TCF90$~$N zaY!jxR3OLc*qj%dbziuD(CPqV~eXC-(W4O+W zm*KP?>WviV#v)cC%c0kbs`cJ%4+?x@`g@fyCufR2h>%5@vBgruHrz5Pzuna1OrWMbTasb=0OG|XVo3%r{7vTp6KR=d{} z0S@>najQfgTc?vZ(hUn;{QAUR<+q;V05=RGA^?^Y#3U@SwV!oe*w$PzH8G4B7jeTj zGk@&jIAK-xjVf+FpCHzu$kB7+3TWM+*7S4ESQjqkuy(Vn!^4mnp8k1f!-C9TudAYV zoCfAtRc3ONL|IKa_3K9K^w0g92BV?@?iF7rc!E!{n2!8S1ABASpJgz%C zu}7{=Y^x_)A!IHc6YO!r+9gy!pY*F42&guMeeWOtgQvPD4E)nVvcSLR4PMIFjaZ9; z)9%BQj3QQHaqc3G3yv%wvlzlW=E6~DDcq*)^WP~B5c=&>+zY7ikNfehd+x#E?={k1 zYjT_s0WzeO!(ZE!sP3^}(Rlr<*SXs7Gz)u;t@&njSp3h2EvjS24wV1Vf!%UHq+&I& zk8zq{&qWyXCBLBp`NuPb*54h@$wzhZ4XT6jWm*uoY#A2*> zsyMJ#r}cM+|8xW5TXObW_E&a+eG-Usz5!~Q=oCejB#g;P znE-;*gshu5Z0BQxcM7LeYJW9vEBrRMXpG{=@z{GL1oC|;ulZN-M8^x^94zcX!yJ|c zY4M~bft56QWMQUj2!?1;smLAtyY5fI>DV%pzNw?pU++%L-g>JqwWp1GgPH^~LwtUV%x zP;X=53j1L4DQ4rvTM1DBu7ZesIGg}%4R~z2?%sv=YxdHn(0n&p!2E@=lL$)P11huv zziSouA<$`@A~>H=s;d>%U}_W@=P``<0VoPUcKeBcCHT7g;8|D%K8Q%aM$X4YxOHWn z8hY=Hp;Yt0&{o4km&g1r4)Tw)v&cg;2O2^yR_2 zazD2c1v~#ln#5G0w!c^70mv0e zdw>7y_2FI51I#C^z5+C@W>u~vwrO30ugk;im1%wsE?}mMY05!jyJbd0yN~DJrfIr} z7@)NG-upbh(8%3_kwYu}koa{Emk>V~I<3{bQn9ro*^u>is`u*QG)Z~QKyhJzRSkh# z{Ylie2%u#^pdVVmqf+wq9Zf%+mU!orATVde^|j}dZ*7NxUDaTN<#m6X?y!{7hqKAr z@;mDp&muvdFS??_zaD%9Z6#ehq?*Li0AP_)DJ)`G8bal;q+K|gd!`Zo zKGBs$xpaYrPjlOuWX#3(5As~K>FLo3s_VbB3ue)nE;6@A1QS-3&*_fnS#yHBA4kN= zE7uS`iM=R-;0U?t^(GX@cFEj1HlIXFciK@;;Inr7ss)xJWBSr<`jQHKkq!w201NlMLV)`_wuEXpAKLelN?RLvdgvx&ZAhzT0OH(@@Np{Wa55y^#yBm8 zIX4-U4lAF|ve7}UCPFP2IWe@*(@9S`SVe+h3<}x3nLIVmU!gksO-KnoY%|-QbM+Fd zb|E3%clDW{_1N(&EFNJHa6HPA&MJj($d%zQd=PQQyMP?#FRv=jr&j!2^qdH_#=u|X zZY)mRup&z;nbJl+$F8TZy#bQR%vBME57;k-0`5F<@$8Mnqc7jxJ;T?PvEM7?DB-?^@ap)) z)}EJ}V50hZ1F!Asl44I0b6HB+CMSqkCZdj@?n><5HDrCROEBL3%|4)0<)@O>By2r0 zjKj#NiOm}|Mh+QhqU5cp_->(amrshMGKD|%UTAQrKw&*5t2hWlRO3VkP=-oS?cH9} z@1>Nrp+eR)$gyID!(|o~_;TaOdV$9c2dSUAIyI_oXHMRF(FH8z5c$dA^m#~J}32NZpsD`l5s?JW@0`0t`e0L4{ z4CQK8&6_WRIu+Moz62hT$O6^_x=CrVk+@haS(h>>7MER>Ru*`ex9I4-^R4z7-SF5N zOW3sR3&xVGAqyN#da?olDG8O|yxWpVY(lXb3MkgJ>AS$p38lC>j<~sMO`5Tvqc{Ny zpR6z#m5A2cOUP~YdR~nnG3Z~x)rZuh`c0j7)AOA5Z2{c3@%23tjaPr9I=pjpNqsNg zc*1{UTJ-%Xqk;4?@GWS*b3n*Un8tHttYDl(Q5Fvd6pKR z&JkSMxS2RyzEj*K4!0hj>;9{{vv^H&U=2*cEE>d=Xixy-JEh;4J<_gc**4lp2ItdkYqrpQ{85BgH&^)R!03JCZiVxv1J$ z{<6^lFYlJODMf)*=rLRy5P!)C7BuB1`$f8bAq7J#K(J8ygh zN`D@bua=A%m+<1*%VxVFD%iy@+kL!7xTSZ5F?W6x6)j2KPpA2#&OHHjjkL1Xn?v%1 z&ApY9%T)lq>S)vuU)+$2Ywt}v*_&`|RNG{E13yj|0(8~C2PiVu>yT+(F0=eFLxhtRqC6~<@e`LsW`6Z+H=&Ia78}NWbt;(^&laT`^ps=;ah$u$05F)hH;vMHcGrS#OR>h<+;(fdpKvd znig;8J7n^AL4``wT{*-{weg=p*N?<}JaH>PA9@AC(Es9hE(K1aC7=%xPoZucH?+!{ zRzB@!$~|*g8Py&_Ov=lz7BT9tC-JVE-ndNMZo~B&`CgCtu&pXQi8kI%x!U-eXJP(8 zLOh3ApWAvl+tdElmJ+9Rgo)D-i!yiRQ)$_*L;Y2Xc{=cP!d4!=ENj-KyjW@P`~nd{ z9%ivXaxKTpLL)$GioSz9{WtWzmVR?1gxfg(5jOBne|N*j4C;R!_jbTdy5k z-N<(5SbuOPkQBJg4XkD4(PvEW*G6)p%)4?c%BH{7Hj?{#W@)8{Op$40=6Pp5**YDc za>hSv56lEDvG#8p;xSW3*qrf%DnQD#r4dZ9d#i|lLg`?3fSID}4Gr7Z_Zr?7ok+x0 z-REb3IuZc(yMgLJvXkQkns9HK`&VO!ho7?d%IVG6BMedabRpe>G<0E_elHy!<>@$K z*Il%pa|HuJgHi)wSIg1kYTDj7vHn=9h_FQ#_^_%*KlOT}GP}ZdexW3J4e$7Qc-|yzj z52P!*Z09=wH-G)HXZ$ zLlA;HX_U+rFjyX+xslatZ0t@ma^z{P+V6lTTmFKlYVJaiveQlsBs&Bj=lxc*|LBc0 zxjn*c@c+ZJ4j+%WU+u^klH;@PLCqx==^;Gg%jDV1fB3Ql%%cgj>~dE_(A;tw)qp*@ zdKkjsvLIUYde;Hn^tY{SW%nuof~{|M0b&0IP)rY!#vTyi0nttpqJhXlSLIRNK5ER{ zKUje1O8b8DHxlJK!N$`8wSFG|(8wLy$o>qN$$w7)QsU#}CKK=LpWodI_BV&bfz~LV z7X4n@QQU3|T?2v}hKT6Nqh39D{uS_20xr~R_R4cov`c2Ri_|9}>}Q%Tw`=NG_DU`= z_R`rZjMfd{B7p4>_I=5kEPJ`oeqNe%GZ`>Tv{+I2j6E5)@mF%>RJpc7ar~P-%YH#u zaXPs`RKR~wEc6z#a`sh)lM;ZhW&L4jiFl6Pqf!tz1si*f+({cK)!q{nQSxQ6dmV44 zt#-uLzpiOya@x*no1@w_aaw4f>7h@98Pudp0%%y2OGysG-6d;65slgYWj{cOwY2!C znzpof^TbvnBzgEZ#(BW!ZATBWiG~L#E&XL5+N{4{{pN0(;nPEEFdc_f*yAqPt+miu zR2XcdPk-iY!H(|d+(E|h02&EpkIVMkgf?@y;|y*^v3iAB>x2#023HJ8`b4hurRT@A zc=6LfF;U|m&sK7z`ddg1l9yLiOMDFbe*xAf(AnSHqq^V5{((7(!YzE9bk89)W~=#* zo-%w=HdI5DT2PZI*GAi!gX*rZ;QEsveaJ#so@}lruMOD_4a!~t{iXKp`wCBK4LQN@ z8h@qc6qkZgB*I1vWl<<0Qw*Z>gU&Ze{&f#vQ zox2)auKXTJ*KD3IF-)Q7R*$DNYUxo`0-335k=mZmQR**rQEZABSNZAML>66-_{i}7 zDCOIRx@*j&My%4HwF|9P^LF<3$9h9~eYR3IPUn{RlE^&NUAz%WDlsS{<}WqeJX#pm zAn5vT)~!pwaeVfV9T_DVmY}z>1%tFH4rywW<;_w~94sP70XonR)B7K)dFNu-!0mlm z1C>GUMDTlkHhBD1ppVnz_j8RQxV=wEZ5_XI;z0|)M&m=;G2AgBI94~m} zeA?%0!T;f>0pNyf_&sKSa{ROi@ei<{CT>GuGMVs2RSUpkmF&(}FVzBKxw2jZy#z)d zLFP(UldWqAx#droo&YgZ7wBo3j+x-AIRO3}pyIU@N%={bc~I~EdToZq@tH%ZF8xLz z=gHfQQdZC7Ir^3(Yl92Pf9DI+T}{@cx(DI3E%isil(Td{iI=nH*G#xJ=2_)@<_+RV zu@m%=A2IznXQ~U@cZ4^MoBUu5;5iCW{IVCELu?{dJBq^;Tk|uDNyC#z)oN=X;z z=}ojUO@l4}D8I{oO(Z9SS>PFe!Af|9l}%@|a~b6~D7Y??8ew$TkeMv#=uJn?ZtsXb z(=5Ief@f9B_16s@wZH+UcM!a9iB@k>!C|&2AVizc85x^qS&=lu8dkPUrgiGJ-CbpC z+|TT0yYFiR-Sc{DaH>}s!tU7o0mqK&jBz@DaY(@C-gALfV^V#x(UbkjUgQL;gsiop z-814fR};_MG=%v`i~_qIvT)?kGD5jS5WX9|{R_Wu3ctGqx6ZJq@>cvFNq=4j0wc|r ztoD;bupJo!x`+HxH`*yqiFKR4sZc&0Y?{&^3q3}M@8U3Tt zp?i#-H(`y~)oP;j78m6i<$oV2@FnN+=|aP9f^oQ1OAtEkR+e72HHH+Xi%v6@9mo{ue^NTxXk(PiUsc|!~wq)ja*5j#6o)J#F zGIR$Y*X=*Kv5}Qo4UKJNt5iYIshnCH6jMTrGr)9E5^QYZzDP}X@pCaRm^(Nde5D+5 zwRQV_SGi?=vt{XLesh~3zn)W3US#~zuQa&spw|>0Whnk1)Job*!mQ{qta45cf5<6C zMt^%fSEsaIeSRdbB)0<8%Ehzhxxj$pz*(CWhPF>m%VC2Ti%^`F6qs?0+9lg-mArK2 zHU0z1y($a}FW97Ba#A$nXld#w7VRp%;Ur1kQrfZE-A(^K0&A%v_UL$1O+PsZ?e@@-JMak_^hwk0613^2l_KVK;|#Zgr)>K>+Q8E@gRUx4t4*RtFHBD zDvxHB6D0wN|K(~Jo{Ng31yx7KNBeTlPtrxLMKsn*%|C{c&q`Vg7cHyo; z`@A!}Msx6{+g_9>ssp9eK(&TI^r9`_>5*=E2YF1R@SnT7{%9(WLYH_2tc4rko(sy$ z(gg$2vxEHQr$%|{W2=W-I1*<~ibA}l#SPs`d$#I80fcqb%zb$Vv#;3}#kabG3m>PX zELE0?65kcQKWxZvPY60S)ZoD@N;=b*lvzmI;5y$?v-2_r94+GvP?Fw&?jQX!R_+FH z3IOetX_r!NJ;0!=2}P-AA|qgY890~2jC>~=TOR>;u0RB5{l`pSYYwf1yC$mqJE#Jr zfUM~oEZNygqeIHuGZ0QqNxM}^e6sDN-f=^SS~6dZ5bHB1X3u`#F>ShyO!{M=^1@5r<20B|DX%G%CTzB1KKYtxv zUq57efh*E3K{MBdkv+eE_mX3b)R%b0IPGijd*5bPWo!KUU}M&Am=e};hfJa{F;8D8PWYed|PFMG9@|+gqL@_H7TM3|| znw)X46Ihz98SX=Wv)%xqzbij+U3}0Z$v>E0(oQD^#a^MUG(tHNsPA*6s8?eQ zFA2b{O{~+i_p*#_pLlu?3zJauC3I0L9)3^1+M4VDoZZ!l|MK-4a=&)FC$*zQjTAbZ z`cOZU_o6AeVnXK$X@#~;2AAb^=5j>~K8Z~QM@6R@UxIHj#EoRl z?{RwNaJ9n|wjJDhYaY+0W}ZcNRk(bG22ZWJf}VX|VzK({$Ul)YKrywiFYn?3o6*3K z#Fs}_cf{8kyyeoWc!D91nB0p$FXdGa9Bys$2gbrte@+m+Pf{#C@4L1$*5I#!#quss zLFaf`2AoVnGw5w&95n_`9Pme~JFX7xIr%7yN{K|PM&Bfx_|yP%{4ElL`lVVBygY%2 zNY21TpRdID%*%L)_j{w2{SH77IvVNNA0SOSB_|p}mrUv-cu_DYB6P#Wy;+6jTO=dP zuZ0&AS7=7P2|Z22HS&83tJ(TD{Yze^^iTuMOq@FE+VhZjvy%q+h+z z-2hsJ3eAuNV8z@LqPVGPX3j;)h$%cGwVQ6;rPu=~()n`isP~$#Sw=*1p@u>mO zC^BZ?+LrT46JNN@@MbY+5|FOtcLh-~rG}YQ;47m4VI4Cq*(m|S(Wxf$8Q}e9%#S4_ zOxyR+5UUC8q~S(wOAb8~lgzVXV4k)Q?@l{U#vR%YF@14vn(|E=c+a=04|3t-HM);@Y zx3ON-P5>P0dl2@5vT@@zB`>{_$$(*Jm>U~)jRl1h-0cOU)#7yLDNmjD0& literal 44895 zcmd42WmH^E8!Z?@aEIW~NP^Q4Ab1182?Tey;O;aUBtUR?ch^AU65Im>cWDR?jr;Wb ze&5`=Ywn*rv*ySA=+&prI;T#ZI#o~Yy`Nn_loX_~(84(#51$(1;}PHVz_Eobe#bX}W7uJYA?WE!A$I zU-Nsgi!+J(vJyxza@bcmQh>&sta4+9$mVw(;@>1=vLpq1RC?B;o<{6&5@?zO zxGZ<_c$}_Ds;J->D`bUBQ~9bD?uOcJPsub*%J<=-c@mu#_sou<_b=m1;KG=Wpx_t+5c!Jb-{&d#U&ux%?BfSZMZVIno@Y(D7#64f( zu7nib)Vpgh`^_CK)FGaB+!*u(PBtNOnEp;!fQlfS4wUxZELd;HNSox`wzZHrux$Y? z8{_V-jC#?EbibvqVc%*No`<(;6flpp%e6U)3Ev6SIk@_<%KG3da(k(ixi-y)muaYRNsP3qC} zHRKwl)>RWkyfgaRDw$e8F~+RPJJ=ZB`SnEJz{SIDyq*z(7}h2qNrR?#|E*@rCRL{S zR@rR-itEeEzP=v>PJ0uSan=a_I4wE9+leq04_{b05xwe6ht@?B&i^Dl`sPuvV9I=I z!4x;s?_ozSf_QXa-QzL(4{3te&yth;fIFu7{_F<}92zq}AIg#r8_mIE9R^2kaq}5z z!)x@QNQ zZ|d6b(`81^%YGTyUUdYbf=~>dd_3h+aG04RNY>yF&c zOlo?~pS=F&dkKJuz2-bP8gbrf%w35za761)bVl-kqFDQqebm~kknxcQlt|OA}GoF@ZZr{(#`sMI#c$sP7 zh=OAZ9(GsUJ_rs{b{LqTRjx#^+O2aPU7g3xtM)h$3hvrc-L;ERs8%;m-c<7PZfpCD zH(3N_>Q`T|xqmWG@|o~>7FJn*xc@j_H@j?GIN$cnzo%mcSympKV0~9?~z6h*OSeXw3uZY=T;S604 zz1XF&mV4*Q0K}bHZa2fr zL!o0M@2c#_x2oib+4LCC%y7M|rkefYp3E}zdrk?Af;sr&DFbNNtPsst) zi4{I1^HDls+P{BKlFp|v4{BNY8c~U@74enZ^xx`UD%bxGcV#6bS8C2%(gv1)S27ryF1|l zsH|hhK4=*WJho`_z`s*(i7`Bx56lu@ORrx%^!1KP+4L;WL0NK6e4BReor4rn;Tu~$ zcj0U>{vbTrI&em6eY-N&VK>+8_td&_F9L>rRjXw5KmIv(Zq`2Z`WGTmpu!s25~Ym< z%U@bO>vI4G4xs|8pTWBl>1`7ioFbdG@JG||R##((=DOq-QSrG-S&gw*==8)ub$uIhz-P0?(SX6`1!i`zY@CmxCgZSOaWjEcQE}|`}Wz9T&^v&2W)dTde&!in;1h|WgWu1Zy zlUhreCp@It-7{IbDtG2N`Tbf9BchHxy$Y)oLM?PK<8_rR#z=yR zCe?bl^8G%qUU5w?Udv8v6rP75H0{srr0`#NTbRReA5VEm?JnU;{x4!dkP(=07MtJcY7?#jGe*AT;`&l|h=#Ny-yJ{*DbE6J*atJ?Nx( zQV*tfa@td^Df8iwBT(pUIFL)j4=_`Ea&Uw$%2#&PX)s0_-Mwk4Nc3)W zR^wp9*NF!KPq@D4Zw%6dS(rne3U3lyesEF}=#^cYBr`Bg^O3H%ul32JRYQ zto=#@)DlB)Q&7oQern<(t?~d|71B77>gwv8<=i@_UwZpXawNE&$O>OTs`lSkd=1ie zRpu+I5(+rHenQ#6>d$w}CL0e2+(iX-!s_n{+P-FV&jePGl9n=ha5JC&Mn4(X_RVCB z*>gaw=VIAr@|fbZbteQj@vHiwI|3pdfA9341ZFoj}qD-hZ z1<3p{vwF;E`2NIkqqFz4M1<*Z%&SM+tvm8j|2WC*o_y`LrJyTVQce@YjI9pmFGc55 zyPHgd|85x3&B&G;?+G^Kb=RZ#6K>OO9x%EnZM$rv>g{$WruD!B#;$}ya7CCv9A zw~QtmP7di#-csf~rgsnD-`&pv0cz^i7^zRw-OO7H5uW8;3+~UB1b1XQ^64$o6lva7 zz>cQxj^5*%={L8Gcf~YF%agt#b}T7(CC~Uo@2o$(&oQ-czmc!KG%$wRe`r4`UfsOg zrm{9^M$r^+tjS}?wRwsP+CBVUrv$+2yRPU;PzM_2<>k%6u|bi#dMCZUKE#7*s@1;z zco(94XHwDb5NT+0Y}2n>`SYsyZtzS`OarPYaR;X8@-7R)aO!k<^kH|DvoN0UXc4Xm z;!K+|@4QUoU&o8|Pd?#nzgdhm6taG9+?f9yu}|%O1bwBg(s>K3ht4lKw+x*6D(?+- z*r_^q%^_9Wj5+8UG}$d{e1m@mUH&dX7%lQXRnbROc7XOfh#Cxh$j-w%MsA0yG+xK- ze?PfUG})W4FvCvPSAFK;$no;ExET%6l@;Ly(@1Yf1 z_d$nRAy7KTL9(5fpp{G53K_gHPHx)OTG1850(>)93r9ZlY&9b#6uzXi^4ZDKp7}Z<;hxJ9NN4GBcbAy*7z;cwFC$3e9#^#2ML4&kd7))VNar4~K09GZ ze_!P;c9b+#pz`V&^Gi`tDDLQ=K{f4V*)OOxO`if7XxwA6@(*}@qdP|kDu&eCIAu|3 z+<);*p1%)XK_mj58L3jD)}eQ3qS9P{e%3kqD}&Qc8%$E6-`4bab9=rGGlVNKI|hX% zC8`k&|Hw6{by(;iw11Aml>cfvm+PVmATr0jp? zoIZNSGgf4?_0#~Y<(Ix3fBRp=b`+6*o*|%>ffy?G0aPXfH5?(n1D{(0zn6rrWH}Cr zi-$eVNnBf9u8}j{-Qb0mEgX<^)qvqqVQJjyXJsO)>PHM4sWQT^h(4W6cwPRh#lcxh zFTMHS1hm%kkkWbmDGMN<=Uzfk1vQp;y;YE4uO8N4o;6u}EE4GD&z^493*fYimJZ?! z9WkEDmvlC0>sxz4c~LNeSB#j9^HAsi;@&4QF~|T&k}S@j-MEmKd3>_@3Eof;nDHtV z@mul0#S@p6dZmMJKs*_1C$m!1srmBtboMFC@PY7t7Pw_+f5uOAEfB*2ytP@Rx_EdA z^F?|05rNTLp6Vxr9h|$E+dqR4Gk+SWxC$#fE02*Po_9_Mp>S+pIH961Y1I2M{cb=y zcx)hFUmG)C1_n;hjN)<4r+=%DB@CN|COqtCd8`@N#05PLGbZ=>YK8GLcD-VJ(YujSitbNO zDPi6jaD?~3hK(@?5G523)1fsH7>Gvy6_0W(BnKel*|+XGGqn0iu@dE9t+jJ)rMux7 zlB%M&Ru4E&Gs%DN{pghFs}@Ndy2X~W(%`Y~OHAc^8JDUOs3fefhOqI|YNpoj$*Z}g z#dx~#bE$eoaw;MmP$D8AAXqN_Wa6=1px#Ro={~~8i1f@Yq~fgefWEo3r3&i>(i;zZ z$Lu{JHRZB7^xUK5#}7{e-`gz(i$nSfg}_H>iNJRQ>U6tq9N-#-;|PbCjz9=9^v=n{ z!Jf`|rda%lkgo7+{pXD|7e?f=D`aC6H;fXKMVxc(!w4Ax`<9H@*m&!W?f?=FlQ-F( zTWE3lBm%CCAvjcQ#V6xa1=7$BP8u47)mArgN5|R~*s!jE#YE;0fRLBb=~_oBpA#)7 zXJpsLqR4fgpUb-tzof8M-@xD9Y`QjRoA$I%zuZ8FN7|8b3^a5ZaQfcbMtI?#EZ(NL z8riCDi#WGUuarSdV{(xED%8~K zi0#PaBKe@kqWnz^+UBiqO8hg!LmSYXiJnBCcVGnYOklDIf~IF3YY9!LH=I0!p*z2bQe3);Lk~umj8j{oT2!)^DSCP616X$;(vVa(b!r`V^7DZ}ycvpAhh3S5zG=btb0sL#vmvV4v>Za75 zIygs4yoqC@@cnV5YKH@1v#Y^HP8er#-Ht;`pa)S(6SAwzkXjL%NUq{Mi)MCce0!5o zC;tcB=H73-e|CRnSTJm{-|8~6Jpii$sFSXChMPd^+zt-;4IG|>Q-L7@f`0p{UB+^k*WJ`59UEwZP5bD%}pZ4S` z$Lc-beZ`{Ze-7U~)*aa&*KLv*j4?S^*&rKJXVHRKrLOM35w>2J)id0U`eDN!W>;Sv zDe_@AipcWh1%<8n<$bm4MKHtUgDM%DJ@I^Xhj8nwc_4po<>BCMp%|)pV)WaC>vv+uB!PMV_U@>!HkRol0Qg``^*6e*8v?ln4^5yP+fGi_nXlRK z@zk-btloKNVF7$U@JG+nJ*uJhYy}YF&SkCt?U`T1-kt${uo>=duMug?U*S%mI6pkQ zwq(i)t<2uP#WOKP?;|TXgj`e*jLnKaafoPUDWMc3`=d>vz%eycsSM40O*$J;DGP9pU9kU|6(;xTzCIA)vq-|ei4fuY)Vfw zbR8^do)ygyfH+cbQ9G2T@Pn4#8s0uf)YY7CSFSmhQ~2kMvHxyNa(=vffDF#_{ytnT zx|Qi9pI3RBz-Vk|xa*Q${b1+Lka=4wq%&Oe*~L>)F9O5F8;!}H2Lt5fPUI&uZ`^G$ z8>R4EPvsXfM?AkB!F8mcGf&>-^-9>v7jx!*qPK_qsLw2kfXY5wC}NZrBip&}-Le$T zLHzCjfJiC2ybTNS=~rZm;9K-Aeo{wrZaf&_D}bBw^9~hXp+O|O*_P5YsX^eZ8RPy4 ztu+9wq;fffq2|6+TxS@F}j81)QxD%__I7r{%HofR>QBR!pWjCAuR56;8;{$iX5{v5?&i|{qJ>P_ zN#`reI)4UB7S4#qe)pesHsfy-EO<$B3Vs-RG)IpAW7-{mdw%NfhV3OE$!p6%&I$R_ zm%Bc)RW-c2v!F6Qxn60V-L8EBxcamTV>lno%ecP>T`1xAl~B_3Pq+s#G`RQhBw9T% ztz53p-G+9nEL}~PG+de7ca^?zu@gA>aDS` zY3CgI%ooarT{&h%n3zc|vygB}#oY1NpgjqUMhF08SA2JZi$>0J7EZ`n#q+MPJeR!* z7?vbh$hz#S<+nZNoeg^;s?)(vmTa*{&Y7DN`9~)Z#w^+S^DS3u%kvx8RbR~0sRP8R z$2xs2Bc2nA;N+O&0iP-KG&w}WcITT{8s@2EDc98dU9z>F%v!2!*d|F9;-#p zq*ru3>$Vyk@%Uk83ES^l8ztu(K&((jf7}M3XW5JWk;a8XR*Zslajt3CsrDI=(=jE6 znyu$H7PjqguKV78_g$-zLLE(qoN@v*?-|(h|aQ4P^Y@j2!>2-A$m#bl_+d1nqPs{9S3&Y56-3rpmH`LmR zF)8-bGQNueknIn{h?+-Cgwk0vP;7QDfmuab4Rzr)L8RddI>*kgh5r_vMI|EWi@UzSm~6M%fWX7`x=wKv{9=}hLX z6^0KXs{Ul1WpMjRZ|j|ikm+HH%!doQcy-QF$72c%CssAiNuhvxbwQ)LG&jGqY14oE z-X3tlzVd2>$O%cc%$5k_cb^0ve-2(wMKtTf07ajK;-`xj9+Q!DqYzUZFO;SXOkegqWf ze6;!Ml z5pEsBX9dh15Gq~IaX+%qWArWElqUWFs(KgrUhtk@MH!&3ek3;NSL4Mq85w{_AD&lT zGIrvl zE`fKIlzBn6o*0CDXYX$#%RD{M=#r?Azil`nufJ*wB65hrD&BqEBAZ{1GqW zQg)o9H2V8#DvHO3CzMD@0g3DI?V|HAWJO+v#lhH5+t9V#8~J>6K|oSPIZVizaH1vy z+~mB7V5yctSH900%k*UXq$g^4#p4$1FaPWHSUs;3hj?IMk)?OR9@ z+KcGkagg545~mw7xAcA=>L_pr%=Ftkv83*ms|kDMgl%y4F~(Ust}~7;mFLz+^Xjf| z^a%n8x~#6?v<7!(jn$*z+VA?x+Ai*Du(MC59QGPVjE|nrSghFGo!Q?-6ikNCtQYbO z43`!V0qG~{;X;Q6u(Ynapq%o#WMi}!FWo${k?>(!i{i&1ya%OLecVb0WZ>MXGgUqbi?Iei0j%Kl0~$NB0iPOWGMDqNVVyz4_$ z)G4p|%6snn0;#<<;SILsV1)Q6i~utJ0yiPo3570*@~+65y-gstGgjJBV|;hdGNy(qzOGHo6n%Qh1B8Z{Nm zCs}q*8-m}w?_=xFEipMiKddpmWao`svw`@LhMy#0Z%4%fWuHYnj0TI@H+{WG&7bmo z4YPYZ1YL3~GL4>#X`>1nymD_mJkA679Cr33tMA?b^5gjhD%g>$$^)kk9`$XrY(h56 z8rS#k2tw|Xye}S}J#EeJUtVEv zf1DG`o4pNQEpRoE_WH>D>JN@NqGtwGj!DWlr&Zx!O~mvh{@ESgzn2>v(`$97M0Z)10=$Lm|H&@^5kI|W-N!F$HD2JZN#_oB?o$WEBHP1> z`ITkk_RO^7k8KL7lFHRB$Ive`<2$C`Gv-Q)2NmKEOwGskniq=51GxjjoP-Uk)2_~4 zIf|0Jwduw!*YBEsDATQuU5{FssP%J_)Xc0nXBJ(0cSHE+?_IW+ZJj#OpETg`lUvwt z_c{vxI)tOShQC~k%>gw1OhQ7dM8ND~hG5#8;r`UlyYVbc(6}Y;e&iyjy3{CRP~GD$ z7yZTf?y#vpkiCFYf6hmHcX~X>j7v zKadD+fw!@|gh>u_zh(`-ZKaz|?o;P9g3%K}DJPUF*@=hApW;)X< zQ&9oWU)@$GGHs-zGTvMwLHhmQ3o;VeUlfkPZzU1R?~-?~;xKQ|1d;1;G?-Rv9Q~19Ai95Tmcuda_^}wAj z`0YD#{cX60+jnAFbFPZQ5rHcfj`2U~wf{BZiNa;%f2Civ|M$}G|7TTEEKoytb{JKI zacTPo21fjagoL17!MOQ^1O)G1u3)hE7yS4fl_FWD0EU7>xJvzria9v8eMOGasjj$y zk=9bn5n$_I?#PS{^8KTK=8nt;a?G( zNBn=QEBd`OA7IeYeiE8O#;fCH%}7Ej-L+W-HzXR#(Y3>{{ML%q#l#Lm577Dfe%Q{nf-wk%(V_N$die}`o{G#>dprIgCd+) z#00-r{R&AyKtQU18}su`*URRl$V*?n*{B4Y*idiu0lFA~4bH{51yk1wI33nN z4R>P^{nJJkV{+Jmnq?{@QS7#7mlr__JIxlh4=0Mh%V@fXrNtg{uDN#nDPo@Qrg_+y@mR+(<{D6t+(FHvFmrHK<8!qgNR z9|Qe`J2u+XC|(w|^M%>fvUaQ;6e=MOET+D#`(ZwM013bqlyZZ2!_KCu-6tzH9ICN3 z3CcF4&CZ%%Gd(_xg|5<}wBI~>Q2NeDRIF$S^| z7QVy~Cy3uGlQDZu>P$ovJc91zgo`V&()L;b_P2Q*TCF<8OIh}byjXd{`W#Q)2wzSQ zDs2f)tu3JGhDEJxz1PIt28u531fKK^45L-V>g8&9Oau3q`#~blx8h$2$6A6dk0c51 z*hGXsP9;gxanxw(bw;xgGUt}3j>#P)^XYjUMNHVUdK?h3#t4R%A158}hDj4$ z7eo6rrNr%Tomg8hG7}@g4*aTozW~z^L*CU zlo5IpgQFVw1#Ix~gSuaP6YzGXq3FPPJpIy!N+r zxNoS@w}g6mD+cTyi|kz$1O^ezYbhj_dCoTROY1KkrjDZ>Sb z^}C73yk|0-e(P^4qPsG+PFjVMjKc}pej<6zS)wOR&+SX7wI+#!nNeC|HD8f#1SIzF z#gEswp_<>(W83cE*HO<&9<4LzST|dol&o*0-Rd-=$qQ|@3Dh=3r@3!zXzu}I0_;JQV zlSO%IFRYVt2&Tn-e{*k(zo%mXhL{>QQS8>ej%D53MyzMs$5l&~(`_%0T z)ti_k{fG{}*1WD2K)%U>5tU8?1 zH%-U(>5A-~SUWw1PoG-c4mEyY3GkP*lvYzqPOcrIy7auK`hqBHgQ%7^ffM8{ZB!bw z6g6H%^YO!5>+O7vae?YEtuw@Fu+oq&o}?VD16q~g4VW*{WM*HmmS#$fngyj5<4jy2 zhH#d%52VUU9j%VIwNQkb+&(3nBFN>?7)3JDHYd6EQ;8MzroZAC{MQ0cbnO6`juMe|l%aYKKyg!um9DK0E7&I>HC;>|C{gni<7J4k%g z6gnR_urw4?(vRbXM=fKJjGKh0CvuTd)(x`j%z7pl_FutQ<|ZJb5-Hk3zgqel=XWs{ zBK~}DJk;$cNK+6}kWCNr+xGoJKTzk<=G*Zp6B&TA13)7e*tMM4&f3)xrG zUcx4{bbe`Xb7<*z9uIyRYfFZ|?PAS-vZ19j&@pHHl+6PH%(!+6NsW?nXx}UfP2XR6 zYn6xFMNIt+XSe9*8DUKlJ(3rlV5uroEs^!Tzl{4QbN2Lb+7%ChKrTnwyTV#p?AF?~ z0k#1L=phH_DiX3{luny>DVMz+zxQ3^3knMShK7gnT+nHy4HPIb7k-k=%h_ImclwBOjC(=A*kbK)XL9 zh!mfx|K45fjZSVp95qb-E>~xv5b}C^goqR)d|#S5K$W3FQl|S+-+WJDGjlipfyGCM zl-pTdk9)GlMz&1_QMM+z1>@Sq(8$57;alUXj`}Kv^7f@cL2`%-nr>fK8T}zo2SG9< zQ)`trJ{;KYp=4LAT$J5At2gf(hl1um#KC7) z|DI^+J9O!pe%n7Pmc^sm35pq-8O8Fvi9mY!xugmoEIVODVW89%=3V3kCsB&ow#k=b zZDCDP$v*q)^FMyE?YCPI&gm5uEM8X!bR~@r>i|L)jl>y@0+qXp5H`-c^LMf-s_MMF zf4gg-_!knulbu4u>8+igZ!{VYPNCbY`rPH=C(ILQ0D0!x$|YzLTVwe_zgF?84%h_B z^yDoIwha^1H1O9a-l-Ob;xRoUGS71x90f7nM4_o~&S@W;s4}hwDM(rQ2x@auTpXRg z!+HJOGhM08#joYPn`W_tlN^MC6W($ib%0JdOIUcDxFZm_03ibE4Eck#Ms+_yf8-Ca zNcaV`(d`P$003nR_`ZY+SrIo*K&jiTrhVwt+SjZ{`{g&yOp_?@-PyY?%1itD`iA^Z zp zhJ*h-L0Z_OVd<5>PbAEeSnP=4pG5*!3_x)MJbS#|j-fih!50g2gMZH8Sd>uxmHz^M zfY1MGQ<10>QTTzYatY`gWWo~*pXi10(V2MP-18NgV8Q(^bSXeYMKPISRkZ*HrWV;h zF8}es4E283fghPG!_6`8*{vy+Nur*RBREvzk1_PA2P$Xs#8LjCOuNc(r_3 zDz5SFh~hup4u zH8H4b_My~dR{Ny>f2)H+*oTCTjm?A^Qj+6Grdh3rr@E`(>4(H!F7Sh?dw9G`E2!gN zV0rf_u4{9#*e1R3;fEoHC@PH(DJdyzz18h-#2<}DVl>%J!o-ADPhY=3(QJ5l7-lFf zEqzzRudJ;6cd4;r<+b%h*2SRHMjs)lpdy+NhP3Lg>khu zC7@{RDXF`5-PoxhmQ0?vfPC41OB6!p^YZ^7eQZNATK$M>>w#k5(KQ{P>W2nik6l&>G`FPvoPybV zB?|^r8Fu>QB4-E`Rendw3X#KD64$JI%{&xw;g%gzZ{^#=Bj1ThgJ7Q@ITMQ$&~Iv* zy^54A_bd<*S4XZ6O*w-tHA9z6Sl5Kcl*SEkpq*CCWfMPW8Ncfy)qFaEf3YHE>YU6Jc3FREh<4&b+; zgNToWqEcrxophh+6u*0{GMuYG>tUWeaxcfXbP{wgEQ$nT0EK@d?AYeyDaieZ#P1GD zd>1GCxR~XAebh6O#KPgcBZEoyk#W-IQxqS+sAe3J4{LD(A}^5yb5)=%ZU7+;8}yaJ zK#-idLGWq!be?3%?(So9Ipap^=r-K^ze@WyeN}_I2=^LjAIy*C1gtw%=-jT0nlwnUxQTUMD~4W4Sl>?{i}eYg%rYT`LXZ z)tPbhM7{^R=KfgBopjY*_=v%9#lf+R3~tbBL9+_knC2_p4JdAPz;pMkH(;dR?OCxZJW4-P^ZW0U)t|2P5064>?|+LRJ>zarz1J@gG`4d_ zS5ZkcKAW<4L<e_95> zy@cBhlfvR~AJ*9))e+*Eb~R@I+23Xq9@y&3-a}Q9?GHLAeyb&^5J@z}tW4L+UttL| z_*x${#TCpvZyK7u$47xbmUY)#rw{|(wqS4{t z;D8yjv$NmTbmX=M;yxIS3Iw8jY$u(%{qhxIAlhU1vtT#)~C-= zo#eMqzXUQ=?zESC5dB4IdJ%20_EuGc5BwIz$MAc}FbWYxrc#9gEvG^e&Ce9B*Cuqn zho}x$XUc8!CWxCytnf`S-^KRPwpUFMP_d5tr@f7Lzg+WD&;6$TCDQHVxu*4|)~D_O zlgo^>YV>DY6!Zp7p2e{Oiw1}6UkEC3n1>@^d>2CNZAKhW(jp5xS*3VP0P6$%^T*z` z=&+zKt;M?2qE)-)@U|JjS)PnA0w&2((Ah0tov779r>Izoh5+B$h)5?eK0c8R!gz|6 zid(Gq82>if@{6Ri?0cygK;+uyc^H9rVv{dop+Z&e_8}a(rZSDzC39ha%~Y9#>s_G- za$#$EKHvK6wbAx;l5;*w4fTp;N=lVh!#fhxzB`t7@f$hoaY|}5WpK0ARM?|$nY0ZR zL|Fl16B#ye+ndnWYjqay)EJFlQWTC}N}?iGy_=aW50z-F=jkm<#y;~Q?0DA~D!Sxu z>qr`jaFjrO+(#p`DZa6_g=t}7;hN?5%HJaMt=XN)&?|<-cwK4G=9J*;kv+VZ56(Rs z2uHnP76h!xvum{{3&783fN9cL2rm{xywADyL!kdRd{}N?D_pe_`)NLrc^BK{3bSDm z98ICxaUp0~t&8YRsL+#IOw6P}d(m%A-a|ptEOF-NFfU4X+bH)_BH2t5&i&{}B8+L` zj~)_HjO;<#hCR$AJ1Q<~&8))U-Sd+n`r`6$6l&3{H*M|V*XF{n$5M)_GkiT|)*Ky9 zqbG)Ky%$4uetvgG1(U!-3Vf=Sw*%fN9worz)YE~`XlI=q-^04u%7lua+s^s4?6Opv zbR=(sc~Sje<(HN~^%?;YO!K5GrJN5=ZCkklEHLtvjkki$8 zFWLiq{!a?6%0B0D5cpTYCNAGD?srSCAV0tTZ)R4%vjS=u$BLHG zmpfck#e+zV`_~^~%%d}iSG4g;kfZ__&F%@-`?-Q@F0qfL)f*T80QJN#?a}oSgG^;x zoNPw=Fp&ipfgAB0a*c{GUj1zG!IZH_So^G2f7Pn~S~#`Tl@>CSX6qgFwr(4UH{fX? ze)z^Ba}vgrnrzYOBNm?1A*}HEUk0)BTz|ElC^LL>z3fnNmDgn6_G15ay}z?T)A9C~ zTV|^d#-t{5gn(kQ_zYQ+l7ed)oCKtFpk!0Pm+uu3y1Z!W>+k;jO`~vIyYtIbC^{Vb zs!7KNZUvOA>iv^KfdgNF?f*(E{%805|DzO0|NW?>_st2RX>e@*pTf@s92!2hcNOp9 zi?7O0z)yid5XoN#E;JgV|EnqaIb;8Q!v98+0z@(`wz+-uhJnHD@Auzoeu!?Yud}ka z_Z9vUrlViY9sE?H;XR`sAQSWbIm!g>N9OBo(PZ?T8mUJJn_4Ng)5&(%uV47Y zcX5mv7SO77;*5F7V;j?C>$c9<`^nd&(%Ltg@wOh z?xwb#F8U3(qu(>|!GuI_qjK4acvOziAEh`x$y^x-&SXNIFRkHyrVUK0{R z0mT>w&j4K!G0(j5DYz1m;OKqWIdeF-9m;eD^Kj7KK8cL!pv$WFjf(OJH{G%a9__#F zv&&CNWQQo0g)Be(JMhRwK}_drQ&@$b$<0M!GFNfL2MDxbiG1k;dq0rS5|tyd2x_k{w)n_z0p4rHAvAB%39|gB`ah4L`+s{ZS;Mmt4l)` zDXCeZADTzper4v$7pILcJUagZG1YftGBQ7{EKg-gzvVx>ykJQ;*1b~`3u}YtjqxDG z{HP_&)72J6ALy=`-!X=|X>>XDVTCkt)t?PkXUs44h6d4tf%U*&%hwEv&13nih_V}j zwhXheegtR{E$-?>z`FioyT)**l=^xEz=E7hd7;yie&&D9B`!f*&(Rj0?1ERn^;JgV zyZa|6O=rCOxa9M!R87Ww{!j<^2POB$lPM}iBF^-4l=q^J+vEtqzrDKnD526_S)S&G68{?o`ijg|u?}h|i|% zAd43J_uaR)sW?aR)3v~DBpyw1#rD{Ho+bMzT67+~7e6#I2jQSB%d*JN)EJQ6xY%25 z%DelHY1$2_liktJ9W0Yfu!9vn#Wj2|J(_P#f1qPy(A@y|Lt991`sjPu;4jBHhO9Eg zKIYoKV7@*WJZ#;pWPDV_*w9UJ%frn$bkJYE+}B{=f3Y@d2W(tQ)tB>3)M{qpTF34fK*FRWEo)=w-OSoVF7V6=nw8+093p}u*ZIjICh;_2Ot)6o4 zA!UQ(%3vqBeQe`-4Q*?yA=hQS=+dh#0epvvd+s-tCjes9B(%nJ+@R4d_%tQPE<8_g zr4}@iljKs#Le>&AYpgIO*1ci}Tz`m)^0t=_#1WYP=XO;xLk>+j&9WXlt+@>~#1$SX zBNXd+n-#AM06L|69~1!mmfQfJy|9#f-BMwCtuP$7TrLP zg2gS(24I6?T*nBm=MxR>vK{fzy!Ut{JUOdm>S` z_i*&LWb04+{w$Z*w9-*O5Q>ir;VMBQwH17XU_zQmdKjF;e-)Qx_t-JZ6~e+7!fsnT z45Xj~lCHY!e~;TX+qu)*aq!zw`)*yss%->U1>c9&Qa23|oAvEUiH4b}*SHiUB(*7|JYBjG&hUCOZ=>RT z+*~Iak%IqAq&%dp_Tliai^+r5YC|caWzlXVL`4%rq?d*K;7m_e^eEO^I8g#^A&!f4 zl{SbMf1-E||4_(PpgG#>?TrSBJ%1O}XL~+-#9ta$cl+Y=E4zKevbxW_;b&k=9@6+n ziSM#qY&V4!(K;+7TG2%Gv(v~qQj@gkZpr4ES6B8HVb!4|X*lk3V?iYP z_t%MO5XM4EN%$fQZ2cZhx+%qN*O0Kt}uY#7~)b3~pctGHe|CrNZ4HN>`5!4tZ zxf@jz7o@-Q(ak;vy$ij%3Y8a;Avn#DmNEpx1oO<$f53r-B1CJeZH=$vUB7`o?z#ju zo-Z*$Xj?7Nz4u)&boTmQF@lPt38X&@7xFz!}0RC_>`BTF~0*%cs$0=dk~&{j9*3qoys5h zRpP^$k8bw((6BUU>=pLt7|T#{4@di!GZ|R!F$%$5Tu|!$l8j?W33!ScM$}nF91ge^Z?*3W z+y7o@8vBJu3{N0CFt=Pj=Mb(W2@@>J&4a?)hS=`Z~`d(WJeBymqc z^-6gt8WCQEM9sX*u-J&tG*9T@suBSM*K)WlOZ0}4rAQHAHu&#R!{>5T!Xf68O2p3) zp9n^7z=-xe#zm$+a=Wk;WXS})l})#bdl4X(qY8IRz$~k$Xl#r!Js#5F6h^Z*Ez7r7 z1kFNtFV^D^9xpYM+j#vTu{l*!)r|~RjE7hmldAfcP@FVD%$az&6q2Bdttpq1g-oP_ zcs05#Hz;YAD=`2&JwJi!OW9X5L=T@ZD$2CiJo~);DhTppg7bE6k20DTzom~5Y0J)c zOVR5K?x3Ct6NS1Ty9hf0Jpe-iwc7_zlhVIkmeY*cP=Wa9>p^xoradUN@*$Ob;z61o znu=(%utws#z`j9mj>ymOm4vgPMD#M*j*oA-Yt+_rC;z&Ka(@3(39?+^|8v4}wJ_cd z^(KbZ(`7<)3BtR%vtsAVQO(IZ1$s=xIrKMH|jCLku z)qSG^L6oV+Mmq51=*W<@1sl7Z75IJdaB&j}aBzVTf*nhvm>yoaDgFqy@A(gRV7Ec3)=Bvj+GXxRt_UZ@9Uu2 z^7gG)5d%}CdjD{%w7&@3GLE%yaA$`?&;X{-d_R#6jUw8E4r0s zCU`XtJwcLlv-@gSygjE4OifFrZdcemEU(bA?yVCN(xR5m|Mj)Bc48Gdo@f`ae%fzo4K3a_?##YFQ78s*8D)VoCm zdK{pMX+8tY8&K60{O7`JhBE>>3Ed=$Z#QWuguQA)HFp%X?v}I}o0fV$B6Ysw5s9USsU~)fP#Cc(OJ02Atgx$+C^WJY-)JCDKbfVET zH7|2}8Bxk_p6k#fq-Xh;0*p)e4##P+)u(shyU3N>$ffq5jRYiy@PA1^8mh{BLhwwN z%KqlX*HwZrTTPDMq?;iTRZP^Cv#YH7kof^|PfbC3_I=3eDHCydH|9mmUn4TUG1yPm znH->;)2EK(bZf;xY%3fF(_CMXe}K$G9c@I-P!J*puIL?W%rv}nP(sBSNfI?exx3{aT#Cl zwPe8YS|7#%w78J(}$k-RA2s7D()7UtM2*mt)ngN%5e{kwJEn${=*n4&H)_t z&<2UZC7Bo^FnmGyTmku8Y&BNqDtbS`sOHNskx2J2lhDV$i4Sql{d-m$$C1jsW`sHj zJ(pR#$H6a@)I1nttzz+i#@*fxKWA>tSVN=Xb2Da2i|xy}S)abArL99P8@&*{H`efg zC>dJ*AR2V&@SI_E#7bRlPuFw3Z~Yhx_3W$mYFL_%Yod;GHd?&}wcV~e!{OAC19h_d zgv6n>XZ*RtKE`}~#YmvpNX7c?VDwp1)x(&TPL>~48eQeN`V-WAxKnkX>g+NXQj|cN z+N%WFB{EpRO}6snbO*Xr$nJ*Y<$0-Y&a0}UQZp5fPjwKEOgc2j(Y_6dNrm_v$-m7T z>LxVLq^b~RsbYBk{-79=RD|Rqw1^roavC%QDE5Cy$H%UF2Xj=3o-z-`H(DP2`-{KR zCh!B^&*>i$Eg$ncfr}Q=RwG!|m9C+*!t-m$SC(iYKBN8Ggx$K7Uh50R$Q;57QgJN~ zppjSV?G5wTIWIKb)US&Eij}V;I83WPAFi5a`uk>Hoo)}AKYJakN>G7t_yc7@0u91< zA%InOH}qW(*TnG?aDH`%3o)DUJI7gb`HHWV@>V1x`Xl9|W?Q-FgLA$f#k%j&z&fMs z{P^Q9JX`KkedzdqU+KIZvqN_65)hJnbf}H3bW>7Ot5;xD!A(k|_t}8hCvp_~(Rvn= zBX}jFBQ)vUm9~3$b@n4>lE1QfpGbRb0T3eqW1o!d?ryg zvDeRga~=a$A@tW9%)q^!oBQ9U6uz73rs`2-8y}d1K39U54E3ZYE~T_ya>)+uIne-j z;|E_IK`*3Rj(`wmD``Jsegi|L~k9_MUjUIoOEds7_!^<9Cx2;qlH4Z#ED%oSOGM5qM zcH*bX!bG@K{k2DAHn+)B{d0raZ#`wZdxB<&3$Xgq{z4}k+iuan>vz;2lT;`Le+M+0 zavAf3bbiQNBh~!xMY<33KES8Ld_@C1__SSa(4X&ZKcV7a{9W>A^}Y^zxG_#^3sqMb zUw2v|f%_7c*zx2ST(e84Yp-2Jp!e{kJVf->5>YVk&e!$a2Ey${1|E(|3Q9~^4+_;w z*vutI-w0|?48n}^ByJxR2p+zzMB9PRuMR9zz+Z*K0(L6|u{Xo|6S-UJq2*v1@#Dj+ z2JBl>y)44@)(ZLghiNG)!oSVRIY+-Mf1i)yg@dK3*cWsIx+6!j5Dy354Wo(9J6rS5 z+Kq)=%g`q&34EnY1(HKLRwE3+0L@PvzE;<0vQjQ`@6{+IQ-#QTSiX22V*=MpL18bg zkv2F(T}uZ9jc}g@0s3V%TE8%~KGCn~B}p4;KRtNQb4j`O`$*w;%{~0Gwl(Jni21$y zBm9gqfVW!MyrnVV!)}aG;7#^{ML9Y(IAmVnOIeYg932`&!;&=}uIHDGA&2756W(w&>CJlE5($Ii!yZ7$W)9zj*Dt zcbZoBpB~SCu$!YMl$%w*f5vq%;B*@vyvAw&K@&1h-CsCF1os1yWpH0qOcJS|A^SrR zfTaF6GK9xu3|ZGU5or$?X^9v+mzo-lNG zZt8A?cwdWFKjG`%T}#|_58=G1#)ons0udLsAQzzV8bLm48$o~c?N~VQ%$uuP*lElC z*TQj}hjb90Xyk{Yl`}mXB zf67qckN@pZn>W#Y0LDmU_dI*p1ND=FhA|lyLDVNpOV}QKk) z)C}B17)x4OzK9&vqn95QzPw}RQ7GS>IdHG`9J?xg=*3e)RmeOPZkFZ{%VSY`Nvof% zNZwwjkYMD?6ENy<9iRej>r55xhYGt%3cGQ(_L?0R?WP&HY11tX zyn5)hSQoLWk=LB=I45G(Z6!V78iFWX$&K>Y_deKM_a2^UG4p(Nej*4z{l(aXA2!Ct z$PC{q$DWd>3n-wN%%t}Z(vRZ-I)dvLa6basz4q>9?4GKy81U|;5lu1IxnR{~-qZL* z81gVdkt(OX?uZZX6nwiCOFdvgl+8k6t+bnMsP%U}E7;Swy zo~G=HBzkDZszJJx2t|t$FBV5pfc$GdpwSAFk75EbtR$s#SyS{yqC*7wBwuvJ^|WUM zVMme>T3m1_W4I^QPvt$gMFjdn>x6W!fhD>f@M+!&i+%ee2R z85Tx%MtryWn+L*Pr%P-AZjofT@B_rFgUEGDzsc7DZ}7}9avm&q&uWGB4?asu4hN{6 zL$|JQ`mK$*YirzixGvy6d9*ejl1QN-FexKoo!*dVVuRW4fau#7f29UjJ1mQ6REhgG z`A<7i_-tFY(O$>WH5W@ko)kPr=fif5!$cR_L;*6>^(GVTXSuc&$h-Nll^n_TNIxz) zJzhP-n1w&Am3rZo>&blDuZj3k%?`sm^jEZS+`>d>Emc*?E>H{>#0tB0r<~rsaV!;0 zc#aB6yA`zX^n*uR=&!Ku(}E2>>!$uJl?%;zeiN>#iaHpM&k0}6Q%J#CjFOH}(kWP! zwZToD{D!E#A!v~9R|PC+A;33gR#e%j(~)vwo*WZd;HG!Ocw6>tn2!oi~}@{kmd_18!vRSu09dkK={N8lBf4(Gn0M0R4Pc zPIv`F+#gIBoS`XAfLn8xxe+lr*GK7VA`S4{z=Lf&h%MK6Rr-k-tsX|8t?HbjrT2rf!6!bChbuXJg8`_I~Cw{f*O)>lD41 zI)zd8DfQS+$ElU00Qsm@n~#4j`)>^Sr_ZMH;K5qO=5+n7{R!9yw=t~w9;k=%C*Zau zjWZ$omAK&qU4H8S=!evrw;FcZ>S&JR8@zjT-Dgp&(kF`S^BxOou?{q4D^RDqW-vHp z(%SKn$ASZAQspsnC8e;F%^(Hl#<>lp7kmD2; zL3Xm+P?~4{RzNmF!GwAW|IsV_iAL@vLeqN33)^=?giRCf0{h$XLtd<(buCV3wO~?S z?uYUD4zTzf(BYxC>*G&}{*q zOV%9kM<%X~_H2e+H2|-$>s~8}oyV`mmZbVN(#t;WxbQmPjA&=_yTU%r!fvdL&*sLw z;$Qz69kQRnE>B(vZA1>}EYd}5aOK9a#VeB{G%V4ub+ZFvEbWzb5oWP2Ht(Vl5pnyW zn)8hIByl4+Zw%q&l`Mn{vGPbQ;jwNNHp-vRB?~$=xDyKQzJxQI5JY8q8#y^5NQ^vU zK2;Ou9N3yy*q@4lT@G=HPxT}Z7r$vSJK{&V+wzFsksGcjo|-#(D+?%vuN3}A$C$ls zP#my1jr7j16-^}~tV5`Ku0yqyjMP?K>(nF@+=}hsot)XS2Y;T#THVb6n>G2nUX&VI zhqRu>grcr>&@LUB40&!%lvNG?1i}2vz$%#&axl|73MMlKr$mYzzq)4(e)SPyq^zqJQ7{00s4mn~sG}8Rpg{pKGirN95n= zANbPaA ztU<~szH)-fN_bn|>0l|&QRQKn><N5ReZV09r+2JYI9lSHS%-ahNnZWu^*oA z)hKTxiw?vvis}Pa;rH8()}zISEnj2M`2E!~`wOWs z0}YpKJU}E~4w3%- z+hI1{D_0D+(%g9wc&pDM=^;+R5+lO|>StAn-bE=8FO;kRGz{UFIUN1?cP(>`Hc=S-z|it%T#Dq28N!@#9*m) zWtOTSTQbhp+3=~h(I|cPf-YqEn~ZRjHjC4W;mwL8Nj`WJmDa?-GeH1dxro5CH(r6V z#+yyCO19&L;U z6R5%5m#YV0h`_0?5>1TqL$QC0?sD_TltH@;dA_@~4G`_PpM#B5Hx~YgG&p>QM=A<_ z0Ef-L${BZSBY+>zC?9h^or&A)WA1!MU3rITTZ|QEYKYM+<=M4pmR}}EfO0H@cQx;U z?Im9`jQ!xhzm69l{ZV;mv9#sfXpxpH`4Co&)Wn0pOJExuEL~RKx5aCbvs`Kg(8=cj zdAlN>Ha%^&!~G|3A1fE${RQ$?}86Rw(|`_DCs zqxmSW)S9fP?k%@vm?mi$+30UH!KmGXOdydFE1X)P8h+rFD{ zIew>knGTV0T1~-xpjY;l+6Lc!Q z=^Gf|)$aX_*Mb#@dX&n1mQV_Qzt)bq;CqvFPX; zhL5e4kx_YpC)c!S1s$?)hzgKRKE3;Pcc^~?$v8mB`eJMG@koi^%@HGp8(~c>O}c!m zJ-|RT?GTgcGt2iV-m{N_(qg*>*%ijOW{r{`14_h>xzT>$LV!+1e+^Z}!PEH-LDC-| zVxTX5H5!}jzDc`aXfa25#bPV$>dQWY{hbhxzB&I0g-|m+m4GWlt*8NLr6Jyc)ps3? zm-lrt?`_6u<8gO`k(dHths#$W=zD*?qL_-$s!d!dTQ-s%9Ok(o4q_qs#yP5LQ{}w? z?o31%L!GZc@pZF;r>Kk^27pA4JS&;mb5s)TYt=)bleQMZ(Y%L1FI)%xDhz$1(8f;! zWy_^C^CsBW-;g0B&UU4URfloqqPVz#%wWif&5GO=8+UEqP3apur2zhuTU0>h9vF zIYh4S+H&7epyagvG>o`uz0QUlKecb0VRXC|Ew^yER7EnAe4c#sv(>=?S6ly0-aTB4G9L5`} z9QQ`_(Lcy0r(7S?Gt06MW;aP3@{@-qV^J#398gK~?Dwqi&x;R|ajH%Y0=;fQQz1Wy zBT~EieOP3Tw|p0n)S?IL&L0G%#eo9S(u2-j7LCL(ZTbaA?nyLu7DsV&&Du@HySxi% z<|~Ix(|*&(IP^ds$5kfu+q_|A zpZU0t=)toza>%a$a#RCPmF(L-bRUR#?IFk9z7lU+@#1IYt)vv^k42l~zDH1uKHrE{ zofmfbGB?Lwu#*lt+9dwFexs}OUUzkHyJgW=)Acm!DmpdCbtZMRpTvi5uVO=wOIW(r zi!{sOSB-W%X3AyytmmSyiJl=XTjL>d?W$T#n9>Yq-gad_!~(@j>bfYY>GKT|v=T2e zw_aH+xMRIKb+C2{1@dhne0t)|i1`Y$G^NI;x2NQbw18`QSM~%s%;%8lM@W2nrre}<@>TL;6aig38XJ7lF2$Y-_>np?6Yz3 zmNS2#@wrHWQ+l?AE9SJ(u2%s)ss6tCpym}@!E1Oj6uad;OY*?q&hXGQmicSHa}t!8 zI4Qbh=6LX2Hj7mv9M`fkx!TH^u(cIeCq&5dC`VcDD#W`(s4k*F)Lo7^r5EK;WIf?2 zobZ<@L2Vv5#lXwT-Tpi@Hm856^$dw3X_UGbE( zJVKxhQ|ny3Nv~)ar>)K9PD13>tOucwa8V)fBq; z9x5Ke92AIFdq_>;m6kair<`V8o9_N~-Pt(QR>m}yLhDkBQD0PkXte41V~+mt=5-)oY2Kz8J4;{ScJz&TF0m5kSH)G5Y7** zL-FfI)CH1v5Yo*%SMMHJo(MOKIY_=w()NuS+e$Jd?!y4fyYWJhx7^FhjWCID*Y{V# zp*gn{7I$OM%Y&=e+McX_q4%Die+(!JJh_*lxTq{y5+KP5Oq$`~B~Qdd1W!)A zmV0I4w;%??qXT~a_ofLbOSbyJvfruf1~cFEwX~0} zV|6xf=-RF28XM_wp?@hkdyu}jHi#n*hqSlsz)W~6r?~m<~6CZAM(DhTC|@~A}ZIls6!buEYbx1swWs?gF|Gpu&f2X8s~>h zr&8Kh0bI(^zh#^VLdt8M+xwiV=N@XkwtO&(h3IFdCpw)uZ#9MZP18#WsLM|fG6Xwm z1s+szxhVWz0EwRTI!Ek%%)9Y0q&L^0*NBBDdK|BGOdK-`M6NuBYhTR@QW6U{r>1zD zwx%Yg5)4I7h5ql>I0WPWIlcS8^UHD-TCkUfoi?Oje<+M@;Y~y8vt{I*$F&AH2h!E> zqG#RQc<`{!_w&br>|R!E(0}@I46o@awpT2O57X&8CGG@AA|9bvPaAx>h7KaTZe~lR zip>ywrP}X-jsa_GP-`T+9jU*n7hs#V0EyWD&e(sukvf6o6-6TWTux|_-JPQCH_??$ zQZ7|)Y9{faYWu(T_90v2Pb_|Z+(B(CMd(g^C$1gi{qQ-ivFzcc_dIQ2el((#SgGfb zcBja1aW=%NxtZya1oLN|Jc~mZ!+1<5f6;+&3`J*iD^{)+VmJ3XF7Ejsh{p_@N<}DWXJL)* z(^J`;yR*ZySFw?xvrR6b%~}2>kLfQm7i$7*ym0*$rb0n~BqYXkVwP6g#O{|n&+SxT zSh){^52}6EwGj~V$d-ea?ENMSYbkAJeh0#5y}RfveqhzaXbQDgW%Qv&axGYY;bx5}S$8iS}3 z&K==ev`{Bm<>ZF+ya))ZdrKC-cWKAO#sV7f`tO2lEOS8en{O|2HdsS?n;92cN!)25 z01n;~rEj1*7o&9muXb8|vRIz0C0C>KtWVF)ixI7LuB5ZWyAh^w_(F6a+(`&n3Lp%U z26kUKvzxwV0#X@&Wc`@*g}Oyw_=+1v3>yuk-sl!i2Hs91Y;67b4r zb0~$lg}F=Kb!$p!eAyV0)>wN+rhTYC^+?J#>WA>|S(Pt$eI|l>pb&*9% zPTOFc=bK38FT57onQ%|Ru*y;~oj9s|yY+0N-}(QvcLC5SS?Dc?OexN+L_?u#!r0=z&#^ zaPnsn*KTS+e&!6dnzBB+wX7W4Fo){Y0gX(C>wJT@wpt&ndLAjNdqSD0ptaRK`2mkI zWHdw2fJrZRoSUhCyu;pcTu=sgVo?2_%#($WY|~v={xpBPd?LikMPt{-d{GP05a|zy zdz*GnezV?yS``IAK&i-AFsiI(KmvBZg?SZlbiv=h_NKw@`4QFhm-+iER^`yCk$i*tia{cv<0E6 zryA{%;O>N*B{9Yh$@E+2*Uv>y{l0pHEmKk)pyYMJ?K$%Y z(xM%m4_ctTIMYUYdesV+xA)HVJkp`lETdU&ZQWpa&sTM&dCa^-M!9MmX*rZEK015$ z)A5N(;!F-|d3mz*^6Z|IoX9%BUedl@)GDosBp_QT2u4u(r+zgJoxVIm{b6bamlI!` zPBU4dBmEAp0?(3p^}-+adHW~GjVmal8_`C1Chwv0*;wbn_rT3tc82BQk6 zJohd^sUYGYSjIf8YEqtcK>go$#dfFaBHUTDH{Kl2b0k%Kh+G!i{&b&A#sklzf_|`{ z^w|1H4v7}KJ5pWc!o}JnCD$p&SSEik<&viH3JVgm9`Tj_SP~2}&)-faees&oS~8KB z2K2J;ZgHj~at=<8J|8l8NIo&gYW}R|ImJHYzLrQ^OWo=}p>^IFVz<+Kfk}|)cs3c1 zaT0nUv0zc^c*x*&ws}I=BE3WLuC<3nND9@RzU6xuW(py_>R^mX-k2FcYVJxg*36i- z`UT&?gzq@zhuC(XCpeV38hnjaz}#3sn4=$y=j?Q$W(NR57xI)zZ8!4lUmQkV>iye? zyZl7Iaw!gb>p%5-Sm$ocq~xWEmh_bx(NCaOyt!V=WTCQOCB9en3#j4iU(+?QW{;Bz zYb`nl_q5>gXDU~% zlGToW*m*CmoqFN1lWHNbW|pp4AxogVwe*L1*lJ0;X;LRC=-S$%@C(hbO&Ux8hv+)l zXL;s-#(>aIdVNY{{J3dNu|An_b%+o@kisK}SEM6#HELdwt`=Geo>JJ$P^fkmE-fI~ z`%-WdETf)Qkd{?fQKC`ykiJv%e@zznpTWWN7|+4|uF0qE_0Hh?om9h~q`)S7VPWCl z>V+`?B}97v|5N!jM^Jlo#gYnP67ZfW~#laY~1;hioc4y2!tpK-hSlZP}}~u z{W%X3^_k-ScyiyD09_W8kY6eD?FNac|&z;SJ~ zGmCijFK7<+KOa+79CdKYzfu-Ul0(GFq3OGuf0apwDKWowVvOPJcpZw16Nmvcne3d9 zXg}J(B=euc@y*+>r)5zNGJ_=LY@lA<2R9MG>KHq%&?}iR80rH9s(W~W+aHx*qGvt~ zofp3YB_?1V>`B-Uzg-MHj|Y+0^(NoDvzs_9E-E=qF)=Q50bOtGVIvRDO37;K$;0_-)x9qq_nb(?A;0F3;n7or%X!)yA?LX@6 z)d*e5j_5Qdq%1#Jm{h)!0vLWDKB;HXQ7^mlYH)e6u|14AQx$#rHVt^&xSOc)c#|K5 z)t(tlscEj{}pfPy1HalrrZmsd#du0H5>=jTsl`;7A29#J>+WoHDVC$=O z{JHB?%}M3DlB`ER+8QKg%n2oKulm!FIU^t;xPyYB$0yGSf?E+^KRmBv%pz~GDW3j{ zF$M0nSK!9ONO*EPif)Tq`sz}_)u!r7O?UaS1@6SM9Zcn%n07R2#?*NS*Iq86rT+sTr{0yEI$g^v>Q zi*#ed8{u_h4C2r-n<+|#-IVgQ7{BODRTn}Uj?xOqMe=zdER(#R>S6yY_6YUKv#hG})qY4}DSH%8W}gw z3nW*eD$LbCl>I1P5H?pUT$2L&Ug?YT`v&;1#NQvH>=3YaUtPO!*tw$HlPYRInsb@k zTs#y!m8VD^ul-k>HAf%_8#|W&q^vj#j(VWVNqrJDoyzXB$8NTVy`m`nul8bK{q&7> zmzKyuSWa=L6lfP(h~O>VLy1;-Pd^V=UWd2v#hNy5TL*7E!@A$~&A$7qC28h!p3<$F z4)=}HrqwTGn}eRb_~jjIg49HWVonYhd0Tj41+^IQnfcW3^<8?}w6PSE`M4t|L1$pI z+-E~cUN+1($dS1j2_SF2B5~Vj+Td}BSe7j#e!GwxS5>|JDG}YWe6=sB!A;>}DhHzA z_Nv{5dQzebZO2->XgVp*IDhX5BAeP-murQV-H7mi84O2{mQDx=sNqFzb2~kkV(SYd z5Q&k|EGGRBoLc!c8Lud%XoT}TMEVR71(gfPq&_O}>6|a*fOQ}m5|xMq@x{QQEmLfo zKA;|R@K4-2z-8r&X<-0=3M2m_k*l;ka{vpA^w3b`LjXl^Ox!vMhaZ;SGT&} z$7j5&H}C4@d1Xe&RlH!mGy9`Yrrs^}i>@#h-YiSU3M1acSu)|g9|snU{|nJs(_e{J z%cLU!@*5CL=m15Sz=Rk<@ig>1oKp}thMCJMy@9l9k)slJqQqD9hM z#%Www%!+XT)xxDY+s0qK$>RsP#?Vuiah#Uge}{A}YeL=>3BNW7s6eCi1^-Ombr zAaiSp(vAM0_Um{1@{K>=m=z0lTgwG!%gEFX?_rkmr~LumiSV_K-9=)3DVF{~A{UL9 z{r7x=&6~NuU$5r~huaHqegY(eL>7Y9MpFMge`9vXXs>Y>CdZ~+v!W_&WTxAT9lLmvM)iJS%x9tmIb;1&9AQ% zS{#gw1IV6gZT;(>yg6g{?(^fjX9kZfq}mhcWRk?1@3iZD{Q`EhTbnKGd&@3FOqz8d zFm{~YTg@?FIk&!d$LhaG2cperfR@j%J6G|S#ghr|`ZW@WFVwvq;7UgUCLeoi)6d0ZQ|@IGfJ`j4!NI8Z79w_wc538=t^-ZUQ(lB>g3< z84zc@RLf&ZG^wwF1k0=&HpJ4tsj_3%gwIHN_q;J-owNU!8s?2!JV_ltKMc`II)k7O zTcGYL1N}I5KDflCmv4%>#BNV(Xf18) z$SrG43{~pCFt7cgs-*jkJyI<(@Qk!xx*lUE9A2XCjaLx4SaOfwk)v}w0l)e}Z1Q0y z=G2BEcJG5U%`Zli)_%^r!w8f{g=F9VZO;hfHPM*ZyMGveb%NPZDV&BKdHF+IO!nqH zBMidr`^e0RY|e0WzOhV)VxO|+a%sn?*Y_Bku~mH}8vazq`)7Fgq(3vp4?|55vAx(j zb#7~GH(NBl5qXVkF$(VJ?C11T`Np>?Kzs7YvFF8LU$SY${L7OKxWb9VZ5r+4z%Vr0 z!d`{>m`pU%QkZ<~tY~4Sp>e3A5TK7i!v-?)Z@yKIWHm(j;Ez|ct1W)7TRxHT`DUY4 zlOBVxvJZBvvp#b;SCqYJ4 zk8KXv>Yvj!_l3xY$yFxW)WOs;r8e7HB)n%l>19rQhV8T#wWgZ7y@_r!Sj)h zTf^B~6~+%%Gs^eKg&#L0diYudkC+5}8wnwkK(#RUL!}+*EP?-f%A5Jardw2GuIOY- z?mfQ~z+Xu?>?+maD0U!%8ydfDms(-@oOZL2S5mB_P|NpI+Hfob1k6x-Cv?sXLV;MF z+P!*@=tsTEvK?`9hem}>lJW_kGnr`jaI6bpbp>-i4_M z7=SPFD&*OGM`-Gw!K<^n`!w02^38n%wEky znQRy|0f4gg_ab6VBYn?5{{?2854LJf{5_wp=PV2bujU3(wi@#RtEpgddj%{+F{JlmU?oVr%;= zAsLr*$BU!%<_g>gFmV0gobvJZ@f|;<7<;{=-}2&}kQBN>$YCc0;!Jj&H0iKbm=_|_ zkE!bLb;Hh!bfh#(CUY1$`TF|27uyP>v_W##>t#O4ia*^%ycD)9Bvu80QNDeDfom=c zG42umGszQx4>}D}#WL&+Et0ReLPJSi|5uqipfnLk{eM&D)_HHv4RsR(MwuYm9N~@J z{}*kpA|(UMz-N@Cmf=gVG-sXBtt{9_qw7Uvc3mxFb$>LQSMUEvX^y4zKOEeDljbHw zgi1k-i%AQyzwfsJjxVl8fx5Qs2l&t4xU*O5BSSl8kaG3hP)L45JZ=GZ$_7=p^XAgO z$9_3*>m)r#);guoK&WP5F@ib1Id0}Brd#qzSXQHc*Z1O%6+yePd<7_0PwCdpg@sm&<&R z{XK&eENmZLljfK^KEpllxs5VLycmcB5nhQhNM1|-kLKRGtBvms`)#q{QYZusTC}(m zq)?nfDHJL04#k5Pr)Vh@C|(+@xVuYmceg-`2X~(E{hep6v(76x`E%CFteM%f_sm@P zb$>2N=}r9gp`U!hm3}X04!)0d_VBF2Rao1+^KdQyQRFz3++QJJexDtn!Bl2iF2O#F z33Ju|p4oaeqh!=L=f5xe#XNA=N+szi`ITKe)@1Vp^o zS$+GA2D%r}Irm-8dUjKmO23(eQq8cvFs6ves}#?>`6dUP{Qp2^-YeDJ5eBwo@$Xj7 zv{V6$+77?M0!#&*?+gt7U6Vq=L=aBj?et!ZLZ%W$j zp8HZyG7;Ygbcjc}5u;Z7`!Ml{yVStK%Y#YCvwFC%Jrv*3x;trHz#fN6SXsrf5kTDhX+0*JznT0*#Mh2}5E1aym#c*N z^!Z@QwO<(fZ4>GMlSDp^FQ(Zx6%&X)ED}7jy1wKXV`Br*po=)}R`U<>pqI zK)7&WhbAv!+E+PtpVJ?n7kZd2GP*hB?yru#l=$n?RvYgG6Q?nI+5uR2U+{QnBz}u@ zl%7eT-A6fru!cdGX4~7LJwhvR&Y&-?$o3KoCi-~cF+($mvR^I(xn!=*S|yMglpuICoFSBefnPnH6U}lah_m*0fjZ6MemL7@%$1cewyc6NVDkX z;gy%3uBjYQj=Tn`>9y*l(e)b~JasU>Df($4QnM(QReHbN5oU32F|bEEXgjE>M_PxG z6O~dnw7EF;aup={KS`U?ddh^7Ze6^}DlJzRV3-FEi-7Y{1$Wj-KS_Vx{)h{fCP?f~4iirN z=0zBIL{E%srI8^{(o>LVbgA(RcCO3k!!yO|CV>4?3oi<5^ECwN!=TI|hf)CU()q+3{`r3!?1klwb{z$QML!`N)Q`4 zh2V9gCxm7B`U3}!L|q@OShw(leUpxHlfh5Vpo7ih;SBDyA9S8Ar*MDc#i6E+N8@X` z@XZ=>Mc}~9C9~KHyPZ5-R5c_M$ttS=oiPwYvzL~Zwnp8XaKL5e%RT4zaD<|JoMW(? zpbX8d?cOq_dpZ(ED{z7Y=h&JgNfLGjizGouen2sR^&BspGJis`vVF@Rt}#Vu#Yzcw zRVyqu$KB)!Q|)e&uJ25$h-=WLy5o3{9XJCC!q-P}JRT%GJHX zEU3yy+{9Dcx!c+`#MB&g4SXZooaQ7NqI z^EgNT_ABhCO3eS(1&{M*ULWysMk7t>G)Qaxl;WopR&M9pIZW$7wyp3xvw8uQvk;&UZlQ{&KJFW)AS!dsuB z&%0@mApC!ynQ?Tj;x=}_BC9kU=yht)oQIc!{z^6n#k19TnT1-!oH2U+lUREGJ%}@z z6Nm}I4%>_DMBe2R@(ygog~HxNaQaO@b^w0pqU+;E9v>~vx8ZF5Hh_OJAIE)pe1;CV zTC7=?t2yQ0N`pVD8zyeA|C-AaGEMWYN!EA(H$k3e+L&k~-C2j(NU|T1tsNxK2a^u7 z9`ME$`cUzVmm|GSdqCr(U6bkL#cGcx)kU#cK(wGj56Ya(Il|Z7B0%-7A@GMeU6I`M zLiLpYt@#gBTjNn%!^#-NFtH-kz6N(o?N^rXWJf* zbffEB@c!ebC-^klg?i_~p>5q-iT=V#JN3d#+s7bTd&_x`X+UV1MW|eueO7G1pxZZ- zVdYK&jceqeW&LwGSHAZL+bexK$=xVz$wO%V4aq;8E^PR)Ty@(;YkvGpi{($fl{YcI z;l8gti4k!J7|%p|>ns@=cwiDz{i<#!{oopKAQ+33P&G>*D#aGg))@habiC5n4{16CuBAZr>UQaRR%h)4t0or(_!*DMtK20`kLp zqR7m8;(lFS9vxh5UNIG6)R2WDJO1u_Brgs&C`O~Ff)&Khgeog5WwAdqoEm{I^*^Tf z^|kn(ULeUw1)(XGFWP!PL=OzrNKwGoOT0}J*J1r**aL{>R9^l;ijxZdVWpVl*|AdX zHUlq?K`Wh9!Bi_RO10v%=~W2h=^poZE@G6XDsh6G7N}m0QV?z^_1j9K-(dQ8 zYc{;K`jJk2e2x9Fc{H@Lgupo}px1J}}v2=$qQZCUZvVHASRKpHsGLYVrg zJ{OB_>rJ=h>OoG=q^OHVDz6fDv}CQ#RXXYo!T4-Y0{2jtBM7cE1ew!A^1>QJZ6@;& zN;t_hKG?UJ4uP>;;xRl9dy!Na3_^^X?ULGXgmeugFEnRXjr=nf!0=rLuG*%Pj#mG& zvZ)cW_{L46LA1VOZZJF$`*jpzY#RbfKhggJSk@a86e)NQi%G#Age$&aF`qV75VZYfD_d~wMI^$Q%I`NSiUs``d_okcAS zgrI!igV!uR$bjj)%A}x*+Ke1w3Vvk6E=ZP!;H9#`a!4ZX9mVL-kcxhj3%SMNO44NM zQe&`&wj((~veWv&fsfbHCyH99&mBbv)N9waPH(Ll)K+$Pp6HDdXtZ+pXBu@uaP82ipXcR#o)N)9pcEjF+GHqImT$ z@3X4Ko~X}qQueqgQwN(CeMRSQX8!>`8+&VO)zY=m7}b3;MD|eRRh~4d!U9nz$A9Dk zy34bttuyG~tsMQ*VGT9I)XQ&Kg?Bt}}CzP&(Zj#BEhcnj1z zMamr%$!}FVz_>a*d;B*|;Qmmfdb&}rL}b#4hu6y!H6X-0+w(1W3Xs{ui5GU-Y|fYu zrDZ}&2m8wUpZ=myQB-L`Wjoc*WcKv#b+V@g=Ez+W66WtnRJt%is=RC?m@14NCGzOM z4o95;f|4t1`uTJ-{|ggBZV3vQ;1-TU&10-MXCWto@tv$WG%M^Z5~ASZkXV!lbcWl% zS%fkQa-p?!kqRAi445bgDDz>{I7 z1}@k^&2wZr)XHX?E;O~`ia1^0UU`{*H~}}q$0+IS0~ln5S}P^lYK=@6mXPurxc*5> zP6Vof5ojwuN8-)fr-Bpgv&4nq=zj5~C?rSn*srFgz7a-@Ovb!Ob=N22nIe;fk~dDc z*X+{q)Kk9dsl?(7)L8f`W4*RYV0f2rKJUxi*70|^@}FyCY)|#`5tg2v2A?j0Yc!mD zv{gbhuO!n`B%?SJZM6e+tvjG`rjYbZer-#=fvGYriZ4B5p4*Md1)qH27!NBbzuA$i zmJ1N?9C?JpE|Y0j3U~{f`4O?^n2^29)MezZ`ybEkN)$dbhMT^{6cxSTo0KAk9A*I7 ze}m1y&W?i&1L#_ZzSV3v&r*18TVd?X+!-Em=pcxz%Ss2%3^nFBnL-w9m@Fu`J9@?h z_Q@IRZoKR*-lWtP=?i=D6LHqy3WfbN6WJP&gd|*#$X71hqo89 z!fVqCJ;FoEAQC@9SePcMrYwuWlnd?OHMF(}^N=%q7-<8Orj5WEu2QdP0J7e_X~gpc z_l>x2ru_7C+u(HFzPV4j7)b^ms67gIqcLM!bQz5acOlQjR5Anv*tg@mZ=O$l-uM>c zU6Y=8-s6BCH9LHi(Cn8w_!44XHrhXH=8b%7Az*uYcVUuiaDk5@Gh^%9X2_Y@T3J3s zB~1(;VgXh%N(eR*Id`o|-}n9zx)ByLE8r)1b3pyAbVay(qEXJrZ1-6Lj2H>neX4nV zO|$OppbT5ZV@LVF*4%Rp<^;+(jUhmqDtg~0YSHTOgN!C)jq zCl<(^f<7hFgNR688;pE^q1XU6De!hBT5RnwO-&}}x~_E4a5>S^nB3GghlPR}yNCUT z=Wm5IP9>6@^!W}0>%AZhc^6JGa(Ci8Q^-#BJKgH-tp98AY?C)g^L*2nHN#<5GN|*& z<5SiKisie3Uzn-N*Dfzq5AGp&7L((0c+T)&8q zNyR({@WQ~?RJB99!K9`85CLy$28Qq7n0B;xF$;xheAL0C2*#~-xlu%OC^BARi!tNbvmOiqe>b^C!6THe6^M zXz67}=bnp>;B{fjKKx4pQSg}8h-*sgod&<^&5Kshk?d*& z9`Hno^{G6NNOhMS#im^v&CK?Zv(|MBXiFrzfj@KFS~`o_(T1DxNNeot z{DOVD$wEC?!USx?&!n~oh_`Kw{#TtUNfz&@Notjt*Ux|wGO}0jfQo)5c!POKv==JRn=J;d#o|O$nOjd6Kv#5NnH?}3Wh7PBt zWu+a$*^bpmU`DmWFCQ-MkT?X1ePl|_w?}N;5nyz@l{}qyJeO_0-KPh~A=&V{|5S6_ z;^f=zCMrOP+ik|;z4BICOl?RRYmn*T~Z3^0EDhNpv2b?8Rt@4XXU&AIfD z3~7=#`C;_&ZNL<+#-DK0%M`5>Ch(JL9w%wZ;rJpwoTd|CMqxUcp7r@m70)e2n84_I zMuz;FH}HSR0*H5;rErZf_3}(q(n`pCl{8@hCEpXrAbT=`6?imD!o1`5Hmk(1T=me) zWO1gGps0zfgR|BV;DHS9;EDba6b8bevZHPxg3}xsJgItg%}wYs_?aQPuwp2R`s@7S>pYeq5=;K!D!s8 z?E6Em3ggLuUL#emOc+-E209s!L(W9e=JDpfVf$!SwrkY|FwZa{Wz+?I6Qgc+z&PN< z#9SFmVNMf&IQ>&60{%(3{@yA5$Ay`ZK6&#@_q(l~j5=DYPY>s$V}uFfH8YIxoN9$?@L2ApHVKt z+JEsn?LSwZ!^H04B9*;`sH6Xh~ynT@9}fE*9qSOIGLG0q&q z2`2`s!I$=1*X;Va>Sb?mXb+tjkEM>}`-t%m<R+D zCN^uIeQP`b+fO(|8JCli`v;j=Z9`Ni-pz5qNvuT_2m1TR2`qCt z*D*aNf89VkiWuj^WiI*iEP+^baN*x|N#?kq-+~Z4~2hG~m zE=mRB9RH-Sy)b2U+rU{h1*{?&DBTJk6yu;Zu{KSN@Wfw4iCD18FZn{Ts)fHSJmru& zX@tS~>k}jcX@ps0ISBHUYl*T;^OyauAf2lUJhL%_4*OF2<&}1{GFW}y9>XtAX+&F` z+rM(UC!+Agv>Hk8h(9PQcT5f;<&3@Nv{G8EGD#|>TbNmh0|hJrX5~aRH|E*y+gfe| zBX=85pFNI6MKrb`bFnQ7*o zEPmv(3h78uj{)%eq0nbC1HekA2D5Zll{0^QMYI(^9u{_fQJj6>q@L;1pqH9)TFs|s zpsmz|FEZLMK5BL&>hR+xk$r*n$?@?d3OnNb&(kd3=gZU5N~{a!KS9B zTU640pMO6V5=!65Tw?O-fRCrTHE+Y4E;oGj)Utl>Wj=F@CXbpd@z4~gtB+Mv6Zl@zFZ-hq~TYy&@?tP&5*B?e~@faz}bmBn497x`Vd?KiecK2 zv+zSA^KyQ^jrpt*8o)xC$QH@dDPfYA@Pi-=W#{der=NT`r?T|J118n=8{M#w2}SXC zcp)z>e^=kO?&(;|ZN9_3_%tjB<)BI2HcR@|X2bYOZnXX-r)=sAUT?{5qIFdin z&>$oeCBL|(=}k*ppH5fe$<&Z**=DBl}F;1-9!4+Zp?TiMd!WGux4cWiY)8NkJlfm#6&FG10(L2w; z>GMzd9qY64YX9v+p^cvsB8v9>;&26BRw+ZgOQ3EzXfy(n-Hf7z_`dt^D%uYPt%zJs z27{wiUEL6d>H3>iwT5yy#${~x*Xz+*^G@TxVl__v{Oz=}27endo~}<{hH_QW!eV3N zxNY03On|`^a5b7IatBQ7aPXH@UfRK@Hs`LbvS)md(kyVjb6QH3N5xy#k5or#o~S^< z8y!+YsNCa%!y8P%P$_|9{AQ!055pYh-7)xa6|F2NR40atB<*Z&ba%^d50!*#I_j~& zmt`snkO8pD;bfPiBCjC@R)kG+MHYOCH`qMS$t9GGoP|4JjuU=D+Rp!t9yH63DZe_z zU0+{czyup{w?sI~grtAhZ(hRi$tQtG>@I$F8u`SSx!6Qq?(Pw_(?tq#%m~@Ar!mS~ zBj6a+Wy7RXcq~WD!}&P|ihe8O!J%4V?79av<-ruU@W99<`&K9!(HCal&30pI0e799 zX5qr56CsG1H{7s#`O4|7j8-}@@kNfnlkw_*_iyUF>c2q5^W(yb`q<2Y<-a%eXcAdT zk$}dgt<;GNrLO+U*JPbr;ah9mSYGEXQE?QMNIG8d)SLn%8Fjb6PPu>(P@Six0@~+I zt$iH{h=7q;14Zue=)d1LF)G9kAt= z8Mw+_GIT~xp+st2B;~d6;@4Roo;5Y*Qd#uIW-@{s;0yIHV>-_^*`;{08ZR|NzY*oY z$D@-j?D`f0Y}+O0R#F_kl*Mg(#xa;{{vuN2)k!5soSmQdgkTYu`dmSjm-ly_>w`vq z6?Qa+te{J=#^M#2JX;Zpm@9MVJy|l~umwG9W6!@4D{)FRhdE zCLeuonoki0U5NF|IB&FbmaL1jSxM|A%m#sK;neZ*@j#@Ki^x2#Ir1y;UQ-+zUyhqr zUrn+*yO|HKDY)6Fgh(Jq))^L6g~^GQLoqF;g$oQA(OV(v8jKqCKL(|7WC4=Pj$co! zOeEPV-MPYFFWw{)<#8qB(z&vM6zs8yrzMlkgp@y`>1DSH{mp**d`itsCMD(!xo+NQaM`IA z10AU7gzxUUD{!-{xOj*U)MX*;*tXZMtu9-i4@cv+oW8arHE$#p__K&yvlO0MsCaFw z>*~yqEF0mh9k4N{fh;7t!Fy>dpK&uSkC6ne9%wC02UtIvbW+wcW10*--)rPW9j797W4t zH>JZh9A~$pfwQG67RFEvn|0>*_|DyqEpHK?a;h@N^e4 z5czji@yg7yP{aX8x0jEy`}wP41vZk~&Ozx3(x!p4yq5}=WSg^-?^1(Om%Jd;oi7Hi z{gBT%lcyC*E~d1UQ}g4;bvFaNUe7y&5o$-$@_OP>R*YGGj{y)G35~hBep|d1U+NX5 zOSsrb(+GOn=nO67yQ*r#*WnlPZx{#w3@Ld?+%JVR(llZ|_4n{lPD6vZ)m{Sd$Z6Aa zQ(i?SZ89OpA2A6(8BYn{i8@g?ehD4#uEZ|a2$RJ5!~pv}(PwQK_)%5QWQ5CnM~2|$ z%IalFV*ZRs5&3nf;)b11kCoaf_Ll!~jxR~2D{H^Jev8hXZrlWac5~-EGx9`q|2q*p zNl8h@SFh+d=662(@Bel=JpP_HZ??{)nk*J4OsbjrmYiVCl#F4RU0WXroh|E~Un6W_ z0$FRe-rEZhW_7!WN9*j;6B7KRxaZ{DaFSFm+4H-dU*hdfwp7#;tEh}w?e775t&iJ! z$nNAfkWyE8U|Ap_em1MK&xl=i-gD+nGMxFiR{SZzH*opa2V9XbxVsY4IWuQz(!#iy zkF5e_EIRMgvlEhmVoP=L{JAFXB#=YDs8)0f(bCk+&TYXt(kokw@&SEUz7Z<$17D+1 z)7TFvl3BDiN5Ev&jl3k`h+lR`sxvv4>CA9DmIYCSa{cbtgDs6PKqu#be>&Tj@tVi{ z%9ss4EONPp26>%tztrBGD<5qfpc9*j-MrF*f_hx_I28Q6qxJL4xbU~>-5rFIs0_RO zhx&hZSz7y@>=WPZ_U8&WR%0IBo3kB?H(;ImS5xz}EyraU^@m90lG=zV%k|Jp`#yb9a4Qg_N?zq z7=s(^mg6gu>p|9>e=;5k6`g)d_>eZUjxpAKosk3EO?u>XcZ1jqVR_e*?T2Wr%PvFF z=`~I!v-2KT;=F)1ovh&F0VV|%6N8-rTkB(=38HG%vpn+z^!=C3Ttg1lsn!f# zO*JqNXP0O+isqqIGJTi%(q;=0U>6HOHpAtdjLU<*0>(MRyM768sYp8#A1pCkVA;8g znsg*#bkJ4f48!e0$QzGvyqM>bH}rp%gE@2|J7o_0VlE$rpNDuziGYt! z2+f1;?F_c)GKz^Zsxr%H*{$afZzwu=8(QdroX@%5`I9zE8Q)UfvAF+&~c@I9)|fd-_{+9}$eKwSx$LmDq}Z&*W|=wCqls z#!r8sEMgsH3y~m;8T0X4?#KMO9xe$l?X*J&j6vWxPKu{f%=uQE+r~j$Z7a@HY}YUN z{A*EMUjf>=Xo06>lst$b3C&OF6#+SvzN2N2o-G1Z3o<>A*bBQv|9vPlpgw;jILSNk Uda-)_?CGZ{tNON7+BoR{08he3;s5{u diff --git a/windows/security/threat-protection/device-control/images/create-profile.png b/windows/security/threat-protection/device-control/images/create-profile.png index ada168228ea08f5eaa533420bcc539f695216f84..b0b7eb7237e00bc620fd3873e34571a0d24026aa 100644 GIT binary patch literal 15388 zcmeIZcUV*1wmus56BGnQ1(d2$K%|NEt^x|uL24)}z4sc5ic+Kr2uMdjkX{pN2uhO@ zKmr5^y|)m0Ac62(eCM9C_u2Q}-@W&_&vX9T>mifLTv=<*HP#qozT+K(2rZ50G*rw~ zAP|T~MOje?1Ujz*d^|6m2Sy?&ZeIm{U3OJA@&JKo+s;1c5_xG^fI&)66?G-b1*+?p z1g>f~LvDaTw?Qh3PhR?_<0hddU#!Td+jL=%+j%@iURJR>8Wg+SyxFeTr<-e$y13Ot1oQKx2hLO_qHMN zpAXvx8c$aahMuR9VUDZujGJ_zScly8QGLuG1ZyhEI}E$_ z{Pn!vk;$}hTW;WmRHdhL*L`T2hkR3Y3}-sjd`fj zJZE4)xh?d2b7@)buBBbOosB~KsOtOaw=B+el?N{^E4|(jHYXc>@Z_)i%BArNc=9}r z_{3-x;)1L8`SazQM3U?2+hP+s|6y&?HK5l(mXo=?wHCT|54**3mF>DN>9Nf&Zx}6` zl&39WAa=wmtN7ttRfESf!x?3bDtY?8rnBqN?`5W11+=D8J{yDe3Z0KLkVtccDniQC zM^|CHLr&$GVsG{O8o4b_VeoEF;m30(Z;r>;q)ZKba=tsUAj=HaL!`Xw*1AD1g5@vb z61aPUJz1r9a_5udtAuU(>KHdYC!>)`S)Q4Eg}Q)5DL(FP9Mu|ChrEB!%(I(_I@r@i zr#5nrd!HJ+CwU=lGSzC?{d0Efsk69qD>XgU9JP|OZ8B2@z`IL=GX8rjBQ^YD*v!b1 zdLH$(FgkH&Qg}ED-r3-0K`p|3+%MaW>x0z=;R_rRuc~pC&J$WMUk**E&p*Nl z9r}1ZbCi>t`e`b4tHEcVAl$|?%5a-BEsCw zgfOVu$gASS*`SlVB`g@I-@XtX#~rYe(sLxyzQ3j*bG+_#h}S$tzo?#pn&ZZYPVUlx z{Y7Ly+?M0iIt8&aoQ#G$+T}A|7_W_uWMR7wP4=1({Ybs+5Zr!87J7i^sGLhow1dcL zXqZ8BYWC9iK}?Se=*o~C-iZR)s>?BDKl8T_wnuyh5;KO9GbQ{Qa(?Z932xDo3UtlL zNU&sK&ONzKR-B-=lMk1#X9d|CqmXw7;f|87 zGc8R=)IOUNW31=S&Nlf`e+uFobgo$PCBM6HL`my7QTKX$uV4uU+1f*+Bg920O_v)^ zHF2Cdcvq`NxYHWb!L|BdnA%pohJ$lX!8|;rB_$BO3`YyW%M)qh!LI?$0Dc_2T5LBg z*yVOs3-WQ}DfKp*X1Ij0o*Jk4Ndxaw$mA0U;+HxD@FvotJAhfEp5=z8-{(j8d^nn- zx5kM>mHXEtKgHP3|E4ZRx}A^+(=Z2{jGvVUnp94o2IuGI*ae7{EBGWM=iGHgyVYs_ zYTzM0MMCQ&jXSN%qRT8!mPebK5LhCKG?G2uiT-XprtD7;&RJcxIPj6o?B^v>4@5i6|6^L4?FPC$Sn-s6VF_h! z3u{R6t#LMycOs%sh|jNZ2?{m7JH^cj;JH#;%|)UcA`e)*)c>5V`$^nyEK7 zBHAec#ZU)wa(Eus(TT-&b~bJX1v5=eO&J_EWI31U-tmZc?YG8SY@qpCKXR>M%1?nu zs>wp0987aK5e*bvu5@!CP)wl=%F z1Ue46x%5KUX6A9>YlGD`9woIYVX-yN6WJ%|*X_K#->ckr@;V**Mpz}ajqNAve#!(a zbQ_o-_;R>P?z;F`orEx)9X1cvV|)4-CFYO!G5Ifl*U>Nu_~B9+NADFH!97(DlFh}; zxB$N^c$gS}N46Y!v?O;9hjrlKmXRwAB)#oQV9%0S-9Er!JEO}|lc{Z|r(lL2)T?7? zK$5HwPUyjg9d=&F=_L4p0moRqaJ3{wOkM9$1GI7^rMp{qu@7CqyOuS0>`&b5(p^+9 z{Orck*9xeuix~4{CbPRiwY<>Dg!$=U0RBa$jN8+Rm9T`7d(+at_`pJym7>yoi~?Uz ze^NN?jEjQfYq%tVm0M5p8{N&b>G#`ZlsOrySsLyBR?25DubCRec)Qd>G=LBNgQY zkDP`D@BVqT@yE?V27&_w0@z50JZnLq8n(*n*N2Em#y+OF%dwh8M%$l)B{sJ^xtou> zi??&op1i2t$D;#*e=$IXOAD7C10; z&x4C3JUU#}lf}qEW@cuIV4J@5qod?_JQbB@rYF&K7NYHzKi8Wgm0SA>U0^C-HAO*) z>X0*S@LV1IKJs=0uuHV2I`qDC4V+gNm>-YSbQ{w#Wn)+?0h`wH5uYe42*SnFLe@7B0?(0Hy`!?3_RcHG&l+~jc1;YPX#q^*2+P-l zxEt1=hTOs}!1%XxelUK9TlIX1NO=0xA8@lJBQ${Rl?3ctVNmY?{j=V^l;)&~B-8hc z?9!%YXA7WY8SEzOf&k+a2h31uA9!!#&W1<_j0XKGVCh@4cfD~FcGbAcfSEY5Z#I0q zwiUipH9xMZ(u6>i55m^n)RVI{*a8BYl=6U0L|!W9#I@$|FrrGB(?)TD%6xhzTjQsx zwCQ*1t8vBq?~s{troKaN6%{{9HilBVUz9$@5WB=gxbEFsu+9~_efxHvjq>-GD3GDJ z^Vh9IMf%H^F8xSJ-zyo4Mcb2I6fVj%Lffse)ebgG?=Dad4#L&a$et%ogr(WL2F*KF z;Tz-ix)E;n+T%(5=zR54l4B1bqfLxFm`m(nJ0d}`%^I7K-sFwxQ=?B2J1MNG5xKa@ zl$@Htd5Wm=@S(Sx4{rCuc&;+%mHU;UIy+UNgj2x4YGf0Dt-ii0P+Cy1@YatbQ@3{5 zq*RuqZc6ZqvR}P!@c=BS*@uN@5H4&I=ry_Q9X7#`s}$LJp`$bp)>X}4t!SBKWXEdBa0(`?daLB_jgOjY_2MW|8On|pVl27PZN2d!kvlbR$;GM(y>rQal6Cy$IfzElPlqt5+iRCoZOw?V&33~{$n_t$O)6+Rt z$k2_#y56z3riQ$l7}Ze96i zBpU$bAFtb9ceNTCh{Jf{-Jks7N(3L^V*}zFW``o?y)?G3fI!(^=~8YJN&90TFQ$e2 zMg*K#Jv(`Iy^01j@QIdT!KM_FR3ppeTP|HPP`Fz27 z5;-PAYTeVhnYE?#ZdkDLNia*0gyDeJxwD&ecWZnJBEfK$Mq_&K*v8>ryA0<sSWyy(3$ny(I_m-Jd&sLVQrcrI)aE*^!^ zjswv`f9*Mtz@4-H%~#Q{1TTXgi(0b$pBpocg5BN}VKSLqI(Z!gl4)(Ms;bJ#$$>SV z1HJ9^&64y8b-V!j(MAHk1h_&woHGbCBQ%wmn0R(K&a)2F)*=wrnNF&k!f4% zD=IqSk74{(Fnfb@Eg=C)ZLRZgs?O$`(h(5{{Y^8H5Iy~6k-fD^Xv@}iY{$)GnXzlk zx?kg6%Q;((cI%(!tyISjzEEt-tntEMe`c}1PXkI#EVl_kRa$8Oih_~4?KxzvrwR3e zS^cGi&YOGejvMJQW7XaPmM})zfY+Nd*-4Iv*R-l|R{W#>Uv1>%Ig8S=kQ&@_7f^To zZJh3J$O<+1IQU!zrN)*o7rAdjWXW-hdI_dMPda|DtTYEgFOnkWwe-nB&}S;D!6$|M zc5U-2;78dm)Zzg=5*0Sp;o*uhkJVn)T!%e8VgA3iTSH?Y*^qUmyU*(=gH2a4YGlqNi;n*&e8+~ znGn2L3K8*XpHmOaQkja&NJz`5?q$8FV+}E3aBOJ4o*ekO;cU(?!~LnyqsT9K$o}X? z%{BTzbeWC7eGX0=&5NyvPVESCKDGtc7%_?_<+D=?qR5@E&r>5q>`>NYINT0aGVL>RTH0ND^a7 zy01e;R(SYk2kCU%>#fFEQ*Fw0}SvkSrTciVNCB^Yo z&v#O$!yRh!$j2E1S_Ra5(&hRSD-T^qkop>I)>lT3BEk<>{Ar*fW#!@F!s`&|b?165 zd18iM!d?FruXj>`vF8$!1f$ovz;Db?;!1P8|2z^x*0>HuH&kPsjlY`Q29xQNe9YP8 zTdwAzFRr~;z-JwGyw}Dl<^}A=6AmK6vox4~piPZLKkPQ@H2P$i>z>-D8>v(a_b84} zB3~UXG*2EYDxQbNR`q_mLEmLaP|s#x=B{Ke2^g$42Z9 zOqHPUh~w@^&34(Xna^<^Rf>uW(;wB1qCN$@`teiLVti7{Q?VjkIYsugK+5X5($wbo zlTL#aG5R>?SdB7a-cjebl5&QM3$7!zVT(C9)C(S_LPG6z+o%;@a20+Rv20d+;jR8+ z+%k4Av>9v!e$y{_%_1QyKIYI=6BA2IGIKh|=l7mx40mz(ZrZP!F-;V_LFP`G@ZLb; z4H3Hn1vJDh*U@EXuahx22!027JES>dQhQ{J6Xvy^Q|yta%N?TpO*!-=JbazQR8d*E zG){lER$5W9ZJ-V+X zUgjL^lW^W_~gte~Q+fw*s2O?f+qR~MWmvJf(x zUTfA@yKclC=528MF5Y_^sTaJfe3FsCzWi+;&VoPPeHBa}R~03xYYkbKzob`%Nv*-L zS~N^gUgZIU*L8%M`>3D4es>U()w6WTW+Y}W-y5b*%n**hg53GfH1;6#?ocMSP&X0b0RAGaRg!9CJN4`!uy)LB#>5ffQ@B^M!Gu^Jb)%9-0 zwujC{S4|oJ{K$Y;o)zI=5aNLo8(w}Nfz{Ewv3rcl*9wq#*8>=6-{zyu3KzXy^V=c9 zh~zd8{0nEB^wg$1zTU^GcAVhFn5LnHrk8{?QRW33R^+R}%;#o(ywkO_?LsVOC0>u@ zj7jC&nS~vBOintPlK6L{e#Ynv)^g(heY+0pFEPBo91WX)3B=cLy&L@qendny=BAE* zVtJx~N8;Oi2|eFu5N*&Ybj+8Ak zROsAa;!h{#cnDJ7W7w%Dc-Gk za4LngGJ~bj!_=Y)4MO%q=1GAM;r_US&J$h?Dw-6c|JdfRb-@55C>&N-T#Cu%HPDDD zS&Qh~3cDHzxP?~1xmERYIia?j3xZ$(%xNe2Os7ApIFWSe)*D@^opN72#wp}CH?3xH zAvN3ZMAC9_-Rsrs3dDm!hvXIiy_l%1ee1Q*6e0Ei({S_hN)^adhVh1#p0dJ{{$p+JfJ~xq$xcI9M_1QFhptrl2qJHNKpn)s@K-B-} zjdEZ9PZ<4=!T;G_0POTbSc-8i2MFZ*LJw}Wya0EW2Z6S3EZsW?D!PLO{SP*F9gfxf zLY(;$sfMF~1lg^rG%LjRfp~;@W&S-{$&}%&xrC~$hnc&~*lXzZ&{EZ~RhXs& z-y>mB4C_L~CI}?plF3|4^ED+k?QaO;wM0J5r^A@se0m9pR=9lwG<00p#ih_@hNNsK zx34@hy*JqNQ94p3m-B^G;_V`6=^&Q8Ra~L%+&$w$dN#$&+^uS}uP=|}tUXBjdQG<^ z66V(fc6c)icF?Q*%Rw8(Y14B7BmiMgNsviyDy@>Spi;JzE~%X z>&epdd5m*Uu@uwm2%kcqz1-G4a1N6H!LR-0-eW0?XP}nF4&8Zpl%#^1hoa&=XD?^H z_>9GdG0T=-kC&n?1N$3cuUbJQ0_|n1dlVqs2bxycw<(1^%%h7d6aTvHsdKZ6HeqEEjn2+SCp z)7S6JbvR*}mZwNN*#hF*)_@UrvYvEo|IEWNB{{K=a{B>SzNZ1r7@0Z`nr}tj?gw(6 zFBRbD{<)dw2X|`f)i`rIs;bSZI;!(+D61%|xrsOgrDl6Uc`527tv$5vp?z${3bnt@<*3y|PKE(oP%V z?q2Ny@0;MzYyjSyP#Vh5&oBDM@17pvG!(lFrV%>Bu+GuYF~6^WIXb4NSFnWm3Y#P% zB_P*oCi=oNASvl}oxY$z$TjRW-8Y|5{~6g!Nozf*;<67Z_{-s&>OPz^zvzjc*K5E) z=ZfT?g^7N%E}5_3x@Q<^vgTIW^vTU$V{`B|jQv_oV1t-*x{)9_M?AJT5v}Jm6tz~w z>zQ}&gJ7kePp{V{Tgb#KG%N#`=PgL<@ZL@>-qJY7)J2z9D=-A!4jAPZC4uLl?0qA? zq-S&L)MAnCbKBkkl1C81)2f3%UMaMVJB_O^I;qFRX8JF$END7`!Ae=*ZDL}mN}*5k ztrBID0VhGSJ_alu{TAM?09VRivR+=Wmgg>qJgSM0`SL-CWaHG;^>@(4Z&9;~N+o_D z5V+80W;mRrNOQ%#kbAj{tM{GM4uS5WXDN9|^xmAKh5^H2Z&~!336wYf1`^i?K*I@s z#+2PAG0OD{uC^Zg($y6w3yj#v8q<+phKa1ynW3zpdfca@k}vh>mtxPRjsNnu_Y!@? z-yqc^yfm6y?cttG+i3ah7f1m5?b|o~;$f#IyPwuDV+DnE&YwySn}PAfcS09xDk=e? zZffLu(nKha+h32ndz7;MXa54%uQx)J5#cxSto)>1HgL=ry{_$fSjaWYOsiYB!C<&3 zW6Du_{Th>>?XlX}fl*v~sk}?EELXSIWK!FeA=QdIIo3m?H$EPyC2Kyp6YB3{6O>bQ zp+ow4mMm+Q$eAw+hP>2cUE)N=839q){;h&CcGFre%!@EtBd_Xjf83n=up@?+OIbDY zk|$|n1#dtgmh!V&fR?Z44)Cyd<8RkO05+^JLcDm`*rUQIMBRAi7U;xDn;uxLs6}@6 zyEyuTWANFt{kl3anrNy3E(&(c&bxDO#ZmeW#%46OZp0D|xJt+?}RQCGVe5fs;?q~{Uu9QLNn%{Ndvp;K41I(fTmliITPmX0X*Er+h(HB1eH z7eUDs{8Q|H3vsnm{;H|+ql!=i_gyOHn>B~qrbl&)URqHlCe z2f?Wm4EbU>w`@Cx{<7{8`AOMW55|)VIOcfo(VGle+KANe>O?)gAIOoYlkQ6P&XGF;FKUFy>S!lafM1xQ*xW{vTfYCxLUpCr&{4p7G%6nDN~Zm#9pF) z$qL5mm)1sXM@)#9XR#HlPb287tc+0O5Kj~9&{>V#a54Md&qX|_)cWR?y|1OZX*-lG zL`$#h&H{hvs(U9m%271V2^~oTicz|{He;Rkr7qF-mI(geGCglNa`$(23yoZa$#zLE z@d+Ywm9YFtDb4wFEda_CsmadHt`AYK!E`no`8*Tqnv?>c$ZQ0eOl*uQq*MqEr_R zd}v4N%IXo!zXq_XFx-s1ZPDtlvi%leV9zkoF?0dw*uOd1|9#U@U!^KD-cTuT+BI8P;P*% zc0_CHRax$8qHciB!SxO z>6?Rc8#y5C<|OTiy~-y#&7z}+En4@UF)p7?_Yw{O%ZA+r@2fDj7vRfScHF57psJ-uJ5N za=L}{m?$!5)_QsjuN`l#jrHvYxYGi7WUf&KfZlc|KF;R=knt}>zZ`Cyh$qkO{{8_J zGF=7=nSTDQq%vCp*tD_EOchzc2# z`pD+T8wF|))yNfx6Bj*}4(gnpop*gMfd<|#O*NVyPc1+)Cp`~#52GnbIAx?R*UcK$q5?{fBzw_1Geg|(FbgOjRM6`EH~;vGpxJ5$0aVyWI8V>kUu%tLuJ69~fM9H1_@yX)M;bGwD`n5ApANH71*_Zx$7i zo5lSO$=}WGEk^bqO>hP>MIH0~GIJehb|}0jN0^H92iyqfhtN>tQvKTP{EKPB_B1p! z`@W5(70G$f*q>l<{b_)HQVeEfs^I{+zFCfx2EX}q6S+!K0BDijvG>~-9F!o$&Yd|A zg6%53*hXeweDwouvnEYmwB%0NPZHhm^qNrM3%#j2-igI=`Iq9Dw?BuI(-Y4wWhrJ{ zkfLiW_<6hgWVyO(@B3N}b)!q+P#av$y!@gehU_zmIBLthPuWJ1QpfU5n@%^=MsqwDLh7_E z+56zU|9KFS#<)p#=l5L~#D0=UaD~b)KA~h8n1M+>EB<~w@6JL8ao6Sbg@V{)KAV8p z*oCrXX$<0U9Ur4?Sn8YBJT;lwK~cx+_@aX8p7Q3S)&)AB^11@ENM|QG*Oz(D-3`@v zt;!F2!+r|`K`l=3V!pjgLZz*}*iZVnvCenLsd9AgOJst!C4%7*<%wsY((<@x{IL=!4c$(|cXd6>62 zz@yxpZi&fA*RXN$0jf@8Uu&GjuhWs`Z-$HXn9KqHy&ugXPd;BZ2L%8@(SMx&mxuWO z@n@r z{PN0GFEgv&UXMt=rny(3LM7gRQ~2)iEL`v)ia`ZS)t&14I?{&)7cx*#uS$ux_9idc3rSg>z&^Qn*|WvlcjWi$$ z?tYXC(Y%m)=;E~R`pjXy3qJ>2(|r2^UqQICQUpKG9q+e5=FfAkXflS1Md~t z-s{xcl^1}h+b8O%U=sIHZ?f!uB|_dpEssZL<6yK>(3k+^iQ3>2yN6z*d^SFNPeL&2{FhUD{-b3sl**kh_uz+l(|_KfQK5`(c%Z%B%J{O_EcV zRbqI!gpW;=U~Z_=s)>N0TFODTl@FeKYBIjrYwV%#SQoC4PT$o>+blE~>JPMj6 z$XXT9S*B?oDJ4Vtx!9O7SJC{rLPH!E5+&%35RWd~&WR%o*ITeyzCNrCZ^zoA(?3H;2i?x;%!-PiFdK;+9vu02BtJd}7dxA4=d5L;D5VHr68?71gq)rFP$ z)*TX6s`Nft>5@l$ zRk04r5*tuj)#+)LK6W>A71N+|#{3_rH?P|0H0eu>#NPq3%|CO^3}2D`+C$=MJIVF_ z`V~K!O^8*&n&0+tR<4jHIFMno8mzVP(l%Yz0CRE|Q&LOyUe*DJf8)11au^tRGRI8I3 zkL(*vb&eC1E1G9%&9#8()o1J7AV=G0d5zO4gx~Oo(Z3wbdnU9emGXRE2DlO(B1=xa zzp(Q1^g!gU`&lW^*@|cjBgOS?5%H zuz8%PEU5ly4=kv2M@`1rY9X!0Jf5cB0J98+NI--n>SA1alGII|FLx)Gx+X7|oLlrx8W@mf!w9xn&N-C|DG=gKGZulQV-g^8|2?jWrp!FIbxHTsVX7_{vHF06 zK2DfndQ;MUzQJ6erp#H=hY~(U!n4S4y`nq^Lf%SNgwr4h#Qj;alSX1eu%7>3O-+3f ziUuc;V{tAh6eI{=yU=2_e(kqdAZA&e>=YzN9$*QZa;wW+IlwbXdGgEcdxVLFqPg?? z1(ai(oKG@vG(lhu8{+cw9354qJs0^gzYkLd(Y4{|qd)KvpRCn`-N|$B!0%?o^+J=8 z+sP-VD`>BiQ*V)rwyi%o@MZ*asKX==C|k+o{JN75#n&cYpT&{O@CWbMn!E$IGB6wO zKh9zTZ=jo7|D4J-tc87)Cn`?;*~d*s{AO^{U=1c`QR1hzA}28}D{sr_f*>-^&&P!5 zNe1#VHJd9`fyw&>@21(I?bTwc`~ZksNMR2)jz2IM^piOO$zI*J;S z!G7GeB80vJuIW!1Sscb+gWo9aM7XrChqALlww6Gk((L`^d-4xTuWqlpC;X-rx6#Zf z8wh%Mkr;j$l@^4qTho2sq_k(ie>mMoXS&R^vOe5lu<&xSr(iWuDFBRbF5KBHy4xAh zlsYc}@VhZ1{bD4azTEtS6PHyn&(7IcW`P4Im5(dIrj;u#HaC%gH+R_ zr#<1?;?d|~g#B!P0h99LbB>Kh=|)K+EvW7WEC{Z$8F#Vv1K*|9ilArMy_3aG#c`A2 zrBL(W=Iv7B?~FmvwffI*!=9OYETFGJA*W%^JEyk8cN8Fk^pcBTTGkt%dta602ZOmE zXhz(8-yrAP+K=DhA&m^(d6eJjewyWzxfi)Hy*czLMAw+ieh$R{V;_T6Os6(j)a;V= z+V~`*+hE@YYwrBCt}bZJnt6Q0^T&Mu_=m$(bE9tXv^kRD=($GWNzHV~DHO$0 z>yLF{59{%Ad{E@*q25``(Y&;er`Z*loT8Kf)7 z2GDXx(bH4?(AA2v(n)Gii=^+&kr+_Fz?0nW3#6ru{$JEyZ1V$$prFft6mtI!6t~F$ zZUp|DDQ#qv0w6nD>;5ZO{tq6(g?@Wy$Nrx#`oEoO`(S5h?iL92_61o!+B!{=K;aY* Q5EUR5B@M;0r?1}sFR>H}q5uE@ literal 19760 zcmcG#1#lcol&)zpGcz+YTC$i~7Pg>;7OMpoSYRYqMA@Pij&cv$cj&GQN`@E3%$ zx{Uaz$_e6Q@Cvl0n3CA1Pc<<}uRs{^I)bCDuJfl)sQv#e5J^m^M4vt>4#-K0X}TMp zWg-}3nLmGY$?3Tm#LT~4loCU#dp7-q3)j&@3=MsT@&q-ALo6cUnBgSOIC*@^b*IqQ zr{|LbsG%~bkCyzrwYTci?VmSTG*z=oH+!EH;*z7a^6Z{L@4bnu`Q>rJcj0v-eDS9} z4~l$xkR5r~^=Q5exsTm2WZeIBt)=d<54;U$@9?k=W{5rVp%)Sy7ymn=iT-7+=}`0z zS|59)wyLh~2rh9S`vwvcI2!)H#WnMRdH1dPn7B3v(R+uiC{hvFCuwP-$;zJlhv)9a zZX>2X_%&Zz07)o>6~R(`6WYteY?%D2wvl&`L3URVz98^v&h{tp=4$jTd-o%ka_Vh6 zrJ4zdaZh3xRpjNJ=rc=XJe9B~P)ynf5OF!4fkDD$?si=?C?YKx<5>g*pozYsyREz8 zxwHnuwf(ruKl{eKo)O)(evPAU>bdoPzCNAVXus}B36#f0O=lT3#TlR2)r|2t^8STj zJ@@(S>Ow-{vaAHxVp^N5Ba8vd(zs+9If5_*$ZARI`wEhjmL8>ad%IgKlR1M2rHlHC zYc@q%O7DIB>QzenrW z2J8D8z;+u|+*L%Otvw^Vd{MA;?}6ac&|I{LU)b{N^ABEL`!#xfCyhcyv6uTZJ1xDj zWEKvq8ETia6`X9}_ZDL9BN>TirLFT+PE@xHxuHPcSE6}ZyyUdi{_*tRB6&Wh_zv5T zSG%c#u8gQ8f`K7qKKNXg6N&3zfh`^PD>k7K5fVUP4zmvq4o+0G?=meqS=s~e#kjq3 z-{2K^65tLLZPAX(OaR|C!afb1d25QSvjxn>*IFVr5l)OYMGL_E9gG+Iof`DIJB|x3 zQt3xR%)n&SK)C5%;mFg*&(M^O!7;SQ?N-s}-jL{5tzTh7GOYb-mfOv)~Bx1jH*|)?8z}LJN)*9 zKKw;Pk)Y=)>o(7Z!V|HXS)Oo`?W=&hf9cnp&QKl$_VF?*3jZ>uP?+p})#+@2!WDfa zZd_D<$)1$1{1CtO;Du|L(-K>ysAIR(gw``EOL#f8ou^CXwC26fQx*2TdU~Y3kUEe!SKZmVwr|M~|_~-%&&}LPn>z7J_*Kfu65pH9mx!T-z)71X73_~;{bZ1Y2vtuz1?)7wxxYxc%Ae9=eZG z>57alg0AF=o||;*DZ6@FyO*x5L$nRa5jGyD_40kxM{kPYqOP35_}xr<^qs+fjWn4CMG6kO`6RmXd;i~g-YoQTP)NQ z;B!#kwcO-ADz#SCc-($e#)Pa$a)Nqyv_qHPKN~c>dlxuuq<*G-G+b1UcD;jg0Nw;^ zJ8n)2q<#j{KTF?BPRcsT*&L^QiQY~ldUs^;m)-|H7!I{Ru!RjObuNmHbcmdQI?%pu zAKJV}eqZqS<&VzHw@0mbmSFJ_+-Bss8lU8Mn{Q|?fB;seq*o2hH%XfIRDND6vYUMO zc3=C5X+B}I77o5*FK_Z+bDsR%D9|*WC$qcN6VSXHEwtAnpxqSP+^YoHM4F9l6w(&I zDn@57X$N_bwmGk&<ng#)T$Zf%Jv{xG*FZ#aW>6H zwdm{N5mJZRI_O~G6y$nW^%y;O(?0h8uB}OC6aq&%@9}w@_L=Dl%4wVE#))8XoPQJ1 zB-0to*(rfeWsol0i*j-#Z1QX+E{ogAuuX1@+Ut5n=CNauxE=d-2r1)b+5dX;_0ky4 zN#E{9HBIUM#eUG$_mSiSLtAs-gEy#=gQB?s1GujKPV`FpS4=BUlh45ewHm_SHsajw zRIezeKXBXjN=7-kn5qo*jfmtKwRhemcRZ{y?>yLH*)vi7`3ARn#+%<`-2mT}E6EOI zk7mbg9|;#9AFqBl!Gf4VZ@le$8E#1JZ{UZ8T__Fqo#8<6 zs6A&hiS(`EZ4O5JMz~bElPB#Ws3>xwEvPf4DX?_Ohptp5e>} zPbCad^-t=4Y6yMVT4QpAENw5&P+Bclm6FQa8x0K^l*0wIs!=;#L+uk%J8d&BB+Lu= z3K$6}JT;=*xE&q+o~H&0U~^+T zcTMnkUQp;ZBEEuKgAkzf<#-9R@vSf7R!zc0@D=Eo81T8ZV z5MjTZ_0pRWGHz0CaIA<2#6#0qI#{};)(NrsP&6wg1dFbV)vh@fn@BsobTClqxcU$rQ>g<1X`TuLQ z$7$ZgWgBupN`b(Q@C*dv7d|;gbkE}^e-U&;P0sf5-yg~*&wN8^Fv1I`d!5Gziyl0( zrgGYA(?7D9^^iv&URe1j*0Q4S$l1yi&BtWACQ4X5xZwT`^x2h#tu=q=um{xPA8>8< zUavnqYCH>}gr;LGC&+BoxVd$kEri>X9;g_GP+3Ie4ucOJwUs5n9{^#w`T9xwF07YF zPQvlN;)(oD9V#=9T-Sb}qG*;wbP~B@P?s6I(8mHl*b2D`KEqML+y52xMr75@>k8>5 z6eM0+q9$Q5`{WmLIo=p!Twgsf$o?m2yA#KIAW5U6v}k40wYa}EWfmxx7TvWM*?Zrm z*jwNH3IDe3@_p<>vg)`7o}IYwd4#L_Dv`i!4#FTI?n)Ee3t48QWBg}x3-Q<|2Oi*7g0p=p~cFO+I+Rb#1n-X9o&OZB-0 zg||x(GYEpr1msB@e<2WRcgke0tsRyr(`CVMYGbEwSs zX@-XZ;nNRKUru#Tz72IMWS_ccQc_{|%4snSqB*WIZU=wqVH9r5p>XAwV8EllP@si|oX@*0syKC^*lD0W7)FNd2Fhh*bqDD5sx zLPq|uGWNM+h~w@#uQ+c+FtTF9_sj@2C&v#UBOTWmeixi0tM-?t8tsjL0SkzOvTY!VkXE z`;WNB3HR`Qk%xWpnlc5skN^5r8-e|iHzsqxF#_570uWX6V<)YG0=W<11K)Sp@^-aB z;W)mG9t>m^P1DDFWCV|CLzMrb<0E7c0O$3N`F2%7%inwEL(6l3vSZW4To%A@I)qNv zF~+}~brOaL>Myx%t8ij`T9DK%=+&D97QWW=aZ|&KiHXUA5bI3-5QbMz84E<$4p4L` z>gM104`&8n_WYvfGRR1ZCpk^=xBIZ^8r^iD_m?s>|Ao)&yLkRuscF0W7c+4jz%4Al zMR`FM`nNsP<+@a2v>7iOCsoy}SC%f%Q&5XUV!QkNDCeQ?vfNAYcps_Hqd{DF$a<_| zSxu4|ZXPXxzGMhm96yU=e6Xi4h<@Xel5uFfAJut1K~6Y;h~J*&8Yw~*08j+I?A|<1 z;F14jj7tEyOJPEKzb_uzCy`}C;K=b`y85X%?PT%SJ=4FZe3fw4{^P%y4p-8lF)hT7 zz;s>oJEf`z1?p?PC46#nnJ6hqFvXaiIoEiQjJI1W?->TbFes0^yC0wHd>wl1w^(fB zc}SdeCVz5z6KVh@B@i8L(Fj(7SV~zW(!ba0XukJTW<{m+-?u-3pn$yT-V|uTEsn^r zk-^GLv#%}aESZM76LK4nNBKq%kc`RYk_G#arp=E4uBOXDLQ; zdh?_N>BxA91tLi?hyJeDW=?gCJ6WObMXBrq;jhQ?2 z5U#V~yWt8Xlucs|3K?zAB(TzwJt=|X(aKczE5h}gGH;tnM>jP#)-}%rwVoO!tTM^K zqu2s^?R6`-6p_y)2mwje@;0m7n@z4pPZ@p;np&aXvWM#?9#~Ge;p-3)F9(0K2P&56 zH~w7-38sI`Kf~hSr8iU_G!7hndlXfsaHr5`GW;?>`EuD;g;RgH5q-t%H|r|7+Kp+u zqAdqy26w#x^IHkdw;qMD=ZaDAj_JXqu7K>E28gaez3dAbI28Y*XFRwk5uzr`n(cFL z?exT4J=INoJ9w7r%}y4yCq2%-XACtG`zk~Ud)OTnYUlwEBh@?Li57enHY{k;TVV&O z_FW!>cz0vc7?FN(0AiR7VzH_4fvcVNO^oQh(-F=VT?4q{yMLzRoZC%Vzeblz&Q0;bn&``&t_!GF% zjFog~rkFqmy!Fm!!Y8d1_Y*`-RihP~qPHA1Gy(GdGlIDZ!O%XZP1`RYle-+dNY84& z*~&XF82!uFJ+3-KeM8DOG)p70PD+!RR-P2EbjqJwRV!^KOPf^9N|St51BuwK8*$GS(o%!JZ~Lt<>k{aRu>E9feR7YNp4VM!vjl^8x>t>PyoeD7AM2^1B51>0YTj7d|1^NkU2Fp{;ngQHWbpA@LIV1!|`&&cp73>g|QM9+!_4p@p?xQdwpY7ir5dnZvEf zB#*%>yn>1z;jWMa^&!s7g9#?c1xtgmskHc9vRnn|!lYJmVslz#&@LAtTi3IVR>@33 zRizt4GZNGMmd|pZA-x_p#cf5dh3_np`hzNZ<~x10B-TPg5QtIgv*KJ#&IiNSvwPMm zc~CrSwdPt{_FcqLBaa}UP-a@;A7pU|;-s1Vjm-_CJq_vh~(T%&BfHF0paZG#Beorz2JrsKWfP7&`4dj z>_DO9$zaiz1X$}bl6gd%UG5l$QtWHUg?*-Ebr1+aUZH3k0`62ZWMNO;@?zpE%osu( zoNIogQP62AZ<6Di!F&uxQN{`5!C~5z2ItC!QFF_UenoeV7ijvx8~I+%_b=fW*|t8k z)HPnEpn*<34v%);1!A_n><^aiFtVF!&W{hXI4u3|SM0BbFJ!`)^`Dvmi$Tv-C7VkF zc{LXcZ$~S?KfmQVtk{Ze{&@RFu2xj+?3_LZIo)X3G|cmvYWP`Sk~LY7!r_lzsB3Q! zhF`@hIK?qS)6m-5q9Y(9zFDbRxk2_2hv8=Om6VwpRnVJF64rJwF^J~KIfg8Z+1udy zHBA&V<Ren znLB1*Z=5-n&r@#s`YU}&`%*}2#=XP7E9z@O+??5=H@^!gZn6TT1U~5^Edo^^NN>Fj zhhsHPOF?f=+7n_N-Z8mmU8|64tsbH+Y2x9LOHD1QopAaQ+_A+eX()Thth0Xbac7iu46u^q`2DK@1IbKuzY!$=oL=-NwwP`u# zcwsk5`IzkP!EAsie0i#-{EkV|;zu&i6mzl$Kv>r7|&74=J79*f03VnVW!QE$GsC84AYN{us?g#9hqTx8vm zD0g8T2){VR4aX*f0E&ySg9g4S^&!a&<|ydE`;$K5PnT(&bkO9ODI@n56MOi-gjxR) zY=#`6VAtf2mJcYmHvNGJX;yK3-L7NK4ncX28&*__iM)E<4QA2Ld*eO0A`?xa9` zZu5}qHPlxi9truBew!b1w*SB;+e=xakLnr|He$^o7_^%E_LtZ~iHR;3mx(oSA}uDB zdf{~isZ8;XcaA+Sinr2xlf$UPTA)R`KWR>Y7N#Kjes6_c2-SR;|30EyAo?>~1G3$^ zBvCP0#S81|)*Rhk(|8REs%sfv%wQLjzNo-$lZNm9_?O4%^G87*LKfL}l3qy>>d(2t zE#4=V1a=)6gZ>q4k_HUjhK;m}0}Df_t}ZpcL27o-FuF#fKaD0bds2VgZ?~4|&8RJY z1`UYVRyF%XL*<`yfH-wkFwZRgc01#>*84NkdC53ZD}ZU-oKC6EfR|3w&XqvdnoM-w zM8Q^O?Enda>w_gW$V2}7_Bqb_U#o%AJ?2Ci&-w3-0*yKLMpnJH9^CH+%X!u>`uYo? za-C*esEekFA;ATSA93RL*&XaWDm<05I@NbUp%<#)o~{EH;~Y1-dYeZNJ*i!u;Uxrp zBW;M#`P_PNd7VAB9LZKbPOdq}!>U*8JKkpinvTICaLyj&q#R7D=XY4ED{48lHlyy0 zSy$`T-5e=!dW-6|dQAzy6Tkn0Af%R_t_Lm-I+gnGqQD{qP!eiBHb_S3_0;7e%?%d! zg9P4OhV)M9|A?4oqL_~96d?YAN%wzSy7K>?0^KQe;cQ0#o2f7RH5~DHTuUL z8vl0u9@Wgwo2Zrr$($90Gm*{Z=)XbUjiUvmD5~HO+4YT!I}CumQDC zLrOzqZ(Re8F_G2WvqBoKg5I-|;r#}4J$ezeMc}sbFf40UnfVoFko#fiaWlS@>O^RB z`VAE#jUD4J*sLv8ju5yrj=}}!nHh{Pg=$zJeXR!zf6WLs2N7x3Ww?aU^47LZHsYY% z^yi&)rF4qB^gxVfW@ZV@!hvVgNq;kJ7#gwB;eKu0(XkUsvJZHM*$=J6=BM2gI_LW zuV?(8Kr3=;2y6e&t)iI)twfg##P?t0OHWVIYZGPnoSesx zWeBy!vbbFLhYI+O-#9F&p<`p?%`I^3F&gvX#S&>VXQ-Q&Bg_9H>a3vk)~Aq(tv1GN z?b96B7N1Z6G-)!?n+6*CsvSYFN!ei|ZrIxmPeMRmjgFC|&kZ0Z=004t4!T{8H(J{< zEUW!|@H1$_`u25B%QuK@V(UeNuI6f94Gb3`sic{EHqsIv7vR^fKlHY{XSieO6j&=w z2ncS_`qrxWa=pB_sQ`wxwf&%)^>sR22$4>9_$!y4a|{)7btSC%BGG(*@p!Gcs(3w> zA(GD;U~th2MU@rl?|@WGYrgmlvF807x@|z1WZ>JnC<4f@^YZRW=5V3{bnuc_`;80P z`M4z?GNtKEL-ykWcOahX!Fey9CR{4H1$(U4aLCxn@@?0GoXQj$c}xblXZjCIh@9R0 znzKLdV=XAt&w&?WZsw=i_jkcmB2;x$1xM8{ql-6lBCV(afXf$rh0Xe_d!%x+q!XX? z6s@C^=6&Uv+(|@4nleY5O_IJh=kE*E_Z7^@zn2L}d{O)zl!78-i2DfE%zyELbsgJ)8CJ+*)^XvaD+ouw9CBsnoKe@NQ6MgSvb zvnoVoPQ(3an`@Yu2U9MsIVx;@T^*yPJBDF@k=Df8_LEnj%E=-^rfc^0SHvFAixR7_3;diA(GSeRz8CzU%i$)#6@Cg0~r2HOrVG%f`ks8gR+p)?CgXg1ygYyfc$2bpu9lOi0 zdSW{FWN8*$%WQ94V+ZcR*rRe%@X8j-nT??n2a7PuYQ^qIFut=ybv?kKLU*7>lw`;p z;Q6aIygtK{UVN`cULPPh%IfIFIUWLskm0^0g1)lE!ohZ;$Y`AH{+||qi*3B zV14NR3AkL?hQyw^dhp*AU%95D4mVu%_~804vg45|p7sm635Zw>oo=iY5+>-z`eN`(8GdRDr|x`{dC3 zaeEPQ#o6J*{V(y_#8(GO$2rx`&WzpTBy49W@69!f zRgAW?|Gp{G(CKM2CNCyfK+s+faJ@-WU-W#go_N?w-ALuZ2Ill!Up3$6S$iBRz`6WT zjcK`>jWbmrjBs7{l8MymEGFK?%r*Y)IHMj$hOoy1|L)X^eJd9C8Pv<}4XW+P@OCs&k3% zt<>xkzRODVs4lwwaTareA@_X91~YRi^v*oK=2PKva0oT$kfuzVR)~ZbJ;j6e(t(&tDN|S1hLsuykp2a_}FYfy9-U=c_#F7pN#ss2Pys2^WL2!Ma67vYc8JMqqPg)!;6NJ5K=B9?x z@DRym%j0lqmy}|3#r0;VjRWvmr?&@Zjd^D0J|p)Y<&z6!^-N(&42Gx^y6rBd7$s|$C>Y? z>=fjhlL6i{twEOSc=*sn55a3&j)N*eX$I|f|MA}~+TjRAMvT&E9IEOHGM-XQbUFYNum_G;887tHXH{hfIAMCBhpmGP&|HC1?WUkjFJ!X`(_{3Lm5 z2C+h6I0k+(XuX{k(-TMHj9mhcp_&&bKdq}dA;1w{E%{ZceKGeDuHm{1N=uz;T+K?M ziZ>HI4v$b!)oa8Z@e7C7ot7%d{auaz`C&aw8K}(Ki6TfY*^?Zt$B1VY_3Z*`Imz{_ z!!AQ2OoIf`Dq7TVpJ80#+}H1ihfTfV5>NEG?iXlSNe`P=QBV?UKqEi}hw?gXVjt?EV;@NGmgoedsf?QSA+K~U~en9tf zW-j$vp^8`w-obc$Sms>&v04Y;Nt4w{I{xK5Rb$Q$hrElh`BPF8Vz5@R||F-g(Z{J%2s^*YQsJ|ba|mzA(z^44En`NeGW zcdqD(_u5ujecwREq%1IBY5&`h%PFy7I#QZf`)Sm*utK?EzB-E`B<{0VOa*V5qQvR< z?hH*clAO-O0H+$K=)g{cW4OTne!u6F^&BG7xygYOlEe^zU7SpfmsDMeD-Lek$OkWU zEY7j%QqcOT+?R|l09`JnNwv>3qGl+b*K8+;4aGtj89$9q0BXf59Mz92Cw%}#@nj`Y z=*u_Z<6CJnCH-K;I?O__m#GA^Mzb^YsDHvhhs=dY4etEz49}-zj{TYcaDE z&c`z}MN|KF=XbVV$FP2-Eg+<}zW@gi9s_GM<`t?#tB8Ch1-65b5q&}CK9CB3GiWDF z?odWVntR|>>I(UDW-oWbdha~EEWpnd&0fmuuxHrOs$ofOw50lQpF3=w-$zzY0L{;N zcZxys*I%Dp3*Ka!IDNVa6Ty-^DyV7^A#@D2IqB))VhVS$58RzT33Os^44kHfmokh5 zd*tdx~%|-;k);GKK0=5`4B4@>(9rR7Jz1_xEyavtqG+5 zwPxkf2aH>2YYR3B%$6Nj=(Dv;U88F%c@WS}5pE4E(6}t3tT_-i{`KvdU;jzJ?vM z2pRrh1U&yy><6BbvM0U11}ig3g7}FZd1r%YCzYg$lkWlrSXO_T;Dj3FbQo8}GgtPB zjlKmsI!h4>7=@d^WN~}&=oGHNrK#^fPIy!I+6`5BjNQ%dnVoVKi8wN9=sOGvy9}pe zM3by{Nn5)hAv&~IMtdZyEsUO!2Z1PFIHv2q3lS@`ZEd}NGngaa#>8UoWodev>gAU*$IWgzI;iqe1EOtu52r% zvA2_4TML3iAl{9le;`48h~^!4fkYE_7~!uYADK`;=4c--0 z-OU5>B(0a;P`LKdzca|56=R8z(f4e6&$CK=UN9p(K}9M+Sj!DZ5Fl|{K2WG*uo_EP zDk5*HFQd5CPMWs9K9@|BTr?qv)VIXbp!0@IqJsY9Fr;~Qy%<&g>%g<4_Ib<_|6qqw znWaR)YNb_0D8B>rZf@hb>=!V=NWw}|5YgE{j;s-ZV5m5DfQq5b3OY_-kdY%Bals& zDRD#(1^KEi(qI=)Yj|RR0#lL1GrnFwS-X|7iYOUAj98tqn}?-8FRsTgUQtFhh6j8% z>THnU>e{cqs2@zRRbzmNHrI_=-HE7Wa5%i%;`Y!z{F~SgsM3}uAmK0}85u zli@G#F#miU^hqbiDu&44W3DZonA7N(VPT!)^25I8 z%FMT2c4TJ`a30kZKe#3IKS$Dk9aaDQ4n=amMnM|)P7l3@83Y@2b{b2rLSXq$?I`Ur z_@}|{1$@hX?}G85Rj`D{A6$3ei0b^uA%ua;9}H~A{qKlPh-(fJDZ5QUW1k|VKKHUC z&w4dWZCN8JkY@_Pjj4$CT<@yHPP_-NR3Qy;_F5wc15+bn^plxCz@!U758~Fh6G7dT zC!fqWSfvPk?KXzFdq^f~0DLX395;ms{#eYBGIsmIQbW>W*#kO1vE*J<$*e^VX9+_Q zsr<@m4=uxa?&8F{f`C1816yEn$(cPVF+~nEFPng8VguDMhNyHbwOzs_NtE{ChkZ$dVfxhZ$EpGJ0aSn^;`NcDEb>o0X&qOo7g z^di~;@O}6pPT`4(Lyo;EOMEj0m&)4$GJ>cNAO=3!K>ZV}y_nNY*}jGntgTfBY;~n5 z!V|*GjW4aT>AsdO)^{kKqKxH=Jk=P?77>j0keG@qaW}I}v|!|+4SNn!gV`A^F`U;p zI~3G3Ssy#DrXK$SHc`2zy&}81(W#Az4hyV!UR~GP9>rY`?A)~NwJ0H@ zjhdpeA(#>pCi|7H+(+5g+_V)jO|ayU>(oX|B{5e(uz5BNHfVwAq96ab+@^34qSaY` z*vtuMg5-HI^_iEEd|Iwav1qmCi=!vHf~EV|ACzB%d+;i1C3uHNT76*Go# zvtFtB)99VHQX%%85&Fl*%Qyq$k7hW>2S3ce$(l{~=OUpfmws%z=1!oB7b*r;^v+I^ zZ*PlQ-|ke&BxfwiBy85!AD5R}JliHuCYW52ebn2-C zb|MG8#XrqgKV$e)OHPX5(HY6p)-=f_ExBo`>(bkWI^I$Bv1dhvAQB&k-cbgOm1QNF zh5d3oHF^bJQe3TS1ViCQ$<9ZR=^DVra)_c?)M2iscHkIo;6%RYHscSTUh4SS;EVR( zcfi4M$p8Z#O>bh0hKRnaCCE{Ruf9(y2i;a*Jq^HmSye;rwY_+6`x0P*Ql8f zHWQ0iUM1gg?`Tc@qfaYX%Xob~jMQ(`dTBheCQfR3RlzrhRp9(bydU@tG~Rq62MZqZ z3ZMR~l}i6$YoS~h3W?2Wggp`q0RdrZ@nz}YBY2gSv)r(Q5Cj5^FZ}Do3f#sbBik&8 zJmejSn@{B1aNkv0UxP^3{C{>?l2SST4{~R*x=#Hs-zGw2aJy-l9T()e$b}?+tFe$ znulNDD1{v8nBzTZ2_JUqAhE(#@CQuKMr%q<>4}#}KHvJ_XC=ijba)Mn?j8C;N3<}E zF&YqKV~mO2_0htK;p|*TTJfTivPxbBsnTr!(##7XdA?{7XuF0230Crg+6KTT6p1amk) z_VY;<_V)Vd=`(^2S&*xZaQOb$+<D(WqtSt6;XlGDIPEM|8 zra*zH9pw9Tz3+ZpkRmL;Cv1s2aUmic$g<>+j}<;qT)K<-j6xFpE_lj8rJM|tV_;Jw z9Oq~hVri^qISJ`bpZ!!!W&I zpdYN>WhYy39~@epXjk0u{CkCWpkVi#MtRkLV92pB2~UDM8=8HtZ@7qv8{J?zuBi4h zn4{e2gtI8h^%){3=Su!r8p)hh1{N9r=fkFNmth>%4zI(8aR1<-XMfaN7L{Xb^fw|M zf29}3Z>jnBl`Pv}O?9k9`TRyXfC&Q5L_;2xEm2K1Ix9^8g>N&zFm2mh;u z6F}-Jn$$uo0zBG>(84|*WknNPbQOO1NTD|NV%kopC4S5=A#CkM6T^^6W(Iy2cN%Hv zXZLp3aR9#C8VFA0aSQ5CwrE%Munl@QwA)-vUQGf#lMltW=}yP9fb1( zbi;ADZ08uFw4NTv?i4y;>yR3^5H47D533^$%$Aj^nWa-j^`uJf?+Y{AZ$zM1fXm$K zqKB;p&a!@-U!@LlewN)TzVVc%w0N^GUwR|>bEY?zX_c9--|5T(D}DRZPr12uYUJC$ zcApD{f9yWAalgFOaP!fw!IQ(c*&Hz8{w_An7y&+`5`_BVd$CszTXDykZA0HSM zzs!KeHhXvpub^mFJ=|e%a|O=dGY)%pDhX-9Y;(QJwnqh z>0WB%v_A-vW{Kx3zZQPz>dIqx$f&^kyjG&BK&vIV+^OJ(h9_)9`D&bORXBsmNgvCoQ@N1k4=LT|95>SNhG2?CG z$_=ZUurK{W1Ke-_@+ayvFxHr(<^5j-qyD>!xtv69d$i6qG!)yUP-1fUli=0aow_{) zf^?|kyrT1^QzHNJz6p_-j_>ScZye|d6W9MYm@nO0JMm>6UJAzkkn4Q{yH3Q#mB;hU zD0tO>R??}LC^_h@a@P<}Lzzi5K;*LT!F=8bM@yMiEN>=(h__aFc9jq%xik6~3+?<1 zZWgi|!P0Fm_R6!IvdMf5HwK%}4}a+T()N5mKCP8G{JIz4^}T4r)I>eKoZ!iPVr6my zxKQszc@@Rqo*|tISozVDm?BXoS`Q8O?@k-ksSB_5-qehR^|OX5HY6lFn4=(!7;DQHAN)elgbW@l zG-$#-V~?>idpAt|A$5n6fv)1dt{Y?|S7tvKr?;K|z0pxJ8>5a09J?j1Oq(bI_P78)YjL5JYEyf@p(o_CiC@o zx#yenF`!Sz&@u(r)BwEJYR#TvIH=^N5PyH%D8-hRQM^5Jc?kw>75bV%h=^D-|0C5x zUN%OIdGqd7A>O&jG1z}O?q0)u!|?X~ykjAGzelj-K8hRxD9}3k7**_t!~ZS1`JjPc z_pegn+zg5v5i~n^g-IwJpfH|3PY@&329D0#C)vUpZE7m>;pojngSK}jXB zyf|@RCPE~YibDJpyOA0fnYAL~!MSCahvs5P(Ei-BzxMx0p8ZX>zV9*$Rg>b&x!_B$ z);$T4;~J*KIzNc_W*<2*b+dHy<;RS8(CkAV-OVyH3rsRmlndQSK7aZo2h$_#%P9X{ zEy%UeEL#q@TITM}5PJmptFHar)O&YQ-3h-F>jAt>D`(u;SZ|n5KbO zj*pFd!r{?y`ZIaJsb4(XMk%n%Ao+yP3UDC^F2Q@~1LQQSi}XcHOiNyW-XW6nbU!O zgy&1}KR*vx`b72^zwdh6#<<3@BPaRPNUosRTnBRBI)|cPR_e{uV3i-Ptb7$4S&ozU z(l+l+A;^mpc7m3UOpW#>7L9i3QVSdlAC^c@sWi28krqLW#8w%VxJq%O@E_Hy#p9vtf(hbJ9QdbHN&=>m=UGLa zjgy%q!jMIlc@90tsrMEe9*FL2b5co2D=D+?fQ_N1p>?3nJT}_9l%<)aAf`F(Dhb%s zqNgYKSkVofMY|J2gF?u_q({n(2h7RrzPr(AyUW2QQLQu}>sFy@v3Y`739)-|cO174 z8z(pUCm+71Ucbnv;W|SgkA>-JiW>#EG+T$Ti0VHpaCT1Tud!_^fb<`vIp1_ufBx-d z3=DD0=U$LB%5hK0Z*BHix-SV-2Kr1jv=UUH9c=BICN8Y-rlWKI(@=Rg4~#*7!vA!a zgzZffl6)Ed*DWGj0wR#I|Wx9u29b4n}fMLB`u zzAQrJu!!~*9R;LD{~wK-u@TgIseUj&hx#` z^98Y|a(R)qu;o;9Edc^I&7sse)NCEaAM3B7ua9S^^Bsd7kv{SB%~aq|qd92Z=K*ix z4>$H_;dPy`HGDJ-8I%=0@T?%+s+Tivf8hP`>9=-AWc6Y|Luxga=43M<_!;QV8`l|q zv0cY1iQUpxvj`O}&JqT{ycE9BJtOPG{wb-jmq}gY1GXqTOsaU9xNhWay;e* zRphp}EHFDB4^G3_Zn$d>#|yD-n})y`w_`Cy z?rhSx<4qxeadIY7j&bhBL`N4MdHT?j6%?AdA$m?2_&84W)Bu5Mrxf=Tl{CY+#igY} z_l4O?T6p-3#}D6S>yix496*J z50{ks7OllYoujwp^ztRRSrschaWu00u;{HSHM6tj5TX}@Wto57-#%0a3UBHMz1rAK zJ$Pz;43%C1!*J*&fTQx1_8`o-r=ajoDjUrqy%LIS8AU)d$xEn7qu>3(UzWS zx|*HTK%;xPwkQsdd`kX&nxyx4FT>|uC6>sC*Z-LkdTshnxPt^N6o;o-Pror7I&{=< z-&Xtgc(%GWCt|)e7MGE+O;Y;CW#kv+xKlms%0KXYAGp~*{e*#I(KSI$FVch#KZVC3 zS#F5?R)~w55PPt>_V`$VW{$3ny@X?4ll!FYb7#@)%5ZA-6*6w10uG&(rIh#RtMor1 zE{-~!lvPFdjv4AkVoIZHEAvMSa!=p6lGg>dAjVgjap-kVgml&FuVlWeNEC=l7VAfR z1w@om+CZ>ndGhDLYrZCwQn+58Ut2UyzMaumdIn`o2Y4kY!cx#UPH8=sha@MR8;#j?6%i}LbL z&H<0njLx&~7e=*Ra902+m);=u$~*Zh?W|WvwbDfDQKlMZPxJ{RRrG3>h;}AVdQRgY z|L#XkahyJtUASO@HU3Kl$v|!(P4|_h2~)sHE=cH7Kb$mSjt2q7hB`ldfuDw92+9Y0 zClY(5AkpG}JMgY*REkc43V!H)kPMtv<>_9wmMqiUyn!PyMM?Ce(Hp*4ja}Z#xy6?; z>769bWhO|nmVyDBpULQ6SUVzr-S3Q(_e0lLj4esg%P~eMBtkZk5-GsnC8q_pHXQR) z>{pk2gNs$tWg|)stSG1)O9I5I^_`EQAN>-UqGw9n^5%Rh(Kv1C&DKAh;(qTGCRrr3 zy&=>iBDY%qklbXh9{+_tZ|1uIIQ);snkr`L1o@<9DTNZ67cyA~f}TQX3KRTcHUK_? zHX1fM1XH^>oO-}W)9ZV(!H|z5JwOQKbhA&KpXJ=83ks7b=8~hQe+Gf=*KEDQ(RL<* z^LuN&l|WlN^sx!89RF?mGE~YMbIU1O%oXW2>6)hL=>$FL8l%j86!G4Md%-(OC&7pm z{wd`|dcODI_!QBV`0Z*Y#nMf08x`QZ(NZth^&2dB=;x4ZCDS|l^H{#YF8~MGh(BZe zV+Tl`uGq8!1ALTPyddySg?aA;nu& zH{j#C3Gd^Z50Lk?gK|0Fst=R7c-fknezc{y*~mzNfyR%bqdqEGw(sOhEk~IGW)bY++dP+NLnR_nPjqh ztnbj)k3Q#?T?QDh9+?t#D<>JY95rFmOCNHU;fedayzM)nhT)DBq@fTu%z|Tlw@;Kh z-sBpo9`Ia`Cj99&$I|WP%xpDMclEZ(`zmHHf-5oARcmrZnt0l|gkF|$-YK;2C~77R zWihcHl8TQ1VOdH0OA(Nm!0OH7iI2B|xWHXgWc<>Ymdv96aJNy-Hch#gi!sRjs>85f zz4tP5E*GWv6TyWS{HpR?ZQVGf3Z7L!bS1T#O|8!<HeP sx;KAd7~{X;)^D}s)4;{DLdSPuLc@j$f#~-Lc;#%L9n8t97V4k)PxRn+l>h($ From 3aef331ebadf79b44fc14ee681e038833b6d0d6f Mon Sep 17 00:00:00 2001 From: Nathaniel Chin <22572406+nathanielcwm@users.noreply.github.com> Date: Wed, 21 Oct 2020 17:16:44 +0800 Subject: [PATCH 004/958] update kms keys link --- windows/deployment/upgrade/windows-10-edition-upgrades.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/windows-10-edition-upgrades.md b/windows/deployment/upgrade/windows-10-edition-upgrades.md index e2806e3c0c..ff9c6ae451 100644 --- a/windows/deployment/upgrade/windows-10-edition-upgrades.md +++ b/windows/deployment/upgrade/windows-10-edition-upgrades.md @@ -93,7 +93,7 @@ You can run the changepk.exe command-line tool to upgrade devices to a supported `changepk.exe /ProductKey ` -You can also upgrade using slmgr.vbs and a [KMS client setup key](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj612867(v%3dws.11)). For example, the following command will upgrade to Windows 10 Enterprise. +You can also upgrade using slmgr.vbs and a [KMS client setup key](https://docs.microsoft.com/en-us/windows-server/get-started/kmsclientkeys). For example, the following command will upgrade to Windows 10 Enterprise. `Cscript.exe c:\windows\system32\slmgr.vbs /ipk NPPR9-FWDCX-D2C8J-H872K-2YT43` From 3b8e94507a3d9dc77119d132b3005d2a8f564e08 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Wed, 21 Oct 2020 11:22:36 -0700 Subject: [PATCH 005/958] Added entry point for WDAC Wizard topic in design-guide.md and added topic to TOC. Wrote the sub-topic for building a base policy with the Wizard. Created skeletons for other sub-topics. --- .../TOC.md | 6 + ...wdac-wizard-custom-file-attribute-rule.png | Bin 0 -> 152395 bytes .../wdac-wizard-custom-publisher-rule.png | Bin 0 -> 168464 bytes .../images/wdac-wizard-rule-options-UI.png | Bin 0 -> 113690 bytes .../images/wdac-wizard-template-selection.png | Bin 0 -> 122681 bytes .../wdac-wizard-create-base-policy.md | 136 ++++++++++++++++++ .../wdac-wizard-create-supplemental-policy.md | 21 +++ .../wdac-wizard-editing-policy.md | 21 +++ .../wdac-wizard-merging-policies.md | 21 +++ .../wdac-wizard.md | 53 +++++++ ...fender-application-control-design-guide.md | 1 + 11 files changed, 259 insertions(+) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-custom-file-attribute-rule.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-custom-publisher-rule.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-rule-options-UI.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-template-selection.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md create mode 100644 windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md create mode 100644 windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md create mode 100644 windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md create mode 100644 windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index a8f8114e8a..731cab3d76 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -20,6 +20,12 @@ ##### [Create a WDAC policy for lightly-managed devices](create-wdac-policy-for-lightly-managed-devices.md) ##### [Create a WDAC policy for fully-managed devices](create-wdac-policy-for-fully-managed-devices.md) ##### [Create a WDAC policy for fixed-workload devices](create-initial-default-policy.md) +##### [Microsoft recommended block rules](microsoft-recommended-block-rules.md) +### [Using the WDAC Wizard tool](wdac-wizard.md) +#### [Create a base WDC policy](wdac-wizard-create-base-policy.md) +#### [Create a supplemental WDAC policy](wdac-wizard-create-supplemental-policy.md) +#### [Editing a WDAC policy](wdac-wizard-editing-policy.md) +#### [Merging multiple WDAC policies](wdac-wizard-merging-policies.md) ## [Windows Defender Application Control deployment guide](windows-defender-application-control-deployment-guide.md) diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-custom-file-attribute-rule.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-custom-file-attribute-rule.png new file mode 100644 index 0000000000000000000000000000000000000000..a285f6a6bc494b5321ed123e62e933b83041d884 GIT binary patch literal 152395 zcmd3NWmsEH*KS){TA;<<-5rWci#x@O7k3F3oVK`2C_zJUC=_=s?ogyS0TSGUOMpY) z=Y7t1exB?6IzMtHGkYd`_Uu`5uXV4;4{Gvn&`HssJbCg)Q9(xY$&+XBCr_TXy+VEL z>A>-BfBbstt|>3|q|^>E=NL;I(WXhxW?AlvgA{|>{i7&0Yy6lPEgCIZlV;!*^3_^ zKdXK`>b`^()WXJPBG&i?H2YP|uR`iIle)=;!1rDU3%xNUd}8hQK=zN7ziQ6KipDe7_UCILZF+F7NW}awxe-Q1STAw! zJs!?S3n`lH=r=@tk$F&Ob;=a=>!gKJf^SasUkOq z&fy~Beih+)4qH{`r)pjYOP$pP%0hwXiCY6MXl<3Tr#G$ZqX`4>6V@Kr?cYA*7p2%E zHYgHA5BKi5R3_Glq=J3?7hW6cl5WF?!pGoBxBI0x;}_ZPu-`P0;gaKF|F;J=7l-qs zt=AYn_#1$rFR8yujeKnxj*s0^_S-f9cMh#%)fczOWq<8|-k=DxUip$sV1Y82Q9h2G zlIlS;UC?DLw>Mhc&w1<>4X5NHh|fkXez+6??(q&cl1pMZE$Xg~q<_tAj#=@usb~zj zSoIs1;ly=EDWsml<3L2Qjl3t0&9og)u~3Gv8EYrD6MiB8afI--ZCp zPOX%%SkhDPBmc2b@3^*iDju&%_zI8r+gJ%l81rmyE8Kl%DM^9Fy)(voVw^#E{T%J4 zLBWi%WEyh#bIndrrct)E(~!0z7vK5^a?oIpyD$T~)rrbAvqm*O2N|J7?}9i4Wjv3M z__uHwJ-|CLg!0 znTrR^AlANdlc=83d6bhviJr&}G}p#fg+*^lGaO7!tLQDndCa;#ulvp!iPPJi}A*c!HEM;_>>nmvdFVl%;V4gWFQipu&Sm1*P+CHli=bUz+na zsxH+zvSfH2z-E0;g-)o^56M5>V_u$p$-?Nb*|U$Ct3JKEWTRnC_|}2!x^QBf2X0nv zGI7=m`REl&DXL{P<~wm^OU4_E3Rco_MT zz=~*v<70Qbc+1s&QB&i~K#DTs_GAiCuj+t3YjbwS(YI#{kQIn%5P_lB(4N?M;+|Kv z)o}RQjafWK*{vCG#>GBP{lWSzRgg?y^2`3zvpZhE-Lj*RK=^r4Hq}~3qaRf$Tgv&q zIGxBbsd5VYAIhT<)8lA?I(pd2*cQwj&zb1*sPkr>a53JvlNEMYf7wXbcPQioxN36rHOunczxM0Um!v?pz8_)QP2Tsj|3Zpu7E-tQ<^+7n`&JS5ae8j_>a9r?4$g`AM zHUrvgUJE!`OnIGgMoe|8tads4bqA8k2dD31VqlrtTEDL=6>`a@^Wg+mbke>C6Q7yj zvuPw(*BRn^nP+U)+b`>r3jR}iVWJsTZAGULv8``*`mg|~XfR&j^-+aPg3 z>K-Q5(59Mf9IlSS2G!VCtd+iho{kV=L{4pf_a2<&_vIq+8wcz zw*OG?NHV0u%pp^(eW#nUkLI^##K%&DpKG4>Ed7nTkN4|K$ai;j_M<%ywJj!RYvMcPXG}FnZWQ&z9z4^Ewnt zEuy%E-e;xp!C|{;A~+1>UP>Y8i*LBDK!w4YAjPY%ydD;oQnoZqbCg5 z5YVro2l^ea^7eOg40jGQGgJ{2UC$#OUE*!A-o#RCe6^uvZ;Hnh7N&7{_ZoPV*_m1( zfOvh`*cAm^>s*wy$a`rh!qz)TPB>bu06O#fC}>nz{RlR*2{E35&|72bBIY;<|KNGcqUd(`!nP!maR{VQF$cm zCBT?IM@S`7d~p@T{=$sLjb49yK?nd?uu7kI70woyim1CBbUBf#FuoKtH_9YSU={6+ z0%K>DhIP?A&p59kzPqhOOT`MC(VScv{ea?B_a>oSi{5+Qe1(#&rCtRAXJEWRAA?If zdzn#F7V>)O^yg_lPvv3mmk~GU=U>k57?v%n5iU+_Govc4+owy@{Q1!bx9ZBHiiJp@ zxjL^F5B!A-5k1wC#7Q1?C_lT2XB_R0YCcbR&F+uHvioE1V;p^So$u1it&U=@69JHy z;n-cM04)cW{HxZtp%?l>~0t-PghVovPr+~K4Oz;JF&%)K*7Ogw`)q91-W>A8)P!G zZ$M)z9`q(lbjDNkB!sE?j2{2)GhH}lbpEs?QNId_=|KOA*V})*JtUU5;b~V8)^&AZ zEz99_a$zjl1KoRPVwz(|NqN|FMowr13>wTl!uaxOyMQjm4_W_}SN@}zt1m#Qx_<(TNsF%p(LqM-fhFyb`oDo%;#RIgzlvRDB^%T6dmBU zXwA7Coh#M!EVT`Hm5PhyT1#ZU`SO(>)wZ2>UMgW6OQ5+2Bh@6Mx(u=h?YDl&D&A~_ zk4NlsxVqch0dN>Wc6Pr-eWOso8UJj#2@Ru(?vHO{1x;kIA{w)GSxjS-T zt2}lD?wZR)BA=;1z2m}Q9UE8?BuWPDG6@Fy<6avsZTVe;n5|H&yL_|W(J?N=d2B(jwHu%>vw4lyqCQ~q+tKO}96i3(?NVwN{~4!3DN zZf`e5XR)btEvd{5^)-F`1nw|$yqBhVE?(?PE)`gE11)`M^MKE zy&%H6zY}CRV3>6E6rsR8R0$ouY~_Ce4>D-YB^vNQm}&f~`;YejfSC;G$p3v2#*x$0_`ktb$_I0!e{`Hwj<@o5 zS9kXxjLZiVe~S*+l7CT__wVH#W0*8)6(CW z=)Hzg|98*z|G{lK=!EvY_Pt(WhD#&s{2p<_TKLw7N9Y-!e2zyzcvOvkn(ka}S^O`ew4 zrl!rGe_UN?hY$tOWw1^qnlNUwkW zWufZhjQTBh+eE;Kq_nVRT5GW+B4KNL7$6K$7h3U#2`FH%wBdOr8lkn>N<5_anI2n? z3$eGO&E0<7CpK-ga^BAa=I|5Ch^ffYNnHP^*>HArp^g|QC6p>sJ>ZGbdQ(e$1QQutSgIvt;=YO_m1Tvj2cB$muK@n( zF4d-Lyxq+5U*x2{pWC7!8C<8rigC^QlTf)W`Pog zY-}0Uxe+^8AEbEc;$;^&KC&l$eh4RN+a?B5K`qD2X1pWsWAHbFLgqywHp<7|f-7aU zS|uh7m+jaiP$(@Yqum#>woZ1H6Cbtky$~{^9LF5oeU;g7do=Ht+WgYiWGggEK1kE{ zPMlNCz~LL5DHP4UcP$M~l>o~5OsrS4QvX^9b0o!krjW+8yi!!HHZ@iIWDfNo$b$jx zQc*3@t*zDMwIw$~>+TyKONG>gT7A|k&%N=U{p`+Mwp9vwA^TJ2knhO`{!72dX`ECq zMvs&?rxgd2S@@{@#lJ}DWAN1mkZxk$#>{mhjwB4#O4jHUHs^y9H{lI62a8rJ*ZtvH0zuQ`QPyEmwZ z*d(-UIP>MI*y+{M!nqc~>rlkcbPivV1hp;58(1>koX^KQI2eBjlAfQ&%GX*5QT0>D z0FvFc_$%KypAs+8OR^;8)423vCM$8oA;%nXfFc=l9s4Nu)8&d;zB+@6P5csXcy<7MS$gG{VSUkze$52p+!cQZ0D~iA`0uUb1 z$EFgKjjO^1wt1Q%ssua+J@cq=7mPgZBe^w7n-aX5cG9pDv;G~uo0XOJ;O2Dv0AD`j|3841M1^dSmeV4G;l@JY3FX4k1rFqbe=EA^b z@2T}d%n^!wdw20^p2D53zr?QJm~SEczh+0_uhnrii>^;`L9wXKz^93S0ky6 z{F+Y)6@Z3{iw;e*VMEjVm0-E?#_pd|qZY3$vWD`hmhU(#QdGFtSFFQZ0dkyhD+wwn zM6+N~QgF-o|5Rj-y24Xe4av-=-%=MlDo?-kzsIg~A<;X|QF?D`ZjuRJbHjEz$@3{u z$y_+0`vQ=QKFSj5Yl?RBp2;u?9y)Othn!_qr(IaQv_Gvi9fC`6oZMHI0VFH1Z+0?I9v>8Uk?X)Xv_nw__5Xda`M!Mq#0Fg5 z@6EXN5o&P>Wic|mqN$Us@NDt%TcfMJj770oy8XI(3zS`g<;O*osv=MDIlJI3qOWRS zBnSkc@>&kOyE)rA4j>+}SVR#xT!@qiMBQ!J9>!9>z-!#pqRciOD+q_U{#ORJ9%Ufw zSLmqq-6*pQ`+P=_T$|Blae{!P>3CXqgXwusQO^hT%XF0u87ad4o>#pNAkv98%?RTLgvsRAk1isR4WE^YvgRho!2PRB1s6n0w?aS7g*c1amJ$np0~pu+TVWk< zqL8UFV}R%vJ3hvVIytXEp$+q0b&Jq&h1^iIiHStwQ~n$;ukF+dW_Z!)>J(0!qE?xt zZfSOA7L0IGch8*;uGW(9TQ~mB4bmu04qoKtbh}N{Q$05PIbp7>UQwa!ZtbRQ5R*A@ zRsv_vdMg=ygf7luQ`L%3sM#x);VRSN>4h-+lIFfWv|SS zKeeYdhjzljfa6841r6hOBCQx3eateYoPh>aSucZsSM{)s?*`Z`*wZLgdsE#pYsu#oObm1QiVM4?$nWj z{;i?f!Hs^~uYbT4jHTJ{@~|mWt?1$;4R%gv>Xn?YlBRik%ZU@<#K6KQ0Lw5GSjfK+ zYJXbJai9tv3m2wp1#43_2zDEvY->*VZ&`#T-#_Lh{)>Q)$dzI`%%E00_W`ArwJWnv zX201{f@j}z8?(;R3%OGaZ7IgAAxN4rGZdC9>Z@VhCzO&E;abBlCp<>pE(n&&NOjl} z2Fz!~cE&cIdZQhg*#C02a)K-iDiKS@rjCk_ zLrbyUd{CT9r!9~3-z*f}JYd!rGdn{5c;4fb8>$dX1ouOhZDe?>EZ9ivh<}|&+>Vgn zVrW3FPyWuKo8}@AXHFW#nc2>P?AqMo1*$lmYO))}d*hj^myh zGBBIr<_SD38q)T_F(FvbXWivH4wbZ6p0$_@gzHS5pw&o{jQ{B{yb{keZ3wB8Kk~i! ztJY}#+V!=WI0Eg`V@fAcV2)0~iGLvTr2BdWp4Tb8pStAPW8O*^vwXfcNBU(W*b zI8}|yACbd>@yiZ?`CN#TyG>ox4TB(fbz|LL^ta*EeJyW{w6; z(jM6moAE|Q$DzsC0=~uSt?*vQC66dQ|C5eI6n1(7^Z5Lh#%#)7;0^i^^~8x$gy3to(PWBlHmGfrd!G zW~bKgmdecyPRiNlMk-hB-YZA>&`k)34oYXX670@v{k7mSkJ{#m-tqfgLE^p$C!3G; zpCs5WUGjBM$*_)~TZf@qFZ-MH|=b_K!?ER9%0+!K7$B%fQ+2+wuY& z|K{u>mm865SiH{Tjgwyjc!U8ihu&Zwu5iG%326nnvKaPvn45z!z~z!ehakTOH1wwN zoC7BB<893MIL^YPZd-%`MJQY@TsT@dXTk1{3$@>rf##x=X8Uu^X+K*qkC{(=ln(?2 z+|L8eyACs{W%lKlC5ARRL?iy-8<0~OZ~g8Z=ITM{r*`TxYZqZQfo`OFJnNmIUH5Ps zH1t>+5Qscl3hoLa=HtmCtH$XB&;D|vXlWdqI(IotWs@t~y({W>yPgg~U30)SD zdkY2ccdi{y>ucZEo%E{0%%kb}^b$T;*RoHD2%yCxdA-dMSv*nC zh}L^J5g9Pkn-%Y!&UbobwU4)y~^`JK#fJFhQK<+3|%8GIMrymVRGoM;;+7jZiP zLUM&<(wcgg$+qU}H=d}A(VYUv4$Pt(sT!O`i#>D8ol;dB0!=I7$1j|t{5VS*zTNd> zR$cxQzC`0%ebt^{u+`LZ*uuNL$pPS6+W2(=0-QW&mq0``1;w?A0$q2$h#pA0WMNzR zW)x#x9RGG#p37cx1%rZlf2v;HUb}7~-+DPO-c75smml9|cHpkhgX~SUeAnb`UP3H7U;#yo}t~M3p-KyVSyqD zQ_8J}yZOD30hV#kpO((?*ccN-(XcS%_KlHHjLabNs0uVSj_a>>8EOFFIIXYxGH30+ z*NJucF9Vtz;3)CC%lV>t0Sjh}S(BMAZ#Oqe<8UO>hz81C$e=?Oi$hBnv60t|=za>6 z?r`%aYF~MHWlH5@H0E$dc1s6Dap9{Dl01Ah$lswyXHD)sl6GLIAGCjsGm!A>9c?ac zBfDdp?< zR(*5D)2!n#qLx_5cOz(ijD+taf4r^pRe=x1y8F+4CkdBTr$-+9->9y1-JSYv^L|Pq zgjIBB@T}i@8cFzsIq2S=nlIrDb@%g#wFZRZW!OwM4b!Sb;<;T;DoLbPsfN^Ka0VA* z#814oy^|2-d{J{+^nx76?%_4cMXJNdtq;Y^S=A!1jB)4ozU=cMDakmO`kvI)vC18vi%MCO^?n}*p#~QQj*I}QB^$Bkh+zI7e^Op9K&_hj$p(xw z;xLLZ-EQyc>ea}4m`aaU39#cUK^S(kTQ;LMb0wi3+Z_syFL+r{T*HU@x5YI+9+v}tC{y>;7*x8fpLg{og$*dNu8>B{S~TdyaodqlBxls}RDzBFxMjvV7s=VT?2OvH^X z<7;D9q#p*HyzIe)9!zk}lBaFoBx5ad6 z3!Nuc>&^)-$>w6>1POv0g5v9@nPP0A$?*%b{flPZ_E_J$6L382SAwm5JTqHeqf1Z< zKdGg>9uZJeyNy}qWa}uywC z-KzIx^0RP~j7{V0*YvqsUk1cLQ6(S(VYp~;pJxd|ze%*F0zQh~1PDW(_s>-8opDCZ z9;xDnd{#Jh=be@VHPMT=rOa+Tb(1S>V`ScN;i&mQPZAMba)UUT+ZV(YAp zZ=T9Cc0%TvL-t~_=7sPaW}s(|%dutzxO{$p&|+?6JjicYvP91E%?cGRvg1UhcDqDP zFo*C*RnK(;WNp5a&jKNIjJ(OuVtsiVl>_1>1ue`ecyQ_~)*c5?LWxF9w+K9VesPM~AUb=j1jn?sgW+ z2--+(w&tK(j#s;ElybKb7*TP*`&f{*TnV3L=C8LiuxzzkR*$qR)mo7?6NdSx@}}|K zm#g-eXtSEJzKOrDpXkvBjUk)U_T{OQMCnJ>9gAs(s$4ymV;pDb5pI6zZm*T4z%z}{J^(lWJY#4^7eB<2O% zsY1NJ$fU)HEp^DQ+Y%Q6#eXp$_K(}dG3G(P4ksnXOCBhKX}T4Fr`Sbs%v+{X>EYb? zIsbXZ<6Oi?15BnGg_P!>q!w@9^sE+Hj8}+O?Tx}9{N@*8=%B^+`}<7ew^;!;v^+9$ zI6m$eQ=5mgagPwJH|XhOsQRfU5$mrkCqr?+s_luLbIPZ9QjNlt3`!}C>IiE`k@l1k zU_%0v7RHEhv{t$0Q>3h#LEcZHOy@{K9CDejj-kvZ+>#vO55HQ~?d=b%%BU722|;5T z?FKK4AMykPD<O(zli>xp^nXMS=CERRt2Ia&e8Fv8+ z0~KH6V#1)Gqw!T1zlD#L48odclpO=SBkTGnPXo~!vZ@-5L;$M5AM?GDax|Ru5+>F- zf&i5e;*%?$G<0yT!aZ$_K~?lvK{b!>tsJzaE!j;U3NQWRR>sY#>*$psz`!K*QNBxt zaP+O66iPfwUY-Aq6Zu_QZ4g_iGY5_tp+!12^65QPOf2Y)gQoCPsX2RYALn;~`r#}W z%q$#`c-Sg2Q>d~YwP_A3yJ%asW_-Nc^tTTotTCNgK!9x1ht&(L8gdfij&;TFtDb(Q!9;+tX< z*yH8CeYbd_zOCGo$JAxLHoO7(u!e2bb(|q25)oIAmU93p{&U~2>M;t4x9)YDu}B zPov#)F2SA+kD{94Pc&cFB!c&5tq^(B+GQWUdZ4w*#DbDknQYvBF1UH~D|!)?#O$aj zm+^;+q6%T?pdl|)lp_W5Et z+86svF_STwwKJ?H?0xCZuF%MKw{Hr!(zF3u8ZDMIFnNlX`)qh2aR1}k~U{@6hM-bF{niB@Ru0=&*bRy;XoY2_$!|WPv~$;M8q+(D!!z; z+YiDBvzxQi+*#Le!CUcWvrM@kcKwWeU`4$=yF&!#Dr&iTWrvuN-JBsGYwMT&ycKsD z+2o?ivm!*x*{U#}+SfH{aVVmr6vdkmwuR)yWVJpm(onYy0e#(+SZ;N4<-hrad} zImkdr)hK)EGQ-{ChgwhGTAuarx(K_8)~HISRY`4z(}bq}knd=~2|AqqA%x_5QK)ap zV&Y52S!!cSn(<^Lcg0#nBxAtDv&?09pi-6H25IgH_YjO33o){CDd3RKGCQo@GXYB4$AzjfoIp(1-HIMDg3DHDVVi z-i}X-l^`yk=bgsFMq^(m24L&!c0^obkH!QMns{?aY`Kc%Y`80zlzLY4hT zqi2L_c~qHrdnCSwpD5ND6Dd^#+z{x4bkyPC=*aG8YGks`6IK#sxMr##XEmOKo78` zrx8h%)Xe%f|HbDedIk&GNl6xWRdoAwc5;2jHs^#y|U`{Gsw)AiAFIaB`eo zvHnk1AVyGE|F@)fHz#N1CXi&s(By$z$^f!JnTa#VFEPvFO9l$iQGxv^W-?_}60IVh zR-@M&&5r!!^URJf_{zQ$UdJBxUX&5!bQF!&WHib*wgBXH+>4ISD%0h9(;P4)pQfJU z@Wo2Q2Ryf1@2PeJFQ0Yc>f{o&c5Uc_S6!mJ0$`nu6sSMEdJP}ISyjFtdcmS&&73`h znOm-qAuy$z#H?YB#NsTJI}jOZPE5>}oB2H!B=_ux0CPp#Ra*Jl^96=ER@mG(R*OJ} zpxlsFy%tgy2vzZOWlbbzQ+KAjC`JvcHjO@{RohPdtKG)=w8JE5d-}!Wd!nIr9Q(F( zCqrX6Z*O@rp|vrbHC?Ut-8z=k-=7;hy74BNL2Ld*BLJ1NMYcsZ7BMmAEqC$ANBgEt z49kYN=|pR_e#C@QRejk_Jam;1eoV?Al`UnzO*QbeKm9(!^cv)Ii;qD-TDNi4P-iE0 z$jmkqOXNJCDptn5T>8g)b#k%RZX)4%38*U1CBT06P%g9zgN4;UpxT+OVe10hNAH^~ zRx9F!wJS>Bm{_wygpDq0vc|b{tH%x5%0aR+9nY#$imheGZX88VXFT|$D==*+p~jq} z>LBphT3@u3j`GwI$mP|FND?7M;VW>9N11WP1s`YS#q4-C-mNti5t)s@3J8@0aq#ww zh~3CE@`ed1@TN%iVfpnP!oB+D_Ct9f+eK`t>QrQrex2^v@pv&=`Ge`;B%dUQHKt*mBw7-9VlzTJETvt6LL+5ibn(5vF|N{Vg_@>%+DeO~ z0M?m)wqJwP*eI~q$jbGUvG(pzjBg7Q-}%Lr*9T{jXpehKCuXM%Z3g`$^w$nY@}M6F z^HKM?WE8I)NdQc+(s_$H1x$x#Wmr;p88 zCAGWyE=|$waron)mu)%wK9ox{&zfRpQE4JaiZID?P;Gu!oMcgg^1Sqn+OGSsmNhN? zv!m*@k2WW%Ud8(w4bbll*(ML+`~9cEk7P4s$2;H=R2)3DGflbn$O+>dZ=Ph)DxAJ& zy%+Act}R+A=yQDd(cHgb+5@kN(XY*B{5H(vZX_9X4pDC-Z-)d&&GtfFT2Aqf_}Uuw zSz9@zc618a35Y23pzaM10SoJPvJYArgGYeBWj?(@MBU+3fkIN~a*tj#`~7{D#ZpvI zSakTMqqc)Cc%2LL%>x;?fwu>O`DHwW(Wd+T^mxXA`#XdPA}%|*mShqnGHAHJJ(oxA zE^O~7Hl{@@oEv>E<1t;8_g@6Uo6{BnvOpANA#% zyuWNdZ=KxS+^dS|Vcs~GB6tqoY@n|EUmQV2vxgqtdm`6!ZB(H&+5DEReJk5CQ7dOpdPB*(ZrjAYWmgJ0(@kG&@(J^%Vxf`bkvHmz-Kb^SkV#xiNBso#};e1jT1<99Ws zq^s@C2s+-H_sqlFO24nf{f|#3f*Oro(Cnvjx5?IiW6o|thdQoGAK5DJLpNF#i6!Cc6psEQGydp{ z{)>pvuDeKE#&6V*3v)>d((YHtIoR79zCPVzF>M#y82V;0l+3bFv=ST~+ysD!T{NBp zUo>IEP#s?Nj~RDvPWq5yBWCU3L)Y+-kFiP#f45zkJ2fDpx#=rzB%7P02B#7}$3UK` z{M7X#h4<~%r;8X;vXJ951aD-zPDN9H9IGG3Q%WB<&O1r{s0Qp!2||sPp^mD+*3rY$ zg4K9;NUvpJGlkx}y))mKu@9*HyS<bIKkWizuq&2jUourFak$oL7`OGc6;2ph^wh!qoY}8WF{fwmLl`Wa zxP5v7cxJwG)3Lm5+07l;SdXXI8!e~>l0dhDfc0A3Bd?R0HKg#MESmYBetmxGf86=9 z)@dx*h&a(stZl8^UUp?#`wXuE9?!5?suXZB(G2HdNMnSfP{tH_sUn zO&QG-Q_+0Rum@Hq{?m-wE1M?x*1`)B6dYf#$&Sa!arksSfMvH( z&7ewFw^?+srC*QKJ2blgMtB7Lbn;`^d)}G1(Z(VDt@E#ef}*-p7pJtoUlokp#qL_W zvt$ElEkq>HhPR#$=UbVo;nyY9U@ggYEmfB&ogXr2X5(P3@M_=|))IO+on)NlO#Pxk z>R71*$wjaIemgXsdUhvPsz>B%XIO&YZZh?vJ5YuR*^BCQQtj%CAVQL-XKk#!DbU=( zoj%}C=U6$%&U!4x5m3zu%wy!=M&j5|?)JQuBAE)JmsFu(>~a|RJgx^jj)4E3i#ps9iS2FLu%Frt&g@m9ztL%w;=Y0+04t&y{tCjGPGI}doQM(-R3>Up4vMw?H zV=XssbGHJ%B*f-S=20Wv2MoN&*visk7p0UdWqjePPZt>%N6R}T(^soFU$bqahT3eZ z;_u;$QHmuAo9lx3dy6qdZ;o2Pjs>>KC#FmFqR-|_dDg;r&dRdCcom?pu_I_Oz$%-_ zRo|EeH_-O5;nil5lLv`pe7UfCQiTWC?rTWr@$RMFWv9OeR)^4>`7hXp?!-&*2tz;) zqvd&UbOuq)fk)-$p}%XU&oCwoTgsqlijJRG`R0$AnJoh$mx+|lEiNghVca0!Mj!qC ze62U7{$70_7E|KHgp6EY0*$gY$!L=gN^ zS<>>b>QkKh5A`D}-@@?>*)0G2ISa?G)Z39%vG8Kcv=Tj9CZ8YYpZc&&H5hgHwV3WA zbol9}76>-<^a3_HAgVJz^NNK7U-Dq7^O{}Ro_MD9=imEmFP~VL?U1nkp&Y!$+vGjk z@<~<)W+c3tSDeWG`KbK4Hog&*WM@;&R+tt&RwRvN3WFZmM>WpNB7Jcb%8#WY;eJ#a1tmdl1A> zWcxF2zlAV38+%DF`n6lc4dgqvCOjQBz7fSio{X9OL7%i#WPJsPnZ}e9SFoaLJnpSWtnp+? zy%>T!68B$BX*McZpfj8@>a9tIP<1FokiVNKr{{@i7S5zmHT+QOh$Cmj)(9CFlX#A29*T<0BQUw)A;ehnX$*cBeP;} zq_Eo-t`n$IY%DtcWJA@-Abya3a{M#6LbALiJgsK2Yaqvy8#jI|yY|yoJVqpbeZi0E zFOzn$`D2+_*-YR@GN(SKecT$N^3CnUJbdRX9+Eo?*Wwq3f6f1~lDSb_*u%|U#RBrU zI~~~Re%!cDYoC)kt zEea269JUK(FF4ZQ=2>k$HHu3i$g`z}WajJlHt!#E^ncGmVYXV3`H9Zah|MzXyZt7v z>>6T9xNszDX;yory`n5?5lpev)*+(0`_)9WthC}*LkxVduOi}yzu4nL9>>! zsnAaW?Ycm0oZV3-$q^fMKG3i1$oq$_!$C31jtiE}S;o{7_HdSJ>l3oosS z?qjY=ex>VXfOt!QS3|UnZ4vMQ2hHm7q)%M3x9Bii{-@A? zx=bHr*x>Br-$)|i-zcDC)gMQJ&tZ^E!e?!px6>hN{6aK7IQSL1Zx0;;!Z zzF982AJ0A#_YH4nz7A`pY)K7zyv)7;)bo2kn9wFtQ>gmgfK0EoH#1+9Z4GC;(=5z9PuPETKRt;>EY`IlBdmhE&hlQJO~>db4IDMK$YM7XVEjO9Hpbc_FQQn38*LJ6vV1rgQP_XYvPd* z(8)9|&YR)oLig1t#C*N>n{t{c#Jm%ZZArN7YK%STsK3}!L1dcXmIAvWP8uI43BH^E z$QaT0(sJOzx@*nM-x!8l;G3^(Ua+&U1_L}gC;rc7z0;O+P*IU_dJLYR_hzJ^z=eSmD zBMrEiYQSX{@SF3pmCD4r=t7WjEvA}A(6R&&R|(9N@ir;pcfZVHjb=M@rU+0k!q2Q- zSv#MHMn ze@(~(rI8F;mA>bI{|wf+?5&8W-O_i=gZ`s@rL;*8h*;#d{;2J=&y&cLKa9q>82Tsc zR$kep{El;i$;UA$QFP?RdQzZ>8+ zN7JEHDU^%$dd^rX*Y3y?0ufAj>xWwAMJ0EK#E9RlFZ8+#oBp8_el4H@CCESl?*x-A#)WifggrPH>mv4h2eacP9|siU)U>V1-iLJrs9$ zw?J@recAu>p6};Vt}CDN%w(RKS@-&_6)f=SvwE?yX2K4W)F8ScCsdl++=eSxFE-uh zW}1-$Tlv6F`;5DV=`Og06MJL3KP+;7^R9xbUZ=ryJ`n~R&5&F$qSTF1#H7i{AWIws z857Rhf-Gk5oi29AnBO;I6u@7__wsLMN)5B)-6LGAY;@7yhQms!TBz&4ZfRZmxY91a z(-@6wG0xd2wmSzA)_HxRQ9r0I@nn3vurNG!08T^q>(0S?${PHBPfh)J_DOo)iBB)S zCXzHH!;=LvgK6vq4e0lgdn3?0NJfO=uhT_;2i|mqtOZwTP$!%|y_l>0ww2z$2*-0N zYdgYTaInBWZIqY6cu;xJeBRo(6z5cl)5&lCqnd|q`V=eD@RV=&7?y^U4%rl!f`$$A zO3W>sh;*MO#xN3_OsYfnLRs7dlBhsqli*YWsuF9>Lq0SY}XT>&0%7E721d zqlS&8&^(hh=~^k>haV5|^9e3( zI}NIL^@9uyUO_j`P^BIjz>7fdheD!@ZV~Y*TkG8UslUH^@qogki0xHk4&d!6X`&(_ zxOoE+>?1R47>^CW@?ZYCV#JH(&s$zwI?nPDO0~L6bQjVM{2AA8Cv1I0@cM(Yw(%g= z2|;u^uOr!fg?@qEVhtGq@03U8sIcXk`9Nx%(|~6HtEzGMt7JJ%Z;hQ`nfP=uU^y!5 zDDPYP3$qq97>i}d3EalTkR0*bs`NKKB)UORs@vHAfi_WL!5YVpWaflBX(QQ}ezJz{ z5$Lhsqo{K@xs|6b>&jrR5(e#iCbp=e+To&O5lWgm>1YJa(MU& zWgh+{e7(K+N@Z{WzyHgf6MBlGyFBv}?V{N2atvQF`0Mf{CE5Y>KDoO*seUoh-_9Z6 z%_8WYj`4J(8MhZ*J->_euJ}(Kdsiu>B=wM3u;onDtzN9`sW)k`mo!W&f2-f>=Bc+i zktb280(o(l>E999mL8|-TA0K=RxR%Q0&2!w6lWe*!5Nk*xTtD_lElZyzS~*8y4dmI zr`!~;P+?s^N~OX*$s-L~aBqeohx**llnJYWwxKaTKJ?^FP&pGOGj1iRx1XT#a>0f7 zpZ@fu66bZ2onAy4A1%2*_3KTgL&IbGQTV+??fv`rRso ze-Z~;CX4ifH3)}n#d^Hig~P9yM1kb3-}8=G29kfk_8LI3$K0~F z3s^a?j5cO(Pl|2-=YxKYWeqlPw~oCX(Gl|>8oH&S`ah)g?fXJPP22GQ9~ODjcK)Be z#&@luR2jqsDnQtoF*>QBLS6s8`N|@DI6i{kOoO97RB=XBt8VuQ1=ubT*5t$_yBzD` z5u_`ox^!dMOGY+u-P)Pc-Vrd}S6*7o?{$Y9CiSFZ=(2p_ExEQJzDkP_zux*N7>u;G zrF?eD@N~ATK_=5K)U(&`-UJj~sV%;%+`zt_^)0o88x9@%U|iLAe1AZ1D|~QMn#h|z zd~NvTctB&=sN@JRhSgtRNKh^{+`#KEHM@Kx<#Ny6FE;F#n2&vzt#2IvGuTG`&LpPS zsrpQePHNnXK~?g@jnFv96oCD__Yp~D6zGH(3%(`{ z;pRwi|2}xSwAMz8G(%Ykw&=q7$6RBV#Ak2OJ7=3yN454;XFO-imFkMW6k|KfEHSTF&lII;!3uzlsQ%usZ!_L-U(i$ubqe;w-}{#q;xlZ+8eR37)cv^ z3(>GR3}`>%_mgl*UE!+_sl5$u0q;yI056MuTtUkuVCRCyc7fJ!nZ@fjou^zJ9@X20l z@uDXsVNmLaNGmRr(|ccHd`|s^+LJxsSkx@N`ZOX+dy5gRfor<)QkHguR}hRQB?jWB zuqq^1e~gpkVmYSMl|4a!18Ez2lSl6SPAHXE{P5{|*9(Tl__k4}YdR;WtBwG))|aL= z!Ot#aQW46QXd{^OjwXR7mcmE|f9WFz1Q)CJ(8PngcRdr+gsib$8X>)pAH*tnJ#n0` zECsH013H(7w;u%eqB4HJDivTJR`71y3(IbQ^!2p5nuA6>jZbWD+rtkLvll<(2Hm?O z%xuzBIK~s5XRxRFB8%`vB9g*$FK_&GQlBc%Zq6-s8ud%Q*C3h_kYeA{eB6RiUale) zto>}8AKWMyZDOu0@pyve$w;y<%?P_C4ch0Y&XI zCf`GJcwS>H`2J9A_pzN+-D=Li8hko@iW<}#*1AkPxfMi1_6;$1i?S|KpRFPb+*J!UK=G#5LwBI4^v3Q6siZ?!xPc$!D1sa(8 zJrjI;n}JGPF@}60_$-!7=V?OzZ+E`dBk&V+30o2xIG8q-PbQj;*4wY}eI;Kk)al_Z zNsFI?mCS)qqF01dHj77aklB5)*^^FK5PdfQ-+&s@@EoU$`~f%8kW#$T!E$L#eWi`I z2lz(_S7mp!NUoiT?^H+&Fp+ELOF4!A*JGQ2G37Mk=yOzsK?aZd&9|y=_`9EM2FFv& z-jil2HIAo*7w}sD_{D~E6P!pFiScZ!DRq#=De6{y{@dPcC?}y8L3h%jN7`D9WJUO3 zf%pz~KK&lX9Ib5!*t->}jcrxmc}a1!;MgE98en{z-93Qo}eLlEOh^7nM@9<+IQP((fwZ4koskiZ; z@T0Id*?)Gh98|+s5TRd*T9Y2z$H+u z|KJZs&r44e%q5zR6&TE-3EA5tqgk=S&0l26sh8Gh*vJ>DUd-AOc^jqhdJ5!u73`E` z#?G4~f{4O2mT!_Avr)*qKQy+2F4=9UnxK@c%=y)>7>GjTW09Y#I*(}Vl1)010076y z0Jq1u6Y+=5szph)!;rYMn>Y8)lN>PD^yR0B9n|uMgn$$w7Ad=}VlT3Y!DQ?#6)o?cn+~J8q*Yc%5T9K~ODrj-b7JH#m`Ub+%!C zci6VafQ1%!;^>QhI>ssA%RYnQN1E%(k;nzM`a>^)`05U=0EUnzq1E-_FGDrzk?JeB z5uf@g1KAGr7T6-x4jOoW6!fuRIMBI=skZd)wsw+ao>F4e;Yck#$2@1Gr5rc^Rk&jx z62dW;TVY1zw!=}8@xOJ&DP)``JY z`|Q&jeM&wKp{kW}E*<#tFiS80Y(Rcy5aDrRO%cvHQ9J%m1a66J;+9C+GSJ{Vwyebev~QvJe_+EGkNS{ ziGn*{NqpVx6GOd{d(kBC${l$6xW%Jqt=rI%+#n~V(!K3XNvgm zAEk3(tRNlZD4H;3^>qzi5yu8r!9>nA~bJbnT^?ciACWmi|Kb>@}7Qze{tz+FBa z-s8@`;aDkz(`bIRnN0G5JM^6d%;gTjCA!}FOM!xi+g#gIYaL72!wt=dZhcnlXSA)B z!OYrH>FG94RA~TT=$KoID&z&MdM5}yP)Ny+?vlCv2{dH>_tDb}bn^AkO<&97EC+v_ zSkS`y{PWAT^kljx&w~Sxz=H6$;Fw->XRb&PAC8I9aihM~S`lhwtS~lQy2@w^lrr{` zfn`|MOYy$B(`s^GTXHlwTJd=TkaYDIK6 zV)*AG)xa;z*rv8bZ3Rt^hHe?VcD(5GIedWzN2T!>&MHscrgoP%)1I)A+G$J~AKp;5 zzQd!8PpwoPr^TE~#>kW*oU>{kghfu?Fis?YX+fG^d)%@RZFa7SBc*$dQl8;%a$o&* zl+5K$BlP;P=dnEF@>)9nb&ZEM787Vc7iP~ZejbD8mCtEZXK2}XB%Gx$7{9sh*ByY6 zFLl9TD4B4$Vr?Orw%5IV-@Z)C~`gtzEDVqH^m*Uxav5vPt zrwKwoKu19;=vufQrF4f%@tL5O&(C$3OQ+68;xJ&liOiVVVB=lO?SXu(pCOhRC~}xe zL3*N1N&%|nqlm2B=%jyRE|}529;9IzxH8Y*q7^)yk&=z%@?;#fYdKxknei-o+;TtT zx0tiKbjz8TLNYt{==p$L5sVW5xh^$ay&)ndC1}ymhxVcohe@TSn@6Pi?*{bPYVt^( z>~oe~27hMBI$EAfqv}x$fyC3_XVBqddJcJ%zs+TDw7R5718kZ>Fqn|1#$t;)r97v9 z!><;My>Ep1ujs`l&@Y2MsB?Acax$)YFL+d;AF5K@AgtwkQ@wX2i~~~xlk42Em#;a> zWTxnAx$1l`%9o&p@C{eiM!s}UyUZKLz&1PY6?NV8YIhzPx|{JC1ioOnbDC`7gWg8@ z>@O90IKoohtL0n{-yk;6@XP0bZrqxcojehuK_OR_gd={G77r;{P7}KjcPojio21aD z#qW?Tq7{c~(7|*>@?}cZRev<-Xnkq>AxfNEfbDsHdTIU_W2lc(>v`+>EuI^g_+TyC zyKw9XWrBkB9+V^n`mA@tf1sS54F(gcrooU^kATLRmW8U8br;lZ!QNO_#M zyR?itS`S8(p`a>jp{uXpgzkGIhCOcn zDHIbC8k}<%B8E!N>HqSt+UiTrpe?|rAdIybq1GQU0uLZLZP0yx5Giste9H_a$&Ypz zy905pF(h0L^BOv_O9@Ng4#?f&`-Wp)Pu#sg;wpzF{m9Z1SSd+Om;sPb6ON_Dnq%fs zQBsM3s^&VJYniiO^=PC`AqJ?T{qPNUP_}DqI%*LRs7(F?Qd4WU|2?p}`li^N`NX;lUhgI~$dx1T`5WAWs|s#^$P*64h`;eV{ZLtQa*r2pv|Dk+MgpqB;Cdr_!M2 z^VF-=WjSwoQSPirI-NmbFNn1jh5xT3S1W`3X~hnkDVgW^>43AmYBe{)=SjT~Ap!g~s=WTZ|=-`V0p}|Sh@WT|o2e?A1Pu1dzO&)0_ z-}=??&SO_k$6QqEw$eSZ1%wx22Kd?mC{|@Q5k^RjP!6aPo$R&F7j79lH-uU|*f1eL z_eY}n5$+hu{zcu5w&*>3$-?+#x(Rcv+O_Yki@zp(eL-4EtT6s`XatywwpM>kJnQsL z@fG+9=IGWsbCr<3{X9rDsXcSTpK65=wO^uLPl%U!V`>%|#r$kd&=UNTWyq7|xtZKs zFJihsAwu%eP59W1@92jbzU`}NLE^q9J5!^*+pX&dXL-%Nc!-sN6M_UZTWo%aKO7m|Y&GD~=d8DJM&2W9ZQBjg z!-$cbImTq}$&sIr55^3V_o(FO(Is%*O1mk6PToKM}3_VTu_*x0=vvA>_-&GjKZK z$&7KmB>!>HDsFGm2iuHF^_@gKz6pv0@;4_?XbhhD`EA{xAT~d8W~dsjbzth zf8*td`y>?ri8_on`x-Y)SiMZ8d|f^?K`O+MSh-ktNkk zT4Yo*F;lP`*eg8@RXXcleSAVZwkwlz>eq!ZVy@ zjj#$M&>RA+lvCESzMiOA;(8Zni*K4F$MFo(&oCgta&k9>j~ z+)S_$cSiLf>A=qV(d6gCoP5Zczu3_u7^2Z6SGW+<`fM^bc(I=VN6r)Bq^aWrkn}?9 z#E1bn#-SfYyHGOe9nweH7zoNRf!Yb5up<%Hk(V7%m;Eps?ES=!I<)m9r51k+gRpch zFuFY)Sw2O&Qv}+UX?y+*F@2o!I|68tlfcEActzs-wW_t|Jq2d*0rtyQ4NeZPUSmfF z3jH_7TF_S#UI(xq_W(&Ekrg(n3Fpf@6!!b#japR=Z8lGYxA-k3S+}KRm2j0ny_w3C zbS`t7^BmSF-ARHw*IA0)=o5)BV292A8Jim7{ZrEWa3v6Q_CDlI z{kgRw5sf&W?~+S_vK_Ahh10<2gNM>k+9e; zwc0PfxQHG~^;hy5d3!{C#kySp;Sj=2Q>$uc7qXTYQsp8M8Drkvv1(^d^xp( zejH+Q?G}WaPWy=@Sek6pscP?A9X+_Wn9Y9K!t8#0dEw<5dFj(#=)@yk6aLYlLqOZH zuP@6MRFU4R>AVWuc8hP~b{=@Fx5QX^{q8N&7&gL!ggE}S+<tw`#OT@rtFRocj}UpfpLH?DkE`7y!SNU{0Ztweu>ptGU4T zH@Ba_Ca-c0P#bg9X1ABlz|BTuAlN@f&+MWGn+zCis7Y=%N4L5!V$I|h@28p%@`{XL z4v0l*Z@Oiit5iV*;CM#t;4Se6n=bP@Il$$YB7OAyk2vNX-kY*n=5B|L%F#|eST9bc zSAo5`zNm8ew3}$vQU>E6+r-nGG8_<+)x2pM`*n2f23Elvf@phsiRcn^z}HCxO3EEB zeu}2Kl(hIhrvteUypDamnShO3r!XtC%;`o;j1(c}UQJ=9R)iZP z%=%X-By_6LQANOYuM2}%WytbDJX)7+WkphZyjdY=h)oCli1tY)VQUIgr~VaOUu+27 zirA{801-}eN)%H~JY(01q7qB?HDVq+wobFbJ_}*>cH<+|$9AR(ZV-@vj5sR!@}Tlb z83p)4D1aJr8-He~@FZaV6ShUt+Nx#4F;;sI5_B`9j4ZbEr{0+s%Rwfjuc?pUqpwTm z0mqnv`&A0>uH_J(L$ZY>*X!m#G1%mWR@s;BQ9nkytl=~~1L99pwDiyEwM!B8L!%3- zPWhEXz2mtwETqTNMq^Rusw}se)jsDK&Fab~aZGdGeyWu{bfn@sgQlP_NfZ+jyG`20 zPqKLy1zYoxX0*<|!#+{2c1+x-^-^KwFINUdsqa*FmMzw5*I4i#7J;NJaa zTk)un#&%*`^W!j(sCCb-SrSQ~1SE-dfSHZ*7OfcN*jS8{{&&WSMy~0ph-rw{J_Q|ldM{W2yo+E3?J0O22;b2@_2U1`K2oK z_)9oUXl)4;X&0M`z8^jX-KberhmzZz>vWvr8rHFX{SLBgd%u($`dhHKD3&IJO?yJJ z_K8n`u$2B$$CrM@X<*Haxl3t`YA!(n%30Ws^QD25QnZJ>cu_Hdi~mk-_qxmV$Urc< zu!X){;&WtHaizw%_-K)D<-7IqobCkIN3Cmf1(r`cMv--czg)hx4gNFw@(D?qvqp}r ztH4AOsgD#Xkuw63T*>n0_L9%%SRmS&2wbxSSt=MExH-o`x&77@Ic)7nad3viJMz=f z;_`WXn9swC)6*xv+H(mtd=5RrnRZ%c3!9WMktrcG$Ck9&D;l34Bsm=To7W^pM5Xp2 zs6@o#gXr_qr_)~_|FSMqY5y?)r>1QG(?U173-46BP{*0QYkZmqJSp0N=z>Vx>*bv`RT zd(09C<~a7v8n6N-TnHZupuz};VA|Hcwh^ppmgONVJ?!QwyVAWoFwJGpmL*_V0W0=2 zRHsj`ly$)(zwa2p5d~H}HcVpSUW2U+vHAlW(_gx&Y#M%l4JBCs@&@Wp&6X=z=wUrsR!A@YV}5&q8Ds&Zej{b|DPO=?d6zFzSWWwxQ z(v2R?@PI|BQWG{^Fw{Tm%lcE{P1w%!$8+^Q&$7K_{mbn>nz348;qmBbI+e2b@9(z2 zJ|j4p>A@z;jJT;jnhdmkFI?qi@p-{g;qtQIaZ#{)rtKn;eVG}B=+@q{$1lYbhLpw4 z%nB#IptC@jMc#R2O8zq9vUM?lq@39 z2j@I_GS_@7YGnRUqZ5JqSmW~9kmS}3p|eYgwxeUX4yl+CI` zJV+Vmw`Ktv1#e94u8t7T2+`Q>Dr0qL2X?&+-S(0%LitcX+umd044604wIX3=C^?C# zG24f$@PjX^S^tz9VLFLs6vV|;jbr)tKgkU7yv=Mu+l@_x^P>%$U%LFJ z5NnTZK8DuRU~0-WqI#X9jGm=qLb;#5&F&EWP&;Nueh>_&J>Eph-{L;Rld!>8zP(!0 zqeJ;KR2!%3-cYnqZp`gUxF(tMLDn5fcE(0T#Eq8gcTWYg{hlt(C!7br;hzX^Zz9mI z&sq9JKp=70QmVObgwFTz4B44=^ar$)FFopYO@$b@ygtg2r`y%OasUvP`@RA6^E=YV z1l5YobawL9gQ7gKlp8dG+UPd-#>xD9c+%c9S^wfPuB~pOA#ok`Wvt+S0^lu@FFNlU zZfP}FE}+?{U-%eY(q==`2IwajYmM6Lvk_epzg=!)G`n0;^KZ-4>^U0%4P7@bBCtT( z$?^4&;ykZufYoa0o7F+9)7^G1@#^f`LA1YY>*w(Fs?pAn=F@4@0r9tXmysK7Q`vcc z?qkr9XUO9K1y)E&n(OpXcc&-X)dr#pED7CeAenp|rYG0hI+= zSs&AK4r^;|%syxEK4eX`uhZ>bu?)FZjCOryp|3jn=hV_E!b=ICb#aod2I|NyEyUWt zL0dm)ZXlmoNj_C1??ZbE0^03sHkENeB%e(`=Iib--tiDh89yr{#s~~Gs232b`J>-> z5Z&*YB0Nj47P-!PD6W-nkJJDbg)2V(O2z+M|BC7sU84MpMJjwzD3Ct>R_ENWe-acp zAuN4w_QL&U9UxdNL-i6kvzvzk?Y5{1@OiQAo%J@+=UmyP>xm>IU ztX{V69a7gEsmf-H4a4PZUXoroHnrpT$R25S&Wm(Q;CJNl$?hZ(^@G?+U2Kv2X3l2b z;OuiH6id=@(6Lz+m^sHd50s+{P0>-={`m(@I(2WvaeG7<^|U<|yOhMh5dQKj@ja1R98I#QKw|h~v0E+tNO%gyqEJmDCkZ$~3Bxd?)y<>qnMML0 zX?@|3u%Ls@_}%1mM2mrrhBYeWg(l@9o4m7JTLD%~n#oN13IEj68Hh_}=uwb}63OyR zGF)78IJrGmX8FPLzwQs2DcHe#Iu#0sQjrWP_)U8w^yGr*=C$gNk>%8Pr~^_XXPTXH z49UmR3p8alzKDijW7#d&g#4wOEM(LQ&);2E{rH?ZHnQJMAeSvl{;n%$T1HZv@%ztzWH8@o05~u>k}HJin~?gyF?NRC$w=|} zmuhJ?_fwemiKge28j|TKP+$zE!si;gTHpid3v0G&p{v`!Dt5-}_cB{L+P@7c37m6k z-D2nqRBx4QtY2yVO`xTScju_tQFy}~ZwCz6kk)R##^j(;I-ctV=ZO4`;pCM~=11~d zLm5b6KtUhhtJ3>?cD|E+gt?-n2ro}VT9k>-n(^bkH1xVI2Kcg{l6bcU=sRo3;A zwLt3dSg-mxk(mW8FZi~GCW*AVVG~E-S$hXmORDAiAZdWvw{JQxtIH;ef?__rTmC*o zTTZ?3WA8MoKav#uDl}W@!?ba2FO_8juB1p?U$PPEeaL9ud~6l))f}9f^v66hoWu9u zb&`A8i#j2BiKsh1@@kWARy2e3-#-f2EO`NNJ#hG~WZP8FwCQDGvf|}{Al-t`8OOW9 zg!lzP2JH*#-M&R6zH5v46K#HSZ-?fH!e~cY#=SpHx6!ym*~*1**NP9`@xm^YB(Dka zK$^bS-ZoT|CvqzCwFE-+ zbd(Dy>1TdlnAOT)XqWg|Mp+_0sCvA4*nAa63i6EFfW7AkElJQOiK$4w5;V7f_i0Go9fA&P^-q z`#<-4x?^+%z-pZkmhr%eEwjlVHVK?e;(J;(wA_~Vg$DTKAXbXL$m_h@7j9ghrSO=W zET(C(tO5dSdPApX=30-B9^>*MM^(r}!>?|vRKtlPWJOLcVS@Xy;JTq18j!5cZ_{sfrm}4Vn+Y!g_*L>5w@0uUK z{=lA};h^bvyQP7B#mOJuSuT)8s(-Q0lWsPu`*#?S1j?1Fyn;QLIi7d8uor(23aflE z=X)rg$G&GKFYTq6Q>L(r!=b4!5y~G~f?W&mGdDtZe_?j9^7q0&P*|}=Y&&P9%$xFZeLQgo&@mzU8v|u<| z?bhLG=_pEyoEhG~EA**e*E5YBQpon+Xl@0(_}SZy|Nall4CZC%GbfP#A2W^ulc_Oj z@@B#;CQ*GQ*m6ENKfj#}ZfXDo*DpTC1~>Km8b#q@qIfIkToe0W;Y-BpN9TQxM_>y# zv2t$bA-Rg6x9&jy7SOYy?SOpq#US86Gq>&k>1KIVg9&NhO9|dji-eHf;%wx^4);)Y zXzf#_286?l!=18!KP#z-&Yry3wXl!D%ei?A1lzPGD^ekMKMaT8;$$P{BQiK&LhqSe z`W)BVre}AnOFP8g^ntK%Olr@ zPqkR#I#=)`i{&}6_q)$jo521fbFMyxfBu%=uQ!i4{R`ysM{kpNGwHY;zI_P`}N&ig?=gb zK}~@FeEhJBoa%W6<#4T{yTnmr0$v2~PiD&+lNA4*)5&l$m=pSs@*H}l zeAwT{c#-G@U+dczB!XmB^9ahfNzLk^?{K`5jQWGgn7QlC)sCl=$T0`|7JGlM?Fpt- zW(V|srm{ z!%lxU2K%B!v+HTK72sto2_y`K8mzRsrEK@dx;(9zA0Ngz`%ZNP8T3$`&2e{y^gU;a zwE@i#Z6UdM4MX)>>(_=+PfKuxmGxwZqRilMObO(ny#i8}L}P4hyu?)t27^VP+j-3B z)(Ig=FSkuTDo29ie01-fg;cN1^(j;B{ce;Ct_~H<-eyB)hU=fjnnoko#jrWxfByb4 z{88mM%({za4IaZUac!Vk!X?qgEwq)<9@crdAydxdA&;=-tCkVky2zH%A^z_|kMQp! zpDV;SMD?b1&38C;T=X?UrCM$uCvb^1I;%$RH0>E4Mg>fMAp$wGdy%Hb9&bz23oYD| zjz0K?jg9Lf8;weePE1~4om@l>Uy(tE zoAbYYam6102|(6#7ly~;g=%>oI6ZF2>m|EuYP<%2q?MAfvGO*-*!fArSq28e(?KM70C~Z3TbylWfFv!Pe?+{G*)y zW#4^z?GcKwt{EPsp~^%`HO!V9zxdodi1WWx0uQ_wr;Lcy4vbP!#&O(B%o`;;$(i2f z!ZFbp7EO$}RlgX>kCQ$Jxv#TJu5yq8`PT@kD$r|)SP12!^O$nTlqa}2(qi_&5XA>O zh(c8!mO7KT%PgMp4=1ZG^&>hY|Lb{v8VPz7zTt_(b6|@^Y?bpkV~y9cq#*VP;85io zk3R>iF#C3sZ<5UJ%1lL4bP%zo)2=iaxssVX!t%?}nADu(vP_*sER&yC#w?@C%(eau zvre>75VT0|0`%QlA9X(DxNOap4BNa=d$eZHK9(PJMY)gDy`&%ed-V^c-x5LP3x9Rj zb!<@yY#aj7DE$%7^M)o5w?;;(I61L}zt!Yxjzd^Z}nc9&X-j@Jynr$ zhJB~tU_?A(57zBm@4wJ{`VT;TWvZ$0W}5y^UBm9QR3<6ezmd#=7rH0gb()o{|7@W* zNh3vGmx@^LjbjxzY`9-H-Y&w|0>e)g$9~IYRu2G*!)?=}1@QfObo(StI(AU4$I@!k&S2Mj=dc(9BwiUho3TGEAzxz_&hx!^F!m@ zR;5jq;sXB)b6U?j()RsB*G;Uk+x?+mmSm$q+Ut$yUKfWdU}0l-ZFB~ub6UpSygwO# ze=XYi)8puGRhBJb3O_cwL91qf`X2SWxlCrdN zySpb{#o5eDk7YCEqQk$I*~C-j{aO{4hOR_k z8k5*B%Y9D*Kma;l2Vq_&M>#=T3#SG$|81O=J>-$VyzZU0BU1&L>0Fynp{pbPA$SGI ztzPMc+8o>9m@i#>N-wyB{J!@sR#8Ho;g_(Fv=qFo1qvC_9tP-?R0VYeLD+D56_(db z=B3(1B}?q7h93_3rmz~L{4D}H#5)<_wgaERuI1(5ofQY|`{Cv_zT@|+ZJpO)ns;s9 zI5yuaOrT$ZgnVy<&9gd z#U|D)D?XSg`97M71~92JZ-+HOZ#a@Wbst;w;wjVl>b40*DDAeRU9#MC2I6VM84t)Q zQ!ti^kZn1}e!>ItwT^p%CtQU3_sa*C%l$WoUDOw59UJ~NwS;}z%RE;TesguWoH^$! zvTKo>tQY;5xJ)9QJar!|nhDo2ij1N4ZjZfdv*r=8TTfbh7RgnAys>My=%!~*rs8zY zDVP<-fS}v_ZCX>>TdHR|?O0C%GR02#ZhUc5evZo#_P*SIA{CD!u0r8oE3zcUk2#W0 zt-zsYKN94~%9Kou5&k{7ZJTlR9M~3~4{i`}`h)oPcYRW#q@voNEC`#sPjxk_`#tWw zJ0f?yR9~MO@xNj@4>{y$QtyxZbjO zOIG-*KX_+2o5|nxlUJj(yN03~htnr;HuvvbQ*B??%zk$u75zz}tE%SZP4dDziNWto zn-v(sVWYzRf(|fL>Kz;O?H~MB#`dD~calWZDdb4X<@_}JYpw@@2ar2ibj!7}=szwr z;`LKajz3dr$pGr`4x;ZiGBBJZJErDPE{6k;A(5ts2q$E8vuEqAl6RxaoNb$Ky^bJ| zUX6?KU3dZtdqzYd3IbbZzV_?3{Kp0>IU&m{RB^p6YDUVB>vtDfNz^I{|JZ_(kf$%+ zxLcFpOqH)Dqp^BZ!%;zdgr%69av>fn0g%O?jj^c~L8CF4hYWJb^2oB2%~glKl1P+z z4A>901)3LB&QL$UN_}t#nfShX8+NqxtKYV-(;U)>Xl#RXRHJNxR+j%U>T2aXf=e%M z;~k~(6Vc5RS^?Lrky+Qzi46Hxpu0cLH$gCIq5Y`05@HmRL7EVGH}HN#HbB@XgeLd~+M4h0O>y zF9i1Z8_P+{b~L=d(&8FFhg6{$)keX-f(y2Kv_S2DlPFubqQ1mK@`{Az9& z0i`jo5gHOUH5!Wc9RXd^xNWgh12@*7{3F8H`J}Dwmgu6S7-52RIS$qtLCS1UpXxu=IXm1&57u3wmgy-0yaYP^3_xxTI*HSaFBqMT5J$ zyK9TPyB2qMFYW|)cZZ-s0ypP>@AsRp$+Mp%d+jwd@0xjk=ZG-T!i#ea&OfB5FX@U4 z-qFbA;5sWAB=q7E(GXW1WL<%907%dksT#gY{tFbG(9H;kFlk1k5~z|exbAw~#P@7I zB#aL9-R7Ppl&k0X3%f-UJG%!R+Sb^h$@J+bN~!pNm?97W`3WLw+RCLW@*nhz3}$<^ z`8<%B-rU*jG;q2j(>{Jg+wXctsm9Er9?o%mrlbSsnDzeIxP_V{ZZ9MRBFz;jhdWts z)W##Vmfz^!THxl~LkYeI{2W5C-E1<1?v_IQh(Z{!Qv47PWN5^|0!E>=!x(%)*e9VO zR31_rbcwjnNg1Li42hoASln=_*R3}*u`D)|k6Y28(<6u93!~2QmB#boY$Uo}t=0bi zH_-Y2Jr`<+=b;V*dWH{clExQ&36BZXEN(Ck&EN_nS$ip#wavbN+ow(z7ruL4YK(j0 zU8ByUhmd3_fd)lYqqCjI&MCaW30y9Y6$;b+>V*-XGG0RCU2pHUYr^dLH!Wsxs;tD5#RZg@uM!O-+zAwGFNrr1w?$2R_`7iK&K6q8q7>a>Ek-XCF^frzanquoo5*wX4pYCK-0qF1 zXZ5JM zQ%(q^OLP%0)2`M~bw?kMX!uyx70Sv)KsK>B8c|`-w>#}b`vfW!f?-bG5|%a&m`o^1 z<3p#f)cOYxQrAX{WpgFEQQ=ADb=TsmstjjiXL3=cYgI_Ot&ZkO!Ys<=644#prHXuE zOJn^zIbO(uvTTCe+;x~+If24rbsgXL_g(bKB_MfFFDdU7TEVFTLn-H{_;HK)NKc%y zDW?hU@RZ@-J+bOqF}m@c=43k&-2${M3Cv>eP9oppD)8{+yA*Lu5ycbe<}+YzdH;8- zd)s{3o(T^3lRNvy_GWC+*Bz1+E5We?^zAfM7(6tQChC&z@U{>M+L`#1%<*5&@b)(B z`C3VDQv&5Q@`baq{@XDBdlWqX?}+;U{>A?<1bN`i$=MS|q@Mdf>TmUXI1IUZyuGV8 zpaE0~zX@+K=n*k7O_s6uH!NOjITFQ-n7H_&4bs^V-q7a(I$QPZoPpcmuD^x1~ zk8ymd)~J!seNn8n;S#btL@Af4u7&idBT|&BZMJ6HynA~3Tz$OvpZ6O}GP{*(Je73t zgz2-i%h9QpnKo0P8yesMj4HzMz2V2#JHqCI?L?(pMuJ~s22|e$qo>D^>NiG@EH4wR z2H8%El5%Psv9WQ&`kcH%(?gKls`78@S?j!A;(glECLht%u?ne8$Ty39@2KrMA`M0G zB<6UnMF*Frh$h_A)=w{aDyI9Fbb7_@w42QHtS@!{$62iQpToAZ%z{hvo8SG!A`iz> zVr*8M;=UUQ!>iy4c&=HZUYlojxxV`fdlnTJk7qU#kBJb59JuoWU=9(G9xAC=-vxrU zy+H7(*`Y#;&aE@Ok&ldmCmYS*+I=OiV>SQSW9$(Qn{TxDvSxF=?+awKf?|f6sDAi< z9ite&Lqye0rU_2;j`@NeGhJRou$mCz{Af>|-%TP-9`U>8y&wxDQEN8-Q9oDLTL41LdFDgFjp_AU7LVl5NUW@?~v>k6FICT)sHZ{|S`$S3p9s!aR zMoq+ZM4&MEVl=ZF?}Ea=B}Gf*Fati1e( zg;4#Ah;F8xhG1-Bto`NZXRbv)w&L|Ef()^1hLLt>!RqCBh!ko}?Q!v1nNG z@YWATJw9*{>S3!he8&H-8XNbE=$s%v)X)2&DcKB9G+U?56+ScX<^cJA^xI4;c@-&e z*o2poJm&rToX@yelryX6l*m3`+yvvbG#^_?t;?&Djsv9;7c z!^a^VPwyG5?954NQ*a$o64{|AF$a;ZZ`YUd*#MRD#k%J!T0{=7nAD{=>)fy?4KHuBY=rhJGNPl$bNvmw zS9YGAT5jjmxdP8yiVKZ|_)*SSG=e&2ivg(xyOn_hJ@JGU;-S9w#h}F1>GsaA>-K%0 zIDPSKSzhIO<(h?$OIWu(%#M4mGG={?1t;W7ks+F@>LIPkf(@ivgZjP`+i8oq+C5k%0l(pW+Mit3I=p9jCdXuqH=;y;FY47!t zPfiC+rX&7g&eqom#l4hLx4N3D&r;@3cH7K)$&5oKIchcT+upvf76gmrJ4@^xv__n? zX2|ONkJu|w8nVt%QqB3J9@K=3Y1cA#LTSSU$l40C^NTJ07%o!*Xw|g>d-bSigV`BS zH-aNF{1hEF_hPHlOE6Jac$lD9)i(Ji`H`SmGc+pf1Gq!xrS{XN3N-cbQe_J=2)TVN z!a#M?`%B&Ft?f+7P1g*Rp5j}%J(FyAU0?Qn+_tNz%A090l(nZ!aiT*^=bRi%)Vr81 zbYVoUH;QTRE3tc;zMj?na=aA%rQl$8!Q*JTiel4eHj5N{aob|%Mg*oExj_9_`_Xm)xD|7c#3cfFF*}hO7;(K@n8GDjL>;>4$odaTOGWvVm8Dd zF1N>dKA>c`_|xN-bF>@Rt|&yL@bk6C>kY!_1I|rCKW_J{0Eyb%wkg41dLn&>3+bwB zYPw19-Mv}y%w*nlZ%+jSr&Y$sH=P5Ic=3>@L*4lBK?{w5e4ok$Z7 zEA83G;Xh{grJW8l4Q7CFtYE-?1D+ntMq3mz^`Puz%(%ANo&8-CtMcA#P$!8e4{j6^6y(qAPf> zUC7A80@YoSww~#Ek{@S4dt35E%9y)JoUZRTyH=@kH)%HWwEGjck@SGk4ENP-Q|(px zWZ)uc@2{Tsdz@jI3?0y&v16`|&e}mOzr)8SL%HNM%s#Q#-y-5le zfz7IHPFs)#vkO;}V~51%vJQ|NI>?cG2HQ^dW$tIXL-uVV+iDlkg8FIedimyO zy7z1Z{Yk%RUoJ@MT-DGXJ#F$2x=F)Jxi4=Ra%XpeSUHC`8Dc8?#^jXBBDAVQur|+) zbM1dyBavTtWVtM*VUFOzLX?$ur(+ONt^)MQ{bg{gG}QgeY}Zq8LT+!>PWH`_#w~z+ z&k~{X3dxO~GxU_x7Tfu<=?3RHN~?b_7?c~-c-S8TU6k2i`vQU8;`9p(+8nP zw{(6VWS+)fash5}-G&aN75HK?v`UX%=MPv+{`W}{-yb7CHz(y2v_1JJZ)gQf{-U~O z2HJ*Td0*m6bLtehr_sNxburRilzqfFn%mM6zM?ode(y@cEjAam+wf#f3~~{0_j-1; zm{3O?Uja7>Wf9cV;SbICp^0_(qENSpw@Z#!4Z4Zv-j<3UFjsG=OMZXv@ zAPa1lXwI8&F%lhk;qa)}r2kSfOA21!-KP)NIAnp?z^w5}K=@N742P7?%3}-GD4wH@ zeM$s%yYyau)_p*1x%_5+qZzYL%UF-3RCNQh^#f*nAG;;;sRLR_54X0KB#AM62hZ-K zmIw=X`lstPv?e1ObDMeHNuL7Ex4-gu5hvqmivnF}3-0HPNI$IaUd^;FIn9gv*^#gl z`hn~lkkl4q4#uWKXrK-bwy!L|Ug?+|yn0Xf-cs7c_ud6B!+?o zLzn*%$!Ihk3ng@=GB@t$gB_j5`9NVZ#8X z-4zhj)v-5`jEun?s`oHcC(U~&ojsFOgfeZk$1I()mM3;9wKN}+g-#-=SO}E3klCAz zm*Y3qd>!4VvN_1yn*g4VfGI^c<>C{MArEt8d2QRl@OT5^g<>0PholJ7zqKKg1dp5S z1{dBQT@eUY^2KbdR!kU{7wYkio8GcO)A;B!S85Z0=uC{&M!Gz{n< zOO0J5T7T*paExG(B4P{J7^%}!W44=dQ!ZVNf)`mgr|GhMQJh8`T^(R^c$d+x)e0~Dh4 zjh#M3KpqGxpig~Vx+)#=Jb?I&e#P$VBepc$IT zVxm}gBHJkveNDBl{O#geuMZnVt(hGZwD{wgtq(!{XM>Edo5Dr(VERgRh1^ItftX z)V3o>5TNI)5|yx8c+Ru|8r$eBRjI}Sprq9;SzlYz%#_WrZ6BY8@LTeh=S#EH`S5lf zvBz{Z3X*#r$Rw7_OO7og^Dl%BRcLZ$Alwws<{pZ+MIIsbWGow%i9dUa(NG~O8?19I zFlda;#;=zuw*3?3j>!z62;3V3p7#!h zYlE6fEXK=h*SQNApv35x#$`$y$xUjHvWBzX3!G9vc8muQ3=OgQH2S}UuRllKOgjXG zMS@+PL|!mvOU)qzo>i(Je%hvYMNt^F=pHOP2Tnaw=6gSe7kumht-iRFw(k7{Sc-8x z@sJwD84v9t9k|f(a>vc5P&t4ni$w)Lf{oP!{|0UF2o-=h>L?!;O#LEBb)it`&CyZJ z+yyMP{#pDp3C>7XeTaK9B}QvP`uv!ituBwh+h~KRsQV6{({CfUGw&+}?s%_{I?N|r zKK8tvBK)*ko%H`kyT3+bykH9iKiQo|mN&M~i}NgUpyfTIz_IiTX!-jB6J_^CCqc)z zZ~FgGsIuqVL{QvXf9~beWbJmsB#)LYp6uYFPMVr^>0$AdSsqzd;9hpl`!*&g(|7#O z^`cN?QWme9Vrl$mzUP0-_DCm!%ge={nV9c)iQQ$}#1Gf-Xfh9YoA{T0RKJKl?#($! zW#k>HYN53%tV7Gj9K`){jZPj7BP}zsxnhXj*D`xUqV8+$FGA4tz6{S0gnlOvAThGOF6l2xXE}brc5Ka zD!80U`r>nBKyy~FI|l3-{Z<1^%f)9ZN7WYqIU-onpYgJv9UbIxZjm(k-<9eEbwmyk*)c43%piFD3vfeP7kT-#8u{3M#I-+oONCbLmLN z_e;r#&awL3!IR1uL}P=xkPkkFm8dM)*`0%$*_YKh1y~VAUq(kL5&~C-W{NyNr8kw0 zHkZfS+iH02|05UnO|Z^fo22daB~VtW%bxnMH<9NU`s9GLgO2v=56p1fTR8mzcr(^- znK#5|tm__jaGd4P&7cB&#&VAq#XiBY=!1*SxE-|Up%&f!tC<5?bdwyJ6N0xB+f>8^BO7L^d)&7lL5)*AHlw@*Ci z`2}|h^Ukd2NIWz2Sf{EeWiT_RPH1a!CY3%ADinLWQoES<>ULi%j}wdyF7qzq!Cjs2 zC?re0#xZod^X3X{_P*3%0b$*vz?od&H)`|@hU}7(kA^$v{W_X*tBsFb4K43=F^iAq z9cc7mOQH8JLo+tLKRQIBXH92mo4|nn4M01~y+2@Hk?){fX)%qxg`(}q+(z|Kr}zHT zkonU-i(=t@d_CK(rKRCZq!A@J_FdVIx+r`=T#`Ti@f@S^=XzTz?7javy)$dQaD*3k6+oCGjOK48L@sjUUZL zq$Ot**m1-^C?a5{&f(>2fa)kW*7#de{~ZgEG@6-ivtv?x%>KNy<4vJ||Ea(4NC-~5 zJ?1x|U3X*JDi!#}oMgGRpYzV|=5jG_dKIwwk^eVfk-~mTBm9e0Z>`C{?nHMVDDQ@{ z>2vVk(ONu6vU-OVtvo16rnBMrinE(#{D$zOPIXH%h2!{>w1L$17KAR*H?d_Di5-Mh zi53U(Yf}D|^-{X^L27rdR8RR7{0LODg&6x>icEU*{uXI8mH!qHQ*iv3Q%uUaI;xu| zpL67WR@G;m6=!{&2Va@!lF{GiX2*QaDC|D0)3tumlZD_h{_45Zolf)V2UdaSHb%}3 zaFE?hf$$9~OP#EufDMI-gQ%p2Z=QRpAsYTtN>e#vf>cJ44mD)6LB*V=8#wm7}^=eQe^&P~J4d6;FTBU5k z%$o@62F$uK7Ah`Rx2T&??IN<9{9Tk~UWK_EUmHtpnreQNGybC&Q-@|X9bPz6m~;X= z=Jld~1^H3_y)1Mv<9v)`ER2%XVw~NH_+9Wb|4Ul3?L1Pg`6J2GqMV%ePRzSkL>d-6 z92_w?4+$Q$W9a6h{IGqWj*GkJLKSVuw==#W+$D>iqdhl$YV0N~BR;Y5=*@V4E*t&w zYO`U!Do)_PYNKxm+p8deBCpGJ53SgCH4xlH=C4W^pz+I=J_wqeWqlfF zP)@U?i;lDQK@~^fG;{LPyWYPT+Hpb}KEMeQNga8Z7bIW(qvMU+5){u5uJyV5aR#Q) zjWr2a4vEFaw&2@BmT3M&$wH0}h(S{J=_c(%*P&j|23vHrv(O22O58D3JDFcnzGG-E z)#<=uP`fl#39w|-^v!lgBQ3!0hha38WJXSM$shq#s@vz#4#VoE_==Mr=sDucW zNw~=2M#%DfJ1*D(IP8xbbvPb=&5z*fXrT@qVjLV>wIA{@G1ayl!m`8h(1YrC{IFKW z=O9bfW%+(2=H8Bmk__cCJQI$D&9N1%S-F_o;&LD>=}IYJ8mNHOnaJ*{$~^g_uT?l( zW}>4b`;YbmmXrQWz%e5QYi?LQ21ABQPxk0PqFa!(1#Z4{cW_Hyp3YUXbNHKQ5a{ir zQ-jN;WRI6^Z+nzR3*A~hsTd4#R{V9mc$2rz zi*}C2vo%Qu2Sq;v2irsZ{>erTlKbFgO^NAnedhkWZ4>{2n4`j#i~~8W)JcV-9VdWU zLCZ~@GCMA{MRd^lBDHI2RH(`G!diIj;?c!GUl0V;v zr@oooPU1vvj)#-7rHX}YhULR&fZvvfWu2>gv?@Nunm@KKf5odb!eGx2PP>DjDz(MJ zzf2GQL@?2Zi;IE?ciNpsy!I#G$3$*UV_o5=oe`zER9tPw|4gef?qu*Xxe~lsXG;zz zumqMj6AP1L+hV^X14gf^weA8!n|p*3Khs4}#G2YzIqJ_csxqoe+<^#pNr-L)CpCGA z4H<~)W}4*W?$6f8T8`C@mdhEVOYm<=H&V}PMNh|#Zx=C1zVrqSxe?4alB$%sP*JK- z%Ru7F@GpsVsdiAr$48Mi3Ppj-xT#8UpRyJtf~kk;|(zmfhkL5U$A*)fRfp;$=EQlOwMp$>2l&h&C76;#$>(4F!yr zRrV)*4WPs9xWwxR@+$qSsh=wEFxA}oqnQ;}HoCf) zLR|k|4bP0)FrhrNifkUEvYTH{&Ch((-$G(F7ctgolmg-Ja%z z!r#QkbU^47@5dQ07*YC)3IEbS>7JMWF19@Oz)oIu6(34RiO-EvouYQk4{6Pzu2xF3 z2nsE?o!r}JaD3in@|2V5$B860G>49`w^lVGi2b=^3TyEXPx#{qViK(E@{I_kJL31r zx+|Sgm@4H+pka1l#F(Rl|9Ue=LJ!7(=XDYKMW%H;*5h+Bjy-fY;Q}U?T|fXiA~;9T zZ0e8DTDw~ewQTxSg$C=+&d$+tJrE8_#L;@bbJ(XsW6|~W8cRL))JK~EA?gW?Ocdju z#bIzc+y}GWb!U5bpo2glM!l|aIGU?CYq3H@DdU#gVdn!J^0OG3ym?*ESrU^d_L?Hd zbd2hIXyDct<@P0Ps9*3OBnJqD?SeC<@sy*^TG_0FxR!DxEx`;JWAJd_hky5L7GoBo zi(Xq+iEe`{4a+y>c3Iw}@LHnC9y$*6PWy=JA$7sh_>ub_o33h5q1u_zaK~>I3-ki> z>rg*UBAPec4-{IPP)qxEeA~Z5ykgxP(~J>(g_PNrll@{cbL|@*>CNp*tJP#{wpzx$ zCuu3$&^sU)vw32?AyyJIsH>5?LlQ`s`O5I*+!ysmGFOj3Hf$;w z-iBFgvSnPhPx!P>KE3_&(vpa)HV~8?2|GFj>spT|LZMW|XIb6B90SmB@^^aF zJxd6bOb17RNQ8$!xu-_aAI(Ps-1y0_XB1Bw0i~v4Y`dCX6e&w5zCkyy9`7oQl~}j` zYm(gQ4^ytz&7#++i=~i2=W)BJAiy&kik>&6#y+eLbwBE=h1>4sG?A>_90MnymV1W1 zXVf-X&mUfz)+TELr}|UY?RPH+a~zc*=z)-=2<$aqRwJw8ujHzs^^?DrF?$NCR~*K> z@h!4RfE*ya1B`D{_0|9-vk8m%YOBFeuc#%SQnK!QtD#7%jgB0i$nS5URQ4J^B~3h| zDmA8inG*OJO*!i>Vge^dOjN#5H!yRFJ+S0sV^aNZN&#E}SPhMZSB23}xW$hETiED? zZ=pv>jED37*CubB)JG8#IY#_mw=qU}7CrI2ir>zsH&i2)%yupdKeuJqlu_V^{k^D1$MEet#x54+b1ptU?VBWJTfxgVfpzGEaN`^NlkgsZ^45PlBmqy0 z?WNE-COww2VurDYAtpr*6}~cF)pGG;LyW1816|*Zjj?^ZH?JDjCSOU0lQQCyp zpjK^ofDU6! z8R#cPVdi?#n^^rp%t^WEXW5uGkYT}#+R+$``p_!@h8G3p=j~(Avf!{G9Lxh{Y(1>= zrSCzEO+z@A$`ef-cdMYvj1pn-Is}`S{B6z0!$Cxd-|mUUFIO&WOZ-raNZ+Ynm)q%}+E%oLQY_*9= zLqjkp#ru4JKD(wO9!)Iid^_f2b0-eEjd6=B+xiDrj#0Mx*wprnm{QFetr}?Daf}Eg zcspU?!~pNTP7*W_)_ue<`VtH`5&m98c!#Q*zkVMu_mfoYCXaTQ=Y&i|0A2qAnAD=< zhyLEOh=S*$`=O_dnBVhOe>|1BD)ueVv7La+{%c?GCoctbu|d1>Qt5Ss0q)Ln&R{M& zY7B~iGUKhQ5W)Id5EVzvsZ{m6+ILil?X($+p7KqeXOp;bS$tZ?B0&G)G4)Y!u~7Bc zF4fDroR61BPObtxJUmH%0>gBezTDtC925+2i;kqDp;J7pfgPHn^W61>c=8uCskl}N zmE-yE$rt>rDs{1%cMNhQM{w-om_0@d)YAi%{|0I_T7SJC-qhF^HD((I`Op{YUtR4j zv>Bjrr-cNGoJtlKQQY2I^F(8qtyc4gMMq*eo+b)KFyYpHE9x_N(+X|r&4_ila|nN; zQH+DQk(BYB7%3ehWnNMj$XaE&G+7&lwr&q<1#9NX@#DQw5>zLYeSUmKr;5=dX5Kia z$>0ebaRTeR6vWlkiz=V?rFdK_RgQi&)m;(Vxl@~*ycEAAa#0uj8&Po?wY|2iGHxSJ z@J5zlo;38g|0zk5MJC#5%%Kx&t%M^BnFN(NSAnw^Rn+0cgIzV+rhg7JdR+rSn}NL` z6unwmX#I_dWB(TC^g?{^_7cp|o~-oaI%B#{0HhhU6S4MCqPZ)fngfu4(dRH9-^y(? z3j+D3F#HIxUnk`44!&4ePv-^QleMNB6YzUBhE^{+d zUs1|nd|vmF@cD7beu|!D6@A!9i^c^%ZzTa$%HCIB5sK^msbQ{l^T3{_W{NaJ^!LYnV1w1{Fa0-NYu&lP^fbY(8w!b1 zEOX$+U0CDhuWuom2M#j@l2x&r;=-AWBkoy`V%&}G7@o+SQcFq847A;i`0Yf2Qx39U zk#K$JFy@iV5}$(8ic=IoDM87rOjj-gCmR z5o}rl^j~df@x&3@7!e>CN@FD1eWwnhpYx$BgM7>raIQhpDRO=@b0kC zH%!XddpD9dMDF>ow|3LTM7A%NWCiP-2(qh<@^SeYi00}P)9~+JA@P7r~&E5MTaw?Nlp6zT4_Ia2*LV)?)qnbZ7UuRf?m{qRcPS#+c}B73>Ae}GrAO-I&}%g`O`z&py%`%Oi0 z?`IT+K;*D{=2U_KD zgfW=)r%*1kS10orQnY_FL7+R9gA*&eJkK}o&fa8=-x>~rPl>Ch%j{KL*S*G{!e(2q zlM_9>-mF&|PWsNdkfu)}+VJda42BokY*xd-g3pnzn-5z@vWtbB{dKt_+@GIJtDAPo zvoT?#W*?_z%vZxXa(v_tC$o;`YO#5%1RZsrFYT8MJxJq1@3;*KI9h-)+Pk~eB3j>_ zJIjAOxK4YG3#&$+_w@`-epPuzcpqX9O;ajKuri&hRs!;PFJzC5#qc0?FR`LM+MR?7QiMHiGRnj7ySMCwA3pdZO(CJv1xYM(=bosZ^zn{I;1Y8%`Zs{5-K zQWCMTvS>vt37yY`mlh_J&+m{?J=qH-a)Q`M=duwtIrl?eooY-*e^t{__HgP1U-3yQqLC6DEp7AjsM(B`5FkBT-;285I*!if zJun?j#5@+c(sdnOQ(>Sqt$w%aAvZ`^o)$mJ=v0DJKJUYU*Ac*`R&;F zt=4hH`C6HgNnE>QfoJo>XlIc@U+~Jq&tkbO#~_|u?*X+6^&YRw&f-?mvgXw=13ZEp ze)Jv7E1e5OJ!AVDM>wG|J1&Y!@m_ zHk?5LDH2pmekhX9-+r-Q>%kBcji1nquUMfkBE=|j!t^7cN2~6LhcR%GUphUsGNsMD zbrtEwu-3RJIQn_TlB;zYIsY^=^?v=0TO|-ps7j3|kWe*C1)}d!Q=8c;=RezIrkG|- zLSg=(2X}q}iR%_q`+V~jy~yF5QuO)ppjXr4#cj*JB6K-}tjv(8+FCZ{uqYW$9Y*!K z<~SOWIdm^GKdgNlz{_|4Q+lufIdP&VA>*N@82l5Zex=Ee)W+9$awSZ!tx9AwMv(Gh z?z~|ba|};K(V>^m|NUv3lZB~O@N7IeT^HH>niHE#XYSj5-?ev*DJO!fugDm}zZEZq zNRqeUw3SjEPCD3d;sS^!#SJ%uk!f2{8XBwWVF?-NG5T^J7AN$j!>2?2#)MW*b!GH# z45LzoC6F2IVVd%gbQDML?*S@m)@iq(x@;AX1hzUsa^LrwX1I(fy6-CZ6=x;YeDQuQ0&l>NL=hB!^ znkbxchwODPy7Rnqc}R907{R9+2mG5bAI_S~tw@zHO-NYJuWL+l!! zYL3F)5G3O%!*HuihjBC;Eei<{!psIIvNz72ENEhGnhG?+*jAz!NEJOYiqI&l*3>8k zSyMthw3N87-eE5WUBlF59o7W7PWqr+oG3t|5x|BvdBV*QKD$=r0P`_2eQ=SW1&EGhxZ z<;Uy|-I;8opE@l9Ss6(~ebfgX(=u1Ng^}u>9~w;pxP1tMePNjST^T}IqIO%Tmg2NH(3X+X$oHtL-HFa<1 zyQg`;pOk70&r^QS`LfY3#|`Q8XXE$t^(D)W$*z}+fJ1}QwVT_&lsxxZg+ZPCM-a*Q z%<*2_2~#GNA~wVOrrH7@72HkL#Q+Q4+z9#XAKuQj;};L?03Yp$T&)Wl#Gstd33S53 z&u`9w!%Dp7YUQNt0@i;UaC+PkK43X`0QH)y!pF?KtCJQtxv)L>+)5fritqujjp9=emqk{DLO_gU|GZSm1r9%{RM?;iL zb&{eUvTK~&jTk1XpBZ-st1#y(rz0$Oy9y7A1uZP-&(|ZK=B?!O6`3vuKk{pD=I}I9 zPA=J%t~v-{HZRoa-ys*>W&Le%>Hh9^LNgiEMVth0jwl$T_v7auNo1#^bq2e88)1AR zYRL1+k0$Q+P1J3)VlkTLJAs=;yskQ4*4KM4>=_ZVK@&;bvSY~+#%(mx_BEedL=wVv zf=v6C5ds?Pl*`p3*oQD`OviM^KLPSwbKHbNigN_h1~_i7uPOhSD>!2S@`JP1MKWev zpDD$?XCtfq_{hm>S0p?Fh9(bgf}>K~H%F(VoYXn(uuvz(ElO$Us#DU=y{i9C$g-5c zWGZjHTIqLRC;1;rbt*p~lA!{d00x&;=fq3RK~^#6l+y^T7ehCZn#(Z_uNyN}v)2>; z(`#uQVOv~+9i5q{gl|B!qjQH$0msbuNa!^WO9VDH))+be+%|J4)GC9zwA}rvgF0$g zom1zr{3eMCTM4gje|BugW&Ls?Bo4FF@S6cl$Jj3 zss+BVgdrt=Bn5Q!W7wq2H(FRten4K9U5Yya1U4yWoT>*r#p;GS_KNExf&}BKWuH(m z)#P9QRx@em!Bz4Yy+7jp*wOFbcMO=jVmTl*dS^MB$!Gkak`?X8;iK~X6>B@cfz^N= zOPK~2+0n9J89g$uOV!O* zu#2uuqSg$*4@PX`%5DdD9;}{F zC3Aph^ogvhU#EBroy(bYUvDWDJ8D3%OtIwb2^W1gOn34V=LYVYF&x#050fCt6+UJ& z9^dIHNYkP`+yB;MO6K@{0NQhX{1=U6A!T`U&vd-0-MGH$@TqZk&Er0kA>+dSc1f}> zk@lkPltIYu08*IMaD30M!{av?YUObxPbWy$Y=@b92XiI;5cH=>Il7jsWXXcQy=mgG z_b8eeWnr6a!Nhw{DO)hcbfV%nAN^|j2zGk{RZ#kTJ@$T5a&0~5OuaI(pk2pco~|CI zW*0}+iVKC+68Rv&{pU;l*LPz+eS6F{eohP~?d<5?#7QGZohhrFa`xYhgvtt=3>=m| ze!_hs^bKJ0?dZ>BcvgSAvF~6|&0g=8ok7`Tb-fz$e%v>Gx=b4i1r#gs8RAOc15B2J zDdq^d(tqoW?cg|NfS)c*{xXKKy7B~x0P9BUIczMw|Aszp&Qy9TX*xeezoW$>W#>oC zN@C7xyD?duY&c>GI)N3(_ha>+FDZ||x=>G-7hTt!$RmEb7^|pu{BC-neQ#w8Y%j)sC-6qx`oN!MlcuR$;MX`0>rG zufa4&bF+&A;%$GZpH?+}frp!e*xk_+opB;60t%$$tUfo7qxNcxevqw1H~;z{WI&KKOtDkjss+9&ej)Xwp&JRrmxlq6zD>_5B9s@@dHv;Uzg zkJsp=QYCsVA#iA%33pWS$O;Aiz`VwDEY*|AJSAcQRzM6XJ6agQO_9n9il+hUi{*HOH*!ZAY z!Tlp~K<*%O@)Hf;gh2mb|Mk}Pd%3fxBw8iY&%{sx?u1l_qbTE%GsnwEhL2=U?gfA3 zUK=7a+T&TM$_ztOqIFm}Qzz5`AGu|cV(78v6DvON*B4>sRiy}hO553oA4cZGVYXg4o=z|{t8W{)GMvK{6o?PEmB}i|MMTY7 z!3XK%`ecM*bW4kty_DP`j?;!KayX$7Q10q2f77Gv&7`N`M~pIAYnk>|<_cc=&SY>; zrml2A{v#qG-ugG@T07)(_gPgE>&)KQAf3?avb9AWpyOQO**@({&9_fE$-lHOarTbd z6hsG;lU9;@G;cM^ZLl?cuW2VV8;YH){>k&6k>}|nQPpvv#&mrB7=rOS8W3qRoH-sY z;uCt_aZ70JPAx0(3?{shTt)ZZDEs%M&|6uQ>yuyV0K7pyZMB9RNKxQ)BjrE;xhg#k zTVb2)T_<+o>ECYw-V5JsB%6G`=5rJu+^leiMkKxLmube|4OrV9G25CzWB0&}Sk~~_ zbR9E#?XU{nX0g1@M&gZczA>3CkjuZTC4yq6^YkrGFj6>F{HsBeUefNR#Uc96?n}v9 z3(qU!DV_1gC(c*&7N5aQ7A&54&O3sf)l&N6F<3v;bP~gtdSQ5|4;{Oe*_xC>jWb`P z6E^~eucpn0E&fl4Q4W497|F& zMGSr=rsO|u4_FrkRv?6Gm~+lmAi;aZ*_+~j7A8*r-oI9A#6R45XNQ%15)(Ra^B{i4WpP{w_Z zy}r6v$Ld7itCLkP5yKymY^?@!_TL1>9B>n3-7;|Z&kNYPMT5Y5qGBJBUxQ~AXy3Av z*rYFKgf#wPAX_pMUGJ{M|s6FT46S|4Wr6c3mGv-8{ zTJA&8>=*fp+i6`CRnoCzRwoOXkc(xEt`z1NVtP!=$O`woxx5paQOX27KGS%TjDedr zBp*x0P?DKm(_|#|+W0Dt(xZY81qN!1W7y)ozDVc9_3jF%PE#Vl!cE9e>v$WcN3HU; zYFQFB{6YsYrD90_02K?2VeXOk)XN|;tQwD> z?IAON98ckIH}g%A160gCg0>5PAZ*hhBJ+*mo2Ge)h>CrqKJ>5h8CO2SckkY1>(;H> zt9>{AeNZ1?wrkh!f9*5wh8u4DJy3k^o!j)sjW@#|CF7^}Y$i>Ks-$vp%dqQvI1!N= zpRh>YE0uvm`yNuE(tDiUFr9qg?f05F)%D%Ef1NKL(S@bKmRPPgD^`vaIVw_*Mj^OYZ?pkbAZqkhG`XF{3 z5Ym+!u7{_jSh`5&|GJfEdvfYDt534HOB}iGNtxnV2)S^KJH9z7mMMU<`_{4ld=SYB zmZV9kLfkvCm8a<|@qVh8v%iVS`14z*xe}9(5_x^uzx6C7E0^H@@x55H79!&03DQ<7 zPl{(ZSh#XC@je-7(zG^DPi*6fmZm%t5!YBWV>uz7smW2i8a0Zi=Gy)ZY(0CAlo`v= zsAhgd;Vhc&ic?JDlt|6#y<13Iq6#VP_nEhBCnc&kBzFo`sSYmg*oarj8e~btq2iz2 zg`jMk_Dbg7quzKNg9O(+; z7w^S~)rw+za-Bu1w_x?nNaH58Fa@7r^2XbI(xw52%PKFa%Y?c(s; z$2k2wEoBR;8GRwbo7WRiqAt0TAm!bFPpKLtd~bSs$4-)!E>8weJuyM2S+eCQ4pTY` z=L+QH$-6Y^T!&pV=JP;p3TCxnOp}jRwaaQBm@2={{gVI1h-e|_I;`<=B zHTCh{-!pUQ#$OFpf3N#;yWxf#?=IYA{9lYeO2*%Hyh6s`Q6whgZn*Kb@lWi)>4qC_ zxZ%d%i?>O}Urr~w@sHx)GU)yrb2^@g9oWlp~7$Og!WHE`O@CMe_!*%R4WR&Ujw`GwxFJEPfyQ3 zG>h$?8F#}CH{AGl;%&~1yUF-l#+#7wB1MX5+Zn4$ewWFkY9p#Vw{PFpTtMDM!$Hl8 zt4$)5Y{`-(bCYp5-WpWDnIS_4{QUg1_U0zzZn)uw8~^{pO~(JlcoQ^*he6#&nI&$52zI!;^gTig$O zSzBs*?aMbVz0k>{o9DRm+;vlY7*{Xd-;8PHSbICqXT@>{6}7_Ve*fAi=3iO zxfVjQg1LM9I>W#3!16QUu4{?$jDd|>axL-qo^+*ocTsM7~_Oe{?2a4O-_q z`}4T7Z7fAfWyjT8%LKcXW8soU)WtPvY_Q^&{r?F=qTYfM2#;k{A)p9@n2<6MiLJ?y>6)gr3>LwrzWu zFuX7GHo5BF@|ama_G0{)pP4g#iqV^`%0N^w?gEvr)_#Hj`|nOQLrqX3Cz_E0&Ty zCnV4C6GZ3!l%n_6@>s6yS$~wejcbdz5t#H24lMnZO>2IkSFcfAb=fqJ&a7wXuyHKh za}|GI=N6#5rA>_$lnfmyl;qZCfBebD;X zkTac5(v|#`3?|p__hnJxy8jaA&%hyNQf2$=%JtVHk^Z$7rsPy|zioM)d8qm^zV*D^ zaO0naH1j_PonEi4>8$10^@1S3S=k#4C9v`u*{geji4&7hWE}_qtha zJN;MY_CI4v?_X#!^DA1Ei{R(giU0~x(>iM%W-lME>>Nw~&3Zca{G9xu>-cQ;QkD$v zkHz+cA3C?^r&Dlc&1{w@Fp{?gA%HQDZ?o>eDUKf6%b0~{C|x!u>qqotw>F9Ul+nGX z5P}!aL+*3al7gni)AD)a?gUx9HNt&o{}Se{Kh2^p%~)?LN~^+2m^EP|HZNa}AK6RR zkJ=G;WI8jBKjXyIu569VM#DNaxcbWg)`wU)y>KAIb{hHU!}naY=p13p=`)-=*y-M|3&t{aD46U#!`2<+^x`3m*zHN}k5cn}-4?`G z`IhdjK48%gpK&qx0#)11B2U8>Bt5y6!?*73ye^7|L znRAghe?ii?wt|FliQ(SQR!mFe20 z2@ihxhF?zHU|`FRP+iK{yae;UZNn*DZVF`2O3C~$cR4krD#o{82|32f=&whTznk3i z_%Yro0<`O1$$f|ob-Idp=+oe9G`^r8N9KA94 zjGGv(`TSE>UWF4Y=d*ZLKPr#DO1(x^xwK$D ziRrkPUjQ?^*PvRp$}C*CP+M#KpMe7}Y4rC(4II92;MgNQRv|5aw5L*J-a~$WFGO}3 z4<_&SAVh5P-ycB~5!A8zm?xia@?`Bpoyh9C^uK^2;s%?6A2xXM^$rhCKQ%J?pqV(4 z<@faGZPU|lmzgk$@E3@n!6+p6>=h4Y-_qeF$L}7T`d@ZP^uO7Y4WUl`D^h;@iTrC8 zBk)fVWl7g4L|eNz@o@r#h)W(1pX=Fk(Sx~n^rD~tDIW)(lEzm?hg@L>92`;{D?bu?h+LI zkkHVFTAp`;f{C-~{_w!_TQHhExV~)~lUAMo4MMKNA*AMcc+B5J$fGW?7A>Vr=Wlqja0(mGKA=JM zQm(t+7IavmmEZ1pPM$tTmBA}$mL(}xy(gYpb1>uQ?<mMTQU0Qq0ComWj{N|TcO*^;?Z zbHQ?h0bLq%r_fhSX_5s?Y`iM628aCB84|i2o3>1p*mDrFhdv`#5xiw6{pN3A?d1O4 zaH>Q@VC7ciJiCEetDaJ)T2hMUF2uogb9f$~k(@q(n8c`4Z7fap0yJw-gaS1_B<#Xn zuI$u58q;S`VAu#_5xHDbcJUzGBoilrn}t3*dwIVcF6(RPEe@n~Q&8=jBjZ zf7y%1?>}PH z+%d84v5-2GB2enefwjP+bVxmx|%$%rLX3BV#AEgedu6% zomlFpv1_B2iu;1dsXScyB!#>9nq9p0jkgfb@F`zl__rrL>@=zrU3b*~sXV#{uq1$7GUt64xXI)A(YLRwO})yQ^n13aPugb1gGx|HP!>-KbQf1M_~F%bfYkco40Z zxO!JQMrX$&c^ajsH)>%fc>s0JV@)0{NsZ7dBI3;3AcW9F$i+SEK6M`txyPvF*M1_G z$&2S#meH!~93e{n+ABrHAhdf;fBjU(@n5Htp~a6(@7J5DLJ(?(Y-R70NQ@4<5K9~J zaTZdf@ZshKrvuBQD_5{4%|g`zITxorR0)&8Zh#p9JaH{IH| zqEqKCG$@*03-q%#c*of|bS+O9A8)}Xm6s)RX7W|2NB_b7Y1yzl^-5(RIwt0SbQ7@K zEJRyPG_RGLVdIwYQMD?>L`4fRvtyNfO&PKgc<(5eC2riqJ*+x=TO0i1Ey`8Ghm_IR zIIE>(7qvEOlX4_%vShIek(IcX_;@*1 zx7*~p9lP~q9HldTl9XhRzs*6Vo(Jc-7y4WVu$PF73a5D8&a`gbhMto)lHue;_C1Dd z{*hd|;dE#@cjg|cb7UoH#3e3hA@QOIJDJiNiHVKFnz$S>S7}_S8UAJaFj@Ksg&ZaF zbLIG9?fB~1yQD3cO*>YDqg9hv4pV->ii0~D+Pe=;J}gM7dhN*e%4BmM3R@P^=VDf> z_(J9qCE54u7|g}n%Qexjl+~fqlXf7gQH9s^nJjlso*mh*rEuuTQRP)ds^n&_U%ab@ z1zo(1E`4rlW$~luqq<`IW(Znz3Ow2fD;*rFOd1he3aWl(r7_^yBZ@ZrPXU$BJdk#L)Yox{r zhjamYmY#8@xA?lWQ@Q5sb%X?ojF;{jIsVwduV+mh4Kj+6CF6%Q!gF_w+=&r+Cffd2_a>Y+Fp?(RtW3d3r50(0PeUb_){0ga5 zL{G==%Vs8tu0$1@J~z4a`O|q5k}Tem!G_C{?+G(&gADTgiY{XG%sORe?s+3N(Yc!Q zdGN@{R57MDhKh0V%1|OiS%~MEn<9s#aVkv8Dfu3|C5Ez;X|l+6GD6Kzzm!c8VV%WU z7ZcAKu}FHB7y}38o;eaWM`V-XQgjVrPmD~Ed{;?3(QCvs0m{gL)2@6^i=pJH%6row zeT|+uqW`C&M-^XewB9fvk>xMZC28oTE^Shl1)_5$vxn&K^i3nTq+e5Q z>C9~-XQYiSmomCpsYvnLljJ;11=* z+O^BWVdK=1z3kevj|(?%aN|*!bj*ren|XHsGC|K{H9~HQg<>tcGI7!r`gN;GvJB;! zIB^oA2YyesK=r!Y%BjP<*|YyD27g~1u}`=e6w1vLyV-T{6fr`auOHpXo+D?l8ocBo zbr5{xHqp-?uyeIek)+*+clMZ5^8S zJVd|QVvrq)0lX}Ga|IyGw4VZEa@JwC0%lu>o~QQ~~_Wf$(`=t;AbkStR! zAqql9OV#1}njeMWC4AUwAXDC)_`EU>c#=JLMll%u$&xXU4_fr6y6tCbw(Y^$XipqM zEdA5wBwZ32DFtbB*A1!3lFA3~)Hzo&-i7F%d81C1Y|M zRkB&gB8+X|Nh9f#ImnpA&W9Ooct#o+d%-}BJQl+5o7f`keBDtYvnCtW(pz~Np-*_x zp^-9WOTCvy($8)o>aLKgU@-t(B+)G6#1SE`QzX5@nZ=mBVB)0MczTiXfRL|KitGs) zd=g}0-UFzU-O8pD9$XR!x#z_oDK`f_mopzbnMHSf4m(M2))Y>CrjOM#=8}Q)LT0yyLH(Ta zY>B>N?K(~O`LkF_A8%yx6+O{mMuy1!g+#tgMyWqn7K*qkqu_=R$=SgU%B8h4bdOnk zceYrF^Af%X(_%vk-E}#742uoNp8)Un%P~sjoS%dbTJDrKK9u-#_jnTGW2JIh8=;ZXPF&rx`Xja!?@K$Wk;B5{nBlqf~Y~JCA#?>zR&yLcGrjqgHKc zyO8)>QmN^D9lS4j7fxm8h>-k?1{<~0*_m?Kgu`xN$PoiYvRcS#)AK;; zZuyn)3f(FHbP?U=+~>P4EvZneC=0*)l8E9BiP^J)5Bf}_S-xb%S`vn+SMjDhaPHW# zgXGDRyF%UsafIG_idU92__{*=4yd-GcHpd3sgf(?-9vD2u(pGt+Oq$zfFmY^hv7b? z5yJa>uuGgr|0T|w;?b#1EIg&-^ZNN2@JSQ0_FhZJ60f;~ybVIF)f$uk-U@1r zyv*tClU&#S3v6LLxNjqs7(@w!mObhbkD~lYlk$ZF{2Rj(7KbU|uQgo%JYslsGYtQ% zsd?2q{m&shJY0J&{>~jZm5=R_)1EA`TbWeEO0;4-LX*7hMmlcRGq83%X{6@bF7_m& z5apyoK=y^|7*{P8Td0v=?+Hm1!gRxIrE3ZUTWnT(7qoKryaz+B=qM{B=JrDqfm!4D zAkxHwr(zHZk!h7x=&|%^b};}{e!_(~E97&>GY5|z8A+Nwp1yf(VjO_CkjxodJqauv zOOw<>7B_g}FUL(&!Sv0ZWGEcZl~YC>LaeXGI(W~|!O@#WDt;J4%Tx}H#HyL@$WRkK zFT$KERt7Eipi0#kN|+3EUuWi7osZMIW}64J*kz9Iz4;u>giDRpJp)kym- zdWO}FBW1LSrdte5s1rxD7!xb*s|hLt_r$pUDy@#uXAR^QL#cB?yBHPSOp7@HcTF9_5a+N2=%g3=>NO_~` zG33`9=()yB^XjqWk@jI#vWaotVV#k|^Pg{`V<;J6;`{4TXJsuYuQN5G zd5eCAZ8s4k4WMMvIBLkywRDFETjhFLF-)3fR&R2pojA=Ot(}~_E{0UNgP>p|c?wE@ zaK(dEC1a^A_l}h^=J+s{T5|m3N>8%Oah((}VXYa5{Kelw_xv_?9Q5K$5)0l}&7_ul z>q`7FYeY_ozjwa}&8o$aORSmRD?G8K6$44++!v&0M6Ea`uJOQ>+D6Ow$-l4<5jnX`MMZWH_PmW>UOYi*LW}#Fw3F;)qQ`=dRu8+@dT8Htmr+jTrorQ@431 zx_#N3Zz=~ce)cxa?L;}XI`jqkdO!oD*TmB|meq?6QJ`{Z(q}CtX|~6F7+Km(_>)9j z!Gn_Jv#?|QP{wZ$WyUX~T;Xp3LjY+K5pe~*PpUsf#1-BhBCg;?s=tVcD@>({p=H5%ei90qQ>Cb@Go+d$W^p ztI|QNnwobV+cY9BkUt(VMmp^Nl0X}+ zrF@-B#WAUrmB>hgn1oKK8VXB-7N_gcSb)p7XEl~6)I@LVw z1a>)Ab*$u8$63-?wfg;`QY_s?=9t9uNGeNBBJF@^A=gSz>gP-^QLZn-1fs|WLWq0h zwsHBI7)i&KE2#65S=!0LGoJkX#6j1h7OG1-aY$Wi^H;9&Y3^>WV+HMzlCXr37i&aF zn77o4if@p1gtRAhNyS%T8plwO@alP_PE4qraKuDl^G-(oR3TgvYuw;^ zDAkjqGZ=B)y2MTYWcaGiEHVzeAvrBR{h0k5_po;1S}L|~gnw*|*5~{#RHFB8a_-?J zzG_jAT5YFb&Y2E-d@M$9e+=@ZtB%^+Pw1+4tY%AG#T6qWz{f;HWHbS(Q{Z?OhC?i9 zorIg?PEjTM$K3MCO{EeAB+P+T`S@Bb+R}MXZ{OzJ$(7WtQ=4xlAHXxYr*tgNWdAo% ztHb;opw?7=*Vk26R_nicBNm-^S~~O_$%IK$`K(@1SLmNZxY9*N#V?F@O8V>AaN9^wxSlQ7OxQdf1ehE= z3DVLDiL+QhCaMxG17%^@~kgvFWG3ut9`kW?6dc#MvdL3-}R{b!$* zAe;J@K#djQLMY3obFlHUiCYmmwp}t3A>GJ}63KybQ#p9g$gCqK(r2`h+U!7v5*~}b zls?0SP@cMBW?zJZrdjO7$a#RDjkHllwn-gb3(>Pn;^oa^<%X2`#3KVcMbC+s>$gbd zRm@>$=UFpHZksqH3i!xh$|=Oyri764#fm->b7;&q^84smbIr)I6DBfcwvtlfMoPJq zI#d}WMNiq&S_uy}b4cVpb;rQD2>lDgNab5Or=4xCe2Cj^WBPDncmm(cf;I@l`pcqLRvzGM!z z$nlL39Z{05HV-GiI8{z*QwQ%Dx%SA!&v&7W7@@f&{%$Gj3DMySsb8yEj8n6Y^^(T* zFsaA14%SOMyDjyo^010=Huj={5}B-|5<;$g>>u3pp#DD7OMc>p8~-5wyqijm(%f&m zfiX3c%R?@GpUH!uy`yP7GK}MU$72pTPVx6UF(qg%v)=!hYRiw4d_xOH1vg{!pd`GP z{X6EJJwhJ82tq>R@QS}k{m!FF?W?2vgvI3Yiq$%Y1ibF15-FK_SPoIH=m6%QJ3?N+ zc%our2|6~7#seR7V)tln?i@~|K~EDMhjH=1S2WFCnfl8Q(>T933%{w)wv65R#5#pB zk6N*&&ISBGyFX??o! z?}lny88c?oTu;=q@FsoeU*)Evpa_NX-Q6K%BSg9xHS1h8yN&a~dfv-m(`NpSHX$Ro zjD!l2ORapHQ#pia8MzcGhMJIYwaUqd61GF)+=+rJ`7QW_3jr5`qX=!~tTt@V4eSw; zq!(gZE}MlELSCG+$&$YiXLWCgi~;HW?IiKFlRvNpHif#gXeG+a;0BE4dJ5 z3A-r9iABhGvGfj(-xT5}y6~3r)E7O*Nf}j|9wN_9x%O1ZVx+-NOVPE`{}Czw)fmyI z#P=3*p34Vz+;+}<7ZcK*+eh>fZD8eXz4m=gkqlM}2+2Kl)4=H{9hv+@Z*s5ldAGXs zs#eN5DrEDL+)yyRmBK>C58ly}Rpdz_c^;NBXOrUqIaXy>da}go*(Uiu7yUNMCG9cF zz_AF?TN)cNkz#Dg@rRoxJjP#0@uo2XE6&A98ef$|Yt2e~+JGv+9Q~T+dvAZ1ymce^86I6$=m- z|J%g$O~`n`f(6;QaU&^Gqfu$rDLCs@T~~`rDOZ`7<#b+qz068as@_y8s@_y`s$3Q+gJ!sC$0Do5 zNnF29BA$TP^G$s3Yw;uvRSu;SrDIhW33d2J?Lut~=qQ4(-@`9MHjI%$Jhu3eK9xTnItwRH zo+3O}EaAL`$)Cc?cMV$c{@4{X6zexyJ>`iZBZ58d8TUf1WX+gD9zJ=Z!~pO%T3zYb zNSU=DSps9Z^Uy-pOeu+venL>F?ZxrEP_gz4n`xW73c34DqgY@JDRUPkTQU>R9^K=q zHGoWMlM?yxGN-RSA$`X5@=%+|mMt}rx36&e#&hzNEJhmLWA;fIZ3a)W=gCiU@0U7w z9dAO$|J(9HJX^MeW%S%|YT)&)d%PpMZ57K^0wq7SzPQ$zU?Af9dYb-ln6;~h8=5FXAMQuN@ok@_$OV4_i}n&L*m4au6M>)_j)kLarsqrpjg% zQ{1lPROOKS6T;M5#&(g{td-FrWt8*Z6xNCV-^jRXEC1J4Q*pzM{|Wyb8Fy$ihicYX zAx^s3*Jn9(@}Kgz_Aoh*|7WPa>c5xab*LFe;@Y9m%}ai17E8Md@6v9r#Fe?&E>>{gtZWcL#s8?YZH`yN|a?#??!uKLtgu zf0KkdY|hO{EKVY>U~`djZF7=@nB_KhMo)Cnuezta0v9oU1&PwJ zCL+(yYp)+$hz#?i-{OUoNFGN-bleMh63eE_rlqIIz3cvjFfEFdQMqWuD`Nh;!n)yx z8ws$5%c$(eUkHb`O2wTZBhycrn0C&@!+6!9zuF;r37Ma|+ss3=kYrcbZ^P-f;oKqf zk3jAdqBZS+2Mf-cn0?mBf+J>5i7W|5!hhn==JhVXp}BcPJU7yJw+E}P83>cmKRuBC zDX8fy9TWF?FjwmROoUpO-F4|5g4#EF(q1!9rS1K_`f^``6W7GJgK%l*(peA4_!-W^Zvi!?}|lWO%EP`h?@>VG?u z(BIq{{5b;}Hs^BUYr&gn{mE2roLI|@m1kUmFY(~mOuibh#&!1Rad+n!GWZwdMGm$T z6wsw)`Lzcu9W;XTZ%LWw*7WD2k2-NBBAU>!#08IHXw%AkSiLTFYuBPiokm=G8bXiO z{Rs*^&EP@HG+)WrabQw=CTx7*I&&i8;Vqs^GrqfLAv4!HckKKlI6miVN|mTYy?XVi zS-Cu222Xym+}fKU3hfqi&sAd|aU!8*YSg z=*Lf(y#0w5HnKwgFe$ zihHTa8zE`2R-NWQ{32ZbI=zjZTa>FXwRhQuqaN&uK>G+WF}G8*uv#1~&4hcMQ2D9t z>UTuh=~FR|E_rQOW7XQ%PM=-vKDp+02Tm0!Zv^U6?E>_Y9Fs&4rG`gOw%Hx%S?c~{_Yx`q4=aM)jC5bqkI4s-NEI?gX! z?FxwF&b1&hRHC?X;{hfKu}9qCh{(v_WX69T?9T`{ z=V0lo6|7ymkx!BwXYjJq5*|yuR+SDS!<}^L(T$rteXa;Zh<1)Oj4PM#lA%a#+SDqb z1%*AjPtXG=iLyn95`6zDwwT9+JbStDSKRYwJbC(rs90xPvBpLb6&XfINSNgIpNM%H zf!%h4C0m`kxVvmB=kerOxF=0|btkX3M7)F02SGdxRdZaDcbqHD$HEo_4=x<$@Ug2r zOPJiXM)4phh{xdxl+4b3SDfb>leRKz&abo`GnU9D?dULevlh#VIPP6{FlOUwRuULMSYn8ai{sJ#Ai~rx9xgl!xhHy;x(a`_J%nCAO@*)KvTD^T)^FX-dv`Z7 zdW&N$=LxS$pwinzsAf7&Pe`i`H*uS>Hl@ z-DVh9cl^RZTTK@2o6jd{uQ77Im_@pHE?zsuS@|WNFu$^A8q4=y=W*n#RQHj@tJZh9 z$hn#g8@DobXdTSqkGX#J?tj#|?f!1AJvtHl79jrw^;S;x@lyQjvqQjEp!WIy`KW{t$xhiyp5VnYhQy1Ig$1T``(O&Z+05=a%dHFPQk{ zoS7jKHcND;>c}j4E;u3bNSQ{QH)zJuzROaN`^+r4W6%h_6Hc9Pk$j_~4E!i^1x4za zcf>=}#qn?{n`ruHCBNuR$*%~t`UQy`vu_$SLaxa2?u#ZaNcZySp^0IlhY_L&hsby9 zo{>!t^%{A;A;&vH^&AkHSBcK29WxQ5=}OX&vh9>It(NdPa<5tf^K7)*dS1uYGbS!c z+Ulc8)%NyYbe3h=y~Jg4!wokQAl;f9?-~wG8c%_rj?pIFE*4)_9hVWKN%_UgAmimL z!9m{25-c2Epo5#>?>~<}^w+9_2vssNV8XV7` zk}{na^O{#=kv6#*Op8jLc%l~I5^}k4`f!Hy{ejP??8fflgO9Htmo|;3_w)nYST%

@L*( zv@g>pjG$$Q?-7-8anVRR^c>8L;onm_Z*!@Umr&n9m^~6|&q>;hQlDYFN7KFMJg(i? zN4x4BxGXlw;R)^OJz*ag4=tc+lTl)1UFZDOYpmFD#C5mapQOu{!pjGP7S2>R3n!y|;t(N$r%*W}!tMn>-(i_6g)4qqm(;-na0%#0wIFxL3%m zT7^QvDiI2&wUa)Hl}~cpxF%#vZ95Ns}Wz%zB~I*y4qFzK9u28H5jnZd64r|&vr zCOnyiuivw>Leh9B^0~6p+E^aZRmVaWI_0o4>xhwiPsJE`V5d`23zd^Ph;(MB&El$6 z&R3i<;+@t;jdTv?A2E?VtA#IeI;4$C-TT>jKhVJkIV@C52E$Jns4r<(^wlx`jDe@& z23B6zQ?G;t4>6eL1?e(^?x)rf<<*X2Bu|0R5G;>mCqf=ok?~DC+ zUg~JS)me`xg}9#(l55gtoki#Jw}|LGLsIAFOnXk4iAXNx%i>^y$f~CASBm_;>1=$I zTupL`4&>IXQqJ9%jHs7UMw`^hZ9PfFs_TE$K*NF-vc?#geoN2uFe9hcyo4z5(Gw#V z!gO2}!|I?^Lf!mUJY8)=xf-3nW8%Pb2aQDU*KQcOrR-=4KPQIW?Re*G`9&e(hwM@o z(e+_zbEjiomc

+;GB8#@{)FGH~h{awLC*!P~;v$-he2%gtI$9v&QAwh&95eti0A zbH?{B&7yseDU#|iXHMQ(T zVZIsNj2309Q=>^cviQ3Ml6)O_Q=rs`d{DYHC3B~fFc~ey(83-sL<4rro=D7x-!W!* zf0|X##?y#6?3OrkmTy7-5tAqoa+pK$NvU0~6m2^;Cy73ah&Y?5;xQRMXwHC|2 zrVE4WMKWvNVumh!&X8H(((a3aR5LGT@w0-|E?bIkT9tF9CNOy5{QHc#ZS`p z^Ky_vh`CN%Aw>S_)CchnR-f=-;9)ao!gbo_Gs24n&dqjwJsjE$Xn@?OWOw zJu)zQpP8LcbUcod*e<21zsiNiU-Al+uI-q}T_UTM*kAG+9R}(@NFx&mP|CBkC%Mb!>etaF)L}uNgh!qdL1CWoC znb$zRgF~*J`A?WT%a8DcF>PzlVQA6BHWbDB^>A@+4Rx1Z&B5qCs7}&wOF8 zQ{|J9y@yourZ$&}87fdBsDG#7MLC~O8keP%C<|Mv*x#g6ePp%tFbsKQo42_xw4NFT zC)cMV=Gz*DMPh}SDRG6eqmx9gvLbNM41bLUyLK2X)#rT-Uy?#U+bD!!e~}<1^};b* z?S8jmqFF39Ro+{VaLfC@jz6grlLf~3mP+2{m`{dmBJy=T`tsff7jV z{p1#o(yC>ZsY4H=G}F#$|F0BB;c0Ad-kfov#hz^g&O0~Cg-PZs{SX_>jfsJS z0W9r^BM=B+pzSE_dQ8jF?5tDK?P_x!hp13hjdl`DiMD~lyKs>3jy%>RoU}|OSCDEo6aPUAFnkpf38M@vuM~#mJR~qO=(_@ zD?+{imt)G^sG%~CN3>wk^?aKyVANy2DU{YbMb`K&e~2gxOQ!&1~h`m$Mx7FS(gi@$YMMCX)9tm8~E3l?+FxIwN>lFD$xiI?v;rth3jI}y1}CRv^?M)B#7-OkK(v=M_8m6wQie&1ol?% z$aoT2Kf4MvQ=8oYY?#r|(GWXA{s?5I@(2xzt|aV9Hc^p=DC<`0zcO^E^X96eaY~@A zg7{*jq;#+J=oNNy!3=)mdgu(x0(z)z%oYHlL@)>V$uA%;<|!xC~QmNqRHwi;=#E6)Pnw ze(EJPwK+LozoeQSrq~#kcB0Fb0nSSPKxFVCqt|Wr9j{?3!xNh|i!D@_YI;sT1^$OP zNCS78YH=9z<9GwJ#hz~8gV7>>>jEQqS5eY%meUQ}nw(=2jGAAqPL&$Y)+T;*mEQlc zF_p!+Fn$Qf@>Sy@`|^p@i9#EYByz1Av?^;?7l%&MFEut?Q~lOBn#z~K=#eE8Qo5ym zPC|2=)wlne(F{4^3@>a%#~>(V#<8x|Uf^$K9YHndw!tw;qxuk-_wN5B{;%d}sbO)f z)fdPhMrF)CrHAY-JG|}B5hIRODjBx^bBs_?JU&4$Qh4`YDrJ08x`H%_>H?QM4uY{z z8=s@lKT<~|nB1|>V|KiTluWEr!N-kgp6_zt?3ayhkF=6MQFXE6g)0W8 zjM*kwFElM?^WT3fJtH*OpMQ7 zr#vJ-DiBTx|#xs3!X~e`UVH555m(cN<6Dd--+VlS{wsPhky(t+9Eg+bt6k zznIJL1bJd3(Xd)P&q;APsPyA3vq(a=D|>IofN2%$lhyjVgozB_AUfqT2X(^SMUm+| zW5k1b2&M$wAegw_ip}QL5GhM{4%cqAe(8l{6rcQd<~;v(nL5YypNg$$`L^C(!W!?< z8T1InZ!FJeq`ieUIM2)w@rbUgn$<%Dw3hBrV^xB?E&ShTB;AROVf*uay2I#m#J(8=W1Tl$0=Szqax>C6|2(HW3?%CwHm<;>uMs>QpM<8u8lf+M1q zkThmwSwC2_oen`;YjnCzhvSS+ZDOE$*!mX2(^_VP1&|HfU^}aVb5X=^{@Ob=U}N-8 z7%Pd=)$@KyhFQEVHD;81fI4cB@3slTHx-?jfjKuV`JIfUG+$4S1>ch*7!hyr@tF5Q zE3@ZEp1aC$V77VjX6tZv#?i^l=s%<1c`p%pLRY^qTJy?zu9VaM-QVld+jFpO2BoA7 zjFq8)4y8C@sDQVwJkOc<1ZU8m3%2a6*eXf)FAN!0fZ~Md{%}(UG|qNZ!eWid?i;z- zf_>@P3%{_W^J5zd1_Ejl^B0nM-9z%ij> z2o6S8K{bSkwD$ZB!XgE?<`jB45H+hTH+jh&N)ER%NJB9sN?2}h%0;jZf<`Juc?8n( z(j%f$0CYFyf26$d!K;T#4ijJY>RI zbIrJTYOH{8xu6Q_&l)3ij;u7#VT`Y zIto%t-Ck>D!C{#w0$cI|gk(J3GA{5PkgSK28K-SEGJ+!pZn5^Vg7YLuENwzcRcjK! z>k30g1@DiM!_93M4y`bA@JIr6W3QLz9slb=%~pBz#{I=r-iUq-m%q*F*!atl2mEN} z7srIQ-+ZTQzM@Ouk1$^bV#%rXnn0i53nI0rO96^R6BgoMSVX_ohyk?=6PKN6SZ6Fx=y*c5%50-$pyqO6xT*5h2kI z7&|H7BPxv|eMevD961UucP}${(wmQDT2%7s1u4H~S2Q zW>qYzR3Yx2JBvc&E67vGaP`PVnwO*4BS|UeaCm%mH!Q`%Ou(+Pp}Ho-Z0OuONdHfJ zkQ4c)GCIV7UV7`T=A>T`VfT3_t+&LQ$2veViwc`QHc3}1T4q(JzL9L#%v$Ei{;OMJ z8LI`KY1Y~Uc_&gOB@C+TQ0+3$pD}COm{F9@EyzjG+khzoo#2KavHp*)*Jzm zA(IWVlvH^{GDTkz4EUJ`xWcez&+J^w8Sa;}MEcx>XWm`aacO z)W%IKc5m}Bs7y#mJc^HR4iO8+o8(I$er3_Ce0VE4rx-d;W$a!ZfITfu(Q*_B{=9Kb z*^ZxrdYO+Y#E47tP;^IcNlj)Bq`9lwqD7fEl&*16aDhW5_eT>C1^b`V=|PiRUxKN8 zB0l=bpQ>`6dBq|k#Ea4Pd05G@WFoljs`F)JOri(w3dgBG{@hmi8Rl`JrdyfiRWvX? z0Q{jQfl0sDBLzz;WBi#qOAl1h*7hr(>CPnKDIw$TC3vzGs^maErR>cTX7|wm)puJk zf6!YDs^<6$ibyc=mEXBvlkv|!d@NEi6-rpikRSWZpD|%t6l@_MfxL8Y=-74L>ukLWRqw$u5UVpkP|*31yi+e4Q+uXeW?N8=S#IB)Hkj)!Ep~uXrdRhc zCuU}Tnk{gU=}wMcVtb_`k{U>G5*repHZJ9tUcA*Zvy9dJY#=*TJ4o3BQ_TH?4OW}E$_dRyt%(?nBPHT!QLMmREa~A!1==rkt=X-gaZNKjbG(rQ) zPij;#nP6Nl?5gjwRoN}lauDq#7)dC@8~4p9A)tP`Q)@6$KV!s&aozw;Q%R1Bp<}XCYUyP)uGt0AuSWPWZR$JTk$h4WOGt^~;@+LP(4UN;p^~;8kz=nMS?jod@y$4)Oe1 z(m0$ct{>MHYIOL&ys(Qm*8gFx@se*1E11t$=u;^?CMHolNBq&VVNfgj$M17@zCT4d zrtsc8#8iRKyW;8N)LQ&Mn6c-#|Lh9-S-MRZid*X(fu-BN^XBTDw{O5Z?Egn5+j=8h zF3f=mbdb4Cf#ER|}p^!F#>3zi~5Vh+3r9*tCr}kLTY4!ay9|OZRJtYn| zA`iiHyauA$Oo}_yg=5=%m$mpkHVX)Ps_5xUl(lZG4rdJ)%k3J2H4?= z`*nZYKWfeW^e~J$U0p7KLW?<>$w}+iLYu|mZft$T`Ef zm#i>EwJ&UYBdF|85!jXM=ER})-GljE-nNgZ4sY3ims^E<9~#>iuGHkD48?b3J8lgV zyc&`3x-(e+HWW4;0av|U74f5`%3faAzZr&})11=hF==_UlRoMVnncn?Pp@8spO3U- zWW9b{*8UiKt%G@nS<>|?OF$d2oEQ=2*6T>Ncm*n#DHJ*O(}q|ZZv1f+lb3v8K0YugHTzwt^7NMNx z9xOC{8ld3V#0v=jxDK4+0ZpA>(;41rKVJU77ytEr)VUW3we+!wxqecgL3>G1B`jsz z*xHMnvg)5-N2`s=N$BY`>itLdP_u4#n!Yx6egNETaaB{qb_{E7j?|7owKaA`K^3B} z*(*E^k)V6{uHB+3I}!P3nK+9xJTRM~o0A45g%PGdnre-v;YBdSLFlpSCW?)p)$#fB z3qq?~Dy1gXW!$p-;fs)=8`0p;5%;#|&+Nhamb?3v2LLM`!r2-TJj_1FN}}KTECZ=R^9DC z`w93K_YrWv#cN?cCAV&3&ja<$`wqk8)49TyS*1%+Sv$?PnYH%csy%Se?YFJS{E3&t zdQcKl*v&2e|6f6!bsCRM&wlcYb$VV^qtEhc<*M!3bKPrS?vxc5VdQndjt3QaTlkHC0_@b_pgmA0 zLFDyx&*I_Nb0N?erEc5E>8#~gP$BF2ooych>$jU_cjy6_ux_}9!-#?hME!+vF4w9$ z7Q0d{`ggOc)8)@B^byu%-aovY1quc0c|wU(MlV-^;8TuodRv|r_TF@A=L&Q7S|j)M zc$-*Q_-=^a$mx=;AnJp;GMZQ33Kxebe~{*(LPMLjl{z=)-d)6#MOyHe5qD^dkpt$M zBQ9Kk(Pfa>jDzmoG-7Jl0-(ht6j77}M>0=GED!iQjzM^?ni4O$!5z+VUZD=Z7|KZ@ z#Mt?^l#4Q+IW(BTTe*{e@EqKJfsKKKD&xd?&)%wQX=ht*EVE~l_(hgDomiMR2Be#w zp*9CQ{XSu8l=*s;`Hd)sB&KXdL2W=nhlvT*Hdmi9EQmVg{-^<*-u`00>ksDJ+s0hL zlb#<6g-xBds1RjG?Rq0vqDp*EPY^HKO@QrUzvFO>Exhy04icIe(?LDCblTDpw#b0(6$bP{bp3tXI?_-yDfR`- z_$C_1{<+)X=jz@JlpgRsHjWRDs}pTTro!a4xVmq-CbH^|#%f;y2o5BZ7_=8Bb2*Kv zTi8MJA}T_Lqfk{3{1tnCuiv8<&wmmHwPw?5cR$4sC#6Z^L{R0?RE#piMIPZbz#pv% zSt_fpuzHzMAtv2Fmb%tRkY()KP%`tgykvgOHeFwl$g>uTWk^Y9AL=mJ8PqVJXl8c7 z7x4dt)gNW?av@bDzP7=viz+$UrfD&X7i{RC>av??l0Ko*(jx{#X z1NZ^8ULZqUQcsCo+>3eBlx3kQCF$+PWsNee_f~;nkAIF4&MA>~$)SR;l;yz7kU=E? zU+*1+!&-YK0Pijug8N-YaJ^Ge?00!PrF+;B+M7*~$i~9-0F(9f?*oC;Dw8oFhSi&O zo?^=@-o*2Hg~4KtewjDIrYMeDWz5gWqedn7Nn&|{0q1`@ALU$rYla=^eAe5S< zHG6|Y`{n|4XQ!cSWxeCTrONIh8Nz(7t<98hLLAN*Dmet%=FZ-`T+-&IXi#v>BuIA& zn4%C4CvYI>#ZRRWri~|+89OVpK}TyjoCk9s;&inn(NIAwvCKoV@TQh`!2lxwM=PsI z_d6{uj#{d-&yM4(hrCqtwL{rTL!92j$cDvac>3}m5J>dxnovB!RC!NNlYp zfP}_kunWogfWi@B>pCtkXkcb6#MI-}!NNX*}&CE(S zMLQx~D;#&AX(6r-%i%=PS?u;N>K8>t;+&>EXFg;ERf>>EKtv&@N0*7l7`_Z4hB673 z#6<;?C#a3&B)qQXd5Js;Oi8q5`B{;rhf289s`R}|<$c8TH+fCOPeQn`4^_n?B<>yf z`%TmYg|A3Bdd*)FbJN)_LpYFj194jtg`M!l5OA$?#Y5ci$Vl^k}09!Zf!IUy6jw*AenvlZ+IFzfp$9&4T}FL9T&Ryrg7%|3k7! z0N##`It2|sVS8674-c++gQ(f7Q|i{o?6#)nO!fIpgpU?f8usXlQYx3{F@gRR1vBr{^29VnpYF#FF1Y8+Q{I!y@vrRauiIxzbsk6cQ1*h2P&uusv(z zg;?w3r5*nr0}ghyNkXDJDWs|?%%)d&LbtCgZ??|GbP>&JB?`kfdIlzhcVYCq1q?Ys zyqU6y6%Q8&#CF=ms%ZiJAbBaf*|A_1!aT9Qqc=F7R;1{356Q# z#oHioG_~=hb!gP%u@M$dd4Cz2@!gA{$VN>Bg2|PXjpi>_4$0JwN%2g6ucBc^HaPS<4w7sw(En=M3 zCvxB_dwh~PMWxGpDlXyt_K2Xt%C89NPq>JYEMeM%n8@aqA*w}L+(zw>#W67#r}TWx zP=@z_kP#Vwll~+bUZ~WYH4loqSABI#&&a^)cwrn#WX`o;Zb-!8J6revwxdBJZB4MR z9!srF*Z5gzFtIzsx32~Zhow*^X%3&Y+-N;4BpuDky!%g7o*ea_y%J{X9E%Ld*&a3c zP>IG;MecDO>wxs(@iCU&RI)msl4??VW4KQw`YU3a-0tq^qxA~dsYgK9U|54b^tDHK zZKbvEHUiCx%Y;9;ea08;nxoYfpRCWRM3W1Vh|mPxR)lrcT0nXz6RlKKs0?-LrZ!?I z@NRTx$u|!_YS^y?cA}?7%I-*!U102$nGYS@Eb>L*n&_t5>gkBfR7UmwOAq@*eU*b0 zqugqsd~HnLv_mJ3DMoxStdXbeFQvhvHF%Tc%w?xSR=A)Ej?U(m?zzu7R5JaW>D}SaVKMI#e}}C_^qE>yu!p{Ff03bv^BS?Kowz z2LiN7wm&>9^bZ{p#HO=%I57k(C!l8K238V>vrdFmkugFm(bEJ4Yj5MD2# zzPQ8=cz{aDpl&-2D=I0Kb_!u#d0Mo-Kw_20I>9d&4ReEumW9`G{2z5orM-=H*$fHc zkwm=E0)@1on02X=&VV@F zl=ZEkw0qHb|C73UbtBy0+aeic@9T7}2LWlMS7}DS0LRyU#B>hgRkP7bjr4y8d)kw9 zIR1qeF|8NIEW!dn*ym=@-WQGpB(Jus&0S3C0l}N1`WM8$dc0=LRPdn$Cpo9Bm+RZd zDSo1rST7^XGg%!ETI8H%Fsgs#63=_haK0vveRX5ILh~r);_V~NV%&c6@>je<(1h7U zjESK4wqnh7adkr9#vYMm|8udnUOCLi3{=iqca=K!?|PkgpWqthw}(@RgTD`KNuh;> z&Tgf!z#RyxBT&2y#8??UFCwNFDrWUhs}}w0{2{Cp2z}sn_#}c~Tp`Wqq*0g^vTQu%7X{5$4K3N^y5tr zP$V9Ki|*<0r$uaEmR(-ucQ}17%sZQy>LmR)#meouv%m7m`av!)dfjZkOOL+7YN%ynPdVV<&tX7*QJjGX2Enw#8ndzuYry zeYG#>1mLH&)Ju08JzM)J_mPJ#pB{y2kZF%oTSJ}8IG#vpf!~xdKsLmN?rY6ZM^mnW@X|eisg25xTneChJx> zkN!!Uk8tjzROMD8CwVWo?un>>CCPhR%9$D963lT4h=R*^H2D+wfZnm#4emLgRr*2} zY1~CQ?9`zE;;P1oN^HdCdp`GJ)}zS5i1NgTFNaRXOo zCw30_*mTs+ObAr97`gkCJBPNT+Iu}g^wR`9o`|)$(X@_((ZTtX*4k= z)@R!_1M{1%BV1*N|9wCTyf{RO^NbTKKjN_!OsS+3Lh@Y-(cj(fftiV0Gi8#4DA}$I z`r(%X6)xq@>LtfbVFMc)qsUf$5REfuYfwzEyW)Wg;4=OS_k7a z(Jl=KkQHbd5qLH{*)wFH zBV4Mgy>~b+a`wM--5J)j$fAGq_#h8U9|2m1hODUeVd+f%kDmBpyO)YKlH#kDB{WU zk&>}?D4#n{*V0_F^9#7eA9ddTW#3b4C@(XZ&tGNi+~O8_X;X2&r8$M$oFtdGf;>8x zp#6F+CNK&^;<8#UA+3#+Bgd&=eNyrm-yJcPs5lX}n7RIDuVUnAIg!SxYAwtgrE6(v zO5_`o<0Zgxc49oYT`7OF+ITKF6HY*u>SCA9*<2fGcGXjA<{U~RC>qVND~$5QM3vB< zN$S!NGc7|)2%3UHVrO{(YYuY6MzU7MQ6C~c$R*^jZsH-A;C_2G6I#4~6ed7{qfa%Z zXkE{+aLo90?;)aSSeQSPQn0f-G=y)G6EpUZIk-O60 zDFNOaNt%EHe7wB;!rwS4W-(-bqzn1XZF0VH?y3)OB?)hdxOnM2+&~VO1G+8sFt=FI zqI1?_;Odx2x>9K$JYB7S#x&m*r|00L2yj#9-x4e<76JSm(UuQ2yUjP*mjGupme~NV zechxcyuv1+7!6)P4~qgb?hWfmdHv^uhE0+i+lXtRU0?2lC@3ovR?Hn*9)mP(lSq40 zm#}gGjpAr!QJ&y1jr)ni%vhVzrZ#%oyMZ%eRkuU%5+RU1N8a1?JG)OV26T$@h+RcK z_vi1BXCyGPfn0G@7F0Q)hc+ReavVjh(*Q15Hk@n>;?!xMQh}Y5T6iBeMLw$tys18b zO6*-U*V{l`@#+^ru|@Y^PbH3s%fm;s2(G(Fe{xpLT-yB zm2110cxBW68mBI48s^ULv7-{j8<*gL@tboX%fNX)KMzq@gnBOSFP#(R9~p8|HC6U5 z?!pSPH;8N=!`O)|3xkZ-_$nVV4Pg#i0^&#Axu&unI6Wb;hx`9{^_T3m7wpXu3<$ zEXhW=G<^k@QW5O!E+%Y79__4Dn1=~Enw2Hmo%gRn^|Xj02@!tQy#J9#_@-I=$+!@ zLYb81;5hUpLZ)CQCoGb}yx72QiR+VMF4(`8SBcw0C!B|5BxUu=33^yWdpTEMCG@Th z$!m24F=)3*XY`~&y=s(mBy~ZBZj`z=nWID+`q#oafiipv32&%nxf>dM2?tVV5Sy2v`&*;kQRJRCdqu;Yy|77NJrhwG+vA!Dr{Zhdl&CwK-0n-P1o$Qv zPrEBuo0?ZRu8tFtmpPL11!s{1U0K5V!(H{j=zCD3Fs_U;=@GLk%5d|fo05kAi4ra6sXtbkISgW z_5umXW#HpuV4Az%qf)i+096}t#;EV`7I*RV)mZw!x~H&MH3g7iDZOidU8mH7BXk%%j?vom97GfS+5F>8+iuR&goN|~JHnwOg!!lMU)hfVl~l{XLxW> zu(%2B;f|x6cx4z41y#6~vITSixZ)95bOmaLgi527tfwSOU>ZQ{vN{`=%ImBm>(J*M zN6shMh;BqjCA9pTV=uFn0Ovw;Lx@NSG~;vw!WY!Se#mE;u(D_$8Fuh!C#~7v%i5#i zlU?`ac?|Unb#f)?%V!wathU&~_b572Q$pj`7%^Z44D)iaHkAdb5SAq=#Ck$;=jjq$ ze3KC(`G6O2JJbjRgZp%lh9(hq=Rt{PX{1Dgyrc;%ASU%;J9HeFzVu^_ZYkf;Ah;WtYB}%fr_s$CZJ6BOF8v>0jMlDc69SxKVC; zwl<3BVnQ>yU9jeoe4gU&4|}Mf8cUJMz^&{$s?=J=%kx{S?v|b|QJ~%2!1a9t(o4x5 zS-XjYhZLy9L0uHR}~_)6LAYhv0^{ zPnr4|#+sIly2Aqoaz%f{WQs2}RtZw{0x6cWpAd0KS!?l7l` zu0+Up8Hb7|RLH92!@7YfPYS>TRc(OA@N#1(H^qum;{N2?iZT+-^wKyq6^}Kh8Ax~4 z({G+@pZ6(TS`~e1c&z(DbfA^bMl;$S%8_iouw1%{q7e5TU!LC? z^(pAUDj1UY3hHpNCKNwt;+w*tg$d(aD&AaGzm6q;Of$vss>5r|cl~c(BY=bZLJy}e zVauhBylfcROT*mC_F9QN5v`+h@`(2x>LN0QlrDm3&EhO`{9@w{?c8$=yNKDEDX+nH zIefMgV8eyWoUU4M-92&qKGH(lyui>6j+ z_pGTy_#!1}xiQ4)I&2;?wI(z82}SWtq~B=od*<=M6jcF1DTS^DFKGsUXfzGrK^BMF z50gADH_-E4BC55dsmYHU*6is~mGaD20KP)0rS~v_%Qat$*|t6&RC1ZsIl8bgSy>Ks znkBokuEZMfM#nOe!;q>Jo--w`>P5@t5z=bH&5&1mJ!>d%@G8by$dB(-s{;}oU{__s z_fHpP_RI&kvQ5b5I{)rASch`M8yBEZOVSR!wX*{0L9r~w?bJ8((T)i3tH|0oq++O- zKjx!Uh~__yAwO`%j>+QMRHN|x$heVvAX8hjTRNQMb{@TQ`ZIlg{lS*!*NTgJ9_lZ{ z*tF#?@R9H5pqragu8bSTfVF=f@k>H1&e#9U;Fn~>_&v0_79t1~U8?NWn3Y9Zsx{UV z&HXN2w&r9K-4DOli}`aY*aOm$1ZX(?9ue9GDokuLCi)j+EfUyKmgFj*yRPk~LjRr* z+X=EqrkUC})ok0vPB_XOj(HR%8J!_B8Ya}hMVq9nM9c!k76fwAsh@{e=D-1lX2!v_ zR|f{@fpx1*b^_4g;HYcn3bp6C;k3nx9PbM?&K`ja^mcr=ROvW)pYPd9gV47`9C%vK z#-g#e)&t6394TLXAJ(aR-&o)ZnX`}Q{9H$Ul2GPNC8WDAUpR>DPDl_g0P=ed5o|4` zd_4Ais!7a${HCWU42Vx;3oQ>!&sRm>YlJFwpijo3&&jUr_mXK-MY+v>6KH3?^jd3e zpLExyF@z^eR6Kq;_o3sAcC701wYj03NZONYoCXEPaYjoB!!ZjEjOA|;RBwO4<0-Rv zKDHgy*Yol}f%l2dFkbq5O6>2rx%IHaq~n7T(22)H!jno%!^fU2?DqR?`;eK;|7^f6 za9loYca{A(i@D*ttm$9Zp!*l4lwSlY`RtA2`z^vGDfK=gx|*ma<2#n=nKQ{PlWVfV8T}8_ zQu}kojWG#M4*ee_D}{RdR*~qE3JG2l1$!wq>4GnIBUo4n738U2Z78*;z0bWzKJ+tn zMz)*co2J$6%6?;d3gNa~^gFL-_)aH-0s*ph_(zw0A_izSv zgn$jX;o}Py1sP6iYUqHXuc~sMl0C?~$q(d$)YS1a5K@mn)rM}7R!P)Cc*E&(Ic&P= za4fFrjWZkGwqfu!-8-jHrx=`wN05Y?^>;y;5?{of4(=>CR{UtBz!X(p5q%Sr`cbj> zWChhgyrc?;r28ya{Aw!XXCN(y%{}^KR9ax?U~XV7V{~IAmF4QmF<(bwe0RLrXhr#dC87_x9acqO_!nEn%Ua`G%eme66wcDf zDlb`bvu7)OoxHBmcWcX$`W~rsD?n`OECaj0mHD{Pq>}KRz<3tmJM`C1bLR{89@(Q( zwMI%%u0J{lwX&lFr}K;vEGjYBabx3}J~oQanw@6kytM8<3VDc8{$L+CVjx7o?nN_n z#<~$+NviAh{7IBYbjDVJENGv7BZiwf;RybFK?J3Ghpg+tN(f7z5TD--f&eb_?oYt4 zztK~@zJk4}VwF|u!}P0VyeGPeJ9l>KwaOt35*Rf!PlFFvQj@z3;{FN1K@fyBn7PJd zUi+1gn~_G|X!w}fl`$nlD&J^bO90wN+$ zg*58Gw_V~!RmyfU zAml0k*;+(u;oP>ZX;36d>y3=BK)xz)+TJuWqkopdX-mA?e@$y&LWN+^b|L+HH3j8e z+O*-yAkz4!QbXg)ygmMFcHUah3nrnI*I3k6s=;w_=u!?SpS}>AI`#zRn)SMcHP6rC z3kYcm#!`{%9nIePoa{awoPfn(l4#KX%GJbZ(_M(Gr5DF_$+%h z`1kipDcaMiJzA-5(tK@Jus6*8j~PhrFiM6j&(kyUa^x8+q=JtI&Odr2ugUet4oGML{-)sxLtupTy8Z#!%hKZ# zhICgJ8|qN@3S7+t5)I6jS0T22k5jecl50Z#lKo3#UYx~DyhnOQvcVGu*M=>{f?6W+ zea3DCNv|;WjhzK@X9R;Dw_n>Hurtv}M7Nl?_E+sb@3D+xbu*_LWrWv$mUZqN;-*RR zVhl25Z4luP+Ky_=@%t|9-Xt9jCPRQn-I`pOvpNFq_1CzSHB~QTT6(qq>P2annMpQ@ zH*^j(3*l#DZV|BcrV5{9Yr(M*9Z4&sdpUskh`+=}B)8`C=(ma#dhBQt-yC;s&NVLx z6anTLrfwRFM^?pH z9vY}74&rV+s1<`5vwm8HI#~%~!x2KTG)Xr!J-f7Z(uBPUavq_z)qBv`itjp$=q>xV2gE^+zTAAHUaK`4*pXkOi!P5k6)PDvQ?mSDqRM$Ti zW2uStl6iZt>&DKi)^4fGSV$Wg&?$=H0BT}8`vnkZ==WCNi!6ILRheFf{s6WBbujCJ z3W3YA{x#Eq&7y~skwnzqexUz4fn<4!+`PNyVoeS9XK$8ll`9&(rN)ppq1~yzEqDUL zvhBwRxfK%KD1W9z4NK~e)qGT+c z>qAw<%~KlofrSqU)dT`ndFouVx*`^`9z=8POyZQ$FHD^diW=(J%BQmjs*6dGwAdxXtQ zgm05|jl&Hz&vw$Yj}2Ubww(^sS0dgPDvm={Hj4e^Zf|R48e188OUaD&v~__Bwqq8Z zqH4oL1CN2#$7`#Rkk#LRWa9!urC6=GO%Zr}e5#fje}v{*taeyM5vNeVI1?~1w|x7F zcSR?3fM7e%^wkkGBnAL?m@iG9&yWvOEurlWa8%vriSJjvC>j1xX zxZk0s2VMndhEn(8w|1U}$%xIlS^;!XJ#e(uEpp1^dHCZ|7dK1;QhKSsbq`Xm$)@n6 zRJkgeOE`+OQTcBUCEOcp1QD=4xgYz67sL~C2yvF+(5{B-aw*iI!t51XZw7gY6wEw6 zn$Ofu+fLqSiy4%i&^7!j&JrQ}vfF7=N7s8W8y;)CqmZh_((@I@MM%~TAWc%Z2R;-I z9-JXye`xr=yuyQjFj6Qm6g9E!VJ z@!}4r#Vxp7ad-C?cS>-F;O;K@a_+tF_a}eyBze}}D{HPj*BoQw_=OVBi=I>M z<5jvQ;$nU9|Naot!J)A2-3#l2#fnH;{d`Gl{>|+&YHIz+j0~FeSca8Ok_dw;eS8@f z3`J5DjL6>JRg!xCbnW_gN@eQ^Q7n9qg^PWH1P50FcQU|FmUq7s%NwYinbg!m>-3p| zP|nVd9EYBS1X>6(nZu>D?weHsS9}St??mqwaGXjz8BU}M#(uP+p5<>5F8@0S&W{6b zuvRg!!)O4YJSUmt_{0g!Z~48P3$0uC{ny+^5l;E^A=(KP?0Ih@Az}SO;rW8}s?Ki* zunB^*^l+(q&^zw@0>2!{JcCt3#$<+RNCFicX9#-+GY5iu>90zGn$KYLTCfr#)RhWhpSGSfc|R{)hi zX<I32v|Vn<%CSQ2XUs#x?zWkfoI*!j^advL7eb^Hb@A_;E# zFd0Jc!C!?n*&!O?X5G*1ICzvlxMguAxx(IUd2StH!GzW5T(%K@c5|l8oc%k0$%C7) z0jxB+l{ z|K?RfyZ`>oj9^PVwHq;A-Ma|4#2JhtE{x)|yUVXnxWc~`qBfIbq>8ojTy!TqyG>M6 z3^uUceaC^duKZqf<;W1U_?2|lA0QVsU!u~>oqp@c)psGLAb(h}?x9%-fN%~-1dSgb zycX6&yG=DiH>(>NlJuU(zN|+ZHLg@V$FFpFO`B>5D08tlbK#Lx6|7Kxa4Fm8w6)Xz zZt$le*=d_V7s_oEa=#xWqf9P3PbL`~EvOk}E7ih#i^I@kPOU&H5|1>Cx9&HOg284l zZ|1McLstpUdkRtUC?|&dRhT{_UsakuBa-YFku%S4WkMtnhsAhJ{$g+6z3YEh_1eHW zRUM)3QlY#vIXU@hAf}RXxHKj2PJOflXpUZ}#_;?$*H5XFc}x4dzwLATTVX)ab+&v% z3JZ4vvH=4+?dsi`Ru@VAEuGrq7{dSyDnD41bZ@1hG&2}Wd9r@b&|P!9Gz0qz>wH=1 zfigzO`}udy(67zUaF%@A3 z$-eM#vp4=lyRnxj=eunvDgJYT*YLaSwAxBWYCnVxI{ePhR0CbwVk2I6X+`s8msXRt z$a7!C>Yx^E((~kVL6V8O<{8!{NUcDQ%D6-f^uS1ZL*S-5B=?DH$%5ccm_0MapK4(d zm>`r=QKJke0V1+>~DSHKQr29gAJ56KdVYnt~tNMx_)x;HTHESB``O~`4HJ( zC|msc5g7F}4_VK1Z^Q270s79gu^7 z4|C_?zF2Xz0}>Jv2<)XmDeJMAU74kuA6mb$yKCvi{)%VX;hq(;V9OE5cEwor!HCu= zS}S}g@~Wf(JUZSefr^{gelYc%nWcs7vOwibv^Zv#Q%S9f|G_!Q_<2EW=L5%lqTW^#5%J2NX+-8O*OFQT z5G&5x77B_K+VrSgR2*tTQf_XiXnhIIn!A4+ko1mo3f!J9Dco{6^b8)69q?IU@q5-A zKY5BdP>uzq6fW>pv8QO=m{sR;)wd;?Pd8NAbrQ?{0l%dEHPoFQ9f6aIt47T)a9H_z zb@nS-Y`qgwBi&D}H=+=aGnQcsz{B!N3;<*Ht&1> zDmzXpOz2R*m6ee8rjS=%#ztb$jrp1h-80of1T}%H6B3fy#9csw4oCU_*FZMYmBXS- zzXwF23BsFup5v@mI{gbZ{o=ZYoFOx?|EYV`bnt?xng! zX}x6KJ1&2b%u1KYZ=7PSARqbLS=#Dpj`D|y2x{rY%D|6d=6p3mOV$)hy(i2mR70^` zJoig^Q$KOdIV$1iDAxXu36iD^U0)z(mggG!CRVAD-u`Mvo40|zv5xw(SQZ+xXdIeXs6C<{h1_vi#b{+~kZ5ou&bP7pDn z({c$f{m)JwRkg~|ckBk~Qpdfaf_uY(k3GKWCkI+%f$YkER(b2SE zv)|x@e={OQADg91|N8T_Paab<0rs{0(FXAEaz}6pn_P+&+T@~IpQ7YOmhmfrp&zaI z1JbM4uAMo&+Q@fL7c~}i2jF&sym_ScG#SqBPEYqTZ(Z)~5BUrxjz#5B)|OI+t8Kr3 zv%wM8uvM<)TGeUZCys1pr8QSlCS)S3D=^bcPbyR1lbA2HOj}qRf#ZsgDbnf7cGh#V z%R4X+5jRc!$SiDJ=_)Fy$DU|S;=f)tk&g7XiC7r2ZW&GX8s}qOb>z4X`vIYgst~js zH7E>M)Notax5)G=GJYhWlhEyRdJKzL;+siyP0XD|#bKXddcx~=`fn=O*_m59P4^L9 z2wa%$Ve*1IMUtez zQ+YM!g{9n!_MY=MovDp_qf-=SDkOG{i#6QPXTIuFF)FR$k>uX8#F6nMpBN!G`hO4Y zZ6mNrbf87jCfu<7?C=p#SR~;OABJ0Kz8=}Yn2!8sbHQ4A5^J6vx?*0rOm2z?9?t{~ z=b?#HMI<#=CzvfYG*7=NO^(Z9{}UKOGTEX@pc3vs0j}y}zvSAh64}`pDMdGO%h1=c ztC2Mbv2kb~&JyBy@=Z)`-4~Ug?b}&($%7@}OG2%mRp^!WO%{ba{0ZM7U0d~B;w7J0 z8-%Jh!4;_b=*$`I2~sZ#?5rJYv(iZyMZAbUz5nSVhSo~b0&ocbW^!=tHM1`ygW`lr z2C5p*Ti#SBzXyfMOFpe_PvtYPk^_Tow0ei))p4~A5$Bajk94*we#f9uk=sG#)s6AS zRdfn23JYds^xC=C`H{OXWwP78!O)0(;^DJ97b(V zJ*rz-<;0}!Kt=P+C=|D627TWG`|?lC2;?Lwhpb*D(x6GV;Bs-|^)5$x8bs6ZD|$om z--0f>ZQgO@jF?VBwyrnr3Q0Ph-*HAYF{E`FWSs@3Z3^OezRPb$b)Nx8J-VBr*9Djh z%l>_PflIiAxTKakC$r|*gW4d&>H2BbHV3iaD_-(U@jaBCoIw~!)=7FlR5+mXarf@w z`-9ye?&D}-HV~O_kLmfxK;5%#sq}5xG)^n}kI5C5vnwW^LWQPFf9my@`5_irWiBc- zm^H%+ZYk|{0ptN4@Xc0{F=$-d!IpF?*>&pB;|*CVu!Y?bg1+HfW~fk>wGX9+o42sA zqUlZ21biq}lXHOyAK&GVF-?8mzO(1u&DahQ@+Jz zR<tQ4JMZTYNOkQWiDvusygP}q8ea#na-cCTqpK3?^7mvsuI(LyzEbPpi4@S3w9#+aYAD*7N z>3flJRJ@8KJ{WBBE|klAh7n1bc)Z{0!kV-benp8S73RUTlc-UIHGy$dAesLFz1JfhJ`#Yn*$T4Aw&@SLWo$PG9{ zk#j<&;8vVz1;uPaWHDnFe#PJ@V)1MoQDE(X68@6B%ejNl!E~g0urA-$a1)zk2E})5 z;j2;7Pk78T{3cy>nT>5*HZn;^i@R4I(?px7skL7$9G^6h*%Mge{6Fw7Z0BoD z{zS*MA4`qvC2rj3%{gauz4My< zrs5;ZWWm7^BYs;ZReR2~_ZsyYn`7_Bh1s`Rf8Mj#tolkskU%9t5NT38#HDGApDC!4 z6Hwk%5x%H26@ZWX{p;`d``qKukq#qXZu1@w`dtoT=CqOdBv~pU<@Iri%six1EBIrK zFbl4)oZ;Vm`o$ViMziD!vSvS%C{xYA1FurxheO`1SUk1`;q(^VQLvbl`ZO-L#y*sz zp%HkF;|&SiJNv?8##Lc3v?!ycxu|f#U+&~tP207AK+%SL2fFH&EF_-)w&%OdW_FG9 zhIk-v#I={uvwY$;`R`|-v`lW8#Yv(=Y8i*6!pZuhO(>K~%i?jhJvRlMJ-5Zm6vW}_<1OOXRAdD&YeJ=3pGdii5?|*_JdU>FJS$D>T9lG-wWfs>7T4Ts z60g<|a|yQk*4|G5j3LylP|7=6IDL_9U-%=rmF2u?OS6zn@VOK#YUSWq(*xTkRNlp) z&dNMX%buE}iU5Op?Az%;>NJ5TQ3G(Z_-cJ`d|2grIW5VLWr;TEnMFm}W6H&hm#mmK zUt<8oyXKKiO)0E&lG;bN{FvAcB!f3)5PyAy3lzV^{V80`a-~ktGY3<6#ZufBa*1&F(r@W(!9p-aRxiQ8naP(O5MORX`QNZSwRu%TF9fx; zUi)(XS$EF1w?GOQE+m>Rbaq(d<13pyNj{p($1}vWL&I|z86RtFho0?gp=uDz8VLMNpD{5ABrS;ecwPGuN<do;EgS`*UlIDCUPZ6q$Qb-pXk+^XC$t$k-Mj&Yr}_Db%5tp4)S#sM`NfsqdR>k<_TBeh!g%Tch=kOFF-Oa3oWd z+g8y9D9BH+J$WG7_HThA&>^V2wW|WKDwR${e?q_g2We^kcsLRD-9GnYEM2tAM=NNX zikWV6wsgri0kf*gU-p%T$%3m4nV*k5g7|<{^*#rfnx{Gg(1&SH+;l;(HLitb&{7&j zD|;&;G36#+dX8KxR5!aD^BoXlN3#H3nS$Z%t7vSRDd=n?_8rDY5Qr*pwnss-#r$Ez%ibZoQX=^FE~A&b#0_o<`iY)aAJ67OPu?fSP~AXC#ZFa!SA+PKU>CH}8=c@5M2e=puNhs_pV~By z_kh(+Zzun=m|k*KD{YUM2bNsYyZI)C9p4d%LKa{4Fot^6N&r?y@zDkRJheV$vTo0n z(PJW~Kk)*&y6Ia!?Q=f?l49z>eQiFm+ZU;F;kAwy=WI_RHMZue6(UuIFA5duc8y3b z-?!dlqC51i8h>za>Zv#nnBZCe#IJbTKT2Jx!&{57^s9N_g8zOnm4wHUXk6{7=DCH# zNBX+2`77Jw^?u}2Bmrv|p4`G!`THW9kuljyT*I~2N!PByUiZc!#Oi zSe|h-1Y~K(s8;RVL|X|m)yFOB3`R|;Np-EEyxV4^X(Bh-90K2Ww@Br-I_+)1nTQ-_Vwu6sFhbHKSsB= z8zB4WxT6P#b<;|vlY0ui-q0Imck}FFofuC)Vkp=f@>5+~Nr2bv7Q1mr1A+}RJidx= zojutWE2O+rmQ~cNy~N8^9s0U3;)JcaQGFeke6HXcS$|1l8~$vb`t0b;z?_`FgK)Ry;;Qsrq5lTMz0MJ3+ zu^1+C$;xZH`Xjk=sm8pYxg+>@^7Ftk>un$fvo)OvRZiw=yvo?}n`54@v{Hh(Q_#sr z=*OP$MC{Kz2`Ik`z&mO#Vdkl{pMm9+&mgH&j*;0)h)Z}Q0&yoZ2QKq z`Hw!IgFV&)%v{4n^5m2n?S{2myaa+jYJm!;(PUYB=hi4Y&(x@P<-f{&6Q3LdN$!pQ zJHg6OeILp6Q{d7LzqtY#rm$Gy?NIX3$y17moh@TDqW8(`Zui}5StjD$ffG;~`T21) zrry;4LIn3$lzfo&-HqxhQYD0yPj~CPGrO9{$o_iOKhVUJO^)jCH2icok2hB8gLOfV zAI$LYfNpc>$tp6|7uo-;$4D+og@F}OruVQ~k9=|t%#e8OkJy~O83rqOXi}6|NAx$h zWnT!hzAfgFs9ACp`}1qfcsuPJ#*la2hV)b}bGm-Fsw+o-A1qE!t7v^0>6&0!D*FN} zZG}B0cSeSCeIKK?<1YTP@F9nDpLe@*A?Vg#7n-~NKKZ&zVVCs)wcDSDDrCDl;D^@K zck5nZ(-RP}h^ZLndv4p8qab3`pp{>akxdH%dJ_%8i)?2UL%|o8Uy6HwxjvSXF(0Ho z&rRNe9$T-apVc3whX~|Uip8UY|0@mzQm2fHw>J3W0OtP`b3jW3X!WM>ksm(y({8m10}%A#)q*Mb@lGxZ*vCy{?!#UW&8J z26xe!?U%@q6m717v>(94V}rFwH5c!Csi`13ud{^OSrPUC&(R%9*|hTpfIksf8+xDZ zyTjwq@p-WUPw0AcyLjfsB!PZM`kHtL9tP3=cf52GtAToZ;G39g1GsnRW zM!?`{;$J7?2ZOC+pV8ArI++;66=o*{w8h1-^5@!X0_+)-Vr&N?cJB_zI}+V6HAt3Q z@THTh=#=N*+(!*fHa^a$sqI|#P#Qf(tsAW7ECP<|OBFvE_R~9EPrWn5ECs7CFN&PZ zXCw>6)Rw8cMX+msChRuItS?ur3e0MyhGuHWO2D}bhq$Xy`}Y@un-*!bJg!^};X2-Y={^Hrqu@A=2g|(}C>skv z+{;@vK_NHX)j50Woyb}Ia{qtt9%-)GH4~gi2@_6lG^>E>pBpVHLpJNbWzCF*1czFS zRpwX-^M?n%L^_r38x{#9>~6`>#;+BQ#&^O&hxlJPJ0?Ecu;%nUVkYQZU7J7GP8AQu znz1*p10Vr76W8&oY4Qp6S7`LEL&{N0A!EbiGY&HmTrPLmE;h9Cz3Fvk>d*1JK0ZXd zy0QlyrEJSkc`vhw-A`8#tp?c?>}#y6=LeTjn}z^>RW?x|3Agz#|Ch&1K^*b%HNeH0 z?|{9%J=>)5=ghoR{9|dZqLQ8wPXU7#3fj?J#3m-Ws#}7 zH8A#(v=VIP1zgYDg;U4J3Vdt));Gw=TvXZlaRSr%`Z3_;K)0%4XSFeFC2U;cN=^rk z^W{~m|GqV=Tvn}-CJlE*^qqsUME|I2XP zNua~{VxZmia4oThti82@MKWJ?-6#uD{xW{H*mjJD(I)V)G|7ERC%;$yJF|!wbBa0L zt$aARKhg`&woj|L(7*W)zLV!fQD?3?`&*A5=vO)e?CBK1XR}L$KGd*4z+i7k)Q434 zZg(|_M#P;BbfaIDx!4I&^H_r!wxGWpX>9IgC8~148zbi62mhGZpRacYbEOg?iyqqhWRay!n6tS%D?4f*{#Tp z(%kWTRf>CUi!E)oAD+%0<3tRk9^IKjSvjd7KHREdf?1N8Jiz(*QcEA`K@OM6<{O*l zGuc;lXk?@lxn6t9%8A~_`98XqX`O0$Doy*GL6K&=uE=6Tke?&I;=+Fu2aD>-KS&c@z2;e;9 z-#j`)qXx1&EQenG3MQc*M^29$e><0ADV*%63BSX@GrnE>h0rNF(X1zTnzXqb3|oN< zRzV242I*9rXH}5;#_XbEhq7U4olw`UJoqJqfNbt!4IsyRs2H61=D01lND9L#pN)8- z!;Wfa`G%p;Ts&CR1o~V#bbQ?JQt@Yw=Ut~yGXrcn?3@y1>W#*)LK?ARx+ z;WuIlZ?Hp85vZh=&0^nvRMdQBI$i608aLIyJaSlSU>b~pKivtvW)Uk(dQXiq_f={m zz|m|M*$uzZtIP%3XXv|87&jYz==~E*qp^4vaf<#s^f!n+nlrVE(t%1E_1}eL3p-_G zX7`SfQI?Nkks359EV#@NlKOpZ1xss87p6C4=CHgddNQhwGd0$$Pn!BbId-hpePc<( zK7Xbz6<<~v0*!3OramX?{0o7p0u|glaF6NOb$VTVqir)+LDi4b7tO5= zJ891iXQd{O|4R2Te!8n9h2ZKlA)h%fISMnZi9`MH<947h;YO zrF?KFaeuAI>O#uOk2iQBRq39Tgq*E|+i%}pObKn|{jD=mWdK(T zj%=P>F{O0l&d(^xcned;0jMez!GVP!pzxw@Ut6ai?^Xuymg>Lc9(Tk8I$fiEPEa~| z4q|2@en)JxlRmYFnGz0I(@sfIf|?00-$zWHw%8WZ8H)8ZEy zmK)gsJTl1oDV#(Mx}UF}3|-IZ6sgQHg438##1V*e_V)uo6f4G` z&u_^yc4c3;-z{FAq9Y&e?tKYlvpY-+tu1uM7CPtdjX%l%3Xc@&sKF2zSCiYRQjFob zD>)^N9$*}t<%yVBWHDLy=A?rTw|MOGOSMJ)l42rZtD7&lO&;atzy@C(yM60`^E*80 zaSN2tg$}f;eH#75|Fl9ceGk5z6&!29lqLR7Pg9MBNhN$Ps>1z&KOXfC{z;|f6)2GO z^TS8(fLGs9WkCGD&pL63VXmV7{{G2CQ?yf0^;9I5Q&UrfT-mg;@&9KAa8qy&MnjFW zgipPcGQ!s!m=Vztu~p2GfQpN+e$15fVbCX6_w{tm#%oWWvd_={XgfOX@{CML?kLg! ztVrwx;f5=Q~E+RAkZl~{=@sj`O)_% zDK>;$*%wFbwoS(BMo<_q+JBIg6+75b2p%4A74*#_l@*J;P!eL^TJ$52z)KLyuz2sW z*C=V`FVT*$%G5tlkD~=mb4yc@p0*Qk3`i_H*CdJadr5z-mQ~yi`6v5No>u{6%IarkZvWt z-{UnZ6=I1Hd{q-mGD*NWQ7t9+UA zlCT)0b0Cv;sF+&6#dzR|nRk^ZUm}@0X4f~M862%Z&fsRJ>Ka$1lNp$3J-nNgHsz9B z@7(XMbdnV`%zo}Fb~K5m6MvGvplxcF7hWej@!ans2yEf|I1!@Sq=eKokuiKIRo=P_=r#>+pw0&q zf}@ zliV$Iur;4#nv|#T(w9X$uxp4oDK5WRA`o_x_4E8+6l=~5{9rP!1|O+ydaKKwNhwt< zhB|z93GPDDKm%RqqW^ZFkBROqs|3U@&B;R*7R!t0&M4P%|dDUhA#Kf=K-J&|SL9*H~^ zp&`_d;RF|5>9bD&DeeMaKfmEruKWdV-0NEkz|TNd|9WpdtIQMsvpq7NxIej!

6h z0rVKTo4WW##6R;D1%-S&Q#)meBqXD7d}fV|Zj>)cQosYNtE*DN2!K&?b02npV6hV0 z45)E(qJDlsHfLvN4Ct!{glHRf`o`23>-Ct5=ct5!xH^6DQL)SoDsA*^d2K|k%a@Sg zDkp!vt>)i+1Mmb8e=c!--4_&D(Z{=e_M0(zz3;e?K0OZi0}-J3`sVCan>s0Pz0Pv) z;QYZUA;%-M=9a$LhSB_tcK2-ctAgWhzMjGPavq5dySx>(B^x+lG^pq(pO(y}aZ5Mr zj5oG2n(vX3@kmK~24kiKeOhxdFa`>o6&QIix&WZ>D#KwBe7SNZ^_KSNR9y7r8UZH^ zL%)B29(B2}Vy9Cj$HKyLKV6YMnybVE1prE4{pHjD-wNog@{nE5#BkZ{H(-z7givr- zTJh)29!l9b$ElE5k^!?%DF(0Q(IPDVp6`c8QK^9w46h60Bg58=d%#tn*;`{!8p|6r zjQ`5YXDn0m9CD$Qf7bmaZOLy^{qXrtg-0eu3FY{_m^fa*!nB&ZWcGrGM268WDfJqZ z$$(-NT*<}{)9&Qtw(A!g)!%|SM?urK_+cHOfulm9J`4VZ@D|koD_)dM`}n3UplK(& zKTa;3Lp7B7Vt$uoeww|K?X1mcckCS3^oc}KZo+b|s;I%KKjL{L%gtbYR$mxyoTQ090{#awt}4XRurT8WZ|PwnUdz zq6gx+mX$H`>%@AYwm}0l)O@ugvL*Hu8dtdH3IS)7(pTbLIWg32D{4D&#IA6#$JO~u zKwtPyZWPH=SA*=kc8KR$u&QU$N)10b70S`nvv|3P*nS+L=fNhvL6=JJ8avTqHG${w zba`vku`f$pxrWPcK65EUDygU)k>z}K8F`}k4?gDE&84|wBF%I)hY$V7W|Gn#!|%QY zBE+gqA-l658G=x@c2D_*5hjqTZSbimPrdQgTf1t7f|GdS!{S+|RenGQebdg%_&d9$ zR*1b;M~lC8Ye}#707fOmP?N}Dfq=UqQ#qzi7EcwUNTZFqMAwx*y7PzNx}GG#K~Max zP@1sII~Blb&4VO*rEbb6#i;?;>bQC5M4?+=sg5=kCr@Pco=*|cvLhRd2HJYH#3cM{ z`LZL7;5%!OaTN}_Vn7Hg!&Qxmro?FNrZl~pwHBd6wYBNut7gUjhMvpyn1Vfj<{T%~ z1ng?kX!=*0pcVv%1WG)*L5gY<nrea zlPsV^g##7ld13S5fNlCEEs@Ia>1!!S=a3IDbY8Xd*B4R9LQ4fNbl{hnhJ^dd^cb;R z7UNOt3y0zlIT8Hrppzjsw!mk5I!D0H=lj{swN=iPC?q1M*AjzMwj zpgpqjGdDu**|YUpHP62l6{yYxU4XxFuNHUI-lJsn;=iP4G_Py-_!HBMR;5L9`y78C zh{_r&KtprSY?t2;Wa&_o$Klln`Y1m)_G+$d5@|Ws`7cvG7aGWsMG87y%gKk##N*^` z^;C^lEW4(1#s%mVlDG0ll@AKk?k(8Mzr>yk1;o|wDLXw4OOM_T7SFdhpWuc<)(E-p zjJWp6nc@TlfOFk7c18xBNewz9zp(dYa%fl_pgaUmKSVRM>h0HM)_Wsqx{0+x2&1Nu$>GcIIph$txIyXxb$saVN0jQ zKY>NnRF@x#+=us1M7(He1|b%k$KfJtd=bA=wNKaDCN}NcQ3=4?S87Mvd{%TUm@8pM zr3&Al#+2MoM26alY20tQ-#Qpud-KRx=jEP2L73fthtmpmM(qo z)v!t*-2o-CKdD@12pu=22cg}7s*jky+2~5}m`-B?(VL4xl3QbrBP$NG*WE3cL(eqc zM-omOG!AOkcD5BDJa%ApfX8daS66s_Ybb4SjMOdZLa%t*=g~Y z+JsGI;U<^JLQgKTMVd&Z08i+=@f9L(UZtVVZYK)maX3U7(7hB2&2SOGE*Tj*pV~?l zuK1wiGG{q*FPnonY#A=;oo;8I24h)eE(o}|1LE@H0S{o zc_rdhooA+UoY@FQ|G&^45OF3x#~!O$tuE*t%VWjvyfY!CicGTf9_Lky3+*C})s5bH zXG99ZdJucSXXLs7&#C~lXX=t!P8BWa&E=pGQlW}R4w)}30WVK?bsxvNWH%2j!iAb* z{YN#qbC+dsIMN;5Sn8j}I#z%&I)g_4G0Q{S`}qkhSb6EO7nFkDDB=dp zZ4=b8>#w;~(M94L3hKchNSqV(Vg)fY+e}(CV*F8_=RUnRVCUEe&+kk+x%}lUHZZFi zlK;xy9PdQYc1d+f5v{AhFg6?=I-2Z!;>Rctxz>=6+;8l{u zd`u@0rcA1wPGq!_(@yo?*K;yy{OGSmY54dP&5WZc&hy0(=aFd(oKY;N8j?A{Zp0tYa6CI;6I5IEqF;eJ zB;|#yzb=>HPVsHA0;lnDG6CeIo}M;c`6lqLt5%F;> zoGsk=PbuK0!b!MC;^Ma`Wog~I*KYq6xu=L72E%jX7gNZZ-)LsPp5(6=hKu~K%q>0# zghESqy+A8|Z>)+@c_Se=mUN*S4~`ERjhiQPY?;2~pL>yZa3POhP`IiveTS28%C(u% z-%j3^@2Bzz(HG`hxT)3j^M%)!m|K#ss-gXukFpdE{mQ%hPqS|$qn$aU9Yv6~MqKH4 zOBl%TyB39X()yvGy*18d7Udcny=@+v=A_Y>FcqbshjdMkT11}gnqG&A5S0}kNbYaE8mr7 zX)aa@g(Na=_D_VClFW9}w#xJ6YB`CUpntA~HLbMxA@9{m4buhfChw7uOm_y+DK%3& z3f)p+1iM)NvWx^Jj_oRTneI5fY(KL1wJ^rG08{Fn7fmsdtt_vWUQ4cR>JnL%>mTVZ zx-ViyD4t?j^xPjYDkryid~~|E2u}tf1(vItiC4E^hU^bOlbXKvndP{?X$rM5Cd`Zx zu6i|}$Eby|Z7{)bB0HbOs64w=_<}Ju(#+a;`9gye$*MF*;o$bvMnJr+(#^g$kRzBB zJvZ@CB(xboUv!MkOfag{yBQd_Y7j0TV!F-x^(U(=ZoK@b-Ptd?yZ}%>#`16)^v`7n zy;wPYLUjK>ahwc6dbidM#I(4?wNDic?yusN~qJ@(uwv&ZB}umA4@&I3bjg|!*) zaNi&l5CP#aiAjQ^D92O`mQQ>_nyv2t*IJ(G`cW{(O&A~awU11YUOzMOy?-otj7s<~ zpi_;z%xlkVH;(|(qc;6m#caWwooS~Iev<-#!l?9*)>(E(7qb^`sa6)RoqUPZ0Uj~YTvf}&7uan8K(T7Wd;;75#2FQWavP2PHd}2 zsL0Yn0P!H*F6qaoz#q|P+WozSEX2nmHod3!!@XWfkSnlaJw0S@kQSm9#?JU zQ8xX9HXviPt*(9sYjH76(>0?=!fY$jF>enf!-)E!NX|@>OJsli6iJ;6le*-=Z6szt zRZe2*0Pa6hST~naCRMDM8OJ6huNg(5+|Ff*lT54``WcEY0(8d-P%c!O7b7y3QnB0` z32!3EUozYEIvG(-~4T=nW1#Lkfsp3tv8)Xrv`?UUD_E`(%3(%BRgzq zAnR^QK3zOne3Y1ReXtTv-mi*HnH-cyf}c2+Ow>HmDCU>#?L}8@$=M z-iWvcw3F-=FtOH$w+J)qtkrU0kTnjLk1IHPeZduA$j!(+moZfy3hcc;Tnvu80ze(E zQR0QlWMH`BTOpMREX;-Rb81$bx1JoG$e5_)0nY6I->EJ4f;x}<) z)*lnrUk}wANS6a8{8+e+q3-%YxuJV5$FgM4A$Pqb9LD5JhUwv|C&V#EEXp9a{TI#b?3$%^;_!GQCE_ zFl1*Hh9URA`I(&@5Fs(PF@G8!VP80w-2LqXGC~)e(=D74!8>AWc6DR!NuQt-)W061 zysntr(FTa}yJanCh>79II+Skj@E6UHd%itWyfXXSZxUZ#lf+;yLmEDJ^f%R9umo1D zE<5IEYCo+5jw4uDmZy1yzWsXfI-6`JB{{02fHXr&(S(V4F})Ms#uA+#;I(KpQAAy6 z#xLLXJGmNlR!`=O(^zr$TWg3^w$V!lui3ktD|TkoG=$^uwHYbD|Kv-lbL^T# zqj5MM8_YaBh9uz&+j6Bb1(#&`kg5WGB<&7|Wi&*na@ zd8RObK-A(Y9#QC|32t|aa>9ZV`h&f2xJf{-9Jd|Z@o|AsN>2SYBw zjZ&Fy+4_A?0L$E>`u`+&yK?|S84*%Z46h>WR0m0({iZuU=ZLe&$q7fq%h0^(3L?`M zsqvpwsDC6tTwFa0S%zk74h#>yKyZC4tu8ICt#m=pD>9}X2yP5jPaFUc_m`~HOrYwW zcS%81tk58!W;k1-T;WZZ_5)Mg68gc87mGL&0xSuBAmlRq_4y4V&+0hCb0 zRqf4|Yne}GQ*<_jL6t+cx$#Iy!j+0?tf2+sZV2OPW8BhsgY~qoe|TJWaE@#g17*s> ztM-GK4Cr}xJR@1dztXQLDF?N*Ggk9H3F!{8>BBbK3_mv2FJnOf z*~JQJ+=PD+8S!u@Yjgd}1f?9YPQ+jzOk^gTA|pS>0K}VI{R8GgUe!$Xg_VR2g;m*w zF-ouQfih=ReNWpN{WmX1F6I||M0<~wEAagDfG?JTS)I6@x=*uF;%Isr&xaG1@4OSn z>X_?K9jnwXI%}JotrqJn8oo{SKnD=`WxcVj?da{v^1)JL`OZW04JTalwzT2)>mT`ftVe-AI9v(^@=w1}97^FpgrZ0D;A%?2U= zlOPwV&~1#sq!8A|=m+#6G*U(i8pb=~vU%U&i*dp?Iil6wAWFnpql(Pss-`P3Cg|(( zPhPyYk@Kj78{2v&1_q!ERdWj?maZ8E2xUg5qU?+P#g5WQe~5N3{+$nQuZ?E1lP z?zF%k;nF)@-MJYg-iBpDYnhWO>Db6x!&ojaLl0OAkCJsR>30@!l}kUH47Z~disT+8 zfcH++smGLb14n+kMm2m&`=1c1rrnRI|3k!5qDv2S)wF2r;lp`Xd#*4fwI)uVL;N}W zRhjFla70fz$ZzR8uY;#pKRu2OjZXr@`dQ)Len0qZ=jx8mt$oExhSfh|)qMs~uC_zif4mbbhO^=$`|!k6XYV}rf3(wXPcH8= z@$Co*nJwqP5>a>5Y5$GTW#c{Z*E-)gnf7}HMgPfidGaE(dsh2Gd4Ek!#&2)(bW3q8 z;{RhP=Zt{#zadj2FmL6NGJlIyuO)Glqj%Gx?6iW*B&T1bQx z*%h@3S@txot+i6uN6X2v{}0|kA-{P%{XvDPj*7JWy|;B78_x$>zH2_5r%m4>1b*jp zhCVw;%gVKBE!~IaP3S#p2GRnk--<3K!cwRFudbp}$rj?SCSZI_!>r{v`yrHFGZ*mU z2fY*Ib7m3EnhfQQPG~Oa9Hysq7xk(|+t##hJ&+~4uE*E;kPB4IR+v`0FCA3XX_D!IXkm&QWxf(c+9@hb6B%}EDgIX!sP70 zo=N>#fBhqRbtDFpObA{LliGFTVYCt3F9fgjO|Or4_c7|jSl(?E*CLHLiL#$FY6^jJ zCwxyXVa8d1ULTuD-A)TJi}ZI*=*Rk-LFi*6Ek5QBat#yO_2OAvD3e+@X5l$MWMPkK zS-Tp`FTRJMyL4(Zj#wea_s^fmd4B`SS9|F{_ZTu;IZKB%W!r-|Y?c3Bj7#(F$Er0b zWg(30F0SW&IPc#0;`jbN0pY({3QZl(D<2=CMAbD#2N4nzUx%YZgOHjk6)XP)Rx$oFqJPM~El=6A`anWJG*?gGB2F8`+0*yqZ<;BL*Y{r#5EtKxCi-&n z#hmfRAN|sk$)AV5W@fKi&*n{=DGc5ardYwf)eAfKZ()9*33CI1GsCO^9 zabp)duElQ$A6&%Fm-l%Uq@Y3n?qrK!_eG?kw{)yu5~q$umv|zxw0yqKa-J_s)nNK` zrKmr>G-F^)>nfZH7835oWu66zIFUE0)M^OTTMr|7!a0q44RM+;6s|s$SNC4>Q5&D; zr)&J;o=OYdNPKy0)Vo{6rme@u_3K%`aU)F}Zqi^}{4(?CLo8_qX+Ec+i}d5g<9D9~ z`{sdFnRZ2l2fXI`m7VOl6(8;|%4*NcJNSm$(x_h-GAFpnX@x-3Xg?K%}EDo=Y$np6z4Bg$ww+i{$-{BV=kcg^in5vv6odHVy2~*>GWu-8@X@##7j^ zehphUuY(hdSa|uP<#1i(J6=5T6HnJ?qWxcdkvA>FnpfkBxQ}PXcjj)gM(p0cjJWNC z+4?MsjYFpJI&%{gre9M+Ndi15D2U+T;LkH73H@mnb=*c}`>Fm(x6aYc1zmU)Hj3o5 z94d^G`c?3>cjD>EEx6Pi%it!B>Cvn@PU3i#5XcG}S88_XO{XR;=uj&w_piOcGiN0- zJB9HfBm#~9W1jkHP<*jimBDC3#!|(|oHifro3tiRI!ELRJ0e~mW9MEU^buibOhFu6 ze-I5G)al%Zjw1c`wX$&kx=24)WimU4@;)>I?fVBjey1U6%2MC1-I^B6XCGXehR=-hP}p^;DN)UZEyeQq#n z;CObd8O_*PmlF=MV#Uh;5>_$(6Y^-yJTfnTL|doB9FX)V3T*9cv5|Zt9i1@7y<}LE zw(L1}jDhX?a%lGo8nszwIktb*+-&oc1`!v~YuXV@*pI^odzU1nu!u_=vN)SjIhoke zr6$|oN@4!Asn(kal3;68vvKx#+O+M=*ga3d-VrAk7harM!KC#!3AucTKArl~t63Ko zY_u!6TuQ%^$9?VEBACZC=K>p-U`c^3>!e)agEvDYN$d?x>Q% zU`K;4y?C)~v1NPB)-bwtXn>O`gqf{-A(;;2Dpz92#EEpMU!NJrd_;(et)tq}s%r;2 z^k~ODp;H!gu1>eXlbA7X7%j(cw50WV&lHC3J=F=E@D` zZ9RvpyBEe6hp1R$2;J6Pr+FcFk*S+B^{&F03BzewrxAOlmE}XOGq71l_MbXR-&XxN zuzd+lI<6Hv^z^Lk&Hf-!nx_^pVA>Qqm8fkwwpHE690(9aX{W?loJT?-#7nk}DF_M_ zr4xHsq}j=mX3u8bIP=ng;lT!av>(giqZ?^db13hE-*fib4b}@G5)@-klWyI4vU-&z zt@S&j>D00g4(4E{wdsZQ`^EKDqiNcy4IMf)WWR4PCnq(dLC=ZIS$c%~d&khd?{fBT zoKCZjD=lfP8Z?SNJ^Rq6_9)&8Tjj;pp>*rF!V;%t_jQE5Il{4X&)BhW6FV=S;NXsR z_yp*2bauu?F0M!EPSvUX3E#dD-zXK8s5rsRYR57 zrOZ#K#vbh3bpv|`2i%gT5aGg-uyrM^n*(8LJ*InW>DGQchYzo#L5*R26bU}tJecnN zSFvZqG+Or9By6MWoVj|PS?f7tVn}T&vPn63|+Z%L(%J!{DB< zTB}^~sY8)GWE2VR>IURE+Z$Qkqalm#Ia04dO$ug8F3u$){dVwK7zGA{9?7gVihCjx z{|vE_*r&@&wTcyJ*lQNM7qrK$)sX1+ZIsftGqR#i z)mrtqvvVYGe$DD+#fp{x2Uaou(-F?NnYSokDjDfB*|KoiVG;IuYBF1uJ(o8w;!Ww1 z3>w;p#r?7|=fpcQ7!L9B`3>HLhH>PGFE?)8CVh!Q2}k`PZ0rbmdWxnUy3($7OQycb zOZOVN33%;8lx1kq$cMLqqBFKZYcf-*>sYpKUB&bH-MI8#>gW~dqC*J_kLB>%iM%b; zfN3*&kt2=5GV_GiIW1$Ruclw2IMyF~&W4dg2r6AeoU1b#qIa_3{0B6lez=wH%Y;!) zh+ky?YfJ_$&RMFE*5LxLMfu!IlaCt7jUrD*g5LUBejt@T=CSsvC%qdMATlBVAV~v5afS;ckgYSh@tKfN;ykgaSW^4 zpIR%{kTr>D{nQb}h&&j>f(g)T3I3?2-k^!(76yo&y(5AC?{IXnAu=S8aBVDsK?=H# z9ZAx^{?4rxD^`AStYZ8pBlhJ50$rWCy>vX+L)>_H^pFU(wTw}$)lnb#fdK@8CCI3*JNk-e1hiU8hfdz}FuzA-7Vnreu zGUt>I5OM4=>2-ufhH~}LT4v6i%M06_Xhr6dQOFnl;WcCiENEiTY)T|f> zmM_AWVw7^S!(^i*SB`j7AV)?AM8AthrxOA}hyl^*HygJ`+>b>ZYE=%Qu|X*(d76y4 zi?0SDFqAqy;c649Q%fP>m^2wG8&@ji&&z@}o2fr(6V7M*a^#Yca{1EXo+ACHV`bu4 ztxkh?-QKKPv5Hko`(X}zVKGd?V~wOr6~C&hbBdJ6V}#*jaw4^7{BUHdv|gygBgFA~ zq-mrjF>6wJ(I~4sQ`YXMVu`Alv{G4tT&YC&(I0*4oLI)-UA!rsJ}Cy7ob)NheK3R& zU+voT$WuU!+kr%9pE6rGoLLnXYIxO6SW+zXkJ% zJ-v+SOEyt$(0uX;0bI3hbzDRVTLiff;%1vPwCGq<)L$b-8`l)+l%sI|(rnx}o%1W_ zFlWt1i;q@F5p$W2OY9%@%4Gji&r7MeRzOLXF@o7asyji)y7!6HwAScdHcZ+ zpVuLl=go>0EB{+q#rRLgj@ff5F>E6f#*Ag`%vFp@cZFel?qf0uQDD#!84*Lik_CCT zaS2ae_^^EbKC+gmNtyi4tXzMRiZx1;%keH}WThzJl#u9;!l)PGNROlF!Bh@TpA3eA zRdR7|;WCbH-oU*V0iu%0`1tNEtCk;U->UK4cWF%F^hP41H1VTaLW~_=GMeWkqkKVc z0$%x8L|II1ybrcsh_om@)Nk36ESb_#uvBrOXI;pU+6{GVG-^$}T>3o>x;P@EjTCHJ zmVFzJQ=&$0Vxl6^>J4Z_`g+mzsbgZqwuo%h5gi#t^5V_N{%|gf_U&Tg=*DdFi4dYU zF8<|0LHT;kxVB~lN!yOIY#W4#-MH}($F?tF{hLCx%qWDRF_Qg9o}m$G>Lqn9%gxqh zjp$jeD{qCM)WpOJF^w=XG(<$lQMhzI9;{o+a~~g;EI34t(lx1&Psxf+7pYpK92w0Q zxZ+TO+#W{4Bcd(G8ifc~YlM*2sf9rkU-~M~QVebAOy}VjDN?1VNOKv_MR_h+aG0EB zYg4C`8{21Z;^oupOkewsN~OGU6dLx#!HWb&tBH<*;;l-vd&4P8R?S6BWPDl0iNCUJ zRjA52#%$Wk(i!cTdgc*IlMvF9@46x*4bu5AWBo0jUERg{2U)0->H%X{9wA4OQY4eB ziBP1cVfvTM+;EGhBF?&d>8Y1XNmNt}(jaG&ByQZle4OCmI6`0EW#fTk?BBbUj)T`x zfAApO^%0h9&swf5w>E4bSJ#>-Vj_r>Zl2l5^`l!ja_Asi)=p&2%dB*&o{^}CFw9B^ zQ8F^za&)7j<5}jO3#4@wPqxh7#>*$yn7ZyG)f?2Nda|d?+IX8Mmv^$^QAX-y7e=r# zoD-)Wv8G3H2A_4HUIABjZQH_|*i`iG?#$M0mo3u>{x=~RWzzc(HM-Aa;r#h5n=z0y z!ZK2;4V3THgQBTy#eS&RwFT(|9&$RuhDv2}@>V>Cl?!L5aMQX}ui2DZ#nW2m`_E9e zA$5u*N0+Pwv**oc+N3G;9N3Z@$~fM;gvI_DpCRW1Z5lRca1w?9yqEsTt(Xa8 z&;ynoc|-Nm8Htgl!aJh_w=O)VU>R@x?p(tra~>k^KOjZv;<&5dvt`RZ^sZTH+qeqv zA6y_dRcW$$h-XgwmaX$Q@WC!M1u8b6LT*>yUOmRaJHDjOUX^+kg_WXv!`8VQ`Jnn7 z=i#;Uq%2St5A#R1>^e{3s-<~*^f<3Ik`s|9#cI{TJB1Q+^gAv+)Ka=c79L-?LHaU9 zFur}nJ6USd8GYG*`X;gBQtdr+)3{*?%gB1*!;3_C6d`-cc)=X|;Tg}=Nhz4ci4&{l z^EAR4_kvYvT|NV7eAzO86CdnTQ&{A!TrO7vAD!gb3wykihw7 zvR7?Kbx~$&VW9uFVqNsd%Fm2-(VriSr00Ih6*v_NrKJ(nY#Ml+*-FR~byNy*4!Jb6h@ zG5)8`R7}mS3AuNec}rKbW%Fh>u2{;h%P$iaaS$&AX{3JAYef2;U^^_4a4gBq)ZBtM z*S4|#_%rP7ZFqfo6Vo#~xs?N?5h+b68UPL}7kGxML|6>39kzC<^ zZ+?VyCSBuX!PK5wt%ot$D8wa9=(h0~^`!|rWMuwp81$&((7X^qIbiZlf1cIGq{#xKOS?4I*nsS4^aZBf>&4vvtDB#*`3g9$SMI zu5J$K;$sL4jg)4W!pzbUcXwN^Y@Wu^@Iv%&QiQnhm%IpbqNG2ONr ziW$-XA2W!LAUHBk2!G3jrJ03rmwL37rWS;~IKYgZT9(gfPkh)z#&#V~{$cZIn9Z7? zpg>|&dTgCsak8`E{-L=X2`|f-Hl7?lbPu00MX|MzX7~suELwx9wY70TkF|}pv1eVO z*AgA8#>Up#7~i+>Ej{A}3KZbbp+m-=ajEw#B_q|9%a<=xzI^$g=O#`;NJ2ayAi&r& zkR?l&WGGM3fHXBhuhWt^<+t%G3!-i$?aTZ(knU|88yoK3yN6b*{oQBizp`iiKSol| zxTB+^EPP~A9MXHQMT-`4&v-JCoIT@zLX0a!V&KSv5j@V^jiL3j5F-StkR;gHD>yi9 z4A;!^lG9O1_A=G5da{p$ege*ij7AObZ>6*SXq!sLt9{` z7Q$UxAmZgAW^9jT_PFLkoNL%Oc?i$E2GGIdAxlm?A&aXiuOgi2+O0Jof11squyTxT zW6R*4+vz!d4EDjdSi0dLsWPSKL$Ct-=vNeNKafIc?09v4BRl=l(Z6kJwDI32M88Fh z`}p{h_xR3EwX@&hk^+Qie$Eots_iJk9@FsWN9 zE^V2_!O${H=-@!F=1b|ka6Sd>@6n~p4n{2-&y%$yxtO{&J0F?&BSX51mEb@iVwTeo;^dSt4P8n{vKg;XAz?bNl!zpbjI%fhp(G=d-2A6)#{Z+pf=4DLB7dz(UXoLc z|4Ey1g>e~UX}R?;A4<|ssVX=*r!p=bu6gIjo9IyXteV5TO&3vEniBQ?4s*s#}A`?Q*R*U9Rl&w+LOuMn#gDkp1IQU?$rllFKQCfZ&Ota&jLfq zkUp&lKL!&^OY#&ehxWNI{vV!jFVc;I>77KnzyFI(dQtxfNH6u2{$iJU?0=NEEIbMRTSxPAe#CkqB3TnF!-+ZEZ+ccpycFLrG3d0|WbmeStCn=^+K;A{vY|G$!9gEGSd`vqUmp4)3-0f39rs0A#9FJ9T4`GJw)v=>3yz#R&%^uoICuUU)|s*r_v#K8 zE}Z1>nFr{EpiY~k0I|<5aq7wgVhlPo8lBMJI#ls0qwqBdH&uK*YJ)Y!%9h~K;k8`6 zdYOHvZ(*DcF)>{d(sIr!tpaOnYpjHD*Q(=DDLtrCEF*{a?cn>L zOL0j{C5!OmbyifWUWI!HR&eh671nP&Ml6;TE|QCj*CVM>$rGLW@9A-UbN4haLXvE< z<9O)%6ty;-JHCEj<@cW@mg|QPv2XuA_Uzrm<)_l}lD~zPXE%L~OGAG~6~vvpZ;AZ) zoIB4xB|83$D&j2-{Vza z(qI}DXU?A?`a4%4P4ov&AK1saO%WWQQMM;nTimvYK0YT227`D8a;uZf`quSpJpSLnyYvF2 zFO`wlcvo6?Z;HKAT2|bHHsZInHja#Cn$f&+RwBZ+*4q|RT1x+T*St4f^^zCIS0!u9D=J1-#t zp=8XT0~_Nk8Rp~@B0arc#qTW2_MM2OPvMHxpLQm3{}qGUj3XfM3LVMOpO`G||o0_2djRww#>#G<% z`B38CpXc?dd7^<;g2SPS4t^UbR<9~M9!8?jszj47dDt;;4F2NpjpaR9cs!v|F?UE! zrXP4Jt%m=<`4iXl-Ie9^9lnY1@DPGNyk*yzR?NDTlwrYdh51E2zOrr%$3KcPKQos~ zRf}^XBEen%WDUjZR$=$^7!;a#biXhO`(CV{){di3qIh?41M4paiHL8|u})uJeu^OE zlRxA8w`c#;KQKE$^c9-6Un-hD-+&>I>67Oef3E7(kWHfg1_yoOH0(N2Sr>lGc+P*)!vk$^}<@3)CtdsnTZ_e$rxN>4b};IU21Q9_igt zCW>L>Z>18$^CK+17)>T;HP`P2Qng_N(%Bf$8DE+Pl;-xNad-HY&9F|dz&&F&5pQ-} zY!t?HSlGFcIx(&^#<+Aw+jV<4k-i++@bqvJ%@q~Lx9%W)>AGZgHWT6eIW=x)XP5Zv z*DPDMjJ9pt8hi64VtrR|R9A<*?@yAYX&q7tF?(S1O{%vjz>)p$>DZwn7uQc_*TGwy zd>BMN=Qwtp51~NL)STWdL`asx*oWTWpb%s^v$`3>{9Z_P<<+ZKczSvY(e#c(yFRdF z&1AfN3R5udG`j=SlP%x^0jcxhW*NnhKP#8@b z<{~i4ii{2_wl7)Afiw4U&0Yw*SYLj+9En-XWlr1(#mgrLX2f%K`$4Y1xR2j^1=&4a z@jJhrV>h31)Au9!@@F=-E~BENjCSMB&dvlqy2Z<21Mfm|Qol?(j!c`xb3<0jRI7<| z*n6CFWaZZ8%{+SZh%K9s;FPB@?lvZTynTelYq#<6eI$kQ=HU9lja<2XpR1RBd8)M` zZ@N^(zq!i(7f~o~pW@a#KlbfDNJMHcve`VRd&@RFPt$-B+8caKRfe$rW7%b>E8=gD zDFGZcJa8n8uDNZGq0NO1Mp>LCXoL)7VeMfvb`QRf3 z3+BW^#JzRqOio<9$3;H_CA}P&)~z1fLJL#bC6YJc3O+^Up>~Nh9GX6bXKGK%)vkkM zus;r>tW4hCV9|=zT)O*;oP`SzaDJz_K9BHy7(-rVAt|cO_`@D@wP5vxSM8Cey;?-LSc=UuTuN>&w zE)V-RULdDeRy41#vGsba@Ry2f2UoFr`yrw%J+S+5h!&kEleI~6wC4{~dHxcb6!W2Q zxf)!VJ`M9m9mp9a(mZ9kF)shu)Z`O!1>f4v!nwP!bg{+K!qQmZe(xD7-8<3@KRb8s zq;>1oiLSqm6yBeCE=&HUnLgCwd{Z+sG-|c+*(2MN%E-vb{B@+kn_rGM{9gRU5DntN zuQpEWC2f*Wl~%j_%9LA(cIky69oHrv&?cTEy>NbZ6E6_8Mw~0TNiPl|x%h+>Mp8NwLzTq$ui_HIU7MIE;iggP zDbb)Kr9ABt?AwzaJqyQdr|FWeG%Fj!nw>9&n>5>b0%n%hJo#x3lTVw{p???hg`c3$ znqBOkHIaCAAd?34VAV}{bZ8w1U&bV!l}sp2i3xbdmZN7me)J$S_V`huLQam%7{Pg? znb- zxfS>C-6BirmZ+|;VbzTgt}pD*X>}&*RIkkI9aA|FpyKYfsm#A*LFwYT_^l3SX;r|? z8;uL-=rek=s17%2(RLpB>ej_9 z=n$KphqH6`Xs*WPrcR~wY#cUDG>>4%^zrzMCc^OAg?U|9n zxie#8Va=hLJ!v!P3L_@AFs2F3Gx~JujXq0N3UZEa^M#;1G@ZFuZRs?i6WKl-V8FUv z?3^_nZTuU?4(QJ2yKraU22T3jVQ}j{kgYmihO=~>{}3w&JN$i5aO%_vjvPA5>O&7` z)1ww|_l{)l4SQplSpxPkY|RCZkM7JhyNYz})_~BR!&!baioDr8$)7(TW_lG_%QwU1 z;Tn;~0JewbqGKs%6ov@ajGe`M(HQF2YB)BfYLMIM2`kS$;O3SoEc11wMsY_5x9EXs z^?vkhR+t?V`ttaVFSUEFBvUmZ<{w|;!H16wZ`W7&=|j(^Mc6T>D_4{`$&t>De1-Cm zJ)LL-=Ms%L(LfJ>bB~?J&v5+kK4u>cqe|KAoL(`86?dFPTn-Fw-V@WBed*bxFx$uX z=Akx>{%t0Zu2dber;ZfQAw4=CFn7{gqz^K24-PYJ>m%M>TExWtFR0g|4mZ!Q;I$zm z*|TKDD^qH5-%AZ|5$CZZoY=I6;M@hMk}8TpE&5|C}H7n_yER8+f$%$UCB$c}><_i61v7W3% zKVkdzN9-8bk0l3gGk@7u;b`@FV5^B}l|Ar%PQj+laI~|bcIzsH2AEK@vJ*SD?4V@# zVT5g-$C115X;7nB;#tXs0<9{BcW+4_vojE5>8~KpCMk!*RyvOhCLBh%nqehbO0 zD^k}hoIMxraqNkjwuQ2Sr9JIB)+L8e89Ekt&*|spWb|+)Z&qtmaZ$Ke=+C2*O=(rS zH%YS-=gd=)hDAh!vP=Q|Za(MMgSQlJ+88?{Xdb+gC#?5;HBCT#@%brGDEe&Q)xe)Ck*6-L$mcpfRODZczab549 ztc*(n!#;b zM>3jz;%sz5I+ae1eWv2H@(JbgTU#=^ry@@wS2DZ0lRk5HkQUyGjl%!UE1vniqs4*) zRCf~%b~77lHmZb+hlUH01?W^##FeQ8ZHh*7aM>0frmsokqB+P{qbZi6UKzyIwNAXo z7S=X6IaqV?*d@xgAA(ob0*oI#ixP#i;pi;#Z)$FA#0R~9!~1~O?A<(*40VTKrGLlS zxI%O^##NHmMIt%4

|LHlk8qH%!g#Q~c~gGT$HR3xvGMTT0txeq4SqF)m>+nxGiB zziC<%>1F%(!~|EjE+%`YrEHlqn~lfL&@A#NPJRr>M6VO+&>5$HOq<4$XE*K}{rmae zL*br{s`+vw|LPJ8iFBwtCJm6_;c5-I2BrZ;aUR+1DDxQE?bB0fz&%&OC8Q!QJpHxC% z#wPUat5hl>@J+~>GY^GowqVkBktlU);u6i48?^7p znQ7fn6d!{$GraT#<@!^pQ5ekG$2L^*HZjg~9vLl#9ZN26Z_<<;%Al-QXgl^en3Iv73mm-48&rR{Li@?dd5!=@+BkO}X%sd=ScAj%R(a)vlO0s1z z73ar^yol-~T`LhEx_E3e6l6e`4)pHbi<;T(r4!JqRl=|MVd6yE_(xnf4xWhM;!{2O zE0@Iah*)_Suuti5xw#h1UV13^fVY zLi(WAuxC3ubm+m-eVe&4t|QTU7c!|HbKTgA3g^-@1zsidVd{64q~Xf)OYpykWC~>b zvMX=$mO?gpA*vsnKeZgb%(s(dtNDA2{+v2>%D5cUXL;8+=P0vOO4!+AvvvfD;zwj&;CXUqWKAsAxPBHh0Jrf31=g!7iobqVIz*0&U z%$mpLC!a9MT7U)P2Jv7)cb=A*PnSYJoASJW|K7N0inL1T%VW#g8B&a4EuHDzb}hGUwnjGH~3Ui}UYkDfVYq&C5?Yn&T1j5Rck}nB2^p6LUMVu4V zB3=Ktbgw;;c1ydkcjQ6Ft)GDD?JaaT;KqhA*_hsOAn|Dm@aT0kBW6#}l(e%t{_@1T5Tp8O>ToXa;)13@h1Is2AVR|v6~~MCmI>Hf$V3#F0rf*kE9K6KC$|%G1BGB|X}%X6pLM zT$wf$Mg3m9Sh$D^i>707bSc9(p1{n?kzO+v5x;3LZ^|v8t(Pf*r{^<#(PP}RSrKYc zk!2GquwY1EF8Igex;6ADjKgQ@u zO*l078sk?C$M}IIk)yM^5>j;ut@4@h@uzu=Sn^baV?mf@MV3ye&69&un7I8BSqo(6 zwSQ*T&u`7?{=+l9@ovRXCaTGc4ZpFRd zaw;SavsgE*8|iv4#{1bKk>)43iMYb8DzjvKO|CBO&6@KjbnIUjJ6m^A-(r9F87g%k z{Md{BNWE`AKhu661(Io{{%`6u`8$wI>$Ys!VqED^MkXa8-ItOrbAtvAj2&1q-yf-r zQ_u>WGJk|WD#rf^Q6ECF^GN88{=4`}jHgh(6ywRk8{h2=o9)Ne&BMi>j!7l6k!g<~ zt-ixp*~ow}?9+VTl~{irriRc@TAWi`CGLMuq6mw$#mWBvd!9rJKX$+4=UWirM2T?h z{)T6lLBtjPbzFv+FjOW^JbQK*jpp|UaQ-M_T%j<<%IZt8sW*<7F=%3mj5T0mZT<~{ zT%=pCA|@VeZ7lwPfd4fLr3t1cQg8IHO%f9t2mimH?};SF*Q{AXr%s&`U1VfZ4l7r# zq+`d9#;KZRzCXz+#(zLF6`3UdZXqrshD83$1&sMB7f8{4RkUOqqQYv!Y{Be=RcnZP9B>7(=-vjA0SaMA3^F5JTt;trNR+$(- zX)1+191o7&jSEE9O3REbbkF=iI$>eHnTob@V zyf&)}Ot?w@t*tFl3I~O$dE&k`mgdsEst|q> z_Ko41TZq3_#ubxoT{4g_cRH-hB)5d)R#w);KHW#(F$b`;Fvrd%Bl&W=VItC>Kt#mC2o`Sa%+1>_(3ocvGm z?%g{wWy)k6G?LPg8Vb^&LuoLJlatdAQJykCCP`)|K|w*rsZf9K8TuobsVGgX(1h%z zNU_x%xV{NnT{L=22f}Zi<<>J_&b{lvc4O9|)+#95b|_t|lOXr039apz}dl?Pr)(tm_HrW!CRE= zR`;v%HNWKc!G$c?dJ7E^G#tE%`UPzgkNi27R;i5D+(Wd>^X2FZnSU#*R;{8#hYqrt zN-~k0W-786PiDSFj29?SfMdswkveti6e)0%km`seD9)chPn9ZFi~=O3AvI_un{jD2 z6G`}_u zolOx^y+15|a;;|ITPST`$kk zuAyYA@)OsdZy|U?f5tp6%gK3V87mqSbq6dUuR|<eZD->8I4q%*@PK5tGbRe#_54y-8wRDoZJ?DZM=9?Z@7vdqE;e$o^QuG_NYAmyrW8u8nELgIf<%61HWoCkjskr~69&qfWFZ&ixVDQq@*qa6t z5iN;&NywWL@!%|~LTxCW+6w119=Iw^d4BUOkFK9)SdZ?UdJ;rbR6O1lYjbWwb()Xg zPNtmscyjIx1)KIHr;{c53zZ~~rwiV7>*Aft3JbG@XJh6Zh4A)tBuBI6xW0NpjHwM4 zmNulaGR4Zm3d_h_yo~gwYUjYN@a4gq;DULGomK4bk;d~jh}#rgJcGji)yvfGqG7894fX(b#57pZuoO&%~;kv zwxvYsU=}UA!QBmGIrt(Kty`By_x>r#)YP?&2Pzlw@$S2k_=PySXf)2*PBtL zVjc1os!Pi(A9?)27>YoTN^Op{)fXv>f5s7YA=;PBM59JId2#I#N{dXiXBJq;gEW4#|-xoe(m~Syoc` zzeJ}Mf=u@px-P#L$y~Po6jE<<+O%nnV=I1cyc&$+S0ZVW80n8u4C~dzDGJc4VQPl- z9nS0-QyD#d6FSR;*;Vu!HLfL_Q&w}1fs^O3bn_8nm3s14?TEwOMGT!ghhc-pbNa~( zHcuYJ#O23{Q(920LJ7R8w#Dt~a)!@eK(7HqxbQF>b5m*UUMX%#Lz@xt?iLFd&ZkMY zHFO@;k<6a?F?q9x(NkA*!#@c;*L)Nog09e}`7Bb7rS?M_rq4z54xMS&wiS&BP2!!g zTk4mDGp=EC9)D@Z_UHqAZ@j6{u+=aP^5_$^X-&{l0PJ;;g&U*Z#?>Z_JC{Kq@ z9ckOD8ErfE;Q1d|j4kBV1A@d0|LsrHNbgvXgtc7-F&D|MaATj}C-%=@!n0&r;O*MB zA=GO;l4rr6@DEN{tm5LjNi=KInl=r)GGg@^qg&|f2Yg6al=Y9H_or>$A$;zH{05>g zETh?k^8`QIKn3rL31!=|Deb!S;Z^cZW&O7z*^>V(#Kpc&g_%=1_8gjtwO(Zu++<)WwI|0~Rr?Weo~=7p8HG+E@r-D1{(3G3nn*2 zr&i;TuO8zEl@%{52fVyX(0j%zI+jh1#-adgx6h|+;hf|s)s$gfeQ4Tm3Ek_Jqsh>P zjH#6a)9m$GGPN;U5srQSCM=oK01a-e+kTj0&T7@iDdXc^V3<{Ygo*+oqbRqrozNbxt7Bp_yjBCn5 zES*!IaaHTG_C+@OH}b*WGdr%*tfb~HYZqby@#1 zJN+6+{y7;o2W9%XbfhUDGVYFT9Jkrx)-cQn`2kW zW)dRunF`))qiB=cT)sBl_(@kHIwX*2ojLBQop^U{3IjHKuwzkuLgOrPcCa-1(L_ZE zKhh^(C#=m8FY7ooS}ieg;GD|N*hBZ_qCZb}jipliSv1=f!py3cyxG`>Ol{7w;>KM% z7n1t3q+X_Yv_gc0Mr!cza7p}ht>M$hV9ab%;bdo?(8HvTM_PH`+F8VHY{qIux$Ci3 z=+TM)Lc?Nka!ZXladaq|i&~pslX_D%PUhakc<-xZZ9J9Dhb~dnM7?EH8(g@p`?a*t z;_g!1-MzR4cXxMpXp0l15Zo=eyHniVy%5~p<)mldeeU`j8yO>Ochx_COQTm>CQ$+TzFYLw+m*JlGUMFyez#ZxenuW(`_UlrJ>C=EhE+Fi&eiNfF z7=Eu^YcbyLl(}~AjC^HZF>Sv4`%qErf&8hHd!q#Nh#`1B+=Z1q5rjoTV$jXJkk~Gy zU6VW_jWbx3<1}^x#q8o>J8&N^F6gR)v;9J9O^T*wz&6B3m0ppfXEuOHyuNO<#vP~A z$&M*{t?=3t)qGf_MM8+krk;SkbM$9-eP!TFm_%{48z3YITp}$c;G-;RY)q=f+hS^) z<%HEM7F4bJtXkM(*C@OK;8Xhqyg5inY6iy_7IEZg^kd)<1*HZdK&^J4!j8jvd84T; zQZ!M6WADo4`5s}h!Zn4RiOfg8<6 z5b-giTeryK2u-%50Vv^e1XG+zh7SDZOoy?>Pcq7%ez_)!mi73CD~0K7Y-hk1!rB`; zW#3I(zsI$-wCwsmW%o2DIC!l;dcbM~Uk8h9I#b)0vdVvPw})0ZnE}|>IBh|NpT56i z@!ghG$X=N&cmrMFuo4ofgJjqDYb_w!`TmE@(>4iehfB%7qw_wHYXvN2YzfjEfl|v566!1$yOF_Rzo?%7zf7G@3;;c<6-F2#NWH zX{J-w_pJSPe|q&l1)^0sr~0p)d^co9*P>{VG4q2JxN|j8G-dyVYT6hvl=(wir|rjZ zLy>GoR-WGo@zsI&g8Mc0le{s^2YuDvI9_h%#pB;|dL8zF3re*~OpHot3?GL(XTAMPJ5mV0`{Wv^ zkS(Bakx%Y+wi-zbqMB*k=WzgrE`bjji|3sQ5iFyMlvj<#BbOYjG66+D$x{VRDUF^MFx~@8o+#IN0K$A+cs71sb;K zGgLEV5rNT?@Z`!?)LgJpes7Gs=h>{hY&DaT{Ugih_x~t6^xyqnkq`_}@^ie-dpM0h zgKN?Wri1XkLwbb9GFV?%nIr9cmEug?gu-x3&IMdK6op*J|AaH};lAN9 z3pXd)xfG|*;_yhsfmI>Yl6E>@4mtkRj=dJI6LjD zE!37+N~ukwJk70nC)A+l`8^xjpW|EK;K^qi>nc`wPxtM8_lAk! z0T{_@Xu|eHIltsZ?`=79d0%LVoHnN|m-h*xxDDdK%{?A#;>-EH(-|nK!MAFr(t$Q^ zQ#z81U=py^b(0=qhd8XbUfYj1(}-(xIV0?Q%PD`S8)YNBZSrX4NL{>UwY#oYA&Q2;a3Y9vs_USV9){IBP;pld&?OD5Wib}p`0y+)H z-F>jr<(=5_LGa*%IWTX@nA(yVLs0s>*x9Clj8dg2W&>89EFF1V;O?_6fZx8q(41bI zv8OVgl2dtl8qTP%)f)m`5@fDSSY8BNFIbV4@9|6HP{LhyR*Ms}|3sm(UXmDs>|@=?MA4Fh>S`juSdVJ(u{N1obuw`g;Fcvqi8sHL78?xr zK}WLNQ)0rm;S6YptBEnhC_`N|Up)_XzjQm~n}gubhO))#*C{@>fYv{%ht18%Dpf7P zCG`|7R)70|RKN;nS@@_+YX~G9$2yS-)ctK_WGzDDF_=f+`S%F8i~ufD=1D47Ee8nf zHiD!~ai|rNMRV{6(}+vy9g4| zf-Eh_T637HL>%K|d}ej7!4=oOexrt+^p_rPjZSHGLNmQ?H{VY+a?|0=!*@0rC!E9L zV{w=eDDt|+o5oyPRqN@F+?mk8^VA05J-K@=Yov#CzBUkB1@{tpyuiFV?$(@ zmBq{X`})R_tQTL9es5JJ*qsKlyB#zNXbVy0A5xbM$iaRGWJ9PXNw(D$8F}686~g1K@MM zC*7>Ix+FWO?r(E9@+{hBo9lps2O|2Cxgeg4DCTd2I^~CD-+Z&W2?L-QnSpzR17{+2 z5Zv_6w(-IGJ=%xmyfyjy3#IiQ4DtdzUIR7V~f+O2Hz*Mbng1XS%yUoy4B zpQJp%RWof+ykOFgXKukqNV!bD0M0N3=F&v>^ohLJE(r5SX_lATu({Xyl&SBf3K_h6_K4Q; zc%866%O-90=dP=zH6zbIHR?IpDQ4>ROm2sr2zI2%xWlV@t|PhV5sA#Z7oO-({g_6A z1vRP=&47{jdM>30h%!dQBIa?4rc-(QH);>8zL<};);S+B&@r@qKg2lYQFmg;AZVHG zax{gP>658895HN}llPYs8`YR+GxhglO{%=b zn|xk}HQHFunH~OCu4-v4cJvkddoOVm<<{7pSDyYE+OJre`V-3pa$s>i`($Do6or(w z=^OgS!v$e`N3affg!(hk@$hK7*v(Zi2avyNYC`?scgKga=A8&Cc+|<`%?tyeRHy_f z-02^o`oy3`VSsGE!@tq5Ws*A|$5%mgzA^Bd6-1vqIq7off@|>zuQJXL3a5!luId@u zPKA~4gA=`(Xy&K9i40KeM2GZU-bt_=))v0^Q)443Iv7gWr=wA`%gva}%3qA)1cyqY z6{~LR_aW%&V>)h>T{?xLHbg&^4c@O1ZQtBs(q`eXtA9Bcm6zGy`fhgtM>eLiwPmC* zv`Q`DgArxAK)7@5M0o_E-#%djJptA8yD%Z8;fldl_A;Q6c$BK3i=iE=iA$;TgBZRG z@;kg)jJG4sm{fM-+}Li#gsLKG=9-^+xBj6Oz8Y5+w|_zJ^mYPlri4M^!t#+Q#&?Mo z1%u!Eyohm`M*7Yei9bjFbzo9Jxq@uKeST!uK@Fm>ME<&d^ro0?l1$1tP0}NCoQf=A z_l3Do0XtiyI^Q=tm*7TUlm!{!pAM^5LVypL{2R#UU-zFv zbbr$(Mxu~K)t`NZ5dpVej4=Ni(_Z_EZfx+z2I#()gKIu_43&yQ$Gmq#jd<+?!(|U; z&SN$7eBh>b{kZWdjw+u3?ZX?59<=@X%O56H*m6YWf#ZS(m;7)|4>F0zvQu`5$;nyF z&OkSL`$CIqwHj@0YYO_|dqNu-1NFUM9w9j3$ng0qrnzl47rREJmY;w2Z`LaAlCd5y zF9_>aUZ>eLlcde`0$bmwNH41N9}e6ecb#q9Qep^moj$<#5t6R&5!?{m|L1AOJNSCEljB{s8( zAEMS_VfKh5{x({R`akxHxJT6?LCEk}(@hi(gVyiU)h5W_zrXX~jHKPgOX-^&Hw&$%^JuSJ zQz&|Ze*KCH`Z!ypn2oqwf@&gcjl3IdOF!PtAfKMpOn*%x()w1S0^UBHEgBH<@481! z^d0zTzzNWcud~#{{`VQ-&W?_b8kKqxiC*4?ZmdkZ`%ndSXC!fy=DP}hJTA27hkHU3 z%D32P2Mdm9KXVfepq_0}CSl28?wNEin)3EC8ntC8QMGgAvkNs@I>bNzftH! z_iq)rnL)>_|6SK8q|hO6vnx>eVlyF3oWzxp0hi)%IWT|t*^t8`r-{QX)Jw`%=vY1GPCzGT@fmt zdXvGBRGV$-VcYWp{PI@U5p+}eoru$8HUVyNQ!c*eOhTHM;#rx3Lk){)5x!sj+FhT@ z+_IVzm6(~%btl?C1GQ@1Xn{D4M$;?ypQt6EbqP*wJe^8}x_#{}2s}QoFw;NtI`zF1 z56F{Fbr&u~pe1pFa9KrJTv!jWI+Gp-oZ9w%_941BHFv*mhDdF{4VG!#Yjza zLyRHm_{1>4Ic-Q28~Cx;)FN6Zq(~7@Hi2dYJTI2w$@lH@Z?brePoGvN-_;>ozNAAB zo4 z_1jCf->GG9#?L+rCfS=3UckyN%d|RKygK=Q&ZuG5c8EXCj_MZ_RpG)|E%6k4D)^nr zhji}Ubt2HR_p5E3kBJY#g5byGDD9!Nv)EYfi*kT z!M9rN9EschPkabZObwL7z+v?+|HAJ6(3(7t0g-$h{D|t*3-9i^)halNzLt(dvAmjhNNq zPovKx=v%}jl3j!ta&0kqbbUKlZP|k=1TLYOfWr8>qGppjl7FHZ^K$>%-mnImu`g_D zZ0ANh?kD2tldp1Y4CsXqY1W<-rmrlh9g;k^BuC#}=fpjCi?oevq%O^W>Y#br8s ziXG$7vlBN9MMK#a;^D`TJzKDYxOZZ&a2#61<7$k~Kj^uokOKD;+ZuP4fxwnImAz5Z zx)E@sxM$!>i|UiXiDQ4TT$sQ*b{?XpDa8Dg-vt1K)TPV-FF`K7vT0&}T^^m0%>pm8aWw8LMr#CB@zx8;TFLlk>Y=-lC>GumUNrjY1g;agLwmC$@sc4Gj06#Nxhoq(6p|r1Ma#_Ty zp_wg`)%9^-*?kl#dp3elfxj3sr@r*oy&~dyDyf;_sO;JfU%)DRnbXPa8B;HDH`iYJ z*$TJHdnQZ0TE3G zQU9cLkJc=HLe&fSHhZ+o@f61+&`fwwM`G-S1!2q1Ae>M0_YSLW))uP4k%>iTvz8>I&vR~n!6GZ1FXrXAZ#u{{1n zU-gaEs`keohqoXd%;V8{x;JhUBiU=f>^b1SO2plV1(&C*T5ecn+$d)V1Vm=pa=SK( z2#sm97x*r4Crqrx3Rc~*&9T#eUd+k|?n@ncq>N{TFdi)43#qo*XkV7&QfA5TIORGs z(AgR76WJd5KC6JQktWvl2DeC~y)|u_LKIQ{+PqyxIqVFNIE=F#cM%VU>}nm<{1SV; zHa5?!etCzM>vr!cGkAj#%5bD``F+v#r7H6qXKgv$!<>seNpuW0y35hWt=j?-v^P(- zf(t)cH#S&Ux6Wta{!T+SKTN5XIE$~T=)s@GvjH;5i&bAM+$i6N$R&p%?YTKi4M zUpdQi%g?7~Et&6+!@D?;&gSYTQwY-xb3>N#k!LC z30b`v(eqZbZ=?ut=`2qv>~PrimH}dp8y-tiWko@_FL``Y7TkGKr?753PLav4eqL)Y z`1TvfmJVt#e1ib&w>`rTPm^W?T+*~u1>b;2$$mi~@BOHiR1o-cm3Da=xG8M7o76QzdBdPz3eMuT@>V=sLy78^~qW6dpYhdB2^KC zWoGIs5mCN{9+WgJn1-9_Cz}Eh6GXmFNB%6?8zH8~_F^S$8`&WbQ1iDtjs1-3#B9i} zt_NgSAKAA-wm>feT)~(|&3!4S8FF+sVMf0akp*@E?)}E29Krr?mgWo;yK*S;-QuuV zSE)ZW=cPPbC0gDztajr5!^pum;xsR1T^0Mip4g@&UFJESC9UlQ{1b+X8uy2pU~zg` zazPBuG4riRPSJ2pOoy+`?jbXny1MjdhJk=-*oI)>SBc0(EZX^eY-=X<60SXsm;#J9 zAsN9A4KifQLr}}o7$AiCGgj$5MnHzNrN!`|=45m6glL;yV~RPG!a$S?&duaO2#?$S zSafU?%3=B0l^O`7$K|xX`Ri)8_6tejTxDF)pl0ReSS>1NfrH64;@qW*^D!9T*V$e_ zzJ*sWQNY}OC-Fg~+C$Xm8njC8@>wRcF$+yevCj+Lus_sB?Z|Ju9mdxGF~Q^*~yF3LddQg(3c^KtP;C0q-GW(`DJWW)!zgMx&Q z6LwTBfqqY-WX62xG|i}LFKs$>aZw2MeTVEm>k%kRWiUk|e z9)2Iq8yF+PNI9BAEkL0qD@z8u4atjmn1R)QQ0|YYMP20P<3p|@YiViSujWA=e5+fm zM*XN!6oX?edvN;OXU9#YDPKg)C@0dZL8lKa@eC$W_JF?!B(Oq5UM(-h*Z6y{J-bCW z-lOQK;@!OElyh=WINPcQ_vcMK1k_c@I?~wp3q)f0kcs?dE72u}v0a0D8kY*vM2R%g>oLX93Sno>~&iKzrz_`GchfcKz0kQT#u zSFydJ7e^K~XJ3fUVzKyVRK{9E>nm|#;X&#Lq^5#biY7ziWN9b4HMEzj=BTKsG2!Up z9Fd>_8AjU24~gwd%alvIZ`h+rjQRGfjROm(ul$O|8+nvx5hfJ2Pc&zrc;e~xZLV;} zWdH?uNc>H`J0mV0L~XsxC?zRe<$~5Tsh6x|oYAE?gS~UGgC-5MS*qwnn>Zzv?LN2g zii(OgMWkv6W1?8VtKI6jkLDe`9S($=J$kh9U8v@CSmGqOe~t-ov;)tCDyYW0S6M@U zg>2h78}@JgWP1LTaWZi-FGlnRH%I+BpS2)3nak8)kC zaKc1K`sPL>_6tc_yR^KmRYpZdvQ2QFot#8TelhG2vw+8@4`&;TKjK8ljsDWho6J1{ z%ZVqKnD6}+Cuuxo0=(~|(_|g&Zinl!EEhl8AF8t}pv7&&W$7SHp*}2hQ?CCbcE5?$ z`;dx^-NR(&Pud(^B477pg;aCGkzCRC;TMc;W}qTot+^9qr#q-%L^mEWM&-QYXYrJk zOCnSE{)B!=(uER?P`_&=Y&h2KY9rNr*!md%#V7p-DZrIlp$ipzg0=rp;zHU%wGtaP zt;`k&cKM1+WKaL~b_Nw3uO3zkn3>{5>#Hzn0lh}z0+OqXQ8%VTSo+mp4OIIl&Tb)A z9d|d}q*U}5IWG&h0p^~#MnPK_`)S00Ru=@}XMDhcUdR!pYK_O7-^7E^pAI|26)gF% zXrUkSmcq(iqQCwi`}$?MItFhedH?BL_q}}0Dbjeg;0et#+B)#>!z>>NUjPf=^9+Xj znb8OMue*r9CX^LxaWmh9;j&?Z3H(_*esjxDp1B|n9tA}$O zv9Pk^jGLh~qF!2v`lhEGv^4sn+$E-Mffmp!tSDuy<9*^O3pi-SA*#%2AsW~}Zz@(` znhF`E9rL<>C#Y|2&h=q}MIG(j(&U0>3T~i*K1wDQFFj;OZQ*K9JwY>S!Io4r6g_C$ z1~vk?;y)}3W#eEor=GXpSVP}kb>0wF&hyQZC@RuU&V5tnS7V*`8<{nUJIP${)|OHz z&B!+1VXrmLw>Q??^je&8+RE{~$g}(>v}a!}yPAh6ggZMsF&VU`phJ-iaeQZ#zoS|D zr5V*B<%1NgQvm&n7H8qYW-)FjhT-bJ)UkTJccFujW@Y#f@y*Za2f-wu&C6^1_OAL6 zYbjIQIWm;l(5S+Z6PUTlO9{02a%tiZ3p+D&&gb|3Icb}#gJgs+NZ0Q zi`T0M$L&os_DYT#QH=JmJo83p$gYAN;s>wYijnZ26)iU$F1xeIO&d4W^AKWk z&UV~6JbC5nem)PUjQqm+P*t+fB7BbQug7(`u0l% z6C1aKGVi})h^XrRPGB%h=#v_*n-p)fL%LVFoA((+xfYpq^4Qn{983Gl<<@|)>(i+V$j?94;m!U9oS=A6lc;~Njd{I{NJ0ESuK>aiPP?aP30O4SpTyKAF4vBot2S{yv@a>uA ze6bwMnGjCzhbr4wx_k69IY(aaWl?x5KyZ=WqxGN_KwYWbpeN@N2j%6GNxSEv&CHou zNXTof<@i#~Rt3;pT+>k9ulC8-B*_XtkE4HW27Y#k|5Hk0u7nDvANHm2 ziWg~LG$}lyPx&d^cA`XSwd_n`tt4rTV-{=Zo_+dE-~utC1s?~UYCF(}poo2b)kg_z z_NygBBJ{*e!^->hfa#n#BiD2COb^kWqOR`i(q4|@U=mMCUtspKfgAII5QH2wm`HuI zLgjOJHhu#Ri(B~hMTj4Gd*6YpBlRR&)IBqxvNN9WaW{?Kq{n4tW#ezW^M5tazxzO< zWdLRBBQ`q}wIi{Z%(AZ+d(v2)2t-%5lul;KysYz;?R`iU;##m`w{&!T7fUD_i;Ykl zblDja(bB@TX?XI?&ZQj(NVxbuUV*0z^?Zb6o+a56bJj7Lnn2IYje*1nEif>wGD!n(a$nIatR&8e1a6)?R0}1G57~DVscky|O-Wf&B_h^{28xdP^E2&%~pR z{M2U?ZgRHdg7f+31oxn!d(T7lHer3H%)*4kq-HHn*bv%n~TVz~8!L%Irs>B6D^ zB+ri|cU{U_UTxqMj~5x@6x%91I}x$@?Q>SOBtOHYp=-ugxd3CZyj`Hmd@jB=??;Z z+Z1OX``l{@NhU7D;xGY4J2$CKc7D#0#peFFu5;Oh#C$#Ld^6+D!s{r5Q{@)APq$US zWHONHXYbt@*0U9g?o`)iVq?Ittbex^8ae1j$e-hP+`UI52(rpEcl)Ov(M~qj(x zXRBt#(mw-;=n+qQW66jmonC73`fEfxLt~)8nk|H$I}I_~4=!oJ)7XO*>O}a{xA0ll z6)h??35Bt6jh6 z!c(*Gpv(D6l>-2*7{&u-h+5jIrcKiBn9@8yBYQ^(9Zm^$Ym`YgKX(FDTelQ7=uzK2( z=-HQ>^DC#G|NA*5?_ff%>b^@t*B(3UrA~E&Jm$6}oOMm%CsIbB~bN##2bY8(A;(NKM_xI3y7teAM_38xaMV!R zZrC*si|RqY0>aL|h^$1_<4BfrnN0Ph!c)4+RNo*P9-fG}_@~nM{nx^Izf6+D#H#rt z*6?IIyBEi?2s(p|nai%2dY|3Jtz&SAHkL|2;McolN1o$A z&TQUukOXB#)FYN?MxUeNEZY+!H~scqJ2fj#X9b^Ul*& zot5qHJ~v&2>ok}y@m$HjKUL4oR=xKqr=71JP{mL-;|ra?6J~8$2F8PUgu5qkej*?m zo>0GXh1 zwGE-Jfo=q545Gk+_ia5s#I-D_I(Nx0fQ^7)IYEh~)5prd$f$My7sis?uK%1rd~0)i z>?(%im;*HEnB{aWVU=h5@okZ7woqL&6cJx^u(0FtFdr4J#*x?mRVFW1c;Hd{6|ePK zWP79OBIXIqcTMH2xczdXkx;e~vDF*KTA)bHcY_=LPEu^uX&H6< zt%9$~>=^8{g)Kd~5v|SQ`Zd$%4)Svc(>E@ZsIA&>L_7^CMIzYEW=f2!GDEr{Pu=?t z$dQpc6XnvtM_o|oDaCh3+(Vr^6kCBm`1hwEO*|z|#S@C@Qh|57qShbv9CL*Vleq(d zUt3~u(^Zq-xUvJnHe0OS2>icIqXcKB$nT0!Uv#m7&hk<4*9|t8zAsY|c|Gznq`vcI zci}>HQkJ*j(84i8F{r$3@s=>|_1E}lemyusS7YHcJDf<-TFnmD^`5)PyaOYni!G>n z-?G_>7LmP5RBh6Hvd&1gwy2Ks;Fg_%-E2?+XGE7YioM|7Ru%G!UQ+4Th_`5%r*pPU z=vzDJb+T~9#h`g(B=gE4&TH{!7%+OgFJd-gAyy?iU)*NQy}(LBqqRg}`%aW#Hvv;FwBl_mNEfeNeZ?}v&+4FJG0iu_?&_1BG#T?QMddpzyn z4|i~%^%o!qY2e$~z``z+JW}+K&sqLGkD2ZjZO*vf(v|ZSO!drqf5EC_iPcGz$;vJc z@g2vBmavJ$9+Md>;{McM8WCPIKp)G_jdF&Ow;ufhmW^X?;0>Mf)C)WalQ`1D93ri7 z!5@zfg7X497ky84G4uRd=sirPmf`{&TZG<+t79-R96ovPb{y``VsNfz%WULycKl*m zongs~XXcb>t<2UA%YTAtI(y7j;ZyoU&CJzzxuyQ4=91)VRBf(!oZf&F84U3y%lGct zan)vhKc4IKoxMj8fgk+*R#M$J?M%jSct3lF>~Jgk_Nzij+&Se~J!`#vTatZjQ+zir zIw76`@n$?6t~$N(?&$g}fm6*K#~#<%#4PX`%4oz$O`|8=B*5ZHxxD@%H8_UWzFnm= zs(-t^-Y;6~dA><397eTzjh*%S>wb5J%h-48A-mAh{}M1U=B@sNvA5LO-&?V9I*kpb z=(2d&MlwOR|HT4aL+A!Av^QyfJmE0aWim=S$8zy!&3ya$6YQ5VgMi6q&rkT|4f^@aInk$*t8rq`r=5DehIz9!3!MC)1v~D&QJQ>9_6Zl zGnm=}F@~+#nShsOdz0apul{9MdGF4(Rh7f(_^XHNFBtN&3g#0Vd-b*+arUF_R-4X@ znW3KlsD_kNn|>0^>=8aRo6nDO07u zT0pK%{rjdpLFflc<;trf&pS=b%Y)%=6e(QLJcd88vH<=T5@$}^h~if0k?spPBpl2u zqC7lw%Chd{YnSi+I=b{L*PU1yeE4C-gK;=SY~Q-;4Yxmw+4zlAbwpjhf4X7+pxK)= zwr$r~+)4FGgIO|pLOn{g#-Db8#13yX4{iZB%irX&vgF2YE;cHQZiWMYC~+dwI^Z5% zv2AWQT;5_W{~S~}|MAKW=Q7Y{?7~Na#g`?Pyavfyha%zfI?Ls40N|r}6roz87n~U& zcAt6eEnFwW&mnKEK@mI*G^n*!#NkV1klLfN9j+oCf00seuC^7zL)Y{Q^!CD(PZBCH zn_!zeTS^&enQ`{ER<#*>?i;T2<>75aRvbexLc5AM*oIkJk&@DouuoGU87P{4cEQ0h(rBL1ugh<51Cp#nSkw#8B^ z0%-Qp#<$I@nja1+Wbm&a4(KwjG6rwBvT*D9_B?EZ?I$bLd^j>hq*SIG)D;R5m;cPo zK7YwDNcOKUFz!YH7(B(iO8HLBjfMew6>4&QhxtP{?pulo&bE4m7B||Cqk~W_0wddhN9(hg#op@sNFHCoz8z@UPT!bJnkdQ&nCU0`#bvc3yDn<-S=#nXmRpVboJw= zH-=_P^m38~7#HEQefGR4e<-_KV@o@0w z`OFSqQ-KDMh#K;hY`_YxT#c;shuMOyxT8`IOC>sa?pqJ+gXNfnKX0QSqCYHRfkXrP z+SnYIa`=1T0V~b8^@bz5sbs9lOYv61B!dZRG;+xHzEn;`#7v4%9K)GlwE5w}hFunm zc0v~vE0JbbhyD;Zb{Hw`Wo}jW2F0-;pvb!MJxY^obXskEx%|;3J-@Ggs8^2l9BwNWJzl1CJDx|)x+13X5ioxy+5SDeu(j3puTNTRA*I>zWEB2m-Oib&J#g8o0O%Ce$LKotzJdN%+nRzB$l z9TLc5BH!@TrG0fHJ7SgC)G?3Dy4XT3%7B9nkqkM}iX$979Aj~xUKvmNymh^K??7ai zPhPvF9L^Din2JM#-UOrK^Z+u}0$;bUXnb`;JV3kUmM1O`7>_D@DuD$5zzk$$7>|gN zW-&uXjOhF2Rj8OH*Z=hzm)DwWzJpN78Z6?ut(V_9Z(0IWtR7wnM#C!O3I&PlxqXTb ztuWg9)o&-*fU&D+>rF0R8(o5}Od)BKx6N9Iz6*{~pkWqKD<7&V*;vATc(O*Hy!sH$ zi>;NAe{5k)ucs%VdVRRd51Fp!Ce<>RRh$6G8ngpwjJukAW-O#j>$(J|m<$T)hKJM# z+#LApFcd2Hlue%ECmtJuxi|OY+#5o!h~~cX)HE4( zCIn^L+Z~(vg!47L^;}X!eDAA-bA50@9ucrbcBN#7Ru6Elu4Mi;JpV;tUt~F*2TA)9e>*Vdl zPh%^7WmsUs?T=C9JlHPj>y_yZKIBKA44YB~9dg|xa;-=q9;^pNl*K6Jycz+rCd^DW zOU7D@3*~3yIWjhqL3OPx6^p1bylMs7tVMmO1*s76<5Qdwoe^jcO3A=(j-C07q`f4KX9vqWz&I|v?n{~oTpYk*2gP~ zo35LS5inLBa)G@c{0TPP=|nnn1Ud7I>a#=&35k9;GaZ&Uy!oJri>d?$DmpE`v;)sF zrPmXfMBNUtaDhv*n*g6M7%WCtJ|5ukY?CMYB}T>AIvbvP^;7=A!G%%11{0Yf-ACb2 zldZo$LT2~2~15@%i%an|(oa9r|!!}oW_|E!URO7?PowWKKW zl=mo;ZpC`LwPkM5Ur3d$sBt3R4(pEiGfrnsAARAD%W69u^Hv$F3O$;Hs4&T+nQ!@P zAlkz^QV*@CMTR{(IvCr1x1lTa#sIJSX`2<31OxcUyl1K)UDP0LnHQ9xkPE7ax>k6< z<3&$v#_b^^k1k{xsQOGMSR&y=(Lh3YgBD$!9OK|1&AFVTidMym=B@ZeH7%4)!#KL4 zpIJ=)dn4Zekk_CLF37)3qW>S>zWNtIM*Y8JHaW`Q7nGa?$>`Vrqz?gyNZc40Ad*6X z|F5LrZS{XSY+qmBI)`;WJ3G6m4oh0Bk{Ibn@0SNwC@L+LFXMd;kR}sgU_flpiEeB2 zjbu_xB_TL8xVX6ZdwaY%;JbC7mFqJ3f2HhLIhVVrQ4^>^2%FUaIt?{CZpH)!iACZ- zRPYPrvHZ&7nCf6Ua{b-lJ5l#OvvXR;NM(8}e^IyqlP@zQJ5G zn&{QyC7)D-ah_v;m~9%=nDqB`Bn%G5l0-yD_s`C_l{g3#m6 zTw7r19)I^gpo}#|Iz#EadokiawAY?wz{_{!89A*d^#5nym=R>M4j)TpAN?he`tJo% z(1|tx3TFS`C!haJm<+ZwmmQEzIE<&1D^@LvX2;ZAC_6HPzr7juw;Lo zlNh~xG?XkS3=6ybqbtdoB^v}*eXO=+ZsBVfWXGf1807a&sd>T+!bTQrmFqb_Gasr| zUD8R7a8bkEk7u3_5RgY`qt3W^k4s4&THJ?8*5sy@qgzILAn$` zfyib=veQ6@rojKF2X42JLMw~38f>tL_}o}3*%+^1p=C@=lkZ7nm!_BDU_g2xi?eWW zW*G`9+UZ~`CpE@%Y<+M$5@zjR67loFx7Yte)?0?f6*S$VApwHBYjAgWcM0wi+-1dxYat)Q<$&yX0+ZWB zLJRPWpOp~E69|P&6-dU0H`b(7c z*Ivj3cpVNw$*OvIF+AahkY+Syw^g`dzJbp}cF};D45nwOe*1{L3LG3mdn}_OI z;oxNQE{aU#`MxxMtIz5;O_a~?A4|NsaB}Bz9z5f3kFD|;cTTs5s6at&g%PvupQs!n z4uS2A7Csm`pGgH%hRjjNRg@{a4i2W=Z}^HBvi;u*Fe8`lQ?cP3E21fx%-h# z)sk0V*GK1ap~`*o ze{>5QBH;ac>;fNFtlPVo&WSsKR?CT{Z+aOG9i7eg^t883C7ZYttWJMyjeYzsSdX`FxFqb^bSIf64Wk%TDsm+HUb#6-NU}v1HxA zLhS;2)`0~hFDp3Scl>u(LK>d~YeJE&)b#zqfqS0*2MYp0wg1MmW%=Clbd3U^{rHCE z>PFRYOfrLxi35z;QfIZaLZ}CWF0qGS8cVPU|5iXI^rlX+vo{>7Oh{jU{F3R?5NH_wgi zHnX4ke3<2+BlrF~-tg6gdEWh=7EWB6tI`@DyO14#Aj1{(V7jQF&r|5>8cpT@iPUqC z-^0!7gEn?DSFD|&9TWzS<>ZO<2kp%T*EuLP#cQ$of>YPL(&BE5pJH>hzC`(~yFCSY`JZmeK>4eK68JTxlj$Xt5&77FVtW=m`?)srqD)rf5`8GPNJ! zK|WvpG*dk7SDtKIz-q^xZ01!2ECXK6k0a7_cB1Z{Z(FzbFapQ!#$DYqv(|rq4u)}^ z3VKJtsvhKz&d0Vnf88=Ymfmt*@|bZ>Z!Gu!<7KXb%@BT0oT)C2);pg(Jdu&K zNbqY+^y;b7Y`dCCv-Itw%E@W>sfeY#4b2~v1+|~7p{1)!Wxw5M2Fccfv=h}7`sdGB zFemmEB~fE+@|$`p&O_nYboVyM`40;hW+eg1e!{C<26;!JI$(!mdLaxlxDsWenQ4M8 zn-ULBs6{)xm5!OKXv>1j8Ga;aLxWVm|EF&pr+-@T;s;W`(D9C3g?>l)1%u(afM3+{ zijd$xOUFByzF(C&B{8E{6T?dvpvX^8)m4m9iH!CKS6q~VN+y2-KibnM5;EPVrVv7-X^A90* zXo`z`1bLmNP=mi4)sK_#4ampc1HTCmHyp^bA#76JchFHQ?a{Lf=xU4Wp7IlYB`c!_ zSR4qaY42}_K2VGG;3uhTA^wQ;z;C>W!wa=zGbOY=u}2dV_pVOa1Z^%$ghFi*Ec+#f z+uZ<0m@=u{?GuXU5X_mf!#z)Ii9pyF*HHL0h85HkmHOoLHpmSZ%L=or=C&L(3K`3V zX>7T0yd?7TiuhDu0w6{!TXZzDFcg4(;aXi10bX1bQIDddPY?UKR}2_IyPDq8zJHJ` zrW)8B7vo^>{NAsQlpVAE989-(;I{KPHR6JCKt!-FQ|vpy><;!e6Ol|yAzCQqwBN2> zhG5d+Is42zo?{YGbQ27`VrfL`HDycWpE}7ecK4RD9cJEtQ?0~3)av*w7W&XTM^9Aj z%>f7#k}mnsA8+weG#PK-In7*4wwUIf>sM{>5zl0#{E$3&i-nB@tU}_%LT750BZb9AO zl>y-u;&RmBTM_(es`il-O}jlG**qiGYOX@UE=Jh%IJzSJ*h!nw>MH5WNLw;tH<)Q; zvpSa7;jy>ax0BN$qu*JyrK@tSzzA$!Mt`4?Yv|dRsZy{k!3e|!t6dO z$x~Ur%cO^;V8 zrP9#(8_ND1vCMHRx?;3D+G*!m+20hNq={BaI5QOxh z9X8O>GQP|M!euVWv4ou144lRj&0#ijwD7z??K;F=nbg(>0NyZ?%e8uP?Xz%efW#Aw z7e(%&jH7D+bXAhsKk{nj8F8@!EZgqJ#%Pk2F@|OIRleZ2IpOMjFb5gtUTYE?j)f^U#wE;F$8BS2-B>0=7??& zrEwJiHfU_z%GHzA7!6awhh0iO({7nTC96JynRpbexNqe6&_Fz!(63Az5L~Q4n{E?eD^9Itsit8i59);@PqFWJ|O2s(-UR(syCw%v^_TtU2tEFn0 zGF^(7jB=`Rc*7#<-}~i63qE^`N@PmY;g#+qb@P7yL|YGyig-1J%AVfzWdnaE&EPjR zvT+a!J+zz6=@5%;J5M)-qYa|+ z;@z>P%^yhHcBgugdjI16!JCLj#9{F!|I(bYH5Td!xBSyDEM(OKjebwxX}_EOmI1<( z>)KQvg~S66h=z4Jm8wxMU1k8oQqEtJ)|Hlqf3K2fX_gpnW@c_A^EyJ+yH^pWrbc93^|mJOM2wqas5y*7WKfw?Y)NZIhu2Zgq}bU*GbtvenzszT}=qbZ@dxN)l7de zpa_`!y)&fKj7k;~m223D)`}R`JA$?zd_0)N*G0O{pvjmhQt44CFK2LM4ATl{PX4$i zrA(ABkH**P(}-9+^o!0`&;#eYvf-G51i{sGfoe0|j=09VpMQp)bhR}C^gI!=#d=y; zFGHpTwuu%%p(kFBrM$Jm?EJ_vIVUD}IYd~oEfSsd_TzgcL>o$isFrmh^jEzN!HhOv zBKdUopEl^vjuJT#Is8zTYwnO)y4YKXK@j}X3jtPvbgZ=>+-l~^qvw1{kNK{a`rQFT zCMmInI-33UPQ`vFLqR&+Ds6qjlF>v`XaC~2u5sXO;7xqV6GbC!1oaCRf&%Ms*h7}B zvZw4886C$&GwcI#1borPkvXdlAH~kk4JPs$6(ezkQWxZw+0OGZcc||64yzb55f&W1 zkD0SA?EC8c_tKUe5T-*>)U`hOZ~477@0HBP?a5&=S4%L;a%PG2$LiOeOlO2pI4Ro) zNmu@h{pJFjr5OF$9y3?C%^67`>{^!_Wl7#_^W`H8(TCqtN3-IRy|HD&oag7uB0(r6 zU%3eTc?`8_F&s_L2-dstLV}!}ZwH0@=_4u!BSMEk< zzA4(U==j7k6oM<3-a|~a3T4ELYYrTKPwwDaEOI{$P2=DQP_!HhVn;CfFlo>w(@bj< z^^8E`Z}qT47@1R>a8S4e-7hIUHH@qH%W12y$VgI!v}W$CwDGtBWG#V8fifa69lUhT z6nc00dL2Uw)_s4)5%~_{uQ{tF-$PE{#+a&pE;5DS<=HaQzdk~Gi7~g+*x9xtRaULo z3}w;6L6VtaR3x%AK3BUB!@W_2El~k3AN?l3?rG(cy!S^9JYv%o@L~Mw zv$JmL#WiZhQAhD=)S+fp)mKv}RD?v9;E0XjB409Q2WIdkbn{0`b-^W$pT5a;qVSaib3%}F~h|5x5|zH`tef-t=mOA z;PyW5xHHedlMvF0w|Yp*YOfog^`RKQR#qJ))0q+2v%EagJxAe5Dc?}(eQXNzWUS=8 z*|yq$FMQn>moXz@%qtA$smu{z-&YWAb^{#u+Snw7n@ij%RRrbeTeu8K7*})5Rt!|@9Nm;HIQTt|Cua2DE{}Y|tr9}=eVsxdl%bpN=(?ND zPJpg2&`cA0{j;w*wYXe@oeUCCwHO`oobXoY_A-7HTsG*&eXhUjX~IC2Y8@+L?`+Tr zaPD{=QLDGc zks`R0f^zH^I*^kq-zYI^t2qd~cy-M`nm78o*3V9nrK!sKCr3VA4JvJ=MS1%_$^07w zrjxlMJMreeu`+_Er>AIsZ|Px;s>}-<5TaIZ6V2wqFD^Av6Q>Gimm-5;C8h zHZ5}^uJ6+0u4a7a9sZ88y%^II>7nDhyI+Z37X@6V@c1agX_P45*M0Df3xU)$4ca`D zs&b>dG4Q?IuOD~ct=&>G)qiigyO1DbJXtAMLO;QKZrfW(-1gv~dZG1%1s4qcu7 zS2i;{g03p3JH1COOesaejTVl!t#dr*?B<4bpc7B~hib`bk4*D8Gm$@h6KexHV$B%Gg?iK`%7i;)|!|724HeEJG!BG#2T~w$8Z$ zFm;{oYph~el8tUM>P32Ri>Cdg?Y%MFaz-pm6lN%6TY+bk3NY*>ZfZ^?Y>T%^QmBtq z45Fs+`}gwz9u}7R-gyoIOdF2ww=+gg+m>#+lp6X&U8oH9X^y)*?=Avh(U^!o?cC75 zePC49SC2kdPL}#^K?QTTJy}qJ9Ho<~49;$9sWeTUgP=-<)z?+S3)8oIx>h%afz@{P zA%kix;)hX_i8QIyq{F^VJng|)3Notb>|*J@8q={vsEO65A%@}K;(7F1TG|PM?t-jE zZlosfuk4k&v2Su%H=({+ z(+Rng2`4u9p=b<84lIPSs8lFG0_O7#qE#MoEK>H_1_CiY_oBa?nXwnfBW7`H;wb(E z4kqCirqAyl&70W@cw~LHTTv#pv0oJ}ymXKMy)7QXiQzGnm~Aq^s9bK0%UU=h+As+AVO)8O7nN|@`g*xzG?D$lwU27Dht*%A?zM5Lws>pNWLbQ>ANX}$A-qE4fI z*5UJt^xeY)IK?9^Lek;KbLl1I)|*$VG~3Lfwij1=O&a~sv2BP>8CO4997@V(XA;jG zLj9hRy1NoxY7T6!%APtkGPq)nt<|D2ZuRp1vbTZD^VtX&SdODxdslSX!#|ySv&Kc?Yy%#{C2K$==;B!kN&TIBpY_93nSX{pG6PjeofCo+< z>Lfl6UXszBb$ycsGX{nX46^4rOe7(f-mP)dqPDW}r6}~FN?<>F!s;SFPhh^dnD;a_ zPn)lR#$E=FpW$+Alv@2Uy5}p-8Ztq?UoDo)*-{$2`Blk|dcXHa8brx7J>0Zf^7{IE z|67Vwf328$1_1E}@8N*6)W0Xlj(vzxCm5Vqzy{6$>BnqKXty5n_WNb=vu^s~K{9)p z`5#>F&`sor5BUlIPP60uIPu8c<2F6vl)Tdq*`v%~EAN?{A1`Plub`*meO&D2bgd|& zgRRQ0cl@)Q!UN^VY|6gVrFD8tWTF?`tipo?cDo!=s}Ry{h^#WreS_$(Or3=Ub=Tj< zeD9yyB9@q|ohYWqHv;=sHBMd1MN-n|B))i1s4CK0D)CTNX7{mrijr7+Fq!O~-I+%4 zNCd~@YdKSGx$imgY1h;XX7MuQs~>O%8R&HSDp2(wc#XTpKu6kUVkfO<#>zQcaV~V0 z`h0;A6iU&MvrAjJCHvwYGLxr>s>nbXt{;lH-HsnUx7g;wWZbvtgz1>$k$4`=5ZS>- z&-1;DE)dseJpdZB=H^)jGO!3~v$%^w%bYC&yilXyzX*-yzkfAUuq*MAS*fu*0$h_y z{MmZS7D>cC9*7)@Vy+#LsXc}b(3jl55CxB^N8D{D|HLCQI5_vi_w(n^kt17FAe@B| z=lyLTxD+~tZAW=Q{=cDV7QT9sZr7|I9KJX#i~^up=vFpur(dqtndON%7_bG(zv^VD z6DchN4IQuVb?JNIsT`*A^Ic!iB+^fTi)ou5hp6VbH}UhkWL`0b{p$=um?P4L?9tbo zb{L%6aLQyIWbWs_y=;b@<>EVcTLrmHzF!jxelV^-XYa0`z)V|AL=_Z%DJ|a)XLTk0 zQ;W$P_*viO8sE=ITjTZaG^9&L$!OB}*w5xdHHbuO{-#xSPt-0a>X!m!7<9RPtc;9bTyx2!}WWx?rc!=kg44xwTNy6K`h+^=B~ zYOh8lj3i9YWC`)$#FT6BcAGdAoE9J`C^(wIH9>tG$&`u_Z3-PvA{KJNuR@vPX=?}bMsJ)%949b;o-Q4^R}oyLM(Y?*(ON=!-Ki{tv53#`cJZub;zzQH7o;z@F71c@?I`kH*i%F)_$; z$@E>*)6gYWdZ_aSNCq6@sDq)p?fS^S0FDupeZ1(dHrd>?#e?3vbihqww>G=@(=SQtE zl`$VnH^Yb%`rLs*K!aGyD3?LsYZi|#^YdUd4c*<{-DKyxr!Wg^*3ku2E3EZs%? zT}o82u-1i?c>1F9=H(;K@x1ZnW9qT^ID6C&RXg&d(;I}tr2ZQN9*h1PEiEnB`6@|S zNEUuou3fvmy={!K6F+G`l@A4G#OfXy89B6ge|_o?bx&c`kNo`d5&`&PzMb_W`LOTX zayFo!^E%}K=7`E|XB#tB3y1l;qYU@0K64llQyc`;r$;Pth1LXvGs444Tcmgp+#`yoW0_xl??(di%YNI#ia zkV{yd?81Xh{B=rf&c^+X#Ut-3WINJ=cryxV1v9{h@ZI7`jy#L$N?@Au#*l)iugR7z zTT~kD3@nL4l=0k5`pxVGl2P3o8#!Q>Z0G$^+~GtT6O5A$Y?&~+rmNn_w1v?$pSes0 zheR#>4bpBQTy<6_-FE`}TwTj(-oKggT(gl$<`| zXD>xDzrRLbyPm>ga`9ek~M!wY7((73}^* zfpz!nzKtS1#HC+d3XVT>hi%sephv{>uQ9E zn329YEjffq)2a&T(9m9`A}9Y8gwAt_$L+`$8@SW70JS3UL&$gi40MK9RL;s`>94q5 zV*4_%!}2oRGy#nsgD!*>WFq(aP5~3}?G;H@PHqkNlCGlZGcy0>r<$6Y%T?!zzZLZK zvvhcYy_=&+zlK>!oBl=xYs<9)9m=-hoTiV&)#|SG*X5=Vuwv`dT9ubexIyTc(Y6T_ z5)&7GqeqLU>n6*Klm}ZZc9~O?(BGAuwO$EU_V@*=AI)xVmAj2p`L)DeU~NMqQ|enf zlp^3}9z7W0g>JHi?_}9ava7lElJnPSHA=9ukI*~GvdE+B zuG3{i{KY%HpWRYvMDp!t$kzjWW{-xfY08Y3)8j-+*;`FeA)NqDR)J^%>otNqX;MmJ zBYuk2!lbA`)^>k4_l8eE+(_|etpxA55ZzBIudh>$NcAjzbSqe))^zq?xsYqJCn1%EYJD3iYA(Gq>x0p={HjU3JAoSM(qP4O-Pb_Q;CJOPBm1|P6R z0aqJdaq4Jb*xyA zo9|isDBF%u`TSI_1WxfBpvtE$dhG~xmVx=|iD>h78A+p@?aGHFJf0sBH;Unr3kRpQ zv$tCxj+cwl$fDMCD^%XUl@K~R-D3Nso)-%f;=t_l#TW~-Lu1GlJYr(eA~%IZS5+D` zmhB9Sb)3I^jW$)jahD=y1{{XVFQ>?yoi1G=e3(LRZl1NS);*$Ex|PlY8}`iAUP-)g zlHlu=HmQL!cvsVex4Ga>8rPo-HPXO8(_3<6c}a)g(47DLAbA-hWs+o^xw?}jG-rU1 zBEW=ypoW>`KFHk1asdV5;l4Y@g=_P%mk%vexqu?jew&O?V!=5f@YhWC=C8putMIfw z@t&vQ{&9c^-&0i6$Z$!E!Pu=jA~H4C2?GHNuq4WC-ZTgqeg8X8|Q^}9yG1aVnQ%YL4>Uto!QwuMGaZ&rG-U|{+2 zEB?%b$XoR8y%dL=EJ0=Ebrl|kdiL^j{ac7JVuw-|oG2V;$|r%6R}*s&mU|0Ajo(p7 z0KT0Y*7%6m>iJ9W%X!O8xpJ*T0Q$<9fBBY+b#)6KA%M?iW>E4&_UyMYUj0k2EupW<-Tp-NOc)Iu)c&4Pwrc_IS$hu>}FCs1T_!2rL7sr1`m52 zGhd3swjh3>2+;~K`lK&S9jYbb9L=u997qlcQhQbVv>PwHM)b=cx!#HtQDvF4X6mmI zOr=sYkrk3JdHshiu@I3hG=hF^VETMLdNo1j#-k zs5uk#z8JT{FUVOIS1TvqArOSf0zU2GGtONOqK%z}w%~o9V3=ffuJ;#~WZ$qkzNydO zN* z_8-(iYrTl8vY#aR**FpTW0%0%8;@Oa<@Yv|S~kmp4p3l390HSb-5m)r=$wb@r)H_G zUtx_vt&*4n+8nkUnA%7`#(kX{~`g`Ftxdx;{6p_xs@(K zjlV4j+Rzs>!{b#BcXwt(6hh{)_GG0gZTS-S_rk!2cn5&M!>ww*E2n@{Q$yaGxz zDrrBI2nsDuHew}E=qj*UM%={;O@tLT_VbJ+933khs70>Vug1b1H0D9eId#8?fn0-d$9upYNAw&3V>v9XB`&l?p4L+^ti=hDgFMyKx z6%dQdACAo-C4!>Nm0#XC%_86-_VF|cLhnO_RMNpcmPkEPxg-o#_QC?02(6v?L!9q&02vHxYq%SnHRpXV<^E=k0jmFE^cZ1-#E`G z{Ut@?P6YpOFH^2bOOL1S_1vi<0?|&j45nCJ$Lgw$K@p$kUR2OF|-1YskF@+)C!7s6ckyuctA)v=J3O|qeJB9pAn{Aq9wgLYJhSGhHd~_8#&`SYm%-$v#y`*(cL56#-Z0KRlm$I!iI7 zfDLP{l-8sescZUs#qYq&kxAdnVe(t}i~q#H3WM+&*2V#Z>cal&;Ou*1>Q{O~Ho`-- z5VzUysK2QemRwcyJZlYwgnEa4@P4`Nh}XI+r8VFIU1-(Wr$k`q{8ysaG$FUNNQ_(I zx@xU!hA4IKmZCXcZ#=<)24e!B!^&?qL4>s4S#JIjfci0B%BLjKwAXz{Gu| z?0$-_x};u0D}niW`=@#p!tZatj2t&UWeYMz;*n=I0ri-;#vyup9usahn;S_<2r6Ih z5DD0=h`RZ{yf$&F_ZZ5|@~Sa1!ofFU)!UV?6q5LhTaU2AJ1-oTC~VJ(v2Ytk7g#B8 znAqDG@WyJ^0uXyQTRlv+#y`hp#LckiQHHE=7f3=f>Fp0(A|VlFA9uMm5DJ{3fts;> z!)hoI;VRB$&sO<<#tD3}RE(;355~66FveSL8dv6r$*nn3``~2{^DMGJnRvJ}ar8p# zBafBR!|Rl@BLv6n%aTMmD(QtvUOM0X(T=(cpys|bCt_uucmZV9@03MMBf3~A{00C1DqfgZH0H{Lx;Ol zJ}m zLZo@eHX$5FjnxXRpw^G=yfn(?23WE{Tg*gjoSVR}T=75K?q`{&f&1~j-)Z&$R-rKO zY-|uc2OiASpo3cV*Bu)sL4&e9@+Hv&_ItbNeJd+Y&v~fq0+CKBI*i*B(=8!3exOsb z|0ot}9TkKO<(enyRJX?vt)vo<}d~7o*Q`A*Ho$Paw}YHyys$0*voiAUQrs(^m#~)GquUm=qQvW**``- zgELpB^yr`nAVs3j(YBcpu!9ix(aZ+1RrJZ;1=Hv@6F-I1O+deux0!Twbc|MqE2@Eo zVhw)4teUuS;!6p{8AB^u4=ClplR0&{_xtCB_`mmAzhEkI-3WQdKrBnV*VMk&5y9C+ zh!11=yx$+17y71MDGNE6ZRqw^$O9%(UYUf-<1dxTN2Z$OQzGUsK4h#o(owja$W#gV-v4-lCahF86l{lP z@2s2TWDBUbIpWQ0_N}4dZEC7ZI};pXPF^mUI3l4RQS7`iy&&H3tcntUx#u9deK&AF z!Ea=O@guJp2U4Ja)Cf-V?p(QsjtCyQk~dX;_7_g_y^2=4x)dXWg@ql^_yqUT^)NoD z%x{ZZygiQ_vwv`qvnUhh;V~Z@ByNDJPbR~8`ZMB;xn(raWC{s!l@ktrI7+a1z5DKb~%_rInK)$!|6D7S$Xm z86N#|BQ&8{!!28kut;I73Bx=nNj7YP{c;w6D0|CWV#jMLWI**5daunN@=pa%NzV3< z@3sPG&_inG&ymSd7ar`)-$;-{@;W2yCmCyW#pY|+TPLiGV6!TPct6lq7spEYSDQUjR;9!CS;Sek+n<|>(p3qM zr|KmzgB9YqRG$(`8Gr%&QN!In1{fz&iX(U5Dfw(We%}9WYqHnVaEqfY@?BK0%apfL zXioln;g&49@<%y6Dt}S1kwhYtX+C6j7iPu+B8koay7If*U*BL1KQ8^jyQk;kd)b2f z9nY)!wV$WjE`)Y@3VA2ZEK9o(b`W#tgzXa}a(=&Qq{#Zc?oY!@Rf|c5 zax??qTptlrTccSz$fcjpdVf}uVQr74bCe~TT?cIpOuZ9o+{*c_&d?_scZcW;J|_2U z5uoKnnQph7x{qG|1;b*{M{awO3+8PbZr~nnu!SL!;{;-){;+CtPY?0CNAlMn5@VSf z`f$p&O&CF8L(h7PBCH(?+QD@i{?QZ2;0}?Wb7;OD+PY77i;y^ zV_Y}$iaaq#TZ=+M1r}rnsmsQObWPHw1OfcR^A-KplHFDDaGMo^j zAKv@ioi?<@Em))@azv>tb2$k^Cse5zEy#ZYMBP>36u&=XUTh`w&{7)$~a48If z{mWsx%HAfx&Z-$|pM@UEyVjybre7f*n>j){mqRr8JbV#XDlvS(cq`d!o8t~|)wce?%z=OxKUTq@9f7OdF^~T2ifC3iUxdh2x;{8jDLPtg5*RckO0l?7anQauV-xWJ{xM{ur3B!+8E({C5T!(pzD5s~wC z>n!~%^jrExk)px?A}B$>gTt<@N2mUCT@!|b4epSRS`kjlS8lNB10F-jEgTYKz5iT^ z{I5my|Nr;(CkqNPWJkE}E98#cvXYX+st4tEKx5EH}mu>Qx``i%t^4;Jv{)}sYD5(Rkv_rO>xGz99Uc0v%J zkN1BcN}}oi_f8J6MAz_#!Ub8E{6Rl_7gx3$=)XL5A_D$gE9J6lhlXTzdsRm`h8%M z_O~HH`^NulCg-lS#t#uf<0I+Jy&9U}Q;!_yyxJk`qrMwK?f_2&g8#Rt2bMu@65&^6 z(vdlHo!uJ~Fx_xNK77%V8!^tD)=fU~*m4&b;1?^}r;=u@cdh{zjk(CMu@7n(oti!_ zy3av>EMNZ3EGqFxc<>Zg?B1&4OBiE%=b7ziqvc;=Ab@+nQ)=CS65$4*awW-1uBt(T zM;FXqJvclZV1!d0`&La4KbFBYz_Fl*4t^0G`$bNkKJX7&M50zr{10|tX(cQ+tlR10 zJj64v*B^HBpDd?&nClKBk&E*wf4V9)mk13dS6k4+4@}7UR%|> zh}=r^5cn*XrPYx}C;TU-Fa2gX_@}vof@0A|3Sa+;X&x(T4p@F6x3~&ygwNf+aCzGq z7Z>K%3HNmPP8)fCQgxO7ag$jmb|p=Ke;X`jM4!m=D7_@;&dmXRfje^oOU!ucBEMyDBi`H=TJ?RIO@B6r^UhANe)~o?edm z|B2Zhd}d+@B_=2Jgu&1J;V>~3X?^>FNXH2GO=`zj^W{cal#ui8!d zh2Ry8Ve=@_2+&9mRMHapxj;o_#P9Vt9NSk7pqK%3t(gHd0R?36NiqYn!-FZ{(9j9> zmUtt}GPH15mc+mHNbZp13#99Ew!b%Lc`M^_K7eul3Y@S2wD(%+*$H*q)!FWT(2TIqnJ zM7v7^Ye6tAF_-dx<>Wb#Pr(Ki!jEfN#E}M@^U=o`K914#y0OTV5EudZEK55uZTz#Y1w2B4nE$A|9o+dg8Z4aKpB!$Hf84K8JbD#HjI1jNpCtt1c*&rwso1&qp@X(1B?Mx#ZB2k1 zpCt9S2LevMSPHxC$ocU7dRLE$(w+EqTg>}7qWP=)$j`SZOY=KKQebcseoBwaSL8dS zO@(26Mth(xQp)OR9W0tyk~_b}@nwM`>E5 zr?!jqrQ%Y$#WFkvph0el3!l4!mCgVUD!k0$%YaY#yfxEMN3S0fOYOLG8lfU)d3kVk5g=@S_#GZ zG6gUyrzJ2{c8F_rEajRwlpQ29)hxdZQ5XomF5JQ7CFFOOqjtTd1S`qa18fdp7`Z8e zI=BF_wYn0XJut^{4A0;dd#g!m9=FoeGz+W_hULuKZlzQUnBI)Ea$DqlYeBNMf*C2S zE)z3$bc64d7^92~-uOFw+NnYHq5$9>x|=5KOg|&lX+t*?DqOY6vjH_x7Q8Z^q&mT2 zVzlAj#1{SH5+kwm-^T<)wB8E3Uu&qV6Z4g1C;wDh+92-^cv!kG#7Q8==t{-8e4mhr zQ+(+5*Kf#k*VKDykcht?rAlzXJMm#rokr|gauZ)L^`;&E<>p-4HhFj1nGsys^d@D| zrN3W$MXCXN=^S54|L?W-H}2^?1mgJ$n;FO+ul{RG*FR0q)oalj{~!G~JQC;K|H0n{ zqAcxnB^133HKBrBK=!$EL+m-o&~gfW{MXQGwW5ipuq)YrOBT%DUX}6c&SpOo8naIU z9G#~P>ToA=Jf}Rg`MR(%|3B3h6d~68-}Mdru%mJ2IrSy(EeY?<MuYTV)epMQ59jZicIfDZ?ky_o!N{lhK$Vy3l4m0a2st1^`v z$l5i4kZwedNddPzArq|NN<8 z>|yPIEo9)snmb@Z;Niz=6X5*xVa1^%s&<@rB3)|e>yxD*fFig?!;g;dksU1{%`F>nh$qd*QUj^<& zRV>OYD)wLRjR5AeYM6pT$AxeW=R9#h z?e9Y5p<*yt`$jwC{J)A8eh!#)cQ~VKR4fI=9*K=;*eUV#f$laCr5^YU2Vwz+xrGyw zh$dvv2K*>*2I-)8#E7`5azr%Q#&4OkD6a9Y<+=@!Lkzs6ty|c(!!fzaEe$0Zx!+DL zFR3Bu4Xe>4l0%y76RN2U#RldP^Q<{JnRNZ_`g{+Ma4n~rP+Q4oN9YD6{_VlQl9Y&? z{i@&Om{*n)oudA%WrK~0`4@eTL8mS(I9WBaHbQ7GQFS$LIF-d@vcu1>&Ta+kUo45w z!`cDd1UQ3Y4*&j^^I$vuc!$IgTr;(O-WiHpmZZ*E`z7DS> z>q5E_=OFF+L_Y`W#w6a_es47LFkqK3Uyx%l87>C4)&}@hMu$Kg9Ri(*e09+H$nA** zzOE}<7@w)Lv0Sx}<0x%}=A`EYF*s|I2p^nedGPIf3!vS_-~U*Y@VUC=n(F-xyNFmB zT)Qvuda(o#ccd+c55}&r(LC=F5F_{mU%z9zyG7jtQn2B8vU|CaSr_+O zv}?_)C!HQ6Ya!OP!fqnDgqnCfu1#l4l)wB7L~uJ@+_I0tbcs_aA@An($@m= z`ht}~MaGCA!K0i{lk+1;+VGw8xbSiE?z+RM_bYl8+pbsy6EfFb3*wuUX-mL7fd2O3 z^f<17eJM!J}h245Y_|#G`D4OgX!^c#L}783h z|E>J5u7F8WQ2QYCTk$8T$6=CtrTXG4oB+jjF%WgrlU`a{dd`Ei;{!H7l@_;D4jEpI z?zi_+xlYhmr}AJXKF%m_&xLTFc(hZMKSj1TQmMqp$Hr@*7o^xzD0e_@34bCPE-vX5 z^)(=g0D({@~JyMy~p-38G*LGDZ%MEPmGnIkA|+@^52$dWB0wQ$Y(sV;OV`Q z+n*hGoxh?1eT+IuyRsHxd{(Hovb-4kRV&*A?pjnFhj7nOww(W0>4>~iviM&0VVi)@ z1}#}ZvKfwfHc|8()0$DM5+WiLBi;^Sgk8$7(`0LBeH)EY9|%wg0<^wGflJrXu*X zi=OFq{t;e|AP5#+4}us*T%rz?PeN0L`9a{#C#YM8L}N81&EB2L zdL{?i?K)NBMa<4LCK9cU%(dZ}@iKY1x7N~GhR=*ZNI{-^GbkAq=|b))zp&tKA_GH% zi+kyTplK_`qm+8{9rBh5_5msD`#^d)@sGl|$aJgl#abi2LGICff>Ay6PS+Uz$Z+%& z(vzW?%ZsazKoO7s>I|4UD5&gSQ*tWcy|viPL7&Jxr)@!)Rx|)ws@Tx!pHGEvy^d2xS zZNZ{w#n^n{v-*5W&0e|m*+j4v%EaNqKWG<{_dw(=VZ57fMuQ|z+w1l>Vb@Rd(*a*J z%F}sA^%zx_R(Dpyg)VeM#!xhfR}$Zw;xB%v(wn+0`u07BdO-ox-x!H}}*v+GVoRN}D(h(4hHp8&%JJo@+k^Ckqt<$HKj5ClOG1VK1f zDDWmL`1tNiaP6zpk(B5|g3pVO2Hk^yFWm_*zte^UciBZu;(Lm!K?#>&?WWuVo_VZz z%C(vb$Ke89fBp5?xN#%C|NeXT&716!lAfOK`i`?}3eSi)Z{8fAefAk1ee_XGnKH#) zb%p)O_k${$?)72C((f?u=Pj`4bi31fp-cO^B;frd!jrLU-2zOVzZ9VWP_I!3oPB0{ zDu)g;uoho@H4D3)WSrBlA3CJ^@zrNvU_+salY94pv0^HUGP~o9=4qJo)qmhSxj)+0 zqEV3%!u&6@kaFr-=+L-6>^(nY(&TIy4O*e$*6}!VR1!jSh9YAa^p_qq&;Dz~2OzSViXaGrAPBE1QF$#-{5OEZEyk6M61h;OuGu1kM?q2?140wDtzWeXXaDpYj>3uV0 zVI9q@sjy3T+0|6aCB_*Rm&H{Ba5-{e~;t*o>!uK&$<{kY9Ste?>pSn ztqw{-!4H`5+r%s(*v0mj+ zbfnrjxZ>KoF>}E$a8i;m@ZpgdIPDpHKUc}X{zPc6mi zv+u&=JI=vnd0)f6>P}4m+uv~7ORu3vY8d11zXnZ*t-`s>AHn5!et`R?{(>87&%_l^ z%)*!BobZQs-zHSoCpfkrugKm8OYDiL&5qD7`Q+2)mOXjDSYlAAMvUN3vv?T?hA`{?LuK`z;%HU1VIo4K@g4y zYy^vo5D0})5=g{|@h@Y|hFK^|s*eY+KNA}_ZbgAV4_|({7`tb@hCv_H#EPG$VfL+; zU}{bxf;rRiQPx^${IF*w@tfRKgri5?R0Kf~1VIqWN5#0Q@LC}X3bt*AlhzPv9@4u; z0tz<$0%SBnofHG>fB6}k^8%>Tsx9i2?na)Gfrhn{v17v;I7xL8*tr@-o=mi;p91H1 zx=vK6&$w{(h!__HK@bE%C?6Fi#u=5DCbX@+Zpf;x0~WiVDA05bDrsO|*n?jS$qR#6 z6wyuNkUmx^t{rj1elHd3GcE{%AP9mW2-N|bgmzgiZAVy$^PWSRJmR`lM@aBHB-rDk z+f76JRwP^@Li|XG7#9RV5ClOGgkyw=aX}CSK@bF?%E4|Os;VA$+kuGBcqJn~1VIpl^1=FvA9g(6 z^eNXXIXT&VqkWvcVqBA>w8z;7%iEZ1Om=kki+sT&~_x|ob-&$v{v$}il?&|99 z+VxaDJ6us-0v-kj1_%fUUP@9_83+jE4-gP=Hx$HI&6*~%<<}puld^;`Q1ukv@mB%N zTu4p`2&gU=_RSFds|;-~sp$j+gyQ_y1-xlS=ne$*StKPYr0TABmJRBUCxsibbzR9Z z_QOWcX06%w>z9eS)_iW$IJMfbcl=p#v0_pHOW*eAqk@8?Wzp2-QG0Q5v0fUq7<&K4 zJhacEp91-aA~8xJ;fb<`&GX5OgV(U*0^}fmv0UE-dxEjmiX|`ki z?;~4f?N7DP^Kw`p1A7X@uMuE9-xU0Y%*Ux4_Ej5epQX1ooj+<>CpwS_$piS}i71KN zpb3lUk?mf6;q-S0?)dRr21|_1G*h1{YIFBk+TM$W2fdn$razV|yOT%*K88}cHYYxq zyPH`rQw0q5Ho2F>S`w8#QiVI8MLr1=85c$d58rilE>~}9cF7qk{kmylMLRbR=iku? ziz)Wcb*IR>spK)P2B5m*gH59ZzV}e0viqI!CQDJ&4X%aRm_3BX43(y%g3BK5&r8NA zuje!IQ^z9)F;g&owD@UqaslchJR%Ws3F$WpMOfzpl3El{FEO@K$v&0ahI;Y|spO#5 z#K*GJ1tia_q8C2c69xT>K1XH!Y$0ZA+p^%_EaPex*x6&?G0e)fqGCMvP-* zqeZpN$7k)UN5$jU*|W1m<`xb0Gw*r1PSARyp6{!Qrw}+{-u8VkDNGO+F}xUikh(GP zn-PnBBME6}W0EnO+>L)*o-=nCdaVO^m}7iO`jQnuIhpQzX_H@nCh)QJJaT;aBSo`A zVyOP85MiRH9$AA6*VFK@0fwfcy;ZpH`xqLbg78W;7w?p^0nOxtCG`gsbxZqgtuXD1 zNPZNx7DY+hA`wDT7OGB9h#OkxJ{9hrV_%z9i31u^2?g0L2lx$5PPy|*LkD*3Iq?ue z2c8ep>Md~pK+Kz)4Riff@mKwn!jJ(g>4(R^#lLO~HIy-KB|7})p&ff)WE;Lt9i8tV z$vPdl0M6_oS5Yj2HMswDfN<#bRE&Lt%%X2R5^r$a+k#q2yhkKj4SDDGjpx6;-on>n z-_#5;^oEt_S;^{|q5g3NC;okzG}y|XYcle$fIDx3+^%O&WBTJMbPgBmT$wd~A(NRL zYqEq5Mnf=}$GFJdh9RAgXrOv@69DioM8h%mddUR%+nCCriK>V{ed15=8ybFd^R8g) zD-B?e{Wg${2D^hUVXYmgrwlL4XCE*MWXh>c>3(R2Sc^@h+=?R27OQBnJ+)&KFY^0} zwVU=wHX~d8#Ru3-*Sjs3Mte?<_)EFh4fyYJvaz#`mavVs8z4@u>-Cx+?z|jq5-Z`D zwh}0ZZWCgmuIDrPnk=0WTkf~0CbEUdpYpg|V(W>w*3Wf5=eOQ=JdXb?!E4&2S*2dr zO93J3$k!|zo?pxjg8Xg#-VAv>M|OuIk#TXYd0xa#^yx-P4G0^6ii!co>%~iqFLxvz zFpQMtAQ2}Cn7HANZ3ViohRvh~YFjy2^>5A2NX}rl2z&uS*$~u2zsb&lINa1TpCJvs zqf|DzYC~`w$D3`_(xpS_wcl-H2wC=e zUVKUHCWEwZ%9fjLVVCUI1N$%R7EjdciVb1T5SsA4fs?aYbnwXx@uxE!8fM%!xNTP2 z3DWn&f3~dnNuqGLUDqg=y`-q)_}c5g@@}og{IgR&_#K}QFZ;Brmdsub-5>6bz4Eid z9TLZaKi*&0Y`Wo_M}Dc7MNRVPleplh!&R_=C*KGRHl-#b9r?hDolrD9OZs=RN~b>( zOY*h`)pqJ`_xQEDJ3GBgH{vnDQ6GxhJ2(a(FG^*3y@7#dun+g5Q-}({Rg3_$S}ovZ z((8ssX0MvTRucY(``S?>2Qmq@I-Lg9PpOlh(;AH`tbp~+0KQl_!G-Uv)^li+Bh@J9 zTO=xiRo)zk9qf|5%?B$s5@vS=oviq^s=VAyzF?cYJ<-jHOW`Bah;+r?Y{RpdX4md} zA8{&;5K5@Xfu!C^NKha_q--1;N-<2)?ha2Fr*gjW=q1C{iOQu=H6jc(#toII$P<$ zG>Zg(f4OgH^M*WgDk@OFMC%s4UhN3podgY*QZa{3JUBz;hVLRlvwKo)#WuaY0_O2L zKt2#a2m6$h3pO+d%ah7k2#h&{{3AoZUf2V?whFU&D1bp*@(Qh}jyXVU^M_ovM-C!) z5#;6p{T$>W3MsCv%;G|2RZhc$L7w$-64uZW4&m7Jz{-{)?-r6m?@^nKjbuq5!W23PF4Rtw{H^54d$^kjg~5T zU#<$_`^i$3_3i!iOtmgg=CSd|uXFPTr$hNX3nnSM4}9_IRkG1^%1;`MN<@i8Z%n4H z0j;yPMV!!TOu?}`ZKnJog38tF9|z3D@N29i832h|?=p(^WKd5vnONHZh%?y9sK7rz z)GQ23)cOq?^T*z>jnay3Gj>+*4>_4VkkxFmDOSH#aA0w{*qr|$a}}VAl=mnEklrHL zjRXgHF?v4}**x8%tNnl)8a^I#AOhjEa}c7xnJ=s5fMGlGZ;kR8Wb_lGWR(QB!|Ny* ze(M9B@w;bR-{=x@HjX92lA)Lov)YHfyA%M*tI^vnL{>bMjom4%45*|m_Z0PWX+=}T zj8>kzwde9_Wx3%;iv@-fci+m(b>&4dzcJ%!66;>9YV?fsqhORwI-Q|r zp{|oGIqY5Y(Cv-Q^|Q~rlJ*2a7oqFJC4;&lXZz7?$9GItTUG?afRfs-?+O!7s;dd` zXZR~{9zXSDw^VBM_-r=X(NCAEUXNPbF7+~NKIvsr zXaj0;39I$m0tM>LTULAt9TTh_cVHvcLZ;n=Pk}d>yyawQFV|tS%d`92W!@Q`v~4+g zC^Smq<46V!{OsU7#16XZCWGYO9Fpy>jMT>GFzaDC@vKiOq;;b2{u5K~j{G zyIC{v?(ps>QJMKXN5a3+sVBoj}i?2l5e@6O|KDQc!)uyCT2kmAfaa}l`f)}gDh)wIj zMy47yZY8CGk^H1y^Lrqki<$QNS?*Oyn`}HGpx=*H!ho>Ef-3Fyc_`WadXQUfUPi$hONYBwb-nKOkK)}8}{EQ)ng*0*NN`UKGhy{_ex6XvlYZ5Ur-3PNgAfK z1Fo9y6a}#2#~1k0^FpcZuIJ80bqu;#m_*Ms+3{h4@?Oj80-Li-l6>5pty;J-)BXD9 z7pBAJ_EVu?a5TAsmVm!gw3>J{tBA5(y(*A`pE_&31qfR=$sNNIBC!U0^etoJ_wQzr z$>TnY#af~v4rDocSS$^qsD6wOn`L(^3)8fpn2MvWaO)uxrZ`}+;&G-~0eTxUJ3}Au zrL7;_5a@0qr#kdulru2cS#+GvqmT^xg!O<(3N#O9bnzUk#T|n%kuV?MGp!j&wt7?H zgmN}y?^BSIY0jAHZyQ5zUfzl+{#EaB#;ZSq^QQ<$180CY@k4L|W1-a{V1=tXc9plU*M%lyGg@hl)17PLXS6 zb}c@GGEcWP)<3@cCz5m#3ZLg45(SJvaFvNhhildO(P4wtBDJWvnBlfRFngw($*(MI z2K`QfvM08v?1tmpK;E2!LlI;&tNyV_Vkl^q0J&hZX_L@;0BYabBDzoHr(QwIr$i;k zLH=EefW76#E6?hJ+&v`w6CWV*{OL2D_afav;AxGA>tBd+IkC)@+0!{L-NY<4Q|#+# zla>t|`ukv{?*5s{Zi28>pAY-zLG1M>G;N5*Q_r*eXJ2hE2UJV?ryX>6fECwG{^I61 zJM2I6$@(M&+rjN#c&3Ud`4jk-EBM_CPS4KP^vnGQcOsixoA_*L#T=d;d1Nd!QO*Sa zSAtJOn6}+Z=o=EM!qol0J^8<}Q;RWrrJq8a(|>BRdLS|X{0A6KF$DSW=KcqK?YuGn zVaERbf2}pb?Djk2hO*-)VKJ}n4K7o$0k-CQCnqox5)zs4{{?Li#9Ji3{DjO8u|Ca- zpS~xt|LO1<$+8Q^a!3JM^5d0B;6Fg?P=&E<6!ZTi>Vc{NT#8Kn7ho})ICh^C|EKrc z)3~v=|3P~A-eWNT*M{^Yll^~_39cdjKS)TW^FKo%(U1NIPG;#t{f`1_0{zMo|0^%x zN>}Z_iqeP5{h#iLy+gA8dtZ~i(ErIx{gijkaqTps$F%ZK*r# zzZsAt)t*^?{(8$aK^Q7!Uu5*XwH-T#yuIpGzO$M|san13{e#VeY|tRk;|*2rk`(~8 zcI{U1*cYa@$mnp2pE(pOcIk!ev)U*IS$_C%zLx*}7I@itbNt}Nh1NP1*>bI_@jtS7 z3ovt~?)AXG{64Jp81U4&cMteoqqno#Hc6Sv#pGG@fn!+ZpABkIqZGdabZH*DjgLpi z_09-(SM?`k-34MNqlB0 z%mlXH-ye-@e?A1;>3t2upqDFlT7Mj0vca4g%TO@OEtvOxE#}|l`G5e)BtCq@7)^$G z@w2k&a3?rq(CHmo3(#2W!oqMV4|s(bo7N{b{%olKMnhG%lYyxANHcEZi&dlM)*GmT zan`yYj+;8Y`&I;db>$PG^j;xk4qhI;36XmXyKQ#+*)@t+Z*c2ESb3!K>r1qF8V$Lk zp`2S~KK(9FT=SI1fuMW7+MPP3o4ao&%nyYBp24l*U*OM|A=pfTlaj2LYnWPKyEdI9 z9AE~jmzx%g<=={@R*6==iITG&mS1NxJ{Fc(U_iG=Kl^n2G#yXDs&xkKm-U>$)qsSZ z>Z$XHgKBHWU<;u&Uo-R_jCP9kC(~4H_V1Vsk<5TcJ&Y2xl3x1kr(VEs8b0W)HChQ~ zve@jTGpp_hIhWx!KG=lJA0N6WWwIEDC%OO@Z?Xlr>Y8m6WSU_z89Za5e46`=$~r_H zhkb7mMt1!qYUi+w`VquVauo#E&DjQNtJNaoc^;CJMK`@^JF(D5t5Y7BobRwVv_=TEtcr6X<+a=o6^X6zA+SfNz* zs@e8?Bw8Nt5P9BA)W4OL^~vj)9tC@|1&f^oZKlU}sT-VgR&TNtcd{N?=t@<4v~BAC z>TWdD*c@kC83IIeYY9sR;|Sb=Q8WBP)1ALKzA-=~qlT3DxD^r`%Ml}s8#afJNp$kz z5p^tZ$#>1?BxtAOMSx1U=9N^QLkQIspky3NLNaBR?*B8Br_S$#;8^fV%!32GeR>7K zt_O3ur;s$`K?g92nG-qn7+X1bmIoi-BI%RmwI5UwIzpm9jMIF7NPec#h=E&Ew|IhCV;<)3j76$BNZeG&;4&!Cl-3x#{yt@{>GeDPBRTB)M?PV2Og}qdz5X@MJw#XEXnIg(&%g^@SN}+6@lrXe z;sdPS&36_r`uulT4+J2J<*+C{OgY~IeBohs4w?Z5iFFZ(TFQAOLLPRQ%Ovq)zjMQsp@#A|)WuFuC6KvGzc@gr6;e-wE47)tI@LZCS)Hn1rttXMG%>D8h!51RjC;`t!j!ABk| zZrW0xGpqll(afx4J3=-0M;OJ6MHXZG(`<(J^Dhay09a)e(3?`*^yF98P7=HrO%f+%Wf_9>Zgy9mfZH zPoAx#!?x%OQnDqHTT-{Ks2KkH(uE?|ZYBD(H85i3qCcTUnjlY;jel~Q669nlfoguw zgP?!7Nt0=C>;Jo9SJzwG7Z2m(%%9_J6Bz zjN|zjs$UyaFx!r&mNo;np;M$L&XW zFUpgB@GUV6yS)c6;)|dEh{$@I7a<}c|KRy)i@}s4*1im!UO@GxKA^S#sxB%Z%NRYTof{pZdg}?ukW$5>s_~4RwFw0 zB)21hzlGabVAJ*Xc2&mc2~@JkLQY+cAN2H@TKN2)z?^7&g~o(`?TZw1f$n!kD^hp4(pM@ zWH21*XG#izPM3D+o#d&xI@yQi?RLQ8@@~%ioJ%x9`_~17qaXESp(TV7h!@8CJ`E4M z${rMY4*1mzX+7)I0eOOmBLzw$lw~L%wpa+s%qqNC*z1pgzg?7g<`XL?wohLn+Q4k> zp(T74cuBDXk2`81a99D*&=z9?plQYAEdjUClrKlN^z7Ki#iPL;=!AZSXB9aF0P z3mcO>wvR3|-^cM7?4xr`^tr^mw+E6X8nGU;O0@VCtL`G)f+9_r(QF62S?{ob0)p_S zxqWV-H+{0}%EFMxd4=daKY?9c=;hPlthvkU`RK}|vJHH>3{{kxQ78wDFQa5&Fk|20 z&EpM7w0CTXZ?=5^;>q1caOdURJ~^YGO$^6`Aqg`aJ*k;($0G7?H*v}j|4SRFv=GI5 z0|svs5t00vHTgBuDX)}&$ci-cPPLYCDb07`xcAw)qwYFwgL`Y!kcB{a zhI>V;#U}hj1M4OC6AVD38DVf_7ERTE!m7p8gs`1Eg&mJ3VvIO7Bf}gYAm(BX8Z*^7 zm*o_R#Ou&u82zrD(^z5W7(Ra#&#woyjN1upE-QND&_WHINT*T_ZhS9{VK$9P;MZC3 zxkZnnqnBvHqY~{olRN&^wInE+335?wNvyLPvg@kM%dAQLglQdJJu|jW+;ewy2q>va6ApS4@CL;4L#H!>GKe62 zV~*5MPdS_fgg{>aUgcN*Xy$7CM2Uf{64>)x?GSA+7YJg_rilM0Sm<54606fo3u&FX zHP3eJreRp*3M^0N#v!8w#P%#7Vz3773?-VRdM(%-r({Ey!$+*cs!WL1kgawy5uV%B zhFGvHz|mCNP}UIp2Wxj&frvE8_A$D<#(bV^OcHyK*?OBjnmkuIsS^q~fgTUIOoq{D z=A007NwH&5{bB?^T&mrsM6>XI++g$e`{en!I|@dq>N9okxe-U<*&|j?4Fky#h1pnD z-3O=B67EoG&X!#?rw*SZ#8P3KQoe!KP3b_DQz}xCy+qkpVFb|z=o0hybw3XTOdHA=%YjgHWAh07lH_`)4{m%s$k}-!k>7QvzD~*XKZdGj zV7blDQRqYAiY@T%_jc$__O0~ZGd%WsM2uh}F^^v@mN^tBYY|TZdKk#d+ z2P}cnJLD~Q+bx?I(Zd7P%_m#2tdceHeUEYHnH2E}3_QXsgG@RX6r8!U2Yxq}WMKr2=e$t-GQ1e(9SyE+CXp zm887OeTF%&3HBl8cniA0$tS%&R$s4zLWCZvvHB>DL&D;}1z)ujW+Y-I`{jCduW_fU zKI_+Fr-6iwLwC_V_$7Cio4wEn&$Xujcav>E%A~gO$EFwixL-^!jW(m_f`zkX7l?pf zf=^Db%=m2OmfG6v^w8&-6%i1`0pJrGvZZ*HCvt+r6a~_X?Q$uW1ctp zz{~9Zhr}8i2?2;2&18X}B>ilw1=gSDM4 z;wLC8bpkmiUt9*nNzqhj30sM+NJ!6xoG|+}=e%SA z=DG2Lu!9l!vA8-g?s``>iVjn%O8r7b(}HYO?=t8 zj%*Gy)QXM%^`{vt*G!%lc&SaOA0(y(5A{fB$>sO6uI;d78VrMh=AF?}1AUyQW)+=k zMd7OFS)R7FzCQV&*!tJ#*2AhW@^5c5tp}o+lUovHg*R5`wi4_nAj$_7{#vFitF*g$ zw;}}r4PSvOrJ6Y5;#dqiahp!mMbAdxgI%PGK^_OQEAtz1N1+Q`N z29fmrc9lZ&;`cMPdZ2Jx&Ja5cQ+qRY_!hrwp~WXSrT9shy4{QyO6O2AfB5pMwEH+3 zFMR81qGlgNwiB#SiqP*=Eo~$N4`gbz1y`+JL!j_3uy@jPo8ZHj%nO_?*Y;z2|Jh*8 zXmzX0RPElMLm)I__Fb`9&#$u?D5M0E$>szE&UzVNLa$SR;lbunW5ISEYLfiNw>;wT z{8McTC2Z@wkt>0rJzLTcqd%>NrP>wr5Da{wrKzDaKh7{_qaCdG+-do94Nex{fCfBc z`xf{`>W;Tvqi`D0nDXE8qp%tw;;kf5vXaymbe*lYkQRSA56N9S2$GRMT1R`{pXTlR zqr3aL01z=MTf-7%yna6JCWc*c#>7lk{Iq!w_-Q4wUf_ep@cCGufh`j97-EZ&}XXj_gE>55) z?4^+@RVDLr(P8fXQ??oTLhsyI?RW1b;EpJz!~QZ@Gu6;19O*!6I1QKIovk%d;c?kT zN4jB&>0RBMaTl#P1hYNqYIn*PTIg-?WNg(TyTt7p;K}LIHVRO1Tr9#x6i6f$BU0>` zAOwVZ*wK~Ben4hDECDY;Vr|xQtUew|`qV?qyZ7{PlD*CPvQ{s_j!f5xormDpzGooD zFr3C}xtta_&euUTJtsm9PUraTP%Cm9~CcJTptVzopB!r6pTZJU8~zNh3lLd+93>w<-IGFNb^YyqT<&bg2VpJzqzZ}EgX!BK=qQd7ea~=Va$NMF$_K*&xh!zAE}!ejtrf`SghLSY zgr?xPE-5Atr=@cm-w%)<5#I|2<~D=ugZNw`d;r87N1os7;1PHcjsGGZ+!6`_Er$l= z_lto0`T2dkN(t!e>l2fci$BpGqzV^h0fIBh*Xp8SowQ+xtfo*V`%-_yo{PUxWw=FI z(8{hq3bT&Pvne?2$cDwvG?;+ybWi>;er)dNMl|yzR;5{yzCyL#GHli$6WLbF6J2rW zuki8;&I<~K+Tf-~Eq0@#pXd<3$ngs9TpWh(Gk=AB=CMVkeK{4TlHk}eXe2r#RQaCf zNUj_qGDz7-6{pKdNDejY zyj&#!KrnUQ_R@Akz(npw|B56p(O#0KJ)d z2>VT|+JqnQ^VKalxX1`EcR>iN?U*UOQn=!61t9Z>*vOnC&mb05cp*qkI0DTUAUJla z{T3sK6w#vfEhC6P89S;ZSPlLFN<|A3qc}Gv|7`>F*M2D#Smp(k9~l+tI!D|H<~Sg* zXc$JR4ly`HZaCbKuNfXgYpRnPOgD{OwVX$+agDFEo6!V!Tmi%=7B)HJ9y7XN+!ee18? z5ee2x4uP$kAldbgWAK9g1&sbat4r*^(zV~DNGIZJn96~jYm3Z`enEx>j|pG~_k`I^ zmoyy5Af)H*YLy(-vf^w&ZoaQ3YSi(O;N)=1Vs!iiW!RtACtN3tFWRy^5?hLBmA6=eN@tff{>j)y`+DSnjQlVl$vOS9U7flx2bx`9TWbV{7v^7qj;xI3E!$tC{8 zSL7rq{i8*9#<%#x)ueBcwD8Wt5~X7D zO(P-?=3L4_Yqk{Cq5B78l9j52NGEvikQ~%_7OWSsR3a@Dt8Y1R|}8!F3BkI zkughzD;Vv@*A-z%gD1z+c@yct?>r)%if`XB?rbn1Or%2CbS^L{y0D_ zQ2ksir{Vxxj1D;&HB$Z=R@G^0r5?JUOi0V@N)VSSE2hYG%|hlN6M{}Kr)2itX+lSoAwK7Z4T;g*X4d|w!FW-_6N z+!jPQz#trO_HA5QA6@1RArkz!;Q*2*gjScFtbTBAaWE`72)Dqo>jkU!4;Y*{D$J5) zOohk|iOT*aW1DG6U^U{k52;v)v*5yO#SEO^-75NA|b(p3S<6Dc58C%6v|eVnqtlRUb<9Ib*`#SUdYavSe22=^=?E{^#U ztQ>MXE*Y^}q|4-Y(XkII+X1BpOdjN{Uhm`}cs*QD=QBc&C*TG?a8fAp8>T7VB5J4;*w zh-RUvVUtX7A&$UPWM-Aw-mF(cnS#&@md(;O*= zNbt^HnxX`gyAEbD(Y(gprbDM$n?r&qor6aS^iT@_V8|jrIG)FRNf8zm! z@F)|o`dy23XBQ}aA_6O@QI+hfj3TSSw7=T$d|T6-J?3IF-0~c@52;e5Z&T%JlmSXN zF-QDlNfj%{}dY+|q6J^-jLN920lBpAP~ z!4s+KsHQiViDeCGoD9>Tuze|l{UXg{2O>v*GaNMg#(2Ye_J-~ZgrYixPz#!pz8DCiOT-RB|v<*hOzgr@}eB<&(s zk^q|`;CO>nxOC=&!4%uI+Q(i8n_Ld0sT(XDyq?orw!t*I+Ai=`Lm6nNmQHx90Ksid|UgA??fLq=Aplm+lh4!B%kAr z8WcInE4M_F2{)`V7+Zb(I9>3BT?m6>*m&|zUOJXLZh>$PTub_vM_kS3u`+RV7B`&y{*^7am)zWwg+n=5@v9m%5nRKhfO9a1HV@ z{d8^-Pd$6oN@Pu%+b zl}@ih2HRG!f{=9i?=CZ-<#5@AN?dJc%%_lp`PTe@nQ9wtmPgx{FTkt_xK}I|#sP7|UeJo@iwq$SC&p8%BShp5yr>lXrkzEftW6rk4g$Ochs9lp@{(fV zj~ry)A9*59PBz-G7*={^-)d?VW+pZL)9Mw$VyTi(EypM3WMG)s-cY^qd>)r3W-~}> zZu9bIEz>MF6M?QXZ9ZxLc0vOePDi%*B7!pSDZSUuNpYXWOf9aO?P{cORR?JunwF?g z;A4NW($Q=MHcl1dP%u5XV!ajBx*i8ym*?YPf6yb5`iPOxR@w7q?X2Lhn;`(TOvIPgoM=C#)FxZojNN-)spF_uH%CBDjt3*1H6`J1OzU{yHc2VVTFj#dy|xV1Q2?`+GLz5_Bb<9;4u?6)&D87}=(wN9YBZp9 zg)a8?X1L6>8S^yawQ5A!IYhErbe+Uo9DKzVKh>A-LZYgO3Fq@6j3g`VeGzQPC;txA z>#ybsLh9S02%Ssne0o!@|7^Kj|FAu@v zKsL1|4Xw>XQoj~T#xEc{?0i5)FbXD;eN*O?VR5|HfJeUaKm`sRyr@;L#RNhpbC;{t zKuc0*BYERPCgvpap(Y;z?kf$FpHcMvQ}`~q{)7cO9-bSW z_V`Yqy0Bj?66{$eaZau^*C`}tRl+`dg-je~6a$kP?Rz{ zsJojyj5t!w)y7>LTj7ZpjkG^n%VnC{ir7A-Q8?73i%gl#vBjL(X980)KT~V4%pD_C zXpDvB5Q=G^$Cn zDI0a|#esqkJhgc%_iSBIfkvoMM(k>fJ?j=na3+J5RZ0B`}qh7OF7%ww04<-Jbs#W6?^X zRv@-jXQ4(GGzqxfyAqDYQDMBhax83Ed4tKpPX{d8{W1~{?Pte@{))Ua-J7}6;%W|= z{gtxJ`lL2KbP)Q8?fpt)kb*U*JiN2b{gVax@cJT6CjZ5*^M%%l`iDzMygYvKzZ5$t zE-$+=voCA#&m)|lj5hPE|I2?10TK((fFDkt%mx>?4AP!b@b{?{t5_7S`rx>L?%%Qh zupC5GTH(L>J6o|88p|K?0LtmKPrPNipX+~F|8++<_`^5ZZ23nO`nSIZdG_@UNx|i@ z!`1(*k+X;NZ_%dwApaiqkOL5Y^ZA%7eG24Nb&~i);I*X5&0mZ7vk>?5n(*^lzhD22 z?YV^LO;D&>m3rsw4339~=O0$1FFQ;!#KXe_w6E4^&r1$5>VQR(z>go|WpZhl$0bh_ zahQ?^C3@--b`l-JSDfp)5$Z!!`W0hz$o`M@MJ-=;#T641jZup|_taw;4g9 z=AmfiT)mDh`O@l?xuWG_n1=%*-wB%7^NEX6gExQDc?W?S07rVLW4z<7N)rO0OeO!b zHn*z_-xEzT9Ddqp6GkCjhrW%5O!HS>NyKZWK)sS*$_(70nA#)g>Oqz;Ac$Q0Hm5k2LR7)BTO-;Z+mW>Mutzw5RKw7-ZZq4zsiqhQZ?cqhw zg58XiN7A17Z-SIa@y}D!LP(rcy3nL-j_rwfA5P~tD668Fz#2cseo`YbVA@n@C|DTM z`07A4TfmkRqWjD=1rZE}2qmx2R`2QJ7a#EeR>&F=z=SfL%QxWEgJjXDh0-c0YC@JD z^nNw5_l+cq%q)7x{bd0(Z&nQ@`|=0rnO0S-J7^29Zk^vF0Uoyx%nCvDKv!gxB|qE53uW*K7SbP)eV-jfp(^rgTFm*IThA|= zW*4voCS@h_pQ_)GJ|};KP5dc3y?w4Cd^h=pM%PLSJr_si%f|D*V-0rl`JF?i4^BNooJ?Qe zE`-0_pGLC$v0kba`dTR_<6$_~AM03|?6&;}lbN=}{J^?Js*b?1HF$k(=6N%vh1l2t z<)EJ>=Jt21ETc9oa5k>NlkE+;H|Gn`0QGsM4W^_!^@2Ru>LYdH7nO>YsBxaJkLt40G23c!i5Z$oCcMwpHF<%QIF`kOhsP_deez1z> zkBkXlo4&x-gtV2I9C&f5aM*XCJi}LQZ84|EAoPH~9Kl2mggVn|2IE28>YEITti2j_ zYF8RIavX=js&%J1kUs|$^Rdr#jRbZ-JLMZ4<}J4w(`l*MMKutE;d>$Qv}1m;lBW)zr@qnHgiFiHMo|u~z`0+nw>g}zektJ%>+3tZfjDB3?c-yr z7gI0022E#nmTOB%)rQQF3_jr`f@`Yp(xqZNuE>e;%gsT`hp|rP@_Q32PEa!y1_~UQ z;FYa@`;@}Y((Zaa{>GSgBIc=3I5KEcxdIX6Equfj*OT-|Ry;f!`CHq&;i#M*A24sm zrFbW9u_j;ivcoN~j(iAr2vY0KbrTc=L$6eAI>wA+#fOV;WTSuLXjJVRdHa?D9kZTG zj~VvEY(m3WI_CPU;$?y$4%f2dk_P6^=Qn#=WX-tW~J|3Ku8SnNHELn%0< z9T*(TjN_X9p7etWN5!mKRBF%k%nuK0QX5$QnZ&8|H`^J%1KbG5brQd`;( zuT%@jT4a)Avm{^x^lZn=o4L4$HrRN)#PIq=chocJW3x8S!2AP^F$7G|JQv?`9XN69 z7rS-p$1ty8Ze0hH(Xo6xA>BxpmXZaRCoC&9R|1A*SQ)Ch!R?J6XNwtO;1-_X<6@ph zk0IA^G+}JQ@wq`gOs$qI*_F$vZWlhYrHb)jVHws;6Sb<+EK<^gd$Sj<8bEz0z9_NI zYLYpa@FE-^*b#@3^QS{iI@)i%J4)03T*wRK&#ax=q?2GNRC1&Da9k{{Z=}vf1%JJG z4xi10rp&N@thWY8CsXfS?F<|(*O6k-YWV-yXg6G{)U;S_q+&Mx73^}l6wctmY{+l7 z$*UCS=eYvYp-*WL6Dew7&nPS`jD&&~JjxmQq@f~Yr1SVjM2$%o4I!72r@03~`MnV* z#yx$faL&;AHic5NjXi_IHUz_^;-|=K-O*eDI1Yz(IQMsI#KccA=YK*|sylQ~I4l4JXfbgYjb@@i^Az_cjhE5bAg4&4^4?+)&y|-0 z3jS)7&}lQB1KVKKs692V*O}C=cAj#d6&%?PErwJuJZojQ!cM_NL}$9F-Kc6i*yegC z#evl6F8K>f=1Src6mN$+_)TSUoX&s^o#IN_5aaH)znIm+fDIF=Je=6|tburu+RoTL z&!}E?rwNst$WYXn!@+|JWfOwE+fu}mbQ92)zhomWKjMeqgIL!=m147&6K`~}t8{Jm zUt}8oKzh+F=VXJ1jZ}JFlp#)S(y5dJ)lx+v@ATWLY@Ynw)>cl3^QZmsRELuVs<-PA zLM%Q{)|ZEKSPBY?+38RVJl$(&ORqx7OlU60|Hsrj##R1>ecO|5+qP|+lkEwU?RKu6 zt%;LsXWO=GGA2%T-TklY{yfk9a=%+!>s-Hc9mn@P5FKtDo3lJrXyvut%?A#>3BNmw zXjpf~Mv6i7VCvObjx&9p8K1+1O~$C)dnBC6YB^@K zx&~p+e=oBe++k8Ij$kDeez;UL(u#%3=?CQhsydH-!ZkTPRuE72x{!|iRxD)oMB?NF z05l9NgiqOK@oZIk6L!e~OpG{i3Qy9LId6M|FWL+HabOz9YE(|Jp(HT2kuG=lkVu}o zonDXpI;$p?E}1fT$d*iq3C`sKN(~_lZR#!tXXILE%Bt0xHtzRS`~FR^9Ii1vh4M=> z1QKcp`5q~Tw&SQtBs`=qUkaJ3A3lu0LFFcr-LgaPY3iBNmH=+ixPZ7d=u242AJroa zvou-_SeDrw8;WB-*Gt9A3zp{14nb2khfl-Foncrlkwe0>j2mJYo~e1gTUlCz+hqg0 z9{5%!Y|w7QHDK}EH|Zkb3%l2%R7u9{uJxxNJiRQ?O?@)7P9vdav%sjDs{|0yYrz?hLrVG?60WEpTm;mFu z7i5hXj`TMQGX&X37ypiA8D*CRxtB*%3`Zf~Z7teK9da=3`^xX3sf!?_Jztg{e1`=hOg2!+n_K(>zbprcM zU(8o66sfUx3bGj;3~zB1v&+Qf432t+OG&)lvS`We7b!OP0p}bcAB3pr6qy=KdCh8V zG#T#dzF>%zS(7)#r>b+HrEk3XORuRDi@-OkWL;EjVmXL!a$dvIGQBp5gKf#(U}sn@-Ko&06#CFnI_@4?VgpE(s5 z7-cn;Wx7=HJrW4Svc~u$K^@Vs9u3ySzUwl^)GAU=E?#&Ca`hP5EeOnC0Pw@EZNj(R zVo5Ees<0MTQJ6u(Nao>&<@l@You+D>CtTWYWN{6Vrj{K4z`!G2S!xqqE! zTGq4Td?QOk^NPxfau?eY&!wy)8U{)pdQ775OeB7N(*n zh7*1($I_vqTLI@a3i%u|W`k^FYJSXC{rt{LU+DBQNOi!h1}1lY*y?e_ zs*Y0;qB$+UDc}l^>@80Uh{4CM{MM!pjKsll5}<{mPZ|H}-Ga0S%^qt8WOFLXqp9Ni zYu>F*K4o+*8lEI_J9s(s(ytXqqg|dC#PO~PD?M^CJU!5I8VY~B?3r zt^qsWat6%aT6tgDSso%4cc65_6>+p40}-l=^S5y-CFBlfJ0}ZuU$(!I=_^j>WU9X@ z4TY3Q5HSN-|7$wrIPO+LwIQYIy?PweHmIqjb2cC8K{Tl&$E+!)>)|OvQ&`Y*twm`} zAI!*pR2}>dm97p!WK^O!xDJ41K!k><3PH35X1#H6C@4V0$gwwURYNwYVeVhEs?{Xv zo3O6eRJ!G^sCyyY($EfW)k4PTZhp+#ve!c$sKQ#|PN^F;;&1TKLDGqk!0R^uG%(+2 z3T3jKYrvtVV+OWX7a(diz(FTx-V}t$OIw<(cxHxdVzJiqllmfUG|bvUKZm3WwNZ6E z34-1lh~WPL~j>^_uF}WCyQmZW3|hBhL2=-6NMX?Xl6% zuZ`W@5DS6RxSdYW>YJGnh|~5sX%-p2G!#}W=P)o5oU80|xpNPri{dy}Wwh<8@;~Yb zG$@C_CG4X3LyGYG~vqH3{#5x~CUZYz%v%AcV6k3<+X{vSX-jD09Q zmfrBXY7-z_nE8V=ujjF#R*g<9m4f!}Ik2HDTTa2uFlOxRC|{R2)hjVp(E!p;Yet4& z<}Y+|p{!k1_AH`l0hz3JK8^A(zKA7;G?THUlGRRgk)!)^LZy0s!NhQJ&_acIlXjGWt zRnl}HLaaOe=Zob&7yd8B{a*t?aQpeMA2h}xb@Jbf_^Fe@TfYA~WM9Yk|4NkbHq-xS z>=I6IOFr;e{lBjx{$K36FD=+r?1Sa_xoZPOW-C6~{fvHQv9$(#C%onAx4Y80%L?qb`n)*LT|rUWXq0K-PX+z8 zVl?p!K0@-{nc}%v_}MoY$K*U7(;rB~!-FIagl3wpGl$`{`vX1^*V)+Sm(>J;Z*r=} zvN6Ylev3)8jx1Gnk$~nC2(yl&VMBa6hN&idDcHeKLOwZ!jGExT8P50>DicZS4i@iBRG?Wz9y zxcpcW@bo& z=sX3!BBY@0N*f14@xAL7W{#fVH0kdje?5hh+HZTHvNcPDFH>Q`A57bPeK4t55s&BL z(;lPGuXk+_v84}&M@X81KO5e_^AdZTNETrMj$pY)5O%chW+*}VGl=j%=gOEStv;#~ z#;E4ZUj6;{sZC4Rcb-oDVO42+y!z6UNy6UtlZF2nm22(&jWTRKK>INN*-ANl$TkCV zm_Xux{t!>m;7i@6l<&r_ASp>awWct_m3?~OCl7D>1rPHZS!Sfh{NK3!<9F|bF)UU3 zgF+pI059m*>8`inLIY?4U!+Tiy!hp6-`yPTa}nn8LwP1fv`5xLf0)UaTj-Fy&A~Qb z$AElVnz@R_-G3EI{~G<2JBMG_5Nl^%p4&hVNUgr$5zM{;YAFnw=S30fc_?amT|GQA z=LQ-9#>R!t7(YpPLl#Qo_fL~en8$n2jP!fRzFN}Aapx4`E{z#~kXk&?(JoLF9b%G} z&WbdF{HuOh<(h3?;PfX4Uv?f`sbg{lskn-gQ~|vETvY(lfsGI(;4Eo10F|s=N@Oz} z+VFRb6&y$Nc~?*)ltQpS%o4M{J7We9;!kMf^X)+R^Vf=yPxrzY{qKXZkzML>vh zMEAM+0168QeH2e&R8f~yY~^X@!Zl_ItduGAn2AU8a@7dcx?!6+Vpy4lx2Augini@^ zV<+JKydCze@>-QKH>tL!&p&<$-yY1Pl^GU5<8zk9WGTIL@(?J~LwIjwJ54c#H3uM7}4lG0N5qt5+kca!V#KPVwP$;cl9>H&aD!r>$HnG@ms=hONI zLHTR>4~*tqam$Du0fIS?dm==Vd7`z=MpO&9TNQ7!-R)+GEdctmz{D-hDQUOSs%XE} zbs`BI-?x=VaXjMWoNFK9(R^_(Txt>o*H6SO{xcaA#~u-*b9i;de-|A`~$Sh_rAW% z-qaR8+;{nW+nDLZbQkM)QunWaDCvP`5WEtR$_asXvrRib^m|gXeHGcIFd>T3f4NhTW?m0$r>*aH=FmpuKj=Mc`I? z&1pCNMYzwmBC36n&9@Kw%Jk`wxPS684STwrFXCvbijNv;V6Pom%mIC@4&( z*DXvOEuzEoS7Id=K#x=6_q0C9aa(Iq&atnOREV)1)yr$dlICUpWsPzVEHbanS!t-7sFg5|Rm=jKnRLmY}fz{lJs#f6dZj^TZ^Fx$LfU+X? z4&@oSQ4NvPcUaipJrlAgp7&%0%HSOfLMEg`7&2eB(V9l|3)8vujvNJp5S*hiKkcz3 zcsArG`-a<-ZnQODCQ+HOo@^}2EqSoYO~k z;9ErC&Ow0$Z{rWR=wi)2at*Pc(Sw!Rd9c<+aAo<qgW zBiQAUy?+N_869W%f1aQhOv1K^El81K-!WdI9tsL}69o7r7zX=SZn?zGCoxgB4(M2p z%6KqaSP;SC;#xetJmTPI=gQ=8@IvwvXa@%elX}fVW}`DkabYPbFD|%dleQyCNjiOq zL_IX2>3EUmmu7`FVmzv;`vydC9l;?`t*O}L6 z$+?Xos(Vw|AHH+CtZHN)gyVYkJOC0;jY&&Nl7WO@dc3jw>!g218GzA##JPF z5jnFo<_$U3ON-j6l7*4kC@(FBX)9*5|G`D0OGRf%%1P#HGINJLG2<}$5l&xrMTbx+ zkXwekIcezc9KYiSkU4`IG$dH@Z4hn5dlg6qbs_6|DjM-OH@GnX))yr&v7w2Q84QN2 zf1Z5ENjbGJ#at>DS}aRrs@TQWbQey{_DtAi2DVuc;oDa-$lvJ#7d=uaka8m)XL4jJ zs)iED4e^WJnj~z3c#OQEMTenHQ%G{>B4GmqL(i%}E2FdyEMBit;&v)~TNa^eI26l$ zzRzf9hg_ZD1B2#FZeI6ah_uALrpy&|5POA!-Hy`ct&@1LIG+ zj&MraaNfE$JUMwo79Gi=be_79Oo+hR+qn-SCXR}Th^y3ib*!2|zHO>Uh2?*9^DQm(2H1Wq7+SQKM+2;(_nRB^JbW^ZJ z6d?$*(quidjC`I<)XOs!|5e5JkijNB!0bj~p+hMj=MF;Q2jVJSwb`$`Qjhwg+f$-q zp(<(pTm^6Q75pYGg~L*kC5jHc7}J3}x44NRc6hhx@u~I}%S9>4kc#K7<~No88f$Kf zV;=D$&i&Q-L|l$`7<%L$0D{c%?%rh=?RsI?0ht3{ihJDP^-5i{jF(%HB~3?{5HaC8 z;;V~);(+c=7FD%?eACIdtr7?~i@uiuG80{#oFwR<(cAl*))#)uv+RuS_}paSjm#*0D+YD6?DNgg)SuPXRTVf3jy1CQ-(g%*0(%nB&Qv$OFb5$y6bso7JF<%gv z)|R=y85DNC4T^364e6(h^!CR8zkCSUHwfI1gyT7%%Kad8YAD$Xf=uFBXS>PycjG5tD^lUcQ>3Bc^;i+ zVT0W;Eva#{ou?9B|07r*&T|+QzAeyU?QEBaBR(acnB8%t_G7bo?*X5VZ~&(CPkxmU z1-+NwntK19ZiLX;T0nkt^7a|4$W0?j9l1hVPk_0e00zP>ArvYGkN%hYn7LwgiX4PG zal40+)j3TRJFOz?__;3xs$ef=8)lY|MFZ0OJ*O>$yB_EC(NMXN3AP#`eIWlD!TH>l zwdN{2gqUL3%;Ks!!{Y{yS+OdjZ$wTr%vij;6Umh9+Bx8!c5>SlQ(}W_Xfu_7wdxG_ zX|8GPcGCwjhaF~O7}z_?lrGn}o_3cA!YDM}e?xNI}KBbWV@5gLolkO z{?!EYKKRg1t3YOk?H`v0?{zz4>F=n%RlUQx`cHfN4NsJIp5rn)tPPHi zjQ+SVpUE6*Rgwsk+aT8|iycTw0hWujmx0v;2|88KcG zi(*&B_QC~RXkwn)ou*$r9|n9x5?POZyDMr=g<^*#O6F`ouH`3Bwg_T=LMNXjGn4LV z0AP*n^@JfRSE@&Lnu(k;q}NM-H;Nw~Nr2pj#2YI%;8Z3#LG5i|?snXLIap^-z|cCk zu5?wkUp@gQ+^3%Su}c#p1!s{$lsOV?fty~F+5FH<{4-&qX16y-Y9~Tgg5mCVQRO3f z>bbTc4?l(2JOPBkZh&;qSs#s@muL*YZ4NsMVru6pgi{bV+GzUshxxkT8 zq%t2W%VTX3FV?|4`)y1}0(U=AFlvAB_Mll+67o$fi^Uvmf$mR`Q^PCM&-WadvTY_S=))W~Q-nGHmX?@242H2B?*|U?ThB<2%~Y;L*=Uhv%EgUmOz9(JV(}v@Qg%Q%R(sqQI;60 zLK_6|`UrnatFS{K-(0)DEm z=T{2NesHsfOR_C!UT+DfEjGkdi=kHrITbC!?7QOt_w(yAHIhVzIu@itr#v1fWS{fd zPQf?uJ(dR?9tl_HjIndx3(L-qih@O5c}z@=Oeo)pB)!iRx9X4%9Zm??Mn%Gh%4D)! z3|Z^_%-qWKp~762hc0;ee%j{&MuyLAwmR9=p^17cAZB*Y3x|f>Ij#p$9RpFbl|_cv zKOhq7Rg^$-vg+{G+No#6UzP>a)G^eTJDibSMV`lo?@Qx`m?V$F+F%5+R>v2cSfghA>2#Vt zKw%Vb7h+!6Yk@2~RMK&IR9!NTi7f*UqmD0}C(l$^1Q(B9i%n$lhcD=5l%Y(dX<9E| zta**t-4{5ViPB&6W7!ePh~ zVw2YLQ>p z&D~jqF2^fbX%YGl`o`hHu?5z4cWy$VFHme{s^3m3pwadZs+?ep`Gqq}`FZmgddwWM zJB(sK=;J%6c|wOb)iz42ntq?E#FcUxc`8d&ye%BSR^#i=NKyy(T-lQUhBF*Ihw&G` zB3NO*6Su(zyu!*$8PF3`wglqCUv?X+ic3bb(jqe-^3W0V=9g|BjV+4!xjP)a3p*wN znT0{9hKaa{uXp@IwEPf$er$ve*>Ih?qDed1b$GyL32X!={kN9g8DkkpXcA7x@xYfdY z=Mc5Wl?v7x1`T?~?XwlK1s-@{R?dMttmE`vnqpj&D?_YkhOx%2*GVILR=}L#+PwF%sk`=y@m_4Mq&Q|>0v*9Myk~xhK!x`Wm=SZ$= zZ`ENFp*CdPLre<7o|Kl9k|ejjz>ef^!;Tj>yWZIW&w-Ejb@T`^ogY!>E55%3()<#u zjC3!XwZyo)eBL>5hsOyqclI7oHHbvS7N}Lji5NY>UA&ryQNwv8r*_sWR?5b%WpNbS z*~U7sxje0dPoT?Zx-WvSQC#9ub2M&9TUIDj$55AJXXD%rb{ zBq0KG_Ep?CE*goEbE$n zv7fsZEvYwJbX=gE8;^Suqx$~Pnz4hRpLX&4H`hhDY8p{&$sQDpl#wrOVDVR*GBwzM zS&)efKMfS*%S!@r!&(br$Zv1L>)8optO*SXT%=jvxiT3?QVL*F)o=^IDO}8v()Y)1 zXOuMCrChOE*Zdze`uf1XB*@iN=$<4n1-DgEqeV@ovXiBEzV?$GprC<~~9(a5xtg}u$D2pz#IVrXCm zvRxJ0rQDB3Ny>=~EM{nkKTqBoi_-L05(jo1i1#<`8hMzYmKNVne$u?L2U&XIU64!- zWfYoSeed)bR+J7K@DD5oI~gB=YWr`oaa@%$gcS+B9@kdSC7fy+lnqrN3_1?|-|Lv)Ou(v}SInDv%}zLks(~$Mrp8F-F}+DR`c< zTL31qk0ZIu5*Q(T`Q;pPMZbKz+*Nd_pekB44p`Miztf`}ZTl2n#JMKV`8x9h#8W>*(u-sy&ZXCe>0Q+y zS;te-2=o(~1scT`+@bp*APeJGcDML*oafh*|md z4FJAL6zH~~V^7C{a#fDIA1OH43;LFdXd1bhC&UA>n!5Jf%lJpYZw=^uEF=RmYOuG~ zJQ15F*!n7BhYvz6#NP>!2F#6BBxmI+3te>NMmwky(*i4qa`TZ7u*Q zLp#3r!dnYfWvUJEmxOCb4trTn?kN;<=o=J{Kp{@fpu79~qFn$o%9W5rrjfZCUy+bm z*;KJcO0Kzw?BokWtW&Wd1vPFr8}&(ukn_e2l)3d|C`VI~>-fQ z_uFiuv;g}~@iDL@`X!ov4Biy^&2SD?trcnXyEPvgP;E)Le8HwK;LyZ!iU zYeF#5nrE@}S27B#rcbTTu);mi7$YjZr=@GoZ+Du!49OBT1=f5Itz!S>I!&4SbrbER}1opv@4TRu5f$(RKQ-cHF zG1#ovoF4*6jvW)GkXC=8=^Vf*-W6t}|7hr^3$Ad3x{?{`T8l|@(~whojCQUK>Y@}} zPWG5g&4CnlKP_M>KT``NmJ+ueMaZXgZ*g%mWl_2e1a*8dE!3+PtEaKR=7)LK!`|7+*?gbh%3ADU#=PCkDoOgC=LbPP9}h-aZPD zkTR%S%511c=Sn}?M5(2-heR_dCCV3T#XqC+JW+NK$uVeM_IMQs9XJ2+l zXHd{u0zYD-^*w8nSlelaj%}U~OB8w~clD8<>E^f^eC>}|t8Ob~67*Jh(*x}0{e94T z?lUiO8X8{`B$;>Oky#tPg(94;Uz@#7nef#453^HoRTz?QzJSA}zY?%xi3rMC5WvJg zB+~UDc^JGmhpR^ykbO2)kwc;scg0bT&SiL1|6aNC`b4Jq^M@%McY$U0!^wIL(L8kl z7-7?{zRs@#M0Ns(iI_xalChg^rAma7)R9!m*navKHCjtA?`u>|s*WO=+aua6dgM83 z{3q2H>X!)<|0SE_@EkdR&=n$q{mH+@4V}gV?=*Fqi7$_Hm^ZjI_Y;O!U!|Qo=mLUty#xZm}9AP5J7uycv^g?}oqs7;$T*+{S9)ol7Rb~jK?58(5Et;123`qs2i9`Lv{+uYg z8j4b)OZ;C8I#kbTxxUP;;3OZVniLFxp4t81eOwfrH1Fg7OJ*^_8Pay}6V27SkiQ~9E^P&=s)-DQvI_{x%IQ*V8BqV3UgZ>4L} z1zAm(KtLD=PT|r#fL00oFgxmDct=h{tyYfZgyej%P~dWvqbFi2abS1QoQ$e$p1UoGX&%*m;4hA+*8~k~Di8v4GXxKz&R%>qf~)g(Zcv%|CffLjiP^ z()<2G1YuUY1+(3xwb2XQu-)9#Ju!Q;P|EU9I}Z5*<&8wv33&6}U^&@pp5BT@Q6i_W zgST?%d^hH4D$R9D7ZJbKWM~lw%s{ECg*omj zHa}&?g)C(a-a52h4g3jb0RMXWL=dsJI@$9i0j>rYSKcKaa9jwvP$#OG)!HF^OJhTV zb;$Jfu3N`_h=jT#0?Q6tqN|h$zGecxhl65OKbsQ#0JJh__Vc)p*A7-xu^3+oW>PBs zMhnrl0e(wMSqd88>v?NCSZn}?OjI_G>=vhRnMAJ6(+^_v#hjg*dn#^gpTDgyA>pXbNd@jh!3*uzRrS3WkU#1jE+T=RmM2DH^ z=Xq8nT;&Xzd@=%o#|+?kl)TD27bDp>1sevI+=c4gE$?K#8l|(SAzx~r)60Q2x^8QH zZ|(!?X@Q4?`kpp!3Zvb0tLYoQg=KF&l}6&4E?mQR=|f=uqDPUM*@sJt3;8wXMGT&V z@9sDOdR{rh&QraZSEr}&$K8y=b&AAlasw`}DRl_l=NQ97U$hp!8=)V`?aE^WQPc?! z&Pu^!h#}>h1?`$Uc2A)Fb#%vcM@nvqrMQ|8vft@qssXhXXQ8{XjV$_8lHmTD# zB;tAi4E}esyI-tCOZ7D2!Ae*YDT~%dCZg#~xSh`Em&(7wt?{W0>X)UMRw_?;%^8re zF=>|rz@?XF#2~O6S|!Ev`&1vhDbRj8iw-ZACsruxAKb3Pf2u>wHcPskzZg*yt_gW4{6;hZlj`sQU>h*&dT2f9L7%i0TMJxZ%SD zn1)V<+jhNeps9>VuE_cGgPYFgy|J^pxS?DWk@W3#L zpBj#fG{fDfqr6n@geg=oRg8Gk5okyF=p+Kq_1Ci36Cub#xK(pL2V1OKMD-|OQ8Rxb z#B}!p$X!quo<>uRzP#|hC}zaZ%5uyv;)Z&=15en-2oTadi(J3cz?q?kdB_tT-Py(X z#}my4{xK-_?u6avHj>IQ7pvN4CmNg5)HdTNH@)wPt9c(G8@G)|EZ2xqNM-lU89)%g z+jLoxSk7<4?b*e5n}(|UdCOUh2F_ai!!;$tANqd&$yBz%w5-FAB6@u!N<}=tbG6>Y zL&-{i@{5{fUY&w^7U`?SIl$f&c7c?WUlHf$2EGHIw)leHS0M6HHEGpL>269aP#Ah3 zDv3utYJzdL?i!JQ%r;7Wzjnrp81Vj8i*|tM93yzs|A)#n{(jAuNJ|VkRbJT{)IrS` z{gWM(UbpsOo+JeI`z%RxFQOXX)WhCaP|Rc_5sr1Cjuf=r;kMfD(>$GgaZ0H(X@Zfp zm-a&|1~c9uVL4bmYx4bq!iL{Uzq(FW8@ngTK}*qe6*D`eM2cLIk=nN{X&!Ss#?+F% z;r@(UmKK!WUX96efUnc}P@r{XzUpH`w@GXK$c@-n{3->q)1ruupSr{!>if1aBt~CL zh~I>#QF$B@Fp3n*QY4nQ@NnU@A{%D^=;ws=a!_ z5_PHPlEyOf)dl#r)X6Hp6cTKdO1m_a%#f}i=GAej0^J<-adMXu^(u)prDg!MKFUzoT5bD zUv&5dw}C>$9tL~4MF-bvWEz7_knCP96BmU;!(<%F4zawp{%&vtQq!|)Th3!qTDnLF zuah9s}w0kN1aWE&^tYj%Z!iDi@uYPTG}9%Jp`AK+f015r}{Y zysy04+pAqWD8Bt_l6KurPh+f$u}gsO*2n`Ty(ELa7k|F~o6N4T-Deug-ZO#@@#@rt zc`>i>1$CHt;n7m2J1>Dgj$V(2K7vU-Go@4P4=aZ)WG}C*c|FY9;)8w(J+=Ryhj>fa{iX68oc*~CT~cyH zh~{w4ln2wKL*D!hTOXe%SdB-I^}7$Q81|kux1v2P&>Zi}I|EcQMMfgLpIG1HNj=#H zwTq|rq8}gAuLH=YS&sf1Lo!e>px_*Qn*A@L+TQ|ua~14=Ec$b9z(n8p)e*q7qBb!# zzaJ2CF;SJKk-HWr0yNm%*vNm?`A=-0PJe0(@k8;=`(Gm-o*sz5!aX@$b9P>t_c^T} zG*le;#Vl)K_P4)PAb6XEQCxe7f08w31|Ly^o-FlUo*71IajY)JFIh@bjI%SU#8 zmP+s9>-s2o`79lCX1j)OiWKGcw}_A38Q3CEwN|GRFj9*FjHsqlavJ?l#P31cen|LQ zz(>>QcaH>_uHL@)SEoZ=*7J*|$h+Inz(|zo^RCd0C!9Ul2dsXZD*|4ZJxF4x%$;6g zZDwt)pct zRImVC_U`{Ol@;tpueN*Qo%e^ME{$*Nzh(t?_+ujUKv$hK8EV6-vowvX@Lf zn0H$t@nz$s4|x}9mtKwI#1wfp=+kh!=nO!0F>P#yr?)aUAIb zz|3{~`<}Rw_$j>cgu0Jz`|td79HltkMiFRHNM{C?m6i2i&Rl~Ko+mRo)LMQTVlrq= zTD`IvQ;e>q-*l=dOVu((Il1}sZ0fF&xE7ukcptzUjPqkA>mLRSGbfjfs9i^b;Zg9*v$WaARyD3s z&DZT_C)guI?%Z4vRa`vN7r1S-{vY#fymJhHQ@ds<^*gAjA-Oe>3gG|s02mmkPltxS zpVo>h_z0AGIL9+Bo$IZN2P9r3KUb>;f5#VCt&^!hj6s{Ld%60<9U-*bq>T{yPT>4T z)J-|+dA=GPgTrF>@%GG}y`9b5KK2=l{7exA1Ri#*JAI(7J`-VJ++CN4CSTqd*2@W@`iuS+X1ZWPX%OuZk%vm39JPvv#IGMS@G#niw z9;=L6vucDxv>2rux;j*KeuRe9Tw_ZRBKm!V4eY+bJgspY1a^hz47P5*LGQ0GNkuSk z&30?hF#dUjr1!m-VL_;KC?n6ikZ71*C~#jf>+8Mby=I5E9pYiuDDAJ{vK9QpLo&7Q zA-)p#1%;k!IqO%}wr=}FV(jm>ESsDR8iIIjM8+Sl`d5T+K8Q@jcRhdkTX`QieZXaS zS&4Wc2VPvs^a`scu{%0H8Er>v&lRjX?+D(cj6t{>AR;!aY>b%yUTBgX>g4UQWDwsY zciMe}lce4JV)fZK1wZkBxLN?N!+6XZv2phh_hd9kbqZGg_Hnb6&(`oE$DhY`cvlo= z01)BrD2LrD;{kbkHpQND|49M2JWmQujOND591&&{c>*>om)H0F_n)T3lv@$y_gb2EPd_Il|q*Dn4F9yN)~N#5ue|2-F{G^yRP( z6`7SuQ(Qg^N_NiN*rYK{S}q?Fz0&RwG>CAsr3P8bw2lI;>~$wgvFe&KB`a(0u}dvT zshnVGVD=pBprn~0a;c)zkh)Lb~2`ZV;0@Su_e`$t0L9Qht<0$=IGzECZ6&0 z8J0ZgIIlD^kHQjYCd;J#1*9Ja?AXH{F{%YuN`n54*!u+BqBUX)bL6E&X^JOdM4mv| zLf9}qB`{LOa4Le*{_mi@onq|PY*)eX6zZc`ZYc+Ib8f zV;8YWk13BrzvZXY)t|0y-$KkDixRV;=s@4G=ukx4YN8agd99PZJ5`(Wd=T!5&&#f& zAQJldwh&b#?){z%Ms@Box0sn!&a^B991@~4Kfl=r7i%_@~>A)!!!}|IYI}t=m4N<$RZ%vay1S*}0WKHNAK8;~jH=5_`4FrG% z5y{km2{Mhfs0n$@;yYu())?7jtO)9szK4JPtKDC7o@;dDOmp!m<|;9G-xd+Ai(t5k zBgKI9Yo=Vfq}mmz*9Y(+Ik%*C@YPSdFfl`rfIo;bI09ZG-BG=ghfe2%=%dP${rLd! zxL<;?6xreX2PpxqJ1jDQ4~07W54TC(#&2`JGNvmEeCu4b5sG|gW=oe$C&qH3r5;79 zcK=+?*Lq-duV(spraTMc?gyGy_z^R^QMYVAt_KErzY66QD$DRl98t_yIEmTecoJlM6z;wAo-ffkl>+ta6!aF&ATI#!!K=qPiKLnFusYXBa5>6M@J|mib|sYasT(dw zCkLk$;6VCA2bcN30qDmtqBzSe2rg~t57H`=L;~PK9W8xwjs1=I9;^P^VarM}1B5Us zHbw~DG%Dodv_Rt3Dxi8v_&6aDxKW!g7SZgKcxIwWE!8b3HP>#bOt|Kb7e7rbX;FYr zyK50T_OPh|(xEffirxhf;BI~Ux*=2T(qVqEgx?en#4lhA$Y6709cEewbBy=(!o`gC zt+dWpYa!F&4TR`?@82cBreZEds{+T80{qi|y&kN=q{or}n!b*4%1IXpr#G%`Vm~~<0F#@6OJX*;CO2A$*o8=50PPKJN|m#=>61T4AH3!5vNTZ<|ETlvgN4~R$P51dFn?alF2iZSQ##J;U9{9^vwmP)oGC33ga>5+ z?cL*abW*htGUZSzzf%X4OrsJ&A?eGDJL@S@>kPJJe)&ts8>;lFt-g;nt(vw6qlvP) z{9M$E8A0YFaql1;zCbMduJ&sHj@19`_kbsSF=m~qNY1jv9CHT$CB;opbbFhzsG42t>{dDeN zjnjmYTk%PSR&|_L9+0Goj*6Oy6#Q8It=wBqQ!My%Vl%AfPv6cv3C14`Lf7bfEoKYE z8$3Y5ov>s|$X{zEVw;I070m_vkwhIvMvqFY?O{4m;xyg^_k$fPRO%RrGb3dBT*OAt zXE+j_n~sX*j5Dz!EC!Ial--e$P%-;&m}ECh!&$t31TX)z7|Vp;ENm z4!&ii8U%kg-aB}n6y|IUHZio(lpb7ptsl__r|CM~&MaSYJ1_-`zCbn2A~L`UJ#px3 zo?ZaY3A!LO7Xjnw_c}EB->`#)TmnuPH{Vx}9U}AGZ%7#_;R7*g!zFDIayT%hN*JXT zf3;w*u>1;(5Qf0#whK3t8vuC>Xc-`@goIPElWKGqj^@>ZC!NihEG)Z5dQ8WVy=U#r z=W(qD{u5+x$qO=d{}7eb;nf^-El?e%Wc8o<^EVJIdv3+H>6gF#`_r|#m$!Gp|6%GK zxFhYNt?iC&n;qM>opd@$$F`kRY}>YNTOHfB*|ENQ-t(O?PW^$}ReRt2UYKiM64AK8 zC=BoEjp#<0F{hw36$y73zjV?%tZJ9Qzqg>b<75glP;LlwAY>__Du)GaJ6U^3WTLcnJu<^&Q!Iu3DrIb^+ri5=?F6De zOU1`hQlgTOv3oF%x|>W*UL%mE@Qvgu6^qQ9Gk4wO=kg8mo8rHL2orv5j-5yxxQ!Oc z5$OwM)~RQ#{a>9`T|68FS1XzJwi8r$tAKAlIV8H6;cUU)4T#W(p8}gEN3}0^o&OKS zd6K)ka??PnfsFUi1Ek8R!8zA6hsDH5uxXWuT&qRiZ6#o!-pg#$jGJ2{0zQp^P94GF5>+wPAXs^kk>0@E&zj$}D;Jwtr-OT>6r&O?HGk-aBQMtI z%Wx<)p-QeRF%!G>sM2|95(?+o(sU+XFAB{j=uc@<;SnZ)XN<^Qte4L zbQ$F;+Oam|&Zeu|8(~FwXHdn4-9XGk3Qb~A&(TQ~st-T-aAIdIc~dtsOiW6eb*^R^ zN|mkfF%d?>Dbbay;gFyV^KCYROd`+qr3BC1@BVRuAH{n~Mu<1)bw?vq0q1Rv4Z7VW zoTNNn`d7c8UmIOSq;TkU5N&FdCO2h|8 zj)*A@KB&2;rTwl^T0%<(@|Uvf3_ca+#t)rP2sSwS+s+E-49E1dcmTLFgxZ7knVif; z3T9mtf^b?Z0~uto_O8;tO@uC}C8rBi>Fs=`lev+E^cjYu4>NoyuL`SZXvO!RiciBH zIU|$#aKP@SvK$^4B9hc?OYJWrM)|{2Uz8;tIkBW0lS#sn5B&arAcc2Pka|y=(J%k@ zC5;v@=Da>oyEHc8R|Y^R0SHY`G0^SZh*wZYSZQRqBg!c3;(5wRxS|XZ=y>fKw+jB)4d+9;5=gXu$F`e z+P{ZP{IVaFL<-j8ki+N2h~zmMxJNj#q5j}|nn{n@_zQ$oU5kwE+9N$6b`6!y_jMJL zw7Hr8gylSsZHz44H=Tz+EM=PK73k|iDBbaKd6XQ~Rchff>o4)xnr)t9deOWZMyhC| zkOn!CQa>FOxwT*5$$E4LV_h;ecz}lH^7DTOQ_54ZMXy%H zggSN&eJ<7O-Ti;Fwu7&*McF^NdzpDxa)s7l*X$1rz;RVS!DuqUhSN9eYjKYo%#8|Pr)fAtW$hNR^cy!2OE;(%M9) zq66RE3>5xA{(dkP`%*4MZuUgSBvdO@EIbU04im}CJseGFz(2>F_*lb=`W674bf_0f zSx!?LfeWO#&i8a4c}k9qZ~ZC&?pMgSQB7vDq;E7nRS&*1>zvZWoUC z(5b&zv}e9r3imN3t^dduKu=jqO2LCVw)O*~fJ1-eesGno9L-C`RVb#Yr1c_y>J1w; zSJX<3(ZcwNNNG+yZFc{26s0{3Pcgk!p# zpfg^DNJU#iGSVUTD_~+wTClHSE(QT5`cjA!qV7B}n5yf3?SaJzs%r1$Tl_!27=N1c z?g)r5_RYN6G8x7u_#v3h&qD6fvi3tUmrtbSk{jjijqsWeNumYxXZ-RMqHb&rsYoWF zEeqHtYe^u_K1>WzTcF<%j#8=d^U14$Nf9N`jtG5-J|c(H#K zORT99nCU@t1w$#kG26bPlWBohy*So&q*5WR3Z)Zz?4$4u3bA7JKULq_8odG9vUm<< zRC4)LObH^zaZyvQv%o!^e322=>D#AUk^3r~ycUW5^`p)(WpkxGb7u1W!S!!8uhjow z%&*@kC)W)PnQ-^M0ll49dp9GL5U+M4rQqD553IWZ|CPMHzF!~z57#Rz7xMpdy@LMF zfVn!!M+6es|4(KHJ~Alja?=q1fxkZh@xnDqLj69zk1FNbFuVZv*Dtu!5aN-<-Dh^j zivO5lCpRRsfAOVyC}|5Q zQ(7bYH)okt&V=_{Q(a=WP*!TglKQxX{zu?n_{ufVjv>+V=D-0fTFa)#ftm-={GXgp zB#f*&R#hzvqWKMjnX(g1wu3g%$}{%=Jn?ZC>3%fJ5=Nyh!b#KdVACg<1qUFw{$$O} z4%J8L1*apR%?D16v}PD^Xo=_778oU_&maEhA;B!@vN0I!MRe~QRJ#@G1$4v=i%94x zdF?DvDYt(-|9v=-s+bl0MF7EwN2lH44D(YqC1~y?uvcn)&r1mCC?F1m)!m5JC~c6v zJb9@Sp$0&iQ4YKqlU-(9h932Ebh-aSy-uI+N91t_h?6vb%ClXZhU<*JAFM^Q-XbpK zNv#doBg@sDS)(3lnyWen?dV0^dw)7SPm0Y6?7r%Vahr)iV*RXQ`5Ew`E26|J1VY=D z<1Vz9g8=bRTm<5W`sODIeBQCBSuw<7?$@<`Qus%S+FMFJGiURtNTd=M&oE5W87CEV5(x1iPC zSdQNz`5vtW*qyi3A*nhQq!fhUxhAiVXTn7mnul7f@N6 z3%P9IIoc?5ef_>KjGsd)t1>%=XG8L{(&%xkl@4Ch&M(8^#Gl#9Lbc1JW}Sb>&U@jJ z4*cT+;ZS}Xu|;%B$5&c|{X1pGPV77$irEslUF$?`)g>3IS|Pn$MzrR61E<^u?@yh)40>h`rTr>qGFP>yUP8Ti))9MeLSlMW`mvD=)3TxR2G)+s zQXa$*mQ=ZqY||thzCR2kqYzy3v?HdA^VF3;+X1c7`-z`~PI$!a-!3sG^S@3nOOMdY~k=ok|m(S@tgoecf!1H8@&eK`?wdseSKk_RLB%4-r4Cv?)H2d&I19P_5O#f?fd%J z)%~~?ZZn#jeuE8(pVRxpXAfny)tPMDml;sf-|xYC$G7eEo{AERLH2I+)gO8c=rh}b zkIHBy+7oWAGuR<$ym*#?Pl>`0_+6Sapf5*{CjZYn%5nwg6AD3O$KSjDwom6F(Qat8 zGOgn!>-9KR-%qBHT`%)??-~UDbQ27W`qQTyV7MLfnJb6c1HnV;Pi@94T3g*$Yo?oS zE1)ZyiqeQ;z=0*uV@MdY&E?O2!I*}RO;n?QkNV)PP24h-87ABfFq*6yzKvz!*3;#{ zIRTSj$vqg%_CDPyrabZ`2AYlrGyi%@v_e-?`~x}x8`W(!VsO%Z($;Ls!_dXdi&|r? zDSbDRb|dHR0IDF#4i*cXlTT z9Vi?blxE(MV01rV!NpX?dM!z_ON!Y4a8mEy=1Xe}8S+cAR=kUiRpwarAaET6gC;4M zjuh7utyBS`P!}$l$Kxtkvruwty4t~9&TVsC3(Vw*9IV3kw>G@$8`5ge6~(wJV|drk z2eNw;Xh-!bzbaRS*)jMyaD2)4J*T)IT4BB$ZzI5+uiNiMIM`{rBC&I4h}UQbA`8zj z@akQz1YUYr)}El=bA}(yi0q$tZTVu@8cB4}Nx$~k^W5C%gPod{)7YILO&`lcQ22TG z0$=~g1o86+I=P8VxxtgwT&;$@*H4=-_o8+6U{|@cH5kzfe9cTzfS7Sq4F~B^3T`oO zap7dPW`(jC!8luJE?$1UhkYXpCmlb>&nwOkf~{iZf^=IR_17J{prjdwOYD#Gw&7mJ zP_vpEO*h@S*H=KLY$>n_%7eI&llGRxnd|Bg=4>2i3JSf*vt2PSc^M6KZa|@=*DxGU zW=K48U?6g;>kk0c1{!zc2t&?Kd-0p^T`!)2i`$Dq$ z8b`PIvhqG>y$Yj(tfnvV+=ac|gh46|x#DUod0Hy1!;hFSe?RBt=Dr7Mt=Wp?L-f7& zN3T#9s#sQ+%}yf$ogD1)fvqot`KaEdkZ7a|I|}UJefK3Z>U67>+4_)>N{c}-gkb}8 z@TmQCsS@c49B)_RMqS24E^L8bFoTl{B)h*z3fDz5jDI4(C>u9AqZMVd$Pwj3!KQCl zpb%Nd3HdG6NjyXojj1G`FtFoa-zxoRUedagewk{9VDarA1K?fuvC>x(?3;dFCtuK= zh=z}kAC#-|_2`|O9%Z#Jit-{Lv&t~Byp1?7$o-oXRhi3)Cnl++u<&eM;_lnI*5UxF z%InA<4-a5;a10iZsLBwkO%beZ0jI@FEfO;&*1DX?_LdM5w!R=xoNhro zf&p{hT6vGFOL@ybcmYsc(jxVF-(pN=>%0!2Jgv5&3fXEZ*GKks$$PuCy?OGVA!%-h z@yI)g1hmY6aoEXRKG0Gk)QR7M61fcB%uS;|vS4=82WAZX)VI&6@V@YUh8WpuYx}ts zSsT_qo;wR)72J1 zhMrkbG<&3j4rj?s$g6tm_g^w(pl|>-ws#!pTsK_nEI}+Jh1~v(rNsK@Neej*x2Yt8 z04Z{Rr;aH5=2ri}M68M;MIqE~MM_hbLBBmRCZ{8DK5iZ`eqM#qs&H>6;}i>yO}7cT zChIMfUuIW+iIH&o`;3OCWAp=!oRX>f|6B!WCL|}Z=W*pTI0uTRLLFYmAhTB6QDqq@ z8&y!cLoHZML!+z7@O9?%<$CDc-)I6>&vc?J7H}(<8N~`y&`{EZEayHEPUqSLF~4~b zr{1moIj*Un2zev-oaE17$F?9}hez+?HC9r7S=3v5nryZa3GqF_Z%10?E4gx#2frOW z4MN?vI}st-z7EcM|y6(S{8I>ppO7X?lSza?~Oh z?-_i+V!Yj7V+9{>Xdw%ZY@|nI$PPhKk2n}Pu18MU8nYpmMTwQm&vQ@g9$gIIB8+b+3bkXs1DL37ybmjK#MpyJ1^0we@sFi6@&=X z1q+p9X95_~mL;l6$*AV5uKam1ks>gr+Jwe?wjDer(P1{!=4|6RE@}B4d@evR^4)-# z*=jq;xK&9?P5sCqhF@xQoRP+!kHJQhi22v`Jl?HkV5JelGs%tQF$jISjU3&Q1)Wyi zZlu=RN@YD8e;y|)=WJ`1=v6vBw^j?yZXhYtQZhEv5fvX_0+Z7&7a#0`4=c49OO33j zKh74wV0V_}bfpvP4GA{@#2a8RxA*?dDDCmGboD~~H^K`;X8-dpd6)6pG5n8i74$H_ zaBsOfv+<4LI1%+o%r5%k35&x6}Rf1TRrDEf_U$@;jXIEI=A6OkpPh2 zPSxRdjrfe{6fchw^^PR(3VL2A#OH}7{%9i>Fo4#WdLxX~8j9Wh!E|Yz92dUi?s)?t z)?YdY7}aUY;)BShDHey1C*5vf`qk{STJOR3#IPz>za=!|!8zyUZU=v@j0P9-EG!j( znR*Q@^y#JMNpP5vOf51Yuel80KDB57xX^vfo(t?BFyru=l_YzIA9mfd(gg|a99@R{ zy+f54B2k%9h#c7<#33aK19umQsg_#DtfCG$Z>! zVjM=<;0Vb533hKZHk53>T1;Efd>KZ_Pg$rLj*7iqlEp3fp|DDPyU7EO!;KmU88`pa zHo8Xq$lY-Ui;$htz&h3$n{5qh(2c&Y3t|Bo;DKl>$Qwv9v28d!J%zncLHv&g%sHIo z7Jy1Ol#YH63xcAVmCXrB1p9Buzx!Qz^H-=`ab}@c_A<5-bM|g5No)P+EBgVH zHv+zgL-tVvks2?Y+q>UfL%k2;(a#-UxBCJNdhHRF>I?@8KW21jQ5?QeF|$3SjJM56 zXTZtog$x`DalDcg#yxD>-RLhf7w}U#tA%f3bmpAasL#=lm@I$0JD$`2xovlrDQbkLe0;BjMqC8Kd z49yev^YfKO=zjMpP)m66*^LgPSRmgq<8stk%2lp`=ZIZ*q9Y5}+KZdkvV}#4V_0hz z!}3xMdty^{N!4ONdK3B_9PFR9L&IwEu8xrp zTQ25R>O0f%qdM754@apTVy*+X?4vg0jEXp6ks z0vsN9Q8#tx(PZ%a4ysPSMbI(>Un4j$R35NEg`j z*xWjT3g{K~uGi87zLUFY25a?o`X8^%H(R#4Te`U!ra>tbV76n&sg!8YIW#~ zvfY0WIIWR>tZTz_6N?Nz0yJE_d0CX&E)pjU^~$@)+Iu1RMs!6J=}KO(kzD15BO-|m zQVU^@k!oX#vvGIl6UCZ%91#%?mh;!ZF=8$+&F=BrP+p)=^^bV8|Q}1$&QxJ-4R=T<9LKe2O&v{aUf6@OUY{QXH?Z;z<(Ml?+sA_sNKE6P?7cC zlN*4LhFWk7njNCr#_MZ)DdDB)z`&{GyQPdB|{((pj4^5$tg7h}AbG@=$;$Be2^>8Xd^5J?}}{?MBfy zu??Kw_zFX(25%tna)y<#;q#9c?KJ9Ne>`1l$G~;TjF3tvxU@NJ>oP^RD%ou_d+pj9lETgUtx^~Z9hUT_}}hz=DR!EqeDR1(u0xq^zV z^L!`4mcrTB!31{315Rr74EG`?sMIU*_X`T7L5%Qz5$u038f~9(p3eCacNN&}IUpx< zG9wOPxnx5+%rVEAnTIXE@+tR-B01aY!Z1Ww+qZBMb8vjQS*t!uMMaZVB!hT7O73RX zz+1=rrL~bqs70TqkuO$g;fAVD_jgmSFgu?k^C2pWChIpm{?)A_*1i4{n>UM{rP~U2 zJ&d!vSx|JaxGLSwaMYFQFUhXbEU4Z1Yx`pAUX@ZTSl?HxzK-)dmKz2gOSfbSLp#DUMm(wyzP9ewmz|$Z-@;0QOGP)o&uy& z{qO{4rs~s`%0#5`*Xu#nDpIhntyF&--b6Z^=O9X{mZQktd{Qdm#l%GTYvmx8m2-#H zPsHrS%!tcb{y{rKSQh8=bjRYf+xDBu z9zCQ92sux*dEu?$2Y=jG({N|SuYPmu-^2NIIC$dM=4r=x-{vVWRY1cr!$$p_?U9ki z@4O6!>XE#oD+iS^Lsj000%50R-A7K%6JPC2T)i!zo4(d1?aCbGfFC)(TYw-E%s}=< z@RC}I#^a1*HB&GiPdW?z>gt{+sWy94e8!mvkm^JLE^cN%8%(EYs8kvCdV+$k3VX=f z=o=hg6r29uz%UGchdOE)40HNtv=>=-mn70+j0q2&UUV9HAy_vUN_qNE@#^M{?z-Be z4jVnxvKr`BQW~xx4HSYN)LFPPdTsLKWC~zPc%+VUJ&nO^X_*XPf;=d9nCS)CUIri8 zO&Dxcz)Fvj?;g{;Dk%{+%g{-68-QI%6Gp zybq4=o{8oXS&U_R=*y;2sX~)HKsjE!2h^BA!@`PW^SHzzqe0xET|D6DPo%kInd5D(P@%Do|LqXyMHvO!fx8Z08i83AEmhdbt zvIb9eCb*Jvx{r|!q*;?wRDx2=^Eldz`-b0YtC57o{KMgC98I-q1;^yxxadT8ER&Tr2}dTcZXabj%l(IM zXIC0?9n8I{JW{XKiNixVHdu**NWX}ps6TCvha1pAcN@SVC#r@N0V%3@j{9w34v2Yoey<$)Qhn1XsnNJ3)^j=~})8VwCy#4emi&S%&e{K>OToduD7^Lsi>t{PEOM`|EM1Q=n__Y)Y|mhptH%cMF($ zZV;JXW54;IRf6sGuG`%|*fPoE^mGO2yHfY#Szx~_(S!N#-~i86V;W7^5l2%$P?9-q z-m1ou2dz0oVH-l-FwrNk!Y!vVMIJ}6dSbT=ofp2$v$DgQ-2{@x67fjv2uYbv=|S~+ z1Du{z#&)e)6dPR>LW5#KZjpQ z#c%;#CXj@s4dFA`5Zbd7Vd8Y&49&HdVV-NXM;l{loYVLSg6GE!Zq9`rjsgRBf5UU0 z7qWP?6ZOb1c4+u zE(TK;6zTJ+^W+ZpMcvGR8b`iN@-rA%T&w2jfdYD_L--IvSwOW0-g9r3FX0 zW?34#2+bQ`0ccq2`fBMBV{G3vo*2#jqZe?>W~T6_i(b)tp(a4&0as3zPB7H9sDp)t ztk`h*WgkZJ%qoq$(*D{k7nSqO`~{0}zK>5zmxhF1gF#5= zi{+_H!{J^SzIqgV{3syH2D-HSi*dInE&L^gUMr}r?USkgsFz-|30bOF^K-+fON=IT z42YPtBfYlfs7R8{laULUUxt*Z#+5$)TTcXIyYR83|NZqj@IE9%O%*~c_`ldAx>AA zu|XNm6DufHx^}sb>X#353tqX9%sE|JSpx|#JkP3WwO@)yVV(0ede_V>rb*+f&;yjj zwx{w|`^l^sE&w8UEa0 zwDG73o}nPLJqVk`zOhsqcZ{LUmfz?;A=13^Uf6_N-9OWA`H;S)*+XR_js2 zx+3ldTL!*u(&_**GTNFPD48`qoI8K+8UuP&M}~&<`vV{b#H63Ew}SP6jG5Us2P5nC zCTZgDUUq-d_%UE1kmF-8F^C{6EsC;BAh<(5R7l47Bb89T{#vc9?(1AKAiOmSL?1=&eyIb-*?fU3gyf{&6LdE~tq4mEj34FRjpPP}XfKw%GB#hV+mcGVhQhiqVDC>Ci;S@% zQni0laIRADakjY6F;O4}VUEpSdRp!4YpE~%MCnv5f9qFO@6GEwPSUSl9i!QfZ`2q5 zu2AYNOM`B^qE~5|vfG#Ig~cH)EPqNQT@o%Xx}|H@s4(?d6#R!9W|x=R0GQW-U^s~V z@e&%o#7R@RYOPjGxs3lbh|N|jJ{eoGF!34^L+sEtj;X@K)3hMLsHpYeAw^7^|GeQ# zc0r!K%LtTsQ^Sbkse{*qweX7VXA`AJWw-Cs_8XMPr{22K3RJurZD(E$8>U!4L_-n9 zffBq)ML7yO?HmgE4E^mck8%t+lwvY=efK4mm&Y-T&0YW$)XKD2sIKT8nPH!sDKusaoT=zmOtLIwp;|JXlrr(%Bbv#F$=nD_a%Y8JX_n z&1~tZH}+_W=7A}jKRaqTyb04rlojM`qG@EhBLUsj0;6@)W-t;)nzjvqIgcWY^&&*Y z*JVZoNI%55O~)=Rg!VD7LnUu84)~*O?B>aSSYx51B)Mu{=J4P#RF4)~O2jh-GW=dY zI0!C2b(r;otArG$3?E8z{JodhjL8zYJ=iX0C3mH(MZ6OmOW&XMi6o7t7>FnunlC~@ z8F4U*#N}(;(BO8X+Yeu4Hj^U~`o)Yb?e1HFDVfL3h)^58C1yj-c>Y)Tf%?nAx zT668t?@Fil$ooZ^g0_ct-RS9kdR4HRM?^thsM^MLb)y#5Ix60ScI*{p}NnY$RFXysEZlcO*t`UHLdzTPsK@_x`UzvsbGS54cw3dHp~auMVF z5BiED%z1BDTmGlbFv-AcZzZm5#GX_lk*pU?#wPB$77)8&^WoNAKw6c(-l#(spNC2s zMy+;x!z`vpOF9fgYatq?Lf`19J{_=IGg|3e_5hjxU-D|yfQ3K=L#k7r`g2DY%m}f-Rea{ zC2^bXIpQDr6EE~n-{^M3**C(Z+=(u~$P zYOpXcdJ{-?I_7YNJa>uQk=ccytQ$*`8Maoloz^^3mj_H$QV@q4kI?%EoH{7z=1uay4nW_tV4ja**T)WY8q@VT{ z4nEFS9e5Ju{0+u!(Pas&N-M_*i|r9Y9?tM1o8!T2gOvssY1HOzpL8_68j<-c$%`vI z2J19L_-pLoOWHDpr%4{>f7w`>tusk9R5USWF*Jog@aTeW>4&!MqNAn{0?~d(!Q( zvP?7K{u7%&u<(lz4M>M>^pGuxkcWYnlF?^jcp+EG^5eoC+ovMz<{)IbslZ-rfMyHW zsr4TqrzonU#}Y0L7psZ5Qm)P8U0f_LM>Q$qG$)VfASWf|IsQe6t?7~wr|ac4up=?@ zEf~N%(97fZp@VFy2y7Y)f~F5(K0i$kztod4Ta@C;mOK~vi^3=3RAbBVYDtOnaCIDu zhH@;;+1^u)+3EFnf~V^j=wHZ*QAos?m9CKT{1QJ`Y$Rh=2nf*u6j-*?m}~RU2Yl!m zJbcJQdpx6>)oKrBK4>{ygT;}kTl~YB-IN&-6y54@3I3bn=l8>aI9JeDAOeHd)aT8+ z@2)`_>Up&4@-B+I^H1L=@y+SLc(#avKxQ9&y;w+5-v-y~7-Ar9TfV`CrG{XrqQ^02 zBC0iJ!DvYOuei=pKIa;ButBq^!3!g}-Q0H83N8VOB8lK%oLx+wLbmvw;zb|xFm273 z(CYDDNPoEkA0}T9yuJwCFZWo!2;sdzQ{-{mJT^p$c4NiE1(H%|xp#ggMEzGG(d{@eS2m{j2Y8t>A_4iKxLPdPH z3T+f2J1VVPm5>1M&;5jd)~Is3jDafG3?!HnlUl#W^OIIZD~KfvL13h16qpTW_tqi|SZDX4$SBq8sgK;(3__{*yU)kSmVzbLc#0c!3ergWH6 zM}~Z4#pliAIGiiB{ieD0*txZ%b5ugq^2(*o)GViWZ}R93#ScA8*Jt3NLmJ)f;2M4^71c7jval;Xjp zEW&|l&vq!!Xz~h_A-$u4ovrro%k(dNx1x@2xwz+TN?uWNHbg`yADH2b<-H!5KLn5{ z*`uJ5d;*8Q+X)d~ZpVpk3KPt9RTqVOJ@G(n47omb#L{$n1-Au#gHCRG8V-UfJf|B+qb@%@9H&(Fb}M-(;aNM;Ex^lqwi&U zqD=s{SdHq8|BV2>Mid;JkdiUoz94vU1SQ2Ge}U@XdycZgyG!LC2qS;p-(PSFnkC4C zy9YmcTkR*FIS6~;nFWj0S-%QrkL|YZho>?XgK;`{>gis!^5i1|mCrx{l$=~JORV-} z&WKA%hxJ0GrLhQ`yxVguY;<`v3iYjB24V>la@qfgB@)CGXaq)1TgJyELg3VFs|}B^ z9h0~acAReL-Dpy!uDPy^a72G=^a)++$Lj+b2Zx$Q*cpPi#4?g_obl}M*9(3$Gjnkz{!V^dd_g@ zJKskPk({vC>Wtmx(goCSnt{1eIa^ht-U%AgFxqB-&Px-c~F8?WW2CV2dycU7V zoW#$>S*sVCm(8x23oHfw5x*F&@28FCE?VBy-ST!F7I?Rmg1cGo0hjr9hcT^udM^<< zvbCh1Df^d8(|>qf%57M;j!>3vTXfol-^D~F4C|420_qOtYvBLVJ%sFc)+#AD1dthe z{dTtRPWdenyll0Hhv7~f2A|p6A@lUIZNmy^4@POr7FzHKM=R?}6>Y3Nsld_djEwcH zJ#Xi{B**=3a1W{D2mpaoh%l6KB))`IfEN%+NRGbM$J8>LUpyPBMw5qwpm$#Ng-~yd zyup%4wg)tf=IEyDUw49j(}ChiSPM+C617u^^PWasAOPr}Zq}px*x2hW&AAV&cOV`k(h#X=mm82OPU=LbZ7-PX zdr&0Zi2C3F0wx>;o(iWhNd2i8)cqyo@Dy>@50iCm-imed?m)!X-px&{%|=VU)k@7O z5FZ7JL`X;X#OM9iq_34@N#qy~Khm1&Ktc`%`Dhc{fq<89+w6%g*vLzGqa7Vbj$>_e zC;~{OL7%liFz0XpYY@;2hye>JF!;v6=5t|o9QR9TJ|Dap)=8>XP4Mc>H{{0HcftZA zns_o>M9Nt@iAHcop|M-SMnxs9n%Z@|ONsH4LcSq>X#W%0PYimNufgxiBms{XkTSKg zm+Yo>`O*x>KNbF(m}w+2!+_0W%+%p(9-C}N2*YuaQu{-K<1YzB5WS9Z`$mC+D-4Zl znMB6(4AZpc-H!iVE#rC9{ziWzwy&*nDdOP9ldz^D6nV0BXn1wR-hS71TUtHuyfpz# zs`$xV{{!{%)OIjZ%$ahtEh`m}PM(5$w1@f(Yj$0(RA{Kn#}7b%GPxidbkp_K=fN)f zum8!xF%jLyJj0aNcJ}A_ym-#{f_dmY6ga`|CFS*ijP#Ft&)JR5=aD*O-9t2Qd;`=* z)?_5;{z%FG0tfx$7Cjw^zB#`BW6kr8oFkrD=XtbYLnfaw-Xu zgli=n4#Kb0ma4(%SQWOLMU1uZ#+Teb{zfYaad9M!Bd(Rvfd`fbr;k;uysbPuoR?w8 zl{ZF)U<>;-X(xEIo?iG0mpD|LxwvZJsa86D`ZMph04y0AF_fmNy#DoeK)DaUa7q%xA?KPoQc&7S5Im12i^^*6dI-pR5kP}EZK%l(tlAJ;ej61%A zKfI|!0x)ceWorZb#jPu@!yJ$LbeHN%ZNBxU$dHn3qjz%{_9hS7o3JUu8J(z*9JDfu zgY|%GRB+Uzag~~%nn??J9z9h|&VqrTqBO93`JKVIN0@tcGivxZTR%!KorvvTd$2cG z!$QO<^rvHvv3cp?p;{i9Uy-(>y1EnX0ZwX3);&;e3{@e+9WGK^17&shH2aX4l8bF- z*xCah#1LNUE<--U=#$r3_s+|s=9=!L%h@@R%Ql|*qx-*-6k*gBrx2%9ec@SJXOanU zh1vCgLZ<#hzuw8wii#Oj>#sh7yd=~@eLiWDc+WP#t}_I)K3SF+h@w2rmb{JlTWv}5 zT~#R6+K%f=O_>*^4t>-M*06z#f`RcF%K$v&JE1ooOvtVLUn&o~{b2oGKl%9Z85kI- zwA}=J#S~L#9CZws*SS zzYD3=1|9*QLg+bT4g^qlU+ut@&oIR zQw>(%;oTeExGbNJg1K*)%@;jSdwe^kAFTn|joA@-~=4p0N6H+6YHWNY~X1GDKbhe*=c?Quy(yp@|TAlpu6pn6Rvkc9|3 zbuj|*6h-3~m|?vo=}K2gnH%2Wxen=rRT%7M-A-N0nrmlku9${a&4MeV|MGCKo98+F z4e4*!HJJD{K2sfdTeFT+)1nfzwH+N!YfF6k!4kEz7YO>Z!C63I7o2aKj+~(-!Zdf48Mzr08`hm zGL=$$zQ{jPOS7%LZD3(|E{h0Ph+Ji;7ZCBTn0qjnO{?MdE8_eptKP&=u`2HZbo&l_ zu7$B_SgXK?A}<8l^K(|sapVHLVtxf0*2TdHWBHP@pI^w01F zNf&v_bee|cmBi1P3e9yE?o^v%_CoXZs1M!$)KRTm!|#YVfM8(|B3HneIRRI%og@AQ z6zY35z|yD$r3(BL%6(hQn>&T*%|Oq!Jy(^A+)&SrV^lmvXSQ!a5^hy-ISqfzqoe)$ z!?b2fs#T{i{O@c5Dv?571XzQIAhq(y!5w1z30p+6Z$o-O!I`ZKj-_tKF+@>t{i9nA z3XgQ1FSDvRwV%pKY(y?SZf-CfU7}e?X_asBZ~Pl4SiFgXq$%8cFR*K$BA)5h2gH$1 z1Iiw%xHo#8UIi!*;1w2@=LmGSx5wg`$yhwwMH16q{(k&UE($2jEY-Kl{kwt2;u$y$ z3m`pk6lRb(m(9+;BuU1#KN&(XE?WZKM*W`zb5Lf?S7dXi6W8sd#$bK18M>_vhc^HO zuRUEKIh{3#Z!|rP6nmD9(J{%w|1Eu|K)=wl&FvT(QMXli!K?2su{5tr4T|~%*%!Qs z1xI(gJ&d(9=HMTm8=aOQj)gc4m9!XJ z?KzP`l`bowN=@G%Z$wE<`x_hw2+dkRsqSPGslJ}d_x`}Gh%3}Md%!P6svUTH_;UB~ zr3@Gxx@Azo*U?fFhNNtdGquEyPa+p?+yi<#4PxSReW1!`rUvU)2d5>4vrV^fx$g2= zK4%AbE@c`#P8N@)O9VARMC2P4Cd>+ShBi&Tx)yT2H+)RtS0;|XK{bl9vf>`G?v zP@B0vQAEp1JG#2o_3wS2D8){w6hf%U>-fR`gdL>S5=MWN`%<0mr1f%lg)^Jc8|iU5 zsAp`!enW2^4sT>s>UNVf9!~=Udr#@FUXZN6aM1jBrjGOHUVY?t-GS?F$Pbj8rBDXP z(wKU-&dVeVh^0B}Y8WJOGC6GXMUh?3mY7OGAdZZcIIhsCcbL+w+NeXkFnaI&uVY$`Jla>)mw*6J-dIf2{+J(Tn@xa!BYXIXImCrV>iyQo@ zNXKynd5oD${N)u0S%?VfftWOD73&@P)XxF6gvYLPr9Q7Hm&ZYtP;h^!qrqInea=DP zPY4kh<~}><8y2U9;qS}nb8$HN4Z#;Usi*eB2gh;uLXT<%x}o4Jz4*A9M; gQhEs zF5#J*#s=r3Lj0TWFw~~un}(}5%WhimyN%D+7%<~{UE-DQlS_8w!~mB{#vNPIV41i$ zw&RMJf>ae%Bvv`>hvCb)>V96^%c=H(>^0PY(7)}p(1*zb+JX?|+N zaXI<8lfO#VQROirIiv=PUe`hFn*8&fYrB6FQv+^jS7Hxz*xbHKKt{IbAniWoAxA=D zg~L*Lgin%C7EI}e_V3u4OKtGH(7DMDo6m$CpAyUL{e?^4j4#rPmgDb9v|(p05_WZq z1VRw-{glZ<^Mli?9`cNKi!fZ{LSD%x4 z^_dQ@&*CUZkZY$(k`(oZ2ZzO_1G`~!GY3-Wv%xZtXF}bIJ)O-$d5%7r?5kOMQht(F z&d0II%V|JMjQ_Or&8W5{11HJ|(4yms#}x&%3>}IZn6ER{GF6HjzRAu9}PmX#R{am)lUUBN1)Dx1|2Icvf}TDhzL3N2iDg2(;)i( zd1$NkMEwj(;nQLM`kmnzcnBY5Zt!qaAdQzNq;7?_)y1IDx;he@LbBB|gIR4CF2bK51LWruE<>zjlenVjL6rZ(D_c#PIP2jO;^!r2q9b{2_A&}Co?oZfu{ZO4yA)XKqF zFn>12?NeZI=hj&AYb$JS)f;oBkHHarCk!p(fI`J`WAdo^sTSfom#U4t-X5q{DuZyJ zzf65(s#+Lqscj%7#@owTa2G)LS-hC(=ECXK!?0mWceHKa9f1)pa7;*o|Jzu2<}8G5 zBif-$=Zv?u%7j(qPmt z=TL0SK2#B{MZ1pe(X3k+6dke%wK67aM^Zaiq)nrMU9nooY2%I3rEH;e^gtRLDcrN= z!`5N#(Ya$+bQ`rDZ6~inQF?m@Q+ZOvZCOmg&}r0c1qh|wM66Oivmkj<=hvTGBx?C7=8#sGypd0IJj{APUS82i>AVMaG(%aBZF zS$;BwB1LQXnw-sLu`%0?8+6bZ#E_d#i6QWyBTChx`17rpn59u2hFAWHaLt_x)J$^TK38VQI%!SYgG_3=5aAF6#WR;0rR&`1*kB z;FTTO|7J4&1%8tZFj@V~rkniAEo7Ww3HvDy2@zs58E2%3J0WHQcBq{)QrDabhE&yaD(=jBaxFO~^poFQ>c zBam?hFBoQb;eeXY8ad0KpP7E;9ka5OmStBI7a9iWBsmM4(BKuVT z|0JPeLdOb$_4n`mS;@E+R#+i``U0yBxfOpJJS+Dj79@R7e9LU56;@bbg%wshPTWrX$T)Be9 zix&$gll{!#1xc4KT|$WxC4^b>pOKJr9@);lYSpU3!Z$0d_>o|fnt#fM+zKnKu)>PJ z2S1*WTW83BIR4b4&VK=THlG)D{)l6szZX(2>a@a&9|_(wnH6a(A-BQ`E3EkciyunJ zm++!a?(eO3vgqlxTe6VK`HeYy-{o_aAOz_XJP|-v}uFM~dhE3X`Yv;~r z(W@=?T#FLiKS#jX#aOuQp81ZU$A-Z}aqUAGw*RsU@4lFDS7F_t-nbWMzWvLH#)RfI zFktmn^F45Eau+n~y9yz%Z(zj^AG7QC#s`e**bYliJVJD2IF&XTu}}7+L6!RG+_fv( zw`qwPdv4?2uEp4P^(9XJx&XH$%pOxA7*o2Agy~#PGYo2c2#cYMD6F5o67Nl}e*z&G zR;4;xckYVLRDT^ibi&0qUrqe0FsNb>7M*CmGei9fV@LKw%XY0XZR<_JDf-<(bZFca zy;^j`b|2G;rm@8 zIH4~#?cars2U51JuOSX&JCDP2^WFc3w-{8RD%z0T+O%#hm~L4~xfNDeVTBcc6$T@3 zduYW^i9KshA^OEDTz+UGND%>#@G>L@fwz6|F40tNk+1yl=*35Y>>2q46*Ksd7Xf+= zRkG>wN5TKfF%;{*6zex`z|IB3uzFk=w@6 zI*7{;f=mGgL}B&(**J1BAe92+nJW{{FE^!gfBzapg@ohcy->PKz_F7)C|th$f{PJhFZ|#a5GK^OA=SHMxiIBGO>xDmw8C{Vs6D(F zW8ud2*s*h`VDD`;;reS3iHwlY?~h@GTw;WRe&18|5mVXrwiHWRbFt{&|qxNKUEi{r6-?`KD)9Sn)^TNu9rkkc-5Sm=7NL znIW8dXTJVNq4CF-51u%)z9%+s*(W$jq*6#Je^P}4b~Ym1U)}?QCho(rtuxW7-!dX~ zt#B%e$ljG1$lGKVg-~Ny?H0K6gEtuwQ@&i&rJ*YkBzDfiG5T@A=g_+CFT(Sn{j<3ul5xe|HbiP3|4qDj|Dc$TPvot-_Lr0+1Q)j+&6YA~%>q0dIN{&hd**Wu&yoe`fP zhHLy2T=36^s#z!jmqN%Ba~pod$g@>whM~PX!9B&cluO1>MWJ?+Q82S(>W(RM3*=H9 z$9p2iYp-R+$|>bYQGEqOpF*g6OV~W$jDhnn;l+^&XxMB3CXDKjrtOB{0|kw}wiRtU zw8!9KQ{W#N3ny~BG`l0l%sz}G>nEb;u$35GzYT8CnECGTaFpn_hJ3_hX#G}LJbxnw z_8*Qujp;o+ol~eJWOxuSLR7Q_AGACu{&rqC&muuyB7{Ur z@H&zDy+6qN*JW!`F#b$AIG+EV+%a*c{^f%N5uaw{$jvCmeR4~p>u=8!hbRA(ulRTg z9z~14J1H0HC{cnvR7ZDW#E^gI`2QSC_5LATf;Xh&o9aDTo*H`pWOSblBaB)xeCe6- zAI-NF{}%jZLM{?XVdv-odwYA~r<8wwl${ww#&t=Ncpnx=q+ALcJ6qBw|73S6lEBuS zj)S8k92`v7HlLk-_`g6R(IX`I9W>N2eVIEEZ z7;K2ptr^h{y?S&*i`HXMVcc3|x1sbSOvKKpjz?4iF;0UH_F2nf_M%OgQz-${m+ptH zjgmSw1EM42Ap39~i+o?8a_@c^+@~^>By%nCyb7JiW7FaJxVhl~#c>+_Hu$4vr+R4K zrZ%=r>y0e&f30t z(_!0aHg;{IK&+0%Ta7&yteAz&&-dYO!I2m>x*s;oX@V6imf`xTO?cp448te) zL5)gT@$}FtJT5*4qeiixM)+m!Dm3od3$@z!MAvQ;P^(O7jPFp!oF9@24TMsK4IHU0 zJ5pPgn%fm`(h(OK4N>T03}1K;D|YV0FROdQpypX>BQz2_beTL0`!~17!tooBr&&)_ zY0wevOJ~RX_dMHcKv<*-ou|yj{!J~ha_%9#IK2XwojYR7x~1sbG6&vAq%;PRBj)7| zbn4a@J$iIPgXYUHhDa*jtj8|_u1)-f`#)@ zxoHnHYu6ja(pg>%5h-4*oJC=N-_}6?i71vq1Qoqgmf?usGt0-5q$CyP*o2qcC*XK& zHsrPqMR@odJWotHD{X_)MRUN{=LX)TcSq$K4Uur>8g3okgS=h3!bKH|h&T ztbqB;HlvR61QDCkJHy; zaqHwoyzqaEr1v-RJbfWNKD!LYS{*TROgrSrm~vG;kr0Ut_FR8XPXFNSI1vESqgBFw1lyUu5Sa$n*zK!5BZ>L|B zLr=rVji)jkc_G6sBIa^R;A>%+c&bz)#8bbdq%e1%%Wyhe1cf>8CM3&(-6TZdShh^a zO!6`Lk<&Y|?~xRVR98gT%+J2eBgetdBt%R@LZvtpLb9T3i@Pb^&+jex(v9^-IklNR zJ_9uz?iLdABJL{r~x_dU763_o>sh;y(ui zw~4<1CgVm;0Os}`h%w{FVfff_IQB3aHvDFO2C3W@Z!RxKzsZN;kyeex<7eY(gzno( zIgxQgQUK-;8iLW3)~FF9Fq+aEHGC*mp7i@pq+9}f=THo5(iKl*cqTe!-k6N*aC+q; z+zP?pLdp+qK8oCV?6CXj1C%f1iq$*cLaIzYGF_jP2#uX5T+H`rl^PW4Gz5_=r(%_{ zCC+xxV)(pWC{wDW*~gEADlrZ%M=r&xRm-ty({>E4o*o9Rmbw*F(=r+iBu_C6dOgx- z%_+FKXLN-#DR4%i^AVBswTSkrjH{bQBks;6Y+W`T=RQQi*47SLJjshz2Zccdbwn6G z#D2v2WBah{#7op_-4u4(L^yf4;`cTo(y3I))?gHzj}5?@+Xc|Fv2(HVC|nJV8#G3{7ERzuZA!NK&erL&QK_ANKytkIJ?7LXznsdG+JnMYUn5~L532OJe}Oqnf=Hi)#(rw5rcHu zGO+_}9nukz5iZTp!Xa~E%vrh|Yu2nrog#?{drxd5HVX2z8O?q?kxmg$a!7)km%HF1 zck`e!#zIYU)qidirGJC5?b;xw^eF5c(2!m&1ze1gW}9#gB6Vp%I!FqbG88TIKbVQ1I1;K$Hr2|UHJjjH zCbES#F&?4xmSh!n8&yJK>j+&!9Q2M}V6}lqNq2b?N^~EFx3h;}r&AvsZ14^}r|(Cp z%5|}7_a0Q&yuraeOR;{h$sXPWJ#5ouN7v?c(7H|Af5>Eoi7MdpNRDOifl=kv7+YF{ zoHj;kOWc%1NYavQi3CVV#_@Emqbv%ffZnA9y5}G9LMW(l&Lu)0K+36xp3y4-o!%6N zl|&}LOxoFh61k@)4MfZ+4EyEh>_0WhpgYP2$H#H&>4u;4zicTaB|^$`IUG(+1TT?( z{P{m6q~z}`k-eG)bg1a9ha;6Oj+mL2;u8FF0$g5lOP+}|xw8y7Us}3NCPdUbQIMn< z30|lTsF6#Hz9qFtOKwb}_!*Z+&9X=lhKcM2QVe#!6ANZ!QYn#o@}DT=C0Vu>SqQSF za?c{!z9#akp=%*u1RdqOW)8jZ#fHnAKtGm>VYsc8xA$$^v!mbs;Eb6hg2 zMD}BP->4j%hWVW}jf+DIOxN-uHPaT4Qs6^`Qv^0oBLG6|YO}rjp=IX2P zJ+Tryp5;cZqU9jDw-zy(%A#z)M%cV;H!9YyV2<_2f%Bu65FHjPV9V171Y6faNT)u5 zwcB=L@wO9Yf}qFYtsAj_-%gBLb{n-DRYG)F1XMaL5)(8?dVK|>7w>_CyEk-+2@n}% z)EP(9AWISIwTOv`gvh-)`j<`vjiW1(IyEAqxqb|Yii!I))A}X!h>wm$5*(3F@c^&0 z6eqU?3X>oZ=J3dPG;UiTr+*!S_1jjU?XX^W8KFUZylI9%PsPdz-7y=Nd>&xw)YZse zyAv*M8H2qKLy;|gCPapZB5$SY2-!XpmwnmKD&(rt3Nl?RViQb+T&WGlwgcuxi3GhS z3DME1SF37>JhEMUVpJs5nM$E+t^kZ!umKxZY{c6r6}4MEVxyyp(h{^uh>1%gW!Di2 zuP);1!>340N+KUR;?l`}A|qo_s7VXNADo8GyLV&$!7HS|rfjcT#K$H=A-rk|^c^}7 zTPKYL3baJQz%|%*{4P!{9f4QwEzzi1B?NDpg{!w7;Mb|^kgIYtxHvoD$<-qyFUxFp zA_kPng~hKjBfs)3)~sBCU`;Oc>!QQR@tbjQ;VeX!Z;K*49Y@gXREUc=QS}ln24K?I z5$Hdz2hyf3i;iWo3+@)=s#pORj_gC;%B6+-isjvLIm`o9sp%z>f*O~ohE^3%@tN)G zS*fw}!ssTpm@sAmcC1^9bI<%Cb}5G1c2_ZH^9|fQya-3%7ekezRgrXQJ&gIPqguaO z*t+5nYFEyT852gsUuy?<2PdfbQ_3e85%RlDik zXp~Kln~xM2eNB#~J~G6SpZ)jbn0HH#={MwvA%E{b$S~hmjzu@+m~u;oz*sR}MvAf4 zSAkux#fXlP;um`M%M}H-1WTYKBD(IH0<*~PxN~xRB=SN33t-Z8_a*tI_~(=VCC?;~ zn7RRhsK``e^f{`;vfFZ8dnd!#i!!L_xhzSH;pb(bKadk42?~;74#hG1yc}m@MMQW^ zq=bojM3e*%VnjIgK#tu(VjR0G$IM#_45zrr8MhuQFy=ZbCcZL6Qhs<8;p&Ksm0$(M zxtP+Pa8ZsRCedcH!-VMaYbnAK#aMY;f$^v4IT0{h3U`&_n?qq{T#@62j{Ta#Fgd&R zR*Z|!Wte?aig>vQx1Y%{!$(f#Qs4uHeMe>{Og-9{zgc9@a$T5lJcPoj;Kob5=k`w1;I^`vf($&O^G2yfl)5+~2bw8;HIYCQg zde=RYCHdL*UW`{%ucIH)I89xKg4)siv!t{UVdQY!_U=&IxF0OVRLc8nlGEEDDJD~1 zCsG@^ZO+4Xk|XC~2IqmoS!SlW-8_9E#{ddDn|>!k#ZZ!bS5P~fO|lwuQznqvE3YNO z7lwH^6!3|rwoGN5b5(&J^jt~gck?AB4n>eWRT7M*I`Jo2%%eQ~N^O1mT^STqN0Uw} zg*I>?Sd7RhdQSBbsxULc*nA+vSXCwm!5I_pZ zuTRBrQW$Z|pX&KK)!hX-G?Y&z#dCq)vx}7eRC*7VQhIafebJKNcxse$>D`)kR*3^) zBo`9kIX`+%ex_5|c`^P~lKXg)(Tdyj&XT-^W?;pC4wAC_mC}fOdJ3nXr$P5t`EdQX z4+_+%18;i+w$2%d*=u%V>t#PYKf4#wTosYU&6Y^U1&my995w2cqh5jrdyx!j+}+`o z-T^na?t)i~VW^eQ4N8Sv_=L25?f^_%vKJ4+?NPgCW^5Te2#4EUR@Bp?-xv*zZM4%9)@42 zJ+j)r!h%^FaPQR<1buKonPPUBKCCyEuQ`U;bh#+3JG3T^iy0+n4ZM?SXDX z2O)DB84A^?g=!@Wz|B4fnpCZf;zcskU}B2qd*b!$*T|G9qd-Kw3YJ3tJelEalOiFx z2dY)hg;${lG;H4sRf=UpmK+68r9d_!$Kfd2wm<6TOovQ`iy&9_94Jz}Aadp}iBjol zaQPUIN?j+RW-b?GDpDLdvSgqE!4btu=12Mro~YiaB4S>>fyUkoZMrmqi;WYC6)uDf zo~GGb3tqi?g>2b)wp59{#fu`NcRJ)MQ6F_G6hIm~R}?N*fYL00B6%|-dyxt#naLLK zLbPZ_dCQwE1Bw=;^e9fLM}Ab#Z^XTuuVE}y2NOG%M)m@wAdCHgaD7G$9@~%dl@nF- z8FBYUAW*mtCUq(en=~0wD1RQLqk1e-yfAcP2jt0OnrTH zB#R2Aku$S5a_7qpB~_lciwq~OgrZ09)+kcCC^BXAg48ZON)^wGOkO!qB9}YVc3Dxc zK}C`QrCGW-GP56h@>3!ovSi3Y<#7S%-uB~NymqOC=B3h`Q?)~Z(j`s)`8G`sl*^kD z4jFQxY0VsXe&YcGor_`0ur_c{p9hum=y3OXAjHM$VPc0;P^8O^Y_4+HrOgZvd!Al1 z!aY|B)GD4CdOa!9)IQQ@FNBg6s>Alp3q;6sW9ZP?x_bQ+w`bittQG8&Hx%?DUU@^qi#i#feVywnNX-e4&=yN6#4RHgS(Rw-uVh5 zcjl}pSfc?vH9^pMmPEgvZIPYYP>nie5$byt&voh1Zy42|lN3ekR!7xhdEnxd3k|DO zLE!?~QIYcYJ~$8#*=l1{zZxm>L&{x|+(fSQ^bSZ-uwX%`)#`5|<=h8cyLJs(vu1_2 zx3}5#OK_i|)9HRYPI8tJ3E2=JL4$l+%8^)@!DJ%$;*A_{TIISwZnF`}3j zf&L0Sk?BzdZD^orV+IbtXgosbMj7I!= zTY_=b)o7W?AdpI)b!Tv|m&M(HB5ryVbpy5%2`xeG#EJ64UZgq+))A>2RacD?RB@Z1 zi%>6*9!j+YyIzS=HZ2fDMDW}r2^x}OQPEzEDZWxP%1yGRICw(V$-#&~B7cplC8468 zh`T?qs*Vb_p>iBk8<9Ryf?c^&*^n3k)rzg*;k{Jz+q7Zv(UxDbIrH62wTCU5i0Q^mzM9 zifDHorkB+smdM&;nE^GkkZj!y$WQV;N#v?fQ4KC|pGi8dA8$XXMCVfckka5TTZ$JeAFX%FbUij7bu# ze<{K*4OFNom15LG5h^>2a90gfPjA2n(nKFp<}+xeh;`Lq0@b@8$u!1QhlCJ`K)xeL z^LcC3V`_N~%DYiPH4^N611zEXs^K8QjC&H4rg~fbN`x_GHPD60aVpLT?<7(V9krNP zMh9t%Hf+Vu2kw*kl=AP5OShi=Z;BYtCd=ds$PF4i3;Kv0xzb|SxZZf3r90NFS%w_` zn=yRTLnv6q7CP`mTswXqu_6T?tQ&%Df%&j##bS(ZQX4s)6R>vIRX902`~(ZC`?@gQIZlc>)5joxw{*2`pJY3!?K& zu`jF`R&AIE^}bm+Km(W|IsnIyUqpqjbFgYeO)MBc4WUF%*iuEWp-!r5JIwuME@n>| zjO%mzkdAr1O;$ASKM;Mpwm|W$CWDRi`O6@8TI$tF)`cpT5@vgT zG`tFxCuQKvX5^fu0@^okfLwX=pg;zDD4esPWR3D@+`c0zQ^I~A$X22RTop>>DOpIc zVa!~z20FBFgUURz6LOR+0~aQ5B72l9lg~6OXXAy{{05Xn zItzm*fgLlF4BgqN-WkP8w6$SPf09<`=FR3YW~E z(zU=fYkp)Vf}W*VakxrU*t>c)4xhS-L%U9+>8Or^dcRsH{m2q-4~r*9iI2nGJ?Sa+Ii47Y!RVL5r5H(5`(4 zWD(?(2DQ6%M5k``A&B1$nVmN&CMI*5PmnmGROvh>1tAqEZ>7t?-rS~T)SfC7H<_m> zU9+GdDIIp6d5|ZgX&r%g{=&%U!0l3ra&_CGVZ{|E|rbZSwm< zZLe^7QZBfklA~y)5<>c7k6dWowmq6PEcID_Y*4ykW3-|&wr}75pD|hC{(8oAPdzPSt-ao849?n|MiG%Pcn!b~iY`Xvu#xcFYod{)@0#?tk$ zMU#u80WK1w;LZvI(>XSu;69Vh8bJ9EB+}zYr27I9xmLM}0H&NDqHs)zc}+~1(MeXsUDTnTE6ZIK?Fk0;kck|rjnlI$=CMOuBCK&Ly)Z;XWogy-`I3odd#vV z8JkR2lEHFpT~v!lw{6hjtQ=2>K+DLD!6s~_@@U{dgst&G1G zSw^lzj?)uiR*{lZo4Vrrkz(wBB1X$%I*<5(P!pArfvNMULIP#J55={4O%E2Zv+#Xo& z8vYnZ@fWAT?bHhqiV*>q#fxz#N`y+DMqGLQOr*{q$3L_^-P?wH@;6=4ya5Ws;YiGcRD%FP_yGI08M-z}*bhXCBHYo0)LC zVsoI(8MUZDjjzs5TkHrTAyYedGG;GrxZ%*$+v`CAiS6-n>qteg{Z{Kf0L_|W3 zlc&!?BuT{4gNKn6_69fo!l86>MU~2x;o#whylLH0phyuorAY%9dZVJ_lIYDbB3qe; zD3!?`UIoe^SIkZLe2|$sLx~(V>QMYLv33`zMHN1>i{XhmWkrXCWFNi#GZiEk>L}uI_ z3~(Sa(z&<>eGBPO)KP@(_hhJEMvcxyh`gxZVtZyib+rQVB)=Ico`P9)=w4ETwwd*i zYlwIh(BNP*72<;AxJcwj`0_?Sk%q|HYcYCNQlotVouKe=G@n43VIs}5s;tE&srZvU z<@2Ki!ct{&H`*BBLGNpwf?D*XH0u+wV&aohs!TeW2sshC{}4tI(epQ?G{{LQVWR)} z2TC@nxcO8L_v{+k^h{f^9K{-%WK2StWFRM_R$g1BIcMpoKe~MLS&K!rInTx1qU0w zsotqxauH!qL!|sc7!Ua(gi$?Eh*aQp)D#7bQDVH6uzw@!<qbshD1jUq6aahLryuq!>1?tU@P} ze_F~EhvhnAr3j>~q$e2^&#prcYG*Ao8el{6PEoxAv1YeGHfM1$2w(G}xs3GSKF@-4 zKIk?=Xam5_5K`u;oZPlJEmmqcko?0C@OeRFa zKxHwSO95_lV)GmeXTnH5mVJ)OXqG(!s}|41o3t%aA)6gE{B7&^KxuFRq;e&_8#2@$ zw;r9#IUz}-BQno>aO>#>;MsL8U6bC){;5M{81*{Si*95cI6YjQ_4Hy=hb+-xR?kjQ z*O-F++c%(I(R9%A>^!}3yycN8O&XARk)_@ly_ar4Ik!0BW%^&hvf`PxsHmu)`WGJ` z4-LsSGBOg;(a~S^^H2X05)y+pZ`u`;r3jG9pt%aGGTSW}jDL{UZrFl+ohiZHkZLob!zOcOo&1 zPAf3=x(u=mT2yy3n$8NKpMeN`hs;JyKc&QcUl|m(M(T-$N2VW%#)Chg(2dAej}{q3 z7<*EQlSH`E^UNU;TRXWPgNy61=%Ny1&nU6|oyC^g1Rh45IbMp)#Z`woj#OSM&;A4h zhUC%n##3-$V#NuXp{1J|d9`@?T!v{E74W06#D)A>{G`kqFZg4b*%L|1;Gsu{bRzVp z_=k}^@5P!H0t)h`z?E`n@!VfdaS}ncGs20PC`D#Nsr)Qk3(`>7yFv)WaiQiiu|w z2&BTfQJfBx&O>Tf6DXge%vzKoWsmFMnaZz;lVB{pE4((NJSnl6Cp z-RV7Wr8Y)+7)s^$i#NAF$_t5AFj-l8PmVB>X^PjtivQ=}aYQtH`4;2E)^!oD;wJxX z5KENMgdaqO>U(kH#R1sq5};CRAg30!tAA4*&oBh*2NcGVK5YO)ka6$+BX7^4$eW}wOZV`)B|-qnqY>{B^>Bf0-9b2F|}e8%4MvB0e)|w zo?a7AtE|MF_SvwbUkhBxHwH_3l*Ie{H=)g55?(~)`DOYV45XwuJ3GV9PWWK{1@`XU zi;EX8V#tso0^$9c!KV_wc<};RvSblv$^WU@!QTVhcRhXj6nXOGftJ@GSYgEv0=NGH z1qvW8F7BI%Irjl`=gvj7YSmDxR4KFTmtf^wrBeN2oXI;`2wX@wK!taz;PIc0IXF1m zVhhh{bmx7_dG?uih+sdw#h*x+;WYVS|8_(=cqa>XB-8X z(oZ11#vjf2nP7%OZv2erVR>GKi6gu4q(%azqh!+vBEp;=f2!rRKnauv`{kKr6VElp z!Ey2IBIlC{ooOcyN{jp{DNSK^n0^z0bVR`oq_Abbl+@w@U&M)Vkx1==1#&*J{ zx=Li?MSkt*8JiB7U@CnQ<)1I?NM5WsaC}eSOX2LQM|_YRi(+(GT}m&^ZVO)(C_Kl@ zN(3)LWm$i!clyiqN=~2hCPXfzMd9d{XL?x_yfcVUZz>4}Un0_7OAWRr(F^_=rn=xS zA1bPQZWsK7-9FC)mz|j<=OJaCazaV;vy`3FPoy&16S?NLDzqC4&vEeH|KyGCO=)uZ)l^;%Cp@FHS$Q>?lv&!FDWAMk z5Ir`vF}e_ZaCyw}v00Z8sTDsBxWDK2W@~FU)BKK@y!7B-Bjh5n4Ek7KjGc59Q-2)} zg+WajHMz^Q;g~;VG#-V}3tYS<7LI6#z>6!e)+a3%O)iPiZD*m;v^gm30pVoF{dXe} zZ29zB~+|fQD~SyE6$xeCy*X1toYGj zrH>WqZ!zQg-h|u)(;#j^azA8oO@3~=`rLnNx6f(7m-i{}7+;Ief-hrF{WKZB7l#R7 z#$k!wgp^?zUyCKR%jcoLOo{Pj7z>i0TS9(41&iC)t}OUH7tq@ zKSGvP{QL1k3Hjpvf89ihiD+U%YBJ6+8uUcc69oI+L?WvE+@Mnv8Rzd-M9LG0+%kKm z2Wleb>@Pl1MFUVAv<}74uT=@?RQz%DYoIVhjz5uch7gY_y#&e++ps75N$KBookWA2 zd)`{;*svg?Bcmw{Jr`EySn_5R^2_^B^RxK41R=aZr$GV@x=Cs+40EPxl&v1tQ;8vmS1Fd>SJlHgLPnEa-G_9cwM=kz}hp1Boc>rFY9Ka?U$ zEyhuQ35;g*jIZObru8#`92ewMLgB> zkD$D4uJON+@vsO9u0@c1==x^|o7(&+#l{LN{t!g;sXPA}G*=_EDk&;;>W$**c!uT2 zy%J2UU2|1KhlWK2a{bdHF&L*W-}tnSCi1l(UWUXX@U{=$CHy>HM(7h??AW{!n>KF5 z+C6&_^BW?Keg7B_Uq+bkOn7nQ2EtSc@Huq}(O(ovkLTB~2n&J!H)wJD>4)1*Z`coeEXB49QpbVjvx0)UX!K`!^s^-g+)^qB!oP}{w*X2s*{Zy z)?wHFTjZ+79g?{v%WwS7z$fqnKHQ^pW6h5L7)+$_WsnSGE+{bHM}et#WWp(e{ETh3 z1-o17;iIFZxJrbaZKW;l$uQkBS(h2bxJTqt%=X6Qo(#4ZHv6Mr>Jfuy#zi=KQ-Mb| zdQ?dR+<7a-@mEa9O}4Y9Fsb8{7(P$SlxO~Z3AWRB_pXEL| z9n-xfKgsg^JU=Es$@#T_WG)rqFvtsYIX=!LCH*~H{iep958jO6^7@ca2QA+;aj zC-|`-g}eD@ap%)K!y}})!GxUJ!q>}Ug%wr^F!Hj~a}VZ!C1hv=HW>foT{yKE6G6KG4C@-X4{+pH@k<6l?nR#p$<3q)FpI9kto{6I58)w>ustnQ#9xA~B(HT{M`!%Y3iH zls?tasM{i_?cCsK$LsLF0hayEeh(@AygiA5D~=*ZRy(YmHU^<7np>FfPK;Y}5q3@v zP{`%5wX=uM#u-?BCJ?S}X+E7Eml{DB-(eV1@<3zk6O5g+iLUshTRY*?@SnqLAC z(hD=E3Xw?IfBZ!>5nf&#M?{U=l!$tJi#zZB!Q_cIqz#A?BOq2x%F}ZSA4<=JG8#pAPH6=v zh)7vU9fwgb!fT43%kV*EI<8zvX>!@wEuQ3NDzAxrt0+!B(mjyk(^Fgqy619yq_Dg| zG$dSt2$2Ey3L_lpmylp8XFTPBO*~@AUreGHZz(UILK8&-agHT-mL-3i<^{fyQZD7A)4HIfA|Rc8_D}HQhMwjM&SgL7ju$azX4wF%Mqv_u<96Ky2S;%0u+Sv)JVu0oycbU<~uas(B+Zd+!Z; zB84rHcpI4>Z~cRW?)~}Ut(Y`&EEcTd=L$GF*yH}OLl{3|EKWa-lP#k@edI8XGZ8F%$hU|3uY|CufLuq2S+&Dig9T3S_~gD4FM!D|8r~c3+3a`!#4;I z{y;Bt5)Lg{jh$PTVCdj!cy6xy2gg@o)R<{lGix~x+`-9pxR$8hX9!%b?ZkZ=^@}zcgbCyNBYg_e|ML8LT#wFz z+6wBuXOB!i;cAgkkahEZ6|@Kn=e&xgNG2y=`(5 zd!t6Za=38HG#h{R&@&XxQVo(6)9~Dm3s!1?Mva@JZQJ%}(x8Cg?&R)<54X;u+4%EV zyYo0oyEwooR|=%;9|sA^St`QycM>G20QWQoP!kajr#ToT!394#Houh!giuB#?ew6_o3V$M!7A2Xy;o(~;uD_SyJcV8ITq4YDGlnT3ospWOB6q{a1;S(Ukif2+`-)aUE{P(cT*gfK1#6X zjvUuwnHZqt&d zNofcOmSM|FDQ=RCSG}P6&`HqafD-#DKPM>9OJDL4?jmfVy4XarJNR4*-*7Q}s2&do zOK^_zxrOTM(+(|Ep7 z7_Ysgz%6>gZD|Mzru;6aw8KNCn0;H0)0Dqy_obwaiZJJ*0v{gKfsK}5Q_ZE!wB*10pqhCt|>?gH*Qxn7rv0(tQ852dN-e*x=&Mb=bFe57y4=gOJ>vkluI) zE7vfI1S0R9#JbZjNQqFu@0ma9bR7qq3(GNn{|(sN+Q3E}i7kt^AR+h^Dh@r08ohhL z^vQyX-tl@3Gu%|V1znSwj5(m%E`}2v`8O- z*5me|aQSk`TeJjf)T)Dg*>j*q@m%KouyQ5F?S1pmscR=R>(~oE;Uq_?1PZwphZZcx z%h*VaY&!xO8Vy0K@`+eHZv%z0L&)1e$a2<3pW>nDHsUzEOIAeQLS;}puNdp*tV0YE zFmLcUBxP@cz9mA@YtjiM1nfk=Wq}wtq7S4m)?)qnlqMoXQB&)9|{ zog2c|a2>5jokfF@<1nd_JBAFMfG6ixV9GgL^qDjQP0~I``$>n9w|FHKEmA6g){vBQ}aqtUf%XS8Y248u3G$%-BHPcNZP$Kj9_YlV`Q z19X29E}=FW(5D>9*I$N#$89k05ffzz)<2X8CpYGHGh&C2R4`?d>BU&@CqYKD`|evr zx`~7yi8EkMSq+AlP@``V9X#zQ&XQ`Bb1|5=;4{sX*3G9wUJ9Fo!rmYfn@Ep%@ZdE< zj*fa1a5kb|AuSqs8ij4^Y^ZLw6S;GC)+3KQDXc`EUlCE{*;ihtliyp9j1GGAEu}^& z2Ql`(7NK`(HD(pnW6M1m)I{V=sdFOq7Mt}p(`2s*FG4AGsR0#p@iF#VeEcZIv5!DL z7d>1gVr+ga5w^8sa2{P<^=O<~kMvGP*lNYNA0@&~B8Z-(#56CWL31yIu#KGsyvRSN zHy|o|@?Sy+CmnA?NHQeH zj=A;NM@j+jPkA^%f)=?AICfWtVntNcM`{rlBtx)i%NCRD=^x8SF@?f_jwQ4xL+wCV zq)Gqt%(+6z?izA8LM41@F#R|j&yX8Pp;_xEMrLYL*`0w+H)X;prtHTGE37bsG+Zko z{|Vua2PH0CdWd=*dn1EKPD~py8@b&jNMEQhD&%rRTN8ewTz@=bbynFNnxf-@0KQvG`ZG^;U*Wu{lg*0hBDgE?FWAA`0p2?;$ z8kGU1+DyQv^_#G7^D2~bBXY%~mxzd{gCj(*AKFIR-}{ucMHTtlALosr(f4K-@k zC&exW>o9{qAS+~X*mmL^+IOr6+`54H!flYxO#-LlT~Jiyi_4duB5&j7aFmNtws`|2 zKEDDx7f-mSOK*-P8Ta;$MbD+raNzuEs$Lzn4eh7FSFe{6X*6B)?n9Pg`OvayczORC zhWG4`TX%M2=ApZSy9ru2=PHM-o7Z6Tww>g65@=i(h#i|@q{P+T>v8|)P7E8g0Iz)y zU{4T{ZHWP{*-IgPfFHK+y?}}}E5lZ!N@b9vPK-m{p-ZuT{YLEAvmd{7EJ3b`h_%Ux z-51Xw*NstFbkX#chW9K^-E;mE)WWp)vX{FKiyEo0s=5Y`pUB`J3&c|Xc#=}3)MIiv z9Uo9An3Y5kArstf^q5j!2VH^~>4>PZc>$lG$TOL|54Es&w?#M^vMw1M>=KYn`L}HoL^2{k!JHqH^M}A|7EDo!np?8|<%oIXch$@632SXBF%MC(4 zr9^BMlvm!LI$5eF(+57?g=hQuu(t{YHK;^41CA;2tDh8!8uBfpXB5^ey%v3P5or_> zqcT&NyHDkqNW_>e#}wp`^Vz$S3d#?pNS{z*_j@+=VE-miYQkYHd^~y>$w@((OH>h)pXN!v5SutiBZnu|W%A zH%^TPYPwKnD28H00Nah3jIsT?qDk$JNavs>Vy;TX4^o2(c^r*Y6;R;)EF2WqKxRiR z;*+!_Pu`YOhk|*$aP2J5=xeZT-&z{1v^1~_!i7i1ba-{sN4S1}+ZP6p+z5L29xeJz z#O4_-v1af9sM2J_8y~ZuJ3cVD=YmMDg37#GkXDm~=oHp8M!gn^RQ8n6YcU`Np41AMwP4H$u~<-LPU(Bg~(;5y)2T< zYHBCMh7uoO-34bHJG&Ee7p%w0HGQyZ&K4pHMkGknVMx6s3|Mj>^(q%eT)cU=Co_zC zJz^tx!3L#8b)X`piRq)l)eSk*x?}0O=~&agKCV+eR&P`qN7il<7N3Wa^28<`0u%XL zVT3{_#=h4QusC9gh}zm4;pRvRDls8XcLVBX)d>nYzZ*KG0a+=d>DWDs4lYEh+=u`M z2g(sdq6?2Df)-C@P>T`4a;6q%v8gsDi4j1Iy;&X|ic#IMz4hns8 zJhsGbF;;uZ3j1Rs$TPES z!w!uYrvv%;auI@JMW|R%h3#eaI2s^gnb#o_cxToM zGD*Yal$y;G@;{(*5=LbKjs=SaB548Zio#L*6h{^}J*X=}#q4^NN@D<9407CB>XWq; zrZ5SaWm1F6nMXlorXLe!;jkbgt9eNd3L?t&&2kV?c+1v$Ts~GxJX{QT6DY$6y8aj= z!80QNIjA1JsVsFeQGIa_@Y!h1gq(kDsuc230+m4w-}h8bx)<`s`Tq=hV#3wEfDtF; zC|#J}JtGQH{x1ZIkwoeGQNeQCQBstT&_pp_zm?!M5p-_dtl(H=Y60ipQdX{0Es^gy z`kj9z5!So#E-gk|Ju*|<%U~``8uH7V2Jd+w$0L=Mlv`ni0D74uW$QJaTq%DJXt)=( z;)j6uuH=2oc`@48@Z`x81O)}5PMtc4dU_epoXVkN`CQ;*{vEut;=%dD$X*~f9K7K5p%}~=xdG>IT!&Ms0q9sd3*sa1BSYCXC|$BBKHPkPRs-4#$3=f{yng)} znKEU9ghsH4fJac|uZ4W+l8K(wAu~KRCoy)#DR_A2M!GyDQ7WSjkIz5C$pfqL$g3`< zbg6?6kDnrArAp8Re?-aVwQzs^9Q?ZJ2&Bb^VtU6i2zvY&S*zAXI$0u~J&i=AdW}&p zj~4S6EW^HQzQ|v@1xlnRA`zH?npH{(gN6mKUcExLY}x2ajn_}!qez`fa3=!iTCxsG zW)tDXGd0SU&47?t2XyM+5y8h6V&>A#u+LEuHHu}1e{dpdRW1p~oJC+fHy^uC`eFCY zNKBhD9$BR?F=ys4*mXP@9mmf_gNBu$KQkA*PLLm;DDpD~X+^sB3Yn&dkLFw ziO{riULkMV*pGOpNsG!Qi3yky`ymkUE(n)|k4RgqIr`VK#mv!D@E~4-#}8HL*{?o= z9=#^zr#kG^VR-z(0gY>xMZnp$c&N#Y^tN&ouU-Nl9tELPgX*v)KYs7*(7s&`_V~tP%A`@qnZXuEc5H$yS5@RrYeNk^7HgL-LzF~`#}|)a^Oh~} ztlSQ5>$_lX->gT8nTFzC_Co49RT$ocJECf(JVe%{kny%5avh%gt5B~_3E>EK z6ZE)u_z3o0IEy2P4q@-k?J(r7gj}KsY~8&TCyyV&{{06Krjo#|R1-8So>^Ep=$gSB z*GU=4S13CaUPVx*dJepK1hj2Z9>GtZB1_ep$YA=A18sa54sP9wqi2re;QswMe(4s< z)~|(7k|)c@#wj<-c)Y=e>qd0!Hw?CK*J0MLo3QW39kgxSloZBqJH&_kfNR&TkE*TH30ppxg$bXFgAwuJGHiJ+L3$4Z(vs4V z-XOuUyHZ>a7o$~iHHy0$kxwSV+`BSd{2)O_cReyHO>yw4k=dM$IP*-7^Fb2GNlC~{ zWlwx3!!`j?21=o!dMuX4D4gFR$d6?HmSmoh;?Ck| zgkzFasKr!^uZ5h$6W-i3duJ_E_U6uI-Pe_E2>I%<=Sq+qzn4aiS< z){-*VC7S`O?#XeA+N$0`kD|^Z9C|8+OIjVWDny^YoLFJS&kpXBf5aIq7k!`c!9ZJ$ z6I<8$(+2}t@$L9w2Lowi5v_5A^Vg&OVfZf|43roi4Y`}MaHRKd;amKC8)C3(@+#zM z*9q=EzoN%!7hK&u!u;&dA@0R_%-Z__!@5_%+QA)Q?6wo5tFbA~A44A-1C^r_QZ}!| zFe;<__bB84A24y|qx1j%gMmy(&RbIDITbcN5ljZmj>1eY{pI>%(v#9%O+Pm0ARa5s z)|#!R*h;}1mnH4wbl4xes)$JPwFyRHaV>ukVZP1ru^%>JVABP@W@4RsKWkGMOIm!q zyCocd>_|SMosl|yj*HDjOp7q-n$qF41bvQzu^*nzO+JR6!ip#kPRtD9>j*t&vkFFP z|3)D$w(c^?z+@_8@yj#XoCe3o<~@R04_yn{p$BY7&1KWlGfqa>&4%OS$Ml@#o-(ZI z+LV7wU2uLl>D2YbF<4-dpI|y;zNX*;I4=Ggk(_@EOmaNxtAxL^2E#}}$qFm} z4fvr411&l5sV}$U-w4^?PsabNu>A(2{VjgJ4Njz$QKbbB5oEpCUI;wz$Zz5 z?#_Oh_$8X%_#{t_nkNpGN&NsYjgTSx}WDi8JwQPR*wc5 zjDlieaZ8;}vV1M|&9m&5Jf}p;vZRy~*O3s8;^B6cvMiSR;&4_nZiN+Q(7RwItc3jUz@M=p*P3^o_*ua-E&s~zaQK||1&n^R#;($6;}LRuoCkB2l!!&I{zVDxNt#O)X6i^ zKP$fXqE0KU_${!~7at#QCFE9EVTBd{kMW}kxz&c;ia!l*lt1IlxD{4dVTBb|SYgG# z57wjet@sYmY1L5kK{R~c^q+y5(`(fl%Vlc(Xwq*qK*L)b{3z&k(EP?W0tTJdBr}yt zSZHN|PNOmJobV<7kG*pMkQ{mY@H5?G@2t&P+qP}nwr$&*wQXZ&ZEF@YJGR;WD(P7q z|EIm%yRV~t!XN~MxiepPwvtzT{g8BqUH8U8Qyq72l=>!#E5n$Rg_QlwAl zq9Tci_!H(sKRWkczcqfnB&120<- z6is}WB;8nmOOcxRrRbX5>nF1G#1q_lwCB)=@4+tG_$mF=sOD6z*NHy8deNpwBNpy^ zCx`!-S4Sr@ZpE#XH3=Y$o6*S|^eDEgEtwI%V|_6G4w+S!p!$RLVM{ z3@cHz;Y2>{glwZ7|nY+)NjP5%P;xx>KVyjonPbwH%b($M$bOI>C&k^^AA7d z=GqCYJoA!EYgY0o;^%~)7yW8>A|z!^MiaxM7hd8=3_BKYCg^wTMIYMd%txER9BU09kr~5udVd#FO4NJAXO%_{TJBGDV!Vk&Dx6kh%N1lr`AV zwHj_uQ&xV&t0PlH`iiC&xw*lc*&wG?+xa{X zH#aVD>G}(zR1g;)ZR}Y!Boi5B^wg3V9!%0V>;RSs^LjY;h|;B|}R`v>coe;m_+=uZfYBvpywFFL_FAUG!^iow>>_&mcLjM5ONrUU_~*o?%^} zj(TN`^VXQJSBE$7A!}_0)l1Eg_D#9`?#mdBq^Kxdn@wi-j-4Dhe2l4WOA{aFPe`m8 z^@k0iL~5xp^!R*u%}4KG!os9|4MYWn5*i%KyLZNWBHHsfZF`O;ROL+95k1Hxc8iaQ zA|k|>*Pgzg`-yc4p}cwXp5Op+4<&uwm`g-$o15)>wzF&3ZVqi2%EBQlMN>(j3gpqn z%UpWwWn34iBVKaz^i^)ZGfLxECuY)T=GTJSfZM3qlpL~wqX$mmbbJcOd}CNL?kv+z zY-9bgd0byO7r7MGY7&&;1cgZRI;Noez?$`Y_$aRV577`76hX?QnqX%x${{l4{6aZ( z)1J)FZu3@N7q?M}KXE_op#Mx{3 z(6@AcLjAmn{VJXK@KEA@Za#7oCQO(xVd76<66D`2v5z>Nkc&f``f_;J0XayiP#{gE zuQ0d7&N7)(Q@XP5v_GM*j?uUGbf)*{!0`YGKQ{^2)(fOW7}ByIZ@=-FFr~Q#NwKl= zZ$t14l#W?3gr22yx8-t}-|y1(YhiIvRV@>B@N=hUy! ziuGHL^FA_Bj`Krw*kvt6M@vsmg$WV+{5+Y;b|sgK9f9|D(0$4&l0RN$@W@f@-0#NF z*%R^cy+^}ZZP>i?94{Z8reCM=ypM|J#DX!*Kkmc(6Pp=6Z8Im=tzi1>^Qgn_(zioO zocUu}eD(t`L<1n?#S>1SI)QI^1RhU5$wjcRHs|G;^~_s1k4du^@B#$)?wkj4j zYR35}xUy(0GuG_j$m$8ys4`6KG0Lrie~$SPV9)Q;DWh z0#iG5=E|E0ULBZ2uc_zIhTfuYmq~cX#&BfzD3*!i2l~9j`}IRSMShK#(R=GDMwhS> ziFxr_m7YQtA9)m>n}Q+;GLc{RR+JNDE?$Gqt(xGh{nS86WX7b;v>830{26UO&pK$t zlBB>_%$U7|IdkT+c=9sB67*P$EfH6D5!-AM=f>KI@_Hi2Rw~WqSpt6!D_aL{?3}|Q zQTEfPOk(vp>AKk9qzhwUtHyYw9?#moWsQ-gbiS$~6-wnVrfb542@@tv{86OAqJNJd zmuzGH);F1%cq#vT+ZtYHw(#6Pn%i#!@j9`LYso?~e3~a(VU9)EQc4UJP(AL&g^0d-wl?IE1U~Y%JMUmZ=HiMdxQAjeq znI+Bo4Q0lZV=>D|k0P})8I^N3rcE7)%gghG zRv$;#PA!-}r!yz^Y{J*)5uQp*a#tx$iw;$JcWy7ywI>+k%Qt~4mR!_!)6=~D9E$v%0A&0$aHt3C`x3wA_%76#VJ{HZ&rSllMa1i#^ z3dyP&3&)J~9W|6C%i6GS`5|)DZ9~~=O{iZa2eENUB4q;xD;N5X8O~A>=ji5(JUz7? z|Dpq#HF+%kJ69wo{%dba7Q}i#U}*QAbnV)Tid{D|d)qX4<;H$hQ_*m0%g}jCNWQ&{ z1KSUyYA}h;9h$Rnb~_GkTT7{0t*OR|SC zD?uq8^g3~!ga-eNQd}SDI+-wG!h{JEe(h%W>WI{uuAT6Brz_U zK8p^seb-)2>~^Dh9wllaz%?lYJmcey{+SJWA#Q9P5c?M%6&e>7w234z28ieo`X=v2(L`Fvv5^6@r{zFNlNW#KKiuB89 zlM+c+aTGZ`2C&hy3iS#*kgV1jk1ZCx5LwdfqY{!UM`p>$^9^BK9HE2Ts5zUWw(W29ta#N&G z0lBAF5_-ls;^<<3gJ^ikIZD)u(vs5FVQYFDFS8)^#E+=_`grlE}^vJ@ct?%w3)xd$zD+$6+S6wa5L!J4tzpcHbwLmQrI{Trnvf z5iTKB9MaKL$%$yc8jvazcAIWZhf!QK&gR!EDhkwzEXp8^mgeyU=rWMTSzZxH_p;yb=??wmA{UwsE9zfz0H~>q@4g`NZR3A@+{p(i1h6a@i4VQI=+| zDvoKD9HNrP!KiDBJAM+g=FDN*?0H;$7cT_VPyJGx zTiWo^V>SJ!9w&V|HCq<0=0lVaIln`cn_DUIx_XeAQ>Qa$?kpybTZ50r42z%X1y?97 z(L}h@w$)TrO6z~!C+5W02f1WcpQVFZ(XmqpM$8<;t8H`mm>{*DgizD#(55NEfO6qX znZB1JTjy~pwl)oO6~HO+0uH%KlD&Ngo}GO_)q3SqQvH^gp_Y{1SJ-8&K*>}d%viXB zt>>O%W2r=GY0bSOyI8$+0ps@v(WX^()M}0Fquop?1Y^h}rp{f)h2qf0TxGP4WYyLi@^1-AgBqmX`5zz-C{9)i z*JdfpgvL5XjGw{MwR;Im&`4Y5D6*Bj)Jtoo$I?0j=7Co^cKr!TYjbf!n#<3zw)pxP73mmsB&LYs=6y$UZ}So~`MT0XcZii6Pq1m)X!OMf z(7ID|^vCCN@W@#vP2EfFmR-r1Aq(%X@8`bXCsUz#1~#e7nYb(@KHM+LYZ9;Hb24sh zCdTwzz?yN>v1`+xLMe}}LFzd-GafvD)#mi*)|oba+mSs-d72c;B!?T3OH3+JBcg$0 zVQtBsBjZsuUcvBgZRpUxJ#&XtV(aQXD4m@-v}7g=L|rju@?_k-zTBVY)^^<5y?})a z<}!1Js85z`5V^KNVbCI3-W2M;oi^&d^xgW9CR0}seR2@f=gelplpzG%;|ucg|!geQg4(RwZVcn$Hp=8crNZ9ZB5VmV`#l_3FR_cp%7x-QoJ0@ zB#|i#y96{k(Mk}a+Qv#jLZb8{HN)D`l7qdfus6*Jmi8*f%cDzJ;*pL6M`w{n9LP+Y zM3P#Eg^fLyqHd4&J4lU2C%N)yJ2pbdS=-o({D>ENvN4{OSeJYBg&0YQPY}Y-cwXO% z-!n0gHYu8Dtu<*JzV!Nr1P99Y)&>iE%;F+Zq)CUZSv=1#UctvKGi552BE3jDF)9SL zby}Q-NR0{#!6{?uOA`Z0Gh!x$2cmPxgrnRo`vqNm055$L$R_fjx3D9X zRT5!=u|!6PVU;yMIbE!Y2?@bEU0M=DBXLfjhQ#2Hybq1TC1U}yrZpGagT(fXSea=E z35p|KMi+56sCf7KJ&6hnT=V6{7B#_P@nlHrl5%7tUnU095fLoX&yW^FLM+MV4%l01 z2n|UhwTlIj@sKu^EpegVd^TOKoM#b%7Q@^OL&qwX`O9JjPS)L)`|i-)641URdGZlC`s$` zr5iUnHWH1cBg92vlh&EHcOIe4ngeIwQ&b)NfR_)~5gQnaQ>Jt%b@2p7K&Eu|g!#QC z(JDO-W;#-(O+`dt7^za?1V<}LXBEk<7s2E!ke72)T63Y`Ja+b%8YL21aZMs|k>aO> zLvpU+Q%_(&sKhdVAxO zpiPRw=c7MK@u7H}n2oVSZOZ#kAWhL53oa%4({E-8>VAHvaF*^=Ki&*!{< z%|ACWkOEuVufGoIND^iLbJdx`+zMUfTTY(2PsTFUsgO4vTAi`M_;(;3-&!=xzaV|R zF(W?kJ^sn|eFlW#z>W-N}!BlzT=%EVjb%GHz2 z51*nvG=axidoZMFPOhw+!s|Q(=~46n73v=2%HuuQ$9uDM-ZWnLT2p7>FnZQ-<+5t(m@r}DpX8eg@)bw^TnDP;$Xsb|j=4d@$IvLUvG|+>&L> z=91>&IwtOUjg^hmg(X$giCj8(k|?ZrwR0Sso@Hdt;(7F~QGpC*!E8Qs8%Jj+o}N2M zq;(GLd5c%Fe!WSI|96n?Zx#2h+@}7(1#DU|je8pgvF}*| zHddBcC=DbhC8HPjl7*!eS|1PYdSzqS)FIR@l@o(jB?P}lh-C{T4^C#%V$jOtKg=yG zG3YcTtF+>`LYs{E2L+)w&o{@URA3b_R z!GZ37EuRk37Jejf1+m;b66pWp`gfL$- zYEGHQ@RI&Ct+5cxlIcl&0xNIccgEz*Nj|#j6{F2@7|3x zOBYMCa)oK&7D2y4i6s4a$b|_LCQSUzeA6ECm4Bv(TzXMxk_itDB+9x7Cok?IzpaiW zz0@O;l5xqtTmEGFL!?ifTD?wALi%8;)2MLDUz3(O!q~ELAs?JtP(7c+52o@~C&g21 z;1Z4=+Ct{w1Gt@kE-HE}4C2M5ko*OU7nIa1^Mluy5Fa}9#72hT;}u7X=?f{C#g$!$ z*OFiHmQGbGbM~VK>wkEVlXQWl@{(S_-}{o3lq8D3okTOQxz^6CEi=X!BP{hAoT!r}dCQoAvEdat5e2?w6< zp3m9v5^USHft*1*S#>6e79+Y-u0$IStzX2Oc|!;;KAat!Ch~0AcWn|6#X9jgvt$T#qo=33LCWsf43JZG$yZSc6 zqtH~`1{GmV|2Dj>vWCH_x6*HSHXfX4O3n1mnQ-?ZwugE$_DM+&tn9{Xk9*{(Se1n9 zb12AR#m-j(?=T{$wVJR{2F zA#uQcHZ*xf(W-~J@4c6UJ?e75%v@IYEk(%7Cq(OFiLfe0jXVZ=l`cb(^|$F$*qWqo zSnL1SY{=c+-Kkcs+CL~n{x_E|UzU3zO_=!B{4+M>DLv$cYf@+LZ9*4U;%45t?4Q(_ zV-uRQ>~%(}7jYprDw0awX3;v^4XQTr;PSo2OekN1j}==|&?cGKI2C=y4`P1nDNMex zmwblTG;(cE)=sTRt%*ZxlZoM-^V6xzC63)%f}{UoYIc0Yg3*pFzMhx;i&`L6)0UCP z$e(8hO-D3Gkr;zj#$t>Z&=o6v5=u*3g6}P*$&?tLUY?PXe^Kv^8NnkV+U;!N$Xa)5 z_pOg2LF}8U7{dp4BbAjX2UQ}XJz&Cw2^0S~-(?TE^y%A7nVM21^PozICm|^btq`5b z31+mPv!0AEm(sRvSDt0-%+hX!QP^arX#Vs_UKR_MErFFLnG$_h(LUpSx^?WzxLuc| zM9ERS0l5klr>?6r$+CZC`DpS)DydydkT<;zNeQty6z$CNiOtwJb_Ur;EywlgW_k`< zLAF|L$e-2%otX=zOXo!uXAt>WgTvifv}x6b(HpOmIjapjCiJCwn?5L;&7wn52YKQe z6Tcm)fuYrY-`|j>Jen}^-^L*O=C`zUVCc3Js1J>0=PMn#a=VbFP*Y~in!~actEgGn zL3S0X(@Nf~l;p{vCV!o=%$zfy<+G+!AYC#^$!g?DQt-=yFpu6f~l4PL(qY&o7*jLNM3H5TZ&$b{8v#OrOU5g-aRTz6KU%Up&4@?+nS_ zTp}?sQL5GDXH=(Eqj$+kRwoOFO8YL7_N|GXB7u7z=kbZR`0Rqzgb5QS{>%KK9&!mY zh2+!LTplQ@I%k{YFj4Iz)#(PeG~9>=H1g51i+ zl9My0^HkK~c6r)T-Ef3C=e$Cwsu1Mnyt}xc{kPxAlY1nK##V<8qsgBk zCE{0vy}rof=zP?zkS!&|z>U58$<(L;A5LARc!%bs{ekw-a(&MpvbE?+cH^X(zl$$| zJdvYo)}t!goc2|6$=lwX-ocfq>~yTP?Jg@0?Y9kOqB5a9OA0J3T;ZJhv*l~ z-u0N_1G^x(7QcODH@dvJi1e|dX`>YX>fujtyQ-&G8?mm9K>(tn%uFUWOWjW?{o;tl+%g^KWlj})ztxpzD z5ArqYLVSGeuZZU_{B?p{>VJ^tZb(9DWh3_@E5tu>kx^K?q{m7dOGreV)N?^p1Nl2?}as8AA;wOBg1kV;&xc%g`` z#QiGGs+%m*v9Yto+>k_QSS)&l13|je1q_vf$ z{8AGqhF+tQC$W+`aqMg@#l9h*_q8`Sh&&}=Zf%b=<<)=ZZD7L0pFd?$ijLK5Xdd8w2BQ(|1=j|lQRb30LC_Cwq~Ur{Zq zg3EJya4CB~T(*tCWz{u$6_9$TlSxurWAjP5{7rl<$hS1j&AocN8B-?}v0?5Ep8blG zXIJpUX?oz%ww|o~*p+S5tEYtM7*nz|MGxMkwR0R6sZ)y=@7E+SvUn+)-gqO#YD&=W z;ENy+rioKVt~FXp%$^ZqT}6+I_8g7sjqmGqXrmHvN%iyBvfcMOX;VVqwS0)-k;O zGUh$H#MAK&@GZND9%=5;YeOIx_Dtsf{&}p}wT>q?qj_;)Xv*Gjaz;biEJ;OJ?CviO zkNfk;H^~;y3&Zf+-kcocqdDPzibnbD=~Ar-&Byg)lbecjhesLXzgkV!{u=zQ4PjK% z$~ZNeNt;?(2)=fRNk_uDd}<|bH8YbmFMu&WqlxdV>B!=@4Olv&JaGxhC@nLQ-!+iB zS%+}M&mEr=6KK6b2>sI=I9wwOgD&|CK^`N?&i~0@Daa)x4>|@>zkEXKrI*dMB$u?( zG{xctBAK;FNNLGpSpF>BPnpE?1o`JT zLuqMA;qv9loi`sPD)pd%?lC?epR;JuVR?Jl&3!C8>x+HrG$eXmXYROO3|(;)4NB}C z9C0v@;qb=2#E7`p)-Gd6pZ<)QbX2Ta;ox9{`*t__ckRLUn?7=S{+AB2da)a8mdxX! zueev#@0mSy7PH1o#Qmd`%8${Lt!O<8guTT}tZ4)8VwPQMhPNo-v( zjBee#vf}VXk`ug`Gi?^L$4=$WM}LmY?9J?%i|IXhCeH#z^iVIBj~Ypzu0uI+!CwR< zvTte+=FD6o;>_Zm$j0_1^Lh8^75n!tV%L#_%-(%p#51BWx5P;_(43u}aCAvS76%0u z;`%z;8o01=6R(p+if^tkY+!e$44cfb;oHStsc^E;uyw@(y0-1hy*Ti^xRt$I*Rbc_ zYtC#vO1$`Q&9L#TTt1U7ZTfK|OgfsL^P8s8yZ64JyXOv&R$CIA+vcG4IW37H?QL1RBl#mq4bfQ4w8Khk7J8RGCS+%(HK)RaO2v*mjY=KM|5+eu*4Z$ZMgb?3I zQn@%2`f?|?oH{VIUtJ31DM*c;Q|XrJ3ELh7%JUuk(uV-0g|&QroSeks=!A3nR8lA| zX`Hx!cr#tyG`OGIfHY^TnU$!RjjHk=;cGE2A&YSdA+#k?|4EEXd@Z;oAuetI|SrQAq2@rCb5kem2K%)>(jSmdK}+q!t2+Dy0zv-ou9DlD*1 zdQblmyJ@j}ISZ!u<>k@2Jo7xy*@sEIIJlgZ2W~<9bJpFD!}Wi6{{AVfZ0tC`dIrmv zE@9fp-WY0+C#Qucr_Vl;x5s~Y$oa>CSXw9uh}AKCfg6<~&M;>CCG2diu~Niy^@Il+ zzl*e4evRg1#!}fak{}@@HL66EuJu_vtu1S3Z4jwFqwnO?G#J>6LG6k$W9S$nlH=HZ zK5H4fen2oyHTTM3(D1POuG&PC|{%~-RhS~$&V!X6nNb^#mZ&NS-NHuFJeW5OCdzL zg`T^|P7x9v!0^7yX)SW9X#<8wr5t&-9W>ycjEs@JxT;>))SsBowA#bidAo$W@oZEFLleLzhXIELbb{!km zuVwYVE3!+}(AQq%DpNis4I^dBjDO(pZlF)W*Pn(OBm z$?>-itb#>@0k~fZz$P)0JkBvBWzEE!n7nM8(pHZ1SMs&V%C7cBxmRNogR58*hXbVw z<|5f=Cyo32aOv!1f)7onpLZjceM=WpUT!Rs8ZgIbB7AyTyzzk+m*qf){tPHhQ*WH(RKKC zJcMBUnlC0Resrxcj)m7JGquNNoD53FZ|y*jItN&^ARjZ2r>9KBMpBK~M>kR4G7%nB z?sbS8$5wHFWgpf$k7R4t0zx(3rBeH?c&>Q`Za2Fehq0-1K8U+Z zl`ebOGcp&WE@kAv%(nEbU7m5r?~pI$@&{gC!jLn$IlQE~F+gx(c26D`ABKL_IEu~~ z%bXdPxpj7q*z%UD<<{YGcLE&>b!FwtbENZeqfnnDo}4N}?GA_WI6RSV6$UW>_DV(- z>B92oB96Bk#fIxy+3X2>Y=*O;gDd`fr!mC87DvZaH6B!?-7I?-1{^+$Iug=+EzV2o6FcQ4gNhq>`I@`yyK>lk5(|5a>-m`% zG{`!LO@1EiY*B!KmM2-=B@b&FyVCFYyT9FJMS6L^fB#-~x%f+QOqek7??C!emN+jowzb=w{uoL$JCDbol`)}zttWH*y$X|hu&=^m%OwCKa1a_WU0rJHob_P{tE z7i_|?QDvAoek*nAezMp8b|ecSk}+Rt@)j&6i*X61ZD!1(ALAby&cV}{5x20o(ezyQ zxK2z`JiGVYp=|YXB*estR=zkVwT>9?`*=iWWZi}}xccnlLe1S-c*g6g!p)D zvel$ffxPsZvzU3~`%|-IL()1*9xf7orIS)G@)(WUydZ@W+_>UggVYvD#3rcFige@R zRaC89kh6QX5)$dng0-{p4AG!UN|N`^QOK3Ir;ib@g(oM^VwblHw=W$ed!qpyTrq@8 zs~2IDqX_TL7~?!Xbq1?k}a`mbhKKL5blhA9$absgs){JOX$*472RB>_Q zphYOJeZ-Mh;k>(WihzhXQGx~%MH$E`invK?$<#wZQgi^xs%UwlCcV^K@+pownS_L7 z3RJ6v=b>GMM}@KPya!g6Uwg*Upfj_kSn=%S&RvGZ(|fUW+(IZ*6WgZ;cpD7~FZS_7 zUy3S~^Yil5aiq?T`zOwcb1aLMxq*m4pRdYZ&#qB57<48xD`xj4+Q$bhOVFx<4?Eoh zh<$dRH(6^?EX6onuh+<4jwG7R*pK^}{kZL3M8N{BnfjF&mndDi7zf-olCzHSo~~0X zflYTZ(8Cw(~!gHDV8+voD6XWri4eDn>KLdA`(KpF-xVec;Pk8a3;4=NgWsW0sy z)ztF7e;3kA;nb;9@(V%|?xw}Gn3jLHA3WIm#DadUDjGNHqgl3O8x>3CATD)jtR9@gp>=->_#b8dn%ij8Igq(`G6 zkes6y4KuvJZR;D7)gRFnYsBQvwYj`@4Ou&M*UAGl1k!kmU3hEq3tJS%tIV`y(6W3FI-2le?+B}qlU6=!BJX_?T68+OC;NuouK)M?t~m$z=0ddgb5Maw9`mx6}8~Z ziU~XoO-qQvfng&Ck<;=$Q|7u+v&T4UxH^l=p1}H9<9HSCjI)KFIMI0QG-V|vZSFID z%t15?I~tA{L6uxa)1rjnJM1}^OrP#wH5^rbtXO-Wej{3v^1UL3Xf`caN1b64$RTl z`dr<{-r$0a?@(4Wl(oeF&2A5+V@dT!mo8mWLQI%2@o&b>&5a&CddScHukrhO$PKcc zwoY#*n+GZs1}sH2r4j4@B&HtnpECXX^0M;Z<@cJb{C4!{42r*f;*9^7e#oUBY0LlN z!{oQb`AtMKf4~&dHS0+FhnrXvU6nJ7x~FXWeZ;;x&A=rO8Q!ZB`xnol;FKfuC?Ul2 zZ$YmUHTaM08vn9${O|Bj%+x6zYybZJbnDhFCB%dY6aQxZdO>c$#?p)}=dC!HXdtJJ zc(cU9fCg$R*ht=&L=;iIeEPU233utIEZoI!y+QJVB=xFGO5;-)pY?{cpI+W-_#7t9 zFY{Y43G$yZedTxMWyQqr=kFKe64DL%OG4p4%Wn~(f0 z;aIRCBU|R;#@%Ps7`N@Wi*bn`i*X5)82?T&5a{PEo7jX#CZ>cLd3<6md+vN0%$pn& zNy6uMxQ^(EX!%9_XW74M4iAF9bnK{O!wHW1Vyg8|qE{yp?C;0Nj~@w$i2oEybZ`*9 zzCI${8=t^1^m;8}0mgXV{=q5n1bQ_QAtACb`9yp~FtN#B?0xkKA$WU*f%uU3=6St;*TMTeUl*n&X6w3_q=>U z>h+iSxj6sy@-;uV{ok-SWGY3Ukt68WrKxNp@pEy0(}Ec#8+B&*h!Hd_mrY9Or*TZn zpIZL;#%Vn3h74fp;w5Zazm^db=i>KOC!33H5+{ycNm+w!-D@%DvgAZk;w3FhwZQK$ z_(19$^MX^ijqXV$V&C86!ehxT=(i!!=OLHw|F-lW?;1&+mc!VwbrXF%G+_H(Nd$Y+ zFk4CHuHMA@HLKZt)B~T#yJ%9gJ8oOIGI!Q6diC9eBo|{n_mewA2Bx1kibKhVf5kKz z>9OgdycYe|gF(Ifv)av#`P0TQdF6gN{N>)Uq)Sr(**mHr=)ndCPdmoz1LJAkeJb0w zZe-N39?V~9ygsR-o^kr_56|hfTOTr|F3Y2+-y?Qn8C$&y6P9gbi`xR)HW|o0zhCfy zo8-lzLw8eFeo88f7*3wNnX;y5L&usdy7gyo7!|kA-p4HA1!wPlYWT!6IDZBTbXu9R z4(oeVAbq9o^0=5s=kJQM`WD19aoB8{%-Kl2Q~{!aAcZM#4t>Ds2O)9{RqzYkHmqUo z%JG!QU4bR*HnM*GenS5R`cvxJ)<`$8P6+TM1Fq=|_;^{;^{gcaUMUGmRgvTsZ5F%FKom z6|0fO(OecHXYY8Cqi}VK=W)dU%?B*RZf{>}sZuSQh<{m*U#fa7GWqSN#_A-luIP?F zE|6;v-jcgmd9u1#6Zi2hm!E}GpnN^@r89nI@q2QPr=jL#aLPdba)puR|9W=&JYHe8 z)NWb@dtEfI-o#R%P&Ul8QM`GVM2^fBM2bf`?9oeZonOQDcX^pTpdrO-RwAt~fRpF% zV6VG?IPeE8ugmA9c=G;O*vel*urNd%;)aa*+tVvxI?L(s5{` z(Kdg3w~Fk{Kbs>h{HW4-2L&?}XYZ*c+*{F;v8P^&?J&#wpQe zv@VAANDmsm8p)*dI&2)vvEOYVLAMq%d~a697e2*7`+3amB;_-TAyul7X4Yk zDjipsc9heBI7T(-K(tE&cJ)`YvP&T%{XUW;nh7r-y&-e)S`^A|Bd*JP3^ppBKMA5_ z-P&ZZiJ^a~h75anlL8`@z{?w{JnA?PpPWYX+MPQe62v*%QloJV63)%0WUo7{-adg6 zB}$_CaEUizLTp*3rC#ka@&NrR{SR<`-#n3$frT~l5i{)tbEg<7f^i+Bu$P?sDoZ`@qssrG&!k~H!bnvaNd`nk*{?f zQb)bvn7b!gidLm`ZfX7iJ-0nB5gxB4XYm>o&TNAr@-@dj-ikQYL>y<5-yNb-?d43| zw}LxUx)WY&96c(RrF^>EG}vOt=C-#CX)qyzPuRzezy z^77_!yrV6!uuez4TBT7(`QjUqOu%bTwCQqCt6Xj_A3Kj_)?!pCWpsw{ElgHyt<6|= z$cBS@9i<)NU4Vk&ZIj6CW5uEn9oy?@c<*V&G;ck->uWf3)rP0()FeN%qFQYgPlaGl zHki>mr=CUc%&4z3$HP(0q@sG#nHzZLYr&-FW=trr<@#eQo;s^>E2AS(`|EX~$zTLd?(S5rTJ<;C%>GkczI<7>b2nk)TO-+!|06x+ zX2$1l@3uSi-DsSMOTx}Ejrcc;v0ZD^a8Dxri?~uX#Dkr_&{gO^Go=E>=e(MU2CTU} zGwjikt=Q|>nd;WBiMG!`m%?UDT)c}yB?@t3@)#!WSj@(*4e>17mu_{+vU}WUPTI7i zs)!$Dn}M!XYm)wECte!5Q%Iq~ee)z%y3XXtU_1JbTS}!`rC8EsKL^k6K!0&D-4@)Z zb^B6`8oZiy3BF`Fwu~+B%_*u5V3=ntZvCJ~hx2$mTZwh(WqS2^!iHH6H0pbo88e#` z6q$e~F^sqGd~q$2gL#V=<5;XLH`h+b-*zz_3V)d|SfR8aHt;=abqOxr3ZzjjX9!|GAniOqP6=DkMp;mCZ^bVz1W+vyCtHHsPCM^ms#a{{hDCOLZu z<2OVwa!5-u2EAd@u#x0%(1^{0doykCVeAeKWbTtZv@T-HEC0(B?pch!eMeHLQDYIO zCsTGGp+I~L$?9Zr{x1nn)Ds)*!<*OXs9L2SP8WOeZhmWAKb@~85xvN_Wc2juYTw#E zpTl8}6pVe(Fs~Rk4sVFJrzk@USHf?&anffVL!DPsd2%o-CN<&Wns&^|*p436vT$`x zUtZ4HL;terQd0YiF(As+K>PA4hUPF3`reAx=Pj9^57Ih_jpF}^cr(&F8+)}gIE!~@ zq8UxH8MygDLBULVG!aVf1Su$#UPps0D&F6=r13%MS58d{twLNG1Fu6A*k#brDZRLc z{|;^a9U^(7GhyO)B8iXhz32IpNsS2;|7~>mCs~j|(%?TJ6$kEy(z~$qTgl*|rP#Ln zp1ehR3ICw+Al8NU`Cyt_J zvnt}n9EegILRk^NYt=#`g|xJ2Y{MD%a3KP-)4NksoGs0`yL&BJ8qH#G-*I%w7|FR8 z0UTJom(CmZGqCp<8kTSsf-8yDGxwmdv_&bz!R<|}@kwyR!OqI~k`j#u8(Ya`loe&0 zb)b8fuJmnQm133KF>p`^Y~CK@@Fjn2^g8s(ui3G~L)z;z=9boY-#*2V=0#Z<)`(>t zr2Hm|W94V`vUw)Y0-!!S#6-(xM9p2GmL!AI*}?lS+W9v zgaq`q)}MRXC2Z5WpbnGluJt5nT$sFjDl2>U!C!6tWsjcS8+?l5JEV*zy zLJq%wazA-W)qt#Jv3`4!2gzVz?nt99{pr?!5aq3PGcJ^86HlioP<}D)2yURQh zSJdJMZ+8XR9bAZs)lr~sSJEmY!O@yG=iSLvr5gEiS7X$mZj{XKNZqFGQK+M^aJJyV zvD0E-GX@MS#HQ`fjY<88D_d9L+GZg`2Tr1$lRp*|&Z$j;RVz zxqt)lDh=9jPab-T^c6ZG=A39;Tgj!nk|~f9tty`EwT4q6VJfR`=b&Y&%p_@~cZ~u^ zXB*D1oQE?mDTa3MO4E|A)a^W6i1xbTm>FnL+l(vs zqNUUP1p-+y`;dHpnWr(}v34~9BD8T!k)Pyf%$*h7J8_XDLpmCE=tGB2T^QY=A?dS~ zr%U%<3}~F4tM0FiNqr-v!JCO1anEVZ2oNm^X+~(t)LZtnB9@FUdVB(<8bHB)e>2hu zpPL`^=nF&N}QxTCGb6F`h?94qI`& zA3Q)Neh&(1!a7?kX*BMaMPaf5GVv=&g4~1&6aO&sbEu?7ZY7tm1RBG>!rImz^Azou zsqG+K&g_HGuL*L-4Klyb7Wsmwl?wrc4=l*TPLIG zUwonv#6l>`zav9QU9ck6%a@_+R5!LxtS^UuLh6k!(PlIo&Riwq{Y4!2mO_OHv9Kmn zdRtPZPK$%Jke5~G4Rc}0Q?mXxAEJE4QnOBdUR;uF)GfsI6(U{SnuB`HXTa>6r~0&mjHwD^+SH)ygcBrb4LGGXwqBi6I}j5riERxU zt??O1NLI_PPCrpg+>g(%+)i2hIbujKPeskzwJBYrCl_w+A^nFFiql{nfPub-t;TAaV3-jb?_tS+K~`_zj5r>$5R414Qna1@#^s}Sbm z@{&1|mbR(P=ycSICpKD!uK44h)$hAe9{kX-4bJB(He9_ z28aFZ==sE$Xf%KNHZ%|y6-oTp-VhSwh>lG{uSp;*@)rg={RPB_1rrkeGxmUb72zRK zQeF6&_^@#KW%0j|%H+%I;@8n@lL-m%m#>YFzkiBH04=dGf5kZ)hzSkB&rhW7<3m{d zS7T7L(c+jN2@Lx^jOL^FN1~Fx+}yE#Uc7qrksp^}Vsz{edocy^ z@xN|&`QOA?R$W)k=I+>TT=e`%Xplc=&YmVdCWg7g+j8#n7|Rl5N_CGLki&qtg>grEIfuVRSfE+WQ^vX z(d;{amqufEuwiI1?mY98kCHK8abDj$Bj4Lf@rKdp%qUy03?7Ge6P@70?t6ZeC{v6k z)oj_d;|Xzox4HfDEn1tjR4tsu1W9nP|Jw>0BytY`oj@A2ltr;=6t zO;$;hx=3DRTp86f3!_GFA~-sd_xDb)_+l*M`;;X?q@$8Y)IrO+tB5^%ke7Nh6nZV8 z{vXA&7|zY(OPP0A$=tE^^o+*9z>=t6DVevK(xw0 zh4NLf(L@j+%0!ViBl>`QJPAx9F+3a#mkg9HR1jU5CxI%-;6Y$jf;6_bcrAXKX;cLH zd>~4cQ($NU<(ih`(*E5|@;+G|wq$HAsGEP;c1D#5w6)%otk`hE+Eq!T-*HfWMd5$k$ zf`5ECm(E?}ZBPsvd6G2IXed_^FVT<-*Tu5y%zesN&dZZ)$H>%h8W+~I=lb18WGht_ zuj@PIIJ-~Zqg2&`Vo$X=rns-gudLZ@xP9#wk)cuYdFLuzj3+mxuLLQG_f=A2(pU9Q z0V?K+=DBYo*|TLP;JK$bw^%IFWu;_+{Ak185R|MH?;3FoQI--qwd(V4X+pSU_1ABL zzY;T&)CSsBPv&^jWY*SKv8SdQOHuZ@bE+Ah-)QTt5-pxql~n9(DB@JrU@o$jXs%~X zLlrqhn=w(TXK8&ksYEu*7f|EYNX3Rm$uvuCkn8i(g;g97ad$URQ9hMHyt7k!0ZjZZ zq>fHy+S0A2Cm0IiAE_rWT7g%nf|5CPq_H>1eke`+d8C52wzmGoS-4)kdL@gd1`Qgd zgh2SI$)syEjSl_#l3MI`bIn-x2d3lI+#z_EXhV_IUwT*mZY0-g*|X;8(EN)+nUYkPc&?GzV_aZ2q z_ZtjQjeA7P_M=Hxsxo0uu8}Hteymc?FY3`o(&Vj1fu7ST>?DQUBZqxnk}7tmMxI}D zOPI{eM)k33D$2w-ht1FO?D8RWISLYVY$6>->?1P5o9nkualj*y7F7~y(_|fuy496u zo&4i?(Kcr_9;r0Eet4T5M~{%UNMmxEJ!9~&QQUjs$*nVo`Jl~3*#dG`C=)8%GB2bG zJ*yc9F?~W6aEpG^SMl`OHMZ}+LgAYANfW%CrlaRg$>3*V(pp5o5;h zqDh~2l4&e&Zyv#I@fhZvQPZVKNn?V4Gm?3fTCL`{*pN$gz|EUC$(1V?S+ZnF3H>Qj zouSoge=$ud{N>A+6fa&JrDGAA*GR>_t-HB)>kcuBT-2^okjFPKk*Q2mavJAh!Y1%0 zhdySed7DlY*4$>p&SN}FD9XlV{g4bU!mb@>{occP=`u5YLJu?x;eB8N_7hys~zKNj5pw2XJ*pMg3*Ky?JCBo7br&^&hl*|#wCb#qC zs#TvN*~mE z^Wc{I4Xmp5Wz{h0t3fJ?We8`}mV@{tSWvcjMJiUVNq(1)xb3=(OOj)r(^TcFuw~AAGmX0gR_-9uEGph>=D3zCgq?jx{P!#*s7_akSg6Qf zsS>F_S587SCR$Osb~#jWNmOmsn|#SvL^)sKS)`JBl}qBBF*k*CrN%OKehOH=XT_$& zI92S&*p?-T_qxmajk~$=A(3e-=94>PPV!s4ljAs7>d%ChMZ__*LXcZfv|>^6l`g@Z z(|fpfJBkW*N@C@Z3Ey1{@U7I7Vsh0i<;O}K%|*$vLZ#1`g-(n6H_q(q!t1)(uA#bjx=tK)!Lh5K5T30O! zNiPcNw-v65U+4Ev3}j$t=Uzl9%*oz<1j8E^z0|n8$NPUiGYeewrxmYB4)3tpq-bJ?I+|BtUhQ^aIoddz1_jvd& zoWd1qkUg~--XHvl3<@Gk=_=UxUF5=*P_%iA(7r}dIsJFH-FX|MqqW;9GIZv02|ZoZR6Czg>a?mVrV96)K~#Okw45nDfVXY*t(r|!a}7Wu?| z-j<8$MqsyZBH6ZFrE?}2Ual%{zE@m!o0GD|goNMO*{sy|VNsKxb{6dEQ;(p|`xsSC@**M;O`k%I==|~~DRb3+ z6Lg-(7<|={b^U9mg#2}UJUx?D+TJW_CLZ|jj1Q+~u+h+m1x>zf-oDLDo!=)WFDpMq z^0Hzw_xTPngk9$*t}I*ClQX-FcArXxaWWpsTY!TymW{nTaw$AB*)88PwC70X4(Y-H zFCnOoj39rTg<_9z`gR;o&|fUZe~i+?lA!nRh>i@$|Nb7LUCLn>dxq}4jlN|4PA;R* zs@vG7a^!)>2_Aa-uzK7m_CEK;Ufk3UiU3A5A4p(~C(YZ=;iKoSf4jK?!fkLK+$hR?ZxR`rs4H9K(eo;R^6p81nK5%G9GgJ!Mdo!<*4EgaAL5BF$LrxRBn2a9vsO_zQfu+5Vb zze5Wcw&fWQ+-5Rr<2Aw`US|HBlf->IE61_RZHzNw`van)B1sAj;`z(BB#8!DK-ibb zKXhs}1=^1x-JK1xf8Ax5tQgp~6y|0c?yeiiyln??KXH&|T^Goo{)T0s_zBrL6s zb|x0qwpd%5%b$FU3E|wmTVEFT&dtdqm&CpnqEb;{Wn+cX+z$JU34Dx>qhz~UWRnJ5 zncLECKyL=k9!|{dXQ(5Nv(Uqfkg#WX#+q~g>@q%vnUkhaamJ78M&Wcn_XR>vQj#T| zMm6I6w$q$Fai7NRs$&qMSfRAU$;pnR+YeD?@KS~k7|Zr~%gAPDz&T%WMh|I&jpr>a zTTGx~t%{79(VK^7ccXN+L9K`*)Y^i2?W*E+^&AduCelEPGrbpgPaL95od%Su*?>w_ z+EFrZUfS3C@~Inx2DN!1N*7gd^1@jXvKOX=iv=1Xr0pED;9y8Y`gHb$9zBU9fvp{! zY1e-swM&#3B@j#(>@;;;AOxo0SG?>BJjLprLIEJBxN#jp_N{`|ro z7A;!H+)d|czhpa^?PBH8_2%YQqA`?%R8FaIiFwc6C*B<1b%a{OmNR_dcy`ZUM*QXN z?Dh@j~7cy_w3_{C}WK8Q4s8lMs5%EJJSbpF!eiz-i z_$r8HE2YNOkBEK3&^B#I)ps@xi)2QnPO)7T7z|QlG-U;~xS~J&ys6QCiTh6=HI#qP z@>lUayB#gpY8(T*)|Q^)pT#0eX-1A7!`MMR$^0wkS0;W+&T=&2w#*0LNGHXh?_^=3S3Gl9z$?oo2qW4aHT$LRJY z1|(Yf?67Ckt^#>P3g>O2$oT?MFL`5?;| zjn~= zWQ$$QA=-Anz}Uh0*brWilas28IL9bG<}t?xIWqKoCXUSQK$q%enSTBrxl=l|0xm6L z@R@vUZWl(U*#~JgcsKc9Oyp+z_FP#!hS^UZP?ltBWT?x^;A^;dDNEW(_h_F#iP2@N zP<8cUR*hWAz8i-bmah;6*KMa$4riWTyHD}19XZ&wEQOcfBm3E2tc@DX%AsG~1M%mn z*W^0G+K00~p))5&R_4iyzAUmCM6qQFSDy*`U<2A{&#c4c_o>JSUtW(U)&mMKfallN#Wo1(v@sp~M- zzq`bzKC6i58|XMAf%At(riA>xNR1HbE5UCO$kM0IRjXD}vu4ddWwIhoezk7hI@*Xv zjC6bxCQST$k;aysIB|jj0|tR0qH7Q?7+(#mnhnACFP@5GW}36 z`J~AdGBsrGU{{898byHy?M0l66zQ{q)>bG3F@_qg#?igz zrvaIsbSXcP1-B2A>Fa7D){~KA#*<{75oLTlh1<=>(S0ak4Yx6@vT?xbojLVcVm*z6 zqbkVjdxn*!=Q$U~w=G3TNGP=iE~j;tv()Q*n#$=Md7H5;JEnC>`N;X2&gCYv`0ioZ zhFl`@)pq(XO5niOfhi$>FOiXvczSwbZvMZ!D5Z-0)TvWcuU`F63-UX6?)W$I+|Bc7>d_E;)|KBn4?xrCfiV*rqjZQ;Q5( z+E|L{$!L_;qMSt9A;D;^ZLzhm5)ZzW>_gei%1-tvEtQFdC=-Ra{xR`dob0Vgj*B8X zQH_1tbl6MZ0d>iQM5#!V$_A}Yl)dHGO%=&YfL2adC-w_V*5T-2k5W9(R^kAX`@ygn zaoyx{5YY`PA(Ep|*xHlU(dcW~h(UHoW^HHtQ)@s&BB7zN@&L}%jyB>Pl7tQm8C4~nEG%t> z=#a`=VWuY`E(t5~0+)KSl?tU%K#F&m`}{%dvF*r?VKvZ+la)Gsq(O}8qy+hbNmE4I zhypNAF*-76g|L&9l)%E;fmcUH(tCq}t;@R+@c1ONm%qU6?mluGv?!HE!KSnjVn>Kv zOS=y=&en~wS3M}5T7#LTtq?&%h-g%@e_Mq#>4M0!LF77Fh+4_6_s{bCOjf>sz82)) zD_;b;2@~HINszyL_wIiRa;Y-^D+Rd;6DCZU`1|;_g8bkg8`LRzX^6VNlhca&Ozz&8 zG9}B>YyNy{XK^BPp<+aqKV#4p~IBgO*KGrm}g}LI(8e%*Ly} zSXo+-DtiIyl+1@J<}ouTE@1Qgi3}Jpn9JT8v0aFIvqZKn9?yWmLzysg1haSCLiv?X zZ)w)Bbh!&rsX_(X_Ucbg?%?rUPsFoBEOPU}!O@YRM+aH#b`2W~D-mBI3RQ@FYfH{= znoJLo$5n?PVeRBV#Do2G>obtPgC=vwFBS_C*TfHzY-N8-Z{R=4_dMXugb5QSOqeiX z;uDfR$sg+>7h>DscbSrn$I*W9Xu7s-MpkEA98x7PszfC+EPurC3^%FTb3U`y9wJBN zQEE3`#i{tqjIqc;(e)RZRL+MQ?GLm6?g8%gE5+Gjn{eykNA~R9SbX&*MS?fbX@ePe z&d=uF($0*3QeIk>WG7*S6TQnklg_FlP( z`eYvlpUBPqV`I6oxi2G5<>%q?Ce+E&j)}MK;B;mf!`w6DHn$byI<}_ws$FdD--9L_ zE>SY!6=9Cf6v>oPl*6CvCI4SN)C@pvj7axw!=qey@4& z<;9Uhd+~6OX8D8N+-lR9G)o>(_I^*McsAhb%Jvw-o>8IZ7}h-7$;`Yh7=Gy{HFJAW zKXW_A-n~QMl&YL7vW9gny(nG#7}uWe!z^eom1+pF{(3b-s#K!pwhwg7r^ENiWa=JF z%foH`KMV5r=cd!F-wCSJ$i(xH4lLiZg<84oxwmH&W6$N{#{QAq+B#VL&d03-^@SjB z&y3sdobQ>Bm*tl;yk07H4{MA4&@;rW>w;gE(Tr+YmcqGn3N@`37a`@O{~*7`WaZkm zYb;u{h`6{f)8&7UNMctSOjfK|G5PoRD#)eT5Gz%xWD?{iz9~}WED7=7Vnc2cY#926l7qQu0c3=-46u$o8x1daG?O#_jF=N!TGdJ13U@8tV zH5>A)SFcjFYE`+1{CnlnrAySVT{~sXgo$s5$%fp72@@v%`+QqLe&CPUkeeyZN%FqW z{)?~B7<9x(`SJ9*ib|!jkesBJdnGd$C_&&I52DO13GjSOU`T@O2wtnvij$I3F{J!9 zpx0^9>I~wyUhFHxue4qIt=6EmPD|mews>5BghG+PjhoMq-0gjhL9auVoGA8nV9K(k zMDFa%{Nuj3WXMcHbO0(eJidN|SToseggCC6WHT%3R4I>*b8ZHXoxq?rjYzNb=Y=Xe z6UNVCOskUk_=lQok$(pHn*B*Lo^OqmM-wJYm@r|&go*DRNwWMwwP}XAt%1XH`_iRL z7us|jj7{eijH;6phitiVRwR<8>JY}&iKbPPW-Q(Q3@aB0^adq43b`9bJj#saSifpII|g>fKYu$~I6kLN-EIV?DNd2>k{@IRImK}m$;nh0wt-r@ zLo}$@fTlxNqq8>S%#!ictyh<0k!2X&xjc!U>9s}LRyLMs#cwkUE0lT> zt`lKaN>s^e=>YO?slz4N9vsiomPiZ{_JcJ@y+DC{S~ud z{UMVTue0=7|A0jcrr<0tgXe`^ymhIJ?VTgowH`+K4F8I#9^*4O6vr&>@ zV@9X0^Ql@OWlGAg@V~oU>V~m(dZQ zsKMU$i=XzOhliQF>H_92cIZ?|WGPXDQN7##;xy+!Mx7Xs!p2_qi~fngcUM`u?kLd~ zsTn4Ssy3s0w&v!ZS?ss$Ht3&gbnKf-5 zK_z-HwPkK0+P~O!>$U37Vq8L}R*B;XF|Cu*NRp?PPEJY`VqA*z>A2#jK{9ob@~)EO zNbyxtUgY@6e~B3Xqnz2eixc}#bJNr4btT}zRql9(@c6_LUPsG8s3QaL4@oet{6joB zv>vA#BbYgT8Z-OXVd~)C1pZ91g?nD*>Vv?PH6yq8@8fx_6HU9eApK8thmM;E_7P}o zC;kZ%xVn2MbM{|IS&wDIo<;22=Ye(B(zLEyC?#C*imL1dy5!_=fBZueQ`WvB`XxJ$ zKK>12T(pgYuFvgj!quUv#+kV|HBhRXK2VQDW5Z@Vt02l)6V!( zsnt;C&m4~S_I-->n8ftagUIpK{QVCPY$9umnarC#of$J{(YtjClKmfZ{M;*f`)AOt z;G_&;!Qkn#2--7tH0_$Tq)qD;LXKNvZ)48U6|-nsqZYG{JeAXXv28gsC$3=bgrS^% zEM#NybGo+c%7D(jIr}b3j`KtGWGqmVN)c~(q7$dcYqNqZd zKCmfu8`fs{$}Pl3J*Rv7?hNcUfUB=wvAkSiY2}m#?sT#S{)-xXg@g;y5WtKJcA0W|wEabau{6<#e$m znVEBZS_gU$8qCy{mwA443VnMmVCk&E^q+Q4-tX4tsWfiZh6xMy;+QHGv9TBFKg3Pm z=6!TA!?ryU=Mu!!{!OXZpbldw8a z514!W9<1#g*fnDi+)4dNFx-KD)br7EKjs1+8=wQ4;;!v9DNwmwx%57&DoBa)A zRveYhD9jZaKEC%y>35!?C*IL#*)j&!&rFmMODeUByv-(Y;@o0REZZ(pyH5AT_vtic z7!!sxVeyE*1SRUZ?-|3)9h+(3nqsr?1N1`dx-hbb1DlTo^Yr3TO15i>g+YTRE(E`D z6=&yRl}*KT_k$nvYkuFlzjG zMhqRmcFWH6EMdXB*DuN0S~NI@W@X5XC(Jp%ilwVoqPx40yRXhNe0?~Fjvr)R@ABxR zDTk9I@%k7lr>Tw%Bq%}8xjAEqsx*P~XD?DcJLIj=mFg{fGrDGGIi7^2jXhW0rZ9fO zScdoQ!?Nf0EE`gaeUqnR(|b8nr_W+m!)O+5J-_W3wQ(gD zjqRC|nn3A9uH0!*hd-iSi)nP+FqO2r1av7jEe2^KF5Q>U3(1lln!L$?Mq&B6r{BUt zhwiH(8&)=UT-iM7b3RwUab|Yk@+n)j=nV$h%hQihD3!c_bPW%W>tb=|b#SsQ(qHXc z!*PENHWr^;iyBSUzP1W66YKx=`o)9^6DCZ2Ur6tvZzsr2{9!KaI*6rJAk!D^C!=FL z8_z^zX>AlPW(ozG*eGJ1^QG9iT9e;JO|dRR3EH-RjWLZl(pJNyRfi~9;gfjzcBqq+ zsMTdO6UU7f`Q6OI&c#t^RI(=?33GEL=0cF^v|0)jH`>hRE0q%~O`;G!@)==nrX@CO zJ>1uH!F}^8wjSQcySM~wY#k|5Jo)g_8mEdhziq|1?+ zw7+;K3(+SUaYZ_fMR9mETdrrNea&pB)jGMS*ve9gw|^|fOBn6T>(^>cHb(_%vSq=-(rm^y24)Op*5cV*y8RsgpjfgO%4>|1GauIR0irRXL!06Q zT{7YNtU3jHjhghu>oab`M8-~-#^DW9kcJzZSy_`WhbXt`5aLtkC#xLWo+4TFc-?vk zg(`@vEy!3vBqtJ-9$=+~97`JeU@6MlDqly1c;`RWXko``AEdPI7FX8 z^J%g2GJOl!Vi0-J#u?3R^x_(s+1bm#KO<+!f>ahsBz!XSNwCKLt7sZ^G9?=Hkn=fe zPz5=k>1A8*Uq_=-(R$<~fF;Nbq* z9G)^3zc>|Yjh3X?7<6g!P|5rbTipW*dwGWa&(c%1N1b zOk7kHDk0R9lC;FVz0A^cAL!V<7pWs2;u)Ytofs$XN0FdbLtJzW78#q+p-@^%Hg8X> z2BooAX2;P^M@($|uk>mP!4(@#GMOo)JI(zJ<%OtCBsw-p2tE~2F^SY`RGw2C7I6Rh zHTqBN&+}jvNeMQ8M0k&QBTL zb#~qeCgj-(j=af2-QIo3{dyZmZ#-e=#_dGMCt;r^FBV~!dGPo#8~2?-rP0%{Q8|vU zo6o(cSLrLx4$_gh|VI-dP=0VxK_N1VhFAraOk-c7L zqMokh(Gzd>AG%5THqroFBdUZrjLwVf89ycq3uf)*-Mht&>(_Yr#!r-u7QNgRu3+KD8Mrm7 zj=Q+Gnzby+s_Aoh{NyRSmM=kFsv4h$9h)#=!h{JEe+xpyC~GutF}-uuJmkxurf_CG zg|q0%l~#|X+`;*yZZH#n2+3IA+S(dROUsmyA0kaf@9XPJg9Z&q5P~~b&4v`plG?b@ zE(cj$G~_E&nY?*i$(J{~5I?18)1(-;cJAW3uZmU!##1tj9XU$mr$X8CWKUOsa(VJn zwR&-^zri;UZ*On1XU`^23}l}!6S)c&CWGUb1DRQ8rfP8u4qtmu?G{}rTRb26a%acY z)|w}G+)3MP7(L3nVxKl0c?uUMXO@fus7%drGYMmE9D#-0pWbCXA0$2?i> zc^PO%g`&nhDlHtym@TKco>IT`7o5^$5P2+!i?tn%>J;GGuKnEb*U)~@Sc+syOQU*O zICt(QIcj#MX1O91aV<)v!Uhgr^P*wvZj>mLhZ2?RlT-JevsYizxczX-6f8nUMIgTV zEELV*A|J=fAvIZZ<|TUuV|R4kk`*u$dc8`^j@Z3F&3TX4P@*m4T9>9&i~9JT+=0i7 z2ugJxN2|gvWY3+IM=t`YP@xb~|GX|T66?&lvDJj|=Cvmw2?okms6wp*<{aDPfmOL? zjBfSClZ`{V%;LHiA-x@BDA54xR~K-<6-keo6DgePi-#U-hcsl#nU8E4jCNOfOP0ez zZ;5Mm>De$NRmM!@FOr{B#*YM_NtGoBpdN`6f5zU&R-*i0@q0tcJ|DPaT$Hc_M@3QVQ@&6mCKKd5DwNY>~uQ(9nS zWr0?mj9UB82w_R|NR55zt4PU`Uj{0hF!4Pgz4!9x&rj;qsZEW=Z@{+} z(o0^G;$!=J#Z(!Y_`CQXd!nRg)XvEXb4$zL`78)AP7>RfPNZw6&P>~M6{U?d2f`;C z)s$!gf9B+c1uPgN87m*I*7k4aLUV z8fC;Y`t%#fZGSbE=AT|&zrVrqS77?`X5xFqbYK395w8)GAU9#cgo!`H&xz81ny>Qo z`*J7Eo@!6ij^(*~=pMCdmq)2HU}0%43uuMXT<(FF#*Zi@K`nkuy~fhSRPwr5lu8A9 zWg6cd+TmeYv4wCd9kBg*nPE37Gg<5;^I%hFw>_nmgbRk;MJeH~BQrtqBt* z{z61GW)kGzE4o%T#|+T)1iX7oVAPjMgpz`# zvWi3Za8_`f)ABMhNOemUQdSgXjo$&e_D=;R6{ob~sJyHDu_b(^%Np66<-1j?F65tW!%` zHyuNe(iWvugk~0)sUNUrr$2M%3?gT`bfhmM7*a-)@s~|kv6_$V&|oNd78c^kT9{+ek1Wr zsa1p8O`B4yNe`|DNOio5%~N~OuznL7Hm=R#r^c9vr?#d0;#DWN|l?AdmTr)flB%DVf4*3=okm(UNlIdb;THlR%W+Yq(z_xHKggb){d#^PF_ z2G667>$f&cWa+U-Z0^yXLm$2eMQ#)!M+Vhn=<<`?@bKWw(M5C_wdZF=`OBk|n6TQTas^j_K z6Oj`B*An;sGTYC+7QX`MU#p|>1si&e2JO3W)8|j0)Q?DHR>PVsKXMBXcX!Tjn@_8e zOH;P}Zw&DtShf9(_!Ud{V)>{(X}@uUxJHv&6{cj&(n5oC)sLMN)$F)v>KE1XtENz8r{`N$P67E^54*M_O z#^c&WHjN(3j_a`^h8JB+ittOfaQC>zk@*7{vgx96=iflgoAd0vEQxpxQwMcp&8aKw z+BA|;%cPfkC|!s2l6!prjgnjv;}H=N`1tq`6cqH8C>QSpgARj1kL&?A_zX+;B(U}5 zSxzqQgN^nTbLL-T-rloZ+Ow2A&U$>_yd_p{JR1mjD;n5(4gT-^c>DSh>FQ46qQ_oB zHZ9__3$I{to>a^n@>G@>h-MzcA6`V{-t&B8L~BQ^F2z&OQmXhJg#m&5VtrN8#*xHK*hWP8{zMawi z2QX~iX@c&ZW6!QFOdPRM2>dA4P8!G1A=7y!3*BfoE}6#gp#zwA{H3TmpEADhKqk%F zDyO%7@n#-~#_ffJd)T;dIWyK={wyx_{#R)?_8{x8o#E7(s|>7^Q-p@IYT{Ui4V}R& zxiz8V(%OZLnJ}D(qH=c>AwJi3Fsgq)RvvvKMfl9QsZ($qw3?GA&v1F=NUY6t;xbud zV+B#qjxciIPzLlK$=!%}?z?Sa{nnKX8#j}W;yAW;wm3K$xc61~2f2+N%Cd1|7(RR` z^EO=mO0gu6pw7?16DPR5rxPny9p~AGKI}HMD9#<-c_mx)!cJG&(jYf#@@@&ORPO-!=;=1 zc)WP^XCeIqbZ_X{WdnseW-j7gocI?E3REqY!bHSk6Ct1 z>ZI{w+Z{hFyn?}6+yi2f>h_IeM>BBvC{B2O0dTjWy>Y~s5@#fr0fmJM&ok<)kO5OeX;x3sjt!pa&;D@#$kJ!b3dc`RPF z1&=3z+&g>4*mDu}nv<8F$@@Gxa~!{K>_t(p)6#b2Y(|Y8%j_9Dv3a_h*TG?2y<+T| zi1&Vk$J<0~>>W_V`fy_RDt2F&raw0qb&eJ078W?Wq>`tP559eY^($9%;H)HoEU^FfMA$kW2N?U%)xIw|d*mD^PMji2YM1E3xpLtGM|bStMaa+fv+K#0x4h8BZ;T>N zluvltoRmuIgu>E})Ty0_3wSIV6nELXWf^-;-A}3T)tuS4mQ`yv@it0@I{XcnE?#7> z+c6GbIZk9sx7S?{QN|(O+`M#!)BD%5;n+1f{LaDoOq#cxIPo%ba&bZD`<6ys=Q4EZ zWxAHjikHVpZr-_v+uD^}d}{0g)(75Y%bW!)TDgUr&x5#e@+wkaurB-sr`#oR56>^1 z;>LxG+_{&s?=wm2E3tOT$msba7&~qpQ&zbVfAAy^q#c5cX)avp#?`0Bp5=%qN7y)b z8M9XH#9O=v{BG}H(xhoT@CzkhkqYR1-pDUVmdD%N zxOaRXhCHLOvQm5{68=3%w(pLPj`E;S7jcjNoUOUg<&e27UCNtL(=`VR&j(>?o|8^3 zOEIvd6Wv$1i?@iaY{H_H-zG}g?Wn>`AsQ+QQEz3SLYd4W+=8rW?NIr?;&DPDYLymZ z!_Jwkb`D>}ggCxg`iwY41&}O`E7}VJGpt4VzBsy-53yG4+P4$EIt;gs*F}=4=-6)z zCDW?@enD;~b;%2%_oM)$+qlX>woaMImCG5I5=|)>d6xTOTI_6X&}f3#xNrt@=gnvS z{CUioJ6ALl%}G#y|oKwr6UmbPVdaiZ|ysaQtm%=FT5Od6#77bQn#cQ7fq9_?QW9x2aUU z7Ij*5pmWD2l+06=Ze6R3qZ@g3&4VJ1CXhX41Z}Y@g*iF7KOu!XGPy%)26R|S!1H5l z_q1W|oKX~Ub`a;|%jCJ27&><{VOwT%-S{ZV6mQai8!N`JdebIu_$qKzSaWO7F+x;o zrcK>WlL<4ZVi&?I-$-un*@SnFwzPBAvirzWg6?18c~Fc9-^fQ1-Zrn6{l}hhZ|yXE zT$?auRCVrbI43`sMl47c_4(?}yIHX86jjPOvUguH3uiS+*`Ahim9z5h##IW{>rabP zdfZ=p-2-n=^|JZoUk^OPDdCzPPf^Wg%P#7l7_FrRsIX0vwxMUpi( z)EP9MxMQohdG-Q%8gwL|!i+Gl2i$z*$BV6FxM*LInPdBtN#n(qMQ%9N>`c$Cnw0ravPm?ZhB8vcDnbmR7vJdxO`n zUUKKa3_hl*&;PM^7VvQ!X&-*90rG(nVFfHnVFfHnVB4B28WrWhpWzs;~c{QPDnZoh}Ey$#o{Uce)7 zc^ky8BZmNl^nn;%@hA->tRiowCwD*K0OC68iMUetasl!^PT+ z$h*54zw9cXZfvC8z@-EPRpHX=F`NjMbGT14wtTiAcQz9S&0k9Bg9CIMyA%I{K}4Qh z&B7zEMclU-GV&1eq&qaI(+izX2~2P8q2>HbxM#{r#*Dt$V~yFDyHu{$kmR7DG|8WG zL(WX^!=QDyC>ZF=$UY;40FGy1>%N$j68E&M3sZ*-Wc{rE9C!;)xAdpZV5uCuW9W>X zoLN4E!Rv2QFqb&C_YiTcIc8cV*Ur4)!Grrk@a{q#RDdF)IncLNN}R1rJ29^JK%$eM z(6-|uvej)#Gry0t>@*FvTL9h}eeiL#K<}K5-q~NUQM8%f-8g`Mr8YQO%Lu!-=*ZozRbn zvy63%5Ax~eYI-kyDfVef<`4U5Gy61N{+Y;-!2>Um1`qcP_<1^`6Jk;MUHht9Sx;_X ze1TrP;G0&;!Le(i(e`mI4}Ch5&s&B@NMgNClhTlo$Xt#B;pccD1i3aLl(V;=bN|63 zu5CDoZ?)3muH2<*$7STG--?FbZ)nwX7VoaDrvIwf)NJ33OmFwlZq6mV{Q}77?SZXZ zZbnY*Xz={8W5`%sT6MrS_A^#q9zuNn*=q2|A$ebs1oY2l-4$XQ6Dwrm)Ff)<%!;qK{!t!oAxtljXl|0ddGW}*q8{JA~J?N=JgRxf~iiF#yBIK%CekMS&7 z9dpynIEw_wx`>ho=G zT2!WjuQUD`Ghl9_$I>PX^(uIhEoVlOLZc0xO=co#RyJ9wE5ftq^g;RgGr_l_sn?_| zuD<>_nSU=h^~fw8$eJyHqP2Q4s6l0s_i_JX{&;5H0@f}N@0?A0S+wy|YUnqPO=?A0 z{{A${W`kNQ3YGL(NUt&63q!F|DMgTIU`oG50%cM;7F*Qf&)4_z_n1iI8@_X2tX7G~ zLG0&WqAtCA_7r8H8{K>KqE)R@BCcd)P6erzHI8Z9kJ6w)d6Grr#nj9kTMIR(4t=0? zw}!ZRXA^l^h>V#EQ>Bn-;Kse?sdps`x;s#_f(VljNCGV&Khyupk;xsQSjorBo7f~onYBe~MIoadEUt zHKyiPqER43sHj}4H|t7J-aM4f=*){Jk6C<4!-RpIsaT~mhb9cbREWI-l`2s}RE8bf zwc_fTW4u_m5Z|_g$!?<|sAd=HlqyJW<^0n{|i{eG-LvEOqr$c!kybIK)re7E(Th`;_2W>VxkH4`nTos>J98W@{T6;g2cT`$tx#E zD-IpJOyj;|C{?5?YiFz=r>iM`LB(lMK0EOtA!Kgah0NY=H0sexG=2_~t7>Jezg%Yd z`Ri0@QHA$6Zj-%5SFw*fjeE8b`<%uvM7^}k8 z*~Z{TFMsuVgq}UbjwQh~?O6viA?m*NP=7llnK)BN97KpRHjLmCM>%zTD+3pwVC2}A zaP>64c3dfhhTv2F68HwW9 z?k#NJv6G!Ub{PJC67o)+6o;8>aT>NRBpT`g#Kb2GIi*7-#GHA~(s;(6;6-!{H!j~I zPHd4Ur+k*n>u1W*{nwE{I>Bq(@|Z;Ivj?vbXz`r&A<5jka38Bo+0ZDG zP#7ji(-RXN!rO0JkzAGQ5_WD1=U=KwO87|d(QD)gu;l208zkKq=eH_DU{OyZZ{G&R zBW^`SBl9Uh)e1$Kxp+Mr7A+&UM`~n(o0m@zCG#aHs0cyDbD&L9qLwG46oNAA$6y}H z^*nt39EDJ_8bvb6qHL&y;8hEes}agoBYE)p8ZH_N3eo5(=%eG@*%u^)+~=t@h&T0I zlF5n4K+2XYMuo!CR|*Sy^vKN6Zi|VGlM^2HkPF*ZbIE=%w~z1U@THfO3E9BI?<_tK zPH)S+7e$%cr-EVJP2OU5gxq*e)WbKJ7b|9{Ph!Hth>edne1SIe%S{ILMPi~}@y0a= zg@l5-y?qh;?tN>OSmdgV*Ne5Bcq1AIQ8!q9B9Y1^Gw|lt8MbWO#?GBP*|B{qM=sn& zC9XSOZbF@QMRCg8i`?$XBqpiQYSbia%qU+qfMa`4k`VoY`%iA8(nxtC@XSWWm&dsq zmB^WkiTHU-7bT5{GD^C?DpFZ9-o13kXO?b{WW$~{bni8WJ*x%?;jM@BSBgQak zKqq`fn8w5wWkRT7`-4Z1k-Q<8nCN-_;gcckk*M%;)6^Cn_H;QL(XN*3fGwncb*T-8ibG?mTOI^4i35>9u5W7{yK@CN(+} z!wW;gJXcfd#_gy6Dmx~2%PC$g8s2^WVi1L2?%u^SXJJhA3Y3PPCpC6HnJAwxCmWad zXG)7^NCr7(;>DX1o#azli@Ad<4sp+UCj}ADqxV|!bsT_xR!@%S?#k|d_H-DqnVMxw zkd&PK)3MTvOq2@r=Jxa&KY&4lMzdw}c(#oi2lk#g#lIwFNKrf?p=M;x6M*{7Jq(9y zAMsY{fvu$wLWZ=8G$|6X@~cbE$3xgBglC|)4!Kez%AU9vY8_d8oVb5C#T@DMg`<3q z(};VM^4-?S)q&5?UK)PKync?x&J&HJFC#}zW?I+6Ol;Yncx!h;zwYzu1zLxU=)_Cr zYhD>%&eBG4zOPbO9dn!cr{&bBnoE?o1hg6RP}h1dgKh-UG?xR3$!f8$$OVxXUj_N~ zt@C(WxE1~+VCIpF(Ifjac<5AC4ll;S=|>?;R_+@hB!;_S>MZS85 z-qBl#DUmjVJ%pSQEt?Qx)rkG`1{%)ek*@%sA6yn?QS1QQK9Y-ZoIfjkLm#^ z9V@YH$uQb<9mIwe<8ZOb#JFjr>Day#vsbL9te1@JO~$fr{$M%}9>eLoM<`(L!H`vB zn6YXZWgW${ps;1ct__qDEt{Oh>o9!E1Ul9(hFL%^G72#*sx|{!l>*0X)mXEAHGR5t zq5HrQLSS`d-+_f#i~1s2h&zSCksWugkT0V*>rTI*bq-Mn{Jfj`Pou%a&6G|&MZbZA zS+waW4!#AbC>pWS6EVE&V2akrkB!Wg?jxr#Zp>&#j~T=Gaib8Wo+5S1h=vOcoxPRJ zqD1AaUKvjzHw)J;iGyWkW{xh$yaA$4y#Ag%LFLKqYnO7)$@B5Jw}JlipRr``NL=(W zY#h^g0ZXzRq%c?ZAs>bn$V=c>`{ zn$Vj;;@(}0Go{6(1-Rc?&%lK*S+HX;0c9GI+w2NmXC9z>&9XST6=ZS0LQL-2g^9aE z@ci!MiideD^Ck_YSFb_DORf&Z1F6xf)@PrOK3iwX5PSj~8i1)~F)#2W-3oDVWEXs$-`izp#vP#~+cy)Kui$S8OOzx3t0D{wvv9 zFJ)?pI7Sa1$oOe12s5#xe50bNTTQ9hrWhYzeKlK&<7tG9j1KP^JE%9acif=hQM`a$C||oE z&Ys!HpTmoS-N%vr;Xe9}oW?Va4;AW{A*B@LV)2~%EbZ5q*b@EdTwb#MmpY`r)|y8C zYDjnPA3rgWG_WbH{Rm68nZI>npy)fB>AzjY#+e;cHfr8euih})*2_(}Z#}H{&nCn8 z4dlKgUR3Mj@Xe|q+@cN}XE$J3`y#xnyPN3^EvQwfBh!PAlh-jNnjgv8vu7z&rYz>> zX6)@QTf@5P=PpQqkX8DM3f1GhOlvK{&n|1e( zaI;5MV!EEBQ^5qfRu&@s^b(FXYfi}(`zYolrB2E4dd;b~Z6D6N1~6f-7BAm8;+>nb zdQuJc4X?+^@IaE{pA*<<7QhcBb+ zl%rUPMp~5)B;TX;(yu!`Q6V>wGlS16DY4RLC&`-g_hN#XxeTr0SQCTLlX^tI_L}@& zWYPd5>FpsQDr>0+^4E}hZBh?d5Cgvld+6?%({XPNp z|M6>aCVu`%l8X->KfLH@iFow|%d9>IZw$Xq%05HYPk;J%?2iNbAsF6nKE4g{`8qso5UH|@fkr3m0-rl`#5M)xC&OiK!jn%I`!lqc; z#;{`QLOv_Zh#wE-hvs1lFUc>MI z7Bgp`A1cNrel1Qr@3au(5;ENXUokF`vd{loj7!*O{9cSp$jI*#2&4)Jjxp z4QiG6`xg@9-}AlSb|b%yg0=cFecFWICB`KzJPR^(%yh;X#rS{3ST6tC{NWyQNsNcy z+QqVC+YA#PS$Uf;VxhBA#Qoy7sAS`yScR7y263roy|x=yjx)f#%FrF99dT8Fh` z7^B+Gr`6246!84axV|f>-lso#GTMo^ooMArHpt?yQmHcZzDu4)EG<%cqofWbX~1BL z+ba{S?NqEDG!jj@j#LcLa(e4QWJT)Jp;mrObS9V!!7aT&)gm3%c43U|x|G(_ClhmY z4(H7)Gq`>p8&f0y9ckJ_ zKL3xJteD6!*M>7`$apFbUqU%wGsD0q$?i{`^oFA+-s10($m5T8G-_9s*C)4g?Ufwg zJSC}CDkC=!9wQ_w5xv@s{8g&plYEdsOa+RSEkM$X59AYKD*oOHo+R0!4t+_S zeE^NCmB2y>d0FgpHXpl%xw#2yg&9G0>XFUC#4zwq66EVgO~$M3WNPQIA@S2G+Ks%* z+SOx;d2o!QcRpcZ<4DD7bqMebW3&+DEhbM!_T(6!9fK&D(~ZP;x7mB)F?us|yzFey zd*`QWK_7JD`mP_@iBq8(WOKFr&7%B23G&^$cM}{OOz+;kN&3!RQhG!Z9j{)!B2%VJ zh8KT&>>ZTS_~OM2vSrI=d|?_%bEIW$K+OB>8djb-!4leU6<#~%~qCNfJ@?~c=J!Bdva8z98F!eH-hVrqdl@g{vcE~n9$ zF%-?>hWyzv)?A0Kt;(@u!5qr=9)Wv8GFHykXu_VdWW#0p%xcZbo(rkccMyfMB{8-4 za$3!tPQ>=nY!3}!c-LASUp^h@`lDzPXu`Zn6Y#4&m{J+znK^JGWv8y8hL30zX!%Ky zd$tjRJf}7BuaD4W<_i`KE5Xv$!8GmN9rc6V?7Hv5v`M8H*JeJgW=!V&h9TU~)Qf>t zEtoQV9>qEjAhT5@5zn8p`*JLU$MwKl7s99!ducym7+x|Zzt!W}Z|Nbwc<~|&7cL}G zyg<`4QY&2QA(wiG((6MnrBSkTuUN4nDucT(BSz8&N&HG>%-BQz&q2B;>3RH&k$*O7 zwc04g(}*+`s3#n~ok*Q3L6{h(bCW76Q*_EtTzUju z+SkIx&V)1DSD?;Ti~JeQiFj~|4-SsIt>R|RK#JKo&Cj(vd&1USkJ0@>U` z$AjQ=B)ewCRri6d>yMDDPD`9Vo#dr`1)7z~idP0_&K@{~f8{bfI&y_Pl`E3?_#Bb0 zCCF`hgB>9*bZc4$dpj4hE$;7zFfN@M-#Ab0FbQn!#NDrr`L--vV*t*opJLh;uK z2?^oDhY!@KQNyrLdS0Ynq4)3K8+rx5UQ>Eoq%=yOl(T2g{;S)Ki*fl;izLkCayik_ z(FP&>pOE&Kdei;={qgaUCi3`oq&h?Ty7NZ_xpa&)=uq-#q85z>Yw=flCXD%G}WttHdwF=}dpJ2bWx9N#0HLS`BLPGSLZn?d~AeKKOih!G=3j2JQU z`;nyR9~9&oEL`(ZHAgI44_-oLVrl3tihBQ?PjPaCNH+BFn3|C*AOJhp%rtD-n#NVj zk{&^S`9y3?GI|`au~L#CS79o|{a3%WlBtJ5bQ{i@()zQ^;E(L{3!>Cw zTXGohLz4{taDPHNuTDl#mBzGe*@B9Byhun)#ydwYq8{BM!Ni)#*N=!c&x*gR)Ns&B zhor=>QDftm2dD67d`=WCO>Hdi-bUeTz>;|1X&;XK}|?+>B3M{li2vpmGo$76hlR z!@i-7soZ8hpI@G1_UenNp+6R#GM>mdX+FG93~k(#uM;cJ7*?Mt2fxpUAAyQ_O{!D2 zdR^+)twXJ9RakW?Bz4ZhK-G?m`S|P%bJt%<4gJx4 zqe~O0GB%WW(f(F^ zI!^V#AnMewPwkr3Y1FzqZ-0Yj+8;41F=E7s5hF&vVe-e_9vUz)#oSD0=*do57cVAB z<%_?P{i8u+eZP;iSu3_n_KebuZep9{_FJP?V9-COor?QUUXaNzJC@qFESh_YR-=32Efc~!Rn*DM%!MM-{K5;0iDA%{Ub1&Lkr~Wd zqGbs~eNm85O;w(*fDouK&COJ`wsf~qbyrnp= z)~My;IxR(c(j!ldLuF=%li2=z?_hcc=j8OFYBbE*iSjj0Vz4%Y1Io`;j=PqMJ! zVH%B9aCApsLtNpTJ5wdND)-kkHKh5M=TgMH=Gk*4{^I$2_VlT7P^S?iMvVN8k?L@% zPEM;qoqw>0JQX33r4hZ-%fqk;VI=*P?8kqS!r$+s5yD5TOD}MZVO@<%l`NS(B4 zh+$UL)G-7i({Qu5LH_X!E!)gB1ijxsleSCl;o$1R%S*c%KV~RxdXD3v5Z<;nwm6u6 zWLW*~eA3C8(rGATMvb9k-SNZo4F&f><$U+YfS;+&-KxLK)~+rKl5!&-7s664~?9o?$Ya?mU$59>qI z!7B|ZJw3f6;}@Lb?C#lg@4tv)4Vx1zP7``;Bn8_p5ql&tymdz=c40+aa@< zWH@%U2$u%entz)}%i0cG(dd=VbLOWw#eL|xUWDjb(zyw%_grGfv_1@7_JCIpE(j5Q zmOXdg;GMfXHRO-EBp2<_$HDjnwIqkD9q(^!qU*#H5P63_J=!pMWPiF(nMLTQYt*UM zl!+4-aO3WIhBWQOiK{o5-m^O!E=TkE++MN&NG9~`$He(pA^su#8+YWyHEEw7Y`gh| zGy4zn>U=PpH!kJg%NJ}u`A{@oZG^BiT#XRJTHJ+j)`Z`uW|byPnz&G$E11DeyKwT_ zO{R74#)eB#@Z}o)yLV;S(D9sj^c)v=OLny{$Jz%{Br&ur-;rnH*Ui-vXw$zh0|&Hb z>FG<{e)f`+`?v8q5iCU`^DFjF&Z788O8yc38g=5-^&3nP=h}EB2Gyf&^zJl~3pb97 z^8epeqehGvF=E8XU+hhyN2NETe1nek?B0cLox4&bvo)%eS%K07oe=8InM={UdOj3? z(qPU{CpYq5;f&5H1K~#(a7VN)EWdVho0?-CbDvQg;+eK;1pPkld3p)-R9)IjR!RqITt&|xUcc1-8S zhW#So2z@udp-Ss&G-y_fozuJXCeDO#tpn2*PNA&7)RX;7bR>)IeS2nM-OlISICg-N z&Fdr6s?aKv3_ZQ-q$o^%OE7W9G8#C4;KYq5^zXTpHcR%fcGY&;l+24FJ`$~W5R+&1 zWO${5tlNJc?$6+XU1RclY6#b4WBjCrY#mXaiG#;bx?V@>H0wkbnJaJa-{O|e8OyK> zLQDASbHQV2Crb(Ry0~g zUddH@woaRdd-K_>Te*?pEoxz|iYHWD+swJ+aJ#>oCqYB$*S`xZCf8=wie+3owVwOl z1?W4v2eqo^;{M(>ye=_~0+#EY?GPcf+{C`e}G$Ow;RUd}Ok)Eu)U6@8e zE+|xznUXlSSftNT-rgx`GcmCgLR~?$nH|2V8C)nJlfj(I$wg`=K*n0F@p!P0VbenB zJ)#j7q8vJVW-@G(IojjxWQkHCl}$+rs&EV}&9;TJm|yw}6+5gl>}M*j+sE5Y{7Mkl zCb`Z_M(5~mXoyJIo2n?D&;IB@kP46YLBoJrEtQz{Ne~w@ftD zbcxY4oU)tg#a!95Wj52Mtl~qQ7Ps&AF&FnwAyu=yo=g3%5Zw#TpH~-%;m;qDRcM%Rc!7MRAd>KA1z^e zi}u(wY=URfYeK?uFt(c;Wty$x`iV6^Yh8Y`A%91U0=<}a?=TlS2CzQUTF#C)6~cBe zi{|8H)GiMul|04#XAN01rXuS)H6XIvA}U>+$&4r`D*KsoDmEiC3q{iBlsAWFwll>u&yjA|zzP{COwPWzE^xf`?Y@i}(4t_dQ}(k>4e zyZkkWj|`w!#a2`rJR6sHJD7JnfP?ePP_bGMX0MpV;!ZP|c4H4GTl=v)a0kanCR4uT zaTZVYWBef>mNkx{$C_)@tdO4zkDf82O$|B>Kg5-Ti%Gn{mFB}vGHiT*?(Ue!tK9vm zE8EPW&_Jqqe_`Db9rH&Qpy#l?3=#X>*(UbMJCG5X_R-^9ZuU=ULih4n$vy5Umh)?q zIPwJpzcaIzzdcO(z9+eUa3KlzHq&Cn8HSJV%dM^Rd6RztqXI6`Z_`^ES1-)m0b^)? z>K+wu3})T$g6t&0Cfn$#)6O)rIySX3}2V|BdaU={sG`vE2g= z=li_3J57(4=h#p)TJ}FGuB$IMH_zikp+WSr+s3$4j`V6*j68V@^W=%qhWwv^bU&o~ z^7!#%j5Bo_Nl!>+Q>r)e=g)5_n?`;-X=+3MM`!9Z^85Hbf?OHe^0=!as|D+zi zkjIa3b9F*z<%Vg*d(1NDz{Mn#)0+Ie zgZO?dDT2I=p*0@)@*x_JJb2pwTsX+X?sN8GEP1nKMr-YkuWc+ZABXcrq~AJsDT@2M z@cHRe>;ke9^Wq&Da|I9;a)VoMqVURAhCV?G*3gWR$905j%M(uVc*#@JZ<%ez$KtqaK%L^XSSX zyxc^ip7)qIsxAsAU&`mtB5s?4n^$h&o;x4<&k=_68~QGiKXdE7o@|z}$TQ@|(^kie zhcC&PH#;_}kDS_al(&|?RH#yw0CyP?uOFdw&54hrj92%ckvV@(qF;zS_s*Mg?1Pv1 z=F3jhlMo!T2V$RE4~L3%vuuI5={|CD^HJVeXA*H%A;3+BF5(V{_uV7ZJ%Hx5%Hkjj z$+J7>NOH)Ii%vnt>{(EUeIU`sn+*2JJbN0Czps>6GP3$Q^XbV|?!JsBZ>h@oxoCLu zGKyRQDPIVpo*d)!*$A|`3evJ-UQzfHxN`mq(Q;eLRw<2x$b?8~pWp~|IaBu0#DC^( zf;9mdor!pLlP8I8z<1Y-#s#VRUA*>$NhA!$dIEVo=Eh8g=kSBk0I>i*=}eTzjIYVe8sFee&dQCCH^o-oBn% zuh)qs<@e7pHN)CUh9X%hYN@Y57MPprP^l$%vfm$Mf~AcWTDcs}Us%I_opel^%&kzN zLPm2XBk2a|eSGfRIm3I;#l^*-JB<8T(o~QyFbeWNg+JnDB|Y=KAWyG+6XZXhr)O6% zVfA??uG=bvHN?HxM5_@I98T?7HS*6QHa7NeHFdspPH6(RWXU8@3-&HX#B=&MkQc4sV8#y{NQZu7 zc&D@$qWarsaGALUvZQBhSbGM&2)7W6nYkHJ&u(z`%oz^sy$jZsB0R;eRc5Z@laTROogc8sJ)q=vkazbK-fGxm`G z3H+8G@{1QQGJpPjgJ0_OjP!Dqdh?~;p%lOF=}(MEv&KrF?xbEwl}eQw`s0v9f;1VG zTQ`L4Sc7%`dQEQy(;mrsU7(&x5Vg*%(%sNxdp!u8!vZlQ-xroG6^vl|dz%5wvDK zc@z=2Wz9(jYw-e-$$0Z-R?&0N##2 ze%#Slk|LwAbaTN(9!pe`IT_r3{hjz9(I@ce;akJp6FEhm|2rfPT2YCXczUD^msiGq zCdo1bw(@A?RxUW%{QuAF@8S6T9xS?P%9KgdDUju>%Y|+Rbn)Z+zO;-LK{*xfzy?Zyo!NK(H+t=_ZG(97Uju$Up;P3Bmc=4x4 zK`y0H5=hyzXE)k-8cB1qX3fg8XV3mtf_z@J{Cw_romn-VI5w&b%dA@Aa4eW%!8^#y zed-sV&fKG2sgr*wjr!N)-nKmyUa*hmiAPv_`4yor+{x~Hjb|3cun7&N?To%0YTlGP zfz>Ev8O7CS4(vQWoA856nS1Un-igsf=WEK+mP-6Hj;3+1rqt-rg^;O*xKi=}+j{0B zS)Rs|D*Oh1DagaGt)j#9%LL`mL`-4=O*=QBdtg0=zYL{S*84OoxRrHx=ku?x?*y8d zI1o4e6eovOChq<^+zNE(yk3c7^&Sd#ZiF*>;$vem5klYIQYH$Jn%Gz+PR@3ylHy6$ zn&IS-60=&FL{hREOVMDmHZvh9HX6O919sMCoS)Nik^8%=0(VOGp;FNAD7Nnhia>Ua~8mY76roa`~vYlw+Y#?i?!RaA;}#Ux|z z>}YUApx5e9tCCThS|U>`P>OX)gj$;`m{h7hfqRZqS$>@>Z(ONSF#x4Fmt1RZn50V_ zEegLBf0BsL$uRNQzo3m`YKI=Y%#sKDFZZ#`(~p^b%BF7oIhSTNr1GQ~Ud0EKQ8Xl* z_*!B*{3=U|h%omu6w6|VGCmf$i8+q;wuTAblEuB1**Rcosu9Ax&f$AFsm3 zPA1Bu9A{@|PM$nT?%cVJf;^2#OF=$%-gcuP|1-8S8}jq#&r`N+**_!}{w&U% zIYXsNl~UJ?7)d++>Ne!kIleWlQv~_KnuXY(r5l~|=-6@a7LzuNV@B=KjJ&v$+$Ilc zQfd}6_P3=~jh&phzY+%_Is^L0vSWxZd#*eu`i%)+o?WK&kYTi~R~rwTNct76OVG|M zwDwP?Ti$9kzj2T~rE22TYcRzvLl`>l5(mx>p-uH|9D1?_cb$f)uurHhq@GNfVFJ1T zHQxkzk`Uwt7*eYuWtU%|j&I6#wc;ARiqFNfXL}}g^`l+MO)S1LhO-+t6Q#2f!cLD? zXG+74O<7X9Hiuk`aOS{t&Q5Q~!ZnFZf3cHGEyvJu>r_sRYs1NBT4KG+Fri2ki!Q|A zV49gB<8m>f*Cuq@WQq)3LyxRa={$G|R<;V{IlD2tz$4nvxrej072TFi=Ty_&95Sm- zqteMNnSO~DV;3@YXibCIjkvysmPWv4N&G`{_IG zJZ_F&RBhqI&Sf{Swt7oMmagocT#uE#TXQ+W99h;ntesk)F_oJVlP@Q^%hbj>nsthzm3vdi>@-gc_NS`l9-4L7i(?)?y7sQc)~?I356VrgzHNEGbRrkSOfb(; zkJS^Kux)H_4uz_T(7Li^d=qAmm`AiC8UJPzXkfjGip`GDepqvEZ(NL~aCeri8A&cX z={rXPeXG@??)nQ<_A*=oI!!ps`t;*wv<$Nx4MqGl7*U})i3M^~sAeTz&RI%i-b_4w z@R^kdcVKyPI{nwYz|qQvUaJ?u+CeOPCd0)%3$5FEuw>RAMoyW;+c$5>kt2sukf#x8 zDagnF*E4k*`9~s&h4kL@Y^;oo{8@Yxvwtll;T|3y&eNw)4YMQv5*tTnoV{}}Ytu&Z zxv5cTO)!)6g}EhWGU@9W*xIG`9(wuVEd;bQu_<~DNhSfTI5>v~b9+!IZ*9)JiO15+ z8hfb|lw>TeEip-qBTQk2pO-tPP6b)MW44GR5eo+=gSm!6slrLb>*-{XF2wlHFp+vK zU-2%gIOS8txP-Zt$QPFalyQH~_B$W3HkTp88s9A0$rg~6fPer3vS!5=6)ML(jB9Ak zh}kPSW>JZz`J7OTf018ek%ygU-XUu?ZQshF=^cpr{2uorZCJ3hH~R-nqxj@?tl2k^ z9liT=_tsh7m=P;ZN88N11bQ4Rd?=vS{vU8Z>WDukmvjK6)rs3$$crsu-8} z6!MNjqG9kAnWc=CLTHwqvR=gBpKaZG5tgh)+>#Kgq0 zdh`M+%n;|=+ndeeT;WNg4Ea@O`TD(>AKlCQ)O3B%`)MR>x#^sYjA8$gJ9HX8hfQ;a^K{255~~bn_3rhA%ou`2 z)lM`l-ijGxN6|2QWoGUemny~u+UI?-e|iQ&^A?V@kJq zQ|VBp5TT)_jGr}+F@>W!c=!s#CSPOm{xwW*>%!6nN6;n3;a$2jbLMxaV8POOBqgE{ z&v1I~Bs20K5EZI4KZy||MvNHwhaojuGi1nM=u!K*$0R+9|E3qDIy7`vjCBJa? zR=5yCDudS+DSnka8HJrcL0OWBH}|7T)rvUE6=*FrDCA1RF6UStXiS<7g+nxLt8I z3nQ@RF#1(7W5L*d^q;tk7*9X31uUJMvCt) z*FzdN+rrd+yIC=`4!W2ml11J~qk0V2X`(0D^y|6Y$Y2wXN^OC^hcuaj0t+*(*iRtJ z&G%k;ynG#be(^!-S~RyKeaN2yUfjOS=`&{y=AUOypW?xrNK8c|(JEUh>L@R=Pmzs6 z{`Q8My-h@8RHjZMLheU_)DPEowl;Wp`xqK4%9unw zXIEnMxVTDo>2`QIiTsUMqEJbbn?aI1b4IWFkAQfd?GP2b8y*>0KBA{Y8ahIo`VtIM>BJUH^Pj}ImdzaX}VLcl+Y+%jKorEQ( zZukXpAMSDIX+-K;3L)pu6DD5#H%^`>HZ|-US{|J{L&SeQCR4@LBm21cBrJ7Zr1{oa zjs!mNL~9;=y`DR5bMP~*tk(FTXyg<>5o** zDlQ+~$K|Ktsq66R##xS@4$)^1?W$!Dn{ zf1LQ&54ip^Ds}C*AoAkGRisz!!{Y~8FXgLPHf`O>=j6ZlxCBWIXDe5eJg$25YK734 zYE(KuM$c-)ra>Lq`M`nZttw+_=|zMBh#L~o)9GF-ME2m84$(xT-^$PQ9!))5N z>%b$gCJd;PpPc2&;$I_L zB3+$2TXg+~1=%!a5?iOt!?xaVKHb{DqX-uY7b%8wrmXZTA*c7~wJceAjY736q85#x zlrNeY&?FsW&EcmhLRXNnTx)_j#GvUr*|BX2niP{&0{Qj$_!hlDGEnPK~${j5KEQ#?zy z_+^b|;gn!r$IDR)ao@0Ee%6ng%$7-uu&Fx;C-Zm|O6gqES6IDa9*x1ZDseUPoA;3H zRa#>IU?Vek?`6s4kx;!Qfg(Idg@&|k-BRRn3tG2rNBKP7h8d6(k}POGq7yA^b;d#~ ziGGd2q$SD1mmWPF>DP58ixw~C^xY4l(I~cwxGYQ7Am@W6tXa8;W2!nd@_EVhEzc<$ zRG6%OnJ7`EI1g6L;J}LUyvx>(oNl6lnVLtwS)y1l{wR?ttxtg){d)&7vF{jm?byb= z`LlTFSW4vEG79N>~BU=)DzZh-@%I0mXxShnvMmc={bG_OV{3~ zXw5Pxl0-u*wLE0anUkl%+ewU%HGK6l^4CPPPca$1Y_ooBGouZ8TJlG1$R90gP2Rre zxfc3?VjggMQaeujcgJ~ce_WSbqH|zMkCs%i{@EWnzMrXcUEM4kFF1=H<(!BOKg*om zRvh0w=BMe}zjAwBd*;7s%chAHQ$sWiDo~h$yRT9~^#SL=9KRU<ll01*m)J1r<|f zOaEPb^Ftm=HES4g5=g0Gje4j}6EGaz=Ka!}sTUdD4p9vj( zsNvI`^&hWd7qWo@oj0;_^8qSk`8rAdzw-O_x1`Lec~*rKFEAuDz%d-L($bizN%$(~u7?*Bg^ zd7DX@um0a7`Lvd$p8wSziVY6t_|B=U95#~fa~JbsNqffL%geB~g}A$X0uL+9Wo=6f z`pme*q6ys%$Ne6jEbGJI_(mKVRz5Z4KaofUulg+ia*V~sePSM6*+7VX)y%N%pt2 zOTDxfR#s>f$*6TESc~|j-&#|1tSnOF&})$^by!=OAs6CQDxsDlzhqh^$;xkn?0?Cx zd0F}V;0ib2Mq=%lf%4^o`1t4}ne+HzqK@L`^CW_D|C$#N4euVm!!vhQQoX10<;ipG zb7dnYVc#1a(w$!d!5>rJO!6&Z~r?;VW zttz;gDYPThJ(hKvE^62j5R)6Z0mP%z?g!lB);};pEjf$SQsBNaoyu ztMq%2edWjT=Tk?7i?Y352ePBj8-#47RnM~Nbizwa7GoV{-EHsgao$mux%rjJVHg%(BR-SE~==y~TlTOUYTXGlK5~R3szny+0~JP zrRrhw{5HjUwZZ*uFe|TE(x+uf&a7WfoOspgT`~}I{Tx0Ox`<;lGptl;nqR(7%13S$ zm3^x+^}{*xKibc%71uEv+!ppICV`Hv7l+mb4b`Gtb&bg3iiq~&T!y?XX+I)(nh-k`o z>`3&1*<5*JPlUA_gZg(Nqe&Q>7O&)Clqt2__MvP(8%{49&CU0YMB2DBVnk<-^exIb zA--3PDon37gK4|-0YQ74v$gatHnq%bxQF|8f5L|ylxpSy8GCEiYdouOV-fshFuQ^WL8(;NC7~ zF1x|tx#M~A`0?LJkQ@1T{F)&DC-L^&a+Y7q&h+75J66&b?Z<2Eip)v#0$*pY{wMH- zAr+@G`0OG)QbT?#Mz@D)OIizZzLOc>qY8%>j^O0+l^nRM8V>&vUWMT0syfl%`-^l6-ri6fVY*j~}2?|OQLEuGo)-ZYp$qyeR&UAtF^|)9AaObXWfBEM1&k=>Y8&j>otz};H4aT z6V2+@EqRu?DxF)GVaJgpL_9mk>}?Nd)U7?f@2|07-y?COjx%fRdu&Z#GHA$3^41$b zS=m#Xj@d_!pmG!pDvcNRsGeV?Y0uHv6mDV=;}W+v&Sv#Z1>HL}W#y=GL=j4_Zu2SJ zeShLT>Hl)$0%@&fG>& z(;isfT*mnGj`W#0j3z$fUd`UezDd2W<|Mu_6BdxE@a9jXTv^?y#l%7!5$ zI2EPm-HBzazwbo5Hbt4)s43xjTGPHs0f?7OcVy_~v20x-M5asmbZo@P-yPqQZ5h@3>wwC%N9I%fA11~nJQ%ZUGC%&it&#MOQIMxYu5Vw# zwJSSl)^q?*t{-IGW3aJG`6y>%DnlLmnuk^;sh8aXvkZl)nmLX_OOp z^0JlW>)IC|nUcbln^VN!m8xy4iw4z2tew1Z_edGElVIb=wzI(m-5bV)LthMGCNeYX zHg1Glmb_$$mGk!FGoCw^rFvEi%)N?I(IwMy*1Why$MYF2GE-9=oZRs6aOBqItrV}{5#pW`;!uvNS)@3NQ!85}!F!IQDAJNZ zR~hyN+K@+kg*crHPOhGqn_82cB=V|vH=eGV&h{gTG_9K#l~N<}$`X4U3(j14ME$m% z@%7Bfxc=kGF5>aYpO2zhZ3%n&k{op!VrOnjiTX8(dvuN}eMb`T?l7%JPr)`Yr?~G= z39Q>FWuFE$Nql}C#|&OLOL=ALkE5Lfl2uGxa!#f#+r`m?%jjL!gqAhhk!YV47k6*0 z5Dlv^HSPtA(V%uQWbfXIW|t|Ma|cnQh!@#Q<|FFqCvIQ7Lf+a7e z@&&b%KP75Zr?i`rcQMJx%&jO>y*v)~T6Vs)r)TXvxMVGlzfUHSvpVT!rRJ>z*Dmg$ zbi?+dr5VBt*NRlmVvWW)A=E#P|MWHF?~2UA279}&Mm9#$22q#0e)WC+`}n7p%fAQu zpG-`Rq!&~n%->_it(U>%6sw7MR#0y2d~ym=B7MeI$>qpgz3`2>#kC|TZuOCKPfY2% zq&s(g95_4R5LfCyz^3>Lmh3v75@#ABPmCpZxrS5{>HCV(+!amiNtAjxeeo)K-@2l5 z(R20geX+F|ClBAEK*<5f&uvDd)1g*tiTxOYJX;;k44J~zVje8M+6+^jl4NN#q^VMf zY6Z6b#VD7p0Ats0A#2n#_MeF+qoaz%#AJiL>92p>*Bd6$(AX6xe?)b*dTn5wt%`(X z6w86mGw$kExkP~A0#tyiDXCzp=JCtuOTQIA}nYS!gjlMb?J)ZJEu zm$$u9zt!>h#Z#iirjN%?lBq}~EKHx05GT1`P-13hho^%Tv-Yl~V9wfQm9%lM%rf=jt5DvXk+SN)kn0>9lH+g)lFg$Cu5=j?$!e1vc#1PT4#@s1)J^ z0^ckdd3N$5G|$HCYu7OK3gqeYr?econ3B$CC|05y(+J8}2rqLO5$sh`hr7>14X@%5_Y-MF- zaO3rBNDtBb_wT7uqXx0huk+Tu6itG%8@5@vXX5#_Qv~D-#4%$oJoK@+lx<9h!g3al z-9+%s8@LzmMa!a@kS9GObMa;rEmV-0hwo_8tr^Z~U^@Ed%^Upu{E!JD68qsLwt1_N z%i~+`w3&ToeDvp-wB`(+e!0mQScITV@apOdP90j$3!j>dZd;Xzm#@fFrZj}c5Y(Uw zk2lU^{>B5C78%H-HpTh;@+Da+RKvqe!JF5Kl&)5r>bca+oxPY{7q5}6d>sm9H0Ska z6_v{d{Y;QccAku?6GVdgwX@DmNgX8${~8D4oyW5WkD=KHDR6F|1(`lrbUf*l~%l z2NyXR?atUy?eTTATF(@o3!=O4*m zw>}NCM6+<>PJ*vr$ERF>8W;8@G2toM%e16$;R3`w_(Y2?^-;WghC|_6?USq8qq38N}Ok}T_;odzBH~@mOPrXtX+GVou}{7wD(j> z7x3cUrENS`XC{+qI25Q*0yiO4y-U`hU?#oDE79;P=0mj7l~z4kibls0=C9t1Q?7DU z%%6!5;aVz{E`(E#{BU6zdrv>+;C%%X#}2{I^cAyb&SUqnk93|eiyE~{p*y#jy{E)J z55zuW2I5XAktRNr%Ik;z%Vl;va%A4zjy&DIob_9FaQUqT!)H$-i-#?5&TZk5V_o_e z(lKT7LaqxD?&DR6x;66h;bl0*YL>@Z8N;(E2U@gfipz)1Oxbt=`z*N$$Q?wFrd2pI ze;OOFU&GEd3uS9m$35{qI{&g1^s%98t?cZcJ&t2FMQL0rcti@l+_SwjPk91$`L<3v8cP=h2xVgC*7vqvH7O6Z21`3_v=x8XXM$!hU ze*L+d*dN2WYmbbBI{ys*h?kY$hU5jo3hN(VHvV5y26dK6lS28U_%^8X$D@^pvT#T@ zJUecuMImeAp01{D|47asAD+6$e}P`yQ?0nCKl0nvuf?g9qp`G3lTT#o_+-per}X}J z{FZ(G8Yqd4mH*AWtQh%E7~RVmNv{|ObEX|q9iDcBI=BBJGbJPGhCg47OZ*X$@OL64 zcpoOEdl|&IgjI&3bnQ^a@cX~UE|jl{UbZxPym4>2xbY3z;q2O^0c<6>OW z<6`8mi&2mp`Q1o@JiUJcPs>I_-kLq=-@Iz-nvi5J`DoSb&+|NBBz^HuZ=f16V#J7% z{|@OrVl-L#6OdZ1|DVaq?%lf$W+1IwxBh8xVR}Up;-R6TxVyU>3Q&6N9hB1e<;xem zyu6Hqu8gE9Qu&wsQA>8=Mw1mIMvNHw`;wL>E8`a!CkFac_)miTkK2&{ZwL+!HrSA- zXBSJSPoJi8<;tmRMvSB#f4`YJjTkXv#K@`joWjH7Jy6H|@DztwgT+^-=F? zr6MKIk`hszJrTqAH^eB>lJrDmAI*l5+NJnyV67nCF7aE1QE@_IM zZ>S?82oL|)@}d7_p%CbQ#Z$nybS8gGr%p|xG#QXmg+}CcN?!i_SdA(rpQY5dKRZ?;FkVg_l#;Bs9!!+?ZqUBRH^p z6JP#CgC#SgVJ)sm6G;A7MAEUKKQ+c5OkIbS9ZFH4<^;ZcxXZ?UcTz)tFp8(NsNH}~ z7oYLu-c97+iMyzqt0`Kr8h!frqes`y%s=>mOG`#D|HvcGty#%^Y0A%k;WgbVwjwlj z&44AMtEoyovCX(BHv3T4v2d+uj4{+qWNGn$>2_mFKD3{xgcmm)w0Bmb#Wg z(%aLt?$MXdJzCRo>{de~;qC2tH0(5*DSg^Ab@yGvexDv+V)N8)H0ig&u>O_!+iNLR zVgL!L>nXgUdFI@->phS@eft>Fx&GD%_z+C5p1tVMs4|7iG@w`at}HwGH1!w}*Xuo$ z%UO=z1NzguR}Z>&o+olj$&?25xM?_np84aNGi2LULUs&c+?tfMNrY^gM9(!hQrC`v#I|l@SjcQ%032PVTK& zXqj0$RwPmp%lj`eSiAY-Zm(iQiDH!9c8~nB54idIk}@n!O+;u6T2mRG8C=D>mgFQk ziLtR*yL(}8ky0Ujn;0mR4mrxOE3gHL`zC_&Gp*_uGY8M;I^6NXXdVY)3XBV^dY#}b}?3;T0OD1;c%F3&Gc=~i9cB!H8 zi28v;*&1>b!%&*=v@o)v&v9w%uSB39l?d!JqXU!8Rsn{@L6;a+2W=g)z+a*mJjSWry*0+Wy)?k zPsKYu@tIcAvgB#7?3-XOkbMwB#MMl?fLG|Gzjk|AU_QFQ=?0%io zrzZ1e(@=VSY{=5WhiEbB1NEwSarsdq{bo(%MyI9}ShJdaEe12@%n~Nn8;Vl_Z$4a6 zG5^vGmKD#(yUHEO@ct@qGPhv&gvPAz-J9h6HE~Zm!(*G)jBBGMfBrsHt5=7Hefvt$-D;*Cdc*UZ=1d!tk)d0i*)hn8j>8t%BQ(LC@ zYC!$!gQ?!233cjZW%1X$!wNk22lQ(57_>l2kI<4jNAAqE1}T z-5b@czT`h}5u4?GS@Rz9nuM|PkTvf<&ZD+#VR8=aO5%k>xb)paNBwN_wLir6(_7fz zeHN3iEuphRL2?f5Nz$c5ICk60%vuV%HXnvv&O#)g+DvrojqL1K!jKMlMx&g)n11Ip znXQBfyuF?>lRt3dz(9uAsDwk+epr1t%ysh?Y#!)Dn`V=!(WM)=4{Rl4+ePHM-hhtB zd^mr6C%N5z(dtt^qjI4htU5D~wslu?fN zBBT0`r|00Vv}?JNLl_Lyt$ULQ$KM1z&OL!_s6C)@N@vX z=QK8~e60rh_wAQp4y@=|TyQtaeDW{H)=l!-(^!`wf`MGy8_Ci@U$!xI>G*N>pLqhlNL*kq(ZlhTYTS(sw`?orp{86}D?;nL}HWXivug=+`lDu2o7 zNjq7;dnT>gFW~yAb*ZUK;hP};K!>uU891v5GcOjRLBcW|nssJr-;+$69KiSko>W(D z;7gr33@`6PY+MxPNe?OCZWA|8t>MLnz6_3N!GXa-#D<-qWZ#QStC+;-J5KbgoEfj& z^>Ms4j6_S}xbHdR7zU zNh$(z<>2C!j@-`I7wy8K6q+}cncY`#_|htDbhjx{cr91&PM|@S`pkQM3IC6)$=O-S zlcOc6++rtZb_}O&v2M(~zL=g_>ofP2*yqD)^7Mwy?OrkIMJ@IWE6wxOeHa$glzl_K z_WHi2s#Os7t(xN|i{s(-4~#i=o*GdLg{U{->7hPipE#OVZAzUgc{pm*f-Sv@z{kUs z9DI}geOwuM&Y#Vr>ZU~Zm4v(WYBvP;Uh^4WPD`=kt2udV5sqI4`B5RrT_F1LN?MOi zKWEh%(a=duKx5-U9)ElKWzWW!&NFbkvYd(&57IcFBiEL;W~*iZ3;Px} z9Q$a+U?wKlW9L7#hup+ehRpQaxpg}6ayKy**C<1yQl+_ly{S0&&&JTC6U@!cxpU`^ z!PRB8YTv$a88MO`Si5#D<;s=A$H&Jg$kTwd?IGV`v>{J_=-9gM0`0oiM`P;4;Ev^3 zw(1U8N-tEsp+HElDZTz%x3^v)C$Q6CG_yyt)Tsj(d#LF-elrz{r1bWsCCTwIbeg`I z6|2^rkZ*W>h36i2`hD7^r7vo6>uYi5~9^u4pyVU`uf|S`{%ac{sLh zIW@CqAb4^s7T^Djjinj(l899)Fx86}v|fi68DQr>HS;Yym`ax*RP3; zPeu{@kp(@b^U~bHV5XH;n2LK885)c3y9PmeL#Z@&U>Qk&7{A#3g%R(u@85bx(g8`2 zc5ue3E)!amqk8qKv>V=^SDU8rCdnk_B`8Fx#yu~6%S148^k#Oin#9q#YShh?4O{(b zyffz~L*w>@oV-J+YX80m?nhxFGeeR1bB`Lf8A}u7dX{n1=CJh8Eo`mKglM+m%C2=R zoIQ;J8$QsqX$4f0AQwW))Lf|U&)4bPXE?{s-z6$T2});mMI(uDNuNmtRft@zV-qIV zaU%HgH7?vZ&E*G?LV%hZTCBg2h2Nn^Ce*7mHa1@t8!UtJiB!F1P#j&cX#)}2X}Wk^StjlU)A?-dTMo7@2=k6z1Ldzb?fh%QtLg$ zW2n%mvYyTdy^edZn2r5di^drnCRLu8R3eD#IYFr9=S{O|2U}_#;hg-%n^=?uw|@KZ zHD8cz>o-8|t_CGpOuWIzMYpKXX?M>5vaQYuqRxdtxaUc2wiXx{e-KlyA(Z7| z73_9JU3VokT)9F}u_NETf7o9PItKzion2NTxs$7VoZCG`psNk;Ms|4RCMHH|`Qgu4 zgP;P2wrA=v{mL4n6OokUO9Op+9T&g`ep0gk5@sm`_TQDQ@0DZe#R^%RE6q}Rfom<4 zsvtO#fc@7^VD$)Xg`1B9Ttcy|abMtdBo0@4ik3313Hg9zKoG=wZB5Zn)wPPA>P<#R z5j)eF6(%r*DfK?*9b1RPTuS7VQlXrsW(#)Tq?0QE@W~~a z?`KXg(%QH(yIXSoL!Sv{x^PgQ0V6F9`EsrkWx8}hqoJuurd546TT>%7f>By{Z+rr% zWL-ZrCiO>Q$l>@2KarTApNV)v2FOBX>x5!P6&*K~g-Sj}6wN08o|UaYl^~g1uC(kO zEtMU3!{aKYHHsU%tKW$ynVn9`@O#a!9Vc4#z2Zdz`_|~ke3>#Y%IMEhWu!UkePaBw z&97kYLp*&P_jn{ZjnB94VG~i37!o-U*C^LM#~_U@ep6uEUkv z=AJCrUf90*tD7|>HH|u6rA!z?R8Q|bpRAS+6*-M5e2!g0fza%lhtX#Q!)_ahA+ST9 zG$93AE6$bzj!V(-T4Y$n=r{vHfI@nggt+FflQ02Fl<{|U^qosL>}=l%b2;X=(NH*~ ze(C_|P&Z6RD1QdkezJMST z&0JQrO2a}Gwok0Z{^rBj$}N$Kb?i;106gmtdq<^ccF_-|&&O0n`9Nz$3M1JWb*&u; z4qYD4nSdZDE=Ti0Azq2G5on!myoY&y_oNoJR_v;1c2aR4kgz`)*PD{Nj`J8~tt|P} z>v??&Ge1sa5yVTNhV_7(FuiU+sj^w-7D3TT4K!~@TPUZ4JbsbKKUrc{t(cN_{J0!F z;%58dO_7iSPI_`y)RG0SzFm`+3{l6O4{^tXv7xZAO3oZRZYv&43BK~=(iw})ZW;=u z)>^bvvv4FJJR;E;9b8gC9X3wDSZJaZ>ttHU99O4EX!K*XzHwGBk}Hp8&%fv^20}?G zrCbF|_#7E8N6^nlz2Wu@*B|q(3N;!SO2JLA*m;t~%yJ>^<%SZL)PMT=2Hx-NQEyIZ zaD-#ZB1+b$=PXI)sDAQP68mWsB`$AOOd%YhdjjsGA!n}=SUW-Na}10OFBXbbKwkJq zS?;aVW<~JQ6ulb_@NkCzr;{tq5!AE8@u#CZWiC*mf0z~9R zhaY0egVI5J^~#Ps5)0sox*xM5GoOjO%kX1?4%y2J>Rddhf0BkmSS^M`9cbEiuOSo< z^eY}eR9t?w;zBeP%+eF#(oQf*PFl30$mMKL)w{L(#S%Abx6du*VX?~YMY>Mtoo7~Z zyim_0e91Lz?@+h<(0M4M%@cKxUqW=-JXoh7t%hV3i_;v}O)|Ig-7@%3!Kl=l!P747 ziAe#%vwrITPxa{|>mqwTHMb{pmYz0aeZal;GY;olH=!(ugq!11G7#C)C5^hy;9i6D z*b+2+{fGuCrY%zr471Y#vth|L5x8-Xj^#%pHwMj7+)m=$>) zC1g@roN5@t^LVYL0N&sWE>tXyVp=HnO|tDf$|j0~+<*JHOC95VU2$@poX)04WBaVs z-`?9MiY5oHJ$YTS)!=ZL@+a82W0INNBEs1RWz#%*(Adj$f92k|Jl1j@~0>`gi8 znY%NVfh|e`JOCo-x%7jLak*uMa?%@6Uhd+qy z_Qc`G^<}lw-LAOF!LDlla(>;F$4+6_;gnChc0bso>iVLd`mrA2E@GPRTE^_~ma=dQto%Zaym`JNRh@6j%Bc-wMyv21zheJeKHCM9~Hy(f6$sUt4LvE8! z@qKF+&L<;W_F3^V4J(1ysw&n@WkR1U+e*w?%R#en$z(IJk0vlbcpl?FK=xzCi$t#%VFdMI=WYj|95f zKT-VBsFFycZ(Rj;jdrIsPB&jL>EjO7j z?h1Fbdu7%yeW={cB*aq6V{cnX#Gt}Ct?=jL7(aBf1596Tp9fM#B>21JnJco==CgZ4 zgu~jKBa|8LR?^E9xiw%6X-kX~$OHFeiss@nTZ?y}GblT54u9D>P-N@)2!ig1Q&nkW zB=1E3{LP>@nrF`S)KzI5nr-qeMOp|W9ppQ3!qP}xHTYvA8|3b%v+5eJ4((bnram}> z)?L$YPdz1#vUhZ$%w%pw9hoYZYswkc%|EmNuIqdn7cPg^hP=sdUz!Qi-yfvVX|p$q z(|I|*+*u0C`=O9nPU^1)zgfL)!8yWNq0v|BiRjEuElin4DH;1GNkYD|>xx?%Nd?g( zgzd6?{P8s%4g_wj6j7kR0CF?B zlQ5eBFY)JIFYou@OJ6hu#&$4H+#%kd}o}8M&A4`(fa*o`@Pas`RU|AZOTE2Vi zcv7&Q{b*&0^FJ`$(~3VyuVP#Qj1(hhwyx;5oyQ6+NJ_${CIVHG5=MTjl(LkFNc^6} z*$pz?y3(#jBTzCiM6X;5U*&}CknKIFF$>H0bDg zt4I8?UsSaNEN<+0f6f&4@ilQ_NF7bSWl&z;8SQPP1==U4P9v>2?JE8`iXl(Sx;3wR z-z{Ib&p~^Af=45dG~F#^1Ag4-duJ(y)H!T~*==HbL(C%iuR6U8pQMZMW>7?$_kl)b z(plrm>M^esKeod0*gV*2jTW9H@j5Zhe#}w}r}9|y?uAV4=vhdGlL%xPxo^QlX0)YW zso<(xf_)AS5$$i57~oX!aEGH_>9Zo9X(vl=j;X;ZR^z%KDakO#;|5hj_ zaGBD<2C#cWEM|A^4ukIg92JLq@~aHy!{HkPq4hcIEjuMw>dlXJpzWYUaP=4R^VsUY zISe<~{>Vb|DIk`RB;Y4tROjfRL^C$kI-Ta>T6SbNl}3fnxwnjPcn@K(`8Q53-s-FD zw`*!1JZtYy^YhPO^n|3k)QpVUCOtLV#g(bpu_;oK?2_d`k29X8AC~bqm#ytxBygKe zhVM_XWkg!R=+r_Vy33Z^$RS1TuMEX|a%Kj-LJM4viLg``Fy5G3GHOC)duM}#Cr+Uo z>=jTK2lM8Id$0s&^7-c^#iwo$!guaW2Q9uMXtRaElvw!HnDzobpYs>{@*8r;v@hqmUN)Hl6KCl7!ra>efpqhS^c z51`Rgnahqr3&$O%efV1`QH9NRvT*@ILs7pz*7obzH-;u9?<>S&x=p#kitbbZWm0#+ zXn35yIJ0J}>t%MHcbQ5VDs_@WVqx5!AM5z}!}mL3 z7wn{}dbK&RY+kWU#-?c_W1)*2_=$In!y{{cofrG|k4u@x=2U7%nV>a#BHFuFK3_qj%C1`Mg z%z(H~DJ!|^4BxkYIyLJR=@b~NU)N9tV(j_0=iGla|E?Gi+nYJM7EkC375v-BYP$$0 zN-vB>W3AFmzQ8xjt*H@-&mQKu&ofMDTd?Nwm7cr1x<9#1RsD${A? zVnN*KoxFaP8iW*=*OxlHClhb_67G5|_|}L#>*=Q*(Kge$hn&t~J=p{|2l)WIbXVFN zOSD(IZt|;I1e>SHk{g`P0QJ3A+mbgzvJ*@ncqhU9D3v2B*XR?vsK4!C;5!BNwVMb# zcEKIYZgc{}|A}Y)vUB9H3K@;Nm+(5q51BGjs(#=+_U6iJktk6om)e(|fm7VZJue2~i}UWDR$}*|9_KyNeySry9$r07;XT;OG`-*c(5cPr zoD6{@0tVwHvD=@Vz~%=rPV%)NNQZ;^Z6Dag_I-pD_Pl_+^Zqwb2le-xVjTrj3Pt<; zP3I>v*ZIO+Zl|Q0UB}gz?jr(ot-F*btZavMTfA$5G28xD*i-cGBZ&^)k-+oc0-wee zi)!ZmzU~$4b-v7^H%bM)wElzy!Y0#xgwp76DM&= zwU{gsyw$EHvv4NApQ{i}@;?~Sik1%XPI-{9EH(*lAN zw}gkNB8xUOMhEA}5YXFtG&ThO$&nYpwYAaa)BB(QgwTKf6N2sFmFpZ3S4r0xG@MY( z2O9dFb)0aU!GVI~5_G{=QV@=4xJdRhS?%C^xeeNNovLUM>V;P7TX6fK7!%>oAg#ZL zlS|JP&l<_5jf*l`jX6C^WZo@UpJX_V@g1h8O5Jj@=?__hFGQ-f3N*24B>>r)n!3I| z8S)2ZG?lh=q6(9HpapTiNN+NI54uxYv`P0GUY1t&pzv$$^^0!2qOs|z;OZ}P`Jpu8XvWk3*6ruq;?7J=LAZU*dCsJP&|6Wz= zo^a%plrCp0D8An0gdZy02;~{QQtv@lCag`dLD!r3c^;0E)%V_`$?4CfHR_V9c|T1J zGsn+kl)Af3{D!n!r4n6e91MGMX2q|}%G4^fbkR)%ik3nxp?j6uzr!WvD0y#pw~xZ5 z9(}dr)X;5#iGKKFc`y-TWH-y=pqLVgvGR8L5nYyj?)v>7Lgmk0kD4Jx^_YvNti_fI ze?&z2^9?S(U7ZmfJX0GoobM_Gzq#1Cy-`N$kdb}P?Jht?7-2l?=v1c>3HU@uXC-7X zfBGS%EX80v=MD;GFjFd={8qQ1WomBj(Rp^x^@U9eqxGn0jcirEqwVa_F-SoFsB5IiRkOX>r^?!$_{y7~kJxSz-2s-+`t3LzJ5+ z8J61enm~8KJ1h|PzDHPh7!CECE#0We82!;{A@4OeKN7zqUTU#>4Y~wBJdl&O4&#?q zG%xxHz3dOVh5~0X)}7`sNeP473t^#{^l%@o=- z$M7sdoz)s!60R+~ot{d_zyC}?b0N4<>4gI#6<##TTnQYy=5(gLE7_oX`tXQ=13<#61$(LKVg{ z`ia~-L4bgQ(p=cKOInQRb0TE~Ok0t9rGiiJ?)c#rATEf~aR$n4chEkG7p9XZ9*rfP zWkhi^OlBe!-DRkMEXqt7cDcUuf(-23O&UuP(qwTwT!KOc{rSs{5EeEXe0xBxp6QXn zk*_dNZ+7_gF8KSb`oeAwncMA4ESJ-7v&hqdNTP&X3#bWO+x;lkkDF1os!=$le==$p zguJwl7#H~b{$ct|v@(qYVPZ=he=E*Z0`r#P>I`l5(NT!K4xTMF&Y&{r#d6(Tl0C4) z6L@^Q9JSAP`f%9{#a&|+s$dApm@Gv5<%q_Hre{NaFhG+eMfHp!1CI2>$CjWikQ{7l{9V{qd&uG^V6#zHkvfx2v3_q=8^Z8RY^o zgkAp5KJHSSqB?29bEt=pBQ!l!g_Y}umJbB)DFxI@#2BU$Q+RxHV5t62^= zO+-GmQlPPTLVXt8f9%vTx;XG{-e40cZ*T7rlj5U0E#4dS;jR6QmV{L^@{vo3gr&?p zk^NxML`FzQT2?J=)WJ-25+%)@p~a+7=^{=YI+cI@M5Ykisj;&i!@SxBsc@DXd}RVe z(n>a4DJQ)UmZftth(XWaY>~Ov^M%%B!&B_sHf!X7QrLJ`aMr(7X*#o@|#&F6ym?#LrCsm_&Pn zkgkXWL^+`^s7uv&+llzt`3Ef&#{xIT)oL#1l-KAqgrQuencK8${w&LiO{Vsg*xYJ( zpEC`PtCpCI8UZxZ;)(Pn-|&h~{eVSMa~<9;?30-jRwYJ>G+Lp|NjQqLXE5{X)?z93 zjAXFMd4R8W*Qx6fR-<8!t|;MLdgi-paG>h7SbsOCgyF{wreHM^NVm~Gq2vJ3A-t6! zpWbEwK91SPz=|TjNOR2>0VV3oZOVI5#wkC5EJ^{9uo6A1rpB!SyQ08#@ zv~{9t`vw*J9S~DAfq+!7(Y*z*g)xL;a({cDGI)YOSj>ZEEb+nQd}Kc}`pRUq<6^~& zPRbqM1sh_NO83syqEU@FD+vC$;chgj68SZI@HW8+xp=s5Fz0Qxd+Y^$VxazU=YT6( zhjaMZ>5$9og!E$YM5#=Ug_hX07O<+9t@T=Cw)x|F!eZ9q4ifTb|L8;{PL#C60|@P3 z(s&Ba`gEL(bbdhrLNW0t%;>@n7~c2v`ikob^~nP^IjU3tAR(ujV}i+NqV>vBDp%2n z=oY(#`)?-PY$d3XTOC&MF|WmbVi)cY2r5lqUHX`Qy1tQ6e2+iF>5BSzb@m?T_t7l; zxYE~I-+FQP;Ss}i{NL_vlEodREbF^EBar%YJvfE0^6N8H;Ys>dJMeHzEAwNl5qq%Z z|C$d8Gj=J?V=LLYyX$ok-)~D+4(hKT`gD3uSKDyV5ABQ7p?<#N-85#o5EETK2Y!d(oEM7Z7)=jG!=5E4P%KSrR6BINh%SzcZ?2(cQF z&>~9u{00S!b=DU}PV+xQd?b^VRXea_0i!;=5hU>&hyXq1}A#rzxZ*wBQ6Z5-aiSvEGQGW~99oQ5U9f)3mYBx|XqzSzvm$+n0`~m}0 zNU{9+n9)h{RWUs9fVa(Le8JAlZYwP-OH!(DAPj90b-#_Nm`hpV(aVU~{r;q=A-F1o zB1a-X97&Taf=lr?J>1vTexzrGo|xF)cVDEMRr%BMC}Bu91&o7HUjbyHkw1t1`jy8| zm_on1wL0g_CNZ(T<{+uHBdi{4+Rtw7u#mlW>S<7s$`y9%E5u53Vzfg*7nr4c{f0Zk zAY{JvU9oUdo$c#8yjMgH!e!{?HSs_YX_u=Kgaz=8j7^Ctcn4@A4t^BlMGpzAj|pl2 zjIOygHz!^W6{=XTfJ!@l#jgHI54Okx>Oj)EYzo&7t6nC_I$EH)Y2Gkc6NAj~1m$L; zpYorj`--c!VC6lb1~{E+yx+OlgEOxQP+8{b;Uu{-U7nsRo~pZi;-7)d)~oqr#SVKz zJM}n|X@2mF6}s*0yL)>{7c-eUu*$JWI3JA!b&kb#c4vZ|yQjup$!@&2jqTTG%Mn** zCF9qF+)hv<^AXQ2A1}!VEudgOfXmD;ct8Wq1rEDzmO$oDcOm5A$R(UyaI$Oul zdxYj zxsiK}!^#kF5WuMw-;5xJYy^X%V4h6-(9cGGRFh_O;YuGcfICm57nt9Em>F%PFKRr! z{v|COeYprh6KcK1AtE!ROQZrf8rRcc+#3~a(`)0}Xe|U%*zmC10fWJai9jxCv_uBO zXW(cmC(>hD%$nw?)}MIU5@@h z0E1@_ADqr?t-X11-m-J2{d0jbW3H~vnRYk4c9ZSkLfBrdyL$0WK!r`}%{8Ux-J*&0 zT0&5i^s?fg@#hVVTJIRgI;%+~YmL_L>rFO;)nnBaC3Zao+OP~>Oy4eR@Wei@NKiLl z(S5>0@L-%s`!fTb+b74iC3OOG1m4gIKc0Bzo?f#W&a{EI+sZ3($zjxsI7F7~f0hK} zo4#rrN95ZkqRsA~?#36ZCVmF~tiQTlaahTuW%*`G^U9FQk1yFuL|UEcYq$A{T2MmI z*1z3dZuS;lyXPaW#F^od9D~%ZSsYyw;|_tHL@%0g8-G2r@qTrG0}s4j_|fs&yKbRe z%@*wQgt+Pb;Ei5#F}Yc%mh@hil#!&5vPnbs2E$_S>+dz4qra2wH*MfSi91U+wwE+5 zn-TeP&13C-=v3NH<#hX-$8N=#-S*anK3A5%zck0}7t4r!a%3+bl0bwF^n<}{rcB4{ zGc?xws)fn>6Fd8vp1=ICTCaIQ$Zmhkg;0;HJMPFFYcdB8G{?t3OkQ?)xM@Wbr_Upe zZ5N2G+B^q`5WOQGaRH#?sSOsF1N)E{GlqW0I|Ayt%gU1n>0`A+Ab}@J#f=BqGD!*@ z23PVHLpF;%)hyxafUb!EVZGt6;~4uR=P0oPF7@q8U4XpPcND4YAh)hRfa6O3RL%oj z=P7C=uIK3*q9vCvcEANFIN_+7LXaNNYn%^Y*)#d%LK6G52hozdPIDI*$g_WQ9&HS{x?3e)_hy$Aj z4(O{a*j|KbzP>*A^mZHgx6LN~J_Afn-dIH^+u6)k*OTnOOphTGZQO9BhPi88FT`8C zMpUdbnDA_P1OioZ@Gtq?D9nn2YL1?@uRtqM600njS=o5Ox;~!KG#-eeO3`TZTOR0_ zA8i?ic0%3S`a-+e*cRR&NgBzZ{*Jin?Tgt{0|^GBkqBN5l$2VSbB2x|VVGS(Uu`DI zHhc(XuywNu0xA|DfpdpU?DV{Vi{dJci)&C*WVg9G!f!;RJYbv@Pe8UdMrhlB$%s3o1@|{t5`z*y1jIB z2*3;sc6%TIsaXc6dkp6bU&cw4_>`asiOCV*nNAO9U6)@Ytp9CKkr5e`wiOMtfOeVm zBz%O=hz7Y4?oOrf3#XG4x0KATG&6_xR@IN)8qThQzE zJkY13w!S|$1p#h$W>=aowC_4TdG^gdr~B=PO9hZ)cQiCLSL*EqaI;)Y4#jZP(ym^- z%!Ct6>~j3YbDlBi*-@Kh0GQP>8)0b-0+ELl)&W-Ip1j=KxCevZL)ZdoV+fNKzJ#sI zW`HWvV;W%h?fL26RUUC`*A}s&BCLg~FJk)8)`InxH<9%3i%T<~NUA!{l}$7U$i0(Y zsd%|=*cMFQUJtzd8ci95=%#TXcYzOnR{3ucOzWN}4wL?@=Li}a0VpxLwcu;7pF9oZlG;ip@xtOl>HQB~RjQgRU=*WOZ zFc|7wemuB;zwoN5*A$L8$(wog#hDWzz;w*45-8xmvm!_6Qi4`)KH2xPQhV>_;oM>H zv#KXa_toh9qXy!?sflR98HoWh|5fgd6_m8jVZ30TP;373`a}g|&(lXz@hsSIrWxTd zin&|XH930}?%h(hgt*Xt;7FUpf}ddK;h@O|Z8n*Ws2y^uuzsg%!MQP;dUcTixbpM3 z>Ph9p;`-prG@lezso>Jv#Qqu4LJ94et)nBgvr%MB(eWX{B9p^7iMRZxmN?kfMzKgS zZ;XFJuNDK7Zvpe3vI1Tm??nKBYwKCa&@s;5mv9HMspaq`gF|i@NDA#j?+&N^u%g&# zY6aiXiS`fEshksuOyswjaLjPqUW)vXVc!$k(cHTdB(EM8BFAoi)?dTzlMHA^o8?^P z#(a%NPwebZOF}&_uOGIj9FVtq9^b?meT&ugBdW48w)4C@8NE&zRv!0gLeF1FanOIsY*xeXC;Z4b5H8^fe1{1Lear1Uksm#;h$>dc8JWu22$C49yD<6wR1LLEiy2F2 zz1q+Jyq`VD-YJc{x-pxYFWH;btRofK}CE-R>4q!&~ zA?eHYBFJ||>2U!4!brM*pXYz4)?L7H-2x(hERHLD91PnV7I3#*uJY7gKiVlaXi=Hq zX@rpJZ9h=h3iVBBmi}Ge8=HKez8`+s8p``UF0F96EA8OjZ>3NorK;m)=w@2bulahr zoSN8%6oEO>vs8gDgZ;{~YnAwW=)+m#q;V#DIp3vos8sP&Xu)Zagu#n&6LuZ+FN0vv z7ikNE`J*Qh=mID-M`OLX`qHMV8|;wd9Tj*>D7fr$@9^wZoj+C;vqQ70vsx(XcH5;b z;KW(wvFq9)VEJP`i0cPFUXC00KBo^R@Vo5?5tM^G*)NwX#70r1wP2h}4~2()uhIuO z#BijIfR*1cl>FAvX13$PiML1jz@5K_Cn55?jVU2USM>}AYjc`d_WQ~bVGOY5n|d8j zcl}szyAelD>j^7DQMANa0&+6)?B8`aQL`=yBh3j~F|$12MG*&2^Dp%Vat}jxR$pIs zr!dL;chdaYOizqw;QFr>V$>`)%o&5b?@%wg^GLGa%pi2=3HiN`nRut19yj}5$*I1m zAD}K+t^63D)2+!lph%hC`~5D>Fu1VVz3bCU34FX)dAoV1T%em0`&`?)y2<_h)uv*G4Qno9=ZF)Gg>#WHI7QBN7CzW-RisMTt2z<$*tFCAj%t z97*)tUNswRok;jSkJ&xn4yv!l#rHS_&2ej>qA-eG@Z z?}_5cc|uR&=%zf&zZw~p>8BIs@72DH8o=y_&g+7^`hI=|O5HE{ z0y}Mx{whje-FP>hX?25F2v-zX3oYmru1m|Q@1%WI$ zvg`U`?3jAN?Sue~{rsEll&Wr@o}84ZqjWw6yFrL2;(aOBatq;Xj=H&0OJ&KB?OSCa zw+^M<_>h^YfdEF;R<#R~*B*<>`>mV{CW4mtbYX+M&%<}~cPamV{Ak^)E4F5?J;eyYdYx9~7s8NSb{Idpg z$^Q!f(m>}Q!gD`BZpJ?H7gp@ABs|zNz}vVIe(=c`K@ z%NTi=hK42Du_eZV*9YnMu7p5Bvlwxw*~6c>xqp{(6r=&?s|t**B~aM;M$z(d-N1!w z!;Hyqc6!LmUP+N@+EiospP46LaB~-N^n+>Enuqt*b*6^2SjV^ezPCWYbpa5h>rZ#9 zyqohq$2dK?P2uq35FvJvIA;Q)n&i7)P*vIA{55GWXfE6#kRCb-I$xc8)-JpHqIoH# zRIOw3>^cLhyFCeB&20Ju>>_)RE+2c;?V@^a-KeEa|yw?@{Bu9vE(UNv_i1K69&J zSVra<>I`>q@)?4&n+~ZxckSSJM!Gm%M${L$CZ6C?D45Mu)wqjIVu^nD@r-C(wC$^$ zq|R46$7wlB{*d_CSG68%=;@t{Z*JT~jkzIU?=_F+cZ*t+z`=$!t1I@+Yh zV&2vRUIXVfgsy*z7OYq=`J~?a31!=Yu9rY>ZKZQJo)>P0MLEb&!4og2bt6`QeJqTB z89Leyk#B#0Z5}TL_FbZSvil%dBk}{1Zcuk(G7uREzfIm7LNlW z!0W4XO8qj#rMElOV(WES%-ft^$TlthX!Ui9z2d`eah*8MO;59fGx&bA^)LNxP&1F| zA=jXHzM7_$a|_J|yzoIgp>yiSowhc@Z&t4P`-7_6NZ5>t2Zz+9*dI!R$OLN}rbcwk%54ziu*jld_|^p{?59H`fq3*0&gB;jqBct5=q zeAXxEV+qjfb$;(2dPm}q_5v>_^g7!Lwn!3YiZ8v6R@w>2WIU0l;W0S$cQ#+Y*CawT zbeoJsr;DOF940&yCJ|(21ut}7qX6~XSZps{p}%`G!V(3XA_Z!fnUJ{R>K z&~@dD+01$=kZV>~2w|_aefloEi4&Fq-4QteforcmOf!2u)U|>;k17vL3z(ww*!`Cw z)_ahc<|~&&n_@^z?S5PoZGEESCp%T^myw1qxGo=GW6%z58~*p&DthPO{+k3zqfRBc z#Y|yqIzq8^hcw$?6W+&c{B=WT$Qp-xZq{=itc`uWs0KaA2)Jue6ADa4rrFSklI=M9 ztm~JS=aq!`uPFhOicLa$;pmE^h*0o}bed9pkwRe155}O^+6DgA>iJ5o?N6ihyMcse zc4OmJzqLlI-pQ?Rs_)Z3CR%g)ZIlcqtFhQjf9l~eqjy)oqh!SURjvq3&Dhgu!xY#~yS+ewKHmxo){LD4mb_l9!ik@9C=1ruz__E9|Bmirq{#ro$pZP)*KK` zueBobbQCEzYh7QZDfib-3Dff}Hw6$ci3~+)+4x+_ccBWL+&TDt`G$^sW4OBI;CMiU z#LO3Y_+!tuB&G!#Zk#u?q)lCXXh`1Sy@xNA{d)9jkx%TX3!oL4rXQfo<ZZ!x zfLR+F7v))5PYk$_mvL404V)y?_{_70h+OY$L27%FeiEOS=C+B)qL$AP36%fhVUch) zx2V_&_(1oA?vLYute7T-B)Ol@=pgJO9$ZzB6tI~m5Nk#Fi=Plln5-Bi8S!o*@g3xh z#L~Do8*cy15*L?Ld130LXA_JK)v?w@-?YVobg6?GgBRmRIj#kCSkxYgp!TPE;bi<+ z#(AC3gi7!|3njpC0U`nA(-UC+nu{omOk-xmI6eb=#u@p%D$N#J>Nj zed(GMGbqV+Eofj-Pns+f9cJNuDk770 z{WY@E$}sUNpX8Ru^q5k{qmakN*#~CHoIoteK_Gv2_mRm&NwnkL$O_*2`PW4nBUYKF z>1@Xvz0TH!Df~wphniiacuac6Y{enq?cvpfk-b__?mk%KVXZ$kD?8dI+XV~g$dUa~ z5AO}=f_Aaf@H^5%P!yc9`VfAjwu?PkUY;kwK)u1G?;Z_eLwaU<^S7E(F`{1J+BbRw zaOy!7-(h05f1f;4ZRw+LsGtuLfV_`^-zq@kG1PDMEs6tGi6TUn6-by`xO;xK~#K)f(bP-+Ar*k30na;^5a zO(!%WLRdy7(tYJee8$Zohj62jTD>SSm|UqM(Ea`2B5epS3?`F7b_n$?clKyk4lqg?E&Olpd(4 z^5Dn4+1%e;iKX5M!CS5bwnsqh3c=^C|&sp zrV~57Bj_@M+SxcAn`6N1`uSNtP>FBf36X&AL?#znik|ziqQ|8iMV+8fyUTf>IF9U& z1GoAKZxw+f3NRZPN6p1>^W1d1aPvVaQyLG2$=1k^W(=V}Cj{@=TQIARnZEw(p=sM0 z`b}J-+pS~&mh_MBw@3a04A7efCIXnj5j#P;KlG~gCo|(S5&~j(1QSnZywb3T#RTFW zYCO%iVVDuY=f*MzHPGr5ikZu*L9JVqLS2|(e=#(rM)BT0ey?`DKYrqpu6 zvuZ<+G`hX{{;5^|BajQ>ADM-=6 zkZxa_q29~16F;AXTWW%Fm2K&xI7^_izx8*q4F_X@(pj+SM&MHVeuDHZe|uANf^FQu zMZ>-OWqoylJ9B2{rN6!YP!+!^x93)VK5yQd>GFELiW5@? zWKI#$_@}GC#WLLirzdxiVz?Sh$he2jm`c7sy8D~YB>I^XqWsQ|kI%<>)4M#@EmAEA z+y2YVWY`DEY75kWyAjH_hkEAFip_zYV*Bk~QD2cMCpSe)gEKkHwc-DE8Tyn2V55Mp zExU^zzl`YLnQ2;Hx)2zR3#1HQ(}K^Pz$@LKUgdBy)tMdqMl)`AthT`+6$@g01O|NY6D zJ|Fr&Vc@@6aV9NA;2i%a1RQz5nh(_q4u6vd8Rrz({7*a{3O`B1ujT)DAUQOQ{{I_< zYh+}kP_9O&Qmyx1svU*Hb_eVJ-!5E`ZejnRS`S*{+&J&wMsOy>@w{R%WTu#VP^T1h;=y&?46_J1~5EnlElFJQMK!JbYg2l{Yt zroZcUMgQH(iN3=RBPn{`N}fKh`%Ie(TiXYWAE~T-=Ijb&?m3imsS)Edx*xyQrxw86 zTz0)8;<8&SNOyX4ZeD4EuVwMx?ek2NjW*c`J|Z**y-sQJjNNR05bA+A_f&IywVv`d7>ZXSeE%#%Xl$1j?EDWp&j|qCgkEfh0D9PR zL)g5nUIMRnluw51eDEi~of+qpy=E#ELhm*qE=ToC$2MS((&968tDtDPBm43Nu!sIp zDT`R$?wIIvF#vX!M7C!B?mIeBjXV6!xY$X&WlCg@%+zH6z#JPty(zY>xey`S?la*x zsoAam@7-&Bnfa~W@(xdnm&sf5PmubpJbKlyPbqM@Ryo#xDP!}_<-wY`X5S9-IWKuH zPdLPAZzu}%f8Uih^hb*2 zoD9!f%Zi^fy1p3(SyZx*M70~=$cqre)wLaI%y9Jahlq_)O-1H}Yxb5uZ*bmOpS{Rk zc&dtz{4b#A06)fC?PhcuG(4xu1}8h|hhQ{<-G`<4FCDSD-1XM=Xetj8=Fv0>z(mMk zk88yzF4cnk=K0{&ewW!Qr^Xa&0gs8n0xHiOz}{qMDER9onPj)XcrZ!_hyTvqI2)DS zCrnb~!9uRN=6`o|f`7+G8z^4dz8`^OyR0O;uT-&s(Q1jd<93P%I;193Mr5R@WPRqE zh9g)RnU`-eD1}2~=RkPHUBNfCGmsrNhs*;(10V}oV@-U3NLKhJS{3mtUUq5~K%3Em zf`acrVJKa_^F8?8JRbqqk&f4H2*ts!xc6^P4m}D#5y(WdmT}N`-K>~`c*X__xSv2c z)eCrJoO=KM0GKfDwQ1fiPeX+K<9;QQ^+oNHy@pnk7cbit#rL4rIwU>^V>Bj#+Wf&C z_dya1>P>ys`9jHHm$uy`aseg`^0)T5e*Y0NLd@=)x{#~|br#DEc(Q+}!ctqiQ zK9jHzypc5MMkj-}V`(ldM{RW>$V)vPGKY8P)RN+{b2qFdD7&dhgDK||ebln75NS9g zgln-f@m14aT&LP%5KSKy)o_n=wzk|Z4Z+(g?^Xugr;SLuw0luEQt9$vNV(}5$e7Ow zjA|u#(zI>3*U)gdT+M9j`JclFDELw5MqfJ#@46=D^rQED%;qfxdsmOo%E2imGFab!#Hyz{iU7YSo!?kCSE{!S05i zT@48iBND$2Q5j{lF{DB4I|Ew6-a1ns0Bav$NLz!HJcOIL#RpOEYhHYpcBtcExXnOO&&tj$1#cMsQ=nK=XQ4 znBu#lzl~|o(4Rts3D)_V3?t>>^T8xQxbgG5K_+}_(VTB_czw^XfZVy~Oujj+58lfz zQe7qd0Y{u|p@gf$$`xd2;vlnvAr5;j9(ikLGJrY9c*P8FQyJ3LOt`8Fi19l<;v{$p&uEpTb)_LIW{XIAr(+xc0C({ zccrhY;~szv`@fv4^E*|85;Ioz;zR-Msp6**9H>IpLTKkxdQ>9C97(Q8LrX|&OA6~_ zZ*^pw!n5!LbqGuKd9A??c&<0&;*zScDL)Lf?k2dq7$c0*q@3%siD1_akT0vxAZRwf zM;ep?JT{u4(+HP7=s>l*zj{lKq#1o=D4X^LPW@)2Nn~_N@;W7}DkB^!jJAsPN|p#o-D)hhnr3a>@a7Ot ze7x0QJBvg#mQJ-Ima<40j2wiS&5(48xSdpscQ{=@nOc!LX@M z+nvw?4!ed97E*0^vv%^TkKSK1>4yd3yfWEu(gez|Lb28)=n@nNRbx)3o z%zF9le#Akcyh&1NsIx5!E`|}%@7$f*dP|TrWCcc=et}m-$KTiMhzU$)$Gd4qXPFPU zqSQKOCOqZZs+$aOy z|5`H~XoFExzv3T1G%iF50px86bCEdM&8W}P7FJ z&B-C`lVkgIeXJGV4;mL!$z-^5?g)0JaK@I_io!w8tP0U5Dd@gkQP&x$PFYKrd0O-Si;vR7M|& zC7<%^xy>A+tO+CuyYTdD4Kcs@W&`Z%tq(Fj>$hR{yT3krQzXy)8E3C0Ax0#A&Z^le z#`9K~_xpa{bNk@>O8F^E_-T<1qucu0`E4vlKap-Eeh30NGo;aT=o-^cVPpb2P*YG1scaNOIb*j?oc8Q-rK%- zJsxder2CG~y~Yz(fL!CpbPln|gA4}pP9G@uj4gKW=|Q#eXLVqB`^pNj<#6asR~3x< zFD5S%@+7Vd>OxDxssk>$l)HeShlzS~5s*^O> zzu{rW+1nHvsG+Yi>bI}JF4gXhFo4WWOGJaA+{Q7 z)5~fq#X%QUUurG};$po$*iF3Z9f*bR34}P{Hsl1WR5-%|jR7r%Y& zdV}PZp!qcvl6pR%aGQudRDpCH3&NFAu zddJMhuDyB~53Axe#liY>tO)$UV0!dcG~P*xkJ)QL7K@g!l==GC-_n!i~(>?K9kVeeSzMa@4I>g%~I2x;y_Hi|t;- zv$ogsM@@+?9_$&Tpy4FMWhEd(({-?@vF{$k-ts#uH+bgC_7d&d&(j1BawUvbd^8(L zBLa7)V)XfWf3|h&+}0#NDYJO?4&O|G8r;U(pe98hma2=A=Svz2bdad0qe}c37ZBSv zj4XyVuM~m6=<}XDViDXngCp&O-dRFOh?**9lN9^i$6S)$#k#Eo(V8VBJ~Pbrg5r*} zyV@FYnBQWj+C-eX#rRw~>D-s|dg-Wu`WttxB(q(L42^`VwN!Wd4T}nO(+Lf3^{Te+L9Z-y&_%&AYcayF& zwQDBifj71oN2+i~vwJZXn1&Iz7aLej{{t8Z(~>KTvc(Em(1!VN*bQLa}+G$>U7?9`MJ@S1^#F|#ik%T)D|uE8fuo4Qb=5% z9EMuLP*e=5t7STrg6qWKZ*oN15@Kv6)e2eIao3yL(VFAS8d6CI(;=}q-eXKi6Xg7= z`M^tlma2|7wa?N|N(cU!=NjL&A6MePHVJ)R)feFz*@`W8v9NuEEF5&6~ zL&(Magk3cn^wKxn)O71yiZ`U9ZI4l`fqGt!66RQ18h&6u$J>1K52}9lf=9*Lm zK)p;LqYMf{E;Z|z!P-pUk)^w^iQz$XV4OarXo@;|c>AuR9MxBivBr<5`nB>Qi7OP+ zL!GdPJgxWC;14i<4Ndt)Ct`S^G2E?;jHWT{s8K>u)s(;D0V&FYf!f^bOj8VmnAS;* zvK2$9tuj958)0Ro#~1wr2_Q^Pfjy{U3E2Q3NuU%3u}|#t>9Ax! z0K*7IF>Z@e1zH8@WY_7J@TnNsV)A~mB>3DR0(SLjv>jGEB#>r0E#o7#TL*mNZedJ{ z*J_DRhGCXHaJn$RtQOlZXZjZ6-1CA{&jphr?~@$c#B6Lod|+L9;Q^zpR&^Hd_@c$@ z^O;;DopeMtW1Kg}t=I}jya#jjsae4O6zu>n{3j2D%FTlw4C+d~!+_?G!cscy;2`PU zF+3sJP0L)bEQl_RiymnHaG9is{oOUlgWFz)INQ_TnT=xsQdC$Axj3%)LONf~b^=1! zS*ZwwQ6tAB@Icq=uaq6l6v5mM8|6O+xSk zw>XX<4#%FDYFuHfKTL=9%B!i5pX|+C)_ASqQzmEX8ETyQ0RA_A?vX8k`|(_Sieb|D|DF!|Li#7;(6@a}uo=s{?^t}sRlH=zwS z-T!f|I1Y<(jgOO3QL(}4?2QCW*ilJo({-bzr&+k(ry1_F{~`Q*C#wy+H*65Jw@a?3 znxv<}qu5=H{E!-&qqbu2OCYdhUE3!P#h)R(Ay&K89Dxng95N!~p&9=v=jxqf-h)ff z6EE`$a!m$|gFsYjtl?pJEIAFkCUDo3&zHl{LShvGkLHQGl?rs@VTv6Z5NQ!=peK!} zNcf#PG@;kp*?!m9s4csMZ_Nr&su|X(|pVkE^Yq6)gZBqf&Cf`wtOB`GT znEz_cmL*_|QQZSw6IW?6C221E8;e%_^XUq)J=dgRifbKIqYf_%5w%hvk`JI~e@mmR zquGFh#LxA}f@dejEhA^nYK0ccF$AMpa-ZYb#uynzhcfG{2I_BCqaNy&tYLW`*RI(^ z+%|88G|Y1=%0sTXY%+SEPouuGMOuKvad&Ga_)-bLqyae~UyUMjXxfiI`946FXeN_9pq}O6e_hcY2%9<-PL*i? zoO%WCu^To(OdnlqG{6m@qlVrwBWU?~^9up6XA^sZ_OV11WQ7} zd1WT!p`J_E0+|&0VcsLvzKt%Qb}cByyKOBhy1$CMALLg@8eW(Y+_4~R z*;&foahFpm*BKkVIz;`#V0#ZLg99`k&*s})Bz#gmI19f3cYth#x2QHFJuWgs3?WxC zB@oH>iDtwa8zw9>VML$;TS~_!2g8wX2lqf|p zx2rKixGM`AtnKEFBha5xhdR(5On#$?R^f!SB!D|k=j4#_RZHNhn_7h_pam6Q`c||< z;_TM~dTj`o=(obpPb&LaEyXHGT8w%8LlnyBx|pw4OflQ>Y7hoHtc2Wa8H3l-`9CEuQNM@^t}O>vsrXSf;5phVqK z?l#d-;~Wi+vCNJ_XiUhqYYjW-N^n1{M1Bv<- z6h~yZp~Q%AR(LF17R9#?;z*U>SsOoyk&h3Of)+A5WNC(MITjE|mKUz`ID;OD*e(Je zKpLBb3Z9d3cFUx>`J59HRS@T$Wp7k^Rs&m_Vv&9DLH0ru2?LCIC>asRG_ahN=-9(6U3vz$e~ ze7s32@hz>x3p1Mc#)vgNG@8?)p*wANEtdNyEH;cC z`*ukU=5OSFwMBmL`?;0~rt8-Ow8Onm>k3GwctG=ng}l=E0Cf$dQC>G@(SQYf+;kEV z()Thm{Q*0q%WerQRig<81*hHJQ+nAHDmoy-Fe=I}J-bIV`wdaEoJnL)H~PMyWoRCj z5cgufj(E1MRDA2vWRfe}hmghx_?ZC-gv~1}8VLC82!8KR6oj59Bz(3S1zdw8H3{He zo&7bd>cR8s?pTZYVv_IQzk5GS^oadc0-{jbJc__=ev7Tny%g684!-Ux@W^5 zse1+>!i{9%TGy-qWgS^B^(_qQdD1?NnYBRup%iem2~j3o8x>&Y^fP3&*} zAS~hk!ImwMokp)6)yJoWy6A5R_c`D+N|fYAW`O6y9xaG|_*=hbszSn`u`4PL#jw>i z7F4Pu;!}J*&i7lqo8n~Z@{Aypg1=Q%Cq5 zzG;iiF&K)?Rda>G)>bn7Svg#lIbZfymoqP?LMU`wKXfcx-jXm{EdNn1p+orY+dYwN z0G7uQsWBc#>bM!gr&O!NA;PQ^BaH zSZj1`_v{g|GSNu zyOdhXzA&W}$4_ijGY?#~3HiocOQoYIXw8<*P*A?mN*!YKmO;O3al7j&%HMC=wK1f2 zyJ|G$*Pv!OS6YLud0cU>63b!Y?BA(59BVbKlYybmWGXaOdEL0O%SW<+ACWMImc%T! zcCi6B8K>E&Ka0j_n2`I;xN3ry=h7afZ-gGi1+D3uw3-%U^E*q%l z1F6MIKb@-Gwv#736-||t#}f@yyZlxx~xJmzL#3@yGu(ysCmN93V) zWZ%qL^UQbGAL`{P@O@L3c4M+|GHYJGfdnk4dS{|B;A_rzWuNM$TIWK~pB8p@L>nMn zQdfYrcT4C__$+b|jWw~x=MhzZveV!3+a@8(vIkBmI4l+2X_WYFTMyGN?JARtP!3tu zb$qnQsnNL})TtwawYW#rr$4r=X`?)Xl156^@vB zD5AgxD~cQ@t6LJ_{A6!0zb7Ng`nm?OgmC?Jc$ejR#182*r8kYkN7|FCdnxOrFrPlew%3{S8!zEebz z_+7-G^ny+kI0xy?xEaBPp-|>^0ZJn^`V^8v_B|L**69biC}L${sclba|45p=b?!%? zoO}>W%-H9d;Jx<;52V67&f6WwxvOh2Bok&mt762fDkcNNY`wgllsNjkpBEro?7OCp5BDQ>7` zm~|uqc|pWTOWC^+jB*)uPR1b8as;sh4{Ci9I57t?rNMjpk~jW!E1@h(`0TWPEQrfn ztUGRwWem4+#(o^yX-Qvwpl`j#(E17^n$YFueornYJBW%ChR!}0Y229Uj^zPD?2j!E zze28t!FB!eTI~|xVx#Z1q%L};2WODk$TjIwRJKi1A+jx1jh&UchF7@`q3}l7r}*Zu z73qK}CTBKI=61h%?@55_tRIRjuJH3xoI(@eH_hjrJpajCEhhVNfLd}{iiL-1>yM=#3hD+>0{*-!nUa7C2Ye06ojh$=s6OM70E!i}|P)x0}~BFiTFUA0lL zm4dtEA4%2@8})T03);10*ZGe~NX3e#qyWYs>a~ccwZ7ZuB$xSN@xu`tX!)9L$?$m zZf!E5b1{Ix?wYwfQe^hFK8O^p07*}Y)%Q{KVTWCreLrMxF3e-)o~koFd<- zE4@q!<}+!`g?yn&JMG?{ANm*7^ zPW89cve+plzhV#-wJsL=CwlZA263v-1QKy*)+UoWfo&pPm)*MfT4jC^RkNqiR8xRk z@mpirVVGGr6qXqZPz1|c)Q~G|Pa%{6LP$p?$EYZph)xE^!SE1bs)W-h$RaeE13=71vvIkMdsbWREL<2G9HYnV8ZzWvJtKr33tjheAwA!K2 zDEyb5qBEU_=^jqFn$=exaGA2^^K4!KvYZ7)8o+zswOtGG7CJle2`!ozVATofTzMvu z1MjU-zbftkr=ztVhIQ|xc}Vir8qC2$S32e z#-}|XMoLXI<#v}e*;rxC8E@Lfq>Y17ziw;$-XvEd1f{D;4y`Dfy(apv22-3zGP81E zrjbr^w4DaK|1DTKIY013bu;e!;%oSLVxB1bYsX^bYQ}Gz91{c0Kt$XC?^%?(kodOc z;DU(m&ntLW!0n0CL@tLOc_mR0cF{#Jn5`yZmzf{zV2-7OU)F|S^bz5 z6l-f|)yOaTq~mRn%{W8Mt_7GhRF&OEAS=xTVNsB99ODqYwa`Mg^;B33A;rhFq_A`n(sLQk_281bIcRe&VG?kTd?&|GEQ zloKLU9|}9FeB>)+p^0R9}vxo@#D?1MF|@5{#J1;)h8%*^XWme2fAVi4ouBAVCa-f;48!Rrk7JEv+MsT+LA zjn+@gP-!I^{PGA6^-7%9s|N#gGIZ`$x`c$K6!0mjyCWMr%n2=8F-qd6icDh~R+<{( zZ4^ApIK1<7K{w4N`*@LUyr{{0Ox)q(OeE2|c0$^rW{Mhe1(ueWM5<1_<6$nS1FaLk zY0>FrFrY$Wc?a zx61IkcZwj1H(pnGtO4m=PnWt{@?fr5Ds3_dz}4ciEhNcI>*Q2J7NIj^=_eXMTAG@a z)B8zJe7esHUYvxz?{&E2 z#}qw(Up$wurh`c4AUf7-O{7?e{bgr1S&w&}9XpZ7Ly)eb?-!~z=JefeiB;#d3Z>ph z0lpUkd({CqM=SkZxXjldG$6*pMi@KSiC(YCH)(fqwG52)NH2$yGbTVvTqwDfts9D4 zlL0}O=$Sn|b^UB(;_+en+60QMJ4&?CQ++K6b@0Pd8zQEVe~zB+-2Fy}2D$4bJEol) zay4527WX=oaVK4eSC1_G3S79iX2a)d(C0jdlga>N;NykPo?GQRkFZ32lpoLt+My~^ z)h!@Q5(a9TJ)JZE1@f{eM*->7+ge+lm4FpN6duvLu3z21&p_9-^8(Ms)*DJpCQCru zJ$+k|w2F$enzZjgqoU~V4afln-Q|OQuSkSQ|AJSUAbtmz&mKa^hZUq zR?MBO=og*$qy*MFhJFruYN6hi*-$zQ=;f;S)+ zYFLQYtwBa11P@knX*q)Iz(>n*(%0f5_Z6ZpFI1AT}~a z?-W?oF0KIOY1b_KP1RAb+vu!0Q}ZuTG~|IEa))ju0XCJ6%C_qo^nQP8cPGi&Sxe6( zF42SvDOPKPpI%)vpui13MrAWqm3VzSPpj|uhs0xK@JW2=zE})({V2RTW zBb07CnEz~rqRQBqt1rjl$(k9&5vW+i9r9SGW?AQYBtfWE)*2f|22@*|)2$X$rT{@= zCS!qYn$R|?s>ut@hUbugM2)aFpm%AO+2Ft>`^1W+SmcU4JJh_w^hd?jFwFed77e_B zi4UkGfJXCdtbjYwgrU#+h2h(thh~pNR}sj*m4NAn-?>WgW-5{*iXw^ba2T@K1NZJm zHxSBZ3Z66!h-qP6=0##u%1ByCwkYzqQ+_SEDLuuYKNu6KG9?G87WuOLC*8}gm*Op9 znVH}BwfG+4XZL!j-(%3THNp^9sqf^nAJ)ZwH1iBM<9zv8%4_GMVP*19p9L4uCp8hq zRs9w`;5fJ9xZz2M!@5ba9q0|m9ABObraq9sA1ZMhW{w|Ol@9xLrSq>(cZ(AFAAbwv zh4^b|@CZbUNQ*gXanXfi@`YZjtB{jf@A@ZC&>&f3f$j-i8vsXB06VdHYGLFy5eQ7V`3BIFbCwp=1vK14s#KW4%Lz|9*&zGxx%Ydobb% zCg-DIJ<{2VhFHKP;$17ceb56E!*GkXp?@(cFjZ={DdkhCR2qczxI~Gp6R%&OG3Bp! z6ZecKl@~!L25Dx6!Bz8?V!RMie6n{VUxZ3*RS(MXhF?xf9XH8|On;eqB|Qa;O6pBl zA(+kg8&9!VtN)1T>e&stH_snYy^dCCk`{*kmRu~8bojv`ED^#L}ThUvHA1lSnY%bSvp`4H};p? zOS-RhA@MdPQDa@NO32?RS!0~T&+JTDG_eycd8KwFjJwcrJlRK+q`cmKeI?5EMJy5!#G-^JQy3SzG-)89Gh=iNb z>Xdlf08f81^nthx)9+< zNII2WZ?Fi$qSFeVeor#iFH1BE5P&3o7Bw5KaK0hobGMYYCLC#eJsgHg6Gpr)cRK27 zNjYpy@=~K~yeW6SjT}j)`V0Cnd^w`=Nc$pOUT_b>9LV&Xj+XcfwB*1<-i*>u`^1E% z?r&?tWzWJ;mlHQYQGG~`#Kq7r*`f_GpOYEQ3cGOcj-Vf(ZNo+95i#+JtO+&6^3;Ja zO6ByYvdsH@)`3`2S{U=Td+(d~L>>)V1u=z#{JRedM<0R4NO}7FLHaMaT%va4kjC*U7(5lpjol*oMG{B<|bJk zgUY8!hC4c`F2C9cP!h{eziCJw&*@r&2}DB9j^rSjHzH-Ma*EYVOtCro1nKFH7FD4; zjlQ3tIMpyRAcaT5WMw}TQ?-m%(e5`4uzqv?qCL@b)Izi5Taw|oTh1gxPd1xUM~a(t zUs8+l?YIG(P!&emRpgLMGDFxi-@KH-N8MhZ9~38gf$AdK3ypr#0tuY%-sZaV7+AL( zN!tf~8f8v3dfXoi_N+quPDiqAv_;-ew_}&J`DXf0S0oQ2Q8)G27J_!0ZJ6M=O=h`J zipu|@9;+K~#cK8mgBl}(r=G4Hdqs5_Z?Y9kDLICaK>x=pQ9%KBfSM7JEN1u^RkT>L zn(>EFkA(RZZN>hV9r6l)5Trvl#FmcUmtVrS@ITH75y{;P4alu+zk4aj`<( zc)nQfWa+my=wiFzKU|kgO^iPcVa5g{DOvx1|H(}tqk=|D}MN=9e5G1M>0Q5;n0 zf@vr5dZpl|sZ3TluOfN65d}ys@bVn9la2tR-CzD*GP#_oMgsS9Q~$oamFjo%>(FB- z)9XH0e{S7`HIzvYILc|8ZLx-ZPnc1KLDF6;$2srQ`7*JT?9!^H78dV;49~M53Zd+H+ns!d4M~r0+Sw?)6=KIiv?Myu7OaF_ zGhs-J|97FdK8%B)(6}YzfBd2&Ymrm?$jJ>Ic*lEJdy$d+Z9MSO)gzs9&jjlHJHUKG z3M1=qGcg$%8-1=(`PUeKjD+>3bX+Ec3}#JC*|=V=g$M;f=YdrPB``K`(^<&Lp$K?f zMgP&}%s#RU5H&4sTJg&OPVwhSqjj-n8eq-6IECtym99}15EXcIe+G2aQaCEA3`=FQlku7gYUq8 zfWldJm=ZOrWfZr(+z}YEiUfD5;(th^i{(GOlJl!XQ~aqX#laU9lQ_|jaQxR3EoZ3I zQeQdJC-@%&TIS4>Upz@BIw!LkrXGS1Lm8}vDx*^4}@g z7MYH~nVw{cm(R-(SauWQcxt)8l1&Apm0J4yjFY|?76Jowz*7GPHv;^-hVk%*GyLP> zgns`Vcu}2jI~n8uakXILV_p4sV9-<8EQui+8 z6j1;d7xZ2v^vs0qV3K~@%>XOK5V>{@U2nkqyw1s85WGOKrokOP4*O<|m&aRjE&aqO zV~s&c0M$4_i%%T@2K4#Ky$Zfr!6l!l`5=gI=R32gxGBHVUdBf@Hg@0CB+^FbNGK(C zP0|YhOLMm=M73b&QGlQ&#^E7rXF!@Eq!sHBY>5H^e@MWFp6*0Q6LS0a4NEm#U03YWHj5N#Z)(?(}p;XYLyZ zeb0l$pEe+CW%|`Al_gJ6hmt`<1mXO;U&5wB6GbHphs3y! z(>)Q3GD;R1==^tU^}+w4AA(~vKbNxWLJaJ_oECa zNqJ^6|B27n<+gumgQcU`A7(Vle*ZigGyNE~eU`1?m2EHU#Z~*BpRfweLGj zg>-R~-nmIFABwvV9Vs2x!4b@}?iJtK7a~9a$@+KQe*Tf(I(NMeZv#8e3+}2a`Uz4pAVaI5l)Vu5P1ihD?U~{@E(MOXNQ5k-B)BVmAe%IH36BoKkQm6 zjw9}_1B*?)WfD)BC9{+mz&kyOsp+rkS#e64lA-+_`?ywuzvG|_K`gs*dQvBN{sC8HcEfO&4IB0AKp19zpp1A|8+v}fHIGf2jt{` z%l4wNQ@}WN6U-55PXtx{3Z9J&I^>R9bctLg9&{0Ubfo|0+c#Vnu29AB!Koh&k41hj z77b7Gg(mJ8ZU_}=o(#YL;nwb3*FNU{zYV@5TwDDwsQvSB;Jsgh$QSz0pHC^9bVwXj zZ{2eIYjj_q;rmZ~T*?bgUe6se8IPv&WZ}RKC@WT7=mUQ}Q!E&i2=oBG&E^ShR?iW+ zV3C6LD!^CgechDEVkZl>v4Ez3orq~l3JQ~DDou#f3kYdP?D!C1;9i;`aLl`f z7oLX9!66aqpSh;*?_PawHT*&{Z``YZe`%?Ir+y%^(3JFAii0h>6CWr0FD4C8$qKz+ zWc-JB{GYw|6&Y2?_nV1is0;(uN1Xd>7`4 zZ9$U%0Sa7%qVeN)C%gZ7!~(8Pj7ValcZRUa79D!duSox}Ms>$+Bsaxgy<7(S$!tLw zcXC){<_p7r|M`HU|LV~Sj7z{s1?4t_Hfx3=qqkq7CQJwI+um*cG`~vcE)3Gw9vOzt zV4goMfC}~MAuvq2nUx?i+-PyY;dN&OlU|Wi{Q8U<`|x~0!GVyUO*Rkx0R45$dZ!lL zoBuG+|GghBv^f!9;d#Qyn%CF6>6;l5JD(?(o?~`#m2N8}(pb+n6xv*Av8A zgN(d;)u)XQ>@rXf8+y;|jUNLUuJ6OTdyJfJIpG4xukw_FzH1~|hV_^0zx?lJL}`Zw zOvvf!Z>PWWaVrX3$)zP{Zw^qo)f~pQ!)dh#q z0D{})ELgYQHBTXj-;%f0`((At$LnGDnD22TXq>+NBEGBx!3*Pd$tQg5_jVuA>KAjP z15&zmK*eT&f7sqKYRFrL-(W6JPJiWqiK?X=KEKByRf~F8)KM1Uu&*1JYD9B^PKZoG z1~+un@^G%!ASY*}Zdh%OezaG1x_`5HOsGq5z57Xqs?K&fjvoFi|JNAX0ka$gVUK30 zzk<+Rc<-#)FV4`^`VLIeATunoVo_frv-h0gm` z{?FFIi;>0x1BUhL+-EwymW}0CbYesjIIlKF)guDQgS+`iJsS-oh{qg>i z1gcUgLE?732tOQ8skk`+lf8Su+S~D2SuymwZMl*Oq`UF5g(cj@miVlqq}@yr&xOHHKl<9qqYTYo&r>9{?@n0vl-wmhZ(T>%0a(dAXq2p-l4&*v5AsJQq_PP|t2|ZdU4m@Mp`_ zao{E;?TDwq{vW}LGhzPq(BG@mg4Hma_SZSC#0ut^%om<;FaAO^{yj9jZY1z;uWJ1_ zd{^Si>ra5&C5?uyU4&IevT!3i$9^l=x4a?$6>pB3mT;bwVRRp1=}R9J z3~_bO|G0F&IYdouG@zxgDd~S?pz!;zdz&@CWs;YTAD75v*3)U*lu4$I2oC4$&c!E;LC#@e0VfPJy5#w~90OF3;Rr7g2O73;D0;&DbQsp8-LL7G8 z7~nF&zv%cce5NNt50XPY)w(@NBez5Yrbk8u>rE$rjU>l$0XslPlNpOJ+05|cF3Y-M zT8)-@9(PBUlH=eQ5tYs7^$w&mk6MiFAh@fgN*TTOLUm5+fszAHT2JArv6=QAfWEbV zihq(;lxW&`Yj@D>AZp!$_$tqli7_f4Mvx~6!QKu~x(z7y4#$lp`{bkYn&E*64Y2&$ zGJXjCx5QY#3Y%$m)?Q4a*N_D#8Jltq$GExB=&DT&hp7--9Pu*J4g09?a^~m1;14#w zqsm^Rp3{b7D-pu=IOfj3RD)mZ94|hpd~Wn^;c`5XY+RX6XS1?D|J_WjM8DS#7Qm;} zZmN8qxm&mE{_)9owGMc)T%CjGMK9b%9J&cLy(VSupvM~;{feRDmlo(2y5%2W3^?&J zhPn4LA};20VzPBNXY>XA@$%+(M5(e|gL103DOKuZH;u-Pm=%Z{jON0(*V}xS%z0*{~!EJSyOh=1*pot_~0VIh_!}0C@^Eu zZUxRTg*&EMu3ON&POa<{){*wh7t5yQ54eI!-V1PXM0LN0CxavF)lhp;y z3i~0Z^W_#|=Sz2>5#4%zG8^`9TcXIVL$m!Od{2X(kt?P9$d?;s1scNERtitvyYF*U zn32E>e1mQHwpKZf1`LlWAPlZ% zV4oa4F2r=A!Rm(=uuAdR5p~3ug2i*k>}ITc`3PTkYH6yzMT&>1ziu#Mk>fx1ddax% z`T<|<#Rq$K4LUGxxin8l#u8Ww1U%P7{=1F$MUF_Sbz1A@lqezx&x9F`@t*bAKAj#$ z?JwH-iB|lwo6Y^8mQ8yhbsUQ6O&x4E7{Kb!LcSk*v_lZ7&ma;h`lWxpWye!{F+N|M#PS=Sv|eI@(ju`Sub5_L#MY=CDLuz3B$?o z9>+ndLE+4Mcf&0vRU!2KyJ}_$C9ioeaYWdCJ4Um3odjMQ!;_gj>0FuVmjBnonLj0g zKyln`Q?UaT#Us41P1h@r#3Rr=5;XFtEv*c&Y2A%2MRdxmdW+Nbf-Mf3=?IY9qs)AZ{Bz2JMZ)6`@>tT;4w261cS9Jk2L2$N;UH< zv);+?&!Tf?A|a>{UwQooHUcR*&DQ*!w|a{WLOo#X0n69JR<-Wjg6VpS_za>Yj>8Hk zjz#Zpn+BMVEZBjEKGB08xOSyHaq?{JWdbJ0|DkqShI+QC1Q1FQ*kkCS@p6%%vfbXJxyC=cdNcCAU0HNkk;BEp6@NwhdUa5miY7mOhoyGwA@ zVqSJDoRB$Q!?>@oy*q;dp7FeR?bmAi5+8+9L&lq7vM4UW87gnIb>Oxm2QVz}a9;Pz zhPXS0>hU%HF_LzQ6}0g{sD#CykFUdde`FL2oSfZ| zQl%c=hK+&g(?RhiCh#r0&sH9cG>}$NF@Lj{;_Eitvi{Z9#Q1BeEqFYvAp8{*9=6Vnr_8 zf9M{CoS{|^B~;@v#FM5!2z0!#U>ld`Hf4~aoltvF<#Pnoan-|-J2%8_pC&|3yC z?r9c>P0iZ+rhNXAaW-Uc34TY==x5R88@v=>zDQ`^0zeAWCED#x;(>?V7WWO+g#OW$ zWHx8XOLv`xtDSLiCeFCHh_2%lYj@hA_KM2hxq6haHi?$UPe<+vK@?<`kwz~8u4hmg zJng0awp@-*AM$SkKCiQsDq>=BkUkw?coJuY?ARe!`j1{w4UQBtj7NNmh-v^?T(L zEz{F`gD*qdRh2zndD$hs$#pk*`h>%+$S@@&b-NrJ?AqWUC47jxwKos+cse${+YR`m zov}e0M~r%3VqV~o00gjg6S`dlHaEQC1leJP!)!yVN&MGxmi4g!#8|?Mps8pR%SlAC zw}iPcwA#7Ka3f3fjKBKy`3A!+Acf|$@7SQ>GkZ%v{}9A&Cp$2?5f_g)b})9#)##63F61i z@8;Y2GHWuj*X-GA&HvAuP$dN^jMv1kpFMkqA^k;M<=L~pHlICv-u?>tcMenw+v@kv zb7vJPv1jF@q`SX`7Z#u7KRtU^6@_+h^zyfi>i9*=`PnlZm%qQySIj9qo;`cYlNSH< z)kFVa`K2MA6v?->tD{&D$qV;}Rh4uxfV+DEU+u@Nm%fGX^6=dMd@yimP^ClQ7vSZV zkCln_wO`=hhYm-Z{Wy7BN*G{pi+%Ww^Bao~XWHtg6Z6Edyldshg$bqyh`M($Z^S`V z^Ao;9dJ1IsN_}v@`9bykl)P=k+-r*Np>5{WU0v_K615=B@j3}=Aa(v0_n!0o0=Uvx zN_>}IjEZQ-xhQq>^|Xp#DLd_=`9gq$&N$z!WsuS=@4W{yxu#}QJigqh_k2iB&}z78 zGlFemINue#rE0ghyGURIPEw4-sNI7Mwy({%bWZDK&)3iB(~~U74%Vk^RXs%lueX!# z{M0(L^zlWH$NDb4f$cqw5^RHyH{PDM>r*R2%X6NdUiF?p5epta>-52IY*DLuB-<~P_VX(1}-vd+nyu5PM6oOXmy_Ix6~mszP3}f%83)RdRD$x)?+HRP}qto zKCJ#JTgw|tGVMF_Hc#)KfZp}evMR)(Y%;flDp7SezqVuwf1^5TlqY#ouhuHzMy;=~ zmZ57QE#Z`DN+n2**x-w5>deZtOPQvmnU{>at4O?`jG~O6@vXJrU~A~n-gW#7XyMmA zM})mhc5G>Q-)xl6?O@~jT@}`OtJXvHrHRc~2EBwWV7=U)fll+}eW$xO=qJyj;Cp}T z!+j;PB+W<*&Rj$`bCl1=4xZ9Uh$h7# zuDo<0X|R*DgHrmEhP<=e*OH!CXi&V*-I&5Z9T`=KJm7aBAGtc8)kdi+EOLvdk&gZQ z+J&8O1msz6ggd+^O8QS81-``x>?dI4zq0fbN1k;!dOz*IRfLuIx@=~&w;XnNQXI2Q zh7mmPj$+$B{b^4+HW#w4m=KLc>YBEd=5Nb#1vNn>54+se4G}hxjr&gzib^v5FqL1_ zNE$~wH%4K?l+6xZj9RZR^hn9lAf^Uz1S4O(JuYnhU_@xRP+J7cQ$l^2 z&QvYH#J)$=$Y`Lff{m_?kV|56#g^H%5pBQZt>mD=i0fIc$7F>Ixvt zRSr0p(2kDNv8BnA$g4WuyAr7K-*Y4vqFCZ{&ON`du&{D*+~l=2i1w)oC!8cg((CHT zPVvS$-lDWsExyXJM_#4i)coTJ1q1l$FDZva_~~*SUQyieiqv0=D)C%pv`TjT@?TaW zg*17^>;&1}1xAoDe@#rGuwl7}H@H<^O`6?uS$~9CL1%pN5^eU23?QgznB-kU5)O)i zO`l1oa;0(KlGnaW#O-@1_GQXjp{6fYO8cS6VsY8S_exZ3BPha>!!#)MFECaWz zgf0Vot9`vts_R%D|b%gK5Ad9xyZKXmBy!?1lw0zc3I}f`eFGQdV1`IY%Na4UlT0V zg>fQ`DiolIa>g%715yv_;rk28`6JK}9|w^%Hi>!FwYe?3H<0~fBI19xdW7PX>enF0Eyz{qw;kv` z{|CAiupf8pc*$}Ejq2OTpz*BS#Ia~(;{ zAZ*}c#jr6#Of6Xr3Nwc)t7y8S%l7MX1IoP1%veXukh*?e!FalT0)uH~h>1dY)wV7B zXFJwZ_PE=Jln@#}p?ogAy4d<3sk1^+Ij$)JI3;zpJ0gdvmVBa!1S2$%{W*DI1RJ3i zcZ+L_G*_~_c8x~e7(4~l_y$KSLdJR6vqZ!Po4ZNjb*X$W2%jaq?AYkRE!gg%FdU^U zw7Q|Xf#yx^@LtSfrmtVq47)pLUDdcvqM30U*DQwOw4}}V7w30p^~o%gpXXewW=V4* zS5p)MtF_sRP>K>oo^7rR5ut%c{+b zMLK6~uXygX1HqU@4~+S9-D#WUvT*!x_d;H^)T0 zyzw$Om>;qaZPmfH9la(m-^ci(BBhm^_nyINlTc@D76P<3csX6GMKeT$%M+$*E&!x9 zVAK4cJNA?O8`FcPofy`85Qzb1N^C#vA1|G(~>0`P{L=2kC$e)e|2FRzLuy z)QpEhB9bqSmeZC_98GCuE)e*WuhC_?nsv=!2a@7YNnSIW7rOa{f=;Mt(cYBMcB=qu zuq|p*4`P}$XF{&D?W~nY=l*`h*G%XBY*|28*PygK+wm$a4|pEQRV*4G-6yCu+sZ_3 zz-y=Ty8K86^@f_2&&SFj*h}SYN%u1_)6yF|6Jji*^=e<4V2c%N1LtbRwI#xK)VtVs zwB4;Fa`)r4q|422@cakqOw6&w3Gf4(U0-st#n#!MXFpJ)*TN&4$ZRy4&R^j@TdHMp zybrON%#~ikdbQfW)@3>t)0KHUXDQK`U-$SaFTp`le{(*E)tj?~NLA1!$7d^Jn13Fm zENip6oANVLQcMDQ)ywTepD<^%LT%#XElGY7qjYK_Y`&TP4T%Zp8XcJ$6H~xDw$bTO z!8`BzPFEd1h8A%XmYVJ1WlbSH8QRaF!$i({+;Li9&vkso;=I_LsUj6xM5ouEw0PRIqYR@5z4nNVi@J(_|*BKZz?8&9(g@)WDCd zi@PM@%nRGMk0?_O{K3X$y#fupW6ln>bEc(1+1jMlS99aMn82-Lzd6pinHqby) z-dwMN>tgxcc1KT4Nv5k zD0Ld9QFka#1GI*JKVRjC$cTs@z1_kOePa%b8ub#@%tYNM709JAiWx)@LtIvMBhX3!?g zMp)_ONEJnR@3g(^!}S9owPdakRX_PZ{@5=vZmJ~E_joFIATAUH%CU$dx4uglN_tXP zDxa_%_vW<;bk$7rLgd0(bwRn0N$~!Z9t?UZmNhDS9>Ri6yB%VgXQ6Nch9&bvLCoy7mA?wkeSh$mEw*AgLYP1O zOuwcZ`R#Er0Isjir_(=_D)In)_AQGMS`rCtXH`#M2n(WERQm4B7%#0b^0^3PKL+EI-xBi?CD&WyVEs1K~j&pGf5^_LOO5!c9Mu|S7H*! z;tYOOEIN5jD+YiKh*)*`-Zvx1@ef&iE&3WWbVa&QM%s8g9e~qr{$`{>;=F31 ztcZsyWc%`U*eOQA+B+s6w15yJGzehcLoI_F9aN{%zk*pX?(qBsEzkD{Wt@ z(?{SOb*jd0pndI$t^SjrNNB`%$s;PQfp;+&bQK_!@;a`-34dul8`W)OY!Dz^n9711 z%A`iUv+27Rz9dUpAH|J?Ens+Oj1|&^6iH_ zA~-!J4i{BrM0CFRC%Z+?Dd?o=)1CULdQ<4lMwt5_E7g0v=t;BBm-i$X471ZQRHcD@ z1=K|CH;FFJwWB{}a+K737@W-9)*4yWNIG^lpczWKv(yzqHR-eKw#HB?@at*Ej0`!{ zq+W9qqO9LI$DsbRc7=3zbbM!n+^ev>_fAoXGeR6JAnN^A!ihLNh{+XTB0dKUV`hWt zDQUd=%wN4pKKC+vIDaH}7;2|~A;Mn0@$o~)JIVMT+9DE( z8xR$1WjD;n+jU$!>%76y)^AK63s6xr&sfuK-ElB%;GZRii0SV(?>7oczp`c|C%VRR z9utW2jEs)WHr)^j@(H>Y(;&6o6FtEUBSEVjT^e9f!n5mlS%_^#^>F|rd|39JJNN+g z@7Yfy4aO|FRBSCecMZ#ne|`h$sM<8NXS1?*0NO)#8Fmjxz@;>S3r@St4>B}$^k4qe z@ey#*UWTFdgK{gEnd$#-|H_Mc2~z5Msab-ZKdn(vJ$z)#^GT^OG}He#J_do;n8d=2H+^kn}XJQRo};n zs6Tzi(zFe$8%T7ARiIIB!I!=N&D?d3S5j7|{1?#WUUeHMj=lS@B$<;CCHyY{%)OGz zNqFA$pTUk}jrrd~8XW)M@)zXI|7b-%@J;vM^a{aEzQTW0kJ?mK z|Id91$I|{!d7S?a55)Ap!*&cRt)}|7?s3fjq?6G5pSslL$YkPzFbah&6NR^?0Dfb5 z#aQWf4tH3UlAOLuOudKg4vNu#_qJ>D4(SYQ{^+G>EOi-jL@$CtxdoR5OSjtn0cc)3 zs^~vz(&Q}qjk1fH_%_VS^w{Y5_W6gUpN0Yj7DMIU)rqBD+d5eYa$nd6F4F>^mH(np zd1^3W`>W^H(3Ur!uP(~jhM_~?3p3vi&0ckm+a zAHBW6rXL@_YcIA4ZE2%ZIS*Np3c3FH9PAz=e9JsTa@A*f3}*wi4UajGeK4FM!z2^v z?odV|s`8;gN%Ao}UPJm>g@bLJ?;T~8F5sMMBBi0a(3(`7B4X0wSK3y<>pb4_EiG7qf{R+KB)^!NR(c52vMRUQ9&9+}D4Rlm?SJ&m2F;CQxUgn0n#TVxn{TK1RC>FL4H zy%Yd;9)DQM@~zvuZ#^m&{)6Fjulg8`k%?mc9LbNLGJ8$jCvA?*X8mB_*Kg2NN-ed_ z?FBnKwnTFtS|lnKrG(xXY!w3+76Z|5WR-;!wSiESk2xLI6VZ%PMrZI5sWqxPBKK>K zrlwIW=PM}CORzl!O{HB^f%M?;Sgg4<@V#303yIg;c`h-w*4mk|FBz0_-_yz@QaMDr z6Ffqk74&JG0CdXP;)oZ2=EMp?gnG~hMXp*-{x=~0;~Yne@K)1$k5iUvz4o{0DLK$rNx*o<7&FnjX*qdyO3LzBvNbJ!Uk*N0vNeN1U0zO|&j%cHA<3Hg@W^Go^?y~#NcLwo-}Y%H;5h9foyX_Ee@H9m zF;gMDh0l?!6Z=Ql=ym5kHfj1W%kjR$`0fYmB~hE+eCPSDLG-~(I0JsTwfP-iQ!y%c z!99%f~7i8%}OGgfc}Rvbet-w0AxDq?%$ML$lQWOww;!m($ri^(v;=~Ki`G& zd7k0f5}oL>5f!&IgH@DF_Lq31AYGQphwKV0%begdiU#!SKi~ z5x%x)z9$!|w@(}yNOw_y+XIm>?RwQ_Io!@3fs866)^;k*iWLVsdW8@l!zW8!eyKIN zm-DH)?7^ey>*HAwxe%VzA9a!?8-JL%U9b`M^QP^R(DO3?G<8~zZSEf6q@Yoi<_QAP zJ2Enoc?QfJ|KRFH&Xqd!-C%EVO5ept-miK#rMLV?G3Pe&<&b)&GLw|;uQ9U5W;MeJT&B9iy0`faUljU6jw{QpMl6WkjUfxe z3lvOH0UUW$0$wLJbW<5U2kZPf+}kZ>#1&Jv8~5`3m%-MV6sHN9<%@=aqm+nr7`c%e zVD5V+YHp00H;nH;jkN!-v-z3t(N+2Oopi!G> zl*rA+{oXjzerOVsJoTaT?n0(7mpczaP1QPdb=GRpD$%vSpdKQ9y?g3`ztgcu$;9n* z7}_~T8&}hO;2nusVW{{$*m#Mk7);sUoFt6&TGd&az4UQo+CC9DG?8c59~-Pryr7}l zP)dwByYOoldxmh154-L7qTAaeq%3DVrx1RWDXggMVS2O$!uYA}f%X-@fQp?)VA-dQset7mLJLB;JL=$n2=w5z38`{Nf=W7ttvfY^x3RK?;=AzcfMYEeu!Xrdp=ahgOm6X(rsL|zMcNFIMhfKW%xtA zOqj*YyLiQnlmbtj-KSES-l1A!b}@<@=hJ&4)|Va}PTQWSZfq*in8k1-H|FC#DZXTPys8Bja64PVYLd z(_U5%iKd&tG`x*cRMjayle#Ns;^$O_C8SO-&$bx4xP0Ajf*wn#HF<=MWPAE1YcsR0 zOzKd@Q7HbvGJaztp=EHIEyh}X0#}G1jSVs#tW}-alrF`hb9JnG=;7fIF2OW4-A_RY zASb!(Y_;~@3$d?yAyj+$X9+slQh+_@Nfhnp*!uod>-CR0d)%z8{aqIs#~Y^rTNQA7 zHYjSaR9$@dG92ey8-5uMjJt_WCNXeHlVU3>T{V|@G%o^&5&+>iE4-oxBs$nIUf zAaWkgJX`v1LLd#U2)A79T?xRxoAR+GFfe-^s>EjW@>ulqi`r;VI+gc|=Y2Vg{Mu@e z|1Fm=ZOBwnUVTR&IBC_UjGfRp;nz~;35Wdiuu$~wHA9C>1{zw~#9BX@Xd3krPPG~kNv1B+hw$~AzBzKb(mg_m7!gVxX!y1ZtaKA*ycJJ)q2ghwUSjn30BtW(&f&b z6AL{vXLn_oWt@=x2m8d40kIM+_^%#>#DzM}hkT{9_Ifafy!?H(z<@S}tI)%%Xt zcCd2c16C=lDguKPG`iyQk}3kpLO_tL~y-X zDB?x!u6fVPlX{RN3I*RZZvhQFhPZQ7!9feSt=QE-n|$Yj&7FVhd{u6X8~kd4H@?595uO6T9b84lz?-#EFzj zagFoQ+q+=Z#2htl?pHcks!4Guh8s<=B=gnh><|a4oH%fWiKc|D4&XNX@_)B$ajUZR z)|fPR_#Dt9(Zu%k%cl;P3AqQW!uhvp3$5qGYV_qlb$5_;C-F>nZ!c}3?J-pkgFnaA zQh|e%f6VFwr+DMvP~+=94B_bVU@F8Gk*D5cU2D1cHi@Hb!QC-?XK(n&auU%z2Pc`e zdY1aK$n^|KZxaTt_zu&KkmHxM*KI7fDoq{*oq~Z;i?%a-ac?PfaczBgVbi&_a~4M& z8;n!Un;U(SGnVuAlz9R^eHIEb2bO3`X>yArJH7lnT32YuER9{2Ma~0YCe%o43znkE z{I0pK$7!q0yE0&pyI8qF-+&6ux2H3ZY{r_VVlswNPn$iHcS(LnKcvJR zOLcUEQEezb%dUan<;m)u;A6pbu7>(2oG*4IHfuk*3aXavcC~9cpZ96R?LTs)Y7~i= zIq;5KJ$k>+t$MjRATwLwNJVxD^cy%|T!tuatbR}H?{93yg9uubMLiYy*M4zN%8#&C z$}>j76#r^^Gzy+h)4W_^_!83zovjhur>Y+UZJbIobXquA)GZW??-5N_ZZuRB>ee$( zk(--#?e)he=hoDEgbDQM~PkAl@IQ3rd#`LvO~<3rhbG0v7<1 zvwdSNG1fNgr-PMgTlR2n8@EdLed4`qvo+trM6TOze?U*SuU!bk!j?Z;FaFy&Y+2oV zDEObA@!pGu4}H`1lDJ)>eI-;EetXHJTyG?sEsL=|d)egujeV~L-!obI&im%{E)fxc z1qyc1R-si?>iNSC^}i@zsyg7maGs4Q`af(1kOt{Y@kijQ)YU6*94iMuzfOPhlU3!AM$SnL!Tz1Zf*2w?M;tVA&$exsekzvP847` z;M|w|+n(ad#YeJyf~ann&aBb2r>Cb+Xl6Hhp5nMuNWQ;%b#F$m{@B|MFwttc;*&y@ zo9)$RUMCzOfh5V;5^wI8~my6ASj7+nzI6(sur_BqK z$w}^MwgfO6{h@M8@3O995owCm)v{NeaOO&n*3Hl`wG^K(f_O$%?AIyT3-OM&OPK0- z1tBLUN|^7xm2&B`1mLhr@Dw93UeW}uzs#L*zLKiR>26IUn_P!=KJ51Mn0=Oh)6(Wh zQqqBzh{ZynA-CQitMnUyGX6G73B4W45ABW{S+^O&Iasm~W`+G@cyzrt?jD|EcXx%g zYWtP7ql+qUu4E2=8dvnoXv zbLw+Rr`19E*SriR3UCQx(uBq(7Z3=m+r8R0*U7&UO3&wd`bq<7L)@6AB`V!~Kg(wD zS-py98B%Ds2DEhdX15g$hCwQhNRIeAp!eNy>gD~Jnvt60+xEQ~f5w+o3ylxy9RJW$ zlYWsif2$Fza=5WLjG+28J8pdTJeHSuqyoP*T+{2T__m$q`ToZsc|ECw_)3czadL41 zkrJxx`<<-#$`+s(z-U>VRV!;Wc`KZBKFPuSV6A)DfoQy>dB=pJCTiK_aq@F?9ZQCD zb4iydoKgf3KVjW{zq!prKCI1yiulRWa zMy&%ZGoc`1^??TJ{vt~QSrn4WDq2>cI|n0NDGvC56;yuytwXeQce(VCiz#$e*cMus z1eCq~!Gm0*60u}leHqX*%gU1#0yU7$nWgytH8kPFBHidSiN%K~=Iooh#1YK{hpf*} zNA;0xN|HzYZ07{AqIn$TXvjG@U;P(s(@;>_(ysR(7jM^3r$)7b&rqUBx4T2*Y@yYW z>per&cL(f=k4tZ(Ru89{Rb$USs~11W{NuXd{RBup9;I(NC)RbqLW1~%30Yzblh#_? z&803S83g4c1x~@f7q-d?c2PfF{Eu=SL2ALF5u9O_3qNppqyj{HDkL?k!?sabh9OF|3Z^+Xf0+GDm>x&TxG$y~f230wxC4j{Z>kT#6*$`b#JwvdP4q9M9 zHgs(TnzN;gm*}WG!i5wkAyVXiWh0$&*{h*Sw$4&B3d)H}z z>rHjlZAP7mfm5+On@mChR|-c$pM3XL>cQnaUp`6Ty$XBz9Is{ZW9NlP9>B{hDwlSD zs@3J)Ac5N8Qb&axc9{D60G!dWR?@-7S#XW}A%}W}u9*0CdF{buQg8Y9QvJFxTA;%u zVEQd4dQmne)4$4?)P-s8{}-0`s*`>4x?+Bdwz9I)*u zVw&P#^Z1DIxtBGDcJoO(=mSTh<;eIcXHlj+^2VR1Eqxpz@!Lx{Ow#9^kF%ri&i{0&CxiC&q-|l6a#EpN+`mJ+ruA<4EH^&8 zu(#^h?$`2#IMCAz%g{%t7a$7eKt_i?jJ3_zfSsNX6#B^&u2-*W%!duncI-_@RU!vC zE!csNlBJ2SFb_l?uuSEQ`C5)?`VbWK{TKHB@bi{P9NWj*zs~0G=r!9fi+{%`&HuC^ z6(Tcq0BVpnwpw6aJ(+hC`dkq*x#_B=MHq`AQbZJI;5>-6jXPwIOS+RM^2vh@6f!)XkMS$!(@pQL_?l}8nDMRGAe>a z^3+Pyhtv7vmYSSvd>_0JN6WGsy%ExJbQmPO_FwPh)A`ujye>OUIgHfEYm=ixYBR*q z+f5c|$nzaO&Yh)%a%+vZG&=*Y@OWODe*jq0Vxns?8sfqHD$ z@2kjmaLi~=hMz~?p~ML}^DM3Z5QhL!J+g7n*U`*5y$A@xjh>V8JI32Qj{=-YORMmb z_4>WD{F(?|SkN+kbAgDTb3PjxB-k2K&B~=mQI^m-U@rSyd1(@b4>=oyW^0lOlpj517h%jYF zD%)ndhszjnQ^mEQEmrQA>O#`?zh@D4lAByA1h%x%O*C;@02EV6+k`dVkgqC6zx$E1 zuaJFN{|0+MJSmM@@fb#>ZCa|px~x!-aFxdO3e4Mgdt)RmlWJ;j+)r3kiTr$uFeMeYCTP<67IpHvc{Nsuc4f5Qk@f5d6?17aTK6u* z28-KNF71nWa@4%JK_Wde)+F5(j*n!OS(_$esKHSo^*IFrS^h6HW>{s~msnA#Bpo~LPfACo zqtQy$$BVBBbPN<&4IFuW&p=^w+_I+RuP%V^OdnrcAMsCK?*J6jo-2+ZsaLEFKNt$9 zOw!hmMRj%$Z1hQ|b8ur0BG-yLt#|sU(4DWXgu2=a?<4@RH0oTi zN?s_DeT~;CEe`nb&nc%fs;n#YK-%)$MbUDXL55eq(;ql-P^l^o?IHYur`qameY&d5&p2Z1&;_BmdqwHlRa zyZPi^j6IdJnnBxklg=*opyO1o9PvP6F01L}{5rlEPOa)2IabLBDSbWTgbl*FYt36 z*Xh!v-t6uh1vJvE&n8xdFS?G+RxCH=`4`T631N!7t%|g+q1Jp68QkqgT!U}2DPhe; zL3xYQ5moa2v<$M<-{xFvvlIxGq-O;$4F#RTrfdeEyXq!NL3buC=w@F4hf>V^3zY!x zvB~vG)9!>fX7!Y(qDIJAQ!Cbww!>~7J==+@UPa+CXx;38#6<3?+AYy$ZfAD-vDR_G z?4LB&?FMiRq*3W&;4oOAFnr5L4) z*5@waygV_MH%#3(i|`89YR1vqyxI-LJR`r7TIpWQn>y5kxQbBos2_{wnIfjfnS!-;Sr{j{|Dj-B}V1oW)6q``cCFtGj0H#7*d9cmrBI#iA%;l(xt3 zwSC)?EuBf-JG%@t;bCMO0w0XVkbXpt&rSBlUnXB~TA9xyQNl=jd{gTPStKd9%RZ7t zBKJ61TWc(i34;7fIJE)fuU=!~5IH!=!Qtb3ePzi@JynIAxMU{cxDVg59;C402?5Sb zQXH3-oh*mH_SOv8kK@bYANGomiCT_$I_{*-w{nrXk;(G3(=lR zfRAPf4rB@o!hEjCgn@|euCC9Aa5IIY72TAjAUrG17)}cXj(mBAzFpo^C->eF{xF!= z#kOuf<`Oy@J@WOxp?D#WNXxM zPp!*W3$D??95KN3<_Pg8f3^chv5(3*w-qKW4dw&(D$eoG0_$>LRW^DJ;mnXuGyTU4@J; z(wd%$!pg#5iG5Fy8Odp zJ>6wbB{)*lJNWV1?T4HI2Y&g-it>p5#A|_^;L`Qprj2xO$BdbrUZ;n%=Zm%W@^>OR zd@jfDt}wxyD$yyvq8FVh=l4{9t=PbS2N|q!C!&*pq>egG$8<93B1&Q=`W8g=u!l)X z@yf@)2_)>Fob%#qi8zyJS6p}}a@;Re>oz_{w-Eej^fhK`H>k~az4<|E!14Vdm=&N| z3U)?Gs&N@&NQ}@G+o*Cb(rCiYo1%RSoe;rRdo#4Hp98PVG=?229yDKyhdtwVeq_9G zPzNQ7y3v`!BMFYU`<1(+NMR z-)V=n{1!xVe@e^GqVE>X=c1|&!i{I=sG9(Ap5RD|t<4|DTE1N$i>LE;Cu(@=S}t;v zMHslDGdV^Tk(TA;TY&ILW@Dea3WK;~xNlFD70A=r6(q~}#V%M{ zhfSd>&$@!Je?1v;4({BWzr{bUb(l zMWJ2^t|+FRj9dswM*FTzhPfVtY1>f3j?yf1o77mx@-D*1PfVj67s?!IbH@r;3le?s zC6UwqapT%AbfhmjmQ`Z0z=J@sf6)^CP-A`JpbJ7g*$m~d=!DiQs{Qfq4@KW}i`>@X zaH$jyv-wIRq~9(*N2|tMTwHwq&clAO*2=o*CR+kjsMAnR+)aXBQ4ww(f=;c|SG3gR zo5E=^>UeWYMpr-bYl@I_kJdyD!POHVPZvexr>bf9P8So&LrpqtoV@X&76`!{wNzIMP^~7B9 zWAo2);W%s*>}P4+0wge!*OLC z-%3Dn&8iINBn%u%H#YTIQhjc6P}fZM5z(Bk=D7QcR;IQgczzd~;Iz^DA;}Xhw{Mfw z)02tgX=(0Yv-`rfq#G2s-&h~L3Rn|pwig|0$Rpj+ zpN(3n88r+6LjYe|LxR?U^3nQlpIJ^5F2 z;~u^Zo76y|h#d94ik;~y0x2Ya%j5;I(gAA&NR_3_DZZFXu8S*vSLkl&hWyrAAVH)h zX@;X;W9)sC_V0sA?(Mr1;ikrk7*# zz(EV*`~g(HjBfm}Kv@s-9ZJhAl^k7)T;~Q|g7b9E4ZqKzbFSlFgEh zlMzD0H7FsI%aB)i^f$Bz1%B2E389tL!=}I~>G|^Y>+m@l%$iO>hS`77mP*F-TWbwSu0LW#m(vpP zX8-aa5Y4*cRGd_%-ydk4VPLwqCm8=EB&xQbXL1@Z@#6N_OwE=`L=jHIp~@~E@{8YM zfrB&y!8u3OIo|{bEj--uXEC2%k_qRl#F4{z#_mT>pj^d6@91< zvcxWw62+hg?oPfqSQ%DjbI86&YP`A@kku%s(`j29CjXkqsX%n}7S*7L;_EWHpq${VQyPJ9F*&?S)#lRS@38tcm6$Tc7pAgAU5OC|A>lmAHGsEnEXxr*F}w}#Wbaf0f~sUL z$?6Qy*p2V&&1>fUa;id>GT8+JT8zQk^X}-rcG@xXr0;G)Jp)r2wpN^PoF3jcbWxwa zIrlv8);~g#Tusg4YOWz^Dsz^^CGWV|pPQ)?flH>1T3rhPfyGbrTJl9Rltj+GW$=kD zdE1GC?ek6P)7fSCc#)w($b(Ve77APD0W)1y`N6(CS6??_2*^uD2GW{~oe~U8!oszz zJ%k+s@v@zId|k*Er0pt{1%;t+L6_0FiR}@wardbW zRFB!1*!U(RR#oVjdb^@+IKdUoBf8>6%4aP0)5=U#5Ikn=io78^R*BVsOAvGU*A&!W z7Kmx$R*i!T5d}F1sI>bvr=vD9nth|o!@g=)0 zV7R(_DVeO#NK;*Dxn<_dXH}x_xjydN?BHj6jHo8;ErkSoy~LSA&O<&2ZQMGjzGi>A zkk61QO3KNh=5<&xJza;-&{Ug`46b(gGw3#cxI+k6fYbP$&8?>kzfV}Az0jvL|0Qi< zwx11Hl2-#onoZ&o*?inz9lj*PT{z)GGjJ{H8R^*|@}vBH252vKk~1DGFb&TJq9MDo zj;_b#NUK)xf-RhS*$+6nwkdwPrn%*wjAOfa3W5}NcIHa3fxaYzUCc9t3k57MU*l2w z7kp>BD$SLLvmlE6cxe2fX#!yEeTn1P^lb1}<#DC)XMQ>=hYnl5Ffy%@%lwaPf7KSI zfp#|vYObcuoDz%Vy}AJ-VrvS6df7WQP7&kI+B#h?<1LUA?I~iQyJMHrO7xas5*l`%sVp<&!)Z#d`Wh>C zi#7CU@vV6&TD}^j*K{m8qPE?Bvt%Y9b%BbI+wFNDg}73c6L(A~->>PHLye?q;Re2Y zK^8v@=}cmbmxLRCsO>kzw21-32>L%Q=IZB;C4o&@iDL<@KIYHs$z`-ePAz`rVmL}# z{T6B5;}F+$LKD5e)*gPH#YrA%9up%g{`f;{hJ=iXyL@1UR#gk)Nk971M&-)_!VObF zayC5U*R4sC72gR#SpL~h@0`>Ft|hKNO00g6A@YRes{kb?S|TTClHwFz|$C%45G;z_&*L!RZe7X~RFC~va~ zi{*!nTo->L?u|?t?Ep2rSIQSC5&|zr7M-1jn?KTVP6bb^A{|cC66f#>Bm|=P?_8aK z;kap3IRh~>r+q;ET+CLeR`kaA#_8ms&TJ5{86WUhVD(SjzO>$nU>S_mbq^pCNZpPW z@VMx$PZ>3zgu4+Zgdxyy;8LWfRECJnH#JcSEVt5Ue*pZp&w32zj-yzitn^ySYNypu-zBzee@>&rm6xYb|SlY8@p96_K+JH2if3%K>8aJyc`n_K zF(rXNn8Qela-imV)#>W_VbaouO5=CJ8swT!pA$_LN}+BkRRvT7i4(!yk;wI=uT3{* zD7Qg3!|5#S?d!R~vtcsdm4|4gC<)ux(>%jX+^VY`S}p_mbO*AfTE-Z5RQv5)q`@2{ zED901%e|RHhQcVprFy&H+X_pRI`y`QuhV;sgK?V1#`@=~L5+nTVLyw`;YITrPT0JX zYIJ;5Z!NG4W-k?F_oui~mqY`1;-+p|ZRzjj1puFLiBNp#%nuf1bL9Sys%RJ(9N$V_3l~|jIsltS?rKR>4rgjxh-uf+}@-lt^ z?UkUY9r6b6!xeoG^?5LRVT?7ziA|uU2jt(?AK|S;D_Grg=DDzV4W_%<196j&SbKiS zC>+z1a`+M4`V531rSw|@qE@QUuCN$uQv)peo*L6PRyrYRagFzProKfn9ciyoi_4Gf zk}5~R#Ygu72d! zA)w|!%bVULz?5m`ztJ8O<&1ks%ks$gR^x%61g3*V^f}I_M-gN+g<0c#jQO7CB;ViM zfS_>^1o5=aeCB47lWH}j-ifRNIAp7v4>dwNf6rM)M;l)!()8OGm6<6&gJqZV4U;8k zd}_w=?s)upc7O#RGjC9JyPNevWRt?nbt7E~YW`4`gSBa-c{MwK>x9IlQF&BAYK(Hu zD87K}fb{PMG67hKjR>{4um1IHc?_#)r&6II2{v}_ z%2d+W&{OMQYjl2UX504kp~O57#K_8NcHZugC2cTpm~etfZVPkCY0Bbs-$y>3CrT#9 zqGI=!#M;b}rgLo=)v0%kFOrhIvQkJvEl``&k219xG&hH*f@ReKF$(|afg#`YPJh1E zi5ysPh7+iy@3k1r!VgD-vfUFb zDtj8YXc0y-+o933k;)O3f3JC2#1H_Ki54-&q1@!v%bhNPA+M4e18O`RM1HaXSmiy5 z_lY+WeMScLU%sp0$V!u2AUNhZh?)3XZwR?x=Ug1+(bauun&8T&JSp?kuy5_GSVnCi z#_1A|2|_MxElimXcW%Vk#C#3Mk9~*oQRU{R3(l)hX9C|c!y*GK4sV5h`EWYBqyde0 zbcqk3m~pCFB>stpby%`jL97=LL*+zOrHHV(xoM)H0C(PrhLW{%scP>W=t|{%o3pxJcMCv$d)ZYV^JK1sh+ z)h;Bwi&C4%diqC}2xIHlMv8{LqbsPWSX&Y-iZS)#=&+qdzfyKf;p)+ff|SSNQ#`%# z14!YXZ7*6SOa8=S+G2$m;gcF2pz6K4$7`WiL_kMcKoi~C z6af+>`NL3%X%ittMK>YQ@YE9`aBiz^OmjmO>lR^pvLo1SrT{{MCx{dZZw^WC<$+4^ zqqE}2@kxV5r^qG2A?5nkdaJDGt#Fr>tbPp+C-FefjvMM`->l+jwNiJO%P#O-Y^S z&W0|CI2F=5cPlPdL{m5M*q2S@)x0oGN@|ueNBDxZO(UC2Qg>n5WzrV`-0DX+A5AOO zkW;oBR3iz;OBXR8PUIEQr%qFTzjWT=E<{Zi$ti?-68BdRzx{$;$v^M6YG&$fdm{;5Q@dzfv)k5+h`PsG|2LU3>l7Hba? z^X}ezJPXJ&hypvKbLwz zQI+P43O5=^=;KnaM;Y`*9-Wc2{&NoZESQm61u5EHiN~mOe$0XR%_JLt*gyCh{gM~P z9nA7U{pijvPYJxoa+bHxn?4XcYDMpzquvd<8j|oJl}4s`UhrF|2fHr)jTPaylGGq? zqz)~V{@Osh!#untk^0r{vF?b)=6ZEqY%u4RKj~vQC>_8!PC<))PZwfe7Z}Z&O)CO| zIJ`(~@=(Lh6Au0`#tMFoo89eGJ&;KmsVf0HPFl1C?!Ty?X8)7GBPBI)Ms6leEKIz+ zTNI5*N2L-!$?0DDWCTzmN{Vh+Ki>bUXeeEKa12cWs`XnnpHJR$`BNuQp1ZnrYnIaj zaCli(LpoW(v`{>LSK%P1X1gN~iX@ zX>asJ3<}eKo`rMVKmI3BnDY|Ex8Ua&f4z#6Ss*NV?<4!=IpGyGnb56HZnz+O#-Dzn zD2_Ue6g>&cQ?WR+{v+nSF*TaXMyV;`)%xKrm;S|1DKP2W!@u~J9MoTF%EA{ae^+Q) zf4A!d>)q38YqgvRc%^xN#m)^gx=i+a(DtbprKFiLZ6@C?XA?2IRq-RHKkHPn1}1g~y2#Qd}ruZng&MkFeY^2V6YVV8L| z?B9g<%csvGX^Mkhp}C@B@LQxrj25g2PK<*q_w;D|qT6|KyS3{pE9H}lmDEcs7r0tP zsg|lj1ER1?Y$v+Xyrqh`M?ufAXD7pl;)T`lJBzf5eNI*Zznzf;$<}?1;o$fWLX9_5 z-Q&&dSn|hThYg{n|KU=}mFx~4CtqQnXCX7mmn2@76XE+mRKA7%huD6zwMn3277lBB zGU>0}YJ*$7pf29M#_hMSyU|+7cv6*BculHv_$F_s#}AOn#zYEJGxlH$vs;LKeBwJ$ z+A1PCI@*`xc{e_fG^bt?2athphwot;=@xs>!6mI$S-va)a~7eY zXs_`fLL@TVLI(0WE@@H5z7ZnWFxW&&bp%O^)Tu41w$ts~U3r#Rg>thFXrCT(==a+y zL8_6|*pf1x>*J=ctHd`+UL5|(A26MKU$}9C1yqF^)3OoDsxOs^5Ku)-A6gL=mpGK5 zqeCQTI!PQaMBoz%cKZk7I?-`uVK8CTFC%ANhhLyze>U24^7Qf~+rD(ie$nKK#uhxm zm)8OzJiGGyCX2|`K29f<2|gP(A(X7;AT(?6xu^*Thw}-3FVV-17Oi%}oN*3^g%7SF z9{A1AC`K|uXKh!Br>OA2TLUbV2q4oOsY2V7hUX|h>kc`doQnO$y~Mcrl$pj|FuVOB z@rDX5b-FZUZx;im_@VN`n~VG6ZjKc7Dl1%*lAd*@w0RQd4I4qDtle48*Ku{DnU)Q$ z4v5dPN^kX3`4=^m6FHogonZFyuJ8Nlz1-5J!bm5NHlm1QDmS@OftEQ=&2VpQ?>=Aa z4N9iv87iAnxdBe{mdkc0CgUnMwBrD3rB$;tgQU(Q508l|`RC4N2r~TG3I2#cfj>VO zX^14q;V#YgcJ^@|D&huO|1 zN@}08ScxMDkO0}AOIAE1CPntOrrA;DtaEZR(~+tpgq8bh&u_&)-QE?AoX@ZbD%2RV z%(x76oZHsB({a2-4Uo)R12g^Di;eieXdhGdjUzPo%FH*IXliI(-oc#dSf3rW zRF&Q7n3$c0QInDj*@mW0GFWZc&?#8g?Hxb%}u`h>a zsD)9J0Ud^Pu;NS$P~d1;+`m3x`zEiXG-_I$$xT+n3t8a!BHXt)&W~2L=B`9%`6G|T z@&W|kLdL_!-^+OG59DBVg4eh}^_&B-rH5sGs$rBy%jVz^56;{gbuysibPVn9(!fQ= zLPn4RjvazTjBxewxlFp5!}@g>AD0fog@sB`rQ=>%V)~oK$DE;ka5+r}OqIRbchq)) z1qK6h%) zSlIw2gQoQ_L(`6YVGF(#VBZuaFsR!>cmdQoAQ2rb$j=0PkJrstL!eht0So$-my1!{ zl_!57f1X7TY9wM>kpIz;m-`EGEWO(Cvh8=Yc3c9*{@v10cOxy1P*2lf#+1*wGiCjX zf5_;xN3|I_7hi9WBexEKeA^{6EB$Cki=^A?+sWn+UDrxxy?KsmW9l z-pZwKN&>D|XOvQCzT5i4r?xO*ysr*5kLv$M)I~mUkiEPqRM&%S1n7O%Zs9T=O%D1s z&3UfcT7q>Jww`Y*hHQV@_p=CpfNn!-TVIBzdV4;lA&ndSbLLT2g7Ka61EWKn<`Tit z2+nxABo{4UV>sNaF69I3YGikZWPTo@ysRGqhnHBy4=Y=kDlgIp%)-_MJQKWD#zfKu zdRTl~m@$9sxHQ3V-2qK~7or1@T>q2iyVJ$NW71Ho?goL4f=Ub$o0J6D+sZ@FALB`lQ8qf1-2=P_iAZ>({W zBjvZo=IELp9W(tD%Q@H9b**8+#w`8qm1i4V$7jI}RNbCJCN0DVX1@mRp-wGT~e*3RK!Ta}}i% z<|8HS*W6-Y|b?Fz&-+tt_N(^Wg9G&olQmZ8N%Nn7+T2atmtjE<4 zm>U3#2m2C+224#=b11Vo7sQ8ZJ3%Mhd-VxIhoh?lur+sY2{s5?mWe_T zQS#;k!IuV3!Az1Ie_lS<<6tT74`)@cLwwPO&L1ivK3IM9QOf*#qzdkk-x7np|N0m^IJuuJ_m)>9)gHF3EPZr##;T99(Hqcn}$>SQy?>O66*F z6+))Nu}IQ)2#5YXBkiXB_Kc<t(9m*CKR&a+x~coSoaz{@5Fb+!NtcS;LSzHFNCJ-H;B@l-rp)p>oCW z_=6iiU#Cyh6ACtz6fj$)P7KDa|9z~>8vhXK50nf)I;mkjQV`r$?bo%nQyr8053_v< zstDEE=&_WF7WqUVz;(5WWbbuon3e0Zsi!8B%+~NMtcd(0KCb4P=RX*?n;7L+$N$Od zWQ|+?Z|cXfIOTsVj?w?8{gD12id#y=?7z~H6~_O$7A2|IzrBU8YwrKka!faW?&sFI z;@Q{QP^Mi|bY`DTV)D}2$@htCHF{?J!%aIs%D=}#CF6PXTre1l*jt+yjBKk9t|Jzl%=7W0DQgYO zE`E+%)7agUpPR1bI$?XaO9c%(T>O2^+x6nD#NrQZjY*TU@yiAlUprgRM)Qa=ql?wX zOzZs8Dor7vps&s>3Ms$&})C!qQS+BAa|caMfm>ifv_ikKAI zvisd>J&160g{>N#Kv;7}eReO~M&D^ax=)z)qWyXbANz@&ox5k#I$3YA8&I?FkXl4` zpjDs+FTK=Me>kNX3B}Wb>6gV^4eZlNnn;5He+U<@OWWqdI0N+s3yC|}1Lok?Cwci# zL4Z!I4GeCb27NCyLvMdo zEbMk6DMl#bEub~2@x?~+cd~+|PQK7*&(AqxV6kq7X+w!OEq8sr-tGG$in2;&)0?PHyVya;qif1vtE-6H|Tz!+SyEyOM6PUkF z0GpLosWnDnlH$}sknUt5r5WQy)mG)h#I)%A!GnQo)44qKyE#GeY;M=7&MrOB{K2wq z;k(&lgu)Mlv(JLQM?KF7ItSNj!?CMUZ04PO6f@pKgDE;XyoCyRdbNp_*66K6x>l?A zxhvc@e=Tbjpw@LEcU2+mEozI43@XB^%DDyUA-BYQ zwf49G3OKy^7n>kOE$Fh1MI+j6U^S<-O1qP2?+Z_4^V`fN)Q_5SC#5*WT3EDS0cD$2 zaxx59vXahW2;77?+ka=o_lSu5bqcWdy@}YtzW-IlrsoAh{fPd6zswcD^7eMqRdc0q zon^^72#~xE9U}xYGIKmcVfv5QrQ6{KI86WEOPdBJ&UVTO9V7hsp>QdW)`=!lV%fWRJC3A{hD& zr!~1nWdS9UFjyX@^nstCQjpcVH7O%D7|069G=2`x8BjxW8rHYdyXk|pzTFm%V7KiN z>+FKExm=qa%&;=QdqgyrtYH0Thke1x#R)ERuWb?^+JgFbn4*RnW>qGG!u%s|TZv@?W$S5Z-JJffuG9Db{QZ0p8L11w@$^qzw6W51mzeyomnx*S8-gUw{yj0gq3 z4~}X5qU?QXF2w0Ab;krR6_z?uDel#Plk&?moKTg^3bA^Zd0olU_yBwKOP+Un6r~}5 zbl-`2M|7)%`%bQ5c@UAFFxZ9gI;ydU4Ss4^QR^FB#K03>EIYeYb&m+|X^=|R>CsV` zL3w@tw~73HPc@p%#nSdu-(|Rope- z^8uk$i_ttAPedbU9|)YlASMouNnzZX!$V)v85e9`+bYm==S~a*;&qjuOIGHE2|D{P zmBAyIt6`3>?QMlsuef4VC2oX7ux}h4gtGJKFjH&pT|yfK=1JTvv0)jpP(i-tjS~4G zzWK+}idA+u zMzw!sGeuxu$X)$PHL~Gx?6XM7H~5s_xg(&5Brrn~7Pe*A_IHY0U+gO}h_S)ol%d5m zqi1d)yRv2KlEWj{C+in%S()1n1us6gr@SV=V$^e`$PbGFVpEZ&v$HA@pUwETV<=>d z3Dg*fWMt^< z#Df9<<~go%YfgMm8mbUr}a&m zjG>j2ihj7yP)~cNzE|}}-L|+%5FHf9n6hUtQSoee>bIIX<~L=Pd9+yKZ%HN%LNz;c zTV+36%>2=eV{&?N4gHba*LIkBT{nx^IyhH2i5OB<-yVK8q&BQd3am4Fnb3xKQW*zl zR5R%{-Sixet=3qqJ5(NtPaV$veQU^RH2u*l0T*AqjLiosRoiHo`wCJM`Q=7Ef3tL_ zLgG163jl6MuWcO3H^s`({SoHWp2+K6?zxuRPl-U<&L$!pl;$rZfrqdDzKO!J+Ek2k z!|o;OA%Gs+*TVo1iCQt;>=#4cn~LV|Gw{n0v|{eYk6XT5-Q6pp=7C-sqwri15I4Wb zUSCWXsx~vM7kjFjjCp$X)nj?b+uuK4FF?*GZRF_UiwLb4)Uy>wWCP2N#A{c;NBV~1 zm_2_;MNA0~lC-*uq4vVB3``~AoCihpI@&@*aUvHotlDcLezUeI_t zpUNhD)IFwWD*{NvU!C;a{aHmadeOF{K*b<@*mx2UNrJ68J7Qo)@Si0ae)2jXtrij* z{%fCi-fVV^gULR)S+nP3n8nc~|}Ok)+T$>D-Kn7i*%2$Thfb+}It? zC|2~TNhn2q1@TV5ZWrnlQeZQxXIetluI*Sk0#{7ui9;t&Qtb>PLi;Qt+)vxH*%@OFQQE>x8__pz zb}tVr*F9e*+J~HDPI1|p7Esu7xr#D|M^7#Imu24bRPZ&iz_^Mx z&njAn|2~QM{Y{2=bNr+IjIWnph1tQIaR8|lRM0;lW)hs>8jeGoKCH&7ANcrNmZPGT z6!#`wQ?N&0OR^b-*m60S@esNou5NEhTJe*#FRj?0p5JAi@3pb@{0RA-_+DfXV-NNC}lP;}Iwr~kBRyyE)JNeH=}JAjYXQpL}&6H757@-zBdf6-0lq~o``IJkkGarJfudr|;kG~G>q$agK1SR`A zpV!ye&4QrBI_FoH!q&+f!^z`Zwv$n(_kPkZnQ}jA)T%b9et{)6|ufM66s4?9qklG@&ctyUy^-$mrmHG+qRIgdu_4qzH@e@TwsM z5ZVp0RLkV*f$gCE3g-LbOM9k7*Aa{{C*9WzJR83AD~Z+H-IA^A#HLRyf74@gnVGoB zU-p}RvZ~6|ly@Q2NxPUd4L49ogfEz;bYZee*AQhD9e+Or=||IL;Iit&WZ`i=#OwYd z4XYOr12}{2*_9+#4X2r#!3xAm+N_5P;7RrWW`KgHcBB!^CktE<;BSZlh;;`H`%j<# z^b*IjB=!XS^r<-<4>$)y3!X$VeN&7K-BikrRznZtHfF91y*WL3vfHuyyaPmtkUVQI zSH~Ig9&|t1 zVkS1tyF$O1#v{B`sBlSKbh!o0S9&rW3q)v+q9^dk=SZfwavfe0YrdG8@0#QvwfC_a z;69Y&Ytjl&%lb<7WPLbub;IooqO>c6V)aM;-kBa;KitlRKeoq=W$f!c{wWPCa!>5&dZjbAM z$j9@ErZdu)g&KtEpL`NUoM?JK`{1{W{^2ySxmdO%^-U27DryvBYlUE9<9gQbfxQKf zXr)jI`z=HbES4a@Hs1R{TFf5CE}K8f6R0Jm<$iLMg=Ev#(~o>S?KLLY9PnPFJy75q z#C6e$5|Lzqk4*h?gCm)K3i(Al=R7Gp!s>ne@sseewdwciHo3sm<-emaw@J^j_dyz- zUwUXLziDPtCY@)(ZnE*8^?m%^SiTR4_@SGm)12ZyS@AnlV73?bB=jIT7(jL+M+k?) zz@R(Z31r8>;mu}lR6h37&n5vE96p0sQYb${W9TPDYzeE$QC5u=tWvg!Vp#FC+Dvh; zbZ5U3+DH^`^A|fYD?V_U?hMbzhUt6_rq2&)@`D)mL9_Jg@gJw?DTQ^BF@2J?cx~`A zul?6C4-*{k*TIwbf4X&;N{}(Mam?W60U_-Gh|-7#jk#hdSP`uJo{T0crv+Kw>e|KC z)M269T2z+)?wZ!mZ=TtlGNMpqbG8ZPGTkx!i4pfAsXv6KieTz{Z*&tAX8tf*U%xy- zpnU#JAdD~hF^Q{*v<%zVc<|;k-bzEjJ*LNjacLsA6N75rs91FtZVaFg^tA7#^W+$1 zmvF%VcC0~p!my3rFNMbh;iZrh^TWLhRMrQ8oubxk2bHOs>6fojwyO&_h zZumlfYNVv6Cz@b5YmhZNT5XxKi8pfpgLdzBluMgrGp{pjx1WWtp+^+x+QG7CH^Tp zYo%wL*aJpf`xR=Mlk`H*t-TD)*(l{OJnrbzh1gBU)>X@BjlNKWoWd}EGWCd~iZW~~%7A)Xlh~dK9o^d+Xth~cOnn$d3MVh0nIh*^0^Sv`2BS(1VLAh9S0(4^z4o=;M zn@YcF1DTXJsIJzrsH^u-zZyBpqdCOqk=HoSEo-%xuv>3=AQ7L?a?BoHoN#}C%)F%a z)LlR?JQDx>imi?GS`;2-udk^Za5ku}OQboOBxH*t$r_n;*ZIIFvHE>yX?L2#B_d); zv@XpyKbA8H&GUE95Gt56J!+dWsCrpROHaDV$^N+BIq@d&yxM}JNZWXUd!PF2^$SXF z(_mM|_i9Da;dV6TpXRj*&FmGS9I9e-C%S`fVfoksz1Ejgi0x#f%D49+p6Gr$>`0*smL(sTZo7oq>?a=L+U-L9Yt{Z zcsbLDr5pB#Dqj8;3O<(|hNNoGO3#i@zNwypie2}cl-GFeE&M&drBb(?29a`zFjXI6 zjEh7ZzqU?TKnES0Xo(el)>u3p-=)>4R%Ivsg zEVKf$<*nSWp}09-@8~hxbSU74jH(_2<#c~te-KY>y<$+5nHbA@Er|d^w-kB`V>BgS zKn*R9pAI8Zx7%nKYr*EK`45oaiI%83pDhO;%W~)O)fMz&RWM8@GI&?NPt^6ro;%@g z3W#qI?Q4m8{YL!ilEXS1Mg-!{IcE&vIeP~Hc8-i}&kML7EX;p@V8BwsJwg^jnDO-^{?~APr3>pW2FCbyqU|9~Dro}L zXg+KF<$RH=6u0mD<2Fmej`**~qAXCw>-8Vbp0p66V_f>wfW0zYIrH9Re%2=fY^Bjt zq&y}v)$w;rf-cc)tMc7M1|x-ibz;v*8xmtg=)~D+2b(uO)Odhz`*}xuR?(nuYXChH zd2>wiLEz1J)vK#10Mje35yAe!dKZ%APvac`n@sOK)zQUPC6+ulJlbBl3lz_`T;0c}$7(GV7EK3`X5*Fy--+rbJ}QCha8pUvP_(qo&GpE$T!0nh}FT+wWYOpMF>T3+3R z$3f5#0C?m5to8;KS2K&U`-3Fpb|XQO@|}|L23shc>dq<9RvoUI19Z2on|{ocJ69u;U5Kv*Tddb;XFu}h?yFvA9q;GSe|9SsU$XO^nT{* zLm}=?&L^RkPyt!^&+VecJ0k4{{(jP;bZoXz--S|BoTHepY=Vh~k1-n&#{uo5mLmIJPKOm{L zXsI@Fdk$u>3pzMEb}&DGUEd0g;dAQ=*>?1GWtm>fbHnKiQt_pLwv-Qj*COHY8NxR{ zDZ!qtYlHY;47KH66GGxvrZK@PvgPWt!5qH0ZVwWY58#eab@{&QnG?-CDrmU|0&Ojs zRHhTKi|N|S3}T*r+<-yr0X)H;71d2iZ3wawroWb?4~=7zY`oYWh^C8e>Zt=gC7H&Y#xZdIyzgt41VJo3G>WC7$_Ky;)vC(qbj;-@{gtk?TL)lx_TZglk`kHI8kg&8%x@Zfh*~yHIb}QNTJ>Wl`=UJg?pTvB$FJgTthv=vIm`g$X$a z|KNyIgvf`29`^NFJBUJA9`x4W67lJ1FxFvb{IW@M!l#?5=J zaBk=*l8q&k5q;&Q-gQT)wXNe?-;{a*K*JeNcpyLBaxI?R&|lm<{%HC-2ML;XCmfaA zbHY(pfupkKCNE{1*5wIqWorgXTm!J0oIg7PzX@uw`V?{7jQ z{1E(}G9#x)EQz*ZIngE#NE(MIsd*u^N;T4ns1qRZ-BR&Emm6ykgr=9=0q6#7&pk&MSK z9DbiD^4i2C4P5fWEVuiv|Bi7(w>#zfr)uWW0YMa~+2bYi9(kvp`Jerl+*kRbJKQh}_*2QXZ9fbd+`Jx9&$ey-| zl`WCpWIUCxDEc5s;pzuP8_7oGwdNiuue0NKkoo)=iyZ98qFm5d%;$_jD>qyyocgA zX1F*HBW)6!f4nPB@mB0QfqV4{r~jZ|o;Lc#YaLKuMg>P`j$um>Uy{;wVZd!U)r5&# z!%q+4Ec|vu=GG>EAo+ElR?be8$Rz^Vuo5$0AFgmV<0Chr%UT#a0^tn6SSm7z%Wf%z zfxF2;pc^Dc=w^~MmE2@200x@p|4DaT2mBpR!APR8Tx`G}A(+k_;bCR5O;=oiO!ILy z!ZTa*W@tQ>aizG#7SR*m`HsVX#i`E|>mmpXFCDBjJQT~Cc$^yuUYNFKcbJ;Nm1QkL z*6ZD1#T+kCgiGcwQFz#fk03Pw@kIv25K7ZrW%z*MxfY_rT48M%pt9lQ<a!5 zT```@wrKuL8SQ}Vn4+?NXa(fook`nJIVx>aGOGV3yJogb1WNL9VXD~;k&SoL{SD3v4D59Mt(|p;J%Jta+RRN(All$8NJ&W~*>79mH zBi@(ylssigqMP*lU}g`^^BtNQZaL~WhjVefqeS6~Y9c7m?&x zhPSf-0?TqsR|IALblB#h>_@{qBI`l^$_hh`tDP~wuM=U7h)ZlCJ0mHRUm%pQ&!XKG zgWCIiPPo3f532QI#0$iu{m1HXGI!bt8kZyA3X{VN7A`E>^s7j7qrauv(_%DN33C^@ z?3(Vu4E0%v_yHqOVjzZ5aD60#Vj2IP)fW#}yGDhW`Jr$1mE513FUjvL6b7Q@88;5n z_mcLorU|*e|J|Wgqfgas_05IuNMp1jx>nb$AIiQ}D_Z$UYQdmxxZ%O!cl;G4!tTpv zkotT~E-Rw|PRCYSDC8Q(t+;Z#J$yTesl&0|57zCxRZ9P5<^(_1{`E6~+mV7=bjz0P zDQLO_sa>y509shR+o@|qp_+2eHC~?O3FBFkQBJ`4FbT?5l#77yr>ig1i@Fn+`nV|< zMl`hX6!d92m2W(c{uo46F=ho+<<$0|M5YH;?f+FKc`xGOsz*n<{TvdG5CI-O2-wX( zSPfo?-rpD^Uy@$h86xLAO5E^>+R_OYI#vg?UZK*7*3-MlW0Jh7 zOD8szS9N_{WgbCajzc?+Lkh!7aCG$K*QOVf)pE>H+Ua4~*{+2>C!e3*<*~snOFLRB zX?w}OGj76RU)Jos3cB+kHhbt1E!-$qa=bHEeSG#*r90GRy6GeP`dDB&C2LxQuzc`*3agc`@^2`{K~MFmq0<~Izs}LCIMismbs9DX7n@k31lKMZy3AT zwL;+I#Y$+`s8X9qN^5artfE96k5X!L%1~Ed)$;LPlkP5I79h8rZ5!^l=JJr`c@)a! zg3LOyd#W7CdH&>fZM%OZPs14#U%J`f$anxO7g{;yM9*Q2bW(-tqXwiqXgMQ!8+&04 zk$%`3e9npeWT6-nZ5M76MHQ9MIwUH-?AK#(dGUk(Axx#}<(-*m=;}+Fa#5_7;R|@~ z)O|VXOnP^9R=;_p_2m8{;SscXV4GJ6tv(xUdPL>(d*V@zwp zE9ljps`B0MFZcB&$jJH6_z(KWgCF)#{XcQj)f?``VOCC1j=@~F&KCRF+jzs=EVbFanVKa{<#?(nikh*CBuCfX_;@ zT~n~#6hPJn*L`OKK?oQ?1Hh#*lN0Od_G@nnrShSBM}ko8I!ey6bV<8q6-XdKw_eXY zS8;O*e~?N3?9tE^&Fy1t9ZxUCbIvS7Dj3uMokYmz7qRr~-=0xMe+EGsG3G&iYdfzp zN8uplml)~`^bU7L23*#h8Nf^8=cEc9_^lWCR}?b6>H#Q4vy8OuE`j{a4!?1fyJ9a; z$WYlJWzwTwOr2evwqa1_thg<{aVs74nx~ea?-BI6qM1GYfOgHLQ$yIpekM&GjL26b zAhfL4|3~1%U6onq$g?a^=3b5Ns(;j=dEluJ5CRHUFTQ#r2k!9+3Pf{7@$z%zQraxc zwkuqjP!^Xw%DwhVd(uoStrK|m`*xWV8`M%PO(Z+f_r=2lG=JebIz5)zGccgc%pRKq zNQ$;nPrJC}(L@d3ll0JUd&Xq^tNiZbWrg@dG}V(y?3=}PTM?abi_6c z(HXzO!B7?Lr_r{`e~7AR5tqTwOMd*aGnT{-Hy53+ezzySLqosWVvI0C3b=DWGzNc1 z1ij_uDO#pSe1dR1s0cBDT>${ltp>+<+g1LH@_h|1pQ{+SUM9SAq{gf7H8632&0Ov+ zr?7fm8~0Rx(Sr~l`v~PvHap(@#cF!7hm(ovJu`_E(?jHFb5SaLznPb4^ElRqDSUsK z_i8S4KAcZEF?8Licd;;4V)+jsUFX$mr#G_kb3{cEj*fr=H%d{@Ot-nKcYF9))Qgz$dVXxhStR( zu2pL8tY~F9-!2-^c8u8P8q@MsvkiYNGAP$^ZEGVGO0p=(*SOA-cY3h?JEfR0EzS7R zc&YA$0HU{iuCX)Jbv)1Z4=i}O@|Y^HC995w%W5A@3y_6xAH1|o4ZACbuA94mdvUF` zn#G7q;Yse#(%B|GB;8xa(cb^ zU^L<-@tUB17{n%9yA_F$&M|r%{@@ICOtmw)Msv3oq2%dGW+p7ys}3;4g?QUy6aIt8 z-Op;hKowF2q>*nFVT-KU_*2c?gr(tl1|zB4!2woU?GVHn;X?g(u3%n!3TTmL7m%9H zZR!w+^Xo2%d67=7k!D5b^Zci+JlX7fp{2?QT8ZlQHT?q(R)2D60m_x9hOxp)&8haU zRHs?Y%UgkmQv8A>Ms_J_R0eNl9Ng42|6C+YhrKti?O4}<&UmobuC(VVzaRoGn9>NT zKL72_a7pr5+DD?pyr8AuZM=(7~ zw(che&0?`y+3ho~VDyte(M@I(oL;>conN1lS{+EI57ebCLaCr+S6&~t~nY{ zoHB?6I9A#9hdWudZthDG`cFQJ>%)a?IuhpVH=92HeZ122 z>jnQqKi1{8eWs4(l|JXw`hP^7Wl$Vn(C+^cG`I#2?(Px@?hrh9ki}tfmn68mTX2W4 z$l?TNad%%93A(uN<*mB!y-I}28#70YzbOM zzTQO?zC&?mI{Q}WVUH#sEU_7%38^j88@N(V-dNR-f#%1L)R>b_OiUbH`})0lKZ8OG zb2N;Ak-?MO$AfKl{uw%3P7jS-Qvga=6SL&Y8~99clsiNYT*Z={}uD-o1yP zd&S3prHoepW=SB|K++kEh2j$Ps*Yq*G7_Z>4~epu|I_06zWc`8`vrF~?oXMF{7_{R zD>()ER3$dX{oRSMFUhzb{=OlKV2zTcO3vr|6DC3Twl*O=ifePlW=+-pfdN@#McoET zqjKn!kkIz=cY2Y9kmzjQune0qqS%LFsm_aX{3`wTGo+reHUnbDjC;4wG3Dipy0ZQH7G6YL>vH@Acq{YCiHO86TBs}VjG%%%TFHwZ z)r*isrQ68kH^vskHr`7#)!_#;sv2x55C0 z)L(_KmCIc6RwNn9`7vcQeLlO#fH>1OrLANx6&f{=L4Om}3k&1A1$VuPls)g%>9wX> z(n!=bSw!F55SyyL2VWO4fae-2RPix&WQViCK(_5oaLq762nX6 zFeDOdbm=F_=S&}P0I5!X*Un$K0Q%_B?-JFUjMMZL&3}vF%@}~(_p$55;1g4ZWAByf zC%%d1eW|(Uj(V13~H;23pj*Y<2@qcipnycu7a!9HYcW)Gv!1YAhtK}MekX7xYQ#2B5Z_FmQ4;U06dH-<$;r5!sQssR zwnnc=^Xd<8>f@iGjr&Wf-M9(e7DNqUS3Vz-#$?~01v&FtOIao3x1#U&AsPO5;| zMo*Z7(777j;0&Hg}Vvp6;q?^v8ube8NOq`6;KrE0-;im_)O*zi%EXS)Y7JNzSlJvTVMxB%sb; zrVY>EURDBEW7-Jb&HC2WRP&AjqzdBdO&rK;wur_VX9RI1xXnR8u*R5=!-aCyto1S7}vjqXmyiF)@{6WoZQ zs4cBZ53i6GKDj(Jf^;bUcwdcjYAi{A$o- zk8S;L&pQ-h=L04e2zml_qN93Di(AY%qx5hdcjn5Azym*<;8PxC=7 z3gNy3$IL(?&j3MQ;u`4GHZ8fZdqRLURpQJc9>6ZHtB78T zz$4V`$*{!F0h)eM1ZTFEd~S=5u&dN;rn5{JPgk1OI_yI&x}kAd8CRt(_F5{S7{~D; zd@*k79JT2yWAJb_!_7^jIt*I$ewRucw~CwNMjZ(%KtoJUmi>E9>}62h??~S6sJ!lA zsYSp|{r!s8CxHuQ4Y{drJE$MxL1izW4FjDZA;EGNL@YmGYnol;?UNg@GcJ763+>LO zr%RfH=|ZHJS5@mw1{&_=B?z$T1-MuJEE{EQW{7CMGWDL>fB|T}V_*&(m+zl;-H&a! zPUpQ8mWzgG@&U6uPi8&u)&Oco9i?4lf3Fe8xk$eW2Uf%L-PG6I+FKO8yp&!KFR!BV z5T*z|)TFmcEbIScF742M!G?XK7ABS(s;&U%PCo%_FYAq4!G^Pmj}#Rel^>rC`HNpA zo3Cu;_*%@WWP0NSwm7BGtHlI49W_vs^4?+WV;plG4}!(jxjt{boBp?r89M9&;ItnW zW8}5mbyMeJe@jDj+F^#cz7dn)3f?QyTMq2sC@>AS!Z2|eczNWi5e=G{wI;TmJ++{5 zR7TRku%C_6GMmvh{cSr)y2gd9@hRwydHlq0*LK?xUFtHT+3N<`k&cldb!Tt7Y;1D9 zUiuOnrWD=}o!JWoUY8pZbbD z`Fj;@$(fSBwj6NZEbHVuv0POBp}Q@4nH8Jm5~!@A{hpy_`eihXo;xj~-21U^b8knz z@6O*|$mbG9r<}%SIhunNTwWX&D$jZZ=6Faex-Cq(H~n-H=uU^Mk5KIy=g*%8UT8el zrO5CWyCPBgSQUTIb2$FEnyQ06wzkw7L635}3ic8G#pz^qI%08S%EFvTIDaX4%7iIQ z=~O#c_ciH_=jOC&O7zWjWfI3>g zxH>t0>*s(5d&qhbeiDV>>_`LTHXFl^YB3QD zcx$-GUZ^)&>n|Ko272hJ6;?sG@Xiil6i8=J3z${Uvam}v?!U@SRHZIvj#-crcLGJW#LZfAOY z`I|zERZbtKwDnc-d=xq^v%g=&soL{~1Q)pf06CFwj#R_Bl~dwlLj|>FF5TSau%oog zWe=0C@0?uxx+n#7^aHIY#oBHTRMX8YS}9o4mulq)HSYJA6c7Dxh|aCU59Z6Lf*)>* z*YD>QW(-w+Nbrrvl|;n1b&_Xj+(_pu}n>I{x<_&vmErPr;d zzaWt}-o4)|F+1c*soF?86Nd~D^DZvw4RQs|l+mc)Y|WBnACGP=U1+!;t>@$BV*+-U zV$BubZ~6;l;`mu^?2$l)Spthk4a0bRW~Fu<<;3#2=t^zE}Tb!RmXc z%+Df7|C(towuk`YcQa<_3)M<%Rz8%dtF3vz!`30V2d_&zQKu2jNV2>3{e>o^ zddESoN>zLoo!YVAiuS`UkM<8W9nsnCOG7Y^?V^iKmz^E{ys$8(S?RP!$;L{PxMPyp zoqxwMRo-fcZ=Y?c(+EeCpKC_L{b%X=Ot5lWe_zqvsQ-`7!{QXX;>HZAa?uVF|0w8k zU$r+TMigmU`jo<&WxRZPx>17hZ#law;Ncv0Tthd2!h1N&adotqe=05K`Y%!SQEgi*Gb^Y~^88saEbx<&@{T{96G_)4#bA6By0i zM~W0dU{XiPNbaUv60VXSj~%^-;}(DKKTM#@`B8C_G9aT%Y?(OY z8-D=KXTPAaT{twOc_$~}{xKFqRoLe+3vYscvvPsSIOShS)Xx41vwye-nju@BAY+Z4 z_TSZYRc2x!?MRapJ_N|eVbopo6exJl`kYYpWD!DXG)(O#5Ek{8ygq;dd^~D8#K6_A z!z^vy)vS`m6C(ZYAJ5s{yHkhfUjryR{VQJ=*zeNN+_0EdIqqC>HSz?YC0jUO>OaY^ z@c*0al~rz~Jp3~Fg-VLk5dgPp{~6Ib*#TT+X|Nx{-YW|~%n)(J@JjQvemGR~I9*I5H}Hql8BB;TVHVI1H{;`t=f`@=sL^nIo>7^pV~E5HEOvEv59`q&nO0 zX?e24TbQLUF|S6AongJM5RQhXJ2J}Y$#Y()sLa5SZ!!p$ty#Q06mwTB5vt{f=L`MB z8?;nH4*XKnW)tmU`EQQ1MYNkWdQ!~H7n+naJf9b78e5>u@0Ir+0X8!aBC^#6O8C>9 zMj;1LagGo}>QLQCN@)f{9hMV1m5MRXi@w)Z*RjNR2lLg=e9dov5d5eE|I1HG0pSD@ zI|{4Mis+=?`+O#KmNCs#)EdHf_YrwcH=;S7A_!wc-G{<04z;QIKUmk`>~Tj?y-Il2 zIEHVZxzc$H(AG9@-))}Z+N${WhfwDVZ);|52iv(_tYTp-TkS?el5I)cV?=VTmpmJx zc};9T+(MV%(*O zpMTtwam*B3*uuUE@VNu^lVC@l%ycl_3y1Ki6&*g zo@V)rfh6d8y3h?>6!bpUJsusN&ts%Yies`$tIayh|vwi(0Q z3#+EmOoXJna$7kB?O^#&RyP3yj~=>kORxAWtKI`pFZP4|TL~Ick3}tIXDxXW*#k%~ z0F%Wj1)I`)NcYIh;?#=FUS}LTBFAnl2mSaB zD0f|{D6ieSe(S;uW4`%N6t#;^$hD{7Vh!le84+HliwNeDrW3y%4fn(Z!J+CXgk_o? zlEgd@LRt=AIB7iDp${LT72+w24mt1_*9txF9oE{fBgjiGK%NWcJ0a()ruDP~yh6!! z-z8@VpA$q{{UMq=?;00RrFR&JOm2$Zt>kMrqkh}G!A@gejh}{mfyk{7Z=FcpSJJn7 z?Vu7l+U3Z==(u93^29lcu~jA~e5hs{jj42Vx(0KDi9?8IyEQ6pD5}L;T*E|f)n>r^ z=3)M#NwK_T3EfA;yH_)bU=wVR+zCLw*$RWK%!J`&$M}^`@`^E z*LnHJ5?Js0Jc$JLNQq8Hhs1c|yH~!!fS8D|D058? z-f~~^aiPZEn<7cZlxUE9p5E0U#sjl8X0Z9qH&7*+_wIPBNXh&kLHI%iP1+qrDO zd5zd)CY*C^ryPIKeql_Y5@U_nPog)rTYZ{L2wuGRZrg^Ph7D|Ro%;lYObd)@R z&*9hvgtFV{?#MASoOBtH0f9OE;T#tRpHj<69*%3QaEKQ$<*n) zotS|OBWhvanG5r#^2tY?gsUzug9_&;%*btUp4`=X8rhz|m+ll2I~-a`{(8 zf>2Iq`5)@OUdyZ+r8-rJG63n6SkD#|e`6m-&BqY+xQ`9;xkT0l`u6_FG)>wu6bOBY zjRINRSbA=ZE7t#a#}!}x#c5+0Grw0G*F!jZcu{fU(B^9i9>4u!sV1z_@*3}U>OhU? zj7#mMn)+mAK$&17o4AVUb#fOS7L?;bfjAIQakj5N14t5lj068N7>;f_6l}z>QFUvs zz2JH}cFGhyEvL8}gq{qxzAf|Q{IxoiAzm)hN~UhL`J|>z>XIO=yvOTz;mmW`8~QPg zUh$^Qs^QEa_#8`$50co%-y0Z$E(%nP`o0-gQ*GLww`6p3pevdUa^%shE@A$fsgzo& z1rB^ynLZY3vUHN-rA2$JZ0Sxzd3rO*U^v}G>!0?FnSMpwOCD(vg#-jCnrl>IgdT`` z;47kW9;Bb)(OMl7r#c3=Y-07x^rL12gZkJuZRn_^v`csJ9ReYixZ*5|E7GtsOnW@| z%?*0=xds|Hyx$-MSTCRP{O0m*qR4+2cy=v^ZWFyDnv!2fJsNzha}d9l)jjI<Dx-CtSd0|qj9IVA|2+}n593n zk7tFpGwIgYs6QOGxDkI%k64xnuZ-%0DzF0m}?I^7UepGA7*H_d#a>R2O z#))L!oLcVz+8d`jRpmEHbQt+25mvcOQv%slu)&kpt}>3bR|IaybFyYJ09&xf^!;Tu zWqNsm!)4bM$vJMP9ieubPPO4riVs9AmtrD+^PB}okVTm5B48DO#Z0)=@BONcA4kd( zdtJ}J^?(vuGYqrp%~k{+fs*%Fki#=Y+%u+96@xGKF4)Kzk4dM(P<=lcWY!KpAyW4n zj#9o3)ab2|lgD11u8kE=>9k$mHns)GX=R}5YbIhtDL44o>%Q)mz??93h%T9(;jB-5 zlb7kyQAsc7zZb&ttPPbtmfSBrd^+Yh6+s4BdED@QU0!>U_EVuqB9;$h-1K)XUfkXg`7W0BZC=|fvy%2 zm{t0y-|7RDc2`4oInq;|5<-cYbj2`Hu#I)njMu=as2V>k0bjoTO#ijWHd5)IxDQQL z(#{LI*Qhu=cq%!?vv{Cs_)HNd<)P{8#Rc`1|Hl(V`CHXT*=HWLzpQuK_AC?}uNa z@p&&&GNXf(B!M)KXX(#L-I$>1q2IHtu+w!}ffohQbI--<3r=T$1j#?oe<9)1xqrWy zz6H(g%=!j8h~tI@wXwZ#i5xpRkWF(3(fVWSvQzav{lv6gY(w5hkF^RM@;7e{Q);?M zZguj3W!NgGO7BBuj*tbW@A1x#Q)WyGmF7#`Z5DGjs$NmTzNoh1$Et`mz4G}=cCx(p znjOw+0JrpVQ4FWmI5kz)^NtZAagOXLnOIuJeT+iuGTk|SGr%l%-xO+DBD1mxp3F_w zA4`(`GQJYoBLP0!wG>#H$=0hHY^>sh;+|{`lCr?@w{gO9Y%7{;zS@WXkqL zZ|-CmBJXlnJg(yFLV>O(ZmF2Blp!i_HEuUJ+=hAZ+5HtgJOMBRKQtb$ghRO{cgGHB zo4FJC{le0Lcu8=z+&7%YQQnG@1!@gQ#a>82TPzNxMd~6m zzV_1qo3RRDrhWfKE)mkju05VgfyK?o2dYCTt#SEMK30Sew=KtI0m@xy`|F2@dGr468;wACN{-X|)hM zrOhHO@vNUOtNCpB?%K=Q#RVsB?r#o~@jXbN!dG>L{e6JW8adlXtrFVK{05;&{AHdF zbom3svk6bmQ^o`P%2b;yuiUfyJ89QTUmkJ7ij2Xra342j36ECs-w_rDN^{IrPia(z zfbp!2S5p6bz;F~tk4l={?6*f9Ze%`txl0k)@T>#FtiZ{(wCVPZajiAwUi-K04*UH!S_LkiyH}K z16`JyHDf~F#SBx+G7AjJhjv2MOA)x)r&}-%6cU0LetWC6<7?X69~kd_L<(Ktv=(;y zFi$$eQaxK#oWTCAv@Cu5H0NS1Bm?Zb5K->JrEZv)z?q0Rv}EaB5}`<;Dc<;sO#S8KbZofvr=_cIbNGR?1k-dJDg|iK)MSA#d0OQ znbt!|gT_!TFplkx`LdL60+Kmzr$pC7_b7tUN2mc63(K2Ep|%thS`oUea2K?Xvat(c znOR6Yvqxp4+LLrSKNp%|J=-N8i|=EKiYn3G(2~c2v`f|FTCRD1_8t!FI>+Kkl(Q*i zz7VXI=71xPG~0US4xIU(KuFXu?j$^@Y{6VK)SjC$^0}HcCQPqJp{`_~e&@fs^?AMF zTE1x#lfk&|G&yeiGkQZYOFR!``4ma(0nn~T-AtX1K`OngAG|!JOK%h4^x1z*aC8AK zHb=yoO>03KwLkH*4jevnJ$LPgE$n`Zj)sOd67UG?3<~W4yCzvsYd`cS6D2ajew&e^z#We7`|TK}3kS}fd0VS$x6bEfmAbDP62V*_gER_~ zI}XXw;5;z{Q5!b?s^7Y4037%95|dTHk@lXWN9ZboD4wHwNI5$sxyWP*EBRt!n23^k zBnFzTS$zTgw23~B1B2d`94U>q)TN7-pzrF6TPD{*^Fu;h55@qL-KZJ{LqS#k3YL@! zKtf(*q^Wk<&rbmxuQZCyU&c;PZ$4Dy?U@CXfp@B&P1eiU)^atXO%9iwL z+?DNCsp!8g?i7HeeMK?rzLwzR<`Enfy%FIY%?)6W)LP*=TwIusJA;@zZg1VDy# zG#xTr85NVxfxSeiqEBr^X~Afai|mV)fxsQG@G%2f+-8yHp{Cf9U^1mLbgAJkIiF&& z*>R+GailI_^$}&?dA*DtFf+tkWUtd}aBA+}Bq31S(?0T=#m;PUZNO9J@WUEOrq3<^ zYc;ewu0w))G;`vY)8cGwlSSuO=L)&KNgwvBawlVXsnV)_AIq{zCa@tX*Fj#vI~gRw zHT4)X#s?JTnyLeI<#VdGW)4a|rkj^FN*Rqln+k@Kx)%;UptHtPiT$=2Sh;KKSmEK= zrADhz*5C-Q>)a$Jt1}MA`FwH5+(&9+n7cD%e|dBC(1fd~McLt}76;kuqZli%^&9(SCiv;j4Y&x;z-eOrJ#Jz|qh3|xm^ z!N{UMsmHMgU3P-0N5k;K=udOVrMhkBv0Xd@pPR1pVd-V_9sl6;!s?}CjOLl374q?Q zYf=_n_Cjqg7_Xljmj9)23N-3)vF>4UQ6Vs}d&3=()1X%r0Vg+A%^N*bP_HC_&@|&8 zg7ZaN*~*^;6$-ZVN0fcs2uN{DFfxOn8?+qjZIjDKU?H!QW*UW*s50-a?ljsYq;QOI zWqO$aUJY?jY0#y7VGwcM#q^PY_61Asjep*Z!0PB6XDtkKRBM9u#z1%>`?NRvYkMZuQk&I`t z`w1h~@|kDDw-`7PP0+3^^*q0trsc&=*e^CO^UU zn!7kUlMq=Jnx~nX_8hz}=t3VO&7|RmQVe4djscrG7O5`FWu*&@!t#G0VaVfmJt7^g zD^f4&7xD(fI@%kAmXj<)97cfA0;rfTQDFp@89gEGgJBpSiS1XI=SH3r!AM?c8=(?Q z9pCHK#HZrEgDaikEx!9dXLu7|-A@HGfG*VAkN096R|zqesfD7^ZiIGWd5@r7)7~)M z1q=GA=ULyvdBp-L3p;dDIi#5hfrp}&C3?D=(XesF@tN1j!4G^r9|2rImwbuE*<}y? z6t9JJFA>Tztg~Tl5)#VFPIj9w&M3Epo4FaZS!&01;I0JLYvnCt1TMrx{nXL$*;G(a z+8IkFGirZKI6wGi$Vt^5Ja6Zh4Q1%}F6EOPQOKvPtwenF=}rhp$|nLq3kYEFNTty` z!+WewN(t&gH)}}wUHt7E5|H^TXr%!CA_!0CHA4~fr8$EUoP^-$J^0tu7IX~dBTPl` zTh=FVgFsbaaE~PPxBu>wm%n;J;YD|h19$o+-BMT3eE^2<{Ymd5Ow{3*ks~!?NCT-g z>i^nE_DAjjOgnHm%l|V3E|2yQ!|O==KYPKS+u|eqUrR-xE_YVEzKj2Vp4QSU9ufB` z{T=2L2;~JK+-Oik+EY~cf9;~~q7123uBdNd9aB$F55Uu9X5)rLJ*etZAQp&AFVl*} zNW8x&_r;%;&miYy-^I;qXnb7Y%#teZ>Fi4t|K(K=EnW=}y=w8hv#VTOOU?h@x9|dN zcAremsu^R54}^Qfi~B!87%@n1(6T4Op_Wf2UlvGmTERgKpXF;>@l_ zyHXFbyMQy6z!FrEZkQBe8S(x1VOXSpt80i~7&K}J<}Zcc9eHgj^-qSMr<$+z-{@-z z!?ka69ZakL|D*Np8>m@HQ7B3es@RO&LK#llW-ENS8FXrUFRBuS$S7Pq+=kZI-w6^k z(re3FG<^pRf3A5i5uo;~9LjYYkR?Ru{0vTB;4-Yw97$4t8o$c!$5hW2eJd8f5Pq`9d+g2Y8L z4>j|muZX>04bM+;^)qVojBVPfbkf;2KZ96n8?R=s}r}>aP(>fgU6@3!C z)gE!m%5a>OQz=wYGCsD)O3`rxaDfwI+F!g}P@am>oR2iJyFGoQuS>Eh!nH~$6aNqd zptny`x%2VG$>8AC2U*d3uy~Ps{JE-f;&WI_Q@1|r8QAPG$>8jL zNiNdlpwJDea&f=hhS$I56-9EFO|MG=FXO7kZwVMX)hg&d=J1i5isfO|tWMXeqI6}n zhx-v@Id6>w5McoO7?VAt`H*-Ez1&FW?I(W)3%Yn}%Krb)pK53U``+|Rlxt@XZZLgf z)op$vf4c;$_~Bq~Om2p#7qUJuaPqh8zKizzDuUg5@|BKkg;?7Cy<2O@`kKnKCn?o@ zot(hr$GsY%i10GTGH`YOZaNvU{RK|nD{b>N{Q{{q8?##N2rkN-b$hJ8&__#S%T-%i zDR5{b>RXozSWxcrP+WkO(e^9xQ_O*)!oXu!4&Uh44S1c<~~+-$L^Jh<~s zx=6}ZX5gz9*G(nWG5U||6+O7z9hu}@GpU67>)VKYr^&x!9aj%-$JKR49kueXhNerm z5FABK=x%=1_+Rs}KVGMN5vH#QsS)e!Eeze{wzb4g3)ca-Q(&i^1<8yO@pFsZPgiS@ z+&HbNyhVQ05BcHc-mjSaH!L=rNw=N*jhY;K3X5FsUTh0EfN(pDPJpsS^|_5+K}kjP z#+R3rd>|3*v>7T#HaggJ6zS&@Uqt+i+xPBkmyz(=lV;-RW_kzGhn;O$DA+{VTRUg! zR+lH}YxvHgG1|!En`PQK*W*aa&gwiHOd)zP>)szX7?ixRWCiek1{>~()Hn{x7Q?)T z({p+Z4e+-H1YJE?&F!UtB$w2%_J4oP3zS6Cd(Nf=TA5aj2%|-n)a5_6L?p4gV?-aU zNC1V?sOzlOffd>{J7cf0O!9hDhF&|hetvslQY$pGn?~-nOQ2Nd7zbTeptVYnA5O=_ zcbVusyL^B7c1_BD`mB%)bpn1YUWRA~V|BbsA{UeT&SwkFs^#M1Sv&qn(+W78&jPo? zWr2aGS=kVeCEomc25F9s;7gK2t~zL`*D1x#Zi zx9zF9#q+$Qf3A4gyE&X_QVtEcd9PAZ%8F=!WtqiKL?h(_NTC@xh_DoWZu*Ez^hEZ3 z{A%P%y*eo)OB$*LN14#$ifPiO9dfiNob*+?$de%Pv#qVa(SLAu`p>k;(p^M#(9lKb z@yHluI*@Y62X+q??}CfSKf5SL_+Zai3b>wJ@Y9e#RhWthnh|l@2|CDZ|EH&d-09%1 z_rKqr#(l8OR9f}&_uX(GP?F8VJJk+Q$r3?NO?zZY&A0dVn!nhaMHQ7duvuN*pfY7{Sr^ z&?sfC^c4EZYs$dK{Y2pB088Ssvb1?&X5&D}R(D%QUAOUIn8jqdb`^#T_!Q@B2aUcz zn^=o~_;0+_l>0|Lr{rdLOtIkG2B#AZwY;_Qyllmor+>UNe*Lc3YqS^I6>5F1B$=X) zERXSGpHwG|2w1d2?Fe}rtmgJ}yie7^lWndp_rzm{pg7w2n7Inw_ce;TLK`vuTAw6z z`9EUZ(6g|d5yR0ULu6#&2eMp~(!Ji4L>w%g-QuA#GI*>k`ykiqSzFV zhA~U(K?mvw!BQsffp23%qBewHRfQK_c*OY%&ff3U^TN;h=&oX4Xkc^!^8Qk94KxJY zUAcyCi+>yo2O^FC&Xo8TE?6b$?*A(QzDjK|oSSp?8anM<5UIu$RE$z5Au(^t=pR@6 zQsmLEVU2rfm17h`H#lJ4Z0F1;!u*`bx=s_7?fc!1ac>Z82A|UGAM9ZMY))m($cFYx z_VC6BB#On6J1D&T!J$h3p_a4RjLF;#9zT+4n`Arc`&-j0)Y`_Gn8;1X&`(Qt?r4j@ z2>t$dxm+uxQLdPiTDMrQXb58SmxhH3jUoH*LIg|j|9GSly&=;c^ZKpB!^r69=zz$m zkw?iKoSm||wXM6*Dlr0Nen<-4NC;DQRO}PKH1lY!++hG@U|FGyjf6Q#}(_1M|XIQ0|&?1%FZKnePVNYn55{pKJ@?7O_gm)*B)uZus-X-vE z*Eb`LAaxGtlsLeWP~VBOG)VOEb{VGXMh{d+lr7e?6cj)<-8vVaq7cucPw$4BP{~ez zKYRI>c~g>3#J`dZq#|6Br)YT8>C!*gA{>D#K_@%K`(Iy}$gEK>%6wv7cSkZzI0CFm zxC3G_^lk5kq;+53uraV_Mx}fjUcRclex&-#f)NsJs*4W8`1E3m15J`30O3*f)}9;* zc^~jutL5+LrjWJHJT5I{_Aa->Yz)1%(WQ~KiWO7+`NUo^T}6=x z)c8F8F>2h~c-RJRZugVjnRe-4E))k)2sOI_-nfj#v?!-P2qBpMWwp4~((wSd>d8Nfu z^8ARj#H(?m7T%Jup+|cPk<MK@Fi11g)K(-VPyno+W1GjdOuiI(DP&V`5#K+- zON-7{^a(VgxVrh05P>)hMM}zDQpMZ(-p{cKY0DbK`(m>+sLfZA&GKTX|s5A0k53$@vtc zt~#-W6U@E}iBr6jBSJ9ey+@&pzF`BPE-7zzpJN**BmBQbg4=(N3K$k=amnv3732M% z;wMgE{vo1=n$KgmPiSm3lfae6pR|kg`>_H{p6m{1x|QXTreqseWDewPS_ssO96MAjthQ>r(w0hP6zlD6NB8k5M=EH+Jwn zm$fW<)7fA?n=4S&@>OaATT606PBb&z6dxLta_8q~tMB#S zbVY}Yn;_^cdt>fEFpjB}2QHqE@shM3v_(WO+xbaIZsChoQh)N$Bv*H+addlox~F5; zC+<}2!SYp%lZAYg*O_e~mtBjb`?%$KkyDtfhByD&d;R6LkLsk2Rs~5qpIi=xue(St z9^*~49FgcMF&5)(f^l^=cM?V(BHMNG>fk@eEG)$MpHeSOl0sK)l?&DAVsBqdamQ{0TLgVX zm-46qW{VZ#KKtYLz$F*`32+C#r*3--mwT1|?jL~H55+G(n*6LK&zVZU>04Y{d`c?c zD(lbikTF_*)wT*OrN49zT6> z7$sKWnZ1_?bW+~Q*SNvqqU!bL;LllNVYlnj;R_-$BjfT*GZ*AW(0$ws`_XipuB_%` zsV1rK#-P_hsGRo|O~|!hd_uW93d9P&s~qjlD{*R-;HsB^SwDaVw=~BZFM}4f~?hgOt$BW zQcN6_^R7OVYh$Cg`d%Jl+CX=@SEiEJ_;Z5FYe;LjziBhpy62*ayw!29k4FE5xxU`Q z-2SGNWMqzV9%5KXgQ-+ZyRlB?mB$;<`+fnqG8jgy2g&{X<4n&%mdZ6s*#1uf>8OmB~7BarXUP68BU-tJf($A-?q@EwIb3Rm>-8^}*MNrH&eb zt^vkAhhlp9&NYF1=|g#}kI@a{$^VY)T(-imm_O`|Z*Nt6Q%WBxXjEC-Kzz=hG=hw~ zr3-uZ{oGi$1KCe}x2jv4Jk2%q-qw%kkc=B6lL&F#r;Wf0ihu}W>pvA{@ZH!iIIi`6 zR`x{)_;ez{Z)!u0)HY*X*8hENcNFlQBUcKJZ`=0qVw4`7FnjE=xU*!HO=y4Tmp0a4 zpzT*_IfLtT4GsR4843*O4{^a??f{?|PON{rTBH6YD?GBrKBDrZRXT1U*<~JT(#5~Z zjUfA_wND#c6^GB-z4zTn;NpGjxkAcM3a=bUzJa#uY-<0>h}a zdF9K_WcBy^e})8=n(s-P$h`tssp7L4XMD&vkLl6e8zRup*~me}1M=D?wN9oZ^>xV(wl z&+;x~Uo);YkUi^i;^hY&9E`-G`>gSq?j;3aB*vT16c$z-)}s~K1ndR`*2}vjfwA0B zh6a}-PpOWm2>W?%zcu;e4stb>16mAQ&{oyr*J4)^r`n9ZQZn^rurEiI;97}7YVWY; zOa`mroz0WjL|#YlHZ6EqpQR4;H0dhL@Uvhs4;7bP^O^Pjg*f6w0H!P*K4$BdhmqCK@@occ)t<1a<_9}V)vbGDwbhO!X1Defb zB?Apnb0wuRT~}fvZDDA$MD-Sn930})T72zf4P7rG{DxS6U{lPR`%nK#5M!?DjnV3q zvQ?Yhu`_ZQG8v0~z|{jc>=eFI%u~Zc9%CqYf2taKoy(-hK9TH_#p;QPb)@uV5slpy zzwwFI8SwpsZEqt5?NuBjf28#pS-N;0%$%*?;~YLAyj=EtWNr`48hxmVXVR+pM7$U{ zJ~uBP;iWJdHf7!?GsDb_or?DFoF? z768nAZ*9--D(W`7eM$DVWK|)>{+yjQwmp6M=r3x|VO=Nswep)4-YJFEScvWMQfv5i z8P(TXZAlvSpvee*do*>NMQ46I>@vgSRzN=#VztL9u2>49Kj$v4R>{^EIaOX^Gmt&` zE}+^sj+xwrbM;X zChQ|i%5Vj_3*xC_%&0XlH`@#MBsVsv!Zb)182ogH7;^MWjpwBZrL5FxZsBSDVCF>7 zotqomdxL_v1%;FtdO2d2bwfo{x_9y&h86J>qCRbcgMu%+`w`zhv?}q8gcsiUXds{s ziBxXhP=dTj19%8Guk5;DoJkX@S>;mj&*ulNu`?_$^G`apBN(JY3Am>2*81@esGrM2 zu*sL2^I~9z8WQJB*KL6x;%Y~#s1BW*W9%jh+et`x9Jnet0;R$F;SOa@$=qJJo`J#% zva8@fh&xB4kOHNmP>t9T7d6wIu1;S~kupII&Qq>ZWnSHI%Obsf7O@SU>`XF_2-=SC z?&+mD9<_h}VgWubG@_>`X~HGrUX?Ol7SqL79ZcZ@jp2rs7#IX`eETuW=E{z{2_@^%t% zKIfr*w3MGSxtCn^PoBVWE%{>b+MT??w0y=;yJ{*{O7(H3&e1kZuyXu!wZpv~SD!%W zl-t&SWAa^AOU>2<9LBgobuoNr3$X?;Q1`645nejZSAc%hDi#i?th&o@iDY| zgVZ=$nn{ruwr^hnSfhqR=A%&hOx2vu2d_qx=O+&3WOfw%VB<|Jvx6-8D~dU)qixQQ zpID5z8TV%_he-{tC>2_tHt6IAQPYusBH3|!Z+#MfE~eKq)ZSOhN#h9xL9@GrPW;?| z8+l?%S1x{{){_nkn9B?($_5?#x3~_bM;s-=GX-K~80m36phAGkt77fdH|~|Y>U}$@ z-V6(*jilu6zOS1?%aKCk5z1h@)SX0Adf(e)sqL8FWijCqMlCSYYmC!iV&vU+UF4AH zV<{J`tZL+G1TKB=J);Wo*QZgTJ66Y$k(BvA`~U zo8=nb`O%1|{>g;JlJh&%#j*SHB)ze2Avu@`l~%>5{FOsadVwk_E)7xpz~}93_QgYq z7OLs?@Jo29pA1E=TJ-j+&3q7(M`zvFiXQoqZG&`)_`St}XaL!@2o{a$7@k3lINSSYT$VXfl>rVaEm}Q3>F_xE zZ^9S();;)%C@H6&n|KYO&2LV%;T~F2ok{&&peD_i)Un}zoGetDYki^R-n}n9KRL&& zvd{I-nf}USzRhTIrQ#O!NGeJGmFYh=-JD50S5;M+)| z$T$jXyQu7j_27h`KcB;YlY$t4-P55K5t1pP;f@3aa1_4_`+OF4Ko-dJJEp+;%QDzu z$CsiJ;v%R1&1>Mxbs@>X6FWnEhGe57QdOD%IDmR1&i@f9!1|;_aq*|6?+ZmNV;;5M z;mG@s&o)aMf(< zXrgxQCn1CY3GN!)-95NN26xwB!5tFZ-5DS-XmEE3FzDd!gS!qo=*PRh^`3M3U;pdw z>RM}8)xNGf_cPprK$Cf;>~Tq^167l%oPKAQs5#&NII1PG!*72!pl;zn`I&jamgV_j zBH>nrT6OdC%>90^R7LCZaU`vkd4+A|98oo%%k;r&vy}w*(GF*ypR<)T@7&Y+Urqeb z)mcXl~Leo!URdy2qA_xr6u+$;`erp#_0gdNd{E6#MCH%FN(W_6o6yCgz<7S0=$t zk{qSGH>n8a7*QGx#fVg2dofWw3JMy9fk_hnjwq)2E6|G3;g0!h|}4za)epeeptlj%}MjgQeT{EU1`^xnhAeYZ0BO>5$_+YjhR^6IZ`?&aXD zP&*yrQ{t#=GTABa+#Lp1eS7;Yj`;LkOsX*0;YFx$hi@vX=~mYJ4vsd&ggGerpf6LV zv+hpf`xhy?7C>VQHfq|Z#Ps)s=L9z=yz!D}9M#9xID{7hm@6e%+78?|E{};ICAy;$ z(Y^}vOa3MO)=XgODri}dA6tJlmEDdzyohTx|7KOS?oR%TQ$VM)~osWbWbMyr6Q3pAzRsi|aO z*?VLZFOjsFDFOM2d-3bDS>O+UZBE|_Q54i17mu6f)iIse0>?`N_5FhHPvTa2O(r*= zENrS-y}TlcOaU%U`~l{}OAo!`nSdR6o(-{^HQdR+`zL+~KaL z&N;Nt7M||lhsi)z&@x!PRBJ4r_NCU)Rm@X5$O3o1l1?RdczMK8c}mU6pDWN&a3ZW;dv)^5uNVbq)_UQ`qvv6{5Mvq4 zz?`emTG}G_7rO`)yH}`T5#l6@!cY3q8LwZ3H0yjZ&NpNm-)nU}UdEgjdR%{G!S_%p zw4OlIC|i%eg{Vw+{raA|^{%z0tpkT$WxT3)|C8z7iHrkaNns!V+vyLuK&!u4*e|7) z1K`kJ4vLefb)wT3eg&un$2QA|QS#Pr97dy$-G0)C+M>iuBPoO14=j|eqqBxn+@%T8 z5uaFgnJjj~myS=Zm3r97YJ=tCxrU9D)8gxyx@f3nm0?0Mn`y0Imx4VxjBymqvsT^g zWLc|G_8e`5*IJ77Z3tN#OkzNz@0yxJsJ#yP6XH< zI6&6qg|?4bI+WWCfNo)=uFQe$eGXxf#&~rK`4%e%*}FE&)U{W7HE!8{FyqU=1&HLm zylT<=EUbR*h!2(+UD{DM&Ek%!)PCQ8>bRIp3q>#vLBEiZFNU@I0y@@`Qqr2}SK$GD zM0IqzRxb;ZL+UN>`N)xxvzr`7-L5uPXE;5ew)5`*A;jM8=-PphAZ@M#NPluXvG*%VYU>YZ9@{+yIpy(8G;7TUp++LtDzNATm^>;nQ&T^DHzp`6X3?K+GDM=VpDB>Xk;NFSCDk^F z=Z*USfF?NGSb6&c0N@`$=XyG${Ztf1uMbv# z>`r+2^a}d}p{d%I#ZoK2C`-^zO`v{KiVfDs`NVznb4+r-9Ls2Y4$paX{&@nq;HN5T z6zj|k6T4lG;bWDgLtZ9{E5kTP#mJ6+1$2=uQAXzgvxi3QDCDh&Qz*EbhKMHjsTxGV zKpk3xf5_$Q8=;UXS3krhA9ila%#`)g(ZkwyX^1^UYg`!N;g-B;ZJoz5$md|gp z6S9Sbmi-B5#mmbdzsl*@B>HeJU$7GQ?rXlgkp-~jv#^&I*(O!DP}ZbregB*jxK)x?FzI=D${qWdBF3mALP4C%tE0o}htA z0q}aD4VSeExqxkW+m!0iiT$l(nX^6Rs)HyxJ3&(>u(xkCZ0dFvJmIomv z8DYnL_QYG4U3JPnofT|D5z4h8=Fm^MtU>bR=ohgbgOO*5S&O2-Kc4&xJ0>T~0&|UM z)lqR-DS`gHe6nlGZLXY*@MH4Rg}E*WF8X*WWQHdzxfD8bu$|mhFBzAM#OsCz)gHL+b3-)bOI}+z#Z4d_2oa?ek)u$i{^1bO8WIsd8Qi+qplC;~%5> z^ZXHhpRhe%ZX<<=@elS&qh^Zu(%9;w6)OnpZ_5<4&|&2a?W<6xirujFTDQ9^v0!TkD-RMR{|0Xjp=5Ur%9CyqBpW+XfgV%{3 zb7l@xeLzyn7hapPk_A-!?c1_=EWn9r7PbR{zu4s5uR)o8Vj%D4-BpJMs6a`YU3grd>1uPYMYAHYXlU zDC&;mqt1<7AWS52&b58vN*nVS1en277rvy-Zpx)ztp2<<60N2}f`7KMHd!LXM$`1JSTWjW)#wCiP+DK*sLwC;Ip@YT= zQ1F79^xW<@LFa7>rZw_ItlximK;M~}5H+7Y*i3<(R?hB>-J-|rHg@1}n2A!b##I!R zZ=IW1Om4*AE1mE?)O%Q5xv7P8#MGvBtWMZ~slh#VxEY=V!Q%1V%{c5tZ*7DwH*px! zV%Sp(kT9<_?K5Ew(FQnAPcD}CLSd~6`GK|m1^%azwDkL6eYt?&@QaK0WJTp6Ct_e` zU}AE1XXS(nk>>Oi&+-sbCIsoOO&*K)m0vYWL@rl^Xf z-mdi3*+mHa^M{{8h6om^k|<1vpDiu*LH?SCb&Q?Fi-D0>gM)+WH9y>0Bixo- z#$a6evn<()1~Xh$V##;^n5CvgrQJ4mB!c*>p6wDA*ijQfJP|x9hj8aHbbCkjEa~(= zUX4WeLJ#aeF9sC^9{g-vr%}foq9S&jBPu2Q>{kR(w5z33e}pbIc%|0Gv_JBvZK$l> zim>PE|MLb2q*oYtM5vMDfu##+7}r^KLT=cjh3S#1>xb-A0ixLbuA^G)bolY4>S>uy zWZNn=hxoVq@oHnTIu|>>aNY=I?aqiK#D85IxIO@nUTHxpTp?OsoPxfKG?wr{9NRt~ zJINgtjYLH`c9= zb%rx-&y#->YR8nsGr}*XW7*u){*+9NNNzfld3@luB@peKa^i{e$aJ0w5+{-Lz_O9t zbG0Pa_0|~qEya7X_?$jO#~C|bMZ-X7l5ZCN;zv2nw{^u~wX~B9 zsrAR@-oozNEETOz14KSD`KEoPy|Y!gb2Kc2{-oEGnJ9Mqju-Iog55|&u{Zr@ENX6+DMC%YExQr)qc3QPZwVH0xR{Qh zU-5I4G2{p~Z`4D)`PnNYJMupiDWG9rnhZ=M8UWXH4V<)z_?(7cS_&$%7LqqB^=FC{ zt%-PT`f`a)TOK}ao||%|=xK|+_qVSs(UMiAkh!_Ha2&3yDl46?2=-FRDVx8bB8%AC zNvGv;jN?T(Iyj??si8Lum^*+@DuApU;4TA3k31diLsexi)=iBTq0&;dha1S2Au5Ej ztnGHmfkmaOzOeWBPOFJso1U1r8U)6uDl)QBd+?j8j&(eTJsCf-a)CZ#o&v>Y*6XJu zvh3zK?Ri3FOeONwG*MDwcCjuL)CZj6htk%<6|T5>i4B$2N1#&K+QsmE`ou`c^dD(o zK(Wvcrj$yfH@a?ghI8 zu-}W4452&Zl&yAPE9>7D4IETz;7ZI+31MWOa>tQTLPv%!NKW+T^QPAHqUz>Ps$|jDFb31VSS~hkp2&!R1C=M8HGHpD( zocfes8@*}H9ofeN^6kf;b(+tu-X{mdCC6kt5%~cfIJNP0QVqp!i)35T1+uG%ucSCC z7b`&YvN@%5KN?_1BJ}3}4O;mrO|U9w5E?~!uc4?nKs~wLmn5E>a>}NiIFhZ{zBW2J z&X4^Vly%UXDl<1E3%LIRD)&nGJ4MYX;HS8q_PpeCiFsIO0sa~iT^@)LaNC7W3hYF_ zm`$wi(ROnemME`UBW$^+kCO@SJ|Pf7^d25Gfh=~1PdAj9j&J{r3+w-6y7?#KCt(qN zAG?KF*t)m4eG*P$FKs&tAen^inr}OaktcuOdZy9ZQ?S8ld{NS|Vy%M=&H$2L?D|Tc zD9?qv1H1R(KA+4{snlk-+($754Q~7U6wo6W64vZ+FL7FYkHb%x%0s|Ln(BgIL~gqNY?3j6Xga2U-$0kQ zh|E8W+j=9$VQ0daNR~ov?MXel&dRq-51)McUNAa%XX8p-;4Mdi1ytf7p2v#)?yOhF zHb-vTsa#l}G^P;kx;~R}v;MuhFE-oXG}rxD3l(UZ8)jFjZL(E`h?CQ3?e+O zNmuH1y)+iMddOk+h-_9h%Qu%dBUTE{;w%RZ_LMyW0KmcdS}bZ%;)t<|$`dim)|+TWyO+ZT8lV zky#Y}LNE{BIXzr-%>=08;59}*>Efyd64bDKX+wFcS zi1pWL`j~?3WG&mug`tICE=9s&ixamBVv$1;I?mO=evumJooB|IYY{e9cM~ENF_Kb~ zt*Wzgc;=3li?z3aqNt23Bzn7+09XoCG;eLu)bC{ZKB z;Kb4bb=?K`Egr0^kM`C!x=y2U<4w(cSb#IiEi7kDZ&{|13YL#+%p)4yM77=JMq&IB z!Ys`^gIJgjy$4&xU~@XKG^#A+2#}uYjA0}~Dh=@p;&&l91xQp-YHlBbV$pOc42yAE zNH#qzo=LjA%o0iIauIoTU8x^U+-*^Q4Wg~=*)9uQ5f#uEk#MSJxK_3_V7uauoP&F zI#%*V-7*WkcXJUBt7jU-hj9C7I}0Nvl8SQ!%1@P?m{U)LghlM)h4Q1>xCr={109vSs>YgR-R-vg#3xcK?E_I}v4)I`9r zS*DKDuYC8Qpr=ks7*=d}g-L(KL?Fer=DI@@nP5-WT6k)_TcPQkU84e`EDCI~ z#j8J~JC;CuYqB4DLO4BL8{q!lc!2qpi}|TTXkD33o$m3t7j9^F6>+=zS2%LL2>MI` zdbO*_=Q~)c=h|FuknpqE+>WFgdg5BUv2I~w^c09&qg44sn$Nthm!fD9&sdj8sqjgL zAtS|KTEI4KAltIl_}oWzcg=D{){tS<^`qr<7i%%p+QMdXStNYP@1ljWt&s?c=Cj)E zC%Wwcb9L^mr`&TnG*!kFDyGw8%^r0vlXbv}>0|up;_tQ5nD$dM`t!L;*47cI!h)ZaXqA(44%lQ4@R{6T}roCb-BLN z`{EV(O5vv7#q!sO)_MjD&`ZI`7NyLR#K@jV-6T@)3Eg&FoD1Fm&^5mHP+Vzhyr7gPq27vwx)oozeE7%>JM*4 zx%>e6-zSmMAcNgk1eiGq90hjzp*5y`c9Z#$M+*QC{Dnh2B>~J{mvQ}MLFnu@xnUnq zt_AQmj#O1r`vBKJawZ8qPayrTLzOckbd!ywrmi8aIsfH}=m7)>}UcI?TzP+{O|L^q* zd7=@onmS0Kn6R9naB*osw|zkkA!w$S!onhBl4`{R)nhMO%#ssR%|Db57e)SvdsYl%TM!TP57}axlJk5T3aBplK#kIE!RgFtv z2t}ytC{a`Ef#a-La|Bg&3LF;ILG|TzIpO8ei-Ve?El^w8puLDeqdS zsbujuNL*^{AFjd_d);Jq2~_Ir2!5~2j|v_2v*KZGB})nNDCjvHI%BU4qXd7HrNiIt zICErOR4x0zgHTO%bCef%IBC<+a$iiVn!B1p56$|`LYmol{n;@~j@EBB5$$w^-D2S5 zwT!iN%8J<#=@3u=q3f)QAT+{A$REQ&$gL1wa~VVag862jd$TS?2L6o5Hy#a5FCb|U zL@2A@p*7BZ-$1mO6A_*5g;BN(UNs$Ehhw0tQps8eGVhT`DEw9t$iumP0GkX1&gN>3 z`P5wB`*(Bz1v>5(^_tJ6u2k}_zRH85{?E^n`uY)Kd}1l>VNo@AIH{Z5@+chRmZ?_j zW8pdO#cKlF;V2ZmVd+aV>X{mz=loK8@??u(%I^XX&mR>bA49mWv zDk8$)d_yM@OZanlj{k4ntw~fo4J$_)YWYF|gIcV?@3>W=+UVqFDvl^uVd2JXb+h$9 z$>~Ks2WFOYrR%G5E59?hv+7|GRj;3~1btROiwm%B%nwbnavqL;-T%X3YP?9lOv~n= z=_&Oz>vVgtpwfP}dg(OtGn&Yz5ptX7z zlbc0AX!4@=%kC!bAl3V~T%P%=`TU89>K{c)I!ED<6*>V@vIzA>X*|E~7$Guo3lEPp zT6DhkxRv`JDW zB+M^ouJdS)15q=H7NcZC+mD_R5k8|`pb|Np#&_kVAE=|Q!0jIZ?Otf3xl6XtN+uo@ zOS;P*$Fml{Z|Ca>w!pPu*{Mi{{%`+_kxB1D_f+pBSrMycjwLrGbmbx3znZ?2%k>nIg>9gb~}7N_01nmz!+*Ci{hU z#fQKD5zKVK|D&L#x`q3$8mJr*h$^a!nluKDcrD#zeEa?gCD?QxsqxMFWnKCC38 zMsRs)>63F(l2S;BtjpsRb`{ij=%yVV3^mRKw`HS~T^@L|*E(M+Kz>Dyyds&6y(!gn zk#S#6?~2)LbKX!P6|;g!d{fL-gNGNCp(=)t|qNk75t`(lm)#o_X)(Y*6_wc${%>j39?p zJ}Q3DelFrPMj`easP+?P~Dey=|D4o%&$B$b|G0mcMxeiff!{(_D? z2Kvm`@sbZg5b=nRMOAKy`O0*dQoMNa;14?i{6}Jog$T3Af!wY@!LU_I#<$p;+>t*r zZ;TjrWTZT>Js{j1zv|*bmpzg;ISCqgRhi8Ew~ptZcyx9-ws*b7AE_>b4{)CqzV86< zzzF|8$^u9IS2QlOqa!i4p;ser0-(}K1`krn z-!=N2W$}okKpmRb=%?+VRWnL}FjMfEwv3`C0FD$95oy|&3px=EkkN1p<-p}}&E~*O zHN4c0I)h5#IK#h0p5XDs1~O(Xlzv-RBHTH9dsjsCtz;XI%Xi_D<|m3DoRYf(&t4kP zltzyxez}#sITAJ24J9Zkbz8UplN~pt7`9MbPkPaXCJH!Uu>4J@vTNhMO+BZjDz22t zuGIh~iW)8Tf2nO0rpx-{WyQ75s$*-3qkZde_4=9r;hWI(iNlh%aiQ8?!Gzm75<-F zl%8ZFRKXa^%OMylIbFfVKf1eLfr-saG;ukC%3s^WfQZU&4904+-1^BBwz@>rd1B)- z!Dbd?cq{*zxYWf;UxdjM7}@&uQG!}L_TL=_KV96w8uE50k_iIxT+z*tubu1PP$So) zNn7FRqCFOce2K+VE(2s9jDu5qW7r*gm#(|xeua2|7~LZl@kI5R`O5ElgKlrsSNo-( zK9COb$7|00^K4|8dm|g%PD-q8C@py3%j*h@0AwF)@0^aq-w16b-X`fEUP2CXs2$L!+cst)8 zXqsw2y`~C6T{o4k$lLoHhrB3C`w5GNFud2R_yYvwcZ>m!BvRfm_JgD51XM|hY;moA^vjZOwSTl$yUrwVVcYS`coWX6kQ<9+)r z9^1Tewsl)Kc!<8IC6&5(so5}r^=McPts8`pdb6gx+a7c$|WaGWA4=7ZF zLMdNyi&aTw!wF>!=P8vpz)*zRu&ceBnf}8!w z&qlGq?Po3J zP+(SPi{%jhVqtvsxN5kTF5|zj9Qf=`5@9|ULCa0pm~~+6t4QP<{;}xzV)5l_!VFDR zzQhrf0&na)g7xn`jy#=T{)BS>@OX;aXt6&?{j#t`M;{ew={aUkE?M`)2#uTaJ~i+1?C$3V)8= zxP;GXl=5X9>`aUY1cxNhbws4q4tC2@VrOYvuk9j*bb5iotg$+-GkDS$o|iUI`;RKi zg`?>7`f1OvtLD#nTN|0tz&5`xKFPkkTJnSTGt+PbAn$M#friw&DH=s{o`gMakaJ3yq3XHw}BX#?2i!5)ist8lAtA0)d$K~4Y(D3z(0|TgWGh);`zIfN z2zmO`zr>j-zwg4tk@2dv_UG=oxq5>IxUv_+>LLH(i-?V9NOa9V({ETx<0r&R==z6# zZST!Mb`@v{MAr{7Wl0A>PMm1#%_lHDa$Dusdl8+{L`O<5ue`GgH!oXF>Qcsnvt9p_ zMzs((_*`!t@TL|M@;=K7UlnIHSnCLJ;FI8Qyg{0`Z&A)gK}?L5Uua^s9FMv=S#kYU zg7$kyS5v1>%VwlZ;G3w6DGQdY_F{&q$wz~5?0Xo}1+ znpKczvwlb+w1;-af69Arap$`8aEnO7p-~_?HcCy)ul`rc zD6#2-77MT^OSyfK?t{cmry?+3Mf!}pNoO`Ty1OT#>{D)-*git_AT|5O(Tuj)lLN*| z%Er!~Krl zFf{+jhJw$&5K1c)>q{Vm{gP*FIlhWHy+-=qR)23FD}?R+3X_RQ{T)_Td(Wsnc}Qrh z#^VDSQUFk*r?=n62*iv$Zq(a-z~5*~=9=!bF?7Q}f;0YOWpfx=6tim^oZm@;#*xIe zN#aY^lBjuaBEeQ~Gsc6mb7Q`QF1GcRvEDV^u=snbUkmDK>eA*XP;u2)8S9PB!*Y^N zpWmb2C>sU1{VzSHX=HvfFZR98-AL5bw6%W6M!BJ3rjy5|fHrz}NZ_yL@Hg$c?5ZJf zIED9SZL=ruI_v!zjF2)vapWk9QKFQrU21Ga9E#i{w@Fmqo5=nV$(+cEm zv1E>P$H;*CNdm)n!_jIiw`Jxl*M@ej@p6szR2T3JCwFXBQcp}995_e}!wL#-FN<~H zj48wWV>Lwm{KwxD;&K>k|41vRK_lqAUhR+ENh6JWqEeU=qJ|wHH7wjBW7*tTAEzW1 zb07_WC$T2biKYu=R78J#k9Mt|n_UZaWxpE!cSs`W7P3!ky}98(1Y|)sa(vPFyYP#V z+{zrD5H-qwEdQ2r)5=vu7p%2Ld3b5M+-M7-I#-+hn-J?@+`OC3Rn>5~m=$7Z%=z<@ z@KL}B)8oMRmey(;BJS_q@SvZ&l761G9_|6n{UaV-EOkmI4drQ$4D^bq$`O>TdeC?S zyUVqnQyhxWX9?X_mj#1|?Z%^N*laFLy_uJOOf>}1Y#9sFP_KU*j%u`B$>*{(7zeZu zGGDNX)3S*OC~Eu(0Ks&ePPU>Ck5kOi{u;$F4HUSY=)^gNdgd5~I48B?qB@_#0G6+J$Z(GF*vI%(?XUnNBMoK%1_*Sj30g7( z^y(_f)7BL#O7;MC-vDJHamsi)eg1KSR!d`;_B~vnXxQW1!+!ts%FJuYV}s2~kdT-^ z7~E$nQRun9-AOCh=pfy{`msvbYvg7O%I?4Ip3hjV)@5MFsbQ;J#;tlVWlm4A#jl9u zX0b7X)POVC`n)Y0BZl#rZ(*|Z{7%DhE_38Cce3i4Ze+<toY}1k7V$=v@B7B8_-@Cj{dMFc@dHpg*9pVE!6lWrp7KH4(ZA^m* zU{D}gY!P}nzT=bHZS-~hqDD1YIIs1+{V*N&YA9% zFNgelgibr}G3=5sBz77MUs6y%mV5!7miDKVu0{Q8hfZG~n-{WuCm}Z_9+|C@y%~YG z)|q|E**R-0_c;_~oM0+%F>A zN9g*jOMtU=$G%l;EfVO*Rk#Qy?O#*ahRJNbSlLD0{4KG8}!D?zLimA1CZ zsal@CYQisOLd-B4betFXyW_w%gKT> zX)JO+ot6pLjJ;%9Uym~U*vbQrm|X(M^{;j ziO*~t`|$?i{20!b8K|>})iZubB|!G1Hy&7$m>-Fr+lApuG>rs*i;5w0(_<-4@9JaT zQ{EX%``w|-HJmQf9X*{vbz54{zCh5 zAH#tym@MEBFyIG>b{d?Z>ZzczizREQ()smAV}gKZzYwG0=EChZUmQ}$Ovbkm5T{*{ z*%|cLuze$;n6s5+;_B2x*9(!%_F%SAh;YWreB+lMb5@-kKeGs7xku5D-)<>C)(~EO zj|DKo{dcq|MoDunE-rTVMlgY6f>El(yHw^?NlGNkAG?2jU6q{RIJv5Ri}ilb=RvM^ zi|oRYz-moVXLZ%5S>Cs_hMoKRFR7&HzQc~j*$Kkc5sf~xciz9$9|>~^SEJUa)oZL8 zO7#!-x~0z8PoMa?uqAV}S_H4qx7%$w$5!JGmyu#%+08v;eOo~HGk>;KNE!>bKb${y z>xLh3&`i^dq2n?hv6#-vm46l)tc>pppmpG+$V<%cldq>)Q!n-S8l)}R)pd?x{Ds9XL~JvZ9oUrN~~5eP`ui z<^=tjZ^x9Pi)jQ}z40GrTYoMHA(v!^em?vxp~04KG%;R?xnDNdiI~2pWVys=jBR|1 zs)whdSX*q!KzIOJ<%?FulZis{oIkO>aCQMtm1=K2sQb2WrE{PYP9sg#xS|JnGHZ=@ zo2|b3=8DlH>^ost8v^n$xxW?p0TWX=@w$*uDSjdE_h&hS7&a@%s- zG{BQ{N=VpZMdjNa&&fVbKebeA_tdX&BP|+mSV0}}E1TfKzt6Uj^4ydDCaAZ}__!=s z8BKc}ImCGV6+CJs$8~J~wl78Bkta$xz?UxGF?bZ}+2TEQY^jOQZkJtsZeP zs7U+A2X;LN3gJ1d)pCy#OO=HM)7vgW-ewSd)9*j?Fdj;G6Bz|uNYH%NKhN!f#C#Qf z*ggN1c=8_DDSHsJy&UkVbN~)2kJRG@3>(p!rsQ{|OT9q!@-vRT z{4T`G5>osvQ8)%n?eYIn?|x`iD;#C3PjxuYU+t1{_ijnk)Iup{3;n4>|~jescQRERWo30P@lw451_C$Ky_Z~8s`<%Od1Y_y4V z3U#yF@cg@S-+vGX>iDxY+C8|ml}h%IwmB`fQ4P-=tm6eYUi~Pjfs9w*wpRBF!0U5M z7F`;H0&d;SyI?PW0dqv5Za;j*>Y5Jt?*US>4(rLFc zPh;NNx0 zx_culirzza;C|P3Q!Y45+!-G~sIpTZPnT{(5J6e=<@MIq~KFge|v^-9oTLwQ!t50L#~Aas(kddo5ZmruUw!%Nf! zyS`F420?eI%pz&5@GbNg1M`R|U4mhOPb-z!Wr`&&!&F+jQb9*(xUAZb4K*KaSIeH1 z$drlGF>v2R2YQPmc`$xjjyy1E5WOYPhYOol#pHUif9JX9#WeNVmz!#a%lS31*S&l1<_pPX?p$ehKKTHQ?qL3X7e(il|=sv#ft_zKw3w6#uw zQ*#OWyNs;IJfUsucF7kg>6`UCnZ|=%wa2pvdg@C*sW<`IsvhkI#`qPkHalxSiuEx4 z3xF0*`gyPH_}8Zr*Zb!`b=%X_Q>X9$f;Eia18s#o>-eboNFiM>5@t3+|NYngA}=Mb z0ca0aQQbN1^WzE-7F$I#xeIeH2=YfSx1NMJ+4{X#!+sdmQb|r^v5f?5QWJD|cY?UB zA3T^LPv=@3uHli@VvJVCFZ*&2RGI7J)&BpgNE9j_eHHr2_lLUdc7`&DB!|fgyPH!_ zSN5=yDp{7mf&y6{b%trU?v(&YnR_4ov=y(vjIt?s(y@>uoT7Uq5##}R_ef3a9IQm! zeu|SRN2mXaIK3`|YP@-nt_6RleLv&vygmKpv06I>NjAbd_o=oxx8clawafWSeR4dO z0)67$_qem?jbSQBGNV2zfQlIT6*f(q8&%&#m*Kct2dgog810i1zdMQcl;;Vpney8@ z?U@CeF2?)_UE7AQ4(W0tud@!_!+z~C>7#&BTEbOThn(|sQ?$OPG%f}i0;F3M_41M|JbpX3hpqvv~Ghj~>N?cnY6Csct;lue@0 zA{#85=(+y$OTk-_?*S;Agz?%{(-s&K0rwYx7`V&lV_t<4*8+o*c(~c9 zPS=AECj!w57d& z$ckh;j2mQWBqP2bP#D*G)?JP#Osibg zhl0Rj8NJd-d1i_;Cy%SspLdT%B&528ZVI+d{u_ccH@sh!zke}t?=nh2tCXvBD)9nF zrbw|zD)dU{9pGgTzPDFM7Z_*$;(?ej#IoE`mz|E}5G_RRYR*vqp9!g8`oQjirV?cA619EL=cXYeI5+V0@*Wp<6%aZl%V3XE=y>soEk_=#jsRb<#!lc zJ>ytTY#jWOP6i$Z*}zP(Dzp5hPRV|Dr#n(B+5C)IQ79J04p*HzFm&cJDt`R+?)qpc`OHx8^0LFwCdTOA zcjXvPL|S$dTdlJA&QdI$Yhv+rG_( z#^*-d2b0N*tDQQt^N~jmZ8OcPPDisR;3B#9qLlxSs<(`aqwC(h?}Pve?(XjH8r)qP zX&|^;<9_4PxH|!YyE`Pf6WqOVZQL2&ng27-y!EA4ovO80o$@++U)RsGr0;e{eRTdp z@!j9RTJ(&aP#Xo8qLV}T*xG8N88Hb5XuebLxXjy(-u2X2^8V-h-J~6>`@+_4F0kv~ zc&0P55`QJgLD*-y&Oo20QqaHTb8604)~RqCzZsE~`)sPBy5~RAWlkkeVlqLEW{eYK+ zwxa#Wfx&8o&uY3s*%Mo#v!NoKM`!lgpyWkRO&a0(+lHdeJNdfLec{j|AfwBo)Be>b zq_Pn*o~*rsS|qy646ky@M1|C4Sb`_@2xu-R5%9@Cs!O%H}=&|Sih&+{FBRu$_=_asn6#kWlr_HGRIOR(A3X5go+&kF$33U6CS(> zYyp}Q7+jOBM~Siq*N6gyDAUydBe?OU2abg~;gpMt-B$0Nf`&`6o{LhnmS{L)pXm-u z54{^A1;ysUaqFB^<(L(YALB@slVwgR42<|Cnr2`T#iC4myrmv^Ex}6T{lSZbd5oc6 z7`nU_umI_jq5d;|khOkCq`E)u2L0%oF}G9MJ-0d0{&f8-8ILg2aQTSa;X-*5hVpEq z8lwBg*Ma$2Tvl3r!+8O)t$Tytk7{RE$`rt;hXtCi1F|Xa=E2)O`-|r`$;PKoCPp1P zY^^&dF-Kr zai=Ae?PL0j9{Y{sAHP+WIOty;^3Yr;yyMztSIE$i1S1mUxr{g9{lA zt3@>?{8MxV>u_FI-O-vG&~ZUA+Z7C-sE*b{k&|iXc29QY3u-YCabiv8hjDJs*Rwv{ z+(F0Pp5+^R*1(yxEAxt_*n3=6k@n=pXPyirZS5uk3n7$)Y%~{d@=^1ETX@@tkVSrVcPJro?g6|0bsaQS_Z`PrEhJ-kdU~f0+`SwHafGOKZ8^9wkf4yh)?x&DGH$ zk9m=pZrPY3FRfLj>CVr3+Tts>h@o^O(g%jP6)tZM!`xy{hh$K2m+9QGh*dlBU;!)B z6=Sba#$yHPLvk3UUp|!{tdX=b)9&Kv?dmwea?tEMpN}NblQVWkA9J)+$orwRF#COT z3vqbC)~EEWW>ht2ch-%c}1^GZLlSMU)GS+y;a`(-;gkiYF-|>MDDo!~jv&@|4qs)UT42*6h zIEI3UM~(hBM~QXFHPm??Gs|i~H&US?!XCpJ#FL1|iqu-zfKg2s8Tpl(=1+8Z9$FDd zfgeN<7ySfqt7$EDf_5hTCCHZiRCl|IPeM@H&!Fe#@Zeo+#h_Y?fk9Mh<{g}cdhQMr zO&yE-N9{0LJRPAg5sOgS(-lLSJYp~HVF%Jr{jDp3sE?j)Kneqg`6^QyToTu^DtHtbhe9h)^;e4zA%|aWO-6sr)77)KbXZs1hRv>izj_G?~N&^ulOe+(jE75je#<^pF9nsAoo^=%Evn1HbJL zCf&GBU2g5L)qoYwaB7A+ENFZ8NLf5lj=k7NC7Y6iN75IH@0;e6MowKJsyvC#>`dyDx=Cb!jg`ofJv}U{047bJyO1Iuvyu( z-wN6MBHkB=j?-)Sh0%*Q zB?&tTt$_Zzjj9bvfX^G@j~yeYG5nCKWjW<@0Kvmdf(+Pout>I~AA?lc>DM=06-RPc zqGWqWc!qYBS{dC33>$-sqsFE-3Y0)L8mg9xs8GO{8tu`Uh$1_itQtT$2WcgoD}A z+8EzDmSkvnge^QPxj#fJ19Mj{ak09E!JYdNC|8#dGW7Mizy<5b0~f(qFlDuBf9R~i zf12W5CP9fHG;VXpPN$NhIYsqsl2#$Q)*{wCULcZLx{M^p@%cX}aY91pNiZ`>D2 zDX!`AfuA7*)K@!FA+7R^u@1eK%VRSNNQLW~ zpi`eeTT++T+X$msC~UlvgqMOXr;066lHvB-{!kAa9tV5?hNa0v?r zC0Chm(nCkLgyI#mQj@xrl~zN6-$chyL>Z%&*qh_!(3iH+tcSM-9v#BTU-p3j;&=GG zm%v=Y%1XTX!EVXDO|!o4!pcpLkn~p1J?_HO!BGPUG^Ag$Aapn3HB;8~$p=m=%x@Si zY~1?u(M)L=$M^nsEcBM6rDk^YSY393VvFIqNXT<<#=_r| zM#s%WJW~sD@fmir(M8B3i~wk2YjCZUKaG6vjU4*O$pVggT`R%PSZk>C8!_7Tw)@-` zx7HYXHiDD1Ne7SMuEqkLTkTcvRccnHGdEIGwt@Gq6)_T6m3|k1`fk)SW7Agsoby=# zJ@-g4^<}yJT)5f8@)72G?fUND-v%1`^r2rX3i%>GZO?`0ltOOX>(O6)NOS*D>w+Ye z6mV@hCOPCi554o%`sTB!3j5d-^8fL4WX$sFpOtegpA(Ws7tgL>#H2L8Qrh^KUax+Z zYzEu*?>iI#A(Pp;a4GVy7m?1`DLudQBXsnPe1~%mJ+n&RkOQFv^+eQ^mQsN>_>hra zVA*un8M~(Dn@qxHqn)6uJe2g$Hu^A&i+Oc(q*L2~O(DQ&5V_lwD1X)T;!u%($Wmvc3KE* z_I)R*2jbmu^zR*Pws);YXBU4&g#CzE`ae_WH++fnOZ}SE|B5Fx-*n9afd3Ige9Yg` z%gO#9ghO0>9rXX#fch9fKO9ie;PwBMOd~E|&lq7qK*M^$g_N}u*I>hI zj6zdQvNE<;0(E2_B@RIg0722hSw){U3V>12rTA4l{g&LAES`FY2_A=V+MkQvM>;5c zZ6P0?wyq@7wqCn5|LxT~2IzO8D6Jf~9v5^fL*&kOr;{^@5r6_TCB5Y1$n{B^bmrv} zi!g9@%K1b~ODRoDyH^v;mtQzt+GsXr9_vjW)kGkE4urg{vyl(qnzZS#HalaS+?wQ^ z`J&(v*^fcYxDM^cU_bO4`5veZXRdgU*L##X9!Q9TQ`?b)KZ&NMyQ_jrzw;5?@I^4j z#(@EbD8qlTyTnKU*_>X2KAAbuv7_AoIZGb}(JngE{{?4otm3|jpa{sAR99OrNEu1r zS^b-q#fX26O*O0~u{8VRrG9^4(?I3$_I2E-DT^>|(&=T6m;-lg{B5tI)$Ja~$K!%( zDL(hqS||d+Kgvawr0yM4`=vE*Xi=r%`O>-ZQ`@(zzlAM>b(Xsb?!+P!MGYlwB*tWx z(gBq?V2Z}V-0TB+NrKEp7O^MSx9pWS%2X!q%NU{Y{UkNWR6^KCTB7#V6)E((wch9T z8z`;f`@a>zOYZn5?%5FC0>tHpFBo2KqKMiTJL4G@d?m_pHDECmp@+2iLKS=|>b@Ur zOKJb@`R`oQw09t4+q})-h$y^&9YCks0#Su>hdrz65XpjtRQUJ0EOH3YjWHeDROZN({-iuugq``$-W zsjLiKe}wTde3&k^Hs#PcciHNNq1N2fdTvT@NdKtK4H0Rb#I#3yoN32|o(j;i3ajfu zObypm_iyivBi!JGQSV=W?`N@a*{g-?ukO3-y-B1pt%?U`R+Slby6*6 ze=rXdvQI_idwu;_(ltW(1j3+B4hVejorf48%6*>*Q9AHGykhp!($SIEzP(J$!`1y7p;)D)Ubi4 zOh{-Xi8f2NRk2f;{WHGB)lRQ+u`Lb@`v&#=UWJ8CuoGH1&meZEu(E1O_< zMJLwcA6%Br9K_t=kiV!fUGaxPvcs?jpjVX=A7^I3DA_V%Hb_BJF^DsigHbVHrtip8 zI6bQE#JPiZ7?RGT;QSKyfDWer)bn}%5waVIb%SI)lyGeVFViNic78>qR~InKY29zE zxTAy4dhT*I%B+rEqY^m&squ6rbd3ak{P9I&A+v;GQPQ8%8b@3|%FF8t;syRN zR$K*bFu`_eUWm75DT!wjcFGJS2R zcyj^=TmT6T%9PpFXQuO$oP3YZKV9S%B7H@G@ucZE42pN1p%DTtVWcf2TU%xD5XRIL z(~7hP>jRQpotfFvw{W~F8eQQBh2f~MC$*B%=jcjVnZXDU367YRB$jbPf=Sd{3Vl?> zAs$AeVgaa1i{^jcZ~b6;wTF<+ti*mZRi7tyuc-v&2K4E=&aa5HR3D5x8BH#9c6O?a zkc+=Z$%D)Hp~5n(`S@Jd@F$lR+!3+wrlf50dZ_EqZ~vaowJ)^6UFIGigFKkkf> z^POU&CD+!c?ge-7*jmZqwnLOm5~pdsgHamN7p>f^D(h2#!G;&#)lCxle)4svr`?7; z$dt69<>dw)H4*8xM{H#)S?TrW^-Jngi=Wrbeuc59(Hss8GfUg&xRDa!su0Qu4(1Dw z?5C>WtI^Kp{f3CLLty3+-fSCh%z@(WOh!0pfAmrT0)|cMU*3FBc?Jf$B|lW9xJg(@ z7L0moUm>duyN=PQWMgYZ@1_?_|1{FQiM)ALcXYHBZXcebSW6Kg{r=7lW&Ihkq*O}A z5ak*n>)~X{k~tYW6H&8Ddu5PhSb5s{eMsUf(<!#8}2%!W|LF8L%JU10|Ame_oL3F5=^w zU~_fjDWMB?0Eit9puL-MVLbqBY}fW64uML zEY&8@4wn0CO##68cM1Z|%BHr;&DNYCkXn(x;7k=j^o5w)#{At!6^D!gEI61boWQq= zSBq>n(q%w^PzQW0@u_~N|3&uhfrgnQmzjikCd9175&$RcGi8Q0^Edo&M{90pvbM5z zq;l0uO2OahQ6ye{mk)_ywZFtH!jQo(j8>26uhw7D6Ywgv*Gtw~5dh?WwFw%cwzS`# zbuEc5AZ~le&!HX#0=$g8<`Q4g zrs>{(#j?gdb>QbvCw8QF7MOIe`la_-vR1eaO~e`$ZKxV0Y^r*E#WFUerTQ1W;JkGE zps;r6cW2HZq2K-rMQ`m1OlM?ATGs3jR?1Og@%T*a z(%r2n_Ajq-PuW?4<=tW$9Rk+dnWA#f?>pwSrJv50-+!M?xMM5i;k8W_P%zET!}9U})4{A@xIX4HuDXPY z-v!&YT*K-+Lma@yQ+DCf6l0#q7&dQCY;q?ks)9CVc&_YmFF7l*3&?(f9+MRvgis&F zh~9oeV@`o&iHa-D%khmIn)nOsG8^Rpt3zW*K`oR&rI{SqDj!cxy=S)JZXDRE9O*Oz z&`eA;A~$PJDCheX*_xW^Kwa@O`=+=2c^)H0T~bk*pL%bwVN@aIL_2+@PZ}YLQ5Ms| zTP?7^7-w_8=alvZH$^kvD8EG3F|4boY^S2&*T2F?x9H3CfSFEZ^HPf?o=Q@FLV1}iws#>g3Q*4Nievl zsj8zcr`7~tg_Our-Q06zgRauzVd_aKBhBq@;)+QNH}A1!<@?R2AgZk5AHja_ioLU@)UWYUlAI|TTt{mlCy%Jk;j-kp zg-2Z!@Mdc;(;ats-7`=uEVhm8&0{l0J$s&47&4UE^3!2)Bsl{ZMX{jT;IAO<>og3x z8cQ}G#LS}(S#czT4r7Gf=KU_-#clJngXs$w9bd*uc=v||Um;PLHYoY@{3|_Hc6M#O z(245v;X(4gg??keD889{)Lv+P@|`GWp(9mg%W2j0rhe0HjJk?Js9(-8X8w{`*HppC zY5~naAhG$my|GsoZEbv71#G|i4Co}v5WS!%2_+N3&KW33^187)4zu_A_O9<8no~DW z38vfGaKaVI4hY+$PXVGc9~D~eKJrY(ej?`)$H$uSaKMUrxv`7pv{W_F7twReaH}h_ z6Hb-dO(j{Pvb_4+;tW)oz{R!}5hmzJaOO_USI`J`V%h=a!rBKpxDBP^T1?+g$VMS! z+jXT+9_t7PpDbNhNA#7?Axv)2_0tX~*gjWtoQR{RRsV8oT?&k4F(2Q^6%Rto+#|5< z9Y@S)0dxb!>v=XNnrrEz=D5oaDcO zQA^Nq_9J_$!e+y(ujaNtC(a@+;j78MZ;*$WSzP}1aLz{GCS^unL~id&$<0k1=q4hR z4iQB2q7O43!yI9xGo23n0_^Lolb5xetRuQ=^d=I@VUwi2Tzg|eAyuMTA4}P<#>vK5 z^m}q5FWb=-y4^$0yhZpiAJkB(1ej^~Drm`Ep_0n^vpKAd0y!!4a!P)9KSpC9+Sa6T z;th1fU)}0GJw9Jr-(tX8tbwdgRPLrv96`TVhkT^ya56f_;_#(IPi^WX{Bhy;@fp12 zN=Zc*A#o@k>2wL^TP_LT((=~n*7ulyj6Qb>wP9p^ud|A0RF|ax9)Mu_$L3`Z8>d2; zI}ETn5ouS6IX^<=|JZJ zrz;*2ieR+k2f;*NZ$wK@B%;;MT%uJnaiNMUSy)>D)8JTB{8~JDV~z3D3aTNw3RiTM z&E0n3Iro5s=vX$Zwlic6yVI7tPw90_{ZA@(Ufr%NmRg#!8qosy&%`TTl*ss6%>w8K zNW`5Lvg@QD{sV`yzT@kZghYeVF2CnYnC6dAJlxwP#9(#g_$zHL-i8vk(u6?cpqg0%r@n~g z?c^BM2H#LyffGrOX!N|%xW#?`EK#>p&QG`)=NVeggV*~AhUR=O5!k%_7-yE~t@XGx zr=3$Rpe;}D?D^eBP~R9X8s8D2A;Bv6?o9A+odo=gVh$raqb1b9i;@WQZrXSJOS#Cu zhRf}GklXcaKHo(35;Pmnbq8>^)0Iy*uqmaFx87>~SFGm+htA`~CwY$8TASBTAf&fB zl=jyOP;WkUwu^6c%_fmdILUp&>nn_11O8H_5pC|$i-Y0n z0Zv_KGGfLwd64{C8S%>nF<3)QcclF6dEU_89LeP3ZlbNm2j1-^zN=IaNJLzUeHz!1 zLOY^(@N3 z&O05W`B}}1oO9-7Z-&?9*F-Ui-ziefVkCmuUq3%>2Ek=>Fv7PbDIXa3IZ>MutMNCc zLq|^dz4B?NE#&W{oP?b_|DCc!<9)*}Iuw{otR4=Be`GhV#sVB}DaiLQiqX%roiC`= z1D%3d)a-}y>@Nn>iwA3{?|B}eKQeY^KoppX)9Kc8xzUF9S;n+iK{NW*H>y^lY+53M z3*V3nbl3Gn_0!+b_Aq~eHkK=R6Lx!n z4BZ@Pnj=5mT2B_xhS&097WDYURGS*%#1u=<_qPV+)*~dSR}XXzxYuzTLK? z{tVpXmlk~?nC}566QvJ1fJuawM#dmPR^tn_ik-AmQBISGHq#yY|I7+_?Ec`9Wbq1d zCe1C@N^8agVTqN_?a)UbKeM?j`Ak>iM3V|dX_~6?mTC5wFd*yauP32g{{9iF-7Ib^o zF~QdF9%W81H8osTb#}w?yXBUlij4GQ+s{hxs`PTYU@`1jRz^#_HYX4tR7Bj)Gk58GDT^)0f81`WPlv8?`|lkn%ub^MW3^%`+v~<;Ri6>PtPa0ShjbI07hRqV-Gjuq z8c|6_=#E>zqBo1vU-({f+Z#Sa(-K1JtdgLDx}yopNZ!}~1fL&CCH+u9$rCAR2PAks zV4eru5fZqc#0)i2-(+02IVl~~!9UkAtw?q5l6P|0{bLD^d2`H9=GKY{^_?tP{#)5R z^Owoo=3Rt}kGsI~S#^V8K3rjkT|if}9#S#zz-yy0^0tWIb;$+EE;j0sxwK&&g{}DN z?VeK_b~h4Ctc!Uj`TnM)^Rm^&Bx3aaEOSQ~bW>oRr9FrAaJ}yzK+6vsS}vEIDE+5< z!_{HoE910|1`WKb#j*M^O3spl9&dD5lXy8mMHIY}L3x#666s8SH5Kru!!#nRt1FVe zZP$v?ZO$H}AArhbcJvU&6hQVxCCR!^BFA9aT_EcaeB{Y{g{`aCs;{p;yZnG>3#*fq zq&GM+4swtzy1Z+)nvBrn=#b5L9n2PxpQ;H0!{0XX6Jd&*%`W>6Ho8bqGJJ};@){lm z=Q~hG>-eTbW=WOVly2FT@#h4^d@eCJu&f@!i5mU9R&Iyyrl%E88Z)^ElrLkTv&%WX z1QeP}GxEal*54c#sJRJ83maNPANfMsjMp0SyV6oIbqBqU6z0_%Lw3EePx*<4vh+=4 z=d;wX()ze<32o9@D#mXL$1_b&`53lKFMICeM|zYc)Vx`s-h!DK0{V`)y9fl8lGFew zrH8OjBEunYk?t$-#OLSO$blYE#Lzz%4=h9+MGe+c%OIFCfR9;J!c2)RWevdDldqmE zuK7kGj3h4}bwVGU15SBn8QpDc%?~Bq@ibL{gUip`#jJ-ST=wD-?s4YTdCZRYo?3Wo zN1Q})$oDv)ns|$o`B=(~HoS8Iecee(915^s(hBHj-esR~S>*Lkqx3$cy;~LJWp; z0evLG3HS+UZ5Ap=Fdcm*&c^pT-Iqc~D19*WN+@@IR@mPw`j(bfXYZjIH%BX(KjKz< zysa4JOQ-#r?5_dr=Offe>2FkTdjo5ys{3wU|OG$+1qaG8~2UA>?WU#o`#@% zk#xyE0p!E!{BAw#n)gGuQy=AD0exuaUY-;@@I7WNf9bW7aj|z#(eEfbJkByubrPp@ zJV-ATf(QH3`L+A9RkW|~p7k?2w=@Joz;I8(_R~5#E`HZ`%8y9KCPVFwr+%acqwegE z_fuK08IdyP=uh!ht&N4R@#vnvvdP3-7opCBJr0bSO{FSN&2dV`3;E`G`L1P4Lu+o& zy0!XK&lk!co(&E{@3Jy(pLjxPB=XGd@|qtyT7Q^ZGuLo*pu8GIU+*eP^7fU?|;Vel%bdEhtYCZugc&zaHux~`*|myvW)WPJVBc(1sfDWz|*;W#L$FJ-Ld9Lar@&*aM&0;i<%OSSI7k>Z>>6yop&+G=@tnd zl>{T`1x+RvsAeN8D=;2wd;U_B6eecs4SgicD}B2zppcDHk-RWUn z+aZno)bg`SWL9&622D*rzvT_xM1>=us@x-+iX-0+p+mOV+$17F- zRcWnoawX^=LWL*I4u=v_U-m|<$Rb5@9jSTE%;O#!%f02&+q7V0v4w@`BclG9fgDMc7r+)U!>pRW$7*-zn%{jaYQIlX+A$0(@DP|N2Ru>->^s78l#K$LppG%lm%o2&Q zGWv41XB49DyVyFf-s6LzCc7^IYhOy?z!ZcZTd-x(?*dxQDw53W9VsEKVQhJ3th zKJ3>iX-5W&xi1uI%>ZyM1&?cylv(mJhMkQS{oc=%D$2#XPVrrGM~;__MXx(3`-2vw zylZpxWlo@q-GeGZDBItSl~pNcG#Ph8Y<1sX&wDL*5ZgS}mH3(~DbFvrOvA|J7<^yo z>X*IV9rA@!1*KANaz=v!GE8lU%c}VbF9Nw`|1_TSh#{Qyc-_CVitQg&dh^*a6RvHW z@yf-$8+uYpM-Xi#Pfy?0g|?t|TsHk;SlsjQWhFhP-wa=gYSy$`BbRUj-m$YE%&K_s zW#VXIDF;Cc>R1obGzM}DF&P!y`HFW^$DDC?W11!C2u_6;j zfx4eT717~=&TuS-r8k2&P?cOSd&mI`L`f6s#mj|MzWX~uIS?p7I2AdLFqtDqE{^4! z62(@vP%+c2!uH&<@w=t0?oJyaR6S>ST(`{Ei6RaHBtAcneQ4E(s=ClxI7S}WsH4>6 z((PxspNk*bgj#iUk+ny9(u1zR{29RUKuoo4r^{azpVPlY)`*o-6+A?aH zw~&G&YDMRY+F-do0&F&5)Q0zT!0BOLjM8zbQ?*z1TGG08T90iif;Ft3Ja(C!WF%uC z*W#jaV3m&!tqwf-CU?xl)H8240F1y0VAa@v!}Nq(EP(tqOpYr=;0N%aA8ck2P=7m} z3vGDH3iWM&5qzof9b#{wX}obaSy^?wo<5CBe;+UzL=3D--`8{`0?6n#{OoMR2zR(h z^t5S1quwFLxG(FBLl$t`I$m&-jx(!!6Q_`XyZNK;ljEt;cPA~LDxjg1M1ySo*B{BT z=bgO4a>{i36!&YHMWW4yosb{H-SyK>0}U>phY6|k-Go!bvUsu_)7dg8eL=VbV=MK~ zvTUKgU3TJKN(i^TTueMp=k59P_?s0EVo#>TBHQdD2WDzB&klY@VI!>MtkkQoUH?)% zK>g3k2YK;!u=}ZfLLZZ0Cb4CMJ*@4=cKD6GJ}J2Vgep_9nPNbgp@E#v1(DHZ7LcE8 zEuT)Hz&OuU$UyTcCtSVzNJ%8J&O%Z~H0fkr4&X+%uX2!+C+WGK%c!}7x#UZE|s;d>90u(@A*Ip$%F>EuH|2i4G8Mt!h>8XKnH!`<41 zO#985dVleh@o(Rw$kPy;#jd~GtcM32KG;FEujkH+jo4DY6Qc$~;n1T46F`)!aU zIVDvs-S*UcO27+eOxoaZp@iF#$6kG%t-nr~Cj5CwB*JooU2?t{LZiGz8I391j*(;0cdS);Q34l?x{aFldmntlH9IKl9#I0 z5N^>|6CQq7G@~h*9XpyAj;^l8d6>KGuc`d^6om*c->ORpMX|07-5q zQLUX@pTq&=M8bE$bRMq7NqNXhgkA}G*<)qD5NsB&e|&fGs4t9pdv1abX*`IUU2Up8 zT>KqR3R$vKrnSMFA4&@|MESA=sJY>CwZ{K$UTor^A+DL5`^Mb)?bf3x$Awz38h2-% zEd3yh0ge&}$$sZ|_ZUA!bA_Wk3-?xvV6NgQ(kFpE7h8GKwT8#MK%^%gM%RK1$|hs! zC}V(1_*qI|(X~NyR%m!ESI?xwfY_47a7^OBYU*#Sh#57+iKYw>5a5yNx$;+ZEl`6O z;cu31Ql^1?i}EKf_ht&kUnLbEbU=9#Xl-F&4Kng^Ya)J%MEhW-^u|IzaD=Q@LusXB z-SBcA+Ssc;_w%vfvt~JV(W%C<3gfh=cWp+)(|w65LiZ9x6GO^aPftxOU%x!Y{8;0>t|%SFiG?$n|YDH$BWoqSQ^?JTxhlH8EPp4oN6nC*Lk|7XuK8JC22^R zRqn!@-U+{6O}(x{JF6NJR%V7GWn)39BLo|xb{n_r;7NX8A6t$;oC`hkG7U8KF)9+z z20q2gbqc)NQef1$Jf50o>mxy+a)l8F+~ByD?5+NdGbY`ZtUH+JZCB1RJ3PL6QXfkd z(~*R)%Jz>@j(3(E#~BAld%lrnF1#SPmTVFgeKgme&F zc(ji<(r$%2cyC{Bc>cEqT<5@<9m~8L4{{|jy6Bda&c|gYTpXZvryhbS<}9;~KfZU6 zdThV<@kk^{pv*3QU4EN4j?Uy*h~D0+psKN}l+t!miw`!eTTjs~`U$%CS zWWXx}o%|PH3%$KLx9hCeT0sd0LoQxdF&SJ?53W$S?HnJ_UBywQ04RYq?QE+q4QHmw zpFFR#Co58ec8iYWZ*I{w^zivhRYl699PL7_XbnFm+#)V)0xRmxovCWxNJwnf2<4ll z*9#{3Ox)>i#gu4Y-Rt*C)+)=#^RM;Qr#oj8%S?tZI7)hrGA^ztj`rQ-%}tD@i|^8jHG96m&hBq~ zyCVb~11&twB{zHAjmbvr>BM(gb@56&BPK64e(XgTKa@Q-g!s==rVCe4Hw9FJFYu__ z${Jtz@*)7onLw%l1V8H8#UWMN->`nxpJ?leA5Oc=r!soPok{F1X=~5+q+6Eb-gQ}| z2CkMfCys~Ri)!t3dvJ&|d44Nlg<)gseGHN>`Q0#i4Gh>gKGtBDB8+}UKg;5ROy|GO zp+5w`@>@q9V`VSg8G5#7KE=CIQ@x63?icDKp6<4pHZr+&Z{l`b+R|BUy9lBJD%+I_hFT;E~;ZP!U z_kYtW_$+?^nOs6pkyGXH~KfH zp&?T_ba@1Vld+9`T5)GrLKVq|onp1i(%VRRG{b{Hq=yM9+|E&3|LXhrHIAp{S8e~l zh4dumQn0-}lsxh~DF=z^h9OlAs3ep8(KfuefpI=C)*O=?#U17qN3noQgf_i zYbOlkh~7@$Q(&}LDH(T$Pz?5`T$UX_2?(Ns{8hs+3*ErRI=rAC{{jliF*jnpq(381 z9{|G3m@t)yku>*!drk!Ngp3Upy#;wSyHxOwrjvhy>d0^$l+rNrvs zt&~WeR!NigajIVltGXtzAoHKMc054$&e73yJ3cDPvAF=~p55h~fPVP>+Z%&e^`e#& z<=A)Pi}DqD6<=@sja>Jo7ah(ub|i0RHC+K4ul2pA;~qGeNbAsk+#@#5mY-V4Lz|tg zG1c`!rNGkb!ZO5np_6+ei|hQPf*;HPL}gnA1@axDet&9M@d(Bj9QNv^M1~95+Bn`g zloQtewY;n=RnUPBZy_gX?p42nhTMUS;m$I7m78UIo2tYOWq4lr+-6$N8K-q8Yd zQQIW1SjFju?mrUc)utsQ%yjA{)#}~~QtUPiib^B_a9TcJ-|w26=a9c`b>|Y#m(@}w zz9aa6z<56Vk#mU%g{9g7#lfQCM_p`hT?1&OmfBoMnxXBIAYKhk^}&TcT7KX2L_H6> zUZ5ANzt1}PG5)q(nIOR;in-JM-GkRlhh_RBx5Z>a&oLrY;b9K(2`p_&&2f z6QnArKyvB4ZQRr0@&_{#au5-%1UU?4q_VWA0K>g5wDPQg&I2h{j3U8vSdWOnsa&2^)w>?XJ`B-hE#*7LI*{5f7pS39-YcvXGlQhaSa9cNtB7u@wvQ zKU-sr5R2p2KD`^pkKvR2Cxi!r6!^_r%)!DTG9@MDNn=0g#q>(MkR{(n2te6er-{q+ zT$m2NuGlfVMO1LI<$_~K_DUMyo?v3CV@o4N`cIg5rU3asJ)PzFJg2}jLHByw0~D0J zPWhtc3+%lpJl2Dq$ObIyiO>j^gSq?<5g)-@JRNTf7n;ZUmk#$c^fcLp%CW>i=|?EpN*VNv=EXoD3&fe5CIHf)FgN;$_w`XbX5Se4jo|Rfj32+QglHd<-zMyQ-2`_4j z`PzqIJ5ckWUo^!negnvHw6zT$nCSTX!@O#5YbB-ssPilGEo3FE=F#rjYg`J*#8g$Q z)mN_#_+NB=WmH_vwrvs;2<~pd-Q9yb1b26LZ6v|n-QA&am*DR1p>cN_=aKWyJ?Fb` zjQ6j9^r&67Yp*ruT(h8ASy+B3D*K6jj&VFh3I-M#ku|ar%c*Q>L3gPpHF+*4J~1at zV@m&fdR}4R^f#(DJAkgX>ftbz6FZN%Qz=HesRJ2c%xSOnc>zKeJI)Pc zB+?i+Jpr$nJ{Z}#1XHS)8`9LbHTxq(TfDagW_c4n=<1fU-S7Ah5zeP4_Us~q#j_=~ zy=}Z7(I4cYM&c%FEN5*e^jd^Wwc)1wUFV?fyT@kYP_-6+fD|DR0pXkV&ozFvcoo!V zl{+(k{=I~8S|2;G*Y89Q_ti23^Q+qN zoV3KH;-cyf+OC~XdkE zN}6|@UQDhf{o;=9vzHo9P97YFZ-3v?zc1o5_Ul28oahsdb7ELGI}VYIoupC?-5tJA z`fP)SO*`KSr_;{2GXwYuyOC+aU;R*m?iBpietfv5`@NzERfTgGOQ zflKU4^u({g#WJ1-A@9;{GigOfG)JUaiKYl z&d0|Oe8Gs{NI;CLx2>~Fn}K_$twu>+VF!lNL_3jYso_?dni>iT_Hmp~1NA`6pL*ZD zSKi&<@Wacs!x%^(hTc8c-6)oHqvehq{^#`3`%Q?l1KB|!ZANGvrZ~KqZeUPb%FfaB z15gIfO_!)i=UEvA)A8#jMH-LK5$2lP+ng|EvYmtfck8%t`^}v2=T@!US=g?gY~sB{ zJr`%qLaYjT<3eNd-BW<)es`gMF^2L)?NUMr1ljuLo z@$SF=2=%1}g9a>iQx-oM78zVRrCxqFy$ro5Il-VJT1#BfV2UwUu7L^###!UBgcAn1 z3~UZ(2+@`(@kHdU8DBX{GyVz4l;sL6L{EWs0DkomH9hXvQ*ka|oGUe4S)uuSoq%hs z7G^|tNLql73z#kcQB}@SY%-Y}fx{MO3-3)uOWh5WK@A6i zTV=L<%ZjE3);2_1jFd{0dm3kmgr7eBPY~S@e@CD*aA3}<4rS{t2l>Cd>m%Cu^B|-P z3>=OVPUD%-W&gQG%kEb*d4k=ZNbMt5X!1QvdK(^gF_O>qdYPs>S(?Kml~BvRv~g*t z+_Q63!GW7z;$B|dyQX)nHk;{;#jFcnb)hJj@=~*oC9AFIyO;Y^_O=qUj1+Oe%;Kp+ z{_*2^vL))+-Ay|(kRf^C?(*k`Gx7-zwQ-3tx_Xi9wg}s*#r1y-Do*V*}09NVfo8ARK ze);>xIVR^H2mV zCfVuG>%i85u^g2z)v0m!pk^_>?!a=6uP{}S4fIjb0xSIo$=SarwcTc`v}&Nlfue3& z@{N$N$U)uTa0v34a#I>8w=_!}W2=*{%|J^ z@O`_Jwv>Qf%LpLvUp+ z)A7f+J^oV!mz4B3PVmhdk)lh^-{!(cmXtC@*cF1J);v_RM3}EvXNtbFcR+Fxr+i;i z)#KQ<%v7hvXGy`===^S}e3Q4Nc@a~XEo*}uhhl^J3IpjtL*rMDoC=XNR6u~Y0z$;e zYDlesz5xA~mYpt%P)Zh8JihTpVG1fL2F!=Gxepj*mWkM@%;D4WxsS@N^IxR$Ia#NY z-xcZTzVSUEl+I1J2#8{aud*t?Hk2{3%Hb8PLL#$K_eNNW!`%9TGo?yh zri>(y&O}qIvpd^oBFHQK1L$y&e2un5tW~G7 z9{q&4V-Els)iCDmP^k%W4!TenD-JvxAHzdm9jaj}E>3Q)XX~Qzmgcyvx7D5@BK#EY z8v<&r4QaY#?KoIC&gB=6+0?Z;5$a03n#TK3EM;S-tr>V`X69<=%K=pl#3Ke$0lrWa zCn)RjQAx>(?(X4Nv)L_iESMJiE$US4L$n0V?K49w?hA1VQ}^KD5|#s>_ER4xxK~ul zFCaGnLY-*Hyta>uiu&b5j@hsbcASgkllpUs*Ve`Cc6&F)_2XV{YTf6o=;>xYUPsCGFzg%$-X!Oiose zLIH&vk2ow4sHj)5)R^r}F&S=Fg66n^9-W_~ZL3f!@xCfBy#j_K1t#vRZV!1LysJ!A zQ?%`hnQbZXaia@{>fe;iVU;+Yn8enjcmY9Pw9PmDBygEEf-X;W?JG194`zV9Zg5oUK(zM@7X}~O&nDL*p&8c|4%~2NjR`v<8berlc%0F-dEDh{ z3p#nk=3qpyE(iV#NrJ=cJ=ciH$IG`!r&xt|1N>hjBT@}WHj5=6n;#?v{juY_Mx-B`2h*X>v?N*QGNN#95Z>9x_jzB+sIH7=++TP>$h zh-UsR_8^bO>g!lv-QEM0_&B`WwhHIp#fg&@RA2rH)zY&#S3GMaxN3{toE1JhSwvcI zIj_dO{SwdP;b?Gf8+Sdk)aFf-Y^yv|BKR%2aeTkdW#6G{Tg)`Y5=-wha<%Jc;b7^AXmjuDad=I1M)Lki4tOhxgw|{1PFh4OA#R6;y&EjY+=IY7c1>9u&zXxg6-JqLV3Hq|ygq(l< zY8BMAY!2ObL(MgGyFefsJRgVQd=NKRSI1m6cK&^sl#@`8n;~hO)CC8Q+m<39HL8M5u?zQ8hqbwnr;<_XB1! zJFiS%<#m*Swr_DX^Jm-hb-svWQ|;rr25y5RMXGkf_IeJFJjWc)KJKUe0 zBx~ukHAFx(B=ulAO#dm3qox|H20DVceJIUzW&{O^ZXiLD#% zQ?&S6(0^X(G^A6K0* z%p`qifkEA4#-lZ}-HAl^%0O8fb}*z94Xmy8>(9kbE~2||tm#(xX?C{D=`6#kKL#Su zi=%pcqt~PPbM|udDPueUmLc9QzmGak$Tk{?;5`4ex8Lc1kV4`kzsO~Eeun;Nt#Yd4 z;Ot`Z)-&0h5icm_O7+VIpty?CnZ=tjznCK${$o$RHQEN68_ujV2W(`wjWiXra+Z3+ zi{8CBDQ76}$5b&|z5$wVSfmPF76TISab=v!jN?pLr-D(WqYJn8wn8K05W3k)P8G)9 zMEc(^+$=RY+nz+JEWazgoon+_Tgn&~K2E{=Y)f=wt()#Ay*ZN)V2Ik~Mm;$eu{346 z#SNIvleJlp!5(cQb{MI$D|q9331tCB0$zQB_&KGaKdiQ2S8yhX%oYi@KV2ZXl5WBq zF}>oE6`F_)P?QGd7MHVhtg;PmY^c&%Cr+P_DCdos4PI!nnX5JxQP=yzhCN6HQvRG2 zSz~OGAdU0I+jXh*G(pX;zAlMQp7BNLNX?C&7^v)Y-$Y$tc`OYqOEwG4X*Jyv@2LL3 zkGCFA5=ds9@=B?f&Eaz>wF-tt)!UTz=+?;ccE~!qn~(1}yqMumV=eQyk^77Ym+@UR za_@7BIMY?d;=?Rw`)$UC5~5sd zNnJfxTF!7QPS}{VSl_-<5ObO_gztup!M9cC_DZJs5s&7ss7M$Md~-UOI^xLQ$(d9o zKQ>Tq3PG&KKS?rL1G zg0@X!y9c}nnk6H4(9lq_({dM}1^IQI-{pyOTS;XXRb@QRpv62ve4GWiJxuN)ySzE! zFsgUJj%y!CCACK{+U}$n^Hz?GJw6{zq3adtTFK3F+39Kh`bzmRauu|9FwR%WGgV;w zE-YFaxvndktuhfWk|pfPOBTpOvx-%a?JhB|u5NrkG6ECuflizU9=e3ffoI!A)3Y33 z+iE`-z0)R`rm}2-EFqJ6X~L-kX}~Hk^-Vam;4X z(KH2We+IG~v9xD#Y~;#%+?|g9s0qeScNudxg&R);gIWyuX)~JQiU~bJkqNDhZ}@Bu zSZ_==uoe(11K}6Q)19QXpyv61kl>IvK=Sr0^?E9COyS}>S<#NceP%WPRi4k_tyN!O zaSr8?XMs?TkSMeU>B_Y}I>czi2?MPrZ?LZlo8PZbTvse_GEx_xT1WNCN!scN!6$7P z3`RaY6g;N)A8vO28L2h#BhD>xox+Hzj+LTf(^%}zdicTus1Mk(lCvD0=AJisOps)? z*$DQzrCxI5*XZc+#oo0_WA4bk+7&;9N4&dMfSo>4_O^tBzv&+7dBzmrQx#9eredR6 zt*3~Uc(o9z8N~$3Y|mRvUSF6Yd$rh7`Sf^imCs&aKYr@vZqz@Ko}IFN%b+{nuhr#= zSrkLeksZvcw@_DVIBjro?wJ^&WSH|D?8b3&qQMjC)#)!Lu-OsOVSs&|(qj%qY`c3GCqn4Q>1(dm^wF4usx#3tP} z*E>bAj=?^Gr=4mS2p7e@F~wXd>O`QepYe4xg~_JZE@$8N_!qM8z;auc1KpJIBB@-> z%qOXChck^N@r0JWueXDobs*uYdAwewjebl*_CfzKtwy3QG5_yzt zjR5)U1vs2HVmnzp^RQqM!3WJWJ>`l8D1L%>(>>330~79%5Ased@N5t-b8=~$ejsUR z3ce>Gd&~2it={cka(1(3M?$BS62|po0`hK6EH4}%g7!c0T*BF6byPi z)Uh~s0r^Zd9d0OCV^UMOQlW?4gBBQD4yHmDOe9?)hdr<>+$XUnA_C109rU!=GSX)? zlPp9h7)1KMf2F`*8Og4`ZLl|4n*}=2SH-M_!!Cml<7xF=!u&v_8@>-*St+ccWc#!h zn{)BF7M_-nYJ|%9YFd3N=Q+&w!lEsRy_GeeIP9bg!kJA>RA|Kn-mq4atMs?a=-_;e z>xbtheq7rs8|yJGuLD>>!}|yO$wTGRcj-mL6)&otsIx<*i~f&tP062j3zKeA88Z)A zba&qsDqG`=gx_QD2mvzi zrjlq1BAoq_1_=R@(Xz&HG`$x3HRJ8kBkoS08jF;IbT|Ojy#0of2Rh3{f zM7m@$^)xA{>#i92agL#OSFz=1UZAff^}b0Q$!I#`%cS-D=J zN@qI-lT|koD$#Q@B=`jJzqssYo|s{IK9wZSxHhQWE} zHD%ic^Qo9eS*WY6HF@=m!%s<-x?VcOtB5DL!V9vwH;HjhFy>3mNYg)~f0WK5G6)Xk|h<9;=l!Tr#Ct9e}wBYY>CDk*G?mFkc1X^0Bj zTyL|J>Ybj@r~S7h2?)%y9i$nY69@9i*SEz^>il&y=N)z0F3DImbu~Tn-GY^finWds z!$S&-rKM4ZK6!BW?F8ARGaD&YT|sfr7)coSo~`NHXJT;gAKBFqflj|&ia5^aU1vFC zGteJ>@%b@799SCK!0&x+6!`#E#>>M}uTJtnaF=`P7t{f!+g)rKk4I?TdoLCo8ZGO} z$XP*+<)xBvY6IKAmMS=~E$|{{nTWiD)8C?QFIHV!tT2#*a6G+d5S2jxNSej{^-!|C z*_;Q*3SeDkEg=H&9*t^d&hO-wGSu$pOSWH}P>`ws%uYu0u|3Yc+u4s*$oVfQeR_2b z^slSNe2TD92{XpV)J!jygpKY`^gjWsG@}h>QDxj;*>tm<5#O{D2Vu_z1{RXVnYSa= zxUgUm7V;E`Vcf0CwHPW}64^{W6|6qrnTaG5lk>79K1idly36Yl?gjE+5DD3h2blDv z0i#dEoA$mCxEqkO=z64bELwP+w!9uRa3gmf5_of8tfV|f_+ET5ZGXkVWx)7jZuDzl zCary&#$*4qsRg{H0q5mHaF$?54pN+#wl*;FHaXLryT3 zTPciqEb)`-^rjhb<4;cm*5$KLEp-Px*_T9^sg;qiJ$RofBeM5zE)%UyfV--4OU`lt zn@p)wrYcybczYGsfsZlql3`4LKzi2W;Kg96f#y%QB*Vo(ga)2GP(;miwArmF z_H~-FsN(@AogQP`+KNb|9Gjhez;C%{1=1<9X3d)U4qt55#`Izq$mldM8iCE85iY<; z+~mY$1jYnjuZ&^KWV1)U$z~43l5W=!MDq@J7V1s8jGgLX2iU#tDqhor(;6BHJ#l$XC6BO z1o5&7NA4eNk<8VojRe3G_bUTU$?{&0xl%OhOfR>BVE8kQ>RFPp9GqNMExJDz^v5V|e*e0QUenmn}A z!75>8h`bRZ5^N~sybsdXNek}oh6hN)ugrK|(NsFP)&9D|%LB30xZV&=EvCk0peZ^^ zF`AFf3q~QNDb`*!xHogfWhVwkwm~JCcygBpLhgKm^8?6cxAT2zlVlOeYe{d$|*b8n@-^-rQimM`RGal0Vu6Q5H6=~nc0sHdNiQP5?b^uSnW zdWmE@KY2_1`JEb0yWA|D8ND_$(zh0R*Q^!*0JAYe(y^L-0-Gx*~ok*cn7q9#ElFA(&G2mFmOBQq9-3Rbn`xRtWwD@ z3l>kObGDwN+P;0g+n3~dW+GY8to1!JBF7v)%7j|-xlf=Jp_!kIXjD~g=Hw}(0q$aA zlzNMGiAK-}?4lNC7ehrO9s}ic-p`pce$$&Xk?p`$EF8zC3aQH7LtT0ib#Q;@C$TOt zb}!E6xGCbBPXgJMn)PyTrxK>hEKy-pbzM#O@O0M94D(fZWVX1E^m=Xz%%KQLrE82p zG~zjsp5D3X>L_DgD24&a&+DDO_oaB_7Nn1T{z5rRc*f}()Il)`{ZZFXH8tydiM5-qh~<~UGsdtB zy;7b4B(>+|CG}}W)&Ky&^&XKnli|yQfFIgU+#5ZlOJcph8GUR_Qtq8k350`B6)RgV zT9Xv8wa%RaXAv>q+i06Y`d<$KD|j}OxDkp@;X*-VjuV6x3Q!MtLstzTkb=Vi9kg>6*wr6=7fo1&7KeqZWhx#Cy@GFx{ z$p1B|RrnBJEon_nM%$;8@a4>?=shKP{|x^Rx9$TY8Z%l&^|vd3+1DKe;x8@#{w?A- z7y}C-`EL@Q)D4Yl=zpXHaXcaa)J6PPWbywr5d1@xAkk0z|F$hc+~P0sz7qdtdDn;% z=F1De{a0=A?Z3Sub%U`G{_j5p3x>n~(A9MUht0=@F4%$#o%`a>^~0^+{uyq z&mbpqW7&89MK%BBR5E+N+5B^4_5V3dTRj^1r5Am_C!?KLbG2li$y&+@Nk262X2I8LF>Wp-;Cjn}(b37$r$RC^^V_36!XoW}OSgfCU^HzV`F+T( z_UikJRy|cknZSjVR!g6f=cnyB!Wy~A-nUMsqV37tMJkW#49Cl-eMO1C`{a#qN&@%F zmoRa96}qOTdt?R1$_m%orow{z-XV(oB{;B!Ke{}M+-$#+9`(k-l+EzeIH$GAk zx^L`ofdia)kz=ea&sg4jOh+1&9#fFGmvwNbJy9i!vkL#(X|H&YEsFbHh>@u+kNTe; zyF?sai5A(te?P!yPq$p_=gAz2WD`#Q(rH_+Gvg?xr@+Q9S4ctYo;U?aQZwG|CYttF zn;p{=qeNUW-mN*fp0D?w=|D*`1(wpt?O&W_YDbKs10adz@l98|!<83*2i4+5ovn@> z;vOFPy!+``ue%00niLa3GPl;2VaE;DV4m1HFqRkPk7~YCFv>d z&W-n{CFc2fKxoS#p}pOflNFDkl6tMUsUInF%8jl4)A(l1NU>$D`yx8}=UIFw%N@}} ztZa}?`Qy6>cQ)D~BNPmWpJK5^MY5L%J9{zb2qr-F$0r*t(S4sfByyY)PB&zg<**&h zz;#aN1~XyhkKM9ZQlTNEY8*g<<;h(usy}~n&Q>*4ki0D!co4I4)lUl%K)1WF_l^^s z*2;v18NBV`9e}`WeDPt*who#$30{U>jRFib$E_&@wu~c3hQ~3cyOb=oRw}0PF}fNw z-*I?uKOX*}MZ!rl=eFIK&}iqNukA-% zf7H5J$S|eqi;BbPy)8mEh65_N#%vLx%7lstvqr1$da0B%pW=%Rd$23jVP`N21uzva zQY4FIV5|Kwv$~O0?JcYgln@8J3j-hb!Os_#tu+L2q&y8IS&EyA7`-HuT1)(`S@2ow| zZ8O+TvZ7^X0&TUv1mm{L7%aHkcQSoLwGiLKK9Lzr$Swr;2Ca`0s5S}Xaxi^$sIZNG z-bp!n^WiY*Y7h*af71-u;FW*id%pFUmq!mabx~RGIAUc~PkFA-yovO*9()3Cx>iZM z+X=tBgZ{8L{pC3>c#hA4rh6~Lw{V-d4(U%n&Dbh_du#!xl!aev%i;bCU>gGxASi+{ zGbok8k>>Ei8E9{(a1Vy(KH?^;JwF7-bZ*04@Y%AJDLmeuAc>432NSd1XnMDtW8b1W zfoE=>7Qq*ZW(Nl4c<0uX$bjkNqRkt-t%Hi!(}yD>|JF9!ysv!k)v*br@S#hucV*;5<&oQD#jWMnSS#K3 zLsj%(f;xl{67Jq|Biwb~qGtjRt76ZIcP~b)j6i_Id6P)kze0nn{nX2882=NZx8%IV z&01v}B!axxdCdLVKdFOU>Bik4r~a?V{T;86d(ngwWSK{z{e|E*-UBEHJ+HhwU52+u zYF3|6Nm=59>jMt+9*Po(ueAtcMU;*L(e01;I6Q7AfqG_uLixo{6dXhXbQ%4sY|lK5 zE&e=s{1TQ1pI2vK=3=|s?)sb##}sPNhvHxSuo~_m0gFBZgLP)pW3v%sY}t-FcrLE4 z$Zwj=;3<`x;{6aC^_yLv0s0mp4*6<}scdazAo^szQZ!Y)j{ytt77f>wKzj-&WQ{*& z5K=&tNHzr72VNuiqEcpmS)6>+^vuxIAToq%fnWC|dZET%MysMC(7!U=Q(o0oXa*Lq zg08x{Rsm4k#?PAWEX?2G$J$4)Bkn>1dF~po@uZ0A@)S-3Nj-zHm6q!z`;+PXyr9P( zORJ{CXP13`To-y{89w;LyWNc&@|qlc)!#HYB+1n_eQzepRhdgWN3+!!m z+&^Ah9P#}tT)Q%3LbcR>hdrrq#w*30Zl(Ml7d1)-tRxLr8;CNGVY_Kb1>g8LKz6*) zV$xCRytjM8IXnYA=k0w(#8_{6OY;2DhRzCI^1k!YfcUC8G=q(hNTFgi?$4q@jB3U~ zsm-0OPY|?N;Gu7qV9rh3717e(?|bs6gMlV>8f_Gq>AKNVV~T@gy0QnZZ^oUv4GLe~ zL~S*&`|}^81z++VSi=-qoJ{1Sby+Flh!FA)&U9QO%Z~7 zguN~%(C)(Ovp7u>JfAU{)=T{34>eNPefpisi;%T}6z5*GArQ%NDjd@D(T6@FUJ1Nq z27DF~kfS%17~hDtAU-|vK=7lf}Z2qB{}<)UD!FL0F(nrm(-f_3XsA*AD0SI8a}9%F?MwV z;1x`SJ}lS;1g7dXRLV&!c?!Z(EmDU`yp!Q89p}BW_Ze3gPU^SbDT87z`)hYCUJk^e z2L4dr?+o@%T0h_yJMP_Ekh7^4CVN&1s`LqY(fG=M)yRG)K&y_x!Vam9Mfv_zWitkn zYP6W(65@Ek-Zt1VQ3Py`;NmWm*C&_zqOK((ET>~B3s%jq*ZQf65bQEhVq650i2=-Z zucYASQm{$LClt%wWhe4MtCz2?ptsx^CW34`8wB6i&|sO7 zcuXZ=(pFm=_wJ_>TIr?g<16-zo}0PacLY&dk1de+qs_5M_DSOKY`;a&Wqx~JVcQy| z`>63={2{+6xVHQi5Uz5)K_nmY29G&eXZM<4mVTrZkozp#lA0_+NepK-`2DCw=E1T=fIH51(OTV-!gay~ntbL^n+q=WC*J5p z+(c)}{c@Awem$#|TXPv%@#&wa4nJ0^``_bya~hhjw#Fx+z*##;3i<4lE*Iy1@DWh?JsmIXS`%IGFh}b!8y5ieP+Pv;G;z zfbnp97w%ly|LyiG(%=hc1?<+#DQ>9^_Z#`$Ry%ileCx91f$~vlK5Tl;ahuwO>}p8( z*R~07JB6-IkTgXsczaeHmnyj~p$iAnUc-rb{!n;VYOu7;ybUXP(9=C1Uo~Ntw z*lGzb2_Sn#?wQ(H%v$a}%Bz9STO}a`sn-!|ZQv9?wgf7~_&WPmyBBq5%q(BtmDyFZ zmk(F5DP2ZrMEbky!i#x}^KYAS+!GQWrtryA4We;Ryr%3UEiT$gKxq?n_k>YR^~VN zj`NkZ6=_ zq#ZobBno`Of79f+uCGKxY$G`nYC+(_k`oHkvY2NwN}+-N{x5(h>g`ay?`mR-hA4?g z_FP29@TT{{fh9s0HZ^ zFA+0c)yN!;>!6{|#RW2)ir38{sc`*Zk}65MtBj&u49UJiY?v2ca|zcoDckp5Pr_O| zi28G82gHSQSrrz10jY?Rror!(?%)rE;`I-QeP-yP!Z_Lx!VXWlzvq%sd`Uh!VG4X| z$Cr(YLGjHbW?`^=N=L=d{3ZSaYhq8dufHg)`7>zSP}tOvmP=F1;hbNf6@0RTyOWq| zV7u#=4Mj@27s@E)P%|Beg&sVy5ssv1R*RBHImLs710tEB&>T{|tQO(7zXOI2+90CJ zwF~@Ye_I`crHNuJRQf<>dPfY`|7kxOG$ z-vGH0&5UAbm(WZkZbEu`E>ly1n0*ZO!)7N#$l)e>4INJ~zinC5>X1ycVD82=mRU`v z-O4-Piju7PQ|-ss3HEsz$Iqq2l~V7Qvv>d$Qj&gk=pmimB@u@gp(JWX6uYzUc?=gM zYAEoCFaiDQ-5oNeXr4du4ok@ltgxu}tw!`6m{(sDPc5pnLp}8MnL*c7b@y|8K!l>X z)eeM1ZX)&%(W*u)Y@s4GRzt#~o+;!_UJ9_*{^U2$84@9}7U}N1heKPT4UN$3GCRPj z9?t2W0@C-ogGnVO_#zZRQ%Oyco#q}U_G@O8z)dH>WLH8W1Xxe_7r-0V8yMrFDg5?E zaj)a|%#cTW#p8FhA#OT4d>}u;a@#HS8kuo#|JA0*Yto7*K4rR2bM%m*;N}X(t4CaE z&4OEVR$uD>qH}Hp@5O@ejL8fZg?mb-n_3$qRHLDLDQ@_9tgZgUw0RQB zcKY%{Nh6}@92ITmJ#oUJS`tqAGMivVV5%OT#LH{LG(Z;dYDul}+!KyB&V2eBn4x(` zwn|@wHG7GexA^Xw5}}qmHmQeyig@>iTX6MyeO?NSu`b6&DBvZ4&lCM;Y4f7phvsp_ zafJG{%30p`q2l`D5=l$He$wu+Nw9uRe*gxi*$+ zl5cz`^u^x3VpM5TU^1M+Td3&p{+wuUN=~lKYV2)XeaFdoQ?xc7Sm*mD*l5RPz$HuBiTe5rz@&iZ7PStDb~w8imBSDH-ORs#PLw#lx!&14eV!j@VMM|7CtbpkgDw?z?GhrcbQ@*16ZzSY5MbG zG=fte)9iwwlciZ;`_@#l)0c&6x!uT(i79Uwf6j?;>g!*A9G#-=3j;COwJI^PIZID| zJ)+>6rL3y=!b7?9+^uA--5SUmKWevobw{T?M)|%LpB^wvjSK{%H3nr6x@0s~*d}!4 zDO@)R5b)P0w_v+CO#cEMT1@XXVsHPh5i==u9^Uk;B`u4LgjZEOo z3BEGieS~qfee!$t=Fw-ME-z13w7+&mrz;Vv5-r$1D4`(Z$X?3Fq^w~pW+ll~+Mhs5 z*OrOYx5Lw3cc?D=CO{|a5{-IB)T5Ic-A;P@sSP2Mgsm8h27rlYLl=RJq--o&yFVpa zwHYFM{KvmIpNuKF%INg;S0NIdLULZUN|Q8~!=Dch4#;>sKYkyWi5uX)(IG~>eVP z7LL&EL53WstKMEgjh~S8p~qRBvEue60*}|DSd5PR{IZsY7N-$UHsN@QPM|*o^ddV- zbxDLlc`|V*aa=BYtk4!F0iQh#BzS&n*_{{p?Av?2K-7%!4&FhSl~yDE9vzO`DPN?T z#-H*G3gCA)0j9>rp-PxE~aypq4K$cw1NVxrc_htHI$tfX1 zisBO=eh7DU_|-ti!Dbozf~uz+!OCcVxdNIc%`g?ypIz&W*E&kRus%iHwK-8Q+d=xJ zRJ)BwKL8Wy&(QJbSOIki0&p2$4gpNUynoF3T{vuCfnz=wP zm>Hv%v;vCXi=i|Wu1+8!W?h4BtPa%>Ga?X%14N}2QkLtUHfMV(3&#~S%H*_AyH#v5 ziDX0==y@L39Wofj*HM6iL=n0SJ4C|(h680bgx5Q0sGe8IpO>@N8;VIoQ|J@#ym~^R zXtm8Il@wdnee-G@agXGrwDL7#)yL*l+|3SHaW_X2_BawA+bQsLZgW``jEUFn5l_N> z5GwhVPr5ZvLw&kw4Mh5L+#{x}9&>Y;i$!KH)!?>y=o ziZ_4qB!!YfQgCW`n*;>JC8(qR!WlKPgwha&gbQ#7Nl(O9&A~vr=ZL3Pr3V^maQ5qY zza7K5e;vCPMKLs_y`&Wi#_bm2%C6db6B?xswwlqcPeW&8PC{3aHr0bGgWoHI7}l;` zCvp&F!e&24vFghgBeSg0A`>+%ekV9K>k2CQt`T~oDI=$_k|Ei_wSFigCY9m-Q4V`> zSu2OVJ@~hrl8}!WwYYrNH#RMK`=7yw2Xs}oS|SxTNW;O1jL)$KO9zgj&2gc{$t*aP z4y)4ExK~x-%zG%w6WQO^^N_a(8n*sCW4G7wCo#I=o;*KSHv_gCErS=$XVXhEu^W#Vt6lW5^rc{pV_<1=2{8{@(A67I?st!%u%kAuM&SHj z!(w)!w>#8AmMpQ!B4EyZI$Cx=K4kL>qqo=^iGVtVQ6|)vx-Oew*sTU~h_AQ0bGs!a zT~t}-({3X|Omiv)|B8%-5AQaG%+qwTzi_s|08P1^qs6NBneQoJ%P|mPOGlj~!1sBt z3F~srGhZCtNp&1&gg7@`ik`ku`bo0vI1e$)>;d$p{pym4_QYrD=gj5h5SIMDVGb!&&O_si3pk+2BlVVl`?U+pNG zj*is$qtUy*doT%{1xl=>Dmzs42u!LkaF1g+GdS61kzj~2>j_aX4q@CAn2YR=W*{z9 zmKS{n-(bI@OfO4%T`h2+?P%{Gs$qVmq5?f$Dd9;0UA=Xr@f-wIMKIk@#%RP?$W!7UK(<)v;+XZBd&Kvq(0{21VFvCCo4kRMaK1FYv zjU@0o^iGA}nKT}ws0hclRur}ulRFkk4p$00f2dofvf4ovE^}bL-O~`0&r5FQs-C9S z+%WcQI?>xchAi^{72HjrP|fI-yem9xzrAN%uO5Pjd$o`9rQTgFa?U`;)6r!C=IUx`Crd2@h%^}c!5`p z+BXrBp#&Vz+4}Y33&YGqg#c#`v2h^Ssd! z-)b0h=oZmLP)kv~*Mn9TKA4-N&2@V|aj+CEa;a1bhy1vu)|)5T$cXV>A56g&)t9hl zS!8R{&eIMH7HIQ(o^jqFV2bLnG*Il(>LuKf@gYa$cHZm7SCinWONvDt$2>owN(*)~ zJ!T{7RGTzDSse`FZubKVcqX&o0@j=f*{r(0QUo*MpKY1zLLZw(8a%f{Nd4hh=6E9V zjCcz;d6p1!I~^yZD>(J^cd)Y|-8?j%alwHdAz3YP2PT zEtcP#zg3&B4y&r#i{0;JV*ey#?S0L*Hat&h&Wx!7EaaZ6YW>9wd<`)ovhgrK`~wNGBk`6 z@p*)j`ACK`{Kix8tqYg2u5Wm`TU{YtW9z^=dO%+mJS~4UCj0^ocFdn$Dt7movp1E& zm+D&}F+a(ysi`i0@|WLqj$ZQ)a@u4d*FP!dar-!MjzFr+`ad4of!JQ}+m) znww8nE6V5*wKwHr3%9-&&bTK)f%oB+6a|6s+u0+SbR`Ppizv5Kx9@o|4)V{~tWQBA zg3D@i3qcB(bzo&MK1_)IJ&a%388^cRtKr+?x%Lii^^+A%ruWYwZhUVtKrK{9+3=*a zlfxM;c$lTy=!(~lw+s9QalWQz5uk+;*hGEhp(Soo;@G_0=Aib$rPJ)I!nozWjdmeB^e=+alKcP;E`n(glP8Y1i{(1%V_%X)EsN&r}#j0A83r(3(z%jzZLJE8%Rfk zAZlo*7QVmV*b>TY z4pJ`V`(|e*;|}NLjTQ?QhXV}XiDC%tm{GUYvAvU%5Cx8EY@UK!O{--16wwwP)b*Nw z{=M_IRmQy+8xv+1#i|wWWMt;=!Du)AX;80u1zka4cJ!i!I`bQuSY&E{kBi>5 z_Wc)r9uiI3%T0%ZfnMIFi~aDNv&bW-n;o)F0UW7K0QVH#EhSScUR@gd|@^!u&vt!v6-U@0Tdf7cDa_m-BN2rHIhS;IDb9%{Yvy`aND}J#CQOV_Vz`UQt@QrB_M@JHwl+a|piV`p5_-Y1f78|^z z%&kT4*g~6qzEI5MHVg&l{l@@@dnM$lGzwQ|HE7mhNaPHAO>jKuuusVh@h?hUh0Nl_bTdx_)d)+0kTjVxb)vUh!&AIKjOy3~3G)t_i zOWV~#J#>Vx2{!?UTuhvuXdSzeyHb1cs#FpS;Gy^!hrAo=n)d_nM~Dbz2ZQdu5#rw6vTDsVR^bX&)u0~ zwQJMB%rP{v7OZo(HQ+XHt&1-ZvU1fql*zEUe;)y6sm`NnYdSxUF@Hf_DGEA0+7~V; z_Z~ZR*`7lc>$3Nr?NnSqE;&_yme0axxi(w%8#Jc|FZtg*A6 zvZrOWA8i+-8BRFk9B2mKtc1_cSkf%?X1;i6&U|5cB<5*TmrvCp?#M7G=C{M+B76My zvc)V#MKug)HlWeuuo+;1=`uU4^(-cV-dza`Nru$SRlAF;YuAhvTaVNb#R8ZvHd=3m z4_1XWGu`d8oL%PGv9KtBFKuvgRfyH#T2aa_x*w;0ky}@m06C=h&o6V0 z6hz<~xUuWrYcE=B1+IT4oXO2ueAkk-Tlp^5LI6TMPTtA4!g$5!s3r4#1WN;qjMaQD zxOjs5?qS3T7Md~J4aJBU3YwC+x#+i}p3SAv$IkC>Ddc%>&@C1bh5M7t(G?b3@MgmF zFS|38SF!0iW7PBB735h}FoMJkC!$}|(+12eir}qi_8!J@H*Q$x`q4#i72lcu+Gj#v@35Gt(8^ID=Mf`6DwNq7I%D}A~B#7 zX!--SBVjv3(mAZBm7g@IqNq zxU)}F6;%VQ?Ez@#&nn zX`~`1nZm4gGz$*)e3u~?pytoQv`iX);-Ig+sU$#XjmC1p)y;xdE=*#o7pX67$?kz#0I^-1B2Ol z>w{Qo$Ss(lb!+JLHv=x$m$FrT8|NL>WOkoV+H~lnMT*)}GoU_)V7A7m(`q>e{ka8= zh2y0k_p6p`NvLS(I~v_2BNP}Uq?~7}zH;hE=#7`Nae-sWG+msHPIwyF9N@6m2g6Mj z^A^jPV>orj8mcvf9~LOt;}KOB`#Gz_U|Vg^nn_B^+O{3Zy{WnjhQT)SYS3~WJxps| ztdMqqNjKf#ULSiJDs&5VS&g#W3dZaj!(5@PnchYnMUk>-#|=_dYdMOm0dV@)rNO1e zgot@35wjCJIfw??`DSjZfXys&8SDhlOWLACZls!WGi4&@97j3N(XmlwqUAy-7I^P& zN$V5!`lEbAH^E&l^vIA{#}KYS2p%T0*P~G^?`Crv{tHbMx9xAf4}CW?SU;#nRe95E ziKp383Wk!VUWmONVh2M){T&ZI8qW6H2X4G^PU~Q0g49$B8b1qzy;GOZ4LPy zGoG?qNX+K}DAitEFVIijto#KF^*k()4zhJ_#xwxsENQ#R#Ok*PRJ`f%Lyzkf?{-o| z!aU$*y|$mnf~Hj**rF;Fx&2?@>3n0EQwC3c?;h#W9@pC&31-zcuGWU41GVhr89JB_ z;}wjzObtjCMfO>Y;Gqh2s;p%Jrweb?9rpNHz(v_bXw{r4rL}epliJPi#7K)X*e^*JxUS7ZSDVZz5*NN_lQeY4bi1v5X*8W20%c#HHSP4@MHd^bV zkmSuj;y)fLU9ED+;KVm$o7bYm1Ci8FBgdwNZp*luq2u@SBV(}T9Gw-_Yw&zx!alGu z7A|awY`iOsyhERQ4#N?04*hM_zi<`Bf`hmAf|s^yVGd|FKQj>D=Q0^Y3pAfD6$C~C zjOaxG!yyr_wIEzJMf3y}f?2Y7IM`Jt@trMgC#~iVx0kF?Z7f4)3N0YPVHh;op;%XO zwO*j=Ojpr~>m2Af&Ut;V5h_I+uD>jFj;|-+gNh@gc1F9U;PuXpp+~M}ov3z~bBspu zKe6sMaOj$ZBD&bL#TID1Jw{J}%n2tW0O&gOF! zB3C&e0+S=aMaFM7RbP=Jk+Qn)@pRFMSVbJ~=K^ zr{lRdh1JWQes48cJ~c&7J;PP#Inwk;sDu09_+Ay*meb^TCw66ub76}X1 z@*BQ(rCpKYnJ=Bj?T!^LkCsqm_0GJ_CNcpICDK#T=GZVqOOqw|U6;0CrJNUdxVI~c zF!9x&D-!wv-R-C+ebvroP+IR3q|E-tGy=uVXQ)k_waofm!}AZ&8yNEe7>3QU`X^n( zlTpwXx9-?QHf=`S*UZdIC#87I{1_o=^R?mxfly3$c0f>2AM}=-mB{s;f(XsPCm_*MR6&E*#Wmb!ljw5IeRg zX3%E9H4TMM^P7?Fk@%b^|7qe+@FBwVv?iCPuEq=gIM-}7ch5oXCXpjYy{k=gNhwIH zHE=tcz+nMEP@~1zb+65f>!36IQR+;Qj9t8Vf5pRkWRtB0)1-k+>46D7_E*=S1(-aG z3bADk9>Eh;+NJk$23-8Sr1gtO6* zl$^aEo{&aYS3)1AGPTrmNSoDVKWO4@gY$`&oBR>mcKK}drrfU%CL7K11Cj!He7lGm zt(C-E)Z+9E<)%P{&COc+#=$Zi?i|Rch%$-rgk;pv;a>V_UW^auW%2k$pE$Y-?c(?Z zb;RPEAHn#Se+^f*<{+OIBf-gl_WlMv@!fJ?RlhQOZQruz1oU)%@EBa}j9r4ArLkYR zbol8r<$D)7KtYicmeNOCdPM9tphjC!%A6{vO`zFR=LIndd+zGLG9w!12vpip3Q+s`=7(k0227y6JTVEl ziz^VzT&l!k(#zaW)BhF$eJD<_Oy-B=*@=&VfpLCO;n&eEOp3P`O~YwsKECflU0|r(R7xKm%QNceflE8kY;o{1N~TC?>E5M zyq`HzKQ>mhJ*ui4zR3DEgGZeg8%yGr#DE%#`{}9vW5?&1sVs08#gT*A=@A;Z$SHT- z?lt@=YmGY`-33IHs2%g)=x~F7!t9c^^3>WFyKbaEFI~UHYXIzu@>z3o#WpNd_hKVi zM!I2Xv__Sxole(HPT{i$eWLA}Z(L!Z$!JLtp9GjNnR(WteEZ+_3~*ciiS?#}&rAe@ z8X!N*@g4t*&L8OxNpn*DvlBxP+`)-C8;V6v@v=$}>S&S5?0DVda`6*6upo!^N)l+! zF3L`AP#bQaD@Y!VVQI5b6O(b5$#T>BcMEX8I|_(&pk@w6w2=!$a*}y7>6q?BstTQC zzWDr_%)M)*D8oYbt}sqHIa;(X?^C+ZaJOOA!0GZ9LF<<;cSRu7v*x9Kb3mhp?cUZ9(LE2(ijS+@2Fd1Q&*HCnNRD1} zOLh&H-(h>4J@^|Ik;=zdQYPT4EnYC&=Z!${-vV>+ryo~zfOOiOvP-#&+Xton>Gy78F5 zXRS5g6sk7WnrX59na-~E=-ZD$^OW~gEgsg6HN<|tKagZ({pu?K|Da{)b54Wr>5C+~ zxSNazTDD`7Ii&NSFsF!9CO?<*N-77!nWhkoXEJgc%pd3nV=yH>Jc3_y*{85a2RrOn zJqMV*>m7Zk@Zl+X2WH^w5@?r*`tNv`(1n z5v=sECqkaJU42>8FphL{FZdpwFN@?>+;+9_z05E^#O_T2QK4K}YLkx$*{HsgbA?*Z z6I5SjTDGsQ#6J!%j;G6@;!m#2E^g9zo^ESt|od`gVLqtgWgb$!D0_>x|Zev_VO47G%I<;{F- z)JZN6ee4P3`^JKNQ^!Cea7Y_b>M8`}#=Dc&m@H1R=DX2thr2z^nk+LStMW_KP~jYN zIbxa#_$E)$qsrHt;S=CC8}4^rxL=hWjS$7Uwx)&nE2%Oh~#R%k+R*_m}@ce z!#`aOTHF&iLi2#fga78$in5sp=Nmj!3X3g%H7Jwzs_xfRvkr6#F^u#)liA?{INLp$ z@(Og#^dmi^e2x`PQwdDw+}=_J&d9np+Y)SW9usA8Zl;-qZGR-bYsLSM@=)gy>Co2siZoqJkTJ^R>Ra#`(4XI z`$4vXF27M)<3U!g47qL%2)eI|DbY76%Uf^MGN3H1ymzgz(lQg+e72+-TeK$O;`yZs zzj6xwvuLz;lv(=Bqv9!-_Opt%zY3U?XII;vN(3r!(rSBGM;vLC$RiH1%i_+jGzQD!!Hp*0UrY%BF7bFO#ibw0-ys zJ(>CCoC-0(41U?+^@*LVCqSI$-;MkyLSO(LG*MKfRM7Uf5_V9FLsAhZ4=ysHL>ehw z1kByOb&kban;Gx=47b6l22h=K;?xFXf}v#kLrYtFe3#cfjP8)BCjyht#S8EDrxqr2 z6!c_p!%2c8$pKIPO^xx=%^lQzGbK_Uf#r~`K#g$@YfgtKx31;>I0!EzN^~JTNW0*}k4rMkku&Rd z`?8irf1PAThN)b2<;# z4;Y25!T!T)u@tz;HnH5Yhx?J^oiWLld0mPmmgO0db1E#7r@G~jDvnP?uOVE66pLaT zw%r5ASJUwT?!U0~i9UbIjGNP!fXnBD*M7)nj*Kg9UX?x%`v6#9kFQ<*4TZMW#b%}0 zE=xJNI0<{E5ZlQEkFx%xLEiY(J1JZ!e39xW(AM1QH zFqlP(nmE&CC1(i^Cf~omH9`@l=~CVV3RQ(95}o{Ug8K_F$#+Cmwi0mpaEh$X6IDC? zy%KN-iF^be8ZuMjMJW!S-Opdk|Iq&q1#R^s>C5J! zhOtksO}wR^{eNdLAox*fJe>vu{MApqU3_!9)!(3)@Bd7mERm8WDZxLVa6E2$3&#J% z_x&}-jufK&{})Jzh#j5wzwka`dRWr`j{{^%bTR&4C?Fzst76GNdggCY5HrJqS^sKy zptqYPoL>2F?*P8;h8WGN@qfkqxTO5w@G8i_|GkB4I%_NnOwX&5czlog8KM`jDi^G4 z$1U}@hQB_KFu(twA*-mYYU`NvzHl7;Z13REyScduY=w7@A2rjrCX)0#^^rg5<|2?q z6RAhvWx9XfT1+mkM-|63MLoC_mt+KSJd^ zxv*=!#hqq(*0+gn@HS8GI&R)Ca#Ao08vpVkH=fxblwSF6MK!iR`(RF8F)(IF^ak7i z*8M$iSvtB))?alvE1xxguOVv4@4M!_2{B8AjF*^V{v=X{Z~NMm!_HZm^y_($h1~6D zxSA1jDr$UXO{W66VHM600BsOvshFoVpOPRh>o z`)6OfGA;1O<4py5v9~RG=?A>61+fZZ*je(HsbRKNDS z*ns*ed+-P1`pV5nm0!mqWsVaEg$=T>1& zs#)EHF%^Y!uhuZy{wR%2pAUhlyDkP6>~YHIgEuU*%)87Z-lLAOjys;I_em%8%ASl0Ubj65q<6V_F_j^U+Jn)5H=M1;EAZF zBiOWQJNCDgmiB_R1m426bg3s=;7%rBo!F0vg z)h+c*mSm${ccqBD^q}Cp?6^4{jKZ{^QDAz?fYd)SJ5M7I;xh#hu!31YT65{LUCPKghtu{Z?Q)H5${pk(wXyVzH}u^0O~_3LkuS)oXZk)b~X*^$vJc z$|W>T9;)Ex5i0$5tIIeJW zuN=usiFD;U(h8K0d=qM`zFQck*xM(G5`!U$H!vbo2n*JesiuF2#8tUQ zflB-Mu7cDNOmB zB7Irtr|lMeED=c3{SNa=e;Eg6t=$&Awe}xa@XZARpI7*v8C9J)Mdrs6n4s=?j#;X( zSN1e3-&uro#HiI9Uw{2Df*(L`x^fD`IcUJ1{k z)7iTm8K^fpVCQ=1M5G!0V`EYsyUTQ&O1}Sv-&Ih{g}me7*Xi;jp`Zr4{<7 z-l03E9McpY7DkT)>yk?ZDp%;@?sck!6b z9g=?wEodz}c5+Wwv`;`R-%1nva>^aW)$RL3h*u|m3m&|ByK%0IJ^bp{I)u~WJMLyU zGOA0*b>vS?F<}?_nqtWheum7)uglm7z4@11=9^^{wyi~cjnz_2r9LPfiM|~8wzJTk z1m531$2Z|}8X(IMXhljoG|WB5vVOGR!8e|HbHFE}d(U_l&kVp8HC<|Lv(~&D;8>4CvFf1k7?+xz&n+|ouo*?-V4c}zI zK&?yx3NFQ48Q-gR+{f~{RDjv`fPtkz;CCY@+9mN-Fsh9f3Sm*Qhs+f8+|WZR9^&bb zH=%c^+|6W}3ER$+>&T7`aMaTy-^yljqY2J%?KStdpu!K5b#keK?frrtT!=!t0R%Xd ziR4zLAz=`x5o4zKqC`op-so%B4-O% zbV$a8Z;})5k{HN11@N_+cX@DN+pPvyuwV5~Y+V3AQsjQ;VO#+g)E2_6zXQAc4PDe%M6|zDegul)ciDf6GZ0E2B}(a!2Ywj|NkJ45q_rcE|1XX7apG=7 z`0vvLxQ_o2&;$7Y5h&0O|MwqB&7tvsg$V-lAA)fGeOW;i>O+BRA3PA`=H_OIykY@c zL--#KDIUB+`5M(}slRMB+Yx{x;8zyEUA7~Pr7(y~OGl+UbG!Ea!%EU6Y$)G6D_mV& z-SGJMK!?ZO^&pO&{=sNcsdg(fJU(yO{k=0V#MJ0~xvsqHTu=Z{rbg{yzi{aTgo6fo zs1(Bn`7a+??US{k+K=80x*eDW;<1B?R7!F2@%~3Se)z!CI0vn2I>Afk!W$b|X|y-c|qruXHfdLWT_v?O4Zs$_y9te2c zu*^){j*rK+Yj655!r#&qcjP9^-uGcD}z=^*SG zXy92Pxmz%yb6{2nr|NOZVM!xt&$lbp*O5)^a#s;&TaqCkcNj>{XuY;iLMSCT{y)_# zSR#9L5d0XwHLL{5_dtYh76N&R?T- zz81YFuIGBo@C^zI>XZTIZ&jT=v-CD19|TatTVYC#RCp7gIr*T;*&+8mCpOHKg>gosWoC*3V{;iuF=hoHxClrG8AP~*D zJ&SV%=(E_<-{8h6+ZZCA(u8>^$5g10^=ffUF_@F9E7jw`FCM^G?`)w9iS~kEpc@Y2 z_d*t9m;&HkAT#;w(lD}J1&YE@Y$I2I8|5O_m_-fkFYynWWUb||<_S6D-a+Gcu;W{$ zNDl>#qz%i20ir*|j7G0nQ+4RSkqqgn{;L*7DO?`$NwL>4lPm-JF{pTB)0}$_13{$! z48%^~C;ljd95(CF?fR+x7$fj{T%g`!p9ejB;Jwylv%u=}>Wr3|F=3iiKU*k)vfy<2 z^ma2XjIeW7)2(Vj6AF(P(MT?f>@0@)(Qa>ap^Piri6;!c9=JAVD+lqsXwnwxc*eTDaXaNR|4#j(QOG_)9?* z7Pw9~hT6SW)cI9csLO_Y;eAG|Wtk4+`(v^?6Bk~L7rOpYN3S|7FV@qfqv0}2Akq={ z&sK)+kUYDq9-nNrIPW1~g1C2eWv8ot3Igk)pr=LRg;WGRuJ#eExWD=&Ne%}ojzj8x z_h8Z#HIXiUFVmFi3yv#O=g*|Hd2{Rq=RKls1oalLWB80rs5b*AYA3?Wbvsp?HRDv;71-d z3j}{`eo++=KCx{Y5+5bt``x8S2=ds7^YzxprQKJ92^=dc;p$D>Q9hLe3GrLsT zKTfsB^bkzp;L}f$s(M)DNZFm~>-W_>C7 z%{_h_eDkt%$GL+<@dZ8<#x@oMBu6|GaT(w^qHX6f&fV!=OT-X!xMm<*=`XpveCPLy z9-MTRs}rb6IV=F(%xS7e2w5}cj}ub7=elQRzEF>Kx?mN6q{LCG{Rl%D`R^o{4oNTi zT^D#}-wG)GT@MTl%uKNi4w~^;B$r9oa||BOJXp3PYBD~bCm|OXR#{n@rTKtF0(qX_ z=O41$Au<`eptqEoYrPas*lr9#DP+yY%P4$~wA!=p_`6?i*YC&GsB>dvt2;i9*)tRcaODetk39*H(g(_@f=QOCqo zJFu+Jd@Q1+OPEKddNmH{CEzeTWC5)u?8Gqjy9ihqi2FNBA9v)P=(FR*4uu%5xTo*@ z{!}Jn`{A|%Dvc#S2E%bQl~Z%s^U{wXunjzCNkOm`w##avJUE@rs$BaPjYhTf%byIp zE(N#iOdhvt=>5n!EV^rJKLoX<>HxFD?hu!&8o=0zo8kQF7x0IZh+esvzSok~-N_l0 zy4xHLbzZ-(ZH<@V47lK|)^P!`DHGy{85K7-M*;<|d&QK?*W`z$bVKQETH7o*h^T^X zVLK+1&|m$x>y%>S+_!z3Q9{Hv9JHk2!TDYxRjc(vgHb+1-2C`|wmgei54S+@iOUYG z%60pf*b9u;=DNBRKpv7r1C1x7nO2!^TbhIzX9BO_+zF7QCXAOOf{(>nkV!<8DZ(}x zaAw^sP3u%N%ooNNtG}t2tM$6O+RUB$f}p6cb!+wgAw!n7@1_LA6%~I;8d=QbgVop9 zE64d7j!I6S2^BRV7;HX=);hmJ-pfk$r zONee(V}2~QPhb9VhV9sAS$8oLh|0_f4w~%0(e~rRZ?6z|KIN%A<T$3V+01Ose)`DpqDq0E|JHc9eK5&<`@Bk_5yC0hg zZ8m3|Mc*6ROgp;%dYQM}NT~r(5^&-(K$*GI5=zVc@LTHLj;?pZJ(Ty7J9Aem7i5S$ z>D?}@#(j@?_w$TfQW(W&n1ZVDPbxcj@j?I>|4f3WzQ3zg0W&ZX@Ht#!1#|*jz+QnM5JCoW*Xa$RB-8o-P`gFGa8-K zt+J1#p=tL|U2K7#5(jvUWzk_gf5>K;UZy;NffI)dZxl> zyR=fgFh0FzvFi&EKva9q( zsi?2No=nNOzTD^M)U>z7X8;NcDJf@4C2Wj4O5}5_fywX@gK-G3JABAcXRs#jUh5}^ zl-eDfsn?wEvPGfr(t~TvaT)!#sskRl8TR}vX@<_2(vQ{50P47+MQ<1C2kej)CS2&P zxE=>rexL2wvD%xY$HshnM_VJb}H>@L3l+X(_LJ8OdGt?ydlIGm#Wt-jOg|B-1A$GbSKQHp;klAINd64-wBr zZ82$8nd}mKv9)be)SG&aoC$MT`c0vGQ5XpqVNuZ|>bF*`-a`L#0G+!a!F=pR0vxEe zUGjgxAtMJ&T_~sFfr*M+aV8i8GoDk96bVh;7TFc(^-8z&NoOcnmy8I}2MbT^|(L~Wg` zYC_itfaWBYb5Hd<;^GA)A?ruP4-3vvZ5$S@Z~H!2Ko9so3)F1Bo$J{+MF|eZJ#QLO z=$A|^!es>t6%xn`ELPkU5{L%@_`Vqm=s&(Bbu_k#sO~Hlo?PbKO4eV8HB54PpnK@3 z6W`PHyBlijZw^DtFz<({w5}VZQ$kb!fIr% z@kMIOvjBBpw_Qo1i2$I&;^%ai4o8AVY+dTnj~x+uGWDhj5X>aYQj?13zT3dbcqcJz zh|Wjj+iC>K>T2k^6DFBmnK-Ue2rDC<$>|Xh)3@ah~^7n1A*2#9cDWhq)Vq316H&}Mf50UAqouJyaE8+=cqp&BM z#P9vee~Zsw!xgZ7Y4GWL1SGDjcD+S5lV%xz{#p)Q{R5kwVPum?yl(2wFHLJsCP0%v zb#gLn2_R704_ok_x6^fE5|zr2?J$mpY}L705~M}nl4bMqet?p!4zty&Y()thBJ>lN z0K{^%k<9#DWnGmmROhnD2ryUt7{}$gtydb-epi2r}(jqpuQlD*_) z_JS@_iLVMFu)5De%#Nl0gDqC(8E;8;2#|KR(kMRZ%i$~H&QrHhvfgs+E{b=N^``Gz z!z)>Zj$md|syAJhNQbwhFxxLS6yyuph0ClpxUWlULXfDYn<;*FeRujHz57uyceW7F zF(}QiXD~#NM~$%-^n}WV-&$pTrcNiZ2>B^(-gfV6Waj%#RbP!=qYD#* zY3xGE)_~A`7SX5L#TffOQ}}4PZ(VGD?z49^zu1c(BW9e_w8gGNgkfuEIrfWcN457v zA3*T<0bGTH(v@&&#L`hOVqIijWhzA*3DIU$<2SLi?_}r`0kWLnv!9Blx3zDD6{___4LQW^VKOB@9??~(NSu61o*?iV-^zc1i{y0}u$9*S283;Knktpq;L q9tk)idI&1w=UbL_`ofRw?*ff|SG*xwAfaD?mxQRSNVSlD!2bhA!Y@An literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-template-selection.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-template-selection.png new file mode 100644 index 0000000000000000000000000000000000000000..d523a7f6b0c0ebaaf8b5c66c59144d3a955195e7 GIT binary patch literal 122681 zcmZsCV|-rC)_0oZifyy88(WQy#{+vB z&0d`UgvrZ_!NcIdfPjF&ONf701OWlv1p)ce0R{2-WJMj>{PX9FqoSA)NX0nb(PsnP zR8U3`1f)6!_EjJ7*@m_gS9b&fL2>%~_hsFL&y}7FXx|TVy1AFVRkRS1+-uPsiEnY(;k;0erq{Lv_!xI0#r^CL+ zexE0PNUGoFg_wN#mgt3Z71{iN^L-?RZ9;qt_b)!Z7WPd75!U ziRy6}`;WMNiC7GB^~%iin;V)aiFn4h{F69O_jbuX7k3PBHr+67HSYAr{4*d2o%@Ge z#fu|~$>|T@gw0aott!dW(RUd&e(2smzI}#~h@^#I5f}>WCLSmns!hx@3v9yP91Pf# z?+5ncB@7e4Mlu{#DdG@T&eH$BadEM6o41|rgnqN5rK`?x-Ptj=_HuI%^uns95Iv@M z_O#bhtX=$JCD%1$<;7vIQ6@tmpaC)8^Dc*_+mmh38Xv{4kDX8Kj#&&zuJ19eJ1^G5 z;fBjiA^CQrvQ8g!pw2JxJ8g2*$ADQ%Dm7k_Ao#;A*FR(9v5hiGvKn%oHcAZVCn9Nd z9K|KZeT+~}VAKR6VM-H^gYR|Io?yQd-)${RGGzr=vo;RlNAF;_Qoj3^TPq7(7U6mj zYppNJepU>RecLO8ZMPDRy-Z4+*S(dIws*d zIRdE+=~1j=Eemil>8@0%)c*Dqp7LF-UK?ww!EX_kI1ot)ig@=Xjq!z$GHTy-6r19o zCxKpQr!6#t|5F@#*VppX1-ivFv?azKk9> z!rr{=Ll-+34rK1hH!UQ3#ENKb_@hIiXBAbPqi3JtseZa=@7a{#xf@Xnkki`Gr1qwOB-64Lom64(&{yS<7H#0&2?h~%d7*)Pv}%{wFHTJxLJ z4gC5Hjh(O*jmmbj?MlT&Qw%o;JC#28dkqhm&gKxSGw)%(@9GigrSrM@gSBRN<+RrE z2%0^+$?TJhtzBaZFlDH;_{;#XWQM`zJDOPGG*Af6H<991-o8$Y`u%2@+l}3wbIZ#6 zj+MB--v^=WE7lav;?mL|nXHM7mBuXCVRuFwwsa=5Ng~cYZK@4=BHh|QnAptCTMH1V z^6iH*z?<^u!7nNDB?>srF<%qW6}oHi<@%Copcq#1ySd53tua+!qu4s%V4|d8nz*>T zy*`Md-8XtRF~%5;roL1Yj_=~XnkyXdoztNy1f?0M`(CP2UbUZyrZ%3zs{K0R z*iJFF^p!10XFarBN0jK9R)fvfPbCjC;%I_Wd9nocMn8oY`BJWQ)gc`Kw$xUK#iMJ* zUAN87)8dJZ|E@;gu(8IPGN#IW+HQ)xqFSyMWa){KZ9jwIMno270&f=WqCH45+Kq4V z-cPaLufI^H5#*Z^*)_f6XYj%-*GNRWl7*$shqEG7@Rj(Hr$HNG;FY+1s_h4ELtXsX zjSA`EyG@G_y=~F&-3Et>yKb3KiK62@N4)8Nz_4qraiCi-yY~GQ6lS#Ahp5gvdeg`@ z9#P>SWf0nCi_4V#+K3PRS8d(obt=5vt=1agF-p+ zsJ}n%OceJJ&NRSk`*M;dT03YqVbMKY`pbC3Kr`FI3SA!W_f(33=eXxY`ezm((#NYb z4ZR1y&IlGU&uCT=5Kszeis6~KD7ory8_!?bh5hUS>#K_`?}WazB4&H2Jfwg1rqi(^ zkjLtIwi8U1rwXXzjVIH>=_P5oHfZcDK|{8w>P!O;ho14VSA_XyF=b%*6!ELu#IcMd zYCswJrejDk@a#etioq5H6Yk0g)mudMbv{ST1bUreM2s2Nc!v8*)rvdxxUV~j3GCw- zXsig~=m&712tN8b>+bgA*o?ZFFUFUx4C_^2aV8w^BO|D(1>D8P7FO_NsUB4ANl~S` z*S-g5k7-Cs+aw|gl`dI{Ff;$+f+a)f~4 zWG(-eNe`Sh&Ud>Jj{Mc4;bw^NRECaR^kercxr!jl1ImNT!9WjlHVJNdpA z`CPs?4Q)m{B<#UUj;V3B+*#SQpW}F+@#IopNHL zcf4>oELi#v-u9E=W;dq&b{Ohl&GH&M{qM*2#}dLUBSSMkHy~8eU;%F#qg5_Xwb|NS z#hv*kXB|;doe15rx@_C`Hk_DCRzg97C)xXBE`Z6dOYo^Og`A;~C+~vQw=af;1}E2a z2DRd6aF{D2%`K%bF+GXGiqZVvSVT16;O(`JS0z$JN>~T28hVH@GgbFxQ#T+PtRsp) zR=#+K97L4b$yPwzTCU*J{fZWR+!0=!Y(OL@W4ERPAjtBB@PM;Bx9>R@i9FZTUs{H* zGz~8QuE&dN#tptgm}r~p_?=K_=ZzCAc0X`ccYATRpb z!VQJUUH3f2>R@%$!DG0bL{!ux>OU3xrM^zY*x5@c%90i&xSJ6+7Qx`e>UcQs#M?#ee~cMs23K6nIn4t z?w=V(?<)c<+e$t2Fox@b`zo=#IA4S3Tk}g~aOH)X%M~*Z6|bHW`D))YWK<7TNxgG$ zo=wXq^xj{n5jsOcuD8M+VXD=3*UHivJcQiOCOxqMRs^T4p^>t*AKoKoey}ezls!l^ zWW>uCxroaN@?t3Y7GPy+!|d>7E=|Q{#O9W3EwKb7~roZe6l>(3bXM>C>GqOUc)8X_w~ee}6Ybd-Fe{`%jn zXxRsc-y10`w(nk8QKE2%8@g7V-Y4^rfIZ0|6c`<&y$4yD-Td$D-Ud^356-(IM^G7} zVP+WY>7!ivcHx3RL0CH4qIo(7Hn~XU==cC=RuSzHeJTh=;u$DG%p2KCCpt*Wf1nv5__wR#2tE0 z#Ee`j54cC@-$?wcQ!4#&Ns36m9>+0HN=OqIfl(24(zoJk zu?cE(1AN$_D2W@vQgZCxVEyHkC~M?|HgwSKYzGmPHSG!bQ=G+GK`TOO=P{PF$`aQTTQ+~!>Bi z-hstkRJL-sSz&5;TG*4$esz(v(d5xuLn*&_KyNhmPhQfRTA+YI&!o!_li{|lnc1JY zG4l0Z+Hk~u&K;xlRi?rWa43JsR&w@K)?aB@JXe!0-=U15nM%K}U!U^Lo}LG$TAhS9 zG?xkZ4Ls&$V>;aPMJLbkG8)d)L-i=xKR50<+a+5M5+>LTCRlNk+hF|@uaaBTU>dl8S0`2wPldF(AN<9*v!XTGHtwv)Nm(l$vhX**Zk|jpoO{)`LpH6w zds}tl7`&$U+cj5*zthK7Vj~W1JmPiSBNk6~C}@-cH9%TZ(EB^kMVJhg30O)JASR~` zUnjaPA_Xt=Qceird|#oE9d6i9jsUacs#w;I8Of-hbdZEP$if>-?=OE0|1SLb>Nu&4 z6$E**GHe|ttCk!4!{*(@J+V*c!V*h`uO2Aycfd8gLa6i4wob*P{FJ?aC_oWk2)adR zsQjmq6)be+C-UDGp})h>KVcBmlRug~H5yt1>R-fePg(MC9*#!}EUz zyH)Gb({VqO`dzetUK08_HM1a4tOpPCp5^b8^(^+!6hn^SI%hd(aTK@$(-%9h|4u7G zP-)yx&i*fPAwHS{{}SG>|KwJ?5!EnkF#lyj(QV7*{~AR@Fn?tLMXZZZsUHOTk7z$d zf`pqy{BOFqJEA~I74qK%Pm~x#Jty|RtsZip;)K70KUX6nUmx-hp+GM|e6RqIIBp1}g>vhk~M zDSxu#1wiAU&?bwt(8jFx$OC@oV@n@{U}tCN;Nlvlvekp`E@9fSrz8S}NuoGzFpnai zbL@ONKl-E2VM-a1^U}*yA_>EJb%K1-j@nLc?Jrww>N5DPn!j_8`$Z52! zSZBRoDu*Y@^>6tR@4r&Z8azBYp$vJoG`w67uX8z?bbL~HdgSqvZ$5XN=Em}7z)i~q!~oQGv+rt$!}*R{D7vy&&K-Z3 zPe-g9l=VG9b0Z-jI;yM8KjL#Wl&m~BBjGYu&CyvrVTNMko6F-Zq=I% zm(v`Z-1b?b3Az36c79cZ<-j2j@JFIj$n9L;C15=p5;Sj299pvjX*Muv?d;yG3W*BY zG6a?#)-IK(-giZz=OEA7Cl)z-O&SDtVw)hT-04c&Gzu&CB70Mk-lVM>M`m28&$SmL zQ3y1OasR4Dnu5Ul59n?YhHT}#=Lu`9hj6+p&(3ED+?&TQ7`GR}Y}U(qmu={wu?Y!= ztv*X%z5*1qajsY@@)Cdf!eLN zUHh1W*bd0d&(2~i2xpU)L&|ua58~%tsXL!_4cj`~6@;~q)Idmb&Np~Bdpg|FKm5pg z$Sc1C?W41RMnH@*APZLQ!-nwXUB=;38FsMrGQIOR{_e<)}YGP^@CjsD>(=3 z$QIm-mOItPuZ(pzOJFx_8%ZJJP96ic*RP1Z#Uap+iEx^<`;o_fL1M30m)mT&R#PbL zK2P{t4hP`to^09Ltu9s{r$MMXUp}{~Ao%S@4^ac**Uv!-f^e<1Z?N7^_EW7CY+BIY z`{s4$MGHG^f`&Os48DGq*R{z?^HbR)8PHJ<74i-C~QSn#Lt1#d_&)djMdzncVjJ<&@`MT4Y;2SNU#|1 zSaCZbUJT_9$%rRae0^W_2E0EIZeE{rnkgAG;*z3zq3z-0O&QK`@?1U)ra7a=X{VrK z8uSzEUi@IV2jB~;i;3OF54wAtWewS+z^3$djRmir>}UIq;1n$yP@V@v7_2k!=a|I! z6)9Iys$^acF11Ixq|D~2F9y>WoA97Kv(EG#1luLqu*lQHzZ zLV+!MEVf)U)e%$>iscP2O}ekz3s7vXds9_;-EPv`c(`|eAZO(i9wrL<5e``Ooq_nS za&}daQcT`yRJ*>-|7M21`m`_Ue@2~aaIR9f3R!@dt*PDBPl zpo#^Na@}gR0WTD-AOy0Gd^d_x) zSy}&p_IAAsGm0uCZORq<-+CA?n>)9d=_q&vKh)(-OXY}AmjvsfkD6A9M1hbD-n(k*Cb!>Dex&Q}zgO|ue0=br2Pp(-dI zSKk=hlqjJl9E6ibylcj(w93x0a)$4ZpWfM>4hDWQ*4gil|8W7V(XE2{7TI%-^hJU$G*s~`?I#sL5K5r`rN6-K>6&g@E z0YE8pJblJzAkBUhUQAdn1Y~~p!qj+25$m`R( zv~r*B#;HPH^BC{zT*%)>Ft0T>`S372v&TK{naK6c%Cu5%&6)Vw!LeuB*UOE$QH58z z9dt+W$RWqiKMq0)dai}^Ql%a_bZrQ4G#^$z6x#>|lt-zTDojEF-VhZ+FycHp(CF2I z7T4~}(WYnRebX?i>-}@1surO!T#x=35k$Q^lnkx%k*7vp8M0>zs>k%5BsdD}ibre} z#@k9LE>XNp+Z*x7Ss!b;vyr2+{rPsV#;`lo%MDrr=8lJA-N>)s=%=6!e~lq}wq+N2urdJVhOW3JQxpw_qjraxcuHYD%P*pehw1~WjW#8$2LBkKz6 z((L8C7OLa4@Z~{?-tA*EzU|+1fe#9>t4kULV_fRecd4Ie|EPiWuF61~ER7FQDb-C2 z2X?O8>R-BGySYDx+hn&7u{x3@cy)SDyPjkbCSP;7CD8>2MT>UV;s(87yKeNR)0>9+ zAYZ4&X;h7R$w3cMQSnE$fbz1fpB?6VVM&F&QH38rW<}2cX`%fHgEB2xwlpPTEG>rk zunbV?kIf@zCG7iBOG156o+G*{CG$d$F088I%oKCe4k393A}VgtWmQJ%yCp7gnUz2$ zd>7Q$uYUfrmp0QA)Q9_e@qoNSt9?BAj+{QL6I^LNzDR|tylH%0ebM`|il3NIXCi7Q zz8tOOEmrh6r24b0bfZRRvbZ>#nN-rCu4kP7_2_u>?dx=p3@H)GuMHbXfcN&u6BFFtoAyUIvqa+3@v7@fGL1$ z2VVwvAK}4)ny1NpBgZ6VlU?Hv(eE|sEcU%HjI~{N^*Z%nOID0z>Rzyw;9C8{YlW8$ zeWb@Zi1ZX`A4HBCvo`S|8@L_uW6!V8(%ti>%2sd&hKpm8-$r_L=ip-uZn8#U>!>3D zF;O1*4pMFA;?%Bh2ty@af#rj}`W+0K8(LFj2->7~Kg?w+v3|?`q*q+`)ZK|r` zO^4*Qstg^}5wT?<_MW%8T)%`&#+Ql8=*Y1Gs@h#m+XFQxMe!(N@XKlI@E;E>z^l@u zUfx}+?2S}UKTgE7eqaiivt=eT-*5F5&s^7Jb{8iUR@sl6HAyD8vlqkog=kotkTZ{~ zld56XVp(;b-oaMx-ktKIMzu0w7>)F0DXR4o*Wcr;s&m3v${F`$zT{kXkd=qbIBI~9 zo4;Hi)49{P1lv-`CJ~U;bD^CxAr8s`J=iJ>1GR)KJJCamtS4_@39()3qw5>83y={xM8 z)@smig>o@Y*vw$|t~zdiZd&SSu``xx+Nv@Z!&xoy$RQp-)pRHX2^{xRQ_*KQXQ`A46Ba!GK#%6NW3k*&*03Iic`cP> zqeqOLq*#5qxD0e4-cp)GXCi~G**+qp`IH{;RJle+_9G#VQRki^Vt$4kKrO4YOwC6_xg6iePDHJdjC zoam)!?Hi&TACxHZ@U^p>tg>et_dZWjx~mic(rTr4SOEBQ%2KQOhE zt^5VILL<{0bDXeU=T&)bFTb3IT4R15KXViEz@Q@?Wi(ko#GC}3<*3}A^x6C#m8kLSM<1FOW-H#u zHth1LJ8aAZv~W?ny&lIA$XXSTuS*u?^%H3Oln3PXS{feH7jwWLc)C&JqYYgORJpF07!K&%GX|Mh6@r)ZJYE z;@~JFH#u$p+TiGlC@Yi@-uYDtH7bxF8sPg`ddDJVwC)w#I%eKouY(()KhmEd~24yx^+hSVU9FTd(q_~uYVNeXlC8~ z^R*bb>!X-6_)03CL{*M88zcr38Wsb28otvLW-RV%#RfzfD4_hAhUp(WEeoIc3}~fj z94PrxpBZI36ped1WEJun1(7W|4mm{kn}+GZAeO~f0?p=@1}7!zJF@#KJ?j98YCn&F zH05X|C8+_^WiEox5HVt}ZxRH9$OE({Q@w)5ZW%Lp)No)<>?)l|x&6?KFugqx;>%D9 z6)W4V4TNX2=l*l;q~$7GqH)BG&k|K+dA4XfDE6*BjY9i`;$lrcW)^i@w8TUf>i3RB znq|j3>`1CY!Hn0Vtf*SijRK?^BcxU_F%4v@WWVH8c>B|PB5Hdc6<9Tf&?G`nvqhQy zHB{ej^~?{AyoT(Jjl#)D%%$iBQj+1wA}mse##ea$WGGReX8woggxJbl3M6!h;y`J4 z>GLE2?5};a))Wgq#DW*wu7Pv@%?Fc$K9=_pg)>a>d~pCfpZGVpskqS4NEzDcgklVO zYwVx|X3al4^7@nEVrmZCU#~AC&A=*Y*1_LO*)Exn7#)V?n)vF&I0$0eypfMfjAf5~(U z)0G7HDiVQ)qDw7h)Nfr`3kAa@R9G+eyGfs3)#q_tKnI(WNEKw1AVNl1b+co&*8;=#mA_i*lzm+^3wemn+z zY#PDVt~&!(8IBRd6Bw)$sNJmxfIkZZQf7d+uApIsfD*&zTS&qS{>MaC`pTL z*Wlg$BNPwa<$AnEt`UN3W%O>#X83F_BhVY0P)#N@ktmthHR*Zw&#$aTG+G2lz{O!^ zh}yeN_yCyzyaHDt4PySid=1 zBIg0Gp)Bq-N8`l=4~G*JFL)~X-)8p*&tYD>F(c~_*~-;tzdBjIc@7ziO3T@84&kGf zs3Dl+Wp0q_k`rwXQ#}SAZ)L8d2JxKPZ5l9AC)4=_3JPCj1f}rtQlsxO>`V3pwAsC_ z8|u6gn19<7?$9z%$nw?1Dlv5y^C}%vo8f~!=MNWvnJ}PCmRZJtCh>o>+e>Cp-mXa$ zB!AlB7fR&6*YypTM3?NMCkJ_{;O|DXT0h-$kATs;*+K=)la0XZA0aIj?m@u!BV^7G zbohj95z4E{{>2%sZyaKuP!WB8T&zSC8@Xn)f40LX$y@F8HMBXS+SoB-RYy({gj>Nl z?o6FIuVz|5E(F}z7Q;Myc-@B0|M7QNyx#ce>cqRXRqDv-U%vNU8W8RVEYXI-n4T~{ zJ624%MILga+R#BLFn$(zc1ck_i`Tog@-2E>?*WUKmOnWCypWu!X?eYnEJKtNQTf11 z(Roww`;*+Y_rU)aJPor`xS*e;l_}MJFV|l0?+O7Q;B11)-76vs?142}vYUt1W^I?p_* z-yzPtKm$Ys1Ofquh#}j)kUe(%ubs8FSGJM=miS{Q&X0pUv0S;DCuZJUkD@S&;)@ec zWk9__t1q8NF8X-9M4mmBK&~JxzY)IA81|5V^fAczf|DnpQTR;1oMF7mkm zxs|L!CT7BTt(25})lztlD*FXPb^1g6q|84+^iQYULslNOYUNd`B*3x9=;^}f>|+7y zbbfGr96`g{A?XJTV=)0P8&9C8f~y;kyMM#UMK8Bj zkmOQ9Og$MRPgvK4rgwGP*a~k1hVjga-Rm~$AuA}x1+>4V3cFFYXiN0krJ14jvnOa~s|HqQgZo|$Ok<@3b;9Ch0oYTVcDIPpBkAq_K9kn3++L+57rI&cFsHQ%nfEG8Nf5Eg8Bg1W~LqVHYA z3z_t=G$&3ff_jMyzX$@c9Pm2}7UVn@Qqc$CuuPlSfX5;eQUOhA=OM28vm~ zq43`K>zSwcQ(8fF=i^>Yws0CMC$v4bdK2^kn*+R&A@F$aL1^CU9}A+n@9}Q?sWc@= zZGm5;lGg%bc<95RnOz}zh~>COi!)KYO?3s`?%~wrm!R9C3(Dn+uIZ#i;XNskyTW;e~Yh-}Dz6C^W?4`cNhkD5aZ< zjGI;#Qz~QvTG7>>BUP5-m`Ff*5o$Km$K*0o^=L1rdLQOV%dV6*D;t{iI_yxjCo~w_ zh3VbSn!~`RL{ItlLr_)NBP;jAI~;AQ>`SuimNtP?_%|ziz1!s2Rc>kQaGa|OJnb~W zY{Ov{BETwxUb=jSG}O{#j@*lHoqdQy_V!GN&E!aT#~!)7sNWYk`z3yqfW_CcyQBjOXbMQyd%Tt?+0u*6OC{JI1FOj* zXEViNX!CEad2Q_g9a@1-WaAJ*$0btR;yOE+NP*ZN0E%)nAF4!{#o{Ep22*nv4SS%* zdvMmMgskf%)zu_FTFPr4W9-<32OEDQA@0&8P90?m1Xn#o|8(=_XF+VzypA$MAz%=h z_R{2}#9e}oUwutsU_9~!0>C2qMb_$9?R#_h`O4cCuDL+j4=}NEn4^p&TBDf3V9TjR zhegbGL>@skHx~bdz5x|ndHPQ7>!s4E8V8*3&mud|Z+5%GSqSvcMF@f8q?GUjorY4Iy;?n6rKF7*U7iu;i zjLFWZv-Rp!I~F_|b;fZF*mb#rjGw;NPo07Po+NuAAAb$$?QE!#I9=7=7Xa<2Ja>b?H3rk#`QC(#iG5w;E(7}$Rc$~`PHZO!<-R-w`7El zLzZZQq3u9B49BY8?^DLJy(@95S|_ez?gNq1ZNSDaF{a~0aInT~fSukbNDEc3zSL#) zOp9O)-lw5#XNa6TY=V9eRTxx@&0cF<^`|>G-uXZVgG~m|+U*vXnpqXS_)MjvtihkY z^g3E}7;KgoMc2vFiP2D|!iN~CQtq#I93+8dStbI_&J6(4Lev2r(3dRG2XY&p6qw5) z$k`A&sPnfkVDjx;y6PI-87qbLfjEj#Y4Lpn+h{2M+7a+BmwBi_vsn(3{tI-?IccU5&x` z8uimlxe+JIv?&Cg7#XN-IqG-I#p|}VyMN#Xd`!5opzY^;{T;Y+R}(>ui^h_W88L+W z9zpthaYT4f;bO!XM!X1N{m2)EYTlf9SG0H$>}q-_c|u?8|FDgyF=AO(4foT5_kA^w zj%F7=iACwp=wZ5BHH2Gx#xX?&e`6a|U%VWLMTc z^t-j2(2q8BJoyg*lb*LPnnoW=|BI)8SsKuOYg_o$lMZxzXvE6(6;$5} z+E8K-!4dB%^4nJoD(03h8RAc197Hj5=OS%X)_g&`Pp*ZJ|Kl3_8u4J-EBugarIpv7v8kC91ZE7okbpy}-Fe6}v3-YAG4 z9AG507RnP@pt5bQ^BeXTc7arNMY>%wqe0Oy5d#Xo%rM5TdV+1BfNzUi&u@&6fnfY- z5>%bDf1nNQV_Rw4CBu}(u?Z*kL)NekXN!8~W0+WQOjJ#cs#G_p^2`=jclTqlI0~or zM^7y;i%!G*U0{?)6F|o$VQnBa<46nOTbDdsoMyYU3yn|ukxPoyPVb|{25xOA(^Mj0 zU4@X*Y=wWpQOUD88_Y57$LcAo;RS!N$|7=`iYZU@1?UsK+OtFhuw&^nXomA=s@+2a z{OCgFyAiNiOinw|0lbNnz%{^cGa842#zF5+`PI-W!IU2C`r754<#Kr*#^ufPbAK3v z*tc&w>mFNAl;BmHnp#q?gf4_VS*S)*#ey-4HavIy#-q1)XtBNsXt95xH@i3Aat0qQ z4=*((5~UmnuX1kv5EUE~uqhx+Qj~^5aJUV@KGTQ4@%hue8Ka@NLgIU9H-~8!G3ov7 zD0O38j9=%8z`u~0A$GAZp4_Z_9$^+ipt3G#d_K~knuW?nd(3X>Bs3 zzp6sl`XBUh7o2A8+-le0(u8(3cG7<-Z2U$XB|h+DLu^7MT(v&WH_+- z{`PV>l?OQxh5Jypky5RvMXGmoX@b>szg(LQgxpC{y%iZzD0PDc?ERCr?WW(Yf8k`v zjsIpWDV@oK9fiY+;y9E-uN`hNSE4_iFJU%chOJVm6UAydKP3D$0C0p;0CK_XX?H4% z<%E-zTBdk%xqFX%%IgXV!-h{VLX&90w2<*JI~<6V0bgl+Mol(*S}9uyxX70;>3gr! zU@KdtC{!kk6dnoAVa)oQI0kx|U#O43Fyx}(;?h8D^FX%gb^CL;p5wK(w=>yo3c%sA z!TI?37<6istBi`MQtPr(VJM%R>J`p~3U)ls6y>1L%o@1X&l6a9Ge+ZcMv{uf5cg&K z1;~P-TQ&KZFbLgQJZA9wc~dY5+h&1sS$;xsHX>$H-m;Cl*%908@9(PyczXVTLE2qD zVuKIX>`h9tgZv|!KriTvy8>BmZf>n6yDxL4s)Ofity2Y3n4`Z~VR=38`x2>?CUZq# z-8?)Dp04+{r80RKvzQEnv0^(*XgMdQ8v4Yxu4W3M;Ne9M6DUH%8-@CV6+Sn_*OkH| zu_AO}Of%QGcA!YUh3)=PbF*w}$G3br+bfE2szgMp&PEM2gF8y}VZD5+%ovxYNF9v% zVI!c_5+-ncF_4_KG}nA2*=(u~*<#irFhW0ivV^MeU!0s5_OPpWal(O17MHUm+<-f_ zy$)W%=U#4)097lrkYB=LVlYRdv-rGmLJ;tUGI`uDJ3rnK|7u)qZSCSjgp;gI6K^N# zwDJA-4zH(JUPle5j}^=cSr@yyh~Cln0K2tXTrbi*WbCZ~wj+9j%dY0oMn{O4LRgm5 z2xh^pOPw`Lv4-*Q@AHmG1PppIzH-v3jqvvfT}2fE@(x2Lso*Yz227g^JrK79wNU=i z!$to<2xA$9-4-km=`dhn&?tXOCQ<7jjAu0Yym2kpnFpk%Vl~Hn|GadC;yAWYp&jx0 zZAS>U{V|Gf<(ojm4O?Bq?D;sS(`xrXZ#;iCv^lT}oz~3pIu7xDGq^gb;uEJh)R#Bv z$<~D=*Y`?0Z^-yK$s@|YzvYUh@*$JNEwAp>JGilbl=KW29rZHOpv3+fUAIy z(twYeM;2z&6_LLLQ!7`t`WG?iMI7!*D{ND{w7I$Yvs|+=+?PTYNa-rEULcjyhspCP z<}i=D<8D31A?-|4LxuVQGS*KO{ds#dLu&YY)XsIj#{xBblXDqHpg>WmTWYC_h0Jn) z&l)_42w?)uJ7NxI9-6l2^WuTY8OCCB!B1XX0&*}bgd;|efp4_hZBVfL6aDdIQq?BX z++Ag+h9v*$@y!ky>v}U>a}uDfjn+*|3kW3nlSG4QG7hA|kdp|9+%l^;Kpdf3WhzL z7r#RagqzLN9vnAlei%r)79{KsR#oKq7kJqLM-bNGC@_At`P`4m!fZSo*x~(>YrWFo z5dJmC1zm@aT%DGePc#OL7Z#Yncw~r#iW-5H02@4>8R(>HLX-|$8AJyETlY_NaV=!e z6jlHwST_3~h2}YMVlEsErc%7BRJc%s9gu0g<(7@D_9|RuE*ZcQMc}T;0I|qpntt%>CWR}(!UFygE2^~^k=Jmj z>oFe2RVZ`QezcSI^a{lls1f4vIlxI_jP-tAN2oU0K^Q&M1!K!o0FwV}tFv$?c6}~> z0x@YM!aEoL1lSU!QuLqD_-f1BG{8`*hT<70n;lguff!(;qWQl@>jm z-W8cKp_^<|N8Obu_v<$DN2gXcn}lvwqUt}waXPwGI-|CmSJOA{<@`Mo!i9bvYCJ3h zK?;D{$%YO3!^3{yX7c+Im`-H&*BFmvFP!wJ zd~=@*g+7}3E#vuVwV_98H)Wv)P%pDr%_QN@-Sx%?Cw%u!-(YAb=lN-JLAzlBrfzA6 z_V=a}q5~k0cn*Luq~^Z=F`LL2>B8fVZBG=3j{BowR!cQugrJh?Y-hDKd#`|rz}wkk zrOvA$*}t~`6Z|VhTk)R#ZMSVvvL|MtBYyM8(Z6J3587S-gX@KQ5+J-*r1)2!yTS_p zh5KTP{LgPA{m)ZVf&M4tA^rpt%Om`E?a}{V3)2OsnzV}#7wK;_jgHyfZ4FCaFR zf|#!k_H&$$rYV)mkjT$u+T7l`Ygi?d435Z#4L88PKxE;YDb}-4zqP5I@4$LEfE1h{ z_OFHdr?y(rJ)=d4bVkEZ>CNIahosP9KZ0>1EMBEof|2a9U_|E`BlzGY3KhF3?bbD7 zVz}WZ|KtvJzmYg^MR_wL)L5YX*%K6=%hF1aNdE&(y(V!WM@(f^iy3rpI9c#x?_jrs zpUINe=0%KDzJuNi#$N7CFWkdltePPtRSrSUWYC=ojX?+0csL35p?lTcG501_#(^;F zCoy=QC#z_^4l2?M21WEBq7CtWH9tv0^AUR>WS12iF~{+m4Hu%cWxzKp^^yJ3=o=;n z5^%Uut-uUh$sDVCf>6o$FPCfvnS4K~NT6bNIw!~0d?5h48>|J2@a5sGi*w(z`yniE zjb|Ol_gN!`@Ykb+iv5G%=8B#oL6Wl_Ih-CD zqxq!Y`P!s2$mMH0Jts2JSF&`t!vc{UKd`Avi53T?URRz6f7#i|_<@Q@=Bk}X8Z5Wk z)h$%}{*b3qi@oE#I_ser)6(JlaG6hqc} zAwHI@spfi`IXhZ3>&0N=o8+adAe3k9%Yx%oqAgY|xf<;YpFz&rx6#!ED9kqrQUPLS zBtXJo(u9#@9u?d&4A~hnJUV8SK z!HWi$0Ke(I_g(KFvsTt36Ec%C=j{EQ{e1QdTgi_0)kDH@T^6N;^-HK5GK|x-kP0Da zed0l1Y!hPci9GyH@-c@&tASQ{u6^t|z!>H`^lH5U6~4pFp%`TRT;uH}D#PE+MMMD? zvWz}3;3h*>H{1ZybAp{xz3(9t`fzIxjvhG18aQGl)cKHS3O2ljyUcj-iy ztB((p`9ga(@1nme4VxQA)q&q0HnG?zW^XF@d#6ps?E>X|51Rt+zA{3A;^@xXIml#7 zGLq8juP}OJuMjA;`L$If3ue6ISPIUm|A7Dkr)749@Y$8nmE6az0=XE*SN-88d!DTm z2+~rDl~TRp$7--gY69E_Gct8eHjVaoQQ8&_dm+&cxxokcNHjl)pGNKtnD&>s%fa+F*MCM!?-Aj$( zvTk|iegHmPcJ7%>?D*e zz0MGXt?6#3tiY>zf0w$jV9UHRxVpc0&+%d^kR6~J+A(`B8Z0NOqpdq1m$N8RPn&mi zbr(w$p9Gx*;_J%WXJWc*$r=vpbrTJmSf&;^%Bdkpzt^f_ML1-FKU40< z-1-^vaBExr775le-T%S;n_%>kaW@|H6@%Z|@T2dW;-QTPP>0PZF+S@ds>QJCh(R-b zE$BZJwS20?_ur*rb=ycq)u$pv0duSgJvy4;b7bt4t%2KAw4fe+zlJbl{l)1FLG0Pu z8%AB-El3jT1L%QOl{I4mr_dE)v(zDbJ{WYaIr4cVC88_mu{UZ22_i}P1+YEiV^d)JsH zia@+O+-SEt3jc@WiRp1v#&SEbgmD3(W?ct7P zddeYp!ds<>(q=Ic1d>}ScIvW~$uA@)Jduq&L?F+3LK`cULzL#@!?*f~z(*zb)N*l+ zB)Bj(Ic0M8bHlyTRX>IA+@%P9ro%`8+-UQ|X6ze-UJHDSf#DOgi>WblTU)945;TUh z-Ui3re>%?SBWCn^o674q@t_IYfGK^{#@oh_eFFT;?n1@NAwPw55NU(pRSHAsFtq3M zee?REt_YTL!}IShRjr8!4W{>AE@m41pqp8*30qf|_CL;#=AcNOi$bf5Z+n5- zugT6USn@WbixNn&8!kj2b<}&kx{oC(#iH@$Wm3CoC?)kI<9;A6Lk|Yic(DHRQ3fAV zE2nw(gSNYTI4e`+qMDAzOdym;-Ve$rWcy)Btp1+`ky}m#8cYs5X`Ca7Mh2j;JPGFC z+nhG~TsBO$CxQ&Q>R{C&xx_$~kHbaA;XpCKKEncK_7rXHbg>Ox!DlIY{sWenun4^9 z?5{Kd-bV(m49PKiG|O&H-w;{ASH94Ub3&a~K%$e9VIfj4!XNBx8Zp_5Sh|QV<+R-J zN7wDbn9F_%Tqw>iT&+Al+?1!RlwtsQ3J!9(x`ICd>W<5@Xhd zXn+sj3CBkdhtSVvvT%(chu1%OPN4OSwXX73p-c%>7U(n@8~b$Ah1B1llUVADG=g7Z zrA1W7cKgjA-ur?XeWs^`K0hmE{1Kr+KWGKbedv(pACvcs4^!mivx)MLbx9X@goL~P zkw)5(bTwrt!#E7((Q%*=hS2$+u8|UH7Hog4BlADuLBaZzZ8SP4CR342c~{YV`}vQ3 zN}VcM43*hXiJ9C??H|@}e^n@Q%W|Y|xy%eB69%>?JBD8P&Q?Q5?hRSM6IAEg^-i~1 zhcr2g9f6c?F{(qs0e&3r%ShEZH$-djwbaXVI6b7PN8w^&T3dYGLQ=Q6$fm3zQ)({J zxv5Nf;|CFsW|v0SXNK2V4cK^smi5-+7W0-YsU0WkCD`T;?a?bell{F&l12pZ&PTz& znywNoZ+brbygYbcO};@wBxoCxBZ2 z^nGoU`|VH%dZ@t^o#rod!pkoXUkS}l)gh4cmHItln%HX-y zQi!e%@`A*3tqD$Q1^YgG#+w8kW)7oaJz{ZRoCn&sJ3cJ~Qzlqi`9{QQ^z`1Wn-Sr~ z`^HlaW*~>rItKOXa?e^~%{mr;gBHYfi`w5=LoQ0Rx0IeE%}z3`^RIp)T+I{_h;zT* zU2oZ{j%ZO@5DZc%};O0R;}DJXL|g2 z2KBXq3h{m$_ILoSnsbW@Ph8I8&NizO4a-Ds88}*n|Q92)&1;hpm^)!;X)C{J*B6suh9IV5DJM;>~CK8kQ>ueZdL2iO`E8G z1>3CgJLJNL468#Wo(LHC#n1@u$^JWZr(g3Kt^Rm~7*8m7Q?-K%%_}i|#nkguoJ!l8 zTn%LVHQl3A=OP)xKM7hIlWlhkqkjImB=Qu{7%0*zPFlE`EGhPAX~U+>8roiU7sO+^s<)JF%Kw|mDW)bQm%n3&HC(_H=-^D39jkzE}_ zZmD*7o>vQGbIh%3C8|ZvOMNIpL>w)$9zG!Qm)pN)6@O_NRF~}Xn?Tn83t~~B1zfD? z1@_L8!|#kD63$Wuwb*CAZ8}C2v9U?3l}6-w1qGAAdz6fx4{uYw(Lb|^FlE0HmUvlP zyZy=Gh>mX7v2)%t{I2wziJMsiZWZ?J?Xw4ZWfKKlooX}m?mB7Y@O_O%^I}jg_g#T) z6cX6}YOr$h7-}+TcU`H2i%iv>xP77b2$oa_6TB-tgnKy0#lmQznAAwvszXaCm{28k zccPB;a7Dm^Cz@W4kFFt&YM+%!qS6y;{ah%#%;|I0!?1G{sF^A>Yi1^0$4FXuLR*$b zRr3MAQPHYo*y<~l(Q-A*8#TdVqh@hqpG7L|0<~dxhWzZ@=e(WZ{J*;<0Rv9v(`Gro zwqF*0NGg{4qqT@`_DSZW@ee>O_1b@r^glMB%0l1QrN&s(0+B@PCEK?$L+-HwZ5AnF zntl$eJ?q6ExN_-J(v6QdiXRM67wyC1bA#NcNNA9zLM&LN66hv5y>4Bd^r{W%Y3vGX z83yD_u+H+n$oxSh?}6h!(M5whPU|=P^(N0DzrsqiL}`7%D^H2>erK>$&eK}auy^x{ zItd7R&a`T>sw+a`tV{eko&Vv|b=9@eA^_z_&On=KUhckobEW zQ;S8)Xp}47V)v&Ph`;N87EvDgI*QmqJnm5A&Tb{aMZ2$3XCDkCC&~}%8FiXe$An)^ z?Vp^y0*%sBnuOm4>(jd?Ma$j8=mF_Szi5c}%%G@zZ)WHh>w9n(`RR%gYTi}Dy9FiNYKba{VZ7bSf5#UfgB=4?2 zt?Gu5hG~^xPC?qx$d&BquOWA^;)Gme#HA}Ksjtl;KRpFX;P4vK28LuNdCFT;W)X^2 z(7?29|Ct+FeMsC#xf>--uE@AXJ->>PX!3V-rIV_}%r6gQ0-x|X1j{0jMZF|LqZM?x zFCV&=4ThJS;)s>v&JE26hlUKF8xGK`O1gjnt?Fc?T z-RGbihPvWVn?ggS_j1kqBNG}WCg!fkD>!yKX%hR&r}gH}25kaA3uJZ}DaW_5O3L9- zj?4U74Q86=6l3jmQ<^{ZW`%fzk9MI~J1;P%6GQqR^UHF*xHkwbP0FC+3g%aWR}lqL z`T*yd;B_!NiNKpXMRYuGHS;C8MX}QG-}l5l@_S2T4eQ<$Qh-M@(W4@CHL5hC9Qx z-#Z^^fMpeb8WQeIpkuTt0XsQFWY4o`mh~7x3iB;zAxQk1HuElS`nJ01dc3m9 zj`>Be&64yD_-mKcp7MxRC29u)F=vm1DCnD4NI1`+{||xum=l$&Mo+;K`D5x2VB0@r z4>UT`Z9-r9uzAH+Oz!<8xY5Avs*FQ&SSgewV6(8eO=65N38to+d@^-*16zZS@Cg*8 z#=7}*jxBlpn<_*h!&`bnmk*5L9odB25k-W|&fSkRJI% zk(NZg^%VX${dy$IFjN|i_VM?w}N;k#BqTbBfoSV0)KedIhu30`k(7m|Hv=G$?+^Nv!V(V03uW$eu1s#sZ`FN0+^ z+(R~38)g%2?%^Ff^~q?{SxV5~$%2x2cIR+({T}41b?=awAfo3}U|)Lz_GS@hvQF*S z^Y;E-;Szm8 zr+|3L&Nkhsx$oy=3G#%Up`fD%yWWFMz361H0JW3O&~KRpezp_s7$;!!H(US>+Wd?%du8^O2|rvIl_g|Bc<_P{pGlWVs%>V!Ot3%d4$oF1#C ze?ed?O%`?E&KwWI>Z>zs_|(vz!C@u%Z8^HYu-Um@Qf`T~Lv_~O$GuxtYU}1GbWQhJkV3sG=vfeO{`5 zWIX1txUPeeD{I@>CQR7$YfRM6Z{sCDX?(^+tW1@kh6EngEwx~tFc*173W+36knLvj zFOuEk?AvymLQ06yNPI--9bJOMVf?(+Ws%dgYur2 z;c&zU?O*M&odK91Ut#b8=Xa7b!H9|+Rh_lTI8`H2g+1H^*)DFRfw&c?;DuC`-rw^@?dgyol}7QaNIL!Y@cO_T*xDY%c&zp0pmefg^e1U0QAZs!c(0$0 zuRhp-mc@Ag=5GrLOW9qXFv8zhvv>Pe6>~-#dD(3TE@V$Hdcji*s10Zp?+`mKwXR;` z7uv`TC0~9gLwk?8NC_dxG-y@JeHnB$_lBfI>X;T!N;a{Z*ICH@5CRHM?`x(BTf=0n zywA97?KTA&NNp{4@b7sje=6s!n^~}gHjtcx9{yvegT&_#UNU{{#Lir0nPr@|-m&;d zhJPE+kQ5TZhy}7no}MFgWDGorsv67*Vv1V@nHvtRd@zn*$;7xC>=l*XAT>68Q3;tn z**v~CJJB|ESpE+&Mpa6X9{%NSiOYR&EKcx)<~)HrZg#)2;p<*Z+p!N$^Sv9>1shCX z%~TDYmdo%a93!K{UbM2Iqm2InVqru-G|{XblK@kA6(ZVT5xAUXA-6cSzPtRn_>&85 z4@^64*NaH#68fn#mVpu(y5}|$Vx8#;)Zm63Q2t);5aIW^G(fl3M!HoF$MEVK>v`xv z{T#DdX7rek2XZ|_C^74}pRx03dnqZ zW-0~u+*+y%F?Te)hHN)>DOFkFsn+U{wRNDWEPBEtW)&5Y%g_y5n`-<{nFLvE``WH? zC+i{AaEuf6mLTZsj~4z{X=*O!HYkX$doVOR0TyVbc&u&5u+VP_2aPI4w}{K(n|}?G zPT!V^#Yo#?<=>iikadAbPjgiB-w{_S>ke3b7RM zt@XCV%*M&B%L*8Be+VVvqGY+~NwDIo59`oVmaVviWfuH1A?*Ms506xoRbZ7tHJkl_aw+hn!s zDVJNYb?qye{dx!TIT;a$i>VNAEV->edr@tH?J_R$!#N`qR<=m8RhsT>oUO);8q#@M zP1w?ncHu&yQ(XQM#J9@U_mVz%=cP}Zr@d^K+@!EvU@WF{>I);ck;;Cp8PaR%uG1F; zupeq--CU`j(`_!k6rOr;zBv#-GcKa%ahr6=lnGkpjZWN?KC)ss(Tq2>Z)?=v6?ld& z?_jxEw&F|Ddzfd;?<`grKLXohSG(-z<`s+wIgh>y0oG+1sse*kS^jazs&g}0^t#>^ zUtiR!htu$}p!x)9EUFh*zhzQ9wI4c`2o1dVsIzXp)g|A!E4+?Pit8JpnaYf za*I+bo7SISf&opwIB0`h$A#dAWYGu1VXw)Ck@WI+HmJi{HOc}va{kK8-i@QN@74ZB zPBO+c^;ZaaIISL&rpZ%9UbdG)ls9?0t6qgYQn4v;=n#;Rd#-)(ahZhu9c5&y+=*Vg zNZ#FVE;FZ?Oa@S15E{Ry3C(EZr;dMym=uTAM_TsToEwNgc20)ArPkNHesbu~W4;Uf zQ?3vid8kP(!loV>7efRwE(+sc42TqttN*D<&2u`c8A8GhZJ25?ckBEd6eRVBZ zSXkH(fFpNXrUyJNI(p@?VBaoI(wSVGwp*Kr_e2o3XQJH1PhnR1$K|@`3&9V4B0*t& zZ`QISpEG@1&`uJ6JUUIjt2YeeIS!5U_+EYNS15%fRH3uNC0_AOIY7c40ZqJDK4^U! zje%2<94os(@l)}9?yEM7$cIwVVFp*`${&wk*Tp!-D^zSse#|Np5WTrKB?-Bs1KgW$ zWHInoE#}i7kJ^toZ5mN0(Jqe;L+$(t#oqS3QTOkNd1F z?>>>RAX^*s%t~hzC5mprnIPiX=+O-HJh%oDhbt8pxpld&{&13F@prdVA5ovY$$EvLnux8bh|b6GQIKb(P=Zd&mbES?>MlRE+Gb=;h=6QLc zE?mHBFXe`&YiAr#uz#zeV;yII!Xx_gx~04wf&cY(DP<`1A%Y6Th81evzJ@oqKw2o< zBN|2wnAv?aEi>n6KxDHh@a0s5!v~-00Ip}l6)GrqGLEC!B+BBs63x}GMIJY{^1Yjm zS6s~!EzD#5n8kn{^y%eHtWYwZ_G++9$Z}r^l)bkhQkc<|Qu|F!b0k;WTK{xt$*q&4 zT*szwfzycp)ihWHEZPIyHZvUWgk^g7ZsD4u40VgY z0wBLRhh{H*OgRYj7*G@nX0j(zX&tCN8Z`&z^T^@P)SZ@o9vJPz$KC1ngmb_&D zUWnB1*TRS?Z~M$rqZq}d>;mocrJY6* z+{Kc;H-#qdOTZYL`a>n4!PA>JL$~P5Dx$~gg?C);rp^grX^4BS9We3s96?a~SqYl) zQjJNrFd0(3S{TnOX24<|kB3Oba&a8k;T6D*Py1^dZRsBUaxP;&Azo+;q2VYzxTWu`s`r}zk6NWNbQ`QtLGb(3*Ne;-)n>68=l%P^5BGm# zvl_J&F9Lm4kAFoj^ynIV2%!FK))tS8C}h-prbKw4_aZvC#Fy^Gzg5)=^RqPwlY3XCwZN{CCfo-R?IFlMNOJ+0(s8ZUmdBn31 z#t?e7jH`MWHulu>x2OoN+D4U4ISoa5awzgf!h=krx_4{TlQmk#9?y`-OOEf%cS~n9 zLD>gw^CGu(I+ttT6}TrP5zm+46Jk^)01(o86{*jutu%y~H6e@?E+!BhkNHY<;#8fu zFUjaj99z>oicA=a`<4+O@K$Kjh8n0zox(yPA9GVLdczUeP2 zbQ%xTB`KA52$u<1^CN~Avf$et$x`wr?LQXi@gY(__%<>y^+u_$+m_NKNkm%Alb;C( zavm}aLfw@S%nwQ^{F;ezl>6R^j{{T7Wk0A&UYkCtyA|grpG1YT#A0V=BKOs0QY)W$ z;g{bh?MeOeLBw8uZ6#yjEJt2i0&q$S!8qiEa8+Ts2`c5%@!X@kgUjd_H|-IcHA1Ks z>0_H8BGE4;KYI!*n~%lC+AGhH?i3@pQ4yk{WoKUt2q!U({`K}f$D};|K9a-AS46of zk@Efn>L;>t6fDYmJL2*E3H=BbtA@TItue-DQgQ)j1d@;DU#4tJPJ8_T&+iyy>4I$O| zk?vk!%UpUYCp;}J-!2MJd(_%)b!d+~XM2*Ciy=+t$S@MQdBuyM^PM5}i+p!)!HRk? zpGMg13Mx0J5O&!M#shPw-c;nm55ZQc&pYZnfkj*Lvfnm6y@?ykN-$dkAt&|*s0F^!J3;qQRc z(j7I+)R9u4q-0Ua-1pJ4Z2c@Y3qR7x)r9`7t!)&nQFFQDAwKL>9b(afIJF3tI7i-5R5)zjKX<5Q6km~HSOe%ia~b!cBDMLLIX z(LU)4&q~s~i5EB?Qj+>~D#9f3-#acMl@y zixFFHblc9{fY&fz5(B;X%=m98eXB|*6oZoPjwb7|ys}1P4za#s^OuZ=O<-=@3K}_1 z57xRsd|3jW9HXprj2|M*Z>;Git z{nQrs!`_KlS%BybDT~+!jRdx)1o%DeYCB?{4wVk)eVVMlv7cBAl zD{rt|_y^xxoXn;MuOGHBrQlUO+7GR<5jgqnFt{4n^d+sU7~LK6`vX{ro);fNFM<~q z$EMyg&H{_LUzQD*s7&i*(T^Whwhxa`E+Q|)CucGK7(<<0t9FC87sjcZ7Pwp!G6Inz zoFOL-IF9N%`Kj(4ZK9W%hdZOxQA7pwVJo)8xx`L^W^#63_no{JM}~0 z^$(Sw!?Z!&5(j0f;+ciRGq&5`Z4cSH?ml;88n}HH@mM7rOLURtA^+x|A@ay~eY8M{ zJVO|;&^(-0McQPelxERTq+9j)R@f7J=7deYvM2e#+NKaRXt)sm(Q>UFUN_Y{W4=PE zMA53rCYj2IH$Qx7CO48viD)n9y9@&pi>BSyYuELUlwM^$t^)bYH(L&m`Xc_sMj)|_ z>v6@{%tjnIktN5guf(;inW1H$B8+Y)Qs2If{%q*kq$$wd`^L6ZJ0em}$Z@>;jdjXM z@0n}vOo10k&YA})Qygi#tm>CE{Hz4h*nhR;n?I~6B8tT9vEDLa{Nm5Ym-ow+21Nbp*eDnc0C zMWM>>+yAvtv0uL`bi>f>nXyo{(vXKlvD1nD{xma4a#f*NEjyfJr2UFFhJ+C{J?JU< zxQ&3EeetkJ*`}~j1@x5|e19+JPxv-C@E)vb%BqR!X0!Bp$l0y_;!qNX-+{zhM%9~- zwrH|4&uFRoWq4l++eUCJLF#_Z>g1$=gUqmz5iDF`7#kBFf1umwq&;b_S%d#Sms$6t z#+NMCpc}tRqk6D<8BdX|PS-Z_olB{{W~)8xO6v2a!SILI4-PnqXuN1evD)~oIyk9g z>EYSfXeyP#mIgzVD)g+wI}8CVxh({HI?aK_vyp9{@MJZ;!6*EK%zA&ieC(?8@0r;i zhTip`Go+pWLOF;X`olJCVhfdx^ETrG6=-=gXKEB$$SNWAxUmLtp87y^7153J*7{1e zLqJE?#GW;HgxUW!DkW613iZ2R(T09|NMtwAAKX|D!M5WymCYsneK>p}&`4sVAX)#w zN0V&fq2I_oNvT_YgV@xq*#=nna@u3BhboJ|OmRoHJ7FuCbrgSB@;FSMH?ii_ zRw~d|Nl~~Xc1g1zY@f5(R%}Cg4K7|1mqN_hLJHQeQi0v z8B&(ON`Lwg=H!OH;Qu)UwqknT*ftX5)bR~W^}(4-bY{p+RW!Lf{`p!rdL`)Qbte28 zTu70hHu=N?@Lf2OiqX2Ax{7fU z0b#G4z~q~6ERlpyF;U@ph@Es|asDQBH0dGV(ZL3Eh*Ps1oRM=^TwAamY^Uj9r}%Vf zg+qGv9Jawgy>BsdF++-;98)9^uK*B7MzyVo*2UDXs2%e@eyS;JRD$QE6%4UYz-2#@#{>IvyZZ}?v-pcdtzJjCh~Hx* zk6#lYq3w;QO9#C{@=@85~A$R+?=hfU5g# zATxJ12!-)oxQO&%Hd)OfJwM(^Kp{gQ(^1@ZX6o}}IRLx8%lx~lAm@`0FOynjXpv-$ z@kXbY=k;L{c+!%)e|#J*nO;HaXtq?T=nD#Gn`WaqhPZ^pkpJ6<4NVq8Xq$k?S&k=5 zEQJsu(1+s-U>+OvZbTzsqJ04x-bCZjNEzPzT`>N1<;ySr!hHYz16J>JjsQ*he}J73 z;MooVMzuYB@eM4Xc7Me4(?zbJoA_e2)=W=80J*5Yt}pk4pvU z`xBYh#L2$Np7MNHQj2v42|X{5a_C=}G-_G)-OIlwBbfmup9x`r56*BXnt>olN z_V{eN#GYXF5TZl+t8Q~?;6u0D6Ma7SbazfPeE`_4u&1GQE?d2D z&`!Yciin6fS`pfb!PFq$EditLFd4?=cGw{Iy4=MH*-ywVt^o`hPM3zFM?2reyOCg{ zSXgYZ=jWm95kxdXL!cds`A!VK>Ty9ceMChjucpT_|X2&!0-+*h}Y+gn1a<}2Nc z=?AXmsazqYI{i=Waht}hWEiP7J_eT#kPLFs!neAJndT31&GCMO}uv;|cI<_AMy zfH{*nUhRM9JUIU@*|tHzE}i#5ju1E<#ZT~c2eO2aS2YQ5{^E176_k;53Cg#&Zq|kh zr|~)Hn~o&HRVbH=1IDvIZB8Z(o{00ijrWzJxuOe~=$w3=D2#y54dI&Q4BZkJm?gyyD&RE(cQtA!z>FJq^bJcd?DBhR zx$pmg)#(+-3@hc)XBnEBlBa}tQ9Xt60%2D^QQhBLi3r(0o@`P7g#s~nPL~6T zi#q|&J*?fQ(gJI&(bnJt^zI``?w3o5PX$y(@H8_G{1}Oe3Jp?N~iD zG&HjP1Qy~rp2j+Gd%8L_L7~se5U}zn!sB^?{$cEb8b2}l{P$B{Bw)GqCEIAGdMFKkMmcoJWOL zSio9D0PW#0RRI2~*9@+{)_-;CDFL7s--pYeO2y&#*EfK1&sY@j8V^;fRdF~$zJQ+X zE+9-P5-)yFw$0TH__9A$@t^+3jy>+R+OR@NNy+behz(f&Xj`tZ%=Si-B&y}pHJH6` zPqaYZdM~9q`mOv}Q(l;Yb*C|8ytWzlLsP9{Z~{g_mruyMsHLRxwY84!?t}sEE4$<8 zmxgQjPYC{fI4ler1AU`7)_WbP>uL;O$4ggTFt?s=iMbDjUuW>Y%W*icgWp{5@Q5*( z-wj763ASJVMJ+6>Ya2kIpO+Kx6dZt{_B-C^JM6|M0qIciT!we z64VWkRA_KcnbE$(^uLy3FJ^};f))8(!6*aw{jzVF!N8r1nsf+Rg7n8U0*iL!=|3mu zYd7Yr|9@&+pEW?8Wln13*s58(ozY8JokY;}CwM}XWjH3U6XT`9qMwgBI5;>jjz*`&c6zL! zCz_ZD;O?*cyuN2f{cxhUp2%xwZOW`j_AFG^SIN4xZRs6q@Cz2YKj|-C&N)tP>D8Nq zov33N8y!A1g@Q>+mIkYXC*^Sn((aOiw2J6C3HQGB5%L*)I+I8jo1=~t6X@t=Xu23l zqy%IP2~-REl5feFBwXe}5p-`Sb#5fv#D|0Jq=nZ62zyvIL-s;Cj8`C~hZ`V7Qg;9$ zPfGdI#tC+ApxEf-;(EeEk)$nzI)*~MiT^^-pRhdy)vQ@mz&*Kw;$8{}0Np9Rk1{J3 z{CBxO$;^9|18rSC_nJw&I+%_zaN9TV+E=gDWmHcZxj9)@fju!{Vq#uzx1W=5PXGVi zE*@L!aOEo+LIh3>RI6Gs=sWoaBuIh^c`moCB2IrgI}_jTk;F-ULNio4FKbh`rb8+< z2-!I1+Md|={+ZQ+<1gfa^UIBb1L7_K``Cp+soNgoBYj|8+)dY_a2Ci~ti5IM)RM8< zL2eBBj-nFgA`35-QWtfNmr!7V<1SqRg49X58J;%d;*pv5_WtEjGMpm4cm0W37yhx{ z+R=?Xa}DRpE*Dh40^dXtfGmVHIgs{3;3P0?`OVrOl=W`4$LYEI9*wNies(GMZGV6N zAlBkVYwKvo&T)c<(9mXZ0D*(Uxdr{oUEgu8-BNAt+U@QAaKt^4*l5SLLEU%;XK|a} z=<0H-L%!x|meiFqw6E2SD^syrlT)=)^{af4rn@^3he6s;O!jt%hK33?>hvK`pLb8c z<%>{+AYuGi9eLV1*jd`syxQ`5fjt<1tmE8+?hG4WRb5!)V3G5`^Vf{up+eIJ8Ha&8 zjRugQSuYpc5}f5QHNFC1sVA~=q0V0fLO`Wf`}Mm@<`)&RPZr0(#F94B^)vC6uZePw zO#A}HwkrwoiPv4aZftVKEuF}^gm(+tC#vXE_(|O@eqigy%F)}!Z+>iz{8h*a;njTv z)n$5|*kBkD8jRUe5b|@*o#$3pE39y#vT!EW?q`Nn;7pdI$D{G*+F+&aKyY$T@x!J) z_+uTZb!%SmC+UNo=?2kvC`!ZzS8)Ctg<`M!AGZ7)scXH^e}e=j zad2oBXdW4XXXywyP78rx`2cva&8FKHs9Y*LYR3++67oEYM{MLq6R8Jmj^7>#toj0T z^&Z~p!9*sFKaL<=07*)^SVCN!B(UfW7O{+Ov-@8b+s^@I@AQSWEh!0u?N76d9vPFo(wi@eMLbI!i0RGw zYJ!tf!82yo7;&V?>Fj{LcE6`vXR<^9 z$e;`KAJyXMcHHhi2zFxQ=2nG`kJlW#vV8VN%o~^QcIii+2W;rXM(*DtR&M;ibZM(? z8^?WV68uD}F&1qWvqZzyk2StXF5N|UQ`j)rZwc|pT0gxR+YSIQpP44HP75^7$m^c`b)#Vz4%l@Y#dsanaE2;m3)c%Xb#-cR@srJ#ZPf4;$u25bAPcm8 z*OS<=C!;!9jqUPh!Cl_d*A(-YUE}shKV1FKe$EzOwVZK%G%bQYM?gvH@u*=%+SKnb zH-V%bpV;#tu3%6GM{DUW^KYEdz)=Btgs(S%PFaaZ2 zo&FcjTjW%{evjA2S3rl>nN|k_(1Rqfmn8;3RiKA6G@OU~=N7c|g`$^Mev^{wzbE$0 zMh@x&J1093cggEw*822A?tx071}{z={pW-qxlM>wC{Wu@)MiX~Yd9zp+6f>J%r+XX zmSI=1%wJZ@BQQ@?zYgFD8J1Qet79<6wYBZ;M`-9B{?|wRTFoC*9D|9sGA|v?7Eo-_ z-lQlnWGFKeJ<@(bhm<~BzsD7M)%&z~cw$tp1Tq(!sNf3-H_Ryxgv|lRss!9a$BqH& zE*1TQB5cODKgMdU*=8wE?dX;hh+nYs^75R?yzo#*MB}C6NP#9|cFwC;_h^%y45&*0 ze}hHum#Xc4AOAFg!rQU-p4S&L;H31`yy2LN`^U%V0}he3V-f7#ogImT_UWx-Hi>RT zS3S{AKQLzyZlAfCm^X{Di3v76a(}0%TxZZG$x1=OPG1|C9xZwY8;>l8 zn3u9jfG{gojkCZ@DPzz-c_2J0K~A|v7cPd8ygk4&#yd>dkUQHba;ab=(1;<8i_$1b zX?j2CBiRk)+Sp`AMCTusGaqew^oiKBOjbGn@4yGDAISz17j?emVkY}6>p!iWv`|}VOWW~v**lb|3)SCBQ zu5M7*|F^ys8lJ07-8_X_)jOV11@>GiDiAU(%*e*Rq$o^?!M-%#8%s^j*8gpzmI^7@8I*@=sDzipf_Q>5?70QS} z4~BK zfBd8lPaYM5j1?`g4P(x=n99L%`Ge>D z%d7S=5DxxNu{0Lw+0Fm?MgzE{yMO6i@>1#!Kz+UR+wQx`zQ}Q=>}<7OKn3#sfLlgC zeRW~AN>yVJUi?ybe@yemeR5|V}=*}EO z0jUk`R{j9HVnN{Atv4`Oq-(UB2P@IN^cFiu(56uwR$FR_Ll4GM(RyH)eyr&j;qJ1*X=o`JZZ4D}HFkCoD1h!0w$qJv~SC{-KHt7b?}9=T^5D zh%f6FFQ@meavWb$C#y8-x-Xe?My+N`qBJpc6D{zC-<4b2jPeB%NpA~m1EL5)Pu}mI zF|X@GCD-Fc3<2le#HW7{5?m;$(ni_g*l@q->a-}+ml2l|a_8ug(Ex+76viQic_4OC zggtHoWRQA~bA8T(_q4RT?Q1UL-D*xwPQcgRwS#7ww4+li7 zez_C|>TcSBafI;jaLC5Bjdv+Cyxb~O2p_$ zUbdquOh=B?27E7!=YTE|sSxeyW(|{4E1w$$uD-6nr)+dQI6$_OT(Acd=Mr~FXF}1!&0$@@9HDGNH`5V5+|V>H%EB;c6?pKMX33&!qYm(CP4xf9#1(D2P7O z`r`ukV#fI43edEo+E1WR==4S{khKqqnm2etjmZUFWqjLX&pV{!$@>5~g2U~vs#DJa z)tBvj1P@o&ln8HsD} zGESu89CYG|lTh2@A{Ht%_RW+1{o55ZfH8ay2u?%fx|dc6h=@kOf&fVfSOMFb3q9&= ziHV46xu6)>`w+q8>;R1p2r*Y7L9}%x(kW6(iglvh+#6j-(-?P(mi{2pC_&a^W2H2J|ZmS2E}4di~REwDFmar_cb zAvB0ib!i5*8;hZX{?8`d883qa5)-Fc9cCkz<6EWs0p&bD0RO}G@03Ib0(QudjXW^n{YE}N2cA0|2UkX7dWXUB zL}?QIHoT(V^b3U{eLM1Sj~K+**0JW;lc|CPro`WfbHSC+xX?@5&-64+^+kwBgx{a#c{d)b7U+4J|K9I>M9~4B1X~x zH@fG7>!dRr5Wy&;dUm^0p0@hnq0g9??!Y_K`)p1~h1{#}DQAx_vbFRV&LVMWy2p%h zHaqG%M#j{E1r`}~AD_mKlJ;`#8W^Y14trPbmrx-3-W+zY^oo;) z!ESd)@j$-b;+by#1LHBnrc*guXW5-7Ku-qD*L(6;SCLm@?0|=lRs_YsWJ&}N1(c?_ z7Z|})CH$p;4g)Ysf#bZx>#9t%b7*c358&ApG&JSI0YnB~{bV%ueaQ_<;IkqC%_%CA z2avZJH0$44&;Nu27+mel588gG0=xO;D-wtSU$2j`&K`z>?8N|4Y<<5|@QXjB)G#Lz zOS+H$p$@XyvPFP!k)H2$(~cjTjCBWhlgNy3&HsykV082=Y}v}d$=R&0O_C~ptDN(n zuCg%$_tyhsihzlKWX{RmDX6h=-nLF{{F5(#>R5DQgct|Pm}#&xV$&_=pFcMt|Fo7+ zU)A%6QhCZ)G&+NCf7hu7q+@%hd*XU)kCWWM<;3o{FMI%WhMN5e&bw9ng(9g?7kt)@;C{rt&ug-j?2;v5F*8N7vu+&f}tUT zsrXxCC4#Wt@!~6L#L#fzpc%S)CkCVQLv#%yqBbZwu%%?FHhaRbpv@05lC;$W8vT;tBS8idB|`8P&nulo~|*0*9LS)q$U~yHm2yQ2B`H4^PPdA5-TT z9a+?^>yB;Pwr!{5q+?fXJL%ZAZQHhOJL%ZQ&3ACe**|Nnsy%D%r9JVygC?dDJWS78 zMRg$!4J5dS|2E9o_9r~pBa%M<2-7^xr1-@w;78L-XKM7|y6$K09UDQAY58$w1|q@0_XA*)sUlnk)uDU~@4!#p zDDO~lc6lQGC<6NXEwl)pWJ33yBm;IC8tQIpfXo)lVVbpJ{JO;Hwn@z{(KvfNn7Lcd zL!&Qw4q|#@dcTLEeqi3d#s%wu!NvirY+)x1i(0J8! zSb=OluS||#v>)rG><(>12DbtfduPYN6Q1mS@!SHqU=^Hr`~|8JVwKm+B$RjdP~l*#vM>Oky0l=QTn>7vVn9CC+t%YGJ0 zV0QS+u+aR0S{osT3tRzM-CH>Y3c92J%$T3Qto0h3!tGv{6sx6P=S5W<^)KoXsfn@L zk7k(wK{#XiQQtHNn=V6ja4xIEAW#){#67rEydN6_kDhBHd>H|FdJAj@!6$udPEX7QPQPoQjLoLnb#ib4i;^tOWO{Y?@$Rxj()###>kzQn#P zMyGz-O*jt1?Na|_=S8me{vYJWhPIya^ z{@NuMY&X}{V524!y%r69c7?1m=rK7$vKZIBgwh?Ywean zUrNlQ!?U9qHQWel`ilE71gn|?ps^S6>rn9~I)rWOYxTE5GxURoh8i!{mTCfPi;%~C@)gXYw^bqhiU z<5h6AIgW;KzZJUjO}Qw$~w0HR?2?YTHeO8dR-k+yBYisfiM4X28RZ7Z02zZREvx z2C{wQiadfl=hY4OnH~Gpz>x<4foGr#uzw((G*^k$Zu>60M-x)6cy(-wW{eNPw(QfRIo`|3{iRrARDs7B1w{@YWLhLhG9D~5JBXq)F z5;U`Aj<%qv7k**Z4kDNFAV=XQhJIDxWEFpW1BQHovx@V6Z@-_eRAG=`wL`MOEVCR} zgl`5-7TUUCudtj{@=ln>@W}DB&gJQP8K+p&HdYR@Z{dSmHxoo zJf3y@4t1KMLBJFyE<-!PPwJn)-3Ldc?(ccoBLn!X#Q7#WJHt{3M+OAg2enpZfnesB ztlpFaB*eUH^0b&X)LzK^}g3PvuM#+!N(YpZJ-1 zZQl2BQmj_eO2&w2Yvb-~)a^cKF;50>B^M$9_XCb+DDP71KW1}a?#9)iuX9iaj^0SJ!=BTt z#%D9y`g8Ww)p>c{hDL>ObW|Hd-ulz(#{%har4DXFlo|w{0 z{na28C5`8iFRB?z@cyderk_Ra%GPM9paNU{U+X;NtI~_BU3a{1=7ErVd_H9kBEmS_ zf9LQ7#xg`=#C?VTf3Pe=r>ZsC-!-P~(qDf=l-_Q!We)jApNXF6m+ABZ;Yz#?136g4 z-u70p7}_pb!dfE^POc{C^nQ4zB{zh`Z7FdA=r}gnobcb2xsP?Anr- z`z1WhAT|L6Gk7c%^>^@g7oq1ybaT~TbIH=6B}PaN2>${zs{ar7F8lBH_CkTTNdY?7 z*T6tCC);IcU2=@meFA-jhHS`K9x`X|M?2K&1u!5fmx8UoY!bI7C^xE>B!{HyuBn0Q zZI6I8zB(Keg2d)OjWZ^T=1f9XK58%!Ed%2)F-OhUnPkW?;!dI+^jovdQaV;QhAodo zBXf;YHyqj++d89u=4OxQa&4C&e7u41IwoT$U7`yeDMAfTTdR*%FlQW>(F@&k4k-wz z_Aq=I&mmq-(yA9--e$aJ>6^)B(k;d6f7xVgJhK=-G$|O`rv=Db8mw<0xHVU(g9Kb( z{?m1)`+}345B4lYfwefNYYvS4L+m)o4^~0965F5L=$^I=>8@{|3EQQAH$W+sIiV>t z$AUkwD)(#b$Z2pJfzKb#s1e3i&imE^7*8yMUL(*Azb1F`)&yXWxIcqdO~vlPP7e+Y zBu9syFYM3cbmSVO{ZKz2X3y6cq+~gOzcrPB+cfc-hT-Mp;0^DGKDF#gV!;ko zX>dG=If@9-KOI%AqPx9eDO|3Gk5T5sDE9Y(wB0O%EX!pm6FDkU$?J%-r*`gzTF}Ik z^%YN7SueAb8kn)Nb7l$~#!~LFwD!HQUhDrI5UExsBvPTi%Wd|hQ<3a3#5g>sr>#1l zVs_$_1>=KvU+I>T>{uiNGgTEdyc}tUUA{hk04LnSooi$R0INC|+s?p>h8b}1KQYV2 zS{wGCH@R}X%xo@uT&Rgk4(Qo-W6?ccjY5~@99>)AF~cC)?d;6kpvN%{H|&g=!J1=e zD?SSNdo~#UX9W11?ijI!W0Jinq$EuU2?(CLwYf2a!7o^Fl1eM=u!O|s zrrWk4z(_@_PgIyGd@}-R+R=AmkEiNL(L+F;)fll1)-sYQ2ZKbUH#jO?DvU)NLEqiq zr)gmN2;~tX(Sa#91{`fwGCLo&KV!4;}h;v%e8=epeAW3(4E$s|*k6q-()dY+`ayxHQZ1R%0h> zVj>ZRwriSLYRKPW0gK)9cQk|;D^ZmsM$+9|CSJF9EI%n>$5cOaK707g>~ob1)X%>3|&nt_X-=~V`m z9=+cFhP+kew|iW^v`84X_2hH=xW${g7Z)n|c1GB2p@|1Jm|UvEj3@>trS$K|%@qKs-y|11?ZA!c~-~l+_(19~(k~ytv|lax&XE z*U_dy2tfZIq;SK2GMQ1kuSQ$}-+96EsN4wD_^7?eh2b2E;&djHv|q_8YUZ zUOCfXD~SnRdh}YuaNhUslK%T?CT(TfEW*IZOn>l#twzx(qLUN&TXb5mJqmB_Atl?} zIq_V_hFP9Nb-1tu4WQE$qPe2ZAQl3+tn22kS1A&UABe?NE@Wg>Lm)aB5ufzo-JsJM zjJ|6sABd{;iY~-mB&$r=;0&a1C`p9LZJxH(9lkF}ZS2DQUkyUP^{J#xRyVHgJ`Ev5 zji3lko#hv1WVZN3+X!N(6q>mn(nq?mRXPi1!|~+E;MhRjnIR_JkwJo%E$?rX;adS# zi2E9ff#)N(LsT(?uS6+MuLTU|@Od|H8!(gk`tuEE;(U#*(Z1Iskv+M4cHiU6JDfer zgGk-WI+J&kNP-TOFtRZ>fdvQvKylcg%$WT)GSK0QZ(SFH;tenCxIEK#0L~ zpW4N%qCCPt!?)yQIv+~FJ1i*6+`;)L*{m`F!x`a69asG)vI*~Vu;PbKARD~CV$sOt zlBKAUc=Wg&b#nAszz^%ZzitQBs|XC)!vbBL;K}$vG!xrT6(zdi>h84SCY9ESL%7t> zX3Z4(LD;4*XZ)|uDqdo`e6PMT8R9xO+OXH)2fb#{r0oTgkzK5@Y($2}@o9wOHnULk9H&j~eIUJN? z`QQcLf0D(-$FA434g&%PcZpS;ZWaU%Wr4QYyg(7lJ8uSu8SGi7{LcLI4B5sKZ2>dc zzK?-LjDIj{!4>`-inzHkx?=|E9yAyDTjQMDMVFrjqUYCH z3x_&bCTa|X8S2Nh(&Ix1Z1OPzu9ew6GzR(HeiC=qSS0dSUUU`*^Y9{{-)D_aohnO= z-D0t=nDz+bRENc0wsbHB%&CtVvf)@Xq-a|QDC@i`v)F+TisePF`2mQ%)P7!-Sp2{& zCR6=xF+!={4{UIjy@AIb>P{5tVK)>-so0)KjLmg2U165B9Ie{VxrE*i4gjZt|qGSOW^ z!wVQKB@rUC84=!X!0J4mS&OO}fhmC3V<3e@R;nkWhT@3pu9b2 zg6t++u-{K${oh;7)w?6&G|F-?50PW@#wskCv$UjAJ>kW?#b_Ng9><4*9+h{w+`+-y z+YU4t7m!i=3KGEBt+#xsP=W!yr=K#SnfRCCAbr9C-1mK&4_bHdegrmz5h+1`7RU_; zfEYmecl@N3O_bWQfLHc@$Nhe+?99X^bs)Ce-vy7v+zkdB@m^)cbS5UE68Szk*j%T= z96vPh<*5$&a9YQtW2$mVT~>xFu@zJJ%Qd}2-&bE&ec=QaJfby{``oI5$vzL_X)9W9 z5CoLMG`fJ2P(nBSnX9ciJn8HI%XCG~q~=Jx#`&P(bm^X>b+xCK!DLd`_a95J!5uvV z`@^c88ZH6~_F|c0O*Uh2zpfrO^NLA6UxjlG_b(!t!S`@;R4r^yc;w&J%pA> zA%b;y1iU@J&z8W2v1K^t!TqWYMxRM;(c|L%EP{j+FWM}Q09{Xdas(IuWOIVTxp$g7 ze*dq668*D6Ma-@1pz%rKLkXMQv@FtL-kDyH5{%+FCLY_8yGaz)dY9De$X%k{UH93X&%X zD3FM2I-c3>~4`NCsjI9>HquxG7AiaSx!7_JH2JdM6{XKJRr<_fIyj z90Nr|mh33NqwY?AC3M7>-e@U};X!F{aLole>O>yZNLC8k6TWMtQD12a#T`>x0EzC> zhLrAz>)*B`6%;Q=1Z^vlY_#mDq-qy6d0k5JPbt!6e=Ao_Xr4VqyjFrdu9Fr@j<&%K zH3W+Tb9wA$#*yGKZUiFuu`UTa-bnZzbs)o=mWqNTGszVS*B=T^;y~IuYY7_)=$Nhz z-bgomcoNcUtU5+~@m4F!m`Sz;5)=mU`fiHfp7Bhk2a*p*=7j?{I#!rtK0*(07m`5E z@J!0&JUd49eXrNeC;{{^8ZC(UX{%CcmE8$KX9qS&pHC>Fdx0|b%M=Vf#j(>>tYai| zUG{eaQczQ(&T^#gPn@aQpBo21L2_giF|fO9rH`;i^D_C=5yP)p%oeRbO2#_ zt55=pTvK9AbkO70_x1Bvys2@-v6VuLWHM~;wi8b#vVKCJ1Y-e5_(q=rg7uRCOsGhA z*`s0szVRaWS&|arv(;7vjMn(8jGfq86hP?x;ei#VRJ#x@?FkdSp{bF?eqg_poNObJ zKDS&cT8#`ZioLFJG;9C&J(O z6bY>j2ca&{##WelGkt>wT+X6Mzr8)0>xuBsu#JXD_S`8(T!<&|i{g8?Yzj9vX{<2A_(j&6^dtk7 zUa}0<2|c~@rF323-CI3@vFdJtaIRWRG5@vPA)S+V{@R~6K(xl94(lprb&nr~Cek=9 zlzs|1jz9388uJi<$4T~ZMrXpY&oE(1RxexsaVuDbL6%DyXdrQMk4HXiV#w0Gk<8C; z1{E@nYsQLlV>grMlsQUa034`0{R1xutW^y%`YP*@Qm;1G5oX2I<^~dw>o69eE zN*AnPi*GJ>=?_Q-Fxcm>jKAz@3Xg}wNcpT&80Hp=q|R^4ZY*5_^`B(9*>l&Wy~J)? zk=7MHRz$*)8A)LLh^kCjF5~%_QPyRACmVHc$*emWubWF7Lo!*L3z~(+zGgLzYOl*N ztNd+~)J%mhk$>mG0dFE*h*rob7))toI-5RI2$ua^kB#uD8*GSTUZb#@Hp_&Jm!)AU zVfEu}JNg~i^wBf%69<>n&^XBYs#|q?0D7$h`8g>_Sy!=YQr_R*45%#{clK3VZ`3{K z3s6JH$0;jFd7kh>LTE17J1N=9Y}z5W;J*shw_|EFQqa@TMGbSj$15$;k=+jPpqiY4 z+=rhLC|rehlPA5zW=B0h@^d%0h)Z}>l_r`Ej;-cpp!20L2rU4RDG0~k?952Knrf=Z zqACwjH@_94nG)I?48qUSW0Mm^Dp!;-VbegI*&D&gUFQb*zBOeq4WnZ6z}zqp!{=a< ziB`|Kr493QXSe)@8wN1XJtFbzerc`L3^u6HQL;_bBlXGf&9UM`x<0_j9|d$sqdgz`r z6Bg8CjK23*iq>e9BiR+OEHoO#SRJUbWAW3KIyM~I*w{d)1Y6K6I!tK20NGVGB?75# z1_giYi>)pgo@W~gpecEUc3hJ-Erab^rqyP5Joui9fMC|#!Ug;QUfk7{_`gPmx;kQF zzY$iITB0l&UUImH##^0G`ix!B$dkBQ2^2!45-wL6lky63k?)aauOX`L)E8O3{9-O3 zaS4(m2D+OhMr>!L`0p@gk0si3rPKg z1|RIc{vGP^Rq19FCR9_ZU?IkQ`y@t}eoYNX%v!I^={ppt^B>=n{(o-GjR?$D7=2|; zxUCOm%Sm9wozuwpS%C{4?NNBXpw|d)_spQ)!|;Fs!U|vwV=)!dZXxwH(5tJR0K5(t zBGL|MCcVFzP1!FuxZ-el!5|dXB%Ce4j}LBLk+4b5aiCI?g6U@%;Nmfi3+|Y$xbV3v zNZgSjHK1@oN`u3oyD&50S1yyQytCdie+RoCLGsK`*PZ-o7tP|8lrH4vXpe+Wmy8*f zJ0JYBouGbzPX$-!Iv0h`jw1n*iN-^M6T=`LbEb^;TlAG%wJ1mRbgRld?y#bsd}zy` zrbG5uREJ_)Lf_juinoSrk#AOFRgJ_+5@3+j{6ymVF+lA7cP+J6WSRZsh`Gi*agj7; z!tq+ZhcW!2RmuHPeEp_)iYhUZfAu<}l1Cn>$gNb2;i7V6ItpeQDWQ2r9)}dtB8`Xt@I2Jv!q81>SrDN`TtnC)VhL|)5PeK7j zLcO71TgF?R$rHj#hVjsVxQyX^c^sSX{&)u^EW1r{u`O5Qe26t3F&}q7K(phO`IEH@ zP$lSp+|X4K_(PJhY*!p*-sx)6;{3GDHQ9B)+9EqS%7Za)X1d|`SjK7_JsxlM!vE~| zX{NZHzGj%)4VoRKCM2zc0fI}ns&De_Y_9o?eY?R1Mgb$fe<3W9_$DC2T(y4kd^H@s z#dF)#icB$Px5@YIA|p+Jk~TnTQsrHK_+FKIT<| zh=FfhV5{c1sHQStJ}WAd!Hho;OfRhPA<N*N;h5ha#8>Lp8 zZ(7vzz=u%3>3x4ME9_(=4sqW_<2bmGbo6n2FikmSUirg&VVHlp605R;=!mX&tZbBB zPpC93_HG!vdl{$43V{x{Yf&9!w3pma0{~}tI}d%KG%oh$KnD5gEmA4H+Xdp70TYhw z>=@Ea!q24ahXtad!aALBlplzFy#*R`m{1ColRY-Mg4!)pcw@N+JwAzt4oON#tD||v%EFt? zsCwWfXt0f)febHQIDEQ%C=$4HSLi>7+ws&)(5D ziX69Q!NMQMCLk#RPHK!(vNrGqx+~(ed!Sl>_!s7PUqWnnV!<0@8-m~b%_*OJlcu&S ztzPd$cB}~SOWVI4u$mHY`*g{>hAdT_7B*H7*7~&efa54#&Kw3tvNqX6MrUu9k~K)UHGsDGcaAOnf{eN^#CD09gHeXlzI)_2t| z^Y|+PLU*dAjN&8QaJ0N^J~%l7JbQG!Xc%Onctv^5s(K3?Kt9vkI#*EpPx_Zl)jzVx zf!?XUNOP7s;{%!tjUGsx;f;U+NYW}(<0fLM5_I%En3~~&tQm1W;<3?gK^6MQ%!M4- zsSKxtyFJxJLCrrw7FZ?}M>&w~fwPS20`91=96SBOEbE;K;1=4@vw%SvnKV{(z;KO( z5$)w>1}9M=A=*3ol<;}JrCkIAC|O$Lt(;{@BJV z#^SrLb!h4hj%W`_mSxoiF(KpF&l>qhxFnmEp73eBMx_i;~5;3pt%0aL?-(fZZ6q z3?J!-pwg^DNVK>3LbEk+FhWMab6sBTg2}Pq!be1WC1sU=c{=ggdD$M_ctb58z$j`N z1ABPcN)EbsMk}!IT~B{xT}+*;AG+y6+XK5sYC~-z39Jg+3W>?Jx1u6IM^6zyc)BlS z710U(>9SkoC{<(1rhnKwm9>;%eU=bDC(ag_49#67nS&nzDBP?@qos}ftaOsY0@ zLeKOU>ZLJnN>*Ob#0Gu8=fzMC!Lw1*9jt&>%aDl;75HjXtWFT!p`O{z^O{o{+h`TR zGL^b$qZ(z=Tsbpc3-r5#2T>SDo1bmzGOO|C@YuWX?`NQO34R?oR}S?l_FM?FOBN3i z`6|IbskLv$kVO-HTi!MgnBai7TAvah`c{`+NN(rrzPHy!H`HR0s6A|PbI1y35ojkvqB#%# zU4$N-*^jS!+>x}msRO6!-ek7Ja*252<0%#b~w9+j#PNu>4*_DeDn)FtgvQW)T!cvvvD5 zjF*V4IlU<9;rPrcjf3+mygLXa{k9@5O$~G>qXSXS?cs`St}X!^f6LuJvK3*~{tC-7 zP;doUb4vP#i3@>k({P>3kiQnyLgg4F&7quBf=)9$mBkVT5T+!a>j%@!@H_(Q1dVK_~Y&h4FlxGe(1{@=Lc1@MwUYQgRtIbEyATqr=zzW2q20PL)h<$8cR9#XPj3%~o?>bnPz1x@^=>o5w zx(6yAIjye`3q5tYSeE!wvY9C{OwSFgQ89*(B`ucQV^b;Gk?UUC{i&SiFdQ7N%AZ6L z>1}wHtcp7O8D-R@LBI&UfJ`bIa<+1C-^m4)5gNw+ZBvBgD5X$@O9Yb=31&_HT^WCz zh~k5#n;6TEUTCbMUqTWTv+}-TEK&e^aQOJ`#jXP=MoI&ohL!}z zkG{C5iyRi)!&xsHAI0!~Sv4hy47WkM2pIdNXS88@OO~gA!Q1BE?xKRu+~L3sc=?PV z-22blb{$U@%W@R6=-rCj;Yw5Q@axvi;XdD@T-9$-}2SkrbVvV@5Tj z)sQ+n=!RLz*XUn&v4|ZsCBLkD-r8p=RtJZ9d(#8O)u=24JT{>5iE;DqI+`~e^xgdc zNu!b1{g(rV3yFV|Bfe~lX2yA0`Q!D-r>*n@3PsOuC|Z;J=N~r`FABMlYa(#=W)qgE z$K;0JM=9U6+*&x66p}0RCmNdmrX$b9?b0tn>9sbHB#x!_YDf!arh1(=Uysxs|_TyJUG4QlUzoHV)_Gn6OGXG>qIpO2g{(>C@_kuy#WETJcVS% zL;`Hk9W`%t;4Jr4ipIOYy{0K8ULq18|2z*4CJSO!Z7gYHO=`CxLdn~DPYi^FjKq;3 z8xS={RaBdR7XozwwK{o$oK>P^>?*m!;zG!o;c3|&M zwf!EIgc>L&SutD6f3CKI6v4yarZ_Cful7Cjf3uAMVI;6hNlq@fo;0THXu#)ZwcVSE zAyLVPAXgMqS5^GHQYQ4S&X6S>R zF-b#LH{0dy+uo=O>6qrAv5{3>Q|aJVKu}c(o6J2eG$vZuO$NMuM!^4(B&dc!YYibN z$_u!f??zZfozZ9mR+K{vPg1HPKSIQl634lCSR6OI=Si$CnM8b5y}#Jg)ahygL#*2s zQJXYo>|jK=$C^hSt5is?h%NJSN`IjUM(LAa|Fguf@p=P_TDGw?vYZ{2CSsT0gZSZ( z*|o+BCi9~vCjU0vdbm=heNCU~WrFgka}6vY^GyPoym{um zQu}h*e;lj)#DtaLS`68~8V%%FMX#~R3xX{+PXe9P35BnWwT%HmO)PJz_x4A_%3f8r zeghCKg0i~s-W`oW&s`8VwzDI+t`L|SE`lT31qM`T0p~H>MDfWD`D^;EsS(Fb3Mv~e z!8RhSx^A!eoyMlHMMqW}TUhko?}X2vc!7zOfbrJ2S=$BpWN_;}Gwq*3l1{~8Yp4x) zYkl+UUwmlhlG0K_vOCCGIvxdTTJ+VMUcoh)s+`jI#ncS?dQ$5y4*t|#M8%m&jT`+^ zIWdjYVx@~G`}Ze|futC{c_}<5uuXkSzd4Z5kiu6jykQBpF`B8-T0c+OgoRlcZ6*vJ z7S)7hHR##K6KAVjJ)f$^ZKXUsxK&hCW;@*vNMrQCIe5T;3$ig+%Pw2Mw>GQs#%T)Y ziUObx*dvHk77*C-CLIu4$W>n^y~i%oXfIC?{Mn=iW9SCsvg zzvF7>t?$|c`mNk6D~%_M*HF#Pxt#3m{emk|S!K9;r~9Fm`LgWamvy{ekwL;#lTXJE zOWKHVCm&ZGGa+IGH3k8lx9~y9Bg|G0jloD$5~a^1UJnStkxQUf8OOjnAxMnX&m#dR zUzAn{emLhLLQ1_MiTUW-7qn)@iL(_A=-E5o(T!eQoSe{V0{Z%g;v0=97c$)`G$aJf z(wcS`^FTVA61l9A$9p=Iny?yvkND`bjMq?8m4v)^F#gR03QjH75l@ZN@c5U}@-enV zgp{ChYsjYpxfJO%th!S0pIf-MPhWVVg~`25dVke5Hu|=ULEf5E`l2%A^ZxN7*)*%x zx-F_Y1CoZsD4nN(uujF^AV)$~^YP?oqzU+#jPrXBkw~+Su{9 zG+~Q3^Q6_GXcJP=iRHMOvZ9iU{P_d&&)xtM<~`Di3M4XvLCM5K7bpsO1)s^7AXcy2@# z)dhF@2crcg*_6n8b=RzLcCfTrf$6jAjXO?Ix1(CFd*md5kD6ON=ue72Ob#aBPL|pDa1?c@K9iwa-OMCxE%WM>6{`Gf(@S-`_kVZ@$jLD ziWS5pogn_txBmJrl8cQdU+v${DsP&bB^97J`)PPNSNkmGdC}=C^!Q^Nx*ie3$e#w}(xLv?*@= z-~_Nqy!QUQ8XQD>1fMkE$Q(wjD%th^>CM!2Acu!-J;EMgG?(a0{q=5?$)>}=_NpW* z52s5Y1PL~F+gs!CRd+W5%{kAKv=A`~3NtF^nSkb_v$s>Ls>niOphih3Vg8W)`xTi~ z?#F=#Dev3;Ww`ZhFLBh%NjO|K$Sr45yZbAYz+kex?|KkS4><$!o(7O4FkWhEuxAMQ*f zCX+BKvH0Xp#`E=#h`fBvpIpPiP#}0b?m)8N$)R4~TrKQRV%0;Mt5k&tcUv*)o>#y! zK^1FXuS8>v^Uh-WHt5~1NP{0)ZSMEvo12^Jo)sv6U$_6S zhOaqyJXnXwi!a~aC*>@b6WAWE3EhtWq#U>^O zMrQKj$Sdkb<5}CX)~4ZsA02gHTTqeF1TE&8N?Mr((d%Ry{z=)5WquDJe%m<&+Vh#AtYLHZP>OUL<%+WrwRsWszXJv~` zTb*Za3WbFggNqYNzW&oWr7(~Rbuc?I4tq9F=7tw52xm!FDDjdn+zrNd)ni*Xg!$k_ z4}q%-67SD1vfRq2X*rtD_zDw$e@;k46Sbdcc2*tKhzcno*%wZ5fs82`F?5o^vu0LQs%>S z?PTc!X~D>WgQh|{y1t42hOzOiq${N&)!ZNiAN=`}iYVL;4ziOz|2u7e`q@V!kihwC zeb2xG6o#|3oKh^R5@^{*!+*IR*ba1Y-1O;J(LZK!9-_s~Pl^=8SvwbO7{1{X`@BNa zFgd#N-Ny@}yQE8lypqvr9^1f?vJm5(TlFp{de#ZxU9>nMYkMq2AV)kZ7rFMv#TbGl z<~99lWj!6ge18uod?qCD^>+1oLv$yyJA1b+Y%lslA#tPGi2vK4!k0^We8O^|+K`D( zyXzGUZ%-HSaAlf{qh`I+tymwQB&BgWQSw5!wHNv@RQ-9wY%K7yW}FDxqq%?(cu6=I zK{U2fWx#=gCI!L?J$bAB2NW*&lP_+{eE=TA?tQO$sYpO3KKe9HRBT1a4OJ8PIvtyW zVrEQwI`SY{p&vtLB|JXc9oHSJfVESvvIW#ixA$D1AkJpK+2L4PpLH)GXR~VV%29;) z_5WSxyonG$qysV$B_*i}qNIM`V4uy+_WJn-+hdc?SzlPO&iDk2K*SL1OrR-iM-h^3 z;0Cv!v1YSAY+wqf&-h90V4ap{N1{kX?+=HVNh*+NZVbZHMZ(T0N&WMT%~eP!t1VF=MU|UnI%2qQ_Kj21UIofEEbk2Zbu%=LTqwFrRQKN$h60R zyd&(Uuc(=sNgoVUv8+1YuomJD=XS&acd05b=>4CSdk4aWDE^3|CN8RAOF?Ic5c(^K zv7&NR+HYX5enAe~K$Sf%&V+y8NI#k2aGudz^0!hz)^9=*2{;pYw%xQCdSj#RM@UfC zu0S=4oBDQ`KO9u$7Xo zEU3M>{Dm$s_3!^|p9t0)&1gX%Ttt}`iObS?ZR!4$qLHb3BR}=-wLcWUxa%2kf+Ddb zg$1SW$C~4z&{u@k|Fdr%AH;kGcnE=-<$~KP12X*}Ult{85kCV**8Y)eAA`tRuH3>=*|M|`>$Ls^xv^PYYG6VEi0?P9-a(3`> zn3tgsjBeIO%qa2PFR&WSlIcw0;8JY6-v#!&n_7z|VEc=31O~g`BCqdRr(C!7qt6?N zFT0rRwi|xdS{wr$Q6$hsDyF+Het4_h)->=s9=<)2Y`qZ+?}$2Y2f0zH-}LT8u6BD; zm7@@We0+ZIJ5KT-_*reCh4V_#w+T!DR8Foy6|eUmA0@ddbNO<>9d-Bh))Yxz~z) zv0!l7j4|EHtYN4#n%3qGr#Af*6KbiwwD=|IjQ%kYzgqi^K&Fvf{Y3zQ^~G~z-&?=~ z?-M^9%T&Nv9s`y9bQw$&C&Q5%^7;ubsK15*kcbgp$^dYFmI=D8=VV%*s}kpz-^x~| z?f@^HQOf8wLPc$5J4T!UzL*5!7*Mp>FGYy-kPQgP+?yZ%aG^gur^mOoINUK$a#fiw!!(EWE^7z#RS z5y{mPb;g-w&C}XJc_RpY(#bKOFd>4r(G;s&*NCR5p21oHMX0r;QDHY+e zrq8*L99=oU5ISlXQInzwbczZ?rlsuHF|i+#GOl)m)v4O8l+XxhiOGUm1+NHM0jMW*~C>Ge&!uBrYk_a1v+eM4?YYEceO?nQ|nB@#%u8Ux>j*-usIp81VAiDoJ_7SYkI#e#-%?lgD{=7AoTESg1^Ix zIG^i&4I1KBTR9B`{OQ_V`eK!Hk{URcfLm=|1*;&x7RBMg3KTsOYKWp}u5k%LwZ5{w z(g&tJla$ zd^PkbGz<8}Z@T8cz>QV`JEf1+@e_f@$XE6kgi?>*P0ZQsGtoMi4fbv~Nm z>Tv!t*26bE7*KC4ofP(J#vQInjSNglK|-DyNd)nn8xe%&QL71%;sNP=gbQh2lf2Mm zi!I*qwdBD#@TP`n(#*00tXSPRYy+mN?OL(P`)Ppf(i$;Y-kU+r9P2FKZ3@v;gtlu5 zqN{PDCJ{{QWRi*!|qnX_~tPiJ|TH{-ayF}%1G~q5Kpuk(YGN_ zBreyQUJ8uJ*U?eype+s#k(A<`yEn|`?Jr;rF*2F79ymTaBYXWlaLQB; z5hEjN)Wr_KN%ok2Wnio)gx$p--k11v^#)grO15}L+Yho;=lyWLY92FDQlH=sl)}vsR1wZs{k< z0GI2rEPa2h)K4Q44lT*fjgUaC$jZ?N%%U^;Nk}&QtnTTELL^*Bk3UUgt1?`Xb_yNl zZm$pDaLKYf;3$}ac$Kssl6XH5<-M98$hV4f2#duLv1`|hl(PZHG+}T}zN*{Md8SLTP?uAqRfpKfE_Sg0T27(!#KhzAYsjksPjPphC7@>F_!1Zi z>lZPFQL3i#VljG|MsmC^okVb6!u6jnNMspn7w&9eV~1bou8WT=el7}9hKBj0&pYCR zoVdmKvjj2dCd%_U$c`-X!ej}!>RfTW_ugXK;tWOzQ&$E;_@*dIr%l<7SM9;UhlqeT z84iKS{3~SUP93c~))W!l>N9ce6CKhdU}1j*II?7X3@M#C9z*keL4J%|DUE#?!}alG zQq`l_Z0n8qUz#Hp{tPG)F64)!8^q~dkn>v>xK!qlq}-ZMq`}!FyNmH^2-ES<_!(%) zE9dQTPcZ)v!$3U0f1)>PB8Z_;8xoaYNcw2063<0zX+1bb(wm&u$m`7>#Cg^MQc&4I zO4I$xo6qTFle-03aygV9EhjsMIFqTDqDaZREkw<_A4#EADe~G{7qlFDF1$vnsg%CiFoM`jIYmknuT$C9A@7o_ zNk!r-(nh}@VQTrFG2O|!yD?0*$mQkkWYLuf^7ZmmB4_MQQY!=`^~H8#(|bL8d_+r- zqd^%&K=0|vrkALCzsZF{| ztgU*HINJPGBs?c=6}z%Jdub07vhFrhXUfRhzMaU@dokqRJS#H!Ts#fqlLdAl_7kpA zH`T9$9LS}J6tdjah%9+r$cDwfK0yM7P9e$nNGp>rBtztFWUsp_nSLXVJY3>Rnp=$| zTej~aFCy|pN54}Md7Icfb|(Q@0#a9+O73_^kc68Hh@T}C(sR;2Qb9xW15c73gO=0!6G^BE zNlt!9CH(4S(p|@d1kkp{dxJBv9(9o(C!{X%DpAsQC0W$NsVXK<9$q1|DHqd(8#iu{ zva%nohCd3Mjy@#f&ePuwZay|GnTFxRhhhBUt;nqtg|nz($^dP={*Z<64^eRFU<5}C zGsMMZ;%T@f2KQ=B&lf;mUS8PiR@TJOVMC}}8g@3V5Fek3M;EW6^4DYA`6+LUH znOk8(Hv`D%SU|U^0I4)BiDoS@+{2A62amD6;s3-7x6fUJ)2ubnl?4oXPJ~5$D7;IG zA*XJI(E~csvlL-%03^gF;>e{BFt=%m;CDVK)-*u+%Ueh*=0Q?-Fg&c9LqXRHt@ufZ z<tU}c3AMIv7-^i1GoQ6FePBz3#?`_1!&fX? zJqI5iJ%k`G91Y#OK|@v<3PqtfaOp1m{6E98&kU$E*=~VLWkR``=rvFyQqtfF>QE}F zg}1pWm}OdxQ|FJMyPhS^g*BP7!pp&yr&XfWq^(-)|cRN5*la_}Op51zY z)Auv5blZ3+K@NS_%|zbQo5(8TLb06(dYULf#l#v~+%zQS$KgsqIohaH;Qf0)$Z9L& z>CM-WpcT4}>qr=>NWjRZBkD4vP)T#9BqM=l8d~%?&_Y8SpRXUr?RS2NYiNVM);jF% ziTMSP3LIQN3&VyD$JklRktm#*^^K9^dcg0)X9THT z_>fajfE4q7MphBshKz@zlmt3;GDUiHG+tl34BgS|(M}0aF)&4QZ8cQa`r%oQ85WLW z>Wms@&F_jkSKeayj9Ezd5&;ywL}iy#=u&zU@eRP|>N51RG=i3@46g0nf;S&NpweIr zoEqPZGVr)m>{Wjl@n(>rbu_<(2hW4=5P5MFUfjKk<-?uPcm8!z3?Z-2ABL9uHaP1^ zKwjMlBYWB6_`b{VShfn<(h@KqIU8z8-U!XEgp7$TCiF9cl(G%zHD+dvBTp z8Q8W}!q?a|+`D!k+UENB^8P(isTp1t@EFnA4OEBNV@!7=NGh4Yym=|2vzRtO9@26u z?5MiDk|tye-{au*C-4vd3P-nz-`=E&`Qt-va`D@Yza26yvE$fPJbwHHcaCp`&QBJ8 z7(BW+LM|P_gER|tZvoi1Z-an0cM+>#fj+Hh1YVOFfK-5(4{8~Bd_HZI3A?I}tenV9 zmXL%b)zgF?V^+Iqgjpe{uBsYJo?{{D^AuMfy@kV&5$N7g8rQF1hGE-&G?omGz4gQ5 zp4y22cn94b+9R+;cs_%SWhY2w1tahKX0DVH#3TYPR?O=tIp}qpiG<_?L_VB_D?3jL zqlgd)0BPx_;xAxV{%PFkmF5ysG!mcrDw!wxNRBFf<^yHn{CVo8k=eUq%7L+rD9jR_ zGSnbq{z@@7&mu`13Mtx`p_!#WQIWBmRy9yhOCSw~@BzzKnH}Q>(Xb2?qV5~vi(#_Ft?h)i>CE?sm73@FxRv3qY=8-UR-o(HM z%_Gw+G*$x%X&HKZ%=~u(K37!NxjcF=A~~dP33?x_q%*5viGm4V0!;PdlO}bFrX@-1 z6thGw_>FanrY$KzWoZRXw+00{nMg^DL#0X&oH;ZVocekiRaCgl&drjv9qw-?3Leq&&TdGvPWI zN$t+ImNrNZxQkCYQncfvOk*^y2vq+!2(=@ReOAmO4!j@Q17@2LR{1t*4LmlmLUi8C0v{ zkn)q&27*2p!^MV~Fd_lHPD2qK6^FRM-S9fG8~NW=DVrrJnWhzi38S^6i4JG>8|Se) zoQrx^e0ktgMbID;Ww!kgRs?pyh=pwrWNBJ_TF<`KDz@&kZHA}~VBoX+r|?l;R)pHJ zLfRfABPy~2E3aHadkrqFAN0DS;^s5|zO@IUJn9TU#Fuxll&!$?!xPb_&kCADF@GNZ zgRS$${58=SJQ5{$4$gVVXi_m7K=iRGCJ*wzdII zy`2#HM)(0`YLGV)v&+%kXd2qryugES=F@f_u3QX;+h9kk^P} zy6IT8Z6^{%27K^`SXlLN5qd-n95(_V&u>97)vwG-8i8L*v3Pdo9vZ)|pbGQ*$~;WtLydCklA!9(9<(Q zQBg4)n)~J$9+wzn>f{O7vuO@8zQnQNV*Ycw_3w(yYqmjav^(qX-p>S^7pzCuZmz6f zK#gz?^FWwqLygPEXUZ5PL{S@k9Od!!X*wJB__aT+8};ZkbUgAN9zZ4|DkVX<86%6) zJ(SVfxd)Oj%|ddsanMju#ljACn13`J-MU!=@%OOlZ7HTtn}p3rcR(ub3(A|k)v_3| z99@#`V)MNKVdKlqz|5I@(SO}h=%+u%xZO8U&598pL4l>{)yA(p z-FwH$=$vu0z~ zBo9_Xg>1=qZD+3?%v-obT959%_9gX}#ly`zoArhr5LVesF(7WFO@A&XLM+jkm0 zC(ppl<(uKzMjByFR})g`h?OI(uyNW(2%8Bm-X56)Kix%GJgOVQ$#8z&v3_+Q)k(_QS$BvvRm21PG1GJbq$QzQka$E z=)H@KWTri2nnPwiX~I~`lonD(hV}u#KfsH*!I9tryg9|v27sCYIJN=VOi5l=<2sYS*frb8v-w4?`KI& zn=%pmX}ML$h11TAm_HL@gIvr{aKtcIL%7*7uM;Wy9pP@)8Lp$4QEQ4+GdOp#gA`Rp zCU%`*peh_yXr^ZYD;;@soOA-iIo=pJ#1j`1R4}-=C2FaXdHD1kUhbNRVMF?%de}+q zA1?e*Z_wC*=rLZHc1veh7}~VM!~sK(c5R)v}Xx~_V*ALT7 zk}zcOaE$Qqz&p9YRH-he%GnUZjO#FAq&r59aL0j|cKCQ}f#@tD?MCjwm1zbTGH@7% zdyc~8PZ=0`b5jeJFy1_MJOHMMkJqTU&R6j%zsQv`(AJ`(SS!MeWAbCMA(};qfZZJ+7%$LZU6^n&JmSuhc2C< zBpL)Xv~qx!YICf-{|vQ9C&7KnJXFx<kr8qi*ARs1FRAzSWX7!{e_Xq2#w0 z9z#cB=+Mc~oqYorraJ&8{oq{wjD}GeAL@aeuDfx35;M)x zSk@AUA3i|Nt@#-0IRM_RXXC*FX9yH^U}ws_BBLrmMF;kl!g7FIb9QIddHTyT)NSt;cQp^uYP$%smdn3o-!@ zwu^L?nEwLC7(Unx1MO{v-sUD4Vde~*NmE36P!1hkoS{f9MZNZ&V5u#fBq68W7WQVE zFzdSkD-BZNHe?8Pe5}WaL3UtrJD zgvaS*JbQQ%O4QJ|?PL#Gc2HUZ)}1<|nW*lYc5*}uS}4q$p*IKSV$!I=I8)mPA9weI zro&9!T-+8OZbRX={4#djc?*5oGMYMef~JDd3~OQ90Vd7mVNL7rbp25D8BFh$-p7t7 z*-%z$jxJ7i>;eD`ruJRXLb?IE|3z0{Rn7<{8m^6JBm;rw= zV*bup_n!iHGx6t?V*Y)^2Dun9{~>)Qtw2v>@#wgizcWf$xM~eriATr9{LQf+u@sZ+ zm@lxzi23C(-v@{daxr4Wh!G=3j2JOu{#Q_oTx^hw`9ne~(s1U$Mr^w5B?|d@_LK7vCp{LVg}TpIK5+K^L;9~l?0?SW|NlRqe5eQx2=XYp!4VwxZ!Hps;^r7i*eT1miTpPwiI zsEL1!wyiXAz_%1tQ5WFgwo-KDx8?MTF^G`tfT^CY*y+&$7a~hVN17tQqa8ERclam_ z?dyc`Tkf-=I|sMNg{Yq_Nc%tL+0k{l`=t`q;iuv3v0fDV%Xqqe5EfqfBJ>moz@nWS z@`OGyzX3(T=V8!72bV&bWjcj?IX4LsExRC`8k7FJJTP#Ra4Emv6n+uLPgsW5y~m)3 zUKIvg_Ck{A&=1t*VAIq=@EA1)13Q~x$ID`Xn~nkIJ&`Pm^2eYGyA~}*G6(S8=8i$z zd_>{DjOATT@i1Mu&UNOS?Qj{pk9CXrttiFhHWF}Nc2DG|BAFWq2R&KLx|9e(-Yc|s zn!v7_@>}zG_f$MBG{V%8Zn!$LJ9fSnE-Cs`J{((u9>YdrxLXgnFFwJBU7XSNXXF2` z2)Mij2i|0ZJB9oqzk&%V+T9FzO)Uxq1^BaxsN<5D#M89rbV4y0Eq_43^Oi4je zP7#`{Jd4Q7vvD-h4(}e_$7Anz=r5Ou6dImP<0pyYvn$V%pQcYugX$Xgep8ZjM9Q#% z#z{j4J?EcMRh)(Nj7%CQ1J$Cz7hYWz>Nq?UyRienqxZ!Hx2gbX>Dg!yjpoQJ zDnnixP&RPHl+oXJ)GRB^5tdEh_^RfF*EaYo4=(7dd_85aPuHRRF$;qP6kCtn0DU~UH18O;ZDla+6D-x~(TqSx& zCH3Ej_8LkHs65fe(I0B)mdiejefz;*nBZLgNd!65?0?m_7)Xt+N7p-OOxJ z-KZ~R<7A8S{sV-E!W@x&=6v52pthzOd`=B}USX*)ZNjZXbpsC-g|yyKITRuZrDn|_ zNi%QiO3Sdji6|V%&J>j))iWRsv`lGzrT)yq#%++Q5FeL>?1t(})HXCAKbzi5UXwRdHDzoa$jHn_Wxc52#rzChWYRuq#Z>nPDV+7A?ljE5=wu)4NIRX z!te0|Jbe8gQ(ERBfIi}k#5fv1g^e$i&Yz}F#iF{JD$jb_9%PB)@M&IYdqDN@KO1YW zEu(c>)E<!?mCq3uB?szg;!RzVqxvJ#Ncw!+NG z?%#Htt}6LnhKzJp6bj2GBQxh)+n1FbOY3$r^2*Cl&r!wX`Lm%b`hLX4R}220B(8+ZKPaI$guQX*!$tHZCb9R_sB$ND|-=x;9rp2Y}s zll8;=10k3>z7JBK?ZAW`_feD{j|&f;qpeAE4DT}lxf~86zciqebuAW7o{yl^Ok6l| z7P1CiVP#N(*&eeIK^xV;chB)Cwi=#Y4Y6~^DBO+A!@I{95mVM0b}EtByyGfL>t!LR zOUL5}kC5LWh1Bpo*bH!jifCi9u={)QFvA@4$2d}-ENoo5LNUz?+YVesAzupVk;Q1= zy){nE9*?_GdGLO89#Mt5aJ4tUOc!Ik%;6)@ z1%^9^7UD%@8OKVJ10@wX$ras-eK{vD9jks6G@LYW73`{C`yaN*?Ui5W?_$KXE)$eWClKc zxPzNva`5b|f@8b4(|i+@r{_b{P#T+7oyUZE<51#r8k07hp~g%kjvRXdhd~2T?Y#+h z!w*o~DHD&*U4T!C7Tg?6aA^Ky-2V`TxR@~9xbp-(h7M-8TmB=HP8${#6%{mZ-dq&& z`%szu0k856;ZPg^36H605qb`<8XVC&HyDmH7NO?BS{zR?!?+&Cc)oKaR@_cPX}mYK zJj;S-^UrXeyce~lS;($4gj&Hp%-C?AKBF)kKK=#{Zf;O1euME7_8_A$4KJ^pKx&Kb z=pqx2iPM%NDl;8tj$J`3``)MwIEQ1m1F3Z>hk}BSc<>?+0%;!Ypz-0<#ay^cEUIyQ z+a^fa&%$8lLo&sd=;GWSXT!QJCk&q48kIvH%(N1|GZXZ1gf1WY=+P22!{YTJe=?awGT8lGTmKfX3 z0FSnh!0NlyV2XWRy=lH z%f{4Uo#At68rIwlMrPbg9J-K#k;A*-#`qqXa4QV_{4Y4W`4DP44?#zb6io44im$X& z@!{!Ryv>opASZLt-TgTT3JQX=GqW!D??ENi-A^%UydB;|DPdSQMQq&o79RatAXTXs zCbY}KwB@%kcg9c@`klte)n`$VnT%TxAE0?#3#{zh9-&o|hzKl%Lr+a?oH!A0<8$%& z##t0fS;Nsn5u3(OgjYl&B18Oe>-k3vcJGa|^E_}eC=a1tSK%Gk41KN3v2DXKWLHUm zLyb`H*SC;TCV{-zOc=R1K}$|p6H>iTVU zx}g^3#kn9GYCZ(x+azQ9nkSeu%>#Kp$1rOBB@|{P;rfGn&@gpHz{N%I3d=!g z@I#z!w$sNgp2RWoB{1`ECT1X?tlJ*AHB%nxm z8WC_wLw*3!Hf&G6RtbZ)_0%Gh&&3Hn(I<(T%?J|td>euOcwrbtK!5M|3?&Xz&je0c{Iax_v{ z-XC_k6UXW2SU0KpOiWw1CCSt|ynRb@F|?cw4n8uDbYFCbbrVuTJS{EB$1;((3F%)W zNlaWQ>7uJn9%d8rd0Tg4yY!y$VDf3AYUxP|i=v5^u|3IW1G!|Nu@pIADG*9zco+$OeSyd-*^&zCe>ATH8GGuB@L;JQ zQCD{+)ufyZwJ;#p;)TJHhei?O=~qeW;}t~PWtlLr@HH_tn?MNf4S|FSq1g~pmrppN zYyFY&@$n&viHRcLf0^1mwhp|0^^*8TrHKNCWWC-*EC%l&m4RD{^Qiq~&-9VxT}cHQ zWTZp9=>zdy+nID(`+*dH+Cy}lXNu0E;#E)2eYKGo4qhn=$s_$u4avPEp)YXv5Ms07 z4tcoPhBz#IA`D~@RFai0+GPIS9HIZ?P9kqJo>UZtlGfd)3d4A*#7d^gGi*Z6oBhPP zofXkgQ6&Qw9w*twG*FOEgM9z8~DarOHEi7G0p-2`s^lC#^ zy{Qp;DjpK^HXcMIo=xD9(9kdv@Z<W>D8(Q`9v@Ac7+q^y2+p9`)nin-RBGAQOe63>vCjr6gfMlIvbLuxS?^O!o-TGG{q{!@l6i-;G#f>aqRpzc;p@t zPg(i9LAXdw{)*U`7{n!|q2VX*;{?10$ZI=eYWpAzKL~8&R8~QnkAeN&rNX8p|CojbGNfYrb zS%8S3FK}|}EsUpVjxK7F2u!aAwJ1z~iC5<{w|HN$PdR^Pn)?I(G)khBSw} zqXVL8xCA}7zE&9jlW!!Pzop*}omGL*%t}ZqYraaVy%4*Gx?<+Oy9f)71GlOHg;jOzoUi6Ot%XrcY@uD6hmuMfu3-S-vgFcm)>o(H zTnK4q`!))*t+I@qJor(sP}-^&+KX1ll9W*fDG9;C?v~hoI{;r2G9X`5jBI+0%jJPn zFPcKYCy_W%v>oinC`=peOGE zjJixlWeuO!AwJmeCpnpT_f-a-14TPtcBSd3B_OY&8q%7E&|+kPpN9`gMfm!3E0!%@ zf~A}8K_JINU6VOtRhhn++oJ>aJP1W}QVwK`i@Co1v+yDkJs7MU3h_7`J^Q@in&+$P`X_ z;PUvW6X^i~ql;waQ5N(DJPQvPh~&9v|1Jm*jAHAEmX019CMl$ep4`B&jF zdpRagoC=@xe`n_IUll&GsVv0A#3C*s1&y-^8)4*6Qri+MhnB&8#z!ofdN)7LVW{a>o$;eGwJs;R>zx=GDs_`!NNeB4gC@lg5s1&h^oFwt4~<4m6&J;2v`wMqq0%VxswU9qRv@p0%Diez=rUV6 zQ*14ak(!hRDJhZZB_RoE8QP{61|vhK}S#1MkwM24JlQOo;(-JmM_PmDI=l&(^)i(Ax!^_UV9e%_fBJ9 zi}RYy(<6L7B=k%mQ=UQ1?j|r%1Om|PU^EIji?$KO=MFs z@Pp1^%V%laIlluFCrp5|kt7;tcrnHqOAgJ8ax17PNj8~t$VXBh4~DH(zg>%gDMKk* zhEk=eXu9r7=!H$Vr#T(>_RPohh4X21(ZCifp?RfNk1!H7Xb3GEIdv^)NR%K?G-1{( zP89eZA`nXQ$~~vBcl}`MsuLO^A{d#}rsbWV^5bWdOoxkoUJM%AP!*IQUu4u)(r2XD zN*jFI;SEbm#HGXg(Z2i=rXP3@OI=AMWeDS;Fde0;s!&moXQ#Wd(7$~8+#9#f{sy-e z$?SIzau_yh9G0Kh1+~mb6jg8`py#mhWz}Gy#`&Ipei};E)S$w2uBj}tNXeo(?KJkE zz6E=BZNrwWXAu#4A39B{-KR6_;BB}NcX!Uj%q26RBO@}*D3bJihQjnrXtdT7=9|hM z3#SkzL=D>NazClpe6(z>i@X%(%a89|*f0~y6VBt{ipf|ubs!XFgq;#*;S4Eiyf82+ zGv%z>+8Ba@BnUtC1hUdnphKSv^L&`}8JN7#r-FKkmUx_+gU6@#V~BAQhR-_49{+oz zfI(wsVfpf9SUhXuKUqg!fLf|!dapcz9jm5Noy2sEzH2x_ABv=UD=2gFQP`+3 z@7HAXn}kT-no^aW#I{MsP9B)ObQ>mil*h+#Dl?Mw`HSM~80sK5rLiK^A+f9+ruypa zN?kmWyvWnG%G_}XcJ19m+k>5W85NHO_DxKslvh~)G8GrDAE6z)3Fu>`1g=P~B_u`h zs&i2;se$IIGVIDnjm=kDdI|JeH>a}sy&f7Hp&Fl8 zkBYJqK*a-#I!0l}s&fbl{DebC58_K|HC5cTB4bnz+xE`EgEh18IwTNVCv8W!85_|u z`xbhRUW$OwNZNDPf}^7aMlIWn@;j?=!!Huo_HIVK*%WkD0!qs(z!fPi*MWWE|Kv7& zy~BPmVB;TegX{EN2nhK0t`atJCz3}PrEqwBeL*HdvQFeP3ZqoFx?%srk zc2m%qHaewc-_swybPF2Z9>$H2QHY8Dg7f>9A+E`Qyp&BJbX2LrlUIRw|M)mAL@@^m zYlIZW`XeUn1E!4Ij()2)Lq}BtQe~NV7Z8RgCzs)o%2+J0kfYZtM{NTSe6FYrn~%f- zn-EN2bCH(eM;ttH6au5(P|lCS$KWtrKe!gLw0pytB2Ilgk?3~^A87t^%WF_wQ3k$@ zDOQit#j3^o5fc6ei?)2i+O<=`uPaAIwa7f-b5K>?0J+L240ZRw(@&Ae%aMeIixZlQ z_c8iem}gW~E$r!74VjH09hf=n98_0UQe%X=>Z;i1X)$gCEaR4A<;713dH)de_ui!^ z^HE(V`f^Lv0joUKuzKlXghsr=(w(8$v}p$XPR_)Xt=AA05ek8-H5|J1#>Nf9ac;p3 zy!-qKYi1mU`{MOztyG87O3_H5iat8qE8^Az9|Q#@vLAf0Nb_)cwL2#6d5n;dkJvYB z6P%~5fQhaN96BiA=EDz&jIP0!onvrj-Yho#RWpynW9bIyHccPRv327p+}*JWKH<@b z3=6@*{aexW^E>Nq10hKNjL%`=IKOKn;%H$onp8%>LHI{6M18u08OOh3>*@)tF#u!u-hlh)|g)s{Uj=I5Z#u%Z$i=F4;yJFHzblnt$~t)encH4~3R zbs6(9ur*cv-4sJ`EX6JC*cbZ!fxl}2KwAy86U0gk96;L?8(BH!G`N1qTB zbG{quIeur*dBkeAJ$QCwH~gxcvD5{ybM24tx3}Q`@e8abtb^Kz%{b*9iHB#mAg2&EpWa-@u@~8_Q7kDf zgNo!(dS5F3uGl$a1wMwo$NVKXF=Nwus7O?ytWq>EM%(x5sv5|1GBIuBAl&kaLPkmzj2)aH zdRZ*ye+v1}KI&v&-O9>BT3VX^q}ZODl#C3u^2xuo9xfxu%p3h*yOuPQ54k4!V5Thm zTv8Gegc_K2kfiziz07i^vi>PP>XcG|iD^4@Y;XSU%XtQM9Ya{z*ub!*7EH`6VQJc$ zD!v7f%@0LXTqv*$2Or0Kt<=~ruZ!ts6cX!-=Y z21c;5vVgJ-AggJHk$ueY^2K{hH)3F}TB zQ1$5=uEhezid-o7oQFN*?Saa496WLjCME_bK}#Gxyn%fSp{_&kr@amITWGUoXwg;= zE~6GgDklVA;?p3bVS?dfr@*mgCHzCaK(WIJ%rGPbRn&zMUUCQl6gfTtqh~Krm%K$MK65<|IjZ;Ez!cE z)0?36C+Ld*uRiLORn~;5g*7bNG?4*FL(jM^+S^*8MGJkjv$lb$ZflI3Ivz28Z;_Ex zg0>wy!>NN6j7`j7uCK+OWz}~gG%Ldp6qW_YxtlT7Ne4y_JyD-RpF5RXeb8SE+LU?aEQbO8tP%Aw5M_00u(dT5e$*);ho1d= zA}!n>S(!PIFdL4eYdq)yN%Ze$g-E{u6jdo>;P^Q-{Zg8KJXHG9^e5BwCFQ7`Hl`1> zupNXR1{LuB^aZ(jxv=Up^M{W*RoZlgje0Sa&uFMSj>Bv>7qquB!-pG(kU*&H)mEeT z{H+*ft%8ySADnrSh_;$?s5k0Mjj*9?yU?0mk10cKT80+Z)-csGz^KWi5&8Z#GIPsd z(xD3mkDCVhq9{ZqWT4})B^cGmmev`4bm-j+<#GN<$PmE6%@yrUEnsfa5`8C5L1Dyu z#HG|>#^KX&RF{Sd)mgT79bnvC4${rE(YBox?bwe%tD0zpL?uAVzzs*1HcpNB^YHtA z)F}glHs-MHU<2jGWk4t@EexnGvqjt1+Awb04we?iXzw-)x^=M#j!p(q)J4ypUD2*h z8>(a5L6+(o1)UBUWTy(B_ra()?1NM5MngiQ9lB~)!9P3>`MkC`eRwgHl{7JSh$DPn zd7(_!1P70;gEAF#Ej=Sx(6&)SK@$3%T%l4Nim>=fm^s)|{VG&un$|sGf((47c_?aV zj`b(^z(5YrW#Siwvij3{pgZOabHck9UMQvMA3C-cN;G|Kn!crlCDdv9QqA-*Vt5yL zKY4}x+$;zT24b`m?G-d4p@Bg?&1nbFA2~8@v1*nFI@mivD)lwayvv4(h7|biJaJ-S ze;TJ+f<&>@)6Dy6KgPwPQ@w9#t;leQMHvM@r2!E>Nh9mD3ID7M1D z(G%d&K?%P8Vc?j!VZ*TQXw%LH>V^(*P)|W%L@~6@ZPCr4BP?j%+cHE(qKk(!iUNZmFtmq7OZgwBI{X}x)Dq8& z2|}i%5jtD6_~CWfFM%<}YfDlQ9Q+krniiiU4GWhpFj1EWmwCVQ1CmfwF2e357cgYi z8W^eY*;hcnHOz80YHDgwQu_IIElNsC;N#bdH?=B^z`&t1uEu`%kn{1u-qMqDOTUDw$#VV;pt_Gs1s8}A!7a; z9HIu@k|j$-J~4kJ;;u}?ROJ9AHbOpHO}Cs$(rcig;r6K-y9tUdNe zW7E<5zjDfogcKy|3vq1MUesxr(B7Fjlxwq)TUn2c*eIlzHb6>Jf}O{!pdb%<1qJr6 zBqSh5dnR&na%`BKj1;7#Bv6tTgD>f2kdc<5;q*9-qdhMWxp$a zX4*h$dH~*pm!Z9l4fHi?aB1IJB))WO41I5oU9C(DPHw;^~{6=cIt|ZER!z1 zW@9{2o)zTf*n1Eo=I3x)dIy&${rE;hQp*uxj~myo79-}b&#KeU;MrF6ErkgE-mCCr zV-v$fjF`VTZ9I42-m>rebg)Po;??VC_~V&>V*Y5b)1IicEAsww7~{4k*$2TAb{O8X z6HJWTp!fL6=%A?x&DMr6YN1MPc4<^3`Qhm4i@1K}0?u7{h-w8s-rT;8H_xBo{HbGj z8(l<=W@$9j)`PW)9yqnBxOM#z-rm1~v**s^OFo}HE{A%&e{z+kaS>N9Ucf!ycxpH| zG0G*SprYLxW~Qca>De1vNJezJ0F{{mc<3F+8u6uR{;ZoZyd@c{oEqb@GSZ0fx`C6Y zF5*RCGGr7LP?hu%C(c~Jne(@hP+TK6%EkOF3Yz+8t?`prUy=%FYp5&oh!OMGhnY^G zCikPBlvdV)A#Df5i21u9tI`q%TFpehMr2@UZ1ip8A2DKn4rYM(SB;P}Uj-|)Fo$++ zJZ?XFh5U+ob`=R}Sw7-|J|ex6D(8||9J}p{o`c7tpQAA%Kl!6pMu5=QuTi3EjY&i7 z;6sh`e4aG&V*?PCQ3YvIhIjX$LfLi@+-#L__1X&%YD|CizJ~Wj+891+1Ple4_!ynV zPF4Bd1W=cN`AS-V(yT<}N$J3*wF)W<5)m4k!;Z+;6eY248EN52jhFQkq8!QN0Adio~N z)>5IhRRCEHeK=aTg=!mPsMeOCs)i3~8Cgg((^H55%7*snWZD9nZH>Xt%Y`Jj6z_wQ zFks+dXsW8g%F2`(+-84`Fw;zmqP=nCz&5Nu^$Am#u7;r^vrL)vHv?Q!^1GWc;H4!v z2nh*+YAbzIm6bqEq8!l~TqsM`BhWtp6|#yj(A4_XADaG|sm_jqx3>@dy+c8hb%+ZB zZ(=|%2e_@fioBq^aO>>|w>77c93PMJpDt+rZ%_~$4li$S_(vv*LPRv=(VuXbR!uP{__`LH*P(;f2)h2$1%B)CuzZ2d|p=e3xe-A!VVuRrK!51Iizr(wb zAD3ur3b#5RF<-MpzF$vmaVmVhyz!o1lUdOs;G-YCUxk~~i~s=N9Z5t%R4;_ah}Wk2 zJxPxEgm+YSJ_LmSU~+#tIu(wteX;yT2)>-3P2K&l;Pi8(C8htr^7ya#>i2=l>N`Yb zHeE{ysL73G>p_HQO|#mfGz5I|!v|Uq-g)^TF8hZCNdGB`jrS7tbyeThX;%}*9I|2HU4j%M3~kD)Q5kVeYc zdf*oriaJJ!c~yuC4`$ng_df679~>`iC;kNugd^L2zgo0%_g%@uBTsSh{#9;I9OIn7_&(XJF>LsJAqP zxvdjsFJ6H@rWJVgE(J0&jL|CrW;JOH z`OI3Q%qY0VPZeREFGk6I{@p}EJFvi5_koEp(ilw)zTAb`ph+?nAKN= z(OD#DGCZ1AMNuXa;!~jM=m}esmKZl{CM;DeaCYl@JdMm_=ehr#2)VcmQ|BE-P<$K` zg709c+bjfR3zvX9xNkGY9Sy?kofC0%-v*355{%coXJhMxp?H(pWSzi&gQ|>|n6_j$ zl9E$!Zv99sxbT?`ugeO-%9*S2Aug60xyeF9C-emD`^eaZ$beZ0W_DKicc{<7Kr3h5_#DMj3H zi+sPH`tm$PhJ@j3LJ)>K+u`^#e|(7u$JZ2Qy=gJOJsez|I~(iHKS4}f9NypEg!h9pqm_^pka%zwZ%Jqx~^$L~q=W z7S_4+x5qJe-8p=YjznUPaJMSoLz6LZ**V0=#ULy+9BBpr%Ccy{d8*SkTztyji_gs+ z=reBr56g%C5~`wap-0yV_?Y+=adF|;J$oqT9e*S``Xhm-=40U*VLkp&C`wB}XhakO zU!8%S!w`I=`40<;KyKN;S%<~^YErz;V$%4{@Q;tj*RYqEJajx>eicgjwWDj{xb7WZ zA76>rXII01&3n8)u>rSNjl=cuU#F`$B|(@tdmR#KdvJH}Obp-snhocdBw*9Txp+<6 zrRbQi;4qDO`YUvE9gTNi64~~ES*_|{8RSWCPGRz-t)hE*jtQO<@j9{T!k)hbKIU|C z#*w!nh@N%)*z3mvUy;B(6H?tvE!`t$`SItVhBJ<(RN1U?_r z(4~(9s?);p;(a2zdbl9snIFu%^+YSxDtJE$hIQ{=sEYAMuCg6E=~v^0S0;K7=nRRv zbiDD&M&BW>DE#~$S@LaRXDElTcW;ouYlYtSZG@ZDNXeigI|88@3h3c%g|=<<@c!Bn zlxn-cSh0{AZx!g-(;DF~?;@UK1ov**cy-?&R(<+GyE+MpytbG$#tp`*%&IW8DB`K2 zd)Kaz$qhz|R9iT<(PTRn{|SGVWe-V#KV02+;_yc=jPB|Hhi-$>f$xRko8DrETXU@5 zcm^_x>fl$z;MB#(kd#z{wuuo8wN=s1&IwuylE@5sg3~u&AlTm*h05(<-ck`C9$&=0 zr(TH3mx8^8aQD1M%BuP3J8TmA^l(Ox)+Ly;-482f4#ej1p3t3p25ZOkgS|~Vb`Bmd z;{(oyXyVa@P3YXk1s$yngiF8u69jo5&|}CUoD6)85nY&jafeOAYYf}qjipoE@Z{PP zloo~K*8P{rDpQA*sc@IJ^x(%hbMq-aMVG?C-V9Qt5+}A@$L_cH;qK@J_mN{!^>#fL zU97~MQO@vs@&E#EF;1TkgoSHIv}~adWty&k1+z|w8UEq7=JSLrfgo*uKU}G-aY0>-sc|3UGh1eoF*qQ4> zP?mxV=g;DUe+YbIGGJ+A1qCSrujluW{N*zqy?BfKS{*d!hvC@SJIJlpgjHK+S-v_v zK70%>f`ahzeH8RM*+cCQG}-Zgwd`T)i_KVaUx1en4x)>r16=!$MCqOB*b#36yULf? zaX$(Gd_aT0t($2eF5ot+Hu{#64xpy8Gu{F-`w;XUybp(8--4%$3#<%< z>og>KT|=tHLL6T)8eO_}hN;fa&(%(Ox)IBsNaN+beZqSgFbah?r(kPzTTFJ5!KH^W zs84!`>yJVqrE7}T>dZG0e7wGUfy#|H63Ud(!L%i~`C+*6P6l@_ZG)p@7mOJ0io46) z@S`h&CuH1421#j(9p`9-n%5VD#~#4>;o8gvH>U27YEMY zg?~gE+A>S({Y)ipVQLMR&dzYLQO4Ojsd#+j2wb{3!Js))uS#+G%z1cy_=Hk96PW2J zqa@}9j$L_*&>(*VP+jBPP7kCi1Gl^bkstIN_g_aq(ZB*l!Pju%jz47d+CfiU4!nva zTsV9IzMq2-`Lz@l9ZY{%_Vtg%@4D52iia+p5jdC{Uy6*6uBscJD35cXvX6_u)|bdI6)? zhhXXSz6f~r2zA^loI3LshK{z-(Qb`aa@ly3AOQ<{?+lSIt{_#G)-|57ilt=SRPD6i|d`rtJ})46c6F$8M! zasB);cz^s1zsN)wTG&E`3bg;*2Z*N~`^V2;BCSvrhAL?|c>F3-^A%ug$t>|Iz}vGY z@z~Fwwg;h5Z)XQ>#a}&U`-kKYz3gF7?5`UkmtdxR$PxtIKZj$-kK^Fs^H6Y^h9MnV zLaBL6C`xjmX*m$XZ0fOp&t5!xp8^>rIq-=TTIjWcEHxH*JZZF~ZfOYt6g66+xw14B z2LRhve%X1a?x(!Y}k?@?A);vd(OXv zfC_Ecv+LNtbqhY%w1sDPQ*fA_K>j9tp$14kUHxFu=4-w8aK})q}Fth21 zjvcL`p`;A+4)(A#kjLpwYY<*4K>epfa9?!^R$T_5R|jQ$`C5d~({r)QrvU>!2O#(1 zI;^?(<14K035#&g(aJp(avfEU5WI6F)$c$?+~i{Ohx-9I87EJ7e&Wp)jxefFX-7)0h%CFnJV?he=Z7sXg}eHOItjX&61M z8_uqsil|zGoAdhOVxa*%2D-tp{v86-{?oCXzXo?t9)|VQSrG0CDP+mUS@6Ac27GNZ zC^yrBgL5ZXnVUdfNfXXp9idX6fR$?wv2SwT?i_*5uS?OpcOMw4*C8vr7>C9WLbPN% z3>oBviwlO}Me>iYSUNg6K&CnmLGPa6ews1%uIi1F54TXPs*KYU$D&uiKG=LMoQb2m=UxI7m%J3jHx4g;Iot?dRP)naG%YN zFuvG49%rLuF=SYO#9my410M>ZC@%vd;C|n_UqK(oH%!6RGrLiemx|dQJ#alk3%$FV zA?D5=9C?+8glAi^>rNyay)5b$rtSBJOb+ef&p(Hb{XNlME(+tPZ5QqC`|~u^GT$ii zzF(W>a_i6m_$qG+_W>PodgdU!&jl)Y^61lN06azvLiyE2SoAm-5;bv{N%cjv5;bV_ zi{NJ37Pm`G;A+Ojgqa&@S{%%9ACF4oZWz$7Ke#Cmk@o9e_Wk83dVLiB8htUqGeSJV+@+J6UGj-J#f%P zY+?bjXd5u~WFqyTa>a8bxlLGGg3uDm_Lr3dxtsOm}iuahXE-l^0|y* zLwcg$#DhY8tW5KuoQ?^eL(t7*9K!N{UXt=(9YJslH}o_7KH^|JXezAg-{1uYI5}}B zRzAwY@L_%7wQnXa#87FAyNyxHZoy%ICoBXXF?RM5dX@y3UGM8@$Dt9og}b2tn0m|~90_?CS=eK+`%u`cBw^r$U2NRT zONV2_%R-DC>4IxhyQ1eVe~cN~A1@Bi!;5SI0*;Kq&QNK1403~oVlo1girMqT{EjR? zd7V_2mXO@s+<)trmtR1Ni;GE7Q4#wqroX(rJW^OxObQC(7(iiZXgm5y_|Va&z-Yk;q+8SVRg7^6B|Znlv3IeUUrApopZ0zah^8zLM;mBywlp zdUE3V7kaGVdtM3(Nm1cgsCpuVC_d_wHSh?>B^7NDgjYN#@R-OO|XsLJI0c;grC=Lx}b4 znxa(5tY9PHWtjU)K zLh7H-Ce~ALkQ}egL}$QOQd8eRIJ`2l-cFG$dQ>7j@n>lu0}We}dr6{#;KmULV;k}+ zjVaFtlJs^n(Q{bA9?JQ6oy=OihAf-Zn`oI&XT#j=El8N?60>`@Bo9-0tb0d4J90WK zgKX-hNjlHEL`vxW)^gcHe<*x>d`MzqqR97OrYMxH1M}z3A{#DyivoqLcWp^lKhG5T zL?m4z(CJRH(gKKXmkGkKd@rKyG+yL>OSE0oG2VuVF4B>f6eF&IQr${I*L zheIB&?n>O&z7ZY#PF3b-a_rDvvTgNp@;Z%>w969+IqWkXT_Xx@g|b3O9&ysPATiac#G$Pn@yVzsb#)vP z{b)Hc?Z1x*60Z?c)A6KA6q_aHB$2inPKq)=5#8=nMS+AoU*<%*Zu~?9X*Y>+&n0Zw zokd;Avd5X^-h3xA>fi^$tFI&chB(qs&w#xB;hz4H`t+wnTd()`YsZ}-O8Oooy@Dyv z26A_)Bk|nvi9O_fbq86pdNY~e(t>oF^_&Pw-VmMcGuUIKB8r&V_9m=`5@Zqw?H(kb z6cA@ERkG^V7h0#P$se#9{J_D32Su*`5`s!{e*ZeQE-YNPgQQi6!YNs|W)qEW8%4fG ziixY4JUJ3i$Og|2QMaEPmLu9+i+mW(MSVL=9=6 zI;TA4I%%csNK^bN)#Tyvtz_4(9c0%vs(E=~q*)6i@}WR@^u#E8;=bp{IvaLs3~ANl zr+NKO+O_FK!*!d;*GK{B)>fIEPAMfLO)SWx6k-1F%WO#FsyE#oIrGRv&ZQrXJLKeGOlLv{yGO3QcL3GSUu(8QcD_Y>qv3j z1=32hH(^?fnyANQ+Jcp2^_*cuS))H2duC57@+6sclI^40k|Tj-to!PWo@DjYL~>`Y z6|wNxN%CvzNi}V|{)*hVaf6hV3Ge%l#>OLe$*+DNK?Jm?#^Hd=<+48x{n0eR<8s)! z-V&0MC`}H-g9rEE6;q3GliVO(S5MF3f{Hzp0=ObKpT`x=HD}VK=`cr|y15Mq|L_d= z?>s`eVK0nyY(>xgKE;OcdEhpgawDMWvDXm@gn6WXE~kO!k%=P^U6(oub<_Md-UFY; z|8_s3y#3{n*1&{WOR#R;I;@yA4$Yekoi*3hM8?-xkxxWTDfk?D7^u?TIW1#aTon4u z=<^b~g)q-3w_FnXI!#_0mK33|ya^R_tgz`}UmDx1Rx`qL}gM?+hC;0u^6F@NL>3cVTfxgO0VhsGVAis+C`*Vzd1eTn0&8ge=D9nG0)^CV5KxIWXPVU=+b*oq7U1=K(aM2eX z{f=^Ld(2m2naGGnvP)|5b3Gx=`Y*dNh#P52J8LgYx%L<`Ui6Z|$qN5{? z#6;o8pp9^HlAxevgl0;z5Qy%DDm_TZ)S)0PA0?HAxP5X5HmqBX^WGI0F}e$TuRkR@ z$RFC;ouI71VZZrlgsBF6ZapLn-O;JQAGEgMvA-f_c(g`RaxxM>-NA+p>#=;z85j>A z4}*Vmm%#G0B-B)9;rJe=JlDXt#u}b3%Glb!E%ryKW7Yaim@>cu^+grnOG>ccC9yP6 z`KPka)&j;YDL^%}@#x+WWO<#!@~MN-w)Yy?s{KvJ%c-2(*0hVoO5psFobqZ}e8{KU2QGafJHFR|~*f5s*a^zK(;p6qaSifN% zwj2w@(B+fykB?sop7W@loYoB|r%yzwls5F0mC#)D=GK)y+n9(1p+`hVw~>&`iNKGw z_B(3yUMkYVeta9ltwwdF1T2l!!Q)XIg0^7{e8NR-O&zlGauNIPI@Z(nVENh$upB!c zdbCYq^?XxGQ;?gf19N&KJRVaH!n(rR57drf81G?=H!s8R>XsMW={+?hMxm}O1qXL- z!rIjv5GLh_-W~qUsd@B4FUy?zBOTWjKKB(tTznBNU5F2C9!|Cdlh zpg~FDHlMmCMqNb=81))dfHEfLW8-k+%vm@!Y7MrI zmdCw^UqIoi*roe;Sd&KfOkjSca(w9`h#O5t3CJNQoinxr$-??yYiN!pWlT`L>m00F zw;t=)Z^70%{a~U;I*ufy9~%vI8m9g-0S%@sAL9IeY^#fsHfPu$;iU=v!EHzil*z~`}df!Fbc(Q+MC{sA`5sAF%09y6Bc z;&baREFanc?)M&`=D1a;QcMV`CKK5z-Srw$)8^gErdM7Ell`lg9gizdV{q`$er(u! z0OK9Pu<7z23%ef|jcb*PaIHT8 zE7q*ThV`4UWA!g^BAtCrb^?68!gU{Se+tR3dGX9*UbQJ)EDSL>FFtqeMgJ;Bxb`{* zlU9y{HAzlcRwi+aRBmjU%)6I&M^_3+9mWVDQbfW{SQE$h@4&W`=V0Z132s68&-(EZ z!lH<-J+QMW2E77`z@*U#v`Bl5?RWB5zk0BJDZ-q`qlK8{0cC+Yg>4V=>Kc+4)B-&; zZ(b2M&tKJ960(&>Xj0k~bq6iN8d864*tiWFr*d;sz>U4lC|}X^9ECt zSUqJFN{m_xc5{6NX%F(^gmo{kJ!m~-6rS#!f#u$57~9SkrWNX`?-_Zn(hVk*aX*<^a+7a)cK7_--z0@4mzmQkFJu*n;J4#MpYugF8?8N(cmBa=m&Y%9a1l*YK<; zm&-pNp`rZC7*>Ou`w`5VJplJgSA&(@4}R(vczTlEs#yagQ!|L!RPMnT`<7%R)!X1)!hp_v=atxe25ch1Yq0UZ+aqTWxGpaLpAB&w-iD9F< zqgfqS_`JS{^}C-CTYa3pwFuqkjYeP@C8Db?#Nn=G;IVuV76qB0q6q`P#Hu)SuqWrn ztPbT7(Dpj+tYE8S9^+bg_-a39&FG8UBrKM4UlNvfcyeqaIT;00b5qh8Vf` zfgvUxyNYR3Mqv2$;xHGfkRi3jj^z_bLzRi;Q)Zx~o*I5$!Km4PC)N&QI~GbV9`f7~ zi1lG+qLc2T3a#OkItltimUHG}O{QU8^I_;PVhUU>LjQDm1K2av1zOT6G&9kq6zSH$+%)f4Opf(Q_sSG|_Rhh8`F-K*ToQ@N(HOGeG)^vk zjNyaFqI@wU#D9oJ>#1uosE#9dFNoxDOumW69dDvTNhO{q*1^$jjUki(H#b~C=f1z9 zn)wHGUU41`N%q<@r!Srrt%G7I?~&Pb2G+D^KR^pbt6KFj>RuQo70J&@b`59X@B#)? zy7z)h>5@o~@quBVL)bZ>6test!or;IYBBLQl!y(IE+73Sf|(g9>nuc!o0u6xqVEX* z-3`$FNCTACCZOi*jp$PT%ZyWff7s!I?>)?#G!X-@R)L*165bi*@%GkY?yS_<^kbc3 zU`*;Mp{_kJG%;mg9isJ;(|A5%2zrcq3nxJkva2t|?vsZxVtP-EwQ+=0C5OC7S?pLm z<>Sa;F++Xy9o-FX^{XS;{WcaK*3B{Bb!7uO%$|hbZW|)fcp!F9sDrR`%Q5j(04f$Q zg2130>^bl&ckQ7m4Y5TzAMZ{K>TwB7@FnR zvl0ViQnH0;v*I*fkDrDC6C7Y8Q6pJpfF0Xb!MZrGW9k$>Z4#lf-D^Z+%PU*flJoPcU51j~?B2q+$hhxCnGw6f^aA~v# ze)3R|X5uppP0b|ab1^WR% zn=Y*1xI^e0nGtt%0hSn=kn}TwQQ{M{>v9*3OPk;W(+OKAx8%-Kz7A|^2-rE~3;MQ0 zwxZCBDayYHJ9WmK^oEU$@*AyBNl8h8o0}VY_3Fjjd_!_G5Sv5_H#xMnxBJ*@%gN5- z#4B5lW#m|&KhDX@gr1S9uCQxz5F4LH?iIk&#tsIg@=#`{AUT6{&IBS9v9W>lllCqv zJqekzTv=|wg!ojbwL)0f*us#ln9^ROjN?dL&-CU- z;66i{ff#<&Fh48|vNEzsN5X__2$ZrcFj8aai%DQq*@#JGm%<`q*vbKB#5*~}|5;hN z&@fsEq!zH{R(a4N%OdeWDl@Kb(NBn%&GyIZRD;!cmz;@_eR(w8{FgE@s8$v-IS6 z-AJ6s5O&rUTm@W^#Q0c}w*k{)cKA2|M@WeK0Ii7lfw;q>QKln-Scdr$I(qDstqysfh*_cCawypG4w;Ex)E*JP<9W$mUkuFxJ;)C|SA;M&JhPl30J2SIwp0EkaWs)!Z8=IF-hFL=EZDa z#8p7)e4Q+SSy7VL^S>G8$jMAWT9$$cMKct&$nS{duz8Y{DJxPZkYptgk(`hSr5dEJ zw&Ut*QWDVAv=Zirr=i8~%>dDmu*82J78%L=Qc{nLiT70UY^X?iGn9}3kTxeKHkHe( z`sQ}9G!jA~OGO6T9*}k&dd9G0_gLYPlXg)|>Q=5T)T&6iP{EWRq*3R{pq3heFBTjr ziE+gLS}cb2l}q^ z%kWV3XbG0tL#rBsYl{so#(UHpBDaTfDt*hR%STJA!9|!*PGoD<8_=kaC#q*1xmL(xH>d&`TPYe%3TJF!Z z(h22T!q)wnh1Np^k|RSA^Qq;(iVE+8f}!}6vZl(2Ls(2EZ=(F@ux|*dAg6r9`|K)g zxfaNqwAjC7B#yeL@#a*loVFC9@$WHj#tNkHw(NC#7R|=%INgdmxl!I&JZB1~Oqqho z^Hv~~zc4HG9_Ft(sWbdVZfu>4qp#w5)4xRudRA$N*M;iZ9L#Rp47=TR>vw+%v?(u9 ztx6}v^5);;`Q~vLv-=fq%IE6lIXLNFcr9tlm*e=NU+^G`Up`P7jo)U^L;zn56md`S z%fb`L4!es*TQ2D=37T|&{Px=hZoOZYgy&~4e)44eI%xuCY&lO#i4MPu>#+8M4{!P_ zKtYvyg2MregAM^YJ!Dmww6w56oJy^G^pTKIP@%MOb<9-(Q+_4ypSuMHgHy zREw>>n`6SI54`ycz(k^L#TxMZld=|mZZ6tPyvUpKd3JCi)?E+fO_U!6b{R@4$SEH& z7er(B+M_yy@&hhx+mCfed4VYR!1hxQNjEMFJGLG|esjs-^8Q^2$`k{#8)#8$GRpND zkA({sVNi7~y0z|$5TZuZ37*(r#=pFb zOI}G(e0YWZXV@h=b!f9Auzlw#PIw1inu89b?qJlSg_u8o7Ahy5MfL70xa*>xoW$`5 zVchXwgQPpVma*VpPJgi;3=Q=^X#hkpApeQ}ER+5}5s4+xmwvLW#wQpU89^fc)DuE( zbr<26^co#Ha-p8B?+V|LX>>7lI0vy}A4KW2??A<@P7w&QF zh=&il)E)w}79&V|un=Qf+hB0Z_ION0s9shucJ90M$s3wKhuzrbOT0H>^P6754LQh@ zB>MW$*ZYEbO(254p#eV2<^>Q-Noh1Fu+bh5>r*P-emv+1Ii(OKn)iqC+v|uS$60<4 zVAo|d?7VMsqiCr&PNHas;V5G*fz-eR`3pUXU}|ClGyPm_?LQb!OLn1ewX(3VG)K+u z^Dw)XFNQ5}mFYd*c|?Z_^n= zdiF%~_DhM43`6R5#N64#(Wz4_^ccE{-?fv$k;Nm?qJ0O{YCZ&>sk-~aFDyc%wjD8S z;0(Oak$zSYvL954_1QIwgV3*O3#_~x0>r&QpI%+jxnoQ8pM8wG&TH2w44A(O69*5& z@i&h!v`JUYn>7rbI<`X3VVn64el$3=Xarhz=zuychQd3WSV=_ey8oY{P4L2q-Yw9n z`*7^O7fRyN3^{=((QV9Zte7zrbGF<=nk)@!aV!QmYzOxwU6Um9KZmv*XLHAg7Y;`& z_E{~5!-suV)?2jhHWUXoPDj5{yGeuUhoSXbpc{$XhL!5z`kxKcQ_!+!Uj*H{!5zPP z;Eg_m2g3h>Zo{j`51ydk=)TY+9V8=my=5LfGgGb{7?NE0+w8-bd2Ju6Sy;lNXmJc$ zdJ1LV&c%i|*)TIPhJo~VI$bmcJqDI+PxD}y9`lB7F*Qz7hwC#jd{OJC+$=$Jf$5ym!Jq9-( zA3>9rxIt5^3o4rsQAz4eQ`7u3Wy^typ%{1Pj)ZC;5#o(2aqU5c789^*fD*k2 zZ%3|yIgCk%@OP?2o-j;l*AZQMbVJh`^>HF78%$Or;xlw_irf!QL(Nv5FsMf#G;A=1 z>om+H?Zb@OW6`-Y$#2~kA#Y;TjV)8rl+^tVTlU7?P~DJp;*;HI-Ju=&_ZtiMR57WZ z3;Tr4qarn54TsN_ta&WJ$@+GoxOu! zyY<3M)(@SCA9^f7GUpm_ZPOIa4-JSP?uWCvQ%u7CJE50FVfNtWXxnuNR-bvx#icss zAvzA2h<&RjV8X(4NL8dmAxOo{&K+?rRM!(y$38`?hQqiw4%atMM$>j3$g}$3K_q)V z4t+az!0xRJ(7F3cWFr<+TDK>0+Z|1+*TvCyU+|R}<*!4s0~O>y9U7!2Cn6ys0STmm zE3_e)WfjykN`wbd;2#1!VK-tUY?0xZy4bD?JL+iy$SqZ>bCdyeR&IpO&8+o)w^&A+=i3hsdzBACC+F`rFY{x z-fXRjF}-IXKJ*UiPq=|&x31yfv4yZuq~Oy{V+CS87-YZ0*v{inYTRbb?qZ3KZO3BB z`b)TS?H(G&Z^fc(kr1T6#|_V9tUq!P18S9q=i{p|YOxeouib@>-&UORO~<`it#Dq@ z5BIKL$E!_MF|6~iL=YK6^qCM*U`o$Uuo-v+S1%kuHy2|lwE}3eSGw096jG41AZTdRI3Cu_*(i?tCThu7YIrWi_ zt(Hz|ejl**HQh0Lf z0=CZS1d&{~*FZi3=ouIw@x?{d9e5aP-0q^a;v(uyeTs*7ui^Hs{dhj7Cti|PKP~7b zZl{&S%{#l%s7Njz-@lEvi>~565h!PgAK2YRXY?HimoX%76F>aw?2e(UAHsl$u+PZx zL9>q2Fn#weoIbS!rPZm>ibTlz;D;-uhq>?6A@r(gk7sx9LF`Z$j-f|zfqO+K!{(hY z(SA@B%<0k>uH%k!&ze;F6-KOi0zGvK?!OMexOGRcbWBln?=%||F5V?^dj$uU_k>=7 zQQe;x2I;9uy7nL`nOg@xpAu+QNgr>*HITo13U%LAXjjP}9+9M6Jh%uP7JfoXZ^!D08WY=hmND|%+?`z`W&Fgq}tS@Hw z8$-JBQUpD{f!wMSapl5n9O+vJp{KOgEe9NMu4ixw@y zitR^`QfT>kV+`-)fSdRH@cMoj>Q}ZzJ=ZGm_6owSP*ZemT7+mwB@|L8jF>tN(|(;o z#K=mtt|~&ViXj#3=b}4rJL0^*zmE{@yLQ0E`9rXI-+pX+CPgU;$(}+Yl1T%8`|Ncz z9zKq{($u*c>}=RZT?@vzELzvn?RMy7FF{mjI1XL+g@rf*hxYEnaj!IFg?Zt|(Zg`) z^BZ(m8pFcMc(&PtO8?H9&Ku}TOJcX*y$lEa?yYCBs@BCfwMb(BNQ|G*TA;3p0E^! z!lH@Skq#UG+!)Uya-DcF2LsV&v{E8 z>qcl?EEdmV;}GdBN3EK5Q7T7{xI}LRimRg@R}7ReDb)zS&LW+~slQ^zFTbF4ksN49 zhl(u+pQ6kEe^v%qiV*>1j_ISPVE>+-c$`{}+p1n9(T6ZI3PbU+Usy##?g3imt}5SrOyaObAnUFnzdV&~@+x5^{5}%6L(RB+4%otZ4+qQZF>2L5#QVXNY#p9G$CbIo5a?g58p7rLr zJ9k%^dYxd)z4b4KmKBUJb<8wUR(9Y;mJ4ik`*;1^Fxfb_e_F&nDU5IAiuoa+3 z|K@md{}CQu^G55&rBSb19e8^NJ+!K@bzyQxKokzt%Q@G9IgbtNasyM07 z$+6bFINH^##NA)Q-UQL%vAB8d9;DI~9NE7QM{fl{5gUj*M|LB<`Y))%?IooLYX>Xh zt%4;%0I5WP6I0saSaM73pV$ycyiYnBDx`XxC3)-+{L+DH{UA8n8zCw@1~;y`L0>-whgm<|4T3DBKi38+BgkMbXY&LRH^5f{O)3)W%h&Yjr2a0-fjGGNtd zKnHkiUx#Cfu4rry)Tmw-&+i^ZkhCnCu$vW@sj(EM64H3;o1(Fc zAs#&{JU{l~y@#k*w*kaLQf2mp35Hv!vxsYy8y8Ct-`$PBi&#b8sy4q`?L z1FP~Vsg1(BNS#Z0+v$^IzQy( ziQfuJ9~L2Lh;lher6YgpE(29=;SKAQGEyf^TL{VJ z^|*ZMI_eIYOoU7_iBkhzc-d$5UWEHcryxfrC*I=yNaA+gy*D^IZvdQ(VlkvcQ#_-^ zfaE6=jGVCoyGVPmb>%#i%%6qDQM*+KM4jD>O##KxqYO~GN;QPJAH~yf0b07SJsJ)9 zPY-q_98lE84i+W`+zzg4(wVATw=7;hc&BrS=jHwDC|0Qj%nTTkx&m$@*6-mucq2TX z96*bz<#26w2Mj+M08>N$+XGVPviEYZ`B-;E(pXE%mo6V_$u;bTd|4S8DDGT^G>e zk48pTfjq`izz^)s&N@G2qD0v$s8*#S@k0ZgczPc-t<@k^!DpzL+>dcm@H+~Ibb1S- zQ7MRGZ;Sq>-ni)g6wjCr=uy@H$;qiGQH~8S`>cjI`HVcPn40sGg7;>%Q9I%OU=NyA zDTDLV+F{gw-S;w-ZwpaOLmD&L045&{vNa?;oq zsDhx#$wpSL6f+L)Mev+~IP@|Ea-{}gZd*_Kx8sE9>O*58eVAU z%4Nur6vOn@KiFXUsD|)) z9tbDS4^ENV4sgbsCWASZP> z<h7)I~c z;`rf7kSa4F%SuBmqeePM0{lHOg0QGq`goMt0D~)M!#`1inj}A$E&}+5gpf?a)ASMHK1`kJ72V+v_X}Uqg9PajS{Qj0y6@!^h9@ z!0j$xy_KVJiz?h}M+hXSQY06fckai%>-S;XZ4nlBserVkcvzONkESiU!#v<7_FcIJ zjfEXT!!j{$Ob;Z*CZR$5max(nAUlOzTcHWs^&SnIglky4=M3C#UqgmveROQo0ks6d z*na3F0`S`AR4T4OXe@WRpuA{^f`2^aQl#HFh@ar;#i z>bGeJYbFgEhuUc9Y(?%nC4RVpOzS3SUDFQn z3At$9p()qV(IG|47FBU+?OI$8PDji7)nH$t7OL3^i7>K3iyFEuv#HV)mF$dA z%+UrRVa2fQxAvSnWttB`k=RSzv+m!yfo$$swunsu+Bd6B;#P`EmNIPIwjcLzK0t{+ zOR=P<3+L{Cors7Cn3|fx%8HHauZw|&B@&5%>@{*6H)?2LZ;$W*0ftQI0~S}Q z3GL9T0bgE8!<>+&M3WYcQL1`dv@e^94SUaE*KhrBMmPXL7iMvnsbm=l@_&n$PoCi3 z-Mfg&wnM$Dx+zaEv_X-SSJ=4sH16K;M4uHq(6*EX5@O;}rBx?%=-mZDdp6>7KrBic zr@>QE72|q3BPPWVUE0(j*;s?*gfvuZ-4eLkdEra58a3#JXt?nVEyn8WgE0dd2O9zMsz2lw#k zaU!WlYa#E2ZJFX0IJA2wZeG6)Rr$f#Fs>=GNP8eIQ46hFbbxc}8|*lH1sO*6i1rW1 z$jJkc6`z1AEn2|dM1-7-B+{|1g_a%r!i90ivMtB(kkpSKL>1AgbxX7=&0yE|19+|| zj(*h~Nx!2R><#iqq_dI}U|y*nYE`X`ZYAQe;6gNZY+8s{XSd?i#T&Tw)E^a_v`1+p z(n&COM$?LH8D>cNOGP!_5AyUR=sVR$t4{q;Uh^8uw;scTyVnsTt&R@$$|5l?m4vw+ zEIuxzB0}>{P4IZ_3S97yLH&AlVeM1}jVhZXDaROX>g%TC$kG#GSf&B$m$ig(DJMjE zsxWK8P*{?JY*W1x%Bo&r`L^SDaOXPW3~Hc#eP<*jWN?ECY!IF8jj?~%F5J3t2g2&3 zv35e!0(HQTjgOBHoSmIHJ@#MY;cI^grtdh$Ea=+~*#&xFlz$iYwUxQKIgE_*B<$y; zq@=*j%?-VJ_2O;5bK)+-uIVal+qW0ac2=lVS~pMnpOEE$1)HB`V_1h4czt9RZW|23 zuF2o)cKMXQ%7X_F;NalERiNK1;m60J`T;4PZW;z@(NZX5!%lelX9S)Yi)$9sG00Vg z?Nf)qcGfeDtM&P^Xp|q9jT<*&>eQ*c={rKv zR$h3C5xx2#=-OKBiL8#(%lq?ZDU?6v#EBDV-@ZMk$Np<9+Z=;{{-vG?IC-8 z6g&2wL+yE2sTikxKj>G*vkRLL_TV(GJ@JC_|1nEKV&#P5+C=QzvlBkT<~T{kIOPX{ zj*x!^e##MY3g!RFk1#?`q5PYCw`zaxz!F4%3jxF*?-dYt^!{|yfd7Sv+@I&C&$nRCM<8I3tIXw=P!fvuApU|| zr&B1D?+q2Q^HvYxxv^_GZU)Pc6Lts7cUFWkZHn5dTLK=rq# zK`@Y$w8&cZfn1C=5Nxp`}PFlxwh=rUa2ivO1a6-)Gy5%mtYZr{P(JGb%lbpTYt zzbndFF|LI7D^FyrMMOj^@#e`(q{`WiX823~1|mHM5pQ4N?%lhbpC0*qfT8~Ht!^TO zfl(TEuh@cEg%~Lz?(hstp`x5Zp>TL?=m!&%>UfouY`t|<+fCOsjJpLZ?(Xgyg1c)A zL5h^(?(XgmL0Yu9)8g(FC=~Zn+#TLr_jBFv`>geS|7ER7CX<=W`JJ=RKKpdTE$nD_ zo->6+wU%2id2hoy=0?Jmux1sx-7R!w^CeOi6cuNq`qTy@T1v>=kceNrtgG)=@4vGP-wDB;Ox5igsY+*g?4px<2N_%=S zNdc9ugCDbXCO*`o@&8PO zfU6$vKOK$A7ORF=dZoT{Dqr$R9*cW*YaHxvY!3CF(0yx;YQHBnieKqpdF5}xtPW52 zbkE;Yd21|R^IJ8IqaEu;?IhWd)GMqeO7xVBRULNdt1G8HCXb<|J;wCgaWS(j#TJjo z*Q%gkoEqHCGQLe*5y(MtTAz5mUShXXwQTd*6`N~{;NsWY9<4!ENU<$qTwruipt7o^ z54^e-?zGTfe?dZeL~JP{kfPDuxmZq(n!%T;(2@msJy3bPzY2-Em#tw2x#*3%?9ahBnYFnQ3Yv>8yRc z@St)}rYZ8PMwAi%@G+c8wS}DRKFL;^lp5Y zS`4?fbqb4p2D58JL`O#l%qLIG7FGF zrgmIf2jg_No?oNM*_*(%Vh6D?6Gk5rqg)5Ta~2Y<$&x8`S-ouTC6cX2&@)VsN(3h> z=%(JM1T?he@Q_P5ZuF%32Wap)R>+$8(O5ETdcFLHr%Z95qi5vDsxah1c=Yk}`xZ6- zQ!e5$ukG;S$lR@ZfTLf2M3w$RX*+7*| z0dkhA;lF7zas0(t4{Kz|*b|qquqctXG@AQjL?wEEj+Txmv=vdSAMXDCN>Aq>nq?#woLF>@gbOl8Y4bVfz+f;)iU#fpKp37FaMVtA>_b`c^!5?L}zNr z@sX#=9qgGy%akJdMITg|XBmrN$?CFoaD(M+*g;1A=Y{aJ;4DdxDuz~URJ_1G!0T<+ zbe4ME>*_bTCLL#^*bg5hv=tt%i4A*VWGGdIbN*3j)qvN>*^V>-d11||h zseKseOaIK$ChryjIp{Jsl2L5khc*+~@&_ubop|d&? zZ@Rsy^V#~7n2RTic(lzcVthv>Yb1sm$guu|_vZ8C?LGqal1>Y`{^E{s>!Q&9PU%6p zuJP+zHkEa&g8qQn#+Im!pdXUaJX_@D-gpVL8F9H?b{y~5we!gO@ zRk5rl5o9VjCn_FCYt2DR9qERlKu<#_DaRU=Uc&mfLr6-w01|W4ms}$6bib>(+UbGl z`Q4llCjLXO~zBQ4d=mjNfJ3e*K(CC{*M&osEjtt=q zkcEr?lFbsYBqqYF;A{}%@|%ZKtCRa+8jof1Zs&HbbE(;%{uD9H!tygI#)kkH&(khh zr5sMVyT9@Mf|TY@DfL-Re;L|Y(eXs@h9EzGIX~^Yvt`|p^32<@oi1ZkO|K7U!^h5g z{}C9mq{N{}4iUVo-DYT)n#Nb`C3pxzrM>|_isr8cx(Hf8d81dH(eV@FlI)WlcPzu4zhwCT_xqedm zEM_sQ7G!N8DDBdfvb#ckzbSOaFx^`-T=zU7lO7w@gE<~f}#LCHXi&N-829$9r z&VX?o^VxdU>8?*eW#fh@nWB`u-5-0pU}LzN+TTeaN!pGMAVDWV`9UZ#vNq)6`i~f! z&|m_LwRylDp@Hu!tlG(Yscl!$`k&@n3zs&M?gSK)?a}r5ojX{w_7w%bGoN;q#Qgq5 z&{hQwev3RCZI&dlHR!q#7&?^*CeeI%!L(I^@T5J@f}}b;6*3ziYG$!_Kh#fjek6py zGaPX@of|X`3u+sc;j)twJQh-(J9^fe5PyWj&Tt1tb7(sqR+1KLH9Gsb@IJR(kvW*I zMJ%d*2}-}l_E70NN0h%f4<>C|qDUhxIoDHs}X`-;)%@=TD3z=1)BjAE-XYVcoo z_ScTGR=;tGsCI|$ZuT?TY7=x$Z}cp`SDvvN@R_17OjYKxyKoQ-aKqer!XD5T__198 z)~J;h^0^`8FbPEPkW-|-=_z;K+4X1>_lkLH^(awo4bQttH>}a9II~~%_d-U0a_{XB zJRFH{OJGT_-0EqT7izQsbi~bxXQoS<&ndi7nA}mGTYkk8Zh(6Wob54D{3q z_tXiB<8hV(uRJlr4+ zO06seiHX3yyRCj?22s)62i}y_)NEessdEOj@a_HmAp~UPt1p4saX24`6HX?kPFAu? z?z+6j{ia^Daw{ZuScGH1EWZh?)sSt4o)ABe@t~i6<*G=`FC$`#sRb|*mO zX9a3=wwm(k9}Fe+p)wWSq3Ht_+A!K3`k#i4_vD2WLe0i~xeZxrWf)ogvlxvXfvWpO zwHb}#LUm%imkLy#CP_s*B}CGPy~QmgPSUm$gV>LflH1zgAZ9Ih)#d)jcAF z?vYDgy}-g_^6!`sUycl$OSaq;)&%-%Zzoc^xf}(yImNW&1fSuRiS=Q3{w(LOSj8y6 zk)=$Val=Ww{fTP-j4=}^Qh3<%m&1Cvcw%8t+NDQkf44n$A}=99rH0wQ>xVVV-%c*g zRm1J>(dO)r;~#jb4;Xl@I=}6H*3NFBSIyQ|Y@bNtDa)GVr*O$+CSo+O%jq$CUjFl>+!tUo^Qtp-+G$)Ugus;} zPLS8`@~KCMzZLAqo0<*LJ=QAu?Vh6ZdJ-HV$abB8BC8vu(KlJh~Q_Kag@kWq3F- zV5Bmf|6|o~a-1M8U{6y;tA`$nxKZbk_tSB+=f`sCEAFb;ZVnuKF zUht*WpzVRJV&kn>ic_>{%0@v@y%ZTX`R2j@ql?PKP?=qk;Y~vwhdD~3bs|`|gXWru zz#fxli(sq=QjXKAe%70vo0y!H0b8?#uT@XM7E2gf0l_zSVY8$JzIs-y!A+IfYfeqU zP?|STC%Vc9RpS0$;6NqqoMSq&AAg{xgl*T4EzLp!h5Kyx^vc^Te8oGYmkb{$L#$lN zEs=X6#2M<6&Qigqk$9%LR1uFxSk|lsfOQZtO~}j+G+=K!Ze@j?Vf<(sajuT3LHtHN zvkK?|o+i-PM!eWMZmw*+$Sr%$iS70f*C2W+KmrAGJcn9>1M^#omjmgigf~r79wUC8 zA^JM=2Fx$7KA5ym3m}Je`IOxc5CaTZEtI~6LCrNa>lzuD_$8FZ=lx`g0&w|kdCn9S zbLbdQ`1#s+Yvz9L&(C6hqXqZDEdLKt7${Q95%F%ndWqQcPA<+>h4ismUEFFD2w1im zWqYIPM8--sj-U$qjntwWV z1Zq}+RrBeki;>AFe!|25`Zs3mo!;m0QF;YMUIk8v==4&&BniYXOw9X>sV z4wXOQX|)tpSW;TLpktp#Ep=!ACkc`om<+v+IK0<=VbGp2m7^&8?QiRKVxg`;OlEY< z*$RJGokJdU;nA~Xa|75tH$yxtl6l#tC*zbMqw@5Q3nSr&@l&FgL}fN-IybWbkC(OE5@60FrxhQ&KdOATK8zxShUw8v|3f zqeb$cw_PCvpx9Q&9Su=OYa=<(WkXTWM;g6l&Y7t(5`CIdCl*7JmcRCNDb)i*$rafg zQou+aE-Kq1jf%@cblNofy-WYNjNFi_&@}jzM2oHuu097l0+v8=Q1_Cmo2oWQdAxUY z6u>a5I70JPr!+u=#m#iD;jo{>2@-z;m4#s)BXM0URhgGAJrFHU4NJ;7zbTVb`P*Wn zFdo;_-~eoL{0%z^mESKd2|V#7Py!RlDcg1Tx$l~W%-TV$Kf=Ep3t8HPQywHngGzZA z320?lMAD5gYm7ooQhHF&{Li14Nu$P^Wka`#mm2KJOWh;Er=?&f2YPD6B$IL7Td2So zUnxvQw5T2X(GMIWT@FFy{O<)X^@t@n1FUdzq2)!bUa!9?_d4PRvljQLr&DCA)eFjI zrIcAbqYdIsS}ZRKM9_^Zc+u!bt?7(}?)XbJEoQ1^$?sEQw*JO~+-wZ9@y`RFQZb-+ zT9>;{`e+ff)Z!2;mrmxbOul@YiDRyX+Ct1(ch_p?ClrE>Qnp~JMANweqZ#L;CmE<78jxCCs?somqUd}-f)BlTB z!+HkPXG#llHWag~?N01@=jn8}3py?oA!#tTy67F(_9Wl+!leimNmp{YaV)r7+Bao= ze(t}m{$pwHM-cT+ki+Z^Bp+8;m(jF>YZJ{lVNaHnPI7s%(>Ouad`j!P&D2>7hfW%B zyVSQx!Ec-}RMB|ge6cFqb&c7xi&a*XBv0*_;j5RBQe}$nV*Zn5-q?kJ_P37Q&m60^ zV0h4#(k+=G(}rD5G- zXOz^y?G)knFHhMUo(xK4ZNA<0E&~9LsE4TMFxr&YS@yfaY%jS1-|sP2!m}xq4s(RI zuF1*Zm|xP;ZT=6qU)sFP`u-ZPKAfSWR?a(Av!bj1?XT7l80`ygl=$Wg*r zLhIYppSx|quaf$`QkO|7du^QPS-xo&F_Pk+l#UZsCCE`S(YcWIHV=cPB1Cgfp+~1E zv!X=McA25CW;j~OVE)#q`cs?MjMolZ;$CcU!B=#%^+2#qcC<*|A&G>je}IaZ@}Bv? za9Oy+_8a1}0#Jqz8~!_u0F(7uT#dEb*7hKJ+sz2xyG+cW0j_tN&LX|zI9uZ}>ml^i z+kG6X%>1~%U)+Eh#apTgUL&d6WR-pcRn$;D9*{Y121vEH1PWjyc| z%yo%t#>;jF(!Y)nD74cfX%~k8QmGGcW7rYwv^Gt~(t_)C72VDxam0-UgTGfq;k$B= zrL)H$HxZS7-AiJ#M3eESZ`f^r&U4T*7CfT;35}!;u;*K_KgEI0Z{n9)57^eNcN4ci zMy$&Ze=CVH{_1>{k6cwPl-sdVrfW;-2r6RDe)L>z#Bk#)7twjw6$$v#3fpY zwmx`u)r6+$A#S`s12#PdMH#pgux6(Ex}V}T-MBLs8}%JB-a`Ad&1ukfLziHmA8$Ck z3NB*2&l--iQymI<1Q4~_ASWCbCeof6n~l!I2uXCZMzBjpH$Gv(EObCj?-sKJXHc)c zObjpc=5oDZgt|9&Q1i0pe%djdsJxT%=2d6g@W=NoIH;+WnbEg+sLL>Dd%>Tw?+#Y_ z9#I@qL*04|S*=FMm_AHsehKK`!b7fqz1F6&l%+dMt=qlaD`fw5+>n$pWgs>J;Qhij zd{H7_=RGK9|Kl_vn^b>ud9FeT6!tg<|1Mctqa6 zUAP%oO~ZN2u?l_;1I4V523MaLEiFH$cEp`UB{@|oX3tn6KumKzmfY_#)Hb5zBP;sB zdTr&}uQYF7U)632iYZEZzBhJWu%!e?hebJwe{ws~CjNTcHJAqN?6r}LViQcFkNvrC z1)rO!8Gxipj97mlZ2to<*hOF{N^#L_;2BZl`+8)5CUBnbm+rXo z@KN|H1t=3JRF9nlChbdqWyb|KvqA3LYz|CAPv;dO&;CCa)beLvKg_sRW000SUqE@@ zj!d!bz#K9J)%r`28C{>GT4>DF?K1(J5rXei&rlhf3i`2KAu(Q`u$_8-KO)4#_T>IESwW*~3YgVS-X?<&w#~96j{yNEAgqtyt~~sg8TX^n`Br z#G*@mA{ZiT%U5}V;jYIPvW@8E-XiOf#|hWxYNpW#`^k4+_DvaJlSCTkRg%J_4Wi7M zz&?-1D^d~`z-n+lyXAHG8`)EhVYJAsdhBxk_m;LaN2KUmDl-rL;HJ$Ww*QsacfYWE zj5*l~161>D600$i65B(bKdq-2d6O^)K9d@Gt1j+F;%pii{oj6A6*2vdVc3fv(6-uq zFGW+S;~{5X$BEFgXZ8t5Bk=_9AZaBzgWppj$D77lITYHNn9SNNl|Cn%RPZU`lD;M? z26cGN8kVbxB@!(G16OyE$=VS(Z;pGq?i#t+gR7c5AB>OD=l2XgHG$Q8gtPQR0j7L# zPOHz@yh)W;pnc^q>L9EXJy4~;ck!Fd7jaG9=$BkW&>hF$`>dcht{8NNjFf&%gg_Ui z0ddnr@bND3Dr4bd;aZ~?7lDc1#%21HyRpwb#&;i9TI@17caO7+F7B(95U2QIBChY` z9qcY#k;=)JIz14Tv=MGu&1J+9zt_bGCb1HLh5s{_@1hY!q-f$sazYRV%e-SS?z0YO z;9X>ticSyYqpJ=JLog3J+L_gmlk-fO>c=$Ef(M5F4oi0(&(Yi@SrN($Sg&i2n6|Hp z5ubB=5bO}V9(pV62#9QUwjTImuIoSJxZ7}f5Y_bO3zuyXP|4`NL&jxBL%5HCfUNZE zAefhaF;R5HMD^Tu0yZ#OIyeve%+GT!nh-nPa$W+a_d{xeJd>#py`-Fe=0#^Zh&H1!i_sDXn}B_nYj%NDO8#@@H<`LTKcpwRt6hmp;;rD$Th`kc?XY zgWqU(^6UZo(sZNZ>aErNhZKr9_aXcK_dYZEN@9-}C)m5kL{fDoFHGMY6iY~yCG~AO zf$%WLQw_uSj~*4$u=N(mh07Jp$DiIsDX1rFx_*Zi0+%J_y|Zyuq$dl(O|YU~0GS;{ zbP{nn!X1N3JS*8ZB5@xGVqS=J28ew6y0>qJ z8Wp(QxtxGJ2Vdt>MLNWh11-K0xN~_plR|_hSneRk2Z6@>w{B8$?WP(aLZr{_-wgP^ zy-50&J+>+U8%b*F?xNp~5nbwqRq^I-I)%Ro2{vIkUbzBWr`{gBmS&J#;YlE6?u6z% zH(ahSJVJzjoC28>RP9h&84jF_ke>pin0(Sjh zAyjXFQK$gr7w3<*2=st0wvQTR&W`gewm~MZ1i!j5JMnDo?s>&f_~p7i(joWASHnO?L2&)zGXn4#D6d|3uY0Ve3#^!gb{?IRc;A5DKKpPNRY zUDhTV6(nTc>)12_@!efQ6no<6DFs{Tu|cQmfW4yMbH+T zRBU>{Sp<4h2Kp&3(Nm;*Q#$>ZC&KiGdkkc98wvi8CIgf@@}TEe2<4RgSEKq7f^FUkdngvY%nnV z`KcR)t^n_+>zkh=-fd3Y^CuU}c7=?<_(3+lDAivl)sO0CF1jcxBhqdzSTsED(O-0# z064kvFezVM(9k|M$L!YIBczzBEWWLKU6krG=t(N|l3W_g2ILl$1+SraJ@n&ah`)1Gd_3gWh4u?gFXwH{Y*j zrc|O`o1S7(7LPwuJ{F%;Amleog$hCp%`OFVUK(r`&R?nCR!CuA*?D+p?2?gFymrn~ zl7kn~#gZmSYfbzjFA{mZe`eCsasW2~H%q%ed@`v*VkD3ApR|4ICQs@S%jA5@>azI~1Cq5ZaT5MoN0qQF>VEvxP3!7Z(S zd89FgB8N*&B1-H+s_o*dOSp=5BPy-aZE+{7$|6Fm|8mz7`t{j;Y0v)p=7u_X_cP+N z@G)+}*4CDjyZhc}rnJJ`|8gP6Vp^dghr@>-e$h~Ypo=e@QNZX>370$~BZ~MjBWN!G z^fd0-&>tX-cZ|G$%1XCakpXfGEmZHSoELZjwX}^zGrU2e+@e!od)MAwcoFAfZWtgQ zpTwCZF(yT2d7@|bk18qgwV<_z@|YRV!{E|Pi^0u-ZNMm`c&L^5foIBfy*xtc}~BnyDi z4pCsI_@UgBdY7$0sHhoZYAMDnfOzoSn3R+iKU~VmRs8|5D=8Z)4@;b6m)5pPD>Jwq zk;G`dx!bAJ6{}xd{hj)Hgg+6U7c!c>)nJNb31q(bib4%xR>&YKiUPqHDlvTciVjgy z8FIMe%UU6(;?EBzP7QTEo7<#J4X0|yA*iN9L5&&yFzuF={E4T5D2)>wr?oi5B-2+$ zy(Kaht{lBRhykXuJdYUwe^E)ug|&^M-}2X?vM8V*OVXk?k} zWI{K68#5}GA{W;%cnt;@C$i9~)J7R+FAq%i^f@pLm2Os>GT`#2M~%((jcTRThDPsK zu%&I)SE95uHTA9IIVS0qp)K+;hkVpM(NL_6SW*ar9Bn{kx=FG$SI{uW42r*2p=$BL zrSZMIoM_Y{kIuAI1I7r`i=vXFo(zd&>P}=uI3BGmoX2TU)TW>UgO}RtQi->X>*F+sEmd0tSJ;>M(`Tqnc{cau@&9abmGU(MN_C>mUxA1l!?r zFNRVC#$y6*ISV4dRfTXGV{J~O3T@Yosk7e7TnD#fJhArZQW=h5tXNtfB*}jt=j@#%j-fbw@D%c`;eV8U zrX!VtCtEixX7@Czy@;^AgN45ze+z~ygFArMf2aA1sdXjD2c-lj>mV?T8fH@A19S@r zW6Lxjvo_j@{$@1yF2xuf`(z;{ma8bJVruk{V(dKW%1+a)vWuwH%#4$u&>KC-Mqym7 zEN?;_MQ}2MReY6&a1ZD~7s@w?A^K*oux*+2V>}Yat8lR z7_4h(msng=AGk24F8|#H=abGad%&W{g~J>EwVDgWN5DV)+vB#}^f$^dCvyL{kIZhK z0{xq6^vS1BuxAZKe~gXIJ!n&IfTf$06rr>;uni1s3mrlj*ZIIFM(SG|S)^8l_D8NyqFL2hi0CCbZ{Di<#~RB{ z<|Ro}-W>{ozL!~~HDQQ$T3zd0ydJNxp@Ba){uL+Ej+X{l@{QQn^sB|MD!x2Q8*J_i zV1^dDD?C8Zea|-(&E-E%Lx8{lu3Hs2RQl#*rnLbP;L{}@Jj-Ji7gt}}j0fe##M9?1 z_oka98B67(g~OFH?o!E656_|ZX8DMqwDMqREUu%FBI!#R+0cCck%rnZUp`p9nx2k^%lEEQ3X+O($$RtF)?05b5auMwvN|6l{a!73%HHUi9Z>zrg@*zs&w-h$G!sXQD zLtec^a&m%>^wQExx$bCloSZVKi(JjEsi)vm@1M?7M4$KSNVK>Cexf}cMbx&v#ROaf zrbYue7iT(Qg%dK{p>36-ue8^g+$}P~UBm|qaTYgk?7;#BCm3SL){_q%fAK7D|6IzlQ6R~AFFqnujF zP)QOGz8dD~x>5Dkmr0K-<*mH}W&f6e$+|R=Uwq8mqR?eYyc%~X9e?}d7kvF;-JyNy z^cj*vgBQKg&Y}_}dUOOaYX=Fi`{P`Ud-7?yM};Gl^6j&whLZ@HQch1V zFl-Z)FQzx*3ZeUbs+~Rh82qb~$EN|>*dl$Hy;^BbQ1$PGVO<|4#aWI zs#5BCJEXG*U1dLo16oIf%>3D2ci4HQ)tEF3wXL-m3B@o#Bgnr}niMWE*H^Fh{gi$_|1D{m!6$2!b6?T_#7ZdLKH@~G* zUtkWTRc#r#?}#(xp~xZ)aA}U!Kl{*S6nG=6=V}q{P|3CmV0pa-wfT#}36?B~^m1_b z&Q#()`$&+c^R3=jfT266kw&m)9Z{Q;A-@Bdlhv%wg^vEg(2W=IH6 zH%g?`$A4pq!ZOd6IOJnwqwpK$UI8}+W$vj|ezsg%aY-&&h~ByB;60(BxPm%MPt5yT z?l+{1s|9=&N)tlak$7{C5aK_{TnBqddT~|JZe)@(1YpmX`r{AydOsBQ^(>h0nHXrv zSwC3OoXXH7gpZhI=f_NS!qvU1A;_Iz$wqpVX-=-9SO-*v{1WuLIBG_z?jTM;A4MY4 z{~6}F=jx-w(>qB;42@<6DH7*Edbesbe?$Bq*%og`iAIw63==S+FK4zh}N3^q0l@E|h3sCKXruD~Z= zX2JaaIFwC4g)Ykqs4JW)nNy)j%SWGim0BMSTaAfdE;^1!%J3`bdl+W7#AQKNfn0%n z2M@jKpaSi5Gaprfeib025?VkWgZq&NL^leder*!Om7YQYL(~ffOli}VGzO$#=88htf7TaRvf$>V2+G;#|2asK>fZWX!@3#@AX*lBBQE?QN7S{mnu4tC-2XtZJ}> zXD7+3kY|Jum*(?0%}oz3X1vmTC-hWmF6K;0WyrHD0^C2-i(zG!JghV6tlm?^3r3XC zJ~T59yN{acUy}L=U~y+35B1=WC1Q6T-M$JEmrIRF4XU2arlbX{?Y8kh=+X{zkgi*d zzR->6>SSpLU^PVJ6uPrUv*Ph9WZNjeHdqxSGGp5lS9H*mF?R7hR57P@V;i4oNvl2B zj%wJ<+*z{aB*okWn-Z4#0Gn#TG0C4}%xsid`Pi((2JHEOydtkxmMPgfcP4X{c z+L}4X34Mo*%yq5l=65inpb56{BbgWrM^9t2W7|mi5@o8qB~@GFI9B$b(}UpWGOu++ zw7ubNZ%Zu3q3=Mea;W!lHzeBUsl=Q|ZkD*VX75~FOTNk|()-EB)~(7Sn2ttFW@WhIKht&1X%H?p7uX1bA`Sz;G<_WEfoqLZo%%;zXckm5$}0>BoSW|jcHT`87#J={rtho8uftwP4 zz!fr}hrA5gATmtCb$SO4CP^5_;=Q(mTvS$LW@u%>-sd+GyuXG;wupFiLo9VKvLcSk z5WkIT-xM^f6x_ASY%tEl3pv(pLuf%6#gx}a8meThRgG5?H!R`3uR9;IFoZAAnySs> zNIV|%)*>+ojLu@^5Jb-s^P7v+W5RXx`M&vlEIJ9cInA>2J}M5XC(3-`O)i;3bw}It z-5*&|nH!xqH~ciW{ES>}uRMmZm4r;Nn?@OG;m8Y94^wsD_2S7jk7oue>XceB#C*oK zo&kK=fEu5NinhOnsvX5rg-Q%vn031WXqLwf5x6cPCtvnomfAy*fMQppyNmggC92-E zv7_c!MifVoE)oGbMkozTWj<1mZ)4MV4EVtZ^AOzP1d}ao7 zP>j2Ndp0{dNW?|B6(b25gZ!3InSTpyJ=^IOj-*1Jh#$C zR47ofpBb~-E#&#bd&HN0A%cu|0N(}yjVa^ZMmV}(3kg8UrQRTv9b7*V({UiIaskBB|)#K zJe-2XNLg4E`uF?dNFZ?bss7hXVNHrl!h1y;?RYtmAJN69N9dQc>P67ZH~flZkPRP) zUG6&Bu(&(YnG3L)P5i9Sl-3O+BZyS|Y~O~TUL=Qz7beeA_h3lkh`vf>M0O=&0BuW| zKSBtY{ZN%gJ%!=k6Xx?!vO_yP?Ck1bEzq(J#cI!TUqMNvNiNRkwj_RU`%J=}a&KLo zqpSGegePsXi=K%l?0}aILA?{XiW-&f@PdKqUjf2x&n)n=QRQdHm(zM2#m|0qqM^`0 z@8NK1c_G61li%0^NDSi_yY&dimxd;H&92GCX7nRu;{5USicR#%Snm-Fl^DbV^tH=XP|VDr2WeBk9ES+8keT5>NJ4o;m`S; zI6$5FOpmFmfM{pU5>XRP(RvA@=!ZUV5CP}M5z?8+qEeVtZ zjkItd>H~ia1z-S9ZahHSKYWptL`XKhD1Bcspf=peHc32YNx}Kmnz|jM(w3xhG4+Z6@OK7ub4KOIP}V8T>Vm?c`&>DlMf46A7kAeV-Wl`i0Wz zk&j2(xp0M>k)SfilefWb1iw43Zms{-N?qFXkX66 zpheg}v6j&~f?hI#RSSKqt7LL=fntSh^z?`h4i0}7s@^%uJdmuSWq?I0EMNLug`7Ef z0R0N;JvVxdP~si-198+$dkU(6dy|~vcwmb++TPjK|0vz}EH7ubLi{inCDiD<@#zLr z1f)$-Dw0vOXxem3HAa?IwJnW^3=Y8{cGqf0Qw&^gf*sS?|CV4!U-FM=*>Ud~!6o>7 zlp5sl{zMl+&HV0IWas$Vg&wef3p9Q##O{=an z$erhF;kGi0fE6sz9a@3mM&mUh1`AU#uA;{MzD9};IcNksX@$YW@$3Me@AwJvEWru7 zDqyvNNVZJsVw0$$si7sY87%3a$`-85q)-j>05_FV;4!oTR*`L4eM_zQ-%Os}b(B3E zfCHEb*h;c5#NUAcRLm|i&%0Cy>l=Qd-8F?3`KJ`yAF7QUu0`~p*RHSQw7ao_h0xJ| z-B$duR-jDl)c(eA!6gJ=MOAc)3*IrsJTwHF?A($5Itm(u{Wx6Ty(aht=%2h-5*2KN9x zJ;MFT+(;g)F{zT-e|(8)RAXlbMn)M^(?V9k<7W}HJ?n^*qKNQth)#u8Q+$!eD}%kY zfRGSTm0r!GHv4UjLE9l6!7g+*nvtubzEI#SwV9_9)eMg`H}wk z(-kwzNHh)6@P{=d0JrVWhXp#NeS_-K2^)KqVp|0`0UUE-Aa-@yU_ zDEVKc>Yq5nj}_s62M<{P9LfKUG5#z*{NMc(4Eq#cj@*`%f?@g=?&TeGGOE_E(C%%gW1^FX2&8 z6X#Wz`=~AbN-0;c885z)KpiW1q%im+-WMk;XFNC1l8DU_9Li8-n!ICUpY;R&BF`V` zV^dv-0$YUbMor%2#@0(R1=EH-ee#}ZqHc{+$(aE5h()2rQv~ZhvDO)O@>-~l5tgI2 z*Ok1b4P&zT$^qjmfgcBDU+>k2uEP~q3pxM!e2;WN|MxuN9uSjd*pc1IH%F~nX*LgO zGbG1X_}heXEQkVz^WN@ON#Z`B_G{Duwm>*3$;psvk z=xpmEtKo>7jg7u*GBFN@hI+KrTwIDcA@oR{I(~`4^nHYT@ZJ^$AiC$I-#zn{Soloi zR})s3cS%wkGY(3(-Tu3jK8D3qD)DE2H8Pjbl-4(9Ky2GsN; z-}us9!hhCf^SXDYbAO0;)CJU-WW`fY?Kz)*SDR{hxG?<;GcZ8E_+3&NYRicH*^n~3 zWTM(W3>d$Pd&3}jcwgGEMiiM} z5bL_v{Qv{kkAz4V+V}jYUu$2Q-*$8_zuvhT%G?FQqGdG&ezrF>{?pu)Ar>jg)^jku zm~34&9OKNMTst>(4yNc2UqXCDEOu!fE#ESL8;q@+bOq~F_H9|~@Pt{01BY_MX#jLu z@cCQVeZ?=aV9T%M&mT}EFf*l?!bJ43R*?mv`h@##C30v!;2o#{9xd=D}2-3F=zZ2`v zfM2`uwn;NYQN(%@D*o+yWM#6lRw!8i=agBY*X!}Ak>$0g7D4XiL5B=>Wtj~J*`+;1 za_%D1`99h|farB%x;+X56PN?MbBJJv_rdiisz*wR3^)_`47q=yOyVQJ5p2KvCT4Gh zAGZ-EQoXC+r)-$@8(zv4*n1XVgmJ!0`M`10>NpnlALCYhS6(&2l{2#&sma#ju zBL(Gf!=pW$!xe05rpfR_g+&oX1H6TjV!NxSXMBhbOIT7A(b4ZUz{vMNH7WjjVhTU9 zka!?wql?$M^knXpqOUK7yV7shyG9zDC27gcJsu)}pm04EZqdpdeBMZus34i_IA8y{ zKzdt*zS(Ao>yKkEcQCH$=g9ab{D{O)$|UO4m7ZCMiKN3CCM-15-2Dx%9e}apBI9!7 zXt7ZL7DZ(etxZGkZY6fRP;=%z zfrr$-Zg;pD{G1^YxnkaUvAEp}XAwG=rvBSs3U0hCmyKxYw~^$UJQl(S>)<#ZkJg(R z+Y99;w_8m5Ik_r>Xlu=dpF)`6rXgWv!gAM+=rYu(nLTig4;46uu)j2`Xec@U4^`hB zUrEz-`^2_w+fF9tgfp>in-kl%GqG*kHcsrE*tvP$@4nyf-oHlu3CGoy;sBh zswZ1ogBe_=x@AyQOQwO{T<|%55pZUHsE2UaPQbt9$j}-%En8t$%jMb^DYiX&_i0Xq zPO||is?~b(ZubjCEzlV)v-vUc1Q63oQ>jicqDN)_*cAai>v>PDp1_V0R6HG-{C z6UG?LI~8bKspS6=DdFTHEOkNmlpTD(GiQvXwn(*7>k;&RaZz{E$=IzBRq@YCHQC(K zTwKRaktJ5pttI#Kq9ZzqugQmM!GZaK)Pr#S$~EcY0+lX|=nkiNTPq68B(ueU_?Gk( zl-&7(W~z|%X6jiTvPBupiCQ)TRJ%LVdN~rQRM-*wX`r$950_iHg?Tgw10%22#^$UCaJ%QG;DxZjuqI-9EAv6^FJQ6i!b#Q#ZiW5~wviixkh?2Hi zg_DYD{f@Zl2o~}Dw{*n^PC3U8Q2li&LOoVN-nIHR=HmJLe7B!(>sRsTqv6FN=tzQp zPVodliddf-Wnfk=`e&gQfQ5&xGYiL|f>Oi@#nEvj5@Z1kK_2hutL6xBD=~$VqiqzM2hN!9MDZy&96- z=_cll8D z;p(3fEg?p;zH>CA7&7hzCs7(;zI!EO=s_3(ZT0Z#%^9J+NDi$o?%b*m)`7$>l*7)K zQ2Xl}$fEs+&Bbt(O?J`$IL0QGDkQ*X{Xl^(W){KJTsni>_isSKM2q~R=4D``iM{~! zdno?$xa~OTdi$S`Wuw_VY_s>U9I2=zW+raL^{ByvU-VXqVSP?9j>jRk2*VR2u?}|t z6FH{zaF_+>Y>Zp=BGcqRH8I-9Ps2Ys0wD#<>!D#VZK2O*nGON>L!?Yoef?l{H<9uo z`~r}dtTRTNkExp<5M^Hz6rDaV_*~W6BQc-9>xy>pYmG8qzil6S;D6)>GNBM%1$zS3 zm>;N7Jb+kx>vn`8IqiW@N<=rWXY9mWPfwCg5Z{z@LtUAk6Ti%9WbYFTw0kolR>{K% zuvShRe+Ldvcg%i62%U(OpSd{)87HG))l&c)>3VadiY-)e=o(&v@oBLC{7oN%Pn*(% zX3~d2Zovc@CyjW{jIaGWWxe6aCmhfBq`WnPQ4|pb@(9`D_swKwP-Z?0bSEp6B&9+i z7gN|*7?jnU(F=`H=VPpx*dM&bV=N;;_|q&Gr-)$y)Gvw=Qf_K^pDc!FKKIpHnMQ8r z20TX0Y=5duDp5jvXdOtR0qGg&1LG0{*?skU0zd4vIkP#VQJ5^xOf#ZD-NHwdWJ_2O zrLT2Bw!KhR(N^LXw?H8lqB~a3q`<)q%OVNKz-{JLSWJ72M+@>!<$)!1^ zIb}{&ygXo_JQT5#DT$9Gfr+PJ4?N+E+ZcAd#z2vZRQHDWB>Wo%S5wapIpvFGNiU<3 zv$m%H@X6l^MIuVOxUilFc|E>3tD0Gj<{8SwJ{pdqjT+bu>dS;oL_ zMp)+VMVV1%pq%1?UAQ;Je}#vQUNb-r9Okd*Z((tvwrpHc3l@3rvq- z;JQ&`kz1T-4bdDW6=7oZ}T;=a7hMms20K8LlfuLn~@H z#8!luyw_PtgQZ|d4?XRqF!)J_S2D(ni;ZT6 zg(erUc@qq_719?t4|I^f>B`MZ>F(Q;%(NxJ9BJZEj4URRd~Erh46-w~`bUECEFHY5 zCa>3zCiR`o%rVV@=~*{AfPG;jr$nn?4oiwo;fXf4Lwnu+6~y}78wDg;sTM8?=O7r^}6GqjrN z^XETX;z5aBv}_1wLWbLySCe@Q65AC@BtDP4OEce6n(DzB=hlVe@&{BR{h{Zt2oc*B@6Q9W0*N84E;au0%k z)6p7eS$>!39NEC+dr4<;>7%L`rO6b`PkL=<7(?Tbu9y=`Dl zwjOqnLxOcJcKzhV$U^7gX_62TPYEUZo|pIgKRt}u7)VSJgU|XCF54m<9B}#w8mI?i zS(OdEB*>nOE2oC!3S9-#Tx~X(b=J{@5}vcZ6sPpc25bz#Bzm40x5eVN4D!^{!)2un zHIpD!@->i3j5;{wLSwSim0$J0NvN_LV?m=Wdqls$gf)RG5|zo#TceCMm*piUuuF)^ z&%Dl8*2L4_<@8SMX$A>fM{E>X5)RD_#D+2A)NMxJ5b$MNqZSChQKH-pg)P9A77;!P zAVJ_sT7y`YiW?(FKXD+dg=g(mz@R|pYd(IUL50avCheG&!{m@aOoO)BXbYQBb*NE% zZI6f>P*|FrO7_Vjt5Brw4O@H3$}L=?6`EdAJu1)pbs}f!7z;^y5>A24YB?$>mY2+q%)U+At|4{e3ZN2^1?R?iA`6QVLrANv58HUwtq;{O~|O-^D}X(C3~~j5fVO zk?9dMTP2=X3Y@%{ixaL1$erkfIqViAU7t*RuC=7I??{yA|++ieI}& zwCB?Ll;e>$IXhzsyy`u*9^lkzT~1O(G7rW2g{*81H@F;v9cBiJk|>+E;Rm-D3*tYe zauOSe(7aQwD&J6*UC}ilmKn!MfTYA836}=UZAJG7@nEQ+jJBWfWl7rU>DM`ODR4BI zsnEDhfW+Skw@Qh($D5|G?Z4mtaKbS;xuSCFg&}-r#)HNnx>9TA}}&g$tE6m+PQ#M>7MB7W<0h+K4YyN>s>UVY{;ZRZuxMcTc@3 za{@Oa^EhO@T%w{Ca#1G@=)NGr+&v!b)gc{*iZ(DPA7c0klJ$n#qJss4uK#3E_DK8% z%C3R^i$yM$J^;h7$_uV z6#BCGJqqqgxIknJDPwRLrDMd$b9G*idV@^ak2Xr3cn1qXR~>h7y_ywnZZ`(>gP5K3 zX$z@iY3sc|2H85yh5N*vH}^w#R#q%eQjj6BCx7N_wDf=WXmUSH5_H>L8_u0!+(an# z&NgD79u)WOAO5!95)~ulyB3}S!R-I8JaisBJBn^DEvP(xXfCLaAMhA8lmn*_=9gn| z@+ZA?#g)HuvQhCEMuL!YrjCfd-YNZ!2ghh`3VJIX^qyc1D|7^YFx%|<=JCZND#rto7xFv^o&A&t^6qGAXjN&8B%UhI zJG8GhQb8h7_vKMy-MJJ8CM;w)dqQFN_&7L{PSW5qGXZytZ)gaCYg4nT`^zUPY z!AvJYdmE)`3ie#3pz;Ddi^Z_@WI7*Il@*qM!U0b6eq8GH!37+59SuB!qx8oEwpB{D zc!|stJeC@atKCL`+h=!cot>ckP?1P3T|N1ZBY^|RDLu2h{XOHhM<>;h@x2pGB=BwR zQ0ZHYaQGHjweu~r&_%9gqq)OV6kQR%Y3D|32yG6qI$Y; zF?qO^#!=V-4UCjs5XY4g^}%#jWtE>dAOk~3sbz`PTy|wR2JU!IsDny-{P*DUigHp5 z7ddG-G+M~VKam*Jyx7z4;mQ=XmsPe&x=>F*BBpug=sL`FVuY(~t=cG^pz&(P6Tx$q zn4WedsuP2erHb0t2I${(Y7)o6GfHKhC_xwHaANHB4bp4JR?>3lzRthz?GP97c?fdl zT9!#@VxlKHjIQ!{?N7OJ(oIYB^*9e+l&~J>7%#(gF%-hIrB2(u)c**$*!DW2CcrQ z0Qlph${7yUQX9(L))X1}^?JEHFk1$H?48XBrf*Xc8(t`#=L_XJsU`*fGv{mVS$~nI zNR$PeDrBud?-G_;&kQ=r^|ygR9@^r?C3(km*Mbm3-}wR($Y(3X=`o^LU$ zy|bg(h#;Q6PBp$CK`al-Kt+hY?Zz4Pu`=G3BNaLwXf2acn!+vhc{QgRq(K>od$$kv z@Pm1T%+mUP@HixBS=b{Gtz_AFOfibS(eY$-_B06k`)N4 zwe1~juN;-ZGD}+f2Ydqen%>}vQH=SnYpmvMK;npwlwidH-z9DQiX+#-`|Tyg<`MdT z?S_L!LxS&^`T2OkjXc>YKP|$J<&7My6cm1>hBP)g%PrObHLNWKv*HRz!P~dA>0)qb{~fpKQw- z_EIIR3^#ASX?FK0EdVt1mf&XhQ7+0l!;Yz?3Ir{o`+}=hjp{*sC}L^WXA2GA^9CQG zN~mVttnvc^3d>cbc$@&G!0sO!7`2?8)iYr+UgwLj7tas32{1bZ5M%R`qmRU-;aks zM?N~bETvpfp>I;NRhk~H&1ujMWw^}AXSZjS0%``H9+>6rs{O;nY>Tx`2iyPHyTJK< zRW`BJ+UY|5sv7gHtqMKqMHZtv?%^o-4q9I$fbfNS3+K9ys=hDMk@+dDDj7OCIbq{` zY`aq(ekm}n^YZHNMl-`ZQxu%T6~gle!cM6HlrFTmZ(P49S=>_cw=b~8JT4AwsCP2d z=rRrMe+YpS%(-~>fN$RV7XAHITJzE~iYNvV3A>t7Ebc@)`L7h|_M^^z0mk(?ROF>w znx6|}X38^fLk)SKUb6{SBRyTu+9}tip`~CTO1d-r_EM>jZXD-a)t855x}Sk;jOfc` z(bBjA=KwuNRpFbONVhznJ z`mf-sYSs}>?SC1gB)g#hk7fCPrCC*ZcwkEZZD$7=B>R7){r_P~_*S#SUjA3o6@1%- zGV3zh1M5t1OO&ftqf0_e{10h-*f+aQy#t3E4S6`8Ec#vS*&XlSGqz`~*6}wxf{_>S zK62da4|cNCBlOKo^)kbM>qQhl&!NFVt78Nm51=KYu=_UtjdQIS?Un3*C*vV>2NSOx zkdtvsfMA(HZHL@a@OVEnLn7dU=f_QhetQHoEcy#N+u)ttf<$jQ zgSV72!Y8BL!M8pl6O7*tmO!6KX76B)b6@a$5mroV_dgV})fIQsA%-5@P{EOXm&YiOHb-bgLpUe!R!r^s#KA&*M&8TKmgzcLqLh|vz`Ob}U!8|k0+H{4b z;YF(-*tDPF!e*-O>A(J~Nf?i<{TB<=eL;wX?1r-}aX z-=`5NbKEmY7}tkDlDor1;QK`3&we3uOo~qXQ>ZOMuXyal0CCWVz0tza?raf>S-2uB%7_suseW1 zb`OGeO#A?3fmbZ%$(kF%G`?O;41s3B#%#1c2c}XPcc(GBrprYTF9YQM?*REWP6gNbUrZl2L23ubW>G^tM35L2ss8!XXGqMX!HEWZlV8{k z)<|+`u78S%WuZfma3Thn47n3`id|N{=R?1zlw7Rs{OVI{G;z<>5a$&^2Uxe@VCkyI z|EoQ(V3eTCcdKu$cqCYVtTsm7k1vYtc(2)%-t&ntz^!No>*^dLKOIh!ohc^$vb|S9 z_(DEvuzo~@of_#LmlVLb_*6)em5tGFW`VX4LBr ze!+B8G63L&-6Kc?&d9T`&#^`qEgimELRPcaL6K~;MqbWa>W)_O<2w4r#3A zFx^iaGTIw%Vi_Y0SKNaGcxV#M0|;EMMVi5xpE20m3y4oMo8K|fjXINk&_>(2?-g=a zxU>#GiMNff0~sq}UapxsEo~ z5GplVyra2_#d*&o?}+=CimoKN*FptbDYqvqDOhLgxzCo$Y_*rl)$?;ejQM&u)AXAO zstV;}&3cs4d8+3gpjZc-pfK8W96@{KC7TnsDVUz9eB#Yg>=^kMce-IkPv zw5QiaER<;9eb*ow+~V=iQteU-5z2%rR3ecCgt48k8}?=4>BC16qoSb{hYhCG*(m*8 zu#eL41s(6@zVZ}~pEn0+Ch;|wpM=FU$vTa2mK=@B#17PXq12`X>3>}baNm++)-xlC zAv36V8kpUi>&16GdWp*p)-2YMAiqOi(7zq03hBSzu7&kD;weh@wG?q!o{s@<##Q*+ z>+lE@5L=zTkaK>1^gK?3GDqxR4$SCmO53j>Z*Fbnw=T?!)G1RVGN98buZuX)4Fy2D zrILaK$lieVp+P&eO&oTocfofuZG~%NQN3ZgDp=@Qz`DwHxjGX%~fbwJ<9GwU&s9t{&!Xsab2O6bf8-Mh)2M zZO{Gd_*YRf1hG2SsDQavzOrbpmn>O>be+wiml)i7s>L@CWGV(kiG3g-Z4aptTB%$iw>#*$TQSyCc$ z?CE#t#qM|~beMTt}o0J3(Yy!q3pZ~mP%O*1X6o4Ej!>t6)QMvvt^gqIb552fGj$16+jg?2!u(<0j3Nj{H@ja_(r^ zQ|W@~x#sE5Hs=aKtQg3zFbi+Z$*g}UPXye{MW|Xx7*ETrXNFi}cyl*9Af1yrsW7V9 zmKX7l)ZtNin3sx^NUqk>L~veC_)EfMa0k^3vB$u-$;_3QVmdUE&BeMYH4N%^tFy#5 z%1@&+sRg&$)X!P0gTNloFwMWi)YWA;Bm_Bk*PU3Q!59uK)0P@l8EQMa?y&YV;_vS( zWYoVdYIMI?0G)~Db+uIMY|&RztFnuUbpMr-L?B@TJ4(P`LW8~& zHRsanF=SP`tzoL5Fj@fKnzUJV!&fT_-{|~L1i=QNG!hN4!CJ{EAGXW=#t#2d4{zk< z6+0`F`?WoqH#s|AkHiM ztZ*qATeG6+lOyztzUg|cfwI9=j>2q6M3Y-G{$5UtITa9X85t*>IoD^+iBjVuAW{@D zV2z6Ej_$Q_=4KNpo#oU}MfJ$?L@)S>5(^U%O=>h}nbzN8|4|;uJbq?xG5?S4?^1=M z#=}))_xQ1Fnb~f2rRhk~a!woh-aU-fgmuvA* zXi=F);yLq&iI|b?3i1wD-=8(G(eA|E^OQo<$8x>4olIX+!81n|Wx5f}&^FfA4hb8! zr(<)j|-!IkD&9MUuaSue^2llJSdre^*8HG8{NY6A2-rMm-4YB!>?miNb@H8ys zsdDSZzQ$kW%H=<#2^JymSOH=*vS!xe8gaUKIt`$T@qSU99ncG2v!#bB#T!@8#lf?l zZ<>VNYsokd!?Fe`q?6L?IK)vt7|-xK6Yhi;`v@7$BZ0MQmI!bxtfS%(*m2OIh9NYN zm_<(mJRJ*{M)c+@o`_9r_yeZLqUV$8Jvzg94)DKgK>>!R3g4OC;OYt}1-#G=jav+& zE*=sE4^{PCCm zd+^!oiQ-+nY^QG^o7J0#Hci9 zwQgYZbbS%S=$1+EXJp*3Ef|``96k3Higg?mIo4HbYQ)-Vi{z3Z=^`RKl0mOrXavP$ zj*Wecz@TxuZYw8C+hq?^JfC5V#wD^d7LXpfGv;>59Q8xwOy4?QZ;~(y)D^q8&AYE= zwEA2!S~!`Y45uqu@3h!v!gSiBV&P#05DNAVGjJS69PUT;2(c9K^Qa29ldbWVl*F~* zNh;`#OfBWyC~C?4rYlc&*&Edjm?|s%)tq-E?{t03;_Fv1q9o<2zF~(Bod{7Tjt)J-Z7eJ|b^MCKN(%Ues-kp5fD;(HU z5{tV3FThmnWDU1W!3YLS5qqtE?%c=Fp?|SBOFIqHqQegH{Sfqb{xEyV=&>o&R{i|B zZAIibgl908K!F`CadCOc;ZUteEr>5inMgU#=X|0c{f%NHT1IYiQ)z`iITZumzn~xk z``U}YFJdoZsrvq!UxRX#-ZA8ZxBXv~3^0)ruJ#_q_|H(j|LhhlU$t2FU)0>m<_r*` z_1_<&L(%U+{?FduDLUy$ zcsq1tr?sSV7xxue>hW*efB~}wjFSce?TbMt9S^T=R!&cMR5+^kA2McEMI!mN)r)1| zFFi4+2j7DP?vX)w#7^yALdc6GWhPU9jjWy!b3+F7?|CELIM!c%_Z0Pg-deIVrx&0FS4(=AZoG-7gtyvTnW55oD`pf@a0DqY;mOWi8OXPSwB!_YA z!Bphv;7|s}zF6|n3sij1E|7Gup=kr>VvSY~Ir7f zT39hhDgU*7l*s zcsR$#-B4HS@eZBdxzWc5oWyl(cIT2~e5uj5EZpWWob;S=w!s}x)m*{vbL!3kIFytB z>XtX)Bi4Zr%sjIg--5{Q{v^Jw*>?#c!{iIz?SjL8uIOnd@bRLH=4Idg^EMD(xegSrRf=^KohR28pv>$OOCrw0r8rNQM3 z^?A1$|0-K9$sGfL>TDTP$<_x^lL@XzFt>I$C_YOt-M&$*3sU|h+F|vWQF05N3Z}NZ zq^(6Zsbf~z_8@wS-C8eJR28GO^U18T8+WoF#K)a{U8_}!SJm0(iM{LKCTZIl^HPT( z&A6H0Kp%nRT~vE4m5Hd1%eC%PB%#t<;`!mh`OOpKB{GHF_!!y}Udv?bjvodH(^@?9 z=WoN|ws(XIY`rlMU}s{mPP^y~x9eU?;cm9UipS4aWnkm|4 zqmiHX_O&Qw3_>P_d~W(rHo&4-e)&t>5}0Q(bYy90v+5XgQY_(u}JwZs4vTX6Cukb z^L_vW-l=X6?EX8W1@Nxppm6Kt@M5zzj(2O=@pxTal}W2NX6r4Dw;nB<5(Wg%HKZaR zCTpW7ym$i1{$Y|<@SN`_pYOs-lR1YwZikzEvG*S0CYr;!P|deo*hRhB7i<7et>9_A zK~r-_6#`hzoFkM0TNAS_5lZ9E_2Dggllj81G@e{2^8}Q$&B#RldhzC&B1JC$Jv~#8 zaNKmcB=pm0Jc!9+y_FA&ki7pxr_p>pZpLe7o39nc|{Ze}5v%AV1+(sAw1vfN*wqvWjT)_8Jc7e5ROf<8>Vw=Wl~m ze=A+(z1mt*q}i2_#Q1?C8&j=+_s6m_mFlOq1zK}Qt+g)`=9_IQ%6qpjKA$x$Th$ZQ zuS)fJd9acBl0OyAOgzE3ixlL&%2!Q^SWS*C7ciLl?ylOC@~NEZJe|H+WD?E=9+Au5 z^Z5)@k~O{fjv0gmxbuw`Dv+Oz(tN&&=KCd8k*D9jAeg#*%@9*UHX~P7D5Eh`GKY7y z-m-bkHBukELHKAZCA;HgkkcpHo0fL!M%pkFy?iU1p6-N=EYiPXjf9l zSRWxlM1;ApAO~+QaEnH1MIY4hd|jpLkp)dm{oouBW&oh&!kjlXCd0 zDeW#D-$Vy#f}<0-SN%4>7=8Xl*|@pfp`0qnIdkgE3kJ>Mi8D4eHf@~!pdeCg{p z%>)WENhgg}t)o1jC@mkU$PFPs&XMcTdVOyur5eclj8^eTzj#9gtH}1trRJKfuIeS5 zOL>cA@vv(~u57%&m^eZP#x1;y7DC`JVWdZ(4W>*cme=|88*X5dl9E-rP?QJ;tCeW{ z-K{cwSP1J#yE20l(P2OburFX*p z@IrUhZl=vn$mG_7J@$y{Cb7)_GuHON{KE0YDsKua3M|i zj<|cM1u-7a3YLMWuk-LnuAq@o66nB-?#7=AQ?ePeG>dHrO>HfCT5wW=_pLCS^PA-# zUg`W1YXJqkcP<1R8x8T`PJ8YkR%Rdk4Zo@G2ncWImtdp)R698JbvIB8KTx_;#ESF7w?NV>|q&&oDoUc4KHLY43HSBdK7Qb7oWv|YST_t8~cd(pD<1LR_*87dQ(m|kzoEAO-GXIRHIMv%tXKhk_JB-o0rmRqs(^iM2rlOXJzGQdrqZbkip0 zY=Jli90+9DkIT!>Z9{2cT2?b2i+N43+nGzha*?+Q@bfmKb!;ZX2=He6Zgj4;uVH<$ z*l>T6qkgkt)fXEhWq%NU)o>&TIxREXsCz~EhX&6%1PmGV^fw){H-D~Y`RB%9K2CrL z65;lCBH&@`@!`$qmr5R)nnZ z?Owozm-;nmprgZCO*m6N!|Nzql)K$Y>aavr4+yPc=9O^*5iDDXP!+2BtJglop5={b zw5qzC4SW1rTv&<2B1~uY(EYHv`iv%Phi>{2^3(ewyEOY6OPb~k)8(r6$Pu;nQt%_> z;qaE$z*t=GSmsI&fcuAN8lll4#4FVBP0>`gEJEcsPVYW$ymEvb?^*7 z!Kh*Jt#B^E8Q8PDJ0=kGzS;b1`wO$%oxhkgX!GyQ^A zvE#v+fRv_nYT^DPc~1unN_mw(98>P4Vgb09yQCg`H9f$=QF3T+7^OV03Ucty-mPEbbOQNCql}v8K(pgB#-TL+q&&03#L5;S0 z7f=(}m7{ng*ZC5K=nt@o8rcAIBkw5jgN&lDMsbxV1s}dVN)0&{ar-b#n>q|o@ zUXp6~HbFm~O}Iv$E(^TQRikbNdbjY@g5Bk0D-fd__hAn!L?$Sk8ZQ$l?vNjd@$ojY z8m+V-JARp1WDJF{2^UDOl>;m~BahOIa?{r>t{ToqX%N>^Db$WE4`MeZdVT$F53Gn$ z)4rJV7#RB?pU@ezG}@xzd2Ug0aTFp(Ml}3>L))l%p~8Rd`UC`0b3F*S5;mn|il=lW z7rw>Daq0OmgjW>?#(mklSO}%er!@HlgZ2%!=L-I{O*DNbY?l{P=jVKEJ7F#IkDG^i zehI!Ea$^wZWpXUG$8tfroKhli6GcWcE{V}7OFl#71D&>Ct;26?_)VgBU^=&5ctA%y z!J!eP!3u~f=*syfHoLRrcsgMs*>^GVdnrlWH?{FUmAq{5v!K_65@Rzsj`rtPR@)5N zK{AmP+Z?{r%Ci+{J)BPNZ7!@IxLaEt`ShVIaN+X}aRoHGCKS6(3A4~_>nsliRinQG zQUoZGah-#-9^1w+d{WL1t?a4nz*r+Uv+kC9DJVy8O(%HxmIUk?_7^o`c#}sYu|+)k zxx(+fqd*}{ywK{L8qrp|xpJMU8NuyTBTQ?LrB`(jcgB7`9kun55v<|sgvIiY3Y;mi zbb(>CyOMfeLc*??4-RFAwxy=!|Zm`gYJ{&OX{s@$$jcV_I0 z>f%CfKV!~&&pWV=@ge@Y_}oe{-!5glJbYBFU!J7N!bBz`SeVdl4t!d3W9*g%@-J$T zZBwx@#&haqA@8gV8D09f=A}knHm?mf*A5Eaq5%tDw*kg)m;UJhU8V#?-!0JdVD%>< z2%$)?U#zl&J_Zki>pt+0a8{mMg6j9!w~?VnmF~~@7@Q~mWXuB@GbKCvV{oGXhM_iu z1rz>V;Zp3VSDHb;@s?|?HVB7Z=!wC@pe*kD-fb`GBRU*0eX6rWcGpH(Kyi--#hgW$ zpNqJhbi4iJC5Fq1?(`SzC2aX7j;mdv79Ion@2q@23SF-S_b=$GI

#64ZeU)VI-_eW}qA z${nT}+7}F4KO{)JZNxjs=Y^?QNI-n9-qWt3ECoCg@_HAHM-#O!&_v|2pb#7ki{fvO zj9Vc*+80tvMNit>GBPJ~_obg2Th!6@hjnwQV;b&f&M&R0Z|3w>8TI;>1I^UgDhY>I zsR4!zTWu2gg8NlE9iCcV7vf++SRY$VkNThP*I5^Vr^Tr ztl!w*Q4J0BSJnnSgbJ(G8fwH!4M~5$I%@d{%c;2HJC85#m6)0V9KEg&xZM+T$<(&! zTmc}BqJu`K1u+zhzM1mVNe)<7RK1?~P_a^H^7gA!JS#ddyc9YTh>L+Em-Ou(VW@@s z1bZgChjR`ELw^LRG?Bd{_r62#WxX&?@LnwDL)1 zJ}rjm?I8r6Niq*{m?6x*trO__WOYJnCfKUwFcmXql$4}qr&*ZJr zQ=JIoLh^*YA1%`+Y0nGBx64T`P9&nbZosUYLgQ>&Qu?UGLB(@o4KO4Glz#PP7%=K> zRI@NL$-^tTlMAU}#0K#oxP2si(~(W0)f;I}$QlgHkKEk@eX6M6ks$Ih7sfCRh^pNV zId~R6H;tdSYvISn3HhIb#1I~htu`xA{W3}>W)419D^bsX(~uf5u~a#gp2oQJ8=pPl ziu_rM2b+<1s)h~;$@PL^tmomtK4I43)uF_+$xyZ_W9r=e`}<)(8+jKUg7UHUI>uAH zC4L30&4k4M8wL*Z9w`5&?Zga0mG%sRG=rN%Y-}kJtETcEbu^kSIj10B+3t@0Ponq4 zB(w%?<$i(h!4SURoQpleR}8PNRorARCNr7lp!S5Pr!DeBte|En_shzD;ybV?VWZ|; zi_3(?l4zd$%MdFsQcW|`3Bi|3ji~yhU!PB0NbjFK6n+;lgLw)3dL9QkdaK%9@o>^; zenj8@@HKtPqnuRl4njnb1WJF^{j%bUifM;o$GN4e!2FqSkc-29y&jtgCt+a=?*oN! zoPbQBEY*0j=+EFZT<;!_3@=hSEEWWdF#8AiK>Bh&0TeliKFs7eeJ*qREkYEEie`6u zDkm34M$4;v_w&K#O7v*n$OBDu9W}U=RNNvZicTTYQ%Akl8t0Dc-l%^WnUMZEN^9V{ zie?DuAQeGF$cCkwV#3kvTF&&dKBab&XwSz6R`iHLe|WI0lG{-Otq>?t0fI^-nbp@$ zfF+y7g5ouz&iQpV5e1{;p$~RyW@D@TO0*-eIxaeH@^3(!S_yPHU~2WRr&#ps5J3x7np>jdz@ zH{})E?>1&g>CKfyfW?q-CSK2OK4=%|N1=rx+s1LX&gS=ta+Z?%QAUYM=KEJV7_gdR zH(pi@_w4fYZNf||GZ~x>=+GT160ZoyL@Iku!#0Q-#m{;+HHP!GTnJ32`&;+9ic`Tt zy8b3Euq@xu$YnJUf{%V^%0!ADm1j!m^}Vw%GE!9~gBud=jJTB)cP&Nwj?KDgNx6BT zWTIv=`(+h(EgVM!TCODks?9>VCT&s`f`uA@jx=ClX#LwQ(ME+VJ2LR##eXcB&wKiG z2u!`zkvEa4eW9zFOQF9YEC!xTC%pNfl{eWAi^1gmNmQf#h`%meu+b(lop39(!FWtW zA}T{tWR-H=IenC@0Rd-RjVyIZr$@L&vogof!fx90;d$yw%@HHn^bfM8AZI}rRhh=P zP7t7pg_z|Q-?GJl6bSG@K21(!bm2c)u>q|xRREk^5?kK~mnq${iu&bHM75?j5`1Cg zSiqq+8-V)1tj8}=VezHdxM&9rXsBs8gTv93uXqhK&u(jY%M8;7yw`t(GZ?g`zzq=h@5 z3ZyLLQ?kAuP$+Qblj`*kOoXOgx&6U2Ft4kJY_9<#Fj`){45= zxtQpVT;XnhIRvxcfvBJ9rNg*qfaw}Ei$LDErMgNh3Qb~`A3FRoKZ+pfKwCH< z#vSO+7-6>0LQ;>C>U+6ZD;#zs70=nl{KJd`4O9SHP!DR`Y1b`(*(fNU(;Chh%>K#Ngz$al3q%UxdYS9ZZP0saBHN3&VM+`Uo@EA9} z>qW!1E}E^;FL3EMPwmT#s!LCcM}CH5rZho6Pz z`~uIYF<2)*W8HG{rUuPgLSlz0DWBUZFKFds3q^SJUS&V&=>?lyB|+)7)?(C${+7n} zcN!Jd;uP5EGAb8c4iOH^JLd27G-pCDl})OVpxj{h#Q4*@-Go8x#XG&#{+-KKFp6B( zAC+5NGM-FNK7R-R{cMAT)UTqPujzWV9aH#&P?nGi@e;4O+DM7-b)Giu>teMrE51Em<}zmcoj==x65#|(xs^D6$Z!X5 z@7^0xMR@&Pc%1OJsiIpnSd1BH-4PhB>y?sOE@$-R&aJh|6asR}Csk|z#&=6(eseay zcO(aFBajj-SZ(Y**%>6VQV1=Vhwn9@ERF(X#%K>cj;PTkCT?9`Tq}eiHm9@&T~qFd zVE1k5mo&hP>$JRtw^zAbI4R+l&a11XpTsZYl7nSpqg@Mm)vl-LqXhRdRQ9asHaLb2AN`7;A?%iGC z;haTNaRDQ-at9A}uQ3`hU7k?`sYH7^<(z^R)~#NLn7nFu+RA4A1L%V>0>@JJ_eIvH z??GE!2?A=gj1U)luLIbfx8YtINiL=%oL6B^8CB*Kw|^BpLpF~KS*M;Yt_>V{(#5=H z5;YptjH78Z8=ow>AtDYickK9EY9g*xH|cVCI)Sw;k#F~~gdRTjD?__IE=(otI8xUc z63|ystCai(Uss}oe@7*&=6MxhNANd2g6x$7CAIKM(}$}i7CJp*zodVWS#w!V^&$&|Q~vgPPh}*r4;?x0DGb?VH}X90Bq5l&ig!Oi6*hGTD0^LH69$_%NKgYZuMzzE}_T z+7X};mO53IxwHrQ5-Wn!gMZ}6gqr>g<|4hbQGU)8`;V7U~v=8Rew?FfWaW!^9?$QLWy$SDlZ%J+oNs9!?@ZzZ)R?#2@c(h zO@iscLvMxW>A8fN;-~6F^~rq_76hXn{T6KMVONCOsdHd3g$Ia3h+H^q+_o}p0{PYH z$79Y>ic@eLi>%6}up=US+*!hbTcL4?wNM817EzCNk+m|#Cf>l~-Y0gM7;k{jIaH|i zg4AAGr|4jh?vhCF(Z}|B?OYOlo1EVMFYIE2{}<$d&AXQ+_!0h{zo+~LCFRs=m+Jfd zDudtVIF^UtGo#CN2;m-~kOfUS^YC;^7X26PfJtJX_f7{dQ$kkSn8?Vl0#De&S;V@| z6kiLPO9B)3gdhfzTEAcf0S!PzsN+>h5VBGSKgeCd#({eB%ZMrSn$lXQPktGcf=q-K z2=08M%UX?m&%gVH^>Q5MGnOL&7`^CYdB#6i_$z78F4i^6`V0A>U;%@Zuy4-!_iUtY zpZ-vaArM75$`4*W0+doyfDpyiDhCh~)oAy$X8D`t-jH2ATF^Qe^i0f}%;k z330Lu8cknx?y5iImAGQ^p!!l`V&XUs=eyid00F73-k4QB&H3jX?opbDnZ=Ib*w?@)})}5J- zW^=16u|wTS{V;fO3u9j5jswv3U#vqw#Ayda=QHtL+FX2d?1R8;*a070+-Tu=2jg<| zbG;9(iO$I2vZ{4&PZcw8#pXdr?~+&ZY@#FK^g2-d?rGR|bQCkvuI^?ld39X*)10XJ zg9-=7)fgDO*;(jnMxc(Nj^sb7MMOcjcmF3@upy*MQ= zb=jh~%=s5xk9|y^%e2*>4Vm^$_+NIRwf5LV)~{k>a;rb)R{JyCyBK!5JSceJJ)mCq zb!O%A&-#D28}s6+J{$?_nx3AnMeWQqhp=&R=}p$SDTDV!PmT}9zMxR3pPLi#@~4gN zR5sU28!Cj|`Btr)z%%)IP^N_xA@%s3+Q+Qi znSsoDSatUkw@aOQUJq>q3@rTA?gS7s7NDfsK=GfG0WDj1QcnUSyRA;l!jZd|ja`b( z-eK*uk+R9^g?!wy=Hf&=rGB{~RSu>~L>XB$R`A+}R;OI^4XeZpXknI<+@7?;1)>Mr zTJ%614a0Xch3tz&ew5S=+>+jc53Q*0Z zd6xtqgHFz_{T`}+?7+w?XkKn}_O@GViPS+@9RwXI#hUXEUn{`WTdXz*Pf zC3l7F|0s;zX#x|5-e^%9qczG7;kGTIncZ*+HaT!Zbw;2c ziY5AoY7-RzG-9P}68qlUl9!*>dyVAAPzA*vOf-4$L~`;Md(M_;FdF8s2W|k;q^^KE zhYLFoXkAa;6yF6Gu6*8}4YKo_8zrLMh8#J>GduN3O5+__gp_#Vv2{O*5A_A`wt zMaxfWXJZ;Ni)mq9g}nfZmR)t89mX%IE@Y_q zzY|}9H&^rQ#!uZyWFZI9(!|@hTS`OwcLgH@E0G3 zM0I!WyfH3qHJ{b3%d(bQ1aq7S3{x4ZveB~fF?S-Zc{6Z-V=uN42?!u|(OI(^(L4;H zL_f%E(zC8W!?U*u%u~^=b0#})wc;nLBD-fVJ5Mp)Em=b9`#Ls&h5nK?chMUg5HW@RgSx%;LX6j;M@oW-Q1^s{M9 ziHSQ?4Q2!cIFsptg9BCKdQau&F?9YZtrB+yayT0Dj5O6eb&+XxW&jPH^ZGmg)xO*4 zzO_Tn&_eQG_>S}O_}gvt)PgE1>GeU>;*L$XF6QZwz_wnNF3k!2%@d#D6_UJa-{*yX z@CU5Rvj8*SCQDP#+ndC&`QOQ6z1^m3R=dH)gFDg1J3zZp>YB}+Tce>9k7@sf^Nj2{ z&YDvN5$bb8Olrcy5tQlHUD%p&<@M>pSozcMG(kO<7FqIc5lKl*h5BhjHdd5EGOfmd zEfhfjvF5QEL$A^|Vquzao;o)1t)x{RhmrfF?_#**^CBhpM2+`!KMG7d*3{n>7z&Qs zeVJ*cqZLZ!+uXX9Z8$zTv3Q-d{`8c^iL;50t*!FH9;14Jm$3%nVr=@LlnS2nnb^0uL z>tnw(ozJzB<Scpx;u1J_e?yMMiLRHt}!e_gFWMm0JuAB>rQZ?)d}MS1q& zM;$XpUEBgvnkfX)*BUr&MdYtHEDF7Fake?pGQ4-9YFSj5)|wTn$H@acdT%Eyrm>}< zn9T-=fwkTV6w&aZD>6gNSl0T|Vi?b2jSxGFE8E@M0Q9$?rSl%skT_CIh|-*1QB8n$ zpS9fo9It8iBEC#c{n;wYY;6lFiEvQU;5z$fBjfC)B*M&7b^Np!S*iWzk``*JVR45t z=URV!KGGI2kfRLH)0@M2VMd}3rW$;qTr+tIacR`zg;xzILI_VFeAhXG-IR`fWuexy zZ%6#bfBm#l@rHG6-kBsM99W4Myh0Y}Q+ThzQ$jj6!HThc=Xgbb3l>|hwqz=2&j=sK$qEUvy?VB!vfaP_= zj0qUv_{oE{1)9mQ;f%*jj*_YBH(n`;KtYe@2e!TCy@)Jjv?Q$W-V+}1MyyFtEr9}> z{$6K-6xV(dnIR~X$x)XMFZ=pW4Raj9uV*3=4ln$_49uL9aFNK#;lwL+O%4ng`)Z}MEQ0rzupCsW)QT`p znexM=-fPT-egca|lE*8%>s}vitB7yQl6WlHm-c%lbStejVr}MWfY3!xeqMR4r zH^9eXY(njRHin`sDV27PNsZC8#>6{Z_om=oK{?avFT88Mdc=4ARQ*&e4u$!*5B7opPdDYB@nY_7`OzsUH9C07^jy)_5SPj+ z;j%0?zi$*$@<-mdcY(XAoqLPcOUCX|!efUvW0eu4VUVs&xJ6~wrKBehN;Z`1_<0Tb zj>N9h)kn_s!=E>+E+~5Qim5UPZ{&OSjr(Vt!Dzk3XZ0A3x1-7?et_|sf}OU&rXc*G z8xthF-Hl0XD9IYd)u8l%xH(aa@=~s-ruf$R^XG3lb}(?59E8K z;v?$0wC|QJ(?l~LW;y)Q)xYKH_ALo6fT4N(`s}0Po#K2wKZBP@q{!{DCxqqU>QId! zK~MTNY~_ydC8s;Lg1;rjb19`=PvbEy)H`P-?-@~A#@p-KziTA2H-g!dQlwfh5-wJ= zp#a=U0i;emE!wQ{y)8o12blKLbTx^J0m?W-+JjogN^Ptgk$6B<&Ri+CS zZcZRn6b8Nj_`i<(ph=};{9@JP!?*xt^1AwoAmj6LHI?v~=~d#l=BH*tePe8)2iL_W z8Co|^8OVg%rRqx)6}6RLr>7T3LMm*}A^lRo(_nIeAfkEMN1067Vb;}NnX@4Wyo|67 z$F7J3zIZ|Uj=~?DTaQ~n7qi^F^^MmdWHcd(re2PlI(+E4n`*F)b zvkBtf%g^QC?r{nS4pfnzPjtk+g|E$2@kww(21g9Hy8MGLNmKLZDqf|8c_*dxclDEU z#yFNz3*KHVl!TCWg<4x%CneO>Y+z^1=_+Y?Hlw!3Tx_qo{`a&Gc6V~C4FK4OU@W&| zjB(!=QoCb`<@F2Y8f6(cIW{9{^St>IKtb<%8$i9@$CefS z*N3)j%RU2eihOz-5uDkZ){Ach~0{&bF{20KN6 zpI*LXJ)%*?x_fOjsNxSe=}(XK+0xWgv4!M;iRFI zR{xPdUd)s~#ZscdKi4xt|4Ks18P$TFdf^3 z!{l!%4pSo|S19BbDE<$MuWg?hZKL=cD@B-N?0;|ir@<6F-V=ZFvv5s+K-H<-N{|ze z_pXvQw|;xEnykl3Uz!ai!}vMS+~6p4_uHY_dB{PSxgR2;A&@ic9hXn^hzv8ZABsI_IHdH3SF=SP)M6E z-l|De!xe0qU)Nups2uhB@mP)|4Sb(GW$fNo%IJ=5@z@BEMR5oP!qgN3-#M)V-)j$* zFL|3__n09|14|M({h_~e5T87nEt2QNOl8E@QOOqN9}BEbS#Fq^o>qS%@1Nu}F{W>6 ze!#*4OO24RM}kD}$i%?-Qz~FwbrGg2g<0 z9k0jO=tOa#B?+kwRxO+c*{J2RLU6#iS!!OY2xbsdYVMP|n&KA@eDx%nGeA?7Q%2$t zd`j(5oNiksuY$KT{-l_?>Ur(h@(ZH&_(M>d$|+bsc3k@O(@Hlko3tcAntHa#5o&2kW0>1GsdxYYJ|;L0(!22%ew3;FA#@((hTJm=vNbnuk@ZwW&0Q}^{FjYF2!P6V_#fR$VZ~pGEUaYBtr@5wA!@D*N zbS!%+MUCAt=@^9soyMdZDks%@JSoQFBR(}wcFMY^E(r+mMy;B2Q{iP5@0Vg(Mpikz z^(D(92eFQ9?Zofog1%v*gxd*(dQTMW%nE& z66KTh`lq0RTzbN5F@QA8b(YW+P9|Fcq@=-_Ru=Bh8az+TN6o$RKlU+-3}R|gvID6u odE
  • Windows operating components - any binary installed by a fresh install of Windows
  • Apps installed from the Microsoft Store
  • Microsoft Office365 apps, OneDrive and Microsoft Teams
  • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
| +| **Allow Microsoft Mode** | Allow mode will authorize the following components:
  • Windows operating components - any binary installed by a fresh install of Windows
  • Apps installed from the Microsoft Store
  • Microsoft Office365 apps, OneDrive and Microsoft Teams
  • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
  • *All Microsoft-signed software*
| +| **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
  • Windows operating components - any binary installed by a fresh install of Windows
  • Apps installed from the Microsoft Store
  • Microsoft Office365 apps, OneDrive and Microsoft Teams
  • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
  • All Microsoft-signed software
  • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph techology](use-windows-defender-application-control-with-intelligent-security-graph)*
| + +*Italized content denotes the changes in the current policy with respect to the policy prior.* + + +![Selecting a base template for the policy](images/wdac-wizard-template-selection.png) + +Once the base template is selected, give the policy a name and choose where to save the application control policy on disk. + +## Configuring Policy Rules + +Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. Hovering the mouse over the policy rule title will display a short description of the rule at the bottom of the page. + +**Policy Rules Description** + +A description of the policy rules, beginning with the left-most column are provided below. + +| Rule option | Description | +|------------ | ----------- | +| **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | +| **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | +| **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | +|**[Hypervisor-protected code integrity](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. This provides stronger protections against kernel malware.| +| **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | +| **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | +| **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | +| **Update Policy without Rebooting** | Use this option to allow future WDAC policy updates to apply without requiring a system reboot. | +| **Unsigned System Integrity Policy** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. | +| **User Mode Code Integrity** | WDAC policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | + +**Advanced Policy Rules Description** + +Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of the policy rules are provided below. + +| Rule option | Description | +|------------ | ----------- | +| **Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a driver fails during startup, the WDAC policy will be placed in audit mode so that Windows will load. Administrators can validate the reason for the failure in the CodeIntegrity event log. | +| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flighted builds. | +| **Disable Runtime FilePath Rule Protection** | Disable default FilePath rule protection (apps and executables allowed based on file path rules must come from a file path that’s only writable by an administrator) for any FileRule that allows a file based on FilePath. | +| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically-loaded libraries. | +| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically re-validate the reputation for files that were authorized by the ISG.| +| **Require EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All Windows 10 and later drivers will meet this requirement. | + + +![Rule options UI for Windows Allowed mode](images/wdac-wizard-rule-options-UI.png) + + +> [!NOTE] +> We recommend that you **enable Audit Mode** initially because it allows you to test new WDAC policies before you enforce them. With audit mode, no application is blocked—instead the policy logs an event whenever an application outside the policy is started. For this reason, all templates have Audit Mode enabled by default. + +## Creating custom file rules + +File rules in an application control policy will specify the level at which appiations will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports 4 types of file rules: + +**Publisher** + +The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specifity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. + +| Rule Condition | WDAC Rule Level | Description | +|------------ | ----------- | ----------- | +| **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | +| **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver corp, is affected. | +| **File version** | SignedVersion | This rule is a combination of PCACertificate, Publisher and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | +| **File name** | FilePublisher | Most specific. Combination of the file name, publisher and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | + + +![Custom filepublisher file rule creation](images/wdac-wizard-custom-publisher-rule.png) + +**Path** + +Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a fileopath rule, simply select the file using the *Browse* button. + +**File Attributes** + +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (eg. DLLs) may all share the same product name, for instance. This allows users to easily create targeted policies based on the Product Name filename rule level. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. + +| Rule level | Description | +|------------ | ----------- | +| **Original Filename** | Specifies the original file name, or the name with which the file was first created, of the binary. | +| **File description** | Specifies the file description provided by the developer of the binary. | +| **Product name** | Specifies the name of the product with which the binary ships. | +| **Internal name** | Specifies the internal name of the binary. | + + +![Custom file attributes rule](images/wdac-wizard-custom-file-attribute-rule.png) + +**File Hash** + +Lastly, the Wizard supports creating file rules using the hash of the file. Although this level is specific, it can cause additional administrative overhead to maintain the current product versions’ hash values. Each time a binary is updated, the hash value changes, therefore requiring a policy update. By default, the Wizard will use file hash as the fallback in case a file rule cannot be created using the specified file rule level. + + +#### Deleting Signing Rules #### + +The policy signing rules list table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Template signing rules and custom rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. + +## Up next + +- [Editing a WDAC policy using the Wizard](wdac-wizard-editing-policy.md) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md new file mode 100644 index 0000000000..b94efa4c7c --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md @@ -0,0 +1,21 @@ +--- +title: Windows Defender Application Control Wizard Supplemental Policy Creation +description: Creating supplemental application control policies with the WDAC Wizard. +keywords: allowlisting, blocklisting, security, malware, supplemental policy +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jgeurten +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.topic: conceptual +ms.date: 10/14/2020 +--- + +# Creating a new Supplemental Policy with the Wizard \ No newline at end of file diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md new file mode 100644 index 0000000000..cd11f70511 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md @@ -0,0 +1,21 @@ +--- +title: Windows Defender Application Control Wizard Base Policy Creation +description: Editing existing base and supplemental policies with the Microsoft WDAC Wizard. +keywords: allowlisting, blocklisting, security, malware +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jgeurten +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.topic: conceptual +ms.date: 10/14/2020 +--- + +# Editing exisiting base and supplemental WDAC policies with the Wizard \ No newline at end of file diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md new file mode 100644 index 0000000000..7653a2e3f0 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md @@ -0,0 +1,21 @@ +--- +title: Windows Defender Application Control Wizard Policy Merging Operation +description: Merging multiple policies into a single application control policy with the Microsoft WDAC Wizard. +keywords: allowlisting, blocklisting, security, malware +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jgeurten +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.topic: conceptual +ms.date: 10/14/2020 +--- + +# Merging existing policies with the WDAC Wizard \ No newline at end of file diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md new file mode 100644 index 0000000000..c21368ab72 --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md @@ -0,0 +1,53 @@ +--- +title: Windows Defender Application Control Wizard +description: Microsoft WDAC Wizard allows users to create, edit and merge application control policies in a simple to use Windows application. +keywords: allowlisting, blocklisting, security, malware +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jgeurten +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.topic: conceptual +ms.date: 10/14/2020 +--- + +# Windows Defender Application Control Wizard + +**Applies to:** + +- Windows 10 +- Windows Server 2016 and above + +This topic describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security administrators, and system administrators with a more user-friendly means to create, edit and merge application control policies using a GUI desktop application. The Wizard uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/en-us/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets are identical. + +## Downloading the application + +The latest version of the application is available for download from the official [Microsoft WDAC Wizard installer website](https://bit.ly/3koHwYs) as an MSIX packaged application. Additionally, the source code for the Wizard is also available as part of Microsoft's Open Source Software offerings on Github at the [WDAC Wizard Repo](https://github.com/MicrosoftDocs/WDAC-Toolkit). + +**Supported Clients** + +As the WDAC Wizard uses the cmdlets in the background, the Wizard is functional on clients only where the cmdlets are supported as outlined in [WDAC feature availability](feature-availability.md). Specifically, the tool will verify that the client meets one of the following requirements: + +- Windows builds 1909+ +- For pre-1909 builds, the Enterprise SKU of Windows is installed + +If neither requirement is satisfied, the Wizard will not allow for creating, editing or merging policies. + +## In this section + +| Topic | Description | +| - | - | +| [Creating a new base policy](wdac-wizard-create-base-policy.md) | This topic describes the how to create a new base policy using one of the supplied policy templates. | +| [Creating a new supplemental policy](wdac-wizard-create-supplemental-policy.md) | This topic describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy. | +| [Editing a base or supplemental policy](wdac-wizard-edit-policy.md) | This topic demonstrates how to modify an existing policy and the Wizard's editing capabilities. | +| [Merging policies](wdac-wizard-merging-policies.md) | This topic describes how to merge policies into a single application control policy. | +| [Deploying policies from the Wizard](wdac-wizard-deploying-policies.md) | This topic describes how to deploy application control policies onto target devices. | + + diff --git a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md index 1d18afd93e..bcddc618db 100644 --- a/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md +++ b/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control-design-guide.md @@ -45,5 +45,6 @@ Once these business factors are in place, you are ready to begin planning your W | [Understand WDAC policy design decisions](understand-windows-defender-application-control-policy-design-decisions.md) | This topic lists the design questions, possible answers, and ramifications of the decisions when you plan a deployment of application control policies. | | [Understand WDAC policy rules and file rules](select-types-of-rules-to-create.md) | This topic lists resources you can use when selecting your application control policy rules by using WDAC. | | [Policy creation for common WDAC usage scenarios](types-of-devices.md) | This set of topics outlines common use case scenarios and helps you begin to develop a plan for deploying WDAC in your organization. | +| [Policy creation using the WDAC Wizard tool](wdac-wizard.md) | This set of topics describes how to use the WDAC Wizard desktop app to easily create, edit and merge WDAC policies. | After planning is complete, the next step is to deploy WDAC. The [Windows Defender Application Control Deployment Guide](windows-defender-application-control-deployment-guide.md) covers the creation and testing of policies, deploying the enforcement setting, and managing and maintaining the policies. From cca539a06879aba6e0276c36424cf5870f62ef90 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 22 Oct 2020 10:25:45 +0500 Subject: [PATCH 006/958] update the instruction Update the instruction to enable PIN recovery. --- .../hello-feature-pin-reset.md | 16 +++------------- 1 file changed, 3 insertions(+), 13 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index f680e26e79..46920d9ed0 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -68,20 +68,10 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput #### Create a PIN Reset Device configuration profile using Microsoft Intune -1. Sign-in to [Azure Portal](https://portal.azure.com) using a Global administrator account. -2. You need your tenant ID to complete the following task. You can discover your tenant ID by viewing the **Properties** of your Azure Active Directory from the Azure Portal. It will be listed under Directory ID. You can also use the following command in a Command window on any Azure AD-joined or hybrid Azure AD-joined computer.
+1. Sign-in to [Enpoint Manager Admin Center](https://endpoint.microsoft.com/) using a Global administrator account. +2. Click **Endpoint Security**-> **Account Portection**-> **Properties**. +3. Select Enable PIN recovery to **Yes**. - ``` - dsregcmd /status | findstr -snip "tenantid" - ``` - -1. Navigate to the Microsoft Intune blade. Click **Device configuration**. Click **Profiles**. Click **Create profile**. -1. Type **Use PIN Recovery** in the **Name** field. Select **Windows 10 and later** from the **Platform** list. Select **Custom** from the **Profile type** list. -1. In the **Custom OMA-URI Settings** blade, Click **Add**. -1. In the **Add Row** blade, type **PIN Reset Settings** in the **Name** field. In the **OMA-URI** field, type **./Device/Vendor/MSFT/PassportForWork/*tenant ID*/Policies/EnablePinRecovery** where *tenant ID* is your Azure Active Directory tenant ID from step 2. -1. Select **Boolean** from the **Data type** list and select **True** from the **Value** list. -1. Click **OK** to save the row configuration. Click **OK** to close the Custom OMA-URI Settings blade. Click **Create to save the profile. - #### Assign the PIN Reset Device configuration profile using Microsoft Intune 1. Sign in to the [Azure Portal](https://portal.azure.com) using a Global administrator account. From 8e585bb9451accb7410be18e05b9a8e0933f05ca Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 22 Oct 2020 10:38:27 +0500 Subject: [PATCH 007/958] Create pin-reset-option.png --- .../images/pinreset/pin-reset-option.png | Bin 0 -> 83633 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-option.png diff --git a/windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-option.png b/windows/security/identity-protection/hello-for-business/images/pinreset/pin-reset-option.png new file mode 100644 index 0000000000000000000000000000000000000000..7415de9616afe073ff1ed7380086dbec46a5630b GIT binary patch literal 83633 zcmcG$WmH^C&^C%BI01rtfZ*;9!9(z%!QI`04;Ea4%isiecXxLNcXxOBhMaTW@5-OM z?z*?vVrI?E-o2~4tE!)>dYWK)SqWqWJOl^`2xQ5xqTeAP-Yq~tKpVipfWPtB|LF>T zgLL>VAq-JEO0W<9@Xka?MhF6;A`+c4yzSQ?4iFF@y5IgF<7hwNLqNRdNQw$6 zxo96PBYsgbS`j>BOwOk&W$?wWG^+MAqL+7I$0+m0GNZF0PYRV%-?1(rpQ%kMt;d_G zH7lq&G{=*ScfPMG&L#iN89O8Wi^YSJa8O=BGDcL4;q@}*G9`(%3u(ALpUX?IsgL`X z+rjwL?%}B`Q97@9&$M^Ye+@4u$>THWzb#8#cU)Zb-?jybwD8|mL44jq_-OyODA>E$ z*jQVpcUiP_R8(I_|NFX5SM2|A4U;L^f8Aa{z*zm)t0+->M)-f-_Cw=T|JN&;D}*1% ze|M0g{67-}{1Eeu>qAg>aj|qNcBFpNzde`gfMv(~f->{;{5u!AH-agr$N!V+@4ZXyzyJH3q6fZ~{6jIrmv5uE4TjeuqmZIy z0u%|!@iIV;_5LU_`vGLi(BBu9kXhkVzNAl|IGcv1Zof8T%Uq{%2D!DNe0uz&d6NMH zfI*smTn@Tz8@NBfUmUAtX}OGBntkWGyqo$abv_z+E*gZCD&ey#Wt1v{%{dfia#2FQ zoZxcXf3|mUz{jbs?%lxd{9Ph9KyufxWM6ZQSEf03$6#L|(04X!giygp!Ss%r@k-b+ zqjqmVx6&>hvS)y_n12N?Mn0lN=AKBs{>}^bVbgQSWRdt)#zu2)r{T8v=DO+DmGW)g zFRa0Hw$xodQq>!d530}jRq7gkkMtxj|KVysXinhE0R>}8Ap%mzRn*A&YV-nT(cj6O zu6|R7>3&yIdq22^?yuPo{n;9I);0dN*YF4k(GF>3$u=d&OUTp;$J=<}`G&ae&3>61 zTS%4I1VV*5q&eKi6pJdf!Oz&67`d21>{<3l#*SEroXQ1{NVsN?dSFoZiWZ5|6_INXC#}c_p22b%jUr`c?)+f~FTinW_9zHm`WsT0 zji31{@8VdH$1|B{RHG!f3P0r*|NbuqAi~zJFe`NhJ`ceDUEitvsAs4qb(w`m`a*hN zWBoO*eDE$eg0%bze~Jgi(MiR56|I+XaaoV8&hZIw#M9|)-ofSd<8wK^7C_t88hh2| znbly)`1wA-%_j2pybr)hy<3?g!dLd0HE+SdnuC|(rQupNj0gWdF!dJ})Mx0uJRa>UuZOF5>yI57Lwmdp@+=>;ih*N6Ba z#G9g=Kj2+jpSHo}H}*N2K2$rKna6Q7ku3^#QQvER55N}k0?c)*vgv7HqfAp-#Dk!t zYy%)2V(NM`?(jQ+LesU4P(izI!FLDeqj5_*?aja?zHsep#Izvd#jgB~hUz0fy2*Hi zP*!bQJ!jjJGfy3{fEO=tmP2L!!ghX)3#U1MV7$Lo9XT~_GX0lhX#dUJP(yz zOO;-{*Pw*{-P3!v6(3=as*5g9rPF_X@JG8vgBE}%9HX&7rBh97EB!3&1>=6JtT#zG z%eW*MdEhPiem5mh)`^OdvG3=qCuPC`S)pNZ*;KAQ%{cMY^>#bzXaA1Lqm%ZR%R$cr z(-ODnkqgV-DsKZ~nM-FAexs zzz~FWD}`KYx!RR3@hcxxxDRmG|SEN`?o+VZGqB{keKr`iM5!GxL@q zdBl*>n-|Km!1d$EIvfc8W{KF`QCeBR-$+H90wXBIsr$9Wz;V}3^ZuflbXoleRtX0# z>pKw!^$Pv>ZZ}5-9E8mtqicy5Rxb&u#U$Pq)$V`H`}r-A6vSeW0<93MA1w;h&_Q~t zGkF|8m7odFTiGN`#_Hsqvk)Hwl+8%O@mf1eGGupGOxAF2u;x_k3TJ@v?PU?S3+wJw zT-@SMNSgbfsK%LaeDyvdNO(~dK=9O67cp3bkNPNcc?mNtC`2*`xL&+i@s@f7q^zVr zuy3iq=|)g9{M&dW34MGX*JD1lei<@03^=HK@P%~GvMFu#eAM3gEn`a%L?~#z>NuT- z)t=Aig`)MTljFKI#H++`E*B=Fmq}dK+@Y10*fMBPqUK;|E@cYY8USOs9s7KUJ%U;T zmhx_ zp81~F$hnx+;yMXHOuXP7H&dn8Z*H)6q=pS2d45`3PxYnDO3RLFD9wlI-iwSX{1N7; zy1e5r4z#zH!UW=F4E(Sor0OCK^b8y@j@=LN+KdGy(T}3feQfj3Oe(7MQYaBP!280M zF2;>jLes?F(h$_j(|=#mhoI`&Vh!D%Ve_J{V7!Y1?UMTL?tlD@#<6 z)6j^02Ex61I{&Xt^BKM4TiYW6Q%sARhzerzM(nxPF%yH5xAkVAyE~`zgJIO zhs#I=mqKw6lE2v^7!wE-|NjKz+Bbz32jxP}XY+dOgZ~-|_+{^5Z6d=;K^$%6(NJ(@ zxt=(bwKdM-e|~OGmy?u~3{SC%rPLnl0|mB9Brq&bZyWSQWPnDN%g-j5oRWfyeSLkm z2>wNtu85IJ)%zsCfh)m1Cn@5mLRI3###fXN9uDtVSEzow|9csDM$5$CTjiKAt_O2g z|2|f2I|xUedd+BTgkfiAhl9T-c1nd?>=yWE_Q09%jcELU8I9%Lmxjd|ga3vX)U4p=%fWB>xUb3WHP1@mlj>Vzi_AV~ zP=i;wKjb6SaUh_tV<-Krr$NnP@|oN+`I#UUuWE$$ zI&}5#67eG4Dt}AoA;LIMYxp)TesO}KK`@jyU!eKjb_9vkT*3$=5aqK$)6iHzJ<#sB zjhANd zYl0V+;fm#-q0rDC4D+3Nqk;{MxE-`AmvWW+;}+;Og3Y;~`63GUgZdq4${)+n_I_&U zSh*QP4{l*K@?Ge}+&0d#Vce1n{Q8x2Pi0joG^wl@bkv4TldiIj-o%dIBxhz(=9$x< zxU*M<>Z5>iRwbVojqJix2o}Da;C{nT=uO})??s`-sF@vaimkbB zULZcSW)&P5>K5?H?bupI7@#X>4dv=%+pjcHVPgPSx&p}T(^874dON}`&L(4S*G4?; zwX)+nJU-#?Q%mBoJ2Tiv49=(uE58pxv20(!PV4j>DxLJ^c3PQ|U%K9cxXUJoI%!6H z<{g~T7ID?$7n!I^NO7wbn-_YnDu=k=wy!&s?wQc)cd^1t(-=b#db2oloI1bSMG-*2 z3+H18Mn1Bet)#yh`>cFPsgYtvq+2nU#IkdKM`De-jC4$ex-}-I>FF@6u>gJ`L<39< zAT((%OjC+|!9|)N+X@+niNNnD;U|{RvuwjF;U5}_m)g2Uc({=6GaoUgs>1N*b~$W< zgj~(S!YGGp2j_?YnxTPqb?&l(zJO+ZZn@D|YY((dlh&Y`^dvi#QioLtzRMF8%h7>O zSlajv;(~$tDibLyMFp6&v_=BhG9~t@g2?ml8`8~JUL3=!)YAozX%AVuHVOKd*sgbM z>{uNm+va5x#F4EJ3@Uj;`^$7k!y18No6>_OdYHMxW33FdGD8A7zg*206?XP^GZg8x zN9RLRPX)qkbs8exY^Yz>4@LylJoa=yfkrG*<@mxNoU5PQkBL=LCGkhD5e{RWxv(xm zbX6flqTA7z3Fd~qh|~fcEBGsMGA9%0F_Gza#f#U_S?Tohd8@HtD*DJ#*t7_4lb&Ndl20?+HH!ythDvRUz5+ z=8#fVyVPA`Kk;g?MQeaHhb?m?G_w|V`IB$I6j3(+2l#hFt&mX`VhbuOzadX_Z;m~g z+nUTF*RyISZEcRJTj-@U>cr)nPDNNXGlhL!(%UnU$>e|}jQ9$q;l#co@;Tp+sW5HR zqyXCt*QtSNi=Ei!OBBUbvjbG;%(ng$ZJm6oLt!D(PD#<(QZ|b2wC=pm;~GvFz#h_G zYD++z{J!7im^!S@BtNI?cKuem!{O9|aA}c>mF)Hz`}_);`G6`$f7Pb~Wo;jOR=3X2 zA;DO-D#anw?`1N@dbO^-Qk#&xvJj(b%2;2&n1idkeeQE}><`l^OBq2>e(bS5@^1l2 zUWvBFT#~K{i=Qzz_!hkN8!XQ!TLziUvtCmy@-(GR^K8c}C|(Ho;WM&>wNJyKxZ52f zBv52C+%#v6?f1{ zf!(JdeOshF+vK?~rWFwB9QnX2%YyoJ}vKdY?QmzwdBSCrKj zM0dk5hk(HMc5<;}SEt9Po(s;2gslv&a$C<-y!DWX>C=J|XgKU<6qA=n0_ft-f+7d} zDJ_Mg=^7Gc>-bG$qSoKSoCS<3y(p~8YOwBqv@m|-m3>0udtQLaJI%XMM{XONPETUz z>d*QP_A6Ny>YFqRg|U(WruvntMsr>Tg@fU_+1H4`+{u~O63W_Z@!y*F(6 zFk!O+R$TvS75~Pq`gRABk8(xAHS+5A3H&Xuht87gDSj7vI2_D&WAaedPH6}MgK#N_FMw3-DQuxhDTp&By4<$Nc?5INM98Fpa?qp^75X>Ry&fOi zz1LMAXzp%-ZRr-6S6&eT$@ziyba@%2*;~`qa$_&8{ne_yQ^LS@)#8JI$VJudBgkHU zi5ww#BN45GsZ7Uvb@dTqh0fLP{ud&uY7q-P($r-xEkHfEd}MNI3a9dY zkDia6PC|TYN@x(@X1nu~)N}OmNBCEKWctx_2}9{(p1=#FEsyoJP`fx>i`U=&oG9ix zdopCv6?@rqmZS3_BlrTHf@$Fr8JXD+AxqeHtCsUoO*&j36(@gF-zet}Un%jqRUJL) za3%ZX5xHvN>rF6XoR1wm8n64Q5{m%XO{qjikIV)yLtV$_TXcD}d3ZZ6)LC>=z0bhFL6i(n)sx&u5C9 zzNWM0`kSAx{x1u7x=Z@^ZnYctyxTUb(a7<)y>(+3~9JDqqHjt*j6+T znx3clo^t%>4fBtrxv$rB6wME40+@X-7R(>%p%v-+3JK)Ie64vNm}i^I_yT&!SVT39 z9IyPg=THS;i|T^Ld|2osKrimD6!;E3{6btrGK$(`5`ZpNfD2OO%etJ)J=yk4UT@c* zqsx>kNX}uK%^XL-)4qrT$P;&$t2Dv+KmFj%>FXIuG~i{kT9((igl zbOEiX5ZsHzk=JCuuNWKQ+%~)(3}Byv?Rlb_ez{I{d`bL~{f8EoqA;<+14N9+N z*R|lKIhKGHkC5lGgAOYagF*%2KJ}u)#I;`WQf$C(dhD$v($|W0=BxNN*f)LKTbRxd z;Xq3Z4q-o6Q&xVoshY`}l(EK+Oan(0Sr$?+x!dxG?oS_47gyCuHU#O2;195eLe+o` zBM(MOG>ca}+BD-kGLmL$&x7wo1KzdkI3BDH_`ewJeo~MdiDO(X(pJk>ZoQ+{aRcS* ziEDEC&Okyup)Jv3q3{#Y`duL$$pX+C%$-s$j65arj3Z}mk-g3Kz)KY(IFMUn+#Izt zuYg0lK&d+s-A7kO?qbT4_9~LUlpOx7GcZ1(+H@1)HS4~!D62t9u__)G@Iyg8C@l6f zUyFhYxtM?@ZboN-edLCY+k5yHOX$Fj>#|Q;$n)x?EZbU71{b=CJOl2_yI#Xymp1XY z&YKn%8OE|Bp4&Bb{@a)}mL{(JF9+YYTO@%+Eu3Drn>OHN&Z_dsvH%7=wF7DngQcnj zl5)f43glpe@(Zyo4 zx1C1rboz-fthSywF~-IsB;=Zo_SYm3D-;?i6{_ObGRqe_l+IGeHj?bFl<@xPV3x^0H=GmkqrgBsSB=&}W zR3-fUY9n4o#&@wf*8n`6eT=;95*d|G%LOz*$)jwW)5}n-0~R!`KpJPgu1EDm^b|+z z&Tt(DPuNe|9@JPI)?Z3TAo6nhm0L3kpHBK%0dREztPuqLz4r5L^iSu4B&|gpr)nh5 zCWGE)e=dybBmGzd)qu77n_d_^h23TuYwjn)fTlsrDf)OkMvMeEmf0z*zGk&~;#d}B zf_sP^qrnWC&qR!Zv_&!Il3$ekpP#A4gi0+Dmag^qI2MHHHaX`WR*06v%MMLBOoz@^ zo@_8kk7+#?0?EFw6#8XRS0vgUw%8z{cv?61ZZe3h6*o52)eN5QQAffw)y#WgJ&1L$ zwNh&LorK7LX3!46jnGcWG7)BTn?)cUnM)_j%6>#6-likJ5PMaCA56!NssITA!n`Vi zoG(&ZpR;4-GA=AWuNJ>o%K!4Riyzz9aW?`7iblx-`#&Xaz>wVcVsKpl50&8#`I zyE&^?223_}OWHZVw5?li!`BPO!s|`!Zw^d@z0)%H=B0oSk!jwz=8B6ynaL*YmT0a{ z*Qw@cL@G>Y=ZD_4oQ-EPEYEzZ*chH)m~r#;BUBkLNUobCLcth1t3aZhk)L6pW0Qu? zD^a+0>^`?JrMh1jQq|K3^nvVGb&h>|b}|#sK!PNNEx5SUD7ts$IMM)m==%?_68~qx3)2u3YG(kFXDTrv8n7ET#l^ z$jKDgYDy@F#S!oKzT%5GtTo;}G}fl`3(g0oigBI9LSu0O2|gIggDgz*OZ~RjP)74s z0-h#scOK6#a!c;kW(=3+v!NQy97x1vQ|miB^85d;t;}1wN{oh<_Izk`CecpEn-1_L0P)M6j}vDxJP1)qwDHq(HIKj0R>?_2$`z+rYyndU6W_NtR+B zw@u^J(|~QmVY9_!LRRVQm_bxQtIa%uFn~%F>1141gM-Ht&1Bn>o;)zqE5vJAOQnT+ zEbj%bw(Ivht9B?8#TIB>wq%cE6JfN&wfk_z*yr8020>{N%C-CIlDP(1qz7BHdnuxB zsdTO0F~+xqkCrpI(A69SH_&*enysTsY;~~Vmr<)+?>HcYx8*-qXTiJZ@UGU5v6z)+ z<%-CDx*;Bi+16X8-yr1yB{V@N>oTfU(#G6K_*9SO3wI+ySy@@r?8t5WN@a}4r``0S zY6X&1vlrT{R>e^p^?;gQG-M|+VuKlRt69!c!K+M!Ctg?$8he376A)c-Au6{8;g!&~ zlka)aV#(>qBGCNy*RPA?el?QSs`3svhZWL^_=}aNZ>O6_&ym~h&`u6uKNBYIVco1s z1@kKIfi?T7Yu~g0vwt-@`w2H}Rg|lq3|64m+DSKjVL1I+aEm5#J!-uYMQGwQ3CCKW zx00R=Nt1pVjX}JFe${(9LI9EB;+O|#jE`3+sVOMTgFl7huTGSRzf%Bigdc@7C($z5}Ixu z&+SH{*{cMQ9-P22xXTqCd6g8Ydk_CeVI6K#ob_laQtOtQ^T_e(mgeSg`jY6-y~=LK zkT12CaOdN*c3DSrU|O{2WzyNWqI0&|!@b5M=i(K!eYd-MbYytL#QSr!niaZyLN81k z4@iI{ZNTYxA3>yL(Ne`PfWnGglgN-WWBU|9`6PGs*=3GtP5i8XwIIDE<({?TCd041 z#1MO>+PzH+%{Jy{^n`(LOCMcU=jwH&Yj8Ic$7a}VV%;R~NEc?O#o+!A)Zl6GvV=u? z%SQ7JPiIqO@>g`Qek&+;gUeAvPqqaO7u%EAdFJXFN=aVDj%`+J`%;{05!jI?u?`&l z9mun&mRAt|vrfr7>p?`c(1qDU=N069p}i>pfdE_Fy{$G@Y;*uCMpt$$^$n4xig>VR9JTeN<{to=L>PvfKv+&FWkw#?Pgj9S#c0&Lx8=eh z%Xs*;IRR+(3q(N1QA=?Yvfb!HHhZx)QCIo(!S>`w(N+@anCUI#=(;qk5eY<0e5;BM5)HMmI~xX@ z5;bgyZNv^u_9KdCOSBuwH6Wg&V5ComP{v$%9SMJ3yx)^S|2VIS4wJmKg{XHBnYbYJ<`$(wh2%aEsXaAD z5$#pb{?|Akjsi9D`V^+aZ!S^{$cF@nHi#<%JHfR3WmF*J1LPp~(+qL0p7VD$H}z3^ zaYLoi=R0uFM1qWRUFf-;TM=5p;{=s;We|HA7@6ufV>W=J-y%AuAX38pbr1d1X_S4q zr!bl&5^*V1jp8j};5IkU%W9(qUQB6{;Mx<&KdE557McI!RR3nqcF28ek(wY==mFPb z!r?offF~y=N;nZj4Big>f@zY1!K=R*u}pyJ7t{3}_tixAh4Ha)&dcM=#O*Xk{x(93 z1o}SUsii~`H3CXbYpC4Rb^8(;04XUsU+6y`mdQe$c=&}N@isungmJB7Wp*ns zs}iQ7sx4OPOI>@s3+;TO66DZLde=OJ;N9I_Ms6;QkjWtPx(W!G{&52Hd$iAfg@aEl z9bHHh7LZ`aVBJdcYh;R_+;%(G8%PiZv4AN9uDEDn!6CH=h2|xdB|ex|0vls6gi?Qh z7yXAJVRbpYWW|n2LvYHT(Gduu;-Uf(=2owh|n$+1O6#G zp+(Vx%Z#qLEmk~{N)Uj$-)6P?r)9TV(gvhMR) zY!a$dpU+|W&{s!UWbjt-1fS0QmI@92w?Ov1ro7rO=n?5QPokm;lE~E*+4@%#2j)@D z1IWqoC5u_*x#30+2l}+tW>ezUGZm5lJ?iH@m>yGqEyHvCdQ+g&DwY#U8+okpxITP; zp?*kwG_RT#wfBIIf$@2l@3h9MPhqKe^5W9?!puhy>ELr6)Gp)9+9~DMSazjHW-$~i zVCMTG75yUMg9-Fgb-7HE?`W(+XUUD;fAuch2CWH-))d;+m2HFLZ4JN14HW2r_1%)^ z>200&&b^*>H$^pqXj()YCel|E6yR0Mt`xSe_zw8clg)A;L_Dlsy!damt)KnmcET8L zrn}Bop(58yCSfRbq1F#Dq++^K-0&2C;+Mhk5`P@OSyt{#j`mesl_tS5u2f3AI~uCN z@z=4A<8>OaIr{E?^1*aUoY?8=GFQUF{8zz^pSi@Mh~;0t5qQ-=^~BZGItw$y()ZRY znNIk87l$PEn>*SEm8f&M^xBI_;nC@%=CoT0E<-;(U7Hd|~I70?yfD~ZI8US?L7~yZY1A!jT<=Z-N%pb@Rj$4k|w zNSW}Bw)&3Nmz3^?CPu+O3QR5hq9c1B;HHKeOj>Y~R%&nU%q9@c^9DGG9=hBHm*+H~YM?xfU0bgcgO&JfkZvbAhjvp+ zo1rG?oLS11(kN}-2>>hAPrm-^J;448TqP?!ph@BTiDh#-@8hI%s+v$_QF#8^`UC|S zTMP@0OPDs|w?w~uup_lEihtx31^pJXXMnI%+>8}u*AwX-;x>}1LtXnl|6SRb&2-iw z2yt>}#vtsGoT2M##a@8w13G=CHsneY%CN`mgU8;p#&EasR-uq4POcoXqH5@2NZ4$d z!nYJtSJ@)~Y{6hu+f2FyLDRI`@qZ#Z9^1ENl@#I;s^4c;79v=w-(^`W-t0}@nCu-e z5-t9SU#zkGRXF&qCR%2kxG1hKK)D)HBGmcQA7EHhw`r;yy0n3^+UdR;aSLwtakAa) zB>6k%s6=Fod`kcJKY>R7)VQK%zs=_29`4=qR>zHAG5vt%eRGCy?E=pl)(R67vmR0a z?vNntY?PD76XQ{<(NPj{#@u|`^<3@8kAjh=Ls1Hq+{ivS1!M~0+B#t*8E&hhPN-fw zc~Fs$1~jaEIsCQ!yDAxgbq*6Tp8szK^?r^<(=1DbLcZPN#tq(IS~XhxQKZ}w|Bd?Z z!hAzZQ&!n%Bkzmd&!6hsIrEWoVrNj+7EZfw+q7vOlz;v|j9FLWy2t-b&d6H$pC7<%hW~d|+J7_$ ztULcFzV6#Jeka=v-b46H=mblHtPm1rM%`ZA6Lk7n75)(`V->i3zQ5t}u3wpIp#AE; zouFd0oG@wXj3Y~L<&TwOf{l6@uIEL?S*;P1Re4&I64+}|t6`{WT4=mjct-JCmf5G& z9wn~3WopVD>G3^@v2<>$Sh*t&qu`E`l{!fw-SAm2OBvL+8r+nDZd!vZG^_`|mujpa zH$9SRgQzYIyBvZXOi0ulYIPs2HUwrHt=(&HOIvq2D_0DxLb;qtC#!es8n8!ovcc6- z^OL29L{^gs%}GOJ4T$#4UH)srO3QKL25{Q5E#~v z5P?qyOpS8xDNA*bO-$n~Z8dZlw;z}XHZgWe?#>>q7kHR;_98PYJkh8)HRc5Z<8Xn3 zbpATAb}e?R3ya~Pz$y0%0Ti51=~Io!gWQ$!L~g_Z8Vq$ehkRbydQIy!({3d-+Q4hg zTpNp3>`hNHQWhSE9VF+IC7+d+#|#TlseOslbGwhP4x0k7dDW!92JS~#?{o)_PFYbWqhkYd3L9ty~+S?N3 zg?Yl#3Y}G=t?93B%SZQEQZfA4_V-X_&trAoe8pNU>Av)(~WaS3+EOf`~giyyPQUu#7mI*Bj`Ot|=$@gKBK+rKa2WUgMKNr3)43lCQn4bBofCv>G-LJTquHg?n z9GpBQS;bg}kl$7`CyU;lm6h#h8=I2b2jL{G2j^TQ?1kE&@*O+<+$m0|D>K>v7!$yS z=vQOn+2C@yQ4Udg!6o-oPmUOEWD|hSx1rGiZqlp;(L@f%J*K18HewxsXFIJhhtFSv zepH=2?d*=ebuK$rKfs28$v%j@9DxHl;C{r2321o5Vd-0IIWK{@NzuCVZA1kkAdDdF zN^%yVY;qXMs1;{NQzS=YfMaV9(@H$6Q>vsKeb)yMs{vCx7zB*>|Mj?4352qagu(lc zY}{}{ktN5XvciXru2?&Si7>HL?W3n_X!!Z&WI2>fBBGxiY!v(592Jpvsj4iqR27?Nn#jsS^j?M3x*wm|6FR>+tWEOs!bo(O7%%rdW=DQ__sJQzfcH1}^GLYWONu_?Ejp>wU_%3Y6D7Cfn|RUpz?ukG-iFdKO_hfwuCnRI4=RKu6)V|%T1oJ9M& zF2@+B^s~Myrbm2(m_akyu6*zMo;$W4I-t@`Prl5Ta&4m=oz^1$J_e4=g((e(I_U%F`hdWQ15xzvhjM{gB06Ca2R;ru zYCyS#D<5M72~N`yTEh3=Geu4myLemfw^fbQ$y1))cAuLYD9h!FM_hlBU@RlqXy~TP zv-3@951~1>mXx;o%ivgFF2tGnA)R-7qG5V-+j|m?X9pIIXaw)MQFPYK%{4WX8lrRI zKusvOcc8vOUPqMr^*B%35Tsrk3JZg=?ztLc9{;hi)w zLZ&wDwaB7J6-5y92A~M2g%(T^C0KyDL5t;C;X(aP>^T|Xek7=_kO~96zr*wOy2m~g z3H^;}`q9A~=(iyhz1v$_+q=LKd*r|SuENyz<|f(hTMukCtLN67gv)o^h+K~Lyw;|( zAMIW*dF<`&x3ECVE}P*v9F~ciq>V2wjr)5#I&P2vkDVV4qM|1oW2k6RKbsu)KhiL0 zf003UA0Z*VpddB8w3{h+871Y$I>gr3a7Hjub zTADQNb@m$#!x)l-nhW$eE>*vGM8iqX8 z!SOzyWZ?;wZV33nAY}%_mm{mUK3QmyvyWlzxcK9fW9v7qlP3oqKAv2}gg*;(Rqov+s{isOMiXp zJKjGmYl}B2>UtR~=dpX2i-H?Dvxu9iRdorztgwo;!M-GJy0l9gv~ zG~DMh+Bl70P;}9cp}E-{i#LqXyAHOpp3fh<4sD&SL=zO$Rp4K^Zp0l=)@VTxoIlNe z{YjK{F<549$o*ix#s-OUptu0pkXgVT40ttyGPdTSPQbhYy(G{PD07-VGQ51(I^#QU z1`M?G-hf234@>G+I+IvUz^Iri{_l9eL{#VTo6UJ*+mk*70>N{_(Nx~R)3(=@Rsj=<&4QR+0FM zj)?^g`J4@R)$0b%%2ddd(JEyi;|s=O0$g7P5Wj5v_!EJogdJ&}9143} z`ds23a;|64#cn5e0FNJeGV&fqe4`HFg{3tqXsn!)FeOrRbG!&XBZ4l+=W}=G;zan@ z2wVlh`su?-Nz%y%U!gaashB5Q4?b|SoCbqJL^rn69V}feO&p2V(j)wD+;<)5P}@jq zxb^{K9&Ec}9d){MlGUqgMet9U=~T-f#lxCB4zJpB>!q z!!A)<)z70lcMCxbb+sjU)9Oow5}zM%8%>TlS;X(z4nOEtqRXLJ$P?F3o zNpGN*;vKDAaUp8@R>e3~ylaPNo7&wbI4Ioa)l%J~_(Lt4$k)uw!M3i#Vn8E?=~(4l zbKvgmw>>?hMp?(X6MHwLM?T+ei}@M|(J!m=jHGCxIi9GJ|8C7M{_p89Wf9K5*3~Fb z|6J1K31q;*aT9cN#Qg+v(cUi|nbXTBK$J>^$Dtk4{0QdC40%(lUk;1)daX=SY5*O? zrF+dWI*!WqW&J%WBe~FC2$O?X3)j;X{$ul1SE&oM@yPr@CSakJn6?8euw-Ou$#fxy zgyundiGdB0XmSh!!^G3Y`!%y4^f%u=I|~%tnmI%8o)s5=*6?)q$5M4ModA$nXORp!7S9-O)t4V zm*|V&dCCF1sbyJ_PwP@Rf57euh!I92lEw5=9O<7-z}L6%L;Hrj7VwDID$t;^G0TOkiKZWsgB?+41X>=7Itf3tgRh0R>u8nJ5kf|9-N}%jluALbFxo9ZX;R@fSDh1>y(>#RdThK9G zm1xW@hjcQ#i)O$d>GonH@2II!oFl;$Hvbb;s*e8s=bUB&q13OH7&ES9veQ78`I}1$ zn!^y=Q`6@fS{~T!!#bJj2Kv9+kH(%1W)-*Ey#DeG6zG_Rw#m9PWuBaxT22#qJYsd_ zfW2w+QyQ+mvdEP?G(k4M%YX~WO@@RHfWA!s$v^k~G3XKL6a%sgmMdf)3Kh3Ra}i?` z0xoH=Sq)dqgq3DHY76LH85IU7f(AJhdMFC#MU{a9RA9z7xM>lC_rHajyZ56B z${V|_nR}BBh}Lb-&UJY@FBb_HmNmgIqcGh01n7|SpXy-5P|5rUL+XPj<_KDdro^ho zGPvl}@O-DaJb^5@63``L76OeA1Kxs*I#=~pIu`m zEhrAQz-Eq)R{4B?O!~C_lf-;`!B?U&yRHCP{QA%vAp1&A>RuD$-dL&=Z3>ed%I|h5 zBeG_QlqTBGak-~9)Hp4=7{cKm{-H;7CNTxG@g`gpl(MYqfeK}X>c4_)0{+(ZpG^j)n7^?EXXdH4EmiN5>yU& zT5t*Mo|yySl3}*aD5A3rC3|0lmqGq_-e7*-RMl#;%*1uRyvj2h*xh1K zroLK;C~xoD3Kes?&x%Qk;j0_pAQzmkPk!yAm}-EHwlvD3Xnk&=6)rCB0ncAgbm0Zg z-}s&)d)Y?>C9_D7X!tF=VG9dP0t0BKVj6JnLIk2s7^U6G;rqJ#Qy-k?i>q}etM;PP z=s;~gSvu3;#0WD?LGLBin9ry^u*mWua4IM_tsq#8BRff;KCjL405_=VG`IrSY1(MR zjsAHIcMjP%W3h^|Na(p|qDIW$>fsaIh62j!-*ig<<69Pcnw!svz%% z$={&`WjzcQ&I{$F_7xsCVt0a*dyWQ-%G3(tR9 zm#m^l@Nt=cx(WKf9FYbWN5D5l&z5S@g0UsIE%p6>d+zz4F~22iB4Mqzu`Q2BP%P#&IX^}J@ z!xXr6$+&Q;OYA8~3Ch=sY+Z5rhxZQ77j2E;VOC?N7I%YIRr6!=_1)d2l9r&Hw2PUbFaCOp zDhA`l*9)#JCQz3W_?;YL8!S$X4?q08ui~6L)F3vnLM+rGlc3|o8f;dknXIZhcktqN z-MwBu9D;MrUo?L&Mg1K(_@z1d?Ld*A1OuwF1z?CTTcu)VJGUMGOi9!IU9ANJXjYGEeYWqh3uZK6?M2*#{isgn+dq z)ZhOdSTk2PCUd0n>s=t(*$Jw_@eB}L-D|HiqOCTa5H4+aNM^Tzsb}FP^{qi11g;7?j^EtqITV-h9s!!u%HzNcd#@U_JQk1pO>-a`S?N zV8?Wm4%Rpt)k!$~;Rte9i?z}UwA z9Xw1(1FZZZbH!<%(fvIlhej_78`WAH}5io+L z)825--+o&4en9FRmd3TDCoC)00*5l8C3-kfa7T&hg~hm$XqD6^bErn?sRb?)%My0N zhnq6TZ8D|b!5rr-x2H=Y{N^u*yb*hYG|MdrZ>9bA#fPj_D-pZZ7{u~(AT9CF)P**f zqLt-v{RZiOQnHTxXJ5xvyeeSaKWHiKQX<`|QVJELFXEL!oDPG4{)5WqmkPSq912qu zBJ4tJ^fNoLp1DOnDLJktnlwxn{8(WH%kJuP(?;qJ)7UATVD6dyNst&7s%Le<<$^q45tnWkuhh}{lbSkeX0@G|A5jSXFo;ED@Y#V+faW+zv(f~`>(hvKBf-2KVB#4VP8 zoa@AOhJqi-UM&GvWMmsvAMwc@t}v91JSbQ}{PkrZvff5l1(<5;`Y=4)fT+FA>ym+mGSGZ6bXNC?zX&z8^#jT^ zoru?iG+&J+?>Dj4K*@qcRx=2wWa#^{>z-~K3SIHMWtZpd2$!Af6}59U7%#Gj!<^K? zrxoaWMt;1a*J~yQ2DHbqj=a##nS+Uqa7O)E9nh!OFu~3~ip{aezAi^$f!n5yhPc!Z z3=&JwWd_}oEr}C4KUV4>pedEtY+M1tf41L)F^x6>l21SHvy!t4_}@@Oahe~l%8qJz z5*3(E!HSKGa0r2ODpu+b{p_NS^8|AdHQUg?xn@x-;Ya-JK=qG4zQO6SSu?YL^2tk_bhr$@>NFkzY*;b|wISR>OY^>sc25627(CoII}-njj9+i?GSl;lXtN ziDj0-z&IQHW0N!CoJxu5cUOF1va*=I470NhmFS%fOqaihVHp$IMaMwU(E;MB>_iYD z{MPP{2JriBBk}q3b%%^FS{zQuM#?klSQuGT`T7^G4YFhW(0J0H&oH`2hM%u4{ugV1 z85Y(1#*d;P2q+!WA)p}LUD8ql(jnd5-Hnupgfv5Ur<8Pu#J~(8-5{LVJY=d-#I$)u)UFzwO!5E8p*PI95R$5|i zj}s*o^-cClcQJr?Tn_bj0rr|)U~^^z;j}JWUpwtUlGD{f+e!DKmNBgnxd@j8hcCzaLy#&3|qYvaVJsQS|p6%koD;u$6N%?}3 z_5FzQ^YcA!b_&_d$4Fbxe#-5(qRdPDqPaLGH?OkpM!s_B)=U3t?PB*-YO@?;+)*n7 zfHP@>9ERI2SC%MgLNF%DBO|tli~(%~x|lchl0Css@SXx+euqdTABS;at=SFD^$i&>9_x{p@DyNwC9ac9mp_^!!qd`XmZ}>=;NGF>iXkQFUH#yIksSa$LhAAV3xoIc9Mq zW@DLE$l!m$pkDUbx=oU#u8VTN1;4cF?k?k@EheHUa<17Kc`V)Wz`blvao@lEcmQ}X z*2#fwDjO>|b}6}rB&P$0OCG!bTz{i-fak>9_yW=!0ZvOK*9wm8xF$pymhMMx zSltkie4-I}2R{7K!vtgVzE_oSKkuCfq2Y061qgK4S;4LSLTXvPOu%ZyKw&}Yf${lw zXB^a@_rY>>!9^XJz2g3Iy&)5BMZC3S&~}o5tDIGNvoeKNWFnMMx}7W!zdVtX2lBw3 zqubS0`y>N%gc5iF_rwH&Y>DJazAhhStka9CT8|=c7Ijo^2s416jVls%_V z>uHyHmuy|Wr4(TulL$7Q?}$C;w(7WtfS;SlNBs~yka)hK%McKmWX-7?m#{T`sLW~R z&!NE=*C4D}hC4Ga_93-z&s=#wZa5>xC`i zP-iKs*5$+1(sYwrdsEnqQO0`KdY3==eHY^-c#&vBr8E`kDrRDmck>3|&!}F$>@@qR zvJNpo0lqmc7WSu;bg?VRUZc0jwoyeE(9l4_Md^Fftuwu{alQ~#2#)r7gmPmftbv@L z7W@RhaWQ-a+w6ZFzJ|{9?9O{<+PY+u}!EePluWT_uS9HqxOKwVog3iEIy9@H(O+% zyc24VRcK+J3fp8aqJxq7LHc#*|h&AqN{ zYu}O|Mly@E)t=+BQsER<%aZ=4dxxB}@YVE$bk$4U5Y&HTkNTJKI=bHM0%10!q!2de z?abE}@)Je+y6rbzl%VgLb^V4ye!a`A-OMtx8RHA#23Fl$Qf1WJ7|VkZHEr~*L6+u% zciIWT8|+LvXnL4UKYuB-_qfrey5eD%_JH@iwGm!_o>NpPoI11<&edB4F?}vqm{xvh zxf0}+omjiYXO-h#8e&X=%;q;^*?>M=6@*6Dpct*Dti@=0 z_H`I0RDqIVtJd<$<@;PxxT410GvyP_`br|{2jZmzzXQ1$xoYlU{JH(*1&S3J|88Wy z)mHE7>)Z~?>O$AgUo#VC>GsMWaE?f>X zOE;?hW0sB_lh#&x%wNJJA+Av+V1DiFB^{i&6h_#!fY6xonDu=|^?L&hiFl>Dz?a-i-*Mbra5EOuLu6mR|D3KwDg- zP1?XJIwrE8fFr(}25yE*MY7V4C`;r5tl=9!~(H$|=$XQG{KCz3pO`zB`pT{!q?$-0K>^i%B>ZejZE;s~t!oQHvq%|k2CQ5myy3?%0MR4yyET3fcgJE1p zngX5dC#EgNK@YRsgz3zXzG6b&#l6M(6cGW^Ti)`8N^T2t_ohBSU++3=Z;XxiHFa?Q z8scT#zfafQXHLZD=%skn3K>c18ug6JZ^b0mL&zKc$6Sw*{Kw)>a`ih(62_8A9gZ$$ zXs{-dhVj*W5B_1z*}Hkbx|l~%&Q+<>49|5lV#JY-`(zOv%!CZl8VMK8|#B*e5 zD`xc|tpBD~Zh7qMiWu}_)~b%*@`XYDe5FWmt%xVpt6I!Gi8)$x60tLM+O(YA1ii&S zg!G)t*NAjnL&!uj8UqLF>C)6*g={>V ze+55I{p$!h9kcQvNFyBX6wOO*+g+kqi{x9J1Tg!c_KI5Sx114z?sV%S7l!#TQaQ=A zcrH$~CLzc~Tw3Wu^DKn;BK;E*H+7qh3GUCxo44pe+X9t=hS}TR3TIPhuaJbW65{8~ zC$dGI22lrT^7M&rh*9q(&Fg;NN~;WRe&d-{V=2K^5FVdDd-zK{S8`45qp9S6>VYtb z1luZUTL@J`dQ`?xLF{9Y{h8>|u)r5qY_7Ez=;qSjSwd%@cTRab7R9PyV?XnnQ&&}8 ze?gh{H{foY7!RvalVqWDVtq3Giz$ay5hOX4PR=gwM{C*?8nrh47f|5!$(4-R$dbW< zIbdRA9J%kC%loPAYNn_=Tu5g&pI5^oWs7tCt*qu}n#-67T0%ZZA-bSAiwB91dc(C; zfdjoiVlWi0yu$hg?5C)0EM4&1dX^To-TLTmY3U4PQn?cxWuj0;P#N4Lb1PT?FYkAk)&>TO0OXNRGX z74FK9-_GDk{tx3E>|2K&k1ElGPvV`d5n>bcH_U|=#PI4(QRa#ufL{?SglG*LKz=n5 zri|bxNh5e8py#T}3yK-&Z zz*PQEZvZOR;%^@aSWO?{FOarGz{S~=;v{v{=3`vg zHSy(Lw%$s_(=n7J*psGRpSVG#0RTuT;c{IKih1WQq*0dv$bWRueMf#&hD)dB;b3#U zRwxF=03k$b|CW5na0*Z(AN3XF{sjntPra}|x(ooX;G&?QcofPl6%@l_&8L(>rJYj> z(wF=50QtOawGFP!N~fj*6>R?x0J_^12lARE1~#EJFSP3{D8ahE04BV}teUI9&>!ls z`gHb^qSDILnd3ef=i}C#^uO@M_)A9y3jrOynBrkY$|7;pjd!M@ydQ)cPR@S}EZti` zTZl05^?L}y$DuX^arfnExf%9cW($jYTB0s6KzIH3KL^xi6&AOPtGJps(+@=}-z<=< z`82;-9;yV>Uu8GfD5ZqhaO-`51XLQ8<4o|)0couEH1QXD$T zx1w;>6U_Xs1pEZot;C~e?#~4%n*lBCWV+Diep^7Jh)}p|^9Jwl<U}8 z-214D;n5f@ZZ1qf0J#27&kkSzp(c$bQluHwp*G z>F4A^MSvJAllt4o1CL$7FrfC8Fqs{yzaj74&ZW{Vg>7fD%8%=W9q%y2dx}+v!Q*Su zFMVO!lRTYRcg=?c$?iA4yRN-x_~|-0ThdJQZKAPAL4L!l@RsB3zu!s~jC3)%DLYVb zK+Dc09e0S@9nnKJ*D8mo5AxgrqHM}MhDl>b9ko;Nx&JcGVjTMqXr;K)Z=|6(IrH25 zE1E2&n@N&7V8uRmEty90?pkTF`$!?9pycMzL4 zFYS$<4pEJsmhdM@YzFKvmY1Yf{&rc0As!gbeUy&(jbc@PIrUVr17xD27%EFrTCgnk zeRln-`}7~k-Chl14!0!Jwnkb9rpoi=3+;TF?YY6c`>86aeCWB{l511F$9LC%pDYkf zZ}}(ghuP7p?VMPTwfIi2LYe@#LUj+kjJ?s9SOKgGk2dB z50nOlsKDzS02P(C!+qg!8pvn$B9&Jf=jRN1Fq@7@@*M32E9k>WN^%WZz|j)P|BhCn@ksup#G25*Id+X2Ot~hRg`TeDOWAB6Yt_dWO<<&dCN+_L<0h=Kv+jTL3D14bKpr=zwal z=={RzGsrHDOg+BT`mNj`g{rDr0{=QbI&1DR0seiMjkA_53_`1 zQ)~BX*Fz`(xiCp1=FYs-;wC#F+Gw`P<7SxYW|;I*EhR6Vk>H>k<&OwTXY_5J#~n{j z3iaV4bpC0ghW+h}sr&o+qcp#}>TcFZ>+NYWn&vVt)Bhp_8375VUN$(UoUP7WM=qs6 zBvp=iwexbzy1e6fi;1;WL%_4HwCnggo`K#zrwL&$huL@yhVIMMI3pF}nivJn znO_WpF_SWqr;};}e&e331;UE5pAOD7BR0#-82zWvR0ygW#|oKB6}0}bpn}n&B=N~9 zyi`~n+uKnkR+A=mQU`GdqvP*an=fNElO$Dssx$epp2xnonEDB$cmTAXbG2O|p4DC| z3Z@^VPwPk`Rc(b^p6~FG+^PW>2fDLCrU|b)n(oU+eh@c>LMb)j9$uW}1^6^oxHU*! zE7`gz43)x6tYWDr@h`hL(Cs5DD?8^&Joy6uuf1zD9rx;Tt8irvVehJaC|a{UKaHZG z-%V;_oOnV6s5xB?4j}dK-o5+$*MoQXhi%p!%U0lZuO{|<&EL z5~MvS1gI9V|0-Ok2?6P4MbI!A5U8!({g-_P^%?xn!6xzl_u%dS%CZxSp+%=^}mh4;mVfcQ}t}!+2U#{rmliz*GyLV{bngW&M2}FF#Uc%&xQuwzUlkK z4OC~5Ky|;g^S9g%W@-{gx0@~uAV$0aXMeQTOgcX}&<4LO z%5c?Me*dR#ami-|cB>OTg#&k=;GhP5L^z(O)4vGF>ige|Ao$HfT1crV{AY<#tdNIm z+85RG_r73bSED?2`u5+KEh@HBqOcvWXv@2(r}-d0Nj^J`y-hxirlqe|JUoQt>g`f# z#+p_3V+D7H`?iDi0?D(W1xfk<&@{xm-xTkc0j&p> z{q$@{M*8;~V%14?t&hR7lLTo#c)5{Q)KONzH?OX!fwYv_yAS@~b(}WVkZIY**H7PQ z;sCxpTkSf1J5_`h6O+SniJAp`wnzOysevG~XNDu{pBwggkau%3TBwNETBZG#S1lz< z?!B-w)sw%t{SGpKT18XfApJ>}dn}LbCh`^g%*9WD!dm_thcf5u`Kob@y!NMpv<-Aq zHRQ#FZ4#(^67P73hU?b8TK-6Za~1mEA2H^%nVu}MQdJ-NT~;Got_yUA?Pc}^D}bbR z|FRPNPtR!OJo%Vx7dZNTpMD%CSt~682_S<5z2RiJv30;&JM~$air}O2WA(zM6npkzchC7Wlhd)exj99^y@Frp zbcAEqSX~`|Xn1&o+@=1}PeS2WBo7^dw4Qj>KQ@(nml^TEOAii5dTQ$)vKS!HmAIpR z;Q02^tf^Ur19%SF!fWi_UT)T3R4P8o5#xEE7&>VonhuPWbCB*4v%eeT!!i+zNSFNQ z7bD}Od)$3n%!(+1?0~64ui&aMRDU0q3qf+`Z{J%Dm^`$H==`#IpEJwa^AhWccec@*j z4uc)8wMC`*z5K@h|{8Dk>`D0u7V8e^) zkrUzGOUDt_$q@b7rtg7d@d>5qYX|D6*8UsKgh22oi*@a)Ez*G=>2$qs;A?#Z$cV(-w*jLq1zj20=-4@L#_2-zRT+_7CK{%n zM@v*CI-?NOy{_BMdFpJ`Q64@vSpT-u_R_E^xQjgvcITxj#y7cs${^P<1roD;BR1p7 z!R=q9J7t^Uc!GM}DhjJB;lkecH9VNm7Bt^F66vJ$x7M`qX;&Azq5Q3xbHZN_rp-LP ziV54p+q!K}^Rhc{su|n9n4%=516NAx4wG-Fysi`F>GrK@W*ORR$scwkeMD!Fs048h z(@@5DpF;tj%6&AB--_sW_7Fc@5JWo7P)l%j;C>$1;i3o;4V7F>$~!ob&oCdL0Mm*!o7)YNqjzM5@|ybDdUXY&&83gdW7!kqtzfw#4%EKxwL1i9(l1dFkr z_D`JK0fW>~-HBOu`z^k~bb*CWiM{xjd@T@h4N+r^ssU?y+R&BUiO4IAU8ew+ZZyP@O4}8%@=qD*Ja6bzV&fz)zDfMwz;!l0+Khv3;BsCmF zac(TZNROiu!G*eCPzEjr-paM!N4`tAHKnvtiB?D$S@_x=fe*#+N8r9aEGMhsGx5>? z`8g$NJ$ul+8?h(f;DRSpAS-@5n2Cl)irMlp75=@HQ5Kni+d#hcw`bk<*1^=CW2yeB z)qGo6kOeo2!xsu%0Qvo^n$dr&+gHhZ~IxBi_o3hZv(7bbMBSdf+4sSI=;NxxvFNQ>fvE%?v z*MLyKJtUWZ&16h{BRZ&wr5~H{b)zI)I9d)hcKk~*4j>;7OCiKEwuz*Miwm99weI4x?w3N=EW8Vn5lVD&dY=w@Pn zJ@~;8-yz}I)n--Mu4Ce{?=xu^9GkHtRT-pBdN980_uRc%x~xboXM=`k)UJ@Ne99Rc zei0F9g}y|#8AVB?Z>yOSA`qzj^8(9_Z#(&5y$dgW(@BFXjh#m4V1gxm<5dEAp%)O{a0F2C4z zD_m`+5SMI4c44w_G0H~EEr-5jK?=be>C~mH%Kk!buw%X%I&x=VYxN*P?kkGpi4i8| z&!d2lLLxsVWe=Amc4X4X9Ka@b3ptq40vxoPrEMq14jp1(Hy0M*3(}zs6HEB}iZD&v zUt5DmB^%*YYSDHj@3nY8*tPX(Uxr2uJQK3Hy*pjJx`0x-X7GgAhykVSMh9lkZhtW2 z)V?=#Z7G7Ad#~r!>}Y#s@Mz11f7KnyAHS97+p9ILlo%Tu=h=|jb=Hyi#T?0x0AgWp zRIHeE4;|svHRn*W*4Kwr51qEmktI)c4$)z!M+z^WZOPV_T5yz@>nAgeOX%C)@U5>` zVR9+FT`+Q`;Bq+iXfkcZ2P3C6=_PhJfjkj&ovl3( zmY$#vubu|G;o!YZpcP}kt$H8g>(oFgvFuPoR3f}H<9l(LUl$Dsdk6Ti3((2<(QYq~ zG?0aUhkaJCP?~V7FCG=ih{Yog+lfv6@(2%mM){)J1mjH#{w%1m5!h@iL>2*3%tZ(Y z`4HiU9>Ss#H%Hx717D}I)AtiKM8?b8UgE0R2OECzm7Vd^>j(UlQhC)PHDAz7rU?)u z9k9Zl3ryarj?I1mw}Xf*4|PWpVH1%`%-!tvuk;>Dkko>?%7}J0Ks=OO>Tp(S5$Nd4 z63f=0EN*JH?ZA}i9^qi584>mcE=g`m*w6%6^A`($ZsL+isx0?->!c>nZnVXT=UBl* zW0$W{`-NBeH#74TVzpPZde@$|!9T_JJZES!o%FC09cRrd&1|^Q%9Nst)9USc1^(X* zmLb;ce@K>=igTHu9fkR_3B#$bA1Ss&U!caUN1L2-<}lE6IWkgF5%q6pa8jI-Ty|*| z4fak%u|y2=vzv*hnBD8Lk~)C-81k}nP5Y z4@Pyijjw85YmS>VIX+K90EC;#Gj*8MIWyNJ0WKD8eqKt z#=5Xs&yXN&5ZuH9dcrDQF^=F>1%$vj1)_kBjE_zLMZ#}7I=bTcQwf()#HXGu>mRI# zsBZ?J`MZ&+$JQSp7g8NbqItWZ(^GBznkqPx1SWJbBeW6a?~S5I?o$7MW5BHbKQLe? z?AMkg4pp+uMMIxYA7)=xl`>=~Jpw^9G*9XZv;2t5bsGDISvsOcU^|LH$HJ`V4|A=5 zwgZ%%sWt;r4bK}7L@kwg!fb%x8(@|Rl|B1~-z(COv2m#DH4f{>W%GD3nT>=3ITf8h zF3pXMY(gOGrUv_*c@#wx+=(UzEj4y4((@j4mPIu}Pu8}~b2TxKWE+fE5-tsZqTK8a zO}oLIx>|HP!Ix=U1Y>imwKjr8U$jxXp_BM~2{fdkEgxt1sqN7)p#9yYEt!*wB`prK zVrjnu-Ms1IvA1E~Rd|00HL%?*me+?(BZ!AL{mcT=aJUd3|I<|-Lglr9`mDpC=uv~Q z(YGs2h&}F!463HQd+r4HceCpI3-{P&3$0|R4_Dk6L*-qN@qNuMR32SMciy-D(`H5aM0a zTMB*!w>}swQUo7Y(hX`_9~_1P?f|hfnLe{zi9BrIy7_3F-9SIUS~0-)h>hiw-Nbnk z1|F45#uE0m0g-?^rXC(6a97p>@8GvZyjbNkd{*|%#m)wPbWYYby=i>@tfP%WNZ^{< zqvs=G4r7|!x~3YBGmAGo8;dB{jzNG$tm#n>n!7a(2s@t#_!lZ|kUra`EJ2vp z)Z-+KlnKV(FC{I_RI|8=uyCycgd&sz{Fs7v$^!d{ZYl zInxJjjUwVl3XrW{E{b~n=0KPVp}I!Q=I&PhPWTvpfgmx&#kSn3%Lp$C0p?AZN<}!P zY{e|`v_VI@s2T^Nz6fP-ZI3(12W>Eg`f*~ENtix>e=>R z^kX~dnt=gnJ+l^qS+xY-?N#riR(X*C2^Am{ZfDYA1Cpyw#8%zEUy&_;{cmVli`e71 zko3Z@RL0t9n~UjTLUG{;rt= z$i`zuw6%^4NDp`?)kKI!>BcP2aA71x;dto7h&N*{v%1hp5}Z(V>`!34A>QUl`QR#e z-$U%8FxUm+)nCtx?wQJxUb)uDk~A5Hd8{2B#73%P-;$${*L*7ygko;d4g%Z|??tXRNAh|wNs9ASPjq0ht}FBcXq zz#Sb6AF>?o%*J3SSfYz5(p9TQZ_3u9uc>$A><#-yzq4wjyU#MC`I!VQ6#Pc-kM1Z0 zJ-EyLHrQ7}qeut|mG;GE%axyeg)n+wy zb?dmHJQfXblN#s$l5$)|k1ZzLic4hC=a?e{%C!ZphG%9p=q#WeDA;n(*TtyQAN|qn z?1}>$)=Gf)Mq*?@qWF*h;m;o!KXH)Mi6O4hVu03}UeZHk}RGLO2J<1)*wP1x^_Sfv-#?C?Nz~7rcGlK23`m^zPfFre zqb0EMeJsNcOn2;f!uTmAdS>^|gHh+X{1W$LoDL~z>3%gQ=9IVfsTg2yALc&4YTZG> ztp)8^=wj2946pL3Q<>~I*kpeBL}ui@%D(43q5&@2AFuo{{yMJooD^fWG`dnQvoWgX z0kzYaTg~dmHv!DcfLMI0@#qNhz!)#B6tSnb84C^MIF^l5^&zYwNA25oED&7UT>3)m z=`}qm8RPpY1Ne(4BZlKSlI<+G!tO<- zB08j}X0ffN!>pPSLAFIO)w?d~E0FK_R(d?__|Kxbm^Q&&JKTA)L+v@rwTcLTXMYf; zAC?kFxTJ1{Q7-(v7r2_%?K)iiK2uy&^zKkOne1Im?ZsqL>)6Da)+#$u9-Y1f5?X)u zqwxp-kFB-GeuMiZ+Ej9E^68fq&B-H3&mTEK`gg#@0t}Y1M(Ou@Q0If1t@D$@8Gbfg z1^`pUPq9ru8FVy4&=vwgkAlOGjX0&awA$T`OVq4OCoRG%2pns!{aSj)AHQ15JFvas z5YGCG?moihf3E>DK+DpIq(NQvQEr|T zyVf4$jzaP#-+z8a>7+i>ZGt|eI|0ZJ(s9KMYUo~~1QbgjD2-r4Pp4nQIie=RtJJ|w znz06*4bJ|ckl-TzWFQRxm7K0C`*Vd;;jm;#XzB4cFQKPbjJ|?WO?aDs_b*@vs}Mz> z>%;gh3TGZ%7`bQP+h`?r`B-3ywG2qcJ?nPidW#pR!_L0p{K;>cF<7K1q26;Rma1)b|Kyom zN+ihkX-$w_h*RQ!@8Wta&{Hn@=>;!iSjBML0_lE;wyVnS=35_8Y&@khj+PsfZ{|vq zFW!hXjHdCFo|5Nt`#zMK{=fI zq{cPD*j9=@wbSVSbk>?fDXqUiu|d5fQW(Ue#hmU^v&mf*%Z`V7&wWTe!|K}FjOUik ztwmIXX2_G~-ey4Qk{(Gl&&WZw$`M^OBMo)<^|aYn7Te5BTlxa+&)ks@Y})?s3lWH? z#Sfqg0&xmcN{NJdZ!<-VIJu=O!8dxSpSpwcDH|$1BYk>}(vDqwZIPzwzq8)C;WPFN z#zm&^DG7Bwg^%!d5LAzH9-HXyg_DpXFg(v0CSv|ix#P(KY+v=43XzygV{H*fu^E!4 zYUqBG=jI*;1`O#UHx%Ir6cIFeu-nUIz@2tbl(r7oJI2@ewtQFP`yHm0sY+0#{~k3h z+*~(%_oEqBzfEl9&`=H{L>m!TkCmBbtQr9YSy4`Ekpb=#1caH*Tt7d*U3M-mP_Zov z4f}uGG?f)r-1N*{nJYSZOc?*u`l;vZkHsu7<6~z^`Xhc^Gp4#o4wryVrYnBd zp-9{ zpJRR>S;Qk}D{8Zt)R>sU|Jlo40BW~^VNUB!>Mg+oPHtg$WT_Z-`Qi2?Xazf$<}EG8 zfTT++?x{#dxPZXWzvB?Z0Gz(@$riI+$d*$G)%%$6O`01X(YV#Zw%XY(6vTJ~=xfZ_0jfk6$NMjsv+Ay0sdAzg^9zmzvN#Kr&Kc`LNXVqI*y zN=;2I2N;>8vl61cx4D)pvHh~E{20{{2t#2{asidhTuhXltAEgWoaCVozMi7?$a;^3Wnqma`j^=>tS1B;$o($?~%=wYt2A2ara zP@qQrIY!(+8r_NP@g7hH)ylm{R`M+Vprag~O03vpqra9lNU_=;*zsk!Gk~@ql$fSOa!3Io>?A&VCYnBbn>Lm6ZJ!#`4X1k`HR8807nDg1ES)3i=_uaPxg z%s)1>66?8JL)^rbsI2<;sohR}OuM$8E*h0$V9{cLcp*0SL%<73qu>zXepRAZ_)!;&U>A$^^ii%~bDEr`) z-9W|>{pUqy@6o+>gh<7`p4}vAJ6!sgYv^p7w8Np#;{O73u_x(_c|B)Fqbp>vx*dTwqRPEIIea{=u?-qeSLm*06#2%C(`Dg3&j9*yL9mx>T z$jJ2EBsynfU_jm2*l@z60`Kdb5^mblB?6?bY8Dc*?ea%B{sy?4`lo)gB}9j03)ndY z_;X46AiD?ed&@IxH~4s-o3&ty)Rn^1e|l8H0-|q25Qa(v8N@H(V-fnt z6FEi=VBKH^rXIhJT&^`ebRP9*1eGt3i3`lR4?0N5`J510I_}tI<>Zb5)wA(fI-kc* ze)6;@c1>ib!oGOy*VP0K^6u&4u$@FEhYb?6?xL`ths_&HiFQAHhGF_qH~u4-M$N~t zpR_RFTE1mtO}!#=6UrqX-?RAfP~QHZr0>;}*j zSvyS3%JQA)zEENc|4>v`(g*gw%yC9G%?GXS^Z7Jv3G73R`yM(MbJUUlHXC)8T5+m^ zP$C;hC*1^StjbGhF5A7G=z;C4p_gvbZh;7%O?U_anp4FJ&|CgT5=g z&6iHiqT6kES@(5}(2FGAHjqwjI8IGo!$hoe)GdN;7WQDMg>?Le_MyK@u2$QriAKB1%{|g%=dw0xS17DURzxt+e^- zjE?)L+QlPFlpE5QnSHHOx|oDFQ1A6rJ1~ce83(e{g%4zbqXrW6 z&`PNnb6lqS#E+tpQQ*L50e%b2kk`w&V zJJRQrc5BtvFo3r~{${VYo{`7$l-Lt})yt4KYlYu77W-%|Z7~tN<9D8Aflr?rLCi4! zK7&7B7|0`3_QjLH{R!6h|G0SRb*wV4#iv1lEme+4?lXjQu`N-=_2A2KBk%hW-ErDf zdGHm(l7vNd#i_oDY0`qZ;PQ-NyTOO9{sL%g|M58FnzEJ$xyvWv=M)Qh$x}cPPS!iXu}OUEBT?-=_H3$G?#4JB;p+K74JMV z1T!sQK>=DeUb&x~$w_pau|H=13}J(9)2Mlxx9_vUT(xodqYah!O%R9Kop)@mEJZJt zc>Z)bY;s^jNBU_Ftvy~9W5&7GPuW_=x=jXX=2Q*&ew}d5b7)m6 z`eNK}92qp}Zg|lWSI`l=r#1X?u7A!<@*wr3Z(CHevwYj0om>FTm^AbqzX~l8;*6P|*2=2iBhUf0RIMxe5UhO(k>M){d*wuQ; z{`t6osMegQyYiW)WidYL+dFZ$oP>B{;X%*pqqW)7h+l(T*B$~-8^9B^&uZgiY#~>= zpMHcLtVFzjGP2Bf?X7F#jyOF3bHtSWWdg%=wo{d^(wR(ydVBGu^w?#jsL`R}cD2?$ zKFs%77@gCj+~AxWu&S=}gxBBZr8gS-&NqjPrg1d**72c>?xLu2x&^ zHvHl?va!oDo(QL~Z>)bUl}VEtri~!r>QqdZi86m5W0zEA@3r{CRwERpQ+^x&4S^(w z_;>K`2NlJ%=j<`IbJX;GXyYn{!B;*|*1ML9Ep&y>Zt-Z!Y}=Wo<1a@6B#Y<_2V#=g zvqU9l(Gt!ILUZizD=va(J?A7`t3n~Zi+m4d=Q~332kwVg$=?I@m#vyA!u*6I2VMZT z+P^86>|U@TxV!jf;qvOFv~pTzL;xZ!-$8Q7GQRnVRbC%Rqa$EX)Zc-Rhz?74x9Pug zU+;W6J_N2!#f3UYfnBHKZvYUeje(u-Z2cmc3m_12SmhLq`ncYf{Hg)=p2y|&6 z>!_uWY5sr!vdOziEqya94mA$5IJv%~4*{M>LKHymRr#|gXWzFlM&OmAY57Yss*QxPljV$A)Zzbc7S?8L8fD{ ztBYw>n9mF5Hu^3mFb{>y_9o^3qV2t-n&{fMQ7nLph!q5+*eKFeI!IFi=^dm7rI!Fo zlNtrVLhnMP_Yyh@Jt7LydrKe@fk0@Xg_?2(pXYtQ-&yBd=bUxcI{P1zFlEo|nc4ST z*L7dFr{(|Fo|=PoN}^aa`j%OW{DZS^UyKgP?@^Uu^3@rg!Fk%eJ3JwWue$fX0_7RH zxYb&d7wXx4(UP8CPZq1vHyWA?4hUG=>$cgvoEZXue4*v#Yq9u}+jWPY2L0kho*wbi zQ?g4&#yPjCG9fpITx&fYR^D=@(Rj(YyBFpU7JxygHN`JDZ`}2P+WqFI zlk(V2dzv&I^Sv$hO35|4+Gk;hsMMc= ztmu8|)94*Nl`&73B+Cvx)m%U`#7oaOsQTxsbBs($pG)obQlH3`1Rib<)R~fdm*hX; z^2#G+O4f7tUh!Bpt+m4UI)1gujb)ltashfY^yxd_&nL`2CyKj$hBqanaud(}Ih1>_ zT*UqVAYnjS)k`e%S-uL7yT5WP&9Z!DXLNzF>imywQx!#{@>juXwd_d_Prby&^7T~N zIck$g9-NQ>5fCHl#w8`R!QA&D{32{2t>*)P9vs&m0tiXH(1!Lmlk$U2$sc1iBGa7D z(y;gYWjPF}T|}L^W!Tf#XQaw52cbMNL%6}{+;SS0h-O_KS+L@JKY1%0ldStg1*>!< zWaLsk><&w>%wjM9p1q6OUNhg8O#E@ZWaeX$+E!y0Z2m)|tmWE{rviWt(gASM$6qUN zo($TT4VFrBmqwJ%rWR(zEFZhk|7!9x0x*qrz`X}Z3hopLfp?5Rt9Tm4&IwxbAFtR9 zfSfrifKm4GT_OM+2av|>qOJs0{TF>chBz9nfWk$`A8u9P{-~G%t z4+wnexPsDUK<5Mq;oVjuJ`q@Yyp6BZ+YNNc)zaW#+u4%; zDo=v{QJ(M}&M?2*+^*3RJk?B^*jbj+Q)2;29&~rt-l@xRo0SJ={(&*vmy>vGDM`vG z+`zfH2&MawPUa0jXim99!y_*@{HGIaxT-AJ(o0Vgas*bHmlq`ywDUyZOOp3fFWLh} zl~F0{;}UD+!c zELDNsw#|OJvg%1q9K3{mUZ3Eq>znEG{}_h?kJvAOff#9veWOAYwlVV)cac`aNc>xz zMqiv?>s^S04l71fFRo5>@ZaoO@4`* z3C|OnMWA+nU-EtNzS>n-x)^+agUIy0qT=C5H3tcO)Q<4ue?8%@_;b>>_c~iy8H3`$ ztC-o@a(j{hLRa?LlDER2Becb}e<-&haoCWOxoHxUynxHu(U19TqlN+oTH+<8KMcdZ zj`VHVUGiJ>ku^;ub`L7Bz+T$qSYd*IV@-Nf`q z`9Pt~Zx>Ln+iB-ap1hl(?@Pv&ep5?K%Qo)(=g2Pkm8#H#3q=gGw_eiT6L!o_W3HZ( z&uG=<-{Z*|}SyKd*8{%WITqKedOO>%oLq0Rr#&H)oV zufcIPqj24|khM9#%{P}|qZ#OrOP@EnLiS$?&B_X&&|6!O$;D;Aah%eBG#$uT@Z-YI z4SIdu8%2nQsoA!ic!Do**6MuB=e9(~wl_GK zi3cye+`rlUBDmu!c11qvcNa@HI#TS4iifmw74C^TBf;X`R8B_sm~yb&;P^x-O~ftZ zTX#H9{0W)AcZ_6#Xfn*Nf1qjjykvImsx8UmU%^S7q@x!g3LNiyAhkrNA*u(9??btI zdGLZHAOA}V9fuMIxuFuXCYHhBm^OuW#-ijGXl1d|^2Y?XwFgTq3JC#z#>cver%xS6 z04IR)gTud-%2GZlza&R$eyqCkQzi&I?_C~Q@ZYjh^Urfb;1Of;`x{;Yf%{JczU~q} zD#TpqoVy*sKO*$((@H28n)by4zk;ifCvu`tW)1ZI*f&#Ngvsw^8XL}o{7@5qcF?C+ z)!?hBe_x`Jv`v1yl_)8pV^W+e35jQhgtPV6614o9-&~^CNpFu~xi^OY-IeJK#`=>k3mbMNNR3^) zdCE6y>5IiEhrst}PM(#Ixh;h*ee%k`?ay`tqLYI0tD_Ic9;iEg`$D@c@BG_-Y2ZIX zfsel|fi!=gO(h0*Nvh18Gb zI!a1PfV1<*w99%!$+5BA|M>Av&-o~$@!Lrk`xNWmT`22&JY&kd_+P_}Egr@aNAv2r zfE$OiC!G_i2Ygh|#Rp}c=8tw(gts)GPVnlO)UHj{sP|=?!5%S(%1NhQvh;WV8>VSopyco->Kow@fwonJ68YZ_Xnw; z;;CW-F2yCYr2oCImC+0HtHM?39{PNxeI-@6<9K3wM z1JiHS>ix-Qmu?*9(5$_3aAQqieCiQMjjn*bya(scDs%bLSPmtlnFpfqnQHu;YHm+3 zTR;5$EAIBO%Z;9y+2><}v^Lf81C@%%x(IG0dSuq0J81EY2Zw-0JK195IoHP&Q z#BZ{&3^j`#Ly4GUDAAZ<e!5{xi`QXfvoIx{A`)sB@IcpVJp11 zw2X)U<^Z+Zm%@+Me&*EEocGptr}yal4k~(h2p85vZ|+~FYE@F6d?L{^)3<#&)5|t|EkwYQ>!arcG3JR$PXM9i z!>hTDo5I2u013xyp;5mox8>2|=T$GmECS>n%&s?7*mPZ%mXki8zQEjg{#?x_fxXaX zypqOlmOFW1DvGj28DKl&NN&3B^*!;e>0tnTo`3qLcHzYnQ?E5sRtj^sk09fZVY+sZ z1rop(ss6(jEgVoonvkIRDcv#K@0)kek9}-b1LmRTOtY-tfec_iBd#pKHzLMJet+MK z!Q#&u)YFM5>k(_PJ;2?(xDZ_U!5}@H``&P5d(P!7o%5GHnR1__Lr6lUu~KEmz2RW! z+o_sAH>ttzH>4h9#vrH)0n}3u#TPNz`kdHgx(uc9$ddI5#Smj)tpDyd? z&g9LZcPhH504@dUqn%o$^hn$jDXIQcwAG`>0|a?9L9y>U{zX>&p$k^$ukxNAVx?SH z*?9fF?-K3Ff_tYg9_*QC*0s72>U?*#ec~CXZdN#Om6}qiYe{#H5(XBJU^_U4tL31g z>LVV$-4`Q}`K!UOXNSKPdq5JZ3h8HZ4i@np<}SZ=lT^wX6c-Wx#N`Vd)hQPJ$UpEf zvo9Y`r1yyUbCrlwLqFS}G{0iFEHt2el#`yC6oCmoT4Q@?`w@Djx8|m850HQ#kMp(* zRvCd%A-AXWUW^;Y#t~meA^Iz*36ctz?yEu77S2{Na@;C6*go$ps}_AE(XE2?#S z*LsWWTUWX&@<*xq#2zI~rIVse;NcL6nj^}{yirVh>llh5o8U#dXDHrH1wl>EnlOwH zhv`V0nd(T)TdR191_vKLjBoR!_d2x=v#89}W2|WZSKrSvYPxccOj^ zbU4u}z`Qsqc0QhuxxsX&0A z_7Fdif-5V7JgN6y-%U}nS88A$bJJV>C{)>tNJ2SM?-hY^Srk5=p8q3nTn2ykUrA6_)=lrY-?1Tv>0^eQeQ~rwpWdLDfPUNsc_%s-W6NIiKS-y z{;yNBPs|Te+vE0fK;?K$>X2YLce}GzP9O%v%wMR}wckA!90|U%E+9R5O=vMD(b=rH zbRHlE6*Eo_ z*uLBuiTN;3^_i4!22Tj@rpQ$}Cqc+VobS)J3}$*O|sK zEhTY{oeJOZDdS-U^6*L1u)}TY26o3WRqQvKI%O_lusZ;q*DRryDUeN4)D~`#y;~?h zlJmR1$R4^AH_OU1<$WrA#8cK1cfVF&8d2bA5q%v=jo}QClt~Zl%|%jp@v|FWTMHm& z7ljctn9KMF2-n%nWze6VUg#l9-)4%O{|D$b=Y2`C#;O(h6BJTQdBS+z!}I=Zlj)Ps zFJ-)@wIn*5m|k4G_bO9iD0^~ZRDrYtb5NvKsBv*HuItTmt>{F^C+?M^BI(8;hIu!G zX7cc8(5aV1CxWN`CnsA+{!?z>T0BXb4Fzq#-clb0UF|{zXihmCov8nVy5U&!zAik$ zA>=oTm9WU76uYJ&8T4n>PpDKr8*=cwj15^|)Ch>9g5k4ID<8Zq{XpASV(;?$x>)J6 zL~!_%FVgm)lO`>uh2aQE^}QrNs+d-%-8bYV;R(Y%o3w;oBop3s zC7b#DYdcIERLK`;m`=O|kDl^HhG)7^b<9jJr(YxgdWgjdx?ho4WRF z+KBL`>NR94-qb+6c$6I1z4#D0$BF^72(gGW>uNBTOvzYQ7`*>NaZ(DWQJcE5X&qocChpRlMV!9MRwC1oB%8nN#cOtOLu#9KQAz11Uu5{CnzOGa-?q z_<5Sqx9$UcI%+Jl6R`y4QpBu3oprxBW3jNXWG(1ZT zE)87AAJ(QvXpLsJcRcR!xn#bp{z2UvsFdwiO}Qpr zClg=0JQ@$Xr=mdu`3~O|6B!!iF7vnRbomIt%FbZWlp~->t8Q9mDOu{8QCvKk)nCjN zThm}qA6P?N+DUHB3t!$LO?zowxg+q^3ZL=?{`IB<&(k!qXP%a=j~QEpW=MwR{O_M# zIm>35eSj)T+b8;W_KX^akoVLRjOk|(+ zuS|!j6gmQAo9Zsk{g1@^EE%J}f=ElH{fB zT135@v)`39lfEA;x^ptc@Q;{@*`?sKo5)}96LPHW$=ZkV(#8ORSQa0Dc?=FhiNVB znp{mqhDc{TwnQM=_2IKM@# z^0rH#__kn7%1d$LDTSbx*itU3tMX$YCcu&O4Z!Y~Z~wotM00f2Hi4 zjKU<*f08q8<=ah+^y6xHN_6=5%fpU5xpF#H^SgVbc*{LjnqRWu3$<&~BTodPiKD6$ z*s?-uU?QbGQDIngWPNnwlJX&Ov4vO~I4Z*KeF#2`-FxwW5^}J2TfNFC&&&n zoDbjZ`5unRT`@upXgSmx4RDYeGuPm6()Pmrd_S#2c8!G?M1PNKkK*uMZFTmrv_foB z7@G2o9!WUq4aY`ZA^O*2J5^{`PSMcJGo}=;q+rY&vg5lq&^#tbuX5gfvy2eu1)f#; z_VmKJl>o0L_$wXP{YTy=8s?-I@u4uyLBek_+(a_4k`_t=|?jSe4 zm3r=kreqc(%VEUmY#8wP84ID}$)JR^uR*gTyUYQ^z<@ zUvThYgeLwZxUyFo(kgBc%M*%9S(m>v`HH1vI6Z;5f_fK1!RrOBegOJm7hDp^7x@g?d379iGom4wY5au2B=QX7CAl9Pc7Nt|S-$^lC% znYTnF#f_@+q@*ar(3HK(n&Wa zj~hC5r1#oAPi>vl*t$J#Kh}XZ=@~cX&~$pbyU_+~^nQlMB&(q@2Tye+4n>_X1}-fo zax^qROd?ihS@67Bbz-_I3l+3CQ%K9eyo4mBQ2$U#vrLdl+8*VhSLcX})a-nTUf1*+ zbW^X(#WjwU#;1emduSCHOYz^oTokK!>PA{sk;g=bJx6lWS!?rj^AkE(Ot3MvT|TZbR_cxK zCmihcT(*(G<<9Mt4``M1%|>%rnWA>L%RsN|UCUOzG(QzIKQLvmP!p!1`Q;81=73GV zHUxb|E)`U7w+u!ZI=_U*U~v+v%BM;L7~uXgbp6L5FrB{q9F|3z-?F zJ++!ji}as{hdvz+Q5JWm&EenQkol&4y_%K+vpD!TXo3B`2L8M)H7|6_U7M0*!tWIh z9Dr*YR8SUB*VMwr#GMhYJ;K6nEM&NDh|WU$Gz#cr`Hhoc8V~Q4(RXmsMd78~fq};2 zRZkZrTaVALX-4d z#%Vq3_Q|o3#g5~SyszLqxhj+YuXj_81DemmCJtt@*Jnh!|a_k`0d%?_50G7r+#pBd+Sq|A_ zUjUkjW)<}H5sLnr0KA1SzJe9|*8Dw8M=ya4@d%{nr#R}c9jOWlZ#bd^tgSO`5d8AtH0iBs5wUrr)&m-7N z0z_x6Xq=?)G`{sig3+DpSs5Y_ZroRwWpU^&TJvz^T-P`;CPklz;rMhbiUMJqtT&#G zyi3w5k;bYLtd$ejY;;qCq`xg zid;=yilO7Am-+T`@n>FN!^)c1RsAr_PrCN{X2VrPQIS`~OVw#x(Q}0W!t^;xctTJT zB@@Qx550O+sbCks-%+u53Cn!P?4@G8098|GaSTQDb&4b|{mgL|O3mP(0C?PNBg_}O zd|D2+yp`YFRaV>w`$OI^FR!_lIPlt6te`LJn@`(9FxT~Fn)w>9^qUsz;qJg_#DZl0 zVBdrL9gnv3C4)S+Li#ggaz%M{@DUv&GINX|v5cXE3air2f|(-fb}{9UX~ccBFR1Yd zy+aK4>ElMb39%x698t%s*E*cKn%t^c8CNpK>kG%1)p4`Ofos%}(@Mp;bffUq>f7{& z0qDV}YPh9B%YykwLek2q#fKT z7J{&o>iu#&`8sh@0vzC)2>m`*p=-CNHCO_ADl1qtvh8W&Jl^7TPGQb251wATG$qEt zQL8R$mq(<(Y7iG5p6b(7ayu2QHKRXo*$Iv7XCj?%HcX5=c|7oDg?;bfRx|k_p3K&= zb0IEDDp1-PfB)^H9S;G2!36O89@_w?Z8f+l|u_W3d|(HS59mSB6^ROeZV1(X-)P1)nV zH$P+^ZQ#tuEvT$!x~wB#J!T}YbvbI7PT({%3r&r#xgp2Wnge|*OAuatb8cLi`>IBX z(SN&JJzg$>+70s27NN#miN`)N&xwMkw!07h`u>zD52sM>JV<>MjNziTx618+?CUlb zh?D=sM6LmkU-Ty?sbZ+BZ)dRn(@?1uLsg%zE9EsqiMo~0Q95>nrNgW*~_j-NV$ z6dtZQR5f@{2#@as1951RB>m!@nS_n~xlBJxNGVcdS~dm}`L0baW4~94U;$Ub$rXC^ z{k9m!#iq5X z%QMJVIaa=`Zarcm#b3QvY6S9-uX^ms>f3+7AJ)bR&2?nK25`lSs=qd5;*XDUH69kA zbJ0;96rbvcWZp?*0l~FE6`xKQ2bvS7+bZaLAiEso<)b;VavquV2029UL~5*mAjA8E z{CrF+nLAZdL@)YK06dO8T$ySP_r2i!2W8##qoFoXfn>AJw9DZt(5G?FfLMNzGK@X! zNx{pO;=Daffhiqmif(oMgZ4^rMi3^;a&t?#;KgS9?VUFwn;bfBH(*fy z<%$9Fhr{j(YYNoEJ&KR`&;HNqc%PBYtkn(CX-4bNv8Jaco>_FhCI^j%)`*iJ-pCoQ{{J4_X0{kmp`?$ zF4%6_KHDPiSF?`rbn#xKH^$-DU)5UFDi=>!6y>}y_r7o0PRvk3z;W7tLk608q%l28 zUS5EMMAATZ>LC$&?vt-}5``_Bi_(cvN*ilCER?N^X^eTO`+7FjPMu3msyxMQeZ&&6 z+cdsbT-ULp`a;b{Do+TnY2S7qx%Lpzw=yu#^KFC_Z18Y6`e(DWNiyi3^P(Mqi7w>h z!@%Fe_N2tGR7e+_zG3{l##LcX->CM_$tkrcJq7kgDsY{ivbevtiWilknC4=R=4<7h zrSLkcDLUzs=6e)9ouHMBlR`oBIEmzFGpB-`X)HoQRzoJxqqGAn^Gi#-$j3&M6%32@ zLmD$T7!AO*Pa}LPw7rBq^6N?>N14v3JRHH0Et6Tn>uI@}15MPTMKQg6lUp@Re|y2r zR4X&MJLHhuwHwyz=*0@A42bOL5IEG*E~G#Lab@W0Ai*atQyCxFI^46c*Owcya0K-#^FyO}q8K;==q~ zMfxnSt2DwQ>Z&Ki3bV770(MvR1er&wY&yM`NBNOYBxw{oE2G5&h|3EQ6XARJh5<6x z==t-dWVoejV)SLlQ!>ZFWqmUcS3c`J=?ax}AE%Iy#GOa^7}+H>Ptl#%RZ@Ca-Vpwh zi)M+BMa0U`#wItKQ*IfV>r23_A#-`PzfP9FWd{P^h~s!Qg$3AJG29(n4wN==8qQO@ zCnR*Yl8(l&_oRDWT^*{{DWO0MS^#vf@h%K_M_alD?D*RP5FRTUYH39+FE8(WJH_M( z)W@MTGb|3QkPbXC9vRhod3O1(a{fCT;Vxq{M^ik&8Dvm7QOn&&=$UQ*Km?-i;`;jM zc6N4dZo4wK20Joe9iJ(SI>Cg#5Z4-qf!$D77GaCQ)R97OT(48QtZy_o`@?F7_KZsb z#;d7S4uxZ9s!vR5Y#+TOfCC`tfN9KP`iZ|mch;4f;j}OYmcw=sl?XagC@n4ZKHPCa zs7%;_t4)vJj)83X&ViS*o`;FT7E*+9nrfSYNb2gFfs1bidN9~sPQ+eA%fvRvzgv^> zT8a%O&2b%pWP zpnhWJcI6R!{;jwF4!+l8AfK|D(|_rvR;IiqkbBeu6@X0R70NMAjH zy*@<3=PBy=qQb zydWPEJ#Fg0vW?4^^Sf(~hv$p_fJnS6&;RG9MnzewLGZzJ_Wix;6c}hozW!?t@5^zu>88=T-m&r$QY{PvOG7EEbfvZ z@CL0Nvq^H;;%pOUlR!2M|&sQ(guFhy>hXXtOz_ zq~p6x)H))DA*~e1L!poYS<>bg31p+CQm~!~W2%^u@65c8m(wxaQW1h_doO23lKW=E z3O*8lgNpKp%s4d8%@$*t9$A|@bIqjvx-7f3TT%Cd&}IF&McfO8F!HHMQm3fUv(30N z8mifHo$Xp7-q_UYYerM*+&i)HXYQDXqptdX)4>co%NA}9_rp|4rn5diZn8{AHIICH zUmPx_5K0gb?Y8M9nV?RcSh)WLJ`>u6J3rw(N5I~HOdGJb{HE=U*1@Hr7{XA@MSDNP&U#nMYu`us%3@v-Fz%;rxgxa;?bYs5!y%|@N3g@ zm_19_cbOIsTSQMcD2txR?TLR#XkL2)4;~KMSYNn;X{PhV=Ae}cp2L1*)Di1c$D}lB zvpqA#z+^3GXSCSh9v|OE=h^D898<6`bS;Mb5h~#>Q_`BynorNQ6aHX0AXvJX76;d` znI_Q#i^XRY_Z$gKA4~_vbgPItJEUFK$F>qtl?cVVOanv>ae)HH@i_057Aohpl2vn0 zqlbKFLX5<&*vdZqk&NEGB6eRM62V4Z3n3>vYN(%GzO?oTC?X>deqZaGfTfsjCN`u! z%<=88G23t{1c)1UIkl{~1J^q$pCl4;^w zNP^74k@drxAXI}1n+(s8wfSb^S=hb0b?HCl&pOiTXnh@SJpu3ECxS_uo$W{Zu5I;i zAxxpjYgq|SzFBKYSjbPV-LLprob7H$fNGu3gsR&)#YN*H)|g&n@amj(HGt}TbZ8RV zZFM|d7U;Rk;LW zi;P(U5f0XVPxOrqm37mc&JmJ9(X45k^LGi1oPq+a6V$kiQ`%$^yq>#%0&TK>vmt*U zC5F}5MI{hue(vqLn?z){I3BJhT znIs8bsQQUn974UeumM+?%7XR6!onzk^dgc=0i)$D)Z$Onx3P)6@X{{$OhXymrqfVr zvU=*P4Vt)IT2bGouB?OqQ8>(Dx3C&_YX7;21} zw;-2Q(px2WjOPkXNhhd#nRw02?{DtkQ(GoM8H|3@R}J%zG6qdMMx66{BCH|FqVG!LCPJF`)7&Pm@E9G>4J&w)w1p^r9cW-KH{ zLe1kPG~tfUud^!PsXm|PR{YSKW(0eQPT9rrhkg)vaPZ8@;X zp)Q_Uc!wd&Pl4nr#?bAz(!YT_X!b6MRJ+kb`FNSBAipxp{tK(gBKd0)+q`T3@UZ^c zbc4Z%3mmUKL;NJ(yQadfq)#M0ht{jca1uKMb{wVovoxwA#fc+te-ZXg!jqb|21g$b z0fB%a^ukFuEq|f4ocIj>KlOM!!JFVTH6PM;!oB+91IV?`bjOdj#mag8)I6mqT1i}1 zZp{6QxXIudNAuHnOUk`QxxPzG>Jv0Vwe@Aveg_Y%wqy{%83@@ypBeEKFL#0ndFhWi zum95O&jR;UNy^$sjKb^3Of%#UjSatLBw2tvwQvyt=vw)%mcCef2rK!La)t)L{mM|M z+E}h$v9w43tf~241~WG_Y|QUUNnqYXn_V;V@3!N-ijgzTpKbLqa*AWVQ+-+RIy?~0 zu9HNufZiL8SJN+j3BGM9{NO!f&UqA4NRH7m-ioN^=E(iXvKZJo;s4 z_AXuM^UAqsDZ-iOtYohK>_R6v$ymLM!kY3lG{%V zQxH4-g>EWliE%2Mns&T`H?_PZbc@j8JL8*<1!!J(Jh}apxRhRcYAVRN!9;u$KCw$X zr-ch3pg98aZ?=y(Anm~QbWAeEr(`d;Jx03^#=YY=B!oPhT4^Q5xqzL2SGH}!XX6`= z^cPVs+xvC}Za2>U6F9mUWPw#}d^r?S_B(%N*GvHA3xVozoBG3n21g3fD^YvVOCJnW zOLnkveRN)K$7-_ccNnV6zJE)yiwJ8IHHWKLy4({`U>uOM3AgC^oLM%WCs}q!qM?SK#!<)xDVWw`_b&Gi zWn#bKM*fx@JmJaF=|9B^_?%o+(2+dNH9|qpFQes4koxa+u^&l zfnc3UNB14_5nszAyuu6GTQ^ zz%9r!qA>s9r!3r9M@OMZ8l5r7Cs`_PmP#{LfMz7}xj(rS%QpOs)q zbOo23&&YP=oS{o~Qm~ogD$A3)oBAE8Gk(1N-YV3@ZMB&~Eu`uCZi@eUoM)99bj~s& zsR4ktS_>x5bGJk&h zD`FDW`~|tMCKnZODtOQ6?o1ZDa*el|^AVe)Xz5`j(Pp^ec++BhqFrA)G+pO`tR?Uo-RLnJ(*L!ekg+@{z0=&9(&$TAFBn`1+)6ffPwpmJJ$-d|Y;<%9a5V7W zXrrI`n(X}pc@~{GBmv)3wv>WcAz>+$g^>su&-EPP3}jXWi}3Qo?KaT7ysK0`2rM_b z%#HqENc*opl_FCJE2uYKe$KxI+0LuW1vhd-yRO=b4sk=(MFkgF!Tdj@+ z*V;)!QehRFFD0k)`dNX;~1@}{+^t6QsNuU^t#SmfSK8ZQ-Z5e?;- zNeJzkGE08r$Fg9QSj#TTMdsC?_n>ta+uM4(AI7U3Iv_rLtZT2AC7yOaf*i1OEQ#La zy<7Y%qXoGp=SJ8b#nf%U`4P2!Ob`b) z2iHnGAFuWDLL^5*3qc2Sal}VMb1@JeJ{GVKwgXG`L@o2QuRX?B@cUoL2nf!bXmOEU zvJ9`?bPRp2(mqmS?Ne(vQ`yo%VB=Dm+z~U-zNa%VnXvqSh3$;!tmz)p1g2dzT83DP;(-LISSt z){*mH+Tkps#b`halr!UI8bZ5-Q&aF)n}r?a2F%m5BJ9pxg{3XhSG%GoGUGCijy8fPUrDDBFU|7hq6_B7)hQ7}lL@!=5mX$X%mB`G+suS5=4V1A#H ziqty&-W44XoR7_i&l1-amZjY*Al`-0b(4}$dp8VwWmRTl&GX4sweMP%T2+&Rcw4R7 z8?POXmDvSn-PZ*$YKSVbr0SyHQH5Gu5DP|J50F;ytyoG)t$+PN+=Z4SgY283j@>7N zm5$zQ@021kM#z2eBolx_7;bwq6)trpje5R=cP2tl6q2`D8oW4@PX{9}RP3Z@-hH^R z3dmm6DWndCZIe$6iZwY4S%9oE`*X77+73YKdRf_YMvvLV$l)aO$j7kL%0$IPYtRuX z{?5^3dYUDvT~7F3RZGem*_GfF073_#G1zpqCUsSvbh!#DX{+fohitK%@Xo%ZC}A{t zApdZLg?!aj10jSzqCebgH=7axJ0IAiUiZ&eKfNNNbz=#JeTfIsAN%&pUxj^=8dos#)%Q3U`}@=tujE&1DdhgByOSBfS2Yc{%r?)>uh=A$lU~LRJiOYH zQE=quPmsBspG)K6rzdkROPZ095mn<5^Rns-Re2qNXA)yhD$-X^>H&Z~iO{XAtjs3; z+EyE7v+@yg1ui}4vmCKqLK+kPxvbMDtzWU?U$l&W7W~0x?Ay@_TK$ISpGm(bdj>2~8j}@Fvt7~=#AeTX- zzw!~qLZ@5+t6(s3Y136LfgAnAeq$xpdA*#;-Y;2=H^R6k?z%XdslE?HIJD zSxQ4)bqsh#rj|0v%goYG3DmLNu#?9iXbyDqN<@tRr-{Guz&fm&UOTWK6|kc-Rqf_Yt_t3WCeR zHGn(s+Q}A-LDPl&4?SI}-4Wd(QY z@K4~NJ(>&|1!1qNOez|Xw;}Nle%aGu_pizM5n#)~vtP?w-YDhL!K)2UTW|)m^5!T1?Fdc7aDgHeKelZ~ zcBl4OvdI+1Koh27q2&_{5Yrs$VM;Ffl^4y*Gj73}+Swy|Vs2eulG$I%pC(HjHNC?3 z7M}Yb`iX{S&b-aD$Peck&7 zQBV=F0ZS0Dfzm{!Ne5|4?=3W?mjKdhP*|d%fPe%c(tGcr21KP3LPrt^2vS0o-r@cN zuD$j?=iIaRefK(d-1m;xKO8!SGtPvWIiKhIe7@i3-OoO$gD)Y5OlJQoUG==<-1D;% zmM2NxC1@8I<;Cz=RN^}Lf^wB5q*D+l#pe3sN(MW1=?QkGL^4zD`Yt07zQLsme zbow+sJw3=pWNLVN53Cha%utR4`$K(Xjy(_U&VvZ7&GfY$;0-i2Q^Cra?83rMF0|iq zEI4z(jxApVL%Z2R65J#jQRa653!&$e{}M>m^PH4SQ&lz5Hb3bn1&L5=!yCH3Z{IRg z^9;Pq}D}gKTL#}gin9p{lyb>_TS-@lXi{x@3cTXptu!b3*WfsdF zF!EMvXlP*P;BaheeSECVn2=Hw-Egc`{UH+hcl!+!wA$@|&4q0!44E z=YHcc#VF^THzO;Kp4@1_HgLL>?$GI|pE!XSk=?u*nmA`lM#D?YGj#GK2_s?REuT;PyF&qTF2>@FAKBb~QS zk34O&f@l7Wk66sUcLU(k_lB|EvwwGFe!2xk!!|ANo*~{T!I!zQxstsS9*FwI3S))40 zfV{5xquU?poW0#iI_-LiWI1w82-{UWyViS*H>#VblG07r#6sRK9x1LjH+d5b)#%=2 zgWfy|5lJPCacW>1%*v3h){Bce5eK`c$pG(AwOx={!Fu}5eZ+IB?8FRCRjNiUVcHIS zMn23X)ah^Lj&~cBh*B^t&if=x5zWWIRcl?bk+wBQXSpjoUoAqJjT(XY@s~;a?p>z! z@m8Q0Adb&467YP~y1wB?RJ{FZQp!?PPNRP$`)%d3ntDIyQXnOiMuSz0BR|1VOxWE4 z55MBMGmzbt%Hh=x*OSGuT8|NjXowT@xN;R7658Wlw__-9OB{S>4u|d%J7#A~Uy_#4 zWOsgKNAO6l4BYBpiPo_{#mWoea1-I8Eax3ojx7^8ulks(bkL>3$lAP$TA!UGH(O@p1>IJcvs?*?$6{gavx01r8KW>xRkewSdCLXROe1=Yyp{!6 zZ0bsRL|Yc6)+~3?j!}My^`eUN6tk$M19MxNpdLBa9~!Vy%>t^BeX*P3x7Il|bEfGg z^e-7mjQK?7b8Pt_hEgn3UusZWshcal+4ZHsSPbI67eyrW8Em(xz>*hz7rkLOuo?6! z-PM_xW43)@=vU5L)Ql+ogp-q6HHi^eA}FJ3t?O!k4$NkVd;P??yb@>XnbaxwcDUN3 zAjNwAJth0CCit%!OD4&In466 zd#?y7#kQNa=*Vc5DKgJAaQe%v9vn8D`9*{^{w-b$1F zWM9oJT}<-i<YpZs-pfO@;c$h&p>Wt=!i{Cyn_+0_mYMM~JbrmD8hm(hT5 z6C>J=xjn@ID1@?D&%}OMj{X7HH=UO!_KiH-gn7b-qoo4)8W=Ma7iIlJPx=8J-+pn! z=g={bsDT}$VEfEp5#g^zqqW3Y___L4PU-q{v9syC<1NyvnVa}Q`}QEajD4O}s|H%A zO*g-CoKg0BU>}F={j5DREFf7#U2-yPF1!0WSEs)RJj(qnHP<_QrnReM+D}`VZVC#p zoVKAd1SaH^XC8a0G<<{|5W&{9n`zE(g5}F^)816(O^I1?-&m;rE(l5NIQ9grjZ1o% z!`_MjTQ3)+zF^JqVmB~vMUBJS`?Ccu*5lGQtdLBu33Uf{>B>zBS_bE38t9Yvyb98l zU!7j~NoLvPjw%R*)q4PXjV4}k>q{7jA|oG z;m`Zg8`GhZa;s|m&+=HIeyM@08g$2^i&Nwem|!j;2`=0Y2L6It*?1MVxS* z9*G#ssR8(C>yh(2_UY8SUK2m$l*Q$z-@U>kn%h1X*Jr0z)-S~_?k2{psG!`rGV?gY z7Mm~;3Xo)6?T)Ix%Nqt~^0Qjjkt9}4vwbe=x>x$$e9&Tv>K7|ML>_(0jQmG%O?d1#SWpu-mNH(rnw^K0(x(7%`^`C*$ZIO?pH zd<829%rnK^PJEP>`vrP(h_m97%foZI7vDP?8ELcIG!;LGY)1@9@JuB*Ez*lA&fmWu zQx@HC#{3xT#~ge7Uf2~?CN60>Yt6z!sZh$ z5)0<(>${&6Z=O`&u#lI9^c72!SPeWyXT|2VEERuJEn>|;&cpM%CStX!RVi7Z=lzQKumy}fAD9QSKIVZ8+Tbm)T{j7#=8)7ou9qP zV`uYJ^vAktckYIg@44-~U3!wZ(nYb&w0JF=@G~g#ysZX#bd^9`;w+6OD44 zFN4_wX)oUc$LFO7T&R^SL^!Q^s+x$#;3n#wkgP#&q%9@rI zlhOJMT1quR0lxJfkz05M=O!cT=AWyB4tfmv^#RH=pF*VzJJ%Up%uG)ARbN$KuX6DH zp^u<{VCPr^tuR}t?X6tLiojyB807p9C&CVg6{d@P3rnDB6Q{C9L}ad`SK6eX>iH3i z6m^^xf>U&MT|gjxYxbh3l`M_8UR-HHk?DPNt4jXrT(fTO#nRk-b{ZLZ`V`TaboP&8 zDka&U!OX(xCK*PE>NT@pe(7gEWWsQz-j0P#(9XsjDNUJh3YSwJ5+l&I7fN=lza#@8 zo=y~(-R5J{@ClP0Bf^$-0l|*2V!%cP7>~@ZE=v_{N$2E&+0!%ae7^L7ta($5~QEhu>fJ*eK^~xIg@Px#c~R{2sDz zeZLU`&!2Ots9pMboMy8vpt~&+#%eI*Gds^S7gFjQoZ-_$O&hoa+HfldD1MEGx_2pW zLI3R86=CP*=}B*1XCDw_;s3w;^O;;6^@dY%2UQFuG2nVMk5NK9dg&0b`k?MhJb=Oj61m^ z0yH!(bKmZXZjJ`nEAJm!WPTCc%#kzyO;uld^<>IK;FPbJ@^ z$unPk=AD4^7G(z5rwhsbL(@_XC>?D<=@={Ojoe-(j9VgoJ=b$LR%#$*Rv=wuzutA= zyxFY(3_quey*sq?xRzo|x}@NbR?wl9I!(xjFbF6Eeb3c-h4OFCr0L(Z?f-1KPEg(c zv*oIC2`Z4Y%7&EN!xoeKmn0E5vl6*CMvq_2rEd8aDI$NhTreJzt>9m698eIiwAq0p z;#iepQ^9QB(3y&BhD4&aIF#DP)^^XS%ep6h0?G<`{pSI>fq~>ue2pGhV>^(kmcncI z?Jm`CcO^i1aU4&QNTz3!S5%}%9OjR7^;c)2Qu36LpFgi}FnL#=|5Z7YJl{1TEeEU9 zZqvTm68#2>li+1Fl4%L;?BN_8?gMXUFp>tVj0V|`*hIs265>by+`Z#aX81+}*d6%R>X|;zUfFpVhfr3llU4bB zXQ?R#ha5?gdbK*veDDqPdK-B8GKtnc=Kb%?yU!>qxC|;fje$7i!g%Qa5=uM8-uDn? zCYgGP$~M|MiU9+u&MuusvU9~4rDwR!^|~>@F>s=}2LZDwg_I|=>n;>%q{?W}ah%s* zS@=TH)=l0CI=M`Jf&6`*(yvHgK`GUIDkIpIx#()ARIHe8v2 zNhEX*9c77;u`VNad0sqxj+z~DDMocs}P25veZF2iHzEm#u2-xnw2>?m$bevxM~ z{KNGEz$2MPR2mg|+AMa6chK^*&%L~|I#w`iMT)T(W!D$Q9wG3`E%=rEjRtC3E7(f} ze+tN!F(}$vdWvL8|hMKvS z)7_sFFS~us>1Wc(8e$EKWQuOs7c=H6A(xk(1ZWCBA*j@l9sPNb;Y*;e$AXIvJfKQX zYq=#{pLj==?I{&|pz4&ad(J0E{{2%g9NOb%dtk|#iXTwG0CaN-#EV9!tv8=>SbQ<& zZJEQrUWAZW6VfcN=<2u9g=ERZ<`(bUgVb~@jA zjI6ldZ#lq=Hc`k}e}4Z`6f!0%J3kiky<9Dt4KY9djh4oj>*VLM44&h*-e|1#8+K04 z)mOJ6mb;rv_JG+pm_K@Yy1~&}NvZ2y5gu*PxyFgQHMu1QMRIP9I6DqlvHptqqxY8f zH3C>!ge`_^XdUg8_j>)uWi`+%X%8V)HHKhzk8r})2ltiaX9RiWc9|aEGHaiq#M&bg zlV5;q=fAYjGl8q8ipVqky?96BqE=12BUwGKVpI?Bb@EZ9Oyx4JHDF<3fdxWzuiH!{ z!&`vIrqX%Jrup49;3gz-TmxFF3kmVFvOh>u!KB%2kJl60>9Avh4#t$eXk;3_!$_5T%R_J2U^{a=2`PkJb? zG6rz5lIVy1^`6{+{j{q31_q3s#!2$u!S=Q*?~zD|5l;*xSrO7nTu%Hsxe5jSibjSq z@S)URCzX&RfLSpJC!6qd_`+)9cs=2wV49ynr0resN#a(16gp-!%7l(}#<8{MRw5}h>`)ZbL`+UY&zt>@i zy0jkjsFb)T{=w;lKR*;uAfRy2NE!Y?(*;yv0p=l&kF}b(=nmB+L~X7cSM7aC)cf($ z9eNGm!#cw?SVT066O_#`@uKv6Htzv~5VfOrXFCS3cM#0qG-P&r9pmM?r_AUcX%!=? z@cv!;xW5)dtZe2CzZr8yv8zs7n&`e zGuRgV>^cl1Fg!CmOVFpN_zYI-5{>Lu6m1W@N(^v|d1ql_dULeLW9&7auIzetJxhop zQ8vuPn#hA>F8%w%JL=~bFnLoB8;xdAM?E!ulxkFc)p>29?Wbx{tSGf4nSJG3R{Ps` zS6bxdqO)#WS3S(J>($gu`#3OFPZGzT8wlJZ%9JTUVv56-;BHt9LJqN1JtQ~H{ z(YOOul-ZQ3-j8|rG(Qw&&FrJ9TWmPAempBB_e3pAe-Si?Z%`ceX`!Xj+kK{*IdF>U zXZhvd45m_mNb9UaPMN%MjbH#4x-F=J zESk=`tJh^BSG!v;N!PqgcwJfiT;xzKP9CbBR%a)bRK1rJJgO)2eYG*c`{Pdo0NY=a0-o>yNoD1)=zt59}kE8puE4iZQ zwkHtyDi}!{?#}rdNR}XNuS*k0h##z8RQ_X|8C1S1x&@b2+&yw<<=MlS{32xrEt>X{ zoyp<(mw<_1-Y?$d%wgX(N#Ro1pUbZS&ylRe#81q(nrVYA$|~)Uf0eGA{?ByX#X8a! zmQ1|12;N!}t`NqQs_1Ds0I@znKS?dPsXM`{-_NU@L6T(mhBavFP7LjSU^Kuo< zVngyfcQ;|z4`FO8$(x;8yPd}fA+e80EPxE#M!6WD+ucjRUj0dD&{WfWuZ^#bOToc^ zQoMK7Hr7GMby<`kF2xgj9M1V+&1HFM$O_lqAAGkb*Dr=O%3iI#*09ohb$GM#Tk(gp zUjs5PBW)iy+Jce5(p!PWH}k$1hdd~Yw>WP!y@9z&LL7ANAgIu{+56AU4|wyr3TZmN zVtyc8JL}80O4%6T8kqTW_3@%JO3n9lsz!p}BrVAx5L9kbDM21$6Jx7x%m|BJ=&age z8ooFETC6pFXf@JTDEU15n*&lSkGr*tjEs+B7f}g~Z{M9A+)jGIeu`(vo+TB5yJAXA?vZccMSM!7?@%wz(=7*(^fA?iWnizbldsRPj zy7ScG-G2IadOSW88@#+J{tZE%d!K`=sv$)1sC~gBB@TA(` zZgU?_Q^<)W{S)s;@b4|WH3vw=D@l!c@GN+CxtCubSi9gbo!6*RvRN>=DBcqz_HxNY zGop7(fG+zJ_0u$sOor`>E?S!DKm)iv6Mk&Np8gD+aUc`37cYar(@9s1@EpR=BS#;Q zOYU1|1*gOo?AaU;AXz+pDTyC`;k2NWMA;pyr!jK0g*iK&Q9);~%%q!2#@J}nyNm{$ zVwc~TZ=#-->19^Ub;&F~<(yW$-txJ)!Q^%6NWZ+&!sCmyW+lkU&!$>sJSlmX`}_5} zUDG&*?NBZQzai6TnJlHufeD-SRl>xC#r!yvs8=uZA{f0NTnshO%}OAb9R0z?)e# z+IYof^*s6KE4Ts%=$l08zNpY`sc+l$o z#Br9ym@O6`EgDILT`kaOU)s*1H}xJftc@{rt5WLgc_!OcHAiKo>p=8qFq)vdCd3)X z-q)zB;jtp))ZAEpNT@CT(VoeJFf5)PeHMCJK@OGFs6LR(^ZVDD4PNbyu-bdy(kV+UTjJTwZrr{$ zPe^b7R9%fz@#ID_O0yg5C1&Cl#iF!>c4DA zul^(_VQfBT8xj&CH)yd_H4mM ziAQ4?^I{m8Va$mkBEh1|Ik{ot4iXVsG9R{;cMcDhus?igRLGlOlqhjk z=NSS2pp*Zw^UHtOzaCrGLraW%pazQO=F&J((ImkJ9R07ErKOs}?hCy@mLB?O5>Isv zVlgW{1x6l;^Z!wPAi2Z*PjxDiQtCg337`2lgJ zVPCHxeTI>?2Y@`5?P;r~8Iq&8_lEs+dhh9p03 z&AOJRm=DZmohW2avxM8o`U&L3acWrqNf|zGdm{q`AQay<+P{YkYF4`eDro;P(Azi`1AEr!&|BM9l8D_wtyyX)^bRCEsV^^2 zeWu|$ptOI+i~w?K`dp0(g!FTT61Zv`&IeikV?QLKPGH2U_^L;v@^<#AMta+;3x+*^b!<<$lwZ2#+6j8e~yjUf;_2Q4AD)yFhBG;J@d8#ib zH3vVQimekXim$72Qn;HmsQ>+#tWtTT1((Y4W_7YV{EYcJ`Z0ITX=F?_X&!-u(4Ra> z>XSN}d<;W44~LtN%594pYxS6n#d`!xee7SPdY=~z8`aO@C4`*j$}STO+POqs3QXti zhStszNVJPz4>a1xUQ+e`10xr`RTzsOyk3m1b>wSx9mfJLlaA*&R^QJ^UMRs40U2_R zAn>&5h;Oy1tfCfuF%Hr@n&XeX=+?l@S089Oa8_E+NLr5_tJh4NE39I}Spx#|19bad zd#iHP`!NeYn@q90Gj5C4d?;SC3zC98M8cVUno;pvip*j%6XicDP>lxF2UJNH55=diHAHiHv{NroI?i zV@>)OnczbK!7Vv-*zl#Mg_yt-SOgS*Zk(> zhDtqq)YjrwxkNV;1>T0^SK1zP-7PnyAD&o@#ZQvbWvhVa8M4dV9Z$g7UJ{WqYXac!+oa!xRBw5z4+N6#J z8=>y+B`r*SmJ+VQaBY70N4cN2h1wIbV2*Lrco)mtQcsVY$n(T2mKJFFEZPZx{AZ1W%U-2V-|+KUGh`@pYss%L zpRR*>7zZvOz~oo&c-tS6(s=e}(ur;cKKwv(KijT;_-g%&_w&V~IB+`T?bjNp%Fz~-++}yw=Y}&83y-_+3F?CS7Z=D z0_A=J@B~^7HPUW~4NtDjkE5*WWlJ^sCX(n~`y1!D*#CPmY2`nONuot8O4W8$*;&HL zwc|HP^AL+&i~*t3DRx-L9kYZ`tKVD4SmM6~Ecq@@OLY4zq692{cWLgY28lu+zPqhB zQh|G5WF0jt4=y9lJ1xod0$)Lc25Uw4?A+>=XF9w30m#t>MYBvQ=JeW-1cHZ$aWL0! zbUzoL{477_a_nfn!NPIFWl$0SE=xpx?^Ual=2-6T{WGDzr-fY}Qh(3p7>fB>6u+M@Kn~$&B3|L)cVlG#?@~m5 zU+_DK=~!iZOOXJ^XPV8#! z)z5qXaAoQ|sfQb%35h;uZyX;x_rEaNaHQ~ z>v}flvsT2dRZZ(d@><0dxX=79h%^?!(n{YJ=sZkCM;q6&f0vh)bW6%&!z*ws1&% zSd$sR)yikkKOeYyiAk|)C%@&zIhRCqTj5+QyTMxDP7|{wWDM zd-SMjq34hKCReJ0FVWCgAMEe#dxS9!Y>S5*jfh{lI`5~j=rd!HDs$QT5=PSvWIIS( zlD({gK5}3Tv#9c2hU3LWR0A&d#l&o-!M(LEI*geZ-^H8NZs2i6I`sENeAglUfwn&r zBZUfYoaZdvBWJw);o;hy*Y8ma5a!DMbn>$dR~#7b#8h*;=A-z-j4fsw!%Ys8%8pRc zICZC>AK&ghxv>>Pqg>FtOU*upv(uEf&}c9t=#|%1-a{KF)ROLw-O7nv=W$cqR=zmb z_W7-x1qDki%rnFFooZTg>+&YDD_&6pz$H@@vHq?(e1Z`{QN3c{46I+a$+oQzaWdF9 zK)Z_DBUa;BOCP@35J>6WQBV4i@OT=%A)NN;qiKyI^3ad|-h(_oiV58*3&CO9gvo5B zFyaO9gaRM_|APV^HoE@@1^lZ~z)n3qZAn+xGI1D)Wi<5LTZ3tT14_r z74Je}*O^NbDI}dQay6@g?7zP;3FO?6D}ule`R#8~ROe;BTwenX_VPz*l&d3)xXd~q z(_((kxTMhCi~>L9B2VnTSrH;~k(i`@+ImY_ln>h&on^JBj-Fnm&Cmd(pW;!U;G*N1 zwop&R{g&IfXV-BKI-Z`MBAFKT{FF6%Bnw4NOg-XoG)TL;TP za>pg%(z)0C+~VuFr`|jjE&JkcXJ34==qgT%S~Qi=lX1&Df3N~wauv5c(Kc*ALQ=(g zs1r4-hX?XUd%nzpo9F1ULU3pu_EOtAZL(tPdy!(#xENp&_OCa|-~3{Zzvm8u z!4N_79M2YrROAnzUBVAjvzp0NTX_SAwy7&Lq6c3+zafL1?<3=dWm{2-A0zX?3iiw8 z&*o}hwjrwhF6UPgwk$CJh3e%Zdh}37fJG(^SUFsg1`hffiPq9e3fZXII#jpM_ZE$I zf25|piG3VoA(_q)cF<9_7H$-*bHkKyckS!^ zsuWSsC$s~NSe|gVK0s8~@@J>x{TgdA~)G_yO|VBL%zD2J#ceWTDibT^%ewAP5ZXFbY#hjGgfAp z$7;?rYOL#QOcEjZlU}sSenMLn_N9Vo2ObE=7-`>V$>Y<@f@nkMrO3yq9lr4Pcg}BX^)LD@rPi2d7}>^< zNkNIa$ld4KiWDD0+`!_HCN)(^5;tr)aw;9noC=wdBKO=`EYKDU@nwWtNyTh!4s z?X9eMoR;-yQxR8qqNdHKG)W4v4*=S$*M#cEUKRpFHR!2`H2G8gd_KQ9o1)n?2YtKK z%V%9aMFrv2f250l03L+r+AH!LIfj+y4>*;~yv;$Py3}# zaVOg0S+_YyR@>|$-L25rEjz3qT1gLQ+pi4KeDWko97wz4O=0dp+Wq4qFX_GCooyZz zxb9A@T<+dBAJl@6n6U)9DkCbKfyD@WUBTmY0&wr5-?kkTIQ8JyEA_?+@w# zP-xCIV&-h;ptN_wDnqTG(0PyS55RH&M~7I$%wo#A%D@uL*bDYMZ<4Tuy=8+I6Pd87 zQ}%-&uD;>uvVcHnX0uZFv~8VIL-;B8c?pI*KPU*u%-d&f>j`EdA7!!R$8547W%POZ zM34fdoj7Za{&WK~X5vaP^($<*nGM$@Q=Q2dE5LTW{L%piyk^^FD3?7Cu6kYGosk%7 zpK)O42>{=C}S{RjpM$CsYQ4pe!1wR)Ol03QpeyPd->^mhAW89U` zNOT_6!S+Bfz}195)BUUbfop-d%eqKcu_=_XCrcy4g>b<*oFp;DWwu`lzKVFFQ6Vh|V0!)yNf!5hw_~Z+($tMz;OP8i&ZEx?AJ`Z&Q zvGaWV{4>*CDf_}+U`h&p2d!aXSdpKx1#3!o)iIxyBl8fcFjsV#4sa#SCrjkz( z!2a?>v8ljqVLkV)$o?_WUVk`dd6xj5{5o~9vGjd?eS{YjOdwl3VAqqbBVk}`Wvb@8 zhk41KHIZB}#K$Gqi7ySxLr@M1OfjJzF+lr19)oQEO}K(9rIe1bgE3 z;d1JbQXVX^+>u05(%qSEC-ew8PnLGX3Cq2sx;$9&1oK*yW4--bNsrC(!RK>nz(2Bq z{1pb}bF>WSlNJVRR^p`AW;WZC5th*4Ho3|M3^w>YQnRM`%Lju?@z+Rn;77;&X`m;` z_v&AIQPx6>F%x#i9=d3f_|1`|R&;+GmmVUWy~K4izDXTQd|De1gTPLh1V2IGVigrn zm&PnQMKV<*i|``VFu$6Z9Y;OlSJ{oplnKad0@Q*}^r-ut<6M1AYDK*J4^EZRVY>UQ z5@0)R6WPmwBMX#`e$^PRnY+LVFfow5^;PM!-=S@%1bb9s5uG9xlxJUl8Mm#e++uxz zu~MB4UJ1~76Lm5U+zT0n*Ltl42wZ+eHb`xc6<~1B9lI5f0PTx^ZZ_OTnbr!n)E}ak zG0j21;bPUBsRrCQ+6!`()0SSAdmPv+&XGyq#Ao}~gk6V}lFipS)gH!%Qffo3=##Q> z?|esF`wjQjqxK4L;pHQJOOh8gmwp=fnr=G!emNk}UU&FLoGBCe$W@`!E+k%HklvCPb33P*8}?utW{ki6JszHDHos$kVcq*vr2+t*F?K@H#pmZ zr#YfSpf*ggsoa+v7)ZitwemFyLk>A^TLl48BK2O(6tmw%1&eh}r}AAC0%qfOE#wpJ zbX?+o!dQ%@3XQiU8)VAtEoM+u1=r@+$Vpp3_>t?jcn9!lA(UsWTEoRPDq{0;r z_N@|S*jax}iF_nJ)3HgZE-a@(1-5(+LL>IwXR z9|k_`{Zt8rflI4)9Nwl*dr@3mx9Y0SY&!OjIp9kh3O0%8V-SY*_%p1%5UC8kyDi5Q z>cG-%0SKAag+aN8%U+^#ze@@V@580t(#A=n;L1Zf({s-cd3{ZwvA3K;t`v&5 znKoTX4})#xd+khJY7fcpao;^|o#P(2Us-9};g~1c>G=EU^@YAA|MRiSdEUI8;?XFf z@q##?kglC>=dZ`9L{{&-K)%}%6$Sxwu>F;USqkw@$-CkzszOBgqAV->Cr=7;@mm&E zRCluFmtyrr%Exxa{JJq9d^1xwOR#Ib`8p12TqjXfNx+>hA?diHbz&Cmd`cB)?Ro!7 zKgfbeSCZz=!=ASvlLzI4zGtd1g_ap-*(#ZggLKD6?bqG*rjcZs!&SUZuph>9SAtr4Q{LRRA>f)A>{`K-Cr%Z$~*C5}ZkAt_Cw%10MDi0hhN_Ffh?n`1+ zd049LBX3j?^x{S~(8@uF^78>TSMMJI3Vh6NV zOXAg&+Fgq8=9|w!>~SicpEh^7Y*x!D*CAtj<<}~Yuf29-x(OeU zbh%4-{2te4nTDiZ7F7VXtiPw;gOUv%DkPMv+2Tc|E3@@zsfjTS?WXqx*J8VfoAFty z{!8v3@1qz_30>b6EjjdAQXN7J%GPgamAHb+yWp2AK-%eA*r-x;T3nzxjxkEx=W{T`a>?ewB5)l1;F{B>XA zm-d#rROA*kVpvbi&t?E9zV7Gx(xYY3f{+slvd;AVcY3m?r@qfWX}nQVHiLe2H}|Pg zVD}UEq2@}8geiIG+v77t2_CnD`Ak8vi>W^rvo*ZV?3A9VD^+T|*w;%?t!IRd&TZyz z^mTIoM%{lo`E$=L)YPc#8rwT%-~AW}iJ9f-a3t^QS2*u{vFGB}e?l^;%2n10uVphi zjm88;ejC{cJ$n8icHKOZFr>~~ACe}2c3IE! zDS!Qq5vbI-21?r zFXcFwD8gUz<9VjI+2tCW3nC(*?aX@7`ZhM+dlIuUWBG3@=~{n*k}eSvCCi$n54Vbh z{xaWZ&BL>FBXQXHfoUf+AZlNR-yf)orURSS(@rrBK0``_h1&gww&U{;U^&NGvT`O_ zv3#~aLye~_u`|hY}mVadxZ+9$M2{Y`a<9ly@YLM?Q zmDESV{>}L4+M`~VjU`$olreIs(^u$a4+q~tK=39%LljmP_ji&yUF$zc>i#47AEK1E zp}u+)r?l9!Il~+fyy=kB=V5?7=_lCV;jfdK>_p0i~f?1ili$>4_bC1F+{+DSfcvaIZ z+y2WBpW?mgb9UrLezWU&Iap$bxm0}q{kwG+4U5s?k^W0VK<1iTzgAb&C8#A4Lb^TF+S2 z_6!L5tOuBIar}Q9$h@(M()kEGLR1K_uDzK_l;ZJ{mf@9W==gjz7G6B%RMV zOQ3&tey(V~(o8avtyUqiOu*W;$z&)Y;N>xYI^Ib-i-_TH|7F*C&V%gvS+f^qjg7L5 z0QUBigDfVmha$m_bxPcb_uRxEJtqmta=`ynf-e`S~?mbu3 z#B0`k&QA;+!2IU{%fLymOD(#p+9(lwVhql0oDcl;6@mbeGwy7?MI6f$5f_nszUuzz zpnELzwxA#D9ffD(C%OA$%ffcr;zwxOk;N*0h7KN2p%qBn0JdSte1E%IJ)IFJ=L0!- z@Li0~+uP|rTIKwlZHT*%1M254kG<{G<&F&yc#c+%U8Lfc4z<_`#?v|2p~t@?TLu{G z(wkl7!bV0H%(14a`3^gegzVQjA?W*q$&&mCOQ~jf)cf~0(Lf3!qC3CP0oXOJZ$Rco zJt5vESm;T*4=qA-SzVHe%?=Q>aUBuu2s_?c^VzUMIvqJ_ab@@E@&c+TserzkEe-sKTq>o|Z~{|lTvVWbrPccrc)Qodu1Ndg znRIZ{wMQm#Hl@y8OU?&0w_#Q<=z0vjJ2+VA!mGO(4V_EfO%Z{(>p zzF>?PZL1wg0In9E=7)bQKTYi^bc@l}YIlBdHw zl#1e)H_YqPrK_#e!qq!WPAZ5(;GPgln?V=(!5rqF!B$IRytkCxVu5+6sZDD597b2c zj~aV}xVa`Wb_*!7#C5|!JS3LTs4KL={8s1^%Cw!HNBNoZs^}XV^%#3xCVhEbU|E#DCc|3+n)f}jxD;F6>P9dG z2MrcvX6UNAEEa5u&z{2J2$IPQ^i;aZ8_(s|G`1ZjvC}+f_6yS6$QCX~O-Gd+B;`B2pf;{`Pq#X0$ zO4?u$otWAiNQd%{sGx4xwoe<|fn<8d8qd(C5uNz_nvJ|o^R}%Fv|^N#J8?=CTl~i_ zyIx+96n+nf+e~%D5qGO0F1D9kGi$Spn-&45$NZl_X6)x>o9RX?C#{tD|mXH|{WQ_Vvn`xl|B?J+zvgC!ZvjzGY= zKM3wj#(&(II>inrI?KTOdno@A<+9NkDG(KU`0Iao>+}DtKzjJjz}xuWTCo04mjsDR z>i?>?3kIvYv?jP3&l0c!r2xca68Fy0-!*v-z&95(-=%#L3Asw(cA;lra0TgF2aG6C zq#ZDdJ{$Y0eBSYIxeg?ZmOJb7`hTYA9J3{P*Tne~?5)pHLhxII=pdqP0}?^ha{sVx zWM*akSzYipC%FHuy3pVcF3o+P2O@Ovj(Jty;<&F&dG__UpVNXEA3;zT{i-f;5p$u*>_aU zMzJGw-VV4O9C0xr2G~D{S2r-kEAeyCl_?^{e786C>@1ZNx?fTf%_(kkF-r-IiwWDH+OgwBEFMhk}LZbigc*1tup{?Pr;*{L*0 zjVvO$3?B2qDX#=_O{+J$$oDIwt>(;yk%l@!@gozg&h37U%*H7kYnLE5z5%g%^;O;e zY~8w_wvNv1Dq+sw{NKu0ogSkvoqR^=Asxu^n?$pbV|+A+V>jCxaRN7kwrul=*^3bQPg(qBBWqdnwFs&M*8wMgtY=eM0wJ|2w-D z_vyBpaf>sXiKntXJo0Pr`Bcq|e3c=0%?tl&r;?}e?*yPTpD(C#teq(yj%eH6omf(= zXprZkRk9oKN!M~gt+J$Plk4WolyzrU;=PvMRws(w9YUr#^`$z0D|=wQr#RKQTp2U% zDZQwczQwvVwC7yn)S7Dd5ah($Sxzl~#q!m=A>)l<)*GVey`ou#7R572j0@F^QLl>$ z=G~T8@CBRCE+$WWMvs(SU9nfzYPGz~%>u15EL`Nfvr5!oq9rO$B%fd@XX)PF?`Fx zx@_KIWSbSIM?MU)Qg1Ys?%j;G!wP+OleD(>u|Av!C&v(Y<1vHVDI9SzwC+xbQeMsVa{*S1l<=}0qdzq5TJ7_CIb zdxG=PJvpsAi2Oqu`QrPM`=4yk+))->8~y)RdFLI~)S9kwjumMhj$)x&K}tZnf`EW@ zq)I5EO0NN_(jp>KEvWP+(yP=^Ll>mi07)P;0Wm;`Kmr7kyYZYkb7qz^>)yHl-TU{q zlC`q4_qX5o{hsIdY>KW6Sn6jcS_B`mOhG49N7Q7)(@aEUb~J*0md~YzuQu*)f5=IV z-No@ZkB;4(eJG#)wc%l+6h!IU*9wKCs_js zsZV&TWE8lq^BnoNQ`)rSsdNU!k~+SN*AA06p{TKUz8QcJ2wh@o03*){uc5GAadJjQvZ%d{dPC2nf}5* z-V0c{mh<;PY8n0dx-8J;!j1KAz7m=DuR?kI{Y02od7FIUY@Syz#*l}vz%IkN+_2cv zQH?nHC)~3^<+aeK54r4^KTQ5!&&S@?A}G>lOFEfw%-+~fCN1uT9_7W@2DpW>`lpbP zcf6aVoAI6akmGp|r7T-h%#bE=k6?B-sCXksTcuSjInwG6P2gwU{K)w=Zse?ZhF;@;a>}- z-%Tk)Mg^|rQHQ?t6{!|XPuB5I_iX{#vDr?&>nC?}AGmq6rV30+h;bhKj@tcnG^FI_ zo}+6mG%I)V_O&>Oov$0v1YIhLw#BT=E;;u+q#?s;P|w9D*@nt%W~Y zGelCG4AvX$-qhm-FkMFN{wPf=3i&!QQ zC_KC)L&ef&v`>9A=XuUFvtimTO+EEs+NDq8kGTFVr*Wi&jaTKAVA0y7FbmVmK&LKv z!*?Avc);M?zY$oA#J?tj@gM7T^YDxa4K+1vSWq^J{Dea9qJMS#RwKz zWQj|x+kd%^HgELc+DQBU;*I6cFPo3Od!Pi6X~4eXs-d< z3$j-+;L@v_GIbhC-|Ql8eZrhOsYf+b1g#{*BdZYrMteI~B7fS~7HmaDMO6Wb2!}9S z=YtH@k9aPo*TiO|g38H1^9-w*n2!7#k@pHsD;HE`CSZAOlArNnx-1#w+%E1nq{cBB zOM4C-JXq_|kpAEI`CrPpClWOHvYRf?(1~)Ah2Sc|SN#IsJyPig^Rx!cUO|9Whj@Nk zdlY+Hv2?oBPdje>m%DLMe4%gT*?^$B0V5*dw@c^Rp&Kt5|Dt*#UHl!F9L4k#hPQWp zs#uuf{y1`GHrSmByStlq_gefX4c?OJ(ytYVzJGT3d!w1^=UdbEisZqf10xm#0G^`=S&{03)FMcCFS^s6JdtPdmeVh<)7 zHA!;D-|XuM*f9z8ckQ2w%{1%*^$Z#jP$OvGn7=OLpC8~`fflJRxJP=mlB1Z?Hlhp7 zFCP=fFt z_JIsP=ri{$(rG-vshYbctDMT@X^hucH@f7y`+bp*mzN+q)%Kh2VY?(jUvVg3Q+&=q zSe9Hy8d_{q8Npz1?(fQ)eOv)kn)V?nY-e02FxJb_IQSrL%^5_wT z`@!_!79jEh(qj|t0SEn9(MS@w`6$XM38E<_usKf!GU zoGX70*ZY%YK&2Abg_H~V29NH%I%)s<#L3ajRtJ1`M+fXoTSiA@mB=xF&B^<;k+K_? zG&%_Va>E@p!eSm4F_FqaUZ2YLW<#$%vr+h6{a$p7(>7dh`#m9-58{5>EK) z=M;)2x3rrmY5rqGLUaA_KLVySr;Y)laT*$(BSkOUSS*pcH1DnOSVTE6vUH&WK5Aj> z&X}(&E0H-G33g=DM$tUjXA(_fl-)qR;7r5!2f%mSj0%|qFc#${a&iJ1RJdOtVRDdT zl42zActs~zEXj0#`4MnB<44(DwzjmqlpegdGFj_keTOvVi3+Bh0`B>D)9pxHL#Xsa zTsU(7YoLm3pfu&t#)IGoxlWDE+iQNX>>3K??!GN<{ni^UEywFy-o<$4_o~3p*ngT+ zW}_=$97rMV5JUFUi@Gus(BzHz*8Mgc_l+>4?~`yePkKrNw>g%oUYwM|W$`TYz`SB7 zEHP$yN(YMA1{a$(NC0t5)8M*z;%J=;SCE(l6q}l{I3mrGvF;}gcLTXdGj;gxB8xPx z$Inpj3Vi$$j+{;?5y}b==cSoq&Ir!nlE}VUjB4^%og~VLDU^=Ax;*jC>Y;zX(6w8~ zxMhHAzd=8K(b@d=uVmr`oP#ZkXZ#b+u^EnNtQT!wc5=UAZrXT*GYYibWP=&V57eQB z=Vtrspt1O)1TBk>@(TV9_4wz}Sbto}@bq+AMnQ%KM6n+3F#G}TY3jr=jF=CprBVVR z)i;*D7}loN&kuC^zJ>>|MOxjTcr(6>9%nccQqukZ*l(lECl5{Tk=puy;E0bL{rn;GC^ubVQRwA5j?bp zDHri6aXKAFBqCS|%X`}s6BFsutERT$^9T^BBWmWAdB_BIK#?$CNP4KW*5yIOrd;K8 zdIl*l!-yxfHbgrV~{oH%^R!x?_89L$1 z1wYtZ6Q_92FV#pQ_jLT0M9X<4UflNb4LsmPwx%(s;12Fk8w$5`OsJfd-#Ue56X=D# zGDFYiGcqDaWE`6$xI^BO=R59i^A*}|UVRB0x$w=8uP|@*+XU%=7 zQM@S>3u!);%16B%kDBZeDAH3o2=`p-BHGP;ll=}HqQJ3}mB5AiG zF54vmQx=lYdf~LBoU?V&k>c@zW?xB+_`#RhMl;@uTCJ2{>NOv-8#O9YJ2SAIzqRt?pxNy+X^0jKo`PP2zYIAAd`}>Xu zYy@*F^Xl}brX_YedPWq~^s$R13L!n8qMcJWvwHTuXGn_7^K(Tx(x#|bu- zd?l1Vf+OCyoX^d4a}*R<$g*cUW6+dQu$_Y%ESF8t&=~T$&DcpWD{;z$yB9dCiDoBn zVjc@0tgh@+yHFkzh?2{>HPd1?-n(tM`8_4!X6G`Ncj5*M8^aOnGvaQVAtsma@+WSl zyu3wn6{p{AB7eKr!MJ&awTpToW+0_gI=+H`-G!mMvFSHYJBCiwmJd?VHEZ`sd%P%xULTVXH^i`Hkr zH0>^>?7K`OIV-LM@9HNSxuR}O*Joq~WsGgrhhM}!bP(@glL^CfL@CP(uaDn++dN}kI7k4) zX0XD1W1YZu;CAO1lX`oHMYaSzGP~R=PffjD^6CwjAFt`8d#{Mu_I`jll0W{Gx!?6OyW^QS z1vt6zl~@KzYsT+LJw47>gAV1NwdbD2CEb;;!-n%rN)#iRB|+D={OTZ~>3Q~O-pQ;5$@YUM>=iV3(NWPfVg?V*C%SLx9>@+1Xtv+eSB>ZD zYRuOZ^J5)I(qBV5&tyckUaU-JNjty3mpGiC$}i zMql@MGl&w@TW|CjyKid^DU;|I8iyqI$z61)#aCMe4H)DW@ zBoYTyCPz;)bpVIQo1)vEj?StRBQl>nHDw)Z?aI~p80B0>Q_01-_0mikt5J`a7wxw< zie24mbh8UKH%jHK^ST`}(k$y00_bG9OC??^U8q>T zMJGP`57N(#y}gX$jDo3ezJ3NXmDDVLEyj-DM7LGK-41HUH+F>)!PnpRKbGhz%yRU2 zUMwO2BaWA}_Xmv2s$j-l3`Rv_ur*_F+s%_Hcmx@fv{QCXYV?jrPW36(Idq`` z_0Dw#xQz)6MjhOhbx-p0ej%GpL$hP6nu*3D0xFTpuzf;TEkKv6v;;ApH|PeZ|5GJ< z%+>w);ax4rCC}C}CXw`1Lh(oP=+9e^T%hRAT@0Yn6o0!0Z9HsB5=Vl!aVu>SPk3+q zQFZ^Vo(9(Z59{Q=*4l>^IStLbyZ@pT|39;wI6ebJr8k{6%GHuH6^Wkr3#i${|oW`tpWf5 literal 0 HcmV?d00001 From 852597e9d765830f43498de55255cd51ef2a90a7 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 22 Oct 2020 10:39:08 +0500 Subject: [PATCH 008/958] added image Added an image in the PR. --- .../hello-for-business/hello-feature-pin-reset.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 46920d9ed0..99d61ab91e 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -98,6 +98,7 @@ On-premises deployments provide users with the ability to reset forgotten PINs e 1. Sign-in to Windows 10, version 1703 or later using an alternate credential. 2. Open **Settings**, click **Accounts**, click **Sign-in options**. 3. Under **PIN**, click **I forgot my PIN** and follow the instructions. +![PIN reset option](images/pinreset/pin-reset-option.png) #### Reset PIN above the Lock Screen From e693186d6e676e66bbed5999fbdf664386693a30 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Thu, 22 Oct 2020 10:47:19 +0500 Subject: [PATCH 009/958] Update maximum-password-age.md --- .../security-policy-settings/maximum-password-age.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/security-policy-settings/maximum-password-age.md b/windows/security/threat-protection/security-policy-settings/maximum-password-age.md index 2e2b5f172a..0f92c2bbd8 100644 --- a/windows/security/threat-protection/security-policy-settings/maximum-password-age.md +++ b/windows/security/threat-protection/security-policy-settings/maximum-password-age.md @@ -39,6 +39,9 @@ The **Maximum password age** policy setting determines the period of time (in da Set **Maximum password age** to a value between 30 and 90 days, depending on your environment. This way, an attacker has a limited amount of time in which to compromise a user's password and have access to your network resources. +> [!NOTE] +> Security baseline recommended by Microsoft doesn't contain the password-expiration policy, as this mitigation is less effective than modern ones. However, companies that didn't implement Azure AD Password Protection, multifactor authentication or other modern mitigations of password-guessing attacks, should leave this policy effective. + ### Location **Computer Configuration\\Windows Settings\\Security Settings\\Account Policies\\Password Policy** From c3a65aa995cdc6ea80d69e3e2e03c0714d926808 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 22 Oct 2020 12:44:53 +0500 Subject: [PATCH 010/958] Update windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 99d61ab91e..48061674ba 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -70,7 +70,7 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput 1. Sign-in to [Enpoint Manager Admin Center](https://endpoint.microsoft.com/) using a Global administrator account. 2. Click **Endpoint Security**-> **Account Portection**-> **Properties**. -3. Select Enable PIN recovery to **Yes**. +3. Set **Enable PIN recovery** to **Yes**. #### Assign the PIN Reset Device configuration profile using Microsoft Intune From 63897f673074b4981339f2f71c5cb5410dbb4410 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Thu, 22 Oct 2020 15:37:23 +0500 Subject: [PATCH 011/958] Update windows/security/threat-protection/security-policy-settings/maximum-password-age.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../security-policy-settings/maximum-password-age.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/security-policy-settings/maximum-password-age.md b/windows/security/threat-protection/security-policy-settings/maximum-password-age.md index 0f92c2bbd8..5eacf443c4 100644 --- a/windows/security/threat-protection/security-policy-settings/maximum-password-age.md +++ b/windows/security/threat-protection/security-policy-settings/maximum-password-age.md @@ -40,7 +40,7 @@ The **Maximum password age** policy setting determines the period of time (in da Set **Maximum password age** to a value between 30 and 90 days, depending on your environment. This way, an attacker has a limited amount of time in which to compromise a user's password and have access to your network resources. > [!NOTE] -> Security baseline recommended by Microsoft doesn't contain the password-expiration policy, as this mitigation is less effective than modern ones. However, companies that didn't implement Azure AD Password Protection, multifactor authentication or other modern mitigations of password-guessing attacks, should leave this policy effective. +> The security baseline recommended by Microsoft doesn't contain the password-expiration policy, as it is less effective than modern mitigations. However, companies that didn't implement Azure AD Password Protection, multifactor authentication, or other modern mitigations of password-guessing attacks, should leave this policy in effect. ### Location From 6b7d09e978538f262ec4c084d1f6b3b0e4811c38 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Sun, 25 Oct 2020 00:35:38 +0500 Subject: [PATCH 012/958] Update linux-install-manually.md --- .../microsoft-defender-atp/linux-install-manually.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md index 3012e87c2c..137db237fd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md @@ -143,6 +143,11 @@ In order to preview new features and provide early feedback, it is recommended t ```bash sudo mv ./microsoft.list /etc/apt/sources.list.d/microsoft-[channel].list ``` + For example, if you chose *insiders-fast* channel: + + ```bash + sudo mv ./microsoft.list /etc/apt/sources.list.d/microsoft-insiders-fast.list + ``` - Install the `gpg` package if not already installed: From 2854c31f490d6b9a4ce88579bb07ef21e0c7cc1a Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Tue, 27 Oct 2020 09:20:07 +0200 Subject: [PATCH 013/958] add info about setting for Edge > 77 https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8409 --- ...rosoft-defender-smartscreen-available-settings.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md index 263e076dda..e0ab6e4909 100644 --- a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md +++ b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md @@ -45,17 +45,17 @@ SmartScreen uses registry-based Administrative Template policy settings. For mor This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.

This setting does not protect against malicious content from USB devices, network shares or other non-internet sources.

Important: Using a trustworthy browser helps ensure that these protections work as expected.

-Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen

Windows 10, Version 1607 and earlier:
Administrative Templates\Windows Components\Microsoft Edge\Configure Windows SmartScreen +Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Configure Microsoft Defender SmartScreen (Microsoft Edge version 77 or later)

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Configure Microsoft Defender SmartScreen (Microsoft Edge version 77 or later)

Windows 10, Version 1607 and earlier:
Administrative Templates\Windows Components\Microsoft Edge\Configure Windows SmartScreen Microsoft Edge on Windows 10 or later This policy setting turns on Microsoft Defender SmartScreen.

If you enable this setting, it turns on Microsoft Defender SmartScreen and your employees are unable to turn it off.

If you disable this setting, it turns off Microsoft Defender SmartScreen and your employees are unable to turn it on.

If you don't configure this setting, your employees can decide whether to use Microsoft Defender SmartScreen. -Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files

Windows 10, Version 1511 and 1607:
Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows SmartScreen prompts for files +Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads (Microsoft Edge version 77 or later)

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads (Microsoft Edge version 77 or later)

Windows 10, Version 1511 and 1607:
Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows SmartScreen prompts for files Microsoft Edge on Windows 10, version 1511 or later This policy setting stops employees from bypassing the Microsoft Defender SmartScreen warnings about potentially malicious files.

If you enable this setting, it stops employees from bypassing the warning, stopping the file download.

If you disable or don't configure this setting, your employees can bypass the warnings and continue to download potentially malicious files. -Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites

Windows 10, Version 1511 and 1607:
Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows SmartScreen prompts for sites +Windows 10, version 2004:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing Microsoft Defender SmartScreen prompts for sites (Microsoft Edge version 77 or later)

Windows 10, version 1703:
Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing Microsoft Defender SmartScreen prompts for sites (Microsoft Edge version 77 or later)

Windows 10, Version 1511 and 1607:
Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows SmartScreen prompts for sites Microsoft Edge on Windows 10, version 1511 or later This policy setting stops employees from bypassing the Microsoft Defender SmartScreen warnings about potentially malicious sites.

If you enable this setting, it stops employees from bypassing the warning, stopping them from going to the site.

If you disable or don't configure this setting, your employees can bypass the warnings and continue to visit a potentially malicious site. @@ -169,15 +169,15 @@ To better help you protect your organization, we recommend turning on and using Recommendation -Administrative Templates\Windows Components\Microsoft Edge\Configure Windows Defender SmartScreen +Administrative Templates\Windows Components\Microsoft Edge\Configure Windows Defender SmartScreen (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Configure Microsoft Defender SmartScreen (Microsoft Edge version 77 or later) Enable. Turns on Microsoft Defender SmartScreen. -Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites +Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for sites (Microsoft Edge version 45 and earlier)

Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing Windows Defender SmartScreen prompts for sites (Microsoft Edge version 77 or later) Enable. Stops employees from ignoring warning messages and continuing to a potentially malicious website. -Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files +Administrative Templates\Windows Components\Microsoft Edge\Prevent bypassing Windows Defender SmartScreen prompts for files (Microsoft Edge version 45 and earlier)

d^+$+@B z2)uz-?F5v{f=|00)Ds+kK9n9iv7N)Rr~%nO(pDcgy3A)utupRzUW$_{6r zr=tCtv$qg%(TVnwCk@)Qq$De!xch;#b1zXLYQ zg5rK~)5Xmx@Gwr1@;N^)*VByKb2%73%Bf0G(Wh9oJfP&a|A!jFeoS7zzEH%Kd_r=& zjx*fQC3qp)O6$Cti1ydq^@Bx_p!Hf@j6;q0@17$&0WOStPt0p%b+Cg}mtFMF-j5a9 zV$|uRzq`p8YZILI7d>Nln8aAc!s4bpFP{qEc-ffmJgy5mF!$MRx#bKO4`-|1ad^kx zokRq)j68NPV*_Ij?WY3-c3Dwe5Pa6(`FXk71@Tb0C!EWA4?&B-?b!6Q0+`kuu|YY{ z4+0LorfyGXi-8{9vQxF1l=AXn`CJIxd8wA-xizfDT0hEJL~h)}OS~En`-LVhGck)K zztg1$@qvfj%)#L7MvYqM!8(c6e&QyV|`)H zZKN0TBVm8h3%;tXQ2zcfrJyA651)Q4t6&b}M}!E-)5LoN3sA_MsN^d&#rXEmmc$H% zb0q|6BF43Oj>AZmKI&k_G0IkpOeK=n%48b#CYMKG3{M#i4M)r>tkjm87Q0ZE@?k7w z)bw2#-<&#)(X#n)P&%8PZww{@Q`!LLBP2viqgRd58Ix8hLjJS$b>Vw6v*f)-?Zf8s3?Q&eFJS?lBI*d{xvr@Pu5EK%W`)u_RlF(7@4uv>Y9r`z? z(C3DKQPo?r{GzG8jNu*I^O`6lqprhVu$!KopA@kK{)4_xGM0RUV&5vc56+!EXXl$T zJ-AiUHU!YUUK(*-ihM)^iK(Ykv=9g9apn5PTJO619@z-4eYaF-KscnrBl{X^hm0mK zlB!FG%>69H!A@EkYPQCauvznFCIkIsv;b3bdezOv@nJP)+kgZ6TBTd?K7iyyu+9UU zDewHHX@quj>9AoP!s!A!;c9siyA%DYy=7q*J!UtXB!fChd$OCWLoxcB7ObJ*aC#%` zp8fcKekp_XR@Wf=2Pz5*%Ja*v#Y80`=iest@wA5D-}|1xYoV77>*_|~qoO|JVFT$^ zM=Kqnn{|C9&mQ-P&&CodmG`~HovqjiS!|x`{cxR0@Ya$aX^zZx(?ahugr*Zl3^3pH zU<1HyMOh46F~5m}JC-ef;+rtxrt^xJ(Sd1cHV)P)HYe!A^A#joYZ(7y!FQ+OO}G{1 z_0M#h-6xz5`=jkFoYacv!%G5x+`0M}*X1W|SIQu8hCNbn_sFcDj-YEChXJfD0q8ob zfzM$W;f8FO?$v#hGB-WC0~!^EspmVf)Cl6XD1=p~oj}!cJ^oEPLn3cKLW6gwI$}nN zo?$Mz?{H{RQ1*W^dQvmOSHeb$dIm3+(-AZyJM~1~d(d(dv3@P~_n-UYm-E6jTli~Z zi+s*Ktf0TJmdypLM{x#tgG)=dw6M~y#9{3)oJUGDk<4rXrl&U+PsZF`=`g(q$*6__ z_Qw+`^VU-redXOe*qv8eg%V1PMh)d>$8_MgdEZIt!~ zY07R{K79_(*bmx2$f0fMOy!!d<^PbQTEh4-M;6yK)~O{`1`Q}b$~!p7+Bp9 z7lNiVWxI`rw5aVu7&V|No5~$4TU&)BR?IQgfwTD7wgNd+sSmV_Vn#R-h8UGSvSsx9 zg(&)a_p6ZAte10Bgx_lVilb+oy!mn2+{r&rM+#a<`gqnN(eA=T9l!-4WKI};ZyY9H zha;df6!SH}*zhtcbDN{%k`wb>tsf2c2zCmJ_EQqp%6+}~DkThCVT$eEU!QWjyDD5D4{%b}`9hII$h%tcuiM=x;5WE36>8sj zL^fQ$QHEnNL4c4hPz=px%vCQgEesiz=r}0M6b99cT$#UgY6q&&PMreHRz$+EEW$XNu~;2XavSJ6|o|Tsu&??Z3Maw!1nQgqs`EDH#?H- z$(u(pJvMf>RG##IS6J+d;k=B9X0~NY6yFC8EiElM%^}PHeP~I`PjRJNu=iWNk_0CE zvhz8ytdhKfk_Z{eke2UVF#@%9adR+Qi-dVV)p-pC6&)=Fazq}w%r*}4va8bNhgUuS zw}Q=#Ama1--MC7e;$!i`q_WeNB9p~MW>%e_qXQ#%sS=U+!iad`NF9aU&{L;->E(OmIL;i zeF;;1Bj1Wrbho&OYIT1cxR6vqo%vE37^59}84W9-JpreL|H*Nn-l;76{d^mfF!Z~q z0-ScPrB`4e(06!}b*Yv=MnDQv@&NQ_Nf;L;G+N#DoJ)W-5}#vtggpnXTXgYPN|849 z=4>RLOU_!g^z4yNuXX&loQs3=?BU=9=4*oZEwTyJnwjI5D`_U9?qeQb?AUQ5kd>SE z*gBnei@E8WzxiIqzcMzaW&~A^6pU6~Og49dDKpIJqaf!&IJ<&9Ll7;V-b6Q9V&E{V zCJIasVSj{%H1=qG3-)c(_CF=>q~-yye1O?7hfB1dtY(`E?%1&!9mxTZ0$FYR#Y$X- zcY+z}pl>hO=j`5wE_)=|?w>_;K$o|%DvZwf8=YL7sL)IV#7TZ+Z;!q^z@Nj#dU{RF1Hnz3;Ah|E3Th+$Y+BZv{ zVh*(46WjmI#^_(gG2-==%2C1GS!KoUEZXepa#Rc^MkLWtke?j!d#lH< zN~-=L=;7+6g1vBm$Xw5x!@V;30v@E=ri#?G!?ZW>-XMpW5}q$BstI;Gk00E*C*qboikgf2@gm7U%dTebfjU! zwhIOwyJOqxj&0kvZQHhO8y(xWZFFp7s-NebnQvxmt^H&FOjRXWb>qT`<1V{-#jefn zLgSpZJ@pW!Z`~(HR#h}sC>BX!X}(OQ54&^fuc7b1ilVJnI)uZWsx zH^%3Y=vL;Dku((yDN61_I2fHg3T4|mj907x5mD!U(()kEdnjYMd}Eu9o$U9>Wi1Khk&NbPZL#K57L=4d z$(2m#B^I37 za=?t{?G4L(!g)0U%r!V|Hu)+IoK|ALQDXq1B>l&D;6>-X*lM|G8p8J` zcl(g%i=Az4eq(cXyC(%ADLrH z?A`OzJ@(m^4|gg|W$zZ!MQ4Rb6P%>aMc6apmVVgh)p^_Ow0pxwVYcW+G>(~I4uB-l zgMl3wB}In1wdQaLJXy6CzarN{ORm$+)>Q3LrZ(2E>DXd;Epe9J z%Z~2N*^B!MwNrtS$>znbT z;IH^nor!Mx7kSTiL7K-=XBMt@2MRQE_Zlq8Xf}QhUruEb?>+fjS6al2Ai&)? zIRlK{g0iX_dG~?#XN9Zc=*u_u&_^o+T$lA$@x-w5y%?1#R_c z=J@Hn{;WUm&-D1-3jFa<>|BcaeVA%I)T#O}R~TK%=zlJ0#7*%*-{&I9)}0Y=e&6Px zpJCgda>2d3ObDroKJ0Ub69g==_-f1hqR8W$ieK3KLI998f3uP!G*c8z5amVl$@q+sfkAt@v)Q>7bqEM0FeKv{-QJck$ zQtt~IO;S@u0i)TrH(FjiX9>^7(JqB^AZpMc#<$o|IMV*e*{<5{{`Tw5ea4xS#TH|` z4I+u5{)f-3gAG|MEYx3fDa<-@+)WML(C_3mcLw!BBE^!nBH3MWzuiZo)57y_Iz|gM%KTHwSA^lRk4BE{ z^8XBsqaGDA7P?-oCfYeYvaK#Ya$bLn>n=`!Mo=I^3*BG9!^swltmix zMxM5!%oa#!sq%{smm11Y7_3}DpisFSq5+f8?>$2fH9Sc>W7jlC(HhZsJwaVdQ`At> zBB7Y_YhHoy(lHkQy_s|55VT}+F``}G$3aK;`w$V+4}^UwpD7C-|zAMdxnzF)l6M@)b`VnKM& zr&HPmNv)6S&`Dxo%B%#XZPQEU0CNkEP*F$pj~P@=Nu~j^6byQ=oaJl??}k3-#^HsQlc}VDkY(V z%i#G)7ui>sQFdq>A%@GlrmDL!`KP!X`Xs;Ox)qrodYfnLVrwZwNO85@CO_C3KSHg4 z5W6i6k)hD`IfZ{B1zxj@rrfk=`Wt8cL!^oLd;JP}V()X~l(ZH;r|s!@cCKc2@)b*poG`m`E5m z5sxLMQpF1QbX9Tk2>554{5_ggI*^B@pHKh`^6YSJIy!IPJE`!!e2qtMoJzzSng&yR zQvMZF(MZM7??CN076u0Sl37j7%y3eo<MG>Krg@Hu~4N74k*d`i7rxktCP{ll^fM zsm%+-sVz4Sr8pUlcR-~BL1Q|BoOcM*n$CWPjPB!kDStjD&?DhCSQV*f+VB71Y;vTx zT8_9J@Zxi~I5 z1PzB;aTu-n>=>@n$;wLdx>|!c2c8a`jFO;wspe$qepH%YUd&6}0@7|0vCc3PAC;h$ za{d8=q$$trGSCnh8Z&skZM?pr8453@iG=_OFS%AX$JPzC9BugebZ^^xMY=NItY5FJqIhI zi#2W6p|$w_#XZrhq)PMkmyzIxI>unh2f{5W>U-W;A)ZgbWWH|Jo6~hLtVk&#jXX&n zRXyp>0e;hTR-J}27eZSW(ga2bnks^v82u#uLAfhe$~BF>S4h3L8iijp2Hwpefgy4j zU6RxbI9m9`{#6Q0nB!S^wMvk1+uBfZrzYc2Hy|65v~hJ+p+K4^c2c2V=1?*S6$d!` zbIyd40vPE5cZh^aTiu^6x38K4REb5>AKE#ax;LiAOp4`!wjL%Gk%8qW9X{_F5p@N{ zo<0;Qkw2e=31eMmNs&Rk8dab{NOIn9Oe0K!2{$jwNO3YA_f>3ty+${8$d-bD@xc)( z6(u7T6$eZyVX{D?!}~}HiSDKyBZhQN*DD-O7n;=f$ZHP457ylRNdFN&Kw7YspDd9Q z1=`0DchW!CO}rC&pZ<8Hzq~lpRI2$euf^&R<4NI+Dc++E$1iqMzZxeQUc-$b>csV6 zBNI`UIsET4o4kUp_=pF%A+CgnJ&%>vW5%SG9s5=0WgI(UBX?r$3ogx}BF%9fQ5a#@ zNm!H4accK?;gle1!~_9i*cMqcU1JEMxFsCQt-lEEPOG3t>gOWu)h zZMN^EQGUQ09DtUA4mO?1advbhMgzpAuyEMy@(f2}V8H`rN(GC9`ojY)$!Yv1$oH>H z;PFcN2!M>vINn7fB=3fsA*Q1r(Ys|`m$2_I1dWip>QwR3{$kOLd%Mc@o+OwR^?7?H zqB_Cj%23c##4ni{txybzHH~gmW}I6}kJGUs@m36Yeox4;?L>DDYitYIOULw3UMTga z%BPX+7Ku4@Qra($B7a!vWz|9hl!VAY-DLmVI--xk;KZ2|M>ZT=TiZ@pKowA2K|!Iz zLwaPA93;&4J3>=2>{3-L#~IdJoc)DM6(4_j|k;?ek9I zFdNr`>nL~Y+)!AkrRHzSALGh}5|MNd^%!|=0pG}E3+KJJ#+Kdn|!WbUZ7b&@y#znIfi%(7ACAeb}WZ#O*&UO zrKuDmS#(9_$6ZF0lWALy8ix}vg)pYp>*eyV2y=N^?p>eLNBAQ&DaFxvVz7><$cSc3 z-IvmMtu52j!`2EtB^8;ufr^!?I-HFkB2adAe}au6T9h8_bQ0ZJs)Tpsd9)unV>Q?) zXWQhT?d|5?>{@Q@d@Xm50FI&4I#|mQ1ayMeafvw4sKvrKhg*?khrFf!Z%gN)@RQnh`d{Nk(c$C)!tSyT8+|0SV(@Ud#_OtvUDvze4_G$x-^nC@X0i!D7l znzCK@L<$NM6?>mDM^-Z45HwGYApVG2X|$Z)hqX8h(o!tu`~tR%YJDQ=|67;${eye~ z4R3+T@PsoImlu_>IXg0yMcXq-wuLZT6W|<~v~9yPDcr&h;gvffz{G(xPQLKd#mI;% zHJJhZh{X(Vc|wv%B&dbYJAY^`CI*_t`fF~;xTu=R~K>)##S;r`4N2h_Y3 z+`GTKSE%cE$w#r%-MZO2zi+sbI!>*zj#KVjzX*}-q69`PALgN=@((kn0V zUlYfRQKCq_wPpdFQK{m1chsZQS}l9$PZFR2RYgJmT;RpcP4XKj%Wj zL@U5g5Hk4Kv(3@sJ74vjbSh{&5w{oZQ&t!Dk;vH2E;F{Sh1Mtbm(|!%neM|=co8kX zdL%1z(D9!JnNa-8MDe)XszYv;hK@~-ym+z4B3^*>8OVhYf6llzBGr;H_ zc0K0@N}vaDPf$3rr%f7@Q88gjnYmPG14DSr|22}sY5`rmf6BHpz-aoH)Z1l6m7xk0 zE?j(P7X&DSEcF)u8V&M^8c^h#>e|x6fKH^aaQKjtimHjv?Rq)ZM;#yPf5K2@86hDc z2Z?ub%=o2)TAuXPx|jbv3-n4fz`caX{913-1$zYLzZ?YB-2dQ=&93txnq*%qr;)O%K0ELK3h=(HI8EkAQ-}#8#F#qSK#QzPSNucZ9P-K&r9f>FuXWZ1TvU}>-BzKoLPqf%D$rUNKdX27^ z_{3|Y_>#w((Xj*x8`^82uO0}#7fypEK(7P`AiM&<#*a{#1H}Hn)>V>r+>yIObZjs?sP7uYrJ|iB?D{ex*C;DuR1UX9SFQHPyVE z8O~TS{k=xVWyyOF3M79Hg&W_4`Oc#!`=CWq@xEK=>eX$RB0~-rB4Oa7AcAt|!qdHJ zf=~tooMbgprf$dd|63j^cQj%aaSnle0% zZ5VQXtRKg;FB_?@v;hAN;cV}`{swl zvB~+}7MX2YndT(9c5aq`8k61^rP@|%=(Ua(JMFjR2vUnavm~kPWSReD;+t`HG^SLE z`3!0z6%K`)pgK)F{6yS+W?!Jz#3si;2#~BnGAK661RPrl9OkF8AcEL0nM_(%Zev0(}Uxz5X z3bcPhKVsOrf@Z8D$xp>HCE!x6ak&ym>Y=vhT#CoDbv1*+g;%{NW!&`Eyt<_FDw(}h ziL{EPTpU7mLB)E&b$u|W*ny|r=n|C?$LO`gHsMeM2}GquqNI4#z^v0tXzspT%+VCAP8`WDUuZN0r`1SUHg75#w%?6m*rxFYp52%JXI3a9R-Oj^? z5e#N1E5gi{pa9ns`QIr7EGWcigYG4Z_8o$c-wEE4HGf5bCE#bRA>XjM_`~Smj@peN z1otSju>wB*-$U7ctN5=QPAU38yfo;)4h5s?@GA873hS3w;7t;v+|OpD1N@=}3$jvH#j@lIyElQE2jRdLarZ3X_f?9A!h z$X~S<`FgvHk%{StpAaGAx<=++`f;EL$&CF3t5Z``^PgrWk2ZSqqq#}LIYy(O<^IN+ z!XXWss&ME#a_!#zgWb`_cYs#>*lPQAkPZp!_ZX@6`;)beQ2tz170oSpr3azn=(viD z3|V_fHSI&05^AMNG!udF0{3=_UGIN$7AEV{Fz$`k)QiRK-?%!TI zM#Fpep4uM}HI7f~PRzEud0%L>b)lw!BAh9g`<)N~QQfCEYsM6T;{Ye-5LOV@gRUSW z0}n7t^G4*mWx0ncxSfgb_c8+*;B|%l*T%&x^+X*FfI)6U1Mx)p`Fx&^34|{FdPw^# zWPRGvUnEmM+tr#3@_VhvfD;5a^QPJqYs%<-^k8}O;T-jNv?P)M5ZV~1PaR#Ctm-}M#Au%d;J2CGtr}9kg1H;wXLaS5zo=%5pwVFbQ*kuYUqXZjAL&1 zP-EfKR2R91`&vB^Vy6sT2JY0J<%Q(-OSEW;PsocgFy;5nAC9(XQf^Cpp1ra7Qg2*M z`WJ1`hyaSRkcL`|NmYN0WOMSc%Oai+EMNRuRC#|P9>U!dM@M3Nj zB5ELbMWb%PXXxPJ;IFQDaLGKeFl1rzmNw0~;&^!LeZM!Y$?KtkNUYa<4B};xfRMGT z4hx5t;Y}N|m&$hYTF>e8EvD`N0;@V2D%7-xL{I_UAB~NE2AA&d-<;iV)n%Qz$FZJk zgJamv@9XuH08-Y+H15@B3@(;WuC!b)vFc1p(rG~z>~mVrD(~!VCun^n>BB~RvWh7y z1#ZRo=&aI5=pDt)!lrj$-g~%JM2;VDBCSYc9|s+3c>N*rcsh16f&&s~Cq#v>s)* z!7oQoJcL0NP}r0}#kiv?i2|ZcHu$5bzfL~UQ4wr2*oR9Y%9)>-SbpRNl??_c183*U z{z8nQFCn3+Kjwq{T^<{0H%sWH1+E#U>{+t!}e7i+ls-I5waoj?B zpO@qB`FYFNDyTHKG@GSF#KmnsHtn8O&sNi(M|^yRLFL#%9y+E4O*aiMmnU+E-b)DF zteclxVPK%(=8~1!yK^I3ry~@TTE#d}nCF|c4sz4w;ouz{Lf^x2!VDEhw7P}0*>nfK z|55iw?95?Q@s*;B7R&|DsnTWuL9X#CPz4Js$nCZHX@9uE(()m>!4h8A8zMypXnLHO z>OcWo?d02`5-mJUxmnE8TUONy8DV(k%GM#z2A2tCaDimNhOqL&5%dZ1{!taW(DgdFcvAf>CGHsDK6Oyzv+JDqAa?}7#Q7H{`xoul2zt3FvQ zs6+v7u;o!On1t)_lScv+d*M`(%PyH}s9$D6KJA?Ne&dTEpx9t4$BMrZx!Ncbka&?h z(gn3VZFF$z+1DGizncQJXspnzw&!<(U{!MzW2}c9+^wn#8nC*hg(*cTKqN}a2hAKe z_-XyjER1ouVZTL2t{|vFj_;NxJDm1EH=aR^xw+JR-eKL6hmgYj+OJIS{g|l}`qxO_ zs&_$>D>Rmj2{`C3kZVqO^o|S3pKC9+-z1=|Qh!usddO2zA*g3|y7C@tLH`&hDHE|G zHi(nuRbyT7O7joS-E8{C_!vB~&Ql+WJ=gSq)Rgb*<8jB|p{2K6c6`2Cy?sh4CPh^s zII;r+hnBKxzJ~0d+MZ$es9JE3m7X~?gd9-uy}R|&eNA6Ukui+L<33wZ{(fvms!-(7 zli>y;>h^;+3!Tw7T=gKSEM+%io%wEzP@hx0+bY<5p}X2t$zNOS7vq6?R*1Z|W@0t3 zzXmodsd-uZHyV(_X#uh%>%Q2PE(htQe3IV>)qG1yVMg`Vd*ty|;3#DMd$?*ect>I_ouZ!*8iSPNP#jBHAGdF;nU+tGT{9W;_|7Emui1 zJ*LX|wkWBYOUN|)L{q;k>+kN@2R|dFo+`P(n+>sQRdvnydtgm@yH?N_(=3uz!Lf$G z^ZIy4_u}~YETM2Q1B6@7N^lM97Jh!i({-7s+kNVdZPc`b_II&iA!SmtsR=V4Zo}v% zDkmqm8jmeR%;dY3clJg0F1gnES!QO4C!+4Piy#Cwa4{ZehRnJfZTp-_Qz>;;1Fy@BRy}dy^UI`3zi3#|0Ic4cFJksc60r010A>KV5#?)$19@?#gp_ zvu!En^8%Sg2FKkzbwhh+kPNU@J~mU=Z7*?p7lKJ}iK^0zx8JC)y{;b8EaO&|RqMW7 zFkgC&66@`-IqMJRypLDvzOOswRt=p;{X*T}4GEIG~T79ax z*otQ@XMd;tTN2n0QM8%D-CgG#oG6RT8(PSDeZ}6s7*)MFMeG&Gb%r+=`BIW8+Zkf9 za5@F*)k*B{(E?w~;>7D>ZHlmvRbstU@h6PYciy(=IHL_Xbl4p}r^U?Ubh_mg%DXy% zHbY$4dN_Jv2gzf#HCiAe}MOJY#tE6Pxb2Etl@Z<5YWW=Q9#!}bY;N7wc{@Ig~ zPU%-xyM+b<(RnJ!$j$U(?Le&UJea(ko}8~*FreoL^gXK{LE~Xv zlOms_tgN?D2gA{1;$D`KWhh$v3quMuS(d9(S7152e@k5PsAR~>R+w>yPrJRjRB^){ z-G+pNgB{GO$K9*C{JYLs$A`~zu*5l%C)Q1qbumET5(*h;B+QbYC<`9uP1cUVdhfS1 zqf58r>aF5$!;LmK^MxkS7boobw&2J}!<6$&K4R1zxeJXLPc=W3G~;0e2YV-uf(o!$ zvVf7OLCtr_V(~ath*@WkO$E208s_u#pE^v++j^+6hy193yd_80nYyTsCT7Urf!uWd2 zEb}v1q|)uTkB?I2a<%YvE+s+^S3@G2tQ3*BkN~CL@6(%FIU3`-G&y-vqVNERE4gP} z(U=960r>Gi7ReF;qtvY@0H_7RD?3Nz|t`n*kzZ@W)8h?8@p9qM&9Wh%j zA3?67Kr2TowA*a8Z+Y&|Y-MV?J*PmSAE? z@5_rAqPjl@y9-tz)qi?xvSh{QaNk$TAWD)e>0cWd`#EguZ4LdE0$IuP`d4R{9v5#Q z>E6##mn#MeK?Q6Z#05>$+Q(>|-1!>2|o+bq=Ea zM!#w%wz4!wGUHT_ZEyF^kUPbBfQF~R(a^br)kV#yfMJ8gGcKcVig2BUv%kkgcpTJ! zDZN*kUf-BC&Te3Q^pUqa*vbtvR?PYy#e;TP-AY+Hu^unIg>y1oG70~**=@Q5$(nk4 z7}yAUAxbA9L*;4rKDk|%azOmva22KI=DYB726~z`d%E^Nfm-Us5Qk@rReP%(Zq{n+{<6W6zVbA9<+<^9lb=wj3=4 z&CI9P(l`AZ|FKK*xb(W~-eJS*-bw%YM0yQu8cmy2v(2j8U?~zid{;tHfCj!SyZzZX z!uaQ)yX<(z1&j;t)Ptu&@(>dJyAZwJhg(KV=3-^+*=pFP0DNB-9H2PBw$6Ow;oq@e zE4(A*lJ6#sEx0EqBXow$?A^L=o|JlWz6e{X@vaw}&L<{lBZKy*R6W+adaJ!IuULl2 z5wUkN7|m4AD_V|R$jqQa;d{bm(o(naI8Ack#SVBoS*=Fl0wVlsft%zx-df95n&;;S znYRs03|?kun*7G3uIDJVl54gfAu}msIv#MjHfnIvLCzl&7tz3(PgM&eJXSslm)IZhS*2BLa>M>#B2tY_eLqqHK`Q%_{Pghgn zyfWzq4n*#)O4WNyjQt+Kzv@(m=H(p=G6pB_y%U;}#XLR_!j>WKG;R>^&Ha5q4vUMF z1LA1%@|4kb`;;A4{`Y6Pl$-J9K8)K~>N^O_W}o!hEA4~;S1ETsWj5Wqu3ak4HG46426oCQfUi^ z1Zlumff?1A`QBcCPacAC*X3FUeMoQ&8-Cq zV@8aa%mQv=LnPXfxB7;xBGy*r(u&F?s7VqiC~Ei)LKzxr-0ql^vx|AjD!^@ZKb)_qYc0h;OFF#%}YD|^UlhcW0A?$#4lKc4L-4c6bCN9ppqbee}YpX|%hbNLc_=a|+! z5jc(;*I!CZ!5r+k>Y%L_&#oE2=O1AIJOSTQVOpT``U+YiwU|eIEni0%;Bp}$p`)Td z0b&TIorKHnS}q9h=R|!EyA^p7G>E~)H{@lz(;E+AJRgurI!iS{7q!-TGn$DCR5)Ru zCd27_-j^-N4D1F)5&Phx%_1#JojtyPy;*(zkE-9)#a@=7d#6#aJK+aRER(w}OageY z6fmH*=C?@YfEX^ItoQqOONdkobPy~HE;9RtKQb7WI29-faO{kNlAjGlH2*_|8VGW;;VKoD?En=XQyip^G z0;W3I{td~UuvaJ0HtvUx1hDbJgI%gIHgjw7j%$+-MV2^rKSxybuM$0bgQ?9684}*d z$B$$VRZ{bSWPd`09|qk8ciYmronJR|b7r%|s{&tjFf8DyJoX!S%VF)R&D0#$LUo|= zZ{W&ZC{lNt%;YY`|AHkEdD`a)rq13yn9kQL(BwiiD6pEz4!a!aW*9)mw0y+_G;%sX z5!-F+b;u>K`Sag}oNX!K>^l?$*6dDlsiOcV0uG>K#eFj!;%(Y)b9Y>8m;iT_OQ%_$ z>^tm}XyOw7#yEmNFm2~_-h=MO?bn))4QiYWDOxuO?|jN^P(V|eVtumY^+mj zV(|8E?i}qYl$h6XHSZ$%^nnGU$97Ijb!3cDgXQatZR>xNB7eoENqMMm=60-nCwCp~ zzA|WI`viV6sJfP0n(+QvJ~dq0Fndfen&PDBy0BG*STN|iclW~zEs!3Jgr_BIpv~c^ zp|KIB{-Tua|6i3K`F>CyfE4-!v_^o-9~FP}fSkswJ>J9O^ZG2t!Sez(3+a4$7YZ;- zAB5@h`FlqV1%j)Y9~d+&!BX-|i*#&kCUM`}T?<)cG+LWJv)}}rg7Xfc#?c!xgO;Bt zMrfK}FChO5ngezC{~FD~|2SXk=3#S|w42gZzagi}_DX^$ap#f-WzE=pH;UxQ6Rt^% z)(Q{P(?bX1SISj5tKwmS^rVds+zl+=)E#Y~}tkn$ith3O*&rlTYZpcBmzu*NMlSajX_ zPVYhC-q;g|sO3rt_0Bs`U1Bz0iIVM4mm8a50)>D?!#*Y`JzfJUdo zv$hwqKVrC0QN;Do5LlqtZe)Xg9$5|C{znH0jGds|N4lxi~Y0*f;;98l!|df z{V}XPc|{$}%7KMo%9FM8Hng!^RonOMAN!~lVhbn8@4tnsn--ye&ckzona_#4j;ZnQ z*b!{+(`?(sf}b&nFv|Zj7Gbuth}?i&6`Cj+gl`hE=!+u2B@7Dz1yGw1ohq7r#zsd^ z7t4|3%UHjp>E*}(!Ic{zNWg5|VzcGo{P~fs3pix~fV+sl)Z!fdbok#Q#j%TTEC{t; ztm&H$V2%6pF;V<)*hmt|ZzB1*S) zhoMo)J4Z>0m6J>TEYU+i8uNNt|4ilmXFIbIOm9j-{LJ#`*^QWvd}V$0u{ zi8=)(nr*7O?0nQZJe5BfCpG@xu%ex)8+ZV26VM5lDFp@4W`%=`3rgU>%gW>^PPzVb zwI_miMFK>JbISjG*^i)K zQvcQ4?Bsxg-i~4;mCvnj_6FA$^9Q(Iy_|}X{a=2NCH@1=12_wS|BM2ZPZ$`~==1tX z452?d$kiRzXK*_n5i!n|N~i7M=qLyveS3kUOoKwer)2_4MpnCk2+t$r2jQm{${NS* zLf7b_7g}Y?#E}CVj;^jQASC|JUv$W`BO@m#27pFm0e||yU`b#p2(PrGgA;HCgv|gF z1ik#R?JM-N(Zp46hbJEX2~gDkqlu9Juc!6DulbiD|5x6u9jqu;pb&x@#E*myeCYTj z7f}J-U*Em{@tfhteh1TOW*|dh=k?1K`|jp*Z<}K!?)w_KRTkUbJY7piceu2NrS{ZZ zL${Ok-=}ail1mKrKB9wWP2C;M$QC)zikv#HjnajRd(3!0*RA2_MV!Z?0(FE>zN%NE zDYZapMcuT&hupt18)o!6bYrb2KDK7)&eiKLmDf6mZ514!H0Pxuf)T{pXg$63&jA!9 zG9P$R*X=Dwr*cfqwoK6%aQ8*-0`yyH)?7EZrINW!h!;0ekVhL_9pNW-7as!g6~{Zd zPQZw}AduK>tE_SH+jssu&!$Y1Kwm0SvGH~Po2M71~-`Ce)^jAWbm;8S=vFIGAyg2|; z)JwzY6Bk*yfTT=|1q2{4?N@sT&6A8)f}V14+x&$D`Xl18zUl^U1}dW0%BcmZ3DkRW z#iIER5V67ESgww@7BC#CH=+>cm*zvk!~5Rs^qQW}Dyu!65`5mRQ1@l|seT;wjQFzs z1i;`x!1&5^zk1c0+C*gmDfQ>wLLf+A8Y(K3glB5;qOC~_j+K7unzz1V;B>s8?nC~y7U5J;)sRI@I=<|$du1=M)Y-M| zGm2-pHjy^J=saNKB6ed-Skh3&rzJo3$xe^`6$6MTm685WotEg!^J}VH!`L|+s^(J_ zPy7zI{?Mp@zWx)ZH*Xj2Kx{HKi2<-ZvqHFuTrVa(6<)tPPxe57UFKnqZ9b`w=GT z&vXI8LS$(;yz;ubva$f;G?uxe*C{QYojh9Oo|(II9Lf{Ros4e;0U65F5#!8|GKOhL z=-_zlOO8`l%-OBtg`~d*PRYRXGl15tRcpP)4v!a1g~3w8nw7CIxS)9S^wjj;Y?_l( ztU+K&LxY3m;c`L&*B0F#`OM`y3hHq2bC(;@*~Qo*+2qe#*-hMsN+btK&nf9gYaNZa zTyE?4jpFHy{b8SUSy@s%PMaOb8{beuqAv?ToZCbsI3#r<0zQ~Ov(G?r6h&G3G9b_p z{PlW^bIQEGf9Mjz8mNJhgw|DUx%E=0b6J+(r2c3{+YJnSn2fTo8c^oDj9^CKvN2e< z+6oHC1AUufS1l{9E*$9D8M2XHAAjW`MD}2D0Osr2|Jzos7@+wCAJFu_S)fwYi&P@Q zXoUvv=%NGnD(1+WQFAvzzE3{`L0;>hU0vHS`dl^AUWs%GB+zf;Y>yv~Csu~6e*#ln zSsvkC9b>gK9ZcEiw%iDgNqS$ICM!~&8mR_?TabUCz_1mQ8Xq0ulncpeXy_=sX_k?} zFUoX(ge5A#eR}(cSz|8#ui%S-Z z_Kp3vBN&L^daAM3yUX2+$rAU8A*4x(KPRnzg()%T0L!&eu&b9JIisnDZZAw zr;O>IVU}tUt)1W9)bY(=@-gd}I!6{9_8hfbiLTIdGwvu@5c$E0*v9wE^Fc0=hd7O6 znY(P|3D?ajotmT0eQYXdYf9@<2G{-4n%W*peZAzn-@S0kRX8^UHCE*M43{h5asSVI z(Nr}EIW3MshvSKkuP=Qkdja}bM|L>-SI)8L&sVPdBJfI|)f z@o%K|0T5e$hNFC~=Jy>X!3-KvMNigNu{l0fWnx47-I#(lCD!?1TU3z2qvY(Id1mLbW4gK$Du{{&eI15kl- z&%q?fs?>1H&{*>VzQ|ZD0Z-E=m&2-DLc+R3W<8~Q2m$*!9RmL`H85c0R20Rx`14~V zAds9;j1wCL01?1;tJ2V74krm0Dgl6pP;3$WU+`Wi)y0}z1oVEIn-1jr>mJZF5|%fw zy_i{=O^|+eaNtKkIq^6>PSVh*R7>gR($e2umwCt?I;Sp6&R>rJ-89IDy0fz$gbe`= zzNb-F%{a~XUXXfMSZ&aI|wFZ}68Q=_ksJr)1)S%@v|aiKkG47N-K_ z4=$Joi71mrAnVjf^5?^x<06WU&Q$Lzk;Zns#R}*Alt>bQpy8T9o_Tiey>F@50MDMo zw_K?^BCUjrn&IeIiH3y`u9!1%PPAJh^%LrwSeXo2#1UjxI%ADxzX46ET^9J@@4cP@ zXf@SURcbWLrmp|5=Dsqht|eL%NpK791b24{9$bPu1lQmi+#x{&1cF0wcMk6Et_OGb zgERZy_hxFQ=Fikjy{b7s`*iQ_-Mf4Bl3w2j*L8|4Vk<|##abYSY-y1QAzA+fpZ-M3 z=V4!OD)JN(jU{ckyz9QeTP^EQUdpdKpIku?7M=>qBcWu}Hd}Q+KK8b~#I;dQ%4_@o zGoD%j#8Y3E-`CsFU^S4CtPOd{^}IZP{s4O-RJJ1gA zar&p){Bn<)=oDTsz4gkcpK5^qHNhJl*$(C`Ykb~@zUBKL-mfvSNf?ur=P5m|2J3Cr zOpu+D@>Q|%X^F#{cFib3JWvMQjB>vGcZny8O8KYh)5Bp2T6F6noUgh{T3_~8!PO7e z$US8)U`s__7zfQtP#LoGw?f6RyIlT43l^jhX#{z8%7Bs0nG_^$!5<7~?BI6($R{(| z(GeZ2Q;XSQCoiKD+SunWWKkPF zqI=hiP)7>8c!B?(X&_qq$^QyHwJJ2JF;t!H-VtS7+G;sV>;Y>QF~PWm)K;Q=fqr=u z_)f^tBE_7}aWvi9rTlW&3Lz1&C^0Ja%h<~tTg12FbnKcEEx%LY^szf5)fL`qW#Z}F z?L7?6x}lJ3B)cu+ep(Bdr+CfYDF11XPLokZ%x~8J@Y~YTBcN|uYiXUtnJKZMX<*IW z+T~kjFDRW?*U4v2Ce<+E09^fdW$CQlMd$s+_uCuolTqPy=bvM9ImNgiy1tnc=ctPr z=qZkV@_4nfx^K-3M=xl4%J|e|9-^0RQEMUHV8B2AlWfI!Zb@(Dr5qlvvL?;9?6N5d zEzsb!hxJ5zAGhd7Qj=@CH%ng2df&*v>9V_?|EIZoKcD^EbWU4huK+iTisSioi*IfW z=$Wkd7vy6@xyL1S*uFYTY!IgsilKDM%Sm@0pkh*M$v4Y(-roz;qmk^hA_Hk7jdqcoXNZ9!RGP)?q1?O)4@80-#a z63%j=fOU;$#PH>(bcKMQD})%?fR^!gs|6Fv6TOBCjzcW}3z8%Z zTIf)i^n8i#@=x#jbl>u6H_1s+ZVUdTQM`m=baXQ=!gep)JS4gt4l5tDEQK5dPoL-p z&B_TQliI$8vroyNigd!d_OJ4&O7cw}!1{aF-pSMf~ukNbgM+;dg3d3VPcB3N_9Hvp~@wcmbckdIgGhn{*{va1e~L zv@Q3a3r&yaEyZVCetUA=Ou~U2@Lzl#z6&h38+sH_XjR2=tbEkC$ah@-K@=f^>_gdI z3H#jp9@9b-$gRYaN4Ue1Oy(zoOO#EZ`LMT+Ahf8ZqC$?T@xKC0;f_vfegN|vt`-)1 z$%jRKXt(MAK9G|(-Y&b;SWq1r#?bPOHcd>RL;x(HvoUwv+v0JKf{MDy&bS)hSkKeL zIrd-b<0~h$*1kikXSqd4Jr*>su4a(XSzrA!V~6lEc=9i(lj8M(C$r7-b2I@h>%bB` zUu7fYhrpY#(}GlURB4gr+DO6N<8AdFkZq{nKC(Co@x~pGT|ES`SXbo`{ymTjTTA&k zG*p!l{)py&x;pfW#-h%CL7xGa=TyKhWytp}-%=>d+trcG_S$SB1RP$?!Bb9vS<}?C z6bIF~IJCyE80P8#?w*!J9!CvTn6|RXL19q*_S7!p4-zs_4T(MPXKZ38n!ks;`FV34 zem7opTds>QEp_JPcsfxqU188BmyB}~33hvFvl~whr7ZxiS&*NDIo6ybz<&r#vok=Z zB`E{JXHb!Oiv=XT`u;I$YpL`gl zk3{_b2=m%s-Oxq$+>iAvCp(9xDl*Sklu~a;W#875;*y=H=zZJ5#;PuvXlt z&{R{qKAI~97zr^W-?7Ht2M7FmSfZ`A-W@bh99`%YaeDvx8JrD;a4SDoy!^OZ=p8sP z&^w_|gBvk~@_@=FWS{?TG6295_=SU?SaT&uuNgCH!Z=AsMIPIOC!1nN{c&%&Na0{k zjFn)IU7L$kx$|qaq!8(!E{hpilSu656fPb+Sk@lXDtzq|Pt4C^Dq=LaLwOXL&og2*e4VpR73Gz zhJle!m7pmMH90}&Do_mh%1hd3Q#u%`GKSnir!zp9C4=Gv5}%Klo14`aDj2b7EfMjd zR`*lFe-Ackhl?tU%dI|uQjn4HX-f!tOBrgR?>s=BCZs6fzErGRr{noGKG=pL0k(|- zR2dHU8Yz(|>H~Y=rQh!JP}+^SUkmIw01tn?$%PhkTm)MmyYxM#2Un@f2CZS)vgk9I zOY$GEr_y50UK_VwR0Q?0R9P?j-i1IHa}$$a85yXJ@8dOKL9>gCo@c8~03qh??jnwD zZ`S+gS1ox9Zf=*a1S!2gH#IQ)dH>a|nPO`Rn>0<-S3HHc^hAeR0TNITq4A|!%k$;> zpCh}NO%WpS_b-*2lKQN+gdl@j6u@zfX!&xLX0#nLXs!b10ew*`5J@zb6+s3=eXUn$ z;}q*MU#27IeuCi#af^*uC)TGg6)8o%=PXvDAcQ%>2iCZ<6g}dI%TNv8+nHYR>xf7RdSnclBEG@v0qFMadA8x5V;F z{;Tkf^d>En1OT96R^m^2&lB1~B82!&5;i9X*%I&-=wUseK|gV9bohh*h70l4?27Tb z3;Kzh-DhBmzDNQ=6kn`6tpIr=1BHv*yQ^DLVT&~>Z9?4NBF$pzB@NXb>PO|U$GoJi zw7gxa9Yf|HJx=@8*aGn?WXGgzM5EySgoQxv^YilBS1%ftTCvqwwC^81;aDO=`6ZW> z1C}s0f2csO`T0qJ!45muyVQ|zyXq_2DiI&gQ+ogeOQMI#abLoHd+wY27l<8=L_6yX zu@`c03{K+*f4Vun+Q($o3`s6J!h0H4y-&i*VOu7<`$;a?UTgY4ddS%TQ%PbT0?wM8snnJQ$T)?>$CTbJkl8 zYmCIIpO6|o8-R~qw$*lb@GJXFQ?pHUyCNKoif3dLA#w$ebL70VT+DK1xP%O9i;|bl z+r$(?OC4I**dKK6+Z?3PFj_*wq+ev#v|%+|y|OJJ4D~hcEhn$#2|hs?$(+jvrUR+L zMuRizUZSfVDU0yl;xpGjx%2-w&XzxmMuvfb)v|JqrHhS|j8Xq(&X$T;sP%w6U9fmW zd2vfe%h-L>L<5NTP{eo)1wvjs0~ObBAaJvlNJ`Qs^&RCv1mfe>9~~8~@>Gwi5EJd> z(ZWydX6OJ_Q-A6H7!`KPmxgaJ-fA+n>gx)*n}DL94N267hNz41T)a>@M4Zkqn+Ha47t48P3w36ZCe7jSO_@o)N>>258(S@Sj*f=%0x+)LQ z0<@3OtE;JWB0+cNP8~pjhP5WYAP-YbfvVTOD#<>!wcw4nPGRq51wBlNu%+&06f|~G z5!4+~V*R|#IJE2x%_4{p!M2m2!~lXCmP|3qIzro157#YMfiSRXNbhmYop+8C5Y-AK zN&TEo#T-htEb+)rm;Mf&ZddncGIs)@;Qt+SAFAsA9dn;0_Tu%!9~n`HQba?;W#Y|R zzKDTM`Vw2!e*sU|#P3QM3t#SNP8FKl{fv#@`%jm+CH$sNGSJuba(*Y3Trs5*H{^V?Qi`r`Sj)Us7uIkmw4Pl}F7b!*EIn)f`_8l_?MAOu#-Je2H(gg~ zd&~Y<7k3h2-|nj1?yc-T;rKMxHmKBZhcF)^jqS2GIq5Hl4moKj+RiHbRUOuCU1obj zf07jpGPWzEmrSc8Sz2El9nSKuAo*5Zrl-pbG9B<1od;xRUp9P#hw#4c9DgGB@e+O* z&wv?TZZfSKGpjo53?*-F{`7d~WK;R|=19&*#?y1XAh8SnJcu?8X_wLSe}?}j{ZIJ+ zm*}c_V&;0{3ZXA?i9aS!)et0M|3V{M!bWH??l@74>eBlkkTzt`=c#E%gX+!A7fCXw zdZK0}7SeW-S5UKoD}Bjg9D>DuuY?PjJGro}JAX7@8EHTG;46Ql|yOSgRT zKJwcqxMoGOT4#8K0j(*k40Pn?f>2@_^VE@K@*ntXJ-&fKUj9-kX7lEgVK00Br(k$b zwOvB^3y4`PkM&I32un*MMbO8OA0tk3v@y&Og0iE2>i>?Q<6zOcSC&9DT~IKFbEGIZ)w3MqGzU~>vhlR@@)WHaPX%uY4QpQS>LUCy=gyRhIp`C zX&6X*dJ$?f^A!^Ki^}6N$uxCW98MzG(B=tvuu<=do3!*^d#hGOBUfTlw-oc5wxs%R zJkNOb{58jTZQb1=G(PM&Gd|<)79`KR%Bi-g{(A+S%OVV|?y%A7^HtSVAtjNgVKlgH zT+j2MdKI_7^|{#v9~j$5Nv?H|f6^1hyrwp8idZ(VWMPwP`QJs&wLQ5ZMOk6wA^5h1 zdS-pfb8?kwlj5c}DbO`ZKC7uL7+tflD$+(x&O>7b41Kw9%RFV_WNgk z$z*?h5VuNn5Dvz2&GBxVNJs63??NEB-R}%J_{ndY8F8iM*V_lR%C!>$#wV&ae4SeR zwn@TohE~~TlAgratv9#mYs#cczQ+$6)om-0y<7KEw?>|(0Z)->BKAe}XAjF(OFxeX zT4$fVs$Fitzd5DqBcQ7BV->0{FT`wvL$pyzixwZF>nN;lmm@L~q(;Hd>tfq*+zYAR zXoSqiSA8INW4|y7+TOWTE#%S#8T{r3ox1e$gLwyCOa3v zo6i02(UqaU7!2>7<@4Pv>3v`x@E66QB~Oatg|mDrJj$zEg?Ha%rc%ab^lBRJ^EWC- z+|nbP^T8apWX{93uvc9l)PfyP<3~~wXAp7tq*1yj77bB;?0*^#d1`qaxziN3&C#Rh z-H#2x*dl3tB`j1&t>6`x!|sd_y$TUl=?vJJH`3IfdWmo%S{;+_z5Ht2<@|*F+p9`& z#nZteH0=~}ZpZ@b!GgO2a$h()+uLx|3n9?I-X6Op_~7bI?rHi~6{45WpvU>#ZkxH~ zzYbAF3#!69D_A)lV_cDtMkuao739m;<>MmI_K#!OxasIpfhzRJt-->oV}eKQ65{Ec z0*kww*pR+#tt~|sd-wJED4OaHT;>nK3(Wmn{6X^ctCUXrYuYgzfcv^z)+Q~YEML1 ze>68}F8kr7WF+LI&Sl~gN&2(yPKn=#tajo|42G=Bvh#B4)n&iGf1g}7jW&cTrF_;H zzdX_bgQ6!`k)sUBiauVI!*ia%u5*bdIv{*njn8mDYY&gX*eY-3=j;187Ls`Dc!f{L zeId`mXWz{#ElL8U7*!34ZXzS$L||u6Ls8-^$I85$HsPyA_kr!=MNqPX`9p{;5Vw6* zy_SSvt7Rpcj}w%D43i`hLAJTy9UM56qGqn|{1}&|{rXpi&Z5iad_fzYroq5uGVpvF zo=IVbN;0;1STqN$)5b4KUs{OGGKEN;@xcKtCz_kFfn7I5){=;FX#*-j!fLy1?hl!J z#X>E#{DM9Kh|l*KLcQ*voH5K`!PS@E^EldskyiW6UHzr|wR`w2^CNs)@xYaB@b3bL z>IlHazDXUVUI)2|ZZEAs)%ErLD&gjCF?3UTEAGW$hXPNte+OIZ>u|@&H*vL!YwRq@ zg4I|u$dXuCK{D{iDdA%6Ouv4KT=M)>2`|l4PM(ad3Pfq33n!^g$Z_SceDGr@~KP6*`}yhP>)s_)u! z2<@3jMl3LgZrWVx2kR|lb@5e}Tue4_fBHy)$_~*m$am&MCng}B&ek*>1EYn~u$!4< zA8*vcMyGBv_e{&#-0LR&SIgUkC-_eg*PHnER2Bo%Mv+SO1%zfU;qP;T^{kM2s)p!l z<>>GEndikFePbu2sq6yph;95-R&zJ!IM-sdFEz_6my7h5biRzfm^z*;t5i>fve&*E zLUckYTS7GE&|h=2-Y!VlXKW$`Z=>!R=x=6&2!(0wL;4<&KjdQss#dpUT6r}~3|cUe z<)b7cFFoHZfrE^W8K@`lyQA&*z50|Cll3Zf6b%`Qk>8X!GX_%>`WgyXLy<{Z|;igE#?zJH8Xo4w*&QD zdFosv8vd+XO}ZUN!NPd}8Y$gKUxY4M-e)&;HiiD z4P(II`E)Psr%R_j$(57EOtWx>jdFPaJy8X!Ho#L#Xj@xjQMOvPD&qbAs&ATZoIPJp zMu}yeLgBJ6hKQQyPAl%gBt&OPm{nR)HyLdzm099%<1J!<-N>>|J?+@1WK@o?AR-zx zH5)r;n@Ve~7D&`$N3G*mc#-|v&r3%~G0LphMpQ$S1Nh?L#{F7-UK= z7wQ?Bc%o7DM)qPki)i5FtJHS4dD{bJJT=HIP!>=rwJc(^y-wGg%7XTlb(kvJkn5`5 zHJ1nXQb2`#ozfhpYPyhJFNw7K=8Eprvei?GM#k_aGptPW;)3G!j~@?4qgAr3N5%c-Tdx<=49XXr_^Fnm>E}bWxf}Dy=;N&L!uK#wPP#Fi(?Gi zx9!|>$WcP6iq%)W_)71-Zs!haAoVc{OWqF#y}LP_bmzYzdjEC;jfto&AL2#2xldud zVb)%u2$C8W4~X&SC1wkhM8TKyf#q&z7@}R_3@dBp*$*PwiHa3RkyA<4SQZKhhth}w zzq&xrkn0kwt9{$|EY{9TVxRn&t!Oy4u4yUA=7KNvGbvZ@gc9rQa{Mz3&I5gQ5O%P( zmFeLDEnWtr39%u<+H}~C zo+g{XtjdfwFqQV$rM>F(N3|`D{Fogn(N)$$)ci9_^SAc;DLvX++-7V3am#SqkWP}2 z083XIlJ0VD_pt=`V@4x$+ssvW9lA-h`x+TUhPwGvZb;VSe9qGt+~t{RH~ZF!tBbfV zS)6RM)JW}gh?e>;`|Nx29o9~wff9p8yQ!p93Gx?s8Dbba=!lYlQ$9&yRA}yic(Fp` zs!MK}v7j@Tk1}Xm%NPqtDWVZYFzMlxC>Oc!6uS^5pm0^87!aayes>CHudO(mk`ON; z)i;Y~;B8#AT+Gnp*CFx29vlVrLQjiM9tQY>(%ai`-#G?~L@{kKR%EQ%y)r3tyVM9q1@-VZ7=)v$twm($N-z6JxDRLMR)8tCdVO5Dd5@#| z)J>FI@MNDOmZhTgNA{F?uw!`+{UYY{A?h4!0#M=uK)b+3 z6MDKhhR_5*rdJIdWLk1_xl#Qpf=lR4)*RRb1vvLo7ft1=t(^Ge-q3*nY}t{|ak^2=rMm?ByIag3>@zwP4QB1{=KH9ty8Bq=_}BLzS;ll$jQ3By zi(Pa;W}_nem?1pE?_){FH@-tKDqvz6Dv*(lR!KJzw!1w$vvGcn_BEkaWWjXPaaWtJ z7nwfno&2&jDYFj^-Tvj|1~RHpUD#S?*uM%T`z=GKaXMauY1!|#*+bmmK_N`M%h^AZCd%pmw>1?@jC0vPb?!*UooT)>Y*{T)l7IT^AxSp&k0Rb0$P2g68GT&($OKh-@hMq3F$1d}g-JN>oDt{Ks_cTa zs<172KASGFgNI@fbBEW2T0M69Kc5djefOc>q%ejgQrYe()6?W19pCk)-Xz2`awXY* z5X-pk_kblfP#S_Ej`5zBJOpD48t4y!ycZUD0ET!3JRKh*P>TM=5fdmS&EB8_N`*wb zWM!5d`H1hlyZn^!U*j-TWq}H+JX_n_$6)zjI8+!|Sb9OkVlFzqET(FZkd!`iR(;&G zvALIs&^aM~CWb13=XRVoKy9^FZ7L094SPREb_vPL%m0jyHeaIU8}xoC3r&QH^-)lW zlFRQ7NR*+v*V{kp0MA=-Nra;rRGWmB0`$E(UZ#!>-&Wl3PL`;tsm~5+5!K3xugZMp z#n0gV$86?GcF)gQF(Z{Sg_d$ZBexk=sxwTa^JC%Rg~zG_!~NsAU920keSxn3(23a# z{{HJ<3n=R1v;?5ZU}rM&e{n0z@`3zPo7r;%upWF;q7DJPdwA6Ca3NGh=_=l1wlmeBsgGx%~5Jy`hMV~ zq-qB=w;+%wA^cNT2?C|qD2g*MI{0XPE7dID8_&=aJ};qOgYq8(a9~{pz%Nq#*&cKM zjM&r>cv+X-;Uu`=u1~&rk&;{X@!@-8?{W9?HA`_K&%9s5f)e6}dx?TM>FKSv`=k5% z`pypD!i&9*X6c8OVmF*(Vq+m!C$5cWq5n~_(y6&$q^HA`MVk&lsfC1K-9<#wUPLs- zX5fLI@Zg&K>JiA-I#&w@iM@~M%Mq;EOqnvAl@3K1y37h z4kX@X3Hu7TpI9}nfZIY=vwAkIrgHltv1p}Yh-H^#BRsCwHhQNwNB?l9q&`8;D-GM4 zd5y9tNvDo)M}9K{M9skJxw^e|gJ6ochC$$HY0QC_NaJ;QeSJC~G2`%HB}dOyX8@W# zj`6PllL-;V_puk*>$X^ziA4D2MonSz_2o(JP?R+6Sn_i?8VQfX8Zi-(JS_vlrTE(G z-pA4LP-MIcgO)qLEG6Rv3vTQ8JR zC7-s>^)%#$BSi3`2P=&Z&dxQ*GwB|t_%y7nm5C}}2f=K7!9hW19x{lps<+1r4n1M0 zXV&5}pZB7>_^l>CE-av}qv!8YW{W||8CPqEp%TqEyV*jx$nz+!`~Tffqy$Nt|8BOT zEvg--Xnx%jTE^3z4*B@#w>(7OqsTaqe6Zx_6T}VhV!MvBVkP1M*;aG^2j+8{`D&P#<_` zB0;>28Bba)kPbAANW>?*ZH=KiH0f_Go|!#8P(%@;F8ObznC(Qlf4<&!MioFsZN(-o z&Oq?b!=fZ9oEpy@CzQlx`aY9MlkYesy*ee5`9C`WOs*&QM28c#zA)v<>lmRw3&cyR6+1sV>S2*5QFB&T{xE7+KauBSo>pX zyq*^u+O&2XRPI|6XMfIm*_`XqaRF+P&m7{pB`z%zNt4 z6_}TmHg69gcsme7vOkfvUZ9vZIyxE*58wiLad30j>owY2)GmGEHIXET&RHKzWAgz2 z&bm4&$J*}fx;`6NeTM1j)ZE$-rBZ{pO_Hj`QF8%HJ77z@MckT#L`Gjc`C?{l>dz2? zZg;Aa+)Fem;=da5*e%9+SY!>ErSiMb@Blp)s3NW}jj)Zfc032U752O&L85pT{biyk z{v2Q2$#bhgeE!7qJzNyNpjc?;YyRMyx8kr4mJod82v)j)wW$hgtF5CPzsBR$X8K)! z-7o3xdwxjQl(MNEug+quKrIDdKu6i_CW~L?B4o*_N7AaF|4Y8NY|N%cn+(6kwd6No zf7i9PwnjyvRBNAPz9xJn_#GFwVUvuTu39{6#id!QiFzy#z#fp1i5PdkJIMlWoC6Z~ z#NB(QK(SK4DOasqbTExbSM_?i61zIwDfmGdk-`K|QbxtXyaT&le2Tmap5kDa+s$Pwb7ag{S ziOf$c?Y`a%X4VUQu&}TOT3qZO*|}NuK>;|l-Ec}YG&E=g9PcbUmsXWGh#NL6ZN%Nh zli7*<6cUEaiDmM5Ayz$@ef2h>N$F@RB9v&5jwkbA)m`ACd3r6iD$8*pV5a}^qBBZu z&(o~s4F>K`*3ZT~Jd4xyw7<>Q!Se1rtshUGg3l=_gLtCJyhP6_^Oa{X#AWisazcwA z3b7*nCeo%E#wRDgq~G4TTnN+B!ao7oWB6fR%{b=<(W|Ta3u^fBOrjcGhc81S_N%T` zM4Bh8OuCa+fBvdfF55_LJ}pIgh)nEu*md13jzNmMe?Nmd-!kOyB;+q5S*18+pY99& zNLMdQduJ6Xp~pED;MW>r;&1mKP|`QI4Xd@_h>`SE{r`U7X?Md4R=4prj2UtZyMF~F zUq~F%>1?qYG&D56=-HtNY#8L>dLIbrAEz>voArF@eKPI|Ya#?>^(?<}&n=y>t2YlG zinbx9u<7Gbu#V5=nYF|kVU{I(c+u|nHeudl-Sc=#qQ{^q7#^$xRH?s1@5(Y73CG5< z+E_GATTvy_d-z9g`9T=0m@bA)`|*QkWTXMN?ml<+8$PDN2v5%YA#O6Lw{ZKN%rDYY2$&)%;FT6U3QuVdD@ zpEQneAr1A7=*Wc%nLkzhNqfym>**j&<38^wMmo&$0Vqbq2aO`B_?UV%)T~|oFfA7h zQU-|o3+sSG6`%2Q%yuf5^>mf7#NVliT?Syi@qAlOG}lSrgdnB5I8K#k4!>yr_)OQM zutHGfKejTVuqMQ^C1?qsFzHQmHZdDZqo|BcQ`v|=r&ohYq^!73-2gM6;a*GLF?gW= zJ2;r>6W5|Zp{;Eb+ciO{0+UJ#YuPVEwNdxm10d;2QFET36VMfdivRpgq(@1$GRQW1 zOI0?QdKfZy&R3;RmhDvy)u+HT4lGQdrgfNkM94z*;zGygmnoc4Okp$LAI~s0HU=)2 z88o}nyQ7f_Kd&~q-1jPF2mms+GCRAIyH=Fy@_J^A$0VU%?~)vz_G<3&sVIarrhac9 z@Q1bs`U&$TC8wPeVdTYe%x{S+Z932oJIQeQA`;FzQvP5P5ty!?{{6xdHBkWw~{KgsOD^W?q#@PXL2E!( zWeO2^Ta2Z0yX*lXe)RKC+@>{_n~-}eSXy^H0CK~{4e0is zMBYwfHvzlsg5IaYiI>(|Vy^#ZHxe6;*3 z+;(DUNLEhHSrM=ifF`70IXF4NW5W^VO9uy5kaxfezgol(?s|aBll!sFSFU-S`4Lba mNQtf|$zp&%#al@`-=MV7y +
  • [Configuring policy rules](#Configuring-Policy-Rules)
    • +
  • [Adding new allow or block file rules to existing policies](#Adding-File-Rules)
    • +
  • [Removing allow or block file rules on existing policies](#Removing-File-Rules)
    • +
  • + + +# Configuring Policy Rules + +The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains additional policy rule options which are less common to the majority of users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#Adding-File-Rules). + +![Configuring the policy rules](images/wdac-wizard-edit-policy-rules.png) + +Hovering the mouse over the policy rule names will display a short description of the ruleat the bottom of the page.For a complete list of the policy rules and their capabilities see the [Windows Defender Application Control policy rules table](select-types-of-rules-to-create.md#windows-defender-application-control-policy-rules). + +## Adding File Rules + +Previously, to add rules to an existing policy, users would be required to create a new policy and merge it with their existing policy, or edit the policy by hand. The WDAC Wizard allows users to add rules to their exising policy seamlessly. + +Selecting the `+ Custom Rules` button will open the Custom Rules panel. For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](wdac-wizard-create-base-policy.md#Creating-custom-file-rules). + +## Removing File Rules + +The WDAC Wizard makes deleting file rules from an existing policy quick and easy. To remove any type of file rule: publisher rule, path rule, filename rule or a hash rule, simply click on the rule in the `Policy Signing Rules List` table on the lefthand side of the page. Selecting the rule will highlight the entire row. Once the row is highlighted, select the remove icon underneath the table. The Wizard will prompt for user confirmation before removing the file rule. Once removed, the rule will no longer appear in the policy or the table. + +![Removing file rule from policy during edit](image/wdac-wizard-edit-remove-file-rule.png) + +**Note:** removing a publisher rule will also remove the associated File Attribute rules. For instance, in the xml block below, removing ID_SIGNER_CONTOSO_PUBLISHER would also remove the rules ID_FILEATTRIB_LOB_APP_1 and ID_FILEATTRIB_LOB_APP_2. + +```xml + + + + + +``` + +[comment]: <> (## Editing File Rules Coming soon!) + +### Policy Creation + +Once the WDAC Wizard finalizes creation of your edited policy, the new policy will be written to the same file path and name as the in-edit policy with the new version appended to the end of the file name. For instance, if the in-edit policy is saved at MyDocuments\BasePolicy.xml, after edit, the new policy will be saved at MyDocuments\BasePolicy_v10.0.0.1.xml. + +## Up next + +- [Merging WDAC policies using the Wizard](wdac-wizard-merging-policies.md) \ No newline at end of file From 8830749a15bd2b3f035caffb45a97d4dad5ef36d Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 2 Nov 2020 15:46:27 -0800 Subject: [PATCH 031/958] Created the merging workflow documentation --- .../images/wdac-wizard-merge.png | Bin 0 -> 26245 bytes .../wdac-wizard-merging-policies.md | 13 ++++++++++++- 2 files changed, 12 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-merge.png diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-merge.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-merge.png new file mode 100644 index 0000000000000000000000000000000000000000..13d3a31cec43e8608133e6265cf991db5f661cd7 GIT binary patch literal 26245 zcmd42g;Sed^e#$;Qd*n>#fujS6n7|4+=@FCcXuzv-Q9{?aYC8|DemqP+yVrL;9S1* zyLaZCKj7ZEGw+_v-aC`5*?Y;e*0bKo?@H2`??~REprByN%6wBrL3wF~g7U)U?aSwt z(a-e(&mS*bRi(vIYDUT6&y&}dVv1rYDE0C0?~PHP=jcu{I<6=vcy9lV7b_N&UMMIQ zB(mSc)V&N5FjRfDrB`Stu0(cUe*Ap-%f!>zq`fQ<`a%p>Qu6D!4=OAd3ornaM>P37 z3*I_x)L@>n?vDKBC%q-@G5^EO9t+Rw;@c_1Mj>oA7ZrICbi2WJY1i! z5WDbib|~IDSW*%(4Wzh9rpXm-MqV72a80lN_E+k|8vt_W3ueCQ6?sj0M}++j<)8BU z!NJnDe^aQzm48l7&V14e+RWHwz~W)p%3U0Ww$i7b#`v+Z)U+$4%8+w)`zSYLjMo!L^$S5?s8_qYEf3)g@ z*z|6)(8-w<7KkL?Yt`g%Hu)uazUOVeNJL|9ktR=U11PtOx95+jUADgJU)+5k@OIZuJgZ%m{Uo5H@Ey8^}+Ns+S*{36cTblt`^{$O^ap1S>^Xy6^-A*^D`lkXKnio9@j?KJb?1;v+t;O_;&nY6}@ zM(be)KG#r!%a5f-G7)Fm(+5|^nB-Oy3t%P{m?x_q-S}8*(i7LBs${#Tbh-!a=5kw6 z_@dH^3qxn@k!{auaqg>SOwr2)3=<0*`ZbQ*5nL?ga?vtYU`~G!Zf@fhuFhLiEnh6b zO8PD5(6bo&7v<<(FpewEZ%*~XN zTGob(%SAofnP)a7EYHgHm1hy+UX`An9-vSzG4!8GRr#E4$@&ZH{>W~N!W?I*S)Osw z*6-eaA6%`49AirnY^jF<)2@o@xfOO$f zatDZqA$YKClg9t}&Cv*4^XW>zvR3%arrktYdox)ValJ+_5k{W7Kc`Ws$VS6jJk7>q zwGT@JSW^Ps^GO#5N_5u#i9I~LpS>smhzKJm4KkeN?>X(XAMVX8E1Ro*r5D{jhIrzE z@q#|AMdsV}>jihT?-$c}|7aJAA$_A;(uJoTRUNgScA(q3)qbAmk5DUMkgdP}c_Te$ zS;^6X@L_~QLhE4FdWVAlc`yM%u;-q^>&{nA>SO^*vk%{i#bNM$xwwe3!$+-mPtrjN>=r-N>-ML-X(7zh5X#5EA&TMO=mt^LDoNo z+e*oVZE1#tsndTGLzCeO5&NThFVa3Tw8{2oGw*ZQ- zIPhre2_s5Nv*^B;8Z4SMsj_#>PuXfPT~3ddO8Gdwxo&Wjb%Wol9OdWdf|}T#GQ=6V z;Z2;6UL-x)QP~VG$r&RWALUTW+US{r`cVL;XpBFOOj+)P5gZ@Jd!=Ul5#^aZ^tbd3 zdxIK!Bm{M2t>(B8&83Z;51X(dj;kR_{sZKh;U%iLyZy)EFU!C$JTk6VqGJ0NHye&r zQsvk~SJ}%07F%k{1TJq~gG9MY*y=c@)O<&@TajD*$iYIQcM#0|RuM8RSvk(3ky)7% z{RWj*EzFN9!PS9BRO7jzi^50Vbj)&@ehtB@p!1y(d!3G?njhvhg8kWJc@5Z6kIX3l zC~JOn{6f353bMb=!VaDiypZxKT{g_AP#xsSv617#6RcmJRa#rx6CSRDT)o|Qz!a2E3o9TN+9zmR-A5#Be)xJ5SEe%!%K9D>w}7+8LC$F$O}J@3YZ zMb>rP!#N?`Yg#fQcf&kC&5qn^W@M*}n;T`?-Nm^;9`2ZLFYIBge5LE{3T2fPsOe){@$Y7j_q9OgZ>fH5(Hd-7w8RbcBSG0Nf3pLz^Hr**CW}q6 z$2k7*IXb>n&SX{j$fI0rDb-rj;56D25#jAhsL{%E_0Cy=4+m#luswOH5;IqWxGVN~c9{3a&TB?X|;9dGED-6;W6Yi>v zOdKdiDp1pPFCq}i!q&--`&AikU@DqO)vPlCu|U(sh8{HkJ!^GYwGBgC2C^&z!N7vJ zkppri>fqiPQs-GQ&)~aQWs%opxD3VRC6Tdpjh@iWcvt8LDDHCYQAKyQFO_>^AiOtZ4-p*;tx5J8jfx6RjY z(!11|OjRHm38J%1^ z3`Y~O&2I!I>Q;~Di;Diwnu3A?hTc7!YK8i$z>@HP*yW#V&NCE|`rjeU|NWCV|DSDK zPX(XrUTmzb<<%}^jV{=``d*Rc_0KjKY@Fl?KLf6zSvNx@29_b2e{8k?+J<@<<4D?S z#&VY{0{kcZUJ3twuj6?cQ7gW0sq6L2W`+Jlpjw$Exg~SRw-C>^BsnGfoCT2MYC=N7 zxJW^60*M0_>TyHbF*YHtbI z=#?6yNM0yqG0fMy8}LB+NqMM@JsM4FIg-uG>(&8Xc5y}Udmfe7hK{vg`Ajc^g$qP^V)7oHb1@yLS?TnS$#Fgx&5k{c(LtYZ{BloTo~Ntd#kCi7m!|^5c=vi z6iC{sDPtFp&dkzdw%ZbP?zvo#lSx+wtI3TYF!IEK>Pzoz3)-aAf?}%oxjt}kXOH3S z;FXp131o5x$G3PsdVIr}v>#cfMrZ!JX^`08{Tm0u z3@~Sw&KDPe?>X4jT|%-FHeMJeU7a73?pH%L@m zYzLN@2*1z)i%J*;G+${{aBN*;`iJHiNGa?SmX?J&J)V(pc-)8RaPry!btfhwQ*Rx< zxFsHv=jvB!G4yq_qj6vY)b#Wye+V@#_Hp*cW%IjMXl5@g-?kn^bxkz62RA*L38MVNzA8g2)6C4&Ve$GF+b2A?_eNHvLq%{l zR_kLLE?&ENSOR+;--lXT^gsR6`+NlfA{1SFy;545p~QqltY(8-u5*{4&J4}TF=Dr& zqcb4CPsSaK)d#Cv>xnEylUSFvCBYO%l)RK7-;s>8jWko%Df_&PwL-#i2O;XF z;sL#;2cAVQ%bLJwJUS~QpLsHTT-mtW>;A?w`1DmrVrvr)0r5ljw-JL)pD zE}xexxDRa!ubB9i(08j+Vb-bQ-rh#Q9CD>bnOiP;w8XWqH@yar%C~ed|41zgn6wYQ zyY}8XT9y-;GTg&<%FHjxmE?rPOdvmT2`akf>g_f}H}6#)7v>t$U{i^A8604bI`!|w zFmIAd4fvzjupt#}Wd;<)9>ha~_S?%I`!?GZno$z7NO0Iured@5XDO=F( zhn3ap#6cduOS;8xDOUSQXnboxPh#tB>Z#FsG21RcJ);~xpb-66R{xMKG&BtBEhRmE z<}nPc)-J@XC_uGz6$97%wUE``n9Z2@nd>lVOn%_IS#ir#H?yLHYOhh?So61dS*~OU zT$4_kQtD(FCHaj;7n5TK?~%+#^OPt~A@-_+%F<+oec6GY*3=aywrn3gSG=fVdMuGe zg}uhI_k zhe7K@MS&d4u)J@1l%y6`Rtp8F11Y#zu==fF&KAo%tZ=`$t*gn*XzVE!`%KLmFvbB2 z$`;0JhLWLbg2avxwN=n3y%Ot_6L%JAKsuwfM)Jo#bW$8Sno!Lx)d~kXaXj;+`zr{+ zXP}(o-wU(J6zV92iX+W3uIlf}4#tSVj{;^Tg-cJiGPvUOHM+e#aBE=5kfm#c_fz7; zxOx89#;LEgvuGmWRQg8@ar(m)XL=?3@A|`}(U%Oj9IX{2%wJV)S%u!lWFhAmu+k~! ztx29x;eXv{k`T1k!6Gj+&qG);TcQ$@xFDW+rJ_@o6aBmx=@tD{xmNPxrQORZkIp8a zSWkA=bT9yP_(=y{3@-c^TYg?)zC4~yNF54pQLmoA9y^dto6`YKRFnh*oE#RYhilXR zE4$D~Rr=z95>@BUhD~~fyaG=9!IMNTlZLj4GR;KQaJHN;Db@BPkx^mN#IEAHm=ydY zb)!uchO8wR24|y?UhFq3!htz`qQFSr4-GWFxTIqgOApieCJQvVkDX4!4PCv zsd+-mR*LEa($8;;a&Nxpd~ie_vH1F9<%=T(7P-J|Lt|}0<%CsSHK`!2-}f;bY=MX& zJI<56y0ERmEwtjV=|W+wAzN@W2?_ZXirqZ@LW z#K=+*uyJu#4e|*nk_us0z>McV>^KNuP5sqBX>~cg?2&uM5#TQ!=FW7W-N0VYK@;V+ z_}D@0@a1wAT-Qz7lK+dZN|2xvW9--nH ziue;H8My|xy?gO0?t=Ey;NI6jzp2$f^_uSOZ<1{ci%YI%?UD+j%a#H3R-A?c+A_)b z=4yqGFg**e3WOfk10;sSbm-4M`5Uam@41Bfx6-S+BKt=Y108*gqztzjbyVHWKItmL zdxa#y9{GkVysWa+Jj&-3eB~OlFA`m<@H9BZZ1zx{^GP&T87opnj%{6 zEClfiW$Oby{muxY?uj~8ZhOnj>qZIdyRd=px2ZNUD&0f<81Mn)Zg`76j83!@A*ldo z)J2dtKf`U&*Lj=wSVGA^!$RF_rHwP>d!(Pnr;E3UL%QqDpHa5TmyOpbC|_Pm{l5y9 zX?`UeeY$2!_M*}J0J&za&aF7Hb! zFG2iVViaA={x#LvDPHj13B0W4la`id+8a}_IZ7iP=a-Pn#SKkc_kf)wSuiM$q?1Bi zhTI-X8rA$)yNUppN!9Ho?8XXQb~pHw$KRx-R*jh{Z>->2%~wJFxHOXs)VAN2n(Y^x z;l|jUFeS1$HvRRuX7fhI%@#w0K+liOdwC z3pgzEL1aFEaN(nL=$H(%w7#|Iwze6VDx+VW7Q%)l1P2?ivZqhPej`7$cRk2v`Bn-> zxY5aT;x8r-@y^VVoy~7=5IfV{tje-kP55p0mY4SgONd)G+Ox#9jz7M?(-Mk^iwJlw zg`Q1J*4iOn;nGOkEEJB`EELd%*DQYEp6;!Dw{#)-(luLu=jH88??$Vr?Q25HX1~ew zKrWP@qRUzVnNuhSlO@sN;nKUKxorA>zkfZxzd3J8WHqQa2~AB+EwI$wSjM8Z)zh<0 zlyG3Lc6nX+H`tZWEn@J?Mik7;n`{Gw%HBd%M~!}$ZE-=p-h2G_}$zZi2J>QNZGZTYgg&i5*u#s84>iz*t8Uc3W%0u zYG95T!i33~Ur+AKwKvSP{E8xE^$2ikE!Z zXIH!GnA`FTfPRa>Yp|Pn<8zYhFI5HflqX~)o^EwMg+SVqF<6xx2l&+Yr=S{CcRmKc zpc(_)b^M_`qC*fxy)gJ4Mg)jy3S+4woc(FE%S3up{p)8h|8C9xn*_m5L(vCPlHMJfn8`W`Y0@6fSl^hd5G$js-NI zNr8@p{hxNH?KTJy11H#NJDhA;?zWnQm~c>)UfC6#_a{}HE<#fL-5wEqddG!xenT+4 zZ+hSuno?~A+${yZTS%3AZ%U$9v)DLQX_L`*!^H@Ha*1_>_QX>F9Ok?)qk}X;9OG{~ zG3J!2@?sy146phQ)x91PB`z%I=2pD#irm?HU?oPL-wZ4|00u#YcbKp$L4ouQZ?{V* z?u_p-AckxVZmjnG)PH=>R|`FC#*vNEoE7IMYUAA~~v-JUj z>QP4OEf%3!{kXeYCG1>=+5=!C5y4lxxI zd&ndv;D_iH`{Xbimx%|k;qfD77o=M53R|pF$Z)R>P%_K6)e3nQ>nHd`{+CVWp*HoNjeV!fc zT796~=knR|8KzXJB08p$qd=gPsm0maO%mlxt@-w+32u(JD6) za=SvCw|}Uo!KYnPJ{>?Yt1259)$O%0UGV+3EAyPNMjPBxsUhBeq|y53@b`mqZhI1M zU;z<&#clN-UH2&y=5I!PVz77#)h{9MRXw>Tcm=u+NR!ubf0Hj@RfOA0h+LDM&^o-! zL6A-VOQ4wT(4}WYEHIMQdqt+TzC~tpO1Ii!P6vIY8m_fUQ2&JSk)%-}y@Ihyda?PK zMOis*aK;AA#jYVxoF2WNF=o`-L$}{OJ!~ifoTqe6Vc6Z(l$yUkk z$JdxTOxec8S3~D~xEd$eXqmw3rPG(gDP~r1?9wC#TFa2@=~18kNlx0PSD@0R#=V=S zI)?#jV3rx8sQ>l@>vKVEn^~D^(2RroAs5-Z*%#l~OKb2=ur8H%OEp!0pzWu6QA!oZ zWQ3%IW1nS==@iwgVEtQ%kNn2prED7HDp%vAWH~PN#w&sQW+p3jMi0RXH4Uv2KAu*F z%~r|vvuUM}68_>QWYO}q7s#d z(V>R+KE~IVFo*8xnj6HmIZTEeTM(>W!pxXyDTYtUFS#Qg0U2|1x7BU@bkp)fEfm}~ zOLfLCEYb)kn5FE6PUaUYzphgGk3=XaqLn_S$(6XcxR@|M0T`rabkseTI6OT*UEA7x z&vJIa4LCl#q`UK+Z?JzRR6w<8mNqsvryD((GmVyGn&scu5x%^~Fen3IbmJQa$;RZ* zB`&EB;{)sH3OC=x(b6&chKFPNw);!)z^V^5xm}z@XB=+9N^vr@2{OeO39rRDgV42# zROC51+Znhko}8Xp=6}kkscXen9*c_&MWNl@-$*1qJUn6oW?QeXud!9nwSw1Pqx?L) zyj;7lrs8{n^2yhKyXToAM@b;~h5uabefw7Fc|!B)c?%`x=ks?_zI0MPR4)Ge_pd7) zyD{~+clSJ1j!y5zwaT=Odx3c9Ap*gjr5w0brCG(z$*I?1hOUS9^Y~mE%@TP8ySqHl zYT8?ZZ?z50RB7er<}SSZ7cZ%HzKPxEKQuPx_h?`2kftbdpFh$^~kg&0y@+ zVV!{i2&2sl3{}ziIKBlXlmzk<{yH3_sFf}mylbx{jG(fU9_==Jbfs&*rUs>KCCP*a5S0bK=8)P({9z{>Je%; z<=e3Rb{!2jx+fqYfX%3li+f~1negRxFcqI`_vWjieg4N1W;&zHw)LnsgliJf=*^>c z6wD_L>e3U1d45Y+zF%aU(B@b1^a()|Z2{ZZM&K`NYu&^oM~6el^c!vLQ`}^;&9N7x zf};pXaXW|NXhJB1N-g3kgwJ+H4iE^%M*K~spE*C*hH>%uE$>1*G+NVf`j)}xd{SsB z`j0UQmP7KMtH9|hzvO=}dInR8$yeAsMY1e!RFBC%j*HgGR3EwZ3^<6W=<&GOac88- zXXxCz6W`h^=eQ`0gg}lby~0~iH+j)`FAW+?1E(mWDHpZ}Oxd72lU5B^`eqfqv01## z1YoWfoogy_F4UoW<#yKf_mX}Op}!TCSS^%wxtaKW8)?tfG|KLGFl)sbs1(amQWQ#S z-v&P39-TxNN(@Itye(1Xw;0aAB<109Sk|V+s~?*9LYqRY6eBax+PxkjhM{f+8#rGPsY=g z>q|D-L;*}fHd6ahhqIxOddoS~H>h4$(QSX-o1V%KpmUeUqMpc2%!j`(ao69z6WBh3 z6S?~yx9u5#UitNvQD&z&dwmTqu*G1GX6fk?M0Gp8;v#h~N&`<$v?TQ_T-(5ffPVv$ zZ)*q?{@4xj7D;RK-W-{By*rUFOw_5-2lw~)Pfx20?CC>2s=rYir@#1mCFZpAwnQQ6 zBJ1xMe`9HE{4eGYQ6FWgW%+^11;!s#Wtpfdh>0(>bZx>?l>0+TL2#ynIhYH!gW-J5 z;osBEzWc@jVK!O0Lh^Q%QVsq&RNO?;ow&l(ms=Cw2AjFkIn*7Q+_5NtORX2?3bb>H-G1Hq)^o()T`q^0GLr6}d0 zk@Td6tA-wRZLMjQs8%p({*h5jPAgHh9!R3IjyA?cF{62H8CSlxQ1%O0<3zhtr^S7s zTNEdpu?^8!`P`(zo{se*E@b)?b2bp+Ag{m>%7tNl;J|G%fI5T z3(pTQUG0SEImtK6^#5VjD%6ESJPiB-=CGA zh}G8CR0?}`Ry}$Rv>LX6!6MJ{vEoy=1hOLotIL}{f3)T@d7-=4@Id-&cXLI#V*0OG zH&YB>Pmsu3)slC5Pa+J;d4Dvj2=xZM2L=XaXP=n*i;>LfwT*k4`jRB0Cq{{Rd5>Up zoNv^)^j}f>r2=mw&fh0je~cdT7qq# z73GUZ_drIZLP^r_syTfUTRfld#ok1d^)oZEblhGcsm964SmTDv0Ms4f*`^IM#^d|| zmwS`kiPE|ym-6}aaG_DT?Iwg3pjzDjFX$Bw4b1{Q%C$&7hLVzluV4vR^3d)Ohbrf` zqeN(FsmJX+YLG;yon&YC9D079>MbUIq6Vvc@|<(+j4t&TP;>oSThzlK)51{|$Oh_u zpjn|x*Zk;TiM`;#Q-ZPnn81)W-BOu0Hx}z@T6NMV=zrVv_0tb#ooCMwa4l2 z(zz@0eZ#2k3)Qz`I_ld?wEJ3u_s-{-C~FMY(`-i7Qa|>a%+@;@tfhT;uJD%Tk8)s3 zT}6n~*J>i^w)9^{Xj{D1c2CT0e2rVu)3wT!+Rh0_7rbdQd&>?dj_ATEh#S%o4#xJna#&2pU}qBfgd`1*`*b8c|gP$TJ>Ve5FMH)Tz5SIq(yLhve^-BvQJ z1lUz}TfD37VIf+b_Br5WoaC7*O<)U4JJpGO$WlYE92?^Y}ru{{9}~_WQvC&@RH$Qm>m_ zWmrHx3DwK@pO#L_Ntt5g@;=)V^gOCd4UCQB1}N-;oU>F7zI_ngGZ&lzFpp~2c?UQO zE=~GhV0KDQFvCG=rU#0AMUK~RdH{~G^K?Ka3xQ8|1l3a2ANifP9CR~20vW6?|ITvG z)x>615l^)|i5YktQHWZb?J2-)^5+E)j;1BC(Ia78UPt9K@DTl&!}F$}me_$FN$s`Y zVfpO1m@}8H-RdbXKM$6kSFW-I59$sa+xqwC0xB%=h#V_)jL^Q^1V_i$nWJ1U zhBdSOs;^xJLu0-o-HKJ| zbHDtxuDB-#QGgf9IIJ{m$k(>=Qq(nAWtZ1YlQG3$fr(+ z2Y@osXNX-ox1IP&V&(pM-mB;5&=W>yb6LA=bfY&v9)H0YNboQs!|!@faXr+}qT7Qi zA+r*MR!%{s3^_)`?$X3*dfu6jZ$ty^IwrR(r_S#%wLu<*f!&N6A$k?avVqiHW4>3n zo^y)H2OQsHY9ngWb2;Dd(Sf^fsmM@y&b>={yJ7FsKjfnF_ib;_r5XG;sYFs8;AXAq5HkdW zsh*jMIURG^Z=~TY&IXDd?o4o78!KiNuKU)e-ps=NvU!-AclY!56-x)lSij^z`1?4J zu^347eYLp>4JGC2tBR0_HcOWuX_Arrjm;l4nCF?O2oP>dO@IX}P3iPfN6Lzqijk46 z;LOMZY?OPq{1%NW*@WJb@>E$_*+}#OPS7!#ZoAB`k~^<0+I1TB80QA}H+(kln$g|* z@~gJ{K=(6O0A<^bN+ed}!1;7QH96<@A%HWKmX3}_jR|ymR$iz+w8yk~Z{L?Xuhp#M z>o~>(xK-dV|6t9Lsz9yN;%hv&vEBMofYLu}n0fwaQzQ&?=kslqJ}q7>NlA9Y5!C4; z^}V%Y){wzWnZ0b=&4@|Dwh;Q2~5pwsU%xx621 zu-NGHXqsQbA}UNH8xD3HY*)a3_~?y4#LUviZyOXcjW;i7onKpQT}BC`DPhG43D#PA zngA@){fgDUUKb&%=t#tZ!i?t_hP|x~|D`x7C~%EHlx-_T2qA#xu%CQUOi{xj=*&b@ zd;LbOkM|KTTJO_ymY~M_h45M-_jmEvR)TWd*&RZ{V}zx&ei!?>rk#!y zLVpE2N%muCYT+IvDI9WZVA&=IdeJ;t9 zUs)zz?YwCm-JYwz5QqUc#>?_%XKyD$7^%W^u3xNaot%nFD|XuEeWP24ui6)?45Whf z9af>-Y$iyA#JY2RCUND(*8G-R>Ni}{C7XT3oi7ccV=GUyeb6qN6d{~riiKvzNjbID zqM9lk3$r3Mi7ItqE6jdUW4V;Fz0O%>tAXG^`c2w#qpf0}ctz&fv{^?1(cG-05~x3W z$dJnQp?nOxe>5g0ronvZXbBWw9Y~4$Bpu7g9NJ&z4G-ILwmlqd0qYD_&?qdXDuu=5aVK{-%nItX;{cPj@|7r&$!X*=&Wd7MpU9Bv}?~ktSaS=QnXNtgO>P zkpA%PuX`Q}7n~!?i22He9A}BF5F=$lPKTpWM!K5(y5oPtc2Daom>-FB%=)G+9^N{u z!;Z`!k)m9*>iR0fEj*icy~>WM;riaZjI6B|wAR*cbVS+HuXK}I92><8Xp5u17z3zA zDeV~~Kna6FiwKjR#jXBJJp4HYvOsBHnwFcBh&q!a3FV1U@^1R$)yjt*xF4k?f}fx$ zVL)E6uFS#b=>@VW)bUVv_iyFnv|jPZMS z%YE6l1EWc0HIEQbyLI^S4n>rRmxUz;&{i}u%+V91S@d6?4_06*dUC^zp2uPeRcA_` zk|YW9edrE_AOv?dn7JKi)tSvXwwKz=R%^sf)s-uX$+ws=yVk8$DK3u%%`OLv^hS?N z@iyUaMEANJy1YnYrC1&h%dMW-gH$FB7dN+J^TkHT)wZy!K+Ek3Xnaa@h(vsv3eHF- z(Yqv9UOQk;C;e&eep<2QlT*H7kjMnD3nh$;`lfR*mhD_%m%Fi;YU_yIXDug_bWSoH zO>wbqh^@OXs>_{8Pi%NoFtzIQ4ti8NGsJRYGJ6-fixqE^tZW89yg&5wgG(urp9yGI zsK?9`5@_#MsI|s`V-YRRrbV;lHKIb5wmOfmlKn=Q(n{{CRm;W`t1LKok^2Pm9d(`$ ziLGkCf4jd2h0O{j%}qk&s!HQ5y7g0bjh8Vm8*Q1>0QFXajd~mV6wDwVwyoac|I*T~WIPGBCH z&^TXldeISQHe#5L!S+@Wz!HDB;Mn|>HWX|3Y>l*QE?xwcDPPpHJdU}FfXJ2yWlw3v z9c%8JL3JFPn-`{1)d%a4n;L_B)@qG+N+5O`kA3A_N2Ap&lM1LKTXLFhSGGV#I`h++ zi^2f)1q&6@^ZgwRoLwB;$Xw0_u{IX1_wiYOLBBMSgP)RfTEL|{JUFmL z(H3sKhja>lqTAj5&G=)=M?vCO`hq>WIxdm)G#Y%aL!B*lcgn7|2RZ8pN|7P-Ox_l7 z3;#EF(?5vre;hv}II^`x_Hd>DGNWtbF9W{KsFtvG!8o}=9Hm)?YL}R>JJ8-vV&bs~ zF6yJxTcw|rJI_qB0}MjIW~g6rzc%6})yTn%nboorC&X*yS;f=G$erV|Q(uAh2OZ@^?f)q= z4F@!aySZYL^=byZ9@e;nj%wUhr@z~&M7>V^#MiiRuNjIj2v~;v)~z6cEWiU$hBf4q zuRL?AW+UWLU1wh2%i-iK{JFc5rjf%z^eksYCnf?ez<9?T(L~a1D zp&^@v?p%~0N7UtINHT-+Y^6qY^;XN_Jo!%L1Cce5%exv!Or?2^O-)Ui`foki6-TD|r)D#=GMAQ? z>g;{Q{Q1)g$Q|3K$!BfMF#^zr`EAxV25D3p6U#>;j`0(J9(pKXQzlE(~16$4zX1kweu4G@Hu9#V(kgMrBR0Q!)edPEmyFGg>_?@ zV-sGV3;4#$gF|1$9^~ny4Tn!#^w4DG9`lT@Pe`WiSUgog2T)K>^lo&WTu^u7(=G+{ zE`2U4L*<((v}dGg>K6H->DjxV@e}`j`yr(^MV;PS5PJNBc@$CS>T!HU?nkenpU2t` zpP*+k$oD2mrFUE*l&2;V^=&JX$7f?E)myAq%x?B104umHSc^v>I>D}!oHO7Lo~=T{ zix^o`e~*VdV&9$iG?f`|Vqx9SkuQ2TA-F^DY%O<(Pk#O@aGf8F|M{%4b6}hHOVtj2 zAWC~uEh>YeP+5C-ye8x-AApycnW<-xx8Iz$>bja!$SokH9XWDMeVS@*j{ykul@y9Q z#L1knxSQnKvgHPFg4M% z|3&-2EwX#}S$UrgkvF&MN{@};KSgGKK3$s`biDJ|u^#qF7l)ZMJz$30;bG5oWAuHW zgRkG?>-aIEcdtp2WZX^N`p`OyrM#ouY=%Bp+gXpn;S{D6RS6pxFZ#3eaLAi$0;U=3 zW4K}?A%b+iDpS>*=)0ilF*BACQp7zjGZfXk_1OGo7VDjCy)HL^&(D=}eJOTT*t@vO zs1b5C+KMg2WZ4_Y786JZ1BsFpE~s&QvayiSXl9f)u3235u35xp{a-TcUF$ljVn`RI z*q+b8T&}G43#`!IyFNvp69HCoeLOD@Lezm$$krQcfOu~ zrd$O!HQ={KBNCkRM3@zZeXXUh#*2%Kx3;!c5(P_vj2lyx;(pPm+cLU#e(w+oIF!my zI}~&G?xAUj_Zmn|*VITI9tt7%q3h8=;Q3XX-gv7ud*+#zzpS-P#d6;sZ(OxP1xM2s z%m3*ou^(OWF`q!0DH)k(96P4Yr!HU?8X5_vIhC2>6XbYxJ2K08_DoH9Jm;bk#uFi@n?$S}DXybSFl%5f)YJ7q#7h7`mupnNp)Ul; zS@xC5_67lu-|FVEmqYbHM{K~wM%(mWYoO&U%S50-Vuhmh_rlSiN(jpw?~ah@c^u|osVakJGhj`XCgIVXi^X(W zs_*gSVC0^#4a8>_(Nem)jsM`^D%gxo((+4_f-<5dpuAQB+a3$p??&3rK!A?z>OQ)Kn%&GB>9xX=df^_nF#8i0AH1}h35~J?Wtf_-kI(W* z^-M&BJVXQNe5aIS)Y$Emh9S}p6q~vrXC*AJ@?{Y@xl)yd{I%K4gsL&Xm99(SQ=nRH z<-qS(iMmjIPzSdo<&m2jAoFr$hm+~1;R@laT@ zFP@T@{igf;H%V-%cD>2^`g#V+i%-x`eC)0`_e8~IWv+br0XvekcsDmU0K=Ay>R11e z&))AjCI>i%$zHMm0Ki3MasCH)$oo(IPo$^Ih^M_P(a$_u@pXywYuhXPQKOsH)V`??oCX>GFUX+v zYi-!!jPoJx(NX`LNz_W|>;Gv3@86Ev6+`D9(#ylXI6rj0x(j22Sz0|L{s#oOv=Dv& z18@Lq`KCOR4+5g4lcU7kHDaexUH+uRx~_!J=5N1S`Eadz^9Z(4R8;g9$}6xlHa7l@ z^7U#XEHt#f=ZQL2ie}bdeW(nv3~p2{k&BCqvwOG`3VeKi?(IUm7*$JtJsKJ+c|!&N zf0Zye|9_e=Fv1FQ!CPjE?G>ThiNbdySF0}IMElvh?U$_KS_N|G5+&A1B~D%6v85+B z&uOzf&E#4I)Pgk1FBa1fikj@>#Y_04ZpoS(DW^%<D!N)c=@n_~ZJgNa>ts zB=amALccf3zj$x%ok>urE0|YnuB_jTgOjt7-*snxadB~JDf$~VB_$;r8(XM270%mc z$JG^xyKOTwiXSCCJ$)G9k?1*&u|30B(QfR_Djt6Rh3@Vx_*7Y5UY>M31v$6Pht_NB zxYDvR)0eM*9)_-U4~v}`{m9^dX0$H0htjzOZD;@RKaXdE3-Y!DJ)!lvTen*ucmloq zPt|khYK?03!3|X0jISBKUUf#`(;IW+r2z zj0n5ADa{>dApAFfY?KYHEI;4K%*-t7u^LHP0Kh}Ss(uM$Nm7kj}&b1L17hy>aQlZNOh(GT0eLeBmUt5@@Ssc@jDVdxGxS0G+6_F za9B#f?Fx_Q6RwArD$#^5)1hG=-ny)2F`p_dr#|@R>%~xvn{=OmJv=rHJD!{F;x0aS zEjV4L{R_$6_!j=ym~Q4&?J7FYZ=K(?n1LH)8tlWUI6@4=Ew0wBpX-f6hqJT(=r5lg zrNd`E6w0Nq(=>p&>sY6nlRmwCa6cy`@6yrHnW(kPHMTOFtmnX9Gb$j$ZVj1_X3X~U zOC_lz;zHSKaU_*Df6%I!&?c-^nT=Bsg4}*BTeH=EN!;h2oWa{0PW z7>yO^uuq++!^;Y2{m?Zb3Ln7D$V{9cibS>DRxO<;WL<2Nco5E3&R=PPst|dGviRl| zb8&O~Kis-M_fi}$gCzpD>#I@P@qElD50VW_E_6$@SeBk^S+jG$)T&f>EB8LMAIEi0 zieK#Xh}jT4D4PPB>sc3=i;>HU;Y**94xF|^u1@(jk}P{1C0RpbE`e$#suO=_Vi_eZ zDlae!#uYyICn=B+B$p{z$&B&4?xr+v>Sc1CGTJ2ebMZ)JE@^`D+Tz2uMthWHiLxR? zgiH(}sK*0W2<2;lT;|Zs!pR}-ga5_W0KT&F*z;?3Y0O$mp8rtVDgJkPA3I-NGq#Cr zq!csLk7SF0)5n%k6J5i?sv%@->2l~QLtfhuzP{I(*?h&G*ZyS?Zwkju5!a2HWMvJ7 z0+KlFFa_;I@sxKZQdA=e6;{m^Q>tnj_YFs=`Jswg0@fXxFP;$Zt!AtTDpV`DBx=on zT#qt}B}>0%P(RX*Vvtoz{Wz;}Hh8NUg-yX3@HH zs+h&as9ugEjMq%CHYZW5?2|fan`&79(e35^hgGf@FT1uQ6+$6MQ71kUu=o#)q_onz zucr8FxcL)S=rrkr3L}zk9|ws}IMvi{EC^$y3h4a`Q><>Nr5F>d_|nqEBfoh(!OwLy zm__6AAhZ=q?K`NP|5tnG8P-Jmt$Wlzf>aR!0YO2EfPm7aDu{HH4hc=1c?qf3EHX(aP`VvzQH%`s`j=SD|r{?Bs6p?>H zeY%B^DbjrZ{yklRezqwpBqRg~@2>SrhXr&&uQ0 z@9i$UF$$$2xMf!6=o760)kc&*z0%O(%%=F|NAE%e8cDFQuqduhi#&2G65!`%O(f&Z zk2_K>(&ria0j+ZDRA||LA7%Z3t~D;q@_qE9@>k_YQkbseA_X)xn%IY~+QBIGK?KG% zfdr`VLy_jAB3fNDI@Y_tlFZh`XwiF5FVcSjMGd=ZMk~Y1GeHDbykXW6=heyIDJHjY zVJ(&LOg~yXH?FT`QzAU_O>2B$2X(W5r?s(-jUqv2=%&c4)sVdeAaA8*y46`vP!c_I zzHL?}ix%P_jO|8nZwe(HsjRIRzj`W>qi1Ua4ps-@{t1AahGwa+L*mnyGv#wZ|G z>0Ecd2lViO)Xb`s^xGX6=m)y}&GR7c;P_v~Qn&vz71h5TNWo*Wd__X}=+X0mf*7d* zYw2vKwlDY~dm+D0>ze)J<12SE6g@)D4?UI-D5I{w12QMB=g*%rGk<|yk_8mqDQG*N z|2n$oHHc^YaG`ieuVp|N3tPej0S?ZW|M-0W-IRN6RwP{O*mAxocdnG<%Xj(SPIjc> z2liP_O7&yYk^Ke&f`(cc9ekg0zCbvq23tRP)TI>j`}ig&DqurNn3(X-6ikf+*Hkv! zy=OLK@iE8|Aqq*gONU&_=U-5kIqDs}JH54uw_hmZbZxec6Z2TmsibP!udbLx{yE)| zT9I05=i3{;W0*3d`ylSHz^-`jeR#2S=IFWWrbD!7pszbGJpUSIV9;=qOkrYg%e8#Z zWg~|x_S5H5iBMU2M%lf9JRIyvxm8*KatRXJkyXp@($@YJ=TL^-DZu6Ru?DlNrtl?F z^VrWfTBCkkE5#TYO0swjlg+s}s}okz{l(u zPeYFzuWm;fJ-h8(s!xp)s(&XQ=jUubKn>$<(jGQoRM1hAn5#aK{_+X9*D_B<0tii#E~79kPc1X33?rx)~miS0<6eZsh{U1L+K5wzl;{m7XTuK`1Q8Pd4F1LIYT!J zwBpfnu8WJ(FwM851+THmk@sR_nhD4SL_Qv;#OD74pTU)*? zU#5caqd^a}3sq<0)IP&VxTh_nHLwn0AtkSnD)_e!;_nw@mW6VaqLp{I^ZFg;)O|4_ne^ERhqlLp%~*hZc!GdbJ928RXF=EW#sH z#f3&YfwE7;RZ%XqpX+5WHY#N$;E3+GnOF0Jbj<~)XLWusqU~w?ASr?`SoVS4a+my` z1}3HXPt&}18GqHzloEVbs#>0}7mIvvZt=%J9?<;Jv@!ApLEJC+Vs@cE43s_8_fqF7 z-|(09#RsQT9i^nv;gm}gq`V<@F5fKw65t8;ww%18m1u5T_RqL$VRy5XDZnbpq@bf) zb(m$d2u`R})j9n@T7AthO>@txa>4aDw3;-`>|e?3ckaST zzImyo{!kbXYc`N=>GPbQD0h56+_!P#Y-(vLEVIPFfpnI9K1Z}o zhDBQ7?zBF+L-};QGrXc>7sl6q|wJXiJUwJj0!uXg@*0n~rN)8+9XHTV$v4&9BM7 z!Wj$UuvBo}_LN{IBdbY@3|{>(xH*CAuxu!`XI)ne|JsZ#cKBL2^&bcb0x?VqnZ;J)KH(he&`d+bjclXt@X#aPwGcs%NRKE@U|{j+KQfk z?7|{C8h{k7q@whqK(V4%%W2b2s@7wTpuI&S zrXIz9?A+4HHW_vlb-Mf=X1n8Fc-$~pAqR;lx~G=lAZDRFKUU@A*F{+7VQ9eqelT^A z%!Wpp9>$lj=zzVtGgUTLdeuv{zVWu>R)z{Y3ufP6`ttUr_T$C|?@1pF&K5ae>!ReA zP}s0@!5?t}2&3^nnV2*m-(B952c)F0UzaDwSdAz@h#AYrhfU7Op4xdd z4?I@WO)=TNX3`?!8&rW!MSO~@noF4ctTimW>s^?8K1LEq;Bqk$fav-vBbZxz%!3BC z`dyAk0^&M@7^{Z5(J@+;cS4Z{aVLTdg8-SQrY&}=kX`Vn)|}knNOG}X?9v1}^{768 z)y3Ioz=9^N1%zy>V0C@20^S;89LTbBs<=40E><&L&;B%+kebnEk8y7l$v-|8JFPvn z`pCC!oxVV$sJY~GI{2u=BV&+Aa>UQ1@1^y{WabAU5jFGgJ1`HoM1D)vWRFrC>;7D1 zr(c++`5z3LCs4ccA&QPXK7ZZXFZdMKlB<*%VC6#@X@V|nBR*dEcM znkavMbh4#k>lAnF%cD7EJ z6gf!X_-y6(+a{ggMGDT!%9G?Y^HoOD18(kpHPtKeC-mAyhE1WUlV)LpAKBSrT2OZa z#qh5po>SF^Wd_|T-{xvu3n%$hXQNoIV-JkZg*M;Hi~tUD>&PIJ}!e6sYCny#{aIO??q_2l3l~lFnX@ z0CVT+Gx{O9B52xKGg2mI)$UIIq*Wb0aSsxnT_&MaKAm$pKTX?#GXJs7=95lH^G#nHUA8HB&W;f`UgEHTM1rH+$Vhkfi zorOB<%|4!XLm$e_3EK%l7a%r7g>_i%0mnnV5_*JS zUef?y;j1C2aFziCxmH9OTV^P(pqM;9B zS+9;gp>$}HO+2O3mTGie3`gQfp%1MYD?A5Ug$ds9-J_jt`7~s)2p&c%D+R{7!zz1d zIwk!Rm?y7TV~-TsdcrC3-t5H$L}PVaeWY_Y%yUq+RVF)2-A$U;__bNH6@qwpy?S-G zPKo<&Y8}5bcS|xWRQnY^6$GlAL{}YO)bzTk6Wufbl%l2yu zv&@vUQx=`rG}XL{XJGs@exPCHvhb(U?DAe*Y5M8usRh&1m1>1D8#}7yks~>R%_w@| z6AaSU#H4-dRC?%dSzuHy)%oOV^=TyVqg!>ov~~-*qxJifB2OiDP=v==cQ9|6L3J7o)ff*IR+w4U zdE{HVl@vd_n(T+W<(ITQ8)_dqB7=|TMgB#jP{-Z!H0VthXn1YOFNbY&Yr!84Z~v-d ztA512gxQ5BmK<(LNq~l44pJI?e)t@;w)N8|KOO&s&~91tcVTl>FWHglqmD3z_;qZ0 zCRCf`2+NHqj>+y?UQ^i^GQxD%NTgmI>Nu@E(}qxGejhx^om=0_XfZ52;bFZ@&NNLw zQY~FbJF`yb#M*_{&U9=4*{E9`v{tLP90CmBZrfW(N2d9I;Ym?_iO-;)eww{AH55y%4QZq^oOBx>{7tXE zDkfmuK8STgzlkA(&AA)ize@Sx%MBJVa%Yac<^-1u@Kt46o)v3+$h8#moMau^fTh=z zKvw1~{>6?0Z(Fi0T+%>NC@{yOzDrJ&rc;fRm>2eKG zV?ST-Yt<5BPe6X+IG0{pXYsB3j-0F)Tks}K*B66Xc{^lnzcD%m3*H?4 z(yD1?ZK|T-dHToD0b@_Tr12WnHw0;2E3*!Z-|2?e*OxZLp~Wg1R(@?2bi?!-ocj8Y z`Eej{_{biTiuP6iB&_h;{d1%}24XKUA3A1eVNtMWP_g8M2iX-J)_b|r>w3lR%xvZ<}{c;HStjg7YNWppNj zoj_>#Y2S4l*s^5lX}YFwl+50iw-%9`VW9n0FV0-L_C)RBiO~l|gge2gy9CfT1^KQF z=9qr3m4)b4;3kv0+#BjS^IR0t0)*WOK)cAdVM6pq-(=XL>7*>k5RVZ;XsFRic8u_3 zooCN+2YVHo-*&Q}6^wE$PKt43sC>oAxqba+T8E{{J~)tV5900oXDRF(kN&HM)7^Cz zlO?A4m~SR-D=sJQ0V8r)kUnmy#vU?~K3s3^$SzssHV$z|TI9JcRJ`V#M&|D1lDk{I z((t@ZAgDBHc$~_%RAFvQb?vX-x#Xm2fm%IiW@vCn&p5AcEA4oefM2~pn$Jv8k@nZ7 zJbRAt!G``Kg{Es`^{ma!3zl}pj3k0ccXR}M_eQy%XPnSe+}Awb%egoX*YOAk;$32+<3nqqE zA6QFC!!A~*v(mg+Wv^)C$n*Jpg0ph|t(=eBj$x2`w<{Z`kHYR< zpl!{Kn>4{3m2={&GBsA|#{(j^taS0WkGbxvH<&K=oRaJ`=Pl{`JtUxU&`G1AdAQl{ zQ4)>{f!{CEhs{HV2O@8q_ik{EJdvUkFnfEMG#jD;@x38y*uV3{v6x8B_3TLASCmg9 zeodAo*S2YU*Z1xdA0CZg3jQA);bVvP99N=aJZ#Y*q-y2WFRQtsEyQ92vh>ImJ7uT5 zs~&@LU`K7e?GADL#5#AMs?zuuh9PhRtoGYJDVw)Qo+!h2JS9+3 zw@$(=Rnl%4_vz7F%atj4 z4AMIp+^nZKa#d2`66=-YjaWuO?qKikh48P$9Ua_VMI3!_U%#*lm300iT zEY@9`VmiVd@MpOu*1xD<#WY`lP6JYG(l&z`3+M00aU`asjNe`DhVq@BtwVO%7UV@= zfBI9b$8B1$RC~auC$Uq?(-F-mR=jgG9G0Hr{R@@mkg*f{@=yUxEFDMwN6@;(V|bx> ziq~9G3-k?>+5sAl+vp+m_E{;H_RQs*kKq(#60*9O6Woy-JG|MBqmmdcV~C%z5nTO@*9O*)!dHCg8Lr+7{jDw;ytyzywS>{ z+#mgU>JirqoD=%j35Hj>s#)p$+4lM-aDC44B^Pu5`CC@ePoh#Q`eQm?8YHRaOSpTk z@e}rmNDf#mtVb55=YS^E`)NQ(nE-r4m1jF1_xVuuT#8vD%^$zqq+v7oN#rbC~o*AEy+Ikqq9 zT2NRI$!4DUot14ABgN2<)z1O$)?x4f38GPK565Wk&Q0BA)z2COAMv7wA|1UB_$K=n zCL)T65&63A8MhaKdm3Xg?#gh$aUHd|Xb6Ec87UxTJDI!`Y3CHNz9-a+leTM)MSXT< z9=mgpn92#^7VJR*-C1o+;@qqe-R1_mS$N#teV&GKw{e?f*2>X@atkWf?h#8KQn?Vi zH=%mZ<_&ZO?SEqW4u3s>W!E2%#d$4CG0a=G59M?ZZ)A!5aP6(HwmFrJ^i#iu*IfRimCO zf=k7nJ@dtC1N3cOeJNA2;&RuSq;<#(wIhb76ED!t`VQz- z3HH2=fpJ^j@9DMAVK`!o%|C|U$-9rh@S-F^rvAcbI!H#$e8}@BF(7xx6i3rIXQ=)3 z3Y`ihir#X3ST2b)v*on8zuSCmVMNmON(+!u1W7vuaERP$rm!Hpedcm)BwwOAKB~%P3l=gG`e|sOl?>4^7Fg?Wkr4Iw)GJhP=Smep@7M|+X67e zbmO}J-p+DY=S`jJc%A3`Dml4>pSJmasvg5wo(+F2hg@!wnZ>u=LxFN*KVEAwDvd%0 zI(9O6Zc{CYEgqKgIIV0ld|UN4PcBfq-DZqWWl}>tG#7C*5)XYY2#S*C)Un35u(-{r z1N&jwzivdTw@{3acLwX~>5=k1i5%FdIL-)_NXHhUh(A#(25{EnGJJ&%yVi0ErO z5f$gr-cnW#K%zSDPvla}uK-os0QUC>5$~!>z@JT5TQe;F+^L>Re#en){Rk! z&@(JVRpB?6sB62`aBwDT23Q;YNWJ%k<1Iu%+rU_`1T@*2E^X&LP1+%M7b0sP!KHcG zwP;>A-u*7JTH9>>0kLHaZc`fGXY{q?1(&by#2}4?solhR*jIY^*Sbj!^8i*cKuLzz zQVrm50htYbx1$ts)NZ=4qmbRq=*O!u*9>45DkPq(a3`(+1>A6Sczg~%2&SI@Ei3EE z?wf{kE-Ou<22huRa(+@a^n>^-iWDotm@Kc4e?EQ%=Y+^~3;L>Ym*yV#1PZ03>6JVZ zKCrlJggw;E5~_ZmrMfH?^<3@Q%+xSXW3-4{8&W*dN3(ZytqfmIPQXFpk9>1ujoK%P z=)yGYfdd_0(2W2cNI)=9lx)*r(a*XwmHh+b-0`mHk*%HG3wuu|C*wz<(O|TW3=Q7 zeOmoD(1dUktY75mC)hxJsY;EO_oK<+A7Uiqx=`J|6t@YRECkv3{6oJ9bd}7zdchpV zFdecgLCXB@9t%3m{XoXQz-BGgTso!e{fXc2-Ur{%T6rziyA}pqU4(8YhuR4|L{9?_ z0$L&f2vLd1#qUsuZ`ljqq5BPjto5!8s5Va&>@jT9JfP-{pZor=qM{;a-Ymd%y<+#4 zg)gUmOY#JPzAO)MTWeIYy z(_Rvn$?(hb)jDr4VBU+@8grb#t{^Y(1+a=%yS|TPNqyjNc^C0O2B2+g11P5kK*BTk z*~3(4`JO$7mv{N~M`MS6RTyM>S~s0ek-}1u^q88V}oKttXB<95ZKac;AnsO@9b3vNX&jvkJ*Rc7^c`~M=>JwH1T2O6w504~y7PmS@AU6V^t5fkKu!8gqI_7D$aqt#yRyAhe7o zG3d5=X=0v^+HrjmoSW!XNCkbbjvm8920W+{^b&PTR5>)K)7i zV!)dBPhJcIu~II;bJ*LhXw3XlP>?ERzs@f^sApyL79^?A6P1Ai!a6}gEAXriRgG&`IdXm()pKW)GRi89dw0tL93y8bDl#*8kCFW__#7s1`&&mz8+HI z!*#dF6H-a9XzY##2GL7GMmC(xyEK|DLqN``4DJTngg!@GK-eG56r0|6$$o6YGb}MW z$zu{o#I3ViyS}g`RNfbQuvIG!Xap{&B8gPF(k;2^No^3?M&226j5x^Vy#fjj%7l}S#+TJgu{W_+pH2Q*-w?@D?v3X>( z77i@)&%eH>`pu$HPf?w2W&h8v{R30V5EG?R?T(cn%K6&z>*^+)qZTe-P4s*Yg$vls zkNz6#1ucarCZ{F5Kju8C{$|CeuAx3Y7N;?`9(SY}A [!NOTE] +> The policy type and ID of the final output policy will be determined based on the type and ID of the **first policy** in the policy list table. For instance, if a legacy policy format policy and a multi-policy format policy are merged together, the output format of the policy will be whichever policy is specified first in the table. For more information on policy formats, visit the [Multiple WDAC Policies page](deploy-multiple-windows-defender-application-control-policies). + +Lastly, select a filepath save location for the final merged policy on disk using the Browse button. Once at least two policies to merge are specified, and the output file location is set, click Next to build the policy. + +![Merging WDAC policies into a final WDAC policy](images/wdac-wizard-merge.png) \ No newline at end of file From c9c6672bc3c1ab923aaf98951317500241de05f7 Mon Sep 17 00:00:00 2001 From: Shannon Leavitt Date: Tue, 3 Nov 2020 12:19:21 -0700 Subject: [PATCH 032/958] Update bitlocker-how-to-enable-network-unlock.md Added commas --- .../bitlocker-how-to-enable-network-unlock.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 092a234e68..b69e88d45f 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -124,7 +124,7 @@ Install-WindowsFeature BitLocker-NetworkUnlock A properly configured Active Directory Services Certification Authority can use the certificate template to create and issue Network Unlock certificates. To create a certificate template: 1. Open the certificate template snap-in (`certtmpl.msc`). -2. Locate the user template. Right-click the template name and then select **Duplicate Template**. +2. Locate the user template. Right-click the template name, and then select **Duplicate Template**. 3. On the **Compatibility** tab, change the **Certification Authority** and **Certificate recipient** fields to **Windows Server 2012** and **Windows 8**, respectively. Ensure **Show resulting changes** is selected. 4. Select the **General** tab of the template. The **Template display name** and **Template name** should clearly identify that the template will be used for Network Unlock. Clear the check box for **Publish certificate in Active Directory**. 5. Select the **Request Handling** tab. In the **Purpose** drop-down menu, select **Encryption**. Ensure the **Allow private key to be exported** option is selected. @@ -135,17 +135,17 @@ A properly configured Active Directory Services Certification Authority can use 10. Select the **Extensions** tab. Then select **Application Policies** > **Edit**. 11. In the **Edit Application Policies Extension** dialog box, select **Client Authentication**, **Encrypting File System**, and **Secure Email**. Then choose **Remove**. 12. In the **Edit Application Policies Extension** dialog box, select **Add**. -13. In the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box, enter the following information in the space provided and then select **OK** to create the BitLocker Network Unlock application policy. +13. In the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box, enter the following information in the space provided, and then select **OK** to create the BitLocker Network Unlock application policy. - **Name**: **BitLocker Network Unlock** - **Object Identifier**: **1.3.6.1.4.1.311.67.1.1** -14. Select the newly created **BitLocker Network Unlock** application policy and then select **OK**. +14. Select the newly created **BitLocker Network Unlock** application policy, and then select **OK**. 15. With the **Extensions** tab still open, select **Edit Key Usage Extension**, and then select **Allow key exchange only with key encryption (key encipherment)**. Then select **Make this extension critical**. 16. Select the **Security** tab. Confirm that the **Domain Admins** group has been granted **Enroll** permission. 17. Select **OK** to complete configuration of the template. -To add the Network Unlock template to the certificate authority, open the certificate authority snap-in (`certsrv.msc`). Right-click **Certificate Templates** and then choose **New, Certificate Template to issue**. Select the previously created BitLocker Network Unlock certificate. +To add the Network Unlock template to the certificate authority, open the certificate authority snap-in (`certsrv.msc`). Right-click **Certificate Templates**, and then choose **New, Certificate Template to issue**. Select the previously created BitLocker Network Unlock certificate. After you add the Network Unlock template to the certificate authority, you can use this certificate to configure BitLocker Network Unlock. @@ -167,7 +167,7 @@ To enroll a certificate from an existing certificate authority: 1. Create a *.cer* file by right-clicking the previously created certificate and choosing **All Tasks** > **Export**. 2. Select **No, do not export the private key**. - 3. Select **DER encoded binary X.509** and then finish exporting the certificate to a file. + 3. Select **DER encoded binary X.509**, and then finish exporting the certificate to a file. 4. Give the file a name, such as *BitLocker-NetworkUnlock.cer*. 9. Export the public key with a private key for Network Unlock: 1. Create a *.pfx* file by right-clicking the previously created certificate. Then choose **All Tasks** > **Export**. @@ -220,8 +220,8 @@ Here's a `certreq` example: Now that you've created the certificate and key, deploy them to the infrastructure to properly unlock systems. To deploy the certificates: -1. On the WDS server, open a new Microsoft Management Console (MMC) and then add the certificates snap-in. When you're prompted, select the computer account and local computer. -2. Right-click **Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock** and then choose **All Tasks** > **Import**. +1. On the WDS server, open a new Microsoft Management Console (MMC), and then add the certificates snap-in. When you're prompted, select the computer account and local computer. +2. Right-click **Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock**, and then choose **All Tasks** > **Import**. 3. In the **File to Import** dialog box, choose the *.pfx* file that you created previously. 4. Enter the password that you used to create the *.pfx* file, and finish the steps. @@ -246,7 +246,7 @@ To deploy the required Group Policy setting: 4. Deploy the public certificate to clients: 1. In Group Policy Management Console, go to *Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate*. - 2. Right-click the folder and then choose **Add Network Unlock Certificate**. + 2. Right-click the folder, and then choose **Add Network Unlock Certificate**. 3. Follow the steps and import the *.cer* file that you copied earlier. > [!NOTE] @@ -336,7 +336,7 @@ Gather the following files to troubleshoot BitLocker Network Unlock. Debug logging is turned off by default for the WDS server role, so you need to enable it before you can retrieve it. Use either of the following two methods to turn on WDS debug logging. - - Start an elevated command prompt and then run the following command: + - Start an elevated command prompt, and then run the following command: ```cmd wevtutil sl Microsoft-Windows-Deployment-Services-Diagnostics/Debug /e:true From 1f6e2b45bb0ffb7bccd709a236208985eb82d073 Mon Sep 17 00:00:00 2001 From: denrea Date: Thu, 5 Nov 2020 10:37:50 -0800 Subject: [PATCH 033/958] edit pass: mac-sysext-preview --- .../images/mac-system-extension-filter.png | Bin 25122 -> 15868 bytes .../mac-sysext-preview.md | 109 +++++++++--------- 2 files changed, 54 insertions(+), 55 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/mac-system-extension-filter.png b/windows/security/threat-protection/microsoft-defender-atp/images/mac-system-extension-filter.png index d2f1c35a83dcd3f85e43e6e9e24417da30ad7c51..db725b26fa5ae952cec16d6d6d26abe4627b9ecf 100644 GIT binary patch literal 15868 zcmcJ0gL_=jyLD{aoUlp5#x@(Yv2EM7-86O^+cp~8W@9_|^nUldf5Gpb=b6czXC^cI zoW1vY-*>I`Mks!jL`EP$00RR*J}zl|1wKj2Qvk|JQ06GX?r z36zep(yVdOmmaOEpIL2q7ZUdd;=9 zto+h>inJC8ga{$Gpb(L~Lb}X%zyE&o*NhTv@@*JBG4M&h|Ln<9gVo}R^uJ&EwzROI z`aeU6(WS$Zc@|BH1x6wG{h0PYe&Ph0P-rr98&73iZM551Uz(abzk-2Guvg#W4jMNY znQ%JXGfTVwl*MciIA-9$bM`ENg%DC}7fV*O+B$x-9On1tdmO6Mma#(6QQlh@9l(Z% zAKRcVKY;yIX&puznaxqPxf?}i=+M6_ zrp`ypi4*F|#Bw#NvCMK;z02@Hyw|(gD*2vgbhE=Oq$R)<9t@7Dxk&J9K;Q0b7F#CrYB1v0@{Xda|-LbW-ry^r@?>;b+T; znOxg>@fghQd{ytD!hjLEXs}&N#m7VYf}6 zhZ$KW?yL#Hw_^p4jI*CsmD5ecno~ung0GkS4{J^f8fIsI=V&du4PL|ypK4P$|FrHd z)98&eF$y}I2E&rJz5PDCXuFNP2}LF}X4MoSXJMd47=w93&lw`U3oH5s5-YM-M+(W` z))z}$Y7gv9`by+7&Hatk^Kqi>ysMzzdTEi=*X5zYjql-m^x z4hwR&L?MUE!H^a!lI9j!6LKnB%dR7(yz_p=O5Nw=cggTcAT(litNAoV?TXXR+4SN= zt;H<$UX^x>vfiS9<~A+ontf1bXId7on@Dqqt{n)YN7wJ;W%CZ1zqqjx2P0ze=r8}) zUXp@@5yor4yfrRC-Lh)UCVRo@VlM;jCsCNMq)=91BZlR(5QuiKSEEfWe`2c zb->m0uF?F(>HijRVQy#Vw;RJLg#toNZLh7x@Qj3d#rlK33?&gq5<>+grGy1it6cL=akZ6ylW1-J}*am)#Hh zdnO;o&&gwEIfACI5%LY&9!-4r4~v3RaX)43Z^B@(v9K8QI{A2cc_}F&)8n!6aEA39 z99UEjC$e~*4&=CMWtlo|PwOUq@0ZOYo&qOD-d`@ds#N=#)3hDoRi#^Hzw+OGXXtv| zL9A`{daz{x_D7e^DhFswqux4eW@aWopMnT(5K8#=WWFo`{$^%wE?BOazHXV%aZk$F zP-^n$7pu`^I$&?zbbY+p+1MSVYS{`KZMDaT+KE4>n`M({>6h{p3CSW>b4 zvHPv$X~u_jH`2^&U?35TYU}BaVvbTNwnO*p4{NVe3k`QZGV~K2x3|B|a{kbU=At4D z4S>ET&?d3S0J({xrddE^o3&c;vvaU3NrCLu_p+YFh&B72wqMjRu972dfM&vIe0E8r7UNow<}Hdz${V6Ns!IPdOjtLG6{5D0i}n!R&mLGtzd) zuFlS{uZMzRa0h#PWMIK;Gn}_z=1}xvNw+Sc!u#>E=4)RTwZADT)!1+Mrs;Z)*fvf6 zU@_Vqi~+FG&2Tbz86^x7KKx5;tkcJK80o=y1^}cyM*_ygP4Pn{UeQ=zA4(gL_q~3dHIGdS@6vX{2tu#W3b62$@X@e|3gu|g zBpOuuv?8jNUGJWS20~H?z5(QCuDeio&nzeQid;jVDw`qThkvP_2u2h0;>bq(Vbu3Z z;3L5l<~gfV@q{ZyQfaE`p+zqjRIyJ-?DMYp}qTVNw>SNa^*%Bnh_dl8ws&l8A7(TB;ETYs)M zbY;Fc_YbAqeai8E{&AW~v2n_7uf2q8I{&bxu4JIC@i~2al~;^oZ~(1l6i#zqJ;gko z-mLUw!0_bdrJUk70gdo6h?W9j$XIw}q8=C5n4Wcv{#@&! z(HuV$T4qb-2+S*~u2eN+AeoZ~SIDbR~Vn=GZ zAN~Yr-3JE;B2Ia592v+WqH+`oFi?i-A`~?s8!Jo8URL;PmFP$Ri#!2Wcw2a8jqv1) zt`A?Rlq3GAfxu9o_oqWW-zTcIWmr;ge}5&WEHL;=VG9eo)GuGYsP8!Qk)W<@7J=yi zNwnbX(L19OghR-BQ&@X=GG(Ud6$PXB$=Sh*qOEO@gONmQrbgtwL+QM2OsE)z3QQ6m z=j5{X1@ktg%6888>#7PuRBzgICMqf__4gwhw>_T@AbCPdpcIi! zTt)^Cyg}8nhAODPm@LMVK^S#UOU?-MU_gd+iHp6tbhKELIER1fCyv z_tACR2^hV_&eMiRIg{Czw}kdz{1 zLFC%^u1t^ITI>&(&$Dyzp{E6Mex21~r4JDG^49le@#>wX^Tm&(X|cYdT^FYCqlL?K zUJVl3b=;{ctcY^=O1I4TykDhRr7^g*%D^BKChofqJ^Bf6 zrfJO)F_h(c+Y>FVXVwSEbZ3j@DMN(Y`7eXe%xQZ8Ko7Hje7%`eSo;YlBA84bufWKQ z+n4tbirTa*6$Ia~V&P{ZvW0Wsfb33$wyNV^^ZH$fD0uZS%Z;QGl@|R(a6kFm!9*6~ z>K%}RQlN#Zix%AFf5@jXp03Tanf}4!b7z+O{3O;eb{~JOqbkKcBXwp6BGBTC+q|)! zGW$$-v0CMqH=@ssKMqsSV_t_uprNXE7E&?BG)_!#)-1X0XxIhs;k5MjP83#u#yH7`D>jy?#Y}{gWk%Piiq8E7=g#3( z)V@5gK%Qma+hp9=dlAsQ7GD3%V45RLGd%Bj*Z{B;p#aw*J-Y!FBEX+vY>%z;yk$F- zFqdvp@PjX*LKmtDjf)b)nI>?I@?ChZ(|@Y)$ZZJjD|*<$zRN=aZn#eV0vVE|!u{*l zDSqjcheG~j%A`5^b-VY+hg4F_ym)#}Juyi--MXpoXgfr;LIm4qUZxG}Clv%lY;L z9f_@hmr#X`cBu9yD=6&XaG%@t!cymE9Yw*XjTRxFVs5d1?#u!${r=@}bE#xA&;6sh zrR6E|Q>Fiv$63Ro=YC_C^>QtcAM|LDP0iK;)$F8H-i%Gf%3GVHE-8;`^Hk50yhPH7 zVX)RNGLcpF;mW5_Y`gWDnG(C=S%c-8nvs4M)e>>j$1_69jKAI?Mfc>CH>0ozrl#B# zu9UXZ%*1fAke$^`Xc}Fu27M#=6lx+yt1l>?lG+xH*8K@!t(2&aVd2WU|)g>y0$3G*ClM ziXQ7vacv}A(358BEu!Hq3AR~&tHVOGb~P$f+i0%oD34>`{{#L8i!F?Q7uhOw@9x9v zR`2`V^O-y!iBxH8bbMlRSBt>A0$D&K-Z4^pU|)k!O|@y>GX;+l4qYR%v9Z31y*{|V zF-Oo*UIY3~6D-6LDWOyWMDSOO(Dg~Kef}G6J#V?F0&QFk%voEfcJ%%p-cYr*Qr_$$ zI`Wfv!F08S)mZD@omq~a_ghv{D9QzFdQikFZVg^qN;3V!-p>RAPJ$U!R3 z@4V4Zk76t!j?-I?g=f}Uo7!g^-gG06&~4(c8ROe~8ZWq{jI&w*BNB^@6Rti*K!b99A3{1+?9qi-$*SCXtpyLRoQMK?|k*n>-B?@q${aQ6dO^cL7szY2TT|&0AU;zUk!U z45lo_h+D!yBQyp^QQ^-)b-%Gh7P?SGO?1!sL~ZMu$dBb}nKxgp>k#SY_%C+1=V0=4#A@!Hvk zT&WG3F_m(wCTibN@YF>>U)ii)0%&D$qR!S3R-s*gM5m&s36?SYs*ZxVW&3Mh_l2t|j5V#kfPOBOp7 z09^E|=a7fMiIKDO^+^+p>{hxe#pgN7A#r>vmKv4Dbfgc%l|2!oE)~O%Iiabbw=~rA zGj4kh!45B=jdX2$dreRA%^BKFi>3~GW~2>;Z;*_^!5rJtCnE6QWf7U{uQe@bs2L=T z0r{0Y_y@H9iy6kYNDv@(1(yNv$qLs?p+#R{+>H$lS>RMK;YkqiinxqZs@4X;1&Fx6uWgHnw-LpfRhzAsW+f#3w zv}+J)_=CofYBHk0>i4)EHeaSzr3v5p_qEA#-qGge1pAXJ07xNRypKJJiLWEy92;#P zMAp%2YRiS;WZFlD@wtA;d^Vl3)`>R5OX{H&PjBS8OUv#McX7FUeY&|zf$DrZ$k4KF zF#+mMHEjoIBwRQF zcvo`r%g$~BR1pdMX*dVp^HITGnTJEsU&lz!aLN(~4~-pq1*?iKu=zs<>+7MwhtW67Kx`4k12Hq^t!5HX~qb67sCz!WTh zckm{+f3uqQ(1OvUKa&o2SUkHXG2!bKl#!ZQop63}fWAKdQ3H^wQe$tcTnt z`1RFl?dIw}hLlOG5kn>nJSZ=O7<>>!w0h*=qpo`?seeaiS&o;$Xc`o7Xs8Kh72dOq zkIYxU*xirx<;!?sPlt$s!FEZG@AHP&#qnQ)_*1>t9o#n8Gm0)P&3g0czg1nfC+tm{ zwzi*xfnr>qD@&zJm0aHU4mzd0s*03Zzq_;e-`z4Oo3~`7r&mV(J^j4t)N$Oha-m?b zqy2d?8lO!Hr4W_?!9&DT?_0ZYphGf1wV=OQ*DVhlw+~D1&eP)!p1Br)hiBy_DjGBo zZ1;uv0eOg+w^uW-^fy|%{D+j!M9~t^%le9b%iSz662`9O<%rM0d6>^w-;GBQ2rr|~ zHZDW&7+V5GSWCI^%5T!+qYNGK6QD&UD)-7 z3TX_(O}pXlmopr0K26h*y6}b& zS#JSk3cJ|^QSFLHWfPb2MnWOJK&}i}#CeH(&~Wd5Le8^jcnx+8%{M9j_s3meDtJ~< z#Rz5ugYtXR%z#}8KGMCXOTTv{^_aw_6J|J; z(i$~yw@?-&g3Rq>ID2Z$K$9<_CU_hDqIdSiQgzYKSK;@?ag}+p`U&~zEWQ!3;izcIFqd=%BD??}mOT_E-8qLOiC71N=BZaMGbf|0+ zd%i!5qB^HCPT9J0A5NBESGba(UJP;x;Ug!l!WxMS3NnN@`X&GFN|i1|w=qGwo+Tnp z*HPs>9i9t^VCU}=*!oN8uRSU%M+hgA-4>VY(xtXqaZv*!k&#%E^jmtGE{5W}K zrR_vf!#qTflXDv#z0kPY{`zQF#hsmQ=f#qwKDV+lr~;2$XHA>b8A7jF?$Lg~@RV9v zj0U@Jg;_?79C8g6iI#Yd)DG$P;ErJVi@>eYxfV0B%fMR#5N+-3J^=KWLWy+;7~%2k zig&)s!*A_W!rr9I#Gey08MJ98nrPV2`)w#g5_vrJj>UwPyV@iK&ZBEi!s69qen002 z8?%584pyRMGL43C9_SimXZ(QG-NJ0kqI$-WF=CAhbGB{YtJjZ%uq-xxZojOL%#7mD zELJ3HW6Ea7K~G`D{9}B@da$%)*3`E*2V8S#6rnwTId1}AoM0_VNPF0yCjR&4zc>l- zdxAHA*Z>-srml`^ydsnx3waQk9^Qg1&TXmH#mdx_nnK%o7})E76AN25ZncrWyWEU( zQi5M)aoUkk*j}p=q}v~Z6}waNgq!1{IQNI6?#_h32_!q@ffVlvYS5YZGG4K@=fD`J1o zQ?`RqEOjx#`@s|r=Nws{?fZNTXMtYM|8_e|>if9;c(p5yl)>Ia;3x$a)sgGW<;MDr zJDmaZ)C!@+CxA8LABqtGSak)=K1$Bx-J+fmW~|GqO_PqxyvkC272U>gOS}mNbI>o# ztDOO>h4O$ujM~j;jaNl!x`C=9#iV|(4#xNPZv0Uq(#Rbjh#&kacYeB;!l`US5N;;* zm*MQl)Fjii5HgT}U8Gg{G zucU$4HNMjrUmP8E({=#VPbdm;WXDdQv}!&R!nH8|4L_kTHcu-Gg<|33hpmBSB93%p_yZd> zu2Q=MPf0iEbS`4HFCDT>h2OBMxgTy^TT1#$Ot7WRGe&gO@(0{~W+RbXQBiTK=npti z(IG2rqBFv_)1(QCVtN4)1h8|;IWVCRt_wPaOW=uP!PSa=7{KOt=Jd8CvDzYT+; z&OmTV?G;*-TUGYjyhgqoMK6I3?X%4|W|@D6&IM`<@(qg;;Z_CUxQ@Hr6tPOcUhhRb z+4Okpc&_TY6q5sdSnj){rrdap0UoPPQT@fNa3i%s_Un>SoPl&FHWIgJGJ+1|NroF= z+!mb6nh%ilt-Gk1nihB7=u#Na^(E-2pEHn{S7oYyXQ8#SH_^?Bl*^G^YA&@IdT0=l z#1dwS)^qKA-ujLZ;>a-dB4gJ0!y4zSsqvj#ab*5GR@8K7A56!$kMCwQ5-FK-R(NndQ4-B87cY zadO(N6AxQVI=5=u*l_=kR31MooncFkJuIy{86BJw>1{*k6SitPtWg%>i%-O~^i1)f zy9eDVt~0GRG_Jz!<6N&3O}X#ds&#mK1b-nF1(HEfLBe0OZEQ&deP1)Vo%A;?EiF&J zoSd9gmzS0ju$dw~@q@`UHa3bJ40kHZ&DC3505Vy&{N@*1-Q`v@ElCjVb31zWp$v>k z8|z%v5?tTydau)yw6r`Tg zBTgU);=IH2x3Uzc)judv%f=!?Rva1bNdaGeWFB1EZV7z_7U_ZSp_JgV!V zO*RVuPPbk?{br*fAsj80$k4s~n>15ocg}1vTxt1)RdkHZ6}>7s&B|(>;#~8u_~Quv ztv{A5mcQFy3}ydhb}f0uxrUquQ!_IxCXbvEv?_SR zO&t42V4?NSW}2hM!|J8cjzF{N8RS>rTvgZ3I+SRH4&lo#6dw8R?{}Nrqw3{${& zHf4wmtZ+J)kvrKQX1rn*4beYr~aUiXZ{Fn+=-2riUr zgZlWfIs~p|)~H2fo7zy5UoMt!;FQYh@J!p`^V@j2*2K6s-+iZgDoPR+CI|@8A)VKo z-__KT!gPorC=!Neie&FnI*3MLZa-&m+I{_rcPA-~%Anhh=QS|-3`YN?G&QnEh+-jX zxmn3$adPGHMwBPT1<{ZshHgkBBf`8gP2{?-)xf!@o^2#A0XccyQ~Ya^Fwsa(U!nY+ zx8)v|F&HwS>_aVvZmFCU{5FGz1ltg@* z4S!qr=i?Hl<}C;xaijTC6`E{!igfxX`vB8j+rp~b=vCXcGl0~*dGfxhi&dM6dh@$f zn@EsANI^-Up1k>1MTD#3y{*rMfld+MLffle## zbLYNLWUgi5AQ%^czjJqf1o8Aml$H>PQ+|qF@N8kwlmYf+c=HFE7zN6?bVm;otdTY+ zhfvB4)OB!1$S@0q@2S0HAu0Dfe%*xiOItI>brEN5e~8EQf409DtLn*$N?KJ2PGQuv z{5cnqe2E2{#8)R$^6&r6N)uK4?8SCx5N-2*aBt6rf%JS9a$3}Mg4z$!@yQiP2(JK1 zy^cfx`y)~Ivj-s80NS7D+udT7R#U9;`};#zj)2ee(_xMRiPU2^Bh#R z>!7u6lDBTv%_w=MqROdMkooHLW&%Slatfdqg|Kj=b`K0E+2^t z9iTWkss}{Nus<=afbK$Q*N(1AY!*|HWC+E60cbV70gCTces7;0a*jV{7~?>h-*yOY z{>q~UX5uqx)d7?572+)hfoQR_MBQ`}AYRj1h|W;KPI+-5W+Fn>%ij2YPZCj(6c9`S z9oHXYKFbfo1;6I$(_%!F8W=17+T5u*{J|Xs-iswF4Bt9j6U{?R{7P)c4j0bfuSK*V z^Kz}DGky9ZRLjKQPO9&9+I688Ic@9E;Gz+vva{Rl(6Fi*qR8Cq9i@>01DE95`w{TXx6lp6me(z3E-A_9i*H2UXRd(Zw(v4``u)0ZrugW3fnX< z34#DgeN%#j!p*V=@>|h02Z};wDQg(j)zwviATeNOV`T+a5%FF;3|YW5un-P= zwRexCR}dxyUQPkVFTSo@7?Anol2Ob$j7KnN=~$JpuMVbuOD9op7YVb_hPQs`D#AR+ zPDnES^IZYfiGZUeYYqlpwJ(-)wC4C8Jh11aMuXAhDg6Pa|3tsY2pG(ah($!pkPSjE zdoo>BWh8r|Fj|r-E>FBF&DU~x>9@Gm(7tUUNI;wCsfT@wxCT63kfXUYyn2qmwgHMP zWNU|DVseru>AeIKNO#&d#16nD;20kMWK2xp4?exU>ytqxVMj>td+}&mc`swT-i^6V zk=jVQaJ1p|(VvJ8?D>DMYi;nfl3c%!mEUBaE4QmN`SB7x&Pb4LGs@id%#{yLH;1+D z{*}!!nqfrwJ67+>Trb5K$C-IVut;~Sj1Y_!J=J%y{3`4FGFz4(r1n6JSy zW)b8+OBxF^8T%eW-(_EX&^8YdiZNPo7oP;z@3b#(U5x(arNpM z-q+^-k(XI$Xy|5LrLIO!$e{pqN5JBiFweC#z39^Lz>fc#}CqvgyHsWWpX)C5JXEQ z8N0$9BGL_Elt`0+lfV|d{iD7CYApCYAZyy`A@G|hH3-Av*7enf*Bo{aoBBM4bHkrv ztEhiEuf*QwXt1oZHPU@Vj7;5}FV=7-TOrt#61L5`5&_y?@fN!k;`4Ph+r(7a5~62r zeLXu96RJG;p*XV2@%cEH9qRSfxF2wg?piVhL^LIFeeGgyutPmS*9+*6{c7zPrI zgNk~EY9{Mwyyr~lhFYr_Gf?-7X!pJ(_nNwd5g@o@B@N*3vh3p))WC^h#(c|G@1*Ok8 zeZk0xSuji~Wc13Jz`RKR+_O+9mYMT*Y6iD_>A2=N#;DVY9Hx&f6Q(NMJN(TSJQE$l zRm`t?q<=q8dWxa8L3SrA+OTj|>S;m+JX3%NoHdNnHTw(CF?K&=zdmz(6gY7>T$c5^ zo;?Edbs>r2NdmqdM-h0z3!l=KLzP%K%U-XB(+Rge`3Lnbx!-<%AK@z^O!$)Kca?8^&>+=@~~WWtFUD^ z!8ck^$6~1<>rLIx0m(!@m%s^w_f!yU4;q#pCYfMP{`dnU_S>eRbLDQ_MQepm{#{5C zL=Sh4VWlgmHjKMeQ>p3fRjkcl@2yDZjYChy*dw0%MMgeJB5{F)xmiwudq25(eyAv@ zjdQ}k{GE1hB0>pZn**aTwh0H>wDDM3=np1yP>X~JWWu=2UmvfeM0ZEW#v4;@DFNE}3QH=!!T#*d(8AZZ)D9?mB^QLiJN#HwN9xd4;mEi!z6oVe6!Org9G zZ|Bbl+kWW;h41!(#-GS_VLD=%k!ikOgO_7U2=tx-=sOsLhw^Ye#+2iE@*A)Zcq^+& z$6Lbds6tP{AFYn)@V8;?MB&1|Z}*0nZ;PVx&yCv%@#cM;ME1Yuu$iHV zc){V@Y96INw&4d)q!GD_XQRx#etPOe}{SN)Jq))`jdY#nn}QD{E zpxn+vt9|Cc&mu+`Mhdqij#9jB;2i{UFZYPiuh{Nk3jfnylKPIW zh$=56YKYD)b_^shd-#K(knGk0hTgaskDen~8)(GP(_ShimLY;Av_$J=fMe2hfTC?2 zr)}QWb&m@#Ap-uy?j=v6xm4*-qQNNfkLl)~PmU_uz2Z{zJ2}rv z!Emd%DR0_eb1!~mb_UJ;mLaorPghBpU{Qc(yuZvZ&?R+u~ zj$~@T6nVxkDhS7-C&myv4qxhF5ZZ<7U&~WB(z&Trk?-N>BXwD3;E0m-p+@;68a%i8 zQKo=ZXMfIWR!zqMGgm@DpJ-Tr!@_}cD~5H~!|A!-BL$m5I7(`G?59mv1B&MW<=Q&b zi2fWVvTdaGhe~Ogn=UfoyRx?MhT4tqw2*l6l0HF;@LTk55>y2x2h|# zmCf*r>#tvpi5|CZB#4I7Q;`?(F%3h{E5i$QW<@BdMkre)|0$`$vmr1fj3s{#UmIa(e#qI5%RnN0F^sXc8@MFcPce z95Pw}CA{I$jx9dIc59ro|F`Iq4Rd%~g!WQOQHk=88BeRu+lTpvJ12oz#*#Ju+buq4&X z)<91KoU!NrXbPLzM6}=WEx-+Eb$Gg{sHph(yfrN9w)wo=1FrSj_V(8Zn(X1RF~krN zz;kzWy+4)^>YD{rpS*78-ay^J#>SQaf58D%p{J*(PdA5g_-rst`1SBKA-`^Zmt>1b z?-ld{w)-`&i;lPFyS^ILa`k`2Mqpr|S+)lZBcKv}9Nl@A$fXB*Rs&vQLZzolowf8^dKn(Bi7cm z8I-_sLHCYr>wpaPISrBCXr3ff>JKqlm~7S`0ObV%rPb-+Pe8Mf@Nhq`Ku%R&9{9D} z2vu6VAzAwcJacu!n1*z2G%&COAcKM=206jzn$AIj^8tAWJEi_&pp3fb(%FYm}Qb~F;gJu=#b*9KD z^?-4rX~Pq-3B0`ctsEOm#tbEBrU=ts7fm%WbeLj?`WO^L+0T~O%j^#lcC4m!rLh1h zGGd@HB|@@@z$wf~lkL%{pvOy~U|bpH(a%9nL;YhH{*c9DZ$d|iI?3iLqA-0wMu|kH zlpy;GsuOMpic|jd)B;&g)=$zDXjOo&1R5P3C9^a}KwwCah*cGXRRMev-Sl5`1c)iZ zAKmooRLNpvC#`_aDg1w51RMYra0P^H5q3=#l`nvH?$Z~Suvh5otcsybBAY10*XDk; z^DnhM2H35ge_H%m{j9G0b_g^g&aWa&Ar+tj;9v6!K(8R^1YHUr@Jwo=BZT}@0Od0{ z5;|y;*>|UW?tgBGp*V{qh~1ZATqij5xuS&iEqr7LF`#2f1Qc@9Cz@6W;ZqaVzqJsaclc{trx()>foFo&CIWmP0X|`d=vuY@ba&LpK@Y^Bj*7gnXGj#6e`y6g1Q z)6&u^ckvHH>O=!GEl~gWec&o?1p>*s8;?F6BTk^3l~&#Q8x?9P_rKq}VgTUYf!bSN zco<(q#WnO;_s6T3WrmT?(9eq(zSKE+g9az+`1b}G8XSn)p2Z@@ngxVa)Op*w_v$Iz%mo{5_-OnX{qN3QUU4Qnj!W zmX8i$0N#^Sc>YqKa0UfR`pg#&j(pNayUk9QzYG7o&QI6-x>ahMjX8jTH#a|@a0>uM zQawY$1V8D;W#7yVFk}l^Ny#uWIEFF6o^-4+L~q;VwbtxF12~lc{zB(7uJQ22!{60= z*fknQM@K0F)~2ear`hsDU@WobTPC%2bxuxB|Cq;eAOC7wpqWHAm7ymQY2xI>l8dYs z+m@EZ<_zdTT&&aq`LG+-EyJLaSU0WiE|lN2KxV#V^Ls4-3X=1&@-PJyN;*}0N?yYPylSxjx*0l_0TU{3k%_&(flAX%oShB zPt}_7L?0q2yMIxNP+XxWEKq9!IqJ^HkajKs|P{+bpL z{1+bI;qv-x?31sr9glX;*W0E$xF{@OP9nr8KntNK#FchSz$zhX(T~>`GBq`&P-n{+ z2ae~^uR`s)RzP$Zs4Xu?+D{1TiF1G>2cu3J*|zWgravcMpfvaU!eh>`MtxWkQzx63 zE{GOeImDOt^XJgfTuw3@4Gj(BPwnKbxOZTQm?ek&q;q%xDI+7|Jq@<@eYkTkhR>X6 z4o6aw0R3wF!~EM~-ZGgd-i=anK z6zJamqQXKzH(S|nNn#hH&z5@C-nN$xaqy5Wnc(K1QQn*zeL#^FP`X5$!+h;nZH?rswpci4IC6+DJ?5=_$Dl1NtTn|uLoC% zYBc!`n72Ir_Wgr{lTQR59v;lB&!f6%LmymyDw;oQz{5c*4Sl=pLWF=8B0mFW{OoHnNmvjES=4QONcGGbJADx1iY#M%i z1$|&D;R%}!2M~^!o*VP?1F^_jB?uskg0k=+l$4tdfL!6N<3+Y8os)jo1pEBD zqyAy6>YYpC1L=v29$3=l zHXz?r4wRrK6578lh{h%W!1%JdD*fNUXIiI`x({e4&JE05Oqs+J4qcsW3HR%X6e#7u z@8?Jz#Is5(Vc){&?DwaccM;4R{k4$N| zlqwb#;}F~6D!AXokHLT6RNS=tKcT`W=ReaNtnK5|kzEL=aqJ6-e+&bI zj%_I+p#qkWpj2_RGqbcdg@KU`Pf9`3QXj<`Dvy8#M|y%@lT4=*rWNM zB_}&G7z4(&VUst-7%;(Vg@SB=R1R*TKnV{7)>}i^_XZblP>Fbig^4@P%bq;l-N-2S zuOkvZABa@E%;quR(Idc6oHQRU88=>`okp@E9tC zhmT*vhgPk7t?%skQk3?jn=m%^G#Y3%f#+B(NyV_1@|d%JyINQ&dS!!7qGf61Zj#p& z?9iO1k5_2+eoJQZaIS&sfgxOFv!c!y=LbNYk^@H6!5;uL4!a6^94{85NTg;8`><-x zZ4ycf=CxBndK*vYKDhcQ6;TNsV09X|a97W_#3>&dgP}#|A5GR)kmAFPvV}JHUzqmEtK-vsJ5kp*q ze?tc&CF+3~hJmup58(aj9vsR0?{`*+L_2&lvWCTr zq2%wh253M$_G2E0*Ynd$MS4OGfMW4?Nk(Bg^$R{UeVNfLU;v|7&gW`_Z^m*b% zR8DbnCVXmv*5braeQ4l-!xp+DN@K7y^%ztnPMI!bQU(7@#6oVqid|x)^w+^%2q!^S zP;#E>u2BtfnS@)O;;zFbsmI$Ras6EH(+X)cV`KbO+&|I51`b+?$$^7aL|Sh?2G1Bq zYcc%x*X?YoOqr9(4C8RXI7YZ&!cp#ga|`rBY(uW-tY24z2>84?>GM3RK;Z8TT9Z8m zogy2fGzJX@If}nCL|cbh2d)!;4LyyK1y&nkcw$qB@AU|7XlwvB_&01f*fu~L5=Io^ zlI#G!_(!kp|t~lOf(&N`2rb1V^o@P^$D?1mV_MW13f>U zRRjwt22hZwlB}{%UzUiLNG>PxA?1tw)i)aTi{hUpGt<)h;CD%IX;4YCf$eXRz-zUH)=h?s0 zB+BHJP`pn;nkhfrA?-{qBhRL6WF|XT_q%RktMWs@wLDowOtexMhQ4`-QrW0j774$1 zlY%b6GVikZvQ*Qe%h;~)4E5gpZtxz;)zBsPLDsnEKu>D&FRUUzzLZa6f`f;K*q`bc z$r)ll3@-HYkL}OQPPxr0&*bFk|M1mnkBqLenGgj5IID3MV&_{6LFC&bM!@%Md3!#l2q^rTRu7xTBWYCc2-6h zdWJ4@iz$*S;3yWQTXXMm?s0H&M6)KPm9q&M-cLr^;F~0y*G(RV&2u;vx%)Ntcop8M zUhI&1W2C5el>Di2@?cV61TbmfXE2UxUt-piWwU#Yo-TKvd{Sd-WpZNF{9O0x`g59g zua@G^1w)s`bfY61raC>FWy7bHzTY$>W^IZ;N7S_?w6kqWjxZLRU7edno58Lwu9`>T z*DKd|*9V6z{J9w97)GI=L(yW2^S|ZyIAm=WVh3RhQx{P0OE1~y@i}BgWV!OX#G1rL zk@K0GTnuRDmr9#PedhjdJgsStxdXT3u_M6j!ECJar=h0lac_U^y?vQW>%O!bnp?)+ z?~Ut)H2!( zxrqHgtr6POb+kW^-x8pA zrT?B-r*Sm>YdU25#`3G>@KjS@46%UsVWab=GuT5Ok)E2%SYCRyq0-?;-<65St5fJv z*a`Ry-EzG86rKXFpsFXpccYC_{Nv}}*QH~Rygp>@EEy@S+|8O;04*j66*^8io-poR zWO8Ko*6j}Cn0xv`PBY*pjaNkn zTI?c@@%9o&aYEyRLCSL7^1j&-%I_3xGR)X)u4|6>mi98tC^@RlYes4^KXLyw|JYM% z^RwjVh4~A2zx(JppWRN;hz%15Q^tpDd%d0(vh65G_q*sjp9>zw4gy*HO#R(D`;o4S zcU=)blSY$1B;^pG;AcGzZhza)LB!u-6mIWv8oV#;DV!{vO?kt-Sf}IWzIPtVVDyo* zY^$_X>&|ti=Y#q8r61g-MdcsMj=#s0+kP^xHQP%c+ZMc5oUvC;d z2>i`s%et)6xIQI4*q4z3;O3f{pZ;J&W6Qkq*dScnwrPHnLsCa*SF&_&`or03wywwK z=&jz{w~LB(Ec5=yDo2ny4yT=7-LK7`iL;1#j?7NVm*B69uLWN~2Pp@h`PX$v7b~+3 zs~#^4@W0^SDaxvY)$M*ZH2wg!ZclcyAuWD>`i%L=e?D6l%7`&T{#&GF3;9ZRKF&YC zQ05_KFs4;7+w;+Iv8PUewlBM3A$#2C*<^Zf>RXp`*6x}ssnC({{W#Go2hx~Fj*ak+ zdwI!J{zZo!c{>^JiF?~#z-(}Gq%eUtOLUv_mgCy?rlxpBX46o!$MNUGTKQS^^3|3& z_xyvR(?3(%Z|e0{ncJ3q&4255Ek}6r-+VvLSgLqPd1`lcb9W^>#yC3mf?lqTN_2J; z#Nx#Y-y{kZiIjU7Jr}H(985`!b>--K2_L(Uq0L7=r);+$JhxpZE&q7(MR=N+7pSY> zseQca$cbDbY@NUV{bZx9@3s2m7JPEQs_DggUwM>&(;uU3nUj5~{H$=V^VIt+e=u8I z;f92YglOW$r~mU^hk=xnBh0N6gP>gjd`Am%ec~qK7-xC_dUiJ_!gDy%m{9r#N(W5? zg;LAH?|d^1X#z%eA&g3ADDpj_pD*1D;`D}wNPbAo=<6Ecqp23yOi>Z${c9N+ z1~$|Z2H~{?`+5<-UNA85@gXosuXmi+OEMSkzqPRWx$yrj!{ol!!HB6#fWfbKbz?_U zQ(GqsJLk|0CqTawJWi zj2$iQoh|KbDgTjcXk_Q&ECc}jqv-#B{$r;p#PWYM**g7g)@uV<{;6SMV`gRfzp`Ih z1^;==uVM)?wbqifw0VW+RfjMq8=v66^#8A#|Izp#&JRwejuLh@uZ+&Z|AX&e=Ko#! z|784E<){Bq$;Qq4zg7OPn!lWaEdR9peza=17<%K~w*Q-)2G%`q}Aj<{pl=B*lpI5~lu z?bmWB!EhTFjUcQ`Fn89woPLnMpG*sRy~!kzL!%Jjm@&q)H_H`_`d~Cs0937G9O|=@ zc=iLTp_G&}#(j{t0v#yHdjV;VmIEh$bJ1? zg3{=Km3kZKqazYzOum(tBuN7r)R1n8#|JkR(5WZ@{g_TiHiQQ_NzubsPuRv1q>3gW z;zo36V<;gJpe#kOU;MxfZu!R9~u9EsH^FonRVWJ2_q{`(2(ILXbB(v&gcTy}}T9 zR+^Y1c`8V>cN{*%oOqWvG7Q|38#aE3k^NvPi=UJPXy;ss%+=8NI3W7shd>QWACb7` zjWYQ4sjPbQRLt@SzPzN=eRMQi4@@2F3}C2&NWUMB1Zm*m5v=4xR~aU>;D2T_Yg=2sU5k6?GHpuFrObh8Hfg%qODuQlrkKN&L z$fD$VapKour}J50qC5-k>?3aE)S2qc$k7rW4gGle*)^8Fp4+E!-qpyf zAKVqoE^k~nvrq@8JTZ`ML6IcH1@+A&yrtpk2|LVcI~ohpsVr!Uot?D1KGq7N?-N5O;e~KMyqPei{D~Rt#S@yoSWxtRsD&EE z>!w7K)a5VNSMn6K*ZNQEYw&Ict6Ja|qV>FuVS6y}5jlnBL^E)U0rQBm$&{DnrtG z4k$$1ApH`Bw|gOngdI0HP*}l8k}>iQ4$mcMFa$qG6R4Bk=?b?dF5NFt`~q0RPZ?b) zhB%PUL_XkyfuwjWth>8M-4Ff?qRaUPYO17(lJO@L$483!-kS{0t0YMa7x2yo^^@Gu1WUwUU`W1=|&9WG~eze*UaYdD8-&ARlOga@LY} zy6vW*dbuGjcog#D#fM0}yHzrpocN8|M%U*V;YM_Gxeki$I~`pYViA9S#E=jkplZn} zUteFh79{5}VPj_xK#hpOPDoHVbX8W4#e4UTOiKEiF#9>xB$n+2(`PLUi%zU%O;|_d z{o#|S;4llZh!9rsARdgoiivseffJE`dT*nYp;y5znxQTN0PW#vgTYar81AQ=0bzh& zkl#>`%*T)v1~hT|Ks<@tx1Ztnz6PkniNz8SCyhQhON9bM2r_$2kS7k{F;v01;_oD6=wO^6s6+m>x2;GJv2eKwsa1C5`K3$XqZ|;0eiKlIC@nIF z9?V$|4)DUcB^08w1H^TPrUe+F$yy`BA+vm-R6ziQt)~V436#xSo47^J?q}#V6eh`r zeU~jZFVSg)?2n*l5R3g8YCd<;7mC{*+J#BZ!gfwU7~y|7g=I+Twl!iUbi4K>W{;y6 z#T#Ue%Hl;#(a53|EXoq1%`TDKUN9R2a?w6KLN?katdx<)eRbSfqyj;7o&V3LOuAd}td<2wFe)9IXhLSQBDmHPb9^vOao!p*B=y+JRK+l9%bMY zS+(7XPdMI(H63K=caPWXEIQkn3NdZII z*W+F$DwhGVTn|e_USIrvg149+GeA@#L?cu*KFJieq}U)ZU-SOnQ!H1C9VXtSn+t2L z9<{3@2k9-a&D@gtRxbd;!&9Mc8f1h?>|oasR(aw9fj1?QB+ zZpAPn`(y2h->O{HZbFDp==Eqb(Y{&}_wdroQ-$5&zC>BWoKi!Ho~R+xUQU{VFL*7@ zZ1c6>bakLqg%%c&@din4I9^&sp}tcah!++=)mcAlvt$BFBUjj)q zIg!HR5yM%mk4byFkwMJwR{MCIu)yw>1Ht!WVQ#TI>bBgI zmPm;Hc+r}NohYeC1T`ZfuCYpCNpc!p1UAz0dAb)0nFUtDgl z!d_+iJ77`L6Ma^*u^7R7M<87rIcpJzXSiY$W8sbipL2+e=EV5M^H zk)y83-yJ`DnE&^cLCu(~!(TI15KzPYzDNg4>YtST#~1@F74}I2vH!FqcMX}2=v@nH z4a~o0(!t3|-(&o>8IKeelpmn!kN>ZIuWcTbUHzx!{}>xUook|T`hFblFD)I>p1{8* zznW-|kQjxk_vZ6!ru<(eAZl-Hj;XYfKOnvs{=^4Dz@v0k`37GNi(?THSjO z4^s#o&4h(`i*0OBWT4t7b(#;gN!5^EqsFxWG+=-?2qeW}?=~X-pFUla#Da%=eHfzdchi4>-=y1k{C_z=()8ccM?m6!6lzkZjs~XU2 zK&IQ@3mpd|N0Ua(Z9A@U=))7kX5oKO|8i{0U0sV)C;+~V4kI(Rof7yHufWZ4rlrB( z>`_?TDucmUKa|z}lpuH+`T)eUAC^jK*LuDWu`;>(p1x=Fx$>YIQfKG;uqch@)i1C@ z#hh{wG*s>V;Ci=7@j{ouZ4)2K+$8Jse32tBFCW>m|DhuO_}JFz@E6Be;>D=INzgHe zCV{}PzNV(zFPnPX<@dh#Q#o6gQ_3kjLMQJ1q&XJ-B9Gl71352`=6A<#?PwQv;a&&Y ztMT@{jCStB+B8k2YyDd7Id{LzwI^j<< z8BZ2hpRbK$9QvQ19^Q)GTwlvE;&a?RZqbSidLC=Ia&vJJ85z%i%gBCt+{vi^`8aC2 z+UDK$7#bS7J^odK=0PV)b`N_=Gr3*z)Fwsrwksx_G`t;xy{{OtS?JRs&YA` zSAP4Pp3+{UKus(x~g2XgnVxGME}n?h= z!D+l^sz{vNP)nVwX6M99(O^e|WsDzaT4T}#GNvp& z0vVmun@bvu!7Xa+2u$C9)b?Abec(!RoF8V6vs%4>&-dWI1NKzc5WYVi>y*4bNb9%{ zx-ei!0*ZE?j!R&IO-&0ElatfE=m+T0!5VMhzBOBw5kALmyx;#3jd*cC+pbsMuz}im z_a`H|uM4+0{PecM=Ze8e_@(vOrGn$3&sCw)VXrVHJ^yuXo1OcFgh|f1h?m{$cEY`A zowifd8%ZGV?cGX`roHUU>b?<9`^(b0u)e-N!+4q(&fkxUhrGa`?YQY+D_)*C&aLet z>pWEC(U9@Lt^HxS=#Z0&T{U6r!uxJmpIo57Q4G*>)ej^73@TL!5JQt5H`% z#m@4>khfx6I62Kl)F$X{-pk|IOQKbIqqN>>0KtIg>cdKvxtrci2Rvp}($gSqPGWuA zRoUdi!WX4=wl7I7*>^tM4Ek(uadxg67kzKse9h0P$#rBi+i!bWf=*CK-Zh4w40+!y zo4cwD+)sZKHm#$5FH&n}^n4cUt5dw*wgqBgJJGjYx!1-XkTO__n`je4+LkzJ0lNy# z1LTP{hZyu;#N8*}VVM!dqGS45Oxg|>EyaW5qL%Dc{E`u>_d-80quIPi`#l&CUTukm zIa(zj(%wkHbc+6)9$Dm1=M%8*Ya8}fpfP2=)Y~h^y+VS4MuKdRm~x@lX7Wo&@^!1u z;h#&MHv-yA-!dH|4(ER&1qnK9$j^MiI$W&^4~Psn)qlCtFRZKkts}t{Ql?Aur++gr zFz_1ZLLf(!OrW!>%66Im?9NLZuDXa{Z`gY$$G45`$lmicE{pk*y)5_|e~n;XD>{62 zw|ct2GNVuoT#|_n^5(UkQ0G;nJD*S6i6Il%vU|C<>qjtia{5W{`#y=?eOzboTt#45 z@#*R5d>zww4(sEG4@qnvo^Ja^Mulu9+v$VcS%d>Q&Q^f@@mLSBAIo*<>z5oOy$HPJ zrKF@Bx05u7)Rl!m6pw32BUhtVcfWdjd(8+?(zb!wu_Dh6UYGe4@6s*6_drK(M&X;r zF+LU%vy6tS^2YI?p&k$8#tTcQOV-+Syx}h-!njEyak8n8$BjGWcSm-<4ATveG8(Bh z2=Xrmj^&kQq%B;E#};(gLX*4iNsbd}V~O{@(e@KDqE191cW*I}r^A+rz#X3qRZUR@ zweJNa9cg~NRk0dU z#M9wCQ!%J|GxCv3yOcJaj&OKwWNv=m@?M^FXDi zz=bzlo2ay@|r0;qY&_Y)$C4k!?bAqGG^e#K=s=Z>3yP$lL^0Sn<{Bys?)OvU52#AEo77qs-_e4=9I8DwOJr{rY z(Vc?kfpm#xf)`gYJ^}nYtwUIZi-wug=De}kds|*p*JVa)l}xc^3f#}o4x&ysND3MaWMH6r(f+8S*j) z736c!=%xSeU;`Hmk?)E!r_LL+!c!U2HX;pLNH=5$up}vTw|546lN-ayO)lO160bk8 z=cVj5%whaq2L01Y*7CKqkGF`E(Eb6J{O(HmBthzG#&P?HjCNzb8{MNXgU)%HcAwLk z*+EjcWQXM2&?i`R@ZmS3@5RNbL#BUp(sM16^TXp7x*7D&P=DrNv%h*pJ0VNk{{ENz z)^VMF3^!EB7fvrddAhobtgGRkov)wbyWCq$mXos(Sjp5#SbUGoyZxR_FI661LlgSf z3H(N(G0%I2AO-^tEW@g?xF3e|u)YPbmLeBl^ znKkg@d6()qro%*u*DLkETgesV7i!|L6>|!!KrPUhTgN2P7kYDKZ!JOn4 zD)f*A)kqvWLSj{P3=GSyjCj1!^0G+69b`RC9F%aRvS&O}fEqZ3QForwAr<-N#BtDO z^-ko|Pus%MWoY}GeFR8(9SI4^NZD?T(7Z`&zR#=ugf^D%XV1wG6Y?mxC^z?@*cZ9K zCD;M;b5%k>>Ly1g3PpDXJX>p*m*<;yo+pNuQGPvpbUfUgP|3^rF`thX8|edN>7TJ` z8Btx*cXkOKce32ly=d&UCpy zxJC>PUp7vLS=t|qOBpRE{r$bo>^!D2&^sqM@2)C*mn}X6ZR6iO?8)MBq%k&DRmA;~ z^!TEr;q#+x#Ds{mA_3liqR0U@=W29ynMrx&1uMvxI_QC3O%*?m@pCxyqx+KHR8y3U zdPvk-B~$I&ZT4}3gy&JJ!8}abcgndev^Jb6cmqSc%zj?7GG;YD+_^12U|Ht^FWJ_K zEd;<&1^$CxAB&HaO;XXE+K{ciBb#b(s|2D94L#lW!ZjZcl4k}Zt{7M;uNC-qa8fa? z4z{g$RwIsCzwUGFvAS_BqJqrigFi+FMm?@sh{)f~ROT_%*11n)M}8^domB9qzd-cWWJn z?8ZTTZkkt#Sol1dW=GGbN_#uA@#;87CNu^*TN-!L$YOjs$rx;_IcfRO3SKBE1LJyZ9nwyJFxWMnZMIqwM z(Xs_M+2EB{s`UX$1_2YX3USTCPZrglT&vl=gp=Z!YeDsB1GU61Y`{M&Ya{r+OBRis zm*aLkWvjnS_$vfGQ2#3!w2}WL{zxY%oPuC*ym^HJRUtiI0;et)TY_|jOG>UJByjjz z+DZDS;{7!BHYeFFb#xGCPp}d6$l|&^7exak=8hAVmAfB`zbP^|Sm(EFXK5a^=!y zV>_5NI80G?ie$u!i;JsKYUm+@W?F|zIRSKF(-iIB!ZY-fW3~0$=V!tBeP$^GbpL?# zJ)hf15lSB&q5)b!qVcs<9lfy4u4Dz7GHz-`Ps3KBvs2Zh6fV z1JP^7YuarzhQ(LaTx`M__4VFRsWKvA78G1{U=vwWgh(eP`pqKIhN|&?j-nJ^`RLxc zy)zvDE`QUbPlah5aXD~a?S*+MME|ynfSkIak0Du|g!m+L>4~&k;wO3k?k^B_6{&S^ ztc;|fQknVt5-iD{^Ego&c}YQ$l&}Un04c<)NUhCNx%QFc1OAA)AwY$deWCUym$c2U zqEy5)0eC+#kM_sjw5mhHEXtY^m=apGwKfrLNPQKJZ6Rm@uESW@$%OOAi!?P^yr$W+ zAcr>fN;%#q6Mt$eBF=UN?OL6u#b%XRguolsgup5=R2_wXM3A#d3fWF_Tp)UD_C4IS zr%C=B(a~a{1GXupY?JGa#Nv4v(gc|ip~bLREi*we=95~|hw;?4-q}T@lqHH~W}fE} z?Va95u};^Aqxv!MCkx@9n@NARLOgI^b5~m9$aqmvJ}!$#<9=|25_r;HjneZ^TDVQl zx!4Y{uxTp7<59BGhP=2M8hC>%-}aW1v01{3YC$2L0p8WlV7YSl9n0!3HbMiNbEDd~ zTw!A*tXVU)#X~bc4z@Oi5lvp&nD3q{asqHArMa`3WC1ftYTBDgqrYMKTE3}I?rQJb zlE7Jh$W@=C?WU9@Q1G~fzcGx6V7HJN)DpiIo&khjbCDp0zIiIz?WX@Hfyo+)tkR!) zG5ve;&D1Q+#!zsd{wRz+$8?{}J_X1E@VP?%z zx30V7G2_TBP_36&8Eh2c)jku2Jn-~W7aDQ{eLV{akGI#2BvIYo4eGXg+mEtMlf3`O z#!4s_9Ws&7Z9gp#kGYQ!fWQ+>Q**T5J?<0WcrV3Ji15S-{E8kV44?B+^WESEqU(6m zy7(bHwu`K%U3<&XGRf9mN;xb_a6hsI`@8O#In^$l)UEw(n-hLzW^cp%$9?m~H9FV; zbkXKK{=PFg!kuXk3oMiHXHfeXWWSM>jiR63y~HL-8c6y+X<2*X+jJ~4cKYA+Wl?ZP zW&(C=U7b)9(i8tXwZ>v}AxU!ZW$*Uj1BR^rO<3vT5*^9tCq@^B_a;Y8Up6IGKD<-}<|SGVfIfqKJk zJ0e0|gZ#_kh1gK=?>Z&@&`h~}RkFS8A;=+-Ds?!L=5rhecBnEJPJ-dlAtNM?QCL|h zgstxEmai+kv|rwtJJ2Xzax|IUO zoqcdLwj2BLf-BCM&@$85g7AZ%)4zTpkxE%$dia+_tzswQ- zEM*)I#B>w-5%)mIAmwDcan(No)kf-BoI=5T7L=RIgcOOSV0p~GE5?uvuI|Ti_gp&z zEMnwvpaF7_u_EtjT>dQhJt>ly(V&@(vBft0@|z11p$+@*R2(?ax8!n)KdP!eGB*{- z9k+ke9GwqqOvnpE@NdDjFGNe~^a`!Ee@s|x$TiQMFcr(Smk)I#gY%bnbE==NC>?e? zAX@I9IOVQUXp176$XM6r)yM2cVEfFOZ_e?Vhgy$g{?38-OOC@7-64@)2s|Cpj32xV z-=t4>$lE`9r0tjC%3k710!N(G9eck=WRXa-l#hD9m_;cm{v^&PV#VR2CY^J)xBldw zd1De7Fy$fu?-{Sb7nU6EK99VXSsykFje>~K2xD@+p3?rREzph3w!yQCghR}>hTxZZ z5I)6eFNjC2%A(()iLe`f!qxe$f&<7@)d?eLj7Po*n9Lt2W&c7SwxBMTnlRHz9s?H3G0$md&(OV4sjAKL-!C$P1&N@tFVnt#Juqj#b z!SUpYg~mz)VP`{xpF=p@{wTfaY_ydn#>+;h?uH5-R($<4Ku>lEqq+0Qi!Lp)Q80Po5pn$R-C{@h!IqYTiITO5ZbY&i4)L!dMm{5Q;OV-RxS1GRA?($}Q`dxf&{_ zKomIwmK2PQM#IU^is{mmuXe(~s&%@r#1_8*p@gfORQh+FpJq|+#ToEX;7II1MZtcV zH~oC9$x{ZbZR8{2nUyiKY&}@3EFtdzduoB{O4)UfO&?#kjl!{0)!8F3`a!Sj%Q4)( z)DP(F+c27R><{EN$@eoe)z1N-N!XLxm}Kmrb+DX13yqAx9E+*~W}5}u$d?ti3sQ3$+eNC=hUi1)38Y`(SAh$VZzogunjeRzR^{F;WZm8;kxg7J%&x7lw~lbab7dK`}uW8herC3>A`d!W-l^8kcYv;8|63c&>sb}=wojfW0 z`JZh_2W;NYMzNj?zeo*`d=YWyCLZ4~WP}Tt8|h6fy;)~nB2Oa2tR)Uus4O8~aT43x zj}d>SWy=o3u9HCt>k2~iz3@ms^g10f_M1_NkjGlFhlLL88eJDkP{w18o~2#5zkQ?K zCP-lT9wo<3(g+!QYdy$o>-{NZH#`weudf=m#G8pM{~)=a#&|tkntL-9KDB$_))g{G zO}@n&=#MYEt=iyAM?CK-`|bQ4sYCtsl&HSc;ZIEbIU$V#5tBS6rfzFzP6+kN&vu zEhIf}Y@#_P5F?)KA*p->>w{~G{R(O6^Je(L#3 z{je?RPWhjt4yLTrj*_Lh`EV$Gf5vi4^`G`Nqi0DjYMoFWJX=h5ZoW1~1H~^sz5WPW z1egH6I+jzWgWN@E1V-Q=!c*sHd(5|;w}CLDzMS)X-lg&+1w5vjshe_p0Fp!*^4P zU*J*M(|>zYzkr1j6ghbE+Ej$iw?T#GK)R>1N_2xgWx=04kp%=nc!91Oq!^tFJ3j3i=H>9W4 z=qka)t`zw$Q$aEW_Sf_d8-k-eJwDV$UKgA8?OZc#6!F++1@>muxJwQX5GT~L%y1kM z*v5;8t?aSq^qbZbZ)x28DOfJt#mRt zAg`XP_U8%UoDUo$`AZl?{?mQ_%H;f)TgLss+QcC4#6)eoMJi2QO;eGa%e%$hJ1o-s zxCB4BM`$8bTz$l@<${llZ^YyGW9mr@Zq`)jNytp1&GS^&=Ad2tV1GGi$i*J2T|xa zCOIfu)_0Cc;n9p%2y#I#-gDf3i!|=gtZTZCvLW8 znWXc!7sTX6g%hTh;`PNcYgWZ2uHfgN*y_WuD}o4`Sw9G-bWNgaKmX}!Lpa_^FJiLQ zE*s1q_IALM2V`UM@SozQrY{Amh)NZTDR5wO{_MMlw>RtXn=en+n}4~*4mT!t_TXi` zZ}@uz#lM7_^_vM^NF|0r$Zu=B0`WRAc4D00QOfZ2qlCdNidzOb@piHX1w2^znZxGSNUU{8)RFZeD9l)<>}kYF}M?!&=B z>5+a%=?~SBl}y$_4g?W>k>cEBBPT-%3zDp0KQ?Yhs-TcheGp8rA5NA}Huh47c~WDh z?{A{p2n>V+NN{4xXca zbD_WKege{F$a0g`JC1P8rmEfo=`muqe12f32?$GsVG57?`}_dV-%#VJ{HBc_j>Jyu zv?~(YX_1SzVp!LSgTi8|z}fDG6Vg68NhAay1^%}a>8V+FOlqu`apqlDsRj|IDsBDI zb87_;dSLL4coCrp-dIsGq{t;jrCP3nE7Z~Q)I}#dbc%?v3QnW~RgF1Q7+M#ZxNpCR zktRqG=;9C(&|;tIi1ZOm0OxA#w0@VpPbMsiISri%4H7MRLRJjQldBO4fl9I7)w;=9 z=j!9whlTa!scF1stl!IL)=%5~J!S+3{A1OZZk#A2oCXhJasIB`ar{uV<@2yK`S2Kms7~m{+DBfV@tOfgS~Z7XRnyQE1e@o7!q$Hd zJrPp)PmsUvkdEEPZA?~burLKO%2-gMRYdFn(HQov^t|{X60ikV$_SDcGMYkS*B%evgtL3yRw^nBn}T zGY+jBSH~a)e!9d3ZCav8VG&>uW1`Ui&WKOnuXH|A81kp}TnCH}yv^SX(qfJ$7z52K z)XX`#3#(IZr4V*u2)WA;+-J$LB}oNq7>HV#+6*+frf495P=4y{e1+Y!i8h8ZC`6^Y zQU+HSO}tL0n1g@Nlm>s4rIGB4{B@;GfC?6SUgQlCK}BHmH5M{mFbGXeyqLVyG9x4q`*C?PvA5Jys{rHKn0`qp;yT%MmF?kDN+>;FT;>U)^X zb(_u_L=RB@o*~<$el^L+A=~Y4Z-XATvxjnN{gThZU>3S8+pndCG8>Xno!Vf$02Z}Aq({&z0NgwXg6 zBYJ(D_&+wwI44SS{pG^*Pv1W7EpSnmbT)7@GQ@4~%AkIHV^~eXX{y+R-SckIT(=tI z29w=N@vm`HlDP&ZlCVDONf{;2o)BS*x7%A;T24lm828~;$~^Kx^ll*X#xNzbUMc33uBiGCJvHl^e3&6^osiB3 z!%M?XNrFfjkV;$}n!alv=hvM1VREn2&MG#|(WA81;a`8a3ARl{Hgw&VxePn`Xr~gC zh56R`oZO*RxD=2z|CahpJJS*EflqUTmfIJK4ZKO(*qYK7=E6#(=75uu#6XwfY72g1 z|A08`NQdW0rIhq{z3c%F{8b1=KxL4aC?yb548k(|)=vE%`*JyTg)9i=T>Rq9_};Dp zEv{y9lYLwOu!cs&pO};^@~v>s;nxa3%r_(+qj9jxq=Ui%>sGRb%*Xp1VBwvZg0atR zn6ohKMqrKv-b9l(b}Tw&p7?i)@+C@Ep0wD`Fjh1hRBz3R^`I!q&u&vOQU=lu;=*EV2Dh#rFI zy^9`okRf^dWas;NifmAlRWRc*0TVB5bZZw;khuRxASq6rip z+4r+*o5bUgPWskZ8s^rkw;#G`k(Km~1jebV^%UX{601cu{7fN9B*Vy2y*jZwzc|2}P-#S>QPAk}ca)IQWn2 z6+b>FGMOj8+ve8x(HxooBf?b5tSw&6_N9jcb?$yveKX2FFM3RA3)ZUcvVrl<6-(>f zl&D7hGW7z#lW?9+(ixK4kwQf>NDreyh%kWEfn@J6EFH$xuDOUV2X5usAO4&j1kOOZc=GV+MbDXgeK5QP05lpyO7wcbl!?NHm-ZCU02M$*AYE=kA2%^ zFRO|hHA9ynBKK?PM`E%2GPyY42epWpm(=Uhv*OpqqRF_j<g2xg&^dbi1WEp<- ztIl_4x_0;mNMZD#35F5RKs|hvJd+D;{?!QAH)8o-b*=dTi?>M&RSNx6!*0UvqH|7o zo_ep5G@#Z~SF(6#5vK>s!heX%jXNyo5oST##rFAE1K4-q%N4R=0BaI#b9NcI_z19p z=~_aq%Df4#T1$Z}@Z&%DVb!3Zm}t<#!jgSTt=+DRdA-~exjODtp7h>tDENfVrmpRH zh+oH&yV?_pmL}dSN(IXpg4>>429VOYEdWLS`9Xe5tfrWjpy_5SUo%>6Gz=pgvO;X{ z6bQ*wXB)H~9@;C-3(~A=+m{Ih9(EUx4LNhHzOV1Er}NBfqQ?l@q6zM448!uds(}>C z@A3Gg(=HqQdyHxR?Q2Y`3_K|nsf)eP4*>M2ZEVym4@_vpeYAhrzxST_m_OMx{?1H^ z{MEMZrtz*jAlQ%QdhIpNAj@_>0?cPJQ{n0GhxHB+;EiiR*)yl^Ve>3}zdYY$@>q2k z8+maPG6p_^>1GG9f>HOgVPoi^;Hw==dBdfUW%4n*$M^A9pHwDz>0)XLsA7_gNIF?V zK;K&qqq59d`Gt5@ZYBzn6iyQQL@@klU(f8%CVr>tPoFC+K5Quh$PFF1t|YJj<)24%4vNbd zk%5P|?#e*)M1%V6a-zLLi`qrb)G%;#sZIpDHeF21eO6RU_^Xl89VA9Y)89(`?U&uk;mm&_nVUzx&I5q4UikI-^4#zuciU8#Q0Rgc1| z!?(;m`yL#B=15Ii>8cZ*@8IGHi$7Zq|LEv*NPEyNhfvoxZF0Ha${!5c|0#@``%JQn7t-G}{0iS2>^1GV6(~r~{`Rntw&Cr!I z(Iu(gcKOrVRJz+6XC|hm&PxWty5{n){?xQAHMNu%OKJ*;LVuCIQ2%llZ7wd&+oQyx zN({3KA7gV6Q@i`l%PyU6q31om;bji+iAGNI+rQ;qyuQ~uObA4x=(L0p*6rcgCy-nJ zRD8?W3(`2{{tuOW6NiUp!rEf`X|^X*{6kw5r?hJTk%bqG_ipQ|Ff6M%l*M}dt*>}Y z%3*-Lo>1HMv!aow3G-VuF}+)ek>1o~7LZ2lP8t0E@ac>2UoY%Gco79q+@r*MfJdp3 zXx{~g!;2cYy(z9ee|y5&c9MF%etmht;I*pesG~ro>C!=M)yV@ik#gH%?1CK&we3Fg z4$t8+ouZ;MJ?!GSX(2?_-ZSFwZ3W*;41AC4~v9GvE9&; z@!~UX30bEE@dvuEcO|Bl5=a?tbMiq~#VB8ZS!jq<_v>LuV!U|(gm%b#V_(0uEROA z7(0pRIu@Ct0wl|LUl^HMuWEhXKr&RnhWqk0a9`Nbnh@ZHk(AUbg?B$&W{rmjwHOwC zzPv}m$FzzT;|;WPY+rdyml_Nqvd%?_Ce&@j zM)Pp(_~<2b)2KtD)y``{qp8QS6A{mcq^2w()I=dj?-sptm!)=WwoBmXWU-dc zj@MkBUBAyMzz)-4`mkI1?xRo($gMHga>8{YPYZ>SSH1Ql?yXWC0I8d7s1T`X1*K%b zp`tL*pt9Zpy3#G^&Ll7Q!W76X53v>ts_;W);Btf3d7sr)>c{-!6 zZK=*kXGg_V*&_h`57svD$g^p74CA6Z0;vlCZb2Qefv6hrj69oitL*QEvcj~vK|7f< zvma__43yCRWSctLFhN+t2EF^{Qpmvr25M9ry0fij*mo@97=pIG>o*hxFE z3!Iq>1duiha$i<%8{?LoO2`L)C3H7tgS`Dj#Br3CW^u7UTzvdf0GwvwpfR3C9t3T1 zS3i}Xez>IHBJ~p1jS;#>${icVMS+=(FczVVMwD2eClr8N;R!<#Vcb#){BaJ8S88$J z^7a4&fvav4W#TB^Xy!Dd^3K{fol3&GuH!>Q48tA$=2mTbsZ7{Hsv~>QUC#ZTj8{wT zs*p^HY9t~|h)7aN0*Bn&fCSsG>hqeG4({f1L$i2@XJn^%8gM$T| zaQ~mt6QjFM*6yJ@raIxoct{=2;r#2Lr6s6#vWp6b5}P5x`i?kfB5-E@Z2?OjNm%rz zUT22n5&bGezgQBUa~|TtJMPmHyU<$FzUb@~uKNsV>9*&Nyi{l8bUBTcZWIkpG0%wM zd*=Ab%SlBJa(V7TwK{cqE+isoT-V#+D1o%c!J!QK(+gm;axfi<^})LeIQtfwz~Wgn z{U&uc@E)b$tp=2yA-PRwvjE57o8&iH9lLh@6LIsCJ_c@AC(OH2)=N`e*s6uQxhKqP zp-NNh>IxqLQha3Fg4>BJJ|~h}^I9l6%RHR$mE&HT!r1Yg7iOSA5{EZ=Xs_NJ=8fQnVYay(0T{l;gA8&M;JTT8c3ShZOzJicFN7q{fFWDOvzIZF6a zm=*=H>Z9|{tSqTUo^bLLy*l<%HdXV=M2tD)XAC5;;T0M1d*vy?*Fs^HeQ#zM9^%9kd)-*_voJzwjVqk7xr175TfkpmSa_CH`~rqDSfR~!D6B> zD^pqP;U#zafJ?!)Gr^SFT}Vo~*?Ga@=(XC$VwRhTFpK5GCW}4AHsLQm$a?{3p^)80 zvh<5QV%V>)I@u920jV9>1vV)|r$VbV(5Y@_LpJrD0(=bW480R~HrN*;W9PS&bJifO zXHZDK9zcbx?bpg|-}PO~m0G&qevN2JdpRrbT?nJcS#}Q#ZiSt_y!iqvIodx0k`aQ+*6>ZS z{m*stwqmH7YSi{4Wn*5&^V|rk7b|PgifKAYch&7$SZU-ovZJ!E-v;TFHMk!1b-h3* ziHS10M<2I zSdUEqk}^BQMK~AxuGdD}b%e?5Tdf}*IEH}uC?O`=iqN`(9QFxM%Kcij;2~3|c{YBT ziz8v7xH1=EH7H2RRza?lz1mjP&w*B~#lAo>J!H2d-sWocALjIVgQ&V64ShD1t`uaZ zOPnk`Y)8#s5@+EJ$etq;$k<@>I;YT2Ws^A#lHnwgv0@hNTQa`JU1l~gp zu;fw8gL6*KCjH@u?E0te3Cg;upN?KC1l{x3XrGDYUH0IE#PwzT>WRMhZc53TKKCFY zg(NA0s2N|QW%WC;re*X`p1sM%;M_s{eA@tIfCWmGuR1QjzLdfB90U5{KTZ^mXWYZ&W zEWxq&CbecRE}Uew_hw4gP-C~MGeK}M!V9_B%9%VzPAcMhU9~a|`RlLdC}{n)wbj1gNe#=_n|e@C8JT z^;bcDEX{lFRT|2ED~|)@wHQyC&Ae+lfq5uER#zlbJzY;~oO7gRcx-+H%)8v_Y|?}N z$oP5&kL2MRC%_El^cZ))41l?_CGyHV$_+eyJZq+ zxv6{Gw)a+lL%p4K1C)Ze2WX(StSz@px0gME3?v;m7715XdszeFPWE$oIUb(ar4gyn zEm3r&=SLJu(LI<)3(J11IU70F%iBdYEh$M za;-VN7nF>H0niOO$02xkB60gxQ@6RRK#ft!boNC|C$x7u>LR;w^2}z*zk%ao zR}zB2Jd{OD3w*-pdsn4^&P_}d8K|X7Ote84K#N>Ky#v-j$0qCLnSjB-Bu?GR#6gX7 z^sB)6Ue~3J!R-#!M@57_h02uwbi_YS{n(m6Xw1A6ja>*Z&$0+An=mqFhB7buWzKAt zJO6p&X#ZMHpCWwx@}km{9hVB}UR~Mj79q41J`ZNbVRgCY{oFb^UpF;L*5_cf(>z?> zSyy3mF1#rZhP%qA`o9aReJaEr1WcrWta8K>{oOhN(M=CG&lE7>AFKU%m0k_H663JK zpjG2>Pg!($HZUS36s`*vV~t-+u=`8F2ND>%8g100iyh0G4+!aG(E(`&`_A62!g^dL zep^DHaH#vM>LH2K~%RjNMXVNqOEjQu)8Aw#Mb*RGMSex=dtdox^ z4KaVK1p)zp@=qP|VCT-?SRyw-EaZ*vJFb6+*$oV{;aj;8%fGSy@1(ej@GSd&NBoV2 z4hLdwhBG-5{vD>#AwdAmCFKtwGDbO~ey{}NsKK3KuTiXzK|8KkZvG1D+d4tSid{kc zsV(|K!ankgJs-p7=@0UpqENJwML{k;3HxZhMLk=|B(%087G}69xYgJ{jB!}u`n_a4TCfDKd7JnuD>3@Pc zcoD_-B=%8}vs#EZ>PYczVpQDRs%0mFMqik46@|S24pzY-s1XYlnj9ZbBOxJS^e!(c z;dXR&mAD8D8AxFoK#8&VqX^u1yj;Noaq;oRrKM08Sf4c(BKtOUS8aP|C&!CHE*0!?uq~-3um$&7Tmh|sS&)xria3B>b@N;%& ze;+)zlKp0jM*|hS-|BUZ-5NHA=Gv)8DJvX&M5w!nKYRW>*-pi^U&cCV4?Q;?G9(P+naKEV>_dACup0YN0xr??Zqvf6o)-0*%Y2kfB9l( zR=7R1xUeA0rz=jR+_Vci-JUYgmH3n%l_2O91TrRl^{KYL9&_0Q!ILw5_RMF}YA@ua z(_5-lLop1japXGoe>nuN0Va|R&|5C{Fq45W19+RcDM?hV=hxIHa< z(CE4#X~3Kr&8e&}8*o@qX5eHKf}eeEQ5&9gKt(wSbDKK>@zITJ%}>+`I^gn(@OI7m zcVFY3+WGkSFrFbacsXM%SNaigU30@G+P&*a)6>&MNj=%+1R*ZGv%RiP zQWzZ`{eucEsIh~eE!LQMTB1YPv2HC`WzPl3;gl@3j%gq_o{m4miikY`!ZcI^5;B=tJ`=9I@3u7K1A67bP3~WkvnUI2qiE`Fb zS>Jm3!SXHcrL3z+A9T$<{t(G)`yyy353oyED4BHP!GI?9;4#ptR+`2B2n+Y9$;e`aHXgc)+ck^Thrr)?FOEDLdhURR66rcwXlJUIM0MMa z7B{J37F{;v5sy&nkGF;`CH}jPQXMPhyWpXv*sWW2ahoYy{pzxHe3rCVKnr8(&eu8L z5%xQ?+VVv*B4|S$$Ih`p-1F}G>L-}>`>YnDX{s3?y?$!NbioaS;B)8n5WRsi9ego*xP#~|JglW@`!(hg7)K?HFp=Am@q`+^#nBs z5ut)VSBox0@xMTt<(~kzn87wlWc=@2;NPZ7V=O9EUdQ2rW<)u0ceGKRFh*<*jv=a` zTQ+4VLIz>7;`Xl`1zlvHeF_Hz(>Rj^_|fF zxGMcXqo4m@zkhRcbVQT~Z~u3MRFUljEoXZRS!WUZf4?yPG~U@Hx+SHw=B)oOuJfnu cQP&NA;_b1%)iJ! [!IMPORTANT] -> Between subsequent approvals, you must close and re-open the **System Preferences** > **Security & Privacy** window, otherwise macOS will not display the next approval. + > [!IMPORTANT] + > You must close and reopen the **System Preferences** > **Security & Privacy** window between subsequent approvals. Otherwise, macOS will not display the next approval. -> [!IMPORTANT] -> There is a one minute timeout before the product falls back to the kernel extension (to ensure that the device is protected). -> -> If more than one minute has elapsed, restart the daemon (by rebooting the device or using `sudo killall -9 wdavdaemon`) in order to trigger the approval flow again. + > [!IMPORTANT] + > There is a one-minute timeout before the product falls back to the kernel extension. This ensures that the device is protected. + > + > If more than one minute elapses, restart the daemon by rebooting the device or by using `sudo killall -9 wdavdaemon` to trigger the approval flow again. -![System extension approval pop-up](images/mac-system-extension-approval.png) + ![System extension approval pop-up](images/mac-system-extension-approval.png) -![System extension approval window](images/mac-system-extension-pref.png) + ![System extension approval window](images/mac-system-extension-pref.png) -Following the approval of the system extensions, macOS will prompt for an approval to allow network traffic to be filtered. Click **Allow**. +1. After the system extensions are approved, macOS prompts for an approval to allow network traffic to be filtered. Click **Allow**. -![Network extension approval pop-up](images/mac-system-extension-filter.png) + ![Network extension approval pop-up](images/mac-system-extension-filter.png) #### Grant Full Disk Access to the Endpoint Security system extension -Open **System Preferences** > **Security & Privacy** > **Privacy** tab and grant **Full Disk Access** to the **Microsoft Defender Endpoint Security Extension**. +Open the **System Preferences** > **Security & Privacy** > **Privacy** tab and grant **Full Disk Access** to the **Microsoft Defender Endpoint Security Extension**. ![Full disk access for Endpoint Security system extension](images/mac-system-extension-fda.png) @@ -107,46 +106,46 @@ Terminal output `endpoint_security_extension` indicates the product is using the ### Managed deployment -Refer to [this page](mac-sysext-policies.md#jamf) for the new configuration profiles that must be deployed for this new feature. +Refer to [New configuration profiles for macOS Catalina and newer versions of macOS: JAMF](mac-sysext-policies.md#jamf) for the new configuration profiles you must deploy for this new feature. -In addition to those profiles, make sure the target devices are also configured to be in the Insider Fast update channel, as described in [this section](#deployment-prerequisites). +In addition to those profiles, make sure to configure the target devices to be in the Insider Fast update channel, as described in [Deployment prerequisites](#deployment-prerequisites). -On a device where all prerequisites are met and the new configuration profiles have been deployed, run: +On a device where all prerequisites are met and the new configuration profiles have been deployed, run the following command: ```bash $ mdatp health --field real_time_protection_subsystem ``` -If this command prints `endpoint_security_extension`, then the product is using the system extensions functionality. +If this command prints `endpoint_security_extension`, the product is using the system extensions functionality. ## Validate basic scenarios -1. Test EICAR detection. From a Terminal window, run: +1. Test European Institute for Computer Antivirus Research (EICAR) detection. From a Terminal window, run the following command: -```bash -curl -o eicar.txt https://secure.eicar.org/eicar.com.txt -``` + ```bash + curl -o eicar.txt https://secure.eicar.org/eicar.com.txt + ``` - Verify that the EICAR file is quarantined. This verification can be done from the user interface (from the Protection History page) or command line using the following command: + Verify that the EICAR file is quarantined. You can verify the file's status on the Protection History page in the user interface, or from a command line by using the following command: -```bash -mdatp threat list -``` + ```bash + mdatp threat list + ``` -2. Test EDR DIY scenario. From a terminal window, run: +2. Test the Endpoint Detection and Response (EDR) DIY scenario. From a terminal window, run the following command: -```bash -curl -o "MDATP MacOS DIY.zip" https://aka.ms/mdatpmacosdiy -``` + ```bash + curl -o "MDATP MacOS DIY.zip" https://aka.ms/mdatpmacosdiy + ``` - Validate that two alerts have popped up in the portal in the machine page for EICAR and EDR DIY scenarios. + Validate that two alerts popped up in the portal on the machine page for EICAR and EDR DIY scenarios. ## Frequently asked questions - Q: Why am I still seeing `kernel_extension` when I run `mdatp health --field real_time_protection_subsystem`? - - A: Refer back to the [Deployment prerequisites](#deployment-prerequisites) section and double-check all of them are met. If all prerequisites are met, restart your device and check again. -- Q: When is macOS 11 Big Sur going to be supported? + A: Refer back to the [Deployment prerequisites](#deployment-prerequisites) section and double-check that all prerequisites are met. If all prerequisites are met, restart your device and check again. - A: We are actively working on adding support for macOS 11. We will post more information to the [What's new](mac-whatsnew.md). +- Q: When will macOS 11 Big Sur be supported? + + A: We are actively working on adding support for macOS 11. We will post more information to the [What's new](mac-whatsnew.md) page. From ed200cd20634e30c927396c81e2984ff0ad68a37 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 6 Nov 2020 23:43:59 +0500 Subject: [PATCH 034/958] Update 2bda9244ec25d1526811da4ea91b1c86.png --- .../2bda9244ec25d1526811da4ea91b1c86.png | Bin 322504 -> 319498 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/2bda9244ec25d1526811da4ea91b1c86.png b/windows/security/threat-protection/microsoft-defender-atp/images/2bda9244ec25d1526811da4ea91b1c86.png index ef1fa517146db52d0ab250c809700493a58ffff7..b2fb4673811135cf88e3bb473b3bb2fe68177e84 100644 GIT binary patch literal 319498 zcmY&<1yEaS7cCWB3$$2pFK)$x7q=E@f#UA&UL1tr!wU^O! zLO`IL`RDWMZDw5-{2{WltfD0H7CI6x6T5abJrx211%m8nF*Wzh!(}(`Z_uohCx~qc z>^CnBB_)k0MQkVjl*6mdm5t+GJV6uAGxvBtm;O>NxA=z<X$FmPr?@9vo&s&-^BI2q|I7O@GqwelGFAl_Em-Y$ zx%U=Eq)x|b46H@QquT*b@+HE%G7qh5xGs#*@x(LFUccY&F;1L=l$N3{ zHiQN@#mNNOEH=c+(2RL}D1r$TNXP7)uJ;s9S#T>#$c0zH)YR3Twg%$3EWxNn>?@Ud zdCTLAAq5sJNK87iq=|K#IBC^{j5EDN+ ze+@o9-zb0OaRm%gxAING@+_$R;>4gXgOwE}?KIfo(!PW8nb-Vx3S{b`$|=r` zCuR`;u`Vbh5ZTWbRkeRs|6q-#Wv;=AJbK!r@&g(rqg^JrPxV~0))qNC!}uioJJ6#a zZzz;#4yj!~)#2Or;c9aP_kvf0)!xOZe$bhV%Uc#wgPU5LMOV&>!B&@!!~lC++EG=Q zg-BJ-^RsS?mnYFTuH=>35BFSSL`lC1-8V5WpJdK}%KzP^mCONxmkZ`gtbWPt#(=;8`Z`LLHZnY08k0C ztUDV)EOC^{A7Ql6713|KV(DW2GtdpemcQEYy?fNvehS2fxHyDdYBmg#hXMy+h^t8(|Co~_q zkG(4 zRr%|)he4*plE10yY5v+~`iw@PBXGFV_DY?}WMxZM%>-?Jb$)QAL6>F?JDIa(vYVV$ zQvPaua#KZ5N6GF1%k>aOh0kL2*ks8(y4g8)1UL>i2+8N>;l<$wEC{MFr|W>NUalxe z1V~RC5~k6coV#cNniFysWWZ`$9@2_%$ZiiehA7pQc14plotExB>2QOaKCyscqebpM zeo}N%LorU=fzed5jk~{if6}f#V!>x`VnL{l7!#?yhZvTjH=bZaU6n7~ZkWOo)i~Nc z@h4?t73k+$J5naTAs#N*Vq=JG!aiCoFN*tqWAUIQZ{oPV=?VJ7$sK11P9D9LiZU~l zc$2q+?(VbcJ8QQj_XEY*FI85N0OwkE!Sz^QPn|qzhG*{?r|9nMeaxZJZo8}VGU1$f z;X})OqYaZzbPSvJr;PK=`dg;5LDbuQ{-!8b!OpF-t6QEFpNvlvco<*5{tzwf$lN%! z#UelG#1p{yusME){D=Y}#Z4tIfC+#=Ain4xo5tn-O1~#7IXSte?PM+Y%_v@bz;3xI z3pQ!O8?Jn0tRRd>-xgY(e;-hZ*eiG0?;d?+83zXkDRIMbBKpP_1$Yz-8XA(HpM4h= z7Q&{f+2(?;f@8p3!IJx#T;3&BALEwaqoO|d(u+ixTO-1hRM7Q26MWz+T zzH+1!NMpxr-&>{Rl6**6K1HSbAOYND&uhW;6Bx^5CCPzMt<}!?*z=lxr8Nbct_Y;A ztLi;Ev0DG`1GxXqj`;Rf-hg57c(%cM%{qNg)L_}!w#gH#dWAI~Z^wSwq?Y~SWAg>% zIG;JOS8t*>N_|X{=0Ro=Yp~t6ZZdqy`AEAvm==CB9BH@BFEDl7Wl_f+EZtbJV(Xct zm0}OIssP1nb9Fw#j`e+wP=!FKauIU&US0#0pja4zGG*2tZIaRybTNvEaibVkNn;$O z;r%oki7u)qx4DpESM+gpBS5}lr++@`vj1&FWru(IBtivmVPd$gK4O3ZK=4E52~LeM zM$Y5bD841Cq30{;syj8UYd~ZiIEq(KIT}Kn*5JS?3(%ufO{ZJqYU{cm;YaLytAI&K z+v0kjx935oEPO{pN=mxqv75EzJf+xnKE%}abiHT>_=rvkU&AH)9?U=y-W7N1nVA`F z@3X!h+YCMjs%*DtOI@aagA8)5^kM_TepHe4;%c`O-Ho$b57bT<9de8$K>-1F#RPYt zu!a*q4oc=k?+{mZb$M2PVpk_Kglj)hjY>*goxqk#>8Wnm{@TWOBMQsC zLYi(?(ajATF;YW$L;8x|h?OHsNE-m(zHA}}QQOU9& zC4Eb(fLo1+osQi13}$la5#Mm8n#NaZS#@3YRzasn*2Et7Q|05cU#*ik9#q$X#H3QB ze+uSmX!+B(ZV4Od2)y2Jir^6?;!wAo^e zp;t~3C{MP(AXHC&HJ&80B+lT#J~HhKxw^$pS0LggP)v}Jvvh|;jn6&uH#MfCT8B2H zU+^l74V~Wj?iVx}a)Wd#$4Mfbs!Yf^3O+23efjczbWb})k6BBsJNT<=F{hC;i&9O@ zHtc(q?~!i$&WOJCI)f|u%9|h8RNl`4oFB9uXrrBPHxt-mOS7f)hFMp1o0A{YQt%uX z+;6k$QMhDAx7farqm0jx_Yeq*GruEtTocRBpmgm1@Wkj}vG1PAXXK#|M5WZIw|uYn zbfC`feo8^YYYS|>XKPUclI_l$r!h}BrqXP{HOMWE&7p{p; zal`T1`}gnh-@nIPu_Z*((a~{samo7Deg$_D)yxsc$F?o4t;k%J{@#acU4a_Ok^))6 zMx&3R4lw%> zGy9&s!WK8;L-06=P*A;6qV>wLqP@54ce?mM;y}SfO|ccg@@Qj{Uy-|^uI54?5=)y^ zh{ruXX|b@Nk_d&YO=ebq_7)&zX`P>+?HyIuQ;f(ec7lD+_C8lkW^Il;osA0nLTM6= z1rch9%wGuC<}6FjY84>lsm@k}>C)zr5bl|ez03B!r>)R)XUW_6TbRk7^fgpny}fs? zjKC?4f!a?&2&Ufl*{$tVh&Rz7{ZO|y9No4xyo|ssx6U8Xp+vRPlbzc2O`WAkeh2r= zYQR4N$CB8UPD~v**o1D%)$Glg+(44{YYGpK8=@)d2zyspJmu6BtjNM)+j3y(O0P4N zU;}J1;YBYQA)WQ2x0Y4xVOM0HdJQF-)D4`q$uQ5*7*_DO>;{B*3eVs;W~Vi4Fe;WI4Ue!+f7N znBI*hvZ!75iQNI_uC9Mm*6m>im-eqrXq%1i9|lmw?DR4-m$WmDvG*e-WhEI4J@@va zsd?B(+2djh8`;Fz(?cPH<0*B6qY&zZLt2U0p&F`8=g2x1nagW^E2M&tWv82tO`t4e z&M1+})L;49r`A8Tuno~s-iqTBr0Ay+!`+sIO_qLYpji2C%dL2D;ntk)PPjvgv#KXJbdM@$V+n$XCd1$dgCXGAbo)~F? zr>We3S0)XlvFy-+PFX|CQP_*enwROB%$zA>Wkq5{r<7+hEMKnOh^+&yfsJ$5;oS!% zT+fTP)^w2T@XkMzxJQ1PQ(i#rActx31MP*5KQV6Wj|+a8m5_U7+^F6_qEv}=)5#e+ z%P%}{0~TD?*F+IhRK%2y22iFc_?k!4G5#Ab424c;A`S#O65kZ#H&H(J|;R)@o(~hVW>1pCTZ`2zxM9sgNi^Mxd1!guzK*& zZuWuEf6T?hZw#`HoWzxz2m849pGn5w?vd8XQ}_>+0yi%f`nSV>tb@-TPJJyu{s-Uu zax@J|>c$bL2%;dw@cnZ1HSwJRA(Fr7PiKLs3K(HX9#;B)yNE)BkzAB0^FM%$gVMH( zcn5D&K~9#N7_rl3x$CSvz~n!D<@YkB!6kAHtblz~`!4*!S%;pD4V$tTdHLUa17Gq^ zgCi!Vt5n=%ds7NJ!}Iaq(HXu8P1?y5&UTLsDZ-b3{q1h=tBF8T4ElR!zuu+_dAfuy zmu2jh|1O8cBsXRbBy{yeo$>;_1b#}_`>64Z@=iQfhGyFO-#tx?VPK>!RYPN>?b1ID zw2kKM)`m)=_!|%shWO*W20I|Y_qfq}&NBTwYVj#<09Xv=teW`eznA`{k!ZldFfouT z95U0l5rkuQ^%(PT>GiKEOpHNuk-8rsP9M$sRcx_KL*N7mohXoYx>L@C(aTY@dpQ;P*Ea{smP=VIgBQRdtN`SUZO1}f{K zoiGowVvFpQ1{p@wx3Av@cBxj_<@O%R=rxWw08B?xyBgcCSU!IIh_uL6M=H?>Uz_zV zWb&=`P;x2gRg7~J&~Pw+*JEpI%YI6c_iWB6W@2&i!T;^Zn>QAhdlQHAwa8Ex$Q@F= ziX)iRjooeq`0LlNribI!`3^r3IDe+>d!AsuP#3;EoRV|Xwc$aQY{KF9?7aiYQ8qB3 zRFQK%Ss5K>>ljI9(Hh&^8#uGW+U}7=^WU0Ab}z)q-H%+NOGKd*!ADLMRw?|PKSn{g zgYV;b{QwC6Y-H^9gR022|Ae}p+{bUsMZ`y~p+~wX>;EqF5c2Q^keHZQh6cB;u1=q@ z-$Uz0H1@ECwM#!XAmH^!CZ_oYn?(!dcp%=sbGp|FC!b6pm*u zMz|nrHxJUrpy*9@-$(cM8_>yDH8pN#(P;4I}LKgC%cc{ri5Nh1;(``1tG#;y2Z~Z(@fc&$~VsW(tE*$4}U$i+1{M3PN z!`UWyFX7E|@ljYW?$kqdHEXNZ$xM8`eERM(!&rsU8cNde>}0X`AhbvhzCTewf%M_MS=8xa z552j2uuBo;^?B<$;%{Q!6g`|4&Dv8p4sTsaS7}e-TBXInz#JER6%xg? z%+Buo)XTvgR7`SNb zl;gbI%gtBd>nW0BMcqKE1fQ?MVx#OnU&Egj8H7lD(GjP>w+lq9ZUZtYxKNTi$fz52 zQ0Qq5vM};>hgr?>#rqoUM+2G|-%1XQgd5^Xupc7v!uR!N6e&}M|7(nyzhEueZp$u* zOU(&FUe}o^`X2h?X57R@?d{pc#dMaImOl@J4`%;rf$e-RGTxy(Doajr7bXHP$0f>t z)E@*@eM%TSEmiihJhgs~qbQ=mM>{KG^RbZmU2d>QbbT@>rfx>>=Y8pxxU;iCYnTX) zq)g8cycIfwygWkY+dQ}y8|_{OzQ1ROlf6%%TFp+;-`+1zHy2}qC#Su5%H9lUU) z@Gy`{D=LcNjCLksOY~-ye%I>{%o?58zNc^gv5;CbYZjyTATPpywTzqUW0ir{lls=!{M&izsSp5^o=*T#Uvf0b$ zPfrS&OJUGe*~uj8Yw4P8Y}`vLz6!8R=q5tNrV6wzh;6Apag<~>!EwwsvL$-BFxc&M zt>Zb2sW`^u>Y{RTJ=|zf#=Y>3r1#CLub8j3pjG3cNSWxnPABVMB&MgsdXGV)!#SIx z(i`Qkp;MGaofscDO$;$XSvqqS6e=1@suybg(3qn9@}JIrY-e?W6;?8gr_#U7(?3O_ zUb(0xe;9|(_<#E{Ivq0M+~~HJPbm~5vrm}bAC+GQ!jndE)(dM1k)l)16g^5M?k<*h zQ^xQJdG&{g)p&hlIE}L*NMo|7y&|N2%oT7lV%FKNSDb{Y8H@wxq|!cB$B$i8H<_^) zsH6NQhRR%Qg+~&p%Db3wq&@3ySUhmcU!#=Eyo+Gf8A@Ehy-y&!a+z^%B&X8m@sB8u z+U(30;!Af}uyH1p?Wwz){$P11GVQV=uAjO$TyJLmrb@tG&~2t8|&(}G+u5D5iGm_lpqV7A&iA_bs`Q*CZNtSgsqG!I@5 zAnRP(V4BAAbo64Luc}|g|5QeN-dQ5k4n7pi64hl?WlNQNO8scu64UO!qXT6MqNr?( z9&{-JScq`8?6ZWKUVan99CWbE=x<46%{=%iy zq>i*q%dV%l3=kV_*vj0}Hov_h`Byy95VTyFHKo^R@xwffOL+X!*H}dFJaq|}6ut=~ z68e++*^WT=VR@m#?2bcXA4hkxigG+gJ8WA7*WhH0K^#0eN}sq?x%to`L@{Dgqtn zca`n;2l}jT6$>;)g@6A>eWnr<$fCTLv7=W~< z$Ma#2y}VHP(fPPR(4oKD?i2WCx`r9Y;re)axXt6jeJf7d+|tr;q0S=EC3Q6;#N=)~h746;w&b<) zZJNs&ZR8;KrYBi;EcaM@V(|e(MTXDln;4OqRKDkHgP6G2%X*@!Q*XHi13yck#F*c? z)6L+=x@vPPVjXjb=pKF~B#|uCW^-QH zDDUwL>~yIw1`o5{*u+f>VC%!=3$7m4nkw-uA{@reDzRtV_B{kA2AkwBNm?DJEZ2Nw z#r;*!vF2}k-gzf;+@|-+&hl41QdSz@_ECqn>2e2VW&$D;6t?5(j|e=pGorP2*POOa zg+(e}g6J8^1>+9lQPLtMW`c;co$jc_TO|CLk^BvlwSC^>eLO$YM%J@^ACaQ{xng^Q zJYq9qOI4eYa)sPzI>>@Mh6(HhC?qntUgG~;hrtM@O;zvOR@ak!`pt0Wp80vGsP0b) zfZRBP&sfB5$tuOZ+b5g8wA_x)vhj2dk8OM+r@O%>XgWlJ4&Y8cVDRMnn3@1aLRG=? zdjWKuB&p;+L^PQXQk^?vDhFI@Pg;0sq=gwlHk({XwRSsw#Ld-a6mzL~Maw&|A?lrd z@+n{92!H~nG4?;$>!*=$VpGu(s~4d)QZmjkLRS%=8%m1SLM& zP}k!)WJE8oN-hkTO$4B$rq8FP ztW*&#(vvryv|>u!tH}A24H!Ll-vuoZ3Nbd>uZYVzVE~mej$cAW*t}@;ny~gq2EqCb zIV+F`@_U3=?XN$uGzSIbdRTvYlI_=Vy+bM?7BoA5f+J5hmEKEDu2kW_;jxsVN1Gw- zm7#2I`r6rTS;`C}A) zXm*$Vfv=AiyBKh3 zWu@6>f7D!qqJslR_-Dh@X9YU04cHAZCW5sktS1!v;>gY~Bb3}XRe?^z$cS29+W|3w zUfC25IhTANj+k{?5;rzB*5|uX9CT7bLXdCc|G1J67ydoC<4ga|zcptJJPKb_mI)~+5k zOu6)*wc!N7jja7~o2}NM2Pxa&G6s`csWF zT$Gw{sHpIF>}Ni4_GBsZ50bQ!?oS5dT{O|K^$Q|n>rj1$NTqA>P+U^X@NtapbqeAD z1%W8~PV&=rW9zL6==bkhq0s7-*<+dzgAKHZmX?n{T+1o5-^nP_SLVjXuJ+ceUfzJK zNs*TciholONF>l0fiC-|2#aMIa3wEPWSBz3R%zbBibUcl<1>_xQa}Du?MwVX5Gz9` zQ>-mM@%o(VRpIF#?3iXdAP+U@xZwA11l0r@yr*7OA|SYre2`j%SUe%1J)1SYfe?r} z%Z`b4=YX8!iBhuKfU{PQDBY|U+s%q z%AGwu$Tre2Sg-2rc0=Kew|p5#f*C8*jK3A^pz09q+&93;Oh>ODzjs2H?8@Ox8mk{n zsH)RD_6?G^tP1Mlf?2n{kS;swQu)d@T@V->ug3jWF9c_oJuYBJ75Mp3R zEHLSy(O^g|Z#Je6tN89nT&zlgbpgI=?IbrD3-IW@uGqPn5wu7A8M0qHJ~3V>YDt%8 zk3%XZkkor73guz$Am5)eZ>R88rB0IDKx2Or%b!5$-j}+$t1`;6UY?D@$(0R{CGN5( z#1rE*+N@Q`jEu6qXXoa3UuZWVed;(e)DY(0r*uJ=Cn!`QQqcSPb5*!*Q5nTwmBB_OxqVeA@I|JE4Z11 zDYU;JRJ(rv>x~Ywr>a-~WVA2Pm&AjAuW~r&#OH+|!HXLFW=~Wgi4f3OVjJ^`Fw6s2 zJP)Th&%kVQt|3$eKns?u_3o1sC^wXfX^;FePVqZQMSb09xB-NM3LnntUXy~EHSRL< z{A>YbowZ1w$%8CkTG#2(UW7z09-8!ck=tSI<}K@_b2mRC{`M{&YUsWb?i>+G&p95- zZEUtYXOh5d7S#h8Rw%U$lrC*37bYO?p4z@v)qn-CcW<MPTa08 zt;e1kpTHz9-ZAhZUbjbBpQD)~;?@DPdlROIQag8xiF6OfDlAI$qnNiyovec{EpVNM zwAl0@$9_n{ygCpGF6M531eq8$&fszG*Lm!ca2zf`6%_a>n$+lF)&@m6m+}l4E<)IC zN8~QCPy|B~R_$>$z7|?DmMO8RyU{!zxd48oA2W1p?y6N5ku+m|07v>dzgYbc_D+ry ziv8Sh7;3T)AK%HI*QdS4Q|%1re!BP+Wdkv?b^BCNy6~f>fv%_IkSwKmS0ILtG?#*R zOYaqTK-b}e@Fq$?9(!>%D7Kn!FpYTfVxaO*-cMUHkGuDioDUubY4e;PB)}n7B{D@i z&QsF5Upbn;rpWLqa30}|GEs@JrP$L1WXL&fb+QW7R^s;TN?ZU6*Xh@|Y945m^R4FJ z>?DiGbeb8IsLCwAT{j&*&V7d#%)u>7m(VY?x?S==%JFWz8J>gqVX z=kt_Ea*=E{pM7}%pS`|){&rk67Mahbn|ZqLf>{SBgGH->-C^Uir~o+Byx%J**J(|L<9!E+(9J(; z19+NC|HB@f0b<6(7mv-z7;bXd3|T&I!di4a>MqTSoLwG$_PcY-tgyuxmLB#Gyu7;n z^5grbx$BJ$!#`zZ`+IwY)#dj3u1!FJIAeS9Ae=z{gR>ZZRWksyS2p;ladj*J5gh?e z0rj_j>U99X`L&$!RT0h-1i3VjjGobEp_@*2;v2*k={Pys`F0<07$y}wj$>ki^Z!Pt z1Kp*`HiSrj|Nb3;zo9oK7K1h@x3Dni`r5Vqy1sH^Zf=03ajDy_{eo0ss`mmoG(3EF z5AFEpj1+}S-EQC1 zoNQsKd?eI$S=$*4n%;v73$6DIgTwTM7*lTUOqHy9fks=7>zVv&_#x~VS)^rp20d}? zyxM{}Nq(M*IzmL_feM6zzuu7Ob%}u!U;8N`e!C;KYo7^`|51cTAfIKC|B7|-M}X1?oXWRiU>xWc`d+DADg3FdY;KIttq4|S@UTJ zDu$^@M_!+*{#8&q2Hb|O0RAu48WOLdIvL=PSu9R&;5WbEqdh}n+P5L=<0;Td!}4<7h{M(ip! zX9#kNAgB{SvsasCXjM}d8_|X1DH}1$!pe8I&D{7!?$>>d4&y|N+!^{>(?!z+c(vAN1U_A@?18i)a#;HwXC`Wvom(p^tuD_nv#$E zY0%Sh1};;GiGl-GL##%j`|ha8p}@4{RicLi8_(YR55did8ny&%?U%$hAnBOr1A$@- zsvzkF*MYd#)Ftp3V2mzpuf$P}vQp>?!>8SG2V&756JdHER)4f{wOuwy!WAydBMH7Y z_9MT@IB>t4F9{jtoPKH^$>a(h>ZUM9(s}rFw)1B+>V3BKq-kWEg18KAuNv^eVj+J$AzV$*9F( ze7+{;IV7UV`OJhc&imS0Lt1arK-+@0KF+t{#JX>Y#bm6FA75Gl=qz(nwGqW@0c+%l zH1faDm!($hsh^s+pTU>}I+1NkNuCwT{xM>LfU2|Il}Y}B6i4)0f@lm3S+vY80(!x;)zEU==qeJK38SMg1FBVvy@~YpX!dmwzWZDOAm9qBbJ@e1Mmnn zW?^uuIX4dta#r<7=f&IBcQEQz{fpjVJD?hHD61NuqpT!jHfqIITYp7kViHY{I5}Xj z(KKPbc#4+gU^eH532|X0oEgYRXL5h8-rY}$kN+CQ+>{$+_IwKXZt~{BjK>rlvD{O} z#LI3mgin>nz_qK}JBG=m0TLXGY`!2=%?{j^!x%Mq`URa|S&%d^5kfCfF03re379lA zeq<-Px#Y0b=HZV6wA_?$CnaS#)UTU-=hmU0m z?=JC3P47A2)!Piy?4Q2>NcAd35?$ewomHOikcRj>5p-7F&h+s0;06ehO=!;nyS5;oAIz%pt~{y{i%Di4taU*U#qK(NQ5=Y`2^Lx1WgGcqH2r*Q>x zyoryGe_E#Z^y^#M_i7i|ch}>k!Rw>NYGx*{ zEEGlRWcyQTG>1tCAbqfHrVo+U6gT{c7epsurGe9rUl@AHpHGozEA^Dw3AZX*k2e}S zo><@-%aL@Rh$8uv>?d@QXq!ku zaD{AO+UnyDFZB;kxS{~NRR|yLA{gSA?M3E;He22+zA^VncledC&z(v?4>!gzqT&?5 zb)uto+k*^`PGK$E>v$b3^2`BOMH7Z}`P?i^TUjy10MAhnR7;e$XSM9M$)DHB_l}Q+ zH?6j_9IC7dk(7n5@Zrfbl+FiAeO!#0C(;G$py zO*&+(x@dP${N~h)n^$H9Y`4h1#UkC9lL%h=&|tIK!n*J5$*!S9m+-$tGv$YfEK^bf z|KkW8SGTi`+RFT0sN>T%7vo|>f}5^h*YES;xu<(3>!UrfnuzWpv^LVp8fzAHbxwSJeIW2AAEz3ACW2Wr81I>P(tl01JWbuL= zH>_)YLV*eYew&OwUqY&fOHOGrQ-e{Vvif zU*7p?;$i!|RBAkwot#0iJ0g?x`c_{aUv|s<8bWf~GS{Z$!Kd4cm7AkJA9xD#-^!8P z!a5%4vi$Cm+ixREPP+?k@0DK?I-bk4ns+l^Ld=X~#`Z%b+4rP*oex(6A0JjTFJ{u0Yy#t*?VQaB-pF0Mc6WkG8(5*~EX(5t zdBc}oEJG3UKR7%*7*` z-EEqx?vL}0?B105Qsl~@OMrz?3{$1n(CshM@|9;St6#&VwbvKjBrue3N}Xmz^OIzo z#hiH~Yj^Zy1(4)vNK@FKAAYU@`wj#cfP25uQ`PT;JHhZonwH&bCV)@T9G!b2;BwaMRFIQ~FzqcY{QIhc)tuKoMb zD4s*%X@2WUhTvTHL;PZ>q{rsA`u?zJsjWT{k~m7gQrhU=7ZE?tLw=R+e2ZgT;`7?R z-Qf2I3&Bnd7#V@cX3jb#KC5)!E0)8j>$2T^nA#l^omaQMsz9*=k1d+mm%tf`XG4$QzA zm#kTqlhfn)|kHUAW)nF|!S=^q^W(p6*J^y1K@` zV+S=8oveBKb~p;=$zWw;28Tpj5W0(V+8zLgMwPO?4{auI(;D;{jRNQ6k&QA~3%j9x zcrn6?{gICIGwKsx=7$b^bR_URMil6WQ$P}fNnD!O-A;f5<#qJk8r!?!UKOHzlT8hv z7g|Qcp%hw-jF>R#NxA-A9$9_?oqb<7`aE<}?5ePo?c0iVvGnZ%FyhY`FDYU-hjk0-{^Z)0KREIbf@v=}Dwd zTk492`%9XKcKkslMEE-dHLiDDZ8Psnem8{Ea+y|lY@cwx1#g2Yh4qo1 z-YV=J9f?7e9Vz7%$(b)WE?-m*6w+sdKz=;R6)TbqnSu84ZCBSH<=C?ON!Wx&yU0TC z_fx)Pq->rq;GMW(Yy1Uv1HU*9I6I6D>?d}_M`RL*_tGAsL`?Nsr#hf>t-U@i#o*_&G+>TF0PN@P0uPMg4edaEtS};Ov7U9}(%(8`XD3q5uWz?9{+0AX! z!^~|oi3=;)MW>{wD46`^7QE!P>H{wW1DQ2>vx+aPCP4{*PyP7*UCP6Q2nMyINRrEP zc&DTa`L5T#V2&$CHZFMMcC@^axw3y`7bFDZ<)r-p9W^PKn{O>Z(Jo5 zecW!@Zd3sIn&@kf=GSk}ao1eBDSs-4hj;zV*kaWLK^cihBe^A~9u6CZE}pBe@!tmq zNynQULtOT2%&xORIp1zZK*v{Jze3PQQwX$ef8rGt?=W+KC0ty`6YK|3LQa8D2nJvX z{B7lTrI3QjT5rp5zU7}s{&4+;j|8>}Z682rNhU=w&;)9o?`;$GU=?`Ks z)-i4Jw~%l>dzQH>w30LSm=1dsFvf)EIZyVYYuF-mY`p}$e4%_RvHXMBR@aM*2ibSj z2~3QViu7;|5>>Z8lA(k+e3>$<(f>ibdVlKYSV1pkp6l;~iADanN5Fq~kKR^QnQiYG zG{l>2toMYhS<{mFvhXL|rSbei9h-xFuBWuerEY9*cP;#fXPdPvw{vU`KiLugTP}IV zVb#Nx#Yh82z!5Hn1_1$oqKHSl6+H*0InX7ngv2V9!w(f^yE+n`qMKV`gQHBMkP1vQ zU*w-er&o#nD!Z5)*kF_RzPE`zW8k8S(}_Vr{cu@Rc4UT7KuU22wfJwg^mm*(SMxuA zi+D{7)R0+(P#tT!dpss2(&kHNBEBO@7SYyaFDO3f$NxMxH|LWt_dYNI+>B3tkvFo! z9^yp(jl*S^F70bdocz9@ds72#qx43Qt%oFvAdEeaBJ^PMVK1sxqj*Q*NOlJ@Khnh9 zQC44Y#{G9WFgLFm6cOA^#IU_ft*l)Y&{m30cz9xb(xA@2_`dHWLuZ8RSC^KMt|oc0 z2|jTp>~Axe?jOUr<`iAFHIo%sy9B<33NF3lt5K5r>!85(*+N#>-~TNWv>X|KKM%(v zm}vS_mWlq@k5ASb;6Xev|I}m@$DcjRk1-)Fo&pb>?h8er+R)58XSIWrpX)XTA2HZu zm*;CgCy+^*kt~Bi+&py~O<1FUvqn^GclmQ`#CWHJ%t@0|N9+R?hiUF^>tv|d51z!Fg#d@ zy=Pup(*BpAhud7pDdf42YhZMU!u2acWkeiDbPaRNkziSvAaM_AAyY+lw`QV324wP) z`Sq&^nQ^M$7(fXB%f-CjQB$^BYu$L;pAFGu zBfXj}$fU28kcBu>PBR`UO$f(*ciwi`mYSU(B9^zgaLqD79KOfUix^Jux?qtMGen9a z<&8LVV!VN3E0Xc3|I9h@ettwmKyf|t>mE0eH1RXO(9sC@(Ms`(5Ds{?~^#8J+W%^7w!;6bBs&dcMjW`i}+KQTRA zojx++JR(EZ_;_YEn8TjXHRe<|b6jLShIBr>V}RH_P5L;ab*$|Q2!$7+!}IfjHjDod zAmPg10V5*{#Y$O2a3;aw{^0>GQ*8fuHzda>ASn2cgi7z_9y$*%y@pq>?B4C>l)$q* z@B**rO_Arooaf7u)M9>99{wJ7LPEmaj*c8S<$=&5uy8jCB`>J>8=T*)YH^mU--Xdq zTQj#fF*r-_8**kRvWZ9T$;->~L!1xL-(a(_xCpk^F1AonR|o$io)TH$ylPo}dA1CKu0>GAfAgY9Er z$0HoPw7~_$CM#_o0Di}<_~GLg*1Nkq<{x!o|0qD!>#aQYEWf(B@xq1S@R$EH{_~3q zSsL6@jaZfZ35H~oYKKj!Z1)XRZ7ArGh@<``G=Fvf|M2#eaZ$Z%yCw(%qI4@DAxL*i zsep8McXuPwARr)J5<_?QNRH%Cf^_H5-JFO0p1uF>_tW`wzW9@wHETWVi94_Ry3uG1 z>ZV}npBdQqqYn%`sz@8YWGN6-tmlz!9 z*B(9*MNLq|U!9MlV*124{>r7zk);`fa1xm*{9cY;#^^6Y=gEG=rk z1NQU)9C}K7l{|zq8K$2=D3X}Zpntopn@|JwZjO4&dE>6)?UEqxs-DHbe4aXXMi4K7 zb;!q8{N&Mtx^ga4!N$>jP0jIEIf~~}QJ;M?t{Cj$Bf5{6A z1l9&1-|zj2f3ZY_)vL%={)onh2%Qiq=YY37u8i=D zc^zLeZN^=5E~FD-1DA|o^9$CM?DJ8z2B*+sL&A6-%Z%$_g zc#j)IhA{DDuCim>m;$L*h+Mv0YpTl!wdg!e7KofO2>%KAs4*Jn|i?`wB^h}F2l z@!A*_qh+9_fa>bp>>A^p%%y>H{ytIu)ZDeh=wqx`(e5P+E;w{ojXc=#4ZLD{_@uEx zrwb>?`f54pUc8%jtWGK)%+-ay>tVpE*M+FUa2a0G>3?OLB@EqJ<%v*AdliNMqq-VL z#4mXrb|_Be#%FU`PpY;Q`h=dh?I7lc={vlyHZbIf@mm-3%p-QFAET{?c zDPo^i>>3tPAzE*qu-aX)VJNbt2-0Sc>1Gf3M5MY~E(;^a1wgPPPN}?F^Wil3-CoXG z{e9Gk^f!84rLq^+S_;?aCBuHQD7yu7hN zvx8yi!|d}cP6wjW>}2f9(6GWG~uJac3qFW41GMVuVX2>Swh< zRc*Dt#Y2cje(6Ro{P*%DovYz>&TPjBUb@Zom&)7oZ#+bq*f%Ck%xqk@_^fD;1AVa& ztFdc7BIn;X`gEEiqV0m*tZZIy5>BH~`(p|R*Fu4er0-qqOJwytYbOH$+q8vvnQJ`O zF|V&z6^V7-*@A9P>KG+Ux3_&70v~!eW;!k>=j_+)jf`FcJQzSq0r%}T2gA+ z>8)8YEdwd-oA+5mg=4Q%K2W+|Y~-E~1__7)3?GP=E7pd-XGx^Qe6sh8BJ$271z5Ne zcjCaYBp8`b3Md-^wK!NHmjD|`+%rW(RrA(7-L>Cu@C5tVc6u84DDQWXS!ME@MfE|S7BoQu_kb_*C6^stM z^b+&gY)$A@6FJAU7pGAMsrK|xU(oF(tln+XHIzzfE%NqY$x&%{LDf%$Nmo}BlaYzd zS4pMqb*=6F6(cb=4$G{`MDT+xnS^iYy> zF2^sBHl^*0UWY-iD}xd>Q()QWbZ+Y+yQ@DDrNe{?opatNhefGz;oBFFX-1f626}&# zR>x)!EVKmeWEZ{U(wrx1hUdu{Jc>o_kO`k-WBwjubh6)bqmpnv@3Xe!6!wcurDxk^ z8g}$K!~{RV_nuX0Q!uMHbGoZ5>tnb2K8;iD9Sv5HUgZ@x(ZP9`fihj8|9D9<*KWK$ z`4`5;l-ruc`^5T#hfOxyo(G}1`}3EA!g_)4hV2q-ZX(a8b#77Aj^A@B{)STv?o;    #%aqA&|9 zYd4XKsGc_A48NCatEF4mRXWgQ6DcerB4O z@vP=oZ=CJ}`;Kk1sV*X84L>lm@tWB0O>#1>H1%6zN()U|2b0)AS%pZ8vw-5K2#Wwt4a=)TL z%pJnz)DjJ|-!n1%k7uW#=#YKoxLK@Ku6J+A4;|1dh&Ral_YT1c^%1>ezA{ zd6M1J=gOf)Qe0J2H9VPgF+MEeGIy_sE%>-v!D;akwM^QNhB4@r!D#eXOXPOlvc{(@ zp$Ys>4*>gB$`}0{Y1&uJTpuWTBd?|{rAU^f6a=5f&xlHk`+pF}cpBH2QM!-z@FQN+ zqiw6=s;V@>w6s>P9IULC`k0BQaZCc7sUO^Nv3j~-kO(%Ov)CUb3V4xI zX5lZ;qaHW}`w!!*CHjTiO3;THhF+8VY%b zpbY<{WoRg7Y9Sz^b*+XJ!%$Kfa_S=Iba3|~*^5U6mMXq6KUp6x8yjJwK1Rt6_|TE* zDjxii)g&5gpE1*XJ4%TyY6DC1NkE%aa^-j8Qol+PlrFqTnAC~=)~{C=j!2KW%}mE3 zwUw!Ha#ID6>VSw6Z$23XHZ$BrYdT(+-L=71KVm-DZ-5R+ct=#?=`aAKPVdJgFzfNP z%K9fh#r?M9I5NC2*A}hA6T1NkcqC%hr&jk_s44ZN`wmk*Rxs_BM<@B&8?ub-Ni zUrJp1{_D>3M-06I;f!BIIp1RtzqU4tPEQO>Et3=fR#ZeR94Dz|^>hS}F^5Yq zOqMG(k+UC0y#Aw^(_L<@GoW0@riOUZp_@>p?|a3IyJJj?4?Fupe{qp1%A2%q=l3Y) z;pq79p+A%8X+dF3Wkc5Fz7b{Q*F=XVDR<#SQrmWCRs&D))y<%5+Iygq06oBh%cVu&Z*c{r<%4zHjG0JuaZy$7J~ zmPncnfU=Q6_8Qcf1_AyTKTy=V8esGH<*ul4q#e=)jSW@pZy@G-QpyZnw=!{I|q5DfPo#RZFv)&e; zTW>J4Zbw7!Cn}7dB4ZH0#0`7?UHe_e~j>U#a*>50&@{jd5QGyLg4Al%h9MC`>6mu2WpwtE6- z##>3Z^vBb()<3+$qW+W(DTqc{S<2_%f5SnQwIF+dU-AG^8b`b(Q7d9g$ zyFF4l(`AX6QE0~#I3&M4rAs%O#uMmOxrOdNcX``j;d1DrbER@oj=#Q>&5A3D6Y`_B zF$RN#LRXFNFigh|aeGeJa=LAI1(&&&xfwTU`8nsax^y-5_L)8sJ;v24@6{nzDUXzWLM$9Yk{Zv_lxf%=rWQLMVdU@#@=vO3 zgix^|CG7z6w=BCa3okFzZ#Z<`_AN8E?0rfRjW%t+f3vo8?O0p=qLRM>;d}@sy~a(y zK*;PjBQL7Pt;WJy`rz87R1yiL-lyC*t64hw?Uy`ed59ks14yhwonyDXoU8GBQ9fsQ zq&wRg7mn=I1=u0kpIW!XEYj&wgmuE@BM_@l%%b9^jMs-=J+nxS9Is0VS&%@&Fgv9H+BeK=DL!rNh8}- z9iy8#ze&{{FVskcn$jYyp+vode?su9sh#bs4$$yXS-;hSf+ zY#um>-KOLYAn#t9 zG^ztHjXO-uEOQ}K@YYY_yj*S#enz!6R0mxg<`;{iS$0wiaxSjaW@B&0=DhJr0$pWT zOReT)G>Pg$xS080@Gev7ixyK#K;n8^M5$ud*6J@)+mLu>+YwXFW#*moJ82D1WO&&W zw-!vbcyshL?Nd#$(~>C(!wm3c?dH*kRf-nVE_Yzgd>2!QiP=FR<&P*9%6-DrB>G;( zTN4@|>s$q5dSG_TvX22DSY13J^ot>%INyS95@~fTbwZWi>)M&5fiR7e7h&kpRn3Yn zxsr}dp$JZ^r3sWw5L8$xjTyBtmywfY30chU?QV!0U8D{XU&0T3x4n?MT%_5)?K0CV zWb=$~Q<;^)l6dZ>OZK+fqJ;>sa>sn`8k?>Lw;!wY7V70T3kn$s zBlQvz?)xQ)@IFZ{{9_B_2kNtW=Sg_@+b!2?CuMq_9{v%$jM&V=`nY1~1!Jf&y}=0o zZsyH81CJl1FIh2oyUsC9pf5j;fkl$)Y-(Ilk!)J}q^BCVh0RB&jw8Q^gJa`8SCOm z;{D_Ub+l4X8i*1!Bdv^EHTZMA5u2!Dk7}$+}_sjoz$^nuL%Uat*P9 zgfjs~nUs7U@dsf-KOfO=-AHdHUDD9eX4?ymjL(S8_KEfBB!*j@mK#htU&MqGKfGvY zphvDU6n;@wRPMNBG^Ot$7z zT+&R{CArK92Ar%KC#mz;^2?@)9G7Di>D0#^FSJ_<4*t?*3+0ePnv_1AoMnq+ocqaF zyr1$8qveM1?KQ_j*(WwaG6rpPcx2E))mnNXW4%d)I%kh=*)|*8rd+LJooXkg96x|+ zY_9c&WLvaR@~;Ft+nbL+TNpQ!O7vxC1}oD?g4P-+ zYM1Bn;>w5X&3@aH=OAEfY@=nDs_4?gda#;@MVjS-W?@=YYqp!e1P0#3%mym3!TQj@Xjb>x_~<89RONHnzkmXOM00yF4{p;#LQN2Bk=7HRTNi@~$PxY;%@ zhnOmks=t4lqpb9=xtxy@b9!T=U;qSl5Cl;wentzeThw?OK2&*-?g zxI<$zC~=@(wzWp{nME;s4vvu7GtS@jR!O+1$c&m@jXSEpB;kT^q2Zr{q%}(zcsJM9 z8Uctub!l@e!6zTc1e1A{zaMUu)?$tzl`JuP{HCHB`ZbnHEh|DzRcxmjDNFgqh(?n) zWZS&Tc_=}Y+&f;GoFh03oqps)cz-*=CNb%8wKIQ_EPn4OWei7zl>t(_{{vjpaYm#h z+(4GH2loZNTR*;#{F5K@f&`6Dl*`ojBv>rVw7re(Dj`@^N01YWFt|F@>0gVSyTxNW z4h#`(Q_UfNE(y$mD#Q=;hrP0YB6PCZ=%0#2ew{#7b&Xh(Sv7k6)4`74hAZwRafmJ< zDok3}1GDUbDZKTNk9g`eCI(iORMpyd-&e!P<{GfmjzlVY} z4C_gN9SITB)v3KEAN)Rr5GC=WZI@jO^cuu-(n)dYXw_*d%rYSY)i__onc9!LDzKE= z>9j1>iUo`>Z!agjo1R-Zot34nk^b`6iZ1!nbI`eyCC?V58<6CutE?exc^5UD$R{Wll zjcabE@Xmd<4BaR2h#2k-svSVu1d;#`Hjpg|f{bqXP@X8%Zb?fAU3^t-RTci{T^3Xjek_4Y$?90(ti z_*lIaZ@V3`O^x(`hT!BOg=64}+?4ndtOhMrkeD|lNTM^CiP(-Q+Qj>&W>DQA0XOFX z%t>L&YW>Q&l_hUjfQ>t-N2p$BPnNE*tWZBe&1!S;gP$p(9uL*; zA#2FVL%75Hv8=H_&M)|hD-U@!tJ2R(cik9z%C4*mn@4N*vt%B`#rBj_v7gTm?wg>w zoOq;37gOK54wv{Xoy&1$oyy#voy@u9Y1|ICkE;59_L1T)@!`YQox%uA45gDpeHf0Q zeQ+NOUTzmC;310_eq8Hw^agE2sBz~pNjBm4kOSg_+#=oIj*+=KeV58cN8xzfaz3 zjo%j^Aizsi2!gFH{J{`^`QhhaM=H~4(;Df(j#r3*N#m1j@A19UXI|~j)lXjeW9s|M zhZYqT)oM0Q*4a_OB1p3G^Ucm89LGPFou$E}gAUI1wic7uS=s>WYjc1#xjCo2Gpv!Rrkf7`-rO)Q7#ONKbzt z;3|D?Zw@y#N)RldoNA}}RQu)_(9#q@kO8GZ_Q#mBF3y&Bz&E_tpQ^=`IB_!0T$H@{eY%yQ<32M0`5t>S9l7+df@KVTFiZ6{(N!{uxo% zvD-fphTf&${Qdv}r${n*M+g?kmZb=IC8ed2N{uvamJ_#Eg-I~3&A2cuuB@eJc?^;a zI9?SCuDTgU(7oc+9T}X)2=onl*X?f~&A+z39;S1|6Q302KvT(a+#h9OKY81}+f@4A zXaNH+bM#y-ZVh^p?2|4RkTX>J{A2Gc3OYZ*^G2I8)A`3YM?<^18hU{@G%6CQF7yy{ zt9atWb9m#~84*D;p^|Ci*Yfn*D-nabv$X-T!j^eA3dFVj?BP}U`D6dXxTz;hdc%+0 ziQt1K9tO5n$J-(vq#Ne}*hY`cw%3Ipv#8bUQJhS8H8t#F2fpS`5}wZE8_%%4Ft<+3 zIA3vS9JuV9ankBpEi&5hr;)Ll@YxoK_mP=A3|_`zuFu9i`Xz>b>&b6#&57oBb0R)a z5TOH}(VW)d{&xb2z3;iI#(~xsa>4KY%-oj890@Z^-djph!}i z>|IsDM`GqHylq|p55FVah#s}~<_h1spxkEJ<>Pj};c~n~ugKg>3aJ0hNu?tjvC(j* z$Dq1{WAClxaY?#vOK10`_=q}KKZbffbqi1D0yMEL{w_dxRZ{G=9oMftqC{@4viUj zo;&!!ha6BItcKUpkEeAxO)KV}9h3I{8BTjolN-!lTSUdXE~7c-o%3Y|Stfdq!J&fw zRmW8HTEnu8df#w2AfzX0$Sc$2vm!VQHE624{xj85hIVt_bFAr&D2|yFj7+paxFY?5?+-Nbrd6LIpKj%3IP3*pdA+|ov(PD3CweFW zyt?~sTIX~)*{fVbjzEH!0)y}Rcc}Auk1TGH8kxO!C2?GXrhh#io$IWzLVf!5d>&cw z7r@^EM&$Z+?sCkFO2Q&_Xp$U3Q=M< zYl}^H!JgUBLM>IK+a2z9wvWBEuP`M{eiT0EosHB}|0>p1fzLe3Euh!-=#ErqG+*J4 zsu?$IXmIdn6vg|z{Cq&m*Ro>hSNoKfeon}8igY0VIcJOD@*jLK1>oNPn2XOQWG&6b z#k;EA1mTSCgn=QBj9OYHh{c8-TkN1QcURIn7vcB=Qv+U-th#~+zV}*nnb=X1G@rRr zf7_<{zc&%S(v!;%38jeoRqY|O7PHr|1_T`ddvUUB{)%S7617GxFVR2JizF$ zd-!9jh@$rX`;Py*SxGQ<+#MR@KUZl!r=@@TpTEH8b>#A@xPM*n#7-=`jQ;PDEQWs2 zQ~T!*V66Xd15pvO@M;cv`S-2HQ?cV1W8_1dnwk*&X#X{go$NBt$G~9Ew)p#5`^Yk= zy(&VXJ%5kz{@5|;=l^=CUrqo*bq|o=(LhR0zYSzn2d$X_fj_V`SXc7!Gav%&swRLZ z;Ko&-45qns!@leN_|Ep>?`fD#S#zU-(7a9lpzMqhu{1b5E##xam~(ux9&^kWdGu9^ zrLw}z!mP!5X;2+2B3n*fIl}Dm`j%-{W%F?o_5#dO(zF;QckNr0!Xr(5f(-mEGYXDB zhc%5Af4{!#onqZe;TxNA$D62kLpwTt@dOFw{V-RR4Ib>-?t6mq+LpZPE+#1s>lQq= zt5rO~7Gtfpn@f)$*rwsBRf)_NqzD^mkSo1}iwQFHqLf+|RcfToNegXhlkGA>Pj4d2 zbl5Y8e%jx8`;e4XDy+ev)c#^m(tEr@p62SHQaFR5+_uIl>w8;6pvo&^m<@psZ`GJZ zap@)gUu#sSTs4+$VrV~py_?%yoEWcthI8G_pKw3yqk?gn-UvT_;NqSy|2VsM+o7hl zw%yapReD{71GM9iO(oyi<9RXrf-Pa~jGN%T>(}eXT2`knOLG||SuMMi@Z?=cw&R0< zCCNmW5&0TuLqKJ9E>lU{1xs&lFO&(FF}s>7*Oq)@sb^nvDzX#*Vy&KSoS0HzP^{H| z0y_?Fq`5(VAerMQ-*Lek6qcuM0a{et(Ix`^zSY%L3wd29;-JS*arf>>M?e}lf|TEV z7Ng)hIjDn5OABi(VN4mdSw{@@IxZ~5zah3L4$`;=%t#XXig91D6aP6Q9lXhihCYot z|LG>rw9DUsCc}=tw=~MBsv0v4qr!FKjkFRe%q|5X&*(rBbkIGb3f-{YGK}Wu)uG_v zvhD7gCJ(~ zzn(^HR-9#~D`u*hOq*r@L-6D=&O;}Fu`8^=%S67Vzqnxc4-e)i;OnPnpir;D^ z0hS05z}^9!p^7Sz!42&0SwTb#8N0$X2 zjvQ|J2DZ0h0}&ijBjm&pn30_&ZmE5Tnicl;YL$AdZ~M_76}pahep{Aw=m^7tRxZb_Q`~f%>L2+4`)fC6%0 zD{QokE-rKfsd!b|heioB+xK~5(=CU8Yl;li*#mi|wdV4yr(%75{UvGSGnb7w5K!Px zw1Z}CWd+H|(BpbGamWWC@*gE7m!|6-K-t`Lj3AKS&(6y717`&k^@DG+0LC4#e$n>| zTl51W$pk((mWU-;Rn-q4Kcaxmp`zHajX-3Tlvvj>wYVJ`=SU?A8yT(aErB{cz?}~0 z5bg>V0c5YLx*E(9z~NEz^QXpZyKgi}uND-%p^{Gd1tJk`xQ`AC`-TJ58sNd8NE!u*4C1t@6O4En?@Un%GdR_X)MSw9YIa5%tECQv=~< zBbz`GEIph-b7WsK!wb;a+O{r+RNv4%9rKyb+*y_+=uy4dRDt#=$nbYQ^Ene?VPQEt z$`$Otqd}OTf2nQ(KKKLDJCXb+`1`KJQ#ES!_OHp#ej)?=MepY79K@Y2E-udQND=`0 z(K|;bJ;E&MPfdS(%h7A+tv~mFg1P|Ld0*r~^+QnEkH>fN$DnDi4S+m+d$pY**g0nU zYPb&{K14%916&av+Or3;xm8wEVCzMtrlJdZdkct(iQREX?(FP@QPJ}`tfGMpX#zlm zY#bcXA1JdO{?eaKm8PHQd4Nvad2OMi{4yB9MOkWR)#pUgLoH)8`-$_g&Bj~W#)dPN zI)X)S7(1?1UB+FUO7N!DWn*`{m8oQ)PIDYm<;g+>)K1c7%$Dc1m?dv_TW2q~f=)XK zF@=vMjXCsNHXyW!1?@kF8U&#red*Jw`bs-;adxaANIJqCuBJD^B&7~d`H@x6b4(I& z!UuSKPima^YZe3+7TZd90bFb zQg~fn|WsHr-5+Y5c;*~9)@sfVJChGVo z&Rl#iAZ8V$W9ZCOPWg75gpYtR{j0lsfq&QS*HdHWZtE-v)XrhjPgYW6ndLkNR+k~m7M(a=g*&? z9qIm7&)KcM-Wa=c{ayX1fTdHoUCl?jGQ4&!Y|Rbeu^V%$ncJDn%&eCM$!=Y~f2lxG zP_1+1ehpda)2d4-hTnVrk-ee|oJG+vVLXY@-fBunS;xaB>bt8qu;4+!rTqr)DV5HYjegb#! z*&Y8x74t8G$aI0!NUtpeVqRyoV)o9?PS3;SInNP{xw(_(j9aq80i6-HJE+-UhDiGm ziAd*WMw^q5kKp@A(!1JlqweU}fb=q4m7Zhz^>zb8rE$MLJdOY7FZ%ejwY%gxy9Ms{ z_BN1@-OFD8?5RbPPAB3AtuMoDv^&3a_L^GriO}O3X!A2;1N&%nrQep#L#OSpbtr6xEe;S6j)KS4$kz&kfeqN2W za&}itzPjIL(-@>iL^JOE09#L5wFz#@7yHa)@C1fx98`nH6s{$y7ZK^SeBT4?UqQZd zdRc<4!gdE;FDz_7-WszLh&((Ht7C<;yIz48%Yr0_q^n^ zAqIN{DDpC&ac8N+$*~Qo5&hY=&Z=rQX1fD6Tn07iPb(j#Nd-IRg#;^C84O!9jYN@= z^9u8g2d>1hu_JO9q_z{r_v=XV$2{^q;Vgp7)*Jel3{$ht*DcAhosGX-j!96>ofrrACLN+!4K z<8d{pH^0Sr$x1lqtS+$YfPqmp26zTj30RE*L44q0d=Toe2>0MW^C8@XWr~ilZj3>} z%C*&nW4wtVqkJBjt51Yo!W->B_wQHJa_%D;{mXL@BS)-rYI9}X2T*Eku@}^ z{n8~SH5t~$yJG~87zbO>K`F@rX4#G2o(=2`l21ySHfv4y zk={pHo`A#&ENakQz@}H{#=g!^pV>jMXJ%%aP9`nB5^+Wx9XaZkCT&dkQ~X-`dKqti&33g5>?>`_IaOOWxJtjIl{EH4B=F4w0=$d2Q#~Q{Mq=%nkVGRHsm-o{U!!r}UsZwRYd17Iy zTsO5aIwdOARl9$(?U~v#o2HoA@n=oG@GgD!X^?6Dy^iL>J!~d(lOc61jG%Ksn%e{S zxp8Q@z1{`ULO}lTfl^pqov_<58npESq;A0fbDf4iK?xAPcc*90E5+600*utSB3Sth zvgJc%X+&8PiM`YG@asx0bLiA)JAo<$C$MpyJ4FBh2to=4{Rt5F1 zP{U&C2aEpiW~_-E4h$0cz2+(;1%2p8r*^ix5sJ8nzf%WgEIu(|>yM>81_I+9J%_8> zbEt|HUmCJRMl}_q4>1rvVlVNtcO2Q3s3SAKH*7{V7-%Z1H2t&9r#OJ7ZP#fmk)+2Znzai=?aOkZoT>p*0T0I}YiQkVj%Y^t_VVkw1es4|x?3d| z`d{IbS+no*qlzlP&AvK4(<=i$Mm~fVQWk@Pu{{@HraoSshlWNiL<3phu{7yrmB|=N z2;`pr=vAGpRO$s{*n{dICE67ay)rWHPZ9&<9CsLK%qM7qYi*f`0N#F^Ue1=m06OK+ z`oE5orbmvMb}ZU_c`kU~uJ}x{ORrxcO}< z{`KQ0`$0?KGGz(SqVsG&(&wu@YH!7?vzXC_`QO2);95C70&%L}9*vv3yUYa&m}>kWl&r zUz$ctP8J(5&Dhp!)@d@(_eOg+m@xHL;Iq|zPrxT@{h|1mne@c2spXhIjs(_fM@-+_ z#)Jmwx|jBU6cqUPn$W=PK1fTiqHR2&_-A0Exe8#eT4& zAh>FGw@NL=#IV+y?WH72X(c7aoysI^Db$o1J@JDN-3Lz(9Tt_aYdb~ zg0X9sTn(JUC9b2bi5So{$YBrAudMTRbaqBXN4H&_9|9?xYgDJMsVU{@$p?DhZrWZ& zED;|b*VS$-l;9lJnse^ zWFJVsfX*jAM}H<6e0YZ0!y7I{h>Hpz-mOV&M~5hAB_j^Yph0B-T%Y|m^q;qbODsmm z$uf<7-bO5aOG^`%us^U%esln_gjh{gon7l# z=!9kt4h{-kX9Sw!r=-ON!q@mqWa~03qIH=>)y>~nM-qKf$}bfZl^-7WFug06`JY_} zy5+i;5$CrwZ}!kl%;{D*UkW%LpFPAxmQ@OH2s$!oJ722=pqK&DO-|qorh;e@+b0Cm zSy)vlIDPF*c?AVL#u_0bzDrzyUs*y@5;WEWer9x3)H^dXS};4A`S}|O#mt{a7VDIh zj3y3Z`@C&1;>;HBk(LJKSAAkF&DUoIp1+M*V{h6w24Hb=5eMa>NR4rnVcEvXl5K!Wol4GgoLD z>i0yLCUqrMuh5@6(t>sqc?Dfp0bvB}`dnU@*tNVRHJ7MlyfmSNB!xL<^y*i%fo9Q( ziSJf=-gHIs2PNR^R1tE?cM@|)e1IPOszyv%qn62KM5^b-1k1$o$tH%|PLbK{gIFLG~1*3|Yo@juR< zV~+H*I~lgLe-A?gz}eendh8k_d^jT>Cglu5O&GLG*Q$!9!-0uZR74+$M(|~B_qH}R zIm#gckd8*bmW&|ynYKy3Evv7uuUe*iAK;UL1Pm=VfJKAD4M0}BmRO6&?tpb8Cnv}G z-EzM82wRQy)BwV!N$mEhGqa<|P_o znoy7fO>9?$w%;j!g8X=yKGS%ri;u+L-~wB+tMq`AYBq%VIo(AIOVh+$n*~mG3R}yq zDk@pbEUj0Cw(kS*^hA>zosq@ZaIuBJ!-1VhIKluttf24|Y$)mRFP@;+uZ-C121)9{ z7cVI&!i8S`Iw9e;Yn;JeUW-b=_Zh8410rJgl=ZN90viXHMgQzu){eoakw3Mifns6t zwi~Y%Xnw)l?TA4y0?^;-DM$}~d#h24_2d!Fn=Ns3bG$DZnCzDpQCUt-?xV9Zm3Dgk^0ML8+qVgEIK>gOIvSGT zv;ombWr$B~%_XJmjC*gYcDG~qbfnqi6)i2TbJL@z{)|s~_ zn}g2IxEk~@cJ?d;VU5B2Tim>Y zo|dHRt?BBp4*y3DE{tsu1c+F2*i48s;b*@Tj2s&t!kbWDGqN@HpM3px{s4UxKeRp9=h3v0vii5DS<| zU^)L1LAU8E^fK5i5ynTBTw@8*7=M6zV4v08HZn3Is}ze1P3N3T`ebj%?hO2tY-Vk~`UT}K0s;n4p7W{M{{TIiMx!#q*W{EM ze&8Y`(@Dtt7M%=rRG7+s!_^j*5X z@7}it1QgA_d-Gidre1rXY2m|mrc51+TMn)?T~`n}0dW?918oNuC&+>TtOH4| zCYSLP2Pn$#=<1q3bZ6G^AhH0xOU>@iB0FHDnPFEMhU(~OC+|}|#ih^G827{$)BCXT za)5w8G&k+qCp*V^A=E5>|8ng{wEyOMXs=mkPC%1+`$gPaozAbEvzZOa-A``H!;;H-LR5f5n_Oloc40f(`fea~l2q+wMf|`h$!NB)g7NApKdup6F+b z@mN;#Wm}}Q89b<(8o(o@lPy>F}%RS3JDK~EbQsI zpRBizS@CZCE<_F@By6*ywM>pRDkR|6$A37mDe_WxFEajCOw0%e7$3zND&pb95)PH= z1gvv8uji>-apqQk;lwd$4Gg3p8_f18|$8WgRZ+)!#Gp^55?!=9vs#NExYLcK8Isve&lNq$+gTur1c3@ArT+1S4 znf#ahA6^T*ZqC}4{EtQRif3eFN@r1{t)j?uetN9-wQR(rZ(tH&cA49crAD^)@NvX4 zfOPCn=2TEt#zlWEBUVrl9iJ>|wSE81n?l=0E#OZS6cpy?Psk`JuqG8mr=>+`sQl{d zdx`l3^fv=mEFNA^jz!%J1F(6AoUZfs_<&l7&xwvryf0C=i6^9l?RXug-GHhy&1zkX z+|Kj_=^?P)T2mrd{7N&yCp5l30<%wp%s6M={$-H5?s+t+qLv+P1|pGRqr z_4mImzO0x$rLf-iu_UAlK|#R}1l=RSQUO!_^PT|xNW_VsK#~a5+l$NRN|hmvB`QB& z+aIwL9eaPpXm5IGm9a%dFJcI5|gb^L&e^YASOx zqoWsRUHPo3QUoIyXuE;vxL;`u1-ztJV^{po|LrDqk^ z)0DQx;IKOyf<|nMy9A49MI7$8203g@<$RlJ0W@q_)PD)xw-j& zc{f19A1#6&^if)ZoR$`)olV2f>yJuhI;b?XYdv35RcY}Bcy?fB01>xcpsAz;$yi`w zygDyMBW3&C%aHiRti~opPYw5VXR}(PH9uM3bwUQjPY(OcbHyB3YwKg|>D7py{F2%C z!om+M#^Yn+;17>2?D-(M-F7qiaFjGpL{71Zl<~Kc z2MUs(;_giELVNgosiNHZQ)DKo7y+-){koYVRW;mVXAA-)UtK0o5-F^i6>?SzAQ8u+ zqS6Ltn=iQ>^L&f?&}yvaCU*2>-*0Py&;bVrIMMQ%b3&%P6F-)?fN%JMj0o1?w1P%U z($N*3EToEH*}!K7hw_215ZhUmRkH6x|S#PG9DXFOJf8!{e zo9=iDB-MVtYU0b0YQc=3`t;6Q00m{C2F0zO+i@fM%M#b}sv#B@mY)ch?&*0Gu+!}U z)+An=FY)^_B~pqP?xp!jrR~rQ`-;l-iRL_Z+fTVR=`VVeOCfoA-{^9*dbTEZ4_Bvl z7wzl0Y_95ut|2+jt>q+qq@2e=82jK0&Jgp*RHQBXWi0)RR=b+RB!hCNOEB7^-NXHQ7|({ zrKA*@CSw*>d%cfmpgr1|i2;;z-@bpRT+}z%b8V*VfW@SI|CK2wN%NNEgR(MJgcYm) znXEt>^job7)K5?KD*^wP>}*PXeS^$#(71MZWO!2PEpLPfxLHSMSItux3G5XRK<#X{ z>eP!wf;+@_rcAAIv!Bsqil8?=LwuOOziX5BvzqO1(a}D4773kjG~dWF&In}5`=Q!i z0r0WirR&a>IxW~7z$v@U`DpP*JSJ=D&x*VzjPL!OC?ck$G;QsYYt5<;+Li)IRq1(d z4+M)2)EneC%RzfqTd~dfM-Z?e&W(3fnIPF<1iA?2YWgfta7VPC?JwPRGzCpzGXTOF z^q98;Y!Sd@{dseJ>1!*Ln3N;|V9jP`W*|LXX8!vP=z_XFl!biPmk1jbO#EHD1yE(; zluHH$twJ+`$n+LFo}xSw*75LIhA6F;`SGvu`&YjA;Cz?F z50Q>chC5L3Ur|iEw^mFZ_k|Y`)#sAqG%P5iFU-9i5&qrwj46URsNhYpL2YL2B5X7L zs*>X75pEvz5*=Dw%Z!z1(jBCKpIg58B#hG zMNmOW31R5&4hd-mB$P%{Ktf4L>Fy3?2w`ZXOZwmQo%4O?{Qv)6zLysQGtWHFeeZki zwb$N@deV6A@67@kuThojmxOG8GoIal6S~Wnd$4YB=G&rmnAFwiQ;mUC&bnN5d{#>J z`u%s-P_=_>DL4JMePv^TD9QJi&n>=<-5Vs;R#o+F(EYC3F|e56jInvG^Qd*|rOfI@ zh@4uSYP;g9is>A}VPbb=!sJy|wK(az2y}FsxC^al!rOK-$CUrqL;VnJG_YKa;=;qj zgY8`m!;XNPgbeDa)+_;v(~wWOR5`D8Le*$Iz^2UVV`QX{k;cF5tqWEpculR)H`A@M z4^qx(uMoZ7`}17WJl5HY_vZ1csm|I%xl5vhpVZ9i!bbAf{Qaz64eXt3Uv@J*4hi!w zH+x)wj$C}G7-f3@xJ87nJla%nU3QfM4|X^ntrU}A(P9`2{8wdp>%>}=eq8R3sRqK` z;?4BB>#L^Kvg7xk$hF7N9Nvby9$#Nl(Fu=MMN0HX9$2$vk4N$&-jOm(TMBUI7gLjKiT4;<}7AshfS#PvC17LrZjDIU>HbBW)F_hd#UnI zpWb9*V$$sJ$inNos$?}@B->(*cE)PI{~LGBCXVDZ*k=SZfQ(}E$iuN~t+DctjlLz`e{{*u1z5rmujY4C_nt zBIN#!#^j@vz4-tM+_({U(={0DBEpRY!4aT;pZjLfe`mVSdva zcYxB3i=zU&*n{_>um1BCpn2{@gkSw7MZkT=`<9l-G1Tid#gR6$b($ZZ$6+L6HQ*W< zt~tdgk557?%Sa|fuR4Zu^m{8bUEplw=v4qUz#*SzKl$@qFgV>&J!wsd zgg!hdJ^d!w!*@f3``lGZ9DiM!NmMjZms?g_d(zC4^MBoszXGeny1&+(OAI@%0ly_* z=XEM_n@WWuASMQZHEsi8c0!g@qwEVYX+;P(^|73Q-QW#|hgHD;dD1$)YN%9jrzpQN z%Pb=+YcNlZ3w{Hniz=$BifU@0_mEPg(Bh;7NzQ-()t9c)|GggMhH@H;b91pd(6r~l z%+8^RQDSg9#I8U+2vzXKbd>Dt5ZTPqEHl>NYsBvXi~*{Ib!DpRkij3=H7{cP?A_4& zbk@J8URXh;zCO?|!iGjhktr!JU_cMZW?*(JI67~-0uWVwQu;rz#h>g;;q#56ueo<~ zbM>hnf3ZGrB#aJMdG+cUSX(c`7<}*H!KO85Fxd@XQTD7-qQFC!K`9dRyTQ+LsyaR@ zilVrrqyt95W@leUmtpmJwY4bU{|OV9nV#z<(IaJKx&H>p8f_OFbpbXy2_FT{wX^dn zO!ukfUo5tgG-~4h34Mbg2xwW{iG+g)2x*u-pdPdLO?ZL4XWl-|j36z-Z5Wpj9(nqG zZYq%{pGCJ+R9ohcX8YnW{u|$z*-x3jy&Ru<8ECgFEUF~48XzTObG~Z+8oCbCS4FUe z8sjhPi>tw*JC8p3T`ouWMD`6@{=lprsruIur$dVt=!{o2cU=MV01JQQr}&>RfnM^* z>q-}wR!o1evh{VxD*NTSEILA%ibzRAb#4mrFf>*uD@doUi zW;;ef!5{#P0Ban($p+@_2Y{3x%zOs30!d+(pF%`m>I1*GAt9^Z`_)uc!601yyD1L` z2gj$^>%w3T7=*>T(IC1XD%GR8P~V zJ7kv!1ga)vZGmA!61d1lCt6oU>YU8hF1Z2zHAz0C+uI9rT`N`V zcRGD_J!-kC7h0rR4Z_8HA(Uc6STT~QNq4C~4eLq{ydgb^;{gAIhPWV3{1~7pDd3ue zV@T^M!NQ3YlqMng+gAaQZEq9*%fd>1OBhmDRpJ8z2HuP)cxOsLNvGL+VX^6~aFRpR z^w#)pdKEMaEP{fuKh~>4fQZ?e`}pGfYS)>3BEN+|RldX7;o^+_ay7gIyr#hkI7k}J zwO>ur{FTQ_0G70%;7V=@k$m^kRy53SY}E)f32?aw*C;6uq8p8%Y6y+6U~wx7V0WgI zy+C()(CB3O1=r@$>UlZ@<&zb)@PPsy9Z;?fDCcYb2M!92$QB}-uVk%?L`SOv=67_D z{(@d(g1qI%y{S|HYaWZDL+N@cki)L-J&Jw*-Kh{s*k%XLc|%0yehRAB;q)%0F@5!o zz_CKkKg(>OgQe;8JBNyDQ}Nd&ubUe(jq2KCimKO#_!P1A$8jss;yUKGyxhC1qu&AIM}Rs?oPnZ14S=Z|hH zRblCGjDDFW1Y(2+tUR`A2RWC-i^qlRIniMo>SK)d^l)T2L6QdUo{hzpy`nZ^@7_Iu z&?K`FB76S2t5`v`bW&)1$^i;5;W~;@2KeO(Sp$HC>D}h^0IUV-Z5DXf^yU@RK82|N zcj_QNBso@gW54V`oh2VrmT>B01u%$C0PNai?!HG8EGAJwZY@j$(&<@_u2)-9H61o-j74lErVY~Tck zkXFPJ)4iWasU*E<0|EjDJfVQ}CB^HhwDfJyqbP2JRvG~E+|b9(S@GLr$`vCIEljcx z9!S6-8r;gtO7)nQKw_FW@z(Ew4u*3v+osN zwB2f{g`inXa-oM(PxhN3JKD3e18)VeRlnCK*3(Sb7h+v!F?R82myJn6;)488 zKi_-!^?L@bM5A9d9x5qag9$u(FfA*-)QN{+YrKDLacye$1mNNZq$%wNq?Lb` zS@!WI zl7{o0(OPcv*Q@tN(U9z==iUvW#@%rp*tWUO?z!TeSYG?N_EB4R zd?TYgF#7`l$Hn8cVicDp4PYS4tc);<`M?R(?_g;U;ZLGvbq_jS@w99k@CIyk{te88 zK0dL*XL?QsC*{hBh3omL@PsSoy zalHa#9mA#LGqyTk zI%d4ND0z-2uZ#sHFj2`6)7ldiwcEOJ;BYW`fZf-DU73Jh4(GWT76xP(n&$1{nwnw2 zFXfc`s@2NMih9wk190;b5tfgWv_$(Cw22FzXy6yNLNem6s9l#O#;nw4U9>a}+-To!L| zdLf{D5VC{qx$({d2h4hbrklFcHFEHtBny{W#Dp(8?DPmKqfpPEKNo<2I0OA9uw5!$ zC#V6%%`bmRnSlsC1Iz0+8(Ta$B5n3RteXSas55>nsufL}Tu}f6f&pB^%7@~mn$9WZ z!Sp!}48h{dG6OSaUr(8vB`NdIYB*jXA;H2T#nab<=&Y=0RqF zgjy zSu}o`d!4SfRsQxR{8^}n3j~Sq!ZsXEcRq?vofQG((iDkEB|Cw}i{2)188veG#tOzb448 zn~)^2DYNV}F-$!IGI#e=5PK%>-&2mcMM|KS!gEcnMcIDCbqFRTCc44durysR_@HSa zQpT(0{B-)+K-txVEFO@WK&WS6;cRXC@=VRPiCD16s0&g1dV~)a1}eXDLBzWDkcG3x zm6yNNsbbPvE8iAx4d$T2DxM3VOa|BM`^ZaYCyTK#Bh*A8%C>&lzA`Mgg4m|%dW}R? z{yk{UhZ}v|)FCTBp0%i}lg=IzKj1RK*TS zK^0KS4+(ix#6xIi!XenYO9^Mc9^Kaq;)eXcY@hq08RCeS&N&9W^yiJYbM1ybWi~?yTvvU~v70Dc9w5^Yep) zv)JL@ci_QM>Uj8^Odv@F@hVpHf57{kwYNupt~l;R|NP;?0LRSKd6MPrZ}yVgv7 zMyHt)V723uRZb^+1zb>lyn|!Y=ate%f6PyQ=XpkU_NK+b&;KNn&rSXXIkL?w?v|I8 z#elq+gf7>HI4vyysWUBL6!|AlI@HEvF+$*IrmCjhkgJ;a7h>m==~~b9k1091oq)r6 zLdoFF_*GoN2P9#S#Vj`eOeOCjvX{A))hQOG>D)Y}`>zfr48u z2=wd&ke))ElzCPU*QBTrF|EmeoKk9F`)Lz55VkR9$L%scF(fb`ZLdCDKrdCb!stJ{ zAL484VABQxPJz|GZK(FZR$iX?hx6KOn`CYD@GwQfDbt6K*XaKhabOS)4LG=~Zn7)PpC}VUnt@7AB z0R;BxzZh-`jCMt_eT0mM=ZDJ%%bh#8UB!h~;IHRDwz}?$!y5PUFa0pzdyNuf7&ka$ z;RUn(R#r)|8xSju0LK=m=W8vN&gc1dWrj8u5|JDK= zQ|TpO-sr`(X@5IuIhwIO+DD%U$tMbIHIu)92Muz?ceOSe0zUU4-wm<~dbn;j#QCM7 zg6fUp=f}lBxga=>{1Xy9L#g?Lhllw9tP%rY0$EUl-?MPx)-v)P>7%~DJ5x~kqV~_T zn08wfhiw}UC-Pe8jeCJ0-`eaI-5B`xN|3Sos}*|f=;vciF>KQh45b062c$=2Y%C>l zRSk*~gn5>L2XmCUm<0s1h^;gbz|RsfNPOb?9Oy9VG{)jDC1_`BK76O1N0Qx6BYvS|2#3 zv`tqvHk8pp`IPK(`l{ylgPnsqZ*d^SuHF5&8cPUsiatjR5c$Cx(4+dtuc3g}!;|jI z_^l^pMpp^&)6eCae#gzb==_T`5W2v8VjPf1^KdQyBjzX7<0bZ_SR2@x6|hv7M!&Jc zAPb_sAnGgl#20<~70-Pe`p3>JMIIEN2b{!WkC#1zM5edP1&~004=Cc_!&;j3GmD|Hhz>EG1 zPy=%M9xsG?QXiN!i_L6V}*e;7evOqu{399EwM$8ptJ z%TB56eeb;yHFBcBiu1Ee&^;wiMxqYA-<8W*iEe*q&Tq4{wgDIO_fJV5c5$EzXqvdO z2^H{yfZrec^%XSQ)qi8(-Iz{+ExgdDgHu1#Bo9#FyEa~RdNy#b1H;4qZJ$97^-#X& zjEh*sWo=v<-dy<$>Tv~s+W)>!hbjOU zw^g_E(*vO3?%ccgdGA8&R)~Lxot>R)4N7h(^rbUHN0}9blBKZ%uAK!>Ij22|Y83YI zVEr^hLx~6ow!_UU?JP;Evbb%3--iG;m_c~h(zmg2cDz1=-NbPGy}N+h8}lE{Z}W|f zxa(b!D>YcaYd*{h$|-DL+0J6$m$bB*XLqz$Tc13?jU8eLbHgo2cd48q?uC_ z*cO%r60g40dxhxqR==?*Bw)AoZtglok<(DskU+-eOLp`}q_mx7J@eoB1br}MDRGa= z*K2-N)DkgM96co;N?LCuC6R*;@JG;73f$5{3Wq!5fhj95-vots>%NWq|6=1a5J3BMf3Q*N2+w2qG=UlKb z=H})iQeX)8jeC`UiZ6krL^zii-=E<=2s%J7dV1!3;KWJ+`dR3jdl*DA6Rn1tDQffT zfy3oz-8oK*ckKsAPz|UMfc}gJGoFZ@Y&JmyR2(R&z&NLk)Z3LA(r@O)B*A2~P2GEw zlv8nV6lIo_WPlE%QVUARJ;iqW{dQN!!gbp-a&jVFrrd(yX@7{NOm?(^VjdhUPGi~* zDhxoGQVHAt1M>uMKx;|2S5iW zWToe7eoykxk^;yOC%hvMzU}{_wV-F>{mP2@)2G4cHRkP22q4(H0N_IxpnvRILvQo| zd;mZ%3`ho)jE>rOL`6d&O9_9yUKzXLx$$~H;ChVFRmw$7%qy>E$WMCq#=KLQ9zNB8 zI1IV+VUG>{9Udmc(D$$^Qe>C8U<@;!U&GSF?)JK{n0FIFGf(wN1*cCQ0tIzGQ?;6J zvb&^+b+m_2u+^m_Aq#oT_e>dXs!;1TKKTS=Lsay*!Jx(sa4e)Uq*oaj!u6=Iiwj8HH_{;p z*vS;9D@A%#1D!%$#oRr%BQuebGX8aqmT9@>j+599MdEgQ6IW;%8-m_g|b>CfYYu)BW z4mI0ZBD+W!%FWWV&3|+>FpA~xhFU%jPifBD=J)r#@O4yo+?=j1oi#4dC;jfv7(5}+ z4io1z9v3N$*s#oPfZJSi%N^Ub_vbCGdq%X@*=^87Oh6FtzW4sCW?9@qR@P`iub)wT zb}oYc^=jo6wVc3$A66OzZzKkJ?<+PgYOiGk-N-WIb)Il_-(8|7K6ri$WDmW)=EN68 z4`yVQmC0d70TGP=-+1qZ)Qk)&fS(1Z8Y&@M9M0I@2&T-rg@s}u4a;n%pFe)gGN$8A z2WJ&lRc+SX1||GYgVY(Bpoh1!y8?Jjrm2)U{DC3`WE)T9*Bas12j0y<9~B5jq2mlA zMAFmKGq<>irSxD6ERTMpfqBHni@lT3WRO(SD-z=C>pObZ&-plv_5lha$LSot08?e)c$uyB{q zu%2FZv5aRPwph5~-5SpwYmK`254xz+?nDm2p>*1x#`5E9nB4xjvOAjV;y0yRw{ z758sT2<)I!hKERz!W9FT&+EFW3pR0xZUm&g7D~lKJ5C^qDb??@(4(Z->G#1LVK3gn*zP`2QB##5fS}4DF*-EyR(iNMAUps*%@8jL{LO*C*-QGe`QnC0@Dg<;Kkt4-|{@# zof%Qnxea+QMAAS=-y{y_$bnYoS5i`fY=<5C@X2uTiFDy||NJcS1FH#Tpi@G)YGolN z3om|hfD~eORv$Yg3XYDY={iZ~$DzNuyblR;a{*C0Vr3T43wuM*nidYq#dmj-86nsJ zpPT?(FifCm`ms^l_2vSu5WLjoe;Q|C?x#iN$#xe!0Hk{18&b)W2!%_kCAqn?&I}e8 zzl6mHHe}n8v#m?MT}(N-U1k*-H4(sY+IJdNaQMl^`0Qi%AFap94i`GK2Y;&6CXA$b zcWx>!7J02bHMhvcKGYlh$)~T`J33ZdKj1m^J5e&XqV9W*-OOco-uX3K$tOUY?$}&O zaX@$f;pqcJU&=!(d4BPbV?_~tBuQbdrSQCkgrwQ^22e0W#C7*bo(iA4ZfWGQyZB)g zetwQK8#{}T6x(84j{ikO<3tZ+lJg#Kr&>WhC3)8-&*I0i(zl(HqKAfOw2ty7n{OQ& zNpFRciI!U#&s9>Ak&|~VytmLOwX_q`Jx^#`IXHG(nvsbU+G;f2m>7y~!#q}HBI6EQ zk@>S1$gauUmd#3F?edp@h|lha6SB)}OdnLwGlS7f{%&pVYqHkmg!0Pi7-;-R85^-q z+MM&y32lRh9JKQ;)6==)z=!>tuHy8RSvR~`Kd;_Ri}0DuQY`J7mm0e+#Y8BrXj`cw zB@=pY``aaLHEtprw6pCGeq>iGcNj@DdeDh3_E`&eBdM?!C-KmCbilyOOFC+(Hk!?F z`8>Kf((c6F!_^Cq%vD^3si~D){<}b(41KU$4JVSl8r$sjvH;apxfsSI(E8BeW6JS{ z_nYhN5{vV(=U0i>C#@;7%+f#rzm{q?Gu79ids%*Hv!e8KzTO=58{aI?t;%36T%?Q`2jnQ6bOe2jC>-&Y%G=5m@d8~-VHQjw*qKt0-HhyTdwKRprogC@)2h5@%g zD&DA@4)0qu0EXfOdLTjC@(w$U0p=)_!C-i3Z2p%)3-pFmu2-#6i8>>_>QZ2hTv&gQ%Q#}j*?Y7f6pvNDEGgQTzp>7?d!;~($XJ^ z*=%X%wcHib;uMTU?cr8k-!oqSVFSXrj`nW7-M>$E#q*+Eraj`vPme23R%n(!#B>;` zoxa%~N!eLG5x(W}L^S7mmrkplB`7uG-1mqrwaSB~ccz$c-zJXjYHFFTO#bVCYs!7^ z_AL2_ILGCYW|mvrdYvxq?VV}*W6qpE%tf3o?e8@F83XLuwzhA(otXAX69`~0@1^Wx z(Ftp&Va`tuv_a4!#Y$oRjh2{hq>m-KWo^SMbr{cPI$z z7?v^gM1ko(#)dRL_gRmu{O>akbE<@e_H2+!*OmU>(ESu?!}(~+f%eDV&pI)cK-oNh zh1I#&GkalQZLLMi6qZ7EXnvJXPoIgQ%j82OtLf(7PNVb52?B6uKrFib7ZZNZsIx`O z{g+D|@4P;O>&zdXctB`q=+bn%Y|6SW_wabaT*!`@#>=2FZhK<6p|{EBWn+v=+H{rp zSvRJ7Bd2Mv;6EJTadiAD<7F`4ZuR~8vgn!7MIVJA4h@h`kuA9*ZFj{@6IeK`*0Bq< zav}2FMP|u==e1&Rl%6K;AtU_R3VdRP%jL6CU_H7>OXc@qPV?7_hk_jwx z&oe)&dukJW-+x%TJX%A!d;@Bkj};3f;DQDZzA7O+gc3utw4ZrMUGockZ+yBkPn#?G zR*%~8Nf%??D;JdO!d3Hw4WolFjtX&l&e~b`yUy01vrQOO%#r)Jwdy=R25o9BHAIf34jW+(PB{Y!g=l9_|$=1h7U=7OnO3*~ai z4GorSs7nC)_f=Hi=hGZ&k2yhEt5X)sWN$jZo= z%kC^KfF{XMg$M=iH)xFBW+Bg?soDSq?zicI;cfHIB_?ez5j~!6#O-nA-gVv{WJu8+DVBEJ_!YEqzT`YR zOK$fmEbqMbN|sq__T8N2cz>w}Qja6zDqO);eR{C@S>I{k^%TyGY_%(6)ApCHyz99C zS7LxaDe&Q5^}#|HRRbgIOhIQ}LT9LVb^WChlZfQVo;}GbzwSTPqo^UNPr{&MhOCLb zpxPIG?!7-H_B<@F`rs@{v&uy0R*$JM-#F!~7!Ixvct2Z1s%dD@x(^xgyK98Bu9a!6 z%UipaS8tqFKba!jkiUH8)_q33X(9n<%lcOQSFIt)j+k%SqZ0Q9Lyc3GOLKcqKQAsz zXe-w|cX_e5yK~H4F)~t@>rkt`n6vmv*>lAqrNNKX>oS;+ZEMjawCES9BM~A0^;e$K zHm$k<5iVB50*@v1g~u%U-&xAKx00trk}ZO@Tg31WDfP9U$J`PUVK5?L=kFgA$&gF* zt~h<-2ehrNt^GfLUe+EXxA;0b_N4}12{bvMKjUIYZfu%(@0(PB_zar=NFcv$v?bx?EyDcGj=h+oCT2CGeepVBRgR_OL&bjf0^l35(Zb?(=RVr@G(|2f>T~x_|a9u=(LGTBcn}w^4O~`}4fj`u=6hx;1(t(xjHKX)&LL7=h66_p{AK z%%TYKoYRPV9J?E7goT;T8J#W|H4m>L@F8 zhtUgHVf=qTxqm%CuZXFkp`F-u!2mMQwsO^-@WSMmBCu`)&V+!gdh=rKZYI|Z%)I#t ziPmU=PB@5)e#0(n9jo030pF~i9Iy+Gz;xi~Ld}nIn zpt`tvvKb`V+}}?I{DbXG0Oc$|W2l0TVQZaOVG^`Gsl$jetWhYSZQNJo)-AVVwR}rV z`evb`2hQhladGv)v+zJAW`Exqn}x$TkmiHBb5E%8?U=bp=j{!LsB1nL;s=iHbEzkf zCVJd%Vc1S=`?Gh;?wk+|)O$`R87d!Z-2!D9=!<*vIp~0y`igSCcQK@{<>wN& zT$8_1i`}303$((U_|P{M5F%i60f*MZfs~}S@)F0lwF=8s)g_Huf>V>{vzF&(j(f;9 zqgT^DQ_&WigF7!UKO_B&v{#s8{mF#9cFBl_nxzv9?)Mc(3w__wZvh206uZ6&`@eQ(NXuOneQ+4KVRIo`iG_jD zhzcKWf!vUP{%S|&ZI}qeM=j6k`JiCg+Th6J)-@0%yKXjI+5(72yWu|e1ICWQv=6x< zIf>NpeG{|*^cL{RgU>ApkisyxVyj{8517InIF^{qw{41Qu@z{3L)FC$(S;+7-dawQ71zHd5C)W=HHBsbbtJo_$aP?!XX z_T{h$O$E2=CFTe_zlY`5XNReCrPh2I`kURy=> zaoWu4S-jM@oh(beLM$~z7T!k2jr*?Z)mHp%1xNLlv{@Q|UFI`wg+kAd>(1*cPWRFF z61PJCpL?a>^RhMQ;DT&^xSYk!p?Z!8Dh2#&xWOwT?NI9P=&R6q6%znG|Gz;EX1%?` zSNP0=HShQtVvw6L6K-g~leh-`5$(4cxpdy4RV8-Cu%oZ&v{f9#aa~hilVCl4-PeIh zSq;M%OT-q481{P2osK=Ga=r$SMzNUr{Fxu&BOaIYBxdI4elCWSQKOUl!07+lr4ViT zU5x0|S&Uw}r$!iEA!@?fJ{7$_u!cb9MiOj1o^s?R(e`Q8{z|4IkJ0ACO7PK8cgpbCMM>VzbD+^ty%FwN$TuqGg!wjPWsG9A7O^J2$ZHr z8AopOhD60`WK?(GoHs(S73gT#_9g^Tc1x*plyLjYdPd<-`;#RXP!=!s&YSWPG;yb{ z9(hpaEJQDhsq|^=mHe7g))5WE9qQMk7GZopS9=?Wjqd)%s3YuivyE=Z8LCrhPr9leB$@2iJ5s~G0WF4R^{Jb&vt&DiTm(iU!;s!ekhd!z8hu8{mv8EHTF)yznW-Y!-nN>Y%GImF|b z*ULB(;o?xFE_+(#aa>Va?|WP^(e~{zf_H|0$uD>Kpt_99@Cn=1@HY6f_=A=IcEJvE zOt*M!vE($7f+T1_K_^Ih?Hf!^dE+1T#tIz~hATf7{W$99f>3X_$%P@l=;F-k;ia6N zh51a;*-4b}$CEsiY`rt>&wCe|_<)Sk_ZAmq9 z8^1nn^@UG$q_HGiJ<{k~jY29-@fJl~tIA*OxLG<`jJ*HUChV}Vy`kt6lGiO>+6zhB z=0m36i@dg>7AP%@;VfzIxoI(BgjhzQjS?3T_6z)oE+vWGzA@#J-iSaA|rou9KCZ(qV_Q>jr=6HvU_DIcu&fcCUGox)8sN1fusmwEk} z=r5|i0af3WkQ0mcrE?qIzQ<1Re}y&TSAN^Peq@f$7c*+f>Tp%`;NEaw;D~>;*XV@| z-wXT_+Yu?%!|EM*_^om%^K3Y`%8j)%_9tcF z#@BQ=CgQER)T;OYnbFedm(El{W@}j^=JuEgb8SjX`uT``?x(UM%zto31-L&~y+#*n` zP-BR6_6TJH*nBcigGO)x}`b}=zvMOCAJ)kDJ&BQ%ZV zli#@=V!4+038`YkUy|ydJ&0tr>vDX4z3FD+SRXvwU*nWvTA3;T)&krf*o`+gNVD#0 z_Eq6PKD}xYC%sqPuEM~@RTE1}cvQ}ykv(O(muBT)^uQ?NxmS+5>qwjDgw)Q#(;`-< zv*a8JhvhDcp~uxLC1mO<77XQD$O+GQb6rKtKiw?@J?Vp<@s-7_-?=a*h|E72&6pM! zWQqB!VcW@)M-)WER^|rjzj`fEN7b>hXYwU7C{)6p{hh#F8%=I)Vvk*!d-~?}wi{}D z#(CjUIlr_Ih%DGNvO5N)OwxKqsx)xgS9*f*dh}z1@!Yyvd^?q&Afj-%L&l9FJ6@3> zP^hX_imsasT(FxC3vG46T9b?; zGNNFbYsW#(R^(XOT1M>t>i(b!+XIyv3fA^#1({KWNcLY9IeN;%$gZdOtS<4{65qL8 zJmCvMV-#|!g77^aouCe4#g0%fEm;{Z)BzcYXVn!Ha71UQKeLZ$y!q-_$wY&_N2;cu zH)PlZK4^8cF$DH|#kQ}zI(&^!pLH~{uk(h?s%Ibfv_PnNi}xnDh)jy2S*m8=tw;e) zS;87BT~@J5i7>D3YlRR0@-D*KMgY-*lIiTZsr+^8UWkYN%es=(KFY4fwQnjqEDQ*h zFr~uw(Sk%9gx3m&Qw6cIC&Yjl8E)h7hwF;+la>&+5Z34~Q!0vk#-KLlRBI5gnwTDV z|DI0Rz1O1y+)6KoGaf%8R!hQDs@bJqixu0w#JFntC4V&;b+;fk);CVX?-7KykMo&F zII`$SP@pe zg82UJ6Eaww>!ed^=zDPy*-e)-)LjGx9Hg5f`8r2V4&VhHi#d%>V?<`yk9p&?1+#ed{(8I;R-{SN3qoZ2=|*shwA2-@X%mHLjip*5i?#haTYT}yYSjC6sY~J*5a#iDNz!Fv z9Q5JGAMoCUA}7czN*f#3dRq1K4`1g%6gxw)hIr^NO6e-Do{AVN)=F5jAbx?PdNHff zS@L`7GKae~ghPCXVMZ^lo_6k*Vptgs3HXNJvQjDNFYhb)buVO|{-~kguC7kV%8Y(r z9frwp%aOwwtaj8IFIee$$-ss9o}{6|Kv?dQkDNg1r=j?E^kx>+ks%({hsCK@J3YQD ztMeQ&0cxJPGu05iS`y6lW`v#>(*`v6J}qfSxLCZC&bNrr(NGZH){9)Fjv^&oah=ys zi^&;PcbzvI>AsmF_Kgg2*gUDPPB9pp^AF*6ugqC5e3k}eMffYC5D4E&MeS{gT!bPv z+eVQubRIwLz^*OzDqvde;?jmCHX;%JPY!pPxk4mnoBuw$Ej1+~z9K zqcTJBx8vlzVeyxBA2}VgjQt@&@x5K9&0*{gIUzs}Lz4%T2~QzHjhyD9>I&Nzl57yD zMHP3vmJLcsQ&#i_k0LiR1t%aV$p17Ex!KXniR`< z2qJM;XJekkNOOAssvQdgWhY1(qD32G^x%AtJj8O$z&P@n)1zk%*bmxm9NCc=g2zTf z7+sR0G50YsDnYt($EE6J-d@KdH6O!bfX=bgVW9%t2^Zw{J;HU&OG&~H3>t>pRR>A$ z@a$Ms>z;2cFCTVkyw)p16vCvzZ{<_LPOGC2I*0oZ*?J;jA3t6F9M44{Rc3X^q|smY zJRaGz9}#Q(L8ZW*GUG`3(sr(78Y7o>#t3iDl%c^(ud0Ro@G6~xBg37SgoOO@IeefR z`>=87Bh9o3hfu53w-;%!>yF+9tn@636}&{K>>nD>gi*p;b3g5c?^bHeZ7=8pqKy{f zTDmvVc=5iyZu$hWx|;C4bkNAc!1qEV_wT`eI%lc8LY0r7p~ zX>t2?u9HSMU5}yz(24H@jy+V|C>njwUYP@+);BO=!D5RRRNVw}Se;u9QUB*T1BA?g z6#LOb-Lzm06&al@z=c+D#9MVmjaAf?wgUjnT*btEkS_APQCArEEDZc1NdF5F0bx@s z<0EAi!S@kk{l~f>fw8|ul7XuS<>tmO|7=IeHa(vENcmtDWga-!v3m}MB)NQm#?ZpJ+@nreTd%&dICJVSkWvL8f zt0n%^STCjf#G%x;BC6O!sag5&@>4~qc}m8{Qs0Vx!V!+n>!lr7T&6PjRN;zl(oT^> z85eOwe&ApKtIganEjgSoRf!!r?C@)C51WcmAeTJhRK&AV z)1aVsS?u%;lVm_n*p(|Gd6Sg8)4wBC=9?PVI4B9ZxJuf?rL#`-CDgNpEdWbb;U7Zm zuY8iTePCZ~8=DiOKI~o>rV&*T4yV?zeN3=4lUu?M3G9)ykda?Rl;I_yi_Qtc?rf^ ziCl>F8%0v;*+!b#$YM7_y$20-Do7mH;?#rOBs@1tYQj>_>z$1u2K+?|H9H;YQCsO` zHWJ8e6oixGJ{5+73Q-0mtB(mn^W}y|k!@RreR1lMp}~WV#gB>HfaT^set|&2S(9;fI{ZAz{H@x32*W}E5mrp|eHJ36-W(Q*1wza{yaTIVn>clF9WO2nM1hH1i^v^!zf zx#gGKkE-;o!{XH|RzLTqUL|yiKWV+07<(1;h1k!T zIjoIEhu~S6AkH>0F(J|tmG7q24R>Nhy$k*c2^fuKyG@7!Bs!!-!^!`Y$+(Y9k(+Tq zpqw(U=5pQ2h!gRb<4ao`FKXU?ZaXF;!Y_2gP)~Sa(ESs`m$4k!N6SC=Z~lCg&hv>z zENCkEw$PBIe~Q??=t+Y(x+uMz-HkRu`vb41C++xSBVKvjKs^`$^=U7y{^6Ov#(gMc zOK<*Rw@LFhr43BO_(s$HtjeLhpp46yYC+8>UvH;`(r0>PzRwvw@r4C%m{E2*rL$3+ z!D%7Fcq*KhF7cDd;Vak1v)m_Lgeqz()eUFWi6BW)>iTmBF?@E?=-b(W zB!Fzq0CA?PXgcA9&1#l4A|PDF>-R|MJ~)$7SNO4?`vT6Py)9fqenCCNlpA$XyA$Mp z=@VABhWN85kP}<_oXFwR7(WPVTp{}U@|*yTU#j;DM=w{i%GC94AcrM5JCYKIH5njd ztj2DrY{%Y&_W@BK#?*~RvWCNM^K+V0#TaGw5LsxhERw(T(OF*3^wB;N<9FYFy8Qdk z@5{Bjr9pNl!#LIz3j|tTTOwiygR6g6>Lh|~ZxOKF*0&>!u`=+`Cy>HPU@1KBw>$AZ z|BL&HhE|%J>i#ojT)Ck)WbZ@^gJfE-zH8O({wKs$Ofg3GR`3q9LI2((WkGq|p|s0^ zGOch&IXDSuQApEQ@QG2;0a4ea$p0QJlK$?lMC_(q>!WbGm_NRsz8NX!KTRM6S3%b)h(l6RFKuZ zgidc#E>@wRQQjq3P|0!?OMb~xMHUfzEx{6*EpC_>u9>BjOxb*MK;opMaq{s(NI)$1 ztbg$CWft#YQa}P9Bv8--Lzq&;s3Ui%0H}e`cqSkClxznr0)%<5CQ*o7<&~n; zqo@yX*0!Ygi+!Vo;10n9V#TT*6Y^VQ@mG+}ru$%n0d#2g#P~H6AeL>P}M@|9Qq#{~3l5G?qN7kxc5prQL7NlVN z>*`r=p1jd0WfLJaC8jgKKg=CK22}5jdQ+Oi;a~J4&yu3AL>H!H z%EN`P(T0k$)=I2|sk>P4fTQGM(I-eKxw|@nwBK7rxHH7M+A;`6f9Vkn{K9?&*{GDyL76IzC1%zwpT*$YEZPdOP>$&C2bZ=r3HFNo*M(abzbOp1c|1QXbp; zPVNVD21u^K%&DOd7I=!d={pp%9PRl6`En@!`pc0*-p>zG+Qvs})T^`ciqwfflH}{e z-d|ZkY;sA4tQ@&Z`l(H3%A1|#OVi(mrWXbs=`X8y)?)QHw|FM(Pov-9Oo_|H#IA{XuQD^fV&=hl+r39J3;l=ZJXnJZS02Sp`~bxT`F=QZVhWN8VF1eu?Z~GtK_}bBWlTrqfGXkTTk=o(Y-sk}8X>6KwH?rgwv^Y`Kb6_7xTJz&oea*3z4R?~E7Q*A+^6+RKqg!jztMVILD7q(6R~ZdF;G z5Tl7JbD7xb0`5m;re@5$d1^=TqKSvB*Q6O!nXNU{M{E8`2uPQ7DBay%BA_7M-O}A>a=-6$p8K5Z+SlIv zv0=q;&N0Uv-|rZoyuy{g7z;d3w&>YX=%e3)$UGxOWhf!_tgM`oYJ;7oi!6w zZyXL$e}?qdu(VfFvRv*#kkKwLER97M#cmr^65S(AUg1^0adB~h!=>4MQuRR-0D8Bt zMGEN62O>(eN=|DlnTiZBLVeH9h6iK?_xkq$C8Llj6frug38{U@Kq+)_|vZ5TM<_#RU*s z4Lm%EpO%n~jkuW^1F)L>&8jZa81E=FC=88m?o{b^P8 zt`cM{+fAFAnJQHyoMh$y1VdwvEv!E-Ma(U^Q+-U`WqbQlRMi{1dyNWCgom_y{e$7a z*UEwCtBHvH@WK7v<^@=AD%6mAoKU(*K~BD)nH^W zQ|GM88>JCeK)P_A?PN(+Vb6ln1N|1H2aD%F*c|kCo8)^^Ln@W{rJgGKDOivXWuVTj z=L)jH+lJTSG8+~_8HDRhE+of@;VN4ty3m&0xHo1xjG$D#&P4y&3`8PhOTCF6!?OFP zpbkT-bB77`+s3HWQlZ{Wi#!W;pNI{69(4IJ5JlK|6fFH7M@L83$%X(z>03&Q7$>nf zu=oKB19+@J(W)ekke~|e=;=Y?aH*Y1SUdO-9kIL)Nti6*Zb0HK4jRdFBVfz+xiSA;AhAYMUrJ2*K zRSh3-a9Bu5u7=6Jr6i4@g47=;*a`aYl{JA`mEEk)PbB1?Z`$9aUt3G|FCEgze%wI&e*S*|oW-`}<5L2BQ0Hm3kNsgPo&eTgN?- z_W)NT#)un0k5o3@K#DhJAaFOX>vb;q2PCLQr#H6N&2Ds&8RUJ!kL%*ksq|+s>$Jzi zPrs`^7dO0G!D}{{!TcR1zk+4kPP)&8G5z@;X~x1eBxN^X#2Mq0uBY9YHL75}&l`91I)8LcjFi8x`Ta?1pO06KV-0}ElN)>p-h32AF zsM)ZVNf<7(X>t7|3Krbu8jI?hQkm8c15NbsPf*ZDdeapO$ZjJj8Ala+w4Q)ky_G^&2W5vh}a8#o(tUN1A znh||P=Bp|!-MQ=ZoOt`_^Bk^w_eN)88sZ+KgdMqW{-pQ+T2yFx%-G-7ob^MSDi!%O zh5Jv~3n6??3s=_s8?tSa?Hhl1L^1Q}3Rhks`@@KB%_bs>rbkm!9>*7vG{+hI<=rO- zm^_g~Fi<4s#7ksBdj$_4db!y0(tC@Zl@G_?VtZR>Hf(Z}4{BT7A96VB??f~9{2Q{m zYyI~^wl7!SBY*BmJ8pw5kld4 z=5`b_02p6|J+t}#QmK9l3%dOc2ml4-kOL%nlNFbF$4W}OSDNd1R(GHZ4eN&f9els2 zQvIYt6_BFMKIu1(aWX(QvQ?3W;Qy&kSM9CJa%7=}SlX&sKsNqO4JSM!Qys=>IpH*o zA-A#&dZr`@Tn@0IPkN?8Hw``}qWw?;w7I%L;ffNAk0%`;zJQG8DN3C0PCO67750nj zU;CDp_8tK5fa4?%@plc@dF{<&M+Y2e9vPXOOuYL#XQT;vaxX3{q@%-hbaaS_iDlmU zI&J-?BE>YCC{kmU#{-$I$gXsn%1P5NH0j+&(Q2TzBYz=g^sU)y)uX8( z)a~n^hcTDv)S|2KeR-b)ya^zoL6oAj)ik%W=u*?r^_Qac&m{}5$f-y3^>rrgG4mm( z${k95RvYA{2~+nMr_?tbKI!$<<{ZQ1>RELFRI1!?t&!>)@4U9R&_M|+RWfGXdQKc} zXEI-;_l7Z71UljR#G!s}&*8xw=fAL!;k{<6njUt_QFG`^lmceXZVA!Y3`d#sS16!d zIP)6_QPLn|d-*8!LE+}*R}JrNr_Cx}5sKlOuuP_xjk!+np~ zdF-}_HWcmrW7`O*q-CI?z1E|G{#q#i4r;-}y+FkPaxAEZhs$}t6t04Ox#t5FalQ63 z73eR%3TU8InHoCf^~dLaph@R@Tbod$>6duitv{KPz-|;A5;CUn*PJsfG7=Naq5{b$ zXom+bQ--8g9`74YQifV`qG&fBJt#yrauo|59bh@Z`GOz?bzjU^h0U(H@z0SEst;(DSu8nai##m;`X97pIVqn1 zMYrmrp~_9Lj#iO*y7z#`JW}&MBbcf^@&SEui|A$^{O48XIi)f3k!3vx4F zSk4tDGgzAKqT6JH@oGQApHX5*X-V6$63IFC$R&pc<+ezUF96%=RlX> z_W|hLAAccLd1!&bjIQ4QcmZ^7V}d^F!Vws)Y%p;H6TzSzl=09I;$$WY#5GW6=29F? zde*z3QUMfJLrr`q!7_ZHVKGBxV%jzQgEVdpA%%Af;o@!H$w2zi3jjL6!Rr!m0WK+| zMdLcyG=$e*gncm53%+fbm@3y|g#Hq$5C8+Vv{PZ;7;p@L7445l&DP-wpg`;G@K5JH z7?Nypi!b)XMwb4vV$aj)^{i9CW%t9$sR%Xd!Qo+lM~BGCQc5Dx=;7X;tWV;FY#Z>N zJ&oH)2nF}pNK`ItN-jic#P$PYjr3#{yg*0eQh2I{UtGz8{j|#!1m+dge_WJ)J5k*}}VEBW#-i&)^gx z&Rz*Ygp##F35KF~_dlt}ctJ_s_+)c1C;CbIIB-p83AZLqepda>4uY=%bm!L8FwOO( z_M}+xwnb}bSgB%d)e#V|hN-oF?-D|Ed5f3+Pt_WKX^Da91GqL~L4UR32j6z(%gAG! zH{WvT9=h*O4Q?g!Qw`*QOt$4tX;QPUdjwPB8Yk_c3tR>Or&k3ky zyT8INs5ThSnpo$X`|9+zTo2~vo;wb=GTbG|-!P(S%+K=SP|VDLsCugGHF)HUUQZ>* zu+uJ3j?cCTb!qu2YjrvC8f|v7S4@z(T8atltse9jj#X7&bG#2nCs9?OeYJP$Nz9wctC%4EgQBe<3ZRP&_EL|XHxPk3 zssZ>6jN-sDq5{23sb=PcZ0ruQhVLFsv4#Jw_?f8pfhJt8Qgv8!urnuGK;9&K&jb{q zdrz9p`+|wFxL(VT{q=DbnHvw@*vOrsa)E?0pI8RuElZ1jLGUZvlV*t)Dps6REB|PE zq9S6ygd^hjzBHIK>M#3MYk4t{P2JxLi*fXb-DhK-9o{PuqNB;^Gi>J{wHd;Bb-x#FE>$fyj{^!2J4GG#T z8Oo`+^DcviHIm;ZJllV|E_-R(Q`Fy_Tn7E@0vH$|63kWY_b3V!u7LZ(K(=toMs^>@ zkI6U(Prq?RK&+6yX=$+x&}gl*$$#c}^7pOf+4#}IZLUc6WWP?H+*3s-2|-C{(XsL; zXKJ3zc@c-bkAbKOGa(umygpa@9@9}xD~~jJ6m}yE z#55ZYzq}3>r&+vw8 znfpJU3VZObgAFv**{Oa6%VJ3AG{2A#v zt5*)t7vmdW!L);9|y-2MRK*TTNL^}aO;RGE8q|s0w*l_+3c6E_` zy6@?FDpwnaH3M0QH!&qBr5Y5zdPlLIgnzI&mu!TdoEG?wf40L7f?tmWrcS_%uKaaMyD zHbgfWA1=;o6ruMY$LVf);;z1y^|P zFy2S=es^bY_bUh2m7H#h`^iZYVl=Ta(DP#`Suhd{Zq>|s#xwIqhvJDDPmXVrgZP(k z{J=$MD5no*yt{rC@r({**JlB&RC~{4aSP3nwl|$!>Gn72L3tKly7&XsQ@p*R8}N^=p?j4#sDcn$H{nR1{=0#?p0 zJt+Hz#S9Egr<66Qu+-YMxf_rEA(u&oWLloN#@@*W>R{{M;ZELXSpeDqH|Ww|QN@G7mPVYH(_$Jagx$%(?_0 z8(4L_{C^i30;8oD_~@2qF~eG*B*?p=0XbU=>Y!Gg2YK{F>E9h zNpRY$3^Q0dnU9J(Wt3nceR`D8QY{ew!fP1`bwmIHRq! z6wpH~se#?FsGb;nGVRJS5CB?cR+*~{py5FB1tuAvTDcj=QZI1e-v92}`?%~Ph#dVd z-i+V2v?A;NHa+OpLqHFFD&Uv|D(O8Les@=~+>?zq*Kox}unhQedj5e*=o#6%Y9{!v zdZw7BQZm}`SXCvsRz3C5;6l|gUXfz1q3K;AfKil~@4qWcCATG}5H{ z*~$gD2N`73i`hcpViz5&8Ed?Ufh8Pd%CK+HpMy}Derk>RbC4V8COoT6{b;6a{(Bb% z;xn)W^1&lnAm3kcgB)q1x62_-W~mZNMMm;_C^KFlZ#acQ*(j?I^~b?OC9sZ)fCO%? zpmQwUY(4k#r)WmRwCOUGZ6ZK+fH=j3=ysTa54%ooHL-~Xk67t+-NuD z&2q^gs~qeVi%^}J)u4kF4CE4`xhynX8)vs^*g|TSEDeCHu?boMhH{*t^NrHLuJKFL zsq$yOcVqjUOcf(1cOgDn`IB9MJw0keKRdBC4IB@eBWA!#v0+jBON>cX=$4eCyX+d)mf{VGiCPFuQmxFa6gCsVFqKF8b*!m)BxEi%` zHz3puOcjlD*%#m_(@b*0%X7q4iyn9vSuMj!z4f9(ip)%X&zWfcBLzE}V=i|MPVC1p z0xDc&yl=d{vE?xNE0dHY1oYw8jRF2?$9$Lz4m8U=q2A0k#gba8V2YPiu@fEadCWJP z)0425z=z}R0Sr683r1aQA9}uz+&rg(AfZhRLQjl9k>7he%@Bf?1iX~Ikm^?8GcNcf zq^UHM97Ko)hmDpdPA$O}{tsBUE1@zIZFj%?FFK){TOQh|;9hdyCH7?o1uN$M z*bEGwPrJiCRYcDiE75%;BY)fS{O#O6!Y1tx&fB3YMO!dcK%Cb7>rCco8jeh*;K@9n}a>s;*NBg2%qiOTZaCjd*dVoiB{ zj>DCdM3%4l*e}WpL7vHGgws#SoLKnbLiqdPxC7`OnyZ6LhEX8>@&J=UMDad4`o69G z=3!IH5wpp5 z`4U9QOxZq_g&R z_`kl1lP|U{xyOA~n9#joR1T%6qxI*MEhrp8BiP|V`g0CQyTmwQ;wQRRGj-P1?dP_z zx*(Q^%f~SN3d|%MZ%IQXH5qfbNgaE(|MXxg8AiVpF;eAFFJ15*T{+zrcEWA4%_?mr z1C52HHsP!zpTPJG{q8zV@A_V~BdjrqqUrj9iRTDTIsUt)ZnMX}%(P z05-yKsSQvwbruGJ=&L}=?>~9b+i?4UwKhTcIV3;xjyGrYIbYI6meq`78lMk7_*<+9 z@HMscyH#!jDsu9XM%KhEIMqoo_G)LGK3r$tbLxZje3Z7NWzp$8K0n185f|dOV5J z6M+&-C-ys7_pCW+SKq(Yc3Bt(t+JGS%^qydWfXsePiYTsyQ5b2K0i+J2)jYF%A21h z=^nooxH$UcutXsgI1tKKQ&YFHUPLN!kCEm)flg+(Bh8K&ZI8pB zJ3{L**J9t)t!(lyhL?Z7F4xyQ_HQ43MiA=!**0;=TlS^SJzbzUX?6;dVcf zG%`K@RZrlKtmW*^?x-`$2RFu^Nbm7PFS{)p6=3pU?Z>!j`}`4hkEct9%90EZ>rRh^ zAGPKj4y>0-a_M&WNF3@O(c8`^9z)fvCfB}aUa`2H-L+HUVy;z{YOHX#dm-7id+@s+ z&ikd>e#SyZxj7m;{EQgRpST(&bni~;=7a_Q#!;UY|8X^i7v7v*D~X1#3t8KZ@FRt` z)4h$`!wdr(7h7cNp&M4)=-qaQY+3JI=;w)4diYKksH6Qf*d6#E@uO|7X zY0pOM@a6_72o&85eBfiV~ij zQK>Gx@Rbd+Kl*bM+*yZ1sGPMm%MpU*%e#BF@Njpd`Hu+L2r*L6{q)I5`}?kbvIf#) zW6F2em5d`I*`UZKx>Dhyu9SA);-F6&JTB@q9M?6E&MtyA`!(kDT?H8li_j(hf!878 z(?dTyE9=3Fy2JJerLcxY$W*NRfnMAVVRsBD3IaT-pa(vf7|2NOu}uZ$WP{>GZ#N>i zQvAPPV^PUdEu50|ts8FZUcJF_6$a6PFv2T5titd4-?(aB4F{^w*zBzdf2@h%A93iu zqFeOYk07ET>&(9QJf2*+=W$tO{5VHwu&pf|9P)dGU+)$dIw*F#N=HP_7ZT-lC%m@& zFm-JAcvcUV_Iblz8wxI6x+bwG9FfpxOsh$~z^9=L{s6jM(?Fw4k)6w=Bv{-wo}KUg zDgd#`V09SKWNW!w(LS{w(oDC1;+6;rVP$s&QMdbQ2CEH~16#yukNPV**2+!lL5e|) zPzRWNz^T)HG{Ou1D6Gwr3G;9%{G3qN9|jE$4F$(z224bY+x~1sDDd6b)w1Lx5H>4Z;#%Fn0O z@e%tkvpmmD%*}PbhQ|2xbgPaG!x3xoD=*bNKc41HA!K@I?ntEjiOVcD9vAR38%~Wf z`>vf3vBlmw$)dHLD?SQK{Khie4-P--1SXQNk?01}X52nUASPv`xA)6`nh(FFxFYh< zC=(ZefWZKj=J+anBQA)Fg2zr?SJ{77*D|k{u%9D4Y_2gC;Q!nZ$C^1 zm?0HrTWD7!{XzjD?T;8zKa!H44xopGJd15mXJ5KsSTeA*d?A|%?F7>~juOhfo@L&Q z=j*3zmRRBZzl#z4MnW_gt|~j@`9nnp4CS7r8yp>}qCHj;mU>U4O2q#Op^o6)pIN4g zRpm7PM#3O;=DEb6#5z~!^Rq4oTI3rAYED56I97DLL5(sAN>~U-ek2X2;Img`&QP5v z!uIm~j8IPw4j7v;KEX|ii`rdj!&4WbuOpaP{t=i&gWFX5vn}}0$3%GW{qrme%I)6M z;>wgcy$TcoIZ{pxt8=$6HZk=IHn1@1cq4XYTku2zwy%=Lly6}nD$v*G-Vzg&RC;X? z1L3%Bi~&1bVsvB#xP!67#SK#6zxlz5ji~~Ln&h7oH6p&bsN-WC=>ErGaaleG*JX5x zkU!n5=;Pd+^m~Sykg}!&)0VZ_)FZ6NwZ}lN>K_tJZ@@*g{BiU1vd*VAv=}Mtw(xH7 zjajfeV@wXM=U^kO*b{+&f={gQ2CGK?{*Cp5E8K@;Vv@f*68hf_Z>T0m@DfHZ-H#mT zi_J$##`D*Y9yeWIo_nPFKn6C7{Tss508Q^{gA*A$Tkj~0cQjqr$ZI|1!K5YgG)+c* zm7WZ5$EZtEgUs=&_VDaa@!{x#k#1&!3W7==)AfpwdX7M$cLQjVPcMmD;~AiPUy!E4 zC++%lTufQF6GYvgdAgnFE_JdFwR~eXKJEbd%1QOOp9$sZ?7%MKotyrD*3JJ7Pzmbd zgmVM~A$%q6i)MS(d zaG)2@(&nyjF#p#c-{8OAnxv;%o_08+@Fp;=fS1*<7Hb35j~2Q>DFI6RD=$$j@&DhA z1|((HCsXEYL(3-}l{#Mn``lS;kW`X>>NBC6+-Q0k+)6E=3U7HQ=u-@MhmJe4UVAB= z&Umb(BQ~U8Wrp)U3w@^CG)x-!T9`^hbxKIoESvpgX{QjZgeI4>Diop@U!ianlc1ikP%EB|Ms&wf8!ANUP;sy zV?OY!53IKTJv!7d)tnR(UC=1@rBh$*?!tAtDOlWAai4@$aRU5<%!TN316rFhuL zZ#XO?sc`6iJza+=kLQc@FS*mSiJvIi-WnyPZ0%>I>h>N**M(L6YQnbCT}FiM%^8{F22 zr|aU1zQa*Vgw22qhpvXF;#Q;0C3v0}4J&*tKF{*ZzI|rChhUP(; zlxM-i&+`>gQX#9@2*?f!mr!wU9XQo&dqZpi-2U}- z{6rS5FkcHw+nF!DYvy(~UFpCHsn#l+jq0bw89a6$0C3U3cY+jLX7Czcbg2Wlu>E0^ z3#k27$2X~x$D4lj_Px0z6|OEUA5(TmVHANIQfUZs$uL@c9`FN$n5ky4f-Ky>0 zV05o&O?|!oRt6#wS!PczVR`qYEK8t`)(Dqh_6jOe06f@*q8*$gt2FS=!7|6kj!*Dyg^pkm07fC{j{7HaV;-GBx6 z+#)LZN4DYR{ZAE;PU5GhlU3L>FB@4l1?!Ykbgf=M<~{psuWmk3bYHKqLHD%-$ynMW z88UrvWceWm#?}bu=Pp-gU|0SYL^&F_(-Yl_bw!Vg{GQv0nt2y>7?g(!KJH-M(V0_u zPH8P_=_pUz$#4i2JS;Jy-fkwaG|8r?{_`DD3NeX&-e>I8iuGqJ|KkN9D(JoioGhhR(W4pDSag5-pWkJDkw9&96Vhi`>R$_}jOXKEZmO@X{o`FQ2a$jlO8T zMF@@@yMNbkTldNEwpL4D6BRRMq{7q$i~M#1^KK4|J)W3*``vSg`hCtZlI)XFb1f*{ zZn;dWtSeELMTFDV;QSZ4*JjjWh;QK)9b8z^VVQ2$ZF*8hp2{) z<()0p)dZc}k(tKlTfn%Ea=G|*sr>}Gk0JkP97F|c!xy)hWRkSFz194#+058reJPjx z+waqOJl|r)Koo=XMtpbG(aLQ!XhOJ3vULAU;Swvy$${i|)Yp|9w8`bkeYdvFC^7RRBl1TOZL))x5}L$%63lU%eo5K(v?%7Z_l{NBjntGwLm z5{T6Y&9}%c-h<-6FWKsLl1x~6?4R(ZceUYwENP{wn7Lb#;*lwmls_o7yd4+vFS$09 z;Rr+~Rsr_NgjSt~y~N_9Ul{?gwi2{brif6#4SOW;kOw{ZmZdtXR0hSQqbyw32;nobP0Jts__ryzsXVt@1#wFFj&Kh<`x;&r}6-dR=Fdvz6Z*av!7 z+K!@xJ4TK24fruVJQJ7W9*>3YR+IScmw!s%O$lF9W-L^aupG{0rttvdyOlaqcK}5L zV!OwtNz2WwDAFE++fuV#&o6=nx6MYKt8TDLCf+n3gB7x>@uwva<)E1$Br2ol{?n50 z;M>xt7ebL7<_Gn*b%*;4Q~{N{%QW|t+xA&gx760qtUl$4U{VCUa;%dpDwbOHk`ua08@sKVzuI2P<>NcdZgz3w1MUYzf-qTMs0aWOU z{mN$ML>QV4EB>z2b*kgD^-X0frE9=WFZ`vuU%|-U4IShgEc>$|sb$T$xFVif9K^c; z6=YeSJGfx*AFyR%?%OaG6r**p%0C?+>+75V4kpqmX^v25Vzhn7$lUBEhyag=&4-W| ztf9*vm?`|A1y(=J?TMwz;2~R4*=_oGdD>{*CqG1>?K;2Gdn{{l8+)4P{WfQN>3Y!A&j61E_w~H>#=G0imI|CVbHjEqNuU#9LCqLq){7mF!9Aj{lB-7_C>xn zoG%dNd|P|c*_GhcVE=4N+XrXAlX7s<+O&5|i&Z{+$hL6hMjBTk1W`?`A_nj$)znyX zgr)%c_eWmf?eM;X!8WqZgKI3V_m6x!DrsElP}G{*>zyh7%$>M?HnRuEkN5C-iZA;c zV#M=(jL;NbO2%@L>IrNgB5bsR;L>IWg!N=+VFi z_Bb%F?+UA{s*5)deXNVmu!L4R>nCmzb^pm*Z-Oq~1Zyy9uZr5J7Sm)P7M~>5d!kAq zxSIV&HQn|@{#KxH)h<4ctG^Qha9L6d!%;1mDkVnwf8h3@jh(EqzA^1#qvg)1i+;(^ zk`lfDp#qx9MN%J^93x{YL2R28w-Ruxq~`SHJ~x4f3=>nGBIiz@=~lLQT1#6({jx&R zvA6T%>td|R@*lCQhzZ6nirt&`C%l7I%4$I^^9R<`EvdUr5@A>$s?0vqHD4yiW~B5C zSrD>%xP7+%Qp-#9V#N+iqK7_id>v_?nZb(t;74U+L@miD?5*?Y`0ef*%_dQpyk3jJ`Y&)F9>aZ2nTg4kgTG^2m|YOJCB+9+c+KMyh# z7P9FlZDz$S+%Y`E2V+chD8TZ%0YwT#P(M9kWa!e z;#>AdQ+*??x4{NDEMP(exv)SYktho`(KK&*IjJ;MK~KQ6U$JbB^B0}7TcEU~Pjv%b z5<2(8^qfwJ7jKZy?@vAwF0RW4|8e~|l{EFL^wD9sO-OH|`FOd-+<2WOspXiob1_k3 zgz3i*^?~MSFDutD!-MlwUF$exTi@arU#OPqWk z5*{xs3PXK|ch9v7ON0WU(&#L^?`+li?mY=vFV_fYdv3q6xgeCc-Qz^v?{G!y&;F=f z-*Pq^n{4fI7o2u3s~+5-Wuq$VZq<)TO#4DTC~$dlOX)Ybv%YCXACno^S*xM_vqil4 z%6WoNDz+zrgM~_%J8n_X(cSDoWwnJI`Rvv5X#~I9R)C_kymSxYUs3;_KpxT}f17~* zeX$r5u*Q-dW{?)so8xP0Xh|^%G!u{OQQR&A6k}*XCr`4+F_8c>!@lT#@%*lTTn8sp zQ*QoItDR2gl5R5aw`+ge=q)Jn_>ESwl0=EuEzsx+tCN@Fu;*L1cYfrS&?o#qp$e=( z|L$oVGzIy31(}sfn=Zq0rWGaL-tCPF-_jlWNojn@?{pJ`RER>phlECg3;+l47=72( zRR6il6+2r+W}bZ^6*BX)3UTgj4DHK7b~w~Ic4@gk?_8P+%dc=rZsU=E)Y(X;arRJN zz@{$>&v&>JL?}D#C~gJESTYrkINx)ND;JcN<<;hfg07eoN2eLBx!?RGmJL~o>{|r1 zte@woKE9*J^Pn@B!#-5sh8!B}9sA6FocsB6h?V0jw?}=jS(im^#nR^qRw(62WW$ zU!KM4G0!L$UN@%$Z`WJ=CUWUThCyF(#)38HLbnBG1W^pl*b3_XkfY4{q9Q;#DI?)Y ze{GwDC(q5sgx1X(O@|sa7i5sa81}VH%lzY&Q)JYoAu)t%p#${WFf)Xa)@6bg#E^HL zYpytdF*t`i_CHk8g(^w)Zz#nWhw3vzQwFO1^GGUhimT+L#wu*k>IXx+vvJX1;uPbM z$#WdJX@f(+KZU$foDDdyzd-^GGef^3O~(e7?YIdjh{gDvHhd6E>5N=J`8lW{8B42s zw-tiEyA)T<%%6GT8=Pkae!YcU!x(Zp^hfDM7kKadm!!)(go`HY(LP?6d4p^UG|Kr! zKZ!iH<72&2AhfhsN^N@JK|F%e%T>Xf$P*Xx7x#;Zjhr{L}o;X$+RQ z-kVV=lVP4#QhrQvF|~v^+@x+Jj__#mx;7p){FiB%=T?;~+hH6Jc{X#9Iui*W^a>mH z7szpAX3!np`^w>;LUUd0&L1Y^)yr4hR#g>boU3g}bjEz`pEu+M{gw*+1{!g0D#fL` zSx0I{a9paN2l@A-J59M@jIp*&dbk2QYh_b%UTB#`{)D8CCQ%ycg(hmdaO!)S#QiVJ z$*KSH%$h>lUh2Lke#e6!s(g)lCUrW(vGA_m&Fo)GK|)XAooI-+EP=mhYd`@yrGYHF zZBlqm{Cfc1Td~JQ-!TssZ~601Mn%lpld=HsFNU!uIKDU+-Y1&)Q_-xZTLK?>^hO0` z$qsTXbnU{e0r5SM65^DP70~b=q^0&IKE0QNRff{+ ziUcGh@~3aS>_|7ktmY>M)=(<<;Ts(W0NF)*nx6kWNX+YcBWd1cN(bszsBcb}a&JJ1V^kRMoFD7i9*_xY?vyQ48honfODSj{0bih<25)WqabW}|s_!2QK` zp&E9*(boBAoXDI;5`HElCu8upCbr6#)5{+}T#dl5IPYbEjq-24DHM#iHz4jqy(w^N zL=BY&Gy+DV?GZ^(_1SI=%ZZJS7qN00<86luNT5(?cUR4*jztbqRX5K@S#;KjT72LN zfi+Z5-OkHUaL&{H1FTKE|z4XVQG8txXl^+f|BLV?V}X?tP4}v28;JH$YOrV3bTB zOS|IA+x<{Sb^mQ2JI&o#({v{cqvd+h&{QE4B+QYK_rvK{fegQ)=%?$6&SYqVFXjTh z5|SMNOc?a5Uk@nyblo1d{{bLcqtTA0vi^S(mR45MGBREJu9CknZ*z)^egU~kNi6~J z4is!S(F6Sb5gx!0dX(}hlDVnHMFl|AEi5cdr;hqQ7Z)1~ps2vg`fz`nEc{sr091H| zGNTT`!UXrQPnPdMTTvA>4sa*t^7i;JLuk}5udc2XT(*DuKSLt|tRMhMW3dB}TQE`I z_*eWZ9r9ZMus8uU`V)Y6Q&Lib3;bS?>3P5lAZb$IEpiUSnyu%+r4U5U2!(ztmRPxSLA@)3cCwqN&( zK0s~oq$>bkhNOoFA0QX8KE1|4NN_MR9H1%j>9p6@f(%6jyq4ioby!Z%tR)fh%a<>8 zE}H*uy1pzNVqW8@;h^ehC4Z=GD?sg0BHbVbhKE5 zWp#D6Y5Wa(w?tyw?DRianu)>7=#G^WY-=l#T}O+Y2n%zbZ4ciGobHiiP8WKbetF}? zf1g+Fd5CyTsd=vjryKXttmnG+&i#fli^_!5|3F8hO5UWW(??HJ)~73-oomPg~+3l!t=CIJN^ba!5{T9 zZ#^<|5}Ky^bEG?v6U#5PCfVqf81?>*>Zbl~vLY)*J95y^iGfcy8^!0) z<|fujnF7hFFcY?IToZb@S$|YC>dv<7i5)k`lTUlC#QUAKy%MNcp zW#G#l((1yC@K3=gRrzmTBT|Z5Sb)d3V3-3SU%4Nq#&e2ZTwlBY5DyIBHuj~JUXhx_ z6rUU)2b3VM>BpLY8P9$v{s-F>dM>WoAD?8S=;&1OgMR%Az&~W6dd21^)m5oYloV3)JD8YG!T)RjYFEuqTKy2k9HG4dEefu2E(ACXn*tpENO`+N>_u!8r&6t+C0%10axycKOjHmww)dFjmLrd32oj>s7K4e5eH`E zDQjsBo=@rhDbcJpJdZX>2HoXCcSrATF80HrgF_jDsY$vXsP%IZ&_RK#0dE`FD-hV%9DGajeaXYUp~DC%tIff!0(v=UpCl!xrinLz{CLlO)Y%Cqc{Wj4pD*^ zL``KNKxpW?(;4-BT>;24fYMICJIfc|m}-CE3d=c4UAhA-hB~T2_Ur3wHu%f6C}Gq7 zNHU;zoC4(a6Gjn`q5Htc?6}yUYXs~LcK{XOUqFkc9R+a`z+2>C2UF#G*6k*m0+;hn zCEAU+;>uD0k_Q4DJ^qX1aaF}iK!or)4%cG^pi!Z#Wkh35dI0)PwQUM@Kiza#^1ghc z+Uq@>5T2ZzT-}}i0V`t#obMZe28^@}cvQ}-W4Uyb{|9=8y|W( zo<~N9nHrJGk~K?XWt>|W&ER$eNRqGTJ@)F4uf234-`R8>PW0ndDkfDIv;@**wV>`? z#Wp(?7-AJ_dZXT?K7aNx3Uio0`OWOxotMcqoLp6ATk0t!d)HnY`8;U~#^R=TJ%#8m z*^o68r<*Lu1`~&9c@!N+?GqLe*Hx;niZ~}rO zscAS!^t`Bxh?&2CdK7gNa2WDg6PLO09yl7^;_z9;|DcxZcE}7FPK~gTppIb*m(9}^ zH}WPczuSLR@>3oZ>m@2|yxNeMn@>DWUU(W2@f9aB8Fr_b$ffYb9cVVXwK)9vkq2mW zSb&GW+|!eU;`0&axeM1&%L+eHlS2KF^%H^n-)HuN zE@@-q4c7f4lH~hM;pflh{#>tr9SsRJnIp=RcMU^JdL5U%Y^YJ2IXhYL?7gf=e?>|6 zXi>~e-WX1rdI@YeRx$CU!}~HeWf$0^0Qo~&MTHt1+%t#68(}-D1H;1rZn5mlTgk-# z_L@o-_icqww*aImgBv}p=l~Wij?$#fTvTiYtM{S#E`ee8CxhiB zuOknL?yC;}wrSfaBI7Y1t!5x~1d;QY76vRU+ilzLJT{8Bw4Fzv{mA{%V=dVh8hE>- zr-KF`*q#-Kx8}aRn7XsbR2w%u$Scj+_3&ka0~=x_DeykUkiYP%Vh{8_w>96*xjM|Mkk{#M-VAex$QRV+wYl@lars4Yp?;6 zK)fT-nbNGYehIifnT=Z+o{TIkW&kt^I&DJ$pQ8YZqmx0F(`loqmD6h;`(-%5 zpM<+RNouDB!C(o{eF4(G+~@qw1Hj504eC9_0vhdPsaC(LqM*3CI^>VQDLSA+xh8cv zW(s*<0jkLmNa3!Q0DpV>JnBbH4gOr+tJkmjOh4Dv)+#H59j!CQ33fjG|HIW+Kt;WF z-J66UAfR+e3kV29m(oZ{H%NDPiwFov!yqjnjihvU3_bMF-QD?rc<*=L?_2-1VBL!_ zGtaNiv(G;JoDFQcP43Ovt5=|!_jX^vif((`^4=rt_O!C`U_B!oB*6pB-Un!)U{%z3 z%afOP2%`BR_{CwT;B6!TcK4weETbLM=Ulk3{#3)>-u`^Y#z#t2^eHCa{)5UHXU**O zofLi#`>UNwHj6Pvdk2T=`LAeI2OUJfB@^$#{o4Yg(>kyW;CFeC;6Rw|-}64>C3T&D zIP1Rkmel)PkB<}+cvv@WINERhsT`i2?FS}HEpvJa9VV$>9no?E-6Ss4&ES+=j23yf z_i@gFtL5Pe3`N~8H?lW?#VGLK)C1Q_%dY(;u$~M7o6dKzS1md6OxC$MSU%GEmq$&N zRD*B0duV77-h2J**<{G2Hq_mm^4>eKYwLDZfRMN*%xjtLe(Wt7^=Y)YAfN6TaD&dH z572Y0j+*>y8N)_Sk;LvKr$U^=#0*k@Q=328a9Y^#%=Z`j}qxbtPDu{pM>btL(`ySu((tGiuf`$6pS@Nuvhc=wk^S8i9ajiojN z7+L*Q4=X!c=NB?iksdQ@bH&-=>GbR$^{@5C-L{B3%pp-JiGFb6QoHSbwA$yLe1MZ3 z5tH=lwwNmD6J1x;xQuzFiY6|7xZ2zycjIO<* zL^C#P5S_-|Za3y466c~1@MN1Ittkaem5FsNDVFD+PoZXuwmf!R$xj~d{4K9wal2$c zUY|)-y*;I35WM-BZ*z_@>E^%u>X?d+H=Nt1v299O>K@Tvo$aiCz5r0*GAS>ZwXk}_ zc?yAWyL1sWL1Z~;c`dmBe>=VTh!+q}_WeT#pQeRR1U&YPMB|0&xwlyPam-?9PY2xO z2{4#nB1;506yJO%%6$HTKEY3VJF!=0&B?@Fp2xc{y`k^3q4y)KFna+KdG&FpsOYHm z(J~Y1_vKbZ;hn89-Ek~8rBZZ^UD*Y7UzPL6_lH_U8MUf@2KV?`&X%&*U01#_lSTVi z3y>T1oT%|TYBxx17H94}!Yk+EW$X^TrQ!M;*)a9}At5Lus)v&GWGUFgJp7#a67x3HJChnIZ@HK$!?)uW%|yh z;RJL)?0tr3^~J=h&O7oPboi^%FzQ^R-f?hzJX}a#GOi*zSHtEEu8?%qR?~ zUxkFVS!&d{Rs;4JR_c0@8JC+=0F>=4HnV(Vh1wzTh3&%&=bBSSfFd)2FFo)dd-a9L zy2>|{h_i#w!ASj{ECD{o;Hirj@Ztf6$OW2}7?M$R^z@4$5Vx+_-zPh_TaC9NMldMJ zXv+F#D6p$`SPJC?%pZ_if&Q&D;64jL!^ThsGO*=iyysi=yDuL3J^(vY)r>W;^fee) zP>uz*XFWYVRa=F%`|kDNmfdf9j9IMLigfKQSjq_O9C3jwu`N&X4-(#2aWE$(GRvvI zLHA4xFiF1|85>(XaR-|+2rZ{{`QO)<=MPeRhIpK>`Q5JpMs;0Fc5wwRykJ_J{`vj_ zU9gal&?Ba}5U_`6XljCZ!UnJ&CMqf_2xq&sdjeo56bD<1Y<4tYZel=u1v455Af{Nr zL7nFHYv1c@Pmne0!yaXHmG*j_&2%odhg5H5B~H}3Fvn>-6BIRE(pOlOnGR6|V3Gk) zi3;N2uj1l};bDdQtXNjIW5+oGczAeaB0&|SzzG;wlz&6Tu?1$hfB^+b zJb(@$bCpiy2yOO5Ub3&o=W}Hd4nW^9^g8IG3@--8ahGR%_ZhOR=h3tOp*M#Q3oRB!)^Bgs!-RSOn3-%Xpk2yD~z zw#KaPjpz9e+Q`)ETqWa#PE<>b`AJQv_0^rKHgvdf+ZQ@k!dlY;yY_qp+`Ga#UnhV4 zfQP-$xnNVsow-FHEaYbPPLA)8(*1qE$uoMGMYBBZ9JgW(KS z-A(g+{7;Z1fg5D;Z6aKyQAvQDwp4vy%?g_0gNT-v&PW`a87QRXI2jv5MrS;ilKk6c z;CE&wswh7nm!hFRGe^Nf%Nx~C6ZvGq;$azvbEE);4cG3yf7R<29U#nZsRnO44~iSE zogYk5Qv!;Ka0LWX82fQwGMAY0npKa>F1M) zwhK>OP{k^xKJqPQ0hK}!4a1Cqx6Yzt_4-WXcj}|LjKZv7;quWR$t*z)H^=~#UY&0L z$}1%X@34A-hqHf$`nM83q85%=N^@!S#r3HU*|Mp|$%cz+xFexTcAq0OChPRrLrSN}F)2=>M?lv#wj(*o#YMW@Zb)3;}~96VmP)ghU+H>6w|a zi;FkMJBUEQ$}c%r1GZ=t`ijG=BtADzJ2=aX@z(GS+c3PVrf`DIjOU{gCsy ze6G2K5;{6U6Y)7LQG)X#l9GC%ZxOaU#Go_AZl+wd#ApkH9+R{U!e+~rgp1o16Q_!` z7m|^_NDj}|{E4`=5=lk{4=`3kC+6DEaaU4NIh^;y zv`1J~0zY>jU^6HOruuEyQC`tsS~~M219Up!1Rl2lJ;2q5m137L=EH6;z~tE$t@ zKCb1LPItX7E~pQj!HKzSzf@IK$#$-;th9Ru2BH(#_j>P~lMrh^Gr>o4nRTNDI1-o} z29N7_gyt${cUW?!dl8@`MH&&L?%CRZjAN+#n)T<;ADFYKkKoV~VPIDd@EXzmH`*)4 z`I1gj13=1wy{Fi?k1#kS#NYjE_MM%Y9nT zb?f@()Z3$t30As3Sw^d_uKqJiQdsygo3WN80J?db>r)s@=-+#6q2G*JQHInMh0ImR zFrc2kX-^}m3AE87Vp7C~G)O~7+jC?&OFa*jORW-<>Vy&!2`5Vr95@QJeLI(o1|uRN zoMZ5*=`Or2mDdcJa=wg(zy zp3g-oFCve#Tlh_0T|TEM-*~M;Mmm8b`tR{>uiM&7>DDHe=XDKF&}RTlU2^t7LAn;7 z`BqctJHj2LQ^ogGGKw-%A`mvt9{T=Q^4r8QeN7HPrey-*p*r+IP()UV2LkU$s_UCA z6)!OhDI9F<>ZklAC4)jA7IARi$vloj_;qekm+IVFeT_I)5gk zzB>Iy_Y5SMK(k0aEuI%l6^KJDX7%hr0ozaiLrVh$M>#t?xF6xOvltU}r6R%xC^JPk zv~IkUEPs_RCh;681E)+ek-B@j`P&~g{|!r7u;)p}ef4Uv-UDe;Js!f&UZw}9LBd!M zFC+q`>*dwe{dPP}P?K1T3Sl;E?-@NuT(`BiN2a6%=;4E^-{~$xR#nwEZ?CJ*>NK~f z&YpI5j$2SM%|xg}HcoJUc7bs8YW_7<( zNm0?zfPr`K!R$k(xT~KjLXUjsmr?Ifo$8lAjynZBClX@8|J)v|+?(Kp3`&Lgs4TS& z9YH`argwXNq2+UPVrXL0S>RS!vq^uSjR3!hXWwv^L=UcRwh@)#yt`GDmZBrW*u0qY zWdi~rKM+W!aL#awp$Y;yS1EW|tj^nNNK7pp;_s$TNj`#yORyt^2vzPr6rFE#9z zhoXZxtmU>6%XipCd7mx4D;cS<((%|~r;$ziP9<6Lea}=-JhiX+b3}JEEt}h+A@F&= zH-OB|&)-rS02iN1QXlvROQ#Bu0QE%0f+G*e^NqmtHd;$~WK3*qiNl&KQ|)%?M1|>B zfueD#M(-PZ0Z*>E%dyHZ9v9$vnv5OccwHwaa_phs^yOi1GH+b%UIP(|I42p8Bb{*x zc#HNKm$|z1%QS`)m46 zFrX^7h5IT;mM}WHKkeVGyb~H=LMJaO#*@uPi?HR<)_bP}RX>^3FRWdWow@;{ z6dX_mghFYQ*!jLkQ=taJM^}E?-sBCqu199m@fL^I*H#)Bl(|pp)5z5l25$cPrK;;F zY_K*a^MjD>MPTcPn>39YBV&hyOg4#+vai{A@rVF3M;H8TA_qf!g15bbl9b+B#rpcE z9S$wrr3tHHx;pkXWk>O5nSZ2jY;ZcAXN4>21;4w)-Q5|TCTAfvlR!#yYsda9g1O`n z9)6#|MNq|WPd~y9^s`DFfA@JG<@giJunK`Vm3&g61-hUOU+fCE7}pp9e#f93X!2?XMfttGEuBY+58zLyweZ90E(_rv7^a-niT<* zcV9mU+<88h7#y6yKiZX*lgj)>eosvqjpV#gQXv(AQrX*=s@FP`@Ozy8s;m1N!kp06 zA)|{0GbGIQfqa#LJKq1k&hX8f?l;@aZ&1%N;LZIr9=6q5F|o>nwJvgC%q|Q1;n5M@ zTL#*44wYM*Ty!{aZ5_T5{5A;Ju?(EsEq zkUj&kj45c)@06O+(H4KSNU9)lGB3y~5t82P<0vU6Jup}iH?aiMU+8C6Hz;Fu9N3;tD6NeSe3nz@CANaP>@0*mp3X@`M#fI0t}T7=kH1vLB$ z@N<01X3{S*?sU)F-}5Ly0}1~ttM7PRM_IiX%;35hM0-!dM^W8#{UBYqXN26ABgMml z{{q(B1H_J{1dBpFP$jr0t?XAmf+rJ@#gxp<;X8=RBTz?(PD$wp7Lxjr9Rq@Qe8`xj z%jqFZ`k*TP8w`_-i4g%+aU&z65{`TB3cN9?-rj7zD<7%xKuRC@gb>)uGg`Xc&rUCP zG*Ns^MEUc1u~D9!-|YDepfT4qO_Ugz+1RXQgbOTIAgn1tx`eQ4Ounz1=jG8OVGwtL za8Ad_xC~r7UW1bW!rDO#8nf-msA_a#A`JYkjJLM{NVLS@e<#l5SX|FNxG$?M5;|hu zD7xO=oZa(Y_c0EP+Er3j1$imRlvnO~KRhklhX9cjXxDOZ-WL(HnqcV7E(@#kmIy9{oZiN_8 z4jc%g>3JMM9X|#&?!nwPnAtQM8CMSEPnHVF6;u+I)xjj(w1~gEP5fH{flp6M7)?H; z{}^IsUO-F9mKa=$4Zzh0Wg`M7_EDvnSgidkGb^+7I!8gPKX1=({(#Ss*HrFK(MCvY zjU@y2JBDPU(|3_yE%KXH6jj<5p(cm7?63OJ+H88%H>x3AfrrOec}I? zgY(_p4X3HK>90TK@rT3u8k&jkWRf@iUXF~a$SXQUfZ8RX$t~4tlRmS&*DGoOd};q% zB2%!0ikjfO9#%#;cwwyH%ghlK<>BG!@5}-zhr>57Qdf%Zj0My|W<3168}PWutz0Km zn(}i=zK@ZklB0!HoH-^ZxeZO$BI1)}jK>z{G6ZMJS`bHvM+8brxKcbW^b!hOJe+UY z*=hb#wb6pq1V4mE?xVEGqr5zeuDM`h zD0x+tWNggV^QL|JF6?xIySx?|mnf{G!(?Q%QZ>zlguX8K(OzM~WwhcABV*f!<0l;* zU&M}nR|LhgXNP8ISD*}UwA{5|XzWbezeWA--NQg(YVJ2dF(bH9*f{&`?JvmoDA~$* zQ6qB<5J<360(SE!eKLJd{9XfY;JsL-HQ;;akJ=-D{*=%cdX#BoL>K(g*w_UG#+<@j zQ8+u&bK>`4s(24)lfCGEY7nE;0xIZg6Pw_u(vn>+T9_nEL>YE6T$wl;7+MOeo+~YW zOUWvkmo)4kNPli*V&XEj3rGeoTXL|>n7BB_PoJ71UJKu|+XkIsD}em|psY;Kz;IuT ztDN)Z1q|(LPdZyJPx8R2?+_wC@yAM-5|=;ZS+3gn@a_P0^p3cnrO2Ms%;`sRDfIpsC3)0 zE}c#~0TT4^F%sxF{c44{|AFl8ytA#d69l}r{e{-tf&wZKj)-jPBK2AWB9oJ40GI+5 zfS8z=h=hcmWS3b7Y9D zuDKTEn8&*_M5zOTj4;5V!NFn64vhgwc#ki`JB2khiR|p`K!NU03Ch9ou_FM55=KVU z?Ck9K^bbh>79DvcWn?me*F2a;4>k`G@S$K3Ay5ebE(+8)@6Yv#`v%Cmz=<#M?&DI zRSIan^}maITki=$wU04xA zg;gMbkOB3_oXCeEW`t^4FU#V-U;e-sQ=6_RiH!K9^s;qOURk`rd!g$i+P1_Y-W$HF z!2?2)@V!s3foKy7WIZYYg`HEmBG!bhgOR_B>%}a6o+vwsh-`Ivx4w^RK}E}$?F~-X zSEtF+6N_S;)E>)KB%54#;yYAB5J1|{Z1riR_(Zfy2Rk^uqu+@uDKZCwqmH48zh3jI z*7#UUdtBd%MTT;0*7T}oyR1x_9BaNZ{3c~1PL39zk4I>GjzC%2ASDW`fipZQ@|k#W z;FTJvP9VPt{6oG?yWBi_u&aTRGhr*l%*x7W`{xiyu|x`qydn}xjJk)M89ur; z7H&mWS%^Odpg~#CH%?c9e4bC%B-Jb2+Y&HJ>OB2G#=t;WHo)fI0`%8=LPd zL?O%#t|M&$|JA@G=F9?1DHds>z@rKM-2>3_g%}1ylsjKSGZ={cfYu{>?Qe$?5bIey zmncg7%u?@?0Mso#$PRC?sEag!bozWgxGb2R2`#p1I_N55N8@4Si|2c5w3~ zTvfLmt@+ndMcA4czgAzdKE3C-M zk2S`5bsO^y!cdlntk>Pv`iwnDBtP z#PvL~U{i&arvO>w?Mab;4&(pe60Ts=rli(|_wYyS8gvv)sg|D;zZns%YhYC(oLU|b zb7SMvTM%lne1R?TukZwZ-QiMN`SIkci6C4p3`GJeDYo#b*y_=3))I$Elp&DyE!pH| zq~+mDGMeCd_9ekyz_R_QB-ccacdHfTeCMT)io(>8^i$S--#?In+qujvLeowwWR0<@@hIzFtyZ%SMmG(u@IR1sU zop-^3!ie`LIONgJj#^h0|LjE1!BVV|`m5$IWT@Xmj)0b_Ut(~8z{dkhg=**@kXPSE zZS*T?-(NdDvmvS?i|{o)+7sQ!Yr$$Bg(HgO=W^tmoLlzQAZc^>KM(v(S9kka0d-+R6~_~x8M|Jy=g%a<+>lg-9KQ~<=;ImoVMEf-h#-~rU^1$udg z#cM4lWTx>2)0HLUInuC*3Vu>hN&wO&EmBO3z%q+kJ%kvVKd8gY;}V3A6O|#ja16@I zj*#9;;%h`?B}7FFuHa{l+&A`Mq4YD7=zb=zd%}Q)g7xg_CtPvY3QhSYq*e$RM+bw* zD?cq72dH>+`Rre{Cb-OVxI9QeA|paRD61*ORtgG^7%^RHU92*W!kxj(GDlT2K*XgO zOuEa(0roLU@Xn?d)a2bDy>y*^*==G(xKIMXan%gdbhg^qhV7{k8x^V~wtmTf4u0(s zSWx<`PC}M{wD^<1Y83tJ0+kHJncKF&jp9`M-a?$jqBvTfk_gSwA15++EB0dcQ z{QwZ=%HvL3(}E8xaO4?k9s1^x%%8%JE-Z}p6gWOtY>sR=wsjZ{l{V~t^CEd+ar@6+ z;V60Bo*DgR+u7yNC#<1KL^mP*YbjRj(|^v=lSj>*vFon1Jg*d#U&g_}e9q(o0p76K zbc1|20fQ59oc~ipTBs42=bCMhel?&{9F7J3=cUBal)69DnI(sO!f~VgfBpNEV4>XN zd=K+W9|CRro!;qJyrkoHhz%(6f`pls-1JB_?x6155P(JtO}di6`YnoCqTV`gDS%LPDbS$+bt$&c8?TzkkieVWO;7VMQbf zm6V223s9rAFSM~bY7k-!PuXI@SnsTas{ecJ|9#aUyNMil5wR@i3|hcfM!05BVg@sYJVE(C zXW+bY4e&Mc4jIq z_@t~JKqWa*AtR)~I$PxmlAAjz|A{)%dNXq_5lsuJ0_)&(mS3j$@!S_6BRN>Pblt*u72oEDA3t0)-idKBD)gbZEoH#Q~vy>qp{}M|5+v$ zaas#Q4znY_ppiOhpl=| z|0t(-T+8f@{uR)CA6i(iZYDN}Yq-0Jg*X00>|VZZIR946?q^p;j3^xxdL8fszcmI{ zBno}W)ObnLp~V7f`QP!B&raC*udQsEkfs5iu1E-b!oz&aqI5 zioWl5c*7p=Uu3rHmRk3*8cG^>eSh~e;6v&|KW-(>zJ!-jERM+w83WlqL$-PJA20N8 z=n087H^%rwhSqd{Aa?X_HV5e5PKHo*qZ6`%W`a%yjce*C+*iLI7QdY)Wo{kdO+A}) z4_ZlOY+4GXQ zC*rNN{Qc*TKN_u;keD$Bf}`l3rIV0|WclA-x__T;@X#ABnF91d%(Q10ZeLZ0ukl^6 zSWVy=9I`%CD+tcikJgRFF?G!0vVjMuJ5&8Rc6d>_~($%KZcW)dGlz8Z1q{ z1nT&<6*iler4##|J{OkDYbh|?2@i)UzGwXakIi-;1#pK6&n@B>LPKbae&OYA%$%Q+ zoWaM2r6mtY3-3;SqJg9$U2n~<^^c3ZN@@7-5lD^6S_ef^q@j?nv$OR~n^R@)qQ}|w zw-3T%3Yvuk3DJ09QXY;i#cPQELpe%p=p{^{wU;aYm%|EtmsNZq> zU$^LZ?xmy-W~d6*+1Y8i&Ag?e%49Kap@wjdD1!VNVazX4xvP#&zzt1obRpBRA%+^+ zAGz#Nzo8E8BT`{A+Z_Et>hmJt4Mp7lAH$jtxOrPjtum0W+p<@G@$gSnIJH@$jc&Yt zP0fHkdi^rSs3oO8pb%c>;-jDdce`oNR(!u68!#FmSdZq zv0Yw=5U@K_Sj73X(317(-Fn#A7T5iCc=SPX@$UA5!lv<1brC1(e2nDmXb$rl^Ua%$ zBu;CJBjd*Yo=mc%RhZA~cigd6=OU*&lg)Pqdkss=Tmz2>?&uwpWa0e$+y)e^Tn}DI zU`0|%1jmT@$6C619sb#4>>L%}n$f&i4&MoP*(n={8i3ZXl~MOF1pRFzM|y`tj*3M- z{22?$k3c$Qqr1c*&(`Ny+Ti_HD)M(nH@6>7l~n6b#xzGm>^ z;%+v;^h#YUeP*u8&c376L>AFnCeSzs zMmy4fV2yuYo@2;rhAY~xU#_5_5{B4nhb(lZnMh zQoI)DCd%&=abLy_Io+Z+FR}{U#ojdyka)9jxF2eSC1HTb_Qv`W9ZVMiDxbw^*zxxL%0zmHdCc$iAHM8B9XZ>qKM8n{CJS zhJ#RI`w(xyEY70eVZ&3;mDu;llYg+-Z?GGRHY+Lxxh1QADrHpEQs}>|_+ttB8oU%4 zN*N8xC-FBMf6S;i{qew<$HXn$Ysv-zZD`@4{t$|s;3c_<9Ep+ZuQ)Zx*HL5LXSZL| z=>Ra)7Di*Lj6)_nNA52t%XT|)uVHrloPe}86@GMVfccJf5H|Rp+0ToA+7m`fZ?UOX ze@jDezIoU^9-udG?{+@teV4f1cvUvSSzelF#*WRx{X*ZgI8OUYP}EM60O7pbsy=V* z`U@|AG$1{%`hBh0A_HT3PE|~yL$;ZvdPt##qxL#^vTTWS>nkR0EVB)eKIli=DlQobole z?AO)%lRQHsn*~(ZD@u(ztv|vT+%8MV*jPuT(gYnl-}@9kiG;0gFKKAza1vyfM< z){HH7)Cv962}fH?Bx){u7(o_c$pHf-sHv&x`L9|El&`ijoP;RsGR2bxU3Chscfw?hYSxhNu2c(|hUrejd*p29fDcZu~O7^>9AX=eQH- zp#b0KopyS=d3Vb(ciTTVH0F%s?eqHaW54UwyIbBLa?-_CTYclx#@5zh&CRcaL;Q&O zPkHVo{-9f7?fK4Gyh+MZY-^xdtr?uRkO)KkJn?RgEQgUfqj(UxX{%H2;5>R@u)>V; zkp0$5R|`G5&paouC4{+N$Vz6EecXe=>&EXG6GK5>2dc}##uk!CpR*@y_7=2411aQA zO-WFyT%`+^92M$0+T3x9Swfxbz7Y>E^E=K)a6&1t_8T>|y~T@21$uz0l8%8Pv+3g0 zA-YbNNq3hL!XaxWd4MS7Y5KV9{By z_Y6Av618u8cT2iUjJDB|*@NuQMU`FGeSO}Ss}*bfA@S-RnTxUT7O2|85HFoG0teO*>NRNVcP-L zU}Xjs>poDoobY&EqWhfdHgv}|9*bH}mV}CvUJ-!Hg6p%7+z6ZACI&N-OL72Li}fsY z2!ZIVak2ms#TJN6KtKQiK5=?(iEm!sM-ePbx8Z)=P1^DCl*bJ~@dka%@}fs*g+8tr-)OcfsxIOC%YORb^* zH9TYob);#9_E|mPyBLAjoezI#IO6mXb$uu8<0Ba7;SryhXaeteKC$Ecpr+R2XF`fG z_zBp=zIXMxdvJ7g^dmqBjPlYM$2TrhZwYxZ#oG_4<&Z)m$D~?dsi~fT5K61G`65Cg z3B)DA6b}0?_BC19LksX)47smasIOQlJ z$s?s#uOg&r+!ogcKnk{jWB&|$C6$2$4t<99tUgh zGW{Mu$!%_t2Og>WJ_lI6X@abj!;$2YULR_=JS4`X%Dj#yf$pq7RMNRtZQ+(`xdfJ{Ny?D=e=oUfU3f5WZzBjkAgcq37=t$?MDG$gfR33Vv!LL~mxW0A z)z#J9{6F1uNe}if>$u8fOD7pi)RMs2fyjXAWADfqWwPPd*OPcTxrM*2;7F^hc=)6Q zM&91OtE*y34407~Gl52>rDoB+Ye%qcds@r-PJnsA_M0hV|MoU980&N~AWaA9KkmJs zk>)yW{Q!I(0Wo2BYG+TdJw$jdwpBcrjyV&&vzVB$ghF9sz1Iy@^c!%Mk3NjWjt7pq zXW9hlVF!tT^C#tH)?!_W6WU=vURbE8qS11EjGmG9ZqwXi{|b%Usm4!(O0 z$H$8&t~r1He1KAm2`}~b_6`HLNQBo(DAbZeYCMy4nhCGW;b^@kMR3*>^3g%@F_6xJ zi^dvn=&2v|zA3z2U(XQ|BRG5E|1=;#4BR^-N~%E30s?X~iwwmA%7JTAZhU?b?>_+H zb{77_NL}9c3Kpl6Uxfzi%33;?+6sCri=FcPH3R+ZXZC;;>QA#M5Y=G8B8@^1+9F}i}CSst6d>4XM|Nd#X&z5 zDg}TR{+fz(ZB%vnK_?PPs66h8jIW)#Jah^Uo$9{vjhRz{s~m596nsFXuH!DE)^p}^ z!S80~BNe)Wc=TyROHif4$;grl@-|U$Ozu%+2_s5N;0*0sgNwVXxIIN&l>N@R%OX%8 zDz(`ot+1+%2Z!&yWzpCHi&vrJDF!J5!3sttb_0h2?B-lDM>|vMzerS7qs_uIgT>7}L zF>p8=7g|z*Zf(GLc&h$8;tumN`>Z9t*q19wd`nfAiQ62(7^eZf0%%+voFlJj{k4<4X(R(bY+fyPP6?Krw{hsWUJ$VPkE*>>sBC zjFl5WT#gTOfUp<#%vq8V5v}!39zhE7va>70eVboPw=SP|!((Ehz=Ky*T^*H~#QmiV z95^qb;nn8k|LMD9f_qiRNyWLVDeJ=YxmwaxF%;(=?G8r>Jaw1_QaJ?$ipT`J6={Os+6DR{}{aD=vA(;PV-HZ(l~en$>WE!@Z0C3>0mX@^ZO`$GSBNA_m#!Oh1Y9jA)wJwNr(H8Fq67n zYkLz+QDtc?Zt8}U#6WS`xY=dg)Xi>PCT?$EQ$(VGM$5rQ{*O(%T^pxh+_bqs2zQEv z?e@9k0}#!*?D9xz`@~EwlWu)qgIMKuvM;Y+!j+ddYynhgg}?0BsSYl4z1L%DSsD1$ zu*h1w6o9#l&M$2b9g$C*%83QN6DY;Q6%~lvAP$q8?d_tDI-4DN8b6a0*EURa+t!>M zuG`G&bTDND{lv*UKr-_)DWPM_j*SZa61*Sbl{MC6p0-~)$N!7 z?#v3yh9Jcq5=R$ZF%?`LLA!+24rQ%fqIrKj-Hsjl`S>**At<$w!P1XVnNO;!t>E&2 z;hVCRF7sMFS$mtCSrrutWCG`k0Kn+$2QMthCnUD*P5cLaN*<($Vav3Bw%=#Wm=Pz~ z;%{#`CO2~8eBDjI5D!E~)O?%(d;*@pP|yBL$t=zf9iE<%!HZ1vL>E8DzFrf_sKQ!_ zWlgI)=#GxKN25e)VfGG@_LLfYL{E=0z}0U-uzJ3a?- zKA}Z}ovRgzAmi-regj&I?JBHidJ469xn0+dUajF>Oq&R{Lf&%WP`TBYz+wF96t$OLS{(4F9nxt~BAKGQHDRSz?^&Pj&PvKhrUF>T?Q;7FaA%8SniY2NtmhI8*bg4v z3XT1-(z_b#qgq4-$;Jg}II-=#<aJf!3y?v^_i*O zMg5;>c+6>ZtXXD*_FMB7i-9ZG) zt&JO)cH!i$umXZOng_BeyX1*|Q4&-vj(*YE{eu(5!J~irK+9HytjS<0n3z;%EyIAQ zv`WjY4szvdo^(hSp_Et1g#t%km^HH$rW=Bu%tonL1CuQ~DMXfJW0b21Ee*NXyDb zb{hhHsp5_a_zTxMQsI#|eLPL1gnj}Itz3CV z9{rHSHwmhb7E*BKAe4kG@HPMe=jA=Cu$t-Z)0{#Hq`YvdBgNcOsVsGpB6|8%7Myl# zM77_IhYOhdjv7emm{kA8Tz<$YIc?!ZM<>l8LQ~0UV_MukelSYJH~$Nu9p-mytvij& z-f=-%f}(fm@`PC9_3hqCySOl$47ilutoChB)<@T3PKUvi-}8}nZk-HHP4%u;gyL2` zlgL!~*7{;#i+Y=T3 zf`yHY_xOPUHhv$i%)Zq5bM!)5RH-`_tA zrT9N5{H@?9IU3smYOgZ0R*n1hx>EQu!m6Gn{mcp)-!ihd2dq4J#PMsw5Xw!v+Lfg) zd$I}}BPU)a|D?+$`whQyK9+th$Z5mNW_g}`(JcUKHIglZkXJOw52Do!3Drx;yVHsN z{zF75OxGE)A!F9JT%aXCxX;8=+&9g@)J45Y#VU#;C3q=*R(Ipo;u?@w-|$_oFD3Cf zB`D`_f))f+R5+yD(80HO8i%(!u{t=$V-ZZFK%aT9<2@w-wX4>Wi2BxN>;ZqS3WpRU zcDCm#15*W$(1BdCdDnKitS2;+_9rOt`|MveO3Aal=SX}Vt&@N?{v@!~x1b9|XI$le z{z)nrqhNgI7GZFbM~i9o3{i3u(7dWtayaaI(kjB?BjaPgws>f&vtxoEd4sl%YLhqQ zvE7D+e0Jr>N=hp52RQI2Gc1LhQoFNf!9+_6w}PrCdKaiUE8@FF#37C+1F%k$)fC43 zyn^|o)LP7Jc(XycpePr1dwL%3(?=i$bC|1lQT&_U=AX5t+V88keCG1Uu6FFX7aRf( zFec{7WU<~`aP>rB=Ia3|bE~0<)sELL&$-cvaq*A=>RK**d^LAi$9N_VUGaQ_*$M%3 z`C@R9)n|r#NhLHHvNOl zft^EY{ngHr!L^LvR9)asEv+d>m4UOUP-SRwiyPn800VThT)9%l7iyP`o|`GWZmnTSTC)<<&2aydFS}Jwad%-*^Pe;E}p|0 ziAV0A+!mHT&yEVc1YBI)PYOxAw6!iX!Dc@J)l}rL)&wa`k~7#SA6Ux-E18|)Rj*ZA zT+`?*y&h)i<@6lTx*&Z3Eu_Se881;&0@=}e0~lTlWC~B8ssaG}yu9Cz<$lV|oxRzuzIxDj z=ApaRqK}2Kat* zUq-2k0*>3`fm_}s92~mRuh7wnG7~(G#Ml9^1=aHr7?^HMO6Z%k?BOaG?4n z0zGhgofUu9YXS<1fM9RG`bw~mp@?*K(j?Wu(Gj;2Ap>+&jvl-~gj;k$PE?G$&1%O( z?0FE9y4HBtu6s~D;1dtB)a+gECjPVO`^=*4?r?N&*&h#6M>+01dHGT1(~&VH_$S@) zQS)XNbO6#U#tT>VRXG8Z0I(V;*%nV){Y~YDEh{`9XW03I(0<>V$3yCIy;iqB4D0Rf zADW)-x^%K|+nCQMcH421O|kTWSLNpU8+6Koj%_2OOuoa3XuhLqDbpIU8HH~2FG8tt zfCd1#vIBs9^5*k4Dq7i!=x)Qvm;Q^NzkmQ-Q{#aWy0W=hSWseFrXC-kvI3Tqh~PNr zS;(ln-n1a*cTRe1rAou6gzFDo6(jXIG}GaAPeQ}1c`z|u5fmS<4!|5bM%c2{w|X4y z@yRMZk|2@b$VhplfPkUd2=x@{OjnRF=a_-LHTPlRh1&b*9?dn-)22@ zZE>BC1uVXQG^ap1OoK~kVr%+DRJm{yu{qk8lh@NU&mt^L`Fq$*X=O845m;Ysoq#%h zb8EOj^AR)Yvf~xdsW$}qw~K37#EC#v zbmV9RQsc%}X_%atb^R1owGpk9uVs_WX%m4#S`J-a%k=akWK5EUwE;dko@hN~ueab_ z3?Vq*1DZp^6g_|RBSMDA^`^}XqdrQLGg4ZIt;!4^$=_dKtiT!|gcMIfFea+6@42cr z8AGRr3f1b`D!1c0sG%G^igygi>v`rl)780cGg%V*$@Ir3(WM-&;s;--b%d$Q`vvF(0)l4zO?vcAi>s z!V!p6vgp_)(0lVWkDl*fqzoiQFKKA9_g$w!3(n!hlH9>?vnnvzNiWYl$Rqlo8k%Uf zXkR-BHFpoBjI=1E{SQY;8x6XUoeefv8h@`ae%;b$LfNYjp=fq#I3n2vtTDW+!dl@~$<94rNsV9WAEV326YfX!n~ua>*>PJn zeyUY;kbgyinqVPSSb6w^+;g#g>7eqO@=n9?F(2tT^9hM<#;Xie%U3T0Z}8BBv|)pT zENEzGfOn7whm>UoaFe`(LJ}raT1E!vnLkh%068ugfm~njWm*%~xzn+9Fn>@5=4Ke# zn+JCUD1)6Icw^Gh*+zY*t(qPWM6BqK=D9zhp{0F8XS?8Bd++G5cC=#g{Slab4a_#^ z=$~O>i0`}egBM11{|5ScBkfbI25G*OUs*K?fc??KKR!7#sGJ1-SRxcJdSEb=z}DXi zW*?#Ea14y+FLcoFnT9w9&W*8k)9-*kva`dADC`;bVo1mW=%6_so%Z$lt=|dD%K%jUKE%wOh*fQ;2;?Jae5GHAd zRoj}9`tvz?qy#o0Q8tjD<&O&8HDOI!LN99)uBpsmSy}hDcyA?GCjRr#ki`-4f3*NF z!fA5~=sK6|4DgX2`?VUfZg?hd$96z_-Y6->ykp~qjVwbljWThcUfU36fM_wi0crmH zLN*WwJUAfhHdw-O<=ge#Sytl<8((@IDUnWRFR(NMxVrF8d1W*ZQcW2lT%ZJ@hV=esKe>{t4>Xt*<>wtiXFw1mOe9?%$Sb3$-f?mcv@I(M za3yscb{Upk{1`H1?VcY*Q3>%+NT63zrp68hv>j+tapm*vj82@kwzd7KL?dJ6lCQ1TUTpDiZ2oYh8O;1l}6nsPao<0`v=1QZ0g9Y>D0EPJuozjO9wiWs#OkQ3m zKySTjW>-slO$|MDJVer(q8G3>AVZ(c?52N>S3veWG*UY2{&eY=>~|T+6(2!&+M-c6 zEi6h94vm37Lgh+}S>#yod&fVd=&F4NBooq@z6OrY=^J^=}n+jVz#wNa-Ewp8lV+8J5Mt5)l>mBz#@6Jt;e>d;-!POpQg zeiVh%(RF#n{Rj(t5hemShSym8IN`LPl%FQPb}cOVuy0kim@)?mfHOXMjFm7{V$s{ZTVT z2*lF4O3zw*XO4r#48S$YX2tHNB6Zp2b+UW+V_>a)#a^!@2jnL~xEA$_erZkLDHUW(G&&1yrw9fG&>n*^)k^qEsS%PoCa2 z>$#@f{uedK+2@BdRyo10dz|sfio%@R%MVy8tmq`d1Bb9{Gd+s59H^({&n=K)zEb`G zrNYi-r0vIy9EG4i-X3Fc;vP8p!N&SdZg4Nl%IRe=h26p-mr6)aR~w&mqW_;Qa{}VT z3?Ih;X_XABc|9*h?x(U0+00=q0yqn+<)b6YNL_~P(}h}4je$W3zn>y5m!+lopQa`I z!BN3(Fndq7HnxIY89$)=BIVs`t6j|{Z7vf7m=vxgN)y{ZJj>p5tQ9jA{9r2)7OA$G z%04crtUOWEfE2fc2aCAJQQt79Qf7GDqg@-HfQPh!zg7U(z_b!EQRcCh_)+nHv;h?0 zL~)7?WJ!nxM0S0)5AF8tGJ3>(ms;uh_8~@6gNES>l0bmMuH8^7314Tg=Z}s}az6tH ze5p)BjO6u|!+i+npTcw#+u-;M{HsdNgX0CJ;2Wl%ka}XXJ>;g9;&dXK1H%AAdSQ=o z6r&HAD(svOVV+$5`drQV*;jPTr>uMe12}<9#f7;^-IFN%!ml5k--l=Kz4lsj%{6Bxxu1db%x4@%4xGZg!o*g* zWD{dCnFo$XBqjsdu z4 zMW#_da`T8{h=O<~r0-*t7)4&%%0wNj^mi!&oUpFVm6Qn?qo9cJb$pJLaygN>`R^G@ zWZ5AFOx$x49E`$Jrq8urHyZ1m?-?)OxoB7kb=s*Km}K$f{g(fG0%M0^18vpJMNs-+bjQsgIEyk$fs*<405q&_+xZ*t$ zl>Q^r{BuZ6|89c%A9r_lF1i_`$ww)n7~ftEj!wYU9=J`f{H)^{U!>gCtAq)Lw>0G6 z;6Ck@-uW6D%~d!ONR%{L{0I)J zR^can|cOh9IZb&n7`uH5_xuRL$pRM^#V z|48gwj{R1B6qGQ1zvZKjJY$RAA=SZu|M~I%vx1psX=cnglqw;Y1I8b6OO(D$HH&@R zmK~2>V0`zDkzD`7Xxvpi?97XiuZjH8V(-l3$|ZeX!B`6QpIrGkv@st?N1`$Mq~-O* z)t_;!R#{1z@wa%eugW|dYl^xl!cM+^kvuNfzv3&8Jpb0K=aP|jj&EeK?O&PEkt}w< zaPvBqQ*BMVlWWd8TM~}On*B|mUc&5$uU_n@Y@c!Ch8IczTdlDXzizL%BI?_B=oN!e zbIJ3vi0$IVFT1xBmnrm6sNSdNb`q;|v%hx8vCFal$Jv43Y;a^$SDz?~Eh=33cFdg6 zWj9riMn*Mmjgm*C`_9vO%Byb!vqAdK5D@uK5YPA(u$BUD*S^|54O%uxp|nR#$f zi}FtRcl@x7&tLw`+6z85;eEk!QD9A#TZ6K0P+H?hNS~FS2Se!OZ2f}M(;4U4{TpxE zU;K*3v>9T9eSLS%EB=KKQ<2=p58g_>A5Ya}WIeBLhuA)1Bq?~#_KpO`Hm^)M3dUYz zY*KUm4Pp{{-*91tAr%6xJ~87%oqzb3{J=leFOx016q~ z{$*OR>ryf)CbYA+iS~8h--dER6-BUwWA4KhjP1aE6Su42t?HdOhL~@uB-+Duiw&RH z-CzxrBoGMRo85a~(<#Mt<(rh22$j^}?uxb!fBmfOob2yv>VNam@uS)`<^OHWgFpBg zoR_9CNd3{Ck#)WMbJTHFYx!ecPDq%rlP(J@!~1ypu8YOn8b#e~0wQQdpP@f}(?41w z#TzZ>9oo&G@t3P~#s;tdZ=1t!#M~z8elbWKkaFS@%J=A!3HhgTjZI3mwiE7XF4IOU zLQ~bms+YAlXcZ#Zf=&43HBWvUvTDzZqCrb zrImqPufe~V{r}!0j2*k`4)e-G>D8c%pU?$86eD9}4Ea8QT6H-CJLhN%Gz zm;^QJ!vrx%!bL?z5s{Ffl4^lQ|EM|^b;Tr8P+<*VlTGR^eMMnNSHRKwpqrUyKOCaN7s1h!S< zhqLkV@w8FxFn*~Zl+?Xn0fKrV&EF0VK(Np^Esd65`u<<6-rn9G%A`~?G9DhDL$B`c zZvEn6sE-a`mgcQMar41!#NE@?<2R}QqdP+PRZF?K?l$cVkwSC(i4F%}#I<%hy$eNr z;Z#cxx5i}#E=Y5~nO!J&p4JxZmuGHT>1T`nYOeN7LWo0qM*Qq-kO}JmSrtyw`h{Ii z!MiZ1rSdKY!HYllt$FP6?CX~eUnqyJXM3NCfK97dt}2U3kM=E!@TpxlQt}i~D0xcs zCw)aIPA+=5LJ+_Yynv*^@Y-$wG;FIh4}%(77#WmMH}YGx21G(wERO1kORo^c8gUM&yF~zXR~+`gSr#bc}BYE-o%KL!i|M!tiDzM;mzo6tD0b zIRhW1-^(M;Yt~Qw`0-Lqr=+v9v)Ic@ir*+A7@A42b~fTGZq{$dbOaSFX6Ov1rTIY7 z{OcD{W!~(j%T~kuV|s7^?Aq_&*tcK$c^lpdJP_~?bV*xKqp%_L3rU@-l0Zfks2MOu z1G8&T&UkoGz|duOHVh_uw3MYWUGkNHd0{<0G;p2x^r;Qgj}i|Pq%-5|@yc1XKM6-^p@VMLfgKLMin65@-%esdkgjK(I)OGDO z$)eDp^lrYYvdW#=uQy|Z27_MDa~W|wGR82^rqTT_b&>8*>#w7p*7j z5`f#+lk7q!{T4br7Q-Hdx=1sXDk7kw!gX)GB5XPm|HhnAg#kZqCC5IufIz7Dl!=Fh zkK&{|2?@JXq4$Q>5heyy_>FpH2;%&_bgU_3z0;4R@s>0g^zh~CGy)zJ)H=&Rr8s3L zI2mPs`^vZ05WU~Y7+h$Q(fKPu*#G4gm!@mBlT8rQX6`r~#Ctfi{kt5yec^`>7hrW2 z6|Zf&P-sNMkSmPfgZ1I7yp;=pHY^lJ+?LkY(|h%h7UX=O>l+MRQ$TKz423LC4x{Zo zdVxACL^1fY_wU~~&2EnUHn0Evn;uHStiJZ4A<`v>BYE$SnNOK7KoGGiOEBb)+aP&4 zxnTm!3LYtck%gBY#&#&w4LHI@BNvUQlpBlXVxdXzsB+YtA&CR`)K-;fyyiOR1~-sR)IPXMbplh?1M{PU^Cfj5gHY z+5!K*A`n^s$pjI0_5! zjSU?_0pTTiLiCzie1|hWGfH70@2=KhyJ0avbkS`5y}!zXH$?x?L5mChjj4Da+C4Kf zF6W6_1ndO*=Rs#OG2E>!_h$(;YsY$k0a@rm(8meQj|1$Q-0YkTu%<*^iu+%7G2sjs zhz6?P178K&1I7i}ATIJM)9jF}bJ&7dQfUjV{|VDWGc#rol{nms?i9YzR^)-IG0y1^ z1_eCM&>WxY+1XhY6bdGrw@Uoftg5zlWh(OsgC4@2a9P*O3r3RFdInyUKnV^K@1WiX zpQV~}qs<5v77?MWr1Yv;zarba6TB-FZTjaMBd6|Z6_?t z@{1cT$q-L%bp=|eb{f^lR`~Mb5_&S*dmU~Yl2(wjgZ?#HMbD945Kbd!!KXWX31QEz zhZX1v^tdQAM!JazNwI+UyXoQ+bB)@-*eSd+9)t+Z8aMWVW!kHr*!x4kq}%bQ*Pcj~ zlT}tx^=cA1(k}StzlpoBih=||pmh>9xNilI zcD>j1ogp{${$MTO5Ub|A@92=ZMPj<=BGRPKMK4VoCr5zw8u-g?m;<6z*Z30FRw4rD&Da+$LknG~=~%oP>TE*2t-K^kd+X&Ie^B(~yPP_Q{iTIV8<- z?%EAhHorZtqwNF+UwpjkW?ukx)>rzrlW(-$7a4(4nCvxwIjxWs1k(>!C7?4`S(3A~ zyxy>~`xLq^6`x;iCuza8u-!C!6>H*+G}{#);N7(Kq<99+=w8=3I?1vX$n&afL_N8u zAZia|nUw^NbDjg01 zDDJ^bE}OhDhMLSH%@DJAQhy1dBx6u$Nnx(meA~FN4H#tW;-YEo>g%2baAjW@O-xBK zv9lw93z!~kq=>nBcpfkjby&~t!^dt`RZg9ONuE`?}!^H?n~7 zS3L`oeLEh++my%qAF{C|(ZsW}i@e6;$4cs^nswA4t9Ek3h*jV86n4rn4&(p?!2B5uc!1=(wF(rll5b z#FwWdTkt8+L`UGEgaq1M)Qt^g#s5W4vEh%UrKS5KZ_7n)PS`Pr>fxfj87!j*vo4 zY*M=n3Y^9^OriXRh4*(~#rWnHu`cLv#JIZTq^LbRoUqeTV}CwzZdc$`kq8=Yhv#*L z`JJ7UGnk_XwY070xbjywIzG&7iCH_yiRTdnUHU6o0czSX z5#vF>yN7FYcAw-iLjqrJdTrjG@A}(Y9;><4(ypRNmw}|?SiQrPE56=X$#&?=#)~Qr zDj@_nRCZpgOI;J<*!|%(PoZ=6&15U%^Zz1>-+s5dHWs>_#K_!8$6NY2-_*{#nte+< zsLogXrxKp&;yUJstnGIYIYv%5)bQrPt_F3;vkRShnQYxlG9gm44znB}}^9$c( zY)MVET;JC+%8->q4g9=}!qnsz|D$V_MS)79NYh!wV7(c`t8J;(5-+pzcRSY3c> zh)=)WZa$~^^MneIij?j=DytE2U)}E?AMY}V5Pc*UcL=R;xv)m==w$!M2Ajs`yNVpMO7fIR`<`kpHMfH&$3JSTRcwAzwUIj?sk&GW|$bX_cDne^+p_|iyzT}GA^2_xj7v{kZ#E{ zAY0G4Paac2Zk4ND6R&f=tJBIWPvw1L3k;s7AVN@!*)GZV3_}bgKr5!uY3-R+)fyjY z_FhSO* z-k4fjXMw=^`((?;*FofB>%qT>GXNeF7>}{c?lO5@b=DM zShgct3dI<7iEriY8gpj>t_xJeMZ>Gl*9~lJ@F5eDm@|T;9g=xatg?g`eAp;{@&H)h zE>o{CfwKmhWY8w>;;-Grg>D;&8km6c7AP)<*SPNkXS1cyp!G3B)XC}OxhT+2W}Uqj zoJmPZr=a4I^x;9d{@ibW?mw?~;)Hw3Bd4yR)qg;hPTk zctwMLa_v!n{?EzDp7WlGBq=r2B=))YhG(~!^1LhFRX=7uybs@*Zr!>VtddhIraEdK z@O*S`ZJV{~=y^%cuBv-~v{-3fO2o5#<(g;awihIfo;)1yT#n5D9W4~(u)$iZM;>X*t?eu>EkNua)S`-t zir{#Hvw}jhh_sy@_x5}j9SciHPJXS>v#Q}~8ywT87G|0hR1G(b11Umk9pPr)*I11?g2iJsL#q4Za?h2l6SXc&CC{@^nED4n&A}JdYf} z1>@7Fzy|?%g&-j9=I#y}L#KXfQdemF@b6#QbY#rn{QH{>d}7+1Q6Hq^-N#7}RNCObaBX9xEzl0gOY|CZ^^K6xv=#Q8H6iqRaAq zfJC8pHx#i#;Bi?kY#jmtQWmv5;5=|!PgL7$oB#b8X_^KT3|X<^_cO9I!YsZ=gt+LX zu9|o%H@fAxOIZs>QJUSa(0;dMDmQ^jhi0CAH(*>a(dJbTs&*ZS$Q`KXfmg$^_jXL( z$?M!)RxlEB0hhSpGHYr?-#nJri~!C#XanM2TB!`zBlVmUP~bn|!SMx?DJv_;;)~(c zBh=KD{5q=f*4fPhx7`;IdR)OO0pPPQd--iQy8)s*JQ1=5HQK+Rba;cBv zulqOZfr|w4oE$Yf1POeW`i=g$rtvMHFOFP5h=A9^!nG?Oke74+3Qeu6#qjWOUBy@k z{>;KrUvrXeEJHHkbJh^c>OPNlr<+Lz#ZlB-U=%9ec(DU$x;anw6&F`QS4;7+5 zXx!tF@dg6T&dtpY;6wO?>j0yIj3Qixw;353$sR*)D}_RV5+mp%gN`m2XuaZ53i*w$ zfe{}*7duEC`z{`4n@>1x7?PJ6-kl(9#xH=mKS;gZr)HhP!o0?`DzA*VUa;A9^?n5`6^Ft9?3XC@OT9{aX5wGw;t~^`>S{U z-F{+^;`f8BKgu3_Er-v?253s-t1f%aU|v>wamX-F7Cs5N`+%pTmPt=7`a3lhZub@< zyCNQr%@;lF@D@R^vns~@W=b3Y%J1Gm4Qp2sgFGk%x&wl!`l5ptC8EnZw?f4~!tr3= zxAViN?I>cUh)=RUs>$~|5U|p$d?Qb7wXneg(v(q>4If0Fz9j&J)jB`oC@Sn1Reo!# z8EeHJ8TZdV_Wh#Qe?J(1hJ5ZVMl{FA>ya0sZ^Dk(`7JYhNab>EeWo%5*NUXG!;dN6 zu55PIG3%md z*ye|gcEYO+|Gv+rIY;S>AjUgwBv_wraf3$ec0lo?;2VLLPA|C$Us$PL;Uf2cMHTcg zKn3Ered6|Y4Xua^SbPb=RK11fBO3etbl1W2)HvqM|L;fs`#-jsA*6Rpo~)9^y*4N; z03k9~Y-fwDrBEa6T%L=S!9IP2QV;s^b{_w!HU_nm87{(D+ui%Do%c(IP0d8wtE^9b zUrq+3F~w%y{L=hsMX1k&;}*eHW&0ics4T7K;}umxoP%Rk3yod_W6hd3$;k?P8^f=< zj5j)~OLNg8rjsob{#osRp2lNb>z9KjN{LGj-P#>J^QHu9?d9wItgttAn39J~x4>`4 zwJ|I0)54@295%Zx%&5q?#^u2?a#V?Jzt3$`1x60>V}T1n((QhYG$*y%teu8!1(AL} z5--9jzfC)&Uhq#fC?1x6Ecb1+FU*W|=q_%R7CJUv$G?!kKzgHWhzd z^q1C`?o<<+HD}2?D zzKq&dh+aDJnm9PN7obpBb;9lAjpcI}Bg~6^^+H)tTdO&KP+NboO-Zw6$_)x~QLUuv z!)2YNrS*5KM*oDjzbCS3a6%H7l|@EpivP#xtLs<2?Fhvr8l9hM@&>_6xeYf-CZUOk`Za8rylZapxP?g@i{A&J?}d-}B6K+Wm5QmO!p? zxW$7*$wk)3-J>z6fo$WH0Lh557+p?3BMkvw%tBi()1R3CJD3R}CnRw`W{VD`zX+}# zigW$RX2RmKHS@6BIhz!ptA5r16*6iH7#{Z`=+NNtfyA%`Dejr%&(AFI)hDw7a-{JDLC8UuHStcxxQ~{`DL%hjp-O! zLN;d~MdDLCSH#@;H+WA9#L)LkDOq|_rx2*uPB|FeD;WldtJu1eC1=Pe&Eh{fk*7X+ z^YI-oj#lfm!*!CBK+qYtlNpJNBESn!Qn{=sN5K}xXzQ;3#8I?Twtk~=W5sB69@nN) zLRZn5k3}l~*jZBNHs%SkA5b9Q&-KK>9(#q~s%6%R%gW(u#qd&7 zQ_DrHNSinF%4;fAVl6BzYFuXDKp~VF`ewxcZ0SJjcN|MR9~X2?hK-9;1rvu>om5cG z7>jOxUF3syvuw_(Ln=S}ihoexbvRoawEfVBQ?Ep%$Ve#n!q<5`o$tS&hU&~rIfPK~PAJ99dC&Kc|tcPpp z3Jpf~7vTo~eLiI&FPz!d@QWWBt(8Vibz_N{3-Pw>?AtoKQd0|qb~h|rMn^kCKdWiZ zzyB}(@&~X93m@~7nA@OA2xAiEtxb3`uOI#jojZ7^c{0IAbW7}ZOmaAe+yilwdQ~N& zYSHmu{VKiv!`CTwP?q4y_e972-Pcf7*tF`~N1Zzk&OgV86+G9t;12|p)a1=&d8F>_ z&+hNO1#yJlMofXH6)8a0RT$|1F);Ei(s!{*1jcfSXcfq2xHq^NB2U^C4y;f_US+85iY243vEifH?LIj9^rWsH?m^@d$ zj^35)Yx=QUYsoZpca2Af+1Bjv)C&>1JUQI1`%_34c_s3(-`TTiya1;G?*zE3r9H%S zCO1;I4Pzle3z0{0%w%IMZynjba2m_w$h-8;NTa&&i1O*vx3OHiSm9q6$F@`$-6N#x z^K`{M&j&agez6hgqmoY)X!+k)3Jm{f6JD8E$efc63JDWj0KI}AzkWS5Ha6Z_u;(QG zSW}afn3!l!H3;&zPoF~Vu)vd&(z5`-eN^cD4h~I zrbmbsc%8YJgb({LkBFj;HoK!6EymSkwT<<8byYORznhcqrw>~ieoXX^$~D-vw3zfx zq;dU>ev#JwT9V;@gPT9DOjKsf{lsSey9O1XD_;8sWUF&J^U?IRl%4-<4`03#uiW6& z@<1Z{B45J&TNZ_9Hi3uD3jT8pKgWK`I6GfEbX~y1KR)$>@k1qm2_VVG_y9m--N_t> zrsr<|!b#i?xbeM(%3W1;z(lMLbcBn+eGvXC(fB}bZvzZ@*ZmwBk%3v+fNRv?N&6nG zQepi;S$GEV8V9|2!G+@_o|=Q1kP8S#gV#ip8!ZYokU!5Op;ywp{iE^1QZnI(+2SoCmA|Y9O%x1 zuc9#&IEY;=Vr7B8w*uM^hzLCsGxMP)n)^SOc+;G1uQD^LKU|paX4mv#)1B*}zFWM1 zxe!OxFYR%Gs>k6{rGkM0ArtuUR*+`ZS(&~_yCt5IxC(94k4p~z>Z-;qu9q>+;<_@q z^=&X}&Nx@fC>c0-f_~13a4XMp$zh`?4^mhtxPGj9@;{-id?k;63A&^kHRif2h%$*XfU-_$F3UE$ex9QF=A ziw--vRfTsB^MmM}^!>zyv+q_f1Fd#Muj?K!9zmhW`Ek~%oe=H52jQ<@15g0G?pyjz zU3JkS56i$g@wm%(JoCrWU5&zq)?#ORZv6v%r}dElsPy@Rd!|#o@mR8~nOK7FgPV4= zk&>#af8UbfM71mMVixz&$jHeL!B7a?%n(P8@^S&-WmH!uqGRGcQCDyK^;sE?3EbQh zp8Hx3TEL>2H;Ak9*W(1OYydh_(MHM1$Y6@Lp0^8a0b#xYZjf%Dc=L+2xp_M9C!Sl^ zyzkFZvj_7=djMR~0afKFc+r1{S6+DKaCFTHn&Q+Rf6%;7W~qZBA~2`m`#|@98y*N6 zo`{jaK^MSug-?zy7}9VFqq(y(=U6rKQo}fdZSi1@=u42$zDb0JsiB%yq`3 zZ0{2Mn-B|XHPsjSq)Pp9OrgD~f#^6U@3{1;I_+UqTNJ$fyE zG?(sQpBQm?(=uSi+tppo+-Pgccd_A0esyt7=75zQ4?%_3x;ks;M}BdUV`GZSE@2_9Hw{AU0p(GzY z!T`P9&Y~*;$H~M%$pV+5$jC?uPEwJT!-UMBz9o97yAfe^*5{?6%*vTK>efs|z@xjL z`lFTmP2)5tXqWA}A;>%8A$q=NeU9-GCIpL$-o9s1dkXz#I4_7J6)3%vfWtFl%R#d9 z?CL);rj~-;uBAwFrCsKkV)FTQPYEMeUTu%Vek$?s*4b$lb8>H&8QbMi;WiEmxus9N zrg)ga*-tC#5?i%hUR?u|yXS*!z)tf&B4lju={%LQU-l0&dS&M2kPZq?n37AKe0gHM z3erl%*d|2VGs{{{t>xuT##|iv;}0w!2vd%Gl~N0I%WpI4D&Nr7DvS8~Tm2DUcWAgt zJaHpNM(@yw{BAqn3x%(dQIUb-q^Wg6@@{slbXYu#TNp0RD|(M^7!_CK#t(FB=heC4 zP>P-{&TdWzHVjP{im$!0%W>laiy`f1$6^_=V{8V$gP+@&7n@pk`la$L`+8Q^US{97kC0HT zrx$Dnmf1sxQ{@O@p1%F>JxL0T+Y3D=03~X|D;@*yLJ;AX>ePWF9d4di;SVN`XnzoE zLCaA-1SbRae`u)3@t8bSQS5oJn*g9< zN$hnQj|NF_Ff=OcZUYRS{^7$*fagGEypG%Z%wuNeNQS87>(_@X{5jbjI_F1fz$XO2 z6Y+aYr#=l_Nbx=+%**KD@II79%viu>%w?;cu>w4ikgk#Vt{YrYk)ZMq)EZd>1B0FT zJHb9i8lai}7VHuM^lfWzM{L1AK>sE*6sNMX66R`p>ns1oW^$&}V!pjuHQ03g)!Qo# zapkfv#^#u~c1CG>RARM{J)HOMY824yRk1hHIkh&o>7wyQhys?FoD3UyzMlxkTqto<)Xz<+Vfn zGj|LCK|&7HNo={;2du^K3*_3beJ3bg&p~UZrRe=EIIOT61W9G>TM}*Wz!85Z<7hm+ zCr)->C+s!muD&HSAQcpd(p6_G|xtA9NbPR z@+?!A5155&(C+I|ZnGMR1B64(mw-FIh>hhgmU^irjul(e>2j5P1MiW{vd7aeW&l#c zOGtgfRLKVB(fh}*B0BEx*jH$R6s_sYU%*h%)TB7|a&r>`hbsOF7hmu&h8N!%Nhbw0 z!ojH*0RaI<=x$F2r-K$u`No3Di|M`LK;&jY--GDj;ON*3b_W=M-_0TV?+$wWOD(YH!`v@s@P!>Z zm=0JKaSA<2Z6xKfyVSX$DSwOfV`b`foTv@<+VGPxO*y!UO5H+!)*pLuyUPW^4fMN_965whtS=_HHhe56<_Ogoo_q0o%G< zAX8bNoPY|)(vq#ezaM%U`=^O~^3Z{D-RYJ3{OMEu%I?php~ukAQpn<|R6QjuYH-vN zKRsSZKLsW#FfyM#L!2t%YPl^N&1p4OZmJ8Vji6A#f5&?^&4d+hR|5@CZ;w%x_t!d{ z49v*b%K}`LGykkEmkB(5-WdCqKzpnzW|)xCZY^}_B<0-eW}RM9MQ-REHZj4K9k2OA z+(wEgSdF}2OzTU;KY5h)&{a10&4}Cy=iA&1c;D1o$t4%Hl25f=xal}f&&Cz~ZHy>* ztIx)i&tbftQx0;~phbp_4G|fp+!QM!Q-gtzwA#<>QYu^UPF`{L$znp~k%iu2l9$i% za*SF|%swg8?0OKXVHP8&n+xB@nuv_TBU){pHx+7l)PKq=@n=>TIT#ZF$&sTF_qSGb z*giP+s;0pnWgN%gpN?*~(j-$!Hl-J1$B5aElD%`%S$BdRA$}%+xD9}I8^HEb31epQ zkIcUg7$T2iSTENl^HCVz6PDNt>kUhGY8 zYH4};m%=7*8GaYVjZV0k^V55sZ00t#D!SkcFC=iG`zz0UsTi_A8G9um* zb&oox8%6DU95i%?{h>44AXCDES!otGx%-~QCdVbYAKV`uZ^Fkjl80K9Cw=R8X zfFc~TYt-F{Asx6VOxwg#gAo-t1YVp1=Mz4QAq}2n6v_x%HUboQAajEV{ekX=e$y2q z$>|ny>)$ZcJ_~)h+wqxP&_IJr;S<=U@$hW(+%3KFPi)ZCmN7G1Vs!2&oH2*)BGQbT z?@2k23+Ko2-6fxR(8rtXvU@|}$n$#~_j~E)=95ipZ@Sxj(dG<_^K*_Xg~GgEj;)l{ zMSAF%+2Nercf%4Ew0yHiVg>DwF85e!{BX$*AuaQ5I;ee0W~n81;VFR#Z{jk;Z7z&5 z<@9M4{vcZ`{V_Z;MMuI}r#JWuEz~&5?nRWR4sQhLZd=t;gk@FQ3f_H7DB|FXUQXep zsSuVqK&7c545HHTZ~8`tWuI1KqEL?&!H9R*bZs%Cu!I~w7_!aB53@!|=!MzP8o!#p zSYu#gj<#v~0I4aRU^rx}Zwd7Ol=BKzo-X=JxYeH_t{`fl1 zVksLwGU%iXV2q>v^PKMAUea!JfAj94M|F|iUF`WT1{NM)%*nm2oWW|QY@gEr&?yHGhHx$KzBY#4fnqerB@2aKA+Og=_pk0Iw7L3$^Mgo;FGl(12Y#|Olx!do|D^&*NB_D;Kmk%^`*a>Viy-GOguOkPtz-thfO@zZ3UT_JA@V}Ox6=f7s9=g-xG`Lrts{q z#6(lbKC`pfF%K}NYw6o}DV9g2t=J2#HZ|{9if?7b#SDEl<7PvS!C!Zu7&n z$GP<02KdHF%g7x4Vx;fBK`*Apxfk-iO>~d~c%FzeQF3x}2w&?$zYaQC;6M&Lb7V{I zzn9$&t*v@H?^Dsm<8(R)qynTak`u6RB)h>Teox+#vNM|XWDIQ#`q^h80%4u=+s1cvWTd5~ zbq-hlS-2+t;oDbP_xV4-#RB2m2HbR&G&I_w(vV{!x{pF# z{@^{rz7x=>x9W6!`LdFbP*tE`qoLtPogZVAlu59sJ*RJ4`0IfzG$Y>#!F`WnxT_EC zjknkRVl?~3F8)b>8NVcQgTvi+Ly3L*=* z(o(ychf6N5dvd^Kc&7YD0RIZ$P51R0q#}F+?&}TI7AFIf>Io5VRm;z2?4Yo)>Auw= zjYm=@Bv&_W4NZ)mK6&HaU@jg56(Js#(6_`KV=p}eESlOQ3cN5$?D>MMYM-!#(kZYQ z?d)O@k;c5#l(B_24AtPr*(6g%p$t|yU)d+asp31{VrpZ05`zB z!TuSs3gwqn5AVwct)XdIgFtHC**hAlF`;&QnDy0xH2@D)Xtu3dyDx4TD!URMW_HWh8{siaZbo;t{lP`z<6Ma7uMo$Ora2#`&|xC zMMeJ^ak}gy0%~e0$1dA!^Kf6I>o~7#+hQJF*}R*|gq1P-NLfUmX_t{qz&0(?w+jWd zAB)g{lWGcM`MS4FO%a3cB>%*PE4G_jzXCtQ2+Tz^JPLt(FJAn$K!hPED9R>4F-O~D zQ!<)W;~O~Xea_E6m$To&6lPRR1_I+%AgP%2Pyz19Uf!LiM+#+gj2eK5{sad6$W=7LtvQ!k6$NIb@!sFxnG4xYT z)}D@w>Kb7YH*Q#p~zvgq_@z{zG!KAd47C%!?yY3Q;>z3I=xo< z_8qAr1h(1MFyrljQSd*eXJ(FUI)IL2B0V3UeiyRgB|)y}D`vZ9m|exvy6QC}$}|f^TofdzQ^Z4@l6E zRRJJJ*2HAN71K|?4<0k;? zU-|jj@l9~kTp7$aftUry9q|nZExqjQN5!vDsAl8h>p>6GG+Iu>t{#hTP}iNWoaySH zCjzv@6GF^3Q+vFQAWZ=NDFZqL&4)}gJOMTNz8}yGtnm&#voP!|vZ)$Bf%2b0SXh{h zzLYhjmD)QIeu)U3$C-<7pFkM>=65w$z0fC$QL)H<-zu72O9lv+85tQ!rjJ~EFw1Ak zw;yK?wLJR8%#^$4Cpok{biOI4t5jz@S>np22ADT*-qcj)rEtD~k?F$)QOh+7an0u5 zZUyKo9S(Y*s?E%ZX*2G4fc?u08E&<%_=bd>$ri%dhLyEuC{3&NX)mCpazGNUdW-@n zdawF4R-D5Ah#O(>^YTR|#kIFxZ)9R6Z8Ep6mh{kMy-gRu^VRgq`+)2xYj_<%$C$=W@iPws>9#?re|fPo#wn-;)p}d z_inl|I52Ftz*(o+#N+b69a%WIO>=g=7dtEScuarXI@=aMkD6_b*se#vR$wvA{o=(7 zgrHmjx%$Cog!gwuUk3W>;^0OLI7;=&RwoeFw&S7wWmPdpoL4bVhWJecPDZn{HCFUfuG3*fX5PNE{l$Nr$ z=YjR91`sEdT09wm%%2kzNT)&?=2oV^y$+=mjz&CU;R}kPKmZCD44y9aW%0nq20cad zf!tI;$8*401~49|7H{%fQ5^4Ym_VfQQ^3RlP6{VZc23UWlA^Z^R4R2qjYb|@Dx5+O z8W$k+7Cbbh4ma@)1iL^ehCqw6u03RcNk#De2B)!RV80C)8DWDPBQo*@HLy>^Ets)Q zO#EJC)JZC6M-RMLldkx?K(IwVW30j+A%l)rI<8LEdEe6r&rb)>$gO(x^KSF}FNSL) zWy7ULEb6K{>7rSLlCQwp5s1Va_T!Er-N%!A!$2k%pwJuoLG!CWX=)c`9xG#w{PaLj&hBLMb3^c3N` zWy65{)A92sH2Gb+pNjA0{c=s%nGna{)XMBODUKIS{{KVbDR*Fh2E$z_cqLFi(*8r4 z8yOu1f76eE`F#6!ADWLq;0q*!JFM~5^m4SnK>zNL@p>ArxF zZ8cJ#y_uNMo^V~Dw5r)vU9Z{K27=pt@RkN#bT%VKI}HY8;of9t&xG>>S<+SmCbe$7 z@lO2tvRWNNDnv;2#VMzu5dNV>+li#guC9V`l;{~5VeHLT`?f&sG65ms!Nh)TYno)p zr(6;6ZkF9i1eQLsYa#tkaZiT9Tz&nc_%*G&?m{(U)V7IJy(Fs8ngY+QU36Vv&I=JF*UiL=e4J7WrrV2PcXlM`?j!@|LV z3F_aKtNuw4(DX&P48JR^utY_^d-+;YQRwh{L39ljNE+e^%;~Y6azno0s8}>Tn|DgOx7_>Fh`c-cSpan9FP!5jI<#3_F zJb>3X0H$1zma<@=@2}}IJQDb&zNZFCJD^u^w{^SYC3Hcv4d@!zv0lRzAf&N}9x%Z? z(;Ncv9mHc}pzi@rwt`mW(-=rjsz(Y0_`1~3pM#LV0oViLdJUs*9k7p(DTP=r0}Keo z<^!yNLG6#(UrS0#5;;HFR*$}6Sw5(<2jjvI6BfWP0?abo5X=Ios5b$6gXjX2POxib z;OEG%*&{<7a}ob(2ptz7iABC2wr#}<$m&W7egPp}aVj<8~ot=FA!NgcI)CMD z=a+=^bjPupltF=%A8_Ujz~ckk7n zu)p}Fh(bY*iKqkvh7XMY39n;IplN`MGSUf$0|gr%Cj2k?HkjT5)g}-9%$zi)oxMHK z`fo28)b50K=Hc<=c{uo~S52O>g9#_>Fnl~1e_v_<4c_fTXuCpYXruxE29}N!2fdFs z{cZqmBlrb8T!453u6%hby{A2zQs;%|xivMEK)D@vp6r5~qq&o#P7W~f`j=!Kr?(l7 z^5cNO3+(h=w|_deFx6O7Qv>lGCIcw&&^>a0`9XIJQe2(0t(XfC`(BuvLtBp zOt?D;ZMxOKb3o%2DC{FRc(*9O3cmsNTDyphQKo5ZU8^s`xc&Zx! z0omjHcrptVJ$%To2XmBt|Ly=`+^Q@@ny|HVzV!G*MIgZ|8faBzE_xOkne=oCY; z06!iO3g*9*P0YXxF@gY!>@JrYZBQ&lj!IhGSEnk`k+1pUqr(9I`i`7REP^Osq06Q| zGJpfi3MBqas8UBR*}%OI5tCEzo1bZzAspGp>3ZX0#MhdW)bRZ56j+8dlU1?yFz ziA?mQmzEMQcDhXz=%FL0@S5ljKB%pOorP2XW9m2zc#YA;nW56{Y$7L1c@39E`NTWa(4Vd_# z%e+KbOk>GM4tJZyWGy8M1!Encb2;HMi;K+VKq&_ESOx%m0vNgllOtQJ#XXS3gJ&ur zWcYQHiZFUIH#Y~!1M4&LgSJSzkC~ZvzuT^>et8DdnGXg*@KQutK>_c}moF!4*51&S zL2g)9r0znf*MRdwt`6flA&_s{!#shVy?vaBD>pn2g{a#*=n*1aKp09_*jpiruDwX`WDia}Zi&-Zh97`cgG)viukj+TP(CI#*#V8SbFX>}!wy2G># zunUbepktVtedl?pMJimH5H5)%k;yI_f$zvg4*E0?AX$aXp(}wOgfBp~4L%COIt+Q_ zYE?xe%L5rQn2LvY8K>vwhJp-)Kh900mIaI{E5$1w#-@^;yH;hH34#h>{{{yKv+q9z zd@GkWvhDJCZ1LaOg_wd&Pfm&kE9KtRtzSO>)?OZj%us-kh-Q4PBj!R}ebs9{1YxkE z`e-?)x3U(b6vp5#fuGZE(sO^4`h1fb#bXrDm_w|y9H1?I1O}4(rD~b=w#V8yo4Ocpo%UALO4O zaX{xDM&O?%1CJ5dTtrwfCl6g&z)`-4uWlc5%JYzotzWycAJe#~<19b{bS>R@22gSd zXuQtW*z0Yb)kZ#C~8FbB43g>G@#$`*ykd?t-HhBSp}Z z;P|`!`x?haI?z}d0zW7GTA#E!mgzK)IJ>eCXgXzgx zo4r#jt;*j*>y_K#+gL;!>@2el0aSV;Uzx{_x82!SHd14>yL)v?D7Ii=ZW<^{*G z%}O^cj5+(p^ZbeV6BS%L^|RDA_hRcqI^h@eO*AYHNF%z>|8U>; zzW?~fVBB$WY|cLW*-xys=3H}v;}Z|Gg`Nb#U!S|5Ce(hyq0(R#e*8mMTfq>tJs4le z6jd}iZoEC;qu;o{JGs|al0<2}@4VLsbw{xDWYa7FkNaxC!-RHz(-jZ z43Iu!)5wiaOm{DM-9?t*5jNO0CbV`3h5q>75rNTS83T)Lr^1>kdwOkZE0O=i4#ry z-oxXKwzj~Wd#|;TvB@Xh#dn_KGy($605*ZfCy%?LH#AJw9z4p_`?9*4gJ4))?K(O= z-R&3l5$rKnk1%S$vkLkXlOJ)*v!dpjs+?egoG(SesBj4*-*ZHi<>bbXR3pGWPs+bnWqQ+b>I< zcHHcsmZPBPnHm__vNH}_$<5A=6%Hx-gtNK3y?z+;MnO?Q_JWG18;%$k*x_B4YwS0$ z2H~UzD7*{!8ay7w!QZ|avF~N4;DW3(7mOHm`6UPgf1Lv>oE0h_I#6XVC@5LcTU%=J zMYONDyhE7b<1OIzhj;tzsnj}1!m<{Y?k}pA+u?-Ox32Z8<8Ni(?k#uKUmEn<*S4cum9vmM z!IHr7gM@i3E|{)g^oAiJ)U+e)b}e4)J>ex^LPfL8BO5&nvf3PU6ILBuG4Er?%NK^)b z^06LhRc;V=x;Rz%3N~+3yl4S9`_+}Z8^4W}3jOp0k{syGakI5^K*Pj@rw-lR+R82~ z%eW2zzIMc`0CqYk>Rz#5aWHOPIe7GsrbghvmVg|?KxM?@!Glr&Xb6AkB?l#ng#_I# zkJfI=CO(P>&!?ODr;HU|<#2M28_aUAX$9bRQ)cazW?81)AI~^@d132|7dtJomdN6@ z(YUyAd4#Q`dXQUN7ENr60l<13&=(B~sK@K^CAW)Y@Gm0=8*67oiCnc|h|bPlM^d`E zzIvYt*z!(hLwtJwSkLm<-#%${Rjty4Yx$h&3N0-O@qcs$IpfV@ND_-7Z(-qKE|YH@ zm=YEi=WHf}W?;`-gh$^)UOcPx=_~>(=~oEmfL3p*w&yc(3a?v3R~B$lDh8h%{}mdS z_a?H>F)ZT*M3%6rsji|jYomUSa6k~DxxcLT1-Z`2VP~}6&m;UB3k&tebEHyTZ^jAF ziz9Ho@GN7acHd~yy^<|eOaErH!euy{8e;PDOyH-N*jkQ56qVYgwP}`; zAMf{Gp#=elG~=1y{lE}a+>{1rhiCrG`NF8_`gKQ!<~^5;xVj|8KS#Xj~moh9&HN`=p6lk5_mo{0n z!0&UF0mnNr%`9yMfff?zTEKa=elqB| z)91juxwo^iIYuoOMY|ClEffS4W3W&x&L>%nk42D?z0fXi(a2QJO>e3HqbpJ8bP#?Z z)n6F_bd}_B0P79N=~0Bz|D!$fBJ3fi{3YadX6beCRA{+I)7Ip?IO&P-dqA`3Q*F5w zJtyOCYe^#@tN&A-12171~90qa zN6<3SkcKNZwnhO_Lve8$psN9B`X)WmB3Z;j_E3(=GJ}QGX`q8RZdV)wDq*bV|y zra-4Kip0`jIj}-HnHwX4K78Ao1A-+9YH(nr^Kx_1MPoq!GikPXq)~6Fg+b_(y*(0< zZ2N6YQn5+rp2#Aj>)-v-smxJ8Gg13aAJpu6o9e67s}1PhCd8&S7D`eng5Y#)QK$`U zb4gRPvwX}cGR0~&fk-FoUo$cWK97uqVlx)k!!_22(q!cI5kiQfUJpEn<;j}ZOh^Mt zR?q2{VxoX2@{t;vdOTRqW{|LXo9wbyvIqAm#;Wwb;v`t2kSXVqgi)U*=pKoQTg#~^ zAOHo+4kSnQdM}i2(IBOR68(N?&|o@8K)s`hLRBk9=O}?t3p9x>PhOrSH59wI!VXS6 z?9(6gL4Rh3x6Xd3dN4z^dsiLCGj8|owuygzq{v`sJ1&)X;#b?}=sA9-ll5Vf>r*p5rQolj82dAF6I?PotiLQze;0khpdemttXnK^VD2Xt;*w-coYYi zC!hkNk5^Tg`7aj$-tmn zkyZ`AIFpwbi~!_3X7}+x>5Ox18cn+?5(X{i=!wbF?;tQpUl0V6B8ft^VWOxT#)8s= zzZ{lNuKuHZTQ^hc5xwT>kbAxQAD<-nw~y2Xv}D5ouppNWL7dc^D9I!O1?ESC)NH{B zE{&0Nia-~XgGgB!8BZ0)j7B+M^D(}!{|HE`EOdUOi~UhD5Bya689vcSViignPnEOo z-)tuUcn7E<7XLX_J%xFPQ-RjM%uipy8eqVsp&tkZ+tDO?rIu`IqYD){em1nFSd&1- z)A3jd6%&5`8kb4qs|`H@UE`?$*it?qf#hioK#bPck^6%F`#1Kg7cfsj(#osX>qb z5=Y+*)`f-T?IiKQI7md}$9|qRB`U>T{%w*#(-u*O z{XAWcpayXpHaI}+PGla??v0_5tsCh0&l4T-d{3zqY3k*pOZQ2f@Vwe?1A8UW_q?7+ z5_HYFZ{i3Y4vf{sxK5>yfk~B;C>3Ei`a-smNh=K1cqib*PGuBO{v7P?V%;dBrmeC( zY=ILlv-$Fq;uK>c!`{inbEPc(`KQIru<&z?$*qI6qMXBn+~uB{t?phD(|a|=+w_A7xL|UI#^g} z0+j^JRJ}2OcmAtYHsGOU1K?U5QG#1Z8qNKyQ<|%_G9MXLRm=rqOsNE&Saq`ZljtBA zs=EQs=&f*NP^XTimNVLdT7FXIh*eThe$_duUUN#wX*1JhUAqW8sWxWs&za_2c7}+# zKlK7FFboN=HF{lQ2NIQ(xb1E4xyww=_fSCQ!pOL5bUN5bxnHM-Z^3Q9|9Asx@J9P{ zZ*<&^g-s9ym6cP@eSokdy5AMVbVZ z-H3%(63XgG4*b6Lnca^Ao#?;bId3KpU)smHHS-AX&u%&Xs*Io*03isdd%SlzX-eu! zVC4o(ZgAoe!1BuXyH&aEzNd?@_Wvx19U07@_>~j7;(k5tyt-OPaCoKOa!MGL!R@|4 zVVv9Dy<1k6@8T;EBjMCnO;;%mbbQKM&UwKe2hyP?9v+EQ^F~hFeJhu}h42xwcQAHb zrsNFZf>QV#2KGe{TSg?LtG-H+_wD>fTZ3mziMriAGPYT{3cxBDz(WC9v>Ss3!>j$+ zZr4f9fgkjNzr{cTqX~TOjRod!*gOn1xE*ZyY!yJ&*MKv{eS5l^+lmwTXxJGyCUWaD z$O%;8M)v|cC?l&iGnc(-zEz*pbVn2v+o%vV{$UU(Utd23W&gg7xoF3OF>{;f6gV8A zCz3>X2+sSb=UTYv-I0 z0n2N>KOa`Y0iIeqg*Qn!gh=gTnI2rx6J6A`_Uo6@TKdg(j8T#ZMgJdbzN2+FZlB7a zS=;8&^mHAUgOW^>dj#N6{Oj+{`ffdsx2{xJ`1ECuiA{sObAyKkX`ZFC74qMlW-^@Pn-y4#8qHn})*t*Q%Puw@5hpemdg3SVaqg1o>S@ zD>T4inL&p;W7i6=(M2`(qj}PW0Y$prz#kGL)BKwV)o+-l;3(m*J*Ud5pk3<>UOHR1 zQ`zS^SvbBybZZv&{Qe(pd@b~GK)`$35}HkZ`wCR#Z!i6xs)1h5jksM9FE&j=LM4E# zmFW8Hn3G+7Y7(S#;xDRLd7_e)%1MR*==}xi+h1d2*&sZG&x4pFPA8lE2D7xFPeet7 zzybv56O>_vxY%lcZzsFe_p?@6LMkz4g<7f^Ls+kO-t(U&&1t}#TmLE{#W5w`vR~Kpa@GmFz;#VXG@N7JMxDeR}#WC|6;H zqLHq20=f-n3IYBh2s@fKgQ7WPC`sjvu3ykVC7IC%P1q{b_+#5Zrx;*#KA09U^pQcG zBE+)6!x^blV?`PeX)dst;QC8c#zZ+I?gIKXnOFc=%TUS>|ur*^&>%iT+l0ychA;5VTpxia>hGBpe)K1LU!@#)>V^^R`pKG9!OcK6`~3I>h&~DL%K@`pD^5yD zAifS5JMYLr{su&sc^eym+B*(jF7_sHn*3Aa0z|ukm<>Qh|1s=I;{syf>sQW9Y(834 zxZyy6DRuC`FMUC0`3N#ydTRMPZv5*S?1YR+>x-tzhMw+e+&}`bmjd#1#SAovf@GPW z60H(Yf#fkL7@?hFg05J6>B5gdB)DDgi!)QH=@tj-7n<=hdLS+@lC8#wyL|M-q>4Z^ z2IWZrNbSMe`MT%uGQ4+df4`mQlC(mjpz^q30y2F4F`xWdhbQPz zVlcseLs)?M$pDB|=IAkt?7da36jhdmHn`nsRh&fVkj^N#L^9bgg=#0r&*hBcccfOlXsHCTEQtBA^=X60{J zovTnFU0welDa*tCCK_KEg5W3ydZV@Ym*>uz=8}-D?K?xY7eN4#%o#8nxd#fpa5ISLEU>0>nkevHrxZh@e{JAu=mq!a|vdiVkK;ThHVVgCwd z{zo>`{}Ar52EMJ|#6AUmKBW2kmu|o5ZOH1*s@wcd-AS-Ks|RPlTc8ntVChyM@=R#Z z9iF<3MQSa4W=;BIhR)dS$LRc>t(*o1DLm!ok{v=j_^VRG_pCjq;?2LiB6YB&e~H7FxC}Y!GdA1Z7P*5$}Ks z4r1T&Y_F~oYpMvpn5!vYSYgypr4!Fsm?}wDF{v{xf;Nf3?Jd5jcSc@)#vp zObOO=MSrvyRu8gTSMZ@({w!+B{A%?@R0e^u_8&B!3qKA&+fy|WWK5D^cD-^Cbeiow zL_f{^@g~$Qm4?jy>w0!bjFG$D5hbFiJX>6c#+x90e9)Uwx)YJYjjpc3?e?8Fc2p)8 z8j;2wXQ?vRmfdZMjS%@ygYx?afm#YTUejYNSD zvO+%uFvgS2**5I6u4o0cNq$f6XVwBXocvb^Pi(PZn$;g?bamO@;@qF@m%j%uzslO> zmkreYO?{YU9dVVOw&-UeQ3_g#zLI2U|2f|t1`aPDWJlM+A?nQ*1n%_<1FY-HQVdd1 zGzZ=zbH}x>U!F+jF4GngSgLTwd=f%CS8c&jNeNKwjXs*yy?rFiRkuayJAht0*DcrL zDMURnSSJblN)?(dz8%_Y0IU)>?PEcJVs6DPK|yLdcD%!qH2AZcos#}du+86J=P$xV zew0lMvl56;a)e2RC@QG5hpuM_`upIP)gg2;o7oDyZ{zw*IUu@L*Z(9yFgco}|1|zB z9ew`y@v48)ti$xO-q#_Nt{cXH}&5wzxchfqYJpb%eS?i>R6x3}@Y|Hz> zR+Z*Tlxk4DE+Tn;mRqYfTF!UL$4GtsuU~Ul*2@nFLbxd;A(Y|p78?Kpm3{xxvS71& zZY8EH+a@&Hdz6R#2z;UhHFllju^Hb48nmk}R58Xl$WVM6?9W+*8bEln&fxkQ`G?R{ zTS%!c;7Yicb^gy)<+7;S@j|d>Z>m#38v_IFH;iS=Q_c0Mg$A5f* za*jTKkVODIBE0UlRssacay!L19N<(DayC7O(a0>O!q@TX?Y5glh4Avg{LYu|JW`4L%e9-7|WXMd^Wl z>iA+UVa1h~e*~_c?%)2#v*XtOJ+a#ZUV^pjyf8OT7c(08a`8g^r;CA)5n{9+N_wTw zbjiU~cqwW8Kh$r&g6kn~bv#sQw!Nvh|7%J8!VdpgKlZ z=~tFJQ7iB@RjOlOI9jxbM83R>?8kwmG!MH2_~ zTjdpdK@4f6^YV+*Vu!@1Tig*r8FY5Ozr%P^-<6wLv)Ib#42iSUH=W3~nW$)D*zo=a z71SEAGa94oQ4>yn&Cq-`K8f=Pde}|K?C`4c{{O)NPNi3G;;FF4$fI_>Afi2^ux8&^ z6A`7kpQLe(L`9{jz8VpP4~3R(;NUenL_;K>Ao}pm%E@#1qA&?w;PWkb#f^9!W%Lg* zty22l@T|7CbjH|y$tS&I98kSS*S%ZEG!q!>Gi<$|(EFxvoeD@|e?g-muo)WVsH~dL zflBhu$m(;d<8SV~pFDF~G?;%EkHf#f4}Jt)MiSop!&^uzQ{Nh?FNvJU51OF1>wOlX zU|GdRkc4t;>2_97o=v5xGpJVtYYJY|>G;6q0z2RH&T6t~7N=SX2KQUFFAaVaryl@` zHYE3k$JMpwCE8_Dl^y|@UQT(Lj4@rWFawDe?2=FP7$Nnx-FS=N}p6^r*+vC|P;Tx6|f8CL_PhPOFeO;gR)bw#|C@{V54F^vRGoro%wmgKZPARas0f#Y(crh=UV%JarHEcjFg(FOSj!7p(XS{Wo;^&x91#iVIs)VwGjsrQxfM z*jIddbe0NviJ5IF*&sJzSYwQUTso(){8Ff2iZXWFQq{R-ve7(LH@ryx-ffvMAX$Uw|yV1E8B^j{R-woN|GPR}$ z3*T(*ZRKU3;beZ#_{99~ENW=ZZD;;=Z)2ZwcJDP7hCV)TjNLQFI1zantHmb2N`1=9 z)#iH%a57KWY=qw5aEzI)R-S7A@4Wj*hI*+ifZebMZRKMI*t3gW@VY5YNB^kFFf0ql zkF5T5*6y@&R^ZJG8(!DQTJj5*H3Fg&K-w=>5=2V!ID;lq4M716vASvz{Z^Tc*^zGi z!3^}PuW&$?xkWga2h<<0M7s=LQYEna)vXEgQ_~bYhPN-Z75IZ}A^5z6Q6)6SDFw@bAjf zfT{D?hYWGdY>B`|9xuI1}16Nm2)>Vo{ zK|=&xIvnT;vjKcG3Gj3qtWfS`;7urFrtw^R5>_FBzYdn;GkDyfxZj6@gPBvEv?8J{!1V@p+r6jf}}Nx$vO z-mSZluE*LWrt7<9j0IjCfI09W=L|YS%4bP@&)q_e!rUmFuh~!@S*c(be2Zd`QX9m( zaEa=HCj4yuKPx?Tr_eYal#5!cUQSqL=2V95V>^p6@@q{Mcg3FR%hj4E^Pwo8SbZ?q0Bts}T;L+ZKQdjYUIkr(LR&= zE&C!KZ@wLHhk!sm@^brwB%p&p+=)oG<|pXWe~d+Um%7oOqcy{CTP84U$rttarzXNE zdO%9NG?1W)yiH|@A1P`2VV|zn8V&Wj5Iy++*~`QExzP|t6~6VvI4)qruF$+2) zfjEce;n`2-(dj4nNq4}nz7TE(*pUNiZdxjDziGt3ic62zi275q62;^lz1X@CY(K0z zlZ_H7S4#X|_D{EO5P#C|zB8kv0?qZTJ}i8_iXXr)a>zmqhVJF}%%tk0cr951?4y1u z>Ss5K?$C3e$}~=e; zvFo65HKaIe-?(d*EL+CZrEO^<|95D4X~Xqpc)lGkgVXsFTBakYv^jruX1pGE@O1I9 zi8D4?vkfn!wqW|qrw2>P^PHu@6b<_%(@!9SXX=YV-uFJF^SN9pGi=?ai9XzFy}@&t zAYIOAJx9XWwf&oN4__O2A?`63y>LYt&)9&b|NOrJ&Y|CFI=gzDQIZlxSnCEv!Xa;? zjQp1Bt1${BG|=YjZ*+*{di~n_e`Y89dvp1f#X(}KuV{5UvkX5!3NgZ0QF`hw$^g+I9 z+QkYNn>yCN(?$&XeUa=nmQ1C6ue{ET!?SSpZUdDuC&ZAU2)=<}hJ_69B)Y`rdhM07 ziAvSUYg}Go`|U%3v5g;FsKQoY!O`mDW^JN#1L{qN!k z#AKI$!|*IY0t)#M11V|N*YKqLc^Zh%V@=1>FKI2qSjoWRVDL%+j^FI}MAnv0ah)Nz zGvPbew;Zl-g)H?4EN$KCa~ zOjq(~+^&RR(LgAVPgqkwg0T}qWo{!eqG&q#XzY_2^UH+~`F(v&pU$`S7J)`p)t43+?99HykqK8V|67L%y8`Axub=sDLFv-W_=Dm< zs-liG!?F9qepMhg;H z<3t35lw0K&tBzHxq7*}k{ITQ;qajuF)zX^%5kbbp}zVP|Z)@WWPQJl5OHJ(CMCU@LS>-;gHoriB4OanT1R& zikKtu6Up`Ehqoq+>B+TUmLxip3?DUIza>`mOGuloVJ)x_03pG$E2huE-bL9e#dH#9 zJ=B_SlC^>@VcKy6w&)$Ujy%<9Nfw(g-GRa1WJyM^$|#p%YDE=}Hz+|SSOeAdT35kk zXhip=jesrXG$I`LswilDlW|0pX4mMWqpc52{CDrZB!3ZV{N4@EsgpcTTJ;>m<~;}9 zlk3JLX2-|DRv#3c75bkva5}{ZN-k?FBaUQn`n$u#QYX`wgDt5sqUevdG(qQAtNYdJ z;Q6eIEETStfx;^s(H>?rh@^q}1U{}b+53;M3eBNM5rpx*efsrT=)fYoV~xEAT0)c| zT??zbAd)WB7?Jb2#2R?pIZ9TRJlu>a*zGGGp2$zqWcV)^fEgakK)*N~%_Y!L&?6>z zmt@;~*Pc>abt{f}G}uGapC3JYa637ucrlVb>>Ulq3CA(ss`PC@i}~LSnOuGIvxAu# z?Jmpro!6a?n{TW{ZK_1>>1(0>Z(`qDQ?zZH1~Yta4AZafn9OXg-*e@hoO3LQ8mL2a zP^mqsB!8X05xTjmszp>|1gPmSziaYzjtTVF*2as6vcrOI&-(c61k2Pu!cu9jxCHm7E&m(8OmjvA{fKlhuCvkBBT}FU>hto?2 zB0drBKdt-kzD@qjw7%oj05Y^#uYy}5e`P_PmGu2&EC?vcoA8|G!BIZyjHu3{ze!l& z=0C=!GU|TJEVG9aHEG+K6f3S{&%+C#)B+_e;Gui;9Au$&ZaSp*>v(F1S5A$={|h6UO%l7qZs6&F6m}A7otdEP5V#1~Aets0-%eMJ-7nwhDRn zR>a{&m>aB#UtPEQL`w$D=1V8_Ox`ojS6%u~+Lcz+r<(Ehn1UgLue6V(Vf!|a^c2l* z+dqzAq{KaBGhhD3c9%F3Hn3&4JWT3kVow#~drSVX%R65~94dEBtCtU*U5 zXyoL~>C5$X zr-&g7bwp9l_rJ^IPXN3EIHiEg0D#%4y^RZZpIV9-T0gzd9rVfuw9kAqJC>Mdc&wck zq8{>r!Be$XLa+8`xUpe-#kTxSL^8c{m5mL-(F-mx<1p#}#bR||;Rs|SrQS($KD(3~ zYmp0)^lBAW-+!14a^itP!8_;|@qj~4#zzqK%wmVPh23KOSWRK!Aq4oy3C16SFu~Z= zwn&)s3Rn-Z@A+aEQ4*!V0{Wq{O)l(vG`}s@?5sHubcH&_BE@0kxddCJ0|}Q7vrWbi z90jj6sf=DD)(YnvSwJbu%Bgz>KI?&{xX|K*L1wPEbX%Wf$j8^He$z1!K`MY1K0O#b zsbhLpO%KSQAQ}0wJ*tajYCBu${1k9HffO4c{p_A&IcW=(P4s9E#WD;CFZ10H3p6+H zmhp8(PPR5e{!ie4xKOtoenAi%T%2fUv=RFSv<)q^Jf@#Fy;=r>U2o#}W3yu+($p|M z74eMtk5n8m^*=F|08dV^%A1N~HYi-rh7 zVv8YzKglDpUxGp}J)fPqVufFhK~b!x-B)ql)tzSrxV3BsRfsg+h_dFk&Tr7$_U{c- zR1|? zM|%6I>Y%^2hNRI<&<6`et-=chfK?6G!l3IKG%i({NE^DI3E~cB2-}q6#TGggSA>?# zx-Qw9X45_gVp5q`T_`5fDWFM~NYM9D(ZmCD?N>;`l0!YW+u^fdBW52fDoXKhRZG=e zfI2Dsp<~NQtA~&B-{9{d1k^%TeT_&L^CjrnRl`@KD~d37Cc%}wTm|Vw-dNEA6~j&B z%B<0ev0vBDa#$EhA&?*{VC@|t9sWoXIv!f5exg?A!~x(@iHBmuj+qU=i2i#zMDJ!u zY-qb7tpD9rY8gRB=^Vdzlw&QXq%;vSl)(|UN4D`v8$D8dJLV}pH+tv0_%-PW(+u%R zSpRt~Uu~%+sNUlUb4^vVnuX)=~ya1=@k+X<;DWM=x_p98yVX8 z{Cs$~MSIH1Lo*FOysHXO6)+{^r)s?MD$KsUBX8TQg`=a3M~_W8-HtTA{&!n@ctIV? zuA0U+a_Mf|^(`WJBwT%|}It;~iX*upyL!G@3UE#5c@)0leTaJMi5>uHc!mTw< zU9<3dz1>fukhAdxpL|V8E#LW%@XP#sfHzmfWtS%ot$H{$mxY9{w; zlO%`pLH=DSb+@S_Q z-*Bg^>Um}=Bdi9SC3nKN?Wfm7*vRk+#;&w_#^s_+6}75Ct*XOdB_-( z6MEG%m!o@RG+bq$<1B&EDk#jsOoj}1y9(5-U1T{ya;6xq=gM8bHY~Stv^ox(_nWp_ zTC0wR%}(?)y3WbGm#2HgS8J8yv0;L`N>6>1p(+f8&CvK*s^aXXabMssB> zS1vVG=#xzFaaOIz^U*ODwVBjb`7XZYY`G-{$R%(HfvvhZf|{b3vNEW4+DjLr%#Q-V zq<=d_@B{5%n${nIE&FfN-Bu?PWpHikcVKS(I-nHCk~CE8yF{lU$B7;)=jQp!c-m{D z2$jiVQRKif!uhPyYU`)aO;d7SjI=pmYG_rtAqd^9+19P)aRA;*jn%B5q)hE+U^bp} z{tmD_yjR!qu-n3Mhu7+>nT$2G*oiHT;HlHZKZGOzD$R?L!2S>ZzaA%Oh}G*X$-03#0cQajYU zx$K1l0+?*N1r=5(eAahz`AndZ|_&M2GsLoosj?St%s_Tlg<{H#5q5h?<=Vi z%IrAhKgdy`JoNzQ6>QQ6M_BGiCDc$-#jXLB$y}aIcoIM#%gJ$;%t?a`+Rl`ouGZ~) z!}^zfEVlUbi_Z612)HPOKp|2(v2N%6gWBE@{$jSi#G3Py!@Fh@~xNx@D zl1V@q)ODp(I5LKabSa3RV;$a19d^JV%PfLN^<@g0%>m|B>%bD{Y65XF?}rh7#_g?; zK^2dhb7#pEiL4L2(>J%+>xrw+G3w8Bi@c&{X9;>#;mM=bRRty1hz#%hl)=QRui#`j zf!*Ko#^#UcpEp@f={Bd8o~u|~SoIoIJ8tB|(*gLZ)?|Q=VTyZy5__Paru8d-|BjHe zG0lIO)k)j%ds#wQOx*2t{$l$9(O*>E8?KMP-XyYHbGkGJ++X#((!M1brV(@{b7>S- z3e$eSc-h0nG<&NulrC8_fYdhiYi#af&GX1@POH&@?#2S+yE&m{sb*-Wz9}Ga0|t_` zLH&>N&wMtmL7+hibe%9H3q>z4e<;wS@gslG-m+1VBP#Q0DuY$`zi;wcT_&9`hHn}`}9N* zhEAq*I@2eBJv{a0t4=oM-@sLs+1Rx4M>0obWJ>LF`RuUe&Hr`>^4qHiR!!_L@FzMo zEM;Cvg%JHs-my=ueFFs2L5WAO$XRz7%_p0Lb-p$%(1vp_ACWC==(n&laz!NHShdWjM zn`*@RkPOqx&H(e_Bq1xWq1xQ0mtuTV~C(~XlF?ODC%N7Tes~*af1d&|!@n-b6n$N;UybkeJ1aQi^}+qSka>WjIJ6p}o|7M^>`|OAF|#Q!e^J)@BOnwcD{&p z;Jiv0o1bW3YVZb;m&2+aV$8%>6&#BuP)Ii|}%$iw~ft`3}WT}A=Fgm_;8}3fS zk*yhNHZSjY=UttMH{3Vx4+gE;RZevzUXZsfwCRW_G^=4zsmB}h)U3sK)yq1_+4vOD zOj6k|TMm5O<+e|)n}rs?4U@qVt#I`xfA>Pn+YYiDvxEBkQ93fo)Aoj>BcicTLN@odznA33__dIRef)(_bmn+_s3R8q^ave& zbox((4gRT1wY&~b$cd>OY+OlBSB}PK@x?p|V?^{d0{-rSv0HgYdy7uPOmeK@{{Hu- z%H$q48k9@#KHE{Xql?hO!a0wf5+DxKviJ`i_eNQHQNh~<_M~w>_?9%DD~w8sAuM9z zcuaYM!Wwl*)(;!2ZBe!%dGjKGqd# zF%T4O7_&5DxIsI!41n=IBGt>pmuig^I;WWPdL~ah;u^?Ft>oVyX=5GX2bUU3Pki}i zj3k-_&((zeRwADS#7SIKK*Yr7#SM4f-dJ^#ficTaR$F7oc5_&&dCo_&rx{=CS~K^8bSeZ1LY+(=y-)tg#gx~)6m58Qf>KV6gz*{Fxoclp{h@9jHKuF zyPXXDmkauDvZu9Ah#XJlBx5``DQco~^(v_s3V9hFgul%nP)uutr>tL*`;vIiba3*_ z5B-fUL}uWHPg(Q4b!&#p1bElg+J|4R>2Y+;yswA zC}4dZ4d3x~+saLdc@-o=(N5-bg*y0#X~Wm&+7Z5{xwyK~die_UddxX*^e+7I+}__> z*)pwNKC6@Gh)gyPS8uUG;d5#3h@7pGJI|0HQv1xJr5tRxSJKNJv^9{8e`&^V* zkyzo~{l5n5ws&qYNllh+-HmkC&SIbd#Y7*w=N6Nas&Lci5CB^M~F3l?y80bI@ zWJm9=VdB6|`=6!ZRoA?sDwAg}o!csrAp69;a4dsd%P`M;*=5>3U!7cLPV?oHr2rb@ zKMM!1oAQyLA|FLZ9PasE;Wm4FdmW4&uz9*rRngM}rJumgmmsDGBs^ID&V#7FR^6k| zZJV^od1I5a4+2wbYitN#x(!kVwZ&azF_f$5S!A#?MnWJ1U0DyhTUY1zH*Xhj7F_!V z``Rq3p-D;a`P21`i~>74{FQJ)7c@<)5=Fi+g2jAr$=K^>ftY`i=crl%USr^MVapy0@SwH(U2OP?i?Q#L6ndj=Q71Q~WBM zNgx8Y^}Rk9y=dasyz7FjsVbLvblR%lO)V%GC=AFV2N3f+1*X`{0S9#4BehgF{-{N= zM*!td*3_s_!!c1+(RzuNf`$y#Kp;$930YZ>A&`a!PkgcrJr`pn@D4$1EJfzH5c8MG zoy?rNL~I&MpbNLM;JM#rQ#JNyA+&TyNmcowJ*000^pjv?gh)b^JZ`T0hlVoC$$?#& z6);TzT`z7F!)lGE55)7Nc;y|=56P*P=SGVQ+X@9Tj63Oa^C z8r<-g_#{BJt7GYzPFaWu#e4pkwiOq{MCzfT62RjG)A#2cVW>zb&GIQGTFlZJa8Ca= zqhjic3AB&D#p8gs8D<$oV44#2K^j?jbz_Z{mvi{<-xs;LRI5g&xqoKoVd9F}N4d^8f=}Z#iCVm|wF*-Xbr(+|#?f6@WS%RDy zD8jRtyYK;tgY*R-F>&!E9!F$?Exdq5b@imFVih2Aj1|hdj0xiY|3}qZM^)K%ZM-T9 zqJ#?4B`uxOpdcVpA}!r)x;vz$1(XhH3F%G&=~6dHcT0nGoyq%t-*?U#;~4}0@WH*; zz3#c@n)8~!3%2lE_3!!ldp!m2w)M#tlOc_Vby9G*lxRAe&v*J^Wq^nRom_9`E{dO6Um~C1zdYMh__jyb zZ&Xx7jU`Zl60sTxE+>**GV&(<`HwNqB;Iz`gR`X?lZ4~&#t;rFfcE0QcfFboA!bd? zv2CioQ{CJDVJ5O@{f2{s6AlJyUZR#y+Z+X6C{AcQ0Rai60ONhAWLwYN7*_tAl|4pC zp7y1nK4>G)zI)9ERtJ#dxBZ?#zohA*x0&aEBZWhQbCf0$$gRn#Bzrx0YzEVA#skd} zg!UsbA_h-bthM)gKOvfS>u%4HKFUpi+A3NQ6QF)spx&ETlo;;+l8b1mc134VG3}D1 z`C?O1Mn-1G+53vS>8#Ov;mT_>>3qHULLdjR*Q;|8$m)5*cz)dM-9zrVR6xS#mi&gk z@9JWl=j6aTb#?+=ajUFnf)TAF%_q#4i{2M}5IyHccX420Tr9VR<&p)vd9HTTz+hxk zz-iCV`wBbSxg~}PueSn2LMnQ6e_XrH-3@RMORQIatzEs=L(l)MG#k2%cIGKoIygJq zukJ)4wvlF)46$u-hetW8*Z!rA8CbFUxdvk5EOKeoxU z4;_SXa6pap$98qc7S5GaS1aHU_>b42rq0x*fIF1-WK-zeoZdNACdP>b&>^_0E9Qs^ z)9Z8Nv{)POJ-3$@fL$^>tKii5j{&e|f>*6hpq_&x3kLiXHO66P^4o0*$+6n?$1vvz zE3iDaqHSp5kv!#oSn595#5f>ZKP91|L07yf^q#4gMA$94>JUpw*=R+&9=JstqbK)% znc~VKM@tus=1X}$VrW{;?Amd>B8esw?>a{$c+r|Pu}mosPr7^2v9n8xz&wTJUOUnHB@37Revlq5r znd1ZtgiS&Mf<-!!D{iQ8=0%3)AS@;h;lTJkBl1euBCKdj8;l4-GU(w__pv2i4=80+ zR5vBgZ$gA=dMJVu69bcaQ6K1dZC3BHZhM78Qj_YbM;!I))1N<1Rofm3!NKU-qji3D zb#CJVb-YgJ)X~(omma+p7r!S)23JQ3#KeTX_K%Ur9#k75Hu0x{_Ia+4&>sWMb9R=k z)FrvQn}V5n6L3L$=YL3{g9S%EAc3gxLQ4Tp1OxMx9t*Ym$$8d4*c{$Xj03A$aCfmh z+1e@_o^x)hE14`3aLEg+yD?qSeT?ph?EKH>E_RgXD|4Q!d#Mwk#xTv}x0(<}20mLY-Y7(m-ZjJ@jW7>Clt_ z^J1BZZu_TX@+BtQH{qWH+z*VF0|7Mh>e-2x#svRpsrgaTu`JDhdNtcIN7PzKE=;CB zTzjuq^rY=M`S`!T+UApKyCFr{|M`WSEjMAU(XrcL2CY7&`+p|Dgeh@D1As$Ab~#V3 zpJ=lnJ5p}9bPvKqds(*hacJ|gJr;?ejI=akq{!iYRJ0&at$BPt+nN#u{Pkv{^7(5R%e7_c3&&~~A z-YiuMOS?E%BPgoDE;H7+@>M>Mn8HdCjLK#`8m$PfjD9@a*_Oa6U* zS67bawq{XbMLYx~^(K#}mX@SH7IufK&Q8$~2y+vyX$EMG=94g%1f+F3rTiJxOgu`)X|phXNi`eD9u-GPhBPF4QQGekp1Mfx=pcoVz!+ zq`??nYf30NUx@Q!@{`fuzr=UtZoBTp9Nn}zf5{Bv+<>rjJ43x276H~Fk{a&#awbG% z#R3PZQ&v2LYikZphr02o>gt5xEi&)GTk`I)pcTGfTN^I^W7^12z35leC~?;pd0OGL zwEYzgwR)$=IS9M_stBN-z-<8ieLjLIStRapZ=Awg%^y*jbYI~Z8(HYM&GEYt1N*G2 zzyAqYWF~_DPQV?_W&|AFZT_u#v~+X{BGy(6_wjU{mYA0N3yh~H8LnTCKgAmD8$I_R zy7DT!2cFm$6({-U!)N2QUuI%dVWPqfp)L=4 zObApoTZJc`@tS~p-#=AHQK z7rR_Ce}CdIqb@^zQ?vKS1kT>KD;E$Z+S>!Jp)_r5wtQL^bylPy89VEpsae(5@2NWF zJ|?Av=jXl5R2WF+>-{h@xExL#ub`56D(Ek!2ZpKlmj`JW8DkuZ<6sDz9(Nu#RDmjs zWHh85afcCd{QPw;J3j6}w*j~tBJBWjAqaqITg@haXS`_ro)8Uk@6Vzf&Dmt_{$_MH zwJ_^2Q-~MH4OxFyX!L_zw>#rb{CD%SXdY6aI_2nn{2bK++3)Ai4c@ zl#!Dwv+R^sJssq6@hi^tv0lpXR9q3+$Tkw`2;5Cle@a~xq2|GPmD7*VvAC&!By zdO*r^d7>qQe6Fm_gjZmCd0pS~pn!2GxM2cAND{g#xQ}Vbmpc77HZ~S#?2s>GX$;ln zjAvgzdPULu2v3@0Hj!aWH_^0CLhzx<^dw)Qb}eOXVaE0NJ9j8l)?ii{Ob-iyUKS;J zi8=LitYWv0vBQ+8o7O!CLEA~u3lB57*8Vux`;=cYl5Bx^<{VGt`10tZq3b)91@M5i z19u}xzs^+i5Onf?E0&v zsV3=+aKm*{Z@7o(`sAvpb}VyP%a|#}v^V4PG;6@`G$KO969-!wQmN=MyAjg7x3|74 z-x{V3%*!p)%Fc5&l&Z5xdu5s*!FBLus<*hQW3zhlgB3wnwBR@ObS9ngHwvQBSwqd) z(tq4-34`yWypn?^=QSby++~sl@+4r6OWbN$Bb#Kwub%Qi5f2D(nIzMm@VenhPo54 zEs74uo|=%3_MhVb@#{7(z#p!GtLfR%V`He!K0 z+_2m6mJ1=B3!~GwHP}56y z{?3kplGG1Y(4Uc)atS#J_jHTYYLm+djXdUK(j<^vR<$R_KuU}H=;AnNo@^;736S}# zkRGuGq zip=%uT((vm*;l^b4|qQnFj8D^B_!aqF~6khL?z9Ub~=P&eI`-MBpntWzCXmNQ94%m zX^=@wfeCKd)I>|cGs0p}0Z|DJu;Kj?MwqP{wtmpzzBX7_r1J)H;db1J zBw}MxZ}^B`y-5j`t$P7b=iqmIL!d}~2$-;^vmKU&?Hd(e!*#SL0 zcCe2T=G#zR%ev(qx7Aj#Ia1IFvv%rrE)NGSr#co5AIyBX>M46t)(1s6AR?!%Xpatv zVS6RFhvNMl|MS9D?@3)cr-1|^SVR2Kw{1;-lYe-42M!bXLf{qU>RJmbKDZ`)vrGX{ z%ibQ#G0L!7Esq_jwM#&=4;*jj$9;V-hyg&>}B|lvvFxOSU z+6=~NW2>-$=Oh;?F!N)9rR<6`+EkhI>amTD{zj4>*tD4+Hf-Kxv3YM^|=Fj0@QCkwALNZf)iL z_ua8sXQ}a;zSH(t=j<%SH%n3_mA(u(3HMi$fS9k!b=EM>A1xy99f?37hEj{@cz8_4 zD{In;4ULUCyr)SZ4d@z#UrcSRUA7IsdUb7+uHULNgC3gSGvvC1(-+i_i0X>i4J4j2 zsxmG7OF%7rMhscy?|DkF8t8#*5mXUqf0=&5Tp!80wGkJgFyaVDpM8FTsiip`AUddn z)t5LE_%c74q|Hb`vlR@Vl(gPPHh!TX4;5c-x2y-k3I+zo{DDinqH?!As|A&aNTko@ z%|GANrFxZ8mV1vr>k-sw$zfd6Z~eM;KNjZ6oXi{~;9Qrh=Q73e^YUtqRd3`VW(Vjg z3Uu*2nLDGy&t7Stuf#D^fJ-^>Jb%1=W^GWHOu}4;t?icbk=i8#gFMX4?YT{VE z4vLR=n=d$vx7^62qQ8Dk?40plMX}QGT+Q zcEP-m=@l4snwMDr;V@Q0d-{+I+iS~vx6k0J?dwbsdLG9UUC5HzF;S*|viBPrzo(Y! z?z;i{J6Wa>yY{Bn)bo>eD|E+wahGAFgCZ>kB43W zeIa4SRBK@YF0gC{5@Qw3tW;hiIf&@Er2Evwd)(Y9oyO&y&Q{!IO#79^S5$JjF`&12 zoZI{PUX3{ALvWpfk|F~mBM4prXchH2A)zN@b7O;&D3qhVEE<_RxN}`~kMvm4`C3$z z_^e4UE%G_V`*b=^Nt1pCs5i{+)__q(MYS^lWCnO;e zjWq(hkhe&nL^ee|?0GFscz9Bx{tb|$53zy}{4-(wX4z$Bw{npufoJS^^3Q%tAIV{d zVPj!J(TQCa_?$rO&dev$j!d%Q6;*X+4NT|EEX3VbqP3t*2Rn+h7dOipi%rJ3dwor)Z$BaBy-yO)=vbnL_sd_(9ES5<7R`ayOuj zzRb5RN`j35Xg;7vfItQ2tti#K;*zR7R&n>?55~r*P$`693}WDC^_XyU{xEzHhm>N% zYcnp-Snn>>$VI-O$L-KpC{bg=z`&9v4Z4A|fa9?d5juhfbjS9LkH*!|Imj`S7l`g3 z6n*kK_1DH(%O>JeF_fFldk_`14eI@b?$6_{QcC^V2^ z3(wqbqw>19X9wg`_#|Ai(!&)geB~HNGzqirN93ZhG8=}XkOu)k%bUL>1cbYsY`iZO^j_o_ zN{A}&YX07M@SXfF8`omnrW2?AUy1gT!Oou_BMS@r7BQcoLp7pg%n}!G5&3Hj&Ewww(fPNme_Nz>1RW6R@R5Uuu#lBCFN|WFv9h2 zIgA5raK~134Ez5+hOPmF@#h7btn7%Boeyb~$s0;*G3k2bZEaLg+x?gn(|>$?du>e{ zo?Qqf6c*3}qC5Y#@>2eyH=?0|t!0o%Yq^;Mu4!NzVHF3?iLR7UUn;+$#Pv!^xb105 z8&@1Xz_^p3EQ|v?fs05scGre4SC}Va=p-$5%V?CRb#(MtsrCUjP}N>hhm6EnsKjr{ zcCzK9vHrK{$)&mQy-Z5)j#~k0nob;Gf0l#y?`)lSxa)$cUk8!y%QLN?A zx57M7C(OM~PSCldW&i@b6L5Gn^r#!0Mk?!~;l1$I(;8yIn z@%KXg1G|33zwDY|N?yIj0enY`_4GYHWuhI<5^qR{iy@VkS+xgZI$;mVRn;btarq-llk4=2O>KYl({2Y=imP3C7$fPpopx5i^Yn`| z+6Ko=gN25wqZ?Iu&&Ljuioh@IjJbGa=hwo&156vR#A(oD-f*5+!D48F#BrIc2NE6*Poa4yxl@+=Yp7yo$3`9+|H9{6lc!XolA!w zQ<5YlCr%KNvr~>UCNOfoIBQ;CGxvviC{0*`7k3eVweC-+zz+>yWYnP=vl-B?L!zo*LN`h*7P z2Cs%QWu>))tifdl5gv<1w}HrsGaidpaQb>hvbF9(-Fof*g7^0XMM;ADVKy^MI)D9 z-Zyb>&$US_4_E(tRf+)YzL*y_3Sp^#h^5fgnWuE!}Deogr>7nmTx z_?U<3YYD2wMZ6OIehKaIQ`}ChO{25&$WoJ$`+1?ywMO6tOb1O5Jlm{-Z`Z$$hTHrn zH`wj)RXF22(qZlQ8Hlv3*(p9Nh&JVF^$`;ID&XpGLUu+DDG&Wq=1#VMh9iG>*}aaZ zip$N{V-_FB?gV*XI!}6DnV4D&OTtF7m_mmQgf1&ra8MADEurX5}qv|Z&c~WljRo#&^W+4+7@AF%A zp|o+Z#oSo;(rM!T4^(N1h3mIF9Uz0C>a9f-wWCMXYnOk!YhuZUx5)Izp>}P>i@9xq z(01RE{eg(#N?PBZ{|4z#n#g6(9E9ARz!-cG3k~xoukkk4nwo{RCWQW~Ab_WpRm%}9 zNw;&9BG2rezVMG&0XG2IiM`t{a$(-XnD4Sx-TdXt*V|enPm2qe4UUAnAj`vsnY)8i z;^(iQ9f$h2b(Q&}LwP5I+8OkhOqzAkg~^&*uCsa$T2uff$!7dhy8U@GuN1mHMdsk$ zMM)RO9eynh`sqm8o{{Cdpi+RTEL*bu*>Yp-;Fft&eU!Y{VI(}Y`1_pdOn8riN0n?y z^-Eusbz?osL3~kTx^4os`y!WUtH0cpiHXzp2(jUfFZ3&1UtE0rmfQLv&O+w7w~qVm z++JCQZj7ED#u)C5+`9CnS0H4Ze1`oh&OwStcE|+-tX`y9g~jDn1t92`=WrjQM}+yy;RN@}NnGaC0p@z}?JNr|8RxBP%; zvy%&R1B)jx_4$a>G(E6U?m4*=`Jo6Mqn;(O7lh;lzBB%$ngL(I(n$vAyy->ZGl8;< zj~_buM&9&>J5RQmewPGod`Nriu2}KS*~6T2D`fx1_$hTKc4Ht@uc7hMPOZqLh*H1C z2R#BNwX*2TR2Do|9Y1}A)%CUS`lV&2V+0@f7T|OpE82dC3-`)@)U8-i;r&E@^l6p+Y_{U0AmfB^R2X6S@ht;2A zKP&3E{~J%?|Ie=d-$4cnk1twCqTU?6FKU)GocH2MHq*?;RRfDxm|}c{TVuTDqtJ(3 zaGl-Ae0=b@xaH)!HTCD%Gg`iHdsPf_+45?>q|)P`7~te%mykDM)Y|-3Gey>#{s4l6 zLHUGwtre#_pDVn)2m$Zdj?;G#AJj{&sNglO;7)7bCcY)ZQEs>6#_8&~Vt*WncJ~e) zNdG8%@73kMRpLi!WBd9wRbEb;Oe5`-8^v>~aLk5k_hoW^?fveqzU2Tq@9v#9A|V+R zQXDZj3n2E4Wzy;0;Jg1K+GVa=XP$VYZQPi*I{x9)vy5`f5)1ElPm#*z!;HX;g&8NFG8!yWU78W)}zWuKFr8 zM>ZB)h$-Tbk9V?&hr@)a@aoI!AOG_L%=yW|b=Gx%MstP(N4@l|pgWC$7^#0pV97Y? z*WlI1_U|mQhFor|N(l3bEB~t`lT=;ULDh){>I$$}REX<}44~*)@c3F*Xpn#I56E#z zq!O2MyME;psYi+V`sEY9Dh&~Ljq)q}5JX>tZ$mIxi{?j|QAQwIb-Wi84!5Q|APIcJ z2;AKa`g`67mD{BY0dx=^K(jX&?MORfo{@(R@u1xd)ZPF*56SqlP86cw!iDiKFR?E~ z|H;Eh$c@=$fS6J;w(-0StFj0&N{YqB?V}fue60xoWHggrspf`E(K-=~L{xy?$RD(VBI(atkh>LJo5J8hCp5mTvw`LstqMFm%GpX!3pw(&Ccxrv4T> z@kNTUMur+3tBk$(;yNF(Fgc$zy|(9F+ccwk7zrhU+&fDG6G?>R`vy=hkmclVy5C|e zi_8gEk00RDqmI{Q%CJorbgAkUjX0W`GHDbuz&NE-f1~gLxjRi38PRm3&gzYNte9da zTR^QgN8`ZII=XUhspUuY?6K9lVAcm&8C*g3n|_~gjiXbxTG?a_PudbTS^h6fz#pi! z_P5NVnQ+ig3AYdw#SX$-VYg@{>S8KC=Mw!HBPGmQiJkvvxUgeG4gj(JBD8fVmmu7flyVXtGZ5M&t`){qdJhp&VUq?8WhqJ1h-%DJ9cSfzVHgLT6 z*2KMVN4mG_)7u?Y!VDN~S)SAq3vWKf8%G;|{?7IbyaQ}*6>Axf$zYe?)7*B^$j{%O z+;V&8F5$9sNc4y0sW<*~OVY^nI$i3Ur>q0|D=qeuWlmd0K1Si=_Kk)nHFv{;_})wm zwB0Gl6Pk&fSb7zHWv`(U!X){BuO#Riu}jU#)B+7rZ47_Q>+G|0?3qL>a^Qy!r@Cn= z;{0ee`1g$56PeJnom*gpa#gfO&J}0uDxc&f6{9cd2&@@ z>XkDvr6`IjX!DbL-u$a^TH3`Sz5MCT+mAl14;GaaS<#hES~f%(UfX?WSC&gzH{fNH z(#}aT+Lw-^Nx%u83JVMD8a#Z%S^P(Cg4{!SIs`Yhv&O!bIEX z<{BAVCXQZVh)iOCt8b6!hDyK!=G4El4nCKFDhZWbBUN7Uh*}^LyD2+RGfrT5 zRN7V>m8Y=C*icaBXqMo{%6O2A-3WpSFF{QvJKNp=&(=e-8Lvk-l#z(PB$RAq%fVWe zYPbpK7T6PqsoB=1$!(4)$rc+qu+M{S!n$q3Jn1y@1ZL!o5LgQ_3ZhZGz?Au$c=pi{ zy^U>c6=Vczyd%PWob`hbf@yd?>Ts@1>D9MHqk%Qv=12<5qflwsKkA>)P8L?;=}ncN z!$}xY>ZwD8e$YSi=`qwOO)NOVa)M`Y{%@_wZ*NO=*o9C(k-nFM`1nDRB_)h0R8xJf zZAs>c+DA8;c-hFd!ZCU7V@P^ZUr$weNnhJsjsol$R7pxDe7;%(qnq*#(xyf?r(y4eJ0?l0D zZs0;qiW9YzXf*X-4YV#f=SSf*t4FdB7^GiR#TnN}+Hehg@45}oyQ|v)Hy zVl#$#9rdn;kXv3S^R^P5RHKDGkF&LL)oG^|zEn`ez`_^lCUXR!yWaU2g6W` zmbu@nonHnC-72LSG-YML6|43gxglp{6LTKk3z9l=6Gwb={>~=bCmoUZKZ53lwCRcO zdo(}d?#;C^;STc-vv;5J5hkx={$7aG`%I(H{(0jqzELgKfK%5?DqCD?xfF7mPD`VM zNed^kErWqRhr-zE*c9(3gZS<@pBm}j@!903=<>?xGRd%!pgkpQX#Aw74TdI|7)XlL zp9;8sM)uP5eX=GhQqOADtrGbIU9FA?pA9LMrRVrYH((_42f3Vn=C{%oK3bF@P_;1uMF}f5>p08rtQa8iGmPgTBZqqa65PG0CPf>7X&DCgpJJyYtJ)<%N^-7 zgE?Q<=Vgd3XR;GvXlewx-Y@QywX(v}(3$M+ zdE5&FzKbJ~BH~WQw9^i(WRXcry|E2zjuB9<-XKn|%a6{A<1SS)x>d&e_ zS)L8dmuLicDF2?qitT%9yq=2cM2?UccKE%avaF12b8f+duAI##M0({C-#Y0a_w0~^ zEDY|}p#zsU=1jwIOx*7V7<|GvLH;79zzxn^M@>xa`z~$DA0+S0!T&Hl-ROOT1$Kfq z-L8M2ULrwY0)uC|8GoG~WKusKF-Wf0tJOQ;Nw0j`TcE?9w;5IAtzUgd!T?*U;PqFA zIz5|tLraE|$+59;kq2MCP+%i(%ftkUoILaYX`mL9z{fpZC?jI3=aNEd4*9 zWz}S_1)bp9gnnD1dtg9xnCtKQAf%vm={Ug>dFplX_1jIPT1W)wo#4W1-n18_Lm?m# z1BGCB6MQ~C^`R7mF38>c(s+VECsyiagbA(cL|Tx3=`V#C6*s3nLI=>_Hn#4qJ14Gr zBVfYN)&|BgoS>P9F-Y?>tT!reTMv?WN^DvL8`iWF2ddfl9xkTKdnK3dqO-^{@1RKp z`%~fK;boO|dNw`GDCMPT4**z5|2Gm5b!jQvhbMPjYo_p%=B{_7F#8MW*E`jdBDoa6 zP=kw*>@X_jGq>es0byFau7}69C5q;Nq1ZcF=L-nnl)Gv7;b zD&hVt>?Kd8to+$UlLe+IMjZ7^c{2?RaPe?;%hhuaGkc)j2j;ralLQY?re1Jq05&^( zyU|Vj@&QM!PBsisL&vmGw2OCpM!llG8$i`n_G3O^-!?1zCL0%5SUv(*?oRa4mdHzZ z&8nyEQ2rDcj{groy0!j=CgNV}#4K^BUL4J>81&XBpZQMY?nx(S)mtnYj=qRybMW(t zVl%+8C3=T4#1p~JuI``y_urYQ_0tlP&;q6YJ_B1v_B(v|oH15fBG{pnrC;;!BDoM2 z#I0sg391UuU2UH|dNafEo=Hk+po>Oiq79{*dBH`D#~?-wchRL({qgHP+k2Tn$fYN-t&h1(_ zadt>PuZeUui)DVo+#g}Js>U2URQ8c6d~Vm}Rr!Qe`2=)ZZu`v@MD(-CLjN1=*6how zA~dY(QURc^$wCL=i6GF2S_(w*zc-vp+91kaYwdqV8B89OY9M$gUV?z!e5BBDq(~Kd z!gpXU)@Y>HeRZAqOJSiu*bKmHD2>PJF?CVlIl_p6g%Oh!Cu?GY4a&5+(|%&p?bXGT zZvx<})xJVJcPdNV)!Uz5P!JRxEQQCMIQYwePQB8M57T7u*VKeGC^kr|)h2bTh9iz&|7#EyM_>`(O&gg=Tf zp=09VL87dDvWG7s&4xR_((I8O=D-RA43|Dnt`+-r_3n9~4BT|mE2W=2DV->h{Y(wr zx!C}G=eO(y$)GZO6nq=o`|ydO`U{xM(lWVfp_=s8A-gtM%q=EQ>X&dbM!k>MmkC`X zP=j%EOVdA6@BMEs*UC+KtJinu+1GrmIyt7Ii~^$0ffIHIly0`;-&*BQSr2U%`yN~! z7*f^gWgt-N@^QlROcPTzFPV4hkTnZ+C#o_!)eb6uSK5c$nTl9a4^Pi~M3+_Z&VBTf%QnE^0QMh#Rk&pU?a*?%F+j5||h=R6#tV zgz_MQ)@7*+qB5_ub)xOCBb;HH0<;K(6JB4En3gAsISJ!kRKG&Crm(er$IuX2Jhcm<5 zJUOZA;e8bM+G=AFeRhclAE5_JFu~?UWGJ`!2TqKI^xfvW#TV;&CY( z?PYb8M-14KfX!OFhB-KFWM9)%z{hNPvtOg!F-Xo5RiLRTu<;D*M#(|SCR4K;VK^qv zj>~6*PWhi~>8XUs+!9+Po|$>USec~&KzIaA8do5X$&$jJ@YQ&bfgvd4ki>K7l_Qf4ImDwi2PPX9h@QHKc; z=rBs0XKr3DN_+dytQgp^fgN*S{Ik!er@M;*qJoD%6frRTYfpQ!3F=xl)Hz3M5ch*$ zhP5$bpZe0&7K=l5oxCU=DH_8=Q3d~ z%zmAjCxhW0%z2#UrW$A(-BHzP3{zw3pc1*lgo%0MU#%y%QEnRdC(FrOlgApd!?IMa z^L&)kP>Y3`+ZCJws~5`3UOVI>#uS2Gb(q$iuKH9wGY&!#>w9S;r%z*zO0T}ZAR_u( zyBE^CD`>4GwCONTiQ6*=|Kpum)n?b^Y97n%n#IKxXD*`N!j;)4u}s=Oz--Qz1Wjus zLBO5%@#CdON_hXVGspjo%k_9(Xon=y@VCUS;G$m2Q^n#9NqefB9N+Ej@}L5s(A@oW}H6 z#CmN*BjWyz`>aWWyEwA{4vy?se?DX(SFk<_Tlk~2x4(B|=S0RsI7W#hz;a?}#DwLZ z%BMIzBGd~MJ;A{?+hm1KtD3^L9WG_%wT+FO{0zYuTg=6!C4B*`LE)=M#5@-I6A@Y% zSQ3G;&XUZ<2nJ6S6!<<0YHw~lHxLtwG7VE=kYyvFcyRZ|N8%nn6P?I{V$BfCiF5Cn zt0y43=7P@;o-tUYLLCdu?uq!?Zl87K*aQOSJc&`?=w=^Ni<`sK@gVJ50B; z1zdlb4W-0Y-RR3{dX?X;Kb27_pW6AN7A1ARjc7+6V|kAbvfuw|(tg5mH^L}&uEGMq6x9xoky(}^9jR#w8Clv@gt1K64SOA^X zN$wp2mV}x43_%ej*%gKH%gZX@XG_mSKf5WbQNAvG;Hjw0eQj_FuU@<$g7WlDw_o|L zAod+KHg6XB^Gm|N>+28@$8Inh`X&{v>#IL=Kio1oip}Z}$te3%T-=A^$3tE4xp#2)0mh+T|y0}C)HrKLqt0U{T>-^xEzLv6OFItZvYTNO`e~kBl zFpT2?77ASw>ZuG>ecw*QN(M3i(WE2V%w>maDN`s6D{xwA(!|g`+v|4UUW_@K?7ldf z7Ju;qtSFKvd5->h3OKqKt!FSWh~K#b=j&YxMekbc8zc5GnYYv;Khw$6eEC?8i`#zw zC1;|pIWC`7e4vjl|KTW0Pm@f(!3pC|{JW&yzX$#F zMbeu!noPZOXm(cYEN>ALAvQngn?ae+VDP7>I}-2Qi@e;#$V|^_ ztS%)m(CyxRi4n6Z%On>{b_OK6?oq1e#%LuPqvfyBH-q!y_kRv%re7y8ye_M3phJfT z6K*#7&+Fju011Y#@YGpG`2!xzdwk6gS?m4uUai4KIHyQa?V~(EP;(G)!H6~5oe{a< zYtj9v#L)hu165_JDH_w-TCdfAchdPNW$Zxf4}YZ2#i1<_vGX&)T2kW9p+}DGH2#_r zcX`9Q+tBcEiRs)e7e!2hIRPq6MJhqZJ$DQL=*SKdv%}pM0fah)&kpnzO!seb8H0 zTIE*pF5JvHDKFletb*oBkjauYV;<=R7tf#EySl zpk{qw;te+@QqXlHsM8(Zh7E&}R8ROd59O)978InHmZs`l9Xf;QF-d1;P0dI1B5es} zBfjE>y1>0Xj{Jgx;|t`Vf}#*s^I%X;UP5!;LnCn+m1qlezDJepNC;#>_Bq(2^Qcc=U^e6BSicRdC zdC=c$C_8n0)J>g(c>C_1DE%if`1h^9O}w(TeW*w)FF3Jv|2jI|-EE@ZUm0xP$@_4_ z8ha6R==4y*{oLX*r93DPBU;Q<;!TYmKw)gK& z0zRa2RwMot}S-d36qZ>~?Uh5UzrBn(DdaH?nAkY{ep z{>NXzr_7)(e9HC-E31EwcHKQylqg0fFZcAd(*kinHmt~fS>!KAX8S%10b*)7 z>PH|}j7f`=w6daiCvkUkM_=;)>40glN}wJa4$)ja!A_y$O@|X$$8{@(L`Un(P{mkI z4iEdSao$~8{IU)P^2WXmMUvW9cSjt{TZV01KAJK~Krk0h3tn-}jJU8t-3bg&3Vvxo z|F=7A!Pi$Xmbo$6$A@kArEf-S>xQ|-1eVs+lxd;_LW(^UnS8^YEO9NjZntdz-fyBn zA27sJP{yT5c=ho$&6{DQJipLjTiNf`(^Z`MsB@niD&wt=gC3&Ags3@dR0*%b@>>Y* z-VTy8j^5^9#;%`RFeJ#i-7`2B*lRwzBS#!5SQ*JWDU`DEhh$;4R5)>hiZ`OyI(0(c z)+Y_kI<05;zWK5Dr6*N+?x!;SvE!qPM%V#GO?FQQg^wO#d;BGHpt3K!I8CesYvBw8 zgZmNbbEFa$IiCcay9W#FJA#px6V7%Qj^Ogcct`hSxc5~q^87N-gdM}rhPMw4pl^;g z8Sp^S5WJslH@Q`RjgQM|$#TQHWwKP}JmUp(+dvb`%F7E7u+r%s&~mStt6PGZ;OqHJ zu$B;T-ZX+Fd}G4-y&4nNJrV&gU%qnVy-|q2U%!4drGCvODd!UKAa2@5Wv6TACYNll zaSiG%ALOly8(z)Z6^I)x5BF2~2fHjW3-a?RSVgRdWHreW>b{#05r6z9Rk;4H>Toyj z%rS?ZI52|!U#0v_Un<{l;k3wJygq?%7XEq!x#4X*lvF$q?!FPS`d0-y$HIz#6`R;- z8sUns-{U?GZ}O8=R%T$3Yv!aC5xJ^BB&@kEuA~WKg=B>BAHod9IzL>jgg5oWi`MBw zL=_aCh~uX2B}05~|B497c=OJ#3|&{sc31t#esKZNui75A+~V!x4vvnTjy;B;$mLiU z$j+O!(Vbw!u(R`B3>1a`GCS@hG!M=-gDK=wktHiiaRqt-={C{-gy<(MpF)Y$4tIXa zirg`(bctxQxd@%iuwBuVQ|4BZ?R1YbD^cO^k1i-$sj4UcQk+XHJJRB(bMbG6&&^ba zwq$cO;UJG85Mg(KSzTt(iwe#ZKe;TwriXDlNEfD|HUE><_F7iJ+L#JXPfBpaDrF8m z360%NVD*lX^g3p>aM@Sp(#rgrm27<#={@`Na_W4;`wE9ljQda!+j2FFMv?qyKi7Rb zEeBaKLVg7YQnXITpGugHtA>B}1(VZ>+}mE*i!1AWeHyXiYFZbV@pa76U7NP;74jf` z{EwB>*^Q$0S>DX*1%530dqoQX=giM|(1mW>Up6sTbI7g#tEC)uPGswrSIYMJ?ybvR zI*sFca*M^L&oQ-DwwR$=&3OtcB(o_~Dd#6MjXjmpW+$PnETYOY8YR}#55lK&E@E)C#r08C#~*^3>6Ixl7O*|E&Bwn zQlE~%(wQmh>vR0ck8B59&e)rsRjcc~zA19XjPDG4WI+ZPu|8_JXJ00tK}g%K9K%r= zKNB!WKKmoe@BH}8J95Q!(ssr~z4otg(-pS2n7A?~W=sy!ZvJj(1c{-CtPoG(`R&y8 zGOPaHtQaY?zr=aOGhK6j?m)NvVRDKdu%}*Q$k+Wc+3(ERWZVP0dontY-Fl7#aEzf2 z{Ow_5_q$l>dnVmJ1R+inxGeEnbg|r>te)TnKj>kkc!2Tf?&2GDt==ZBi4Xo~3QF7p zfmA_f_m!yMmao>b0u0wt#3L-gOFsE?vv_sIr^6r z53;ffqo)L_-l!;u8!2!O zNp|HLFAlBTQlQ2*rQpxbLuO(dk~1o24)1i_#gpTtVy5MGp2*$feY6j>Od5ZJP)onj+dl|8hXt7@kp?%iljhQqa``vpoY)xjeed*Vi%7;0K(rF74vJu-|O=~F2 zWzZ|BMj9;SFi+aq=bTHLYY5~y@C)cLq(~@mII;z?Qe*I_5jBO6?srW`r&RqO(Uz$Y(xti@2h*0i55l+0f@4M$peMxcRv5Xk& zUg6l=SNrd66Pxi{e*Rx;);~SU%5>FVqb~p z4QX5^+EKb$!np4OF>O>*oIC|VR^L6>><4>u=Vy$Z?#vX9uWmaI9 z@JFpLcRPLnUxY6-_&|L7jDSq!mka{&6rSYBfjcvc)%IR^`-%T%ciTu)#=I{vPmKS+T7Z?o^l#r%fTCS$eRUI$ zwGQL)9a-h4%*;U9pv})`SlwRFb<=!|f`S6rmbYqZ-+K#YzGPj{h+bg_2P%^rcz@>hD+He1cZtr>a9>wMm)N#PKWRvGX>(95mO4u|A97>AhUhxC&l zl7U9*26e0Rt_j~iyP?k%#31f#DYCOXZ(P_vP&j3J^xtghgNOq@w}ESX#@7U6=TvDq zZ9*e%#?{Io8WV6Re^ncttiV;JDV9fvvuN9%g}IhooqWz=EkX%p`kyDS{jl0 zX5ccoze*(nowlak5pQ`Zb((9nx4jlj1^DP@_d_5n7N2<6sZ3BYrGG$dRi9z3?mHoCvlpWXD_uDz0a&+^BXK^6x)q0sqUWk z%HxFl|EiGQGucBMG%@Q-QW$6;T*5cH7-4DV&=6>#5J_u3{*#uG&p^{IE)&m2Ht1Mh z$v}QQ)R>v*l91D#KcNc1jQ5+oFjxAxA50GC?BCwAXV$D)%Mmr?hOVx#POTHWMNd{W?_K7m!wo?qbi6AK=;GDv zBm)+`iZ`Ft=nMsUZXF++Cv`Qt&WgdNftMR5)wNaoCoui<#p_6S=zXT?5d$-Yaz%4$ z>x`+2`bYJ!`2x9x_|ZWZW2Rv9*@V&0jEo?oYNgkVDy3o0?-O=VMQ2mLdYu^j8&~rx z!@iKG*M{qNJFQ8-O;KUd6j1bh$(gs3-CT_}youNqf`-Nd;5UEg zVC|Q^Cz~hXe&;bLXmd9tRcX+d?sz9CsIALZ=tRs!RZu1HW67+kTWbN zG$y60{w$a;!rK2vgb|2Abocd`4c_a~`g(+^LNM_%=?BhDChI7rd~n4w=7{3YD-fV+ zVI4Q5AgmKPNnf>deDtPG?X^sV)gI^2XKt>0Qkgjm#=8#{1s{Zw&!mY|kSX?@JDH04 zS#f&{ez2|kTZd6m$pguNq!9V?3c^>+)r{nxMkO}x9=qjCmI7x}rZZC#57$O74|1Df z?yb*^yXRw)v8Jbns*eD$vLLRrF+Q|kxF|@9TaRPukae!){y8%0^`reCWbWTD6dCeK zrBk!c1R7((0iLq-Mi~q*R#3KO@iZBwZ6{lIU;m2FWyp!fm@j1rG&D_4`Q?&SY1{Da z>V~T*j1IBq?#S{7k=_YyrLTXR2DbkU_65-ENXOt5ne!%FyP2AY1>x47%T#0Tzh0g7r0V!sI z1YHnvp^JK7K36nyWvR%ekks`qSdGtTkJ8h{%4DZv+-qfZHn*fYGvz{1mHH4&lKFOR%@Fhk`3Y_7oPk4e{m z0=AZo!nz$sstUtF$X{-0K?N|GONJmXZB&Tgm|F);-PJm9dMaQ{OzKY(b6?~GJduhg)ov{Rz{}m^0SDwlgPMweICXlv0<9 z`mKR|m8o6PL>FB&#I_RCc*bku^G4ylLl?6ov}lYQ`OoA8w3Agv6g~%;bBPD`TXv#eFRQrU#Q)tMH+QKewdB{!uNuO-MtbUW%6&LPs`rz7%K!NN2tf~@~z zkIG2z?n=z*DxaoH0|@rNV2-vXr2nT-`R_|R%WDJvm|K=As=Rj*RZ8ytw_4cF2_ln) z3Qz(IR?O=XtvwEH`ZdvB2umz!<~>T~IdQe#+stRSpP3{{^ZCouUorI!L5=v#fI0Y$ z67TZQ!yQb_ZJo$gyGs?+N{@-N&8iJG3a0#z6-14!`MsWj-v8Ihho%hC3r#z+(2Y26 z6!8GF6eA~=ExCwPs-dwEqx=CaRAlz+8h3-5=J+}6R~A`U?;E63m%O4F-Mtr5XFmR$ zYokA$2@Tc5q@I`+%W3xR?RjMUo!ct~2Q480x;~Li1G{CS5y=?L>6>JV^SuPLcU3g+ zL3tnO6TeCNUrtn7`{%8Rl*T|pEc4Z>*weMYH5%Ku)47k>x6{R-(|?hO{LGN?8MAH) z=T;);`TtJd{IpK=lJ`Hau}qzux>oZdB9w++UndQ%D#n7X(1J0r*f@z?J{bGoZ|JE1 z&{B5w=|u>j-{!2#EEto^%tD6umF)i5O$ju`*x&#B>pT4Usho_oqZiSRCJ)~o+3`P6 zccJ-ocHKcYQ19mR*INJL#Si=CIN~}H5m^i!^A@k|AX&+}vbd28RXWuT{Cs>q})*(m>D*i%L7s5EE z`3|3giaf)Tks{wxubn&A8WEeZ6ZC%d?IK@-#BAq+VB){8Gp~MMxWF{wy1FhxiT3Nd z6J3SSPkSB18v0tav>-I|x?l^`Egdwb)S6%IcPS*ue{(u3=-!$>%Lt-=ho4_M^cl|s zJ^tfr9bd#p-J`Geq;>>oy78f3|9c+8x*eRi@T5jQzkcz?CIK#kwABwGcy~hgUgh8Y zrHMJsHrRKqRpoY5$_;gmcDD1HH2L8s=b9?oTlSr|=uN1hgW}JtbECZqI(-D!R6&|R z)owcGQGY>_1qr*u#OEGxp4=4~&eG86Gu4Vr$+IB-FiwxK-xAsk14PS3cMJ&M^;26F zQSg|m)>T&lrco!{-r|vouyFI<3|g=GRKP^b{@?k@ul@9hp`c)HZqUp8Zc>3E>Mol% zKf!Y@sPhx2RBw%y%1NHS->WvFrGk6w`$_Gmg1}H`_83p5!A!v8yr{VU?Ci597dSArx}6wcE~65a>{HgpCCOl(|SP@mjMJ8+~K>q99D zx_S8TGeT!yyE8TUXRa1^+buz|0#D`1^=Sa|EN-tOW**+dGF!g&!@KpcQ3FwBPbwI* zF64CaiKHt*IZSAvv&zb;{euD-Y{vN;J3@E}=T^0T-r}(0)wQYG(3@zuTLG+I&S7bJV>F?BTic@jGX`toXQi zWxkg_OTCGTz6KCpMhmqR5>(<- z&5q1Y56CJixQ2iHX!-a^%}zJIwNe~M;S&=R!)2+$ z0}{hdz`{VA=k&8P97jEmD>Rw07#(u17d+qZAm zw&6N#^gMJ}_@)Yt@I)T#zgj&3DdB(@j>)r>{TCMl&s$|AIi1lSV`7G)FD;lVHIT;F zVTAvwYfTy%*gfePPlq8UVN`91cCpp7XutaN#@z=vA}^cxU03$aLR68q0tc8nLzuK)h#OXTTEnbC!d-rEH9yqhNUculyCS!9REH}>^ zg|@$3cG+72Y7nc$S!^lM@A1gT-ms}xXNCSkP#6>c+>M-cV?-#x?WHKQ4rCeDtJ6v-6W?a_Yl1Hew&GU zCeX^Wn8Cp$74`8O8hVCHE+lJfOF_bGv#`^1-|>*%2CRBLddyw(ubDga+KkOKYky!lGNMBK#W7O3Na2vUGlDB&xjE~3|pc)HjAy*kC; z-@eGW*%M*yIPzWaQ3(;^(&x`612gj+mhTB!1o@1zK|5cSMPj-!S{|qiJw0ezs+bf{j=6FILwju{8Fk!MCjQC zi357N{^nds)|zHX(s^lLv##3Kj*gC1VG=^*z|wVa5T_Z&J-z}Mq@O?M#S=Y4myc(G z`MTSb*; z&s2FoY10_|(xx_;S|(!q5CmtLwJScrfpXkvM)D~n^Talv^;}X9GmP*4;0joutd10r z20|LNE|-=}CnhHWL|`g@5iNYMZ0V-=DB#~j>mAVwUKK$gxJd-I=6vRS#K16rG2k7Z zyjg>nKCA35#T}A0u=wj#eX#g`hi-T-~u;?+Tj(G!)H z!JYHa({kMU{jf~;ZMl&H@MiO~vcl%)Uy&lZx#*lo>+0)a&Og7lHo(q}jYJ_*Ivdop zE<1~-PeIOGlIk|7vWld$3PvLN%!E)A9UhE+q8RHlwyZBs_HO$6_02YNm5A4d6k-_t zm`-^LM2*zSgWd74#r@m=rUG7GXRW5pOi!0ahb4uSjM;jb2F`JzajhvTBlD7TKRgCJ zQ;b%-s<(vVRcu6fr*<%KDSkr8S9tu|nY8INjUL)B;QU09#F4Q;spJ zrHc6mKfjfmBX>-GpXuMQTGFZdn0yM)ckm+RODqdb0~Z*xmx$)f=4#KM)}OB43m=+P zH_Btg2aMG^mc_+IuO&{rt@>Hv*4=^TCsa`j8}*x}K$L+rgG6!IZ7$$G$XaJsRD4|Q zDVYb!U3Co&X!+M%UMTPU$&TDvO11_5%+b$$5h>tmaGLf17QH}P@KuJnYUV?7 zukt0|GlXweU0o6^6Nv0Ri0yo-s;XpT!xDisB|*BUK?{@CwxKj|ebUuH%fhDV*z~of z<)^|z8X{~JRn=By-xE#;M+uPk+Gso^fBN*P9VuG+Ku%TFQUwwk>^{wx6@{h)y9|#X z(-L6L9iDzJE|wnSh7Y1g?!Cv(V>9)>cy-FIeg9)@Y$~_8cY(r(mw%c5y9t%@d(%ZP zsd6*j%MDp?PsBp*F-(}54{&FcaUNc6L4@hvHhgrUOG8y&w*UExc z@(Ev6U&m+8+QU}X?SqLix!mZmFJuEo%}4Cjv*(ndaV!9*3NsWuT|bhZ(K{s`5Zxyc zxr}XoGNK+qJ~5D$+vC2SC^KH=F06l6-rQF9jEhXLEsH5`cfpnd%5;QT^O@qs*yTQs zX`gOKc=dF9cJt9~`I5S{cC>?6Npy~c%yXib`<{~2{-6F*Slu~7NCWni8AJ|jmU|R? zDv&pZy(<0Xj&^a4^#0C{xOw~*r}=+{yP54XSC;k%wcBo_1Z37>IEyg3YEKGeD3NqL z-7$z3aO}3{Ls_?rY`tUD8Ko%kzmdypXaFfxvFBr?EL{xBjkgMS#m1z@oPlNyB!}JO zvL0~lq>6%x1_jRHURPtnl7fP9W@J=g^W78yT~z{|u}(H@tI7Ti|2&IvX>R}n5uOF* z!n_Wi`5Ts0Q7v43YxaWr#jEoZiAZyzz>jVJ-2%oI8X6kDo~4?_1p>8F8j`1ic4U@6 zyWeNMUbq)YE%4*5<;!e8L_uE6b9JelW}LCo0pb^$fCp?S!SRs?sHh;X%zGEL?Ywbs z-^p?9+w}?UBy&st*3od=GK=$7zPQdA-Ob+uxNr~g>U*a_Z|-*;uBWRF)c1-rZpRM} zHfJKNUy=$}q`$oo(N2mO9Ch#mLz@T+K}kT`Bdp6$0%kdXj8Tt&_oZa+nTOORr?hn2 zuZS~Ec6fv&x1L^_CJ7bKNtaAR8KC9o&kx{3x4%&(Z+W)>|^FvHZs2 z?y>-QISYiwFt!NsNt`<&(EHE~iwv=Z$$ns~|tk!@lB z$evP)sFbQ~el)|Iyp`ypf8Z2|%Y9PV%uF>AQe(lo3$Z_+>2TYdm-!jx%5|Z!g;Czh zbtY=U4`h9_?7@JU6Mb7C*#-G)r97?`%6O+gvLvfK8~J5r*zGDR>M-W{Hp`r$z|Ta2 zCaG)rP*pXmz4U;=d6C?`c2n4~wx0E=K3{*|b0vhmu%7SfwSjTZ8naFv6#{~mveY%} zl|i?VH?vRFG^R3rU$%=~AK0}Mj{H94<>07S2XJ^3)Is@psAx)r?j zT@c1SbWKdU$Gqvv2Golc2p$QqGA*>KT zngKypNOn z4VdK&8PQuNTqDX>RY=HxyijX%4y7-@d_iwnO(u2S!C%BiS0pCo&BuLwaUG&|t)6zp z?K{Cl1zA}nU9^wz9`-*`-O>qiWA?N7LlpQ^^IrzNc*?j`39zsju~S3&G(&1)QA*-l z)AFJmanAF@lJwu>k&HRJo1I>7yJ_gvbgk)4dhrbUTq{alrhk?yFpUkx-b8HZX=}Hy z3IDrK}SMI*IdS*+`fNgP#aEw^2x zORTEh%yTETTt$8!bKUN&kAJ3-gor8GkW?jj{T+*e33G62M%muyL%X7|)s%afr)>(5 zpSOO6ZmMV#z3NG$!*sl6Rbvs$(4KprW=rIUVAoyB|3UIfxT>cCrlT6B?ihY1f_p!IZ&3#28If zWijM12aOi9O?#`x>GMRb5-NA?3c;fx?EREW$@|37Of=LiJimZBU5ay+%{jb3P0Z#6 zM{JW_N^uiI&wWL4jeF`EV#Df675jJObKD(!ZtH2+M@oLrVx7&&wyJ3J5jzG>9Bp{EoxkzAX<9Kkf+Yhg9hkI_{()L#>mlVf6% zllPtbyODof2>OO~G;rz>vRe1?{_?iW7sALSk(3{1lPo~d{KIRpipy#AidOhs_0FTv zvk&R1Xp?M;WN>u{O=z(-qMDc=Pmzj>NSKYEq555qk>pSmv%!}Nz~H8ZjqkP>0REic z3@<8@usl@)@NcNVL?at;<{2<0sc-(Ni!@+Eo8~GXtE34%ZXGNd*7^J5%A^m}>>>&?89{QG@BWOJ>&d?MAoKD64w zQs13kj)f z%q2<1xc#lvB^4M{q)9VASg_AvXsEDZO|S96Ey&tBVw!x!iu*RpKoHk4U%h-)MR1^@ zG}LeETEwdT6YA5OFaIpL8WH!#`~l>d*?BvHRf2_u(@Gzj=YQP!y%mkI+1l z1Q9^viy{i1YNZ{vJL)ncT1%~;eWt031&wG22Zya=uknl>I~<62|3ovsyYQ&lQ8QDn zMOfRzGydMgq#~5SSroV~m`(GHr_L0n1HQfWM|>{qYu|g&VI((d%NK_cM#R!nobV3m z_9D&}+tB2NP<`6CT7l}wpu9T4^3Lydta8QuJZ^OrO@gd1tWVhto;}x+WR99|oxHEA z6^+*7U;UWoH*YO6N$bd4z$d*m-&XgDqo-)xy2>-6EK1&%5Lz|!bxfmi+{I2cc*M1D zWFYNOB7UIL9|vVAfOntOLnN8Sg_4U>YHy;*>5+3vJrHm)7V!-%@9-9(xFQUCRB5H7 z#Qv8qEK|KTdDxXvRz{HiIYz0|!q$5JPn3~D;xlC-LK#)AuCWmn?qWY#r)!f>k+rxh zz^J7X%`-F*lzX;~QjDfKA)05s9B{S}prqf$#l;wSqpSTXro_jvZ!EaCyx;jXt!?J_ z zNF(x6&o1qrXmPat@108gvlVr9x%ZJ@0Ln!H8DvSJ?kMQGd}0O`NQ^;?%u7r9RPSj8 zdG*W!Mv-CT?>Vms2q;AzSM4X-o}zU+W6rc0XCm%tyo`3D z93Sw8m{tFUf9x-4zA|?Zy>sx>DfeRcbfKV3Rl1IQ^Ze#Vf_o}jda{%TKSoA^=O=RR z*sE)h736wFuk+=g3d)@rFh?yKa|Bx?jmKQVuZ9Wc6USz8&aQ_ap5{MzuHin@dK2io zD=W03q7>~vSj~U5+LJO*c5Uu9p7uhUCN^r5yS*}A2K6It&Dl)2P*r;*ZN`7;0}<2J zc9gE3b|AAHwaTflPfszxb^9?h(;7`1`l+}mueKJg(?zxm3B<-Ci|iYe#YmX(6tl5; zXe9UCXD)YyCR%Qz`HOkWb$KVU0m{e3? z?>}{LoNatC+f`i+jm3w&ypjOt>?17)JbO3uV5}0{TpZ6UpX+{g1`3$A5{@5kbNW-t zz4I8OD^wrW(M|N9MT8P`=lSe08|6SRDZBB8cSZ+T;qR3T>u}xxmB>i~c10|ZiSA&d)_M(^z;L#<_N2MBb$&y` z$GST0(c;-}Wx1iBzZ7*Y^J3uPmKh>VfdUIW6b>IRGVez3E4mydDP5E-2$1*nSs&dL zDPUy$RqDt~PR?njkPn7gH_`AM7k=3jD7TgsVO zqI+-Agl1k&&-+}FPSL8vQFq48@o`Wj>0(Q3yF#K+6c`%8LOx<;%FW41$h!iM1l&ya zN#HX>0@80;(k$gWdu`HX?M6mrWjG9Ie)YY4h)X6S4(<_O^j}H<1dyAX3uAa>eSMD$ zb*rNu#n8>~KH!V+HqAYn{PAj@f;vynD^mYPkC&OtTfc7ED0aO!I;MMoHZ8z<=U(_yzm zN?4c^VPASr+IbKg$aZ?^p@`)e&bwW+nY9*=mIRwOIr;MIuT#fXDo`Xc4F^_NR&wEq z+}5~9aQ}Xp(XzOe!P(ILOliVq6h-7$36?9RIspKyEN zo$KGBtq^#8w=1&KieqqQR7_KoE+gX`2grf{91Y7T%ffEd>#1A~_kDVhFB?TA6+-an zSH{j_V)-Ry5EPe16)8Kp-m=tE-8i&9|1VK3^xA^9&(y^3M*u@`jgAd~bl|o0j#?F4S~yA;rASjo z+k==^Dgd;6?_vgF1hsiNAKZWig<%QEarSJzUH;!i`)Bo<#hM)3L7x-)fYGtB0a*;N zM4q04%A!#h0f{8VMU&2sDl6lF&vFeW%?=J+vIZGo_t#9@Kt(^e;si+9 z;P9~j+!dN(ZYL zPS*qMkWkE8`|_xI*G+cQUWRL35f1_wLSUBRj+818B(n<&{A9Vl7Yn1YC1Nw{@loUt z$4-U8S?@IFP<{67ol-swjbN2`ON!~SUcMypqg2t- zlB2|juoGKXCjeG~jg5_eoCKi51!K4!iw>&#`jOK%h!v-2(Bq`U2OkCahVE>c$UEd8 zwHx#{UH7{mUEIV+N4YXBp$7}0oz%wmMF;zpAzIK+9|{!-&cc6A079-7=H^enjQE(X z9I=?cu8Zthe@K9fbgFYR>>OI?_JC;8UO%Egjk$0AO~*lRXo zC*M-ny#IaLf6rnwS(93%i5NauySNFF3z6fEkB`64dM}+V_f(Gv8x{5wTXG+a-qFal znR5-z%qX!Dp|sdk$0R3*(#Q?CxrrRRf@@MCzVSAtk{0J=XU>gww1_?Q8I*4NKj zMERvKuMG_kYc;rS>kB@Z#pvvmV!$+(rQ*y}RC*ArmLt1egpVDF{|<5Ic}Nz`GPWW?4Yo*O126&m=ymWb(OJda&wuhv#Np4Wmx!o9DsJkAy*qX#Ys}zLZ^Fv%DFlr6V)|1= zep-oM{9E7VOQPs9PGX$)Vo_bfw+8sC`0PZ1)t*{$+ov}Z6!MJIyzVMj#Um{42QK~- za>3MS+=@8v0%2ls(p4Fn#Q;>UFzI&A<0B^>`t;ez&a*W>a7*kdQ(z`UBY5(JAb>vS zNpo$ADgpkxoQ37F%2vbxstUdoM!59Tr9s|lxIgc1`;y1+4v(d$`Fg97#F+4F9R@a8 z9`WT!5u`UN$I8TB_W8(OpAX)=R731+n%ZPm-7eBResIq5=}9OZ{!&hAY$s~48} zmJ|j~OvgB{N7jmVy7suT1c2HO1nutrN1U8@fv{0O-TgEjwhARW7cVb$56GI}B|G7+ zFpBbT;hvv&f5)ZSTwPtgvhs{XxF2mjMD>5Wwr0i1$Y}ohH5Czd9wS6`-y4LXi6zr1>#RNO%q>fm#$m;@chT!WY8L5y%7*0vy zc{vZ0vafT*-X0eiog6LeHv|o45C;?za)#b#%{aj8{UREOq*qo`Pf)g2+#kEB?^*Af zBQloMxYbu=E#&p1*D-Y2cXj1jWti{wmqXC=g!nPP%_mPdVD_y2o#@en>P@cgPr0!g zOmXMkEAOR^tR`!d?+viFzT$B_{>~kdE)?Er1rBtoy1Jbq%kf_H^i|+t3EsUXgMPJO zfGqka4J07iW%_=Ojr`s}21h=Eo_OKIqKX*(i<6rb#E(VY4*M1=<>O0sI^$B$HZLcA z^FT~KePAGLMeSnE_59)9;pBLo5gsTp{Tx+~ib;+6Xz!V{d!M!3b3lxPW9YqP*2g%) z@{L>#BAmdI^YdYBY=Lpt-}oeBC8y;R`@w4ZsxSl%S%OStn(;Z4Wnj@9#2d6o(&gL{ zCdghojMz7X-6R$J(6gc#&~PbCj)ywoQC8W^_9YDN!?q`;3j?E$O=YFa*e|?%9&0qF z5~yTzNtcmpz7) zlau4ILy?vb3^Fl;-$+Ut{cZq-#3x)SUy1YQx_62EBix znB8q2-mqI8wT8d!^*vd^gUe}csxfjYj)%ZtsAC%(#Yo=7jq<>>d$?vk$k~_MtiJ|} zg=U`1tB*aMcY0QG*)xmWJv}~V_3@{Xdo4tl{Wbt=iNix(_!``T%Tvdp2@29wa}2D- zdP-9650+VVmcEoPL(p*((i?54iLRTN^LBAnW=;1k#R=C8=PmadclOJ79}FV2J3rphURg=No&>TcaG zpku=eQZ>|%A3s*@r)xSKT?LJtomQFjofwKH|Jlvu#zRri#tY2)cBRB~R@V8E;QsA! z>En3)rpSS1iTq&*6A5fS%t%D|oWAe=b;3{#skdCov9tq^GoTWZQgz$pr5LiMXfaUX z-HvDVjMzqYZCwO4=hxTY&mM%wm|swq5DoDtx ztR`cBwnVb7-g#nt5gA9PZBN^1lj4MGLndVJ0{I>T2LGXJGEVY~MI0Cbpf0ysmrC zBIellVq0HD<)^^=mhboEiL~?&=|xWma!Y3WK_p=OtIy+2-z`tDTxBB;d!N71CDexyB+;BJ zBdDVvzO=utN4hdh%P=P z%N#BK{a~SkN?14*63Y}NGlxT#+>(@k6Zy0Ct>3NGbi4}2Kfejs%+$5dOYJ61 zv4Q4Sn@sa;2Z+EV{$#sejqo2^r3OPDNFMn}$*XRYg-gTfyfhKb3ua^c?y#7%(A2{#8f_#))Ojj&noz=1Yk#+XsAPnF*0L!`^8r5b1ArEb`Uz z^UE0pO|G|Y9>&BU9#v=vk%J>MSb@kYDIKs4B#Y&TsxV0U=-IS6%D&BStFLl(a@e0x z^f`!eWhcf4OIWIqXU~=_|4d8RGhOpIJz;yG2w6Dtz-_#8`C3U+S>RCgD-aBMgBAF^0Dssn*Lpo1NT3Xiv`DGo!b7NpJTS% z8r&N6b{rgkysjLG(_)sUxzoD1LsN1~;vs;o;Hyr$gv0yC3GhnrSR#pwn`sikM!nf; zfbK5_9u{54X`MJz??r zxeGpugJW5Y$%DwA4kUX4V^66zv)m?IWRcUK$%xk!4=~ffs5LmzhdT)~K zTbTl^=}`7sw+B(UG}zs`2{$cp=l4jl9o5+QO(>n5uA^tk+VmS`8#9oawy?kHiwhiE zl^{Ub;F(_jHW<@TwQT}bCMj#1wsI>oeG5o6) zy5p>!KRh%xJJ3IU3gaTJrllNZO)TT|5cAhu&=M0@uClDud$(=}wZEM)pcL+l3!~n3 zdJrICm{dRcXSF&e{!6hwi+-aRa~?4o7Q9#C+b^cpx1os)5@u4_QFk_>`F0aSB3m4S zrgY51M7(P^Zz{D#vB8!!=XzEqbb7L$lb>r?ng9oI_kPKTnAFaYMfoGEVZxmq2dxHk zk)#s#ZzoMHzu~sHeyu*hC-?GDiNw5_BKF6MsmmyhkCi zj+rsLLD^^8ZpFj?+o{a)&}YU2sj=hWKqOp-D~8YSdO;Nsa16tisc<7P2jc)~{m=TU zOv!LmVj_DXF0T8a@H9*IAcN-tnE~<(tD1&Ze^FQc+O+TciKN@`Ry9ksTj6eIz=%}m zo;?RpE9kQt@e^n5P6M{B)=iOY(9|-KC!BMtLr3uk{K{p0e4varlt|E&0FR>btMjQ% zR|I({2)u!*QbXzXJ@A4*dbNwo_`L^m32<53@!xEG%kX)o$Rjl^4NQ=RtQyXjq#b!cZ?a+%*X}Aae*&FA^!$qkUV^ysQT7BF!G~d); z(JaqLu*6H@rC{Rz07mYuX6pQx<3$h&gVZaaFlT#oqK56dIRm0=GTeS$NT@f!D8;s^ zi99?fGru~%@1+Y^qCF6`;nFS&850m6cx|h`f5wWo)w*besoItiNkF3^578cfre%VyVu4!6F4nB z%2K9n@LpD}zxuI4Ll}v~L-}0DVAOsR|GtLIf5b zGTj#6ZT5-J{2Y`F$ISXf(LN}GwM4=8)E7uB<>#A^mc*MyZhqe z{SlW9m30Nv@|DEeA3t9Fb*P1lqnl@Hcrs|vfRY+%fB66#)gBu=IyE+U@aX8HUpxC7 zN^~exq0SpL$1YMrOxiXjB?MKLdM}HBP5^tdBE(}Ma%ZL75%cJX51A@2*2i`oFi>vP z2?}|uU~5<3tr(_X`T{$?C!CoHe8Tl~ zo8#u&Zom(lbY1IQbSZb~!-89vCjCA->H|`{=%~a9cXJ*2u=`+5Siwb-VFOo({h5zw z9er4%zdu9^bkIdXzX5`RPQeWnNmw}Ut%z6bP6DY(hr-@O;qAL3_~^f#YT>Ht_R)!3 zH2W(Ka=3u3oh<}y8k8oaKkx??k`*V~&B{rzF1B}YC`%_A2wHXwv5nuhdO_%Kes>r>r70tdF?kIirZ;;IC@q~e!8_-oCzQaU|pYW z*v1!zN8~wB%@L3@jahe2ey72azgDc7wu+0;$Smtk(FD7Bd4xx zZnA952}(u=Y%N7EtKsZpk5H>`PJ+_k!>6Fr*MGwRQQQaxmED)^;<^`Ml8GGdROBV` zfFbtl*NCecUgx!$S^8eN3YX=pK?d05G{oUMbDKP>s;W=H5RR}sxUdi#%)=R&zb!9T zerawxLb?93?ZwS2b=IEs%$1p&{kk>pXhL8$^(MDCK%&R!SvyLBjQSmP)bT2BUbTD$ zz;$Wl79iMxiG0FZAv1^?Xw@0tcCH*r5%dj)+J>sfKC6_^*2?Qvk!Jf+k)VC;6fE`7 z;CNpHKPNz{&M)poJRNUC5w0$hm9{g)&`#Yc1$%#6gT9 zL&cmRm<(!eRqMa}d)B21BpDgMn0^^Z$y2xE7|gWAB-y2)hPj#k0gDvYnLZA5v+42{@d&B!e2W z`__-c8K0|&NzTJdzbYXuO$<^Y7urS{9s+FCgFa6OpWe|+kNh%b1BUXEqWF~5!r@X_ z%cVvLJ-x{z4yfkQ@W=<lfRJn(mkT8V%(b674pNvmsq_1wHZU#8&OoGOQNH$m8uxc-p5gPrY3QlB))7J#Ij zu|vCCe`>P=NcN7|&gA7*#=a4K-_G9Rdy#$-0fNTxZverW7}$LXUmY8AJ7t*`7S^eA z3V#$s?{G110?&VFVxs>**Au+>jDM`WYCYo*BNL7u5Sb03VuDI%LO|ff={%M!ad6M` zV(Jj8kSy}3G*MeZ%`dU`M&&gQ`vL>3x(b#r(V}TowY083ag-;45@0?{Tq&J@V8oIa zx&&0gcR>AhVYg54eUE*?mja-Va;1AW-SgLjwa%#WK!LRxNG!i!0~Z}+VqZquzAwtd zHEPmxkZNpf{M)H6LD*6N`Z-)YGY?r1kLprj%w7gJB4vWc3GN=msZ6T|@n=!G%=>xnOs8 z9M4nvkWYmS%Syw-l43AXWAAKnRvA_GK9WPPsklZnb?qHxr%F!IlO z_faaeaVFkH>Efe6#cdOx96KP27)ZdfTl5SYdZVJKc^x z1w7Yx$4FI@futS0=Y>3eii03}G|kZXxFTeY5EqCXf8q$qMgMrsT~L^#r0k+e7j5b$ z>Ub_q4PvDV2PHAYbaqHnYFL!tmEo-AE1~NhNDin?*^Igf6r`!?vZL&cWQN`HgF$%; zjJN@LPr3L@y11BYOpCp*42d$o`w2EvntmGy^F}9I!flg0;>Yk*J@V6hKx_{HPx1i$ zcUL@$i9TGW{fpYtfq}d>@--);tJYn+0I|HwS=K}d732QIoQo`jq%(4AtDaHO7tx?i!zEDZ>ka`3YyVne04^U(SSYQC=uJN(lYK02U$JGjR5#xBDpBHLX`h|pW9FXz#w#z(TSY9%qAT^fE z8W>%50^{uKDyn*cR6XAuQdW6w>{oU)uu-W8&EIi(sjVUv0WK*$AbmsHljM*K=n9J+jf?GKM=z zNc6>`bBwjXgr@V1Z&n{d^X2+-bK9bevrRDv$B_df%)nrTQ3{_kvGOZN0Tvi|Wz7er59qer zOj+e*P)4#g3j|3=|JekI?jFl;aOt>zbMdcn{uh$_20R3a!cbL@*z zyWg?nC!bf@qMhjjt{bI73#wB?LmX>Kl<0ehhxD#ofnj|T_kPXU{kG!^JSYE2mb|gC zVU`9Z0iY}GK3IR1cE-*{{_BixSHGoVY7aBcZx&EiRu)yt5A6qeX8kJkR85(rz7S|5 zZZ@@7R8)XuUVlL7bLf~YjuuV6U^X4HD#({&Bbxsag>0yK%@2~eQ=VHNz|v7gOSS)f z0Vd{-BN$VxjeC9oedCjLTxeI4jFw2L68P*+Mq&hIb19Gp4X?af-tY#t+t2cVnDn?Hi6AYzK(`7%&FRRga)e$WK_`3P5PzjMkp__sX4_^hp zd1UXnBdOpvEsz;#i#xRT+jgOYHFMf0(@GRZkQiDXb!qiH?RxVbr-R|LJq_ z{9rcW!J42fs6ImYgf^p5xz?`+>-!+22c85|Hh7}PgNN6S)^>|9)+LW3<;c(GL8jy$21 z(6`k8Z0YbdXoi1>lF`cosNm`A|hKC9qxwq^d_;#YH{Z6 z951bheJXfTGOVhekp3x#=W5C874Z@TJy9dcE4QZF+yO_^QL0SABNg}#$R!cyYZ@qq zt!Bz%{uW@KiHLHVDwv%88cb=nORPWKC^z1|QAtk!-TWKnop7l{9_Ksysr-P_EqxzZ z4WkfDf)w;khDXFLKQUC)RGk{PL<+A>MJpc5woGZrkquiLw64%;Yrz8*P3^WFlTZv) ziL<|B6e{}9+f(ySA^Zo*;UK|`{Te*8cZtLK9PUGsC+jXgho`JZJiySq&X#Wh|pv;{CtH8>|nIdg+Fb#x#G z(rxSa?HeHGlShv6cr+BsFO9D7YQ> zj^ucn>LQ*{euG@_(c?#^V`=9?Zohg9AE-g<-#*ld^}*ypkkOmAwi|THNpCd2w`|oH8`qTr>>a-+lHye)TF|j>>(ZTi5@X>ATKq$K9MR=!8 zvp=th03!u*xU#Ij4X6^C3vSrpqv5{y>0ZfzjIFJxOk^q)Sav%-oXjaD9_9#8H%8$i z4o1>98&CWMgX51kv19t9Oad}lzSew#@o}KSD0w`T&QirC73j(d-0pVvMXuLh0Y#w6 ze%O2%cv3IvIcQ#~{``6A%C2=7xvnw;X&yL{z;r4YTfKI>hoa#-ZXinxhFRkISF9UQ z^OQ^Bp|TejjQhc-Nj3vAefL>(P1ciQyElKi{$_h#tVd5C-`y*_yw1xD?>z=dwACy3 zz97UQf?PB>i=k%9#^-njjVKHi%3BD;*$ssYiJsrTKdtdNr`xUxqxqa{z>^%SmOsE| zc=jUhu@;ET{jR3)0XM&g{ zo0PmiL>J&aiiea3q(DGGyxjxUuZ(HL#G*qEtt|x7YscKOVXtz(ns5_vn(g_THnv_P zLPA0E>C=yQKfWRki^i;3n7b{;dtZW9e0|(Ful@YFj1+TFV1DOMP^|dMz@*8oi8MiJXC&%;N&<-66#SI`MCzvM9Ef)ts^hN_XfXkI z;W}loqCtV(9R6FyuH0V~Lm}2O>w}ZU6C<9sOH`S5RK<^qngP0$n>WV*hXXJ`W8?bs za*rDJ+k+ws^yB>4g(v#05&7Y1>Ct` z0s{i>`igVy>t%p#a67}CNyASLXaZ2a*rDCEM2#m;jh^+~-r@1x4Uc~F)yCG2)kRFB zVnRFEVev~Y6VjsMM+UA_UuuFAumM|hzG<$fCJ#`204Ox*7JLYxft*mUCwje1HX&|8Xo z_u7}fob0WzO}?%dc`J|&eXiU$w2dAeDZ{; zXj>T8_v{5WSfAy313hw1YRBkQ;&yNiO8PZI1Rk|~@=KV}^DJqFf3|TbFIiVsNjCl^ zFCX7+Yzn+ltIHoFaAv}0?_Eo;0sXpB#ao{Y-Y;-ERR@O$x8z!tq$`ZtKU98nuQehc zE|Gc^U2-od=;(MFA`*fXP{w7udj{oWy2?Lr*br1;K{;|0Hj-|V?ixFw&`8LNS2tD{ zK=G>m>WN?hk;4xSdu)F9JU$0QVQqb%D}F^V z-sXMO5xD^PgVYw|p{x7e zqDF)}U9Bz3Jb{6Sn_E%do9so}7j+LKhsV!LXK5&67#gGR91DJ-aoKI5rxNvi{}l)7 z1i*vM7qKhB_O~|;ZP*I1vh@Oxqoar^d$lW7!N*rV%^uupCM#w7_dP18EwWxOSO9TD zt^>@>Xy%Bc<6|v7ow)aO0GHaX?2d|%dDuN(0rgr6!}mK zf5f)>#|&pg#QlUGtdLeXuh@0@00T9Mj#rk=?|jT%eC@Tmy81Dm0lda(@N(%{+1|<0 zDJ_BI5uaAHTH9kOTQHXUvrJOUB(qVHnebN9xpOPv4SsWka=Nj(%f!a^^l@v?{e4-X z@Pu~~AA4VqBq3KJ^!O7R;rCC>9kI5$9A{O@yY2@44XOK@hUrf7EmoBYDT$GBn31bP zkLc+$0rloVp=4$2+xWW!!+$k6E|!p>4gtc;1T2Z4u89Pl4g=_Sz!~Eq!4fnA z9@a4M^CwOIBRN4-)I#D{>wl{Oozta7WNdZ0u>G~2qKUYZ|L6;`E69P2i5Sod?x8^q zN7ll@_-6NO(!3ExezG1GL_oPrtNT_&1NttQbh){7ThzK+;weGB9x%IdnbA9^+gCaMdkWH7rqAqpvO-q^l zrmpM{r006q|56C_2ra@FwZ1G*nKWdze(`(yAsCbv!Q@a>sl)>Yy({4#8xSD%Z%d** zH{|fv^@1vH34*b`=NpbdX1J=X+)S;i9@nZe?Q1{Q^`XS2kv8gDd(qhKd+&%`eX6C~ z2`)wigKe1zh5dYa3fu?-l|OuJ+iKxbC{;DolG{L2;|j~GtMer(Vf6#s$7DzWUCo%t zfxrp@kPt`Z9Nr)ffiRSxA?Pl9FzyI;Q>vUI7u%tyvG?gq*PcyWf53wYI+x z)`YB*vRy73(p|*Ov=sz4Q-%EO4m^(EJiZ*d+4B&!cU%}=SYkKkj|IR_cc=Kd*id9~ zvg=0gV=7S_tKQ{sH;-eiu@}$p1dT{CQ%I?ku!S+)&w76!!n&fqQ~d#LU1g~Q4Gr!O zL5b}A?ZHiQ^j;$8LA_fK-D-cv=g?z<;78JrsaZ z4%?JNGZr;CA1614Z5WzP{=HJN&~Kh?agw+U_Hwl{7f9E;YCSO1Cb>h*WhAdf2&A5Y zB4&7GLv1tmc;ur#FJ)b>_OyfxuxD;*b7SM1B^>=qYddD(x7XeP>bFsA*wG4 z-z0W8*6>;X!;%ym(E)vLcEQxyIZoyIH{k739v(R0qeFrL3<@*FZugZ{%dy{+rOJG^ z{Gi7;uWre?xVq}qtfJf=6QvS7rSFOlBQn0So0kg;6hCGOPfk8XNFg_>XU9#xV_eIE zk(4%X^a&LK{_{r*3Jr`b{XD;;xGwL1*uah-{^!{H*$WmL zs+6=D?tpJQ#@A;i2sKAX_ttd>nBYzyMWO`}R$qDVNZG5cot^xKul%I^t~!1k#9SsX z0goEiBO>9Q!R!)760Fy2J7T~bS6)7%5Oc>zJ~b~U$6v~WvcWaT3k|bq(ny) z`}8T_A_mSgJfK2|`XDX(O<)XpW{ZOE+q(CV)a*z~y}5htgF2ufN@YE`MS4qhL7^+Z z`GYs-^~z#YGb<}gURM{DErmBx(iAm%p;t~JYEi*!aZu+h+7Mfm&lgmJNAE{i=K9#W~ml@)b zAcIQu=aqpTXT#7MS)6ijudFr%xDMzvprWO}*U)KNu`E7*!6G=qOeH) z$mVfF9Qw}5p9Ol*Nl_aEz70A;3u*`3!Lq*v&I_Z_;5kBy+xaXJHx#PgWv6yLagTK}XG?^eHbd5*Wu` zBk0Hs2b&Yy^}f3$lkm1dm?}DpPB`jh&>{v&T|YW`aF7#53vbl?h5){vL$c)=PNPcl zO8^vbH6__BCc?Mat9Q{u+LVeSY1^{di$gzy zyH8bJrLC(g%}AtP{_q;Ziuqe(jkjV^HI;{W2& zJJ%a2-77XO&4Z~~=XLrSoGD+zzKo3ia?8%XS~kK8M~G3yCMISojWwdd>cJLfQAVEA zCX^eOR9mM^NlE&%e~OMA2pJzhWVh1J%FBEVqYILV)-v~FH=_|n{EEwC9?wvujT^MsHk-J_4yd0$p$zxtD0nIf-a=TL1b54Ea>%@A9A`N zBHlkZgakVr&6+xSp8^A0K2m=^{xV_%YJU5Ub6m1j+tNN=#FrCyD9uA$FM`MIa=c|9 zfx{=2{P2JK6+kLnaH)lz@p5`p&a+W`3tM57U~28yf}1SCBD%*?noy3Hj~5W)yWH-+ zP2Ie1Ug6A`w-P_2(`$e`Awi67NtZs6oKZa9nm2*@_IfZ-Gf5s-WC3a47Exn2=1y5$ zq+?KOU;1aNQVDi#!vQ$1S@yaZan&~)B~!*e{J`J!pCG2 z$vOe>fVAm*Fm3hs)hj)qV;_4BL2^-jDJKN^pvxHwpghZ#*8Bg+$?tG8#B{}iUIhZ( z==Au&$1x>a>A;ukLenoGD2NY7ST5Y(7KW1!xuuzmt_pH!`1$hXKB%yp7(;IN;Crmj zbbR7@gC2zN6q0zcn{{2u-skq_#QES?+9z4KoG?}O%dhUq*;3~FetuVwihlpFFBt-T zKv+P^cogMh{OlVePbz72sM+fWV7hti%oTjC3ckQe$J2bG*DUN2kRM5$J8rZ0qw!Pz zG-Suu-_$Lm4kW(j{JuM*0$w`sI-TdwOlw3EHV)B#eLwmnu!}2meA-isQW)9+JtvU! zN(Sxchid`GTct!s=c6el%NMKF54f1-X(Q<1-cnIJ$NVo9fu5qbc~?*kSJuOyLZ?aW zm)`rFCbjZl$U}G%PUoI|C+A@$QO>;X`&NnJEQ#b0>g+2;9O8j}2`RzEq@=mP@44rF6vw+6TuWZ|QzC6b4lr$TdoMyw3c_VGs7>>jl3 zHiry+MpaJE7R-5kbdw_y)`kb!C=E#HOi#b)4i~h@WoB$#t=XOF1E2fk;dH=G(j6)9C$)bX>%zNHfFp3LK(Ml`T=ZCB#DRyu4DPjVaJJ-Pheo^E8 z5H3*85O)>lIniG8Dc8$5sK7^@Ue!4Jh&J4`?6Poi(Tj+rla4X*<$mGa&;-pTJ53?~ zbWCZ*{C~Ta7E2?Ti!haFHm3I(Kyrt*ET_%j}yFYNi;q zptqk!OnK7No_G+Y*KENhqwgpFVP_c>de0=KBvriJUKh0h=^a= zV_HR~-R+`*JQnCj-?x1roU1^H0v^X4!Xn6Sug))J{t7|h-AI+!0@>U?(3lrMc7Z-3 zFk+}Cnj085qU$~8Y2WZ(7p6s*e#-+P2u3a;ZZ@p$V;;U1e&*NM-;XtngJZS4e=6v_ z&fKNps|5KjSka(^B5Ow1rPu6y`fh~`v>H;Kw{1v}ot~l$f(AIvXn#~Ou%Z?^p0U}c za%athrU}-JAO$wjV0Pm0q)zmUzj$*@*X*`XN$33zgvRMv(;i#s^E#M3xAM-6`S1bn zHW$`=z$;u|*FD&)`hFT2Jc##(zc2&6kEU(-%S`9&A%!6W%++Cgn>|A!1upwJIB=b+ z@OvVMat8G2F8C@-mmO@rdm~Jc_!t=(k#l(S5SD22cY*8u<{RzDstOkU89X6M5A0+Q zL7Y0Z93z4rQD;Gl{%n!RAMCE{d#`Un0VE?9Ps>409NHG~I9sk9fUYNZT_OUe7`eO= z>JZr`^!+glofq)P!D*wtK3 zZ<*iOWTD6L9oaV;r|gmVN6qg1@yPZataoab@;+apZzqdhC5^4gZS{pi8q^X*afxiBOH36&nKah++KqQ!Y)L{nF;0T zmDmjh!yv>5H&{U$mzF4!Am!y}b;q9zB!AX!&dEV+g7l}w@Mhv%#0RFRG%z}rb(b7& z)iMFYCbqPCy2RAGnMwv+O_v&dIwg;D6qzM|2+e|VbQ9fAlfSN(CFmbS; zke!f{5;?TC1nVu~Zu}j%eRbgTz;9kwamJ9e|xIo3)Fmqg5p z0S%if|Fab`+)=0$dkA5G@|PEmy6isKCAvWgar_VvRLL^<37vdDejnXboMg4c8(Du? zO?<)^k3mDAm>PUSh2nG{g-{cFB~qSH?u(qZc3%}_9aE<>!)HzEB?Qcwz8BQzYt`tB z<+97MRYb5SpJ1cxHlA=U1RN>4y86$^;xp67CroL_?#a{S(y<-RxDK7gTnwHx?sD_- zRqE(&(er9+C@bSrd#@c&d)?dLF9*UkJTp2-?$i{fPTbzmB55X-RT_JB`JSTi>z@>A zUqxLjVfj1^(uAj5HpjFO>y(%GW_?w>xxBJX%g0BVFI}5Age(>D`8o5lukSu98qUs1 zG*7MJ-gJ^S%kg~9y$i3kMjXMD5jn#9wppTn2UFPO?|(RY$Tus^v zZuH)N$$RG-b2LIM@kJXilp`_Gu}8K2mT8=tj#U^L3tku)<$+@7=SfohY7>Gp_d=ut z3^_5ZuQw)5?C~bVR!8IHf#=|Ev#AbrPlaOep#A`kC5_(H$ zJ3ISZL*1QGzA`PX)~o4c=!U?O7rIY`l8mYf2Pno`) z?One7Oa9@7p5bE1n#Kj4pxv zos@#<3r$8t;`CZ_)7$A9Ztqx3CT<3HC!}E*`@7x(4 znAg943>^dliZ$Y(vIc@OAj6K1X}^n!kff#>%tmapH60KWrJPO=&C4VHB10~s;d<%G zyLVXDR#q|3n=WC_8;Wjm^rZheCer0q`R^x6>dJreiA|6{=K69uHC>5IocEC9`ze{; zdDMYo*zAQ?JkY6P;yZWpl_?tKZEK(*m3L9e>gogWtiO;CoRjd$5}Qs#_UbT6QqFh6 zYChgU`&v>`S#HL_$(g*oEbBsCQR`Y0I$i7a`Lh-J{rhwRj1h(1=*BlaDk++*h{@#HF zb+LGR7x6d6&Hf|yFl-&~$xBT@3v9*3438LT5_`IP)z_9HpDQWFcY2#4zLm~!EHq>{ z?qlma(70bPzAoo!IA`KI+Zq_s=s9gCd|Z9p-qiv9q;%6E%r4uV4l}v$rtMq$Xja*t z|F76k3> z@?JM40chdoog5L&50&ZYkAg!&ofoI@z8TibdF$Wb+$7)X>17al6hG;I1mlU%*+x6| zI1y~!Fw-xKN}@T^=#mS)c)S+|+Zw57iJo12>*aJWk2Dg+BZ^#^{4C=bW)S?5W`Mx! zxdhkO^sj~Q?_Z81ny>qsQEPU^VdcmpjAJx{H%9K&ePVWyTzz=*l$D|7LsHVSImF4m z>w}@@0OfpO6I<>g*VotGmb?N2QSc}T$jBB|_)a`U`v(T-Q`pe4CvtUI^VCO6D zhVbk6pBPvMChWhLHB&iZqSoskFO42CJH|tnq^~7Td#eV!`_}W< z!gsH)MY2##`9J8rFrw#|UGq_>`908J*1|MXHE!)#lMcVfDk0%kXF5-7W6}0*Y(+Y> zeY?oJU8}j`HnA#AOtF<$re`v5>flFNqPs+}whvEkaNr&;<->3q^eKA*6C($A5#^A; z(9gO=#3_Pq&Jwzj(W$A-*?F#BUJr5T>P#s)Q~HSUzBg2`vUDh{@6S(Q8+@;?tqrFU ztu@;Ir^abiI~cyCfPV1#RK?F;u0&Tt{$9<7bD60g12^|u_{uu0EEQjCt21*Jw2Tj_ zurt+(IcqTet980ULgcp6(`6Op&NIZ_>oY?-URM1lc{zUFRH4d9z*f9DS168xV3j~F zeQN6G7Zm+~-mW@Au~e*;DPG0E&-S~XvvB4q%hl=Lk_z}O&`lXRVq@ty`%axWDmxp$ zT0eTgQDNa>vrGM~V5YhbYZBLoU*_fJmA@MsMnL0|iR(i#VQAnKoZ7@q9(7T(;)7yG zfz5P%ZMPu}oqAqxo>dSy5&jsrlgUqL7ck-^cC5MJx%h96nl-8SWVS@eyg1v?*m`7Q zHzhfxT;E<+Hh5`wch@hucMZ!OAR{@EX7RZAYhIRfN4%8ZaymK;tWFXy*maYWQ!qyD z^7~jzDHSu45Wtcf%}yD-xjuCBCDUg{O(G{;Z->pd(;~C4{-h2EoBr`+;l~CS{pGkFzB-3 zCCI^%VI=T9tQfI0fBEvEnkkL9pCDB%TKd2$Ik7=Q9Rh(!<>9aHe%XJ#j|Mclz5CzlWR z(Pxw)rdY0wRM_^$guV8_NjC-JVuFenQ+&zE&w=po@(K&;Z}x7QlFgv3fr zc{NJnwCdaDX4&nky3lF+xsh1LO49lP&XKUfXCf1YCBlQ`M7WknFlHT?gVXMv!%&nM zO0ngOIU9dvAL`63;<6n|bW$6cA~-q?>06l=e?9bmmIeQ%^z zd{s4K$tcT|RR8Gh7v16pys5xlqz+TPp9^mI1e7ZVV>6C5PTR;VW11z}kd$0-Hs>b6 zZ8(xLXf}Y#(`IuNzFVY&&}dMdYLY;)o!@e)L&rF?d{CiRf{d!@Muv$Q`Hl)|Gc#N_ z(_?St3UyB7I_2Z|AdSpT_x+9XO})7eYD#y?zWS*S&g|!z|rp0m@KjP-TQ#l<-ld?ZbobCT*%$>Md zgq?%ShjP1_bbfhply^s)@0Y5xc=1swytykya`ud)_|tN?%G&Rd=iqM zeJ0)uuJf4Ni}Ml`>P)a0kLpKyn+djrlRfqo!i>5OZckbXx65*&WT}Y$xSn99&xsNb z1kxX*59~yCUdV(%pUZx&AC=yV7mwJto_KIy8^BR25G60|cJoRu%w8_*+6O-=g}Fxj-^w*W4S>F{|Phf zO!i)>stpbQe)9ABRs!&O@#2LXV`9z-az%5)R(Qr6jkZ6-=u-L|BO~$IwSxv_PL901 zyz-Fr&NLE>iq@b*=Y?|xGT~R}NQirSUv*bkvBX1;nOZhnXiq+m$HqiMl|0Eux)Jcy zrsm)%)qFmWtl0X5rAJA8Zde1d#=zYl@$qf*y#72Cm^LjWtHnTTjGy}hn=2Y(|!o+z+&dk9% zvv9}3VOQ2Il8|_XPgq#J;`!9yd89GE%Bm{&xXd(lJG+CY*=!MX)o-HNeY)NNvbkXE zMaRPOTs+AR?&-0Wja^TlM-bQxQ($37$E75y-Tb7%!@~;>3t3!STYELO5U(ZeRyVX| zIj20E(znt-IGCr|8y@w})Z8UvCkye<(wYX{C85zxq8VdiVghD>x58~!fq_-}tS7rN z`Pw7DW;(ZKC<19-cM>nJoo7837gzGJCgx3(RC;|EWB;|Py876}$cn3Z&kE9uG*YbC zDDMpcOTb&ae4~m=>bW^ZAuB5nFE8H%*}f=b7q0h4zdxFg@m|rwmCd#C5Zzd+<+8z0 z`)PuEgN(v+oTViK^gs$NLW~g=4G zOo^`6{BV?+*$C4QUBmag=}cL{Xpi5lA1{DycxQNatP2(cV11m>V9*F@8ZhH^#v2@Z;w}A0e(|FnNSuq-}^~O-gVpn%v+5F>IKz2UaxgCTL@8 z+f`QfPCDn7-vFv$C&E-4*oI?lakum{D6W4#YD`4e3f&U}U0AqmzGi})h{)E_wr#;V zcU<|6t6;`2(XWRQKa}3Eb@##U$?ja${TamUjgE<#Q;|EP5K#G}O4Y!JDGcXX&OdE& z`vJ6sD=+ks4KQLAaFLzTacCl_a`Wh?Yiior23fVA&$nN;BGrAQ`S*P5H&0kpR1Dwa z#{)S*N#d*p+px2LJ>gGGPL>W9r-)k(o}0US;Bq4RnA`MX3VgMWc@s5HPm(-~r6U}y zgv88f)wuZgryE`WCgzljbj$&j8o$`b&_)okb8?Oh{|andU|{DDuBgCAx|bzd>S!xq zuO%&*p?>*Z*^rYs&w}97Cx)}rEdLZe1A{e$8YP^7kiy?9`xek1?8!U&)Yis6zHpY% z1wKMtLPq;c!`+(SS8QDe1t9}g)~3$yE*mlme#=^57WIUSe_#u1Q_^sf@T#5GFdF;5 z>$LU&^UppmC1uCdDMRDcy=5zF+C-^QYrWF%zk|oEEZp6*s(vlcGkg2ld540{4<9Ip zmR3jSz2B-|0<$v3TJtudb;E7@&-IN=$2SWvVt+SWOWytoHB|won1O+Lk2km6W~&w2 zsB{p$5_KJ3b7hiGUCGhD^y1Ar?#vXMLG80p!14dfOC|bMrU3K0grX0&GYJ-4p!8^T zc&fET67|Q`zsCj?qM8BPMSpf0$s+C_LKU!darv+i&vU(%ZgTN!hGBCE^=*GMZ zYm+ka~5gO1?A!NFkIOS*o;$f5bxR>jnfjU^)VQz@4Gh6ZG%0XVVW=47Fs-cC&i;F4@_E%v?DcC1J+_cU zGa~+Vid+tu_>rgl?jd(-RyZ~*!rpE0h;h2wC}vK&&;LOZSt@jFWAVS}-wf?tcqAlm zwOPVd#R`k)f0_*Z{YwS~4l;UU65Rbmh zEt{m>Kg}?DKCk%J{|?4}`H#kiMgs)&I`yKh4f07eOM(KfoF5u9=y)sJ$(kFD==?8JnLK~}+539qDt(mplH^5rM!x%a!Q{yj1` z(vi>hM9{0@L-p|+#Qv(!<+zD2K^hj~I?@B0^JsW=hD3G|KPQ{dAL1`Akx-GY%$gt+ zZIx)#Hf)a`VC_fN`1hn3dnW&UD>;)(E`|HUYm@Wt-D?qwKC#BDjH`8|f*9(K6_@=% zAM3NuN#mEcFGChacp~l}kdSBpDUk4wyg91zmy>zQrlQif)iVg~QYj`4XPo}W#PiZc zI%T!BJ%F#cg$1N+U(>QCMFa%U&PjM=Rg9V^5D=_yQ!fv|-;Xr$Bm$C@%S=ar>^Rq? zpks;5nG)I3LaVG2`G|8>VV!1Yu6SX!q#jm!#bjU5w|~#`Mv&=JFtHv)^9u5}w%og@ zg)VEg0SADQdE<6AHuh#_X5n1oH&`%^#tbnhxpM7?^&pm4fJX`9hIc?HI2l5;pV!4h zpy~38Iy+1@wp)RilK`Kh-~VdoM~5$G%u4>s!}rRMrqf8P zzQ6gX$^0%da-p-NUc34Ev$Cp&)@_lK@GCoh`n;tdhJ*9r7SrbC&L`J06_tG1KLqX? z{&2fR^VdT+2iclMmu0`VXBwZ&cjQcIhDKM|V}28PbFowfxx zh=9h>phrbT6FkIg3HWj!{^^bNEn0f|Xjr!(c-z?9fvyc>lEC$}@U}`$OM4N;hX|y*AlDiW0$L~>XGKL-VCG`G%MjBBf8#wudH$}sxyy&pPOI!( zKQk$+TxJ+i+c8|GGXbB{JU0*c@l2CJP>&@Duw?n#5tmPkpTU+$O#Xl+3HwjtrlbDT zXNH_Hl(D%HIg@#s>$}(Re*+NjGS&O^y$L?Al$E@2huj%R@pg9PsUNavWeb+}T9iQ; z2Wk(<7p#1IQd*3=)!#i9-RnuIvt>Dn1$F&MiU;Hk6o`RV=UU{x8{YJj=JvY^fL37k$eFQ^FQll9ElBdIJc?6ob4B9^n z-t>)a%AYGPJUl{j;MG7R+2%3Xd*zU2-yb))1!Ey&8@HzjxQ7s@C#4{h$3@1bER-ex zl#^2=r|mE_NF&NlSfcCViSrCnjfO1ybKSa)*)(=xA>*{^N!(-@vrHfO3!#NSMBTv^SA)}HbAnAsh2tA}x zYO1D{|AFNR0N!^+nF#nEAQX)r{zvuBU|#|Nx@>4jozz?=@-MzZpM%Tqa;&Me#= zv(7`Uz~TY_XL;3(&|uKa?G^-AM;mp12whs zCPP6H5;qgB_e=cnpEuSas=2wjpr@$>=uB|*8#>1S`A7rr+N!eSiM70(EKMSY<;%}! z6CcE0kTzWHph1U4m6SeUy1xWind#})wq9vKbnYJ>3hF((`}X(B=WjV_#90zDQ67FI zBqWS{V$lsVVoh(l9c#uW=HzT`d0M2jE%_w}v+O}&zUeMFa|dG3tpuiq)WEB{n!ajC6@O=EzC-N@0BMCTi?c44Il%zc{zwVB9unkZ%o{(lWpcCGRJv8NibfZI>Tf)K)pYFqq+R{y5SyCfh8m}2W=0hq%>n%d+J2{Za+!B*m=b&XFB<}!{FaL0WYyN!en*48HJd#C zm`7+J+;5znt5kDxxPSioIQwkG^l7oR9^r~h@Ve>hFbQ@t`i*L48;TO1r# zHa5s3^y1~&vLiCmzU=Ag*dVcYMskUU(Gd6&vv8)QUp%hvA5?y20B6h8mVo|$!XwD2 zaqmeqY;4e>SLN4)0JpGk%h4A53(}3LEq6(Lyat~eS{N+}=ef(riVUwdB*<)}4(P&H z(=vRoA!C6F85FpqJ~1CP++FF zSz|k8e6SdNPF}q*)MpeGjRNNk*naQ%IjWFP1^6Q$olM_dt@ymIHG~(4M@$}_t^FUt zzoR3w>glx1%(kXlC6FOy*W1D)BRd=`T^A0X86);F(F3vawZm28R$D(O!xFPSIfY$X4Dl;)Kkc@E1jm1Vq@n!O8$0Y?4Rb=m`=18~tS}21)Sv(UtM8sp3nsq$|xig!`$ELnMBw!7juyyITw(fO|2BZ54P~f$uK45lU%fsB`HF=`336>S{>z5 zl!CsVqkb%4C?FsQs^;1`*Un^!YN^3i2Y%40v7umObT2Ye<<76kC*@5|F@~H9xRxYp zjB`FWGO%G^ubVys|MX*x$DNB+M$VeZ#I9l`Wz|2e9mRl?K)}XJ8SCj;8VA`WNE(zLJJYi+#DK!Q>rDH8n8^ZBrDB2g~OzWS$J-=VCGn z2z)p?(%}yvyM;VP1{NSQLKC?b9Olry;_G=$2SPiX>8}qbjQ&}^)Yj4YIlfr~Spdki zpZk2`%Cel?B$p>jNlwe;(=?fv^);lBPb39jY$!vBh4P5%m$JK`Ld7e<&5aj0`%hW- zJsIi|dXth03Qw3~C}|lPBRuA=poOXvdU4CkM?_EhSr`inY#laD{Vak`hO!C@3*W-) zffPY^T<+S{)fIK*eKrmjOJCpnl^v~JDc=IRWVFqZo;c20SXm{HF~#O;v(&m@38)t& zt|UE6NW_N_gc2&60#vImOJ3KFgE!!d33@NbP4bkroGud@&H5GUu!1-PjlMAO1u5N+ zAgnFCZ)LfCpC0)3!AOWo;kaD_K7o?zJ0|JUf|AC>v}rF8CVfx$U;axb)M_eykD2lf zUQu75S-`7Fr^F8ls&X$_U?5J1dAaw6)tcwNrz}v8{O;|Y+sV|kjaOU8!j%9#9?ub; z|5qok|64=|v4!5#6aLjRvl6&FgRt;@m~rGo?TgGyTA)E`jTrn{O+HH7^!-~rUqQ?* zf&A=80NX}nH}eraM+kiwj^<%m7HDH2%Z3l%4i%u~c%0UaE(TFk(VjEL!aP1N2xLDRF?k!GpgVlV`1T3J{V6wEgolJ>`cta z02f#l60B|X7TV-;>(H|M^5x5<(9cBh!*Iy+X&s zgI#0b+mDJY_0iunHFnTsvF(uf?9WUWg}6?Lc2T=k_3NEWIq~yT-e%9ul+&Wi?tVok zLBZ7heWi&fQIIF%<`e0=Y-pK$lH1ibi-yB8|GduP3RbD2jt+7Tt?;so5M(NRkM>_0 z-|UmaNq@U(fN}wRy;#NV`kaVKT)L-mb0B=PH|uX^?|Z;w;9NIjSm&J?E8f%(%7yk} z8C4u-7rQQ781@#77pF~OOHJp){WLBrUw}vWNscqcqFi6-Vgcp$GdeXKQw4nZ*_FEp z-x-!sybUegQPUenb{z#!!L1@g^7CJ=K8OUPx^Su{1zN6V=61bAsdgj^SI{IbS#Gv> zn^X*ZCM|XeiSVUwe#Yrc9Pl1uMv`D*LVjS^`6Cl!XJu7GKbTs)Qu5!RgY>HLdu%p9 z6DWMAoS5IsoJ=rWqy{zouZbkCH`0M0!0y0Bz6(&Pqi^zbAr_$y{!BccH#`<7hEO8# zB`!Kdbav*$bo0#Y?UCAA>AH$>Kw64tTW04dp+QHQo=%G$cc}N9DJ^=$@#uweX-dzn zwACfymw5BfV;)>1ktTP?SGx?nyn&F<{VG5XWlE$sGd08f&6~`I4ExYf1*nyts%?^a zBcNSCP9VX+W9M-GdPl_f22J8%`nAIIC%Nk&v-c|)?8|y~4L>(V#OEyVK%0c0RA<_PZKdlQAdD4K$fk@mIcxPAgb=1bBBBY}`f{b=N7%#HHSzr6z3>}Ga?EV7G;eT8+GW&a|<;$%)3DEZ~;JMk8 zAv|K@HUJqU6l6J2q98*Byvyr)`Y9l1^P1^>&$Z$bFO?aAm^;W)l7x>QB>!zggP{|` zH z!Jh^zczAj|C_Cj^iW8k*06x`N7YGQ@c;c}mE(vl)x8-Gz3KusRP_KNL?mNA&kp6bt zvQ~G_7(*!}tL#$Y7Qf~W~MP?I2F9yg6vvfJsr$%AL*(ttbghZu~_B^QP;nM zP)5G%HC)6oz*L=trT|(e0)kuITvj@nYKLs$JNe@vX39G_|zf}v7s}ud>_McrcT9NngVVG|50!xb<&ueTz$DT6A8B!~KBw@%-C7onG+@=1_L$&`|71ImX|= z=~~Q$dhFU&FjvO{9>81^A~!D&9S8GJ2)nNCLeT4y`&Nu6TE-_P?i&Vg&HwT3m*D5m z(P1tBy$#O=N*IiCztu`1!l&W(*S@R2p8^!tHZ(TCuwFZ9iC9?Crt>oljKUGncvf1; z`~c94Sq?3-?c?C!_4U7y>2(N#29^JQ*MpdVg%eAc($_OIKuaqg6BWe|-HyDL!Rv1D zqYU1$1%g~CQl^e`Z?%ggIaBBpd&*KdV7x&#DEHjrJRo2Crp4h>_OY?e_-jV?*tgJo zqoeOJNpOWtd{-CPPFGb`FE9N{IKn}f!nVFi&cH{X1l$;+fzGFz54SUofRpGM8Lb(s zQ8HG(aG^^By(^LF3kD|UOOqEE5E#^WQ%9G0`Y7Gtzv-EoPr$Rw_mzl1nN=7mTC`U zrzxhXlg2h`>C&g(Z)K!bcP6z*NRtMgsl@JQ3zvB*A_Ypv2BvC5ED#kO19{ zp->0G%Z^XQT_aF=cCJLs4K{+P>p6o~JRYp(`1q^{<_IueZW++=1A0*6tu?Yi346bm zEi!O=N_am6DPOxMjM~H;bk$Fvkl|lcQhb+J$eo>w)XZ@Z3m9 z+kz>$c@?}Y9ma8eq-3O^ab*D?D-s_^+gSfA1-^wD|Lf+@$si{pOT~;>c9xZOr#P|I8?}t0chuEKu*f04y1`5fE1D1$6uT-wMY^Y5)e`lYrOZ>$sUReUS3cC&p+I{ z>CscEHn4UfyyiDD9ZOc<+$@0?k0&cH3wxjMiS?e*a7aifK4}pXD=SiD2jFnB{6`_5 z^7Ho^VUA;i|G$RVzvh@07E7rdMBwk9idX)AV(YN|2lU)|>-!-Y05i=Na&EP|jr^rV zPO(pQS)#9l3A(xhgD_Bk0}z} z$q5jvfi0?2l*)4wpN8%FW^dN)DCgSF1=Ory-Gh4|7uxsjny#WJPyZ|Cay|R|0CeM> zIiK6O4$P464__KTWqGLm;>iv^S?)#ktNqfTY4e==g6w-qEBGbDL17tJdq|B}L6Elu z@D`7U2U!J@XsdoJTdKsq75Iph9k=E1GGq-5#215;IHiCu* znJ{k0RE7_cCQqN_jmSc93=LaRYi~Mj<2H@@yy@W4^=fI8nveC9d-vMzz)<(Z?35sb zqqwYOWs9eqF%^L9@~eK_sXamZXA9Og5fM>Oui{$sZ0E+_nLGWG~cNUQOyu2lC69suqeZydJ(I@~h{X{I4i@)bD zS#K7&n&q6GahpYbvVg_%@QL*u^+RI;jBR~lR{48_oP>s-A30k7i>r;zJE!Zp|9m{} zBq_^*MY^zH22Epc`-9BP@T!&7#;;wD&bgt|=4ux~7*2XMz;%ra$i1wg;Z|uwA(32s zN4}g}i}sQ2V3z9j?#<@SM{^Sv=wP^9x;ecI`7GcJKbT`-i$Jg@cLcetsi|dj^!|{z zPeNIlW|ojEQjl4|+dKa7c$(}(f|4G>3CGLNt1K`7#jPc}N=>u)84OIurJ`CLi^LTh zMKLxtr73MZ;JuxIZRI_YLOVA0duRg~c}z_1ryqBqyMcfp5snpbPnJq`=|x)@p+tgF z2rK!;{M4VcG3`bi>Msnk#8KKs;DUyMMFlVqhCnRj(AqQzz|az9iAO|{NdWM&e0B)o z#oXF()yEIuAAq1vg_9EtC@G+416ezJc5aaPln?S(+>am2IQZpFa-!miQE5NL@97z& z0}2EFKhRM4d1TvaWHhvq|NaZ;u*=J@&V)Ct3zBA zR!*Fs|AT0@Zqsv(t=q7ORo66{|0Pjo`@3E9@{Gj4-{#1H8A?D^q3-~+pCYICqc`w0 z{`-eXYOs--{hmY45qf#kgM&T6Iks`MwSdH`6yqN}iRlgpxd=elXv8B3t+_O-U+2g%UG1#? zu??QstXhydq3HixLfl-%St8b zS^6AtX)3kO=KhCm8b=89c_#ghlI9P8`oyyJxd<7_HeS3Lef8_GB*e+f1x%nD;8~q@ z#%fLNpAXxRU}Iy;s+q8C6MY0B3-Fde?q{YI#rtF#thGB>huG7XOqvL?k8AC=xmXi*-3rm)t8q zA$o+o2nll0dc(eO?=DZkddET;z>BUQTGq9wqF#Y1b9&Ex`mVA8F3c8$yqH1SXhg0A)5tN7XDeEkAu5;J@|TJ zL=;8xhW9q;na-1tJ>TQoc-`fGE`AG7nQ;eIV@u0JSIZMU)6M5F@KKVIHjD~b3pLa> z&rA;(2)$ySX?GtWU zExaogy-@vErM;l5_aE&uP1u)bFQ+`fDa69SAb|TcwuE}}ba!h@1|$-`i0DArwIdJ! z-55s?pvPi)pmZ0g#QXn^1vIZ~JKKl&mL3xdIwM4mcdw28h3^VzoBH}^rBW@8xz`9z zK5KxL-;Lr_JjlSof`DH~D8RMe_WTh%BXC17^YKWzo1?*})5Vqi639Y9w?(4#bn+UN z10>LqxXLY@opBA(J%s~pZ%^T^so?!rUtn0<>wK?y5Pe+2IYY)ucRzNprM*3_Fdwv& zM;DglNAr#%==^REc)$J^EQSrVN&B)jB+$Z7>OfS@*T-ie`v^#_c_CSTnA?*CoNzqR zd);N=%cKr{kBu=W?-VZ*zJKj;jXB6>1F8f}LPC*YcL*4-p1r(hbNC3J9AM!v{u%*A zo>28D#bX60z3q+1?e|b*y*zU)>T-yg<^_^bps0Coj~UkV|A4>1z{YN=vhoHd5774t zyH$Zx;vrqucr~rrxp5;oER4Cng#}jNwd;-+4*$#iL1ne7iTY`ClQ%sE{0jhM!x9sg zkg!!+%8>A3k|nVlPUC%0*U45VudDe}t@^C?@!1JjS80Iv$Qp3uJMR?$?d`Rn7DhBy z_a$t;%uTahPZafxIAk$+7f2(+tNfvScYpZ(?N_MD`6k}xRv$|`x$n|fX4k-2)mSaq zTrD_x0np4q!p1%ZHjyY$<-iEnT=%Li=w|er-gmQk4+mtUka}UmpSJ2zD?z*78Rrn1 zfXA%&Dm5A^Kl4McV)>d_UjH7a$F&gavl^kni39nBU z!tiu;eGT|(Iz+RPT5nTfPsqK||;+~^p=1gk- zIo?an~sqc1c0U12bR399HCoprpoEK*2Bge#uF#4nv@zg2uKo)h2IZgPWqTxGTk zfp3P#!h$}P$ihW%RzQqu+ir0|*FP}$5vA2Y0ZKw2c51cW_#&pm6HAhs;Nzh%ua9?^ z-`!@vFMdxE$H9!R9Bdy=`m813${E*foR?ju130w)c2N+RtVLc8i_d4$(#Vyr$B)3> zf*Y%%s;LS3k?8sG{?7(#MHW1Mp`k7M9Lk5kL)O-eH#QO^qyngccUu%kKO9W0?*WVm zhNEW*>WXpnMF#9)fwg5Rk^4`TRWs<5~<8sJ3yL45&?5o|=L@iO10>pI>raUQ@1;pX-riBD5j zAuJ{$f*fFwyBv&ddp6E`(0s6;k_=%zecF-29}kccz!Bpm)RBiIS}T8xC_qvLJL{ZH zcVmohwLZm%by_c4zcil(n(=AoEy1Lz}b+FV}jbFLk zB>Xr1AJ2W`OtD82UX*dPD>8Il0Wk&r&RhFCy>eq!?@oJ%rUc7Occ(vm_`sVoNATfb zEaGX->j0^4ZchS)2G1lLW3Xx`+1zpkQ;`W5>r3i|BFaC_RmiUHJMYDt*}a_EbxWlt zeiO0OBlYgx!`OenjR)_a8c`%7XWRWiL)EB4c>y`bVAhg;(* zYH+#Zyi4DJAoE##5yh>Rx{|F{?dcH&)VC?pMKfq9NJ1S0NLY_fPO>|R16vexqJ|g> zRwBK{ooEP#qvONx1yo19RQW{pGB){|#I@;QS(@AZ;0chn2;OASk<>fT5=is%;2#uq z!)#>Kr#UCQ{elpUms&pAV6=C;F-K zkkV{P=|$=XHF4TK-E$eC=!YIxqk_?wdcve+kE5bvEDw&HUTV|?O&cx_#oO@J7*Q8F zLg1zpB_SC`RECnQiP(Y7bWQy&MVZ+|Ll3X4V=Xp7KMVc{{vuwvoz~D{$7!{ypP`fk z`Li&-NpAf2kC#Of>UY4p4qVQ;C%J%c?VvGmTsjlwT;mpBhgM1Zu!~d)OU6aiOlTPk zKAWlD{s(a;q>>P;g%#Qo+57m#yQd{NkD*c-NHWO&Q~~SzR3zSf0KC`Yxb^k?QOhF|a-#$PgCMHGS;6)}d4U*b zG4^MRQ0ccdUdwN{4G}~LUP8FzSC76Rocv2vP=IA@&k0>@<(70H0uff6_0 z8VydTQ$MY5!a8!v0;yQLC2>6vZ2Og@=8XUKihatS+;6>0+yO>h``xIvs|TN!yF-BS zBn=?%_OSTJzEpY_noO7 z_kDKnv%LIR*E%Q}E(f4g`a_59lfAvizM(09%}dDr?#nV3@SXpqIN%!=Y=BT;0(^X3 z(@x*6^|`q;JqZ57efthRmv5v2j>v~lh$LN_W-*bPFiJdA66i2<>v{7<2*h0`#uYtF zN9;^>dxXNma|gqp_-?n9a}K6{S}Zw#d;niuyE>xV1HL~lh$OCONWA41I$bfSv=-M) zT29H3=~iSg=q#7SBMnsxKiK0bc)ON$dp4e4ZDnZ{nKbis8)C11T5itrC5|d_o0+&2 z7)HU%{Q4XP+Cduwi(jjgVt}YUV7j_&9v$Ilt)mZP;z*xqp3C;XZ+4$52ZyATl~GJg z#2`R%++z;A%wkf+t(kFv(a=nVUMf1`*DrHim3O3myV)Mn62E@HQ>{{{y{t9UA5y7T<~kQA;KuUuqX zXQHC9Y3shRnE5o!le+5Ar}Q!Nwqx8{E=Zx&snCaK%A}bF&}D7_tNO$QOQHnTC?D zQkw2xTp<3QG#mR|!uB3CdV7+r55tE|W%rYIFX!|S6!k@WuxcWeWn^R)Xc@leWPOgo z=6@EfQ=|%VI-^^})MEE(Q#cxg-Ro**7?~L7uiZ!v#6dDNZLT-PE5wD2SW*O?P@?7-$HkSx1yCsgB|VNUn3gql*FFcdt)f&_#z#X!sBtDjbAg=4DDu zZVRwXOaUc@dXsG*+;) zdGuQ0{Zc7W2-1*pHF)In@L^C;5Gxl~P_s^UyRv7Gp=jY~|G+?NvA(l_r)D+b`M1(8%+&sLn*jRe; zgcqDgcf~Tn5H&_|sIy_q16eL`9DFbI@bp2UQ>)Y^APqNU4NuP0hbRZGEsiY?dL$uj zYtsPu)sDWdtei@KjfFJi5XaSC0t?7trgXky8kXwx?Mkj zvkMx~8{=`_p!iZivty9+1N5C4IVUyATn!U33Wo&sJvkYLx2j=S1SaO;n&khcz z9Fb8l5Wb9*p+Q^&ti%9GgOf}-TzefCMeQXuDyKzwYHHiRf6Sm)LUh=DojnN0KLI{r zt7#7@eHRF4CH74?OaCk!B92vlW|PZ)P$~s>BoKk6E6^}gwqUI)iS2Gbzhfj@hEaA- zJ_REu4hKvNxJ0heb{iS%M}27|(~#p$ak;Rwv7zt!6ce`DE6EQ+0ZAcuVxHQUw6@s` zjnljm($X2fNmC(*vbD7q66zqD#1~!-DB&0xL4%P;Iu|b@cC}TPB{F)MvTqwIc|t*J zOlbdHp6`TNEaM)G;NxcG)RR8KX${J8p>o+-Fa>Qffaywah(S#T<`JUpkB-#({YgMA zz~#q)Ym=M0am=Ifl3L6gvwAvUJc>#@f-VYteQEta4ag)UrOfZ!MMdGvTX!V=iHuYR z76xKzt#}Bzh|oX=YGPudXKk8L@PUJpC|)W*KAtPWE}wI)!4nixdsJDCdy)zOA3pjYlu;=7sG*{$!a34z4yz)T!h<07(W zzzyVkRQ%ESk9uWt5*nCF;^X2nOACmEaA36+w)m$f#RfHg$Cd2J&q}|2CB+C9gF%UF zn}gWd63;nVrW$hU{o24S*$~qMK2ln-tO$yi)m6@rny=kJ5iQOFK>C)e34@bbe1YM`)yuOX|I`D8iI;@LaR?9B8 zg2nP+aK#R#hCll52Y+~ASZkx6faze*L01}(&wxiPf3FtKn2_Lk%dznin`)U?8E-L> zp&Wh@0u4?I5_cE%>hM5GoA`?DMcnfzk039wIm&RMNSydD7%1wg2krEYssS}@T0I2U zlb>ecYPhd`WQ<{wofbTG8k`^5+2|Sl4SJyhap{D#OpHIOt7F$q1bNFoOL2?Bl@FzP ztfLq0G=`D!zQj{P>IvZrTtVYzx;pQclQ6S(lFV4)*ta{yc#JUi$BGEPdVPZqUxQk= z2Yy}+&FDLS=YK~=M*28Rbv4XkfPzDuc!rIh;&FpEb68}uk61>ldAXvdx-i^9;DX7_ z?o!8u#5M(*uPwUa=z)=neW`wh3P@ybmJjEO4hZnz5!0o5GozbF*#DjpWnJ zP^cE9StuW!(XQ+_t&@?RjaTU46@i8Rfule?OG#0k&L;X4{R!OX+LI%}sRZ=MGC$a- zxW_56kmQp1V2U!y{kXiJOHIxDJXkFF&P|$+6Fc~2GFcWXn)gM#AP|nhkj=&Zvv`4u zUa27~AFJ2685QrO&!9=0E^BxURj6I5x~!q$BROAhs67&EZG}Rz7M*f%yM2SZg;%x! znp6S;_?DKdBKhW}fUDle!PPETvwFcD>gy}MzOxNMN?+~J^B+kP68eo{OjdfQ7$TS5V%h_l?p&`%<7G|sjVj^qs9%}Xk^diP z?Fp)h{Z1dfXh)9*TY`=r-QGf+CiH&UP8W{`4uB?*WrORNFP93 z({-p}j|+4A3?3H|a5$_iEJ8-HGHHtH) zw@k5yoK!#{WR?DLu!Rd}yi^Z`E*iO3P8`&9P`wD#>MOPfpMFd+!JWUh9zJ>tcU850 z`}h-stQL5)A+pk&rRTMx4%xHd1lzzDFPw7+*DblWR6nbv_v5>JcxFlGT8(|4GB?$6 z)Mr2MJ-FJo98-#CwP`dgg$3BJ#}GygN&6V(A4)~43b|3X_Mpof%aIZja)DM;s?&#q zg8~78{E&|J>ti7`ro8K?5QCOtgRZ)(-eY4f&OoVqsJ3kxDam-F{qGnLyPKD_q8g~8#m7gwO} zLLSsCD83(UIIePbKl9$b)jZmSu?60H8YaeN^=Z_a8Ogfat3j>AOIu>CC-t-P7PJ4s za$jE>_sPOSFqM#}b7GiYwb-$rQ=t zdx|Oyh4InzN210+aznE^hqDWB*GhRYOuqho@}OQp@?Pu89&^T2ffZ zSqHO8{mCD12+&fU5O3hw!W_DIidWvOp6;17a05OTNobm+hban}X{ zsdhshf5w=+VURG5VYuuT7^hfS3hhN*m*_Au7%h74J7Nh{Mu&{K% zvtz(zgWL0hvwY;b{BdLlJN0qT`^G274GT`$2X}w^?0x6jmoNTtgcc%#+#fWo<>s82 z@_)yF-+U?5U;OwIF?o6#l;}nIhAi)Y4TGsbU{^Jz?Y;23MV$Y11swA68M{sSn_4Yw50oRP$;noW0|w?rsix#5BIV`KIN z?sYVQT>+lt6NeR?r=n0PrwEV^N8WKAyJgtrs*&=H;AF4XBP1bG+&~?f0CX=idG=?h z>IEEjvl5hEjoN3OpBW$D9~`Vx6ZXOlB)BGAuhy~+HD-^IDwK=nC&LJBQ)=?pS`mQs z|7JX{g<9-L2kw`G%Jr-sHdoSuyPTk1ze^r#TLjEUo5Rhe%uwvVy}YA!z`P-km#!39 zGRj+8hHB7ldry`e2aQc&1qu(YIeCO!-34KA#DDS)hf#^r1h2jm|BSDFJGntSuDZTG zX@w=I^|Ea>_6wyXbWa4?1m$Tnw^umaua$%TwX@o>Pon9HcZ1#JXPc8RaJ#GIT}u%# z+mPX)VLw4INTbzvKd4;$y5dDC3H=gB&ex;A*pT)vuSC-O;}dUHK6$}!k;|*yC4vir zXZm_n5PjbA?736n?4xuVRz5y2(txq;GNwOiTG0A=xcOXQmEZdgfupIE`!87K&C2_r zA5VNKjM+~o{R->k9>bowf-b)bFE`dKU0bnm4taBmyte6AM}{i`?})b=a(^ZNHc>8w z_g(p5Vp%biY1~()fd6{=B!ZNZW-n@=+GBqdCsswV^yfF!$rI*(lPzcM%vhxUx=KW< zUucjY3orbdNT&piUg${BMiEV?t~Xom{NyR096OedvnjcOF#?&8yCSXNMM-_Sa|g0D zO5k|aq2f_1JI`c-epX-KlmiuyYQ$1sREJT|m0$)9Dl29cd&akfnw#+h+IOb*d`Cq0 z?~%CAM&;Y4NRU28T1ut8CyDDVk*hz$SnoMKzkuj*;ZeNtg%Q35wR$_whbcnZf+2?HsPav$P^Y&Em zHss;Er>c=nVn)3w*?HNq3*>#VRc&x^gi&rhx3D@}LxOVC<`(Jqpw1VG`b$Z@&l&3N z8)~!GZUwtf5}zGzvYhW^GXJUrIthQr5sblLQE^q)FaSeK$fc_z$<*N6gC6wO{OSI6nv zB8p2S9v2|4(9DLl?fG%=nd?2ePU-pqx0%^nGGrg}mJgiXwYxje`8M13@yf|@^%@YqTB!8zQ33?G&FH=QAqMLZu$4*6%^U8%M~J@M zRvQcvG_V3+7I1|?jg>4VR^zhm)d~~!{(iPEx62JVB05n<-9GM}WlV+&g5m4-558#J z)}IZ30v5;eV#^8A+Q!v>ao4+K%u`v^9usTsQm%et>K`0zYkC;%>bw@$y?KeMPXhV> zHU~r8xp>n|bx8kaX8wmGxsDIa=Jo)9R9IUS3k$SSaNbG`ho;*$BfJZDy|?hU1kA5~ zh-{(U$C0mb(&dzel?Qf}i=>=>;4g`B17EztyDf9v+&<;DJwgCQ0>o7$Z;oyP%6X|2 zPXM6$>4_VZ6`sf1kGT`4_tV^7QVV9yuY68O_)wuZE5VoYz2dB^fYETT^}{a2_lGaE zr!*F7%?5TYpD7{!^dkLzntY9e=km{FSCBn5E-ABaeq^-wYdi|{wY=AK3H(r=c$e(^ zw}Y+1rntz^z1BVjW!^IG4pq(VJm6kU(5kz5l-;ZO9a^R?z9j~Qgp_>W$W#2UwtUyK zoBNvJ!&&qw((Vp5FRx3loiGFKqoml)6bHUOJ>pdF+3BE|uV!2;ti%HrwgS+;`K_Ru zfZ*BOs^GcDzYW`{cQ18Ko1~q8pq9KKDtVFoBrmwNihk)Sj*dfxaelQ7>6~~Wr$U`J z%Q}II`G}T|uIrP;X&<>lxKzRoIZCW9-{22+%g6;`BKh7!DtX~8coA8jS+s+Uh+ZR0 z9{&CN&!~e=Qy@<0O20iE?qd0oWp&v4?gv$Erjfp`WS@uy^FnuLTG0+`Z$9CalMlN_ zy$tgl1?TJ=KH}`m^Z?qz*p8k#D8SPuN&7sXirC^SZ|0@q{qidwbe;6TwxI z&WT?%L6m8vYLZ`_RP#%xalv4W@TIyrCo>Pe!UKCust7S`F`6!h4CZ{ zXZ@j&z*clUMgRD)C@iLbGV#5IGtJhtmm4&`7XP$J5F&7Y5g5+?Sb#2 zp?%q;{cmu3uxmfk2*BVr^YUWdaV0=D@c^KPv>~5&PcuJs=NQ*$GfTLL<3T^#)fFE& zih2>^%TUIgH|>fdHE8nW**pO$=E6@VQ{gvwS|?ImiFZPTRJ44Cg`vo ztB8F~Dq>=S$y1PDGd(f`sWh3tNwshZ227mxeT=NQcFa#89Sh?zX#f_8Z7VcFqA1*) zC&b^&GZ{wulgkTjGyrZ56(S*0S?Lu&F?@u{=*_9oHDQtf2RL92uoNlv`oe5c(v%buPt>7leDCJ|O~`mR0lTYf#V=_>|KuAA4(t%(3C48V{M0htqhGLWhA! z#CPZvd(A9i6>iiUOw;arudx0cE${tHqwA_ycZT49qoeZV;jn0SxXI(F)tS+9e4^sC zcxAQG?GzA*+|g;>8}N&eFhaBzz{9c699aGc)BLpvUSv{%`~V&T;ONBatx1Pc5gcguJxE`JBb%oHS2ALa1Yh55N*a3hpyKAK8KmEI?(NY4J-~o_ z=w?7dKww~L9H-$RC&hsJ9qv{IX0YH1MJ@doVM!Trq4DLuk5VJttUxH4O`QD)08&bd zCP+#49FZX%LOyq*s}BX?KFHMcIO3rzLNp`1T;k(2|Cy^hRBH%w-si>*+@DBvQ7hFY zfKuFt`fUpG@+1+I^QVXkbkQ=h@{yapWLW+KGyVQ5d1)2xkvPF96p~m#%ZMoc-9-;e zF(<>1qTokF^bMn=p^d4pH`aLpzo=Uj$AE_Om|0*a>u0++?KnwWYt3DrRO%|+m$QtG^}eH5gf2SB)g2dh zcB!ee0fDxY*fQH*lVa-AH6}Bg1&Y%EJ>=MU3o=xm)A{*=8pp=8&;}K98;mayf7Ui^2~| z<&)S(7$Y%W7$tXe1&BW3g9nUxeZ6?`XokD>@F8MZI_3VfQEFy!`V-I8+ACz3PsRZr zgKqd=JH)m;L@lB|w3qzsd`)X>T=vzkUNPMVnJP2LRCU~mO-mElm7huZkQ+27$sz7! zq5=dD&_(*-I!$}u8ypeX3I(qg@tCLI;Jr8vC55L@_eIEhntLn~k>JZ~PY{zmdGscC z7s*S4hHynr8AU9EtYy)|;`M7TS{y@WeC0#jhO;w->jw`2SIu!+FWJse%7Y-a)uZu4 z$n4Nz%?igrxDpV=4U88NZqSzkSwAM4uQK`fyV!<)QTAc^RRL}D3MWLxsI!vWD~d`v zaj|~WC|>QFx$+Nez#?iVRR85ak;+F_sb3Q(v3@xfRARsXv>18#P0 z?E_KkWGLDND|gM=wULnt*Jcq&sDrA1Azp$Zr zt|v&8tW-{d5(^Lk(tBAgqB(C`<6kM-m!SyZL}DHkZ&x@Z{}W_xhhw_E%O)~$lj@m2 zR*1+ylUFoRQb*4G(2u9eAjgg?+w+u-Bez|dOa22(sG#E&8bwU~)b8N6Q|j{~hJgEM zMjZ4cV_q}bq!@es<0IWinX#`n%lDf?Z|V0%G(z-est}{qd%QLbaB!jr9k0nl1+MRN z7~wwh4(AUQY};=Al&@M6Zlrak%*`m5mR?a40sS9FpRgOX|5L>Hsaf`IAi$^QCa|6w zHxM9*xPy?vfg!&R{S`TFDMtRa2Y>JQWE~iD~SIX$|pM9^vrcodCT=ovPO>rIP9B)!dormK&kzZVCH|L zJ~RP1xUog%hc7if&UfQdB8FEe<}rv093J}$^X*TeJMQi8f{Ay1-E=V??*=>TDasv> zc9pzJ@N7-Ug886U@Wy82*9aEcL#G?WTOUg<5i7N)eYIz){$fo_OHY3rjAl%kSG1P# z%PVM>;?EvY(vO&@=henr(wy;1-o}RlX2G|ze;MKtirJN%JPlmH{?=fq&58!&)2CVZ zPaZ*S!9D+Ua&$z2izo*1H2D$PZNmRz@AOmV9LyMlzn+O|ub zN~|OF?&0DLlKb_9Cd?6VZNvEt&@~zf_dTd4AB|5q&?$eUh3y$ zWP5>HwV*(-bvV64;TAT0?nDolmx55fJ1{gQrEEk0F8XOr{q7rhR*}lepk9GJ$ol-? z72K!klpqU;Ab5}EaT>}5Avcl?xU2ud^&I&Qeq2J0F-#^PZh=5CfUM&#zI}kYvb5o! zmCo0XAlU+12LAnXOq{AAgt2P3?)Dz2W+03j`0F3J=|Ocj_cUD&iNIo3>vj!SV+qvn znNJxnt!(q!+S)-{iV)>91Bjvo$t+xwcWu>I%kTYK7AmI43D4F@UuF}2p%SkwRnl0R zUz8912c^^u#H&p$T_6MKiIg|-XSpu>Gl&BEQIeOa8;Y1L*Ok1Y0?Zx=u0Ur4Tq$@D7Hh9bz!C=Gl#9K| zhM>KHr$Y7YnK={)`J$zg3JT(ZUIh-cyXini=C1M__$)tatfQkN#gab>pX`o@Ml{8; zl&qH3iFj(!vYUI;DB3EmmwBEQP;qmRjV3q4SOixnq^Jho$&J++gE=kOxL?VtS+RU3 zN}j44lwrVK+zZDB@e>A;IJi=Ov@18voT7anHeKI-{u)R0T+KIh5U_C4$M7-lr&@4?w!3;IfWP zMD!7E8mRPigjz6wc`>2#e(|h>ZOv94dQewXiZw%t1%0IM`u+|Em^2~j9H^`I^9kuY zbx};2{me`?a8?o!oF^Wds@oAEy7q_1e8#ltj%!M80d)x#4q7-2P=siQE0epx<1Q^j zYcn%GIU(8|_OZqB9IZMSJG<9!LIu#|M$3cd#9&Gu4%{V|4qJ)SP49dTusQ`$R-l|kz*yn=GsJplI z_&As*iY|nZ*B@vk8=J%_`9MCXEDT^XV*0J?gbF+UkY<&zeM}%QD|bKcRQD4Uz#D+* zrx2H4u;l@?6t1`4;z?*g8l4&Ig6k8e2lz`XX{vZh6)cpFp0M()wCtYVWqJt-5yOwO z#PApy)W~N`+5^O)@|NoduYjOY?S_zGkU!pqOwKs3y20z_u)_|GiEGdCmyS7Sg>YVg z9tr9%$U)Zx7qHJn7f?0Ki86!&&PgX|PFn9jxWw1+ae_7IPG6L!L=SKB{8XiSF5Ww< z{eyQ9<8ZoA#HFXFY0mj-(cTDh_@J)*38|vXKHV2>40)Y`{p z)pXE^+}heYe%eS4)^4DK*EUHcxJLy8FTRPv^$aa$IqN1oyj5z&`k0TrQ<{B4fgi1K z%Z@J#kpu0K^|C1uyfDqMi%ku5eszd|hC}O&x^Q$j{@K05CuMt*1RPS{(VH6Yt}V0| zVH>kQgAWNSu*HhYY|G6-kdy_eAsQTV-maFcu2IX?6~JZp5%1G@YSVOs{!*#2?)No6fv`E)r_Q-NP>1%O-VRE)-f0rjkA~>x3uUj{!^_A-xDA?2y=wEvED?B zdS8{i3@8J-XiXeq_}C3-p}@rwGo;u-F?VZQZN6$*6grx#6b+#v2vz#~S)h?h`RW>A z0N9<#!@E*FKk%-(`Bo#hw!WENTM`)E z6>FVc>9c8vYD+b#H?i8bdT6t$g3Zl6PV*Gm{p5fN>CF4CS#Z5E17I?!6uLvAs$7FR z16V;4C~7199IIWAbMm-Asi;Sfxc<{sFGY+Xie$vn*)mfR=ZGWA@) zYqCeq)sEMA9=^gkz-#!HdmPK>kN=J?s3uuW*1Ao4K|fM#a{0zDqCGkgmVUZsUID4P z?5|f%SW$FO`I8xIE(YYGIfOyIDoJ`(j+t*LR4hXj2Z5C}Uq;r^UyLH>r)idyk1&pE z@xi?zQ&jK(-ilJ&@2N@peZI1wFs z#weBLrA#fbyygF9NUOR%^=f(6^7?>ViA=FQkjY1><5=2gyyg(IHOMO-YDW{ZToCR&BVMgMi>UiAT%dG5mQ2&w^^=)v?Cw5?pjP90JqQZznMy zwyux+{u$d{o!=hMs@1xq*k=c-GIR#huU1-K(DX|<3PkJQfjoRG;Z0feqpHRFWCR53 zAP}l>ul=$;$#L(yN)CJgcU1Liiqm}UHK+XaDYpCD}hUb<>J_9wy_07;s zOCTP^*6zYFu(nG=8ZHr*8tW^SqYLyJ*Oq;5Zs&OUtsWFER;s-3W0U6(f!kkSYH=y2 z#PxKXdc4da!}Sf40*#@l;KTbu0s@X-d!CPa?C??hlRJBVF-mp!y4%p8()H)?##@BX z?6}Kqg07f%>eRb51^ewWspg)^{EsCOKq>+f0`KA5sMz8PXEL2ekb>7zJ}r(z7*2Y?Un9I^{~8{cl5DEpdRF~Q16q!J;wt) zG);*Xwk?P*KuwnGd+u$=DeBLh!R9VWeEz`E8Nw0#4FXTq)h8Tps^zoKru&j= z8&tf#leOHsozgtFb- zO+OXx{qyEktN0#a%-#uFW4)1Uqraa`;obt!Jzujj>4QT;kvba`>wzfjWNYFZTs=&q zJup1~R%ffU$_QVrzr+#qzE>;P<{xR~xRTRWq{gPa2nps3=#O?6gGSeF&#u34w>868 z+6(g>wB#k_7!3e$JB(GwiKQdHs%IHq#sn`d>1PafpiQT{q*EDLX6Fzf`R@we zKKbu%&RodKgEZ4Lr98)*O6q&uru;a_8IVBbbcqJvgx0< z`fvLlI^u~EZ#`!=cG453b{b_BYk|1O!=i`y8`wC%jOv$8L(c`cgyp z`azzFsrh1cAAkG;haj|zq2Ruq>+M)+{K)&C<2qg;s2uNh24UT@X%rs{*oHb&k?zyS zFp3Jp7_01%A>@9(#9?9V_!W9}RSHyNtb>RIonpMM_*8!VB*O|mIGJ%{_*mnY&;3(Q zL~#MI4lrV4Jx1u?v;%SkO4s2KlIeX-$GGrs9vk7l5NN39JK9Ld1O;RLJ0$NC&KCA7 zT(AAbm)>xurgF}>#~M?%7A21eNopTA6k%s` zJIrGNPqUbrW*^TR!Y=0d&L0&MNHW zBx#*YO7d4sk41prHYiA+LlyQy(94F1Wf-=d6mSu7z+dg!`wfUZi>#ecK{J#az$$RH z#N2O;<0ISwcY|tW`Zw9RE!)8pGBJq3Y%d796=z=`$1(ULXd=%|` z8O~R$6<%p0Ar{3D#bwM-PtQL}dF=5D`62sEO-og2-rDvyH5*$bps+YuN=~yp_w@IN zU_*7h8K(w?ura$Skhg7zef+PouM^w&ZZP&-7FA>LwvgF*yt}QE!Z^hPm~iHmVJPNy zIKYVQO(x~1h$Oj*t=C;`mS_1l3Y?R8&f9ixC^cyBpp7cFIbPqrjteQ9l!%aU{=sPQ z1bpURVXsqhw9d9#Ep2VXP=E2q$>9FTrdG&#OS_|&INhP(!4$5~ZtfsX-}Sx_G*gsws3C49{;AZLwRc-@DFgDk1CLEBGSB*;^6y@3*u(*-h8syfyU|~MFGw~@WV(!a%}h3=g{SX!Q5HXNeL z;Ozsy4ww%JNKSw3*jTvH;vkDi>ROxfJWWP`ZT-%0Bb+ATekT#we?v$5}cztrltuZtjQW_ zpr!BZQ_dS!El|1N7?!{8nY1Cu!_hi^h!;+YnfEG^Jp*(xB61=0$8siORLbaX+-__`){7P&5Q>I{>j*_;s^O4S?hwK%8tJAgr<0nH1lgZd z<3+KVp3shtAN=iYLQ%gl`0iP`xm(~_7)2W`enZs%82QzVUf}AC)Z_;{xZr|)R`ala;g*wjNlffsoXS6{7;6h*FOIN5HVS1raKuU z`vevBuq0M1t+?h%uvqejv}vhXc6PQ~X7&fA^-B;y!<_{x=L{9P9E%G79>c75WeG4$ z0T^6nrr9?)r?BBfSIQ&m0O(#=x>9kSQDB@4HC2cGv|Y@~a#f{WHBy0`v|R5;bJGG9 zX?9#aV`GsYS2RqrL>zEbbNtfkYCZl$aO!-%ntB@n*FToONPx4LyI>_BRivu|H}|%l zvvUHZQBmeZP$DDi8*LsPvA_Q{lC|aF?*1~JG+p}SVI`66V=vOlTK{VM!aqO#V8ikv z?fZ0$T3+FL%mY3NW} zCO(4EjVUqZEw9BM01Xcr%2-~nMV)BZaS!vIOn%fXBppV0 z?fWB9QU9m_7+nYhGz47ro*uOTZbRrl{A1uB7xl(BRB?$m={OM#k6^@pjb+rQb$TPH zmk6m8g`-%3otH1Fds0lP3slMkK5^#Xy`9_sijPu*i7nBb{ud{6*gCRe4GAV||d8 zGeeieu?nfge{N?@!DHV%|5*9s$Z4kfzHj_15iH?Af(u=L)0YM39>8 zAI=h!OM3lPxyI#Z2K@ukwtQy6;udl-sbdz35$)~0q7m#--5(G%z;Dfsl^BXt#d(3CnAN0OV#TW*7_h$X`ZuEU)zOLVf<1Tt^Cw^&R~WF& zG-#cqWTbeWHyxsBp{;I(gqIhpoRZQi*kt?Fa5A zF){IQ5lm5kQc^5Ma{bI~YSe)J>eq@mbv#zS2|vtdCQGA=3FqDw{-DrTqNFjt)o zn7qPynz_GHc3@ODI>Oyvh(1Nyk|~ZsO5;2J`%m05N(70|9$qs@^a;=9v55pKjHSxS?xY9Wvo?|arUytPi$#FEo1tz zt|N%pJF<5XBg(+gfjGD3qkbh6@1UuUC10Om6z4JR;xn#X;^^?+Cs(54`fBSiPz1-P z-reS@eb+9D2|uOp`BA$pZVc{k+Z__BwK0^M1`iJN={jk3b-Ht>N}AUlTe?-beS=`D zrFq=06A$^K0Q-Sq39NjJwpGlDvQVw{0)IhQ)0O2fhmfACMqOATIw9mVD3{t{&;PC> zco(6Vwb~mgZ-rEq~SpLY1b-?tPZuu{Ds$0uObaXCW zOrLMRcEh@@4*Ro(nqKU~Kk3%A=p+IQWB!8-AIiScDj!r@9pVy);z1)Z0#|F;xUo!coph(o zK?{hS>#M!xvN(w>v`qh!E}?TE!1@C5k%`M0#(&(DcS4IPZi6RisG!l1S5Kg*D^gHZ z^-`e{6!+Q{9U8K$kJ34Y?2ZS!PYX1{#d4rVO-)qeN`?f(Rx6Dj9dk_laBpl?K z0&%-3u;k3Da3z&aeSP&`lSq;1%e1@j5UGi2#d}?NPc9GHONp@={ zL!OxDZ^9pi7M}HErO7xY@xJIJId-95>90vKD5bUJjgJ-a+N%mE^>D`;7%!Nv$c{!-wa81YP0qF)mH`ikjBsb$@3VUIANa4eO+8p5k(pi0Rd^GLrPk@8wu&|QW~VYyQQV2q(MoMx|DQFcQ?F?{}}Hl#~ofd zhjX62_u6aC`I|bC@qa%<+fhW-5lto^`3nq)H0d2#O=?_XGrnau6g32ZVOvpS3_XE# z2}N$f1~*M5WYlQ+Z+60>KQg?jk3{`$4)R#Y(K zz9fXWmoLCP-uXLCN%s~dO{FK6`ka9GbM$W0`I`wfwX4Gxk2|ilN{CD!A{E zbjhabZpNdemhyImX02n(Q2(@G)(z!NNKfx2VuJNeHT87?0fau9rO z)MALv(d{k3`#V;w9zJUJYkU9e*gD{ZTnib*@KDUhxam$|Q7!40gQ}F%u+Y)!vQ0FV z)0KBtwsipsl&RawDHHuh9w!Vfa?XSK&$FUfEka!WK+vUb%>=X;+EVpo_LNlXj(ME8 zwO~Zj&qTRyTHwI#A@%t)PMl=I{PBg8oJN`5s7OKlpBH`kpeG(IXM*rsk!&y5w`d>g z++M%KnvCa4BKdmYcnrgJb@s`k}O_b$uLJQp^t{>=f za*OAwR1FUW<_EL8{w*&n)HyuS*O!4oShhPEKLo2NA|pFr)rORpGl41Dj`jET2=$}d z8N$yyaz-`~w?IWM7~UwCj^m{|{a9 z=|P>x66~IjW4hbZ8s7d}hKAkdo{PH>$V(`c%WS0|X0@3S+(#;DYg_UF%2 z@I=+@{{7atRso_*BKtoQFu%-#HC$Dt^v?z`Agv?RiZE3$5FN#VUBbcQS<0wH-?h5g z&KOg*&C~2`eR$07Av~AFQ7q@MMcMk?@TAACRXlosd)cmtk_k%Fy~hY(P6K=9lK$Az zaaI%=ydq&4`+89Q3nwqWPgnW)@yY`-D4fGMn9rPWO&Z}g_B-=l{D>wuDbM~)UH+W% z+UC06WqOTT`DdWX%%5Iz*g7#(N~|(*F=Mx|F&E#UKD^>c%Rc(#I3(wqP&0Rnk9gto z-#W@!BVi+99El*dkl=m3?UFEyLYJ2<1Co7~aRH3;hxhk@Eh+5ilT9^o`Dnk7aiiCd;fj8c!#TF;3W54p`!On zSd#h;Jvj?ag8t*?oU)o2*P7CbPpkN}9~udYMrHJ`d0^jsRU)ml?HuCXa{eVIpji*t zcf(^-K{HYP7(u?`(%09d>Zd4mPSY%c9(iH!jw7h)6wWWFXNhlg0{P{P+Shf}wYZG3 zQEMpqiOH7Gd~t2h6Vo&NyCY3{=PD|E!+MPEzt$rru>U-*VGtM!Jo91RPV)iFaMcy- z(PaBcun_h$7nI#?t>8AJe;ZAx{hH=_{hm1R1ec ze*38(Fk2ersRdF!jS|Z$ihzqTQq?Ea!BO_kSc1pWXqUDwSGLyH!d|~H*k`V@IV>m+ zDhUF!e*O%^FCiObS!@3`rjWP^BsI}#lWI(!2l|O&E>A07nY_iM=?VEQRXvaPr*`_y zoZG-WF6TPi(5u21ZQpvjmeMhp73ts>K9S>ESfUMg1Y8VcoJ#wyA5Jzza;s+$t^gdq zCw_vkWifls67XJ)TEnmbDeHItw#MM*@e}#+kl;Ld_Zt$GB0seb7LX~3En-bDW}9$j zMoK|l=hCz>Lm7wwm$bz{HDkbHSd2?>yfb}*_!5F0$wqZ4ai5jjw&5Mv*{2VQw=OW= zDGAmc?BMJ!ov9U8F+$vJyhhaCx=x;8F|KeqJ~%rxs^s*FIbEJ%0A6}XAiqGfdVhq+ zH8r%uW3gFi-XxHSV^UKaHBUNzaklUIF3NLTtb**)L@0o6GrmRjv{<_)7=knoLbN@k z#NySev!eePN}gT()IITB62$B{6Rb43Py!dS&!7%5-KZCFuoAsS>+JR8^BQfBP=e?r z_L|sM>T@uScKBcfd!xTCeUjSX^s=Vsy^wrFR9;RZhymTMQW%y9W63Lx@3=4osIJpf zL;rI~tHG9gc|v3`Hx>ZiTiXbwfVTdnek+f|2`v{_*865!+8ywXV{EUn^}2QR8CHQ&WO%u3{*ni&fcu7hdv8XQ*bz) z;l4#Pdvf+bDoKIg$cRf4hv8o~XdrcKV2}poCjR@jHn)p&t(%42Tcgx~Tz|)wTZ+qO z-roZ^%kM))c%UIZ^R5UuCSVkE(yo}W5W@?q8c_mQTR=F0@nn@?aXhvI7oGAHoBh9W zaRr55s-HUvg;dl@9c8>Xsi~>7pB75TKq(cj^q7v$QYwXuT*esTyUj1|yLuVae6~4U z|Cx}1clyuRV^l@$F)=aJa`@YoffSz^tBA)#e}0RRVm}4HlsMFaxs{bEx963fKHman zX@u+sy~r} zZsP+j4#?c5YOEK=_Z2l;Y*YA&e;3B}B+9dE6QK4K(j7hYTk%$s1q}fTtF*qT-qOrsr7y8{TU-hU)5L zUxOsolg7K$8y{_t))Py7YPzJ7KbYch!Pp<{%7}_z(Qz2*&hk6_JHaEF_yaON?p z6hCf%2&MGjl8+t6+FM|^Anjq+U@N0!A@zx)iQn%w*4C|=3iNFQDZnEitqkH8iyz&~ z>15(?m%tXjD|5hsW?*B3Ydbv+_yE`tN8Yjy{`a5nudkG&V0d{KQ&pwBb$Nl_a&g9T zFHf4zU^&$48lOo1Fi8({$P2ohEIoN|S{ZSs>?pF8 zJ{tYq<_BBX7sMh>Ua?f4!bwL3KnPJ%vJJxja@`p-xZkoBJrY3wP+bx2u1&O<&~kw- zj@jMQr`vY%)?%VDU6yaEr!BlI=Rx{{Y5+S<M_D7@2pyxfx!Dy8e?JaJ5k`~`QAsQzwHo#r45uDGqh|7DAtZ1o>q`50wNhEOw!Uo)KiZ>N2@YCPx=4`XPRB!+}F#cyuY{{R6NQE32VDj9n{TYM*1e2s-Mu z@cwnrYW0I&f0ougyfDNRp65`-$uV+R)$lz-8s9=aLL?=9@ADAh=8QgtlXQZzE@c(0C;2X;_m>ZzHQ#py59%U#@Zl6aFQSWs{-GPM_0_l$NxpiOTNDxoxp#*dWrtn|CtL8;TYoasthrEU zmTwJqY_4w*vx73dcw2R$Sv;y=VEVFFQ|5}7L08Rab#qtGF=v0d?Dly`U*~`P+N^Zn zITav3_1VcOg_F&#XxrxTLB#D@gvCU~@*H^+KjZH{{2DlzbBuH3IShmAvuS&(s(vik z)gc9t(yD0^t~y?Rv|Y60v5a^;@qsgBAYyJMzpRv)rmr>b-F9l-Um+R)=Lw?9VxDJq zYbtURn)sjb~apIZSC|NAhnC^!}nkv;SF{ z^M~#3Xw7lO?g-D#;_-8iVv3!&4z_1k4{kQX;xrp)I_CrNC4;@>^Ap%>;+9Sj?+VBd ziqCp!`VFs#7JYY#T9jm6$I$WPpC5LVPhFkGN!T%4Xx2`&o~O|LGZ?q2cZXtdcUP@5 z>~Tb`TRzmMG}-h-Mls>LElL8x`$0^{7e1&mnuV*@b6P%aX8*LC8$(C+AYgqNf>hu9 z#pZEk>lckDbvrv&u27&eF#b^IRP;PVErJT^?zK)b3VyAk?ZdCRUzI|5Qh7S^(Slm! zslDPvbA71xR*SbtG%msM-mq!{3+u|lcrKShiP2<({|8MrKNQK3^Ya%8NZrg7KIzS` zDJ55*SCnQYX1IG`+`sRmB{}ysW;rCUQrDD;XzMawnEX5^@tND_BZ_mi&)m(#v;2`Q zZtl5exO_HY*x9H}GLpt~RIY5jA+DM&KQkaNY#_%0wHrPBTPMOgpIm8pedAg+Ug#|< zKJJ1Tndz*)DAz*wzGTLLEF*3^W^Q<(b8;BFg;S%}5!Wlcu$6*KtD1la-kVT%tr=;N z5tHkdoAU>==d<{ra31~5*gy4VMHiFBTSndgy99Esl^`{e_eP1+^3*1DsT8;m#ea?) zIER1qRFEO6Ado>i!9)$%zkFbu?a*s(a<#i}%Jq@nLH*-&AXyKyRvB7MccPp~M3;|N zS;XcWrrK#M)@bZ}p~S@9{kah551ly4wz4LV_yw>#oLoaa`Qo)W2*O=WyAE(%|8AcU zo8~;k3lFj^q>>Q)NFD6mv+Pk=+>QR!56SNz2T$7>*PhF0_AHPbUhhJ6$4|^J5&RN_ zW%%}X%Nw8AEI*_ixoTxZd?%nF??|n>!4|$Rkozu?mal?#Y2RfDBA_RP#oG6vILMwP5%S$kJ zX=3$MzxqS^$gf&fDDvrR@Uws6u5u!dwsBBANcRg`cjngO=jkNq3E)!ks|{#^pL@!3 ztZ^So&iGhtGI2c<6JOZ>%T0$ba+rHo6(f36`c@vwXrp6VJcl199*fDAXrR`)dDu~x zasRILZ)_yM>CXu8#-`S!a?7LIrK3h0;2BNerSCIJBJsZ)kOtJ!{m&SzyiYh9C z{SSF(6WxZ^(|;H5e`0TL8u{@AL_e5~Oc_ZD;s(n?oH;JnBGh=<%yXN^7~#H4DOyZU zOsX$03Qqd)i1Q;oOgRA|vObNToywSk#pCq=Fnui%*!EBH z!j7cQxz*g;cLD@ogT%_HlG@6K$a8K|YmVY5zoG08TIw;EVe-sx#(Cx!X~;<*(K*&I zwIqN^9xBqN=<=QsJ9q#CxHHhluF$>S$Y1eEe0+Y!NgdxQH1l3Qww5+L?A-X6T@4i` znIPB49FobS{6-l$a&kt`^O~&;|JlWvzoK_KvG^1F@v|#PlSqO%OCq%mzA3?)$d--!l)tx@8*F^)t5hLsnfLu)j5$- z?D*nElpX1QU7TOYOfiH|G9!unkg{@K(>{*Lqc>$0BGE;>aP^`jaDs!2H8Q6~|AEKX zGGhhV#{%e)hDpD?njbc^9KYMh*(7)+p!-k&eGx%0nyk}5K+dT(hV5qDytRCK&01Iq zB)y%hpIA8ldx5fenB(k^cp+!GsHdsZZ5R0KX0{gn#D&{wn*QNJ_l_}hHuJYeKTHzB z8sr*tS~IF}>BOZuj7TyR`c+&w5;>$1zr}cHTRS%1VE^RgdKT>6wM~W|_-IY>x!~#= zqdsYy?d&EW2uKV6G!P@f{pzj9$Lv8lZhOSB(mDS4HYe`%RTYnzUqnc@Ep-9Q$azea zj93jFzpq!UDu#^U4k%Xr(%Je{fds?P^ZWqwt@O-SDubM4XX^n4V21GB9x%i4b=Ruk zm+SmGtXCuQf_mxqX>-$*e-_nMUrG`G7tiYrX7)`&c`dF-p2WUd`2zeuH(|A8;)`Yd z3>@w{I3LEvJ^t_Ldj$KBxEQ@5+kb+uRCj(bd8!bqhqY@cFXv44JqxW}(rm{Q|0fWl z{$sIKYG})7hs_}>MwgU89vT*VZ9F|lz6KsQ=fZ@nr}v(6uB&*Q9WXcEpx+*?Kf;^3 zq+)Py)m7%=Nl{eAGjSOo7->|hzwG)@qjan}C`NLc;<`p?vxw#!C^Vn@$$o7OPo!-4 zyK$Qv@ANHQei@rIo}?1Lj;=T_JE6ng*IfJvhTp-Dh6|c!g@ojPOH|5ndg7^zlk{2T z)n#WWhvb3X{97ttSngro!PmNg_p3WBo+`Xl-z(g>LL`uD73aG5dybWQsg)v1vg}Gy z!nkH9OGRjJ^JN(r8Mm^UOCowluxIC*o_WfxczU>`|MnGLg$I?0g+fDzd@7U$59P^K zaresZIEmfjH9&5lvM1_b30a(O0b6%koS#aOwAr^Iv+99Q7V>?Y!{=%5@?)_>I2R@j zLaz76utL%Ht;L?W4PnhCC0h0Byzmjp7Ux1s>RZV#y)XMxo+6L$W;f^)WiUxS**2G& z2f4V*8|x*W-|2A?L8tly+`Fkoqh^#dthm-^__rT@1TyB2O&M`NG`KA1ga|7}pQIMk zQ}lq0UVN`Vpu2}xjYu-j^NDxl{5l5{AJ$=xoi;BGqQv4QRu5sr+wxSb7HV;Yq4NB( zP0VL~12K<@yT`pg_%h35XB282Yh2VWP{ns9zons!Qv<0;kaSux9Yr`@VEDijeKtC} z=amzw#D^4;_E*PD`7t0}fjhRXYoo<%Bk!zsSIgAIL`SnVs$!jkcw?D4D<)tKO<2_d zz@s<^&5AXL0moR4c~h99>e(u&rAYCThev$~ev@89L?&x)$H_X|@XmkVj(Fci?>Z1` zD6Z4Fnlerl;mKG`b&*WIY7GM`gGa!{U_TAANrPoO~Oz`GjE)!Sm1AgA=p+Bp4(M=xTn4 zQSWb_JkTU2c>3R%ZN|=zsl?*-XUD8XV{Od3oPlF+#bl?pDc5 zkMgH%?HG(vUW#zg9uBr#p~+!aP3Ff1bo=fI>Czw#s2s)Q@6YU#6$J#10apno;t#$` z+BLpM7fP3p^Q?$`|GF_|k31+VkW8E-t&~Ic?{4tlE+2VPJ%+TVY^O#6GrR`18UqR> z1d43bFf#9lrk`1?%7|hFM1$o6$b!XOqF5V(m}(*p+0{+9336%~V-o)M2YHhIkwA`wziH#Xi49oB%p_7Tmu#A2{Dbbps; zszDDUQ%Fn+rt9FJT6zsrC$)8)&m|DTN4c9dDz<;xNlFmJNXHj88Bf^EtJv0xuN3P2EO!OV^!Wa2{D!WjcW|#uec5AX{B#||B56aVt6L&Fam`SPPUa@*&i5U-2VAKQGB)5$fY`c|1D`~{)EXLR5z^QQsJ zIj8S4(PvE@Cg+|9XW3MqU`(v51S7M^V?Rpi_}QUR0xj>%(ZD0Ly0tYz3IchPO#;2u zP=eI-dpth$gs0*2XulmCP*}=1A|8n&ED2-#*~E%Exp?5MTColf@<<7J{q1^Sp~ahW zFhs3XLjUM%Y4u}y>_qKUe0G0?e+HBPZL-p)rpbE5r~Q&gb53HbzfALO3wAO1&tkr- zOsTWyWYcG?D-Oki8j*h1Dz{D_@=>x}e~QC}Ld!E!w24%ymoCS1Tv+uMcjj6@wC?%{ zl}k;P>9D|#?oCqb5qd4RxWjH~RPA`0Rl9#JSm5Vqt+GD){9T6H_FXz1MwPF?QIG`D0@$K*|9N zhkb`nuqf(#9&ThC1|HFgzBH4~_RafHE);4JcW%3yEPjsSo3cH!pJKXJc*bRKnaVg` zM6mz-K71*-;NitbeRPbncl?WVUlCMlQLm^%v}WXf9~ ztw2yUt8-mH`efD&SU$)J&4#AJ&I%F3#*pz83gt5t(J3`M6*+FNv#4y=)}9=xzk+aD z14EAa~sIhd2*X#^drI=kJ|SW<2Er z22Bh^2CH&T)9B+qFRBrQNcWX!HeS(H(8g?huXLZnLGZfQC9BL*R_t3r_Nk2OscLhR z%;|-Rj2yHM7=W)j^tAy;Oh%7D>&SurbMci%@70gE^A#eX4cxm zEb~XHSArwo6DQ|YD-;)>^r4B$=;myyyHO%ESzugNvpXVJZh!#~un8h7&{l2|HPF= zaN4e5#n&jN_FDOjN25N66P@AEmu|k=!2i5m96aXO-5enG|5^Z7*T>+zh5^GtucLn8 zE5(-EukrBVioCQN!AcYs9v-hSy|&LioVpv2DjN4M?z=Fp9fPRAYip}FXMm0EEvOF8 z9JEI_sp*_Ww8Ib|AS3!rH-CIDEL>Ga$Qj;kKteYv0AADywSl=YP5PQY!d7yZW{^ER z(ehq9Ef9X>;P^P;<-!mJd!eIPn4>irvv87z2O|J-tj^sq4M!OEK(E!M)PeqEoy2}G z2{Q|Gdi@J|>`sxc?-LeJ`t_s9$d9vbKia@YJ7zsCfd12jx#H6yBJ&Vdnizx%1q!ud z52RwCwX$=qgE>Pw`?~?tTrG;X3xeU& z#V91=-OR32yw_Jm_9o^&#l2U1u>EOgxUGyAD_%L9pnIRf6j z#CK|!lf{a_qsQ8-yV=Bz)1H?_t)LyAnDFb`RE*;h_}a9D0nKuN&F2FsZ6#g>`{7mr zD(EZLH+GU@)BmaAe!8@Aeo(Bf-dlJ;qQa2=EB-loZ+iN3c8ZX!-`zAQZl4xW4O#4{ z=>7!Z5iX2(xSV7(cX_Kh$37?5_MK1+&6!jZHj+2JZ*R16FdFo3>)odSVe&`43^J@D z_($r@!?d#70aD$z-wW*6pejG;j!Mz2p9v-i|2k&++a`yM086Q7rE41{oJIpfLnT&@ zjVC~qr>*d`?4BsY$bMhaCG6(|Tc&EhZEqshGwsnh9Cmo)kn`kOmra*h`KDw{<#FJI zS?P7l63dyC+9!5h(q-G|7LyJNNtceRR8vy;(ieSJtd;+orZ1QnsW&;kUVi| zlu!i$G^2x*mxYg>aZEUF(8HE*kXNuS5iNH6J!K$#I;$W%npPS(qUY1VGdnw52t#1*B@?fzAq#oggp|Y4B{=|*uX{Hj5WGG zh|rS~^E_=Op!)#(DLEfGOLOR)a1u+i)Lh5;D~Tc0C1)KW;||d*HN6( zk1ZY5o9r3yO7dC!CfTkZ3|y@^zMiPjGu&F=&bHRk88VJ|#V76VuDE#GRjtcGkoN;J zneA8ihE4#n%nT#NK!{-&zIZ!b;2e2$307o*Hbr#0OZGD^c?lTHP z#0rPJ9&Xc@BOYg0;iz<$XfQ06s%7Jy`St5H@2wpln8CueH=T|WcXran=U^m#b-}JJ zbk5On_M~pI9x;`kee-XrOE87#^14)S4R_{18u!N%`uQM2Rl-xJP&D?Jou@Of5qsPW zw17ybJlhO;^KbFuMVLm_j~|qDJx)?mw?*!cou((!Y%H12naeGhxLu~ZK^(?+dbqT& zx%B96W0CH=i?@F3VX0#i8Ex)AsPNrVR}1E-kJC=$XR#GH&a`>s-)jLP!O1@tTnpbMjqHY=;nK?V@+ z=2&U4-5GBKx2%(=aw?a7IP6>ZZ0mpFlKlB+-_c$bM-^cCjILz6mnyk`L%Bz-(&!QL zi+)MQ8}c3vvMe&qUHF)qd6k>Pc8x(H8LS;KBdMiQeWR{1HQJX%ws(2$cD4TE%&oco zfLpXB-C_qn0})^& z8{_*OzOAu@ueWr#aN_jM+KHL3^SmzO&!uC;ZRIMx?V{3Kns|og+-;2{-jYa`(HEE- zxaqR0;)ufHv76phk&NYgGh8zAgRC&(^XoGc9uh0osN5)!P6?H5FzZcJ=kHPXY|N8tPx-;UPv3m-5O^wa@Q6 zIm?Yj+E}_JSJ1*?;^QPY9F$1)ZfPug8#i3YY42UnhkZOMRduYpd++a$Jx)egqm)gF)|e*#o9hUUkYf&F)EVf(Yvaq7c5?Ax3?A6$2k>gm;y5V-H9^W_U4zgRr12{W=qP~b)J!tD4_ z3m-a)$nn(n`naOh)wV`aM*Yq8D@i$QKja#9+Yez^HnQY)9GItnQ2yu+ZBt+As6Kjq z-hFH^Ua=T-8lys5?*8dzO2U8$ac6#F;QIOc)$*q7uFX^aj%mR^Jx`IkF`jWL_vR!X zUFkS>C=N_1hFJh1zo6>RpMpyzY&vK1tK`PZ?>K}<}DY^Vq@;@ z$W-$_7MV84pST+|K+zwDcG+!1wkqX*_bCd?$gq*imwm^Ud9JWktZ9WjJ^rig0(+~#5 zjDm{V%j-3WAMdor%{Lw!_$h!-+nR1hiRkJXPyFLNIXo;m)rRVJpU-PeaQmX~-N?wa zsJzZiBlDa1SVaIgz(L?mtiarm*xz4T8%=|R01^RcpPa4CGeIIJG+SONr+_xo&3>Lr zre5h14f`EG>S8cieG?!@`VHfRDDK` zUh^>|Oim&~g>2oj|MZs*Rr9>((YKhG`~l2xU(jwF4EtB#4Qj>61XWZho`<}!yZZMM zgk7(RzgtXTt_;xKVJ?tgl%b;rQ2!p#AMUIMBP=LaAR`YqiwexpT#!itR*u%qW82Gq z9!PC|@W=>TI)Wk9Clh_tnBl*P328=by_w{=*k1Y-zzOtb@CAUBm5^s6$5ZECiHfMD zJ1KmsHFIup>9f3Gs|?Aa%E{v#uhz$}AjrFzb_O|QAV?Ud%-KPvK;B`o(mR0+PUiZ0 z7l733z)U^v>DECF^sa$)7Y-p#vyGgP6d;qqDXS`rmKoWbhhjdsUNv2(@!nV!?fl#< zSu{LN$HeJjWq0piI(#u%NyCAi?fvp{i*-!+y&wcS=feofqzy-_P=Gln0Sw;tSaH{m z96)8Dmh=+z4bd6-R>c=?y#FG52bc2Kwl}*>822uU8W{1yQd^w-E-pmSAFjm5eQ&Jr zUZNcM4vKfUuY=uOk-IYRrSLEuNo){O*z;d+Bf6&aQEOHw(d4!(ZS5ZslWAYz78N63xOy_gn8L=0GS zIz!5slcmBIl*cX{(8{UHeJ+n(p!vf$dZHth$1y6rEA63=nI}-Hr<)ahCZ;6@j|u>% z_-{?TvPZSF;QHyE9tZ@=>uXN!VJVK0WI_EqRz}YU3=TU#DP=VL-kRvJn5tmX+GR2B z=a(k|fe996(fZCh_~t5LY@Ubx&;Fv<`RYC&gx$hm;`8ow`0#pGX|tCNS?}qb%d3bk zKqwjSU$}v`0Bi*;NH$yJrs#5<5#&(|7;gh>;H%GtZtaio(u_Qa9IEoU|}fIaNC_$L)K^^Gxaw$yECGg!gC>BV;nftI6g13wzZK$-az3GD-lw0 zc(1OhulaRnr#Xu?4uxbZCrUJ1obf$>W{hZPqdx=(T3d~(wbWXXURBu-yOU|*dmz!9 zD0fF5vzpFoZjQprFPx|_rGwW26G48_022p?l=;;A>M}p2rSWx^RZ~-Qc(3uQDvU)= z6yW)ump6U^o7SiVPzRVHn$V|YGR1XKBX7%=K9{1~KsHo+|dQ6~J6N=7p;;XmM_t$XT z!H~!PBVkmocdh_~LrR(S%%&wK&Iz^9aLz%qD(-J3`9%$sgrwcNH7wlBg8KT%lmn@d z*YK2Ht2vnJX>XdMgsLOMaGs2=ga9vuL%~45(yW6S-aUu?2{(*FVgLAHIg>bo?+G=w zb=mAZgU5l^^m|UqcgSj}SmC~$HfvM}g)(}~DM&rKpt%=#ugC%zf?PduPQn@&%ul`R z;ON(f@AgjdQDY599f$h`fj&LEh)+61x{*pK2+ns*Ihx(ct)l`3`+T@SgvEnZt&WmK zh557_R$emfRUmG{A1lj+GGkbGZ5a@ifJ zJF}(+tx2m3JdE8vJ-RwNkq-jGGrvZrCkImn!78(wYa+_^R$8Ka{%=*$eFx#r7~?V` zE+T@LKakqBe4@kla-z~a;EhI=*}WFYgwmmrA-Ffu7E$F_Ik3TG6{P+VbE~AFpR&|o zC+7)bTXBE^^IMOrHpit4X)rVtseGd}YH9lHb8~b5;lsiomRS&<4f{nFF)(EAR5}1} zSONeY2#N^rdr2m=$ z21hGOg81``pBMo6hQtSvSRqi+2$*)$f~*Xt-SXi^1Z3 zueNRhmlcq?h9SNgy@MyiV;vUO2UT(K!U9IWlC}<rAkFh%U?EH=&72~wR_6K z%IZC}Z3L1$Snq=(yAh(6AK$xGvQWMYDYQ%hA2n#3;NhsbCzZh#7e|wjIckbd9%aMP z3zhsG(+%P`K?Mm7oc}<}Tl9hFxR~nc9q3NLlE<40`g!-&)RHut^8O4NK3@jkHIUM} z6NiIF^)k&i@1RaiP1kS}LCqMDbaCMVY17jF8OKL=R3Cu>P_Qx&4Lcd0O0w4c*#EvH zueqaEqCzGxf8)c&s*VDEtXj8aJQV4^hgSkPbje*6!5t>73f$=bApa4z?>l19536<^ zMw^>fL%^k>qkn@#reet0diut7G2)GPGBFbP3yCGTQxwl1Y0XF68(iz$*NO7}k~7%O zg9Y>9D%qkGGCXOig^TT)$n@$i5+sBZY*IB-6(M;sM#6Wr6wHdssB^|I<0ySpNXg&6 z;X@;n55wx}66FxV7t>M8pI^a`r9pVB|T_iWRN;ANq@eko()}%x=>!_}{_5 zV7rSTj}GEef_EOteJN~v!$j9m-n4b}s162VB5joKK~)Cn*k=o_bJ<`~(kgo)AI;%h zffqvVmvOcB7^p$saF_zmkd>7UFxJkOeX7*3TL8bGiY85Z@Ms;_F$7HlUDuDR6QwBr zyr8=?I(4uF19ny)>WGsQR5SC<^I46u!|NLD{Llt~A)98taWI zL9OTSPjOdEPpBmoGBF_vXF}ItL-KI-6nm07#4Y&6o_wK;&5IWU@9nr#2$m?}4`aQuWiLyzA zV##^wmH5RAanHq5Q zfYVI~TAel4b4y`kr+b}64ayADKLXC&cp-Fg|NIIrTTWh@5Bw; z%lG1})H_ohU?%DCn;Rk;&Ld+`$!e(zq|x0|15g5s$IZPpn%W1y>mW%Wa& z$^GH{=M}(045Y83jmHL4m9drD6WA6Y5YNz}w>z!j)YQUi#nrm0GkxYAl)fNCe2ScZ z_pT;tJy7yxGDvAyd^ios!G}mmO8Rj|$+q6ae0P2W{NE=VRhbxw1=;c`o}-$_r!GD5_P#Cj5WF9yjdI7>*Og4VfgyX52U%;dpe|I2}k z`qCl`&hFq?6A5f_ua^(+BM|fd3;jj*jAAtvCjHj8XD+QV304}5@XETx}!2tO(=Db|79*t|{lyQDX*vVeGeOJ6~SxUsW#GMH@u zsmu1N-IQ?FmCy5Fnms8wIlib?RdDzi2h40hop^}A3(3u&51ZqLM5eubM8_*#UwB?n z4nSs)X020_80(+v3z0uPJ>#{R@fFb|f5%k1M@WN&1PQf4hE4McMQWh;-dzR;&^v+m z1knMCvb>$)mMPAgX%A>=X>I14+6)ZE^z#73e~L;dkd5)XM`MH3KH*8~{Zt-TjIuHN zsm~h*%;M_F8IO17+GtunRw>6hWFR9qo}b+RJX;rLoZ%cS2ges_S3!Z6q?Q&cWZ)s- zSdR8yOqxMh01*F|M9lG7D(yAvHARh8+2`CgZ0~+sm$Y#Bv7bLv$nu^rHtbCI52Eq5 zZ`uM9z1JV*ZS6-HXrm^jrQ`#7_3#D5;lCxc{o^j8g+HU_(@`;W9hZWOwlzxalbbn<`5{yS>gK zH{9CoT0Z@HWeiAXd0;9n0^Z{B(ZO_0y57`ZX}E?82{mf5KRS1YHsak5?4tf6XnC<}gwzpSojERp=R{QqeT_VSvYsNcAi)Gh2cN|a zN&>|#czB`K?*u^JQBq_D4Syl$DAUaH5hTMO9iz!BDhh*Ndg_Oj1i8bMSg^R3>yjnt zYUi9!Oxa4y$fIJ}?y*^EcCpCvd3ERke^l~YLf|uzY^LPo(n?!*y6S4>k&otLB`>2E z(c}I}f>gruBF(tYd=+(;@9O^GhfrXL7MSaIsjyjUib4)|3R~%Wz{*aH_O)E?5_d`|p~xiwW;YfuPErCIHow9};N7YG!l46GyBzA7jH51rp4w z)L+$csvS7>_VfY3wY=1bj-1>Nuq4D3x;-l>+=oXoYgOv>n)S((|5TaZ^0al(s5&q1 z2b^_|5p}HFK`iCC=R7(*oh$GGqgHm%T1u6E8H{3rv_`Fn6dSU;HHU|n0--;|gb~9t zGd=C?caM`Uq=-IvjAlQO-r&5lP6;>f<)frSp=|ldDeKP-$44hv&-`%-33Y)mcey*$ z7ZbtP3i~Ov#X+N(2-5(;UyNbWV`|zOefD!M!QeCQq@>_*-XK8!MLg#L-%@c|Zb5rDmq+KFT{|N)l6|_S;dosMP4+JUOdGxVuy82E|4jsl$x9$yffB*YEceOot zc&L37>~+6jm?}ytYY^$~!M}?Ifif0DII3pW<3+$szhk<4a`0QjtIu;Ous6ca1&k8t zSJ>w6;I)xvLoV>(@Dz~hBbSa~FZ-tSCf(&g9ypR5jyISRaR>2L^FSNBL~9(_Y1sXj zWbKjGU0@1Ut+sz7*t^ZAyr(;LA+Y+u9B|dX^h8PGQMXXEds$1^SDZcPrfK)Fw4)Q0 zy}8>izP+W4n`i+4^GkftZdT}mPqr5;Vy8o|oRO1L82V`V>?4cEE_WLl(CrVdcX>tS z<-J%@TXj!}INIZ-@y})*Gr%ljyLBc`GKd7lJ8-u5rdec}7#W3bzsBllZJaU>Jt$UF zl<*Ls2WpLA(ct{&2B)LUvi<*NFX7^;SEw&Iv|I0V{)QquYS-gZ!(z4;706?`G@l?@ z^bj85Usw^_caHUMuq$bf%4&6cC_qQq zgM+1@#~jqNPR7oTUn26}MV&v35)U`W%+jwIFFhf}ou#~3fti_E1gya@vLQ*5VrF?4 zqLQ6kp@;G`=g}NQddPC$M28BY;%&4@~5d_?~H{X7LC88+D`0Wz~Xe<`ZymR1=GxpE2xRMcqpE%M`S-rn#m9?#YVvsZl&I0~F2?IOK^CE`ViCK80FD4d83$W-A%mo zehed`3rLimx(Tepu$m&$zn%PKiv2x3G-HeL(P&L_t3?&51<(_9tauXZRP);!w8tbjlkWC!|U#7ASFF?D=dpyHbvo)g1iV zkGXq(=O3KvR8By72&cZ7Y=TK8*Sm&-l9FiZr-emtV0fP2SR7k4wlQeNYVkp}ZF-s; z@^S!K2HQ<{>~>8|DadO?HpRlV>Ic?)I@i2Z5Bt)}AB4V|Ab+03& zsW@5_k&ccVwBw+x9`fuF7Ic{d>? ziHdaFXcdg?4Rv519)|u00zWAd1hPM;$u7Y`cCJ%nWv`Be2wSS)e=7#|8@*~z4-fw{ zdH6Rr&gNi54H)}SS3}zDe`5?`Np}>c{5)vL#>9+fQ9>3^NM|8tKM?GwuCy+EKZ_AxkmBFC_r`(AycfveDx%jVblj8mwK?oGmH3 z;Ww7ERSS6~^&e>;`e@dvN2t$)4w^(FE3o4AF>5FnDOLUWET{M}h}5uXRQWm7WTXH& zO5LK}`i#Htgpkq~jPU6BvSH)ljsU!*<7~O~8$0=eiSMQU(BX~l&e>w1#liA>D#X zDUy=X^nrv7;T2G2#I1S*^D|m68qz`$14I=3xWp|~@csOpzm0ltU9t=f|CY85mWUf< zUlj}^X5?a%fvpeZNK37`MZE)(tXwn#=)Q(ksFJTq7H!619Y$fM7I+hYj(`;c+(EDaGO*)KGuZGTR2^!YC!(zosnyL!8Y~XXE0-oMLi}MCmQ+s1 z`(<6yR0L6eJHkvs9TpU%JYm|6dzc<&0j?)odTwsf&9nDQHJdtfdp<>%Nfk>WlOiDu zVoL)xJ+q|R$AtC|5aG{y_-+*))ad|z3X{2h?OGxD?bVW^clv*nq`+Z{P**qc&2PE< z=OS+3Ku?DOvmWzH>Nmall|_%MiN7jQVPJ^MBF~>n;+uM8B-oHiLAEuZibTuCAc^#M zuatJw3Mt)u*Y@YZ!3pwDgmp7#Zd#!trj1X$e|8?f)oj)jg?|98O?Yj* zxcfj1F=^L(v$$ZG8w&|JKX{lU&AY(ng1l~e|7PHJsSNPQ%ahfJ9!JC4dkLO5JR@dr z{T`hIXc*x>U;PSB!H|<(asZLbJpuG@C2BqAAqnDSF|}zj5N7a_kZ=hu!np=bf&##d zQ!i1WuN&TUz35pt5(FAPd+}f7y&-l=t1B81d z&YmQ}rezuu9ts@2@OZ%n05k8rnwks%e%#$fai2wtkx|oyVIZA}%YF(vd(b>GCj~xy z%1fT?LAXGO#NZ7Rf7;b7DN0y*T`lqVP=X@nu7;Z2v_6cTA=k=pX$=AULt)A3*#zrv1 zA;Av+o>vuERV7QQ$;iSYY3};?e#VQU(fZJ{8^;dVFxQh_4k36tEh^t)lqV}`br8LQ zT(4z2!1AE+8;Njv-bU~lcxV-}eY8k=AV{!HRInI5w^E1qz!Qs&sYnxZ-_ot3cM&a~Hr1xdMYo1MIz z{k~gBNMy>3{isVsaMgRXB&0c7#MN1ndsW+$DTx0cOagGvu|MnYe&CHs?Z;|3)6JC*F zf?2A-p6}9{>fe}jFtg6jefsGMAdJF+_Pu&xNQ`KCCvv~CUn8Y|tx5u)N-HEv=sb+0 zhJ5VEU5EYMSHf%~BUJ};1A_yQ2=V!gp^TByeQ?Dl6ZB5)rksHa&C=PKqHYSV252>3 z3eT{u=`p8x6`9t*L`hQaw2l$&+3R5x6Km<4eS5^y=cItpw&GmBAL8QfJvcCsN2Ke% zHcajRL*e|Ii0iiCD~XE_zIX3nElv?Rec;DAW(pV~i#DI$z0FzJB{lU7NKy`&{ghYi z9+f{zrCeJ!wiPaKz3sch79Zw!IyD!+;}EAZZr5VuR*jxAqU4hOk{lBg6RLXfa@ZQv zTY_qOrOqY)?2KqGhAM^}P-xX+D?(aJp{fa4eSK6g9$NiTgZg)-C31C3K+ye25S)z; zkY3}dWG662)E!ZXpVj!D4{Kzt!99&5adZbYIFUC#+rF63JV&#jE6?$qOTt|g}G}RP>OafV#HwZrP-uJ_ zRqnmtG!OxHy-X2?14MRfb}8qnooj&5o_*f^{j3Jek^YWX$OU{7p7}u?4+sxranT@U znu)n{d$~G1LTJAlDKutvnsOg0+e1)=aduiEv$(CPjUCt%0? z7V+?aW+3!LIccwru2xt?1kx+wvRjl9)J*I(H!IybjFRPJeSVFR^)EM=AquXW!Y8(3 zf2FoDQNdKUF}r9Z-TI}Sr#_L-#pf7x`UI!B+B7Uu$7j!;t<(t2u8ItaMHy@AnCdbz z2+h-n?r4+h73qR(W*9P4Ew0Z`6=~xk-v}W~oO01N(a?~H`|L;8OXFq=0g>HtdW)1{ zhxwLZh1B$>-XgLnc`4+=k?>E$is@dtVdjMjagK8ag{wbpdj;Zbmju&PbMcT_iFB0x zR1T&nQ&=NqsZCq{Na__|K(r3s4PgfP$Q7P?8Hd8_`Q?G#@?2idL~`HFt1v+*qc~x{M8yiD^VZ! z*R9Tq8gDTe*CP@RURYQ#@&A15$UXS}xF)fjY2kO82Sf=WoEBES)>c;$snmRw#fiT% zjP$it1I(j&3-pwKGd~QM4T5NE^+LKhMO=+xIlKJA-q#XPo^fvKjOE2XA`@7q_7-v&wSQe4&P!kHWFa^JZVQ71WN6DJEHlRgRCa zSr1uYCrCvL+_kf_`{}4dI!?{x+w9NEDIlO=C*MfuQ82y#YnQ#OkBy>X!IX zZ?CTg%oIiX_@V*PB5m*edWh1p;eI(}+8qmxPbhuLdUq{U1d?UXPK$#UTOt$1jq zbr-QMGrSw#IstxCUCdCDio10zsvHr!kS0@uJ+Zc4g3a`6%?3)2 zjXtjsaiUTt6y0TuC60ITu~H&#Ar;v&m;gTu7*LNr~oJJ_Ez`_AJ6EdWNpKpYG} zP{qPa;V{`;?!qx@NMI$S%@lk^R6aJ)u}nxE&lA(R#P~2mLpLs(0spgJvF#W`HVuib zlV8Ta_p75F2h95W*<=yAO&2caK3K7z(V&|A&zKDg8*K9HKrqC;EztB3`R>jf#N8o#!3VMhZSX> zY~?Ncw}`LhOQ#QUaa_D4Z-G&E1H2hoDmEU21Z(S$9tT0P5`6-#wlp4WKF=DzbCmpPlO zeMGd&4(nsh?mL(c>#6GSkh>w3rr^ ztSz*hax@ht1(<&+II1@j%=9#Wea;8b-0)^>!Kb+I-EV%E>2J@=Th&DI?A_fz8uCIu z*%R2B;M%(Y-lLAZ04oAax3Y7!Tj4W;Iw>sd)|3G=qM%AywzuRadFJ3$@E=w7`vN;S z;_kMlBq#q#6kH?(Ph?2(Y=5@47q_HaS~?FoS?;6BkU{l(<8ZstLxdtG(xSCF=CYY= z5Yj5jL~52VKyVu|vht~-D5Nsps=WoTJ3#q_PF|q z2mni-@IO@-H5XtLm~?0u?mFwpXBE#IacuD3XTF;q1BT9Si_1npS1@wCgpcpMP2z?W z?uv;T542XFV?I%K0TD0fl#*6m$A=s(%`s*oUOks_fQmb)7I%;W!!H2Q@=98F)l(8M zi8-pi)?!HECWp7sYI_=*ne`sFUh+|riAZS^ZftI>Obv;KK+0OFx=3 zFUjYoKa%R6$xiKh&somT4{rwJ^18K(b*rZxmf*fpGcXupJB1{i@#be@P#;}FG-PV= z4|jToLWdW-%M&jCnQ%FMhe-r5x&iTD+7c&4497%IgAYy+6#%kwe<%DI0M&@M7W5afA;%&wM((sGmOK;!bVLJ ziNAM|a{l}8UvtOj#n40cWo5U0S~K>inV5K-kAl>*qMDn@6GFNNC|8 z?t>7U;`d+rUqW-d+OA_i-snRE(IA4`{LCzWVpED8%py|EeWGrEO~rsetOJ>f4>*Dmk(ubD(xc-Oa8RI*E78QW-03ic6Rp*KC8goyg}LTgtROv?lh7- zy`;;_l-Aq#sKxjYlAQN^E}c5_268HQ*@o5x7_AWHzhC9E=EU{X+BvM@fLH& z??q-WOn|QU355o0dN+7Y+eL=wGirO4;$^C{==Bu_yg9jqF?X6^8JYgU!MOBvHERz{ z0Mj>%-OKU?lf|5gfjgP5u*Mu6O}e}&H zNj1Y^&b@ju_Go|a2v^2_@MYI58uf0WsO07m3|J(5xPpL=TFYEtT9gPfPiEn?`6W-J zNXir=e!yoQaQw=-x_0T*r$K)%3<8GUUU(%Ka<8#z*8*VrJ&tp2(5z#}6L3Em82VCb z*xpzEwGHqs;ilK))s}Eh#}up*{buG1zSq8fEG$cFF%Cxd;Kq1!{N{?okTu?QX8a8K z=CWME5&}dSkAyR)EB+&l47a~iHzg;t^eSE{ zt}VyX6uT*LT!S7^wWS_3N?^t!wGpxoWPuT;1om&ovVl*?2W+{ zr>ZvOx_!n3H_@M3Y%nhif&lQp#`hq~GCUjpt6cv5E8dsT0HKQcenrC3#(?b=Jy!-o7q3WwztdC64dFG``4I;t@MSiUNTQB zZhm2Tc9ZAKThQUAa9pEi{zVSMAXIi0COf!*A!A(w1NZHA9jDpq=(Zd@ARK|IhJcq_ zss*s)+tabST9YKE&q?ZFh`sP$%1Fib46Asbtn{Yn{ZJb1QT|+0-l{WI64LaIjja@x z@lnUOrRf3(KfVgMHe@iB?LG!(SC3?b9j#{cxl2VT2Y#_6)!y9Kegeg4pOrTyi+&|% z{!lr%4T+t`W@q1sklR}ZWGx8cWsVLM)M*&InzjxrgDwps^~i+%KK$#llhw*^X-S}=%!oA> z)Y)-IoAu3}{OIWT{7-!HYGH2k1CaUjj;z5gC9Uk*GXUF=GD}njG>4_7I}ja-P3A{g z-W}YxB3n4h$tl?L_H?!oo@a70oG(m_>X>I6J6m8`tFh>Lu?H7N24H`KSuL_Aq17XH zbrasZ^LS;ZrG@2nlu`0D9tvev4@+YIV^ltV_9Q|(viX1|!=Qcmkz>*U=7JzN{R34F z=s6ex!xi&)vf*BhF|-!Rw8*)5w};5%jb~tpcNxH;9(oVTkr}(r9ZxV_W$Nj(_On6) zTiN6R(!JNyFk%U~KFF5i7jt#{W(n`MW`hwMvJ}<8Zo6God=}9+%Q`MTJ~eY^Z1_kZ zW;!3`vfdOM3~KR^-^RyNgEEq$j-^zs*r$XKS9yQ};(V0*9~EV2d-Q}AJ=^@vI7SovURHgcC4z+fLKM({KcNxB zYMSX9??47{V7kJe1tSD0bcQ}0Z{zqjcO-yPKJRYi#JjOAsq!(z-|mpHt*#}vJpGb= z?`d#)MV9)ukTQFSrAEC(7v8+Csh267`RUR>V?S{Y@p3fSHS6Po8+Ro{cBkJeBOu5WiWf`nv^^g&S~gT2*|QC zWbL}VL`vuXt!=6s2#A7!NID$U0G_1lWYhrE3+iRCuj$|JXPv5h0p5wEQSvfcT6ZCd z1}KbLr^&#%H9#22!3_AU16jO0^ni~J@K1Oq!-fx<29%#YJVL=OsD2Pt~Jjx8} z*XJxhDvSp}V`$1An&_vcNEY~9ITA|PuC4tZ4}VU=T!`D{v!w&?Jg8Uhhqm7aR_T8M z_c&uhWjga1(x#bc?V{N3=mAGW{pUcS9{@7-{X5HKAXkVuhs1GketgPJ0{=lJ!a@Km zZe#<@;-7Mk&lpt_7XJo?_{>EQ>n_+m!n=4&MoSF=lm{v<|5PW`+ z2~QDY;@AcY?xLkWV{j^BD@|3tpNPjwn^u4!@~Apc6(untL5`6OVuq{SWZ2RkZ=?>` zDMv)6W~N)ewoA^~R=o_Mj8jbf_m3WO3s+TFu+Kj5BhXkA}pQZCu}9 zXlG{wxx(nkm*YAo^T$5W%NzC+ebMi$^lAtL)J8|!;$QM?*n2Go<-&mn z@e947k9>4cla4zPK^%!&0~y3Vf@GbRtKnTo$j9`AsIjFkCw{Gr10Ln1_!+OA4!bJ$ z3O%KmjwLsUjX?N3b;^Lzfm*h7*YOuX^s?H4pW#FJVEdQ`WCF5@>!zZNOXKlpDFoC* zgMnUykLl;L8r@R1ZrJB9g@9YO2?)3wB|o1f2J;yYpqGZ*i6|1zH6(g^+Tl*1l&0B< z;k2CIX6@1`ok$lb?OyUMKl=+*3Siz(8D%}~P$$yTDqVViD57cMYn2xnsYnH|6IG?f zFMj|1=wrv)aZfdKO4)BMQ$wn{l;93>Gc9xa$g-4V!m8(Mp0FFlv(f7MLV&-#s_At4 zzIF)qUhuGJS$Jf!d{yOX;AFG0El5a7R|BzB&eK%*l^`%{@DT!{_!p8m9Gr3?DBNR$ zilp5e8+V=bOPW0~&-}foo#C+6Ec(r4kqbuQ^QS&A;<8@->n3j)9i~*y{3ulAtv6?k zK||p!$_^HN{3VGUkV++(sSdp^V2G@&$V{w>$VLNpJSgW4<6nq?Q8zTuk&|;|{dZ+f zhONMi?as|j-6;hP3qC^D92+bv8XAOtj3sJT6sXpA$9#9-?Qzotssr;7Q}(-ML?mW@ z!?YdU{9&(KFM!S@QUlR1Ol*qZd5aFhrZA5Qoz7sz52uAERZ&oFGeI)tT&HEEB@byR zM3Hd`NuB2xi4}8*OWVEMdzx#h$0CwhYPdRZPD3e;k`4>Lp+-}9yx2r(o zuy-K}A0^1YD~w7%sHw)Mq_d6CKjS4iIHY5@l)_cSJiDd&9c!o@cwuY9LHi8*xL(Ht zVSd11$0MF?aA0!lL7DX7h`0EUK4R6-t*UD0P2{}oT5S#2w3&O z&*0O(9W9BQ&T{YN9JJ+521yqe2>|QnD-=$-e@gU(s2G6nD-C}1f3N!F11=_~01^)` zdG)_G4b@Ljt^*_kTUKvs-J}&1zcT-UOsprC=Lm zFU{Ah0TGyoMV}cHBrH0a#qaa*RH>?I%zdA_(xXaKb%*a#&lKtwXx+~@ZTWYJ*=lvz zbqvC~fQ2;}AO{C)R)PxSPD)B}9lIAC3?>X;h^nvftSz7Pz$)r*zp@1tEl#+6-n7^5 zO!meucq-R>Z!iP752B>X|8SR!7${q8%c482Zil4b|FgSZ7MbgC;02EIe2nty0|TY6 z;veoa>fza8xo^7(EEfj*-N68LfRfAU*ecL866Wv|VeRPAin^ptNWnhZC&Y zn}fBEJUskxWc8|lwO07q5AYDuZC9t;t7EM`Ns7GcZd&3bQSxQz!;Uqw-|>E{AV-2e z3F=~){t>Dmi|kHIOG}bdBARL>WCZddz9&(i<`7T$Mz;e$KDU`h&Vgg6cy{@10y1CX zXOx&yV})^-N{)k=~^noY;Q0O16O?Kh|WI$Z)do+yiUBNX&ynsEL|)Q2*<6 zS|HUBd#^>btaq?3V_~9Cdm?8=*H{DJN+ohpGQoL`PtZq=fxxJd@0Prf3pykaAaKkL zlehn#VkYG|fla;OWB8=zizXxbfEuUJ^jpTVFK0~IY!4;hBsImg#&`t8oyoLb&j}z$ zy^qKhg(6hh7Q6TbsZB++Z1J&vj^?Lgrr<>MPFUyNmb{ButczO9eU@e2_ zy+=_)2IL$;sPTcF)C~4yRTCd(>{h_b=Yvn9X>|NDJp`K zT?+f#8)DFWK(CjG-vsg?C3ELN`&`bCS!pO*%?J`_$JZnX>GL82!K$jNKxyX}H_T6{ ze@#xdZEv$eZ31VLuEm|5US){fQ{E4pHD&@$Daeyd^xLvCliv2eWbvBc!F}-F5S@MA zvmx34>wmZqAnotixos%Q9=YT<`iSDOt(6tNRIE1z2wn86F+kX?q-7AY8ne{&bd^^UGWvG^BDg?AbpgqR4G@;jWg*O9~Z3fHmyyE89#XC%VZhaMICF0KTv#uRD&E!Km))4J+3I% zs^XR^50j;a0&npWUBCk(ee4qURi<8^Ri9}KB|lVt$ZvppIMUuhEoG!dKt+McBfzJ~ z{g@$56*uO6cz5zO<`eqGaZw{y)fn8E5Q7J-a$5M0er_Bw>M>I<{5O4_txE6Qr-T}- zi1!SJ2o@_I<&*U@SZcj%f65EFP{WGI2<`JEl&|rX%iVKR-B02aV^wK?ZecMdVVtL3 zJwg4Ojb=gET}g!wX?G9gAHMmVTJ_DZNZMNzw~mP z$wCMCB3c;wFWPtvtQW}BzB||D41-|NSlwK)ISK^=dAV~a*mwt~44Ewc&d=E<6Ie_s57uq(upUpYp%HI;*B;_hIT423XQ_zpqq`)cm72cCMa1Nt?z7%-FO+ zTSMKG-pp(UILbnpbAZP%GA9w%w=sV-ak#u{$6?}k^8_Xls&2kroHb{atH$}?yp@4X zU{#S?@46ph%DU&X_b>gTV(JB$wrO0uW898l5ykXjE)RjqNgl*gVG4I#5% z?ni5AiG3wzN;h>KAf&>J6S9@Z(H(wQ*6%?LCw)}NdnCi3q2K32Mw+p zKO%A+TUmg{IO`oUhe67pQ)5G+3`0+=luTQ*iGXUvsWMtDyK07edvOs_0*ej1<>oFZ zhN=v|dFIt58JxCs7GTw6KOb2G`jc^9$3;GXET|1v;@<|x?UX94anpT~i&^i`D#*^1nj?}c=U)Yx2`;eNx%roueam`-uH$mOu$77odt^-F8(haeK0X)j-$Y8z|6lg{}B1Vn3q59RRZ{1r{~)8<|NHiIqB_TO zg6!XH4h@;ceWolSueUi1coC5pAUv-_*!WVnT`0hefs!#k$MrwGt}ceO%*+*df{KS1 z%lX^Tm)>0M27CiRbyP2&@eK5=&6k_caP?THYp6KZ%gcnhsKaWT02agbPVID$0id&yxsvcS-FLE*-!|<02xRxbB7fVec_gU zbKxZ+Su&z+dUi4T zMWV?dsD>?-P<+3hFbcQWtdEgyoz2guy9e>7sj}wn8LDEl&SV$gkkPn653JaVW|=C*&BpDLSUnB|~RK*)NN>Yzr5(P{8w;AD7a6_JEn!`G)LP8_0< z4Dd~5fZ0Ih5R9~^3%rQEap9Vq4mUNO=RoC%RN90^2lsp!1ODxkgNguxh-j==emsCl zm(j@x+w61y*{Q#SFo{!gHWX^Z-8=ciJu6_7OR{*{d!cg)lsK zcsx9G%S*pG*5o^cL23Z-G8UwwdJDrlRF9W&ROuV=9v;Bzl zA5iGSVEdlM%_hfkRO`mZyklk?rk#-}%~ zVK&rKup)s#a(90XuA(?Z5awwqO2YJluz5=DOXB2d2 zz!)@qY$$MK1K~cXtgJ^~6%-VLNdlD!56vqlr6XrZ38<{J0$dg&M7lQJn_9}>p9VM$ z!iPk$X;1X_-$`47S}%wSU6zIm;8e`EPo{_vbmp1}L*5?%-k^tkza7;D(KBd>V6X}h zdptSUrcC&?@88RV$s)v6qoTfd`092qz4Hg)+;wWGn>EIN-)y>Z>v-%8z1gRRixDU+ zU{~U@BH)|ey9tuPEG*!(k4Y#jodcqaYaUiUvd}qvg^H%2sDblIoz5V+s~b=g&?qTd zBXUiNERFs2VS+D(W9*3oGKjM>KEaEDI9(oLetAHPVduZ2!Gk*^>>Uj}Xl=t-1sDWX zN!fC6YE*}RH!mm6H1CG617db_@Emje_3IvEBF4GT(aEt#UJW^nwb({TG`@L?3v(qF zhTqoqLCmr2t(yk}YC=Gunzra`xIR%-Qo_628UrK*i~xgf1n#HX8Vvsb=TG$Eo9vd; z2k}ddReo<)%+eiqTLkWqNVfa_OrUa*i_p&}Lva228yOYle>fXD5gt{?bz!H#L-II+ zg4RI_E&dLA%n8wpl1bmWQN03RU`0C0ACz|MU6u5I4r>fu9*FWM(i_|%lBGF><6oIs&6YxRJ4_~8PnRgLQVHF^+~k}h9<~C z$@prATZ~7=z+m^)PObvst;ZG2++xwa)-BTgU+05KT;#h^#`iGBwQJ*842of59xF}^ zOO4HmV-8Gm5lwY5`xQ#RerZdiJ%T2HsyAG-s*2m;dELCR=`AA%Ls!ZXnBfm#N+41N z07_~Md{TjATyk5xXFiW1E2Xcd=cu0*NDx|-(MI!Z4ql1JQK-gK!ki=@K96p`y13c` zu)ThFUF-?<>8Q2K@Z_Ifu=lAjY)s9z`1DCKz#{6yhq#X)gXHtD#rpsykVy2EiKqQy zCZ?*UmXMW2a=>n3YW&@5$IjL^2@BDgbMK>3dQ>zv3m`R$V{VKVgtca^W#?8|FuNwvI_pP}JoBjUHzqf216PuPcxLKS|Y%bpQhs~Bu%-w!{a`(;I{nZ}y zAN)z$wMyboDJUMd?_$QnlI;s5X{8;;}*Ow~Y zD1lTFHum-h(>U1;3ohc>F)*g@@$@E3lQK0mb#eN$$jA5uwhl?zxp(6YN=6L#v(5wwij`^JFzJkAcbdb4OB%f7d!4ot@kgt>4mjn>FN( zNnVf>f!yj2N-iTF0l|Pqz~zMyk@_hxlkF z@E7DyjOTt9pwRs)Xp)XCfMZYEgJlZM28a_RojylQK6KL951Q7z*h{slY54S zHPwbvSG}kex&_m5vV5qkvp!~9JZ)oQI53|g0395bk;1c@Nll-x=sp1g z39-15H6@`3rMCI`wEMyKS;)&77MSV`P;%zBv`2JK4h-FFHpF%xpPkVfXC@b{>L+5* z4P6;ha7f4M-1G5&eXjfv?R59NN-*%o%kJDJcmMS2!XN$Y9@*C=aqV9`K3k&}hu8Zl zAnuTrm(%&`ArT{bOlDk)ErtF`zeGu0Nugu}Z|`E*@!0P)t@Y{QNejAk;0i+S-6wn_ ze7VI0ZO)I&YWC{^Z||UVlAc{#ToV6l6!y6oo!i^E=`r#m zXh?*ryGY{Oc6vIQBCURQK$60IU*k*ifgVQv<7pF`l$f50o@QU8hPHQ!bO-c>FL4AR z+phRhorxf{l?=V}okCpw&CafJ+!=#24RSPdhaG~mpKCEDbubis8rfLE#nMWYxfic< zKQio6zxT8A;t&C;a%96+w29#Bq0H@Rt?L_7#D&^)huY-^kb9|_HN$_LbAXU}-&F$6 zR`+X+KhrHB=?xF_C$1o}!lzg=**IyF86O!ERtR zn`uEtx~m@G{&7e>vlASaY7kKoKS=HvPYMSamGhB_Tw}A8lrSbS!y$5ZFCaN3#b+Z) zz_qDd4h;qAuDGyI#0tU|P;Br!vvzkRshetNDJQpo)fq*F{?fQ{xv^pZ4k;-UUxre0 z_q1m5Y(Gu5aOBIo=Kfb~%*-WPC3?UA2n-X^+Gem57m7=ufmbmmmYRW5SWI4FVK&Rd zQHx0mNY&2IN4`F{2vE>_MegBo@>9xDPmLVDJVxl3>ftEAdVnXYQoP`+f2Lu6loS+* z#@f5!h`DR-hxOb5XTj3aZ*Q0Z1|NBzr!T<-iF~Q{(#wYRElSC}(O=WQY_I^Huyk?{+At zsttS^{tV&LzPA0^CeqS*BRNBJxn<6ureVRfe>}MRU(ee2{Ltz|kc&#VqE3BwMvX6e7{X&p& z{q$)V#5Um(6F~auTGfcXjPzR$Xn*&O6Lb^7kyhXUWOxFs&F({yZCHx zNdqdUwy&6P18;@tQP$>V3DMXpiv6zOwRn4)#Y7@jjkJIO%cF4)b=XxaJS!<7%%L?B~CGgN>X z=a)!|-22lcP6;p~0i(9yBy_v(U>I#3>op0k*5+pmL=NdgMI!3#=%=|Ti%%vj$c z$JefJ^SI#iWO4mZ4j9&0*>JDfi#u;zu^!C76h7ZMEa&9n8i0Gp;(8OMpupbnRg=*E zLN_e6Rc;L|!0P$0n(14ClB>lP~DDt?jfS#Q$pxuLTTLYj8#j_z(P zEh8EKD?OyUKH~pPtZKqsc8%BjcRXM$*|kap_ZhIt;FmD~=haZ_9y9QW@6uG8eHUq9 z)CSE z5T0CkN$F0;Zj9^M12C~h8W8GJdw3Cjj_cF0xL2ksoqV%>-Fth3vXpHEDNifV76 zJG-)R6ZKP3LlP+8p&+32JGu{^TVY|Y>H)9c8%<3MIHqho_L&~w5R~!%G&0$VV9`_6 z7}(n=s><;^KU-#6U0d;yLTGad^AAG(AXPHbvl}@!2l^VG=T)~*nV%mSR+K@5wpJ9Z z>GP9|57E&uTk!0~E+}?@BkbuN%-wKgp)#>kQ&)xH3Vlb%t&R2n@F^)(;Anh>rFI9t z={`*Bztb*Sz6@aj9WgF3sR|6^2DD~J{4j=fYG`b}uwpR#^wnq-2ST0dmrmN@R5CO*&CMGjDK3Fc zot$C-g99(UPJhi><{)aw;cOyRR*9ueyL|pUq1D7luls#G3}(^fGD3ib%&C!?nXR22 z|Ir(0aDruM1j5PylCbJqjaq*toST=In(?s!YBc~m;GzsqT&9Jo4y_MT&v6MWL;4u9 zvlhl${lh04yGW4(;ATWAO!!k9{d3YiAVBJ?g&k&{){_cJ`*1BHTkQharr#Y%gvg;4@~_r8H$fX&3eMDBfC& zz{v>}KNQvd4z>(WtE#& zCF1aGXWmgoWU8+YYN+sN?!Mx)RU$aC#_@Ik8t9MW6B8>ud*=3ea7v_u9iYq&Z~?HvrXBXXFl>xL9Qo86DpEEyA(9m_NFDo!xKa5+i4_r~m`@Fxn-p zF%Ev$@zg>fo)(`V{ad@nC9aO4AlSVmcagAXiuKN%`llRio5C)STXjJ7E$yJAB_Pf2 zxo~OeIas8g^H~f9?IAVwfMR@4I>$}K=TyOyId_3>i+}dATFY&_0oe;V;{1s_RCIg^ zVrb5Jn+I#6XL~xdwDftp#p^qp^ZmVE^~YssJ#4IPyQljT7cSgle2}U@R=G_LS@HLsYUI^)b{;abXDnVTWLw%f zW<(rj$C()Z$hueO@o%XvxE1Tu$QD;<(W&tK9JD=&p^ITrijn ze&lsC?zn*sLTDJDTH3$A|7GQT|Ju{;&wJ^jeArTqgdLr|KeQri(#x{MC9ME>XfYpR z3&nvlCoUF@rm!Z}!+{KhAoQP(HQQ57k)UXVZM!42$S=VW8i$t_7>171y<#jIPYZ2b zrM0inoo+J*AkqMX&eJXesQ?(0d@MEL&(SRod%(^Lf`KsZ^oF&+Q+Iu=snC(`-*;=l^3R~F}>OA4yEeea^;BI}_t@^_)3 zx5}?hm51BY6+5UBDlm@Dqak)%+BLqnyJbOgf-eO9Tq$o0q9YNU*u+%Hi2|(4gE0<} zxCI(li9g#W*&wGR?k2Azhs1DBp6Bfw?p&bchhqtwe43?h(iUR zKb!3A^iTFvXoZZN9F@5pYa&{jytKc*;!#ox&%lZ2oJf28()SAOcM$y>TZG;2#d=uTFD^KPxJ$ek!P?Ku9Znqnv+xv3q}X;PN|C z1=p|>)6}EM|5zSkED|h2S8O@br457SBsCvp&`#sBQ`-AKyqGC4Md&}d3m2!Nx;n<| z2s_9n=YDo*izjwh3Tjs3ruMd92N-ada3u+=|bAy3$*)D#sl|GdtXs2 z;Sb84|5pe%CQKDa!OSrmTL=_Of19s};4L;B@7=vKfitp%sAtShO48HTNvII92{E>k z76o9J{5@JrlAPAEvK-sQ#N(WRi;1GD?Q!KMGv`%*bwDMny*#{_afBxoL$ei18OF(`IKxh8_7nXs7}t zC5?n5MX02tw78e!@9uE2hkkMT7c|s|Cry;dG>pqOU3@iI+cPb}W+G*Bl5jW1L9~UL z*KEYlT3%`U_uF;!@+D!X+Qu8tG}o1c__ z{=CpYDJEn5-)<*EhmM(!#zYs^6P$_oMQM1ERz5x`2eHZU}0CQ>&t{`-5D z*_6z}+0s%1a?sb<`}g-1gTUQNoIpos+H1%Ru=D>KH|;=Q6D2=T5QTt2cUb9aHnM`i zWi{S0LDs%PK_hx%0X44#86nM#rSOrJj|Ti9C!iy z1oTnIFjWESBd_TIbcFUpj06rQc3ODBt#j~#@n*yh77)D-=uEr7V+x*hO_5F4p~-PB zO4G|&g@>VcJ8&Ot6lU{?iOHy_h$!qf@Z@)pW&?|(t)**-TlqSXHau+4RTcH#A*TAT z5uLP(36Ph~|7l0FskwROk*Hk+UU@)LhRs0vb1U!q_|aItjJ+<$wl?O-uxsl#rO1Q;4tq%Zunv1YOou)|W?okFX3&#qL0}KRC7P|1GY`rLeSJ z+SnKahT=9SQJsbSB(roXdB7drMrGnQ58i9eUqmVVK712Y!=Q2z^mCAa`!7T~U@#gR zd}E5HeJ`exwVFm4lRikD{|a)`o3W#Gu|{Y?866GPazo@tOo~`Lg&5Ds*Tw;o-vKDlD!LgJiK)b4X9g9jTm8rGt7LL znp%N1mVI_W#-G|jO@E&jbLy|u#G%qT9sKr%h*EN;M9{%4o=jmcoL)Spcua$f9-E4* zA*Y9R%LL|qN4|Ss2*YP?)~xyUHk+!YB`tjiXg+X}@etIHv^bPtvhu*gMO-BMe;+*nMLT#VdG3sNVRDeuu=dMJ`;j@8l9Uf&##gidQ!X4?^z@CTm5vj& z0J&$tyFf`xDRJndhPfsZ1Zl*Q5)%o_bak!01PzUh7TT~*-)}m3{*m{WAz&Y)wjG;D z2gRC44T79D4uIKPOP)t0s}qHkFy|$4c8Jk+cKu9R1Xao%R9##>jWn^H){c)~KKf%V-5Ibk2nxYICZ4sm3fNKDo za$4j6`MoQYkL3ON48^IS`zg6D>e|2?m&;JQQ-Fqv#U*;%H98KfZcZc&-Gz!u8WmSU zbgKFPXjVRB;Y%69C(V|%o_Ry#Mu>j8(YHzG<*j~!k$Y6_;d*?cD>S6S&C`TTnmSBN`tPwb3IieqWxA|eZgUS4QfSrd3)6W;{?x2G6z zkbT4PuStYUq5IS5ruW+TA*=A37IP9T0{H&*dgBM$Ihu}$MCM`K*$JXyhU}~n}2VvQCsH}pfX%()uK*FuMfZda~5+~3U^%7w1Xg~ zFULPJQbqJ;u>`^j_h-=*^C&YUh&U@ zm#2d-6s2raRqM@t>y+aOskv7M{tE(`hBD`o^Q%`6!4CKD%z4uNEZEgkKkEJ~^~0>H z^0++l;?OZR4GVfs8q6p0rhF_Esk70yOsYut9sf`<)yBrY_t-hp7B2}5qrkW}ov7%C z5(5*VH`n+vertE{)H=;}(BPEUeUGJOlHCRqN8?g@T=c!!3rZc$*hu}t&J|F7DSvT|8v2#6)yLWaPI=qYsmllOL0(-%+wUE!%-cG7-bJ z#~{GLJ2AXh$>&3u)lW~^W=n!CPv1X9LDV$g@1Na655kRjbc9y=N>;1cj&2X-OGx#_ z)%ARr>GjMp(d%5=#eHuXBHA(Q(%BVceGFBpa*N>EKqM5B(&WPI*B?L|G3$S09f5HG zvIvuu1Zr;Tpg>%7@*otXx0)2GTlW*8TPMUYl1c*d8*X60L?Ha=sG87mi)3t|5Y&K4 z%DtU^Nx++GLNQICGlCuz*5*LP!;=Ze5J))_UE)f|k%Dj=*N*>S@zq3u<9vnvDKWObax6W4FXb90ul;{fJnn2-O|z}-QDo*^WA%Y&Wv+B=Z*dB zz1G@m_3m~M`?%Y^a zyU*XBr5{1N2pUJq5|4Doa=F3>l>Q2^Oy|G5iNESLhP5`DeH&HsBQ~kF66`1+J?sTK zz1(LE3l1zaRO!-ZEYDtFl1AO*C5;lbj4j4XO45Z9D(lR&J-Rqq<=&m!LeqF%vcnE+lPBF(Fr{3jleIY?Q=k7r@2(F_JSjuKQDR-O24&6iD}RL%Ju#To<~e7rAUEQT1V!NG~gtZ#z{ix06AH}GXqWZ_=>d-Au&Yu4W-MaRacKMHSPW`7K$1;J#R7}J*z*d-ahm$+D) zlg({|ct91!;o+Z7E0^Hg}EAF?$m_HKj6a{Sam`)0-JX zUcO4l?MwQ&c)Zd{iaP&GLt7VjOFMq(#39&bUdiI2htozN>NnMzC7H4^CqWScT31UC7U!qEd9uCAH)UMaFE#}SbJ zFg_G)pagX5Vw1P=s{KaI+4^4fU3zk_-3K4h?^4E)%dHz3(r^hSTvbjrZyur!lsb8e z83F2=O+9zyjdSNVY9m$ffQ*tg16AD>Iymu{#`=%zNEJ)QA>fFTqJ9FWxCYJ>3hl?J zM4AAcrHLHfraWN@_A^v@8XcQLmr2;)t5#OGYHHyXb~hxQe(cWUu{)Z(OAY^=x%q^` z+sl=drTILjZw!Y??U~6R)+h zpWGrmigNCh*MSm0ne--yvv0*r_I3c>E%C(1MXdH@wy$nlF0&$->Spr>F7M(&{7#4X zpg`x+|F$PpSjT5~VPw%@GQUw&r$!Bn10e!9jKIiB3(Ypn-i(>)S-#37;0!m@;2#%< z*U{Paubk% z_unuts4!@x)OCDAH=G$lvsFkH<7{!iXfqEO4%6Jb;pY@=0s9%pS}`OH^KUWc&-$v& zBlXzWjQ0bdK^L6~ADfqF85+$GhKOH*ml@@UNNNC7V(O-Bon6Y{@zd8ejzi2JT+!8@LfgID?ESq7g6Bk#~)&O&a?}%Ku3cIl4eu5HcdSEE3^Hft)`jYQJZJzlE z&48{7RT486JBjrhGcz+{4*QRQpp23KcXD@fqHe9HqFrGp5|&^u7~k13l_vI=a^DT! z0crCIeM2-!QyUAnguyskQ!`Vr`XK#@`XS*PXr#bz@F=QxbE5j82EpE$AA$ja^XQSH zr5q`&jra6Spz);ao?XEjUE*GtBJ_km+>hX^%E@_?f=o}~@TDZ$kDouuS-SNDU=I<1 zk@=%@2%d`V&Kf~FuK0}f!rZ)jekn+P02CTAIVlY@GmXrhz|ApXZf@Y`|J%XlPc1hv8J{kI=7 zSG(4~)lm}V{?R`__l7$Ens34cPbIAR{t3jn0lo16BYyH#RN&t-FEggw{iGlqgBk=D zDzpHd%*Q%G$$GA@pI2FuiQJj}wgIDt~e zx=dhIvH~cAg17!RFtgkXblvh{h{tu2L9K9$+8nP)2jpLc0mVB#vGXg*cGVUqAfW%h zF>R>8%(saJW%b~YX2G}bbYiN%{v2SuQLjJ0^4HPPL56**K8=r0msQfl10HaBCE$u2 zaxMZ+TT7T`HQ&qS(9qE()SNSb8H=8g9y}V6V579)*aM-Hs{Te;@F1p%mGz$=@AqDA z=bE+1$UEJ*bsYgodimzR8vdUmmlyy(GEe~;;OEhh8szhFr) z{xCHaZO$>aPD9>voG7+BfjzSG>x^=r2G`0yzXPvtE$7cbjN54?h0@SX#B zHq6JHGhod{`fy(|L`e}s&#~G?;f$xjK{H7$2j4xU>HrWCpO~pmh+ohe;#oZu#@e3k zCK{L&_^+#r#VFHuwhAKENgw(*Qcb2&d=N|R=C`MY76Gm^EF6#X1ek`Oo<3jR#Jcnk z2qnIqq5$5MfHgIjKGC;kfh7fqKsjysI2H5DZs}c;k#x?0<3(}E_b4)I35gJZO*J*+ zoP^WCsNU&xPQ1^U82VnYoG^g9>(t{Bk3$qOwDtvLj**AjpvLeN9m8_2OmJ9^THJ|C zOq4?UJ--VY9yZVJiG>B>guD4#47DTHm)B1UcA}%B;MOUhC31s|D_O<-{w&|!yVXdU zi0w=rZiSNU&Oe=s)cZjpsy+=1pY_rE{NfNN!CzWV-4NB(XvvXnZf@(? zr+RvNSzo?{{!M;OTJr1dzRJf$!aZ>B)oQ4S{K1KzP2J%|)D!!U><;DfU*X?%#+{bB%OAZl%_ZSbJMf3UWTJ%K*r@n zjhy)9sumXI-w1@F!S{khd?I-{Xsx^b=l+BB4aoc>A;AsLgY2a4*jcMM@~d9~vy{J^ zn*o!Q!jXY`Bjhp9J)p7t!QuQ<**F!N<1;&5`v21coF5AD+q2Ph*&<`MlaraCgOZ+^ zx&_ob(?{p*I)DTjxo9%rGLb2TBbOU2%Qx#qMQrF!8t8!7QOP5XZaku_oOLG#IlG-9 z9XwIB+jR-xuDIzgUoZm=;iHzfUYoQGH1cV8c6J6_?I+E?a6*w}v+ zg_wv#yo~ODlEX9S!jUx+Qd(m!k2Y063^z6?PPKrK6cDY|oizlXSnA(XnY07<1-v+` zZ?(VUB~D4)o)LMS9Ib?fMKSV=$0oK}yKmP5O68x|Es}-LNwL4n%*!hFjS;JN zJ>*;v=#!t<8D(cL{;l5Oq+pK%3^)50zuov7FiT)9!6_M&uFQRyGtiPH5W$Rnp+2DHg`zP&7Aa9LJn+bp{!t zL#fw^l*12Wwi-4PdfJ)iEV}(jEyFYYnvylW_#x)8n?{+U4)@XXNp+Sn?OXeIuKrNS zua*8Bn$VVZF{Hnj6Wg=tD?It>?@u>IU9xX_dhVreEB=WFj{zDB3*~fKJ@&D3_|C}3 zle#2Jlz7ab$y3(J&XiSN5xZ53ZE9uno1aJ4Qcaw!a`W^0Ajzk7)*nClUq(mI|Jgcm zs>pIq-#cyOgXha*#*4AKy4v{We;dhw`=?jeWS3R`R0u^ZKCNrAzCy}OstTpBWmbZc z*?Z!dnShwr`&~h2#|^@-ri+*l85!XcbNMyD-i(uwDOJRQ`3+df0G^sv_AN0*k8HU^ z0Vo6*4S?5m$t`2}Ql|nMR4`k6Rv8lhjg&3X-dDU)g?hpka(C|nMXKO}5UETm|M^o! z`NjP!6lvt&#LFx7@+C6i?h6AWJ}z$bZ5}He~fq*_V6b+~%Q1l>=yv-s^Xwg1=sPfI#SF3u2tLAOJF6_2L zI{L9+RriIWs$$#55rjj((%5KWzkP?6bu9Qga zXCpk~TwzA}bX;5+AHN`ks@44;122)^Evx;psNsjmGO{`D+oopeQn7bu5Dy3htJRmK z?pd0JLO&d^ub%`WgNMW7`eWo`pC#p{h#NQy=)tVjj8-d^Y@Rea~$Udx<@tQ4q6w6woF`g@yJ4uG3c z#7cx@Cm>*@y}elg?*Y;VFt@+SO#27UAa0@-Vh#gfW{MIU2(;%#$jAV|K%w)JEgXVb zJG^B#Zd;1VvaVh6l>kqnq+4@Q8nH-OIR##&EgD zngL+J#qC>SeFonnFlZs$Hx3^k;>13w*$~~U&wv8|NHI?AIR<*rlB*z7NB_ffxyK*C zBFImgXZsm8w9SHsk0BHWM+P^4NKw*1!xm$~8A#GM)AO)Z6P&imw!FLv(SJzqaA!^0 zdE9wGX`F*QrI6BhTl?IK`gqul-frAMgM@KF2%&vmBO^9nId%pefkJ4+qOEwnU-D@=_({S`};F#lwjQa~Zg$LG4OoBd0GJEpSde0u%QM9m|oRFppY}D(r#KkMTLht4u7d(R)ACCRel0& z(Xx#`2BLOckE91=YFDpcHYpmYVBUS_1)`5`w*_~6i)aMco&nbnn=Gomc0E0Rk@g&D z7(6e_dm(&N3K%8mP2l((7#Rtk`OFAd&tW95uyFCuUmgoaM>zQ8LlYc|sNcq{O5NQS zU27CVW2AGnp-+m2ow|S z#TD)#ApN&wSyKB7cwboeI(&#(T2rRv`cp3>>7h6Lg`kQkWhSl>7g&MU1ahP9fFSTI z#;@-A;0rkB86S&B=j9PX4glnv%E)*3liKmS03HYHU9hl&hrcKl5-^})2{}0c1<$ zF*6Z3-xL))fZR+8;LlD)MG%UBwxUTq=aso_T0|1d+D~_UDk5c=JIKL!qP_k7`Bg%= zHK-q9u^cIbfDZegjGbOepzjal&sED`>Ym&4gryxg4VFL&0f`~8A6@NcJbE~A;B!kPtOJ+ZYrx9+;ScZE-Z02s8LLf-!#Yih;m=^4#$zUxLl2uGga zLUh4J8s$6_9IfWQHKjJ}_U!<+a-aqMi=%>5pwrE-m+-6tW^1(5yOec1Xx{ad55QZM zj*&4Uw8If}xCMm{Ev8$LkrXd||M+_ZC7vuUD6yx-{6Jj+--8C&PkntB;bKAvH=5m% z&(VOf^__mPY4dwi@Ysf=&sNifvHLzJo2U=;Cq+PE`x)%fq2OVQc{(t885U%|=3R9a zhKBFpKn*zG2iO?RYpzaUlsqBK21`Jc{=2W4gze!x;*wPRT{GwERGm!(lc!T`xg~p?f5TWWIih0g)W(xgaV4m z1NZ?!)Xp31_n|JpPlx>^dJ&O>_u`=IQ+TSn1Q4Z;jR3q}5P z9{yJk!!#GaxT2e?7-6BxIc5FHV@SZ6Fi9`j)9~^dhm}E4N$_wA%194AD;l+jfhPoe z8yQ&ra*b9%z$d+cni{oAQzN)_q7{7lu_ZjIf~Xf91;O!2BrGC=o?nL&Haf9j>;r*5 zXtDuPMR$5B7yKqW`wpn5tu|JXH-k?o#cs(04if56+N8(NOiGW{H8nf7(+3_+dRW1}J2Vb|_q@6)_QjEk+EPKzBBi^S`F{@rD!5tLb!@f}AnJy{_H`NI7usPv-~x9@pBz z&rFsw@TKL`?JKjHwNv=d;d`A)~h zoB-m%zRYWN|9K@^05ID#&XfnaU5HmpO`^kT_-Vjp?2-}q!5IIYeAi#R_u_ZIdY4=WB$`IOB`!rmm;TX?xfp-zYymYIu0^T-}D(e2KvEY%2dyf6{AvC7`+FdbZKR z(mJwO9x9cA1fuRbCCWX++aUiSbre>VL$4%h3A*A!Tj zY|<#xNJ=^JoJDvtRp@*d2=$QadZhw63P6i^G2pW4mfmF5t)ifUXkv zi;9YT3uQ2a&~R~I3Yh=9*7{xjGh8jF?eoq4!yzjCY{WY@hVSh}JYP9DIC$Vug=kbb zki3bS)}xxP3=FZiwCXpN(DD>|ZHPE|Lu|=~r188DTk% zS;*W>*eDNH3O_$*@H@ud8k^0-DskaG)4#N78&4YPZ(R1CC7d-k@YVBb*gCCsZ*(v! zG1hI9kP~~5P3$e97}xSUD86#WFY{ujUW9;B)TZ3&OzB~asO!g!>)WuEi`-*O?ez~P zy*inXSnQlnUP;HN+MDx}Z`fB~ofN;QOj&6_9~+9HR;(OdT!B;;cK>!aPbhD?yidz&E~ICY8cQ0lxZ2vOFajdWd?!yf0#JR2yw4bB zFS@Rqcc{n$UQb>!kL3n*I5b!nUxmyWPa3zkF(#+FfcIOTgpyao!)x16i+56Ql!|5V z;PLP;9DL`Ln2wRkLg4JaE8?=Ri<0qnrvw54M!(%B9Px{Euib=|1QHfcE>?F+)wT8C zHxaiDw=e;>P_BjF!hnbcB|&VKIDx`tz-GP22lBC$t+Q@6hZ@+wb(pI^nehp{rErTk zn>SAGU|Dt3cC+nz&vZ65G%Bi6L?mknoS+be6AU zM;`Fr)>WKpB4&1d#e>YT;KIsO1;Lix0eqO#eV#q~ z^2I`3+#Hcjy??nTJ)uvg*xex)Yf)1xe6Fe{tD#Qt?)L&W)GkN_ulZ#CX+6X2*YnPf zuB_tRumS?f=+1wH1X`N>#3k*$%|4ZA_k)RhE#JqG#&p_dm8!XQJ`4%IoZGn(kw4k_ z&$MFR{b={}+K%Aesl%iB18+~?8~&!i#!Sf;DpHh|{ag1q10~!sak?AHz+)u8-|%y7 zVMsE$Sx-Uir^n;BjA9y`SH~TnU}oROoa=uG)&t5$x zkaZP)#w5X@=#*qb!KEm5oBem;&>HWMSbBl9~t_{;Ly0Q{%)G<)o%zb>l@vzqU*KzhT$w?wez5 z-_w$t__p&;RX$bM@9Z;aPd4IjRN!u)zz@Fu%k_i}dya!5_O)x^Cgp#|yw`uX-zXrm z?}|#zbKa}JK1rOG2!#9b6x(lN=>~U0iuW6-UjybyvbO({i#lJ-Me4wH`<&aBCq={d z$;I*h&47(X=J#V=9@h(mLF3wqxt@RP;n_ws%C$*?SU}II>cwWEI=$MpXU1aV(@X!} z3xd0nIEo5=P3DTecB+ZgXm3%Bf*OqUZNA;==%7+Vkbkb+BB7?1ZT8iotye2qDU@bI zyK|m&Pvhp(?MJfHHetHyYW)Je5FBpQpiSNmgo!6PSO#1g(uf}tc61$bL!<21SjD-#Vn?k?Bp*OQDON*J8bl)=`t1!4o za9_JM^1*L6xrIXfgbLg&#?Qyqz+bkEHa;${=e=7YZ~nzBs`0i+$1rm|wDdPe_X8eM zius3+ZNN0@48BDOMOwTtuoHp~+v2KbludpRNv|L!#^m@sOOH=E}bTIL-;#AXl*RG;_G9eeIxpn#>8^Gy>Syg~SFF=t1{mlO~O z^`_}HLa0;mRla_GV&bRY#ot5#&zFlLzVs6Uhs>v@ncsK>zIqeC3_M67W)S9VO1rJ}soI;sGnZFawcN?(deJsx z7b$!$q{xJ$os)y(<%cDHR@Wo>lUCMNt+u?h-RKxZJp-<;0r&=uda?-emlMN^jV`Hl zv1szq>89gxcMa-%qau>NzpQ)_)@n{3jmqCxO<6mAOqN-)-=_Mdpk`|1+={Nhy>T&)8q))I8z8_`|3FHi!U-uSB%T_$q(y|5N01 zS?Re8#VGCUFwW?@LN<7iK{uf-}9Wp=~#;4TrV$)mwQt>(`!%QdWi~a z$ZN*MA8qJ><-3sI@*R&Iu_yVu4{2wg*M_6kMy_SVdy-Y5ifXgJ#{Qxe+;&t3J6e{ix=v01T6V)tgf1mWn6vREAH)T6BzxFoE(Ty zw4H2-h>J7Ldzvnz<$__nE%xP{Q4nwZhdm#E>La~GA@>E|7%GXok|w7=XnHb5HYyOs z5X#UlarMDUi-F7RoB$%{+rIJ;{g||6`fpA$7yb+xq~n!z_r3w&r&_U&vYy>}=@bbM zLduvVl#m$6$WVsZ&APge7RrQ&i&+G+^M~UYQ`J6HewWqt<^#Skl07ZVblGgNYB(rn z2a9~zy?8Q`?h_jHUsY+&qMVcC$qdS4!-h7GnSd76jW6H z^&Z)rdTtzhE@XeQ6@qV=r!Ohl_9a zvy1=D=lr$hC(vs$`E$^>90e?O2E60LJFBjdR3h)!v>0hZ?^L)Q`POV`T(T9)! z=BC*lG=ZX65pg%GoYZ!)mo%UL^oW3yRvUUERx8UmTzU~;qJcIy6vanjEVcEqAWA|CHNP)%k-nCt(WP=auMs8c46(i({(!Eq1b4ixi`z z)RwoXnD?%1_;4-s@`{Ut9R-X0mYu7)K1E(Bl#Ao@$eWrr_TXjq=YN{Nd&kwygXh&K zCZKR$hpP{;DaDtg+zS7M(Pp21%gd!k`xKjzy^F3fu;KiYE0rs?xA7O1w~yg-wyPMo zS}|fw@7~WvPXpMAF`?&xtN|0ww*>JDKPHWZ@)50$K2w4e(N)H8@k;u_VJQy2uRh;k zcjig`$M;e%CnhG0g)@Pcq3>Kf)lZiL^`=_>hP?A}RL)Rrflgejc{HU&XYv3YiGVl3 znO8Na?2t#tEY)0b)JB2B>&;g^glMSX`73Bdi{>ZJSKGK#ejl6a;Bd`lW~S~9NDQUs zL)~o!$wAX;JvKUKq?hPaD<()DHo^C<8TZoP&8WdQU9A4Gtqul5`~z7HL63R#&Q8Ui zRG#2&T~^SZEp-#dC4L$#k=iJ{I$!Xu2PMQ|YRsD_9~=cQqyD|^-lAdU2_7j-#Eobb z^jc?=kI6KJCkM_1Q6mmOpC*$1kCrs!5c>N1u}0q_)mJj_mY=m^xNFDldWs^1(yz{& z7LQE-knNsbQlr0Zekr42(*1%ASN07g?m$`XOeGst*GDG$J$~=0DMyWiAb$}5Z&L!x zKIVS>Ktb=#uV3y`Ss&b0O1j_mTElVbza{)Rbj$C<{bVp5Fj)a=J)gMBH^zSp5zX7{U z;7t&jqF@MyeIwkH;tYDNz;XESH^YlsuJ;f}^Ei`Ir=uSMR+ul9rWb!3cnwJlcf!+tLhl{E!<0 zkU6}0MMXry6Mk2N0Tj9k#)kF+IuS=UON@{yb?V!04|#gv(mF=Dh>gnmqQ}zGV(i0!S>rojA&_*!Q|-WYm^8q>HyQS znp&S*udS>`Mn%+l7+&a44j&&Ln*KVRjex@%5B=Tl{X5o<1gl$X7EPBz1dkrg9b5=G zA0pBX4FMxwsJL=mvZhZ@H>|svu|zPpg;4n^0bdLpMrihbl{3?Cjq({83YROcO#&SS zd-4RvAi+yR{l{}KIB<2|-R0tMtjK_eBH`oR^>wl;--;kA-yJ`Qy6`!nL`EaAB@2Z3 zU0|1+@A(4%a^^fMsg^0!KS+)(S&Dgjd2*orUzZEsUrs$};3$dZOhkV2&K zpML9+zot;>^GGotY;NDbIBiiBt>A|UA3-xSQ5Ag^6777oY^SNEHL}!fiTav>o5Nr&B71+qeur~>5R-!+Fk z9PnT3jJIYfnO&INv4h0Qvc(9FYQGb4D`w`+iTW6$Br+UNVErrYXP4kWlj6`Z{XZ=L zZ8vwOZ%uk#9XY!?S(K7KKTm3WX;QbWl_D3$O8>z2jf_0)))oa@nnV)7jCZbY zL5CIEKd=NF=!2SCf2&@q`aXQti|ONI2v)p5ERUR3Eh`;%h$C7HzST(cvN&Dz`Q^0- zf2!P>TG1J?n+b5hV91GG;d9%&3Qsyb)E+I?Q&frbJY9W2<$L;I_M*^X-W9Qb7CjwF z$rr>N&!|58=QPu(^d{uLos>=jM-RTa^`e{Q9Mml1R~J(hE!ntl8*$<^*>z8c=o2n> z^IabXT$fwJtO8Tr&p8#9VQ%-fNYbWj>GsvtRmf>Am&wM1QdCixsPO`tk&;*I{~p|e z+~bcgn?p=ENx?qagsJ8G^u>dBQZm`N@3ARbG`lwZGgo}%2|-*+y3-t(NzQdn46QQ=2?Mxv6TA<9ahvE{V>QS177FAJCt2T|{@ zc4`$7VgOHq$--gLxo`&P2Nt=o95t~_xROc+Z^mGpX)-iNl^cJ_>Zjl}BE^@O?` z-N9idP>s=AM%K`e4xDB057$Smdtd!F+5T_d%yWuTMnhg%xiB&Jx$bO7Q*-+deKtsH z(J3~N{VVeP=BA494N)JXZfJDZwzgX56_6xu`O33)hxkqfK%kY0 z`d7Ltl&r1SAH0_W_N3fo#@2qOMir)wry1gOcwtC+KZLh0oU49+Huaxn1ufc-msk1( zdX|&XhOjpZ_H7Xa37$9g>_2~1IGy+0jg%8($Vq|onzq$+Q^NDDBa;e()S~StGngM8 z%+1q5LkQZVseoNHW(F?rVMl%aNu(1sJ43_Y`k2U{yuvj#;J;f}yQC_Wg_CJF8^shj zwAQk5P-=hV4E6PEofAf|(NpKR_*`YehD0Vj)Hh!c`Ifr^rl;!g1wa4#o&j`t4ih?r z-l~#~IbSb4dXM=yzpjWtF%Aj9XyvQ4nEc7Xm#Gt{67kr2)`*YJ<8=9)L6tne4^pw8 zEzshaHlL5cFLOLyRRre<1y$9&%J$Y(&o+>yK4ZOy3L5DM{FxOdHm14x97Y17C6|?L zzwfg}zh86Cxe7jSu*JQ=BBvon&+b6qqDb%gBowu0CU5gB5JVEvAu+hG&iTx?nR3~zI8{%Ri#rD?$oRc6uJODL z;cLEiZe(g9@qOPRyGqPUXnc5d#Ed(|b0@trRE{2tQvChcigdVABneMkX^y-zw9=PO zRD?o=W-Yr}p7rAP&!*|QXx=1_>U4E0>%k|&+2&j7Lv=5hGJv{cN^hvMr)O^FDg+4sx+xF>^sQ3QI7tcJx6j_=s z+9sYEG-}AIs!}A3IcOLdbS$pF!X)7iWgO`TPgq|5)F?P_CZ2VJcz7|sI1@&Jz591y zhV=9~kdu*|o10%OKo6o-PU>OgqrY2kM3r=PVTo@Ki;DK{gq_Tta9d2cQ&++Ex2>0D zVp3$++YggWIJq;vt=wlva7pt9BldzXT5%MOM?JP(7&YZByr#B9qJ|%w7c(M zi9C^A@4p{e!PTy3q)#)&81bTEsQDLF!8)+rp1#Zhqs{Si7>wKP$T@SrajN#(;CHXR%5|z% zv{-srq{A9S4R17Q(Vml)130K0XaQ3dCwt&jJ+(PiK?Hz+AVrlJW#m1Sp?uY4kaj_l zgq^p7I;V)iLDRT2EO_SBz&r~^_`0IE<2?CJYh8R9;(qUk)=ZWUzov=%yn(0%H$A0zgXs-5>Q9HKID%miW^K zDPx?rt0tr0^*UiR-PgcX|g#C{}mc4O4StQayu&%uyD_7 z%x~XX;V@{kE;r>Sff>UQ@q1hBVi7eUQqqFHCsQD`ukUemx?u5LH{IgrO0WT*RHEZ} zbsnNCb14fQ++B!91$$b2ZTVAs_Ye(LLgPLF}NdxPzCo^6VR9D^o1tkt& z&b=NQl@Li1#F}xv$0AYDj6+H7eLwJ83Mc0;zU^~%>$x`DQk*Cmt8Lrdf*-f)jqZmB zjhoZbiPaki?f@Dg7e)T2*K!fM4yaS@=G@SUISS$pkR4ioo-u7&bA?+e1oIN9SB>K} zIn>BZ`iPaBu??vC&q>zXPmmZ(cqV5A9yH%gJr%H1Y}yQ(tSF{tJCsk}d(= z0wZ}er_ZwMlzj}p8diw3&EgBPvAt%htG5@}R6Lf$XrOnzV4zY|RPz;=fY>?nHdRj5 zJTyhcXkCOTY3d7*VlmRuJq-M+#o)ZSY^THaqUGGJ@Nd8>6HGjX>saxOkweG-7Tcq; zzO6qV%2P9KCbJQAK77mYU^1lPR$4X_=v;odcHWWEKxXiz#LhU(BoGjlIiG2+laekR zsOI0EeLvhdqZlU>3on-M_Hs={v!COgP;ElgqD|#wf9S0KB5N;OGbJw zhhxmRxHRpV0w|7?kW2ObnZe5a*$e&$58R={8QrP=lmGSJ2RLV>&G5mr6Dot#!Kj_i z;}=pRTea}#XQqA-g5T6riPO-R&F>vgu2JB1NCrF##=m}#Z5l?#R4BAG-RO7LJsA;y zg?#^^GIw?s88kenD}jZQC(*5^+a5FY#F%?c9O8gmy?sKB7XEvJkG0DGieb!QX4#?P z#twiT`J?hr{w>a?rnCpkeYDJ-O#mEDRe7btWf+*A?nVM`X=yF7W{g7Kn*{Jjvh&AU zmn%mX9T5OY-B!!2@Ax}Fw?Jb0GMZeZbFdYIiLGPtIQ;@i%BVVgAL1W}xd$Y9rN~a^ z+4R!(RR|^(|J&e@7%rDK0)V9Z>MyXzD{pWD4#s9*9(K$}l8D8@IsxG7DO`RmLwTyd zEz7w~PjTG0gaT(i=a+s>nXKH|*PZnzs-2c|QD)6%(lpZl{f8!)D@Dcj$`*oRl1Ya0 z_D>c0q(d+lda5H%uWo}cD%79l7d!T&p#x^^PmwjarWO*--5-JN0a6Rj%g5((Gf(I2 z;_|%C@$s7{IAH$LMAzQg*M)2{4-XHKqsQ53Z7Q*ZJtn+jP$$%EUWjBffkMA~x)%G# zc(DvEF8n<^_Fnj@y=^f8=QM_fVpCPmWMN6fMu)w5<=~(xBoha0sQt^s2Xf>%{Wo8; z$6p_vME+O4!iS8?auifrI!a|TEQ$-jAS$r<1B2G`%#}P`Jg16ANb-uk4hNgR2#wIRm-Wl`X@5f_)vmMoEq$d4~y;c#B*^Sk$uWzp)0=lZ;M z$Bdg~yxOK@`5=o4o$E|i#|S(qU|WI#2XkhHj*uRmm& zN#EyjIVT`Z)j##UcziD*ffk)MJllkmIGNv$8%v(HqT)zfd&c~1@LgJ?>pPMm2Hc2F zQ7`@8FAo+A>NHwU_sno)Vv!SfUt*O0Xnv=;HM{d=;qXOL-9?s#qB zTvmRXd2>pKM3b}Mxty)tr&>I@zi|5j#>QCj?~Q}K@s(P5v|e3S4YZh+xpPd~>U=k> zjb;ijdQp1^YRNB(T0k-YUQR13!-Ee|RJLKw^lOM{yxM3qU3d$*lY}5_6Y}5Z1-B0% z{oZ|=5MJ(2mxY%NI0#tnMW*z=;CDbaI!Wt zRL1PQU(wO-6`vM6V)5CGe}$F};=zn+e$$jwchdLbr-wV>%i74?cNoRL6=t^k85}}@ zvr#c>*i-2}0ne}asBj4XPH`bpR8`K+%EHZQdIH|mYVx$pVT;f<{@R&p9{w8tM5F3v zjtfYgtn7V;alI57S`Av$w?;`35kw{XP*1_^_BV_h;84fAG5X!)-|kB!?+Lx-X1KMI*7m+R$QuC3*g@p0*OrS6X)XCw3a(hS=0;s4$-4UUZTR)mwmPiBC` zF!|_=FK|P_vmIK>lbdxv1alXM_&EVHVGgH668NmxU9Y;*Mz_d(`?g)?IWJn|lzj!` zHxmn+$<8$q>MJ%v2qn^`7|UTy5%IZ~o7*btd78YK-?w|5_pk&f^p17j4)TIMeVW^l zg{y(n+27lmviiBM4zql`r9^yMlBqz48pfCpK;AfAwXt(^55|5W2Ca~DZ8bD;JB^ho z!@~qv6hci9HLurb|A_8AHqdGqTzbm~6tyX0z%2EpF$xHz0=hpqG}PVxqLQZ76qC}R z4=Nv+gwQjJL;&3K!@gGuh6~u%+b=%hr<2X`EprnI?o!&Ts$YG04~|qRRXYmE7V*8Q zot2X8ZF6}2`b$nZhGMwWX@?UbTXOTCreGk}LQq1Y_pfVHAwbI%UL9mh?sq@hai@tc zPc`L>&d#nWRbpD&+ajjfRS%kQTJ~Z)XxwfGk_kBQxc4Z)z^s+0@?UJS0yu^yl^9qc z4{E1%wsK1~>HHz5lWXaji64m@V}*Y(gfi#W(d6PVgUUEWHnjVj%Fn+b) zg}8vdPV7Hd$1~@YDI>jp~>zlt{h%=i@Okl z1|hN;qJDihr;XQC>IBO@8In#;G!*HEP$C_dr(~hk0XX_qcixe?`In)InI?&=-Pu3w ztOLtEpVT;s!R09-fYq%!ohH0KQY>K}TG<+jSIWD18t?K?QL0&gcoA=0OCHR zF;WBy>d%_%DT*Y7R8)K1+z$GzgGJwt!w#y42RW9K9u;a7cg8$QI!&TfOz5Qb*6J8y2~(z94mhROT|CIna? zF3TQ;dkINLwcneTEDRbnn*c-u_+zTtCG!cj0zeCd5waMh=P0-17UQsPF?T9LC0CY{ z6Be$|c)lq+dHy{Y8@g*5ulR0N;f3HC;^RAll_pr~ta7`+@=m7& zQ`?jSqO)V47dW!>kDUF~y&jCQ*e^JHIl?F`=!pqno&$1hUU_{xR6_SsBQF^Xrwiq@ zUJ55vfh#*sg%|JYs2v+gmH$VDhK?>5JkL?~O^P~0k1iZ4%3b84=6(70fT-j{W>U!H zmKTLUeHs076 zy7UDnp@PD~_Rj*KSEi5%mh$kx2A&LJ5KwQMmh}|iHm_~2n=X~nTc_uMtwt&T%?~uy%k3(AHZ-cW6)`c=*GdTsX#3?Olwg7~XneFj|%c8E4~r z4UWPT5PkwJeHj}MOkTI%V^X$!o0lT#bA8Y^5<()V5BR1x%uWQ?&gfohu4U3o=!zg11V~dLKh&oEcRuv zD22NuZo2!4h0SqXET888f_F8;NR<#l7=art)9~i>Q3YNPRB~IV`i3tEMh#}ASGoc` zd8!&KQPXnXa-`^-Hf_9W8N%JU%45mAPUP{7Q2|?Li@KqKft{~`=GkCoVVT<>L8lb+ zmNGJW4DAs#0`DJE{LbwjgU3mGx}h8T1t?miBycZV*B`B4Dk~~7@X$paV^xTr>x>ve z@&J@fTJYNg9ta>>-s;Gyw9OKBlmpMY(Cp9wlRxKX$3<&M1~ek6gv;u;AW#W`u-ea> zVU+-?eks#CV)ga;)OY_np)a$P178b8HIUl%_HK~UhC9z1}f{pKY&9MrvbUh^Y zOG;vl1VSc7gu$(CfcIZ{88-;9!Z#{c*SEol0i$F#hPKfgd-V{;4+G*ThAt)LTg2kF zOu8k8?JFno$tH|qhP^7vs)};qx|*T^M%~C830rh8JG0MB-hv$ZTcHh{wU_U`9(<+_ zwKg$P*JGxW$D(8C28{a?{C76XcqMcubS;LbbFiCn5BqUWZf-(u#Ig&tp4rrpnW$!I z`95)r&wleYj4$tjkc3z#1j7V0R@ORxoNxPg#zsFuIes=uGsB3n+#8+L$_fJ=)bxAx zZ;Ccm>^8|#Kf(GNM$&hjc+)Srxdkq2iMXgB1sE&aeUHha8>|=}>jiF>u&GuL7Vn962_N-0p{H$D1Mw)Hrj)YX``mtY^nmrh;HW zjz@#^2a8u}GMburrOA<YG{JK$kHC{G5m0}g+@D)Gwz|G)IkxS`6fUJ54#WMQ zH8<$!VKW}|_fU``sBR9Wo;!vutqb~)WA(v3wS~(G5iET@o^hUz9H44hg z0ATpJFD)BjFeKKDox=Qh1K`MB50aIqH9$mqtRAkk2+P3}Tj7!WHLB#Sd+`QdF73 zm5ee){i2~e`&Cy#83@QYkaWQ?!Xfn%4M%+p(18QfoTlGuQZYDjF7=I-G^&ji4V92R zEdus(dl?Xl3pW?@F;+Gk5DQ(9@Id+=og!YlTH3tj2nBgqm^CLGeacJli;TyIjxfCF zb-$Rb#!a$Hn}3{`hT@&Ow)_}SS)EVS86v4L{%gFR*SPmymNs~=`{C816YI4ozWywa--jkqT4r?R!g-+ zeGlKBzn9CkvJ94D~`C2|IAxLv!?1VKF^Zl-o>p~li$tVKz}dwd;yQe zZ-fP+POt9A3=WL90^^oUoJ3LslwT))yA`*AUP?+`y_dA87Ddr7qB8qgRPe8o3ZkfN z??(Pn35Ue>S%z?krPB@dkiA{fA2Dv5Rlte7{#37hF8Vz-m)oLPVAGmJ%v!Ke_puL6 zVQg|BAennZ0C$nd937B?&g{{cgSx&xD%!`SL{6VXmW2HXWBaA1X8Giv66?8>!y3-i zURXkM&F(mNV}+SpwB)PBPD3-0jOYCmyT>tc&nf@A<(~fd#$LARS>Rg#w{0yc1daH+5-MJ!lyDR&B(H0W=_9z3X;vfsKeDmh8$UGFBAaOZ`V4MwWi zQZsoJ7OqE_s1;`LL=y`+6RU*;X9wNMQ%MPA>;6>kX|3cex}kDQw#mK{;!dH%rx8(e zRM3n>D0K7c#CnMUZ!Rb5Y`VW_B-%pA)4IIsr)Fn|9kUNhx)fy>74jNCp7%iY@bKUO z=LlG`Dp)GDxx2A#?;}6FE%<&d? z;dn~wen%dU>qgtlZio201yz=yI)t? zy1F#oKIU%pR@uA2oTy$vXf6^YNS*Z#KK#k6mM;F3jj-9|kCu^9SCe%6gL}c4B--y0 zUq5AmIIOl;PD`0pPcNm#oFobK5B7_j)yhRL%F}?!er!~u#7XdbUSV$g>i&cSpv!o8 z|BtG-4$G?BzCaBy02S#50RibQ36Vxpx~03j6$AvN1q2BJkp}4o>F(~5?ryk~bAIRE z=f3~=J)iMz_Fj9fImZ}tjNurLl7DJjZeApRVJYD7>T*&PWl<6YHB-H!|CLh=(~(*r z5E1wEr2ko4e(%47*N+`v+q%=zKm|*i*sq~I+XgM--S3Q+C_pp{MPo)ccXr<0a=WeM ziLXxYJ7^p}08;A1=9rvh9AgNe-xX>$_kERj$hf41j$kg8r-Ua^c)SSU^@Eg3f?n6r;je z_?xVE+dFul71_A(>@i)qzJDW!0lGVubSVlt>AAZabvDQ_$Qq~E2_Qk@@DMbpV8Cf} z-GB*vf&_Rv7zU|Ug+OIiQ$uf|X=-Zvf~j5_`q4t#BF7^n$oyktbHG8NmYW(MmV%`L zvW_>58Hjv^_wl^rE?xz4e--g5r9U>9IJqjlGcom5 z3@ri!q!x?z+~3*ss9{m8R}%E@dl_iRt}J{tk!RJ#{8?KYejM`jdONKIe8S#qD6|3p zH}16i=*-1MMJtX5USF*kb^Ms<5%&0}lx!tOAo8CWrU^4p?OqMpP%SHS2#d*HF9tU; zx-d?c0pa5A{QqeI5N_8EqysLtguF#Xh)9q|+jN9h-J2u>Z!)_4K^<-O=I~iu4hK3L940~5k&VupFUeVAQUQekO7Z=;k?b_U-_)6Fa^kg6YVH}TN%FkRD zIH>_?c?843juJu05SW8rAPAyysLvo3{c%+N+>BkV0!iYI4T8rHvm^3 zRaA`sTgvLqYHC7Ac;<^&A| zbf@(`Lnu@Gg}S#_wXWD%Zofud{{c0qxdHH7#Wli6@N;H|^Q71YkoL|u(&Ex1Bi_Zu z80+hJs%3^;;GLt^w+1=^5ZA!athj|HVTv^QQreMVwBEnv5v;8Qf zJdLUzw;l6=dor4PZw$1(KXx0Ym6Qap4N|ax`bn`Kz7}KBzXNBx^U%B z%_p&)tNAqOIi8B%Ge~Q`l>(eeAkvrph>PR4cO~TFQiT!ygH9PfGC;LjWfJAIwDwCZ zASR~4vgiPSb1N%P^gD8twinwqoVb(TVEa^EjPql-VaCIM_u+jp8#LRVP2Bt!>>mIc z-yC-f1Bnc%BT?|#KgY8C-dih8K)5FW4Xa^M!2Uin;0x{+7XYiQ927WAV&6&$pu1Rs zoGM6blm|L3ARvoNGk>!ClVB?dtU*zm#KDm#IJ5>`y$%T5f&1Q`c5AD$suPwBc|pVM zSd}0i*>bRSEr^28{5_;c8kliu7^Wh&x{9a!F;W*{kr`ns@>@Eg={Ug+M?tG)aNYE` z%#Y9Q#^f*Rd%%hg-eK*Ff#;FB-=d;!cfs zKi=m5+`93S;A!Odu)pv;#HDRP|Ah#{%fHgoZPpLDz=NY!&PypA6RxXkq}Q=;W+tFL zBd!CQ4$!wZ?mU~bC)X`e6SKdiSOnnxioHS$K*^tB@mNZS{8uAc)yED;M;KUGcNjr= ze?7^6Ih&(eg5p!($AE9vlVbuB0)7xE6_+>ws`3uBlyI`&_Qdr*9WGkxqK2+`fE56u z7%o$`MNUT-^)Qr(#bICQKQ1CqE;s6~2oUbp@&660H|R>_B@_=ll9H89dQE_t5?VvEaTT<(qLW+iBLY@)i^srtCjg*vhax88&q1EspwAxpD9{?jpa3$rQsnnLo<9UW!9$QqIc7k#khQ0AEJ=1OhEiBI*V7_&w$1}HL zfoAfZ@XPnh-3jeb6=ddH{Y*{{fNCC25;19sg@GtDz>AuL?`d1e(NaVb?OcSGS(0&3 z`fqPrM$>5uDH(G6hbE9PQ2sbRcJzCOpM!fxtK2>c#?PhdoPbKWC5&#dX3zKCpbjc7 z+>C+566fRUXn+PmXVbcPWO_HxSZJW|7;J18_jci((Hs1+QJk~GCsenun*`(!NE$TC zoiXJw6b7&zW~1mEm=T@y3pse^xAtbnB@JF!P$Fo12h&A=jlHZ;xfccQ>v zGj((gw1YScaW!ry#D+r|Iv`}a^sFl_-F$8Rd4t31c~B<#t{=yU@v@Ug*kWuNd$zA0 z<)yPae{Ak~KYN~nG;{P0Nowr5MN9%iOb@JDhR&_?_Do#xRV_}s129xhMhvtWMhxUEF< zqCscMGT+g{6t_0k|5?)R@pAAT$sgRYTdz+*0`wTFrB5Hi0Hi-Mb5d8whqoaeTuMet z*&z$ON1w!SQfX2 zo&)qW3(pWha3Cay0Zu9q2C|4vY>@`d7F<#|I>(wuwK36T>CW%prB4w)O-yjJ*JYNv zbbSw>a@!5_x++V8vG3+c%HgkgO!0u4fRw8E*uPPS@4_9syUm{sqES z`HqgBfF7n;`>#kernwRgI%Npl6AuYXY4#^ig3VRx@B~o5!w65(?evU1OAY;SvF+~M zzGwX*Fm@dsL%iu!>$}d?K!gK7*&33x4CL151-xBA`){X80F=2rO(%vL2^9b+7*M8F zuSQi3AHP}>0M#pm(?U>nAxyVGahHomj~4L9qm>9lSjrL3YY+hy-^9o0LXR2;ui1W3 zXld3bCjotstXzelBM7imZ8ZV{gu`K|Q1{`}gz`QIS|@a17Lz9#`{eZ`hDEB8RjbI? z)%%3v3xgKgVG;4aB;r))fYZAT3GJM231O%O`-vcE3PxA-miC+1?Q$0=G;N5VCr}ky z*AqasHlHAckIR~&@cO3Lt0D^eN694i*iim)5mBS`->v-aW3oj2naj($ljRzgDRKcI zxttmwESYOv?Qc9AXW;AS5mKVp_D-R?{AW}LY^$)E>{ajMhH{(52UMkZFNML!ZMTv5 zI!rhS>+0O+Kl2iE{C7R;ZtxwhY6HKc1Oy!OXYdtu;{Vm}(_^YTkJy_eB?v)9LDU}q z?B z4vL76glV%b^#6hw2+Ru)$V#0vwWtUvFp!SSMu9bZju_q?w0zfkb=OAH5Z&Nq^Jg-h zz@Wh5ebvy>cY1m(t~FZSO)NEP+@lWx#Q+tA(vK+bY94#;aNtbfTORm)T3C2%pK=}x z!xfTZBp675Lc=^1+EdXlLZqgKDsB%UpcKwb;Gl(G1`Kh!pguwXf|~)@&|m3QF`&Nz z#RQ19Z{Z1GiM_YCwF-+^6vzFHF_LCwBIIB8gW3_q{q-QjWZ-zHs$^_s1qvBWvcFOk z=+GT~pvo}(bQjutSXq(LaVfZ6Fd_#E?DmeXH%b_2=$m2@LR1(nFq5}x_|5L5Cl}zte}J_`y`_8_%Q`+IPB4@e`l=(#k`|i0cfCGNO%V`;2$73N zv5HC9l0Ldel#gB1j=?WV2DU*tF&(?pme0V|#-?VB2e=zK@s!fvA>Y6+CteyRxfblX z3)H%9o#{lXwUR{MUf*oi7+I6A#ID@VFv}6Wsh_kgHgJ<6a}5zmj1XbLOUJdC+HBTr zY8IYq_Nch{lXTqp%2LnC$VgY|^*|el8uWvHk58M=b~_q7?^qXER!QU(&z2*tYS*sMs&9-e=t71~VG3zs&q23<4Mrvyu9q=uZ!XJ#w2bZ86P>M;2@hjaDEsniZqjSWz+dd%TDo(g-?5>hmADeIrf(SVdCr*3J5B zrPJttq5Ir!X!qz|xn|w~dv;dGx+zLb_E&c;u-x^FKkPZaIy9>Lup?MiphAap==*B> z4jjVCB;V@)x*LCTb|*~g4Qe;0HTZjViG9-%vNbtYWu$Bq%eKkBL2;L)5UqKO8mLt! z4r0=9F)WrPq?M1sV;~Wz#7pg3qr$j=%e5XuMns4dH#A&Ebs%+M8&;v+!9=(l(T-ud zC;T-f1Cmn~kO@B-+eh`i#YrC&u#lQhhA|m%$li0-z&U(Civ{mPqKf&G&{j>(mZFLX z;ciI7-8(`Uu7}KF>^1HQc?<&FtWzZwOSTL7D~zCiCsDL$f^>i1NVzq7@eJfnh;&+I)P**oG&RA@Y(VAaNCt4X= zE8@A15@p8}3KUU>QKg;O@IRG!dM~QKOfEI(GC`RI@~Hac=Xo`nyI(z=_-pMpe`jVs zUZ4#*Q!x*g<@}nRgA&yIR<$6vx!E9^>^U`c2Po=cm5-o5CJm?ZjY0g-w~?8ZrOzAw zSGNHAx_2`<(&;|-+}%Tmv@ogXpGwm8&(>xCjE9CsuCRh2_{kAKvk`=W-G($+d2tl6 zl2PY4B;k_GFz62H=v`~Hfhs4pj(Pc%a0_HL32DcU$~z<&vcPa#j66a?QIVA7TZm8a z0SsCH{9TDB-f=J)qrDW+N<3Yyt)$0Eczm)Mqt6UpB2&NZGC}Na?ff}g*=o0p|NLNJ z2jd8CNLu&DpwCus~-)qp}&tzSHIkjSE2HZC!K9w1~Zf0vs|i}<&p ztU`%>kG2dss;^UC|9tby=om7@$?Qrs+X{kAg-ZRSVw)Ny4Bs)Q&=Un}#XmY!r6-mO ziZAgrA$#oWc!kThz5QN-l}GNO2YnJ{tk}%K%fYwK;VS02_S;jOe%j7^2BsTXT(%jq zA35lm zLs}d~LeHFIMMhQ@?a@g~h2hJ}j)@7pEVW(i8Pr_6=$d*p;A_tM_V6^MPXsF z1C&R~LGjh`?L}{7&dk8J?@Ez8c$`I`TGb>~(E4)!{4tYf3Ak z_@~f5AHmn{Y%R8;;o3ao;_vvYOa-J0=eh_na+Q#rpH#kIXFnJSuYI2`x01z3Bkzid zdH82Mr)gy2^IK%d=<(3(=FOK6&@Z&s&Km6RlT|iVmcvNNW}2eM=1vgfOES{6g{s5Y zJV#Xft7gPfL-}#}Y|&0M8BKXdeA-4nZD&qy^G-z)OyrN7KZX5b)%2?htrCva?*(U? zYo1sMi^|Z+4=?cy=&(eWX7pHzw2kO7-ckk*4G-(G$F}Jge#VZG#lRi%=7b@4vGhSO z{}S3uz(H>(Khpr}T$npS$JF&fg7mNC+NVDCZ`jq1-$m#P$&t*R)UEI^!)}75PBwRf z{^%51qS=~#?u(Nx&-6QsbuU z71#jy*xDNYT>kat!!-Xm`Se*3%I)oHrp#i4UE8BNwYK8;yMuf?k=F^UtT+8`P4`B z?qCOaoh>0lOwG^3h}G1v9(|X^AzadM%3Z;-mT_NtUg_$J zi$}D`aJ}i)G>T3v?(E9XUFF8x{LhY`!3?Mt@t+*eo!$%xnI4A&S%XNw8FY^Lf!F950LMlpHc!{P`n zGewq`2@^68U#htKEk(5gLQDfMKh4#%(^Zz@@NLRtgGj>3jZ_vF=us~j`1 zTVBt)z|V#pGX;fjF~0*l3%gcVIfH|blFpE$LmT#OKfBv>>|fZN;GDCnQk_$}@e+Y4 znu&$Uc~=t6_Dt#7nXk81es>4hQxzQ?zybmfeh#Utx+F(EGn>L#l%*uu!$|S~e2&S- z2<~d7f8eg(-q_ZKPyC;dB{D}JiiPjlR0 zT6f~}>(q9ViL`uj`w3=1#}}sITb->#TwccJv^%~RpdWF1&dreI9-KXzH>-@F-kV5S zShyds@cnz-@1ksfjecckh&3y+(j*BNgExe)`ctSlebP$O&5|;VBGvr6xGd7Xq-iA6 zJDDCy=&^)zKQrS|-}Im;50TfM=Z!mBF2NNQsIsWM%6vMrR(-%MPmWrJOQfl&2JH9p z->{`Fq7%EENm6v9LVzNy?a60HDdJIyXrtR z)aDl?XHmn&8lCZ7Y;e?F@Os@m<9`{`c^9e&m&NWP@`%g})0HA!ef#*tnd_6Q+I*`p zU?_RQ98Qjp2m6OR)p&Y-r1vJfKV4~8magp?Iy8Tg_~~v+KUJoE9EWtBu%^_LWZCa~ z0qqy2b~ZKvv$dDhvQ!%EjI8?si$iPnLn8`y2TBhM#wI8&Wd#58S?p|Wm03C!%UFFv z!4oC*IlYoeJ;B+Bu1R@0$ZuRX)4eb~B>-0c&^c1nlPd8%x))0WyU&?X6cmLcW-=}5 zNPcqQgc;xp%Wa#PCj9q7V}l3!-ZRWr1;ysYJ=y1%g8B401EnQVR_?j739jzC5s~?| z?VqmP)>hYbTwTG+wl!eUKQ=D0dH#>QD(xK(W^QS4Ld6*n@dFoPMzAvlRyl-#`(y9Q z%gA=?3u(%O17xVJI353yh@^(MNqp;!nQbwDMavLK`sApDb!e2ClT%Vu`PuB{xiaiu zu=&v`x@)Pa8A8!x%!n404?${gn8O#^=C9Hu7q34FfPJ6M1R=p|*GHgUZ2D*a3SUzZ zd3>C==87Ec)%8l<#pD1x0l({)CqMoq&&#=9oI|%wz~}t&&EM8d^W=fkfdS@zm9OZc zp&tt3Zbx9Sg3@Har`0|+W1=a&lE&84TZ9v8!FtTZ()5Fk39cMQW@a8~WH&P(Uwdh( z()qbR1e1wJI2)fx!)^dx(M|LAySo9YpfH7cBwRZEYj|1ssRJC z+O3dwvbse~i^()Ow&Pg!B(+^7i^B8Zm=GLCcOjsP-}Mm?3Z}FzTa$!B%E~4tmbyDL z(~llWN=o;8rlZ&O%1|eWqz@)jQ>&|~OX$ffDqdd`dvy$FkGgF3qqDLO=`g8-4gK2F0lAL~;vwju=4UMX{ zHf3pL3&dJ_lN9P*C_$X0tb%VVu^UeIumopy+i;ncZrNlQd8WP`6AQ~bQDufR_r&`b zC$e%xb6Y>k0N*g5p70jPrz}J>u(639o4^C3y!7A8jYUJq&4}qRt1T)A`qn8K2Srq{ z7SwvBe~gFn00D_;ZPcoiL^19L*jk5g@DBHPE9>d z0*iyC$gWA(jFz7Mxq6V@W}AR_y#y5Iu;GysXp!UO{5$Ozgmj|5nQQz!hcq!#;q`WAX5>!S%NXx`wT9jh^W2(QoWQPpWUUS{>|$boIDe7tAt zSh}>h6!npF{|0g|2NaC(HRR!9g%0nKtDLq-5_%X}dAw<9z}{3=S-BO=F(p{=KnjY9 zc^3k4L@g|mzvwbYQDgEBf)MZabDH7)0Jjqf#E`6$j5xU&SrVkBV(cX%-6LdTXDEA7 zF0eU#DAX+;gQc&i$Y*;2V>dpc#EVt@mrm|0z1Pv27f->>L6PlfbHZ+SR#GJ9KW9jc z|6AX4lyUQ8j~fGK-2Jmle~x2BQB)+%l*Nq=C?3~VH|tl9P=oVQ0J91uq^K@$12x;1 z)=@6IW1c(X<{^VdJ($1!$zU`H94wcQ|PU<{Ybi5KzyHx5iW+2Al(|EC;B}x zc4>cjL%)d2^EwFo5rVt9iG_}-sbM6dxK@OO*UHO)(OFJG>VyZk(xs-+k+rprmBZMB z;$l`gIo!FGI`?oPW^pGgV$Erfcuq%zq~1nY#p2LyLpS#l?8a5@Ku4;e5Td<$(>gpy09e_4O0SP2<#*>iFAolRWa( z13y2Pqocv0(Gk?$3(m6(4vFEe9X1^3EYSiG!rPF5(p6CUR#aa8xpQd&*5*|CaL?a9 zMmUe&DbGCk;NTEk)}#G4eelJd6zSG+J8W<~Ufiv}5C5{~Rl`o0LG0NXA}IMppAj#> zo&Opvh5D3Xui;((ABT4|n3zkj|HMS#Z-*$NA`rR#Wf|KzLGQc z-12y{DO9^PD|PJFbsmI8tt-HMj4P#X*@a6QFpm7 z3|)<*x!K}jtet+5Ds0IhP+4x;BSX040|EtOP10|;s>RseAWDP%osrWsE6wtz=x9R- zhH<_MW+}F?FtFqka+2X+vyV%<*%!{rriQaY-`2Kr$ja{EMXA-K#N>#Q)_J!$^x&9F zcQ5%EEMtOZu3rFT0PlgCsae)pbG|ltA=*{nfe2p`B?i(#-*y6=GW!EoGNj@IZsrUS zAsx)o%go8z6)t!I$Dqp^M?Tbwx0ousFN=xa?CrhJdz5m?*f3*O$`_vl& zveVy4)^;P$JToTY!f^75k2~+qcK_(F`b20J4B#Z zX@JH&q=)Et`ik?vc|DN)jG(s<;Eb->Ln!BeK2r?OIQ3ND^cbl=4wfCZ4O8HG>zsw} z5yn6dBPclhTZW;b_m)a{7^4E4SpBQ+Hr{JPW=$u67z90{o{=g zveObhVpv+t&cemj-M34nuJ#{eYkTwfkG-96`!_cUz{P2?_33@vGA*l18!_q|@)`k4kAeumQ^GQIMccn80(q`gkI+Kw7#RLyzr`*Q_8b2giF=)%vzE z&It19L3|Y$zktGql!gW{tt{`Tcut#d!>iPSWT~(-+~Xtek5UXFn(3ACI;J5PPsvV? ziT*9ZV~HJ@6(MZ|0pW`>wI_7$S_}>jY?tXbm(PThQcm4x-nKYUNV)u#;Ys{p$=B4g zWdSKggdf3mK4XW>6F>08@24)~YJUKC{L_aJELm(Z-H_<-2p*7NkD@2~Oio!{Pzre9 z%XBXiG}Tvz@;-y}B(aiA%LjKQ`N&g@XS_M5k7rPg1ZMP4`t)0kvkqg zZuW|_=MP-^)(#Onx%_<;xVzg{Ikl2vO2+UCb7ZxM=5~{>aGtn&*CQQo&IEwQ>o`H$ zwt|PlvUJg=3P}$m>a6cx=ezI)oT%rY8){0&&7qJh^4bw(Wgi(F7yz+DN2@xs7?tpP!nz6xcU>g)dDS$S-81s#W5dWgMdYNtGzNkg zg*?3U`!QbE_hAQ7K%_bA^}3P4Idt7*$4~CNhl~t!j9h6 zsx7gX?(z#Zrb7NCK(z2$L!|c8H-a97cMPN{$x>4hEtsd=Y1Ub0!1|nHi zpJBoMeO+4CKhy6U*G)=;Dz#zhc}EJVu-R4UtQ}I5tsG;{Bk>H(bwD8mz`dtvH>Di<_2F;1(K#vrHpQvSZ1xXL8;G zv7KK~92iGw4JBHhu69GA$x>?zVJOL_IgHHuNwt$emr2!OSZDOm~y;A4?i$#M!8<)KY$WIN>7L~F#V96eR6+AW_LZEC5aKAJ5(yDF z=^vFG_mf`Ful@Q99CeqJm!FUlug;xJjK@3Bdp#mYwXfMy8?R0~XxKXcd*Q*MpHeUo z$P%Qd$P3#7VZx!wun2B#cwj>-04n8B$L*DHN@PD4bWpAplGS^pUn7W)lZi zAhC&-mi9K0;;;)PmriPPY^G(v_H*R~9-I(REG3OL_BTFsIh@zyv0cCk<+b$=+`j|e zyrGFpEVkDH61+KwN6#Rl`Z@`RFyWT=04Q&j7)KY*P^esNE2b#&m)&boSEd){ z{W!~^?X*hdY6S#4L9<3urk8YGh~O!{o*udoDUH43F>qpns0jOK?rVu6(FTxF2h9y*O`xZ}J z!qeWWvsXQ#dQ_^e76*-|j;(22?6^y%+XIP|J)kk6IJGQu+THNFqD%H=)OI=K1h2>5 zcmEDt;D0aJR5>rV=ZAG0iW@P*!y-(WrWIA0@ZVx(I_Wo=%x+|AvE@ zaR2q(bq&P*_yTX$@qzB^P6OZV9e19h_wyHhj;NWL&@jf1aju+JPW+1griU+TA1#Hd za3wi`mM&jbU0uq+05L0N?x>v0@n4^&-XUjH)Y6aR`Ds1LXalGaf}c1v7rYiSe$kcC zL$9BSS|knQb95>>SpQO{6Y78J8N8Hm=lw+T=H@RWoXXI9L3`FWFr|Qp4&8tZ{~3-9 z{}Cr&{z*asDQ4kzE&$L$nT(FI@AfjYB6jISN6-}r8{UkkbMQoXl`kTD9oj?oRNjS=k!Fx zw&GvwE;zfFY=K_{Ot!+NC;^_!sMVCNhX-MTbdzC;Zh=ZzQ0KZm_sGZs^fxf)WKJ(? zA;q?_@fhws+EWHdXh1A2vk(|sYg@5PJLNDG2WFOuSPd+8M2*ce^fEaG$s*faMrukgb1eF&_Qc<7vYU)1^gX|ZNdg{^2 zK>1|}xvq|a@VyxtMyn|TV$S_X1*=Gn_j!L1iC_vRXQltKj9i2;O00V*Xgv<=d~XbFqDe zay*r6v7!}E&q31}bm%y9kB?_keDQ!XsrR6ZrMGWt>hjG*jDGCV(UFwzuiH{&+uxn9 zcYlAM_v-Bqq|TYMtIwb7vyyoFt;9>xhiXw;cAQ?7!%5d}{Oeq^K}1Rl6CO7--!PVu znThmXRSq-;$#q^~npLGSpUX7pMI9K$pn}TEvdymXX|w$dXJ^F6Sy2avu-fap5LxRX?&u}v(Ee^yd|nN>#3*B7ogXO3Aw6AoWBMY)@-p9JX?kMGfn zlEOFcb;*aKqbPxDM3_1DpP}1B$Txvwbq^~&p$4rv!A&I(k^%Q|G$$veIq=ZcoUQaeQMX>%f&B_J}*UWL0m=b~~ z!JHmhA^QcK0ASl*&yq;IIUX&*Y8DiaFfq-b1S~4}$JW;nDeKiazV!`Lz-5|MmD=9R zkfXUDY-l%ImW6jOLm{0~QW0={EkN=6cY&J4kix^v460VcBACwaP2|13;8#cyE^vn= zn*RaL$fPdG%E30!C)?WB_h=DaUWGRL?dzo_AhSI@o&eTYO%9zad#=2Q#D)%n@iAX=bD4O!TcC0m@$lI4Pvn@gR_$i`zdu?N5T_eifS3tj`LLQOF}MRgNEuRBsKK zvZ*~9+%yn%)D`6vGjcP3r&R>>_uIH$JOC!#{iq_nZ{rAl+J?RP6EN_~$jSL@ zT0-*ZopP8ATdh&?;{6uZWwl=2<2q74^d(!DkE4sqBhZ2h(aBMcG z8LXR{T61m=DJb{LYKuZG)0nCUNV?7Dst$(gtDNk-2Xd%w@6bMdB!=Du(A(SZSEJ)O z-?f3!Cm^-}id(ejh(XLZIQ7utJ(V!MT-4vQV2gz(D4B9FakH@4+oyQL6PJm z5OvNQNUBqEv8!mMV|j>`mGW~CKf{ts$heyDRm^i;fjCsH+fN8r}KCkvZ9grPqV#xWo|aSgwi>7vH7oOPn-F#ydce_0QRY4B5nb_ z1FY+{x=T?kK|26@urb z7zvO@8CdIvm$uk$Dxn{|GwY%i8lP749p2X>?t4a78Le-v`#h6#denrasHOrfaxaw& z^(dHb&Qax$s?=9Wx&k9Jwg-)^*t@sigD52M)5w`9X7H`WQjIWuaBq@6v$&U6GReq8 zO=S#W$OM$vR1cjt6gYX@!*tSV%Hunp(W+Z}v$z-u^~G&w>vn^|e@J>arj0{^)GTVK zKl0<*LZ7eu{|8oe`) zxdw)(-wkWNy}l}x`?xJF%E5o0OxZ_P&rnbw1Y)+hsYk6}ICfC(i%tEWJMPsL-G& z3a4`{?2o?qLModvu}y9DcRTBiBBr@C|8}4VLNaO~$(L_u8-2K6|2{MW+w)Im*gawG zzfSjV&b9BbuE$tDeysmM%lmER;7s>9AE8K5Y(CGy6YvM$+^7>) zRHXJ{_;5H9&V;s3LVaBpZTVS{v%7qiW070M z(hk1%(xR)Wk;Qh{tasdjG-kKx;SKw#?WFm`NuM;PxX#XM+dTjI%(PHi>ihPgpUcNt zp8W0Ast~^!Yxuo08i^~dwVLc@{;AJ4enT_z@}QGL^<6bb9s^qT9tLIa395{~N^tt= zin3+lAA;7?=e~1JEM+*0Q3o}WT_WGrH5QL(?q4oTVn?{|=*sRa4{R|#XlW#WuX^6v z@GmWN$0LIZ>E`gq##d>~-|?Z+4CrbhUYp0PtarL7c+Y#2jV-97Qu4jR(i5FGSz=;r;Gjyt*C!Nsf`o-;b`ui94*rq))e zF@%SN4F1>b)ZZ^|K$TTQ6z*9BK%}7ZOMGv5Z(70Fw8|#Yh|=<&vIQ)gLNvUWNm9Cu zYE=1?;`Tc6lFS`7=8O_%s0g;>D7*<})-LYgP2%6NuJ)kvb-DAgB7h+6N1U2Yd8t`Q z4?}po8`pF#4I{$qwInH69zNxl>>Norw4eF4xU6^&Q{b4GPryTuh9fUAJ-;d;p#Mdj zT3LbHtU!l`R*T<7Kz{B(r30ngQ=(?m5}W0c**}$qmjTT0+4%5@K4SthZv@~`dgG^l zV|^2o*f)P==#z}tuu?0t0^Rw%W}kg`V&TGm!9a7_T^9N$yChIkJ-h^SN?ph&Bm3| zy@d4RpQ8any5jWHM5%7hM8b-DmF82Mi48wTb;{z}miIMw;unbra3w8(-<8z8R8&ny?3g>Lpn5--W9^Y3v@&|G~vv@kzJYV}WjNIAZy4|3( z+lOR*L{63SpEPOQDrUwHvAJGm^hiZsJtF0cNr3wilFZf6X_MzD{U@;v^)P076!}rG zObf9$rk_B*VEV;oz6;D_5l&9dICWh6yu}cP+9NZ6l9u$MnrJGIp_D|A5y#ln`~why z=4O-L!{^PYwESzd3{}%DP~}>4*L@#6@rlAbp_}{BZRluj<)%IP%`3>6$FiE}WQDLL z1}#Ba)J~r4)5n{Gr^5fI^mz8|VdBhl?bz0}Twxp@m}bv z(Q^8aYwFwfb-(mXj-m=b7mr|EeWJnT68fW zrT`&dbDf6wEAfP?%#QJwkFE9f35ZE@a;W7)d@X%Vq^-xS%*;hi?FYQ>NBxA~r5>EO zHu4nK#pcz!z-#l(Z8N@#>+N4X%EYeyfi>yt^qr&+?(_}j&Qa6qSz^BnH7a=})CFBK zJ8H79G)zI?QXz`9efb_GL0Vte5>Z&LU{W%^f?dqnAi?Lg=^E~1oAq^)UIMGd=D~!v zz_(_aA2ZLWo+$Fs&*JLom;@)Ndmje-s(fkUDkuvt%X=m-KTomhWV^ieLe2E5_@vi5 z+bItH0xvc$bbnu+_i~MRE8WgGB({(Gq2owFqNJUxX&5oT*SEfXJS$CNFbAxuSg#7~ zXh-%?>3&dq(xr9C9S$oSduH=z=7gwSZYVN`C@RADC#~PLzU*HaoiH(%bPe}BcC^ZL zHS&_%olK0^uD4`k;;H!3ZAu>AVZHCpU=h5eaF!5X%dUdDDin?_UYMs|Sg1Z=;LCK;eKnBI+kV7x=^T0?Z`+g?*E6T13)3l3$)vrf z3fwO!n&4=f($IP!@CE@xQ6L{3Irf)uGDl?hARDW8mvQ&ppEz8cAEYsnVIL*;yJRgHU8#RYE9EtN6JDRGHj3 z(cUpLS2QJgU6GVTS(Xk(9Td&ZF0ARPo8;{E^YT1<6X>;CS5X(fh!+;%Z#X3y*8Bl+fv^w5HWH1w!dya6o#&c1F+}c=~P@8K= zVx^A&-uBmVG#t$aMK~Eq-=Ze&$|^)b8ALFpD(c&-YA!FjWBjPBv7s!<{n1B#3egkm z7aP+%r3b^JrDTDmi+0Z=GM%zIL9hG&`|zA%s4Koq5`V8%hAgWRzb+hY`zYm0y}4lD zT38wZurg6nZg)SGh`mrh8)W!=@_4e!h-YGGmw{$nBLvhGFm(8#FH$lMjLcS_xPqwp z-n})+2jbNF)GM}JkYH+JVsfoAIE*RWyi$0OOX*m*a!@5VtcztMXYV-C&EuwvuM`x{ zYoU0E(rX7Bfj#%91Udnc-!aY`EvWpbsaN`iXoWc#Ea9`b`za*5mKWB-aloOX^innrS43c z`%UP$c-b}18cO=AuS(3y@LY~h+2b8qva+JjCzgt3vF+{Fj&a`gJ0x<=9Orq;Gp#yY z&V?QizQ$XC7GS=$msl7TVMzCFDg1*aX-HPF!CAK0mg!MN9Db^S6wa5s(cM?6S!1~r zo|l($P!q85;V0(}bnly{^jUcaN)HuSxjk9Zdgy~5w6o^zR$!y0fPty_D*hAu!hY4( zVJJhj5oq4lkkN_%=L;Z*!Jd%EKJs$P!pdg!95GpCSH@$->i+=y|NR2MeK}VO$rmB) zmhVL6U59@$NAv(>dmx;gbw+ZJG>|s(tLXRjx`xBQib`)ApS@8S={r4a(`UAKI0|dm z4>RyJXBVZ#TKv}@c^R5?{f$PM{vh<`^jSQYU9>*4F#8X|XiQQXInY?heG66kyJe}b z`r=1S*zC(?i3pHCWl-zeF&joEYUT=%W+T!dibp&bex5xpmew0EtG6<+B^PIQH5OFc z=1mgTE&lIiY_$TaNiNoX`D7|=%V68%bJPI)QVf4`%qF86tzUY^(PzynuZRE^TQYz# zt7&y_1w@V8lKnwVh=mj;t?(!yzpy4A_#`f?@$;1>#PrzP%#Tpjxz-R0%Nge#9d!6= z(NEzm{qrSS&*mAkpn&I{L2ZxHQ|RSJmqPL|GYqAqUK{>#} z94e5XnmJLHNvx>&lHnE3k!vE~h@Sw%{szak?6$+4jcPz%8YAve4kfd5M-HT7Y||-D zttS4O+W6T}HqNguhqM(d^?>O0*jwg=#cng7;t|Yq4+~zO_6*AKt_7z_6Ei9!OPeTV zhGQG}p^N5+2i|#W)XJ7Kc#R&j4xd_2bm!!yA=|uUIh}SSns_f|>=Hamf3$bLoMWKI^h;G+J~!x)e7Ay8QQxATa`>?*WF6<(EQNzDCq*Q71I`=z@>$*3@H~bvfX_7Z=HfQeBSY&7_iTi89A+K$oUOCll&gn<~ z%G@mL?@lSK=zx~NZ*ByzKoNMJno>^ma=~X+ykrV(}aY~i$(R1 z>qt(SZ&F))R-Pq0C*4X3|MzK$!Pl9s^+<{g%*Oi0e3$k0HL)m0-R+a{*7m-|g^4trAo;?< z0rM3D48XMZB)lg2i)A_$v^0#cV)d1=3TM%()&U`Aa6e$;hpNibRItu~Y5=jv1|vnP zQnmczAX%*B!0fCHcf$1>9aT9D5X23a9F19E*%J>oYW^P?@qhKa=NUoL8{ZU@bP8&- z%XyGAa@t$-0}+Fem6bBM5zx9QDJ2b?-hT&S;^OdZDm0oFZ?DeW{+l`bf8Dy^M|@mr zKE6LsGjuuxuT9KggHzJXL4dFUl{3}D`v&eSnf|PDs{g+)7KB-t-+so%QxCmKKCt3_ z@@_L{#sdv_)pWfsr(`TmP`f_Nz9h4(exYR`Te2J5R8ml^|G@gQbDc4kkN@3W(293@ zFD}v_2$Rj(>>d`BKD(J0{l&MM%(r?rH1R(L>HkW>Q^B{l^CNr|Sy^Cj^GAj5Ye?|D zd!ToRTqO`PeGLvSEXSd!#cH&4f|+rq)hEPNk0zF~N11S+K(sya#|;k4qO=mg#%tD` zK*KA<95A^wap(dRK9HhF>;y*+Jm+mpC=VL_{~yl&JRZvSeFMi8g>0=1S&E{?PWGij zvRBA9_C5Q)4U&*B9%SsKG9pX%?7P8WEQM@ipBRiW_Vs)9d7gUze&0X8^XiY%jJfaY zzOM5+uj4$9<1F&=^?f%$ROu#{yL0#M=c02#1-k?#KtKlCxPu+p&Af`d?Elw`I6d&% znl2_bGXIrkF3&W>*NVcJxEb^PeSZTew9QTs48K0$vNtrqE1jI)C02vd&iSlv0x}^e}By?&_#x*axpwA1T0MU$`24 z$O>e*paFV(o+x8kHzMQW-0U6ISJy_avPtMASrxb4POF@< zn_C%EsZ&{zaI1n^-Ca(+^G;EP*NmLTpOU_N$+nv`OQ!r@QSCW5NbaqGtc-hKeEC~%qj*VN37G9*`y8=83UG6749Pjh<-$q8NNJ%Gw&y1G&$oKZf ztoR1;R87ISh`#Ao!eLJ1?>a2%w)cT9X7O`=!Sr-<>qG#?cx9?KcC~7%1$dhOmgL-k zSe+b)LOpt)*U+=Jh@O-E5#WDN?KmgZ5O~61FgVuzU57ObD;0Hei}SyiyBu^(LtBae z8pHY?%s2CavNC1X(MS1NWSYx$mY9Lz;YXq@3sV7D)XC04qgG&`ELl(^2S&Q=IRtJw z^mCvuKQZHQ7t7IHt_}!$De0-RQ(3i9wS);x&bUwcrLXAlBboiBEhJyH@hHHe02WkL zPPK7awFllcwXtzsHo%Dap7^9IpKf9z#jBveCEUL4iqm>$3S^}VQ z39*&P!uic_i0PSnoxvUs?~K+LM*&Z|S%3CwXy*N<*j0&_Ax_fmc-q$Yg%x2qQ&?oc zln2ifszg$?%pQ#XrH)jLJ&Qgv%pB6b2OZ(c!X#9!KEyL*MdBqsiP)>YdH@#CePUxZ zH2X@pISV8_1our}E~@*j`@@;@fc>YA%1v30B>$&((GBzU-hcP;<_%Qh973t@iG?#g zS~#!Z7LS}Rl`389`+{;>+9nbpxZSv9n_DGxjIbjbqS2Esd-_8 zyQui_!m}<>?C$VUayW2$;0n1tw`0rJ{%bX_eB3IUkW~x@qd3JlPmLON@f<4xbDf1!7mHy;K+PmK|RXjT_L2qrH z13ZK>w_!zi3rGj`mG&o8Ww^zQzM0DQ_Ovf`?!=h0yjE4!gjjkz)1%xpsXXR}hTc(x z0u?`W=~qGBifNy6cXaEllbAM6b}`Qk zi)9<1`9(CLC3mh~0)}QMMjd`0=NV%jO}PtPxstEL_-CYaGLp>v+&asB=Ssu!JF+}A zvQb}*Xv-OkDtKv7Zd1bBVfy&A*o>tPN6w_T2n4sGVJiQou;PEO`O{Ll&87GnV1oqQ ztX`T!l94Jh?6!`M(Zj>fg;Qw377SWffkuuHR@SykC(yZa{on`^{(v*i%+8JqD6;#c8-o#uCD*6b8E{CkBxPM#n;-} z3Sy+8k&&Bm($v({tRd6!W-#zWCKBBc{KnnD5aHv;kDxCk%hjt(1cE@3ZMM?OIf>2f zZJ^xg^PlGX6Sz3tOC)et&>{Cob7-9DK&w+Pb`|%Hvo6bux>RQR>3e>O(NJ5SXfbe4uTH zu#nILQI?#VnpCUOuhoWv5YUWANJ4_@K6gU1s0L8LUAc1Q)3dzUeO@$YLYJVVB(Rtx zk5qh>mzQVJ$@}*@H_DdN2^(ckj;_W$0_~7?kB%*(qCk1g!$aie&70qfjOsePCM~Ax z`d@Lf@Hy`P7#~*y*9hEz0nx$FPcjpiQGTX9EtWa_0r=iZr*1U*wtxUAv|q*rkqiSH z9}qLY@nQ6X!k_1@IB)wyk^w>2+T>*nI7UAm z8OJN5uGE9^2IOS$M6`Z=bcCEOEG#TAtaxiB+_k$afw0aH#dJt;_xs| z@|Dp9H=6zAjjv2l%ePEiT(3=+O_>B-n>9F_P1(bPM2!=enqKKm`x5y#a2@hW38;L= z*Yx!E3IX)aF|6dg#Lm{1c`CPD7U4DB2B6%wfDIOD4}yE7;^|gFFmY~NKKInrRO{Ad z3*f8QDkw+`8oH|UGIBv^8FBg&pb6?ZamUo2o*uK`CIR7&VgV1Ytw{8#jJy~Z3k(eW zJm`n(4d z3-pt99Oq8!1+x`$^{S=2d#SIZc_G3YwB$B{;#*i`G5@C9rcnH=uw|P+*LES!huo61 z*z4k?3CrXw(veFEW4uCxOF>5BYY4uR)vnhU-<91>RCU7!?vw-`Y}3?Vz7Ut7%AEi@ z?EtwRcKbxK2oGp03Lf~2AL7m<42Az4`%XXir-u~#nh#bVdach+b?3TIR=3=7F#k9cxl&5N-ogZ^nw(L-fVx~^eDVM8 zATBENm9^gvQRcK9O(UjF_>jr}9w(;~`?QFLd-Y+M$=iP?Lg)Ciue<~)_VepT6fo}H z?{tq8`Q`R4&;2_J)uXp{6MSwG9tzz5bA9s{k^jF}ry2Fi`tOKckmLiK;h%RZ&X?cP z{}UH4T!?N)mY$w+s+|LId`>kGtjv!B_JxGb@bIJevZhl54QGF9Tp9{1}PfaFOKbOCK z^6B)@h7fG!9_x6Apg{hI7k__koKHQ?d2lU7QRaq<=ohz(jo->cIE7?Y`DG)l_f928 zF=RZuOFQC4gfcN^IHWFW{dm;sWxOty*4(8)xMnyH5NW@JU;yT0LG%6^OBXGx*`6^qBXyNP@(!S5s_A=^r zw5}cgDXoJngUdhw!g{uv-HT2G_ynHahg+uF5K|d~R`h<2)knz|ukwcXh2f`?1KjK! zL5bFPJOHeHHZ56oW!ww@0Qf(c1wq=6Umr1mA@Q1QscXLI4`;U+XWNgeP z_**$Y_!QB2w+&|GBY1o=b8CgichO>QLle|GapbdUX$bL{JXfMpSyzJ%Zb`}rK4=Vk zIr6fL_*7N31w;~2#*a5H+j!cMsVA7Jyn*qn6_lq}|FmC$W!8jq)3#b!`I3#e-75b4 zAv^C1x>SF#fi?Im=*#p5_drSaUbSO*UKce>s$nP2y^RMY#78sUr>#AH|Lcvmelr2z zY0$-%mb_8mzMu6KE`=lCZxdfv`S0Yv*xSGc!Vh7$==&$eG_gdkWJDO2z;m8AyP)9J zOm@&=2pQ5GD8|8OTLr0^}-x8aWX$-9OA4@;Rh}<3Ts@*XF6wwAa4mkB$Bxok)?R#ZkE3ToOrV%{9F5uDx$7PpPUMzc3iBibC@SYe zeyYB`WUIna7~&>j!&NdxRYX{-8?=*=@L!QQ*!C)Uv2ZT`F1mVQG3_(20N9i>h`Vt7 z#$0Z#D>OF1*(Aaq!n({nmzPvieb7-M`U8>CUi){=_yyo(^y!uE+$wy*tz)PpCfRC7 zU>A%q=?)6q$XvK;ZM;)fjdXgX4pPh-bqyxC347<~EV*=aM}#Hix8urf>%}lRLR?}$fp3ALF*M}mlwRkS53AvG#=?X zSI^b!jC{WUZ-cN(^r>NF+rgK-Nko(^bvu0i{JA47INWFAzO{2h9}gSKDyu83)rW>72umcGpIZ<5HILF5RgL9`?(OnER%V z=_CHKjJ2#?|30Lp{nVh{Q$`cye0El^M|M`M2_XvKpX-)5PfAH4D!&%gvo)S32$MZ$}oKBCMp84Mbm?zr^wB z;IH=FEPJhbxLe?ZX-xZ*KBTkZMD@jJL-QA}C|dlW^=xdL_pRL*PMp)9}0 zoEfyD40_rPR_y4qA5M)_FLtc*uIhI&$?X_8jxUOwER;cgNUNjX$89PyvCCspNN&_# zRq!ED`MVs6x5PmJ{pVOZYrlt3T5frUERDbMt-#a{Pmj75F%NU7S5$8=J*1uRy7g(p zNw0tPEXc#Xxoz9t;6nojRf?#4DApjLcm zuXlIfHK_K!RBHkY2U6Zdrp&--Bq9f7&zZivlm!Mp%(1e*@?CAb5ezHVJ4HUpn~Ni6VcR`Omlapn;Qxhpo7i^yZK`*oJse1em0LCa^`f zJ9ob9b|f`6{p!5dcyti_V0>`Fv3mckf2FW9Vu|yNwNKuCKgF5QwKW@szwLyaIeOSD-rl_(Xq5~y-1bZ zi|X*$xZY1H+>7hbq{?kgRrFoo6J_}@^Hd$3=ORMSJ63u`6E1!1Y0F*T<6X4LrAb?n z6f45VV{pX1L!SDoyppFjwn*x*mQT;92bV6_dds1ae0oA6vMM(WyEBai1_vt(1fTOq z;QXx0m_d6bJ<~?I@k$UH%nTbICKhI7Wr;`NYewO%gYZP!?VWy)&GSh6jpaVJiMk^k z72=(s2%D`1?6v2euJ7L|fUg`6$MLBuEXh2G5KFKm-~~vdp*vXvI8;tINhWA>I<#)1 z`!0pT1shwNuJ2Z#^NL!$S;3*ZOELb5-EGh*ylsMYZtmkm5NcAU(UKA)dm>{b?jo~l z#%zWMBUX+aeiqN*^c~esiLXxed?S55_yMu2(8b{csnS_AX5=L zLcdw&?8l{GDKgRI7gpZq23XvGi@(!e5>+TjI|0ii9v}6zN8~x*dENDM zlehT^bLgZ1lh~4ohUynXkT%WDdq9v|eF_3SW{?|~JXo_Bl(PHJwF*Y>^)B{Q>Bt)) zz!Pc9<+gia@XFrsTc%o|g2b z|BY(ayCaStN^21Ed-YnE?(*3h;8@g$ngsb|FnrGXc4mS?Vm*j2MLeuALgJTl0W%*Y z2^-ZDA1W}|Dr>jR^;5@~lU;=u%PhNX#YbXb_SEh6%h$cm3vhPX7N`Y$>#CR;gd0Qf4WBGt{g6`;Q@d6}ie8lS zg}vK#e2dsWXEHW~E=9b6$t5_5@h$94%CfGp*-maeTK=LcDJR%GaIC`OfPQT2@r~X0 zzUamG9}C0nZrxY1&t|Ir6PP=fByh3_AzIp2&V+QEuLnxtQG9kVLQTi%by~+KBO@Dc zsH=R6?wVFNmGyQiY2 zb{8P*E7$|6#?45r(g2JJy${pr1+=(nA5^%DgppNt!3f>?l0WLc@WYcs&i9eIGfb>~ zhXdP+sBm&LnQUQdAo7B>)J>NpVEd!gf7nx0P*?~h&f%XpX!lQ2?f$nN1YLptGqj>i z2#!$>B@=5g4sYkv|C|47CYJb-7D=hR)o=~nR(H;Y3R?E5NW7Gecwrj{tqAO}LVK#5 z;as-9=yO$FFFs_&lLbdXIjLytlw_n5?8WIutd^2BowoMe@0cbot-zhp;$>`6B8(_D zj51I5vaqj``WGzE@-mk6;>tOh2!UHQau%0d_Oa?zXHlgNX3=U=^o{B-Na6gocCBhQI^nShs@Qh!Zy~ zu4@5`M0Wh{7bqvIHj=5g*B%=j55(!<+#(_;);-~ve&x%EIpnNyfOnby57lFw>Cu^( z7`j{;Q#r!Ai+oU+rx+%8D)`E&toAPl2Y%Cefw0}a-nyE`te;ll@3AQ89WPqN5{6=+CzOKJMd%2m#_3j=JztJL;4544lEpK$Gs(q)cMj`M5HH|3J#4 zZP^v$ksKs4d~x`uBG>f-wO;`x|1M|fSYNdI>SG$68tVWCLdj>g=O5ouuebY{jpHH^eJ z)V2kE|KuLjj;mySjIVFbj~#9~=NA^sB(^|;RzY9_Jq%$nlyqhNvlh*>J6hfu=8$hi zQMl@MJY#XQo1@G~>&D)qk<;a|SAwR*!;U%^nb39z+o09O!?DRd+}W_@^|0=FaV#!p z-jM>GpzU_N31Y+OuUnvX4?rNFu|&PH2gdg8G}4)z8LIu&FW3;6+4Ybkuq3Bz*ax1x z6gZk>0$`oo!X7Kinm6;k3=5~u#v^pxKv&CIm>k;5(;a}ud0+0_WTcMo{Ye|GIk#h= z`0&)LQye!R$Pbm>zSGUAk8J*~{x<%7tgFg&bXM4#^uRxu#Jq*invr?>Yy4O=1N-|T zFFv_oGM+51gmk&pC(P#p-vsjPJ=kxfr+*}L2=kz-=~vk8wd993xHj19M->?y?#DRL z6yDTa5dnx?#|KF!OmJytTNL(0W#r1DD0Y+B;wSfY>f4lz%CCS@zu>_!tz;kKSa3^t zD1mY23H3eQ#8EgpZcU->!_#G!R0+>@vP+hhyX2=3<;Aw#?6zj_v%))UHoP;tBHfCr z@${hhsOcbw7PkM)ABZN_cpdy4e2tAS@HG_i(qs)w{f#JQZc={i z%;75j-tqIBkbAvfQc`}k4xP1drzY+lQM|gT9vw4SZE+?0aWpV^m>v}y!Fr0sXz;PF zu5}P)5aj{@oTMGuqKe>BNfiGi>*p%w#CcB&Chd4cle$J#h1-N7PXGGP2-|s zusBO4oI7X9GkOlW$4$1S-bZIazct^(0p+E!11Viy-FXkcS#9lih(r+(ViGjn+7WmA z?D{|*Km=R4V8xO3c4p=Ra8A+0OO1Fj1IRz2H*)|P>Vm3t8eG~mVAK9{4Sn@AgXhRW zPFv!k4!Z3L^4)JPg&OAH=_WFt?d>fD#|Y5S&6O=J&AA~(fs(=X(}5sa$o+r1B86Vv zy#Cy?d}wgO^AYLjpfxsL9l5)UlA~?1)RO5%pv8f-#;3)vOXqD!2zaCS<=C8O_UyYv zh4~FX^;Q6~uhrxDRn;u(5^$!zDLPV0q8CB^H#0}g5My`5BO)f(+)zY5QMrmN6GQ&l zgwq3<`1Q{=B{L){@yqJD)W5pvR0!MFI*IPie*qGE2**_*o5-3OjZ@Ik(E(ZKZE9u; zwTF(-s#N)-Ie8#Q+T6b@uzo-u9lgCih%R<-N1y?HiL5Qxc64v>?r3H2l_b-SW`#+a ztsW29@}7M20(M0dK;22%rlz;3~*kPmPLo-NS=3yP_! zQ=D;vTU%Z$Q}qlCNn7~gXSxOtMvg;SrKgN0qM!YFPW*ghawhY+{i9DXrbj=sfcC7X z|GqrjvMlJx|9O#q4DJ-~|L4KcN=JA_Fov{75k$T-R7vNjPqP$u`Tfb^jg(`Ke5p zKP4zT=jK)=f#TO-#R>4#K!6XjEaQR5*bE5Wm9u=`E+QX|jT!oRqiEXZL{@%|pK0n} zr=n!=^4MK}y1%~H3AdWP{q0DrS5SV_y6sZ5*n0m*Enpwk@?9sLC(}RtB^I;WMnT*arKD%&yhuGq z+Uvy8Txs(g?;y#5IxKt+loFfGu2aZ;4}3jPBE+4G{K^Z|eW}1D?kr^laFqtg9)A+o zG{X}E15FQYS^P+m4H|*AbFyC?C7J+(>R$v7&WyhFL>$+j6DcnC$LQ$pPnvqFIMVGb zjK{%h)zH8Iv5zO~EV|Ur$*I|EW1hq;w-u@N6Ej$$%qMq#|eCH`0}wSk@fC_W(8AnVkc_ z?P?~K+#$!>y|e0QaI@NmEL=%wZ6I2-P6g6Fa&};I!|Pz${iS%##@QLZv}C}Kt&6m} z(_W-!np;r*4pa%dyHz6}eFRm(XL@?*q7m;QdBMj(%&nGG9;XRn!Un%O+DgSitz^SM z@f;Ywxw*N~%A-oGf((Z1V&oIU=bG21Q8H>+m;YAjR3u0}Z3u_z3n7${v*GrqJE#eM zMKqb>!TRzLbalf2(x@<#?wj@}Aqs7CLsq2*fT!Vu^}CA5(U4H;LxPH#o*vVZ=e|>@ z^@tbPwzI3fs0SWXp}%u*{#WbRn~^rXl!D*@g`)EKvEhnuMcOcoFkc5HLtHZR8BFUB z8xu~ZLJ%GQkEHRbu)-j_^v@}?wjWf+WHGI#7m?O`&uNF+$`41YMY&{a4L(~GIT@=N zk4xpRT!Hv*a!jf4XGl2kQ7F!@P)8{666_lL(SK@8aWuc`ba;&r92gQrVv}?F+0RiG z4bmMl+SY4XY9Pt>T9-+csxmVOT0F3+n;V7Cnc+OzJv4^e2m(6FS?5r0u56S;qHa*i ztl}q;OMX+5G?k?430S+gISgR86rr{d zpKB#SS72v(vaIJv@$VG7zj`o3Q5{}RG9&GqXU^3lwBqm*<-GQ`z5Bh%fSrQFZ-LI~MFN=Pc`cD_k;1NHV8GuIWKNE*aPQ4D^3LeSfDpFuC0% zE$ZR^P<4dT2y=J{mP2AD<(A#ws*RtIRBY{`FNN9%0NQ*iEy@@}+$#GFE{*jM zKK+I;)dlT233_m}p6@WiDqK5%140Xq-mvI2mqyC*%92%?O5eL;87NT=N9kBg zT;AvWg@i_;wBiS${eW12)7=!G+-Cn!;x2bI9(*4l*l=wK2$O=eE3gJv@yv(}QwXM` za@Arw6@zOMbTzhZc;!2D;qt4|@il*Ww3Hs`NJ@oxO+}$fRxGF|7b_%>#QFJVMu-Fp zJfRwj+KB_>NZ%ZP-lvfO7LcCn&nqLP_UL;ge5KpU!!u>uk(+{0~mMr-N;&qV#vd$fPw&d>~1#`7>j;k6TqT@kh>n;D5xLd^yo2!LxyFP(g*&>M;PUy}ZS4=`FmGT`ob^lckC zZcyb$6WPWpow@7dAIovu+0_Pewi=4y;Rt$(%k-zn!p53IM8&E~R{M59`S_Q9NqAhd z9Q*!ERbD}n_1uC{39tN7z4DUmaBr_qT@ol(><7R%=D8TArRb|2E6;n619}${0GxM= z8ZNv<+(i2>wA+3z%Cj`Uy~qsS7xG?(g+DHTceQF#!y$muvNcrZxPPb1M#QmpfuD86 zTqS@9z@`kc>umgu%l?K*-mYji(4&{Kp|^u?q`$=C9vC-(9+*E0-xt(yn&tkpz&4y+ z+3zA~uGE3JurztXdu#@26=Yuh*$W;8E!(7$Sc1&z@VQLfg~-HG*bl>D=ZTgMbg{+f z#w1W1oA4hwh}4P^k&@}e1RstF3GOb-9}2u`zPNU@r!|NTh_;-h+*>`_PJ-<>!Vq_h z>zT(Zm!yMUw@vU)Mr_YW(DOO1uJ{uT0BDVxIBJL;?4Rh~s+#Cp&@;xw5>8maX}EII zPr!O15gIV$&0jmq(s1-cz|9rw09&_gRP|G`E@@ZJ&i^?*mgbD($~qL~*lTn7dL+vM zAz~mL3fJ znt77Y>kSMi!oY?5s&joB@T&HmDY3rzFtTr(7eR|#r*SuH57Ads6~*^Rq|uZG;dZc7v&By=j13UIb2074aCm9O4_q> zS-}k-m`YPbQ#?~=Lge7A%crj~-nGO!2oT5m*a{}g!%PpffSVddK1>?>{DW7QuyZgb zVs{XGESaL7>XlafdT$Dau)lIAu0E`S$^RCPBnhy2q&=~f084Dh{FoeNX#NuAp(WSj zp(XnYOF)rJ=@qsL((+~%`>xIYGl?UavveGq_@DhoBKS?uWRzQs3P!hhJ-=R8SX)>X42YHc`V%7U5R=5J>(5fy zE-VNj!bp1y13Bmjm>0W8r__h6UcjO)mFb@t7^8}kyuUi`-C;%L6lJGmo$MA9XW={$ z4rU7gEenbEqvzWoAlB+ShzpAezn+tN_qqk(QiA6x$hTL6!qO^FSeHEG^OvQTuNnbK zbKU+ReI+!IOG|Ep3{39cLba3(IMc%!KX5=T9GQIR6v&0ZXaQsmMBKyU`$RwpjkPua z)URvj+e&%Q9t0$VH8PcTLLmUA*Z5jZ(ws7bAOQ1JZpm=mI3UU}4T%ydUxneMnxyn2 zr*Ww}_@oP89Dz~Y`P*N(Bt^nA)EX^29m#$Ju2L<(*6$Nxt+zIrGa*;at?bB9UJ~Cc z(#H1B4i{k6uj#jxtQ~=MY5l@I{pKp#{)Iuye4B*)@$pD9hPjk_T3OCNqc(8fJF?}D&NWT`4Xe{jmA`4#JSjAZ3QavhGP)t}~ ze;l^u!k^UM)Wku{*kX$Lh#NIW=FZV>vj1O3mKm2FWRp9mj^bfnAv9N#SjQS8YWBGi z#Za|i!qeY--`7={6rHzVc7KZZh^A!#b>o)J@0S(GWdZ59XY+C>$QF!~tSk^AQY-ei-1D3;dj1m)ZERiBAKryOyi3E7MQCHZ zum|;S;MsV1Kzj*HYA0M&VmtWNLf9Y+qT7fU4PKlNkiv00mSoj1`bPPebEEgOt-~yF zU^)XD9&0N}W(CF`eC-L$X^)pR7XaWXHs-up9Ic`yPPM)al^FtOS&QcQ{Sk8NB$+kx zJ#E#TXNOy+C-=syut8(8^-79;_gZhkvX+;ZIWvL|OiOEu)HF2czyf^p=%Id6|Bl7K zsa$n=2I@KFOyn*V_ye)Ye&Of;F3b*7ehA6^soh)(OLxS66Xy_DzZCrbyl~oLBp(kW z#c3DlR|(o6F42l69Ev0Z2rtOe{P25MEB{f+-A!t2bZL+;@oL%SDeM0*+j}|+p7pIr z9G-?WV8uc`Luqj7U)Qqw&sok$@&+0IQVERr+J!}#Gzx9Ed?$DoGjR z1qW8v3vrwbvGFfC)DltuMmhI5>DaWL6#a&2*p-d0U^6jw{JZ>j0-~*gV7Ff1Rlo}9 z2-k)!8{@60tDv4x3>ORiMVh_qo>Re9oSYl*XL;YlOkVwa(CQqQ!sVr&`sU5v`V!Gs z=z{e(1DRzBII+|=Gl#o9v@V7k(zYg_c-DTC$NY^8{Eu)A&>_K2+~DR)@b)_~ACe3M z#*05CX8P}26sMf}j5x?JUj1VBe`7OeQbSZ@_J8p9?+bwH{I9V1=1r&l)35*IX>#T& zHUBvdg14qK0ewdiH~lJ@yt!v7^yRVZ2fz#1sA&K(HClsA)ULl2Ln7yS|2RyI=@_l zYwzqF4daxlM1yP5Z|K}e#)lXHn9v4{2y654ZE8XqGSWVEw6d_@fd7T^0nhH5Wvvhy z%B_SqA$FoVWwBHA<^Awr?kHAnm@$1`9o>IAIA9s`h03?Do|YjT=dtkTR^Y?)F=Q_j+!A%PhSJT z5?~Hn+)oFLNLJQQ6%~N^^!CAefB*R|t9Za#1uz((cjc%hf#w8#fO5L9u<)BfJw6`g zH2!^f7}&VQ*r$FPvIp`h08740O48QTi@@N3S(>1r;C-<)-6mca2S-@Cp2<(3rkqok z)0JWPFhHee;&vt{r$oD9?WeJF-W?iJ-j1=-l=o<$>p%LRURz0_9XX?Le$g7eB?T4X z>SCCtPEn_rL>)v}*El`-N0Df)-T|ndrlk`z94{;;soX@c^yk;W^j|Js!GHW%5x!7( zFWF{hasSaQY^P)rT9%h_waSxheO^sDIaPDkPf#x7eXxY4=w&N=k1MAd+kIt1%po`8 znV0j`glHu^VbS_G-pu(X@3UO`?|4`JDTDNO0bqrIS6p9T|N3FJMULyO%bZyl5nfBKTzf5Io z>zn^^u~l@fSSVwj zm=Tdz7%eQ8a_#)r-7N-V^j+gXPd4W3jMN*QB+6!jaPh9ZZwe@wyd6AW7D@Xv zy*DZVJ~aG9Mdj=IsyQM1`WU9uGzt~bgRFu48n5cxE}!Po%8I2?dVfEeD;kO{c{vqT9XddSPW%^61p{?gT@Le?^~PVFQJsM3{A zLx8;w9OX)MA1NuF85$ajhQlvLDnd9oKDx<^A z7`U%C3w|ZB!vkg|Gi}dPLG%~3;0WUpAnUZit!mRFTz-zJ+_*enL4H){ZT3%hsUSx^ z-krAfQ-Nq3DtPT2{SKVi%CkcZ85a|h5<-oz!@_i=lx>ap5cU_ND7qFM;q>bLQ_o_| zeI3DgeHp|5rq*!C4z*J{PwLYqp0c^fY!Mf4@wral+ThLI5dn}JEazL))fFez8Qb}l zS=h4yh7Eb`_KrxxV^T^iRO`m&Y4C)oQGvCi#($zKzxTiVtH?-dz>fyBcd#xmMzu@0 z&r^~87Px&_=OF(x7NHi)j8)=`}ALzTMB6tuk$Ya)MD%6#h0_HQxnJ!C6(`Rrt+GA=gh+I zIGTi!mMB8wDJlKdwk)A#B^lX7X4w+zjbzgHe4NQ z;~_p043+xO4VIYGms{sOrH&9^cdb^>XbvN1d(-x<%MA7p4uJfHxAI4FYN|z7{LN3# zZa-31rlvUE{=T}TBo2`8J3FanTp^9vV1D+{!)PMqA;szIP>3O!Zwh)|5tks zJ{Ukdj*ms+n?DM$e)^b`swkzb>-QQxQaQVmvPp+J#W1qvI?~=u6&2 z)hnUJXTS>elrlaX^)h~zr&A&fKt@nG2g{h2p8jIYBO%&QUm3Wy!S781%&9wx7C@DP zA%Qvp*eXtd9*i~~FGql#$mY#?YW4XEc7{;gf0;rNO7X1H>TPLtJnOLe$XG?OkAusP znzgCCDGtd$T!0#Zx(crCQ5ft2fQ}%d%1(9K!k35*geqE(7>b&;ba1l0Z(>&hcIBf1XOwSOjTzswZd1vG$2hWVa@sIoSGde zmY*Pb@oCmi^>~W`idIgRNHZe>EAORniU!O%7R1j|WCllre|n?e2Hit5%iz1x;yxZW zjtE4!C>hc2^>FwLfF`q)*gNHOXGE7c;9i(Wdm;vik}ZOt8j$CPMC}|3xLNX|XYCyF zk$DYob4{dLY&oVhx1OQgymZq|gXW)u{+!oN4pKtThkI5GyN~zQ&qrA|9JQW0-d+j> zhxh<(I;463leACBJM{NW17v-ijM|3+;BiH7pC)PcKQY=02|oMxk*+e2SGhEPAgIV= zBVi49_YPO)Xc{S*d^k+MVT@w8oDb@U+_3wy0KG=k+`?e|f^t_k68L~s=S-{TP z6|9f9H=N`6mn4vCmWkNDVLE>IhE95f{pJ;nht;=)xFtgyHKRN{jA96edkT4deZf5? zHhAU1EOGShi}gb@`^}E-W2$FMFX&6KmPijsIEDFc5vr)?QP9B-x=6XrkI<;S_u!>{ z@~@lR8^<7&larH!zNR~eKDVh(|JE4&TF$=1Y)T}Y`FA6ZV_1Ic!`o;ydN4dr@XXp7 zKXyj>R~=2Us5g##$L(08o<&+;@H$#;tzHVzUwa1Po|j6dDJU32d;y)?KGo#_usfmr5rjrH@v?tYX^<9rX@bhxIo*z2 zGMl%N>O6=UOXftsuF9E&-dz1#Ugky}8=n(NQM&y6{PA5@w`$imb`#aSmN(B|x|D!6 zWuVKrnT2U|Y80d;9#&zzGgDF)I5LkeVE3jNAW|ON@fc}oaa3l~j{D+@V2Zl8(!Iv4 z_I6g=2xWe}(BBlWyLR@YpkmO)un?^e`6=O3rq^+P=^J#PX(TT_tdqSFr+#tQ`qi~2 zQXq6B2g(nQhYf_e8g?6sDf@!9+MlEi6U|KaS<{m*C!zYh04r_i_^nmsjC&8|zeI5z zC}+F6Zqw7VE`}Ve8M71Jy?x&iWcMzMyZlrK%~u5K>ymVIuYfY~Jk1$Sc&Jn39{yUE z!1-7dNGNfcScL$iyHP)tfF379^XZ*LLG^?;b9J`8Mfh0>`kZIXRG`S^lKJt88E{b! zB@gxV@-CR)_?tW21IiPtGqh!ceyq<@(8k(n`Mj#kI*j!+p)aq|5@nLwp^?|9)&qn0 z<_<>|+^NTf1+n&LNwuJ$nq6EK;S#(;$w;X_f?1Hj< zP)O#Q^S<8J>GeYz0XM>=&sXPF7P88zx-;0Fy$IXjo@$RvyA7zLok_K79Sdy8DQH!+ zedT-}C8{_U-&H zL!j@HS<3U9I`j&!1bs!I^yIIu-Jm-Cs>!q=(EKZF_^C8;=O(`_IF@Fw0W;|{1$wtM z^r4IE9<@dO?ks0{@_>EsJI@=XkFW&?tl7bE+BYv8A3EC|5U8->hz2FluL6kse6(%FD|O)>p2RW%>Sk zaJ&&&{Pfo4-+JW>JP)N3PhSJ2&O3=E1>&e&J*h7a5?=mqYHAG0R2PJ4Qh0y-um{56 z$|6SWj*#GI&D>L9Q@Tc*#1Uz4xEu7+9`b4EHZABAc>bbA>f*+hkjAC)5>Wc>Ai)@! zJbC~F(SR{ctSA@io%f~i)cgE9k=6!x>*)W44EMs@`iutGheVftecKlaxjWf+3aAca zWxqz99M=Zl_ma|(%9y3pl8>?+SN!;NYNO z*RxKwGwHz-!N9Q5qE;*@DWsz1!*c;;V4@>P^-5KIdvGLZIzcnX&h9gg(0CLGdL|?% zr*i^HrI1k9@74NKr1jI6FOfVJKqJL@A-A|H&Cxp!jKeGu5<^D^J90UJ`^xlBQ3^1^ZyeEtomPgkqqbz8Z*4s@)l(Cz{Z>b)srX_5 z?Ez1}%jy-d%Y2r12e^$ddA@};ymT4|C)ECwG6=GHYGj*OjbgXoT!Zna*G(sB2(c_cxhYuHy5GicHqb7~|eT`B6YV8urlK??Ru? zMT%1~F)^UO*^|U*%aq01wY&d5DR;@+fF_ZC^`3r%2`dX^ew3K7+o0v5C0^xNOFhN4 zdoeCi`w#vwA|2CmKJLoTayMCrkxfg;*~&uGze+U@CDkxRt9DjY_3+KVvHzZD@2dsD z0$y4hGqYcXwSOiDC#QI{10yfbGdhU@36tu_a?&(*-~a9yZ#rY9^Ut8oAr_EC3}T^w zqAaX`M{t$OmR>%Bz$m1iAUH3}bmvbz01?3fpWpMIs`cgAqKVYVlnU=tK!+50eI4-Z zJ9fH1y)b%n(_snf!{fylcs@VC?`F%jYqX&b#^Hai@(oN8N`wQs*5eVMCqtte-p8y? zM^)!{*-6^ARCU5M+P0tVmzztuc-1pV_(i@1VtHs49LG&+*v!T?ZzhNP)Mx$u_Rg@P zmRq!;O&+H@HDlvaq@oDb-xfHL)Z9Xmq_w;-RAQAr$^v0YE{ud{smg~l-x#4)t zXH`9q&GjJX#)AiAQnjG>%rPtvE{+K{*XN*+3pY2}+{G>l{ci-cD(_-Hu!LLTI&Lv} zd|DpAy-@c0zQTdw*nv;~Xajqz=pAAS3-GBGv)`nH@r+hv(n9wXm8vfL~*(c&}+BOEx^EHNGr2n2?t)`TzgOHskt z_rF_`!HDuF^ue38Cm|xaTIXYVs7`ZGEiD;os2TAz;LMY`eXu)%@>@%ogvUB=c;g+C zNbJ!?U0r*dTpnhQs~x4Rvypc!h!lZe#Lq|ZP_?SMIvOz6AK^b2x?E$4no;Bgam_f8 z>j*D)A*vlq`~6Seqd3nqc7>p?`CR;>hR&rJJt0|tiXm^irE2P-^3EQ3e7;jo#f!U^ zJUj6z%-3~C9x0&w-$s$;DYnh@ zWRKwC3|ghFYaO4Vi{b0((|l?)(&PZxunbv;0dk~0(~miYj zd6EoB?1p1f$r+g+^m+RSCQ&m-#Xuo;NWCMoE;#N|pEhBE(3k1cJDFtw36<$VFV@E2 zofTc0S5!E6RqIgbY89|Zs)W~i2c{EXq+)6q2RS)*C$G@yJrFcxC!ls0^-gGcE@mSu zGqaBNg5NrgD_RO^W=V7(k8Jlh23_j1dP~V3^!f*0d}v~@Z+m?0I_>E(sTzosU$p5_ zOmOdR^@UmDjYz92!H4oE9ZE=4c`p8J5=1MTcl|rl#*cU@8njNvV!)&o_9$yh(1nCIhxd+4 z`mG3pp1Xkorkv~Ked%%?)7gO&)%dw|DYw_4RCoUDso$4`2#b55`v8k2~?&hHH!fhj!YL zxzEdp;!859B61&3H=YDAiZFXmRYwUNtp%I;1Ajzmg2n6vl|0F#u~YAOC78&7J>ljn zWSfAYS7|e(`iys07afB4B4kKME~O;6vAP!A15CL>r%4&2t?B>6+FQm&;dWi4DoO|v zf`C$jNOw0gy^W494&im>0gCI_E z#g4VtUc1$Px{D8cZnGald!oj9H-~&V9Zdw#>zQ*DNtZJfglwj7lw+E8BR#tl<)cXS&vBW#rRaGK!^eH_={jC~p?VX>ULyq|4{E zTnrwo@wXE1F!e848(JE_jE=j&Szb%~SDI}U7!j_V?o-_0yd@){Zm6srV)pQeXayQD z0TiBrYQN5l9O}_E}4z~r}zn~EU2vi;%l*A1@70WW8 zJgDWRC^zHa)(}WVnWg0v4Bn|ph*g;= z?-^*ha6XOdD>mN1zFy?LNwyT+X+7~!FVIp17Wd}3;)egWJ%pQty{F4-LSYc17s`r- z0y2H8sx7_iO`K~+(2v(zbc47d87xgqCpA3+S2RXu$}VX=S=+7(Yw#U@cVEvwum1H5 zp$d7myyUa-r{xyYRSr|U5nk6VT+GEuvi+BJ)*fMNowj*-DzOOTKiu4M7l}KyZ{Fi7 z1(7l6?^HsG@E2dC3Ojmh(0a833k5hwNoQ4BghZT|Jqb6sgQY)Zvyzheq&4~&ntvDb z&F_D67qi(@+_FUCBxR&z*8M_56vM~@92_6{8*m8QhKpWO+@u@jC423sH1upaiFUl3 zy+RGguM$$sWNc&Gt-UjfX`>4YPj+M&ci|(3KmU#-r)$2EfvAl`*wxpD>j$)F>&M1q zlCYC^P^J%;L;ef3(YJGM@~QlRI^D{Xe*$*mo{H>KQ9}OY&m3U3FWZHHz9TB#x~tGI zEZ9|f4ZzLj2Wj^p31A9g0)1StYE~YGH!snW+q*2Clh%Q|~EW;>hNIo90LsK*C@ z8)%ELbUI-5yqIMdi=TLztP#)$GX_mzW&_Nu57hm*pUUtW6`a+s*;qQ`AW zpq~>1N98|lXLMh&Z|DLyepSCD$~5C#kZ=XbGQo=_frSOS9^VWP?XLA*Kb*Z-(V$y8 zxKmp0w7+WV_Ql) z_##FWemKNeBXTVxvbTz4SBPQ5VyR9?TBl@p0>w?1hHKWFM-4}lH}UQ)()Q+P^~hrL z6WX;+y|&IpAI_iUgr@IV@qu;2{ z^WhP$mQn=K%PLXQ7MH(DT#c%T~z}miSbebx-FMe z@>xFB)r1wQ-;_EArz?QDYR_HtxnGat>nrvKYR_1(1zcm_ZodrpEifeBu~ z6e&!SdpK;mHF{V+f;2PJ9wnp%nfO%D-xlLWOk~ytvR3`*%WsYvek}Bsu1cU%h#qeu zK!Peai^Kl2n*qe}EPVbu7jm*(M?vh=!)kA?iIzZwCc3uf2equ&N~b(5$C@ zxQ59i`|K?F^jIkJgRYau2Wf-;2A~|Pl;r4M|L)>)YO#x72)(J8b^G@t_l)N9 zcq7J=@DfX0TpaX_l+HA?T)KV*awmmO|27}FI<+D15NCHb4`~?&eFVWio1pDu+TY9WykXbx7`CBxRuLxS?b2b|7Nfh z{2IoM7R0B(pml&dHnl(%kDq0JrOQ=X&;o=G1dmXy=%uYZNoSofJZ_>1w`#OOr6r-q zhKjS{u*|W=0jY=WZ}6K<6mdDl6}Nk_m09+0I^^yENsB{Z`LJQx$hlw*QenAsaK31L zJZxmrhj+@7Z9E?r!qk&j$zWUnq%bro=8vajBQFO$F8}>(``N$nnOONnQK_&bvZW)$ ziPhVc5((d@W*GjPty58r!hStt(qC=XYX0|mRCbH~7AXIQrFdF+|C?P)crwn+Tx_H=u6>t1!cKnT(21>l6 znY9plOJp%}af~qAze zC-vu~i|>*UDvHGZwY%-~_50JKe9rC`E*B-N6i9Q$`X*SWjI43QqG>i=!WE8Vp?smr zMXP)~E+4;8PqX2?gvh;rm+k8ijHy`s3k6VPhgqWa9iV&PnLW|!HnG(uim(3C7lB~w zK^&ZGMZEjp6-2R{%`{ST3VX>4R1?ft5*%nqRAAD@-9`_pG zrCQs3@9J}p`Gi)-3O{e!OMRx2!U_zwF()J6O~a^}Uf1%%ow=;5oTPNbUW zp#NE}bR_I|q=A9Km+t0!KzFNZT#I8I%g^wOIAz17GD{rGq)SEN&ifA*@i!+pUX2>{ z7tfH{L~mM2!?6|iyS`A~(Gzy?Uo@q0f!g@ip|n^`_RBEfz0hZh2?T9IF-Ah-<430x zC;A|dFSlMboNMLlYxopgjNHR<3+E6hdu8ttyd%QfI3KfE%Jt)H&zzQzlgCY2K@7LJ zuqdg`Jqdhp)VHbMdD1k=m7{tRoNZ_6WsMV%dV-w?MH%0UzNdE^M(s4PbwFs~{i{rh z^)`vm(SxL4gud-njtMWxZ16MH=kINTLVr9~W*U5s=L9^a26noE9Sve2Q>OlU$WxnS zP?Z)cw3k*Fs%T1_2ARuE2nS~SXjrEHYEh!Qn^~_M^nw2Mr$ai;+c@gUzDERDtMOZn zGC322FK1``56>>8D9#}1DpkI=Nh?pSb!VHbuP*DR>O7t#wNZH;_h=CF@%QRZo)ZfR zgA-@CJ9NLoYAy47mcQZna-5GuV!W7}{UhE2vln zmr5wu5D0`*O%=mZ*7Jztje#a4T6lPIc}|e7p!&g{;OGD(V_~(Q8q^erwGq>k>b5(~ zSFJCw+lrmEJpTo?fn1kSTbFUd*;$qB&(zM}zu7=X+jk{8CCzS?4wDX3q7Ks)dL$7B z;-$AZwl%v?0%DHYWH*E{14oF1U6E?V2E3^IJWSBc@{R3fH-ULg3fQ?FVXwr<$l+;) z{57kE3?Wy+UjiiKC0>CPwa)kZaDcOiVGTCk`S^!jn?%K8cB~U_rSIe!jOK|u=PKf_ zye9jp&M6}bG~iD1I>s;($6KRg~i+4KH+3Dp4- zRN)G^_l4?^bQCon%yndsQuzdXs%K10R_uX24>Hz{g=DZ{VSL&DV;OIyPmGFEnXZ_- zIWPl}u$M@#4|jbGL(eJ(pVUM?0YWjzHdYTyu@)#l;M_mzIXfT?LyJ4^#hP-_YFGAAEjLmSDfsJKT zqoI+ZXdOsv)d733F7LbijqLvZfXU+c(H8A=j%R#Pt85wlg{?Gp?ZhK^#|E+l8|PWu>&?KXEZp%FIpcq=M3Qw}WR7m3yN9C6Y65npuyO_oR zlWKhXlu$zidNw^4-=<(bIbIJtsD2c8SKWzQg~6rUct3y5%n*_M$*=35d&)}(f;EcI zX3wy&$#V({p0K^4iFR;u9AML1DcgI%cCV{ZbsX-oVWB_S)&>0EN4pKz6wOgLvlran z&s%ZaN!^TDJ^Ft6u2Q__GA!|cA_D~eEs#JcK&NUtef?d=x0;#|+J+Od zZTTTw$3gbxu;e=^3efm;_*7a@dF;f= zE!?vNzuh-X}pkw%EGvmr0sK6#>WPmK!WiC@OdV8ilL)890 zf(ytd0rtbT4i8yqu6@2k<=N0778*8o|M0MkskGpW@6f~JPx$xm(!Naxt+pfidTpSv z=4{r-=za|Aiiprcyr(Qqs_oQ&W4=rV^EB6m3@(iagVd z2i+(w2g1)to)JG2kbCn=(TTU*@-}pFHi{L`?5Nu7M4UnY2?e8mfe!x;G$Sp-hO?9g zG0KJN*ESy~$Edkc%$^77-56^axcfn4*-(!D3hmoYLT*RYGz z>zJEH*6T|sA0Ao@oAZ9IDF`CrF#b=M_qn-;!Khy#b`465AiQqzk#_!Y;sZ*+cdW+i z4mYseA*|G;%lec3^1xRa7S? zqW`tNJ{}MuxFSUMWdI?dqosyoX=sg-h9)OS>N^%WfBUr4bUWB?Nm8^HEei zdvtSka#*x(?COe&_+tqD_jEtIJ>A}md_w1|IWC6-iU(P&9zpT(>O2-x9hX!0GCcAF zEO-!6FQmtQd!lsaQTyWFi#Lvz%~E$@nLW`Qp7dGdyS#Er2jT@BNlciSm|$aC1 z($A@=Na;!8>7N;?cAo{M%6+FyPSXHT=$^mUb&5eOpVe4r+4Qc*#BsGejmlE=7>;WV)AtRBz>V= z$LWsE`VcO#u=>`#xAkqHwhk8M@NQx4KZzei4xDF}82!sOeZa|67at+F5srYu-~P58 zq{$mJQ$IN|VD_tNN7Jli#ggbMgj)()&u@<79oN<-6!2O$pP&S{J&p?WLAoaT2W_|@ zPB^iAW@fC?-R55cmV+Yb7@}2tH19&5rGocao+rdCSu?wg^f8*)OSVtCM571j&3EAC z815OHhT+akvbn1FP`Z}8x>viLAKiE-1EG^=B4GnJbr=E}Ju5Qk@eT<|+4vAnh?%159RqPE7iY~F%Uyf?VO93(G6Zkf0`|xHJ z-Q&JDYYM0kF$iSBMv*KHj48y3>Wf)2P!R!T^m6N(B!bc&P@K6ldXozpSCOggo`#`M!or+SClY(bp_62FTVbnK(;ZU>0LCjR{!&h zLGW+Ai$=A7V#lNZMF}(4?F#laI4ysR#AW;JUjK^NpE?HPvn(w;>cEGkZ&wFrLiH3( ztm|lzJuHBN3n&4I=`MfJsIk-B_nuAQR_ZxNmBDtm-+=sLT>3XyIu>b;q*kt;kZ=_1 zPaL!{LCcm&7V(lo^`!A39V!06jV<$98KcNeWQRcc~;6ahN2rl}BT65ihM1tK^ZeNTN z7sgDAxR0nESq==WRj6_(VEntw-o;vWcgz|QJJn~j^$!GVt*i-!S%SwHq~5r#E}``-Yu0Q#(@wg_5JF8xi^39Kp_u! zFA61Me?Sl+_P^ttuE>+p79{yw9=~EUs&5%|c4@{x_-vMps1W^m%MJZ55p#K1m+}F~ zG4)3*%JSKMO7@U`eLCck0-`s#4qcV|Mv{+(&TLb1It{8~_`!Y?=VraVa6#A_La$|z zl`N}Jpb3QEh)Ha6lEpTU9CmpW@m-(KZWSjW1zxs1VNDPQIKbM6T*_x>yA2FDq-2Yy zy95za6;Ba=Qlyq-m8$>lo6(2>2`QsW(Q23=o2alFa$ zgdI~Y!cLb7XaT<+fTdwz6=`ErW;1ad67Mw`*)0S18-zLKPvvp5|q za;h)Cjl~BcfnJ1Wc9lDYD7uYB2%B%W;TLD7Vp38R@EkE*FpJ?}yxDG5kDsWUd1?3Z zb5IhKVuO1qSxWT>v!A|Qg~%Aj*xbTkC~@4?)$_(;`7UFeNe)o`c#hRc)b-<+A(3v1 zpT!r=Aua4LC1;Oet8LQ@RpLp{(a%n|%wfziY`)d&_l-yOJxL9S7tZc-V)EBtOx^Yj z<8SqF--*?Y5Ff}Ac%nbUi{8jZnZg(qDjhEY9X-(MPIyBL1>px&_lYO*`{eeN2wr^` zQe=gT=V!|#kRr(sKKB&6!W_Sc2d5!_hju9qT0Dm);4pdoZ`;cyiTBpo&7$9wCI zT6SlTJ0)YG5;0h*LIK7}-KGyqxwETwMz~2Sk_~qc0k!0JBy;}&q@^(J7e7G8niiqB z%{?0vG635+=(2^(!ePwY<0I1bt6YSS0^ zgIY7hr0rY^3+w?G*19e3G<^rwsZ`{SiMk!{;zIX>YIxZMGmrot16@&UpD#WYW^bO! z_plfe+W^ir(Q#V)35p?JfSZ+;l!WDzSuaoAmd|aFD8uo^86EY(k=PXg1%hL?=M(8D ztYD!xcx;f~Y=^>kQ#1d^Q`(n!UHvb0i>P0KTIs%|JEnHw2~y+(p@)7{;g<8&#=Wz` z)YJ=npbT{uR&Oxp3iz?Cv$Lg4D@dZB1qE8$M)d@qxHfjq{=>Rq7OU3tb9?N);e93b zMM=fTcb_~&>Y?0XxcfdtsQkhLA;=5o^gj5uX28bzIClP8tw@L>N*(A@&oj8_F4V?7(cm>^3Znct= zezu}VSS6McwBznU%)cgAcdVAil4OKL=dRPtlX?i8=Z|8RFpU9lN@=Jw<#h59q_Qq& zjZd{neg*Lnmb=*g-W=mO6Hl@hD)XvhJTJ8Lm?|yz@fx#_1?Zj1_;PmHuMa5*SR}Iz zT%qpNv+-9zugyhI9oJ~qnEf2r1*-Jw$AT;+hpNRDJ*x1Ym_8g1;RNUhBh*Qb@iHhk zunS;fU$PE003CbcT+D9FMvk~()iqHl@OEeLuTQg8>5xoGeQ9AQYn`@q6bY=b9^5d^ z)D-Qxrpb}$!eCaXl!lBrp(2e1+1{3V74DX}Ul(?x?gnWIdIx8kRr>+aa+yeYn^kMI zb!+l`d%h00zIlv}{QOG?`?pAla%c?^qHT?;bpy ztq~Ew#&~y#w5TO`WzG z2~%5(5O8*AAkV(DXVAabq4`zwOy=cxfH-jSr_}LLqgWum<$V8Ays>vahh8x|)M8lZ zi$qH$Pci_Qu*x_sUI~UbkeX`G>qX7G1zCRp6P@gE4-B-CmE61hEMNYa!nd~chD!`R z9IDJzB}uwrd63VHvThzd1iuVyIcUKf==EycmsYcC-Dr$Cs{R>4NI#c&+qo6CM86?(};Nw&t_plP?Os- zh)T4)*VX3?()4w#Qvh52RrUByD^)4)aAaZdfToTVkH(M8@?elG*SfAUMFsZ64_glX zSWMUzs@oILR6A&c>kiOiX)2Ev7ak4UzZkjQUtW{xytDNxybbjpjlM9=ijVcK;7F() z-2Q(-a#1=7Y&&iwAK;#TKpD1FzWI6MNnI8mF=f253R4_ioLn4{q2?MzC?EEj_!pI2 zdE)!Tlw;v)TCc1gylzLzw7+0lkp-965Qct`B!n6AfE3<-at~5eocNwaKRZiAfmnUz zIQ^!BNVi%W>T3{aso_2R6N(=pb!+%i-m(c-yx}s$4-v>;x0uWF$Vuv4(wv+GC3i&dB?z)VHLg#jn3Ej2Z`;`AeE?eg9Lu)uvxAz2 z*-c1`8-jx|(^ietZS7nKWb7J-A3sG63x{Ea_5K-$pr8Vj71tlY%+Y)30948S#V;B& zZX%LWH1y0@?m`EYW7LG2fd`|n5ply#T{%sn2awuWxeNz6;!|_kR_e2KlN*?_cFG^bsJJJGN8~@VB9=aa*t1w1Srg_X8}gizvT%c? zXC{o>P}rq3zBq%Zs6JyYVBW z0d7k)%clTP#Sj69ieYvk5$W+Gm-(Z21PB(jpf30Ms67{|x68{EAp*cjKTQIOAvHR0Vh57Edd2!um*5c6j)aeFUCL|vEph~pk$jGl0Fvd3g) zQTAjH7i^A;wt_;)d4fRJ2|$&@6?F4A%vN@DZB>Hk3XvtomV)8N>V#K1dF+p2AcUIV za{+NAxJbb1n@ca4ST;l0+{-|g8DsoT7_h{}{}b6Un%ZI>})_J(PcHGPwB~bX4VH zy|WLofDD7`Q?Bf5aC-4ga}xUq8SE2vGgLYJEt4wK^|km|)@xmKgN=h(;)O6- zv(}J{;p&xI=Wa$Z#=@AOF7gjv@n~pc$N8{P6S~;n1-&)&u@I{8x+$4d)_BGjQdHPg z?m^KTcwv0tP=iI++z)(hDc{nltIfpr42IzysZwPp3<3m4k7B>Bz@R)y0t5$rT-|cv z?7>u))(}xImK}(YF$3F3!IN|*Xz?PH=&C?8yk?YzB9Ov5uc!2#;(n}d#+XW=9$l5B z1?C`^W_N;(ZiZ&Qov^TI|551goW>mluK~VI%al#lx2g;;>Lltsl_? zB>P)j#T-DEQmUlD8`lsYC?ul4PwQMO8MlIlzDm?703>X>d-hM3m$F_*P>AXC_6Zc_eu7^r1qA z^;9}SsY9XGWB+HcJ5Mq$-RQ7j3hhos{fGG703*XB6I@Nh2<#_XiKTiUk(ic}8{KfYKBi=9ZZr0HctK}dH^JOvqSMzED z7FFc0+?Gieu}u(CA(NHw2ZG4@6CnKqiONjAiK5vgOy<-O!rP~V*RcI0^P8y^i?~3h z^y5Rjp;jkZ?&`P{3DXGa%xCtAIWNNTLkGf?1l~UOp2#AQH=;Z^t+60 zvD^^`SgJftUf5Y;-DwwpfPMJ$ND8UHUmLu^LC_EW1xsrIdwI%7VJ&R;GyH4FGkWok z^I)IjM;~q-{vZ^`q2oxBKR-1SusfuaiMAOJUcN&r=o;GF`_`^1=mpUNb*3tlLgIWX zHHP&eX_HF?DroMnI$a3KR+YB4rWg_MZj3}2gPbPEqgz#t;RzVPShd=W`FYKYIk{(e zYMwK9&0)n(eIGI`OkwVSX74eyk-EV@Vdo*wMX`|{!QFD1uk$heO<_dP3bcpK%afHS zB?9RxGJ*vjK{E=M1YfBC`f{k=AQG$cmS5w#{>MxMXBoA7WS@6T#ViBqW^C07?UJ$AMYVR|I}WC1$Hr zKnO82($v6|_KqznG&EC_ft`aRnBD&Y8JT8^5{m|%Mwg^AP|O0u&|-UgA1v8bwO^y6 zqOsFF$GZ2>PbltV9AKbvhue;1mVQ%Zz$ccV!3QsJ?-fu7S0>=#5CGWVxB9X9BzNYO zi8IYX)oyro)(YqJ_7KGjV%(?)|VN@%|o5?RyMxAY`*- zHFZ?2-@lJ^XHhga$Mo^>@illOCubneTU-`jKC*|s!iEJK;SdrMmv$2b97H}YNienW zna0`&>l{elTwP99)+?TbER_PK0`;fFq~9X@230!1@E2J_<~BpT&z0I)sw~PZ2{H?S zh|v^uOxYVbQaz$T zx(J!b%3s&*`iz0{jZJ7#BQN$IKCytHATcqqBuSVfwk4LIIQeH74ECDW@qpA6iZvpT zOslWDm}o%*))>$KuE*6CT^j0~G6CLe%HYy>0$ARMr?t}b!^8nmosx6HuT$Eqel|SO zen^+~W+9R9?Z=Zr)jYL_XF|#ZciGlApQaH}&ID&)9f*&t68v>xQsK2HVZ6voe$R(7 zg_SZ2zCWE%* z%7FvP@&p{skCIL1(x*8U4ZZfRx>^! z1%Y_?`zSP=FwvO5ep~TC``#P_yJ*xdBqOp(OWJ~xEBrZ|=~&a|_%QxK&Met-6A?o! zBe^kww%GeuN&I?0$$rxG5AU3cHqh-Y=X6cEsI^jfef2YE4NKgj4ZAfr2zh3UG|MxY zyA}uCOAjywXxt0Gf4}mDn{qxaPU>!*EKYjeh=t4DBiM@^R1(k-jF-1`kg9@EVxgoS zgyB&zGe6L#OD)|7iAp~^tX`aQmUtGpjwqFnuJgqXOqhT9l3x57!F+pFs1vy(U51{8 zFi>*OOfonrMrNcl?$_Xi_H(YXeWAkY+s5ZsyHNakr@)4sd_r#?>1KF+*~08@Xr4X} zu~P(_)LLr9foGeVt*J~boA|QTPw8Al&W7>)5#fEc6?eMdN-Xg|j8{y}<#3WH_QNg7 z6;aeiXRpXUaI+=9c2oGvo9z)U*1@#}ttFNPb~2Oss1j8w^9kJT-J)ha-p3k7hu8AW z-hcKO&1-j#n2f*8y0)az!hxl)XKCf#?o3Q8yR2Dp6={__I41!-{?y?)qVH60Uw4u7 zpQF4$`oXuW^AbC5qc&hnJJmj?lTr90LhW>ux1G2k`|kEx*M~sn%K$I(#jH`r?)I3D zk`b6i!ApQET%R-NYui5|!xSLNAVHKO2=Ck>o0pLkQza)g>N79e-49375yDrDL<+z$ z+EdR`J*WBGXd%U)F$wlAI-Y0u@Jkso&(jkg9L#+GeOW<4z&~W(m$FA>O~ckNxNthS z6Sg;eAzqq3Q5o^h%9_wz@MQ`$r1+Af++(f<_?-Pen0>phqjwi7WpRBWc54p{t3Tn7 zT2)6;xL>4@3jI!a9=X>CEK#fK5J`OBjaU0$Yf3ruaecaLq-Rr0#v`+K&vBtio{)7(hRMM3^{@lKVzhqV$PsrLh9`j;Y8u=iWhZ zohD+8 z1aNw4uZC`5oXh&#dg8`^9oN<>#;Hc_pyfn`Li!hpzGoAhHTckzI*QHi_mP(%^)8+0j>>}hx`JDo&_UVm80xy+SQTd^o0v@(+-(OYBMy>H83;+c@QJ>dIdiYJH=D)K zN*!(Z;4>qvK(N`7QkMVR578arUj9`3ui5ElW(7~5JzKEPxDb+%0D~e~zSh*FOj^~1 z32s-Cy&>xTW!=C(RuItKL)NQpUOKW^CSTp-7IBi^=dpb-EE6+9AIyBYGD7NQ`90;##{Z z^LLeSSokw-7UzkLRDP}CR$jspoUtXdN+F}!pO<9z>rW~wqE~xF*Mn?CJKgg#>NQ&N zN&0hi8uz<#D)+@2OB6-Az)%XiVSfdovoXb-p)yEA;E28lSwaCM>`(BQYfnArZ5dgG zd50^i!`^{EGfjEJ=Hpe1E`?RwsMXk;#$Ow73XbS&THk)UaM<2Rg)ZlDLy9*!z+0KB zGCaAn?{|;a!i5O!xUQ?|%8g`x-=Un@7k6Px&hzEpr?&SAk~BP5I_3yQce-ov2~2F#z0VdtUP4P2=e8X8i(MOp7r`UREde#Qy|9nNPr_(=fR;>k z&FuTO;AJLAB`y@}>gsB9vLfT99ASyYI7fb&Dns1sU7_X0Uu00>A~{Zec+-q;p=U_C zVfwak=`uk^U726QnO4-zQHwImDp#$WTI-wf%s9gXW6Dw12xoV%II;jJk3ONDbEBP6 zMn-y9wLPch z^gJ~CP~bA^wmmnjp|{ZAbQPvS02*1|vQ!&AMLVfecjHK%{u+HP@kD<>AvtKm_Y+o&ArmWz)Zi*9c)Lc{j`&M#`2(0lT@xNvr7MdY_Oi>fts zJ&$E6tNJ7CaB>%)>w3LA&1}>%(G!Mm));}$@P3}!|HLxJ_j&NgB6q&nKbk3DW5vxC zqN(wjsw#+TxL|5W{s?o-^ z_P(Q2GtG~tAXZ|3obRC5XKG7YVmZlESh?`<{iR<}6 zJ|pOPKA7=mbQIpc!Lxg{a}yar?n;a#RTMe9|4Y4Kp(E;r`E$B(&s@KCSuw-;W5=gf)l}aW-p|@12Hk$e zLi=dTSI$~Tge0Wk6w~9fH;IeAzlv*-U065!hDqhMD>pM0pM|CIJ&oUm>(53bPXiZE ztQpxLdz+i#1Mjxd)s=$gugo8rvxeJPE!YpxTZ-paZDZ29*Q*U3HZNLex@hPC z+xo$Btig%*%>4_sjApsvOA;O{8mt%LwR-}J!q@0C{L$2?&t(iD(Z6lxsdy~wgUXMw zU%&QuSs2K8ALFZ#QgQFMbEjXdtQ7gpSpY9&D)8B8Yk=z-(+Q)wAr(RgUjan{xaNiaZ zSGYo-T!b_e`JbGqyIeT!0#Ws!bm;c1UcJ79&%dHhuhwuVcQefYBfZ zge(w1rZD5O6+r$}&68Aa?ctr3%vGgI>DfOj^6~-04DuDmYR_J8pUtuEt*2iJUG7%! zdDccqQ+UMAUT=B9_koHXTkI!puf33)j(Fyj@lrESHDAH6hEooJiA!+nO&~0eS8}c)1p5!FVwQRz-dYf_ea5q>=y;5S&!4Z)z#Qa zED6sRIo?*J|2PQ`VbyxQ1N(k>L{1yb5!M$LidFJnjJ9INmZ(o?k1ha*Z0=aUI)Nk= zI-5Qnljmnq*f>9mv){g`J9Rl@38^r{>=Qm9-YBdOM`n1YQh4rA&YTraI*%4O{kDhO z=j+)&!ST3~Bha2?6PWW3i3fdvZl`NF^*tROxD~T5tf0#Y1Q}z*Ynf&9bJxPauNrnf zAbR{-%bV@Tg$>aiOd@834d$Iir0BU97S^HN1?x1Tql1l^xgcN9jeGWN1qI9yu&P^R z`Lr|DX=YZ|=OeRGd!7{I56+3=nT-o=A@uQ3AY=gy zPlz58>zi;#Ebg< z6fz+%I+Mly$heS4v*XGp(^7Y>vG~)c^q2cTFSm>uk5_XnWD<3inh;<t=SptjbK2S z3Q%5&RcW;q@{5Jc*9sbN!yPIsmKTf}iOEUdBg0Mi$kRRcm956?ICarZ(rv_?cd87J z1X${g__fWxS)eM#27lk2ED6bMx_c|JzJ1v*9r#NPkQ^#3FL0-)b%kyY7a=ufn114z zzee-XvI05q5`cKGE^EWsSlCGLpD{Y!7KwZgV)&Up2CRwuMKi(Wi$g$Q*nwrvv5Hc@qrwGx^m3TgTKZ+1;@(WjX>-Wf$pnk)yXX0_%>r;KB37t{gL8AUTh6z#m7_uw ziwSppB3*a-fSTj)Wt1^Je`f0Mq-c6S&+n0a8~BYbEon1(q87YQ)!NDl>|&Y7Ww~w3 zqHdX|c-*3n7&DRJu^ATvMRsM(ZF?D9m zijlW&r>B!zS5kgesf&O^_&4sj_h~LwO40F2P4dNdO$4jg8RD`tN!>XkwZ!9A<1YBWb~Ol|JE<-Lj%-ML9Xl88?x= zpooKk2+vqnk2Sg5K!6%%G2{MX#~Drth~((mC0%4?Lj8#tPqR*b|9B#BVB>JVn*gpD zyWrs4K6|Y#Sob~rICY`(iv2`X_uESq_w(roJbKTHZM8ZWg)zG5>T61xbFAohhrTcb zod5CvbF;U|etn94F|RNF<1VQ`4Usw&}V2 zvT(LGZmUm33{qeiI==>|kU{w)^X1n`x;zi!{1J(Z*+ogKtvqh6OOUpCIK_s+1*f77 za++d3E+IWflN8!hZBD$pvka5=Y~?1gUYg$V5Va=tOe2|f0oL{?oSD~twNX!dVxnp<`{dRZ1M@jhWy6kkT;DZu zM50-0gfSgZty$&DT=S`(EmIGQrA-n}A=v!Ni*@*;-Zh0@#EAd#o z_NX&N@2^7;c=jsSVL)UjdlX|c6>R5Tr{c8^DjHg@Dgz+N0ivi)?_RFr6%S~u2xHSS z?+Fk&6pK|+Wnh!fmn&VC#P8>b~dNefP=j7Vx;HOcy_d2|U6czv27`V{JtWAJ-* zY!;Zr>vdYFJ93%h?9HC(EXhmT^u|}SiHp--10jyMLytEbJbrXke2Uc?Fk4-(IK<-5 zj!6(ilbd|P2qx8(b_`Jne9@|QSj*_%h2>-cXWo#&y-{Q^|Lr9(q>O1-nTkS_M})^t zbxtH(WMr3{(z9)XyjgPqmOh#H0d5y6hNQAP6AGw4KA0Me0L@jaA`X!c(lFOF`#ZN2 zoOUO+)9wI6(Ld^z3WMQ=QwTR_qPVR=DieF9nsROLZAI!7D6UEajQ?LY3`M%@N|)V(*rrJ(j{@!b5{^YhW#Q7xW_R3(4!7c zO!hQ;=M)dyiR>$c0Z-%C;R*Toh8@1?A}1J#2AS&T#8J`C`6uiXKbDDmS+llC_}ub! z+4^VYc3>|)WUX#OB>PB;>~|aW&M#d1K8SSb=#s)MCd)6=RTRcm*fm}d<$gWS?GcDj| zjq#9NGd2b#O#^#=8QrTdfXJFse$(+O{VMO`2JwO z_ua7U(*hwNXC?l7GqvUAlX42u#Vao&P9>v>`R%F&p{0Ayrxo{R%BmlbnY^92FZ9HI z0)}PwK|nx2eDq75#aLxh7;kM1pz1;j9!ud_T9QHP=3Q??FKwO4(_^0#`_dc|PB4^7 zMDInKgau7~@Ia+*#H>1rkc#5+M#V6NK8{NO>c!L54a?dI_G{VBp<_q!Fa>UT=i#iX z@|cldv=+$LWW{<#_NZG3bS9Wu^Y4;aDq}ByUfjd%+!p70`(8W^IWW5UHPYb#riIi> zRpgtZIFL_Bwj15Ail?^O;Z9eaAuwp(46TVX2sdRKeF|L_^o%X?T0Y3vE=gw`)oTIv z*F3GMf7UJ4G{ZG?^iy48uYpK}fK|+ou5=CkBwV_`@z-1Lwf9K_N5|*+D|4wb2z7$B z3uZpa_n)yL#87naIbWrx9|zGLT63%m_ghApE?l3?pW&OOs~XNXf9l(r{f5!98Y*tg zC)dRB;{|zsS?%S*!RAEOcb-B@vKI!H-erVPZ+yZ-!IRj~_<#H)K++bdV^xTuKm!}x zEoJ(I4kP;m9*DZEGRqU&k!ZvUNz?w)1znaB%~EmO)9Z~isp}qIA&DnaHtE>-zp?Ey zk$p2eS`~-gCXAzL!x9SmP3Uk_JV70uvA6j5t<%(9{=(}1goR*F#FHpJNPnEJy4bk#3;kUR7go4tiWB_j-J6^OaF|8cbJq&Dj#Og zo7;aaY+-6BW^b9DiuqmJf(KutazQ2^;L_TNg)A0rzdb#TM<+AJXt7cEHcr}m{%Tr^G+w!<|BBM)uG-gBM3j_LoyOGO2_oLmbUGxlCTT6Tlp(Z8DQZZF+De5QLgQJAkZNm7 zhz=ENMa1${Gdi^9W!{^b-|yYO?;rP``vA^? z`$8(bR+tg9uma?hwN7Vq7d4k_@95c%%r3uKLdxcHLrJrw4SD-gwCAO z;QmYf=$SV1dnN<&O-R z0jt!^lwKr5G_4X*_zB}vJ-+~dd~Qp|1M)8lr)(bWm^q5JlN>t_oP&kK0+6Zt&m^LD z=o4hp_cp%4*g!lD*;u>ZwZDZs(l|5?8UW`o6FbB8Xe^(06xe`G#33U=%`O6E@-M1Pqa~ich*ehqWsc`Cky<-fd=XN;D4C7`6qS7OmdVpG8X@i*NakQQXAj+k*MDp1 zHKFz)Z~xh46%tV|fbsO1YT9+gZ&V`IE zhpS{s>{xQ!DJ4p$hwNBIXXTB)&&#TmlFKqKgkvng^z=W+G5Li zwVtZI6N7D7`oFvOiwLtr)6x9J`fna@0p?m{$l-Cs`u*27d&+hBUn?kewPqVN(KyM! zUtuF=tG9*g_jr|RE7g1B-HKwgn?L~+sx1Vq*w_LNEF}kWmuOGbwdaPEtG%8`$2Am3j}I_+!JRxGq$Q{- z+*_a|aTk4)#}pdXhtFm~Seap2jZgTh<0{SI+Z1n_Wx!c7W7Y5S4I$;)#d33%pzk)k=E^TBF<@uQh7Ea z)Xc6=zL!syZAO~sBVq(Sm3v}^EN?TP*$6E)?Z5!_e1clqm=;$K!F8NMl0ofb1{D6y zkA9rJ)P^wh$5wC*oiutIesiPKHFaYOE{9zNFRw_9x8Tlaa?bcw zUxH8WsNbz{PFSX!^XNq^mYYI2Ph$&!dxXlq%e^n+o-XM?AEejtQX!#GOxW4Sucuq= zZ0m_%voo;@!LT}wGn3@rNxOOvuPX`vYymL!?HCVasAV>35FST z+0Lj1j{Do?HLt_s2?uP2<^n5kT4J94&k&EmbDAt!V80TXm%%jb(f8KkO-R}U1yY@K8xM)uHi&dw;D9uQYy4X2QZbGj zlJHJ?2ZJxLqpuD2nfn)DU}xFy`@ShIJiZ+IRwukuC`hvt`?Gc#H|fLo3m zM4A)mR!}+cZIBUfes!jQs1Y2W~{^1wLl#<&h)M z9QK`oL~hRdmbA?5T9nw9qdHR6v2QXAt5OTre8@17Tk>uDi&iu69;H+TkXr*}*9l9_ z=?>yNm)Z0hhH&PV(|x}ybD+df7#F<2RguhCjmT!25K>{9$k$B!`8}|Iu&u(=^i4xP z<|EwsbgU!|yxSWnygwcSrhJ@dv|BH`{SrW*ke{aBI%ksj2E4Ot#6CN}y}Lv%xpgWH zdb~2JK)<{7Gc+m3m%ge4a=o;5);ie!9wA`YnwjUBjil!rmH1?lF3HuLB8ixt@{Hb@ zt{+e#@G3vIdrRZ0R#vG!+hC}e;eEuF8eJ~=HfXKGGzXo}$&Ri4yR*|Pn?H{0w{d2r SdfoAdBn|H3exboBDCIw>83Gaj literal 322504 zcmagG1ym(JmoJLDyL;o(I5h4DcXx-z{owBI&{*TrxI2v=TpM?HcYpo8d%u}^_s#uJ zt(BEjR(6s~YTK`NDpE;73K@X_0SpWbSsEa&0tN=11_lNR4F~hL=1{J1`fmpAq9P>< zRy|2{{PzZEt|e_DFAqllw+sgc1x^44{jVl}lOQ-+BlzuyAWIsQ=wY z;cx!0Ywd6P7tR05A%BAZ@790oenR}aHFVlf$bXk1|1}C&M#}o--wfUnpzQ(%Mn3w-1XAI#)>TPykHJ@4JpZZ=ZC<_&9W3RwaT2QCU{O_gB4 zU3B4><@0I5J(9ME`bx7L5@HJnzm5l4-TKJ9`dy>W>$3gaf1^!sHZ>vEe2fZ(oh;9L zWt?v+#buIxs?(I7nfbw3?Fz{MHB$}_898*&1m8{L@;lUrJ9>iG>gwvRk4g=Oaf{o{ z>be!S*Z@gk%Ae@da8^(p5Cq`==k0H|sNZ~A+%=1cc~h{ZbLGH^$b^O`!iY#mGf-c~Z^yOT1W*K(qqiQw0R&J`P&A6_S(Th8 zFz4a_`$_!g6gQ;cV#w0IY>JLbqoqT9vx2JDgfep!KdD#Ft6B81>frou9^pT!IUxL_ z|3x1fGKVnLGiWl)6^je5pAL%7=r;Jr2iVdfBjZnv078CNOMFX@QngL!nK7<3Ev#u< z>UO(>kCYoWC+2`yloy%|LL2H^849 z0f|-UF`GjRJk>1(fjwLhml`ztKF-cJ2@VH6&0XJo|9R+BT=4B5*$OmlY;0&47(sDy zD6SqJ3=ofR&$m|g_I^_ft(dIE2_R95)$@mZ&IdMj_EZ5)8T)v$w9Qx_@0J22H7^;x z-N>oa``;1=8~e_^`|j~F-?b#pw|OtWrVE_3M=sxcu6@TcPG|;7p&c5ma1XmMw+dXU zxxM;)+|rZUPqoHe*9REa|Ar!6+wFX;$22im8@PqRuJQ*}Uw2MImslpZqGHKO{X(_=Z(rVjuk>3gIvVH2;0FZnxQ%(q zm64N^6C46U-|<{2`C9T-Zl7kP*V5KVwfalowTxd!d%KdVYGH(Zcz=F#PEL-Mt!<~t z;2ocyF%waH@iVeHWpQc>wpf);1*`etCV#Z?)Vx5@ zdUVtc0T6g84poR0L_|I;E8ExBQ2g`gUH_bIHtn@4PHFFO@3%2~Ki`sc`G+-9YgGkO z%&DY9s1<4?VDJvV&8kc=d~(vgvAKzomy+h$`YtYjvFCWdctFeH^$a6$?eYTiiHpGrM(sI~-N2WSl}bJL&x(-C3T-l;2# zN&?XcI&bNCCnjRbj8UfX=^?fBNwBtAgVc`L4UagCc@3E5v!-#2Qqex3c)XLWX{Lhm!*CV@%{6HS?vg5o7AAZ zMfc|3K*j2%s1B`^cqPi-z6Cj8+^Bn9##ewRBoyse0bKek^7tFI_m&(0)Sk+)Wn(X@ zw#~oR;12K8X?TXwiJjXx^;;!n!#>UC`}^u91ANe`sqSd@L#n+9~?cHA8+%I%+uL}hE{#DCw-%A`bI3|m%Rg; zB)_=Pp``3QIuhD$McUqLQrL_zoW){h;^M-=#>O6%4{tqb#p1SH^R7EjRh^Ad#^8c8 zduAfTKT!b(@z6xVevpjewd>pyeJKO0bP zm50~jcSD$kF>#EG@t5%JaBea3pfbXcHu45Q$oblpeRrYc7JxrTwsb71hn~C=-#aYs zmz-^WIkW!L?hZPm616PALK1kHEZ9qkh zRu!2H;L$kVfb?KuoK5qI8<@&u?4}d_s-LDt@59h1%PHhJ=Vn#VBKr_P+ z2!GkG?jJDj#m&dB|DEyhZ~6OIO%nwQZyb)AWn$k~Ns5}5Qn~*17RI2K7RYxs<;SE}&M#OyxvRM3 zRMfevskJv+z#Bb&0H>>!7J+?_FQ={AyAF}Dmd7hoL@kWz2r;UWv@-w7igyAUA*zQr zVL|=D?qurV(WSK%siyatl|v{e2hQV~Ct@}ZjmCy2%S}*VoFJxs&totky54vpwq^SQ zT4G>f?AC*vl00M7JQxZmcMU?f7BX~s`N}mroJ9~5Rlt?SL{8v{0^I*_-GkDv78WuM zu;zQ21Bd9Gj8>|65NOcK!=uD+#}>r6W8a6WujNV<#2Y|%V!fN5m=fbI%`en)O4NjEcoOV+C=dcdyx&V@EQ$Z>-dx7_4 zVRId(Nbk;?h}w*>-81^xY8PtU+H;0n@lCEksWQI2((TJfnKDKQy zQ^IfU-ZPHX1p4qJu9vISbS|7fq*nU_&P%NOc5(XVZ{Zg?SG81= z%UrRDA003XngY4Y{%{8EYr`2Yc+T2%y5Bm`{>+C|lUN1}PPiZPaXPZhh1nX zHf}>zRbOc{ijzT~FT4=7URL&H=~uVT?WoB8=r3kyW4L_&b-Or8>9P0oXhJkx?MZMs zDDBa;k%i`3ec5X5qc@(o5Rm}(OgELdOQX52+z-UizT(GWbs6x?fkkH}j)nCOoMH$5 z&|tgc44+F3t&mCAIaId&*@7XvzasZLa{g;1z?Q|~OV;4M@w{*JXTbTQn3CT)<;_%80!Rv_c&69$))=T|FT! zDxvXkif!$LpsY-6S>X45`XH)$mWabIpZTuHCUvv1;te{}QwR8aJKl+K%`>2{m$&Wu zdRNoIN)@R>Pl4*d`$Hj7)!Fa-?QAKjgEBosNeW;Zjr|t+L0OS*PJzFTO#ZMOU;O|d zvizcZLFq)S#VZ$6*wcoSW#9vj+!#tn8TS}HyCSx^s5gu1{)<=xI~>~`;|5YDlJVjT zl|Sz2h`0-&`x zjSGow*nIcf?$f?KWLy7Om*s$4A$;%5Dy89+ZS%G z!nz71%hS^Bja7TGc_X18ia7i#CwQHccvM5JS1-4GXj$qJgoozaw$_wM zh%QcVS2%YGG0h1ooNYg9{oZw3U6#)shjK*o7@*3xnQfPEaq1m(Bj-27#mx_PhO1kq zSBP(`#fwA59hQ4{Gu%D}TJ8415|jeIcHj%F+tFUuZ!PFLNJg_j0?udy)FpO*o zqw19TOlCEKsV0}qrn}<%_^w+O+C(2CrWZV_B~vu4o>Vw?Rv8M@w%ebNI?f1FdTroPCId__Vng;R~#7grYQ9E5OjyrX?b}yb)QXYz}nlwFMV1o?rt; z+!Y)V5j7y}zz4G>{N036?_FPQ#cM{)a3I)KJ2CqQ44*#hpBZRT2M3|EL?=N0DUuSt zo~kOMLDZHJ&Cbq_bVbsB=~%?={e+&dqT1ZYRz5>08OF?rbYjsD-=lnoy`cklD5)Vz zI%=ZeuBx&shwUApaRe4F8Zq(J46(RbMl9kVH&#PsytAU%G$ZjaotcGMg+X_y0*V~C zxM2`6_s}+O&l9EI0vr|1fO7s?lwUf${=k4p3rTe@${lk1He9T@j~>>GPWu*DM+CHf zXvh^FF08FX;lPH46s{DlUL#xNGfMN*G+@O0@u$@G-pQo|>AQS*^7Q?^a@W}APEh~& zD@8Vn>+E4u_&!~z1w4Xe8D)g$aZ#RGS_c!}$jFEq6Keh2q-veqnpU-jB8!*xuYLt{ z4tPIZv>6hjpD#LpX8s5^*cNZZpr}}iii$>f6OE1@o&G3lCQ9~7OH2%OIh>63%p0I| z)AkvPNHP2HlYCdBga8JK9>r+J6?^r-ogBt~q^{9jPRf9v5+ zMfBG1q+>x@37~WYm^Pnso4d9|xF;WGj_eu|m1h`wcPWGNM`{G{*lTg}^4)*#?#Wxq zNHk)<$0On6+cRd~yeX5<<6@m;X~q8_EdB*;B0+5&(=PE8{tp`DKlBS8WS|Gy*oxgC z9__K%A~D1cjrOZd_eGREVdX!L=9okFwGTUtv6jXkC4BcAt6^3-IvyeTbvh9dQOw7O zUlUp0*{Mi!UEQqI{{&U;N*G0G;mpc^^!4>&k<;|JO~dKczyaQoQBgGyI@T}pp{bjq zp1qiq?OOhEkAH7sKrBp8PoqC%OdOD7*bl&W6{5FJq9wEw;p3O9JuPM)uju^`9Q1pW z17cwYL7__RBa4~EZVj7^45|U;KUVAi3LX!Tf89ec-6{CP+Jy^u1Rn4RVV)EA53>!7 zlrU->b}=zsth0vN;Dh3*d)qJ;Ag7D$*$NBnF#Hd#55md-(@ZK#LKXO8wvVnj=a^InU%7vP z%6@MWLcmO65)oB;=Jq7_VT)=H?{#+a%jF3Yx3#rJL_`St`wLb4`sH-BC6dkWiP6>7 zg%F4O z^-O_8cVyHOnP3fe-8T}x*r8_wY$YJDl}+($LLw|AVmzqO&+r@&vM08asvLK{C++xk z?|}`0`ju_H?|V~4&$UrS&HO*C_)qi}V*QSKr)b-0r4A=+cVoLqbEhbGNOfA0FJHC%t1sl@rZUes*^1si)cK z3nv{wqVfj}M&nX)acRUVWb=8TD3tzni|-N$Vwc)n4!sSui{wJ44eHGzU!o%;m659| zE0MCe>{M>N6OZC?^JZdqyO>RLHj2@&>IzdXPD~*Aok^&VTbYTc_VezYt_D12?wEyg zAD2_lxQnufRzE(fmD}N{H8&687Kl=Fm9F+Aq$S&H7-xS?&7~H5cdffsIkhibD`IUd zM(1Fr8WP9v!PDmfXyl88tkh2pP@iWG{6Q4@ks{hLYpV?=9)J^R1NpNgugvWg0u zed6AeYPihqHHZ|nHUjh;;M)!ULOz zmIsjF@P2V&|8|q!GqBRsGR-6z_l^0`d`7ZPJtS{R;4xcgSUIN?h)HSn23pI1V_EtH*@;KdO^?VEi(zStjW!NHxI)P;dlfJRL-p#ADC?o5G6>H)}()o z@;I31Y|D3sE8Lr7sSi?w^Ye%01NUJfHQ`+0EgE>XxD8vq-U#dZZQ+CZ?FYd~se)Df zA!kYbW77S@|JW3Ey-J3*;y4!P5~e(6fdyx%a{i9uVz*Qyz>=Yf>U-c$~UkYi_6 z6d9i*yLD9;nU^h>B_czL0L;3}LX#9CL+NpC3t^)K!J4Lh09)g`fhy^JBenzv?hK%>{4B@O836@3ikidmsM>H{3(6BhHmZaBhV;|8BOnSzh;G8*bpov!Mmp1Dq z{)GhwU)s~+6A5kZ;!otGTu{6DxM{j-v*`xUWN=d4r>97?x~@qMimjFD07zGIk8WDy zm|GXTbte!pkM~0*hVCf$brVWbiH~X2jgAij;%91NVtx{K z-R^dO`1R}Nr(a*hTJ*k@ZNejq6MLP*W;eP0WUE1IAFBUTzsx-2qP%zlP+aZhdCFff zK<%JqV+(9Dhc`Iwz@qbREiXY>Xe>9EnabRZBD*K{aX``cM3u*B2TCDN(0APnyH;uW zb^RCk99e4U@3kI(Ap@W5!5(p(BGYc+ zIDGj(RHOrMXjwnG#+;$pZlckQiG}&*G&g}7drVk1}zB|CL{B(S?eM@@vX_U z=zX>Y!D!~ZbDGAdyp<~}7NGUX)l{ZO= zqA%ahG$T&F#fs5PA!C+mX7I+_pgBRiTxA))TKQ3ws)f*WZ~X97paSrnTg3q%>;?+j#Mhtn35ET=o%`#s(+p8KyB1k78B!!a6qV^&#>^5P z4JotRG;@BFZ*+iRHkjdf(b;225{NBr#IRg&-KhmFcTl9ItTP{wVCCO6HkJ!D zX2iYn%?m9zBi8zP#H!jMB>aA$RyQ~EIytJ&M1+}MF}0UzE>{xI)ss(DB{QfmLY2TP zvdvXhh1i$snG$1;)rQ*eKxJoUaV97ie5!SH_l6PAGZpCsN{ZTOs1kp8LN2(b2aXQZ1Wl)|`@^MV{>W=>qx9QIWVCJpC$99GFSBY`y&z_A@Ykr$hL zd{|fldKdI`x^Tqv{+itj&fr`+DXJ2I7;7hxK45gl6Bh3kA*OPG#F(8M(@;7^PF{-V zDUHIx(G+j?HQb@?s3!lA)rlKc%Jkrj;;x0`y3ModG#sr_SWX4z_0YPqK^qVmFRtm$ z@WNaBZNr287ZMiwest=&1UMcD{`2+=hUzmv-T2gC(H_rTW6MvEE0u>IM!NvO*3XXl zph;`4IR8aK+$KY<_q!JY_`jy|78<8p%k>Z1yW}fRtfy;@upyC zNJ56F;WSla9ccM4{{D!Tq_YPb9b-rdYAq`RpqHA=iNi!HN>VRWY8Oh14=9e+_}w!U zLvhiUsiCzg_>^Md;7~9y$kG{6&&JI-MXKn~yV=<>O*)2%YZPEfG!^A!XIBaq4BCMj zrUZXUCRrp|B@a1z29hc?lSydEbceBG&zBP4+P5Z>Dv-;-f1w{LfaW&V@oH7Ul6@Px zr@SOq@Vs-{^>TwAp=l8K!KD}$StwM{jSZ~^R1qvOOAx23`(6+5kYO_ZhFebhZ}(XT~mbW-!;=N3*nuAbtLGG%$E5qw(WR+>b0XNWAx_lcg68$`#5 zBFi#AD)brfq%7oT0EN4=oDsIpWaI-y>J>>0(pZc1{8r!HQ4jr}HtJ^ax@nL0gLZYLRI)7+ zN_%PZJ%{D{(o>-?J>hdInua_MTg>+$+xWpK^)d93`T~5anRTBfl-Ud89hc#a#7yOD zLTecvj7}e(l6^Tz8S$^}-}tuRqlS>VYeZ#=f)B&a*=?1$W9wz(=;WMBC~dEZa{Z5y zIo$3|90S~0iI2yEL$cxF!eYV0pXTy5A{v?Xe*PIGy83#-eug{CYxx2(o|!#a|M)9> zo)cpgn(tk?lifa2HRTUU17@htkQOZ8%!b2I5TOQz05cTxgR*ZB(`uUt5up=(F=HOG zCczO91|A<;tK&j}F-Kq6WNmXX@`ann0>fU5pD;Lw>8M5A_<8o(Q7d$*5W!GwT+En9 zF;GIl^+n$g&l8I%he;l3N@n#h>y|7NH3qMY!b5lN~Qj=ZJYJ3vS9j0 zL`WfB^+ED%tv)yS-toDD5dFLs<<~JwN@ZysG+#`plR`749WuYm_2#T0v{QoF zLnm*Byz{2D@tRor>l{9x051)0_Z&{$+>oH|N#ZK!?`7)1snhLKsZz`gP1M))<7iD| znW$t)EoW3%g4dU2R5Z^8<iGHRcGDr=>d66GC?8 zxZvHr@|fF#rJN(OO?*+J#rgSd-OZOYXLj;qIMf#Ra~-*yZ|W1-xN#>3Sq=w$>e*hf z*;ahwA#}{bf*;rMyQZYCc-@a(m&Olg%QD$?*3jLz3T7)eUGx{0u}@#@amV)N7rDr+ z7Wfg?VGY`& z9dC?uz#AVQpR$fl1;EW(I1pR>0*8?A+qV=fL#)1?-6t8fG29ljrVU0qoI&v$GD3Y>yh%8F$e#%Rd@*uqEBu-k$Dct83!Xj! zl(Kz+OToc_ZiM448USX4^Okj`u)GZmYh&Me6M1-4R|PxljKJ@BZUuq3n7F`XW|*~L zU&btZg~AdOPFkqC8T9WbUJjaksjly%_W|rF3O542SId29quyS?>IO@&d~{{Ck`nT2 z78H1=nWN)#5f*p}OCSe@SQ{J#e0JP|#TD8vmD6{WoyKr0j5fi$2iJlQ2Vr#ehiQO# zC|{~*W1;*Xg+KNBN_SCX0k`|F*RK_jXFwjiADKuf(ZV6g*SC~SO~t9tg{O%|$_lU3 zmv!Vxhh7~k(<{3sAk26&44HE^5b9O?)c};Z)UwjLyy&t$br>^}3OJ!y&t@;x7d>D7 zG8$6yeH!cQ^dCCJ3Z0^n4MGz*^sb@9F13D8iLU2rR3YjQVzx)r#-}E|Kp&jHZeah8 zORsbfAzQJRD;nFPEvkeb7HeAl#ff-41>1N;)b%Qr`Ja^)$v2+C40|++zF^N-!kI*( z?4wgjRax9VlN~gi@%m$13C$keHhi>IV;2f`0UXQ6E)-QY0vwg%F8^B_9`*SGIGt;M zUG+w^F`NmpbC()2dIsEHeQco9?W$b7J(8Ax5u;BfDW5xW|AfoomYOwkAA$wtif(v% zTuMDenCbTH;86unfF0~)Ek9LycAvb*R}~wH=Tmm=ZL_Y_m$glhmjdkobUwD$kpR@_L@U6h9EybmVqY2sW}=<#}B89qEuAPq46N}pygh0zF$T|?JPwVjo`gf zdMtSM;EY6D%CD7tH>=_W!yun!Et(gt&q|SAxaL(Xr$yN{Ypgykf73!r^ghAgGx8p^ z#P>Y&`!t!M3AZofAC0_wJWErz<1u%J7Shqz-Wi%soB5M;UzePhaZW}RjHkBQ9%w|a z)*is+CL^RKw&_cz9>#cxQ1~Ku{M0uY8^=aoBo79Arpvd=zrq`5SwEPHs@$pJo(k0= zk?(xG(Cgx#CHPT zH)`PHZTZtt0-yeLpb?{ojn;olaaHabwn6I1XcH8zlX-|Ja)a0RL8_0u)MCj!&Pp`iY5wgr1mCF~KLY-wKlA3>yr5RTmP4?%!*O(F zjb+(}jGF0c{|oaQrCquRJib~}l2*DiaZ%J92}aykT_N|2m0(F-B26)a3BOHaosZSzWfU>_gIv<7kODP)50m*(5VaR&00Xk zEt{3K`6_awx{R%@ZAK-8RIaKZ)!|;@>zWf#3^OqiFLIZYxS|IAky|5K>V8Zmuk(!5 z>-Bl^_f6eZcIaWzC$h13;@jiRmp^c`Fmh*_E2s3+y?(+cT`4U+MB#Z^v$)aT1!(l7 zMND^f9|+C8J_kcXx6f;MqffBUzJ_+{7 zV!lH*%EA;59E`!=+lEl-jC?18Z-)K+0bG&_&coGU!-HkZu>0mJL=#n32%^2cU`1k4u_X`1pC)2 zHtuhp2}$sy%ZB0RH`|wCxz*DPGMm!c%+mV=v!*=rLhn^JqSZco2`1{3p3H~TzUHyd zF1|#-^Evmd66>56z0W?P)}BW)(Eiu31E4>p;}}y5ZMQ6(nP&_3#VL2sbL`DC!v(&$ z8SPtgCy0xaYc}sP@9ARHqYd%01~YJDB$*~PL1k^nZwE6^2||KfD#il6! z3~WW1>Ale!(hC}t1jtHDYYa>t&sj2izVDZ?EW*R=fV2<{5ybljZ4*b8{|3)GVyxDv zqw($R?qZj}rPlaJxY6(IKCfgyQ~)f?J9ob7rOc-jh7bW5G9vjc zc_^d_xKc@b)7CA&nolB$hx2S_w17>{V!l1aN>$L}BH}8&yAbfja~ti)y39<^1_J$v zz5(Ps{^azf<-l&&iyM9Pg#sd->d7;m4t`q@*&+1mx3Ki)YUYYr6ADRApvX-sNZ!{? zkeS0XM8bG$Ak`VJzXbn_C>$STwVJ=fotrC7xv>yLU5rsS7Y#hj7*unbmjH3DfF~-2nK$>%&7S! zGkCvP2u1jR-1Ng;Kl~=b2z{8XdOB(OK&^P)y?)~UL~oe{>@+?Y5&4}yK8*@}^kmdu zK|W0;=ZVIIQZ)!5Rj*J2Z%#iWk|)$`SmW(qc$xL?!9MapmRp6Wg5Wj}1aDUzh7zqU zs1L(d*=tW&-EYB$g+>$aPushvN(P&eDIu;Ix>HF+RYS2YlTsYGW|d2Cd_FIEc|*SO z{>ago6f>XOpv08v_?q`s>b2LW$E!MBi-H2G{}g-T7gQ%@_8eo@nvuUDseYe5b^Zz5;3yTgVv;n#mY^}|?v@5s;iNaLis?|k{4 z5n}2p)cf_YLrrfdLX;H zYkdFhEKcZ_1FcY0Ql+$3qZxGNOdU_{xtl9`*^;z&M1#k6YJaic?822v|LflFCP}Wa z+bzTZ&v=yU{XN&*{R9e!E7DKkGBUtK|2hFGVoP|?NEP2;vmOy0UsWjuT?|{7cD_WA zsLU3Wbj-VSa{!ZMq#$S5iuG(gLxuG+BTpED+BA}#Vr)JD}$Gehl1x0uEbR>ZQ(3`4teagI7gzjPVn@0RXB_fmoo+E{^yC7I|`%yX+bk<6-o0 z+C+F+WhcBc*9&4xn2Qn>)IJF1H)dwspH=`*u-?-10d>kk(@U&MqHOMdIP~(I1;zM$ z#Jc)@gf!hy0lqTueZLA138i#hHZgOHDst>2faj&t?t|w^<&dhJX;)s-V4s&_^p79? z^(H#t&QqGmVNEIaXVJ*8+&DhP(BCL77xgdS5H+?+Qhyoe)Azg`8N1%KC!{AtRZc5p z3+jqBSwY}18$`4!ww81N}9D7frbT^-seJ6=xet0SMLuBGpdAanuVOEFH6mb zJTSay>~{*|UY7MBqlL3_xcyu6ha~d|{$^6psh(D|8M&w}6+Q2ks>gRBcam>aD?Rfh zk!{iGE=qAzRHew+upTBX>rkPkdnVU<3+jEQ*Y_r?rw#?izlCH+Bwr!xu9NQ6sJ_m@ zTE^`agYs=JPaR8nl!VinOTVKqKyZ7_$}#5PMBbiLQ%Q!-JXqZS=mfW%BbCsrHU znkuz;s)TyIwQ=#z0c@zVEiAf~aK}^>%Mwi>&)VG>E03 zkF?(bT9aUKd^lnzqCFkTmWWOq5!~qSrHCF0rR-?l<~Wa*o*1lO4t4eX6L}QE^VELo zSlJoO@^K7@h%9FFOm4d&)(gIBMApXmu8j(7>$}}XJ32LRJ$vgo$8{WB6d$cH0qWzO zLmLPLW0>Q+deGp|#$=`Bjty?K-*Fg>OrqbzvFykH4w@xQ+u5o<|El;S7Rdvdi)|wN zdF&ZwFwhf)Rvbgqb#b>!ewD}SOvKiUJZ&-yA$l>i`@(={$uhOO3qJgN`&XB36Em8S z@{fiGs)W}5|1YT6QiU89!L&h#8b<*i zUv+V3TB-aeobDRH3)8 zA5S15QNW?+?E&5V&EQV^>~3H1U;-ifeRBl$AoX&TsE)-^bTo<+DuV%(xCqlnF3Zq* zEC{C85UNG=J1h)31pmW`;*RnSK2K}-=E9z#RaR*QL40K!z9-e+B z{)h%p2t660j+v^v6&77VWkDCyK&2BGkilvSBly&dx?}jUZ%F%8cy-P;NLgstZepSx z<8?o;nL6$ViX$FXta%D;(?Sa{OEIEAP@GKw7R~;}B+g8vD|S_SL*AN{?=|)H*^Q40 zBW1b=(mZ~FIU68Y7f6!E+<{hPim~<^Y1^SF@iWmk*_`$0Gl zo9k%*57?9(8{yG6?<-P6e=Jr156cRh392ZX?VfI5Ap-{P-OZ0H8lN35Zo#LSj_r|7 zLjR{_Q?2LK(!aD`7!spP57-)2k?!JIUWM ze+KQZMbPv(ljgpESY8Qb$sCQjqvXC^=51kmT>QR_M+g+fz6h)R!3aaQ@ry1+Yg=y*)lBG$8Ql4Ho~Nx49Dux&)b$e!z|F zI=;Qc_w+KgDD?Jz@&ZD$khPb!ttxo>dLa<|%9-s>f3oN%$?XNc1vbkHdLJEfW(a~- zKU2KNlqW zGOA}04QEJ*_OGY}rK6@yf7T!mB5KYUs<0X?)n-L;(DX4;`E7a;zaIeBoIw-AioC&) zrH{KtdKk{OhgU-n{f;FH8c_oKE0hi})HFJ^*Mo;MtVd!O+1P-wf*z)F1}ZGbcTL!f ztTHdz82Da7LId*URY=15!q?_5ksHty)(>f<5Em#=?UBT98Uc343XynS>_Mot`X_o`kM&Nh@aE2_!mxwol2FLZ{`y zj2z6k^Q`88T?7D`1(zVrK7NY6oNZ1HaQ}I6MoPtVr9ho_D*%s_=xRlj)#XEUAOVg8 z#&S=4MtIg|D!*YgHH?)~I0c#wjp99DkMG5k0%XFwB45Sd$<`4hZo+A)+bTYTeeCOJnB$iOYK05LD{dYELHsV*8XtI)WL<)QXQE7G3@@NPhzH+6`%4Gr}Jse z3n}5wQ2vnvx}1|JV;c#2rwk&`d?C={g?%;tN%z16L|C)SuRj45D!z3!DSt#!PMVt$ zo{AXd^hR~cEZsMKM9Xop8Jcsrik8cdZ<9VDWv)&+TRI-_Ya7a7-AQzUiZv3|XHt$X zyD1|$Q$)=C3zeD2ySDAJcaY~#6LMZi^b%&<8vBr69Z++cE;_oyPJi5@e^E~^L`3x` zuAkPG)+JXg(Y0o>(@(1BSmuprlPRVE^t)-pgc4%B4(2b0yG#%djfq2 zEVtQs_+-_1Un&)nevAvHR(>G@ob1Iwd5a@xY;q7v)5tp6PH8OM1Mi4@F+0X|j1gr* zHa}T><&&=rl~RJv9V$Vd7{las)>;kDtiIWcg+HXjoolOJf7>kegSXw`kJUL!lEY>< zI{^VQAG5uqhlDiQS7HV7_r`@aIC4nbq|TE|xY##X?HKs{9s%z*bg3uCYEF+P+^^>$ zgcc^Rx~J0a9SMA|l4cSQ+fC`*445L!`s;-SBSs4FY}KVGG4IFP^_IR-%Vi3b zxYX{6-d`^AfZ?oYLfrA8XqL`EeGq1?SrTlG-I|139qvT6(i%StJfWd4agGmeR<_ta zJN9v9Eu$3Q{5Z+k(iP4M?0Kv8->7&w#ov=r28=piArDbHBm4I!&cx=NR@?V0Cc+1c zjYf+ANmo<(BiIAl8aE2Owk^gz8{hx)WaQO{h%k`IDUiNTgdA>g|9Hy(!)36`+`@wX zi>>Ffw%USQzR__%;0G_Pwhe94FQMR@_o>2zC&H8Wo9}4J9;(VTV_aXptg^sS{`+45 z5>E1A^jdL|qRVJ(qYvw?4GeV>v*;|~6oP+`co*xgIX7X?6r+t7z@@ou`~9_>=((FH ze7dmwc}WQOyji{~!nAPNIg|L+7J-Ks23^l>c1zYtqF;1clUpQQVNZ&0ctc($1F6~I zaA|FN@MY{Gb-yC)nTKLxiE0By`!5*k{)PF_wN_Nn5BedVGQo^eIHuEQ|6+Bm9G527 z8}ACsW(Vw3CDBO55vk9S3|>Sc+$gieYDo%*G>9#5r5D;eo2qjCcIcUk}B$SzB zWqi)o{6F8LLeTgM%Hq(AZ@L~gqC-ML$P1p=Z?+VppW3{SUkan_$(HbRe#}gU=8FdN zxTTXG-}tgnMZchxL`Q7& z!xM-=Za@B)wqCrga%+8fQeH|-0=^y4s(r++hNCtnQ<7vkMS=v()@pX;J!$?VsZl{5 z@LX2&CMF}#4jvq21-^_3{VWJo3oXWV5O~KDd|!1?d1ssxk>lxl)h4R8+De(VP*@ZU zE{E2unv>TgQVaJS@flWoT9c;Y2KOg(ESpI7$q=iP5vE&oa#x|+Y|umTpki~Ge%M)Xwe1*2TD zpW@@+(cR9ec-ns{Yn~4U=e?0A*slj5ztW@2J)(bc5Q_FqMNRsd6LQGq{M}g>@N9&f?+SKAka*sv(q$5Qf&RpRECa-Qbp%Iu!Ej;|OFX5mVGst=mA# zQ5_dDoB_p?R!&BY>${#d4@>wL9^&P*Q?X-f`WYN-^6Xp^AJ=)MF<2cb(%r9|$ydZ= zGoW_LbFpo@^MTK+grmX#hqrf(uB_YEMk}h=tk_0X>{P6ZZQHKcc2cobv2AO`wryK? zz31$`zrDY6>b>{ZZEgNoYqh!N9CM7$r;qvcNJ&r=W#;s?NOI~?D@(q)IZKoHnn-~C zRJo(Y-P~T0nQ37=DYKOGt_%aQwxfzJyz$CG7fSVEXG~_kg<&X}r2UL<-J)1JM+YL_ zo8s0K!)fz%yk?m#%XZIO$^3pQBeN|LqaMx#TfM%zBIV8ALv*_Kk2~(rIsAsB_7&E= zunO}sT)VsbhHXbRDmN?>T6BMB7cS|n;{DlI!Y21++u!*xwT$t4JhI*VAcDy35yQ4Y zOZ#e~3Pm0bcG&~d z@Dci=NjH8`xfanZ70ez7b=q~$L+YoY1Woq_|DwTcaGX`1C!`3Yr-90LtpZ!wz*RQJ zxdMa-rALQN2+8SjhLY*8twi{XO52uvaG7)7blJnobWaENvrF{99o;CJk((Iw$Dvz( zh{mEB^jGIaI_jYXH_E##1tW>WE@dh+ppu$ZbAqrYzR!W z4XfbBaozm^5-sr6KMzSVt;r50Oo`CDGfdV8&Qa?n#9Oxq3RK0eX+yxQ&*zjfntmxf&0K%P%Kd`pXfHXsr(S?;ejXG4P% znFg+}qQF8u!FJ_Fqkb|nHOqzv{mps)L&9*B3ba@Qm(L5AE;ne8>8Ps#e$j?G6Lub! z_4*V&YbU;@2C3Vb&8FY{*`kqzmJuPP_=?>-4s50Ecl!}8wJM)0SgLvH<120cN!C|K z#)|!C2}M@tBHw|}Emz0eWhs;`V@Eg%nN3Y!g9nIMR>RM@WNLAjK7P7QE>CF6;$@{X zq1PJp%=xsCgq#zqCbgZik)`Gw)Gm&DB8E!4ikkE3gdKlIsJnW;55k^hw$oFl_fZ#~ zpn5yIBUMUMTrn#u@Z)9!>$cRnZMm)B*R&D~Z?Hw0JIIs7r)rbi!dr?b-qD()^$!$g zs!qQ{-ApZs;E^WBeIkO$?r zVIJ^3;ObXxv%Ezs8wXg{_j7MOuVe44J`xxG=LoehILuMtTamMD{X(0>PPu*?+I+8D zh)U@qUIkHNU%@46d~%9b_Fm^M>ywNHH^@X8mkIlhy*NL9$g*Wl zJ9VXg4JXm>(v4ix1UzvKDCVWlpO?@HdUI`06b_8^L~yu0!GnZK`*w`qdHPa4qL!0h z@J4^7DEK6p%YXfS=9d5-{RlzUz&a1z4G{9~EaAm6>JB6Eq7E!lBG|~U?~^G_lMpBt zjZ4Dcm;6j56l%0MBtS9!LsAbh-*CTYMcv<6dJnm$sUs(p`UiaxrbpZ{1C`8vnscx% zQEf63qJ&s7rE!#V%S)^6;~Cr0p5mQWXt>A<+(@V8J>7D|R$t~QkTr~u~P zxfE02)=oZ%9wbu4c}cCjUlN5mjDj)5GhHJAsbK(uq+be8zGsW}ZSo1xkFSb|aEkD5U+Ep3e zM74R18FV5S{WYpDm|tL&B;@6%KR0jj0Ls_qC{Vh&)H#ok>twIsR0;hH7)d^LKV zoBIgB*%%}cF7o(XpQp*H8C>xZ9A5~JBs!EvBciPomWa$^nbW?NV{JJW+Jj(ZvgMq4 zKtv^^8+5LfYvRNP`^g$Zw;D3Hex{iZm z6kEM*2rqU>B5t`rGg+E^6SifXmm4edBPBJmCF1j{FN>+to=sm0zB@IzhWV|_f{C|u zKVVUGek&);6&{Wkv#Z!V zfgvyrt?soNzvzA9%=;YcEyPkSc9E^NlbDFx*!L!V>H^zI9;16Si<2M)8SiJtJ;G%F z%$Q3#c8{R$x9Ll;&1kjHs$e^DWza#4P1Gtw4zhFtRA$#9ox)h(H1$VL+HW`3BtCO; zG2xj^5GeRd01)(XAAc~OUKdhM%C_0+Gt4p1C2NWqJuJ^H_8|K2!#2H~WHH(Zb&@4Z zj3pe@sZuXglPY>ewB#?>oQi$Z?DH_|jWfB>MU=R=_Gd7qGe+B;j0`KwniTyAfHx=i z8D8)KOw&7}ykI4K^G>B!Us7ohgU7+!{X%)SY-*yPcN$K-_Eq{k{#{slsLKO~wf&wE zlHoCv+2Kpv4uS%ePVVyX;o^V14SK-`9`JxHEjs@tzW+qqbq}5UalmDs;LL1 zW87A%Bc+~qk-(h9pcD0Ub3h}nHM9!=Nc4x6YcwJNnLw0lpCGbAf9PzZ#Fp=BK{+mc zydHFh6uLMOM$~#It-c|3)(cd{=(AyVMwXW0r@vnm%H5+ZP`Vw;oh~+OA&+dA2mq{z zIYz3t8KI28I;$(bjYpc$Y(S}?2ZY24ya0V_SnEXxPB;dgJn5d2uv-G#NN~U-GOL(T z@hmFDqUlUPndep@=H(DcbP;p^UI6i^slTPL7d;lw{h~pM9yBsv%U97s*ZP;ZkHRc3 zbvp9LQKkt>0xm9>b43MWulw4p;%k%*u5Dc{fV9WhkYeBn{Iu$B?I4uki{{YSUcK#A zn=JjZa3f`%AO--qt7VJX(wXpel8Gx1NWY^&1;0bFN60Yedp)f#T^}i`7y^-?=#e-z zCk$G6s@|V<{MsB+mx7cP3#KE9e#|kLo(@_Fzj8?N4Xhp){p5i8ozQ}y;dC(|-za($ zEL|H3HNywpQ9sMvW)O#K9Jmwnjd|bp*d28E@P*)mS$*QP`x~{Xe*h`E@wEUF^NTL8a?Q)#c{V)zhkL$%H*wN4jf(G z#3sl2*CUn-3B`1-x=c5ky!#<;brdKdXZ-R<^teR5wUX>-<^rVeJ?v=c{KVQy5VbvY z#N>VG>rEa#YCpOiZodv9W52p~+okJ7MOcx!@85xcceL9lg4}99=Ih!+)T@uHHEKMZ&#;N(l9##-No4{r-;W*4cTeIHx z+jw%pz75+nlpF+;;7ka|Q^?()xXO0QayEn8r=>v}ccl|ECuK&qFA#)_1MeAYEu>7< zlgWNYU#U&cF*;VNk+@rNL#46htJO2yycWF}28N&tsqi7UP7ng)mAr^ZvlzZ2SF^12 z`-TWj+{xqM{nXD6{9*{E7=cDqgce3h+GIFLNHoJw`R%RoeR_=BKk2!HDwyr%e@16j zT@D@$N{D?Ao{=V~*SsCx-ef-KZlNSx631!F#UkCp`a%bg>XetUWpxO1g+LFDFW!~T z)zNderG)uyJJoou&g=;A3-!W@tci&bPen1L>5Jzc4FrdFT+q`bQLU5XSTqRhx;1My zzv{3}ndeF2osp#3+HxgQjW{XLj($ILc*wc;;L@T8SIE!`4Re??pYJ2|qzw@5k57gG zNaN=*obi&{#@5&(P!E0bg-ich*oRB&9IwumA3b|wV%hJ%T=N6DvgEb%O7Wo5ky=z2AHQSp9V z8weDYI!$|ijB`n?WtYz6?hbr-t>uYGMGc9+hFuZan8=CXta~e@AX+t;_E++Ef=w_y zcDG9`Hx3$-#Gj8Z>_l_!a$_}VjFA%V7{+3XC?~qCo<}2jhDa>+<+K!#D^Td22}+K> zB>vi(v%kW*Gs#)6xw({_qdcjnwm?I*OX!7wJcKY@$!Gi+qBk|?CYSxJabXJ30>(iz zHlEgQjFqs)8hV|5-GGvP5K{Smi=5Qg#aO}HH%T^z*t!INV?4$xWLf1qN6e{J>VQr} z=r8fe`(|C^YmR3#Z&fNC{EDRO!V4yo}V}z+BBjp|-azpKdX6x2*+v-p(aM z#D_(!VK9xzlml@stK@jrXC<=U%OC~sWRLM)cx+TiN}4bCProQ2cfV8og6$`x=qDWF zPZ9>xoE}ogy|h?M(>=Bd72ojvO&?_?3LION;*%TVO2i=%DP+!5#*- z?jf_e4AC54TU3?kH73#T2-@WvM*&`UIxV$+%QC-;bLj9$#*VzJA0$-!n2}T@`CVGx4C}~*Kco+=jI{FrEE0Cup8|mv! zA8fn3yR8+KZHcx%mrOiW3@(Rs^U^mQ!wF(}o(^Z1C!J6xbGTE7xh8g>A)h%3eQYtn z9+_})imR@musfKeoN692vQ&Pevb!}IZ`py16{f;VhZZz~UW4whj#{SY1{(kb^Zx!n z)C65GkRV%`0bnBlK#wTzHFAA}8oo)zgic?*&~z9Y8`(vSXGUbYQS;abFO@)95t>k+ z$qjcWSOqbZ9*y~KT^(~lGAlQB$cp9@oy2zIhL;BNxbKC5O6=}rd7Mj1vG;!J~=u6-$dR3a@c_^TUU0g6qE+))uWzM*hp7!gUxbLSBKYlB9rdsV1f-1Q%KB!Ksh*_*Ry4< zyQ{ClQSs6!0{VEZ#weUtwW`bOvkwkl;kRgz!V)Ko^KtonR*`0Nnh58r zxpJk{yyj@C+3K7^fx9F2cO(NcA4=Hqc(5C>6uCGfZ_(Tojm3CE-NkR$eR&&0e3|Y) zh%(qmFeR$_YO@J`@sYgHw7TP5c6yr#dJpF3=akr@eR zXr~OtPIwqS)fuTIc&To?A3#%z@-%t~Yur6r;9IZ-+IIaOaE{v7iy8q2?xH5u-a?(1 zkq>|aU#HIc7yD9NMT?jwD@fs;pLZkXiKH3q1-aP`a;_!?L{D+A+gl2h9|l5 zA&ZhKu_R1fDz9K~M!hE9v6#d-05F+XIVTJ)O=`V7?lM2o77_KmqU1#UPGv8Smx=31 zf5c%Nrp<0G+Hf6j^>v*F6;Vc6?VnZ^uMh2=@l&<(b0UPo&Vwfc`qcBM>X(SF&7!c) z2gQ8DXI}~pFMQi;45E{Ek8-V~l+f__7-ioJN+&zY4th^Fc!|ATJp)9FU59(TJE@|(N*XnN;_v_!%aC;t4*wbtS8KBXF~GyUPS zWsSG^L5UdQJPh&Nb#^iC}Bh7LR2*Gv@)J~&%=F7PjiXZb?jynezp*4>EpNHoTouHIB0Hfl< z%kP#tvxO}a&0gwj(x16cf>AZS&!)3MEvlE%Xf-+{g5ZuR6qfJi&jRDBEHXrzGwX1m z_P+Vb!gHlsM&_z;w`^`oK;ttD{gzI%#{Zo{{aPs|CTp{b!RR4t5~)fzizqo@N~2HWSJcJ$&o@`j>)bT}hBqW4^-5KD zuaRGrR$?X-6$L68o#INKW?Pv3UQDLonqNqb?+ukzV-}D?OL&hGA(M~-XIIKL$n)+aj~$Z1RQ7c zy4GiI%p<9w_KLu>)sw#F{XDkq`%-V4>hW_2uZL5lYW0>WaM+77znu@Q zVl&M`A?IjbNp7<7`0m^|@?pyho<&c35@MYjdGER~mXdyv!)x?44X7M!YHO8MOl=}B z(`W2(KFq{Ll@wZK!jx*8N7jl6d`3td#&YMW96xkzc^1lzir0P{xulZM+RJc9DcCr? zLTNKg=sSX3`bGjde9PJ#=W!cA`n%*S>?(laXwl9LWkrkg!6KJUmCGy(_POIE+y+Qfx`>$8# zlGE~-q-z;UWxNY!)2fh#gSz#a(wyipK@X++#Ang|EEHFE(KZqCSMKbrot1tm?6mzU#YGpl@Q|K6qz{LN)yDnwFxof61`b~7ATJcNvlOP-I zl)=JLr1_l^KHo6!=)v(*r$@hAJAO$edquh1S(g*|flbGI1;4|A} z+4@)Z#woW?dTO(!Z>dCJcLVtE+C`qyJzi?9R-M|~uuh|_fKC410#AZh;=IXZf+?Jq zFVHWf)jL=z?0ONIh_HKN$3$9=jsBT5sD@|L!q0455$|U_E@J~MVk_IEn(>z|&0kLf z%2ey6gKlxiXIhRn`T|JB=WsGjYh`qk;jnqcUavUByp(Jf&a(|-B9WiOWpB7r9@KOg1vL}En%qVV|6>TgMp9v6He zQj#iU{sbZ-A`}b^V~~i+A*7*@2i3*O>t%&KZ2yjE9JcW?S43QPU8ha4L;Xh`5`9QM&W2#InBETYKT@9v z7HO%dsL1_vEUPE-0!OUB(Gn1<3KR_PNRXL)FFA=4a((MDjEan`pCh+R zf^s5xzU~V}tuc-Did{fmL01baR=f+~<bws0R7c;m28 z?g#^Mlk1%TvE`1VSyqO?c_WTy=)p)Rb@fYgiM4>NkE`sM46G!yFJ>@JBHAHSc67R% z<5E=Rb@3KD0Zswft^RST0I`P??5$7`dwzM1@bz~-na)+cZfYU4C)JhPk@UA+mCmN- z_Cc8uPZl>=uiB?)h$`8^MNyIv&|6UW?t#AVW6@c&FVupyI}E^42X$ZYdsOog1fUmB8VymyWhpG7K@%XCm5Xwdy=;`GG|xnDN51Zx=D;v}xsiOH zDqS=t&bx;IZ8%ZAJDB4#cWqv#D2MdyvFi%tQ(rgdi7VAvefxzvASF7cl+=KpnOQXq zB_E4p)$I|0uaFIyC&enVSzxpijW5KigB}uA$1r3fkSGoR;FUEew%L(aiT;rfU!&g| zChZoLKw1uV*5fgdWE-B_|2oY*t`^+9&*?q>R9lMW(|;0!Ik?SE3iLf-PzcGr$s z3lsebkqyXa!kvUid2b>3;|m;+TyVd@^pGGp{D{`Ml)oZrbS-+pRHVq!H|635a>jsM z(k`UI!y71t9HEi{xs>8h1*{79nUnz-Ga!CniOD1r3eOr(qNA7w5QuRxJbGCzqUR&3 zg>K3A;r4TD5ihjfW_gc22FKt|88kZD7i!9_8@;}?#d&KEF3SKWteC=~&;@Y!t1fI$ z5hUie2Ee~cK4RG<8HJC@S&=+iB*vYH=0t&5i!@mRITtYrJeAH>bvqj~2gBr3N-k}7 zf-EqxwSFVcV_de!aA0o<#b~(Dn6iz_q=O~54!q%}NxIpW_Hy7)eZCayy&D?`F|xF( zy%|v|e3~)eIMtkr!l10x&uHYF-N<0}K62frCNS!u9~w{|gua3F!#^H~vaT>)1&^Lt|<~FoI^kCIgsqZY~#z)m6G_ zDc`eVcFRaoP2+$)_V=l^2jxh=tmIiStSHyjZs!~Ma#VaNU_9c|M7>S7ns$zXJF->A ze0ZJb)#UO%nY>8U3X;r9RJ(p+)40XtdoOrL$c;uId2pD>NOB$mR~>bT@K>|ke4W05 zf0-oz>PrT_PgP;ogwN@KG_e@mDN}{qgX{FB-{*wD{#3`boTz`-Y(xBQEcKAA}=Oxg>0b>Pv;g#p)f#Pubvi*BXvsSG@&19*62fyxjb9-m^MS>*@Rb6OS5;qC~`# zs5pycd^j5eKEAu2h2yhVK9@C6=7VKl&b7+!pEf&X$fV!Onf0|8KF!(c?KeX6Pez7Xn zbG+BY6s&?^EsWXcx6{vLt3f*%zPCCL;QnzXd*mX;JoB&dqJc(rD|g-4I`kDC0pj5d zxJavCQ?BqSFp`^O&LxTb!+$6R8qNC0W9e`sbw{GYP~e?!Z(5^tRBg$ThzF`xZYtaN z=C9Wro;0`ojPgRB;q_GMN%{zSzWK221QnmmI<_#mEiG)U3o#>mDvXj06VXhhgKW!i zeBX{>$UA5-Zzp3p5xI$SMCfu~J7FH98lf6=jXoV`ZL2WlqUO;lFIC=!m)FTddP})S z^t!6K9Z#j;OMg?LniQVDgus9{BFRz+?w~b`PdJ(no_-o9Fn~DXJ6PF2PIC9!<>>5m z%vyc$4K9Tz+m(o-SyRR|DO@{5j1uJREZ^poY=j@oB!ERzEE910VHshF%R^g;taMD> zqWv1)jK4}MpBnfmX)lqg<^_k(BLWjumPB^)a3mFm&8cz%A?54`ZjK28RUC^K1gMJY zzdl-JDd26|sTGja@~F}I(cr=AEjae3)gdI*qzqBKric^S6J&Zux^TDr6dugCu-@`> zU5*2^6>2r4)Jl8>!J?qSYR*}pU-#f*LQNG6kJ~a_qvd0*o$8@Dsh{xO9Ld#?xqZ4nsqPKx67Z$vfL-ccT;AZt-3)s7SYXsc$Mv&s=@YE2>A}N5+$p zp7u)FX(_-}Mc`4w#P1I5%#hYKobCB?Ur~~Nzi7g4g_CMh*^lw+?*v)qM3=n1dVg$b z;FNG?r`Ozqt)2vM${O9v_>nY?`OAT-r$zx2+~zC15#twY0n!_W?*RMP3L)%ER8XF}7C z>v6Ygmf`dZ)ujN}g<(FR)*KN7e@?9>vRSl8-LYDSZT~nG z?PbA>@G7nIYxT^`b4)9_a)VW7MXBYJ$~8~l-q4U(^I5~n=-8)w0wYvQ2R7?fN}Kk( zMB!u|WX}rAJo+1+z`YT0RfXW4-Cpp%Jo>B<)0cjFMwb2?i3R^Gs2!8KKywJW>|7#C zqGYj82cP#pTjy??oIjdH7?ksKl70tuO80qx>rLob?exW5Q5kF<+gAznIZ@#?9w~^2 zNW`Qc$-QBlFO|o>iTiIc`vg7f1v)8KqM-U2y(rSC%CG>ho&`tu!fEQe z?{akIeEno7?w~*rk5lzIkQ*$elew-fAOL)+#i{gkqjRH7fMH=NyTLKD$KL8os6-u@ z3mXw>tdJQLOA|aCg`~Uy#bCDfrR8@qjGC4}o2skC}Libd!7Gl6S)Bo~V|Mj4=JfN=- z4r@3}4UYn#9qB`u0>!Wz?AA_tzZOOQx1s*mt%|b1J$ie4PfR8jY5sW9Um1q4InicX zY^)p|M6K-KpZF~9ql|UuptKY{@-laC;6_|{QvuODPb)DnZ2oZ zjg|jjS4qWQv%Re?-)?6hVRXzAXd3=_$a+Hqm#b$nC@>H@FR}DfgxcTC&oLQr)s(Q5 z!vIP?{bhf==6BG$L?4^>voBmCe{*9KXf$;6V)rgJtInjy$496#a|;E5mGMlvh6b%+ zXCkbIqN2&v&9gJQ^>tpBY20X-5g#=V41Z6(>uG6M*KgmS1sGQa{(SvSB=*v0Vxir` z#B#Daxnv-hnS{K)pJC=W5`j)MAVoSs$x8&sUl3cOcT&Wjn5r5u=zjbu1mMdL|4WI+ zXosShih}gc&^|Kc5+4WpM94NdAb>@IzTar^=WvPw1?j8iAs&}Yk{s%932W(w{KDTu2L$b<*kz`q^_3!wm}V;_6pIV~J=bbx z7%PIy_t*^m!Vm?&iyNJZy;e{-s*G}+CAe~VdM^dN255wslB6IYAjkz?<~OyVR^Pst zz~|g0XV=rUb)I5f@%%IR_#cM)XV|CPuR%c{q&hW^bt5bGuxbI8&OpT)p0{2Q@HPK`*wv zKu(B;qqL`HNxuub_w-vBsoe+p@R&sW?{8Y9HA-xuA?LJG>W*JyIVhOwg@lAT-rX>_ zfsG345BmE0;yg1=O@xiUE1oaa7IFjWE~cyW1Vh8aX;}D)fK*q3!^H}iB3gN4=fkcS zP`%^s6o~6PTc<7?=K;?zPftr;NlBxDt{Dc8KmI6hcfOw-tIpe>C4TOZGd|oPlJYUA zc+9PXV5ktF$o^r+9+-k=~;4sYVN_DTJsCuETOil_G3W6(Dsv#g#YL6{bIN=WVvA-@2ebUtK}as zFxLg12iDYXS+U%amdbVbG6$lAJHo9n;ESgU#nXg!#mqJ{l6fiNj)PB78#Uo?-9g)r zS3B2#QInvcph&p-d_n?OCH?77Sn1y56;io){*LWhy~ct6vKBqI&-@%VDz%Xqtm1db&NDnIG66OB<=u>ovSsZ?7?%`Hjt|M?K>6^v4<8tbtB{ zN$4CAYjiZ5+e6oENxa@j*)Qq61?wd~F3ytcxZ8&?6)U!< zsy8GeqVCX02qte8Kn~S?b#=vRiZnnWola@B(vYy$>Y{-Qr~Nh10PpbPTDoa#vhY4S!VhkNTS=vgsjfezZfg ztj($7)FxPE*-1n~m+N-Kb^+KuF%b_EQSNOa;p3BuBExNMa!?=U`-NV(JGG6e-Zzy7jpEO80dV;)LXtgpDj|ax!*H=<9zy=3o|-c zn(yMJg2_!ydth83sjQxxPDjru_eI~v?V4Yl7mb2PbS*b_xx#cOoCPLkv--6MmSJd+ zz?;^l^Q}SniuZbm1fw~8NOzZC=nB|UbMJ0JhYbWf{0$zTTh+RG4fb9NG!IbpAJT^!O%_7Z$7Im96kwz!`h;?i6wPy=EKJY| zBokLA4LChKG`%r;ul#ssK+Pg>J0x z|D5;8(DAquUTSl#h3-o*D~yNKXIl;g=Yr!VgleVO?FRE2udc41Cl?Y2CWVWAc0!y< zn2~UwL!3nvS^7+cERtO8n-}^Q{upq{7D5$~!>$C4uepi)JX0R*b>l3qw0!d3!I&y1 zWnvO^s!P352{I0W+Ke?QEJ|*hBMt-u!x`F#w;;8?X=Hrkvrc+@aR&0gYgv`k??b7M zP2Fup^+H_hwW&?` z9B3XP+so=s1loRSY+Z#c)|ZuDTE^A(gw9e5Eas3Z>1ANP2;|2fj$~V>oGFw^0unVO zo7gp4uhGh5JrM%*uXv!wkg~TDUb`U)lHVYR)3)s3EJ9t@T?dH+^ddpNJ^tz$1RL!2 z1CyIlLbjfghT5V;du8uC1jtAE5l7J zC=%5O0Un+(vA(wQOG(CTqq>yY8k@>rG$H|2JTxxRO<=j$XrKrcq zWT2xY29k*JOSvL4S|&g$&q$~1(^|7bVQ4prNW|9(qerq< z3aF|}W05+hTwfxTgG1_ABsV-c3}Qx<+%TePecj9NJr1th6=!9e1a-);AKjT?dpWN_ zYr5p;NePSilU4A$NQP?N1(3O)%t?;`1F^4TbaXVXfqgE=W6_+j+c>Y}%mJ{)^v4)+ z))>^JhS6vwsGiYyn^}DBa4&$Qf@N&rN7J|;8;TerZIviV7E!8Zj5a@jN_NTT>ZHawaibajs3QJ#a)J;(P}Y5T4q_+ z+~{vHKiPX&z;~LO*uQW&m))MNEc6*ct+Q@olSLNo0~<|^v^br>p*E2C(tz8Y`eVV{ z7@K4nZSwtDO9!F5xRzwVgkNq6h7U_NYaKM#o30Qov`at z(iL+%=Y$q&Ck)k*ELQH{;|i5=-#)`90VBwfsopE4hS~Pn`yPzG35M^vvnb&DtdyX;h z9S&?qe5L`Clv?eY_h(CX^tv+zZ{<3zJq`Sm8N4^n9N8TMY4hcAw0D|876MKbrpfEi zP&T-FQveF)RJYz#^b#;-@3nK!o2#pYb8IS4;-lm`>ltmgJ3Pu4my2H+D{Qd2?OQTy zwGW?$mA&^K-`ooa+hbt=I`{PcHZZ~N7`Po8c797^s?-+FIiuT;OfkdY*g<%au(WuQ43rKcXwi`ib z3F7PnZ*uooCIru*E8)OsZ@5S<58N4_Mx}ze72zkJVEXxFj=$sS;uLqn6h07v^{d+f z(`xYOp!gs5=pQ(TZ;ROXy{}(5tmFFXtZ8tRDA(&f<3+$r>jTU@w10zfzDdkLt-9)X zP>wOfxO7d*G4AXW47G6(h+khBY-@pa7Z#DUi7Q;q1zye5>J<6rv~;Ayw6mmy&07CF zV$&J!J26(@y}qZzDbT1~-zLB!bf5EfyA3EdCYz>gtBz>C=TvJnFBbMr!h~{fKD$?) zAVQ%a2#fz^;9e(nfVtNC6U@mTZC~fM0@RX_)oPg(DdD31LHh}~S>7Cf0Ef-`*I&g7 zQa{XXx-v4tNlxe$B;<&|*YsUWLEga$td(hC`XHp;R%t1q{VULP@A@;;3$pL&>EO%l zt)m*Sw}Ft5kSZzTGW-av5FLq)p<#YNP|$M2?5tupnDQ5-)W1nBI*@$U(U-~szcU9B z1NG>;XGaq&q#cVIW|3f@H8AJj_tjkEMnb~QuYie66Dj)CF-`lG`%FzUh1X}n?#|ho^$6HM6I&$McEIom_duf z$(#fwUm7{`G6w3{F}iTcULHQRuVTI}CEM;7?GyxFk2!5m`)LhDcpl-^O?Z~y2&Ve)?Z$TbxTEvOl!xTM1-Hv68*~5U0{BlQbV>v!stspc;xE!`KPXCp zfi`8RT1uhOOk?S|>o+cqQb>s9qe?gZg9@HG4cFj#SCJL>J-_eaIi4jIAcpx2kQ8*kS=JDfi|8c5K| z?)!^1BUS{Z^XTK4kkN8zI(R2S#-BGqEXLk;WWq+a_8tXO6}PkTj2|P>bAq|59EDQvg@Yb`NS6Tki{UudA!;HINTthB$gFTysUpNQ6bF zITVokHz=JsqOUp$Ef{owh6zZ=vj3rnWR)%<>K|tm2*_)mfmf_f2RcP?b7#wBa;sHD zJK&wbr2V@<{ihHCN1h}ML|xG@r(p76s*)4_81#!}um1(9+5{)!k^ITT0e|;BCIUjL zZcR0ce~WE4{)IrVpj6Bek$#>2M4ywCSzojCzr}3-r9FC&8~V~i%8DHN1>FL;~*v$z<0e>Vf;DN<+dp3{I6>I|G@f7qJ1ip7Ur&QK7iQu zao$ke2^z>K1Roz?^Ub-tVHa>qe0;o4;qt`5pU0d)zIk$S;a#vIOL8apBVZ2X6fwEN z8Z;RUEC?a~o56rMKY#Zeynp+jU8p4CU*!@z=-{~wL8REo;OOXR;bLO>`l6x`uNEg0 zD4uos2=5KAw*r2D!r>8vx|%_d+V6i53tu;x>~(iq68SHPA)z7CfnB&rNQCR_>u5g}2TU&0uIj?W468~n9|1bTqwF6zp+|csA=hU7?N_Mcf|6y6d*KQzFBJpXP z@$c550NC^}z{rIg3H|2!dX?>pJ!aGoLgEWmfqOdxGASHv$q^R zd-uLDXJ^p*M?J_c0qVI*f-2dy;E(&ey9DVBP9SafkW1Kzwzf9800F!0cVOTEesQ8M zkVQgF{1@_=wE7OLNpg6-K9UjWEF@RA|IxV0sz58IRl(&{Q%|*Ef~hX#{+zmq!sC*7 zxj!RgVX2qLCHxM|!c`M#)rf&wzpQfD}zpl=JoZpgnIZ6A@N*& zfOG4^m)OM+V+45k1SXU5p-dk4UEsb#GEavIorUMH`{!e+=(<~lxDrRFu%N;eMpL5{2n?l_tBI%gpf5wV@iOX{2N-bn4)7;4>I#6v7zN(e64=%MmL_X$KkCx6pc= z**%%te%B-i=2rBbM;mDJN|qbdllXvUHkHlB8dTY}hoFH!rUxvx9mxDxI;osH?^Kcg zIfsv*pMSd3+Zz>qXJ@BCt=9M+pV&=VS-F`wr}s0ixx1fk)A>pyqscipm0xx#JOUJ4 z%$J$p64Cf;KNN-f%0p;C=aJLsP|$Zg&j&ynxSlSt;nGc&g8ggpoIs`IVrfuTo1bES zrPGFEFeFjMlNViLnZL+=juLe(IOc`KIH0-bGTP+9-y@?S0F+Q79KUe%}Ym;0Kt4XX>wGsfzK8`jCZN;aGU>I510>;{n!0 zR*=zwTW>=Wr|5PiGc4FP9P{2lKMgi52VFVQVT4(ozd8KO*81_kTY^n0P<+fpqKK|> zenB>)jV;s~-93b>hf+5d^@uPM?de(rNod8Kab#!ixvNxK$R24$#b19VfA-8M)5wq1 zz>WY_!1S)he69orVlgbLl5S-RQRtj?l5(a%GD$*00@&$2Pc)j9@8~bA3rhFg3IPtT zt{;(zI}c8j)L}vaM>|jJ<(?o0k?;M7+x;my>Of>{ZmlrmM_NCI5v*Rbtg!yBxXOlE zh~E^Qx|kk+4z4)6`BW(tg+jkZ;K6*k#_(3J=xLAut?@}9!^m1QA-1@@pFT$~K(~Z8q9qL0- ziL!Z+%%T;QiQ&~#%{BZSXC_y2{r`utw+@T)|K0}$k&qS%NeKZ-si8ZS5|NS^LP|=c zYe2d~5ReWDC5MiIp}U)*yK|@^_j&(zzt?_t_x;&j{$k*Ip1GcQo!5QtbD#UP{r&Ay zL_t#-oKnVb68bZ_G1D8Qh^V$>m&GKkGo}qt{83|v3fKD9^t6x__nbyD<9FQdtoBQW z)5}9qV=}=5M2!ZtDs0{QBX3TsV+P=AI)Df_i=kCc0GRMkh6@eOKi-gj27;T)OSKVi z90cJT>gee_c! zZV0LQO@#B!tD-d$oc9o&5c-v~o!DsA_F($4WCiOWp+3Xr{W}LalUEl5_tQBMmreydfYZCG79c z^rn}*y60qLbKql-CM}v`g=<%!MnHP7&%f^dv!G#_jKPF)*#TI+Y20vaN0D9zYar~s z0w!m#cpM#X|JeUYP9tWY8v{npj~zyE zlX%-DsB-Dfr0kT#JQGfLbRQty;`l(-y|KCR6vH~So9I_u3)1-3M3gM&hNsEnp8=;Y z3fAhKQSTxw>~qNY8_zA;jY(nYHW4%fzWx|fjU=y}Mw^1DFt$vB$qjnYcwOoH03lg_SOB z--00<$$gDOOh_2|Lw~KN|Dbm0M}~MqKNg+OUqQ0OqGLo~my6Ux^OvSKDn^hEZZa*; z@c}AeJkz~muA6%DOB^-v2DkWB3pJg_C{^YUjMp>MiarTVxOlmINp1YR-n;8zr&AAi z%Jz*L%*aZk-#On32o5+`-Qp2q97Yu~p3Zv~-O^Ic2VRxyg->T$G(VV2!6nADa-A6& z`eN+m;gp3Xy-jQuxl4zFa>Xr955~~Jk@r#Vu5+Qc$>T&HefV=+!)wN;$+!G!ZRe}x z6=EnX+HQ_b0$zy~XaD}4|2E}XOV%nX()O>6w`JwW)?a?|x2rV=u_m%uMepYg9j2_R zD#H&$mtA#*v~ty$s+yb%2zbABygz@>RS~*uMu{I~bq!QZN4=vJwFn%_w4JT-DVR+H1{Yb&IqQ2ow8!N6!kb0Z zKNV4Aa*hr%nls8|DE~nCSYw$z0bSIS~m`fA~q$;kZz;&%l4$Pzf#TL+O0L z2mc44|BoD^MIQU3c)}G!kfY8dj#QQthUH~0y}@M2I(F>wr{KDvClvGzIl~+0#B)Tm zVNdQ~vWn(>w)>2>!kcfd9968w10@FGZ`0*O)4R4cKZ+=6)t>_geZ0b8TqPI8A5oXf zyRnj!jJBC6&kiqXCJ)^z_dOo(*<=;h#{b2+OU^;$i0e2NCf8}}=ze{JrAy;Mx$~4g z(qoCE0#su|QY2=0KNxBeM9$BUM{gx-aDN$+X~mBei%4_rlQC3l(|su;qFN%{Hy7hw zo+0GDUKm!f902Cbit338-G~itttlxl*Dc|s)MMh7`|!2xmUZMnVz)o?_83ngy}b5o zpoW|l`Sa)RWX(f(`Srsl2~L-V#NG>Lq+`^~5blMS!S59Wb8i_cx4%wmeRj!~Q1&dI zEODX#P?xn_97Wh+61pWs>++nmLC)2Z+5k)Rfh=|S;tHB;o}yqpTz4;0i6bLALi;f& z2vx<3Lx7`wC~vX1Qg*@OQIFDw^L(977$)_ZLO>LFogJlgOIj8&(8V}DGDp%es`7h6 z;+_tI2T%x##>%gsy8lZJtBx8yQn#7fGs%M^uqcX3Ffjo=`>({Sv!h7QN3tz83k}ub zCB4r`NX-1H8GN8{n1pECOANjBR>zHv#zTWV}k@4m~+mxsp(1wCO-lld(7oReZjAmhZ3>FJ4kgo0RmpJ{-? zg$#e7P*l(%kwByUorN?LZ?RVRx#XL+Jv++LxiSX_v-C3Ur@6s|ldSXOl=#&75!XS# zI{lSr$dTJYSf_HNjI{?de~^w5I0eW03SMb}6($=em%cDNb2DO*gq4gD`_NR!xtjjl zpa}CUgs>I)=YT{UX|gy(C`e63r6TmpjA%z;dDKa;`##fGmtEI7W4cqR7Q6hoIx0as zZQ{l-MCk8A){J~}cV%O#ET+FS82gORCM7n`c2wA@HdfG{2(qwDUoWYWci@gllrGiP zGa+6`4AgrTM+ICA>Nq^(pYCL?{Tqczw*0t2lWkpQeW|R5qLkOL#MSozv0Bk8CCA@2 zjCz9J*Yy~6LY?FPt$mq@ichZm2vMzgMCbm;P^s{I`Zf75(Q;f1MjQWae4N7emCU}v z+}FogqcfqgAxX%GrkiF&RvIt&mx=EGl9gpJNSVxPGI2xG5Uj~YraJFvFo}x*FusdB zKbzxD?=9TMB3B{dbKP^e(C7lK{r!x1wCNGHWqF&>pZj*A0vofASJ!CJ3rS!1)D~CM z?$QNjY(nZ8^{!}26K!0bn+7>UqOPI9^g~k{M z1Ixcn23;;Qz}ci>(xzDedUkEC3H<)XFu5!Vr>#G+tRiSrq*Yz=VXULCH-6b;zC6Jy+-yW=hO?!g zBCd-_u%Ee#4%cq6u(|8lH3K<0J%tro9!wxXNo#o6+}!O#1C%`2waSgYG}i& zb>?C~0erB(Tac!fUBXdM^oelhk2jGQoI3e;HJ735|pbRVD7ojtyhtvWhf6{=xGG)Oscyu79aFc06DcbcT;u(g~NW7~_k zqw?oy>NCDAa4H7=F5!12Jh8!rV32nPkL#yoJtyNhh0p`4k8eT_l=Q3TLnEy`TirjQ z-G=--x5yRXr?b@TBTm_cNt`DiL3Vm{xfCxj7r(woDtcD1E1_kdv&+Pms5CAzzqb5MQ02dGA_rxgmnR?i3KN8scUWsa2M zkT5G57^G1HQkn!SEt-R-dEQYA4v@Rd-FKjR&nE75kpRfTt)FkaMn-qJGGQm^_LM7= zU!fGR$+qUItm8KhvLtE&*QAO8MV>Z7VCzPaWu((+h&!I`>n`LYptfC`n3PjPvmDT~As59ETqm+8Y5x`H z)Dtf!Km(*(=T3h=x3X%QSP-`miXGx-bM9ZzTw7>W(rr!H*J2|loqJ^U5L9ev=Zc7t zV63lQsO~&>*m3-}(M~Iunkzm;k>g`U(&xfm1gkMg&E%rS-ovXR#`|g@CFNH=-2`d= zFO>#$BIAw<7S@W$4;bYX^u^pnb}*Z1E|O;^t;}oX;*O$#dR>%%E9Liy(!HSxKYo}-oJ-p}Kg$6TpA%@jAfr6INfSFqz3`_G z9Hw%H3X%{CtS0x$Kg#(s&aC?R+9m!V_zA`r6&kr+-v7qoO;Dr7;Pw+iUUD$detGL4E2Dn>N;%M~yk5K-%)PIJS0Oxxp&b$qA52wJ0ZT`IX* z(Zf1fi@_8v%N(82Vc8IZw?KF`?}??aFzpO~%9xa1xY@v!C9@w=o|c@fn|=4B?j^m$ zZ0h6XN6L|*q1YtrwRUr^_EX3Iy(XfRRrAk{!-EnbI+1aFsse5g}Zfd5mQc z_vi4<*ZnH%aV{ciTwL5d^-KxvQbv^qIvpyoER%%iS>gE-@Uu_T_wDsWSWSiWU>+5*7My>)n;YML0tM%mHp9}ncK9~%!6-E4P z8h^fMlmEij{Id!R(=h;bW^M$L?1>-Ie(%R=xs3{+5cl~SJN*{|UlPK4%rBFCVzwQ0 zWfIQ+aHW=&!b0BTolpzXe$do3|3`jW=V%u3KDY%h6>oodV4zAuQ@50zvETK-6}k+f zFvPexM2TMGi7*+MiZaAcm*}$q)8!@MYYb(}@=>gd#l^**Bux>*D+9Rm?tUAcCu`lD zA6|d}9mJ^R*+Q=yvD|zf#@F_Lmdq&6c8 zH9P95QbQI%&D5vx+q~b(@Of1&AU)J#WyrY&>JAj$?IAJPeLzO^6Hs;O$jHd-`)DEb zHH-!>0pU8J%?{FQkE9g%AU++V6we%`%z$DSscEPUK-+wF9qr1@k{Ju|VSRpR|I`aH z$+54J=4hv3hL-Rz#}}@Kbmb-1$o#4#0v{jE{u3-X(%P7`+}M6M?1XmJCYIOg|D z4^51K)TVjf=hE=>YAxnx=y~Cuy6<%*B0TK}p@jP|hOqk7!5;~OFT$bQhLsjkVwdyC zihn?ZF!4^b)yDV7Sbb%XbLAaCkHjPCBchoBxdw!tXUfQ9Oe}YZ8GY|;CEZWp0)Jwk zs(HOEJe+}QX82s_>A@iZS2tLN<-4a(Lkh2fZ?-`la0?9yH&+ZN-{`_l{}ez9+D^ai z0Ai`|Ma~U!_*GE#9-*&$Z`awos0DKH0JNSDaw`;pmnrI2%Il%FwJ^sEj3Iq0kLtTv z5~tHO#shpib<8`%f4+*_-u5y!&QkfstJm#P6Ly`vq@_wRPRg#`11KWO??g zTSZWr52!}(s};DG)gkM!7&47ZY|e0NvXZvZ@%^MLujIdM5fh|9VSler37QTFV&p~u zs(z;}D4RCsG;sL^AYr5PIfE)VUnD$S#r%3@N=GJxhlj_yg1JJlO4%VA>S9ICpg}*j zl8?36IHy#nSd!yz;bZVMr znt|Pc1e;#y9*{^S*e^7EG6aT{{{$?v%{{JG6xXY#?-@!=b2jeEHlJdQW!~)<@Ve|i zFDX;10igB~{Gpj9pkaXoQ4LUagAZANOW3Cj_f=cZjd^h^EPL~4+`+V<@LA^Z#HBa8>=IT?ZTNaND zBu-{!jxUf+e=3}qV?Jj_Hpa&yzu<-}(~u3wWRXiUK$?y{qFfURWxW(nRD zh}+kC>(VEm3N3-vTwQzi`afB+I&;$G+ymFdvceYiYwb(o4()7>mc74|hQw3blMZUI z&}IG$6j}bl1V|dbP`g~zcVSEY{sf0K4WtT!fm)>^ZCP#IRWVSy9f34Ioc8-B0HRIn z4)d62*@J(G&|h@$U>AdZ@2Wp>t?PE|4Ez#&w|4wSuhG6qVf!!^a1S?}Ty;lXt*M*u zjG0?7Is#sHpX9irgYw$agq^Au4W~kE%FvTMGo;!qqh8K;TjO+kW z#mht^Ql$~+oQ88`{zMJC`Ur+B{S?WRVkN$VaD27V-BnW~0kWm|g3fsj*&Z<=y^!RE zQch877N`j*0C<2^^5GWOda1c7eB#9v^Mu=i%k+-fUz{1B(;)hsaI~`APcJ|#aw7;KJ(`?U1;ABFsZiPj==Y9l%+<CKwwUZrx{y%NY_5%}Wze?VYw6&=<-|ShCK924^l+L~`HDqQy(zE~pouUB zqgjcCu%Ju!;*zqOCz|OHM=_ z!Kz1%D^1+pmVw?}cdR+o%URwmOFb~io&czAl1p0qezLz3WdWDg=O^JD5Q?9bi=Cex znGfk8KU#_Bo4P9ffnA?&2BpwpeL%Pk8$6--}wzOatxumCGXz` z-7Bi5;p5`gQgNzFp!AU%UGslfvk6D+v&94O5$GD%#rEzGcfS2)zIRknY7e>5KHnE! zwum*}9D3QtO^|WsFiGFw*#i;tPt;@_BMwM{X#aA5*6uDyQTQ5|*c;gtZw!nBi*&r1 zhA&Q2y|()}Pf&}xyWV@yWGi#R`}gR`*b=%?WY;mfL`nas6>l^Sh{H&-mC$ViIa}?7 zmtTYUeR#Fzj8HOYoT4E2}AN@8MSvW2k1DF7@aOU;*o!4dCVa(?z zdN-O>-X4dzC5v|lNP0;zLL#&b;QEZtgvrSW04SRy(-h_u{#e?VQ&@_o20c{YbV@Z>8nI3nXmEGAlo=YeNEa;VW9Xvq84Kgg%Wl)(wuZ#F)y za_c`I&sRF_od=^Wjw}N^_mUUhjqI$ zMH1=)G30IcirQQ>1ZcNBQXx{D5T%%R?DqY;(ETZ$d`V~J!ZAul;`p61o@PV(NLz>ks* zapX>Vda!8-ZA^P5S*c{M93aTwK>aIckC>S5`E#aeu;k#Tz^R;~V!twXQz7ngb(I)U z-)N8rnQ?roj{GsMSI_)=&6`35i14S!0c_4JJ1`-RGT14LHPN~QlIG44uHheib?vUl zbXj9J=N!58!`@Kj(~U$XvO2sUE*K3Ey-mwWXs^w{ADbr`eYE`ymgtrBL0lC?Q$6EfD8N68Q7JvF!J|a+XJB2?@_hWHsPk=(y|OiEz-K`R}H? zEoSGeJ69@6IST~Z$YtcfLg*kpcVE|n&Bn$)^pg^_l62Gm5ar?;vVBc-;-!$AJIZxM z>vvPnM@gi9`)G7o-sHUD1 zO^y=0I{FOX=If&LXnC;paNSrcA5#lJHAzoB@NCnTZ(F05DRoB{^4h<5ju*N1mMA z6Uydp-8aN!RLQw|dU{jLS7NdsgD?3u+e!@^2hGGpMEVfVsHv?42@|=&CK@ZFql30$ z#2Yd97?>GH>N~E550y0}g28Wmjp>jZNu@j?TOhKI4%7tD5&LaRai`)c`d^rBz`F^M z=epU>Rmgy1AK7DF{yYsX5p|M69JFpOi%zUW5 z-aOPcIeJBMv>X>1ct^DSa$ja5aHJ@hjBRS65QJ^WF${EmtI8QQd*_7*zvZ=^c|(fF zI3amyRtfQInJEK5eCwP?x?~yX__!;41_15#iIjig)kcz&0OH)?%g+<17d)ncD5NPB znMQzaIIM737_(dYbB7mpycHkJhaS=0(LrIkj`Oh#7)St8CUoC!6P&@&x5LW$jYUYy z!5EC6IOhN#%yBaLgGNkZTCd5%P`09l?_euOdbvHST3?@&LqF68Y9$UfJdkaC-^jiq z5U7)MyobOfK+q_g-)ta0oxq6%htmK@Pj~#*7aV=ewoWxkB}=`yWL8*R#)~iy%KDqX zw`T>CliRzaBA6kAkjE0ehrO>W&uYfZcAE)R4D1}`HO(^l2#+c6;JPwYb2WBFZ4Wjg z8OOR8HI5xTGh0jvVZu>?BI%y#cNAD+vGd(+)fD}=tr zP6X%wW`P1Aq2*h_ho`JkFJ+y{GoV=$Zei%8&zsuR%Vo!-3-Er*X z;LC)crb({9Tj^dp%E)ol7(PvE7;3kc3}oR@n$A}(o+bO8*;l2c5t?95cRblN?}UpR zNAHgWa0?H3J}@ws%rWd6@d6GHR3BgyXZAxjrennalHtV^vK$yT^ei&b6fvALGaajHI_`56Fms~j3K1nZ6gxyS*Y`VYt=LXp zK8X2U8{+XQ=+=)uKj+|>PvJ9LhbhN>aOf;crgxur7|n?ja#N@>$L~0z;%>qVEu$6a z6}6F0uS?u0B;?EKC3eIkeqjoYe-lDK;(O$^#8BmO}|UyFs%c`c+$jCPXX4@$JdwIj<=3MC0e)52CkcI~>() zdS3R_2IzboJOHuDkwU)MZ5*HGy_)0CmJ>DVi+!9fQWbB*5?OD&qBvb|m}TY{x_~SR z$-)&Sc6Vu47k>3>kikz=bKK5RDRdkln#P5FtXGQ|nL`2tlaq0!U)c65Cok2_0=cnU zDtB1e+o{CjVm=E?v?CiicO4@vE)YAOoMP@!Z+zL$Zr}6JbiO*r$NfJRo61glJl-4m z)vVQs<8UF4Une6)(a#w7YP=mln-!px<^(s0b76i}&=4Tz$*pj88wd~w)0^WZ9 zSmnHnP=*nU7ZQC?XYL=eOU3Z7Ou7@hYwVSB$G4tQGW}E=546Nh>czFa>Ug3wEb-X< zA%o^eNkogZihW^3NwxKo9?%g7NJlq?+m_to|40hAVER)O6ThsI{w>py%R&-X&~`U~N2fwx<}izX32Oz03Jm6qxx%3${u`I|7wK#Lg*DQ_>-MiRya9w3U;!aMjK z@w3VDzJbVc#cb}cma^gY5lQ_@FpG-2Lb^H0_2wc$6;@o!p+>q8fnY(o!*UDS>7v)s zFYrMueE=YNeLh=ml8XZfJb)JJQvb!zq+c_i>Ao<|ZVJLB?-jqCH^-%q1`_PtO1i4h zxfgsEl;ATG)7ODpz#G>lHwL?vIWWstQ1Z1#X9aY1;?fdw*^7{y5@x0~U6yQafU+Lt zh2%zH-7nt8(5tMbxGlFxlO(KYQZFB|FFo8JSkQed@MMmm5$)=em!$PRwzTk#OHQ^j znD2L+Syp)Ttn~F^aXB4_qZuZMVH)h)Wa#F5j|}1XLC#QCTdQo_UB0JZDe+HMJh((r zLjvfg$tR*5UCSQ3&}S1E%mG&CG#>Y;ErBoIbzv94rxN)nGfAP=BG1G5`i9U2+k?H! z12I~E6EVE$r~M=#Xvtr6kGPt>6twnrgtZ{xFMthn z8ngOf62udvd-askq&~T!r)10-rtk~87$;UVIQUx4UZIEkLc+CTe-S#FlR1jDF8`t@ z1S==I3D%@ir7f&f>p?~J=G)}sXaUC4+@T7bNLk9@K0CL&4!QO57ds$sV72^wvDByx zD$%F6bS|~haTb-!ld&nQzN4nnN%+g|PP+a7A9sYNX|vC{_ZYG;v%lQ8=+nr2NRTCNAMRP%AHz@{}UC zvnlmoKDelaRN-!+lQ{}IO#10u1gCyY@)OwtwSzpMiK?OLT-eu2lElpf40uEm8>VsU=c{LK zhRaNy#=VS`dDP{Cv4-vFJ&-)w;J2LHkZj^BdO2Ey_87B}@HEzmwzbp3?0e@KEzq-X z!;Sa^`i>=52Keaap&lRHcINmI8T+0W&1zdTBbfND$2#Ox42lS7L~JF-iS&t|L?TI@ zDB51-w2lhG6n*Nr=-C>BqG|eCy&?&7Y#a}yd;xe_D)UX0lW&6TWnhRv*I9n5eMRRZ zIBJv1Y^>PBi6nr&kntIn|1pi*ya|JIqpMvBU1+GzWBhcMfPH3qgkQa1sF{I2fM{!P z>zcbesw%d@k>aPu*>ZAjjPJ--*${pxvggk^0Iz_}xwMp&zqp4qmAtf&tF28@!@@f$ zc+0otmhT|RW6D*|O>Bfe73NHEAhgY9e&1@Yresim>nPm(YkxrfM7@(`#M5q`3Rk)82tiRx@!Ccd83 z0qYsEl4wAPEQ$4e)}jPcUizJqbLbi~2n6C@VvM5aNNYU{Tr@Fbew&oxvvDqYtNjF@ zw5lz&$LHbBW)|ua;En2)%=3sy~KXhCW<-F69pFOT+?pNZK< z$4TxpnsEhf&h!G)*i5_^;u@biYvMZs+bb+OWqJpMUfqR6{@_~hDhf?!V^18YToZNO z$(~c3t1z4s^tCxpJkZy=b{6)a-wp&lP4e=+VE4F;(qTH;HqnfobKPd(b7)k&zaArb zHVX^F8@tbqa@3#djpp2YRVZDKN6TYmS_M}m?CyVekXjbQ#RdBOJIW+m!KUkIiBVQj zbpm_T7(miPa$iD+@;`tTa_P^+Q4{05)??KomRym|O_4b^x9>R$^T%~>R-PTFVfvjv zR9-TV)EJsKZNYr5n~!dS1EnZ)7{(-?`Jxi*}e!a z14?6+!vxMJYCEi0`p9DmuR`(Dkou-vmXcZ=#GKW9Rha7TqGrt=(uUKWA=PaOQEul` zMjOK+lN74I+sp)wr%A_Qe0xJ^C>K)Eih*=tg1t6@ZyWTJD<+j!HsD73rn5Y5 zHLNY}N8YD@N>E{^V7rV22!Q!29o8}^%3FuxXRegQLIvDS*YfwBBC%X4AA{0=Iq+d# z#fV=G#i@^X?eEpxiV&MBGGf{wx#7o|VB@nz)%pI{K2e_4uln9|H-Z0JE-IvK4M>Yq zT|>`TRS3l9$Toip_uNJaH|t+cslTpui_wJ(VtIt83LRyFHGIX(us>q3p_6_Omy*w7 zcu!pTKObAf=tsO%s*aQKF*4qmtt~el`8XguXne^YI=LY{cdc}{(#X%t4)>c5AoaGB z#qmtkugqRw|2sM)iFNn7r0jjzZJs%|jr$^M$Zb=S@!`ZmGsV&9Pb)hb}Xhum-ZN*KCK zYT8%*hI@*ZTx%6kB@Lob)?hU6Rk?htW^LS2YEELlTlc!lkk?T&fENQyX5ey=I(CB6Vsu+_w7EbQjO7waCQDqq9rde|(xwQuo{|@zYYK(% zgB}6es)xI&7O7@FTEQ&}Gl}zdVSYi;py)l$UooDQ)lqLNE!zbV-)}zNbUhQhCT6v6K74tf+Sg;8tMhByj~nr7jOWl*2ZWVILI+cme@tWoRd;8~x|433sbcVASP za94r!lOxhKKu9Pcf&IV*;+;bJuE2g7`2PF*DJ5?_M7-_YU7=nfkV+?(pGcMZ=T;oH|>t0WS?&$MCZB%OJZcC+~)(nv*(fQLi`fD zH)NHR+!j0C=U)Cr3`^?ZhWh>ZQrUkt|pOzF~Awbz6cci`>8>Ql_P-eaHTwthY7C89ge`PmjDD zk-K4g@UvgAoz^0yE@Vn*r|G(8)M=$gJ4LDrFn3R>f#b$|e7Z~>jB5KsS5o^wUH}CE zl%!dJ1V19H?9T^#xKN(pT1v=^>y&P?j7`Sy1#cGMRKV(A~jdQ z@cW3to7C=e5xj%6>BXq3jSF82(Jlcja7f%_aPJ%M_5tho1&2tNSRGT?&4TX_IMcBc z$_4LI!1qNPyVTG?*|YDobEdWw!IlP2IVJI8bX|)YXEFMVtPOkf|M$4`KVfQs4ZWnX z#1@h6M*3uPa5FDQ;!=D|=i!NOZ(+e0z$GUql{AbGLk zJm+SwqHYgiXxjffogc3z+~iRrTlpf5E}(ecXpMr?Y_{HmJu&q&gTxB--u-H~uH=QzFue$lsz|01`#{sl4ZIStK zE$*9;seQj^k$VpiedMXC=bKs-{To)3`oy}J7`is@ih@TMcR}E*qw%@L3zD5k7+F$k zU%&AuExrG9m-wHj@qet*7HY+ie~DTd*R%!Ba!L4!CmCF+skq~UZY+Btf<+uUBO$OoqMn5)I<2?p+&s6W=#x> z(^2Erkn;iIgS*Ju0CH?{x|s)VgG#$iI7~VnZ&J)lb-4CKE^b)xNvvIl+Zbii!XBE> zW@8>?EB|$nY3;@YU&AK$-79f4pa4k?}+o z870y7NX3Q9V)cWKzh`5Y;+BeFj^k)i*XMhJpwwgAWZ%`yhnm?y ziL+zIFOQ`fEYmgJlw8?2$ToB;3J$B6KZgi1En4cKcm^2dPun`L z>DU@no``>0v;G7cBpe1K+^&cf^N$u?ysnqQ&7$z;l`sp&+tN9Qp|Y=a42EA%%m$Z_wj=^Z$RtZ`)k%qbIneg*J_Jm5~vBjF{jfc^s(misC_Sq zD^u9k*0fw&g0(jfE!7x|U=5|?4Hnrrt2}K?mrO*#tB?L{Y52V8_WrsaaWS>Ued0Ov zDk(2sO+ws9)Yp0ie!GT60&eS0dSR5}BLo~aPA-W&aqh2$#~s$4&v_tk=g;Pq%WM}( ze1IubUqH#TVsJ)DR1^Dy=_A|Bq`URreTT*4vYkEf-LsnsRgNT6L67T-Bsjy?k?@O$ zAU8Odyv0Vz{{XrF+YxoDZ+Ap;L5Se`pe)GDry64#*6i=b z%eUl|338Qy*={!-*f}UW0L9gD!uw@H(CN%`3j$aMV}MhJiUPsb_UG}GfGCxH6IxiL z2_e-uzik)ouur-IA0UdI^DuE=etl7Hg4q9NaW+*tc(KmC?6gKHqRvq{+Siygy)`X< z{5O;~W3KW*91ofrwXvzZBQ&foC~JmCyMELMp%1A)UK8Z?7{rLuk(B};2HVXvaLskw zaJg>b>+hq-gS<{G-7acp4TiWiUz6$G}l`hWl*^xY+!!Ayw$B$|4 zj7sQ0(n-^n_>pz~o296QMNCr%q?SjY2_LDrEtiv3407hBMYL*ay=!!p}~1pY$;uMga>qplMDEmQY~yg>=`#oP3|(2uz6|B@2?=jj88D886^ z#KvlD+j4amL@2J5IQ@Se^1tr5F^V`j>XMa%grNC@*{=zm>i@6j0PO$9@(gb-srtRc z4CdH{wLkM0jsE{R=qdKVc^B{1X^_8Iy@6m-L9CsY{Qot@`OoY5Kh9XrMwEOlnrMkH z0Qw0CbrT6hwzH~C+Jk+l1}iNrt1Z2;iJY3}9qsNHTdHphOa3!q`j@l4C#JypUcaP^ z$qAyYwVnL|IAA4!01LurelDkdQhpS31VYPxXJ_N;1z2>R{B}#t?JIYl7Pa=me049s zNYZjMcShje+3ps&jl#SZ3=Q=PvHX$+vrM>I=Avl8ff`F`rY(OKMG_vFlFJot_!@PKj?f zygKLtWI70i#Y*=|*!dp90~)4NUyKjCvF-CtYo9~LKCm1f4I|R_#Om(`G8W_K;{^Hg zezoTiM#p#LwDNSvWN5GUr0|@>C?1ntnM!nt9VL+$q2t~TL4R*j`G#MoD01);4I;Ek z1uFeI8w|XfhIbiD(;26*&&wSK?e*N)$w)qN*I{kk&K)%;pKQ@i9AzLRxlixd%li8k zxN9oY$VnrDhCh+C`3u-nW{!6?7@f7Y4OL%`Hg;680*Inlu>oxD{9xrO|z`#+Mb`TNS>ZbTe(f)q(_;Zjin48 z%^&p&>RM6MNsK3xY@D`YEZAI}Do}3WJ7`xx?kYX1t+mVFU;=l^+u)CG?AqO~O#-Ff z5Ujiz@#S-N^K}_{L>Gf7fr9~e19X{osh_G@)9*aTz=m?sWGX@oy7YA#u#usE#qWfe|zB$5v=7zlFYCPhk?Sbl(&AMLZQg@_$&Er(Wy(I5wwUYwW z>c-Y|p~eRk_8_=-?cGW(QC8zK<*z`s!Dj=1n2ysnt1qySW~agZnqKg*cF`Z<(e5vj zRdWH4c~8~knR*U0F44t*=su`*J=8Dw_U*9Nb#u9-{`R!LUUo{GIGGA#Mi(;OxcIZQ zelw*CP^?*?<-WO%UB={`eojb-pjb?cb9lllFepsgtsKMg3%@) z_im7yS)`N4&$q)l3IVleA&%Qz2t>gGX@rq&3)Gb7MmHHgUK|HG4-%h|@sUr(oFqqe z-E#Q?zMe+TCy4^XDI?xiJ-i`$+~pA-xupW^PjJ1FtY)~brkyAb6JjT}(yizV-BC|$RO>B0ExY@{>5RBbyWbI}vDfkximN58;(-I39m1eg12|V~9 zOZj^*CcGsL@B|xSMISzRO*FJ4Zpqcz=}p;5>XAK~rmn7O(Ti(H>sh)14Vjj08gfd@ z;2~Gt66m|U_Zt!;$2_YSN`MXI&h{%G37?H+hIjV$;I6&Hi`x3q6OkOlqjNHS&AU|+ zC#~y8>=cW|&AI8p7wa2pHqn1;MKT?yvk*t_5uF4ZFpE@(5$m$LIQ}MQWJRrEPfbOJ zYu?^S34PSf#gP>zIKxGXdo>!Q5}mjH1hzI5!Nt*GDGZfz8`!YY40{5JErSZWwohTh zcHcWtQ(@w6c3X&diA-=iI}WwhiySbPiST!3 zMFs5rs3oqtRE#Xy8VH$&y)V1oPcI|rCQl{b4ukb*h48yrlZbnYcgQSu8q-Jjq>*w| z;rLpeUH1rV@jGT^J|{EB8_Bcx+>R7h_l)GcHwORirMgj?&U7^XZa{b-S0*AK;JD(m%dfka2&M>+cZ5QbWhd+9;p-b zC8hv3*`YKt@QHv4yUpiUTk-}redp+uW*xsaJ$c@8jF8%`QZ_|Sav$+MwvkN2KAs~Z zh-hnDuNAmw?plR@-9Rhv!EJi|w+Z%K0IPGVv%fCn+s>RjG)z|fbd(RQU;dq$CiBYl z-S&vk?@=etGI5X&2id7iWD+~~h_YB>3VF|)i-^I9&>+`1S)Sp+*Qakb6Hv_2cK2^G zWsMHHv4XbahF zV^@ZlvFg_*tA1Rofo@mS_L`@O(HjEVDQt)gy9Z5xgeu2Gh)`3n2iD6{oi7rJ4+ZwVCmzx)Ab#8fI2qODg?PO}R5<4xyu zZa%sF-)Q>waHjkJ|8S#Pk<{kcilQ=R4nq!0g}a2?tukTQl5@orb4(K2MncYnq;lGB zhaBbd>llC4yv` zyJd&!UVqjq_*DvpBeN}PC$4$gqgBnNS)x2k%0Ca%P-3ki`(^7(qQR(1H>?xoW@Q2fYKTep*ZL66;JE|j(e2U8)svR3-U&mU`YLlfd;4jj_ zS>xAl~I9$X&fcB{W&UtiI}} z!7LgAuQN$SGx9wH#<0W0Q}d;$dXw7l;qE9SH#|wXnjRgYy>zvVa17j=5?ec#m)@Uc z`9uEP!?Fw5GvrzgwdPlM7G4I%_LNW8~oqVG+nA0)`H* z-Y|kLza?8&VZ{j6{NOQ*`hMWPZ8~`whe~Kw6r<=bJzT{=b*(Nl)&)L;b#kgE2md*J zLcC?BD_YKp_O1n+vo^ilx*Ws`5Gh*=AWw4cgUI3Q45EtLD5GX@LD}7n$GDB;F$yLa z<2_LSJS9K$q^r1IU)FKZ;sR5TL7+!`E(^pKewwG42~)VX*^(qV z|5noPUILP=1YffX%)$8f->B__dfhMNMS5_a=~TRid|iss$+Nq6EiK(@>=qC%h7z9( zRve#lV;R|+XG5g5+tXhn9}h89X-h_@>b~T978i-pmB1i}d%6$N6k~di0yiC!ixpd) z^V%>{@jgGIB&32om=i2S!lIf~n#_6o#6%Szj}bj5yP z=?QjAMoH^daJ=@f)bjVFB45_UajCfX6AWDt+EG+fqXX@jhK^qUpnY6;cjYepgXTSJ zn8Hq|9n(ag^sjt#38{xd;9LFjyE59>>tvXY;ZwO>O(TjQvn@@Ecrk*ZNyf9iftf4a z!Avj|54%K2wB=k%+Uljf5Iwc>dIZnr*q(+66<-JlkkasX<@LJuRvB0PClQNm?9f~6 zd(S8+X4Ldk8}b)=PQ$QAZpiF7orzh>`6VMgo#)*x#{4`=yWCA7WKRNF#|TIQ#*O?{ z+YsvI60~cR29=Uo*5>gYo6aSC;SaTkliDgdS7h1*DH(S#udEOi#TnZ#m5W1rXD7U| zVJm9+Z(a&=uwEi}|0L-hB`TbH8rrpWyj2Z8yDc26c}1^_n`}i=kM%dg(1BFMh()%R zmny?Mon6=5ve2%%`@Q&EFrj(D1IH;bDoe|jEta--t;JloBP6_Rwi1*i^PlU=H*8V&Trac#g^ab z&~H@nmQodAYk?>JZ}o-_BF+f?Z~fZK)#)X6x-;r`=&>H%IzV9O7^kfzdOtSIMSz!y z9(P&F)boTEevIomIOnZ5NdUw;Vk^HyMkb=Kr5U&IPi{A>i4}YOIQF*Eb>BE)cHJ?1 z{j*o6lZr+l{rsuJ14h>|tqDr8zWy~KrjamK#k%`L=@Oy@jnS*%|F$m`+f#2?wrBw< z`6*X`rLIZ)t{*VLdGw6l=mK#)5@_g)VAe^s=ALwc)(XAI?p^PpsDKVB8!z-zMYEvw zk+L__EZ5!g2jOXO4Bb+(acv0Ms;Y4j{Y5^}sSpgoU^=rWJ*C3Ds z^@^?1aY_Nj5patK_&}hWw&4rVv@5TJRf-yivkog zAn|nUj7W5T`R%{hNBBUQX{ucj&-o+ijS|ARb%lR80rE*BM*J8ln#SA}>k{JQwsBP! zG%iU;gC$24JggI!5-zr%XP7=TNfM!Qd+A>`+5)Qb!F-{H?yiJpU zeGrJTDG{6Pnz=iW2yryT7fGIjS5q!e!ipebpl%?DS)36e3RcERBP#4^xvYpSd2v2R(E8>Z->`u$=cNVjYsccJrKhA9ok zvzI-~lQP*-d|i0gJ}5ylo}SFLmIpVhZhLsT90GY#9~VKI3p~C>yhkx+Qp4|i*7#=# z*rz8bu4-_xnUtvVuN6=3zvvb0I2V&nVeakB{GHZ5RhFG3Br8=5 zeQk>}n3Lv|P5yT$(+wB%wXV7=6S z$^l_-p?oLzcYi)V9yqnul2ClgrPp8&{OI;YRN8q+*8L0cHv%AcJ{cwO>Av3>74zl` z#i47Gy6nG+RTpbn<MWe;x#BctD{*_qczy31&`YR@vkE)}DV}UsJ)iwM9{#+th`Y zC%0g7F^&_WChTH1?E{*3>ilWpi(q0a|1P=!on>sJo2FS~ShxS-4=lgl^p}?8%dl{1 zsns-ZOODW-uz;(^A~=&ac`St)8TtB8(@_=f-*>14nJxZxEkNA}?&C%>3S~u{^12eU ze+za;3(RWJ=6*?+dsyvrkxl3{@$sF|e5T*0;FFeHWGv()wp{S1Gt_(lE9^SnYPf9l zrx1SoYHBArq@ZxvWT*DCE)JzQGpHCT+Cn!m?-J!71~bbuws2`2d}Esr8T}UV~CL zZRn?M6!f&>@^wku*$ZA$=(4#JA*$xY{bSZR5P4KhRJT0En~UJgE}x#fj?G5x4TIPT z8xbfVh2K9(RLiI6&?9&MG-^xqXP3_YWG$WL%CQGEJpTHvU1+;9-C(_o?4i0{KvRT# zXVAsKZOc?Gv4DkRyzszO<;%I7u6CuzTKJ>2PCxwj#6@x)8FK0_3Ioa_Si;qG#{6fZ zE82+mq>ci!-g2AZc1MFqTIY9;2~hXY90e^<0MK^Dyz4NSo-rytp2sq3^S~ravvYN> zPQ8fm-6|vRzBU%kkZ0p;Gqs|>HcETBGmS(eHM-pv$h5ft#03}+B26)>bv#{EX0y9u ziYYb?2Ew@ z7#$nhKquwc7r`vVg$0)-TiFww%&SDc2-nl>{MJ)Nr?2VFFxTub%Wpj9K3Pb{B@r}u z?b2RXpvrWU>U~Cswps0(@0NT?MPt6*obURQ2?V_6yeMQVYr=;?ERk6DBT)VGizvLTntDX4yi1n5qlnwR4q&moYpLx$#0|q56RGLsHd}^G{8rxY=!yM|d|zpv8Zddh)z2=AN3? zwt5NrseGMo?$p8VbdnZZEHN6tq@| z<_&kZIQHFfK+N0enskBKpXYRtuS=aX)w2Y?m09}d)^3NBEV)-OTd%~NOa1~b`?mT~ zn4J0EkJemv1Oj~%a|;GGfX2KO+z__dvgt^dsxYP}LhQ2!-p2vGU&L>#W5Pbz2?8Iz z`FPbZO=o-+)0+rclPiJ3%RX2KucgfI4R?DxTFx>a16@Lx{baa=%MT5M`dDeAr9mkW z-6?)R70`x$6~1Z84FR5?d=~6jXwI{e9;Ru2(d53jlpph35`CdlRvqb%icTVJKpf(?M=@q;2&Xu%u>bcq}1)?$c znrxBZ-@5AL*lqN8fWGOF2FCp3K=v5IARO*f&L_pKeBXC9mbRt?l^W@foHMG}fAqlW z0Z%wZX34pj)-N%T#ptL+8qS~Ji>CFKo#FUQzKCEhJcVqf4-77+{|m>*T@Sy5{2sM` zzJ_cq<@0tx4n8vWS4OT`3Gj9}$EU8J(y)qzt(|lL8nF${4s>!F>$KNLO|@d$bdyBa z_N<+ZB+)GGBODk;LG#*Zv7@_jD%zYys$%qG8D-8?-C~D^GTS%xY(}#-s|Dr z$@{>2J1-D&QJkM=e}-I43b_Si*VpkT>F)Yv~9wK@sdD|HX_)2l5x*7AFl z)3L5h2C;Zs%{mV!x^>0F7T(!&eUMS;*r%NpdJPuEXO^xFr#h18GK9ssMB^Uqqp65# zDGcjMlGf6_ZVe89O%BEr0p}_9w}t`j&e1P&vmcI%nRH9G-d`OeEs7dkX5I~5n91&I z-BeY8&nuk-1(WwlAke)rQZ)6kjQ#B2Q13w`@a-;{$J#A$ZdldP7(+s?9G`A&9s`uc z&GuFf2DWQibRIcp9Qvv)8^dl_A|rrhCwYkb#`I?~KxWc%@Odw^c8rLBT#t@fZTE!@ zHAsqvtMfq2g6N-Mn0H3_k}}7q$gEfAMq08wT;n^Dmfmw1Jo>D5>_W_@+dvi)_Ljg< zg4WWSu+;x!h|j;xwEpXkF8_&EKzWhTtuvqg-f^=FM4ru7)!8LWlx>bny?pH<^70J< zd{(1-E-w}&;Tzh~q&t^B=LZL$z}HcFqJUar$k zJ8jShy(c|x)5NcvA0fCd4C10|o7hIpedRILmc^rTehE^BDnO9U4q`%Z1(PbFuR3HF zfLkp*^fv^&5atIYsTRj_r|ekv#m(abYVh=V?RClLEm-_v=>)G>OpGOmACtP@P-520 z$nMW7mXdq{InpAQAu}8mVDeGS-wo>+t1MIcQc%KJrj=~e{0;=7JTq1r0lAjBv084l z@Ow5K+G*^wV~^>{oNT@BlwH((YkYf7kgM~e4HWzi0O$%2jg<{+~aTsuUyN#y?%f#+z?s~kLW2-oWheg(RO11oBbeW0m4ItL$FY7rvd)%~8At;KPz@!d>x zf$oJt91{4TUbjMfb+5yk4MQpF*v1VX?3oH6Y zPvt>$TY;@dK@$hL=FMrqA`h|O{LYqkG-tEjA05ig(Rj7d-u z8GC-j*`ucJ8fIQ~m@e)0+JTT~Hd?5+ZA0gG*f5bP4<4qR_dZ*JeF*h>awL>jq+CI# z9tCaXOe97!SEIU4ML#dlk>jZm;c z`FqBg)HUr)<4>quQl+ks@TUH|r9|T$+eXBk@%jg_fyrTWP&9{8&+C)PQ9N zt05s>=uVQ2c4xdX)d=&FgjifV+C=n>L1OORr7>FWvpLddw-$z?kGL)*YPHKYOYa%J z@L7!0BB30cCq6*xocuRFlC48YhRt%b*vD%&7RH`tb(4C(zS ziw{q26`jU$Hn_J{&qSpw z-KLlZJXv>>J%51u2@RVt!I~G*X|4rupW054Pc9ZwLok%VeN%b-2k~UZ3wYNix6qP- zPA@zh?GNR97a$-L)TTdnJr={hxNOscb^a0jXzEho*F5I1Md26yPc{S1lqJ)xAok9>&RyR*$AjWKO z^Y9VyhI_omcUCHw(V7fJPsb-^4!0DLfPzovjsTdRI2tPt9|NlCi(9vWYn|OkX$x9u z?Fb^Qn1%wAFa9;)O1c=#^ME^a4!+9?z;IF_aY^{QsLFI^QMh*oN7$jkag#6Pe=QrRrLFp9%)K{oj*QB zB{6rAFP>#zh8+*dz3yarR^|jrm@656ijb|&e%PNb4-IB*d^TK2fK&%8%9r>A20%QY zLG3yHK>3i;%4e390wu_1DS#JZfBp=T5drOmg_dKTR@TcMFh{;T8#PYPwIh&!s}c+| z8x>3blU0vtf8LEAwA~KJY|hAvU!B`K}Ves_fQ*jWIwyVKW ztVr{w&K-`3__+6+pikMMwDOjayXb^{Se~)*3|X^3A_9@A0d8OYBF8?l-l!75G?{AA zy=i`wC>Y>oSwdr%X?TL`0W8Y|*lB|Gaeyv)BMrhgN%UG=gp-P>9!>mr-K=aeuLJ;M z=igQLmS>x@O0~-lg>Y9UJ*V>mw}@1#Q502~{UxtRV&8H`+@UDFxx294ulp#Pi5JKodCQ zFS56Qee%NGAW!FO_nK4(?FWdfSA~2b zVAsy_Ho%1P@XXkM&bDluc%&E0!V(NtWH*_{hc>;KEKruJg{5y@hF04hOBS_HD~pTx zI~BKm0PZ7`l(f|uXC2bIxRDQi*v#)RQnI`_HoCjG_azH{rb!|Smmt02F77KDe2mCY zIx2at#3uy>kQ=5Bvj^{=1B@{CYp6nF)$&b6QBhH?e#nOR^OjN`MMRH1ns_4Rs>^7vcR1I zZVGRpQ}p}Y8<=YtmQUpaL!~`S#V3VAupE>SOW+oGnL9G?P(KwASBw)a%)g^aauXWP!Fr9&Arz zez{WHmjxh>(reaf7r{F?K7(){_u~X719N$JRF%O$PCd#8ttq2I;>$_2EY-_DjiTyNTfNL3~*>%NhWT8bqYJrxWyj;oY-)Gaq} zXjvr@6%Q|yTleb>DNe9xpMHV>F4)>&;Yq*hoo-Q-l%VjQT{u! z^ycN%^&SJt7R|-t;mnm1w4=B|KmP9~6}nED?4|u{Fs$dykOO`F(5WGYzEjh> zH_48rhy(a#P>8DxRkGgDV;<%hhAOk9G(5nILTlkaoA_ndR9p4ngrr>KC=Vb4udnpD z4gXDoYKx)p-$nt{jj`~{22^F*2Eq|*HNFp-FN|I$?l;q1qqa;60RlN;xkdF)tU+2F z2JJ4-TR_00ng>lhPYHqm4;`%Y!lT(JvoV^JVcnxroVSgHUSH=GM?-HBvWF`VI4U{#8Js~-T#{M;4m3z(uNzv2`W7-0 zyyy(ChS>+K>nsj9Y<}kLtnU9aR_zrik8ka^ce8%8(ag^GF)XFh6uxbKA0PO=6&RYS zl?3%b=8EdF-tH>Sdq(}7Oxj@NT4<#8EdQD$`Tbb=`k!(~&}Lt2X>9Gkk@JhY?=-kG zkNJFNT$`>)1@lZ`?@T76jKXn0XPQR7CDiRS00Szm(=)pDH$M0>y?*7la_^T~cs=}9 zr|#rujAYj8?tE6+DO1Na%8l$$K*crqBWo_p6&YqdawEi+v9fbJHNmaj!QApgmuRDf zwYi(6CxDN)#W=*>qDgti~^qQ1dKa6AtSyAtn>x93_4v0+`C zZe6Y0F98fL0J_`g)Q^4yRTT+$Z!SNUMuU`nGchiTvtfXKe9Xl<1sOL!8+(^XLkRW0 z_$bCxajty|vFByxTEi&u$)fQ9j?FQyVhM6Plo|aKTHaY0WuhZg=mdww574j<< z_3FVUyU49$`1>MpWGeaR%4Gbh0M@$ioHOJ-1mkVF-HQrAdVT#*b8kH>^epP*?#nX$ zhX$(?<+}Rm^SfVn_Ah*U+!MaoAfWZ$1294Gg01b+_krm(J-A=_-w8OdPKp2e$)n#L zig!kQzd;_j?&@&M#0R7uxUYQ~jl!CB3qbR!J1hzc8lGY(f!BU?Tbx1tY<}ar7AD=l zZUTMXjbbMA{#(_lkL!7{Jr%mWyx1KGHIwEDaeiTZ0;*Xw@d3s9Adl_O55L6^-QnfQf9}C=#-a=E+=u&_fU{!56cUk=&);0Lm z0b=*FjNZ_ArbS{SI=%@$R1d_mAhKlxKBfmkPkWRds&@kbt^Az(hd{FfcjQS{sEWMd zgFf$5Ae$#v1&6aVuN={K?Z3|lT46^aEmuiEAl@9Di=`C^g4P$mJo7JBfRTzqT4|3w z$Iwq7j_bS1EDNrCaE0q5Tb>bQuq`@X#|a1kgqWUJ^%S_eNzVP*uWp=n0*nZ;Tm?$j zJZzuyz&lFA!@Eg+W+K-z?EIJ_`Q_7Sc!|dDQd8b4!KCcZ?{3KE(HU!|9p#( zpWD7$=jQY3_ZD0Rh{Zt!>v@S5Xoxoqxx9@+NP-&tErUW=OWs`Jc@{;AL06cYuxUdV4a7^*(%&qP&%BzpK#hB0aSqPx&o&C3HX3$s z;tvJ581KJam{(V1Ts+4J2pHJe96%nN&28kj?XXS;cL0zzjU-O=DLND5>}ewqCEC@4 z;z&XRu+|)Nb$H>K0G_*TiWR#OIlzoHc)Tw68QZthY4_)pn>0R~n0=bBJk_bc$W|R` zD$Hnq7fYKoNiZ!@@d?mzzjueScIqr9oZ`55z=8VXix_FA2(s2;OO+4-Q4|d{@Lwyv zYX_yyVA=t?d?9vA<2;-a2d2LAy9G-wsgFzA0C+Qsh_x=5b=^jOlk}Sw@Z4+mF?a75cT@-tuWfF60`Zt;2YHo z&r17;f%?PxL1op)FeP}cYOqRA)jC^u08~OdADV($MXhb>xxq618ZRuS55#yO;~vsB z_IDFFTIxS~-sy7U+dYqG1&(=3nujP=E9?!SFj?L0XbX3T0os_8QcPXw{?y-m-iJnNBnhT=0nfxFsBXVa7*42wA zH{V%E5tAWg%dJRc9MRdpIBlloLBRJ2NLrWXLWP7a{cVu~j3+tO?ADKtlHb;LrT2_B zr@yAt)GFd24mqeeTr-%WHD@qN}_|Md1sT#1(+no0M!R12-@$Zs0 zG(E{5T!#Pfn8(K5oMtY~yZq&YyGsaruV2^d8Z>gx4J3k6VN zFO3A4IV0afsP-|m(^`y=h6KKE!*}Ev*@m_sHUE>Ms2bB9smm=s*f3F+?a1A53-646 zYxb`@1WO5gEdL4UqXs_mz3#6K`Wu5*Y2L_0Ew8aby{fhe`B=UGyq_Ii2p75Zf#7^V zPus6Y|JPY$95ir+Y77o)Jr(GQZ|Har#{*;U7JY$k0WZhMrlwL|Qj6Q_KI-k4k2$nHOr1Ecxl;gZ6`uaM^wFS}Z={b+VSf zPi#}py1n6v+ijq(h|5x3*0<6?>+0Dp$h+|$m7l*J=&t|OW+D6V+fD#UcJT|h+tqXQ zzsI%%s14p59s`#)@SZHqVdEc?tZx){twQJlm?Ce-?r*xQb@l6WjghAwvSfpL!&188 zw>MA6Pc@}!*`?GgjQb3k76WFssXCqD-yjw9)tz3&G(RnF-7GSc9^C>AH0w`#P^qrJ z-8`_EL(>WB6196Jf?_rBHsi1;a2(j?J==ADswcUZTT-o2Z@_Gp$(=mzawJNu&Zn&9 zjZCrzm?eEF$859z{Yd(kVYU3I*!|16m@1MdA=i#=RNJdfCj-j6(G$xacIXB8zV~!I z+OY#md1_IWhiV3mscQbq@##V+p*N-HLkMBD0Pb4*7E7gIZb}iImOOgLBu7x)xJ=O+ zOyxeHZt$*r(k%eq)?F}A^FSYy_ndXDfskH97*SLJ1!8;9K9ldt=Q_?fJjsD%XM5%2_2ms8+0hHv4<0q5fUyZgUd8?uRGFZ9TUn(B=|%P<$Y%ZoA00XHPWWZ*RW7 zvn0a*l776_Yk1%f!q!KoY}bn=z!N9>K8d!rWfsF}R+nxG-5%MJ?U)Ky4ZS`kzDO%I z_d(m*pfp2NwuB9V}O$ltOk# zPL%|&;}2dRAn|!;yQNVhPL02#0C2NccC7EnnZ-EpUZb!pAfq7h?e=9cbT7clbe78N zD2c%9!~fOE1*2gJrf`51eBa_2CS#k1BK73}z>c?*Q%sBiXr%~Xh<506i}RtN>{Q?t9)Y}nl4VDepLX7)UzeqbM_z6 z)52bPj@d<{(l|#?+1%B3kUv>@KF)fJM+XOZa?~o)31J~C4$A1}YRwpuBy@Lh{%=L0 z7(iG}IS?NeuYJk52i=Ls9f(2n$d{l8Ofbb>aekvxh&nIY=#7D&mfReoR=ab|zNwr-el~N1gJ%(Gr{r9&P+2eI- z{?(hb-S(I97J5j0p&KT`+j!D3WQ(X`7W**d5`ceH0kw6Y1*e`{gi81kJU!#PeW6uT z&HU2-sIOrNiW{vc6Yt>VZF1?-!{b^dy`vO^y&BpK?Lz&faK$G*x;ukB_DH>4hVO3Q zqT(d4-FLw6NBd8`_{m4#P5VFEz~}Av%bdbcxsH5;TSZS6BOM6WtLMYI7O7pfsqjVJ zxy`15nXTG36R5Z2cH4+u<|%*PVi{sQWINh~4L>oF5HhQ2{Z5y=lkn>vpG!u-O~9Y3 ztMBsh1k8PP<64dPBTP=En_ps66oek`WJBKRt_Bva&p*!KA~F@=KYga9>#ipGfhoNTK>&HP z*AER+S~d+$);$Cpw3(Igk}~-tbHM68fH5TRT}(=*Z>CuFcU>sXjDDjv;2GR+`aS&i)w&1V_gO}nqHL&w~oZ*jUWfrmF>xHJ1a`{k+g z1j7}@I_k|Y$*&|@bu8q$ytNdU%oKlnK{Bdp)(wk{CI|`&bKTaOx!NyeFeQzF=^5gS z>7_QE@!g(w0y13xOQ~i!&~%vaDMsjvdd&=Px};e@hoyeB+EGhjqxI9}2D>v_=L4ic ze8Rq13!*PKB7Hhtu=jpugQ>y5U{e*1=aT;9N{BG$W6I<>Z#uYbDQuoIpOKVRHq~76 zF13pt^jf9Mq0X=EM`?et-Y=e&|1VXwU+>gQ3rl;nbsSdPN@BlGvX;;FwAEL(`A&Wf zx)-9h6#@5uz;#by#_C_pctc1lnp_d^T>@nRZFp5*mLYm&Y^Vu~3(0G>$v>6x{gV4b z+2Sq>r&Z5KI{OPv9Qv=gz`ePixhKGcewkMeF5W@mGh+(IEC2ke^Pejdk7<`~ttI=@ zpSU=P=x#o39_aSqC|zlA4h(4@FK?=RroV|*7uNc)&~uh@xh`O54k$g2j&2FlMj>g4 z+*MBGRxbd^aiw(Sz@yjx2znd%gL=m!&S`KAC$+C;j3asMeMH{`gYcjD zLRUp`2Z{ixF>=A{k6z^bh!ppoa=sm$=Yr6bE7|WO3hJAbxlK~nQ1_?H&@ek;MvBu2 zQ9^(@&;qiT9o4yksZ`kL0PPyL0xA#DR+}%+&`;sW@*)VmFblP&D@t(2@R)#ZWI^_4 zX*6N*wmh>Tho{KSmB5+Qm&X&zEIsa>fJq5%nKT2oz$L&f5>;x3xwqJJgU(-1f+l+> z&u>d`X&}&M!~GLL&nU7ImDNJI5Mq9{*vx)SVhzsotrMcbfSwW` z*Jk#d`x;^plWE|)Vero@7n1!(KSU#~i58!XxED}p8yUO>QBFY_IMdYY@#v~0XIw?T ze0`I0$7tEeeg4+>1^Z~1HJk@eI3&gp{T43)<8V?v%6^SWJz_o9ScuS4>d_qKLeeAz zS`+FgM5RKS@Eq^RJT2PnY-f@dANRDjn|fNu+DpOR&3Dk*517ZIL_zNKhQJj`+Z72g z@wIhYTsCT<3A*x-!k~s*U=|lxj+i!6THH5LBEy!7Zt#9X?X5^mfDCU`dfWrlkK*L9 z97|Ki9EDv3-TJDq_Cvsx-_zVM@(|CMP2dB$ijiB_0| zPCFE#kL@7;$Y~CPn@>;1QpYR%t^8yMDh3XX#)0*WK{l+z-66i1OK(zgC7@EAlzd#nd}J?uWF z@YtyFi)0LWNrVjBhhc_m(0hE-TqKCmAQ=0hEl{rmGD=t>*Rr~0^gRew2W;=6C z@$2XE-(Jo2OE;2~>e`iP2BBI{V_4oYemt>SKe_p|n(Ds39)(SY^Y>@5LQ|@=?JFn- zbRiG5B-;#fXe;=^C_r`2*%`1s$0*2*fGZ*YRb5z)*mMln>LN7q>(QKET1m&yg=O42 zXH@f38*7<#VS0f8AnBqP*Tf#^Y?M3q@Ig4-{jj4rdri z=?8S!kvBA5zo%a#|Kl*wPE34iR3CT@FfEX3y=70>66}f1{DA%=?QA>hRa20ZzE68P zmV~?DF@GAfX9)b)m!V#7D1aAM&C@d%HGSRo$m&~~s)JAqSQ?yWwfWx(n4LhJx)-b= zI9*5cAkjxZc0JBIjV%TWQnUt=#a7vIlT9}s@nf75AzG~U?RGzu?V|#%@GhGZL|%@! zPMb~?`c~~F#1*BN9m0r6>1(9oSrJ09%swc)L${CYe6nvqgXTB1)AM$|zeC3^3D*r6 z^3A1VK~~bC33FA!X)w2Phpz|!kvMT=rB7wqE%+oc;;K; zcgqUe0x7`$ADerF*Wu9Z>_+&*vgoQke-}ZbYbjcfd&ENP7qV|%3o90!DhwkjS6O4l zxZdSB!-;ijfw4lEQT_Ip7(-2qqpznry*ls#kbsWaz;-xZbs-j&!olJccHO5jcKh?J_Zz^-#w ziVLjsBT$OmcL$hC&V<)|+?d&#maY#e~}Oal~yL3AwI&TKkLm})dxSxI=1Eg!E?B6!28KRMET zqfedP6#-ZvmjC8n4Ib=}xyv)r?Oi6cNzWN$yb92;UF5?m%IWS3KmAfPKnH23uROpYWBAfX~`YVnFW4SP5w~Gswz5xHXM|O>Qtsqr(R9nFPj;CVMOBl z`IFl!@wTAZ``9WB7uK`cbOx|%UKStm#%AA~jlxJX5eD{D=lx0!py9`Q9 z1+YDe!(ni{u|sp*GGJ1G1u00K1abOgE)eAD+*c6p3&Ha1M5-nP5Ik-JpjmB0{-4Ea zQe4GS7FvlI#E`-YF8D8IG>S_45Aax)zIPit!_@M6 zlgq-1Q+ObkGCQxn7si=cvZs!J9R!&Luo7cngzSNL-eh<$HO#|p;l5oOfUQd;-Qg_7 z@?LATx19PTMMu>Gr1Y$dxCypZM;JXI4x*FcBfVps^exja(7n%df;f9ZW2FZ7N?_N= z{w%b-7n(8hBEp~aG9rjKn%lK-ISaYm^Ns=xA=Gvq03gYHC$1beOm=gO4xr@*@E2_t zn5MK&ExbP4sM7>zRSe-s25u)?F_PE=pDa~07D;#mK&EsSJj=SvtX|fvUe5!__MND8 z%^z&R(UjQUcW`UW2kW%T_mY7txSIi;T5Lltc!H)UrlG`+`u0I%j0fUf>nT?C6Jv~P zf4O0mok^N$D9h*p;L=FW#jwxowmVM(?EX=fR7LrgxL2kEcsl%n?=wY&W*x~;0GB3l zmHCt&)IFE0^@A=92e#PY#Lm0Uj`_f!Y>&7A7*?G{e(q7}K5ztmLgi!l{nP(2T$;Jj>2yPd` z@40K?<>Acs`!dx*cKBVXbU=GbldX@-8`clBo)xU2B}boqhJ^A6SfsyzziWk$#2-JmmY zJOJDb$A0bvZ7P9xmO+QMUVmMj=VSX}o=rb#G*7ly32 zL(tPuE}3s+R4x<(?%gP5kqI+0b9Z0?TWD^MbvO%Xa2_WGQLpDKCe2Y}s}6^H_DkUE zs_t^+`~XS16Y;-t$rL2uSgPez3`HSr6}=x4g#Uw1!zZ&gS|qj(Q5v}M!Ga-IqQA!qimv19z^atx*W2u@i(0fzZK@$|oNo+h?hxRrq;>3?LlIOh4c6R{-p9L5ZJv zCNhfAf|qi-MsdUdVW8UtZ(lkBo>sjMyAj$h1!!CM1rC{?B<498nuW=4O_Z?Zy@uVJ z$67@9Y;Iy0<1dT~w=AiS8L7hohyrw3QO)S#H-!&*%_Q&$Y7e2%Idh%>oWN8FC&#q* z=)fe@@*yo&6_Sc{755~0f4C}Di){H_iKzRRdZ6Bt8m0Yg1O`CbfU9SBjB{l&8K5^4 z3DjFKhAgi?$BZqrO$pQK1vFUO$WYc0G@xhB$U(YfUpo{qC`6bO5_QkRd&Tx<(h;dy zxm0U_PB0n-I^%sxOxH#5^m8xMF2LB?8-Cqc*uS+?Enra(b_=1kDVH| zmB*gjBPu#CY|#IRcEwD*KB0N;b>A~@+|-Ve^^ZhTTx14csF9bRn0_X=Hi7Da^m={A3a3C~}%I@_|sR0d8=K#aD7}6033E%bp)`AMo zYX!=$VTLyKSZiJ(WVB0cudyctP}OQvT${wI0OSc0lZy?T(!imyXAJrjsA@em6p81# z0e$*jFrlHOkY%M>9N?r6-C4gYKLDtYgq#rWzzGP8iIOK60`A7&rP06Qgr;|!MtzjY zfFnRETms5TS9q8bYuAKw$Gi<^2Q(4}bwAQBi<*UMo0Rw;36H=7{Z^nLHT5rWF?B<> z>~v&9TNS0G%SeKs7dQc{VBsG7!1j zd7+2ewv$tx9|t)H9#y{pyI*Vk=4H#+S?3;WJ#xptM!bkKDuIp8tHP3}2^GR{ELgBe;5P3H*IyZ=9*ec|jiU0Nl z>J%ak2m0`fq3BQra>TO2ljw*#_hq1yHT67R;~M|OaG=7;Tf>-B@h2;yJM}+wW!W^! z71s#~^=;|Feu-aA$NwK) zZygoq)1_+%55Xb9-QC?K1R5u}ySuw5Ap~#SCAhmb?lczMU4ld7e)>0azHjE8dCx!e zqSv#!*Q(xCwQJXXUwa`6Dwtg$;xY^K?ttpRFnk4elQfT5970nNt6!a?MTT=F+$0Xt zU3Ql#t9=g%ifwQXAaWVJxQ}8LVvC^knklmF=GA|^DCs_`rXgp%8L2X1qA`RL$pW8V zcu4zZhv{!LpxIQu&^#?~8Xgo2v0`hOaU+w78)g=P;0ZM=ES4zV%b7)itovXeD@;|_ z!@i71s@6cMKdc7)f(w}tUE-|-zUj7S39Yd!6YoEjC&McmRAU;fkJeGpI@jnN**XN5*U?8PaOL!Om^}L3Mla={`#3+26;buA`7TjuR+|2v%K$7$0CcL#OC{v4Bb8
    D7X2?d_(*%aW?{eI24)tQL|`bX1ZaStw>O=%v7S8 zdDx0V5Ilmjp$90amE2?^1AIMJoOY1VElF}D9qyU@8mBfd>?y#u{{THYuI4Cq$F#U6 z@(Usk8u(CDdlSJO5XqP))>@zjdgpO0+`zsDf~GV-;NELL{;s}9JFEZk{l)^_xVkpl zY;bAu2*ZsZT4A&=G?j>Iv+eiqZ}#bj&7l&7=KGm*+0c_`FDQNQhH^jnc93H}tcj3- zhb>WLQd>m^%7iy^lYxeuPVaA{wY8yEN6ZIg~aDCiDd^qAMRq2q5YqY zp9oENfv009{|SouuKb%^xVeOZ*d|lzAb7%`a3{<=jn0UO&1^cY+}_Uy;u>ujGkmO_ zp$MVe@S$PjUM3IP96~&up5W~mHp|=>evr$^mC2w~#yfAQnXwAXRE`R% zg{oI~qqW(q(NKmW$gXULiwV@8=vO%I1!8$UE;+-gAiZQhjWPtPR(Nb~c|CSgGP`^F zZGx0p4>90!eP4$rHlH*&vFpFFJJ(POfWa%dUeIn{tYG+-G#ymPuQZS!?jpv#N=;~G zh>2k;!-Y7w*n)wh=QFy9-nT+ODJBO^0^^Dej<_cYiVtJm{r(z&Ad9gmC?~3PbvJ+T zIcW{DF8GxRJD>)SfN!*HuGcbcB9O$>ROnOX3qBADuZnTny+e!uXoic&c4hO|I2!~J zx7&&49RcgV#4BM0C9){4NE+!!-)3hFCe9-*I-51^d59_J@j>j0O;k}&U zV0<6HA~8X6sZ=NQvFB;pq1kf9*J6FWOuks{zgPd*h?nJ*#~PM8#~7-hcY)I+OjnW* zqi)$dP{zifu=#ZEpUpgp9pR&BSENfyDZh9FDEwj;?+Ge3e~I7~_+qr&4=PC!P-R    i+JyKQQPC>n7-tn=h-u5(XoCW1!92Q&~E)zsPDMo=lPB$91r%bTr z#37Y>%|#pc(HpYR=EUVQx2G!^uo35%dHm18^6?i$lrh@DnQkijVcsn2k!psLRt^iRJ3UTH+wD>uRauk z2N&vcZs3tfpx0Cz(TmC2ce1A`fe%jC zR@%%{VUzKAFWcfqk7~8rEyYk7!B{Cow3oj&=AmWz%2Z!F4(Ua-7;=AP23?91i-E`B_Gd z@zNCr2{*g7H~PW}Z&Epa==*m+JP$A&AC$=<#P@uToARvC#tQ!NK~8fQcN14Z{F??{ z-Q~jW?Kl1BH<@%o%R`>_qO6chU z1aQ_DE{P5FNQC1Y4p0)0gTQx^Bj|KB>B)rdy4(0WBJ`qDP-cr~(;k8+yJH}J*|!=TMzu$vF~-ep`kM%GN!YS}mDUD91wO3M&$S1+b6cB2g`%F-SL9%fbe=KjJw-eQ=Y)VOFUi?GI2-*589} zBWv!VA}AqmC_;KiVGF~|pmy$j0IHa1f{MZ9I!62U3-=K?tshH--Pw63K-%cc&(ASp z#4ol5;r&Owl!Kbg!^OPJV?n;U1b%~>u7<{4KBB0&V`Sf;`fvVHxb>z+wN`_h?+V^2 zb%qU>`3sNx`a)2O6qd}TiM@({n=|nzlzl4sfLn``wD5q0iOBV8y+6ELw+fz?FN1K? z65%8X^G=J2Br91>q7T-~ogQxM_+T>B+d%%*8UhV}>0F8K@5VDlich!;@6oynp}^2X z#UO|EID>Z2zRu#-UAInb`_UeIJ5kEk2N#|MGJZ#4Q?ov z0bS6qw{Z@*pL1QtTa-^^V_)4!eTW7-#2z2Qm`@_ye(V{@8RmLH2`XHi0#LS~35*i- zdWCPWqSR*;%5a1tCr!tdaU-p&d1jf%d4`W$UOAx34O8{?y?)rWdxP4)(k4O7_{T5U z(x-{{Mt}-5XSfQ$zRf+sjBc4c~9K_mwTJ4Gtv^VpHftTmqy+pEF@ zrRpyiXkAeEde>O`zSX?VEIQ3gKjK zy34I*c7bxPT235m?#|1%*E@%K=j*ASr>lQ-$x#kfCmCUPB#fawmk*l*kDJrkE{J0L zw+cb$GtC7uIji%+ESX|pZkBaC{42q1u0I$99d2ce&Cbe8d}3hhGDk7pbGRGPb%m8$ zJLR^cx|wMKIN5`5C;WI(jZFcG#Miy;?Y6qGQdundjkD{{ zegB6dQjwWbCwZ3p?WePpHfB$({m0LY<(&DDIC zjZEMWgnK3FfMiXWMOZQG#hs+ZMbY>EviMQ4wBa9Sa3OiOQzCTL`}f@=y16ljF<6w` z%^uR8s}`kV_(e(l?`sdwoPsD$mup!nxBdheUZ<~Ak*r)Y&5G5{=p|RLKvKdYJ|qbZ1{LQeo^x3$4G^Ile#JD!xx`C0caIw7bf&sj)fB z@oX5^Ia-`}Hot2-A!@VLBZfWc*j+#^MzgzmQq5VK>$d}PL~4=(`CMhjFNej>uB?Vvi(wupk38S#6sj39uEnqq2Ny$~u{JYjI|B#5|-kQ^!9UjD( zs<$@hsBqS_zs#A)(I z+(RlT?|HwulZwQ35o@WG#|E5SJY)277zDUm_3*2IXcOx447-EftT@Lv#)-ddw1WuQ z-a1Y_t`nY^s6kyecdl-{k=6cxz|(0~IXSP-%7N8eI?awRomyV(cimy=N@6!LMhb5i zJzcWR{!bY;2J5ZnnO;l0ZS`9EaQ-v7ryVhEx8rM1>U^TpHOL^=fS$YJr?XZj5%0H- zX#EpQbbq@#G46ocjbb-87DGN%w|lB^nxU{TV*9V=jP$v7P0P-Wyn4J^c8sv)L?Mk2 zDb;?SXSVaVCL(KDcX@myuCiC@StdS5p#N9gMui4rtWVc>@&Ae5^El=!KqJDi?<``vHTlDq6hhMKGAR)95#cSZEN}D_p`}w;p`ex9z=gSn$ds$sQhNO+;A9t{mj%^ zz2(H~P#@(s(bdx0`I79!mof5F2c(`I_FLOaZ&79ak(=$$fOgBt192O15$kVn|=WF5+D z`j2sDmw#U|Nd$gyLWYQxzjQ8H9;bt9K`uK#*44lcI7iyhu>Efhi2jSGJ^1aN-!EdE zRgE2RFC^&K6)A@@42G@nCy?j3^*%H)*?GBE%b0OvZDlraAK5$H&*;n+eT^lvUUc0(h>`}XTohC$Y7yF>Shb9$`9#`q6p%ngz>+`pr zx7kIX9lk1Mz3f27jy&=(LOsIDEqE4Va;A#GPsOygCfuv*Q zwskO}51Q2|utA$NOrsbHdhC7WOBw8b?w?O$ynVrLl6;q02Ff_4A4M+~IYHcALsNJij7+f)EJj9Pbd( zYwV?xqnfW<;Z#zB2Ebq>Y6k*MzNCZt!j^ubBV+6lQkCq9w!8A}1H5;=9`*kG2RsBq zfn{ai-!6+ctdnBJUZV89Ud)%8Y#J+&M)Xt-SsBP(WDLXro^+0ypRS<(L-4)_({4z$ zSm`mK`wV_v|#Ut8z$P==GR_GGciuxQn_*t{?Yc()NKE%@d0h?%ko6_U8)(-YG0 zy1~kBm_T(Iqu=f#GGyT(h=xxgllEAXMbqPI_Rwooj~oo(+~9XeR_NMcf-Hl(WQ;=1 zFQ2{459ZMzf7Qei;>~F3M?@@Fqsuy3Sr`yKMHRz*qnY;%2iM}gw3rECe*{xpNJ|DE z&>ZZM;sx1RXZ3qD2)ZgyJd91)oRutE{jXt%{sDFI8Y z|C5+XaX5ApLWqWNCy36qY&qngA{$R>WOhAcoG77p%)Z!}{5rv(zSAK$+O@Ba;DYbN+A`r0uaSd=;?IsM7w z0<&U6U?kviBGX0jXE?_4Q0|m0^7*XHbga|R?=BDWuX<+;fW7&@mwb#7e)Kl6apsBu z(GP6f?2S3Y;}eNXZ}$nlpS=F!vp&BL?}){P0owPXyE@(hz4FIEPZa%IU&G^#X~$DD z5|A?@0_!{nC@*iWw2n~_opHfu#2W_azt2UUP`_z; zBz^1=OT)qD%)v`s&6JJnzlJk=$L<>y*k6GO!h`Bie&Gu}Qwj3V|1gJlU9)E8tQ57qmF==^gd zEyn8*AW78$NS7ojtjHqfJxESc6o%>>biivBAt@**b_LPrUQZb;yy!5MvJCvs5$c9o zvz)Mj3a>k4Z}c=YG}xr1tl{V+&~EgBI-PeN=cP0sgA)F8{{OcT{lDYu5G~%m)faAb ziN%1_L0V(<9_^eNhGI+ZU4nR31$}(zn0ef!2KGt-|IZn@5#d%OeD;E5osUzLlm!7u z5i!wW0sRDkA#*Q_!kSX??S8+kcG{9UK9;?2N~1Cme#$Z&_2I3f*s+m2+4oO9GcEb~ z#GO-(kNIEIY>lz|i&c^@{e1i+Ui6A=jUVY}ntCr=3pkg=$T0&LwWQerj?320oHX-_ zbL>~XK0c**?#Q$x<^;n!^_U8TL64-cpHlOs`j zR`2K*#zXB0Fpk^*nd-He7rkl>&mz0$aFYwdR+j@C7<8Abq@hHm6YvGjvb}fY8K6m+ z;dQkCyOe98)AFEE(j79@8)!Y?OY_KDn!J&w`c(B7kx)O zp7s@gC)Ce??0|Q9OxcvRr~f5XXJy`d`Opj4qvV<-4I*zT#dia$A%WWu4t%ZBev{fU zR#!>spCyw;ub2wl2@(bsg{FPxyRtEwBAY+xAK@o94TOx>@BSF!1Jj*%(L`h{&@Y`` z@975cnLg;QLFS#LHjl)+v$QSyg%^an=*~o(UpiZp@oP_Fq5}Ty4s4AAKQWrKoZIM0 zE@goH%N#XPM3#M_xNVtGAb=Zd7xF&hNbvpWUWc|@GPwtY=SJ!4r>fo@oq>>+-}|mc zhm^*X;~S~eo=Fa**@F){UG)_lFq_O?dm*~`F0I8y%dXYGFRhg0E|jJ_Td+3t&l+ST z(|PfQnk%cdxcr0$PS*Z2A=qS;2tIHSH@FxYd2V)+6o!7sv4K>rFYMOJLYyDQ`Pt*W?A!Y5M>qW`hf{OiK=qZJ~=%HYhf zlBIMCCn55|m{Y#!C|#F)TN@KOI z|IE74ui8Cu9AFl`H@J7x!7=BTYKn++&q?8IbN-}-U4!uRp%iCv|nsPx?Dwb zoy|}@gwnWF>Z>Ncqa_VI7kn_Quo60ppgxH=D}|grf5ImGNZ%PK3Yij_>7QIE?$Jwj z!MsC|=NoPtZ*Sl?Bj&A%T@?)g!6V+=82bLqCf6H; zXT@Bl>kNB=;j8DFK!y1O+HWMVOyq)`i%XjSDbvjH6WnV0DsAR&Lc)(WcF&uY#>)F8 z8~KpBp#KrE|83*cw}kJ^?T1*L6>3<$*Z%@9i;atmJDL}UM8jMWc7K20P~r(p*i*TM zzB|$_5!S!4(G~L19)MuaN5!OtP7Fx?`;&dC^Een4zE;6B;lo0DI$>!=MRI69_8~D5 z%`3T;eC`)bY*0R-IZd+Hudjt18iN{hbJG;uvW{7Tn%g`1iPtRU6~NgUooy6JK3+!R zGDD16Rf^*2dX=1N_g@i-f{AM#=OrgX&I&)!&S=(fwyCLyjbL8_3K75ADLLkqMf|1` zlG6^yq=_d;z>qySS%q~dRPVVc6dwt&%5CXJ9)gvC9)j{q$7X_ucH zV6ev{HACl{@h|(OPNUZiH4K>F?=i>16OC^nkZw;b4U>aCJe#Myo)929adPE4BTRP% z9Q$(9Rq!qzE_f40#Jqn~w7UXvZw02Bat&AAMU8?q%%OMDn~UPcz3AR_14SahN_;yU z9tpr;sw9xa&?9kC8jCuEKLNAc`9G7S|B3_WG)#8W2TmB9IeoqNahXvOF|Y!92%OVz znKrZrkE-+rL=uvLiMKfM@mO-Vyt)BB)uiO?0BuirEFYwgZEyZpIB_iqa^zJTb$WmW zddvwQabbvOnI|}ujy!GL`oT%u-c)L1`e0~!m{63^HVwx1*jb8RJ#VD(I zmpKCbr|${;lOkYm!wnChVjNr$;(WHzo)Ja7tkra~SPg%?y_ZqTETLJo!TR##o`SY= zJ4zS10C>9X`Ktbvv00gjjq1m3d{D@E(kTK%9k^0*R{uOX?avPILcVK`<7OLB0h7bY+2qOXbneMr9j_F#2c&HQzIT7~ zZ4Y^fJV(DY3_aT%F3F9mxdc$s7*r9>&j6mz@pyE5 zW!NJe5+moQtQ@}z6^#y7`kCygQi5}JX%9Q!rjQ-{J~>~*>13v5u^H@`?pFT<6T$PQ zBedqQ7)dN`Nj(lTIR#emy`vOrO34Jl9)_Q~a($ex9(&ck3#XhN;U6^QtAQ~?n120_ zbKU>W>!7jlFF{c9@@}zn_~-iw#2y9C*0N;ylAo~|jgFs)$z+8e=T{y=#lE|?s3+A_ zN<{VB5+wFT)aa)Azo=+1hIezCE_70H28>!anvx4V&;Ir*r@UJd>!K05C7qol>66@j zie3B7xW3VOUv#n_^m#;XaBOijZ`k4`Qp+Cbj9IVjf9i?ZrXeT$`1sg6ZNd%llcN|O zRZez|AvxFX!t(kSG$!WEW;Xx=O;h&%TdMYW-l!V zzur^|PLmT%pP(Mw#_3c+mx9@!;K4At&9%Ssj)oNP=d5XBo6m&bbMg@;e+pqWCHP>D zeWflmWAYoZfCa~_ShMxRXRga)yU!$oUkW`*W=E;hhGK}xcm6c7sdrJQU`XC5B0#*g zm7i~-V{;A9=wpLCk{Qc_?otF?uf5B3P5TFafD<-AdZMrHB8l5{dqW!m;+mBk6ndVt zJgfZ1LTlSXr5*#oBt2@E1&KyT%Uu&upkeiPS=Ng`~P&W86DH6I zrf}v-*ZFaLBoR(1^t?!b7!vSmc^L^>1)pgEmdmc}v}HEs<;RICOsouQlFb+&yE5^s z?GEs1ipz5ai>lp*V)7o9>eBZ}Hq7SheRt3qenj^Lz1e*Dr=Tri-n#G*Ig^ zV=idYUAx8f@J`*Uz?@1fvWleHRQ62r4DT3A5tsJv zyNc;X2Meh?5+$q*u#8IS>^mk^8F`$wzL8|8jhYh5Jg$4s;48Cu}ii-DJVO_4z#!4k3X+&AHC>#V+jl%Zyte-jN=pWuhD zoLOmOQs}?Akuk*!k!$r_Vh_dm8_1ciRW;EUxit>Nru)z?Yw?)GcnQo0;U-Ubp_ugX`d62wE9Y_o$4AqFI`9j7f7^a$_ zS*F@2zNFcPrTalG$0R2)*Y*>D;0F!YPN2~M&ED7O8-v`qB5Yxl^{Iw}+@t3Dviyg> z&E@1OGGwdv?5xDNOE=gdsqUwNpia8*m?8$i$?;A(*evfGErlrd?WYZ2=b}|UySi1_ z?*hnX+p6z@Ie`lb*BeDS^>%Ok?G7zuTgqk>9BT}MuzWBd*lo691k%z=6G(x>Ot7^% z@4jDSWVaX%#u6~w@tsKuDDamwu5>X)ybG$anS*$hY-~Jv(*#Z#i0y0DjW?AO9eg+m z_Lt0s9b%Yt61Hj~>w6x1X{c+%9dfN)7k4q*@T}F9|F0b5|KD>ONMHqVd-=0=$Ya9w zDTx=nvsIl%hLnkAT!aT)=F)t#^KMk@ssx2A$6fG_$~;`YD%mONQ8%}Ce$Wr=vuWt8 zOipR({k6w6&C%2h@AXr{N`DtnpJzgjzHV5jmQc_@PXu?xy9LTX8`8vwJ&+1UVjjWG zq~#`}O9eAl0W*QN$TwHhfRi$3cB_vXq3VMt4mS@C#1O%a#tVek_=bE%SUS7*mt>c+ zUlv%|HL|qlV&1TxSmaKB*1HZ^|3qv*-u%)c+upOoPO1qAn4mNeEeXOPh+6RVexBw_ z^J?HvBc5w*?uMA&`sIwerSiv)Ek-eznXi^eaQdAUL+*ltD(F5d{TSLwgx{Z@)7x$I z!aX#1qv(Obj#>z)cT8+0pSQ-7xVfgfTZ5(%x#B?@lJ&=dsd2FzS^YR`-izi1CJ@kp zp|3muqVw0v)wb0BFF4gN1mvw{w3a@$(05?zGXPkqD(CC5TbMX6< zE2<~fbvk;uWIDgoYLiTa$9f|XZ%qntFu-rH9Epn#WTy8P=v6EHRJ^3S;eMUrNi1|r ztUAEeoa{H2xfpj#td#F6LM&%xDqC$i*blfN{igVSr_FEwv(7ueNR117+V#5)m`K!; zRzJ^UX19atS>Bco{)dg#SS^ND($7vdvwfZ=m~@Vr!toB6e!l8m;dNUoEPj3KVf~yD z<990A4$h`u9F>Fmbv0G@zS*8@y@w(7i(fqGi~!I8Slx0u51K~GBo8=(c<2_SRVob| z8Vbljm;I6WqL)!?5y{{KKE$kI7IKNb z;u=3HCvEUfVemIK@92fiDbs_x%|8XM=7Kl8_pOI>q@>x{D`wx!3r|wYM(cdLCvv6M z$>si59)-a01NgiPLcP(WyQ!{K_zs{S`=zIEs}euXHSFl3@smY*%pw6QP8xEI+e>J+Rf&WkD)eNcu6^7X3 zKZbxFV=?6j)Z6&qLoxEmv<{KKBBYm8XzcXrhT>Ok7S5u8jT+<*vW)H11Y6&{!3z#4 zaN!Ai?Hes>FHr^swZlj#3nA*`U*9(6?rD*b5dMx766XXY#@QEB$93g29~boDkkC>W z*aRh1CEX z0@cXJaubvu9BPeekeQ4I_lgApu*N=|<4;-GC0G1&m2?jOCE1RZj&f$Pw@j=Lhy$4% z>?-1NEA?WfVnp-P@R6(j?Nf`Y_;l0(-=iQGM&{oALSU?Mb`qak zMJvYl%|VRVNpSqVUk_d^+5tn<{46*iHNh5wZ$Iwjqvr7O(ze+15Sr5;~&WkCV_;&*-5O#2Lvhs{B3qZBR@u|WO#Y9qFn$D0H!sxSIA zM-2_!00o6_G+*PldENg`p(H{J9wlvZD*cWAt3%_^q7#EgrKq#tcy_Kz>B_kc$>25pf>R?~&(icqvsE4cE zw>L*46rb{TwT|!n=cPb;Ir^?I^C?f;$y0Dd=Ed@j%+sx5IqtC+;WyI31$$Z_l(DJW zf5zh+0wy16e1K7Df&>Vz+`%765(gn}?)u#og7NR%lAB?!_hAZ67%D zLI249$1bIp#78PpGHrq};tbJTN39HwKepiMxuHp$mCk3)_xUo-B1lU7-67?|^Mgviw8kZp(KvAuU2l!MJ& zDJvSh3H$71w{E}VX`;vTHv!4njO?S-_76~0crppwi(U3JGQ6exXPGokNBm*2OnI!x z>T09D+a2DcsRdxBwjxrSA!E7)XaNA z5mLS?O6dSAgC1vcE}rxm!ZFB_p(Hp-IeB@a`R08oTidd+G_K;jVXjGGDkyl%rtc1X z83KQ)9Q3G06Y=(ZAO@Z;l+UP4)_%K;4NCMo@6gh$)Gd5@g8s)GEBaWnyT8w?cjnIo zOi0*kTrd=zs1w4^W0mHtC@9qXa0+PX6`fJjkfVaPW3Q=$w0(ikC^NYWDo_ z@DOsp6N|F(zgGSf6d1#;i;{Qx|>D&XbRuJVPAuxVb9PH~JCo z-z(V(!%=T21l3f5)w`~NgQ_WCOsCYL0dcLfIInW> zEzZxYzNxjQyPS*&b7>87wC$)L^Qo?^jIW7_Cq&vgh{jojtmB(>JeplYbQE9 zW6G1HGys@FO^1W5=2chh!pur}cY-_=k+P>h6s`F?Ah#^pYY8)baBr7};v}0eU=AOj z|Ee8ls8XPo*D>tW=E-p=0w)ak!0*ytJm|plIsrO!sduDn4f0IB%mUjHHO|zmR)Sc~ z0-KF~47Rk7UcN2$2TuLk>1i)MYE2x%oBKokyR^*Gwv5cmu0~nw0}Lq{(*n(CCPwlI z2^a0~IF1Ytv71)eIFm*-smvmukJ3vf&DHff>o}{Q6GTBwM#lE`kn_d>1Cu#5 zn>0E)T2NDii4)^#ZyjluxmPii!?&XHcDXZTvDN$C^|-QGPDLdyj`(ycPbxsMs`=!^ zUgV%wl#au5z2D8WxNKeok&bKwk42Xn+TA&cF311tdf=0ThSP@ojN+LNp=cLmlnF{^ z%&``|jgDYE>UueKlB?nLeEq@y%eHB9!z1v3my$LrCBQ`CWT)0_X!m!lC=kkNmoeMz zocNrdeoRG4c`fuNu=35pIl$b!U>)hKAYmc(}Np zN-yesR}r*>C(jc{PRy>gZ2dnR^f>?JvZAF4Ym=uT((Hj59i+L>LtP!2mU;QhE#S~F zbce+-tX{!who))ZSo_y=y8KwZ*%12SpWor4FGJ_iIMTMHr>qY4^DRmTendE6Yg{vV zCnIS06(3AqUYgWF#Ihc$Ls!qZ1NfEutk^o`);)9r4$n~L)VpMK#xGIX*uFEKtKx)?-7p93rFvp&RCsyTJ&dD1v0o>ZW&U4(_l;&$Q&a3jG1ZD}k^ zKEJy3Q>ElUi`%O*+vpeN!G2iY7iX0DqR|6a4?t6-iV zna};7;@#@Ww;*6n%5RIt`0{(QCjbyby^9!J`p)Hqf;!=2@z0TyB@vsQ;%)4JZ_5|5|Vi9oyXI8d^v8fXOzJ&cN^8W=+tOwC8(m#o58^D zr@KB^l&(niTcuQX30X~`d2~cXJk(mic&YG-?Nf!Y7ke!kbsV7o_H0eBYchjRd9KyJ zH~2W{B8=?413}Ak7>4LnU>x!NoK zQnI2OUK;_nLcL9`20j6wO|zdC3zyyb1M0p0r4AKRjsg>7ckhaPr@!-|7zv~);sc?s z^1It1yvN<6ZgP`o2WZK>UdV`cp6KOm4o?1a(0g&t;1zF7azLM$#=%uqJU040SXpI-byg z5>hfFbXV)M(f-F-7-jjX{ch?CbToki)>cF!Pw4Lii0QA^1ErOSMWSvU#l@VaL+)y+ zkjxK5eHKeMkAG!FdT)4xPk}iZEKbia2pas@%K`1pOzRTl6UA$u)$V}55rLX^84(%t z^g3iDD>~0`uz8*_adTkNKO~KQ)q&(gLb69AJ1V+XBb8pFxv7asNyEitlS!*53avYx z)plK!SbQTk*so@EO7SI&{AqztFPu&j<>Z-%&1=sgGri+)t(H5TLwF;q>jFm~_nA7$ z6U`+3_ui?4Glyf3BS*_k?B0bU=J3>_cDfnZ&9r$CSv>qog1i)Ge*;cv9c$NniXgV- z`9f0fdi>J_c5qS0b`mRcZ{R8g-Hp1(F?88#<{TncEPC&W+?^+gnDi%c$d$hckHlqe zDIx@VC2RG(d96K0bK1>U`d)=5V-WE(thrucPC9n_gmzk|BhM`ugb zZu|%C9jY-=N&S+0^lOG#OTcl#)!hQii*dWr!4PuSqSy{am^7qg*rPE=LIlxSuX3S_`F0KJ?G~I zI`p5Cv6&Jub(CbttFsjs7V=c=`=sopzCu#EhM}k8y{&LE+_JFNEI=;s{p-`lTh%un zjWKGM2yli|XXyed^#Z_hCNym28#VuvblpGSklfP3zxKuc4*G1T|EZmk8gUkRo7Xuj zH05h{e^RLx4t)0Rh!7t@z*#Yg`sY}p!J+u|)vN0%3;VJnRui8(z4hEBLp4BgI@O$K z#P5~2CZ}AhdY%ZT0b!}$D%LR;iOgRm!p89q&&XfZi9N1lzfpvKF8g zv2eGW#qRqsW}8f*HQaxRYVUKrrSHIM83LEn| zwa^iMGx+vBdI0TP$hGdGJ@Y#l1xCLo&R0!5r zT@AWc8XivAQ488^Ozoz|2xDLA*pt=RHZ>0L)kqWpmwLQhZ?X%}xZ|wt`1%V0V6@tQk4cWV zy?NYUm<*DYjH@nPPdw5`A@!rgH09JeUktnY+R{?bU)4dOH|@xB*@)lc(lo{sn}LDh zXhR_qMG0LNJMotZW3~?6Df9NuPGc2^*`RgiS?whkKo`47-G1gQ%;SP7*1b$i<<@~hu zk^ZcEHNY4?0S2A-E+?&{9<8B1SF+2_;Gy7c(xRKdDOX8Z(R8NAMZm=-G*zzcyq~KM zEG*mW40tNj_@Qb0_OG(|DgeB9^eBh%PX8W=^yT#~CwXnt1nP@@OFH*IK>pOsFFYY& z;mo3RN&Lm=fZ4ONW!XkIb@*7{kVx$983j}JnLv2d@V()Bu1p*)bmddg^JX-3C#jc2TH6VE1QjjgPW6CYI&8 zG;yVLu_Na}H&l!2*I~WhEyCC1#ZzB``@N270##O(vRsPi0VwaW8<%trr=2$059hq% zuxl#%{?Y8)MA)yiEH?&rt6+A6Y0%^>fg=r7sobZ$07X$mPC)==ejbpOG1zs6$Jhie zyC!Netpz~4&aH;+dmT?fH7Kd-FPqds9bFna0Uk;0SM(t-bkdx(#O_ugc6W2$p)Lz= zO>uqLf@`OKnFW-DyB3txh$|Im&Ek1&8wMbirTbjpGtm1Y-r`6Ar|M&M4Qp7j;Z}VB z>}CrtWeXOf(C$eoz7M?^xeZDw#EV{01bouIaCpmhaqh}uNo6++p}ECL?~zYoOL}d_ z|I{l733%QIuRdLv;mewC^T++AI2Dq$K}O7~fyuh&X0(rGI4b_t4%q{ z-90?<4)j89#ET>qE-n}HF83w5Lqr6(x4;1N*P%#pOyZ;&70wOk7i|rECm98)aP)bz z@Ne%T?8;&yf64D=w>zb*`Q1uA_!B-^fBZ>877=?FJk5@lfQcw+;YC=xS~2=p0h1Yr zE~+o$I+(E(<->MVdcefzH-8D!EZjBS%-GaNj1b25D zchA?)`|fAUIr|&uXN}P{YIQBCwdTCy;q!3qX zm|L(}%`t+0u%{xFc;$@2LjXfEMzu{luY{u$)=3VNxB+=5Ki(5o*_e$mHLT=>Svp@Q`ZZ*v4Yz{FSJ6; z^^O3>y}Z@y&Q{mSlQ#GliYUMSK3765bB#;UXp_86+QcjgJBMZ1{4ejzXa%9m=7jmt zUtd=X*4tWj6G`4Y)?%U)-c2iTOhbDlqkZ^s+$6onj|Cc}{;ff0Sq+3iq0H8H| z$BYP@h1Bz7JrDp#gcM{$UdHNbw+`oW&i8H$&ZKh#(=uE{)Cp=>Q55qsdigrUlTQEZ z)JJ@_`PZKZ8UkL|9NA`%ukhcm1?C!sy-PbB^~&ATFR;K>vMVAyRoh)`|loadI13XFi zPc*hC#~q8L+|Cx>iEh6`ULBJboPG?%nWWz!Yb^ko*sWG+hl%|7B}Wey(JA%h!4I^@ zT4@g%A`RpyNtx925n4Gxx+);n!gBU=IqPB*0N@EY%!_^FC8NOZ=QsP~WB?DWda za&&wnz

    BbWvAQ%BF8{_y`laB7b?gnXUIW`p^}2e}OeVFKKx4?eTg7mGTdN59>6m zfE-+7*agdKAuf3UGZxks6(658UthnlsXA?_V&l!(yawp36Xsi8KNM!wfJM$NpHU=k zZ2>9- zAFbB6a_p%l?4bmn{0;DX+2?M1pjwqe{Gzev)SC}R#DDoavP_X15!TS|QO@*$*5zki*<|MsiYzgDP!Y=MKO{ev3EC1e!bpAIe_a z6bQgQLE@p2)5eUEl;9(MZDz&DQSmx<6xoac{G=zlwy)+}q!TXIKSRUzGoc5C5`F!4 z@1~NH)$kaE{9v}(y4pzlLFIm_oaD7>>o{ox8cfRlmC^Po+wUyQg#w5dF41u|=lnx1 z^t~wum}Bb{OPVq9wl+C6{B(36wPATJ`k+O$CwUz#`b1LC19CH$9)6k!V?i2;yOY(J z;uQ4WpwJ^ztbxDa_1FC0ur2tzZH6D+tH)iuC$&wX=@uofEIVv^rqAd zfd0M4fQ(OH=RMFzQ03Me6?sQfQ|S6oNZi$CIWN%fRZL)HcY!wiLu2jRC%VXz*8~5B=QcCa=*nHHhD?m@w<@V zH6zPKh5WIB_kWr;Xv@lj#0EaOpNVi)XuX-(@x(%V16GVqNDwKUps1R#hXeZk3le-s1E09q>0<&2)x&(vGb716kLPWy`Ic z2IU@bg5Z)|sJiW%a&nXvBmiDMK0d4=QR+|c)L#9~7iy@K(C2~fwvNln2?YMPTiY$j zKIxKCP^lKqwS81LP65}T{`Mg8r4gL$Ks&Q2{wQ^JQI?NwFe|Sh- zzUGMXA8wHQF!EAS$$8!$S6tKpY3P6`5L9_pDGC7YcTXsrv9 zfPc7HrwiIZC7!Kjy%R}`xhhVkYL*6DIkh|R%B`ljcm37%rXyXh+|HIjZ73pet*v4m zs3DJ)!M*053oQ?&#FA(3C1R(mFC0q*07=cVk)q~Cv(fZYZh~Y&dxFtNpgG9gULG3X zZI4hE->;-nw9~koUh7X8y5C-IEPslyC(fbiP7JM@$BEP=yL^fT6a;@%D+gqxMDJ@t zvCjd(M@%Q)A$NH!DHcP0d-iC4f|Gcso6F;GkI#;mK&%`SLrG_ zaF;4i-0uP!4w^P&V69hHi3e$hclHq%1%>GBhp4IKu$5_dBa^8-P--y5f=y%;^vdUx z=f=KV;F*S30~OSqT)HXI&`KDj?--7p^``Dyx3|!M_n}pd(!iS$DQkm((~dX0>?~0r zd#7$7*49cr-~by7YX&v-K5l_J)^|VM?Wn#$gVTn)$dY>8I{Jxb*%kb2wJD?I07_+7 zgi!jA-8T7v5}gc%(d`}ue=%vd^Kf&fHUI67`G;$ELtD(RRqFjr;r?57_b~$8IVD8$ z5B(RZ(CQWK<)Uc%XWa6Sy%5AA)ZoCb?K3_S`^vzZt3D3*b21!L);DG;Ui$fEodiw& zp8I7@J1iNBM$eaED~kd+Fn`w9)j(m*Do@ z=mJ$cAtRNt32BI`e6u7)DoMBM>{rtaFo&$7WXI-FiS#1utdn}bg{D}ZdE1KA;{7JuN~56gWcT1}Pgoz-TCNcv=6GWkF~Nn3epqeE(sCas$D9^TYS42Mi<(A-UJ@`kui z?RwT_s*S1H*8?|b=*wmlbXD}0nTcucM(eO}2jdZkgy22;{wLiZgs`A? zh)F@FIu-Yjho@v5t2~U7d<~0*TTXv+LTp9#ENl{1QJwi}7f<-_d9s+LNKhhxEw zc7f%sPuuD2rcjZECF_N%6?TJ=nkvzTYd7WlYQ<@nqYs6Z_})>W0#B=2B$1}NYlwlX zuw>LyTU;JhnKbye3MEdUB0g~$WLt0N1B?;`L+=j!EM_>qr? zN9yYPOlg#d{LZUPO*6)k6?hH)&2^xgO&%7lh=_lQFWTo!`GA9sNW6NH8eVw8(b{AD z-yNAH`2r%%&}?Ic1j7AH=vvG!>|}RuSu0yFAuuV`-FEBYyF!8c!Pr=VmGdQM8*U+r z{>(7no7F z4X#w3zbr-pk4FUWOK5-o&FnuSC0{cJ)lTGm*%IzoxZzk&F}Lb+j4G_0HY;(l=;%Uu z6Ut5VGuISxVi~~a0smVdwzlAm1H~1qo3ZCC?K%2|OiA`K{=Nz*kPmfhmb{qh01OUI zM;jN=Mq*kEER%f9zTu@x2a5uUdlv4u+D9G_i$`x8 z(;t40HQuL$@?6A%Xjnhr?BPVeqmnltbcyKuhsE?CmZHwOaG1*K zLn%MWqMMIX#3+t{)(RJ7{U|wireXF-?ET>FxTVo;WIZxI7W#Zpb_^#>;}4GG5q5hlP9(%Pv>-Ylh1h8t82GugNI@QNLV}mm z#Xlx}y7)8{tPRd>R#6=Du1CL7J473;=g1aP{mNhM&~&5=x5ylngsHd}Rg9y1h2ldYR>%Rkoztmt|nu$D=}O5LeEJzgjR ztfmCtR13^k?=9V}EN`Lw)*5h|>)KAVIq$?n}nSJBQo{_8<&987M{NwE>+)AA-!cKme>EO=hX z3;;+)-z4q`8IX|h11sDstdYFv6`m_}Ww#==oIkUaxsP7*w55g8t7S-%e0#o_P#poi z>bq|udR&ch3;i0$#fLjZj$th*{A5Re{-d+m1>(H!v74X~Z|^o?mHD3r*$Nv3BHsYf zkyPz-Qj9)**%GRKO^tG6s!NI;{#0oqY-MK^|3bz#pJx_J+5ByOP0Xi2_X3{WrutON z4yuuH_DrUs)g>TVbb z%juZM;P+|Xrp@U3Vilf-64pC7o}zJR1n)_%FndKh$xILDI8Y27<)K!%g$KVlVi{ka zTg-sWOkbWJwp^mS==R!2+seX6`Ips=M>W@cQoPdSZYC@y)^ws^?A#j*3qok_fII5N zss&RTcJWzNDnDrOGO|{%QNG^IsFK{>oZ9e?5YBI|WjvYfnR#R^K=YXT(pk<0VJUA# zlfWyVDfn;rOdrxSS36p^fL?(^bjE*W9qb*D&%GzsMd&p>azn0=Yk?OQDbhZVgA?4s zEV}nPj!oD&g{S+lcaINwZ)OV;-}$4Gcdn-e1i+;i#dJ^slD*p%PR6?SZ?SRtDE+#UlHY(sbP?zA9`>sPWyMO|@C&bzr* zX8(f({3N|EeKj%yA(Q#yRPQ$N=vev?9QO$fOME1P&FPqiq4j}{ODb%b%oEo!cu3(i zei=P@zgXH5M{}bkb{rg9hF*n7<@UMVP@a1*B!-eDbhcjfTv4_C_JHmA8HFd9*wOm? zWb3xWoQaMH8kY@UDkC53CK9yX?l`umN?V5;e+q*exu|tZcMl=${|ZQ(;N~*+Vbt)i z*K{&8^aF1)&g<&P)vbd~&GIXmhI}wRI1Gy{uco4<44-K0(s{mdo@_LEOGCjIk*b11 ziuH3C=9qB%{EM|k0bIk*b-jxc_L`r5bnb`2d}{$AtBehyg4x}lyu6;aS`2<2nF@}p z`L}G={-P*827YyEV$l`UFf6-ZVS-yxh*W)@vekzq|9cN5y@%E3250TM2Ls=n2v`}4 z9YOXhjnWD}mIS(eLEKBs?OvRp*BQ`?g4y@prYdBj&zmrePz$4JlVQ6{Wf7ca%POvk zD1JLfph`b2Izvh_QR3MSm&g9(*%xYx_#tavxJ@<2BZtoWr|uk@N$tP+LCn1nR#*%d z_*l}4^ef632l_%AAhz5mP{zCX`w$a-DThlP7NAkz5S^41zuWq&h`P=BHh}hab0K1mjn+R z6_^}9(`Ocy!~@GWAYF@CR#v3qm^8x6b$PYTGsLNGl#&P@mMju_!I z*?Tq)2}3e}|6jbD=e%T{Z0OiSx=}$q>RWL?i5OxJT)@B9JUSMtv6c)f7hi% z<}oIZij+FIT=l?&Gqc{=aWZga!{EJ%?WJ}&UQ1ND+qEpszaXeyQO;w`{QG|UNQw>J zPM))Q+IMp{|1lr`xBmqL{XWS%t_j6$vNPK+*{`t}&*G^ijO17oqXTNMR!86X1c|)+J37F8BAF#lO4!KiNS4y7DhY^yi{VJbal%%b?8O zgvPiS)q!l3MtX8}A9m9djarY6ED4__D{x_$je0;J^GkGC~5H+V9 zA4gxunXq-Z%aBdH4ahU50SUFMSe7yz+WM5+AVKU1DLb`3Sy}2;a@j7W{*S+Z1Bkrw zrtAeF1Bq0}^uOT>&OeJ}jfI%fC*(GxflI=$hNKs1T+EKl{m7G9lt6of%f{+ z)$9@Nw~974Of?x@)*)ssqNS017>jA-7gw@%oSb|NfTvSHNqtk=%U7e7G~SvAX9>#^ zy@$5eR=LSlpdypL*myz3X@siAe3;cA3kRhU^S>I?i6hyG-GQ?Iq}I3vs|o*~sqVk8 zgi$egM*8c?uKK=`PZEB>r6eJf_!UiM!3l+oOlbsZk?H)J2Io1QRbydbF;fMlkSVeN z%LFBn z92Wj|$9_tmZg9eeOMZ*>x*0;nN~;N#=7E)Gb`NK%f1Vg|-{G|r+3`WW_tG&P4af%n zOO?3~AXn7ZzCsKi>}LB9q2fP>#`x!r?&FiD2bNR91>-*(QOfGcOfGf!jNHECcKvo0<>;| z=W-~}ptaJxLSm)Bg&4|Pv`Np2dOa$@Hk2`AdVW6XI9=|>;Nc6E`V1aisN_L)^$v3l zL+xZ==f-+>&9dGI(X>Cds_t8oViI2cdS8gHYdiG+oD+#;za^&TT@@ESWjL)_$CE6r zN_wY-4!pGle?^%Ti>)|P&5mdh6!!K^izOkw3G(Yq2PjoLfT2QUD0NeB$zPRN&^71! zm|Ibvgr8A|yBrgpHW0KmRgk06Ap(v|ApbeXqygu-P(+w_*7*gT;i~LvyG-`r(S$`n z%#drF%;@X;T4S?q$?LI&9Ab@5!0O)kj)YADLiJ5PKm&VFU+51Ef$Qq~%T4~up(UK~ zULi6?zP>&g53OSGMqqGcA~gIc=y z=Rtv5h567gsyq=t;Li7Ed8*0EjezHxujwq72C&rJnG}0c(%^pRck=}Zl0}yK1?NgoAIjl;3SHN_ z6Qsx{?#{CkMK3Sai58TmScl3~s^C!KCdndDMf}VPG7~Fd;juOWt)$O;Dp)Y0Efp2& zB+vbEQ-X{{xP*kJ!%S}Uum&nt!@GO8OggszZQ1*$br2tp83AfP{vq1f+^QPD-yfP3 z-J#9dXa}RsZSNtaY28-xfR${jDjSZZt>=u?MKs4Iy5_z6`7im&GbI0yijiwAcmPR_ z%6sd89HYWG-`G7qJ^^=RD|$V_g+VBxjlVuXI0~$dQ3Wd^f<-*7F)95 z_d$@!l&Y_Ur@+$#@S*$Xd_@dSxDYsqw3Vq)MInRVpA0a1)^QWo`qXbg#go?tL~wju zUjL(jf*KwJ>6ec|yjqLDG4~pWump0PBD**gVU1l!uQhto0duES3EF(7`P{kp>A$R% zo{{mo@}M9*z-;bQ+;e5}cnU}PNkxa9AW*sTUzdKM-$m{-J&R(x>`K$1VlRm6bvt9C zi6&LwdQ?3^sas_I^Yu<(TJRr`8jfILm-iX?-DliLnQeUrE+r8i z9OiLTgSfQ~VQ8-^K7ggFO=@V!1CR#I_WGu{Ps`E;wSAYD4QWo(O#8h&NeCbLo6i_E z6iN}Kl_*A zax4;p+^_@W*7cX)4Z^A&OgK12G@TtHymAq(tPcjlhB0#>L|6WqA+81rY6Wx_wNIZ& z{^?g0c0!JiR}0IGPP%`3;7ICA{IA#_?@-LftuWJ)V6mRqz}tTuoSX|9KGK}9qsb5|QIRS&IWF`TuTYk~{}x7-|+A}|iEo7~epb=_|M z08MA<2Dq;xPVB@DL?5`3#`G~?YN%R_PM}mJBL_I%pUl5f zv^3ZyuALhQHoDP-?DM^}p9k`S11^W$m0rAwpVPLRsiitZdh)Q>h;`7hnnljNe2?Dn;x~h*x5V8dWRg9UyqIwx z&=g4z0lhsaFK^zF&>`KPDh6>1(c(E?-+108_CWS zaD+SB{dlkYFG~RPcfU1;HpPN)%?T(CCA|bfQ{J|6qwQm$k5Ez~C}hQ2f3lF}cL9ipn|F%MOs{QaYv$j5Fsni`co7tjZugEkhqz0*Z zRLA4&OM5tEeE;mC(!B^Dwmdz6l~2q4K5Wmj7*^yX?zDL(HAE76DQS+l|yEeQs#)S z{l9+0^*zUp|1FsZZ_Uo*V8AYARUpzMLHFQezs`(;azf@cN$SamogX&rxY+z90V+(U zL#y2n355h)<~!Q|VJ?alaOrN3-!X1xB!u>Lx_#U`d_K{wW`G~Q5N#hKq9Uuo#nbzx zqzMQq$`6a_0#G!GfM6v?ncn~Ge8HXw^k zIkZe`qS@;e-sOabe%#p4hApC1JwDfCcO{p&(Zx11mI_SKS|H?op9&OCl+IkzzVG{| z75Jw+oZb7LbwR@=W_v(kFgN;}hJ0b+$br&4rl2>?Nypo34h#K_x2K4Mnh1OpuQ%_Y@RR^C)y%|$dw6I9mcLPr93r@qw zTCDplL&L&;d+0LPqZR5(NE95e)M+%k9v(B+{F_R?@eO8UjyirLS5nlZKvv=n?w>5Q z$KeU-In+|Vm~J{GZYk9yf6cQXR3&tb;Z^c;M1qrD$}hA@3C)!vA}cfX*`|H{oH7Y% zF85~i$y#_Q8cUKyKd_SWSa3#n$uup9mEc;!Gz?zTO9Dz+4YP9Qu>-Ss6{&u`qZwOn z^=&GNw7|Z2+nNFo7mx>+_%Y(AI+m3NW8xS@y~yTGsKMOG^=&E3p}1d~N#(~m68)urtEA!Hx@&%Rs@F#;#fIAfLJnvOOelPJBz7s$yr)8V!07lEGA4T*%fl3*TYYj2~TGUkb$T-1XtvPSqeLcg_%$`rEXgaQqpvz^A*ZWtmr5o8lu_dky_Cg@RBmakOVk?dky~+d*-{p%xoWJNtNtoI1rUihSQVx?T_!$Sj4C-)viJsPbgszah_Q&Vf2t@yXy(xgY%HG2bK%- zt8=I|tOZ2A=y;_`hQ74KWG7@(dw(F45kad(RR6xmsj*9!b|8v4u17LT%GNgH9WlG+ z^Yb&udRJhuaMahsnivc`OyA=LhoO;?xEZKvcw*3evS4E@q&t9OvE8Y`8G>8+b}YTc z!HMwuC%fKlEk-DD>wv2G2X3WeZX1V0yoW~^ zYKiXBw~XS2JY{q2ud-DNHL1v&UQXMuxFUs+@H2raIVR@f;*I^nqv2s;4si%qU||%m z^WR?#@dJ{Zj~u#PsHpO#i*9Fa_A0AM`dv+)R_a%xT8r(E-D`RSI-^2Er+_pn$}TO` zy>2#*yj?iiCt_4td@v_!R;w$5D+Mbw?yFF zw*~!e_N@naHnajgl+^=^&OQ*9vpKA9;roX+I_XrQx1O3gt_yj4kDr#hxS09z8q*a= z=O^`dpAHg&<=IWMX9D`;tSac+sLeh-XyS}{$S(7HT3RnQ?Rpz|3;*d-<+`= z^rRp{K7no4fCBmIaXR1Iq`|TZz8mu+`Hz)~h%^jHW;thr?ZN%GqNy`sNoonZ3*gwH_Pn!DPE; zSOsZ6`VJAKqDXX)|CW5S<9Mj8+yzgdWt9W>R#|&oUay#6T2Q6@oweb zP)5gPjy$A{ga$&cl5~nk1wUQDEq@qcW<35Ma4;L@hDTTj8A&7#b;ZDrb(Tm7_ZwVA=*WWDc9dwuwlf8)(hGW^DAP-r?yzD3Zm0({`a}zA|SZuurE&{Njd<3_4JkM5|p00S* zxc%`>5%7vyf$BA>eh@w5F};3JU=IS3NTtM5N)GDSb>!~Yuu3uYKQ?syQ4!RtQiS^7 zSO8&9=m#`*6CQXw6JONypB^8Ep@MbVMJ?XTJsrDkw+3~I2>b$%*ZVD*8X-DRBH3EC zxf{#lMGxtV5C{Z{74W(R;bHJ>+cvJDP>@=EC2yJyUuU z(Bn_|T~8;0It?d^;1Z3A(-PngNm4XT((S1X82069IMszvZFk7(`&eh0TV;l{gz}_} zayWn-G+;~CkQ^plYqPS`T&=+FK&Sd!i);+kcn0%j*fs6v3Bb?oc!^S=*)2}2QK^#< z-b{GIW-YY{K-|CyD&1w6r`2zLT?{`-#UNd`XL33}$K-|SF5?fmhQrWd(5MU==9XHh zyj3h}khGRxLcjq&5hG05{CN#D=N3V!uY+*YWw*Mm`^K2HFa25VOt)NSj4}BDWS!%L zaM6Yixqg6eN$oWGiJ7#gpyaSg?hd>9bVmH|XOGKE-K<;0oB7c-23Ss()TpB>p_nC@9DqN2XMm~Q-fD@>TU3ZLipUV0}!}SbW5s1o>zOF z^43oXJ5IMqr!uN<2vTXb;G`0Y-;yVbZC z4^23USa0#Sb-|hs16{U6SE|SR0nWQ}u(lK8D<)g711|xZ;N;bYKYm#CU5#IQE?ar4 zJ)CmNmaDXuzpVDsu(Rvl67$dsVid$6=r_6(9KD^}j#e~yoI>*+~7K2hAfZt>>H>|aM315YTp zI!-EcCjz?#fHS^9C z9Ezhpn&$PoJ&jv78;kcRbL+SntF&rU-K-&@cV-Z-7==1aclQ6>d`fv*1FF4ILF9AV zd-t%vZlIpSdNMHA_eokJ*AnW^dd?w7^kc3&)NA{oq=S(8itCTBIJlhwRP?|?p zDSX?LYjpC_A7I|X!chCjCu;g0j-)Iw)0F^*+dxB$x!*Z9j+ zu?v-Uc0TKji0f^ZKOPOMK~Vp~krN$G-|Wbe4=W*tlh{Q2_veN%6Bb0#;&` zcU-5Ou4!C{p`TJ7?AV*)Ou({f4(ty7Lv0xV`D1|miUVw5Bo3mhyM#vcRDC7b!8 zavz%zO%o1wRWzUoI_{sF@)hxYyPo3_vlfQqsjy@EWKYLXuaoTE}_|xj?JHh~g zt9nF2i|MbCtS1Gc(QBcBGsRD(su5zyVzrc)QIg-{i5fb_Q9_Z$ zZl2UQlr}^5ku`yjxZ-lQh?!h2HGj?gf+OP)2{d-Jpa**-Y`Bw#j+^%uc%+5UN}Jfp zx`^fdSxik&mX9^aJ}ABgkoOc z!+t4Bm$0WUs^WMmBMYJ(a(}KOg)P@kx!@*{DV?2PBXXay+&^kL8?VMn!k&CW&47^;O>KiSTiE z45=SE^+VZg6&4wNeWt{=LWfO_F^tok=+D8T$0qU!3gH^TangDH+!kJ%Q2WmaY5Zmd z;et0&x!6ZHt!{nWWh@6tO~x+W%}p?Y_mOp7ZEov_IrZ!ArGnjc?G7(?0}AW>X+0nI z26>Nlct~#2AQRmETLPNj1k)XCwvD!le(`^uaK=2;_o6VWhUqE@yui$btT)_nh7jHH zV5N+#U1b|e2W-w^k}|=S$1we&NawM@n9KE5$O4B#vni64+*@*`=I~0 zVIrst^y5Y(S!iahoXq`EdM+sY+2o~cDjZhR;P5PEqeM{+WFo zDGG&x3G-S1&&|Yx^R!d+PzKYr964WRHE%FdTHQUb&Tfv&tX+Qkz^~Vf=Y1H?qX|j@ z-_tZydtCe{Rc{()e$jo9gVeaA5i#qArn{4C!g137j&^)lO8Xw{#&ec#TwUgGS!x;y zBb#ldX?;O=`GG>0@_3o?J;kN@1tnVnLcZGed~}&oEm0z*Qn_oQcV=4vfERniz z2tGWhD2%k-2^{Ch>=!L?dEGMB^=VQlc%RC6>hLuYjeE6madF%6`%vN=<^Rsr;l}HV zSm?2NfLAT+mhh93vCSS>#|=lL@Cg;X#tEz?)DvqAPfWYJg{!N*AABG&wqrBjfH5nt zl4b&MSzZ@4Fx#Q+Bx<&}24X9Mga>TySJVx1TSHcE-r}L2Z}cU?gu_J=U>V~BP|e1ck$DJapz9KaR3(H?Z5Wc{h?va=`U z0`ss{w3bI{_5Stifp3mrwM8x&4%UO$vwMYS7-VJU$j{t%z3B_8zm%MgcXlWd75z$s zeFkP-xZ$72pJzNmmK3GcqMerr2Kp3cytk4yQB6``7mzGYqZ#Ok&?(BVIE^yHf%=<7 zBKOColWSgg9{U@isN*)z3Dpy1e1zfe=YA$>WZ|W$ANHl8r=?5Z+0vcz7_-49QCfQW z3tgUn2}I-%HXVULj2yPT1ih{{+WdkfzC}6@h~~ex*>|rp{nlY(_ntsEnDc$LNqaxe zo<8D*ir0cF!Mgi0;T6Pgdu+b{XS|h%y47w{7c(LSb@Jt&f^=-$^`cXsOS;UZO+kJiN-Cfd2>NQDHc ziTL|plXhzvdjh9IX$-Mn$iW{-sc2B8sZM^QfFi=DSe!VgsCd;Wx;fZ(aN@B&sJe-~ z3TrzI*ED`7aI(R1zlXKmwmp{d6~j=q`)%G7qHs;{Td^Z)NnKN!x{Dqr=!b3!@~q-I zV3R?yaw;zmK(j!xN8yQ4eiTaOjzl`E^Mq-8LAq!67W_cI6gwC${uP-9`3GRPXUT85 zXK|eAF~s8uoy0k`42m1rD~QcSx$N$t)SW7|#_Go0BFrO0IU@=08fbl+$`5nm%I(;mkZ(C}m&DBsbTMi!M5!_L zlc|{{kau~&hSAj+s07h@mYV!kxYj%v=9`k=S#N zsUo&pujc|5WNYbShd=Nbt6*06)}_1H5dAU|I87TM;>QAXFJT9VvQ{c5>i5#l;f0Lr z0uH9~m z?X#A(*16wc6kQPQjf*owE4=VHv|j`TiYFs?xKn;os8ozLj>bV~b?<0nJ0m6#vW-Za z+gV&yR@UX|9~~(@P(pXkKawOD>0mrHHSsqeQz@o1)Uq67_~hf zbsSv)I+nCmc+fG@F{2*{!FO=`a4!zyo|$s)j!yCeC8Yc)@aYL*?JN%~*(P*^;#%H$ z4-p&pWRH$X2#8)Ed%p-GNd<&(^Xl>lX(9#jleTWlcck+Y zSy5|;Wu^E21?Um6kRaA(sY?jgI#Hx8&eU+i#KU7#9dwAnVEm?V@XSCb7tXKa-N`hF z>y(f27tM7X+KF*1Im=U{?Ev}EI1|{*j*#)ED`~7x3eC>ua;rPah^rA!M5mnW z##fv~yDc$WnT{@G#wYXqUt;IXxGRPuRu{Wu!xh@U)C*)&H^hJAlAdG1ljT%uHHegR z_w!@kVX4{t>zi$eV9N)GxAw_xnrR)^8X;A|k2bA&$?|lmZ7Zi*!Sg3g1Bgq{oXV13 zky59Tv!*OZo9lRnmNoMGq#rp73g6jC6Q!ITxQ`%IjbVM#EgKSQEH_ z!ol6V>fOn*NDhT46{mnCn%TZgvIG;_+4|6D*ArQO>W9yTtL@_;n^inE@!hvKge%}w zs-};9X;b9mp-cCO%@2nkles7PbCFzPk%@c$URnJiu`r=KADhL_JatD3*~}=q3rk$& ztPJsU64{6*!prFd-!pR+{M$0DO$dvfsI!b&{ZMNOS2vql-Ev9SGWllv?lc%q5DJ6#L>nG5P3?CoA_TC> zeAE5c;5+pKX;JI%02=X;5~f30nV@AdIYnm)JGSyE9fMNUbAc^u)&SLo-COnVo839= zTGbC(R>AJi<28Ehiiqacyi;h1(hX53fSV16!(@C)FBjnVO$%dBnWndcoSt^RN)}CN zbM4%xd^Do-J6i*ozk8fl8q3RdSabdram(|ob*{!^VxD}pE z|1rWhJSl&FM3{s`F7{p7$i0(OZNEQQu%a~l=LDF+Hvf@hItV@F6w!{T@CS>cCh)zYO%0tXjr*Ah*?uN^?KjM&1nQu>w6EhLdX23B-L~|82n0e$|ul~%>vEfIVIoQ~_H(xB` z`XJ5}Y#GlUV5bp@RZ&vm;v@TUQDyE7ST@;3H!hX}!oU=;HRoQexhs0x-bTemKU$6y z>)y7cg8}khP8PInM?OHF0@15uhpzBemxn8UUFou{jP+nNu;FYTP886>%3J#}pnwaK zn4^1`@-gNV@b?tcIE zivGSZcR`TVv~>yYrJhMenXyoRS{jBcE~k%4{V0S3?#YX!FMH*@S=@NBoL$&_M;8;K zI!9~dGj428h?5bhm93S&x~AsZ!6DYU((jP7HE+1to)q7kZ>y&_+J6>ObK;rPQriCi z|D#{0N5Y`{Uz>j|IOJ?j&Q#78^>tvXDUbuh~5v5j|1re;?@o?$`f0-T%*pHVf>Zot+)hhPA`R(TL7j8bv)l zrcY+$@gxGC94%L2(+^uTh*%#9s7ex~9Y86nC0V+qa5gDnC7d5qh%mNT5>i(xb#s$T zCuXFBJSiHKHWv+SSTU?hIZJrSXjS_T`7Y38VZ6_#P zzeN}=tfiF#yc+$)ZrmU7m8F7=TW?AAG=5uc((&3k9-;XC=k&J&;&e%B>YzXO${^%Q zm!W;jqkz1rj=E7p+aHL<$9^|arFl$+&qE*r_|1h zf_mxkq9I2;y+|T?A=+gw+nCz6Vr6Zu;?Rehyqt5tUm54$N#o`{cjMf6QKgsTSJo(%Nh})AarAqUzJX(|1@`T zdvQQTVBB%$bn6jxqVKhC1H7w$s<$Z;bZO%Q7IMrap0wXES4?ZR6x3$3Xm*A?KD)n6 zv-Cj*mVKM%ldPN^ytqRqc-E}E%4qB*qUCJVnp9^KKq>8B^fxY^p3Sn6QL)+rzI8`* zx|G_ICu{*P&r}o?$|Vd8d7?J#^b9w1t~YvUsw`XDH-K`c`2#bX|BtY@4y&qLyN3lq zHX_I-L^?Ktbc1xbDe3M8LApBxLAtxUyE~;py1To(`IgUn;yveif7kb?*QLUmYtFgu zdyH|9F+Ne@G{6e@s)YkwRs-35&2a?az$zkcI{~jjZ|~&f6N2yFe&zNJL4Q6(!+2cg zL$k|OSUBWoKukp@^zS1X6Yi8NeALyZK4II6_OBsHY-ypzZ0gL@{N#T*?QeT3}xR9i^RBMExP>_FswT%t@vsz~f z&@Q#>G4k>*`+u9@v|96a77-E^4+?N3h03i)+xLVLIy};&_%O`=V?1 zsLFpVkbJJQluXSy&_OIQPAyxNt!gyO-96VqL`2*F=37SV+#F7@>r{iYc%mvwj$!{1 zx65Xqg`2`$R~JV)8xIdKuE$Q!oSs5Zi_#|=;k4stI@ct4)UuC)II1T$Tg|D!YQ99t zlq(gTmPRyNl3^<&Qw}Zs7+f~s^dMU724n#|tkW{ZEn;UB;TF=4z!Z&vmp)Qha?le1n31 zkx_F}UJd-ePU7@i&v%$HU;%KE^Tp08bZu=-mpp}pi`XwGE9(&9Xc)n_o*SoJip3|A8B~S zYw^>i{Q>{ znE!bTF@jM30);1)qYlNtBw-i^d*%m9ixUneGB|3cfm55lnhzrKzqd-T4-&s3uaN@l2z3H@{go1`PN}Jog5Q{Em0>3f) zJTp04BO}!tzVNr;EC&U50-fPQMs~?w7Mw!X{;f=IPkbP@J5Fuvn`V@H$X>8lKqsB<<-8 zfTQ-_hdZ}K@7`BFd7++H=>92mje=f0Z=D`vrdmDSSux@2CasXT7#Zk;kMT(TSvN3OJY@53>OF&VHu-+5vYzXQkd zfQ7LG1zc**697>XXM@#^?ib>{x~8TD#JL{kJ&g3rHM)FI8AdmWaopWf(@cotplclG zFj${r@JGG<-bA1O)Kc8R`CJ(xtKXOrM7G0bxteRcIoWL+3Zy+eY~$sJe% zC6|fv)4mTzt1iVyjAA(&V*aN!59j6-HiZxaOOY_4hda^T-7o$jZ({c5K4SWQro~%9 zEA@L#z-k)?w^y#xv;lDl`s5K(koR!%^1AMPEjv~#vK>dmbzlc9DSy?FX{M~4cRj{U zFxLBZ2^aJWN=J96?O!?7W~{dp#_zR*hlW-Jdue%Skrfz2`|)E0M5SkA)c4roIJUL* zp&{kC+WBcR)g;LQN^xH}iI8DknzFblMb|`%-W@v0Fy9+fJijpG?~lm1UPD2tYMB3` zdE3ir7U{2wgU&P4S*h#kaW`UMQ8;(t(n~$LkqCF5RkguEVic)T<3k(ttCs%N!r#um zr39#|t}KXe*FO!E;a37mH5K03V40u&`68e$Fs*MtQ#iE2Py2wnse@-v&ha8eE>-OT zT(~=}wDI8#D?C<2b5CPos+O?!{D2P1ct=bb??r>KM&(nEY8MZ&$w8U_7&IIQ1w$5O znr@xU-bdP%r(Rj6X#@yaL3Dq4?U>E!0J6Q0Ab-%eHN1 zX7&h=QDY+>8Hvtf?362>$~vp?o7?G2*Kxm%gvsSXCXuVnk+e|{yNX6}4L(PSS{RC8 z6w76PPrWd4LVU-}!S=%1f{<;_+fK`&b+w*gt78gk`j2I2cb2&S!y>Fu!yFmi7;UPu zJ5fpj+Dy{gAiNSRL%oG%~Okg&!wm)1qte2MpJhYG=fAmpoY}6Tsp~* zekNG8o?tw`uQ|cjN$$HyxNo+GZKebXm+U+BYZz$3BbvC~S#(?dZ!al8-t-?h@T{I? z#Wh~u+rhx_V#>+gp}7qVSJQy1&E#)3o07Oq8Xk`7wCa5kIv@yEyQ&19s8zF4$4mG-BL0701RBrKgBnx zRr7*KX6z-xMdXCrx1;7r)MZKM>pf!5$#bVC7s8$Ua`6tjfUK4pc{66-1Ecgg&(kb2+`$IT0^AmO7KzurJR~&baoWh5S@iQeZ|`55LX?q8RS@ROqE7Cz z@WCCXxhN#`9c*5u)2|rf>venhy_tA}Bsi5vW4C7q7f|v~Lgc^y|N6x8&GJ*~aox0@1$I8zZE@jn z6%p|gJo0wYW4OMd=oR6y?*#1+5d#Ow-L8li)rEC>S8v$UkAp{0UF$P1xz-+KTir7f z^FPb-E=B%$b>*;aCeB~gxmT~Qk?GH5BPkNMga|~8IMgF?noX{=fB)#l9r~$##eK-ri6%`nTIo8?J=blNB%rvatF9E{`x0YkA=e`!NH3zCM{C9dUI09QLcf zsbM0yE$e1Ax&A1@X;4SplFgOYUbTtkRjh@EMM=wi)2*W}&EwfGljGC1dY5@R^L4}q z%QP*`Uwyct_L`@A&X;-Xn0w`^W(U`=*H71f->x~aT+NwyWO9=f@&2Rf!!`RhthY=GcTDCNb zTJUtLROwo0nyooe9Kl|h!%{fE=rTUh$+2#0L<6Haz{Y++hcZP`A^BY#>Gm%we`xufuywUp3;2Kn&(?tITV z6uDXl_nw=7ws76QLsM%hb2^rdt>)f5Gc_=!GizB1 zPePtjvgOK?A+ zBsl~8WEGx(n4aFbYLjF>Zk-Oe?Nf0N1Qa|=H`I16 zIXMl`RzSoV)fI@lS_jc=-3Dv(3 zOTw45s*5V9u%M=NbH$h9`ID|l^-`Aw@_)_&rNS|F5iY!ZV`zd1JO&#Wx-)wUkBgsj^~DoCouOR z{sL`icG_`Dxc4^f7*3aH3{n2D^Ek3ejr1jO?)4uWblB{VriG!`111ngs|{)Xw)5)P z5#!2SZ3rCH{wZwmR1|Gvb9jN?G;*-kLBUovtn$T8-Ir%N>=7$;^{|uH3t9_=Hq-*c zFC027+}w-)?HUcX;eb_f{UJm+#MZs*Pj3ir1Qfm{_?q3IhVt@q>v^+UM1WU;K=!+= zNj$j+sJe+W;_FfKgQN%CO*tf!IX1m@Nm8$mm+5?be3mdYCM*>dW4InK#!EB>1iS)S zg=U0qfS;1TvAvB%Fa}j*irv{U@()!C1Y-_6Nq94gMuW@1RVr9E_zb$vL;btVyxm%|p$eM!^sWx13ugw^&xpVd6^1i})0OIN`J_`iO=y!DOwKHqx($_e@p&8! zW#_&>sH|{0|7w`;Sqy@0`1=`OJ$&E{?~VIh87+lPzF+|!xm=m%J3^B;iu~-9To-!a zfdQrB=%wZcB+&<21ym2PRC(YhpmV*yUODX{bXcPjV2pWxLx_IM>2hUC-qzjO39^6h z*958oH7bjj;fF_?DeH}}O`$2vpC2F-p{@pWjj*2)%6kJ>jw@m2e;__$s4hySS=$qoOJl^`d> z;>+uZZV62IL=2yx(h#0X`I;pfY-y`~rM&z!v;nUH^DBuhA%0UgP$+wX1`h z+rgqreV>NwkY2+GSpk2fqOz$4563b5n%DnpsXY}1U+`Bj?0fwrQ!SKyBO?R$0=X1_ z(GiV@D_p@X0Cy=>Qmd7BBNo_f4?ZZ@8ovCg;P^O0JKJIs`e&w%pv9x4()z|R*rd`& zWc`ncGKbwBDHsf>h&-9(=r+TJ*TsG5-p&R-e+|){Q&Am_V4!%#fz3uv+tb{t#vQR zU_>W7i}l+a92B1|)A_-5x05*?oi~V6cF^XLkhcSbGCBbPT@v!Ig8p{aXof}qA57N6lu*Nf*J`a%}- z8NWTe-wjKek*+prK{oO4A#gcJ2z9A`1;smFZf(7ARc0&@KE`UI>R6+;-PMHO=`3$B@G&W_hmt=~DVD}gZ_|W@ z;75=Oy2Y-~b=Uc=M2wAFZy43+6L4fS!EO%C=Zf8X-%QclCI0x=3jVX!TFD`{l<+ZV zp=YbEqnmuEI47^JSjrA}!PV(Iu`D%QQ5a`iz%EzT@YnOdLQHyeEyy>sJeH^q*LP&f zk%&OA&((i!x1BAw2_^b?UJEDs1i-2Nb!tK)(@{gTvx^e&J@5Wk8T5~v+6W%5B)<&r zJqD%wlV`)h0BEq_dQws8i|XRgJQubn&Li8%7jDlh z#6xDB`eYY=U9Q&-DJOb=9r}Mh&p)UV9&XrasIqJqi9IU27wLGnL>0V_&OoVQob)+b3$-ki+FPFAKrQck*g- zkjGcZk*9KB*@@?dm$fAI38TA?n<+L8a+B$U2qCZxyez8EQ=&}S4GmuyQ4XSI*2xCW z-eQReI>qC@Wk__cN*`WZgPpCn`w=h#Q{r)Tzw~oIqnvJTD$8H(!+*B||5~fR_D`Fg zcpAKqfy_M;Z+>xMbVQRL<&oPQmrlpAtS|FMdpY(LcIs;x0xupa_dBPB}|lh1G10n^9&B?hbF#V*c!#j z@1JjkXy_k3h8CI$#|d%7_HmXz3wn8ZC6}q^cHGp7GU?CkobKHoko%5Z4|LRO#-z9* z^hU)yd`o^oK}#Lxu`@Jcl#s9}HTi3DkN+HeK-Oz5Qc>=wmTn zk^5lPH%Vd!ZFScS@i>kFK@6!BcVEB`MUhOZRgNRqHkSA43M*nFJ(BCH%R+Q2{0%V& zb~~py{0>3$y_mj!71u-OG^s{015e!Z&kI7X1wkH%qq)!bNKpiCuX;P@w|bGDpXsuR zo}*k(6PIJvx}~C9UjFRwOEQhW?nfG{9Ola(w?nft`}gHgHwQN)VkMdn3}-iZ{QAKh zD*)B6gHt8&E<~QYV}kwfGs+y#7x;SMBj5+V@h+)1YOlXS>~*PM#cDV(47lZA37Q^d zC}*_n{fH&gWIRiv((0V=y4m-vq?qSn?XFq!loU32!3^YItknA%b#5A0_xhQ{rfErL z`q*P`<{DHAu|}eXJvuU8AF(NCrb1XaoJs2*doOp3vZr9jH*oR9bBcH0^ zKrFO})oeU$Oh~Sn7^z}yG8G4bmg@XXbvXT{G}$SkB98l9Hx(&NXR6a;LH3aB4>(W2 zl{vLP`p3P!*q2Zqr24?$0y|93W%V#Xw*8g4(oIB9PIN1 z{M3TXDTSYP9M5 zK{*mG=Wubi)70D4Y@$;|jpbiUoyGtg?^~(AD_p35Gs4ekd-6hwru865|Le4|>j|5f_@8N*PD|L$RJeHL13ox0s{evTB@JEKoQ z(<>tuv?r!2NOU38WfxTuAvg5q$9C6kPg1myo)?YTmw>R#SypyLrq{p2nl zqE8TZb0s>2>$EywS|_re;l;J+K4Lb&kwi-_wIQOqCy5okK%3r-H&Z*%%oA^;9zrlA zy?X1NbvR2bGivssMxzODrcn)rkmI9M13psl&6R(J4E!!PXRV(WE-!lQF#hAzeU@q@ z*H99>9KcGBI+K560*=*64q4kaMvS-wjXW|6%9w|5$s+tvK!GvhNMNm}bL_|@b?(_~ z{ZRxlgE8;&u~rMZK8lja)D|U@=k4FRx0}A%XAAv|PEK<5rh`Q>L*+1IwKi23J5z#F zMe{{iaq}YgaH*V;C0m_EbpKlae_yn9-}w@ONO-o##C>=Py6d$dAuxiNbtu@HOHVD5 zD~9s|@561++k*Ft{4^iDK5*(4Cgm44Z}8de`KsqG=e@)cS^0tdO7!yMlW{yhl&SB& zE_jN2`Vl4}ZTMVHu@p&(jh<*kMUBV^9juXSlUF?Iv~z9OdGKN}bo13?quE`cdyzUJ z9FR4;@lUz*B_ib2>AK{bM|=#7nU#8{NrV~{pr5Nt2PN^iH9Re+la&-GKIa2N>!==& z4o9ld9TAL(C~v|>!U_#xx>|dVsc-n!*5(>^)~nE2&Q1uC^yi5m)saU$OolaE4Vvv( z3`sdUq@GUV-#ckL`r&cM&=9)TsT0&$lt6{N*#bPdUIWyAY-eYuP3kZvCT2uzEIB@h ztx?q?5JH;;^bH9QY(=9SvGeU#o6Bi8H|J|?=YN1NAP7C#WC;Mqm3-CTF5pK;MnZtd zDJ}jI2%-NZ>4sMTc%Z)<_T+gqc$TsKa92ucNOlD*G3I-TVY$+y7ckuH` z@`nrHE>>^V?0)dyK(Xikk2V&6W!k=BMR3g?HMn#Br~8GNl{z_AxpXxDi#f>?G3QVC-1OgBAOe)3eyD{ZTMD%lbIPKiR&W4qcd@Xz8JhYJub8p&f9Wcvk+6$tdRia?J z1BT{87$R)evR+qpjn&Jo!!mRnmAYS20i<-6_s^dkoqtlfAI^t?0P&o>ai4#B0m$Jz zif15u(Ua^($0Tz)^hW@pLo=F$pu**wZng~o^623DllOf%S8cP#=EbCYW#N8~8_!`^ za6jK^GCi}t{QTrlYXbDVCHT6)7%=C?qQi1D7$VdQBm(YsE_uF0NZHo~a7JLT-QuqZ z!7ePVC?El`(e1eP`H5ZTp78m`*L1N#;g1V3zu!=Qzja4NPuQzr9$>iZ-TCoifkI&x z;E{cHp8BkAUcVV*Q#6cRAcb1w@qE85_Wbn78?JpkpUchmU!VAuIk1scC{Q*DKy)Y9 zKfP(L866WcBYk+emziR0LRoz@*<4*S>S^W+zJY`DBO6fkkdizCAkT)6_L_v_Ms-m` z$=RQ+Gt3Jk*9{?^5oq&lqVMY*zdRM>UF=S2ei`edG|;ZTz^+7T|ZN zR#0G~09VrbUAB1i3d(Rdl|S`pc+pA}%z8oNCl}vyra$btJ|^R{Ns;ON&Grdfr4}M* zpMxKHgugzdP+C-A1uHJS;&VJ1&~H3Vw~mPsE4no*S0W*35bO;%9g0POLp>S};@IB) z&9#URlP7G5)PZv-@VP`i>iVui7`Px+c|C&$A!FsABLcnLS4@)Dyr=6#wW0ex| zb!~b@a5#P4{pNJ)55SU*jiw7#i-ImT{B`Blr|{n#%5M(@w*f|mQ--iS+Gus&yzw`; zGgkI46DOydVu|{0jZ`A51PP$+NfrmyHQFDdk%Ry+(LU`LB}K*lwXQ&o4NFJIn;sGe ze`PYtoBZ6A2JHsu9Uxh$b9b8-cn(?*ZeM7&-kYGndVJ`Gg!X#DBW(b1ODvG!ICA(j zzx=cXrw3jBIVA;U5TM%^=nV-7us#F?O)N@+Ug&;e7bJUh9=Bq*0P_7%&V!mfU8Dk8 ze%NA5mKL|I>X}T``ua7eNTYEI@gkB;!g}EkBthtQ5xxLGpqeZIAM&3S;0gz^WqN_F z0{Nm4e6=yVMiiBmC^s#xQ&(*0UctDmf|Y8kUlLYK$zD_u6T}h|abmA|2GEj-dcTJE zr+nX9X_-zvN;jF?Kaezoi-Sgenm}Y7#fO53R-~D!18rZmbJb8Gq0sCNGvs_8$mgL4!&qb1AHi8wkmz;>wQnJ2ksy9CS+#ExjA$0fR* zDZhkR;)6ehyU5<gA=SMzP^sw+Ub9442GwgH>Uyi#~_h-iI4T{^# zH~Xko@R3oI+k6QSmsR9OLX^xZTs%lOxwDV!2sHM`^0%>c_euvUGq z&ljq%QY{#%^De4iL++Jmix8y?VzXZg!2+kscJ#+{o(1CdpLUTQW3T%-QjXyqNwQqB zNqY}D4DaTe$i)DuwSwi+2XrCZSaX~Y!C}p|kM8lA8I^xPIdgSb1005dE{-o-`FC8e zV%3V>Cyc#XRVipoBWLQQv9JdP3kNWzL~>G&Z8{aWZiItzKGav+-W@c^{YCRS_ zT$XxV;y-z9SKR^@3dd7*(sVITt8YClWrm@AS|!?*o}o(O8$VW$H% zeV*@(M&6YSX#7S%?Z1U2D|f^r9UY8XQx~|Ym=Mb!;9jL;eJ(ONfTC$_y8WrYw~vy{ zAto&0%KQcLn}pd)-v7?=-A=6Qa~sjD?MYf^Vcmm|FG0jhgz;<*^#g_T$WH4F_-q}IIaF=>9LUwer>qD=L`edL zq?BqY z(8;hWSywXRzEfFp6%-hD6%jr%5}~seL1S%o|lWJOICs47Jb_ z3&lOCs@Qz*nV9lI*Em?Lf(p$Z5$TPVw7NVJae3;TZrBJG@p$OlE}_?YC$|z4#Y$!0 z+g#!WT$Z6W#KgoyBpv7?{=I^Hm#muN;sY$?D^uE&x-#@I~blo`;S>~a;s?{?qoCYM_W=f2xhA^6K`vz&8F zWIF^u`|}qil{)ia)A3G;(NP)7H%X@D(c1X!vCb{i(<#BGCF5AV)Q-4%QVhW8NjyhG zEEm1a4!aogG9vK`%Hgz3$o9K@<#jp@g}f34{`U-yp{gd@Cj9f@N6tp~QyUaH!VPre zc7A?WdxF8cq)sbrEg_A;fh0j^yg>4BOUq=@+8 z9W&C}1K&Tqg!hahb@5Av-ji^wzYIeCy*(R7{5i?)vy4o5VBH_vjLLcK< zY+z5X%5;B%46Ox<^UkOdiQm7wg9cqEMlm*ax6 z4xydvK7)g6aybxT7#PfX+%#T(=54UG9XzVMT(kIJDizNuK<5RCQCp5M6B1g91Y16} z-EHEA+ik}Dwiasr=LZ!<5J1VybWp0l>H<- zpXu1?5~0k*bv=@-!a3=S9lYbt9UL>MRMI!3cTTt6FD1E3qyWhVy6{z4ZOlQ`ui0B! zMa}G`--}83ugsccd2^j%X3-eu5U@#41;WgJIy$2z{R+0-N=l2C}k!g2iG*D!jS`1elZ?H{!o#iJ2MI(S0=MWLHz4 zc2hU%w^JespH6&fo$XiJJhvkjh~3vhgWTZ#_scr?$__^}ea|tww_tVNX&LZD5;(5F z#EOLOXm{?tL_pcmpaMrkM65w)fy5nwr)!VrX%!xAn9)XuW2ARK(&lodQbPs79E8Tp4D81$oXbKB!>+)=XjbYO3WzCdr2cf-1sZ^6Nk?P*h>nr|5`xT-lRH_nL@_Nao6#b-p z?)xba%#IInO;_2^&dA$c{@bU#IFt`Jn25bpy1M0dHV6>Xkhc{B>6zz2fmaO?L;kR8 z6&H}}uA6I%CNkjx$$<$5J%g;J{)a>*t>{mf7&(P(+f;t&&uwP)`SJ zfGd>=K%nO2M8@ER%hbG&c1hCm~gYCXy!iK82CtsLSddn5sF`%au9aJ`{QWs9JMlo`mW4`2 z2$knv;loHAz0+0uM}Lqxgi6suF`QGm!R~NPq5eScbH~X@`seIoReX&v@;U22=PH_s zWo~6JXQvm&X5K?V=-A>NZBnYh!bM)~JMoQ&ZYwQn9iNr|rBeUjAnc{^N&?aVG3JffbNAOc4d zc^kDgO1)E%Nm&&eA?JeJvjb0J#%u?-s*4)@M$*r8bBi|HMMCh)p`jBeF^xwJg{%0} zeN$36`K~mv{@*>C&s$=eOsW49I~S}81T z?8AcQwCj^;cKcu0`@cCz8nKnV0x0qzCVzYuy*~YN z)wf8okk8g}^AjA}!ztXfnYZmf02qE+(t3r^t$DQJ)00DfVM)ZSUbm=$OgX^UM+4P2i;GSmkMi09 z+fi#RPlEYwMKq&4>ny7Y(a6v`7$7=1QM6EA|A|hmF>g=rULM<5GiO zZDkjcr$%l_9~v(DI&DsL9@aU4cPdEJTFxIgnuIj2IIN?UNB^B!Pz5?P%$V{fqK?x( z@>Bru;T*U*T~B5^^my9#Xz2X({4o4XEr?^r3?xJIt1kgE12MlTb@3oM4Gp&vY;d+d zUTegfpyGIp`%V3vOak)nz$~5_?-lNyecl=AMKLo-z+@#(dPfEwy=EK06R@}FZg2gNXC!byx z<>f{3;Zxl!hrq!j7{iu8*@Tj5wY8sHXwTTW*TYUS$rI#vG?4zMSjIwMSx#8}{OU_9 z5BH|X6hmJ>Fci&xzqqXlb&Rt;n&2l}at`dw%WeLfY6IYi>#pEb<(0R@bex>(4`kDe zH5%>D##5gr5F;6Itg2jZt#2EJtaXE}_KR!#!PN+L5o`X*nL@#65v@c+=93>s7aJYe z21ve_?;^EZ%vF7(tw29+1;k77ydF={;)fMxs3u^`+ugb9Lb1AE%F5KtO6tHM!3BV2 zg8D+aPGdm|H@~{(r)E027@Q7f%4s9Gn3%=|6J7SDzI=(GQLCxbbFOazE>fY{p{}39 zu3IvFgS}Bz-1)|yqf)YKYx+`G41H4@ZsZfMU#{B41r$Hdk&7xjWgjSry%`$4XD%O$ zK3TsRis$}3WidmF9}&55x`juAh7I#c84`d+dnfH|dt4wO7WKOCvhVa$iEm|yvG>{G z_KCwmSkbm)IJM?kcn|?Q!0T|64JegNX8n*E%C*f4U@ufGot|b$=%f_V&B&0SVc#Q3 zx<2G35~WmzY`K;>#xK}h<5$?tqll((%T-jRCZXq&LeX&uxD#m5$wMMP3@D0(nrmbS zldY?jz+Rsa|JcaHEYyFfW4LP>wpM({Kia-{PKOfoUEjBawATwZq3EqlfQhA+rkVu`RLn(>9%bHQLxA}NkV4Vi0s=j9 zHRidLa~J2(CA5ORJE+X(#vAz*yt!H}lpXlj@7>pNm&1B{L+`y=eSq7hxGFF(x(~f) zpb=>)mOglfih{y!dyFPixQ_OUP{d&YoB;Nwz(X&hE1(T{!xQ7C9>J1O2e?LinRTlj zH<8P5)IPbnh)GFs#TA4PyTiCkRvk^`X9`i~*86Sk6&Pc4evR5sG%_5m^~RbUhCJm# zsnNNE>CV$X`+lIUDOMckM7qEuZdW|k%k{aK7v>z1d7x5>%d(#tvAgt8w&;;l57MuKw+x`6Vl-dr}MzoTq z6|99EDv3AG!^tm6d3WF>CxwYu9kI3EN>r2h**~rwbJ=W(lWTh1tol{}P#-p8sm^Itd#%kk*!zFzjwYPR%!9p2{T=*wBHx2-tbdbuzVOFKv>|DDK+?MLQhWI{Z8B9P17;q(>~X{+3^6HkMzo;@gqr(X zzaLO%c0&mdP_=(Qa1pmq^qe~vjf=sLr9NGdpG~Qq>yKt!8!RSN4=s7FzspKVE7<)4 zC~#eO#k8W>ZN9SIE|~kl_tbn5T-3y=cDS*OY2x-sUnqdJkdP=ALfkg?whpU|Ug4I` z>4^wLRi{sTgEOPWGqSVM$ZU*VI(BHB3(mzd5OMT*>`MP7Y-`?r#4T6c6SqbiHIZz! zO{6zbP==pjwtIaNp6To^SeIwm4fwY?6Krjz*j|4A{9{r5<-^OQx&@hL8NCbczWRR0 zeKvFZ7;JWO$%gZOWTV#qydD1ONcg8fFTsVSA)|({5<}6F@p9k6D2o#n*eeY9x*OxR zK}P#cg&$~u(PueeY8kzQRv6U^Y1F2}8&UGT+o})NM%e2aD8lnV>q8*0p}%=6+>x!_ zgm4~Ng8QKC5M%VA<>vi(iFtNdXTi(%50R-h`;?1s@Z^53eXVIl~ zRzN)bOQ(%+VYpBeIKz;)0yhJ6tp_1Uy7WDuQ@m3bKpAeHLU2w9j0%Lj)MdkhTLC6~ zS)J~7bCX{TJ%CfoA^b@f!MZIAR?P(0dWfg>!)`?>)k;yw8@;t7$=fIDnu!IRDNhR{AROY;35Rv zyV#g3Qr{xH?CR3uz30SeHb;sX5SaX4GFx&_3nxeBK95K$D~^2^>xtrgIgO&9!&e`6dapLpQWK1wIYG{kK3%${s|6kXO%thEdiydtQ0IPbrENST6c; zOQ+d1^C*pg^meQ3lrK)J+Bh2bhu)eBX&s9Bi5A}H<4-l6vchk0txMGEmbe{iT=0wS z(ckhq9@o2ZIqi75&^rD`>NJqjzOvVB3eM9l4Z>j<-YAfeA-u&e8Ps`kKBE`P-u|BRjW>YEbbfV5 z%>XBY^}dC^4*~@__S@WTvJ6u+33X=jbQCBpC!*gs*DSFfhl9*WvcZ$(No`v{KAHrO zPn|7P#;vgL8zNVI#tQYx0v7*ya|HmPqb_E zeAWkvaQTcQG0*zXCelM z_T)%VKScPA-S$p!C5M_n(1rZpYr-c7s>&-1+VPhTct2mLL}&Q;-BFa8My8G1`NC4* zqb|AP8|aQR!N3eP5oo+6-78J36$-zuB|gT{6b04>CV4&{H(#d&=5-audAs`M&Tyjo z9|(?-bd2$~^bQWV9Qn_sfSPr?UXw@h0CNSBAA9a#==7nQ?qz{QUhnVU3`4LPqTL;# zpM-6@Z0c;bhs^P|LPvhj%zPwzl2slDUaUsMuiO;penD#V>cN`POkvK^cqeDw;_DrT z4BjcgFHf`9-|AygbVq_;gJz3seIRppO9pV`n)8OwX?D^)I=h{N2uh`CKZECQ~R(xAdw7ciyr!95NCpOs; zZ%@>JBKIKZ#O>(2W}Iqn)s3KVB26Jtb@K%YgM>c`iI6csGPvzj*xV<9{={J(*nuMJ zje~K;#cl7vNl3W=(>E1|zett)T~D7&c<#(VC-N|)Dc(9UK$h2y(QRWrKon4gyQp{_=C=943m(!o=9gC*ZpXdUomlERQwwk?uxy$!U*BgK4 z<3Tzp>HLa|U3 z^0#Ga1F5rnnvhW6ONP?*`-OnQL7|}XP_8pSuG3ERp~To;RT5kO!LCd!i?80(IT&;e zfjn+vdh>4k%vX4$QE+x|xd7*zF+PzGdk*bh@Y~)SITy>y$=x+fsbYsFrY*l0pG3RA zBNw?jc|<%Va9&dtTXdX7M^xGa*M&M2EL&pPU@QL8+vl7UHUXOetkuVFS|b-zZF+Lg z_TPp$^7m<9?E9?J|L(E;;8Wio2y6I6yWUZoNSFQ!>j`mluew{SD7~RUh|XFI+c&4g zp8-&2EhZaDn2kqVesXW|aH!r;ZgFF~U`suAcX3Z?tL721Hyx_1HT>6Q)mBYDl0h(l zOyf&OOPYKBI=n(zPH1BtGVj?EE#j)xn#<;q}k@b<8~#>J*?0;1JWHh%-m9d3GC zwv5Pd$s}z{?6#J31e;kHw@%!XZpyA}l`Q{kxd9%RmM!J*f3!HBxRGr@Owvaw-p6IM zEPH|nPR8pY_A{Sh-q9>hE!IN(@!{0F>>yk=p{LtE3zpsGjhKv^Gpf>j%!xp>wD5(S z(PfrvNr0krSy&WPG8vpS`TzKO%dob(EnK@el;Qs#BN38=7%5 zH35x(OMnlXfpCGTgJN-W4`F2{VzqMVK2I7KEH0mZlo!tEovxs;I}RZ_&uXeJe)_^HNUf@{y*<1a+e2Ko(TIm# zdzhDyO1}N2U2MIZe}iTI^usdv>pBX%?IX{8y-C_I5NDO85(vN~6{4co;~V~U`35E; zYd*9+=5oX7RV-nZL!(FbMgi-xtDWrknWoflYOaSJJ*9GS*~`-GB7f5qGlfI4icg05=GM34?3|o@4KRGUb;{c~?{4cE=Q8U6dP+xzII5Zm4?o*qy zBimwpQ7t+z(2OIqr=+;}{cXP0x)a@JO;@YIt(|{%XGutJ7H99e04iYki5v+IIZ#5v ziuBGE$!Z01xir`AUUge`;$mzZu#lBN-}!lTJ(d#err!sdysc@o)RX_luY`{Y9Steg%228$GX=_{KCNK`kJY00{s;Kks6dId| z1b_TuvG|VG`1@YXN**MnGeL{{LgL*vPm&RSk+<{FQiBwcREw({B+y8fe?h7=K{13( z=ic!N$`rn3khE$q-m+cY@(!(`T<$8E>0j+>*JR3Yn2-${xSxQb<#k-MzblvBr~RTJl#at(mV|F2D*h8JZo`IiI}vJ9sxNE9o|Kweing6h z5`}i^0)lkPmgxRG)0LU?NHAnGyeo64XZj+xb}qhVN1f<=vcRk(imI6YQGYOlMmA{^ zel20ZvRcyXGLd& zRV9$=bGHP$;jK~(H~+RTxo~m5lFX2Z>v~^OK*jSz#LUBi#Y(k(xlf#C4Yn0 zSD((di(?ce76WSUJLn|4{f-m`5!T=ajjYKMzENz1bNl1rZs){BwuZi|`~)W1tI&Fk z!JyrNY1Ja>gB|9DAOKI3d^!)@uC&?Sg=dQ0HsEf$>O}))LlKtW9=u)Av>MA;`7X~m z9&bE_%=KrVJu9xx{yq_Vwzq-c>d?^G7b+GuO3Z)*J{oG*mAbb8H%LCF9U_1Wcz@eG zw_~;Xv_?&1;whp~sZ}R>e|=ODKnCSZw}_E1(J7F+v7#7R!E3RI3D9Zv^2ePoW4pmT zS_Eoofum-@_EI!f;A`LluL%rMNO4h@pk@%s#^)#pLZB#~*J!fRi+^XV2MPz+0I4c< z8wfmUxfYFM$~~SUo#Q{!;3%jx{fM?=cV3|q><|c&icv~2c6o3*GVbXgZT^UplWz$p zZG?N4j-D_9(3`DX4dLM%IA|bNr(fvM^NZ2_;JScwcJ}U^>Q(4)V0a?czI~g;T)h_B zet&-)yZJRd&9S|my<@r_#Ye3q!cQ|5s{w7)Y!pp;Ltk;PPTDwBJ=RPVbfWx&qeKSz zu($5Db>j#69}%!2$iU+TEiR)Bb_M-_6u}>GA*&xp_IaeIRe<7eU|Uf9*O=cWC5!Pf z`BeM}#_ouye_q<26ZMm&#|IEY(`fWs9jMB+xu~vLc!U7oR(sfJWA#u;QZ)RpxZzp# zi@zQoh7*$T2tm@hy+ie5*4Zdr$F92IFNn43jd=%-1sWXb85l$@M9(RwE&+B#gb!BH z=$~G^wjF7XZ;D8Nqobsgv$9+s&x;YP*ZJjh0HOGd8VFFHhUss5pmOpmZ4`VP{`n50 zqzy6LBxstsHS@-Hx(k~T<_!GVhCOIqAhFG-n#_LFiL6XQ_RE@~TKctmlp`@QF>}>7 zy;wRH6s>l8NA#VfH|#Gy0O$R3Nct7WH|P!941o19=4+G`)rDtBm1SDv93)&{ch$Fr z1x(3E=?n7*`!{na zsH;zWZMd@tt8N>MgaNU*FxxJeR!wq4f5hag5fS`9(C!9g@MKESpsmL$6mOPjq3h-) zhfNH2<5P;5ER*IZuX=4=i(vVgMA+#2@9ejKwKqmG`LO^pC`5uk17OYsqWEo9{v@(; zaxuS5(=rkea?SlqU&o0=2tEF`E+AllM2q~sK3dkfzd1pnqElDzgf(XsQm7OK&)$LF zIIE&F;rgjzcb+~9Z_j%RG7E~Zc)c=gCMo>`L-)v{q85Wga!hhwPtvFUCU7=6Be+qg zsC&8G>p7nYANLDjNSaoXzlf?Bqc|mdn53R4(@-Re2T?@}U(-p88>lk`i54uuiQ_@2 zV-?IR<7kN!*0$)>Y*t+#D$Z{@1xo^c>g#uKT>cPhfea44Y2`Mg__Kr$pc#~A5Ch_> z?rUp6RWe$d@_sts{{F@Ov-cw!>ZL|*_-jp&MTby_4BzB=ME?B1x|otP_CP=4h`o=4 zjEoBYr$GhWbO2Dx84|TTTBCX=gMU_EMmrqxO-!V%|MQgxHZN<7Y?e@a>f4IS1GV89 zQ9U=@WRO4+{4~AVXH_)5H=72WuDPX3C9euV@r}3uR&I;AT=PKNcu{8A^A=~;h{@Jq z-1rimMnf;hpOl{kCMG$i-y6M|G0=z!fpX=`aE1smER>c0RFjw4w!p%kL+~|&)!i?f zj{vFVdM8|3}x}V?e=A&)C{ejyIz>X%9M`2N|CubPD z@f)!~?_-H3x7}$W;;GJhLj;0PFG~p7a&^N0SnxjWVz*}Ny>a>o?O**vBD8c@+urt= z$0FR6-jBd#80}*?0S~e-5u{dZ4~Zm>yfF`ZL(U}~ssP#*ba$HET*5*0u>Q*9w)IiZ zNTE}gI)x&-DuYWxGU{E}HG;aHJgl%;f-CGLAci(MP>h;EyW7JL7i6fQ_N1|S9Mo6t$ z>|y1<`T>w!LbBs!IE|OjR$*8OBT79~V}kX~wjnN6>7NvAN4j^TV1Wk|=cu@=FyZwq zc{J}?QE4VrZhFJT+F4u<)-_atzKQDV%u~|4=!O&CEL2Fz&w^81x!4$#*8N1x;TFJ< zOvDk5wOaP&KgsdUbExSp<41Bt>~}F$i>F*qrjWNRK%qWPBa?kN>o8xRMwnDCOyub?pZT=eaM3f+T^Ds{)CnL zzDs079a%!Rc*U4T3D}0D1T#j+{0s`fS8yWOWEYQx^7z zE-eB#-QhBHB^8Ja=a|eO2etS2V)ROCls6Jwe8ka zcUPg2v1EY$;qviTaPOCEjD`ffo`&i6N*NO0@duX5T>~egjqtcxNyr!QVz3=q)o?D} zfqLcmVZ{vR)f4?J^PnyAL9w7;p9A^ubJaYYf<~oHO{;O;uigdM*gak!;Z+N&-AG9W z4S$PSQCM%unP}nP`E`wn13laoSP;n>x-By=%^0QVRy=UapGZWsrKM9bvs`kk7Z z5GOw8OMC70docrmjh5+|C~l@PH}qzIS=LnVvtxbK@+Y$+^vyFK<#vUaJu*R18rrvo z5+xkPi8Pt7jX%~~Yz3+AXp*Wb&1dh|>_PLrLnVrDZy^oqYyCB_Hqw=0H}`R~g!+7& z=~kO?^G-%L=U_NKQ*Rj0`CJo8(!)G!P1Ap$4U%gh>O@wqS6rF@UW*=J)EMK}K9-2; zA;*Ntz=0UKZ#gO{2fv-aF^gs`6I&%$I%;JZV-6-hba+M!T#Wy?y1qw^8Qz2#pML0wo+$1iHYb|Z*_ zD-0lrqfC5v^5XR>x+skG5M9NV|FL0qS$YO2DKhx5eA3*OW!>!6^0<-I>HAViJJr}8 zt7=%xq*+}YI^YzmX!%DHjSAa0o$#rUTdd#+t~>JR9rcTJX3c5r#dl(w>9e+mz$23G z7|Yv*Up~=?b=Ir;r7GJ;*MLuEQO3^B<$+E=9AABfPTnm+-R?NP^yyA@ctR4PJLRwj~D1ts@U}H`EpT$Mjes= zB3CAjkbEVLR~A0zF*WS_f|io}(+Wyme0|nC>agtIk^Hr!J>+aZ}rF6n8^clKklXgBxUN*Wn!{R0i$e+s95& z-*z-D@#v{<6N|D;>KEaX^$9#HkQ_o>$2L=a9P1qVWKz72)EZuw_~f?QLjbpoCo`M! z4IF6RQKNG%>j&7<_oDPqSItUy?KWq2>f{_VJeqwxXLckaRWjSKFtj8R>!~nhF4~ET znCo*1CVQ%J0<%=c@jyx78ACuEQ~u&{DemzjC4) z9Md=uXd-{Qc}{H6C8#UO|CJzamd62oihyhFv(JNFZnZK791Np)`xa4zUG4MPL1p!0 zeClZ0ue*KbD}WNq7kZYmx8&H_UZ-A9xq*o&>gow@I=n!FA|7-nMPUW`VuyK~N$n*T(a4XBA*m!6Krg0)R`mNKK3|{7>ZOQ1MaB@fP7Q~Udj36{ z{IjyWtAHRWSv5s_Y+H0qjh^K9!j-YH>tk`AgdsUZDcr;Ztp(&}!iD!r>OgXX#=I-S zgb1}?=Uh(YibUql~ES?P>Ov8@pJ91WR8N>b zU>xysE$3ks+O7E}*hu3#cs1}mEHgYkoa|YH#b8q6^g~D3!pIZU5C!4b%sxm;q~WOS zlzbTKz5lUVPxy`eFzMaJ9GlS1X3q`!?Aua$qR~xxs`T4h=JtXzTavxyQ8$lq+seZ% zXe2Zg5_;BnnAGg`$-M*jw}7NtEPoaP3~ZdNn&HN3&y0}vsJ0zfK4WvbrydXcNJYue4wG9 zH}=!cLiX!aNSY^TYuC-N?J(xcFk)8D& z=XK`&3T6XGLvX`Iy<1S%uBZ z@CFPuOCb^KYDD{taAtW3cC=!ivVH+ecnO);lAnQH+dpm|3pPAqpk^UMym4(Imhb2JMOqOmycXH7 zn&oQoTR{DOvXZirDZX-9P)Zmx<3G}=|Gz&;WblNUn#jtBP;w^Gb+pO=DvE@5PlSRt z9-XK|U6vf>Bbpp2HccY*=Md+*yz3vdl1e(Wg4Fo@tNpG_MU@2!hb&>x!{ohDE%vdI zVeCwClVZ1I00Gr8&_O}!m;S#}y8o|hu=$4Fyw=NZYJe6cjR+>8GLg_y(FZYdCKRX` zXhae<#I}uiswBIM->43fV83UyOrdYj)x;mm;%x)PdsS+EFmsI9p{9~uCNO< z1IB6x+PoAcGzVZx3urKd=V^Np*xvtoG?Sip`upig%UeA}Cqr|mG{>;RPYku)Xy+q5rvE5_}`t224? zXnjxB-yO==#|ydnpB{`?EwlN)lkO(58JQNB#Wg#TZZ%qa8tA+2jH@Vrk-`4dZ~kM6 z5&=0f=KP!;?KNgBCnLeo2AG@o6XA#)mY8GiY8NtYfEREZ?KHp+BJbD ztMT(2H;8emF3TyJ_b(}p2ZTn9JMLYf2uP|3IOr$)e~92Ct(zgiDl__LqTxY?_?Jn2 z>vcZR!@^U$!Nv!7?@=ZPbiJrp*A4Owe3 zA4@9BVf~>Ir=P{HW#|+&guhuZ%-OP|Ynl%Kifx{qMKfCJMEDwfQeo3&3Pmid_`* zxbD*i?r;R0v6+Z;gm|xG>|q{1O^cplv8j1MZMg`wMP%pczN(qpd0q4G>5lT|cg9S{ z%Sz8HcSk59xdi_2@QFCB!rJa14NNwshym<;U+ii*3QoGd)!L4-)7Y6Q<76cRo=`Ag zKkI(DV|fu^Ij%q?U|4Rka#|CS<&p7*m;-0Aad^O1V`$@p9Kk=m0IsL5U`~RRnJfCB zSLfUm6iQa@4=8q*YhFj*zpHD`cZSCY_Rcg0n;ENO1u1-i*bn#j^y?$MzZJnG#;`gY zQ1!>aLPGe~JLz*Vinex7kL?BG&Ya%coO(gKX~(94bS(YgxmM-RB5t&f`-R5MSQ`ol zFpJgqY`EC(m{Z4r8yCTjdAP7-#5GGzgjZh0{nF*@^~S2mm!$V#kNey@jep$yT{K@q4+v}#y({s^ zJgv9-_o@2V5%#zLZa*P{z6I8}pLlIQjY&ndper)@XO{(NbPsMr#%=FHUwTDW^*^Esimx`Q;?+a@qv4J**yiI+cfUHpama6LNl;j;xVa8blG4VNh z+u%;YT=9!!;H2?T1NX22`BS8^30YEPS>j-#ym>zDeZHe4P&sGmp(jiB&D&96m(Rtz zZtKkfdTRup-5UmT+}TT`vGLKwKX{e6FRuV9h`#N1XCzuJr_?mHo}N$JquwuKyN)+E zUJO0H^L|<%R83UZ=hc%?a%OP!?VNwFAvGaB!Z~wXTtaoq-t=AEghdMT?%vzyq^^sIYz)MAQy%kBy6g)9XCOjI&2$1Nwc@7*X55Jg2t`0B?_ zudkIEBeZWnw;JHAU9`70b~_m+-J&25@?Z~eShZ^GcwZ)}sm0U(k~_bdTSuS>_snL& zRIv!bw>5UZ=iT+o{(xCOz1E>VOh8A5qx6F{<0a?vSXi?%-6_vPw^er|_BPs9nN*?S zlTm?*)Y}90(6v!#PeKSHyLFecx>n8=%cDv?&i`21|B8cP->sGTbs^CvrqETk)FO)4 z5>C~?sUU!OTl84*>Bv{Wa=EzfGIA>9ytXzRA*#aIqa7-G%H?P~+6Yu}3kh$xhij4Q zMAWhnUHQaRW~)Huc>B0W5@*D$Ld*>foTXdL^b9bH6t?R{LD6*ZEp4ZVCZ97D%?^L- z<2|LQZ0-!D1+NhB1l|Qd&h!XXc#BkryBK$_X5}k?BW#5ZBAR)NHrR+8*TYQlhotHJ z-LHx0$XQd+H@FlYAD`5%#yU~}Rbr6J>aBMSj7cNPhCHM{4{)Rzq-pBN+d%x?=YEYO zmtmCw5=etavvRqXL^jMD@-y-*I7OYZiA)a<`JBG+R zu4*r3i9R%WT(nxOd@=waBM!=q7-o+Z8iET8wb?cW^g>Y^TAu!O{Ql?a{MSkQ*N3_` zhAFig+TYYP;-#gH`3D6%h{Lvwq*FEEsG2dWoI{())te)6NmA%IDRQ7c%i>QTM>Y{Y z!?2#F>gxE9L{G*&soT{-(y@$HnUwZFI&u(C1%+?H3^AVB_ns$LyX%4iT7#1+F&%x? z(bB?h(ta@lF=#Iz4D9jLy0=we^6*V=5oP&4D^Y!xx4kC=oZKt)JrIS7`;)f&a*`m$ zvwC8yq`}!0#MbcHb&W@{98bjdI9XYlt>xLwIElK|X{Y+>uYMvQX7jw+(9!l~ia~K- zx7pT`qNVBMCoV1Z`Mf_IvR)6=2G#{+LIS1R2;Y;@pLCw(PJQc8)8|+x3q8amf^4S} zAHQ-nfSYj7i;$rDj5~4{!i)Z3dL>G}JLSkYeXyYu!V35#_mC}<;>kHROMj+V7U6VS z)Uk^qJZT)zLGf$#ZoICmsn!v)$$^!u{+}!NUmNwmKlH6afVWhE(LkAYk_*Qk<+w`6qp{KGL%ILuF+p;velCwDb1|&<2B2U*HvfMUlev?-Q77q$7U?A_RxPZ zY+Rate_XGgIK>LUK)t7D_BABV=eV&IXdE9O?M~k26ULpw=!#&wzrFuVN{VpKFSQE+ z&-&AS*HL6;B@G@j?eF%IRwDFsDC|zLKMw$Z$gje4A>{Rio;U$yVOS62lXvfgz3eoI!nX4?Wx%BdRoa486j)r24&ri z`w-5!wb))qfzXnO4>^Y&kpT`)U)(O5_mKM}4!NeLOgqV{d$VusV7`pFzX1O8Qe21B z(ruvh?<7Q0Sal^cf0C;+j%5Bsv6+rn!d-%|{gb7?a8s3#O^;Pt=6Vtk;``K(&03Q9 z2j*9EtiCTUONofFY##L__sr31&H&t|Y}g#sWpY?4%+QZ?Smm?ty4J{G%#0mOmzmt2 ze%m-9KMf47s3=QHU2tP*-PzcM20B8*@hp2Gt&Y~ar3WqcrK*UbGyzBqAp z;0?!GaEs^WuMKm@sfmt9T-oJ4y zaFRqdvK=$c`)0c$$DM&XcYT(5wUz1!@1T4_sf@^6#+oADh(a)#tS(FQA7nc+wpF z@gdvgvvS&R%i=Av<&q&|gHG%#&B}_B`0jH5EU47$P?$e~@Ge&{ljF7bJr|)FR6lxr z`N1A%plCK5eu2Jxu`u+}vGFYSCQ-+*r%3wf5H{Ep+F z3hTznTm^HKe?k=wHjCCp%d@3gIiK-w{#$APjl=mFi}_=d%(0g&SZ;PT!dxGd9ht zO|-J(o`Kh4uljK_#e4lYM|yB{G-1&StOYZZnTY5gN+2IzeK}*j+ZBEe3-@n0FEe<_ z>h148c&5OHz{HYIxI{RAbh8u*s4-WNIKOrC%*VHA!I%QfOIr99&I}0&34<_=IU}sq zEmRSCu`v*v2g0)RIL&_hW0ICE%YB^&e4Scm%RLFyYO-oya-7Y`Dz{YNh$~0cgmN5rgc)8fVHfCYzLdC^n}^zmtMCQ-!j` z6%N}YTPI#`VU3q3Rev?mt6|>l4TyH#hb05M7T_mH^w97yM?p;=^O1T3hTV8V20)$K zVN6O<#Fuc7_KE^mGpPWMfDTd@mXCSO3_M%kh+JGKQ*J7K{gdy_uiiwQ90Og;3jcZG zzx}dwYWR^Hk+L!p?8fP7&WSoHXI_t6)N@KTnXHxe81k-yW0=dH|scTl2gywY}eUWf7`iz~`x z-!_7$gx0Fp#==?^)3oBI@ra;6v*CGB;cVO=0X5kQS+~OmT-cAdQ+VEAf_!{l&9^#d zG3hnJgNfkJ<`-X?SMcr6R#gey8VEnD0g6AYG@HcJ23 zfqHpfS>LOJM4TKj&hI4GP4MgNvp$AL)>{IC($7m+u56lf+|x^dM^{~b$AhVIid_la z4UMSAcALi#+C>ymdig%C2V;-t0hC|Y9;5^Wg$Kuatv72dWaK0_$8NuTARuQ`TTB50 zO6e_&zJI1j|2la)c;Ly-&dxfYHkQ-Huqet(hh7)t@}S71xX}yPiVTIxgv71W&*q=@t-z?C%k=Eja z8k`Sjy@-F8Bc&JQ50H7;k_IZg0qFyCCR&Y>4~4W#tNfpIy!kKIBj5)ISraNrb4BYv zNn@0=d9=41OB{&O6%)t5^19C8v|H26BoWADEo&qJIn{il2p8O1<(M7L6q~mL)QKqg zI4H+ruoj1v%6WX)%4?L#&1&rUeZSC!@J&_~L0@I1s zBcSBty=^?{6jtqc$asj?-TJEEoGjVxIF|0pZndNdTy9fW;kK0Y@`oYSLW1N2`D^5$ zsJILDeiS)Ggv8Xt8s+gi)?nb^m`(j(Vx+YtnK`bHA4P&NiI~#3EMwPuf_@&Raak*G zv+b@03ZT^N^|T+ZW+4mI8pC8(COg4(`C<=F>|RUwqv|m1APoTlX+g-k;7D+yCiLUZ zpG}CUkaL1W7dizY89^&N^7(L!41BIrMdqz6=`bfP%uC|?`Qv{~F%4HLJzEy>d zmO70#eYD?UqA9?`!+YzDJ6wNyYdT{=#PjtP)8||h%8iph?d}|jZ(@$JJg<=&<~18V z3f}r0?)JTkI(xie-M`;*W}Tj6x_kG+{qn$1q^{O_)vKbD#OMePZMj1)SKy_)le6UFj}gRpcT7(c%QGSS zc{9&@#V7?D+atcAgFt%#UtS^}(!`qZCr=L{^Oqh7fyy~zm0tm5Cqah&&vgmP^ z2G@t9#}TgRpmaBj*NRHUxja8x=Jny7H2hfA^RHPPIQG{9WvT+46^NNuD1uh>>gBmk zfJu9(#lKGPiD%y=R%5@&-iT-#!?xYi1}UGgFSywpR>_zX)fwelO$t^4e9i7n#tk79 zuV6Eiu}XCI)FKCo@d*QL*yU1DWYbIVSdV)sVK{=ZC10+3NomyDT9Ryvb)g?I)vI2v zHpz$5!57L29Of9q!SvM+K_vIzIUlq~U=P9Z8^-n>H7N1jLu4B&YR zPq9fNd<`#R>bA!3Z`9D^k?Hx2bhpEO9FrrasP!Y=r#o53DA8_CUx~(}u$!kpiWEb_ ziJ8Uj8qw_87qko*C|OfbIL_USc+c6Lp!@F2d-t2exId*zPM!#CW~{qo6Uc;Ul^t%c zr+x`0d=&P}4~sA#_zKVu>a<5ZQ=?9NvNz@y$Minf)m4VUd-vIz@lKey z_a!WWu|W8Ku9+Tx%gOsFXl3#-@2C5DLR@?oCMG7RtWa*oCB#}=`~3kI!^+Llll;y4 z5%}LN`+vmR9-@dHZwnmf#_sEg#Q=$vIDN^xY zCLJ_>t6l49+Uhv*GON_FeW+!3RIv(=rd-v8F&k?u1eth+9`52o?Y*0* z%)}#4BNIG>r4s;sYs+vFE=9zS&6dQI_z7^CEMU)xV801DFR#G@dV7 zO2hd-&;S*jDz(YCjCWBD_ya=^{QO*SD#^ZJxOOADDDc9yqFb|CtIyk&FIu&0yQaB&^* z&QRfF6-+qsP=gU$%Tvqv!biKG|oBCZn}_^K*NBFBxZvgHXEUu8r$Z{;<|gq zs?}=cLFiA-l=9VTG+Q-Usa_uEXLx#M`oJN#no10Y)|6LlofHPrJUai`==)oy>w6L2 z1vbIr?=;e}4(igtg=2^sW`qK$JK?<(K$#jW87L7+2VB0j7%NF?)G#AiwR4$Ln$G$! z@YJ{ktJP;9bzR20ZO7ZPX=AUk=!+S@F7mVdJXa|A0-`Bh&0`EF$ds`Q2qBK;h%t6> zQ>f9_H71Og(f`KlWy39FC|A5-9Pxe*Sg5$ixEbV-04KPxA8iYoJDmM{pU&U|{G))q z^hDzLUFr&WetuqwZIyyr@{K=|MEaEf8UPOL`G5%%oLrfPt|P$5d3D1$OxCw-gwXn0 zQIXE`11P)MgbU5b)t5Cf8cr|=)2FxMMVt$|hC(o>iN)Gf)Y> zE+fv_$eLyRI*PDlEhjN$T-Pr~+!0C)#p@re)N?o9hLn90V#p{dUTLupQO{);&VuhG8Af_`i_p`ImtbAs67WcUsZj9%J27H@kBMU)}?P zQi^SQPrn^_AL>Ig$_sw-3kayG#9G7z0ulEENl8fyX2=!zm-nx+Sl{skCZAU!v}Kzy zvOl$$#|WHpsh4As{8kLz4H-a95j3yVwon>G*!3f(RL)~0zje}&%)6xW;BmIWN%xa>oeElgG2Bj^5KC+U|GaF04`)y)l$sx= zGKTS&=+{Yz@JrahH;ON77{saxmj#A*zh0he+D<2iOQ%dC

    -gGp*@epQ##EmE~Y) zS=6_`zWM`yPL{bm`vnfre$*0rv`IYlZ%N6wGc9H`BaK^%MHLDS4~aTLW)>xp#WExf zK@9w*M09h!tdr?-UUgcmpwgXIYKXh4MhD@V|N7AjcMsreATE&BWTDP^!OXpy&tUq2 z{}LIzSo>QWARwT-Xh#m&#C-aZ z!t<@I?S6sSZHZKPA6jHk#>N9AZOHu}<;PtlUoIGs>VvERtCBXY0X`x_?CmbhZx;j` zjrN9_1z8To2)DKANk+*dme`3e6rMp(NO-oU z)03&0WlSZxp3}yvc3b&MpOjBo+!x%d7}8d};YiE(`Sl+)xXO7LT)|q!0Cv;Ex3I?M zl(?co{+4|P`S@7li~s|rO;A|nO@w){7{f)vgHy+~<+-L6c$~O5hM3&f$+T<=-dy|d z1*&1Ot|$A$$xIGDXIbPMQ{ZK0i4yNfCkK9M&Yg4P1{pf^%u!aNTE2m3{>?V3a*SlrPMvh>W~s%jxwrB+9wAu7a1W_h_WRm6(BdG5x+Y z$Vq?gO#I8W84zRH$xLTKvpFg834Fr8*!=wbEECl_Ydw0AcxLC})ui=54?Uz0i8)~w zP+xLWIn&7&j{BBWnHZ-_WDC8g3-sWt@2K^daJa*c%@s+}mV#|-CJ{Qt=06L}hX8{@ zjT)F4#R=4{GtysO;>G)DV~xHT=5%D5r)4HKcIyP!PqY8k>03J&``YF6oCSs7>ic}q zVqWCw=h2~Qw8-=S)LCryDQtX0w;ORMJDP5hB)Y>J34}k7WirN;CM+D-4f3_&_Y&8o z5raMUnefAVN#Q>9=jj`WgZ8^qXDUcTQp0Ls zEK5|hb?J^;F9RHrJ-CTQcrH9`U~k5DX#*%Tmj2~w^CUbeDXCn)RUf7kXFxl%mH8Sc zSBPTbC7SaWI9)QDWF^AE$*FQAmBXOL>8Lz2DLj!WsYLYyP+YwE-lt`?c2x56$f2=9 zyIlclvb*(d?5dfWR}`}OuwA#p5#{`WJmWS!n@18>AhB2lOI5bJ)z;0E{Y?e0XGlp+Y$03)YbDdMV-XKuj2>WFNS5>{ zLc|=Np`g9ZGyi?4$HHgzBe?O;*TY9y66w58>BB~PmdyR9A}c?3DGE|#X#^>@kKoOf_mxp^% zumP4`A^-}G9tMa{D+#k|Hmg;pa3OJVSjI~W*_>8e%q5o^pZGj`(p-oqmTQ8wH#Q9m z?Bj%Yht$ns^RJ>4O^U3fF1OXcWG*YUnnW?FZ3%dffp`$0x_Sc)<0h4SI)oKkhFtVU zM5Th6{pZ%l(1-|;b74hZn^SD*BMc>lRuFyUdp0>tazO_AW=DR6US~GYhd-?jv{Qe8 zqzffOt~bY?6LW>iZcZmb$sprDAbg50^p94=fYw~~sQ;3R{r4?@<6DIbPnfP*$P{-? zu-(T?(XBh*KaQycCE^A-wBKWa*zgLwHxu=n$Ut!kl;}S?8S%H(1hPN@=e+oFQ4+5V zR3&)7o}v;7dX<9yB;aq?TC7{}de~rDjVi|H`gxQfi0=J_QXwqIjo6SK_7Fi_9afJ! zA}y%clD&qxO~%J6>}*z9B2%tlqeD)H4&=c`)y>wM<~KEp-J8xZbW&JPVFP1oO(FYC z0@Bl4g5x8F@aPQfJ2}K^-2CR|*I(ZDO`u-Y5OggT%2&Gt1OUI%u`0L#)jea>zMLe% zd|~P7%0T@S6FVKlWqO2gsoeD&Xwi$ejFN*bS7|WkBt7ZoUFLd_CYH)w=^$Qg`nc3e z7OyOYn1IsK zScNDOsbkt;M)t<84;d-!PM4@O-LpP1m6d)^NY%~T{ZJF{1-Lm260@k`%>U5?`d8P} zgA=2oBVI3#H2So< zoO*@JHmz+}L!I%b1)Q(&2c{`HZ{NKqqok1tgt^dAhm!IQMmDX|qVKjb5<#M+t2*c> z3Um~)hg|JmqP>}`gl^(Vc;gEZt(0s~4KF|&-5w)@s%T&P-@PZGG%28QIim8ulWwqo z2Wp&F)9}4z4ECEVbL9irxnIk|!DZ5;q&2#^_OK&{?Qi75yX+yCqF9>&adtLyUeCr< z+mKe}H%p`0jHSH`43hHO>zQ*I^-?duP^Zh>Gmm8bBsYhNG4_sQG1jGi!VPhu4|%wO z8m|v8ADV(5EtTPL_(yqXJQJajQ`PV@wL%YXqj@pnZRX-)G$a&ycTiTT_PGfT0wb-k z{ItYDlSL=MZQHJAb)y{}uUsssVa&z_MH`zKA-B)I;~NDs9!qd*+w^~wFTX%|`e;CL zNx`jf3&nmdZMnFFR=EwB>T`wF8heN2Vr#V$K1Imaf)4X!UTMw$PZdH}9C4|yaMx(g z-l%cRR{W_3^>bZEp~?ZYG)GgQ^$KCSjm7Vp}kESp;zbaR`eh}LM;3J)QP;?4~ zCkkf5x4i5%B%-FD^YB;A?e7EXuntjS{sbm7{8c`4=fBJi=m&-q@`A62^@~G1YhL*1 z!l?5Mw}#BPhZbL4zo?HcyWbER2z&E7@yLJgyh+9F;yAu-3<#8v(YH#(?Ya2T&V0u^ z&%SwWEiI>;D+%_3jU4KAstlUaTJ&q78@5Vi`LciCP{aN`jZ2D0``~09R~=#+YCS9Z zg(;P}1o~yDp2%6+ur+F9_k?w^$s(rULijCciNorpF+fUOM#zwsjr%39N%X+=SL;oF zz3c&#YSAjgHbq0jx73R3krthL-r2%}(y@bS<|vhfHJ zh!f@csej&hTV3DG!XwRuAdkU^h~V@abOO+?OUDl>?tOF0=QlqxlZYmZ=;7Laj`9gU zw>4v7JxHc%n@hfMJGZCmw!PMP@pbA{Nf;82vb zSwgHr!y~N-^1c3uve4DYg|a6M;TO1mj^6geGgF$KfL|NwWeeTy`aP$(=-CfesURjI zrPa{o#mG-?f(g$mELN&zK8y7fi0vBR-Eeq+aXf7oz9pZp{+?2<&8PT5&(mMmdr|Ow zV=|h4|1t8xi>dzCT%CP5Q_77mZVLi(bbLawtZd{2$WZIku4f4nrRU8JS-fQlRD>%U z(RGLQ#p8f7RMwRB#^dFO3n@ih6<8U#TlDhyB68{k;y=E_nfe_}vnwuH=NFInZRwj5 zN!`)v%Vj5s-J)LG?eQwQ6PaE}E-0e;b7N8Ew9_J21rppbtMk%>*nEp^WJJa%d3bpL zEdy^?al=i#?G^Gz-O%0STPGzA?&3fxm=EXHe5X+P&u#LjM`zG0yOwbuN}2m7C@YrO z{xY2XT}cO5!5mT2jO+X@j6{Cos=9$e$}as`WT@8RWJcZVK8~D@mw$T*1}K1H()bjK zj>?6H`JQT578jd-NZd3u+Pc>H?(?{eKpe(S#9kQ?hCE8eu0ame$`0i3kPS{mmK@E=uefRb=%EnhYFapHZymj zJ}1yK?E)R01}ytS9?=EAzW_s8DLf_RufI5FTCc5dUwO>b*L$`c zzN$eZ{^tbhzXNC+IPC0f2(fdr0TS81M*_MW6SbT+vyXTM1FJ*Lda3sFC&T$|wl}f% zW$3^^*)dA{D`lO}@APV1Fb6j7*uOuj+ilz`t5Y_e%t@$s31;&ZP9v!g;>5C1{6N@l zpUs-R&xms$m}{oH;E zzNcqW2jqSg=j9(n50)nZ()}O8-ZCuCF5A{la0~7(g}VfIcPBW6;O_43ZUG7iu7Tk0 z?(XjH?x)`O?C#xty07p1#Z|wcidD~=bIdXCLFs%-Lu43JyI1Uw%ZpWyD;prLoaPIF zx^bx4yY%-C8-lktwdA2mQ>RZWOTnxAs+JI4Wd<_Qbdw+xo>v!h5|PE>yD$<64RZ&F zKdr)hr+}9CILPA7CfY4T}E6s1$pd< zS38F!*?gios4S`xomJE?>t#tip*~s4tytElN?WCB8gS|SXe^xzqI}_XvFm7kj2+PF zrGF;Dk(K$RWjU#y)^NWtH$OaXov|zW%uMd*p207*u$$$*xB0&ICy*0CCK~O!4f;dD zI}r!*jD{QF9N(_^%zxjKZ82T-0gBO?a@2PdO`>=pTRPdSm>i^Od>A&!b$3! z`sh#5ujvOH4Gnw&59A32Nk+ijN}G2LaFDYw==5=DVQBm}Uh?-sH8C;sl4o4U(>hwL z5xI><1+XnwSp`jUE1}y84PNcSjaRv|K-i~lLH?PjPzA(T z)Y3t~=Z13u7ea*r%P_i5$AI74Z)wld8)^Tu5#~qa1fDc3OCzbX_VUA5Pja_k)b@m5 zkB-B4hX)lOwUC+hD2D=UR_TmL`?A(j=lkoC-wPl>WU8%oI z=={S;Jr1d9MrYJkjo*CJK5Z<6?4VUCW~-{Y&q ztSLdF#G9L&ho9&=;4eF%zOk0JB5bSggiGB_m{^O28=b9Ii!jSfY-wmloUnej?#gc@OPXz@yomc{&2N&x)YOhSk z!EIjX-uGo2sn(ypU8)MTbR&6ud6&1@OGge~c77OG{x?U~rJCR`IS_v|T@m>49ZzWf zS<>qOeQ08pu?qz@!P5&%QqJvD-X%0E>~8UWTQ7LNNq?7|vbrwGUlIjPP7(SZeo8r+ zwg4+#YNZ_+`bbe^rMAt1Tdkj&6^osTcU_p7A0zWSz7#V?FTh_jH3c_I@pHDQ_C2&p zc%d7vac7(oi_}}k2S9u#&*=$<4XZTDvBY+k5g-5TQlDe!Ka6gtWR9JrH-UZ@{l!oA@lr`ADtv* z#!NrfJ3KuT7iv3Nqg>_`W6&Z;3RFR9V=4-KT0bnkq}fAjQ?04N#}!>Qef97l&#`_@y%QurmRR|@_a)ZW8Q?7+DPeTe3(I7 z$_acr)C*-kTWi9w|0eAu+iJDcsD&tqB8Ox+KGa74VxfuOow}mA;m$jAlM=*bzl@aZ zY%LcpI?z8z` z_F?~TkCyG<2}z!!W)4qY?rR4THaVkKHT%xq>H4&oHHVuU>l^k66(s%L44AY_kUIV9 zB**lCbLC6jBBi`QMnW<-?CD~qRL7b;h86s)02ha*-n*rtG!t5E77!y~X(bUXHxkuG zneoF$tc4NsJKpSn%rO4F&1W!&U?8rNA#+#guGR_z=Aw}bz$Z@;r3wi6PNl2%p` zowQ4&4(U+CXAduXc;;E1qsM||Wwk!jKh~e)p7(#fdjG{s`q!iXf3zVGJ>jpe*0fk^ z3kY;IO{MHt-ogXVjVSARVm45@rJkawo7sp)fs1xI!-NjU*TPPAMWjO(~COR zy4Lm2uoey#S5``(8uCP2(f8}`dAO8!0P_YO$Yr!&+1gPrLwP`@3*KQYnf4>z-Mj-F<=($@M zlH(ZvWbghyIG;kBS6Zrth|fvv{c>;Kbb?m-@pO7K?N+VS{?Yd0Oaz;~@v()1!|IVF z3uHP+yMvF608mn@gJ|e3%k92=F99ITx8(AVn7YUJr}4K3X;AID7o4h>B0=OXspqq& z79JfPZ&{hh<7DGH4D zp4+2iB9i<*`Qm*2v1qDCr`5r%hPu6-uiFyDI_`Q@9cz3ThYpK?z`678xb!o6q5+io zYFU0TJ${V)&(5H80m(m7o{ock`?zITe>I7XCfZ#3_TjE)(Zng7L~xsesZ#>XyXy7H z^zYi$Uk1THBH~$wE*Bn8emW~~sy97JUKS{%?VoRiB!#s}U@HP{m))!c?_gmEG+DlX0Pylv`hV^hJTY4=rf zFHa(ND4WnzC(G-40u>V%uC5|AA>r%Sx`a>-kmV^utydxj-@o)HC1Zu~*UQ1Jo_y~X z(Y3gkswMqYhD-oAx7Pk>8YMg?LkcC)M0Wzjh$*SVi!^=01sE)xrFX#ZJ^ZquPsYE#?r=GYqKgFhQUZ*L4#y-SA{s3bUMVy+ z3aE`zW`Wf^YWwLUCUqN$wLhI$j=#6nVK!U3HqiaaPKX(xUI$f*K-P z#3*NoMe%??d#jRE*Sx?BvIvnI{H&D=y`r0 zp2%_YI%nJLo-0*50U%hKfVfA?<6P@H4?47`3r#(stS*t~85+jQO*AY$&JFKQP`)+t z&B1|SV2BT>L@VE5=?geX!?Ipv+}RPsz8^Cjdvc(^c^i759`daq_pK#)nwU^)M|y1E z(FyzQ_<4kY%+uz7?*n~(2!<>wI7&j^r%R-Wq{I8R0+9)&gjvfdr$c7xAKbU`ew$_s zvDC9wKVWpsAgt1K&4PaW{(bps#eTBAqwp8$4hVuB>ZhSnHTB`tw&}RhzP?|%2xz5= z*Zl4lJv7xa8V!Ln#9 zuIFB}7*A^=v4coHAf^uKf>23|6l}&G?YDqh+2qjoONlev^VTOt1%bd#h0NGECPzuu z@dyBt+WbHaQ7XuYxoi4yL;GYmZ{>cp_ff12%KfA#{t|n{c}^8qPGX;#nMk&zSgia6 zM5;D@Z-tb8bPM=HYA)7&@Zs~~>An-)00O#yAV6M`KG^WzaqVnl<5o({1gpsA(bMs) z!k^Ry3#S2Sq{fjX;}!W$F7=^{ zB}c4JGx$1gR7qCIj(}51KNWY+Q#Wpy*8=XkH}g=ZSGBT*lX}wL$1MrRcm$} zj7+GTCY-Cyu2?p=x-*%%*E~Cf_sRtKiPRk8 zj7X~7whGkuKA{)&#=W?|PWvIPa0QFzSdI$EHQ=y7-w=oMT8@K}dnx$&d0*`r&+gDb z+5B)!rYDg4n0eEaiI!HP)ZR;4X2h?Dq;F3os_VU<1RH=yvi+^uR2&*T$tr7Vpw0 zUZf*?pOZ`^!F|F>{&nvU5#3ZBPgV3A?*{CF*b5Sx*@G=NX7P0{!D~<3<cF_yl_I#dO*qE>Dajv!M8^9H~klZv~U}=TMMq(t4+ug^uZ9hwA9N2oU z{}&xN6$=bYtU}5;s3^5kwBdvrv|OdE@a`k=Tk^ZCrWYY^lz(MGCtwF$_)F<@1q$GBo z54hwawr#(PD5dRyMs@H1GLsyJ&+JwFy6x*j0Rl^4Jssw0mg=om8K&}H=3R`8uX*l{ zHLS;j0-q$glAK*vT_R<(edy7Xp^XP(G94Z`I&y-hI`n-oc8>`)tDVwh+Z|9P|I}oY zDv@aFLVl$g`~`+=Xeb_?^#1lD)Pw^~8(DVu8gkW?T2Jha=-=sn@s=hnFD5Q51uvZ0 ziyKacsi459S#@o=RO4Cs`sh#O=eJgPHRF(1pgi4X%TEd03@?f`R~BVG+4;GY#))zT z$c`Utw7=%MhWNuO71b9|ao&7`S?9CqLrDQLI<7RxD1v!R{`%}e%Zt%Oho2#8hP%(f z;z2cNX1mmCoS2VrxKKV0_`HmEPuxn79bCG5w&FT6#-UqOs*~`I$K`z9-t*x+=PET> zo#tw;!`BuT9!V*fUacBHQ6g#LJzfcw58B??2C|YDbkI;rttX4T$tb5vk9idLwzw*M zgGY{$Lyd=fLSGC<5YEU`G_qN*)-`l|&pCKvFHdBN+iY0l7U8g6trepe4?_yqLY=Fs znj&6~2`GL@{71y+NDu2#puijJG8 zm4ZZa+6lsng>!$Oe&w?Lu;}d%p|!&E?J)^xu8yf_CZ8cJN}YbgUupQq`~#|)y2?Q>a-L?Glv4)Q9H;fsPNQq4gF|Dhdg*w=K^ z=ybHI1P5=2pYvxu#!xN;j%Ewo4==e|#}&{b6?5P1=5>ZXUWd6$J2U};lo>&k>lcR= z-36;WHgnLahM`~_2z8!DRFOHi#YHg$MR?8Z|7P)8{LW^cXBiaauAFdU10Ev*#z{gV ze=x#>2lfg+iy30{W@+1+XK6$*yQHKzej^X5$3_OFiX7Xs23MP4uw`G_8H`q1prLp=D$?c(Pi$d z2&VlKX@EE!4|8>;IGxseI5F`xXHv0Jpk6+HDw??H zqLaj&e>87?bco*;feZXBw`6lN% z<%(&!72ZD@Wq-!cpM4e*be>)|vXp;N@~=D73ZzBD#4$hX#@vL|Hx^`V7?*bLxw5<; zu=@;Dv1zmaVwm_M`RD$0ioj^}ySg?qUwnMLRw@KR2hkG&5!iODbC%n7C9yQFU_#Us z_xVTMrJ-*93^p?K(D3=;$5yB><;j9=+=d9s+h6d>1ETX%@ggFdmgCZ)>l6LA*cvHi zgR9N=w^4Hg7~~&+a6VDbwzx7PM`WK>4kO~|cks9Eh8z{~rkAidC5?^+vhx|dL2ZiW zruqV=5rxutz6)-osAcFUayr&It|?#mAc|}cpE>kGH6Y=R3ijI%VI>7YLtg#Y?-Pt?oY zC>Ur*4E(W`R0 zA_z{OrbT908pH92n6Fhr-|gQ1vP;A=E8Eyy_(knbnD@BL0Yo|z^Jhm1qX`1{tQR)e|sAH<<&@!B27^PRrW2^%W*qxjm0 z^^`axPl~@^-a{RCm&=NNeW+N*TwOP^&i^9Df&zp##q5jht)u6lMZ}0%aWU*{-_&Dg zU+|0vW8&6+O5--pjVXJn+Simf$Y;!0&LUklm+I!gvsMG_H|9j^vy-a31X zVqf1oZAi=grD3%@6we*Q&@;ni0KIB>AQ0_{p42Ttosbd3EK*o`#5YU}^G z#`S5yUfaoq=IY8uD(7LvhrW2ZRwF>+%n-hpb8L7N`4B0zUrXPulQY*iEjcVf8eiLM zsJw3FYzUt%z<+~=H%76-ag(>Z8B;xYI%*0@&^Tm-fn6#-^n8pL7`pI%@O1!x)z$a^ z-QV`$RikNL3cf>R>xSUV1ezN)Ii^0(@?SmXJ$oO2F4*e|3!~X2hYi}PAtoSD z8jPNSa=a>MqJ0>%!|nEYH6I7xKs5b;%xs>(@r+-`1WSIZy2 zUj>lioTXLn<6S{+wry|i&%&(knvmlX+)ic-t4(O?Hz9?T=b+h2Z=G%n#N8mdl$02Q z6w?Dl)Z5El{L&w#&Bof=@6`ent1mF$@KwtaI-9RTER9d@3C2XKeczRIn;7Z8_{!$m2icYRAcr%4q6>9KX305wd{VlsGTW?%GhaQ42 zOX}XC9q`Q^8jK$BlPZ0{@1lf6(ad(O9qk96ZJS6gLF)uG65+3#qgiSxwb49@F9#FY z^m0V7&%g_MnvfP(nf_L!5{v9lF2_FsQim^rNC(9dtcJ27=_}NLPCmYsW6zkyndYEy zs+Jy(G%OU(Y_vat2B->zDhKMRfgCSeR|Ns-9R`j2NAdFHUn5l}Kwh#!43LfHe>Gz| z+Lj6yT^K>oCZMC?5kK9#`o?TC?h~R zYJQey%Bbkhrf%e3mFGA*#@k&HcqVc`uk=kSfajk@Yabut+vA9R)t&#XMKSSlh5~%L z^p&4+uJ0#Gqq}>&+JD8~3Ma0q@ zR$S$0x|MA{dKVtqANR|)iRvTonOQyDk|`L9h%f+>1W8g;sE{=OA+Cd7o&!q@Gw~pt z@5oy%$}?+f4d-olCt2sEGezSCH%HnVAL>#Q*bD-1Q?39WO98}5uUq2yadN_01JhgL zgq3Og0%-Md2cX@wW_LGu&1D$X(>2G3k_E|SN;2lqB#I&V!J*L8=9>E67G(!XW!t5I zvaV(YSwV}?$^h&A&;hUemVY7PV;+(-)MgeXH1E%|u~Gv0-@&eY#0p+V8Q1F>j6?9g zpvD!66O)kGVoO8eZVJS;$<(Xx&g0KSEbqB$BywxPZFYIz%NGPiP$UM!W9jh(*2m+5 zlFmg?Hbo_4J}svbguZ{?BEf!2FIqGAUOHDko@Hl?%#LkuyxRq^I&I=}l4l(awTF=>^V(8bxA& z$o!e^qgEB6;TLRe$Hr`hhi!?X@e@BI{%(VNiI5|HwK}L8*5&IEC6+@tXK^*(Ug4>L&WL`Zi>7;(_!bTeH&`xoL+)xQ6i@EA|N} ztL?Du!xM}`@%ovBf?Ml^r3@H+#)KGDNkTBr`)v=y8(sP7J@;~AA-vnn&@k|10Od4N zvkymWTvkRD5Xmz?BG? zK5cWM<5k1pLsCa}NBen{@8-!k5%6c*=t8{VUT2#mP%*C6Vu0=!Xw~ z>-#@ydk!1je@%CHl>@GORlm7n=x4SN_Y*+RF=EDxF+RKB?N`>x1%=?i zsQ34cSCkk5#ingxVdA)#L+mG~tw(&M*W9resRq|}rSV&gFmYiV zpGmhWj(|IqJZY&ht?1!(LU)!uQ>g81<52akKjqw!wzdj2l=HyyF%&kh|%z5hTslcC|DE&Gm4KHn&9Kat7NXF; z4v2owF9AY1F&lWpb#86Nvsj)B1BpY2&(AXc5Ul_hNW>P2kT9FhNH~j&Ceq7nc5?&J zs@>n9?W{NsyGYHi1QRR5I^Oj^5ZDKd?e<}w_7r@nzN%r^86YL@);ir1(OiX7S38~z zRQo=#;~)s}lTeFwcas6w8ICl9R`1E}ps3?<_Up@=%hV^E z%`eog4$Ay+6X-YlYYu3lGsQk=2B#tF<1Fu&q8XrHD9@sGSP@GiMg$grR(M>(KpJHMm?L70l5)@eu?y^ma9X=qx*bKgN1 zv_PlZfUf-pc6q|P+Bc`RXGhX7^2&3b9Dv4kJj~bX8#|ij+OkW?6D8$&YWvPD*B1oFxBYpN8(xRo>`~M?Mk|)=+!HmqBzVhxvSNi zHW)T5_LrJENsLp68Fvq7uMkz(a(3T80+R%(CdT*y5B#r?oWQazHkg!wE#3-Va+(QU zyP|v{;`ht7g&@SUDzu`Kxbw{%PmkF}slQC97`@cFiCAKHM>YFGgFZU<=c~EGHwTjv z20nz#I3$s&{N*pxiu#lf{MV48;rQ{I4RlFA7a^YP`YaRJInh>BEkS!7HEx(W46l}7=5 z9{FK<`+Be}cTA`WVwb3UIIcnWL~Gga$Z{0*j?DW3$`lFZ9f5%I{Pi}$!;iXh20XvAbaGe0Y{_WpRmW1*8X{1+!T6+qm7#DzAqS0Ml;-+SI_X( zCUe?+(Ed*0edGWckA1taa=g9ADzfDPH_jNYD?)`wj^Enkp7plkUVRr^bciXlT{w+V z<(m8%g>1(%e6B_$&2dQX`5{)DfRP@3-MOeujgDtN&6oF;YTE@$JGYIXg?&JE z>BCUSSK7V2WLwF3|27u$WjSRe30E-S7>?bKi)W*}i1qBgaI}Y!h<`-bxq`j=w5g(m zZkVH|{$BkF@%U~}D#(!XiHz1mq1UC#`p%Vy&{F>*x4I{&n?8@GV&9=8TSEP&eQEJu z;uj|~I{oC=i)?5yLUf^9fj=3EnPkC43^(a)l7obH;&2v9g=>5jgKFz$rHlR@(ruoIP`olQILj?(F+wlDS<UKwL*DpT%9zrL~)_Ql@ zq~s?u3 zV=Uw->y@wkJHo>(V#Wfpw@S*u*r;7n(XR+%43`X2fqv2`^U!FoirE!(j8g-^#vl~* zP({=C?E>8FE}+5uTD|%2cJKh^&wX@8a5I{t#!iHyqT(ZozIOy+b%wJ_d>*f=)WZS{ zJ8@I8SB*>pSOJx>;>t;>7-eMXKb-9i+V|O6Yuq1;?bD&#FuPeOkMNj1cvt)Pj-BqW zt`dciyCPBinQf=|SgbMehp=y~jOcCs9n;Vr?DgH!SZk6Tkjx96 z%CxEuVSriK;i887OY(slau%~`do78F;b9o_^1b#*b|Oo!n&PWTEp)JcjPdJkS^}3> z6nBwkXd+a|casx?y#A5Tvbm`l-WrGHCg;}%QH}%-znTbwkAZoiB+ahU_wj)&07pPB zjY(H9F#KoK4z^`HcSaj?;O!=YdX&VxKi|)(7QJH&CjTFD7|*aXRlVeZA1pne!bTFm zHXHIi4~qI$!Akw4=hF};h4&ap`I3$$M>rZu$Z8M)w|zn!#X9n=)pk0~l5#dP0fX&d zmg#3qr+-!%7Y%y#AO8g2zXGm@zhfg~h6M|TI4JL{mQar+_opjgUBN3hI9!~2c~#-Z z?Ekvt4422J30_*shbLv79a&eKa2uzBGhtyh38>JCSVI5C<*v(-OQv&$Mu2-HxL`*a zWYBC+9dXSJsXcED0iioW7X|z!lDfjuvqVjR9DU^TzAnHRxcE|GwF1MzO2Kd}{tDT* z)A6z8JLGBGmOq7wo}js8J~MYNg<*8WwvWAn{I!eD$Y$hi(;+7N+^9MK33zTnG`rW% zq}PL0VT^gsI&c;$D-h9&ALz*jIWVDt&|I9^&99}c<+RXXMvaAhxGLE`CWYjLJO-!p+55;kNbZ)@wb_s zpTrI9kO`4PSH5y^F<3{z)qk1mqnR(g^soS;JK%&1nL2_RhCN7Vl9YPkk=9FCmOk~v zYAvcsZUw5tEUofxI)zEKN+lF{?UW<85i8r9nQs#^=cAM7i?Xw!Fc%udiTlBb}8tu9o${owYo$s&uO`_DZ+ zfXj^YN;>;Kck`%?wr%h)mq;*40XqZ48V$vVrwqdfd-(okP0Fb%W-k2)VLRycnZ|7^ z^#{*90jg}ZGIFfG#hWeq0GdJVToHjcEgiVZfN5OnlJe9k5mW%v=5@Vyj{P3yx2?7n zdYqCe2hIjr)E~m+q-=joYwlwhxZKJ`p^8Lv2q_NBE#gS1ryQt?L=(_R0W@@yz7Sg* zQ5gU7IsW?z_P0#!`~*LOyztA7okLYx^W7(04yRz-UbhbxBZ2x)^&?~u87Y|&JLmdc$e^>*<*tOOHb35nsys zgg_f)bg!xTp%sP#{Z3;I;`vmRxoiB-5v22_^_^>eZM3(u6Dw<-*pWlbi4wEqzykW| zWq0LQ@5}V>nv{eK9Cb3q*+sJW=%j%=feh{sJjAQ*RUX+!2kL`8uCfVfJ2Q+;WAAKn zDt?dY_lQyo5lP8-NJHIeWFD|1nbjwX{-VLqQfk(TUahneSrOR`E!7bKP8fA^Anr$^ zOkw&+mB8ljivM!h{{E0ESip*sr#|Cj6LgLZsxa_ghX)OOnMN?SmHl>rF3!cI(zH1^ z&(D*bX)O@>Qq$zm72`<%LD%or&QI<2z+!Ic?3()URNvrS1Y7IkG!l~MtUNzSVweyB zz(w3EoR>ce(q6!;SpC#NJVa|7-_Vde1XG?Zz>j(Q@?h9`v@R;2q?-4}p7xbQ_ud3! zcy_A9?q>_|R6-%ChhB%KonMc|z^xk49|B9z{}O{)0`J3{LOu{$7U_1d1(ws|=429p zAQh7`Uyr!tUaUA=dQ8qvszDJW?Ju*gQcuK7f-x73iiJU%C|)=SN)r=Cv@f^9W3IuRYDu|o(%4kUXsV;mCN6P)7Ve2Fg#*p@qVEv*XspS6KYBiIR z`H*sQLm~t*VorC}6JndSzNlyEp9R~0oV?CCxy^1(v{ds~^wbvamHgbxKj~eB>!t!gp>%!8K96fYo-$FAZ`3qx`v#_ z7azDrBB7uv$!^0~v6yqh!`-rLr&rP(rms~e(@OHFOy}de_L-XQck-C$wGp(aQAD$| z+;2OrhT&&|rD|yT9R#|v-?s7n`|MmEtvdJk)U(*w+;xudw0+Q3tf3CWyLEG(1x>_LxLD;|TvFv79xeaf!bTE>*5L51BwBECQej~wG^8}~g2(zsYcz6|_zv)EyR zeZ7-w#Ld50nlUx+#>DxL%O`l%_`Bq~U$<_UcMQ{~B4Oj0 zaZujY=axe-qdPU&JcC3@7k+j#1?xw2If2Czq)@r8@irH&VG+}qc7JI#T3^gE#&g{h z{$#6S%9JPPwvwtFb-E+S8NWjEK2IXRCBB^}ycee5#8y`;WiOW5904jmO&n^mM9ndw zmPXUqM8&(Jc^xEMc^}5vODe3t4X}L_uEA5H=S6an^9w^>xX*-a*9fw)2UZ+&pK80A z`5EQf{#}0hJECkNX{DCgF?^1g<^Sn7*>*X=D38e<0d?p18}s(ztJT zIXf|9Q@a#WCauAV1$Myv{p#jnX2^Yo*_`R+PJ9K3{NNSr-Lh}bIRoCghY$U-E!w6F zqy-aLf60qo5B9c4Sj9>~yq$PE)E%#Db#0SzAGhcDp*;L&a?)qOO;@^OVWr+{jccmr zCSA|=#q`DSU&}H(YZT5Kt7EvBwQG+`VylzmYBV#eqomBHI~Gs3MtmBxxYyxtSN_V< z4R)&1arwf${BbAL^mb1kLQ!jJYV=cG{4Cz0N#(0LR6WqaT}PgU8g@BCCI;25&;6L1 z4Sd@C>uGsl_G)s8>yCwj5e?_T&oURr=(5dRnkJrD^3pBF+hInsomhn^Sj_QV+$0-# zc7zjYNjbUpEUQya+#Szbgqlo_joi7J{KW)3z5_IXyp9_wewyuHzCg5{{6|3boVW4f zCg)N!2a*zgCd+5ToSo&rzs;M{$W+wS$-Yky#@ES=eAI^Gv9k=+-S4+)*;2~N0le>r zf!8DYA3_!u7OJ&-2Wy~2KBM*34Asj$s4riluYKR|aGH(^(;NnJSMr-nwX$ADMy98y zNt501F>t8;{Xbv#8X^rxBohr*8M>pQ;|CEftQbGf4pnc~Hyy0beY`(af^5h-Sw6>A zS==Y=RtXpvZHxlXT>>Ds=+gD}NTrOCYU6t`4jKV@iuyBtsIm8L20{+Hs`Ik3o5)g8}-%FO7i1QR5GLULON!7S)%D zV_XC^^jgYP?+Je=P17{a6K_L7dPKT56qPUQ5F;^4rbd*CbLq_zr7~9te+D0Px{t@)B@cy!9(>%Ay1q|;tM(W{iO#qj z;O35OAmH>L3`dlLflrj~HCNPF_YeERoeNDaF0H480UZ8a{U*r2YW(|WF{88td}*x! z+)U>2z6cN!=o8geTw$5=CJ{-FiFgddS+cUsGbbfsnuF%u^}@hwO6WvO@v+i;(KrfZ z!q%LmzFyhGBmYFo`Y`rChYw}*fOxHa#r58u>gy&Ca%2HSh;Q#1UP)paR#$mTas>%6!Y5|rmqOnURnLyk6HLMu z(3>xs4iH77orip2Vmdx{Zo1#|a!FNJ$A@?rrl#VnO)q@XzB;By;d1Fv$tz@YOZC~` zUk%-7(!Adj2Hvz1RG8g^CV~Y5g#80e4p&X>kQ*4FjB4Zt670~RVlt1j=UDQuTsUB_ z_r4>=2@YXa%}E0b zBX!&T6SnwPOQj6E^}A@_vKYJ#WP|SGx^3c1O8>AT%sPpX5DnW**Z4v+u7D(DKUzC)%0vh7+#AhmAzCvznOt=ESLuC=s_s|S1<2eLMO4_Mv^JFT_I4T2| z!vvk8`))xFWDC6I6Go)-%4`yd#9S|pS8JYp|6g70?%{Y zj(Zu6{ap{>uFdKnKzJnFZOs#p3Vh zS+YGw-l{m9{`y|B#j7mjB48xQ3SB_~=s&^Vyq&uR#7$)hlOr0Vi7~R5Treo^clP$e z7a4Hnk07D~(H=Dae(O5aV6Qn=yI}_D;QCrx6+c+|MqrUGsi|(jW4ejN1p8$#?+<$( zh9-QTcrfBcwoupVOta~lOsmR6!(3r1Hl*yfstJSj_a}H(9I_X`!St&8hK065LO^t0 ztvb!G6;RvxsA;dIxYnFZo zNqKbi!7dTaw zE@C-sl-8rfn+|MX?vR}~+)i}81fB(NZQ`f$BqYVfxt}Lyj00z&rN*mtFdiahhCvu( z@PssGQONC%&NMzwJ_2Fq-*Bt?KF>GLhP~NYo=V+U>C;^DUC&dY7g*;9?QhU(kNZfK zu50cs^%M3E`Wpc|83Mej>I*QC#_xk&hnx|^_&ZQhFYgn5!~JsFfQ~9HZ; zACKW)&h857YnZYw<=xRwd4!~uc0qx>{>9e6x@c6ut_#=!Z9`_@Ra;R3pT^1H95*G#d3H8XsLevzWn z{#YB+$4`!jgb1MF`YOEch>Q(iX5Xl@RFy$>?Lzg|Q4wQF=GlCMr#6QImp8Q?>GF32 z%o>&b3G70o46Wt89(rUP+?Cxd?P=hgi|t?KPopq|d?^esF2g$C%l$}{A2l)`p3(4b zIL$D3;4kob>YPDnlh#iJ`D(~7k9ljGw``oM+G;=`j8b}TNlmol#Mx1|=5|gbu#CbBL7F#l<4OOwRGazg)-D zX)!72P8Qff34C-rfB>xRVD{d?{DQ(_@CHmU*1jb!M-yS}v&pND28+7Ku0HK3D%6;} z%JyqWjDeFAJhl&aw%&`|TOm|je7Z_dz&CfeZIgM5xMCC@kJi9?z^iY6oSgtRhA?v) z*o}19CVDD06{F~=Bw%%zvE#ZhqTJ~s>$i~zaUt0gL)euU-xGKzp6%~A0B5o7=MIWp zVFBoer{ee?BV6FR|D(`%I$*bx*3DP)o9K*&!}lvLg5GRxkD~gUNc}fNn_~}*mr!Gq zL4t-2D3`VClZ|(!hB0mj^ol#DCi8m)Z~CPMmBC2)lL`7Z8LYO;>9Xsg`b<;|@8_2c z29NtRXEwYmiWwvPUaxlBpIv;P1u&VQdPI#wi`Ve}wFN2#>a!B)SMu<^~v++{ncMn%lHIqIkFsSnPjbHrgl z%N&$YmOY{CIe`hn(#=!YAtSXR;DEO>jFwR3YLd z*=~IO{fn@0Q%-YPWs2p|qO-!9?&STB_zde71VlA=0{$=~EY8CK3@x0wxGxP%nWG1^ zS&hd*Xy;XvBx87#RQVa41i9SshWJ#(tos2!IGUPClO+&fLjmzv6d!5m3?87zzHe_M2P|d9{f6a0;pk5(GN; z=fHcsiA<%xTz`DLa$Fyu*wUId18W>_cIOt>zkTLIW-v5G7;m@t1rAtc+oH7-9ZI`G zY<~~iS+lETH8H&06k2BWRSXM*nQ4ML6fHt~N&9#&C=XDacmpMDW7)$!#Qv!FG{{De zztC{Q(>qwZ&i=TAk3RWM(7r$ZxY|%P@c-7BsMvM}X{_ouzn+Z*Y$~3M6pk4V5Vf_% zHyx0}5U%1&(@kI{>K!QMf8d>H7eFlyjcS;ni&=}{IpBETwkf1Ks5rJfK5ep?fm&lr zAwX|aU(g71`%Rty&ALzOdPSoThh54SQk2xH+j)ByC}zTMe_!$0ke|gdmDmdG24NRL z>xE@txi@J8o)IxlY10JH$7Qxdn?ixAoTK8ZpLa;$;38Bt3Ol7FN>qUCz=J5J@3&C8 z4NkD0B4K>`TlYz|lnUv@l^s_x5sm(XAI=b3HX{SA%vxd0XrA|klXQE3;pr)F4E5Ls zB>cHg2AQ3oSQyip(I-BPn^DK47&yX`q&x;^`y6m<&YMya4NBYN?{gB9Wa#KfIg z4RDVeT7w(LNCZJ;j-v-?9tu_nuQT<{yrB3Bb#ZXhNI%4`aIVxaJftxbeYuNHuN*ZV z&-Zr{acon`j-60%^=|!Yv%|CT+}!Lt6rad3Z7?c(8cNitPUwEgFPo2DnCmmqF7)Uc zF@u%e@-Q%vMVN&e{s2X(Z8Y_|cdUisLoFoLI?+O?8CopirU=-YBz-N+p zKIpDhX#8Uf@%5&M0TC@+%lw??!&Nn_Xp~0;SOh7!!*b)oy5Z7Qh5FI5$?cO*MlkRfs=82V_nS@ zkW7D4`Wu;D&9R=F(6D62N`{<{@5YAVVgwx!Sw~NLf7)qBZ|cw~Cq81REZU4{dZf|) z>WI&NI;f%jw}+mTUZ{=)0{vezMm-)(x1a-6LX#skgOLyA(OoMz1wmh5A8VKD>h&$g zHyH9GMgnQHKWB?{TyY!pVz*N^pVNCguW+W)7ezg{N7Zt1<~WS%W<*a+9s2$O%cJI0j7sdPS)(hcwPv~t9=p;7KCnUU$;BP zpZg<{FTVuJezo4F`ChA<-*TQWqEP-e-h6uyP}p;nLjZm-K&TcK?GIf|DPLCvxdyoG zb#N#`k>GAZ;LgJV8xI;y?XY(-3AgrBt^7thadxH&x4IG7hpwZgmF?u0@b)yHrkM$_ zKKUI)qDMhrhK!`S_mM12SWHt4IZkwzJ!>K~-g)1z(P!eMRi0bijl0!f*SNYWe5%PkCQi(n8A44Z$p~fkewg&Ya!5$P*o|sbmymLZ7jyqDT7F)v z{5({_VNVqFz*%cPTszT8)%iYs{Ui+In@`+Juibd;6PLtK`h_F7ab35-ef@c4Jvwe>pt2d%ZVa&H>&H3sxekBEaH z=+FF?7!DT8ZWN9U$WE!ppU1qh8OCzD?^fiY_-C2tuK7{YzqDZQn_RXnx7ZrQ@UudU zH6^+))|l4VZT3ii>eaTqHn~1ScfZQq1U)ZdP0r(_n!V*d)sXS-_PfRmsuO*p1my%><_QTH8`sm<&O7vdc99lC;A2w^hv4J&wBESn)XWcLE=5Jj zn*tk@8LQ3oK8t?KG~fn6oUghHxPXGFB5d`E`8Y^cA;mF75n2im!o!Jwz#fFLh+4E1 z)6md5?>!Og$h|mk@Wc#xs9uE1gsy2Z+kckU+?L=_yzj4`R)Qj z$L?W*OlzF(61?s3`5y2#aUR;m&muJ+Sy#4Dy5Yy>o6s3fUCPXfRtn8bv>emQ$QFN= zwmS_OIXeOe`VK6+>@SD;=E&JQGItae{hA5wCgvk^*??Mp4V;<=s6IH=M*oc(8bHDL zcLkk>1Afz@RDob|kdWvT>_rCZPu*3v+07~7o=19HI$zw;Aq;GfUdLN}I1}oL}tYMa3ymmL}BNeiLOd zod9_Qm_hB9C|k=*S`!V6Z1tm?JKK&=fe$~I{Aj-{K(i{Dj8qu8pOyDs-Mr?R^gr=% z{#2)jCI@MH->1Uq!VvBOlxMgkjWV)v@7E*cEH-YDbm^=IxndHNKL9YDty|viFO#r# zxb=;h2Nk-Vic*|tm~!7a(a_HizvbGc@lnaH1KPgaH9R`r1}0=U3Q>+TO=zA!viD)Q z$RYIiNEefl^|I04sL9NUOmZQmX7ezkoWcnbX~xG$m!>`s=}eK^o!hHDLx1B3y)r4c zcn37(&_+RE`fv^#DbeqO3po-EN6GBQGI0*Y*>p|SKt1*}GpSvjs? z1|5#>jZx!cuN6GaxHHD$R#G`ITBY^W|AYQxiiLs!-KA>h@ks66tV+^n;3ahm`C*scevl5`9E_X|9Clke=CgEk{_pv&*HMk(I^%AG5{2s@4@AFknXZHK?;4hgz~h} za0V(c`I2jF@SKju3&xP=?syhgjyEr%Z0tQT)POwqc1VJ{aZbPfJZ18DNaQjY<6Est zsKq0*Codm2HEfoVJ+VHIs5uN?b1abhavH-QuWkNo*tL@fiD#8OFmsRL;YZI|6La2; z$ZfkS(H8Gcd9;4`uoK^9`xOA77ss3@ZshPQOh|E&x-ET)6WlqOfIqV`w+nR4m*5?( z-t%=8tXia;`h0c}10L))wtWFuU$UG8gdiWA4q^Tz@;>lcMHyFGhrY)I4)ol&^Mxct zE8<12Jey%-Lw)N2y1`#sH?BeWwI~Exnalk37Uv)W_Ziof56Y@;^PUR= z3ZON$?0C?7tuv85*3w`W5qa-`dzsH4AD=e0POxX@qzd0~-*`D&{eyLXD1-k{R5d!? z$)H23ultiMQ2kdvnK`LVOK zt7RvL()4mFWM}{V5;9C)CXPf{TyirEe@Hk(kovI3;BsHZX|?VRQpBlFO3EWRA89z& zSR6&rilLW0>aD4bS?1SxI-7TKa_hqgOsbMVuLz*y|h@I%E8Ztpf0MWu?93%J6_eHZb$ zUZ*1{r1uBKwRVywd5HkbQequ#|(%hZj9T}jAt~_hl?lGZxCnqa^{DoFw zkj#yogcSqI`Q<3Mn+ty4+w|35OUn}J9r-hz}M5-0)GPTubPz~mdGh7 zhd^k@&N#QuB~kii2NM4%$L&MPEfvGXK+hW$CN}`>dg8}%QyIay@4k}NoO7V*nqzxH z@sM$r#dCXmv={}mHF|VL}f}Tkr+A=S2*ifMGi4cuio9|6Rbd3a6)R?&9 z>&Dbu5URL#EdQWqcz5?;0s*fLLSLE75MP_V*@P}tBcnSUghRp~!dVs7M4?bZl3uYG zb$hEf0%_Hv5nc}*(k5DMyWg=n=;*`n77ztR8yq6r9?j1kl=-=38pdDm&etfiJa;VM z+U(J>@E9A{I#gWF7wE{uq7n)_FL^J!!$gf7ey%tj6QKT@AIU#t?{;n%Xw+@HLECvz zm9%zF@_MxGj0v+;iq*uSaqW&9lj$L~euE)~5okGtC1He|!mz9-G2DOw7N8&20D(JPI8Ry`+{mxct?{nGS zEB8pPb;Pwo!0*u%j~;3`<#x_35R$3;0%|R3TLZNk18q3dok1`ob&mipBV0Gn<5)mm zD!^iX1APrda<#Er+AlhXwk+{!v?E{Q6?|&!mdw5*;wW>E9qs=RKuZUP%%i6@78Xjy zKr}o&g+B&TWH}k0imkvxq5=cZ?)ulL*ir>OvP{IqH=tl=x*>X9lelHUn z&*z>;B~{gO_rz|yc4a6Rr()=9TSaU>N|oFN9+%N?y5g4)zci>LKZ-~S!G`fq8ZI=>%n z366*0LsTf<=O{LEC4JTGgnRcoHj5Kc4Vj;q`zMLX14llJ*MYyabybno&pe!OKN3zP z#BX^ug%SZG4f9O)8=~S9KTJjeF7ql{GO}Hvp+mYzR-;>>xp4JmvCN1=M&kW(MD@a3 zBYW&jQL{KdBiM5DFH)iKT$)BLFLau>&h0i}+8=6+b2=zI!v#Ao*k@Gpnh~-3WS1vl zeDElV;NYRrLMH9-hj4nk#OKKEo#mA+WP;UGR}S*NP8>YYaF$+oUN@#;@-QULY&)T| zE+kMS16|`>@tzF%SgnVgK(#Z*SJ;upODD}N?oU=@Dh$-4>Hro>8WaAtl+VAgjEy#% z28YNmTKl?L;TLKr{K25L@3&+a`c2W=Ysgk9pX}Fvxdv0{n+hc_` zHDgmJjo(gQK1(c0;lOH6n1+$ISM1nhWM^j|S+3-(oW#2fD<%#dQ2lonz@SFOT*qOZ z%hFw!@tq&^a3JTH^PtfhG;_MmQRpBJ79{nVyRd-kEH6EkqwgYNkf?bEH>9VRF@}V+ zEZSPx-xYWN4XCd)K~-c|(J3isMjRm8T9lOb^|_xhsw zt>pI^YkyFGRE9G%489t0F8#s|^3GhQ)KwH$6S|K?De1UDD5A*^UGcw*t$FNnHe)mo zjB+3&AWZHf-PUt$5<|~^l{wo-Pm_-+M!Liqv-{FY$~Z?XmW_{wUEyWQ6)(SIhPc`l z<9nEf>R1}fe^@a7t;L@crtr(xIZ4DLm}k2gELJ-lkHhSp zl{O~_DQ?vC)HCq!cUJ3kG5oKx)U@=85>0vfkJslL$u@q2r$0ZGLnf4P#&FsjVJv(h zZrL8&ofswTnQd0vvE!0&e@#gW412KqM+z#D2Mu4Rg69= z#WkXEMn%nK+OE6g6bziNbnR;#M);A0}yU|FHR>+AE65tw;FFaO#Y#y2liXxke*j5($r zWeG{y&aOJ%-6gY!m*lcHfTS4N*3g*n=H?1oWH4qIVFXD;63ZN^YwDGF|JEF>c6i50?dCD_j^yKH;4}LIv(3MNO?g@> zyu1>e0Omk&4{(;>;^#9TaD-c6qWo#xmWiOd{%;$oe5>g*2yf_e7Rd%Zk@d6MAHsX{ z%e#Mu_!KbBd^KRv6JddVXx*}_Q0e?%j@2$W9RjF|P~+y-R>ZCEg=WOUjVJaru)!kT zSSwUmK_Ro!9arkO_bVb{ilgCGj%c zJu_ub9m3<8mvZ#fPwpy^4snuAci4_WHOSrYqDJiup_TRm%Mh-(D zSO}&->iaq(o6_Sr*3%Qj>y+k7FS&aMW#s^esqRJo|9dC<<0pQ~e?F4!B=2p!mT;l~ zc7;AypHEb&`0Oaf$&r)`Yiidp#x)t?N>(};`_aTa=L^0qw^miaUPWc(PLK$3?@n81 zd`z0q1=bHNHnYKn zdcUPNuPdj*A+A1(~V?qSy+i6qFq*-X@yy9ZCk2(`$Q>s(R2;Y=7w1>wbawYgFyj zAli(8&CVnY5j_t2mEX850~!>3YYVeahVYCAAMiQ|92f9<|BeUa_`UtfLTPrGdl)}) zi?`%G;a#cY}@;vHfJTGDy7wEy{? z>gYqk=xB6w*e$O8XBUQ)%m!wx^bdV&UCm{L0ae&HT61-AGsCk`;@n+bVG`Mfk1#94O!z$rF%3wg1rb>d|1LyEYt&++4a0yR`GQw<7Njl!0EKdcEzO4*F@w zWpoKPI()dD{B48fEFT@cWkJ zKVox3hmeAD@YW+&}Z{7lnnTWy0W~1eQs2*{@$>{j0IDsJeS=F!POdbq6k!lapCm=X&>E zF^h7ls!32VFyWn@zVhojYC1X~A<*F9UEIx$6FeMT?9~;*<@I$!Z0ts6ONIRxX(y*d zgkJF&Gig)PAQ2G}kR&HK`ugE=yGY(|5z!IcX-kSh9~TrDu)O!c#l^L=P;IOQFwVV5 zPfX0;_79A95j{FSo)o`%bSacSE?QO2{#9kw|Br7QoNPnRKmfFhiN_{ys(=Dfl`m5$ zd0y6+DFxy~{)(}@7@ra-mD{r+^B5fq~uSD5vd8(xO#s9vE{Aat$kN->{i@#sfrUnVIK*6Bo+rXIVS1B1UndRM%#N^~5 zd7mrB76PE?rt9SvcYZ^|$F15*P+|KBo^2bo@4f4~T7E@!R&%AdVY%~feQX@}%ixax z<$j9~p)R1|;=H@L=>tzrd2~21q*E9^PP4GpCmPX`oW6Pcnn@XK<^SqL%4hs^^2p*m zH|9|zy6@zz8&&3YOOh5Hm)tiTKi|32TUI`H(>eB zCa*A__dnM`P$=$WhqE`}ZXKx(K6ETe+ZQy{#9w!@f<$U*7 zSIIykU!A=*9>g=tI8a5W?P8O?V@&TtJ0Fp9cDe1h#M@(bP}Jsye0(|%xE2!*~93=)LyTqFz@;qY=E z2j~3^0wg~@K1z$Id`WJ_pAhWM0YR*o&R~<1eHdIs>2=jnRTpsZNQme5T)L*;tT_IC zW>kEKctJiNK%zM?#ii`byS_%;0rJ0v?dI^+tS9=p2EdWSgM7K3YhbbFERldH=eAZ~cR*~I8ylS`@8 ztOUx1MuVgFh&`oq*H$K)$n% zb7pstW!Ge|N|D8D#x30Oo_!LYH=e{~f#edc42JWQf;%b-c zf`dbYi2HUhz*w{WiLB1EaKQKi=xD=gy`* z;e*fdpqHCD+66%Z@%uiFGIBd+(o#zXSd|$GOL#l&#;q3r`U^MW;cnnYUaf-G8|&+x zX)v#ujpGg(TqsJfZ*M1wJh{gB5H&wdk{Pui4ZM3{&383acZYjhi>2`K2nxMAg z4mzfSS@)hlMfI^&SHJCifA%dpNCQPKsc;|ju1-eQJv?{5>(fvq($by3r|;4}1WcUvGAvSBOxzwYV(HWY76&pYUm$+$W6!rul* z#^L)JfD413V0d#a4GpR<9&I=`8?j~opH>G))+Bt;YvF7_6#zAG@pc7$6BCM=RG^ejJ|K8lxp}~_hack|QnodTtsY=XDJ_zoJc33Sp z=q@cSncQbW*7&~rn2@6gYp*J)sC)*Uc0U{2412{)=uie6)OS>^tRlnPmK$y7ThhK- z57>(|@%>uxoR)Pox!M_`A-?8hO<}iLf%9v|wN^X$`~x#)6_H>RvuJzUn4E@2%DACP z9^X<_6uKr|n%D-rWDvv@E5g06p1+CT5e-fqd}xVqAKeToVkksz!d2U3H}?BS2kTPMHfv&(6iW=si6fX;lO zeSDPnC1(2;0La(+kNo~g08D?6MoXyaq!c5$$3jOZ-Rtc-X2i0xo#DK_QOPmtyz|`$ zZZH7V(Ow{EJBe1kBxMBtVQ;)$^Xe)ZRL_))&=|vWRYj-YfzOPIck`GR!-pWqp+wpD zJX`5QJ~Tv)j*IKpL{G%wWj+MTt=%c)f0d_`SIhYd2ZWAZ81|HF!bV5WMZ?7>LIhA! zP<-=Yr9?0(nt$!Q*jhlfY4fUMGOd%2A9?P=(y(cypCfIM>fm3^|mU+V1XXxRGp zfY#nvnmW>4=_KgL3mlHz4I%VEeSQjOn(AF%*8WJ>Bx_`Bta@|SOPl{JSiSZ?y^7iF ze@c^(Vv(Q$rXJ6dMgu0)L#y-z)?+r5QB7ZFM%3e33MDMo2oJwmbMe}v$VIk!y^>oD znoy4~l7M*9!ui`zyks;in;JeBVU>fFc=J8=GvWBVf>*=Woe7?2zCyo9q*H}zU>SsE z2@?IdEO*))_2L&8o5lSe=~Ji8;l*D)NImI*Iy_^Dq#E7~5fYL(QL z%d2tT@7}!;Nw2FigZe)(dip^|z1wM7Ho3{P&-o&GAZW zBZa8${}&_@2Zxr&3`bhFdnGsjbESi8cji%v$nRL zz4ek2OtG%p5I3DOP8)YAo7mNvXeQuDC2X`uIKFOvW~p$DhWB7B)EIp`z&Fz#=c^(z z&*hu5A2`0*Udgh|@bn#T81Ha+!Efyyvp5#I$2WH^j35IpYaev{zH3vGomE7$%8Bu8oFGL>#Sdte9iMOr^V|hqb6_sB&0re0j55MG@KiESR;3c#pzCTb(oguUBvvw}PpBPbVWbHql zrCmp5U~Q~CIAMCCP#;OBL#po}Qjty!Kr3*EP;& zNFap4ZWY9Wsn{}Kd2!1|B_ONIhsLRw)HS#gBMd8h;n;b>2W?qXb{x02J!4O7a0Czt zrcO|MC<%~v<_L$BFdffqqZ0gT+aE*I&Dbp)G3Dv7TOZdPzgq=xx1L&^^SGX6_<%wf z+m+WXM!bpAx!PQhni(Alv#kI420YADF?=`aT$ecC+hHqKz5}17R1zt$LEwk{=-j`- zqrdLnet2O5?U#|F5`)5Rf!<$})SBMj|>bbzfA-Mw&F2wDD$7w?UdR+=TUu{2k{Uu1Ta#;+96@U* zGaNpz8mZ>u?%)Y>++ZlG4)Pi0X^J_#AS3$66M9uPf~mDha<*Fn7OF{M{{Xqp7>3~A zXT3o+&bFCc57elA;vs|nsbs`j`YZ7KlxZH`w|cl=spJNbrQ1?S7Qg=SKlnvZbe*fe zP6F09AKt9R)02D!n3lK+nC+RPuCFJ60K+RvRFO;WDPQyGs%PyzVVy9_p=}6zVDgYlNi9yt9umZ91eQ$@C)Vdr= zDcM(`g$s?k3mW83Ruv=WF4XvHJr*ArsL>Wf6780m*fQ|3O?OjifUTE6!p`t>Fj3#$ z!vn|rsd3z0H1zC>77E%L9{ic|(U7gJH%LNY0VP#GV8fxL#7!V{9Ka&I!L5M!tlLN0Z&!&p(XW`VyQBG7;ri28pIJ&SNGVROTB0 ziNL92`+;L7SLdNt|HLZ=iT0$3Jf9zWlkh)-65`Qu(5X-Dm_Q#$D(j}oor$wMn!{2Y zZ^M%}n92lUk=fOw6_s1Yv#+my7WDIbxXi<_sbHX{t@O)2320;>QwKo-O7p)zGk2_} zB*Gi9^zGd)Bkm>_OQNHDX$_uEbSPpVqaY>1lf^sNeu~@%)0rm6y1m*=rn@;Lu~*Dt zG1h5mt2fI^6b`++y^II>s->({LfhJ1I#=AUsjy(zbX^5(vRI{#(zM8P=@pijn`qVV z%&|+=naIes_T-5uG~G>W>|HCk=BVh_*<2%`pmo|f*0NsfTR?M4=N*bl?P@@RCVYgR zUiP6$LtTp8z_&93;YeBe;kkX!9(@`0+L%8i0fzgpxAN*`C=fopfzOj(b8(v13E>!uL&>w98~S4oF9wC6Xd3IvGsZx-{JWT1-VkgytvKE^Jh zggZ6~U2nud)ECa~YJ4JWGPF%_B`rnrAW>(BgKu$f3J$qdI{BrNXD!yFqNj-c*x^Ix zwp@|;=8@Y9elnkuN`&le43iML$wK-NMYq*BB8ghOb9b=RN3>BBJH6iNBqQOI*!h<%JCM~|-8R@R z*&7}7yEF;@zV+Azpf}afpvh@aePJD0fLt6Yv`wEu5$^V&72Ehu@%u+p1PcEWsUfOy z2$F0q&i*@a#Dt( z^@;OrQo5`wkFQibo3_Gcj*9LXOdpNU5@oOw4v+HE+^!B(;6vba6x7J3fynWF3rwkB zDP+Aivl&Xu=6TG-EPfC1U^AF;rMqAIYk1{0N&VDXGVP7VclX^kw6Hi9IT1^c!Oft6 zE~vkHX()aB%RWcWWv0RdN(x?jT zxm-~n3$(Ei)AceuykQOA6Nz(iafu+(nf80@P|{JP%wxsKula>WY7a|+aRcxckFYQ1 zeA}t+emg-=<)INJV`%c0i0!oDHlIR;7nu>2w&WH$5_owaW5KD$*_}nI@!DkwLqLg_ zBvT$gSkL?uV`YE^4a)l9#)N*5&^JY5&~ikCQ-#+4*By%V#!XsPJ&9-L7sj7W)^Cu(0UZ zk4@1LQZ)H3HBxP{<|{CTm09nS7M2wu$Fu@GBsA>Xf$cdRXr$%GpZVzMKJ-X5${E3j zL2dJRJNR}8D$5)SLBUX-ZIchn86u|J#k^1Yjmqpc&Yb{GFtDb6Tt?v~=c_}ubsolg zoi$tzGTz3j^RGb0acKZtU7UvkH-~7xcGlW-wqz~>R|l2#TG_N$C%f%Lo}b;N>9&~v zf)5!$oA8cPpbSb3vDf(Kb!`Fkr0|2+?H!taA4?N{-P(~|$BJ=N+!A*f5e@gn;)FZI z!H07Z72KfL>}+DJWCF$1%82Ww6$vjZ{iuJ?BnNmP(&l+!=sPYrIVwKp4~$FX97j$D z20fnaqv((T*9ktZ0PZ-!lZeP&I8IPi)93tPA-KzKD2ehKcj-)NoXf*x&e{+mV!klx z=+`F_+6Wn7zSlM}m@y`i6c3q%EpH5xQ_!r4gFAh6YyTEAu$;>}Of(2tkG}Iudwl^(RDgY^H~RCdR&>acQK0Ed)F~^HvB)*ji`=-9$kv z{4+(rw6HNfzQL&jdIE91Flt!zjkrw_3dO2rP+GI70bFvli-_4xULfhXf8$y|w%p-^ zvVV1LbPtoQT+Vh1d*MyR#BSu|phT2?$pJ4&kX*+K$WZM5*JLLH7a!f>?U%&@kT`K+ zJUdUCM&MO$*x3N8pN~7J9Zc;_Pdtl5Wk|A&Sk6J$+53OdDgQ0-!6r56xe9^<@sk^3 z#Psx*K;4(*3%y}TsWfeN=<}+Vbf;{%Wf9tXUo)A*&IS{(7cQ^6y{3FsJ4bc70lMIympYID3dzIUYOLS}>z3_jcd$rt__q%)`$e#`U| zQy)Uk{@3c-(X(fdz`+7TlK_~BQ)_q{YbeM(hSW+W60 zVq2o6rKC*vMlIsgf6_riCvEx3Y|ZVN?a+8iQZg{QU<oF!~2wLgP}{tff}xsaGHpq_k?Ub|xY zJ(wWoKlt6;s64*$`v}9JNXCI6c(%}9Dyl(1yXU>MvvWD9b5dnVTZ>6iKS9jsqT10| zM9kB&*2zGLALu?0ATXah0O{F>K`li2A9|`#C?HS#i)1NT`R3gJ zh>J`52>K;r0)|6M=LHp_1C_bt=E`0*zE^d&RDx-$ZpJ%s&0FAD^|QNwCovRUV1nSF z-vZ7(*=KLr$THn;SFW86NE0m^UjbH`h>t7m{Sgxp04%R7iV;jqtWLIb$ zMQm$j3rieD2s*FFw~pFF#q>UM#@$B`e%l4*Fi)%t*pj0xg%2LhU3RRxE|Yhka@Ous zRMDBkfqAOEtX7`isa9q#lUKcr)-vvZoYrj6-w|doi>MVqw5))v-%p7D@qsTVsNL^} z>5t0k6;X}h+oLW919g9eI0^x9wMYB*AN>vc&nKx4<)9D%WYav3n-Ry|z6Xb@MGz&| zw#9p<4DjT8`Du`8eypTy;EV~jM(8;cdNfEDY?^-+Pkyd;3^eqxZND{heh;`8ue*94 z+6OPLD1soOsKO6<_x5q_pD%s=vCsc>uw9~FNeDl#$N!Z4T_L{+^^z7Tr1`QNmPjqF zezol9)7fY`HuS}+^?XJt_jyMp*Y_DicZD@pw5T>&5mN3%+oAXZ#r5PVqe=8v+XvDsQ!;}=ps%HZynd;xksym>pbuE^V@b^F|5!7;`S2Rz0i%Qva9vd z{#!(SFV9R%4}(pY@I0MQN5`pL#`PH$o&T@l`)fQOV3Wc7bz7XmLi_LFCBRES zWt|xAhS=&E+^*xt&#8J{}o5;0hVJ#6lJepwmR}Qagug25T4C8)IMRaj2CW zKkh1DtTi`>a;(&AXPKwXZt{J91NUjyZNFQxgr`HnVIsZ)jz@$Jxzc1|Gw7tOmo9Ib z{V`d@0@F`-U2~reMI)QDXdg@31X5;su@K;qhx_#3 zgP-`I^Am786&bye%U3*{F>dtkaNu8Lh(^#(0v)6y{9!)*^-nsBgCCQdPyS4nXe6}! zwp^mh5!+FIH6DLo64m2AL!tCG^M8-U+a1+Klo%ak2>Y^CEtD&G8v%p_WKG!FO~#<4 zVpMJ_`>NA4)FzlpZiL?$X%d#f<(#%{#)j$$+{9j|w+$Xz#!)OOWD~52O3XJiYBsPb z=VIy$S>+#)rVkgJ>o=Bfx<}`8<(8wXB}+6)2KZI$Yiva?=PU@f(v}D>w~8CD3!8?$ zB9iu|vW#54^QYzJBWDqn&sNQy2iOIKhdzn2?AG{^T4&DI0}qp4wm)pY{6t ztNW|#qY0&@w$AhK>G$qpMoHS0zS|ydCB~Jz>O&}& z4O0|TJ8Xbt& zRp86KkOm*IkgVPq;2^9kq-Fg&KO=y#!hAS*2F&cVl>f2Zy@1qA=4Wk36`p66ck7@X zaePI+M4Zr@4u$yjqBo{A!}Um?fYV{jRjiGGbKN!!lfN*-;Ux@o)a1jE1J&c2!OiyzvKU~Bb#iMj%+0wrf%gtt@pk!;=SK#wyq4`V&(di* zKEoix7K(}bw*5_U!iWreZ4rcq@mWS+M<0=Cc7dERqt#D*Uf*VIkt}9w))=3kJ75Vb zT3i+>kPA+0hnLsjz3-#g*MbCOqkMEJnag>IZ3QS{j~MI1GY3Sgy`oN zol{}UhyHVhrlRizUBfXxc5~sBndui!&a#7v?^nJr%9*L)gIosh-fCX&vOXGB28PbB z2immMqffV|1g-mA6%yNXSM4$4pK7&j+R3Jpt>etStXi!bkNUP_qTTCRVi&HOukO=q z+jXPbU&oJbl;w0v-M!xfVs;FtPnR1@&%zRI3e&w-q`sza6mSc{5crP9=^yigl>!Ro zDxU`YrqZ1o*PZ3ruBtYZ*mj=qY{Tl!1^gpD&pIr3iI4dkd2VkUXL(6l!84>GC3yFW z$V%Q`pH${`JdN3?r{>_pKU13H_DANYQBf%)@?C;EiM;B;(tolW_|+Q&4%o>dhV zLQSbbXSfuJ;d6}wzi;(nZ@0FVyziRx4?h*Or!hOa%(biIf8qP`R5YqsyPb?~VXP;?~sb_Tb7Q=7`E_6<$yG6?w&~?-Di`hd+WW!wDQnu7CqD7u;M?sKq0J&gK2;u7+wLwMlS~f*rsX(uo_a-@gX2h(&wBl;pKV&z zghM|3e@vZKT$KG6?PnM|hL&!XlJ2gdy9A{L>Fyy1kx)9MJ4CucdH@|zI;3Oh?(V~T z&c*rPK9|quS9`DZ-Ak>L>dMg4lzdNs!`6l)@G&ekG4687VaV%?K%im^zPVcL^FGin zUq`$5T2r@7T#mq{(7T9E&K?TW2=MA}BmNLm;4rx{UjiqyITm#W$*IxmLt~5cYNX$b zQz!vG*l|E!s=6_>&OQVcA&w=0sJWPE;_=@ZG4n@f@8GD4w(Gj`GMk)0NxVjR zAic0F2}=(T9)u12vAWpo8Y<@f=3ArbI+0wZ+?t-;I55te#fLrB8ukF{KL?5+_a1w_hOHi-!RB#XXcuFjd zSOp36>}?S#QAeSfXS$|TaY;o*Ibb;GW zl>sY8PK_TMS)%PkE;RA9tmh9GPifHw7uCeZ>c@sPiM5VtxaAwt&0!k(QFilX*yfHi z&+hI{|D$i`UFWCe;iW9UrFW676e!eudP+esM*=YcQZ&g4#Ss2QTBlZ>LbO zyTeqljSZJ$7B$D zCvTXmHSeaf`!%kt3PhlFe~1>VAXgoW29JCU5PO1O7qoTqx<(iC-fWcq`<(Y1e^{i@ zp6=GQF|b<4>9kIeB#1NM)6olbGa%u)nbn$#8kqq9RhQn(sE1VLu;^Oy%&Qs6UEjji z`?5VEL*QQyOn}+q($-a-t%nC{T1(-9>I*Io{Y_)p>7LBaQ4RigT-QK#6+-nV>jwX` zq2~Th;LE|(HW04(+IbRD0Q9Ki3Y6T!085!KCyoUc~3{X?x59;m{I~?U&?+M4M2s}Sg#7b-gKZ{WI(a{oGeKVjj(>M6ndEiEP!}yocBSKT3fGwBgOHiaav5lFvnUu&cXSFal=r^Z$8uP zY$qX%(Lh;1%)n{|o|n%~yZZMR>?7$Vjx7!pzu8pu(d&08Moz1a(XtpLoj05F zZoa1xtP$cR&L4+?&0qI<1V5URwF*yzmK{ll>BRI^?O3M=yaE8x zzk@gV9|fI@0gNvqD!jBBcsPz2RF`cN>8kwS@?bPYPDbqp^3Ay{j65!t>X*bXi~YW} z>_amr!W1}$KM<2RQSF5kR^lX@*znG9~Qgkh+Xm<&MeaGh!V{k?8WnTspZ$N_lA zMP{(s0}%V_VH>JaH!z9r$FUQa(38gUyj`H z7#5WPc0tcfvGS}v2P1-%tM^^+&w7gf5aJ5f-?q`^Ch@l*<5I0V*6-5h4^=3BaE(Zc z@ksB7{Tq2a#1O&fY~LO)Gk~?5^uF^yxF{@V0*mp>*qLuCFf<$JXOR^i_(r#{0=V&q zMbDCvvv_qw)8R>oxz_nAvEnyUdxN^fum9-awP2(i9eoD7qDhOwrWKSowJ^TyBWHTK+hQX6SL%zP zMy6olt?qF*{)hzM#{lyo5mPH*O}$rtR|}7`iKtImCmH|k8&53c5h>5~i15KWd5M!8 z=Np{&Svp<^Q!TgrOJi)?k8jM z?b7sG;3@l+n!`rA zs$KuOTrDbY7z`@h=2TyhzN?}Yk2NiA`%L{g?j{p=T=9G?PS+B*?KipoQA}Z9(V#fP z)Z9VSUT1-1-CCs~U(;7FrwRB(a-Hd@O%tX_UVQU*q>GRv%45hrU3h1MdWpu^@XQKf z?heuIT2R+er9xY(yqJ*VXi(6oq-TcpTp@-{4iBsQf(OUI{_NQ};lRoV2_~t`X?oAs zWCQijcBp)p;Le9zU z!rb|uq@O`DA!IiZ>AOQ#QW z3DrTZ|9d+cI$(ePpdzBb4NQKo(n<%bX+Pu&54nNB821#6=XeL$aQ4mh9Og$}TJ zchr?iXfZcxbGI}bH1-W1!hk`S930mPRZ}oU;og>z{v3F@#Dte)V46;sV5C{Ra=mcI z^;T2j%#l)ipeK@$=U2`3#4Cf}hgD9!X~7)Ped;{~%WU7EfEi^%{iZV65_gU86CIXQ z1n!U9nQLZZ;qxnsl5D+2=yb=<%WYzW;F`kZT<6_BX`q=@FhrkkJw~kKum+$8iIKRx zPNHyou!CLGMTDTe1Ynx^Kd9U3d2Nq!;_ezS@$SGKLFU>o^H9j&@dhX>43+Jrb35h+ zobK$4b(~yBnp$2&)sc4eDN#~ltf8bjM{a8%Na<^B$glkmYaP5!iVe^sXC(_$zpIg= zE!DfT96V5TEVTGZ;8JRj7p$5_y1`YG3e9$N_;)r?u@MrNR>B;wQGFKx51L=L4%-d0j3om54l1hOLH3(+v`$pF#>NE86;Fowc&;vW?(@^Qvn zvrnj$&d=9a!8WQ!_xz-YIJPnw|r^7rSL1@`j?t@8Y9-4t%9YPMwPohMQ( z@Q#Df&gSSA32Nco%>d#Myn7&J2Vpl0OcwboF9ahz)V>+{4GU{Vl1f~X&oT0932&4h z@G1DVuPctv%$nKN)?bi$WXIxjlmhX_#d^}nx-nsCl#~tHqD%A*sv~leoKjn-4dS`^ z&A==dh6i)ITxj`+)kphHni>P;=Ht@y8Ao_$Ic+j$pcyvE5Nth^lX=!|aIQ=^gyrgb zTxYAg_VRSuFxPb<0c+pQ_+n?VZB78jccfspHd8%vsXVXP7cWyWPcPVoN-f$+_u@)Fd?JUAP>i(I=ZNxbcNH+xtOm8O7{QHq`rEL>IuDGOlM9k0 zT+;-1k$X&%A2#+K^3aaF#h|S*i=Exh?0akV>SnafW&{}#^4u(uK#X?(lU`OHrowL;={aR#l_f20#|%}Un8hz7*B<&6`%SA;mHMER-**~vsm%fQI&NDbA`_x zSDt%w0zit3%p`9uKqd@Ug19ZzM9@}#?-LlNKlL{4S6$P5-Lx|kDcg(=ZC-|3w{w*> zw1`u|_m}(+YGpe!;=p){4yWs74$in#4-NFeJwKD1*!#84mW2}?7z;wmr~@_=?<(FM);GOhGsZYf!n*Ei`C08Wk1(Wk zxc||`%Dnm<5Ft3djcf1=-dXMp07wIrAu@X67`JS`Ey5qp*BVDfMmK(~#SXhc@GZZS z3x)M|K%7?D59%c^#Kp4ETVB7xf(l7>+i8HE@)ch$b5!F5vvvBr_wX?oDEtb@CKv55 zGQP7O&Pt*WPK~D#i3J+(k}aKqk-6S?A`cD3Wy|-6aZqHtz)4>GveokHt0=zKPQZ_w zp6|iY+NHf42Y#NK=`u&H5(OO+5fO1>etH7_!wXru7$xB2cZY*B>{AZs`9dfh@=_kW zDCYiGxXeQq5k-zYQiv}}+9p$eevu*#>c?X}hU^t`UwOXgvTTx;5On-<=55m!1ZSVD zx!R7GZVOZU?(!}7>+aQiVUF(QQ1DrQg!otSxpX9*_1_2Vrf<1F`i)3jNv3%$ofRAf zx~Ma9jkQMWj|YkjjSU6dH=8|3ZuAXsX-1u3XR~}CsA!v#0EqXY*?gvnxQQ3>QP3EJu8FJ zgTtKbX*_IqAmDP;@sw{^vWb{+NsHAZyqluGEorfEs>#XR@_Oe(a;*^Zap>3Q*VVmu zDy)N8=9d)2BsDGEH7o!rm6l~2^cMuJ$*0+S1>XjiH~fjM^{-No_Ll#@I*|7r-o=H+ zQZhuJ?gT&E;!?7-HLW;Mqz+Po$T_AFMi+cTM0c>0o-K9w>8*hr(cjE}8i)t-vKA~9 z*#ah?!8E2OaZOd}=##F%qa0w7BhB9<>(a^LbTKZbSpa3SRrq8WVc08D4Eh9ZYgMj7 z6A}t}>QN5HRc0wsW-oj~rh<9^;d3g+Y^fnAkaZzK0YX1|Sp!G`#9oDs55(6BBVB2xA{%=T6K=?C4;M9jAQPC!QknC{R z@#;by`yBcx(+BJ4OzWS3W(bJ$tF0S4Gg1fj@A0+M;9>h-CqTgZCBZQS)_U6qx5`TH zAHbKq{?W=r5^P5VyOxeO>ILu)!|@ZQaG3y`?D;tMWU#XmshgnlYL!vEynJ%Gr!bM^ zV3+w0e-s}C?hKYza?ZgC0F9hs7vnT5X!i@&FYaC7C}UI*^;#*w2QcQl*Dw6@h4dW+ zrXy_tf8n|)sP_9UvNYlHQ^G*}EQd5HI$^v)cATVOr|8xGL=S;Ws&qnScOORl56z~W zufhr*2|IAGw!YV)_fd0C6AAnF$%_@=`Asp;r&-*xgN=whAbWj0G28y1kJ>ckB1u zWSlMcWzn2ghEewRoYMJtp|3YdExUptC}7H;!KWpUsV5{KOQc|=aF$S0t0X10@M@bo z^csF)X&H@|$UfS(gRI!_kKGs;Xi|4Aw{uh;!~V3}Q^-F<9t&m};sV`L?cTP>W!tkp zDBFU=&C5{D!<-ptAI&%mY4$X;RfH!91JZ#=PIww0&?UlEl0-PmP+wy9KCVToEpahk z(P52}|3EXpqz;|;Er_Et-@9gh4I$ZiCt{XG%#;`}XZ^g8rA0JipJl%s@Eh^#I~-0G zxgeeMz$-w+6}Fa18!7TBubn;g8vt>V1vrF>Wq2AMr_%C4^8iU}PoX{R|e(Tdtdq?fHW4Jgh=X)uCF97te9Q*ZFp=J&+G<6h+=+d#0rYZ zv|`}(5824k=D&gy0_1~~r#+Uqf>WDrsBo4mVkNxw{^EjFER`SEB=!`ZYfz7*P$A*Z zz$AoGn|wpc#Y_jn_xAi9E0?Lilgy`6+e>L-g9!Pjic0Bsyz~Bt{>c0+F<%JJ>*8&* z$kI1iyt_P{Q?6+JU|)Xb(f2FTMEbZ?*A@^5_K%&81YTEIrmefXRAt$WXkQn}Y@;Qq z18+I~$bLAQFolwK2}Rp<%r8uGqDg&mzHsJ0p~CCyo9naC!_HwQt}x1S-^%iOKVDj4 zd3biXi9+yuy2>aih`Ca^-&O-(Bc68N>#2uNdaxunP;$9&h*}1*)*V4NbWS1dR(BZ} z+}ci*&!ryiwKY?y7`E>((6_LRpr1&QSHX052par&MoU8%U~4R3)i2}rsKHdJ>Cq-a zv@N+#T{81I{-2RTaB4Vi$7u>p=%Jp%jQwAibDsJP{cpc>3OjD+P1fc>4{z*OqmmMHsMiV( zL{7I85xV~U)(JPBQ>+QjjlrY8eRre)9gAtsd#C@C?a6O%q( zJ>YQ>`M5umgnf8B>N1Rn0sn*+5*D`Rc{U`7-?uWEY$@&5`mMI@F6VCIWS)rH>ATq0 zCmMF|2Kbub!Vj;%ln(jQA-qDuPCIPA^R4DKIOZ)a@f_4XR=<`XwiiZ|-fv}CIWe&} zCOkvX@bO|*-rsnXWqlfC@D_gaPtu%St8<2`{>8X}!?j9i{=}CW!M8fG@n-TVU)@}8%eB)}<05|thJFUrisV#1(6&|JMC{Sdxesi$&5IcL) z*e->A=%G?7I1oEv4PN)!Vy@@skop_?I)|ZLgNv)(9HY#=p^>RvhyS&Jxa6YXHj5A{ z*Gy={*mC^91(oYUxMzl;=h_iA>oMC9R!;JSb# z3A`~?$j9U~-?h$cQiqRrz);4V0X*R*jMlUDT#vm<`y?>kE$$vg8aKmn*w~;jkrU?V z!BnMcLpcxu#5BVMInRuC%RC`0q5vxAlR;rTZ@yyxyp)F2aPLDDf!70R-~1QxkH7XA zJO{^~#h@C5B;c0#qs)+fM1=te2I|>lza==|Lpc5vi_inMbVezZFd7zl3sguChI|nI znaw^Za_8?*-}A8`Y*7wl?fIf9+HhqMb&2!ZpoJui7lsDcAqikLCvU_$h{t-j zFErZIoFA#)A=G!jLvREd1gXPb!l)CF5+7pIFbZPG4}F*3y)x;E2eGk>;cgo(zKF$F zSlM>1i!|TD_Ao%lp)9_qpJ42d`}CZjdt&p6VN zZk2g_$8wZ-@J5t8z%Q<^i$qikFKyZ)DGj1YTVBfg%ED@-Q9UARGukib&P+VX|#AG3p#HL7*^>z9 z{{s5kln)ES!9Xu7ROYG=ihY%qhiZO*LZkaG!P2py@moIYeH!IpRuy5~V`&fI_&er> za^J0w2BuW4vRj^2$^L(up9F3toDhSap6@3_1}D7-#}tc*GeTqJv|gT;R}Y$LmxvY^ zVF?EjoRY+m<9CS|tLk;#Mej7&@ey%DQj-|bh;!;hhbS4S}z8HY2Z54zfB`l}iqnF}p`Vn!Fa_-RA5W*`9KtW(L9G) z7voSvV&U|Df%dY<(`In`UFC-Wv0oZr75gL-94eDF7&9xGOAUTqkFkp?=S))-W}qJq$rg1pVSR@iKm8=vnIvS4wnLgRy6htYt`JoTLX=k(t%h6&iTw>a zZaD930``^eHmbQIFMSNbeq4hWCUY;&_$iOWuwzQSz)$ZTzR}3_1%Bw6*Z~j?4MQim z&MEfrBVa9?DYf`P`rd*=b*_il=)6|cQDIF6t3EAf%b(c7afcFz_ z`@af}1XcD)zKGE0ibtg13}Fp*#_#sE9`FAmOYHPSU(?;}ImO;JbC3yfK{GUsy8IV6 z^}l|>;NK*9lgfnM!j9zIdmkYoEPr*#$8>wlA7@YRdtmYjv~a9>+q2^|ZW5MMXA0~J)EyFblhA*OH2T|WYl|$56dsFWG^d31-`=#7kil`j zimx$s{{pm(6_Dgg^deZS(dCW(-&4lI$2NIDw*7H8Ns*2g2v!b=L(dur(amc&o`{{g<6E1`k!pTJy7v;aA%qL=0OZc+<`b z7c=vR!z`)@3Uhf9@z6LRrlGXhSR~V0z0+ef5pu0aIf?K6lo&Z8#-0kMhx<=OUL{lq z(k-UMI|0l_72y&og^M2rf95d9b+6v{D&m<`SrKv^GJ~bSV20D zU-1=+5|u@+Z30ZOp^b#!;yg*9_~)f#zeK{#dj601Ms*hkIsY@N*=%OLVlevd=wk)0pkW@ka$M6 z;3)xueyDb>P9cQvYT9G(Ywr2B&?w8>KDwzd3!@85@4wYP{^>3L_~$dJWs4J}LgnG- zCkzyVCY(>iaiJgT0Uft!(ml%GpS-^*$)N0`Q4_!26Eyol;FC= zQ)Z@3($F~F=rG*N@elf-;JvoEh4RDgwJhsqMB~4Z?|?iSAM*G$`W`=D2&p&D@u2^D z-;((4C#jR1UZRbOjVvB#n9qaUUd#v1B1`(2r22na6jbdtLJ0z+_l*iDY#8TznSuXa z2hhu!1plEg#S`Y~FZ1a1c`rDh)hp*sJd@CU0}%oszZKA)P5L{oF!SvY*}|c^Uz@HD z7x~WU*J#=gauhAAtRy$wE$=UvHr+VQ1kOI(RDf^37tbfILbRninX5BYp$Hc-)We^5 zIrft)Oo`T3BGR$LK+j1!c)P4MsZBxGn3axjtGuP=m(D~md|#1~F*PYFIyD1VQ#1zK9k9~oi)oQ}#3wfbLg3ZaWNp?l@;NqC!ip&~S|cb2r7@Q3^W%~Fpm zvsj~TT!ntAS7TxsJ2~KunQRM_Q#l*91{UozL|9UiTFu)$R;YWQ$yF)m(Fp#{%>?H4 zcA6N?IY@nnXzCRh%F`dbv#@PKp-=6VK5@+zN#gDrG#;ef&mi5f zhe1;l9O_KYd5iBTL~B*(qe`(M;j4mO8h*H81U-^c=BCOFVanyK{3Tb1vnSs_cP7}r={kw?!Uc`koqSLswp*;s zG^yz5<~C|9bEVOWRy+VhPnBlp#j=49MtQfusU`@DRN?r>gWWw!PNYtXLT?*IggY&p zw26_lJSy)oK(EOk6!bzt%GjnIz^<_D>F|AW#^Y*nwPPCc*)~pVX1QO9zd`e()UFjt z<+%vsOv6LsK()s4YTk^y(cdyebO;u;&u9WDvxwg!nVr#^oaXnBD^3JQsP{H9q@`n= zd?<&HdCtpK!N_OsyXAUxNAWIYAPOfN=);2JZ2R`=z=SKxOBCmG{n*{$hu=qusSr3d zd5ffzs{VaSPrlDc&a6*DF+gKS6fhSpj$XnsrXvqvYtT0REpa*XYS#r2v^(zO2`uW* zWFf0@DuGFbQ@Y9q7U%=K%H@YCe%k-|Z)p~hR>iNW5fKNR05Jug*JC>1>$euGb8$4Nr& zS;n5T+AN0EZ<%XtN#iyn$j=U%773r&rd0-d@BG4`8yTa6i7J^;upv+1Xy28}B@;rk zYMs5hlk;Pe&2btH?~wTR`-Jox*L#q#Y^vGQVNWtg*4NW;Q0)5r=1X9#l8~#k;}beq zXnQG*xR^G;bDKdf^lfvv?swecqhHZ-vBG98i*=0C2$624lo30uX&iJZzLoIw<%VEsLT z77jlO{KVxflINrf?HyqzAC+aFQWAwj{?h;FMH)?s_%&Ah~M) z^IGfxTaifK*=Tb>U+G_{yeST2&5M+}vKFM6SaXqi4cL9uFqPz9o($zSG3+*qHYl@q zDzI*%72a(TF{n|EAKAFEV(jt^gpiFm<;1=j);v=Id)!(+b#~MmU*cCTD1!eGzQLxx z4ur0|zD|`_j5=h#6SQ44OpPvSVv%$qxLz_Kbcx7f5Rrm>ginG2XG;@BFuV;1s8M+yb76&SJcJ0v!cZgSeh2rOo((-uj` zc-!atNl?91gE|e5x6C0HqzCF!JbIL*ta37s;J&;%2~EF#0%}MDEYyXC$C<`{Zy1}l zP9CB=eCU0bC?xoh^nfc8%j`Y-F=CxejJ!g|q}6#MPwp7F*KIsa=AL_xVy~*q{E5OW z$!Y2_N2U*lv;8H$Ya{yf#{-s{r5yjmmb!~3?~8w$(qd7|fF6LjZnw0$fA2`n~Wv;xT zHu8c31NmA&9Lo@{@^r`mW0rW|HtJ{!%KfQEg3X~mxfpKI!YPf@sZenSN~iCiMAYYa zQ;RFU$)&hPELYa9m0j!{*J?~t(!9jtWss(j{{s7OJL?J$;PJVLa+9QsiJQXO< zH1Y~mcw>?SB>5tVZkQ~&+lFa9lFH&5=(_k^HQZ`N)31RSE}Yk5g)(p~hx{RCZh|b) zcw@=9d+x$&PgaOI1_-(dE160`c?K1C@6PjAWF?z%lz6fIw+lr)DrNCoMpb}EN_ zie-FMIjP!g`nDIeh9k!AXg0;%9%4o#3AKh`XXu9I4jA(^NxQ+KTPlA92NhKVUPqd8 zxYL*vHFATcb=r5CLw-b#>h*ig7dIcyNFwYX);XsC81A8n{O;bO@hup{dC+Nq+Ku+- z`xbPb#9dJYJMP`3SY|tD1$>D(iMezg2LQS%;(uG!(U8h7{p=cxc*W`g!DKgkt@$TP zsK@Oe`2;$igj`jUO~I=Wmg4pHxLV#L)m@rp3NcID=n9P6)q2s2Q0yREX9rW`M@`EG zQ&m^8c)hQCzMbk++9S0wG;v`8oBJGlS}m!#3dFJFn-?_!W!o)MX3Lag>9E?7J83XijGp1py}^=pP}0*b_lv0zooFnm`4Wp28gj6m4OzeEiRRJR zuQE;I0pb|k(J|Jw8SoEuIb1cMc`bDDr^A~j`9eB4^QLuDm9~G)1q?;p+ueY-c*vR0 zxS6`wEG+XoQNvRPFzcG2&fk2tyH4n*EB;;AL8$|uWJYC8tb)!ci@{DW{e^X#v5w~! zQplzSZst{am>1{sv2je+=|>ePY2-)k(Ia1d#ByExdH{!cyFo+(|0o;Gg!F6S><4}Sf;C20#5wt=4OvBh2itGsT4(2H0ErICM_Y1>r70!%txWB^}J=U!N@?oCNNqc+jE#Etv$*UZDXdGtmKU zYy>y#bg@*zbTqE^4>cegedKz^r0()rvm6j9+!q5+X|0ezvp0tx*cnbAlPQEy8b0Ds z)wH$l;h^k!+^Cg7T|zwsE{k#FCE%WU2yhJ+r^VPwXUP zth}@QKX;#(D$p+_(t_~rm5TRbXMR=Xe;>IDrI|SI2M&L9m9rijC;_81@9ADW-LUUl zEI!{A|5+05H?-hyf4UJ$VClIZ$F;k@qB~5z=n?Fx`!>oTf4b4Q;C}OQr1@UMRNmZ6 zq2Sm|<-8k9^j7-<1!|Y@oyNG<@@S^)&|O zlW`XIa`p0Mj1$t#?P<3&W$m5GsUrJnyX4&hPPzd(oNKF?qkI`c_~%ypShm?YCTrX5 z0t|0oXuCE|e|FzmQay>fW-0xq=PJ3c8Uk$Vy1{eh;@4xdB?GPhCb$g9m_KUx?#>E3 zR%mVpnlAds}kh(3T3yzV1;?5NdQ8oPRs^sL+}#P}zJV zS;|aZaH(8`*KIi!^`CEI7B^MxARD2-$N^Nzcz7333v~XQ;AeL zxivdbondRk0bn&Oi+CEt+%-Ig33L5vzRK|z+MaHI^=EVl5!%sIa zx4&mE=_BAGsLzGsqZfDf%{me;Ie#_miAl`ZC6p1rGshqSwt0H~F-Z|1)sB!Q9kt{S zi%^Sk)%3pRii=%e-Z|^Gjs{Ba?dyHG-rC!_%~4gq=vtdpl|ZDciMWmqGQJSZ_zjd@ z;hchjM{rS}<*~GKgg(S0C?GBw0L@-At!i}pF*UcCp{jlme8n*QR{MPr@VJ2Lam z=!N(vo2EE{7bYaUGS72buq!yZ^PtXRI6%BV7!EaVGj4F$;1g%+amEWLZLah`rD2+b z_0>kl@hx_au<=ucr0R0ECDtKXWh{nOeM;(sctt7~RfhU1oR$mo*&{3kOvzvU zw)wljUbB@vW}dL7Wu~~)`tQ`&24Z;IbRP9(e*8mM)%G5Ino7SdXl6ToMzYq-E*uAr z4yruTYHGhx+B_M$bXDb8b?$8K+K!%Pm)}v1B%sB#bhfrVK2%rx4?kTU=`McCKrvGR z-aMvsURgA*Kg3PU+>B@Las59D_n1Qmo{pdj8@p+464qs-xB%hLad|K;UBP?PeGZ-t zrPFD*_+hoLs~6`01JblDDiqhr7td}3dOX*>I^BMtXGxat0yZc}owCoiMNEU0i#fUa z58nnYKQJXFsbS#a)L#RDsR4GW|ATysKj~;YTOfNBG~L01#jRMlFIxbIAC9Hbgjr#!m@_-)t(j`YxMB8Ta3k#X_Y9kd7GR z0O02xDVI$Bp;yb041QWRC(5qVD1No@Yd0_SQnTa>=wtNO8%JbeT$Zy)&`1cI4EK&3en!5=PqJ-SjgA_dByQyLOS;>Wta!|O7# zb)LM}b-k6Q7ScRu3bOYY8J{P$N2DvaxUHTj+Ax#nruNC`fVDjODb0%=gqxTAs}?P&u#oq_*4 z%I|W{juI6648(rlL*G~xB@3bf-i(M7i~r-2Zmq_70|E(sO_sz62Xe)2Bb)@WkIO8n ze|h@Qe*UPT8mtFjI_<1JyZd)@CYK_WNl!;FVlBP(` zyx+j^;MVi6yIa9my#US}9H_6|X`xqNz_Rna6R0LG>k3OLK%0vEYUcWfN0P6>^k5Wz zGAf+K{mj&-S3SMiuS<#JU#r*r^9CIR;e`~pHF*i&Krl!J#?h7v7X5(wHc+?!%Oh`zv?Ki4z}g#Qj@;jzrva;{x(^Op6EGd zUPCcJ)1wy=P0nWO*pHp(UmeQU;wVVr$nP?ln(nxVom-Ed6@s7v>FPbjWgQy907Dc- z1Jl4jugmljeH>6$79~dfLFe8u&~@mq+~3FEk>Es;^NkfR7HXU2VmI3(%^*+bQ-Ic8 z_z#?#emgY79BQW)K}2`R7YWdtKpvP^#0IU;`Hw+n^(HZ{PtNqqZ;p3207sW!?*a|n z7sx2zOyL!dCz|T{E5AlRzONT}FCI_>@=YmV$`kyvzdWy!6xt z>trPnK8vK{-Cwv_JaMnc@2YG(hrJwU>kt`TWkCVi4q0qh5yq4R?OkP!$|ldIa*neX zPcBc_bnY0*#^b)9l7hV)c76#bpZ*(tD8}#2^~K>1oTu^W%Mb2#ryayfzwv@?_$>Pi z`Cg|8liyA*3@Kd!FPqs=-0{SQXZLCx9qOqcH6CGHf`5Wd*c<-gtv73<|^lAr|J+nf$UFS4oVpZlA;15@uwP#u#NZfwo1{ zuGD#dA@o=`4gds;x-N_NLyCyGE#9-#&qIn9;aZpSANbbq!pDC1lLQJ$g8eMTzXt44 zq4P*nZP)nzX@ma!Vm#r#wA*G}55SP-=p0qtOAA#L1WU_!GDnnF?Ume-J2Lf{bFzXT z=bx^d?Yn!zw6FH;K68U1FTe0+-k&zucSVkB!$5OmqFGeGVFVAC*Ux;#x@$oP@vp{g zpy0Fi*RCl=vsw^%h1l7})sr^ao6;b1p%(A$7eHXI5g7sio45crwTyFjz`7IBF(DQj zGMFDg@~}e&`>Z4?J>400G-7QBqO zC(>J-^Dk}n!7qrluhanCwph5`p}ulYG-{u{8Pjjk%{NUGRDKQ_ZkP8yFG+Mr@+(u_ zQOtNy1E5JvTIcCRKU9;;K|31J4^$L1l%Tv9WAata9HY)&!s1p!r5NpH5J2ej zlWIY%GHz-1*9iFdTOX?Y%lJ?r?C9d1=)U6D$Azv>)&>A%rglVgR61se)&(p)54q7>vBQv- zJlp?;{8K7oje##-GxtVXcg)h8CsGUTz35A=bRzWg&#uSx=s^TDqEZDYV-P*kKKwae z_;+;MI+p8EUrHuIMO@=$AVMwcdp9G3$`F$Qgc9-|k@y_)1mVVOpKh-AO|z zL}IyEHIN4S+6UeZ}CkzF&>^-7mMN8KBlw1`P_m*EM_R;+xG(kk&v*{$|O- zM1czpBUZb%`(=6mto7#k0pEf;8U0;yp*%W80+uE49m15><&h}#c=I{nydzbNc0S;ad7k4*pX z010Y)N{nW7*P~+#Bq`L~iNC}dYiseOkCxPOQEHFPiOD1UjTydhYd^O3%vzr&=Hn9U zG`1K2gfd-!g~x~_(-B6|U5;)E$=+oC9auf5z~lbDM5tQP#?>y+_qt{2{VO6EMStiI4)glxAh2&LrMc`5JanRp` zrtW!(RcVR37r9cD4mamJ^*zvQ6;T@MhO)GJ*q~2Ow|OA&^nJa2Fqg@#>3H&eu(++D z+bRw#2B7NICrT4K-|Yl(c#Xff%Tl7hW_Z9mF5jj1d!s!oz2R1^vS%cyjyBV{>z^_|+7Xd(@JO;FzZWud{-(N=+-Df!bf?V0nS>pQs=+6V3fE zZ>unUW4kOE9L^{Fq6{83^J>N7)LwSAhH_hoJ+s;|kMZN>-X_3#(N3sQD4AdHoX{3tp*-<@sABW*T4meg z!DI2VU2^#e*;`uZjRVzu%C~tT@mUu>C-nHGdi}7lYQ1|3by) zGp>lQ`6=>qoa&{xS+>XBfj{DYfoW>yWM_tN7=h`Oi<7Nb#uY1huWZ&s72|f0W0^OCpv6O@s%2P; z1-(BZr&0>0ww@{PYl1dCXO!0bYDPHp(cBilVRI;fV~J+mT&t&kYfN#ub@F-;Kc*|E-mg>q`12~p=hDS zwa{XP;sh%Y+}+*X9hU#j?mO>(gEME&BtLoX>pn+(gEbCFFRs3f>x%!@kc0I3Ixt;9 z<=-o=1_A-CH@?y;;Wdbj@ZE2-FKBrQ`OZCBvys$LEomW)3S(4&0cn=12pzTNInFlz zn1vFfxSq+w)ycO3nvM)}5#|o*q@V}%t^bHGA3IlQAn+OxaTi(Qv0oOwHzfNqwpNt3 z794>Y@#?wX5@ivx06^NEvpW_91Sgr?%{P9N{E;T6(_Vax z-RZSe+6Cu+kQ>0qTA)oVNn>#oU-q&RxZC>eidGIDyXJa^jI#z~tdAc64-%G+V!(F7CxSR(D z6AJFC#Z@yrGqqon?e#|cy{}g+bh>q1zS#0WDvn1tR+eHz&)GVBB=3_WA*LoGaXXJa zYOkmojg)YGyHex~)!WK>1c*MkZ}oNko_E{*%#HU)&oZBPlYY_shZnl?cs#7UiT%6v zTZ-zcMPP5O_@wDD2WeuQ(id6YOYVxo<{!2dai$U*5;CJoNR!~_qihs;3^b``AUgB! z&xj7W34OF*Da32MR5A(I?8lNM*nS_3eP?SmCq3RXfE7thS+pE~K+Lw$>OcdL{c+wL zw!l*cA}-?|cZ*f^dK@1tms!^Z@mroiA79+5d3O2-E@cF9RZAgDnBs71K(||C%+DM% z2KpivuAk?_(Bi`%3sJTmn7ou*B*ryjukp&fpceefsj)&;6h=wbwczPz;CR= z+#Q^kLsDTy)))war|no@_3o}3-$dCRC2@XjFOd5)dY zy-e6nmJ+=_01cHMmg(}xvMdn@vG0g4HNc4srjX@tvK1a%8TNdQCb-Ao) zDE{~pN9IOv=&o2a))9(X`On zlc2pMU8x&=s#E`4`LmFULvd#Ji}Gf+yRP>rYd;!hP@h>Yo(i!*sp!717kosYUR_t5 zaHSbe8QaA$1w?mlg#NN}5{WSe>k3f^BYPKXm0@u5jO}!mS=zc)r`e`FRwYOg)hTW5 z`~(ivLt-cEg+PBsYOy&8t+H(?0P$YQEntI75ST-)Uqc+cCUyQ4MztB}_aZa>db>KR zbXM5JBHEB}{Yg4thTv(~Oqz&&Hv{M{9QxY-Deqg~{Z4_&@Fh~8LK=a!M3dKQ01Z#~ zLj@=GJr~ z7+5jgW%i~_RFp?mep$Ss0=fDH^x>=})#r_8do4GFj#yIW<$~rg(GK<9ssmfEXM{+6 z&~2tx)2xYgLF4h2?xO)%Frk;ahifM`!_MAOQ8A9)*kw5HlBVq8)7Z|Tw)rNW_Z{j& zuKbwzm`jUYF`c&V-RoU{O>_)B0{Dse204zFTdesxdDZkl$fsl%&W9C?yI>|;sWU>o zU#gs+gaFZ57Bg5i{e}%c^)3a9`oO+Zc zjNOvBMl;L}r=;4}Pm?%ADG>YorOy8PWm+LGk7c}XMUzXK;*PBY{lOGRINEr9EO6SZ z3w+A*|Hr{dUy(@~F093iOwvtd+A2tU75b)D@Pd7+VaW>a;|}KN@d(!TKXvs+@C1IY z4^6ZkO6HEgBz59FsHt*aC6fP&0@&|UxeIaXJg^^*HYRq)$_ISO3zYL{D(e!&vMgc3 zimxB<;b-dO*bhZ5%_8U)+hL0Ww(Tued3jtV$!$IL5@r3efUOWb^l1NbbCn+}MxY)e zI*V<(@5aOXEhU9SuXJ8~jtftDVfY7P6uI?z{IafE>hZ=b&OYS^Jqmp{y!qjJUetlm zO-F*FmQZ}{**&?i>)tkM^bNyMUKu5A?+mgty(gu0H1hcWCC;;He1JJ;8bf=7On49B zx|!HRX&0VhHhE-bDr&HXMsL9f1~2q@BKp=;Mbe%)O&K79c|5Twzr^}7HJm(c1TuJ0 zmeC?XZi*5+1Xm&7a*B(Ags1?SvBE?!KevHuq%PBn02O5(6m3`7wbGrqQJo&KOWUmL?y51W5k}rP@g^wMY)+aw4nuxM3Xm zWyZ2kL!W|BW%@M>|v`-Io> zr+M)Z6hP5va9g(L5><$~KMSfNEo~T@4NNy1KavOuEg0w=Cbt9s3bz$31o@aW1TZ+Y z?2BGg&4KJyPD3OMJMZ6H-28?3rYFl@Ekp8d-{8|IygaFkx;-s_8r+wr7&glyg0A_S zj}aPueV)0|k~lUt>aL*JrRf>t*7`Vx;eg8r10Y1~YOIkPZv5MM>@JCCL7hl~EX*c> zn26H;ZQ64JXsYz^0Q{VY0-=|E-}Tju;HYjuQuT;rtseQ~+wV4H_AGtEw<{7P3xCqr zC0AsKZ3}OIS^fzTtRXHN9ObYC*6u)BgVrar@vR8cNvx5Nv!3F{e64~UQgvaD9A8-` z*w|bYSoE>iZb|EF>9OtoOLBJN&kL^GDq#4OH22n;qhP&23aH47ik>l|_QiV}vkYN+ zJer&{XY)EuwJj)Wv4+>Gx8BQBjxkqdMzsL1^$1XfesSqz$iqs6K@o95`h!s3U1Lmf z(}cuqaWhyWH_8@v-r8`(ieksuN!;z~E4%GFiEHl@f@7TK+kWS159@wo8AdK1DZ3|0 z=h6ryFh)j7=XD*iE%XA0@q_w7oGC6ZJr{bRss_EnH7%XQ0Ch-(rveY?SWKUIC4g|Y+{!A<`*d0C&x}P=C@j_%buK=+#?&-y5lb<{X9svZo zCJ=SggJHK(_DGOSindkuJGR5-!x#9?ItPbX4j`|Kw+)uKY;I9;o)lpEJlMnke4}_? z?o`TTcA-}g)Ztkbddtr}zA_V#R6XG}7qewV(H#(H!Rk9}*R3|QNs;%~Ox_`HQmktt z9hB=kaQ-8(=Y+&v0}^p>P9I}LYZ>5H{qvOI606kcuJr!#Vtx)v?xv@h9P|{G`#uqc zpA|B9e%LG(Lm3yc+yIGVf$G+Fm{U`PXJx);jR#J zWKVS2Xf(vq!Ap|sCbZ=*^-`xMYESmn@sQ$-h^3G8G78UR{LN-Ni)ZH63CSe0$U38v zE6>*R&H<$v%ZsJ(iS-KZJQ@2Py#;+rAU{0)U$eMe+gwBq@c=)OUwwdI7vHvxNU{3& zPbhN#YXJ<>spMph&urCRAyZeyJ;BOs#5Z(57Uk!cM7vkaJThDD!ANBsPv#IL)5iIh zcC*ht;M&|N9u5xnRDW(%AfSQn&`HXpRiD{jcY`pqO{=C>Uv}G{dG9s-Zsr1ZQ=?{> z#>c=0S>%PX@$w6<3z<<@;+v8Ubp~c*A&(`-f>sMxV{(4uSvr;v!cR12IA#a>?HH@tU5u+Kyga#O#B67+?LEM(~~IlUSfEQ~Xn)EVr= zIq*GEY2vd>fp?VPahnAn;OsvQZvHF!k)!>brsr*by}Afh^D0tm_E+33HxWUfM}MS; z&>s;99lY~DcfI-RwZ~IXE`VO)Fk^hJ9|!q+-2q-V?dkOV6M>zj~E<@bG`af*EjSdBJ_0 zu`hboIW-dv1*gs3om`Jct=6(l(KCh88mSH;coOhOPta(nlYKAqEO-Jw5qrAPA(*^= z;PT+(hhkzt>Nm-l!p4uN(<&qmU-c2;LEcLrQO6QGcX}@Y9}Kz!RHY~b)BnxkxBje3 z6>Ap?uVK*tGqvBao9a4j{ahfu<8|J&B!yy?=YOF9%F0^<1&$zta?W*Pkr88$s&UqP z83;KFUzS1c(341mOB9X}~vX+_4sh3#Uj9U&E;$b>LiK@o`4Z$0yd@ z=jHOJ&r?=o4RX@j^Tx}?Zt2{nOKfl|_=%;TBhgIPYM81jR7Lh1KQ$}iX9+5Gij{pB z%&ZChYO{AwP#YHoxI-u2)Qugb&PnA&v@#U_0-pL-I3-M29J<{;9k!|(Q_q*aNTZ0G zhm;6-QNZXxCdEz~pZE$Tufac`J9*^W+Cbk&#?TcJw)YT$2#opX>_7# zFtY8YeTHN4@P=Y2hG}25YuaQ7F~1_Q1%7`MR6;#1{nA%Y?MRq%&&|K4G)-~K?vw}& zGZ47=y953eSLJ-HUBsFnufcEL@lSYpXmN1@*XjjiME+j-vjY!uT@U5^?GQGD(5RhT zzezEgR;?lTt8827xx#7Z(iXUbuiohq$wMD;IDy2z(TXP=zKf& zm%4mGtR4ZXh1*a9?yf>{c}zrcBz;9LGjO5De9-K>%UX`K2&A(;&&~#FE&_MKQ=;~` z=sF3#bOx!f7!g#Cay@5eVR(6P^4?K>a6unpF2D?c1py_fLn;;-AsF?K z6A1ymiYz0w@#$9v>41$?ocu-KFhq8G!RC8CK83^;0!BXGGl^DG?_NmqcUopVsKJW{mEx=7=2acvdS65+r05j= zb502SHOLRNybfFHG7x8Map(7yNuNNHUT4}t&6eb5%EMqUeR}XBqPv@9vOxmFp?}zY z-e}k#lc87~E#{)sp&-BY_V{!}&Vgi%dRAKW?+j88j2V+$+? z%50p3`RPsKk=rp(FKHIABf$dLoLii(h+G;w zOr8{Ll(fwg(8Oxlp_+aOo_jLU;#jR1_vADp6gW617g#%?K2+9nA6w7ugtJ!e4qM4y!hsgm(j(UM!wmp#;>5i3`&e zW1QE3kF;d2@#8mnxtc3Vh`LhvhXO`Ds!U>@2xG^Po~Xg=2uZ(-KU8XB>8&nQJDafe zqhk`x9v4QWKEkJZ%l?*ib`fTepZ@a~K^c!TOI{8&^~uHVyocXJ8%t_+2xj0~5JaC- zL5&cj!VB5QJ*N0-o^Gaw7Oj<1wJYqe{4E_tPiOXee&w&lsb1c)8V!E&aT7}vvn{f} zF~(t@;AEU)OL19$wKndV+DJ^Nlkbbg!`p%W4asfqjJCgDl-E0VxT22)RjkilWz`>4 zt>)f?9i&k_(gPc-YUjPSA5cZ;R>G|L8P8mnk}%IV^3I?5wAx%ue}paycj~xX3RH)_ zV`81A_&@M}y9la!O$NcJWC*VVucDNqW%?d&WTpAz)$3huyE4r$;#rw>q?(v$b8a@| zvB`C_0#@)<7sHpSYh!7=pwy&Nbk>quudm31E}J=}zE^uWh@|Z61#wk<#}G21`q3^w zhP7TYF3xyuTO5XHeEl^l_4Uo@5k>@Ese3#b(3lnYZ5RdI?R8%|^FaQePVP9&SF=ADCQbToL8mT_2g)%|h~A`AC3 z22sVrys2~TZyS@9P~Ip&6b1l^i@2KJzBw^AFA5Vz-GWlcx@MX8apP?iS$>~oA^9?l z9aO=VZkFcvBQpW3TqlYgmBk|48LJ)aKBVW=#tdr}@(V#Px$UTJN68}?!c?J=NsW({ zEuR_?Ocu!@>BKkG4isqYy5Uq~1VM3E_|u;=i(T;E(`~3vRmhKZVTsUwY?>SRfUBo! zH4iI!jCv>(BH)P0pZcLg*QLf;K98c!op@G`!XaBDu)sCLwkqLaD}!VE3R~o@ zgMtYAJhlYLxfhIBP%e|Vj)zbco5Sfe24EYIvJ-_?ylbf5`->f1^|FsdW#E${8%_vRO4 z;kd{>$Z2gl-eH=-Y3a+k*b6ho`Vd^v)$!keV6_C=J?7tPCj&GI#7VUr3t|i7+j4EAmncmA+~0m=1@hb#O#zo9lpW6A_H$pNZ$WXJ30RJI{6r#lK&u>+;Vc zsUh?J@PPG|vhLeyInfNNz=puLBfI8<3{uYQu$$!00~f$&@q5NwRsBGD`oK8>&xllW zRkzqABY>!C1s+`1u*V1R+{MfQ-jgbr8uh7(Wuh+ebjHjTw0xWlz+{A}*ShM>z6oW2 zq65jYFJiI+Pnw9z8Z3^5gfI!XuzJM=s4(G#s=4XOAfA{>2|IDoYAsZu(O!6m>Rps|X$Z-eVF1Iz^ULd~yhD4lfD>W={j1@gkv~ zyE&~!qHLVmQrlU*aXK>5ql-L z*CuK;#5_W7V2PJ#_|$+ph?hiozqmgsrOoN*dG$!$g6Z?t$Jp;Ssg7K1>|36VD;J^i_K2j##2jPV3#a(v&tL==yd&P1 z+*AQ@6zm&xiL3?@YZ6fKGPND0Rlus)%3hj+r&+xw&Sh>cu&)<~H8j zlgp!ttvA_^E7L9JdqO67p2^`jqkIj;7x&mN6ircZZzNwIYInJsleeli`6&;V<*I&# z<`WQ5er=5qw1IOxp?2keI4q0bbX&315Lq~X{W*t{$@nd*FjwMIQk7Cxkgy$KjJw&_ zBr)pxGs?@#K+Hf*i^ZFI1U;s1=&Pi^m0aZRklF)Cd=}c>kn4U&>-Fc?YV)9;-OzP{ z=-NFMPBisJHn=u&5)X|sOZe`*w~3IyaBG8KJhd>XOU^e1LFMssEV_3B9k{ z3H)*dn1u-zV@0TX3e4e{#wX$#H49rfi0U=)`@ZwFv8bSldah-z(631UmEY`v@q+?0 zc4CJ`s-zfg6YH1b&QLa~`wDv)p)sUM%Cj)uXXA}fdkVp7i<$UDPHo zYFokDJ|U#Cq81;|;%i4XP@^i=rbeU0mUcakjpvI2WSU513}TRRP_~OaQ47IQA2PY`$%J zj_`sHWT0*BtwaY%stzT)g)%LFGkY`e6o$_d{0Z<+h1W5~=fuCnCLNi@0CZia!_c}{ zMJ(m+nx}qyVpKSCJOMD9vZX1^!Lb!`i-89f?WKRhfc(6_G#T_e4-p6rvd6IOu;U`{ zFt|f(G&OjRo|8QkY;$jS5vOHj4Xa~@~mRlu3e#3qhc0oDEIJf&)fw{PVcX=)i zfWKo{>=s|$u{NdM$xM+G1cPJFw*w%)l;NWbF`psSo0gg9nJ;*htFcONdhw-)$MmOd@C3Js}HH0QyWh78l zfO)(D?Ta4X1I+``&jWVX`e!64S~#FpYG;(#2&Ew1acv7MWUuIA4kN98oA$LXtj#qZ z)4>@Dtl-S+E+`^{TkP6&z7%4yvXoLDNPNyo<7DA?UX{-T&(0Ud174l@+!w|ju0Kh&T?G1J!d3MYk6vpe>%|o^RT=qwXW+o zUvN{jrGMbiIL#%w@FE*b-!XvEWNVHk51AZS!LC(;t;t_5 zo|cHOUo^=|NCw`U40NQToC3a%_WS-!c62_n)P;5jd5l19tgY{EMZ|$z`b(_ z8&_))Pvy zx*%tA-9v(WrF8giJAq5%nFY-n6qUr2vl5lFlgF#je{t}1FAx;j`$YK#s`Gl5jjZbq zQ=2*IQA*p=-(vrGOBz%wAvVJAmK3bm9`nqZ@^7A;5$*zG|bCKYEmpWa^1YF^PtVC zx$Z^xqiH;Ycw+AV7E`?TN?cd)ZV8=nju!!b=Kwnf+Zn0#zkUwh%OK1PMm`O@ zS!D~k<_S1y30!^ahGCHS;iMSiI3KhY$xyz7kH>O)U(@~?bh82)7@+CDR0+Q&hsRe} z_f}hPy(LFs3QyGkSu(6VIyB$F)$%4H?jHI56*@hx{aG@7fk=gdVitb8;-};7go^sH z@n6``>NCg5MDWlKSek(zov?5WqUQl|9Kvz9aB=B5;>AOLVQ$WO~0M-<#gsAoaI; zmzJ_T_o3&M{q@T+sm{`VmqDGw)(SuK3t4?XyQuMt(AdkYu0a%Zg|al zho=^I(nxo?@XzKxu(wAQhrs>kna}>!kUJz8E5)EXar8jCYlG-SS-RH155E&e!m0^SfYvLNP8bVf4Y0eW($=BwrH51 z`#(2Tc(kjTJk6c14HK|j4R=iqMv>cqLEk7M?W?UV@S`;-v*EmVA3zJ{(mvd%>`oi= zD(L>6HQ4`l%`AmmY`=nqJ`2V30}{IC6VEwJ@5kQ;y^kFr(`uX|dI{UY_lDDg$4fsf zgqGsVh^PUpl+K=QPZ36r4vf{}LVEfi{%9LC=X`at@3^Qq?A~vg#fx+J5K((wthwzS z$MrqgU(y9uX}6x~=9JCcBm30owp;Ho8a*_M`Da`^3e`o+P{M(N-|r!{<-6}lJ@{FD zWm;nSBCtwEG{@Oq=$HDh8YX>cQH%3QIVQ0}^-Pe-X*BZ0vtW?@w(ByyRSbB~Q)63ldf{FJn<$dmivt&snlQWV*Vj9qkvI7m@OpHLqK! z=O-|Jw3Lm~(^5=$MDXu3|Me3>N(>g9L}GTI`a@TgOsE>kt^nELZJFQL zDtL$_+oaLSLe6*jR)PO$%ot|8)o6~6tCZ^UFYT)DakT_07qFXV-j3@VQL#Pl9b8Yz zMgAE{xmGY~)FUF@l(i!u#^EWchIPTuFzn|U09G$oOtNjFC6Bq_py1Q>1*?TFPb8cz z#vYU}{N0+m3Mpdwk?nGB(`L3+K*Z)V|^Co%EX!2W(L>1-TXgaH$A?00Y{n}$`Xsl z&)62v`|=jQ-Ou6T8m8#BTC06_mvtur0k_)St12xzJNVg(S;~l8hNG|Gr7u3xJ4$+K4bZX*%zdl- z(^MG|@j1P@Gic9%ayz+RdkK8=?a?b_L%i5F8EWqVI-(P6Ef5p;UZ7WV9H0|p5m!k4 z_|x9!cEafuYxcL1PRO8^VU%Nl^kBwG#|mu(Ym?P!V3`*qpEo^Iw!fc$4&Vv@sA_V? zd9hKoN$=2F?{)3<&ssu{?n`GsITO2V2r&YAC|n=o)@N0`gm=zqtbg4eRtkl0`7M|q zeaj8n`=3XH9y*Na6CppM{1HapyXY8-?hyhrKw}%E|4qpe*u`-QyZ}gK2t|;X%sG`)+Y5 zy-MGr8c879cK$*u_S8@pDZHXix7n;iP~Uj{3s@0u4|z_&;ei<_9{a7#+dCmy7xZ)= z?{$pLwNZ)NOv`ed(Ie{r-M>UR)9etNqG6={u_t{}Swn_uL}3H_{lS zrCai9m#`FbE0*ZP)Ul9r$A+70B7qBMOc=2$*XLn^K6-H_iyvWF0n9zur1iQ_i)Vjt zA61vyeb5N4!o>hbckM5|?M;&k(@2jF#-W(q6anA6fpNrN z{UP?RC%uA4XrmKZ#Og^3CdwI~tw5S`bQ`s9cguw*;W0z$tAHko7z(fB6>Fp*7QNH6kc#kRxib`|1AEchYcD2#KwWB?6kV=YSz8@HDZgWl&JDSXfz2$uLLCyQ88V< z)~j}`b$5Qfis}{hCpFLg?`4DfTBjq2+IP*)ZnEHXy}0CFSA4APGcG_b8A5c9ioo_t z;PdMYNT337OW7y|1y- zc9-^ZNwE#J#NCdY<7w?(2k|JY%2rF8R+x^G>m6Lv*?x(>S8O)FKxfU9QXUX7(l~Ye zGpcw|yHafx#@r-WQLV^x=~}8$lG9S&C4O_9=E}V2IBmycc+kX^fn3>?Ts-(goJqg7 z@o?cwUbwq)gL^0XC9HHZ@0V~XQ;UdDLo8jtT@)tHm>ElOQ^a&+7t#&!J^z*2RaM|= zrE$~N%JXFV!LosD72UA@Vv*6wzM|(J>0g}Nh8O2Ff&^F1Wvh*KaEa+IEuQvCUY8`7 zxJX&50v`VekG$XFT`dJNexhG2esN~#%IGYR7!s+x<8v#%9(h?7T594d=`tdDB>#Vl zA{|v=M_-YVpNDGz)8fvqT2ZfftPVy@N@4<7#4ak;`44K2b@xxJ@lli+VhsVHNWMN) zQp(+Bxy94f4WVY+M-iq=*0&*Y1Kp*Ix-zwgeN6TeIEw7D;5UTPt0L?MSN;}6hF5zB zX%B|(_#)g?y+>c+ud~zk$`-2Qa^k_9$Pl&osx+0>W3yt+K;q7Y~qGv!l5J6pLtCLumO z>=u{O5YyAgH8qM!lDs?9SWV-RCr@`K(^C0M`5{RvR{fs)D4^B?S>TT;W7i- zX7@XRe+VmVYPqEoWfPi0i;dvx+DA;D0v^K?PVos9fcAA7GwgsJr8j&q7rNq7U8+C9 z&@i?B?e$1_vc>z2UHVEg+}vz zv0S!gazG5E_#|ZC2 zrNW8n&#?T7AuMEo4=3AQ+#qc8hkXdwDr|XRX(GftBOj->_qK zx`&kS+hgb@lzZD)71D^#+3?QsQC!a`-{qD$exLX9fA(jm>%$tA&s4g~h7V#w&b#0@ z%li3lU*a;0oR#N}%;C*!+CXJ9D`%k;#zJ-X-@;oi4ujK`#q zXz=%5FpRixbkBgTJt-v^GURasGV?u(0KKn^g-upv;GF@s$;DTQ_m&Y}13{3W?Ryh@BtY>5|iM_6-?D!3`KMj(22 z)Id1QUwNjp9qg&lau;_*;fa5=8YIu*qqFF}W~%QQz2>0uoTO(MrkzT2p)b-GCy>db z(NQw)m2@P(Q0Ut3*8V!o^r;^cSBfx+8LPkZY$42(D%Zaq50v8>5bu@;BZh+7BL|Ce z=M;K`5n72!%kePD1nt+Q@=2h>4>n7eG+Z|FWNUnP`fNXjV5M7+slMRxC8gDm4UoE5thTH zymbqseb=mR!@g@W&Vl2VrujOX$^Llot$|UBWD-+@QmN4_T`UdKjUC)KPTJ0uQaw_g zzp9|ye!rk(KvM;Rsw1#daNO-w73HDeguq8Vor!HU+W+2YwUcH!|G8z0z;L?tChB!W zb5^TLuh-*{OFB+irJ(Mh88O}f+0b~`_-dZg-wS%E6MKpi%J!ei z7WG;3*ca%Sb{LahS@tsO`pJTEB>J28mYjcR`b*;8M5Uo;E28irYnIp-v^=q=%h$~f z1mDZYss2JiX@D4j}Y4?H>SCg_fH+ zLfhbDlw4KUez;l<{&Z%e%8$!oll?x3fNRbr5U{EJ+*?_E1yir@$=h%^V!1Hnt0Jb}1V2`@Qr)hZ3Ej=#ic~nI9VYX4@ z4bsB*(FPH3c=S@_-QfGAj?<^Jn$+X%o=+_OG5b4?pbi9(Mi5|)yxv_3X-c#GfQz(t zsIxnlrGX9tD;oOz?jTUHeH!6<{%fIJaZzY&0!nZmluXF0rE!1&qx)5JMcs?rSQB3T zWaaOuY7b&+2BkQW6$v(^&2FJ6f3e=7L}{V5mn_XZHn~5|MmQF0AhWgk4s^Ef5JJun z<(;XPD=@nNup#hnB4aNma5A_kHiY&8SqdE9N9FGKnvG%(m;&)f6gLR)&&68LzXB@( zM@&7JJqVuUc#UrI0g==ho;<@2D^M*;a}iMHx*XtN#hXIOxVPv-OYK=YW>F93fF@YHX;F3Gwv-r!p{I<Iq~cK}b!M!S{t)z^hMKlM#=k<5Gni@j~gg z!yBlcP;xOee>t2O`UF?>puAE{%)Rn#8af^JWegmQT;(oY{WcWhG#pL`-~=Bu+Fc87 z;@rjfj*T2IrWmfaiKyhjDUNFgx67Ye*mV0DG@RD{f%oqBm4fq+&B_me;OxNe?mqDH zHXQo6%iN`(H#@C%2CMPtFypHad)tl+kKf@uOi+}3)P%6TUd;IMMv~CHq2+bH8i=*1 zgASHJ<351Znb0wPy~x@seE*yq+$nH@eM754f8M+D?a2Q~$a(CoY>hPmfvz%LINXc< zN&@7aE8w(I#0c|(5bdx9t3Wh{%!tjktMqnnPQ*+tNc2=l6R9qVSnE00wO}a0MB+yV zr~akQBE_CL9%a&OnC?amW+~8*Z)}Jx2!h#id&1Ss@%dceD#xhBF(uv>f_TJjwqp5Y z&TJ(E=iFa+x%+W>s_HW-yZmBO6S?87MMse1YW3ufIlvggBnNNT6$gmBp<@VF-pW}{RMC+al?#fgS)3kG|Y7rTjTeF+lOzQMuS<;1Fp)yMLFU$G&xuQ%4 z^|f6V-*`D1EV{!yucV3_V_|YbN;dhk2-+_Sm$+_1o3iS~zuyfH1Wj&gBO}W66;< zj)bfS=`SoZD7|WQLNl=}nS368H^(}yp5K}CjdZwmxJ*uym%7hlsWvOT#GGds&r8M8JjKN3pu6TUrMXiuOynS*Qm++PCwE_Lr0v?-yvt+Lua$Q!2;tC0o5z ztFrV1*+t+)``sN2Xy)~%{RL~bSxQIer=gF^Rl{<9eA#lwHX4Ta4LOpYAI}Zbe-7#X zbEdggl>~Q)pv+@C(E;sMw`;JUH$$3`h!chr)%Z7WE^61U4*GP)`IaI&>OA!5TYHh^ z1rZhFZzK`_c*o~xy5h@F)32GMZvOjI8ei3$(X=eInD*kk5GmlXz|459g}(HT!#k}!9sv*tibK#)rli23%Oc6_68%yO69H zfTW9*7s`%$5kE%+UyAn6l>EkudJo4Ad3RpUShN*2!EYl@;m7)fWt=2h zq;x0vR+Lk%n@hqu27n9J#@{5=wC7M>OKNtTb-cWRI|8Ko-52jp?#m+cSyQ3|;B(@= zY5P2aB^0kW2x-D|H&PeJSe1_^o?7%@f<4*q}%9=I~l>g&m)R)b1E zfCiSY6C_cm{_}dtR-(^Q{+dH3IJOri=f-x9*n$KLx@g+Q0)(37$*)syd|O1Ef)oG7 zrZaMVx;S`2nL79m$Q`UwjXaf4{`vr7Fv9iz*NB+ceThEi)ehL)mBr!{rE+>>NJlN- zq4@iFXZvEwiIa;PUPTBGMD4C;-yARQB@W3t?quEb?mS$dm{ox|K~s~C-v8*^F3F!F zG~j)xS2b>PQ90b6q-&NpNyOPYQrg~qq=iZVC1)y^_a1H!t=4Jt=+|}s-6J(ea8V+Y zca)Kjy-U!74gf3q@SLNcY=xi@mz}2ZE{NB;;*OCe?aED{;dolvhMr}{?NG5}u%WlP zoYEGMK~+9~a6+y5x0s*%p}G4$!vd99A_iF9S2d5$xU&8EdXN|K{4@Mn#4P~sJO{C( z$R9u@uF;{sg^1G3S#qTwL?iW!h|=WReRR_K`3AWo{A5&&?;k73djkcF0ju$8snq&d zum;abaiGIH0-cP*zBGO|d%O)7FhQpg9RK#w6?s7n(T-IFb|r&t6B{|$T={7if_+fp)(5+;?g7Y{_S$Umjn zTERGfTBnf<_1oYG7F$5cODM0VC6V~&_x(QA=O4%-F1?aF?42tqh|G*9gV(XNI-_Zk z-dkwSHoTKiJmDS(Kvu|LoHL{_hS7x^Nq=JT$6MPK2lQUHum9uc@66SQ$vo3#{d+$H zpRX?2iq%$J;<#59qJN@rVgp0r_AVWNd%okq(#8u`pjb^_8No#Vr>enw1w&SE@MK9r z192Mz=GQeAAW1U|B~9oF_W!Qf$@SRW_r_oyUA)QJr%<7l2mH2Or|sV!^_RcmcX%w1 zcHtV;Y;r942;4qIO2W3HHpRG}Gw+8-m6Z9$kTyY_*@9z^TU^2+79^3t+%>B+kZ{&{ zBsquupJ`y%09{2w^L<@xkVG!=1T3Dc*q^U)_Vtp*Kr9|72y{bTm{di3hZop2MwCW& zBVxo`?N;8fgR*ehW{JMW4i!E65mF!7%#7_*;Q8SXqJn_m4Ejr_Ak`dBxEIg5BXW;q zkm=pgY)RB`govLz9+{HCWAb~Q`5sv1hli4!oeYwUGKTafvX!DLK`+bfGsi!w>L!#y ziF(01$BT8<{{_uJGQTk}Lk43G(Ze9vUSkO!piO5re_~9he=r32@q!#-zTBC#OKX@` znmdwhhXDp-`Wpi?{Xp`c$S90r&uP7g3}tR-o_lW8FncccPmBV;L<;<5fMo_Ei@Ut} z3!1|9&DVi)ge5xrq%B7p%z(>)zl583`FH;$kKJLiBp$bW2wNNUnoLNPfg(dVi{WEl zbB7P^mJs;XLP2<8a6^DF;UiG`c%Jve>D;-~u4DPWTBH`!Rt-FUbDKayQ7o^4j&LW+rbt$Oa?)Ixea7xz9w&rPpt1)r*CWWBBTcZ@z)ZzMHKP^4Lo2h87VMpR_P5E7GEN>lVgT{oySGj0!yAc&@V$89oWgt*6WIH-Jekk96^rNC z;W#74{#u^a6|IaL0_)v(x$K!#Jp%~M*0`gG_RFifr6%YCRv%v{>gN;Q&q(8MMZ?sy zDMsr_6W(<_`wdk*?EkLNAQugIzI-wD9@_dmey*SN4+;wOpl_K>=#R&lZr%A>3j1AG zyhs6+@#uM9yK!4!L=bzNdcuc!^X7KN3P(TO#JAp~U@Q!~syU$y< z)ix;v#fubt966YeIJa+Ha$rR6G zMT=OuD8@cK1n*agt7HH->mBOh*8zTRp{*!ncm{Kg-+&2tu=#{X4jxx41yBPZ;6dc` z3Db-B$pRVgPVZ=fXMz0~(=dUl1SBzigic^aMyjX8T0FNwkl5`6KZTe{B0DMln1P&`#%l z$OsWF!Efu=Z_dao{0#XQ5Xg?_Ey$c2Jnypeajk#6x1o85#Jj% zs_$NWVYJ=z|1e%XZ@@$JEorX8A>egZBOzYi;R2{i6f=5YVDQPneF5YF4+mS=FN@A7 z{|4--vjL-_1Ar%hFbQv5fFJ-Ecsrarb!?|{6edG+HMAy%HQVMHPv^xm09hnFxdE>S z2($q_C1eMHD(_sDVSt#h=mhWx0Bf{_cjUVD8*EGgFn1Ry3Xnp~RlJXpYo4zFTADV_ zlnr*2pWO!(0hFST;16~`kQigumjU)+*Ze<# zOv}V$fF-*{@6H|DTif%=;l=9?cr*gcKxd34n>KGVy0LQt5ESoyKtsm0@wMuU9N-;* zBgQTXZ^cqF0z^x+v3u9f_Lm}F03ZkOgAY9~!S}Rxu%w{5cs@#ViOyq@R3j4 zAJDJ28G7FTXo3O9gj69sl!58$Q`XUxkDeGU0k)4BH9RB6{v?6x>m(QP{QheCY}Z0^ zpS*BDVxFT9eEj?Z(l_aUj0M!!d%FXUBX2OKB9jjuJY>cqWEdbU@q(%6I)R)sXV0?` zHBA~dH2#YWg#n;S|M`B07cm-Oz?mTrY3g_V`c2hM;SrSJ!-53^`G#jc#wtAf8K2PW zyo_+@?kiTUvELXWnD_1o1Z6G_^2lTI>ucq?ML<6D9{oee3xHP)f#G?Ha!7uj_jTnR zWI?LrIALuta`GP6SYKq9@UZ3&dgDoqS1{ux{0_X%P9fUj%Ok(=cQ2b*Paucb@d6FX zlnz1{(NByo60ER1QL#+3r+Btx6-1i4`ETkO;%=Q?s*tvo{V=S;9 zYb3Cl@yB>WQZNtk4#}6pcdq5uUz&`KSF~n=e!&?1*2Pz;%p^rAV_bXxIQ*R(}D^HxSUumI#!*(;CS2K3^IOJX5%V9!o@ET_6* z&%ffPeg2Vv+Zz^Bxmu0d7CNFwzh~Uj6%}*%>SdSMs=YgY?658J!gYxD9k95p;xDt1 ztE+FcY$)e1$mW6)0Rh5BQyO`hToEi`ws# zAMY&NaKI%UOmTP8l`lMt5-OK=Bl|SFZQxWu1VH=7=PO;O z<~7{OGnd@%LuXu3)t|Z-FIvz&*RQ!daO|9$v23Rs-Yd~Hts7@$%w4(L0O#jbFQ1O5 zTy*bFS?lV=mv>_awG0*#%KyzTR@uVuHzPZ^63X*Y69E3iIh$S6dX-(PhE*RmyV(0N z3j8D~z;;L!MgS%j?QA1FB~LiEN24^bwUk)7fC)XjcQ!=>k0k(Qwn?*a_lY$Ch994h zE&TaJEZeVU%#vbI*y3KIXkZWoY{e@JAPeOLr3%^IN}hZGPbiKg6se(u0`F*_Cu=L`z^rp;RnkV1LcCZ!)QN)$!f zN&9%8Pm=%bzoU#nE4DGy27oP;N6Nqp2k$7h)&es6cTi?YC{e5!;@Q%@bC<$()RLFi z9qR{_bo#@W%kwCl00OiRk3&2qKOFz5#S7*+yq5s~03PrVB!%C%?<(-uoZ+ZG38D)VCy++B0RZBDChJU;M>lfd(;la78W=|EMEYr z&Yj!abN(OJM}T4gJS6Dqm3dn`={H~|39t*|01^NsbQ4fT+W^Y}^Pq7!4khmZ+CiIX zGiJNKy?PiAaA*`>#(1v+1bN;xTBNgSxIXYQaj#k99u+8z=N#(|91*UmY&_toE8z`L ze4lzsnNV*j)_}eAH|s}G27l*1E@`p|Z~qX7XJ zbG~l0#q$W?@e<=X5>*EL3G*b^X%7Ga+p3=*Jwl*gY1@9!b?S?v4{tJtIY^eJ2UsVG1<&*7Pi=QcFw z&+{zrLO(pNi%C`jSoP}B#rO>a0{M~1)AubpPZRCrV2eI7xT=6l#_=^dm|&~`R3T0` zKo=l5-tq0)wluG1!VAzwfFD4qaH1^0J+_4dsN$6k&mqeIsPTODKq~x>$8p2@^$h62 z0ANOn^!9t&@k#qI4g#WKu z*X|hFUsU&yIq*6mdyuKjZLA?!OJGESrpOJvzA-9L$8f#K8{VUj=tI^~><}WX6><$8 zBAgNH1b(xFf}Jwt>3M_x0L(=u-P0ecCp%C|N&es^PJS4(r~?Kp3_1-YKWGQC9$7|z zu%?NZ;g>Km?0})(@Dm|GFt+1W9Iu@U^bup2Nxo%^=JJfrssm%p!x?~jQ6_xm6M3@M zA;GVB@H5{rX8qU�DIv-h7X?qt53S`;1ZG=SqPe9as)LJM*{-)tU+nz3$HM-(Udm z*YdP2TB@SEekmoxIu}V~1~v!x5f8Xs=bk1k*pj(m_7n>@!J&B!cCKAg=nB3Qz9KD6 zi;>gGb~xVX7k}%{%d0k@7R4M=ho>&yxoiQvt7nfM-tT%SJ}_Rm97M;2ep|}oM{obT z8#d+@_nUwGKMh#UFHh?Qv%YlOwLM|hT1_;GT3RN*=#EXjG{NFTzT+;%t zxLdnok=wO%iR)UF_iTjLjQ~LZ`px-rxa>r>??n#wxpU;2K~NM zS!ERW`ni{W?@E>`;|NW%e&rIySRUeP)UI!Bh5q|??J!zq)az&d1tk%W6HA)V*_s9j zfn^!Rhd#j5>QU3#3s>FA6ooJ;SKMved(zcQ2;%o$yKzUrCkF<|qa^LRt5&IuVvyz2 zVp9tWDPy;^P`-5armG%T+7&9032soIUhV6;?rrP18B2GX2kw}DE!6i<8IXEZ;4$N- zn%>K=g>yKu7$}fGj~h3*l`C1ipj*G=xLYESxSK!ZmkXU~i@JCDgWL*Qi!SD;uxiJ9_t~+HmFSEo(!;0$Mc5^BAS^ zn!Jf=XF}yNSv-0xl`rlplz~pk8Nl+M!)Nr)x1!tA?!bw2u0hQTZgAH|=Gi=c`UbaV z+hJF>WKnHv`o_%>m|RJ8E?2s!^&{;KCv~kU!AFuWxKn4ZxGEJ&8YoS@ytg;cq+Yt_ zPM^Ch8WnPJC+5Z7isebHQx@YWc!VqX@Z--+DZuzSuwQQjHBb_KN=T^YmabT3iWDAED4w}> zc%M%w_<&S^t^gu{8UR+rO=Qa{u_vDyI?xpN9y$P!n8JA30g~Ze3=qc{3@4NfyrNL% z@Rq~-3%~}`Hn!dKs~NKeerbLe?YyFyP(9wZ z_yXhr$U;}PhVuSD7RfC}Ctm1hAEi2F*s#Wvd3j6zma^g{t{p;)pUK!uXZ zd(@xs4FENtC{`qKqItfUc4<*>l=8>~z`20pM=p7gO9n{^7UQACv=dHg?QNwQHsTnGdCOYdf~`87$BekP;Bw^Ahou z@sh)19?)RcocRVK5lB?j;hu*WkPA^K|!!54cq)(9KHGmJA1GKA+yD9PkMTd^eJ1>#2kSz$?-w-~2{ z4gt8ksr5FAHo;%?eLL~e^qI3YZYmm$2$um6hqpFc)=}~?P~asDV2&pl_xtthWnOf6 zWde+JXy4jEX1v^{$ZHKRT6loa4V35UXcb8R2XF)sCXe!KCU4A1UrsYQ0&vRs!z&lr z!CIX7?EsS~{QztLs*Jmj6@!!U<ym0dO#L)_nK(fA~$tSb$DrpC9F>(a-WmC2zuG z3?3wK8h*7t4Ax$Zt&|z(-1{GDY-()PuUp5(tDlM#Eo`xH$4~g&p7+2tc|&jFs-|cR z&ozwze#dRmS$iYxts#&3iAb#2@rtDphf?x8y#pC69@L~Y7zu~s>F z7GRtH8LH4s#L6c&Ir4{45hcZ|#AQX!@GgKLVIGbj|IG9{WEXWdPfXPSV4e^_oCQET zn5%dOPjt5MW5}c(?Ajsh3H;#sMz7oV?BpJ8=Ur$Az(<@|LMb3W{M-Oo%G`ocV4waN z&(w*~G^I;-FnRs4`iz8^Fm<920lbkTK4Hw6t{nqQm#;LBR%9rlSCE|mkdwuGMT!&( z!hLA0BI_9AgcKoM5WGgckeh^+!1#lK15aqKv)cgA=RJzYOqd8_j5E)(`w2ba&fPoa zLC?5Ub8YM)Q=w<`#HKO?CuWhw$XMuxA&&C{h<9F4I02rn$QfiO;Z=w?jXVGtM%G|_ z;XVhoGM9by@kFa5YX(A6(03Cxm$5s9@s3tbr$xsjL~G6^V8;wipY2dUdy$#;o7yKgP7C3VFS+ zk-_Y`bgFMHY)b$_=hqr(y5w0wld*u?7(PqN`OnjZJm~A18Z#J?2qy!N+I7_pUO?9- z-ZOwd{A_Yp{Y4&}J%AD8J;_|kp|1!<(_ONRbpo=OaYO$xC$hFtgREWtAM4)|#cci6 ztZ5S)kNzG;+4-U|ai0O#OO`Bd`C-tRsBzC6#oXGzPcM_D#Qy%n-~Ek^SD#1hGe&`5 z0tIq4Yu1eQ=@Urun#hySRjt#`ojJC{-M9*{8!0&D!ID?;&U8Rusq)p`>BF*;$xE5= z7Zs{$(CXUdbI0YqtZf()LeUb|BZML#CLrD=0k%w3wpfr*!28)2n-SlA_zA*6u%Nt_ zb|p*pOtkzVz>6!UGGHj)B9@n)48U3`RT6ypzZeB7xNvubI?yfO~{qh~$UJT0WWI zSo~jq{dL!?SFguX03IisH*K*=xQvu9w#3pl+K6`-hk7v4v}oQ;^nJ88FIcnJ9XXlm zy0@wAzL>w&z4~lBS6;y9+HFS-)CH_1)C1|Ip>14}Je!woJm@Ow`V|3^l>dUfYomG6 zPFc9!z}lCFw6Rb2WSL({Zqc}TMuO}%_webd%mxN_aiTfN7XDpuIq*1Ucd z^Xh(U(rQz(3Tcsk_ClI#)u^iL(z2F$JL4roc#X5EX|8Qzb$kB(sq0*#yr&7*@%h}% z0;o#}wAT&|Dcipu-rnjqe#QoCJ0}z;pS|pcbZeC1aqa6I`~3M(0FRNdN5q3_E)k=J zb`euj9`x+vx_|lV4Kp|uj4)PxpZxJELBWbl$W9MJGWU`29K&l6um)Mn982=|`3^V) zh`>A*c^~f>l;06LXbS)UaO5vaRzBQdib0ff0(Wqk*>~ zU^OS(*Q!|~Wmv<;88aNYc~ z^ckS5c`-(*2lsh4Oe=mgv&zzObKQ&j=-1UvyKB=HW( z=K)W^gLqcsE$S0MvzGz>TC~r|{NOJVZSeJ={(Ofnlw~v!VB!;fOdX*){memi>?r6V zBS|!w#khr+Fdq3eUr-O${ytZQg;7}m&>78AJ4g_ps$2?Z=oy{Bi)X$anee+vxKOe}?bdSk&Cg7^S|X@O|VC zdLD+KaGuniaX{Tj%U7;;3Dx5T?8n(}{vjXwmQTHGpuE2ceUM?u9ZzfSMH>t3a=>T; zI7mpJ<%(JR>MP?i_{z_BnKF#pOAFGqDg}>`Z@LO9K z346iec$7z8fV@5d(5gE63)&Xc?XH2el)>{iG|Av;%rjggA+Vz*CT7{>?0Ep?04NR? zPgy~HLWATn4`sk-^7UcSuGO%upXo339=(}E}PPF1aSKe%^A@s$AyeEp); z?dNulczL#cSdFX}AD>Zu`UD_h!^Tavh(U1=Pi7ep=I{$%$AqjP)I`myllpPv5w=1gru!QyoCXX5>;SKSRAn(@i3O+!RvB2kbZt?m9kRWP;287GlBmjHY zq00#;6wUDtS?af!zr9s_&d*dz|KF(=$AQ-+E&M*8uyZVrK*gK!RvTJ)dzi^q+)?Yju_H^X= z$oIo_0>n~qxNx@jd=I}L*>*oXT`Kd;==F0Mt6Ew0)4Ob6NdO=3$o<1;MtxE|Ryu95t8 z!X@C9h-WQv$$QFM((|i-hUeLZFjd~3Z1?xPPXBTU8xAaZ>P05Nw0!vPE^2 z!V5)S+|9>sytFP z!q>xf@nr#^c@WKC<1@1Tk?%(S4!_Iy@cqcK70UC7-!0ucbR~=l;{KOA7&|B5WZ6 zj)0};dVrYMZrrj^2zc0*$2p~OUX_9$YcT~J%;v8qRP2RRw71{!z8P9BZ27sC|&LMfFiU)0jwn2Png?&)@ zcwt|cS9CaWpRgA@_9q*VO*o49ilyxlfM0;?mWo?U9jQBYJ96@Z#^blHe3_zdP}hcT zvOKu~#Ql5W{4ppHCS-kb+YBVkt&}7zOU70N@#3 zd0|kBxohO`q4z%gn65-BQjaOyST;W~3WRy;Cswssbsi%HJUIIpv%GIsT@?!9`y}Fq zzBqQY?eHM%NOnLthsXWRt1o5&E&*;v3>*A?ihbZataoBE@quLeSw8Tj`xb*R-q3id z1AbCoEZv_1-rM>9PsQ&3P!x!*6MiU4$IAIJDDVVem8j&;^d?zp! zkL0uq$u2GRq$?X&&lM_BR$GXu)^`>f!%&mImWe|^S1kSfDB!m>VH}8-*j|P=`J*g= z@B-Mp`-B5*1PtbPafNgsWCJmN^XAb(kBYy1Tyc%@@a5V-#X3$CK%0`PxXfoR$t(A3 z^TusdtCDLHldMXYx9?N|@*0X2!98NJHv$4WjcrcV3 z6%>~kkLIRz;w)qXVIhcBeEM9P09(okyp#zsL82`aW^N3%O<_|6x~|%KSRTITW!24X zUd4oW06;yVwg3j7lc(+}c_8D3Oqh=|3LVjwf^2 z19X>Fd}2aOgcJ1vwB>#S0mZzxP+refD`bt4t;cMeH()n$rS~5_=bEU^Q1BbwBt9YD z&j8kK~JgwQq@tt{5V*uEcbix2)X!y0B*{={AeBY3COaO5ng}2~T@8GZq z%7lh|QVzTaUsV-Y&LND17y(?rsPH3?!f#=E#JU_@jXwSKJD7JZkYvC_Ib0#bN%{F7Pr%TKyi<)k1KW983&+6dR_W=v-{*Q z7(8f@d7HOvS3KaRCNpO#u55l8kcm@SzFaxm=AK<1Kh^8UPn@)EzQlU`Ardi1i8Tp- zv{lSU47u5P5ay&lzHgqC*HF@~JqCQ#NT?RII<{q-?fy}W@csp2c&=KrPIJ-M7K^i= z;xhuM%vapdMxuNDD70s8A@s_*^XKiLq63GHxYgocjVgI%6;r(Bt_JF@Uc15K2jhAA zsA>I%P4fOPYk*I*yoiU&L36~M^@&5FILL{^w4x>2K_6iVVk`01Z96UQG1q4)qyuqw zi9t$iX%6nnX<{2TeU5k8R>k4vz&;M7d)UOGVe=O*Hm3o2GErWd95fcq3FLlx(?&et zvh(J=-@E>vtuf`j8R>D(ed?2)hn;_)XQFw-`ultmKm5zd)9pY*Pj3#AJw^7tn9d*#ZNY-dcga-&^?R|z?Qha06@yy*S?hxtSfZQQg?JSdM-tvQHCU$#u(eB$%rP+oRMvjdg!N?hv83VU=wywb8o zuzS!yd%sUYAZ*Y%4#ZmaJF#ZZSzuv|`YIke30Y5=7-BT%q>c0+d_tW#T<%MS&EYHn z&W!k4yHq)3GaT#se)Z!Xc_Gh<>m8mO;p=59*66H;);XGY*`d2>^EP=(w~Z5w_3qg{OT1$0LCBLG3g6L1hwVNNU50Znh}DlLAUjZqtxU}SCy|)%sB=!o0Cix_ zh8K+y#rM>c^Fg|I?ab}Rp3of^i_eG=j)A6M-ySxfMk|PLJG194&~Ew*7DBaY@c@TEMkeG42ft!u`>CaS_Z~df8p;dr z<~4Wu{Bd_B^6%U+1C)ap$ns>>!Y1uvvYtC3&*cN|#J)9pSEnN*?PDoMfuA4+5J+qx zWIL8E_Qb14kDsuEIyhmO_{s+l9hN$m%azcg^4$4UJIxz`{;=t?yo@=-j=01fbdVcf zzP;Mjb#8m#9R?`Zmj`dORHBFu$dE@b ziBJrHs^m3w(Kdmvm0e>2(&0oLU=Frp4h$y_vFp*MjzUQ6cc0GL>{bgP1~3I|E?ZJD zzaqx;Wr4yRKA73I1Z!LU>J{9Hl#2%PYK`RPDx}8rB}oQY*Qr+C09N4DS<83nFG=8S zHJ4E3-oxCHz{ne~Y{ zsf;tg1{5owxE?K`i4<`ZqrNqhbC;m>Gw z0&t3!!fgzHkM?Z1P2um+o<&)VOn@ssW%qu#AN;eCd2xC>3Uj}{y-YdZuyM10G|OkS zys|vN4^_$fMzJTuDYDG)y=dQ~mF3&Wflg-y?)nt@?7aDl-QK+i{B8RT_aXW0-o4K? zZrH#L=-1m~_HqCq074G|6Wey~G7ut52KvG7sKZi9dh75c4&s_QYo37={YAIp#f#bj zNAMUtO^U1+*8)Dw>^H96FCEgso9DH@38!$rsXCAkdaqcyCgTwd6Q@sOXw6LFci`O# zit!835$tvgb`LT}({v5s!-F$E2WS@NH?Dg*;GaP`H3eQ5Oo0tGlXtTlf4*PI2axqG z9ngny1G;wU)Ip%d7E{uFIpMbWYkWrLPyA#KrwpesAB3+*w$0x|#!XWwi^!DS^Wo>R zt7rHbz5@~+IC#jdUb8;q*7?*_t#glN{N~I3@}VB!X3xI;4zFwudgU;{&%T%YVk^NF4vrXPLA z!FGUtojSF1O?60O*dP*q*5?E0628v(Wp1_o_v(T95!}&+! z*>IlW@34P(EW$70bsf(}rF&?-gkg<2jZiMc17}W&G}?sA%q~x^hv^vkj{l9p8pAaP zjjC1S+-LB$jMmZ8tU2@CE$x7Yb{*Qa6^?O6d@B4yhbChHAcfoS^TjoU z4rNLdu>t0!@U5#CGWi3@-_c3?|u8+9YyRoeiIiP;Qr z?XQRP<~#A9NA+zUdD#u^5eV$a8_iX3{(K_z#EXhi9hr#P%t3`d4b>rlBo5YlSqJx# z5(<^EL;UCmJex_z7Xqd_HcxPMs|n}{H1H|>C(kj?<#h1AmB3I*s&C&z|V;Scn{W1_X^_#^eNM3+JYR<3as{Q&*pS` z4iLhdW0t&q*p{9wU`c` zO4B*FcmDyGPqAPJ_UmJZdD`e0ujr%}>+$i8?=guU_Jm(rWs&Af9 zD0l#X0Bd#Y)G|Y+U*xhrYL?hUGChx*K69RVD*?uH(m6DlK4Y#9I}JSE@WSF$`V9iV z&ZL~R>o;W(ZQQ7V@;_t;M?t&tn#)M6MdwJtcHiaFp?`bI-#8`hVh1L*}SQFg>Y&+3VLgKI5uur-wt0|xoWKe7M0^F z=`fqlrtHm}Jy*tnE1D;ByPi7Wrli2sWdfx*JPXe~yn(4C;D}e8=^OeKUf_EdfmP6K z;i6@(apMNoHtLBdFX6^^i?;OP=#kIr6#27mk?PNUQ%a}T59;5?bTGBQ=2~V9$apgoay#06vWsO6Uh~3SBQH?}j)&eLmr$k5i2-@H!47i!B_v7M% zJm<(G2#|oo(0Yp>%P6kykiq?ozWmc#@o#6&o@eV~#s+-KT0+HUNhng}&-Ul!>!)q} z(67YlrT!%P4G*5V^B0-NDbEgnc90o!R;WMriZ;wk4doHtRvtch^t5Z!%EsSZ@jsqe zcw%qbyj5Uzar3&S{lqWF+l~XZF}ic$+@Jw{Eid|(gAFTJjx)s`pv`+o0$9?&^l4eu zb%1ynUWGR)8&6ggPx4jts)UbzF`D0IJk8S-Tx-*Q#m!NFC}Z|31CC+q?Wz zvt|v|<6B$*ArBZg#3#lxu8P_W58Tptr;p){!2|mlptfi4J{vbKXbXnzuf5?JmR3I_+M`%Bw<)l>lSl zD-wOgt{QliF|$BB33~PDZ1qLfFJ8Lbj5~k;#%mgL@G87;=*Ur{1>+08TDE+pJE1Yd zoCFZfT(@QG4)OF67aw26=->~X2iymI)U+Uv|2h^w_o(I*o(J$mF4YxK5AR`!@kY3s zq8sxlUfYcAN|HT3A*%sZk+}dZfD+FR9q3BQDTekT`_W$-)Tg|*CjV$xisnN4rnO>b zw~(A?tav`!rm?m~@|ymruRaFYBi{uY(?^e=w4DNY{&LX$uHAdh@rHMy5k?1$%>a-K zmn?Jbw9{yn+D-d7vjA|bn&`sVLVg35<4sH3ng6LPa<7m0Fq$_$#%B8XwO7Vvcqp@T zf%Q4_*o;|oP4{7az?{dSt9bJ6J8;mv-|TIo+P^7Rh7Vl zoE_@8RQyg~F(;QTTiV9NRne0}8HWt&Z{_3>9pHu4tJk{&hYlO9TWjZ7y?S-*FjCfq zw@g;j&po2yUZ%7d*yThyMU!DHpj9DEpPx zmy8?Mm(Z!R3_Qp|c>cYe28Y!`i}K~m z%0TzD$pGquVV620dvKgXZq`@dVEAPX$D9ov`t|8)nEONerw;pwbmu#U)32Igsf}P zJkk1y!${dNkxy+z7L(vR)&$5U@W>X;n%G)){f5Ay0X{4yBfuPa-NR$_3m`p4k~3${ zNk%M}%)g=Ws5wIGnd{;S<^$H|7?Rl)@r?9@gK~B`rgeswd*qp0ZDcJ1|6_2V9>|^B z+OeIO*vMope;0B713zJ9;5evEre zz8+MjeCk`NTnY0)<{qFjiN1>~FC|?IJYqicJEsYdVYfn)Oq#dNE!AOzJrtW7fIF6A z6!^JN0J*t+XOeqUo`8RO>wWkBho9I&6_AR>yZ1Ced0|112LfOUi^g$dgE*p`5)YV* zXTsR$M%ep!VX#Of;W>=*2RPhQ+o50m)eBmz0tl{md02O7$RVTWDC7bP;!ES6vjrL8 z21?;V0Y=0IeMRq~2mm1AS+q}Ovgie*L}^>Uag)85P+eYO?b~Y0e?Bb~cUzu-!7TD> z)ktuM1R4OAv88;s7O>9=TpBZaxGmOE0PzS!d2cU;9ECEWdNl)60aO9@00gIgHOoLq z>Iz7KQipO^v{(`MD_u*JvNL6B0MG;ephP}9WT1gD`vlShC4 z-Sf{4cZUvgn5zs~V@8-VL?7^XTuLDdz?5k-Z1GAwS3n>7imj)BT+J08V2uE*Q}RxI ze)I_Q@PuwCA}dy{5%5#r{p!Ur3hPkE`U$WTAe}yC+ah^G+h$E0OQET2;Sf-M05MQz zeFAjB6KTZoAqFG?Z~~S9-~iZ>0IQ(^3OL(0*;dIsjR6D2gEDgoOh>6k`P+ZsaE2!i z{Q>O&w|DQ^tI#OT?fJ{~PadGZ70e6Y=9-O~mvC7Z%PND87vvq2xD?I`tm`C`FOyTR$qh8%w?)CqC z%l+>^zG2D+-ZCgkjEmZ}YbXZqC~MPE0kw>?tpcZ@;fQAk2VS`1KY(ae1G za}v)248n7i3!PE)P`bt`UqCT{R8pl171Z~=-6VM~!yk+@{!l(=$S?w!_QLa{tSpqW z<{Br|pFUFNrf4zt2sZ&JmY^|kP#_MT@#>j#JoD`zoeu+QrfQxh)8u!v>iB{ z=nC3{lAKTc`ig*zUOl>)!GbXYcupFneCkMfT`Qi!I94M;JJ2K};PIIX@zGv@2Yi4- z0stl8zp;%^Ka@D(zh zayxZsqZ~Z17L`FQQL?_a$wUl<$Pc!Av(0%7yej%5!zmN+c*L_qT(>SA%{T+EHk3@n zH~)12_V@f8BQuyQpPrcJHu5b;I;QKX3S%R z8>)5y=E7gLrq%itAZ_#3?V1yxaW9M+X>A68Vyv>WbDYLH;U17J$PYlPnwk^oGx!@B z313&QUe$H((AJEF@F+VtnDc2X02~SM3Hi)817yLF@aoGi*nA70M@xV|7-b^EUZC#) z+Tk5pPDWC~NSr)*O8KX_W~xs@wRo#HW$oE_&^*W4Ndiy5^ulun`T$ImFrbdr{0UgJ ze*I=Md~hAQ0p2p_1IPm|GhYTeBM(THh=#}#_~VtAUa+;yLK!YFngSTvt_`)5aSqM+ z1ZaY{-cX;u`OXK{w*XS?s@=P9zpW3L&*8<3>MQC2K+ZM#c&&hTc2V8Db<;IyP}kzK zljnSa$n-0TdMy;s0|47PNW6tX1sMZa%KT5?#>G{#c_n}T0w%}(m}E@^SPxJ~*a760 z>~UsvV9kcn10y@-vR-4(-Xu^L-h-D)Yb?Ms0D~C+Fm@G{5ylLYR>Q3SoRe2QvXt?} zoQEs}v_q~i7vf0dqURF>5uSSog3FzyQO#2HJV6AoS+6~K|d7rQ=BtXh_ z;v0B{KSFr`9wsI2Rp^l7Hcso;t82Sepg$p^nkP0jV+nE^V}DV}ZBKhXSwpgx!?29Z z^{G^;5(bF+-{H@G0!DWv?Q;M6zy9bx82_mm1h~%{9GQ!3U~L1fkkvC3(hh!NJTz)h z-%Xw}-R4B*B@DsHu&vv77%dh|647Uhgs&F()zy)fOMyIFMX`H!;M+o6wbc9GSaIe8*hH+6bcx#%knG zSnjdTZy>`^jhfZX_>o`w4{H@b=)r^fDrCwg$+=+t1dRwi#2okXi_a^}Uki=tr%dj$ zzGgj+!vOt)5#xtSnWnQJs>E11F$(-bD1epu^5shsR9^>z|Lz@AI#4{Y&LX%_;28Y3 zHBmEJ^G<0An#Y|Q*QwxK;tNF-MFE8tWze4*o=`nLW5LSel!Yt{NxZly6XiR9zWnCJfpwn+JW3~u44x)< z*RilekwhuMYjE21SymSm50;_v_ZKWwF#)7!u;Z(}B<2Pvw^4mFAw+!WUo)uo=aZcL7GY z#y01*8#WriN4aq|E17pU9;^UhczQoAr9KQ~Qimc%ikK2Y{du;E6h-?kWgHJQ+Cu(# z&9Lb99ua`PEPPRb004Q0zU(Lv0nbAIs#mLGU^C^gI6pEw1v}=BS$m9H0u0}j0ipD@r%bPp0+3) z1N-+j57vZg)vO+IaY5KDJeB}C=sQxP!2AOOts2&^XW%A%(n>%CYaEn8#uExG${LAr z8y6R6z#YHw0`lQS?r43~P+$e12F4JSeds`&%azk%z(y~HMd;Ah5rf?LOZ4|~&DkDI zdkUxyjLQJP3IIPqTZ}3I&-|gRVGII@+Nm;#ol4)s2S#^+HRMlz{P8{tA8~L=fS+6g zzyk22PmvXj1NsxAIXoUM0nU|?*E^vpC@=6(zGeV?AS3dbjKH8o*~m7OYLsC-(Wo@k%CXaeZQ z7@=(PXcnzOx`tK*V| zAcx@pwgMe8cvW)?eU0~Oo;-W3uG9@0!RG*ro>$5DfQ(%jSMVezVTdA6Ay zMDY@eFPb2l1acDDUm0G~d`_Yazt*Kq&>z{x+`d`!0N^BmGxdpUwy}`~E)*G}DU<)s4#t?uVJcMxrU6Xm7b0Y8*#_J#Y!2g^tarW$4 z^S<{WI^Lh~2=8LtEi3uL4uGOh6}A4ROzJ@%0Iu*4^w`Yy51C3|MJ8lBYfpe! z=vQ9zDeKR|g@f@%+c4s?Lxnt#3Am;mNitY4KLNlqZmARXr3_>UaeJwoH-JzsvNW$` zRkTDK{@Z{32Z639+zzeP-hS^R(e70n8?|cIu>K^}PyvCltdlP&)Efp~>epNb1Poz- z(C`^+LBh3g*25vma8=CaE8<>z3Lx_^IKUs!20n^H9;;84%9Tv+QE%oX3=GH>+s%;P zkE|nE7vH)2jr(ZAL|fYe7?a@j|MCyNvz=~$=Qy+g2s3_dEhIx5siZ!W1S(e-Fi*cg z*8_66!10A=86V6)7!*#NNH!-K48p8Kn4jv^yKCW?*r7(MpmkI5&LtZk$awf2U4pTd zFMUk&EMDQP3v3>e{PpK~A)5iVr)rLR_k)jZ4Fi8*0H^OURFl%KUbQu48OiS-B4v)0 zAELBa88Hg{f+%oD7O2lY{Y;Cc(`r>NDIH~8&t5&X*vV~+gt@b4+cp&zHobZ)u2VvS zJ1a$y#Wn)>VH1lE1SU!b2`hS;GNo*S&XSiTuvh%U*O|QWG-BdzATNqank;gX@PuF+ zQbh?Yw!JceKCXoFLA?;vvGnK^@C)rn&ncEei~>I_1z7a5@L|zQLQekiPj8xX%WoF* zB%bq&a6VZO`|B*8S(Kt+`Q$yF{WC09i8Tw*82}vL38*WetzJ?i1h^Gb+au!|Yr>@sUKn z9Bf41B)~CKI)kirC6_$|oQE9s036C6?Lw)>E0688cW&RcGFYAadO|zuO7dmekMw^c zY3rZ$wC6FtqaX$zk<>f0-Qo9X-(>;dKH+TzILekxly?*iJcaO{2E0URN1-AQ7RZ2J zk>xVah7;S{p*7of0WSz+K;pej-U)tZUVq9!5sbb*QFflZ0pO@tO?l#;Z$IBr@_aJG zgxX@@;HgvovU%kK?r_Ko$|Ku*PfO`YKFNB)*DC;F3Kl9Lp-Dh>002M$Nkl40cEpgi$tU8q{&~ILZcd_ z^Fm(Bi@X7du4q2?39th`WSc4=B%uuY^z3Ge4&HR}RjXzw(Egn;ov335yQV)da6ljT z_PZaNqJ;8EnSe$;7EsPAjhXP568g>Pcs8cZR z?Wg@i9WDs0@QF2vA5Y$UjQ98hsI4nSb*Vfw>&WBV=LOI44u6Enz#zo)-Q?ZMR$G)y zKlZ4X?@OMcjqp9R4j(RxtYR(4GxVc$Zv!U?4a57~E3N|>)2;$EXHweJi)%iA+QxVO z@CpPtW7mZdS@#&D(GnicctO$^02H(VFc)5C43eM8Q~|?mFZVLFfMg{GAzy!Am&kD& zE)&l_w%8LAf>1fEXK0J38=rtzDBskVL!`<-Ed!5@Q^sr_1EGAQR5jx->IlE$+578P zU(E3u7GA}x7X#;DjbFwjo{B!^|?N?~4Q zKJtm|;8naheM0^qdq}?DX|Mkc_}xk#cI-~UvzDDLfMj*VpC07kS!5dTd0LYf?ZLAS z`3#T*4<9;oG+-GO5tf617w{FdCm;F;ppcyizFz1rc$O0$!6yTEl~-xWEkGJG-syej zTE;f{0fu@0@$XRyKlZpr8GyHd<9G{VWFg%TEMskeQ4>BQQExn-0g=MAu$$aZ{{mfn zeaN3@SwDD#ACD1Qi5SPwdFAT08D8EriRbY&1pLFuMq-}BBQ;(I0?MIn%zJ=hfV6tW zWC=!G=4;({8(!cdVs{izE;%@-Z;dN7M)!QJ@L+apEvj2_wLO7+;{KH^vrZNbenU|0W;=+f+C^@m-V9zTdLw$0sq_YW(zK~F609`-nGsCUQjs{%u?GMotEXe{Sw8^h9nvW`Z~na0jY^sy@6+m^i?=mD>m4+(i2C`m zZ=BtMHjAG{?&*L29uFjEI8d$MAD?x4 z>e>D-4UJ$YfAzDo6J){IPMa8Op`oj&vJ>Vdm&iE*!#N49s{cW4ygTew7EepP}v z&cGx2U;gH2x!LjX%30Q>bGzK!2z8t5tWZqHh38N~l+r|j$(iZ+Eu(~yDDS2S97nkc z#Cj#oXGKYRBqBr{QxmNcvNM%(QAmUz!MC&~-y?;?=3Dw#t`~tNN^eYf*BZcbp-SUt zg93k^6rePUOt|{m8YcS z*cJJvFBC`l7&V}Pyo`*45*^}uAd%*$clzG3*yqFXM?Q;s5M9QYC<-=XK}2%%#wfo2 z`dg}uw5=vsWG=mYzT~F8(!lrQuh9?+}rY7hQ5? z=DKABJF+fS24lxq=@9_`rT{^%igmi*z~xj?;$Y4F?G-JKCONX=0YUx0fPpld>iq|W0BHgt9bs5TqB%q2?_0a!Ma@_`yr`L2|NR zzwI-xdU@|1k=tJGQ1TP6b&516^)i(lk;XuO>*>en1=2P(Z5r2iN;;IjdbVH(YtGuv z+}!aQ+4OJ#b7)yoHHawWDDgQkM5L+|4rG6i?oA%`g@#x4SR=g^*ycCSec@BQjL}3~$-mzvy zrx_FHAN|@sh41j{hYM;l0th{7)R>6+7FoP_jcy;jddU?@f9W|CzjLIXtStLV?R}9e zINrx$C(^A%M{~DY)sVnrQ$T0oafX?!YJ|1-K z7;>`YL-*Z=A+tp%eiXFw4w1i7zW~v!p>4MAn~{J{%{cb&Xgud09@LEGh+zk3p+*h| z(WH1&ROmrNBPVREqe2UGG+xolB2J%*bwm#0ZL({-;Ja(CyE$bm=L>l*BGH~DI{b~- z-%R=k5pa{KuYVDZZkP_fGe)PE*;_caA)f<_@sUvqK8&Xl`}q{p*BH+TJa7}qv7{Hn9-bQ zx!=J4*&jS^&jH*^`%nYYKFD|Jm;LziE3eHIAQK{*6EH^(mJ%=tFzFiLa!OBD3fyZDPD+JGn(RsYgLpIxR%T-xpvx2aU04ejYjO(9|nAMKm8Z0s6N+lo^*<_ zsTrYgt-Q@>^+f2xe+=H#^vhV#$NO)H{e0J*cgpDLZcRHS_Ck@;a!_9uMM2fRBG;sgp+^ISr%s=d{Elxfx%}!_8;```Vi#XIoL>Qm>zk(k zWEmMGrJ2(fWQaLnr$~R{Gzs49+qZXZJubf2{ba3q7BTH#eJix|z2F26sEpbU`B8#q z3QeTf&}WhJbO|Rs?1|UjaB~Lg_zdrovAL#$SEU*IHrpzlI(7QTZ}SBR6tmLeKaA37 z4GOGi3NWA!hzR1IJ!_G1U-$hVL`2w|^TIQ~?uON458Rm>%gZm1i=)P&q_$nBT6_JD z)zgnZR85=mTJ_q*3DqYnuTibH!A4P-ZQ~`I-dB0IC=rT{BQJ!PT%tA(My}&#ia%Iy z6GKt6>Esd4*r2t$LaE{*1YpQFIm|>xBBCC0q30wvdLHOj8&!*z5FO*zS3y%IxpEe_D!PsfE z1_c@v_?!adRBiwK{IjL~W~j3@}=xiG6Av-6wwF0di2Pn(LgrNH!_NXCVGXDpzuoV$lkjNiipUhfOQVT z%yqyUK!xM#a?(-6d``wOBBaW2{T5sFNu$q^f8YQhg5l~o8o+?8m1obf^d8-sqHpbM zpT~2g>d<#774(UsF5LyApMho^atC_n(oTu!yW)C4OZ^6pqK~Mn+2QOIRoXxDAkw#t zDT@&Wt(`t$h*FR#*o;iz10xm?U_1;s^!HOgjoBR83zD93zsMJ$6-8OZj=YJEMWTUg z8BDHqynWWJIWf0uXD(LJSmw+zd(Jk{zRj=hT&m< zY9F-A=f_@%Z#Y)<-yY|45nu}3SWAxS>IZtFD`1B)z^Jg^M85#z@g9104}*x&Zhqvi zLnDzmvtt|#+4lnkV%z|;7$SY*K86>k2IJeafu;KFsJ?!S4)Z*;XQ-orVnp~JUzrb4 zZX&hZx7{{d$MtI`0D<@La$uDST8N%!aG)1{(TquisiXXOfMJQ(87Tk|!2L?GUOZ>L zNbw+osjMB5OvbLS=3UXe5*3Y?ts683>~FDoucWQD$3fjOB1hMW=vm`JcdbK*4#5NK z=QHqxHKDm*j$%Nf-#NTRZQ*?YXV0G9@;dhz&!(L_XTD_oo9oK6f?oL0*u5X$1LfPb zi^61)qtN`yLy3<7X8;I1?`SxqtbKc_7n*`sHcb8(Wh`P3JvapDDL^9zyC^{XP~?ks z0K~+9d4xP12}7fB4}N!zd3H1$IAm?$b)Vx0d}5t(L>NQLh?pPF4Gu1RNDf$YfCTeE z&KUz*x76@6Spl>lE6IV93JAY*vWO%D{@_Pz$y~laZ(bhh6@^AF2q>Tn0_6(OVNbz> z0IbsV*&O>ReNj!O_WpuQRnXeK<`92rqKkov_{2T+b6K8k4voDOAd{P3ni_yFUQ)~x zO#p}h2FI#Jh;g2nmzJ9Af%W*soJnnh59qRF52L)aoD=+2cs1VP-omSj&{`Q9lPvX{)kKSj=Xr<4ff2N0oW>?t)~jT0~-4}k3WaaPC`Yn<#tAN&GLMeFX} znsUwRpEXL(0NMua7i%=W|D0EAHC6BvI_5qQGzExq_*p~N3z=_iTNC<(XT6UdK=v3v z8DWod934M%hHW2tzVSI{o2Yy;6PP4L0q3W=_8e=5j1X`Gupx)gfc)qlvKo(@4?w#$ z*wWnLL3;uj&=m9C)U|7l)m+K14O#$3^$WYk^U;}YR9i#uKM_ga(Y#C(bh)gS%Sm)hK}lX3TSeYs z{V2^EApeaOZ*&WtXvmO3NxRgE;yw5RzuAlRg;PUtmQ)M$I`jHYtT}5!R50FU>)NBq zcCuGaU+c5*3*Mk}`l(rG=E^gAgxtVK^fxJD(2%^qV`Qe^H8LOQuU3Nj1-?H&W^C4+ zm>=?nT*ye~xUP3EdP_JdV!cc2WFCtg&xh6hM_&N299f<*a6nDZl2(T^1TSjl4z1}l zWFFq77oe%REAu1G+9tt!c-$U?|7OQ}uoh~O*3wX|o^!2V_{RLxqtJ_U&R*iVxrYXg zYI|k7nmh@Cr{v+Ffuvj(MtG6w71xcmf&J1Ld>c(3{q~^}=KK20MRN?Yi$F)p0-j z#}F88s^=cRzqS++Rg`Buiae1| zlY((wc&P|V;Iito1Qey}!i%q{hQ+bdVtjh{v;cL1%JOr*9vhdOWL>*)DOxG$`0Kf+1vyNd&kDf`6Os zTTO+r(#oq;n{?lyYSV6=SPZqJd1WxGtQuaecV||!r@a(jr-kY9E#H-&i8;qND~0!= z(Ha!^zEOZ@YW0t2SD(%PxH=+$(cQKw5zujD<2A>Z+E%?fty%r#r+-m>65eDW(FSWP z;PG|&IdWNrQZ)2{L2>N!x;VlUsW|%dOpjNI2oY_@`)-3O3Y4D&iOsA4%e?%I2;MM9 zNqEM1e>r^!9v(l@Cct68*Z!?iEeeN_^~lSs)x4^50oBIDJL+1;%01hWEk~I|K>3`P zo{}fx!QVWdt$9?xZ}Z*gPlEyt3N$FtpunFu1sGk2M()+`s@X3^jqSGU&bfCwc3Iyz zbshI~^xXd4XblQ1D+TC@-?q`Yw7xjCa{MtzE&-KYd(e;rGKzm`_kG>(L;yD051#^} z59_1SfA}N*^Bkcl=oJMjqp-j!Hu+a=9YJB~l@$OM&r#@0UK zu!EP_^5wea^;6V&qx~=`;3UL~Xx}2R90}zESYCDYw$7Jpmiq({Cdu}HUYr221@ofP@0+j1B8+gXrL>|z7cgxpmoB%jzKeG*x6a3d{?z-w zJZbTDp5^GqHhp@e(!27?-Ktgg+9fv&&-!%n(OdkuO1~}R6a1~n(&vQ%T=!KPU|QvP zVD7$gY~|O#JwLpbhsLp|H8P)%Wb!sANA^ZVMmx21Y^}9-sT%F(=FxB>0#yuORscs%OZx{W+=^~a z;EW&tTI?I|$NSgGlQMEFej81mS^xlWsd;k*6K|Bg$@h+N;*n)-p7B8(19ZH(zKIqR z1?;HgvNTTFQXFSlu3w(l*wf{5v`;(fW6y4hFF25k6Zy;DZ+~}OopV_#EJsc02rV^y z@M#>yEspGRjpOhf)6IFke7`I|rD328&w+Ud8vP9Y&!87KfG%`pW06*Yu4a83d)$`Sf7$vibT9@yF3p6r z0A#?FI7#$TJPVQN5YiNsJwv`>HmbE=fM+Lt?ES9skDOK@S=y0uAKoBG<=vkU`z<<3 zg}}M2*#});(^;Y>K}3YgFRsZytq=9G#UAMzYs9myXEr+9y)>yU@fG^Hw_lt}+>f0M~T*n;L^WQr`b38?k zcMTbCf06&&JIffzVyR5Dk!Z78UmVSC4W?Lf`iuYhv?`f%jE#3c3KlAP{8{5*}!8lVK z0O%*5T%p;D>i^REwj#c>2`!Ht%Y^=#A}%M z^UeEz|NSHKd5n%_X;K|ge96(4+THg)kN})W)#cgfHj1LiS;#4+x$eq!OZ%yaoB9FrDc3hSil2Pynar76|9NY_ z%RxIX(m^@K+ETms{)bW@C^-^ay5{SCcKKD;MS-c8(ztnb!o*7Pu|6>$a%z6v#z?s~ z3hl@ts3=*^2WE%oD@dhQo&%&9@>hzg3X>w&>>bL#2<&j_O=bd-o7yQ(w zdOHfPsm~*CacR;*y!F?c?0xK1jldqf1`E?XNSOGq3P#@?|x7>DTIs)i0 z?giHAKj)>QYokU#pLvS``%+B;_NGmro<)RnKMLB}t2is@Db^r4qp0BT&bu)ANWg%3 zf=QVt8HUH){F(Of*{`s*?w>6 zkKQj2v~_0xcHbk9J(0h+7MZV*9oe!|6z`=s;fMR;-)fQG^3lhi$al$&OqTug&wmxR zd6xi4H>!U5t8>y;M^EFDi@&*JSz*+NAALN4(ABbVCOw%RE?|vLZw&^WPv{oCKCuBP4#Tt@EY5kW8X zoEiLg+nvJ$7inK{7||K-i#g^Hd_B^gJ`nY?1PcO;rG)|>b7qc?;6eK$tVaW=|8tB( zaZ9@i&*Jly>Og9r7r@u={;k`7{c5c^9`Qzwtwx*Ho|i9)|CDFwf0wS^s-cG+SFO9= z`XQ`7OPbwt`*qdZvu7>2E_%CU?9FMBee&SN^HTa)K3CNl-O4*%n$L*qjqQihjPIL7 z=zLW=H1{^wM?xsdSKmtEllspn&x#k-H~rszw_TQer1(W?#lSDhO982EJiKip0SGpm z$fl79-@lfcja7pE`ep-f%{yOzUE}u#1sW9i^Pqq|OhK;`;@F=CJiIijGAm95U>+N% zD?a#OL8Z!jQN%?G0HY|0_O`O0Qi3UZ3SN<83dWItq9;^-C%e6iymQ}}v7r>kvlMk< z4ETOX;1U?xd3$6T63+4lKD7KrBJ>VMa_LRR0`>a7#B|j*tc2~A=z`! zUDE(i+=U_!WbrPJJj%Ocm!%-f#EFyg)Jhgl3F9lDSwGPD-TTIdG4S_)_p>FAKT%1g zQLI&9kwCyD zz$xC?B`T?_xL)5xadDKFXy$&~ZSa$lmfSbZY77lrebA?y0V`ws|1V{Y~x zAi&ugLkr&6Ap5Kjj1TW-K#Y6!)vEnE>t>;_*1*7avDXeg?x>79(yt3IzC1xV`}pjf z-`XC`kmraN8KW-@uX*$5CBG_qqrDVh{Tpwfai=use5Nmj7x47+V_wX^6>k%zR8K48 ze=dwH1vN#T6@bQEjd^ig6wPzYw|g2(96sh62sk;SfEeo>0}MFxW`y|k-pA2(>0=)y|7ty5; z3L@_p#m5x-dOY~BeSpG>ViqHn{2>R)I=oJ&L@!{pb@_VGa_qQQGI$_5xOmNcmgBd^ z$R`E4@E7B`=!5_hJPwo*dF8pH+sUF20z~N(^aY{-gW3lu!nuQ1B1wyZZ=9T>PSOEV z%v-+*cCa2>YWQsHE&Eodo_t(>{nEHs!y)ldwRO;TN`RXp)C5A93m^|3Dv@0N&Pdka zpTh6t%}X(MvdcZ@iEQD(L0fauH|X!Q2>|Qakn4D!TtjbTRe0}5r=661SNaSr799(u z0EU|@{IA(ZobpppN-;=%;Xtv^jDF$8bgXdr_`H5?qW?<)irK#u7Az-e)GnDkWlG8| zpb8qzin+lrInIzjZK58+=-`v*0!*{+I1cP9BCV~#4`Yv2q|MsOBAzie@`W5xOXb7( zsTfvkps#n5t*4)ILXMF`@2&tOw+_CsrtpCADgr3Vk9|<0iT#Zyyt~W`*)=Za_VamZ zo8z*VObMQ{zuSMzh2RyAQ1d461^R2>1wxT^1?+j6d3%b1!a`KO#ewI1yfqwQrdjlD&|7zjbYw+F2(MMw=pNz># z&ou%|FlL{Xap%Jq{|8MDJ!I$-Aot<`2mwoq$c+tq%zCy@+ONo;F0qyYSX%8==%OXH zH@pL%b5<+LSaO%sImlvByy#gRG;htCl?6SmYxqRrLqF@Azl&bOL0sRAsa#*~2e{$C zGfzJ`FC}OHaN%VMQ0^5qeo6#rc@8;&Mu$gjo>ENk#sJ*yQHqjUQ)iuVN?vX(zxefe zIR~7fCmwfnC7KtA&l%M(0;>)==z#L*1P19#){=i35OmSPPcl%7Q>4fa`<6NL_w?yA zQf{KDqNG~|-=BKY@k^fD{1-Y-_i&P){i9Qxf0evTe(kgO9!q!tV0>@XbNKO@r{&so z6W!K&CSL)eCxkwr*#|ER=hOZJ`{!E74;TN(eB;v{BM6L~qNmz>&piF4T*vqa$h+C5 zn+~i3RR3JR<8wOP&wlcw+z-gn>u#014ya9|W7^zuz0Nr{A4*6o=Hg0>CasBq3KV&rdzybR#*-!8= zN2_Ar>PQub9Ke~3uy5+q@O$r%8d5vQ?=?)$K7Hri_f}_|dP1%v{Xid}GKWO537#4G zT#nZsNRE{LxW2yCuptlD9`e$dSY;b|S$LR<; zx$Qk?pH*8g`d(xO+5AvAS^5X>d>)zGTC!HM=-X<94lN3muI(Ll;Y7^1Vi{kUP)v>4k zwAy}W4F5?re_kB%3j-6=5}q4v(m6qEMrUb$@6&hd>hz!feKmgEi`CT^pHtm_!xdGx z9-CKNZnI-7_Jw)>MjLmk)(qg+d$d(Up}_#{1IS%F3g>Pyuc1iJs;;^8-0J!({*W8!c029?`OZFg|5|IWn|=5KEf$YQKUNL_uK|#Gyfi<} z;YJ-hhq2u@4R-evy2iCujNP~z?N6Hm1onZ02Udp+Js>yqBHaG8N7d+kg8~f-e3uj; zM}SI{$>+nU7PYWLC|f|0F=0GV{MHEI>GG?tO@J66bm1jeOyPBywfq#K{>A#xQ62QQ$<*QDF5&WQ%?F z*4yr?L}vgU0KX4E@_3RAxUK)92QIzhngktJjuTrH`bDuPt4=L)g97L}|2*&JTkj0r zV}1falv#j+YxJLiZ@=WoOWK6O%b?Mp(LoP=%D%=pIdkbl7hiT&^y#sr*%MEVOd~-D z0qS=Szc>2|w0k;~Vv!uLyfUF0@$h5$dGr4;dI1cK0nvcKqvA*vO@8O_`vSafp9adU zVI+066p=NAoDsxL00Hpag*7dr?dbZBem|1gCp0 zzU0b0UYzv-0)U|VncJChWERNh*}w~PU{2qj6ZZvQyzt`K9IMkh=Az7pd2&>?06KIo zQJ=R2&!COIKl$`C*+18rZ_ftu-+TXq)rR2&nKNfj8bkWhQe&6`+R(>5S`%Ar-YbE= z+rx+|?f&RHa9k7|o&chWlDR$rJI$Ow@X(_Xq_9o`(~e;mP{2=sh%>u$;@GB2vjoRvoNqlFfr&$1L~f8-bE2DHZuVWQAr}1 zfKk`qbW7fUckm;?RlhF1^4c`|=7!v2Ji1o2+vLg9vM92#-4~Hjcvh75@OvJ}wR2PS z4Hz6EBS5(+$ulB4r9#QRN3@i_1JTgUdRqwSCl?~fB^CVmFTMr*YIyI)xKDdN04mNe zeZ1o88$!mmi?ul?`ZYD}CP2Y!K@R}llTVI}h{2~but4OOhE6wy90R7|1@qvj{8iV+ zyu=&<$AQRXAuw|6*q1Y!i~({=cgK31ojh%<_^F=W<+}Qx)(;-=^Q{2+MMwhg z$VU7J@DNovbLOmyjM6;U@2*25N1&%po0dF6{un!lCg%cBZc5CLv6J;rJ@s7jK7P`F zfFE8ffiq;cNMP%etR}PUP3Qgo;z%hpF{2Z&4S57?B!?8jMw1uEz7!{99!R+j6ni=3 z7e~&Bc;`I@dE6#cq2=8F7ot<}$qv08VWY=sA;;1g{+Gy0+^ zxn^E&2|hv>a)Hd}%(yIQy?UF~YWqdVGEP!pr+%9kdIEWd53UUUl^%tRAqT7jfiVD~ zk>OfmwDlQ zy)gE5^!npxpH>$|k#uvS59gkLQ36KhK#_C2Va+a?i{K9dI(zTAdpOVgXaDo%t^9{P zjOj{#B2T5HAiv%Z`I7rwoHpSY5+TkBuce%{?-Q{WRWxf~K{)r=C(MKP{PSZI9HrY_ z5hr8p0oMMdmt7Nlxmu28LeQLEwY(a>EzQ~;9JK+g9Zn8`0fkn6a&+U1mxCW&Givk; zxyNx>1nVT$S~{Eep=s*>C<=?T~zb;JMYX5c|1Fu19Q^h;dA|RLYe%+x4>&on$qZ& z_0iVeFA9720DbkZG|%5>uibNw>5BKpX#~zw`xX$KLxO{q?z8ibJLDb)RJLBpW^38} zX^+HOkuqbez%vmt|;^8{W6kV`ekrs%)V9!o%F_Y2rF=lG6OlFjg&0MhOGXrVpu(8KAx@_iXc ze(@ds=R1p7ULND6L^7E0t6m!OTt?*Xu*;rR#{h?S+h_l3^2ArG!3Q0g zpy!$q0d(^nB|X=mSE%R$P<1P=?~UUW*!ySJ$TQp z)sRDvt-5yanH!R5#k- z*s$7r;E?Ky3x1W0eAuz4SCc1=ueRQ9mx$zOs`iMnJ^Ik_YS@t{RU3EglyrD?+?eX_ zTd%41JMi$T=jL0+I~P`W+;C-V;L}r(?6dzt8KHc`m465zT@KwpRuf+tn+&>1=dKCH z1E(j%XZjDE2Vjei8X0tW`2IVq!;U$%dNZE)@O^j0JGP2`3`%;q)&gr2bF$`I;gPyN z4EiY(t6|5T9tv>#py8?!75-@T)FW}^HI%tV`_rXBOULW}bVt+Zd4mEC3VhcTpd`%- zMU=r{U!4&~`F;cT&TdgSGXgCXN0FGKB!G_HyESEmhKm4a)K3aK=hwi+_ljz@moo}z z$|4Eb0l*#kNJG=k=npb&;J*7L0O|dJ70RuDqVpVS7MZYDMAS(Iz-aL{!K{TfRYVJGe$Y|=r8~QiY4Vx6xq-rgYrIx0cDYKA?IXK zvOQzNh>)WIi?CyuIWBj|K?f!PENV1?o_LCT0JuOWpzt2M?UIp{Jt6|@fdF21-DRhI zcD``&e?0%xla9+VJ{d*}<6=Pny{diVAEo`6qYlp~Ebn#K)4?yyahzb*ZKA``e`9?VqlimTAzW3g|baL;r_wK3Vxxjr4GIRyrGOhqEjv`9q z|4X_ZPMsWw80*Zhr!=f4?w* zJfI=a{_w+wx-FZrO4A@34o_*KEjNle>e9J$M(dcX)k4ofGyGwE#Sn142Ux-T=fvbCEqj4Iqc3v_K2>+7(HbSsVQkUs3M{^G3sNCY(FOe7H_ zPSh6=AHavdIE+Lwiasp?9=><|z6173P_dSn=?(6C1(PFM!(23a!M4fLXaF4BDeO8XhBV+lrf0z=H&S-ofy62^uZg| zp+gVM>j7%kF{h3B;w0%2vRX7Jr^Jv0_s{i5elebbg8E^d?LTlpL|HwSV2t?%O!Vp9 zBj?)t3y|dZmKqyEw5cdZzy=UeWE#NL(P78q`)=MR9RmaQ*(;BGi_GTK(VyPEdL~$G z^^$LU2Ut<&=Yqv20nmK*>;O<>4T$Unl!#K~&^hApgR@(}<<}!3IoLGjD%MswkT~V6 zRT0&jhvUb-FnG{_q&q$WYNJ%0^;=X?_x5LKX{0-)JA|Pd1Zj}&1_|kAK#?v%y1Nl6 zX_U^PySs;>hUVpYzSr}^`yZTZpL6!wd#(Ha+=v-^J*t%(0#_&`DT8e}KpQ~I1C&rB zrmm#AkBnrB7PuzxN*e46^g)QQN;ivt8@VsWCb!;%MrM_uB%bdK8iRRmnv$zn{OTxQFFcY#lIKI@EJ82Qe& zCN@b%C7JuKB=B+aAJX<%CE8ZU%>su+>Ns-V2Ny+d7nl*CM-(+XWsXjiEvp31DehTE zGr!$b*K~-YYF<@mbK(wD9eDDN*ZKsuEPV%X3H;hzL?){?IoJ*33-(YtBi~^`rCpp6 znaepC#+qBFQTvuqOhFAE`>oK0hfT&muh~E6>1Q7-_)>G$#Pv8FVuJ-}J|w(ta{h}|6DsotjVB z!zg&Fy9ar0IXbFD$wnBBw@rSUBB=u1hub&qrObgL+^lZ%VmD$9DHyHpC+=AvJW&49 z_cV$7ypcdx^<|}yy=gkNP-Bh74__neRRUxbf>lEH)^vQX3X!EQ6B3mjKch0yp)Z_h zBkqR^D8#voPI1U;xmQtwP7-EnLD6GLjTM`g?|VPswNx)+82Af{ft?#&UOMpe_Pbrk zfmt5TX7^GuDEn*b{fRh_anF}bv1jJ@58>-%W@qxVrcb6Xd~W%p)j0uIAxDV-iI6Ts zXL72c@Uu4n@1&!2CVJcDnW0(n2druoO!1=DN1U#zn+16HQ414wxy{E+BT7%r+K*0k zkY^cpshmsbi}q`W0dq(Xj0E`ZOq_|eahHgCrexLtE)zbv zgD&8+4MX^qSO}6S1GiI`FNMN~qg`Xma5NRN@ht!{H$i{Mr>xQ=S@vi za)rxCoMJUTMLD*9vNZK+A|u>jm%QCP7ywI!_wt0qR$d0dB>0AJ z2ZA4hb@5Gtc7{mnjRD`u70i^{L=oIuH{>Z6^73)68=>_Tkuy_<~<3oAk}s{lE>x z#n`)=%-Wh9zsJ80>VWfb3QsrB7h}O)lHj|pXGd|2Zgyg?LV;J2k>vlWjntXVa8`w5 z^6=woDNhSOkLW9Cbe+lH;d&1Tel*8^AO+`9^xa@eewPR0lNuUiMtDtu`FuZ%6-=}{ zUW$upEtYs7rhp|1l2wH_(^lM3PX*0B$V&Up5eN5cJg8U6F_=(KNAX?9M=MOmW1$=N3HXG= zc~73*kio;QoZ;TqFMx>$=F~()DBoC6Ij{aDKrI;V2prd?IB7$NeS-@pa`7V^o?XrDvW=$V8yij zC_O-!qc&i!K18^}v^S3@P2;K26lhA8XK4T^%7BKjzUu(`k)?WIYKj9im1OWOt$d=G zD}dqxCT3NK;SU1#6zF0G890e?x5$!!6RWGpPJ0ep-XM{^GIM()-%d2YeyW6un92R! z>>#e(W37BOOz)vIBSSS}=8WeJ9lXr5qGuyw+=|s70MrSnl;G2X z?-%eqIr}g*ImP=LU(1b*fvj~O>I79DK}VH}h+De(5`k{q8!DBcdD7Z06GM8Kktzek z!MT@L8z@%{lm_9%5Q;q_eY`h*AqfbJ+oh5SEQ#-|CEaU$;3e~bg;B5_=x8R)teYO> zI5OoFtLM*gUODi}BApH~Q4(vYL2Rf_IPR}h3x9VqB8Mj{@;zPQtUg}0eMx5ghn+5~ z&NJR&NKopF5(Jn%+GTm(?@m-BIvJ((EQ@?}~g%ovJh-BODC z@V)UlkyMj0#`nwTP=P7r0M1ei<8SSp@Km0emn*97<1Yh%-~t~VFt7$y2=EEK;}bT@ zM^x@~B^ZB?x^c{hE$fIak?euFR(E6I_{xSGC<#R6&wXo8oaG_O1yHir{OiLt5Hmw> zo8=`<_PFb>%6!2kMIQIv=X>C0IiOsKthfM?m1VR#AGl=iGt+nw)-&YiQMVS=zF?gi zRF{G{80R=4Ii1_ib^C*UxRthaFjKt4&pP;A!JdMP46MWkg-lbxY(x(A-d(Pkh-SA|3DC+VNc$mLxO(bn~tC5Y_J5R~)je zNeCctoXMULJ@8x;)VIBKJr`}^T&L!+XC!0mIOb!5rLJpbmyV$diOH!l&X{k$%GLV- zJUh#lOa}o2lCtMzul&~)6&7q7XZaMWyjiRm(MbVpKM_iY$z3{0)gt_qr0B6#+_Ww! z9_pqA-DsxkK1Bw(8|9;B%!vq9lVZgyVQH?PB;6Rofu{J9rU4;cu;9zRrF)y;O}%L~ zAPVW5_S?`^3sYJ6*PbsX7dYF97m)U6|4<;TF=RwQa8 z+_GWC!{Qqn^+|NA7jre9yELFL<}chZ9C`M*S60hc)4)tQcV|mzk|gT zp2V;;suzBrh-3UwBv1bbEyW ziQa6Z&7pC1r_Ilw4XX0pq}}Y8uwgItvK8X%XybVn{HQg{0$$7sY^uU0^OAmRFaySN zmSQfX6!DB4T+g31?>Yt}g}8t# zzR(Wx%*D2HW*;>5R~ud_idFzgH_UQ21gKd{mKg^BxtINI=-Flt7@zcb`8i@-BtFY+&aZTzxLgsRlabfHIkM+L2D`x@NY~7oL z!ozF4#dhX3LFbc$qiR5|;PDz;{0&iY5lLg6ZQmbaZLO{B-2VQTfAwlQZBVf?KU-A_ zeLwq;o^z&8GVI?LXU`)_yl~X~{{K?S%>=-l6g$DXW9k_m5lhIYLD$!=p^th#TdQU% z6bT_C5S4FbE}??mQF^Z@4U_hKb6c-hh>s!i<0EJ@{zpQnqVxvecyoc(n%c+JTviq& zUJ+@Bdo4$8J~2Zl?ogf`0Cj($nP3hYdj?`HiB2$L(X9iumNEZaq^mPraJC}#U#`UdL4$XG>J^8Ql5Opfdu zh3$8(ikK_zPnO)goI49CH-#y0X*AyL_n zIIcJ!tJSBpMJZ6Un>N>R*T3ud@+co;KFTcUQ)F6m4nX6;DhM60dEmy){J0R$fY^M?-?eTG5x^k73l@WYuyphX^5`qUtQ~?bAzl{bm z(s#;9MGdYCs%j3(bgnin?<`ycg~H&J#l%wK>qA|$%X0t$Ji94Y;6X_C-cR@PcWVF# zp;a(r8W8a9eZk5J`3-&IOgE|HdrC@L+Xtjub5$YUNhD^3iKg%fZ80IY0fdKY)3B_2 zsIdrMC`xhU)&My`;<%$q#f-fZ_ECk5L<1_>RvH=)(22`LWFIn3bgSX&j_?=7IbR4c z0jFkq9sbz%#9GY%Aa(w*0fg?2&bqDksvVlxY>Y%xplKtgIs;nH>K z*7)Uww1($>96s;RT2+1}+S~}DECO%z?<>-r2A3m5-yde)=TxBRRDsLSapyq~L zznZNClB?}pm>G(Z^?gJgT4#!f+sR+M)+3U1!OGn=aFJ{}j@j21-sNf!v_)b!zV6sE zzj_0BpCbu+c(kM)Q5D(!wjwk0$8Igg+^@>kA6sneCk$URC5d{MAoChUyMZfV`bIjh zGVp1VB>FiqbxBK2EYtDNOw)O~Cy3S~KNm&4yv4hhKEBuzi^G&uLL3qMa^zNRN_1~d zBwJ`1M6u12_fZ4*`CaqVbkzq)&%im`aZb;dmyL%GOR+Y!vzre|jQbxDJ$My-Moms# zgz>|XNM*1|a{Cj_jPKgBO3r<26P)htx;DAj{AM>bPOf2n6%4qqwr?itu3}v;^ zbu7ML{!DsY6gYReK!ZSYQ1$%tz4+XUl9Vp*VEgpXL!fFANRF{AbaV&l$oD{smUuoU zINo;nr&L{Y;!wZ6ityjujq8Rt&Sx#?zjQRC|#hcUJ2Am6A|1>#^cl z_+z0$szcDP+uEpi#hW6&4cT*bT;%moWj;a816RzUmXB)c$tzT{kfhX%M;uro8{Lamka#oTXb> zoQb&euJ#TxDQGk0z;sE60#2>>!@SK3AA@H2;&s~21i0yyO;JJ|IiU<+ESP+?tschP7k(37$sER){lx-@S)zp07~G`Et~hNgWK6X}MXdaZQ$T_iqKAm>jwO}osGri-!^ zeD!y#^SoY=X?zT8Q#itSx;Tl;7Oc)8`C=-*U5HFA+i+>k^PE~ite`M^254+vX(AfB z8dips0;Yqv^YV`8*(^;5%XVyY0~i3;0u?1^9hJnn)cQ{3&`-VRU+6?UTi$K@9$jBjS*L&o^GI&kXn^w{Ljn&z~QmPtR z>*xY1?t=-RXL^=DSBGtONE1L*3fvrabmRXW7}h1w6SQvrSUYig&Q!@lIgSI@cUt3# zxI`MY>Yn=Tu2&&5f{2_Rx4JALz+O&@CzK^LZU!jRHwj|o zR48Sxt}$*6plxkdU!saaAw|ZsL^43gC5?|!Jd^;0Q(R%9YWT-Ew5(CIAXTw+qW(!h zBqPx(@MT_?q#O7lcg@X8*q$%x?cy*Tfj_`aih+)C$V9U{sgSE=86GlhhG-M%Ba0u^ z$xkAw_`0D<3j&a3ifjQSn0krZ7qY^HjK9B!vQyJ?tMD+tWVCvzxGM6;1b3TX9=F5* zz~q(?vZL2?)^!$K#swH9dVS?y?y5Bi#Fu2XOm*J*t4O?oc7BX^7bP(<79e)M(W4xb zuF6xQiB>TxclRb)eE}KmJL)-AMpHabGz0H^fu7vN7ZQ)?K{c8SE%TFj|GQnJ`biaM z4QO>diDeq=r*B-Q=s^Oh1?eOX^`Y@{QoMeE^%x8=2RQUgK9^m*_*|r8h=pV^wmCb3 z{b*91XS{Fs^u@3NaVY78MbN}Bi?}2{{b@d4JQBA$-+4QtI(@amX{YX#{q#(OeW-lF z#(l2{e_rb`X-q-q{#Z01fm7@yZ&uVn31;p@md}g5lWs<)4ocnt z`59kJq@T+xr zy~4TmQ4wpZh_x3{mDCtU^k*@)rh%tk-7r9@I$xzWr*H#v7u%f@$%kypt0Pr4% zS>AKbQK3$G;ayvg&09HZU8F=bG9f%NSqhEDya~?WlS~kkLlQ+r4NqDb(<+518f?F7 zcZnk~;8(qfUg52sQY8@oXL?Z%j|`O2wwYo8*aMhAVYVlH^z@pOEQE(Pqoo~T^uWAA zi3=ck{9_*-ycMO)oMV&v(f+y0K2PPc-yF!VU}%<5rgQwN?sr?FAF>hM%FgWbE|}TP z)@6Xb%C?7+Wcyiv%CR)gIO`GaQ-e7Fxxf`45RCdO zZ>N{egC3=C^ttSex6_+ulkKP7SI}LCm$9nebpejUpbDaodV^=WKWyc0mXn5%wx>tS zgQg({4ggmsn;0pqH;x%vbqxWg?V0$c{15dlso^&&4@LpN1x-<6G-lhjWLa>3R+3(u zkFLadL)P)$=7h}mUaDr3^P|!?dHSfgfU>Md5`R8d)92v%L@o~ketu_3GP5r)Pxqzl z6A~BLu5Wx8-A`>_t9UY`PxqNIX)@axrZfmRUW;USP;eaUxM0pycyv@P1^{~7ZwqE@ zYD+|c@0H%zKy^0sa@>yp4Z#ZIh1hplK~7vhQ3jXTu&5VmLt-)_EFUEy4c@`O52hXT z25lawGem}F>8%!pk883;zv;#0&r)U`$92dj};c&#SD-!*4QL zmKHI)xD;?-fSBOl74oo?v*AL+PWIl#CrSKcS1Dp*SU827*%3yT8$FdT`!$&(O1JZv zs|g@{66e5w@Gq(je=Dp2V>LollKk>r7~V5s@&=`NQs}=%RWTt#^_{3^5D)*BdF#}l zUvfpALi__V!9qR|?S z6)Yj}4)R{n=w8KA{8dA+J_(_SrLbUYt)8hhm2liPw8Pu2KRTMV$%JZjfOf+G;q))& zB!bFLbrUQpnKw%;X#8CnVjOX#{bB^k$rNMG{X3{wBArXVkU;#$9pKSosf*_#G&tR! zBQ91OAHL!%LzJ}4J*6QkPRA;H))*XZ`RJ%tGtwx3h;eDU%~{br`~Vf>YV)^=*V z>T%sSI|Jx=5!MWdiEf|#wh`BMre*9g-c?fP`Diauc@}+eP@cr7J&<*ugyc*dAS6N8 zoJsf82TG*c83p{47>=;Sn_t`_m6|x3uv9H?I&L=H(?A*aKAtS~J6Kz;)HU_X7k;RH zalBs6eX-n8&q?Y2?Lowa#L@bBj^pQWbP&9DHb^G?^^gVPcH@*F=)-KrTBqq`8@NO$>(wavgbI#>SE$Wmj2o~*d zz5x-FTfbK(=dx4JlL|pW?nFSI5{i5>*Ec+{e#6Z3R#!Vygo|!VI^;7kp5eMzA$iqK zumI)fq2rU-YyS@=glKX#Qe%dWmX4>Fd+t+@zSqIcuP*hx4~`J$)61#aUD(-0 z)t-c5q5jkUJ(HhyL!yP}$Wm2e?Ur6eu&pChFU8TI6<#^P-TIU}=cx?2TAV*sTU$m5 z>>Ro@IJR`m4JKW;rZ!AaslKjjgp53Np&Ltd?MGiU1Uy?qS?4)UnR@=5sM!InI*yje zD|!$B$8Y11uzp=nM3h0@WRbd&?EaNAxy2&p`|{sUt?8_rLf@`3c>>hS1WMH%FSTB( z?!BA50-pp-Z~Vnnj%uAwvv)Hd*K8I(%RK&m7=8*0%6^`Q6N6E;UrklNzYFY?G-TRL~!O1oiAMPB|g9}h6QZH*|<2gsht}oHj zcDl7^R5}m+R?D9CIVNkKLD%z5H!Y3^eyT0r_VAyMpJpJtlc}|>T{UHOfk|+7Hsh4t z*14Ly-;I+?fu`?k=6q@!AzkDCox@_)hfAjK<5D_bSfNgbK}??D1y#nXgPRUu%9}17 zgou7HrQkB7yS?AKoDwAVvG@J0fl^%OW?dFF_`K{-b4pYXPg3)~ zY$FVi?>oFd8pId<1oQYz0LqKU#(ms#Q{Pnr} zv5vXKj-K(tgXuJX6`^?Ii+9L()~7K$u&HA#ChBQdS+;)l2O@t18^EZ@eO?WQ{0q^H zYA5#1HjNxS^?BU#_8fVBz*PBU5VE1*-f0gQ8Dp8cZTs(EL1Hv+`V|P1{?|>Ty1s2%Zv9pQc^)wmIX^Ot;r?ssA}h}iH|zwo0nd`Lymv)ao$ z@Da|x!Y-xG`TEqWcR4aJ)-b4prTa(A#sEe{gG=n~>R`2?$yc8B)?MK zg#uE#P$tQmAM=yBvWKz9){+s} zsc-lzh5Tp>@Et@hFD}w4b2%qvs>ujGBTGYnH1};zxu2X8G4Pl8tY}EZUmjcw|C@`B zqSJW^dbGBO$|(4ZPu0Lg=k3SV6RDrmpKSH*=d#!lkcBp%DV8ow1Fy9)z9U!FbOh~J zsI-;2VH-QmaX$}Gk5>|n1~+Gb>^*|ozRXwCvBGLUUESC@6F<7cpqE@bv;JCS}EQ4r29&<>8W$ucQ}gq>(Va;c*$s+FI)_6i;mjP1^036>oOq2 z&dC+<_u2~$;JW}1H&^}A>u_G13RHfG(J&q{evu-IZ+i&|=gU3$z(lcHFd1;TtE4b3ZDUVFNX#m3#l4%IZeDBP$Wy>4X}Y;eU2Qn&JM8>|d?%}Ej7 zJ1{p*3nzDO=eV>T34hYbM98d_7x$7QOI6UCfVVEhs|wu=4tg4}xqf;v^7Z0s-HGa^ zKx)*{caiKg^F&N3ZrT4%?lOi@WBLwR{?fK`KTomzU))qDW}Jm(F%DE7k1wp}O4<19 ztV~xqBsNfiz&^=suP~m-YCITOrZ!q!B?8T^Wx^cuqA}xg&I&EPu&nY){U{-4wM_xo z^~5H3KmOA5u7$W&S7~%RUWC`3l&Yje~>KE{V|Om2Liu;7*?#GD^!3xKoZmrf~Lp3i_RR@lScI8 z+<4u6c6d`1GEDNuQ9vti71?5!T_7DaJCB@oYG*{3SK2#n!3>wI7?vxdZZFVgmzOM@ zmUtHo12&WcN<%qSJBZxz@)<==sl=daBmH2f9|d~a$LBnrbnA6-*YhCXSfjoBheGCF z=7BDwRW}gEaPoHNC+3=AP(t&qLTPS8@8m(tT;$47Wq*6Qe|}uVKmS*^hbM|Ct1Fh3 zpg1VhCGv?ebMdCnicSmC;d2wDjCiY@0@!{ z8&+d^{ulZm!4`qk3b4+fpPnIjJ!4cb zrY9zpcZ2I`;_ryAn}sOXd4I|ZD@!4;3zo<`{%<3*Q#aFR$va5<2kN%!ui0{JUh&iQ zoQfPM+WMII2{}W0QBzfRxY0r(CV7g0$wG4WtIe5?k#b1+{UDK2N5=@v$d?}Vq+XZE zOpEy=4<3kS7gfinsMELh;bM(>NhViAvaqvUs8*6>7e12FUMP8T??{T%Z;YO-@x3FS zcK->Jq)WNFm|OX>-^`zDN}t7bu$viPh%AG&Dpq^9-^Z*&Ae&z^MWTaV%q%^%BFPE? zjQi_~4VKsL;r-bc(NOSScQ-9!jjWhocFOGT_<{%r_6$(E%aQ=6Q)8ANBpzL*LX%^f zr_ST*k|Cq>x3F3r09T)(I67h_|Kld9_2=TQ`|sm98vR8i1xbhpTH==!eShX+jAqbF z{si~Zt62fdLo|vXV1tQ=OJBcZE4j8j7n$UH`+6THNjv(qcLa5Y@pSr>eA)}q0=t)= zOLQWFQyr^{1?X4FCi3pmj4Y}4WyvTuJ~RXDfZjP{pistLvH-LM=E-Jp?`*gs6WLup zvsPf7TduF*zJgwb%`0mUqZQQA*xb%`T)TjlWj$T}CEbP1;0z%>J!0%{&F11_=xE<}W9 zZb1$xGh@}#e!0E3g8-FW@u!{mp`_b#A@S!Oo5Tx zQIBBzUzgmg-#t3jH|gS65fQ(x-1phq>w9n4B?M9&GGQTKtX!Z6fxb?{xIt6A9%7^K zmkjvjbicI;K@eMY%SVpfWqN>SRQ}JspauiB8x}y(onS2mHF~*yr>>;udP1pzSnX}w zDDfS;6Ow^qp#?QV(vvnrRfBXY*D%cN55VtyknD7Ba6kF@IG7a^^P48%^X5Obqb`FB zk!&g24*WO~R`CaRbTjePOYcur#$!hQsObi#%QRgvFL{D@R>r9|qu2hO5Ews5GDnC- zolM`%gwRMJm#oEPC%fzEjFQaY&?OKtE~&o%$N1#!#p)mD7dw(SNKKP>K>Ai zm+Mota!@MuQb%d7pLA$1I)XQ}Q~&Ji4I(I)FbYw4x=TEwp~z?d)-pcAvw~#Jw&jL^ zu;Xcb^Ml%DTHfb&x%~HGNWp$Lhl?+nUtJVr@ur_pvC)iSAqLR{7D!Bv_>@h~!%W31&oBlmeSf3c zqfa>1U#Gm;E5y&f{V`HgF^)E&yV?B8hpcdFUS*AX8)WqK9ICtx9n+k5irR7tm(RC8 z-hKtw4MJk``BjO-2>)XoT^XrqIV)k`DlI#>28J#nR$&Pz)6I43wR?Yf4S33{56N?5BjsgYi&R+ck<#3r{Hp1^;28JjNoHO8YDZkIb0QNPCqYmm#+!I` z(kLzt46sZp&6<|Hd?=fQpt_)rS*(9@UE~`Qa?{d~Ne2*UioS#@SJXp9Ij)Uc%25Fm#q4#-@rK%vMhG=0-_Bj2CmcZhzNCcZyalt zHV$wcNAnV0fxNCVeOid;6IOFcK7)frB{$W*LYOn*o>(-!hY86<_(1*p)2S9ep=86^ zei08n2`o09){wSm;5(9jR;y?_ttb6!Cl%S%0&bK;E-r8?JzaHE zJy~ey25k)`zRA%1Y{T()ym`i0?f z>m^UZH33#sZsihi3&`c|KJSAKU@B9sTU@SbkW|=Sy#4A6U-eQwxA?hX%HR4bNVv!$ z$(4?CTV;fVOJ#TWg;OJsVUNI9NojhDhP2$q+Q|WQ+aI_b7N~ND@>sol@j= z;m*ctiV5uy@`w0hZMu&xJcnz5%C?dzmvz^Mn2XTM^fSHZTG=ffFc|# zeTL`0a)HRVNo7Uk%f(Ji&^`sQNR+VqTVp;+Jaf50BfOM&q||FRaZ{GYzdha@V}r0y z@M3XN{}vlOAqMaYJJ-$%76@9y$Fp}t`Gr-bK00oIpa*z}3ERX%0-&!2?TfX18vH|x zdZz1%b}nT)#-{%FkD=o&MP5hHC@Pf`emB|1;bNLU7$EGl=zWN?M{eR zuZCZ|$yAZEUxA@3I0FLV{U6@qCBfx)xbhgzlSq2r^NHiNnWNyy=hJ zEe1C}uqbE0UF4dZb!x^@Qy{#vF&X?6aBRP(?1;ajk$75sJ(W+!OtJa=cjYFU$$c6(b=jFUt;u)iGI^NH-xy?bB*#B2jVd7*zwZp?{xZEGn>X93u&8xiLV2{W1=4xh?y7Y$_RxlZA ziw@$gMD=}d8k~GVVm?+;(+|Lnp|&^;sHV4!^^Wi@f)lJULXYN4)&om?)jI0CZEt+$ zZ*@EC#}CnR4yi%6m8QA6DzO~_{~VJvskdkHdahP2E*GNbR9d!nu9euhD&`FQ$5x;) z&*i+`f`pb@NDk@K8vC5aRo_0XsoQZryB)E2?a>+;c%~N^*%k!F$N6yyOD8`n=mD~ds6+W=d zWhYc({}E$)sMQiMR>@HUJFdGCT@ETwx6KpofQIpKA)hZw0M44-aexHPGk{dES@-+W zP#dbO1y*ot`weZc+8p?t1w_w8SE z2gqT~E7SBh#WL7rnkwn>eO+%K|g)a^9ZBG1BJi>)sV+I4R{ zs?RZ%p7h3eZ#+=qYM)AZ?wcKa4|4JGLYn^(CgsRfwLo$oL-gu_67hiHR5XjHWrKtD zO>gcl*dIWoV{asJN>Qf?k(52K(;c&)Czgp@P7O&otQmG@cm?rwzz2T6eAB5X{``^( z;mQYi8U1-3$C=AgF5r?^|EEj(A113hID_%W5u{pUtpv&EVj@CeIsz#of(US=*~C&6 zclKcjkk@gSB2r;2lZZM8Fb1T7v7;D^<6r@9vLc9FvhG(0lN^P2C^zeDKhJFueDXi? z2?Npr%uocRc__wfRGBSGxi^rPWG&`I<~voIS^R#4I^N>8&wdIXEiYriFXkVZSn}68 z^J{4X8(yn&Un(MgM1Od{zJ_sPaX|4lkrBE5t!FtGT`oy?T+$8pu3iIE;b%Rt61{?W zY9b#UKIODKLj#o_(JBM_x5<6q{+OBq8H!`81fF&%RZy@A6PfM~A>vtorVB>l(Jybb{wmUAOu)qp2?tOFwDS+#j<43R!rg+}Un*V8v89L2riXpV@d5cM6 zxNw3lWfFhkw=T&S|C2gpvY&?G^&9s>Z^sg@UW2^j%g05xlVjWv-8RzKfQ&p2q&ca^ zUsOV^{ZH%s5#FN*i;+As6hzncM@XC|<4>UhVz9gRpOMrE{6rlV@8fB-N8E^pn_&wd!uOTU4)(Ze@Im*8%U9H6q@Nr>% zbzJ*dqNI85uZg_VKGOKzZ)tRcp)LC%0Qpy_JN}sGD+Qxuvw7|Ql-{8_Sl&dOVA7nc zHw%6^%?2oooK+ha7CY$l3zaJ#4{t<3Vm-9*^MIx#n#6pb9H0xSavCtAtQK%?M-)9G zr@{W}dLJWLQTY!x$#lZiZ8 zx&S5ex+3!0tP?UjOrQ{ev61SLRh~B6hL( z3ctS{$;~1?#P?FfZBPa;!dKvu^5q4H8#yNcM#EYcEe}eY8_2MXqII*b}ywu1jBRd<5^1)Cp+!nL&#|hlIKVA5skX%LIV!%{7pxr@jxS z4{?Fy;BUIBVt2R6S_Pu8G|$jy3GvG-A9%qL4y|n#fgQS^UU*n=75QWqfMOgU%6Kev z3vd%uu(AOPg*+6PyPIr_J@l`kBt*?&fL|9o56iR?i#Kfl*^3u3IUt1-4PnbQ~S zUuFwA{ST$Gpict(*??uw+Gxth3eZ_lH5nH;{sHlkDBrkJ%usld<>5e!>`>Wec1kz zFBn4s5}tl53hU)dk#>UM3FcOEBCDn3qxy{`gm! zPlog9fh#E0Uz9A#5Cb71mw+ z?)3Zhz|gHT)OS*!r9{EZlIyp@LA@IZ$cJ@7})?{^Q}g+_B1A z3UlYD&52dM7+Dz$jTGB9-SI&v-7nD3lS4Z|-fj$=sth(r_3u>HGeUcYU?4%DsR60- zT_$EDr=N$T(rW73W9`dx<_yM)LTR^*PfthjY)I{ zBN%51+L8C{0{kZ5m>$(HK#|@L#zAp;YiK3ypLXU%i$J!Ip zugMnDwK%r0OD?P4jypeY4_dtS9m~L%SVZs`$O6hl5859U3$Mlp^Z_;cA7viysu4#_ z!_BZH?~c{0zd(4kXprvysS6Py{~G{ zfGEBmw0{bC+7faG7|_`mmGT70H8;%2t~j;q?!6HWpy-bAJ(?-EWX;+=;E=JZuQArL z&*rsukpIga;CNauTEY7E$0WXtN>3&oo90`^r zztD#Et~O^|D4Um#n(lRVP>HSZ%3+Z3M@aUvn%cT~Yip}p%jZ;gFA&p@Ay6bks4VW= zC`INUXMXdqsV&-IJd%%k%S2Pb&+a#i56chVo=#nYqrW-C_KpaNN0|M?;2TjY=ewc0 zajVsnOqLqH2p!ufD;2hepNYvgNF7M7@c@vSQtVKV-YSx${3z($doa`A5YoZou@fob zT2J_Zc|r2XW!O0tMDiz`8wc+`IX%?_1-IrAe4{Lj~zmeaOkM>zxjr~q8 zWJnUV;O!P+u-rH*saB!vNMJ=fgT`El0Z|Q>_UuR89sQT`>0|EYBMB?le5{7W++)~h zLH2u0A=hdopI?69n}JIrx-{zoT$hh432xV9A2sFhdJzx><1GInY(+t7`f28wndYTh z%GsBzDXxr9fa=hK?t7S8koh+hStMT`X4`V!UWxZi3@A?v7Tk3*1%da6vY7kD#x!HJ zzi39&KhjLz;C3*>WOjTG3~W4+q6VatkS1MPoQKE-Xq6Zhjo;!EB>xoe_6;R4BM8{@ zo(Q*(_sHhwmiyzppVMI8;?UgeG}67Sf?_BpDUN)qm51K$B>ATC>gG zdV!(-Se`tF;aX`cUL#dnBU`iRGEj^wjO3`VSK_J#r|G?08G1!YL}g}teA6<4s>`{` zfeAmf8}K1nTbn)7NgoVUm$D;^Gi1VJn2Y1pyhG`rnQv)>F__c1<%E+J~=$T zqZcpir|^$+`SLGYVii=n>~%)qQ7L^D@-6cSP z;Ly0cI|PSdfk3dvJ-E9|<4$mQ5-hkAAVA{{jYBTq`Tl>Ld!F{&+GFiC_NuBmYt90k z|9ISB_%c(`lXV(=bmoH2xT#Tn>tDVmDfU|QJ_L=JDN=Kl3S8CXM+9-p*Ifv18=gwL z%Laq({iuSe`7v+I^B+`n+Vm6{jOX*kmHRvAk=0!D%8wnP72 zR+^pmge#EupRW9;$iSIx|G<5PoULjr>$8Zsr3*0cgXG36BU`sR?R8q8`f$NIRn@YOo+C}yYEk;NA0Dw>k4QTyHF{AXH*7p)uZ)8RdE>2Zc z+Cu7(2SmGv>EVDshN@wOFqU#VKi7K%TE3*;5s13WJM`I#*o1G`XpJ!q-SiHKF?^*A zb8ow&?6DpHF5~mCyGrP?I`o8yt>>RNke0@h!lc$<_4)z~C}XE;Tk{D0R>_*ebmZwd z%Mp;NGKf%K+iH3?pfv4$#&cz^qhsN7h3%!NlHTwq)($iJ3Eiys*L$VOzNeyEfL(uEz)P2SrGjTeS@#4&4 zv?no)$}3CNcm)QC3L(S?(YuAy&aU}_RDG{P#*;60M&8?FaZsZ|;U6ZH`GBQpoj;wn zLT2$+BB?upE1PDcv`)9xQY^XI0zdLNvcHSJ)Fk-B<6Qw$d!qdw2N6-@;+3@G#LZ9 zh?-H3c%dYsv7|py7|>uALfpz;p*&Dg^nW5O(wF2m$WyqQT}7jzCJ_Lc10o!3oU(2i z=_ZS7i2#gg(tC}z%V4i;%kMn#@b3|MQkTWdlhxT1(h~+y_YsB>7zC9QSOvJYPp5ol z(pHFnwpD$UOC-7cU?>3!xTy$q%4x*f5j~|=1HWAw0C5m=>bS+MPhr&>s=va!wFGyG zbbvR{&P&OK{}A#F$F{A;Xi!)%OO?`X1xD~7bAQkohLIl=6cdjD;lK(9lNO+;Y~1h@ zuQ)t-ui$8hA~)anQI=kX_STmPg47uD_+DXu$l~cU83h^=4*+}p=o{GW&A3`jTa&OF zlKD0;!3)^|U=&&t#$u5uyFO#yV31~Vx8kLTz}?PpMC$lVv$~_M$bc8xB2gRr2kit0 zfoWto;yH{JUD-l&RBC>20K-A`O``;1S1@NX$YgFCtI$`sfn6XA9#r+~^))wvKKI41*7Ll>YSFBdzK;Cg%IIPv+;&^8q3yhsB zKCH@C>1Cc68-k16dJ(QoYCH@c)F(jv?qf+0>1>GNY~X1j@AHrltylv#>N$N2bt!)e zDuApwE=yr&Yw&e9dWJ*w;uOLcPO*$=4TpF$>v=x`0-QeDQyGw1L=WsE$Z)d#Sl4k_ zDz!mvT|GWL@)2JM5vZCJy(S1Ay91jIAf$=IRw~WX5?55n-s{x6JH^p#T?S!7;BUb_ z{i(hEJ(P45O$E;0y&=0UztAygVrWl0%rwPH(hu|H>FR@`(4BX;)gf4F8yA@v`>%He zfj7);#s^z3o6c)Xw`i*&Hfn0q0PSZ@qDiEO1To}0_(!z9ECn>C((yz^wOg*)gH!&Z zqGikji(|g~OUgUhI_Ak?J3PO+Wku7qS8#y?5LG$#-lWgVe93Csn|j_O5y)UFQIkx( zOb~Wo5WcD0(ML!~M1ppoZ8oNIZYkOSz=}O1z@&Vi;}r}yqK4ecYEx)>AMb^r9aT?u z_D}TiA^&8fs`fCF?~hr~S|*{uLRW!WfIGHC*3SU2sSt2#Qau-S(~5S9cJ4?TotRT| z!5gDlohELv$W1qMMoGVC@-04w0oAV^@gcBmSN1;|CB+rc-mu32>k% zcZQ{jP`pboi{#V%NW=V~GyxudXtd8-#&Ay@;m1{>P!4nPl%pPiT}j;0-iCfh1~Qsd zqGANimC9ju1cgnA)9_`{?P5cbYy{E=WTI=Q`IFqk5AV$Kw{doKA9K~!v2ib2KD@AL z(0FVj-61d~u(92)HpfSIS zUpZpzw&-gr>ucMwGNTv1opN_96B9%B;$Vrn->}!7&6gKB*uny_FLHRd6ZY?G+#Sp* ztdNC<)C@`N(3yO$7VAN+Pw5UNO4c-@O3|0(cGKKk3hAuS9}eiTf#3mf3g`cN0dV!;%GpXG^X#m*IDGfN zo~tMMGOEn4tWp8?y-i!*<_m#o)cXF4qjGi}-4=g{eea4HI8h#(sDnXfcs`x{HQnZ% zg-bwI2$5sq%?{13A+SvnCA79kIx_PBWh;}#jn;{#UDK8K9$f)zdIm1bqh{IngHBU$ z9~O~j^6zPkm;r<*baKV;*W(C+L?=9B|MNUXI&4sOB5 z8C6ou%GWkDGs&vsjrj&&3xc#9fHn=0AQZDwmUxG6$m|pe^SD!R$e#g~MXnO5bLxZI zGoO($P>6}Zkk3UA9(p=@O2KMuiA))4iEow<{~SuGO7Vv^6J2^8A|AAgm*k_PCX=ZZ zTof8{hayR-5L*KhgTROO=u9LUh94dfT~wByp8}ufQBfcoHSZP-t8Q&~92D14WXWE~ zD`UuEp`sx;!4yFXt8KL#Oo8ocU~0tQyS~&Gt?>J(p@%qG)uHB$2aUSXbFV{ieRjoS zmxUlm7BR=$%)fi=6fPO+J|HR4t!VZP?L68>mIeavq_pWVHcpxt{vPyqvP+Ochs|wV z`FYhsumGY>l=~yw9oH$T`;8gkim(`4eQIEw9)fUdfVyvOcOs+OvjNIL9@AbtGQOzF zHcs377_)6p`7AB`$wA6O0=YevG`I1*aOP81P#+fn6X&fuy59b*EHAFTW{lxlE*dl8>CWHKvee!N9s?kb53n*r7=;k_bYq6N!8o|uK zZB_)j$wpJ(XtpOl-@ad)$G)Or!j3{2Ct{k?_$@^?SCI*4eISvaOv7@2H6MZVsSH4( zo+qjq@UVhU)Q_Xfb2hV&{8CVmk0ur6VWp0jng=pS>IdZnM8yve}JqCu`C> z4+b65XTID{*!|*4^^^C8taAD%3}T^U>NVr+Bs>uVTSOk7U$$Ruz7d%SfYYv9#n5nw zIxEiGcDh>7XFf;Ku7y6qIjeSw-aRW9rQ!Jg6Rpuhl-!h>y0o&HNKP!sXtNmc~g)kF+6Q(QD5j)Bt$MbzCmXT2gd4uH+B zD6bFG5h(46{tJ!wUyqB>{;|#o@o5IQF>b}FnR+U}`8v(Xkt!rSYicjl#K*O$&b4x> z-dhC)_*gN7FJ$fN%|P+dnrurb(a6_C@6k`oztwBa8v+$HHhNzdBWnw0^?l17w3*jr zSkm9vg9Qi!v7VNSp2x-h>rfZm@}$7cX0%u;^yW z99Vbv!`f7}as9NPhU5G9$jX0LR)0M(abrC((3A@*@=dMq1y%mctJB15CIbKc`P})3 zQJeWe_=d`Bm?MP-?g0%CKTF+yR(OlD-SwISt)O8Sl!EqWqH20%E8=s(1g<5n+Zp%q zQ&&YnGnzF57ZhtmgcQW8utI+&ZE1;CT;Np}*Z3UFB9DuSn-GUGL$L*~d2B@-VMz*w zo{PBrm}t*1^O3%2UX=@5T3R&fhHp5G9PWDKtt-V6dw)@J4$rL6NIwNTViD`swa+ zSGrUEN?DhQ_jP9rW(<10oSqWPXtNl>p3&gABC!i%OxbIOftWL&Nd#P4o}cv-)~(TJ z-s|aTBow?p3pkGOR`_Z4JcTXyQ-hS0mDK}t+L74~blm{c;c(6S9*5IuLLO>?l0wTL zUi0X8Pz4b(@Zph%x-auwwdP`yBcgAUzxIxqoCc`A@8sZ#kzflH96xg2;;8(5VgD~Q zLkIe)VQ7j1kveL42PuoV&Df=PPQmInG}9{amoj58galP0n*d@#XHXuK9pdqUBswO( zsk=XmW#)8f-q$REbR|VYv1kQ7&}S4I4L|IE+LS~C)xZl8v&M~vS~0^tAQd654$+`_qCSLD zPi0r)BjO`Z?xRb}8hhlO>iR$ANRqc9CR(0luh0_8_T38`ch zSW&^;UkoLCk8!X(m2ZElS(@M7+79uBcB+|5ltx09@GRzA(YGejFR(&2SUHaj#ApX& z?;}6GMq=6b!j9;T(s3N7ItHSe3Ij^&=kGMzQ%C?s5)A6}1udNZ>Sj)Mct~2PmI?e7 zuCv&!YZ0;`THlwXY@e4(0jw5la{JOrg%GcknN8NNIi z0joGwlB&17$V$h#)&_$ajzp#jA;>FyrLZ6w`=G)VV1tN~-h{^&2O5Z+c>6ubf^e+q z(4;U!AS!5dagri0NuNVs3A1O9t*ZFBi%)Mp;k{6D(7J&|_KEJ$r!gxXmfJ0r0vU@o ztmb1Cu`kQsA1!0-cc{<(ut&fABeLM+?EA0um7%SqZqHY?holAbL0f&CT|sLSo>V%p z>gZsna~&7 zg3nspYWsY0EZ=~E%*;fAy4cD9@2iOW7jNC z-!7Kd4LiR!^aI9=OFz~p911++{0q<>xfj)~Rq++}d1Z&Mx|nCZ9h9imewMniZFd#P zrA2I*bjDpzY4%WIA=-~@CX#0LT9Ucin;&rJzxMsm^)fc1JJPx$?p-Rl4AW=yOFb>p z3_Fu8!eG2O$<4RXux!w`fPs$C?G|QG7Mf}uN)!Wv5HebFlkODN#!1N8b9vp(+|CxM z$_OoVR@)45|_xOt!Lipf$cz#zyq@V2NE1u3;Uhg zR;#xi>LeEb4$;jSjq&Yz$(>9CV?kjpEoui-hn+j{-B|7u9Vlv%Kyv%da5gAljDKrD zAvfbmH0?LUumF8*%u5)CJu=WJeFI z(&z3W4I;f9ZZskWw?D7Ss~vjY#3;mD31I4%q;BtoeL=lwB+$q4&=dHYd#o;2$W=_Q zo%%u=;YNL3>;5pbb*b2_KwY*!`anH={M%b86Ffs2d=h7Hj=7P@cE1gESH5IK{*Xa` zB_*hy5&CB+YQ~%!OxunTh5$*gru~2#c+e^k$AUT*&zJ&OqBSV2P)>kD+(oLgpIVaq zC(ejTvVfz()~y<%B|#?X1VDsYJUzVHUS6+VY&S``2G3kPQ27bnO27Pc_tqoIb#+{Z zr%O84yxsnYI5{+cMO z*lA@}oxsX&efvkCFhZjH#tB!sDeCOwfc&+pLuB{@ET1MwvmGUcuV(~tKIaZeK_LXS zc=BfdEzm7vBjB8=c+qU2)@pRNL0&s>r@9LpN}~)xc^tDh6Bq-nNR7*Xm89Rk4|}a_ zx9A(jH;WI?obE>lov=f;11D;@-I%!CO_*i;<$BgOw54K65JaE4)etd%A1Y(!q{&$P zimIOz*7hSO`)t1Ou;b0eZA7)FiUp0y^8-L*#@{cXyvML}hUb(QcUkPNZ=*o-EexTs zRa^@J@s&{)T!{&1vvdp(Qz9=sUQxMStf0|P)K&HbsXJ7Fw-Lm-uWmEaNu0}pI17Gg4F;0XSebFi;?{{wCO&i0|F7-%<6Q+ z38^=yyU80|%JF>1^W!hZKmDTMv8;KaH(wbtiDsFhKl|D}z8itop9E zrhT7MlKygJaFFUc;a>Q8h(0x`5KwD(7xFIT2TO8H0e~k2c&K4A@EGY=G2w2VD`B1d zsPhVDEC&YSe!bBLIrm3J0hsCD`4^45Pn5I5yOEP&@Jhd|9Csyl3QSD%slaS#xx)cq zbzcw8XKus%4RUw*KI!y5WaW|L6mNwl8JN3zL)hNewm#aj1~fDdg6S4>Z))M+cf_5T zvN$q~`F$)yk(H4L2UPlD%W)DZ9Cu|s-yAh+K`2-T)Ww@2x1!sf$PZ2X9oiY0&45SC zC*^S> z7@GDdq=~1EqNJnJy&soJi^M3P>}cDYG`no>;T=c$A1L8Jzo9zL4(X!H{gaog+l+F->Tt93XU@@V;#8_l&ZBa`Wl_5F%lRc* zw@&o6*lU;Fz7=L$crwZSB^oR~Jm}P!4i&A}8=z0eO-)swLHDVm(VVb^K|wtv8bss} zntY<1QL9rw!GA61|2$z=W`YRIb%kh{AO2WGA^O+#UGb!af)H|nCi$3;JYNjlNxO?j zUZ5qRa7K>q(YrcV-QMvnuV1>wtIsfd=y_H_Bq&;8-o1<276|yGZ%JqHYgE<7?)}=| zU&d$Iz!NOus}Ux#i#1rzPl0SW1@9KK^P6ns#3Ag|7KbS!n1ge}BBtw!mbd7_RpCfN zmjK$uSAP#h0Oxvf?=W#r=I~&j*T`h+QXdyT5V-aKoPgAv4X0s`x{|d{>IvFdnd5O$(JC?`fSExvB{s~vpY80aW%9S?<5x$a10EzaWGgl7+qF7H;Wxg78oV4 zf;&-Fnw3gAOQ>WH1gzGqwSDncKF<}G;gJ&yQ&k5IhKN3`Ry`D!_Ws-Q;|RjmEDVjB ziNsno+Nn4K+dDXlJ3X{fIp7zU*yY7co3+_gr#etgL@SaV1jMjL(t><|v~vOAX4;+j zqsG9;&vu)vAio|Fr;(-d0$Phy zA}+#El3u-Gz2k%_(JRS{!Wf4mgar3;|4lH^M#BJLp_h!%rbZ~)%~9@WKs|~Wm5Zw~wG&j!5k9VAvtDz9 z>_-z-<~)n*n4hGPW%(r{)0^~KrpaEHn`tv;IDUPq-IV;flHtXCPY_%LCcdvTXdMly zD>OsWPQM6UXVazCE-#Wso(e;=dXGai0I&a_PV8xTf375mf3SMgK^JbAG=~7LC6SR#a*} zJxC%T!djpC!6@v(-KfQiK@#1C#Gl`0qX+fk8|a+sE^^Co9pv(T>3&~p-f3BuR8233 z(OUSHGXYHLFNx0*oX08{*FyM9`ZQ-)eJPaO*4}Ha$Mpi_jvx;KS!^C?_DD+>GH%p* ztc5Ym_C(98_g@&jjF^-)gi(kD41nB?a2?-`GM`YKrSj5`WKca1c|oy$KOOVjERs1) z*Q>a>)E6hw{#O3_wsNSUcCN_4R7b>R_(?|akV3?^p|eyg!SlK<;T{Q#czr8oFf^(4fB~At$dQ< z<%$HSm*@_}5+ZL+9j2@#5RXs%c1`C3K8``l>I2nBQ`H(JjlEogV@ZLl(>~%p58`ie z?LQ@Ne1BR9+~lxE>bV+yrl!U1^R8c1T(ubMKPv`C84TRg<+^oy0O^1`O&CpZ)n~_8 zzHkg*bHV}!I;9e(1IiFZn=KR?;_dlDGb<&zEU}>!bum}SvM{Xa;3j$2>*!I^~l1pegS_BA( z0@&A^R8Jm)lR8P2vWuY+fY6{wg~)}Rz8$L}d_w-PYZ*ou&6=72gXa{Y)Rz<1Mf%c( zV#cYsDBtU|JL}M7PaK;>``X$w9#b@4I!Ao&xE)yl*Zva=;}Ws`7EUO~b>PdL>y$mC z9ts<-ilMQt=J#6EV0d)CL6K6br`b9?l{HeMRQph;P=(F%11mguDK6cTH0g~`FvE9@xyL+_|hm&G^n)}cyAxv3U4iX;C=g`Un53)$HU8O^SHn&1uWc<2@HH4 zSx(I)w@t^#>0YBr|K@GzP?F=?IpBtfJ?&Epi|W1|T_+n5pNZ10F+ECQNfB^aqr)Ff zX#M=qL2TAqn6j@V-U3{B@0^f_Y7@-hZ>|ev7#}DM#P@vOjeN5dY8b4;j`G8M-SW)F zmf>DT+kcV22DbUmPXqLZ^!|QZ<2v>$ktZ_FzY#%QZT&1jQl#32Ly#iAMzSPN4k3@* zVCY|qye6K!ERtRbv8pgd-&gJsaN=k_$>=Re5mR7(A7h>Hhj?dHyhJX(!M*!_{$#%L zj^E$7F_;G7rJUyx`lK{}nB{w0X=mQ>YE39Q2Hbc$LR1OBf#p3)*+-hoMuc!@r-zP{%wURC(n zEKuKpyY3CHV{h!!zyEo6Y(lLxK4vd6C!aM;TH1T55`r5ZP@TN8uju1IzH%{OWefUn(XTFKco&0 zz`G6rv=e##-3wg*qQB;anoBA2ZQ{4m>E+M3gzp(o7hT3_v6}PcVHQ3QF7(Q@LbNjJ zRl*ky$(@90X~}i(R2A4#ixR)$F#p*0ZLY-8q?2+hlG(rbRYk+Oe0`%Yg$_k7W9jY3 zaW7R=I<)|~m4`uzr0lx>B7M=TFTJy8^sD}=_$b5p6`7c5Wu`9A?`uI`)$E4F@aLKtH^33VN7 zs@hoTAqvkXp?Arujw0NLx2t+C(4bVzs8S2+N3GP}?S@1SMZ$_7+rm@hpT_U@nBz&4 z-eqAtVD0AR=QBMB36-nJQL2iwFW2!Bx;7>^mx^_|f@?I5mcHoejelGt!eg1ueWHC+JC|6(zMFLUc4mt*yX?!ciK}cLDB}N&DN{LHURU(V>K0g-8jHu&UJydlPuIL!`vSdDm z!v#v~G-JOcpuy=t7#^8!X&IOlFD2~eL(#CeI%rLgjc*tqsrE&d)86&Oi5?11X`Cvk z2uhlH)i3*Cy;TP9Mg{b56~8%?5%INlM!PEeZ5G4s(Ja%)qBs*f;KQ z5+?4=7Kaq4R=^%W?>%5&%x7-QQ1U}5coy~Q9b=MVWrIH9EbxBsf`rQ4cjtSR?Z4We zb0<+xcvYV#WeVgZ^J~{>a*sVWQi@xtgN0spV|_mOZIz8<~`x zM33^VKCSLnPn#8+jiLhHZ|%%)f@|*OdujDv)YrBjxwq~s*Cse!ytbR1NTHDv8~?7B z$*wxrwrDaqpZgJNQe*RK9=uj*9Bx(=c|Jigbk#oNq%&UI?5(9Gr|7frx^^g|m`69+ z{1!HB{TfVw$-X3dxS~w+B%#NAgttWQ*_ZoFSGm$^N(8!zPo6a8c`0AFzG+u{MA)X8 z0=_ET>YmSM3`OOS+|2xM{_xiQg9XSuqSO_YqIy{y>ReXzLv9vQa|DL%J|K%w1yAhl%D)Gz(M0`j`>yxEj*hecCp7X5B``;U{ndh_-z?&43^4 z7_AaR6R|Q%SL*&t(RJQz^wAz(#RY}rPPbp5o1MS_a^+Yh%V$TWnEicg_PGvC!k87p zFuZLfAWpAj$d085Dfh7|0&tvF%Pkfp2*VCDxqLZZ*S+$EvfIY^)*KM)Q+5R8`r6{}SSJ*X7+ z(jbu_6`=h^`66#Bgpvh>9-zdI+tR@W{&f|5jM^pH4{3*gLSHxMjfpy9zpyV*QHcHV z8dpW(WVJAA)o@$8=;+g+{$9pbrGO%L=@Hn*xRN9a`}tkYR*q$qMsNVCj{uiQqu87eVO8czb;7qTg3+J#o{aVlySO?`krS&a`t;dY9mtZkq3@v z9)oUJZC-bZk7ci}gQRteVpKoniLldL1Fx&Su>H@&^yQh?pzvl&yZb9NRn3yQ;JKY;a(re0#T^;MF?uN;y@g zt9bMV4BfhW)v-1FY;3pgt}$+vNn?*>kP|z%w6ug>7**D-xsF})OtcjjjWl^3;H|dX zc8K1zUMSWjPh$HYtZSJY)4TRUTY6WRm3(ajeGJa{yqq=}sC%wEOJUN6xLoG1k9Ujp zTykc%Rh+~B7Xn2F8p#s4h?cD@2=RA@fZ ztPd&@>5PM+8Ua$76e6-QyT2#3V79v4B?L^8VFP8cq`X>xS%rr29^!I-WRiUWSNYQB zHN>DoErrC{v=l5uHYjzH*V5BZN<9-$Ik@mxc02i`u%Xw}Jd7-rd;i*)>afMlAF?GPi26r)5? zjj!`EspX46VHp_QLEsT)nX=gP{d2Hw<<{REyu zFf8?4?40JH=RJ`%$$uYO*<;pmt|;jgXrIg%B^<6GTydSmbc9YcD&OB-r**&dkE=RK zYMfj4xjh@O)B}FKHGDRB7m8Z6eA|XU!#9>9VeyHqO1;plHDjL!i0fZd+qe{uvt(O_p_jeu1re(!VBMikcxj^s@2c!U`pFq_GsjxQ44G@ci0Al zQJZu7tE9VfZ=GvYv9funny4>MXo{NhJl20zb@q)c91eJ`B|Rbe>?OH?oM$CAuyN_9ytEVpX1My1G|zJ#FvZ zz-=EMJZhQ2+h30!!Q!5vFw5SRFEL`QVa6G6F5~15@xByz0jtoozjnWR68$y2c?|~} z7YM6q{ELp8H-=c4m)LKBrzYa}_PuKJm;&sXC2S#Rcu%3cW^*@(kN@UoHjgX!iJc8zll}67JhKk#ifgx#SN`X34&N!GSk5n{dqni!{ zf06ug3YebS65xIa!k#*(G-eQD)J6L%Ncz#M*lDv}PVo#aTRuDKcg|8}wgi4CrMf;p z0!GVu`yQ5QvdDfi0l}Y88UYMwH_!wxN=#dRCtE(~Nv9Uig_dXMbcQfLe1&S|T5&O* z1%XQ+qG8FXHId*pauJ@NW5*BRfv+9JSDv_nW0D{q7;uOAMUh99@-Ui@#ga0@Um+W2 zq@>vt4A_(<2YD)GH}K__?FlK-x$1pn*279nInAjqRcZ4bv=j@9yiOdHVn^JkN0VaK zW3C8wmmJ;I{!Yi=FtbvreCnfGSzF!g-c(9?@o93aN)L{`g~IP6m`wQ}ZT)mAScD%b zjcgx7iU`}{Sx*zM$tnN3&ZKqC-{>N{1UBb-t1IO21~Bd6w9#`=~+OwL0WYK2Mv0K`94N23M!M>xCv53O@!p{($7PQpNdAA zys5m~<0E*;!{``NJ=f6;45HT&O-H*MSxsmr~%{r&%r+Y+tmZKjcRaxX;q?Q zcj-GBsf_A(k>e#?I~OXKVviWH{Q3S~fL0AZt}ULH`~>}|%l`um5de#HpO)S34vF#^U?14khfKK+UA$OHQt zXVT@C)S6%bt=U4?LLez!G8(>U9W597JNL5}k_0!=!mPp~P~&J}EWim7_#CY1W`*xw zF4IQ`NB6?EFs3CPcp{YCsxGPW+qOkaMmQbUK&|jJf+75Vm^$x~5c~`9kcr)#{4+I@ z8sW}azs9BOz;^vmZGLVcH3fWc7wd3p|Czw1eEXXn6CQmO$M-*;HIj%l?v zP={T^(ei5`@`>mo{KoVV6CU3Ig#f~`)HtRv|7ytNo7yWaw+=ydGSWCedC7|=d2|kN zsiRac*r6I{!)Pc`#|^_x`;n(y|2`kR1^7a>j&zs(dl+w8l5)~_wwf9<$M>>5i=1!kbBtvw^#pl)La+)(Huef_9lo` z;Ai@7$!OK%{l^E$k3g1$mmBlg)7QUu|4i~9VSSbJ-p#Q(?%so`Sz3J7?az4Y#!TszG1=S-t@to$JcP;_t6oC4A&D;_TaHzKQ%7 z*ya=qseL?!s0M`0n30y#2-%iFd9}`wm6MF-OBE-&x~WkeY#mEs8V-}`H?Zuf+Vlxh zTGlE(iZQj+^kvcCx2k5|LOXlA!5`+o5R8tPerdHXk}&y~k_={oGM$PWPI9248uN7X z6F4Ro-{LvBwD~c@+|oamLa=lz8im}t#uC5&{+9nEg-h#mKPp8szNO6q4#I{_-Av7hs`MwcrH#SKH(hlZX3n87T0m z6HQGT5;Y#G8j|C9VI0i$61oXr$}ze{83`PmTv80qX1+A`^oetp$8OlsLQwPX@>~Oc zDdc>gxbROn5SFWaTsv`{a{e*RGoNgQCX-Pr-q@VB(yfKBq@feTk~g)8NT$30t?$J? zO6Q3J9rG$iiH8R2XPim{M>$Lflf?CBEPHDc`p|J5Zya|jy6rAWBMmKTc%A;y>tcQI zM$opN-^H(qyMZ>#417ADQMqw1i>lhQ2&|e$Q~nE`{!c+Cxie^3cP)s{6^)xTS0z5J z?+I7&PS#nSQiCPBvU6We_Z`|qR&sg%Bsfd)S#9oxzL*4@pL5OBu$BC9aRRO7e|Rl; z5y%pR$z_RJr9WTxz4mOlT~qFthsGYcG-YJKG;n%RuZ{9SW1uzyTxez!*5u?zzwdIo z5?tQ@Fm+)J)qzcG-r#TU{{F=^#yu)V#!>NgG3cA$9#wx#37>vks+%oy6DpslrB+{N zMgSk&QVUur9VnoK>C4$xyS^2i>U<=TjOAoXJF7|mL7c|Ay2|oY{opWfAtrCLyk%6W zh1b$rtGxB#{T+8iY$lZXu&SvCx;0-!2cUTS*d5o2(KdwIJl5)h z()v7is0g^LA;X8S|FzE0mDas&?qRSs-{y1t0+SnklVGb95ZA4-8hW8K0X6QQ>%ys&>12~a`S27i@|8-}Ia_$>2p)|(ONKh;FPo=fT zqk4bzy@_(s%JN7c`B0-jynDdrdhbK?J)5s^J?FyT!V4)u^tt~~jZM4v17itSrq17c zxmx^pyKnB29wSMUsjkp{G}|Bj+lM)*eDePy_NC$d#7aL^G0AD39z*H-SE3}+i3sKt z52m)^0_6U;BH1C6*ugXUgu@{nszU*E9Jr6?TN?jjnjHO0*2FUV^(JKqhQh$>7nU>w z(>-uZC>nS!-m?xuzWglMt_;c~C-~D`&7%3m(;+A>&QUt4Dqx&mJ|RO=$fwC>$jI<= zfV}Mno6h?s+eVMbi8nb}+veYv*x!=aJ17HVNn||B2PEhk;rCy{R(}?!E{{2H&}*l+OJY7)}bSJ+y08Re2!d7Nxqmj71hP> zx@7{F^hoxjT`84Oqu~M+GFXfC&gakKR8>2_rk9P#`-$~qpnRQq6^6Bm(gxn_@M)7I zkmfsA{f_4}z0J)ooN6tx-it@%`D9(kn!fC`%B-BaP^%T{l6OyK`=9&`t^HDL9vKUMzH9 zrG@=8ZLzKRtMBm8NJ-~8u_o4}b297Ju6mNl5eYFWb^6v?S=aHZX>uW?!5qq?b(;Hq z`HX*Ftl7MnjkUzu!zb)}-@GVw5qbt+PX6UjRpp*0-2hEtT%bWM zTEh}apEQ%P^+J}t8$ox3{Ri~x%r`SEVmN!vGRQMb9;@CO+5 zy<#c>uJ_kU<>fTw|H0AGC3lkRNuBhdfZaTKF3)~IPD%R^HK^fSeO2GITcAAS5=8hy324%gFF&ti3+PLUb6Yv zHC8pbu%r{;vRP;RW|57THvxT} zcjn>a`mLa?aGX^p>-Ahs?UGu*DW2m5B@1W110_IYQGi*|xyydmX{nu~zFI+?Jd&fWYl%v&XBnYfZl8UW`-*lr$ z(qMdQ`<6K0y;Y^txmaCw`*3nU-QSzCjj8Bx=LEd{w9IIN%S-h9Aw(zG-%Ph%v z0oUIy#rmGuG%-_wYe@XH`~=?|t#%n!_fA6dv(mh_jBBJX#a;!4R*M&l4+*=m zm!AE?trd@!Sb*llpUUnMXyS&b4Y)F6l{lQEw+mNE?v0@}4^T*)NG!mqVyI1y<(f`P zSU%PI=#p<;P1YfDEbjkrw~12DQfr$F%+_hH)NN7np}Vke)sle?{@rRPNFAts^t!{& z%XpCLOA>w=FBZ8^ey7Hd@YVYj&gah^yUlbgu2yQ!r^!##%QdAJf-tIps~6AY(&3NR z?31UkDh~05w{bnqDP#Ln&cEdpv^~0>|BNuoX-GQ~AC!_eQl;hyhiHc3HJB``zCYuk z5mTfYJ<%~0QvwwaASGCH=YFVD$OqZQQ7pY^#7MKDKe3 z7C-vPAA`WPp*wcC>E^k~t3rs{2j2xU43aLJA`+RYQ7!S#L}gES{U*8Te`VQ|)H;)y z)rARS)|I`3(on~jU|T88ygccy(n#GpZ#ueLNFE zi!sdqn=|~MmZ<;fjQZ~b0l+ELh%xlFr9}7a{pgX9x`OHm6Mg)ZNqmfIqPS9(1jCPy z%aerz_+Jae-P<`!^&+0{oqo&y{Wc0UvCc1WMiTom6(v!@mUbl>c1mx7leCz%5Vg=} zNEBE1qo-tO;gSH|#^Yhyl;`Ua4tn9zda)FbrS@fit(Ce+>e()u*0RoUg@WDqw1{0i zAA*nnmo_99>0@%-IeFb$LpkoicK;lIUBX_`d$J@?09$C=+| z!d}DRkq+K-98yjxcSQkiDziEz;-@$%VRPMPoTbz|Y_&p@sxRHym7w}Q`kUSll4#D| zrHwN|6z3Uat~TWy`#IpM9TC^rvNxlwh3n@UzUG#ouX3!E`70SsL5N`|&93zy zJbCYE!{_l1$3hsy7zf6`)-Z@0^qMN3(z{PB?C!3TW_{Np4d-)oJY@lM5z#~#Q^N|E z(c0!UJLD|z1sj-0D{Qy><~~LD@?c<;U6qERIa1a{ zu`12P&N{!GnqT|NQ%m!<@x0jpQr(tQe2zyn)$9e}d>4$x7`t4*4GyLkiCs87J)Q4Y zP=!98)K9rm`>BY(dM7~3XHcoueUz^EAkw!AdK1*S&TVo z$BWrLUTMTn7m)d6xBR8GD@sS!J-y0FTJK$A3^?NIm9o@P_c^k$m86&m52t`(T4l1U&2m79QYzm7^2IXjL3i zelMUlw1u*=%3Q(JKaIALcApi6YG{SqtlSL?&=2ndb+afi*f&O&17NtwmWD)GxBn0oeS{`LBr`Vyu)E$hUvxod#6ZbH1pYkISeT=azN#q# zXVlg@P_^ViBvgQ(VS%?lrQ4yPP&`z(1Jh^AyIo9&Q`a?RrhQk)78YzXX-syCiYa7*Vpfw=hi8C>Zv;a zM}_j;I zJBblzaby)0ag~0S9>(EsD`0X`%Ut06EHRa;)BR=xU&LzC1&gy0RombaT0K!XaF-C_ zECkwGkrHjvN?nU0=-K@1vP#H5QD;$ zs>tJ^uVQ&Ra`{%@dHrX;#p!U0i5Dw6w#I@Lp-R5K^zK_6>B5+xFY8reYzAF11B(D9 z13C)g;F^FBg)70Bh)f7@*3`u_rxJHT{@)5L32JX%C}h5iUhHS72&itjG$d0G%Qt!S z7UOd0NTT~a&r_4|=Ws31v5V}z?rwabXa(mYX1-eoCyE6{5LG=BDFMvt$(TmQB&iSmoKcWQx z^a{G?0)?`tr>7^Rg9?lGMjPQ*fGuhE*R=*eVK<%mT+j4US#92FGd3cK*^aktwb<%l^x6C1M3UX!?cc<48p5R^RYwWV2P@3<(Ur8ZuXUfZq zmLxI0pGKw^4J~c_-QC>`WnAz5mfh@YDlRb_7@48snI+TLr1~paXMlmo-hovcGMS$S z*SU@;YYGOF*-yc4=J1(biKRL{S4dDx7Tbu_#SLJ3x}?)XlPh_6v?3Dfk(V6Tjk?AR z@s5nlA?MA&<}NONplGm5-0D-j-|aZ;b%#C>dxOa!FapS81?EbdDu@ZS(;>y(7px3$ zmv|}czRLcUt!&0ZYrg4ut`whbS6HBj&{F!YMk&lPASPLIaOxl}Cl{A?Y$+{$nvjz6 zL0U>G2DTxfxU3@4Sh9_rgxMhU5Cgs7S@O%VL+ivrq7v6#zkh(E!60+C=IgkNK{?Td z0c`lw?^o10i7%t((N3!?74yN%4NNSu9(8;)JYT~$*WHY@yU-@=fVK@sO zi6-T{@LQ+acPg#&O`28&)i>RE9wq3D1sMG@g17Ne;ov`Ux2?U-46)=a;YOM~CkqYMk$H&LB z=G;F+0G-jHp&AWW4isjL5n2jrarg5}oI@+;KE%;Jry~-m#uk@7!3g;c9r6Kkt|LM6>Fgj~lVtSqV9OH< zjS7KAYIlC)ezlJ)t@=;fMU{fZ@l+ACvDkpej`zEJ(xReyVx^`b|HbXZ_bWs2n_za^ zn0uFyJdbu5`V~G2oSs^Zr+OZYArajr0$vjB?JqT@oQnJSbOIF;p3i-SfGZm>k%;(Q zlgI-e5V`jv)0aB~CW|qo9|@V|);$iqkMO26k%?@Ro`RrTK;f<<{H|kY3Eilj#sd)o zW3~ROcl8}Yml^qDm#0nRag6Iu!3oJ$Z$yxoxC%}3SG{JC(i8-Y|(y;1-ioGFq|Ismw-b67LP zJIFj`8G0@#Hx!1%8C#0_EwDCz5GLI;^f9Q^(J4>xoP!U5D)CZ_<}USnC+#MxnjO-K zMni|3I4QM_K{YnMU7Q3^Btwh!PUI3`I3+kOl<7bAfB#a5ul4C>s(tVvKW-GQbo(qh z$GgC6Mx)B8!{bx4npG!bJ0K5b=g$V_8>?aq zBQ1}F{N?1O75rAjJIe(6DyBs^ z7feX4QANhlD;5}eS8K8)v!vIkE)h-BsJh1Gl-B+Xl)QR~pGXgDW?%Mbu+3IO%~JcD^l5j zXW>%Sc`f?uAJdn$Msv8*YIBaCK4rySh>jBOEFAzEF>VoAKJc`GPJZWO{r+PAMu!H| znJCC6i|Xrddgu25Lk(B8+z~XBB8r=EjiYIUWa-PP})zqs5P4E zaliCMzUu7{`0f`Qt6Z3b%vc0Eh1ENUW%{VDp-~vm??Ip4x<3&Jw?IKl=6D7F+gnP3FkxP?VWBY+lPIm33c zK4zHoBa=z>Jo;ZlWk;8d^;hyIN(gN@Udx;H^e}HdLJdH<=U5^u?j{!AeaQOV`~A=G zwNe3!0i3y0V0lL)y9uurY3?6o{6NUAA@up(KyHZGs}%giv)tp2i>{kb&*R{ZwJFku z;9^zN!ObgyUm2X=>ZWu(PV55XvemllJ$` zcm=4a2JVcPm_kiowY9aAs1D#79Sr;{2>9G4$9v3&!N->LHKa_2bpQayhK7b?1l?i{ zNO~1jRbx})4e#eW=j7lWl9Z2Rk6%i}g%o?2;5R{kqEr4MdjFI_Bw~B%P}2*N5X}f^ z_?0f-uAX;CGBT4w1~@o4`$TX!8Tqm|%A}&xSDd@7&t~T4cyEzN^wrc%p5w6t*|VGM zHf$dq_laY}{M(nc&vOQJ&NehFi&EH#l{p*wc@xShduy1l?s2AY>hP8eD79#Gw zy0m1GZ~Oi5rw&9eb}yDl@_W=FYgz^djw>8q`1ifS@KGqR>xR4o(1PYG{miH{#St|l zo9D!_j036)KE$B`PM?-~%tJ1SFZGqqF1iBFUz`5-?MZ*TJv7^(-usRR5*UpSs5RD- z?ugvsJY2+y+-3*knT2omc^mWS_CLHtk_5sa!0?2--%Sf9Qwi) zv=Ot6I`~3BKDfi0h?&T0D(*l~Tp3`@75(2V^xqMON^B^BPil z?9g**Et)#Y!I%0G;lPv^3+sUlW`!EVH!s2r^u1gdhZ|;|0O}NBc$hg~Xbt~q7sT`D z_~-8n)ZXUrdKG0Xl+h`Z#Ac%4X^-~~?oRX*;ufA)XU5N0zHxW%6IcF>aN>x6WW@DQ z=5BewSMF91d4rK^YHG?6>t1<4HqkpeDmOGl8}lQOD->4O&k0jwCH&W)>2!Nc68j;{ zk%NGrEzo25D5(g{owOs%GV$o~NiF7@&*UNz@Qv z{LMb=O~7U(92OVbo)n$nz*V*V*~PjOBY(5iF3)a94DTS0mk0=ONR(r}DRLEO3%CLf zj((e)?sp_YVt!Ic-3xQhH~vxg0e?Pnzmad?OC=*%2u@%Iy!j#jMJ+IH@TqPKgilASgsncPtA|YzaRUf?)swsob3@bpybHVi!xMkxb@H>I~;y$fTuEuxj zEKf$(Y=f!=)6<-!B2h$wh4c7m*ogqwo?alA&r7opPsuHR2i)R%lN}NN#v{gYPPNi3)X7XHiu;Et0v7?;<4GLR4RNs>b<&r7#19GdQ&Y^fzUPFzSzaG^L;;|z1RE_f zyoHKG%FLnobAPAc_h}YNE`?B+-5}4Di9E4)_N*_+ciOntDl`c z!9o6WP4kb}-OV1>O+l43b|xY{bGRrbJwBNDW7f~{1)OYEJC7riA2sp{bhQl3mL7QMz6A}B6e}njZ6h2K8~D&!N9Wgt`A>U z&N?HmGBYkAgNA-g9)cNRDNLmKY14;0Cv0oB{tHe*rn!lg@RX9e+5j$Gc~N}*4dT)9 z?A5};kwA;YCdd2&E_g47MdhJif`jAA&fn36YsJJR@o?}kap+54rwdvwvuy=PIM+Oy z_U8bEpvNv9Lg8;tS79dSS(!=TcCHCe3Ij4SGHLj;JA-9aNp-3dC_N*JULv_{M7Fc7 zG}`=3vYn6FKs}$^9niwn*Ij(6wfglrn7gHqw(WZiL-;WiT~AG*kMfbXIWv|&sXe$vVO!<0d+K!p=BNaBMD*CEq>5bOO z`fc}v`(xnZS)*o?8`(r%vkkgem3Rv2=k0Hl%U2cOOda)B9@m#BmQkJt@4~=MOif!> zS*_|#?iE`m%U`+v3K;tvO#OWUR?pFhn}I|=ZpLX;u%+&{dREOgA&LxXO=c0;l1ENr z`t=thfaG#0RYt`{+S4izt>ZuyZ*Z?qKC-sVOEyGnK0s+^-T9o1#nQUOXMy+?#%v^t z9&ayFGb^de>qHTZqG=x^6C`jN_(+^RE^C78)iy%38~L9fCPqm~t3!o)5FI=w0sx$t ztogQGH*!mLPU+}Bai#&%%h*2m2ulWy!e_Hi$OO#8Y7-TbI=hclJ`8 zr4;(1x>D!jL>=^fl2M5dKg3d*EQ08sAM(K4Zgu!Qd4S7bz}v>6NQsJO=F`5_SM31I z(*fu>*Ib(TF0VoKk~+xX?nzBjQ!z#*Rb^;WhdDp<$hD;p@e=ESui;(sx@YZ*ED3JW znzawzK>k|CAqZYO700lMY!=b!X%;zoq#)OIP)I^VIyu4Vsl*q-`yYxF%pb)&uTF_% zY{rD873AXuWD-F8MIcf#iO6^h&UMmL8=LtkM!{>mK5nJ2*@|uYr_W!P94Hpk({y(O zPz2+QkF#nGx4^4uD4?)kf?_jTM%}rge4|;K!)A@)b!Mgjj1~pG-yh!0CAFzq*Y`l< z;bwAiYvj8dcEpK^CC8B19Xvm3R%(DFVGTNz4PcK`(+=Yec|;edg6Wd_jk_7wa=YoS`T1p+qo+ z4&TDEIQij0%>DFnAd(I=1$d4B(*9U$tyC6uGwN4sx#T}%%`gZ%%_5vQSaS&nX1Rju z;$o(*d|&r`lYd^XCnn7Luo&IAQKVuI-Qd}&syvBOw9ggkgzmYYcQEA1P!0y$b&*y` zrkM`R%exSka}vI;N1H75qL{uO7qBqVY9=v0Nj1HumQ=x@5K+vSuTyrZ6|h3xG=X** z6A*nD@BFB}&n~lRYP^MjBO5PuyV%Hy(ld5(!)tq2PY8;`Lh3fIF7>*)F!uTbVwH@dHJVC$=C|>@W>E=`w625m`g3upMD(ufOe$3+0<}iQ-^y1S0mR=)Vu_la%dP3E z;u2e5QxxidP{+P*+U%6ubzE&hONWFf9k*hUC3W$cx91m8-jvdH{)Lvy2S*gxA+jL7qOJlm5Kz3md?}w8R zum%{hojdP=^gOjI$6H>Gk{a2fyzMwWY%E)BsTd7e@X!5JE1%ep+As5N7>gp~dhW@{ z^^r)&!4RZW_UP==Sf+9xLKBUGlM}|0y6N|rhF!W21Kv%Eta(OlOwW~C+=eDiPT8xu zM!154bkqmZlyTT3VUAjtj7;<`g6DkGmQo}EQIQ7WY+gr){CxR?7MQnNxa-{Uv5K=& zo1x_~K-9ft8fO|q-C5789ett+_fu4BOBFO6TVjQdLE!j`X;*Z~EzItdpEu@yo7~cT zr50V?ftNBpztJsUq>83)g|jXDEt?Debz*m?=-iU;>&C%w;cZ#O;F{S)aJ!+cp!xGxIU)dgaCE&D=$x!X+To6y zp4(tut9mJl7AK8DJs7zxv;RXXziGPW13}fXh4vp^K=&c+)C?oL{3Ezx!=7a^UuI2R{ zLeN5os5V~XoSX0k^vWeFYoZ+#Z((OstR8M#7B)ULU<1yU1p*3|~trSd`%a z?J4)amchNvD6W>By40^8Ozs_WUWzxQEsDz$OIYm^bD0>I62v8{`2 zo!RGVtBjHfo_pg3HJcNJ7HV^vgJz++Jc*uythL&DuYOEJ`11(AW~hIrg~HA7nK?b~ z^6J_nDluhTsn#i6w-5IMNrIZ*9pVW%M)2LH`!+cSCHD;H@3lVrRmnIyrv0j*UNCeV zNKC1$aZ(yTp(yzLbpX17dq`b3T(se~)CIt}@iO0J8sI^5PK|;#j3G-^8tqUDnrn#-cy$YTZW6f-Umc5X~{1KlP}>!=mZ)v^r3#wobt*k5BV60A{$DBw%!X z`_Xkl#?dIEoMwggeuG6L2>T|vwV!Mr+k)unEpRfY>xlcm;-}ya0wjL}r)ybc7Y*}K zaB1L5UiZ4AFbgw&T5;1*8X%u(7nvM9VvJ~^lb0s52wztJfGrTfvStv0jLQ*|NQ?m4 z>vYLcKv>TO@OPmV)Nhi0fFPS+j+%O#2v#D>q*kMpUxM!rz zPh449mb2<2j{8+esyLP+63Wi$3lp z-?7&kXdS*!ukahY{e@=gu~mtZU6(f8O3q3{yZohJtCWA?v41uSZ7^QyM`EdU3w-ef zT}{L#vLCij_^Jh5@xRVnsuL0=o(piv=gw)Eo+f#lIb06v7u>lzSp~a)YyuZgfZ50K z?zAA^yE90>%IkKFSE3Z0dg1d9$X}S&=;EOX)Ul;WCfZ4>+i_x{-gTZGp7G}QXW(tG z{~TA7m^T9vLZkH=XFYc+$ls6)SMI)bbe8D48a3QYXl3;0N*k`dvXyRd3CsvjQe*su!Hwc0yV`uI z+*jcfl^^;z-Y&^#Y<~#d{7QWAC zhsokl^ky}k7ffY0CXG1&nrw{iUsv7){_B2dGez7qq}IbuTYm4qcmG0Q(#rBS{?BQz zl;8Bqb+_5kn_CjdhS8_Tlp4|h=Cy?-uf*aK`_D=M4=?Q5csJ_tY>GbRlb55ne?Q^@SKqBO9p zhs0`-S>R|FmzKxO6K76}BVQwE$~t=xrKP9G#HJ!O(Pb=>(JM8sdsBgXJAi#uU+uV9 z{O4Gw={O_Gdka&?i$dYrJHt*lS%sK4UPiJJ;qZKWWd9;`zsp}CoxMP2#?{9KpYPCv zc>(ti}f4{zKsZes5N)i%_T$9`A~n)01*h z%^4gn=r%dokkmH%C^5e!%xdYfSc-yaTD>QI%@HH7PxDIUdL7UoYv1hZ+O_*RYL7BX zW1Tp)txg}bVb?fZ7D_hW-L2O<%+ynIvarxpFud64e)$>>P&A!vY;>9BWHVqIAIK~^ zRa#!=-NeUZtxy&?dnj|?AUidz52oY%zs30byig1IeWSPtt?y+LL#OlPXZX^jCR1GA zfd?^0g@r|I-sbi$4t@Jm;`z?6UwRnL8k*|TM3yKns~%+*p~||dHuk-}y<-qztwP&z z+alne>GBAti3{sr`Vufa!K!!I60LBxL-j{+IZ*T%Vkr%AhuW#y_(M`fL?w zZaKE0(SVGEAlG07oH>n*Cz_^H_#Seph<*u1puzpfJ9RNJ$o1l87+;T4V0 z+7FBq%n${dtNcT;{BbOA;YVA#sj%tNbrXSo!mnWmFK6z;@OlB=k-8itf{fT3PbXc% zMk*}m=<$yr95nCR%}TS>&6q%2UlG*$Wy_+Zx>q;dz)_ucD$Z!;a;-jPQb zj7$_?dT?vcleu5f34Dvs_vJ_6&vcG*NmF&Cb#Gsy&bz${GFsXh{Ohx4&)B$(KwZ~W zYXjH&8!6gori?PXA0;#9`Qnn~wyh4V_~=65^kQB?1Cm9_M{2skzRp*en$tr1!HF?( zF)^;Er>C*b!_U0v+dImnpWHQFQLY@Fb~^;%ax!5N>T+^&mg--nk~g1!gwE75%9C!4exh#Q_aI0183}m-aokc$(3xrX8T@i z4vvjWl+jHeB!=zHm1!Cu#qGu14cC6_rV78~zbWy&cmM(0EP{u5;utnvC-mFww|6b- zWn>Z3Z`|jHcNPqMN7T@h-(znzaIQ-v@S`tj<4pVXbuDf*%jGvT=2Y0O32$w6nx@HnYqe0$wpBI5ZPq_sdRVw`=CsDS?xT5UN~$Pw z%kOzFo5J@szG!%?nTHXnv8-%DMrbW?cGjewB5}^cN5hPAJ^6%PiZ&`BI4aHRhZI+Z z+3FuH&+ij~mGmZH@7t}rL*um)u>b=y;5lGorws5IcjT$3s!vuyown)NVxlaA0-VVP z!FXM#gPPPXgY;*9HPmt{=xBak2}w5aS<|y}b6cc?YBrmLpLr4~i`m|LFT|QXd36~4wM;o0DpsBmJv}7#_4S{uM@>Bxtf~nqa~zC}+M(u-v^pHQ*}BKa zhB$1PZXOB?H83>Ng&$%5RHb+Oqg9)jnfX}tj3!|ebR)ukR%-RUw=GHH?`mE{M6{v_ zb}E>to;XQjn*Ycj)fEA5L75`Z%gWpd{qy6{P$7|{fnCS0?cXajVm&2GNa=elJ&&X2EykVJ5>;6jNKcPlj zi?ax_i}q7@OfPzL`6jlhuuY&c#g*S{PPB)WW}B7zSufU2a)N} z6y7SArA7O=iRf6=OATfahlBP~nI1Q{@*F#qj@B|*wIBH~6z~He76QHk`RBkXgXOiu zE}rJqLcxQlIs!awJCF2WgRRAp$e!1K_p^ljj$i{55))Gus%N+#kH=$24ik4lH$hTL z1s&!Sc01E7-BjlzZ_QjUJP)F`S>Z+xw>& zBE0oAp5<;fP-gsE^S*^v;UOXlLs+UM>CNdr@A-l&yRTR2uEOfXUHQ17rJh1Ar@Wx^1!$6l`_{#;KA&@i3! z)EZ2aeyW8Y9aD$dO+*PzEsz>AFf+>o{aBzEc3NrKDb(RE`;y1K9ypF&Kf)C3yNjZ) zG`iz5j5Wa-0L7yBfxuKeHBArI{{mm&5O2*O{Wb zgR2^u(C&)M+cDG_^4zY~0!C$qWlR<+QBor4vZu{1#eOkxNt26{Nn*40sn}_)-Wg_C z5no(FBZ@n}@TwkefBk zMsNola$^3+vg}U7D_k=Y3>l&aX<0WZ?B2NssZyCZbxAai$2dClzK=g z(LXv+yx%sR0TZCU6Jq!u=h?P)#|GuAOni!t5?1Zge*d2FXB6*Q zVhlGS02B=(Qc+=*dsj_ZbzoKe%b{(|4Y%~z3FPKM4>!PGpD14ze5-|2`HK0&tO+ii z{d>pGnPOh?msB{*J~C3%Gc?EUW{?g`A%pFQ4~hdf3ajB!xu2ePy$5S7zZ)TP=#Wj?ShE_a%9_+qfHT=lsZczthprhIpjvQN0n=UurF9vX@f4=x){ z_~L$gHPK_lYi!I5j9LSv0_YJJ3uEP4YYGjSls1<>q|Y{%F<97-&H6L}&mL`)BsoXs zT{l!JzIgtC*Nbxs>!@zX?AI{0j|vi2ri}v76gxRCe_u zdBco&&5*ol(wz=Y083&I&QeSBV`H1#;?uNUwvaC%8ZKvN8-oIjH>vmOUZw+HVH43m z`|cz7Mmz-m7{Vd~mhPis2naqUR_#nNfxiyD!|z^a9)i}@Q1QH63Hf2#g-nM z{AxY;R6>) z7$2C|wUzX?Nn|eJbAq6qx9(o9rFYvl-(dC8`N*$a?#)g_5MA)ExWga3zvAwUcO%O# zBz&aMIN~P-Nd1oF`Iyqgmcq4kyU9sSxFs#LpW>5Hft$|9X@wJx2C;DV>_1LV&w8B{ zUss`Ko!K$nL}}vLr5N-ZhY?#HPF!YkbH6-Vib)AQ2b=>@UT&U!%|&Kl1n=4To)Yc8 zm*pWD=aHc^WhaKMksu-=Zw95i<~EyfOGx5RJCaK4*q8UTRdrG4oLZDDde5n$=+bE< z*sMbz92P_M>BhvQ&<#+gVc{*SZ2Qa4pU!kn7IN0B(Vfh%%zV2ykwbD|zlaKJOmA;) zDCkjRwEBRLo&0r!|CY6+wX*L#3*7gLR6$1Jy6G6U^J~P?v{rP0=ek6Inwskusq>>g zBB^Sx_X-EaB?bnKj+t=Noa^=oBBp2We#*v>tB>K9f;Y!t&xm(d)65VtF-cG(=ajt= z4BLO=!MV?XD?IN6p*{3>6j#t>mk%OmL1e4`l^R+o>dt8BopeDl9w&+5enP`c_McDd zqfAH;n}Hf-qK|ledorh_o8Q}{(Yr?UI@5$kgE(=l@&@Hg5V>m8Kht9)& zYGmh3V^X`fINzKhBJ2%@xi{Ktjdc690m8-yZtAC|-zX)m_qI$+7~OZE>_~zhKPu!e3f2(z;d;h;o{Z`2uQ#|ml#}zoAFagM<6DpBKHnrPw9#l@L!4D%_-(W6!ChiM za9DiH$xLN`n7_aAff#@e{-ra7UwV+H8!PAq^cnZ49o>(^?BmJeR;;w?PrA?=nBSp- zW-(BJo5~zV<9ps!Bo{kRc7L9zlglW&o-~-|2@=pqA{uZ7-F2lHjPss*p>m`D0s%_^ zDUF0IOn)AagT0$g9_*AlL+t>$3Z=92a!FrJGNbr9=EXJttfW%uZ6&Kku?wD-6XWd9 ziPb>^w#g%bSx-8;!iRZdSY~&(F3!1?jUrE&MO%kC9n>`1l=KW^)?*>0zxcXmZcf0D8qruXC|KGuNsI&=KC^j z@J%;{>*0~pD_WjJRt5EUUkHDlUkCSMxMENmTQ9lbsT3&IGH4ZJ_AaYxSK%zy-`7I7 z;qD$^KI!Rx`Ye72)>bUYQWRI?ZA9HIb(pnPGouqk3BS$O_W`xU>=d{0Vo&$yO)-2g+V%Ajc}u(H)2VD1_2Ys#!}>R^l@!wE(*AAP|vZDZiRevpN55n+j`>f<&i1FJf%TEJ8v8F z?Il-P*Bd$j(i=U=3NJ>dE+(6>szO*N->yLx3u|C+my}fNk5O(mJPDsIg`|4R*RyOj2fdBe!bC2V7<9*v&)MB&S zBSrqHKfuV~4F9a?Kh*VTppX=pAuXo(E%n1$p79~*D6)Ehgx{Awt@MtBg=fm^wq7H> zo0Wz`o5qNY9QID?Vl}utF7nWt%SPn0{_6P-N7aI{$nK^kfd63ob-7jqdw)g)<0-2P zchLw!&ju-{>ejo$XC58^)}b$R!}{4!Gd$QxUJaJo*;Q+9WHJ=1{Eu70M@{X>BN`Qb z_g&W;@`7drfEB~T4y!zP0#-LC+3Iq?imp-374yKfQp1iy4XTquaI~Nc`EB#nBP+El zqRKnHAx(=6Cb@n?3DR3}V9xVm*iEOQ`~a$dlKW_}v6_ih(A&1=SPMvF9-d*|AIE)i zJ4bGh(r-e#c`pJt?aG`PyBYR3DmHR;YEj%6c+gB?MP!E2UDChTRJk!b2p>TqN0Pv8$H5~kn^rk5tx)dl3&xY=o_+$bRO%%$cA zQp0B{kH_J1S-;QE&_jWOwfgMOHZ|-RkOV$ald#2coL(00>PabMQQs zxoDOzQG2ILUW^d&2~1^ct!QQt2{O4{7=ITRzYy>ygiX9{f$sOCck3FbVDkBnT}Oz` zweRl^057_3VbPOrCtpQN5GJJY5v|QPv_<~`9?Gn+K{9>QefIHgTP$xq|25pIL>!TXzKIO)pEXk-CLay>RwbwF84nlBzqy z`JMgeLcd=ZlW*2NZn;?j6+!dI`V}7g9H4h!KJ_0K+y4-gaU(wuvyMcybyGIT<1Q0HH8wq$jcC+SDLpU>54; z`r5ZmU;o?7ti*xxU$}+Mo$r1NUT?deeJo*h`;v#>!1Ap^fF(aKPiHa%>)GmqGDoV%6LO1RSgN@5The<+U!1n z(O4yEep@&ZCtmH~+C*9>;*y*|__c7*dgR{9SS@H@es=%p72o5q$;B^uuSgdY z=NH$_Ax zp;imjwUw1{AP_iY%tk%$#P*dC2Zvd>Zq1hS;F#M3$r}J^UZF65&lWO&!NbeD5;)|M z1wD%Ea?;@B=*YyzX0i^35}2Kg=V~n-+cLfaA+{e603uep>5l?!zwX1m&L6FA8TsQh z&hPK;wsI5&4f|Vel(Em`r6c-*JGT#~=>s*nTo_i#rhPQ(BUCi$rW?|`<`lWQ;4mIp zgG@c@^cPOjxibQAcPrgKza4F_;goXG`!ztu%W{AQ?tA=Y_y&=LSTiPEO)RKv7IF-@`PMSJQQ z0NnZ?+(Mwh%?JVw1a#)_=oAi8GR{*StG!l|R2BH(5?C`V&AUCYk`~4l z@P5X{=bs@rj@ZVFUZ=Z8iD!C_Nzq@Ybn_DUPtWXct3Ug1tG{|>ZH@kI+6+`XZoh@8 zy^T%9)MV+_)+dl)>H@q1zk#U1nt%3*fHydou`qeOEq~9>&Yo(hEo$vez@$ zy~1ITN4HeKHnmJHHW9)C$mod}WHPB>*|p}e-fLD`bxy9(Z1gRMiFDP^{ZRCE?N%c_ zkg^K5FOi$i8o>oh1ZvCk!rSzh3oN9u8Xgu(1K$ z&Kp0U0{|yZ6=n3pXX{Ddtjl)Qd3hYP3B$jb>3Da&aF~k zI6yQqrF#)cPh3p8{E*BLwhq*VFgXRC1~AgSFIbYlnD75S)Aa6>#yLgs_0U8RNRv9* z>p70s7j!4Bder8wPN;{DWz~#FoA?74){_!UEA(6;%V`i8_T7qqHFng~y(f0DX84&l zEvJ@s!X)VFfmYEu->uF0h{jUEw46V!?a8W3=|NW&pM*D%fBXOd@I_>*uvY|k)pVi% zRJr7%o12urbg|Y-r9}XK%T@NEABjshlOxb=l7s8q;MNP+nXVO$wu#gDfE)BD?$>Wp zr`7zM)X|1(P*^pWcSJSFsA3OZH@&q_^TvI$q%QA>Xa6uSB2IA(4YFwGDVe6h>SXK}%OKi~5p-sBQ*MCu*n6dioTnD|f97Kld15?=}39m=@ z{ZoZ{Y2q#Rdj(CdT8uX3jo47GHb~{IX-@Y^2FxdPoM5f|FfO^Mj*DkEM?RdvqKzG( zoU7w~V%Bf0nKtxE;C=(jm<4UV;w2?qYD1GlD_u;Hu8G?RmbjhKd!J@C2J=BuZ(ISp z4K@F~S|&g^-H)P;XX(qSD{mtI(F88l)AEC3f1eWRDM~h<-Eo#5@@n`4;*#4V_jVlW z6J4Iq38U`#EjVzCwT*Ac6tE4vnpSVTkrR{fwM(XTBz(@|Fn)z3Uw@$;mFbl~3BTC) zvsC?=K|MD;1P25#r9wXZRW1z!_9HEATiEB5<8wt(x-|&(p(h(TYdDJRTD^ofR$Z_CBQPP8$&L4~F_m=v+zc77V` zv&MXQY9X|HIFU~S1_kornPbU{t%rr3Tp>IL=1G_jd{lpW4TTR*_yKEoqgGspbK`+Y zXvutM=)4U)+P;DHkw53G!62jqTpN8dzq~JHecF?w@v|qH?~QlzP1yWAq2_YEzjoh2 zC=rO3VECT8`taRNa^~LN-adAzABeu~eHhR#jlnkkw-lA_n@rvI)L+7a4Jq(d+%R$cq9Mq8C$-D6uH{VTf0hLV^2%RH5nl0<* zv0y$=1f6FVrL~NpL)fCnpW@0MkRs3RD}+V=>;(YN#GpRn=YozMkw;I}uUDAn%R^G8 z?(tF4JRM9nV*S+8oBwjZ1Ny0SfiJ+IHgC*`tpO9=ckma=L)6d%ZmzePb36{Bjue$t zy-CNJ)&WjYvt5S&h+@fmC{rwRaJIu{C!lea(q+pUK8T{!?zV#SqAO5 zuwhCqiNmE6XC^&Y~x0_NDfEEXc0fQ#NJw{2pJdH#|5!*^7>n_<*G{b< zerBdVm%0yh(`mD5?V6miDuRLgDN?z92Ye_T+#;j#&q0V}Y3a}pvEs~q)*Mh9mvvamAou~|ojMn*Ct*aS(jH)gpO$e*uJ4tzdA(Jx`*D`Thlh& z9orq-w#|;6j%~AJ+v>REq+{Fecn2NZwvBK1dGF^P&wWmx@7FuV`mr;{&f0U;s#&<| zs+!#R9vA!;4MeA$q;ULnJtsBW6wc1lw0ezTt4e7vYtPSd*(sr0c_1t=Yu?Weqm4K< zUnNW2J8VxaSz?>k+zD)K@UB(@waCI;qN6t-h8>|hbqa$A;kDSe9>SGt)eX=LjcR4! ze4b>$5%Bm!f`Z)4wPLlJ>_lX3@EWbx2)~R)9~|Qd27wJx$YlyySj0p3SXqvLKSuww zYXp>L$@e)ILjH43L&MWOzBi#iYC*L<7$z-4#zX{5CL~A=6H{1Zq?o68DD7vn%g_;& zgQo#+6l(dP(JSq;P&Uy!NfW1y7KjmleRu5`jRwP(lD*6$o5RQDMq8%bvmO!g0!>aC z54PA15on+Du5)_SJ^sg=I!di3h;$B{RJf!Dwh&dqqQW2A_9c6Js$X62H?Cv(gOZck zz3ev_udZt2lar&;ZC3);d7nKONSoK{OW@Kul5_KFVPfKu6V+5Urx8~|ft0tGr|_c9 zuQ8ITt40HJk2iOB=_7|L8ML%|n$&|Y5X*Kg!(f-s{G5cF4WmIz*`7N@Dyp-oRj}j( z7=N|{*Sf%Ly!}0lv*(dizeb&ubTwpdPIY=*SlW$2$I0uk5e+XJmL$l_0de|2e@Cyp}mT!Zw0Uq_efW3`$GEkhFcRqu}uQ8q(TusN}NkmX|9r^cFOF`gYMG# z9d9`Cy&r^b?rx=dqE(GejZ>Yz!U5A2eT~?v(n>ZVC*VYzl5c0<&~f+2*?=r2N!>wN zRYu6Y5pft=myf4Hy1Kgb@5}~Y9g)YS(+(JXlzxoKy4dpPoyPB-2TJ1&djCT~{nOBa zo@6=?*KQ4#c1GX5v-`-ZelF_IW@a-B{9tD24y;?wEJnO$D z*=>lVPZQODL3NE!#TW>(MBy%JQB#sP17rFxVRfXuU&-XwGr)Zit=aUW&O$8CA3?G1 ztxpd>19mSR-h1_l;@%}<)&J#we?3+;BN%^;K9C`g)p#M{rY#o*cN>8|kED&c&YVH^ z$NK~ElIjKUJz8~q0s@X>&%^wFLlMn4%P3DisD_Z-O#r^zs+@8QtzG(BMdWMX=Ig&! z&d^e;K%Axmg_m`KB}ziGVO3GleiCkeS(wDX=q$RiuuRa0Vbv6bW{0Yzg&5!O_h=Tp zGUl7*mm?nbwr4mg{tZCf;6_WmjWB`dHA<*O&i)pf`^IjJZs#XYo%Gy>y^)~cE{MOa zd~Favvg=>@`RA~MZq+g`BJ|_KiWW`I>+IxI85ikKFVU2xrZ@qfY_LJyDhv#U)WT=y z$Vhp{b42*NNFhpLhUq%ZK?R($S<9IDi2=)o9J;?*; zD1>ceyCJPwOq827YPxL&O^(I=0c$bbaCi0HmarVT=Jmj8=eh|W5ay3vj+WJO-B=6l z^!r^GSJZI_QrKa)woon>INoW1g`}TO^6x7r*A~Uppqe}1TP?b=-DdXvUrn>Y8nKs- zUO)^Q&gS)1^&s!S@fkQ8wZS^WYuJ9yGSMYp?>uRWtZp1X(8Trw_SvrI)}}ARB_$?? zgq-^&GeZ_{R(}3K^V*B_jSBi<93+*qGCk{Wmh}+sJ`=Yfpa&mChqC7xpOzUJHbj|G z!5tS+<1G}$rnH83<30ir@Baq3 z|3_rn*&qaZC|(u!bpAUEdNkT{kcQuC8QGbQLDqK4$%d%c!V=3(3Y)GLh6oK&SjbfH z`|b6X6PFCk7qCb+&4HVief4WuT1m(p&Ag4M;-Mq7w(?6)QBZ3d*W(ZkWwH?~;VqF8 zh^m%4CXmn*m!M`IV2UT-x3KUann^JqrUL*+AHUk6#2t%UeG7 zSIw&!V#*^EJ`u0uf(yr?PqrQQ41J?K9JTBu~%-R|~Dii@QsI^AXk zMm`Aw?`7S2uJN!Gw9Wg6im}^0zRZMat_W-B>WK`_2(#=LD%;Lex!?SP!HYQP-0Y`a zL>aP+`OZrWARC7xY0LpS+)b4_POY3iA&wiF!=?+Af$!dq{3N;60+kzxcagC1q28L6 zU9Kn#aQIiP9gAeYlT2R;i)=VGeBpGs`4B-y+azu8y_|V3ZQnWKmSoei2sWrWR&L~V zd+Zx?*Juh|3Fk?hFKBcL9Qq`mmd5SOY~!_O0F;_aen`gVTA&!HXwLm%wVR#m%17V%84X9Xn_Z9U?UDq$KX1`3oi@J*A08cOBV5ObA!(Pp_ z;dI#fQ0oYbgo6R;DMLGF+x&6;d40Y2*Xy~_*b^NlKDMZ}bpUjY?@R3Zz$W5aPjb2) zOH!LHv|&o6dLV()bps9}Nc2xz8k6`;wK0 zh;fDSTj#>7TT#u==tq{+ z_S5~*(!Zu<@U4uLDN;~IgdJ2PLs&d)o8uM!3U?V6;ldUdvS&`G|p3BH0l&cQFl z`U@&b@&(buWCD|1ONYr5592(p`Na}63oXBM?o?lpr+by(XnzWk|D8z6_kuTA%(fRh z9cyjg-klWR+?2=lQR&RlKZF!k$f>gtChzZEcqxJ{IC2)wxmv|HnD{AzZeDqMRgD^x z3X6s{Y4?MlAvS;w72!h*!@8Y&(W9?K7{Az2#1T$?>TbQrq95njvd^jOn5~~UI6uE_8jou^Dy*OY(F#+6 zy}$jsZMOc-LrPYZmtzjiPjbp!e<}u~!l`glY{b5u2&7$$2#d%>!q-V;*Edc|*}{|D zNXO2L+id1;21D$ddGlZx^id5gF;+-GA^e@!g7jdW>!1wRhj~WEi?Z&BmkvR#<60KE5umQFq;J|AFCq z4pN6nJKAfjgvT>89bsuEvcW%&eMf*%$O&9(tiu5_P)Qq%OKs;yJq|OOSnH=A#_a}`vMO!DzxW=1nFzd&~SjdmK_Vqn@o*>1qMZC1>T6V}f=|YQU`zx|Q#m(EMz)Q5s*TGH1g5Xek zkcWX$U>^fMI`7VlC;k0FyuxCI-r2Rm>q|PNnJ7@^+#g?Q)=V>Bcszcs3fQIocYOQ- z96hR=7Ge}dUn-)+J84jBAYR7<)X?OzbFESH>rA#VkRf|mlws1l9}}W%Kf2`ueHaX^ zy({lRlJjRuRq1ww*lId^Z4E&VC5heCH`RocV}E1M3=e-z8k!`3B>1u7x%);QD zf46unbG9lQskyF%{2|3PLF-f0krIoyMB;zV{?gX~o;=7taY>Wu-A9Gr|W z?J$iB8b{>4`qX~4k}x&u{!@mFga#6Eq_Z%jZt9&Aa1-=)dEW`2t+MHJSYx-91=*!f z9lK2iHNQ5oq`D1c))~%sWXCJC>rl6x_v;|~jDrnhmmjD-U>hKh00(6Q2@oHem#CisT%z0;iD;GZfQRErNab@@2_CIc`| zfZ-xM_EZ0puGP(p{u?*Frl_l9A9g5_h!Hkb#A?+lV_KP~&#eI~M0wIIP+Ht}d|Eb? z@Uw`O6_Ofvtk2{@NNF68Gpek&5X2;_psyEp5nTFgo(@}9Z#x;MQTCPXWTp|}atcL6 zOYGnpNDrF6SAS+ceq4GI(o#sZG%5ki9_{B%?M|wq;#G{1N6n$5Q(0g!`;cl+!EE_x zq{{crU}V3ts+LiOgG)!^u5~C zJCs^f{F9$8 zYRXd}7B()1K|d4xVKBq!VMVPorb+Lak3X^Wtaqy*ENQ#mSwc;`47#N1CT%SA{xfN+ z@5|+2jn#bRBO~7U@21jjaWLE|^pf^=?YB1qws+6Vcu;begDzu9NlBsqlbB8=TfDtH zo;%+6{-Zady85rK0aaMda9oDSOJ~*$Q6cK<^xF;+L&A?cooZIC%koEc#B2C`+NiUi^7l9c6m#j_TJtC_7hLM)p}KS zXR-tJ61(+-`Q%Ga!dm`A4p-WPFrA$-33}=g&jnj;4K?_~7KbR@&lgp-`q?5L5@oS( z;xtKYn0in+K(faLl|u}g`U(hKGRFP>MBCpgebq={^fFXt1_RhD2w&O0f8Z)}Bk|xF z??ty2_gJH5RXr229EU0S?rbRdL}!LpIXI-i@x(nLOQkY*2oW&f?WCM%b@wb{yjo>Y zuQka3(x&!yv5zY`4f zC1fSW`F!vt{R-<2AHg`p#AE*8)5Hv;n&BaAXuMiV+ddG|6F{^Nk^_8!gp10pVE4IX zSZ9hv;4biJ>u4Ch`Ofat5qC>+y@BvAnUuoD6KXT(Vnz}VZi=PBX?}SH!y7lIe zjtlBHmJ}(TD5&~5Z^|zK1kR`Bu>kMwr6Z!auj3<8m9`4->UdMk`Ksuv(_<xS*HZW+J^$QU0&KWE{-Q4zU;-cBfEVOxElM3RYw<_jz({@^< zN={W5fh-*zCMK@1-us6q2#84m#;}-i`Y28v6wXkh8N*;YT9D{y*@LsQEaZ|7g1OC> zCV9y)zL*{ZiY)hS5!S|AS@)CNcqXs+5Gr%qSE8vw2hp?Tv+-P*Q?h{Jg;D#esUs5B5VB!g4+R}h?rsuDjHHP_{yq0`|QCOC0TlYp6%FTa9+`k(> z89_l<65PhRMLB`(Y!QAT!=OsJyo5<3flq9lVV!Hba0u{*Gh7kBe#H+n%r7iNtpX=2 z6sL6G_`X~?E0e9v@e!VqSr>mB*$|;P9&=_ztF$=y8Tx5#iarneIAx!ZoVqutQ4!@z zlXRzXG=KE8XSxcXCAYb;hO)|La4p|?in=eb2|*>d!0LmAB$J!FJlAiu{VR0+x`3t? z$nplxR3n-+>@*|q7W2o-kVPOpCxMQ-UP`lXhbaXI$js_rGjc|Op-783R=fX_V>jvl zl&ss{cphcpfQ*G7l043j8p6OJ$C3M3a-`Z4YMwpBo4o}!9Nhf)mW8cfwgOMcsU?!TAMFS6rwJMxnIqwTSW2l~CLkFiDcavyT6}*#fRmyC_eV zpB(yI5DuMrLn2xctaUSEPj1{e$pCy`OLdnVg9vHp@U5g+WEtBmzI1|Z*!qf94Tf?b zE|x3vD$kRDn%5PT4)c`OU}~(S5%rQu#5zxo?k^N}`zk|S8_1qr-zO0f`Hgy$R2f=F zcRJ*j#!-gA%zbpFO_j~FeY=n?ME5zQ0leASsYHca{89XyRmxtGA&@Mk^vNbgcg%qN z$Jq%UJJCZJz&TUJ`1lQ;<_d`-X#~B6!g=;>OnPVK6i3=VG^5I(Ib>`}M6)cfse+-G z4krQ`%M=w+eiHDQ`1eHPuZ_H+39P#5MdDBBB!bXGTeC^9=hg;|f`Y!*N@RXlHjt5 zi&Z2H9!E8J?|o+va{G-gSMpv_8agJobY@`VFGeBfji7LGou3L?mSF5nQDyTmYhSZt za`pbeq5jK)ecte@n@Pip%~#lH#h9etQPpUl*mX?9AJyzBe@!&X%a8Zzvvun`on)LQ zdH$9hvsFS)VM&9KW9PP@GDSQCBYmv#@?eDs1Zb>AbeBHoRkkdHHPM&Q&iM@R{J5Go ztBnjixDj(BepOACu6Xuw;Y47c{wh#B^pi!OepyV>i!5u4N}AN1O?RtJ%wE<9 zG|QAmXL~-A;^xykW$|0)ln=U-2Uwk+mS3M@*{3>uWfHAY;W_4CZC7o zBA_R7j^e{zw1D1gY3!eD#NM2e67~dA(LJHPXJkb-q0&NQ3T)_rLr4@e(uwJ4tWA9z zgT}Zk>1$KcP-4qx)a#0~Rnhi`xuQ=y)W3WSSFzB`)obOjE436~9@C_ctHwO$Y z*#GoXTv03h@-1;co(NyH75@uA+gI@o@B3#xk`V)h2sidt`q3_7y=p=aOWYQk3J*Ef^t?;;nHMJ7G%O^7NaT)$$(&uLlw?Jl0LcU#7kwD6VZ(K_ehrTEzl1# z81B2>{~j@R-_mtobsPh4ygC-(w~8OkR;DHy34vIyT1M-(FLb(Cr`~E!wZ_jw_^Bt* z{<-~%Ek;)Z*RGq4&nIx-Ac4QHPi@_Z%PnkUUo{fkD%lta5@xvLP#=3q|M>1M(`yXO z0U~cJ=*J9;abJY4{uunK3;xcQCPVv6#tA;!>?OWqCesuSE7QK2|2$kMQW@$>ppT?ggO)iuBKg?R=#|nsc zeRrbgS6$XNe;E7c`}^JBpuY*Lt|c)cZ3YKND%`_{2oF z9>Jw_X9Z0sQZk6s6zk{i+&;>x;sCWLwEZ39%|<*9X?a!Ot{qs2=7WALt|B16M@jix ze0;or#t9%YCiQK!^2|1aXWma1XS7fNY693l@rRf%)#>*f3b}DuT?UZW2jG-kw6`7k zH?+gULm=iEI=K7OrtMtJdd=fy>s0E{6+2*ZQo)>HX1H}%0Y|uXX}l|oSOPczMJ|h4 z9C#j2P@9Iit%aD7P!?9(-3eFSkeY=ga%rhm&3iWy@6|;SGAgRgX92f|;-EhG2S8wU zz?a@b7BlJs*D~cL_XhztJ%ip7#7u3C~-;vmD)fpl` zkrOjB3y)vswcY{GsmBNr)o5qr=GJ^78{Kke4jJA3=I&+?-+vtvf_ov+7MHkVJTuQR z^7;g%%}|_*&|+d@iYhxrrio~I?xTUbVg5-XIo)2!zyi4*KlHd!548G^rb~{_OJ`^g zry9F;emF!#X-1rYp9_@bW3I&cP0K6FR#uVqfT7l$cZY)`TvBrR3U9Fw1N1$ocunWs zWmO%)3_foL3%#T{$u8Jc9hWgT?k?$;raCH&{QL-f9o~hO8iBhG7X1!|c_?kJr@$IS z6qYS;CI#xz+uc0_p@{J1)s@s&=UWNzI{2aynjaP72nhJx0n2vF{zNSdMbqJTF$g~g zer{a+LSzCC97>vkb^{(Tbh+_*|C{mCtUNG3vKKRMD;gAdOU z&n~=s=dX4hH8qB$adtGRg4?_FrthV@+Z1w;a{n@tsv88T2JM3UlyXjQuwIvudZNuL zN8jVv2<%4#TxX|}4f{uu3JXLf9df}&-t5(AqN`k{9dv9F8?Bf81_n%VIo-gH=gL`6 zX*0%|lxQY7e?31ZC9GTmZ!*h>#Hj8pr4I-d0x6NgSysTV$><(pUL;D_!8Kl znnr7|xve~5Z7LKSedw}YPp>6pWs`jXBvVF?@<;e-nud6<}b0P((mcS`@q;L+mx$JN%>UcZNUZvxU; z3cBmTKa=u${|C0Th`p4|DE>6+Kgn(H{kl23WOnLae!hIFxJRcfNqZg?8VZiU7VB}| zs;{T7D6q=K%1S#sZm_4WY(w{a!wn>z3LMR9YHGA{Bn#hn?zFskdO zX5*O2`pe4*YUvzc{1aLKEnEM7nr>f~Ha7v!wLf~~--)oGzr}B$2^~j1?~nfH_jjt@ zz=0aMHj(A}=X~%lAFB!U?nV6r34icmfBg=yBBKj*Ws&!F`ZT19JDaUQgWrh2#4>$tWb#&z#fX4gXIr=CAPyh-iiS=vbtWFsX58pZ}A>Tu9Tc z@80Uj8~cC$g)tHY=&7OL;l(5*hD@rqt{;)`@ew3*7(C(D|MNKiOPc{9z*R3Q?51Ap zZoqJjwP*8C{MC2q9}o~gwO%}UoPJfq8~2aIkP#IqGc)0MBU;Lj6>m5$Q3eZ#{>!_X z3QqgRz$uZ(T7p_yzy_*Ga3uap_<>uxp0wh5 zf^3rCbiw7F_0!QxAtE7j8Q8zxd!r^D5Hona${4PZ|I)M-xVr=m(5Fl@sliDPuWwTc6xgk18n|HZFjg-b%xb>(}$@>{UKHiWZWx5^5a{8DLES# z`rl(mZH2EZ#6RuSDIxyzNytKJBC5@TQB2CLS0a6nOl&ovGs;=vlsKnw+80M zaK98ctEDau*|eNI2>6=~fjHm4~!*Q&eo+4C9bEYFpR8 z<2zfgLhN`TZ#E7ish^AKLE3S5j-SWiB&S~9U}N*Qt*i|{E1-7V3V_{&-O`AZDF=#!BY;IbxRktb~%kiFZF-^L8<@ zavt{15AuA|>XFSYzlwpy>f6!9nEnO8&|b9hynTHvF4#3+Rce^lRo3jo@3jW~-y-)1 zCk7fPe=miMy%*$3Mnx^%C@DW&avS=3m_-6csRQb&3KZPqW2D9N`07Q9;e2@zvG6q6 z;Oo>39CY$Q$ptUAo_LrHtHbz7PF#)(nxC6jpE*gJ>!p#j={^B=&6Z{S76mvXWJ*4) z)wH0o-Rcx`&Kn3z!IRgK5w3QYfSIMYI+Pa9{#XaX-Dwxsry^|j(%_8{gB(>1Kf}O^ zlN`^^(v#Dxoz6p@$-Q(G6JuO=)KkEUu%~Rb<0FCnr!1kM6vt!>4XKRWQXmTOg`nyD z(Gf5SALhanl(^bGB*`1g$2shdy<)N~go`tBi0&(xT^roJ^}vP6%xCS{xz=L7571-r zfOQ0t49Utf-WLm1sX83zL;N~U+07wk0N+IEU9!d~v{AL9G|cOZC;2k;#6=|f&E!#g zE#aDtbl%hbT99qaht){N|dGFJ~0dRQBCuZ?SZMKzJuDem*88Ofe;4oX! zQ8TCc#@&Ncf}S_jeZYP$!7BojT2%|+Fc<2T{s}IYMsiD&jT;q$0OpGI{&cY z-7-L9nI$P3(?AH$3YK+LNE9nx>d*kA0jl1#Y(njD`vPpWfEYuskjuiHrWv%lt!xBL z%1$6A3D$M_et?EXv6WL{PUjHVLxh)|V86{F<>&|2@b#M&HQ8usWLRZs24BD!a?$}Oo~}19o`0` z##_0hr1$gyKe1Go=R40+jV#E1AO#MoTl7ze5_a1|+-@dlEu$YE52;{%G}6pKEGlZ6 z&1ULz-gz(2H)Ag0-nE1;bmVaBwbbjtp5|)dDgWS?)rx z{#p3U!fy|AveKmL`2GCQUJZ_q>S8RtJ9P^+6<|8veWpHGR1V}hjh0jnlcuP4eEYyz z+^HYb1Par4vgT-q2ecqdf50qg-3e#EPV3q6FQHuoV-XQWUM0qoL_11SKmSSDBTn0~+shS_+Q2U5&^8>m=wY!ED)j^*h^B3^U#p&m!d$6pZzS3ilGZXBMCJic=R|bGPUR zQelT%6*6G4>dp{RFg0PE^^V_CF~@NWFf}lY0KvvO#rFoCOe_e{qdy8A#ZZUt;jv(X zb<0wAYlJLA9EWN5uCAC_Y zEAS<1#_a}(w2^2e{1hF&RVifH3UqRkvJ{i?a>?=1fW_)*ay6bd$T>Z>{P88iELGw@ zm!}W2kea^vHl%q5Jvct>O0D<+x#02Q5xkGXRpOT4G<^Ec{XC@-u5j2>-Dx<_G2~~;;-K?n|FlY zntvTQS7&nEJBegE^D;`V=JmO6@n{u>Qcx)56T!y%Ic(euof8k$k!3)DsFR zDz}Ho9NB`?h*g7Gn+_~PVn`8rgiOlw?_$;_q&-RzCHr*lA`w~i3mR|+ST7nA@75Yo zS-bSKxen}ThGnR$AZ?Yco7*wDnzo<{SitrOk3zu|*E{A&ECm5H=~cyj4I^5sgavJF z&jbAU`bHGQYnl+SMrh(zPrOoo35e+p*dv@$K1^A0AuT|f4Ivg$S~DjTD!Zb1MQ4lL z-FSw|F9WEYIVmh7_vC}^wYOhl+$&LcYl_@Pg*(SPK_)cBKBgJ6zs3w-4HT%gfO>BT zzVGI|DqLncXQ;t5`%(=&`wS77iEvj3G`!dn~nDph>wQ>kEaUln%>AAq-bEiCp*I+88=~n+>o5RI6$jFb( zpx;lcg3VYDCxUGES^(E&l?*BU(Tg{zAm<=wng-N}l6=NR*p#4Pyes)|TOIb-Tg zXWV;RxtL>7#-=w)iMLxVJkW^c`D8`#b8zy$?N$^LfJwhc-P$Y4kr{gdbE? zyrB8*(X0^n1}4v>1+juPSZiC`X}mao&F%4gEZ5EWxSa7vidZPypOy&h=PEn&F9 z!>{Tmm7i3R$3wAh(b%ZGly<(t4hogu1iy6wSPLg*gk~_7R2BS8Iv8+MB8QW@wR)FT zE-+bqJBk4^dJzS$t<{kUAY9-!1Kqt$nFUZw4n)0}1Jr#^5hEEG``RH~${8krsK5Y@ z`zU{2%1%YvGd}?)I&y8^gX}@?xhfnu#FId;g(e2Hvb0m381P3cDozPrFdD(t$4Yp&$jgliLT zM0F@}miDETq`2LqD?p zmP400?}inON&J=}Hr6m2Bb5$!Tci*?%LbTiQm+AjFjgs=RvoOEIC{j8T$~uY%|5_X#uqYdo1a%R%cw51Uz+FdHWK90{=MZ3SHGkh9V#)^0;t-ahz{$DOA@zMLo`e?&(5+vOilN@(Ct zY++S?5ATmu_l=6=zKm;eqK{Pxfk}(Y*n)q5^liZF^b}zLb_h_?!0tWrh&5R+dx77- z&6fNGydfp8zgMt{PY01h%f-AH$=}U~9~2x)Ts7~I@PsI#83;f{me9&YVF*hhRfhmA z*sIa8@IZzKuJeu`z=aqVQm?OHScg&Yi~?;I-Cd(D!1~U4z}1$;PFUYvTw02IurJJX zvH!rw*HQh$PmdAYIf_F!Se0l+O8QojRaa&<_7ATRxE>j>k0o5FLK;Teb6{7OOuM3# z<)4W!LMbb=w~>VE#0Xet)3xnoWL_oDCApCOibC?Ihqzu7FnDk@=Ks2FNLBC`M?H& z=W4Sq4>_S|j2)6JFU{Gqn8~<`Uv;3TtwtAZWGwOQPA_vRPVR;uK2U>8iVCSTveUwttE#D4>FDUpO*xL|se{Evg4Nb%SUGEq zBoK+#UErF^0?!Ok7Z)$`Cez?^9^3r4z8A#i$9C{9yr>p=gke?OupBfG^ToHaYJ*%6jjP0y3tC6`^891G`N7bBaP9qKvO5|Y$>J@d8A=f8>SKZv2e%r__^Bs;G+!8 z7v-pOV6dv&Wf-N!gmIMV>eFTD&7UAVgGOTJ2n=LDIT4+0Y(BT6s3TT#v+;t?MgUE* zuwO5AzoDj_f(*Qf&K_i_XUzPHvO-Ma=Zp((RmC)-MB$-KChza4)|6)AdD>Pm(W+R2P3FV#MFqjGDB{`*Gkn*%MZkc6{p|`N%8A-F$SIZryCM=aU>zd= z+-OTZq%`o&TgK33ag+?nFCWQ~;VzxpR5YbKCNDR4jgmZ+$dqDJ9srziPhQ8UmA1{8 z&OJStHeq2Ff7sn~Vi>Unpe&SFU6}$Q;zjD_%7$XjD*4i~k2IOK3kd$O*wxgx(V~!D zL5j=Cn-IKSN+?lB2X6W#0(shtRJ<*hYT8AcS@L7~SO`p1KTdEh8{-WUB~a%e?e800 zn;p#DY?H&1BIQm#RsWUd4JO0a^Ra@ldTMSivsR}F#ig0bpn}iBoXcOAHETQG3|cg! zH6m`zhO%b2j(ASt%Y(@p8Ex$T7Zp7<+K)a^ij)N@Oe}646c8*)-lmsgeLa|HW{1CI zh+0Zour#_F<>m7R`vGtV zNqe*oNB~W+ng?90TCScW^pjccDR|eq5jnGW z(qRGs@wjzKlfw8u`A!p#f4DwdKlhzUfY3sy$ECh8M;2Tf2Ytfnb!P4+a;tKQniIb^ zkE^ooS`dOozB`XO2J$|^?iCVXBLSz)h4?oP_;C0X(G5JYE8KJ>cH!(3YaKi}~QD<)1yM zK!_Q0!EV?y6jrch{@ZTogMrAz86-Or)FxfO6750h$eFVRFJMlkvP@CwLJY zGP;)c7^WC*ny~tpvu%tDnMF+&6eh2>9BB$9lm-${CbCazJ!miP2b+|&J0AeMk>^B+ zN@rS;o&5Xrng|o~5hGG=9lg(=FsS@J@YVir%runn;r+hkJ$MgVc1-NQZRkK`w_h>b z?bR#cxdVbX(s0Yg#({^)5<*t^qMFZ&Nv3*6EXdieW_1+$p79-l?~(~m>;TeU|2s05 z0oLftKmhSoMEcx9UctQP>yMC+AA&Jil3+AIJWRoSt>IG|09>K87QWZVwmefoE~qC(yvbZF z>8&LsCcd}UDX$xK$ZnE)oFtz04&X?F8#)l0VO-jT0Q7y@;Dp?CQ{!ooPw(J}wY9R(GUE}%!Jk|VbqsU-euk#2g( z7mFjnqw``7hzjjFPlA?V%^>x7*n-L=7k%WW4_U8VGWYE$sth#FKbMV}%;9SAH zdbWZ?pF!F@9K&VK;*Jj&)>gUL=XpNa^=4}GvMfFbFkZuS_J+2y*ftbr7` z3%#4eNk55J(+kMS@UxfcLl!=-adowA;A?YPIMO<=hQxnUyBjUSZ|Z}*Cvs}p*o>C> zEdC#_xPgLv@xCzp=zI2XujTU|)gp>IUHvzmJLdu6*GhYAdqjg7p)HcnZp_NUw=y@c zmP|Oxv`v*4c&y*$)aDq8_0DyoO7iUCxjtt}slb(5jBUEpv@#nZ{%6V7Gg?PbbpM7Y;IlGUp=EYFzrJ569Syjj=y=B&j_lRFFfp2Q zzzHKOi`jSDb|ZMZ2({@6uv!rgw9Qc@(0BQWSM`H*cfbtpB=qg44xi-nsjhjvilr0n z4d+_|5B15!d0AtEjbyr}j^UtI!d=n2U7gWB%8=n_J;2N7Y~&4NPnl5@HYccvDcl&G z*cuxss)i2ueDK?v1CN8HVvyCRx*P#0kE`6tgu$GM=Mmin(HNk@S+R~97uXE_f{$_Pu zmkZ;oADS1-j*o1R2i(n`RomVM(kqbfaP~F7ugV@Qo5ZqdzuG(V+BJKut-zwwHI(h? z+Em&30FSl6Hc9`Y`ekvXQ^c8gL%HF&BRpOSn@c&pg`(5PJp=?_*tynCcvJqlZ8Ww1;~9I$z=;lF=cX!((8nO_Zm>SS8tOuXD&^Z(U#-r;a< z-5-x$5;2J$q9!5HN%RseY7i17dK-k%jWUcbdWncOh(t*t!sy-TjL{Okw~3h14Tj<8 z{_d~b_rCW%f9>;}=RD^*yREf8>$~@sw(%2+neLaq0a$pNfGrx zu~whYl?u3}Y;D=F95_Qjf&G@6MC34`goT@>&5jXt?~X9@&Lw(zq3-)~IU$4GvQ-!I z8L7ye9Kv3Aq?ikhVexdf?4?Lg))m{li9PsCH$FPM8g2dL5j;PjT}py%$47>2N%oT? zkMU4~W8u*L`m$$tzRq4#N)G=iCy5nbm6cz|Ao%FD#PlvtB6$5k({KKb!^BK9Z3q&z z?7Ol=@-1LkJvKf!SYK!TL;$9K({#Ml&z+pj4)X4KT#ImoU4xeVHLf;@bw@N!jmMI* zv0hEogYyRZ4;TL(&ZW6ua&mgKayPQ&Dudr2k=?p-r4Xs(P-gHc8m1z2cLEm`le4=f z0~PY_b2I#u8UM(w0@b2&P@kcxdZd0YaWSAkL8UX0Z&TTGov*96f!R*zj>{Z}%7So% zV)WiHLG-P<=qyJ<>O>;zp|FrohRZCy6D_-(Q+ZQmU&}#}@bx?S#=e#h4RxzF&{=T-_-2@aw{)p`JYUVWps% zWwly7Pvb@{h)3sx2L>>xsAut)`<8l0IG1lHo4H#}D|o9H%}h5K;xbrWN{jd% zSjz=#A=bvb!m@#7HDaz8NANV)g^fr;`)}&gAK6;6@lnU;t`_OlDy~qpR5ik!Tgl&v zQRUZ>Fn@&u{4?nKd8@?45l^{ayVyGxQjo}luP&G$eRjH}Yl(2&JWb8nbUF?*6k_|R z_ZBWuBByd4qNtGv%XYkAZD9EdAeJQh)e^KT|&~I}oR)m%q-Lh2Jo3mHdhPZ~pP>pATXV z{ZrYR^KDm=EDUzDD=gxtUVZO$(~YnNqE7`p>^^`ggiOj+cPJg?WsHI8nQ|<8o1kX z_wylz)(Ei(TcDt}a6(0vrmQdC+(e<&R}#^@sfZB^4S><;fXE+5J+T z65Gv3+do$v4kO&}19?vCH;~RQZZh#X$;D$z1yXX(1`(d6l9s_!Nw=l#j|lS}VDWFu zVZo3f@mjRh8p8`P=9i6ZMg7P))FWc9E-=x|BL&QEX0_nj8i2dsNFdq7ko0;KUoObp zsK)(BW`}>tep$GhF@2B)cOATaG`Zh;P8PW#(dfR?kqN0a%N(8w)jwEAMAFb0x=tUk zh#U#|K?i!0A2mqv-CFQGdW|VUpXcYwPOL7k$$jA(7PbWE680SROjzch!^YU{eTFi9 z(`DT!P#_@){+0;{Gl`dpbTBTX_*d)qm-v^DIV>oILf7V9;M^44k)m^@t*4HZThIsI zp^nMFIC<8%k~H(4_SU%dre}q?bag{R|NGnqj7=O01o-sTT2$8e_w&sytjZhbBJC^k z0egkbr(15n64X82rq>5^CEhtm?6rt&L$95);o2sBkv*ut{fINP29}-Wvo|=WEiu4;;#qU6?i-Qlf;8d46~; z-i7V%I2~%_@<$=M1}qr8n2lv#>ZZz&=CA8gjx?6h5L|>0g}Ei$WfH?tND6i~Mh8>G@8)5CU3v9exCcy2 z`A)v<(5o*lp!VgWEjH@41A9053D=%viRr!-^-?zXn?N1$k5e;tb=@)fEaMOU=0E@c zt;jRdPoJgdBwiEU=N`&eoLEO@*)5!)KH@g?E-GF;e=eoBmMiPW%>r*P*2!|ERq$x7 z_Vt;m0nNaonVf<(PSlpXapDgB^prz$I|d5Y0~x|mPyB8!dsoxF$q=>z9+fq+#$&q5 z=+2RsTQqOM*p%5uBQ?v=R5io4Uq1jHdX1uC8Dq2c_ZH|W5f=e=)dU}xau5jP%|2+c zTlGR!1uUz&-U|6P20bv(c=Y}@A#Ftp*D(RHPJ9NE_djP+-2Beh^mZoD0GB&Bhx_Vh zTjTWPK0@0}Ala8RjCOvQi`O7ojq@m!`ksIxU<-?_Nvbi*A#0>;<(qqFoae_B@;f05 zY`yI!P$iiej`DT_iPDWTTI6C?80Yti9JlZDae(Aj1q6VoJiDG-8*Apvm4TbT@73!# z1@bhu*r?oy;;r1*S^pAyp5!Oe0Y*>Lwj0>K#!gqzn09O?ECi9>O*zea!*Re+V43))MECp*k_SqHaPa)Fd|8)#Kw5kmIG-oB&~O+dajgm7HGJyj4cr zN5*cX{Yyvvfr9Z%E3_f@mLu>N7rI18DXT|eKTB_hS7Db5f~n|%se50p*{d3^!`3`{ z!hs$QGOF*0gt5o$lKZIscxIGsWH+ww3~nG{`5|pj4cDYC6|Xy7G4B=!}CEZT zu3q5RnLOc2ce?hGho3U{-;;3Wh_|u%%=^Sp{rJPifOblwOb$TR!9Q~0lXNJ3Z+wAQ)MgIo8ewB*QzUD3)q%_MX@3FIF<}gZitS-8@^!;xlZB z5Vfx(hfekr!8qi7CMz~>v7r*{+hM=v{5@Ld{Kr7wX|guX(wRQcQV-Clh?`1Ym5uz3H+Me?ZJ@4w z7`YatMNO5Tp1wnMKHC~q^OM?rjk$A8CZk@5>*%W0vD`tWH;Jv-VQVtXL z$?dFDIqbXBIayC*ld}M*OalQLDE5Ks7)CBr$;zaQF~i$9#gGYy{aae44A6cGn?$7o z{Pwe>0Y6CDP2znk#hFVL_6PF$1hum*eB-?g7K`a}>x-56Ih?l%5UI|QD5%*PYCl;Z zwi)BObH&@x@n@84JN@^z$pDy4;ldkJIPmi5h(W2AMYY1ZMxU<3C)?K3ngDM1XbeK} zL%=h|EADpGjlyzA31-&G!RDWa{ZEf8I(AGH?9vu3%!$6n@bsEPuhuXe_$feFMSk;| z$)B0k_1GP1DF-u5Bh3HZzoG1PV73Elt z06FWmByk8z&T*-oZ2#p@b=#NaPfzm|t}gFglbx7d#V@gj?=R}u0^YDV@&={l4CQ$d z#Gb@$34U^SR@f8}uG3$9?k@r#8Z$XdA@a7e;sEIeF^)r`qrepLy}P~5(O^C zK8N(j_Ew?Zzw7mOs%;lN$&LyZ*+0?H?vMRhPdU?`)y~sOaePd}b=uo6b~Rm19^7^~REaLVOguBCkR; zURKVNz&9?me#**0oa^WMM?Oi31eJNZy~=V>F-`BlLAwou93 zUE3P0N5O44U#AP;nw#41EVhH*Mj)*tx;jiDbhw)kzirB(%pT4M$y}u{ zUCleoHQUV=Dx_;L-RC_2(dYH&pxd$K4*_vRXQ(vQvW{1@a|d?GV*#!nOLbSCrg`u0 zBVlyOMTlpo%hPoPp!?|chfxAzTv{$b`V;vcFMo-TLZA?^A2W_?B>rZ)^j_rCjH%Wt zh`(Qtk$_We^8z>b_tN(S(&Ul#Fsx9yn9oSl0KbG9&%f5sU+O9&>57_hTYKp4+t@WZkE1o^H z8x%AYVtVzfLmOk}H#BFg7V>M>;6f;~DLtTaiPo=!hsB8z``iUY5~Ka~$LyN{=4$_% ze)ubae=kL;KlE{2y^%6*pjqBx{HkX?v#&z;?ATM!rWrxJI;)ktdQR}8$(pw=z3Hl; zj<`>RBZ@ahX3#9Z|%a=pj0B$vtEf1M5%}ujRy9wAN*T6 zF8+#|5&nkprIRdL)7Ut(yqkFm7gc&A4~Y|~M|EABuhAQSPJZ}K4HENfYQSfk<)so7h@>dutQv_HH z^>sV&AE;S=uo~aN47dy$A%)bve52xh0pB;H~7E-Y&qqy21x^>S?4k3CU^liUxD~g{^ z#4{e!^cyr^@1mpnP}DJLQ2JzWg4S=VYh2T$#Uxzj zBJOURaOTZpg0hv>8yPW$AcNyrBB+p(C<_PYS!hhp&Exf}>xai#J^l)2iwX| zcd#Oij(*ScHt+H9D#hWV6BHJ93z|aP#C*YfHRRs3o<5fxx#r3pC`c>~Sp1!RKZsA? z1k4eouS|0LT~>eCCzwXzVh+hR%zxCN$T|MWj$x!HUo0tJr8RZ*O*l~X)O}1#6y*`c z5d*V|J^kF{A&4sH5r%$ppvGzjnPvGLw#X~^aG^31J~D4Z)>~-Lv~~-=x$fya_#+Mc zmnrtoaum-ZnQp7_tVV|M5VQpv5}@X{JECFI;vfBciJE6oZLN(sVxf-gi`ZRY+@Nzz zp{_@_cSc~m1&1mSxb#HGz#L5Axss%*Bynws&5D_}3(ILE(|c01Gw{Y#T`7~Ge`Sc? z7`_=Gkb51!^xR(;Xcd&J#ro#ASJQ&xK0WNCElH72z;n7}f+F%iwsp@F zR67o7cV*hWCs~V?iJA*rg|(*SBuPV@yW6rVw-u@!TjhGS60t*O%jyoRZ5y9oc<&9AY3YHH;n*ca+HtVeU|U58N|Im(8EP3-%%SxA|#ObHBstf z-M7Auz?y!nbR!N?Izag(#F?D5AbUluzK%4GpXuUSH%+8%(m)iMX{P4WO={|~uc@Cagcm5d5dM*XV7erO-$d777lhnRaC^$y!7vNm#~y z(&P4$Or2+$$`WM{kEbtpiNP_-@d9RZ0f_<8^$3AmK)jSg(vU)s>n^n1m2?{qPLS4J zr@HK^8KGCU9o?q7g0tROe4hCCe#pKMR1uSIX&(M9t|DB(@>Q!($9t*Ys>VQ?k8h?B->xTGbc>K*Q#FYz z4(r7@-cWtW+>oEK(0Iainw8bvo)E4c0!u4sdpbAZAbd2G>}@|#fl9Z*r}ABai=0l< z&^NK2+!*ZT0W1f^Z9A_Tp54eud`dJ^ajivehmoZv5yveuLW;-Zqi1`nd{V#5jTkGf z{JRR;{w5`TG4huDr3!~RHFV$_ZtsDbtt-8oMX^_Lct0ATbU#uoJ~Nyj{)&!3jENyh z@Cv<*CZ^nrdV7obbe>H(P}spZBV>B*fv(8MNslLSi1OMf>!zvzYburYuFn92h*CS= zPs?@rNg4K2NoFbS zo&1N!;!Jj!BjHY=C5kIQOST1lf4pFARAy*&D*JIm?UPmAQ-u3uYz2Vt{@T4o7fhr! zngN!xxKaHSs9-2?7{yITX3WbhJCeRERQq_?;a)XeP$~%1X@$RQxERfh!V_szp(uP~ zRYM@X{c=g_yjzueXn2CwI9&h0fsa1;K4O$SLPtd2SeZV0Bve^^rtVw}Mf*~kFc&*H z9~gmFJuMTO>^_Q*ZP>k(NZQABq2<-DL1#JbWUV{TQ7!{o^yA__IP40I$?sE13Juzf zw^z3H;`+`;i{Gwq{nH@yh^6{fKBgT+^e|}m2Bnx|77Z(Ssty)58zyfYVb6qZ0DFpIm zF?RV;)iP9&C7@3SGWbAYB?S_A=jiZm3KwixZyGMOQS{H&Jf>|;&swB+t^qMw4I4 From 8abdf182ca0c6b774adb99212ca143586890fbfd Mon Sep 17 00:00:00 2001 From: Samantha Robertson Date: Tue, 10 Nov 2020 13:18:48 -0800 Subject: [PATCH 035/958] Updating art for defender atp deployment and migration guides --- .../phase-diagrams/deployment-phases.png | Bin 0 -> 5744 bytes .../media/phase-diagrams/migration-phases.png | Bin 0 -> 5711 bytes windows/media/phase-diagrams/onboard.png | Bin 0 -> 1960 bytes windows/media/phase-diagrams/prepare.png | Bin 0 -> 1713 bytes windows/media/phase-diagrams/setup.png | Bin 0 -> 1508 bytes .../deployment-phases.md | 8 +++-- .../mcafee-to-microsoft-defender-migration.md | 8 +++-- .../mcafee-to-microsoft-defender-onboard.md | 4 +-- .../mcafee-to-microsoft-defender-prepare.md | 2 +- .../mcafee-to-microsoft-defender-setup.md | 2 +- .../microsoft-defender-atp/onboarding.md | 25 ++----------- .../prepare-deployment.md | 33 ++---------------- .../production-deployment.md | 25 ++----------- .../switch-to-microsoft-defender-migration.md | 8 +++-- .../switch-to-microsoft-defender-onboard.md | 2 +- .../switch-to-microsoft-defender-prepare.md | 2 +- .../switch-to-microsoft-defender-setup.md | 2 +- ...tec-to-microsoft-defender-atp-migration.md | 8 +++-- ...antec-to-microsoft-defender-atp-onboard.md | 2 +- ...antec-to-microsoft-defender-atp-prepare.md | 2 +- ...ymantec-to-microsoft-defender-atp-setup.md | 2 +- 21 files changed, 38 insertions(+), 97 deletions(-) create mode 100644 windows/media/phase-diagrams/deployment-phases.png create mode 100644 windows/media/phase-diagrams/migration-phases.png create mode 100644 windows/media/phase-diagrams/onboard.png create mode 100644 windows/media/phase-diagrams/prepare.png create mode 100644 windows/media/phase-diagrams/setup.png diff --git a/windows/media/phase-diagrams/deployment-phases.png b/windows/media/phase-diagrams/deployment-phases.png new file mode 100644 index 0000000000000000000000000000000000000000..4d2a4fa94646c72b26e978c0c02cad12efb50a7f GIT binary patch literal 5744 zcmb_gXEYo@*A`JDSUu5+7DS2OdssCh(R&TDi!7q|MBhcCTU{h<^cFo>y$8##7Q|w; z=-uc2`JMBf@7Mcd?#wy&oS8fK%slr#PwY#5P4Wkf5Ag8t$bnkwuki5h9o?;MNr>(& z&N$5dZX)&6GK1jZkx~C=+?!koxx&Mv=LD*&y!Ol4frq{`M)~)#MI%M;-LkUua(Qj1 zIp#n3@JaXC1UsYF`Td9%I-ZY?MUV%vueqUL2~RW`OV1rR5M7D<+yyEUi810E^ahUR zJb^vBC01m+30X-hZhcWIu4 zmkMK$T!?=7b`Z81u(I5>N*BZ(1)yeyF7^y_Mgdg2C<);JRgzddT5nYn4lewc zNhHcDymwAcy#JQ-id8I`AiS$f^*aLLXziF39v*HM`l+m}?9TFuN=x(6(9qOg#AlRd za)0*MCi`C@jsMjr8Q{adP)dgsq1Le2P~JmqDCcqfx_0oJ<#V%J`$5=R%>Qy1xs=(V$twhOonSTsI>?aI6V@EUapyPG{oX?I z*2(pacgIADf3S>=ZIUuTlzmC7Co4w0rGPxucuz+g4ZEUY$&-ze7X_T0bhIvz-~$sa ziIBg3AHZ*~l+I7v*G@0XmH0o;kdv9|yC@SK9`Rwuf%@S|x5phJTROwPPGRJOS#8(P z<#!DPwZP#Sx93WU7xWNM-?OrT-?`yl>&D6|?G=H+J?R;d*By*$Syp>u1}={u$PPRP z97gU1rycC*QzRHo-6s*0j`_JXm^spaCJ`5)JfUq~c0MQ%59Zt8;_Vz!q!Be?-?E^D zyEqfZtW$Ux3}vDHbHP3&%7=eo!MFLlyI`|MFr1c_Hp2-SN5>Hi`9)a$OzcN7P|$!W z^om1Zsg{5czD7`o^bd!H-a@&Z;W42yK4#4q6(ZgEonwm4ZiTZ8%B&PhkjAdcxkqjha?V%s?2uULDvH-=jz=}u4GekLeG%12}nzo&)PTx;`0WVdv|w| zjY+!RIKYy6{66%9w_g8Xq!CO_XxOzI6Qf{}rEOfUnwp-@4Cbn34ifgl@N?!e*~sx8 z3!h{;)u2>Y;>>Z?YiyyW*x=yc8rR=n&)Tthp^BS6!-2P*vPypZ)ePiqG-$T=h1cWe zGam+1W1y(uW~CC5$w_+CDS3B1q9$T%E9 zxw+UDSjy6;X+?Ms>>uR!Cq+|3S-`(}tYLNsgsA=j4vx`Kd_xjKzo)pRzglDexw3z0 z{S9620%bBbL|z!+v9>8t*=j%N?&0Cl>iV&mf)MV=a%6K{SaL{n_~-P#BJFpAg?E^S z5rmwaT;{~%o}pFy`$NpZX>E$T{YFZl3KkZYR~8oT>dHuSdwSM`)5#K@7qsm2v(eft z{P(_1*@gQ1`%eb4>s^g~(_uSR4LI*?0S551FOx6QlE@C)&ROmWxeXAo>@lX+vdH=N zCT{;|jD)o|A63mz#x-BQOWv=UscNu_auaPXfe~)L zWdzSSy`DqAeEp>Ixb2Bey*!%r5#geg!l(LxRZohFS_P>r zXMU$gea@52B1}>GN3a(`NnKj&+X-3kzaM==;UJ$ z;vCG4cN|t~AG*t)h5mld;^-{6K|T%9TbE6Ter24izBs*qT?7O_eJa?0u2A0#Maw>D zxt@6GWgV;z`{X)5v_}kCL%8@PyvP-?ytkNI z**fd~BC5OJb2AB1xF%RT`@-4*gk^$qYDY+9Hb8u` zVZ3DwmZ>{Kh#6bDC4Rqxsjn+E!lUDA6>Dwz_HP=Q$%35|us5H`mj-FpPvBS3M}X$I z-QAI*K_vTjFUv7I%+*oq3V6-4ixE{Tsigpjsb}JlcEX!z!b|Gv`946^ne8gP97hw8 zsLWqKBXMRZ;GBh>g~4iwkgg%F-r|!!>u}@Fy5||f^TsO%6iJQWzHtjgXME`+ixE5M zdF&Sh+BPWV{7d_m_j{V1+yeV&uk_2&#v7A{4zFJ%QvxR+}Tr(kFx&AJOYwq!4 zQpDrECCJA*WNZ&KFQly77C%kG*Q0k?jLWjqK3Yt+EBQ;rTX;F#xaEHd^V1w3UhV{tdd zChEk0?p3f|p%>lJtCTx_({87OAIt>v6#d*{A1Xi^H&d4--ap}S|0iZhHb^}9 znPut|X#13GkhbFY!8eqBq66aJRLj zz&0J;H|ud!b)eHPL+hxqfdU&Csf7{Z->-Fyvtu zX>!Hc?rp}k7LDsFYg76_|7@E$OEA43#mhOoCWhVbV?~=Q9^2jLO%!j@RfQZq-w+#z z#Rn}%%x#UiPeeHyE3-k*6)@=25K-qe?@l~!>msNV^-fFfz;c=8=bgD3ksM(jG%#8L z$3WyPJ1w&2-{4}QW^?3mRol@-EX;nD^Jl2bGOxpVATSRtkL4+;UMQF(DfrLt?XD83aN4!cATOMqp^!=z)fA26uX?yjk0wRL+yuU{|VZ?k_h^&Ckm@_1em zxnXbUHG}PBM7bh=_3CThvNA&UMw18k-s_;i(0<~Ox^~kWLF9KyZl3k3;qzn?)}`yu z79~e%5ntMbGq9`+Xs!LQd?hLFBKvpDp!gd852FZ? zsCRQ2@5fe7Ry!z&PFqU6^P%e&WOd8jc+Hte@9V(=RyYK5>$cd{ev4shQ zOoKkYG6Uiglk)Ms`d+<3zGr;xJP&&Id#wwHgMixiLi3UA0nvvn)I;-=c9H_nZ5?vjO1!_N{Nm9rSxp0*UI`bUei=Wtn zGRsg8cFwj^dGCl(h#E*eg04wfSy`>0qEILuv&TgNqyt3!>yJX{j3Gi{ym;2(VlJco zo4-r{RqZGR(cDw^e98p zkBrD?!faL~P4?4=X)4S%(26zz1pPPbLnL8Yj*1`pQX-q%+{0u4%S(?fa&Wn6H13l) z&bLDeMB(!v!igvb6{x9mAOJSHQ%9mQ_c{l2)gnSEe6W){WqI)5D2>m8OV)9BN>GEY(AYQt4zWiyv+<|0~=0(|nn_ z{AE68_|dU6RApZ(_~(>-9t3<8l!;6zrbPdm>&pR96HU^4m!_5%Zf<}5ddaCjWDvy!frM6mhdr1bcNy;$?Vu!ku!`n#_m4 z*BNvxQ0Or3tTv5;0F30tkyUE@99vE4=IDSWbzNini`CDy?^<{p4})p$^Z*|J@KQ>$ zQhjnZt6-A^te&faDUiWuvzlc~_#z*;j#fS+my++uOCq!zk%9i4oF=)lg zd)|Qe+ui0*HvTm>V4jHRFC0h{ky+bQ?WNd%j9g&dKG+&<5|RZ^)XX$B#5q z!n+cYzzp~OD0RA)rw{F0orcoRd~e66n=<07hlPO_r~6-|CLnh62+>7#)4m)ni*b%D z-%w9puu=L-&?Tek&?p$(u*{QfPB&)TSSn}sFS7md)$^3Sy1eFh=+U9|MXqP=9kvKx z&y^n1F{#?O6P&dG)%VfQHu%?LKC1lmk%X}eIXecqd7fmUEml#s%?mY!`y)zS$txsY z_arVVJ5K(5xqrumz%wxUgBYwpB%y&oZqj_jQ!pKgEE?HyU|%^0(KI_a-?yvoejh!4 zyTLSFQ_m5kCS^2E>QxZ>)~&JkPxaV&mTH%gfdY5Bu#Nsjm2m5RgxTtqV^p<*#FFQz z$q7ziZJ zRW!0x5`L|hq+6%l0rN#jFEOiM=NA z&N+_ts!l3`=zB!~w$*pmf$Ihg{V5+0)zZuB#z}#A^IrTLcH}7>zg1oqu@Hxgp4kK+ zzcJssS5#mBhT^V(XhNBRo4>}t9Lz(;GQ;zm8>V|O6WlXadiD!bcs-WH39n8NHhd%H z{H46i_;*;>6c&~x5qP;;ANXS=9tJdhM9ZL?m6bIN`B`77MleMPll18T2c}rrf-nnX zukIQ9>0pshO*)Yji+*RmG`x{Lm5|&}vlAK<5HNbGg6uM;S%6%H^h z$fr>y86aDBZoF?<#JM)8_sj3$U4e-zzW;w}n4S63)FeDSJdU=u7a45}fw5g2d~L^@^YkQ!>}k{0QXVTP0* zP>>E^{_DH_F5mTDoLJ{voU_h8>v{J6ebUiVqo#O3K|nx2t)c!*mw(5H^jH6|mj3&lonn)&e_3w@MTiq3WH!DAWrB{^Rd$ z_NL6JjBSRK|G#G7>gpo>uOQxVARXIXOED=($%|^pwLh~J-tU_La5MEXAv zhHeOmc-@}OL#8u!2NWK6PbpOn#G|7{6D&}SKn+xm+?d*o-sm}O4ks=AR4x&12^GtT z6IO=u`&(>9?;g5BxDT~X-<(gUmq|!^m^@PukFB|?e^-;Y!8fm?uSy#U{CBm&e3%?{`CJvH{{ACiY69)wgnqXg&m`2P+->aj-R)5ETsJZq`jVmVW z!ksWT+=Fta#}DR6`x(N{vj6e_!zJFpKAfu+PSga54sMeG9%<85QzO?I0Ow}cyPNGj ztXF4l9p!WLLh$aJp0IVM$n)&$!8liO@?x^e40-$xi;YVJ!}{(|u;>MyXVoPbuG@xh z7@CxS3gwp}wroG`7L#blR<~P31pq=x$;D5NWNMqFgJSa7bM3!b&|$; zey$CQXTja=wL|5=@u_{h{kvC>2PZ4;651{N`*fiAt+w{{Ta>ZDWRd3MK@(pr<2abv z6o`=+f1bf}h+Zk?s69mTKiuNs&k-4+47v&gi%IV4U0t2=Zf`XWQBe|h$a_vdtL7*6 zmpc}c$g%FBpQXx@|4o~}Z8qe>Gf)jjKhTn@@4vEO3&}*LB*=K8XSgbO| zX2=G#wt;g{s1f0_xc$W@&qep3sW-solzs%WsJ|WwI-&T|DH@CGdw|)QK^VL&r05hw z?&lBK8yH(3GM;15<%_kKpu@%3P14mEd2F>6LZA|h#cEAb46stj4#;kG?5G@tY7Zlp zXwG!3>AWWA=Imz3@3NY!l1HZY_mZW^TnGmSFUA+c7K||%Okq(`Ut~yB9gnd5`auLG z^XG?3jny>CvU)^1CEYhQH8to{rHr%eSE&m75r2z_I108)LPEfPuQ|6K!V4d_wR|h2 z_iA<28+qc2+w(Jx>zGr8)ePC({qJ2mI6ibxnWh_jr&c)JndmlDe7Lh;tI{=S*uCIG zTiTl@94xG^HmPo7(w9u_T{v;_WBBkIJX%yy<&At{rUB=CIt7|i5^)bY`;#T5{W~zv zGKY~sLys)J{YJY7c{+M2r2k-V&U-&9w)Sdm-#R1!S>96sV?+<^sZ;O{t zvmiX(kocx?$;SfS(ofF>x&fx$o;$odJOeQV9J- zFC@fkCW{&;ge#1anfbv%ozk6`$3X%UzLb9SH^R4<1;26T!i^(kYR)dA6N_{8Ybe20 znrP`Tz0#`Y9K{y_SuriXl>&*Dq}q9{t7$23F4NA0yEE?IETLZ_((h2p_S{R4Chba# z+V8k7k|FQXDB|lSo%Fczb&O%F^Jeh5%+Fm#S>|l!@qM8QfvLBaOI38{tHxfR^!ICV zoX(z@Q~-NAledzKtA?t-tL%a|K-h2Yeg{79Uo3$XT7jOI+_6Du#WNq=w_nBn+g~ca z*W-VxU0D2!B=237!EuM?+dC~R1#>RJN-&=Ri1-!0r_E6bEkl+p{xNk(SLu&IU9hVe ztFvsSrfIL=m=Uv%_xEO>{^k7y204*f=FYwumW*bJglYPBHeP?l$=cqCpIo2nXql1= z|2~PCUK3>Zy?z~=^l$5fwRxDR@oMbB5RFf!ZDpjr3VapKHmyq8Xb7l(pNgtr?Eek= zj(}F|TW?14^6U_f^`0<2W2}^qNb3%BG%$85mld8%jp9}K7}875a$szd4Rj*WEvZ9w z#u|!G%J;*9lB6DL9lglUk4MQJpoxl-J4?ETdvDeW{G+1`n>`{m{98k$xwRKV5p#Vv z19}CEM0mbQ38!Kf8$OXO2(xNSC68xzWm|1enj~OjkHs18Qk6|cLQw@5j;+gOw`z4{B#Rks0oLJSSOW*#0Pi=YlO+x`? zNwl*F)X&+sg+fYLs3q^Ce1F~C%!!{78h^RmT4ITWUpn-$m{9}>aF((;8f;QWM@{rW z%vYJje!IjY9?~0*RP{YMxx8wx8yH?XSyS0}I=EudT5*ZvQdDGgFm( z;hxhH2xjPH{bVg>>FEBZ;eGhpSX zNt-ICMPYZF$Q@|^@h(o<8HG?+2F8yxgGbUR!m@~`L{NlI)z>*)QIwO5 zTUEF`<50@5gOQHTr0Ic>=MQ@26-l_Zfbs@)4_J#k-2`j4bykkKZw5xX+m>l{^qZnw z`BtMOtCZ5PjCb~)8u~0}U$SD0Fc7KA3c&;wv%%IbD>6R&@(nev@T;vru%T4NfV{YWo^W&$JCnt=cWQDqt!%my* z5fQyv)c2?rWuja&`N-J?2Y!^ozp`1i74Ob4NTO%1hzb3Uw4;Ok%^#U6UWn(%%H9zZ z5wabaIl!*B3o&YbtyamsdQd%2>9d$K2Wqf~^Dk;%s zC%)n|GZMq{R+_1;QUvGFRAz*HdDp;O@ta6ewioqRAA?hMk27gbWhSX$MUyG@o6s^Q z%8dzFv2D-&-L@R_sfjYAz8zP7diFTsdxrRflAk3!f_8uu$L8WLeIV8QZW8TllKgXMM8geBEiy;SmswU%(#=#hxBs|NjA(H$N7}d;|BL4y z@D-&+f7rV$Eh??V)m6(9QK1}1NSAQdD!GfLPA2t7eb#TePkezzlE9X&3ufE z`J&z_)4yrA#wu?^IMZy#c>_>@^Ollr>-;}S+`&^IJ(Sptt``Uq021+x%WY{E*nn1Mn_LYkGw{+ARg;KXq&w3 z4^6hOYP_~}-*v#+7#K;xk;%+ZA0x`CU+g>!q{8WSng9^Y9?u$A@y}i1_i4nkLLZ5B ztZkOR>dC=U_R*y!x*1MRqv|oYqyvy$XdNfJ+aSHT2Rve<`8-2}4Ia5O0A^!j+qmQ4 z=vatO%Fm=tpw=4_zY;9pFecC@XeHv;&Pt-^*ZP5PSYj_}rH;tSH5c6P3@?4{Vyj=ZfGn9_J-K51kHTqdTqm$)6Ct;K%L zHSr`RF`-*!mr@38ZQZq@`So1=p1p&EM-QuUtKT>v$kkO$`RPC~M_lX8@lB?U-kq z>R*dIfAJz3U0*MYImHE5Zh8+74_|d~hFc@cDFbQ*p5InSKssTsCi>M?tnZSy&v)d_ z)NAeZB}{`W808~ui6p1QDxh+Puji_*g4)94GH+Aq9+lD)x5&ESq2R1bY2sf1P*ZrA zR;2b69e;S-BMA#=f9BdfFq>6oey}nBGib*jP1oa?UBxf&=G_s(vkoG3^x0g9+q!@ASz37+& zRiz5ZbNeBnjkF-rSuT-9;!$f3wE%TEd?wE8dyGp%NuWhTHodYsDjl8EoiOA70~80; ziIisw{3uaZ1o{?mSJ>u?y>6$2PT!cEu>Ym4<*@4)$KIOnysvVVREV~B-C5zw|Jk~H zHYB@=oxg|1j@*{RQ(2uM4V}|cVa%xM3zou)&9H7f+0jBM?bbE->6JPZc2D%zM@jUs zE~kz3qNb9TmS1j`PL`Dl;b82_3FCiH_z%~*uXS~$pBm1-)#%O}pHDUQ|HU|Z8et*m zDWk^=3RgD>TSZ^9D7Sdb3UJr&yJJ_rAikBor?F^2L`OKX&%h+y*irCal=Gjt{`5t4 z!ACaW+yBMd&L`5bbtI51;=a)hZTjX3IJapY7J@JS(Uois~9I8#kEZ;0+h!6}U~y`Yh*pvToPsYiFYVs;l%o=%RJtz=`+AJsIDF**IN&JAkjna#i4 zshC=MxNyAP6y)gvQ*W7m-d4k`sezLa#t}Jn{bhS3J)J1$I?D+%`88aB*fW_)EA?Y< z@5qq9L4IpPd4^-rOOr;oTn0u)6;Wn>k*$1XQx_7whG~kE!T+53$JuS3xItmC>cb#M zVm6r?PH76?bE9$zXvBNRhpV7wc~-z>WU28!AC`|}`&sP**O_Wzf5+7zX7`2t4F80$ zGre>#QyLo=y}_q84`&&@m>fmWM6;#Hh2PYXmsvkG`TNnOD2F~F92Z)ReL!9rG%(9R zn+3bDZ@LxK1w`;l1oO~?&0_8-e93F-)1c#Fas_V~X5U8x5aj(Xw7PFvmt!~Kpg4z~ zj(IuHNcY{t{tH#i^j?><5z#hv-0!@uhys%Fd& zM$E-We$>iwEYbsIe%XeL_VD%AD8NmJlR`{do`7Bz?|vfXldbpKpenvLPB0(}k6Z2p z#N3MU#QeNHlj2Yo1Y@u0`p(3j3xluscvkat$Rd;*aF z&!tZwYFyJB%YVT0v=5%6DtDL2>UYP*P8oXYsp_o+?#umqsisLY+N~_e&~`*Z%pDIkt1dwmU5@6>nlwrhbO7=-g1SSi@3YQw{Q92XzCvJ zUv2M?7k|8271#>rAtYV!nchZ(glFG63J;^RSOb0_ksrBKwTzv8x+icrPGq8mHJSAJ zXEWB*Z^t6r>ZW;l*>`OsO*11$ij2FbBUd^08Cc9g;*@Ad;D~Yk>L_6v^rzQ7kQOj7 z_sNbBdUNyDwjc8N1VqHHX}@nS{eC!)%c|{`J<5VKl!jTM?iEPlqGgP;!>wrry$9J0 zXGm$}=S^ys=9inc8J3oo_U&1XMr@5&HL7RevMd&c$5rrSYG%}GUql@SnrljaxPB9g zUSE3opAUF?9;LBuT}>=zog3}oH6a0@0rsu>q|e-HU(T90yJ-|(o(51U6}I{wfz^aI zgS)N5))EN8^5qu~Zz)qx?@Wc!`EyHv$;N9MXJR#1Mi$B9&O(=##TMPhrF@cGZDP2Z z(0$h)ho{0LEJNaNh(Vy z;1frr(}7*)`+zbu8;6IbC0eMoMJzxs_dg(+PWOG-g}kv(#z=!PmR2hJOA2dFS^#=e{JR}V7j)5Lm=^-q^z*c|NL92q zYEO|P6+{>ASB5aJG*|pM(-9V)nRz@R^HmG})EFysds2NPm;LQv(rt)4x>fpQUsYP6 zy$p;HL~!r&h?Yp?b3puW$+=o~xG^+5+|@?t7$27|2Y@W~{u|NNRaMIR`V-4nE@jv# z&h zfsrNb6*c+d_0Q>1R8z@sz@VY;3~HdM^4WOFv(UW*3gRz*Vi9k`hde3gqQHH5quqPr zUW2Bd$L4$}TIL!gsB!i&$$jeWc-7a6eo=GhwcPrjw$fWE{XU(4T$ruPZy}E7TkZHE0bOM13mltP$_NaN%2Ov*a`;S zo0NUHy_@E88W+b9tz|F>Ii4S5a0F_^T_Il4_Ek2+)us^kMi)1{$K_63-V1qdeH2V4hv8S2&w6{LpbYL(0ZjE zgj3^p=vP)_akfZ>288~Juyb(ej@7$+j8Q#2LXKV8L_>C?`K6)8eKOhw%KkwVW))CC zX%am0IbajTLUZyF25|c6#wY5;hU+*J^d9o&pI~K}t&% z^5i5^nXocG@B4~7DI%a((jBpo#gfhk!k~8b4~UTWX%yAEqi1fdnHPO+(1pQm4Qt+h zj4f8)>kkjlhDuGh--uug{$?rI7o(3Gkg%9$_SdfgPR^Fi>>bOiKE+w%`1ssp=kdn9i#5c*XH_7%7b$q&@2t@PB(v^$K z^G}Z(EashMshn7=C6B&rX*tiS2Y`DeB_*h53$nm7&BZ2z+5pG~&)e>kYHDiPhmqwd zZ|BoKcijJUMN(=he-V_GoP&Z!8opP;UY>wt%=p&;V`k6q@_GL0YAvjc!HAno47!CJ zk`D9_XLEmQbAF=&of6d-T{P&Eg5jd@#EgOL;Gkj81M!_N1GnC+fEwv3LrV+?cY+*T zR`$i--c8o7xw$#+xKK2*^W%L8TC=8~Oc&x5;+68ux4ZCI7*z{CgkinX-}L|E7ck58X!e2RyJr@gg3 z=Ihth5#@FxG3L{o>xS;D*7byYJmB#Duk{%}w{1UBb^MpoeRnRi?|y`sg3mm_%D_>Q zbE~3;v}&Fh@~&=UL7PtpX-^4T!%)yOD2iu@5(yOcn@iI%l@~Z9y>V>cmY0VVdU?oq z-A2~)i5z2^fPKmfOhBI3@EIw9l6!Ye-#5$=rt{9$IX;h64}VS0=qU0(j(|7^HJ+*P zLhI=;MCy_jk4L+Ih@^EQ)_=}4w50Nh%z$6JaY^1SvLS6otxFjesD0^PRr+Xb5)IPR z(K?4xyxB@ XSz?>75Vz#;3%y)s#@0B%&^_iqEKr?r literal 0 HcmV?d00001 diff --git a/windows/media/phase-diagrams/prepare.png b/windows/media/phase-diagrams/prepare.png new file mode 100644 index 0000000000000000000000000000000000000000..1001e41e0dbf403ec43cf619766ba4096db69553 GIT binary patch literal 1713 zcmV;i22S~jP)h2TO9oLUKx;8<`K z!7YUz0-TC_K+sEoQ$bvkD-{w5sZu~u0p-xDR6x{^3rI$4AQzCyhf|dT<|{E!LiL|8 zmYu}*u0Pi6xAT)$-jA8_c>aDfZ}-h?ireizB?Vi~DQS751ZIvBm^n&d<|u)gqXcG- z5|}wkVCE=+nWF?|PFk#gUT$tKrKhJ`ycY3kUXn>I;A?G)&8)fNnEh*Ii@eh9+Knk-;sQsA_{a149mTGXO|xD zz0m!ww|?KG-kE=tUIwCD;IHoP(e6>?vwZq~-JrR(19SX(3!qEj+bf6k=ac_}UbkhW zQg7`gI{mIRWH~JpPpsbVhM`N~@#WxSZrSAwa&=uH$EP`A%fXl&&WbB4Dkvo-#kVyz zH5uJDEYK`4#@+zllC(1tdNK<)}%i%r4#>PfEJw2t>)m2(tT%@+PHZJXM7@7tC zYa_V0z_oo$Ba0r*^>(_wn$s2*7E*0(EzQi#XwIW}Ny46F!Qvw&CnraA*+oS~zOK8w zyW7{D*VWb0_V%{0dK|;@kw;#W3=9nT@}MlF2PhLm1kxg3u=10E#0mUdyTEApiHQkn zZEX!Wx3I84VVw08%;bD!k>&G>T z92P>ApA2ZW;14oWWBPLnvd@Q2Bb_X4{r&v`*QB@r76mb6T5Pb^U?499 z^38+}fzMINyRj45UYZ%RvZMnBiw8qPL%w}F>j~)060yNjVZAah_N7%vQofnd)kRlC5i1BI{oGcg~O}bV04rQjNMEr%#pV(B`&_Hwx zT>4%r-MN|>k;o8tr15=owE%M>4)`M`eB<6h$j6rw%c%6g`><_G(GA>eDS{jw*Wr*;hB08cKIHpgsFh1wz zUNH5V9%wNJ{=9LXjr<1Cyt7&Iv$9FC(D@&X&C@4s1 z-GZT3Ht4`^w+Dy|aO`k6OkVTIv6R5;>+9kZR@>9l<2ye!HI=|x#TOO=&&|yROz#P{ zNno+Py}i`Y(cwF%Cx0?w>7^^2ohwPg;=%Evxw$#OVS;tf&(Di}*)7A-^8bWqJvurn z_Cw`QMp$^!5TT}~M(oed&iaG{=!*OL`ouosxbeszPfT?mY<3{ln}7v##Zm%GOSBSd zeK2#_TQD9)`j4sMC@U*VR8`{wdx7B*oAoiI5wH~)D=q9}4{7PCSA;Dmzswiwr@-{| zG`ZdGkohsy2V1hkR$#0{hPZUL*bT>%*Yd?N9!-XtMG4y5+gS+A*2#he`{Q}8f5AEj z*b40UEH~iTUTV#Wer&sF%-o#4ULfXaR~No5Hp%etaH6Yc7_7Z$OdIn5v?6Q;c0Tn| z^^l8pyeDE-C#LJl`PhSlgY@9RgOK?f8XBm+zTTkP#t+tB^v>BDWPINIZPO<(#0}>~ zS5{UUQqOp!9#t}juLaj$qPewaJ}dV3s*8(@!{*P+%ZqFMjDoGecxvVRx`*1Z4*RIKXs5z|WKOmkZ81AIGS16DOt( z*x;tXhUeO0x~cWOaJfmG8C}*!c`RVRLqo!M(36T^^NBM^$t+voD|qdsj-3r2c(Yr{ zMaLhCaG83=w%Qoj{$sBXGu3g5DZ+_m^GAw{a9$EgGzxw8hg=tII6d_lP zl`k6_e;jD)AQqG+*{3F(ZF$Tn27wc#boR+obN(8jGksyTEEY2?EDXK9*_aw&;>2dN zkrohzZwpBFoW=^QXbhf9VIb$*D-FKfC!Jf%To|TY)T1Q}t|o5kAxX)g++ATOQ8YYq zxovQ|lw)CVm%nj1D+c4fMCZhVcV3dBazQ$c3wCqktFX#$g)hakP71u=glyx8D9%*` z{W7J=#X`UW?^5jUhJX*g+Kt*SO#b>I3+6D-XetlEh&PILH0SiGL{ghSSkZ&}Ol=QI&=2t6wNm6txGnFfx^ey4bI4#uHYT!kRj8 ziHWf4>gqv(K&Ny#R7F*_*!4uln$l8aLkrM3bM@;JXIurI&Cl z34^`37fVs(!Pt{MgNiz!a^3EBkBRsiuXX+Ui&jq=+eUmuSQs6JLdhVh+?0 zS>S+ym6QcO2cOiE(lhw<9C3Slx^@D9wnESX?GS};%BD}H>wC_-Nx5_mbbJPZS@bn@ z$y{BC7RKkep&J1LUmo`HHpVKZNQL)6sub<~m9eBoTplj1wDU~@&uc@O$$;MC98{0m z?Py@e;+kmYoCuY!F6~RoD;XvR+vFv)DrI5at!uA;w@I7Y8WdkRS~o*0Wl(loA6Jcb zE=w!EC1@eoBcJ=G)-Pn)@Adj;HM>D#z#EG+_V-LpBLv*GI~))-u+Pfc8smF7g&rF) zGe+VaD871>Q{>ER?tNR3^3l_bcA^%Y!-Z;Lf@b;%BSBB%N^_Gn4mfXQ$`NIV>Fw?9 z^w`z7RHTphub=W6SAMb#4(m~(^aV@GHJq^v9XwtCL&733zQ2vW=u;So3u{U zL^T@a9X=xvL5-))Od_-blaFW@8sOWO9v%WO7d28quCR)wu!Ww_JxPxE=~STNLQ9mT)pN7a-6|a z)DQ6+zbBoU+>gg};7a-{;>E0~{MJi9(6I*{6>iJ)Sb?Gj`}~4Ae9ByNbv0y4`n0q) zH8!XcEuW@9_Vc3(K7ERaB$3J4drun?*{lZjo+Lnb5Gy4-KEJvBb+o3F!oRux8~CwQ zaq;sN#MA457Wtg)><2<&>~LgSLJJm)eH%?8HPdJEqjqe)PH?G7 zs;a7wxJye*<#v|-P=9k9ISIApA_xS6smsgB$*G52nl3V})i-055uVX91;EIW(C~0; zH+zUFNh(cotZ!(tC{~Qtf_7}7!|xxeah=`7!NLDcFfNOlMz%pqNW2#{r{B>a-)mPN p(;?_)x+BX^btC^j`7G@bA|PrE{aouA4YU{A04F3GQDcWo{sV3X&OiVF literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md index 298867cbc0..20309cfdd3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md @@ -29,11 +29,13 @@ ms.topic: article There are three phases in deploying Defender for Endpoint: +![deployment phases - prepare, setup, onboard](/windows/media/phase-diagrams/deployment-phases.png) + |Phase | Description | |:-------|:-----| -| ![Phase 1: Prepare](images/prepare.png)
    [Phase 1: Prepare](prepare-deployment.md)| Learn about what you need to consider when deploying Defender for Endpoint:

    - Stakeholders and sign-off
    - Environment considerations
    - Access
    - Adoption order -| ![Phase 2: Setup](images/setup.png)
    [Phase 2: Setup](production-deployment.md)| Take the initial steps to access Microsoft Defender Security Center. You'll be guided on:

    - Validating the licensing
    - Completing the setup wizard within the portal
    - Network configuration| -| ![Phase 3: Onboard](images/onboard.png)
    [Phase 3: Onboard](onboarding.md) | Onboard devices to the service so the Microsoft Defender ATP service can get sensor data from them. +| [Phase 1: Prepare](prepare-deployment.md)| Learn about what you need to consider when deploying Defender for Endpoint:

    - Stakeholders and sign-off
    - Environment considerations
    - Access
    - Adoption order +| [Phase 2: Setup](production-deployment.md)| Take the initial steps to access Microsoft Defender Security Center. You'll be guided on:

    - Validating the licensing
    - Completing the setup wizard within the portal
    - Network configuration| +| [Phase 3: Onboard](onboarding.md) | Onboard devices to the service so the Microsoft Defender ATP service can get sensor data from them. diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index e9fa0412b0..8bfa46379d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,11 +35,13 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: +![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) + |Phase |Description | |--|--| -|[![Phase 1: Prepare](images/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Prepare for your migration](mcafee-to-microsoft-defender-prepare.md) |During [the **Prepare** phase](mcafee-to-microsoft-defender-prepare.md), you update your organization's devices, get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | -|[![Phase 2: Set up](images/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Set up Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-setup.md) |During [the **Setup** phase](mcafee-to-microsoft-defender-setup.md), you enable Microsoft Defender Antivirus and make sure it's in passive mode, and you configure settings & exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and McAfee. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| -|[![Phase 3: Onboard](images/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Onboard to Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-onboard.md) |During [the **Onboard** phase](mcafee-to-microsoft-defender-onboard.md), you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall McAfee and make sure that protection through Microsoft Defender Antivirus & Microsoft Defender for Endpoint is in active mode. | +|[Prepare for your migration](mcafee-to-microsoft-defender-prepare.md) |During [the **Prepare** phase](mcafee-to-microsoft-defender-prepare.md), you update your organization's devices, get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | +|[Set up Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-setup.md) |During [the **Setup** phase](mcafee-to-microsoft-defender-setup.md), you enable Microsoft Defender Antivirus and make sure it's in passive mode, and you configure settings & exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and McAfee. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| +|[Onboard to Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-onboard.md) |During [the **Onboard** phase](mcafee-to-microsoft-defender-onboard.md), you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall McAfee and make sure that protection through Microsoft Defender Antivirus & Microsoft Defender for Endpoint is in active mode. | ## What's included in Microsoft Defender for Endpoint? diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md index d38a5977e8..703d353b4c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md @@ -28,12 +28,10 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - -|[![Phase 1: Prepare](images/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](images/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |![Phase 3: Onboard](images/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | - **Welcome to Phase 3 of [migrating from McAfee Endpoint Security (McAfee) to Microsoft Defender Advanced Threat Protection (Microsoft Defender for Endpoint)](mcafee-to-microsoft-defender-migration.md#the-migration-process)**. This migration phase includes the following steps: 1. [Onboard devices to Microsoft Defender for Endpoint](#onboard-devices-to-microsoft-defender-for-endpoint). diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md index fe973d1a59..8adafc0254 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md @@ -29,7 +29,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|![Phase 1: Prepare](images/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](images/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | +|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md index 8813e53523..ae66d91bd0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md @@ -29,7 +29,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](images/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | |--|--|--| ||*You are here!* | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md index f26781b856..98a43bce92 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md @@ -29,28 +29,9 @@ ms.topic: article Deploying Microsoft Defender ATP is a three-phase process: -
    - - - - - - - - -
    - - Prepare to deploy Microsoft Defender ATP -
    Phase 1: Prepare
    -     		- - Setup the Microsoft Defender ATP service -
    Phase 2: Set up
    -     		- - Onboard diagram -
    Phase 3: Onboard
    -
    +| [![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | [![deployment phase - setup](/windows/media/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | ![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | +| ----- | ----- | ----- | +| | |*You are here!*| You are currently in the onboarding phase. diff --git a/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md index fe2d128e37..d645d5a8db 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md @@ -33,37 +33,10 @@ ms.topic: article Deploying Microsoft Defender ATP is a three-phase process: -
    - - - - - - - - - - - -
    - - Plan to deploy Microsoft Defender ATP -
    Phase 1: Prepare
    -     		- - Onboard to the Microsoft Defender ATP service -
    Phase 2: Set up
    -     		- - Configure capabilities -
    Phase 3: Onboard
    -
    - - - - +| ![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare | [![deployment phase - setup](/windows/media/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | [![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | +| ----- | ----- | ----- | +|*You are here!* | || -
    You are currently in the preparation phase. diff --git a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md index a1c3772e14..a002f9c23b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md @@ -31,28 +31,9 @@ ms.topic: article Deploying Microsoft Defender ATP is a three-phase process: -
    - - - - - - - - -
    - - Prepare to deploy Microsoft Defender ATP -
    Phase 1: Prepare
    -     		- - Onboard to the Microsoft Defender ATP service -
    Phase 2: Set up
    -     		- - Onboard image -
    Phase 3: Onboard
    -
    +| [![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | ![deployment phase - setup](/windows/media/phase-diagrams/setup.png)
    Phase 2: Setup | [![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | +| ----- | ----- | ----- | +| | *You are here!*|| You are currently in the set-up phase. diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md index c9b60c2b17..1a9ceac19e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md @@ -35,11 +35,13 @@ If you are planning to switch from a non-Microsoft endpoint protection solution When you switch to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: +![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) + |Phase |Description | |--|--| -|[![Phase 1: Prepare](images/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Prepare for your migration](switch-to-microsoft-defender-prepare.md) |During [the **Prepare** phase](switch-to-microsoft-defender-prepare.md), you update your organization's devices, get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | -|[![Phase 2: Set up](images/setup.png)](switch-to-microsoft-defender-setup.md)
    [Set up Microsoft Defender for Endpoint](switch-to-microsoft-defender-setup.md) |During [the **Setup** phase](switch-to-microsoft-defender-setup.md), you enable Microsoft Defender Antivirus and make sure it's in passive mode, and you configure settings & exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and your existing endpoint protection solution. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| -|[![Phase 3: Onboard](images/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Onboard to Microsoft Defender for Endpoint](switch-to-microsoft-defender-onboard.md) |During [the **Onboard** phase](switch-to-microsoft-defender-onboard.md), you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall your existing endpoint protection solution and make sure that protection through Microsoft Defender Antivirus & Microsoft Defender for Endpoint is in active mode. | +|[Prepare for your migration](switch-to-microsoft-defender-prepare.md) |During [the **Prepare** phase](switch-to-microsoft-defender-prepare.md), you update your organization's devices, get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | +|[Set up Microsoft Defender for Endpoint](switch-to-microsoft-defender-setup.md) |During [the **Setup** phase](switch-to-microsoft-defender-setup.md), you enable Microsoft Defender Antivirus and make sure it's in passive mode, and you configure settings & exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and your existing endpoint protection solution. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| +|[Onboard to Microsoft Defender for Endpoint](switch-to-microsoft-defender-onboard.md) |During [the **Onboard** phase](switch-to-microsoft-defender-onboard.md), you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall your existing endpoint protection solution and make sure that protection through Microsoft Defender Antivirus & Microsoft Defender for Endpoint is in active mode. | ## What's included in Microsoft Defender for Endpoint? diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md index 4852139083..40074d3a9c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 3: Onboard -|[![Phase 1: Prepare](images/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](images/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |![Phase 3: Onboard](images/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md index 5896bc9f4e..beb6a69b45 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 1: Prepare -|![Phase 1: Prepare](images/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](images/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | +|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index b8c66898af..65b638af0e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 2: Setup -|[![Phase 1: Prepare](images/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| ||*You are here!* | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md index 371f380e63..cd4d8387d3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md @@ -35,11 +35,13 @@ If you are planning to switch from Symantec Endpoint Protection (Symantec) to [M When you switch from Symantec to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: +![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) + |Phase |Description | |--|--| -|[![Phase 1: Prepare](images/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Prepare for your migration](symantec-to-microsoft-defender-atp-prepare.md) |During the **Prepare** phase, you get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | -|[![Phase 2: Set up](images/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Set up Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-setup.md) |During the **Setup** phase, you configure settings and exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and Symantec Endpoint Protection. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| -|[![Phase 3: Onboard](images/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Onboard to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-onboard.md) |During the **Onboard** phase, you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall Symantec and make sure protection through Microsoft Defender for Endpoint is in active mode. | +|[Prepare for your migration](symantec-to-microsoft-defender-atp-prepare.md) |During the **Prepare** phase, you get Microsoft Defender for Endpoint, plan your roles and permissions, and grant access to the Microsoft Defender Security Center. You also configure your device proxy and internet settings to enable communication between your organization's devices and Microsoft Defender for Endpoint. | +|[Set up Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-setup.md) |During the **Setup** phase, you configure settings and exclusions for Microsoft Defender Antivirus, Microsoft Defender for Endpoint, and Symantec Endpoint Protection. You also create device groups, collections, and organizational units. Finally, you configure your antimalware policies and real-time protection settings.| +|[Onboard to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-onboard.md) |During the **Onboard** phase, you onboard your devices to Microsoft Defender for Endpoint and verify that those devices are communicating with Microsoft Defender for Endpoint. Last, you uninstall Symantec and make sure protection through Microsoft Defender for Endpoint is in active mode. | ## What's included in Microsoft Defender for Endpoint? diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index 38143cfd5f..d2eac41797 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](images/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |[![Phase 2: Set up](images/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |![Phase 3: Onboard](images/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index cc678c90eb..1e14e2a392 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|![Phase 1: Prepare](images/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |[![Phase 3: Onboard](images/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | +|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index f36e72d95c..9945105685 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](images/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |![Phase 2: Set up](images/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | +|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | |--|--|--| ||*You are here!* | | From 059f8a3903ed77043d2b97a99c890bc18443a81a Mon Sep 17 00:00:00 2001 From: Dennis Rea Date: Wed, 11 Nov 2020 11:30:25 -0800 Subject: [PATCH 036/958] Update mac-sysext-preview.md --- .../microsoft-defender-atp/mac-sysext-preview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md b/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md index edac918fc2..79da63c6c7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-preview.md @@ -1,5 +1,5 @@ --- -title: Microsoft Defender ATP for Mac: system extensions (Preview) +title: Microsoft Defender ATP for Mac - system extensions (Preview) description: This article contains instructions for trying out the system extensions functionality of Microsoft Defender ATP for Mac. This functionality is currently in public preview. keywords: microsoft, defender, atp, mac, kernel, system, extensions, catalina search.product: eADQiWindows 10XVcnh From 026b8130c8ba91cfefa92978510df7f5668fae6e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 12 Nov 2020 08:45:46 -0800 Subject: [PATCH 037/958] Update mcafee-to-microsoft-defender-migration.md --- .../mcafee-to-microsoft-defender-migration.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index 8bfa46379d..16cc4033c6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,7 +35,8 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) +![Migration phases - prepare, setup, onboard](../../../media/phase-diagrams/migration-phases.png) + |Phase |Description | |--|--| From ba7ff8684cd6993e70a70502e21ed98f036f61d9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 12 Nov 2020 08:51:38 -0800 Subject: [PATCH 038/958] Update mcafee-to-microsoft-defender-migration.md --- .../mcafee-to-microsoft-defender-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index 16cc4033c6..d4673240b7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare, setup, onboard](../../../media/phase-diagrams/migration-phases.png) +![Migration phases - prepare, setup, onboard](/../../../media/phase-diagrams/migration-phases.png) |Phase |Description | From 4eef25e115f8cb1792b93c01f5fd06a143c9a29a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 12 Nov 2020 08:52:48 -0800 Subject: [PATCH 039/958] Update mcafee-to-microsoft-defender-migration.md --- .../mcafee-to-microsoft-defender-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index d4673240b7..277a421663 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare, setup, onboard](/../../../media/phase-diagrams/migration-phases.png) +:::image type="content" source="../../../media/phase-diagrams/migration-phases.png" alt-text="Migration phases - prepare setup onboard"::: |Phase |Description | From a16ec0f709295939de0352c440ace6d7a1f26e29 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 12 Nov 2020 16:13:56 -0800 Subject: [PATCH 040/958] Added Kerberos and CredSsp policies --- windows/client-management/mdm/TOC.md | 2 + .../mdm/policies-in-policy-csp-admx-backed.md | 19 + .../policy-configuration-service-provider.md | 66 ++ .../mdm/policy-csp-admx-credssp.md | 964 ++++++++++++++++++ .../mdm/policy-csp-admx-kerberos.md | 641 ++++++++++++ 5 files changed, 1692 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-credssp.md create mode 100644 windows/client-management/mdm/policy-csp-admx-kerberos.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index e875d5d3a7..a9c36e49a0 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -179,6 +179,7 @@ #### [ADMX_CipherSuiteOrder](policy-csp-admx-ciphersuiteorder.md) #### [ADMX_COM](policy-csp-admx-com.md) #### [ADMX_Cpls](policy-csp-admx-cpls.md) +#### [ADMX_CredSsp](policy-csp-admx-credssp.md) #### [ADMX_CtrlAltDel](policy-csp-admx-ctrlaltdel.md) #### [ADMX_DigitalLocker](policy-csp-admx-digitallocker.md) #### [ADMX_DnsClient](policy-csp-admx-dnsclient.md) @@ -191,6 +192,7 @@ #### [ADMX_Help](policy-csp-admx-help.md) #### [ADMX_HelpAndSupport](policy-csp-admx-helpandsupport.md) #### [ADMX_kdc](policy-csp-admx-kdc.md) +#### [ADMX_Kerberos](policy-csp-admx-kerberos.md) #### [ADMX_LanmanServer](policy-csp-admx-lanmanserver.md) #### [ADMX_LinkLayerTopologyDiscovery](policy-csp-admx-linklayertopologydiscovery.md) #### [ADMX_MMC](policy-csp-admx-mmc.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 8ede74a7a6..8604b2c6e6 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -61,6 +61,17 @@ ms.date: 10/08/2020 - [ADMX_COM/AppMgmt_COM_SearchForCLSID_1](./policy-csp-admx-com.md#admx-com-appmgmt-com-searchforclsid-1) - [ADMX_COM/AppMgmt_COM_SearchForCLSID_2](./policy-csp-admx-com.md#admx-com-appmgmt-com-searchforclsid-2) - [ADMX_Cpls/UseDefaultTile](./policy-csp-admx-cpls.md#admx-cpls-usedefaulttile) +- [ADMX_CredSsp/AllowDefCredentialsWhenNTLMOnly](./policy-csp-admx-credssp.md#admx-credssp-allowdefcredentialswhenntlmonly) +- [ADMX_CredSsp/AllowDefaultCredentials](./policy-csp-admx-credssp.md#admx-credssp-allowdefaultcredentials) +- [ADMX_CredSsp/AllowEncryptionOracle](./policy-csp-admx-credssp.md#admx-credssp-allowencryptionoracle) +- [ADMX_CredSsp/AllowFreshCredentials](./policy-csp-admx-credssp.md#admx-credssp-allowfreshcredentials) +- [ADMX_CredSsp/AllowFreshCredentialsWhenNTLMOnly](./policy-csp-admx-credssp.md#admx-credssp-allowfreshcredentialswhenntlmonly) +- [ADMX_CredSsp/AllowSavedCredentials](./policy-csp-admx-credssp.md#admx-credssp-allowsavedcredentials) +- [ADMX_CredSsp/AllowSavedCredentialsWhenNTLMOnly](./policy-csp-admx-credssp.md#admx-credssp-allowsavedcredentialswhenntlmonly) +- [ADMX_CredSsp/DenyDefaultCredentials](./policy-csp-admx-credssp.md#admx-credssp-denydefaultcredentials) +- [ADMX_CredSsp/DenyFreshCredentials](./policy-csp-admx-credssp.md#admx-credssp-denyfreshcredentials) +- [ADMX_CredSsp/DenySavedCredentials](./policy-csp-admx-credssp.md#admx-credssp-denysavedcredentials) +- [ADMX_CredSsp/RestrictedRemoteAdministration](./policy-csp-admx-credssp.md#admx-credssp-restrictedremoteadministration) - [ADMX_CtrlAltDel/DisableChangePassword](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablechangepassword) - [ADMX_CtrlAltDel/DisableLockComputer](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablelockcomputer) - [ADMX_CtrlAltDel/DisableTaskMgr](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disabletaskmgr) @@ -128,6 +139,14 @@ ms.date: 10/08/2020 - [ADMX_kdc/RequestCompoundId](./policy-csp-admx-kdc.md#admx-kdc-requestcompoundid) - [ADMX_kdc/TicketSizeThreshold](./policy-csp-admx-kdc.md#admx-kdc-ticketsizethreshold) - [ADMX_kdc/emitlili](./policy-csp-admx-kdc.md#admx-kdc-emitlili) +- [ADMX_Kerberos/AlwaysSendCompoundId](./policy-csp-admx-kerberos.md#admx-kerberos-alwayssendcompoundid) +- [ADMX_Kerberos/DevicePKInitEnabled](./policy-csp-admx-kerberos.md#admx-kerberos-devicepkinitenabled) +- [ADMX_Kerberos/HostToRealm](./policy-csp-admx-kerberos.md#admx-kerberos-hosttorealm) +- [ADMX_Kerberos/KdcProxyDisableServerRevocationCheck](./policy-csp-admx-kerberos.md#admx-kerberos-kdcproxydisableserverrevocationcheck) +- [ADMX_Kerberos/KdcProxyServer](./policy-csp-admx-kerberos.md#admx-kerberos-kdcproxyserver) +- [ADMX_Kerberos/MitRealms](./policy-csp-admx-kerberos.md#admx-kerberos-mitrealms) +- [ADMX_Kerberos/ServerAcceptsCompound](./policy-csp-admx-kerberos.md#admx-kerberos-serveracceptscompound) +- [ADMX_Kerberos/StrictTarget](./policy-csp-admx-kerberos.md#admx-kerberos-stricttarget) - [ADMX_LanmanServer/Pol_CipherSuiteOrder](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-ciphersuiteorder) - [ADMX_LanmanServer/Pol_HashPublication](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-hashpublication) - [ADMX_LanmanServer/Pol_HashSupportVersion](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-hashsupportversion) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index a1a8db3a83..570858dd4b 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -332,6 +332,43 @@ The following diagram shows the Policy configuration service provider in tree fo +### ADMX_CredSsp policies + +

    +
    + ADMX_CredSsp/AllowDefCredentialsWhenNTLMOnly +
    +
    + ADMX_CredSsp/AllowDefaultCredentials +
    +
    + ADMX_CredSsp/AllowEncryptionOracle +
    +
    + ADMX_CredSsp/AllowFreshCredentials +
    +
    + ADMX_CredSsp/AllowFreshCredentialsWhenNTLMOnly +
    +
    + ADMX_CredSsp/AllowSavedCredentials +
    +
    + ADMX_CredSsp/AllowSavedCredentialsWhenNTLMOnly +
    +
    + ADMX_CredSsp/DenyDefaultCredentials +
    +
    + ADMX_CredSsp/DenyFreshCredentials +
    +
    + ADMX_CredSsp/DenySavedCredentials +
    +
    + ADMX_CredSsp/RestrictedRemoteAdministration +
    +
    ### ADMX_CtrlAltDel policies
    @@ -576,6 +613,35 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_Kerberos policies + +
    +
    + ADMX_Kerberos/AlwaysSendCompoundId +
    +
    + ADMX_Kerberos/DevicePKInitEnabled +
    +
    + ADMX_Kerberos/HostToRealm +
    +
    + ADMX_Kerberos/KdcProxyDisableServerRevocationCheck +
    +
    + ADMX_Kerberos/KdcProxyServer +
    +
    + ADMX_Kerberos/MitRealms +
    +
    + ADMX_Kerberos/ServerAcceptsCompound +
    +
    + ADMX_Kerberos/StrictTarget +
    +
    + ### ADMX_LanmanServer policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-credssp.md b/windows/client-management/mdm/policy-csp-admx-credssp.md new file mode 100644 index 0000000000..12d2fd54c1 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-credssp.md @@ -0,0 +1,964 @@ +--- +title: Policy CSP - ADMX_CredSsp +description: Policy CSP - ADMX_CredSsp +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/12/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_CredSsp +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_CredSsp policies + +
    +
    + ADMX_CredSsp/AllowDefCredentialsWhenNTLMOnly +
    +
    + ADMX_CredSsp/AllowDefaultCredentials +
    +
    + ADMX_CredSsp/AllowEncryptionOracle +
    +
    + ADMX_CredSsp/AllowFreshCredentials +
    +
    + ADMX_CredSsp/AllowFreshCredentialsWhenNTLMOnly +
    +
    + ADMX_CredSsp/AllowSavedCredentials +
    +
    + ADMX_CredSsp/AllowSavedCredentialsWhenNTLMOnly +
    +
    + ADMX_CredSsp/DenyDefaultCredentials +
    +
    + ADMX_CredSsp/DenyFreshCredentials +
    +
    + ADMX_CredSsp/DenySavedCredentials +
    +
    + ADMX_CredSsp/RestrictedRemoteAdministration +
    +
    + + +
    + + +**ADMX_CredSsp/AllowDefCredentialsWhenNTLMOnly** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection). + +This policy setting applies when server authentication was achieved via NTLM. + +If you enable this policy setting, you can specify the servers to which the user's default credentials can be delegated (default credentials are those that you use when first logging on to Windows). + +If you disable or do not configure (by default) this policy setting, delegation of default credentials is not permitted to any machine. + +Note: The "Allow delegating default credentials with NTLM-only server authentication" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. + +For Example: + +- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +- TERMSRV/* Remote Desktop Session Host running on all machines. +- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow delegating default credentials with NTLM-only server authentication* +- GP name: *AllowDefCredentialsWhenNTLMOnly* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + + +**ADMX_CredSsp/AllowDefaultCredentials** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection). + +This policy setting applies when server authentication was achieved by using a trusted X509 certificate or Kerberos. + +If you enable this policy setting, you can specify the servers to which the user's default credentials can be delegated (default credentials are those that you use when first logging on to Windows). + +The policy becomes effective the next time the user signs on to a computer running Windows. + +If you disable or do not configure (by default) this policy setting, delegation of default credentials is not permitted to any computer. Applications depending upon this delegation behavior might fail authentication. For more information, see KB. + +FWlink for KB: +http://go.microsoft.com/fwlink/?LinkId=301508 + +Note: The "Allow delegating default credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. + +For Example: + +- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +- TERMSRV/* Remote Desktop Session Host running on all machines. +- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow delegating default credentials* +- GP name: *AllowDefaultCredentials* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + + +**ADMX_CredSsp/AllowEncryptionOracle** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting applies to applications using the CredSSP component (for example: Remote Desktop Connection). + +Some versions of the CredSSP protocol are vulnerable to an encryption oracle attack against the client. This policy controls compatibility with vulnerable clients and servers. This policy allows you to set the level of protection desired for the encryption oracle vulnerability. + +If you enable this policy setting, CredSSP version support will be selected based on the following options: + +Force Updated Clients: Client applications which use CredSSP will not be able to fall back to the insecure versions and services using CredSSP will not accept unpatched clients. Note: this setting should not be deployed until all remote hosts support the newest version. + +Mitigated: Client applications which use CredSSP will not be able to fall back to the insecure version but services using CredSSP will accept unpatched clients. See the link below for important information about the risk posed by remaining unpatched clients. + +Vulnerable: Client applications which use CredSSP will expose the remote servers to attacks by supporting fall back to the insecure versions and services using CredSSP will accept unpatched clients. + +For more information about the vulnerability and servicing requirements for protection, see https://go.microsoft.com/fwlink/?linkid=866660 + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Encryption Oracle Remediation* +- GP name: *AllowEncryptionOracle* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + + +**ADMX_CredSsp/AllowFreshCredentials** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection). + +This policy setting applies when server authentication was achieved via a trusted X509 certificate or Kerberos. + +If you enable this policy setting, you can specify the servers to which the user's fresh credentials can be delegated (fresh credentials are those that you are prompted for when executing the application). + +If you do not configure (by default) this policy setting, after proper mutual authentication, delegation of fresh credentials is permitted to Remote Desktop Session Host running on any machine (TERMSRV/*). + +If you disable this policy setting, delegation of fresh credentials is not permitted to any machine. + +> [!NOTE] +> The "Allow delegating fresh credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard is permitted when specifying the SPN. + +For Example: + +- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +- TERMSRV/* Remote Desktop Session Host running on all machines. +- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow delegating fresh credentials* +- GP name: *AllowFreshCredentials* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + + +**ADMX_CredSsp/AllowFreshCredentialsWhenNTLMOnly** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection). + +This policy setting applies when server authentication was achieved via NTLM. + +If you enable this policy setting, you can specify the servers to which the user's fresh credentials can be delegated (fresh credentials are those that you are prompted for when executing the application). + +If you do not configure (by default) this policy setting, after proper mutual authentication, delegation of fresh credentials is permitted to Remote Desktop Session Host running on any machine (TERMSRV/*). + +If you disable this policy setting, delegation of fresh credentials is not permitted to any machine. + +> [!NOTE] +> The "Allow delegating fresh credentials with NTLM-only server authentication" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. + +For Example: + +- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +- TERMSRV/* Remote Desktop Session Host running on all machines. +- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow delegating fresh credentials with NTLM-only server authentication* +- GP name: *AllowFreshCredentialsWhenNTLMOnly* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + + +**ADMX_CredSsp/AllowSavedCredentials** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection). + +This policy setting applies when server authentication was achieved via a trusted X509 certificate or Kerberos. + +If you enable this policy setting, you can specify the servers to which the user's saved credentials can be delegated (saved credentials are those that you elect to save/remember using the Windows credential manager). + +If you do not configure (by default) this policy setting, after proper mutual authentication, delegation of saved credentials is permitted to Remote Desktop Session Host running on any machine (TERMSRV/*). + +If you disable this policy setting, delegation of saved credentials is not permitted to any machine. + +> [!NOTE] +> The "Allow delegating saved credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. + +For Example: + +- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +- TERMSRV/* Remote Desktop Session Host running on all machines. +- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow delegating saved credentials* +- GP name: *AllowSavedCredentials* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + + +**ADMX_CredSsp/AllowSavedCredentialsWhenNTLMOnly** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection). + +This policy setting applies when server authentication was achieved via NTLM. + +If you enable this policy setting, you can specify the servers to which the user's saved credentials can be delegated (saved credentials are those that you elect to save/remember using the Windows credential manager). + +If you do not configure (by default) this policy setting, after proper mutual authentication, delegation of saved credentials is permitted to Remote Desktop Session Host running on any machine (TERMSRV/*) if the client machine is not a member of any domain. If the client is domain-joined, by default the delegation of saved credentials is not permitted to any machine. + +If you disable this policy setting, delegation of saved credentials is not permitted to any machine. + +> [!NOTE] +> The "Allow delegating saved credentials with NTLM-only server authentication" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. + +For Example: + +- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +- TERMSRV/* Remote Desktop Session Host running on all machines. +- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow delegating saved credentials with NTLM-only server authentication* +- GP name: *AllowSavedCredentialsWhenNTLMOnly* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + + +**ADMX_CredSsp/DenyDefaultCredentials** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection). + +If you enable this policy setting, you can specify the servers to which the user's default credentials cannot be delegated (default credentials are those that you use when first logging on to Windows). + +If you disable or do not configure (by default) this policy setting, this policy setting does not specify any server. + +> [!NOTE] +> The "Deny delegating default credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials cannot be delegated. The use of a single wildcard character is permitted when specifying the SPN. + +For Example: + +- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +- TERMSRV/* Remote Desktop Session Host running on all machines. +- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com + +This policy setting can be used in combination with the "Allow delegating default credentials" policy setting to define exceptions for specific servers that are otherwise permitted when using wildcard characters in the "Allow delegating default credentials" server list. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Deny delegating default credentials* +- GP name: *DenyDefaultCredentials* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + + +**ADMX_CredSsp/DenyFreshCredentials** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection). + +If you enable this policy setting, you can specify the servers to which the user's fresh credentials cannot be delegated (fresh credentials are those that you are prompted for when executing the application). + +If you disable or do not configure (by default) this policy setting, this policy setting does not specify any server. + +> [!NOTE] +> The "Deny delegating fresh credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials cannot be delegated. The use of a single wildcard character is permitted when specifying the SPN. + +For Example: + +- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +- TERMSRV/* Remote Desktop Session Host running on all machines. +- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com + +This policy setting can be used in combination with the "Allow delegating fresh credentials" policy setting to define exceptions for specific servers that are otherwise permitted when using wildcard characters in the "Allow delegating fresh credentials" server list. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Deny delegating fresh credentials* +- GP name: *DenyFreshCredentials* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + + +**ADMX_CredSsp/DenySavedCredentials** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting applies to applications using the Cred SSP component (for example: Remote Desktop Connection). + +If you enable this policy setting, you can specify the servers to which the user's saved credentials cannot be delegated (saved credentials are those that you elect to save/remember using the Windows credential manager). + +If you disable or do not configure (by default) this policy setting, this policy setting does not specify any server. + +> [!NOTE] +> The "Deny delegating saved credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials cannot be delegated. The use of a single wildcard character is permitted when specifying the SPN. + +For Example: + +- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +- TERMSRV/* Remote Desktop Session Host running on all machines. +- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com + +This policy setting can be used in combination with the "Allow delegating saved credentials" policy setting to define exceptions for specific servers that are otherwise permitted when using wildcard characters in the "Allow delegating saved credentials" server list. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Deny delegating saved credentials* +- GP name: *DenySavedCredentials* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + + +**ADMX_CredSsp/RestrictedRemoteAdministration** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. When running in Restricted Admin or Remote Credential Guard mode, participating apps do not expose signed in or supplied credentials to a remote host. Restricted Admin limits access to resources located on other servers or networks from the remote host because credentials are not delegated. Remote Credential Guard does not limit access to resources because it redirects all requests back to the client device. + +Participating apps: +Remote Desktop Client + +If you enable this policy setting, the following options are supported: + +- Restrict credential delegation: Participating applications must use Restricted Admin or Remote Credential Guard to connect to remote hosts. +- Require Remote Credential Guard: Participating applications must use Remote Credential Guard to connect to remote hosts. +- Require Restricted Admin: Participating applications must use Restricted Admin to connect to remote hosts. + +If you disable or do not configure this policy setting, Restricted Admin and Remote Credential Guard mode are not enforced and participating apps can delegate credentials to remote devices. + +> [!NOTE] +> To disable most credential delegation, it may be sufficient to deny delegation in Credential Security Support Provider (CredSSP) by modifying Administrative template settings (located at Computer Configuration\Administrative Templates\System\Credentials Delegation). +> +> On Windows 8.1 and Windows Server 2012 R2, enabling this policy will enforce Restricted Administration mode, regardless of the mode chosen. These versions do not support Remote Credential Guard. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict delegation of credentials to remote servers* +- GP name: *RestrictedRemoteAdministration* +- GP path: *System\Credentials Delegation* +- GP ADMX file name: *CredSsp.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + diff --git a/windows/client-management/mdm/policy-csp-admx-kerberos.md b/windows/client-management/mdm/policy-csp-admx-kerberos.md new file mode 100644 index 0000000000..594a97bf72 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-kerberos.md @@ -0,0 +1,641 @@ +--- +title: Policy CSP - ADMX_Kerberos +description: Policy CSP - ADMX_Kerberos +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/12/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Kerberos +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Kerberos policies + +
    +
    + ADMX_Kerberos/AlwaysSendCompoundId +
    +
    + ADMX_Kerberos/DevicePKInitEnabled +
    +
    + ADMX_Kerberos/HostToRealm +
    +
    + ADMX_Kerberos/KdcProxyDisableServerRevocationCheck +
    +
    + ADMX_Kerberos/KdcProxyServer +
    +
    + ADMX_Kerberos/MitRealms +
    +
    + ADMX_Kerberos/ServerAcceptsCompound +
    +
    + ADMX_Kerberos/StrictTarget +
    +
    + + +
    + + +**ADMX_Kerberos/AlwaysSendCompoundId** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether a device always sends a compound authentication request when the resource domain requests compound identity. + +> [!NOTE] +> For a domain controller to request compound authentication, the policies "KDC support for claims, compound authentication, and Kerberos armoring" and "Request compound authentication" must be configured and enabled in the resource account domain. + +If you enable this policy setting and the resource domain requests compound authentication, devices that support compound authentication always send a compound authentication request. + +If you disable or do not configure this policy setting and the resource domain requests compound authentication, devices will send a non-compounded authentication request first then a compound authentication request when the service requests compound authentication. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Always send compound authentication first* +- GP name: *AlwaysSendCompoundId* +- GP path: *System\Kerberos* +- GP ADMX file name: *Kerberos.admx* + + + +
    + + +**ADMX_Kerberos/DevicePKInitEnabled** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Support for device authentication using certificate will require connectivity to a DC in the device account domain which supports certificate authentication for computer accounts. + +This policy setting allows you to set support for Kerberos to attempt authentication using the certificate for the device to the domain. + +If you enable this policy setting, the device's credentials will be selected based on the following options: + +- Automatic: Device will attempt to authenticate using its certificate. If the DC does not support computer account authentication using certificates then authentication with password will be attempted. +- Force: Device will always authenticate using its certificate. If a DC cannot be found which support computer account authentication using certificates then authentication will fail. + +If you disable this policy setting, certificates will never be used. + +If you do not configure this policy setting, Automatic will be used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Support device authentication using certificate* +- GP name: *DevicePKInitEnabled* +- GP path: *System\Kerberos* +- GP ADMX file name: *Kerberos.admx* + + + +
    + + +**ADMX_Kerberos/HostToRealm** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify which DNS host names and which DNS suffixes are mapped to a Kerberos realm. + +If you enable this policy setting, you can view and change the list of DNS host names and DNS suffixes mapped to a Kerberos realm as defined by Group Policy. To view the list of mappings, enable the policy setting and then click the Show button. To add a mapping, enable the policy setting, note the syntax, and then click Show. In the Show Contents dialog box in the Value Name column, type a realm name. In the Value column, type the list of DNS host names and DNS suffixes using the appropriate syntax format. To remove a mapping from the list, click the mapping entry to be removed, and then press the DELETE key. To edit a mapping, remove the current entry from the list and add a new one with different parameters. + +If you disable this policy setting, the host name-to-Kerberos realm mappings list defined by Group Policy is deleted. + +If you do not configure this policy setting, the system uses the host name-to-Kerberos realm mappings that are defined in the local registry, if they exist. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Define host name-to-Kerberos realm mappings* +- GP name: *HostToRealm* +- GP path: *System\Kerberos* +- GP ADMX file name: *Kerberos.admx* + + + +
    + + +**ADMX_Kerberos/KdcProxyDisableServerRevocationCheck** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to disable revocation check for the SSL certificate of the targeted KDC proxy server. + +If you enable this policy setting, revocation check for the SSL certificate of the KDC proxy server is ignored by the Kerberos client. This policy setting should only be used in troubleshooting KDC proxy connections. +Warning: When revocation check is ignored, the server represented by the certificate is not guaranteed valid. + +If you disable or do not configure this policy setting, the Kerberos client enforces the revocation check for the SSL certificate. The connection to the KDC proxy server is not established if the revocation check fails. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disable revocation checking for the SSL certificate of KDC proxy servers* +- GP name: *KdcProxyDisableServerRevocationCheck* +- GP path: *System\Kerberos* +- GP ADMX file name: *Kerberos.admx* + + + +
    + + +**ADMX_Kerberos/KdcProxyServer** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the Kerberos client's mapping to KDC proxy servers for domains based on their DNS suffix names. + +If you enable this policy setting, the Kerberos client will use the KDC proxy server for a domain when a domain controller cannot be located based on the configured mappings. To map a KDC proxy server to a domain, enable the policy setting, click Show, and then map the KDC proxy server name(s) to the DNS name for the domain using the syntax described in the options pane. In the Show Contents dialog box in the Value Name column, type a DNS suffix name. In the Value column, type the list of proxy servers using the appropriate syntax format. To view the list of mappings, enable the policy setting and then click the Show button. To remove a mapping from the list, click the mapping entry to be removed, and then press the DELETE key. To edit a mapping, remove the current entry from the list and add a new one with different parameters. + +If you disable or do not configure this policy setting, the Kerberos client does not have KDC proxy servers settings defined by Group Policy. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify KDC proxy servers for Kerberos clients* +- GP name: *KdcProxyServer* +- GP path: *System\Kerberos* +- GP ADMX file name: *Kerberos.admx* + + + +
    + + +**ADMX_Kerberos/MitRealms** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the Kerberos client so that it can authenticate with interoperable Kerberos V5 realms, as defined by this policy setting. + +If you enable this policy setting, you can view and change the list of interoperable Kerberos V5 realms and their settings. To view the list of interoperable Kerberos V5 realms, enable the policy setting and then click the Show button. To add an interoperable Kerberos V5 realm, enable the policy setting, note the syntax, and then click Show. In the Show Contents dialog box in the Value Name column, type the interoperable Kerberos V5 realm name. In the Value column, type the realm flags and host names of the host KDCs using the appropriate syntax format. To remove an interoperable Kerberos V5 realm Value Name or Value entry from the list, click the entry, and then press the DELETE key. To edit a mapping, remove the current entry from the list and add a new one with different parameters. + +If you disable this policy setting, the interoperable Kerberos V5 realm settings defined by Group Policy are deleted. + +If you do not configure this policy setting, the system uses the interoperable Kerberos V5 realm settings that are defined in the local registry, if they exist. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Define interoperable Kerberos V5 realm settings* +- GP name: *MitRealms* +- GP path: *System\Kerberos* +- GP ADMX file name: *Kerberos.admx* + + + +
    + + +**ADMX_Kerberos/ServerAcceptsCompound** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls configuring the device's Active Directory account for compound authentication. + +Support for providing compound authentication which is used for access control will require enough domain controllers in the resource account domains to support the requests. The Domain Administrator must configure the policy "Support Dynamic Access Control and Kerberos armoring" on all the domain controllers to support this policy. + +If you enable this policy setting, the device's Active Directory account will be configured for compound authentication by the following options: + +- Never: Compound authentication is never provided for this computer account. +- Automatic: Compound authentication is provided for this computer account when one or more applications are configured for Dynamic Access Control. +- Always: Compound authentication is always provided for this computer account. + +If you disable this policy setting, Never will be used. + +If you do not configure this policy setting, Automatic will be used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Support compound authentication* +- GP name: *ServerAcceptsCompound* +- GP path: *System\Kerberos* +- GP ADMX file name: *Kerberos.admx* + + + +
    + + +**ADMX_Kerberos/StrictTarget** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure this server so that Kerberos can decrypt a ticket that contains this system-generated SPN. When an application attempts to make a remote procedure call (RPC) to this server with a NULL value for the service principal name (SPN), computers running Windows 7 or later attempt to use Kerberos by generating an SPN. + +If you enable this policy setting, only services running as LocalSystem or NetworkService are allowed to accept these connections. Services running as identities different from LocalSystem or NetworkService might fail to authenticate. + +If you disable or do not configure this policy setting, any service is allowed to accept incoming connections by using this system-generated SPN. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Require strict target SPN match on remote procedure calls* +- GP name: *StrictTarget* +- GP path: *System\Kerberos* +- GP ADMX file name: *Kerberos.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From beddf8c3beab9bde045f8e0c5f16de59f4421772 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 12 Nov 2020 16:18:26 -0800 Subject: [PATCH 041/958] Fixed build warning --- windows/client-management/mdm/policy-csp-admx-credssp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-admx-credssp.md b/windows/client-management/mdm/policy-csp-admx-credssp.md index 12d2fd54c1..d7b0960bb2 100644 --- a/windows/client-management/mdm/policy-csp-admx-credssp.md +++ b/windows/client-management/mdm/policy-csp-admx-credssp.md @@ -194,7 +194,7 @@ The policy becomes effective the next time the user signs on to a computer runni If you disable or do not configure (by default) this policy setting, delegation of default credentials is not permitted to any computer. Applications depending upon this delegation behavior might fail authentication. For more information, see KB. FWlink for KB: -http://go.microsoft.com/fwlink/?LinkId=301508 +https://go.microsoft.com/fwlink/?LinkId=301508 Note: The "Allow delegating default credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. From 5953293f7b571410871ea6e32729f2620bd1fa8b Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 12 Nov 2020 16:28:37 -0800 Subject: [PATCH 042/958] Formatting --- .../mdm/policy-csp-admx-credssp.md | 121 +++++++++--------- 1 file changed, 63 insertions(+), 58 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-credssp.md b/windows/client-management/mdm/policy-csp-admx-credssp.md index d7b0960bb2..264813691b 100644 --- a/windows/client-management/mdm/policy-csp-admx-credssp.md +++ b/windows/client-management/mdm/policy-csp-admx-credssp.md @@ -112,13 +112,14 @@ If you enable this policy setting, you can specify the servers to which the user If you disable or do not configure (by default) this policy setting, delegation of default credentials is not permitted to any machine. -Note: The "Allow delegating default credentials with NTLM-only server authentication" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. - -For Example: - -- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine -- TERMSRV/* Remote Desktop Session Host running on all machines. -- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com +> [!NOTE] +> The "Allow delegating default credentials with NTLM-only server authentication" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. +> +> For Example: +> +> - TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +> - TERMSRV/* Remote Desktop Session Host running on all machines. +> - TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com > [!TIP] @@ -196,13 +197,14 @@ If you disable or do not configure (by default) this policy setting, delegation FWlink for KB: https://go.microsoft.com/fwlink/?LinkId=301508 -Note: The "Allow delegating default credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. - -For Example: - -- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine -- TERMSRV/* Remote Desktop Session Host running on all machines. -- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com +> [!NOTE] +> The "Allow delegating default credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. +> +> For Example: +> +> - TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +> - TERMSRV/* Remote Desktop Session Host running on all machines. +> - TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com > [!TIP] @@ -273,11 +275,14 @@ Some versions of the CredSSP protocol are vulnerable to an encryption oracle att If you enable this policy setting, CredSSP version support will be selected based on the following options: -Force Updated Clients: Client applications which use CredSSP will not be able to fall back to the insecure versions and services using CredSSP will not accept unpatched clients. Note: this setting should not be deployed until all remote hosts support the newest version. +- Force Updated Clients: Client applications which use CredSSP will not be able to fall back to the insecure versions and services using CredSSP will not accept unpatched clients. -Mitigated: Client applications which use CredSSP will not be able to fall back to the insecure version but services using CredSSP will accept unpatched clients. See the link below for important information about the risk posed by remaining unpatched clients. +> [!NOTE] +> This setting should not be deployed until all remote hosts support the newest version. -Vulnerable: Client applications which use CredSSP will expose the remote servers to attacks by supporting fall back to the insecure versions and services using CredSSP will accept unpatched clients. +- Mitigated: Client applications which use CredSSP will not be able to fall back to the insecure version but services using CredSSP will accept unpatched clients. See the link below for important information about the risk posed by remaining unpatched clients. + +- Vulnerable: Client applications which use CredSSP will expose the remote servers to attacks by supporting fall back to the insecure versions and services using CredSSP will accept unpatched clients. For more information about the vulnerability and servicing requirements for protection, see https://go.microsoft.com/fwlink/?linkid=866660 @@ -356,12 +361,12 @@ If you disable this policy setting, delegation of fresh credentials is not permi > [!NOTE] > The "Allow delegating fresh credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard is permitted when specifying the SPN. +> +> For Example: -For Example: - -- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine -- TERMSRV/* Remote Desktop Session Host running on all machines. -- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com +> - TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +> - TERMSRV/* Remote Desktop Session Host running on all machines. +> - TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com > [!TIP] @@ -438,12 +443,12 @@ If you disable this policy setting, delegation of fresh credentials is not permi > [!NOTE] > The "Allow delegating fresh credentials with NTLM-only server authentication" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. - -For Example: - -- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine -- TERMSRV/* Remote Desktop Session Host running on all machines. -- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com +> +> For Example: +> +> - TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +> - TERMSRV/* Remote Desktop Session Host running on all machines. +> - TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com > [!TIP] @@ -520,12 +525,12 @@ If you disable this policy setting, delegation of saved credentials is not permi > [!NOTE] > The "Allow delegating saved credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. - -For Example: - -- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine -- TERMSRV/* Remote Desktop Session Host running on all machines. -- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com +> +> For Example: +> +> - TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +> - TERMSRV/* Remote Desktop Session Host running on all machines. +> - TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com > [!TIP] @@ -602,12 +607,12 @@ If you disable this policy setting, delegation of saved credentials is not permi > [!NOTE] > The "Allow delegating saved credentials with NTLM-only server authentication" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard character is permitted when specifying the SPN. - -For Example: - -- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine -- TERMSRV/* Remote Desktop Session Host running on all machines. -- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com +> +> For Example: +> +> - TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +> - TERMSRV/* Remote Desktop Session Host running on all machines. +> - TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in humanresources.fabrikam.com > [!TIP] @@ -680,12 +685,12 @@ If you disable or do not configure (by default) this policy setting, this policy > [!NOTE] > The "Deny delegating default credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials cannot be delegated. The use of a single wildcard character is permitted when specifying the SPN. - -For Example: - -- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine -- TERMSRV/* Remote Desktop Session Host running on all machines. -- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com +> +> For Example: +> +> - TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +> - TERMSRV/* Remote Desktop Session Host running on all machines. +> - TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com This policy setting can be used in combination with the "Allow delegating default credentials" policy setting to define exceptions for specific servers that are otherwise permitted when using wildcard characters in the "Allow delegating default credentials" server list. @@ -760,12 +765,12 @@ If you disable or do not configure (by default) this policy setting, this policy > [!NOTE] > The "Deny delegating fresh credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials cannot be delegated. The use of a single wildcard character is permitted when specifying the SPN. - -For Example: - -- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine -- TERMSRV/* Remote Desktop Session Host running on all machines. -- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com +> +> For Example: +> +> - TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +> - TERMSRV/* Remote Desktop Session Host running on all machines. +> - TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com This policy setting can be used in combination with the "Allow delegating fresh credentials" policy setting to define exceptions for specific servers that are otherwise permitted when using wildcard characters in the "Allow delegating fresh credentials" server list. @@ -840,12 +845,12 @@ If you disable or do not configure (by default) this policy setting, this policy > [!NOTE] > The "Deny delegating saved credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials cannot be delegated. The use of a single wildcard character is permitted when specifying the SPN. - -For Example: - -- TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine -- TERMSRV/* Remote Desktop Session Host running on all machines. -- TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com +> +> For Example: +> +> - TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine +> - TERMSRV/* Remote Desktop Session Host running on all machines. +> - TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com This policy setting can be used in combination with the "Allow delegating saved credentials" policy setting to define exceptions for specific servers that are otherwise permitted when using wildcard characters in the "Allow delegating saved credentials" server list. From 26468ce82ecf0593685955f7874a2308ac4596e6 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 12 Nov 2020 16:33:57 -0800 Subject: [PATCH 043/958] Formatting --- windows/client-management/mdm/policy-csp-admx-credssp.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-credssp.md b/windows/client-management/mdm/policy-csp-admx-credssp.md index 264813691b..4b830deeb7 100644 --- a/windows/client-management/mdm/policy-csp-admx-credssp.md +++ b/windows/client-management/mdm/policy-csp-admx-credssp.md @@ -277,8 +277,8 @@ If you enable this policy setting, CredSSP version support will be selected base - Force Updated Clients: Client applications which use CredSSP will not be able to fall back to the insecure versions and services using CredSSP will not accept unpatched clients. -> [!NOTE] -> This setting should not be deployed until all remote hosts support the newest version. + > [!NOTE] + > This setting should not be deployed until all remote hosts support the newest version. - Mitigated: Client applications which use CredSSP will not be able to fall back to the insecure version but services using CredSSP will accept unpatched clients. See the link below for important information about the risk posed by remaining unpatched clients. @@ -363,7 +363,7 @@ If you disable this policy setting, delegation of fresh credentials is not permi > The "Allow delegating fresh credentials" policy setting can be set to one or more Service Principal Names (SPNs). The SPN represents the target server to which the user credentials can be delegated. The use of a single wildcard is permitted when specifying the SPN. > > For Example: - +> > - TERMSRV/host.humanresources.fabrikam.com Remote Desktop Session Host running on host.humanresources.fabrikam.com machine > - TERMSRV/* Remote Desktop Session Host running on all machines. > - TERMSRV/*.humanresources.fabrikam.com Remote Desktop Session Host running on all machines in .humanresources.fabrikam.com From c2cebed14d7fa6d77ca39585c18f5ed41997d0a1 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 13 Nov 2020 11:07:23 -0800 Subject: [PATCH 044/958] Added WPN policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 8 +- .../policy-configuration-service-provider.md | 23 + .../mdm/policy-csp-admx-wpn.md | 489 ++++++++++++++++++ 4 files changed, 520 insertions(+), 1 deletion(-) create mode 100644 windows/client-management/mdm/policy-csp-admx-wpn.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index a9c36e49a0..e35b1817cc 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -234,6 +234,7 @@ #### [ADMX_WindowsStore](policy-csp-admx-windowsstore.md) #### [ADMX_WinInit](policy-csp-admx-wininit.md) #### [ADMX_wlansvc](policy-csp-admx-wlansvc.md) +#### [ADMX_WPN](policy-csp-admx-wpn.md) #### [ApplicationDefaults](policy-csp-applicationdefaults.md) #### [ApplicationManagement](policy-csp-applicationmanagement.md) #### [AppRuntime](policy-csp-appruntime.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 8604b2c6e6..d85775baec 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -812,7 +812,13 @@ ms.date: 10/08/2020 - [ADMX_WinInit/ShutdownTimeoutHungSessionsDescription](./policy-csp-admx-wininit.md#admx-wininit-shutdowntimeouthungsessionsdescription) - [ADMX_wlansvc/SetCost](./policy-csp-admx-wlansvc.md#admx-wlansvc-setcost) - [ADMX_wlansvc/SetPINEnforced](./policy-csp-admx-wlansvc.md#admx-wlansvc-setpinenforced) -- [ADMX_wlansvc/SetPINPreferred](./policy-csp-admx-wlansvc.md#admx-wlansvc-setpinpreferred) +- [ADMX_wlansvc/SetPINPreferred](./policy-csp-admx-wlansvc.md#admx-wlansvc-setpinpreferred) +- [ADMX_WPN/NoCallsDuringQuietHours](./policy-csp-admx-wpn.md#admx-wpn-nocallsduringquiethours) +- [ADMX_WPN/NoLockScreenToastNotification](./policy-csp-admx-wpn.md#admx-wpn-nolockscreentoastnotification) +- [ADMX_WPN/NoQuietHours](./policy-csp-admx-wpn.md#admx-wpn-noquiethours) +- [ADMX_WPN/NoToastNotification](./policy-csp-admx-wpn.md#admx-wpn-notoastnotification) +- [ADMX_WPN/QuietHoursDailyBeginMinute](./policy-csp-admx-wpn.md#admx-wpn-quiethoursdailybeginminute) +- [ADMX_WPN/QuietHoursDailyEndMinute](./policy-csp-admx-wpn.md#admx-wpn-quiethoursdailyendminute) - [AppRuntime/AllowMicrosoftAccountsToBeOptional](./policy-csp-appruntime.md#appruntime-allowmicrosoftaccountstobeoptional) - [AppVirtualization/AllowAppVClient](./policy-csp-appvirtualization.md#appvirtualization-allowappvclient) - [AppVirtualization/AllowDynamicVirtualization](./policy-csp-appvirtualization.md#appvirtualization-allowdynamicvirtualization) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 570858dd4b..ef13b92e7e 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -2839,6 +2839,29 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_WPN policies + +
    +
    + ADMX_WPN/NoCallsDuringQuietHours +
    +
    + ADMX_WPN/NoLockScreenToastNotification +
    +
    + ADMX_WPN/NoQuietHours +
    +
    + ADMX_WPN/NoToastNotification +
    +
    + ADMX_WPN/QuietHoursDailyBeginMinute +
    +
    + ADMX_WPN/QuietHoursDailyEndMinute +
    +
    + ### ApplicationDefaults policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-wpn.md b/windows/client-management/mdm/policy-csp-admx-wpn.md new file mode 100644 index 0000000000..863f094564 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-wpn.md @@ -0,0 +1,489 @@ +--- +title: Policy CSP - ADMX_WPN +description: Policy CSP - ADMX_WPN +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/13/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_WPN +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_WPN policies + +
    +
    + ADMX_WPN/NoCallsDuringQuietHours +
    +
    + ADMX_WPN/NoLockScreenToastNotification +
    +
    + ADMX_WPN/NoQuietHours +
    +
    + ADMX_WPN/NoToastNotification +
    +
    + ADMX_WPN/QuietHoursDailyBeginMinute +
    +
    + ADMX_WPN/QuietHoursDailyEndMinute +
    +
    + + +
    + + +**ADMX_WPN/NoCallsDuringQuietHours** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting blocks voice and video calls during Quiet Hours. + +If you enable this policy setting, voice and video calls will be blocked during the designated Quiet Hours time window each day, and users will not be able to customize any other Quiet Hours settings. + +If you disable this policy setting, voice and video calls will be allowed during Quiet Hours, and users will not be able to customize this or any other Quiet Hours settings. + +If you do not configure this policy setting, voice and video calls will be allowed during Quiet Hours by default. Administrators and users will be able to modify this setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off calls during Quiet Hours* +- GP name: *NoCallsDuringQuietHours* +- GP path: *Start Menu and Taskbar\Notifications* +- GP ADMX file name: *WPN.admx* + + + +
    + + +**ADMX_WPN/NoLockScreenToastNotification** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off toast notifications on the lock screen. + +If you enable this policy setting, applications will not be able to raise toast notifications on the lock screen. + +If you disable or do not configure this policy setting, toast notifications on the lock screen are enabled and can be turned off by the administrator or user. + +No reboots or service restarts are required for this policy setting to take effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off toast notifications on the lock screen* +- GP name: *NoLockScreenToastNotification* +- GP path: *Start Menu and Taskbar\Notifications* +- GP ADMX file name: *WPN.admx* + + + +
    + + +**ADMX_WPN/NoQuietHours** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off Quiet Hours functionality. + +If you enable this policy setting, toast notifications will not be suppressed and some background tasks will not be deferred during the designated Quiet Hours time window each day. + +If you disable this policy setting, toast notifications will be suppressed and some background task deferred during the designated Quiet Hours time window. Users will not be able to change this or any other Quiet Hours settings. + +If you do not configure this policy setting, Quiet Hours are enabled by default but can be turned off or by the administrator or user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Quiet Hours* +- GP name: *NoQuietHours* +- GP path: *Start Menu and Taskbar\Notifications* +- GP ADMX file name: *WPN.admx* + + + +
    + + +**ADMX_WPN/NoToastNotification** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off toast notifications for applications. + +If you enable this policy setting, applications will not be able to raise toast notifications. + +Note that this policy does not affect taskbar notification balloons. + +Note that Windows system features are not affected by this policy. You must enable/disable system features individually to stop their ability to raise toast notifications. + +If you disable or do not configure this policy setting, toast notifications are enabled and can be turned off by the administrator or user. + +No reboots or service restarts are required for this policy setting to take effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off toast notifications* +- GP name: *NoToastNotification* +- GP path: *Start Menu and Taskbar\Notifications* +- GP ADMX file name: *WPN.admx* + + + +
    + + +**ADMX_WPN/QuietHoursDailyBeginMinute** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the number of minutes after midnight (local time) that Quiet Hours is to begin each day. + +If you enable this policy setting, the specified time will be used, and users will not be able to customize any Quiet Hours settings. + +If you disable this policy setting, a default value will be used, and users will not be able to change it or any other Quiet Hours setting. + +If you do not configure this policy setting, a default value will be used, which administrators and users will be able to modify. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set the time Quiet Hours begins each day* +- GP name: *QuietHoursDailyBeginMinute* +- GP path: *Start Menu and Taskbar\Notifications* +- GP ADMX file name: *WPN.admx* + + + +
    + + +**ADMX_WPN/QuietHoursDailyEndMinute** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the number of minutes after midnight (local time) that Quiet Hours is to end each day. + +If you enable this policy setting, the specified time will be used, and users will not be able to customize any Quiet Hours settings. + +If you disable this policy setting, a default value will be used, and users will not be able to change it or any other Quiet Hours setting. + +If you do not configure this policy setting, a default value will be used, which administrators and users will be able to modify. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set the time Quiet Hours ends each day* +- GP name: *QuietHoursDailyEndMinute* +- GP path: *Start Menu and Taskbar\Notifications* +- GP ADMX file name: *WPN.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From d25dda17b076ba546fec6ee2f78655299c0c5c4f Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 13 Nov 2020 11:31:35 -0800 Subject: [PATCH 045/958] Added SystemRestore policy --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 1 + .../policy-configuration-service-provider.md | 8 ++ .../mdm/policy-csp-admx-systemrestore.md | 120 ++++++++++++++++++ 4 files changed, 130 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-systemrestore.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index e35b1817cc..98251b87fe 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -218,6 +218,7 @@ #### [ADMX_Smartcard](policy-csp-admx-smartcard.md) #### [ADMX_Snmp](policy-csp-admx-snmp.md) #### [ADMX_StartMenu](policy-csp-admx-startmenu.md) +#### [ADMX_SystemRestore](policy-csp-admx-systemrestore.md) #### [ADMX_Taskbar](policy-csp-admx-taskbar.md) #### [ADMX_tcpip](policy-csp-admx-tcpip.md) #### [ADMX_Thumbnails](policy-csp-admx-thumbnails.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index d85775baec..365e5a94e6 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -522,6 +522,7 @@ ms.date: 10/08/2020 - [ADMX_StartMenu/ShowStartOnDisplayWithForegroundOnWinKey](./policy-csp-admx-startmenu.md#admx-startmenu-showstartondisplaywithforegroundonwinkey) - [ADMX_StartMenu/StartMenuLogOff](./policy-csp-admx-startmenu.md#admx-startmenu-startmenulogoff) - [ADMX_StartMenu/StartPinAppsWhenInstalled](./policy-csp-admx-startmenu.md#admx-startmenu-startpinappswheninstalled) +- [ADMX_SystemRestore/SR_DisableConfig](./policy-csp-admx-systemrestore.md#admx-systemrestore-sr-disableconfig) - [ADMX_Taskbar/DisableNotificationCenter](./policy-csp-admx-taskbar.md#admx-taskbar-disablenotificationcenter) - [ADMX_Taskbar/EnableLegacyBalloonNotifications](./policy-csp-admx-taskbar.md#admx-taskbar-enablelegacyballoonnotifications) - [ADMX_Taskbar/HideSCAHealth](./policy-csp-admx-taskbar.md#admx-taskbar-hidescahealth) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index ef13b92e7e..6431d07b97 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1885,6 +1885,14 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_SystemRestore policies + +
    +
    + ADMX_SystemRestore/SR_DisableConfig +
    +
    + ### ADMX_Taskbar policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-systemrestore.md b/windows/client-management/mdm/policy-csp-admx-systemrestore.md new file mode 100644 index 0000000000..8e49043225 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-systemrestore.md @@ -0,0 +1,120 @@ +--- +title: Policy CSP - ADMX_SystemRestore +description: Policy CSP - ADMX_SystemRestore +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/13/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_SystemRestore +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_SystemRestore policies + +
    +
    + ADMX_SystemRestore/SR_DisableConfig +
    +
    + + +
    + + +**ADMX_SystemRestore/SR_DisableConfig** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in Windows 10 Insider Preview Build 20185. Allows you to disable System Restore configuration through System Protection. + +This policy setting allows you to turn off System Restore configuration through System Protection. + +System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. The behavior of this policy setting depends on the "Turn off System Restore" policy setting. + +If you enable this policy setting, the option to configure System Restore through System Protection is disabled. + +If you disable or do not configure this policy setting, users can change the System Restore settings through System Protection. + +Also, see the "Turn off System Restore" policy setting. If the "Turn off System Restore" policy setting is enabled, the "Turn off System Restore configuration" policy setting is overwritten. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Configuration* +- GP name: *SR_DisableConfig* +- GP path: *System\System Restore* +- GP ADMX file name: *SystemRestore.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 9ee17c956a4d55a88f76bebb5863138b47e53bef Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Fri, 13 Nov 2020 20:42:08 +0100 Subject: [PATCH 046/958] Microsoft Defender SmartScreen: Column corrections There are 2 cells divided from column 2, which makes them create a third column without a correct description, whereas column 3 has been moved to column 4 for row 1 and 2. This commit aims to rectify this by moving the content of column 3 back to column 2 and column 4 back to column 3. --- .../microsoft-defender-smartscreen-available-settings.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md index e0ab6e4909..a25aed7eab 100644 --- a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md +++ b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md @@ -34,14 +34,13 @@ SmartScreen uses registry-based Administrative Template policy settings. For mor Windows 10, version 2004:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure Windows Defender SmartScreen

    -Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure Windows Defender SmartScreen

    Windows 10, Version 1607 and earlier:
    Administrative Templates\Windows Components\File Explorer\Configure Windows SmartScreen -At least Windows Server 2012, Windows 8 or Windows RT +Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure Windows Defender SmartScreen

    Windows 10, Version 1607 and earlier:
    Administrative Templates\Windows Components\File Explorer\Configure Windows SmartScreen

    +At least Windows Server 2012, Windows 8 or Windows RT This policy setting turns on Microsoft Defender SmartScreen.

    If you enable this setting, it turns on Microsoft Defender SmartScreen and your employees are unable to turn it off. Additionally, when enabling this feature, you must also pick whether Microsoft Defender SmartScreen should Warn your employees or Warn and prevent bypassing the message (effectively blocking the employee from the site).

    If you disable this setting, it turns off Microsoft Defender SmartScreen and your employees are unable to turn it on.

    If you don't configure this setting, your employees can decide whether to use Microsoft Defender SmartScreen. Windows 10, version 2004:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control -Windows 10, version 1703 This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.

    This setting does not protect against malicious content from USB devices, network shares or other non-internet sources.

    Important: Using a trustworthy browser helps ensure that these protections work as expected.

    From 673715bdf5fd87363ed7a1d54a6fa96bdf77cb37 Mon Sep 17 00:00:00 2001 From: Stefan Flegg Date: Sun, 15 Nov 2020 12:33:59 +1000 Subject: [PATCH 047/958] Update vpn-name-resolution.md Minor typo in Persistent section. --- windows/security/identity-protection/vpn/vpn-name-resolution.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/vpn/vpn-name-resolution.md b/windows/security/identity-protection/vpn/vpn-name-resolution.md index 6ff26370e3..3b6a776b1e 100644 --- a/windows/security/identity-protection/vpn/vpn-name-resolution.md +++ b/windows/security/identity-protection/vpn/vpn-name-resolution.md @@ -52,7 +52,7 @@ Primary DNS suffix is set using the **VPNv2/*ProfileName*/DnsSuffix** node. ## Persistent -You can also configure *persistent* name resolution rules. Name resolution for specified items will only performed over VPN. +You can also configure *persistent* name resolution rules. Name resolution for specified items will only be performed over the VPN. Persistent name resolution is set using the **VPNv2/*ProfileName*/DomainNameInformationList//*dniRowId*/Persistent** node. From 6b778b47406acb2ea456b663a467ea87853275fe Mon Sep 17 00:00:00 2001 From: Graham Williams Date: Mon, 16 Nov 2020 10:05:45 +0000 Subject: [PATCH 048/958] Updates Jamf Signing Step 4 for Clarity Changes for #8631 as suggested. --- .../microsoft-defender-atp/mac-sysext-policies.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-policies.md b/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-policies.md index 9b20ff2260..73bb94faf9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-policies.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-sysext-policies.md @@ -150,13 +150,13 @@ As part of the Endpoint Detection and Response capabilities, Microsoft Defender 4. After the certificate is created and installed to your device, run the following command from the Terminal to sign the file: ```bash - $ security cms -S -N "" -i /com.apple.webcontent-filter.mobileconfig -o /com.microsoft.network-extension.signed.mobileconfig + $ security cms -S -N "" -i /com.microsoft.network-extension.mobileconfig -o /com.microsoft.network-extension.signed.mobileconfig ``` For example, if the certificate name is **SigningCertificate** and the signed file is going to be stored in Documents: ```bash - $ security cms -S -N "SigningCertificate" -i ~/Documents/com.apple.webcontent-filter.mobileconfig -o ~/Documents/com.microsoft.network-extension.signed.mobileconfig + $ security cms -S -N "SigningCertificate" -i ~/Documents/com.microsoft.network-extension.mobileconfig -o ~/Documents/com.microsoft.network-extension.signed.mobileconfig ``` 5. From the JAMF portal, navigate to **Configuration Profiles** and click the **Upload** button. Select `com.microsoft.network-extension.signed.mobileconfig` when prompted for the file. From 81b2787d1132155b27fc95ea7efc32b99615c5b9 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 16 Nov 2020 17:03:34 -0800 Subject: [PATCH 049/958] Added new policies --- .../mdm/policy-csp-admx-windowsdefender.md | 434 ++++++++++++++++++ 1 file changed, 434 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-windowsdefender.md diff --git a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md b/windows/client-management/mdm/policy-csp-admx-windowsdefender.md new file mode 100644 index 0000000000..36fb917d07 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-windowsdefender.md @@ -0,0 +1,434 @@ +--- +title: Policy CSP - ADMX_WindowsDefender +description: Policy CSP - ADMX_WindowsDefender +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 08/13/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_WindowsDefender +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_WindowsDefender policies + +
    +
    + ADMX_WindowsDefender/AllowFastServiceStartup +
    +
    + ADMX_WindowsDefender/CheckForSignaturesBeforeRunningScan +
    +
    + ADMX_WindowsDefender/DisableAntiSpywareDefender +
    +
    + ADMX_WindowsDefender/DisableAutoExclusions +
    +
    + ADMX_WindowsDefender/DisableBlockAtFirstSeen +
    +
    + ADMX_WindowsDefender/DisableLocalAdminMerge +
    +
    + ADMX_WindowsDefender/DisableRealtimeMonitoring +
    +
    + ADMX_WindowsDefender/DisableRoutinelyTakingAction +
    +
    + ADMX_WindowsDefender/Exclusions_Extensions +
    +
    + ADMX_WindowsDefender/Exclusions_Paths +
    +
    + ADMX_WindowsDefender/Exclusions_Processes +
    +
    + ADMX_WindowsDefender/ExploitGuard_ASR_ASROnlyExclusions +
    +
    + ADMX_WindowsDefender/ExploitGuard_ASR_Rules +
    +
    + ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_AllowedApplications +
    +
    + ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess +
    +
    + ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_ProtectedFolders +
    +
    + ADMX_WindowsDefender/ExploitGuard_EnableNetworkProtection +
    +
    + ADMX_WindowsDefender/MpEngine_EnableFileHashComputation +
    +
    + ADMX_WindowsDefender/Nis_Consumers_IPS_DisableSignatureRetirement +
    +
    + ADMX_WindowsDefender/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid +
    +
    + ADMX_WindowsDefender/Nis_DisableProtocolRecognition +
    +
    + ADMX_WindowsDefender/ProxyBypass +
    +
    + ADMX_WindowsDefender/ProxyPacUrl +
    +
    + ADMX_WindowsDefender/ProxyServer +
    +
    + ADMX_WindowsDefender/Quarantine_LocalSettingOverridePurgeItemsAfterDelay +
    +
    + ADMX_WindowsDefender/Quarantine_PurgeItemsAfterDelay +
    +
    + ADMX_WindowsDefender/RandomizeScheduleTaskTimes +
    +
    + ADMX_WindowsDefender/RealtimeProtection_DisableBehaviorMonitoring +
    +
    + ADMX_WindowsDefender/RealtimeProtection_DisableIOAVProtection +
    +
    + ADMX_WindowsDefender/RealtimeProtection_DisableOnAccessProtection +
    +
    + ADMX_WindowsDefender/RealtimeProtection_DisableRawWriteNotification +
    +
    + ADMX_WindowsDefender/RealtimeProtection_DisableScanOnRealtimeEnable +
    +
    + ADMX_WindowsDefender/RealtimeProtection_IOAVMaxSize +
    +
    + ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring +
    +
    + ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection +
    +
    + ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection +
    +
    + ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring +
    +
    + ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection +
    +
    + ADMX_WindowsDefender/RealtimeProtection_RealtimeScanDirection +
    +
    + ADMX_WindowsDefender/Remediation_LocalSettingOverrideScan_ScheduleTime +
    +
    + ADMX_WindowsDefender/Remediation_Scan_ScheduleDay +
    +
    + ADMX_WindowsDefender/Remediation_Scan_ScheduleTime +
    +
    + ADMX_WindowsDefender/Reporting_AdditionalActionTimeout +
    +
    + ADMX_WindowsDefender/Reporting_CriticalFailureTimeout +
    +
    + ADMX_WindowsDefender/Reporting_DisableEnhancedNotifications +
    +
    + ADMX_WindowsDefender/Reporting_DisablegenericrePorts +
    +
    + ADMX_WindowsDefender/Reporting_NonCriticalTimeout +
    +
    + ADMX_WindowsDefender/Reporting_RecentlyCleanedTimeout +
    +
    + ADMX_WindowsDefender/Reporting_WppTracingComponents +
    +
    + ADMX_WindowsDefender/Reporting_WppTracingLevel +
    +
    + ADMX_WindowsDefender/Root_PUAProtection +
    +
    + ADMX_WindowsDefender/Scan_AllowPause +
    +
    + ADMX_WindowsDefender/Scan_ArchiveMaxDepth +
    +
    + ADMX_WindowsDefender/Scan_ArchiveMaxSize +
    +
    + ADMX_WindowsDefender/Scan_AvgCPULoadFactor +
    +
    + ADMX_WindowsDefender/Scan_DisableArchiveScanning +
    +
    + ADMX_WindowsDefender/Scan_DisableCatchupFullScan +
    +
    + Scan_DisableCatchupQuickScan/ProxyBypass +
    +
    + ADMX_WindowsDefender/Scan_DisableEmailScanning +
    +
    + ADMX_WindowsDefender/Scan_DisableHeuristics +
    +
    + ADMX_WindowsDefender/Scan_DisablePackedExeScanning +
    +
    + ADMX_WindowsDefender/Scan_DisableRemovableDriveScanning +
    +
    + ADMX_WindowsDefender/Scan_DisableReparsePointScanning +
    +
    + ADMX_WindowsDefender/Scan_DisableRestorePoint +
    +
    + ADMX_WindowsDefender/Scan_DisableScanningMappedNetworkDrivesForFullScan +
    +
    + ADMX_WindowsDefender/Scan_DisableScanningNetworkFiles +
    +
    + ADMX_WindowsDefender/Scan_LocalSettingOverrideAvgCPULoadFactor +
    +
    + ADMX_WindowsDefender/Scan_LocalSettingOverrideScanParameters +
    +
    + ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleDay +
    +
    + ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleQuickScantime +
    +
    + ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleTime +
    +
    + ADMX_WindowsDefender/Scan_LowCpuPriority +
    +
    + ADMX_WindowsDefender/Scan_MissedScheduledScanCountBeforeCatchup +
    +
    + ADMX_WindowsDefender/Scan_PurgeItemsAfterDelay +
    +
    + ADMX_WindowsDefender/Scan_QuickScanInterval +
    +
    + ADMX_WindowsDefender/Scan_ScanOnlyIfIdle +
    +
    + ADMX_WindowsDefender/Scan_ScanParameters +
    +
    + ADMX_WindowsDefender/Scan_ScheduleDay +
    +
    + ADMX_WindowsDefender/Scan_ScheduleQuickScantime +
    +
    + ADMX_WindowsDefender/Scan_ScheduleTime +
    +
    + ADMX_WindowsDefender/ServiceKeepAlive +
    +
    + ADMX_WindowsDefender/SignatureUpdate_ASSignatureDue +
    +
    + ADMX_WindowsDefender/SignatureUpdate_AVSignatureDue +
    +
    + ADMX_WindowsDefender/SignatureUpdate_DefinitionUpdateFileSharesSources +
    +
    + ADMX_WindowsDefender/SignatureUpdate_DisableScanOnUpdate +
    +
    + ADMX_WindowsDefender/SignatureUpdate_DisableScheduledSignatureUpdateonBattery +
    +
    + ADMX_WindowsDefender/SignatureUpdate_DisableUpdateOnStartupWithoutEngine +
    +
    + ADMX_WindowsDefender/SignatureUpdate_FallbackOrder +
    +
    + ADMX_WindowsDefender/SignatureUpdate_ForceUpdateFromMU +
    +
    + ADMX_WindowsDefender/SignatureUpdate_RealtimeSignatureDelivery +
    +
    + ADMX_WindowsDefender/SignatureUpdate_ScheduleDay +
    +
    + ADMX_WindowsDefender/SignatureUpdate_ScheduleTime +
    +
    + ADMX_WindowsDefender/SignatureUpdate_SharedSignaturesLocation +
    +
    + ADMX_WindowsDefender/SignatureUpdate_SignatureDisableNotification +
    +
    + ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateCatchupInterval +
    +
    + ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateInterval +
    +
    + ADMX_WindowsDefender/SignatureUpdate_UpdateOnStartup +
    +
    + ADMX_WindowsDefender/SpynetReporting +
    +
    + ADMX_WindowsDefender/Spynet_LocalSettingOverrideSpynetReporting +
    +
    + ADMX_WindowsDefender/SubmitSamplesConsent +
    +
    + ADMX_WindowsDefender/Threats_ThreatIdDefaultAction +
    +
    + ADMX_WindowsDefender/Threats_ThreatSeverityDefaultAction +
    +
    + ADMX_WindowsDefender/UX_Configuration_CustomDefaultActionToastString +
    +
    + ADMX_WindowsDefender/UX_Configuration_Notification_Suppress +
    +
    + ADMX_WindowsDefender/UX_Configuration_SuppressRebootNotification +
    +
    + ADMX_WindowsDefender/UX_Configuration_UILockdown +
    +
    + + +
    + + +**ADMX_AuditSettings/IncludeCmdLine** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in Windows 10 Insider Preview Build 20185. This policy setting determines what information is logged in security audit events when a new process has been created. This setting only applies when the Audit Process Creation policy is enabled. + +If you enable this policy setting, the command line information for every process will be logged in plain text in the security event log as part of the Audit Process Creation event 4688, "a new process has been created," on the workstations and servers on which this policy setting is applied. + +If you disable or do not configure this policy setting, the process's command line information will not be included in Audit Process Creation events. + +Default is Not configured. + +> [!NOTE] +> When this policy setting is enabled, any user with access to read the security events will be able to read the command line arguments for any successfully created process. Command line arguments can contain sensitive or private information, such as passwords or user data. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Include command line in process creation events* +- GP name: *IncludeCmdLine* +- GP path: *System/Audit Process Creation* +- GP ADMX file name: *AuditSettings.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From c023c7d42a21d09c588689b5f91f0f1d7df1c57e Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 10:22:56 +0530 Subject: [PATCH 050/958] Create firewall-settings-lost-on-upgrade.md --- .../firewall-settings-lost-on-upgrade.md | 44 +++++++++++++++++++ 1 file changed, 44 insertions(+) create mode 100644 windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md new file mode 100644 index 0000000000..77e0fa9ee4 --- /dev/null +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -0,0 +1,44 @@ +--- +title: Firewall Settings Lost on Upgrade +description: Firewall Settings Lost on Upgrade + +ms.reviewer: +ms.author: Benny-54 +ms.prod: w10 +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +author: Benny-54 +manager: dansimp +ms.collection: +- m365-security-compliance +- m365-initiative-windows-security +ms.topic: troubleshooting +--- + +# Firewall Settings Lost on Upgrade + +This article describes a scenario whereby previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. + +## Rule Groups + +Individual built-in firewall rules are categorized within a group. For example, the following individual rules form part of the ‘Remote Desktop’ group. + +- Remote Desktop – Shadow (TCP-In) + +- Remote Desktop – User Mode (TCP-In) + +- Remote Desktop – User-Mode (UDP-In) + +Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Administrators can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘Inbound’ or ‘Outbound Rules’ and selecting ‘Filter by Group’; or via PowerShell using the Get-NetFirewallRule cmdlet with the -Group switch. + +```Powershell +Get-NetFirewallRule -Group +``` + +> [!NOTE] +> It is recommended to enable an entire group instead of individual rules if the expectation is the ruleset is going to be migrated at some point. + +It is recommended to enable/disable all rules within a group, as opposed to enabling/disabling just one or two of the individual rules to help avoid unexpected behaviors. For example, while rule groups can be used to organize rules by influence and allows batch rule modifications, they are also used as a way to maintain rule state across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the process determines what should be enabled/disabled when the upgrade is complete. + +Take the Remote Desktop group example mentioned above. It consists of three rules. To ensure that the ruleset is properly maintained once the upgrade is complete, all three rules should be enabled. If only one rule is enabled, the upgrade process will see that two of three rules is disabled and subsequently disable the entire group to maintain an as pristine out-of-the-box configuration as possible. Obviously, in this scenario, this brings the unintended consequence of being unable to establish RDP connection to the host. From a9cff113deab0cbfbf190f95468cdf762b2ac3cb Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 10:34:57 +0530 Subject: [PATCH 051/958] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 77e0fa9ee4..f1cf50da2e 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -30,7 +30,7 @@ Individual built-in firewall rules are categorized within a group. For example, - Remote Desktop – User-Mode (UDP-In) -Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Administrators can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘Inbound’ or ‘Outbound Rules’ and selecting ‘Filter by Group’; or via PowerShell using the Get-NetFirewallRule cmdlet with the -Group switch. +Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Admins can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘Inbound’ or ‘Outbound Rules’ and selecting ‘Filter by Group’; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group From 30bc25b178bb4a052c5cf31bc4e6923457d3ab71 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 10:37:28 +0530 Subject: [PATCH 052/958] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index f1cf50da2e..5455669ae8 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -3,7 +3,7 @@ title: Firewall Settings Lost on Upgrade description: Firewall Settings Lost on Upgrade ms.reviewer: -ms.author: Benny-54 +ms.author: v-bshilpa ms.prod: w10 ms.sitesec: library ms.pagetype: security From 3c0d7031ed623dd7a035e58e66f038779e95d424 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 10:39:56 +0530 Subject: [PATCH 053/958] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 5455669ae8..0492170b3a 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -8,7 +8,7 @@ ms.prod: w10 ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -author: Benny-54 +author: v-bshilpa manager: dansimp ms.collection: - m365-security-compliance From 433f39b90d91d83d964f607c31f209db02cd15f0 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:21:58 +0530 Subject: [PATCH 054/958] Create quarantine.md --- .../windows-firewall/quarantine.md | 214 ++++++++++++++++++ 1 file changed, 214 insertions(+) create mode 100644 windows/security/threat-protection/windows-firewall/quarantine.md diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md new file mode 100644 index 0000000000..b1f76da025 --- /dev/null +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -0,0 +1,214 @@ +--- +title: "Quarantine" +description: Quarantine behavior is explained in detail. +ms.author: v-bshilpa +author: v-bshilpa +manager: dansimp +ms.assetid: +ms.reviewer: +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: normal +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 11/17/2020 +--- + +# Quarantine + +One of the security challenges that network administrators face is configuring a machine properly after a network change. + +Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are domain joined. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. + +To counter this potential exploitation, Windows Firewall will "quarantine" an interface until the system has successfully re-categorized the network and WFP has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. + +While the quarantine feature has long been a part of Windows Firewall, the feature’s behavior has often caused confusion for customers unaware of quarantine and its motivations. + +Ultimately, the goal of this document is to describe the feature at a high level and help network administrators understand why application traffic is sometimes blocked by quarantine. + +## Quarantine Filters + +The quarantine feature creates filters which can be split into three categories: + +1. Quarantine Default Inbound Block Filter + +2. Quarantine Default Exception Filters + +3. Interface Un-quarantine Filters + +These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and these layers: + +1. FWPM_LAYER_ALE_AUTH_CONNECT_V4 + +2. FWPM_LAYER_ALE_AUTH_CONNECT_V6 + +3. FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 + +4. FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 + +It’s important to note that any FW rules customers add will not affect the filters in the quarantine sublayer as filters from FW rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. + +For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/en-us/windows/win32/fwp/basic-operation). + +### Quarantine Default Inbound Block Filter + +The Quarantine Default Inbound Block filter effectively blocks any new non-loopback inbound connections if the packet is not explicitly permitted by another filter in the quarantine sublayer. + +### Quarantine Default Exception Filters + +When the interface is in quarantine state, the Quarantine Default Exception filters will permit new inbound connections given that they meet the conditions of an exception filter. One example of the exception filters is the Quarantine Default Inbound Loopback Exception filter. This exception filter allows all loopback packets when the interface is in quarantine state. + +### Interface Un-quarantine filter + +The Interface Un-quarantine filters allows all non-loopback packets if the interface is successfully categorized. + +## Quarantine Flow + +The following describes the general flow of quarantine: + +1. There is some change on the current network interface. + +2. The Interface Un-quarantine filters will no longer permit new inbound connections. The interface is now in quarantine state. + +3. All non-loopback inbound connections are either permitted by Quarantine Default Exception Filters OR dropped by the Quarantine Default Inbound Block filter. + +4. The WFP filters applicable to the old interface state are removed. + +5. The WFP filters applicable to the new interface state are added, and the Interface Un-quarantine filters are updated with the current interface’s state. + +6. The interface has now exited quarantine state as the Interface Un-quarantine filters permit any new non-loopback packets. + +## Quarantine Diagnostics + +There are two methods of identifying packet drops from the Quarantine Default Inbound Block Filter. + +Given that the network connectivity issue is reproducible, diagnostic traces can be collected by running the following in an administrative command prompt: + +```console +Netsh wfp cap start + +Netsh wfp cap stop +``` + +These commands generate a wfpdiag.cab. Inside the .cab exists a wfpdiag.xml, which contains drop netEvents and filters that existed during that repro. + +Inside the wfpdiag.xml, search for netEvents which have FWPM_NET_EVENT_TYPE_CLASSIFY_DROP as the netEvent type. To find the relevant drop events, search for the drop events with matching destination IP address, package SID, or application ID name. + +The characters in the application ID name will be separated by periods: + +```XML + \\.d.e.v.i.c.e.\\.h.a.r.d.d.i.s.k.v.o.l.u.m.e.1.\\.w.i.n.d.o.w.s.\\.s.y.s.t.e.m.3.2.\\.s.v.c.h.o.s.t...e.x.e... +``` + +The netEvent will have more information about the packet that was dropped including information about its capabilities, the filter that dropped the packet, and much more. + +If the filter that dropped that packet was by the Quarantine Default Inbound Block filter, then the drop netEvent will have filterOrigin as “Quarantine Default”. + +Sample netEventwith filterOrigin “Quarantine Default” + +```XML + +
    + 2020-10-07T01:03:56.281Z + + FWPM_NET_EVENT_FLAG_IP_PROTOCOL_SET + FWPM_NET_EVENT_FLAG_LOCAL_ADDR_SET + FWPM_NET_EVENT_FLAG_REMOTE_ADDR_SET + FWPM_NET_EVENT_FLAG_LOCAL_PORT_SET + FWPM_NET_EVENT_FLAG_REMOTE_PORT_SET + FWPM_NET_EVENT_FLAG_APP_ID_SET + FWPM_NET_EVENT_FLAG_USER_ID_SET + FWPM_NET_EVENT_FLAG_IP_VERSION_SET + FWPM_NET_EVENT_FLAG_PACKAGE_ID_SET + + FWP_IP_VERSION_V4 + 17 + 255.255.255.255 + 10.195.33.252 + 21 + 61706 + 0 + + 5c00640065006d00330032005c0073007600630068006f00730074002e006500780065000000 + \.d.e.v.i.c.e.\.h.a.r.d.d.i.s.k.v.o.l.u.m.e.1.\.w.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.s.v.c.h.o.s.t...e.x.e... + + S-1-5-19 + FWP_AF_INET + S-1-0-0 + + 0 + +
    + FWPM_NET_EVENT_TYPE_CLASSIFY_DROP + + 66241 + 44 + 0 + 0 + 0 + MS_FWP_DIRECTION_OUT + false + + 0 + 0 + + + + FWPM_NET_EVENT_INTERNAL_FLAG_FILTER_ORIGIN_SET + + + 0 + + + + 66241 + FWPP_SUBLAYER_INTERNAL_FIREWALL_QUARANTINE + FWP_ACTION_BLOCK + + + 74045 + FWPP_SUBLAYER_INTERNAL_FIREWALL_WSH + FWP_ACTION_BLOCK + + + 73602 + FWPP_SUBLAYER_INTERNAL_FIREWALL_WF + FWP_ACTION_BLOCK + + + Quarantine Default + 5 + +     + +``` + +Alternatively, If the Filtering Platform Connection failure auditing is enabled, the drop event will be logged in Windows Event Viewer: + +To enable Filtering Platform Connection audits, run the following command in an administrative command prompt + +```console +Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable +``` + +Sample Drop Audit with Filter Origin “Quarantine Default” + +[image] + +Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the interface index value from the netEvent or event audit in the following PowerShell command to generate more information about the interface: + +```Powershell +Get-NetIPInterface –InterfaceIndex +Get-NetIPInterface –InterfaceIndex 5 +``` + +[image] + +Using the interface name, Event Viewer can be searched for any interface related changes. + +To enable more networking audit events, see [Enable IPsec and Windows Firewall Audit Events](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754714(v=ws.10)?redirectedfrom=MSDN). + +Packet drops from the Quarantine Default Inbound Block filter are often transient and do not signify anything more than a network change on the interface. From 5c3b29d45770374c04c475511e64b249506deb09 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:39:21 +0530 Subject: [PATCH 055/958] Add files via upload --- .../windows-firewall/quarantine-default.PNG | Bin 0 -> 186402 bytes .../quarantine-interfaceindex.PNG | Bin 0 -> 79691 bytes 2 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-firewall/quarantine-default.PNG create mode 100644 windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG diff --git a/windows/security/threat-protection/windows-firewall/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/quarantine-default.PNG new file mode 100644 index 0000000000000000000000000000000000000000..6c1fb5c0070afea312826ceec8c33831143177f4 GIT binary patch literal 186402 zcmY(q1yq||vo>6%rA3Mqm*Vcht+=}tr$`9yZY}No-0CCSqA+b(Yt5Qo}tUhN~%A5_5%L*34Dw4w}nw`gYWOx za~E|P@n=1ni|_1afcW-biBY}yc{5W`qh^a9s`!7i_FWo5-Mu=PJ5iMJm-QdcVI7O2NPfV|&7 z?~E`VT%9(!-1!i>A1$YIS&l8= z*M9kvfB=!GsOXEAFC(I(H*PQXBqb$3;NteeGk90-W)Q!Bn{@Z|tlVj}eEat7%1KR4 z?eIv`|J{YdMb;u@(tNu#R?BN+R3kZWcz8@>AvadzF4>Mz)WXI+`|x_BRuZ5$T!muGDH^^5+1OG zSm;pmDm!{4L@Z}PYS-)owkrmn!a9#OGxmjG$UCFQv8n;ljO~Dte~9Lsc(|uO89!=! z{UtPht-s*uk-hMjneC^@&Z99dOW{ZS`^w!DnH#~@(Z6h5oyG{Twvu_=>CcF5rW+Oy zpV=esb^p$OfNdw*B6@p!m+|0Sz|sFF>#N@>Ap5D}{|f#e`8U65lsx;ZnSYf*1Q%|i z0c&VzaQ}~X{@ak4nD~Dhe&y@_qqzUf$J7JZ{5$zdEDHE9=`E3am;43WF6&0K&i5I8 z(KkjrPf=+sJhly)?t0L)quMFkK5Lk1qwe9Y(WI^&e=J-;WRGBk^k%D9qrcMkFoG~@ z!w#nKI2-Uo+qZIZfhKF_z_`oQjePsYH_nWVx>sfR2?II@Y#-_D3|g>GZINq-^LJiN zFEQSf964-Lb!b?~uI{FZj`2>4@C?bEx-~X#u?jg^xeVO4Uy91gGB=IuKFO1-J6YTy zb}au{%1waG`2ShUnn?aaXwOIa@GH}{j>k+&ht9r?o8Y$U#G`}8QqeP#yP!$A`jx$T zQH(@6I8o6LX%q&Y8;@GlDMPDK9=hUr)j*y4yj9HCo(J`*UQ|bPZ8y@Ev}Db(0n+c> z^%=*|elIG9@*YS==(+HlH)1=~n|Ks{eJ2FJ+2Lk*?7Q25-*HxVXact$lM{K7m|nT8=ZKI{)kY|nQX<_~KX;J;|-h@D!LVWl$YWgkn$ zCr-8_B2>CJYnIh8VJ}B{-JLpR;i91&Xrb_p*zwUYrFHhxIi_?et7 ztyfG(MxL3jn{i(M`2{Pp*)RNy^qQ_WM@>uyhATOdlVPE@9sM_w_*P>TXAy=ErfWaH zwux<=I88tN)@f0k?|Zy<-N!T$o%*|X;Q?`X;Xpx#bpPutB8ithFkBYh#4=K!$x4kk z0vK_@UTtNVY``+GH&7l#|;ndK9{BkGbxw#<5-~s5gU*$QS_eA(rCd zDjwmvol~rhARfB-VKSf&Biu5S*Rxq(lxH=Zrk|1WSX+3MFTBrEi`;vg+l1X$vVOsm zk0zgUeVVA>Bm3u~hS)Wc3)xw&NnZ+)$|xLOQJIqC&{-}vvBgE$c}vhWgg?*ejAElh zvZmNJ#Zp!KI%Odxkb(6Dg5!1Rv>A2GZ2u36m#DA>l+rNWB^Y)Hx>sq#bSf-f8*6pv zOLsLkcQrG4UAj!pj7)@JWA=$5ZH>|W(UrqZKkd4(G>XOE&fRPyfL=7Ic`g0WPY=K} ztxm}`)}*m-%$I>0gb$Eosx8md;HuZvZ<&hhshWLLegWsV%-9gOfqGr)3gNGqM}2JV z`QEeByOY!zTT$Qb40WqccAbX~8;2D-$rFY7YTE?BhcGygw?=oLPjmW;9aV}M)R`xI z)wuzt(&aDgP_oX4DZz8{=hppfBSttAT-6VFG8rO*jaGl|6OpSn1#rpZgSx&|hrx9B z!=ZYzNt(`wj+2gqeN(oH?`^zib#(RDzw=idXeJZcyl5thS8O>@ z&JgmHbdlc@*_yTLVhhE*UV}JTb+CNnQo}Gf)b)1Dd@HqWG#gzu1PP_{TsZ#7f}goA zOKA@+X^6%>nX1%vuSc1q5Yc+ne8lcbb9pG%Sd^?}(e@uTYOS1ou>@QC8FYGL=j3Ub ztvoa}g;J&nRg3Lh30<%#bN2{OeSzA>u8pD-H|e>ri$Tj2l}HU2Xc4{p7-OUI)vFEk zl^d37nB5o4&wv+uRUn@6)mQYKJy!E(Y?pe*frH6AIp3t?h413thp=ioS%0hEo2(7h z@#+#`AQx=>3k8?PN6FCMe4iB2@AIJdMeCp`uZ=yg}RMX=TqJHll`*BWmqU8|a)QTX@vES+Uc> z%f47%M^?C6$9Og%6cZqQ;3-xHjni@drSjRWCFc|>cb{Qs(;ZkoAS}jXzEZ^Jw$O0j zO~AtBs~iO!X+7BsGYb8vG zuF4hS>dK#!X(%W=Mwc^X)@_Iy_*iWSazn?O@bi$x6PE0TZE|@EJrzOcIFl;+HcX80f zr-6Dw!`QgARB{oh)YSCYD|bTcDzDPj4itLny=aDwJ&0~H%ryt}`a%^l4LHJ4nxm#X z3NRt-)6u34swXCH#n{CABU@VtPUlT`o-hF@K@rIiau)k7mb`qf-Gw^79?V;3PIcBT^)PDW0jE&O`RO-^E{ILO0dh-hM6LPZiqCAD>V|BR9sB=<^0}_)3U2|0b7pT?0e~ z^jh|3y2W!QBXCw8&#yHX$}U?UN=3>aBG#u0ZH;~IeecpC;$EIKETpR$p;zqB$I;)Kokvd_9`0 zQ1A$_?M%tAQcgHv2(Gg2natZPD0mdlLCepi556PqRkorCJtXn9L{nFpvCO-aDt!oN&Sg- zM}pCP)`oIo0m%%Rx_?7}%k8o96GD2XCygr0dLVPN#NT6y^&`Y%tKf2*dBCpm&Qk?# zdF8ObFw@;~MxqGEN9%F8a~L8QajIkMQha3TAJj4((20et0;9_P5DPx%^$_v6UNEx} zA9E2?))Y>(UrNtipE+O}haTQ*t~ihuoNBloU-xLdkvp>YNS5JjsN1_Hxd`9NcCq-8 z48u&X;NxO-v7Rv@+F+DMpwIC+?fE)4I@At3-O&oBINzQ&DDfkyIYv4J4`%=IwNC<1 zlZq~#MLK+Y>Cy2l$-7%KMtziu~A1Ty78ZRlZKA=86Vy|xE3--pcz>fxBgSky)& zDnXd1Cu1;`AKRt*zS_3ftwm^DI`h0v)DImcJ(FH5H@AB#gJ+&(s|IJ7OhG7eI(t+)oI1`#WEU_O%Igjt(kDr0EA%jm6W_q@Na}JsbEg$RC@@?Ry1}86BmAkrPUM%*R;C$gulf1Z6n|KRAaxO&@(m{YIX1w zjd+)HqM>1=#!U}o=rtw?9<*)%e zWox{-*{<~BxJSs!Gf9SQs7J)C76B>6{=Pw~+KSDD&6&FO#?Ig}iwMrjF5??upz@hk`EE zqpV!?@1NgP2snJO6x!pTi&Mr%BS))OBA;Ijz*q%>s3Umu8*5w_O!Zi8PDWkYZWs5avz@y9j6Z{g1&v1eIN`6zjDMb!8~|0b#;KQ>+O)+2KUgY0 zAHZ^tc93*}?#<{Jt)B?FfjCSt=gjFLzTod6OibPrcNs!$*R}Hx8%Wn~|Opa=01#jN8K}JGm+NCQlh_z70wwQ zhUMo4?a_{gW4X-{a#9wjDHePTcP_Q?tLxyV)laO zsTwEE>sa7~m2ebzf$qcjYM-oUgDCDK^7`ua$SF6NrH))aWM4H4r;MvKrTNb{7p=tWS zSfATpbv=6oOXVC|&f9!BzKEz|rnq>L_K3U?Yfjfm|JeEU2=p&KKgWsK9X``7)>rpx zs0fdYRJV%_Jtx+6)6LSb&F16qSuZ>`i#r?MtJd(omt5377#$pb`Q=Z;(&;nS(#d}e zN$0RA1^DH$s9;12X1n5A^~j0eLCbXMOlFIlWi2;fQhA0CJG9SZgV---?<=J=C&kIB zbnNBG2p!8D$5l7_y$Z91^2K7^u1Khu8HBS)1yj1=KymNj`?Y{dZFvC8FriWY=P0o{ za=wHKyOF8icilopt^&j_Se+jK0Hn1TySAH8)mrR*z=})5!-*7!Ic>0j?E3j=>fUQd z=LNoE4D!+3uF5}?P@XZs?I>U-l;YO+L<7bjpj_{40?#ky79=b3I`jVe{&tGL3dHLjNM zXMFY}KM7pFWfd@LK-_V_jR#%1&;1DZxic;3Od}M}w*HLHYH|umL5th17VS7jJV=nv z)Argtw~@Oa^;BV-Z`)8@fhKzn3|h5JE5(_8f;=S12&ks*ufP@-0WSCXXDAq#rbAHK zK*`U+*=b`HjIVF<)K&Cc$ynDrI97;L^Fc#cic2ow0*E$y`A!^V;p*?DQ>8ymCfp;J zwm`clf%|hskq+i-9IdcX)9|-XzX-6>cxcl4MAvy+N4md@Z4%D5y$c#IN=$N(^iuL+ z&mX|$F%<2)78m7oI@4vP$wuzp`fofrlh~+)toO!^EQP8MsQ#!LX>0yLNPXv{3O|08 zqrIp2@SGF0xA@Jz(|6SDbr^?j1{*4;Vie{Qd=Vw2gw|c#P9!tWsGUHdhS6A9<44Y( z(pM=(#-Wt6{euT8mVl~Jm5VSgM-$ODfs}O}LfM&v+C+&w=yK*Ux0ZKw?jw9(UDk^F_2{50<(yh11(uS-M(Cg$%_^5_$tYR{bC{F}B2; zrAuNSx^F(xX5_1u$6yqM@_VKe-)yVmD zKK0qfI~q!1+>GHCOL zzioNMFpgnrQ60H0ko4rm?9(&)h5u*faB^vK^>Z@^z6eeMNs1gxL=x*XyRSm0AC`ef zA5NPOZX%Pf^v!<02vzMH%0Ao#otQ}t&k*EG{y!ardn43VJpRx~P%zO`y#t45{AV}+gi9+h1-#H@*zDZ<}|;J7;jKvo}9 zFUC-4fm)A<1ishiHxhLLTC`^zCk{r(IAX9cndMFhGg$vMsy#jYz-U2d zh^)|ir^qfQ(_UignIdf#TQgqVf%6=@HQng7Xue*-#ArJ~w37tYDm@~ZmTUY&PP_k7 zGUdy>#QpT?U~+VaNhcX>-sxJ^by)%4s9Ux+<)F3Jg+xqQ@EMaV}=j*3qJT zJ5^=B!J7mbDwHrt0=*Lz1(#uVDxbx_;VZF~kD>tDu|#&>Gf3?zTDnEge-zGX7;l$O z-ZlI3qg_Pgg3o2|;b*n6j^(i~*JZ)W(ph@~i?Ez-`&bJ1uZFjEj6(zU-l}7J%veKm z1~~><&;5L+OgBG{W@MbI6^&__L#ODU}o?g4l8c?%+Ptc7NF+QQZ$#21*%bK+DZ^ef?Q<{6I{zsCKyawDlPTnhxpqbb=VZ)aQt}c9%9%@nTE(JD0Gi%DV zErvKmZEA5)ovbg^V?1^C(j#$tT>7TJsv;wedWMIDy>`NG4Bp1+c;Gl%j7awDJOt;3 zVK?Jt(5_rwVxuQ6u;w7;Vw?IqgnjsYO&K4C9|qYRrY(B4-k%VL=^8+IVnnREs1ddk zzVSg^K2yigS~PxKCDmao_vn%l6&3%XZv~~!#XnfA-`u@P-k`yP!?%oo2NHQ65+h?1 zSDEacV?Zx1V;~k)lW3wJqH^x$V2=5LcoS+@2$hRE&|t2+NC4zBT6Q9^>_CrVr(O=}c7aU41B zBa5Y)GT)LE9ijUV%^_hMi015oj4*J;8tB^S(#I`#ZDfYPqfhaN97FA%!76tskP=te zl>XbuUK=Q>_0`LUTPIeAi&(drtL~HpxeA1CLj$L3!+>Hxi7a(bslRf2BdEhixYls= ztq7mQq_FrJMcBOijI6ZvyOdt`id1RU)&a^kJj0L1o~QSI&XHTYfX7;{se4I!l(9U8 zcK^CR%`plSA{ADr^rR45Qwz`wtZiYN!PfB>1pr%Te^DAvCU`Zu+NJ*MWznY>TpBe9 zMulKud_H!=h)8k*cj|WzZsRFCfH~fC-DHVjVaeA8v7}iSYT6*Aj z2u8!2RHIP%b1wN+0DYlrHJmv3kXRgQYWAgRF05%3VB7E|BJ}|6?);73Oj>Vk4POFV zbm1*ijMa+GOGt0|Fz_Qz>h`RO=>TQjqAks1zrii{o(!xiqY0P1zXi`CU9gji1tk`8 zuY$v$=$g$RW5Zr^_9Z0*%@xOm zj&>k>>x^tk*N1lb!A9ED6c9_S@yCE!l&wtUJp8;UOz2@qwT6sF+MecS{jGJ|q~!kU zAR$((we}nr%*I1Bg!VEA8?H~N`-e{NULaE{UwlR>mypEF;;tBgD<*hZrhD%my{WW2 z#U6k|Yvl1^4X-Yhzr#_e@~qBe^@5%-d(gyY2LOI#4?BaRQVYNw0OuwRf^w}5-~EC* zdOlsSmv|Ex{m!ah;y3|^^x96`JH4kxC;-S~DX3j>%KI^Lr^j9Rt7lIH)eC1Iud~6@ zOjqD7m&`E=@Lfe)zf?pb6R~C{F63z|BU5RZn#ypU8svmAK_XLE=ddReIq7$AbUADy zGJ_R0)13VE_3&iv;;R&tzu74gshOOx$$&*Qto_n;n?%VGEWGJb1stePLO4)(s^YH` z4?ur>J;98h%TLG8EKaSof_h{`M6s?CY`&jtxPPPw-zA$@>6hwaXc6SZJ)c!wz(;uGMbI}#Y<=33=4rLa%mB%U)ALW;gd zpZ5h^Ub$vAhowU{UK})?H6ff+L9Em9R?jh_FPWI_7LvMRb~&vEg#76zlNXlSA}BL| zRuHotF@Ou=oSd!k-w`fy9hDIkhJ!k|Z8BKEKFv}gb8E6~GaAg%kfx3fHYw+N^Xb|5 zl-wFneNswo4SwzomfH&lg`5WyxkzeC`n2-BQ1;rfR-wDaR)7&na3jJWt32zPRz)Wz zR1zD^>O>*HE3%y0PKs7X*a!~kIC&}t;YreCH$-Y_gq=u5K=;Xvqhrr_xDF+0cZR-x z8AHqKs@a*oEh2>3=$QUId1c>^h)vAQzZv$9NHm}!C|U1KlRy(z3yzg=uVq^opzsM( zt?PY-chsqz?>S2QV(4%YKKNo2R3Pb65}tQPRdVahrFXU3t1DL!3^6qA_7UTz^|(&} zW@Jjz`M??^6i^zhyOM0~K*qk$h_CF;Rw6CXSZBbbyb#rLY2%g)M6a7$P{FB#BmHVd zKYQuP8=;eCLNrKnj+qdCr_4uB%kj{GqH!;kT(|Gu znw3Ja7x9k<&E6l6m~@)g@x@gCpkv+jlwA92ES|42_spHQO2WWaMv8ZIkx?L{krdB3 zkh}Szh5C@O6+^z)7|X;x6+D2nKk#@oKpe0n1<;psEBfH)%_7)>yA2`KnQzK{6D8fa zb%&)B5zf16lu&>o4}8Dll%cy^g`*{U*bOKh2s!4e*j)f;e_D7yA;Y> z9KGfOc8J4^Pj%7gjLJ4Ote&L=m$UDRH-PY-*O>ugW~A)v-xequvsRJG8uoag38u9R zA;<88(w5`$og>?ZRG=BH)B+n&_b!mTzKiFP?|ZG&r=Uba*A z10|T4Ud@RSOp%Guw9mz{IHxjoD)?;VZhe?Z+9>=g1@_L;=A=F_sZ2O#W`feTd;8aEvq!0sCH9C#?w?fy%P-S~JQoVQU#-Ivn{b(Ufo>+w ziGiAbX0!9rd27$)(Y_97*LGMrg(@BX)TzXq3K-(H-Qko~!zr>J38(X&dmF0h7t!tK z&VH1XKAL1JX4MUn!@5bXmm)J$Ku}JX=?A@Y36hJ{6@OBBf8rN!AN_7v-o-|Nn&0&O z%Z}@B^5`fWx4_xCT8rXl$D+Ou#L#3h@{Z3Ve{*}AM#`V0S4b3k0{gDZ_D%4B5nE~@ z!xQ(Zc~74KThD$r1|;ONhD-1G2kWGp6H-T4usc-Sco6i|LkOmH$E zZ)kBSPJUkh_WrOwBcX9r-FHRX$V4MmdYXCq$H`npZ)+8_!;W9i|Bfq&trcJ9^C=I{ zRe4v2*YL!XDq7wp(w1}~+?g%a;yzsytE#r|2sxN`+GaDupz|*@ceE9ArEo5M7@R+u9_DE)2 zS3wuxfbsY0*lcr+*i&ZSaiLrG)KGThDDrHA_+u%;jDMAHbKQZ8n=9BxFqG?j$>aJO z(&0+ZlUVeAo85Aa6L{1rmV{)_@ZpBcCVnJvUzPo)HneJEu*?(f9V&kQWsL>D{gtnW zV(wnKgKFiTtar6Y*JF9S{mEv!l*YJR44ud=XBa-K$xdbn^M^IQ;xjhf$BH**jRpe) z6+kbcZt9qa(ek-u;L(Lg=Q4FauxBTn_P*cgauf^?^m?x=)cks7SF2bOipAVcq5yJ! zR~79TSY1&(U{gd;d(JMyyhHg)NL+~K6q_!V#1j5!BbhFRTb6+Wv(?Dw=XSx=@V`xN zA#XI#Hzwj3qKq z_#;F|LP&jU543B1k#tkUba1C=3B7iC6mR}yEcZ#|fitYwy(lH`)k_RXN17oiX=$|h z$GxMbwsV$+kaXxVPDKcgiTc`sqW1#uvoQQv)pS=#g;8S63r zuGJC~am*MC*NCg@<{|3aIODO?1tZ1Xg(UJwWnfpH$+`s}uA_CryrJs8NVfMjEMh+U!+#fAm>%gw*jeZyy6oT zw~_^$*Jm_asnK>~1*h$xRi`(plXe88JM&|)mS6uyO;?-UN!d;z1z769U)p2J%tO_b zLQ&}ReVHSaA6T5y{4i_%Hz|QE3HQayrt&@HCERA@Hhu~A5AX7O3#oRAL}Yk5Z7vPA z*o?=Q$1eU%6bZ6;yh=0?9q%v_)!5ER@YS^>fziObn_+2CZ+v3b;CNf~t&Qn-brnVt z&KGp-0gpmkW7%CTFY%kPGXgm-Iei36xSNzpCj&l4ZL3%gC878}tke0b0Y9D9+P@;X zbz&e&A@0qr`5Su%TU739+=W<2x0zB1tfZ0(?@sMMjF<8QQIUl13VT&$usPto2t*k(mqS! z?nKQTomfWP@6-!>C~3zGdcik_R)$bMwry64qnGiV-=exav@lWdJwwFdKz5ViciLlz za!>tIo?@oZo#nGkoC#l-@wX9)Y=2l^j=NMz-n%QEXR5SB=g#eNk(^x7vYJ1ybWzAW zUl>*9p7Qmhg%^@HkVAtGb_tOf7ucETXr9%tVi=>%^CEHfP?w^W}a*_Dy=oUliguh5me1Kw>&K{j8i z6~?E-eR}JT8%nlPPIR`D;noWRmj&4${1VvLIFA1IDJyjR34bX24nIuTt}Pd?PcwWP zXglX0uS1M&{^py6&8AwKIRQ;t8nPs)Moz4op^B>kL4{~;iG|*ZCXA^NUzG>ikJqNt zx}(MBBTu*$;-Y|G{nw$Um+T&B)im`>fG%N(Mg|a9`~~P zQn?9pvICi!^`oY}TiXubq%=S>9=SHqWTdnrTr)0HLm{exy;Fi;Bmod7k|HySSJ+Z`ekP|Xzxk;zICn)coQ*nn9v!dCkfKS1V^dZjcnG}?p~YpxbR7dCMZ ziCad9-rk=HO_y;euimA1)eqG2i3>a1<0s1N6eNb9T43!;>%h=dm1{dJ-z?&S#-?rX zDEp#+RJIfTtqw9%5emxNMFS4~ma~iCSR*;S=gXP4R!F|_-=)j0@CW0-(8`g`P5E@f z)I6HPXvVVzl0#+Z4olyyM0mR4J0EJ|4~#awB**yUwuVF2=8UiF#LaHo46~rvh}E(d zHM$dh%^aPafJs9LFO5!RrLYT@9)j!UB&fb zdF-^FbJ|7;_qmtCy7>kx#^5KReh<_YBNmxXhP#!ZpSV61Xk#Ai#b2}pcr$w=ODg!9 zg+jzGI$Tq;wuk6$yyrhz`x<7%8kZR-+fp}Uz)F-Q7LyNpmUD5hmT)ep{`|+B{8NvI zg#x@d{r-jWBM+|VJuObKTqwrSxgdptL^WrUWy?&u*etaO_vhcG+G$Zv7d%ZHH`x;I;)hX-_d z0bRqA43%!S1W!+5!}=uEecOD=H=z=6WyGlmy_))fYVjRrr^x#1xCsO29ITYOO712st0^19Z^PdWp>eULYAE98y($x9PY zf-mN%`mOcw@lov6D`_l<(fOx4VLO7vnNam&>TpV%F z8WNljik~Ih?l!SHvD9{*zD@Q=aD06g+V>&x(`M<>@|}e$9?H~gsN|~=CoB$owSwUq zYK07`Q0$G%u*e9LZime^=n}KldI1$G{Irp7Hi4a15{Kx=!FxG}gxg-357@YAn~2X= zToEDE5la=uOtpK~@dQy(Xz}hB=Uk$ls^V1ZvaS#fn{1q-QO7{oW%=UdbL4(@rUDNOPVz9`8S^j!azIR5o!Zma`jB27IQ~DyC*SnPHK{J zwoQA4B+9ZN0=4+bPEEqHD(Mps*Du<_G)igH8e<%4jF-zNm8QH{1-2S1r=W!?gPY8f1a`h3OJvY1PSXdO# zSmM^YP$*DwsI%og3(;G4*i=w*N^sr_&9T)abI;u6OBI-aSD}D{I+sX^`**oDEy^_h(u_lGdE%2upVvu&$a+%2Uw? z`$qG!pCw#mF>0WiK$b+tPs&)`u^JlVMpz}7 zZeON&@y-Y;?2|I2QH`NIjZHOEuh0Wpr;@epGb1 zlPuDywstRMSlXQ5Kb_$izQi5p$mUVRdfFJA+Wo}MJ>tP?MXsenv$5i^q~RVOU>*Qw z)VSF>}9WbmEdoivze)uaJuwH zEIjDWJh(5@w=OG?X&TO;SJ<}-xw%EM)gq~-+G+Wihn#rAlF~QXQm=cx zm@wneX|3Lr_c{!-1TY!P*@lxcl#MbQo8R$D4Lhfn`sUr2#||}j2$ma^PtP5gc{DQ= zh8w0-xMp)^H7=>uht)~Rr#L8L+gJw-v$Pr>B4LPpEA@jkLl3t$i3J)roob}}KyhzM zZ%5Aq{~kdy#5<%VsbI3i8(buEnY1rd*l~DAnox6BU3lX$L)c)#wyl`1>$Uo_G|u~D zvxI4n9YnyR#Cc|K0XE#U`QAgACgz-ChRtE1QJ(6tf!|?$u0rgjqj^+jjOw2@=EqL56L`jOvyr_JR@ z|2+rB-9-W6qMunv!#`qq2KU+F)i`&_*{?fB4IM-(6R=qaisUHEhw*-ZNCCZaO{At%WG$=y9(dhKQ!79B%c^;eCzeUdqt z|8WuIEZ`@z(Li*F0z7!J23%`d2mp7!WPDWOn-u3`FGg`&9qe&&m^R(mA-EqcEi@P9 zK(dAPJ>X4lY%o<=UC@Yb!22ZPww*ey@8V^MChWQxe1}}CwdMl3N-OI z&;0moTF*Po65giQ>NDVd+sO&Mx^=3T7SdWV``y20^v3T>&+VT|uR;t5;mmzo9J ze?b;8v{8bRumxLM4vzT2LD_#n6w--(r1`qSyF*J$8B$SrP}>F0|Lvk$rT}Lt)1|T+ zn%zD8A%7(D|pCOMPH>r{?CMKVrKYtz^ z7G`t!{WRt@9&Gnm?oxgIKggAv@>8}5Ak8}@5;?Kd-WVMGx0X|pb_x;b(-;0%1Ps2} z)U1@1M3;fQ?Er-ic$wRfMq1Sh!z94#x3v z@J6-YFjQ%h@Vrkk=K@BdZ&!{#-6N6z>h{cIV;l!g$a73Alj;z#wVg8nqv783Ss2|O zb2Oj-bQ$3Y0Qz11w)4-_We*3&J@lrz;E6v~5&=#=YAd0nq#`BiA>c~jvhhEE zrN4V)>u4~C8vNG*8-I0+fmkj0plGlG{j%yU%5=5Ef&do|<2s$44_Hz8PnANC^b@vN z@fnix{a7iDjN=|CFXM!6!!ry{kMN_W^AF1imI6?H_?N?E zTDlZm^~5n37Z(S4(MuLPNX~C_dE73D<*&zuBf_Q)<^gO&K9(!KOS1nzTV~LeG?{{J zg(<(==gO9TcX#?ELn3E8dS!fwkF33x#(*NR0n+Q1tJlu1izHjTgg+1MkR_@e%sKeX zk~i8f3H=u3!0M}qa9O=S^0!G$N(79;)N_}$I{4#9)dFJCwDHrQ4BjEilRcFVSNE8ii4u=!x z*~%+ZlRabl_(rs%ev;q80VI4C9;7)qOv*aXcw;L~Y;RbZ`LGAM3&OVps6FA@6~%8& z?^U3FL)x*15tOt&ITyQHX~?b@>zqD5bK5#SHuv*YIGvgqKQmXlUd;#bi#9$NUTn;j8i`D*Hi*EKkKQ!N)i_04 zyYCitEarD1p9-iHgE_Qt8P_>Q-o3@adNaV8KOeSn>-dW6>dv%3f?v0{q%W2WF6Awa zLP)q%2#Mn3Vd4%*WD=BC)p_NR!_sA-RxFV0$!+G=BcWIp~2{6&eoo{fPF?Bp^ zbNOb(pou`%TwMrNPG(-Xl1t0^WB$doT}21wPCmBOa%4adE7E0?WP2Sk482}{Agr7GwCmYn28)A7pehYRj5@Lf|y7Cf<>W7?&uvW|l*&f_+9TB5#3?~yy z94>F91P~ite~`!!4lX3IkXZr(?n*vRiFd7MvtJIEc}}FLUD51Qo~SavZo(^$0ZwEydl5)8&UrkNS-Q-fS!iwjFep<7FbRWyMj>k1n|&iwZ$sD^?fdmvMxfiSu>UYNt{nZjGtj&rNqIgA026iOCe{taPY?dZnw(g$E(`TW(5!eC zjM3vU8~3bM?#;Jsf7ljhrY3-YIamDe`3Ky|ACLf2rke4OzxeoG<7U9$Ri89e*ankQ zdR%!=2`1xjx}k+XL}IA{K}qs!!84<*O<0CzS$ZM+0Z&cnFiMyu_+?Yga@1DbBmIjx zc_Dm$K>kMr@i5mkuTQ(<*a4%ycYT5Gs<$F~@T&{0NxaKAo1sLuXkftX^Zo}7tEbhg zXrY@YdhnDa;LV|h-ps?^a|NW0MMNBQ9tFJ>80GJykSUTDM>;ep32vaG8Bf4dO6|cJbY;%j)Km(-&$JTt5PMg+y zLR4XeorAGPcA$G_JKERg5nJ~XnM}kI8c%6N*k4lu@W=FjhZcz(4|RG%1+;sdTDk0CoWpV^2S9H#uB25^m^frR%l)oie}`3`V>84 zV7!u=AKD+i=pJvAu3RBaB^@$Et8I+z-ok2>g0*mQ-VnvhgsLB&pqytqe^ZzbM_(Q< zOh9m&%-UamdHN2@4gmK=u&VF#M9ZNDvzAKKtDp;A`dcj?$xhh(8*2oM{)J}}aD@1{ zoDXuul8cT(sbu(&q@Q!ak{$I$>$TF3$Z1q%QXDmp^S3f8#v78kSeBu$HDuYlRw;Um z0%ckSpfu9hzGJDNas`o6xKuIKI|LVm?_dl`KcJk2Obfu)PJL}-PSBP5GD0anNmp-W zQ;~9P`<0~%$>wphO=c&aY+BBSl>&a0I+RY9a9cP>&ol?xYPAy(Ypm~WmY6wmH8NC5I&76_7b>~VMzoN)5;O=Rp<4{x_@+5gAe zSBABySoN=*HsF|-9sQP?(PB7;-2D8aCdiZ);@cmbML?V z<39KI%#%6ueVKEc6o?0t#CojqR)+2RZf!?}wiSNlJlTG)d7v4E zpgh3$dWmD-{RwO)5>g%JM%x2`dffJ3!luM^eI~zzaK6>n6XyI3n^~yfr-PS#>W6~I zip5Fi8XV-4`eCyu4shn=71q$x%Wf8pt=^w|>F_)LliptSY6;oE`+7k(UymG1SWmL= zsW>0Xs-lqYv9drji_?R_IkF+<8!D6g#dq?TfJ zF*kl8^YSMqJw)q2i1NPe<_rXWlA1q?+_a#!8^NS#P>MGE`YU1=%j{DwngY@nte(oB<5XtpJ=&vS;Pds(h;;{h z`L9xEb9$$VnAuwpkepVJ&8xLU|9_r%b=HqB8vUX+ z?T6CYs6Ul!l{LmAh;AOe#`F)BD#u!!2Go6YMea1f`bf*dM(=jw38str5^Q(8_WnU007zhON=x!@I`Hp8Uofq)6?Hp7#KlJ7Z(9w0b9U0k)Jvv%cTK9XcF4(jj%`hQjc zWsUv6WHbKn@-6;fp5%!Kg`YF4=MVmyQh9+0lH_Lj4M|RxFfsX&i3&Xl4i5hB6+lmX zinMN+wU>~Ttajf~+Z@j94Sx0Je-5WUfvsa>W36sZH_rE_<2(=MMhg^4|7#0T3-omz z&J5Nr)A`&ROAZk6j-blPdcoNw|7YdCw!KYV#cl|%k@vmP}1{_^nYBl z=gT>W%l3_h8MS(i_5C%*&6z8~^FxUC^9YD`@2^t)k`<|P*7nm;U z!&RHc20GX|+c$0vO)7L;PP6FEk(d`beF9bKkavaMt=0xn^j1jYlWhI6)gu0!gt2B) zu|J0xEoW#>weDryK~>91E?*^X$Si;VCVlzJcy;b8d6{li*7yp&nIx9Zlck@;r_s6-8(Pwm#*Y~b_07<+X_? zg+Dgl`-#yip9C4KOP)MECxYz>r4)}_0o4aYaNkMSg&V+lo+X{oGiW<*Y**VYB+uN1 z5&O|~4fB%OtfFVuRr`I&ySJkgxqJ<}EHgPh_Ziah`@WZOl1@7uBrP1SXq9^&`ib3f ze)#7>VbiW-XHd|)>p0cNSUTR-*I~r6Fe6Mloz;gCPeNmzN68>0G0#WEc6-x-z;b`6$Q9LhvVtGf+XXTHaj8T;)S|3&MMDPyE(bnXo3yz*lbWf+1ZPW-y7}q-Zy=L_U-tO`T9so=5+gG z@KI0nkAj~c$YJc34)*k(gYclQHTj>fo8Oi>*#EelP%nd}O0{${n=vF1OndgEGRxP; zWdd(~U%N;FJwbvy(|oR;R^(W3r>gG$JfHG%lG$n8<2p=?_|SYU)Rpa*a&b4~Qh@%> z-$PIl3p(n!&hFU-TE0&^yPk9Bb8I07(SQBqW zu%h{EXTRP+tNl16=Q=sEEHaoXYHrberRWJU~#BAPYfu?UxZQ zgWK2ZY20?4X(^l;Tpz9{7U!8!>~Lv8>O_d^ecYPA^R~9 zk2Ih|R?e*nGo$a)u(K!RXQGU${Ap+k*)TzlCg@bbRTIP!j&VGWnv|{5o>vEVhQ_LqbT1-AgpK zpX0TXHb@5nQWQ4|u~+WIbp?mh)%!G0nn~?r{iPiVnZb7s<;XFP;PW}E$I~z%K=pGY zG>B=lbcdE!kS8}Lxa!k6&a~a{DBjE3kHKN?pCUFteQ5=a@2)s)b2;L`BqZ+nB;A<9 zbpHI{y;v<Wr-fP$zDS|L~=QIy@SfXdg{OFZ_i)FQ!`VmJ*!@;`_~3Ep(U1ms>oyVFys=tf zLaHl2fNWbod|K`*=OS31B!Yp-k#NzNT`JS_jqVwaB&4pGMFs84+0MP0?(MK($M2Ui z9$k^27JJe;jPvDYr`(Y#3f2;2vL#3N(-PnChN;)bJwG;hzXB&8c9y-HhO&UWk&mFl z(S_r;iv^UXL1wpxClwO4@AE8fU*LTq0sdV7!KP*m|dVJ9C0Wp-AI>p*Z8QCa5 zTC<{&YBLH61${DAnCpsHX8BXU_I#?_qUphbvl}0uYAenepg}quG?2*h&vUuf`;){O z*VveWYmOovo#w{-zL*F6^$xx0ucQIZ+bYQJL^4=#1tLg({?KkFv8;V?ZcJUKdXcCi z`=Uxfd&4R|+qM@xu4MOmq^XpaVpse(w3pNV<`t_&BIHAkv%2|ruiJ<(^|vPv%Sl~5 z@9E+!Dk`AACiE<~tJsp?BshvM>bE32sM>v1A9t43Wn#*ya&pM9;AcC0Q+%2v`*3eB zPv@swTB03{G?)`sn_&ZcF)-qqdRCGv4GzgA)?4Q3ND7BL*LzQy!D^<>U}-PBrz8uD zFP08Ha$G+r3L6w-z$s$HZ2Rj>0E~Iz`8%jLIKT7U z#E{DX+x+-JHO1(C4Bl|3E^=Gz&t0Yl0Vf~J>W`Ty zkPDGt^>cjQv$+!IU)|S2oCi3I6KHRub4L8AX@$y6;KL!DfrKK)OiJ^Ya@-)3BwjrH z{CYS09c-I84JH;y`VYyv)X&BUU68;IHeu~dT_)90pyZ(7xN!Stf7{{H7+|53h5BAs zz5(5?f|QL{;ehtsbiP`CQbH=Vr9jO+Rr`Qvsy*}4zGqnYN*TvQYPMX-^@&nKB5HBD zDncge6@oUUWG-s4snqAXR&MG)-AqvvDmCYJ;2kKH3MmtQ(>Lo;n`X9@M%LS;99qkij;2{MDRXmICun%=| zvny_cLc*Ks&wX=g%k>#Yv9zw*UfQZ(RC({3YS~>b8e2KApJZyTBE}03_tSW})Ok6V z7snh&TkrXDbl-+|aa@JthiT5OdQI2J-^qq=3Dd)lUS%DS0@_)d+}+lBImbR&*zHEC?(W=ztM^ohU4vtBqlj6rEB^{1LA)|>?B?JDPJ z?epflJ7TAVEgfIUne21EaihGtNOR8$)@mJtXZyg2+he66V2U%Z(KVx zz;U=n`=8FK0>!&g$k`5H*W$12}usm-53yQQK{;*v19bMMdOdkN`)(4gyZ z`}5~Y#hPA@xIr+hy}Js?j%v`IAGQTIvB?LDRA~TQ?r$@(7ipOn0|&ob;7)nEVPLk) zTdSAwh!-BN<`}$HT$g!|f?_nN#tg~kh%Ec)VqDnQ_oirV-xGKsz{)pjwxWFC<*>b=0g zW0iukjQ&;!p!J!Gsjrd>aF|+e-7L|zWvHDFn8EBp!fW<2w@1OGGt~Oa5H+0Izo{kw z54}Qam9lgSi#|Siz4Ir)j^A}(Fp%25ygy=QjlE{;m@d``yAwjtHCd0JArcre!xMrz zzE!nR64CdvnFI#9JtP_~Psc^0&ws}Sl<+Sccr_h9dDuI9p+D1hNs@+_SXE#Ta$k8} zS27c3v$QqKTk&erC@`+$Rbato(M|N+uA)jEqXceFf+$Rv%k`zXG?sbQv>8!(8)IN{ zR5tMMH~LpKDCL`{y*{-=OGLmlhs(;CswZNptN$I%N$f}eI7+LdvU&qS*tZNI1MES_ zbcAclIF^Q&Q&%F-a5piW?T}R;q-fT${5jgVDSm?iQR{ST8=KX-VnpeuKe0|Q9J(WV z#)#ha#IDWSa4r(q*4^5c0UsQFW;qLIYDnOwm(P|i?O^dta zrz0rm4|Js!&mRV{&JQJoD*&)`B^g6-omXB86;_x%jdUwyH+?4*id!Rh3l$lkc6nUI zygV`*ETb}telL`um=+WA(qQdq`AQ*9MQP|HiXrV~FKaJG3cJBeb0?IW1$ZrW+a z5m{FKGn~<+g3(N+p4HQQx@NNecFI({bE4QBq(glPxg?zK{GDls76Z?GSVa%~CpB=q3?%BRuo6w`_+5NyPvV_u}maQLd5O z17MqWI&ea}E!Cp$H}y;+PV*vSnl9zed?S{)TUQa)mpS2|2|Guy&^f1Z+)QGLbERX< zil$AhDussn`%q0&@EzmmfJ2qvkdwGi|f9V z4$s)7=no?)%sHADgDm^Tf>Hh7T1oiqsH2oQ^3V42cP1?6oUFjZD199u4oU99CAr!a zwudY0nynVVKF=47p%OL8d|=w;g!rPRc-di>P6qVlW{E?06GzK0_9R4ZEu4th%zXSl zAmF^;wPO#+e@dox0^nzO#Z>Gopl(gCzLm5-;~31E6OtU_iEu4v)r+Ol1G#Iny0 zL?~toxI356Lp#66op;Iph{Wf4*BJFTHr4jM7Lkl@t~7R9AS_r@s1=j=S=mef$a$o6 z7gD_T{-FDwZGP6{5F=BXJEsG9q;j6gJV6Re#uN$&=e=ERGe?JM@2?p|$8=es17cO4 zk2qScI5UZlOfx@jmCg4u0cK{put9PkMWwN;y)Fg4kWfyV(j$c7$aj{LuI9TyY%yC@ z<_NUwDb+ewPiZ=>JwG6qsP1qck`pI3@}?O}_@eVK!Ai{TRBGy9%)}vsQR#~XWR#+( zv>a{M&*Mnt)SKsDd(LDXatZHAv+0o2C*oCBZBILG^VzerOi2*%lUw&84 zprdXBya`?nUm?-|j$L52^vpg+nL1u;=5g|w*%VMthYHHqLKNy#5(d{`|Nw)0N+N2dL-uQbx&@mFk=y_+>BfYL90 z@YlxK4Y;J>AkAJcE~MOQE_7ATnJ3cn5ntaJE^{*bahkVQmVmH$iMuA0MUN9C*QPY6 zgNw;jz_`DKu2wjxfcq^>_S{hM$P971BJbmUo)Cr#QBs|Ag<2ekJlaeD{pC%k=Y^KA~&he(*uG#>0JuLbp*H2j>EN~F~$hpL$}b5$$cGYBq0QxFrF+I$=8>^a#&pU9 zRC}W^LR3QbNeejiINwU5FTjU@A5$a5XfCdc1iSAjKNy85mK?mcyVcI~H+q2(zGGDu zeZ)Xs>Gjvx;UNyM2QC}M9=8g{SATwS-x-hT87@`b{%Ih5Wx;M#&KZLV%cWC{*5|%* zj@k?@i%I$%$rK%8F1~Xa@Yx6`Ol2uNJgzof304A)eSRZ#1$K$Z?~2;b9)o;8+FHHY z%63DNo+x(WDm2^E%r>RAJEi71u;8v%bA}iK6bt!`HuE{=R02jd0cBF}g4_uf2Z&b7 zrSlLXSAvN33b|fF27xu#6`7`;!?cSx?T9yc`j!5tRQYYUswX>6Hq&NkEQff*L;!2r zZb?_2)x0mC2^o}+7fLzIuN}$GF7J{Ocbm+8!gbNm`ukNSUfF}B+Jck)52z>x&+_Jx zlZ6lv9Lvn`WUINkf=vvbkd{Uf7|8(j4o@@kjde9*m_01dmcx@MLSTVqS{qA^G;h@f zvc1o7v+>1*wQZh@H}=Yab(larB1Rl?>h-B@;vU&Pn}BT3URj~{>=?gjUCgR8KN=f% zmMo<(9?t+12uyo zZWA2by}FC_8RrjiJFHt%S7L#P@hjwYc$^>kmVr!;K^SeS+qK$1bspAZm_)6?pPbaO zyNg0^c4ghji=|j)f5v`&JyrT3p4VE&v^82v=f$veoqKJ)r`_(>cf^=I7F^g^CLI$I z69xqPqSYnPDNS9XOnmb%STI3hWv|Lng%&d^CQr63c^u2xO*@Eab%dp2J7}ocyF*#Q z^8Wa+btaHl6*H$S+4^u1jK-mfqNeD;i0ZcaI0C-b0rBB!*YyGn$s-?D2V+2I5_yIT zTcY=KepnHkB86Wfm^%IP709HuDmW%fbVIe1cp}|BIf>~c#4!ES9fPZSd9M_ap{HpS zOzJ%1w}wwS?c{v9$=)z&S49zmg^ifYKaSC&*;%sE{ue@0Y-_OxNK(a-G0~;+yddr8 zW_-8zu+cZD{Uw~=Gfmz8M{jOXJ-P%PCL zfQ^^sm;NX&2`1PZ-dDk;mg6RV%&-#k;S{6J2)X9Lx-G&|WX3U9`uiIR?wk!XqG8zj z(bT-hxc*%tv1oRzy8JN`$4V*mZ)a7X(1lQ z8rNN0$!Xh)57t}lsxw=x1)ZLPY|W3tQ>oR3-y-NkSV;Z;+$TsEiEd)eKj-2!T<6+~K+6W|&ak;nY6P(1@OHx0mniXR!R0ylgbSPvk-kp0+Bl z=AkbJ1lF@s{r!jZ%=*m2r6p!=I1tzPb0Nd{`OnH7eoqE{8udI@+<@xR?K>kT@Dxe+ z{U?T#2&t1{S*<$O&*hEnIkPRa6=9h&Q96j0&u_1HBVJ<(ykp|pMrqo(3&1N(uP+u6 z4e}8dMWiH%xWdWKW}o#G--!(0;6MD7Icbw?Ytxi#qpRgMG%xzE(=i}0A@#LV=2k;1 zF2C`8TABOO*)>#Q$2T5y8-nxp=*+d=hwOFSZ8@ zF=2vwo^A3ue#%vz`#34xHJ(i|vCkQum>ak9u^XQhU(r4|&x7Mt-_Fse=P8SEjIcd5 z(5Y$!dQgsX$u;}uNvk(AtO1u(AMzK~c)0BmB4=2$=DX~nv7~?6Nb-y z4ptwnyhx_(@_W+9?b{RNZIqU5*PXx=lgMQqq(DQXZ!9z;BRZ4WB*0l-=61pWj!CiD#LdLp(+Pb)Aq$vP=!$UIj^*!(5o=52y?bAN2?tKx@24vm3RuV5@G zv$Ytma8)=Kd#>NoDz}qxhU9PNC48CT1wn?O*w+~cQN^Mc@F89SJcKaxrmq1O$P6(+ixeSb3?7ndj&Q8cBH`$aUZ(Mrtq@2 zy6&@+dG3EL2T+?SO3wguN%KW*2VWn(G@IZO4ddgxI?wOuMETKrhYy?8tDIUrXy93Lp%3Gf({E1hgP#)w``Kk#fr+P z+)HX{JtS7BH`ZK^3EXS*ti~`P3p6Sn_Oa50CsT7AuLq29eEkZ1T$0{Tco$<0gB(mw zc0J1U>mh7@u`cXGA(}6z)@!K2QAj#)5Lr)$HM-|CwiFSgbS4;IH{pZi3>)?CG-vr| zOkB&jghmt9c2>3ML`u;?QYhhOLW2+{@1col3ba_Wis>7NjPR^_SCiX5*=z)wvbIT+ zKDV*S^sj;m?-qg>zE^8@YH#E#ooy6@1^@$poX!+07@(Wit47KGaJr}w3EZ8_N{-*s z=&Cm-l{TW@!1*8=@CyunF;$6$asT68SnF9gv41N3-3|01qv!0ZT4+Eal4bXDs8Da5 zHF&@@!S@xbnRnQ(zt%B+`|WB#Hqie|mMS`bB3P!ZGJHEMa?GvA1v|4l)}2nNk#qf9 zO;D zZWSgFk@RB8UC-f|F&>RC@IA$uc76q&C49q4aKFg5Jd@DZ-&0m_j9 z>ggSlXGvG1{siw%fGgnh{6TYT<3pekiwZQ`??BhiQ8HR@Qg8wCc*(H5Kmf=KU(C`D zUnEM2BryN0^gUeu&hZ6_-((~cm7Rb>*oHmPXJRi$0zyi5@p;pEe(DTRo?ySTL`}1s zsvuvvG(4AA;cL{6?l#DF>izJTH?dNEsv#RoqPMG{h#mN@O*&pp>Leg73yI$L_JZtNXpiVA!QY`hCA@X85U0ZCE3*(h*z{rakpVEmcIQ@JRFuXIZk)SH27)!qx-<3wzh@eCtUe%Qf1 z_TROw)Rolt++{FRS4c)I4V?o`+Xb^5j8k)#_34TxS~xFuCv%M!ZzpzyVpirIn?T@l zUEpv(5pF<%MAOG;DMN;1!-tgx1A~a?M(8@eqiCjn8|#Kpr&}kGe-yLA9x~!mC`slc zGogERoq#qM<>5~Yq6d; zYY(%cXFh4P18+@NDksIwe`HZ(H=E@Xv9w6EB34apkBUGd#krrjlV2rhRlDJfi!sSZ z*_!LH_OgiK*Ti$y2X3qh8=uNYeV?$=f%K~%(l4aA*lQ>-t=%BQh@nwkR7pAO zsl%3^d1uEUaQv6P9^X%+i}%Tn8gYU=r7HXNU+S_Opx+vFs4Ir@HpD}BcyIplll)L9 zkSqDa(Zb~M$XXZlTs}8mhdU7&b$K(A6C0YaG z(S@Y%%E_RK9sY{UWWCd&_|p2{55(Ck=^+-ra@_rwY*>LXR`Sddi~4ZCDBWQzN=wy6 zLGHUI0Dgr~1XrZB=iPFHHHCgFHCqr#SE5dySgF1lqT0hm2;8ocumXw+p}%np7$uR? zsOV}OE41Y;R&0JQ$@pYWN-yiz)eA90o_{^Jn~J`C(Yn1D^zn_S(Yl&N$$2B>aYSz% zQcC+R6@qVCboi9SUqe>|-y3v4SW5ZIupeRh^8oKf}fN)+L;AV5{Kuq zM5Oy8I`#lRz{%2;yYq0T$?p&+M$J3iw)E=kETh6{ zQ*i{jS6vVLeEq*Baar0EfA52k<0YpgM3R0IXMcNj9a`1uFr3&V{H_&J+AZd{>3>NH zEXV``jyrMuZ@=IMIxL2_Tue4=n6*t?+*XQwKFv3s2!hdFWR|su!6(P%rpE3R>%R-{ z^~ig%S`BjtjjEz~xKgxpW+)lg=h$}pkR{dnBwmjsJp1h@T~+d+KA}&9;Hfq}2kT7#RH&8w9EvSz}`E1|LN!7)aRhxQZSag6A#oz>^ zU07d##;0F$ewU$ck|FZ=D2*DgGao+PiwaeW17*}DfF~Io0l6%EISaiHx@*Z%P4kIm zY>Ntdn??oq8lgQ%cQap;_bAlX9A>>V3V-|7sBHDp>u*&<{(z=dH*Q4@NLlmmlo@<7 z{js#wSAI2{YP6%PNcTdqpTs??9LlD8I7?j(NZst8T_AXO8o%G(roYEp?yK4v*F9Wo zIc_h#?$qPI%r4!xYQr)|K`WLLnTZr$;U|)GaXYXX^BCMw;crCEk$(bqaj{E0#)>%| zM}?OiN6BhKR^SsGz0ccp=*&L+rotX@UWM5SCNZ}u%zIE7RNXrJ>v_FjXX^c9K5775 zA{w6M`*@gE4P~Lb!?n)0nY4aCn2$vVHY77~JecFY&7({5&yqkrvE%*~V0mup8Sbl8 zi#N5UQgN&>MJr-@2TbmiolFd{Z|K5P|_Q(YH;TA(Us zSn!T9J&p(`qFR3bepG&zFex-82!Uw zeRveiX$~?o{xW{6TtmP?6{?sh{qasp>*t&s8ih{@ z>!KIB8=b5O9$N?oJj30e9Y-0^o@X&mM>eF;$@u)tm}pr4+j0N-+E8%n#K;A~+s!a% zJlq6!}?wbtzg9bROX~1JjZiTiQv6|aF+JkLR_hu(`;?a(GanroBMlGw3Phg zz9`74@@Xr@9S+{GZNV%Jcw==xuq;j2-y@okOcDn#RF=CVd_k;>Hr;3r0^8@CXlmBhKwA1j>H?zzE%mk0PSoO*qDw$(FwO7+5c0@|6U z?ul!%qEi{0+rx5UJ?ikHP_`qzjjRC0!1PyRuDsd4AL`Vw5zYdLQi~p(QxrHDgU|Hzw8Z7POK8K18$0wKIq= zXKs3x+cXp=y!TB!&VTEpx0-k5s|=Aiq+E_jTA4pG$fj~wk&&lePsCb=a~?Z{g(?V8 z<+7!9E;_MU!Rm5RWwJ-gbzr)ndfO~9m6ecxxF}b0P25EObabw_e4WItg-FLKl5m)^ z(X6I2g?9ScruJj>SY_a#vTJ*!T%AmGaUjbJS=?V*Cs(^Yl;Loehgf*69?5W7nxOy&(>;A^PK#fpEw3CEk$hlEU1tRcr^QM>TD&E_zvRh^cy95G~lrmF}P1 zs8;J!YXI5-#_|`nT|PV%U;P#hG%TME{5B@Mt$eiOtRgU$_ zdd?HKv=)_;)8gCQ<27;H`XcF@0j-|71VOB+MV3?lUEkh10t&r%+S;ghbtn>EYxPrf zyNvmJR!3bOLw`P%LTtVB*hnn(P6ChSLd~nOH#FPS=hX{kf+D5a(ZcEip>>j|@GSGP z!-aTToTomMt8rj#ZH*0EiHK%`XD4N9UG1a(Pf!8g0amlz;5NE_?9q znKC>*t|MjeR6b2BncM$U>8Rff-L&jQ5kJ&&xcH)btMzOZ1w#+f*Mn+F>d}sz#o9+` zJ&OUZTa&o%EVlxbaDAvKs9d5L$|jyxRkEi{(04}8#*6MI%Bg<-3$ud5_VZU|(ba=1 zBm?ry_;fOjoWzd?Y*HNM+p5uEt%QHWSy~bvt8L3U*84dGgB20FNK*w_JyJ#bE0+gn zrQ=cO2v`C;McF@-qa?%E!<5 z4qeD1E8e!|rpZBahO9J$)g}@A!XqW6E2aUv8`0$m;-%HSQ{;&ql3k*iu*S5yUP1Ox`IsV?0vzgT)K#+DRiRmg&p0(T<;YbTiJb}Er+ z$UcUEiocvTZoU?bd)D->JBw`|HoyZU_m$tRToJ)jnIuPF)A?KtPt&$T*XL9BbeuIp z8ZmS>jxGm~idMB>lmxVL#eQeDj6K4fytif>eV!h0yssv|+|SuCMJaVB6rlwY(O{a& zXH0JpM{WeB;N%^_Q?3XDQKDv_X$!c^E5mGNi6p5r2}XK+7svPCm|GE`P*N4Y{b$e1 zsJHn%3uF@z-Xh9Ir$NWrmZ*$yLBM`=r4IUawMV_pTA0--(C_BOLap{;ZyY1xp zsrs!VkmhB!+E81RzdinqE4k~{Ln#Ewt#cdrtfiu9gw9`}u?an8!{CocE(a)a>~OdD zAAvCR?5{|x<{wcqn9VJ5DQyKc2L?qLv>r4HtgHK}+ zwhi2R$+w2L7`IuYlSQ&--rQU-maFY(Hk%>TQ533->a0w-;957Ot7P-J7E<9AWULf;5VKotB*&0NG{Dl} zd3mo~J&vTbupqq@K{VA&pA8nPmG0aA92_wwVN_{E;2#B)x%SFp1g;vVapGlO*|y$# z7TDy{pOeg{ak3PuFia!P$>B-gF3-y{mkG3R%M&EfC`=WPnCw*%_dJ3N$~{fwl&h5b zWIcIq_9x(xmW#rs^s?;lxI^8c4RzjfSQXEGPeYgH7itX5J=TT3n4KvUE|XCNN(y9|w?Mo@MiBFn4%zwe$hMx>&12x!klf-s(_v za>9;ctp{PY*K$FI#nbErHso%{c}vRoQ*-aK&bmHb5%ev5#C=o8c=yChBOc>av{pyV zN!YyivcM*3v(9loVpdwbsiF%mQV3Tb_{E`Urm{#!|Cq^_7^wJO_R+y+$^T_k+zsw> z@^5RcM|QJgk)~jQ;Y{Cs`?2`1K)xE_Cp7PZH};gG-|9=_+(sevTd~&cLwo(pk86PT zU9JRAQoz)k{R|pQZaaF*x*U(eO>VNb)NY1cnY6%+LwH6pjqhlkskq?z&fs=Hn67{| z{rnVaxTRL6uhnFCuO~nu{Yz7m%m^j3lHl7PsF2K4RCXD7d1zN(S7t%~pr0Rj&o69> z(V5AcUkvHgYec=Tvf2$Ihmv(XlyI zd9T-*mp*G*$&ri9t5dEShHG?}MC8lvsLVp*Sx&iCi*D2Ed3=W0eSQE8ERM^&bH{b; zg|_PD&SXx@J0B^gU&3`4os00L#7mr5X1=6&G(up*6}ve-I#R>Az}zbYto`of76^P^L_9Vg;Aqi~!@*%jFX6=W|^qX~G*juYJ+ zWNIKB8b}-(R1c?FO2Pat6a&@LcnMYCngi@Ny_byF)AEo;r9J+uwo~CQ<@?0+GbdXB zyb^dDtf{np*r<~+ITnK@TWX}R$~2xANTj69z(zwTed)E^O(%eK&2Lah17&>C0(epP z&Zgy+k(70QXc`VBd&l{Dl}8Q!HX za=c9P4WIFx7MF=YX?8j?Uj3BYYsv(L0QeZ_MT}>K7vm5rFc5KismI0 z6i+35&zDXcOSEJ8Wrr_gBnJldjP{lwq9IP!JzL7$xrpF3gS3h4-f|!3t)GE`+CKbw z(PWQpp?B3b*)#I;9^OmLj0fBA(tJypo)GT_xil$C-o|7%;R*@g8Lm3wIvi$boumx< z3~D=)*7zqKaMfEDLc7qI>d~*z ze30Eu1gBn1Jl_!$Fp^`;9CS$YO)?s(5%%<3(n(8YuZGfm7|T+NE8{a*S~)@`GMxm5 zr8!$(WX#``^1DP7Iyz;r@5~?S_Sz#Y>VIA@juYnN$dWO;Jk4`iz%EjSs|VRrw`Q`a zw!|jq)!eS{uu(V-kS)IcB(Sz_w4(_yD^!2oZxcGtmuS?c(iJdnGIf=$IQKi1oVXE* z;oW<)9y_DHvB06^2vxTCf|slLXp7(*ldlEpZ?xUB1$?^HSC`oKYxjV@VVwEu->qk0v+SZ$BL5H>M z1;n0K(%q6xACm_9r2MUG%?K$Uq;4nW$@uE8XC@YB1 zAD_P@YccJZyKb_Vmw(~h)NH9)QAC7r&y)MyZ_QK*yL;;7I*fT$ zOZUugfNFD+awJ`;lt25hi}8*XF6+lYZzmXXv^8^n+nU8eiAWtzRFiojc$9ut30B_!3FUu&__f+$j@oD0kP}{=;SvrN~q2*@k852GG~I@Ar!>6Jo6IKj zuHxR2=8is749)buhciH^IwlK$qb5OO2dScXG8F zc1^`b*_%{=oMYKGQk4GKWoBk^#rExFvhky_2g-(X|GsmMI=-PsaoXgeIW7On@$}d8 z#8`|Z&fDv=QMiEb5zD4&0nqeX1=j+vPL&|a zD)FJgqEOW?)&ZWOI7~D=574X=F)ST2aVq%7t5Y zepxzOSbQmw^k=_`j1dUQ3db^FS*)iuQ^nWJQ@)iS=#2_ts-GX|qkL zP~So8=9zh!pDYT`x+3yaeRS+~+eaGy%ac8fj6hf7)>r2Wp9Mw|eq%m6XeuQG7=O(c z|32nyldiAQELn>u-b0&+hsXIohL)Z_{)1;XLm!g1zCaU``eHggMQV(m&UXw0Q&uXP z9@p9{d{eS4X80F9^%P?-Z85iiJ#YU>1ZMUcVT4-jsK_2uP!cU-Kfp}9wdQk(pR7BDDxf|2?LdmZj*O6^W7f=Q zd^o5GyH}Kv!K1XC)*OiUY^r^`o=%&>D?kqG4+twqEPjJF{r7u^}WS<$UzhDaRezFeD`bMjNy-ssgO-lrrhcWLAOG;vh!E_MC{+Zay!;- z@CXd8JQEwl_sL$piIYD&jPHDz5$kNC!WPI&;@x$O;gj7bet6_JZa>MHn9IwRXX4RH ze`IC+JWmIY%JXe!Y2aX?PxksOvC(pOno<5?SuI)kJK%UucdroOE&v)Uc z`!~X8L$w69oL{S@74sI~t1zN0F152^uWHRHfhBbyg&3=7(rJjckxxb;)IajMM;nPR z_w!5_e0(|o4v<;x@8frf)=Q#L^nKIP#%my3bRLVk&Fzj*>)km}_~Kl>^})upWuMD! zoE-1jOG6_iB+lN)A2-U$OqxjudB18N9|rNDcQC)VCSy6z?ioGdw3exqt)Y_)FPcS* zxuNZM@8d)sU)~Jz6dV*-<09zCfd7lKw+d@(Yuj*F4QVM9XmNL^xI=M*yGwC`yGtn) z2<|S$i%W1zf#3v+J3&KnciUO(+y6e_@7X-aHIvLS$9VO*DQ*Ty5Yv9q9W`B0u!?Y> z2Cc!_`FAjX&-YY|tc)j1z&Z}s-x*It^jBYKzzaiOkls~1d_Lzm z$?2$8=;VyEdF5T0M+pF&H%NVWbGCoWAmUD+AJ)cZDMfv_SlS8S-KItOUbNWQco-IbYR;R-4|U(^^np&{4V zlaJ~uBowO^K!P>59#z^nY**g*Y(aiBb=9|90zF z?LteJw3SX#ZBIJ#K$w({EVBf(@oZIG>(`ykGh!ZQ!RBp?8It!My6pad5L{QayX6tp z@wW}1{beddi5IK@-2`<>GcjF7ckHmT1z!wm6t95_BbVXizfz?f^eq-jGz$%pT|V%w zk>(NAf&u;x6s)iAkK;E*sv?mM@L-k9_l44-;H3d16-D4c_DX<{qu_VA|M?`}$0Nbi z?vU`$O)ivggN$-ih-=mhE^$!tJWIFf^UfB|O-}6M5~5cEUzwP{Hl;7&Dx9=Vu9(cy zUXkIl{lewT!>Tl~VXQb$^5xgrwO$-jM6e8<$B)fy_InkTA#ygj%HRJ{A0Y2ZKV-J<^@AQF09Az&dxBF{z{nP?85NC&~BQ|QmCWmE9#JNb{5KnK0pygXGD~}Sj z%e!P&MwbuX8J$u06Q?8JKlR2b>Zzn58+Jo$cl`sB7gg$J5gKzY^ znv`2ynn;0Yx)sHnH zG>=qVt4yKS^nTt!3z!{WoAYE6B;Tn2Dg(~~f1)GSl)OXyX*^TSLn&GQ_4?GVVI@u; z-oZe*MK}h-==`#1SDH=JS5HUt9=_Y#i@&Y@*B)QHK73*s%GE;OxK0*-R3N&`K3;foqX^+3_S+KrHr zg+6YrjFCC~Xyrgm@O=#t$iO_#mCeho=dYrdma4vn7{~;3`&2yMp+Ul7nTT+1 zaatByrf2U&xiI}pNL+G*>=l1(t`%C$J6U;TOsHTCNzMJ3ff&XqCL85NokernNafjx zx;Fm3W;}aB6DO*ljkzDtnu`5<+kJbyp(Z@ zibp(~?^6zQr{G}wBLOc&j@N3&?Rcx(*oP*&4`K*ASj45Z)K&3%tssp9K7Cj~&)N%8 zLT|$Zyix!R{%f}$+;^YPjy4VJcFnd<25kga}4L8S|cZ6Rtum?yes z2~wjdwD*g-1iBZ;s(^YwkxIh`fI-pzVdUa^0x*}n<_9UefWE=In@m?2p4|CTf5_mb zu0vBYX`i~r$m0CH6^+L^PrZ`iiZFP<&iw{;8`sJw>bkmwr{l;K2SmNGglrX|jwieA zeCVu6gSAY2lrC6u?}AFy?S5)+=nO-Ir0Hx?mI9stwCTpZC$2%M%MpE09%Y+?)|Z7m6WQWcB|ql>AlW}(f8PFi z&w_=Agj5YaCXh>U=Y5>O0G1^}c)m3%nUr)6AOYXzjySs_@yG9vFbq60_r0R5?3jQh zZZ}RufGYf~&BiMVQP7L*dCu@|X@!l(N20*p=V%*D3i}<3z`?oH1mbb|Ay;WIb;uO8 znAzaBs|%q->P%FKPAX=V6_`$2Dw|Fe3;a`DQa^Aa7RdJ`Fd=-mAK6ePkV&hykZCiv z!EYzXc)B13E!}=95O5JP2=^?UpAykUDr0z;NJ2~fNqj;cjWFD^Ta@>tp`~=03Tpz_ z{NWakNeRrEs2y2$Udu+FeD=xa*GkwhI@-)fe&JGbSl&a1sq6+?j2N`KyR%HK7I%ux zaKpb6iLSUTG5N6=eaVHJ^oT@?rayXP;kW1Q-ZHm4tv30&e2rakINzQR&^?%i1`gAq zFik8=Ag9cmxk&2`iv*y}L7!JW-2bzudmnzO^UU`aLgp^HI!IY|&X_A%G-0 z^rQ??ua_Z0e1&5|oRU&C4!d3a%E~#i;nyE4Tn2|;cb-M9Ld&O>-Q|<1Wj3wjA~N3 zMAAyVSq)@f=^?fr-}G}$7YAw+w}Deg;dm*Gon;^%_M9tT#Y~Qhl0TVQ;A2?BO~E5M z4(y0WrjGwC*2cIBgeXCBu&nB6d(%3T49>y%A97KnmsLj?<$By*2#=fsWXF9_1yTtW zZUksEqo(}EYNXGd4z&wf`*se~%NMGo&fj2;A1R!dGJQVK9W&ZzB-KCLXg+T(s!!U5 z=C6~MUAvI>8-Kbnfk-SBKq-*S*D`x5$>Ge|18La?CnH{Z?E>`MzxFigV)DOj?6J+ z#l>&jw4>pBF%Nm^-`~CVn5P3lN?1gM#)tt=bHdN&$V}L^wR+8B@`JD7JIrtpw>s8K z<&wif_A_%BnR|N2_ieWU&hZMtZ3uDjT*pW#b3Q2~(Q!ObcIj$lp;F2XiX%+MEOEcO zKW~M{k?I`$NG-40Ec1@2A#XTQ`aE683)5g+3dd!WCXm_h1Tb;uPQ(j(Q$fd3V4%?z zbVl4(1Bo>8<>d2JDY1TfIlU_yDQY+FOf#Q%V-N*&VvraJHdwH9izn$y`2q2lSZV9D z*>6lNJ}<5Ps{771m8^S>a0e}6vM7CSV&@X4!I4wRKp)vkhJu=I1m=wqv+paqXB(d% z8+2NnDBiQb0v7l%_r6WZ_bJY2i5SF%$?8osF}^pc8X$1+L5e){l*>|MPi)o*fpEmL z7`r;yl7deyMGNGkhA`4=vp>0oaV&s8ed@{^+n{ci+rsNEEty&C|1l(B1O456Pb9X(ZHon07%X>W<5Tah zW-(PUykaQg+^PU9!OuUM({vmpvy$+R5Dd%vvPt;B>pd~AnjC20=*mc)@FxV)=rBtqkwOAzuo_`FRU-5sj|LUcjzCNyGK3fZHmi+bf#J_fHvX%bM=M>t^4~BSY1gj$tB4lygYKco8|LeRyQvTWMnTKtD>p{zj*V8}q+9dg0x_!!G8(Y0#ZldNZ?Ooi`kLIi4R;hZb zG>+O0osY@FXChB8RfN^Ts)^ZLR?Dxxs8KlzQAbYy)Y%_T{CpJ+ut!L3{qV*=X#)H(ZE z8G_^EJrXa;4o?|Ye+clAP}$Hb84v;S%I@7ZZFEnxj5Pv3cPKw$Wpb`3f>agoEZ$)I z2fkP_t{9A`E#)sy6(}m#*gr<%{14Kq-d7pcpEdJ_DyL-87x+??YqZQS zaw*t;>5MG|*I1Vsu;)4D~7l# z%l>OSK{4SH+%<_oMrD{dg_04`N;IMZ(n~YPS6(c5>WV`Io7CvYY+j~Muz3{9LdprL(AU^FzEOXRJ}O$#1ND$@7PSs;FR^eK9&evN2QdF&pQ=pOA#!jR0DPMU-i-qLiV4H^8`h=pb zLurT_xmgy&7|e8ZX*ed(1#Ziab&;c%HU+)r5qx^w*#1k_ZxwJ(u{oeJwDFY>j6nlG z6o}MZXqHoC%%Y1ZoBAr=i%r8Pm|)A0#)f2a#Ug^u2#oiXG`hn?A0_@)F>Ey0ZFNML zCUNAZ|3Nb=jviXHe*W#q8YkpwP^nIjUMCeUgOg_8Pji)-xUtpVooMn|JW)p1`(xci zVyW6TurK?gf??5gyC69>yGv4K0KLBb;5p0>p8v=3vj_M8BcPqX%E zcB6@5O2rAOSu(5eR^V!DA(Po8Q{X4^oq2}mND*6sh&Gv}SbYZ`R!^bipy!_}d-t{# zuGV)s+^oFeH#BqPX3YxDMTiBn zU%F;>6IsnQO|+zFxaey_`hS)q)*n=CqrCZ+UMHq_>HdAXJ4<3kiKhB7HWX8xD+Il( zHhuL?1((?^FqYo>VUOtlK1Z4p6#FbOk(~&}a+Uxad!PG9aj>@;kwZ6 zSit1OEwNc$qM27hLWWG{)gN2sj*6-+quq>2%)n373mFzxB^#<(3Hq*Nc(8Uljm4;5 zPkPT$?aO$(u_ zqHb>A-~#2bgGrS%YatCO8jH74;%ZWK`n5w)#l9SBfoy}|G=86rBL8ESG>Od!KGw~G+!e<%7Fa+@- zMYt65=ZMY~o~yEx0{hGqsm$~wiSPo%qoQPKM7ht(JWttbx@N*@6X;096?Et8etE_e zeBFPeDCS7BwEf5UaIh5}!||lmlMP-NckXh{TG{qhUFhw~9NB+MEe9@%4+|2I=cbRa zS?x|gmRGxvl5scii+2$6tS>RpE1$8EsOt_#SF4!@@7RaBKD(1ykrcUsz*+R0RyIQq zZp{%C@ovobNY*PlOoq++YBq#q8Is*N(yqGSsB%*|K_f$g@v4+9`#D$F*$TSe+#f~h zQPj1>SCXDj7I5#l#h;;Dq{4xcvoXDHWWQP;bGYPHYkqCo6k8@fK=+Ap+J#+*waebq zNn*#f$_C;uwB-4|=W(gu-5#7BKqtgl)>TF+Zh~xV=G8vhi2*ElZ|@#GPxXPor1BpwD(iy(KY@Wv6XiA<&V^)g0ZGIK#ThOrwF*feFjf)EkcuyJu~nY4s3zF8^M}u+~|@Au516zJh+t?Qu`f zA9=92s1 zLOBMHrsN!=eAyEUBN$H67!dIM3dt5@1HS%{Yu}S?+ebhwf3hG+aw#zSLg3i%i1S4q z@90@)3-M0tmY=G^`Ja5r>~?G=sl?>{CW_mDiDh9EVAuir`u7Q1s%1(z$9EUf5c%0s z0L;a{mY+k~WM^ZW*bp#u|__pU;?C^35cP&U`f@VaOp;bbW@HKtTzOUH}6E8Q>G zFunvme8x$<#96-I=6^oe!mxVEJY%MtrRM%~sp+@xY{#(L5&MHV+wAul%B zia(?sj)bw1ar@jc>o+hB6^6C7C<*pxQALOerW4hO41inhkm-I#vG=J`&UBnH?%|8Z z`cie9f>}bJws+Fps?{EZhr=DZ)f1XNMDNH>ZH3Hv8w*_vs)$a3GIXdx-94~QT!NF< zU~4j%k&ymk%#&yafkW`Y(dDZYlh!1wR@3{1j|_rxP=95@XMu?Wb+1NNx`XO0`-78D zIhowW<3}_s21{xU^6cet%PJPy<*6l4;5+!6cBo~;Lpvz&%@SwJ&K*3`s^XP`E6HxV z(1b@1j_|B(LT>qyCTe|G05wV@>F&Cx+tE9B za<}|#QHIt!szOi7?Q@ohXm6p5q_3mG@3t;<@>F}3-52ekK~ErXuizG0T$Tc(EopKMouMI$`uh-r>5P+A*1BiL=J$Ft^cuuR+4h`>xX|qQld_l=k?x8wOp0l=EGRbpKm^7{ac2QGsA{5vRFS-t+P+QtyN12r zzcf5Y)0#PhZrQZS-cpDMeLivOe51WKs9gN9I}-O{Yp^FZF`Db?W4jK^ zS9`elS?AHk-}NDi8n)4uro30yjvIVU1U%tY=4b0rp@M}{awU<@8`pUbBkuiwy`l$7 zcO;`di9XYdtN5Y$BcE`u9eI#^zKYoTikHxaz!JX0WvF3RH!gem=;+-Z)zw<5sNaG&i@t>TUE~&ny1(C4%Y^D;tf2H!9M^K@ z?W>Txrjpfch1ZJAvOl^j2wQc!l5&{}^cMfDjx`+cg(hx}?G@<#7yM!6Mgi_z>qfS&IO5Tr5%Qmm8_|U06sb+Fm6U7O25bf;ZhEcN`rOxC7J}M zx{JURAi8Dj%2OrM#(1ROO+56FM5@dmMp(DY@T_$LF{F644)s@&7oH5;Ee(+_ zvQ9jzwY%J^)sr67ua(c#HfL$ZdyvTR!Vtc82oT1yO8DB4$d<{wy&>4-8JOme@`@JK z7fiVpR|UM{Dp^l_U@0LWnWLLHs?g@PuZ{0*`JADY9!(cbXY~2`@n)c4A(M&26G%@l z^YrC@ru(2XL&ho-Ds{m6vNW}1Vr{|OF>c25PJ_63O(;9CH(a%LN?x6}{oE&9&%5#h zKfj9XH8+m%HGUfgk^Bgc+9E>W{{o07y?+;%8~FqYYr(>mN`zICex6G(^}9v2l@pw! zeX|p{U;3cm-d0RJxs}m79lhCoGNXMd7!O-6!+zCYR~whFdxsJdGG&?u|GqO2DYNv> zcN>JmqAL#?T_e{Z0-s7zXt$OOMEPEh_o?+HaNHRyb4tfl6Wx z!hz!SzTkFMXABepG8w4-u5zYOxEn3D(UXc3ytzhU+e9RJuQvc1bG8NAdQo~jp*&De z*!N{*DEf6kqMmj?}2pQ|wEmaH-4Z=(D@X@A;*%_ei{m&3le2*jS;I0iXv6 zaD_6xSplwik=t&odZuFGim}G}RSb>3AN$SrT@N4jKc|A_Utg?lCj!w>g~6&B*)Miw z-h@oaB)2!+!LaiPNzBxee5d`2*$Qj;BR&hrjVsdZP3rS{Fv3*ebEWEyblhbIAz@nk zs?ELHO?T2sicBS;%!c!SzNcC;t39<7aXU_alX*|f>A(4Dj8^b7%JEn08rS5TGx{!e zqb#dEe+@oc<@xam$t8hiU$n-3o}VsJv(wDRAUX$G&O3j81lK#lrDjqdV(xsG0KPr^ zGN~+S)CDqA%EK$(d0V%nsO*K$!C_$~qoRepe68KBDI&js-r4N(Geu^-R@@HD@%=F? zHv6IxZ|+~Vq*4`#uG5tf?loS{ut<`Lo|gHBbC>z0qjqlF9eAs zB>$bdxj0t5*KcH;{Y4i;oU)ciw3*R_AnNADUWL?2|CbHex&ALq`4q(i2n}Jc5WeHg zKgRLwF9H&WEVsT(r54rTdOXSf9L52Y0kc76D)p*{+!L(gx{2yDUucb}BBE4o56&l( ztLM`!yR{1rY z|9CL8L4jXat;nfiDUm<`+PtAzyv%_8{$w4YmzI{j6_vvXSRE`6N9#i8aEd@H#q6BN`E#=%#SO3r^#uRYUAeOfYQV49G8ohl& zRu3%QDdI7ki~W044PpQE#7Wd3-_vu7%TUCfJ3K(v<$j|f>l-Z7&7 zMLKbW_lxOp3CNHvvPU$sl7|F~q#k$f1ZFw0?df|w!K65+ z zN%w~5;|aJ?sU5nC_t$1>QH}1v3U#W+DMZcT-TA>2{hw9&&5s840I!8QJIlvQ53l9` ztt%miXYs>H`zBMb;si>a_USCSX=_Lu0xrG1?p(ZsNH{}&r8x6`mOzgZYx(ekJvDzT zbtiupP|ogTcm(_z7Px2+pk-x_stn>%9$hp@O*Yai8oDvnXoBywiRCQSrR8__^Es3>myEvKU?O zvd;l0R{60z^DLBkEIyz8Q{(XyncA9kHL;^lH|O|4YJFarVxJ^j10V}}+J_|9jB?t9 zx>_Fl&a&zcP{A2kWoGvK8|n=dbshKw+JW?_UfCP21xCc0PlaYO^!S%y(H5W>I}#J0 zkMNK=kQ{hrr>%XcV(P<#=h6D_{zAj(X47Q1MLVo#20R{{zONk~*)d!?^^a?o)x^&! zx}(4}PwNk9*LiDeAu@6A=tJgT@>~7xcbg{Yb=?1rM zv|6Fh<%gxOUCm~+G09sLzc?7AvWwQ#du)*I`BD&ZtH)=y)m@Buz5(DS1L`&q0jp~<3-s2I}O zUDmk7zZDS640tXJz_jPgPaX>Kb@&T6Oy5WD5Ix_iXQW3jds*x()^6YCIGea)Um9=S zn>^PPG_l2|pfm;}wK0E6uas3rC_)eT60FFR2deHlo1m6J(nH8>iz`tD2S?b+ez#OV zZIVTbUNvJxk=rKlL|H)JyV}anKeZ|4G;itKO!TT85vr~#_;Vh?D#GRZlOdWCl+vY? zcXV(e*abN$$RIg2`IwHITl`)%=VR|gcX+#w2-8pi`Kq$HH(+y``1zKTY3 z&}rgJ8qvz1*da~FNml-jkK<)UjzJaJVmh@Sj1rdR8j|F#l z=q!uv4a+Cx5M;e?_cUH`c!*g!eJ)?YlAtKSo!(+Xt`O{Zo}!- zD|L|P%OE^VY^COixB8#~a~=X-WR#*uMRV+Tm?u5<{)2`q%lZq>F(_TaFR6=wnny3S zI$(E-N7UxI(8Q7Ct8tNMVHE-le`7le$xc#EJ>~A*23J#%kcd37_u1}_Hv;hLmKn=* z?Ft+UH^ygTL1KWj2p>!Z7I|`e zBL6C~lt|$e(Ei;_l6yib`LPC|ZDo$T3yPZLQrbQ6n~wgrOyN%u-Y9sA77mOfnK&30 z{oO-XRrb|8!)c^bW~6aFJ93bsm+e)u((490dhwMJf6$o?>r2!@0b*=<41DkJ+sEfO2WPXp&f2xMjO z@bMbVTr0-^w$P{i^cE`1lvDGXp~ZXFY=6eyOUwDtQ^WeRce8I-bSz5*qz9qS6cT z4UytDs1s14q0cr09yT)=g3)S{ZKaoX1i>3tAF(-~ejMdOANt29JSDm5sV4!=aQ2)a zOxkQ*3#0-yfMVC=h&aWjtEW|o8fbbG9BlB4-(2xN=mTsrFb7B@gHl_(o#dWV8_}B9 zed%4 zgO?J%-y&F=?3c#BuM9!^R;eZ$KrWy5){IU0x!A*M`w!8574?Q*1~uBA1l~Sm%r~|_ zYcJt-yiF-}ctmH38oNu9cB@XUwKtbqw{`c(gDs}Bus(`urHe@+T@}injnV!+2ufat z2jj92F?ca@jfD4`XM4;dTd-|uhtU2^y^Fv$e6(^oGoBh2E7>lyva7XUTF(tBDYe`( zrjV6kD%%LE82!RC@sJRKpp)kgnaND`Qxjy%=w{B+)c0&G_BbN+uqYLB(ckXqixe?> z8hbPp;+!6Hux;F8l^7d?uBb+f6Nj`EDav^bLMhm>b_Z#(8d-Xf&?iqX6jzHp%+th*LNLOh#Qt1_NS7J!4SvEO21#m0-R45Q$&oyHzc{uNX|G|JO$H%kmGL*M6 zRtP>3dysuuV|8mL6UMLhaFusE^h60Y!zD=%xc}_?;Jl~ub{gd}dz;IvTEk_1c=S9o z^1OGn$~YVk?qRN7ebb;v%728O%fi{nGt6W)?JC(0O_&azu1PHsnS<|^ovkd(k0?{~ z@Zrr=XI*gvsCS}0Ew=j#i1=rqSF7LBy#HC+eq(R)Cs_T}m>U<1p2Pst+)jT%1R?_| zCwtgk`I!dAEpC}#EhK$UvdRS~25h8KcO6wlv5?nDZBchH8g?I8 zeVrJBKY0p5=4{Gl;j8A&Mw2VUYgogR%2MaU1i<^|SGtV~yW_>N*@=Hwq+#yE*W44! zn@Do8_S5LJt!&kyrjLySjZ;i%WYBID30s{ov(_Dbqd_65-=0xGqF_BVj*5z91MEH) zVRIC@^bYd*P7xu*ls7v}d0S4(3@&zR&`o~a8>BN@`KoHS-p8&lR{fCX zWufpEvS%_axFkf2xxN^ymT5zl%$%t)gZOd{1&rlS)|I4hWxp%6NTBQ)r@O3quxl(u z+{~2)3aH)62`l8+Yd$;ajK3~gZTHlP<#yvf^)r|pwxfL1k*_Ts@@RdM!#1g)^(!}8 z6{x3G$-=wd-IZU4lk$~K((gcHjQWWNYWnk8So6^eLhzo}jMp0U?Xwe>tTc0m zL$Agt9c1oaRRAXEX7P6}cgm9m!g-JQX+)2A$B%E8%+P7+*mC8t^MK{+o4tuLE5KXv zpxLNA9Gn_wW|q{Sx}ZFa(rn03f7AQZ%DE80lT43i^UuaPoUlstIWyYQO2~26#Zs5r ze!=ls%*|7*(-s$FlGetvBRGLKemyd!sgp;CTgA#!;z+<_nJcjT?y=J|1Kee7Fn*{y z?zrs1fXkV*MeY>VWq^m(>|@_lFs07r1&{=kg#ni&b8~b3H}ebrwX0-W%0(h zB&a-nh3B{%vYW9bFwrP!&iQB$-Lu-HXFBi|fv6|WySQ-NkH_&8QS=v%kABh|I7L$sX z=LEW3g=DpzwtkKKvf7|xU777I29UHc2I9h3GGVPHF+f=4gbbaxB(Bg?>&>rtfx zkeUQ7cByBnfGjtA^k6@YXDGSRU|Ys30&Z^xBtF6HZ$H-!3VqaXxqgd_owel{5;5;@ zh4fyWP7(OMQ1X$0?=8N}VZVC81bn{yuTb8bZcMTsbg+@exD)WwK9F$GygsyE7+jCO zBBGfawL~ONy%w^hXxZ*PBK6a2Sjr=q8Ty49c@znP(3clBMW_o6*E5$DT4 zer-<|PUoWqEBgIY+RSRY_$?TNTqN;_we|$W-AGv8-Q22HKbJB@-4-o)fbX-cnRN?V z=8F*Ry7hRm?*0lAJxER&(#{ z-rBIeK8ZpT8^$u5=H1+6V7CK*vIOgJ9%^qK)$S;uznsK`!8P1{-dj@-kE36~#uU%b^<*hJC7#_Er zTOCQ40-Pd)X27JJ!G9X0C;}_!rp`c^EbZ6;=dcJ?gAZy?%r>g6d{NCg^b&Lf0`2Ph ztv=o_WU-DnymiC2@&gml2H<{Jeu%?0!;Tm!M!U>iI=-45)5{}fn#`9cOKmYm%$Ux+ z#s~HAwTrtP662;|+yPz=+by)ynGbX|^Fz7+fYIK}91B=ZevmZ$wr3K?p?m6Y_ZP&rizeLLKn! zj)zGEfs+<{WcqNnx%`>_!$y0q!xReea8lvG1mT8p9I~%BT}MPq<`b?CX(+gzem^Qk zQa;027Hl{VeyA2S8jnq)T`5e~fB6Tk2W#|e z!^PYyR38w;Yx%Uf$WCMFY{Wv8SpjNt#wpWuELqHSeu^8M#nQtw!?xMb_JRVpn){{h z;cV)Y2TDDQxTwl<-&*XeljK0A->zv+>V141bFH;zA2nomZmfDLZ|$|Z^cXK)*9fek zeEQG7Zu_wy)PCu;%W1^ubQZ~!rwDY+al+AG*pnqiq9s-Huyun;NQ4d9ot|YI4-qsw zNmh@+!Ep;oXwnOckQB#rU~Q7#VCW^xZyb^C)odrpoMO|FYmZhxoTTC~r9@<6$s&e) zb_-EJCe}{#&@u49Jm+$ZiLq~9!H){npe=tH$94%_`+DBiwyEO^;b~X{>uA~?G3D(A zc}uodI~$H!Yj<5=ppBKr#ty|I!nz?<{xxUxs`=LVVz$QHn|#LvZ|*O} zS(y&W5MGf}T>?eLssCd_d{f)b7WPO4|n3OYU*V#oOC+vABG1le_8;CQ_4^ zL+H$Z@0RBpDkqY8Lj=|Le&Bl>+27P})1Ztl^^|n=`P6&~%uV8i-1yMS$8HGku`F{-?_ zEX+!PYs9$*NXE%xPLriqcN zz~0}sWI580Vb2ZB;5&zmork$jAGW7kK4oPX4}ZDLUrIktQ%+S7G}|)LLhfjE#AQR zM0+fHFI>~{@ZvVluIF2)PD`W_bW;XTlR>#A248^SkjjXz)u+HG6>1ix!aNaxpkV4W zh`**$&b{xTDwZ*#VbMdGvqux*kI{?C-KgR_Kfhy+GiT7usqs6Y98Q;@6J_zVQ+(gs zKJ9+5cjhSFEIn}2Y`ivHubmvU>0s=$1r)t0`}pbZDnB)!L4^L$IuAV?FozCb2r2m? zw$9Uw9K@WlP9~qt+ZzvvlU;gKsiKUHU5D&Bmut80jK2gaN9QjQ8gCnQ`J4lD1CI1o zpVl<=Ya%z=jOb>Qq`Ad(q+dHwy+ChYpn8;C*b&>9VVfdEVp|0p52a+Cu;VxhmNdAK z3M?rpj}_(&eBn8i6X_Cj^<7S%-fsH=hHr`3g@J2@i99YQIK4_4!j`V7MwvF%Y(6x& zv{b%se0+N%S}E)J79^Zy_dp$fhzG&@_dj+U5rX(&Cs)(UfA$n0^T2~IM4Hc_nxcTN zr$vQi;?0pWLe4>67AV)a=s<;v9C4LkSg--LbIDS1>;^!TD;xkD(fC`2UwjA|dKdPV zo3QIgC)IaNzlI21`JI;osfs^ma7p#5rQF&S`dPV7O}i>9wO@`eEa_3d6o8rH=Wncy zo{axp>5buCnriFUI#0AWqEj&!-L^rtD@s<3+%tz z!kc2?r}|unocak2IiFQDBK0l@g@pyqCO5kzZ@5SEIP89qq|PL578&zNiHy$#GAnfPPQLVEKq<=xiiwvKU%=k3eO66M0@ z_}~VAPV(_V{_`!|xP%&Au3<${YBTQGWH6WzUc{2OHM<)XCeKaWiJEudO*ogjc6yW6 zVEZR=Hel(j5PD-5N5rt~$ZLE)TUV{4_O{~^WjqRE@=#7ErgSp*;DBqIo%jKuSu18e zp1ZwhtD+y1-oyTmEr~KfXKc$56c`>2kWt@2aCMk@wM`pE*2pa-UpQZRIYDccbED6^ zfDmUUcnj28oE|Yz_4nLA@mcy5rs1zIe-}lXmSKFTrSE>AQWHYR>7tW_bsBRlXXReg zSNI8k9rsh*#9rL^Lv_RL1^TN0qgJlZ8Al{9$?s5bVyOo+HRO))I*<4dP!Vgm^Nz_$ zp*5FvA`HdNDc)Y^2`{Ur#>_|zm=?DROe0UN6wjiaSdIY4ueS|N(24-hCJH+)`|X79 zr>Bw~;klwCsgswD_&x*iakA&zn?rH(XIA4Yh8Ri|T$f`j?olhDx5N6gR~3D8<6Q;C zrycnpwU%IJz>^nNGv2Z49@1z|G5x>}`T1!Xf3;RIM{ocL<_RFGqshr0`zup?dsBw* zP5o@paU*A`uejVNUaHW(`SeVg?J@D7`qQeIx88iV&KdfZNizeMK?D3r6^Ny>H@-G} znc?3z%<52!wl-P)f;&Zg?j(@jx4KoXrgI)qS2X|QX;=5;)S$+v|1TXW8gz&}%s=$3p`4fDjz6F>AO&OGr`{)He z(!Uqwk$~>#`$C?m$#Qh+wT5#@I*XAd7HEuy}98^Y;q zp^U4?_Ktg7LQx{m=$6-@?#+pnkh7q)O<#O= zOKk9)ynN3U(`b=b{Vksz$0}qNz8`D+oc;$99{EddX<#(ZZsMx+#b{En=#YH~b#FS4 zm!L-}X>UulK%Qr&5|8I5wg%&kPuC*JRXF|HSr)VVpwef3^I4&t z^R1aR(SYvCOb+5r7RL}=LgETA+x(aiIUXcmHbiCP2zp_-35^_U@P7ajjkWZ5JJ%W- zkH?akoP_41dC-$~^YMV>AVc1R|L6|5y&HM8m1$5aAXM`DP2N-JhC^DdmK0b3NE&eV zEH~h2H&5oAGT-RnT?WIUJ4UA%F{Ki}d$a)V0I6&`2d<0y-lY)ic%|$*bQOdfX!stE z(-_l%NcN%zzP<3@@-Rf4ke;C}ZG%#FP z){wfOCJ;U9{^l^p(Vt86)#|;mKOH&y3|Vi)BcP}s4y`YK56Am8j&)=w9b3`uFGLNg zlpE+z(j#NVwMj}C4amjF63jv{_cpeNX-DbLU)oI^B)ciIpqtL~HRsQSdSJ|dVn+5p zu~bC%iC+*cr+J~?A}c*ph3T_bexgh>-zKN3u?g65qa-Euwq_!Z>5b_o>(itgi^lJo z+7;hw`5#-0Z>!vH-5w9Zk10&+0M1q)U)fD>EL?XM{XguTWm_9<+ph24ZK1SC32vph zTX1i22~wbFf#U9v;FPww6%9_&;1qW#4uOOc+>2{)*Olja-?e_l%C~&Uwq=sJX68DN zW8X~^-1HphmRbQZCb!>7_Y#^Yp|QtTbl)vlP< zXIB%IPru2g3@b2gfISCzyHi%2k`&%1-S0;rUI!2|pq)8nrSB=?NXP3p6xo34Rw{44 z!8nWVQ_51;bb0?)Y6U$fn7xii1$o#rezTA4T&CiD z5F+GBoKH$THCQqEr-$L1SBHFHP_j#@aBJZ?5dImbR27O`Tw1i<7ELL;kqmxadBnOh%T$d{$u$yl1#+3M)4qt{B--pH- zR&BIhai1$m8$N1g2uG<|YLxaiD&3H%MQJ_uXrZ{BP~2RWeU6rD%SEE-6FGV}mLi~= zr;Ev6HFT!widypL4Zeeb!cG;ozb4jYf1*BsnTY9llIBTw088I6Bn5Hy6p>6BS=A#@b{}q zeI@>UFFDT)F0mmAEecQ`(CfW9Q>z{E1CqU-*;BN zEuPoBXW!7LnCJ?|?UcCS&l=d@OvU|Wz`f&I7`(sz;p-cxbl~5DUT6R|QRKrrG_d_h z%w-^L_p7H1X`Oq%eQ*k>(~gN={(H>S=RmG>@hDqx{5sI=)5g%>O35qlNLq~I$@)%T zaO?f=7lc;2JB19wHIDj3FG<+t;^_~Mzplu#*Bf;gSrY0;IP6?bO;5ykK~O$B#N%i! z(f{;1h@}I@09CKJLH2mM7laM?J4$^vySxwP!0P_?@;!sJQ7h8yPEA6o$0G7RY2S#i zAyR#R?8Ue4kc6IScEvmA_~Iq#?c<+qT1rmf>v?te>p=ngkDr1^H(n4v0X74d8Ha-C z>pSd}b8!5Qq3`L{#4aXg`n;1X-kk%oM{pWG{9;W)b+8HEIR;97)=wkCSqaVU~^J{zOqV{50A19l$Z11!DN8RS2fg%9-^ej z%oe~G^EE>%!!ZzwLSO|M&dg*+4z9-0)E@0oVEiia{fR{f+tssBm9?EtwXdxF)E+aO zhEvAB?><8LR_HND@aagUNr)J&VD4=;D}7-FL!NgAw0CH{p8OE{?x*2)=Dy<0g;dhr zg;B@DrsR_U360dlFD45fBc+iGE495A0pCXMr|Jd~wW=1?Xq!t%La7`tvzQ?IJhB4W zj(&vfw~}N14`QIR6@8h1-rt6OxX7OZEe3|Xp6u5uq`^`zLd-MSq1>gY+~qx%?+TB$ zYtqpxxxIdn)iS-M%{|gneP3hLN5ypD3GQtXF2L;uuT$XW>k0Z6=#KD_LCnt80z?{l z+bx3ZNz=MZJSqM*Bbm=n1J(%lqY{PK&8_sC#dPi~rOV_M(~Vc79L4p7Vn17M2-jin z-l3tQ0-GjdZL&m&^M_zt{7ux&`zDHxyq%={{Wu*de3pk*#$BnKCtiM4^8FtNc@vV` z5=?URip&s0`H?$pFOlOn8aU)(HANb>R*}4acNQz%F&daNiIH_b|6hxdk_%2W zv$NU#tm-qT!+|g>n_tH=z?FfN+I$i&BmD?>XD5UX~@|DXWQ&d+H6G*$VkB8FD`;l|Sq)S@?@|7O=TUpW|C$?OWxP z5_lD;yq%fmZ}5@c4Ukst$KP3N?%oalM!sPGFE&vD+LTglkM`B^)HI5PdXS1{lCYcW z@!E4x?<*!9?XI&B%MVcftFs{Op8>grsViLIq)po{??0{Yo^X-~*&(YC z0a|{kDYsD?0^HphV=I^>@J+HIM~H(iNrO7|bCmU>zZ)8hn7a%<^Oc@&aPISSlb#c{ zRWB?`oN*mi&s44_#3tO*<8NHD(K#bW=(q&Q0G#F+wIqk*ofeTd*Wz+zINs4k>+`y1#G9-%!vMQBY*<)m3^=%4VZavuGat1 zlpKB2%>A)*XTaWW*av;GTl68i^iIr4xF6tZN2A&b-Q0jiqAY!$5!w$mhyhn!2fcUC z$27bJazaKH-IoZmg;Ppw^hbsY1}Z;WPP$zEJ|e!BevIv2_E$W<%w7+vf}fUdeE^iZ zkqbxL$o1s;>ojnxVP~x+VYErsEg*O|uW1IT46?kQHDJ1d?k-jDEGjM?PtbyCb0-|= z4BxstZ{Gj6{}Ov6YWOdMx)Z&fP@BW0Gg{tf8jV05wwpJhJj^v0T6LZa z!bkJ$-})FfC~A32XfdZ>11pC6VvlC zz|n@ZR=_(rm8!)&OM%hygn*tg7STVA9B;gK zwWrzzE9M1qKXtjd?$w6JM6jjXUijzZF8WoNx1L$3m-$vKno)RC{^{`M*$lBs_^eBy za$W6Wt}!Q}m$t%^5b<)k7Z~U3e=!4@*q;gAME7o{aM?}vL>+L9dhmZR;$#a;k{s=P z*_r?)KHeiZcE8d&`t4zNjU;nKw^E9=ZkC)wuJCUtsLg8c~sFy z4#UPhxjnnqSs%X8auDGv8(FGJE6{?Od%(zivT{|<&rd;eE@>Z;N3N70^1g4Vz@*Nn zfxahz2uCQ?)#9AEf3jH3K)F#ljC6ukH?q{qkoUcuhs=eWZoQ-WaNHtOwy~U%+&g&} z>*4ZT;W5FVig+6t9^hP)Nf)raH zBuDpWVBe_aZwy$_~_J~O*rTt$BcU@m4ru+r3RQcm|`fW z;0qU;l$gzaJvc#XtPgZzJq4HNDVu3rd|Le76dbUv<02wXWTgcS_#xUk(X1-q$6xQL zHkVA>s}+%9S*wL(#7xii;D+rxsi82CsvWDuW8IT`n1QvA;r zhkhZ>K>WLNC*VKhC!E zAFG0eZudZ9yyeH>JX4*5;L>s3W-l>wrc?h>i=>9-wL;VxbzQ__-mGy0W7;nDXW!;I zPge0S^6>_cJIV4_6{e;A#rz7+1xi$^Bopg$G-F|D(;c{lL7Zw;`G9-ytFZy$8lUgj z_kLczs&_$Lx)WCEzP$S9ETlV#Jj|?L!sMep@G&9cb=r=lzRU~p)|8#Bxv^FaT7)nI zGtcKOL8|_8SO2gJYs(7cnIx6!ddPd+eaSQ=12>$JExzveaZ}J#N=to;vg%MTV>jQ{ zG`y|RrWpGP$KNqe$~`M;-NPE>`m?fyjPXs`9n(9mRA;1_<~2TQc_ab6^L8j@o;yyt zb4)a+Zdgfu8F%%jGA-I}OFb_5>CV9{bZGd}T|(t7$2NkFHaS0_)~8L_Th|x(=fBDVVb?+bL_KR@%GOz9$4cTx zLPN=XF4rJFTUiiR&7c1~m-Y^8JSAI2_)n6%|HXR0unNB*#NY+hwl<(g$p$pD3ekkE z6xWLmbq9^#Hwc*lUrA9rB|LWgw)`2EQ|VkZrNe=t&Gj8W)e@bf+sgyRmPY=V@{ImD zz>qUN9I1!4V1NEj+Iy0BL_9@;P?@_!=Gb5xth9)ZXXS_Nwfz^-^F)!9`P5zF6z6I< zSQR26RdYZ89?7BAH6JITqD(YIX&)|^>|&$nSI%rpB|juruC*V3)W8u(165;eAUUYB zQ;aIZ02WTml+Lkg62KV6U`5JFqd|(1t(OQQmhCuW9^U88%4d46@8~yI+i-f=x4lF2 zS(Mya%g;@`8Akn)ehV6bJNmw zsPV+QbvI$s1>w2xb_ps;yGLxQ!=U$XM%I-19JfOiyu$eC+V`h zQS1sSRUjHKn5a@OyrTK+uH}hW+306TrK$^U8h6A~LMw4YKHK%T7#!f&r|ps2E}MZV zrU|}q%s{Qd)?^gfWV@;X`gw6WxefFolLDF-sJ4mgw27lEHN}S~E55N=6f@A=ef-y> zc1RSpZWtlX7Cmdbc{dZc&F4vee_#K+yR3mn!Sj+=N>$FItVrOom?^PJJUpR`D&JS6lBclapl8zo zr?)Iaw&ck(T3Y%0fygmsxzn+$y=Q1Dg`H7xe!ok>ZmZaomFRwQv5eT~fxj#IB%IVv zoyPX7!@bx$Cd>HO2RqtQYTzlZJZJ8dz+cZ66&!7#xR}A1`eIkH3x{$LFvW^c0bOZ1+_?9rt;e1a z7eb4oE8J+uTMKkZPqt0*0FE_^)ienm+9=@Jg7(hwLCp2|k`cA96oG}hZW54@pSm%k zoQ45k9i|ERJ7pww9S_tNvx#gM5E55Qp52QOM9w5E^3snp(=xiC!^v{$f5<6YX$4djV zg?>K22*zbmri1D0+>*3_40y~9<$R9JNcA34=w37Y^}DmS94o#^8-|%vI@ti4cV2Jv2UXo0*@+t7m}Tl(>v; zMIw+0elqq7t7E$C!?unLmKt}1DB<-0N zO>eT1*$y-GiAFF0f?^4z^}xL-JiRQ0Se_5{>{erDv#>;w6SG-_@TGafCfd*NRK!iQ zmm}Gn<+pzgtAn~lbWGGr&5jed%2;8o6Ip|D}yA6oQI@axTsxDx~)`q&6Kmi<1fL)stDUyL*(E~yb?pt z*Lz&0#ww5W=##mrV^I0AP*wxnQlHs*F5ZmU%!$7=(DpC-1ij;>R39AU9iX3m;mmK4 z@s_T53KI31pc5RkN9OF#q1?Y-ERV}NnYvrpU-L0NMK{Msv1n#bg<1I~m=G`W2t1b1 z6w?l$HA+zTrBwG|-Q-BLee1SdbjeI{e<;Ps2dx`_gk`8>%8q66!BZ)(Lml)KBR?Lz zx8iZ3n2}>;&rxC7QPQBlIy3Jl75?K7SH2kh8`#rI>m2Iuzv%O-j9avz5Bs%;=QC;P zS=>~DEj$JMZw}R(tupT`wTTKXE zn0%~})ekD;^<`p&^<=nl0R<0X4U9}$^0aBh+H@~!@DYeD$TeJ-4Wt(;bHLng(^Z_u)x)6MaTQt9*|Xy0;?emCj8%r#_r3ym3C zvDw|G-k&Na1vdUGm=c<3OT3bcrJv?s+(=g3DrT@UoF>&qwd_BKdwDqj>*xfp5@r*B z5ZT0#?l<@hnHkKt`=j8JaU-3e@G!eKQ?I3@Zi0iLR^~;@`*tU(r}F7Ys}r|#U6S($ z+hjdwgSs3#HOr+;wa$2cJJFK@ToY>weR%;6zB9kP>$-T6Wt`~keI!SHiu-$WL4GqD z{`85zw_g!;;_or}w^sRD<$EFD=gWmOb|-`50%^1(ZWQIHe;aIn-15z>4S1~Kka0+7Ww-7)*GkyYDD z+9WKeUqt{+54G2XyJ-0xOx?WZWutVYPy&x6nDl_MqNM;mIX^Vf={ z^;F#iL_8jX5~4N=5COd@=AH_-pmSd}v18m}EzVJ@50n+KlO;=0xJDKv}4 zqx%exo1ks`Zl=gh1hI+*!?PBVfHIsw25Rit?b=WtVr{ecU+jy2yIt9x^L1hDAUU=Io9eM zTdXb!Y>vF#*bN>_a%>Oo+3Fr@8xS^Nq$VFOrR&sm|0)e-=o22g6=}*NSXS|&3>Zrt zqPp}Dr$1a$BZ`);_h&4m$O}ef+|m{%Ah&^r`ZSp6J9i zPGmi`0yJjK(rS1_#X9okxlX(26|16eM^72Tntx=Ayb)impm~L#a9 z)qz9OUch%J`n+)*mfe1OG3iS#yy2uGM}$_}=|x7{WxoZnOMSFKnB`PPg^6h6o6+eg zRQV=j3QMG|x{3VdR^*>{`&OucMa0dZi+B~IQ55kfa)kx=-mQguTX_2}Xo&<8tZt%hxK>T!qoeauJ*U%u1|g1n$FMzw{*9k%jQg4T@RR zTWGzr(&Cl_?@2<85%aBNo+zG6(Zi>Z8`?VS)fjRgQV;Ik+1c8Q+6unapBCIQmOQG zhnN}L%C@RoMr@X*XHI)sGqS4#=h;kQesgu&B7?)p?6}JZ-k|qOK`heGJ1TxF20(}! zrm~984UgOxtv=nG5+m3EQ7ALR#5iD!LO@$6mvtxZ9qBliIhjyl7Xht>cgsJtBsbq9 z=}F;RJjz*BlBx8o{9`HMJ7)q#4eV;c{#Bw!>tapPoKjZ@xck98Gs^#1B$tE#3zvxiG zOb%7yIVu9I1*>xC7sadV0^*^N!HC4Qhy@j#^`jB+g#XrumrCM(x3C-H`#VKSXvM%_ z6l$s_?pNJ=r``6YFMN7ga&X46WbW?WU9kEYN7t}R!0&OMj=sjuqk%5kQn!W>|cNUQ7wMW9!M5+&udvV@Xo1iJv=x(~i?4Jzd z+q#4AIsgINoyU3BNOHvORvlGST7}jCw_+PE(un+Ij6i@*JiIyHAeD=ck(#3K$6TL} zYG3@s&h7K1zsc}LySl%5FG@275%w0)o>K+XpFdwif(f5l6>LUYha^Xzy}LlrC{O34 zSMRsH;M{pyYjNpjZv9j$`KDOY&5{EB2ogVL z`Y&V;&CTnSB67f?irhlhGBJydrn=deyF~Yq8qz@d;0Ibn-dZl~N_o(Nb&M^@6a!ULM)F z44~dd3upzP^ff0*-0SF#O1=g9pIVgzyXq;|hD3y3#)&cch&~zt75w4z8oEXIt36ln z>-7vp1Fgy5Ti3J$N3!CjNC_4%O8M3Jc--O-Ny4;|7N^JfD%)`@ z(LE3OS`H8F{7x>#9+#HLPX5EIR*l%sc4TTe&deZuN$`5NzOhbV*=G+Ya_YqLXwJJE z0EjU8loh$$#!QqVe09}xdHv2f(X@XM&Sh6C7CpmQ8!nk9(wx`iWyjF2qGNH=p!)24 z<|gWsu+-JNO6bMoX6>?On~tgVf(pGBv!kWLYNx|9w6y;-*&Q>`3=!*E+zUvAWK^_Y z(TrO8d8sNzPg&mc^;?%VP#S4ZD)>EfNCO_OcdH1ZG}bZ~l$wMgald{=Ia#<=c3vnQ zuiWGdz3L0$JamJ!-h~55{D785&*I`?()kR|iPFVO@HyI21zREi>le-M4T z%r0(k>bN{2JbNRagrt$&o^*Lpc9+mxc<{@zw9B0DjRrI~%8%zpomN%v*kig_re!8fc%UhG7P+c|ZBGcMNiU@jS% zB?ff6S61)04F4x3*#7u!zc08T;L+_Yrz2bKbnDll)@xzQU+NKfE4vp@qIagBToS6L zfww71YuEXlrHmT0x_AuQQ{XBMXaF`wM58}&;Ymm(4#^%&*Y5f*Vin4^I$?jh^>>8H z(J=7GI8Nztag5SekxnOuJ(lu578$vaxrKMFYcPKs(p;L~5hP`^ybe?Y7W>7pmUst6z~ej}Qh&Q+vZ`>?4G0;``|xJPmX>6R&P) z>}3v5@xU~ryP2MVJa_!o7A1J%}`y!RlUm|C^ zS+?U2H<~?|<6qk(wR!Ftd$m5RXvV&vrwrJBt7DZk_eCJ9&0q^h8emwvVx`+;rgEuh zMD!2ikt~taSa-F|IGUI>&&RH8XnSr>5Uf%=s)`pUv zs9pDSdZlc%$sd)}gAV4D;d3Du==Rj6^?%45XMtvQt17Qn;KAr}+WKf&It8bDFj(tt zV=Py`DNl(70f9sjsK;SQ4D5@rc`UT;&f@!ijkftV{qKcw1fdyJrIbImH+9^RN(xGY zeb;R6X*PY6$U&XSbU#${6qVD|Ta;X`o^VmqbSKg%Y0xw7wZ^iRJT^m?2YK8o)&3v6{RBEUy;isN~}xPIYw->8yQIZ zJ`ZzFi>MC&qDHz*Z7O4WthN*=WK;W z@&*M7pD>G#c}8K8xodWoB)9LzGQ;ckghTJzbu5XW8J5PqT5JE@W1wO~t~^UFqID!( zJ98NrqMp?{*o0C>WgyQsY;X{s>lbFLwK_WxhC7k*d|WPOC!49<;ohr}T*bHpfHuwX z5&7u0ogxmX-YiM#cRY?86kIdB_#65ZT(cehyk1!$k}YDQEW<#==LK5KGwJ5IK=sng z`!;O&jFZa4pZG~@D6jI(L4)iTul2NAi8i4R5G!+049bVn{g?&T_7Vd#)yBa^81Jtu z$50m#)4vH*7iu%T%ZdkUE{_58y~`YeK`bn$tLvc@(YA-Vg*$W?AbpNiW3@p}g;k9z z%gMT~v;8GW7LD8}ML&sw5$l67azG*8Y{l+1y|^+;LEQ_}R_98(?~P$*_JVR#XgT3&^mC z5|JK`+Cg>24RXUoez{Yl#o2?v$znO92{aFRuTe~D*ee4z)#mf>6h?&NI-yKcIs!fERMf8=sP`0Q~b=Yq;6HU8w1dw!MOgXz0#burHRS`%x-C1()~ zM*}%um*Y6788vA6&yrYVO5EM=pIK&~5Pq?sSP%>lYd>A0N&j^6+n2r_zK7Rgr`hhw z462l6vh#Fm5vpm&@J#;u3!21C<3m(EtlMK(XTFb}K~<{V!?Li1=1H=#XzSHF^{hMn zw`j+DS?Ekz_REGj*J63ox%l@fz9i%KC%+cjPcZ?FdgDNMa4x)_Up(;)1ob??wCw99 zxy>l%HVHaO)8PjbAS;a)3_od%bt|*R$ZOjGZtjG3P*1mK16^dfTNfslz*n`vrH6~l z!X;_u(1!d^OO?t(`;`LK>^7IcGF`0t%@1g4uS>dSnE3jsfU8Z<&6=`PN8Gt6qDiePB_1$Dq#CqfV`$cYu8{ zvrq$|m$D!>83=CEhOsXl#`XubG5n+k$nFXnG)_;Hgk%T{d$v)yFD>F~XiamCN`7V2bE;OWAKFk$RU<8;w}dP9HC1TmD~ILc8r7`X zLiGc%#YNRz!=jfB_PfbY&@ODVbZG-dHi@8ChMy|3H!{hUx}lj@x>6$}P4mL`WI~9!g_+@@@pz1SiLraKWumqI%hgf} zvD#)yHLhU|ltKze%jt5Wg_M8SOeMqkyLVC6k2TvyQ6Lnl#pF zHmT3>6Dl7TXIyeVd|+dho(C`tiHL><(t~VhRqrZXCh*hQ)e!h44#)8g7C##@3U>$G z@5{6FMv0VW-8(WpEH|BUDp!r+?8~j%+=WC32O2ujcWYofK!*0=&K;wAZ;(&xaS4;K zD8@cF=gk~Yn-WI(?GV0JNki^|e+-*D)_fS!5&t(5VO^pvs8Hsn&z0B;QT%;7QS!;7 z%K2s#LxX%|*OBdnUprx}IufplBQ4Q8&3J1_L1eVV*r%@t`QU1!d6mlp2T#v8GCGPS z%mR-DkXH|D#jQ?S+4EJ#sB7By-(jT?rqV;dhoIM!mG!OXm!hzEh9XoRq}t{9v&x-F za{H4HjQ2bXO5Q(RJl_amu!^Q3hE@BcvuY*+n&M^^t=&Vn;hPiDuj&8Yv~{?iBbe>K z=yh}|g18upi4joD{c|Ern65<{#U8bE@Gvl##krGrjo7lr98P^d!eS%Wd_9=l$?IVyEb0lmMF&*D?4AF6M=|VremuE?%eT>BQ{fJA2{Oa zV*U_nn2-2efIjsvSxn>bik*v_{Fik|KnSeX9KIWA6lnziJC2QKbGIOw$=|}u&gZjy zh(V9m|K~Gt>%l`QtzeCLFU4ECJ-z8glVPZu?}1^5AM(F|(rpRi8BNvgdauekepb;v z@57*qSfptbcl!T2b}*#+H<&%H|Nrhk$o@CKWtr0}W~kLO)y45MHiVbQk>WHnj=JTY zqL;tSy4W}B#P?@7FU21nbY?dUTS zr?l*~|0RfHuzrvH1ZlQH7D5z!>7dk+%iGFK;Zl#2Ll>l^V{uJ*MYpt#1M=K@oR%x& zlZ%j<0DEW2V^F8V8wGcaqaonoa;E%$RaKpES^D(pgfy!@^VxxgU8bwtPb~I4&F@pj z^A_ENU^CS)g+%h!EIuYmet%3>m)ZJrW5L}4jY_S-Vz5_&0y8%ZFC)C}*7$PEf@Gwr zM!mXP!{tVo<~QmscC~q2&1K{C{4af?LjSN-Z3y|AU*(!yiYgJ3pe4h(!RlR;FgDBd z7NT)!C4@GNzweeZBCUjAGRwPmHk5%Y>uldst3u00mxV%EiaLGv8~kv>?5xY^6JK+k z$K`Fu|2-0>i2r3?rz#s&jaZq zmX=Lih}?3%^wfvYg&2+(PB~r-H9l6`>Z3>vVnDzzdbNK_5PEOBnTD|%rfO2Wo#ySe8hZCqkk|?h|^YTw^?-0#^Cq| zT_m>`Z94{?n9?gmnADOh7Y~}UTuQZj3nz;LgfsF-DvUG5o(Gv-eHh2(NNVfYs>jD|^}Q7z&yy1>z6&FfWhZS8Ds`R){y0Ih^kQI9W1* zaC@-`&DPay(eH>j!PU!Ve4-1T@obM&0{WK+8J9MDne0SSwe{q1ca@HWP=gAO2NrZg zghr;hpGhDbW{+-CVUTAw5DkRaYW$CWL~(0*Etd%KO{x-9b;GsYXiF(gN{iflmD^iX z7{%MtY1>dhuB;NyqK=A+i6H_g3q`z8ZSDV}-z`6*d`3$Kes^z1wFsD{lAW~rZ zEfCMS9H;u0Z77`Y5@{PLnpR*buikusUTgMHXG0pqlzQqPn^%FIL&2W{d@PJxnI1HXeuHoM{Lz2U|0d-dq zO-N*nTW4JL=*;-(pFgF_5`lJW#;}qoJ@yvO$55*3gQ76HEusVu|20>%&4(yv0iP;9 z3nYshgUKwL)Q=k_Vyc9CuZ8CGV~x2iPATOdVq+%>duz!tK!ZOhUgpg!aB>`>Lj2rI^N?qS+^z8013*--9xU@;HIVVF;YSJZ}xm~ z&*#D$3HRw0_`7xg3c87Y+ccqP5PS}p;xAgd^uM@Dl(_7E)ppc9Jdpv;Y$r6=H7uWL z4;xCJTf6pnzOYbw3NJG@Ag>F?p)nfYOl$z*d77^P#l=46-Ocy0iTr)tXr8F-Q7T^D zNs5RPjV6f-;L$Ftv-tE)H~P)^SEz|^1T4oleKaH5eEnEyUzv)+=!`)s5lH!c>y!** z>Y@XiddS>x0gxJbJ7F%zNdD22^>K}3YFb@6Pu*hum0rP?;yhxHle&0DtK%3mFr}Yh zWgegQJQo|rU-n+g#BakY+wX)en|(6aUKRPb&e_6nmgh>PmY-Im^G@uVlKb;e$l5bM z4cGwod79@oDHLIz!m!>2&M}UJ&9vL<=%ovAjIL?1RILYvp%^ZzC3)3$cL8ojz9(K; z5z#a55#L8979wK)?*iM2lx0mH9?R{c*IjtIRRq!ACARDPa;%6m0!$=M#qw^`s(f4PTS6Rhfnyeaosst!rVQ|3>0Q;x zGo#_{o;(z_FkcS!yLQOSW8-nVXtA8w;mj{?Fe-!u%Q$#Q-Z283G0w$Svz;rZ1!S?B z`aXKkAT}rH?B|**Ez%&`{1Pj)?eR_F5|7%(!zqQZvp5-|HEps*^dMxOUs5DCfQVxZ zW@ka^X*yJQAKc55<_-;7&=4?^6L7JX%O$uLdb~{9mQ3TbP~b(y;39cq^kt|3XqCqU2-ePnr8%Pa58k5{7yHUucaaPSGSbahVq^ z(QlW>1o$Q7hj!7J&<%;|^!`eX9bWqq`@8tY;SWW_&zPg%bgic>Yu#*}_?uKwNruJQ zOf*G+_H?o-3j;UnBUME+e|%@-|Mr~ad z{i)nCC)5t|znYszKNklPUwr>~=DUF{cD^*o?LqCP#~iio3$;JTTCKl+;U~mxaruLm zZNZr?fWV}ivLRFbI`H$+%OGSKRq__={E$8{Ny zEX#2&^$RZL+m%=39xA=)4V(%7w#bZW=ZhJgi1FWbaVye+@{3{tsg&z)`)Wesb4b=< zK*?i?Z0>2+*qU;Ahjh|%g-ffo9sPRpduzu5ab0z*xoZ18mt^Tc4FMO6yJ^}J`P?EM zmF<_$iPxb2%X-MB!Kr*_DY}ssV$qKfk`{mSX6r1LOhV6H!A2^=)m<7#)~8U(A_cBsP8YwN?LA0!H77XFKT+j5YU}!) zuOWq8i<4%S2+r+(f#rSs8sZcCqI}gGDT$=Zx1CISJ@TM!tMB%cQ4?JDD5 zzv=qy9rD$*!TPR{7*M0}tHIbKz4NfYzyVCJW)6F?L&VW;`(R5Ex*zkFwLc^4ThPEk zES8x1A~QJ3Rw~)z^0(ENNVZL*57E4)z4{OKUFwtLe&; zM#^%e>-C3YZfJh2y!^cOW!JOvUQn_PGIr36Iy>l$Fy_ncr6!k|Wl8_zaiWXQ6mj$t zmy!1fE4UG$})*a zZ$&Bn$oqxOfg1n?XZ@1=#&%vTE~}SKJeHZlk7^Ovf0kyo7Wm-}F%3I2_?+%bx`&&!E&oyo?^ zO|pbxx&elyJH63A1qc!NY&|{~8aryIHtc-e!tqB<0geab-%OYG;QM9M#~N)T7b}w6 zrp;1oasmTZ_a1pZVd0z0jeZ;)Ujql6F=T;=MVfh}MNG|nngUpXojdIRJ=s1`zcCr3 z&Z>y8_DlcvJ#kzgeJvRx%`+q(%3}w#q`C#U^%`d@J(Yb@>Sa7E=ET*tIH2~gI;bcF zQySpx?0#PFPG^L(AcDj#i-r2R!9Dk7ed3;eiokGH&y{rjl8Q!qrTkYqLN*lT?g27a z&2AHXZSPOb{AS9|@-PC}rQsu54peC$xo(CdrhIcFa*5ykVu5;$^J{~ZQ+k_mF!!s* zm9cg4xmbhWksS7m!K%HDOnQIrEyflamY$_VOz8${=lNVq0}$3MmTzpP$%O-j{3Bs; z$)D>pzj^~kIe+%;$?vqUle5(374rA*a`q*7CTkDcFAds8p8<$ z`xOBh)ENo=0$*Az7@fEe^?mv{>lQEhbfM(bP8O~1(RO8S#UY&DK7Y_S%#ZQ?WXJo) zep}0UOazm4b}rIDYuE(R*BQp`Br(@a|9{UnDE_-!Atn~|@;^^Q@0J@?P&G?(DVR}t zRG%`~o^`qruke~`7Z3M2>!J&hpBCe?zKgCPCuo+IQnLghvWdvu*o@ zreQmZG--f@t_>2e?fL3Af-Okv6(MPvgy>YK-2emzLd0Q`(>z|$;Hyy!KxB~LEydLp zOQp*<=ZUJWp8*;}1xA)r-Ryl7F6c<7O6Btj41sK#ay zB$tghX&Nyv6OTD+H{0(dPzQNRNka=`<_d6``z)#Q* zfo#3jShYc#uNI`Qk}#MGUd$Z+-x!!ktNrU3+`jE9$rq_g+Yg^wGZqI95(yewz2>bP zI}SANRw>D)c0+Gv?%%)rpQR~FIxI|1pvPmAG2Q&6?yHz_n;)Ahv3c>3R}+sf%okd zCOF|?SWh)1&H);dA5$tFcwCXpd598BN-D~&5sgggoQ(a_QGT%g9!l%Wdsy@|QK^GJ zad&JV6FaHs{}*48`LoJLs>pSx{B|fC$t|$_o-)=U&xasUWf}&(<(!hYu?rl=xS#yM zxvIyNBRF*lNj_ie(eq>VjxMB1qN^jM`war9iub))6sq4KCTlSRCuZL3TuayGf*79( zPNOB<@-MTnIs!J3@sXnAMuKGmMWTnxye6bTTq2*d#4!Va#vsh;x%OC9jatUfw*onF z-RvCFYn#JI+j2c0ei9~X^bw_7t!-Wq;&P?OL9+v}dLU|7$FP3foj>tudYp2iblvk& zIQ6&^k9SezyCW7W*ZI%T*)q_^zGZ9|H|2Ks|HIc?2DP=e;ljJ68+WH@aCZwSP~4$F zi%W5L2o4q8U4jR9cXudO+@ZL;20iJ1&&-+meth}0k~NuG>zP}xTdr}6C*4-jR|N3g za#v< z4!$UnL`hK`9s%(HE#%~=0rX)*=Z-xtDB)2I?28fotZIBBKZ-&)d#Fu94EY&8AZcF6>g3&$9gbL5 z9{)i|(g(%3s1P?3arA1{Sjj$GYf`6`){7u{n#}tq+K8pSW~+fU1|_q`By$6bi{_nA z>m&8UDIXP0-{C-1sQVnMX@}gM`B89|XA!B?H0;!|Pij}3LtYax-1mxo661rVMkIXK zQy4`wtimcsjVqb7ZKF{qhB=s%_V=~q7zUN=TXVF>8TyK@a029Dc#+aDRuhMJbtP7itOVw7!*A-{lWm+f2 zO;dV#LbfaIJM|KFC+V35C=OCy)@y_lgk@2@@UqlFMfyqUtotZ4rQMMo0~qJap>iHB zSflml3~#+%Ev}>cp54S4jj%xU=X7h9(`Ej(LHk;QwC#=0%U(7;O13zUvvV_6)}XWX zkmhu@GIC{LVYypU=UH-rM1HEt-N}cUx%s<1hTGEeJeTJj$Ktb`hQ^Yi@fXP|Ai+1vU2|O|Nrgj z_t)OkOfkeoQ;WSf+6U}a+GMobLE+IYd6oX=9DRe~i=%NfP7ms2^&{A1+w|V_n_og95q0vcga>k@HnGXVn zdu3eY$tQjXFKLW#ObEm(40tS*=w>|vLnMB}V8zCD#0`tUSH_BfV{1Ut5eZ&+vxBtoEyMH zyY2R!OLt0;f&<52xBfZ{FEadPf~$|b#T@X_gtP>vP1z6}9V61ga<_y+2Ef)~x0qy+zpxlSA}Tcsr~* zFIYc8)OoZa3Hh7kyfOo!z@NEg2TNIV4mUlqi^bVLKP#E4c+k>F1F-0N&dc7P zZlFIF3##~i$aM2-qm*W};9eaXcO?=6mm_^=}^9~8SoTW|u?0dWJU22J!ao5G_{j}I8EXO_Ns}_o% zmXG%S{KI>bUCG-W&*nOe5a;E9#VB=SKDORK^|XlHr;}d^NA?0A zhS?>KU5lKHY-R>N9BL!XqFzOj-j|cgU-{&d)aZ6j|JCFx_m6+665S=QQlN=e>Yj{f zG~8UF9(6iqF<=;8l?m@GWo1v5e)5Gvqe)atXy=6XTbg*;I=WbFoPgJjTD?{u+^k-U zb74~Px-n*Ps)%p3gBOeKq-X6&7i;dRq?4h8E(KbjC@Tctgm^wmUPOR86xS)|)DfiC)9klPEaH7DOX0oP z>L9xJV>6V$SpRXRVF%}3dfSkasAz>DXwaZ}VA-2P=J_p3M7^;Bmr;1fKw$X1po?&v zY4y>I-xTc8(SMRGE$QRTtc{+qUuMi71u_wznAO%h$KQ9XejD_P^dN0{-U)IlD2zdx zvTZao9{0=}TzhuTrHsUY<4`vgpoC(}1D79d3SCX2*6FKOfI@C!oO}_C=bUU%Ng5#(@IdUGrBP?xfLh~$I6tJh#`MX-? zW_i9%t(jw$F7~s++v79&e4Pwf#Sx+S6nTnN#F2vN%lMNHFV=6#S`@=MS6h{|G|30V{$LlkTNPzUc}K>N4WdCYIL-Y2|38n+=n9PLsYfDW>DBU+xZ zz%hL3U;R#XFPC-(qmj)%uuD~|6(;cdXMqA5*$929=w$iLNnar877idIf@M05X{U6$ z#*}h5U{TKL#JDHgZC|J9ZRXGS=L;s$)>iH3z6vWE(w3bGMHU#`xY3TrerO%4Fk}Y- ztB+E5YfYl6(uV)j7Xh)q`htZ$mMX2p8_i*rJuGPm9$=jOfGYss{owE!3JeIhX_@+c z{%+k>t7|**B|uV-PSA&krn5+#vhoY-UHJAc9R3}(iGEacFxQvuBWnrXvH!RDxA{8+ zB8tr?E5oSAhfPWfDXj&+hDbY=8=0`*;9rDES&_872Z&BN3g;eB#tbAoi|AEx@gY=c z-wSRx9Yxdq78^am>a_SHp-)@2OT4E|LGAQRS)K^JB0d>E{$*BmT>vY?DEj@CC76BG zqg4(owoR?M57z8p7lj%=#~qp3u7x4y&q@gX4yPQDv22Lce%jRU)VDjeoZFY72o@j>)fn&N(PU9h>udpy3IW=fO;##eTBma(f%kJzjW>8 z;O~5*d#Mb+roB~=limJ{P_7K4;gcNB6s!=5iAs}8tbg|#w#h_xIV;ZID~-tbea(jN zpC|6*%jEUmMtDEg`K#FU3kyIplT1vhmjxeI@V?XaP$3$V?LgzkF0&kznt2qBeZmtf z&EX?G(kuhCoGDS$m4FnKTXl5j>u)*v=dsdY4Pa-NlSWbrnKET$F^SFRv@SZJGHfn5 zmJoOJnJnQ%*^CHJQ}stL@`>huVNs#iBbYQ=8>)&H$^Wda(n2X0Ys1~$1~DQy`t&fe z#u{30gnn)Q{IJTp@`lZ#o5FSPFbh;P9Xh}hH(4~?5;+hX3vaJCMw@sc;|c{ir+UPSO_BP`oHTxH-gfJ*@tr)F^dj0H5=S*ATrntAG!+wgg*=66UWY zvsreqeCJI}asgfG3gj=?*u6xz*M5sW+Mikx?Q-Co3{|x1$;krfm_m@1c!>&@i=N3so0NW6 zbmNcDe6QB!aM49JFC7k=L|ohI{Mr}Oa4l*zEqN8QVz$2o##s)?79hESXz8pK0qi>L z`gwDPdh-S2qHXdQcs}G6-LLOpt?(>01GBQsrl{<2sY)c*vESc)Kw49R+EjHtf9W?`^ z?|(dUKjJ*Krsld!;;uepEU8}@kZ9DpPA#XN&~Iy0%9AMAMAsAB;Y@QO%NHbuZM@_yL@hM zF4x(A?ZX;ZHid?5%oe;sQ)GUk9veI}8-e%Iu6~H27BX6Y4D_{`?{hAi z556WB`5`x-XKA3ao*o!zY0ysy2(eS+ZN25Hw{?TS_10IB>2v5DK~S}zAn*%smWe_Z z*kh+;LNZIz7(tV({*J0dKr1MESnZVd^OXsyCbIINOPuXB0l{ z(V6#dg2Vhzaw;Rxl7+>Ap|BwTPtBqf`FvBAk)V=mKCv%v97s7erCZqK-T+e@igJ~~ zdf6uXQ_Op@A~g`FCwY3~3c_nspYoFl>MzcV^|B3*6{9m!4zfZn`WTm7iIpQ`kx*RW zJ3L}*yt&qOt7c!)WeLO{$xWGAI^VTA zkF=#rNzg;@eiBz@dweF$b#2z`hp1#jwf_lb=MT7Gl7-9gg50@Jlh2s4AHSWI@MmkB zEX`DCr%6YGxILcUV+y-s+r%8+2qib7cm%^)G4_B`Z?6gP0F+0`jgT5`=m^){)*1;ce}g1OnOmMou8rLjQ2Cey3w)A z0oVcyC?A?bRM$H{W)W%#WdxbP2n;D|&c2 zY14>m5BU!Ef=3w855OA1Ivle^j4P{ROyCu%Kd)^zsv(|}{Zj&EBL?22QXLn}u7 z->WPAV3?vX{yQdmGVvJOlLh3;EPr~Hjy8NIorKd;2S+a4i0?##T;=%n@_QRc^mqrI zM>W{P!Ks?93|AT%yS8mjxAX}6Sk*q2%cyO*&lOm6+y6XpqjBHOI!>F?YTA% zp2Fj8%Lv`Nk#DQMiR~tXT+Lf#4WhhXTX?fJa`&cuUr5AH2;JcOV<@668yH~DKHaG1 zyoLktA&2jzWNBQfa%}X~z%IqS?l2HcL?F8Ca^Wt}@vT1A1*j@0l%SQz+t~YXj%^}( z{Z(@D5Wc9dyQfzWNx7CFJVjlO%R62#ku@`TQz*`9I*SpC$f5$GvyRszO5I66}FDa=c0g_*W*=*GMn{&H+I*I@81Yd9H!J^YAqG7w z7zr~OEtwb%NWq?r&^q=5$flFp_qETm;j7CpxK~(TvMJrGKL`cYNuz0~7N{pN{eD?0 zU-Cpe=@#W7l(Ej>)}JYsLRZAULHTaqFnlKokw|dhw>r}{6Xq5S8-;gXo2H%UtX;dR z2G0VI+RD{S|y9a^w>9YQ%hfC8W@fR#$NQH zeyyVnyP@W3OKtf4YzBq!6_j)Klgbu4APnOihTVYKibNWxA?E-kQ8xqTzX!n)`u89< z!)IyxcH=*ceG%(mn2K0Reo!|kysG2w_dbC6rM+lDE{0t`z#^mT52AnFx4Q)V{=Jm` zkona3@%CoYGprLKda+yGz{c{-tg7^S-rv+6SEa+BIhs*-BzX-nHB&z5%5Pcu;w<7M zcIU&QeV};Gr>A^Xs5abtz#l<8=N>P?QsaM@aDVcS4npwvSNP2^QL#|-|6Rf#RR!*7 zfIVLuwj6C#mDHk5nmH>yfkbL1`FfrF+d|%m!M+o<}J(tS3*v~3pEr!g%fjlaEsgLZZ zq~wrcMc)z!iyr^lOGKesheuBu( z-K=baO+MNHc&yGhq~_pj^{Wvl&ci^DrjdRnkYLje{=6~kQnKHGKI*n% zxNuCG3}%i0q5*plX=to&Y_UG-i_VaZc|3IHP(=Hip3VWwy*CySjLM_wZJW zc^k+xMLAgSp9Y~j|~in#x+QjxR-)nxJ=r^&dO@;Vm7FM7#J)deW_v}DHK zLIa$&NhB;ZzM%G4k;*-HRQwpiMcapS)EZnqV!>@+mi|+n7-UW=V~>c#zI1I_Dx?~X zJ;;?K0POU7Tgwn_wmrl(s?(5Z(yhGN|6|;U2ix-%w=gN%XesZ4+L!lg{$$rxD{ju= z3a`Psh7QN&EWPRxM=_oAJ6EoxCuy|f{dbf!Eqn-@#w43V#fjmsgwU;2PCwRMX;!nv zf$){;Fd#J{xvFNPlj9DubTm1~lIZt;k$jrSm>=i^Tn1YH3gks)j^q`O45}31A9OBa zIO~*0d)8$8gV18F#g>`A)#3GWpK7qeNSc%X;vOX+WK_JUFSxpKQ07Ukf2Sr8b zO5D-KNh^iXfMrjw^oVRx?;{51EQOff%VvoMfkqQezRcZI1Hu-OIlwb~%X5)Rj z4i-D=m5HpPBvHalBoeO3FVm>1hphsWW?mV#4jqF>l?}%C6*f?GhNSBj)0iB_x4s%Y z6_((R(bU9b?t}aDF-k}x_5B5q z>hAmPI!{vd7w*`t^5eFbuqgL1-rS30Qb}6kYC*umZ$|UEiJ;SdThrkOA&vuiwU!OF zs1{pdRxkDm2gzV4$GLS$*Wpv=`$Y5udM>f z%A$4IR=NKk*S-%82^;vsleX#&<~fUz7+wq=~{;-LyB-XR4UUhCut*n2M&N7K}l zjc|h2p;(Z_#+Y1;gNNvVr^zoDV&2{~z@W8O#IcGRVeVqgt2(EzSg93E82C^nIF$d~ z5<~b+64kMGHtXcXKS!}S+B4tF26CuVbv}e)A2z|14EX2g8SneHYXJ7n_mA)1Jh{Vc1Wtzl)wpD4ZF=d zjLGdAa&i-NB&EcrARImU7|&2S8T8DRWg+XdT%C5K)6)I5J2N2w)Sq~Y#_H?OhDl@( zkj%3QQ1w2+uT*!mG0T65Jv8(4L{jpS7ZHj(rUxjZ6X$VO3rd|v1mmTl|Do!LnSP89 zn}kRjhhV*7VOH-r6Y{FJnW%Z;D{7$+@Wu&kVpS9LynHX&nJ#BlFAsN%iX5teNhFfB za?bLv!}!6rsECKyq?5Sw~-+C!JZHbl+tT_cTTQS zdMm*=X-0Vg`Io`jMMGD*(N4ZMawA|6rP}%y`CQT{S6ZF-4H2fx;U+U-d8W9ozQQhL z+c=xk39DH0g`rj`_ZT6!rzR(+lbKxsQu?WO9RG6x_j$m-E{cMWpgpt80tB)uj|w1l zp~TXmNtRPjK?F`8!#h0uO>BO^$ynAAs9;)hJ_Sg0x{-w|W2{HqougdFZ{<5L2(*ci zbr_EO=19>LKyJo3f$x$Q6Z7>nptZgk3qVG?9{;Algl88L`ib<1p^Mn<=VLe5J81^A$HuVgOAEW)!|R*F!Q)3cTE@w;zrixUJg=yYBEKS>xWIQ% zt1FCQGlX|Haxeiw^pBE1!s13{7v<6b29NmIQfE*c^ME; zI|~lJIufXMfxTgu*6t(9m-Bgp{vmk41P`23E7r8!Njs{2s*KWEZH|7RZHS~W)7wv{r(-1E~p zJw%AianKL~P^q7yYD)W~d3AkK#~zbhZ0%Y6tm~u0-%M&{aGN&tNyfqG8Ro~#j3*4x zDfrT1dz#aGdnK++qFN#52bo3$LEtP>84aFX6-q=5vc6+=7LvIlK5`diUq2gX97Em+RfDbSn z6Ms4}mOTZdAJoV4Y`XLpMfWy!phO}@<@7+8dv3>4%9$2aqD^1!=X^xAsk>ECjQ#T1 z8Tk}@Dz*#N7&kPNem?|ii~|3#Y}3%L0ekafJ&QO`kVh(LQD+bOV!l#2yO}LvWXZO& z;iNzvsv5>Ec#Cv@zF!UEHom4MOvj+%9Jto){L0lBVSKu@%0BU96dV?Q6mn|iHE(qDGZkniRa8kA2D_2aM^alEBgw(_cLeV!zW>~MJuwBf_ zXsn4gw?=_Oi7Z6G+Wq_D@lQb~id4+1KB@)B7S^Gty!Qx%{8XgdFPGg`wi~$N%IKfEM<*pQK)9u4ZhCb2<8@@$PMpinS6yuv;1yBlz z(US{!%C((DJOQn9chtT@pNbvXAU=zFA?7sIQ-h18Z)RPyK9w(4w#Ca^0JG_G%5$DPi+Zkma_{1L9{ykM5njWD|N2&K5`07BZ4Sr*xd$n8{jI!UmaNMiGo0EC{D`=GE}VE|qIx-T&Gv zGD%O4m!|k|qBEI|87r@*e@-WS9+>vDU@SMMV4)<;pqICPvyipOo9m8^r*4cJsj>4kM5mxdb~| zeQ^--gVMw+%M_~)E;t#Y*MQU_F8G7|V`Z&ww!5KKCQK_W@VrEd2hwuhzn58c{<0E!;frx@n}`b1h4BZf8UG`Oj+doQH=L^Wq;P&*EfKIlh4p?If#22 zY-D32VgkT%}&4;|#y*Uyj_iM>d25MW~2E^-`e z*})y}iPv)Bwf8K}JGk|PBw2fH1(wlcFf!p08J+qDp}BRD7&13`l1lpG8;=_4HEAYO zH;5s@VJou6D0!(*v8MI0H97pZ_b&iuznpuN%*~L#=(U*0y&`L$0MK<`q*7**DY?%g zZO^`PF;lT8!z7*LmgcO3e#+lkWmT%9X@`9G^Y=%OR$<~X4FJS0o$>;{3!OjvusP7-_aGPlV#{O7Ey#;biSFcq0RR&HE2lUej z7xlk+@+&vo%L=4a361szt`EL02w}2YiS3;EXL}ua+MW{~yi8j?fu(d@wa1JE1dsXE z^iaqsbu+$4%1=KRC29@g5Ng19CVdipC3Geky@3xD(KKBNZyQ+j4ERz|D>ZNpYv!BH zV!RX*VM_u1iNW(NK?Hv7GkmKaWv`GV1siJS{{&PcGUj` z>j_QB(vD0G@9%FHFJwz!EG3pRkD91|H7p*}9yD@SYTGgUALp-HMacnsTaw%?@2!M` z^my^iaNKm1ojnfKmojwgTDuW3PqM}!2KgQ!Z;|&E=#x*<^)wgkLDRlWunQy~ZBJTt z_QD5UhDFB#VXE^64jGPB23FL0A&{t$VFqLU{CO13YUR%r#2x zAj9|SC{1?JeT9>z1K5;O*C#ybg5U%i(n79Qe>6Y#-=V{UeLWNV1Mi8Xo7S14$V5h~ zZ?=f1n@M2u*XAAWv~LiPOsMrly#I8`>kT<+@I8ewmm_hyPMe)dhx?5@(3+zW8a;x! z?&7N){lwWGW>_U>cfP+1_c1odc61iuvG!A1Jmt~$dBOx-KvkljQS<)883^F+5NR91 z?D7rIg_Lb$c;%644h2T?;_pMyuQ^MF`oJ|>0}6?9chGOEA^VCAd_$--tDK|77xLZP zhrpy|Tghciu1+;_ooyn+(eLcW{X|Y-*uzK+Hw8DOiRx0d0^UgOQ0?&+MFL}s{z0^6=OoX3>#5>nM?$1Nlk3!v@m}%!d@x?8g?cZwb0e8bW!L*ErxHt% zG03h#-F*w2%P9z1;FoaAOVKJ(v)e0b<1L4|e6sR2=~UMEsyC+-%uiVae^WLjnQaS+ z2WlbEg0-(O;U}Tx#EkrU|GAf_rk|Zs{E@-V@Pf9J26E#>JSWg?bFNjw+N=<_JDnbJ zHEOvV?I3X~wucgxAnHlG;ksO1fYj{?u_Sb!p(S)9ytvyHno~NH8kzGwm~j)DUh#xHRc=7 zl|tOSvG6#efSJ9b<$|TGfvG z3r1T^u;T=`HoEBhf>x&F{ZbXwj*+xx8$~?b7GV#|9QViJ6ZhBCDzK-KiTlkohoNE? z$#4{Jpa~k??yq;udsc%*{T59ukfQ{52u%_3#Y(a zSJ4#OcS(Dvf^S+ErtcU;MhkM!_pgpGLa9a0=^5G)kfSx-|GF<0Nc}3$wXvJCJ!j++ z2CZSG1aaIBI|Ka_5q!vSuwX`?R9w=B7$72!@4XJ-T%*B^R3R7}pUGfW)C!2qrwnb> zo_gT%QcCZ=)a|JlrPd#1DP8@pi+s_9WTCCMy%u^<4_#74r!ku&(18PVK6m{6aia_Mtr* z6dEnk`ve}_pL2TKs@T)k-ve4?8YjxCC#)yP{fiRI{0~epj==1#@x>iczOTB;SrKP9 z2st<^vwL9TE9J{SD0rkk(~$N}jf8wbG;Xm}$-KZiwDKkZascR+OvH(bL7XFwQXqf5ZgJ5S0N}xgZ*XSEo5sqICp&V}Q z*nx=Q*en9TMkpSJTjixor^Im^4nxPp&P$aSAZZ8eTI?H(C4(Z!lWt(Qd};9fMNc5~ zu8*j5(Gtg4ayznfG_J&9s$}_Hfk9&ocJ&Vthjv*w&19-C9xE4CGiZKm`l%T%@DFCo zBMDDu>a~_Eh#7(Je5r9r(-Z3H31nP3qG-b5TxfE9=WyaU6tsV+nZaU`gC#;b8ujx7P-)nejwt z*zNvUx{@zclSuBrFxuQBb75%x#BE!cnkxEq+Y3ewVNy-k3GW>FDFiSJv3nPULWJ6gjN+Ra-bA^^fYctFgo z{#^~`%`;&b?df2_>`FON$-^Gr%tDCWQ!%|~u~aGjA0pNGSBPl(@`i~c`M?PArODZU zY=A>I-QGU;VwkRh%hP@@asa>lBMHGthC$9Y4SX6CXsFRsUhR3u8C{rVm505$*4^c>P3wEC=Jm=vS}Z`) z4!VK)MsslLqLc%6yF<1;ni#Jl@)$=ra^@()jbd?+!p>$ZpF>7@ZlIz1>J9XK4W}Gl zwBmX6>Fu`aw!Cz78+G^KE0!NVxZ~84f?;|Nj)p1enS}3`z6SUtSgyoU^8}`IiO^a* zA(U)CqOU3dVb@0-i~?<>W;Hv7MxigG81nSpWIvsBRUSUS=xh)7BT@Q%4E3{PN-liM zw_ZL-Y)He!jV=AGGcz_DgVJcL^AAC*en@b(%*lA-+$o3u_6hqku+aqZ2vLLDCd&Q( zd`rbcK{Mg7eZHE78@o3%^GRo4w`RvDSP$5-n|q8w?DGHs%o9}=7}~jtmaOu;@E}jx zqT%@q{HD>xdjRXOROF%CQ&akd15W?g?$)yoj5s%@q^B~?Sbo5BAHZWHOya*|A9&LG z;pN%Fb(O>5oF^4x&d}K8=G>sg%4fQ?W+R?Szf~uVBGwjOoPVXx`D) z?b}34m|T(P2>mh7b6DswoV=y)-1aQg?Bf41&}eVLzxT(_$CXx2DOR#h=+>x9I%Y@r zNqq(r)9%J#^V(iUdgb|-H7IYYbNEQNMjUmNv$F;oYDau{^g5Bt%?S~#!UJPz+&jdu z2}OWtk*9{7&rRGkOQFj`oyhA2f|tP#q73C0eb|>+^9GS-?Xajs!u;O7pK!4><*~LH z9{28facM8!+H2`0sg_}-GU-8q7$)_shfPE%0*9V2f_)f&4JFdB7;4(91S{qA9bqgX zgsF5Q{wKhHtzarmUxi%suv2htcp*=%uDjRGfy8>p^M3OaZ?MB)p@=ENoz?B$RFstB z;iOXDU7<{LahVV}-n+rnwuTiz9GC0U)Z)PP{CEvDgmY8rHKbdG^E+BDc`4_ePWv34 z+czjLb`4V@#3IIH`rt+;U*QZ2 zclN#`qz0cmdR4Tf98TNzSYA8c{f3XptaND@PI63ET+0SY16~5F_z z8SVz^0?DmuyKldhE;rWLjbn}nq=oVkOSSXciaWkGtkUc^?{YU*l5MZ-lDHmCswXT4 zQwS&5-u~97&fuao(4Uy8mXOkMcN%9z#8@BcXB6IDD7`0J9az}0=x-|Wg}d2pzd@(X zGdIk!mEqXujurPj`!jlS_pJ(-$9-|9RqyFiZ;sv5_OQl#WM^&Mst}l?7fc9TCP;hS zS8^g{8^=!E;MhZ{XF8a2lHN%!UZiio%vh1wo%S3*$Z4>keP@tMBItvqxplq2s%)EN zxd|PwHrf6pjpn_-rf^Ck63W)dDoLzI3#17_{xC7lr6A}ChzWl91Rq#3G3fL|KV-8l z^mdn4)*m_zHjcHZi??m*J()gASu7Pm2xz~>zVcf6aYKeKwyZI}gWC5x!5o=#XRJ9=e)z=Gb@n^qyROG#+^67PK7KZVM-P4W;cQQd- zlhC#*$ZV|)_eW4;rG_-+1(3^hKwd*XK3i-Afes=!=eDIEu#bgUTt zjfpEHFk5aRybi-|9z!+LwHsFM>s?W-S`cnyk3Y{ZJY{eQuv=g~5p5sEPw%lGGj_79 z`K3t`ZCc%t*kFPEcI`+1O8`cw=YAbA?=tWHG_{M@ZqDLiAB>bHQ6{V*BUdiLf`Ej3 z`~^Q*zs^t^A+eKNI5WvFFNEX*boJ@Kl%DLrPQw2czy0Ce3V$sDJaI$q&&rmp{of_L zQpxZ?nEk(-PbhE{z=3!NL5{>jC$saN$~8@5;og_06PP+kPRV=8TZK-dBjQXH?Drnp zAv%`(Hx29r!T%#etf*m&DZm70-(_G3?_^I0hu>bmPG5>v4rL&Y@{>>tN*x7D%j4Q7 zliNIu6QTz8Q3aH&$WfEH$JN0YP9zsPR(}27q+(jk39PyuMFQBDE9;%+UBlv}!&bO@ z?0Tsul3RxbchWBxpt_?BB!b(jmR1P#stv1&)}@N=KfrE&q5cDWj3up8Km5JXhKs`a_J8vT47;iNYT7JL~tHi~b&2Rf{=?0mW zy0!x`@l4$h(8V!r{<{)6CVhGlX00IT&M)=j@Jhy*%J*)XYn$c?6s71vmowZi$TZUG zKd?b}O?76Jg;B6SlpF}1MXmGxQW5417h)oMOF}=svt6p^i>sm%l!^6%rx)(K6eEC{ ze^`QnEzXSUL35kr`ff|g!U2uKSFIP@QmDTylrLlmU|!<7?#>RSab@Bg&vcH=(;XZ z;s2BAO_aZhVoF)cwb6n@RPKw#SkbyIxn_S;OS~GDGkKv3h50aGBEww0WFmjqRDMs6 za)zhV6CovHy_$-2posQgvPoQ%~{^MO^SYp6oVu2TEbGRE3}X{AUl1m}<OJ{s|`3FAg1hDyLC|QT&8-Uki+nXuJHWVegJ}7*D|hUuEBR33)7iC1YYV^+c?yY z*5XsPA#@@lnJG;(ZSX132h@=v_hLcYDH$HOCwMQ@rq=>l!*#1E#J_qrNO(+z_qiS~ zjd6r7H_XZp%H1hj3vxmRP>+C{^%mH;$?6%P5LINKR*#AN*^@rH+{REZ3Y5JFXfvC^ z*{sQw8=hFGJwVzAE=un(c#@45F#Xw&GBT09qZ47089E94X#4=EExdh7rY7cds5tG3 z$qbR%!8TvA5(>9<4mOZ5Z9iHG??W`2XaAK9BqQBoB!c9+0vH@_&X9y({YeoQO!s^* zC6Zh9{l3W3*x2`?vo?-hTZh|k004ljX8x=BAU;fOD}-74$fBK4mzdLZu`E5f%r4;RMmLu(|$mI)jjQsD%- zA76gBrqm}R7*Utfy=lEd1qDSKc~u4;qt@eDaBj)p?rjbPDq3;=xbZ`gl=t7NA4$=x z1=SXUvwc!ut}}dp=+c^~g#9`0qj#-Hh|anq$Tm%NzFzjp8iD$d8PSSp_5QIYDEjor z!f$x}TM34S<5D(*2AVM2BfOW^Aqfgh#vbdCrl22c^}uTKbbO!TDmv}Hr8M3b-gq3F zf*`w;pPe}n{TLbU>bSgv`qF-{5O^#squ9ouKTG18rLW*;wn@R_wU#qH*5 zPplb@iwlnb^8wNSHQ%&I(0&E4{#m%kye`woU>FR0z})O-AU=s%rlb+_6_%({uH|8+hDJTsSQ zy1yv+qq!&Zdt`Chh}_~_Ig_p@KHhw0ufSv$OWMO^uKm9y$t*I7%!$Qc3Mq2I!rRh6 zVi!nT7ZwYFktG5J;C5-=lFvkyzx0V69{}?vN`j*l-RblYo)(L~U%}0aGJ-;#Y@W4q z7QbR2R}^Zn-ECM}9}@CyUrG{~_0u4UXsY$s?)VOMKgxj~i17HVctb^H3BbumzuXwb0KHRBf60!Z35Ej1xj!ai3<9 zJnHhj6SF8oRJok_CjOj%W~J?omoBv8GWY?Iep4Z?Z}dOu<2na%ap(AUGvpJ8)vHiX ze$8h)&ssm7D_99lEO%dg3NO-KatQ*%ryT+}9U|e%_3!1#qCB_x>2X?Dm7#0fO-s~U zeT|y?GC1iheozzN^$?7n&pN{VRswiw&v|NYedC<)+#QbMCob3&Rh8|`rh|Xnz4DJ{ z$^W;Og%muS_WvTwi8s+AQ#h(J1KKtLGwMn1sd}E3_KjPUxS2IV2_ra#y zsQE6xLn6NV;@QG$*rnl_De-jH z-m1qWbNi{do7ce-&ZPCXq(8m2PkUC8tR+dK`SB+WM66cCx;3A%na;RG=7X^=7g)sY zL!%zm{{eSw@L}?E$nFo{77__U@|px1M*X7c1P7(x-P#HN^LK+cy{qs#ue6FhKb?d8MCPiPzBd?i?|J$kSjb zA(e*t0^hF~1MOKH*%9ctl+lOySe-k@;+ol(v~#x^ z(!>=FPQ98oSyIJBopu31Ia3>WuEVG596tQy!x6U)b>bo2dezBIF3#Njkn-KG=3ry+ zNAYazF+4Oiw>~^5tVxEKXum!sfUVr4wV!(6v;$$-Sh-*3&&qTr_bUA-vxdf^W$6E+ z@hMd(%=2TIdMS2^IS+q0K`F7ig)tS8baJlrG#EeCBcYGQr1;t1TL@!~&a_h9CzZ4s z+3im!l;6ecMSSFhA8HqzVpxnhc6DbimL0D3GZnwW$2vpI@!}T@>J4cK?U7w~C6Zi@G+W5G1$;x5C{$K;afbaCdk25F8434-UcIy$W}C zg1bxM{FV3nM)&Bx=!?Ftt2$$!b@rNT&S!DORP+X)ckd5VYG70k%cq`M8^8A0?zeF{ z9O&kwRg4K^jY?=C1{0(=Hx(1t?+N`~5u~8C#VuqJHdLM6Y1JLxZ{6}&w+S1^WhFsg z{xa#X{oycbRpH5#xyBhi_rd&k6@i0-H%G>yY*+;*4f~D&?RSnMp>L)CdZeI#-}?I) zJ#Pky^=a+Tky{#rKAjcj3bHq0X zKkDCZJ(q#`nX79=EHslX$F}+P6B}0;9v2oG(LL76`pjXPF~{V}+sZ~O){Q^@@Nl>b zw)QU5QirCaVy!M}JZ3X#zs04TmICAIiOkl)CAE{PNj}7e% zkqzbx%$cOlQu}!bsl}ZF(MHqp@1*gUV0oHS>(X8j|6dw@w_~G?(<5LC=uo6<4_}@m zoz$Ln%hLt$TFKs&62ou|hk=T0WRQI6&3pJ|{&hyMH+0r!=cQw@%vLXMEd-+p=b(#h zJghzBrb+!14v|!P32sbhGiAhm4J-)7=bS#YzvT>kmYl47oJVlbpMRuzgGnr1ATYGKIt#&*< zrMP4fXrmNk{pb~fpBAD3i>2%e;im0qRfAz4^wtOB;CN{dIa6bY6&+R|-{CUpf|;eF z$#~zapS(Y~nAGxS4m=zgHESZ98rN$Z;eGwqV|1NTA5thV@E1VfRaYoIwj_7Xdil++ z+jMBbu2vmGpvw*V?ZG!LAnm2_IXxE5EmVy!3Ixd+6E8pYP$SewMt zPbWZ^fZ6_f2_5IQLNr~*1kYzm+P?>K?{KS3zE-2MCCgLD>F)%(PLzgGm zS6Iy?ToKs~nd^9yu$ByKYt`iXwSd<~bKLkKb2>wq-~U!`CP%UJgfQOs4B;^)wum8f zS7Zkto_lLWSgP{c4*GUB%P*y zne)>_zJk;(5~T~LjE&cx+c4`xu7-YtQADTsLbd;o(bPl+%~Xwn2Ul!3;?Ld8Yx0Ot zgr+1wS~S9B256ejkB!^W^?H2f378QNBUW3sMtTvnPF0&w3t4p#`@yUrUp^7oL$bDp zh8nOY+Pmnd;5y1BW5f39NV&6u7S6&0cQN z@8taVOu@;WlcXQ)c%b9i+cRT2$7`+0?Y~xW&o)R3=T}I!bvV;$L2uTt2-oXn^UsW+ z6`0x`M50Z+oGn>shz(7o@1DnM?Z$0yPZueMn!tlsYb$&QqnT3g5q8Z*pY8rSZPK~r zVTNJe$iAA#^P}*h_wXpy zkB)Cdln~T8vP~7U<&va+Jy&cwO({#ZsY><<$&RE%=8iOZWwE)P8P3~YKnF}t!C%5~ zMb`|YD3~7J&PQu^o%!-?z*Tp}ysR5CL|fl^sD*E zCoPZPwZ`m~>{jLr=>%YtCSvc%#fCPuc<%VGqU274t93=*KDCJW%s$Xa5 z1juRrWF^UF8-g8ywra71SLb6>!0vRo;ToT@-IKc6!xR(>`m%4o8CPi%*j4vXFd$WD zsHosk_Iavux=j27mMG-7>$%v`ArzNMsS}OV!e(ZP6kL8&;vx{nF#Y15N^5H~Zl-K# z3H%!WnOd61+LYn4ea30@mQq_&4Dy_g{KeP|WmmOe z-U9Itu#H~-1!!XaU)tcmr}3X~`2Q&+W9n<2e@&tCGz-&c>6BSSc41a=)$f#*anK91IzLDa!;X5=Tf2 zy5BJyb(v$#LmuF7nWh;VkezyhXDxj>c9&ek@TY?qi_R)8v_Pf~9gK{XMCon5_{VEB z(4esx+s5JBPy7=?Tlt^0ss&?hU)sO&_1wz!+)nM)$tPqQB;zYSZ28nKvR%tBY}ie) z-##N4FEd2n$b(jmjA$R?9Lfrw(;(^vlCM}NkMb?YUcqetwJIRkY544kvAG!<5k>}h zU+r)KKFUsd6%H!q)}0|BQ0#d#>vSo9e)o_CPQ|s${FWh-@G9j+s473KiN)yc%*B85K zzq1y648x%EqMb-8RozZxSGx%$0(oY|7wjw1CI5!VoH_$uwJa&zY`@NO=75ueIb8ZZ zsF4rmL2g@}bGcwOLi9sn=BxX<;TBuIu)npJcV9IK*C^gW!RjD7nfhctror4@^TE%i z0v76mTt&nFBO$wlG9k{RgDOX*T*0wj?A2;U+tnDq@%Sa5-aHYwD-U3!#hJddzKS^f zOK>o9+NA$a*c%FI^z_vA2HHfwgRTrMfas0m*-BC7V|0AOPDaCMCM<}eXKb9h}Ch57zF~bSk4sGP1+oYI3bT|7Dkv7aGp-GW2aG!ZW1!w7BrL zvPLiNW|Z5VzrWvjcqvJ#)u)MG=x78T+T58-tAgk&GiR;gPQSdDJ7zo5W*`02IE1=b zhA!bbX{X!H-|jYr})fcAbMq%*pxgqxXb08ljx&-}A^3w<~E;nrbUP2hep$ zC2_92dR!Lh}v(YDCx_=Vo|Y}dF>Ox6kP;pDmX z1xImxqy&v(67J&T6Eo7+Xtc&=TPKHJ#H8!g@wJdJAmx(%ms8j=QoxDQ9_ctT_;6UR z{vsSyI4Ku*PmJ3bm7~-#e#c=aCSlXjrQ`0%$FpI2!u?^O-)nc5bKxG0LNYet zFRRi1_ytOo73#ahiEg-9hT3ayM?Y)^G6VmO1re@>7>FGyzw9Z1GQ83VR9S!@9c;fb zS019-6h0C_pj7=Xd;N4&_o|^%3Kw#;=Mc`p%JV z!ax0FVv|cET5Pcs!I~u0SaRaZ2jP*));hs`pVyzw?Sef0!1Qq_etyCLGXi;0Z&CHa zt{ikN^fVi@WzlnM&%Vd3W0+iNinG}?-mxaC?W+_&*@4q@VsGS+TkEA_4E{WI@&hlX ziiFjbi`%R}(dcqQRW70N*K`!+veDab+bOA=?^y1b&8{@w`=YbOM^g4HN%-9%WqL6g zwBM=AV&!_+g}A|1p3!R=*2RHiLCb)Oa>lR$uQh9{8^C)m-OVa8&Q!{br5o=yA*+1@ zTfNo(hlow~DaI@Dzpb_$nd<}NUA<&0SUyNg+=)9j!UeAypX8%EH)l@OBWQr?266y z_>HMxf`@=)II@CqLyltTo__QSD1|e6XQL#nXDU9BDE<0%Wv>->d3maYMgQ3MV$F%O zJITxGqx7Yv;&#m}aC(>_?r*bi#AtG?dh(5Y@2GgI5xQwRY4Un{KOudl;^4@rs>0jc zc0ucrd9dk|2n>fBYto=AZPp8AG^Io$Kjt8h(tS2LJpqd5ZHhl5P=di|MCgo{p|^N2 z$U+nuKp?JZ!CXlqMO8u_h^2Hv{3?+*xqop2^86uLEEOF(Yqg_cEvdfR%=>x0e6YCI zKpPeJi~ys~RXjx8^C_Z0{aIev*kc3OPwhEXU_aMyu?L0#F|n}^N@VM3$@{h*AG~@d zjor{&3aFie>+?sDNxV%H3T~=2oYx7%r;}V8bsI#Om$1e1Y1kPk+&k}Y;z!8`G5oo$>u)zwpatXZvg^>%? z`{m@s0;M}u7(unVp!$JqzF^0)yv=LMP}ji=`OaW6vOq}*%y`nFc$>)Z$ssAI_;V>a zi8K3PQ2JiIAaAIckr#WJr*h#cMmGAbvG*R-Om`drY9;K=)HfhVBdO_!8|5M}>#H~2 z{aYc|p7d2e6i@hI`sqjOIfM6z;fnlJW;fuNdYAlaDA{x$tYRI3naj%t`x~+>wv%+K z>vIvj=nDB&7QDCxtxDVNN7gnPF_TBo>J!^{)v=pP5d5rDdgj9zB-wGXNB|)%y7nqt z#H9Ez+o>GQiztWiN+SrnT$cS3{GLe&M9#&hS?lA`F`F59_6LFC^hf68UT-rxo(L!- zx#mo9j!OC@9c(@o@iAHWNNdi_JcNt^MH)SK5nMuclgelMskY)Ms6DJY{APr#Rz2nr zvLZ0?tOgiM8Qj!@BZp*wu($v|xvwn|?68aV-S~e;6BSr{NABE|=V9-QK;i3~sp>RV z#r_q!h4I7H$zt6zD>sShTZY71w>8fIH8zu7$df!R7gPY}iWuj|Q&4ujr|#cG?lqvA z6Ibn6Cg5&Hz|&hj0Kx0*Z#nLB)rXu;)_5E}zX5pW_K^tYPH<~;XI}4^yRC%m5hCgN zuI0mS#pti@O!KuGfmF73skvibS{8G70&fh6y1+pNIi&cl)pxv*kUCT2S`<(_UB^>p zRGxA~Y#pI{%mihrBy5^RnQn*a>`lqJHmZO!xjX)4F6UvQ+Ia%obl{7f0@Z+Put76> zG>Wj_&?C8GMQ%_D4OqN18FA8Y-}N>v@F(I**WXHliAr6Ip~TXj5WPr!BM?IC)`wP! zxvgYewhPlaZg9#>!R%e{N)O|beS~1<<@bwt+{yMk47;5X@qnPl=9s^L%_q^qME67} z_^yNW@ToyYQi5>KNPy?3=4kM=`;dd^D%UvqZuQG+Vhj>RvwiG5L#%N{RZj0$KEKuI zNYQW9Xk&xb_2vn(3ot#yLuFxryWEWJ0CYVq58n0es>p&AKQu`B-G8oWO9~?KsxS&` zRPtu=7<#htxvczHO8>6im-)Gt+jKi+HKSMDdtZ7tdA!HXF8q?MT{J4Xqwrczj|na< z2t8DMx130hws>o+EEVkH9qZP?B)3BaZ6;z`vh}JFqMe#PWRK`r-5iOtsPilMD0>zG z$)-8m?Gw4a`_VtFu|^tS6|G3;Qh1f+K59doN;5WMA%BGG+;*<1symdC%KRnDa6sw3 zZ3J3>rv{71AseExZHtw&A46hWgewM7bs zgL6cLExxG%wfxh6+be0VeN58ibRh}tzQD!knrboSFWbe#O-BI3?_*UR9vU+HLc2#% z@p!BzT(S?U1rCc-#*7U=eR3u#DO0ly zeVOBzZu86MVSDpJprE3Z**3=ZB{}0xp`Z_BOc@^>e6IBS5+9=2s zsqXKBdYm=3A{yCaKb=vHl%9V~Jp7!qg*F+CAArAHM4sJwj(HPuvKva3wf}f!{wk`9 zh-=5NrZpV5BiUrp(R2H;BWVChblW34Zj8vd%=C(ZF)#{GKQ97utg z>19lWgJ^B-TufvX;vG<~cWF+u z7yHH_)2Tu>gwtjmc@i(G&S$lmNO09O=sUu^TvI#!OhS!v8@SCZ&(tz%S%V`d(7>;a zzoU`5%;vwVj%Rj*QUmbVYY=ui4u|SK&o>*n8HQq9SslGg8b#k5IUJ7hC4W9zW8m}7 zel*=v_PLHU+&IFz5zjvCFRQ?&S+s9dFYYsvVM9ChOTsKQV>9b>HXS|q+WH`0qT-3+ zMf@eK`T*fduxA6CJ%!3zKM8F@H!*E8e@*~Jaw#;?R#k(&?x* zZU^S7*R&F2V_u6bmhX=GJTAUBvs!mr0BCRc$cFs4ojtN6)(Pu@v)Zgil`webUthz&59^@`QZ&ZjSSVloGToW_38f$#U zDdA=-M4K5B@m;%tgpE7`W%M@dc0Gg#iY52XYnww+)pZlt2Imc4cZ-!ywg&t|M?yLM zYv#5V9@ltwW%;Y{&F5e0Gl?!PfGa7|{mE_j1o!H``FUstnCzkr0Q2;a{#GK?JQhR(tj#wEk1yAOPbwYPQLo)bj}o&f*I;t z6;n}ZmS;U&Fmjdr5#Iq)SvZdCLG$dQ!&kmA+$W#D$ldaelOMHkJ5&(QwSnC2K8hpF zH4QC9K$6(d+HTbBAXLJbi9JqUNTMz$HUv$mA>wME-w}agP8Tq>v52tEOrHib;^d;j zk*QYNXmx>aAqOn3h_%cF4xeI8WjMl}p?NP6R8wPfDi&HzT!IStp&;%J85!w%2M+_= z+7?H2O_hUzzY(T3D1sgR%}OKGnCQM{3*5Eb&zd-SR}b_VzBCMA@-yV&RpmNZ=h%;?5{DBUws5Q1hC3b9^>qzGV}EBi1Eiz?T_U&O(9ck|6Ef6TcMC%w}+N7JS@j~ZZ!O3D?| zpg(uyxy6y5H~807q(wp;N;$G zE?A6J5-Ip^*77=2Cwyo`3ZYL}D2}}LsQt7GZ*7##8@2y9y#Hj0?isz_|8{WP`j(jX9k@!1rfsfegZ{xt18pYge#B`u#`gyyAxkF90FD&b32Cbrs+ zp@h)42cRz*8>69tgO9HXT;rf@DlaNR1gpLx_Mgjc>3GQK4$Lk))q%*F6l~!nh2)&u zEIr_jU?{TFzqX-buFOQz$%IG+3>`Oa#ha%-WJl5heQq8WF^EX?k~iFcagPIb)HyFE zNxdo`TUTP9=nft$BjodJ-^LO2*<$Y>xPu57RQLaAW2_}x!k_^9pNoZ}jM7elg z6-!;FBlrjrJ$v$b-nt2+b+&SG>T7%e`K+u0`^%u&r&JUw0!jDMwz2a)cB4e;7(sncAJ*l>dH@8w`5)JIfFpq_mK<4ZQzId&8DAN7JUz|SQ8?NR8J(t2{ zkDFOFPTfID-6L2Sb|r5CEB+_1E5$I3s&i(P>!Aua>Aed}Tt7?ZdX&JN1N*G5sEciiH)qmNocX^qb$oO8cktA3`_Sw;loMSd$*3m{?bDOHnIpVG6Oh-!Iu+DjoLjGFh zeh)Y0CGy@?G5#JMSGT-FNj?_J=t7Mp&!H9H#PLEM47HPs4xlweNp)x;TBwuqVhar+ zA^4(Zv^`P6a4SnnK6ll8!@+9aP=rR{86BX*HfeB4x2uajKl4DN6TTqzI(>|j+q{#} zTh_|tmR1!mUh%$k5kx^1wcM}DUYe1@&d=n;Fz{3NmEQ+bebwG>9xbWCFQo9u=mMc$ zNH<#ws&xQ49$TL_EDiceLoeNfa%}k4gj1U2h4dC`H@q;XlX6G|36Q$~cA5t#Gq3n0Q*M9T}ET*RTj-Z58aC`%=) zx}(iApHx>g9xZ%n1$83y(+5L1nJNxMK9ap0GPR6Rl~_!pHjAffT`kT;ncJa6G6bv1 zGXG)nlKSOAZ`ARc*idg;vq(ARx0Mx3mzK_*v#7?HO`bN)vguCQJ-^FdspV9&tuvsa zfy&J*)Ih;0R5Hc`Gf43EHxQRwWK18y*s-?uz6Si0(Te*W)T4qFC|i-(b>59=f_sFU zKOC`gIxKSU@j|wyfLC0>LNK=i5zm$_hMys+u(wXMrcE%r-7_K%vnDuKJVK+|mzZLC zwxD}nnC0C49qQ=bf>0Y-=Ptu2Sa#4niKseVtatcaR{{zuH}pTBYD8Ya7&+m9f(khA zBwEanV^8s;BX-+!GZkd9=I&;%U#_)ea1TaPKw7zj6pJE;OF=RUq}LNb0QddRcVf{s z50)*JaNq}fXE|EUI?JyRUTCPWV2FrO5{vh!2|3%T_>-FGLncyF?XR%BkZ-w1p1-D7 ziML~OSD!g8QIDyLTCnm%QPZ79O4WWXQGH=sqE0RTKt`y%jq~#ojc(39u$sy*SNCL1 zu9IF!5oD&ZZoyJpbh`6Hil&c!i)PgrE3aW?=r0ag6r}+-<i77`nxJ$B=j9)od>0 z%fC4l5fm;M&17^0N=4E&o%hVAbCgz3f+4jxy^8_#hw_?+p|@kQpS6gReW zF({usYqty22R^_L(r$dv)fj3U(u*&0*Gh9G8a_UVPZ4l|+iKA19p58tjH)nQ0T0S$ z)}}}^9!}Nwqj_e160y5ARVmNq7}5i!ZK<+ZK;;G%lTpGGp-}&Q@oiAB9B;h0nlxJh7LJn0w8~)9+&fT7=*o~%(gse) z^G%Vt+0sF?MPFUi&OHtTembS-91zgWk%%;s)usyO2phF{Dpeo9OUnL)fx#F0^-P0f z{#k0CR+1-%DUEyj^|`06STJm7gBE7rp#0&#F(<(L;Y2jdHHBFPst27SBEne|nX^%SYltw3!$cYA6lXBClziB}$|quKS;V;A43>emK0 zYP5Fk4?57vigwXca_T}s`7}xBVn+tc-c35(DY%BwZdL*G8y@Z5zp12Q(Mo3>ia|It zN9v@v@LH{LtrS)$FLrH{Mzg!`4z5!84Ds@g)N(JvBM4h}N1rjR@R%z%Rv>b=D%q!k zA)ye+XSwvlE0b>3r%N?ov~Q=3)@(-Wv;K4P^uOt6BNnFt>_&%JfGCpTx{vf4UP2(e zt@lqT*2beL2y$s0SqJa^3Oo;RI8JLaF(*xtlUm*FGzP<~<5M^sD3u=*3%n<9>quM^ zWcxlCP{Y`=H}HpQsY7uDZU|Y*;S5x5G;@x4vSx}#HBH3v0Fcq`t}l_BafQJuJ4D^ynEqT%IMVATLBO%V8Kf`yq9_UO`zk?a=O8)P@%=Xj+Rz#-#))Ku;R<`f$(+?N-^2PJ|J)_$|J)_{B>BjBJ_!Yp z!^*ey^B(M8s*E!yvMnUVOJdC^*bw#O8^dcYP?hqR-kii(l-#G z8;D@`>k85HWWDixhbm7SgZ1@qq{{WUPNb6Tm_41)$09}<(7X@;w^H$yDPj>L^?~&F z-S=eS)DX`zW2a?u%kM0j783FH#>!0;PLly^SHtX6A{r~K1&*V z(y~`}-eRBa5cj41b{`?rS`?}xWQI{CHEKHm6$aRr&Z}W=-x=oe-j{4}{sK4-^Umuz z5A%{uZ4>vQw?42pjj82E+gTc26_O4Qr@BK!rhcRyNmdEb+Ad^Fg{)X&C#lc!Q1yCan1y!JlXc0i=$Wt9a6R_hB-d^dvz<{r z_Sut(d7aKnnwV1cJY!cphNqxS>3`ilqHnq8QAg*Fy)JX~$FkLj4#zy)sU=;NlK0a| zkF1#Ex1JSgISv{2@+ur$Oi;hHon!C<`E^G!!rsY;upYr_hCX63Rh#7}qiv+Z+G33v zwLh)ua%krDy};g7i4YME|w?Wk%5dUuZT!ZW{YIxcb}Hc);SVU*)B7NDwH=`$kLWa z3V9fZ?Usghq_1?a7mIt~H@OlpCL#W& zrJF#2i7v1G3+t5aXE?Gg#%YN#TiO6D1q1P5s|vhMoSVuMJTRDK`x~f>^dnBSFYhnF z0ayeTdrCYgF>(Ku4#p%vFZc-b;6Ophwbjrgya)yvQ5?<=>yx7c`@?*n0Ruq;^i!Cd zxzho8DaQ7gtN?WMtc&oNw*W&Eee}sFkchhRH}uJ|bCy_Y8SNsTMchdyjcA7Dm?edi zn>;RjaV<)N|cP+)uzn@cBzP2RR}_cQ`lCM|H$A+^%;yCe1y>ced3$y@fos~$ zL$k`#AX6|Wss4$)a*)9dy(-LUdZ^06B;`BFmw42-8Yc=FD6KdWT1dhA)#1>xlE;y7 z*8!HLO_wFbnx$TiTy4fW*QL`p2L@TncCK9AJnK#|B=+Z->;!QSM{mMQ z?O0nhlR?%CP$DufQ?GVWgEEpu=8{6K%JpP?Kbf_VV05wM@+nh&rekC9^~o6rkRRxC zFt2i}3@W$I_Qs=c9|7e|C@bc`>A3zX7g~Mcrb&XjE|u}f&7r355s1AT@1{XCt0Rx zeh+G(8TT-Tp93|db$7@El!|7vmMS;|o~x|5$S;x7WscJOZ;gwuXBviisdsmb4pfKp zI`ECxcLWm8!ni&WBpIyv@h6c-H*l`T8||c00F<)K+&)jbO_C_K6e%#~KThw){2K$y z|Np~BH+TOUP25IsC4JBJX*>4VbyMy$_S36>Hw_7welzi!Xth*|4I}`VRU)Jas(@}axux?*uw@co^)9XlI6<3 zH|1jeKhqFe(yn@0l+OsmE2i*)^FCWlxjTVo1?n{Lmzh>sQQ`$NsTe-e+Z4i%V2jVC z%G>dUa?J(+b-TG!9^sn|KkWF-{HCppv}ONy%vc5ETz*W{P4+3-anSW1x;|FW!T=}o z6AyKEezcKkx7$o+Q?yw1;OqSh?F&^IQ&XeYhpl1Z8tAb}%ans`py`pR#Tj`#`}MmV z`n0&`0tt?6A7s51#l>Kye=*|lS3Ow5bXRJUq1XJ()Vm{Y=CR=8dsm&!{c23@>#T8b z(hhA#9;q-$(BDp7`8d*$>7X#JZ6nq*dc( z@%RuhbZc7TM@|MukFw>r1^Z=`3@lMrDA|y0u5QP(6@6!a`PY`q?IlR>k89CwSp=|| zQByz0uOr)ZvT<2^SunY~v(9*|ME~j9m8$2}A}}*lJe|V+y`*cU>1FOT3^;a`Y{p&_ ziz|NCqk*AH5yLdU{_+J6Ld;K>qP)IXh>uvH* zv{18ocXS<--|T*fz{`?U-HEeNKTch|>|d)*%n|5>=$zgXnc+g&?@5;ZW8Y5;y|6V6xyrGt%5z8V># z!!qz*)OzTs{G)QrWWY2^Y?gIn_{#zq$*uuvD;Cdf$+{y1=GURrve8VjI!kTnV*LaXIBOHeHh*4Q~*hT%n zPY9huM+R{S8zm-N+!^U+)5iSWi*O+0l<&bjz*a$V%aH4m`gFltYbhe6Nl$}p3m4%o zv*}N1hlp%X?#ON?+1je3dr6e7I8EfNoH3wH=s80LgF(^xRp;nEJPg$&LilCHpV-5S zwQpWDMSXu&xGEvh$!pT)-hHWUCc~mO+Fp9q;vbkE!v6K&ScYO!K*&#AQ;o1YE{5`2 z)IC*Bbd2w*sn$(^Q@5h)Tu?~60r9PwOc$XaEI^1-<=5}(dMp6$2;lZeAq^}>%fHBR zYw~f#eY`z3?Y|`=6!b&L4tcpFB$NzMy!u{ZkMv;8+gm~J52OmjINTeq$DD5>h!0&O z>=s);TH$eseRON*wbv(E7RQHI(A}1a(X~p37*a7E6T6MunN=1W?L}oC3;2e`LvsVs zJ_GibFaUFZq?#LLCTuT=RkNChpF>$Tdrvo=_5~V$8HI94b!Yu#y=6*9Ju`b9%giO= z7Z;AQ=LAcYNi}L1hDG@PJTsU~B2a^EF2mvn>a;>n_qHST-{nQBleB7ODskWzIGxp7 zM@l4MG6$aF<0Oq zeXbzljX0}UK3@0x8PJcz>h+DC&iDbn(xEiPsfT2pA9Vu$!G8P6#x?}3&mudY3_AHP z@Hs#oZE*Zut9sesyuv$PmRx2rx;p(iA0#r*h&%0=Y&K6qhxGjySmZ=OIRAeVSy}&Z z2u?8mV|paOS{mVlwr+QR4_}%B|6r1r;Y6fc7$18^3&{>?=`K=Q1cRNc!Rd)TxpbG` zyt$`O!B#!4pl|N_Oqq01BE7}q5Pe(rA^)G@Bm$jbM(rqpfvl`@i%VTGz#0pBykpud zqt?{J2{{OFIiqoH?9YzhN$K~5beE9d=Isr=k`seLBc&xtg5>snGy7(0`#44 zpvFP{&M^P7XLB)Q>ANon|0vf2D;NF^NTN@110+#OO1LGihws96`=oDG@k3$jeLibq zo%R3v%I#pdg0S9mxQ2cABO&?VqoQy}*<3_yQJ@^=R`!VWoU^530IuI}i-=!ssn7K@ zLLQexuKVG)d62+@z)IUb+4~T7OQ?%sJkjfJZ?GS?Km@Ycr9o2Tsp2DvMD?;MV9BtD zyt0Hnv^d7ad2}h<;eT`f`2PvrBCKcS;H|5|7I&O0?9V`QZw0PbC>Hq?jucyFqQ8qDDdnF4Z22H5tqQd@Yl<9m;8#!~G|Si{rNRE?Nnd+)UP5_jg+9F>i?-`-|4^{jgFtMgZ5a>ITr`|BBvL* zS^$-Px*=p5ZrDJyyWGivD!+oR}mF4+rdkS?&>Y118&m)S9RxD4svFf(= z_EKh=o$D#7Q036tVYrq5Ys7r}c$ZpX@98QjbBM^k`2!2e(Qk+p<_2Z`^VL-|a&e?D z)ScXRq_8)FM5(P;2IoQcV_8TSFUOEdR?8@ERc}f@f@!o=B8(uoESR_cn5}eO`wPoz z0wm#bqqXYK%=7 zCtiWGnBwrze&A~YA=10^RlcaX)M1ue>F7z{)$ii};kvjB{UbbGN#-sFFBA1VPt)(;YiRTx zL;IO;$&+#FcBxmrysxGepMKDgc=)}fwn6B>>BA=4o+Mj+!DMxenjp>RJvNU)Pn67- zaJ>ZLcpGk`s~^ARZ>kxPc*I*Zk2C zA(#kxBe-b|!ECO&Sq!^_Atu`Ha%bZRwS#IL^#+La!zWxc`DMBWrRH z0v&T8o^0EC+Xy3NIg2V@cC4h&qKf@La-$}fbU14mx%a#O=AT13`?pM^L0Gm;UuuEVGn zvr&DzrM%H%UcV;*fsX-1?HZFef^A%s82Y^9yHSi5FB(Xu>$RAcF^B8PPFBIw47GR> z&u_KmtBe|#Sgbl4r70JK^k1m=de^bz|tvLU(s^LR+$#(&jnrL~AQG*`6CB z?c3YRk9$iB0xWL7<4X`m{x!H`;({JXt#LnA@va4ieW+k0>K&L;!D9wGnTMl|`mlwX z_QJO1J^I*+XK#WN{_o6m*zNLvnd$Z$E9cajC~Q<%W|~agNyKwppl^f6e(_&km-Sy_ z`oC%3AZ(d2NA|9v^HFEms;D{ja80Hv!zHy}o(fW(VJm-p!#YQfL2nSDw5tKj7l)>} z=IRFcT1{V(*37UEOZn!u616MxsfW}ga>Jx)>>j`?&T3Nop`UaYtUw?HJ(+a(*BlPy zEWU*^hyQ1<@&o&CQ9;;BI0W`ZhXRTB-p)n3|67Yl{&!9#2-6nL%AGSORF zY#P2)xbkR#T8qWIrLkOzAUZfMH-b*_mroto515kG>WT_aKWmnMhAdNFeZX+@MNHHy zlj#&MYLcKN6MFq)&Lop8bhJn|R;>jV6_tpczEo#P1-olCvOa~NmS|Qn8rg+8?!+uY zYs+l3hWu7i6DPwAY3-9f+rY4s|FcQY*#ystE!gX_WT5y;Kz%)v`H!O6u7TfX-0@J+ zeRPb!%LnbOk>9am_XdBJKnKgXg)tf1eI{4h%mM#fI~4w-!vQm}M#nNik30OAM{7H! zi1o$a>*-YJREm7J#*i~xVvYP=H;rS^)C82=pf!H_9}#_ZK;HMm%6Xbpe`dj`g@Gox{jj1gT=+qOb6lQI9Y>=iea~F;g zaN=)Sk*8rYlxoGdoN?(tF%lT0eY@Vhd(xem+%fCw{&p&^1LHC;u`U?r*+Q~kzk!2m!*%_lwYXYI zXaX_J2^>&6nRom_uN(j;2(8}pBs6{Z={!qBd9~3w%{k>+^iAstx+sTTuHD!ZM>(s% ziGgC18Bai1n7T*^uJ3P^{vB%&Tq*5VrmRQf;?F^xfpQl?e5E3e&L^5a%_z5vO~aAk z3A-2hQ>|?rbJ$LoCMK7fdDG+1NZp?FgLq9o=EQj&^A|ojhEEetoKC9c-Y;4&js z>ZUi(v+Alscm&7EedPXcr;Q)UKOYQ$?A;ct7IU?eIxb%#jYvrxgjOk+=c8|lVst7z zFST>&GF_iM+>=zD5ia>MaYMl1sO9%^dxLN+M!7IH>;Yk8=6-194!A99oB2oJCM4q9 z@2_?bio)GGWE>cyOz&<{^c`EaBI9xrtD(6kK+QLqS7JzIiHdZ?_*DB9 z1m$Z$W)=;aqPlPH=bO`QmARWOm#bWiRxu;qEK(#}#0lcHN6I@?DRj(v+GeKt;9kB_ z=4Vdc69=qe51jDwO3`UWm37tbzCRzimGn1 z5Z-0x?Ms~zOeP_5I(SD4H+wp~2wN1dQT&Dq;=VULADUGgNK=cD!+6QN+Ci8q7-?Zs zRCAJ(DiwgxDt3Lc#;YL5ESY)v@xJ=RTB34Maiki5=Bzd9GcGaOS)D1`LHK%%XA$q^ zw)HL)H=_MJRZx5K1dS>U$C2e@)-C;ADgXUHna3Rt zR?JrP`!?-23~E13LbvY_C(UXM-J0zSc3fJeY9iW1jZ$8onz2cqxqgRo7ZH5>fLd>s*Fb>TjWF!8i``Cko?Mv@ghP+x0Z_r>^>m%RlkK zkEZloN>QrO$`8o=Rbf{GZZ0O^uLpD+(u$6ue(Bqrr1i+PN;CAhZxnCEo?Hs%$foN< zf8to%QgcNh)Vedb&{5TNYD9nwU6MH24GzNrgG_Zf0dGQnx)ssNxR|Wf_j}C z`b&oeqQGby#CU~2`Fy%0BT^Ib=3iil`2S5-kBgLjHc2!7n=~(VzoS_FGU6p_rt{Tr z>m)Jy@OwnuK}Oj-%mqQPLhZl~lOlsidHNZ(uh2YnpP5Q5u>5(vH4%#&3nb2;B}&%<{&{s|tY>YY{s@qRX3QCkSpE*_~b*&Yc+ z%v;A#1=&e^f6;c;UcDj{v5vkR1rH99VKh<_s7K2=W?m*&|9e%qf3Av|gKmYBiTEbb z$z7DU?UqwyxxatE*>J;&JG4X+fFIm$2{~Sw=b#P+5IAt(rX8MxYayJm zHMNQodu>K(AR#N^k9>j?6US_KYNV>tr1HTpy?`WXBtjdHjI>^#%|g9VP3Dumc+KBl zln(|Du<0$WWqU5+ZP0B~h`Kdc z(sX|L2V)F`dR$>In?yc!h30xXVs?}@q~C?KeAGrL;(G1W#H&>hg($kXkDxSkAL-0EfW6^H{%JN>vtCP0If7eg_PsYd`WIJpUQJ>OV z$xB}5!A#mv^);U)Mbc?7PYfV^>cR0bCzB8*q!%54@5nKqiz($glgy{Q49K@FV%%rIT)Us-QXvYMM=mDZOcreX4 z^B+liFo=NCCAOuQz)pIYJQ1z^obL^_iQorL(fx^UpxJhY5^WLLOHsS2rTL)^f2{)EJJOh6ry32xSCxb37=o`Ms}<#!gLGX5 znGUSd*qI$oQM649JOwj7Zev-F1OP06jCk;{^}E5U+Wpqtu<#KoqR)SU<$q-x#RH0) zR5vx)Nz5ng>ypgj-HB?j@2M>UCpTyz1{ZUq{m>6n{<3w}DVHlj9;e10&zGTth6V_^ zxw!U~{07O5ThHZ{iAAJlz!6#O(<>JrcN#DRMLy@omBgq_Y|OP3dCbRUrhv_SH{=DF zVUs@8Sz6DJlUln)hz9%^i+hks_iTznk+4&b#y!Jg&}Zzt7~zNN4{ObqU<=vvu()Yr zSc~S_;Zn5$L?!xh4qRU5$9YR-#v<8j3m1MkKU~KLxkOIA=MP+pED<8$q1sV7`vLQ+ z7$bKSW8YCdj=h}d0iYmpa zYJ0|`n{A?$AMBZFLA%D0kBf_ooj0lc#8%*ro7r9?`1er0(bkt!uy=IV8oua(2C3=- z8S2bnvTQUdfutK4@vI=2-NtQ7iSWLjiqFX)!ada4O#!H%JRqMTa)B8+Zb2eFZ^|8Y zVj`GjegU=yGcW9TIkJ96uV&F7$wS+UT7-ARD7itZru=1U^g%LbxgjF%wSg!FCwqw{ER zg)Ex}Jw*_si;s&$s35xZctmXeP>8q6<M&9AJ5e0xqAkZk^X1cU&ENG(J3Q04P=HxsIC z=5ou=CgONP+jgE{-x1N_)yLmT324kuspZQJ4}dc^7)!zewB|&jH;2tk>^o-?Frkcy zc9Ez%xdn~FN$KHdJOoaHKGaKmdOW*bRoALTS2_p4aX$_cXVaHfvx&5(I!@XigK|k{ zfQRhcbBnYGZ{M(WOn+F%a|homE@<3TpnCJ>Sg^+ly+VB{GT%GgczYPfl31_LrO5r8 zE-?K$+0;!o(Ste}=TpqpZ{~GM=9`mik*tj&_mFLw$oUj2hjASeZUEcN&c$6 z6poY%6XPoH#W~Km4drsu_TRjo5wAApABwhq_>?n&TO;+FEK}<@KhpBlQ{=nWH?gjf zH`0FWKf|!dj7vC(uvDybC!%Q?gY#tu$A738D~%j&ztt^!i9-FEK^XM|<8s$sGEZ_& zCb#z{hDRvBVzqoSk?HpJG>v|a_QGO|eZLmtfu=tg_o5IKgyRRdCh$yFKUvP|l{<;= zm92T^>%t&(&SCD>fgdgT`x6^Tjq+oh)1Mm@fAr@KRv`Cyu_N3ma-#9_pDm!lu!JiA zV4shB$+ZVn&vNa@gfoN(U&J>Xl-^ikH8QZ%*QvD|P0x9C!A!K-;oqJ=@bswv$K;Ny85p7`)9@B_+VA z@(d-}bay&38}{@*iP7mZ$S1HEX244$4MXiwTGw&*+hi=^TeT{m>qr%Q1)+w-3DlFf zqWrV0V&qzufqjkp(%4ix(y)&(ZwN}i&bMco8tocowuXG_V@ZNlp=KvS%MO?i(kN&; zT15;zkndM;*VU_v!2nYUI0Zg-xD!(jI+ozE)5OdC7*m$&ILb^*1%7gUx z`Uu>{dK+f3ZRCbwV}x$d%S-^9peyB8UyXg1cqq@K-(wZ`wg7d*krGS-9%~AZn(W|o z%tNXS=*=_#T?uayJ{+l+GpcA6`MA<+ZQlGqlTd6jX-EK{p6e;og?+!S6$Q36B^1wN zpJgEw+cG${SSX3u!E~9bNxeoZ8Sm3F>THPE9hZtXJ;1-X%6^3Crkqtj+`>S=g#@u> zn7%X8Mvqu*&+Ybg`lHl-9xj)`s&>=XKj!T#9Izw$0LSi!M0(|X5N4xCYBmAx3IU!> zGOUbP_ishUgpO6Mub{>BjAWkGk1|oa>#TA=VVi(E<}Op;;E=bN_O#;c>VU^8oxlW7 zXSwD^NkIO~SG@RNJ;JkMm*X(g5w&Kp(WgNj!E;+atv8e5pQ>Nvgnv>`Uac>_Snu~> zj;tT(3;iDc>G_K$mfAHaqa;QFZXjTR4{M;F6N>#c3f ze2v2b)M@QKPW2ssPU_vg%15}m>NT_Xxkbrkm|{bdytqIv`kbSSte5B_i(*K3le!iM zYs;oe<`dy-Vlhrn{C-DfwahC>^NXx{nXsuyxI^!;lfzr)-)6O@1pbu^P+g`w*ZPu6 zC%T_8{a?Bd>CiIZGSygVi*MIUuKuRBULJo!J_?~}S8r^pnfru2*XNTR=K{eszZ8`N zn^41IA1nmEF?V+Wyt=~<>i;YuiQPMO<>vT4p*6*K6ttyCt*=4{yEJ(@!h}FyalI#2 zO(y%Amn{1#c*S3TNve~*hbQqeoq*jzGCpK5)>UvggH|DW&AZdq-MrB?Iq5{~-N6iR zGN(~==M(+W)_or}tc57PsE|p`Va-2ce`|VwQg3;{~bea z3{bq32}ST5zrM4eFyZQ5;hDT4s9lFzPU?N!%T8zsbB_~q*!=eDLT=QtS;*VdoWS1@ z7BGkOrOC=lEgt`9ow>Iu18#Tc+ow9-K6lGqXr@AXdN`4r*D8j-yWwz;ZDkP>Snicm zDNKtP)g=~yDV@{2eqZ1wGLUMooSBm;T>778B;TK>FkQl|ma2s;se!0JS~u68Db* z`D+sDO&*DjXtlf`+k(O98G9+Ue&sCtv12LYi}lR{RHk_K&8eHZQJ`BpA&isL)$Q=H zzBS(YOG3r3#HNhp+3Kg8LRdkyqKH`|GpPK}{A~ld-9=xHg*?soawnSewD33Y_q{$8 zxgq1vA}-LfY>2uwsgS7`LNgcU0oPo+K98l@j|mtf7#dU~to}w>&p#&w?PHbd2@d(E z9&44QYQ7c)5;YP=XwyEl;+LXl%`(%=@2UO$jo{=l6^fF$ow`d%o6HaS@TyqE|%q;e2ihAVhBl0j)FWfudgL!cx zKqH5xcPoBuQQR9rOkkZK{ULqN1o84Ls(#R;FWiZk^~1zS+Ko296yZTll!ua(QxqbN zrE3@8DjebwMOYoTr(W8%tAuBPuWCNz6kuRbp1z6R%s= z`3@v^&b>O$U^j0)FmJV_ifc>tyqwt6x@qadOc9zqr9qJb}5-h?w8pQ}b(Vu4> zkDzcX#{HH#h7qZn%+WVM;C)4dvy%-3+2nRH>$^3CkhD3@$w-7-^W7#tsF8fOZ1Qoe zYI?@+?CgS&Q!6BoAl7+O3NJXA0%lFy;^VjN`7N-n;<9K3m+&_VLzF|jH-Q^3lp~`y zxLn2deUOq#U`NBUPQF)@9s(zhp0+Dz{d4bip-6)8mm_#%GEnNwY@{fH-|<5b7vvJm z>#jfUEC2W#s-!@VO1d)9xyR8)dVTN1<*Dlcf4Ta#0M^c>ALuEz?w~f_4}^cOSGbjb zrpEdp*Jb-VvggF)yBP5(3{vWrWT^SUb~9{N-Z;Al%o9WND0An|XiLf18#rwv;KZgb2Az}E`x(_E8hQG^6dN7z<%rP zny;Tp%M&eT$_-gtmU#-X+41}*ssWCwNyNsrKc~{`-FA*8;r_nhD zmW&&C$AnF<24Ar)Isv+}}A4$ZPZ75^%MW3-*@gk+gX% zuY72IwhgE5&Kh4dQgFprG~66*6r7xFl@3vB`wnlWQhn{G+KrT=SFcO4Z>MH<E< z`hn?BT5PHtEkMsx^adm~ATqd|mI2v-8(~{E47y-@40fx*6*NLa-Vdfou+`f8wH!K? zpzsTo!hSFjZvA3^qOt=wnT2`JVTQ_3wfbukP)aH5FFKU|wcskj6~fO&Fm6vc-kQYv zWO?=0(@t|E?H_fsu;Bue5Yg7#erLf9d*LH9qZ8uV`+BjcwO@N~5hP2`u(C#4dc3vniq>+K0laqnb6lUs=1q!_5pEqT&$m zZDWLo^w%uRpG6(7{_f83lDMLx3OlfL`VmtgMuECJW*zV_ftK0ry2u}<4IVP^oiNQ@ z#1-XiVTr=Tf5pC}Lg`$9d^L;$NE{mM zGPa6>VRZPv5tm4e5NKZVc+`VZeX1 zJ*ITR$kD=OE%zz*yI5Mdp+@e`sCO~9jRUG4|yuXNsc)KuC&?S`70=h z3fCCF>GO`~AI#aJioU8AcL>bs8}GyR#BqMgtUFiF2$Qmfor*EN=T)oD)1cS)pGwgC zjI*X0a!^ERIdbXa_igMbdFvU!x+LS>)K~92B7W6r5c?W;Z;xAk_h22_b}6$gl28W~ z`*Kmy3mD1c)%9X{f81HOob-jLu-KP+A}Lw=a}<<7Jt`1VaF=Y6rG!c60ui#xbsP?_ z+iqm4odLtyY&}-SjaCNcV+n~CB-rA(*1X=|TyG?)=amR10mEcMj0|c9R^E>L#dHz) zj^A|uh!#)!MU~x3i}~w*(oH`~7^AGQXY(@Z(($-RHvxqX&1&XgtT2hhf*q~XK9elY z+lERZNpNtIOi9MQH|>HRNSt;p{@%#%)qzm(C!VZH4l350yP8(LLJ|vg>#roBjLk>E zPbGYeo-6i?p2nHqAOi6YDYvz#NM~+jl++;I2euMG!K=~zpc$RN8BVV3pQv+D=zU6( zvNP*UZnp-i$Q&k{u60t}$JOUOOO4pTP;_0xsmDHe(_#1mwbYv7j^R<`x*%AO6oDQp zn-vI;RNC2+=(iv9B~=vS{~#&qJfIx+%Xalq5DH21vv?x&ysp3%S)wA}OLOUOmGl=V>pwhw4-Pt#V)lh%@tIx;_~j3~0E2|2QuX@G?pd(O z)DS;~XQWh08x zb9^z9wmU2vs8JzjsGa|yO_-!byf%E)k@(>S$v#?%(E@Liva#yXNwdGg?bI5$H^W(X zQs(pDl0f_&`m|or1Ai)9|JKwcOX7eP>rVY-C$JnA3@_t$Cn~KY`yp;qT#y7iJZ<*axJNYy;q%uw^4LwL}Yz4j|;t$!Wz7s?f zs%ngP3l>y&kkgsVXwL3 zzIjz|ns@G5c!MQ1>ikO($JRozQ9NQEj08%$(8veC==yy!#sJwiCKK9T?muKVw}N(- z@5O03DN1m}fMaPWv8tG=K{Z!;re{HCx!J6!Kr#`mg6>1YnI%o9zHrm~qo-~xnppwG zh~Pq9Xv{!RgVw)i5r966%m!djp5F_xr@&Y8Bk|*{*$KJHg{trfb_g4cS#NhL+8W7k zGr+;uzneBU`4g`k^8GFHKoS8VR*me+-8XnTzJIH8Rekl)+CjKy6RTL*drO@8Hjk%q zxYFVs26(Hq`*QF-SV96ebFTWeu&DB-B`q3%)aVpg?UT5yRk4{@GaTt3^cAkm6S8t4 zDwx_aqU5&DixcVY@j$+7GLvdn5rY<<6pOg;G3W#ZpNd*ww(y7H<+ef_>Uz0t$29Q5 zbOV0#_f~}Akr#KH|E?>Z3&EA&iZ0%)G1BEI5YbRL`38am!7aS`BR0ye|9Gkmo<`H` zHq54-aB?Kr6mcVBY)WPwo+NoJ^<1p*PUF5FU;~eo@S3t+$4Ez7G;o)X?h|q>grsWX zuF|iGbF7JjIMNMh!-OH;EOo{^y;}xhdSZ5TZA*5r#zET4Oxd|b{ekIK_c1@7RCgiz zu@a02_ktS*l00vPntX1OzY7&N*809`vzspT>(?m5;UQoy)R(~g{s(*Qear}p%c7Kk zEqfN3U=e7>o4o0g_X|Nf9<}8Wq2$owNgEtsVy`y%P75m2o}ZC^Wl7Jm@F1d zgHSINZ}L{#I#e?DqEf9n%L*4Cs?vbl8h^zhI7FN3uvpfz1WjWBr>$08_C}d00>9aXwCs04A@h*$!7+aW`{C zf{^c(=E&C)kti}3m1as280XxCxaY(2-2EOfJ5W;m8#B!0d(SN8IJ+-+0ka7SIeo~i z+0BE0qcAu6Wn_6^eJOB>OR5-(cF^%J!t}@ZX;J$9XZ@sX*4q;@LlhS61f-{=WGTD) z>?2Pz!j6#IH^Ehd6Cnwy%rns7?`Ep`4WQdyrI_Pu5Al*p;b_PkEo24WLDs$d_*EBK z4yfnC2Sk4Mr^NtxH|Y*F_$K@QRWZ-{6D#l@n(>?RcfZ_lrMRcSgX%%Idu+dO8m~^D zy`*!?(O^F<2Y0bFTT$$l!;0Y(C@UIS;Fkyzq9U2+S>MU{D*fYw| z=*_JiYL(o85KFSx9ca&9DoPaI!%$wCS-dKF3<}E}^ys;aiW&^`fB06E{A1O-X;){;4!~jLYLF6%iTZX*Rw` z8|^XHLmn8zL;M%c#x69x4U-c4ROntRZSmoVCH9&ZkgQ-ZJN$spXl-_P*PIF~wJhCo zQBX%zL^H(5qsF(%7w{&@2+CFu)87iPg8kkS3B@1_nq!)Vxp@IrN24z0K;RHlt6tza zbhk3{BtEyFwVOk2oKIZ7j}X;_Fwa)0ij`5Q)a`8x%zx1mezGJiOI8?h+X5At??zb; zF=>S2qzOMmRkVV*BVFsn;7E941z_}Y;b?=uIHL4wpA8Nqalfwc&;1j2rBUeW<$q8k zFH9xyUu@=22nhTCU!XyV|Ggwfq>8R!UF(jVoVS4K_8OB6PBEOQhz~W{wL@;>l*H^V zCIB`Z)RI{m@?IZ1@L5pw;AeVR=#_eI>4TvD$nJzgkqB%I4{w}MjPh$QGX(*QdJ)B5 z#sPTvu9RN=U+A2L@cxN7(|BuaEq{wHvFd1dO_qe$r=Ty7Fdko@yG(8i1|&QqT|=(8 zZm_4_(uEUW^VoJZxsQh}JQ$PRN6QW{u?wUHO7FREN^SZJdN3U_W4Ff=JQ_H4&>~0GnU2o zj0SGiYbP^^qVoG$-sUY%6;I>=LT&h$HLvODE*wQl?Yszy)x&hQ3}I zVZaamN1hlia@$a|_CT>ez!CcN2I9sg@KXfyJ6X+!$pHZ>sqs8{@6q0*YS30f?22o(Ee^X;L|dpz)XS)iv1}#{ZS!U8u<%#gY)Sm3cu8Zg zQZu`!ke9U)BPfPQU1pwsQFQ`YVv_enb3b0E-tcH9W3=)y*L$8sli4$vHD8Yv_`)& zy>7?-o1v65xO65z++CJ{aseg}yx#o&o?A>?@xw=0fTQHxrX(5bW$b6A^yH*y@ z<$w@F(9v>#y4-%&?P;z7Pl0eq-)>hU=<=bC8uj{Q$-4al=-E932dnj5iw_zXSm9pt zQ%zVD*$rCWJ-LL7Z!c{Zp~b#@w?t>q<{#J{kF#?61A| z(TWWs4K^5JLQ#!E4(7c%j|?OE6YML^8<>(PX`m@>HjO@aEMd6WmLuOvgNs644`!b@ znlufR|6-$@YYpL8OYf}+As{bi>_@(A@r-m`XpDf%kE{}KPJFP`Lz_o7!wxhlX6xOt zGP{pqVI!{W+|)HZ(JNRdq(*fQH;p-E7OocbTsm`qHQK(X@k%J*H9zrFk_m(~~?P?1`A9wqmwuFI8*!LbNMcNv$rycu_*D-alMBw-ILy$>1?*>+033 z5>L5)BDvoXcMw3#4QH?qGglf11a zN8WSCJCtPZqTW97nQ>Buu)@a>g(pLIU z$|dn7Er+o!$I4tw6c>5UoEzaSb>Y6U#Y`VcG$-4JlfE>}msuyo314iKGL+k?wbKRd z)SfV=fZ6~~HadQ8d7|+d z-%rp@D6PVf(ZydLocd#sqR`qEO0NC^!DM~&AxRWDW3kg=a2foO$L6t%m203+yVj>% zc`A#8{&$@}9k=>A>j?)8Sr3KR5m)nGvQ)CC%iU0%%v9}kA^VvXGxP3S_fl!SYv0M13`yo z&_aY6a9NH2>MPNSV-Fr_T~G)tpy+&GfUNOCwD*u95$y3|8J2JRjdgf5oA%NQu-+gb zc9^dRa%!URL_U!`Y|Q6W2ld|ip_Xcm0&>C!F&cSqnU}oaQ9em(1okL;Z}&$zw?()P z#5wd282@9gdne{KRNzgK-+uFX&t&Rr)dhb~9L>nA#uEE{z-Q%WiUrW}LiM{fxBZ3; z3C}{kEq>&-E%<@a#_MJ&&8*L^BQEnyUtD`EVh!KS#7S)ornMK?uAkT1k9|4cTwZ|< zWV7;|5CYKiyRh6N*P4u>7k$Ah*EAdaT+M8-q`=FBNc21FEFDM3=jp5mZ!wTSseLNp z3QxOgno+RMLA8ZTl!xp2DR0SaKvo-p=sSRBYL%qEG#m&aKJ`53F0wVASDEimy|m2Z z8u@yggdBI?c;L~~ht?^fsOMhGulWA10Hf^!YTBprXq~u6hXdN+G*hqu!V=Bs%??Ox zvk=wTC=o^1W>FA!3=2&C+z_{q>vGB!uakct*|mGuJ;?W0H6NLoooJwUSa#?~yaO?` zU=PGaWdbJlA`-C|s6rvAhrLCX-Tpiw@ypP*E-KHVl#Ij1!SngP$TxG>S<*f`l;mxO z2|d}`l{%%p&URADf@rs^Gt64vimL}_f1B0lM+CIalelF<^B6I2%_FwK_ffAxMMre^ zr$VCn%=mR7hQdi-8)Y>Uo~JKfb`GaBvLsCSdr<8p%g_wd*xuk5zpQ(U=c!z8$MWP@ z^$SQtTA6sAx4qwM3Xb1TRiEy(fvH%fpTtNnA$xwm0uoC*EOa+Im5yC)_m`=6N_;R7 zC7GRUd*QI`I0W5iO5|0mDbnK8_n!|X>ol~8>9kGqsPvcR3h)c~XWwEie7G|5nBXHB z#Xy84xv2U=U-dt3RT4^+m~cjlN0cDqS* zZ`sW(K$ra4Q?`u7m5ol?+CeQGq(#-Dpsk{0d!m3t=?M^J?q|@-ZPIo^6w>ZA5X|-z zpO>pr3kpBZW>RSaGD&m6u9+m!nGSQ-r&$>U&1QtJksGDPMK|1P{;B68kB$Tg*Tf@% zuY~u|3p*7}^@s2q=?`0LQKn}fM?T;8(C68^*KhmNn*NhIe-IBCztIp8<4;P5ftd)0wMVc2$h~s-mn(4*f{dsQynL?Cd3aS6=gub2fvcshWBo?-L zSbyjXsx%U>b)zaAf(r6*cjX!qj$nTEvznJcuTT8U)Z3$%WsQ%_krBR8Vu$59jqqx& zwVZojPzyJZAUsByjz=!+t!jGSeG}EY(DKqXKtp?Rf4%8rG6>_I{9@qbu#w*H?hSZ>18w0-I!`5WSv39lX$3^ZyxFMG z=HETPtXSbmv~G*viaGVYk_XRZK&xj}8n~BJtcz7fbk*cxGqt*DQ}WAJ9!R-WdDz-~jxmLWfhfT}CB*dISM}@1lz~!)nk%^EnCq&$MeD71~Jl zxwVUIoU^RX>@@GsdQ@5+=mAb0yW{wQu2{ZLb&3!TDJ;fi_$f+hMM}G({8WCyGIye7 z(tt-Js)Z$6uFb=u{i}qmxm9`5GZSLV7qzzB*+hEdh_#olr85P0Vz3MZ@|7AFl8_T* z>w~)ojO4x46{n5R5#}%EBa#dV!zX(EuHDLR;9fU0x4m>&!Q_z!5WqQdpm3os&}z{7 zdKq_i`0%Udr32Mle^|rm0{N#3Sm@obKPc@=;4sKj9E6db>mhU~bI}X8r=_^LRn*hK zf)&GocY|bWpx1wA$MsYh<%Cjyz5f^>|Pp z*K90u;*!+807`8JI_Y4ab6%2Q2lMcR?w5kc^UZjk3sJu*wGtW~Skl=RP~)Uf^QHA6 zV$&{=&PXJ*6ZwTFW=nFcS}3X%~~(;|k=tFKt{R$c7Gi(v0wk@m~Ojm@w3oDSJja zqJftLb#j!9N>fE@Ng(@(>UdL70<9xX-XX%wxa)1%EV5T18>>Yi;zO6-v>SED7ZG2P zgygN9chDS|t!o|X$g4|#n>-gHG}+_m|3t)Y*ikufs_5pK`SAdRtgMg#BL-g_(6 zo)@|1R+WSIzzx`4uW z8bG}^y$6tsi}f7O^qK^X9W~fDc%=Zlq)V7(#*AM>*?({oY7=S#pmEeh22*NARa4e1 zl{UNdb0mCN;m6n)BhCgr?!l3bYqu+71@|Ai%Pi2z98M@tkV=&?7{=!vN;`#S%0N>D z_Dz~Eh3Hi=%e00`ZBdjHoYM){joayZm}GUL2XvgE#WD>6dmyjc0$g~L;We=aF;3c} z(yVrac28mFg1M?C`Zek1&FH}6RREcMs9)dMY7Wl`ODr;nXVj8tJ0%qM(Iq#nLt@k2 zBMXum^A_rU&tpkxU8<_kN|33CP=>PEJgzPF9yZGH1dDm7XC0^WQfKnnHNDg;Rb2d) zUha8eHW0abPu##_0`h;);bEwT7nd~)HA?+&Js^cHy~W^z(b8qnhsn_xuJ^~wWypYB z7}7sSZn}E8?E2NA0kba+#E7}q23Nl~X8Xjq(J6cR7I7zBQxDm$LEJ9i-vv-N-n5S# z{&cM-rdNl>)bZd&rUD)0t8;1P3< zDBR_w&~9oUi%h~EABSEqNAn+hTKqEQx2P?&d2+VTHeuFdo|x|;ZYzfSG@lYiZzQ|l zc}VTB-m$+4eKkCix+Q5rx%J^fR>;K`f>B<2=>(WG(r6fpU7qw)Xs~D?y{~kXXzvpQ zcCySngnsYl6nPB`%tK4c*~wnJjHm_P4_ft_U9lYiYF(2qB|+9ESj;%3!eNlh+W@H? zJpYXgou|Vs^!wsoMt@$YS$}$>2~s|yD#U@q6$a2R-(*My-MD2!vCZDyOGfKg#=zPW z3ILQ=2bU(gb-R>0XVMIAGa}-4jMwKTTcOjj{k9#nj~7t#GTXO-=9QQr^_Z@;h7?u{ zd2Z8RZ=Sx`895qDO80#InWa1hyCr;AXu$_?R>^qf>^8-_r9RgeVN0OsGPEZ}UJkYG z{Mpu1m~EFK_E98E#tk~KdUj_^(H%(p6hyz(X|Evd31oF;_L+d(zj}&G-WUI^YZr3P zo7VY4`mQXl%~FwvUk?g1vj+PL%O$nqamyy*d&L(nx#~eKB3rWW%-Ze;F(1@1FZ%u$DrE&;}b%NWI#1O(_;0$!O@*WlbQ>)m|Ykqc3Uu2PpEo`2)pQnesB5xgVOp zUsb<+pTD|0v$Pf?w6rpnX1r3<9JJGNMqDDaJz8R_I)7?BXxv6^H2$%9`!`O7N0eS} zI%mLF3rtj-qO&bKXbt1WiDDf6*vcuioey}N2JhIAWssisLCs)IN=GqPGO?a%HMA^qEu135AwOc54y2aVL+{7 z?H&)+v=(}&8dgAHnNF=e6cw9m@Q;snn>KhK&`~$F+jvYZ_gWHI`T3D!83cUZy7KgH zzho&wLgdEpfz7^bz{Qo$P&58XKY0j;=MmnrcM0fQUfB(%@@N9P7!Gw~`5*SIF$*wY zBVA$~G20a^tp(JydK}f6U9jU;u;;!L{AwQ_m?QXgCgOe?OQf#%tLow#h>r4j;kCX; z!JcA-u_`i6Y1CrJ+JnjJ#$Rffn0Zlucz}~=Y~!{1eURCrLVePf0+XmI37?XL>MqU% znePYXP&j=*r2Es`oUj$H+Y((z`r#|c$;e4$n3;=Z-iclx*yG8Vtv=sgI?V%45wrM^ znUg6b)jv#AD#lZC7C4)6SgnitA1 zFOWzMl5s@z%kkF4L$nf6i|w@-KCj#rqiOwtnRQ0o^ou~zQ0B@RHbgkUE@OkmeVc(Sz=rvsG?nx8O-z}(Wde$`$YI`Mn%I9i-=SRlJg zQyX{D7#;YiX_EP+TwIh~1?IJAx+1+QXYGaM=H|l6bFV^V5fih`QQE6F>2$531qA2XJ ztlNniv>hbONXiIU9T0IlXKCF2@|}izfPaLQT9og5>YzrATX^&KOLwj*);l)B`}GN6 zDQi!k|JY(eX~co1Dvl@Bhysa&UQUZfR?uu**Jfvm76i@(sxeKw>eX|fPMXNIXcCr6 z^977&E!T+@HVL-@4$UEN%XVv56_jarC%piZjy*cL>Z`UtVi`1^GF|ywq~KXXc>9N5 zI_UY~NS1vZ`=?@L{#Y5C4p5b&MY(-30O(;I=y^Q=)x0~Ndo)%LFL|8@i#p5FZn<2} zG@M^c*!s56^^EDc6lzIXGZnOb8r(EE;C8Wy&PLWia(~zzIzZ}s3wO~Q{si~6u#toG zwG_^P6{=~=swIJQbvT6 z88{`xo8$44Lt$OYWXo0b63w24Mq%FUbD$*Bf^d`V(Xu-G44$CED4WszUUHnL-7js@ z0tM6B)J3zJyM}(~q!eu~GzBW0@h;D9Bp4@YM6sQ56ATD^bB!vo=UM2+MZAcG8TFipC|ItrwpQclH&f7d>Bz`dEqyjnGs0#@Oo_G5I04q?}X>f^FQg9--LQ zRXAlgdpf8#3^f>gCQ>8T)wubSc~DMb4BrX%3e_WtGwi^;=jz$)hEUmNEzNLc>fvz5 zv3VtF;8_itv=^+%1ymeH>G|^pi}C0Px9Cn5FTr;vzY!Sq3|Sx&oG)T@e0)fSVh=3_ z`$7y~x;qV}e>-fRahl{O&W>a5ryR;|(-j<|V~Y^k<)P85?qD?7T*tRNTfztTIXCOnrWp>&gsK+WdusDKG&D9IkN`Ywx#r*D z&U@;2Hs^bWGur%+RReMY;#L=CQ<6WcE^!w{ifu?^EeQ&odxr z$M;9QdTox+mo}dtUlBNImO0w(sn2%~@ZklH68!v=^L7r21=cM1h z>%e4buRIN|`RdfW&WVFVsf1$k_s$_hMd~4(lRuinYi36yX)H&A!~oIKIj~{VdbjUA z@oJAUh+frK*>_wgnNNBh@C^uj9|@zuF||5+%H(MaSidg(YTFXchweU)w2hU)qX)Gh83tiJhECHoKf7q{EZi3u^mbdKF*)Nc6~PjK*6C zNzi(>WYaox#a&F_{X+T|-89aRpshiWJt_{6X5Dp@d8{q&Qox@%)QEFlIJgqf%6DAm zD@%IyPIvf>eQoKrsk?HI`(=)~W_L^uTI=++cHyecK?ZdeAn~oCD`&N@8?%PG63>ka z-RDlCbv2lcM&``b+R4b(>H5QsyFKQ1WOa6B@`rD$y?WEFk^=n5cllbXOa2XfGSl!C zza6uBH{USnWxt+Yn)V@OlhoC609paAggHnVaqP&ow{%^5u$+TbCSHa6siV%tXpTL? z9%V&I4UUl=*d7^j8jo(!nS4&`*E9-0>(L}#(-~Df5peKzv`iBTfv!BMo$^x|{8(4A z^xJ01|3pA?sF>ENkmq!nFjU0oTn%eXTr{a4#&&YBPjfV9lY4R(r3IAKR;YSAx!ZCD zhcLrjGBkGTQk6@a*Nm8GRCSnL1;!!;oJp>G1&fESb5U2lG{?rD-zQgy#EZ}_kQ$+U zBPFl+N5m7NbfoUU$Ls3O?Ceyxu!Az>G4ZlZifTL8Aj-H#U@=-Se)viKxt(eoGaK)5 zV$Q2JgkXDjU7Lk%!BwO&o8taFJ$!ue zUO-*#L@l4%VTjyk6Hh8jroK|ykSr#I| z^PcMot}yv#+o4@MPZ=kt5Y-J=W?bV1ck|RqgSW>Z2i#zfd6iFHkxS{fqp^w#HPlfY zpJEOqi(MyDu|*GFO|>TVKQSquorwX~(^4nRnlKgX{SOBYP1Hn-5=gzjXiIbxOIFKb zC0HN(7X9PyfqJ`c_BUpNV20(D*$v~`KFuHy$@}m%QF-~9!Y@oxajPuP>kwy&zVfcRC>%khBHDi{vj;eh6ZuYP+8TA&ah9zbg zldtGA->_;gSqr6+Q~G(gc*eT@iRO3e0ngCus7#r@m`Ti~ZGpIAxH&`jTASL6XLw`y z%8*N;#7+Wc$1mt3GSCBl?F=a={))SE4<7eYh|7pJ$Fasa5ib~S9YqJ!_8CQt6%#z` zjnhn`(2z?aQH_d0;3^PVw})w3kVgvcb?*?og}&@5mmolm6WZ)dFI?`>@<}8@cLYv{ z46+;_HB^n1F|)eSww;K}{6sd7xfx;Vnu89JD&K?xi@f&hvSd<61VQV1vF9;GRj;X| zpGsteU32@*8-jmEJEtXWe`}XQ11#1LNmAXd6iS3_+ccCvb*D)L%}?A+`KYv}Dt#9r zaAaSHCQ1@!`(?*Z(w8|+MQfYX+GxiIJ(d|p(>VvX@UNL8Jg%e#da{y)YIM-H9#|aD zC(SyoBsv^{?OicJNpgCG7Du8|KdpnG1BZu!IIDthFMm?2l@<^39y>G4yim(Jv@7}( zmWBR=<+)ul-;58n4^<;;EoLQ6)UrgocL{n?O?c9cYUlh;W_`X8de~Z+Dh)*KhLogu zyV3!HCpF7ir7jPpdz$(?xplqg>XMOm-DGNOT|=H56G(k62hyL+{B;xW z=6QEoF`hLwK`9z0xhZy{nes&1ABhA`TX;OKDfE94>Ol@gys3(b-vXJWe7#c7&!EWq ztcB1_7cDL151a)98&r1kw0Y}|g!Tl|2lZsgO9V+W>Io3pvkBzV9{@SwB+p$S{82R9 zs|U7O75H%6?w18=ilstL^$rYm{8psZFx=%0!uOp>=Q|(aDt(DigsXt z?f38Uu=KM5x4w)0c}>@ppG4Nt&{!A9?#^FG+IU#>yxBQNt#!FbeSEhVO-i9_`nIM|`4r78h0RHgb|gLhIhkH=i1$F2mzY zyup4*|IbA*$D0>nv*SgK#wH%7YT;1~pqR3AY~CcNZ}8=`PLseM10>(DJ> zE1byc=6W1KCSgG&aYC4Xy`qXxz?)$dpzh87KYX2KRGVAWtxrn}rMMKA;!xZjibIhU zXrZ`E3Ium6#e%yeSaEmv7Pp|qtyplE;N0|_@4NTk{g*K^M&8J~_s&{t&S#RkuzU)Z z&bpUvb(GnaH2w$W7U#$6g)5toYxnZh!GjWmh+r1%R(45zz&$iS-jvQ6dZ_@J`tcg} z&V!rjbsZ{!K<)^zA)Fc{4uQ)=axMlT&%7#_Wta8*uN}^JQ^jk1GmL*$v|C~=-2t_F z(5RgUe-rCQN4|rG6cRRR5W6}4PvKLPRbg#8c?=--LlmEp<#829omagC@54wC`nqCAu@+CP&!?SF9yeFfwlyHCWLAs^7q=MVQ;Ou9uwJeiI+?) za9;CTYGRizhyen@SNIBOC_lTzup{Xx87eE!7Wevo^X zcwH?)*@tEJ&ARd74kvH*K$T6B5>8}!^KHG`8CqFozhq42Kdzscavcp`9$0t7y1Bin zsk@+(&7wge9j}yp=pQv1iQcDQz^*Ov)YSEzh=x3KbN6# zMM|T2Pa>K_Jh@RS^1GZnA;Ueic)%~e=?PQpV8hA9S|o6~niTP&R!_gD-ig84Q_Bun zU`yq52Q1C#IGQ&(47OP(~Lid`J)z*Cl^A35#Ho zcwgo&@NK|6qqR_HOHm?vpv9smUv#vEin8cj$`>^glm5M;F_cx+hghg;Q3KrB9#?#* zH&vW3C~8)oSCD0))c&=OWg>Goz&MuoQvsz_sJrMpcrgpTnzHn`X+h)3`czDT!>GX+ zK{HoAwePUNS)P?5@an7lFrY2fuU|e=eaWY{%v37I4(D;$a&=!hIuzfqE@l}#p_I~35?_HJ?=dT- zb7#3-VK+hVW#A`i=wT}~PP0UM_2}V$UiD4e%iZuO3zwwqaxUsDwY=F{*%`ujG_xCC$ltbL2;5-% zx^%4#6bKg}YKJEIE}pq{;89c!T}CeH@MbiJnB{~$D}NJ8@4PScAE7A1N{(s8nl zrAaaU56%fly9SX{I$U&EXS$qbtYaL~+}Qn!4^o}_fZoCrh25N){c&SnMTA{NoE^P3 z79MBx$)k#|)foz-x5~8g9q!`u=p;FGOMRtO7hC85w!74CK-2SR7?>;$_Lqk?zHr>$ z^Ky#>g%s?3a(mI!&f#w!f*Biqq=4rclpU`INppU(*xZ#> zC#GhE%?9x)I9aXAE{L(LRJM)`2Jsz4zrr`m<0EdZ{5yC~y~}Ghwpf@U84LG-tkP@d- z_8`KPdJcw<*6NGTyA}z_eB;iaou*z6uHU^^j@OC^G-CtO=G~mL0R_U&+azM-WZDJ{ zOo-5AdT+xPb*5|ag3o7+FK*1c47@5h_6Mq*?59la#8Pr7a;yca+^zZfpzAJQ{K-34 zFZjHjpn8&e;o08Ldt7UpLQ95q1pi8Y9RE6Zn7rkGW=IPtPu2Z4hAUVu(ZPt)RL17s zXWdIqmQ3i+0Q31O3lxsN*8w|a73*TBg8pe}98!qW=C_t8|CO@B6o&Wxps6;|lXB>! z0WNIFa>DcSY!g1;#m>xoPJ+6@7}D`MG1--|noVFTqx7B}m^}3dda+Y^yfs$@Z96?8 z-yBNIy7$c7g5j*>UNub}G$*Un{Q5o(eVgZr5xB}Cf4*n-1^+P4az3!WP6vgoO@CF~ zOTKRU!vbWN?dld4rg`Ie8Z1V5FrL1LwK&NJkZX%Uy1i^D$fm+>p*4{XF`15G1`m3g zPxJ30&yX0xw%%!RGwZUO5DD_<&90vOdZE)Y=dc$Iw-`XJTr07efzW4~mrAnw3!@Ew z!8f-Xvja&?l9g@oSt%HsZzeCv^1Ul9HN)=<9OK}1Yht`%&4xy~o@We(L###G5CBGU zp_k$#g{Pq$2>* zDuBPNck77K8!Y#Ay(3#0LC{0jeSsbD7saQnyZ4)ob^G-!HW!h>$eLEQe{FG|rQ<`! zjBMG}VdQllJ!}ZeOvGB8sBfiyr*PQeLO^Kbzuru zZCS{@r*k%oU~06DeHb|%zgNirR=9CDVInl6&(if;lTh>k&iwOxj|64gXtL27G=;y~ zVS^0h!cE7o8-qTQyZBKUH3f7lR5go3B8iho3v7@2_UXu{J)Z>m?;Mm|)JWo$QRnmXIt*AG|gBdYCp4LSOtifXR0 z#g|McBVK(mqztBHu*vpLu8!5Wd)uHP3P~E+?rBh#O+$1-@?9LJ1kDM}@)a0AJxs-PY zzQM3kGY&#n_eE0n&vBbUMCy1Apn?UK`IdYjIP7dVY~7m<_i4k1RM3mwOg^g1`vH}x zV)@r#@S-qr1>J-R&DsoiG$&cFhx)3*$m+;slAch9JvFgu1beYu}vty=NAD4XHq6tPr&AN(5bh@Q*m?F*zki7;}2jsPq69|C*%w9f+Q>tbW<)ZOOQ_6Ya>p+kzrW`jCqO2-`b*1GJT zTaeXWPj%!K(VbpPB&i<4$z{e%?XDM}0fcFKly0$FhLzqzpin1_B6DE}I!YTD38N#e zvF1$Ulxwv|_0v@NyIphtYdlFOe9McX9n$^qW4V1;y#0e3kD~MZG9A_cq<86f%67fo zuuYJbmqm=%*CJj#ZQkDMMPj83Pq6-g?~o_zmW03eNID4@35>)7d)JpU1qPmfF#e%G zMo{RTwcD8)D)k{G{h8{0)-rvMzM_B0+^l#)q#V1YT%(B3$pWrGKRxcg!=C}}sZ{mR zd$`Z|h}pV=UV5dbV(Xx-9PHKgYDf`X4hTZosnmkD$kGsfmebcC%xu`e$~z{%o&}Zi z@``rdDocRudRWF^{AN#JS8W^f3v1z6_zW%bKQrOgi8(5cphXoX$VmUC#(3{xsBF-Tun)h}U+7w*X$JZ6M>s%#qetyg1c5ZUp8xNS<){7vy(aP=>%(*WU6oPa6c? z2`@%Ygg<1GKHC~*C}|KbEw`ZQnb~>dXnINt8wTO^kIYwWoywNw`1olq0G&MKNjup{ zg(C`S6y}Be^aOS@YvL@j1$BEahw*F*=Db^$VhRnQa*>RswuMe1?{5raCTus3W|az< z_0phtACbezM`obb{rM~Iafbc`Tmq#}E_{wkB5Hu*55qjiCr%GZ>0!$9oPH(sJWvgB3Gw8Gr&FAb?}1}^U-+D=SCe9+39 z>RZ{F!W|{T{YQaD-P2>4s~jj7M9f12|38%+-{0$Rq?RiMrLXp8$|XP~oEdqo)T|cj z%56nA0qGQ#h@-N=|J6Pq``&M!#8Byo`hA6A=J60v_Zjhi{Qo#JBm?5%{jc0{Y-X}@ zj%g*GpLBFN5}q=aF}$Ddo+vuWXHjMzV%9i9?@R{*nB<#BB`H$q@8%F~{vRWS8`PJ& z#b>VsXFs-eGO2EK)I4_EIloPQSjcpul_VJcG+OufB9H$dD{!ncbYC>=n+q>pGT`%+ z>tnu9th9M%zmxL0W!`+9nm#H4vp2_fM~J6iD>{Mb5r>VA!jxyf%KR&|zexPDcMm7g z&m=jb9ag;G$Gse<8CFP4kyD(IWRyHoC*1UC78q+$a6&@6aD882;gL0OF_p^66wU|(mK~ER)KHz*DE4Mg8W1j39--FE%)WzFpocM z$1|`Pl)PZ*?d*O1ChzMki;57gV#(7x`QJxB|2T>YmGGJ>3Xe__pub6Me7 zY}J`QbgykZvN?@>5*OI!#|BU$T*GR!9fGp2~arG=mnP9=!!+;Cezg=ggU~ z-I{5sh_pSWlq6(fFlAQAC!0pHm1(y=5auR=%eTPUb#`-s9py~bG{2?4Cq6tG>r;)) zO+7T%*wFEkjci!kzGew>GMiPAPv%re;^EQqq{L9~P*e6gPESx07#v~x3O&1cZk!e+_kGEjY+I1BrTvgLboe9m1}p$OfdSIkTz z@70y^2+jOB<~9{F@k*(&8RsZ)t=?KuJCZq9M48}c4Gav z&raL(F*b&hZ_4iSDPbkEe^gcV;Anlg$>KyU|Lz9Df2A$l-bguE=&7VuVK;z4r!>V` zz@vbAK+*Y6?01Wr1bNg7K4M_BwFbW6`0;eS%Wg+<2BY}G+#8n}ALUR#^100KRvM^? zM~jYvSlwFETJqCXcW1%g&iUpa&zlcsB~_8H9_Jb4Sx-J*@R6E`>Dy=2H?7e8L-LdR z+QTm-nTkQnA*x3knTIcV0H6Gl*(=>wt*FNcrm_ZOk_ogt;MUczuz9YgKDgM_e=BD^ z72r+4v?AMu>^>Lf4oqZ_n(=Ht|6Dt^`e1l4MJeM386Xi`y!TRpY~1djc@Hy^M>H{} z2;C0Lwq+joK~LyukmPf*YC-n%-==%2qTENRnu;y$-=tn<%AX(p(^AnK#ww$j0hSs) zVjO!~d3Y49%5QDzXkpse>r}|^RSzOD*9p@O(frL+y|ndby$lr-c!t71oA;yMo5;#C z&upsSteHP8Dimezm`O4T1Hhg8@g-7tF?tWibPo^FsUr{FcsGl<$eyV6^tf%WxG>yO z#uso=k|+aS;K}JFuC>3**iBN<@BTv~y-a{AE@b(4@45H>cV&ErG7*-1SS+E_K_(`i zY^it)TTBMY4HQqmJ9l$dbZ&G#h!-AH+TTqm6lxDSHqMHTaY<7+!!#9jA1#-$WjgoU zQZaY(0=j#B8)2w7tsZ>P?R8R)HhX*rJGYrFbp2H^g6%DB$v7;pdsPOb(j9o@XJm?VwjexAK`?q%H zTo`TEd6p-E@!PbcG@_`8<}d`2qo1XteyLEj0mYc*b`oHjbybEmCa@1U6 z)9rDWg*J86bdXqN)<}WtM!%_XF2)+_S1y(T)kCwFHM{F!RIN@Yy8uD4{KVjji@n50M(IN2YiwzHXq)sra(eAD^ zA%4(X3M=)EOqH~%hz->8>+03_Puj!dRy*behq_2m!^-+HQznytz^rF!Jn@@CqqmGo zuPXLm7p5QzAFZ-ZeSg{C>?BlNqknZHDk9SzG4`k(tVNMtF0>U5*4>??Jb{7}4u)&Qk9 zEmbG)aoy7=g3|TIdd`;Tt9{rgMQ1iPVk9^EHIhzr{gNWq7g0f!%nc2 z-rGdl?$N2GAWwXgdA8~^6#B+{(hF{ZpI&Tkn5Kwu^u5k$AB#BvR^6yHh;Bv|lBy4s8S;d3wD&pfZt|6AlXa)QEDRfs zon*5w+st|nax&Taq|5rRvbvZ0F9(P&Ul`duGAu}br&Qmle5Tnsfk`P4NrQ6BV|GcS zCJPMav;T3dEID4YMltg>YA2Wv$Dc&zq{U7{QJvSg#3NJNA{oY4rc$)BlUlz9ZJ)*+h>}St`;m z!A&Gsq6YJMSv=!Sh!PrQ*_DTfnRb+SC0gIB^ z0G8c^XG%M9SOhuS%zoUnInyXmNBio!t5mvR0sOehp2;a3rF0h<^h#J(XHIE&;4K|* zf(ir_2O@r+l_7E}I%&%XCW)@8@-x`$TuBUbAF<|*uDUL)`Q!n29zr0s)XJP9i4Wkj zEoJqpW%Iu19jO#GJD^rME-%ycxP46U8OO z;%@pI=IKaGROXr_D@lBb?*+#EBA@KTwWr{ToZ0~;s;xZRIZZ@&w^J>uZ!#Y`P%~`!a`V3!wwRNCZKNKE z-`9=5EIwNCk3eCAzvw~;W`FK|c0uhL{!!MTrVzKSO|-ksYSK5KQ>`=XUf+UnL#jIg$+DV6#`xj3>hy z>pXi`xjp^krUnCRTR#O2Z_?CF60_09Tu^uOF6=a=?#1p_D%#^UWtu#>syb?U$FHpm z=I2*f+0AerC;l%(T{b)eT#?=_rxgW6>;;rvOj9A;5+ssY5&B~8$+cFT&bv;pCTOYJ zMfuke`SZQ#$&G}jmq1a=YYd>8+L_gm#_| z=X%HBULW;j{xB|M*aOKGPLBS0G3KHJMAp&yq%r{>u|fK=m4XvY9-6P7Y3thEAu+Oh zO_~+eq}UVv=)!E2Jgbat7TBa!qs35R^K;-T_y*KvmxJHyN<7;Yi$9jJp_jV4$4{p6 zrB~XBbuNCQpTbx-P(G5PGdWk65>B2_tm(;@OPo3En2_@y55XV%@2nBY6bUY!EI4x@ z3K3SE`O3Xhx8ow+R3=>&#E0W~{A_Z`mt9ojGEcU$z$(+!g}N;)Lz?TL7+vT)e4_K9 zu#GK9JE520Y&GWV>19(l2uOAA=_$eo`BjpN>27#h+1xun=@WG0x;Ir~>~6U{k=@E0 zK_yuS-_C+NtAIn*1^|6o@o)#wA(euSDmSWqbMH$#M$!sJ{9LUGaeK!WoWL9a|> zF!MfSE{SbNBYX|-jG1i+G{NTy3m5CSTGz7vfdrp_1%57|-&v38 ziH}-#yjQr+w}$zF$gqoPB4&|XMEw)R(|j3^^Z90ib;+3V?b=5No!X(DO2yhyb{H$! zC$qVq#cVMHxPnYxm|o(yopXMV`$!$d6y1)v%iCitG5DaQ8+hN*?4>B&WvjSB4_$XQ zSU{#v!x|Y1sWqWy{{1W;a?evO%IPBd-lNS>Uy@RL7GY()CPql+38izdGtaa75z`dC zdJ%um=R`N9MkW^s{^{Y%Q@=Fnqowp8DVpc6#6UQ&`Qv}W*B4?5>;vesY}mF}bI3MZ z>CuOC>_)!+jgu^?{$nzY{E_!?1EHZzU+?)wD^71U!>zWaWO*7Goka2bLd)7OD!O%l@)CgLsQKAmbk455`mW6^la)>ozmj0O|<2g&fape(4I z6%8y9xgmSdz!*rYyQ!(yL`iqm>HEs^-3>_*L~e|8TzxB>_rD$}=Gr3+TBDtigftT` z6cI#skiROFc=nB>|7wQk8b>_xg9Ufz}=m5WL&?2cLL@ z!`aNj-tYIlO6QHu7k~IGG+D@@xC7WXCCIoxuZi0BB5@)s4jJ50oBoP1?jnfa#ivu^ zP=p=+J_NkTp`fV5GzA>oTOQ-MdvdJFznL>`i6I%%%k_28(Wn-c&3<8Pyt*!74Xvbe z@YK`w0Kof6XEzu|>fjqBe&je~s*|Bvp$7oO#|C*v<{mhvR0= zUkv811?zL3FD+)BUv5*M?%q|NnN|=FKIjnmQF()nY1UB_KI{LF6V^lM-(N0Y*!v>V z_I(fgpLkgsa@+#pN{oJcQEcycE=%*X`@@j2o^UB4e^KIZ*0Uk?+Ff2u{wDq(; z7JgJ}?{tW)bN)(i^narR-4Mv3NZ|pHsHRgK-Bv3U_s@YgDufgpvB@&u{@uU6P}uu7 z4ghd&fjzdP5V8G^7p~%y%!h$@1yR0Zig*RQTKhhcwYZ3;E_E(WIeSgx!rsrC;nK>Y zFm@7{C)^+F>=#`|vt5>IdR3eMnWiKu4U8yxZ%VNaHC*mW?7f?JlL#VgWw6P5dcHKt z25OMa$e1hTl^X)AMb0GnWv_|`-DI$y_BPoB89;ig8ZwH%*wbkDYz^buAkE+XbE8<- zjzd@)pbB&2!W9>a_Rspg>748fCxK;q^D)^5qEq=c#3J?fQlWjlH-E~HZyNeO%7Z$j z6X%0|S-){r_-_eOMgPw^W~u)xysknhT`mqM9uC9wseN&%J7N{62c4Y|^j8;g)9Dom zjO|H1jP!US*Y%7t9$8yV#{u_jij5^-F%+M>0>cq2BLOlBLY@a)p`(V|rq)HVuyRcA zPCh$wH8YEYKyPRUBov}o%K_^=>M46mljQ~RBpV85pxe1|qR}mD8hx1&{p~OiqPx%j zE=FYFOq{s6#UJ(D>+_m0ET)cl(nnkzv(v!Lx`JioEhLjBUsyaos3^&0*Z|CdB2dH5 zLSQpPGTh0|q}0G?|3(luzh?bP(OINlXQ7T8CSeWZV}X$>=v-({y-zX?`1BK)%mUAefkklY4PZ|qE%QM6I0IFwywW?B+U zP(XO2lK~iOuMsLBCv#J6GKo_Z${^fINuOj4;)WUv9ZB7eOBV4I{k0}r=~M0TisJrS zBgBuvGR>a22jhj#XJfI>*dRyKq4%hMpCgWjV`}a$)GRNG)b`1yQ(b1HOm9`Ov36uv zyHt1Ek6xew>@01E*Xw{Q(eqXs6BTwU*>Lfj>Q&u}3{jej3H4|sgXt7QunEuZm-wXe z6)Rob$Pd!r6?_5c!yMVfuQ{w968zg^cS)Iu0eQU%lwWA_=kxzN)jI!b!jY6U1W&dD z|AKf?;e5svo9yXBjmw#?OJkwuPn-Om1+$lnLEp#{a)bp=us(E@NS%K`H$3)F9FV2k zK~#HwQI(jm_TUkfL?np#h)ReSHs^S^ZAcyfE2h59th$@2Rmlt#;&efXE1$cC_-jb89;J)JU_jT#!W$uFztQNsl}vc@nD&hw;9OH~SMrIk zf3t_D@0CWSYR~(Mi?C9MUKD<$~J^yso0Bvi# zb#!Jl%fjFa7+vh)i}6q2rjEdaw?!7bwso^Ls1Fn^twYCN8A*A884pAp%po%2r|3799*WuzW_ zas9PZsgkFauO6B15AT@Zt#J4{PuS+p~b{~|d#WmS|@%}dI1mVnAoq9{nWbcD! zf((5u`EKM~pc$B7%zCCh-8@B(jizJX(ObTT3qk;HaZVFWc|Zqn zn{qMWdIFZ@N7mu=5@KLcVh}F0h)HgVBo(Gxr-XMM(e#}bA1wHan;0K76EWs9=B$=J zjP5?4u|8M-QF_DaifqNxZz*@o|GrVBF+-EE>rQ;T*tM>L`n zblGx+nGN0B`tpRNit4veMf#i5-uf@UV8W;AD=@Efe5Q|Q;i@~My1J+z6>Gt^57D`2 z1&GnnJcwz>|9uE$7?FZ2Q0Sf#APAc?Ka0`uwrn2X+D_~%y zLP(UKwTU&)7O%s*ZJnFWosU6GSMhO25V8e2Gg?c?tc_#1GJ_Q+;q1G9i6_-2tFlDT zgPJn)Uc9Z%ng=fwCMIU?#q={rr7BJL4qxh z3Lw&3YWlie8gYEC*Q{2S=XAZ^r|2%PShMY|xV@((p>^;WM z6ry~r$0DcKeww7zE<&l};-9#=fMLiVMq5-)E5sN4Mermm6tv1%y=C!gnG z=!1C!>I_s(qjWvY3Q$EF7J-n|YkK^8r_{E)J;XM<-pmSCzn2&dkSsMO#@_Jm`yYo-sF9W$Sh|z6T3jubb|py% z{av_dVe28&XYO^P%49(96s3i!6hv#e*`xY|;Up5SV3k05pK`C#c$IW*TE;1oLA7l* zy}?!yGr?Py`vAas`FCkO-Tn0unvcC|N|-Q8%J-b7VFQm0aMS(S`1VFm_l0A2#4dDS zX2oai&4(+>!Q{8H=^8viOXjHf9ww;le5>Qmqb%5k=6^m;mU+CT0=hXS!+g^|YM!I> zqXDdbkKC}4eaZq!Cap!C4bM}MDC7+9WggxBy1VIoYc_7C+R`-`l{Qzkhns>wVr?-r z@YK8-{_Xx^PvaZ1kUom%CsByB+(u z%O_q-L|GaOIx-g0O=x%~9WEVy&aFy{j2{U1C;D4{B4J(sIwbGXfOYk-bCU{+J zxK}vCLr*gbum8T8rH~>8_?)q{=q`r?ynpB8K4CIx4_#ija`Z=zz8;au72{X$In$5O01$^wPt>SU|(Y3LR z3-(vs{xHO-M2Iy&z;U#otZCC};%E~Q(8}JL62UVNt=D7htEktgE89BkNTpWYKF@pw zp^A{OU^nQ&a_H|!o3kJcHY2uE4nvl&*D1Mwb)?(*I^@)9pPFK)ei(o6t$!7*Mypha zbh^Hk;Q5_F&Eh>ICJ91C;JBD0*(;7L(%9yYmb8v>CPAn#@hB+XUEwKz*Rr)2081PQjXDHH%{m!fU` zK$%xDsz)sai>7GmM*Z8hNY?V{^4$vs85UD9H%?DQ(XbMrpApwf)UQ+la0(aMRVqbDya;Nm5LwPqL+lJinY zOzGtG#(_$)he)+TsZpVe;I1rXOa#Lx5Zx-d+;T(&?LBCjKrrT%WhW@HWo+!=t+**~ z>ugl6Y>b(#EEAGoFBl>1osx7tQlye?QYhr1S+;Sag3ieuPA+Sp z!B%ZD-~WnMOt%iboGD6%W0nytl2tGEg)PRR5f8A$C=+kJzouhn;G_Mb|9)YnKC>Y+ zm43lUC9x1I>^R}XgPq06O;+{L&+Ubv@_~3>ySkov}$R}wO`IvxRYrXi~511HQ!^`Q+GspNAXXyFu z4_@2-*a(23w?Cn&IrLf6}%VP(}^G_`u8d08$mXj53EE2f;o4(t;A_rW~ zo{Js@f_}=j2>P+jA(-~EcJ*~mfC^s1NVR-p+MD*0v*tNQ?TYOlughH_gqW0@Kfa** z+Q!!nl7^diN~Bky(!h;EwI zz`C?F6H(Kg$#6X7beBU|Q4QWO73D=5mulF>SuZWG>M>L*uimxyR~R>EU4s(DI~iGD z1*G#-p&kD=imsf&ga_JETo4$w>>F}aced0)T)^Z_ORg~6Vfx*1hlY`poGp0*yfAsh z?^B{sHSmKD(dTzve{SyP2|S`=ePx(6yhKU?FJj|O2m}LbY*kDFUKJHbGL>WeV*3&y zA=K>!Tz5QQM&u`z)(;}#bvGZo2>_DA38tRK5~Vth7?UG|<~?jyUy|%S6nq|grYcV^ zYBN%O#K2#2&?RcW9lb2!_U<+JYIq9c>=9`;8Ug%5W;GD{hK{3jTXRTwtG|sYy{W=H z2D_2dh?6lA)xHQ$f^Y`ee}`<0sC{LgQc^sD9m z!GK^-vp*8a1}ZOTs9TyGK#_h?Ez5=D?)I;$)x9A``Bc7WFw3*shXcdbNV~wrNzkrv zgWNLhHCRxUe@vrk?QM(N%3y`BHabyPS&F!)yE8POk2rremF^&{V>If}@RM)h8_k&| z*%J4;d|~(eo2C;}XD7mEg|pS}{Q_=>8N-p>87v4lWjJNn+mN>vWyi3w_0;3UL#e_r zWgS5qt|>j={{3K9&4zYCI?GDat$QHbu`ak#a{v9IdOx~+V(^w&+CrVl$I@Szdetd* zdJR>Jt#l~cAdAVP4SM#a~@HCR!$X8;aHQjWtZPomv? z#tg4O?e2*kZ9LXoSkKcOPeDql!f{w>YNMy5H}RP9;dn)zzJG*snAf^*a#figdPyDG zuOgOnoeuM7tTP~ZQRlOA)>sUTKCXrj7`OK|QJ)vDs_bvM;E`lXX~-0vd7PRiEdwYr z-2f=q)hyD$_r@ELzuTwi@P%8C_m!ST*xK^mM@P$l)ZrMm#|v>ZusdG!8^Z?B@=#`6 z1}TpnX}21KnLvIxnS1E+viF)nzTo*rde870eXx(HNuN z@x4B^*lbIBNrXHfpqW=xe9qYu~pe&2!hrza2UVm+PS z*KSqiGmlTio<7!~`FOowPcL_5re1%0aVVG(wtrP?v;4XN2PD(qTR4a77YeT32qKgm zZk6;M4J|-i)FM1n84c^i~ci3y8&rA6%jbC z%^=+9UeaCV0?nJKA(2}myii@JV9}EG+lLfeOBg4?mxTxKl`GxR)Q#;h5&q;E=<`pM zuJI4tHN#_Jay@^-xC{A+bNj&=6m=M+QKEf&@x8_3=A!4)-<6tAhYf%dC4nvxnIp1B zZg#q3HJ>*~rgCZWk)0(Q=eM)G(#_S)lB#^1=SmN~Wlao`0oE>|-skmjB?+7QpqI~T zLLfBOuP;}N<@1r6nf-CINImIBLCM^U*-N0HJ&JM)o2Bp5dLl?P@*P2Ryq6!1fr7p1 zW$}BB^s}|ngY%DKRLJJYOE+wrQ9#a$@8=H2>EVvC;Vi+;J2$l6@;HprWvP%2F(x9n z>^3<2*DFZhjz!uWS3Ay>C@~!%borpki7Knv!1{iam~WXVxKn9{bZppyKYn+vKVE>J zg=OKx1Nv}kvn^#>A76oX>jL49Z@lsHGc7@oO6hlT2)T6^DOVIcDpa#^+c3M%t!$Uu z_ULm2_d`gP$VdQ#iLkHaefVV7OaW{O3zWUg^@H$@E~234x9HJn{sf1abgO#Z*E;l0 z7Yvcw5rA4hnQQpBa!QsJQvyAo_$6-L1d!7}=_?qMz47R0yf$&2y3+PYjx$n8ev*Nm zv>J9VL&z>N+rU&2dqwsMu(DRD#+yo+SpTt&XL54TWrgNo-DA&sCC@ZN;zFklGJVce z+omA3a<1DG8%PXpy&flq9hj@z+2Db zEwDj_siP$4DF74YFBm_D_20cQ!IFlA$4Zkt5VZJKMEl`6jJJ6(<(MIJ#^=MKiQXJj zvdxD3`hzZkyee^gI+gTAxn~{o6Gj?NsEO+hUR^FzzS9yymCx zwG@Ki=+5weIYUoih4wjv8EM2$?J6t8%2VFjuiSaQH`RdX%QN4NHEm2R5mrc93Qf?k z?m|jmJTM(?|G>2mWk*+D@MH8ff?(G(R@3T7obJiCb=-f`<{LYa4)Dog>$z#Wem<7G z`ysGbuu62QwPSsE{^5P{yFlvd-eO2&5-olIN$mGz)a zI*N>m$jY92KNfqcv$n)p-}3X02htl65PS#Hdq6UtKzoB$t6E4W01KC+>VB9dr6Zl# zPo1q0I}RhS7R#yFgfTVvKMH3)wLPcCl6c=_B3YWp=f4;wOrzxjvC>hmWqq(wF$+`* zm9Ti(tvhBuvcpSnPH);F9DKFvJ5mZQ^e^}31h;6H(A5(ovGyu`HN|u&R%|&N74(yN zToG45HD`Q(KYnD!R5uPvL(TP1ep>0?sEyza3hEp2%4rJO+#5l;`lw$nc4Cs9Ga+u` zjZR@M2-U2+zA^Luf>zaaNZhA^=@7rEXa^a#&byx#^8uRP8RNdbEC?To*J5|+t>xPU zTgie?tedxrA3$Z|0# zIC_5&UWnF{8k@H{%`gmDUtyYa?S4UIbl-@TeNDhlT7Qb!At0_)UER~yiWF% zqDZCBYbFU4)Zb3$IP6$kr+N#^A)90ODoai)vwgr47tzk$IK!%&B{Vr%SJqc-iC$eW zN%WtIP(rJ8;^oauLrdlr&ylAm0EBYLrZAM(n!$W5igi|XtE2{rxDy@JF3joY~f4-?H_HZ#J zcKMs&$j3aYKy2Fk7|s($QVGagBQFOonh_A!oaG^1X`=KQl&V|Xx>Hs|G!@}n2*uhX z9vbgZ^|L`DOg%>m>edzKj_S+?klXTFLz5IJmt{0|Iz>2_c#>@)*3dn8%k^x$;ZCSP zUvu(rP#g|Ya{hnmFEh{)RN)@Y(UdEq5K6}M(dDlchJG9;J-v{&EQzL~V; zrZ+n$eZOtk&1}%dPvFNPAG(~a4|bLck(9FP*U&!a`HXgGdDouuvF&+N%drHo!%8Cz zO|kZxCP@=WUS6D+PS$-e+Iv&V3VH}wN(MX!ubTfKxko@Sr2XpEG_FS z(Rlpo{k=KB85`IU&klR0GbzRq%D3p|nb$l+uhkdkf!`bT%jQ_Kq3dH`tEP}sn+A%a z7++k=athD!xLy2|?Oy+5^@bm?Vl2<5IB3wzUSw!@y1nSiQj{o5>21KG{+Fe&A!uW9 z>n65#kiye#ysKy|9k0m5*#k~dD@~*xa-E2Zce}>smzREIOtEGSRn0UxJnCS}b58Vh z&F6EsY>0)w$So=j!1%&ni)N%vGFWsrO2|xS%y0c#@b9*s@xO(|%#9q?LE;+)t|Z+3-9Gj#h3o-{DIwOnbH7W4|8`836|;0NT;bp15RL>1#uQ zy8D3m-aYl^(|`J+iSCH|NvaMA3v+#%oE^ke`Bo?0Vf+YNzs@AMgQ*PBlwtI;h(|;# zVi4}fJU}}lkctr@GWCaH-t6in7LgJB!zLEUmgFbmCF?|vw~@RGxjbS9i}`XLaX~cc zqd5?LTq4Ey`+neuIL-BIAR})g^V7?9vhG};J;4S&tPX+pCjE=7Ar4G=?OJ^A)q>+^nL z@RK?-Bz??KUBWKFbptU>b>4&HmuG5vIKe0T!(YB2Y&uwGpnZp^yrAD)Au&{Ae_SP& zz{)g(_Wb*yiFuy}v0e6fg5v0UL^QXnZb|}V6$l#zu}sbLkCEL`s}=-lAIUKdCgd8! z3@LY;@5l<~x0%@45KzHz!MDfN0=16BF|-$5j54($Hr^&@w#(EUOz`h==~O!Vm{aN| zvULk4c{eY{mU*LWA6o7nb@v>Dq{=50bbQ~TPl~lKGp0r4l~a<=H;8e%3Vrw?hh3g> zZn3_%BkjRoq1^mZx=odPY2`p}wQrhPvpS{K4~Jm&rL#cBAC<(Srx08Y_ELpAk@{l& zcAQ-Kuq_$1TH{#@4yG{jz&ROPpk``K@1917ls`a^S|a_KvYG?m!E2Lk3$^p%#JgtJ zas?HWgYgQ?<1bK+d`oUuP25xI9L@D;-uCgk-yB9sS$$>3LlXY@nipTDjqH&XXXn2f zeBmg!aNKT!vWpU>%jcZu3;UI43pSPNZ^xW{&NQjL4x<^S@kgqEZ2?boK!zU2qAT~n zw+8#aE%t^e4s6_Zd(-^IzKwIeWL9&F;AA0 zaG_C~%J|Ypih?X*<+3pzRKFP{f!*F&XST1}9mN<3S{X=dFJE>3zA{zpH=3hJ3y@N5JBV94 zSWb;!*Ef7)ak;0=8DDB@1XWuM@mqZx&JP)UK_jQM`*onXA18)Sw0Wchy?e(fM-;=p z5WiS3;y3|QgRa6sL2<2-UxC|Y!%o9us4L^f<>8c9!k0zzBxtQtCPricRkBNxeL(^3(N9{c-8J!PRs=wO_4k%W?PkNp= zFBX@1b7~!ZXnu4S;`zZQ)1$hUed3Z%G}a6~Jko3T`1Jb!fud&YekJ?5I z{wu^qBIe>Y_88iYJ8yv)3FJv@t;81phpV%WYHN$S{cTGNE$$A*9f~`&6xRa9-2%bg zr7iAGaEh1WEM#=l=ps>5RO!;SNy#@VC{VsZR@`m z@NE#~$Uek8#{vB&`6GV2jp6 z&#=`>>MVqw`+o3nHDh*|N|9C*uUpGEX3E6>+p zLD~qfDDr8F#liEGBZE>{YaT_!wdLY(KwdR>xxFjouxxUE(R*XeM-{;dI$fQeX$07l zKI#cWWk_4@X_=A^(>-#x5zTf!nC^8LTY*bfmj^sZ@B6i20a6h|60liIciGI9rz(XFDHNL9y8s;_kD!qYX= zVH`W$6|Vb+h1MBH$7*pS*%n#ZBr3XFpF07QPMTB@9@0Fc!(Q=5uNiAVxe%%kMQzTV z;S%@A_H)uZ@qrWi=0>Cg;@qrMyp}mc9z6gT z$qV1+mB?FWYWT&}!y%Pky&vlVc-EllS#_evJpp_Ie2!;Z-E>P~^iv5rq zUs2taweof&c{Tb>_!+_v!FP`6w{IM5%6u?l8#!J%K`$4bvENHOU0t1_EW-a)xk&}2 zYPcoau_{HX*;gBL!mw$ZvB%ES6s@bBziOxx((n<)FH4gnQs6{wjR>j206yS1ii}!Z z^qXGr@>`G_abe7EGQLEZap7;fR z_&d(i6`lltvQ?flWI@R>9!(i`Ivvl_+HKz@AcmUa_uPZU`~U6JyhLh-ABc5$3QXMq zhwYKoW06O>JH-Erp?=7TxBue8kw=_w$ai}d!{en37X)m7`ALNwj5sxgAcF7oUW`yn zc6~>FV$>?qf$h@$_Q`#}XRpozd{+ar2>I|hx8OXuo>E^GaK*N4)@|E{7`l5xE68o7 z{_QFyJ5w8UK0HcqG*#?=8l)OdI3lT+c5Jr`S+6tm+-cCSDYm{B(5{V}{7I$JPF=_! z%cny|3Yc&DzIlcS7@Z!20{X| zU6Vp<(i?Ug^RFpIN5_}JbB%UPqFzUMhwJw_Bn9rCh?H*ZmB*70abLcx#nCN!5r-p= zOz+~B4_E3z0jP+2FPNj}(Oh@uM^s^-A6VMCMHmfv*cDYWBj8z%ZWsX>1VVN!IcvLq4{Bn9#&T)fkg$NW4I4 z#tscdZwSDUuGt77D@<4s@Co4;CV_Jkp6wIZGFy{@7gQu`g*&Acwk zKL21S=@(&FZ>RaEe&+LGV=|l25(`<^!{qI1@Ms^OO>zYK#rn?^tE!cSzL}RDWyLp{ zO`1)$@IwzrOK;!tr3nR7L?gQI?(POzphk5?^UOs)#G74gA2;!gNIfoy zh`DapcDlZiR)*eh-+fh+rQ88X^JECXOo$$H(zzFtW%MYmRTF1@b~31MT6*CW6ZYMi zY4VB_oQ(e06gS2d(zPG%{Jk$VXhC1fxIY|fRf}4vw@A3cxgqq zmIOEFhITaWi4y5>z>o5eJTh#O#G|Q|6uyZR($i^MdYiPC%!|Yq4-Mwf7=pmV1UqY^W3-+d z35%o-8(olEX-YSdiDS4W*sWH^s6ogrMIkKWz_GJ-bdpHJI+-E)VfgLGxIVvTdwL{x z0;JFf9xok}ifbwMLB>J-biemuJ-FELc70BE0innpgy?S%o_C`NEJwW6g8)F=Z$}JE zD3|I_o~$rPDoN9mz9|U(PLfdhc{)yfR5rnhjJQe3#~gJ5y#l~#p*N1DfhVC}K}+pm!Ofm%p_+UzXw&LVa0R zzW0#@q!uy-2qTH{m3%uAx^PbMI-K_U&2LL% zHn(;L;TdO|W2`vmxV5=wYjgM-z0>ie?nNjvuS+dmvV6Ec78$C{nr-nt!tjIC&Qvb` zIyHDLEj@s<2~Ng5m~9>LxO1WQr-PjKamUCCe>4z#olh*>;>bZhQw7-m`QlLWSgit@ z{c!;afk4+TSyr>qBg#463l)4L?76ZrR&{!RZ}_qudkL45@X(&n@bGYk9g# z6AU=q@a?;$w3NxyA2sF=3v(#_UDU^VAHsJqO5{S9F0~s9W#4RE~ha4g9(fMcVSR&^@kB<(o|N}m;AW6BTOH3VnD+hTd5v2@ak|T?QZN}${pnZEQ&wInAM{iL?>$NWl7vtO zAhQ~%w}ZO!@SW8pEn`dq9BNswfM%J-7hd`O4n1^_$A*%e&Y?(pNfum*-*}I!X&EV_o9uQ=F*7ftc)UNOpAiopNR;kK zu&IS+JW4a}ov1F_rI@GmRa-G4N8&z)u|;jQOuGj?%86X*!c>v6_Md-obOCK%rRQJZ z{%moVDc=Ww<&3V@h{JqcdM1jsudaF zparNgnp(GX(KK@zINK?nXLtN!zb7Ka$!_M#jR_5G?T-vbqDz}zXZC2$;o<~yLif|I z{9uS6oO(*@i)Ukw)Jp4EerO_sS*;)CG|J25GA{*C_tp*OS^;7gP86-9=HIjNh6%Ql5D(Lhh3jj}MaY z@Oy?jTTjVaBY>T!ke5|}KZ}GULIFqvUkv@t9ZqB23n<|A*Guq+ITt7WH{9%Vz7m=U zl!#48GIJ4xHzqp;&b-kJn%GGNd7GRQsEI#``K;WA+*5*T_oe^wt$ba`f#mICwTIp} z-TC0LA;$s~w3~pc=LjU%8rk28nY6dj%BIe{{o-#V;5>@JVnOX7o&3QFYd?U7rAwPn zW(yr6p_{xzIF?Can)2;8jz)KMKx3t9|GwP`KRU3AZxS8RB-5(fR#4e1!my)XJ7Wyb zi3Rhw1gn$5^7#6kEs)Es=E%jF9M5e#&9wm_MFKXqYlhJSc%tJwF+QwsjW{)CeU7~e zO0EiJ=ni4nbkUYA)87h8?#sXT zMgjH?e4ZF7Iao6PqD-^&73O~G+6!pu)KPs#N2F9km0JGAU2sNSkIs*X(4sl~m`dH~ z`GYanNdg7PIL+tj_Q4&K)O`0|ZN9r!*4QY*_nLMBbaB~?`%}{Tb`m&v0bdIvNfR1an8WnesE45>1GmMgJFRhLm;*$`=}o zwoxn7Js0VVZV2o$wMyZO{J=W8F#7U2UH_&aL*giLt#Abpe#De9{C*f$%A8H3UY372 zbq^Nd!_=}~2S%`H%2F{yrH+#~XU0W?UbkH>(--NR$zgdsqsLQ zo8>U(&p&v3xk@*kBi)E*O@PP@2 zq2){FM|GB#!!w%BuDQwVe7da-k&@K=FA@h;E)$X|XsaLD=R7lhg%Duy!0sLApRj2U z>eUSgMtIXDfy|WsRE&o3LUKV~yFno`?<0D}sm#x-r^;tk3McbBks#pC5F5z^Q0(aT znC=6+V1_hlwCC9`i+`)+Q^9|?DI6eCk`>`j zCZ(l_oV+hFuzoEpU^HmW(%yXSGQM^uR^uhupN;)It!Onx)6iMCW?5HdRqf}b!?@Yi z?!-`o64IECuuer{j?A~)%;qhgj*TU+?763(f$Yp`Z?*l$i9 z;r93ee7uw142B1w#t$^BkfKN38uABgigo>4lT@U&V?7f56cRuo@NF_FhJO=hGU{F$ zWLv058qVxQM|xdT86>yRX&nDrM?(S2pf?+?b$vaAV4)wb_^hW6C^%FSI8^NQA&!Wc z-KZJnOX@eH~LYp~SKG?(pqn!IBZ2 zjs2&7ZoUPmmiyW00!jf$r`vAIUmyD+baSPTMI0I)@Ypk0fjmU>XHR4TV&+|f|M6Mp z;ekA%XLFwR=h-0!ODVMItYd_!QP^d%kvP@y=w(J3oZ1Fj%v+e*T8Rw>P@e`0COuct zTbRxJb!M~F@ihZE00Ezlk)>`LOM)j?*es=MBa=7*-*db>8v5BN@&psoT3LDar7;9A zfh`nR*?XLZoFE((RIDuKa%ylw%mm6ZTdaLwb9MQYn2Zu}lHmG!uq)6eAWqeYcDi z0_thV^gW(Nav9@8=r<*rkk%LyJoDGliu5vE3ljlA;U@##cX~z&G>i{llLxyekvQ==<}2vOg3k^3M9(w+xqADyF3}{j$X* zudu3QlR=XCLub;CjFADaDlKNGINLQWB<_MYe+yIb#a=w&o!!x9g#3`F?ekK!u}QxJ zGpr9Qhk5R+Oy8ah5#p=pN~0v^=ZA#J;E)}v9ri`K+uuLUiK72uu6i&lJwE0nVEy#H z!N$c45%S*I>%TwjV>~pR4Nh>DhtgT#&L|^}&BDaWisVJ0b>2<@a&|H95pX_snBms; z34Eh5M!zeM0~9C0M=lLy>kNTRqL`~i#&EQTs!Ika8CMHlH+*7=B4X>WetD)|+w0wb zh)FB#OeoH}gD-WD+4cE{^69J26oQRu`(IMpGOvLGq|PKC=Y)S^O$S2zK$xX#)Y%a$ z_Pw@(2?PO|yvYX|rvrIIkK0@+%*H9^eNktcJE`nlt}%;uvY%!TP(`>p25afPh$bkM zKmRt&^a)Ul&b8xLZ#IxNX)6%stsz_KV>|nZ5H}Qr;5IIR#-;-7eCAvH!hZeF;M!%%4yS>mDyZYWSrJ9`hgnOB`o=eV^^)I4L|C91BY)m$8%n+B zvL{a}TavO_HiO7~P~`!OiSn0m-^V8RS;-uG&dl87d{-w0O>-~;)0`@;_3{hL9rXG^4$`T(2dwY48vPhHaNgWi` zESj5W*BE8tw_#$&PNx~Wn)5_mM4TU?VMZhZPQ*;Khr8?>KX=bC(k?5$>0FsrfN@Ws zhJwEU*s;b396`(3PWy3wHA0isUh>exjA%x6CD~dN8Qa)glrmBpIvOdvLKK`7kUG_ zmUpEu9uA00r9GTjz4C@2odJ4{2WXEjSfh;i0Kuh9%}gqlz_)jEU_?MtPLRu6r?Y*q@VSg%wOL=N62y3MtU~sMp3fntUleg zN9A1#9brC?H@tqMR&p(=-od0g!wyx4#@!gJxD{YBxtf);Poz|`oC$b}zi*(3Vao3y zUPnk0K~M?<2WqWznWS~BuS<7A>ylLeXk7=auI$MM5U)S-NP>E6Nf(#$&pl|&N_J7f z9!rsN;w{;f3n&5qd{?uPcAD+;cf*XN6vw%^1zt64vdKeIFUQ&(i}UZH?37&~B}Y2h z5j{_g167?$H7h@zBFkF9MGlfUh9$j9Z_za8yevK#dC6-d<}GU7v-x|(j9G8yCWsK` z{w;3zg}q^2rpqLj9~=$T#W{E+JKi5gZ;uPs<+0KAp@O3`E1tY0%&)~pN|CuWR`sf7Gd zohEh0*l_Px-e8${r{~h5*#KN>Xt1KJ>C);cYINzi`aDlw)^da$C-}de*!!LTrz`u2!T?o!^9tQl zm{-;pyy90Z}wN;HdTO2XdgN%Ky1^R)uYu71RD0PzEbL8s1wNKaHPbD972w#ypj7H zK192NmfL+nwY)dpLB0(3DAX+FRMu|<;g3g1-Vep|VJ-&6Ua;&?0398MtGgsnq*bv& zUyQvHjW&sEJQnphndaXCvDq?fM5J0hT(QYz+2OyAP-sKE)1TO|c>oOv4=m{Xa8;vq z>o)Q$wDs4%)XYd)d0dvh^V*w>>_+#h+iarDE*R6;uT$1MolPL7aTN=EH;dr3TK`>( zvE&+FBP8yaWpB~C{Fbx8(Z%;jUto0ZTTsL6VEzQn5uI9>V=PsO?(d;|1zDPoCKB^r z)mp1LF;A+lUP`6swO$YNeC||Wwbkt=<1x+L#O9brG$~GM%iiBF55Yt-5eY6M)R4^X zLs}VX>7{vwi-Y-K&K%K+{9avIWwAkiB_3G>C8zyDZ`vMe3#&Q(JSn7@BRYfW>S+37 z_6TjRh}Z7>r^skM&%T&mz__LO`O9zr{!smqJ|#~cZIq?qU6amrKQ1og>uYq0heKY8 zz@g~FV*LqQtLN$)@on4|wc$^0(w&Tyw?)p+)r{%?sM4!T**@v(Rb*Ds_i+_2pG!_m zIbpF`^!0tI0NK0{+?f+>#cynX^BeJgiw?O~y%bEEmRcj9&1X$i4clMQ>{~DY`g0;l zC+B+?gq%C_zg~${}(04Nln5O_ zb#4&l?21&0cQZ(}etz1)r|y6CMnQGHcM5O&M^+&N{z*#&F|jL=4-LpS>pQyUpR3!r zCJQW=Intr!O$*@Kr8p&k!a7Jpu|zkCO#vAc@-uMi^fvLB+|hYoaHQY5pLs(@ZenQK zeorIKtMfYBOENGIVR9Fl7mWo_m*(-ss%=rX_Ln&B^=+NQl+&H~qodA+t3(|*Hjo#{ zX}-rG0o9B#0Xv$_7Qfr@*eH1a#xu?5?~310Kn`(PFd1!7ERtTj`P>g2*2;NCsQCzAd+cfBh`6&k}-^Gg!xZt@5lDHaDI$# zkGxNrw4vef&PnB~Leg}Ve)@HM(K&jFjG?c>RJd`-{ri;l)c@2ZY_wDU(Y3C`0{A^LUO#kBr)t0L~1rw8{4m~Uf5@V4&I7A?`0qN0}} zbD49Pb3yq5@+jEC1wHWd=-Fv}evz{;_qfkX+I*Oqpn7BU2SvXA&?K2~EDm5}C%MAj zk-+B4Kfoubs!1^vX}0uQtv}N@y_kb43GRD&`jF2*d0c`-xF%%U_7Sv&Zzg9ZY)-3U zn7GB6s(*CoQ~bMi-Lw5Y9JF#l>CUx^tWw7-l+#$*jc*B+Z6`yPgu(R!5cvl6!A!c4 z8aFo5sdIaKX z?i13T@SY^|I$NKmLobfwQFul$b;q4?+8^Za-@T(sr4J|L*q}_(~iL`Q^xZC zJ$eGzIj{wm!VEDNb_da_wNIbLY6V&=uJV?FR3jUMpDULb3qMBq;ye@W-#`R%wmIQm zw!0;=`Dy>QyQQg;Wiqe1pEhHS8l7mb^0Uhf{2Uv}q&nWAO}cPN+Iw%Hnhoe^ImDe{ z-#T|$1v2{b*Mq0&7n!v7>bcV7v&4ioUFPiP*oRtVP&iIUHjrIWj&uqeCVi(K^Q4hr zxny^{mpKwJ1#m6-Jp0B|*STHPza=9%vJg6yM*^zxnuBX!DrpEhS+rFOLz*bT!kz7s zIlfr=XWu)P2!p0nI4NK6%+};P1q42@GD*Vka}Q4liw!GXMk5KHgW95j3`&|09nY_0 zj@25MB$IYLxH>tEbM_0p>U?cfScylVJ13nGP+rhjxJq;VooxFj1N7Sne8cP=mDH2K ztpn`3bLcGf*^!QuX2XN_j0t!+BZm(7bh_xjc1c^^^+@DIe4c-OjStzUQxFq~1|qpn z=R2#XoAIrKkJ@_sm%785(l8h-7nS7c8y|J#dX+>%VRW0u=AGB|=^cgt&0cs4kUM*i zSc98{E@DA6S3Pz(8FB73lzJfN+OCD0hifnojQ&7epMJ#^C|6AFs`*3l#o4`BHh(_1 zw1^DpV-jChO(|K+rew5BXa_RAN@T!`-CQeg-}~WR6o*&A_>ky6;#T9-#xe=+$noc< z1=pfV*o?m{ z6*gJidPA*LuLVi!%TP9i&;UTEJz$uBNlr2h1V}CY-vSc3FBkbRX(~Pq#v2=Zzs^m1 zA|h9Y#Wug4&R>SQzmC*hs^E^5u!CG55cQ}y3Q5LR*88d3^bpdj`01%jQVVxGeA#2PNuB3UZp|Q)Mv-Ye@)NHCew^B?eHgQ;Yx7sL7ST2{|JVqW54cUZvcrPkX;Lo z0^Gh5`*RU7ac@o0Sn?s<1UPP8u`%gdyQpz1bCn znI$K%8JeUyAE1NQ)_d!1&3~hlq?c*1@$kW@-%yb;jo04hAo_$jmNZ~mUTPmVjn5ky z*TNkwh9SMW(x0*cJI@yqlq~z5K_fTWKq{s|Et9F@I)g=7n}3(Ce=qER$7OzH#qc-U z;nWFf#I<0u@b1UzCtz0T?V%)TLZn|8uEd#B^Ox!&9F_=<*tdB(JTWJ;2-ew7A98DZ#1W$T=PE6!cTBD=VPtn#Fo5H7&BameALhtBY;0RUC0`UEHfF&bv z1|29cVBRGf?f9}2PFG#(vmLB)-P2<=KD*`!LfkST2S%D-h{e0=Wgv1N_ZQwo-zhjLvAYgGkblz!z4_uybM6ak z(cv)aD?G2^o1G~V{v2l}$&Z82<_IAb>z>Nl_#=& zL2GPoHs^;h_YCh8x+`X>M|GfpdEH<*K7K??VBD`4y?Z(c;-{RtZ`_aUj9)^}G7Jm5KS z(l{I=%!cxNjVSN+YjNS&8Dq&ww{?aw*_^GV!{e=hpS*5JUkM4hfZZG4(}Bm&UBr7L z=Ij=LW8YM{t>(t0hO)?hi#gTj5)_d7=u}T`mE9h9f76^B~`%MPNJ{#O%mTtc^?%aLgrOk@{efNI%Ul>iV6&X`9oM8jYT)9bj#WaP@`U2l`32 z@rlwfB$Q_{X&@REV}xCUl{h&L`;?;6f6SW11ccJt0XyyFUrx%5IZ{d2_Vi`=c+&OS zH5WLHrAcLS(6^4&*D27oY47zv=jaUO%d&4d6hsr2$jCG%+^zq^M;x(r92umViAh8b zh)!@j?XYr-j2=rNsbaTRDyz@0%nCG%gER9n3*NL5yGx3fFK3*!iA zCiQmyMg&ALVI$9dId>BkD#AK}IOlZlojlFN=VKE)7B$Mw109(%6viv9%wu1rjLoFV z^yC*mt^{Sc6dzeA-jH3xPex%MqWL=#t`Qtni3$sLTf@d>7W zbM^~>YN<-H$+@%NqvS>2{d|5zDBR{vjD>0#ran1h4TnN0iA)%}8iqnLfn#5QqsO1Z ztLrhXsHq=4yo_G zcJimV_#_q8D`HVX-lm1;Ov93}S)4+^gSu&a@3&^Rx-DZ63A=;j2!bFihzN zOSPCo8p{|q2&>aF&J_@G^freT^~dtYPyRo&2)k*U#JQ+o;-c$o3;Dm zG$t^L_A*B$*Ny0+S)kVXlS3esJ0{YgIx<=lOom;Jyx&i>e@~*w0@PJ1vsZJRJVt6^ ztgcK>$zSrv*muoH>5^OvgIS)>KBA&8WwX}}O;K*INeT*(eAk$Pv^o$nnIOnVH&gUA zubsW~~|Qq>gqkTy(SjGSo%L`|5SRpN;<0Lst+HAIr$f7&j;V@WO*%?{GI6@09wC zFf@=wnX@a^P#(`}mQ+}{Q%r*2^(-*2P#Uu5oOMY*+|~!dOEz6QHm63y*+1lL3n~aW zSZr`nYY3@*+~;bSv5!fZPiL;Jj-z*De$B0si9U{um=&<3f#zPNS=1KuaUn~2$&@0! z>HN`7D_RlOD9eLDqFch^E2f*h7MM(gvCVy>9{b)bPW5yAIou*DlzTtRG&qrWR~`+N z$evc#J`Cpq)IWJ0J?q_nz#zdfk-FDRK|i-PlhoG0a?Z^~oQKRmpn=R~qu7&m?=Eni zOO-d;cQAM59lK7N7!y1y?*LKfNC9uTwISiVlj+`cO%3JQMv?^7KI1L7v~pVscCc20Bjg!!XzT<8dDJ_Wt(vZ+O~&JZGw*m$1xyf>jxnu%epz4gl; zH2SP|)~)@fpS+!B>u%2<6X}3%V5H9Fh89%G3Uf|jP8~z_#xKi$18^5BXjfuRNw}2FESK;7-=6tz zswD1=z}B@|#2bkyX@vtxkMdw2&yg&9a=Dp_!zIXfr>yb(eTpk3V3VVzWfkm3R^kiG z$VGov`!%weeHUx}*vd?c2bC%?at4Y-`%ZVWo#-}|&GSAoA|q7XVziC|ew@29gc-@h ztNtoieU?NHIXJ_`E`2Q5CA;BH2HblkIV8cDrQ3`HAdkZN9pm;(_(A*GzLMCvDwRZ; zP|{^{2m$#~k!$!bd^#Ze?U_pTj?YzWv-jq-j`w+G^U!jDs6lWwPD>#%|91T|SjXtO z`Q1Tv``{vVpzLFJ_&oV{rfE(Kt+dIQ#ckNJiwX-gWek4-{pq4}^p->p~7Fj(SzL_=i>c?~2{HL5L#;PZs zJBEt?TjC@!uN4fFW~jNPE&$bUmI^MF{W3>>5rDmOwby%?(HyF2CPG6+WRGmV4N*NuM<;)HCL6dq*1{%s{yG;6QbEU< zG6I>!sOx!2JCS;b1W#ap3>9?FWi!3w4mr_S7=e9eJ=?&dJlo`F?z{vU8WnZU z%1V4?PfF}tmtDntoV_yCk4x8ZJ#%K*lDfUK;rvFyQz*E#?t}zYJDdJfoE!1w8=;!W z#?1ll50J^Z+Cmw2sOkDGz9C_0bRR9X=_pB4(cjV|2wgEVj{rlP0$A3fNjVp@cf_(d z%^sp9;h(}NK^&BTIpiwy-m7F9v8B}RrWe|-S6f`Prs`&p({&QCTsvI0tF0d*a9*GAg4pqLny za$a!(>TCXA!Q*KKvDC8t^+Vqs1S75l^e790c)O$risvRu2}dKGP!YNFqxX2+^rb<( zk?#ZFJx-X=zS>?I;mI4_ZkV%T;q5veX#QXv(UwCiiK^`rQvr&AhQrWs*AV-OiB13Z z9>o7Yc>=j4kq>xeXFu=zf6<12U%1Bqf5N|lkk)dhS9G#BUnZPz@~m5*x>93&$*41@ zH)vuIi<^06NUGH)byMja;GXGxl&ny@`EL978K2)-z!yo|yeC|qg}Zf9?PDj{lJ?nC z*KGLS;&J1A?+G=ncxRy3ofFRX2=jsXG3euE+1~@h2~rh}><;MzAQh(%O){@Mvk0U2 zsvA#|W3!?C`d{B}||zxeFy z9479Rufh*|V-VO^`8G_2*^#|*TB@Q<61RW+~BOum3^}%%bMO>`Z?xd z->&$>f_U~^;kHJJl+#g zSTG{tr9Fmh*6=>U^5hAHg-n*5bHZ6T^ez39Rw77>ES&T7pJ+0jeBXL*_f;|^kue|a zq@g;>nFNDbs6Ul_{>htOJd5{w5`75w?A|mp{#$$25BwzG%u8`pp3V`&CfNlA9!p0x z79QE9TCkq@4^b7iE3;FmCGCY2C^#pqX2NwhFy2#4?yt6T}9*zN0c z0+!u9M0=~NMuEEEEronPBWI?@A)`y2RVuuTP|a^q^SMy%cdq5(+2V^LbQD>}ubNX@ zi;lnGoxkF6=|~pMdB~+yb}4t}1WeI37htAtEjiM-$$-L?RcBg92P=)@xX~5ojFBcG z+G+<=snEF5WtZ4!5xJ5;J`1l^nzcVX{o1=d1)DS|yP<|pA0){ufC=6i5tISU#y|e? zIfv8EVqgAPug~7prr9+#e+s!#cI-^qBvQYcVx!1hijI4ErYZDbm=>Tv0VaOHCUqH< zAar@^nl44&lhdwvWQbr~Xbj;qIrziZd$jsqrO$3c!>;S@>#y#=?QN_}{9VbtxB7-uY> zRB9|Ws`6^|*m(@2Onw^F@y9oxBH(_rwYVARb_2+{qBbL%$Yw@y5G@R1k?Ejb-(3FCFQ>xXC(1Xx!6RUw&FjwMbon?~G(xNMV}uo%sz>Uu4(oU1XW6}cu9j*8 z*$VbT6D%_29ctU}d$}M1_*^EHqvlUSZu0?D7hc9NtS%_0#JG|;0vVBL*pTl~`5nsQ z?H3@o$Q>?p7_)VJTFdw6HW!OGu3mD8SFV-GsazhxQ>uMg7&ja5zUmyTDWX$yglz$_ z#h`WWRW6w+Q~bKnSf*P_#IH098L&p1tfo)?MU%#N90D5%n9xBH8!c#KxSl>x>8#X^ zw=GaRnB`EOKVx9|Z1(n}fC(Hh^`xKoe?xRc_eMlSn|OIlWc0O3p~IFAdpKx0eF?1m z-iTmTb|oG>heY(mLD5de(E>~cqSK6<6}3?fk zYUwgi*LSJtG>lGD8hvYm0(wMkL>mK|u<=NZqR)-g;FMh66kxXu#StCYWM?7GdxjH% zsKY{>-2i7V(dnAf_<1}Bjk^a^10m@HZ_)c zHQUQpA#r#;#K@$3v~mcN9$)iQ%Sk^#Fa)YSUn-}oTm4MMtZzb!8V34jZQW#4y z`$IY^BGDXA)ezz;(rFmM`LVfH3EPnd?aceet&Kp7gNq{|{bO-HUJ z%3rt@vls$F`;b&;)?}d=LvN)fH+*ppKccX*IS=HQMFXadm@PIU(Q`gFRs<7lBVLl& z>T-JF7Xb|-5l;rA8O5zk^-`MLgQsPlNIo7^JU{6&;fQfT4PO)HC;UpUX{UoPD7pH& ztL5#GjgxRu59`40%3^M3{95ybe~gtx?4O$wmSo3;2JoUlIiSuGj`cc*(+tdhl#TNi(E}X$Al%H3}$nr5Xt$MrMn`k1 z#+%#tNg7wTe>wMk@d|epAS|Zff3kNmBz25kTXYjV(f%Ws-3y&@wGQ9mU8Hx7g_@Y$ z@2kN3TSMMgoTocKnIpH?#r}0~LjH~-x|w8d=fJhK2I>}4R*<=`Buh(K@o!=+gDMie z-J)#%{Ns2`s#ZX|(C9dt!_Gdxvt*=Bl-44k`3RdOF#kI)@ivqgd*rf20HY*N*f zr%NsnS1;H*5&tVHYTu4Qa;MG_KZdMNwmm>|ywJ}rW6q}9az6ua7$p6lDDwiw!yGl^ zot5OjRuszRo+!B?uoWj-E2(ps;tH>bE#`13RNSKy-pKL1#zh)6zoRS@VU?&aRyFw4 zCnW&XUy(~wXF>0Y@{-QOPlg_~1Ujo0iMu?SUG$2?^g`N&B06e=88BTxF(bVEALp3} zs%I0&ABo)KI+WQA;;&=^GTQx+_O0QMD_osL&h=k0M2mWh1d~{&+@Ge#F)A1GtiBFG zz+AOn_bB~Zz<~wA7cAO*UGnGXZ)R*&5R}{yMiOUTL)xcz?$6wIKM7HHS>9#Cx_-W| zRdf@w=Sx__c_@fAg5vZ^CIUKe*pn07{KO(@7D+O9==3p6Mi$NmU#|+J;BgSu-EUDQ z8O{vwecs7?o6P6s6nY}pNa}Tkg&z=9WHoz?@uzvci9|Yx!aSETFaA`uzJ)}w@em+W z&AR2cj%v$=z8U8kILrVSCpN6ADAG#~pn)O>PbTlCjw6^PY1@R zW~6c_I^JYqEi!E{eb-b-;w_;cG35wIWs`~|?ke>z{oww`P65m_&tlX@(wY@#I{1aN zpkr}Or|};xbbr`LF}!|XgTR#la0rFkJ3g_cM$MK=HKy?)$`q4-3bPmjX*IoadY&$L z7-w0PkF8fW!PL>}1(V)w)g8(OdyF7B2B4@J+at@p#G+Ky{paUA&tT$rEWhxHbMrAW zif%dz+{wj2r*=B;4o9d-eA!dbhj`MZB0D=XOIr7N+-Ai9$`taGv#d4~{)^8~LCy7U zikc#kVr`z4vbA^~%*Fw%kBMhA+;q4*X?5nvCZE=iuz2QpuU=nwDzQ{TkPK$dUAj># zJ)z{F+B|3Q?(XcjE2}PAwazpDNlQ`U%U3j#$UgjHx;~e-c{=l_81JqUAFE;S0L8?s z0Gp{gj!HIo5rpfdcj>+@Rv3dRV{T2do$j<^M70-cX7hpaj;zX_ZWo;q_DeU0F=ogh zU1U5bl#zYoIjzJ#v)i!m`mz(tc~jon%!Q(Nz)J8lgX)9?`1NYSzrx!O8jGrh*1Bqj z7nxHf`kT{+IK&p(-gHG zcV&+k_v_}m9l`G*%3)DB9wyTjcU(=7zq9*5;Td71kyMj4J8^O+^?77AbDc@5#s5;o zj4f-tI7l)|r9FSys>x;|T`x2GckP`vQO?}Rip0q$rzMuAR}ouyakw>|gfgsLrptXt z_IcyUjMdsxMK>iYAAV|8W3IM%Ua~fSoPF17tYRDRDSTZj%EIBR{fTkftg!d;o6|Fl2)tdY4vk1N1;c0EUMq3*3Bm#u#oRBEGL^2bQ} z$c7Z{5ubrb%KGe1*ZQ)=K&u_WK)PpLeUOFmr7h%oL|v+a%hkr*fYoQaOIlG-4>*kc?prD0?3xl0=eB^D#gFTX{r_UAsaRCu3e;Wb$Fti zSkh?lqU<-sBYwTK{%KX9;VGZf0eb-dKw|Vv7SrZz83|A`Qjm8;rp4Tx+3Sm+qZ=_% zZvUW*N(fTUOzuNuY26X_;&^>a#q5NG5FOV)Lj;e~P+Zvb4GAJ8jIK((GOhCVBQQmO zUEo!Zn-6NhP0r=LwEy$<4E^me?L7X$a8Py&#bw7(pugD{A`3bWcFIbnVA5I?HOpXGI;DMr(p!PTOu~b@5IHZyi2AODwKGq?mr~M3dL6rg-BX4SU|| z!ZHkvN`-ZxodcBw-VT*JYSw@4N*|ZtkjctTU0Hd!y{F^k6cgT6p7he3~u%H zd^VER@$KXcZH&Ci#nRup-9!llU^$}!3yD{WsY#|L!pQxT!2FxlWaFWn0Cz&k;T`fJ z0dT1IO@gWKoo&5!%ZVhK5U=i7t{D-Cwsc;gNPNXf+iFXXGO?ht>0*!_%A`9vjGD(q z#{1Y7>fF)(rgb!OJNS=J3CRmYh#S)t+TFm^hNyaODevslw%4g`%eNy?0nQBP@TpF* zaAHe@g))bF`m;%aIu;Satf9AKjp3U+tAo80h6c%SQ#Ue0gHbq(gZIxqKo!%WrAKl< z_7X7n0o5zhz^ZNXUQO{lKx|tzR)3%Za5MNY(|qlq%s6@sTbK#rgldnM*5-$2XjI_5 z061FN#T-snoc*_5AOi~rQ~|)M_vcanhqJeeYwPQyH-8nZxVyVsaBFd=K=A;@0zr#A zw8h=siWhgcqQTv@1TRi-owV=#KQnVX*Ia~?oOAZx-?i4Wdi8Kv_bf2>j((H4obY|s zM%q?;9Kx#k8pr3u^r$6LlqEb`DTO51>_GVtowap4#x+_gHu_UH0ff-XBLWC|tCBuZ zW8{UW|(jf8+=Ro{Fb?SS7>=4WYnG=JBzEaWys9&)0V=tNk1WOHoFazdcS< z_Jw`Ow#G>n?xO&5CYY&TH*Q=@fc8`{P72G7XLv(RQ;shqhvTkWxwhOysST!r^Mi%$ zyxvsEX|8{FxN^F1q=|EpMw_`M|C*vC=eEm+74sO}4vw=4Klus$AdGTu01dAD9*MRk zEFEV|)tH(M7-CzriG<|t=xgj2E0E#rsMW(I3Hq|BqXnZ;bTxW~gk4@+%H?ki4xdc= z(l!!y831?FAw!Z@v;c7D@DP3g_+D8Z@d#tjZI+@D(^h4jkd)hLkE1bDaFlwA@d1-^ zZ!(FCX3O<}*T*~*nxj_X3*S8X`M^?}YSJia7;@;054){2-$I}%q(Lp4P z>2H7OvUtpy{|a}O45Mv6e8F4?H!gA+1ZGA&$780oW`cSe(Jk7Isf~`SLtr&+i?f{@ zl!|rzboaAxBO9k`@v`&WzL=#%vBui+=r#uTG%S8(ujMASLCoOFT@@6@&Zv7 zw+N?pGQKBra>u5fUo`Q3VIG(8jOrO3$giTj4!U&U!1y^W0lHRcUH6tkR+w zYKZ!2)m@;*eUP&~*^G<#1}Th}I?(_EXV4bCgxh2$Q0F`=;&1SVA`5q@!c*J9$1%G_ zjKt@Pv~wl|-!ri5@-m&+F0}k#R~h$iFx{NBi~OtXifTxo--(SKf&k2FE4*R21BvCc4!lZ=?sO4Tmo!bp~;zJn*qM|Z4tq_<6*53b!n zH{YI)2>e0IVNUx-{DtDQ=nYZ*;X87A&@dfU3MbCR_ck^?RLVMSd&!-q>OzngfYo9ToIXggLp6V3KZ=<+z( z&7IUFI@x9t5NKioya%Q#fW&@JMX$^%Q$yYUv~-rDzd78c_MZtV*KNx3ZEJG;y(m;E z`=_Saox4U?rXA*P;nfQ0Wo|^Xl?q5<hl)TckbBi^3+ypB&GH*$&YaBgz2&YiOp+DdP3hSQ`UmcSF^@53u}^fqNnXrt88 zMngbWo15dA1|9cx8E}y+HrQzCoT4#NZv`{-cx9=`|DiIFncJOSay? zI{wT7pFgLFTQ~rt%0%*Jd6rWzkpNzuZY}hylt2vpeD$8+dfF#d=BiX3)=^up*O(I} zavd&iI6C?)4j4B|edUeYlKp$Y?pfeP|1W>#<>haCMZ(_$kLC{?b`}hi4<6yMyXNP5 zB(1o-y2~wGYJ_AX7fRfM^?YyDM;%bn23U2A zt!==ia3~{**z;5s#%@oMqZna{I^{hDjz*r4=L`Pa3_v`!Jv|RjK2Z{Vabos5>KwuE zKyB)k(NJbW^74D1d((G~8Ga5v?Ukk{`p}gy*TH%oC3sR2$+PoQbv-T(0x$>!jNrdo zn1uD3)}J<~UezGyCXUc=fXw!~m5&7D*6fiKWFwkC4>GyqtDn4;)NlbBPDNoDdwUK5 zUOpzY-?2A)Dt*SvS1!t4fy>6k@&# z7Vo__$+EgoMVBp(0k1FD;dfFlSZ2Bv-_hBu0Qv^k0N>8H0WvGV zSVh_R{GFYr6@i*L+)UdJK$_&6;D2sB4==S90%_@3+w&Tu9&0DzOtGDkE4w07)IH$!@U|G^|R?Oq;oR_;=10j6mvvO;G(6nE5P;h z-QgkJOkv0GxX+Mt3Gc9(ro1V72$tg(LsKOpHplcCn{fPlWqGWoaU?7p2Py^muS=QI z8bG3^aibl3X;DYX$}w3n21BB6gyT-K1)i%fc#LYsTa}`+iBgqZR+EQesNxez&JaPj zT^`HRK5O^B9kPk3?pMIen>}-{wCJ3!f&MnfgR8UI8Kw&^qCDi*FHs`yG@(2m1n;@w zhl{sCIM{fynL>w7hk>6NWDu}jrV=3MsIP#nIPWJb3<4P#@^Qg>9z5}Pa^SHot&bT%#%OY+y!OeTTdZ%#qSKWNXdu%#LIXCMIY z`xWzO+KX{Rd*gQu`hE<PSkwmXHP>YQL@)2&G8^>v|Sg|5Yp zh~W;%Q({6E?#xMucVallj!7J|LtTIKi>q3*q>R+Q|lKZVUJ0; zYW2-3qv=YxxxZv1tO|41J)A+B`CroK4LrMq2C}s$#7IFeXbj~_QQNe{ zxfsP0;!SHel@%1!1d=|r7!H;ytZ+=@YM3?_|Bg3%uL&%$@*Fu$^Vw0>9+!s2ea3 zcymw37X)aj4%@FAk4M6TZx=l>mu-=6 zGMcO9pD9yiq-4vS{unX9%*dQ)=ycPm&#Dr{?W7GH)PAHs|c7OVrDn z0|oPyP-9{N<~%hvD2?>>LWkf`{TjRJGTShecqTJ0J5naZ^5xQ(7t(a3SvFq`B};-> z`5v_{6lXhuF2P=-{~mSYkobSi=YP}LP__TTDgKI%A0JWv$K?5|>4r=EziXQq;TE1A zuECJR?OxkFF?c#XcxLmLeO#TIx$mf0Btdze1RTlGCg&r(L1pP*y;Ln?yUdL#5qZ@V zi>az-w;bTBS5zXVOFztf$oS{LW!Ou&A>_>to)PBJg8+AG`QlL?dKN~e8)}iV-PVwl zcp!-I;nCTX<(Wo5Gt|#XoQ(0}oBG|yGV-#yad%`9zms{8V15LJxAjC4CuopB~~z(W;;h@rqDZ0AL)EXe=t!T$cF%Iy<(OZig$%N_lF6Ek%lF@Pmb*-$7H%6 z8<$wNT3&#Sha!u^sGZObmssgLKTI0uJWjnYR226)R}|krY9j{s&Np7()&sAm1|^0F z_agODJWAWQ^zRqzPXYf|u@GC_Wa}lG2mrs=1dMiC_Kbet6}Nk^8u$&5caCJ~;tGm7 zqe*-zpUNAm;`N~LRnjhy3|k*Xb+d+^wYg_TW%rY6KI$&(Jd;$VIG?M}9b~o&CfQrCXcit(5d`bWH=dfw2Hm?< z3ItnV+aG_IUdwvyqM=nCuXg?Dl?hZ~kdDAbB{0BKK*=C_l*0GA)*ni4o|U-6@2h(s z+us8!|lP=C|jU+V1y%qi|NX#QUD{m4U}*EWEF1N zYZJn?n3aAwjR=+tUL`Zr3SpS_?qH$iAUUnLOjcKAL`pR%rb#jympjIGP6K$0<7Olk zx%IPblY6Avpa?7TPxLVA?ZLd^%rK}z_{v0h=?3x#`}cRx8M^IPWG2{_Ld|}-8S^>6 zo$@g1%vgJ!lYX`78iPU#k=1pkAN}QIGs!Gn<&6JyXa{W`j99Jo%fwi=T;aQT@llQ$ zjGDn)JaXjgWDEcUrW>Qb9U?Y0L0Hbcntb5@bBp}_MqWG7^Oj|&YKgm408?W|R4lv! z$Z*5*{9u5s&7F`$67kTlBmo7*29$4HX3j#@5pK?cWXnA$poEC}OS4sm00v^G(b}ay zztW%s$8KBoOMTC7j^$#$%*IHSmu4Dl8p_)qW*NzibJhz3pV~AvzKD7)+yy?}iMJ*ycoEY1$ z7XwGljG9P%(kocY?E7%Qjb=^5GHjXIHA8u#7#YL~Wct(`T((YRE?!x57-cA$wMG0!3aR;+0IIWGZ5JG8zMtY%U8cS_ ziuN9tr|qAqT7E4^A-WeyZs|qA^PGi|F$jT)S=I{I3_H_3`3}$sU0))APqN&dUQuJ$ zT>$3>CL-F!_7WLYQZ&h68K|HCzF0*|{#qcBnRySYQ#osY7-8u1Uz#n-)QgyFSfk6f zNPZTaU#YXY^z+qsHR#9AC6$#TQ+Jm{=^~Z>a%O11j>b5TrS?ge2)jG3Z$Ao(*`!{O zAn)^u$^G@~X2&hWCR!R~^eCzeRiY^c8edJEbL`E)ksIMOV;aXzZ0S`LY6juRU%xWm z0x_w$m;xsSThf2TA|{~tnxb)2zoOY7eH&W;rtkT~l(0IbC(`*_n-}Tyy}2^Agi`~a zyW}jZj&{-Jftr@5GjI5a4^!4@j_R!tM|kzGHt9elY!BYlwoOO6Fqg<+U7GLq*i0~d z*H%Z~*jU{T%a&7fbqH+6>Q2_r$3WHM!+X)qnpz-AUvTL4yJ%|F*(vB^_dXJw;kPXG ztvU3weQ}f4`}fEuQ(^l%7aNY7t0>VlH2eznaX48okzF)n5xRsa--Yxzw8$mvLr>4n zKC|!EdtfAt7)788D)}&gDaLz3@#0lzl26y6^A&$pzEIJf+O=HipkN$q?D%yEP1Gb) z9uDt``G~PTjzTB~{k{>|+b@iCl9`l}HkWkgXQ+~d4^zx$9#$k~2L(g0ffU9V2o)F!bGh3V|@cOMF|YFM18Ku5jxKGsp& zji7@}n$yf5Fb3c#eOUV$z-1^8?f#hU(C8Z(w0SSv+lb5cn5BEpv>GB*IOO>KVXo!N=q@mm{lWmxZ>h6| zHJCY`Sm=M7xVwP;dE~kK(Y&}kS}p2IWK{gh(0l%ONpbf4^j+SweDIN4k3}3|H8hi( z%=G3qcpHDk$Y&gPV?*n3bRYFIkAV;$4QDS>gJo)$V28A?hG2hsw4D`93Kg_oi(}#< zxoUrHpRU@1VGufdY#QcZ;I&=Rv*@Ve2^-UC0Bo>MhcejY$xjp4(=Yk2sQzo3TTa^9IYI~y@aJ-*MxHMM?s0dFkw61bx)342()9fh8x)BlgDkkV1 zCk;(<4>AxadTw(ia_yJ)S$5QZNd6JJQ0%kr#iB`2Y5I^lP+$5nJ;g75H2F*yN7Hb> z$HD1oU*FAkqkBCdfq1c$ILU8+F#JC;1xY&r*B96(@fZ*0L^E$zS{BRsi9m-QY3lph z*!?H7_7doo@STXV*lT z1P77K84szZh1>0SToWO^&f^ks=c%zmAbDAhBF??|@Cyx0(es^YYJEPT{05fqzO{}9 zY{@xZX{>ROHn>+Y7@K5=$m?s6S2>74#bAQmd5Cb30`7A!PVx8a?$L$YLL$+HW*Kp96OKIz zL4XCeUz`(rR0bi$qXb}kQuT=7!eJOFPVY!bnWo!*YI?Y}1HLPlJg56h+jUk;hiq!r zGLE&`Z-SDieUb_r>ZWpMxEPS+!A1%>m=bxwu_;Nx`fRKtGp~PHneov!$&a`?lTB9G z)>``$;Y6ZlUT+w9YGpsv`s&806BYn+Or=6Vw?50Ejyi<^)Uaz-r4oU67bB7XnVQ#D z1{{${y=}uN z>#7&&xpgxlQERp*8?8JyEeDoy!R{zJ&zln*Z^*62UeM93E?EzHKHH

    &C0xcC34T zR1RlF(nvd6b~pHd-1kH8JZ{i`Bi!o-`wyzztye2O6d8;CCB1328DaEg)AjNWAe%bN z0wrh9JIzjPv&h(5&aQm<#^GCKV9zKqukLEge=@$_8n(9|B8&HC>@K~MDNyL9OthvS zDL3OlcT_(fW%AD3(%|{4B*N*;=47K&!aTc`LfctJRIrg`Oq0ZRNNvErn=WDiZcowl zQJW$jD{pj^Hm@x8m>F!LK>eAdK7A3Piv^#!?wEgJJBG3^ccH@K7hw*}tXmbZkwhns z>qsUNb0SlEuC)HDe0Jpg(1s|JlQPNAdgPJ``~KqNcR|rgdUWUQf*C*ZnmrJY&u59+ zrqvITOb(BVH4aUAco%kZ>)Ikhlv#rng@$RXMI7h?vRGy!zvA^}Zm)W4@eHs6r`Y51 z2%A|&?qZLFWR*Mc)vEi$RmAH579yzu;Dty6vO=P?hz65n%TFIOg0G5ed(+~<9>IE~ z*(TFj=GHC4m&X!0=y@Gi=Vb@yM%=u9M=`=Zcyhm7nJ`*$Y+Hy7W+m#ZZFv`K+yX^ZC%rofl9bkvArX;t?cQr(i4;reV^6>$TjS6>fsZ z=LMxZ*lut9W7ee*xuB86zN?C@9ftqQS*hNJ31NrC?kW`4#_qnO)y2!}_3$LCaPsec zFycHLKsr6UUU7h3lRBI!p7YP9dlQ$@%G3v-rubAJat^dXO?XZKIUutte!xRH##UwO z$r`wEnP#%T{0FS9AH3p7zryB)Lko`?T^S!N`@a!!%~N9!Tb#b;F7&X_x8nT~D&Amc zrcslgc;OZ9;QthOMCfaeTBNIJhjcfOJeUP|NSIS;rFg%V0&1zh0uDRIS&T5VFj%&Xzg( z{R66{hVTZ~^}5h7^h4HxW*IK3RK>m~23MJe-QznKGe2pPbHs?rtB9kl$tX}&qQy^t zQ2`hJqh+DIzsFEU{J#S~p=gbmey^+@aUrX<$qYY6EIXEEg=cKOr5X}RZq!$m4@R{5 zSBrE2oe&PV{(`;iraRiITP@Bu<{k(@QZ8~0=&t|M7BKlK22hMlytdlJt^()MraS<8 z7`=HJ*6OhfQ>J~w@=@)SWh ziIT{q~ zztOJT1rmOUcfr!hdjD-+5?H%k0!9P(W_~uEa$tTr;x&J0cx^P+_+?u*G8VKa20nRG zP+zW3?X^CyNdyrhr5e^@s9d<1FSDyxuFM?VJM&s=XEQen!uw8wS5|_ntNTR&dRc?6 zz5vEzO!JS0@06Q6laiAlHDA^lqO(`V&Ws-yeSF@IwV@Zrox+JnQMyYLk&1lhPc67J z0l;(sE!6vFk;9`)BYTrk#wP-%{I8N*bP0a?z=_oy*NdNW0L#E3VIEb3G^z!lM}RHO z`GBPCu1D7Cu=3}=Putt2N@^Ld=JarU=KLVDVtdO<)X#o zCI4OzZ9+a}mq8;v0|ZxaHuK0S>^993-Xyb7HL+7qGD$~-V~~E&Ml9dK(EXC zB5F%FiC=^o@dR{IT#Nim7VfHtWUu8s81$6Ggon=kPGQ!YewX@=Qkh6KeL`!`fXxYL-}bDI!1k-v~a4;FZ{))tKQ>=de=hMkj!ga^PRF{LM zaAT$Nm1)I(8a8=d66<;*l>;AM&4firC84r zA5&$6@xvfyJ(B1^sX{Vn@Ik>)HZx)RXd;~e{U=OTMHa}74Z$Xut58^rA>m^9C0k&G zVcq#FcWJF;D=A0Zn-=Ar(BM2u#ZW>Uo!?sPjQ1yZk`xxH5>8gG+sJ5nYAC6Q2b}RY zjMilZAD&9i^Gc=PaMxM${qZ~LZO*{RyJE2O>hQM9Re&)!qJ!Bl*v8)<@7XXiGoMRu zERX(SxcjMHgW#Hu{=+}!`qEZEfj@ zZBy|S+7;DriJ+x)MW0`Y^D%64Csh}kZJq|L=p@n*0+kZrC1dIMVt=IpG>?h>`{J2Q zz26@>eHWu{uc=};rPppZ{Ia{OG6BY3T)aR<7$_LT8SJp5Fp8-F-3=G6zb;XU($<7` zb^dJjFp$|3@GnZcaY;r2H>SEshTrg1_*ne$J%$9XxZ#jB2?=yCcd#b?(7p0o7Mkg@ zGfba7kxWqaZlRJk*dw^xSpU_HEi-fu-Wz%0E!T|+<#mBBU?S39>MSg>9A^&fVt0oH1J5kkJ)Nf7T)Rqb@i9aOX ztUr8p-|z{b4F6QvCDBJ>Sg_0{$)Bg7xY)gz7ey@WL)*5c$@i+dEe0;aBHhnZ_J?yZ zqL}(i@>g4bL0|WNuoJ)k{YDY(P%6M0eiU+)Vld*x%JK^9puL}J`-DmGmPFx8j)l!B z#bxDUOuu`1A5nP$&ab7bgoCV=l!NEERfPs@H**5b;V!vGHSyn3#u*x|vZS)^fBG`Z zyzOyeo}X*YC z;Y)eC5=4tk`(gtgnXab-$}zx)ktZpS_t&t}Gg9 zT~Y@Mco`vR%r&xqYuA>t#qypVgmV(U#syo1j0!{D_@)|tTEH#&8+99nHNNAg15f1(ZdHJy=1z8_0k zWkFdE(d70TidRJ(U`r6ni+h{9l6ebik)W;-VvbP;(#mZm;0Av(;s*ccqsBuZPq>Yq z8B_3Ag!;P{j~lmBT|%^I>u`hkMDRow2{jg#a@D zTRx`#E+5#(B@2g?@1q_4zDT@5>;T$I#~wHzKfTHETtDpZbb1w&n5s2uJD+Zva}CP6 zWg7+!(A=beEmUb|yrVXJ7&a^u)r#2Hm8P34(_|T*ZQBM;PiQ43R>h%DZ;liEfJGPb z^*3qa-nUOrjb4Iw*c%tlb}tVH%+Ji`Z6JH+Z?>?In>$ipmYF1o=QM84ixJ5MEJS<+ zm>m)`H7I!E(3dScaGoZi`PUtc8v)OpVdOVTH>hyTWPF<|6~nvzy{3W-DnqE#1kX65mo6Fw!=O;@MyaMQ3K+dIgT5GdcAJP-2> z(HDt53_1FRQ-?G|ZmGEFkcg-F4 zbb3s?GLY`NqRTU&LfUZM_OkArsZbx(DD8ykL>U+DgEh%=opiU#8UoGfW_lP&E?L`o z^DU2)A{4!){lVek)4=MJxUvKz&sEKkDSizz76h!+H*(zNKE67lHsG);hy{_rV$Am4 z7W$lI(Mss;l$ylIZ!!9)N6|&P@o)G*1CNnOggtKAVfp{0ZK<|@J>w0?x5#j-$F(!O z%OJz6n2mHZsKjPCjTNKH_@@EEcZTKgiG@TMmI*w5{$O|=WBqkw0uD1LG(NvtFupiv zWIq5L5H%^xoCJz_+$jIc{{>0L;loek5N;Bc)a{S&oDnZ99r*g*|L z)dP=j;_tyd3;c5DPpCq7N}>26`;5h!m$~QaUB+ySnwno)ju$EJi2lxJnJCcV19v<) zN|BX8imnO6!F;dCwcM~R*)^lFZu2+#_pJmj{cRvbkNkm%+XIAD9bRiGhWmAuLJfG! zH*UYua~(yh+vP`oIB#bHyT%2^%qLjYKU(6jMmHVyz^NyRDl|`gZ5&^Y$I(v^GfiFw zq=4^~Xg(xTvz+nlxrK}7U-l`*`F{>Z?0=yLDFLWcIKSARg6;bl5}3B+E2F{FCX-0c z7N^{B!70Cj=?>BrIf!I@1#RYfjgj;Fap=Djx*>e-x^S6)*YZs9cL~_0^r+(t{(;I$ ztaTE$JsWU+4lFNa~$u> z`Ksrnm}g}tyLyKa8nMVi?3!9qtswS(x6NH&=RW*NDl9)uS1WiRGZKPBy04Vy)$F9c z5i0S1_NQ}i8IDuP0-q_vxBC&Btw!4=1c@GKgCaw+t7Micdmw;E*Z-H&Yg}g}3%{IuI{Og;OeAHg^<aomrecUwTn;W0JSCXN7Fwz;h}MlHra{Z9{6O@r;qf~*holGr)=0D2lZ<`MmvKe! zY%N4`u;tQh3!3=GcJ6ige;7byT7Hi2siAGF&3N)wnb@RzO9C~lQQ4ehAK@peI5hCJ zrQO0Vz^jQNpVK0F7rp^5+rL(&)^F1Ll`faOTY>ga0~lk$u=w^r751?g{(3zc%*jvS zUV=7@c2PW$5)?bF^xLAkn0)bA792}cR_tLOH;kd@nhhW0fb0}OtJAqgYT6Nn`ZHAq zZAz`=sLA1y$PjEjDPC5;lx**?j|CD|)Y@MIE@;;5x8xvmnnDWD+ve09^$0VAKV93m z-~cS*rjdl4-mFf;_UYATy9>rIE!Q{rZkVU?TYD@#*B}4(Q zU8hkOkB24Gf_WTS6SBl~Lj0*t;nt#ICRdRu-%5Qu1yd7)I6?XN<@xYI6`)DVoVIX@ zW_1eqGQ!Eq6L?&8RXkdQvp?6ly-qw7<$3B(L}a;Z8)X04*OkjE(R z2<$ecJw!B`mt{!vs!1yf-p6q+Ul)N}emIYFifPR&EAM>vX1YE7Qw}= zRXu5YBK%DgdC09exAk;;6t?HcRQm;241jdIKi#J=l%pY3bOxeO917rpXoSBh z?)Nw)#0gOEOAoyojd&eLGl4&GlerWZ+nfLyn%osoHc-N4a(g#47Jb2 zx8O$FmoXu_73k*m|6?tV)*Q?EztYEv%m*a8(mBIt>i< zBYiEHL|2e%74MR<|Da*C>}oL9`j)XsTKxo_cxSyke6F}9m)E35=F82aA3uBQ1hhXQ zO~U_`L9`JA)etiWj=huXja4flTTc~bV!={<65908p{Gv!g%Biw-aBO8!5U}%GKrPDA$iai3TgF{6FnyZhwQZOlZM-MvKfX$%@s519*9FE+pOdR9pEo_oKv?v{3ffcBP)#g() z*fy}G<`+C2sAf=m2C_s~5bB=l7v|~QIS4cqdOehox$2bp^)0RfG_#Rd5(T|=d>z+a zp69LicVA_^R?q`gin?9shY+&ZLc-V#DFdYQN*H ze{QNqvcI>x=DJYZKueUA)qYY;_F<*7A`+N6w=bAIZ>-J}yyp96g*~iqJzJ@)7&cWc z&*8LJ^($nlwMMlo+UTxq`YfL;u}nR4FWY8((5wlWH|uwwi-Vuny^xWob~GOWBr)@s zFmu?ErFKK>ZKuxHlK>Lfu0fT}R=M$WC5=U~A@zKFLW`C^Lls#uo5yaNxqB;ccf9`3cjTBq>p~rIV<_SgGCkJ2UhnH?;Vbj2jeSCEuYsYo2+`1 zt%5mWqS^k>p6pd*THd@zKcjE^T+t?;5QL^j&Q@6+&U|BhkI*F`LG&FZoHD*@Z=0lv zqgCOKTU~o1P5CI;UeB~Pp5K9m(aeAzd@#Ol!lpK9CNfXjb+6*tb)r$Jr@T+8OQLsv zbH_T}9yvAyAHWgJoa{WhlxQTi`t8*F`DveNCt+W%5QK~*c^IdcMS>hZ@t|-k5hcT< z#2*V75Q@mKoLYm|DG3XuYTg0B#zDn7e!;~uaD&6ihqeZ6Xpb_GE?m4Zq})QQ>YWdJ zW5;bK<9sLErc#U{hAFzXD*Cu;mA%S-HByB*7)qwMZIH4|Id8HkgKILx5vn_pY|%Tk z*A$1mroF3OB{zeKI&Jsa%*Y?c$3CXx_fx*5k_Hm4P_TSgaNvwq$>4KRB!;e#^Dvu zKc=L^k z`r4(RH#TO%SA7|CxxHJztQXQs4kp0G(wpg4mM3J zHtbbb7V%D9vdHPR{PnJgk{c(7Ec!!Ja<_5E*h7w1?yuC|z}0tDZc&u@P74g)J9lI% z_)i&bneqi|Aek8!a-63`ThP-8@Jv$;-N!YoSrJ5n=dyEn6`(|G!pM}$pFYxL- ztWS__xw^D`Md|O3S?%@TX+H5Z85hB6j>uHOl@|x<+JhLllQBmPe?C~qYWnC}-Wjs+ zZaQ~@!A&ndv`s9=jnhx&$=*hnn8kaT>RwS%M%+4OzdMw*q#5YOWoKbur?GwMmF1wc z@Ix|6c$V{?-V>Ezdx^iTC4XgXI2ga=(SqH_eE|7f6_=O-bofIX&$E-kj5EAF(1(I# zEvU#r+wzf5B+kjF{_2@XU9Dy3h&bT<+AE6Ek4^d6X@@zjiU^^rTsmJSWQj74jgAF4 z__4?-B*L_q9*Uf!lEE3S-ZtPdZ}4l!En;FzP;@?H+yXXblB1Ql$#!VK-+j80Jc@Ot zQY+Zsof7!pP48X{4w|2C`V%g)0GYYwY3cU4R~lJ=nMR|m;h&`2WJv@k=$s2_u_^@= zs^G6p+591rUsQ_y9c>mw6fB$aU!C`SjF4IReih4?HtEf{X~g z@LtmSS6l;)Ga=32o(5OUQFB48O`toTGGk&E_XC;iWmX|#{O%ULETX-YuNX+Uq0VHV zO|E!8;e6k4(IN9{%XELDB7JE5F&NPx?F(%&t2fb<0{k`Yg~7`sw`4PN1Tk#-ti4`< zB&YYZdRc7Gx*0MeYY((6bW-czcvs{%OWlf>Acs2l4rsq4#iM2uznIeMOl!$IGpeNT zoJAtk`{r`3L5@IGM$vK6y`~9usGojlMRBu5;FGXV)B7-M`mn@39oXWPYD8=741X;8 z#H`5oN4ZysF_ixlWO9snyK^}D82Sl{rac`vPno%#u*;bQ8jSP!9+Y`PK2LEfP|9^- zi_>&99|9`$&`pmxQ#y!GWSNS!zDoWA82ZY=htR~D8u|;Neu$~b3aOa-_2C>h;Jy^j zIMa64FQA*Lf0xoymrIT+;un2Gf}1M|pnxXzHLDG&R;k+K_l#$JA+ zpFn10tX{35rvtJ)FP>H%%jqr9f-<4Of5-@Ji0$arn|tOXsgQ@t4r0&8?8m4jeK=A@1G&MH+2A-5 z=0ieFUUy2jjn#qe&b57Dn*^z81zqupC8%&2z&V)}6bJ4jWrLEn4tAofop~3cNyR{% zrNk3UK~C_^X*eUvKZVCT_*ETkDtVUkRHvV-ez^)2+j`)T?EsslI~NJpfmtYij-H0S zljDkfy4Ve`@BGH^dMxDC+&+Y{{Qfcos~Jn)wo?V?SHdxi-KtX-#M7dp?t1AuK?U`V})s+}^U(;t2z)cz5tR4LJ1 z$^Wj=lBR)4>U&pjiERZbQl0O*H;J9DBg-yix$HHz6+l(we)B_fN z!^WS3PJnaLcM>{4RnT(7C<9(I#V9iqoo3teb{i8049&!Wn*v9XCUPO1=s(r{XjZc9 zFQJdlZH7PtfmmjAiTt@;Y5UYmV7fqHjh4T~@6DjuGSR3YB}~VIdx7(Tz z&=}{^7kNaj7rZKWr)jUYq&7q~(qdhjFYB43tL)Tdm^@fMwmboTKEXw>H-b!Wzi*Gw zm0#|z?ZG})zVKs+#{-JN)0xBE+KtQ#2YYpz*7jTrduIKb9`Lc+_4YUc5+Yj%X_{UPzGirX-O*j+?<*z2IpgljoDJ1}pov}(5$SiT$ zfA;F#g%dv$<`CmjenNP1x~Sl_B4ENLkpe{gcJbc}%&&mqNv>+W?0rDhVn~>Yi`7~h zr9tIRFn^IAd&iTSDgGK!b0z7U5%CFLdduo(Py*V z3cX>FBhhuQt#vjC@0bau=T?voi@}K*HI;gBxNUIZcBqNu%Qz)m{Lp?^zK>tnWm8W zlRuSn^jqhJ_~5(oSL2vNa*e>dJ3+Zueiho`-`TA%5*8M2FINXK;LQ@>c!PfU$&I|q zSfXhi1t-83?F(KA5x}}m|JC&t0vOGl8L)homxsHyc;Fqmq0No;nCAckY8Y^(QRvyFY7? zJJ|#EB<}v(f+rIx<;kluT?~DraD|0V?RNRAP2D%>A9u@eoGYunXrFVLTGQuho3)=M`(Agshyu!{^H3 zoXimJbaEoo@h`TXNY=hj7@ilqyTv_0gD_2#&T-?IY=dzpIP)^&`p4mGeXpml#t@70 zhy=$tDyRi3?FC-(y4qSQ1xKMC5a?@|I$$BoBe1I6S5kv!Lv>&8p-B?6GN{t4DBPY* zxDl+WN5a16H;3ThkSRA~T}F z=#9#->WE$ZPcgHjH?2W_is{FuDp<<>ClY2`!H*3eh}f9nPt%mKLI31EUx`lPJFU`B z1&Udq+5L{Fgj{Z-9U9cI&D06@A4(&^pEz`)huIC(EeCvdZ!t`tf}Md_Jh4QMq5bT^ z)wVEC4!V}=bX;z|@fz?i-Ceci(OliOatPN7f1b3-LV!hD=k!E>bA{fa)G>o zhix(~242JDrt;VavRMAUe6%EUxqfq{pGtt=hNJY=&4wLMD2xY&Wt8^C9|Ut5Xc518 zVVzO-QE@D5*wV=un!ikX)tBoeDdMw!Ec7EKK@(Aa-%gRyOjW0ADjz8}T-(^ITYLZ3 zQd(4Lvtf~=+N@7{Hwp;(rYn?kC)9{R26;ru5Q^XL`=bhlW@230uSLzzTstwsJ2hLQ zOwYeR-7+@Uo2c>c;a{ty4P-t?ERvhheyC*HZXVh>PB_qRq2VjjDFiMhU#2w%X!dOE zpb>)d5kk%hK0HH3uPBCDUa0KTH2N&n>5xv%B}YDt0-XY3G@Z(_V%iXkYvt6Q)$Wl+ zT;@MET;RRQe!G#hH80T&2L@~g=+!eX+CM1(2QCE!n#l8`w7C9OO^EO>=-MVSXi^FN zjwL@ekC>13wk#oW_EJn^n+V7_4rtoPoS4;;&BqV%IGtRNFsr|0Ukq{)F?1q3e-h_K zHc2Xj4&@A-?xeB2T{ppwXVQVnYKG`&dP7+GiCn+!PI zjFrc%v+Nx1F`~<-;qA}asiK?7488o4Kx5iZw`KgeasFksnIhbwCa0fc;Z!NclGsMo zF)qa~(k;_%e6Sh&z@mJV*`J$d$uUec6LW`J2hAlM^}n=`J>HhjYO-t~KE{8MlWf5M z7jyXkCsIQbTlaQw>D4ywH9wnwt{5+<_De!|uc@+sxWu6^Jh^nRX)dM#*C}p5?`|y> zCZuL>x>7=*FRz8l0{b`TK_wn%NwTGDfkRA|C4=|6=mDANQhoZRn*HDY&KaH${|=T@ zxkwVY^eSupmt`BPM2A#Dv=V|Oa&Q*|=dcH|>b!M%KVx`TLa;6tcfIkixad(h>fEPA z=Q%|N)81w@9_M7N=-zsy-dlII@x|@lRa%M_hhoK{xD&Lv zhvM$;?$+Y&8mxG63+@tJibHSCa^!{89SMe4!FMS<8pG2qf%n1}FA;7GOHN`}oJIQ1t<8RVj zeS5~B7L!OPW~w6oKl^e2(v@}$EV8Kc7sP59l7A+Nq)k`9zWT!1H#e8UqGe|VXBlGNVQ_;SLRh_ja&eOa05^Nk*iPy1Z?Ve(3z47_7GEvV~X9pKtw zwEK1po&9TLXxAvR)#N+DIK84`0(H0LNTtMOOE(NhX92p9*}^zCOz$suf6WgyVcF4C za-p>f;IJQ*xs`|dMjZ&Z95%vFo-VsAzLe>95uS(^#FtUAFa#xyq}1?bqRwOAqrGV- zDsrxSBkq<+--P<=b>+`eu1#3CPuD;A5RD~kJ7Qs~?00`il}>~egZ~y5uE9MJi0PpT zMi&|!@bLON?z6&)RE`l|hKfEysod2QnTsWRE*>wwUkBo>nB-4n~wOZn++d9E35^)LkZ!{N8`eZmfUY*8VY($t8W#5N1Q<)v-`2 z2+i|y(bnU-m*e)3Si~JJH{k~Qr}1h(s!{O~SAN9T1oQmhZ|?=};!bL|Hy*4{PK}O9 zXjUKayeg>;>_HPDBs)tZ!OG9;)HQyf1d{frNbQBy?YY?lbw^nVM@{Ytx1GOB2Qrpw zH-$nwoXSJb9D=@gtR%_1Vkz%m_bzO|jncx)YQaN6QiizMqm}H8NVSjat!=)E`onVg zPDqMsBwE?lj-Xp~)p~2}0kh-rl9uUZKDETh4Z{E&Z#|1i0#1+G1WhoX6g{TWQLlPm z;bSjGnv9vS4faJLKNnKifJTfpMB%il<_RJ2c!LSTgeUYHM)Gv$!6GAA-9B7BXVp(& zMC{B@CYU|jSftW)+NbWTFB?~l`4bK&96wRd{{cW?C~POUJ?84L?#=`hKzEo7{pRC} zNo%c6Eid>e znRW6>;j5R@JyHAM`v9>Fwi;QDB$a<2*}OtHI^h~y8b$_YEhb}L$le*-YKK=Pj7kn zJ8(d|FVEe7Oj8}hhWFGoq3pqccGX;Anm+Mec-OnR?TM_iRW<6IJO-U%YlVn4{ThIz z)ZYCANA%M=_9WkWiu~R50d)<>s^m`^u4Wh63Z*c;4$IzoD;%;*)5Baw@jQ)QAQ|Tk zabaS)bb@zgs_WdZ6`X-WRY0*)GxAJwpFXpOlmoO{^Dvi)wU0feux*v5?@+zFN-ryC z;qc-x{PT9Spu~u!pa8ua)R z_Re{Q0{iuSTGlX=Js-YeH}G>yGa@A9$SlW?-U8KuCD}ydAEYqn6s}~bzKCV#((GPO zbeG*hP`W5>xC4LZZ9c->pw(kUQk}|+w!kqo1jm9J)3$Xq&kqO~)IS$ecduih9#h;8 z5#vmIM&r~*S8w*2Ff#3tQZ%C)p{;I+OMjz9W=% z@Q1E+{X(pBKY&BqPukSnp$8(4NyGz7yu$IvV@3VrF2zbdd<3$nafKRNMqSo522y^X z?aeDRmECVdd~MW!ItI8o@-d?)sD!#WlHKpNXrmyLv-2o?Y-kREo2p6S5UACjm|(l4 zg8pPALT5+7 zt%5kaH{rEOoNW9=Bs3*AP5C9_(@~&S>gf!nF7ROM>8Skv0ACbVN)UV@mF~R*T;a{E z5wy-}enb)+%^~&K)m{lf$P;HaUU~(>rv2sCvog|b(uu{4&_T%XN6QS~41Jr~bcBM; zY&;ZuvNg=W!#6iD_IHf$U0TY$HZ_gviU3x;E!Yt2>Mf}@@XYT?FXG>ria$x;&)$$f zD1nmd&6~u1WHF}f5VzfDJG&`)X*Ty$z&Xx=Rk3%_9i6%(oV$1~Ax$VPze!XO7Cb-E zpRuzW4jB2e6wtm5QYn@-i(3HU55(}4py5C-h|=a-5(k(P<|+`k8CM|*9JqW z#*_8uyUgEg$yorDg3RSxR9ab%^~JdK!rQddiyP!bn@w^}bI0wBohQ(C8*eE>$SNE? zJh;L=lZ;P~7qwF~iZrW5vyDu*D|flA8D+>(D1sUDH%k{Rrab_|JzE08L*>+|y4z;n zRxZYmDCs*ur?Ko}wRXYHx07JUP7Y4jO0lU&lf46`t%nU7D2|=x z9}75S~Pm1o#(Mdwc+ z(sv%$(tb@23%!t8y+_pllx#14|K57I!>!e3(rnybUoxDWlhuE~{q6ePBY-#eBX)?5 zA?(cECd^>G8s7S^PKrKFSUs6U2lip&;sZrRDHP5I=bO5_1_f^0?_Q&ruEHdLo4=gu z5T?&Xy#nq?hkeQ2JUH4 znm1xw<6c3_7B9c+vIF26_JnqDCXL-iDAnk5nSS8?yC^chNGG_0Ev;zVjqNYo9UAtD znw2VyBB6DvHSV=uO1@5n$%vp^bf!&Ko_oWcEMHxr@FtU_qqVMfPK5 z0{>fAVZm#wui$xZYys^y;{8x0?%l{PaNgU33-91Lw(--+3zG98wyWKamoI8WuGTlt zop26LrK6<@b%}?^*+wnX`C)10+4;pd+>Vl+;J535`abRJI-VKsz2fOMm-}YZjt8vR z?T+4y-}3~S`l~J@#0G-pmh_iM=g-+Tb?ea;^0?p&j$OM#VsZrI8p&Q~5{|g@sUc6h z2HpwTdm2pvYNk-Iu4i9_9+ckbxESlu7O=g9fB>VB8jW#MtQcczz27h8V;Z{FscT1u z+DMpju7UN;E;=ohefuMJbiE>QKg|}caow4(PsI&3X!la5+pFKydWiZ+hZ*VlZL4IV zzdWnApc#!10zBs?ZZ_ZC&VqX5@put)7Sj|iFx#Knzfq<~!McYK_%e&Ak8rc8fZ9Ld zukj>&v6F68w!bElsrHTSP?**29|@Yj_ZwqH85s~krAWGvoAz{c9DI5_lE|wFa$`PD zQDmo|4$*LweHdd@9(;MPD=#=I!{ps5qg%JvwuzAfH?8;Tkvp5Im3Uv1+PU)&4>NUi z(%H2}sVy&z2w=QnnkP zPN_T>%(QqIO%Zu5Z<91+pqf?j6h#$(g8vRSNYQkc}tE`8R?#BIYz=18>H@0{1E z7x=8cuu(;uE!{4RXf?+~NO3w-v6+${nPM+jt$hp^6#Gg%O8R2ZFWt-~@7knmYH$PU049Mp}3)V)x`UPw7Fpz(-Z z&Bz5#eyq0L%eZth4aH0kpZ{&x`X7NNhq>ni;N=8}y z%e#hT{|jsQ{_$s5IQeMMluZxWmQaPIn;i%L(RQ~1r-A36aufu(W*5`u&$&n?dy%#V z1Adz}`j5j4eNWpsT}P^%M2ro0noQ*kM~zKmBvmz<2{+uS=j}JnU)s|n5&5_1W-K67 zW>>M>z~n1UG>%F%F%&cMM8NyTnCVEOXs9+D7LL<_9~_|FjtKj*9?BHk2|XAp}<4~-=+&qSre zv7vXsd7%C84}LtN!GYUhLXyRUfrAv!Pi;qV2kz?fvs)Z1{Ru@ni)Lw@PckM?(E26PhqxR$ z{AK*}&b(cF$h#O<;7i>t{DHsF!~0FVz^eH&^|B45OSgKhE!T)!$5F?J)!wh|oeZjF zs3Ef{#Jw*jx-Uvb$=megoYorCQ}=cyMH6L^Un;$Ws}XO}C0y|(HqcJm#*LBZtDvF} z>d)JgWsq92(majO)9kRI3B!I<>>~@`Y0p(bdB2V)ld>=$Yn*aqjg!3F7fcT!N;8C^ zTh!(lxvT^~946NG(HLU5QhFm>>|cF{qFoddLZa@M+;BWNpM|u5bJY8_-lP3Hgv3lH zc!*Ux32 zEE|zv)*&}SE0MC^!QuCS%cRvP7KKh9=0(L=2!~r%3OUqD?mo z>eBRPy@?CFL0K)%e4L*t#FY>F&ws8)*uh`X)qiC*iGf&nfxjuO3*cKI6t^;hEHh&~ z;FK~%&Wq4v+1!4IDd0j~!~Ml(F>i1ZZq`G#QK_$2q20UU0hDqUCc7ztlAp59gOCzR z?|k8K>fdgUJ#Gyo_%WxTk=KMeRq-}f(T)OLg*IN7NC>r(eU}>eru(aTP<{b6=80E&gf+nBh zD{Fj&>=`F5yQ`7C3=h4DWL1Zp5+uOLeDi87xtYSyrTUmkCQ+Lt^?^F>PBA4;tqZ@8 zAf05Mqev=2T%k?N>NBhBW#fE*~zVRqs;yxmC^!vZ26k^cy`HC=8LWO z0rRjXrycxNw+>lHYkl!FR>>688(XU6GT;TqTlIK~l<>GpdqxIxxy`xN?$S%b*=(da zoT1q58?X;TZuwSKXk>M#W>zlHkpm)ob)I#m(T=ZdKI=DLs{@2hMkXz5`L*@rv{9MD+n0Hk)2OSW}duM_`!5;`+GmX%?<$qwQR1bMv4)t#K^`vpILd ze_O-AT9D%&U$wEtgWC|(cT=2;ynx?#C0oi>z$2;`KA*6&60o|QD=$VrpziDtKKd5A z@ubQjo;l^Qp@n)dK!}8v@vv8&Mq3_|Z3Z8R{@FYFqi-=DS|;hAzgy~6;FFP3l24@+ zBqENJSlo$y>!4?=_oyHC(;+l7Y54~x`01cF8n_q4?U2M~6*Add`thk@WuuJIhf?59 zLSuONVmn>qN1fp5xlf-6W7_$pu1FVsHh;LycPm zmQ*zb&ST<6rj#U(goTFZl;%P%+E<^m{7B}rvVvO&{`TJey2f}YAW3&vdO9E2+-s#gFmk#Ee1XNsZh7(aL;A-+K(GWL!ya+Kl^f=e>>5o!85;U6&^P| zm?b?K^^}3H6N*6|!)jzKk&I#|dS=mp7&Wu$uCMJT-gGFOidhA%XTA(sm9CxD6NZky zRJL9G94i^Rcbl$`q}E4D(sv&bKj+W=co(-~^(SZUhcMC} z%B0sxTl?O4!%6zP0M;I^Rn3=zmo%q2Pn@l`n>M#>pKHL5+gQs<+eXo(Svc&|A{~_` zh>32zvXbkl)(l*{I%ARa@~x6OTdmIL>F&}sl*tz}BwP?lCD#Lc6B)|-vSpMpS;y7( z4CD6USDl5Y$j*}^Gbg>^>JI&MeTP>P$<;T2-GfJ`?f57fg=p3h{*L z^3u51I9O8Zfw5bwB`zt6U-vS9kqNZFQ@yvLo-;j7f&@me;n>yH)kEQ*o5rjRdH-y3^;U zsOWW7)$btASmpbho7^UKCXiF@1uZ?00($XzR&J%o`37IrS{uT-DKNh@N=*;Q_J2dv z-21A=w!Cn7ezdHiBXFvXoSuVy<8nppk-3$CL!bn*Q_jm`xk|o74ylM&RLp(bShp+V zi9ef@oY*2%YU^EhPppd$)%4|l9UZbw*f*~W9ma^L_P*(oV7Fa~Zc=kPZE`~9Ep_$Q zZg_n~;4RH{Kz?{LfbCZhS2^WqX;w92{lRPloMC#Wy+OWv&ZFv9DU~N4^+)GIq@8PZ z#I|zZf-fl-0An_N*&UgbqLS5X3T0~6s#+JqTgL}r9YAt9xn+WO1lRTpX)ph1M933x zoKi{(*0&qV;_OSZ1^`%}=@qD$@d9DtoZijJ3_%MTt zdU*<}Df;zHMbMm7zo3{LrYf-8G{wW^6Ih8}n~i2TK30AsMcLlMF)lKAg3jMeNl=Wh z*ubo4;- zw^4^6n0P*1VU%%%xIWmY8l%~f(8H}-OCYO)#78u*FKVyFhzJvk*8g}=Y>hlbUN?|d z>y%R4_+XDS^72cbAhq_gOt88)VgHOxT+eSz&BaP_b2H0(&W`KmympWxwsl#mxOU%-P1Ph;? zZ_qwi$VUzGOB-P$T!zw|05Ch8m2pL9loG1l}s!lnEtoTlKLyr+Q z&`3tyRGI^S#&`7h*D?}QQ)~RlQ7|JuAJk-#b_4aIK5tfI0aK?P);UWYB?&bBNw+$W zylq8T_9=CeHmhPrBTEObQ8U_aCla%#=N3me z&Y=3wn{8w7ir!;-8qjI=M;hnHVY4ypu()k;n}X;~k9*$bDvJHsHaB_P$ptX+hCIg0 z8a@JR_q5*j!5L#b>DY&$zZnRe?TtYZ=HCJ$I~UyvNomdw^8!sMV-K*uz->0HKpc`2Oc@k zm|lC6uMSO3lh2NHS&+;GAn=!9^ubQG^|ZSHZBwwwwR!c>%1Ps!VOs*eP zIA_;u8m=UNNb_A<HIb1iA=O2mam2~G zUs`?W5)`H*jZ+i%>QjsNRWUdvt2oF2g=FZo!GexiZD{J{3HGy^BDUt$| zqpipoUPfR&At9GP3+9gGLn0@~%EyQ^r_}Awa?YLju9a!P2ivz*sVq^0m<7NasMDfg zwDL|AG9hbZj$mZ6J6E4^AAS9b4Ec6FidE5N&su5SQlt!N8}msvUzo&M|L-tUzt&26 zqp~gu=Ux6}lEU%6CFd_}X5$7S(_XP7f>XjIj%E#rNH7f+yJyM!8xqmsYndht8XHV5 zMngF11W7zW5imPH*2*|Trrf$$Wvtwj zUtVaaj%gh4i2|AXhWL4RV77z`(_F1h%s#hT=zsUAMauX%MIV|o-{nu`w+H$C9@hcq zE*0ZE0{N>QbMGZ{|7DKKyEI(&b2&Os7fv%H^RRjM^r&)ABUbab{dJIJL!0g8tmRFF zaJ+-wk&CRQbL6ihwgQWy>@y9n5GEcu)G1ZDmpXGs8Xz@vE*j-Xx8HnIr=o?g^I+au z_oP0dbcH1`0=HWSSZ%ZRFw%h3&A^4Qn!tun#n}Nk#_JCNBX53H97|Q4`i+)QzuH$< zCL5^930XLMcQ^QT&n;~@WQS$oH|>;L0jvVO~s5K&3Qz2cnt=+b`ws0Y9iRf2zQ;iJs} zYCU(a(3TBxskmcPp0CT)7DYI;qEfRrcz830l6T|K2wv!{B~hSmIrU7CslE;h>cbKMaxJVO{|Ga+z*u-=l636+}Ck{VOjg1)*b0|jW{-m=tV=OyT=VQqN$i&@&a zqwozaJc)xyn*C+nJoj!d1IEu{Vr&}mXUY+?_F`~~QgX-jel7zhiawfFY;X1&vt=6c z{ax&@E}3pKWOWy!kU+@|TlL8+4)iiI*5nn*LhhG_(oZV6O{_&t*EF;IW2F51uS&&! zUYWQ1BQ<-+Uzjiht9SOHIqY!1mPA5+qOZ!Cm+uS+vfZ zSx+iFu)#4Y+Hq0XZ`x=|hHX5YlLj-;g2EU?BF@{6c3GDoU>lasN{Dq3WNj-)!9I+b_Ya`4{|>`%=d`~AX+bP#9_WnuCe z&ZRSO&rea(#Q|EM>dNY}^?KilF%GV&Bz_U<3MzIsCli=lybk{>jUaBvCzJaT++fg} zJm)_0!KSOej5|0nFmJ@Og{ZI=)rkl3+-Zu2zD?D@jhC)oVmq#&rI$wpeUu-9i*8{o zsN0{~Y=p;k$9&W4r^|efToVz!&fk&U;iD!yI&iuv`7iT4U-Juy(M^^xV@38e? z*9}(TUwJOKBY64Vl6^QhmZ)CF5hivqKHN*42JYQVbo?;M5K~S6X-BZ|zAL+nTnU z?|pSx=tQcrj>)q3@l1~U{Q~S*9qsDN{eG1JU5yEiO^2HUiL>mU7nsnBt1jwqnH$|? zpIH5+d>aFwPacCjGwIV@gs8MUW*k%NyyvO!%EAS4<#*V%vM(XDd4Xi*&tT7~=)n{z zoka2+-Vf*3>6+O&5J-BfiqYo?BBjuBjL{SGTtGl?D%)Y&U+s;20UPVqvx>+B@2~`{ zB1+_vJG7^6NW$%;Ie+H5m-i(Xaf!MD%`<qyhiIJUG5 zAgcAvR_yS=h3QCBepR@6$bd;tw32?8P!vKncwkUBV~rG`-V6gKycRej+ewzqyQ9lf zciHAiSte{cS?kRF09?9=qRi`!laVQkFh3st5+f_jS~oNI-P_KtQ&RNev4;#KhPN-~ zw2w%?YNtjDG9s69RhKQAqhhgZc`M*Kks)J??rvi}S^{`tZu|CTUn3V_DtHham8V05 zS>GtoxpGE)!=6sue8J2dJ$*ScM4$EWOQv)!0Lux5RWrHh57yc9v9V7O3Rw>b$m&@|-3=WqNk)@h zUyD9BdwQW5a6>uJqhz>IgveQA#oprcK(Dt5@N;fWMAo zfjMK#7*(~Ge<;i*Zbt0l)3sQB{83xH0S6VUZ^=i7xJb>+XPJqz<&U>Ft|Qv+{%k01Y?`zxKX*Lt{w$4l!KJw$}sB%728ab;!dOMZut z5y}pITd(xBC!bxO2l@v>V@_%^9+pGa2 zHlg~l)sPiNuBPAGndScJGPentiIIWDY?AlMFJY<-B1{#e=r>pPf%!WoTBToa2#2LY z5l~0qdF`b20UAN}EwT!WB|#k~a$83UzH=r2VE6v3Vqoi|@u#69jVUni6oSp#4`U3C zW4gULE0lVs31Lt(uMgdhvqh>j?D zX7-}Ci|>z#LPDL!6I>BTM|KB;*NwV7L&ZTlclWhW=gg)A@^+K0{6O^G^|2=(r|Rc* zqS-%29k%rZS>+8mC$tY~gCvO30R9OMOTT`0_ zDfvE7|4eMpieweG%Zg-Le=_)~2#ai(PRz*!=%fyZQr~k|Z#$c0IHxtmUeDp22(-YwDF=s035tiaN6DYe3@t-o}qR=6;0Z}u;*SxdWUnrTpi{4Oq$ z_j-phfsQVV6g>6X;hFLX0F#O(O=>>^aQCI>8}y{2ig|Epi=%5CV&3Y0kMtavnr<}a zif%M`grDMVt8W1y7`!!<1lyAkeWZvxcjpg4`NHg)MWhBUL+U;CHmgV8{WXE+G*3(} zT-_OMlI>=u_>%o?k}Vvpy?|s*G?5Z*ht>&gQ1&a`s!R_J&aghy2=Xfxy*MEOq=?@p znUozt`l5TEZdAxC zwXmGMvI&y;H{|vNzu)Ray>>>frA|?z;sG_%5^OpqsictCt&y` zrr9<0Y!xTLq^n;RlVHTd^8}ePs!M=mu_41Rn;;tanHU=`ElmD_RgzB z>*|BAwY=b*<=$*{*k`5yPpam8pOHU{@x(efwJI%@m&N7kz3QkQXd~6yRX<(ZV6_(^ zO!%bR%~;>+e#Fab8os)of*Js7sWV4aSireNmr!OvWSkc=}FLwI)^b-f{aMFp-oOGRs(2A;*v#W)}zWR(q@6tt+Kmj}bD%qJ_p@CZorG+bTb<>R zM>hhtc^GF(f-qv0-k3j=<=_05Z#XspNS%xszzM$b2Q;9-UfG$&12wzbRhx+f`_jX90_@>M>fEmm0yRY@eG~8x`eF6L)YrsvBJFy%%c&ZL1###%sK|+iA1;A_OyDI#7wT&T^c4 z6)uC{&SwIKgKCQaCMN?7dJHNw3FnCfhZ?5B{Zux4kINtH0b-vsR78c^FFzC`Qe+U1 zQS|UkKbd|bA1{cF*N{BUY&uMz4Uf*Gny^v(Y#RraB$jBDrBUU2iS@w9hF~SwN$Heqi<~@3!R~1JWFceL`iR((!q0Vz;D@yX z3KJf$xC=E~duT4&6pmfzxg$4VeN4N>70WdzBGQdyLVjc0nImvusDz z`_mqe3;9|$($O|myL*P-7)?O3IU~@sU%Nc`o;X}X^ca!{-v}ajZ3DeFaI~{|f5w#y(8C;ceVngC zq7vujPNOoUT}D}qyE1roqej%1Idt- zB5!Bb6U}j5DM^BTAWUZoL%foxU3Z9nt}6=?GciU0thF{X*b$6D&KpTIOyVe3^kh43 zUiwx`95+|oJIIOvhg3InTFlQ+uge@{$VHhzb(fLZ%)VCyWijr%K?ZOtK`0DUedZpO z?c#05q~hnANtzfy=VZH{f{5QrN>C+U-5n8zR zyVSP*Z(Qfnk|-Ty!Y?RaT5}hsBi*1;{kQ4Y^gIVa5saYU1P7^?`wjHm>pea2rV2C~ zxvP511|yt-ryrKHA4peTINb=z?wgM?K1tVxzS!MMXV52cPplB8k+)y34V}kbCf2l_ zb|ZNTdb4=b9%%pV|C=B&hHVKLl}No>X-H+_hTLtjqQd}N*vS{>R$P6)YS|4BM>_`6 zINKU20Mk4Es4Zj_$KAAi&jbTBlk@Gfm)>;5@#Vuyq7;?K*_aHUWG zp-h*%nI#v8>OB9$6Kbkf_EyGxW+lokXuusDaWti=Hc#!%V}c?nrqYlO_-)mWx&q$Hn8(p}xgg^D; zIf2K|J#`0oDy6*1d2>$8x?Woux2rP)GM_C%v)KAgCl7f6$wEP2PJ=I%5Kz3%i`Vr>9?*=FWIidFWNB+z z_T7FFp=@W9a$4$~G{CM_L#J-TZ-ITuVr?6blOl5nsm7lz*;ql_yU_jnY-3aC2*M73 zA%{))2I7GhV`Zdu1IxwgYqtY+g_6s7Zz^w=O=HYQv ziyaNAudiqyWn5yiw5RMV;$z#!#>S5V?suYbUw4MFsuiB77Y{RxH+r^OVuVA1!(<{4 z^jc%tS+bUqf?4hBfslf*?{Pf9D6)a!w`gi=+B!P+E;qfD%+bA<6!CdIh-au|-zXED zs{z#1QQ&-YVg9GEP+zAoW$jrArJrwKzboRS9aSwYe2ll_~ zr%H%t@YkqSI+Th+`MOoj#(1pTh|n*CUwfI$%0P-NNL$omnxLvWF3}i5p*(CcJ4E|D zDurQi5R;uwXPeZ>?X^xoDB|tfuFI!#Cx-b$1HhAk>)nYwTrAt6nCpk)Sm9a=1b(AE ziwpF8|2Zv{(eTGmQUXxilh8o-IZ%Q!KL3u1Jgo5*n)i~9Jx)5GkH|-)Q)V6v17kCX!G zJL$XSB`}X$A2qY^zHmCb@=Tp89J|2L3Kvf3R^lxT+O`PuQkF}%uURNEjUC5x3% z9ESopR(T%Yg>wUEvza=u-k?SrZ*C!63T8-|8={KIJ8na6@ErnW_&y+r?ry>boa3X? z6pVcD1S`MhD%D;(&NGczI$&sh4qv&S7KO~z13##z_S!84D0 zGIYI8#R7ZeRwh~fR-}=0d!vwhCm(PPcWZo#_%u*??YZ>{JSI16LN8pTM>~6MMHfhk zm6EKaswr&YKpF&rU~O5EiHM5%q8AhtBqk*x)^y~5@92I^{P7t~P;u^jz8o*y##}aE ziPA`>jugJ#3RS`u&9E3h9cB0}Ii^t}SoAwn&kLuF%KDQtRx-|>+7&x`B5nW97EDQ< ziqpa_r{qzVE~Emiz9B9X@Q22%Fm%?RtVz{l+hdy-D#PYTcVo4+YZppiq&=kRAa|EV z#drRRHu>byG9g2Py8hrsjjr_LzUe(B z))0$)$5rL0V%#&4>e~uQuddL?%rv?kI>rKR@6x)WjW^XwhjR@*C5~Z7&AAv)EFcsp zi!RLqvL(J3NWuS!s$VQ< zCdz)8m%8~^&=VK&Po--2|Lka;M6aD{cQ;N_83sJsQHA)&vv=#<)Iv|iR#?p?xrU9j zfm6D34-eQn|M}3Kr+(yW?|=1AVs+ zC3$Wa3WQL^+W5u*97rY#+oEcjfO(eq*oP9JqVA7J{HlMhbqE;`Ts z&un-*E*|#3PyxWdTmMhk4Udz9E1~{71%4oW=eKC>|47E+>sP`=^MBg<|E`u5fHC?% z-{4|6s-`}_y7L@y0czG literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG b/windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG new file mode 100644 index 0000000000000000000000000000000000000000..d6679e1e0e616b1430d006fbb2bd90d59b42f5d4 GIT binary patch literal 79691 zcmcG#Wmp`|);1a(0>NE_ySs)`Gh9D+k|cZcAEyF2qe``i0H=iTT3 z`O)1~SC{tcTD4Z)>yA`bl>YLW@bjlnpT5Y-NT`1L1QYsCIu#NApZm{NDV~2GP_C-d zfKN43#K-?+U@gTI#6Eqhk4JtphWjUv#q8-ii`WqUx23fi0&**05ht(ZZ+tS{^3QJwAv z=cDQ)JKq>Xo{Ud?ceEoBs|iBcW9eu~5fVI4r7EE;IQ!Mw1}j_E?!V^ZMYMNE8ydww znNY?Cg$x3$swwR%nrLD8;F24z!L;dwQ;2d;blbf=MfS`?MlVNtk7<({^W=WcYw+*5 za!<(R{q)FvxIAk*{{CMx4Mz=|M>I}%8r@2G%aPn}sz`@74UJJyW8^o+9ak+22MdJd zQ%#`DuEv~@t@cSxX4s#0J{(BzlyLa?Ogw~mo*`a>c*vi^zyXu6`ndC;arY|y~wUb6KN!D_u z`XWS)N=pHZm~;?A`4h79bSaiav6Qx-PAv1!*1mm4i}XsU_ z4935{yrq33f%;QLzRIg0NCbIDjq>s|CzU}Oteh_YbH0f-?!@k#KKI4DkgXa8l#;M2 z^-cIVnpi7v(RxR%d7|%G{*YRi4x4IQO9}7290DlKmpM=2>~h(3Q~dw@iDrQE2YGZZ zc*GIhIn^*XYqXV6c>?jLF!g7!<+mIr38ps#V=pzgnesULxKe%k*OS&>85w&hGV)p= zrM=AyJ>Uh!f;?b|EfEF2SpHt?XV!G(S2%W)t^O|x^z-pr7O2z+2hKyF_D~WXXK(R+ zO)mRm(~fIT@FMXDJ?ITT(3#^6BeF(+$c|)=vfd3;ZSLQ0bB@sT_>1t+r4q>YfV98B)q&)UG z3Xe`HuC)(^3cZACSAGIlE3?oKTTyr0iJUIg7XB5G)jgzxs@T$PdtnXQ+N1Csz5g3< zFE=6n%FlC#hxzu%vVVr?wc!;4KcU*vgNNOFZ}WS19$M5LrkCrsyNm;me9b|!iCTa1 z8b=l4S4w(X`6Q!Ap)HE>&&JYx|wA#m%XX`_nkk;>O&U-R|mE=_$?Aysr-jd6F&qP6>v&7 zGcGgx8WHJ$Lg7F=~x| ziT~DY*B(Pj)Ic`B1J1lJ?`OQVPPb*E6G`fV>h;N%`WKw+BE65)mSrORL4%f01z zk|8|vCDN6TB8)3<9k;{BwuyJwk9Q>mF6jFfKw@ttP_(c5^bnLr_kejb|NPeSyz7sU zjv0)JqAfewmC(`sfoda9)7j>5HS^8)SEUnE-h zyIAlRwG1cAE(~P-|6zW^h#xVyx{e<4|x&qFZPd?j1CK)k3Cy}ReY{huGAPV4dQA2q#= zv)WVA0p83C!=!t!O0me~h}-zY#qKji{Ck0D3w`Q?tilb);k9v6?h&wB>ml58%GS;Lju;T_YG+GI-Ne&6~KYigT6^Orn3sGvgHKIk$qrg9@sgo%m6U1@x^RUXd!QjZOFWXnsNEWMm zq-YwQc25by&OpHu(O?iE)h_<@5L_+#;4QmDI2HzM7mK)@Wn%s^Csc>YF1*&9ft z_&{QMxwP!HUxMfToI-Eo;E&*b@#V}Wr!OgeG*fpA`1TVrtQF9bc6|q@*Tj_*RIPiI zezQlf*B>t8MWWG7ib_fr08}zhVUqGiL3ZfOp59RYc1an3>$v3;hv!=wp)^fH$HTrY z2*aLL68!_VO@Vjo5A{#|x0}TRL~E z-Pia%0W~27*Ix++shJ$=8uxeux5q^{6syRio0li4eZ78&ha>R2l!uWZz}H!tb2Oh* zi@fG&c?TS#t6ew+YM7S`OcJ@dSLFl&AVtvMAa@M(%g|8|N(yY0uU5 zhF={bO;34wt_C&($Y-!(_)E+w4ky4w&#tO@stu9>Kb=uCC~n@EmCXgi+pR=5Kl9(p zTm)te8;X7#{=*l*j?NrN4Z<|hT+PhG09XO1Xhb=YdQ2mB>gnyJ`d3d~UG%9`KGfWm z&&fNI_&`hnX|2#FHl_rB-4jf^DEagpVx4lofdzVH&29J+Jyg3tA0}Aa)P+1ec*O9# zMqc_y4)YS{`_4FP>Sx#2oYX#@CjGK1g@?z_bt{PUk8^4E$VugN**ta^fJ-9H(h@h7 zrI03r&=@{lTzcJI(|Q@-iup+CWwLsKi2rTp#|8S7(}og~|84HcY8$U4@P6m*^fJN> zAC~iwWyx^cIZ-HW>V~KBtT(TM1^83)ZKz=ig_j|Fo8Q_ND-T(d2ie??e>+Rd=i$6` zap*Z05-?~BxfB)orqlx~p(r{m^|#6MP9}jE_~*Fv2biB_06@Mj#v;kQ)09S z>*qaVKyEI^Ti-h2um|OxjD}fIiHT_2OptgtU0KQ6PrLqljKir9BO>wnWq*5L{Oj8f z_-p!p_eGG4qu@fO)(hg$;znZ1;m&>O1BvBY zfwww6GY#glVd;#0G~9}4yZu`IPE)zOIV3H5E4%p^XWRNwx~`o()7L9LTvzjg*Zt8J z@1$bSKwpBa?R%Y~$LL)GVz^DynFf5tY`C{M3$W2TK7UJhR(MY! z%rX~Ef`;07EN}I}`=!q4{%XkE+u%o|kgRg(jG~wZE`c>WJ_4~k%A;%Rvdn6Os>^%G z*(zhG6UWGy@8&pKkINUbo>#xkW}4g()}}ejxP#!pcl5xQzYMs^)GBRWBA4x^B##EV z!QQQ)vTb8g$?xdG6-S2hPO2bDA|+G>;LE&4+}fhP=`Elimg4r0l+t|Qs~}=z z*>IImp|-+o-=0Uv(+=(QVF;NHKrI>c&g#Kt#BOruea+hX!!Qt%<9Bb!vMbEXl)t$) zeu^-B^^~H(vJH73-tgPoE8GJjvpoXWTjKU|XfOk*p+(S0>vM{e+Nk0$P0AMLFY%Nt zn-VpZr#ro4)o~9vJntC@8-Q}Z@inqmL-WPh5+|-VnXCyd@?f2zx4K2 zTq>K1DPL3dw)a zL6X+iLUF$xehzdmcC6S)b+(g(lC?$)7xC&%#7LSo+E%hbF>wL|wE#AT#J`!;zXToW zZx6Xuv=Y7<*`yaB)jkXebUAPz%If2CbI+(J{_$G=gmqF;M5l7xcX|s_7YZL>pA9?W zedF3vw5ZSC;tP*Tg3i>e&hMs!$vQHz^OGBjM89rJnK11BX&!wztF7}*sws^$(ccL$ zk})cOT{zzA^bCE#y`Y?GZIW;L31QYuvo_&H3!QsW{Php^=x)`LUV9YrBis8)#p$YF zNRzL;1wpf9Ma)@XE}o}52M~FQ4J4j3N~c zMg^zIw!>IOhoSg~u}pjIQ86=*dXMhW@4To><7j$}g^|Y;njAJqatmbrppb+BP(n#P z!d($3b9{f#!>#j@VUa#!Wy6@{kmq=hD7vqGmej@a5@Iq>zGIf5*6sZv_vrc{UT?Qg zKBS#pZb+ld!2+n~JZ(5H)b<1eS?SB}!}AVpMLXi(Bhzj^ycIv*Y><(3FlRQe$yFcy zvV0+Xo}IG-QQS1}fz#|hD3ZTA{BR;+YHy=21JhoA3()0kN#xom_3vF{;#=$q2V_qf zr@=-8aM@J4Z+tj>NR3=u!uWapB7j0@&dZQjmU!V0y6NtQuvBv9V71yAS>5BzhmWF#nuZn0@~dk%o+Mh*Y}Q)Py{mX7_Anv63+$Jv6duV)*#b4s_?j`ow~z1 zw?Rw}DUX|h(jwR~P3Q4;pBKXqYQy)bS}*Xdw3j4w5k?D?)}x4l{|m;?Th@}gXF)$O zP;@VGI2YV@Ztq3Ctw3MCzoxqt=6=ijwBSiroJUMZWQ)lE;#9_4|BE8CV(R^=VLX!T zw7`}vVvtY9*O#%&)F5U_yU_G(AlYC{0k5A(G(ho=syDBxz(;HP6b%t0g0jcs3o?=4 zS>S;RDhe_`4-vjlL)beO|F5p+?+oI@*2hO_-*hTYCXBOZEsAUwg;*GFZeNOCS7y(t z88#K0CS%0TM)sZ5{H_Q6u1hI?e|$iRygVbU5_0D$8D#a=bmb7QwdYA+2Idrur6gax ze8Jm#=j(atClY#+>fwpiWYhp_ZuO#wo+CR(p&u-QRg5(+N95j3jjqzuV!Xr55a3sv zi^AtTyQ7sB(QYpx0is(U$F}kdhJC}DFJ4DsJaKk^r{=RdBIp?kZ_z||UzCLU9Z5I) zQ;V>YeA7o@{Y2z6naqvPzSi2=6d580y)2bdgeu%$qnvGy*GzpXEtbb+ouc%p%bDzW zC3pxeMx&W$t4(fA&V;Y4O|;3%6g@K;#KCV%@y2g4(&w<7|hvP8PNtnF&C;C=?v- zgt(RN*PYyyPzk-lT)aIVdY7*DwR_eSWU?4+%?&v{() zqoaBz{Qc>(>A4QbW)&Vo=)Pi-9@Jc}W-@AM2`>_^6wPIPL#rqiMk-s&pwKxsk1bXt z0e@>5QzGHU%F6}nD2UvVnVb>{9)VuUXjU_bkIUY*qZ4>V4-&$EhpewOxg)%03KHbF z*{Yq~;{7r=0EpIhKfwE<{x%vh_$FQ&eGq4y&<)aW`w_NZ(Yp5gdIC6!f5Si*5QEnph->3usS9lz&b{V8nHs^)a&34?p@V=TXu*row1_e^DcZV{<$p;YlN|R&T+1I##=o9!`MD+W5zt)K-$0phB-nvpi8ZND|9uSS=t~DE599tU1quU$ z-J)DMs9Wg@rg%oKKE&_7G+mvEZ|(a!x`BK)5uV1xeUZvS@nXks=)B-=3${>IATl`aBJ>%r+ zKy<^^0Hz6m05zY@aqm8pvBsodA#|dKObLpTJn<~j;F|tzQkXaPz#zx*)hsVp#PVUE z@V=3m-o~mHmqsEB(kt|d>AjRZE)g?YV9J)gy`_~|u>Y`c9nOK83^qFw^5~?M<@jw@ zh7%utp4+Y_$|AP7i6ZKCDtp|eki6D1Vwd1!!(nUm${PyD8&*sQb$OBuC8V$887!!k zl%)=kYKQ&mBHsnt=MAe%UZ~@v$)qD^=u^zVlp=`(PH3Zqd%25q%7(>a;}v6I_7#g& zkKozU@|Q(au4tPu!83c^Mv45bQRKP6-c6&rp|wcJ(34S=`|&$9gio)~tLI3RI;HT; zPtK&MKI^?zNW}i+`wS;_?-ITm05h1h;&h<(;m)M5LSz<0954p$(g@EVAaO?-YHQ_{ zEeqrt^lmGLl{&^s>b92V-3Ui@-u?si;HHFx1f-N&lUi&s*?4`LNP|Q>2JWgRWqP`P zJK4#K>jQ|{OAf^F$Lcvx5@$OKP1_K7982E$UH3@c5c3`DX4PJam6_+)p=v}4^z2obw3Xg}q17%ZjQuD0TTO7Sq7*z+= zq#*a;$Q6}%kz#46o?_L>8KQBLhwN0s1GC&=r^aBir0+_LV|qY%!lqg6Xm;7aV3DYQ9 ztsh^n%?`0aq@s$Jr-%=9jQZzAF%j|#aHEJgNv>1yHFh+t%IOUIfy_z#Cfew^<%LPkTIrX{1pZ@Rs6lvzRj?V74k7W} zjmo6~+8vtd*d+B96Dbg}oF81=;*FN|yT!`i)y@p%I@ik=?dC-7@w%++H!ws0%zKBP zwEL1gH^3XOYnM}K4+bC=KYQ3@gv(E?nD$#aJ+mGi$DCGpX-LA6k@>wyUNH<$Plfj} z*eoF>kJ34{9|Sk8ZeIj{&;Y3a=kQ_ug- z1Fo3GB?XpF3TX-eFk)u+K=Kd>*G4<7k>=-(x81Y zJ;p!1=Kun-_s(A4wVp?(P--AIT2D)OBICmj-=#V?h*=DcIEaqcTcS-5uunqWN}?zh zPqH@)cnkuslsef}Cfp$}{M|1ZXwK)EKD(g_p;SlN0t)~>52G{w(2 zEj!lUDO->;jJUGe-6>YT5VC+B(j{i5-qPSHnQz4><%rs5S|MV`6v9~zyHYhTS3TDy zfv;R-ZRZq~^MwnRAMEQPYp;$rC)p2Lzke*4z6||PadUpMuFnW;3-`SUAnVD~8-{ee zLnjqc{YnlFQ8n;;R%P*h^ra{9`Wa5@l_Ca`Y$SoZZ;MY@RgCdzKg^}7Z_P#V{e|A` zgw9X&U7il1i!@Q}tl!~!cB>&}dgEH{;{C?syQGn86ztn|y*kVHKV61xIffr^4gnCy z+tDxI>uJN-ben%!xH)59CvW{sr#jGgMiPDAe|?^uzSu@E>vzhCYUr8nP$vh9%P05PCeA5K}k)cUb0kp||SSr<+>FP@`3KrCzKV8f>iVk}+o$)u%bhe)U(ufTJ^_~6$lhZ$GwQ_P zGb(6MNX&@)j_gUMvQZ0WPNMvMw!p>PoA1+Nyu+bjo_60~^^Wf-1VFc^CQiVbfRSQp zlQEL*lK#M2GoJJ8AdoIL9v9l}ceI6=qRM$`X~&d^ZnJHx@~Q;u4#a|7Al1qiMQ0IN zr^|x*ltn17WU&HPe^)T2Q&lu1fgtTEh5gu+<`%YE&~U$bk{P8c3s;2PWzM6L>{&yw z9p_p775+G@B6&h*s2#Wj?8d9BERdJUU!bwV48{-Npz$9(|5HW^QV_pqyf)>D&RHn* zNzL^nKV|toy%zSIu21ueomMswcZ7cojjpFMhXqpJgPRotWkN<#<|}8Wo&&rqQZKHM zb;B@?rEc*+I@GU=i)Imum&Bom4ZDhrG86hV?IgOfLAjQ`Lwr(T`EA2I`*%>|w@`fk zD~_%A5pKOY2jMh*PsT03jo~QWt-(Rp+q#@Ni+>}&!|OO00K}E{vY%Y7`v zXYzQ*)30CmsxuAt?pvJ&Xb8y8jb0BX?fAK5v#?U+O; zk+ef)oX3|7;>U#rAnK-(;qwYoX5R#sms`=pKKrX;u1SkFDzKdBrxy2 zfw3>r`R0(-@P(XyguI5+r>g-i3ekqsVX02yI$=*v^zm?hRg_sn-RBzfq4K+;=aXP( zEU0UOVCgU;Lgi<{`*_O97_7aKMAJ{$P`ba+r>&SUe}(-zHnSX*YuX)RFM#GkGLkz0 zoo`I$j+z~)YbvL6NGP>XREX)poOj+8DY-l%T<#bKK2a={T<&a+Gc^5C40%Z&p3yYe zIHu^S$nBKx@W}C*iw}Uf&WS+AJPnBR9rk@Rmo1|cFu4>-3Z7f@`bud|Y&kN7 z{6a~?b$yc zgF(v-K;NaZQc}B&9u55cMpNUnOfo?h`13Mw53h5R8CH2wBN6=`Rl|-Ub~*3|nxUci zx<91%u*aDUL0WI;vABuDLJSqQBvuf$Y2H}gxoRy|6QwXI~cOPm3N+&udAZt1l%w!_Maq8+&b?kd1f;kVV@`!75?)@ z%Rgki_Fc)L`!pb+u|8a7{7x8$QVN2Iu;x!yT&k*q9X80&@bG0$_`v8gB;NUv1Tw0z z92mk_`@xW=2SE;SrRx0Ky$0>#AA?TB{;l-ySU^87W$+wN0J~oNNP+(*Kv?IR;ig8W zI4Ci-|LyD+GPuYakYy`+Lx<*gvW$y6Tl$axq^wlFa7g!7sAi0@hGo}w$Hd3qOL;g% zv%(%t%B4@2q31v&=(E!1&${(|)Y5tYKRcXaxR)syFs@{9g4=-zl9P1NaIguY%X33X zqXjfra_3s)HpoT;H<-Y<%hwmSoU1R@klpsI?m>mTfVe{ep_R$XQYadI1CBA*(YSis zya8pU_QeH@fm-EjLTg&amHmJ|RM zre50ntX|p+T%g5A;V*n+$LF#~DWAP~lF7*{I+c2evM>qvyi6w{pYy8*q(EY76N3~F z`UoNNeu(Uf+yOu?%2>o z-9!UF=1tGeZmoEO6^{U5%pR`lXtt@Zi2}tkEp$p7PHMKc!r!aq2X`tP{ZO7GKB(4KXmf@Zx52=xXKtG&5sQIrb}kQ!z_TR>MCpt}Y=dD@h2e!ktk+ zG96aa<>SFu=)XUu=jG>XcgE5$R@2my*53o9E`d#xzK+--vT^Slxr|NyWvnT6IwCMw z<)sj-soSk|?<_M;8YWxmvr>khAL8apA-pPCZgg8!J;Bl^UT+EMV#cC6)KbyRkd*fm z(uhv0FK7DsV86cVUY?U)S;D0AJ^c9!S*Tky^OiMN+FKnVUZ^W;=Nl8X!fgff6gekl z>|HjB>RuuKW=|w@wW;>P0$oLQC@=;tDQrRA_>3Q5JKdU4gfez=8fFGYf>NO777Pj9 zrW!^i&G#Rn7t2YQRK`SR(UWK2=)78iUt8$#5o=7Sqo_Qwp&y?nr({+Evr_ag4wjN2 z5M1!l8o1(mb<*SX?D7bsQ3a zewC>!Ki8!SwyPq8tD3HeV{vlx@S)CjVyM%5znDhnTGu4>%u+e|(?+3qT4uW~I%Z13 zbhB2f5g|%~N~&zZQDO5|HQYRdmq&DOXpeJwurWDDsnzEbWa|;0*~X68^YCo222R6M z9|g*Ae53biz}j1zUMmxxL#Cj*pE-Bkg|4V0#iqk(*Ctu{ARug6;U-Bm=qLW6bH_ur*nE0F$H2w4GQ0*ebrc zk>4MoCF$gf86=0BzJu`XETXDx=%-uQF_hIJK(d$}_(WNKSZQO0rGAAu;%6&c)1l}X z_aB>fc*gRqI3_uAui^+R!Uwp~T9cL(Qg-g60`(!iEbTC1Ou8Itwo~yX_T$C|D+^*| zD(X2})5M^#bg)F!*qkhP2SKunKcGCCfq{-SqSwC8R$wZEn}dhkY?g#Z+%iN?6-@IL ztc$^OjQUOHwCL`m;}M z4DQs(+CL1+qWhvrnyaW}#1u7$1XVa?RitDVfjCA+Vg@P9My#fb^S@@@J$-`F7ru+< z|H_hhcjvY%8UOGkfjNjq04*ZaEo+Tzo<{)Kl-DjSl$DpE>cyQYO{^j(XQ_(#D?cmg z%uip49DYQx2FB^&N=VNY|6Uk0d%^Rw%VW0$Vm?HeespR+U{9&=rl|_RUIG(;zC|7d zqRcIC4*q#U7l}Ti;KisdjrPJ!VL>q%`b%EeSed@8uGlv~zPU0pA)$wgQ$irovG5vh zKweC{zKm4Yn1x#B7}c8=kG;J z(kpagGe$?pLM%J(mme<&eJx$C3; zuGd@>5YpZ|f0B-?cO5oXK&?XOa)hWnT#5uUwk1g(=1KcoBqw~Ml_FQ)9}UP{U)V*0 zN@|$DZn8HG3>Ob(udvl4^ad33*xMS92$Kh8=S1-@VoJOo3$({?ysi_R@K4R+Hd7e< zczVN(J;SE);%nNWHdvzqk8!g=eWxLC7C-ZK=aqgyGiFv840J=7zC5Qgn=;xQOsi|H zOfM|NjN<%tcjosKAy+t5iSo}5A)^ZkK2b`9KY#RReK#J@owzZ}+y%=3d;USmFtat9 zmDeF#yVd2`rXOrLNM0ec*h@>sm);?Vo=q}eadHK+z6*s@SEbG?8%QL=Ho+|^<_0|R zKOkK%LCaX5%9688-O1T7d@hMa9zk)x9V!U$W4Tvc$F8_XPS^eZO+}2fLPg}|1tC2- znE3*u-AC&B^CoaK z1{laEjpf*YbdsaPRpFxV-)hGAtU)f~QdqO~Jii?w3wa`cw31;$3PIS}E*?cAYG|QM0)Q9xZVo;g%pq zmMkUjzMC<^jbu@P;KXsM#I{7~1I*IiPeUUt5Treh{+s^L+ z)l`C5OSkk8d(<;oByHmNGr^VG>hAc@OR;W*|r#-VUPZO_0bF`wI8&Q)!`F8{y@t~Pn_DoW65Ki2YcKetby++!|c59$iNewct}5hN0?7a>Uwy3Ns?G4$hmz8 zP)vtulN{i7h2Ax%MU(Bo#C}|yUW!jh&`(yOSsDzv26olEVGlZ;!sYZnmt zdJ!1al>^Ftudn}4Ea!t5xc@E>$^Ug75;kZ-4t53p5b#Y<56aX5s$C-5&=-6aX$BN4 zAr9-}D=lK7gBIiT{b%&2(BR%(x`-kT`(9n*R_z8&P+5};6|4nulET@Gl1gr)*gein zPlHJPa1%%A8mulS@!5f2EjVDQ9P?lsF=J$$On5@erYdltW5vi=?5{)7EwV^V{}gqJ z7hU*N(W`s7%IF?_J0~;~WsqaWr)YSA0obLW*irmZqSNJDW~TaF?zjIG3Jms237QKz zn!&a0tvQoZVD<2EehFR!b>nwrx|G}L9Ls)}Idhw%%oyXgIOg4{2xTbJNw{4&BtJXJ z5m|I-sNL+jYkilO6-@uNBlJ!Yp7}xh6Yy*CtN*vrD%p}z^GMt|Yc+d1b@4R|)w$;R zk~j}*@#dOj0oJcRZj}`^yV$=htUc=;FWn#lI4AE$9T+_efu&4Ag-tZpc~AJ}yeB!z zvRbjFU|fBx%kNRy?Ch#Fca+VSAfaqkgp^pHO7oUz`$)xPc^efP?sv^<%-5Dbbp9j1 zMnaOy6t>h~Q0TVMfBU<`D4a*9Sn=X4RM=FuYkD?YpPNOkIIqOZ_wfGOY}Vi%QjZeQ z5w1{I^GktNH;{|x+dJqp>m$TPx27HMxg4jQdZ?d zFN&Fg$#`sIQ>IgsN3V7pvh#vpVrbj_&7-e9q1{F;k+MC(^u+&~Z8Wb0*}NvHOm@HO zrTyTCI!~h;d-Wlrx=7`P4GIT=1R8_kx%zC`h@<*&acsX<9@1E@or$f=&Ib#}tI%%v zUz^H@NSFUaVYF~AgdcMQo~j-F)!>2rg>a`k0|ezkhW3g2Ve=P-JxEP(Knrtp8n{G~ zpwu3_GSa*+%_q6km{ygZ+UiDFN!x0|J9E%nk=W`h#pl4aQK+Q8ySAjX&&pIi87ty& z)STW5m$vjL4EIV;T72xPn)r?G&Mv}=BiOmAZa40P;P%EO5~N^kvH8uwh2U{e?c!KU zK3zp?qNGCe!UC?bKxd+Ku3uPD5eu{Syc4{Bw(NAKB1Ml<(rMFazmIYS?IGb$0gZ;` zfNa0jvv#@M`Omqr8LoZps;_~OISPBl?Q{}1vo1?u0ogj4*X%!|(H+^j0Sp#5g3U3j z`?(DB70+YOw0Fd9ib+aoTI4R(9^vEW8L5)eSw_iy8u|r`N3nC zQTIgKetTL-o-Ey$%6BDJ;EtIghN8ym1h{0Bzv{2f`%?_ZsJkW39`i0(sEj?wQ6io* zEc8)hH`0W1m?FJ8ZT?n-+>!5G?p)hm$1l%RLv%o0+Px21Z7cP#MC5H38*o;+x`T>2!)&vuMXJ&<*B9k`^*4 zRS#Cf=w*hG($e7QeY%LFz&rS~$$qK1j65Ir=E@2=svJeBOH*IK-+kn=)N%_x*WVd= zcvvrS(2OEstFbn#`$0WB8Ny$y)vg>C4#{l~yDtxz?v~<_6%68Ro<4I0`>bj`zjO0} zaxGn!%(8O=d>xf0D|kr)*jnr!398@E-x> zCOFd6j$Cjlc7I5m9J@@`R3#lRWLxY_nA2z5@y_38xgS*Q=O(+sXG~EK>4uIy-Z3Z9 zH7mc;qRYmgg|YijRvhNiU&;h;FTBrVw9z#1644$KY+CF!-HkYZDJvc2iB*daZ^@9b zhrlYX#uw)`NhV<{0tKnJICEYtln=8lu>K$Nk2F38;3*J_BVqi1<5FZI@Y3biJL6`sH z`CMxjVD&*x)48eT0y)b6LooZ7wBveU1;`ivcWZGi^lpIvT?CcHQSB&H`G2@;|F`mH z=?qfAf6>J{6$-Eb|HWhS$^y`a{`V+&!W0qzi>tP0|2YT!xF1QP%Y6I2&xu4aENTKdI0 z+^Dz^h!uh6E<0TY2i%%o_rovDlV)@q)K}J&BHKX(UJ0)0tFxW8%`tA;adIo_>=*loA-j z1FK4llTS}Vm!p(s8WlxdRh+vvC&YnSge2>$)c(eKj~a#|F<7RioGq=I3{^WHVtC&W zn4T}-7LgKq)w#v7XzBXp0{&`gui9$lHVn( zf;DOHX+!A+BG39b#(>cyO0m6{SQ*9oed*l~5*s)fi#JLB=MitHpb?qPKsfma2@cLd z8kB&)4(3>u*>w|~S=o^EkQE)|#j@D^b%THP}tn zjKd!zn50FP_Ac6yxG0$sK-RCKf~X<3dUgl3mz0pQe7|QVe>%pOErZLt9zK0V>TYU= zM7zjpPAvPU9G1=xqt+mZRQ3gy;_u_0rErDA`^UvsJATS60VcTYMnrz4So_gujRkdV zP+mqTGuUEbCqskvSX>O59u7wxhZZY4d*I%4m!NEvSo0`m0utf8dl^d&OwIlpDrJhz zuff=M{JyMuWN*3EP1;FQq%OmN$7KR!GT%Hw*6wIeJc;`J854l==($r@tfs9lXB>dK zy1KfSii1FjHPv&3+R5?V_Fl5{u;KgL`LH!vCWVzB7UdIT{sk%(cu`s9yNrQi>IhM) zAm^I&W%+6LK0U$YgV!77ckEA;|H z=%YuAzYMU(%K)kru%74Q#1aR|hg&bTs@rH9^zI+B8X35Yd=%h5xW|~{b|^2yy<2cp zX*u;*rzw-3m+oofVL|xB+&ec4pg-Au9>m$lwvgH*%}WX>5HO+=4o;YrcU#4*(O#C> zl_0YhHhn7dmmP`M@>{J0E;mw5D%ra7g61M2w8YKAT{3S8=*2?&A!g(9v{Tzg1MC|x z5FdO6B=y?X7@}I;DF6J})Hq{5c%<=jBJQ)Tb-@+K`TRAd;dKQNX9n-E{#dl5m!5IQHJq)o-Ft=G;_d%1WO`Qr`>_rh8`pUjr?yn!rHDl^J_}C zCN$1_++h{&EK2g0s4-Qf2p5iio|HtuuhA+vsl#BxbtZPenmJPpcQk4!8*u(jf5^~% zZ^jB(&=QqniXgl`LqN8M6m0sQsh3y`Lr=W%C=UX69B^avx6QUAcFN;Rr7@Pd& z5;a$Z#7Etp)NFK7O@YmUnYJ__C<?$k1+!2N5;Rb+gLELOY!!DSfCAvN*EotPmpgiY&OTPRXEqs-={xE{!WRnv&2@T z?G1ErU|BU$qJe}S5Pcx%J!b(DVO`akRtHmx@udkeK2O{jGYsLX=Be~k^BPXys0wa` z>k_E?YYtWSkTOVdCZ?-N=y+!gfONp%gG6I3|GrqmmmjlsG}U!UD5uz_ipLR-7z}Z7 za#Iwdlt^kbvATYDTPVk7Qa}^}IO^n7>_plRMp{~Z6MGngde^+05KEPCD|AzJAxY#V zm+NOnK1W%YicKCK62h5mp!OoU--R~r=9`$vTO0%Y@AI9ftF19kiD4+L>tk>1w9jZs z^+M9S4>9SVK#Kp6|27Vi`vg9l=*7tUG`~Y)`6AH?V{lEd{y6}UH+fqLKy5`wJe#vU8m*1rsl=38uHtjxD=27e_T+vGO`yg~#y@XP$2? z+DjBai`7O4{T6SEg_9j;{<_kUmQ!tt0iZ+7h>)G4V&x60xY*-rd0_J%BS|~vP@>oD zk8GOXpDWl?4-F=jhqLv*>?qk{nKm}M6l)*Orrq*SBV$mGAFH;IRe-;Eut4>Ul|n3d z!~47)JznA*Ang5N@IZWIWWqz9{d@RolSv}ZRu??Olq~~dcCjP0lm~qxx4rj$UJ;xs zl85hUxRGN3-b7~ESSSsffr~-4!e1KW^O79c)?~)U$Qf5JUmD*Fb%8U(!tI@U8b}j>}2#~t|gf|b~id9nF2x^)x`WFvNqS4ES+9Z z1ierK-`A}LJrYdS>XY{eX18Yh>Mv9Xbb|pC2hQ`-Tm4~!s1Iky1NMsMs~w_KB!_tH z^{?)zUwmb%zxT#28%nONXnMGL)n#K}cSrikC?~UrYaFuDta>Ko2%>Rrvn6J4jhMG= zjJ;5&VB@K?IjT@nN5cCE`rv!ydT-}eBR6tq-d?`YXbp7ss`>Wwjwym9rnHu`Wy5y% z5}94(-_el=G4uz*@VGEM-_jSh$cy%}D7PP#>%iYx^c!Ptm-PE8+Xe~A{|^9nK#0GL za`&;nZTO@-rpuj1DBvTZcpjHtyp~*J567g>_)fpqGE3&jff-EK;nZ|>x7;iN(;UuQ zJCB(DS9$1<5AotQ8CQBoaY-TS)U)S1jp_8$PdIUHBuz-Y*U-efK79`t6_2rfM+bqp zJkEd52f1cWB7+BZ(C$#zX&0Y-tso?QB)MWKSFB%6TA-U_J>#e7Le8K5JAJ*jAAt~H zTXZU=^+kj_ce7+7g0h@x9!kg-ue zS#wsgpbR>8Zlq<*BDQ$ud}ri6OSx}VrvFh08H_8aXQ9MzH!ZKGu%e2p(roO$LE1Zq za0gW#&QaIt{WGP_;4If_I9J-q<<6WTel9wrgez{pm$}|odF6-`t9d$A{S}*uNhY@- z3$vq_qlb<&;y(FK$%%X;2Tp-1?L?W1s2GSzt>nBbFK5k)c~lEwsjR7^$kM~!mOgFv zfz2Mr>RUg_%IJM;Y95Q^ax$jNosFQ+OV+&0xnWHmq49RQhMZ@Zf*FxV+aia~0rgZZ zD!!QWZn%xB*Dau;AfM`{xzrS;6YTG2aBLD!ehs;$rf$GD(iJ5ttlfN{m(A$+IVAQczq*epVWp<#U*q z2S>N<<=Bt|b4)y$1!WZGW|5f|k5wGK%OwMKR1(?w`DDf!a5`NCO?K_BLUxi3|Kt=N zWm#u|QG&(sjstAn@FM=&cTm&)Q$F*Z2Y7vdFX~}~Me@!mDke4BN_ue-*{MlH8v}TR zl-ZK9D646psjiA-n;)0oOk!NLjKp4T`jdJn9G_7{p%}8dyO@z|!!sfBsN3M;#Nx9= z2l4VdxtQ{T9MY3xG5aUOcf93lUqU5oE-NRrV>7RAI>xBqhfhW#RU2z`JXr;$nl3Uj z60u9z;8s&KwMv;a*-8ov$j#1@eB-eMU1E$PQ%H2Ih<;J2cGoy7EtZhmHFMW96tGZx z-TPS5{|K8?R#V>lA{)ECVZ)PaeO?d7ge=O7^YL}?BLTnI5n7+03D% z$LUi~g(cHzyNu5)qNpHGbdfJUoLdFAC4WT%snnN3QZg@AKJ>`H>F zztOOD{4*k?x)~)G+`v*x3vJdcVn>c}w0lHsD(noS;#0^e4BrXOE~%t8*T%r%gB+G~ zh>9Uid|Y8(HW~S4G}Pu3HPXt?eQmg6q<^HvV2Mj1J2#&^=|ib@Ax;i=$s z;KL(nUVn(>+BK|+JIH_j__sXu+)HfOxP^V~4mWa&4VS=l5?u$h#fM^=jT?Wqa8mN?RL^GGmE(tb$l-_gsM_~UTD3gP!S z@mZ58FE1m;(Zh_5E4l*Zx&285`G389e5>_#qKl1Hrgh~6y+ z7_*jf!6ntiit;;mZek#>~?%=G9kVada_C3VA6}c->PtTn5q#%gKy(Yftw41`E+? z(jF;RoRcm@&6uJRsa?K;`h;;diJtfODY9o0|5Q$OWePp7|AJrq<|+2Oa#*>nM*LJO z2fHQ6E-E0^BEH@2)#MD>GbyXgCCWKUFr`d_&;lBkucst*l;+7;a?;f_B^M(OFD8=& zt*O}*6qd-imqKEU1;4brx=9+sOl(Rfc@ck|nUO)f#e>tOrre8YK_Bk^Hpb$XaPiV; z_U$>!go=dT#4j3U92oBs!nO_P|1lDqmPch>ql|6k#D*M9g`!DMlu^bfdR1eEj0N%8B|@C@$r68_DPx;!%pn1q za`&X$)~bd>^n=wwv+@c0SDtwb(2)awuE%@i`6(HbxV)K z;Bn!ca^cNdz_lw2q+WJ9Hy^+iSH2 z5;OCts-Mrinqr~?lQ<1AWF&~aN#1Ilx1<(Qlq@55d=AC=xnyT%l4NmecmG2oZ$fSb zrCDb2J$u==|0takUTK?fk?CKF zKjL?fy};J?F-#Jt#EMVvby`S}Hk|g!nc0b$98=-fn}{N-w48LCnG|V*T&Z_btQEib zO;5;5LaOK@Jymp(D!Ry(J`j!3=MsAqT}a_k@yeeUlP_%-wm0$hTE1Zz62*2(!|`8w zdK&ReG9qp-F{gss>IxbcE+xg?Ot)8jdrAyJuM>wSr1^^Mj5s_4Z5%#$l#Y>!@J$F! z`C*$ZC{+1oke(KYamtBH`iRjcF>-z(Y0*)ns`_M$Ek>L1ImU2I#k1gsySTP~oTq>B zJ%01ZD{S2GI-3vmXt7~*Mk!TgMKmlvk32&cy)HXxNn#g4xAA4h0-^`Uh zk|cd3sHUXMBNxtYw*;b+n$A|;vdCzK3 z(zdpkEGp~E@gIGZ-~IY`ynM(--on+?rv>Rfa*RQ-*Tk%Rktv@X(M4KnECz>Dd&NvV zv^KVRtw~hW){`{0k5?tG*OV9vV2;b8xJ<@=viKU?KQUS z?_x~)UQ}ukG)q$XPNitp2AP5l*^A%xp@AEa*m9lZO> zRVCdO8;=ZPwpxiz&LmfYtm?W7O44J5aCsm$nkZ8UuMA*5aqP-brZ=pm-gcY~ zJB~0o;gOE3?s!yj<7fVj^%-W$*R5g6{3R@&TZ*B16T1eyM8zgCZ|(J5b>$T-Zm6Q6 zx{NH#Alo+V5+@p*3!Z|EjSW9knknZ+g9I+LwyZQz$ofj{GMW;CXa;|#c zovh9e(zU0VfrzrsXn1m5-3|4K^UqsxGY#&Sd1zz17?gTSAWkB8DYt&&qpZ%hQ+>gO zENz-gv5>gI-T|Vj&f~I+E}*GG3`T;n!tz?0iW8X}?xnqN3~ORGD=)v5i_Txpg2sAQ zEUARfHd+S8B(O?g?)Cr5T}y0O>aXJJE!V$yEv{F7z|&JJxv{#JXEt_) ziKZG1WFU#lD4@Em0B?j4nv4>}#ididWF41Zbq&|7timjv?9lOkaZ+js0kaHx3og8x zOV+Gl;k>!5Si69PwqrE+O8}3R+`9GL@xfbIP$_{z(|pR)O^h7hPV1;y2&Y!K4jm^T z4&7@gVD0r6lhFGdZ}eo)nCs=BkQo(p+JrpSE?viES6nSVtVVoEDcSZ(4(-@OOWzb3 zRr9#$s&{a~@&z=_siC$Ynvs_MY~9@gbFSvSmq|aLvyi0=mau5~I@Z>~VF~62Cw$u7 z#;e}-LC&9FMPp+FiyCto+_RrH3H0m`08VxJf zbHz26vUFYpbLTdaXX(?@#+*SCs#dZhZHSk)9%NJv0DcJJqS{yIK+%Vi?xTo$dpmc^Ng)LgKJ)r)Hg9Nk2xIiJNB-N5yiUBIfE zG)B6bInp&T6O^j_O^G=|)+&jaIv##P==I{YRdD59cXCO=6fH;F7@G28seA|j{>k+i z4{YSnfLj8eGkR5w(Ww-Q|4tGzG156Af%O<;{&Y&pQ}J{ksXxzy6mP*NK1)`Qp<-o`uDGzhVhKrJJO(wZig6h+Y~q_Vlw z!i69H5|`yPv+s})4MP&eYj5NI%i=h=t(h?y@a@_4EL~cOp=~Q0Hn-tadI$<35WiVj zosF+^HwTaP2PFSwK|FI*!DkKWPOOR8&+*pqz=#H6{LE0(rqIOOrbIP(XjT~Zc$0QcJjH%~e&6QVQ#ge(zEMM6` znsR7+bFJo^mX^unm$JJ0_>Se?p&FKCu^qVqSu;xlGy=1-g%^DhO@-dF~ z)8n*Kw(N4QShJYQ0?|cQE+ti>i$XhHLbf`3heKZ<}O*wn$iij zZEs;RWTSNLd%5GPRjgXQii*$y9^Tr8)ojw5NcFqw)t7Vg5#90K3PA>1l7L-)SH^sf^WEUB~5@oF}Bd zmPP9pQ{))pc$)<2zHF}f?3cN$Aco2{D@A_`nOl`h;P_sSIg)9-@OrMj^gQO*moRtL zc`O!k67TG$Rr;pe97p}~^;~?}FIYgHZJd2a zI~aHQFiK1sn_AAQ%dcepg)5ma{$hcYn=ZE6);)qDxsGe@`7rBBlf|x9N>IO?MV0B| zH+OMxz)ty+l~m_=>Dni;)qoR^$mtdTpr)5+F1wj`U9pOqq8!rFGbkvlp{^*6z*q+d zIwyo|ikb%I=Y%*YeQ$We zO}r4`OK-W03m4C!ac%?478Wyk;Ghs9m)O%;3`$&|H9DQL`bzBM2iSX{mCjKciP^;z zCpqb8k^U7`%IYhxW}U>9^JFYuu&j=h!9MX(LrjUU*Iw&N$fABu1Bv582=|2vp?Z2~ zFI&OoSBTsaN8eCyV#D?W^p3eDo)vlI9BXzJ%dUPm?_1X-gtCtEOgj^O$LTj$vi_PY zSd!zTqq&6vV>a{GUc==}vYBe{$DCVBS%Hzq(S__4KkiDsH$e(@+OL+0`whiW!REL{hDjJX3ZQb z8kVqh$!b>3DfxzKtbdATz=UltZXO|7Mev)Q5m&Or6h{e?rrPUoVI!j zmEE|GhUgBq>^rUvo@&~J*(L+u6>F)CZR5euf0pmRa1?vx8dhZV@#Gurl$?JncU)Y~ z)}McdFaG2KHVnp4n{N|Y_A_KJ=HhEFC;H%@`Q{IQ#nx^+a~BJ#@OE)v-#(7^c*v|@ zKvkjzdtMV&2|c`W|ATDnS1)j%Vd~CoC<6%wC|-3lbA7M#__p52<8BEOl1f-|>0<0% zFY$}7e~;(8OcYm?VjelnD=)mn{#G$CvxUyB5A&0s{ER<6vxQ?lV?v58G~M`NuFLP` zcR&9zzrX)6x{@#FT^Gi%ZR0^Ef+q5o2zgpoz|`hn@wqSD$MJ+lE?Anvc-t67Ldb7k zQ%_M&Cg~FN6xY^JSsu^$J_$;VN#vFmi(`3~Rt*&o>9YT%~Js~KoMNV^O|mb&YB z?*)@Q^`qC>6Dr|`D@tg7`VG3(;H2qFbdp{`)ht42mccFLanOBmGncYeC#vdn}>C^_dN99Zr!!DxZ;k2k06LkX5^a%hop0^Xzx| z>Q5iw^$s6dY0*r!9Hq;fF2U^8A(RF=4;Lb1nlowy$hPm-BZkRK`voALjSJlMIrL_z{ z{{z1KU%%z~S2wb^RR$+d5PLx#=dWlWbmT>T@snTj;G>W8`ra-^gbb>|FHs2L>S7x` zqi$joQbU2{w1fvEqt#WH|N<8BS)+)$6dm@oioh zE?{nLBD?N?mhnvSQ~g`mwzr)_+h1cxPk^-41V%d!a_A&NC;_4jChCs$3?Wo^N}UeK zlEJ&$PWzE&+WWm!U-@p$FUgK~!bDn0 z3cj9cLKq?{`wWCIy`D9VF>K%Jl)9L3C8y)r+fBmUxfl-ok^3HalC454vNMv|{fE!+ zZ{L4_r#I}TYs5v!A4By8>&bJfdUrDsiXp9X9`ln&*}C}%<3Tf7(ngD<%=Ud7+1};Q z-mg;c#mA%+QZu)LB*PdEe=4=abct-i-1)4iHq(5dnQjT%YOlGSHI66w z_Os3O?|YT!Uw#c^?KLF6@h`mhOMj64*V!$;+-i%bZslcMP#4eZzy1n8eqtY{tU1gn ziKnlv1xMN()~_sQWb32+^k={2(I=kdjRXCRD>A4-lq^0pWSSzi;$j-bE;sDz2@mq; z9M}YMf|@d2w&-H=ojYVq@6+DVQ)>idmew(UNddzf@8@Sf{u6s#nIcmPea8;4^_Azf zsmd{SD~F%|8UOW@-}2B4J7^ce=l7af{GQKpQ`S+w|K0D&*!D1888`ExOQU2=+=oNP z&739Ial^_od^>*4XFmT2T4Lsi?PuZXbxJUND_1VBl3+NS?7TwC=Twjr2gA+nOr_RP zn(XAzD}Un8_dm`7zYw{#WsDs@O#7&ZtaW$u(ZwDf{jaa^-QPdT(=Tllk~yUwqEfi@ zTHbTTTn_*Fi+trre`M!WEjL^>4@c{6j<`#>WJNq%-k7AJMrsw}38i^>+IJ8v zS;3ipipGQ4O^3 zqSa8wd6%pt>hL4{?YdpOc%V9w?1sY&hQiLZZ&Uy2Vm z7c8VUevmDPC&{mGqMy-|f!W?5)!?ZjSnAvc^~MdvHO<%d82HJeAv zxnf-vO`LZ&cE^P-#*Hd&pgMb76*o)m)_ma@yf1N63dq`^4LfD z=r{@8xkuafvUSHk#w-~mhK4zK^f=>FV&tX_mRx&1%ab~Jfj6}#vfm)Jd;l)`G#{Kt9yp`Y-;YsZNy znkW7un(kd&c>RSZIp9bj)7Z~5fA}Fk`t^N0_WA)v)vTI83>V(}b*}I}$|t|}6P|qT z6OAnr?9P!I_WQO`UaA2I$ORi?2y@mUJ z_CtRCz%v|jR&vp06*vwb67r~KsL9wS#JuhlLTEIZ@edwj>kE&tQGCP7yZ{@w?G{4l z(FmcM#ZY|tz1&mP!B4*U1%C42v%Iu<5AA~(sB*&!a z7-G~3lDT$=L$>g|UFD2q@U~P^RvgdB#1z@N#mtpphT#q-3(8m!XTc=rnSxGwcRtF0 z{_Hiz@GvTa&yM2*3?AFTeP6zlTR!+5o;`ek*MIwMK7RY1eCS_($jiMFtV|5hyn7b| zwhHPR8ns8re)oj-Ai-*hp&~nli6fiX&@#Z31VEaBi%dadE;+dcBI7uws5I?PbewC1 z!K8HNq$Uy@v{JRak@$T(*e(Q_?QgIxYA(y`>}Qw{er9N@i2R<0LE33#*Rw+6qsS;} zph0vI@{DMArPKu>pPS*q9wu`ZaMj!dQYWNmva1C{c^z}DL0pb;hQ;@0 zS1e}j+&NU2=8_Pth6Mvb=NP^207*GjET21%g>@yQCq-+%KtWl%F?%l8+;9u;dC%>< z>y{f>R$`X^W5he$$-a$m&=)_C1@oG;KJS_wl3e9lqXo<4F1G9%qFD&Y)Zxu+><%xS zk(ih&^$YtY<M$_ja^bgHNw(Usssd%3*0VOQY4#H!V6LaCJchoZ3G(vGnKyqv!R}^8i)&dPr|K;K zg}jU&c$lyJ=L?J){EQ#n%T5Ve+V*eYmtXoQ_kQJ9JiF;N9{J&y`N+FJB&7a9c8*Lj z-nox`NBRgQS5Yszh_gz0J|X%duh|^S+>$JMH$TRU9qI{bI7U%+7BFU$m0OP0JcQqn zN|W@F1n)Qlaf#HWr;w15D1mhd&)%K%XD*~Js*fXsVpB?1OD1XQdEz&wu*FHhSt0pI zJxNHSBq@$qgOon4gXwnG%8i(rn#MZ(2H%yS{=m4KP|p$RiwEhNiWr`{M!Pn=tDsU$ z<|vBNlL+=7WYd8bhWwWB>lfiu{z5447P(gHX|&oI+4B&8e&{I<3`^Tij52ADCOgW8 zB^1T{+A{h#J;X~L>M4IjK9!67Rjb9f?|g=5UVek-P8WTLIv5PuMMu%t%_sM#|4}G8 zlx|a!NR$}EsM=|^Y|>x+$psV@SsC2Fo93e~Y<4Rn8(wA0XbR=!3B=meSmI;fV?W}h zE}u5laK!BK!UCtom68{;agoIkv0!{hShHlLEBx-8skm#Re zBq3GEWdiZoSU9JOiB0$M_^~N`l9%QarW;qYiLifAzE&lK{m0A+nvH3_T-8b2f&`QE z$jb`Sd+->&-A*|cVqo)j4*60kF0^B}8S#wvvi-^5v9VuG?{+ij^AewsK#Ivi@79O- z+8001b3-Mpz5ZYM(kE_b?TRWAt?HdtRi=_bD?Kc)vPaoej5g4`k0aeK;)~}~SyqHu zVphM`ql_jjzY=}=w^mnmKw{yj1=LprIVSQ}*VNHaSBJCnDDH|mEQu2R%UNfGivA5k zVw18tebMHHsxkYIDu)76I48)Rtz zOZ@md|H0G8V`y4;H=p^~9jrgUp0pTSIFE>qH7#p8R(V4(DvqRz5)wy*U~e47Vly*w z_$Y_koy6s5lMy55`y90IdW8oc+emwFKYgu-In>s}Sg44Cyd+#=ujyHZ)YsKum>R*G zl}}w<6gJ8KT&g%5PK+|5No~2*nQYWwsf_A)7Ar=xNqaBCESpsruzIOqGYEC2IyG{c z%Ht$SG=-Q5zdswkKwE+}Du&op$$Mmi$w@IzNwQj$gESFRdB;YRl2**(i?8P$x7@<5 zS1zHz>SuV;fnRDH^amJkYoTLkl!;Lpc)Fw$3g38ZI8jUOw^sMau0VBLlafJ`S9O(H zRSH)@gF2=iSJzA9+e|SO&AWihuD_X^Mdn-1&tdGyFwPk1Bqz7%LpC}hbMckq!9y^q^&m3%K*L2YilWT~|Dg1HOEN{qR*auBA z7%y04z}=TdPNav=)s6+sB-dWX`|f!^cijF?Zn^m;Zdy@J zv^XK<7=z9cw*T>){A>fvf6pD?D<{>+CF1wize&D@ad%--?678BFQ6ZiG z@MC=D6CdJ^J8tLB5C03l-s(~74`4|sWA%+6<^O&Bc5c4)o!oxqc{F6lqTW4JJuV!m zs{S95U-Hv>PNWlt`(wDbs=tv`4cfkzKAjeU_#9K~KK2gAQBaab=7Qza1UB&EwkcfV zBWAh2GeZ=rp5zX7Hq+}gk&=}|l0||VNeY)T%SX&ETmFWG@v0-x`9YR2R{0`hI z_LwR4#4m*ta;va7EL*r<;hmXt<%gQVqFxd3dR>u&VHnL8JVQr$=BJksqq;8JTPrA%b#U%`z^# z`8~YnmaAA(mqlPg#yZi4t9vI;{PA)2cr#dh&24=6?ss$fs(O-S44Dn}&BO^c-bujf znyK%bK+{3E-IX#<=t)6zsM(E-yW!n1v{RHG<%b-L)F^zd+Jvmyuv5J7BCdLej6b*B z#yc;}q;F3j&V)$*GG6!xhv}1kXE9IFw)X*k`kxPS$Sr+S`kGqJ&?I(hGFl{XQ|HLY zCWB&hb`zK0{9f+5>vnE?=WX1!Za#U^UsY=xjhQ4Sn#B$rvZvl(4a+3W86MlB>|_c1;8J!4di;NDA4dhC{=2dUuLV_0q9-H~j%89OinN^_8YRO3PtKQTMsi34GoXdFEXj65JGI{=l6b@N87@$OQ>@-Ikn#> zHls0-n3y=}t4{nvO4PYC=lumx*965+S>xic%DC^)mev=kB(5+^prsKdK{$UE6J(Q; zEaALoQgkkQoGsrpBm?D33?}(&mwY5__j{!8DqU-p`dAL5=_e3AclwBu zMoSh#Zdhw#X~>Qe%MXH|oEcvMqL^`?m7yuYN>g#}D(B z?TOs}i95NdECusSfto;(Yr>ns97}Hf1>ADyJ$&H(@8-4}uHvHkLSF19v56Dcg{u;| zP90SC5+6g1A&%-b*K*^{%3s{bwTohD+tr6BMXpfioDGtXNr+N$(?wi!(|fsUQ63$y zJ;;5}Z>LYZmQC8*A5^c8C=tY#l`cFsqM}usDY-N$)SolpMB2<>?L4WkQO2qyaJd{9 zRUVN|HI_ka$V@1@^ULN}1=eg^SkMX6~;L6)? z;i9Tc>|$hE8DSM`1{xl!F`y+hzM-Q{3R}GR%{h~*2kktHgGUBBELJF0P+Fd}$5F>*<9N+U2 zzx>L_<=Xdi=UpG*?mO@0$1gWCoHvj9gkcO>7jenu*K+mM*OC|NBfeoJ_0dvKDPP%y z`oOoc1*I#^E;P~9U)AnXA7!jcnVS8m^0QcV@iG$HALi?y{vdbX{r~u{mk%-J3*Q@3 zQ<`v&vHf?S=Fa!NhkO3(84QirbLWLcGGI&OsYAzX$Y2=As-PqTVpHl^vR0hm6_-;i z0YOSxHKoF@0#3J@r$}P56+>(~H5FwPrp8MD6cXrk;tj=+m}JKi6-!=`5Xzzq?e4rX zTMg1VXYSUDH?^oc>t;FDxtGHu4i5b8vl6sQpMJk=cYTP@e(e`*8?#}S{xEW66TklQ zJ>2=pukd7h6pL3Zqe{q|9}~X*gFN-~ukf*Z-pgm6>ZNhnGUk+|Yd3yWXIDX-Eh-AT z-Hu)Us(U7ZKomJei&(SB%nSeVK0a{w2l)7R?`Qk4m#EWTusz{0lxNj;rBccdYv1jY zO)XfZ4MN&kk|w@STO=itZZ=4|mZ}2EHg;_4AW8+=SIlK<%KMc-X;mSWF%zEpT5fXpE-il*~|EN*v~5W z=$C;pApSBgCI*WNR+V3pdKhE?b$k58#ieMvw8rL9RUpBRDXgbZ$R|F%`fQ2NLD5Ak+c$I(Ti(Qlm(?-;#$Gx-F7fw~iv>=fpO~a% z>>>3rWF?avbPNkAKEjSyALVA!zaYo9ys`~d&*Z{OvKJ-s*sLWh*z#3rJ}{wxw`s;OwIKWXAC zJ6CoS-V>Ox+QnZelT+tuF_74{3Vh`svr%2Ee!6ga#a7b`$xcbZ6!b;To2{d>Kx-pu z6OlztmyJrPV*ZMHq6hb}_295ZVoriOKP;?llMIi0$gOT7P2vv~>uGwNZa4)MjEcNQ z2~g7tGl&m57#MWo@+-^u-vW`u@4>xy7e{@i%)hvfyjby<;x~v+Afup&jLANFMuH^f z7myPx-pCsuK7SGQc@DadJ8($=e|n8(9Z^4KC2K!LXGZ@h0_=)B^6Y@#-6#D(;N5fwZeSEg*I@ z{ar;ZLD|_*KLb-jL^9L0#bVUWt>l7wic==&?egH&W(J;IpKuk_zmk{8p)IUsjv~s^ z#mkRv$D0TT;5wF3`BZg!p~~g*9_YinN`ok4iQe)MAz$w0BLA zQc_P{MH-IwPKGAKpR5S;2{9A1kaSBgZ@jRLBLgOq64WbDVV~jhc!^FHIsPEgX+;$0#o-bzAu0^_Yo%|k0;(M)PpcW@SPy*zy&QV^kNn4{ zKRl!3Pkj2DJaKp&kLXLg<}ZZy4&jbH?KEAmmL-jIXsD|uOFEKIG7Neq8ByQxF~yQy zQAI_%iT*=JX_o*gpoon)mc-%)7S5l~;$svX}H$q(IT;?yTCpkTv zipnZ#3R4Kl;O>YmX4&O8acN;M&))YKFYOv7W!W0meAyU!j=Ce zO%-|S!_S!s60f=$cXTu1&S25Xr9$9xC@3tWrly+8bOT+Yi;zj(VO`Hc(|+!Iz4del zE*;8eD`dsGIoOZyW5>ZRT-se!8EoQnDX1$ZKfy|J_B@u(Uqn->fwuko*w@^~sI*Uh zt&qFqbg~MHDJ#wLw4HLd5`26*Z}|D7-Y^iMqT)QjwBF;KI79&x>! z+1U=cbC%LHM+S@1M&>uvQ5rMBp&dIp&@xPP(L5F}EF!V6oXVypEGmp<;`n|x?>>ev zZ$9g4;y8L>FD*S2vj$lCYv{t^Z{n)!mJl*0NuREzwz7;&n}fCi4{3RoEIe-&^J}Z9 ztSBZc(aL!1QT85eClH%M!{Q|@XlkIYs*HkyOw5Bqxb_?o!ZbxbLr|l2DWddH+3P)Ge+5R*h$&^ zI&4BT4vr-;SN!q9rbZen3y6=Ffyx+Qa(oi6^xNtMi&(s9AqyI+$WD$WN(PvK`1;`q zmyAF#(CMW3qN}*JYLfeY^dyIe)F*(>HM|%wMW<0NI?p$Bv;EbBj2h#qUf4uYj)jix zJL&T#Qa*2y<}Vgh=Mx(nONu?j=-4<(br-TWXNp(09}*v`ZaN7Wicb|kyq>(tt-P>* z2(OUj%*r{;mmnoMI-RQGL|hZ266g-$OKjlM^X6fXPobz`8EeWjF?x=(Q3Wso37Ra4 z;*WE&j(2dRd60lAKwDI%h`CGVQIcjSHaV9$OXgD%>*m1bt?cg^!6$X@@0_Ci^6R;# zWQgB=?@5k{j?_C#s?ORCvFHNMzj!f8{%8uz^GOJe(Ka{;mU!{IE2yX`AT_f{{AUU2 zF)%jn!k$(_RG3HPUH|4PE!WAT?sa3(%>algyq=z`(D`T4w=)5IYbAHrL ze);0D@arG5pslK!QNogUX1Zb2L)1AW9b zT*cKT4xZhx2jN0OuGOldIn0%@GiqQ1n~w)5tyxM%ZLtKHMbyjqmYZl|d_qWrkT##l zmZ28ekiMQJ*OlkQX=B^i#1wJ0Yq`9{#S5GEGpZKZoADPC@>tVpxL_Si8|!G4@v$^9 zghSOcI7Zj-nDjr%x4eOdoP2V!^C(hdwP8x~acV2fp0Rz^JA@Joty@zg!K%a`#q}&) zw3;PFZM^W%)4bg5B7e>b<`xAww(WIVhQt|7C*?dC`P1(q;sAo=n5lJy|6iFXjSdq!l;oZEt{}>Zq)gRAgb^qN^!Tu2bs3K~Y zt!I9!#2UHf)X$qsWljtehqlu?mdTu@^C+uICm}hXOWt`Yx&7OC=+Vt|PR6s~%1cN% z{upl@brH0S�SAg|U+@yM{@tnL|OsB**vdrBi%XUZwc^WIt^O_R-w$A-{4Vm9^z! zGx^%*1?GsoO^D4*c}7K-W{Q@d$2@Daj6r2oN^Fy59Heb1{C#VG&_qmD6)RRWkcjBI zD3y>?u5(3EGDl+QrQ#dKhZbihVz-(k)^##EG=S4D=-2cRG zdR=~P)mw973CmW`Bi)ifZb7;b!$}4l7E+4KDJe`MF(!+Ws+F9#ppYnc7rS@J_%-Rm z6^s#oJD2K$d@?f&sLZx9G&(8$vIB>=iuG44!y27JrIcM;T}es2hhx1H8lgNRgz#8n zGO28=C(+x&(PMo$rSE7rX4NG^puFVMu%w3E!ffrv?wU)NU_H8#r(ZtIgei@>6)RXW zf1dc(T5=>_R__LyeB*Qv`N^)H&l2(XO$(N=xGV{udVf~9O2@z$Zr>OVV=8q^ms4$x zA-z)M&5jo)H!MC`xQmcYw;@T!h(-#{1HAUkCR)_{)wW~`s^_v~@qFrQCEl;7&=$tZ z7}~{C&+VaW!Yw4!ApJg@m6t3dooMpPOURFQ(A+shz+oV{LVWhhRLu5#&bxRS#kNsi zfBXdwO^Q9$HcA{b&YlC!sP7Ypd4p_*F(G|v%w4oZ+ANQ}0`bXWZ))}90kuM{Uq*|w zsQGM&EGo0=^SkzT2q9ced4hq7fo{eE(WFNQ=?0{SMR9+m9imm}(i!wWVwAB2#Y8o_zbTf z?Pl0Hg78ODw+!^+pz_p$ zHQD6aCfIkho!G=I90z4^>>R^jl%UZjn{${+qVNtLqr;WXg7cSCX!kQR*pJH)O|sQR zS7$Gih7@Y%EtJ7Kj;WCWZO}`P3DVcsCvDNe;kH5IB&aRS&nG=?l1=wLNAo}@hYpEd z2mzlXLG+w_(NSg&Sut)7z4{OjzH%IMwB?NLrsM4k^`s&rBMXD{?QMrznDAS$TV#;% zIuQQA)NmWSn>!dBH;`3WL{_Me%^Tie``#A1)yjYa{qzh@VNWlhB25C~{hN64js0}B zAE&K*2#-+)9oLWyK*t%L^q%BM)yl&?dxUtU)v>5l`c`@dnW+gFCt8J&I>;!fVg9lO zlx3x9%e8xY_Ve;fZ_wQ1A~CmwS|MfHGUS=rqz2k~{^^(4cYHAX$qI86q0x5sxAtl8 zvV>s}r>{O7+$8~|ovO-u^7C!hn41 zJ$8&Sa}IMB%_Bd`!{E>e0dovVW(Te9GQg^SyKoV;670K%`xy4x$c{HM+}A~Wf0%UO zaF9IjVrnK{;*Xp5iH{D59?sq?HEJZj$}GNWytkd!wtmD@%781uumq#c`&w|=bEuxb zfYO8zg99=Un&Zffa?;Y)&8Ra(Q1oy>0ss|^Yk5k3YBs{)@qIGzdI^jVi*Fgjl3PYu zkpxCD9*(!QiBI-0(kFF~j;BQYTeRmOPyGIMI>x$1jzI}pLii-8O%VTAo@8R6xtTtR z;Z=|;akdP?LI%YTW@Y7)VI5}kQ%~^RwpOM@25s=2bdb96GOCB3;y0U*2r-h8C87#- zhk3mD2qVd5REuq7CPm{JInJKrqhgao3`*N%l~q!nt3J~ZE5Y9otsNsm@Qaxa^`4mWo*BqV9%_#O_ABvCe}n7kY{w%KHi zKf;lIpZx9N_`oEIr4qE~r<10}wkQXOTG}MYma%)HjeRZM;gzpdd#jt+elNZ1J)9$* z^iTQ8kf5?WHh64+2*OmdWsm?#Uq`(Ebp7q?2x;hTBV z{=WsP9fLj}od>pXWHg$5iFwqA>5~IP?0@}fHukw0Z#zzpCz^t)O3HHcu?=qE=RbIm zJp&Gm77NxW7;N4n@sWxXP4b_gslIla)go6CpE{&H+B?J!yz14c5T4OKI>at|r7x(3 zOX6~hD9@L;B{Pd0yOSfWof543adqrqduKFdb4$s~mRKt-73=5$cC<;kVtYZi#E5Mj zc(W?0QmgseC0>%avTNK*dE){aD)TTo1{jpSo*ZkzIVOE|U_gAjw5c(k{Nf@CGSl(4 zzsm1_{~RsSk5pi8G`Q(Ic8ILKRa6{Z)UNwQfFQwX9D=*M2X}XOcXvo|Z`>`o6Wk$a z;~m^x8VK$*&}{bkZ_adw~{UT?vcde+nLZabn$j62pX|e zP)K!E{$lDFkv9fIg?6)HQ|I6%vmMKn=X67#7!BrS68fa|J=pl!QUcb{^%n+lj|0qW zyLb;L%gR*EqT)C)89yWyYwlseU)@>ZH#Oeeu%cd=&*h7w@P7)ck;T^LVXglq_EPki zR6~?pet!iq7U}N|+CfZ06{?9rZh33+OAF``V<95T0#5#&h8r5Eswk#m}r}--3S&@>qg2!zL{x|mOi?RxKYgxwO zwWyYA(3mitdf*lnK@Kkhm*Q}F2-jVO7ThnlB){>al9A)fd+v*4q3YM~QR zRQHL{c-ExHQPlT14%#3orinTSAItwc{|VMAdyM!fa_n&`tF>5*pL8;^q|B?H1wD~E~JgHo1zvh}=Uz-qm-#V175x*H0~2@FsA zLo9GZ%Cw|7;dHc~TCZ{^7a77NYC+@Z^W#Ee1+fOIv*3l2sk!G`)mwtnC(S!WCiVBs z+iM5mmEfIX(2W|0Imyfz-EJQI@thoP(4AAt6l1U969O;}U&_@QP}u=3J9aSqvcFC{ z6M2n8(#OWQ<*^38@Z^N}*Fg+cdOmA(((?@nZMECi%Q2{Cg0P&G_u^Dsb4Q`E>zAgh z)!mwh$7siUAC1<%ykI7{@#A%SpVV7%acN)|I!N7_Iy$7ds^5iPQdPyz-?shkwsTOI zKL(FddYQIKo1(P4LccB#OO-vRlV2Kffu%ZBZ6^{%b_g0sgucUshx=CZEJiL`;8&IltLglyFN0QItcK4`vTv@< z`vfQ4YhE1E`{!nbR5;b?pXmt=_^I$~gmKCR0EtrAb4h*)kQZMEBiZ$1A3&OkG&*(% z&CHuJ+s+992VXB|FM`KLl&(yRB54=A$pf!~shVM>X1%su=z&qSc5Fb=)fFaa<}rd9 z$WE?)HuO6Fyb%Z5on1!uU^XaSY&5uV^$=?eaes^`{*-YioI_PrWwdgpt z(vX^&bCEe$8Ldt0iO|g3yqU=ADk4UOa(+iCX=SF|@G_vKFeOo`;I<=WSE|817JxAR zSOU#|oXvvLZqZydEm~{7VffCM8#hCv;;WbEt$%+j54%Ih7au@3l!%R=w9~&c0TuTO zRI>w@s~SOx1brpF!ff-$!z!u4n(Ba-@{ze${6GHu{Z63&FcdJHoG0 z)k6bG!YrPbbRvM`ZhGfZ8Vi>>alw|IFYkYSBazp1MKo04X2l9u zVKZl%W=6KKN4Ns&oD=ht!`Sx{7@Tceudhe3wjIuO!Y%!%eK?!jvbI^9D5co{dDDA zaPYTXJ?iG|szEfqc?6qY+j#mQ)&yb>yqe7yeZkz$tF)5CWlMv&ubfCu>Kn!$96Ue5 zE{scte{Hh7Ap8@v;99xSd7S|^SRIK5T{bNp`^Y<}yfZG*&9toa0kO>f2n_NFKCrev zbg>F2REb&7BOiTnK666bgPRVM4Y)~$=%R-^T%X4)ZCfpl=y{abVDfhqYL9rk?Hu+0 za4JD-cv7*%UHBtG6Bi5(?@@~Km%(pv6$^(bDQ6BrmJDZhI7mr1Zvliyk6Q?q8e}5s z=7G&^By(j)9Sh{_oejr-$yBCwri_}*ka&+*`@)yFPfG$PC284n_6iV_=!&8L1K#xM z5?8Feu~jddp9ftwF9lPFX@5sm4n|V8=NFj2r6>T`AB!pOsLl<;o(s#6o?7U1PJ~1P zEf%kUq1laPMl`DG#|zj!qo(f=PaBoj!3%BmiG|zeONcuRzbo2LtU?*}e>k0Dsq@c( z6D+)w*T~>rGG+h1zeFT|w@_AT7|A;yFQ`J1Xf}0c_uPr!bSfV57yR@1@#lZNqe<&? zFiLwkYBtwitk0?c|3ZAanx(0VeYO(*YyVeRjPHhQNF~vPmGee*J`1Q}XGS0LhTP`BzTg7ZO;c*@?$X-x_ESvMReY~ZJo78Mej65HCRxYym zY}NTC!{5rV0?1;|u9#6>+QVg-o9nD|h}HS`{Q;ooVCoCy{|U$Ny|#X%hzMC^0kXK2gDsZDYDmJACl$*qdT3-3_7G3c)DrEeq!~i76Jm<6pgFL zh!X7w{j-^^gv0z}m?@2G*KM`CM>jDJ=}kwpJ}X zICS!6h@j_+;&QM{U+1;D*RJaZ!g75$3}v!7u0ppB*!w&UUs%Ga>m8Cd)ID7rMc$A- zFl1wa+YEHat21{AcT!ZtD>$Lf~ zkyiJym#xxR_nkg%+;L{|E@x5PxuxC?=IQ);Igu4+B@&2cubn!tChku2Xj=IwHnX=D z;Y&F0l_}Ku4OjK*T^%-LiuplIlqDg_R7#4-M-fmngIH2ViEhpj`|+iHL<*lI|IY!g zwS58=lTdgVp8dXSaqLb)&`6J6mR6;Y2NK^qh*VN4lq?FwH*Nx9RjSk&wV`3-N^6$r zy4MU6dtVIT@!kEt;4w)IQzhjS02S4L0O^u!b;e5QonmR2n4*_yTllrU6xfIS+B7YD zA%Ek$Ba>^UOwLIWyPd?d3v^R(IeNV zbB8I@W%K3F-&$avk|S$IMrCYLCxwsFk81n)YNwyszNBLf{Q!}uyixeqO%!^xJ$z@UW|AG^Ipl3RXJ1g zO0aS1qSjMBhVc)=VpIZM;(<8Hb?km zZZ??8zN$7l;YqHoi9?3%GUwSEiGd$0)s*K0Y5$5fg&H5vy1WMTmsnw~o~O&gwkFal zU4j=G+z`4&i{I6jTF;iSDofF+Oc6aHLPCk{NxY}+GRGtJuS9Jat5Pz1^YcGGCLUmc z7a?z@rkJ2=m8yx(tv_%)8!jdSj!6ZmX#l7#FT{G^?NZV$uJ-N{XH|xLR8#p6b8G)b z%5$@2Pkp6gsLea7475+5R+QjB_P;|gLQPp?g>dy#a!qjgA`oL3;X9x4FbM(da&NrD zMwHQvoYE)O71cRGmFnMD{>vF9AC#R8V;qSXR`%G#;FCnrB9g`Ol1b|NZ}8o-LvLIN z1trT^X(74p7NjzUnC~L5`r)g3X`C8|a7flwpBifb&d-hDg@k928}3}k$YXsRVp3z{ z(u6L~a(G3|xG`KM%-zN=~t}}0@NlHqRh`R+gLPWRFH;Nz> zq)Q*SE{7u>YY`` z`tw@}bZad4g5u-xZFIU{QW>W`*lD5EB17O<#zw5+{0Yz0f`=%^{Z8Se@G*kOIV%3r z_hsF=3 za;oLA?fLD1HWnr8(NkDYNI7@_tb;J>F&*kHAge3AadK8g)u0=E>HmTYHv?r82R#=M4c-aOQ zzdX7iqj$lAjXJ0|R(R$nkvi6*GDSUw;-r&;JQg)6Jh|b>PED?{tomf+yUQd+;}P)W z#F{eWElb5<95aXUo}7&yc}LBB@Y4Wkn7piKu>rkedup@v{G81-+h6iV^qiVi^JZzj zO2s|F0U;^);}jUaX5(-EqQ)rodu4}cuz26-z#cL>c30I3Wr; z67!{gk^qucwJ)R7KA*+BlQ#Z6^Y?J+xM#Szy||Ra)Q{yG<_3tF|K$B=gMl4vWA+OE zuV}Md98ua=R9DJlbr#9Hrxo-JPQ2gNT~to6ll^qUwXMo%zJRnmF}Dr@2^*EG6p(B) zSy}lsHfJoVq=^`3LYwmv<10C;SUg<50omeiwd?Wrvv(;wjiqfTeWS{{(HME*an_<>5F4!4%WnoSe(yzp<#I}k>lsM#cL7ENG0vT^jIy!-BAX(+Yw%&_-tzwQ9mz{+ z`ErfT(*H289AD$fksHKM@|vw0Om*b|*>Rs#6aF#pcGL+LZd&H4^Lun6aaVWQAY6_qTfeL0Q>V4N7UkVs)p<@S~tsa~(U0QO-Y%;TLu$l$B>*e;uRyyz*zKb|}_=2oUL zv`qz@5f45m+R9CB!4fE)9^*a~TahmR1)tFOzTxInxD4CDQ(*E9eG0yoZGLMwXuUi7X@~OU)CLm3Js;#$a%v`glsYTUn@1CL8Hz-lLBYa51fkXE_ ze4RlyP&HTF<&=`;W$jb9Ya?+zIxyxb!*vd)Nj9aB1@qkOf&+a0;(R~LjFhI*9z|GZ zEN_^P6^qwbSA223?+AAP!zAjjz{bFBJcctd;S#0VIOK6TqI|xy(qoN>35Q%(zZd+{ zCQpZvT$ptFC+PfnPTyBq!m_bkt>sp)*Y}R|lss1TLAO=p4uz%9Gc#WY*OEiqeYg~v zP7ye0b`IHY0^h7p2-p%O{g~k@&<}c3v%)R4`^1RNJC5}RVQ#JXriEf)^{V+Y%!8X) z(sSbw7Euen`om(hQ}cOl9OdXQ8=R>~@m13kw5`rm*OERWF|oP#eZ;p|+Na(*O2q(` zL)&1w};c~YXyzZ6Qyh7e-`vqJ6mRD+B;optPgMep! z!U{PcZaINji8C7Tr4M2GAjM=jS*|6nN2IftMEbu;woj+QFRCQIFGBn^Vyl>to7xMb zsqS5iI5O9fye^*?5U^4IY0p-6eAKpW}1WxUC zY?5QBNyF$gMu9(RNP;6ddQ}4uIohuXwHuqMKiNxsscHFH4ujNouX26=?ywpuTEUXO z&#q;h;0uF0eN6XUYWVEN(=ld7CNDjjDK*wJtSs^w1 z0$Y009Slkq7}$L0+ev+aQ9UrWmqnBlZDTO0k*0i{u?5B&sP38cumSh}FVl<;tuNx% zYYIbFQqH$~gSs^+3Gnq1@jh0Zn-b9IvTAv4#?Q^~2$Ql2HC!amI^md5^NG(O|&~EB1_j#!g8YX-lBuB<#v(&x{ zhPm;LnGK>~#(CuV52&6lBCwou+KtzDrFX1qBHBFNbg%Z8k~` zI%~4A5xL_>v^G2LFpShZF@r58j0e5@TGGw9I>`DjzRziqz#^qrSi+7dI=>TA^v|aS zT=?fyV&o`D7(N)1ydJ9)VZPbP(OZs1Oc}H`>!gI2U*I{fzhOHQJ6Qb5ms$wZ;M}xQ zkorZx5{F{qNqmZa5FgF&mor;|@4bm+7){~Nk{lt9+}z$Nkn;~4MK~?3>4fUl8LGzV zjzn>_hAssM;DS$`Oh(CtxxGJay=}rHQ5{hTimlD?_})Um?qa8Th8~^^mN_~CG-!l& z1Mee}>u-!}O5W_yU!KtV5Oh1lAVbZJ%e*apIj#~Ul{A67g#&2U0`nGrPfFREH#HiC2J)ymjXx3!b;@xndjdq>8ywF?tIqtanDORLQ z;&zJcv!S8_@pgY-d*0cesNr-j;bXP)G?kUYNR;glaTbxWVl>BJQ_MrXK4jX4P5HW# zN;7n5@d8`>9n!{-qaVxJB?QbJPpCAIGxKlT`YmmE4bm6xXg$T#|q!Axr}_5THq61Y9~nFAET{ zX>GY#1fN5EchW+OfIE|(0dHU)6~^w_lBYtU^|uV~-|8qjoDwhJDr8BH*BVO={HN^7 z4#pqZQD%Ohapeb|GATtlBfrx>o?0>*JoH*W>&TdR<>JEb$Tpo$(tG1+oENQNM~84F zl@D;Mg1G@_x+EPBUkQf$;CD|tU=MYs3%4jq;g1Z@y7^DWeY*$g!XuM_Tutq3+$|%y zs?Sb4f4`Nt_D*6w^vM~R)aEFQx20Btj zqXQO>DGlCeEF`vOwB+zY)}P*9!AmLi)I*dfglAi0fx(_U{&BlqlXM!4T}c-k8o;S? zCnC>=y&37@^K+bpyzg2Ia&>)vd})}@nJ7+5-FHY};V0Dc;WkM%E0=|@8I2Y6SY4g{ zoE~8i*d0b|v%J5C2|x3Ka?H(#U-xFv3Uwf$Xm?_4SP>Rzn!WuAH7^p6L-ys58`Xc& zuv}j5r*+_1vnTs8t$16?kG5k92okbNptt_<$}%^4g!?8QF5xM zPH-<*o)T!;N8YEDwexZ%XM$er-z$#HyDeOdQB})TtR%Zz8>qC>Yws99`3!Wf%X9}M9w#?0*;$na3?vabKr+ zXM5u~x{4(JGwTp=P~SfF&VZdl|9yhrbgaDADyAkhoX!Gm_G@rdfh-O z;{{lxbXxsZEGSsZu;=$W@{J;2Nf509k&5p^JzAd@=j%X#v5E{AIF?Hf@^Cl9C!y~} zqHg(%2_#V7g;lD^{2VI(`c2{N7qT6tWS|_@)z8PmfE1u%X3(#3MOkeTY-YwwbF$i$ zk$_pZ@{&Nt&H8G{^#pFM&C^x?fg$Z3a=qY__w92B#dyS6+l^y(_Cs+{&)Wl~LPLDW zgXbvRF{$PvoQgHQjkU4PdHK+@u|hq4S>Uv>&BvL&JzHGL@fq1;+(YbK`L1vERoz~v z0ZRYQJO7zy%#OCz+~5l(^2qAu(@XM`1)pW z;nq#JY z2=ryaqfozA+Rrr@nD16EL{*TRbJ*mi4yhRPW$8ZO=X`pOHs#G=fo270h6Cxn<+5Mg znd|Q*1$=}J1q6*k9+Pf-i;vY=sT76xBDoYAASWEMn4~J_B^p18GE=GF5=e0?u)w8~ zBI<>fnKJ6WG{)LgdCEC@JHURL_Vd(6mOuN=bYrC2=cyidh5~*hRo(8#7s|Q0UZzz< zM9Oo$N+Fo@`)(jKTb z;k!2t1t#wpCAv6B)}zADbW_1CI9X#EgFo`~)^hgX()e;9sW1YQGN<9rK=%npk~ckd z0x)<4m_NAh#-h-jcw_J*dXF?!_}~%Fb~U`LZ=)ne3L(z z>UO{pq!UViI5>;FnIU}F2}!UoxC+HmL7<);L3`!S^oYC+8Tt4B7H~x-!~!n*#Q(Pe zjK7!t@2CH*_j-&GL;L^8ycm##zWr~PSUv6Sk4yD$n5bB47deQ5!UE8M9duOoGNTb8 z*iCGdj6_e^8aNXi2_`*@-GU?ELI2QUbTp7x-up+T5edFz`UGxc5A;7BBgrq~VJ@`a zgx6Vuu5PY&$1mRL9am)6fiKGz68nCzhK33eRGa!8m_t+rt``F0XK|a0ho!4uQD2mA zZ)^T=I{K*wBdDY}qcPDeuSRwR2muVJzFBdp-YZjB& z`JF`=MSYwIjGGhyxg}RHVT>5p2FnnO1-!_2wss74DqUN@UPSb zF$$}V*u@R8{mXW~Dd(B`<9&ic99kSEqWDA_Qo)>0T7bKH>LLSonF9KUi-rtfjDipA zLd`chkAEY5+k4qv&1RW)aIy>iG*X$SHVuc*yq*=m`k(rG5nOKfqu>S_hxRjC(W;_Dt6U@LnS!&-Q5$ z@Nh=Ks(ytsBAB`16LGWW7~cr^#6g&1-^|Wya&AlXA~QU9ohYQIoY$w-`6UcZlrm~7 z9TXz(d?*m?ftAB8S76*2&2WOn>)D!h{;L7#GCDq^BRf^lKTvuQM--H{*OSf?@Vz4B z=?5QRsTr=OPTq3g0xNG!4jHdw}0W7zleYjuWN&gsFQ z$`1yZzqc;mNoG?S&K83ao;60Q;zeD+ghitO(lskGN^?{zqdSCv8?-)Z{@&XqlN%$WG5O+UpQXe041STZhTQ6s6+us$O~2LxtOH(xZ3_hK+0Dd$ z&G_vliZd<4!j$*vQJ4}wCQ5i1P@Sc&QjCa)v(A=`w9!xVFkr@Rj-#6+%_Io=YzC*Ol zH*(cZ2Wj|L4`0QSow)e0bF}`9=)-bX4tq}RZcVuZBmAm<{PsXxnp7^c-E!57?9Nv1 zvnl+@Z_b$2V*k`5(jD^z$30Vz8X@f9q97&_Qn!3-wrF(cc|sgdj3oiJ_Z9Fg{&ulI`O-qx*k58cKJw-9u z`Q+T*TNrLQpecOdF?NAM|83r;cE*fKm```~d~V(EnRwk394L5|L(F*($7(FmUkJ}8 zyx6Q(28zA%+YdT#zfpQe7dYjwZd4!V%sBKXZBw>Y#MPwYOsB#fY(zv-8$5Y=GfZP8^$`D0IfJEsS$btmyJVJ?+ zox4?1$493aifz&`oS3aHA=-*89j7QDz3?w!6DXx~`jETz3~=Wsg)HK(hJUXvHuEtv z+{eL9CUEZ8)S9S)s*z8D_-2-+RR|^E<5K=r6L2KBJLXXW-QiVE>aHtqruJ;p$L=&g zzAuKeoP1RpuHP~7Zn+BfeZ-LiH~)fGqG(f-*oKmfaw95Vzp-q+!_J^Ugk{sr;R0A& zeG@MaehT*<{VPo%hpKUGVpsG`b&KYSy~Z6Th{VzPcK3w2c%}sERum|843h0@IaC-u zevw9|*W8*YxCs=1C2`xYh^PSeRNUrID3=Jq&Wm3vOJold%k%cuTHUBM{&Z7u4S}*- zxP$Ob8<&rSdc$chVBW2sATv__fhM5Hq`KJmks<9N>XM!2=b_Q9L7@l1Kdn-+pM91Z z%IXq7ld>)?Zn{%=Jm zleE3)zYK1zOGqt`H&+SnauJe8$21Sq?0mWV4M{_2ziVAe<1%83shWkMk zaKtzDEeYmInXIj+C~9}=gAd^g3o*sa@FNY*NlY0vo+zI!&vkMAzJbrlN4X4U`9>j} zK9u|Mde&Sr0peKDDbJt9B56q#JYt!vuOS!Y7m#XR-3!3C?*^HWQ8WM9u@0I>3vwY` zTSGup9@V{D;}cR*If!=;i>8n|#*I#!Hg*rdw7R0^W|=Pa-f~~}e#l#QeRdRlTs4J8 zeA3I)=qtrpR7uLAe8rure>~??SR6*oi{i(WReNEs648UE@>kWQ+$zSeUF{X%tP&68 zJ)D@uDrY}=V#J4 zYJZ}+dZ=))-<=wL>PGKvLRaQ2@-2xyuZziG2#ivvuwt zeoEn>#NF!F-XUS#&a5YcE(c4>rg^*v@bM3c@)Xt9Zl@mGhCA%X#fA^v1VjrR!Z*Dc z@n2fC)AscNau$a(zkPjILi~hP5_>@UNJ3D6DMh8Er$hHs*Lu6{S9^eF5;jp$t@#&7 z+}CxV*Sng0by-nSwuL6ZZ@VC3d@CMMwm)K+@S&3_r3@uRt@k0%;2w4x)apSySZ6{` z))Kaw74DOxgrVLM6|iL*baSgkApJUiyE9pBwve{9-C50SJ$J%Ci&E_2b^8wXbeZl* zCxp;osZ-o_nQ;&<)|*)&9cZo{3!jFn)MBL|MW^O+-uOcX#hL&55-!3!}+xSx1{RaBn81({ydf%b`QjO`|_(4sD^7gGi=onY}e3I6Db<)k? z9?#17HPWEfg5X$+CvVD7=jO1%ZYsdd@zulojxCixrMk{Qs$oUi`{BPJarlYedqt;C zDEnfq-XK(-+4OE#m-5zm&&EG2HAHg#@l|ARbwOUY#p_ds)9TP^F6%}-IZ*VIrhV@; zPw$l{vvF6ZMawzW>Q4=<9n_d`+^ zQ^vUNN|?UVEdO>&@pwQ`M`6f$Az0klTR?Wfo)(dKzm&(@rFD&=a#myoClzLIgntMI`@i;?9O z7_&(9W8Nt47E1sxQs-i4lf<2wANNtykzzjKOg-6DO=m>Dr#N1mTr=}R3Y4`8!!4+* zUft4>_V5{7*N(ldzHqTOQ@MhkF&sjhSN|#SM)pKa!1lrK!*P0A(at&QY2xkvBJr_IxdJy8!!F_p2up3%HZMo6`tz=mN$_g=%H8`5P6tq)VLRFREpcnBIc$N!D#@I5=XOSGXiDDY)a*VY zr~P>3eV?`tXefk& z;(G;$mDPH#*9${1e)q^Q==AvlqRE>^riFLZbR8ZyjT`7G@_pOZhYmFvGIg^jN3+a5 z;0))PJHz4`G8%2J3>FRDaTv;Q%}AY!YyA^duMl)wCfau+wjd{p|4L7hYCZ|=s>5H& z>ua*w6u5s9d0cF%(Qk^unMhZ0;vGpy|I(uUinG-h1eX@RVu72^Vc(CWr35yu>5Im4 z92}yuW_?T6Z@-H8x6%533fLc%n+Qapy4`2^| zZ+Ti1Mhi4$z}goHledblMc0Clh3h zIHk7*8^h?dYxTzEj-Mz0qSuz|;k#0*cbL3W%+jOZckyZ32E&~z?A$%X&G#r++aKiPQ4M&*2?ix$G9P22 zRz&4us$s70~GA!0pxVs>rt^4DG zFWl8Rz4N)A}SPA0-qwzEpV zP5YWc#`r;p9G`Ecgo=+<)^lP>_D8|R-Ucqo-h1^HjnP66Hz)k9KQ1S`>w2EGq~3Rr z&4Dj0c?0=ltx}VnGQ473ss1WUKO?RuG0MeqG$?oednyejXq)xUMyd$XP||?` zTcu0GTNDdY$w=1Z&8|FO zR*Ye2FbLWkZX08A5SRV%$=@qs2{EzJ^PUWda&GC;+XpO0GjAqtgy=EmD;DPDT{G6$ z-iSO~3qZ&3b_9F^6s#11l!I71x=Ds&ULI7?tsXsAqz&KsNM@p_=&Re}Gy^$b$Bz&c z#WT-@dZ9_=;6ra`2v*7PjRG*N2Y3W7HM~ zG^V@#SlTv%7|MG*UA!@0Owpn0~CatuUy`;r0dT^)kJm#qVxHt0f^#Q#td zH8<@)*XOzQ;0NM$*eLR;@J9KDz<1#2fR!mnlfnXfu7zd)jv!HWdE5iH|I{;G+&BAeM^%>=BgS&1+0ACY* zlZtHHH1s|7GRIc^lmO0D2i~b2go8KXYSO zJQ}|zei>~J64jU1 z`wt_z#~L`67#HV-4LjJ5?WeLmNhF9^WAl1lr>Vrycqif!6=&Lz?nCyDj<+$roR z(*)(I@}llIl|BDcJ3MmQej`duc{M#gUp^&rax`yaw5j+FpAw}sIQDN2)QSy^J0z{b zujJ0>%TxVl&%9hjqQeyQ?MMlzE&=~iy1QTh^PhJ(sfg}g_b?m8Y*)zmzPza%Ts>+S zHMe5L6K$4ipRy;RH%=Ucn%Ii}LJ}cOHexz#k~bD|Fiak49_O>)9*{tELFIgBb~0rr ztMnPjyOHNC46?r<+8@n_hrTpWT9uQl90W=WjIn@OU`lZcd(cY?O}piJjSF<1C46OxZrFsCKMtdoGrT z>INF4HOFE_6i(Bep0k@P3ZdEIQ`0m|(~?e3Y|QGUG^nJ%K=%E1$|ba}VXtdOJN*b3 zkjfZcj8{{6+PD|c!CS^QNfPR_`@=u?i!k4ihCE$E)J+hB}B=caFL zu~?i#HoHbx0>ydUwu`e%w>7QZWmC1(>o zC;CO@wOY&{pQU;}$FU8K=px3W&IUohNrS!E8LN1Fb+gzXsB`d(v;TXDXXEFTan?rI zAdyYvCCvpqxd+b6( zf*W_=%CS#UxFdn^t4Pi2ussU5K)~@{t&x9gcg*_%*;#NPsTjmNcb4KuXXKk(OauN4 zNxE>PSq?s8l~&@K5g?+Z?#(Qk{pj%13BIfA$mXJy2UA>Bmc-W;E>$z#jL2^LF`t-7 z*e$Gh%8cQqZ#bdOSfxVta|%;>O}E17AaO3gXYz;_Pl-iRiro@5(sfKVZB%oEImF*# z%R94}d@n+2hOi-PFz;)wU|{kg9%VIglfJ%qZfLdG6baqkY`6cBLs1T|(eHw{YP!#iEcZJWVGqOB-| zrq~4vbPCft~UK)PoVIKTAR*QE1m;$~$uQWvhIGHTe1ek^V z0&86262Oy9iv2AJh9Z&#-l~!Wp0c&(5gU^*yeSAim$vA`p`LKSgic9Kf48N4h^8Eo z;1-o-trkSZr9*Tr!3J9l9xPqA>ncgDOYLG(RwF^hf&`~%me)9GKWu+d^v~Zv zU(1I)RwRB-!RYJC$^RKNvOgf&GMG%;Fzf)z&y>=WLY+%D7>MWDnAEJcP9!l;h01<6 zRky6>uR@agSFzx|`yefbe~y>Ddv<&0Ir^jf+qYCdAB5-QBa#7KzR=?iR0Xs30nBc_ zy2s8a6*2Rve^?7JuI3 z4*gtS9ERyOn*2w|ch$}b9Y6T2j8IqIw6GfVLqpnKFsMGq2(fdx7oFs8Pn$47N8_?I ztk!~#h7Lc*eD>VJZY|jNGAh#Ra8b?3P+IX$q0BPO_Vg&FNisNOcB}t0QaMv$O#nX! z15$MC?cD4hHRj$xR%TSS3xRzdy6$>KezZIWIeLHDnArFO>def#jQAU?d2zghKa4Fu z_(9^fE}XJD2=C_E73kCAc_dXDg-b_dOEszQjm2Zc(r@7Oqo-aNye7ToiuT}s_y?oY zB{4Tw(#Z%(%Nx0zkkaQKS(lygNWed;7&DPnFd#9I<+M;T*F&`T^M+Kd_InzSbowcr zE|DS${ZqNu^=*#`MEgN-K)v3fd{ApBSu?g$#ufbwwYrA3oTvifv$0PY$aopFBHWOa zEI`DH8B=X?EQc%JWxRiEEHdpJR`ED&6h6EehjwyQ>Jf1DEkO)JUph$0-uaP#A!(x< zdb;NEnW{bcTiwmyoEK=mu^Z?;PvU%PP1}-=!*HlZNjd#^#nBG=ma4)VrWjT5IimN6 zjp6(z!)(AWuL{VnK%3y7L4i+`y}N$BS9kU9bCx$_3NcA;3PY3!9QFrRPLCrOu5&FJ zO-0OTo++Yd>y=Ck5BGC(bKz^a6ZBE~xMU>pg^-zwapZ^a4wLnV0 z#r3QHi1vvF^?jVDX?31Rld_Gm!lhEuDW0~FORu?^n=W5TO}3Cm(FcnJ@vc-Op3Yu| zw8uc?TEYue*%uu|mUc%LMFlxHV$8VG<4BCPl8~G$K06hgDT#Df3WiY$$_Cu{g0oA$l0@YqB5bI*M*vuCV`tAFom78kj+)pF{OqH0>l zYjucTKO*Gap6bNzZl$?DB-J$%@bu9)7{C%APh5^)Xiw@v7enMYuO@FO81$A?B2bbU3(4)iSH#4n@F}R z97Mh!kjCZ3+SzOtF)~8@)q8lvFepSjS9Pk^ zw^69yzCH%MK89Nk^UkX;^2{?&i!;BAfB*4ayxs2Awk6k`MKFk8&NmuE!sRD_PeoGSP6hq&vPck$HLWAp^n9XlknP{E;1S{9c2ijz<; z4*FQA>-iY+_(_(aQ{Cd80)qr<-cF7l+d)&Ph-Ir*QSGvV&&QYqB18RMG#uE@YcD>_ zb5B0Zo&RwwkGy$+Hf0c1*%B~I^)&s7L}bvMZlq^qVrFZ+t>eEGlo2(C2c$k883YaN zcC?-McJYKfp~?3mj0pj*b~guAR^9 z+%b+FZ^hfyM2`eoo|Es2jGy7@r=Q}EFe)%X$BiF-N2%P2!~#MiZ_n9F$D%i79$L`pJdx_p63~<)8h}_#jUqJ%Fa%&_8JMq zD5>p^L(;fN#7lo?JDoie9ID;mq|K_X>f!1H(dUsN=`$6qM#b?ZgS1ceov3v{ZSSnU zOQ0K^G-2iKYhvHqs_&lWktbhd%kJY0j0VKXkI*Cf)G`o5L2VxC;%ocPHqbOI1OhKU z(FJpy1BW6DQl8N)#6d=s(lu4~WF6I^V*;VTnD)*$wKQKnI~GtYPXbCGBlz51oH;7~ zW!Elt>_5ht!4L^)$)qCoqJIqkz#vDD?BUJ#_S0s{q%_V)SC1cGa|7*zVr`mt@!~u0 zvFB(fF*%jwN4hxPC&X1WR$C^m;|mDsdGVR1j7ruDv7cu>$cxTMw0R9Ar#XqYeS(!6V#|X{&r|^D$f0spg^<<;j+}9ejgsTyTGb@A+R-v7 zwowI0N>>y)^mLryoyYIz{->Ve)g7mZt6R_I3koHWNv6DZHnllHPQLpL&%g2x2by|O zj|XaOAnHV!RYf$oqJ!_ z{P;6Z{+fGlyOoDt+CxXkfJuTzwMhy_3rWct6lbRqW7RzEhd^-(@%JZB(i$nCdSO1v z;yeAqM}lIr6VozD_PcR=AuctAM61+i)Q{CwOo1ziyI1jsXp<(tZfe55Ph59O5TT%c zh;JPo75~}W%Hi#=^Wt;Q2CB{lj*HlMD}yJF(kKBIz9BsBKH3`&vHdmGKacU?owsw(W3O_kYZ$+j9}FP(stLP|5^ka$tkD>Xi1gkzZHnwrm$-v-5F`-cc5XOkTl(Z;pe;UYcNA?1yr zwjNOv028k@k_>nTI_c=_)9T|Eo;=Wel&!D5z|&7X$>R^+#V>#HFk4$aVsE1S@6$rt zRA%?Sla$VwMRjojg@xtRR1}kH?qTn)eVkD5c$>7-&X*lZDH5k&%H=h&v=2qd$jXy8 z7m#Lg(>0`K+QdHD;>jwhr7|yGyuKY*axB47>76(+!d3a0hfZ_iR4aoqMa-R1Ozc1# z$4;DJ$dXBUPQv(xJSsr5Vj1h@O!o*_Vkn%mo;l`2JofHcEm%;7M;YsIz(VefWz^?- zIk97_kOwP{;yJ9Uut^ZOkH*1KoS8)=+X8gCecF0xYuHO){~&Jl@U;vi^_*c%Wezb0 z8!5?2#F+yOs*P@u;t8{n@8u{53{2^k@8vd zC`&QW*VxK{FN8BKi=YV^vBwuM zXU%LP2cKZ;*)ZYwZ0hFCqIB#Ouf2N+Z%jHB1zC)G`WO)7t_HVpw2#(aFQ!-*#nrV` z*VZw!x`cS6a!3J!W1}*FK4jNXWuUDYOq(w{?y`wNkhW#cX4%?W@_Yw*;>A5QceTkN zp3cmi2*+F9B4aByaaP8W4jOtwxN@qPvve8`PY)(nDfQD!Ns9Edcjqn|JvIuslHSl5 zBc4G9x;yFY9TGVXisR3sB0o)Y7(-)97D61n;yn6BFv+!QYio#eA7{sjF3qq-o!NO~ z5EjRqm{G>;nWgy8>|jqrk2shM9Nw1zDj0NRmQqz!$*cv-s7emtmH8Y#vFJQq$83 zG#+GcbCB%HI?D4*47asw6PKms`J`IPtuzJ8P6+q;CFv%HsxjZ`*E8 zwvOQ{t)aTCn5sD|Sd<$?h5#9{e%kwlH-@~#WzVD}afoAWqY?syQsG&BfezhJ6Q4f5dAiByjK#W6i3jsva6lKQaJA0CT zV*xeOibzT{V~NjT!G;agI$C-Ag?BmC6T{5S8%a3(EZa_v5{^lsP|3#7%#QtixT>d- zmoUtk!v|^gCy`T8Bfdu3b@(tX!v?amvoSL!zS*z69>x(KqOI30G9Do)yrpth4X)u3 zF`3!q=H-xLa?|aWwrBxQ45`KS%qUI7=dntllPHmbhrtn%lQWB~6o>XKoKFJ47-I;} z@F2bY9!$w4VrR05ONb@0bOsCRr&EzQz|Ob#(JayLMX{-j;+^7uv+5QwGjogsZ@tP} zyN+_=WIJOb*Su5{y^Y6c@>)e-E6BCR;7CXzBR59^#WCCxJq5!O=$T?kEvluqIE6^i zPF6+|X3@hwcZlS?GODV}shF{trKNH74Eag2hUj%m-w9WU7{icQ$%e(b_(w-M_U7xH z_5`)bjhKW~GF(acyu)|`MqeXR;ixkg&7(TY$gy|ckzg|{X)`E^ z9pd28Q}lZR5{jvb3>7qZF*-6R&PviAZyJ?&!)`TW7>#m66$F1;wK(@4!o3HZs1p)Y zlb=auMkg-As%F6X1}m?YEXrbR3~hP98o%_oxL+f{P5x5T}owrnP54 z0tpkz;zV*Y)1~Z8GU6mK>*=OP0>p@#of;X#=925CXNX~mBO(D*qk1vz$0&w@Ansuc zGcH+zW6u`$^#!ybRi#*C5=cmZwgcNa)}$h{L{eNajI_7V(%Ow%WR#GRLyp$oEOMP@ z2Ku5eK{q92kYViO(1}LeUWsHTAOqiQjUzeDLGO|69PgGZSsfC@#$oI}#r_lR^!E)A zj7=q{sDSLWRI;VbNroZLwDx0+mmp~F94cfWn8E=q5KWNax2L;HoQzM}`azA28e^w3 z1()<^Tv7_@Vo2jW`LNuB+_y+ zNQ{XmB{h|pU=Ig(@8H0x4o3W9NGuLqBKwR?2mT%jWV>29ed;ugVgNFy&7?db!k7d# z5rY|fLMd}*q|zbI%M+8&v{|*J`Fa^tTSJ+WDHfuTo$RHt@eEz%$PHsl5DZnP8p-E2iPhBUqkmGzQJL}3|8W^^2JA_k>YP= z>lU#?ErSdXy9suRuI6QvlT}D&vYFA-+j-`#z4VF?PmM z$r0NX8<$A3@CsL4fTrCq@SClt>Gc?dt5h*_o&;Y`ixv!q&GBT!jB>iEU4j=Yx{as@?t82+~Imyb( zAuGv>r>~u}o&AjZ%_L<=;FOu9-G%9tfV88rfzyqhANpc?gF)Rf@zUGbiPxSha&(a_ zWn{z~wYw$9n!D&}_Yg@;CATzBNPHIA&S7@G@Cw_Hwd0N0apkAuJ^da>+x-$i*ojMw z$2{1?QStNU!~~4KE*cw}==a-+PlzMNKS0x&CR#dr88wQZ&&${3n3W}UPYBZ7CS1tt z!_(DFw*=H>xndKt6#tW8*K>v=Z6n$Zfbdv=Q3)iIipqpnI!R41;qK|6xqCqPTL7y| z|rEi!C?#1)6q!7*=BmiVuiPhoU$|I|1=!_PSGc~w&E)6_v0H4k&shB zmhiOfWE;au-#YwcRn1`5%xM%Ps5{(a7=_PfT8B7vrc?MtNCt3(kmPmdW#Mn!$9sFu zGAbid-OcrS#xNxcH^|Q=TXY61~8G2ajA#Z}Z#ucSbDaHi6UL=XF4dxM?AWj*6N z?s|p8Tk=ZDm3~jpaFGz`u%d^;WmTQBMHWd$H>ZUgMmLnyPW{AC0iodsKlnl9-+p!* zX`+Z?pF}8O{3C<(^z=j@PS(~kUPO>iHz%Z%krJ=%q&k7Iffky3)%{_Cj4%}pxnw}c zo5KV~hv@0;XCx?2JRt@{z=Ov#O2FhGDKQq4f0W^oQN{x5c6NpYiSbyqt;3|KkzP?& zA@$-cVw2Kv8r-z?33-?V^@8J=L>Gy6Ar}3;j0B9@%jQ$#j0_LB@d|M@+2Tl%4o|de zouthybxYu(-fN}q3>j5ml$JqCf*otbFZp`u==W%M2tOJ!2#j$o`}*HW+sv z(yKOwQM=^Dk(d-Kvgu?kj2si4_Tf>XV>YnX1eL_$uFNlqs-&56w@>FN%j zr;pZdw*+1yhxAn9EHY5TGT0P3lIv=+7>(ZHeLo~1G}wqwO4b5TtGeSYdOh0HL|d;% z`X;(2KO8iWlvhBS!>pB~Zr2BfIyuuhf=va2%J_)RXv=a(2IQLkcvMhfv|tlQ?Mg|K zpd>5yHf%-Ar@Br+ITXlCCx*(t4}kc5Zo9d_!dA;8E$AHCgPA^mB%lH;+6UZ_WP+<FiLwp&t^+sc|a=Px%I;-%YDp!siQUt5}SQ+1fksEE;c);OiG&**B(Iu3Wd~gIqb; z2#t~e(L--fFMUF^jmnp&rje59&^9tNh#Urm!}ThgA-(EMmB2Sa+8UI=c~AmGt8m4E zAx4EPT{MAtsr0>4WGp>#+EIv7db+ zCv}%kWNfmDj3r=KT-g-#(kuGbHQ*;+ar2Y};l}}Om6Uqtx7pW6LwjFzHIe)=iM~4} zV6%+&($%Z(zDm6`J+=^^>>|Y}++GH?+7D!SP|k4&iB-#}ozid8=c*KAV2HNXZakAG zHN>_j<>cXVs4*DA@9yGk*Ra%Ac($}BvoIBhTqmqJbY~a+5`Y>lHe%xwi8cCh4~5aNh4L&Nqbf?%9C5V2emt%pBCT${`aE+;ZJ`2BXKn0^NJ-Mqh82(u`Wwd z2Jw9Y)1Co4-(Kb9CuE`=uzE48GN#d27KnV*fLDe|-KJKCL0b-~oWJCo9EGWes};$V zuj;v{u#}<<*oDxpr|gyX0&O{cdZju$Y{bRb2bMO%ycW&QI<-hM03zDXE5XE~-w^wyO3=U*0-iC#iJwngXe(df-`m zc22cN4o4q=jwYXjrb)M3PNX~q|`JJ1o?BB<((_IXU zjW9cFnOEWAtp^_9aPGDI_v>cR``UBtc8fE!q)=E{L2}<~JpAx)IO(xrRL^5vSZ}$u z+Rad1Q)~Z(9*je+r8g(#G4s+(S(4Dh_Ge$^z19JOQs0k~(ia(%$K(Vi_fJ$57KdunbbYr4yNtZEuvD!Z!pAXdCx(nTiS{83oyKPL-RT*>YxO|jtP``uf zxo7o^mzvrzo3Pt#nm#JOq=LfG_>8qWU3&?$=&RCiwLC0paxS>AjxPwp2EgET?jW$!U}8tm<=)d&spl->uG3{iFIuf{O$(|f>A*Q| ztolG?bzvW9x;*)O<>$}ooRU*iFT&C{>KVi-Q2nRI$oS8RylO+oDI7sArk>5!_`h}_ zTE}R)qCfIEkIDKrfvIC~g10Cr?h+iolQ_A)3hJ8Y^-()C2~j;iU#F?%ep;Ll2!HaE za|*5FtBG*XO6shQTv5})6A$dBfBd+P-v%;JEe;B2uV!g!ine2=xFTVAVY+s|%GRSD z_>u~kw{#tKNj`=HVhSx50{x8~-nNB99i!UDF`s2*s+lLdGnblqHN{A|Ic4jno^AIPv&|6)=R zp9FUywG3QrK=iJnnuV5Qa!9)?A?K=~P%Q~mGsG%jjP5Y1@~HoH=+L1U!e`J}HFE zMMm9px3|#L)D-=+bV@LIe!0ikUwdBueP|t)L2?r$zlz>ky302FY)bl7>5NKB0@T+A~(YzSsiyjQ> z_}nnQEK)uns8t&0`JDW%R+d^`r|a);1u+KErMBb0b$lwQC8ug7#_x(dewm={GP-^H zcI}6neLVM32gEsDlq6CarpaxUk2F@Bk&WX0$FwDQi5V1?6_e@+;2lv9UQf>RUyEpc zRhNC%3Q7LNYE~}FV4$&QJSbFhkpIT@VB#86W%av61e3!_QQaaI&8ed@Hw6M7`ql17 zp8ykmeeRDz#YFY{Q5%nN{^m&3$iYWP0>)+3RCSOx~9&t+gZ!cf9?%Woa zMsZas&WH!ksM?4n+K*paT-bl|QHbii{1y-S!D*iyimYonCEu4?RyuxXn9!Lix;9A< zqo47^>d6-M!(x%(&xCqL8wm#0j_1m#gscX!HbyK#gSMf8-)zJbGGh))aA=SdP1@T> z1-f>Akr90sZM@$n+Y&i2m3ydzpU~c4m{&Xa+xZHEDVFqta!T?N348h&@t-eG5oc3E z8l`pfSTK7Ab%n_UeI5oppJB>a#z;8EMNxGvrSSo}d!ifK{8m~#SsvPf-%b|43n*JL zMISybB(FK6lKD01gxy1osP*L+C8STsBi>K%!?i*80lE+&6tIy~zmO%fatQYJG4!FY zH~Ey9tc%+9FR1qi`G_wV&b@YG$DRY^&sfRw+0~SnS5Q$_N^Y`^G0y<*(eqoKUJTIQ zXI4Cq<@0AzTU9}Mg|xS#oJ>T9*Ghi1Hb&G31s{rzFLIdsw{#G4d%DPpN7Sv#>0_RF zl))G@Cs9x}g9YKZmq`DWS5lUr zj@8#m$6!F)EFvMNf|+v{FsoK^k4nlVJ%$kmhkXP;!aS>8LtPc~Svt3#s!FkOl~s~A z4SS%MPPhMK{MU!WWJ#uC-f9+2OJMNKA=-u~aT@WPrr2b13QMW1pU2ASISh3*a;glj4Uv?=A;=0+nzlFf0%{)FGgmjziBo@zN)q)vRRaJ?cU0BBY==v>W z@t+A52wEIYs%9-F$IwR0fO@Cgr?02l5Y1M*j&H6np!eu$+J{E9RRtFhq;CyY5;Dt~ zJ$D*;PBWf?A$%V-IL4u5Y>i8%eA+CstOIlns&@#hY!msy1bp$rbHB~EFE6BZ+aAvJ zj{KGr6A}o9WNa4I$he-v^lGv7Rn-(F`so=EF0OXA739oZOTBZD=HBQ#xxa`|0ii}~ z%`x$mFT09Oiz~^=%_l!Um#j1=4y)Q@>f%Bq6dcRaBG~l9!h!?ae34X;rb6 z7+&>moB|fFzk+!saj0l;Vz(i+gOAl}!)j4GN0~6Ghy4`+h!!o70<`nT(=Lb_w4JJy z@<};r%UhK`VH4DA5GL*rMf1Kt*i^fHPNbbva{1pHn?TjV4Xl}0L2{fmn)kxY9|1L^ zku&Q`u9^{I+v|JjS8|YmFfpx~6`L=mHX}l8dMOK5u4PGm2}xG9-LDK>$s65OFDj48 z69>_|UaGC*@=%|1bsBH0oUh42?Z_m*&*xSZkaNb%J-6GF919Nja^$TidFrEI=*A$f^07`66DAg%gFWE|bdLG_<%rF5$} zWLu0Ki&^S*u7AdBtm-=6o{8VlUCGY3XhIHZN2>{WobMvl*756(rzu%QvnyFhSr^Je zVdA>#+zaxl9nyTmot$duB(``qbF1>TS1KqS|1u(K>{H0d%3;pB>$!I0VycSsNOw9! zj#gZG^{l$=5*AG_prEjb`X#H_xN()}u2aJKsGQC_1|=iu5BVKEqKvwg?CGmmb@>f^ z=aw~8sB*{qUWbnNLG;I3G?$I**RgElwfx~tOUVg@P%UOS=1exXKl$F+V>E=}| zsZAziieL;|h1Y!1XQRHV5dUGeQ9So@@x|F>=a-2cx>S75bkZzALIxp@rL$PRayheW zipW)Zk&~&tD(V8NFco674JI48b1&nDOBPX5RG@K|e94>aFh_0rgfCEbP5BD(CFlK1 z6cfHp^F1n2xfc0jve>ZMtmD2Z>i1N2)cK*IP7c2D1dqP5jfQ@;0g?*hCKoJ)jQh4| z+3#C=|7e$z&l))tYUmrHR)6*VuO9cu=hLFlcATF`SMnI|1UX7< zN*0SR{|0NS6C^Z=?glwIc%8zf-q(4P+GC9&HpX_Y?28IY*RAp7R4roTr5jndYA%H- zv51x{=|@jd(p3F3u2&l8k>lzUo07wV^;fZ?Hg&x3)i@ZJliK~(7NNgkKU=pRq}}6J z^EcyZB6}%wvP36zVdB{P`$zEx6VBXeEM2jbIn&E2EKu=NJ~^og(N{re^)ykn_8VNg zC=ZLo4pE((awUyZM#rBT!{@FzUWbWt#>eKltV$oFV^7mHrBCB2pB362!kzmMlV3dx z>;7NyqX*t#@7{eJI@L_S_u{%csGtJE_`1uuBIO`|`?LFbbIW#i@7~Rk7LOQnD_OOR zSvt3l>dFd|EPgCWIpm3>9`kqz+S4g5DW8RSON#o*7F zUQ1^-tuIV!$#iPei`a8BDW6tH zc~K6rz5xb2UhVxpj^s=#>gO}Ps+7`#G-ASIxQBhjWS28z=4|bS-FZ$62D_8o> z4?!77F-ani+L_eVR8v`!iNg?Jc*u)C7$PROmijyy$m!)wudSBgyOgZhVcPq=m_&}1 zbLUg&u#!J}HnnBNWG7qk^>pA4it>w5NGYmg=B(LNmlaZ&6_0OVF#4_^shN67x!IXV zbxAJ%j-wnr+o#p|Lm_PpS~93xTtRHZyZrjjM|pYM9vWk&bImn#v79=K ztC%~jl#=2iin46vu zBZu0WLXwR^?R}LY;whRjhx*z|N=r&8tEix~FbA8riLN07vB~*NU$ls6B}EjMmQh(* zMNVP_&p;<`pMkW}8O)qHgDTOz{0s-)zClLDL%i}p@hN&` z%bd+M*Dex~g(*xNV)xtoI6J7`Lv(T3KOLVB3??Vl*WJL{q!AAF#W1gMgf|~~mo`N{ z#d#-Ym69Jf!k!oI;lUTSvhTnV8ru5t34th?zn)dIis{+%G*3VI2B+*ZS+t}GZ*K#g z{SH=q?faCCZsD=p@8^yE{W#`rW?7ksGyBid=No4*`g4R|JV=+QcSYt@mDBs`&w1eG zqx4zISh1>tk%L<}=C+VtP(e1Wy!p(7Jn_nQ_8mG(Q|AyLw|K)~v6C}xG1JE0<)3eT zly|qi$L<41wL1=ql)4IQsVXTXCntl_y6IF^6q6Ei)8`(>A67x1m4dpZ%$`;*J}95e zWE-QMecFrGvr4KdOt)yyv8I*QQ#nai~lOkiDj_0S9^!65{SAhRylVyv#atcEUTfeJd<$CLALL2C7=RB zt#zLq+M^H&Wvu!7*H~cO!{hfpz%#FJW1rM1XpYC?Zlib9PF9)lhuJfz5I5@64$r@FM5tdtl61KoJS4(T6hM{yzfg}Id1)=-q0jKwE@V?_Lh zxYUHqBC4m)Vp?UHl%0xcbVPiLPm_lVRLr?`tejIvSy>51g$20iro|m0y=F1X=T2i< zT^%lyn_yfXW!XuDyo2-%jbV+ABd=m6_0#L9D$OP(#>j~DoqErp7!+IuBD?8Q-*VxV zRnw?T^Rj>2K`HyonV-^QFqEpjVAC%>i9&g4wG{mrQi>ftO zv931E-j^QXi5K2t`+Gatf4WOsc@|eNlLfPCm@#(=#ql0I=2VIcW&GJZG;|J&8Mly_ zUc`(=3#iffUpDb!Uvy(fTP$h$WfbSQaOIU#Q&S^4lZZjarh7!K&@+=Ral`cKGTs$W z&U7$3;1+He)Ohlz#knP;JNF%;uzoSQp5456#)s7$eIJW@`1gx=`~A0p77*5~=aSq( zUfp?8d-+EDKsaOI~QQYEuoH0tX?KtD?1cy60Ed=D_`cN(9NSyag{$x=H_x#6ew4Zw)ih6FY zglTiivATP4wfmOc}dExV(rFF zOe@YJB_)}%+A5r5{hVp*#;2CUO6}~a1x%BH>F+%D2?N4(YUWju=4s*Jz6J*H(%v*i z{-Whng^%&x(RPw*S8(+ut8gXQak*U7&6|s(>jVd-PR^_fW-pnI#E2y36p>d@LP4sP zQPGQ_YdR~|%)u3Erm3lm!L+&DaMfb6e7&5N-;R=HTy@2Aa#EeRQVN*AVG|2;q2b_G z&JHC|zv6l>Un9Y)C6a;3!Z_4IQ@aGX;ygoMpEyb~}A^fIPO3HJwyBkHPvsiK2Y6`m96pK@z zL85y1mPRe>j3ky^2Uh6CVRLp`0aw*NnJ!wj5}d zz-IiNz2N|3J}ae5ui?h)Hc*plBvy1Ld-`G)x<)v9qJb_?ki?>yEL&JlL1r3Rd3n^- zRblHmOJi?{wDLOYs*6cah!sCqAilhmytn`Zt)29ZsCR9Kux3;;uR;RCmWhBcB5qXz zo$7^b-nfSB)CA!?$<)r9N6Nri4m9^;usWz+wu#GD%q20_iYq;voQzn8Pw(Ts1D_=z zRCnL4B;+h*^M+K8J$MJNoKiua_&JZ8p7vIHMlBlGSby0nYKzlJic2DQ=4__LhiGeP zq{o}eWqn%$;!_Y4w*(!g48w%4C1mYSiX8KwWWEu zgjc3z<&YE8&+aV;Xt}7CjH#tdo?D+r-`SJ6Bf^<%BQy$+Qh|;kxq#^_FX56| z#abUECM99@ws5+8l%$e5%%4_Der^^Hg9J<>~0ywo>s<^%dTWmribH)nusl)!O~^Rs4C1NJv)oC z!fcG{CGcG%GPbIOd!%D>x6s);q%9Lw?-f+5n&M05vAC{;!jf_=aP>wUq)H#!M_br^ zvY)t=QkGnD8Ovto5f_s{PDLf9X>klUo~0}7plbP5T(!EM!h8ur(~2Z06n!)g(A?aG zExU%5t5;KzpDElhnabK~;mLh8wDm@L@~2dbb4x~5ST3dsmk4y_ie)TYJe%smbYd=A zG9<(@v4D9C7PCw`dD+sXRA(3o`@I}~?ic+0?q9R(cr)9c_!)oyPe0}t55L0U7K!GS z5stNE@O87}>AU&qtxs}%)Imm8CU&Ef+BH`(C#i!spSp`*{py!IyvxjzE0>DVuxWR_ z)U$qRdBqs_J;Xo!@LzdwOApC4GbxV^iUL8b81wdBFLCSN{Ug74=@bb?<)kMj;>?`J zf`xVX4?V>lxBilQUO0-Wa5}T9G8sAWDv#WA8!v1>!O?Bca{JHznZNtj+jwHjN&FxC zETPCD97pYfY1ob*_}*{`v3u;eR~B zzL8Yw>Ps;NtduRghE)}?>+zrQAHTeVr}sywU$uae6bHr++YRm0!eEjCECE~>q~@h# zwq&vNmTxoN{R(%9jDPW~+j+Jjm#e<9oDA)n>UkkEo{nQY`LloGSHIrQkh4?*uzV5> z(HEzxicQo_&2*{n;joSJsGQRb0UOZ}L_L_MVCB3(gBQ0Ls(x=gIfePeThy+GpNj;)a8S#7?XmGBBqWfT zkxZO1z+nFXeXR{be8Qv@6q4kKBQ-mhoP;r2P6$~SXPi{Ngym&cj=c32hgy2ISFS`i zg@~4`L&t>(huV4T-sd>3mJy8~(;((njZ39J=J*WC>lcepUBbdy)nq$ku_U;#C4(>Q zA){zI3)XF7)pRQsi^{cH=3(tlgxaCp=FFpZ_7YaDT+ICXaxxNPrs~iKLIp!+V$#c4uvqNX z@)azaqn@!EPZj?Yn_{5*(Cggww?E{E_wB@5Tti`+6Jscd%~ih3wD~XqK)lxXKO}NLwH@NqwKjFTYPhl&mqbfHAyWzw9tqNq5nS1p&n9Uv@zwcIl z`O9DO=%HjbePac=(pY;^HEXZC6!Y6Z=7)d(kNo4W9^lpELd?~=>CXyPSE*N0sEhV9 zYIoG};~IpB8&jFSemygVhrRgkf6w3lar+-K0U^KtIJ?PvV* znX_cfnMb{FWt&taZT@w9qk4pw?)w@4^3VUwKmX__-2ZMj1V%Xi+|T&&FYjY_;}Az) z`nmY}f8bwkf1Dks28c_{WBP)nr*@Ea7zGsvC(spzd<;1N?s00kseMRZl<{}NPK1jhDJi2``CBZMDdIY;tf`usTpKBLo^*ZN{=x|#_K|g>|MP5>!0(p zyPxC8h?8k^>L_seX+8Wl@13<$Sig#OYu2z~X+1gViQ0{(zFkl7i+}qOFC6jEwc}xa z^rL^~pMLyr-0_y%9;2fp1Z`H5tO+D0 z6^T-qaHJKne8ozp6{cadn{i37m@L7U_Dq`?V71;@)mK~luDs93LIn+}lodMZ>T1?V z%oIqQ&GtAPj(EbO{X$}_n8lz*j1Dnk*(5q0B&BCFbM9hh6sBTyI7my3C)ujxC3WfD z&!dmM#i>Crq26P>{pvd$=?iGj*!YKgIrQe!92|+xst)@7#5rP!G31h+oi2tULSFf7 z3Dy^p>j)8uPo^N=h7|p|Ks_BBk)SX-bMGe-JA61^D}lL?f}9jWW+Nrl^H{cc0h#tOf(a=UI4qb|7kfK7 zxb1D;*we^}r-Ng=x3lMT7oPDQa1}Z6j`|oF^ON9o5pR+PPgLz9gDp`A_>5(&SiY1M z^%;yd9cK6OHoE$|IeoGPe|#Eg37Hh+=Hc+Rar8(7ZbvptmQN$0>nM901~FPCS#wynZXL_#){<_w6C9DiFRzvb zOXjnGqJf~;*Eq`7tYzb(a$JU1UU=vYT876kjRn+(q=X`$#J21B zFN5^I$>E}E#X45cv2*H`S2@@vzS9uG-Fa49DyE*vub(rYRU6i`WJWnDw&-*D9}4AC z#3xu1CCC)MQdw0+c~KrIvC(9s#meA`9c?Y5`5OhTO|mcL0-}cw!GDVS$lTMC_L!5u&G*gg;&H0Cox&DXnuDb zB0IHVV91$8PPU1@lgDXl3t+Wd@EqF7{((da3gg74i!ToZIQ90E?CF&NQe-eB+`}&1 zC0@xQ;G_Nc9uA&5MQi&MOV-xi&{0si}#?Bs!^?v4FWX#l*#0h)akk zEvb;)tQfkRPt)5yq{&cwhD|y5iwtT4+bRKYeqJV4-w-3CeRw=07?Lu{&5p-nvQvTviqA!5qvRTu@g!M^?#R!m+@nX%Asp)B;JZf%7gUoUlR$EM z9*O>D4jybKC>+7%O2Oew5FR#%1@%=V#aW3FK9?n&b@a?0p1%K=JiV(EvuhS>FT0%0 zmo1_w*&%fvf9_M%Ud0cJTWEEb3PfyiBoyWn*Sn8hhexo84H#`{;!K;D*o;(?9dc4& zgtntQc;%f#bPe{(_g(BbaEh*A4p|vV80@iB)Xrh$vZZ9lihoEm5L_t)bjn0tQ&4H)?gTMXZ5BcHW{|mQ1cL0j!u(&>t7I$(%s4ah zC@d+Xw4{_$r<;9m?58CXKy4wern5pr9)`pqSS%8RAAgM}AAEy`QE?WkJS~_LqM^`R7Ocj38k50{2NYktfhxhQE+vp_As+iDZ0Arr`}QXNqbF#5$R*K z6z_dGq>Q1?M)n^$hP8G*mo6xlU@saRsfTf`F^Od66;oPXK~+H>u z#C8ebPKz^=0UYd=Ks$l5Ih$FsY#r-n77^;)&yM5W;)o>hRDohz9z|spl$92d8#~C6 z9Y<+XL9DufUo9E(;S&oJ4z{!Z&6jy|M*{-^t;W$h$)C{J7(TC;QEC5|79wZGVWR!6 z`f#eATkHv>Nj`a2+~60BQnl!q%!k%C1DWN)I#8ASB`Tf8ziB z&EN3DpWee8EhZ}G%%UVklE;#nmX*uE@t63;-~WWij}8kNh+!-ki^uCB#;}luIo;g% zZ-2+X{p>joTJuPk>v)D`JS)A|uCC(?31yG$iIgtBj7wI|!u{6$JoDCZd=gX`!a;hD zyu-u4_y@Ew^N;aVuf3U@E}KJTd8ziSUr~CTD)k(c|1v7BA-UD_hGzM$ z9yd|CJ@J|Fx6zNBDqJ8UKGT(3LXqY(ODIX`Ve9jIX^)ZeBwBU&MCH6N+k7Cl4qj{AA-SM*=S!xX29O-LiRNZKmgq*{XE*1d;0-q(-M=)@5x zeJmBQ$_Sm{D3jZ&zD0SOx?uE?EG<$7m%bQGz2aQoop>g}CXSR7l^?{^ZCKp+Hn2`&llgFAz} zyAN)IOK^ABK?e8W9)i0QTn2Y{JA8Y;`#sS65drsbBqfhO_I*!^@_% z&(CW@YsmE*78w^mr+MR18uNgb%+WA$#oyUeY+NkKZ+M^c(z@j1?_AJot+YRUj)MD1 zLnlkl$A&<%o3XFTp$+vZV``kdprNmXmT>y3+fq?QW#%Zks?1q*0$kHLh+8s!?iYR5 z#4C}RwPY?68d3I(bo6w3i!fyODq(bn-E3{~miT1399Xz@4sn8<)uM03t*L3BFqV;B zyQ)_5D;NkA= zLGw-5A{9JkM*Ck z+Ccead|L};b~NgA@*n_Nd)dN1XqPMpPoeE&lFwaVb zeu4t4Sf+oV7CF$b;|`INB_-j5?3Jo9lC=lAICC&hw?+%g_+K7+gmRx?;I3jFbp#W6 zrg=S0a95a?>O^>ds+h)bK%4}!-tX-l=h;qwGg*|7#u84_mB@#SZz@Juuu>+E6HNWaO$iVxfyCtlNh~Ol}+^eYs>JZ$39^?ab~C zP}n5iaYDs6nt*p|-4$%rxzq-iKe8-2hrCYY#GluRUqT^#r=O?*trNIHdxbd$6Q%U= za4QtX-5)>z=P-JN0wa^9<7Mw3VwIxsVsGw1FefWyMP_FE9;x}sleDP)ar-xA7H$r$ zbEGW`^Ydcbl4$l!s`jU1-wqy0RQiXM~GG9))9exdz0%1+Iz?VMUc`g3zO{C-o&JvLsDED`NGe;YU~z>@(_o zwQO1whNtAt`yC%}B7hWvhY4w_%G`d1P%*AxccNh;ToYGUcw71Tt!Sp<-z?v&L&;kd zDSSSF=nHpO8olCL(H{l7x^3$=S>n1{w^UrOc?NkKRy&`f+d9{E&ottQcvUV{taLp+ z(TZ{DKYdcFc3*b7bPIgZuqP)EFOTdpjl9<~^F&fD#Wi}dmu0;f2k*)dHQ$Un@?AW8 z_>9y?ea%@>ZSMV9l$HgIV~PI>s!7d+ysCDNeJHk-Xq*q_B_Om@Xt6;ByU~yj;y8U$ z`&ROuO3BmIC_K6G(P1!LyL$+SF0DEM&y1l^EP_>{tM6{;u(t= zjc7be)RGSz;G*a5=W(Lkev5qEd_|wN`X`Kg4QpjmRH)}IZG51A4^;@yhJ8_=nKIWo z!iTp=cfEFlDWi6h+Mc?J4QL?T4^9Up#dc5&; zdN9l|W0Dx@H|&wKvyBfC;DFL&6vDk~hOPZ`CC+MUk94Xq0^IQG-@%Q~ zMNdDDIUGVGQ-`F0^&dGM*Eo5_!03hk^}R|2^H20+FZcB2J~kakvP5pr)=^H8p=9#k zw&Mb@3nY0^3ofj_(H)UZ?oCqDXeRP;a{l10iOJ{|K|_O%Rx6sV!XF2T-J_MJ=p@Se zk@;r)l$88wy>QX;)P*)@LEx^fm;afv#*R3A4o$9fSL>Th@ajgBcpz12HPzDT^GArW z)tJj-}(XtN|J)QObII97L1gT$zf1)(*>cr@ax8h!(h^TItb&V zPHXi$ifW1e`IU+BX0nqjW;s@~1m~Z^UlH8$rLY9X!dK8VraG2I21)4_W$e&=G6IZ& z`Wp?$SamFi6r8fr;xfKjkCLu8ap#<}VW9prOHo^b zPV80)S7_WG7{hE^Aq@g-g>#_e6*lxtRKV|;e)uYhj$6Q?J=i<5m*HwcMfe=bolgl< z+SIJmxU}*LJ1Tr6R~t4obt`eEsw%ep%Q08G)EN-i)02>-qM()#vC1vovFP8X&yHBr zI|p7PZxh~GZOc7E+wM1A@WXrj2r)5>=PYYJXAS-Bu><|=`7UFH69;x>?yESEhI7~4FnphYgI z<$!mWD5ar}neDbH#Z%X&5+Q-@{|+>~SQVh0teK=FDx>oLeH2L)>*w`hYJ+W9sxg<9 zF@_3D`E=;Rq2NlAey-89w7X5GL^-VVSt? zrk^C*A9LtM`6fa!56drh4B)gU$`?hrge-_pWus6bgi-aT-2XX=)(^91auFn~&%ttT ztqYgc3qZwfdEM3OyS84OtGE8P=&t>pfe<#}^Yng<5ci&LRROwT7)Uzty7go<(rQsc zJ46i(MfD-{Cu0)v>G~R)Sfk!-fm>5j+9Mu97;5k6Iwo6B%ng)#LAlO-OVZCmJuqUX ztMMUIe08giSA6ftO1~Q-vR$&L3{_K5$P#qZ{*kQbp7vyIlrppZs^!%f;(0Fmjtvz> zYvi8)ggf3BanPuK)!NVHE=amMwSWG70mLnL_Mdp1}$7G?C?c1gI=MR%Gb7jo{$a zfUZ27oh&M$OpwzMK2GfU9P^@`MR6&$2u}O9G*ekmHL5rzHGNsKG z^}_T*6v^}OYnkU9mTtA` z9pG&QptwU`IuhraoC_w&%g~JVF^Ii=3}a@tMvFlF^Et#*Snyp^z;_F?nRrN?sAx`j zh+SoG)L(8>*zi6nV`U4plFVp~fPgVXxmU`s)EX{N)#ZIeC^Mg#!J+k9rrL^;fc?Q~ z(cCrMIc<;bPzv35+Pn&$Xx9yDLSa*fgmOKe0;GeGv8Z?>iV`fXsi&7y5o$yTz8YA-S~sN z=94Tm_Va`5!^ms)XzXA~T?95Nt2o{%%U40kS`aE-_PH|zX8ce@*&Sn>(0NQGHjH+s z)pg7J?p5mv_={<9PJ*A%`pD_aeQj#RcnGwveu8b+B)csZ%Qm192cJD&a1hfC*~P95 z_*N)%Scvb-GTrBlJ-nz{qqmCD68++O;$$)-ZH9*d!zHOzd`#DL%SesE-HcAmv{yiR z7TJ=e3BiTMmfiRt@?vkuc+YjYdFGQ%T8dYsR=4Uhi>S|xcNb2Uy!-w33QB3OmbxU zveu!XE?l9*{oI6E$TheH1mcvs39)GJpWqfSo6=y4B6D?L1nuK@VnGBlfLuRNyo-Yu z>UBtsm@j^Yd`22~s`rh0gTUVR0fec6)W3GWR!^%)OtMDUNp5_01fk2}Z zgrk{|9UT7HI3MwL7Z<3yOJo~vzb(mp)4G56)p{eIHp#lI$I+epi0O5YM@QTt+ut`v zQ|lO7W`kPyI*36ge9fQ8RE;epqmNRT!4mZJC(HnyBnuK_EE8Zny~@p>ilqY(EJ6dA z_|o?-k`xVXH_PcBDCV9W+MP+!5MUB?Um3n7R@VzJ$hvguOT_ogJDdFFh4k5Ja(1C} zE%3xUaU0Kn(uYiUiHxXOmT=ouikQzD|6sS-o9)07Fm zKk6wd_?gR|L`*BX`a+*Yx8)UQrms$ZN||CF7*>`FN_g4b9FJ<4|9QiD%yh;?RA5zKPnQI7@TzA5N0bxj#11j^NfGcsLGWAe z4NgxIIq=tXU#CtX4r{L=DzRVZn4JsNku}j_>b!9Qr2%>y4xyF7*lfd`chUQ+IajCD z#g78Wr3u+SNMj*#T397fB9BDw-07f$n{eOD35Het^cI|JL?09eA{_IL%T(ukac-`u z>F|+b3_fhbsvFKlpBkB4*^h+FHoXBCcfEeUF^5IEgCX-Bkqs`y`Ff2JWD}xd&Xo4P z-gw=5E(j+~p&crvIT(V3764$)s$^JKm?loilBvW3Se;Xjk@dS#PJ9(v=~I6_=sB2W5c!R$9yIhFynUPKD~iviD)=8K<;r z(5Tf`G1baitp`%xynw*|>dMz81Np~lm|dQYyH+}A&wk?~Iz)QW{Di<*`G|h|hIwvA zR?7?$F>kZ*uoN(}Oi>4?zHf+gl$Vq5PokGnT@g=U{RstvS86Y{<^rJK~%n14-795~fj}U#%IQ@;s_Pex|m9!Hi;779VM5=5Zjb;PXO?a;CH*a(F zX*!3qlwQVc<4l#^w;pBs57cf8NT~N|W8>q+>@FT}*G}UL zJ5(!)Vq%gR_4hL6LWoX>8$H-7`3Cx%OFBNbi?|D(>@Y&ph~FljUUUSO_+P2dM26<+ zN$IgeVM;-Z(P!J=Dt~r>;vVsK&uoypuYs7f0U zZ&f__w$>E?h5!5b@39{Zt&~r*ks>u`i=26Din7JHuMGWaf&Cjrq&x9=X0_cYjyC8B zBrAd>i{3t$Hevl;wEhaXJfcEmVpoi%2udOVfkn7qMZ7#E00CU%!L7Ry0d*K711hFkZ37W89VQ*7r!1?+naCP?)3=Q&7f!NSp#o3}Wgowyc zROE0p+CF2{cMhFkKDgL%Y7qE^nE%!rVEeN80t@xB(1`m4?~lg)k*PS6U7A^)JVv#K zabHIY%jB#U0Q`|(QOsOKk*cT%cA-SOB+K|PeyU5;wyE;PUrvD61B5BWPZIvcPa@{W^eQpuDu-B&jxqV@ zh4$4Z0p!aI)cV(Ftn_-2yu@24@Upq0Q$$gHiKT_*RAPGweLy#Ls>xR=Dv2i8*V4)j z$jgqH81V~@OFPA=-S7|ICx_>IDofB~&&zh=A^(neGF;Qfn0Nm-*j!i8cdXUNoh4;Bn|w*lO>sR|d6+z@Qr)-TsM1^ZQ+~gRzV4Ea z+(>h{_!b_$+BrR`z&eM)9q&9eQfVjjlcoqZ8$S6xq1WY_Fot%Y4;QHgOg_YD+Fw@S zUhgqp#ZyN8F54ch(hu&cHS6axc4PmIaE7Wnr{6-xAwh$Dw1K*{;R{llZ4x;RgT)Kd zel_+Pc)xk!!t}RW>wa_Eb3d3(4>Y|GrNn)U?hIb~L;Fyqs!rX3g|kD5o{aes`kqR` z=Ucn`aN+!l;|yAQ8Rx6}@#rgiFr?wV%91NBkPt}REnmF%{t$v9G)XDC$>t{AFT@Kl zMCqVzcbC3%2UlDdh1g+%8k&prJX_s)lT|hg?tmZ<`Ajlza&ia6;F&z^k_uXx1qNoN zjzoU>9a`dCUZvte)eO;v5?!0h?5o)GnGI{Dr2#&WBlDJjujlVN3Y|zJ6|<`}jw_z@ zxSC#unb2JPFm4SI(+}%Xv@-G4C50K4hd3-`NxdTOqse3YSc@g8w%$&1 zcM#S}vAtBJB@K{g@wdM`oru5t4SC$8 zf)xKnh>a*x-J3D}^!x(rkn!+;xl?19pce;6-qMkLAWeuF2|IWWDJ><4DA8B4=Mn$j zb@G%JthXekcP!NYd}YfxG%0jp2WMnOupNta&3p0J*fFRJU7^>awN(y@i3KeMz-+1R zwk&p@zPh%D?L4uMUTUwvg+d5uw~ApZf(dTf_VD453Pwt62I7>oV1}u~&4|5SkpFDK zt+Zg}OafK4e-`qqr67iYmF!>f-B)6ETTqi_V|^+^^J$jWWMB{$|~FhzqPO&6uLF2s}{UxCp$C$a8P+WIs#2 z^h|61W}cd1I+bN|%k!atG;(5x{Zd~(IEvwevT2^Rb1c>+Ln(|qJ_$cE{ zfHAG?A57Zw_`hn#8!mxo0t}z7OkjE0f&Lr8n-E9hJ3636oOlQKKN`qRqchtx6_0V><>P<4^2>jflD+%Jg<8xXu>-HS{MO{2GBMy}k&*wyPLCnJrojG( z>>g!oFOGn7*DT^V>(D1%O6O!oMats;=i=_|W6uAzjfS=gB3Wt5mVaVF&~(3C>(2a- za`OiN|7x!y2gZZB>!n^*n12wP{rB_Tjs+8;?Eh~u=sq=!|K7phI5#q(p2B~-KI{{M#lahd&JAUL(Yt_*ES~kKkZx$nmx`1ufN!y4Et>~kG^}l za_|t$t48~J?M24^_UoItubragB#P6p2$P{=Wf=>_t%kF7J#BimJqkIc4O;$23nJwW zX;KCz-SGZrAemK))NoObh#@SbliXVxcJSUx_Ghu{zY=suuElT za6GmPiT&tT!KTB*0&%<*0H`p85}k#cpZ8l9aB*TC=+h|o+;J=H^&DJb$%+>#mN#L} zn&zWqB_2iKc7H#|+?REaMRjvE!9OmiXUmd53+H?HSNdH4>cp?CJSr~lOB7*`o5?@w zLiFvjUt2>tD>45xR~x`aV5G|%S~U6&{GQa<8@S=|Im-|Wj~j{^4j?jUII0w?*y zO9PUgg)dd8QnS>_(-hwi5SK=#*@Whm2aL%7h;+r0q7PSr`{{9t(zd0stu`BK3or-R z1@Zehe3^eRijb*@i8)tB(Bm|`#id~q$EN$R5~M2@^gtax3M49pTEoU6l9d6b2ULkC z!QfjQw&vSC557q4{`{(hV^b%m7{7jujrfC2XvWyqWoj*PBE^m)B=n_br=77pW5{^2 zmf*#fM;l$=lm2lc#F2FPK*T5wb)~dBsX(<~xgnV~> z)v0J~2o5uB;2L30AJMnRo|<&|krPFW)Z#m2WM*^>V0hW4sF1FVdzAPbvZu7AiAy)#boTv?SZINwq`4o;(D+INit~vig@%6aQ9$3JjJRN0-{m6beJ zu^#W_I(rs8>6(UYw;k)xx;4NOD;xja3N~J>fGnv8xMbD*=PSUA++Ia;3^-jV7j-5! zH@W8U8Ch+2hvXNf2etD~&p+M1b#o#lf-*XVV!u2$wA!ChZp1snv7;F$Lafa$xkOqC z?%H_HR$u(0?so20$DX4&DwZ~n57F>JACs!0uP}_2koP~zozCqoLuTd6fl)y3IG zC*%4?XJylt-cVAhg#vvgfAG{T9~Rd;`WX7<+lg(`hf{Q9%tqjC1t)pWL$%$!eaf`?jKIh zs_^3q9oA$`jb_LA>SD%~H1_K#g7shHME4&Tik-DW%HSl_uI&|}w3wgK!>pn+Bz4P! zA%>0Le?8^nRODhs@tjdVcmVeH_VVkRe?VV|q)@r*6QGV#O~T+R&d#TvT`DmI!h~68 zhto~_pnG@n0{W6R8ur0uO%iC}LAv zIc(mxr)f@A_4D^tY{Xl!!9lnSEx|#gi1oh#0B&y3z!!TX(`AeqLhun1#5F_s$=Zok zWlcgveYw9nuQ+(U)7w2bXijBSz(|<4?PIX{B^18$y@rPSuP1J!rDkyWqDyiyu21fVV%Crr(ukp~m z3;jDn{!gI1`%}#;)F?wQPM=N@FN==75IS|-Us!R2LiR2)VVm1-&bpgJ6v_;WJCm6djYJ~m z5oihdGppR6G0hNNA1i)$&mlLVlR?%*lRL{a*g&)&^RrV$zO#Lz54XexU1^Iv9y&vv z$f~ju_2K>t($uPE5LpXwQbYE}R~YH2q(^CGxII=7KpSq?bbi)MsHo>(;AJ+qYMhc6 zcJ+~H<1B|ZE>tGB8Yle>4&(?Zu8oW}eqJys*f6PesaM!nPTwzzshPWwnyWj3f8ZV* zpoDcBS_H6LOBT)?=eM7HCG)pVXe^)O$v?zPNLd(S`i^^OQXWCTE#xB8u2CV0ua?(B zdmtSb&>bUP>Menm%)Yp^#9H|+=LSQq=B1nLQf+=-+JvUa#_Xl)Qb~p@f5d~!)127D zU31Rm5PI2Z@E5_nmcmldb%EW&qNOL;HRZ+sSXf`lojHk(4bj8t0teM zYYMWFa-ZhaU{jf}U_!+DjD{-7^g4g*c-+(AOZgJVRLEB%P2uI4nZJiS8}Ug~(-|gT zOdek(p)hDCe^_pM64O7PBe);Vv+dL)A_+&&*_XJ=-^ZZq4)OSAU!%<;r_?Uu&5S1O z9M<4{<>PieZ+5rm;hlDKRM1UoU6lvP>7?D(^$hB8yEfyw8Eje7nNQ$cPGGH{npYNC z+vm!9X@Q)^o9V8ZLSuSYOh3U$W~Vf?vFcJs;QMas6c1_1R^ure+hs>B@~WzlZ9RRp zcE-;3znQt6EiEoxYYZ1>suSWI+%!6T6EKj%2V>rCicBZ`rL}AmMk`faF>>B{u)}q8 zt})udKPtp1>fn`j(2!iEHmjhZEDf@!xZ>77u9vt;>(0RE-W^Q330nTMFk{d1WRH;?WS;WmjJ9*0G}_yM*L| zZu9HZd0Ih!mDX!c+5v{gVFn|ekc`Rn(<-zk{Eu^g2$>(L^q&F)z>9Zz&8QFqlCwM?Gpa33GE zsO<-&+BUNb>`UHof{TDrT0f~?MlTH2ms}&tKWk3A^H(#WzD=hwV~?dOB=bMH#(%t4 z+iBz?CTXMlWKo_qgJ!hM(P{Nd$W04B5t)h|SjZIB00zjPBkQ;Y9+cuTle)*c;+$X5s9Nqzrqf`#H90OukC^DY z%*ptUEMzo>UsO|dmC*-;6ds{`s@jz^pc%}QIG>XUZJn3eU05D@j`g43Qd3kUplU@< z-TlCVt+y@&%@mh~z=l)fGw_ZJ#zD!u(*Ox>WUU__$(0)nR@wQ*L2oh3;j*I298PBG zl8(v=@Cmm&^nJ^6?fF z`gFhXg=t)o!UX7{euP$e>AMUZHBD|88r?DIzsrEnX=#itaR?7N{n{5zY~tehzCv5` zepob1WgipiT%SwE$s|<;5-q^$zaGaP$CK!~Gf7$&8i3nX{xKhkz^dzrvC3G{G;?`| z5DDUz;``HWh5G@^#ovOCYOW^tS<(CV%MUG%W218GLZ1`*L1=k~h4S>HTo&rylpN9j za)#b|6wTqiTpBmG)d5|-?9)C-}Ut3&z7G=q~ zC~3b0rNy+|K+;nBP&S6R%zNqkozww##&M+xEfLaq$=~j*@PYumt7pVHqW665<=PM`Ou_c@?b);mJ)!w8F(~Xmir^B@VdaskitAs`5(0D2iPEfGQtM{M<@IPM56xuD z!^8Vh-EKs)9!5Nt79#|8X@ZIGSfVcf#A4Vhtpb#JUz2;%;LsC_6=- zHH@CY4*sNk5>H!Bga(O2gj)#V04Zb&gb_#pz3WO9@%k@tPjLS~@&@ zlj)aD`0(UU>DYE(Ppxz%K@Dhh$yo#fsPWm>8O6; z=-O@%gcZ^iC^gN{&mz7fsD0hK6rtEIM;u1FXV4>drNNcO3LmC%b zC^HBw)#FPkzgo|ErqH2(%2Wj3`U&ey{dYBSIYBTZh>-kCjtY?=8y5R7$rrrP_M zT5`y!k<8T9)q-oQOY=g*2$2n+;ota3!b#{3qtkpZCU>R?FbrT8mheQ_jPRO03Ck zkC^|^Yj4eFeiT_&xtw(u)g+umr1{CkCgYrXHWbc@&n-f|yiK1Tlo#_8#-ljI(FDGt zHJUQuSy3!OnuQJf#CBr7}k`x)!4Q4?b*w z0LyJW>}^;=E$fu_eh(Rps0NP}nP{t8{AMCWcfGBq^8CDMXxNq#VW=i8##^aFT3)m9 zs=>T{Syn{_v%I{#wzk%D-`vtNueEi_bM)Vl3EoIwN=t-p6Ccn~jcz@?lBIqBcgZ$- zn5_B~mZTInE@$mn#?OY*>d?_qw6bRuwbho9+n-|?fI5~!O)|4~o6=Yo$J%~Lo=q|g zDRdj&&Mq07 zsg4O}YS}kYb<&JXW`u>MG9@O-|L77MdH3k=_|h+>e~Zv-m1wN;Z4;Mc9G?-)XNh8A zfMoWttE#=bokepB>F2`cTkB1UhOT!OneWISQQAT}hJ}XxYigs&x*}brM5#Y>ukXIY zD(GuuNrE%Oty?}~WoI8>ZjVo~4MW_iWNg9fsjg8O#a#1wk;D?jsGSbpFlyz`)#uU{9H zaWQCQA=Vj{fe%PxmAIDN+<300mA09fnSZZ$1@i-<2)QX?mW=G|rcoFcOw<1crg~>w zOcI{QOK#gtGcUKOkBCE7|)hYQrsj1=N_Y&Qt1u^fpiS15i2`T-tkbtF%l)t@APh^<9 zZFS+8L4)}s1{Dw`aduoIvUoWeBbw1j6G}5Ibqy{3`)A$))3;@!e@@3nn7N$O2kuM^ zRSUaKP|jo=HttOdu+?5uH;3se(PKF$E%}b+?%)HA6qCAfwM^DK{j~KA$cRX)nB_RJ zx;i+AZtEg+wX20XFqdey?YIoHAve3u$ zv5WLjvtevXWA5sZa22z^`*@v>==e7nk#PFrLr|) zsh?FhqW$WqAN(ojeO>;O^k$4<6kYwCiG!QWYmJ5DNr5}Lmwd%eKS~RGW#cztM^nXk zPFC^=%}R%Rd|(|leyOF^Ek*r%Vnkmsnhi%qKSA#Qh_eu-%-y<5{jnxsXy_i_bva+$GuvK zP_F}{ZQ^*AKP&l4S`bcohXUQ-N6zVPMQTnIetJRfXR3-RQdA=He4buvEfN5`Ic3en z1yWcHW&Uj9fLr?AQQO!ytqTCLcu6AyRm*Ika`vD&rEG3SQ@}DxSy84bVUGNZ6uotC znTTMda*0EtehJv$xmcezHRd8HfeIXRI}COO4S#9XqO&MBNHbO(m3owPRYAt814h0U z_Pj9gkcfzDNGmBaWL&0=k8=-^kU|QAH>8avwYFblo&G?LW+Z8>R+kqhZm0tK?6^5p zw%J#d{;AZQ&N1uZM(bwaZ8Rmzb^%1`;xeH#cKbmE^1)cc3Jamg(&VZ_6CN48QnoFuBNnH;;lOsU2zY6`3j&{OufR9=fw)|QQ@b+tDe)^K< zGqLO5Al$*=^z$bEuF*7n@t=b&kJX1)xHWIljDMuk=gD%~ktn+FWrP3Vzy8tj?xiU} z{=yA9mJzu1S}sxF_;=ZGC7LR6;;N?hO`=fbeX)#50uHUs-=)*E zN?J|$7dS@#!dR7f+lImh@4yG9Oj)1eQyQAuVy=#Vtwi>UAmr#uUqJ}MXX@*s&LHWU z_n4j9N+29PS99F|hBv-wE}`2E;urO36pMdN;Ekw-oOteVt7m!NgW8HD|7S`3pJv+~ be(}GdU+hj|$nTi^>-7MN%8FD7>HGa3$D$@V literal 0 HcmV?d00001 From ffaa29a3709f40a851f19e061eeb6a5a102573fc Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:44:02 +0530 Subject: [PATCH 056/958] Delete quarantine-default.PNG --- .../windows-firewall/quarantine-default.PNG | Bin 186402 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/windows-firewall/quarantine-default.PNG diff --git a/windows/security/threat-protection/windows-firewall/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/quarantine-default.PNG deleted file mode 100644 index 6c1fb5c0070afea312826ceec8c33831143177f4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 186402 zcmY(q1yq||vo>6%rA3Mqm*Vcht+=}tr$`9yZY}No-0CCSqA+b(Yt5Qo}tUhN~%A5_5%L*34Dw4w}nw`gYWOx za~E|P@n=1ni|_1afcW-biBY}yc{5W`qh^a9s`!7i_FWo5-Mu=PJ5iMJm-QdcVI7O2NPfV|&7 z?~E`VT%9(!-1!i>A1$YIS&l8= z*M9kvfB=!GsOXEAFC(I(H*PQXBqb$3;NteeGk90-W)Q!Bn{@Z|tlVj}eEat7%1KR4 z?eIv`|J{YdMb;u@(tNu#R?BN+R3kZWcz8@>AvadzF4>Mz)WXI+`|x_BRuZ5$T!muGDH^^5+1OG zSm;pmDm!{4L@Z}PYS-)owkrmn!a9#OGxmjG$UCFQv8n;ljO~Dte~9Lsc(|uO89!=! z{UtPht-s*uk-hMjneC^@&Z99dOW{ZS`^w!DnH#~@(Z6h5oyG{Twvu_=>CcF5rW+Oy zpV=esb^p$OfNdw*B6@p!m+|0Sz|sFF>#N@>Ap5D}{|f#e`8U65lsx;ZnSYf*1Q%|i z0c&VzaQ}~X{@ak4nD~Dhe&y@_qqzUf$J7JZ{5$zdEDHE9=`E3am;43WF6&0K&i5I8 z(KkjrPf=+sJhly)?t0L)quMFkK5Lk1qwe9Y(WI^&e=J-;WRGBk^k%D9qrcMkFoG~@ z!w#nKI2-Uo+qZIZfhKF_z_`oQjePsYH_nWVx>sfR2?II@Y#-_D3|g>GZINq-^LJiN zFEQSf964-Lb!b?~uI{FZj`2>4@C?bEx-~X#u?jg^xeVO4Uy91gGB=IuKFO1-J6YTy zb}au{%1waG`2ShUnn?aaXwOIa@GH}{j>k+&ht9r?o8Y$U#G`}8QqeP#yP!$A`jx$T zQH(@6I8o6LX%q&Y8;@GlDMPDK9=hUr)j*y4yj9HCo(J`*UQ|bPZ8y@Ev}Db(0n+c> z^%=*|elIG9@*YS==(+HlH)1=~n|Ks{eJ2FJ+2Lk*?7Q25-*HxVXact$lM{K7m|nT8=ZKI{)kY|nQX<_~KX;J;|-h@D!LVWl$YWgkn$ zCr-8_B2>CJYnIh8VJ}B{-JLpR;i91&Xrb_p*zwUYrFHhxIi_?et7 ztyfG(MxL3jn{i(M`2{Pp*)RNy^qQ_WM@>uyhATOdlVPE@9sM_w_*P>TXAy=ErfWaH zwux<=I88tN)@f0k?|Zy<-N!T$o%*|X;Q?`X;Xpx#bpPutB8ithFkBYh#4=K!$x4kk z0vK_@UTtNVY``+GH&7l#|;ndK9{BkGbxw#<5-~s5gU*$QS_eA(rCd zDjwmvol~rhARfB-VKSf&Biu5S*Rxq(lxH=Zrk|1WSX+3MFTBrEi`;vg+l1X$vVOsm zk0zgUeVVA>Bm3u~hS)Wc3)xw&NnZ+)$|xLOQJIqC&{-}vvBgE$c}vhWgg?*ejAElh zvZmNJ#Zp!KI%Odxkb(6Dg5!1Rv>A2GZ2u36m#DA>l+rNWB^Y)Hx>sq#bSf-f8*6pv zOLsLkcQrG4UAj!pj7)@JWA=$5ZH>|W(UrqZKkd4(G>XOE&fRPyfL=7Ic`g0WPY=K} ztxm}`)}*m-%$I>0gb$Eosx8md;HuZvZ<&hhshWLLegWsV%-9gOfqGr)3gNGqM}2JV z`QEeByOY!zTT$Qb40WqccAbX~8;2D-$rFY7YTE?BhcGygw?=oLPjmW;9aV}M)R`xI z)wuzt(&aDgP_oX4DZz8{=hppfBSttAT-6VFG8rO*jaGl|6OpSn1#rpZgSx&|hrx9B z!=ZYzNt(`wj+2gqeN(oH?`^zib#(RDzw=idXeJZcyl5thS8O>@ z&JgmHbdlc@*_yTLVhhE*UV}JTb+CNnQo}Gf)b)1Dd@HqWG#gzu1PP_{TsZ#7f}goA zOKA@+X^6%>nX1%vuSc1q5Yc+ne8lcbb9pG%Sd^?}(e@uTYOS1ou>@QC8FYGL=j3Ub ztvoa}g;J&nRg3Lh30<%#bN2{OeSzA>u8pD-H|e>ri$Tj2l}HU2Xc4{p7-OUI)vFEk zl^d37nB5o4&wv+uRUn@6)mQYKJy!E(Y?pe*frH6AIp3t?h413thp=ioS%0hEo2(7h z@#+#`AQx=>3k8?PN6FCMe4iB2@AIJdMeCp`uZ=yg}RMX=TqJHll`*BWmqU8|a)QTX@vES+Uc> z%f47%M^?C6$9Og%6cZqQ;3-xHjni@drSjRWCFc|>cb{Qs(;ZkoAS}jXzEZ^Jw$O0j zO~AtBs~iO!X+7BsGYb8vG zuF4hS>dK#!X(%W=Mwc^X)@_Iy_*iWSazn?O@bi$x6PE0TZE|@EJrzOcIFl;+HcX80f zr-6Dw!`QgARB{oh)YSCYD|bTcDzDPj4itLny=aDwJ&0~H%ryt}`a%^l4LHJ4nxm#X z3NRt-)6u34swXCH#n{CABU@VtPUlT`o-hF@K@rIiau)k7mb`qf-Gw^79?V;3PIcBT^)PDW0jE&O`RO-^E{ILO0dh-hM6LPZiqCAD>V|BR9sB=<^0}_)3U2|0b7pT?0e~ z^jh|3y2W!QBXCw8&#yHX$}U?UN=3>aBG#u0ZH;~IeecpC;$EIKETpR$p;zqB$I;)Kokvd_9`0 zQ1A$_?M%tAQcgHv2(Gg2natZPD0mdlLCepi556PqRkorCJtXn9L{nFpvCO-aDt!oN&Sg- zM}pCP)`oIo0m%%Rx_?7}%k8o96GD2XCygr0dLVPN#NT6y^&`Y%tKf2*dBCpm&Qk?# zdF8ObFw@;~MxqGEN9%F8a~L8QajIkMQha3TAJj4((20et0;9_P5DPx%^$_v6UNEx} zA9E2?))Y>(UrNtipE+O}haTQ*t~ihuoNBloU-xLdkvp>YNS5JjsN1_Hxd`9NcCq-8 z48u&X;NxO-v7Rv@+F+DMpwIC+?fE)4I@At3-O&oBINzQ&DDfkyIYv4J4`%=IwNC<1 zlZq~#MLK+Y>Cy2l$-7%KMtziu~A1Ty78ZRlZKA=86Vy|xE3--pcz>fxBgSky)& zDnXd1Cu1;`AKRt*zS_3ftwm^DI`h0v)DImcJ(FH5H@AB#gJ+&(s|IJ7OhG7eI(t+)oI1`#WEU_O%Igjt(kDr0EA%jm6W_q@Na}JsbEg$RC@@?Ry1}86BmAkrPUM%*R;C$gulf1Z6n|KRAaxO&@(m{YIX1w zjd+)HqM>1=#!U}o=rtw?9<*)%e zWox{-*{<~BxJSs!Gf9SQs7J)C76B>6{=Pw~+KSDD&6&FO#?Ig}iwMrjF5??upz@hk`EE zqpV!?@1NgP2snJO6x!pTi&Mr%BS))OBA;Ijz*q%>s3Umu8*5w_O!Zi8PDWkYZWs5avz@y9j6Z{g1&v1eIN`6zjDMb!8~|0b#;KQ>+O)+2KUgY0 zAHZ^tc93*}?#<{Jt)B?FfjCSt=gjFLzTod6OibPrcNs!$*R}Hx8%Wn~|Opa=01#jN8K}JGm+NCQlh_z70wwQ zhUMo4?a_{gW4X-{a#9wjDHePTcP_Q?tLxyV)laO zsTwEE>sa7~m2ebzf$qcjYM-oUgDCDK^7`ua$SF6NrH))aWM4H4r;MvKrTNb{7p=tWS zSfATpbv=6oOXVC|&f9!BzKEz|rnq>L_K3U?Yfjfm|JeEU2=p&KKgWsK9X``7)>rpx zs0fdYRJV%_Jtx+6)6LSb&F16qSuZ>`i#r?MtJd(omt5377#$pb`Q=Z;(&;nS(#d}e zN$0RA1^DH$s9;12X1n5A^~j0eLCbXMOlFIlWi2;fQhA0CJG9SZgV---?<=J=C&kIB zbnNBG2p!8D$5l7_y$Z91^2K7^u1Khu8HBS)1yj1=KymNj`?Y{dZFvC8FriWY=P0o{ za=wHKyOF8icilopt^&j_Se+jK0Hn1TySAH8)mrR*z=})5!-*7!Ic>0j?E3j=>fUQd z=LNoE4D!+3uF5}?P@XZs?I>U-l;YO+L<7bjpj_{40?#ky79=b3I`jVe{&tGL3dHLjNM zXMFY}KM7pFWfd@LK-_V_jR#%1&;1DZxic;3Od}M}w*HLHYH|umL5th17VS7jJV=nv z)Argtw~@Oa^;BV-Z`)8@fhKzn3|h5JE5(_8f;=S12&ks*ufP@-0WSCXXDAq#rbAHK zK*`U+*=b`HjIVF<)K&Cc$ynDrI97;L^Fc#cic2ow0*E$y`A!^V;p*?DQ>8ymCfp;J zwm`clf%|hskq+i-9IdcX)9|-XzX-6>cxcl4MAvy+N4md@Z4%D5y$c#IN=$N(^iuL+ z&mX|$F%<2)78m7oI@4vP$wuzp`fofrlh~+)toO!^EQP8MsQ#!LX>0yLNPXv{3O|08 zqrIp2@SGF0xA@Jz(|6SDbr^?j1{*4;Vie{Qd=Vw2gw|c#P9!tWsGUHdhS6A9<44Y( z(pM=(#-Wt6{euT8mVl~Jm5VSgM-$ODfs}O}LfM&v+C+&w=yK*Ux0ZKw?jw9(UDk^F_2{50<(yh11(uS-M(Cg$%_^5_$tYR{bC{F}B2; zrAuNSx^F(xX5_1u$6yqM@_VKe-)yVmD zKK0qfI~q!1+>GHCOL zzioNMFpgnrQ60H0ko4rm?9(&)h5u*faB^vK^>Z@^z6eeMNs1gxL=x*XyRSm0AC`ef zA5NPOZX%Pf^v!<02vzMH%0Ao#otQ}t&k*EG{y!ardn43VJpRx~P%zO`y#t45{AV}+gi9+h1-#H@*zDZ<}|;J7;jKvo}9 zFUC-4fm)A<1ishiHxhLLTC`^zCk{r(IAX9cndMFhGg$vMsy#jYz-U2d zh^)|ir^qfQ(_UignIdf#TQgqVf%6=@HQng7Xue*-#ArJ~w37tYDm@~ZmTUY&PP_k7 zGUdy>#QpT?U~+VaNhcX>-sxJ^by)%4s9Ux+<)F3Jg+xqQ@EMaV}=j*3qJT zJ5^=B!J7mbDwHrt0=*Lz1(#uVDxbx_;VZF~kD>tDu|#&>Gf3?zTDnEge-zGX7;l$O z-ZlI3qg_Pgg3o2|;b*n6j^(i~*JZ)W(ph@~i?Ez-`&bJ1uZFjEj6(zU-l}7J%veKm z1~~><&;5L+OgBG{W@MbI6^&__L#ODU}o?g4l8c?%+Ptc7NF+QQZ$#21*%bK+DZ^ef?Q<{6I{zsCKyawDlPTnhxpqbb=VZ)aQt}c9%9%@nTE(JD0Gi%DV zErvKmZEA5)ovbg^V?1^C(j#$tT>7TJsv;wedWMIDy>`NG4Bp1+c;Gl%j7awDJOt;3 zVK?Jt(5_rwVxuQ6u;w7;Vw?IqgnjsYO&K4C9|qYRrY(B4-k%VL=^8+IVnnREs1ddk zzVSg^K2yigS~PxKCDmao_vn%l6&3%XZv~~!#XnfA-`u@P-k`yP!?%oo2NHQ65+h?1 zSDEacV?Zx1V;~k)lW3wJqH^x$V2=5LcoS+@2$hRE&|t2+NC4zBT6Q9^>_CrVr(O=}c7aU41B zBa5Y)GT)LE9ijUV%^_hMi015oj4*J;8tB^S(#I`#ZDfYPqfhaN97FA%!76tskP=te zl>XbuUK=Q>_0`LUTPIeAi&(drtL~HpxeA1CLj$L3!+>Hxi7a(bslRf2BdEhixYls= ztq7mQq_FrJMcBOijI6ZvyOdt`id1RU)&a^kJj0L1o~QSI&XHTYfX7;{se4I!l(9U8 zcK^CR%`plSA{ADr^rR45Qwz`wtZiYN!PfB>1pr%Te^DAvCU`Zu+NJ*MWznY>TpBe9 zMulKud_H!=h)8k*cj|WzZsRFCfH~fC-DHVjVaeA8v7}iSYT6*Aj z2u8!2RHIP%b1wN+0DYlrHJmv3kXRgQYWAgRF05%3VB7E|BJ}|6?);73Oj>Vk4POFV zbm1*ijMa+GOGt0|Fz_Qz>h`RO=>TQjqAks1zrii{o(!xiqY0P1zXi`CU9gji1tk`8 zuY$v$=$g$RW5Zr^_9Z0*%@xOm zj&>k>>x^tk*N1lb!A9ED6c9_S@yCE!l&wtUJp8;UOz2@qwT6sF+MecS{jGJ|q~!kU zAR$((we}nr%*I1Bg!VEA8?H~N`-e{NULaE{UwlR>mypEF;;tBgD<*hZrhD%my{WW2 z#U6k|Yvl1^4X-Yhzr#_e@~qBe^@5%-d(gyY2LOI#4?BaRQVYNw0OuwRf^w}5-~EC* zdOlsSmv|Ex{m!ah;y3|^^x96`JH4kxC;-S~DX3j>%KI^Lr^j9Rt7lIH)eC1Iud~6@ zOjqD7m&`E=@Lfe)zf?pb6R~C{F63z|BU5RZn#ypU8svmAK_XLE=ddReIq7$AbUADy zGJ_R0)13VE_3&iv;;R&tzu74gshOOx$$&*Qto_n;n?%VGEWGJb1stePLO4)(s^YH` z4?ur>J;98h%TLG8EKaSof_h{`M6s?CY`&jtxPPPw-zA$@>6hwaXc6SZJ)c!wz(;uGMbI}#Y<=33=4rLa%mB%U)ALW;gd zpZ5h^Ub$vAhowU{UK})?H6ff+L9Em9R?jh_FPWI_7LvMRb~&vEg#76zlNXlSA}BL| zRuHotF@Ou=oSd!k-w`fy9hDIkhJ!k|Z8BKEKFv}gb8E6~GaAg%kfx3fHYw+N^Xb|5 zl-wFneNswo4SwzomfH&lg`5WyxkzeC`n2-BQ1;rfR-wDaR)7&na3jJWt32zPRz)Wz zR1zD^>O>*HE3%y0PKs7X*a!~kIC&}t;YreCH$-Y_gq=u5K=;Xvqhrr_xDF+0cZR-x z8AHqKs@a*oEh2>3=$QUId1c>^h)vAQzZv$9NHm}!C|U1KlRy(z3yzg=uVq^opzsM( zt?PY-chsqz?>S2QV(4%YKKNo2R3Pb65}tQPRdVahrFXU3t1DL!3^6qA_7UTz^|(&} zW@Jjz`M??^6i^zhyOM0~K*qk$h_CF;Rw6CXSZBbbyb#rLY2%g)M6a7$P{FB#BmHVd zKYQuP8=;eCLNrKnj+qdCr_4uB%kj{GqH!;kT(|Gu znw3Ja7x9k<&E6l6m~@)g@x@gCpkv+jlwA92ES|42_spHQO2WWaMv8ZIkx?L{krdB3 zkh}Szh5C@O6+^z)7|X;x6+D2nKk#@oKpe0n1<;psEBfH)%_7)>yA2`KnQzK{6D8fa zb%&)B5zf16lu&>o4}8Dll%cy^g`*{U*bOKh2s!4e*j)f;e_D7yA;Y> z9KGfOc8J4^Pj%7gjLJ4Ote&L=m$UDRH-PY-*O>ugW~A)v-xequvsRJG8uoag38u9R zA;<88(w5`$og>?ZRG=BH)B+n&_b!mTzKiFP?|ZG&r=Uba*A z10|T4Ud@RSOp%Guw9mz{IHxjoD)?;VZhe?Z+9>=g1@_L;=A=F_sZ2O#W`feTd;8aEvq!0sCH9C#?w?fy%P-S~JQoVQU#-Ivn{b(Ufo>+w ziGiAbX0!9rd27$)(Y_97*LGMrg(@BX)TzXq3K-(H-Qko~!zr>J38(X&dmF0h7t!tK z&VH1XKAL1JX4MUn!@5bXmm)J$Ku}JX=?A@Y36hJ{6@OBBf8rN!AN_7v-o-|Nn&0&O z%Z}@B^5`fWx4_xCT8rXl$D+Ou#L#3h@{Z3Ve{*}AM#`V0S4b3k0{gDZ_D%4B5nE~@ z!xQ(Zc~74KThD$r1|;ONhD-1G2kWGp6H-T4usc-Sco6i|LkOmH$E zZ)kBSPJUkh_WrOwBcX9r-FHRX$V4MmdYXCq$H`npZ)+8_!;W9i|Bfq&trcJ9^C=I{ zRe4v2*YL!XDq7wp(w1}~+?g%a;yzsytE#r|2sxN`+GaDupz|*@ceE9ArEo5M7@R+u9_DE)2 zS3wuxfbsY0*lcr+*i&ZSaiLrG)KGThDDrHA_+u%;jDMAHbKQZ8n=9BxFqG?j$>aJO z(&0+ZlUVeAo85Aa6L{1rmV{)_@ZpBcCVnJvUzPo)HneJEu*?(f9V&kQWsL>D{gtnW zV(wnKgKFiTtar6Y*JF9S{mEv!l*YJR44ud=XBa-K$xdbn^M^IQ;xjhf$BH**jRpe) z6+kbcZt9qa(ek-u;L(Lg=Q4FauxBTn_P*cgauf^?^m?x=)cks7SF2bOipAVcq5yJ! zR~79TSY1&(U{gd;d(JMyyhHg)NL+~K6q_!V#1j5!BbhFRTb6+Wv(?Dw=XSx=@V`xN zA#XI#Hzwj3qKq z_#;F|LP&jU543B1k#tkUba1C=3B7iC6mR}yEcZ#|fitYwy(lH`)k_RXN17oiX=$|h z$GxMbwsV$+kaXxVPDKcgiTc`sqW1#uvoQQv)pS=#g;8S63r zuGJC~am*MC*NCg@<{|3aIODO?1tZ1Xg(UJwWnfpH$+`s}uA_CryrJs8NVfMjEMh+U!+#fAm>%gw*jeZyy6oT zw~_^$*Jm_asnK>~1*h$xRi`(plXe88JM&|)mS6uyO;?-UN!d;z1z769U)p2J%tO_b zLQ&}ReVHSaA6T5y{4i_%Hz|QE3HQayrt&@HCERA@Hhu~A5AX7O3#oRAL}Yk5Z7vPA z*o?=Q$1eU%6bZ6;yh=0?9q%v_)!5ER@YS^>fziObn_+2CZ+v3b;CNf~t&Qn-brnVt z&KGp-0gpmkW7%CTFY%kPGXgm-Iei36xSNzpCj&l4ZL3%gC878}tke0b0Y9D9+P@;X zbz&e&A@0qr`5Su%TU739+=W<2x0zB1tfZ0(?@sMMjF<8QQIUl13VT&$usPto2t*k(mqS! z?nKQTomfWP@6-!>C~3zGdcik_R)$bMwry64qnGiV-=exav@lWdJwwFdKz5ViciLlz za!>tIo?@oZo#nGkoC#l-@wX9)Y=2l^j=NMz-n%QEXR5SB=g#eNk(^x7vYJ1ybWzAW zUl>*9p7Qmhg%^@HkVAtGb_tOf7ucETXr9%tVi=>%^CEHfP?w^W}a*_Dy=oUliguh5me1Kw>&K{j8i z6~?E-eR}JT8%nlPPIR`D;noWRmj&4${1VvLIFA1IDJyjR34bX24nIuTt}Pd?PcwWP zXglX0uS1M&{^py6&8AwKIRQ;t8nPs)Moz4op^B>kL4{~;iG|*ZCXA^NUzG>ikJqNt zx}(MBBTu*$;-Y|G{nw$Um+T&B)im`>fG%N(Mg|a9`~~P zQn?9pvICi!^`oY}TiXubq%=S>9=SHqWTdnrTr)0HLm{exy;Fi;Bmod7k|HySSJ+Z`ekP|Xzxk;zICn)coQ*nn9v!dCkfKS1V^dZjcnG}?p~YpxbR7dCMZ ziCad9-rk=HO_y;euimA1)eqG2i3>a1<0s1N6eNb9T43!;>%h=dm1{dJ-z?&S#-?rX zDEp#+RJIfTtqw9%5emxNMFS4~ma~iCSR*;S=gXP4R!F|_-=)j0@CW0-(8`g`P5E@f z)I6HPXvVVzl0#+Z4olyyM0mR4J0EJ|4~#awB**yUwuVF2=8UiF#LaHo46~rvh}E(d zHM$dh%^aPafJs9LFO5!RrLYT@9)j!UB&fb zdF-^FbJ|7;_qmtCy7>kx#^5KReh<_YBNmxXhP#!ZpSV61Xk#Ai#b2}pcr$w=ODg!9 zg+jzGI$Tq;wuk6$yyrhz`x<7%8kZR-+fp}Uz)F-Q7LyNpmUD5hmT)ep{`|+B{8NvI zg#x@d{r-jWBM+|VJuObKTqwrSxgdptL^WrUWy?&u*etaO_vhcG+G$Zv7d%ZHH`x;I;)hX-_d z0bRqA43%!S1W!+5!}=uEecOD=H=z=6WyGlmy_))fYVjRrr^x#1xCsO29ITYOO712st0^19Z^PdWp>eULYAE98y($x9PY zf-mN%`mOcw@lov6D`_l<(fOx4VLO7vnNam&>TpV%F z8WNljik~Ih?l!SHvD9{*zD@Q=aD06g+V>&x(`M<>@|}e$9?H~gsN|~=CoB$owSwUq zYK07`Q0$G%u*e9LZime^=n}KldI1$G{Irp7Hi4a15{Kx=!FxG}gxg-357@YAn~2X= zToEDE5la=uOtpK~@dQy(Xz}hB=Uk$ls^V1ZvaS#fn{1q-QO7{oW%=UdbL4(@rUDNOPVz9`8S^j!azIR5o!Zma`jB27IQ~DyC*SnPHK{J zwoQA4B+9ZN0=4+bPEEqHD(Mps*Du<_G)igH8e<%4jF-zNm8QH{1-2S1r=W!?gPY8f1a`h3OJvY1PSXdO# zSmM^YP$*DwsI%og3(;G4*i=w*N^sr_&9T)abI;u6OBI-aSD}D{I+sX^`**oDEy^_h(u_lGdE%2upVvu&$a+%2Uw? z`$qG!pCw#mF>0WiK$b+tPs&)`u^JlVMpz}7 zZeON&@y-Y;?2|I2QH`NIjZHOEuh0Wpr;@epGb1 zlPuDywstRMSlXQ5Kb_$izQi5p$mUVRdfFJA+Wo}MJ>tP?MXsenv$5i^q~RVOU>*Qw z)VSF>}9WbmEdoivze)uaJuwH zEIjDWJh(5@w=OG?X&TO;SJ<}-xw%EM)gq~-+G+Wihn#rAlF~QXQm=cx zm@wneX|3Lr_c{!-1TY!P*@lxcl#MbQo8R$D4Lhfn`sUr2#||}j2$ma^PtP5gc{DQ= zh8w0-xMp)^H7=>uht)~Rr#L8L+gJw-v$Pr>B4LPpEA@jkLl3t$i3J)roob}}KyhzM zZ%5Aq{~kdy#5<%VsbI3i8(buEnY1rd*l~DAnox6BU3lX$L)c)#wyl`1>$Uo_G|u~D zvxI4n9YnyR#Cc|K0XE#U`QAgACgz-ChRtE1QJ(6tf!|?$u0rgjqj^+jjOw2@=EqL56L`jOvyr_JR@ z|2+rB-9-W6qMunv!#`qq2KU+F)i`&_*{?fB4IM-(6R=qaisUHEhw*-ZNCCZaO{At%WG$=y9(dhKQ!79B%c^;eCzeUdqt z|8WuIEZ`@z(Li*F0z7!J23%`d2mp7!WPDWOn-u3`FGg`&9qe&&m^R(mA-EqcEi@P9 zK(dAPJ>X4lY%o<=UC@Yb!22ZPww*ey@8V^MChWQxe1}}CwdMl3N-OI z&;0moTF*Po65giQ>NDVd+sO&Mx^=3T7SdWV``y20^v3T>&+VT|uR;t5;mmzo9J ze?b;8v{8bRumxLM4vzT2LD_#n6w--(r1`qSyF*J$8B$SrP}>F0|Lvk$rT}Lt)1|T+ zn%zD8A%7(D|pCOMPH>r{?CMKVrKYtz^ z7G`t!{WRt@9&Gnm?oxgIKggAv@>8}5Ak8}@5;?Kd-WVMGx0X|pb_x;b(-;0%1Ps2} z)U1@1M3;fQ?Er-ic$wRfMq1Sh!z94#x3v z@J6-YFjQ%h@Vrkk=K@BdZ&!{#-6N6z>h{cIV;l!g$a73Alj;z#wVg8nqv783Ss2|O zb2Oj-bQ$3Y0Qz11w)4-_We*3&J@lrz;E6v~5&=#=YAd0nq#`BiA>c~jvhhEE zrN4V)>u4~C8vNG*8-I0+fmkj0plGlG{j%yU%5=5Ef&do|<2s$44_Hz8PnANC^b@vN z@fnix{a7iDjN=|CFXM!6!!ry{kMN_W^AF1imI6?H_?N?E zTDlZm^~5n37Z(S4(MuLPNX~C_dE73D<*&zuBf_Q)<^gO&K9(!KOS1nzTV~LeG?{{J zg(<(==gO9TcX#?ELn3E8dS!fwkF33x#(*NR0n+Q1tJlu1izHjTgg+1MkR_@e%sKeX zk~i8f3H=u3!0M}qa9O=S^0!G$N(79;)N_}$I{4#9)dFJCwDHrQ4BjEilRcFVSNE8ii4u=!x z*~%+ZlRabl_(rs%ev;q80VI4C9;7)qOv*aXcw;L~Y;RbZ`LGAM3&OVps6FA@6~%8& z?^U3FL)x*15tOt&ITyQHX~?b@>zqD5bK5#SHuv*YIGvgqKQmXlUd;#bi#9$NUTn;j8i`D*Hi*EKkKQ!N)i_04 zyYCitEarD1p9-iHgE_Qt8P_>Q-o3@adNaV8KOeSn>-dW6>dv%3f?v0{q%W2WF6Awa zLP)q%2#Mn3Vd4%*WD=BC)p_NR!_sA-RxFV0$!+G=BcWIp~2{6&eoo{fPF?Bp^ zbNOb(pou`%TwMrNPG(-Xl1t0^WB$doT}21wPCmBOa%4adE7E0?WP2Sk482}{Agr7GwCmYn28)A7pehYRj5@Lf|y7Cf<>W7?&uvW|l*&f_+9TB5#3?~yy z94>F91P~ite~`!!4lX3IkXZr(?n*vRiFd7MvtJIEc}}FLUD51Qo~SavZo(^$0ZwEydl5)8&UrkNS-Q-fS!iwjFep<7FbRWyMj>k1n|&iwZ$sD^?fdmvMxfiSu>UYNt{nZjGtj&rNqIgA026iOCe{taPY?dZnw(g$E(`TW(5!eC zjM3vU8~3bM?#;Jsf7ljhrY3-YIamDe`3Ky|ACLf2rke4OzxeoG<7U9$Ri89e*ankQ zdR%!=2`1xjx}k+XL}IA{K}qs!!84<*O<0CzS$ZM+0Z&cnFiMyu_+?Yga@1DbBmIjx zc_Dm$K>kMr@i5mkuTQ(<*a4%ycYT5Gs<$F~@T&{0NxaKAo1sLuXkftX^Zo}7tEbhg zXrY@YdhnDa;LV|h-ps?^a|NW0MMNBQ9tFJ>80GJykSUTDM>;ep32vaG8Bf4dO6|cJbY;%j)Km(-&$JTt5PMg+y zLR4XeorAGPcA$G_JKERg5nJ~XnM}kI8c%6N*k4lu@W=FjhZcz(4|RG%1+;sdTDk0CoWpV^2S9H#uB25^m^frR%l)oie}`3`V>84 zV7!u=AKD+i=pJvAu3RBaB^@$Et8I+z-ok2>g0*mQ-VnvhgsLB&pqytqe^ZzbM_(Q< zOh9m&%-UamdHN2@4gmK=u&VF#M9ZNDvzAKKtDp;A`dcj?$xhh(8*2oM{)J}}aD@1{ zoDXuul8cT(sbu(&q@Q!ak{$I$>$TF3$Z1q%QXDmp^S3f8#v78kSeBu$HDuYlRw;Um z0%ckSpfu9hzGJDNas`o6xKuIKI|LVm?_dl`KcJk2Obfu)PJL}-PSBP5GD0anNmp-W zQ;~9P`<0~%$>wphO=c&aY+BBSl>&a0I+RY9a9cP>&ol?xYPAy(Ypm~WmY6wmH8NC5I&76_7b>~VMzoN)5;O=Rp<4{x_@+5gAe zSBABySoN=*HsF|-9sQP?(PB7;-2D8aCdiZ);@cmbML?V z<39KI%#%6ueVKEc6o?0t#CojqR)+2RZf!?}wiSNlJlTG)d7v4E zpgh3$dWmD-{RwO)5>g%JM%x2`dffJ3!luM^eI~zzaK6>n6XyI3n^~yfr-PS#>W6~I zip5Fi8XV-4`eCyu4shn=71q$x%Wf8pt=^w|>F_)LliptSY6;oE`+7k(UymG1SWmL= zsW>0Xs-lqYv9drji_?R_IkF+<8!D6g#dq?TfJ zF*kl8^YSMqJw)q2i1NPe<_rXWlA1q?+_a#!8^NS#P>MGE`YU1=%j{DwngY@nte(oB<5XtpJ=&vS;Pds(h;;{h z`L9xEb9$$VnAuwpkepVJ&8xLU|9_r%b=HqB8vUX+ z?T6CYs6Ul!l{LmAh;AOe#`F)BD#u!!2Go6YMea1f`bf*dM(=jw38str5^Q(8_WnU007zhON=x!@I`Hp8Uofq)6?Hp7#KlJ7Z(9w0b9U0k)Jvv%cTK9XcF4(jj%`hQjc zWsUv6WHbKn@-6;fp5%!Kg`YF4=MVmyQh9+0lH_Lj4M|RxFfsX&i3&Xl4i5hB6+lmX zinMN+wU>~Ttajf~+Z@j94Sx0Je-5WUfvsa>W36sZH_rE_<2(=MMhg^4|7#0T3-omz z&J5Nr)A`&ROAZk6j-blPdcoNw|7YdCw!KYV#cl|%k@vmP}1{_^nYBl z=gT>W%l3_h8MS(i_5C%*&6z8~^FxUC^9YD`@2^t)k`<|P*7nm;U z!&RHc20GX|+c$0vO)7L;PP6FEk(d`beF9bKkavaMt=0xn^j1jYlWhI6)gu0!gt2B) zu|J0xEoW#>weDryK~>91E?*^X$Si;VCVlzJcy;b8d6{li*7yp&nIx9Zlck@;r_s6-8(Pwm#*Y~b_07<+X_? zg+Dgl`-#yip9C4KOP)MECxYz>r4)}_0o4aYaNkMSg&V+lo+X{oGiW<*Y**VYB+uN1 z5&O|~4fB%OtfFVuRr`I&ySJkgxqJ<}EHgPh_Ziah`@WZOl1@7uBrP1SXq9^&`ib3f ze)#7>VbiW-XHd|)>p0cNSUTR-*I~r6Fe6Mloz;gCPeNmzN68>0G0#WEc6-x-z;b`6$Q9LhvVtGf+XXTHaj8T;)S|3&MMDPyE(bnXo3yz*lbWf+1ZPW-y7}q-Zy=L_U-tO`T9so=5+gG z@KI0nkAj~c$YJc34)*k(gYclQHTj>fo8Oi>*#EelP%nd}O0{${n=vF1OndgEGRxP; zWdd(~U%N;FJwbvy(|oR;R^(W3r>gG$JfHG%lG$n8<2p=?_|SYU)Rpa*a&b4~Qh@%> z-$PIl3p(n!&hFU-TE0&^yPk9Bb8I07(SQBqW zu%h{EXTRP+tNl16=Q=sEEHaoXYHrberRWJU~#BAPYfu?UxZQ zgWK2ZY20?4X(^l;Tpz9{7U!8!>~Lv8>O_d^ecYPA^R~9 zk2Ih|R?e*nGo$a)u(K!RXQGU${Ap+k*)TzlCg@bbRTIP!j&VGWnv|{5o>vEVhQ_LqbT1-AgpK zpX0TXHb@5nQWQ4|u~+WIbp?mh)%!G0nn~?r{iPiVnZb7s<;XFP;PW}E$I~z%K=pGY zG>B=lbcdE!kS8}Lxa!k6&a~a{DBjE3kHKN?pCUFteQ5=a@2)s)b2;L`BqZ+nB;A<9 zbpHI{y;v<Wr-fP$zDS|L~=QIy@SfXdg{OFZ_i)FQ!`VmJ*!@;`_~3Ep(U1ms>oyVFys=tf zLaHl2fNWbod|K`*=OS31B!Yp-k#NzNT`JS_jqVwaB&4pGMFs84+0MP0?(MK($M2Ui z9$k^27JJe;jPvDYr`(Y#3f2;2vL#3N(-PnChN;)bJwG;hzXB&8c9y-HhO&UWk&mFl z(S_r;iv^UXL1wpxClwO4@AE8fU*LTq0sdV7!KP*m|dVJ9C0Wp-AI>p*Z8QCa5 zTC<{&YBLH61${DAnCpsHX8BXU_I#?_qUphbvl}0uYAenepg}quG?2*h&vUuf`;){O z*VveWYmOovo#w{-zL*F6^$xx0ucQIZ+bYQJL^4=#1tLg({?KkFv8;V?ZcJUKdXcCi z`=Uxfd&4R|+qM@xu4MOmq^XpaVpse(w3pNV<`t_&BIHAkv%2|ruiJ<(^|vPv%Sl~5 z@9E+!Dk`AACiE<~tJsp?BshvM>bE32sM>v1A9t43Wn#*ya&pM9;AcC0Q+%2v`*3eB zPv@swTB03{G?)`sn_&ZcF)-qqdRCGv4GzgA)?4Q3ND7BL*LzQy!D^<>U}-PBrz8uD zFP08Ha$G+r3L6w-z$s$HZ2Rj>0E~Iz`8%jLIKT7U z#E{DX+x+-JHO1(C4Bl|3E^=Gz&t0Yl0Vf~J>W`Ty zkPDGt^>cjQv$+!IU)|S2oCi3I6KHRub4L8AX@$y6;KL!DfrKK)OiJ^Ya@-)3BwjrH z{CYS09c-I84JH;y`VYyv)X&BUU68;IHeu~dT_)90pyZ(7xN!Stf7{{H7+|53h5BAs zz5(5?f|QL{;ehtsbiP`CQbH=Vr9jO+Rr`Qvsy*}4zGqnYN*TvQYPMX-^@&nKB5HBD zDncge6@oUUWG-s4snqAXR&MG)-AqvvDmCYJ;2kKH3MmtQ(>Lo;n`X9@M%LS;99qkij;2{MDRXmICun%=| zvny_cLc*Ks&wX=g%k>#Yv9zw*UfQZ(RC({3YS~>b8e2KApJZyTBE}03_tSW})Ok6V z7snh&TkrXDbl-+|aa@JthiT5OdQI2J-^qq=3Dd)lUS%DS0@_)d+}+lBImbR&*zHEC?(W=ztM^ohU4vtBqlj6rEB^{1LA)|>?B?JDPJ z?epflJ7TAVEgfIUne21EaihGtNOR8$)@mJtXZyg2+he66V2U%Z(KVx zz;U=n`=8FK0>!&g$k`5H*W$12}usm-53yQQK{;*v19bMMdOdkN`)(4gyZ z`}5~Y#hPA@xIr+hy}Js?j%v`IAGQTIvB?LDRA~TQ?r$@(7ipOn0|&ob;7)nEVPLk) zTdSAwh!-BN<`}$HT$g!|f?_nN#tg~kh%Ec)VqDnQ_oirV-xGKsz{)pjwxWFC<*>b=0g zW0iukjQ&;!p!J!Gsjrd>aF|+e-7L|zWvHDFn8EBp!fW<2w@1OGGt~Oa5H+0Izo{kw z54}Qam9lgSi#|Siz4Ir)j^A}(Fp%25ygy=QjlE{;m@d``yAwjtHCd0JArcre!xMrz zzE!nR64CdvnFI#9JtP_~Psc^0&ws}Sl<+Sccr_h9dDuI9p+D1hNs@+_SXE#Ta$k8} zS27c3v$QqKTk&erC@`+$Rbato(M|N+uA)jEqXceFf+$Rv%k`zXG?sbQv>8!(8)IN{ zR5tMMH~LpKDCL`{y*{-=OGLmlhs(;CswZNptN$I%N$f}eI7+LdvU&qS*tZNI1MES_ zbcAclIF^Q&Q&%F-a5piW?T}R;q-fT${5jgVDSm?iQR{ST8=KX-VnpeuKe0|Q9J(WV z#)#ha#IDWSa4r(q*4^5c0UsQFW;qLIYDnOwm(P|i?O^dta zrz0rm4|Js!&mRV{&JQJoD*&)`B^g6-omXB86;_x%jdUwyH+?4*id!Rh3l$lkc6nUI zygV`*ETb}telL`um=+WA(qQdq`AQ*9MQP|HiXrV~FKaJG3cJBeb0?IW1$ZrW+a z5m{FKGn~<+g3(N+p4HQQx@NNecFI({bE4QBq(glPxg?zK{GDls76Z?GSVa%~CpB=q3?%BRuo6w`_+5NyPvV_u}maQLd5O z17MqWI&ea}E!Cp$H}y;+PV*vSnl9zed?S{)TUQa)mpS2|2|Guy&^f1Z+)QGLbERX< zil$AhDussn`%q0&@EzmmfJ2qvkdwGi|f9V z4$s)7=no?)%sHADgDm^Tf>Hh7T1oiqsH2oQ^3V42cP1?6oUFjZD199u4oU99CAr!a zwudY0nynVVKF=47p%OL8d|=w;g!rPRc-di>P6qVlW{E?06GzK0_9R4ZEu4th%zXSl zAmF^;wPO#+e@dox0^nzO#Z>Gopl(gCzLm5-;~31E6OtU_iEu4v)r+Ol1G#Iny0 zL?~toxI356Lp#66op;Iph{Wf4*BJFTHr4jM7Lkl@t~7R9AS_r@s1=j=S=mef$a$o6 z7gD_T{-FDwZGP6{5F=BXJEsG9q;j6gJV6Re#uN$&=e=ERGe?JM@2?p|$8=es17cO4 zk2qScI5UZlOfx@jmCg4u0cK{put9PkMWwN;y)Fg4kWfyV(j$c7$aj{LuI9TyY%yC@ z<_NUwDb+ewPiZ=>JwG6qsP1qck`pI3@}?O}_@eVK!Ai{TRBGy9%)}vsQR#~XWR#+( zv>a{M&*Mnt)SKsDd(LDXatZHAv+0o2C*oCBZBILG^VzerOi2*%lUw&84 zprdXBya`?nUm?-|j$L52^vpg+nL1u;=5g|w*%VMthYHHqLKNy#5(d{`|Nw)0N+N2dL-uQbx&@mFk=y_+>BfYL90 z@YlxK4Y;J>AkAJcE~MOQE_7ATnJ3cn5ntaJE^{*bahkVQmVmH$iMuA0MUN9C*QPY6 zgNw;jz_`DKu2wjxfcq^>_S{hM$P971BJbmUo)Cr#QBs|Ag<2ekJlaeD{pC%k=Y^KA~&he(*uG#>0JuLbp*H2j>EN~F~$hpL$}b5$$cGYBq0QxFrF+I$=8>^a#&pU9 zRC}W^LR3QbNeejiINwU5FTjU@A5$a5XfCdc1iSAjKNy85mK?mcyVcI~H+q2(zGGDu zeZ)Xs>Gjvx;UNyM2QC}M9=8g{SATwS-x-hT87@`b{%Ih5Wx;M#&KZLV%cWC{*5|%* zj@k?@i%I$%$rK%8F1~Xa@Yx6`Ol2uNJgzof304A)eSRZ#1$K$Z?~2;b9)o;8+FHHY z%63DNo+x(WDm2^E%r>RAJEi71u;8v%bA}iK6bt!`HuE{=R02jd0cBF}g4_uf2Z&b7 zrSlLXSAvN33b|fF27xu#6`7`;!?cSx?T9yc`j!5tRQYYUswX>6Hq&NkEQff*L;!2r zZb?_2)x0mC2^o}+7fLzIuN}$GF7J{Ocbm+8!gbNm`ukNSUfF}B+Jck)52z>x&+_Jx zlZ6lv9Lvn`WUINkf=vvbkd{Uf7|8(j4o@@kjde9*m_01dmcx@MLSTVqS{qA^G;h@f zvc1o7v+>1*wQZh@H}=Yab(larB1Rl?>h-B@;vU&Pn}BT3URj~{>=?gjUCgR8KN=f% zmMo<(9?t+12uyo zZWA2by}FC_8RrjiJFHt%S7L#P@hjwYc$^>kmVr!;K^SeS+qK$1bspAZm_)6?pPbaO zyNg0^c4ghji=|j)f5v`&JyrT3p4VE&v^82v=f$veoqKJ)r`_(>cf^=I7F^g^CLI$I z69xqPqSYnPDNS9XOnmb%STI3hWv|Lng%&d^CQr63c^u2xO*@Eab%dp2J7}ocyF*#Q z^8Wa+btaHl6*H$S+4^u1jK-mfqNeD;i0ZcaI0C-b0rBB!*YyGn$s-?D2V+2I5_yIT zTcY=KepnHkB86Wfm^%IP709HuDmW%fbVIe1cp}|BIf>~c#4!ES9fPZSd9M_ap{HpS zOzJ%1w}wwS?c{v9$=)z&S49zmg^ifYKaSC&*;%sE{ue@0Y-_OxNK(a-G0~;+yddr8 zW_-8zu+cZD{Uw~=Gfmz8M{jOXJ-P%PCL zfQ^^sm;NX&2`1PZ-dDk;mg6RV%&-#k;S{6J2)X9Lx-G&|WX3U9`uiIR?wk!XqG8zj z(bT-hxc*%tv1oRzy8JN`$4V*mZ)a7X(1lQ z8rNN0$!Xh)57t}lsxw=x1)ZLPY|W3tQ>oR3-y-NkSV;Z;+$TsEiEd)eKj-2!T<6+~K+6W|&ak;nY6P(1@OHx0mniXR!R0ylgbSPvk-kp0+Bl z=AkbJ1lF@s{r!jZ%=*m2r6p!=I1tzPb0Nd{`OnH7eoqE{8udI@+<@xR?K>kT@Dxe+ z{U?T#2&t1{S*<$O&*hEnIkPRa6=9h&Q96j0&u_1HBVJ<(ykp|pMrqo(3&1N(uP+u6 z4e}8dMWiH%xWdWKW}o#G--!(0;6MD7Icbw?Ytxi#qpRgMG%xzE(=i}0A@#LV=2k;1 zF2C`8TABOO*)>#Q$2T5y8-nxp=*+d=hwOFSZ8@ zF=2vwo^A3ue#%vz`#34xHJ(i|vCkQum>ak9u^XQhU(r4|&x7Mt-_Fse=P8SEjIcd5 z(5Y$!dQgsX$u;}uNvk(AtO1u(AMzK~c)0BmB4=2$=DX~nv7~?6Nb-y z4ptwnyhx_(@_W+9?b{RNZIqU5*PXx=lgMQqq(DQXZ!9z;BRZ4WB*0l-=61pWj!CiD#LdLp(+Pb)Aq$vP=!$UIj^*!(5o=52y?bAN2?tKx@24vm3RuV5@G zv$Ytma8)=Kd#>NoDz}qxhU9PNC48CT1wn?O*w+~cQN^Mc@F89SJcKaxrmq1O$P6(+ixeSb3?7ndj&Q8cBH`$aUZ(Mrtq@2 zy6&@+dG3EL2T+?SO3wguN%KW*2VWn(G@IZO4ddgxI?wOuMETKrhYy?8tDIUrXy93Lp%3Gf({E1hgP#)w``Kk#fr+P z+)HX{JtS7BH`ZK^3EXS*ti~`P3p6Sn_Oa50CsT7AuLq29eEkZ1T$0{Tco$<0gB(mw zc0J1U>mh7@u`cXGA(}6z)@!K2QAj#)5Lr)$HM-|CwiFSgbS4;IH{pZi3>)?CG-vr| zOkB&jghmt9c2>3ML`u;?QYhhOLW2+{@1col3ba_Wis>7NjPR^_SCiX5*=z)wvbIT+ zKDV*S^sj;m?-qg>zE^8@YH#E#ooy6@1^@$poX!+07@(Wit47KGaJr}w3EZ8_N{-*s z=&Cm-l{TW@!1*8=@CyunF;$6$asT68SnF9gv41N3-3|01qv!0ZT4+Eal4bXDs8Da5 zHF&@@!S@xbnRnQ(zt%B+`|WB#Hqie|mMS`bB3P!ZGJHEMa?GvA1v|4l)}2nNk#qf9 zO;D zZWSgFk@RB8UC-f|F&>RC@IA$uc76q&C49q4aKFg5Jd@DZ-&0m_j9 z>ggSlXGvG1{siw%fGgnh{6TYT<3pekiwZQ`??BhiQ8HR@Qg8wCc*(H5Kmf=KU(C`D zUnEM2BryN0^gUeu&hZ6_-((~cm7Rb>*oHmPXJRi$0zyi5@p;pEe(DTRo?ySTL`}1s zsvuvvG(4AA;cL{6?l#DF>izJTH?dNEsv#RoqPMG{h#mN@O*&pp>Leg73yI$L_JZtNXpiVA!QY`hCA@X85U0ZCE3*(h*z{rakpVEmcIQ@JRFuXIZk)SH27)!qx-<3wzh@eCtUe%Qf1 z_TROw)Rolt++{FRS4c)I4V?o`+Xb^5j8k)#_34TxS~xFuCv%M!ZzpzyVpirIn?T@l zUEpv(5pF<%MAOG;DMN;1!-tgx1A~a?M(8@eqiCjn8|#Kpr&}kGe-yLA9x~!mC`slc zGogERoq#qM<>5~Yq6d; zYY(%cXFh4P18+@NDksIwe`HZ(H=E@Xv9w6EB34apkBUGd#krrjlV2rhRlDJfi!sSZ z*_!LH_OgiK*Ti$y2X3qh8=uNYeV?$=f%K~%(l4aA*lQ>-t=%BQh@nwkR7pAO zsl%3^d1uEUaQv6P9^X%+i}%Tn8gYU=r7HXNU+S_Opx+vFs4Ir@HpD}BcyIplll)L9 zkSqDa(Zb~M$XXZlTs}8mhdU7&b$K(A6C0YaG z(S@Y%%E_RK9sY{UWWCd&_|p2{55(Ck=^+-ra@_rwY*>LXR`Sddi~4ZCDBWQzN=wy6 zLGHUI0Dgr~1XrZB=iPFHHHCgFHCqr#SE5dySgF1lqT0hm2;8ocumXw+p}%np7$uR? zsOV}OE41Y;R&0JQ$@pYWN-yiz)eA90o_{^Jn~J`C(Yn1D^zn_S(Yl&N$$2B>aYSz% zQcC+R6@qVCboi9SUqe>|-y3v4SW5ZIupeRh^8oKf}fN)+L;AV5{Kuq zM5Oy8I`#lRz{%2;yYq0T$?p&+M$J3iw)E=kETh6{ zQ*i{jS6vVLeEq*Baar0EfA52k<0YpgM3R0IXMcNj9a`1uFr3&V{H_&J+AZd{>3>NH zEXV``jyrMuZ@=IMIxL2_Tue4=n6*t?+*XQwKFv3s2!hdFWR|su!6(P%rpE3R>%R-{ z^~ig%S`BjtjjEz~xKgxpW+)lg=h$}pkR{dnBwmjsJp1h@T~+d+KA}&9;Hfq}2kT7#RH&8w9EvSz}`E1|LN!7)aRhxQZSag6A#oz>^ zU07d##;0F$ewU$ck|FZ=D2*DgGao+PiwaeW17*}DfF~Io0l6%EISaiHx@*Z%P4kIm zY>Ntdn??oq8lgQ%cQap;_bAlX9A>>V3V-|7sBHDp>u*&<{(z=dH*Q4@NLlmmlo@<7 z{js#wSAI2{YP6%PNcTdqpTs??9LlD8I7?j(NZst8T_AXO8o%G(roYEp?yK4v*F9Wo zIc_h#?$qPI%r4!xYQr)|K`WLLnTZr$;U|)GaXYXX^BCMw;crCEk$(bqaj{E0#)>%| zM}?OiN6BhKR^SsGz0ccp=*&L+rotX@UWM5SCNZ}u%zIE7RNXrJ>v_FjXX^c9K5775 zA{w6M`*@gE4P~Lb!?n)0nY4aCn2$vVHY77~JecFY&7({5&yqkrvE%*~V0mup8Sbl8 zi#N5UQgN&>MJr-@2TbmiolFd{Z|K5P|_Q(YH;TA(Us zSn!T9J&p(`qFR3bepG&zFex-82!Uw zeRveiX$~?o{xW{6TtmP?6{?sh{qasp>*t&s8ih{@ z>!KIB8=b5O9$N?oJj30e9Y-0^o@X&mM>eF;$@u)tm}pr4+j0N-+E8%n#K;A~+s!a% zJlq6!}?wbtzg9bROX~1JjZiTiQv6|aF+JkLR_hu(`;?a(GanroBMlGw3Phg zz9`74@@Xr@9S+{GZNV%Jcw==xuq;j2-y@okOcDn#RF=CVd_k;>Hr;3r0^8@CXlmBhKwA1j>H?zzE%mk0PSoO*qDw$(FwO7+5c0@|6U z?ul!%qEi{0+rx5UJ?ikHP_`qzjjRC0!1PyRuDsd4AL`Vw5zYdLQi~p(QxrHDgU|Hzw8Z7POK8K18$0wKIq= zXKs3x+cXp=y!TB!&VTEpx0-k5s|=Aiq+E_jTA4pG$fj~wk&&lePsCb=a~?Z{g(?V8 z<+7!9E;_MU!Rm5RWwJ-gbzr)ndfO~9m6ecxxF}b0P25EObabw_e4WItg-FLKl5m)^ z(X6I2g?9ScruJj>SY_a#vTJ*!T%AmGaUjbJS=?V*Cs(^Yl;Loehgf*69?5W7nxOy&(>;A^PK#fpEw3CEk$hlEU1tRcr^QM>TD&E_zvRh^cy95G~lrmF}P1 zs8;J!YXI5-#_|`nT|PV%U;P#hG%TME{5B@Mt$eiOtRgU$_ zdd?HKv=)_;)8gCQ<27;H`XcF@0j-|71VOB+MV3?lUEkh10t&r%+S;ghbtn>EYxPrf zyNvmJR!3bOLw`P%LTtVB*hnn(P6ChSLd~nOH#FPS=hX{kf+D5a(ZcEip>>j|@GSGP z!-aTToTomMt8rj#ZH*0EiHK%`XD4N9UG1a(Pf!8g0amlz;5NE_?9q znKC>*t|MjeR6b2BncM$U>8Rff-L&jQ5kJ&&xcH)btMzOZ1w#+f*Mn+F>d}sz#o9+` zJ&OUZTa&o%EVlxbaDAvKs9d5L$|jyxRkEi{(04}8#*6MI%Bg<-3$ud5_VZU|(ba=1 zBm?ry_;fOjoWzd?Y*HNM+p5uEt%QHWSy~bvt8L3U*84dGgB20FNK*w_JyJ#bE0+gn zrQ=cO2v`C;McF@-qa?%E!<5 z4qeD1E8e!|rpZBahO9J$)g}@A!XqW6E2aUv8`0$m;-%HSQ{;&ql3k*iu*S5yUP1Ox`IsV?0vzgT)K#+DRiRmg&p0(T<;YbTiJb}Er+ z$UcUEiocvTZoU?bd)D->JBw`|HoyZU_m$tRToJ)jnIuPF)A?KtPt&$T*XL9BbeuIp z8ZmS>jxGm~idMB>lmxVL#eQeDj6K4fytif>eV!h0yssv|+|SuCMJaVB6rlwY(O{a& zXH0JpM{WeB;N%^_Q?3XDQKDv_X$!c^E5mGNi6p5r2}XK+7svPCm|GE`P*N4Y{b$e1 zsJHn%3uF@z-Xh9Ir$NWrmZ*$yLBM`=r4IUawMV_pTA0--(C_BOLap{;ZyY1xp zsrs!VkmhB!+E81RzdinqE4k~{Ln#Ewt#cdrtfiu9gw9`}u?an8!{CocE(a)a>~OdD zAAvCR?5{|x<{wcqn9VJ5DQyKc2L?qLv>r4HtgHK}+ zwhi2R$+w2L7`IuYlSQ&--rQU-maFY(Hk%>TQ533->a0w-;957Ot7P-J7E<9AWULf;5VKotB*&0NG{Dl} zd3mo~J&vTbupqq@K{VA&pA8nPmG0aA92_wwVN_{E;2#B)x%SFp1g;vVapGlO*|y$# z7TDy{pOeg{ak3PuFia!P$>B-gF3-y{mkG3R%M&EfC`=WPnCw*%_dJ3N$~{fwl&h5b zWIcIq_9x(xmW#rs^s?;lxI^8c4RzjfSQXEGPeYgH7itX5J=TT3n4KvUE|XCNN(y9|w?Mo@MiBFn4%zwe$hMx>&12x!klf-s(_v za>9;ctp{PY*K$FI#nbErHso%{c}vRoQ*-aK&bmHb5%ev5#C=o8c=yChBOc>av{pyV zN!YyivcM*3v(9loVpdwbsiF%mQV3Tb_{E`Urm{#!|Cq^_7^wJO_R+y+$^T_k+zsw> z@^5RcM|QJgk)~jQ;Y{Cs`?2`1K)xE_Cp7PZH};gG-|9=_+(sevTd~&cLwo(pk86PT zU9JRAQoz)k{R|pQZaaF*x*U(eO>VNb)NY1cnY6%+LwH6pjqhlkskq?z&fs=Hn67{| z{rnVaxTRL6uhnFCuO~nu{Yz7m%m^j3lHl7PsF2K4RCXD7d1zN(S7t%~pr0Rj&o69> z(V5AcUkvHgYec=Tvf2$Ihmv(XlyI zd9T-*mp*G*$&ri9t5dEShHG?}MC8lvsLVp*Sx&iCi*D2Ed3=W0eSQE8ERM^&bH{b; zg|_PD&SXx@J0B^gU&3`4os00L#7mr5X1=6&G(up*6}ve-I#R>Az}zbYto`of76^P^L_9Vg;Aqi~!@*%jFX6=W|^qX~G*juYJ+ zWNIKB8b}-(R1c?FO2Pat6a&@LcnMYCngi@Ny_byF)AEo;r9J+uwo~CQ<@?0+GbdXB zyb^dDtf{np*r<~+ITnK@TWX}R$~2xANTj69z(zwTed)E^O(%eK&2Lah17&>C0(epP z&Zgy+k(70QXc`VBd&l{Dl}8Q!HX za=c9P4WIFx7MF=YX?8j?Uj3BYYsv(L0QeZ_MT}>K7vm5rFc5KismI0 z6i+35&zDXcOSEJ8Wrr_gBnJldjP{lwq9IP!JzL7$xrpF3gS3h4-f|!3t)GE`+CKbw z(PWQpp?B3b*)#I;9^OmLj0fBA(tJypo)GT_xil$C-o|7%;R*@g8Lm3wIvi$boumx< z3~D=)*7zqKaMfEDLc7qI>d~*z ze30Eu1gBn1Jl_!$Fp^`;9CS$YO)?s(5%%<3(n(8YuZGfm7|T+NE8{a*S~)@`GMxm5 zr8!$(WX#``^1DP7Iyz;r@5~?S_Sz#Y>VIA@juYnN$dWO;Jk4`iz%EjSs|VRrw`Q`a zw!|jq)!eS{uu(V-kS)IcB(Sz_w4(_yD^!2oZxcGtmuS?c(iJdnGIf=$IQKi1oVXE* z;oW<)9y_DHvB06^2vxTCf|slLXp7(*ldlEpZ?xUB1$?^HSC`oKYxjV@VVwEu->qk0v+SZ$BL5H>M z1;n0K(%q6xACm_9r2MUG%?K$Uq;4nW$@uE8XC@YB1 zAD_P@YccJZyKb_Vmw(~h)NH9)QAC7r&y)MyZ_QK*yL;;7I*fT$ zOZUugfNFD+awJ`;lt25hi}8*XF6+lYZzmXXv^8^n+nU8eiAWtzRFiojc$9ut30B_!3FUu&__f+$j@oD0kP}{=;SvrN~q2*@k852GG~I@Ar!>6Jo6IKj zuHxR2=8is749)buhciH^IwlK$qb5OO2dScXG8F zc1^`b*_%{=oMYKGQk4GKWoBk^#rExFvhky_2g-(X|GsmMI=-PsaoXgeIW7On@$}d8 z#8`|Z&fDv=QMiEb5zD4&0nqeX1=j+vPL&|a zD)FJgqEOW?)&ZWOI7~D=574X=F)ST2aVq%7t5Y zepxzOSbQmw^k=_`j1dUQ3db^FS*)iuQ^nWJQ@)iS=#2_ts-GX|qkL zP~So8=9zh!pDYT`x+3yaeRS+~+eaGy%ac8fj6hf7)>r2Wp9Mw|eq%m6XeuQG7=O(c z|32nyldiAQELn>u-b0&+hsXIohL)Z_{)1;XLm!g1zCaU``eHggMQV(m&UXw0Q&uXP z9@p9{d{eS4X80F9^%P?-Z85iiJ#YU>1ZMUcVT4-jsK_2uP!cU-Kfp}9wdQk(pR7BDDxf|2?LdmZj*O6^W7f=Q zd^o5GyH}Kv!K1XC)*OiUY^r^`o=%&>D?kqG4+twqEPjJF{r7u^}WS<$UzhDaRezFeD`bMjNy-ssgO-lrrhcWLAOG;vh!E_MC{+Zay!;- z@CXd8JQEwl_sL$piIYD&jPHDz5$kNC!WPI&;@x$O;gj7bet6_JZa>MHn9IwRXX4RH ze`IC+JWmIY%JXe!Y2aX?PxksOvC(pOno<5?SuI)kJK%UucdroOE&v)Uc z`!~X8L$w69oL{S@74sI~t1zN0F152^uWHRHfhBbyg&3=7(rJjckxxb;)IajMM;nPR z_w!5_e0(|o4v<;x@8frf)=Q#L^nKIP#%my3bRLVk&Fzj*>)km}_~Kl>^})upWuMD! zoE-1jOG6_iB+lN)A2-U$OqxjudB18N9|rNDcQC)VCSy6z?ioGdw3exqt)Y_)FPcS* zxuNZM@8d)sU)~Jz6dV*-<09zCfd7lKw+d@(Yuj*F4QVM9XmNL^xI=M*yGwC`yGtn) z2<|S$i%W1zf#3v+J3&KnciUO(+y6e_@7X-aHIvLS$9VO*DQ*Ty5Yv9q9W`B0u!?Y> z2Cc!_`FAjX&-YY|tc)j1z&Z}s-x*It^jBYKzzaiOkls~1d_Lzm z$?2$8=;VyEdF5T0M+pF&H%NVWbGCoWAmUD+AJ)cZDMfv_SlS8S-KItOUbNWQco-IbYR;R-4|U(^^np&{4V zlaJ~uBowO^K!P>59#z^nY**g*Y(aiBb=9|90zF z?LteJw3SX#ZBIJ#K$w({EVBf(@oZIG>(`ykGh!ZQ!RBp?8It!My6pad5L{QayX6tp z@wW}1{beddi5IK@-2`<>GcjF7ckHmT1z!wm6t95_BbVXizfz?f^eq-jGz$%pT|V%w zk>(NAf&u;x6s)iAkK;E*sv?mM@L-k9_l44-;H3d16-D4c_DX<{qu_VA|M?`}$0Nbi z?vU`$O)ivggN$-ih-=mhE^$!tJWIFf^UfB|O-}6M5~5cEUzwP{Hl;7&Dx9=Vu9(cy zUXkIl{lewT!>Tl~VXQb$^5xgrwO$-jM6e8<$B)fy_InkTA#ygj%HRJ{A0Y2ZKV-J<^@AQF09Az&dxBF{z{nP?85NC&~BQ|QmCWmE9#JNb{5KnK0pygXGD~}Sj z%e!P&MwbuX8J$u06Q?8JKlR2b>Zzn58+Jo$cl`sB7gg$J5gKzY^ znv`2ynn;0Yx)sHnH zG>=qVt4yKS^nTt!3z!{WoAYE6B;Tn2Dg(~~f1)GSl)OXyX*^TSLn&GQ_4?GVVI@u; z-oZe*MK}h-==`#1SDH=JS5HUt9=_Y#i@&Y@*B)QHK73*s%GE;OxK0*-R3N&`K3;foqX^+3_S+KrHr zg+6YrjFCC~Xyrgm@O=#t$iO_#mCeho=dYrdma4vn7{~;3`&2yMp+Ul7nTT+1 zaatByrf2U&xiI}pNL+G*>=l1(t`%C$J6U;TOsHTCNzMJ3ff&XqCL85NokernNafjx zx;Fm3W;}aB6DO*ljkzDtnu`5<+kJbyp(Z@ zibp(~?^6zQr{G}wBLOc&j@N3&?Rcx(*oP*&4`K*ASj45Z)K&3%tssp9K7Cj~&)N%8 zLT|$Zyix!R{%f}$+;^YPjy4VJcFnd<25kga}4L8S|cZ6Rtum?yes z2~wjdwD*g-1iBZ;s(^YwkxIh`fI-pzVdUa^0x*}n<_9UefWE=In@m?2p4|CTf5_mb zu0vBYX`i~r$m0CH6^+L^PrZ`iiZFP<&iw{;8`sJw>bkmwr{l;K2SmNGglrX|jwieA zeCVu6gSAY2lrC6u?}AFy?S5)+=nO-Ir0Hx?mI9stwCTpZC$2%M%MpE09%Y+?)|Z7m6WQWcB|ql>AlW}(f8PFi z&w_=Agj5YaCXh>U=Y5>O0G1^}c)m3%nUr)6AOYXzjySs_@yG9vFbq60_r0R5?3jQh zZZ}RufGYf~&BiMVQP7L*dCu@|X@!l(N20*p=V%*D3i}<3z`?oH1mbb|Ay;WIb;uO8 znAzaBs|%q->P%FKPAX=V6_`$2Dw|Fe3;a`DQa^Aa7RdJ`Fd=-mAK6ePkV&hykZCiv z!EYzXc)B13E!}=95O5JP2=^?UpAykUDr0z;NJ2~fNqj;cjWFD^Ta@>tp`~=03Tpz_ z{NWakNeRrEs2y2$Udu+FeD=xa*GkwhI@-)fe&JGbSl&a1sq6+?j2N`KyR%HK7I%ux zaKpb6iLSUTG5N6=eaVHJ^oT@?rayXP;kW1Q-ZHm4tv30&e2rakINzQR&^?%i1`gAq zFik8=Ag9cmxk&2`iv*y}L7!JW-2bzudmnzO^UU`aLgp^HI!IY|&X_A%G-0 z^rQ??ua_Z0e1&5|oRU&C4!d3a%E~#i;nyE4Tn2|;cb-M9Ld&O>-Q|<1Wj3wjA~N3 zMAAyVSq)@f=^?fr-}G}$7YAw+w}Deg;dm*Gon;^%_M9tT#Y~Qhl0TVQ;A2?BO~E5M z4(y0WrjGwC*2cIBgeXCBu&nB6d(%3T49>y%A97KnmsLj?<$By*2#=fsWXF9_1yTtW zZUksEqo(}EYNXGd4z&wf`*se~%NMGo&fj2;A1R!dGJQVK9W&ZzB-KCLXg+T(s!!U5 z=C6~MUAvI>8-Kbnfk-SBKq-*S*D`x5$>Ge|18La?CnH{Z?E>`MzxFigV)DOj?6J+ z#l>&jw4>pBF%Nm^-`~CVn5P3lN?1gM#)tt=bHdN&$V}L^wR+8B@`JD7JIrtpw>s8K z<&wif_A_%BnR|N2_ieWU&hZMtZ3uDjT*pW#b3Q2~(Q!ObcIj$lp;F2XiX%+MEOEcO zKW~M{k?I`$NG-40Ec1@2A#XTQ`aE683)5g+3dd!WCXm_h1Tb;uPQ(j(Q$fd3V4%?z zbVl4(1Bo>8<>d2JDY1TfIlU_yDQY+FOf#Q%V-N*&VvraJHdwH9izn$y`2q2lSZV9D z*>6lNJ}<5Ps{771m8^S>a0e}6vM7CSV&@X4!I4wRKp)vkhJu=I1m=wqv+paqXB(d% z8+2NnDBiQb0v7l%_r6WZ_bJY2i5SF%$?8osF}^pc8X$1+L5e){l*>|MPi)o*fpEmL z7`r;yl7deyMGNGkhA`4=vp>0oaV&s8ed@{^+n{ci+rsNEEty&C|1l(B1O456Pb9X(ZHon07%X>W<5Tah zW-(PUykaQg+^PU9!OuUM({vmpvy$+R5Dd%vvPt;B>pd~AnjC20=*mc)@FxV)=rBtqkwOAzuo_`FRU-5sj|LUcjzCNyGK3fZHmi+bf#J_fHvX%bM=M>t^4~BSY1gj$tB4lygYKco8|LeRyQvTWMnTKtD>p{zj*V8}q+9dg0x_!!G8(Y0#ZldNZ?Ooi`kLIi4R;hZb zG>+O0osY@FXChB8RfN^Ts)^ZLR?Dxxs8KlzQAbYy)Y%_T{CpJ+ut!L3{qV*=X#)H(ZE z8G_^EJrXa;4o?|Ye+clAP}$Hb84v;S%I@7ZZFEnxj5Pv3cPKw$Wpb`3f>agoEZ$)I z2fkP_t{9A`E#)sy6(}m#*gr<%{14Kq-d7pcpEdJ_DyL-87x+??YqZQS zaw*t;>5MG|*I1Vsu;)4D~7l# z%l>OSK{4SH+%<_oMrD{dg_04`N;IMZ(n~YPS6(c5>WV`Io7CvYY+j~Muz3{9LdprL(AU^FzEOXRJ}O$#1ND$@7PSs;FR^eK9&evN2QdF&pQ=pOA#!jR0DPMU-i-qLiV4H^8`h=pb zLurT_xmgy&7|e8ZX*ed(1#Ziab&;c%HU+)r5qx^w*#1k_ZxwJ(u{oeJwDFY>j6nlG z6o}MZXqHoC%%Y1ZoBAr=i%r8Pm|)A0#)f2a#Ug^u2#oiXG`hn?A0_@)F>Ey0ZFNML zCUNAZ|3Nb=jviXHe*W#q8YkpwP^nIjUMCeUgOg_8Pji)-xUtpVooMn|JW)p1`(xci zVyW6TurK?gf??5gyC69>yGv4K0KLBb;5p0>p8v=3vj_M8BcPqX%E zcB6@5O2rAOSu(5eR^V!DA(Po8Q{X4^oq2}mND*6sh&Gv}SbYZ`R!^bipy!_}d-t{# zuGV)s+^oFeH#BqPX3YxDMTiBn zU%F;>6IsnQO|+zFxaey_`hS)q)*n=CqrCZ+UMHq_>HdAXJ4<3kiKhB7HWX8xD+Il( zHhuL?1((?^FqYo>VUOtlK1Z4p6#FbOk(~&}a+Uxad!PG9aj>@;kwZ6 zSit1OEwNc$qM27hLWWG{)gN2sj*6-+quq>2%)n373mFzxB^#<(3Hq*Nc(8Uljm4;5 zPkPT$?aO$(u_ zqHb>A-~#2bgGrS%YatCO8jH74;%ZWK`n5w)#l9SBfoy}|G=86rBL8ESG>Od!KGw~G+!e<%7Fa+@- zMYt65=ZMY~o~yEx0{hGqsm$~wiSPo%qoQPKM7ht(JWttbx@N*@6X;096?Et8etE_e zeBFPeDCS7BwEf5UaIh5}!||lmlMP-NckXh{TG{qhUFhw~9NB+MEe9@%4+|2I=cbRa zS?x|gmRGxvl5scii+2$6tS>RpE1$8EsOt_#SF4!@@7RaBKD(1ykrcUsz*+R0RyIQq zZp{%C@ovobNY*PlOoq++YBq#q8Is*N(yqGSsB%*|K_f$g@v4+9`#D$F*$TSe+#f~h zQPj1>SCXDj7I5#l#h;;Dq{4xcvoXDHWWQP;bGYPHYkqCo6k8@fK=+Ap+J#+*waebq zNn*#f$_C;uwB-4|=W(gu-5#7BKqtgl)>TF+Zh~xV=G8vhi2*ElZ|@#GPxXPor1BpwD(iy(KY@Wv6XiA<&V^)g0ZGIK#ThOrwF*feFjf)EkcuyJu~nY4s3zF8^M}u+~|@Au516zJh+t?Qu`f zA9=92s1 zLOBMHrsN!=eAyEUBN$H67!dIM3dt5@1HS%{Yu}S?+ebhwf3hG+aw#zSLg3i%i1S4q z@90@)3-M0tmY=G^`Ja5r>~?G=sl?>{CW_mDiDh9EVAuir`u7Q1s%1(z$9EUf5c%0s z0L;a{mY+k~WM^ZW*bp#u|__pU;?C^35cP&U`f@VaOp;bbW@HKtTzOUH}6E8Q>G zFunvme8x$<#96-I=6^oe!mxVEJY%MtrRM%~sp+@xY{#(L5&MHV+wAul%B zia(?sj)bw1ar@jc>o+hB6^6C7C<*pxQALOerW4hO41inhkm-I#vG=J`&UBnH?%|8Z z`cie9f>}bJws+Fps?{EZhr=DZ)f1XNMDNH>ZH3Hv8w*_vs)$a3GIXdx-94~QT!NF< zU~4j%k&ymk%#&yafkW`Y(dDZYlh!1wR@3{1j|_rxP=95@XMu?Wb+1NNx`XO0`-78D zIhowW<3}_s21{xU^6cet%PJPy<*6l4;5+!6cBo~;Lpvz&%@SwJ&K*3`s^XP`E6HxV z(1b@1j_|B(LT>qyCTe|G05wV@>F&Cx+tE9B za<}|#QHIt!szOi7?Q@ohXm6p5q_3mG@3t;<@>F}3-52ekK~ErXuizG0T$Tc(EopKMouMI$`uh-r>5P+A*1BiL=J$Ft^cuuR+4h`>xX|qQld_l=k?x8wOp0l=EGRbpKm^7{ac2QGsA{5vRFS-t+P+QtyN12r zzcf5Y)0#PhZrQZS-cpDMeLivOe51WKs9gN9I}-O{Yp^FZF`Db?W4jK^ zS9`elS?AHk-}NDi8n)4uro30yjvIVU1U%tY=4b0rp@M}{awU<@8`pUbBkuiwy`l$7 zcO;`di9XYdtN5Y$BcE`u9eI#^zKYoTikHxaz!JX0WvF3RH!gem=;+-Z)zw<5sNaG&i@t>TUE~&ny1(C4%Y^D;tf2H!9M^K@ z?W>Txrjpfch1ZJAvOl^j2wQc!l5&{}^cMfDjx`+cg(hx}?G@<#7yM!6Mgi_z>qfS&IO5Tr5%Qmm8_|U06sb+Fm6U7O25bf;ZhEcN`rOxC7J}M zx{JURAi8Dj%2OrM#(1ROO+56FM5@dmMp(DY@T_$LF{F644)s@&7oH5;Ee(+_ zvQ9jzwY%J^)sr67ua(c#HfL$ZdyvTR!Vtc82oT1yO8DB4$d<{wy&>4-8JOme@`@JK z7fiVpR|UM{Dp^l_U@0LWnWLLHs?g@PuZ{0*`JADY9!(cbXY~2`@n)c4A(M&26G%@l z^YrC@ru(2XL&ho-Ds{m6vNW}1Vr{|OF>c25PJ_63O(;9CH(a%LN?x6}{oE&9&%5#h zKfj9XH8+m%HGUfgk^Bgc+9E>W{{o07y?+;%8~FqYYr(>mN`zICex6G(^}9v2l@pw! zeX|p{U;3cm-d0RJxs}m79lhCoGNXMd7!O-6!+zCYR~whFdxsJdGG&?u|GqO2DYNv> zcN>JmqAL#?T_e{Z0-s7zXt$OOMEPEh_o?+HaNHRyb4tfl6Wx z!hz!SzTkFMXABepG8w4-u5zYOxEn3D(UXc3ytzhU+e9RJuQvc1bG8NAdQo~jp*&De z*!N{*DEf6kqMmj?}2pQ|wEmaH-4Z=(D@X@A;*%_ei{m&3le2*jS;I0iXv6 zaD_6xSplwik=t&odZuFGim}G}RSb>3AN$SrT@N4jKc|A_Utg?lCj!w>g~6&B*)Miw z-h@oaB)2!+!LaiPNzBxee5d`2*$Qj;BR&hrjVsdZP3rS{Fv3*ebEWEyblhbIAz@nk zs?ELHO?T2sicBS;%!c!SzNcC;t39<7aXU_alX*|f>A(4Dj8^b7%JEn08rS5TGx{!e zqb#dEe+@oc<@xam$t8hiU$n-3o}VsJv(wDRAUX$G&O3j81lK#lrDjqdV(xsG0KPr^ zGN~+S)CDqA%EK$(d0V%nsO*K$!C_$~qoRepe68KBDI&js-r4N(Geu^-R@@HD@%=F? zHv6IxZ|+~Vq*4`#uG5tf?loS{ut<`Lo|gHBbC>z0qjqlF9eAs zB>$bdxj0t5*KcH;{Y4i;oU)ciw3*R_AnNADUWL?2|CbHex&ALq`4q(i2n}Jc5WeHg zKgRLwF9H&WEVsT(r54rTdOXSf9L52Y0kc76D)p*{+!L(gx{2yDUucb}BBE4o56&l( ztLM`!yR{1rY z|9CL8L4jXat;nfiDUm<`+PtAzyv%_8{$w4YmzI{j6_vvXSRE`6N9#i8aEd@H#q6BN`E#=%#SO3r^#uRYUAeOfYQV49G8ohl& zRu3%QDdI7ki~W044PpQE#7Wd3-_vu7%TUCfJ3K(v<$j|f>l-Z7&7 zMLKbW_lxOp3CNHvvPU$sl7|F~q#k$f1ZFw0?df|w!K65+ z zN%w~5;|aJ?sU5nC_t$1>QH}1v3U#W+DMZcT-TA>2{hw9&&5s840I!8QJIlvQ53l9` ztt%miXYs>H`zBMb;si>a_USCSX=_Lu0xrG1?p(ZsNH{}&r8x6`mOzgZYx(ekJvDzT zbtiupP|ogTcm(_z7Px2+pk-x_stn>%9$hp@O*Yai8oDvnXoBywiRCQSrR8__^Es3>myEvKU?O zvd;l0R{60z^DLBkEIyz8Q{(XyncA9kHL;^lH|O|4YJFarVxJ^j10V}}+J_|9jB?t9 zx>_Fl&a&zcP{A2kWoGvK8|n=dbshKw+JW?_UfCP21xCc0PlaYO^!S%y(H5W>I}#J0 zkMNK=kQ{hrr>%XcV(P<#=h6D_{zAj(X47Q1MLVo#20R{{zONk~*)d!?^^a?o)x^&! zx}(4}PwNk9*LiDeAu@6A=tJgT@>~7xcbg{Yb=?1rM zv|6Fh<%gxOUCm~+G09sLzc?7AvWwQ#du)*I`BD&ZtH)=y)m@Buz5(DS1L`&q0jp~<3-s2I}O zUDmk7zZDS640tXJz_jPgPaX>Kb@&T6Oy5WD5Ix_iXQW3jds*x()^6YCIGea)Um9=S zn>^PPG_l2|pfm;}wK0E6uas3rC_)eT60FFR2deHlo1m6J(nH8>iz`tD2S?b+ez#OV zZIVTbUNvJxk=rKlL|H)JyV}anKeZ|4G;itKO!TT85vr~#_;Vh?D#GRZlOdWCl+vY? zcXV(e*abN$$RIg2`IwHITl`)%=VR|gcX+#w2-8pi`Kq$HH(+y``1zKTY3 z&}rgJ8qvz1*da~FNml-jkK<)UjzJaJVmh@Sj1rdR8j|F#l z=q!uv4a+Cx5M;e?_cUH`c!*g!eJ)?YlAtKSo!(+Xt`O{Zo}!- zD|L|P%OE^VY^COixB8#~a~=X-WR#*uMRV+Tm?u5<{)2`q%lZq>F(_TaFR6=wnny3S zI$(E-N7UxI(8Q7Ct8tNMVHE-le`7le$xc#EJ>~A*23J#%kcd37_u1}_Hv;hLmKn=* z?Ft+UH^ygTL1KWj2p>!Z7I|`e zBL6C~lt|$e(Ei;_l6yib`LPC|ZDo$T3yPZLQrbQ6n~wgrOyN%u-Y9sA77mOfnK&30 z{oO-XRrb|8!)c^bW~6aFJ93bsm+e)u((490dhwMJf6$o?>r2!@0b*=<41DkJ+sEfO2WPXp&f2xMjO z@bMbVTr0-^w$P{i^cE`1lvDGXp~ZXFY=6eyOUwDtQ^WeRce8I-bSz5*qz9qS6cT z4UytDs1s14q0cr09yT)=g3)S{ZKaoX1i>3tAF(-~ejMdOANt29JSDm5sV4!=aQ2)a zOxkQ*3#0-yfMVC=h&aWjtEW|o8fbbG9BlB4-(2xN=mTsrFb7B@gHl_(o#dWV8_}B9 zed%4 zgO?J%-y&F=?3c#BuM9!^R;eZ$KrWy5){IU0x!A*M`w!8574?Q*1~uBA1l~Sm%r~|_ zYcJt-yiF-}ctmH38oNu9cB@XUwKtbqw{`c(gDs}Bus(`urHe@+T@}injnV!+2ufat z2jj92F?ca@jfD4`XM4;dTd-|uhtU2^y^Fv$e6(^oGoBh2E7>lyva7XUTF(tBDYe`( zrjV6kD%%LE82!RC@sJRKpp)kgnaND`Qxjy%=w{B+)c0&G_BbN+uqYLB(ckXqixe?> z8hbPp;+!6Hux;F8l^7d?uBb+f6Nj`EDav^bLMhm>b_Z#(8d-Xf&?iqX6jzHp%+th*LNLOh#Qt1_NS7J!4SvEO21#m0-R45Q$&oyHzc{uNX|G|JO$H%kmGL*M6 zRtP>3dysuuV|8mL6UMLhaFusE^h60Y!zD=%xc}_?;Jl~ub{gd}dz;IvTEk_1c=S9o z^1OGn$~YVk?qRN7ebb;v%728O%fi{nGt6W)?JC(0O_&azu1PHsnS<|^ovkd(k0?{~ z@Zrr=XI*gvsCS}0Ew=j#i1=rqSF7LBy#HC+eq(R)Cs_T}m>U<1p2Pst+)jT%1R?_| zCwtgk`I!dAEpC}#EhK$UvdRS~25h8KcO6wlv5?nDZBchH8g?I8 zeVrJBKY0p5=4{Gl;j8A&Mw2VUYgogR%2MaU1i<^|SGtV~yW_>N*@=Hwq+#yE*W44! zn@Do8_S5LJt!&kyrjLySjZ;i%WYBID30s{ov(_Dbqd_65-=0xGqF_BVj*5z91MEH) zVRIC@^bYd*P7xu*ls7v}d0S4(3@&zR&`o~a8>BN@`KoHS-p8&lR{fCX zWufpEvS%_axFkf2xxN^ymT5zl%$%t)gZOd{1&rlS)|I4hWxp%6NTBQ)r@O3quxl(u z+{~2)3aH)62`l8+Yd$;ajK3~gZTHlP<#yvf^)r|pwxfL1k*_Ts@@RdM!#1g)^(!}8 z6{x3G$-=wd-IZU4lk$~K((gcHjQWWNYWnk8So6^eLhzo}jMp0U?Xwe>tTc0m zL$Agt9c1oaRRAXEX7P6}cgm9m!g-JQX+)2A$B%E8%+P7+*mC8t^MK{+o4tuLE5KXv zpxLNA9Gn_wW|q{Sx}ZFa(rn03f7AQZ%DE80lT43i^UuaPoUlstIWyYQO2~26#Zs5r ze!=ls%*|7*(-s$FlGetvBRGLKemyd!sgp;CTgA#!;z+<_nJcjT?y=J|1Kee7Fn*{y z?zrs1fXkV*MeY>VWq^m(>|@_lFs07r1&{=kg#ni&b8~b3H}ebrwX0-W%0(h zB&a-nh3B{%vYW9bFwrP!&iQB$-Lu-HXFBi|fv6|WySQ-NkH_&8QS=v%kABh|I7L$sX z=LEW3g=DpzwtkKKvf7|xU777I29UHc2I9h3GGVPHF+f=4gbbaxB(Bg?>&>rtfx zkeUQ7cByBnfGjtA^k6@YXDGSRU|Ys30&Z^xBtF6HZ$H-!3VqaXxqgd_owel{5;5;@ zh4fyWP7(OMQ1X$0?=8N}VZVC81bn{yuTb8bZcMTsbg+@exD)WwK9F$GygsyE7+jCO zBBGfawL~ONy%w^hXxZ*PBK6a2Sjr=q8Ty49c@znP(3clBMW_o6*E5$DT4 zer-<|PUoWqEBgIY+RSRY_$?TNTqN;_we|$W-AGv8-Q22HKbJB@-4-o)fbX-cnRN?V z=8F*Ry7hRm?*0lAJxER&(#{ z-rBIeK8ZpT8^$u5=H1+6V7CK*vIOgJ9%^qK)$S;uznsK`!8P1{-dj@-kE36~#uU%b^<*hJC7#_Er zTOCQ40-Pd)X27JJ!G9X0C;}_!rp`c^EbZ6;=dcJ?gAZy?%r>g6d{NCg^b&Lf0`2Ph ztv=o_WU-DnymiC2@&gml2H<{Jeu%?0!;Tm!M!U>iI=-45)5{}fn#`9cOKmYm%$Ux+ z#s~HAwTrtP662;|+yPz=+by)ynGbX|^Fz7+fYIK}91B=ZevmZ$wr3K?p?m6Y_ZP&rizeLLKn! zj)zGEfs+<{WcqNnx%`>_!$y0q!xReea8lvG1mT8p9I~%BT}MPq<`b?CX(+gzem^Qk zQa;027Hl{VeyA2S8jnq)T`5e~fB6Tk2W#|e z!^PYyR38w;Yx%Uf$WCMFY{Wv8SpjNt#wpWuELqHSeu^8M#nQtw!?xMb_JRVpn){{h z;cV)Y2TDDQxTwl<-&*XeljK0A->zv+>V141bFH;zA2nomZmfDLZ|$|Z^cXK)*9fek zeEQG7Zu_wy)PCu;%W1^ubQZ~!rwDY+al+AG*pnqiq9s-Huyun;NQ4d9ot|YI4-qsw zNmh@+!Ep;oXwnOckQB#rU~Q7#VCW^xZyb^C)odrpoMO|FYmZhxoTTC~r9@<6$s&e) zb_-EJCe}{#&@u49Jm+$ZiLq~9!H){npe=tH$94%_`+DBiwyEO^;b~X{>uA~?G3D(A zc}uodI~$H!Yj<5=ppBKr#ty|I!nz?<{xxUxs`=LVVz$QHn|#LvZ|*O} zS(y&W5MGf}T>?eLssCd_d{f)b7WPO4|n3OYU*V#oOC+vABG1le_8;CQ_4^ zL+H$Z@0RBpDkqY8Lj=|Le&Bl>+27P})1Ztl^^|n=`P6&~%uV8i-1yMS$8HGku`F{-?_ zEX+!PYs9$*NXE%xPLriqcN zz~0}sWI580Vb2ZB;5&zmork$jAGW7kK4oPX4}ZDLUrIktQ%+S7G}|)LLhfjE#AQR zM0+fHFI>~{@ZvVluIF2)PD`W_bW;XTlR>#A248^SkjjXz)u+HG6>1ix!aNaxpkV4W zh`**$&b{xTDwZ*#VbMdGvqux*kI{?C-KgR_Kfhy+GiT7usqs6Y98Q;@6J_zVQ+(gs zKJ9+5cjhSFEIn}2Y`ivHubmvU>0s=$1r)t0`}pbZDnB)!L4^L$IuAV?FozCb2r2m? zw$9Uw9K@WlP9~qt+ZzvvlU;gKsiKUHU5D&Bmut80jK2gaN9QjQ8gCnQ`J4lD1CI1o zpVl<=Ya%z=jOb>Qq`Ad(q+dHwy+ChYpn8;C*b&>9VVfdEVp|0p52a+Cu;VxhmNdAK z3M?rpj}_(&eBn8i6X_Cj^<7S%-fsH=hHr`3g@J2@i99YQIK4_4!j`V7MwvF%Y(6x& zv{b%se0+N%S}E)J79^Zy_dp$fhzG&@_dj+U5rX(&Cs)(UfA$n0^T2~IM4Hc_nxcTN zr$vQi;?0pWLe4>67AV)a=s<;v9C4LkSg--LbIDS1>;^!TD;xkD(fC`2UwjA|dKdPV zo3QIgC)IaNzlI21`JI;osfs^ma7p#5rQF&S`dPV7O}i>9wO@`eEa_3d6o8rH=Wncy zo{axp>5buCnriFUI#0AWqEj&!-L^rtD@s<3+%tz z!kc2?r}|unocak2IiFQDBK0l@g@pyqCO5kzZ@5SEIP89qq|PL578&zNiHy$#GAnfPPQLVEKq<=xiiwvKU%=k3eO66M0@ z_}~VAPV(_V{_`!|xP%&Au3<${YBTQGWH6WzUc{2OHM<)XCeKaWiJEudO*ogjc6yW6 zVEZR=Hel(j5PD-5N5rt~$ZLE)TUV{4_O{~^WjqRE@=#7ErgSp*;DBqIo%jKuSu18e zp1ZwhtD+y1-oyTmEr~KfXKc$56c`>2kWt@2aCMk@wM`pE*2pa-UpQZRIYDccbED6^ zfDmUUcnj28oE|Yz_4nLA@mcy5rs1zIe-}lXmSKFTrSE>AQWHYR>7tW_bsBRlXXReg zSNI8k9rsh*#9rL^Lv_RL1^TN0qgJlZ8Al{9$?s5bVyOo+HRO))I*<4dP!Vgm^Nz_$ zp*5FvA`HdNDc)Y^2`{Ur#>_|zm=?DROe0UN6wjiaSdIY4ueS|N(24-hCJH+)`|X79 zr>Bw~;klwCsgswD_&x*iakA&zn?rH(XIA4Yh8Ri|T$f`j?olhDx5N6gR~3D8<6Q;C zrycnpwU%IJz>^nNGv2Z49@1z|G5x>}`T1!Xf3;RIM{ocL<_RFGqshr0`zup?dsBw* zP5o@paU*A`uejVNUaHW(`SeVg?J@D7`qQeIx88iV&KdfZNizeMK?D3r6^Ny>H@-G} znc?3z%<52!wl-P)f;&Zg?j(@jx4KoXrgI)qS2X|QX;=5;)S$+v|1TXW8gz&}%s=$3p`4fDjz6F>AO&OGr`{)He z(!Uqwk$~>#`$C?m$#Qh+wT5#@I*XAd7HEuy}98^Y;q zp^U4?_Ktg7LQx{m=$6-@?#+pnkh7q)O<#O= zOKk9)ynN3U(`b=b{Vksz$0}qNz8`D+oc;$99{EddX<#(ZZsMx+#b{En=#YH~b#FS4 zm!L-}X>UulK%Qr&5|8I5wg%&kPuC*JRXF|HSr)VVpwef3^I4&t z^R1aR(SYvCOb+5r7RL}=LgETA+x(aiIUXcmHbiCP2zp_-35^_U@P7ajjkWZ5JJ%W- zkH?akoP_41dC-$~^YMV>AVc1R|L6|5y&HM8m1$5aAXM`DP2N-JhC^DdmK0b3NE&eV zEH~h2H&5oAGT-RnT?WIUJ4UA%F{Ki}d$a)V0I6&`2d<0y-lY)ic%|$*bQOdfX!stE z(-_l%NcN%zzP<3@@-Rf4ke;C}ZG%#FP z){wfOCJ;U9{^l^p(Vt86)#|;mKOH&y3|Vi)BcP}s4y`YK56Am8j&)=w9b3`uFGLNg zlpE+z(j#NVwMj}C4amjF63jv{_cpeNX-DbLU)oI^B)ciIpqtL~HRsQSdSJ|dVn+5p zu~bC%iC+*cr+J~?A}c*ph3T_bexgh>-zKN3u?g65qa-Euwq_!Z>5b_o>(itgi^lJo z+7;hw`5#-0Z>!vH-5w9Zk10&+0M1q)U)fD>EL?XM{XguTWm_9<+ph24ZK1SC32vph zTX1i22~wbFf#U9v;FPww6%9_&;1qW#4uOOc+>2{)*Olja-?e_l%C~&Uwq=sJX68DN zW8X~^-1HphmRbQZCb!>7_Y#^Yp|QtTbl)vlP< zXIB%IPru2g3@b2gfISCzyHi%2k`&%1-S0;rUI!2|pq)8nrSB=?NXP3p6xo34Rw{44 z!8nWVQ_51;bb0?)Y6U$fn7xii1$o#rezTA4T&CiD z5F+GBoKH$THCQqEr-$L1SBHFHP_j#@aBJZ?5dImbR27O`Tw1i<7ELL;kqmxadBnOh%T$d{$u$yl1#+3M)4qt{B--pH- zR&BIhai1$m8$N1g2uG<|YLxaiD&3H%MQJ_uXrZ{BP~2RWeU6rD%SEE-6FGV}mLi~= zr;Ev6HFT!widypL4Zeeb!cG;ozb4jYf1*BsnTY9llIBTw088I6Bn5Hy6p>6BS=A#@b{}q zeI@>UFFDT)F0mmAEecQ`(CfW9Q>z{E1CqU-*;BN zEuPoBXW!7LnCJ?|?UcCS&l=d@OvU|Wz`f&I7`(sz;p-cxbl~5DUT6R|QRKrrG_d_h z%w-^L_p7H1X`Oq%eQ*k>(~gN={(H>S=RmG>@hDqx{5sI=)5g%>O35qlNLq~I$@)%T zaO?f=7lc;2JB19wHIDj3FG<+t;^_~Mzplu#*Bf;gSrY0;IP6?bO;5ykK~O$B#N%i! z(f{;1h@}I@09CKJLH2mM7laM?J4$^vySxwP!0P_?@;!sJQ7h8yPEA6o$0G7RY2S#i zAyR#R?8Ue4kc6IScEvmA_~Iq#?c<+qT1rmf>v?te>p=ngkDr1^H(n4v0X74d8Ha-C z>pSd}b8!5Qq3`L{#4aXg`n;1X-kk%oM{pWG{9;W)b+8HEIR;97)=wkCSqaVU~^J{zOqV{50A19l$Z11!DN8RS2fg%9-^ej z%oe~G^EE>%!!ZzwLSO|M&dg*+4z9-0)E@0oVEiia{fR{f+tssBm9?EtwXdxF)E+aO zhEvAB?><8LR_HND@aagUNr)J&VD4=;D}7-FL!NgAw0CH{p8OE{?x*2)=Dy<0g;dhr zg;B@DrsR_U360dlFD45fBc+iGE495A0pCXMr|Jd~wW=1?Xq!t%La7`tvzQ?IJhB4W zj(&vfw~}N14`QIR6@8h1-rt6OxX7OZEe3|Xp6u5uq`^`zLd-MSq1>gY+~qx%?+TB$ zYtqpxxxIdn)iS-M%{|gneP3hLN5ypD3GQtXF2L;uuT$XW>k0Z6=#KD_LCnt80z?{l z+bx3ZNz=MZJSqM*Bbm=n1J(%lqY{PK&8_sC#dPi~rOV_M(~Vc79L4p7Vn17M2-jin z-l3tQ0-GjdZL&m&^M_zt{7ux&`zDHxyq%={{Wu*de3pk*#$BnKCtiM4^8FtNc@vV` z5=?URip&s0`H?$pFOlOn8aU)(HANb>R*}4acNQz%F&daNiIH_b|6hxdk_%2W zv$NU#tm-qT!+|g>n_tH=z?FfN+I$i&BmD?>XD5UX~@|DXWQ&d+H6G*$VkB8FD`;l|Sq)S@?@|7O=TUpW|C$?OWxP z5_lD;yq%fmZ}5@c4Ukst$KP3N?%oalM!sPGFE&vD+LTglkM`B^)HI5PdXS1{lCYcW z@!E4x?<*!9?XI&B%MVcftFs{Op8>grsViLIq)po{??0{Yo^X-~*&(YC z0a|{kDYsD?0^HphV=I^>@J+HIM~H(iNrO7|bCmU>zZ)8hn7a%<^Oc@&aPISSlb#c{ zRWB?`oN*mi&s44_#3tO*<8NHD(K#bW=(q&Q0G#F+wIqk*ofeTd*Wz+zINs4k>+`y1#G9-%!vMQBY*<)m3^=%4VZavuGat1 zlpKB2%>A)*XTaWW*av;GTl68i^iIr4xF6tZN2A&b-Q0jiqAY!$5!w$mhyhn!2fcUC z$27bJazaKH-IoZmg;Ppw^hbsY1}Z;WPP$zEJ|e!BevIv2_E$W<%w7+vf}fUdeE^iZ zkqbxL$o1s;>ojnxVP~x+VYErsEg*O|uW1IT46?kQHDJ1d?k-jDEGjM?PtbyCb0-|= z4BxstZ{Gj6{}Ov6YWOdMx)Z&fP@BW0Gg{tf8jV05wwpJhJj^v0T6LZa z!bkJ$-})FfC~A32XfdZ>11pC6VvlC zz|n@ZR=_(rm8!)&OM%hygn*tg7STVA9B;gK zwWrzzE9M1qKXtjd?$w6JM6jjXUijzZF8WoNx1L$3m-$vKno)RC{^{`M*$lBs_^eBy za$W6Wt}!Q}m$t%^5b<)k7Z~U3e=!4@*q;gAME7o{aM?}vL>+L9dhmZR;$#a;k{s=P z*_r?)KHeiZcE8d&`t4zNjU;nKw^E9=ZkC)wuJCUtsLg8c~sFy z4#UPhxjnnqSs%X8auDGv8(FGJE6{?Od%(zivT{|<&rd;eE@>Z;N3N70^1g4Vz@*Nn zfxahz2uCQ?)#9AEf3jH3K)F#ljC6ukH?q{qkoUcuhs=eWZoQ-WaNHtOwy~U%+&g&} z>*4ZT;W5FVig+6t9^hP)Nf)raH zBuDpWVBe_aZwy$_~_J~O*rTt$BcU@m4ru+r3RQcm|`fW z;0qU;l$gzaJvc#XtPgZzJq4HNDVu3rd|Le76dbUv<02wXWTgcS_#xUk(X1-q$6xQL zHkVA>s}+%9S*wL(#7xii;D+rxsi82CsvWDuW8IT`n1QvA;r zhkhZ>K>WLNC*VKhC!E zAFG0eZudZ9yyeH>JX4*5;L>s3W-l>wrc?h>i=>9-wL;VxbzQ__-mGy0W7;nDXW!;I zPge0S^6>_cJIV4_6{e;A#rz7+1xi$^Bopg$G-F|D(;c{lL7Zw;`G9-ytFZy$8lUgj z_kLczs&_$Lx)WCEzP$S9ETlV#Jj|?L!sMep@G&9cb=r=lzRU~p)|8#Bxv^FaT7)nI zGtcKOL8|_8SO2gJYs(7cnIx6!ddPd+eaSQ=12>$JExzveaZ}J#N=to;vg%MTV>jQ{ zG`y|RrWpGP$KNqe$~`M;-NPE>`m?fyjPXs`9n(9mRA;1_<~2TQc_ab6^L8j@o;yyt zb4)a+Zdgfu8F%%jGA-I}OFb_5>CV9{bZGd}T|(t7$2NkFHaS0_)~8L_Th|x(=fBDVVb?+bL_KR@%GOz9$4cTx zLPN=XF4rJFTUiiR&7c1~m-Y^8JSAI2_)n6%|HXR0unNB*#NY+hwl<(g$p$pD3ekkE z6xWLmbq9^#Hwc*lUrA9rB|LWgw)`2EQ|VkZrNe=t&Gj8W)e@bf+sgyRmPY=V@{ImD zz>qUN9I1!4V1NEj+Iy0BL_9@;P?@_!=Gb5xth9)ZXXS_Nwfz^-^F)!9`P5zF6z6I< zSQR26RdYZ89?7BAH6JITqD(YIX&)|^>|&$nSI%rpB|juruC*V3)W8u(165;eAUUYB zQ;aIZ02WTml+Lkg62KV6U`5JFqd|(1t(OQQmhCuW9^U88%4d46@8~yI+i-f=x4lF2 zS(Mya%g;@`8Akn)ehV6bJNmw zsPV+QbvI$s1>w2xb_ps;yGLxQ!=U$XM%I-19JfOiyu$eC+V`h zQS1sSRUjHKn5a@OyrTK+uH}hW+306TrK$^U8h6A~LMw4YKHK%T7#!f&r|ps2E}MZV zrU|}q%s{Qd)?^gfWV@;X`gw6WxefFolLDF-sJ4mgw27lEHN}S~E55N=6f@A=ef-y> zc1RSpZWtlX7Cmdbc{dZc&F4vee_#K+yR3mn!Sj+=N>$FItVrOom?^PJJUpR`D&JS6lBclapl8zo zr?)Iaw&ck(T3Y%0fygmsxzn+$y=Q1Dg`H7xe!ok>ZmZaomFRwQv5eT~fxj#IB%IVv zoyPX7!@bx$Cd>HO2RqtQYTzlZJZJ8dz+cZ66&!7#xR}A1`eIkH3x{$LFvW^c0bOZ1+_?9rt;e1a z7eb4oE8J+uTMKkZPqt0*0FE_^)ienm+9=@Jg7(hwLCp2|k`cA96oG}hZW54@pSm%k zoQ45k9i|ERJ7pww9S_tNvx#gM5E55Qp52QOM9w5E^3snp(=xiC!^v{$f5<6YX$4djV zg?>K22*zbmri1D0+>*3_40y~9<$R9JNcA34=w37Y^}DmS94o#^8-|%vI@ti4cV2Jv2UXo0*@+t7m}Tl(>v; zMIw+0elqq7t7E$C!?unLmKt}1DB<-0N zO>eT1*$y-GiAFF0f?^4z^}xL-JiRQ0Se_5{>{erDv#>;w6SG-_@TGafCfd*NRK!iQ zmm}Gn<+pzgtAn~lbWGGr&5jed%2;8o6Ip|D}yA6oQI@axTsxDx~)`q&6Kmi<1fL)stDUyL*(E~yb?pt z*Lz&0#ww5W=##mrV^I0AP*wxnQlHs*F5ZmU%!$7=(DpC-1ij;>R39AU9iX3m;mmK4 z@s_T53KI31pc5RkN9OF#q1?Y-ERV}NnYvrpU-L0NMK{Msv1n#bg<1I~m=G`W2t1b1 z6w?l$HA+zTrBwG|-Q-BLee1SdbjeI{e<;Ps2dx`_gk`8>%8q66!BZ)(Lml)KBR?Lz zx8iZ3n2}>;&rxC7QPQBlIy3Jl75?K7SH2kh8`#rI>m2Iuzv%O-j9avz5Bs%;=QC;P zS=>~DEj$JMZw}R(tupT`wTTKXE zn0%~})ekD;^<`p&^<=nl0R<0X4U9}$^0aBh+H@~!@DYeD$TeJ-4Wt(;bHLng(^Z_u)x)6MaTQt9*|Xy0;?emCj8%r#_r3ym3C zvDw|G-k&Na1vdUGm=c<3OT3bcrJv?s+(=g3DrT@UoF>&qwd_BKdwDqj>*xfp5@r*B z5ZT0#?l<@hnHkKt`=j8JaU-3e@G!eKQ?I3@Zi0iLR^~;@`*tU(r}F7Ys}r|#U6S($ z+hjdwgSs3#HOr+;wa$2cJJFK@ToY>weR%;6zB9kP>$-T6Wt`~keI!SHiu-$WL4GqD z{`85zw_g!;;_or}w^sRD<$EFD=gWmOb|-`50%^1(ZWQIHe;aIn-15z>4S1~Kka0+7Ww-7)*GkyYDD z+9WKeUqt{+54G2XyJ-0xOx?WZWutVYPy&x6nDl_MqNM;mIX^Vf={ z^;F#iL_8jX5~4N=5COd@=AH_-pmSd}v18m}EzVJ@50n+KlO;=0xJDKv}4 zqx%exo1ks`Zl=gh1hI+*!?PBVfHIsw25Rit?b=WtVr{ecU+jy2yIt9x^L1hDAUU=Io9eM zTdXb!Y>vF#*bN>_a%>Oo+3Fr@8xS^Nq$VFOrR&sm|0)e-=o22g6=}*NSXS|&3>Zrt zqPp}Dr$1a$BZ`);_h&4m$O}ef+|m{%Ah&^r`ZSp6J9i zPGmi`0yJjK(rS1_#X9okxlX(26|16eM^72Tntx=Ayb)impm~L#a9 z)qz9OUch%J`n+)*mfe1OG3iS#yy2uGM}$_}=|x7{WxoZnOMSFKnB`PPg^6h6o6+eg zRQV=j3QMG|x{3VdR^*>{`&OucMa0dZi+B~IQ55kfa)kx=-mQguTX_2}Xo&<8tZt%hxK>T!qoeauJ*U%u1|g1n$FMzw{*9k%jQg4T@RR zTWGzr(&Cl_?@2<85%aBNo+zG6(Zi>Z8`?VS)fjRgQV;Ik+1c8Q+6unapBCIQmOQG zhnN}L%C@RoMr@X*XHI)sGqS4#=h;kQesgu&B7?)p?6}JZ-k|qOK`heGJ1TxF20(}! zrm~984UgOxtv=nG5+m3EQ7ALR#5iD!LO@$6mvtxZ9qBliIhjyl7Xht>cgsJtBsbq9 z=}F;RJjz*BlBx8o{9`HMJ7)q#4eV;c{#Bw!>tapPoKjZ@xck98Gs^#1B$tE#3zvxiG zOb%7yIVu9I1*>xC7sadV0^*^N!HC4Qhy@j#^`jB+g#XrumrCM(x3C-H`#VKSXvM%_ z6l$s_?pNJ=r``6YFMN7ga&X46WbW?WU9kEYN7t}R!0&OMj=sjuqk%5kQn!W>|cNUQ7wMW9!M5+&udvV@Xo1iJv=x(~i?4Jzd z+q#4AIsgINoyU3BNOHvORvlGST7}jCw_+PE(un+Ij6i@*JiIyHAeD=ck(#3K$6TL} zYG3@s&h7K1zsc}LySl%5FG@275%w0)o>K+XpFdwif(f5l6>LUYha^Xzy}LlrC{O34 zSMRsH;M{pyYjNpjZv9j$`KDOY&5{EB2ogVL z`Y&V;&CTnSB67f?irhlhGBJydrn=deyF~Yq8qz@d;0Ibn-dZl~N_o(Nb&M^@6a!ULM)F z44~dd3upzP^ff0*-0SF#O1=g9pIVgzyXq;|hD3y3#)&cch&~zt75w4z8oEXIt36ln z>-7vp1Fgy5Ti3J$N3!CjNC_4%O8M3Jc--O-Ny4;|7N^JfD%)`@ z(LE3OS`H8F{7x>#9+#HLPX5EIR*l%sc4TTe&deZuN$`5NzOhbV*=G+Ya_YqLXwJJE z0EjU8loh$$#!QqVe09}xdHv2f(X@XM&Sh6C7CpmQ8!nk9(wx`iWyjF2qGNH=p!)24 z<|gWsu+-JNO6bMoX6>?On~tgVf(pGBv!kWLYNx|9w6y;-*&Q>`3=!*E+zUvAWK^_Y z(TrO8d8sNzPg&mc^;?%VP#S4ZD)>EfNCO_OcdH1ZG}bZ~l$wMgald{=Ia#<=c3vnQ zuiWGdz3L0$JamJ!-h~55{D785&*I`?()kR|iPFVO@HyI21zREi>le-M4T z%r0(k>bN{2JbNRagrt$&o^*Lpc9+mxc<{@zw9B0DjRrI~%8%zpomN%v*kig_re!8fc%UhG7P+c|ZBGcMNiU@jS% zB?ff6S61)04F4x3*#7u!zc08T;L+_Yrz2bKbnDll)@xzQU+NKfE4vp@qIagBToS6L zfww71YuEXlrHmT0x_AuQQ{XBMXaF`wM58}&;Ymm(4#^%&*Y5f*Vin4^I$?jh^>>8H z(J=7GI8Nztag5SekxnOuJ(lu578$vaxrKMFYcPKs(p;L~5hP`^ybe?Y7W>7pmUst6z~ej}Qh&Q+vZ`>?4G0;``|xJPmX>6R&P) z>}3v5@xU~ryP2MVJa_!o7A1J%}`y!RlUm|C^ zS+?U2H<~?|<6qk(wR!Ftd$m5RXvV&vrwrJBt7DZk_eCJ9&0q^h8emwvVx`+;rgEuh zMD!2ikt~taSa-F|IGUI>&&RH8XnSr>5Uf%=s)`pUv zs9pDSdZlc%$sd)}gAV4D;d3Du==Rj6^?%45XMtvQt17Qn;KAr}+WKf&It8bDFj(tt zV=Py`DNl(70f9sjsK;SQ4D5@rc`UT;&f@!ijkftV{qKcw1fdyJrIbImH+9^RN(xGY zeb;R6X*PY6$U&XSbU#${6qVD|Ta;X`o^VmqbSKg%Y0xw7wZ^iRJT^m?2YK8o)&3v6{RBEUy;isN~}xPIYw->8yQIZ zJ`ZzFi>MC&qDHz*Z7O4WthN*=WK;W z@&*M7pD>G#c}8K8xodWoB)9LzGQ;ckghTJzbu5XW8J5PqT5JE@W1wO~t~^UFqID!( zJ98NrqMp?{*o0C>WgyQsY;X{s>lbFLwK_WxhC7k*d|WPOC!49<;ohr}T*bHpfHuwX z5&7u0ogxmX-YiM#cRY?86kIdB_#65ZT(cehyk1!$k}YDQEW<#==LK5KGwJ5IK=sng z`!;O&jFZa4pZG~@D6jI(L4)iTul2NAi8i4R5G!+049bVn{g?&T_7Vd#)yBa^81Jtu z$50m#)4vH*7iu%T%ZdkUE{_58y~`YeK`bn$tLvc@(YA-Vg*$W?AbpNiW3@p}g;k9z z%gMT~v;8GW7LD8}ML&sw5$l67azG*8Y{l+1y|^+;LEQ_}R_98(?~P$*_JVR#XgT3&^mC z5|JK`+Cg>24RXUoez{Yl#o2?v$znO92{aFRuTe~D*ee4z)#mf>6h?&NI-yKcIs!fERMf8=sP`0Q~b=Yq;6HU8w1dw!MOgXz0#burHRS`%x-C1()~ zM*}%um*Y6788vA6&yrYVO5EM=pIK&~5Pq?sSP%>lYd>A0N&j^6+n2r_zK7Rgr`hhw z462l6vh#Fm5vpm&@J#;u3!21C<3m(EtlMK(XTFb}K~<{V!?Li1=1H=#XzSHF^{hMn zw`j+DS?Ekz_REGj*J63ox%l@fz9i%KC%+cjPcZ?FdgDNMa4x)_Up(;)1ob??wCw99 zxy>l%HVHaO)8PjbAS;a)3_od%bt|*R$ZOjGZtjG3P*1mK16^dfTNfslz*n`vrH6~l z!X;_u(1!d^OO?t(`;`LK>^7IcGF`0t%@1g4uS>dSnE3jsfU8Z<&6=`PN8Gt6qDiePB_1$Dq#CqfV`$cYu8{ zvrq$|m$D!>83=CEhOsXl#`XubG5n+k$nFXnG)_;Hgk%T{d$v)yFD>F~XiamCN`7V2bE;OWAKFk$RU<8;w}dP9HC1TmD~ILc8r7`X zLiGc%#YNRz!=jfB_PfbY&@ODVbZG-dHi@8ChMy|3H!{hUx}lj@x>6$}P4mL`WI~9!g_+@@@pz1SiLraKWumqI%hgf} zvD#)yHLhU|ltKze%jt5Wg_M8SOeMqkyLVC6k2TvyQ6Lnl#pF zHmT3>6Dl7TXIyeVd|+dho(C`tiHL><(t~VhRqrZXCh*hQ)e!h44#)8g7C##@3U>$G z@5{6FMv0VW-8(WpEH|BUDp!r+?8~j%+=WC32O2ujcWYofK!*0=&K;wAZ;(&xaS4;K zD8@cF=gk~Yn-WI(?GV0JNki^|e+-*D)_fS!5&t(5VO^pvs8Hsn&z0B;QT%;7QS!;7 z%K2s#LxX%|*OBdnUprx}IufplBQ4Q8&3J1_L1eVV*r%@t`QU1!d6mlp2T#v8GCGPS z%mR-DkXH|D#jQ?S+4EJ#sB7By-(jT?rqV;dhoIM!mG!OXm!hzEh9XoRq}t{9v&x-F za{H4HjQ2bXO5Q(RJl_amu!^Q3hE@BcvuY*+n&M^^t=&Vn;hPiDuj&8Yv~{?iBbe>K z=yh}|g18upi4joD{c|Ern65<{#U8bE@Gvl##krGrjo7lr98P^d!eS%Wd_9=l$?IVyEb0lmMF&*D?4AF6M=|VremuE?%eT>BQ{fJA2{Oa zV*U_nn2-2efIjsvSxn>bik*v_{Fik|KnSeX9KIWA6lnziJC2QKbGIOw$=|}u&gZjy zh(V9m|K~Gt>%l`QtzeCLFU4ECJ-z8glVPZu?}1^5AM(F|(rpRi8BNvgdauekepb;v z@57*qSfptbcl!T2b}*#+H<&%H|Nrhk$o@CKWtr0}W~kLO)y45MHiVbQk>WHnj=JTY zqL;tSy4W}B#P?@7FU21nbY?dUTS zr?l*~|0RfHuzrvH1ZlQH7D5z!>7dk+%iGFK;Zl#2Ll>l^V{uJ*MYpt#1M=K@oR%x& zlZ%j<0DEW2V^F8V8wGcaqaonoa;E%$RaKpES^D(pgfy!@^VxxgU8bwtPb~I4&F@pj z^A_ENU^CS)g+%h!EIuYmet%3>m)ZJrW5L}4jY_S-Vz5_&0y8%ZFC)C}*7$PEf@Gwr zM!mXP!{tVo<~QmscC~q2&1K{C{4af?LjSN-Z3y|AU*(!yiYgJ3pe4h(!RlR;FgDBd z7NT)!C4@GNzweeZBCUjAGRwPmHk5%Y>uldst3u00mxV%EiaLGv8~kv>?5xY^6JK+k z$K`Fu|2-0>i2r3?rz#s&jaZq zmX=Lih}?3%^wfvYg&2+(PB~r-H9l6`>Z3>vVnDzzdbNK_5PEOBnTD|%rfO2Wo#ySe8hZCqkk|?h|^YTw^?-0#^Cq| zT_m>`Z94{?n9?gmnADOh7Y~}UTuQZj3nz;LgfsF-DvUG5o(Gv-eHh2(NNVfYs>jD|^}Q7z&yy1>z6&FfWhZS8Ds`R){y0Ih^kQI9W1* zaC@-`&DPay(eH>j!PU!Ve4-1T@obM&0{WK+8J9MDne0SSwe{q1ca@HWP=gAO2NrZg zghr;hpGhDbW{+-CVUTAw5DkRaYW$CWL~(0*Etd%KO{x-9b;GsYXiF(gN{iflmD^iX z7{%MtY1>dhuB;NyqK=A+i6H_g3q`z8ZSDV}-z`6*d`3$Kes^z1wFsD{lAW~rZ zEfCMS9H;u0Z77`Y5@{PLnpR*buikusUTgMHXG0pqlzQqPn^%FIL&2W{d@PJxnI1HXeuHoM{Lz2U|0d-dq zO-N*nTW4JL=*;-(pFgF_5`lJW#;}qoJ@yvO$55*3gQ76HEusVu|20>%&4(yv0iP;9 z3nYshgUKwL)Q=k_Vyc9CuZ8CGV~x2iPATOdVq+%>duz!tK!ZOhUgpg!aB>`>Lj2rI^N?qS+^z8013*--9xU@;HIVVF;YSJZ}xm~ z&*#D$3HRw0_`7xg3c87Y+ccqP5PS}p;xAgd^uM@Dl(_7E)ppc9Jdpv;Y$r6=H7uWL z4;xCJTf6pnzOYbw3NJG@Ag>F?p)nfYOl$z*d77^P#l=46-Ocy0iTr)tXr8F-Q7T^D zNs5RPjV6f-;L$Ftv-tE)H~P)^SEz|^1T4oleKaH5eEnEyUzv)+=!`)s5lH!c>y!** z>Y@XiddS>x0gxJbJ7F%zNdD22^>K}3YFb@6Pu*hum0rP?;yhxHle&0DtK%3mFr}Yh zWgegQJQo|rU-n+g#BakY+wX)en|(6aUKRPb&e_6nmgh>PmY-Im^G@uVlKb;e$l5bM z4cGwod79@oDHLIz!m!>2&M}UJ&9vL<=%ovAjIL?1RILYvp%^ZzC3)3$cL8ojz9(K; z5z#a55#L8979wK)?*iM2lx0mH9?R{c*IjtIRRq!ACARDPa;%6m0!$=M#qw^`s(f4PTS6Rhfnyeaosst!rVQ|3>0Q;x zGo#_{o;(z_FkcS!yLQOSW8-nVXtA8w;mj{?Fe-!u%Q$#Q-Z283G0w$Svz;rZ1!S?B z`aXKkAT}rH?B|**Ez%&`{1Pj)?eR_F5|7%(!zqQZvp5-|HEps*^dMxOUs5DCfQVxZ zW@ka^X*yJQAKc55<_-;7&=4?^6L7JX%O$uLdb~{9mQ3TbP~b(y;39cq^kt|3XqCqU2-ePnr8%Pa58k5{7yHUucaaPSGSbahVq^ z(QlW>1o$Q7hj!7J&<%;|^!`eX9bWqq`@8tY;SWW_&zPg%bgic>Yu#*}_?uKwNruJQ zOf*G+_H?o-3j;UnBUME+e|%@-|Mr~ad z{i)nCC)5t|znYszKNklPUwr>~=DUF{cD^*o?LqCP#~iio3$;JTTCKl+;U~mxaruLm zZNZr?fWV}ivLRFbI`H$+%OGSKRq__={E$8{Ny zEX#2&^$RZL+m%=39xA=)4V(%7w#bZW=ZhJgi1FWbaVye+@{3{tsg&z)`)Wesb4b=< zK*?i?Z0>2+*qU;Ahjh|%g-ffo9sPRpduzu5ab0z*xoZ18mt^Tc4FMO6yJ^}J`P?EM zmF<_$iPxb2%X-MB!Kr*_DY}ssV$qKfk`{mSX6r1LOhV6H!A2^=)m<7#)~8U(A_cBsP8YwN?LA0!H77XFKT+j5YU}!) zuOWq8i<4%S2+r+(f#rSs8sZcCqI}gGDT$=Zx1CISJ@TM!tMB%cQ4?JDD5 zzv=qy9rD$*!TPR{7*M0}tHIbKz4NfYzyVCJW)6F?L&VW;`(R5Ex*zkFwLc^4ThPEk zES8x1A~QJ3Rw~)z^0(ENNVZL*57E4)z4{OKUFwtLe&; zM#^%e>-C3YZfJh2y!^cOW!JOvUQn_PGIr36Iy>l$Fy_ncr6!k|Wl8_zaiWXQ6mj$t zmy!1fE4UG$})*a zZ$&Bn$oqxOfg1n?XZ@1=#&%vTE~}SKJeHZlk7^Ovf0kyo7Wm-}F%3I2_?+%bx`&&!E&oyo?^ zO|pbxx&elyJH63A1qc!NY&|{~8aryIHtc-e!tqB<0geab-%OYG;QM9M#~N)T7b}w6 zrp;1oasmTZ_a1pZVd0z0jeZ;)Ujql6F=T;=MVfh}MNG|nngUpXojdIRJ=s1`zcCr3 z&Z>y8_DlcvJ#kzgeJvRx%`+q(%3}w#q`C#U^%`d@J(Yb@>Sa7E=ET*tIH2~gI;bcF zQySpx?0#PFPG^L(AcDj#i-r2R!9Dk7ed3;eiokGH&y{rjl8Q!qrTkYqLN*lT?g27a z&2AHXZSPOb{AS9|@-PC}rQsu54peC$xo(CdrhIcFa*5ykVu5;$^J{~ZQ+k_mF!!s* zm9cg4xmbhWksS7m!K%HDOnQIrEyflamY$_VOz8${=lNVq0}$3MmTzpP$%O-j{3Bs; z$)D>pzj^~kIe+%;$?vqUle5(374rA*a`q*7CTkDcFAds8p8<$ z`xOBh)ENo=0$*Az7@fEe^?mv{>lQEhbfM(bP8O~1(RO8S#UY&DK7Y_S%#ZQ?WXJo) zep}0UOazm4b}rIDYuE(R*BQp`Br(@a|9{UnDE_-!Atn~|@;^^Q@0J@?P&G?(DVR}t zRG%`~o^`qruke~`7Z3M2>!J&hpBCe?zKgCPCuo+IQnLghvWdvu*o@ zreQmZG--f@t_>2e?fL3Af-Okv6(MPvgy>YK-2emzLd0Q`(>z|$;Hyy!KxB~LEydLp zOQp*<=ZUJWp8*;}1xA)r-Ryl7F6c<7O6Btj41sK#ay zB$tghX&Nyv6OTD+H{0(dPzQNRNka=`<_d6``z)#Q* zfo#3jShYc#uNI`Qk}#MGUd$Z+-x!!ktNrU3+`jE9$rq_g+Yg^wGZqI95(yewz2>bP zI}SANRw>D)c0+Gv?%%)rpQR~FIxI|1pvPmAG2Q&6?yHz_n;)Ahv3c>3R}+sf%okd zCOF|?SWh)1&H);dA5$tFcwCXpd598BN-D~&5sgggoQ(a_QGT%g9!l%Wdsy@|QK^GJ zad&JV6FaHs{}*48`LoJLs>pSx{B|fC$t|$_o-)=U&xasUWf}&(<(!hYu?rl=xS#yM zxvIyNBRF*lNj_ie(eq>VjxMB1qN^jM`war9iub))6sq4KCTlSRCuZL3TuayGf*79( zPNOB<@-MTnIs!J3@sXnAMuKGmMWTnxye6bTTq2*d#4!Va#vsh;x%OC9jatUfw*onF z-RvCFYn#JI+j2c0ei9~X^bw_7t!-Wq;&P?OL9+v}dLU|7$FP3foj>tudYp2iblvk& zIQ6&^k9SezyCW7W*ZI%T*)q_^zGZ9|H|2Ks|HIc?2DP=e;ljJ68+WH@aCZwSP~4$F zi%W5L2o4q8U4jR9cXudO+@ZL;20iJ1&&-+meth}0k~NuG>zP}xTdr}6C*4-jR|N3g za#v< z4!$UnL`hK`9s%(HE#%~=0rX)*=Z-xtDB)2I?28fotZIBBKZ-&)d#Fu94EY&8AZcF6>g3&$9gbL5 z9{)i|(g(%3s1P?3arA1{Sjj$GYf`6`){7u{n#}tq+K8pSW~+fU1|_q`By$6bi{_nA z>m&8UDIXP0-{C-1sQVnMX@}gM`B89|XA!B?H0;!|Pij}3LtYax-1mxo661rVMkIXK zQy4`wtimcsjVqb7ZKF{qhB=s%_V=~q7zUN=TXVF>8TyK@a029Dc#+aDRuhMJbtP7itOVw7!*A-{lWm+f2 zO;dV#LbfaIJM|KFC+V35C=OCy)@y_lgk@2@@UqlFMfyqUtotZ4rQMMo0~qJap>iHB zSflml3~#+%Ev}>cp54S4jj%xU=X7h9(`Ej(LHk;QwC#=0%U(7;O13zUvvV_6)}XWX zkmhu@GIC{LVYypU=UH-rM1HEt-N}cUx%s<1hTGEeJeTJj$Ktb`hQ^Yi@fXP|Ai+1vU2|O|Nrgj z_t)OkOfkeoQ;WSf+6U}a+GMobLE+IYd6oX=9DRe~i=%NfP7ms2^&{A1+w|V_n_og95q0vcga>k@HnGXVn zdu3eY$tQjXFKLW#ObEm(40tS*=w>|vLnMB}V8zCD#0`tUSH_BfV{1Ut5eZ&+vxBtoEyMH zyY2R!OLt0;f&<52xBfZ{FEadPf~$|b#T@X_gtP>vP1z6}9V61ga<_y+2Ef)~x0qy+zpxlSA}Tcsr~* zFIYc8)OoZa3Hh7kyfOo!z@NEg2TNIV4mUlqi^bVLKP#E4c+k>F1F-0N&dc7P zZlFIF3##~i$aM2-qm*W};9eaXcO?=6mm_^=}^9~8SoTW|u?0dWJU22J!ao5G_{j}I8EXO_Ns}_o% zmXG%S{KI>bUCG-W&*nOe5a;E9#VB=SKDORK^|XlHr;}d^NA?0A zhS?>KU5lKHY-R>N9BL!XqFzOj-j|cgU-{&d)aZ6j|JCFx_m6+665S=QQlN=e>Yj{f zG~8UF9(6iqF<=;8l?m@GWo1v5e)5Gvqe)atXy=6XTbg*;I=WbFoPgJjTD?{u+^k-U zb74~Px-n*Ps)%p3gBOeKq-X6&7i;dRq?4h8E(KbjC@Tctgm^wmUPOR86xS)|)DfiC)9klPEaH7DOX0oP z>L9xJV>6V$SpRXRVF%}3dfSkasAz>DXwaZ}VA-2P=J_p3M7^;Bmr;1fKw$X1po?&v zY4y>I-xTc8(SMRGE$QRTtc{+qUuMi71u_wznAO%h$KQ9XejD_P^dN0{-U)IlD2zdx zvTZao9{0=}TzhuTrHsUY<4`vgpoC(}1D79d3SCX2*6FKOfI@C!oO}_C=bUU%Ng5#(@IdUGrBP?xfLh~$I6tJh#`MX-? zW_i9%t(jw$F7~s++v79&e4Pwf#Sx+S6nTnN#F2vN%lMNHFV=6#S`@=MS6h{|G|30V{$LlkTNPzUc}K>N4WdCYIL-Y2|38n+=n9PLsYfDW>DBU+xZ zz%hL3U;R#XFPC-(qmj)%uuD~|6(;cdXMqA5*$929=w$iLNnar877idIf@M05X{U6$ z#*}h5U{TKL#JDHgZC|J9ZRXGS=L;s$)>iH3z6vWE(w3bGMHU#`xY3TrerO%4Fk}Y- ztB+E5YfYl6(uV)j7Xh)q`htZ$mMX2p8_i*rJuGPm9$=jOfGYss{owE!3JeIhX_@+c z{%+k>t7|**B|uV-PSA&krn5+#vhoY-UHJAc9R3}(iGEacFxQvuBWnrXvH!RDxA{8+ zB8tr?E5oSAhfPWfDXj&+hDbY=8=0`*;9rDES&_872Z&BN3g;eB#tbAoi|AEx@gY=c z-wSRx9Yxdq78^am>a_SHp-)@2OT4E|LGAQRS)K^JB0d>E{$*BmT>vY?DEj@CC76BG zqg4(owoR?M57z8p7lj%=#~qp3u7x4y&q@gX4yPQDv22Lce%jRU)VDjeoZFY72o@j>)fn&N(PU9h>udpy3IW=fO;##eTBma(f%kJzjW>8 z;O~5*d#Mb+roB~=limJ{P_7K4;gcNB6s!=5iAs}8tbg|#w#h_xIV;ZID~-tbea(jN zpC|6*%jEUmMtDEg`K#FU3kyIplT1vhmjxeI@V?XaP$3$V?LgzkF0&kznt2qBeZmtf z&EX?G(kuhCoGDS$m4FnKTXl5j>u)*v=dsdY4Pa-NlSWbrnKET$F^SFRv@SZJGHfn5 zmJoOJnJnQ%*^CHJQ}stL@`>huVNs#iBbYQ=8>)&H$^Wda(n2X0Ys1~$1~DQy`t&fe z#u{30gnn)Q{IJTp@`lZ#o5FSPFbh;P9Xh}hH(4~?5;+hX3vaJCMw@sc;|c{ir+UPSO_BP`oHTxH-gfJ*@tr)F^dj0H5=S*ATrntAG!+wgg*=66UWY zvsreqeCJI}asgfG3gj=?*u6xz*M5sW+Mikx?Q-Co3{|x1$;krfm_m@1c!>&@i=N3so0NW6 zbmNcDe6QB!aM49JFC7k=L|ohI{Mr}Oa4l*zEqN8QVz$2o##s)?79hESXz8pK0qi>L z`gwDPdh-S2qHXdQcs}G6-LLOpt?(>01GBQsrl{<2sY)c*vESc)Kw49R+EjHtf9W?`^ z?|(dUKjJ*Krsld!;;uepEU8}@kZ9DpPA#XN&~Iy0%9AMAMAsAB;Y@QO%NHbuZM@_yL@hM zF4x(A?ZX;ZHid?5%oe;sQ)GUk9veI}8-e%Iu6~H27BX6Y4D_{`?{hAi z556WB`5`x-XKA3ao*o!zY0ysy2(eS+ZN25Hw{?TS_10IB>2v5DK~S}zAn*%smWe_Z z*kh+;LNZIz7(tV({*J0dKr1MESnZVd^OXsyCbIINOPuXB0l{ z(V6#dg2Vhzaw;Rxl7+>Ap|BwTPtBqf`FvBAk)V=mKCv%v97s7erCZqK-T+e@igJ~~ zdf6uXQ_Op@A~g`FCwY3~3c_nspYoFl>MzcV^|B3*6{9m!4zfZn`WTm7iIpQ`kx*RW zJ3L}*yt&qOt7c!)WeLO{$xWGAI^VTA zkF=#rNzg;@eiBz@dweF$b#2z`hp1#jwf_lb=MT7Gl7-9gg50@Jlh2s4AHSWI@MmkB zEX`DCr%6YGxILcUV+y-s+r%8+2qib7cm%^)G4_B`Z?6gP0F+0`jgT5`=m^){)*1;ce}g1OnOmMou8rLjQ2Cey3w)A z0oVcyC?A?bRM$H{W)W%#WdxbP2n;D|&c2 zY14>m5BU!Ef=3w855OA1Ivle^j4P{ROyCu%Kd)^zsv(|}{Zj&EBL?22QXLn}u7 z->WPAV3?vX{yQdmGVvJOlLh3;EPr~Hjy8NIorKd;2S+a4i0?##T;=%n@_QRc^mqrI zM>W{P!Ks?93|AT%yS8mjxAX}6Sk*q2%cyO*&lOm6+y6XpqjBHOI!>F?YTA% zp2Fj8%Lv`Nk#DQMiR~tXT+Lf#4WhhXTX?fJa`&cuUr5AH2;JcOV<@668yH~DKHaG1 zyoLktA&2jzWNBQfa%}X~z%IqS?l2HcL?F8Ca^Wt}@vT1A1*j@0l%SQz+t~YXj%^}( z{Z(@D5Wc9dyQfzWNx7CFJVjlO%R62#ku@`TQz*`9I*SpC$f5$GvyRszO5I66}FDa=c0g_*W*=*GMn{&H+I*I@81Yd9H!J^YAqG7w z7zr~OEtwb%NWq?r&^q=5$flFp_qETm;j7CpxK~(TvMJrGKL`cYNuz0~7N{pN{eD?0 zU-Cpe=@#W7l(Ej>)}JYsLRZAULHTaqFnlKokw|dhw>r}{6Xq5S8-;gXo2H%UtX;dR z2G0VI+RD{S|y9a^w>9YQ%hfC8W@fR#$NQH zeyyVnyP@W3OKtf4YzBq!6_j)Klgbu4APnOihTVYKibNWxA?E-kQ8xqTzX!n)`u89< z!)IyxcH=*ceG%(mn2K0Reo!|kysG2w_dbC6rM+lDE{0t`z#^mT52AnFx4Q)V{=Jm` zkona3@%CoYGprLKda+yGz{c{-tg7^S-rv+6SEa+BIhs*-BzX-nHB&z5%5Pcu;w<7M zcIU&QeV};Gr>A^Xs5abtz#l<8=N>P?QsaM@aDVcS4npwvSNP2^QL#|-|6Rf#RR!*7 zfIVLuwj6C#mDHk5nmH>yfkbL1`FfrF+d|%m!M+o<}J(tS3*v~3pEr!g%fjlaEsgLZZ zq~wrcMc)z!iyr^lOGKesheuBu( z-K=baO+MNHc&yGhq~_pj^{Wvl&ci^DrjdRnkYLje{=6~kQnKHGKI*n% zxNuCG3}%i0q5*plX=to&Y_UG-i_VaZc|3IHP(=Hip3VWwy*CySjLM_wZJW zc^k+xMLAgSp9Y~j|~in#x+QjxR-)nxJ=r^&dO@;Vm7FM7#J)deW_v}DHK zLIa$&NhB;ZzM%G4k;*-HRQwpiMcapS)EZnqV!>@+mi|+n7-UW=V~>c#zI1I_Dx?~X zJ;;?K0POU7Tgwn_wmrl(s?(5Z(yhGN|6|;U2ix-%w=gN%XesZ4+L!lg{$$rxD{ju= z3a`Psh7QN&EWPRxM=_oAJ6EoxCuy|f{dbf!Eqn-@#w43V#fjmsgwU;2PCwRMX;!nv zf$){;Fd#J{xvFNPlj9DubTm1~lIZt;k$jrSm>=i^Tn1YH3gks)j^q`O45}31A9OBa zIO~*0d)8$8gV18F#g>`A)#3GWpK7qeNSc%X;vOX+WK_JUFSxpKQ07Ukf2Sr8b zO5D-KNh^iXfMrjw^oVRx?;{51EQOff%VvoMfkqQezRcZI1Hu-OIlwb~%X5)Rj z4i-D=m5HpPBvHalBoeO3FVm>1hphsWW?mV#4jqF>l?}%C6*f?GhNSBj)0iB_x4s%Y z6_((R(bU9b?t}aDF-k}x_5B5q z>hAmPI!{vd7w*`t^5eFbuqgL1-rS30Qb}6kYC*umZ$|UEiJ;SdThrkOA&vuiwU!OF zs1{pdRxkDm2gzV4$GLS$*Wpv=`$Y5udM>f z%A$4IR=NKk*S-%82^;vsleX#&<~fUz7+wq=~{;-LyB-XR4UUhCut*n2M&N7K}l zjc|h2p;(Z_#+Y1;gNNvVr^zoDV&2{~z@W8O#IcGRVeVqgt2(EzSg93E82C^nIF$d~ z5<~b+64kMGHtXcXKS!}S+B4tF26CuVbv}e)A2z|14EX2g8SneHYXJ7n_mA)1Jh{Vc1Wtzl)wpD4ZF=d zjLGdAa&i-NB&EcrARImU7|&2S8T8DRWg+XdT%C5K)6)I5J2N2w)Sq~Y#_H?OhDl@( zkj%3QQ1w2+uT*!mG0T65Jv8(4L{jpS7ZHj(rUxjZ6X$VO3rd|v1mmTl|Do!LnSP89 zn}kRjhhV*7VOH-r6Y{FJnW%Z;D{7$+@Wu&kVpS9LynHX&nJ#BlFAsN%iX5teNhFfB za?bLv!}!6rsECKyq?5Sw~-+C!JZHbl+tT_cTTQS zdMm*=X-0Vg`Io`jMMGD*(N4ZMawA|6rP}%y`CQT{S6ZF-4H2fx;U+U-d8W9ozQQhL z+c=xk39DH0g`rj`_ZT6!rzR(+lbKxsQu?WO9RG6x_j$m-E{cMWpgpt80tB)uj|w1l zp~TXmNtRPjK?F`8!#h0uO>BO^$ynAAs9;)hJ_Sg0x{-w|W2{HqougdFZ{<5L2(*ci zbr_EO=19>LKyJo3f$x$Q6Z7>nptZgk3qVG?9{;Algl88L`ib<1p^Mn<=VLe5J81^A$HuVgOAEW)!|R*F!Q)3cTE@w;zrixUJg=yYBEKS>xWIQ% zt1FCQGlX|Haxeiw^pBE1!s13{7v<6b29NmIQfE*c^ME; zI|~lJIufXMfxTgu*6t(9m-Bgp{vmk41P`23E7r8!Njs{2s*KWEZH|7RZHS~W)7wv{r(-1E~p zJw%AianKL~P^q7yYD)W~d3AkK#~zbhZ0%Y6tm~u0-%M&{aGN&tNyfqG8Ro~#j3*4x zDfrT1dz#aGdnK++qFN#52bo3$LEtP>84aFX6-q=5vc6+=7LvIlK5`diUq2gX97Em+RfDbSn z6Ms4}mOTZdAJoV4Y`XLpMfWy!phO}@<@7+8dv3>4%9$2aqD^1!=X^xAsk>ECjQ#T1 z8Tk}@Dz*#N7&kPNem?|ii~|3#Y}3%L0ekafJ&QO`kVh(LQD+bOV!l#2yO}LvWXZO& z;iNzvsv5>Ec#Cv@zF!UEHom4MOvj+%9Jto){L0lBVSKu@%0BU96dV?Q6mn|iHE(qDGZkniRa8kA2D_2aM^alEBgw(_cLeV!zW>~MJuwBf_ zXsn4gw?=_Oi7Z6G+Wq_D@lQb~id4+1KB@)B7S^Gty!Qx%{8XgdFPGg`wi~$N%IKfEM<*pQK)9u4ZhCb2<8@@$PMpinS6yuv;1yBlz z(US{!%C((DJOQn9chtT@pNbvXAU=zFA?7sIQ-h18Z)RPyK9w(4w#Ca^0JG_G%5$DPi+Zkma_{1L9{ykM5njWD|N2&K5`07BZ4Sr*xd$n8{jI!UmaNMiGo0EC{D`=GE}VE|qIx-T&Gv zGD%O4m!|k|qBEI|87r@*e@-WS9+>vDU@SMMV4)<;pqICPvyipOo9m8^r*4cJsj>4kM5mxdb~| zeQ^--gVMw+%M_~)E;t#Y*MQU_F8G7|V`Z&ww!5KKCQK_W@VrEd2hwuhzn58c{<0E!;frx@n}`b1h4BZf8UG`Oj+doQH=L^Wq;P&*EfKIlh4p?If#22 zY-D32VgkT%}&4;|#y*Uyj_iM>d25MW~2E^-`e z*})y}iPv)Bwf8K}JGk|PBw2fH1(wlcFf!p08J+qDp}BRD7&13`l1lpG8;=_4HEAYO zH;5s@VJou6D0!(*v8MI0H97pZ_b&iuznpuN%*~L#=(U*0y&`L$0MK<`q*7**DY?%g zZO^`PF;lT8!z7*LmgcO3e#+lkWmT%9X@`9G^Y=%OR$<~X4FJS0o$>;{3!OjvusP7-_aGPlV#{O7Ey#;biSFcq0RR&HE2lUej z7xlk+@+&vo%L=4a361szt`EL02w}2YiS3;EXL}ua+MW{~yi8j?fu(d@wa1JE1dsXE z^iaqsbu+$4%1=KRC29@g5Ng19CVdipC3Geky@3xD(KKBNZyQ+j4ERz|D>ZNpYv!BH zV!RX*VM_u1iNW(NK?Hv7GkmKaWv`GV1siJS{{&PcGUj` z>j_QB(vD0G@9%FHFJwz!EG3pRkD91|H7p*}9yD@SYTGgUALp-HMacnsTaw%?@2!M` z^my^iaNKm1ojnfKmojwgTDuW3PqM}!2KgQ!Z;|&E=#x*<^)wgkLDRlWunQy~ZBJTt z_QD5UhDFB#VXE^64jGPB23FL0A&{t$VFqLU{CO13YUR%r#2x zAj9|SC{1?JeT9>z1K5;O*C#ybg5U%i(n79Qe>6Y#-=V{UeLWNV1Mi8Xo7S14$V5h~ zZ?=f1n@M2u*XAAWv~LiPOsMrly#I8`>kT<+@I8ewmm_hyPMe)dhx?5@(3+zW8a;x! z?&7N){lwWGW>_U>cfP+1_c1odc61iuvG!A1Jmt~$dBOx-KvkljQS<)883^F+5NR91 z?D7rIg_Lb$c;%644h2T?;_pMyuQ^MF`oJ|>0}6?9chGOEA^VCAd_$--tDK|77xLZP zhrpy|Tghciu1+;_ooyn+(eLcW{X|Y-*uzK+Hw8DOiRx0d0^UgOQ0?&+MFL}s{z0^6=OoX3>#5>nM?$1Nlk3!v@m}%!d@x?8g?cZwb0e8bW!L*ErxHt% zG03h#-F*w2%P9z1;FoaAOVKJ(v)e0b<1L4|e6sR2=~UMEsyC+-%uiVae^WLjnQaS+ z2WlbEg0-(O;U}Tx#EkrU|GAf_rk|Zs{E@-V@Pf9J26E#>JSWg?bFNjw+N=<_JDnbJ zHEOvV?I3X~wucgxAnHlG;ksO1fYj{?u_Sb!p(S)9ytvyHno~NH8kzGwm~j)DUh#xHRc=7 zl|tOSvG6#efSJ9b<$|TGfvG z3r1T^u;T=`HoEBhf>x&F{ZbXwj*+xx8$~?b7GV#|9QViJ6ZhBCDzK-KiTlkohoNE? z$#4{Jpa~k??yq;udsc%*{T59ukfQ{52u%_3#Y(a zSJ4#OcS(Dvf^S+ErtcU;MhkM!_pgpGLa9a0=^5G)kfSx-|GF<0Nc}3$wXvJCJ!j++ z2CZSG1aaIBI|Ka_5q!vSuwX`?R9w=B7$72!@4XJ-T%*B^R3R7}pUGfW)C!2qrwnb> zo_gT%QcCZ=)a|JlrPd#1DP8@pi+s_9WTCCMy%u^<4_#74r!ku&(18PVK6m{6aia_Mtr* z6dEnk`ve}_pL2TKs@T)k-ve4?8YjxCC#)yP{fiRI{0~epj==1#@x>iczOTB;SrKP9 z2st<^vwL9TE9J{SD0rkk(~$N}jf8wbG;Xm}$-KZiwDKkZascR+OvH(bL7XFwQXqf5ZgJ5S0N}xgZ*XSEo5sqICp&V}Q z*nx=Q*en9TMkpSJTjixor^Im^4nxPp&P$aSAZZ8eTI?H(C4(Z!lWt(Qd};9fMNc5~ zu8*j5(Gtg4ayznfG_J&9s$}_Hfk9&ocJ&Vthjv*w&19-C9xE4CGiZKm`l%T%@DFCo zBMDDu>a~_Eh#7(Je5r9r(-Z3H31nP3qG-b5TxfE9=WyaU6tsV+nZaU`gC#;b8ujx7P-)nejwt z*zNvUx{@zclSuBrFxuQBb75%x#BE!cnkxEq+Y3ewVNy-k3GW>FDFiSJv3nPULWJ6gjN+Ra-bA^^fYctFgo z{#^~`%`;&b?df2_>`FON$-^Gr%tDCWQ!%|~u~aGjA0pNGSBPl(@`i~c`M?PArODZU zY=A>I-QGU;VwkRh%hP@@asa>lBMHGthC$9Y4SX6CXsFRsUhR3u8C{rVm505$*4^c>P3wEC=Jm=vS}Z`) z4!VK)MsslLqLc%6yF<1;ni#Jl@)$=ra^@()jbd?+!p>$ZpF>7@ZlIz1>J9XK4W}Gl zwBmX6>Fu`aw!Cz78+G^KE0!NVxZ~84f?;|Nj)p1enS}3`z6SUtSgyoU^8}`IiO^a* zA(U)CqOU3dVb@0-i~?<>W;Hv7MxigG81nSpWIvsBRUSUS=xh)7BT@Q%4E3{PN-liM zw_ZL-Y)He!jV=AGGcz_DgVJcL^AAC*en@b(%*lA-+$o3u_6hqku+aqZ2vLLDCd&Q( zd`rbcK{Mg7eZHE78@o3%^GRo4w`RvDSP$5-n|q8w?DGHs%o9}=7}~jtmaOu;@E}jx zqT%@q{HD>xdjRXOROF%CQ&akd15W?g?$)yoj5s%@q^B~?Sbo5BAHZWHOya*|A9&LG z;pN%Fb(O>5oF^4x&d}K8=G>sg%4fQ?W+R?Szf~uVBGwjOoPVXx`D) z?b}34m|T(P2>mh7b6DswoV=y)-1aQg?Bf41&}eVLzxT(_$CXx2DOR#h=+>x9I%Y@r zNqq(r)9%J#^V(iUdgb|-H7IYYbNEQNMjUmNv$F;oYDau{^g5Bt%?S~#!UJPz+&jdu z2}OWtk*9{7&rRGkOQFj`oyhA2f|tP#q73C0eb|>+^9GS-?Xajs!u;O7pK!4><*~LH z9{28facM8!+H2`0sg_}-GU-8q7$)_shfPE%0*9V2f_)f&4JFdB7;4(91S{qA9bqgX zgsF5Q{wKhHtzarmUxi%suv2htcp*=%uDjRGfy8>p^M3OaZ?MB)p@=ENoz?B$RFstB z;iOXDU7<{LahVV}-n+rnwuTiz9GC0U)Z)PP{CEvDgmY8rHKbdG^E+BDc`4_ePWv34 z+czjLb`4V@#3IIH`rt+;U*QZ2 zclN#`qz0cmdR4Tf98TNzSYA8c{f3XptaND@PI63ET+0SY16~5F_z z8SVz^0?DmuyKldhE;rWLjbn}nq=oVkOSSXciaWkGtkUc^?{YU*l5MZ-lDHmCswXT4 zQwS&5-u~97&fuao(4Uy8mXOkMcN%9z#8@BcXB6IDD7`0J9az}0=x-|Wg}d2pzd@(X zGdIk!mEqXujurPj`!jlS_pJ(-$9-|9RqyFiZ;sv5_OQl#WM^&Mst}l?7fc9TCP;hS zS8^g{8^=!E;MhZ{XF8a2lHN%!UZiio%vh1wo%S3*$Z4>keP@tMBItvqxplq2s%)EN zxd|PwHrf6pjpn_-rf^Ck63W)dDoLzI3#17_{xC7lr6A}ChzWl91Rq#3G3fL|KV-8l z^mdn4)*m_zHjcHZi??m*J()gASu7Pm2xz~>zVcf6aYKeKwyZI}gWC5x!5o=#XRJ9=e)z=Gb@n^qyROG#+^67PK7KZVM-P4W;cQQd- zlhC#*$ZV|)_eW4;rG_-+1(3^hKwd*XK3i-Afes=!=eDIEu#bgUTt zjfpEHFk5aRybi-|9z!+LwHsFM>s?W-S`cnyk3Y{ZJY{eQuv=g~5p5sEPw%lGGj_79 z`K3t`ZCc%t*kFPEcI`+1O8`cw=YAbA?=tWHG_{M@ZqDLiAB>bHQ6{V*BUdiLf`Ej3 z`~^Q*zs^t^A+eKNI5WvFFNEX*boJ@Kl%DLrPQw2czy0Ce3V$sDJaI$q&&rmp{of_L zQpxZ?nEk(-PbhE{z=3!NL5{>jC$saN$~8@5;og_06PP+kPRV=8TZK-dBjQXH?Drnp zAv%`(Hx29r!T%#etf*m&DZm70-(_G3?_^I0hu>bmPG5>v4rL&Y@{>>tN*x7D%j4Q7 zliNIu6QTz8Q3aH&$WfEH$JN0YP9zsPR(}27q+(jk39PyuMFQBDE9;%+UBlv}!&bO@ z?0Tsul3RxbchWBxpt_?BB!b(jmR1P#stv1&)}@N=KfrE&q5cDWj3up8Km5JXhKs`a_J8vT47;iNYT7JL~tHi~b&2Rf{=?0mW zy0!x`@l4$h(8V!r{<{)6CVhGlX00IT&M)=j@Jhy*%J*)XYn$c?6s71vmowZi$TZUG zKd?b}O?76Jg;B6SlpF}1MXmGxQW5417h)oMOF}=svt6p^i>sm%l!^6%rx)(K6eEC{ ze^`QnEzXSUL35kr`ff|g!U2uKSFIP@QmDTylrLlmU|!<7?#>RSab@Bg&vcH=(;XZ z;s2BAO_aZhVoF)cwb6n@RPKw#SkbyIxn_S;OS~GDGkKv3h50aGBEww0WFmjqRDMs6 za)zhV6CovHy_$-2posQgvPoQ%~{^MO^SYp6oVu2TEbGRE3}X{AUl1m}<OJ{s|`3FAg1hDyLC|QT&8-Uki+nXuJHWVegJ}7*D|hUuEBR33)7iC1YYV^+c?yY z*5XsPA#@@lnJG;(ZSX132h@=v_hLcYDH$HOCwMQ@rq=>l!*#1E#J_qrNO(+z_qiS~ zjd6r7H_XZp%H1hj3vxmRP>+C{^%mH;$?6%P5LINKR*#AN*^@rH+{REZ3Y5JFXfvC^ z*{sQw8=hFGJwVzAE=un(c#@45F#Xw&GBT09qZ47089E94X#4=EExdh7rY7cds5tG3 z$qbR%!8TvA5(>9<4mOZ5Z9iHG??W`2XaAK9BqQBoB!c9+0vH@_&X9y({YeoQO!s^* zC6Zh9{l3W3*x2`?vo?-hTZh|k004ljX8x=BAU;fOD}-74$fBK4mzdLZu`E5f%r4;RMmLu(|$mI)jjQsD%- zA76gBrqm}R7*Utfy=lEd1qDSKc~u4;qt@eDaBj)p?rjbPDq3;=xbZ`gl=t7NA4$=x z1=SXUvwc!ut}}dp=+c^~g#9`0qj#-Hh|anq$Tm%NzFzjp8iD$d8PSSp_5QIYDEjor z!f$x}TM34S<5D(*2AVM2BfOW^Aqfgh#vbdCrl22c^}uTKbbO!TDmv}Hr8M3b-gq3F zf*`w;pPe}n{TLbU>bSgv`qF-{5O^#squ9ouKTG18rLW*;wn@R_wU#qH*5 zPplb@iwlnb^8wNSHQ%&I(0&E4{#m%kye`woU>FR0z})O-AU=s%rlb+_6_%({uH|8+hDJTsSQ zy1yv+qq!&Zdt`Chh}_~_Ig_p@KHhw0ufSv$OWMO^uKm9y$t*I7%!$Qc3Mq2I!rRh6 zVi!nT7ZwYFktG5J;C5-=lFvkyzx0V69{}?vN`j*l-RblYo)(L~U%}0aGJ-;#Y@W4q z7QbR2R}^Zn-ECM}9}@CyUrG{~_0u4UXsY$s?)VOMKgxj~i17HVctb^H3BbumzuXwb0KHRBf60!Z35Ej1xj!ai3<9 zJnHhj6SF8oRJok_CjOj%W~J?omoBv8GWY?Iep4Z?Z}dOu<2na%ap(AUGvpJ8)vHiX ze$8h)&ssm7D_99lEO%dg3NO-KatQ*%ryT+}9U|e%_3!1#qCB_x>2X?Dm7#0fO-s~U zeT|y?GC1iheozzN^$?7n&pN{VRswiw&v|NYedC<)+#QbMCob3&Rh8|`rh|Xnz4DJ{ z$^W;Og%muS_WvTwi8s+AQ#h(J1KKtLGwMn1sd}E3_KjPUxS2IV2_ra#y zsQE6xLn6NV;@QG$*rnl_De-jH z-m1qWbNi{do7ce-&ZPCXq(8m2PkUC8tR+dK`SB+WM66cCx;3A%na;RG=7X^=7g)sY zL!%zm{{eSw@L}?E$nFo{77__U@|px1M*X7c1P7(x-P#HN^LK+cy{qs#ue6FhKb?d8MCPiPzBd?i?|J$kSjb zA(e*t0^hF~1MOKH*%9ctl+lOySe-k@;+ol(v~#x^ z(!>=FPQ98oSyIJBopu31Ia3>WuEVG596tQy!x6U)b>bo2dezBIF3#Njkn-KG=3ry+ zNAYazF+4Oiw>~^5tVxEKXum!sfUVr4wV!(6v;$$-Sh-*3&&qTr_bUA-vxdf^W$6E+ z@hMd(%=2TIdMS2^IS+q0K`F7ig)tS8baJlrG#EeCBcYGQr1;t1TL@!~&a_h9CzZ4s z+3im!l;6ecMSSFhA8HqzVpxnhc6DbimL0D3GZnwW$2vpI@!}T@>J4cK?U7w~C6Zi@G+W5G1$;x5C{$K;afbaCdk25F8434-UcIy$W}C zg1bxM{FV3nM)&Bx=!?Ftt2$$!b@rNT&S!DORP+X)ckd5VYG70k%cq`M8^8A0?zeF{ z9O&kwRg4K^jY?=C1{0(=Hx(1t?+N`~5u~8C#VuqJHdLM6Y1JLxZ{6}&w+S1^WhFsg z{xa#X{oycbRpH5#xyBhi_rd&k6@i0-H%G>yY*+;*4f~D&?RSnMp>L)CdZeI#-}?I) zJ#Pky^=a+Tky{#rKAjcj3bHq0X zKkDCZJ(q#`nX79=EHslX$F}+P6B}0;9v2oG(LL76`pjXPF~{V}+sZ~O){Q^@@Nl>b zw)QU5QirCaVy!M}JZ3X#zs04TmICAIiOkl)CAE{PNj}7e% zkqzbx%$cOlQu}!bsl}ZF(MHqp@1*gUV0oHS>(X8j|6dw@w_~G?(<5LC=uo6<4_}@m zoz$Ln%hLt$TFKs&62ou|hk=T0WRQI6&3pJ|{&hyMH+0r!=cQw@%vLXMEd-+p=b(#h zJghzBrb+!14v|!P32sbhGiAhm4J-)7=bS#YzvT>kmYl47oJVlbpMRuzgGnr1ATYGKIt#&*< zrMP4fXrmNk{pb~fpBAD3i>2%e;im0qRfAz4^wtOB;CN{dIa6bY6&+R|-{CUpf|;eF z$#~zapS(Y~nAGxS4m=zgHESZ98rN$Z;eGwqV|1NTA5thV@E1VfRaYoIwj_7Xdil++ z+jMBbu2vmGpvw*V?ZG!LAnm2_IXxE5EmVy!3Ixd+6E8pYP$SewMt zPbWZ^fZ6_f2_5IQLNr~*1kYzm+P?>K?{KS3zE-2MCCgLD>F)%(PLzgGm zS6Iy?ToKs~nd^9yu$ByKYt`iXwSd<~bKLkKb2>wq-~U!`CP%UJgfQOs4B;^)wum8f zS7Zkto_lLWSgP{c4*GUB%P*y zne)>_zJk;(5~T~LjE&cx+c4`xu7-YtQADTsLbd;o(bPl+%~Xwn2Ul!3;?Ld8Yx0Ot zgr+1wS~S9B256ejkB!^W^?H2f378QNBUW3sMtTvnPF0&w3t4p#`@yUrUp^7oL$bDp zh8nOY+Pmnd;5y1BW5f39NV&6u7S6&0cQN z@8taVOu@;WlcXQ)c%b9i+cRT2$7`+0?Y~xW&o)R3=T}I!bvV;$L2uTt2-oXn^UsW+ z6`0x`M50Z+oGn>shz(7o@1DnM?Z$0yPZueMn!tlsYb$&QqnT3g5q8Z*pY8rSZPK~r zVTNJe$iAA#^P}*h_wXpy zkB)Cdln~T8vP~7U<&va+Jy&cwO({#ZsY><<$&RE%=8iOZWwE)P8P3~YKnF}t!C%5~ zMb`|YD3~7J&PQu^o%!-?z*Tp}ysR5CL|fl^sD*E zCoPZPwZ`m~>{jLr=>%YtCSvc%#fCPuc<%VGqU274t93=*KDCJW%s$Xa5 z1juRrWF^UF8-g8ywra71SLb6>!0vRo;ToT@-IKc6!xR(>`m%4o8CPi%*j4vXFd$WD zsHosk_Iavux=j27mMG-7>$%v`ArzNMsS}OV!e(ZP6kL8&;vx{nF#Y15N^5H~Zl-K# z3H%!WnOd61+LYn4ea30@mQq_&4Dy_g{KeP|WmmOe z-U9Itu#H~-1!!XaU)tcmr}3X~`2Q&+W9n<2e@&tCGz-&c>6BSSc41a=)$f#*anK91IzLDa!;X5=Tf2 zy5BJyb(v$#LmuF7nWh;VkezyhXDxj>c9&ek@TY?qi_R)8v_Pf~9gK{XMCon5_{VEB z(4esx+s5JBPy7=?Tlt^0ss&?hU)sO&_1wz!+)nM)$tPqQB;zYSZ28nKvR%tBY}ie) z-##N4FEd2n$b(jmjA$R?9Lfrw(;(^vlCM}NkMb?YUcqetwJIRkY544kvAG!<5k>}h zU+r)KKFUsd6%H!q)}0|BQ0#d#>vSo9e)o_CPQ|s${FWh-@G9j+s473KiN)yc%*B85K zzq1y648x%EqMb-8RozZxSGx%$0(oY|7wjw1CI5!VoH_$uwJa&zY`@NO=75ueIb8ZZ zsF4rmL2g@}bGcwOLi9sn=BxX<;TBuIu)npJcV9IK*C^gW!RjD7nfhctror4@^TE%i z0v76mTt&nFBO$wlG9k{RgDOX*T*0wj?A2;U+tnDq@%Sa5-aHYwD-U3!#hJddzKS^f zOK>o9+NA$a*c%FI^z_vA2HHfwgRTrMfas0m*-BC7V|0AOPDaCMCM<}eXKb9h}Ch57zF~bSk4sGP1+oYI3bT|7Dkv7aGp-GW2aG!ZW1!w7BrL zvPLiNW|Z5VzrWvjcqvJ#)u)MG=x78T+T58-tAgk&GiR;gPQSdDJ7zo5W*`02IE1=b zhA!bbX{X!H-|jYr})fcAbMq%*pxgqxXb08ljx&-}A^3w<~E;nrbUP2hep$ zC2_92dR!Lh}v(YDCx_=Vo|Y}dF>Ox6kP;pDmX z1xImxqy&v(67J&T6Eo7+Xtc&=TPKHJ#H8!g@wJdJAmx(%ms8j=QoxDQ9_ctT_;6UR z{vsSyI4Ku*PmJ3bm7~-#e#c=aCSlXjrQ`0%$FpI2!u?^O-)nc5bKxG0LNYet zFRRi1_ytOo73#ahiEg-9hT3ayM?Y)^G6VmO1re@>7>FGyzw9Z1GQ83VR9S!@9c;fb zS019-6h0C_pj7=Xd;N4&_o|^%3Kw#;=Mc`p%JV z!ax0FVv|cET5Pcs!I~u0SaRaZ2jP*));hs`pVyzw?Sef0!1Qq_etyCLGXi;0Z&CHa zt{ikN^fVi@WzlnM&%Vd3W0+iNinG}?-mxaC?W+_&*@4q@VsGS+TkEA_4E{WI@&hlX ziiFjbi`%R}(dcqQRW70N*K`!+veDab+bOA=?^y1b&8{@w`=YbOM^g4HN%-9%WqL6g zwBM=AV&!_+g}A|1p3!R=*2RHiLCb)Oa>lR$uQh9{8^C)m-OVa8&Q!{br5o=yA*+1@ zTfNo(hlow~DaI@Dzpb_$nd<}NUA<&0SUyNg+=)9j!UeAypX8%EH)l@OBWQr?266y z_>HMxf`@=)II@CqLyltTo__QSD1|e6XQL#nXDU9BDE<0%Wv>->d3maYMgQ3MV$F%O zJITxGqx7Yv;&#m}aC(>_?r*bi#AtG?dh(5Y@2GgI5xQwRY4Un{KOudl;^4@rs>0jc zc0ucrd9dk|2n>fBYto=AZPp8AG^Io$Kjt8h(tS2LJpqd5ZHhl5P=di|MCgo{p|^N2 z$U+nuKp?JZ!CXlqMO8u_h^2Hv{3?+*xqop2^86uLEEOF(Yqg_cEvdfR%=>x0e6YCI zKpPeJi~ys~RXjx8^C_Z0{aIev*kc3OPwhEXU_aMyu?L0#F|n}^N@VM3$@{h*AG~@d zjor{&3aFie>+?sDNxV%H3T~=2oYx7%r;}V8bsI#Om$1e1Y1kPk+&k}Y;z!8`G5oo$>u)zwpatXZvg^>%? z`{m@s0;M}u7(unVp!$JqzF^0)yv=LMP}ji=`OaW6vOq}*%y`nFc$>)Z$ssAI_;V>a zi8K3PQ2JiIAaAIckr#WJr*h#cMmGAbvG*R-Om`drY9;K=)HfhVBdO_!8|5M}>#H~2 z{aYc|p7d2e6i@hI`sqjOIfM6z;fnlJW;fuNdYAlaDA{x$tYRI3naj%t`x~+>wv%+K z>vIvj=nDB&7QDCxtxDVNN7gnPF_TBo>J!^{)v=pP5d5rDdgj9zB-wGXNB|)%y7nqt z#H9Ez+o>GQiztWiN+SrnT$cS3{GLe&M9#&hS?lA`F`F59_6LFC^hf68UT-rxo(L!- zx#mo9j!OC@9c(@o@iAHWNNdi_JcNt^MH)SK5nMuclgelMskY)Ms6DJY{APr#Rz2nr zvLZ0?tOgiM8Qj!@BZp*wu($v|xvwn|?68aV-S~e;6BSr{NABE|=V9-QK;i3~sp>RV z#r_q!h4I7H$zt6zD>sShTZY71w>8fIH8zu7$df!R7gPY}iWuj|Q&4ujr|#cG?lqvA z6Ibn6Cg5&Hz|&hj0Kx0*Z#nLB)rXu;)_5E}zX5pW_K^tYPH<~;XI}4^yRC%m5hCgN zuI0mS#pti@O!KuGfmF73skvibS{8G70&fh6y1+pNIi&cl)pxv*kUCT2S`<(_UB^>p zRGxA~Y#pI{%mihrBy5^RnQn*a>`lqJHmZO!xjX)4F6UvQ+Ia%obl{7f0@Z+Put76> zG>Wj_&?C8GMQ%_D4OqN18FA8Y-}N>v@F(I**WXHliAr6Ip~TXj5WPr!BM?IC)`wP! zxvgYewhPlaZg9#>!R%e{N)O|beS~1<<@bwt+{yMk47;5X@qnPl=9s^L%_q^qME67} z_^yNW@ToyYQi5>KNPy?3=4kM=`;dd^D%UvqZuQG+Vhj>RvwiG5L#%N{RZj0$KEKuI zNYQW9Xk&xb_2vn(3ot#yLuFxryWEWJ0CYVq58n0es>p&AKQu`B-G8oWO9~?KsxS&` zRPtu=7<#htxvczHO8>6im-)Gt+jKi+HKSMDdtZ7tdA!HXF8q?MT{J4Xqwrczj|na< z2t8DMx130hws>o+EEVkH9qZP?B)3BaZ6;z`vh}JFqMe#PWRK`r-5iOtsPilMD0>zG z$)-8m?Gw4a`_VtFu|^tS6|G3;Qh1f+K59doN;5WMA%BGG+;*<1symdC%KRnDa6sw3 zZ3J3>rv{71AseExZHtw&A46hWgewM7bs zgL6cLExxG%wfxh6+be0VeN58ibRh}tzQD!knrboSFWbe#O-BI3?_*UR9vU+HLc2#% z@p!BzT(S?U1rCc-#*7U=eR3u#DO0ly zeVOBzZu86MVSDpJprE3Z**3=ZB{}0xp`Z_BOc@^>e6IBS5+9=2s zsqXKBdYm=3A{yCaKb=vHl%9V~Jp7!qg*F+CAArAHM4sJwj(HPuvKva3wf}f!{wk`9 zh-=5NrZpV5BiUrp(R2H;BWVChblW34Zj8vd%=C(ZF)#{GKQ97utg z>19lWgJ^B-TufvX;vG<~cWF+u z7yHH_)2Tu>gwtjmc@i(G&S$lmNO09O=sUu^TvI#!OhS!v8@SCZ&(tz%S%V`d(7>;a zzoU`5%;vwVj%Rj*QUmbVYY=ui4u|SK&o>*n8HQq9SslGg8b#k5IUJ7hC4W9zW8m}7 zel*=v_PLHU+&IFz5zjvCFRQ?&S+s9dFYYsvVM9ChOTsKQV>9b>HXS|q+WH`0qT-3+ zMf@eK`T*fduxA6CJ%!3zKM8F@H!*E8e@*~Jaw#;?R#k(&?x* zZU^S7*R&F2V_u6bmhX=GJTAUBvs!mr0BCRc$cFs4ojtN6)(Pu@v)Zgil`webUthz&59^@`QZ&ZjSSVloGToW_38f$#U zDdA=-M4K5B@m;%tgpE7`W%M@dc0Gg#iY52XYnww+)pZlt2Imc4cZ-!ywg&t|M?yLM zYv#5V9@ltwW%;Y{&F5e0Gl?!PfGa7|{mE_j1o!H``FUstnCzkr0Q2;a{#GK?JQhR(tj#wEk1yAOPbwYPQLo)bj}o&f*I;t z6;n}ZmS;U&Fmjdr5#Iq)SvZdCLG$dQ!&kmA+$W#D$ldaelOMHkJ5&(QwSnC2K8hpF zH4QC9K$6(d+HTbBAXLJbi9JqUNTMz$HUv$mA>wME-w}agP8Tq>v52tEOrHib;^d;j zk*QYNXmx>aAqOn3h_%cF4xeI8WjMl}p?NP6R8wPfDi&HzT!IStp&;%J85!w%2M+_= z+7?H2O_hUzzY(T3D1sgR%}OKGnCQM{3*5Eb&zd-SR}b_VzBCMA@-yV&RpmNZ=h%;?5{DBUws5Q1hC3b9^>qzGV}EBi1Eiz?T_U&O(9ck|6Ef6TcMC%w}+N7JS@j~ZZ!O3D?| zpg(uyxy6y5H~807q(wp;N;$G zE?A6J5-Ip^*77=2Cwyo`3ZYL}D2}}LsQt7GZ*7##8@2y9y#Hj0?isz_|8{WP`j(jX9k@!1rfsfegZ{xt18pYge#B`u#`gyyAxkF90FD&b32Cbrs+ zp@h)42cRz*8>69tgO9HXT;rf@DlaNR1gpLx_Mgjc>3GQK4$Lk))q%*F6l~!nh2)&u zEIr_jU?{TFzqX-buFOQz$%IG+3>`Oa#ha%-WJl5heQq8WF^EX?k~iFcagPIb)HyFE zNxdo`TUTP9=nft$BjodJ-^LO2*<$Y>xPu57RQLaAW2_}x!k_^9pNoZ}jM7elg z6-!;FBlrjrJ$v$b-nt2+b+&SG>T7%e`K+u0`^%u&r&JUw0!jDMwz2a)cB4e;7(sncAJ*l>dH@8w`5)JIfFpq_mK<4ZQzId&8DAN7JUz|SQ8?NR8J(t2{ zkDFOFPTfID-6L2Sb|r5CEB+_1E5$I3s&i(P>!Aua>Aed}Tt7?ZdX&JN1N*G5sEciiH)qmNocX^qb$oO8cktA3`_Sw;loMSd$*3m{?bDOHnIpVG6Oh-!Iu+DjoLjGFh zeh)Y0CGy@?G5#JMSGT-FNj?_J=t7Mp&!H9H#PLEM47HPs4xlweNp)x;TBwuqVhar+ zA^4(Zv^`P6a4SnnK6ll8!@+9aP=rR{86BX*HfeB4x2uajKl4DN6TTqzI(>|j+q{#} zTh_|tmR1!mUh%$k5kx^1wcM}DUYe1@&d=n;Fz{3NmEQ+bebwG>9xbWCFQo9u=mMc$ zNH<#ws&xQ49$TL_EDiceLoeNfa%}k4gj1U2h4dC`H@q;XlX6G|36Q$~cA5t#Gq3n0Q*M9T}ET*RTj-Z58aC`%=) zx}(iApHx>g9xZ%n1$83y(+5L1nJNxMK9ap0GPR6Rl~_!pHjAffT`kT;ncJa6G6bv1 zGXG)nlKSOAZ`ARc*idg;vq(ARx0Mx3mzK_*v#7?HO`bN)vguCQJ-^FdspV9&tuvsa zfy&J*)Ih;0R5Hc`Gf43EHxQRwWK18y*s-?uz6Si0(Te*W)T4qFC|i-(b>59=f_sFU zKOC`gIxKSU@j|wyfLC0>LNK=i5zm$_hMys+u(wXMrcE%r-7_K%vnDuKJVK+|mzZLC zwxD}nnC0C49qQ=bf>0Y-=Ptu2Sa#4niKseVtatcaR{{zuH}pTBYD8Ya7&+m9f(khA zBwEanV^8s;BX-+!GZkd9=I&;%U#_)ea1TaPKw7zj6pJE;OF=RUq}LNb0QddRcVf{s z50)*JaNq}fXE|EUI?JyRUTCPWV2FrO5{vh!2|3%T_>-FGLncyF?XR%BkZ-w1p1-D7 ziML~OSD!g8QIDyLTCnm%QPZ79O4WWXQGH=sqE0RTKt`y%jq~#ojc(39u$sy*SNCL1 zu9IF!5oD&ZZoyJpbh`6Hil&c!i)PgrE3aW?=r0ag6r}+-<i77`nxJ$B=j9)od>0 z%fC4l5fm;M&17^0N=4E&o%hVAbCgz3f+4jxy^8_#hw_?+p|@kQpS6gReW zF({usYqty22R^_L(r$dv)fj3U(u*&0*Gh9G8a_UVPZ4l|+iKA19p58tjH)nQ0T0S$ z)}}}^9!}Nwqj_e160y5ARVmNq7}5i!ZK<+ZK;;G%lTpGGp-}&Q@oiAB9B;h0nlxJh7LJn0w8~)9+&fT7=*o~%(gse) z^G%Vt+0sF?MPFUi&OHtTembS-91zgWk%%;s)usyO2phF{Dpeo9OUnL)fx#F0^-P0f z{#k0CR+1-%DUEyj^|`06STJm7gBE7rp#0&#F(<(L;Y2jdHHBFPst27SBEne|nX^%SYltw3!$cYA6lXBClziB}$|quKS;V;A43>emK0 zYP5Fk4?57vigwXca_T}s`7}xBVn+tc-c35(DY%BwZdL*G8y@Z5zp12Q(Mo3>ia|It zN9v@v@LH{LtrS)$FLrH{Mzg!`4z5!84Ds@g)N(JvBM4h}N1rjR@R%z%Rv>b=D%q!k zA)ye+XSwvlE0b>3r%N?ov~Q=3)@(-Wv;K4P^uOt6BNnFt>_&%JfGCpTx{vf4UP2(e zt@lqT*2beL2y$s0SqJa^3Oo;RI8JLaF(*xtlUm*FGzP<~<5M^sD3u=*3%n<9>quM^ zWcxlCP{Y`=H}HpQsY7uDZU|Y*;S5x5G;@x4vSx}#HBH3v0Fcq`t}l_BafQJuJ4D^ynEqT%IMVATLBO%V8Kf`yq9_UO`zk?a=O8)P@%=Xj+Rz#-#))Ku;R<`f$(+?N-^2PJ|J)_$|J)_{B>BjBJ_!Yp z!^*ey^B(M8s*E!yvMnUVOJdC^*bw#O8^dcYP?hqR-kii(l-#G z8;D@`>k85HWWDixhbm7SgZ1@qq{{WUPNb6Tm_41)$09}<(7X@;w^H$yDPj>L^?~&F z-S=eS)DX`zW2a?u%kM0j783FH#>!0;PLly^SHtX6A{r~K1&*V z(y~`}-eRBa5cj41b{`?rS`?}xWQI{CHEKHm6$aRr&Z}W=-x=oe-j{4}{sK4-^Umuz z5A%{uZ4>vQw?42pjj82E+gTc26_O4Qr@BK!rhcRyNmdEb+Ad^Fg{)X&C#lc!Q1yCan1y!JlXc0i=$Wt9a6R_hB-d^dvz<{r z_Sut(d7aKnnwV1cJY!cphNqxS>3`ilqHnq8QAg*Fy)JX~$FkLj4#zy)sU=;NlK0a| zkF1#Ex1JSgISv{2@+ur$Oi;hHon!C<`E^G!!rsY;upYr_hCX63Rh#7}qiv+Z+G33v zwLh)ua%krDy};g7i4YME|w?Wk%5dUuZT!ZW{YIxcb}Hc);SVU*)B7NDwH=`$kLWa z3V9fZ?Usghq_1?a7mIt~H@OlpCL#W& zrJF#2i7v1G3+t5aXE?Gg#%YN#TiO6D1q1P5s|vhMoSVuMJTRDK`x~f>^dnBSFYhnF z0ayeTdrCYgF>(Ku4#p%vFZc-b;6Ophwbjrgya)yvQ5?<=>yx7c`@?*n0Ruq;^i!Cd zxzho8DaQ7gtN?WMtc&oNw*W&Eee}sFkchhRH}uJ|bCy_Y8SNsTMchdyjcA7Dm?edi zn>;RjaV<)N|cP+)uzn@cBzP2RR}_cQ`lCM|H$A+^%;yCe1y>ced3$y@fos~$ zL$k`#AX6|Wss4$)a*)9dy(-LUdZ^06B;`BFmw42-8Yc=FD6KdWT1dhA)#1>xlE;y7 z*8!HLO_wFbnx$TiTy4fW*QL`p2L@TncCK9AJnK#|B=+Z->;!QSM{mMQ z?O0nhlR?%CP$DufQ?GVWgEEpu=8{6K%JpP?Kbf_VV05wM@+nh&rekC9^~o6rkRRxC zFt2i}3@W$I_Qs=c9|7e|C@bc`>A3zX7g~Mcrb&XjE|u}f&7r355s1AT@1{XCt0Rx zeh+G(8TT-Tp93|db$7@El!|7vmMS;|o~x|5$S;x7WscJOZ;gwuXBviisdsmb4pfKp zI`ECxcLWm8!ni&WBpIyv@h6c-H*l`T8||c00F<)K+&)jbO_C_K6e%#~KThw){2K$y z|Np~BH+TOUP25IsC4JBJX*>4VbyMy$_S36>Hw_7welzi!Xth*|4I}`VRU)Jas(@}axux?*uw@co^)9XlI6<3 zH|1jeKhqFe(yn@0l+OsmE2i*)^FCWlxjTVo1?n{Lmzh>sQQ`$NsTe-e+Z4i%V2jVC z%G>dUa?J(+b-TG!9^sn|KkWF-{HCppv}ONy%vc5ETz*W{P4+3-anSW1x;|FW!T=}o z6AyKEezcKkx7$o+Q?yw1;OqSh?F&^IQ&XeYhpl1Z8tAb}%ans`py`pR#Tj`#`}MmV z`n0&`0tt?6A7s51#l>Kye=*|lS3Ow5bXRJUq1XJ()Vm{Y=CR=8dsm&!{c23@>#T8b z(hhA#9;q-$(BDp7`8d*$>7X#JZ6nq*dc( z@%RuhbZc7TM@|MukFw>r1^Z=`3@lMrDA|y0u5QP(6@6!a`PY`q?IlR>k89CwSp=|| zQByz0uOr)ZvT<2^SunY~v(9*|ME~j9m8$2}A}}*lJe|V+y`*cU>1FOT3^;a`Y{p&_ ziz|NCqk*AH5yLdU{_+J6Ld;K>qP)IXh>uvH* zv{18ocXS<--|T*fz{`?U-HEeNKTch|>|d)*%n|5>=$zgXnc+g&?@5;ZW8Y5;y|6V6xyrGt%5z8V># z!!qz*)OzTs{G)QrWWY2^Y?gIn_{#zq$*uuvD;Cdf$+{y1=GURrve8VjI!kTnV*LaXIBOHeHh*4Q~*hT%n zPY9huM+R{S8zm-N+!^U+)5iSWi*O+0l<&bjz*a$V%aH4m`gFltYbhe6Nl$}p3m4%o zv*}N1hlp%X?#ON?+1je3dr6e7I8EfNoH3wH=s80LgF(^xRp;nEJPg$&LilCHpV-5S zwQpWDMSXu&xGEvh$!pT)-hHWUCc~mO+Fp9q;vbkE!v6K&ScYO!K*&#AQ;o1YE{5`2 z)IC*Bbd2w*sn$(^Q@5h)Tu?~60r9PwOc$XaEI^1-<=5}(dMp6$2;lZeAq^}>%fHBR zYw~f#eY`z3?Y|`=6!b&L4tcpFB$NzMy!u{ZkMv;8+gm~J52OmjINTeq$DD5>h!0&O z>=s);TH$eseRON*wbv(E7RQHI(A}1a(X~p37*a7E6T6MunN=1W?L}oC3;2e`LvsVs zJ_GibFaUFZq?#LLCTuT=RkNChpF>$Tdrvo=_5~V$8HI94b!Yu#y=6*9Ju`b9%giO= z7Z;AQ=LAcYNi}L1hDG@PJTsU~B2a^EF2mvn>a;>n_qHST-{nQBleB7ODskWzIGxp7 zM@l4MG6$aF<0Oq zeXbzljX0}UK3@0x8PJcz>h+DC&iDbn(xEiPsfT2pA9Vu$!G8P6#x?}3&mudY3_AHP z@Hs#oZE*Zut9sesyuv$PmRx2rx;p(iA0#r*h&%0=Y&K6qhxGjySmZ=OIRAeVSy}&Z z2u?8mV|paOS{mVlwr+QR4_}%B|6r1r;Y6fc7$18^3&{>?=`K=Q1cRNc!Rd)TxpbG` zyt$`O!B#!4pl|N_Oqq01BE7}q5Pe(rA^)G@Bm$jbM(rqpfvl`@i%VTGz#0pBykpud zqt?{J2{{OFIiqoH?9YzhN$K~5beE9d=Isr=k`seLBc&xtg5>snGy7(0`#44 zpvFP{&M^P7XLB)Q>ANon|0vf2D;NF^NTN@110+#OO1LGihws96`=oDG@k3$jeLibq zo%R3v%I#pdg0S9mxQ2cABO&?VqoQy}*<3_yQJ@^=R`!VWoU^530IuI}i-=!ssn7K@ zLLQexuKVG)d62+@z)IUb+4~T7OQ?%sJkjfJZ?GS?Km@Ycr9o2Tsp2DvMD?;MV9BtD zyt0Hnv^d7ad2}h<;eT`f`2PvrBCKcS;H|5|7I&O0?9V`QZw0PbC>Hq?jucyFqQ8qDDdnF4Z22H5tqQd@Yl<9m;8#!~G|Si{rNRE?Nnd+)UP5_jg+9F>i?-`-|4^{jgFtMgZ5a>ITr`|BBvL* zS^$-Px*=p5ZrDJyyWGivD!+oR}mF4+rdkS?&>Y118&m)S9RxD4svFf(= z_EKh=o$D#7Q036tVYrq5Ys7r}c$ZpX@98QjbBM^k`2!2e(Qk+p<_2Z`^VL-|a&e?D z)ScXRq_8)FM5(P;2IoQcV_8TSFUOEdR?8@ERc}f@f@!o=B8(uoESR_cn5}eO`wPoz z0wm#bqqXYK%=7 zCtiWGnBwrze&A~YA=10^RlcaX)M1ue>F7z{)$ii};kvjB{UbbGN#-sFFBA1VPt)(;YiRTx zL;IO;$&+#FcBxmrysxGepMKDgc=)}fwn6B>>BA=4o+Mj+!DMxenjp>RJvNU)Pn67- zaJ>ZLcpGk`s~^ARZ>kxPc*I*Zk2C zA(#kxBe-b|!ECO&Sq!^_Atu`Ha%bZRwS#IL^#+La!zWxc`DMBWrRH z0v&T8o^0EC+Xy3NIg2V@cC4h&qKf@La-$}fbU14mx%a#O=AT13`?pM^L0Gm;UuuEVGn zvr&DzrM%H%UcV;*fsX-1?HZFef^A%s82Y^9yHSi5FB(Xu>$RAcF^B8PPFBIw47GR> z&u_KmtBe|#Sgbl4r70JK^k1m=de^bz|tvLU(s^LR+$#(&jnrL~AQG*`6CB z?c3YRk9$iB0xWL7<4X`m{x!H`;({JXt#LnA@va4ieW+k0>K&L;!D9wGnTMl|`mlwX z_QJO1J^I*+XK#WN{_o6m*zNLvnd$Z$E9cajC~Q<%W|~agNyKwppl^f6e(_&km-Sy_ z`oC%3AZ(d2NA|9v^HFEms;D{ja80Hv!zHy}o(fW(VJm-p!#YQfL2nSDw5tKj7l)>} z=IRFcT1{V(*37UEOZn!u616MxsfW}ga>Jx)>>j`?&T3Nop`UaYtUw?HJ(+a(*BlPy zEWU*^hyQ1<@&o&CQ9;;BI0W`ZhXRTB-p)n3|67Yl{&!9#2-6nL%AGSORF zY#P2)xbkR#T8qWIrLkOzAUZfMH-b*_mroto515kG>WT_aKWmnMhAdNFeZX+@MNHHy zlj#&MYLcKN6MFq)&Lop8bhJn|R;>jV6_tpczEo#P1-olCvOa~NmS|Qn8rg+8?!+uY zYs+l3hWu7i6DPwAY3-9f+rY4s|FcQY*#ystE!gX_WT5y;Kz%)v`H!O6u7TfX-0@J+ zeRPb!%LnbOk>9am_XdBJKnKgXg)tf1eI{4h%mM#fI~4w-!vQm}M#nNik30OAM{7H! zi1o$a>*-YJREm7J#*i~xVvYP=H;rS^)C82=pf!H_9}#_ZK;HMm%6Xbpe`dj`g@Gox{jj1gT=+qOb6lQI9Y>=iea~F;g zaN=)Sk*8rYlxoGdoN?(tF%lT0eY@Vhd(xem+%fCw{&p&^1LHC;u`U?r*+Q~kzk!2m!*%_lwYXYI zXaX_J2^>&6nRom_uN(j;2(8}pBs6{Z={!qBd9~3w%{k>+^iAstx+sTTuHD!ZM>(s% ziGgC18Bai1n7T*^uJ3P^{vB%&Tq*5VrmRQf;?F^xfpQl?e5E3e&L^5a%_z5vO~aAk z3A-2hQ>|?rbJ$LoCMK7fdDG+1NZp?FgLq9o=EQj&^A|ojhEEetoKC9c-Y;4&js z>ZUi(v+Alscm&7EedPXcr;Q)UKOYQ$?A;ct7IU?eIxb%#jYvrxgjOk+=c8|lVst7z zFST>&GF_iM+>=zD5ia>MaYMl1sO9%^dxLN+M!7IH>;Yk8=6-194!A99oB2oJCM4q9 z@2_?bio)GGWE>cyOz&<{^c`EaBI9xrtD(6kK+QLqS7JzIiHdZ?_*DB9 z1m$Z$W)=;aqPlPH=bO`QmARWOm#bWiRxu;qEK(#}#0lcHN6I@?DRj(v+GeKt;9kB_ z=4Vdc69=qe51jDwO3`UWm37tbzCRzimGn1 z5Z-0x?Ms~zOeP_5I(SD4H+wp~2wN1dQT&Dq;=VULADUGgNK=cD!+6QN+Ci8q7-?Zs zRCAJ(DiwgxDt3Lc#;YL5ESY)v@xJ=RTB34Maiki5=Bzd9GcGaOS)D1`LHK%%XA$q^ zw)HL)H=_MJRZx5K1dS>U$C2e@)-C;ADgXUHna3Rt zR?JrP`!?-23~E13LbvY_C(UXM-J0zSc3fJeY9iW1jZ$8onz2cqxqgRo7ZH5>fLd>s*Fb>TjWF!8i``Cko?Mv@ghP+x0Z_r>^>m%RlkK zkEZloN>QrO$`8o=Rbf{GZZ0O^uLpD+(u$6ue(Bqrr1i+PN;CAhZxnCEo?Hs%$foN< zf8to%QgcNh)Vedb&{5TNYD9nwU6MH24GzNrgG_Zf0dGQnx)ssNxR|Wf_j}C z`b&oeqQGby#CU~2`Fy%0BT^Ib=3iil`2S5-kBgLjHc2!7n=~(VzoS_FGU6p_rt{Tr z>m)Jy@OwnuK}Oj-%mqQPLhZl~lOlsidHNZ(uh2YnpP5Q5u>5(vH4%#&3nb2;B}&%<{&{s|tY>YY{s@qRX3QCkSpE*_~b*&Yc+ z%v;A#1=&e^f6;c;UcDj{v5vkR1rH99VKh<_s7K2=W?m*&|9e%qf3Av|gKmYBiTEbb z$z7DU?UqwyxxatE*>J;&JG4X+fFIm$2{~Sw=b#P+5IAt(rX8MxYayJm zHMNQodu>K(AR#N^k9>j?6US_KYNV>tr1HTpy?`WXBtjdHjI>^#%|g9VP3Dumc+KBl zln(|Du<0$WWqU5+ZP0B~h`Kdc z(sX|L2V)F`dR$>In?yc!h30xXVs?}@q~C?KeAGrL;(G1W#H&>hg($kXkDxSkAL-0EfW6^H{%JN>vtCP0If7eg_PsYd`WIJpUQJ>OV z$xB}5!A#mv^);U)Mbc?7PYfV^>cR0bCzB8*q!%54@5nKqiz($glgy{Q49K@FV%%rIT)Us-QXvYMM=mDZOcreX4 z^B+liFo=NCCAOuQz)pIYJQ1z^obL^_iQorL(fx^UpxJhY5^WLLOHsS2rTL)^f2{)EJJOh6ry32xSCxb37=o`Ms}<#!gLGX5 znGUSd*qI$oQM649JOwj7Zev-F1OP06jCk;{^}E5U+Wpqtu<#KoqR)SU<$q-x#RH0) zR5vx)Nz5ng>ypgj-HB?j@2M>UCpTyz1{ZUq{m>6n{<3w}DVHlj9;e10&zGTth6V_^ zxw!U~{07O5ThHZ{iAAJlz!6#O(<>JrcN#DRMLy@omBgq_Y|OP3dCbRUrhv_SH{=DF zVUs@8Sz6DJlUln)hz9%^i+hks_iTznk+4&b#y!Jg&}Zzt7~zNN4{ObqU<=vvu()Yr zSc~S_;Zn5$L?!xh4qRU5$9YR-#v<8j3m1MkKU~KLxkOIA=MP+pED<8$q1sV7`vLQ+ z7$bKSW8YCdj=h}d0iYmpa zYJ0|`n{A?$AMBZFLA%D0kBf_ooj0lc#8%*ro7r9?`1er0(bkt!uy=IV8oua(2C3=- z8S2bnvTQUdfutK4@vI=2-NtQ7iSWLjiqFX)!ada4O#!H%JRqMTa)B8+Zb2eFZ^|8Y zVj`GjegU=yGcW9TIkJ96uV&F7$wS+UT7-ARD7itZru=1U^g%LbxgjF%wSg!FCwqw{ER zg)Ex}Jw*_si;s&$s35xZctmXeP>8q6<M&9AJ5e0xqAkZk^X1cU&ENG(J3Q04P=HxsIC z=5ou=CgONP+jgE{-x1N_)yLmT324kuspZQJ4}dc^7)!zewB|&jH;2tk>^o-?Frkcy zc9Ez%xdn~FN$KHdJOoaHKGaKmdOW*bRoALTS2_p4aX$_cXVaHfvx&5(I!@XigK|k{ zfQRhcbBnYGZ{M(WOn+F%a|homE@<3TpnCJ>Sg^+ly+VB{GT%GgczYPfl31_LrO5r8 zE-?K$+0;!o(Ste}=TpqpZ{~GM=9`mik*tj&_mFLw$oUj2hjASeZUEcN&c$6 z6poY%6XPoH#W~Km4drsu_TRjo5wAApABwhq_>?n&TO;+FEK}<@KhpBlQ{=nWH?gjf zH`0FWKf|!dj7vC(uvDybC!%Q?gY#tu$A738D~%j&ztt^!i9-FEK^XM|<8s$sGEZ_& zCb#z{hDRvBVzqoSk?HpJG>v|a_QGO|eZLmtfu=tg_o5IKgyRRdCh$yFKUvP|l{<;= zm92T^>%t&(&SCD>fgdgT`x6^Tjq+oh)1Mm@fAr@KRv`Cyu_N3ma-#9_pDm!lu!JiA zV4shB$+ZVn&vNa@gfoN(U&J>Xl-^ikH8QZ%*QvD|P0x9C!A!K-;oqJ=@bswv$K;Ny85p7`)9@B_+VA z@(d-}bay&38}{@*iP7mZ$S1HEX244$4MXiwTGw&*+hi=^TeT{m>qr%Q1)+w-3DlFf zqWrV0V&qzufqjkp(%4ix(y)&(ZwN}i&bMco8tocowuXG_V@ZNlp=KvS%MO?i(kN&; zT15;zkndM;*VU_v!2nYUI0Zg-xD!(jI+ozE)5OdC7*m$&ILb^*1%7gUx z`Uu>{dK+f3ZRCbwV}x$d%S-^9peyB8UyXg1cqq@K-(wZ`wg7d*krGS-9%~AZn(W|o z%tNXS=*=_#T?uayJ{+l+GpcA6`MA<+ZQlGqlTd6jX-EK{p6e;og?+!S6$Q36B^1wN zpJgEw+cG${SSX3u!E~9bNxeoZ8Sm3F>THPE9hZtXJ;1-X%6^3Crkqtj+`>S=g#@u> zn7%X8Mvqu*&+Ybg`lHl-9xj)`s&>=XKj!T#9Izw$0LSi!M0(|X5N4xCYBmAx3IU!> zGOUbP_ishUgpO6Mub{>BjAWkGk1|oa>#TA=VVi(E<}Op;;E=bN_O#;c>VU^8oxlW7 zXSwD^NkIO~SG@RNJ;JkMm*X(g5w&Kp(WgNj!E;+atv8e5pQ>Nvgnv>`Uac>_Snu~> zj;tT(3;iDc>G_K$mfAHaqa;QFZXjTR4{M;F6N>#c3f ze2v2b)M@QKPW2ssPU_vg%15}m>NT_Xxkbrkm|{bdytqIv`kbSSte5B_i(*K3le!iM zYs;oe<`dy-Vlhrn{C-DfwahC>^NXx{nXsuyxI^!;lfzr)-)6O@1pbu^P+g`w*ZPu6 zC%T_8{a?Bd>CiIZGSygVi*MIUuKuRBULJo!J_?~}S8r^pnfru2*XNTR=K{eszZ8`N zn^41IA1nmEF?V+Wyt=~<>i;YuiQPMO<>vT4p*6*K6ttyCt*=4{yEJ(@!h}FyalI#2 zO(y%Amn{1#c*S3TNve~*hbQqeoq*jzGCpK5)>UvggH|DW&AZdq-MrB?Iq5{~-N6iR zGN(~==M(+W)_or}tc57PsE|p`Va-2ce`|VwQg3;{~bea z3{bq32}ST5zrM4eFyZQ5;hDT4s9lFzPU?N!%T8zsbB_~q*!=eDLT=QtS;*VdoWS1@ z7BGkOrOC=lEgt`9ow>Iu18#Tc+ow9-K6lGqXr@AXdN`4r*D8j-yWwz;ZDkP>Snicm zDNKtP)g=~yDV@{2eqZ1wGLUMooSBm;T>778B;TK>FkQl|ma2s;se!0JS~u68Db* z`D+sDO&*DjXtlf`+k(O98G9+Ue&sCtv12LYi}lR{RHk_K&8eHZQJ`BpA&isL)$Q=H zzBS(YOG3r3#HNhp+3Kg8LRdkyqKH`|GpPK}{A~ld-9=xHg*?soawnSewD33Y_q{$8 zxgq1vA}-LfY>2uwsgS7`LNgcU0oPo+K98l@j|mtf7#dU~to}w>&p#&w?PHbd2@d(E z9&44QYQ7c)5;YP=XwyEl;+LXl%`(%=@2UO$jo{=l6^fF$ow`d%o6HaS@TyqE|%q;e2ihAVhBl0j)FWfudgL!cx zKqH5xcPoBuQQR9rOkkZK{ULqN1o84Ls(#R;FWiZk^~1zS+Ko296yZTll!ua(QxqbN zrE3@8DjebwMOYoTr(W8%tAuBPuWCNz6kuRbp1z6R%s= z`3@v^&b>O$U^j0)FmJV_ifc>tyqwt6x@qadOc9zqr9qJb}5-h?w8pQ}b(Vu4> zkDzcX#{HH#h7qZn%+WVM;C)4dvy%-3+2nRH>$^3CkhD3@$w-7-^W7#tsF8fOZ1Qoe zYI?@+?CgS&Q!6BoAl7+O3NJXA0%lFy;^VjN`7N-n;<9K3m+&_VLzF|jH-Q^3lp~`y zxLn2deUOq#U`NBUPQF)@9s(zhp0+Dz{d4bip-6)8mm_#%GEnNwY@{fH-|<5b7vvJm z>#jfUEC2W#s-!@VO1d)9xyR8)dVTN1<*Dlcf4Ta#0M^c>ALuEz?w~f_4}^cOSGbjb zrpEdp*Jb-VvggF)yBP5(3{vWrWT^SUb~9{N-Z;Al%o9WND0An|XiLf18#rwv;KZgb2Az}E`x(_E8hQG^6dN7z<%rP zny;Tp%M&eT$_-gtmU#-X+41}*ssWCwNyNsrKc~{`-FA*8;r_nhD zmW&&C$AnF<24Ar)Isv+}}A4$ZPZ75^%MW3-*@gk+gX% zuY72IwhgE5&Kh4dQgFprG~66*6r7xFl@3vB`wnlWQhn{G+KrT=SFcO4Z>MH<E< z`hn?BT5PHtEkMsx^adm~ATqd|mI2v-8(~{E47y-@40fx*6*NLa-Vdfou+`f8wH!K? zpzsTo!hSFjZvA3^qOt=wnT2`JVTQ_3wfbukP)aH5FFKU|wcskj6~fO&Fm6vc-kQYv zWO?=0(@t|E?H_fsu;Bue5Yg7#erLf9d*LH9qZ8uV`+BjcwO@N~5hP2`u(C#4dc3vniq>+K0laqnb6lUs=1q!_5pEqT&$m zZDWLo^w%uRpG6(7{_f83lDMLx3OlfL`VmtgMuECJW*zV_ftK0ry2u}<4IVP^oiNQ@ z#1-XiVTr=Tf5pC}Lg`$9d^L;$NE{mM zGPa6>VRZPv5tm4e5NKZVc+`VZeX1 zJ*ITR$kD=OE%zz*yI5Mdp+@e`sCO~9jRUG4|yuXNsc)KuC&?S`70=h z3fCCF>GO`~AI#aJioU8AcL>bs8}GyR#BqMgtUFiF2$Qmfor*EN=T)oD)1cS)pGwgC zjI*X0a!^ERIdbXa_igMbdFvU!x+LS>)K~92B7W6r5c?W;Z;xAk_h22_b}6$gl28W~ z`*Kmy3mD1c)%9X{f81HOob-jLu-KP+A}Lw=a}<<7Jt`1VaF=Y6rG!c60ui#xbsP?_ z+iqm4odLtyY&}-SjaCNcV+n~CB-rA(*1X=|TyG?)=amR10mEcMj0|c9R^E>L#dHz) zj^A|uh!#)!MU~x3i}~w*(oH`~7^AGQXY(@Z(($-RHvxqX&1&XgtT2hhf*q~XK9elY z+lERZNpNtIOi9MQH|>HRNSt;p{@%#%)qzm(C!VZH4l350yP8(LLJ|vg>#roBjLk>E zPbGYeo-6i?p2nHqAOi6YDYvz#NM~+jl++;I2euMG!K=~zpc$RN8BVV3pQv+D=zU6( zvNP*UZnp-i$Q&k{u60t}$JOUOOO4pTP;_0xsmDHe(_#1mwbYv7j^R<`x*%AO6oDQp zn-vI;RNC2+=(iv9B~=vS{~#&qJfIx+%Xalq5DH21vv?x&ysp3%S)wA}OLOUOmGl=V>pwhw4-Pt#V)lh%@tIx;_~j3~0E2|2QuX@G?pd(O z)DS;~XQWh08x zb9^z9wmU2vs8JzjsGa|yO_-!byf%E)k@(>S$v#?%(E@Liva#yXNwdGg?bI5$H^W(X zQs(pDl0f_&`m|or1Ai)9|JKwcOX7eP>rVY-C$JnA3@_t$Cn~KY`yp;qT#y7iJZ<*axJNYy;q%uw^4LwL}Yz4j|;t$!Wz7s?f zs%ngP3l>y&kkgsVXwL3 zzIjz|ns@G5c!MQ1>ikO($JRozQ9NQEj08%$(8veC==yy!#sJwiCKK9T?muKVw}N(- z@5O03DN1m}fMaPWv8tG=K{Z!;re{HCx!J6!Kr#`mg6>1YnI%o9zHrm~qo-~xnppwG zh~Pq9Xv{!RgVw)i5r966%m!djp5F_xr@&Y8Bk|*{*$KJHg{trfb_g4cS#NhL+8W7k zGr+;uzneBU`4g`k^8GFHKoS8VR*me+-8XnTzJIH8Rekl)+CjKy6RTL*drO@8Hjk%q zxYFVs26(Hq`*QF-SV96ebFTWeu&DB-B`q3%)aVpg?UT5yRk4{@GaTt3^cAkm6S8t4 zDwx_aqU5&DixcVY@j$+7GLvdn5rY<<6pOg;G3W#ZpNd*ww(y7H<+ef_>Uz0t$29Q5 zbOV0#_f~}Akr#KH|E?>Z3&EA&iZ0%)G1BEI5YbRL`38am!7aS`BR0ye|9Gkmo<`H` zHq54-aB?Kr6mcVBY)WPwo+NoJ^<1p*PUF5FU;~eo@S3t+$4Ez7G;o)X?h|q>grsWX zuF|iGbF7JjIMNMh!-OH;EOo{^y;}xhdSZ5TZA*5r#zET4Oxd|b{ekIK_c1@7RCgiz zu@a02_ktS*l00vPntX1OzY7&N*809`vzspT>(?m5;UQoy)R(~g{s(*Qear}p%c7Kk zEqfN3U=e7>o4o0g_X|Nf9<}8Wq2$owNgEtsVy`y%P75m2o}ZC^Wl7Jm@F1d zgHSINZ}L{#I#e?DqEf9n%L*4Cs?vbl8h^zhI7FN3uvpfz1WjWBr>$08_C}d00>9aXwCs04A@h*$!7+aW`{C zf{^c(=E&C)kti}3m1as280XxCxaY(2-2EOfJ5W;m8#B!0d(SN8IJ+-+0ka7SIeo~i z+0BE0qcAu6Wn_6^eJOB>OR5-(cF^%J!t}@ZX;J$9XZ@sX*4q;@LlhS61f-{=WGTD) z>?2Pz!j6#IH^Ehd6Cnwy%rns7?`Ep`4WQdyrI_Pu5Al*p;b_PkEo24WLDs$d_*EBK z4yfnC2Sk4Mr^NtxH|Y*F_$K@QRWZ-{6D#l@n(>?RcfZ_lrMRcSgX%%Idu+dO8m~^D zy`*!?(O^F<2Y0bFTT$$l!;0Y(C@UIS;Fkyzq9U2+S>MU{D*fYw| z=*_JiYL(o85KFSx9ca&9DoPaI!%$wCS-dKF3<}E}^ys;aiW&^`fB06E{A1O-X;){;4!~jLYLF6%iTZX*Rw` z8|^XHLmn8zL;M%c#x69x4U-c4ROntRZSmoVCH9&ZkgQ-ZJN$spXl-_P*PIF~wJhCo zQBX%zL^H(5qsF(%7w{&@2+CFu)87iPg8kkS3B@1_nq!)Vxp@IrN24z0K;RHlt6tza zbhk3{BtEyFwVOk2oKIZ7j}X;_Fwa)0ij`5Q)a`8x%zx1mezGJiOI8?h+X5At??zb; zF=>S2qzOMmRkVV*BVFsn;7E941z_}Y;b?=uIHL4wpA8Nqalfwc&;1j2rBUeW<$q8k zFH9xyUu@=22nhTCU!XyV|Ggwfq>8R!UF(jVoVS4K_8OB6PBEOQhz~W{wL@;>l*H^V zCIB`Z)RI{m@?IZ1@L5pw;AeVR=#_eI>4TvD$nJzgkqB%I4{w}MjPh$QGX(*QdJ)B5 z#sPTvu9RN=U+A2L@cxN7(|BuaEq{wHvFd1dO_qe$r=Ty7Fdko@yG(8i1|&QqT|=(8 zZm_4_(uEUW^VoJZxsQh}JQ$PRN6QW{u?wUHO7FREN^SZJdN3U_W4Ff=JQ_H4&>~0GnU2o zj0SGiYbP^^qVoG$-sUY%6;I>=LT&h$HLvODE*wQl?Yszy)x&hQ3}I zVZaamN1hlia@$a|_CT>ez!CcN2I9sg@KXfyJ6X+!$pHZ>sqs8{@6q0*YS30f?22o(Ee^X;L|dpz)XS)iv1}#{ZS!U8u<%#gY)Sm3cu8Zg zQZu`!ke9U)BPfPQU1pwsQFQ`YVv_enb3b0E-tcH9W3=)y*L$8sli4$vHD8Yv_`)& zy>7?-o1v65xO65z++CJ{aseg}yx#o&o?A>?@xw=0fTQHxrX(5bW$b6A^yH*y@ z<$w@F(9v>#y4-%&?P;z7Pl0eq-)>hU=<=bC8uj{Q$-4al=-E932dnj5iw_zXSm9pt zQ%zVD*$rCWJ-LL7Z!c{Zp~b#@w?t>q<{#J{kF#?61A| z(TWWs4K^5JLQ#!E4(7c%j|?OE6YML^8<>(PX`m@>HjO@aEMd6WmLuOvgNs644`!b@ znlufR|6-$@YYpL8OYf}+As{bi>_@(A@r-m`XpDf%kE{}KPJFP`Lz_o7!wxhlX6xOt zGP{pqVI!{W+|)HZ(JNRdq(*fQH;p-E7OocbTsm`qHQK(X@k%J*H9zrFk_m(~~?P?1`A9wqmwuFI8*!LbNMcNv$rycu_*D-alMBw-ILy$>1?*>+033 z5>L5)BDvoXcMw3#4QH?qGglf11a zN8WSCJCtPZqTW97nQ>Buu)@a>g(pLIU z$|dn7Er+o!$I4tw6c>5UoEzaSb>Y6U#Y`VcG$-4JlfE>}msuyo314iKGL+k?wbKRd z)SfV=fZ6~~HadQ8d7|+d z-%rp@D6PVf(ZydLocd#sqR`qEO0NC^!DM~&AxRWDW3kg=a2foO$L6t%m203+yVj>% zc`A#8{&$@}9k=>A>j?)8Sr3KR5m)nGvQ)CC%iU0%%v9}kA^VvXGxP3S_fl!SYv0M13`yo z&_aY6a9NH2>MPNSV-Fr_T~G)tpy+&GfUNOCwD*u95$y3|8J2JRjdgf5oA%NQu-+gb zc9^dRa%!URL_U!`Y|Q6W2ld|ip_Xcm0&>C!F&cSqnU}oaQ9em(1okL;Z}&$zw?()P z#5wd282@9gdne{KRNzgK-+uFX&t&Rr)dhb~9L>nA#uEE{z-Q%WiUrW}LiM{fxBZ3; z3C}{kEq>&-E%<@a#_MJ&&8*L^BQEnyUtD`EVh!KS#7S)ornMK?uAkT1k9|4cTwZ|< zWV7;|5CYKiyRh6N*P4u>7k$Ah*EAdaT+M8-q`=FBNc21FEFDM3=jp5mZ!wTSseLNp z3QxOgno+RMLA8ZTl!xp2DR0SaKvo-p=sSRBYL%qEG#m&aKJ`53F0wVASDEimy|m2Z z8u@yggdBI?c;L~~ht?^fsOMhGulWA10Hf^!YTBprXq~u6hXdN+G*hqu!V=Bs%??Ox zvk=wTC=o^1W>FA!3=2&C+z_{q>vGB!uakct*|mGuJ;?W0H6NLoooJwUSa#?~yaO?` zU=PGaWdbJlA`-C|s6rvAhrLCX-Tpiw@ypP*E-KHVl#Ij1!SngP$TxG>S<*f`l;mxO z2|d}`l{%%p&URADf@rs^Gt64vimL}_f1B0lM+CIalelF<^B6I2%_FwK_ffAxMMre^ zr$VCn%=mR7hQdi-8)Y>Uo~JKfb`GaBvLsCSdr<8p%g_wd*xuk5zpQ(U=c!z8$MWP@ z^$SQtTA6sAx4qwM3Xb1TRiEy(fvH%fpTtNnA$xwm0uoC*EOa+Im5yC)_m`=6N_;R7 zC7GRUd*QI`I0W5iO5|0mDbnK8_n!|X>ol~8>9kGqsPvcR3h)c~XWwEie7G|5nBXHB z#Xy84xv2U=U-dt3RT4^+m~cjlN0cDqS* zZ`sW(K$ra4Q?`u7m5ol?+CeQGq(#-Dpsk{0d!m3t=?M^J?q|@-ZPIo^6w>ZA5X|-z zpO>pr3kpBZW>RSaGD&m6u9+m!nGSQ-r&$>U&1QtJksGDPMK|1P{;B68kB$Tg*Tf@% zuY~u|3p*7}^@s2q=?`0LQKn}fM?T;8(C68^*KhmNn*NhIe-IBCztIp8<4;P5ftd)0wMVc2$h~s-mn(4*f{dsQynL?Cd3aS6=gub2fvcshWBo?-L zSbyjXsx%U>b)zaAf(r6*cjX!qj$nTEvznJcuTT8U)Z3$%WsQ%_krBR8Vu$59jqqx& zwVZojPzyJZAUsByjz=!+t!jGSeG}EY(DKqXKtp?Rf4%8rG6>_I{9@qbu#w*H?hSZ>18w0-I!`5WSv39lX$3^ZyxFMG z=HETPtXSbmv~G*viaGVYk_XRZK&xj}8n~BJtcz7fbk*cxGqt*DQ}WAJ9!R-WdDz-~jxmLWfhfT}CB*dISM}@1lz~!)nk%^EnCq&$MeD71~Jl zxwVUIoU^RX>@@GsdQ@5+=mAb0yW{wQu2{ZLb&3!TDJ;fi_$f+hMM}G({8WCyGIye7 z(tt-Js)Z$6uFb=u{i}qmxm9`5GZSLV7qzzB*+hEdh_#olr85P0Vz3MZ@|7AFl8_T* z>w~)ojO4x46{n5R5#}%EBa#dV!zX(EuHDLR;9fU0x4m>&!Q_z!5WqQdpm3os&}z{7 zdKq_i`0%Udr32Mle^|rm0{N#3Sm@obKPc@=;4sKj9E6db>mhU~bI}X8r=_^LRn*hK zf)&GocY|bWpx1wA$MsYh<%Cjyz5f^>|Pp z*K90u;*!+807`8JI_Y4ab6%2Q2lMcR?w5kc^UZjk3sJu*wGtW~Skl=RP~)Uf^QHA6 zV$&{=&PXJ*6ZwTFW=nFcS}3X%~~(;|k=tFKt{R$c7Gi(v0wk@m~Ojm@w3oDSJja zqJftLb#j!9N>fE@Ng(@(>UdL70<9xX-XX%wxa)1%EV5T18>>Yi;zO6-v>SED7ZG2P zgygN9chDS|t!o|X$g4|#n>-gHG}+_m|3t)Y*ikufs_5pK`SAdRtgMg#BL-g_(6 zo)@|1R+WSIzzx`4uW z8bG}^y$6tsi}f7O^qK^X9W~fDc%=Zlq)V7(#*AM>*?({oY7=S#pmEeh22*NARa4e1 zl{UNdb0mCN;m6n)BhCgr?!l3bYqu+71@|Ai%Pi2z98M@tkV=&?7{=!vN;`#S%0N>D z_Dz~Eh3Hi=%e00`ZBdjHoYM){joayZm}GUL2XvgE#WD>6dmyjc0$g~L;We=aF;3c} z(yVrac28mFg1M?C`Zek1&FH}6RREcMs9)dMY7Wl`ODr;nXVj8tJ0%qM(Iq#nLt@k2 zBMXum^A_rU&tpkxU8<_kN|33CP=>PEJgzPF9yZGH1dDm7XC0^WQfKnnHNDg;Rb2d) zUha8eHW0abPu##_0`h;);bEwT7nd~)HA?+&Js^cHy~W^z(b8qnhsn_xuJ^~wWypYB z7}7sSZn}E8?E2NA0kba+#E7}q23Nl~X8Xjq(J6cR7I7zBQxDm$LEJ9i-vv-N-n5S# z{&cM-rdNl>)bZd&rUD)0t8;1P3< zDBR_w&~9oUi%h~EABSEqNAn+hTKqEQx2P?&d2+VTHeuFdo|x|;ZYzfSG@lYiZzQ|l zc}VTB-m$+4eKkCix+Q5rx%J^fR>;K`f>B<2=>(WG(r6fpU7qw)Xs~D?y{~kXXzvpQ zcCySngnsYl6nPB`%tK4c*~wnJjHm_P4_ft_U9lYiYF(2qB|+9ESj;%3!eNlh+W@H? zJpYXgou|Vs^!wsoMt@$YS$}$>2~s|yD#U@q6$a2R-(*My-MD2!vCZDyOGfKg#=zPW z3ILQ=2bU(gb-R>0XVMIAGa}-4jMwKTTcOjj{k9#nj~7t#GTXO-=9QQr^_Z@;h7?u{ zd2Z8RZ=Sx`895qDO80#InWa1hyCr;AXu$_?R>^qf>^8-_r9RgeVN0OsGPEZ}UJkYG z{Mpu1m~EFK_E98E#tk~KdUj_^(H%(p6hyz(X|Evd31oF;_L+d(zj}&G-WUI^YZr3P zo7VY4`mQXl%~FwvUk?g1vj+PL%O$nqamyy*d&L(nx#~eKB3rWW%-Ze;F(1@1FZ%u$DrE&;}b%NWI#1O(_;0$!O@*WlbQ>)m|Ykqc3Uu2PpEo`2)pQnesB5xgVOp zUsb<+pTD|0v$Pf?w6rpnX1r3<9JJGNMqDDaJz8R_I)7?BXxv6^H2$%9`!`O7N0eS} zI%mLF3rtj-qO&bKXbt1WiDDf6*vcuioey}N2JhIAWssisLCs)IN=GqPGO?a%HMA^qEu135AwOc54y2aVL+{7 z?H&)+v=(}&8dgAHnNF=e6cw9m@Q;snn>KhK&`~$F+jvYZ_gWHI`T3D!83cUZy7KgH zzho&wLgdEpfz7^bz{Qo$P&58XKY0j;=MmnrcM0fQUfB(%@@N9P7!Gw~`5*SIF$*wY zBVA$~G20a^tp(JydK}f6U9jU;u;;!L{AwQ_m?QXgCgOe?OQf#%tLow#h>r4j;kCX; z!JcA-u_`i6Y1CrJ+JnjJ#$Rffn0Zlucz}~=Y~!{1eURCrLVePf0+XmI37?XL>MqU% znePYXP&j=*r2Es`oUj$H+Y((z`r#|c$;e4$n3;=Z-iclx*yG8Vtv=sgI?V%45wrM^ znUg6b)jv#AD#lZC7C4)6SgnitA1 zFOWzMl5s@z%kkF4L$nf6i|w@-KCj#rqiOwtnRQ0o^ou~zQ0B@RHbgkUE@OkmeVc(Sz=rvsG?nx8O-z}(Wde$`$YI`Mn%I9i-=SRlJg zQyX{D7#;YiX_EP+TwIh~1?IJAx+1+QXYGaM=H|l6bFV^V5fih`QQE6F>2$531qA2XJ ztlNniv>hbONXiIU9T0IlXKCF2@|}izfPaLQT9og5>YzrATX^&KOLwj*);l)B`}GN6 zDQi!k|JY(eX~co1Dvl@Bhysa&UQUZfR?uu**Jfvm76i@(sxeKw>eX|fPMXNIXcCr6 z^977&E!T+@HVL-@4$UEN%XVv56_jarC%piZjy*cL>Z`UtVi`1^GF|ywq~KXXc>9N5 zI_UY~NS1vZ`=?@L{#Y5C4p5b&MY(-30O(;I=y^Q=)x0~Ndo)%LFL|8@i#p5FZn<2} zG@M^c*!s56^^EDc6lzIXGZnOb8r(EE;C8Wy&PLWia(~zzIzZ}s3wO~Q{si~6u#toG zwG_^P6{=~=swIJQbvT6 z88{`xo8$44Lt$OYWXo0b63w24Mq%FUbD$*Bf^d`V(Xu-G44$CED4WszUUHnL-7js@ z0tM6B)J3zJyM}(~q!eu~GzBW0@h;D9Bp4@YM6sQ56ATD^bB!vo=UM2+MZAcG8TFipC|ItrwpQclH&f7d>Bz`dEqyjnGs0#@Oo_G5I04q?}X>f^FQg9--LQ zRXAlgdpf8#3^f>gCQ>8T)wubSc~DMb4BrX%3e_WtGwi^;=jz$)hEUmNEzNLc>fvz5 zv3VtF;8_itv=^+%1ymeH>G|^pi}C0Px9Cn5FTr;vzY!Sq3|Sx&oG)T@e0)fSVh=3_ z`$7y~x;qV}e>-fRahl{O&W>a5ryR;|(-j<|V~Y^k<)P85?qD?7T*tRNTfztTIXCOnrWp>&gsK+WdusDKG&D9IkN`Ywx#r*D z&U@;2Hs^bWGur%+RReMY;#L=CQ<6WcE^!w{ifu?^EeQ&odxr z$M;9QdTox+mo}dtUlBNImO0w(sn2%~@ZklH68!v=^L7r21=cM1h z>%e4buRIN|`RdfW&WVFVsf1$k_s$_hMd~4(lRuinYi36yX)H&A!~oIKIj~{VdbjUA z@oJAUh+frK*>_wgnNNBh@C^uj9|@zuF||5+%H(MaSidg(YTFXchweU)w2hU)qX)Gh83tiJhECHoKf7q{EZi3u^mbdKF*)Nc6~PjK*6C zNzi(>WYaox#a&F_{X+T|-89aRpshiWJt_{6X5Dp@d8{q&Qox@%)QEFlIJgqf%6DAm zD@%IyPIvf>eQoKrsk?HI`(=)~W_L^uTI=++cHyecK?ZdeAn~oCD`&N@8?%PG63>ka z-RDlCbv2lcM&``b+R4b(>H5QsyFKQ1WOa6B@`rD$y?WEFk^=n5cllbXOa2XfGSl!C zza6uBH{USnWxt+Yn)V@OlhoC609paAggHnVaqP&ow{%^5u$+TbCSHa6siV%tXpTL? z9%V&I4UUl=*d7^j8jo(!nS4&`*E9-0>(L}#(-~Df5peKzv`iBTfv!BMo$^x|{8(4A z^xJ01|3pA?sF>ENkmq!nFjU0oTn%eXTr{a4#&&YBPjfV9lY4R(r3IAKR;YSAx!ZCD zhcLrjGBkGTQk6@a*Nm8GRCSnL1;!!;oJp>G1&fESb5U2lG{?rD-zQgy#EZ}_kQ$+U zBPFl+N5m7NbfoUU$Ls3O?Ceyxu!Az>G4ZlZifTL8Aj-H#U@=-Se)viKxt(eoGaK)5 zV$Q2JgkXDjU7Lk%!BwO&o8taFJ$!ue zUO-*#L@l4%VTjyk6Hh8jroK|ykSr#I| z^PcMot}yv#+o4@MPZ=kt5Y-J=W?bV1ck|RqgSW>Z2i#zfd6iFHkxS{fqp^w#HPlfY zpJEOqi(MyDu|*GFO|>TVKQSquorwX~(^4nRnlKgX{SOBYP1Hn-5=gzjXiIbxOIFKb zC0HN(7X9PyfqJ`c_BUpNV20(D*$v~`KFuHy$@}m%QF-~9!Y@oxajPuP>kwy&zVfcRC>%khBHDi{vj;eh6ZuYP+8TA&ah9zbg zldtGA->_;gSqr6+Q~G(gc*eT@iRO3e0ngCus7#r@m`Ti~ZGpIAxH&`jTASL6XLw`y z%8*N;#7+Wc$1mt3GSCBl?F=a={))SE4<7eYh|7pJ$Fasa5ib~S9YqJ!_8CQt6%#z` zjnhn`(2z?aQH_d0;3^PVw})w3kVgvcb?*?og}&@5mmolm6WZ)dFI?`>@<}8@cLYv{ z46+;_HB^n1F|)eSww;K}{6sd7xfx;Vnu89JD&K?xi@f&hvSd<61VQV1vF9;GRj;X| zpGsteU32@*8-jmEJEtXWe`}XQ11#1LNmAXd6iS3_+ccCvb*D)L%}?A+`KYv}Dt#9r zaAaSHCQ1@!`(?*Z(w8|+MQfYX+GxiIJ(d|p(>VvX@UNL8Jg%e#da{y)YIM-H9#|aD zC(SyoBsv^{?OicJNpgCG7Du8|KdpnG1BZu!IIDthFMm?2l@<^39y>G4yim(Jv@7}( zmWBR=<+)ul-;58n4^<;;EoLQ6)UrgocL{n?O?c9cYUlh;W_`X8de~Z+Dh)*KhLogu zyV3!HCpF7ir7jPpdz$(?xplqg>XMOm-DGNOT|=H56G(k62hyL+{B;xW z=6QEoF`hLwK`9z0xhZy{nes&1ABhA`TX;OKDfE94>Ol@gys3(b-vXJWe7#c7&!EWq ztcB1_7cDL151a)98&r1kw0Y}|g!Tl|2lZsgO9V+W>Io3pvkBzV9{@SwB+p$S{82R9 zs|U7O75H%6?w18=ilstL^$rYm{8psZFx=%0!uOp>=Q|(aDt(DigsXt z?f38Uu=KM5x4w)0c}>@ppG4Nt&{!A9?#^FG+IU#>yxBQNt#!FbeSEhVO-i9_`nIM|`4r78h0RHgb|gLhIhkH=i1$F2mzY zyup4*|IbA*$D0>nv*SgK#wH%7YT;1~pqR3AY~CcNZ}8=`PLseM10>(DJ> zE1byc=6W1KCSgG&aYC4Xy`qXxz?)$dpzh87KYX2KRGVAWtxrn}rMMKA;!xZjibIhU zXrZ`E3Ium6#e%yeSaEmv7Pp|qtyplE;N0|_@4NTk{g*K^M&8J~_s&{t&S#RkuzU)Z z&bpUvb(GnaH2w$W7U#$6g)5toYxnZh!GjWmh+r1%R(45zz&$iS-jvQ6dZ_@J`tcg} z&V!rjbsZ{!K<)^zA)Fc{4uQ)=axMlT&%7#_Wta8*uN}^JQ^jk1GmL*$v|C~=-2t_F z(5RgUe-rCQN4|rG6cRRR5W6}4PvKLPRbg#8c?=--LlmEp<#829omagC@54wC`nqCAu@+CP&!?SF9yeFfwlyHCWLAs^7q=MVQ;Ou9uwJeiI+?) za9;CTYGRizhyen@SNIBOC_lTzup{Xx87eE!7Wevo^X zcwH?)*@tEJ&ARd74kvH*K$T6B5>8}!^KHG`8CqFozhq42Kdzscavcp`9$0t7y1Bin zsk@+(&7wge9j}yp=pQv1iQcDQz^*Ov)YSEzh=x3KbN6# zMM|T2Pa>K_Jh@RS^1GZnA;Ueic)%~e=?PQpV8hA9S|o6~niTP&R!_gD-ig84Q_Bun zU`yq52Q1C#IGQ&(47OP(~Lid`J)z*Cl^A35#Ho zcwgo&@NK|6qqR_HOHm?vpv9smUv#vEin8cj$`>^glm5M;F_cx+hghg;Q3KrB9#?#* zH&vW3C~8)oSCD0))c&=OWg>Goz&MuoQvsz_sJrMpcrgpTnzHn`X+h)3`czDT!>GX+ zK{HoAwePUNS)P?5@an7lFrY2fuU|e=eaWY{%v37I4(D;$a&=!hIuzfqE@l}#p_I~35?_HJ?=dT- zb7#3-VK+hVW#A`i=wT}~PP0UM_2}V$UiD4e%iZuO3zwwqaxUsDwY=F{*%`ujG_xCC$ltbL2;5-% zx^%4#6bKg}YKJEIE}pq{;89c!T}CeH@MbiJnB{~$D}NJ8@4PScAE7A1N{(s8nl zrAaaU56%fly9SX{I$U&EXS$qbtYaL~+}Qn!4^o}_fZoCrh25N){c&SnMTA{NoE^P3 z79MBx$)k#|)foz-x5~8g9q!`u=p;FGOMRtO7hC85w!74CK-2SR7?>;$_Lqk?zHr>$ z^Ky#>g%s?3a(mI!&f#w!f*Biqq=4rclpU`INppU(*xZ#> zC#GhE%?9x)I9aXAE{L(LRJM)`2Jsz4zrr`m<0EdZ{5yC~y~}Ghwpf@U84LG-tkP@d- z_8`KPdJcw<*6NGTyA}z_eB;iaou*z6uHU^^j@OC^G-CtO=G~mL0R_U&+azM-WZDJ{ zOo-5AdT+xPb*5|ag3o7+FK*1c47@5h_6Mq*?59la#8Pr7a;yca+^zZfpzAJQ{K-34 zFZjHjpn8&e;o08Ldt7UpLQ95q1pi8Y9RE6Zn7rkGW=IPtPu2Z4hAUVu(ZPt)RL17s zXWdIqmQ3i+0Q31O3lxsN*8w|a73*TBg8pe}98!qW=C_t8|CO@B6o&Wxps6;|lXB>! z0WNIFa>DcSY!g1;#m>xoPJ+6@7}D`MG1--|noVFTqx7B}m^}3dda+Y^yfs$@Z96?8 z-yBNIy7$c7g5j*>UNub}G$*Un{Q5o(eVgZr5xB}Cf4*n-1^+P4az3!WP6vgoO@CF~ zOTKRU!vbWN?dld4rg`Ie8Z1V5FrL1LwK&NJkZX%Uy1i^D$fm+>p*4{XF`15G1`m3g zPxJ30&yX0xw%%!RGwZUO5DD_<&90vOdZE)Y=dc$Iw-`XJTr07efzW4~mrAnw3!@Ew z!8f-Xvja&?l9g@oSt%HsZzeCv^1Ul9HN)=<9OK}1Yht`%&4xy~o@We(L###G5CBGU zp_k$#g{Pq$2>* zDuBPNck77K8!Y#Ay(3#0LC{0jeSsbD7saQnyZ4)ob^G-!HW!h>$eLEQe{FG|rQ<`! zjBMG}VdQllJ!}ZeOvGB8sBfiyr*PQeLO^Kbzuru zZCS{@r*k%oU~06DeHb|%zgNirR=9CDVInl6&(if;lTh>k&iwOxj|64gXtL27G=;y~ zVS^0h!cE7o8-qTQyZBKUH3f7lR5go3B8iho3v7@2_UXu{J)Z>m?;Mm|)JWo$QRnmXIt*AG|gBdYCp4LSOtifXR0 z#g|McBVK(mqztBHu*vpLu8!5Wd)uHP3P~E+?rBh#O+$1-@?9LJ1kDM}@)a0AJxs-PY zzQM3kGY&#n_eE0n&vBbUMCy1Apn?UK`IdYjIP7dVY~7m<_i4k1RM3mwOg^g1`vH}x zV)@r#@S-qr1>J-R&DsoiG$&cFhx)3*$m+;slAch9JvFgu1beYu}vty=NAD4XHq6tPr&AN(5bh@Q*m?F*zki7;}2jsPq69|C*%w9f+Q>tbW<)ZOOQ_6Ya>p+kzrW`jCqO2-`b*1GJT zTaeXWPj%!K(VbpPB&i<4$z{e%?XDM}0fcFKly0$FhLzqzpin1_B6DE}I!YTD38N#e zvF1$Ulxwv|_0v@NyIphtYdlFOe9McX9n$^qW4V1;y#0e3kD~MZG9A_cq<86f%67fo zuuYJbmqm=%*CJj#ZQkDMMPj83Pq6-g?~o_zmW03eNID4@35>)7d)JpU1qPmfF#e%G zMo{RTwcD8)D)k{G{h8{0)-rvMzM_B0+^l#)q#V1YT%(B3$pWrGKRxcg!=C}}sZ{mR zd$`Z|h}pV=UV5dbV(Xx-9PHKgYDf`X4hTZosnmkD$kGsfmebcC%xu`e$~z{%o&}Zi z@``rdDocRudRWF^{AN#JS8W^f3v1z6_zW%bKQrOgi8(5cphXoX$VmUC#(3{xsBF-Tun)h}U+7w*X$JZ6M>s%#qetyg1c5ZUp8xNS<){7vy(aP=>%(*WU6oPa6c? z2`@%Ygg<1GKHC~*C}|KbEw`ZQnb~>dXnINt8wTO^kIYwWoywNw`1olq0G&MKNjup{ zg(C`S6y}Be^aOS@YvL@j1$BEahw*F*=Db^$VhRnQa*>RswuMe1?{5raCTus3W|az< z_0phtACbezM`obb{rM~Iafbc`Tmq#}E_{wkB5Hu*55qjiCr%GZ>0!$9oPH(sJWvgB3Gw8Gr&FAb?}1}^U-+D=SCe9+39 z>RZ{F!W|{T{YQaD-P2>4s~jj7M9f12|38%+-{0$Rq?RiMrLXp8$|XP~oEdqo)T|cj z%56nA0qGQ#h@-N=|J6Pq``&M!#8Byo`hA6A=J60v_Zjhi{Qo#JBm?5%{jc0{Y-X}@ zj%g*GpLBFN5}q=aF}$Ddo+vuWXHjMzV%9i9?@R{*nB<#BB`H$q@8%F~{vRWS8`PJ& z#b>VsXFs-eGO2EK)I4_EIloPQSjcpul_VJcG+OufB9H$dD{!ncbYC>=n+q>pGT`%+ z>tnu9th9M%zmxL0W!`+9nm#H4vp2_fM~J6iD>{Mb5r>VA!jxyf%KR&|zexPDcMm7g z&m=jb9ag;G$Gse<8CFP4kyD(IWRyHoC*1UC78q+$a6&@6aD882;gL0OF_p^66wU|(mK~ER)KHz*DE4Mg8W1j39--FE%)WzFpocM z$1|`Pl)PZ*?d*O1ChzMki;57gV#(7x`QJxB|2T>YmGGJ>3Xe__pub6Me7 zY}J`QbgykZvN?@>5*OI!#|BU$T*GR!9fGp2~arG=mnP9=!!+;Cezg=ggU~ z-I{5sh_pSWlq6(fFlAQAC!0pHm1(y=5auR=%eTPUb#`-s9py~bG{2?4Cq6tG>r;)) zO+7T%*wFEkjci!kzGew>GMiPAPv%re;^EQqq{L9~P*e6gPESx07#v~x3O&1cZk!e+_kGEjY+I1BrTvgLboe9m1}p$OfdSIkTz z@70y^2+jOB<~9{F@k*(&8RsZ)t=?KuJCZq9M48}c4Gav z&raL(F*b&hZ_4iSDPbkEe^gcV;Anlg$>KyU|Lz9Df2A$l-bguE=&7VuVK;z4r!>V` zz@vbAK+*Y6?01Wr1bNg7K4M_BwFbW6`0;eS%Wg+<2BY}G+#8n}ALUR#^100KRvM^? zM~jYvSlwFETJqCXcW1%g&iUpa&zlcsB~_8H9_Jb4Sx-J*@R6E`>Dy=2H?7e8L-LdR z+QTm-nTkQnA*x3knTIcV0H6Gl*(=>wt*FNcrm_ZOk_ogt;MUczuz9YgKDgM_e=BD^ z72r+4v?AMu>^>Lf4oqZ_n(=Ht|6Dt^`e1l4MJeM386Xi`y!TRpY~1djc@Hy^M>H{} z2;C0Lwq+joK~LyukmPf*YC-n%-==%2qTENRnu;y$-=tn<%AX(p(^AnK#ww$j0hSs) zVjO!~d3Y49%5QDzXkpse>r}|^RSzOD*9p@O(frL+y|ndby$lr-c!t71oA;yMo5;#C z&upsSteHP8Dimezm`O4T1Hhg8@g-7tF?tWibPo^FsUr{FcsGl<$eyV6^tf%WxG>yO z#uso=k|+aS;K}JFuC>3**iBN<@BTv~y-a{AE@b(4@45H>cV&ErG7*-1SS+E_K_(`i zY^it)TTBMY4HQqmJ9l$dbZ&G#h!-AH+TTqm6lxDSHqMHTaY<7+!!#9jA1#-$WjgoU zQZaY(0=j#B8)2w7tsZ>P?R8R)HhX*rJGYrFbp2H^g6%DB$v7;pdsPOb(j9o@XJm?VwjexAK`?q%H zTo`TEd6p-E@!PbcG@_`8<}d`2qo1XteyLEj0mYc*b`oHjbybEmCa@1U6 z)9rDWg*J86bdXqN)<}WtM!%_XF2)+_S1y(T)kCwFHM{F!RIN@Yy8uD4{KVjji@n50M(IN2YiwzHXq)sra(eAD^ zA%4(X3M=)EOqH~%hz->8>+03_Puj!dRy*behq_2m!^-+HQznytz^rF!Jn@@CqqmGo zuPXLm7p5QzAFZ-ZeSg{C>?BlNqknZHDk9SzG4`k(tVNMtF0>U5*4>??Jb{7}4u)&Qk9 zEmbG)aoy7=g3|TIdd`;Tt9{rgMQ1iPVk9^EHIhzr{gNWq7g0f!%nc2 z-rGdl?$N2GAWwXgdA8~^6#B+{(hF{ZpI&Tkn5Kwu^u5k$AB#BvR^6yHh;Bv|lBy4s8S;d3wD&pfZt|6AlXa)QEDRfs zon*5w+st|nax&Taq|5rRvbvZ0F9(P&Ul`duGAu}br&Qmle5Tnsfk`P4NrQ6BV|GcS zCJPMav;T3dEID4YMltg>YA2Wv$Dc&zq{U7{QJvSg#3NJNA{oY4rc$)BlUlz9ZJ)*+h>}St`;m z!A&Gsq6YJMSv=!Sh!PrQ*_DTfnRb+SC0gIB^ z0G8c^XG%M9SOhuS%zoUnInyXmNBio!t5mvR0sOehp2;a3rF0h<^h#J(XHIE&;4K|* zf(ir_2O@r+l_7E}I%&%XCW)@8@-x`$TuBUbAF<|*uDUL)`Q!n29zr0s)XJP9i4Wkj zEoJqpW%Iu19jO#GJD^rME-%ycxP46U8OO z;%@pI=IKaGROXr_D@lBb?*+#EBA@KTwWr{ToZ0~;s;xZRIZZ@&w^J>uZ!#Y`P%~`!a`V3!wwRNCZKNKE z-`9=5EIwNCk3eCAzvw~;W`FK|c0uhL{!!MTrVzKSO|-ksYSK5KQ>`=XUf+UnL#jIg$+DV6#`xj3>hy z>pXi`xjp^krUnCRTR#O2Z_?CF60_09Tu^uOF6=a=?#1p_D%#^UWtu#>syb?U$FHpm z=I2*f+0AerC;l%(T{b)eT#?=_rxgW6>;;rvOj9A;5+ssY5&B~8$+cFT&bv;pCTOYJ zMfuke`SZQ#$&G}jmq1a=YYd>8+L_gm#_| z=X%HBULW;j{xB|M*aOKGPLBS0G3KHJMAp&yq%r{>u|fK=m4XvY9-6P7Y3thEAu+Oh zO_~+eq}UVv=)!E2Jgbat7TBa!qs35R^K;-T_y*KvmxJHyN<7;Yi$9jJp_jV4$4{p6 zrB~XBbuNCQpTbx-P(G5PGdWk65>B2_tm(;@OPo3En2_@y55XV%@2nBY6bUY!EI4x@ z3K3SE`O3Xhx8ow+R3=>&#E0W~{A_Z`mt9ojGEcU$z$(+!g}N;)Lz?TL7+vT)e4_K9 zu#GK9JE520Y&GWV>19(l2uOAA=_$eo`BjpN>27#h+1xun=@WG0x;Ir~>~6U{k=@E0 zK_yuS-_C+NtAIn*1^|6o@o)#wA(euSDmSWqbMH$#M$!sJ{9LUGaeK!WoWL9a|> zF!MfSE{SbNBYX|-jG1i+G{NTy3m5CSTGz7vfdrp_1%57|-&v38 ziH}-#yjQr+w}$zF$gqoPB4&|XMEw)R(|j3^^Z90ib;+3V?b=5No!X(DO2yhyb{H$! zC$qVq#cVMHxPnYxm|o(yopXMV`$!$d6y1)v%iCitG5DaQ8+hN*?4>B&WvjSB4_$XQ zSU{#v!x|Y1sWqWy{{1W;a?evO%IPBd-lNS>Uy@RL7GY()CPql+38izdGtaa75z`dC zdJ%um=R`N9MkW^s{^{Y%Q@=Fnqowp8DVpc6#6UQ&`Qv}W*B4?5>;vesY}mF}bI3MZ z>CuOC>_)!+jgu^?{$nzY{E_!?1EHZzU+?)wD^71U!>zWaWO*7Goka2bLd)7OD!O%l@)CgLsQKAmbk455`mW6^la)>ozmj0O|<2g&fape(4I z6%8y9xgmSdz!*rYyQ!(yL`iqm>HEs^-3>_*L~e|8TzxB>_rD$}=Gr3+TBDtigftT` z6cI#skiROFc=nB>|7wQk8b>_xg9Ufz}=m5WL&?2cLL@ z!`aNj-tYIlO6QHu7k~IGG+D@@xC7WXCCIoxuZi0BB5@)s4jJ50oBoP1?jnfa#ivu^ zP=p=+J_NkTp`fV5GzA>oTOQ-MdvdJFznL>`i6I%%%k_28(Wn-c&3<8Pyt*!74Xvbe z@YK`w0Kof6XEzu|>fjqBe&je~s*|Bvp$7oO#|C*v<{mhvR0= zUkv811?zL3FD+)BUv5*M?%q|NnN|=FKIjnmQF()nY1UB_KI{LF6V^lM-(N0Y*!v>V z_I(fgpLkgsa@+#pN{oJcQEcycE=%*X`@@j2o^UB4e^KIZ*0Uk?+Ff2u{wDq(; z7JgJ}?{tW)bN)(i^narR-4Mv3NZ|pHsHRgK-Bv3U_s@YgDufgpvB@&u{@uU6P}uu7 z4ghd&fjzdP5V8G^7p~%y%!h$@1yR0Zig*RQTKhhcwYZ3;E_E(WIeSgx!rsrC;nK>Y zFm@7{C)^+F>=#`|vt5>IdR3eMnWiKu4U8yxZ%VNaHC*mW?7f?JlL#VgWw6P5dcHKt z25OMa$e1hTl^X)AMb0GnWv_|`-DI$y_BPoB89;ig8ZwH%*wbkDYz^buAkE+XbE8<- zjzd@)pbB&2!W9>a_Rspg>748fCxK;q^D)^5qEq=c#3J?fQlWjlH-E~HZyNeO%7Z$j z6X%0|S-){r_-_eOMgPw^W~u)xysknhT`mqM9uC9wseN&%J7N{62c4Y|^j8;g)9Dom zjO|H1jP!US*Y%7t9$8yV#{u_jij5^-F%+M>0>cq2BLOlBLY@a)p`(V|rq)HVuyRcA zPCh$wH8YEYKyPRUBov}o%K_^=>M46mljQ~RBpV85pxe1|qR}mD8hx1&{p~OiqPx%j zE=FYFOq{s6#UJ(D>+_m0ET)cl(nnkzv(v!Lx`JioEhLjBUsyaos3^&0*Z|CdB2dH5 zLSQpPGTh0|q}0G?|3(luzh?bP(OINlXQ7T8CSeWZV}X$>=v-({y-zX?`1BK)%mUAefkklY4PZ|qE%QM6I0IFwywW?B+U zP(XO2lK~iOuMsLBCv#J6GKo_Z${^fINuOj4;)WUv9ZB7eOBV4I{k0}r=~M0TisJrS zBgBuvGR>a22jhj#XJfI>*dRyKq4%hMpCgWjV`}a$)GRNG)b`1yQ(b1HOm9`Ov36uv zyHt1Ek6xew>@01E*Xw{Q(eqXs6BTwU*>Lfj>Q&u}3{jej3H4|sgXt7QunEuZm-wXe z6)Rob$Pd!r6?_5c!yMVfuQ{w968zg^cS)Iu0eQU%lwWA_=kxzN)jI!b!jY6U1W&dD z|AKf?;e5svo9yXBjmw#?OJkwuPn-Om1+$lnLEp#{a)bp=us(E@NS%K`H$3)F9FV2k zK~#HwQI(jm_TUkfL?np#h)ReSHs^S^ZAcyfE2h59th$@2Rmlt#;&efXE1$cC_-jb89;J)JU_jT#!W$uFztQNsl}vc@nD&hw;9OH~SMrIk zf3t_D@0CWSYR~(Mi?C9MUKD<$~J^yso0Bvi# zb#!Jl%fjFa7+vh)i}6q2rjEdaw?!7bwso^Ls1Fn^twYCN8A*A884pAp%po%2r|3799*WuzW_ zas9PZsgkFauO6B15AT@Zt#J4{PuS+p~b{~|d#WmS|@%}dI1mVnAoq9{nWbcD! zf((5u`EKM~pc$B7%zCCh-8@B(jizJX(ObTT3qk;HaZVFWc|Zqn zn{qMWdIFZ@N7mu=5@KLcVh}F0h)HgVBo(Gxr-XMM(e#}bA1wHan;0K76EWs9=B$=J zjP5?4u|8M-QF_DaifqNxZz*@o|GrVBF+-EE>rQ;T*tM>L`n zblGx+nGN0B`tpRNit4veMf#i5-uf@UV8W;AD=@Efe5Q|Q;i@~My1J+z6>Gt^57D`2 z1&GnnJcwz>|9uE$7?FZ2Q0Sf#APAc?Ka0`uwrn2X+D_~%y zLP(UKwTU&)7O%s*ZJnFWosU6GSMhO25V8e2Gg?c?tc_#1GJ_Q+;q1G9i6_-2tFlDT zgPJn)Uc9Z%ng=fwCMIU?#q={rr7BJL4qxh z3Lw&3YWlie8gYEC*Q{2S=XAZ^r|2%PShMY|xV@((p>^;WM z6ry~r$0DcKeww7zE<&l};-9#=fMLiVMq5-)E5sN4Mermm6tv1%y=C!gnG z=!1C!>I_s(qjWvY3Q$EF7J-n|YkK^8r_{E)J;XM<-pmSCzn2&dkSsMO#@_Jm`yYo-sF9W$Sh|z6T3jubb|py% z{av_dVe28&XYO^P%49(96s3i!6hv#e*`xY|;Up5SV3k05pK`C#c$IW*TE;1oLA7l* zy}?!yGr?Py`vAas`FCkO-Tn0unvcC|N|-Q8%J-b7VFQm0aMS(S`1VFm_l0A2#4dDS zX2oai&4(+>!Q{8H=^8viOXjHf9ww;le5>Qmqb%5k=6^m;mU+CT0=hXS!+g^|YM!I> zqXDdbkKC}4eaZq!Cap!C4bM}MDC7+9WggxBy1VIoYc_7C+R`-`l{Qzkhns>wVr?-r z@YK8-{_Xx^PvaZ1kUom%CsByB+(u z%O_q-L|GaOIx-g0O=x%~9WEVy&aFy{j2{U1C;D4{B4J(sIwbGXfOYk-bCU{+J zxK}vCLr*gbum8T8rH~>8_?)q{=q`r?ynpB8K4CIx4_#ija`Z=zz8;au72{X$In$5O01$^wPt>SU|(Y3LR z3-(vs{xHO-M2Iy&z;U#otZCC};%E~Q(8}JL62UVNt=D7htEktgE89BkNTpWYKF@pw zp^A{OU^nQ&a_H|!o3kJcHY2uE4nvl&*D1Mwb)?(*I^@)9pPFK)ei(o6t$!7*Mypha zbh^Hk;Q5_F&Eh>ICJ91C;JBD0*(;7L(%9yYmb8v>CPAn#@hB+XUEwKz*Rr)2081PQjXDHH%{m!fU` zK$%xDsz)sai>7GmM*Z8hNY?V{^4$vs85UD9H%?DQ(XbMrpApwf)UQ+la0(aMRVqbDya;Nm5LwPqL+lJinY zOzGtG#(_$)he)+TsZpVe;I1rXOa#Lx5Zx-d+;T(&?LBCjKrrT%WhW@HWo+!=t+**~ z>ugl6Y>b(#EEAGoFBl>1osx7tQlye?QYhr1S+;Sag3ieuPA+Sp z!B%ZD-~WnMOt%iboGD6%W0nytl2tGEg)PRR5f8A$C=+kJzouhn;G_Mb|9)YnKC>Y+ zm43lUC9x1I>^R}XgPq06O;+{L&+Ubv@_~3>ySkov}$R}wO`IvxRYrXi~511HQ!^`Q+GspNAXXyFu z4_@2-*a(23w?Cn&IrLf6}%VP(}^G_`u8d08$mXj53EE2f;o4(t;A_rW~ zo{Js@f_}=j2>P+jA(-~EcJ*~mfC^s1NVR-p+MD*0v*tNQ?TYOlughH_gqW0@Kfa** z+Q!!nl7^diN~Bky(!h;EwI zz`C?F6H(Kg$#6X7beBU|Q4QWO73D=5mulF>SuZWG>M>L*uimxyR~R>EU4s(DI~iGD z1*G#-p&kD=imsf&ga_JETo4$w>>F}aced0)T)^Z_ORg~6Vfx*1hlY`poGp0*yfAsh z?^B{sHSmKD(dTzve{SyP2|S`=ePx(6yhKU?FJj|O2m}LbY*kDFUKJHbGL>WeV*3&y zA=K>!Tz5QQM&u`z)(;}#bvGZo2>_DA38tRK5~Vth7?UG|<~?jyUy|%S6nq|grYcV^ zYBN%O#K2#2&?RcW9lb2!_U<+JYIq9c>=9`;8Ug%5W;GD{hK{3jTXRTwtG|sYy{W=H z2D_2dh?6lA)xHQ$f^Y`ee}`<0sC{LgQc^sD9m z!GK^-vp*8a1}ZOTs9TyGK#_h?Ez5=D?)I;$)x9A``Bc7WFw3*shXcdbNV~wrNzkrv zgWNLhHCRxUe@vrk?QM(N%3y`BHabyPS&F!)yE8POk2rremF^&{V>If}@RM)h8_k&| z*%J4;d|~(eo2C;}XD7mEg|pS}{Q_=>8N-p>87v4lWjJNn+mN>vWyi3w_0;3UL#e_r zWgS5qt|>j={{3K9&4zYCI?GDat$QHbu`ak#a{v9IdOx~+V(^w&+CrVl$I@Szdetd* zdJR>Jt#l~cAdAVP4SM#a~@HCR!$X8;aHQjWtZPomv? z#tg4O?e2*kZ9LXoSkKcOPeDql!f{w>YNMy5H}RP9;dn)zzJG*snAf^*a#figdPyDG zuOgOnoeuM7tTP~ZQRlOA)>sUTKCXrj7`OK|QJ)vDs_bvM;E`lXX~-0vd7PRiEdwYr z-2f=q)hyD$_r@ELzuTwi@P%8C_m!ST*xK^mM@P$l)ZrMm#|v>ZusdG!8^Z?B@=#`6 z1}TpnX}21KnLvIxnS1E+viF)nzTo*rde870eXx(HNuN z@x4B^*lbIBNrXHfpqW=xe9qYu~pe&2!hrza2UVm+PS z*KSqiGmlTio<7!~`FOowPcL_5re1%0aVVG(wtrP?v;4XN2PD(qTR4a77YeT32qKgm zZk6;M4J|-i)FM1n84c^i~ci3y8&rA6%jbC z%^=+9UeaCV0?nJKA(2}myii@JV9}EG+lLfeOBg4?mxTxKl`GxR)Q#;h5&q;E=<`pM zuJI4tHN#_Jay@^-xC{A+bNj&=6m=M+QKEf&@x8_3=A!4)-<6tAhYf%dC4nvxnIp1B zZg#q3HJ>*~rgCZWk)0(Q=eM)G(#_S)lB#^1=SmN~Wlao`0oE>|-skmjB?+7QpqI~T zLLfBOuP;}N<@1r6nf-CINImIBLCM^U*-N0HJ&JM)o2Bp5dLl?P@*P2Ryq6!1fr7p1 zW$}BB^s}|ngY%DKRLJJYOE+wrQ9#a$@8=H2>EVvC;Vi+;J2$l6@;HprWvP%2F(x9n z>^3<2*DFZhjz!uWS3Ay>C@~!%borpki7Knv!1{iam~WXVxKn9{bZppyKYn+vKVE>J zg=OKx1Nv}kvn^#>A76oX>jL49Z@lsHGc7@oO6hlT2)T6^DOVIcDpa#^+c3M%t!$Uu z_ULm2_d`gP$VdQ#iLkHaefVV7OaW{O3zWUg^@H$@E~234x9HJn{sf1abgO#Z*E;l0 z7Yvcw5rA4hnQQpBa!QsJQvyAo_$6-L1d!7}=_?qMz47R0yf$&2y3+PYjx$n8ev*Nm zv>J9VL&z>N+rU&2dqwsMu(DRD#+yo+SpTt&XL54TWrgNo-DA&sCC@ZN;zFklGJVce z+omA3a<1DG8%PXpy&flq9hj@z+2Db zEwDj_siP$4DF74YFBm_D_20cQ!IFlA$4Zkt5VZJKMEl`6jJJ6(<(MIJ#^=MKiQXJj zvdxD3`hzZkyee^gI+gTAxn~{o6Gj?NsEO+hUR^FzzS9yymCx zwG@Ki=+5weIYUoih4wjv8EM2$?J6t8%2VFjuiSaQH`RdX%QN4NHEm2R5mrc93Qf?k z?m|jmJTM(?|G>2mWk*+D@MH8ff?(G(R@3T7obJiCb=-f`<{LYa4)Dog>$z#Wem<7G z`ysGbuu62QwPSsE{^5P{yFlvd-eO2&5-olIN$mGz)a zI*N>m$jY92KNfqcv$n)p-}3X02htl65PS#Hdq6UtKzoB$t6E4W01KC+>VB9dr6Zl# zPo1q0I}RhS7R#yFgfTVvKMH3)wLPcCl6c=_B3YWp=f4;wOrzxjvC>hmWqq(wF$+`* zm9Ti(tvhBuvcpSnPH);F9DKFvJ5mZQ^e^}31h;6H(A5(ovGyu`HN|u&R%|&N74(yN zToG45HD`Q(KYnD!R5uPvL(TP1ep>0?sEyza3hEp2%4rJO+#5l;`lw$nc4Cs9Ga+u` zjZR@M2-U2+zA^Luf>zaaNZhA^=@7rEXa^a#&byx#^8uRP8RNdbEC?To*J5|+t>xPU zTgie?tedxrA3$Z|0# zIC_5&UWnF{8k@H{%`gmDUtyYa?S4UIbl-@TeNDhlT7Qb!At0_)UER~yiWF% zqDZCBYbFU4)Zb3$IP6$kr+N#^A)90ODoai)vwgr47tzk$IK!%&B{Vr%SJqc-iC$eW zN%WtIP(rJ8;^oauLrdlr&ylAm0EBYLrZAM(n!$W5igi|XtE2{rxDy@JF3joY~f4-?H_HZ#J zcKMs&$j3aYKy2Fk7|s($QVGagBQFOonh_A!oaG^1X`=KQl&V|Xx>Hs|G!@}n2*uhX z9vbgZ^|L`DOg%>m>edzKj_S+?klXTFLz5IJmt{0|Iz>2_c#>@)*3dn8%k^x$;ZCSP zUvu(rP#g|Ya{hnmFEh{)RN)@Y(UdEq5K6}M(dDlchJG9;J-v{&EQzL~V; zrZ+n$eZOtk&1}%dPvFNPAG(~a4|bLck(9FP*U&!a`HXgGdDouuvF&+N%drHo!%8Cz zO|kZxCP@=WUS6D+PS$-e+Iv&V3VH}wN(MX!ubTfKxko@Sr2XpEG_FS z(Rlpo{k=KB85`IU&klR0GbzRq%D3p|nb$l+uhkdkf!`bT%jQ_Kq3dH`tEP}sn+A%a z7++k=athD!xLy2|?Oy+5^@bm?Vl2<5IB3wzUSw!@y1nSiQj{o5>21KG{+Fe&A!uW9 z>n65#kiye#ysKy|9k0m5*#k~dD@~*xa-E2Zce}>smzREIOtEGSRn0UxJnCS}b58Vh z&F6EsY>0)w$So=j!1%&ni)N%vGFWsrO2|xS%y0c#@b9*s@xO(|%#9q?LE;+)t|Z+3-9Gj#h3o-{DIwOnbH7W4|8`836|;0NT;bp15RL>1#uQ zy8D3m-aYl^(|`J+iSCH|NvaMA3v+#%oE^ke`Bo?0Vf+YNzs@AMgQ*PBlwtI;h(|;# zVi4}fJU}}lkctr@GWCaH-t6in7LgJB!zLEUmgFbmCF?|vw~@RGxjbS9i}`XLaX~cc zqd5?LTq4Ey`+neuIL-BIAR})g^V7?9vhG};J;4S&tPX+pCjE=7Ar4G=?OJ^A)q>+^nL z@RK?-Bz??KUBWKFbptU>b>4&HmuG5vIKe0T!(YB2Y&uwGpnZp^yrAD)Au&{Ae_SP& zz{)g(_Wb*yiFuy}v0e6fg5v0UL^QXnZb|}V6$l#zu}sbLkCEL`s}=-lAIUKdCgd8! z3@LY;@5l<~x0%@45KzHz!MDfN0=16BF|-$5j54($Hr^&@w#(EUOz`h==~O!Vm{aN| zvULk4c{eY{mU*LWA6o7nb@v>Dq{=50bbQ~TPl~lKGp0r4l~a<=H;8e%3Vrw?hh3g> zZn3_%BkjRoq1^mZx=odPY2`p}wQrhPvpS{K4~Jm&rL#cBAC<(Srx08Y_ELpAk@{l& zcAQ-Kuq_$1TH{#@4yG{jz&ROPpk``K@1917ls`a^S|a_KvYG?m!E2Lk3$^p%#JgtJ zas?HWgYgQ?<1bK+d`oUuP25xI9L@D;-uCgk-yB9sS$$>3LlXY@nipTDjqH&XXXn2f zeBmg!aNKT!vWpU>%jcZu3;UI43pSPNZ^xW{&NQjL4x<^S@kgqEZ2?boK!zU2qAT~n zw+8#aE%t^e4s6_Zd(-^IzKwIeWL9&F;AA0 zaG_C~%J|Ypih?X*<+3pzRKFP{f!*F&XST1}9mN<3S{X=dFJE>3zA{zpH=3hJ3y@N5JBV94 zSWb;!*Ef7)ak;0=8DDB@1XWuM@mqZx&JP)UK_jQM`*onXA18)Sw0Wchy?e(fM-;=p z5WiS3;y3|QgRa6sL2<2-UxC|Y!%o9us4L^f<>8c9!k0zzBxtQtCPricRkBNxeL(^3(N9{c-8J!PRs=wO_4k%W?PkNp= zFBX@1b7~!ZXnu4S;`zZQ)1$hUed3Z%G}a6~Jko3T`1Jb!fud&YekJ?5I z{wu^qBIe>Y_88iYJ8yv)3FJv@t;81phpV%WYHN$S{cTGNE$$A*9f~`&6xRa9-2%bg zr7iAGaEh1WEM#=l=ps>5RO!;SNy#@VC{VsZR@`m z@NE#~$Uek8#{vB&`6GV2jp6 z&#=`>>MVqw`+o3nHDh*|N|9C*uUpGEX3E6>+p zLD~qfDDr8F#liEGBZE>{YaT_!wdLY(KwdR>xxFjouxxUE(R*XeM-{;dI$fQeX$07l zKI#cWWk_4@X_=A^(>-#x5zTf!nC^8LTY*bfmj^sZ@B6i20a6h|60liIciGI9rz(XFDHNL9y8s;_kD!qYX= zVH`W$6|Vb+h1MBH$7*pS*%n#ZBr3XFpF07QPMTB@9@0Fc!(Q=5uNiAVxe%%kMQzTV z;S%@A_H)uZ@qrWi=0>Cg;@qrMyp}mc9z6gT z$qV1+mB?FWYWT&}!y%Pky&vlVc-EllS#_evJpp_Ie2!;Z-E>P~^iv5rq zUs2taweof&c{Tb>_!+_v!FP`6w{IM5%6u?l8#!J%K`$4bvENHOU0t1_EW-a)xk&}2 zYPcoau_{HX*;gBL!mw$ZvB%ES6s@bBziOxx((n<)FH4gnQs6{wjR>j206yS1ii}!Z z^qXGr@>`G_abe7EGQLEZap7;fR z_&d(i6`lltvQ?flWI@R>9!(i`Ivvl_+HKz@AcmUa_uPZU`~U6JyhLh-ABc5$3QXMq zhwYKoW06O>JH-Erp?=7TxBue8kw=_w$ai}d!{en37X)m7`ALNwj5sxgAcF7oUW`yn zc6~>FV$>?qf$h@$_Q`#}XRpozd{+ar2>I|hx8OXuo>E^GaK*N4)@|E{7`l5xE68o7 z{_QFyJ5w8UK0HcqG*#?=8l)OdI3lT+c5Jr`S+6tm+-cCSDYm{B(5{V}{7I$JPF=_! z%cny|3Yc&DzIlcS7@Z!20{X| zU6Vp<(i?Ug^RFpIN5_}JbB%UPqFzUMhwJw_Bn9rCh?H*ZmB*70abLcx#nCN!5r-p= zOz+~B4_E3z0jP+2FPNj}(Oh@uM^s^-A6VMCMHmfv*cDYWBj8z%ZWsX>1VVN!IcvLq4{Bn9#&T)fkg$NW4I4 z#tscdZwSDUuGt77D@<4s@Co4;CV_Jkp6wIZGFy{@7gQu`g*&Acwk zKL21S=@(&FZ>RaEe&+LGV=|l25(`<^!{qI1@Ms^OO>zYK#rn?^tE!cSzL}RDWyLp{ zO`1)$@IwzrOK;!tr3nR7L?gQI?(POzphk5?^UOs)#G74gA2;!gNIfoy zh`DapcDlZiR)*eh-+fh+rQ88X^JECXOo$$H(zzFtW%MYmRTF1@b~31MT6*CW6ZYMi zY4VB_oQ(e06gS2d(zPG%{Jk$VXhC1fxIY|fRf}4vw@A3cxgqq zmIOEFhITaWi4y5>z>o5eJTh#O#G|Q|6uyZR($i^MdYiPC%!|Yq4-Mwf7=pmV1UqY^W3-+d z35%o-8(olEX-YSdiDS4W*sWH^s6ogrMIkKWz_GJ-bdpHJI+-E)VfgLGxIVvTdwL{x z0;JFf9xok}ifbwMLB>J-biemuJ-FELc70BE0innpgy?S%o_C`NEJwW6g8)F=Z$}JE zD3|I_o~$rPDoN9mz9|U(PLfdhc{)yfR5rnhjJQe3#~gJ5y#l~#p*N1DfhVC}K}+pm!Ofm%p_+UzXw&LVa0R zzW0#@q!uy-2qTH{m3%uAx^PbMI-K_U&2LL% zHn(;L;TdO|W2`vmxV5=wYjgM-z0>ie?nNjvuS+dmvV6Ec78$C{nr-nt!tjIC&Qvb` zIyHDLEj@s<2~Ng5m~9>LxO1WQr-PjKamUCCe>4z#olh*>;>bZhQw7-m`QlLWSgit@ z{c!;afk4+TSyr>qBg#463l)4L?76ZrR&{!RZ}_qudkL45@X(&n@bGYk9g# z6AU=q@a?;$w3NxyA2sF=3v(#_UDU^VAHsJqO5{S9F0~s9W#4RE~ha4g9(fMcVSR&^@kB<(o|N}m;AW6BTOH3VnD+hTd5v2@ak|T?QZN}${pnZEQ&wInAM{iL?>$NWl7vtO zAhQ~%w}ZO!@SW8pEn`dq9BNswfM%J-7hd`O4n1^_$A*%e&Y?(pNfum*-*}I!X&EV_o9uQ=F*7ftc)UNOpAiopNR;kK zu&IS+JW4a}ov1F_rI@GmRa-G4N8&z)u|;jQOuGj?%86X*!c>v6_Md-obOCK%rRQJZ z{%moVDc=Ww<&3V@h{JqcdM1jsudaF zparNgnp(GX(KK@zINK?nXLtN!zb7Ka$!_M#jR_5G?T-vbqDz}zXZC2$;o<~yLif|I z{9uS6oO(*@i)Ukw)Jp4EerO_sS*;)CG|J25GA{*C_tp*OS^;7gP86-9=HIjNh6%Ql5D(Lhh3jj}MaY z@Oy?jTTjVaBY>T!ke5|}KZ}GULIFqvUkv@t9ZqB23n<|A*Guq+ITt7WH{9%Vz7m=U zl!#48GIJ4xHzqp;&b-kJn%GGNd7GRQsEI#``K;WA+*5*T_oe^wt$ba`f#mICwTIp} z-TC0LA;$s~w3~pc=LjU%8rk28nY6dj%BIe{{o-#V;5>@JVnOX7o&3QFYd?U7rAwPn zW(yr6p_{xzIF?Can)2;8jz)KMKx3t9|GwP`KRU3AZxS8RB-5(fR#4e1!my)XJ7Wyb zi3Rhw1gn$5^7#6kEs)Es=E%jF9M5e#&9wm_MFKXqYlhJSc%tJwF+QwsjW{)CeU7~e zO0EiJ=ni4nbkUYA)87h8?#sXT zMgjH?e4ZF7Iao6PqD-^&73O~G+6!pu)KPs#N2F9km0JGAU2sNSkIs*X(4sl~m`dH~ z`GYanNdg7PIL+tj_Q4&K)O`0|ZN9r!*4QY*_nLMBbaB~?`%}{Tb`m&v0bdIvNfR1an8WnesE45>1GmMgJFRhLm;*$`=}o zwoxn7Js0VVZV2o$wMyZO{J=W8F#7U2UH_&aL*giLt#Abpe#De9{C*f$%A8H3UY372 zbq^Nd!_=}~2S%`H%2F{yrH+#~XU0W?UbkH>(--NR$zgdsqsLQ zo8>U(&p&v3xk@*kBi)E*O@PP@2 zq2){FM|GB#!!w%BuDQwVe7da-k&@K=FA@h;E)$X|XsaLD=R7lhg%Duy!0sLApRj2U z>eUSgMtIXDfy|WsRE&o3LUKV~yFno`?<0D}sm#x-r^;tk3McbBks#pC5F5z^Q0(aT znC=6+V1_hlwCC9`i+`)+Q^9|?DI6eCk`>`j zCZ(l_oV+hFuzoEpU^HmW(%yXSGQM^uR^uhupN;)It!Onx)6iMCW?5HdRqf}b!?@Yi z?!-`o64IECuuer{j?A~)%;qhgj*TU+?763(f$Yp`Z?*l$i9 z;r93ee7uw142B1w#t$^BkfKN38uABgigo>4lT@U&V?7f56cRuo@NF_FhJO=hGU{F$ zWLv058qVxQM|xdT86>yRX&nDrM?(S2pf?+?b$vaAV4)wb_^hW6C^%FSI8^NQA&!Wc z-KZJnOX@eH~LYp~SKG?(pqn!IBZ2 zjs2&7ZoUPmmiyW00!jf$r`vAIUmyD+baSPTMI0I)@Ypk0fjmU>XHR4TV&+|f|M6Mp z;ekA%XLFwR=h-0!ODVMItYd_!QP^d%kvP@y=w(J3oZ1Fj%v+e*T8Rw>P@e`0COuct zTbRxJb!M~F@ihZE00Ezlk)>`LOM)j?*es=MBa=7*-*db>8v5BN@&psoT3LDar7;9A zfh`nR*?XLZoFE((RIDuKa%ylw%mm6ZTdaLwb9MQYn2Zu}lHmG!uq)6eAWqeYcDi z0_thV^gW(Nav9@8=r<*rkk%LyJoDGliu5vE3ljlA;U@##cX~z&G>i{llLxyekvQ==<}2vOg3k^3M9(w+xqADyF3}{j$X* zudu3QlR=XCLub;CjFADaDlKNGINLQWB<_MYe+yIb#a=w&o!!x9g#3`F?ekK!u}QxJ zGpr9Qhk5R+Oy8ah5#p=pN~0v^=ZA#J;E)}v9ri`K+uuLUiK72uu6i&lJwE0nVEy#H z!N$c45%S*I>%TwjV>~pR4Nh>DhtgT#&L|^}&BDaWisVJ0b>2<@a&|H95pX_snBms; z34Eh5M!zeM0~9C0M=lLy>kNTRqL`~i#&EQTs!Ika8CMHlH+*7=B4X>WetD)|+w0wb zh)FB#OeoH}gD-WD+4cE{^69J26oQRu`(IMpGOvLGq|PKC=Y)S^O$S2zK$xX#)Y%a$ z_Pw@(2?PO|yvYX|rvrIIkK0@+%*H9^eNktcJE`nlt}%;uvY%!TP(`>p25afPh$bkM zKmRt&^a)Ul&b8xLZ#IxNX)6%stsz_KV>|nZ5H}Qr;5IIR#-;-7eCAvH!hZeF;M!%%4yS>mDyZYWSrJ9`hgnOB`o=eV^^)I4L|C91BY)m$8%n+B zvL{a}TavO_HiO7~P~`!OiSn0m-^V8RS;-uG&dl87d{-w0O>-~;)0`@;_3{hL9rXG^4$`T(2dwY48vPhHaNgWi` zESj5W*BE8tw_#$&PNx~Wn)5_mM4TU?VMZhZPQ*;Khr8?>KX=bC(k?5$>0FsrfN@Ws zhJwEU*s;b396`(3PWy3wHA0isUh>exjA%x6CD~dN8Qa)glrmBpIvOdvLKK`7kUG_ zmUpEu9uA00r9GTjz4C@2odJ4{2WXEjSfh;i0Kuh9%}gqlz_)jEU_?MtPLRu6r?Y*q@VSg%wOL=N62y3MtU~sMp3fntUleg zN9A1#9brC?H@tqMR&p(=-od0g!wyx4#@!gJxD{YBxtf);Poz|`oC$b}zi*(3Vao3y zUPnk0K~M?<2WqWznWS~BuS<7A>ylLeXk7=auI$MM5U)S-NP>E6Nf(#$&pl|&N_J7f z9!rsN;w{;f3n&5qd{?uPcAD+;cf*XN6vw%^1zt64vdKeIFUQ&(i}UZH?37&~B}Y2h z5j{_g167?$H7h@zBFkF9MGlfUh9$j9Z_za8yevK#dC6-d<}GU7v-x|(j9G8yCWsK` z{w;3zg}q^2rpqLj9~=$T#W{E+JKi5gZ;uPs<+0KAp@O3`E1tY0%&)~pN|CuWR`sf7Gd zohEh0*l_Px-e8${r{~h5*#KN>Xt1KJ>C);cYINzi`aDlw)^da$C-}de*!!LTrz`u2!T?o!^9tQl zm{-;pyy90Z}wN;HdTO2XdgN%Ky1^R)uYu71RD0PzEbL8s1wNKaHPbD972w#ypj7H zK192NmfL+nwY)dpLB0(3DAX+FRMu|<;g3g1-Vep|VJ-&6Ua;&?0398MtGgsnq*bv& zUyQvHjW&sEJQnphndaXCvDq?fM5J0hT(QYz+2OyAP-sKE)1TO|c>oOv4=m{Xa8;vq z>o)Q$wDs4%)XYd)d0dvh^V*w>>_+#h+iarDE*R6;uT$1MolPL7aTN=EH;dr3TK`>( zvE&+FBP8yaWpB~C{Fbx8(Z%;jUto0ZTTsL6VEzQn5uI9>V=PsO?(d;|1zDPoCKB^r z)mp1LF;A+lUP`6swO$YNeC||Wwbkt=<1x+L#O9brG$~GM%iiBF55Yt-5eY6M)R4^X zLs}VX>7{vwi-Y-K&K%K+{9avIWwAkiB_3G>C8zyDZ`vMe3#&Q(JSn7@BRYfW>S+37 z_6TjRh}Z7>r^skM&%T&mz__LO`O9zr{!smqJ|#~cZIq?qU6amrKQ1og>uYq0heKY8 zz@g~FV*LqQtLN$)@on4|wc$^0(w&Tyw?)p+)r{%?sM4!T**@v(Rb*Ds_i+_2pG!_m zIbpF`^!0tI0NK0{+?f+>#cynX^BeJgiw?O~y%bEEmRcj9&1X$i4clMQ>{~DY`g0;l zC+B+?gq%C_zg~${}(04Nln5O_ zb#4&l?21&0cQZ(}etz1)r|y6CMnQGHcM5O&M^+&N{z*#&F|jL=4-LpS>pQyUpR3!r zCJQW=Intr!O$*@Kr8p&k!a7Jpu|zkCO#vAc@-uMi^fvLB+|hYoaHQY5pLs(@ZenQK zeorIKtMfYBOENGIVR9Fl7mWo_m*(-ss%=rX_Ln&B^=+NQl+&H~qodA+t3(|*Hjo#{ zX}-rG0o9B#0Xv$_7Qfr@*eH1a#xu?5?~310Kn`(PFd1!7ERtTj`P>g2*2;NCsQCzAd+cfBh`6&k}-^Gg!xZt@5lDHaDI$# zkGxNrw4vef&PnB~Leg}Ve)@HM(K&jFjG?c>RJd`-{ri;l)c@2ZY_wDU(Y3C`0{A^LUO#kBr)t0L~1rw8{4m~Uf5@V4&I7A?`0qN0}} zbD49Pb3yq5@+jEC1wHWd=-Fv}evz{;_qfkX+I*Oqpn7BU2SvXA&?K2~EDm5}C%MAj zk-+B4Kfoubs!1^vX}0uQtv}N@y_kb43GRD&`jF2*d0c`-xF%%U_7Sv&Zzg9ZY)-3U zn7GB6s(*CoQ~bMi-Lw5Y9JF#l>CUx^tWw7-l+#$*jc*B+Z6`yPgu(R!5cvl6!A!c4 z8aFo5sdIaKX z?i13T@SY^|I$NKmLobfwQFul$b;q4?+8^Za-@T(sr4J|L*q}_(~iL`Q^xZC zJ$eGzIj{wm!VEDNb_da_wNIbLY6V&=uJV?FR3jUMpDULb3qMBq;ye@W-#`R%wmIQm zw!0;=`Dy>QyQQg;Wiqe1pEhHS8l7mb^0Uhf{2Uv}q&nWAO}cPN+Iw%Hnhoe^ImDe{ z-#T|$1v2{b*Mq0&7n!v7>bcV7v&4ioUFPiP*oRtVP&iIUHjrIWj&uqeCVi(K^Q4hr zxny^{mpKwJ1#m6-Jp0B|*STHPza=9%vJg6yM*^zxnuBX!DrpEhS+rFOLz*bT!kz7s zIlfr=XWu)P2!p0nI4NK6%+};P1q42@GD*Vka}Q4liw!GXMk5KHgW95j3`&|09nY_0 zj@25MB$IYLxH>tEbM_0p>U?cfScylVJ13nGP+rhjxJq;VooxFj1N7Sne8cP=mDH2K ztpn`3bLcGf*^!QuX2XN_j0t!+BZm(7bh_xjc1c^^^+@DIe4c-OjStzUQxFq~1|qpn z=R2#XoAIrKkJ@_sm%785(l8h-7nS7c8y|J#dX+>%VRW0u=AGB|=^cgt&0cs4kUM*i zSc98{E@DA6S3Pz(8FB73lzJfN+OCD0hifnojQ&7epMJ#^C|6AFs`*3l#o4`BHh(_1 zw1^DpV-jChO(|K+rew5BXa_RAN@T!`-CQeg-}~WR6o*&A_>ky6;#T9-#xe=+$noc< z1=pfV*o?m{ z6*gJidPA*LuLVi!%TP9i&;UTEJz$uBNlr2h1V}CY-vSc3FBkbRX(~Pq#v2=Zzs^m1 zA|h9Y#Wug4&R>SQzmC*hs^E^5u!CG55cQ}y3Q5LR*88d3^bpdj`01%jQVVxGeA#2PNuB3UZp|Q)Mv-Ye@)NHCew^B?eHgQ;Yx7sL7ST2{|JVqW54cUZvcrPkX;Lo z0^Gh5`*RU7ac@o0Sn?s<1UPP8u`%gdyQpz1bCn znI$K%8JeUyAE1NQ)_d!1&3~hlq?c*1@$kW@-%yb;jo04hAo_$jmNZ~mUTPmVjn5ky z*TNkwh9SMW(x0*cJI@yqlq~z5K_fTWKq{s|Et9F@I)g=7n}3(Ce=qER$7OzH#qc-U z;nWFf#I<0u@b1UzCtz0T?V%)TLZn|8uEd#B^Ox!&9F_=<*tdB(JTWJ;2-ew7A98DZ#1W$T=PE6!cTBD=VPtn#Fo5H7&BameALhtBY;0RUC0`UEHfF&bv z1|29cVBRGf?f9}2PFG#(vmLB)-P2<=KD*`!LfkST2S%D-h{e0=Wgv1N_ZQwo-zhjLvAYgGkblz!z4_uybM6ak z(cv)aD?G2^o1G~V{v2l}$&Z82<_IAb>z>Nl_#=& zL2GPoHs^;h_YCh8x+`X>M|GfpdEH<*K7K??VBD`4y?Z(c;-{RtZ`_aUj9)^}G7Jm5KS z(l{I=%!cxNjVSN+YjNS&8Dq&ww{?aw*_^GV!{e=hpS*5JUkM4hfZZG4(}Bm&UBr7L z=Ij=LW8YM{t>(t0hO)?hi#gTj5)_d7=u}T`mE9h9f76^B~`%MPNJ{#O%mTtc^?%aLgrOk@{efNI%Ul>iV6&X`9oM8jYT)9bj#WaP@`U2l`32 z@rlwfB$Q_{X&@REV}xCUl{h&L`;?;6f6SW11ccJt0XyyFUrx%5IZ{d2_Vi`=c+&OS zH5WLHrAcLS(6^4&*D27oY47zv=jaUO%d&4d6hsr2$jCG%+^zq^M;x(r92umViAh8b zh)!@j?XYr-j2=rNsbaTRDyz@0%nCG%gER9n3*NL5yGx3fFK3*!iA zCiQmyMg&ALVI$9dId>BkD#AK}IOlZlojlFN=VKE)7B$Mw109(%6viv9%wu1rjLoFV z^yC*mt^{Sc6dzeA-jH3xPex%MqWL=#t`Qtni3$sLTf@d>7W zbM^~>YN<-H$+@%NqvS>2{d|5zDBR{vjD>0#ran1h4TnN0iA)%}8iqnLfn#5QqsO1Z ztLrhXsHq=4yo_G zcJimV_#_q8D`HVX-lm1;Ov93}S)4+^gSu&a@3&^Rx-DZ63A=;j2!bFihzN zOSPCo8p{|q2&>aF&J_@G^freT^~dtYPyRo&2)k*U#JQ+o;-c$o3;Dm zG$t^L_A*B$*Ny0+S)kVXlS3esJ0{YgIx<=lOom;Jyx&i>e@~*w0@PJ1vsZJRJVt6^ ztgcK>$zSrv*muoH>5^OvgIS)>KBA&8WwX}}O;K*INeT*(eAk$Pv^o$nnIOnVH&gUA zubsW~~|Qq>gqkTy(SjGSo%L`|5SRpN;<0Lst+HAIr$f7&j;V@WO*%?{GI6@09wC zFf@=wnX@a^P#(`}mQ+}{Q%r*2^(-*2P#Uu5oOMY*+|~!dOEz6QHm63y*+1lL3n~aW zSZr`nYY3@*+~;bSv5!fZPiL;Jj-z*De$B0si9U{um=&<3f#zPNS=1KuaUn~2$&@0! z>HN`7D_RlOD9eLDqFch^E2f*h7MM(gvCVy>9{b)bPW5yAIou*DlzTtRG&qrWR~`+N z$evc#J`Cpq)IWJ0J?q_nz#zdfk-FDRK|i-PlhoG0a?Z^~oQKRmpn=R~qu7&m?=Eni zOO-d;cQAM59lK7N7!y1y?*LKfNC9uTwISiVlj+`cO%3JQMv?^7KI1L7v~pVscCc20Bjg!!XzT<8dDJ_Wt(vZ+O~&JZGw*m$1xyf>jxnu%epz4gl; zH2SP|)~)@fpS+!B>u%2<6X}3%V5H9Fh89%G3Uf|jP8~z_#xKi$18^5BXjfuRNw}2FESK;7-=6tz zswD1=z}B@|#2bkyX@vtxkMdw2&yg&9a=Dp_!zIXfr>yb(eTpk3V3VVzWfkm3R^kiG z$VGov`!%weeHUx}*vd?c2bC%?at4Y-`%ZVWo#-}|&GSAoA|q7XVziC|ew@29gc-@h ztNtoieU?NHIXJ_`E`2Q5CA;BH2HblkIV8cDrQ3`HAdkZN9pm;(_(A*GzLMCvDwRZ; zP|{^{2m$#~k!$!bd^#Ze?U_pTj?YzWv-jq-j`w+G^U!jDs6lWwPD>#%|91T|SjXtO z`Q1Tv``{vVpzLFJ_&oV{rfE(Kt+dIQ#ckNJiwX-gWek4-{pq4}^p->p~7Fj(SzL_=i>c?~2{HL5L#;PZs zJBEt?TjC@!uN4fFW~jNPE&$bUmI^MF{W3>>5rDmOwby%?(HyF2CPG6+WRGmV4N*NuM<;)HCL6dq*1{%s{yG;6QbEU< zG6I>!sOx!2JCS;b1W#ap3>9?FWi!3w4mr_S7=e9eJ=?&dJlo`F?z{vU8WnZU z%1V4?PfF}tmtDntoV_yCk4x8ZJ#%K*lDfUK;rvFyQz*E#?t}zYJDdJfoE!1w8=;!W z#?1ll50J^Z+Cmw2sOkDGz9C_0bRR9X=_pB4(cjV|2wgEVj{rlP0$A3fNjVp@cf_(d z%^sp9;h(}NK^&BTIpiwy-m7F9v8B}RrWe|-S6f`Prs`&p({&QCTsvI0tF0d*a9*GAg4pqLny za$a!(>TCXA!Q*KKvDC8t^+Vqs1S75l^e790c)O$risvRu2}dKGP!YNFqxX2+^rb<( zk?#ZFJx-X=zS>?I;mI4_ZkV%T;q5veX#QXv(UwCiiK^`rQvr&AhQrWs*AV-OiB13Z z9>o7Yc>=j4kq>xeXFu=zf6<12U%1Bqf5N|lkk)dhS9G#BUnZPz@~m5*x>93&$*41@ zH)vuIi<^06NUGH)byMja;GXGxl&ny@`EL978K2)-z!yo|yeC|qg}Zf9?PDj{lJ?nC z*KGLS;&J1A?+G=ncxRy3ofFRX2=jsXG3euE+1~@h2~rh}><;MzAQh(%O){@Mvk0U2 zsvA#|W3!?C`d{B}||zxeFy z9479Rufh*|V-VO^`8G_2*^#|*TB@Q<61RW+~BOum3^}%%bMO>`Z?xd z->&$>f_U~^;kHJJl+#g zSTG{tr9Fmh*6=>U^5hAHg-n*5bHZ6T^ez39Rw77>ES&T7pJ+0jeBXL*_f;|^kue|a zq@g;>nFNDbs6Ul_{>htOJd5{w5`75w?A|mp{#$$25BwzG%u8`pp3V`&CfNlA9!p0x z79QE9TCkq@4^b7iE3;FmCGCY2C^#pqX2NwhFy2#4?yt6T}9*zN0c z0+!u9M0=~NMuEEEEronPBWI?@A)`y2RVuuTP|a^q^SMy%cdq5(+2V^LbQD>}ubNX@ zi;lnGoxkF6=|~pMdB~+yb}4t}1WeI37htAtEjiM-$$-L?RcBg92P=)@xX~5ojFBcG z+G+<=snEF5WtZ4!5xJ5;J`1l^nzcVX{o1=d1)DS|yP<|pA0){ufC=6i5tISU#y|e? zIfv8EVqgAPug~7prr9+#e+s!#cI-^qBvQYcVx!1hijI4ErYZDbm=>Tv0VaOHCUqH< zAar@^nl44&lhdwvWQbr~Xbj;qIrziZd$jsqrO$3c!>;S@>#y#=?QN_}{9VbtxB7-uY> zRB9|Ws`6^|*m(@2Onw^F@y9oxBH(_rwYVARb_2+{qBbL%$Yw@y5G@R1k?Ejb-(3FCFQ>xXC(1Xx!6RUw&FjwMbon?~G(xNMV}uo%sz>Uu4(oU1XW6}cu9j*8 z*$VbT6D%_29ctU}d$}M1_*^EHqvlUSZu0?D7hc9NtS%_0#JG|;0vVBL*pTl~`5nsQ z?H3@o$Q>?p7_)VJTFdw6HW!OGu3mD8SFV-GsazhxQ>uMg7&ja5zUmyTDWX$yglz$_ z#h`WWRW6w+Q~bKnSf*P_#IH098L&p1tfo)?MU%#N90D5%n9xBH8!c#KxSl>x>8#X^ zw=GaRnB`EOKVx9|Z1(n}fC(Hh^`xKoe?xRc_eMlSn|OIlWc0O3p~IFAdpKx0eF?1m z-iTmTb|oG>heY(mLD5de(E>~cqSK6<6}3?fk zYUwgi*LSJtG>lGD8hvYm0(wMkL>mK|u<=NZqR)-g;FMh66kxXu#StCYWM?7GdxjH% zsKY{>-2i7V(dnAf_<1}Bjk^a^10m@HZ_)c zHQUQpA#r#;#K@$3v~mcN9$)iQ%Sk^#Fa)YSUn-}oTm4MMtZzb!8V34jZQW#4y z`$IY^BGDXA)ezz;(rFmM`LVfH3EPnd?aceet&Kp7gNq{|{bO-HUJ z%3rt@vls$F`;b&;)?}d=LvN)fH+*ppKccX*IS=HQMFXadm@PIU(Q`gFRs<7lBVLl& z>T-JF7Xb|-5l;rA8O5zk^-`MLgQsPlNIo7^JU{6&;fQfT4PO)HC;UpUX{UoPD7pH& ztL5#GjgxRu59`40%3^M3{95ybe~gtx?4O$wmSo3;2JoUlIiSuGj`cc*(+tdhl#TNi(E}X$Al%H3}$nr5Xt$MrMn`k1 z#+%#tNg7wTe>wMk@d|epAS|Zff3kNmBz25kTXYjV(f%Ws-3y&@wGQ9mU8Hx7g_@Y$ z@2kN3TSMMgoTocKnIpH?#r}0~LjH~-x|w8d=fJhK2I>}4R*<=`Buh(K@o!=+gDMie z-J)#%{Ns2`s#ZX|(C9dt!_Gdxvt*=Bl-44k`3RdOF#kI)@ivqgd*rf20HY*N*f zr%NsnS1;H*5&tVHYTu4Qa;MG_KZdMNwmm>|ywJ}rW6q}9az6ua7$p6lDDwiw!yGl^ zot5OjRuszRo+!B?uoWj-E2(ps;tH>bE#`13RNSKy-pKL1#zh)6zoRS@VU?&aRyFw4 zCnW&XUy(~wXF>0Y@{-QOPlg_~1Ujo0iMu?SUG$2?^g`N&B06e=88BTxF(bVEALp3} zs%I0&ABo)KI+WQA;;&=^GTQx+_O0QMD_osL&h=k0M2mWh1d~{&+@Ge#F)A1GtiBFG zz+AOn_bB~Zz<~wA7cAO*UGnGXZ)R*&5R}{yMiOUTL)xcz?$6wIKM7HHS>9#Cx_-W| zRdf@w=Sx__c_@fAg5vZ^CIUKe*pn07{KO(@7D+O9==3p6Mi$NmU#|+J;BgSu-EUDQ z8O{vwecs7?o6P6s6nY}pNa}Tkg&z=9WHoz?@uzvci9|Yx!aSETFaA`uzJ)}w@em+W z&AR2cj%v$=z8U8kILrVSCpN6ADAG#~pn)O>PbTlCjw6^PY1@R zW~6c_I^JYqEi!E{eb-b-;w_;cG35wIWs`~|?ke>z{oww`P65m_&tlX@(wY@#I{1aN zpkr}Or|};xbbr`LF}!|XgTR#la0rFkJ3g_cM$MK=HKy?)$`q4-3bPmjX*IoadY&$L z7-w0PkF8fW!PL>}1(V)w)g8(OdyF7B2B4@J+at@p#G+Ky{paUA&tT$rEWhxHbMrAW zif%dz+{wj2r*=B;4o9d-eA!dbhj`MZB0D=XOIr7N+-Ai9$`taGv#d4~{)^8~LCy7U zikc#kVr`z4vbA^~%*Fw%kBMhA+;q4*X?5nvCZE=iuz2QpuU=nwDzQ{TkPK$dUAj># zJ)z{F+B|3Q?(XcjE2}PAwazpDNlQ`U%U3j#$UgjHx;~e-c{=l_81JqUAFE;S0L8?s z0Gp{gj!HIo5rpfdcj>+@Rv3dRV{T2do$j<^M70-cX7hpaj;zX_ZWo;q_DeU0F=ogh zU1U5bl#zYoIjzJ#v)i!m`mz(tc~jon%!Q(Nz)J8lgX)9?`1NYSzrx!O8jGrh*1Bqj z7nxHf`kT{+IK&p(-gHG zcV&+k_v_}m9l`G*%3)DB9wyTjcU(=7zq9*5;Td71kyMj4J8^O+^?77AbDc@5#s5;o zj4f-tI7l)|r9FSys>x;|T`x2GckP`vQO?}Rip0q$rzMuAR}ouyakw>|gfgsLrptXt z_IcyUjMdsxMK>iYAAV|8W3IM%Ua~fSoPF17tYRDRDSTZj%EIBR{fTkftg!d;o6|Fl2)tdY4vk1N1;c0EUMq3*3Bm#u#oRBEGL^2bQ} z$c7Z{5ubrb%KGe1*ZQ)=K&u_WK)PpLeUOFmr7h%oL|v+a%hkr*fYoQaOIlG-4>*kc?prD0?3xl0=eB^D#gFTX{r_UAsaRCu3e;Wb$Fti zSkh?lqU<-sBYwTK{%KX9;VGZf0eb-dKw|Vv7SrZz83|A`Qjm8;rp4Tx+3Sm+qZ=_% zZvUW*N(fTUOzuNuY26X_;&^>a#q5NG5FOV)Lj;e~P+Zvb4GAJ8jIK((GOhCVBQQmO zUEo!Zn-6NhP0r=LwEy$<4E^me?L7X$a8Py&#bw7(pugD{A`3bWcFIbnVA5I?HOpXGI;DMr(p!PTOu~b@5IHZyi2AODwKGq?mr~M3dL6rg-BX4SU|| z!ZHkvN`-ZxodcBw-VT*JYSw@4N*|ZtkjctTU0Hd!y{F^k6cgT6p7he3~u%H zd^VER@$KXcZH&Ci#nRup-9!llU^$}!3yD{WsY#|L!pQxT!2FxlWaFWn0Cz&k;T`fJ z0dT1IO@gWKoo&5!%ZVhK5U=i7t{D-Cwsc;gNPNXf+iFXXGO?ht>0*!_%A`9vjGD(q z#{1Y7>fF)(rgb!OJNS=J3CRmYh#S)t+TFm^hNyaODevslw%4g`%eNy?0nQBP@TpF* zaAHe@g))bF`m;%aIu;Satf9AKjp3U+tAo80h6c%SQ#Ue0gHbq(gZIxqKo!%WrAKl< z_7X7n0o5zhz^ZNXUQO{lKx|tzR)3%Za5MNY(|qlq%s6@sTbK#rgldnM*5-$2XjI_5 z061FN#T-snoc*_5AOi~rQ~|)M_vcanhqJeeYwPQyH-8nZxVyVsaBFd=K=A;@0zr#A zw8h=siWhgcqQTv@1TRi-owV=#KQnVX*Ia~?oOAZx-?i4Wdi8Kv_bf2>j((H4obY|s zM%q?;9Kx#k8pr3u^r$6LlqEb`DTO51>_GVtowap4#x+_gHu_UH0ff-XBLWC|tCBuZ zW8{UW|(jf8+=Ro{Fb?SS7>=4WYnG=JBzEaWys9&)0V=tNk1WOHoFazdcS< z_Jw`Ow#G>n?xO&5CYY&TH*Q=@fc8`{P72G7XLv(RQ;shqhvTkWxwhOysST!r^Mi%$ zyxvsEX|8{FxN^F1q=|EpMw_`M|C*vC=eEm+74sO}4vw=4Klus$AdGTu01dAD9*MRk zEFEV|)tH(M7-CzriG<|t=xgj2E0E#rsMW(I3Hq|BqXnZ;bTxW~gk4@+%H?ki4xdc= z(l!!y831?FAw!Z@v;c7D@DP3g_+D8Z@d#tjZI+@D(^h4jkd)hLkE1bDaFlwA@d1-^ zZ!(FCX3O<}*T*~*nxj_X3*S8X`M^?}YSJia7;@;054){2-$I}%q(Lp4P z>2H7OvUtpy{|a}O45Mv6e8F4?H!gA+1ZGA&$780oW`cSe(Jk7Isf~`SLtr&+i?f{@ zl!|rzboaAxBO9k`@v`&WzL=#%vBui+=r#uTG%S8(ujMASLCoOFT@@6@&Zv7 zw+N?pGQKBra>u5fUo`Q3VIG(8jOrO3$giTj4!U&U!1y^W0lHRcUH6tkR+w zYKZ!2)m@;*eUP&~*^G<#1}Th}I?(_EXV4bCgxh2$Q0F`=;&1SVA`5q@!c*J9$1%G_ zjKt@Pv~wl|-!ri5@-m&+F0}k#R~h$iFx{NBi~OtXifTxo--(SKf&k2FE4*R21BvCc4!lZ=?sO4Tmo!bp~;zJn*qM|Z4tq_<6*53b!n zH{YI)2>e0IVNUx-{DtDQ=nYZ*;X87A&@dfU3MbCR_ck^?RLVMSd&!-q>OzngfYo9ToIXggLp6V3KZ=<+z( z&7IUFI@x9t5NKioya%Q#fW&@JMX$^%Q$yYUv~-rDzd78c_MZtV*KNx3ZEJG;y(m;E z`=_Saox4U?rXA*P;nfQ0Wo|^Xl?q5<hl)TckbBi^3+ypB&GH*$&YaBgz2&YiOp+DdP3hSQ`UmcSF^@53u}^fqNnXrt88 zMngbWo15dA1|9cx8E}y+HrQzCoT4#NZv`{-cx9=`|DiIFncJOSay? zI{wT7pFgLFTQ~rt%0%*Jd6rWzkpNzuZY}hylt2vpeD$8+dfF#d=BiX3)=^up*O(I} zavd&iI6C?)4j4B|edUeYlKp$Y?pfeP|1W>#<>haCMZ(_$kLC{?b`}hi4<6yMyXNP5 zB(1o-y2~wGYJ_AX7fRfM^?YyDM;%bn23U2A zt!==ia3~{**z;5s#%@oMqZna{I^{hDjz*r4=L`Pa3_v`!Jv|RjK2Z{Vabos5>KwuE zKyB)k(NJbW^74D1d((G~8Ga5v?Ukk{`p}gy*TH%oC3sR2$+PoQbv-T(0x$>!jNrdo zn1uD3)}J<~UezGyCXUc=fXw!~m5&7D*6fiKWFwkC4>GyqtDn4;)NlbBPDNoDdwUK5 zUOpzY-?2A)Dt*SvS1!t4fy>6k@&# z7Vo__$+EgoMVBp(0k1FD;dfFlSZ2Bv-_hBu0Qv^k0N>8H0WvGV zSVh_R{GFYr6@i*L+)UdJK$_&6;D2sB4==S90%_@3+w&Tu9&0DzOtGDkE4w07)IH$!@U|G^|R?Oq;oR_;=10j6mvvO;G(6nE5P;h z-QgkJOkv0GxX+Mt3Gc9(ro1V72$tg(LsKOpHplcCn{fPlWqGWoaU?7p2Py^muS=QI z8bG3^aibl3X;DYX$}w3n21BB6gyT-K1)i%fc#LYsTa}`+iBgqZR+EQesNxez&JaPj zT^`HRK5O^B9kPk3?pMIen>}-{wCJ3!f&MnfgR8UI8Kw&^qCDi*FHs`yG@(2m1n;@w zhl{sCIM{fynL>w7hk>6NWDu}jrV=3MsIP#nIPWJb3<4P#@^Qg>9z5}Pa^SHot&bT%#%OY+y!OeTTdZ%#qSKWNXdu%#LIXCMIY z`xWzO+KX{Rd*gQu`hE<PSkwmXHP>YQL@)2&G8^>v|Sg|5Yp zh~W;%Q({6E?#xMucVallj!7J|LtTIKi>q3*q>R+Q|lKZVUJ0; zYW2-3qv=YxxxZv1tO|41J)A+B`CroK4LrMq2C}s$#7IFeXbj~_QQNe{ zxfsP0;!SHel@%1!1d=|r7!H;ytZ+=@YM3?_|Bg3%uL&%$@*Fu$^Vw0>9+!s2ea3 zcymw37X)aj4%@FAk4M6TZx=l>mu-=6 zGMcO9pD9yiq-4vS{unX9%*dQ)=ycPm&#Dr{?W7GH)PAHs|c7OVrDn z0|oPyP-9{N<~%hvD2?>>LWkf`{TjRJGTShecqTJ0J5naZ^5xQ(7t(a3SvFq`B};-> z`5v_{6lXhuF2P=-{~mSYkobSi=YP}LP__TTDgKI%A0JWv$K?5|>4r=EziXQq;TE1A zuECJR?OxkFF?c#XcxLmLeO#TIx$mf0Btdze1RTlGCg&r(L1pP*y;Ln?yUdL#5qZ@V zi>az-w;bTBS5zXVOFztf$oS{LW!Ou&A>_>to)PBJg8+AG`QlL?dKN~e8)}iV-PVwl zcp!-I;nCTX<(Wo5Gt|#XoQ(0}oBG|yGV-#yad%`9zms{8V15LJxAjC4CuopB~~z(W;;h@rqDZ0AL)EXe=t!T$cF%Iy<(OZig$%N_lF6Ek%lF@Pmb*-$7H%6 z8<$wNT3&#Sha!u^sGZObmssgLKTI0uJWjnYR226)R}|krY9j{s&Np7()&sAm1|^0F z_agODJWAWQ^zRqzPXYf|u@GC_Wa}lG2mrs=1dMiC_Kbet6}Nk^8u$&5caCJ~;tGm7 zqe*-zpUNAm;`N~LRnjhy3|k*Xb+d+^wYg_TW%rY6KI$&(Jd;$VIG?M}9b~o&CfQrCXcit(5d`bWH=dfw2Hm?< z3ItnV+aG_IUdwvyqM=nCuXg?Dl?hZ~kdDAbB{0BKK*=C_l*0GA)*ni4o|U-6@2h(s z+us8!|lP=C|jU+V1y%qi|NX#QUD{m4U}*EWEF1N zYZJn?n3aAwjR=+tUL`Zr3SpS_?qH$iAUUnLOjcKAL`pR%rb#jympjIGP6K$0<7Olk zx%IPblY6Avpa?7TPxLVA?ZLd^%rK}z_{v0h=?3x#`}cRx8M^IPWG2{_Ld|}-8S^>6 zo$@g1%vgJ!lYX`78iPU#k=1pkAN}QIGs!Gn<&6JyXa{W`j99Jo%fwi=T;aQT@llQ$ zjGDn)JaXjgWDEcUrW>Qb9U?Y0L0Hbcntb5@bBp}_MqWG7^Oj|&YKgm408?W|R4lv! z$Z*5*{9u5s&7F`$67kTlBmo7*29$4HX3j#@5pK?cWXnA$poEC}OS4sm00v^G(b}ay zztW%s$8KBoOMTC7j^$#$%*IHSmu4Dl8p_)qW*NzibJhz3pV~AvzKD7)+yy?}iMJ*ycoEY1$ z7XwGljG9P%(kocY?E7%Qjb=^5GHjXIHA8u#7#YL~Wct(`T((YRE?!x57-cA$wMG0!3aR;+0IIWGZ5JG8zMtY%U8cS_ ziuN9tr|qAqT7E4^A-WeyZs|qA^PGi|F$jT)S=I{I3_H_3`3}$sU0))APqN&dUQuJ$ zT>$3>CL-F!_7WLYQZ&h68K|HCzF0*|{#qcBnRySYQ#osY7-8u1Uz#n-)QgyFSfk6f zNPZTaU#YXY^z+qsHR#9AC6$#TQ+Jm{=^~Z>a%O11j>b5TrS?ge2)jG3Z$Ao(*`!{O zAn)^u$^G@~X2&hWCR!R~^eCzeRiY^c8edJEbL`E)ksIMOV;aXzZ0S`LY6juRU%xWm z0x_w$m;xsSThf2TA|{~tnxb)2zoOY7eH&W;rtkT~l(0IbC(`*_n-}Tyy}2^Agi`~a zyW}jZj&{-Jftr@5GjI5a4^!4@j_R!tM|kzGHt9elY!BYlwoOO6Fqg<+U7GLq*i0~d z*H%Z~*jU{T%a&7fbqH+6>Q2_r$3WHM!+X)qnpz-AUvTL4yJ%|F*(vB^_dXJw;kPXG ztvU3weQ}f4`}fEuQ(^l%7aNY7t0>VlH2eznaX48okzF)n5xRsa--Yxzw8$mvLr>4n zKC|!EdtfAt7)788D)}&gDaLz3@#0lzl26y6^A&$pzEIJf+O=HipkN$q?D%yEP1Gb) z9uDt``G~PTjzTB~{k{>|+b@iCl9`l}HkWkgXQ+~d4^zx$9#$k~2L(g0ffU9V2o)F!bGh3V|@cOMF|YFM18Ku5jxKGsp& zji7@}n$yf5Fb3c#eOUV$z-1^8?f#hU(C8Z(w0SSv+lb5cn5BEpv>GB*IOO>KVXo!N=q@mm{lWmxZ>h6| zHJCY`Sm=M7xVwP;dE~kK(Y&}kS}p2IWK{gh(0l%ONpbf4^j+SweDIN4k3}3|H8hi( z%=G3qcpHDk$Y&gPV?*n3bRYFIkAV;$4QDS>gJo)$V28A?hG2hsw4D`93Kg_oi(}#< zxoUrHpRU@1VGufdY#QcZ;I&=Rv*@Ve2^-UC0Bo>MhcejY$xjp4(=Yk2sQzo3TTa^9IYI~y@aJ-*MxHMM?s0dFkw61bx)342()9fh8x)BlgDkkV1 zCk;(<4>AxadTw(ia_yJ)S$5QZNd6JJQ0%kr#iB`2Y5I^lP+$5nJ;g75H2F*yN7Hb> z$HD1oU*FAkqkBCdfq1c$ILU8+F#JC;1xY&r*B96(@fZ*0L^E$zS{BRsi9m-QY3lph z*!?H7_7doo@STXV*lT z1P77K84szZh1>0SToWO^&f^ks=c%zmAbDAhBF??|@Cyx0(es^YYJEPT{05fqzO{}9 zY{@xZX{>ROHn>+Y7@K5=$m?s6S2>74#bAQmd5Cb30`7A!PVx8a?$L$YLL$+HW*Kp96OKIz zL4XCeUz`(rR0bi$qXb}kQuT=7!eJOFPVY!bnWo!*YI?Y}1HLPlJg56h+jUk;hiq!r zGLE&`Z-SDieUb_r>ZWpMxEPS+!A1%>m=bxwu_;Nx`fRKtGp~PHneov!$&a`?lTB9G z)>``$;Y6ZlUT+w9YGpsv`s&806BYn+Or=6Vw?50Ejyi<^)Uaz-r4oU67bB7XnVQ#D z1{{${y=}uN z>#7&&xpgxlQERp*8?8JyEeDoy!R{zJ&zln*Z^*62UeM93E?EzHKHH

    &C0xcC34T zR1RlF(nvd6b~pHd-1kH8JZ{i`Bi!o-`wyzztye2O6d8;CCB1328DaEg)AjNWAe%bN z0wrh9JIzjPv&h(5&aQm<#^GCKV9zKqukLEge=@$_8n(9|B8&HC>@K~MDNyL9OthvS zDL3OlcT_(fW%AD3(%|{4B*N*;=47K&!aTc`LfctJRIrg`Oq0ZRNNvErn=WDiZcowl zQJW$jD{pj^Hm@x8m>F!LK>eAdK7A3Piv^#!?wEgJJBG3^ccH@K7hw*}tXmbZkwhns z>qsUNb0SlEuC)HDe0Jpg(1s|JlQPNAdgPJ``~KqNcR|rgdUWUQf*C*ZnmrJY&u59+ zrqvITOb(BVH4aUAco%kZ>)Ikhlv#rng@$RXMI7h?vRGy!zvA^}Zm)W4@eHs6r`Y51 z2%A|&?qZLFWR*Mc)vEi$RmAH579yzu;Dty6vO=P?hz65n%TFIOg0G5ed(+~<9>IE~ z*(TFj=GHC4m&X!0=y@Gi=Vb@yM%=u9M=`=Zcyhm7nJ`*$Y+Hy7W+m#ZZFv`K+yX^ZC%rofl9bkvArX;t?cQr(i4;reV^6>$TjS6>fsZ z=LMxZ*lut9W7ee*xuB86zN?C@9ftqQS*hNJ31NrC?kW`4#_qnO)y2!}_3$LCaPsec zFycHLKsr6UUU7h3lRBI!p7YP9dlQ$@%G3v-rubAJat^dXO?XZKIUutte!xRH##UwO z$r`wEnP#%T{0FS9AH3p7zryB)Lko`?T^S!N`@a!!%~N9!Tb#b;F7&X_x8nT~D&Amc zrcslgc;OZ9;QthOMCfaeTBNIJhjcfOJeUP|NSIS;rFg%V0&1zh0uDRIS&T5VFj%&Xzg( z{R66{hVTZ~^}5h7^h4HxW*IK3RK>m~23MJe-QznKGe2pPbHs?rtB9kl$tX}&qQy^t zQ2`hJqh+DIzsFEU{J#S~p=gbmey^+@aUrX<$qYY6EIXEEg=cKOr5X}RZq!$m4@R{5 zSBrE2oe&PV{(`;iraRiITP@Bu<{k(@QZ8~0=&t|M7BKlK22hMlytdlJt^()MraS<8 z7`=HJ*6OhfQ>J~w@=@)SWh ziIT{q~ zztOJT1rmOUcfr!hdjD-+5?H%k0!9P(W_~uEa$tTr;x&J0cx^P+_+?u*G8VKa20nRG zP+zW3?X^CyNdyrhr5e^@s9d<1FSDyxuFM?VJM&s=XEQen!uw8wS5|_ntNTR&dRc?6 zz5vEzO!JS0@06Q6laiAlHDA^lqO(`V&Ws-yeSF@IwV@Zrox+JnQMyYLk&1lhPc67J z0l;(sE!6vFk;9`)BYTrk#wP-%{I8N*bP0a?z=_oy*NdNW0L#E3VIEb3G^z!lM}RHO z`GBPCu1D7Cu=3}=Putt2N@^Ld=JarU=KLVDVtdO<)X#o zCI4OzZ9+a}mq8;v0|ZxaHuK0S>^993-Xyb7HL+7qGD$~-V~~E&Ml9dK(EXC zB5F%FiC=^o@dR{IT#Nim7VfHtWUu8s81$6Ggon=kPGQ!YewX@=Qkh6KeL`!`fXxYL-}bDI!1k-v~a4;FZ{))tKQ>=de=hMkj!ga^PRF{LM zaAT$Nm1)I(8a8=d66<;*l>;AM&4firC84r zA5&$6@xvfyJ(B1^sX{Vn@Ik>)HZx)RXd;~e{U=OTMHa}74Z$Xut58^rA>m^9C0k&G zVcq#FcWJF;D=A0Zn-=Ar(BM2u#ZW>Uo!?sPjQ1yZk`xxH5>8gG+sJ5nYAC6Q2b}RY zjMilZAD&9i^Gc=PaMxM${qZ~LZO*{RyJE2O>hQM9Re&)!qJ!Bl*v8)<@7XXiGoMRu zERX(SxcjMHgW#Hu{=+}!`qEZEfj@ zZBy|S+7;DriJ+x)MW0`Y^D%64Csh}kZJq|L=p@n*0+kZrC1dIMVt=IpG>?h>`{J2Q zz26@>eHWu{uc=};rPppZ{Ia{OG6BY3T)aR<7$_LT8SJp5Fp8-F-3=G6zb;XU($<7` zb^dJjFp$|3@GnZcaY;r2H>SEshTrg1_*ne$J%$9XxZ#jB2?=yCcd#b?(7p0o7Mkg@ zGfba7kxWqaZlRJk*dw^xSpU_HEi-fu-Wz%0E!T|+<#mBBU?S39>MSg>9A^&fVt0oH1J5kkJ)Nf7T)Rqb@i9aOX ztUr8p-|z{b4F6QvCDBJ>Sg_0{$)Bg7xY)gz7ey@WL)*5c$@i+dEe0;aBHhnZ_J?yZ zqL}(i@>g4bL0|WNuoJ)k{YDY(P%6M0eiU+)Vld*x%JK^9puL}J`-DmGmPFx8j)l!B z#bxDUOuu`1A5nP$&ab7bgoCV=l!NEERfPs@H**5b;V!vGHSyn3#u*x|vZS)^fBG`Z zyzOyeo}X*YC z;Y)eC5=4tk`(gtgnXab-$}zx)ktZpS_t&t}Gg9 zT~Y@Mco`vR%r&xqYuA>t#qypVgmV(U#syo1j0!{D_@)|tTEH#&8+99nHNNAg15f1(ZdHJy=1z8_0k zWkFdE(d70TidRJ(U`r6ni+h{9l6ebik)W;-VvbP;(#mZm;0Av(;s*ccqsBuZPq>Yq z8B_3Ag!;P{j~lmBT|%^I>u`hkMDRow2{jg#a@D zTRx`#E+5#(B@2g?@1q_4zDT@5>;T$I#~wHzKfTHETtDpZbb1w&n5s2uJD+Zva}CP6 zWg7+!(A=beEmUb|yrVXJ7&a^u)r#2Hm8P34(_|T*ZQBM;PiQ43R>h%DZ;liEfJGPb z^*3qa-nUOrjb4Iw*c%tlb}tVH%+Ji`Z6JH+Z?>?In>$ipmYF1o=QM84ixJ5MEJS<+ zm>m)`H7I!E(3dScaGoZi`PUtc8v)OpVdOVTH>hyTWPF<|6~nvzy{3W-DnqE#1kX65mo6Fw!=O;@MyaMQ3K+dIgT5GdcAJP-2> z(HDt53_1FRQ-?G|ZmGEFkcg-F4 zbb3s?GLY`NqRTU&LfUZM_OkArsZbx(DD8ykL>U+DgEh%=opiU#8UoGfW_lP&E?L`o z^DU2)A{4!){lVek)4=MJxUvKz&sEKkDSizz76h!+H*(zNKE67lHsG);hy{_rV$Am4 z7W$lI(Mss;l$ylIZ!!9)N6|&P@o)G*1CNnOggtKAVfp{0ZK<|@J>w0?x5#j-$F(!O z%OJz6n2mHZsKjPCjTNKH_@@EEcZTKgiG@TMmI*w5{$O|=WBqkw0uD1LG(NvtFupiv zWIq5L5H%^xoCJz_+$jIc{{>0L;loek5N;Bc)a{S&oDnZ99r*g*|L z)dP=j;_tyd3;c5DPpCq7N}>26`;5h!m$~QaUB+ySnwno)ju$EJi2lxJnJCcV19v<) zN|BX8imnO6!F;dCwcM~R*)^lFZu2+#_pJmj{cRvbkNkm%+XIAD9bRiGhWmAuLJfG! zH*UYua~(yh+vP`oIB#bHyT%2^%qLjYKU(6jMmHVyz^NyRDl|`gZ5&^Y$I(v^GfiFw zq=4^~Xg(xTvz+nlxrK}7U-l`*`F{>Z?0=yLDFLWcIKSARg6;bl5}3B+E2F{FCX-0c z7N^{B!70Cj=?>BrIf!I@1#RYfjgj;Fap=Djx*>e-x^S6)*YZs9cL~_0^r+(t{(;I$ ztaTE$JsWU+4lFNa~$u> z`Ksrnm}g}tyLyKa8nMVi?3!9qtswS(x6NH&=RW*NDl9)uS1WiRGZKPBy04Vy)$F9c z5i0S1_NQ}i8IDuP0-q_vxBC&Btw!4=1c@GKgCaw+t7Micdmw;E*Z-H&Yg}g}3%{IuI{Og;OeAHg^<aomrecUwTn;W0JSCXN7Fwz;h}MlHra{Z9{6O@r;qf~*holGr)=0D2lZ<`MmvKe! zY%N4`u;tQh3!3=GcJ6ige;7byT7Hi2siAGF&3N)wnb@RzO9C~lQQ4ehAK@peI5hCJ zrQO0Vz^jQNpVK0F7rp^5+rL(&)^F1Ll`faOTY>ga0~lk$u=w^r751?g{(3zc%*jvS zUV=7@c2PW$5)?bF^xLAkn0)bA792}cR_tLOH;kd@nhhW0fb0}OtJAqgYT6Nn`ZHAq zZAz`=sLA1y$PjEjDPC5;lx**?j|CD|)Y@MIE@;;5x8xvmnnDWD+ve09^$0VAKV93m z-~cS*rjdl4-mFf;_UYATy9>rIE!Q{rZkVU?TYD@#*B}4(Q zU8hkOkB24Gf_WTS6SBl~Lj0*t;nt#ICRdRu-%5Qu1yd7)I6?XN<@xYI6`)DVoVIX@ zW_1eqGQ!Eq6L?&8RXkdQvp?6ly-qw7<$3B(L}a;Z8)X04*OkjE(R z2<$ecJw!B`mt{!vs!1yf-p6q+Ul)N}emIYFifPR&EAM>vX1YE7Qw}= zRXu5YBK%DgdC09exAk;;6t?HcRQm;241jdIKi#J=l%pY3bOxeO917rpXoSBh z?)Nw)#0gOEOAoyojd&eLGl4&GlerWZ+nfLyn%osoHc-N4a(g#47Jb2 zx8O$FmoXu_73k*m|6?tV)*Q?EztYEv%m*a8(mBIt>i< zBYiEHL|2e%74MR<|Da*C>}oL9`j)XsTKxo_cxSyke6F}9m)E35=F82aA3uBQ1hhXQ zO~U_`L9`JA)etiWj=huXja4flTTc~bV!={<65908p{Gv!g%Biw-aBO8!5U}%GKrPDA$iai3TgF{6FnyZhwQZOlZM-MvKfX$%@s519*9FE+pOdR9pEo_oKv?v{3ffcBP)#g() z*fy}G<`+C2sAf=m2C_s~5bB=l7v|~QIS4cqdOehox$2bp^)0RfG_#Rd5(T|=d>z+a zp69LicVA_^R?q`gin?9shY+&ZLc-V#DFdYQN*H ze{QNqvcI>x=DJYZKueUA)qYY;_F<*7A`+N6w=bAIZ>-J}yyp96g*~iqJzJ@)7&cWc z&*8LJ^($nlwMMlo+UTxq`YfL;u}nR4FWY8((5wlWH|uwwi-Vuny^xWob~GOWBr)@s zFmu?ErFKK>ZKuxHlK>Lfu0fT}R=M$WC5=U~A@zKFLW`C^Lls#uo5yaNxqB;ccf9`3cjTBq>p~rIV<_SgGCkJ2UhnH?;Vbj2jeSCEuYsYo2+`1 zt%5mWqS^k>p6pd*THd@zKcjE^T+t?;5QL^j&Q@6+&U|BhkI*F`LG&FZoHD*@Z=0lv zqgCOKTU~o1P5CI;UeB~Pp5K9m(aeAzd@#Ol!lpK9CNfXjb+6*tb)r$Jr@T+8OQLsv zbH_T}9yvAyAHWgJoa{WhlxQTi`t8*F`DveNCt+W%5QK~*c^IdcMS>hZ@t|-k5hcT< z#2*V75Q@mKoLYm|DG3XuYTg0B#zDn7e!;~uaD&6ihqeZ6Xpb_GE?m4Zq})QQ>YWdJ zW5;bK<9sLErc#U{hAFzXD*Cu;mA%S-HByB*7)qwMZIH4|Id8HkgKILx5vn_pY|%Tk z*A$1mroF3OB{zeKI&Jsa%*Y?c$3CXx_fx*5k_Hm4P_TSgaNvwq$>4KRB!;e#^Dvu zKc=L^k z`r4(RH#TO%SA7|CxxHJztQXQs4kp0G(wpg4mM3J zHtbbb7V%D9vdHPR{PnJgk{c(7Ec!!Ja<_5E*h7w1?yuC|z}0tDZc&u@P74g)J9lI% z_)i&bneqi|Aek8!a-63`ThP-8@Jv$;-N!YoSrJ5n=dyEn6`(|G!pM}$pFYxL- ztWS__xw^D`Md|O3S?%@TX+H5Z85hB6j>uHOl@|x<+JhLllQBmPe?C~qYWnC}-Wjs+ zZaQ~@!A&ndv`s9=jnhx&$=*hnn8kaT>RwS%M%+4OzdMw*q#5YOWoKbur?GwMmF1wc z@Ix|6c$V{?-V>Ezdx^iTC4XgXI2ga=(SqH_eE|7f6_=O-bofIX&$E-kj5EAF(1(I# zEvU#r+wzf5B+kjF{_2@XU9Dy3h&bT<+AE6Ek4^d6X@@zjiU^^rTsmJSWQj74jgAF4 z__4?-B*L_q9*Uf!lEE3S-ZtPdZ}4l!En;FzP;@?H+yXXblB1Ql$#!VK-+j80Jc@Ot zQY+Zsof7!pP48X{4w|2C`V%g)0GYYwY3cU4R~lJ=nMR|m;h&`2WJv@k=$s2_u_^@= zs^G6p+591rUsQ_y9c>mw6fB$aU!C`SjF4IReih4?HtEf{X~g z@LtmSS6l;)Ga=32o(5OUQFB48O`toTGGk&E_XC;iWmX|#{O%ULETX-YuNX+Uq0VHV zO|E!8;e6k4(IN9{%XELDB7JE5F&NPx?F(%&t2fb<0{k`Yg~7`sw`4PN1Tk#-ti4`< zB&YYZdRc7Gx*0MeYY((6bW-czcvs{%OWlf>Acs2l4rsq4#iM2uznIeMOl!$IGpeNT zoJAtk`{r`3L5@IGM$vK6y`~9usGojlMRBu5;FGXV)B7-M`mn@39oXWPYD8=741X;8 z#H`5oN4ZysF_ixlWO9snyK^}D82Sl{rac`vPno%#u*;bQ8jSP!9+Y`PK2LEfP|9^- zi_>&99|9`$&`pmxQ#y!GWSNS!zDoWA82ZY=htR~D8u|;Neu$~b3aOa-_2C>h;Jy^j zIMa64FQA*Lf0xoymrIT+;un2Gf}1M|pnxXzHLDG&R;k+K_l#$JA+ zpFn10tX{35rvtJ)FP>H%%jqr9f-<4Of5-@Ji0$arn|tOXsgQ@t4r0&8?8m4jeK=A@1G&MH+2A-5 z=0ieFUUy2jjn#qe&b57Dn*^z81zqupC8%&2z&V)}6bJ4jWrLEn4tAofop~3cNyR{% zrNk3UK~C_^X*eUvKZVCT_*ETkDtVUkRHvV-ez^)2+j`)T?EsslI~NJpfmtYij-H0S zljDkfy4Ve`@BGH^dMxDC+&+Y{{Qfcos~Jn)wo?V?SHdxi-KtX-#M7dp?t1AuK?U`V})s+}^U(;t2z)cz5tR4LJ1 z$^Wj=lBR)4>U&pjiERZbQl0O*H;J9DBg-yix$HHz6+l(we)B_fN z!^WS3PJnaLcM>{4RnT(7C<9(I#V9iqoo3teb{i8049&!Wn*v9XCUPO1=s(r{XjZc9 zFQJdlZH7PtfmmjAiTt@;Y5UYmV7fqHjh4T~@6DjuGSR3YB}~VIdx7(Tz z&=}{^7kNaj7rZKWr)jUYq&7q~(qdhjFYB43tL)Tdm^@fMwmboTKEXw>H-b!Wzi*Gw zm0#|z?ZG})zVKs+#{-JN)0xBE+KtQ#2YYpz*7jTrduIKb9`Lc+_4YUc5+Yj%X_{UPzGirX-O*j+?<*z2IpgljoDJ1}pov}(5$SiT$ zfA;F#g%dv$<`CmjenNP1x~Sl_B4ENLkpe{gcJbc}%&&mqNv>+W?0rDhVn~>Yi`7~h zr9tIRFn^IAd&iTSDgGK!b0z7U5%CFLdduo(Py*V z3cX>FBhhuQt#vjC@0bau=T?voi@}K*HI;gBxNUIZcBqNu%Qz)m{Lp?^zK>tnWm8W zlRuSn^jqhJ_~5(oSL2vNa*e>dJ3+Zueiho`-`TA%5*8M2FINXK;LQ@>c!PfU$&I|q zSfXhi1t-83?F(KA5x}}m|JC&t0vOGl8L)homxsHyc;Fqmq0No;nCAckY8Y^(QRvyFY7? zJJ|#EB<}v(f+rIx<;kluT?~DraD|0V?RNRAP2D%>A9u@eoGYunXrFVLTGQuho3)=M`(Agshyu!{^H3 zoXimJbaEoo@h`TXNY=hj7@ilqyTv_0gD_2#&T-?IY=dzpIP)^&`p4mGeXpml#t@70 zhy=$tDyRi3?FC-(y4qSQ1xKMC5a?@|I$$BoBe1I6S5kv!Lv>&8p-B?6GN{t4DBPY* zxDl+WN5a16H;3ThkSRA~T}F z=#9#->WE$ZPcgHjH?2W_is{FuDp<<>ClY2`!H*3eh}f9nPt%mKLI31EUx`lPJFU`B z1&Udq+5L{Fgj{Z-9U9cI&D06@A4(&^pEz`)huIC(EeCvdZ!t`tf}Md_Jh4QMq5bT^ z)wVEC4!V}=bX;z|@fz?i-Ceci(OliOatPN7f1b3-LV!hD=k!E>bA{fa)G>o zhix(~242JDrt;VavRMAUe6%EUxqfq{pGtt=hNJY=&4wLMD2xY&Wt8^C9|Ut5Xc518 zVVzO-QE@D5*wV=un!ikX)tBoeDdMw!Ec7EKK@(Aa-%gRyOjW0ADjz8}T-(^ITYLZ3 zQd(4Lvtf~=+N@7{Hwp;(rYn?kC)9{R26;ru5Q^XL`=bhlW@230uSLzzTstwsJ2hLQ zOwYeR-7+@Uo2c>c;a{ty4P-t?ERvhheyC*HZXVh>PB_qRq2VjjDFiMhU#2w%X!dOE zpb>)d5kk%hK0HH3uPBCDUa0KTH2N&n>5xv%B}YDt0-XY3G@Z(_V%iXkYvt6Q)$Wl+ zT;@MET;RRQe!G#hH80T&2L@~g=+!eX+CM1(2QCE!n#l8`w7C9OO^EO>=-MVSXi^FN zjwL@ekC>13wk#oW_EJn^n+V7_4rtoPoS4;;&BqV%IGtRNFsr|0Ukq{)F?1q3e-h_K zHc2Xj4&@A-?xeB2T{ppwXVQVnYKG`&dP7+GiCn+!PI zjFrc%v+Nx1F`~<-;qA}asiK?7488o4Kx5iZw`KgeasFksnIhbwCa0fc;Z!NclGsMo zF)qa~(k;_%e6Sh&z@mJV*`J$d$uUec6LW`J2hAlM^}n=`J>HhjYO-t~KE{8MlWf5M z7jyXkCsIQbTlaQw>D4ywH9wnwt{5+<_De!|uc@+sxWu6^Jh^nRX)dM#*C}p5?`|y> zCZuL>x>7=*FRz8l0{b`TK_wn%NwTGDfkRA|C4=|6=mDANQhoZRn*HDY&KaH${|=T@ zxkwVY^eSupmt`BPM2A#Dv=V|Oa&Q*|=dcH|>b!M%KVx`TLa;6tcfIkixad(h>fEPA z=Q%|N)81w@9_M7N=-zsy-dlII@x|@lRa%M_hhoK{xD&Lv zhvM$;?$+Y&8mxG63+@tJibHSCa^!{89SMe4!FMS<8pG2qf%n1}FA;7GOHN`}oJIQ1t<8RVj zeS5~B7L!OPW~w6oKl^e2(v@}$EV8Kc7sP59l7A+Nq)k`9zWT!1H#e8UqGe|VXBlGNVQ_;SLRh_ja&eOa05^Nk*iPy1Z?Ve(3z47_7GEvV~X9pKtw zwEK1po&9TLXxAvR)#N+DIK84`0(H0LNTtMOOE(NhX92p9*}^zCOz$suf6WgyVcF4C za-p>f;IJQ*xs`|dMjZ&Z95%vFo-VsAzLe>95uS(^#FtUAFa#xyq}1?bqRwOAqrGV- zDsrxSBkq<+--P<=b>+`eu1#3CPuD;A5RD~kJ7Qs~?00`il}>~egZ~y5uE9MJi0PpT zMi&|!@bLON?z6&)RE`l|hKfEysod2QnTsWRE*>wwUkBo>nB-4n~wOZn++d9E35^)LkZ!{N8`eZmfUY*8VY($t8W#5N1Q<)v-`2 z2+i|y(bnU-m*e)3Si~JJH{k~Qr}1h(s!{O~SAN9T1oQmhZ|?=};!bL|Hy*4{PK}O9 zXjUKayeg>;>_HPDBs)tZ!OG9;)HQyf1d{frNbQBy?YY?lbw^nVM@{Ytx1GOB2Qrpw zH-$nwoXSJb9D=@gtR%_1Vkz%m_bzO|jncx)YQaN6QiizMqm}H8NVSjat!=)E`onVg zPDqMsBwE?lj-Xp~)p~2}0kh-rl9uUZKDETh4Z{E&Z#|1i0#1+G1WhoX6g{TWQLlPm z;bSjGnv9vS4faJLKNnKifJTfpMB%il<_RJ2c!LSTgeUYHM)Gv$!6GAA-9B7BXVp(& zMC{B@CYU|jSftW)+NbWTFB?~l`4bK&96wRd{{cW?C~POUJ?84L?#=`hKzEo7{pRC} zNo%c6Eid>e znRW6>;j5R@JyHAM`v9>Fwi;QDB$a<2*}OtHI^h~y8b$_YEhb}L$le*-YKK=Pj7kn zJ8(d|FVEe7Oj8}hhWFGoq3pqccGX;Anm+Mec-OnR?TM_iRW<6IJO-U%YlVn4{ThIz z)ZYCANA%M=_9WkWiu~R50d)<>s^m`^u4Wh63Z*c;4$IzoD;%;*)5Baw@jQ)QAQ|Tk zabaS)bb@zgs_WdZ6`X-WRY0*)GxAJwpFXpOlmoO{^Dvi)wU0feux*v5?@+zFN-ryC z;qc-x{PT9Spu~u!pa8ua)R z_Re{Q0{iuSTGlX=Js-YeH}G>yGa@A9$SlW?-U8KuCD}ydAEYqn6s}~bzKCV#((GPO zbeG*hP`W5>xC4LZZ9c->pw(kUQk}|+w!kqo1jm9J)3$Xq&kqO~)IS$ecduih9#h;8 z5#vmIM&r~*S8w*2Ff#3tQZ%C)p{;I+OMjz9W=% z@Q1E+{X(pBKY&BqPukSnp$8(4NyGz7yu$IvV@3VrF2zbdd<3$nafKRNMqSo522y^X z?aeDRmECVdd~MW!ItI8o@-d?)sD!#WlHKpNXrmyLv-2o?Y-kREo2p6S5UACjm|(l4 zg8pPALT5+7 zt%5kaH{rEOoNW9=Bs3*AP5C9_(@~&S>gf!nF7ROM>8Skv0ACbVN)UV@mF~R*T;a{E z5wy-}enb)+%^~&K)m{lf$P;HaUU~(>rv2sCvog|b(uu{4&_T%XN6QS~41Jr~bcBM; zY&;ZuvNg=W!#6iD_IHf$U0TY$HZ_gviU3x;E!Yt2>Mf}@@XYT?FXG>ria$x;&)$$f zD1nmd&6~u1WHF}f5VzfDJG&`)X*Ty$z&Xx=Rk3%_9i6%(oV$1~Ax$VPze!XO7Cb-E zpRuzW4jB2e6wtm5QYn@-i(3HU55(}4py5C-h|=a-5(k(P<|+`k8CM|*9JqW z#*_8uyUgEg$yorDg3RSxR9ab%^~JdK!rQddiyP!bn@w^}bI0wBohQ(C8*eE>$SNE? zJh;L=lZ;P~7qwF~iZrW5vyDu*D|flA8D+>(D1sUDH%k{Rrab_|JzE08L*>+|y4z;n zRxZYmDCs*ur?Ko}wRXYHx07JUP7Y4jO0lU&lf46`t%nU7D2|=x z9}75S~Pm1o#(Mdwc+ z(sv%$(tb@23%!t8y+_pllx#14|K57I!>!e3(rnybUoxDWlhuE~{q6ePBY-#eBX)?5 zA?(cECd^>G8s7S^PKrKFSUs6U2lip&;sZrRDHP5I=bO5_1_f^0?_Q&ruEHdLo4=gu z5T?&Xy#nq?hkeQ2JUH4 znm1xw<6c3_7B9c+vIF26_JnqDCXL-iDAnk5nSS8?yC^chNGG_0Ev;zVjqNYo9UAtD znw2VyBB6DvHSV=uO1@5n$%vp^bf!&Ko_oWcEMHxr@FtU_qqVMfPK5 z0{>fAVZm#wui$xZYys^y;{8x0?%l{PaNgU33-91Lw(--+3zG98wyWKamoI8WuGTlt zop26LrK6<@b%}?^*+wnX`C)10+4;pd+>Vl+;J535`abRJI-VKsz2fOMm-}YZjt8vR z?T+4y-}3~S`l~J@#0G-pmh_iM=g-+Tb?ea;^0?p&j$OM#VsZrI8p&Q~5{|g@sUc6h z2HpwTdm2pvYNk-Iu4i9_9+ckbxESlu7O=g9fB>VB8jW#MtQcczz27h8V;Z{FscT1u z+DMpju7UN;E;=ohefuMJbiE>QKg|}caow4(PsI&3X!la5+pFKydWiZ+hZ*VlZL4IV zzdWnApc#!10zBs?ZZ_ZC&VqX5@put)7Sj|iFx#Knzfq<~!McYK_%e&Ak8rc8fZ9Ld zukj>&v6F68w!bElsrHTSP?**29|@Yj_ZwqH85s~krAWGvoAz{c9DI5_lE|wFa$`PD zQDmo|4$*LweHdd@9(;MPD=#=I!{ps5qg%JvwuzAfH?8;Tkvp5Im3Uv1+PU)&4>NUi z(%H2}sVy&z2w=QnnkP zPN_T>%(QqIO%Zu5Z<91+pqf?j6h#$(g8vRSNYQkc}tE`8R?#BIYz=18>H@0{1E z7x=8cuu(;uE!{4RXf?+~NO3w-v6+${nPM+jt$hp^6#Gg%O8R2ZFWt-~@7knmYH$PU049Mp}3)V)x`UPw7Fpz(-Z z&Bz5#eyq0L%eZth4aH0kpZ{&x`X7NNhq>ni;N=8}y z%e#hT{|jsQ{_$s5IQeMMluZxWmQaPIn;i%L(RQ~1r-A36aufu(W*5`u&$&n?dy%#V z1Adz}`j5j4eNWpsT}P^%M2ro0noQ*kM~zKmBvmz<2{+uS=j}JnU)s|n5&5_1W-K67 zW>>M>z~n1UG>%F%F%&cMM8NyTnCVEOXs9+D7LL<_9~_|FjtKj*9?BHk2|XAp}<4~-=+&qSre zv7vXsd7%C84}LtN!GYUhLXyRUfrAv!Pi;qV2kz?fvs)Z1{Ru@ni)Lw@PckM?(E26PhqxR$ z{AK*}&b(cF$h#O<;7i>t{DHsF!~0FVz^eH&^|B45OSgKhE!T)!$5F?J)!wh|oeZjF zs3Ef{#Jw*jx-Uvb$=megoYorCQ}=cyMH6L^Un;$Ws}XO}C0y|(HqcJm#*LBZtDvF} z>d)JgWsq92(majO)9kRI3B!I<>>~@`Y0p(bdB2V)ld>=$Yn*aqjg!3F7fcT!N;8C^ zTh!(lxvT^~946NG(HLU5QhFm>>|cF{qFoddLZa@M+;BWNpM|u5bJY8_-lP3Hgv3lH zc!*Ux32 zEE|zv)*&}SE0MC^!QuCS%cRvP7KKh9=0(L=2!~r%3OUqD?mo z>eBRPy@?CFL0K)%e4L*t#FY>F&ws8)*uh`X)qiC*iGf&nfxjuO3*cKI6t^;hEHh&~ z;FK~%&Wq4v+1!4IDd0j~!~Ml(F>i1ZZq`G#QK_$2q20UU0hDqUCc7ztlAp59gOCzR z?|k8K>fdgUJ#Gyo_%WxTk=KMeRq-}f(T)OLg*IN7NC>r(eU}>eru(aTP<{b6=80E&gf+nBh zD{Fj&>=`F5yQ`7C3=h4DWL1Zp5+uOLeDi87xtYSyrTUmkCQ+Lt^?^F>PBA4;tqZ@8 zAf05Mqev=2T%k?N>NBhBW#fE*~zVRqs;yxmC^!vZ26k^cy`HC=8LWO z0rRjXrycxNw+>lHYkl!FR>>688(XU6GT;TqTlIK~l<>GpdqxIxxy`xN?$S%b*=(da zoT1q58?X;TZuwSKXk>M#W>zlHkpm)ob)I#m(T=ZdKI=DLs{@2hMkXz5`L*@rv{9MD+n0Hk)2OSW}duM_`!5;`+GmX%?<$qwQR1bMv4)t#K^`vpILd ze_O-AT9D%&U$wEtgWC|(cT=2;ynx?#C0oi>z$2;`KA*6&60o|QD=$VrpziDtKKd5A z@ubQjo;l^Qp@n)dK!}8v@vv8&Mq3_|Z3Z8R{@FYFqi-=DS|;hAzgy~6;FFP3l24@+ zBqENJSlo$y>!4?=_oyHC(;+l7Y54~x`01cF8n_q4?U2M~6*Add`thk@WuuJIhf?59 zLSuONVmn>qN1fp5xlf-6W7_$pu1FVsHh;LycPm zmQ*zb&ST<6rj#U(goTFZl;%P%+E<^m{7B}rvVvO&{`TJey2f}YAW3&vdO9E2+-s#gFmk#Ee1XNsZh7(aL;A-+K(GWL!ya+Kl^f=e>>5o!85;U6&^P| zm?b?K^^}3H6N*6|!)jzKk&I#|dS=mp7&Wu$uCMJT-gGFOidhA%XTA(sm9CxD6NZky zRJL9G94i^Rcbl$`q}E4D(sv&bKj+W=co(-~^(SZUhcMC} z%B0sxTl?O4!%6zP0M;I^Rn3=zmo%q2Pn@l`n>M#>pKHL5+gQs<+eXo(Svc&|A{~_` zh>32zvXbkl)(l*{I%ARa@~x6OTdmIL>F&}sl*tz}BwP?lCD#Lc6B)|-vSpMpS;y7( z4CD6USDl5Y$j*}^Gbg>^>JI&MeTP>P$<;T2-GfJ`?f57fg=p3h{*L z^3u51I9O8Zfw5bwB`zt6U-vS9kqNZFQ@yvLo-;j7f&@me;n>yH)kEQ*o5rjRdH-y3^;U zsOWW7)$btASmpbho7^UKCXiF@1uZ?00($XzR&J%o`37IrS{uT-DKNh@N=*;Q_J2dv z-21A=w!Cn7ezdHiBXFvXoSuVy<8nppk-3$CL!bn*Q_jm`xk|o74ylM&RLp(bShp+V zi9ef@oY*2%YU^EhPppd$)%4|l9UZbw*f*~W9ma^L_P*(oV7Fa~Zc=kPZE`~9Ep_$Q zZg_n~;4RH{Kz?{LfbCZhS2^WqX;w92{lRPloMC#Wy+OWv&ZFv9DU~N4^+)GIq@8PZ z#I|zZf-fl-0An_N*&UgbqLS5X3T0~6s#+JqTgL}r9YAt9xn+WO1lRTpX)ph1M933x zoKi{(*0&qV;_OSZ1^`%}=@qD$@d9DtoZijJ3_%MTt zdU*<}Df;zHMbMm7zo3{LrYf-8G{wW^6Ih8}n~i2TK30AsMcLlMF)lKAg3jMeNl=Wh z*ubo4;- zw^4^6n0P*1VU%%%xIWmY8l%~f(8H}-OCYO)#78u*FKVyFhzJvk*8g}=Y>hlbUN?|d z>y%R4_+XDS^72cbAhq_gOt88)VgHOxT+eSz&BaP_b2H0(&W`KmympWxwsl#mxOU%-P1Ph;? zZ_qwi$VUzGOB-P$T!zw|05Ch8m2pL9loG1l}s!lnEtoTlKLyr+Q z&`3tyRGI^S#&`7h*D?}QQ)~RlQ7|JuAJk-#b_4aIK5tfI0aK?P);UWYB?&bBNw+$W zylq8T_9=CeHmhPrBTEObQ8U_aCla%#=N3me z&Y=3wn{8w7ir!;-8qjI=M;hnHVY4ypu()k;n}X;~k9*$bDvJHsHaB_P$ptX+hCIg0 z8a@JR_q5*j!5L#b>DY&$zZnRe?TtYZ=HCJ$I~UyvNomdw^8!sMV-K*uz->0HKpc`2Oc@k zm|lC6uMSO3lh2NHS&+;GAn=!9^ubQG^|ZSHZBwwwwR!c>%1Ps!VOs*eP zIA_;u8m=UNNb_A<HIb1iA=O2mam2~G zUs`?W5)`H*jZ+i%>QjsNRWUdvt2oF2g=FZo!GexiZD{J{3HGy^BDUt$| zqpipoUPfR&At9GP3+9gGLn0@~%EyQ^r_}Awa?YLju9a!P2ivz*sVq^0m<7NasMDfg zwDL|AG9hbZj$mZ6J6E4^AAS9b4Ec6FidE5N&su5SQlt!N8}msvUzo&M|L-tUzt&26 zqp~gu=Ux6}lEU%6CFd_}X5$7S(_XP7f>XjIj%E#rNH7f+yJyM!8xqmsYndht8XHV5 zMngF11W7zW5imPH*2*|Trrf$$Wvtwj zUtVaaj%gh4i2|AXhWL4RV77z`(_F1h%s#hT=zsUAMauX%MIV|o-{nu`w+H$C9@hcq zE*0ZE0{N>QbMGZ{|7DKKyEI(&b2&Os7fv%H^RRjM^r&)ABUbab{dJIJL!0g8tmRFF zaJ+-wk&CRQbL6ihwgQWy>@y9n5GEcu)G1ZDmpXGs8Xz@vE*j-Xx8HnIr=o?g^I+au z_oP0dbcH1`0=HWSSZ%ZRFw%h3&A^4Qn!tun#n}Nk#_JCNBX53H97|Q4`i+)QzuH$< zCL5^930XLMcQ^QT&n;~@WQS$oH|>;L0jvVO~s5K&3Qz2cnt=+b`ws0Y9iRf2zQ;iJs} zYCU(a(3TBxskmcPp0CT)7DYI;qEfRrcz830l6T|K2wv!{B~hSmIrU7CslE;h>cbKMaxJVO{|Ga+z*u-=l636+}Ck{VOjg1)*b0|jW{-m=tV=OyT=VQqN$i&@&a zqwozaJc)xyn*C+nJoj!d1IEu{Vr&}mXUY+?_F`~~QgX-jel7zhiawfFY;X1&vt=6c z{ax&@E}3pKWOWy!kU+@|TlL8+4)iiI*5nn*LhhG_(oZV6O{_&t*EF;IW2F51uS&&! zUYWQ1BQ<-+Uzjiht9SOHIqY!1mPA5+qOZ!Cm+uS+vfZ zSx+iFu)#4Y+Hq0XZ`x=|hHX5YlLj-;g2EU?BF@{6c3GDoU>lasN{Dq3WNj-)!9I+b_Ya`4{|>`%=d`~AX+bP#9_WnuCe z&ZRSO&rea(#Q|EM>dNY}^?KilF%GV&Bz_U<3MzIsCli=lybk{>jUaBvCzJaT++fg} zJm)_0!KSOej5|0nFmJ@Og{ZI=)rkl3+-Zu2zD?D@jhC)oVmq#&rI$wpeUu-9i*8{o zsN0{~Y=p;k$9&W4r^|efToVz!&fk&U;iD!yI&iuv`7iT4U-Juy(M^^xV@38e? z*9}(TUwJOKBY64Vl6^QhmZ)CF5hivqKHN*42JYQVbo?;M5K~S6X-BZ|zAL+nTnU z?|pSx=tQcrj>)q3@l1~U{Q~S*9qsDN{eG1JU5yEiO^2HUiL>mU7nsnBt1jwqnH$|? zpIH5+d>aFwPacCjGwIV@gs8MUW*k%NyyvO!%EAS4<#*V%vM(XDd4Xi*&tT7~=)n{z zoka2+-Vf*3>6+O&5J-BfiqYo?BBjuBjL{SGTtGl?D%)Y&U+s;20UPVqvx>+B@2~`{ zB1+_vJG7^6NW$%;Ie+H5m-i(Xaf!MD%`<qyhiIJUG5 zAgcAvR_yS=h3QCBepR@6$bd;tw32?8P!vKncwkUBV~rG`-V6gKycRej+ewzqyQ9lf zciHAiSte{cS?kRF09?9=qRi`!laVQkFh3st5+f_jS~oNI-P_KtQ&RNev4;#KhPN-~ zw2w%?YNtjDG9s69RhKQAqhhgZc`M*Kks)J??rvi}S^{`tZu|CTUn3V_DtHham8V05 zS>GtoxpGE)!=6sue8J2dJ$*ScM4$EWOQv)!0Lux5RWrHh57yc9v9V7O3Rw>b$m&@|-3=WqNk)@h zUyD9BdwQW5a6>uJqhz>IgveQA#oprcK(Dt5@N;fWMAo zfjMK#7*(~Ge<;i*Zbt0l)3sQB{83xH0S6VUZ^=i7xJb>+XPJqz<&U>Ft|Qv+{%k01Y?`zxKX*Lt{w$4l!KJw$}sB%728ab;!dOMZut z5y}pITd(xBC!bxO2l@v>V@_%^9+pGa2 zHlg~l)sPiNuBPAGndScJGPentiIIWDY?AlMFJY<-B1{#e=r>pPf%!WoTBToa2#2LY z5l~0qdF`b20UAN}EwT!WB|#k~a$83UzH=r2VE6v3Vqoi|@u#69jVUni6oSp#4`U3C zW4gULE0lVs31Lt(uMgdhvqh>j?D zX7-}Ci|>z#LPDL!6I>BTM|KB;*NwV7L&ZTlclWhW=gg)A@^+K0{6O^G^|2=(r|Rc* zqS-%29k%rZS>+8mC$tY~gCvO30R9OMOTT`0_ zDfvE7|4eMpieweG%Zg-Le=_)~2#ai(PRz*!=%fyZQr~k|Z#$c0IHxtmUeDp22(-YwDF=s035tiaN6DYe3@t-o}qR=6;0Z}u;*SxdWUnrTpi{4Oq$ z_j-phfsQVV6g>6X;hFLX0F#O(O=>>^aQCI>8}y{2ig|Epi=%5CV&3Y0kMtavnr<}a zif%M`grDMVt8W1y7`!!<1lyAkeWZvxcjpg4`NHg)MWhBUL+U;CHmgV8{WXE+G*3(} zT-_OMlI>=u_>%o?k}Vvpy?|s*G?5Z*ht>&gQ1&a`s!R_J&aghy2=Xfxy*MEOq=?@p znUozt`l5TEZdAxC zwXmGMvI&y;H{|vNzu)Ray>>>frA|?z;sG_%5^OpqsictCt&y` zrr9<0Y!xTLq^n;RlVHTd^8}ePs!M=mu_41Rn;;tanHU=`ElmD_RgzB z>*|BAwY=b*<=$*{*k`5yPpam8pOHU{@x(efwJI%@m&N7kz3QkQXd~6yRX<(ZV6_(^ zO!%bR%~;>+e#Fab8os)of*Js7sWV4aSireNmr!OvWSkc=}FLwI)^b-f{aMFp-oOGRs(2A;*v#W)}zWR(q@6tt+Kmj}bD%qJ_p@CZorG+bTb<>R zM>hhtc^GF(f-qv0-k3j=<=_05Z#XspNS%xszzM$b2Q;9-UfG$&12wzbRhx+f`_jX90_@>M>fEmm0yRY@eG~8x`eF6L)YrsvBJFy%%c&ZL1###%sK|+iA1;A_OyDI#7wT&T^c4 z6)uC{&SwIKgKCQaCMN?7dJHNw3FnCfhZ?5B{Zux4kINtH0b-vsR78c^FFzC`Qe+U1 zQS|UkKbd|bA1{cF*N{BUY&uMz4Uf*Gny^v(Y#RraB$jBDrBUU2iS@w9hF~SwN$Heqi<~@3!R~1JWFceL`iR((!q0Vz;D@yX z3KJf$xC=E~duT4&6pmfzxg$4VeN4N>70WdzBGQdyLVjc0nImvusDz z`_mqe3;9|$($O|myL*P-7)?O3IU~@sU%Nc`o;X}X^ca!{-v}ajZ3DeFaI~{|f5w#y(8C;ceVngC zq7vujPNOoUT}D}qyE1roqej%1Idt- zB5!Bb6U}j5DM^BTAWUZoL%foxU3Z9nt}6=?GciU0thF{X*b$6D&KpTIOyVe3^kh43 zUiwx`95+|oJIIOvhg3InTFlQ+uge@{$VHhzb(fLZ%)VCyWijr%K?ZOtK`0DUedZpO z?c#05q~hnANtzfy=VZH{f{5QrN>C+U-5n8zR zyVSP*Z(Qfnk|-Ty!Y?RaT5}hsBi*1;{kQ4Y^gIVa5saYU1P7^?`wjHm>pea2rV2C~ zxvP511|yt-ryrKHA4peTINb=z?wgM?K1tVxzS!MMXV52cPplB8k+)y34V}kbCf2l_ zb|ZNTdb4=b9%%pV|C=B&hHVKLl}No>X-H+_hTLtjqQd}N*vS{>R$P6)YS|4BM>_`6 zINKU20Mk4Es4Zj_$KAAi&jbTBlk@Gfm)>;5@#Vuyq7;?K*_aHUWG zp-h*%nI#v8>OB9$6Kbkf_EyGxW+lokXuusDaWti=Hc#!%V}c?nrqYlO_-)mWx&q$Hn8(p}xgg^D; zIf2K|J#`0oDy6*1d2>$8x?Woux2rP)GM_C%v)KAgCl7f6$wEP2PJ=I%5Kz3%i`Vr>9?*=FWIidFWNB+z z_T7FFp=@W9a$4$~G{CM_L#J-TZ-ITuVr?6blOl5nsm7lz*;ql_yU_jnY-3aC2*M73 zA%{))2I7GhV`Zdu1IxwgYqtY+g_6s7Zz^w=O=HYQv ziyaNAudiqyWn5yiw5RMV;$z#!#>S5V?suYbUw4MFsuiB77Y{RxH+r^OVuVA1!(<{4 z^jc%tS+bUqf?4hBfslf*?{Pf9D6)a!w`gi=+B!P+E;qfD%+bA<6!CdIh-au|-zXED zs{z#1QQ&-YVg9GEP+zAoW$jrArJrwKzboRS9aSwYe2ll_~ zr%H%t@YkqSI+Th+`MOoj#(1pTh|n*CUwfI$%0P-NNL$omnxLvWF3}i5p*(CcJ4E|D zDurQi5R;uwXPeZ>?X^xoDB|tfuFI!#Cx-b$1HhAk>)nYwTrAt6nCpk)Sm9a=1b(AE ziwpF8|2Zv{(eTGmQUXxilh8o-IZ%Q!KL3u1Jgo5*n)i~9Jx)5GkH|-)Q)V6v17kCX!G zJL$XSB`}X$A2qY^zHmCb@=Tp89J|2L3Kvf3R^lxT+O`PuQkF}%uURNEjUC5x3% z9ESopR(T%Yg>wUEvza=u-k?SrZ*C!63T8-|8={KIJ8na6@ErnW_&y+r?ry>boa3X? z6pVcD1S`MhD%D;(&NGczI$&sh4qv&S7KO~z13##z_S!84D0 zGIYI8#R7ZeRwh~fR-}=0d!vwhCm(PPcWZo#_%u*??YZ>{JSI16LN8pTM>~6MMHfhk zm6EKaswr&YKpF&rU~O5EiHM5%q8AhtBqk*x)^y~5@92I^{P7t~P;u^jz8o*y##}aE ziPA`>jugJ#3RS`u&9E3h9cB0}Ii^t}SoAwn&kLuF%KDQtRx-|>+7&x`B5nW97EDQ< ziqpa_r{qzVE~Emiz9B9X@Q22%Fm%?RtVz{l+hdy-D#PYTcVo4+YZppiq&=kRAa|EV z#drRRHu>byG9g2Py8hrsjjr_LzUe(B z))0$)$5rL0V%#&4>e~uQuddL?%rv?kI>rKR@6x)WjW^XwhjR@*C5~Z7&AAv)EFcsp zi!RLqvL(J3NWuS!s$VQ< zCdz)8m%8~^&=VK&Po--2|Lka;M6aD{cQ;N_83sJsQHA)&vv=#<)Iv|iR#?p?xrU9j zfm6D34-eQn|M}3Kr+(yW?|=1AVs+ zC3$Wa3WQL^+W5u*97rY#+oEcjfO(eq*oP9JqVA7J{HlMhbqE;`Ts z&un-*E*|#3PyxWdTmMhk4Udz9E1~{71%4oW=eKC>|47E+>sP`=^MBg<|E`u5fHC?% z-{4|6s-`}_y7L@y0czG From 808f7310c6c749099ae2b7ff9c14e2cde0ae7b48 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:44:26 +0530 Subject: [PATCH 057/958] Delete quarantine-interfaceindex.PNG --- .../quarantine-interfaceindex.PNG | Bin 79691 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG diff --git a/windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG b/windows/security/threat-protection/windows-firewall/quarantine-interfaceindex.PNG deleted file mode 100644 index d6679e1e0e616b1430d006fbb2bd90d59b42f5d4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 79691 zcmcG#Wmp`|);1a(0>NE_ySs)`Gh9D+k|cZcAEyF2qe``i0H=iTT3 z`O)1~SC{tcTD4Z)>yA`bl>YLW@bjlnpT5Y-NT`1L1QYsCIu#NApZm{NDV~2GP_C-d zfKN43#K-?+U@gTI#6Eqhk4JtphWjUv#q8-ii`WqUx23fi0&**05ht(ZZ+tS{^3QJwAv z=cDQ)JKq>Xo{Ud?ceEoBs|iBcW9eu~5fVI4r7EE;IQ!Mw1}j_E?!V^ZMYMNE8ydww znNY?Cg$x3$swwR%nrLD8;F24z!L;dwQ;2d;blbf=MfS`?MlVNtk7<({^W=WcYw+*5 za!<(R{q)FvxIAk*{{CMx4Mz=|M>I}%8r@2G%aPn}sz`@74UJJyW8^o+9ak+22MdJd zQ%#`DuEv~@t@cSxX4s#0J{(BzlyLa?Ogw~mo*`a>c*vi^zyXu6`ndC;arY|y~wUb6KN!D_u z`XWS)N=pHZm~;?A`4h79bSaiav6Qx-PAv1!*1mm4i}XsU_ z4935{yrq33f%;QLzRIg0NCbIDjq>s|CzU}Oteh_YbH0f-?!@k#KKI4DkgXa8l#;M2 z^-cIVnpi7v(RxR%d7|%G{*YRi4x4IQO9}7290DlKmpM=2>~h(3Q~dw@iDrQE2YGZZ zc*GIhIn^*XYqXV6c>?jLF!g7!<+mIr38ps#V=pzgnesULxKe%k*OS&>85w&hGV)p= zrM=AyJ>Uh!f;?b|EfEF2SpHt?XV!G(S2%W)t^O|x^z-pr7O2z+2hKyF_D~WXXK(R+ zO)mRm(~fIT@FMXDJ?ITT(3#^6BeF(+$c|)=vfd3;ZSLQ0bB@sT_>1t+r4q>YfV98B)q&)UG z3Xe`HuC)(^3cZACSAGIlE3?oKTTyr0iJUIg7XB5G)jgzxs@T$PdtnXQ+N1Csz5g3< zFE=6n%FlC#hxzu%vVVr?wc!;4KcU*vgNNOFZ}WS19$M5LrkCrsyNm;me9b|!iCTa1 z8b=l4S4w(X`6Q!Ap)HE>&&JYx|wA#m%XX`_nkk;>O&U-R|mE=_$?Aysr-jd6F&qP6>v&7 zGcGgx8WHJ$Lg7F=~x| ziT~DY*B(Pj)Ic`B1J1lJ?`OQVPPb*E6G`fV>h;N%`WKw+BE65)mSrORL4%f01z zk|8|vCDN6TB8)3<9k;{BwuyJwk9Q>mF6jFfKw@ttP_(c5^bnLr_kejb|NPeSyz7sU zjv0)JqAfewmC(`sfoda9)7j>5HS^8)SEUnE-h zyIAlRwG1cAE(~P-|6zW^h#xVyx{e<4|x&qFZPd?j1CK)k3Cy}ReY{huGAPV4dQA2q#= zv)WVA0p83C!=!t!O0me~h}-zY#qKji{Ck0D3w`Q?tilb);k9v6?h&wB>ml58%GS;Lju;T_YG+GI-Ne&6~KYigT6^Orn3sGvgHKIk$qrg9@sgo%m6U1@x^RUXd!QjZOFWXnsNEWMm zq-YwQc25by&OpHu(O?iE)h_<@5L_+#;4QmDI2HzM7mK)@Wn%s^Csc>YF1*&9ft z_&{QMxwP!HUxMfToI-Eo;E&*b@#V}Wr!OgeG*fpA`1TVrtQF9bc6|q@*Tj_*RIPiI zezQlf*B>t8MWWG7ib_fr08}zhVUqGiL3ZfOp59RYc1an3>$v3;hv!=wp)^fH$HTrY z2*aLL68!_VO@Vjo5A{#|x0}TRL~E z-Pia%0W~27*Ix++shJ$=8uxeux5q^{6syRio0li4eZ78&ha>R2l!uWZz}H!tb2Oh* zi@fG&c?TS#t6ew+YM7S`OcJ@dSLFl&AVtvMAa@M(%g|8|N(yY0uU5 zhF={bO;34wt_C&($Y-!(_)E+w4ky4w&#tO@stu9>Kb=uCC~n@EmCXgi+pR=5Kl9(p zTm)te8;X7#{=*l*j?NrN4Z<|hT+PhG09XO1Xhb=YdQ2mB>gnyJ`d3d~UG%9`KGfWm z&&fNI_&`hnX|2#FHl_rB-4jf^DEagpVx4lofdzVH&29J+Jyg3tA0}Aa)P+1ec*O9# zMqc_y4)YS{`_4FP>Sx#2oYX#@CjGK1g@?z_bt{PUk8^4E$VugN**ta^fJ-9H(h@h7 zrI03r&=@{lTzcJI(|Q@-iup+CWwLsKi2rTp#|8S7(}og~|84HcY8$U4@P6m*^fJN> zAC~iwWyx^cIZ-HW>V~KBtT(TM1^83)ZKz=ig_j|Fo8Q_ND-T(d2ie??e>+Rd=i$6` zap*Z05-?~BxfB)orqlx~p(r{m^|#6MP9}jE_~*Fv2biB_06@Mj#v;kQ)09S z>*qaVKyEI^Ti-h2um|OxjD}fIiHT_2OptgtU0KQ6PrLqljKir9BO>wnWq*5L{Oj8f z_-p!p_eGG4qu@fO)(hg$;znZ1;m&>O1BvBY zfwww6GY#glVd;#0G~9}4yZu`IPE)zOIV3H5E4%p^XWRNwx~`o()7L9LTvzjg*Zt8J z@1$bSKwpBa?R%Y~$LL)GVz^DynFf5tY`C{M3$W2TK7UJhR(MY! z%rX~Ef`;07EN}I}`=!q4{%XkE+u%o|kgRg(jG~wZE`c>WJ_4~k%A;%Rvdn6Os>^%G z*(zhG6UWGy@8&pKkINUbo>#xkW}4g()}}ejxP#!pcl5xQzYMs^)GBRWBA4x^B##EV z!QQQ)vTb8g$?xdG6-S2hPO2bDA|+G>;LE&4+}fhP=`Elimg4r0l+t|Qs~}=z z*>IImp|-+o-=0Uv(+=(QVF;NHKrI>c&g#Kt#BOruea+hX!!Qt%<9Bb!vMbEXl)t$) zeu^-B^^~H(vJH73-tgPoE8GJjvpoXWTjKU|XfOk*p+(S0>vM{e+Nk0$P0AMLFY%Nt zn-VpZr#ro4)o~9vJntC@8-Q}Z@inqmL-WPh5+|-VnXCyd@?f2zx4K2 zTq>K1DPL3dw)a zL6X+iLUF$xehzdmcC6S)b+(g(lC?$)7xC&%#7LSo+E%hbF>wL|wE#AT#J`!;zXToW zZx6Xuv=Y7<*`yaB)jkXebUAPz%If2CbI+(J{_$G=gmqF;M5l7xcX|s_7YZL>pA9?W zedF3vw5ZSC;tP*Tg3i>e&hMs!$vQHz^OGBjM89rJnK11BX&!wztF7}*sws^$(ccL$ zk})cOT{zzA^bCE#y`Y?GZIW;L31QYuvo_&H3!QsW{Php^=x)`LUV9YrBis8)#p$YF zNRzL;1wpf9Ma)@XE}o}52M~FQ4J4j3N~c zMg^zIw!>IOhoSg~u}pjIQ86=*dXMhW@4To><7j$}g^|Y;njAJqatmbrppb+BP(n#P z!d($3b9{f#!>#j@VUa#!Wy6@{kmq=hD7vqGmej@a5@Iq>zGIf5*6sZv_vrc{UT?Qg zKBS#pZb+ld!2+n~JZ(5H)b<1eS?SB}!}AVpMLXi(Bhzj^ycIv*Y><(3FlRQe$yFcy zvV0+Xo}IG-QQS1}fz#|hD3ZTA{BR;+YHy=21JhoA3()0kN#xom_3vF{;#=$q2V_qf zr@=-8aM@J4Z+tj>NR3=u!uWapB7j0@&dZQjmU!V0y6NtQuvBv9V71yAS>5BzhmWF#nuZn0@~dk%o+Mh*Y}Q)Py{mX7_Anv63+$Jv6duV)*#b4s_?j`ow~z1 zw?Rw}DUX|h(jwR~P3Q4;pBKXqYQy)bS}*Xdw3j4w5k?D?)}x4l{|m;?Th@}gXF)$O zP;@VGI2YV@Ztq3Ctw3MCzoxqt=6=ijwBSiroJUMZWQ)lE;#9_4|BE8CV(R^=VLX!T zw7`}vVvtY9*O#%&)F5U_yU_G(AlYC{0k5A(G(ho=syDBxz(;HP6b%t0g0jcs3o?=4 zS>S;RDhe_`4-vjlL)beO|F5p+?+oI@*2hO_-*hTYCXBOZEsAUwg;*GFZeNOCS7y(t z88#K0CS%0TM)sZ5{H_Q6u1hI?e|$iRygVbU5_0D$8D#a=bmb7QwdYA+2Idrur6gax ze8Jm#=j(atClY#+>fwpiWYhp_ZuO#wo+CR(p&u-QRg5(+N95j3jjqzuV!Xr55a3sv zi^AtTyQ7sB(QYpx0is(U$F}kdhJC}DFJ4DsJaKk^r{=RdBIp?kZ_z||UzCLU9Z5I) zQ;V>YeA7o@{Y2z6naqvPzSi2=6d580y)2bdgeu%$qnvGy*GzpXEtbb+ouc%p%bDzW zC3pxeMx&W$t4(fA&V;Y4O|;3%6g@K;#KCV%@y2g4(&w<7|hvP8PNtnF&C;C=?v- zgt(RN*PYyyPzk-lT)aIVdY7*DwR_eSWU?4+%?&v{() zqoaBz{Qc>(>A4QbW)&Vo=)Pi-9@Jc}W-@AM2`>_^6wPIPL#rqiMk-s&pwKxsk1bXt z0e@>5QzGHU%F6}nD2UvVnVb>{9)VuUXjU_bkIUY*qZ4>V4-&$EhpewOxg)%03KHbF z*{Yq~;{7r=0EpIhKfwE<{x%vh_$FQ&eGq4y&<)aW`w_NZ(Yp5gdIC6!f5Si*5QEnph->3usS9lz&b{V8nHs^)a&34?p@V=TXu*row1_e^DcZV{<$p;YlN|R&T+1I##=o9!`MD+W5zt)K-$0phB-nvpi8ZND|9uSS=t~DE599tU1quU$ z-J)DMs9Wg@rg%oKKE&_7G+mvEZ|(a!x`BK)5uV1xeUZvS@nXks=)B-=3${>IATl`aBJ>%r+ zKy<^^0Hz6m05zY@aqm8pvBsodA#|dKObLpTJn<~j;F|tzQkXaPz#zx*)hsVp#PVUE z@V=3m-o~mHmqsEB(kt|d>AjRZE)g?YV9J)gy`_~|u>Y`c9nOK83^qFw^5~?M<@jw@ zh7%utp4+Y_$|AP7i6ZKCDtp|eki6D1Vwd1!!(nUm${PyD8&*sQb$OBuC8V$887!!k zl%)=kYKQ&mBHsnt=MAe%UZ~@v$)qD^=u^zVlp=`(PH3Zqd%25q%7(>a;}v6I_7#g& zkKozU@|Q(au4tPu!83c^Mv45bQRKP6-c6&rp|wcJ(34S=`|&$9gio)~tLI3RI;HT; zPtK&MKI^?zNW}i+`wS;_?-ITm05h1h;&h<(;m)M5LSz<0954p$(g@EVAaO?-YHQ_{ zEeqrt^lmGLl{&^s>b92V-3Ui@-u?si;HHFx1f-N&lUi&s*?4`LNP|Q>2JWgRWqP`P zJK4#K>jQ|{OAf^F$Lcvx5@$OKP1_K7982E$UH3@c5c3`DX4PJam6_+)p=v}4^z2obw3Xg}q17%ZjQuD0TTO7Sq7*z+= zq#*a;$Q6}%kz#46o?_L>8KQBLhwN0s1GC&=r^aBir0+_LV|qY%!lqg6Xm;7aV3DYQ9 ztsh^n%?`0aq@s$Jr-%=9jQZzAF%j|#aHEJgNv>1yHFh+t%IOUIfy_z#Cfew^<%LPkTIrX{1pZ@Rs6lvzRj?V74k7W} zjmo6~+8vtd*d+B96Dbg}oF81=;*FN|yT!`i)y@p%I@ik=?dC-7@w%++H!ws0%zKBP zwEL1gH^3XOYnM}K4+bC=KYQ3@gv(E?nD$#aJ+mGi$DCGpX-LA6k@>wyUNH<$Plfj} z*eoF>kJ34{9|Sk8ZeIj{&;Y3a=kQ_ug- z1Fo3GB?XpF3TX-eFk)u+K=Kd>*G4<7k>=-(x81Y zJ;p!1=Kun-_s(A4wVp?(P--AIT2D)OBICmj-=#V?h*=DcIEaqcTcS-5uunqWN}?zh zPqH@)cnkuslsef}Cfp$}{M|1ZXwK)EKD(g_p;SlN0t)~>52G{w(2 zEj!lUDO->;jJUGe-6>YT5VC+B(j{i5-qPSHnQz4><%rs5S|MV`6v9~zyHYhTS3TDy zfv;R-ZRZq~^MwnRAMEQPYp;$rC)p2Lzke*4z6||PadUpMuFnW;3-`SUAnVD~8-{ee zLnjqc{YnlFQ8n;;R%P*h^ra{9`Wa5@l_Ca`Y$SoZZ;MY@RgCdzKg^}7Z_P#V{e|A` zgw9X&U7il1i!@Q}tl!~!cB>&}dgEH{;{C?syQGn86ztn|y*kVHKV61xIffr^4gnCy z+tDxI>uJN-ben%!xH)59CvW{sr#jGgMiPDAe|?^uzSu@E>vzhCYUr8nP$vh9%P05PCeA5K}k)cUb0kp||SSr<+>FP@`3KrCzKV8f>iVk}+o$)u%bhe)U(ufTJ^_~6$lhZ$GwQ_P zGb(6MNX&@)j_gUMvQZ0WPNMvMw!p>PoA1+Nyu+bjo_60~^^Wf-1VFc^CQiVbfRSQp zlQEL*lK#M2GoJJ8AdoIL9v9l}ceI6=qRM$`X~&d^ZnJHx@~Q;u4#a|7Al1qiMQ0IN zr^|x*ltn17WU&HPe^)T2Q&lu1fgtTEh5gu+<`%YE&~U$bk{P8c3s;2PWzM6L>{&yw z9p_p775+G@B6&h*s2#Wj?8d9BERdJUU!bwV48{-Npz$9(|5HW^QV_pqyf)>D&RHn* zNzL^nKV|toy%zSIu21ueomMswcZ7cojjpFMhXqpJgPRotWkN<#<|}8Wo&&rqQZKHM zb;B@?rEc*+I@GU=i)Imum&Bom4ZDhrG86hV?IgOfLAjQ`Lwr(T`EA2I`*%>|w@`fk zD~_%A5pKOY2jMh*PsT03jo~QWt-(Rp+q#@Ni+>}&!|OO00K}E{vY%Y7`v zXYzQ*)30CmsxuAt?pvJ&Xb8y8jb0BX?fAK5v#?U+O; zk+ef)oX3|7;>U#rAnK-(;qwYoX5R#sms`=pKKrX;u1SkFDzKdBrxy2 zfw3>r`R0(-@P(XyguI5+r>g-i3ekqsVX02yI$=*v^zm?hRg_sn-RBzfq4K+;=aXP( zEU0UOVCgU;Lgi<{`*_O97_7aKMAJ{$P`ba+r>&SUe}(-zHnSX*YuX)RFM#GkGLkz0 zoo`I$j+z~)YbvL6NGP>XREX)poOj+8DY-l%T<#bKK2a={T<&a+Gc^5C40%Z&p3yYe zIHu^S$nBKx@W}C*iw}Uf&WS+AJPnBR9rk@Rmo1|cFu4>-3Z7f@`bud|Y&kN7 z{6a~?b$yc zgF(v-K;NaZQc}B&9u55cMpNUnOfo?h`13Mw53h5R8CH2wBN6=`Rl|-Ub~*3|nxUci zx<91%u*aDUL0WI;vABuDLJSqQBvuf$Y2H}gxoRy|6QwXI~cOPm3N+&udAZt1l%w!_Maq8+&b?kd1f;kVV@`!75?)@ z%Rgki_Fc)L`!pb+u|8a7{7x8$QVN2Iu;x!yT&k*q9X80&@bG0$_`v8gB;NUv1Tw0z z92mk_`@xW=2SE;SrRx0Ky$0>#AA?TB{;l-ySU^87W$+wN0J~oNNP+(*Kv?IR;ig8W zI4Ci-|LyD+GPuYakYy`+Lx<*gvW$y6Tl$axq^wlFa7g!7sAi0@hGo}w$Hd3qOL;g% zv%(%t%B4@2q31v&=(E!1&${(|)Y5tYKRcXaxR)syFs@{9g4=-zl9P1NaIguY%X33X zqXjfra_3s)HpoT;H<-Y<%hwmSoU1R@klpsI?m>mTfVe{ep_R$XQYadI1CBA*(YSis zya8pU_QeH@fm-EjLTg&amHmJ|RM zre50ntX|p+T%g5A;V*n+$LF#~DWAP~lF7*{I+c2evM>qvyi6w{pYy8*q(EY76N3~F z`UoNNeu(Uf+yOu?%2>o z-9!UF=1tGeZmoEO6^{U5%pR`lXtt@Zi2}tkEp$p7PHMKc!r!aq2X`tP{ZO7GKB(4KXmf@Zx52=xXKtG&5sQIrb}kQ!z_TR>MCpt}Y=dD@h2e!ktk+ zG96aa<>SFu=)XUu=jG>XcgE5$R@2my*53o9E`d#xzK+--vT^Slxr|NyWvnT6IwCMw z<)sj-soSk|?<_M;8YWxmvr>khAL8apA-pPCZgg8!J;Bl^UT+EMV#cC6)KbyRkd*fm z(uhv0FK7DsV86cVUY?U)S;D0AJ^c9!S*Tky^OiMN+FKnVUZ^W;=Nl8X!fgff6gekl z>|HjB>RuuKW=|w@wW;>P0$oLQC@=;tDQrRA_>3Q5JKdU4gfez=8fFGYf>NO777Pj9 zrW!^i&G#Rn7t2YQRK`SR(UWK2=)78iUt8$#5o=7Sqo_Qwp&y?nr({+Evr_ag4wjN2 z5M1!l8o1(mb<*SX?D7bsQ3a zewC>!Ki8!SwyPq8tD3HeV{vlx@S)CjVyM%5znDhnTGu4>%u+e|(?+3qT4uW~I%Z13 zbhB2f5g|%~N~&zZQDO5|HQYRdmq&DOXpeJwurWDDsnzEbWa|;0*~X68^YCo222R6M z9|g*Ae53biz}j1zUMmxxL#Cj*pE-Bkg|4V0#iqk(*Ctu{ARug6;U-Bm=qLW6bH_ur*nE0F$H2w4GQ0*ebrc zk>4MoCF$gf86=0BzJu`XETXDx=%-uQF_hIJK(d$}_(WNKSZQO0rGAAu;%6&c)1l}X z_aB>fc*gRqI3_uAui^+R!Uwp~T9cL(Qg-g60`(!iEbTC1Ou8Itwo~yX_T$C|D+^*| zD(X2})5M^#bg)F!*qkhP2SKunKcGCCfq{-SqSwC8R$wZEn}dhkY?g#Z+%iN?6-@IL ztc$^OjQUOHwCL`m;}M z4DQs(+CL1+qWhvrnyaW}#1u7$1XVa?RitDVfjCA+Vg@P9My#fb^S@@@J$-`F7ru+< z|H_hhcjvY%8UOGkfjNjq04*ZaEo+Tzo<{)Kl-DjSl$DpE>cyQYO{^j(XQ_(#D?cmg z%uip49DYQx2FB^&N=VNY|6Uk0d%^Rw%VW0$Vm?HeespR+U{9&=rl|_RUIG(;zC|7d zqRcIC4*q#U7l}Ti;KisdjrPJ!VL>q%`b%EeSed@8uGlv~zPU0pA)$wgQ$irovG5vh zKweC{zKm4Yn1x#B7}c8=kG;J z(kpagGe$?pLM%J(mme<&eJx$C3; zuGd@>5YpZ|f0B-?cO5oXK&?XOa)hWnT#5uUwk1g(=1KcoBqw~Ml_FQ)9}UP{U)V*0 zN@|$DZn8HG3>Ob(udvl4^ad33*xMS92$Kh8=S1-@VoJOo3$({?ysi_R@K4R+Hd7e< zczVN(J;SE);%nNWHdvzqk8!g=eWxLC7C-ZK=aqgyGiFv840J=7zC5Qgn=;xQOsi|H zOfM|NjN<%tcjosKAy+t5iSo}5A)^ZkK2b`9KY#RReK#J@owzZ}+y%=3d;USmFtat9 zmDeF#yVd2`rXOrLNM0ec*h@>sm);?Vo=q}eadHK+z6*s@SEbG?8%QL=Ho+|^<_0|R zKOkK%LCaX5%9688-O1T7d@hMa9zk)x9V!U$W4Tvc$F8_XPS^eZO+}2fLPg}|1tC2- znE3*u-AC&B^CoaK z1{laEjpf*YbdsaPRpFxV-)hGAtU)f~QdqO~Jii?w3wa`cw31;$3PIS}E*?cAYG|QM0)Q9xZVo;g%pq zmMkUjzMC<^jbu@P;KXsM#I{7~1I*IiPeUUt5Treh{+s^L+ z)l`C5OSkk8d(<;oByHmNGr^VG>hAc@OR;W*|r#-VUPZO_0bF`wI8&Q)!`F8{y@t~Pn_DoW65Ki2YcKetby++!|c59$iNewct}5hN0?7a>Uwy3Ns?G4$hmz8 zP)vtulN{i7h2Ax%MU(Bo#C}|yUW!jh&`(yOSsDzv26olEVGlZ;!sYZnmt zdJ!1al>^Ftudn}4Ea!t5xc@E>$^Ug75;kZ-4t53p5b#Y<56aX5s$C-5&=-6aX$BN4 zAr9-}D=lK7gBIiT{b%&2(BR%(x`-kT`(9n*R_z8&P+5};6|4nulET@Gl1gr)*gein zPlHJPa1%%A8mulS@!5f2EjVDQ9P?lsF=J$$On5@erYdltW5vi=?5{)7EwV^V{}gqJ z7hU*N(W`s7%IF?_J0~;~WsqaWr)YSA0obLW*irmZqSNJDW~TaF?zjIG3Jms237QKz zn!&a0tvQoZVD<2EehFR!b>nwrx|G}L9Ls)}Idhw%%oyXgIOg4{2xTbJNw{4&BtJXJ z5m|I-sNL+jYkilO6-@uNBlJ!Yp7}xh6Yy*CtN*vrD%p}z^GMt|Yc+d1b@4R|)w$;R zk~j}*@#dOj0oJcRZj}`^yV$=htUc=;FWn#lI4AE$9T+_efu&4Ag-tZpc~AJ}yeB!z zvRbjFU|fBx%kNRy?Ch#Fca+VSAfaqkgp^pHO7oUz`$)xPc^efP?sv^<%-5Dbbp9j1 zMnaOy6t>h~Q0TVMfBU<`D4a*9Sn=X4RM=FuYkD?YpPNOkIIqOZ_wfGOY}Vi%QjZeQ z5w1{I^GktNH;{|x+dJqp>m$TPx27HMxg4jQdZ?d zFN&Fg$#`sIQ>IgsN3V7pvh#vpVrbj_&7-e9q1{F;k+MC(^u+&~Z8Wb0*}NvHOm@HO zrTyTCI!~h;d-Wlrx=7`P4GIT=1R8_kx%zC`h@<*&acsX<9@1E@or$f=&Ib#}tI%%v zUz^H@NSFUaVYF~AgdcMQo~j-F)!>2rg>a`k0|ezkhW3g2Ve=P-JxEP(Knrtp8n{G~ zpwu3_GSa*+%_q6km{ygZ+UiDFN!x0|J9E%nk=W`h#pl4aQK+Q8ySAjX&&pIi87ty& z)STW5m$vjL4EIV;T72xPn)r?G&Mv}=BiOmAZa40P;P%EO5~N^kvH8uwh2U{e?c!KU zK3zp?qNGCe!UC?bKxd+Ku3uPD5eu{Syc4{Bw(NAKB1Ml<(rMFazmIYS?IGb$0gZ;` zfNa0jvv#@M`Omqr8LoZps;_~OISPBl?Q{}1vo1?u0ogj4*X%!|(H+^j0Sp#5g3U3j z`?(DB70+YOw0Fd9ib+aoTI4R(9^vEW8L5)eSw_iy8u|r`N3nC zQTIgKetTL-o-Ey$%6BDJ;EtIghN8ym1h{0Bzv{2f`%?_ZsJkW39`i0(sEj?wQ6io* zEc8)hH`0W1m?FJ8ZT?n-+>!5G?p)hm$1l%RLv%o0+Px21Z7cP#MC5H38*o;+x`T>2!)&vuMXJ&<*B9k`^*4 zRS#Cf=w*hG($e7QeY%LFz&rS~$$qK1j65Ir=E@2=svJeBOH*IK-+kn=)N%_x*WVd= zcvvrS(2OEstFbn#`$0WB8Ny$y)vg>C4#{l~yDtxz?v~<_6%68Ro<4I0`>bj`zjO0} zaxGn!%(8O=d>xf0D|kr)*jnr!398@E-x> zCOFd6j$Cjlc7I5m9J@@`R3#lRWLxY_nA2z5@y_38xgS*Q=O(+sXG~EK>4uIy-Z3Z9 zH7mc;qRYmgg|YijRvhNiU&;h;FTBrVw9z#1644$KY+CF!-HkYZDJvc2iB*daZ^@9b zhrlYX#uw)`NhV<{0tKnJICEYtln=8lu>K$Nk2F38;3*J_BVqi1<5FZI@Y3biJL6`sH z`CMxjVD&*x)48eT0y)b6LooZ7wBveU1;`ivcWZGi^lpIvT?CcHQSB&H`G2@;|F`mH z=?qfAf6>J{6$-Eb|HWhS$^y`a{`V+&!W0qzi>tP0|2YT!xF1QP%Y6I2&xu4aENTKdI0 z+^Dz^h!uh6E<0TY2i%%o_rovDlV)@q)K}J&BHKX(UJ0)0tFxW8%`tA;adIo_>=*loA-j z1FK4llTS}Vm!p(s8WlxdRh+vvC&YnSge2>$)c(eKj~a#|F<7RioGq=I3{^WHVtC&W zn4T}-7LgKq)w#v7XzBXp0{&`gui9$lHVn( zf;DOHX+!A+BG39b#(>cyO0m6{SQ*9oed*l~5*s)fi#JLB=MitHpb?qPKsfma2@cLd z8kB&)4(3>u*>w|~S=o^EkQE)|#j@D^b%THP}tn zjKd!zn50FP_Ac6yxG0$sK-RCKf~X<3dUgl3mz0pQe7|QVe>%pOErZLt9zK0V>TYU= zM7zjpPAvPU9G1=xqt+mZRQ3gy;_u_0rErDA`^UvsJATS60VcTYMnrz4So_gujRkdV zP+mqTGuUEbCqskvSX>O59u7wxhZZY4d*I%4m!NEvSo0`m0utf8dl^d&OwIlpDrJhz zuff=M{JyMuWN*3EP1;FQq%OmN$7KR!GT%Hw*6wIeJc;`J854l==($r@tfs9lXB>dK zy1KfSii1FjHPv&3+R5?V_Fl5{u;KgL`LH!vCWVzB7UdIT{sk%(cu`s9yNrQi>IhM) zAm^I&W%+6LK0U$YgV!77ckEA;|H z=%YuAzYMU(%K)kru%74Q#1aR|hg&bTs@rH9^zI+B8X35Yd=%h5xW|~{b|^2yy<2cp zX*u;*rzw-3m+oofVL|xB+&ec4pg-Au9>m$lwvgH*%}WX>5HO+=4o;YrcU#4*(O#C> zl_0YhHhn7dmmP`M@>{J0E;mw5D%ra7g61M2w8YKAT{3S8=*2?&A!g(9v{Tzg1MC|x z5FdO6B=y?X7@}I;DF6J})Hq{5c%<=jBJQ)Tb-@+K`TRAd;dKQNX9n-E{#dl5m!5IQHJq)o-Ft=G;_d%1WO`Qr`>_rh8`pUjr?yn!rHDl^J_}C zCN$1_++h{&EK2g0s4-Qf2p5iio|HtuuhA+vsl#BxbtZPenmJPpcQk4!8*u(jf5^~% zZ^jB(&=QqniXgl`LqN8M6m0sQsh3y`Lr=W%C=UX69B^avx6QUAcFN;Rr7@Pd& z5;a$Z#7Etp)NFK7O@YmUnYJ__C<?$k1+!2N5;Rb+gLELOY!!DSfCAvN*EotPmpgiY&OTPRXEqs-={xE{!WRnv&2@T z?G1ErU|BU$qJe}S5Pcx%J!b(DVO`akRtHmx@udkeK2O{jGYsLX=Be~k^BPXys0wa` z>k_E?YYtWSkTOVdCZ?-N=y+!gfONp%gG6I3|GrqmmmjlsG}U!UD5uz_ipLR-7z}Z7 za#Iwdlt^kbvATYDTPVk7Qa}^}IO^n7>_plRMp{~Z6MGngde^+05KEPCD|AzJAxY#V zm+NOnK1W%YicKCK62h5mp!OoU--R~r=9`$vTO0%Y@AI9ftF19kiD4+L>tk>1w9jZs z^+M9S4>9SVK#Kp6|27Vi`vg9l=*7tUG`~Y)`6AH?V{lEd{y6}UH+fqLKy5`wJe#vU8m*1rsl=38uHtjxD=27e_T+vGO`yg~#y@XP$2? z+DjBai`7O4{T6SEg_9j;{<_kUmQ!tt0iZ+7h>)G4V&x60xY*-rd0_J%BS|~vP@>oD zk8GOXpDWl?4-F=jhqLv*>?qk{nKm}M6l)*Orrq*SBV$mGAFH;IRe-;Eut4>Ul|n3d z!~47)JznA*Ang5N@IZWIWWqz9{d@RolSv}ZRu??Olq~~dcCjP0lm~qxx4rj$UJ;xs zl85hUxRGN3-b7~ESSSsffr~-4!e1KW^O79c)?~)U$Qf5JUmD*Fb%8U(!tI@U8b}j>}2#~t|gf|b~id9nF2x^)x`WFvNqS4ES+9Z z1ierK-`A}LJrYdS>XY{eX18Yh>Mv9Xbb|pC2hQ`-Tm4~!s1Iky1NMsMs~w_KB!_tH z^{?)zUwmb%zxT#28%nONXnMGL)n#K}cSrikC?~UrYaFuDta>Ko2%>Rrvn6J4jhMG= zjJ;5&VB@K?IjT@nN5cCE`rv!ydT-}eBR6tq-d?`YXbp7ss`>Wwjwym9rnHu`Wy5y% z5}94(-_el=G4uz*@VGEM-_jSh$cy%}D7PP#>%iYx^c!Ptm-PE8+Xe~A{|^9nK#0GL za`&;nZTO@-rpuj1DBvTZcpjHtyp~*J567g>_)fpqGE3&jff-EK;nZ|>x7;iN(;UuQ zJCB(DS9$1<5AotQ8CQBoaY-TS)U)S1jp_8$PdIUHBuz-Y*U-efK79`t6_2rfM+bqp zJkEd52f1cWB7+BZ(C$#zX&0Y-tso?QB)MWKSFB%6TA-U_J>#e7Le8K5JAJ*jAAt~H zTXZU=^+kj_ce7+7g0h@x9!kg-ue zS#wsgpbR>8Zlq<*BDQ$ud}ri6OSx}VrvFh08H_8aXQ9MzH!ZKGu%e2p(roO$LE1Zq za0gW#&QaIt{WGP_;4If_I9J-q<<6WTel9wrgez{pm$}|odF6-`t9d$A{S}*uNhY@- z3$vq_qlb<&;y(FK$%%X;2Tp-1?L?W1s2GSzt>nBbFK5k)c~lEwsjR7^$kM~!mOgFv zfz2Mr>RUg_%IJM;Y95Q^ax$jNosFQ+OV+&0xnWHmq49RQhMZ@Zf*FxV+aia~0rgZZ zD!!QWZn%xB*Dau;AfM`{xzrS;6YTG2aBLD!ehs;$rf$GD(iJ5ttlfN{m(A$+IVAQczq*epVWp<#U*q z2S>N<<=Bt|b4)y$1!WZGW|5f|k5wGK%OwMKR1(?w`DDf!a5`NCO?K_BLUxi3|Kt=N zWm#u|QG&(sjstAn@FM=&cTm&)Q$F*Z2Y7vdFX~}~Me@!mDke4BN_ue-*{MlH8v}TR zl-ZK9D646psjiA-n;)0oOk!NLjKp4T`jdJn9G_7{p%}8dyO@z|!!sfBsN3M;#Nx9= z2l4VdxtQ{T9MY3xG5aUOcf93lUqU5oE-NRrV>7RAI>xBqhfhW#RU2z`JXr;$nl3Uj z60u9z;8s&KwMv;a*-8ov$j#1@eB-eMU1E$PQ%H2Ih<;J2cGoy7EtZhmHFMW96tGZx z-TPS5{|K8?R#V>lA{)ECVZ)PaeO?d7ge=O7^YL}?BLTnI5n7+03D% z$LUi~g(cHzyNu5)qNpHGbdfJUoLdFAC4WT%snnN3QZg@AKJ>`H>F zztOOD{4*k?x)~)G+`v*x3vJdcVn>c}w0lHsD(noS;#0^e4BrXOE~%t8*T%r%gB+G~ zh>9Uid|Y8(HW~S4G}Pu3HPXt?eQmg6q<^HvV2Mj1J2#&^=|ib@Ax;i=$s z;KL(nUVn(>+BK|+JIH_j__sXu+)HfOxP^V~4mWa&4VS=l5?u$h#fM^=jT?Wqa8mN?RL^GGmE(tb$l-_gsM_~UTD3gP!S z@mZ58FE1m;(Zh_5E4l*Zx&285`G389e5>_#qKl1Hrgh~6y+ z7_*jf!6ntiit;;mZek#>~?%=G9kVada_C3VA6}c->PtTn5q#%gKy(Yftw41`E+? z(jF;RoRcm@&6uJRsa?K;`h;;diJtfODY9o0|5Q$OWePp7|AJrq<|+2Oa#*>nM*LJO z2fHQ6E-E0^BEH@2)#MD>GbyXgCCWKUFr`d_&;lBkucst*l;+7;a?;f_B^M(OFD8=& zt*O}*6qd-imqKEU1;4brx=9+sOl(Rfc@ck|nUO)f#e>tOrre8YK_Bk^Hpb$XaPiV; z_U$>!go=dT#4j3U92oBs!nO_P|1lDqmPch>ql|6k#D*M9g`!DMlu^bfdR1eEj0N%8B|@C@$r68_DPx;!%pn1q za`&X$)~bd>^n=wwv+@c0SDtwb(2)awuE%@i`6(HbxV)K z;Bn!ca^cNdz_lw2q+WJ9Hy^+iSH2 z5;OCts-Mrinqr~?lQ<1AWF&~aN#1Ilx1<(Qlq@55d=AC=xnyT%l4NmecmG2oZ$fSb zrCDb2J$u==|0takUTK?fk?CKF zKjL?fy};J?F-#Jt#EMVvby`S}Hk|g!nc0b$98=-fn}{N-w48LCnG|V*T&Z_btQEib zO;5;5LaOK@Jymp(D!Ry(J`j!3=MsAqT}a_k@yeeUlP_%-wm0$hTE1Zz62*2(!|`8w zdK&ReG9qp-F{gss>IxbcE+xg?Ot)8jdrAyJuM>wSr1^^Mj5s_4Z5%#$l#Y>!@J$F! z`C*$ZC{+1oke(KYamtBH`iRjcF>-z(Y0*)ns`_M$Ek>L1ImU2I#k1gsySTP~oTq>B zJ%01ZD{S2GI-3vmXt7~*Mk!TgMKmlvk32&cy)HXxNn#g4xAA4h0-^`Uh zk|cd3sHUXMBNxtYw*;b+n$A|;vdCzK3 z(zdpkEGp~E@gIGZ-~IY`ynM(--on+?rv>Rfa*RQ-*Tk%Rktv@X(M4KnECz>Dd&NvV zv^KVRtw~hW){`{0k5?tG*OV9vV2;b8xJ<@=viKU?KQUS z?_x~)UQ}ukG)q$XPNitp2AP5l*^A%xp@AEa*m9lZO> zRVCdO8;=ZPwpxiz&LmfYtm?W7O44J5aCsm$nkZ8UuMA*5aqP-brZ=pm-gcY~ zJB~0o;gOE3?s!yj<7fVj^%-W$*R5g6{3R@&TZ*B16T1eyM8zgCZ|(J5b>$T-Zm6Q6 zx{NH#Alo+V5+@p*3!Z|EjSW9knknZ+g9I+LwyZQz$ofj{GMW;CXa;|#c zovh9e(zU0VfrzrsXn1m5-3|4K^UqsxGY#&Sd1zz17?gTSAWkB8DYt&&qpZ%hQ+>gO zENz-gv5>gI-T|Vj&f~I+E}*GG3`T;n!tz?0iW8X}?xnqN3~ORGD=)v5i_Txpg2sAQ zEUARfHd+S8B(O?g?)Cr5T}y0O>aXJJE!V$yEv{F7z|&JJxv{#JXEt_) ziKZG1WFU#lD4@Em0B?j4nv4>}#ididWF41Zbq&|7timjv?9lOkaZ+js0kaHx3og8x zOV+Gl;k>!5Si69PwqrE+O8}3R+`9GL@xfbIP$_{z(|pR)O^h7hPV1;y2&Y!K4jm^T z4&7@gVD0r6lhFGdZ}eo)nCs=BkQo(p+JrpSE?viES6nSVtVVoEDcSZ(4(-@OOWzb3 zRr9#$s&{a~@&z=_siC$Ynvs_MY~9@gbFSvSmq|aLvyi0=mau5~I@Z>~VF~62Cw$u7 z#;e}-LC&9FMPp+FiyCto+_RrH3H0m`08VxJf zbHz26vUFYpbLTdaXX(?@#+*SCs#dZhZHSk)9%NJv0DcJJqS{yIK+%Vi?xTo$dpmc^Ng)LgKJ)r)Hg9Nk2xIiJNB-N5yiUBIfE zG)B6bInp&T6O^j_O^G=|)+&jaIv##P==I{YRdD59cXCO=6fH;F7@G28seA|j{>k+i z4{YSnfLj8eGkR5w(Ww-Q|4tGzG156Af%O<;{&Y&pQ}J{ksXxzy6mP*NK1)`Qp<-o`uDGzhVhKrJJO(wZig6h+Y~q_Vlw z!i69H5|`yPv+s})4MP&eYj5NI%i=h=t(h?y@a@_4EL~cOp=~Q0Hn-tadI$<35WiVj zosF+^HwTaP2PFSwK|FI*!DkKWPOOR8&+*pqz=#H6{LE0(rqIOOrbIP(XjT~Zc$0QcJjH%~e&6QVQ#ge(zEMM6` znsR7+bFJo^mX^unm$JJ0_>Se?p&FKCu^qVqSu;xlGy=1-g%^DhO@-dF~ z)8n*Kw(N4QShJYQ0?|cQE+ti>i$XhHLbf`3heKZ<}O*wn$iij zZEs;RWTSNLd%5GPRjgXQii*$y9^Tr8)ojw5NcFqw)t7Vg5#90K3PA>1l7L-)SH^sf^WEUB~5@oF}Bd zmPP9pQ{))pc$)<2zHF}f?3cN$Aco2{D@A_`nOl`h;P_sSIg)9-@OrMj^gQO*moRtL zc`O!k67TG$Rr;pe97p}~^;~?}FIYgHZJd2a zI~aHQFiK1sn_AAQ%dcepg)5ma{$hcYn=ZE6);)qDxsGe@`7rBBlf|x9N>IO?MV0B| zH+OMxz)ty+l~m_=>Dni;)qoR^$mtdTpr)5+F1wj`U9pOqq8!rFGbkvlp{^*6z*q+d zIwyo|ikb%I=Y%*YeQ$We zO}r4`OK-W03m4C!ac%?478Wyk;Ghs9m)O%;3`$&|H9DQL`bzBM2iSX{mCjKciP^;z zCpqb8k^U7`%IYhxW}U>9^JFYuu&j=h!9MX(LrjUU*Iw&N$fABu1Bv582=|2vp?Z2~ zFI&OoSBTsaN8eCyV#D?W^p3eDo)vlI9BXzJ%dUPm?_1X-gtCtEOgj^O$LTj$vi_PY zSd!zTqq&6vV>a{GUc==}vYBe{$DCVBS%Hzq(S__4KkiDsH$e(@+OL+0`whiW!REL{hDjJX3ZQb z8kVqh$!b>3DfxzKtbdATz=UltZXO|7Mev)Q5m&Or6h{e?rrPUoVI!j zmEE|GhUgBq>^rUvo@&~J*(L+u6>F)CZR5euf0pmRa1?vx8dhZV@#Gurl$?JncU)Y~ z)}McdFaG2KHVnp4n{N|Y_A_KJ=HhEFC;H%@`Q{IQ#nx^+a~BJ#@OE)v-#(7^c*v|@ zKvkjzdtMV&2|c`W|ATDnS1)j%Vd~CoC<6%wC|-3lbA7M#__p52<8BEOl1f-|>0<0% zFY$}7e~;(8OcYm?VjelnD=)mn{#G$CvxUyB5A&0s{ER<6vxQ?lV?v58G~M`NuFLP` zcR&9zzrX)6x{@#FT^Gi%ZR0^Ef+q5o2zgpoz|`hn@wqSD$MJ+lE?Anvc-t67Ldb7k zQ%_M&Cg~FN6xY^JSsu^$J_$;VN#vFmi(`3~Rt*&o>9YT%~Js~KoMNV^O|mb&YB z?*)@Q^`qC>6Dr|`D@tg7`VG3(;H2qFbdp{`)ht42mccFLanOBmGncYeC#vdn}>C^_dN99Zr!!DxZ;k2k06LkX5^a%hop0^Xzx| z>Q5iw^$s6dY0*r!9Hq;fF2U^8A(RF=4;Lb1nlowy$hPm-BZkRK`voALjSJlMIrL_z{ z{{z1KU%%z~S2wb^RR$+d5PLx#=dWlWbmT>T@snTj;G>W8`ra-^gbb>|FHs2L>S7x` zqi$joQbU2{w1fvEqt#WH|N<8BS)+)$6dm@oioh zE?{nLBD?N?mhnvSQ~g`mwzr)_+h1cxPk^-41V%d!a_A&NC;_4jChCs$3?Wo^N}UeK zlEJ&$PWzE&+WWm!U-@p$FUgK~!bDn0 z3cj9cLKq?{`wWCIy`D9VF>K%Jl)9L3C8y)r+fBmUxfl-ok^3HalC454vNMv|{fE!+ zZ{L4_r#I}TYs5v!A4By8>&bJfdUrDsiXp9X9`ln&*}C}%<3Tf7(ngD<%=Ud7+1};Q z-mg;c#mA%+QZu)LB*PdEe=4=abct-i-1)4iHq(5dnQjT%YOlGSHI66w z_Os3O?|YT!Uw#c^?KLF6@h`mhOMj64*V!$;+-i%bZslcMP#4eZzy1n8eqtY{tU1gn ziKnlv1xMN()~_sQWb32+^k={2(I=kdjRXCRD>A4-lq^0pWSSzi;$j-bE;sDz2@mq; z9M}YMf|@d2w&-H=ojYVq@6+DVQ)>idmew(UNddzf@8@Sf{u6s#nIcmPea8;4^_Azf zsmd{SD~F%|8UOW@-}2B4J7^ce=l7af{GQKpQ`S+w|K0D&*!D1888`ExOQU2=+=oNP z&739Ial^_od^>*4XFmT2T4Lsi?PuZXbxJUND_1VBl3+NS?7TwC=Twjr2gA+nOr_RP zn(XAzD}Un8_dm`7zYw{#WsDs@O#7&ZtaW$u(ZwDf{jaa^-QPdT(=Tllk~yUwqEfi@ zTHbTTTn_*Fi+trre`M!WEjL^>4@c{6j<`#>WJNq%-k7AJMrsw}38i^>+IJ8v zS;3ipipGQ4O^3 zqSa8wd6%pt>hL4{?YdpOc%V9w?1sY&hQiLZZ&Uy2Vm z7c8VUevmDPC&{mGqMy-|f!W?5)!?ZjSnAvc^~MdvHO<%d82HJeAv zxnf-vO`LZ&cE^P-#*Hd&pgMb76*o)m)_ma@yf1N63dq`^4LfD z=r{@8xkuafvUSHk#w-~mhK4zK^f=>FV&tX_mRx&1%ab~Jfj6}#vfm)Jd;l)`G#{Kt9yp`Y-;YsZNy znkW7un(kd&c>RSZIp9bj)7Z~5fA}Fk`t^N0_WA)v)vTI83>V(}b*}I}$|t|}6P|qT z6OAnr?9P!I_WQO`UaA2I$ORi?2y@mUJ z_CtRCz%v|jR&vp06*vwb67r~KsL9wS#JuhlLTEIZ@edwj>kE&tQGCP7yZ{@w?G{4l z(FmcM#ZY|tz1&mP!B4*U1%C42v%Iu<5AA~(sB*&!a z7-G~3lDT$=L$>g|UFD2q@U~P^RvgdB#1z@N#mtpphT#q-3(8m!XTc=rnSxGwcRtF0 z{_Hiz@GvTa&yM2*3?AFTeP6zlTR!+5o;`ek*MIwMK7RY1eCS_($jiMFtV|5hyn7b| zwhHPR8ns8re)oj-Ai-*hp&~nli6fiX&@#Z31VEaBi%dadE;+dcBI7uws5I?PbewC1 z!K8HNq$Uy@v{JRak@$T(*e(Q_?QgIxYA(y`>}Qw{er9N@i2R<0LE33#*Rw+6qsS;} zph0vI@{DMArPKu>pPS*q9wu`ZaMj!dQYWNmva1C{c^z}DL0pb;hQ;@0 zS1e}j+&NU2=8_Pth6Mvb=NP^207*GjET21%g>@yQCq-+%KtWl%F?%l8+;9u;dC%>< z>y{f>R$`X^W5he$$-a$m&=)_C1@oG;KJS_wl3e9lqXo<4F1G9%qFD&Y)Zxu+><%xS zk(ih&^$YtY<M$_ja^bgHNw(Usssd%3*0VOQY4#H!V6LaCJchoZ3G(vGnKyqv!R}^8i)&dPr|K;K zg}jU&c$lyJ=L?J){EQ#n%T5Ve+V*eYmtXoQ_kQJ9JiF;N9{J&y`N+FJB&7a9c8*Lj z-nox`NBRgQS5Yszh_gz0J|X%duh|^S+>$JMH$TRU9qI{bI7U%+7BFU$m0OP0JcQqn zN|W@F1n)Qlaf#HWr;w15D1mhd&)%K%XD*~Js*fXsVpB?1OD1XQdEz&wu*FHhSt0pI zJxNHSBq@$qgOon4gXwnG%8i(rn#MZ(2H%yS{=m4KP|p$RiwEhNiWr`{M!Pn=tDsU$ z<|vBNlL+=7WYd8bhWwWB>lfiu{z5447P(gHX|&oI+4B&8e&{I<3`^Tij52ADCOgW8 zB^1T{+A{h#J;X~L>M4IjK9!67Rjb9f?|g=5UVek-P8WTLIv5PuMMu%t%_sM#|4}G8 zlx|a!NR$}EsM=|^Y|>x+$psV@SsC2Fo93e~Y<4Rn8(wA0XbR=!3B=meSmI;fV?W}h zE}u5laK!BK!UCtom68{;agoIkv0!{hShHlLEBx-8skm#Re zBq3GEWdiZoSU9JOiB0$M_^~N`l9%QarW;qYiLifAzE&lK{m0A+nvH3_T-8b2f&`QE z$jb`Sd+->&-A*|cVqo)j4*60kF0^B}8S#wvvi-^5v9VuG?{+ij^AewsK#Ivi@79O- z+8001b3-Mpz5ZYM(kE_b?TRWAt?HdtRi=_bD?Kc)vPaoej5g4`k0aeK;)~}~SyqHu zVphM`ql_jjzY=}=w^mnmKw{yj1=LprIVSQ}*VNHaSBJCnDDH|mEQu2R%UNfGivA5k zVw18tebMHHsxkYIDu)76I48)Rtz zOZ@md|H0G8V`y4;H=p^~9jrgUp0pTSIFE>qH7#p8R(V4(DvqRz5)wy*U~e47Vly*w z_$Y_koy6s5lMy55`y90IdW8oc+emwFKYgu-In>s}Sg44Cyd+#=ujyHZ)YsKum>R*G zl}}w<6gJ8KT&g%5PK+|5No~2*nQYWwsf_A)7Ar=xNqaBCESpsruzIOqGYEC2IyG{c z%Ht$SG=-Q5zdswkKwE+}Du&op$$Mmi$w@IzNwQj$gESFRdB;YRl2**(i?8P$x7@<5 zS1zHz>SuV;fnRDH^amJkYoTLkl!;Lpc)Fw$3g38ZI8jUOw^sMau0VBLlafJ`S9O(H zRSH)@gF2=iSJzA9+e|SO&AWihuD_X^Mdn-1&tdGyFwPk1Bqz7%LpC}hbMckq!9y^q^&m3%K*L2YilWT~|Dg1HOEN{qR*auBA z7%y04z}=TdPNav=)s6+sB-dWX`|f!^cijF?Zn^m;Zdy@J zv^XK<7=z9cw*T>){A>fvf6pD?D<{>+CF1wize&D@ad%--?678BFQ6ZiG z@MC=D6CdJ^J8tLB5C03l-s(~74`4|sWA%+6<^O&Bc5c4)o!oxqc{F6lqTW4JJuV!m zs{S95U-Hv>PNWlt`(wDbs=tv`4cfkzKAjeU_#9K~KK2gAQBaab=7Qza1UB&EwkcfV zBWAh2GeZ=rp5zX7Hq+}gk&=}|l0||VNeY)T%SX&ETmFWG@v0-x`9YR2R{0`hI z_LwR4#4m*ta;va7EL*r<;hmXt<%gQVqFxd3dR>u&VHnL8JVQr$=BJksqq;8JTPrA%b#U%`z^# z`8~YnmaAA(mqlPg#yZi4t9vI;{PA)2cr#dh&24=6?ss$fs(O-S44Dn}&BO^c-bujf znyK%bK+{3E-IX#<=t)6zsM(E-yW!n1v{RHG<%b-L)F^zd+Jvmyuv5J7BCdLej6b*B z#yc;}q;F3j&V)$*GG6!xhv}1kXE9IFw)X*k`kxPS$Sr+S`kGqJ&?I(hGFl{XQ|HLY zCWB&hb`zK0{9f+5>vnE?=WX1!Za#U^UsY=xjhQ4Sn#B$rvZvl(4a+3W86MlB>|_c1;8J!4di;NDA4dhC{=2dUuLV_0q9-H~j%89OinN^_8YRO3PtKQTMsi34GoXdFEXj65JGI{=l6b@N87@$OQ>@-Ikn#> zHls0-n3y=}t4{nvO4PYC=lumx*965+S>xic%DC^)mev=kB(5+^prsKdK{$UE6J(Q; zEaALoQgkkQoGsrpBm?D33?}(&mwY5__j{!8DqU-p`dAL5=_e3AclwBu zMoSh#Zdhw#X~>Qe%MXH|oEcvMqL^`?m7yuYN>g#}D(B z?TOs}i95NdECusSfto;(Yr>ns97}Hf1>ADyJ$&H(@8-4}uHvHkLSF19v56Dcg{u;| zP90SC5+6g1A&%-b*K*^{%3s{bwTohD+tr6BMXpfioDGtXNr+N$(?wi!(|fsUQ63$y zJ;;5}Z>LYZmQC8*A5^c8C=tY#l`cFsqM}usDY-N$)SolpMB2<>?L4WkQO2qyaJd{9 zRUVN|HI_ka$V@1@^ULN}1=eg^SkMX6~;L6)? z;i9Tc>|$hE8DSM`1{xl!F`y+hzM-Q{3R}GR%{h~*2kktHgGUBBELJF0P+Fd}$5F>*<9N+U2 zzx>L_<=Xdi=UpG*?mO@0$1gWCoHvj9gkcO>7jenu*K+mM*OC|NBfeoJ_0dvKDPP%y z`oOoc1*I#^E;P~9U)AnXA7!jcnVS8m^0QcV@iG$HALi?y{vdbX{r~u{mk%-J3*Q@3 zQ<`v&vHf?S=Fa!NhkO3(84QirbLWLcGGI&OsYAzX$Y2=As-PqTVpHl^vR0hm6_-;i z0YOSxHKoF@0#3J@r$}P56+>(~H5FwPrp8MD6cXrk;tj=+m}JKi6-!=`5Xzzq?e4rX zTMg1VXYSUDH?^oc>t;FDxtGHu4i5b8vl6sQpMJk=cYTP@e(e`*8?#}S{xEW66TklQ zJ>2=pukd7h6pL3Zqe{q|9}~X*gFN-~ukf*Z-pgm6>ZNhnGUk+|Yd3yWXIDX-Eh-AT z-Hu)Us(U7ZKomJei&(SB%nSeVK0a{w2l)7R?`Qk4m#EWTusz{0lxNj;rBccdYv1jY zO)XfZ4MN&kk|w@STO=itZZ=4|mZ}2EHg;_4AW8+=SIlK<%KMc-X;mSWF%zEpT5fXpE-il*~|EN*v~5W z=$C;pApSBgCI*WNR+V3pdKhE?b$k58#ieMvw8rL9RUpBRDXgbZ$R|F%`fQ2NLD5Ak+c$I(Ti(Qlm(?-;#$Gx-F7fw~iv>=fpO~a% z>>>3rWF?avbPNkAKEjSyALVA!zaYo9ys`~d&*Z{OvKJ-s*sLWh*z#3rJ}{wxw`s;OwIKWXAC zJ6CoS-V>Ox+QnZelT+tuF_74{3Vh`svr%2Ee!6ga#a7b`$xcbZ6!b;To2{d>Kx-pu z6OlztmyJrPV*ZMHq6hb}_295ZVoriOKP;?llMIi0$gOT7P2vv~>uGwNZa4)MjEcNQ z2~g7tGl&m57#MWo@+-^u-vW`u@4>xy7e{@i%)hvfyjby<;x~v+Afup&jLANFMuH^f z7myPx-pCsuK7SGQc@DadJ8($=e|n8(9Z^4KC2K!LXGZ@h0_=)B^6Y@#-6#D(;N5fwZeSEg*I@ z{ar;ZLD|_*KLb-jL^9L0#bVUWt>l7wic==&?egH&W(J;IpKuk_zmk{8p)IUsjv~s^ z#mkRv$D0TT;5wF3`BZg!p~~g*9_YinN`ok4iQe)MAz$w0BLA zQc_P{MH-IwPKGAKpR5S;2{9A1kaSBgZ@jRLBLgOq64WbDVV~jhc!^FHIsPEgX+;$0#o-bzAu0^_Yo%|k0;(M)PpcW@SPy*zy&QV^kNn4{ zKRl!3Pkj2DJaKp&kLXLg<}ZZy4&jbH?KEAmmL-jIXsD|uOFEKIG7Neq8ByQxF~yQy zQAI_%iT*=JX_o*gpoon)mc-%)7S5l~;$svX}H$q(IT;?yTCpkTv zipnZ#3R4Kl;O>YmX4&O8acN;M&))YKFYOv7W!W0meAyU!j=Ce zO%-|S!_S!s60f=$cXTu1&S25Xr9$9xC@3tWrly+8bOT+Yi;zj(VO`Hc(|+!Iz4del zE*;8eD`dsGIoOZyW5>ZRT-se!8EoQnDX1$ZKfy|J_B@u(Uqn->fwuko*w@^~sI*Uh zt&qFqbg~MHDJ#wLw4HLd5`26*Z}|D7-Y^iMqT)QjwBF;KI79&x>! z+1U=cbC%LHM+S@1M&>uvQ5rMBp&dIp&@xPP(L5F}EF!V6oXVypEGmp<;`n|x?>>ev zZ$9g4;y8L>FD*S2vj$lCYv{t^Z{n)!mJl*0NuREzwz7;&n}fCi4{3RoEIe-&^J}Z9 ztSBZc(aL!1QT85eClH%M!{Q|@XlkIYs*HkyOw5Bqxb_?o!ZbxbLr|l2DWddH+3P)Ge+5R*h$&^ zI&4BT4vr-;SN!q9rbZen3y6=Ffyx+Qa(oi6^xNtMi&(s9AqyI+$WD$WN(PvK`1;`q zmyAF#(CMW3qN}*JYLfeY^dyIe)F*(>HM|%wMW<0NI?p$Bv;EbBj2h#qUf4uYj)jix zJL&T#Qa*2y<}Vgh=Mx(nONu?j=-4<(br-TWXNp(09}*v`ZaN7Wicb|kyq>(tt-P>* z2(OUj%*r{;mmnoMI-RQGL|hZ266g-$OKjlM^X6fXPobz`8EeWjF?x=(Q3Wso37Ra4 z;*WE&j(2dRd60lAKwDI%h`CGVQIcjSHaV9$OXgD%>*m1bt?cg^!6$X@@0_Ci^6R;# zWQgB=?@5k{j?_C#s?ORCvFHNMzj!f8{%8uz^GOJe(Ka{;mU!{IE2yX`AT_f{{AUU2 zF)%jn!k$(_RG3HPUH|4PE!WAT?sa3(%>algyq=z`(D`T4w=)5IYbAHrL ze);0D@arG5pslK!QNogUX1Zb2L)1AW9b zT*cKT4xZhx2jN0OuGOldIn0%@GiqQ1n~w)5tyxM%ZLtKHMbyjqmYZl|d_qWrkT##l zmZ28ekiMQJ*OlkQX=B^i#1wJ0Yq`9{#S5GEGpZKZoADPC@>tVpxL_Si8|!G4@v$^9 zghSOcI7Zj-nDjr%x4eOdoP2V!^C(hdwP8x~acV2fp0Rz^JA@Joty@zg!K%a`#q}&) zw3;PFZM^W%)4bg5B7e>b<`xAww(WIVhQt|7C*?dC`P1(q;sAo=n5lJy|6iFXjSdq!l;oZEt{}>Zq)gRAgb^qN^!Tu2bs3K~Y zt!I9!#2UHf)X$qsWljtehqlu?mdTu@^C+uICm}hXOWt`Yx&7OC=+Vt|PR6s~%1cN% z{upl@brH0S�SAg|U+@yM{@tnL|OsB**vdrBi%XUZwc^WIt^O_R-w$A-{4Vm9^z! zGx^%*1?GsoO^D4*c}7K-W{Q@d$2@Daj6r2oN^Fy59Heb1{C#VG&_qmD6)RRWkcjBI zD3y>?u5(3EGDl+QrQ#dKhZbihVz-(k)^##EG=S4D=-2cRG zdR=~P)mw973CmW`Bi)ifZb7;b!$}4l7E+4KDJe`MF(!+Ws+F9#ppYnc7rS@J_%-Rm z6^s#oJD2K$d@?f&sLZx9G&(8$vIB>=iuG44!y27JrIcM;T}es2hhx1H8lgNRgz#8n zGO28=C(+x&(PMo$rSE7rX4NG^puFVMu%w3E!ffrv?wU)NU_H8#r(ZtIgei@>6)RXW zf1dc(T5=>_R__LyeB*Qv`N^)H&l2(XO$(N=xGV{udVf~9O2@z$Zr>OVV=8q^ms4$x zA-z)M&5jo)H!MC`xQmcYw;@T!h(-#{1HAUkCR)_{)wW~`s^_v~@qFrQCEl;7&=$tZ z7}~{C&+VaW!Yw4!ApJg@m6t3dooMpPOURFQ(A+shz+oV{LVWhhRLu5#&bxRS#kNsi zfBXdwO^Q9$HcA{b&YlC!sP7Ypd4p_*F(G|v%w4oZ+ANQ}0`bXWZ))}90kuM{Uq*|w zsQGM&EGo0=^SkzT2q9ced4hq7fo{eE(WFNQ=?0{SMR9+m9imm}(i!wWVwAB2#Y8o_zbTf z?Pl0Hg78ODw+!^+pz_p$ zHQD6aCfIkho!G=I90z4^>>R^jl%UZjn{${+qVNtLqr;WXg7cSCX!kQR*pJH)O|sQR zS7$Gih7@Y%EtJ7Kj;WCWZO}`P3DVcsCvDNe;kH5IB&aRS&nG=?l1=wLNAo}@hYpEd z2mzlXLG+w_(NSg&Sut)7z4{OjzH%IMwB?NLrsM4k^`s&rBMXD{?QMrznDAS$TV#;% zIuQQA)NmWSn>!dBH;`3WL{_Me%^Tie``#A1)yjYa{qzh@VNWlhB25C~{hN64js0}B zAE&K*2#-+)9oLWyK*t%L^q%BM)yl&?dxUtU)v>5l`c`@dnW+gFCt8J&I>;!fVg9lO zlx3x9%e8xY_Ve;fZ_wQ1A~CmwS|MfHGUS=rqz2k~{^^(4cYHAX$qI86q0x5sxAtl8 zvV>s}r>{O7+$8~|ovO-u^7C!hn41 zJ$8&Sa}IMB%_Bd`!{E>e0dovVW(Te9GQg^SyKoV;670K%`xy4x$c{HM+}A~Wf0%UO zaF9IjVrnK{;*Xp5iH{D59?sq?HEJZj$}GNWytkd!wtmD@%781uumq#c`&w|=bEuxb zfYO8zg99=Un&Zffa?;Y)&8Ra(Q1oy>0ss|^Yk5k3YBs{)@qIGzdI^jVi*Fgjl3PYu zkpxCD9*(!QiBI-0(kFF~j;BQYTeRmOPyGIMI>x$1jzI}pLii-8O%VTAo@8R6xtTtR z;Z=|;akdP?LI%YTW@Y7)VI5}kQ%~^RwpOM@25s=2bdb96GOCB3;y0U*2r-h8C87#- zhk3mD2qVd5REuq7CPm{JInJKrqhgao3`*N%l~q!nt3J~ZE5Y9otsNsm@Qaxa^`4mWo*BqV9%_#O_ABvCe}n7kY{w%KHi zKf;lIpZx9N_`oEIr4qE~r<10}wkQXOTG}MYma%)HjeRZM;gzpdd#jt+elNZ1J)9$* z^iTQ8kf5?WHh64+2*OmdWsm?#Uq`(Ebp7q?2x;hTBV z{=WsP9fLj}od>pXWHg$5iFwqA>5~IP?0@}fHukw0Z#zzpCz^t)O3HHcu?=qE=RbIm zJp&Gm77NxW7;N4n@sWxXP4b_gslIla)go6CpE{&H+B?J!yz14c5T4OKI>at|r7x(3 zOX6~hD9@L;B{Pd0yOSfWof543adqrqduKFdb4$s~mRKt-73=5$cC<;kVtYZi#E5Mj zc(W?0QmgseC0>%avTNK*dE){aD)TTo1{jpSo*ZkzIVOE|U_gAjw5c(k{Nf@CGSl(4 zzsm1_{~RsSk5pi8G`Q(Ic8ILKRa6{Z)UNwQfFQwX9D=*M2X}XOcXvo|Z`>`o6Wk$a z;~m^x8VK$*&}{bkZ_adw~{UT?vcde+nLZabn$j62pX|e zP)K!E{$lDFkv9fIg?6)HQ|I6%vmMKn=X67#7!BrS68fa|J=pl!QUcb{^%n+lj|0qW zyLb;L%gR*EqT)C)89yWyYwlseU)@>ZH#Oeeu%cd=&*h7w@P7)ck;T^LVXglq_EPki zR6~?pet!iq7U}N|+CfZ06{?9rZh33+OAF``V<95T0#5#&h8r5Eswk#m}r}--3S&@>qg2!zL{x|mOi?RxKYgxwO zwWyYA(3mitdf*lnK@Kkhm*Q}F2-jVO7ThnlB){>al9A)fd+v*4q3YM~QR zRQHL{c-ExHQPlT14%#3orinTSAItwc{|VMAdyM!fa_n&`tF>5*pL8;^q|B?H1wD~E~JgHo1zvh}=Uz-qm-#V175x*H0~2@FsA zLo9GZ%Cw|7;dHc~TCZ{^7a77NYC+@Z^W#Ee1+fOIv*3l2sk!G`)mwtnC(S!WCiVBs z+iM5mmEfIX(2W|0Imyfz-EJQI@thoP(4AAt6l1U969O;}U&_@QP}u=3J9aSqvcFC{ z6M2n8(#OWQ<*^38@Z^N}*Fg+cdOmA(((?@nZMECi%Q2{Cg0P&G_u^Dsb4Q`E>zAgh z)!mwh$7siUAC1<%ykI7{@#A%SpVV7%acN)|I!N7_Iy$7ds^5iPQdPyz-?shkwsTOI zKL(FddYQIKo1(P4LccB#OO-vRlV2Kffu%ZBZ6^{%b_g0sgucUshx=CZEJiL`;8&IltLglyFN0QItcK4`vTv@< z`vfQ4YhE1E`{!nbR5;b?pXmt=_^I$~gmKCR0EtrAb4h*)kQZMEBiZ$1A3&OkG&*(% z&CHuJ+s+992VXB|FM`KLl&(yRB54=A$pf!~shVM>X1%su=z&qSc5Fb=)fFaa<}rd9 z$WE?)HuO6Fyb%Z5on1!uU^XaSY&5uV^$=?eaes^`{*-YioI_PrWwdgpt z(vX^&bCEe$8Ldt0iO|g3yqU=ADk4UOa(+iCX=SF|@G_vKFeOo`;I<=WSE|817JxAR zSOU#|oXvvLZqZydEm~{7VffCM8#hCv;;WbEt$%+j54%Ih7au@3l!%R=w9~&c0TuTO zRI>w@s~SOx1brpF!ff-$!z!u4n(Ba-@{ze${6GHu{Z63&FcdJHoG0 z)k6bG!YrPbbRvM`ZhGfZ8Vi>>alw|IFYkYSBazp1MKo04X2l9u zVKZl%W=6KKN4Ns&oD=ht!`Sx{7@Tceudhe3wjIuO!Y%!%eK?!jvbI^9D5co{dDDA zaPYTXJ?iG|szEfqc?6qY+j#mQ)&yb>yqe7yeZkz$tF)5CWlMv&ubfCu>Kn!$96Ue5 zE{scte{Hh7Ap8@v;99xSd7S|^SRIK5T{bNp`^Y<}yfZG*&9toa0kO>f2n_NFKCrev zbg>F2REb&7BOiTnK666bgPRVM4Y)~$=%R-^T%X4)ZCfpl=y{abVDfhqYL9rk?Hu+0 za4JD-cv7*%UHBtG6Bi5(?@@~Km%(pv6$^(bDQ6BrmJDZhI7mr1Zvliyk6Q?q8e}5s z=7G&^By(j)9Sh{_oejr-$yBCwri_}*ka&+*`@)yFPfG$PC284n_6iV_=!&8L1K#xM z5?8Feu~jddp9ftwF9lPFX@5sm4n|V8=NFj2r6>T`AB!pOsLl<;o(s#6o?7U1PJ~1P zEf%kUq1laPMl`DG#|zj!qo(f=PaBoj!3%BmiG|zeONcuRzbo2LtU?*}e>k0Dsq@c( z6D+)w*T~>rGG+h1zeFT|w@_AT7|A;yFQ`J1Xf}0c_uPr!bSfV57yR@1@#lZNqe<&? zFiLwkYBtwitk0?c|3ZAanx(0VeYO(*YyVeRjPHhQNF~vPmGee*J`1Q}XGS0LhTP`BzTg7ZO;c*@?$X-x_ESvMReY~ZJo78Mej65HCRxYym zY}NTC!{5rV0?1;|u9#6>+QVg-o9nD|h}HS`{Q;ooVCoCy{|U$Ny|#X%hzMC^0kXK2gDsZDYDmJACl$*qdT3-3_7G3c)DrEeq!~i76Jm<6pgFL zh!X7w{j-^^gv0z}m?@2G*KM`CM>jDJ=}kwpJ}X zICS!6h@j_+;&QM{U+1;D*RJaZ!g75$3}v!7u0ppB*!w&UUs%Ga>m8Cd)ID7rMc$A- zFl1wa+YEHat21{AcT!ZtD>$Lf~ zkyiJym#xxR_nkg%+;L{|E@x5PxuxC?=IQ);Igu4+B@&2cubn!tChku2Xj=IwHnX=D z;Y&F0l_}Ku4OjK*T^%-LiuplIlqDg_R7#4-M-fmngIH2ViEhpj`|+iHL<*lI|IY!g zwS58=lTdgVp8dXSaqLb)&`6J6mR6;Y2NK^qh*VN4lq?FwH*Nx9RjSk&wV`3-N^6$r zy4MU6dtVIT@!kEt;4w)IQzhjS02S4L0O^u!b;e5QonmR2n4*_yTllrU6xfIS+B7YD zA%Ek$Ba>^UOwLIWyPd?d3v^R(IeNV zbB8I@W%K3F-&$avk|S$IMrCYLCxwsFk81n)YNwyszNBLf{Q!}uyixeqO%!^xJ$z@UW|AG^Ipl3RXJ1g zO0aS1qSjMBhVc)=VpIZM;(<8Hb?km zZZ??8zN$7l;YqHoi9?3%GUwSEiGd$0)s*K0Y5$5fg&H5vy1WMTmsnw~o~O&gwkFal zU4j=G+z`4&i{I6jTF;iSDofF+Oc6aHLPCk{NxY}+GRGtJuS9Jat5Pz1^YcGGCLUmc z7a?z@rkJ2=m8yx(tv_%)8!jdSj!6ZmX#l7#FT{G^?NZV$uJ-N{XH|xLR8#p6b8G)b z%5$@2Pkp6gsLea7475+5R+QjB_P;|gLQPp?g>dy#a!qjgA`oL3;X9x4FbM(da&NrD zMwHQvoYE)O71cRGmFnMD{>vF9AC#R8V;qSXR`%G#;FCnrB9g`Ol1b|NZ}8o-LvLIN z1trT^X(74p7NjzUnC~L5`r)g3X`C8|a7flwpBifb&d-hDg@k928}3}k$YXsRVp3z{ z(u6L~a(G3|xG`KM%-zN=~t}}0@NlHqRh`R+gLPWRFH;Nz> zq)Q*SE{7u>YY`` z`tw@}bZad4g5u-xZFIU{QW>W`*lD5EB17O<#zw5+{0Yz0f`=%^{Z8Se@G*kOIV%3r z_hsF=3 za;oLA?fLD1HWnr8(NkDYNI7@_tb;J>F&*kHAge3AadK8g)u0=E>HmTYHv?r82R#=M4c-aOQ zzdX7iqj$lAjXJ0|R(R$nkvi6*GDSUw;-r&;JQg)6Jh|b>PED?{tomf+yUQd+;}P)W z#F{eWElb5<95aXUo}7&yc}LBB@Y4Wkn7piKu>rkedup@v{G81-+h6iV^qiVi^JZzj zO2s|F0U;^);}jUaX5(-EqQ)rodu4}cuz26-z#cL>c30I3Wr; z67!{gk^qucwJ)R7KA*+BlQ#Z6^Y?J+xM#Szy||Ra)Q{yG<_3tF|K$B=gMl4vWA+OE zuV}Md98ua=R9DJlbr#9Hrxo-JPQ2gNT~to6ll^qUwXMo%zJRnmF}Dr@2^*EG6p(B) zSy}lsHfJoVq=^`3LYwmv<10C;SUg<50omeiwd?Wrvv(;wjiqfTeWS{{(HME*an_<>5F4!4%WnoSe(yzp<#I}k>lsM#cL7ENG0vT^jIy!-BAX(+Yw%&_-tzwQ9mz{+ z`ErfT(*H289AD$fksHKM@|vw0Om*b|*>Rs#6aF#pcGL+LZd&H4^Lun6aaVWQAY6_qTfeL0Q>V4N7UkVs)p<@S~tsa~(U0QO-Y%;TLu$l$B>*e;uRyyz*zKb|}_=2oUL zv`qz@5f45m+R9CB!4fE)9^*a~TahmR1)tFOzTxInxD4CDQ(*E9eG0yoZGLMwXuUi7X@~OU)CLm3Js;#$a%v`glsYTUn@1CL8Hz-lLBYa51fkXE_ ze4RlyP&HTF<&=`;W$jb9Ya?+zIxyxb!*vd)Nj9aB1@qkOf&+a0;(R~LjFhI*9z|GZ zEN_^P6^qwbSA223?+AAP!zAjjz{bFBJcctd;S#0VIOK6TqI|xy(qoN>35Q%(zZd+{ zCQpZvT$ptFC+PfnPTyBq!m_bkt>sp)*Y}R|lss1TLAO=p4uz%9Gc#WY*OEiqeYg~v zP7ye0b`IHY0^h7p2-p%O{g~k@&<}c3v%)R4`^1RNJC5}RVQ#JXriEf)^{V+Y%!8X) z(sSbw7Euen`om(hQ}cOl9OdXQ8=R>~@m13kw5`rm*OERWF|oP#eZ;p|+Na(*O2q(` zL)&1w};c~YXyzZ6Qyh7e-`vqJ6mRD+B;optPgMep! z!U{PcZaINji8C7Tr4M2GAjM=jS*|6nN2IftMEbu;woj+QFRCQIFGBn^Vyl>to7xMb zsqS5iI5O9fye^*?5U^4IY0p-6eAKpW}1WxUC zY?5QBNyF$gMu9(RNP;6ddQ}4uIohuXwHuqMKiNxsscHFH4ujNouX26=?ywpuTEUXO z&#q;h;0uF0eN6XUYWVEN(=ld7CNDjjDK*wJtSs^w1 z0$Y009Slkq7}$L0+ev+aQ9UrWmqnBlZDTO0k*0i{u?5B&sP38cumSh}FVl<;tuNx% zYYIbFQqH$~gSs^+3Gnq1@jh0Zn-b9IvTAv4#?Q^~2$Ql2HC!amI^md5^NG(O|&~EB1_j#!g8YX-lBuB<#v(&x{ zhPm;LnGK>~#(CuV52&6lBCwou+KtzDrFX1qBHBFNbg%Z8k~` zI%~4A5xL_>v^G2LFpShZF@r58j0e5@TGGw9I>`DjzRziqz#^qrSi+7dI=>TA^v|aS zT=?fyV&o`D7(N)1ydJ9)VZPbP(OZs1Oc}H`>!gI2U*I{fzhOHQJ6Qb5ms$wZ;M}xQ zkorZx5{F{qNqmZa5FgF&mor;|@4bm+7){~Nk{lt9+}z$Nkn;~4MK~?3>4fUl8LGzV zjzn>_hAssM;DS$`Oh(CtxxGJay=}rHQ5{hTimlD?_})Um?qa8Th8~^^mN_~CG-!l& z1Mee}>u-!}O5W_yU!KtV5Oh1lAVbZJ%e*apIj#~Ul{A67g#&2U0`nGrPfFREH#HiC2J)ymjXx3!b;@xndjdq>8ywF?tIqtanDORLQ z;&zJcv!S8_@pgY-d*0cesNr-j;bXP)G?kUYNR;glaTbxWVl>BJQ_MrXK4jX4P5HW# zN;7n5@d8`>9n!{-qaVxJB?QbJPpCAIGxKlT`YmmE4bm6xXg$T#|q!Axr}_5THq61Y9~nFAET{ zX>GY#1fN5EchW+OfIE|(0dHU)6~^w_lBYtU^|uV~-|8qjoDwhJDr8BH*BVO={HN^7 z4#pqZQD%Ohapeb|GATtlBfrx>o?0>*JoH*W>&TdR<>JEb$Tpo$(tG1+oENQNM~84F zl@D;Mg1G@_x+EPBUkQf$;CD|tU=MYs3%4jq;g1Z@y7^DWeY*$g!XuM_Tutq3+$|%y zs?Sb4f4`Nt_D*6w^vM~R)aEFQx20Btj zqXQO>DGlCeEF`vOwB+zY)}P*9!AmLi)I*dfglAi0fx(_U{&BlqlXM!4T}c-k8o;S? zCnC>=y&37@^K+bpyzg2Ia&>)vd})}@nJ7+5-FHY};V0Dc;WkM%E0=|@8I2Y6SY4g{ zoE~8i*d0b|v%J5C2|x3Ka?H(#U-xFv3Uwf$Xm?_4SP>Rzn!WuAH7^p6L-ys58`Xc& zuv}j5r*+_1vnTs8t$16?kG5k92okbNptt_<$}%^4g!?8QF5xM zPH-<*o)T!;N8YEDwexZ%XM$er-z$#HyDeOdQB})TtR%Zz8>qC>Yws99`3!Wf%X9}M9w#?0*;$na3?vabKr+ zXM5u~x{4(JGwTp=P~SfF&VZdl|9yhrbgaDADyAkhoX!Gm_G@rdfh-O z;{{lxbXxsZEGSsZu;=$W@{J;2Nf509k&5p^JzAd@=j%X#v5E{AIF?Hf@^Cl9C!y~} zqHg(%2_#V7g;lD^{2VI(`c2{N7qT6tWS|_@)z8PmfE1u%X3(#3MOkeTY-YwwbF$i$ zk$_pZ@{&Nt&H8G{^#pFM&C^x?fg$Z3a=qY__w92B#dyS6+l^y(_Cs+{&)Wl~LPLDW zgXbvRF{$PvoQgHQjkU4PdHK+@u|hq4S>Uv>&BvL&JzHGL@fq1;+(YbK`L1vERoz~v z0ZRYQJO7zy%#OCz+~5l(^2qAu(@XM`1)pW z;nq#JY z2=ryaqfozA+Rrr@nD16EL{*TRbJ*mi4yhRPW$8ZO=X`pOHs#G=fo270h6Cxn<+5Mg znd|Q*1$=}J1q6*k9+Pf-i;vY=sT76xBDoYAASWEMn4~J_B^p18GE=GF5=e0?u)w8~ zBI<>fnKJ6WG{)LgdCEC@JHURL_Vd(6mOuN=bYrC2=cyidh5~*hRo(8#7s|Q0UZzz< zM9Oo$N+Fo@`)(jKTb z;k!2t1t#wpCAv6B)}zADbW_1CI9X#EgFo`~)^hgX()e;9sW1YQGN<9rK=%npk~ckd z0x)<4m_NAh#-h-jcw_J*dXF?!_}~%Fb~U`LZ=)ne3L(z z>UO{pq!UViI5>;FnIU}F2}!UoxC+HmL7<);L3`!S^oYC+8Tt4B7H~x-!~!n*#Q(Pe zjK7!t@2CH*_j-&GL;L^8ycm##zWr~PSUv6Sk4yD$n5bB47deQ5!UE8M9duOoGNTb8 z*iCGdj6_e^8aNXi2_`*@-GU?ELI2QUbTp7x-up+T5edFz`UGxc5A;7BBgrq~VJ@`a zgx6Vuu5PY&$1mRL9am)6fiKGz68nCzhK33eRGa!8m_t+rt``F0XK|a0ho!4uQD2mA zZ)^T=I{K*wBdDY}qcPDeuSRwR2muVJzFBdp-YZjB& z`JF`=MSYwIjGGhyxg}RHVT>5p2FnnO1-!_2wss74DqUN@UPSb zF$$}V*u@R8{mXW~Dd(B`<9&ic99kSEqWDA_Qo)>0T7bKH>LLSonF9KUi-rtfjDipA zLd`chkAEY5+k4qv&1RW)aIy>iG*X$SHVuc*yq*=m`k(rG5nOKfqu>S_hxRjC(W;_Dt6U@LnS!&-Q5$ z@Nh=Ks(ytsBAB`16LGWW7~cr^#6g&1-^|Wya&AlXA~QU9ohYQIoY$w-`6UcZlrm~7 z9TXz(d?*m?ftAB8S76*2&2WOn>)D!h{;L7#GCDq^BRf^lKTvuQM--H{*OSf?@Vz4B z=?5QRsTr=OPTq3g0xNG!4jHdw}0W7zleYjuWN&gsFQ z$`1yZzqc;mNoG?S&K83ao;60Q;zeD+ghitO(lskGN^?{zqdSCv8?-)Z{@&XqlN%$WG5O+UpQXe041STZhTQ6s6+us$O~2LxtOH(xZ3_hK+0Dd$ z&G_vliZd<4!j$*vQJ4}wCQ5i1P@Sc&QjCa)v(A=`w9!xVFkr@Rj-#6+%_Io=YzC*Ol zH*(cZ2Wj|L4`0QSow)e0bF}`9=)-bX4tq}RZcVuZBmAm<{PsXxnp7^c-E!57?9Nv1 zvnl+@Z_b$2V*k`5(jD^z$30Vz8X@f9q97&_Qn!3-wrF(cc|sgdj3oiJ_Z9Fg{&ulI`O-qx*k58cKJw-9u z`Q+T*TNrLQpecOdF?NAM|83r;cE*fKm```~d~V(EnRwk394L5|L(F*($7(FmUkJ}8 zyx6Q(28zA%+YdT#zfpQe7dYjwZd4!V%sBKXZBw>Y#MPwYOsB#fY(zv-8$5Y=GfZP8^$`D0IfJEsS$btmyJVJ?+ zox4?1$493aifz&`oS3aHA=-*89j7QDz3?w!6DXx~`jETz3~=Wsg)HK(hJUXvHuEtv z+{eL9CUEZ8)S9S)s*z8D_-2-+RR|^E<5K=r6L2KBJLXXW-QiVE>aHtqruJ;p$L=&g zzAuKeoP1RpuHP~7Zn+BfeZ-LiH~)fGqG(f-*oKmfaw95Vzp-q+!_J^Ugk{sr;R0A& zeG@MaehT*<{VPo%hpKUGVpsG`b&KYSy~Z6Th{VzPcK3w2c%}sERum|843h0@IaC-u zevw9|*W8*YxCs=1C2`xYh^PSeRNUrID3=Jq&Wm3vOJold%k%cuTHUBM{&Z7u4S}*- zxP$Ob8<&rSdc$chVBW2sATv__fhM5Hq`KJmks<9N>XM!2=b_Q9L7@l1Kdn-+pM91Z z%IXq7ld>)?Zn{%=Jm zleE3)zYK1zOGqt`H&+SnauJe8$21Sq?0mWV4M{_2ziVAe<1%83shWkMk zaKtzDEeYmInXIj+C~9}=gAd^g3o*sa@FNY*NlY0vo+zI!&vkMAzJbrlN4X4U`9>j} zK9u|Mde&Sr0peKDDbJt9B56q#JYt!vuOS!Y7m#XR-3!3C?*^HWQ8WM9u@0I>3vwY` zTSGup9@V{D;}cR*If!=;i>8n|#*I#!Hg*rdw7R0^W|=Pa-f~~}e#l#QeRdRlTs4J8 zeA3I)=qtrpR7uLAe8rure>~??SR6*oi{i(WReNEs648UE@>kWQ+$zSeUF{X%tP&68 zJ)D@uDrY}=V#J4 zYJZ}+dZ=))-<=wL>PGKvLRaQ2@-2xyuZziG2#ivvuwt zeoEn>#NF!F-XUS#&a5YcE(c4>rg^*v@bM3c@)Xt9Zl@mGhCA%X#fA^v1VjrR!Z*Dc z@n2fC)AscNau$a(zkPjILi~hP5_>@UNJ3D6DMh8Er$hHs*Lu6{S9^eF5;jp$t@#&7 z+}CxV*Sng0by-nSwuL6ZZ@VC3d@CMMwm)K+@S&3_r3@uRt@k0%;2w4x)apSySZ6{` z))Kaw74DOxgrVLM6|iL*baSgkApJUiyE9pBwve{9-C50SJ$J%Ci&E_2b^8wXbeZl* zCxp;osZ-o_nQ;&<)|*)&9cZo{3!jFn)MBL|MW^O+-uOcX#hL&55-!3!}+xSx1{RaBn81({ydf%b`QjO`|_(4sD^7gGi=onY}e3I6Db<)k? z9?#17HPWEfg5X$+CvVD7=jO1%ZYsdd@zulojxCixrMk{Qs$oUi`{BPJarlYedqt;C zDEnfq-XK(-+4OE#m-5zm&&EG2HAHg#@l|ARbwOUY#p_ds)9TP^F6%}-IZ*VIrhV@; zPw$l{vvF6ZMawzW>Q4=<9n_d`+^ zQ^vUNN|?UVEdO>&@pwQ`M`6f$Az0klTR?Wfo)(dKzm&(@rFD&=a#myoClzLIgntMI`@i;?9O z7_&(9W8Nt47E1sxQs-i4lf<2wANNtykzzjKOg-6DO=m>Dr#N1mTr=}R3Y4`8!!4+* zUft4>_V5{7*N(ldzHqTOQ@MhkF&sjhSN|#SM)pKa!1lrK!*P0A(at&QY2xkvBJr_IxdJy8!!F_p2up3%HZMo6`tz=mN$_g=%H8`5P6tq)VLRFREpcnBIc$N!D#@I5=XOSGXiDDY)a*VY zr~P>3eV?`tXefk& z;(G;$mDPH#*9${1e)q^Q==AvlqRE>^riFLZbR8ZyjT`7G@_pOZhYmFvGIg^jN3+a5 z;0))PJHz4`G8%2J3>FRDaTv;Q%}AY!YyA^duMl)wCfau+wjd{p|4L7hYCZ|=s>5H& z>ua*w6u5s9d0cF%(Qk^unMhZ0;vGpy|I(uUinG-h1eX@RVu72^Vc(CWr35yu>5Im4 z92}yuW_?T6Z@-H8x6%533fLc%n+Qapy4`2^| zZ+Ti1Mhi4$z}goHledblMc0Clh3h zIHk7*8^h?dYxTzEj-Mz0qSuz|;k#0*cbL3W%+jOZckyZ32E&~z?A$%X&G#r++aKiPQ4M&*2?ix$G9P22 zRz&4us$s70~GA!0pxVs>rt^4DG zFWl8Rz4N)A}SPA0-qwzEpV zP5YWc#`r;p9G`Ecgo=+<)^lP>_D8|R-Ucqo-h1^HjnP66Hz)k9KQ1S`>w2EGq~3Rr z&4Dj0c?0=ltx}VnGQ473ss1WUKO?RuG0MeqG$?oednyejXq)xUMyd$XP||?` zTcu0GTNDdY$w=1Z&8|FO zR*Ye2FbLWkZX08A5SRV%$=@qs2{EzJ^PUWda&GC;+XpO0GjAqtgy=EmD;DPDT{G6$ z-iSO~3qZ&3b_9F^6s#11l!I71x=Ds&ULI7?tsXsAqz&KsNM@p_=&Re}Gy^$b$Bz&c z#WT-@dZ9_=;6ra`2v*7PjRG*N2Y3W7HM~ zG^V@#SlTv%7|MG*UA!@0Owpn0~CatuUy`;r0dT^)kJm#qVxHt0f^#Q#td zH8<@)*XOzQ;0NM$*eLR;@J9KDz<1#2fR!mnlfnXfu7zd)jv!HWdE5iH|I{;G+&BAeM^%>=BgS&1+0ACY* zlZtHHH1s|7GRIc^lmO0D2i~b2go8KXYSO zJQ}|zei>~J64jU1 z`wt_z#~L`67#HV-4LjJ5?WeLmNhF9^WAl1lr>Vrycqif!6=&Lz?nCyDj<+$roR z(*)(I@}llIl|BDcJ3MmQej`duc{M#gUp^&rax`yaw5j+FpAw}sIQDN2)QSy^J0z{b zujJ0>%TxVl&%9hjqQeyQ?MMlzE&=~iy1QTh^PhJ(sfg}g_b?m8Y*)zmzPza%Ts>+S zHMe5L6K$4ipRy;RH%=Ucn%Ii}LJ}cOHexz#k~bD|Fiak49_O>)9*{tELFIgBb~0rr ztMnPjyOHNC46?r<+8@n_hrTpWT9uQl90W=WjIn@OU`lZcd(cY?O}piJjSF<1C46OxZrFsCKMtdoGrT z>INF4HOFE_6i(Bep0k@P3ZdEIQ`0m|(~?e3Y|QGUG^nJ%K=%E1$|ba}VXtdOJN*b3 zkjfZcj8{{6+PD|c!CS^QNfPR_`@=u?i!k4ihCE$E)J+hB}B=caFL zu~?i#HoHbx0>ydUwu`e%w>7QZWmC1(>o zC;CO@wOY&{pQU;}$FU8K=px3W&IUohNrS!E8LN1Fb+gzXsB`d(v;TXDXXEFTan?rI zAdyYvCCvpqxd+b6( zf*W_=%CS#UxFdn^t4Pi2ussU5K)~@{t&x9gcg*_%*;#NPsTjmNcb4KuXXKk(OauN4 zNxE>PSq?s8l~&@K5g?+Z?#(Qk{pj%13BIfA$mXJy2UA>Bmc-W;E>$z#jL2^LF`t-7 z*e$Gh%8cQqZ#bdOSfxVta|%;>O}E17AaO3gXYz;_Pl-iRiro@5(sfKVZB%oEImF*# z%R94}d@n+2hOi-PFz;)wU|{kg9%VIglfJ%qZfLdG6baqkY`6cBLs1T|(eHw{YP!#iEcZJWVGqOB-| zrq~4vbPCft~UK)PoVIKTAR*QE1m;$~$uQWvhIGHTe1ek^V z0&86262Oy9iv2AJh9Z&#-l~!Wp0c&(5gU^*yeSAim$vA`p`LKSgic9Kf48N4h^8Eo z;1-o-trkSZr9*Tr!3J9l9xPqA>ncgDOYLG(RwF^hf&`~%me)9GKWu+d^v~Zv zU(1I)RwRB-!RYJC$^RKNvOgf&GMG%;Fzf)z&y>=WLY+%D7>MWDnAEJcP9!l;h01<6 zRky6>uR@agSFzx|`yefbe~y>Ddv<&0Ir^jf+qYCdAB5-QBa#7KzR=?iR0Xs30nBc_ zy2s8a6*2Rve^?7JuI3 z4*gtS9ERyOn*2w|ch$}b9Y6T2j8IqIw6GfVLqpnKFsMGq2(fdx7oFs8Pn$47N8_?I ztk!~#h7Lc*eD>VJZY|jNGAh#Ra8b?3P+IX$q0BPO_Vg&FNisNOcB}t0QaMv$O#nX! z15$MC?cD4hHRj$xR%TSS3xRzdy6$>KezZIWIeLHDnArFO>def#jQAU?d2zghKa4Fu z_(9^fE}XJD2=C_E73kCAc_dXDg-b_dOEszQjm2Zc(r@7Oqo-aNye7ToiuT}s_y?oY zB{4Tw(#Z%(%Nx0zkkaQKS(lygNWed;7&DPnFd#9I<+M;T*F&`T^M+Kd_InzSbowcr zE|DS${ZqNu^=*#`MEgN-K)v3fd{ApBSu?g$#ufbwwYrA3oTvifv$0PY$aopFBHWOa zEI`DH8B=X?EQc%JWxRiEEHdpJR`ED&6h6EehjwyQ>Jf1DEkO)JUph$0-uaP#A!(x< zdb;NEnW{bcTiwmyoEK=mu^Z?;PvU%PP1}-=!*HlZNjd#^#nBG=ma4)VrWjT5IimN6 zjp6(z!)(AWuL{VnK%3y7L4i+`y}N$BS9kU9bCx$_3NcA;3PY3!9QFrRPLCrOu5&FJ zO-0OTo++Yd>y=Ck5BGC(bKz^a6ZBE~xMU>pg^-zwapZ^a4wLnV0 z#r3QHi1vvF^?jVDX?31Rld_Gm!lhEuDW0~FORu?^n=W5TO}3Cm(FcnJ@vc-Op3Yu| zw8uc?TEYue*%uu|mUc%LMFlxHV$8VG<4BCPl8~G$K06hgDT#Df3WiY$$_Cu{g0oA$l0@YqB5bI*M*vuCV`tAFom78kj+)pF{OqH0>l zYjucTKO*Gap6bNzZl$?DB-J$%@bu9)7{C%APh5^)Xiw@v7enMYuO@FO81$A?B2bbU3(4)iSH#4n@F}R z97Mh!kjCZ3+SzOtF)~8@)q8lvFepSjS9Pk^ zw^69yzCH%MK89Nk^UkX;^2{?&i!;BAfB*4ayxs2Awk6k`MKFk8&NmuE!sRD_PeoGSP6hq&vPck$HLWAp^n9XlknP{E;1S{9c2ijz<; z4*FQA>-iY+_(_(aQ{Cd80)qr<-cF7l+d)&Ph-Ir*QSGvV&&QYqB18RMG#uE@YcD>_ zb5B0Zo&RwwkGy$+Hf0c1*%B~I^)&s7L}bvMZlq^qVrFZ+t>eEGlo2(C2c$k883YaN zcC?-McJYKfp~?3mj0pj*b~guAR^9 z+%b+FZ^hfyM2`eoo|Es2jGy7@r=Q}EFe)%X$BiF-N2%P2!~#MiZ_n9F$D%i79$L`pJdx_p63~<)8h}_#jUqJ%Fa%&_8JMq zD5>p^L(;fN#7lo?JDoie9ID;mq|K_X>f!1H(dUsN=`$6qM#b?ZgS1ceov3v{ZSSnU zOQ0K^G-2iKYhvHqs_&lWktbhd%kJY0j0VKXkI*Cf)G`o5L2VxC;%ocPHqbOI1OhKU z(FJpy1BW6DQl8N)#6d=s(lu4~WF6I^V*;VTnD)*$wKQKnI~GtYPXbCGBlz51oH;7~ zW!Elt>_5ht!4L^)$)qCoqJIqkz#vDD?BUJ#_S0s{q%_V)SC1cGa|7*zVr`mt@!~u0 zvFB(fF*%jwN4hxPC&X1WR$C^m;|mDsdGVR1j7ruDv7cu>$cxTMw0R9Ar#XqYeS(!6V#|X{&r|^D$f0spg^<<;j+}9ejgsTyTGb@A+R-v7 zwowI0N>>y)^mLryoyYIz{->Ve)g7mZt6R_I3koHWNv6DZHnllHPQLpL&%g2x2by|O zj|XaOAnHV!RYf$oqJ!_ z{P;6Z{+fGlyOoDt+CxXkfJuTzwMhy_3rWct6lbRqW7RzEhd^-(@%JZB(i$nCdSO1v z;yeAqM}lIr6VozD_PcR=AuctAM61+i)Q{CwOo1ziyI1jsXp<(tZfe55Ph59O5TT%c zh;JPo75~}W%Hi#=^Wt;Q2CB{lj*HlMD}yJF(kKBIz9BsBKH3`&vHdmGKacU?owsw(W3O_kYZ$+j9}FP(stLP|5^ka$tkD>Xi1gkzZHnwrm$-v-5F`-cc5XOkTl(Z;pe;UYcNA?1yr zwjNOv028k@k_>nTI_c=_)9T|Eo;=Wel&!D5z|&7X$>R^+#V>#HFk4$aVsE1S@6$rt zRA%?Sla$VwMRjojg@xtRR1}kH?qTn)eVkD5c$>7-&X*lZDH5k&%H=h&v=2qd$jXy8 z7m#Lg(>0`K+QdHD;>jwhr7|yGyuKY*axB47>76(+!d3a0hfZ_iR4aoqMa-R1Ozc1# z$4;DJ$dXBUPQv(xJSsr5Vj1h@O!o*_Vkn%mo;l`2JofHcEm%;7M;YsIz(VefWz^?- zIk97_kOwP{;yJ9Uut^ZOkH*1KoS8)=+X8gCecF0xYuHO){~&Jl@U;vi^_*c%Wezb0 z8!5?2#F+yOs*P@u;t8{n@8u{53{2^k@8vd zC`&QW*VxK{FN8BKi=YV^vBwuM zXU%LP2cKZ;*)ZYwZ0hFCqIB#Ouf2N+Z%jHB1zC)G`WO)7t_HVpw2#(aFQ!-*#nrV` z*VZw!x`cS6a!3J!W1}*FK4jNXWuUDYOq(w{?y`wNkhW#cX4%?W@_Yw*;>A5QceTkN zp3cmi2*+F9B4aByaaP8W4jOtwxN@qPvve8`PY)(nDfQD!Ns9Edcjqn|JvIuslHSl5 zBc4G9x;yFY9TGVXisR3sB0o)Y7(-)97D61n;yn6BFv+!QYio#eA7{sjF3qq-o!NO~ z5EjRqm{G>;nWgy8>|jqrk2shM9Nw1zDj0NRmQqz!$*cv-s7emtmH8Y#vFJQq$83 zG#+GcbCB%HI?D4*47asw6PKms`J`IPtuzJ8P6+q;CFv%HsxjZ`*E8 zwvOQ{t)aTCn5sD|Sd<$?h5#9{e%kwlH-@~#WzVD}afoAWqY?syQsG&BfezhJ6Q4f5dAiByjK#W6i3jsva6lKQaJA0CT zV*xeOibzT{V~NjT!G;agI$C-Ag?BmC6T{5S8%a3(EZa_v5{^lsP|3#7%#QtixT>d- zmoUtk!v|^gCy`T8Bfdu3b@(tX!v?amvoSL!zS*z69>x(KqOI30G9Do)yrpth4X)u3 zF`3!q=H-xLa?|aWwrBxQ45`KS%qUI7=dntllPHmbhrtn%lQWB~6o>XKoKFJ47-I;} z@F2bY9!$w4VrR05ONb@0bOsCRr&EzQz|Ob#(JayLMX{-j;+^7uv+5QwGjogsZ@tP} zyN+_=WIJOb*Su5{y^Y6c@>)e-E6BCR;7CXzBR59^#WCCxJq5!O=$T?kEvluqIE6^i zPF6+|X3@hwcZlS?GODV}shF{trKNH74Eag2hUj%m-w9WU7{icQ$%e(b_(w-M_U7xH z_5`)bjhKW~GF(acyu)|`MqeXR;ixkg&7(TY$gy|ckzg|{X)`E^ z9pd28Q}lZR5{jvb3>7qZF*-6R&PviAZyJ?&!)`TW7>#m66$F1;wK(@4!o3HZs1p)Y zlb=auMkg-As%F6X1}m?YEXrbR3~hP98o%_oxL+f{P5x5T}owrnP54 z0tpkz;zV*Y)1~Z8GU6mK>*=OP0>p@#of;X#=925CXNX~mBO(D*qk1vz$0&w@Ansuc zGcH+zW6u`$^#!ybRi#*C5=cmZwgcNa)}$h{L{eNajI_7V(%Ow%WR#GRLyp$oEOMP@ z2Ku5eK{q92kYViO(1}LeUWsHTAOqiQjUzeDLGO|69PgGZSsfC@#$oI}#r_lR^!E)A zj7=q{sDSLWRI;VbNroZLwDx0+mmp~F94cfWn8E=q5KWNax2L;HoQzM}`azA28e^w3 z1()<^Tv7_@Vo2jW`LNuB+_y+ zNQ{XmB{h|pU=Ig(@8H0x4o3W9NGuLqBKwR?2mT%jWV>29ed;ugVgNFy&7?db!k7d# z5rY|fLMd}*q|zbI%M+8&v{|*J`Fa^tTSJ+WDHfuTo$RHt@eEz%$PHsl5DZnP8p-E2iPhBUqkmGzQJL}3|8W^^2JA_k>YP= z>lU#?ErSdXy9suRuI6QvlT}D&vYFA-+j-`#z4VF?PmM z$r0NX8<$A3@CsL4fTrCq@SClt>Gc?dt5h*_o&;Y`ixv!q&GBT!jB>iEU4j=Yx{as@?t82+~Imyb( zAuGv>r>~u}o&AjZ%_L<=;FOu9-G%9tfV88rfzyqhANpc?gF)Rf@zUGbiPxSha&(a_ zWn{z~wYw$9n!D&}_Yg@;CATzBNPHIA&S7@G@Cw_Hwd0N0apkAuJ^da>+x-$i*ojMw z$2{1?QStNU!~~4KE*cw}==a-+PlzMNKS0x&CR#dr88wQZ&&${3n3W}UPYBZ7CS1tt z!_(DFw*=H>xndKt6#tW8*K>v=Z6n$Zfbdv=Q3)iIipqpnI!R41;qK|6xqCqPTL7y| z|rEi!C?#1)6q!7*=BmiVuiPhoU$|I|1=!_PSGc~w&E)6_v0H4k&shB zmhiOfWE;au-#YwcRn1`5%xM%Ps5{(a7=_PfT8B7vrc?MtNCt3(kmPmdW#Mn!$9sFu zGAbid-OcrS#xNxcH^|Q=TXY61~8G2ajA#Z}Z#ucSbDaHi6UL=XF4dxM?AWj*6N z?s|p8Tk=ZDm3~jpaFGz`u%d^;WmTQBMHWd$H>ZUgMmLnyPW{AC0iodsKlnl9-+p!* zX`+Z?pF}8O{3C<(^z=j@PS(~kUPO>iHz%Z%krJ=%q&k7Iffky3)%{_Cj4%}pxnw}c zo5KV~hv@0;XCx?2JRt@{z=Ov#O2FhGDKQq4f0W^oQN{x5c6NpYiSbyqt;3|KkzP?& zA@$-cVw2Kv8r-z?33-?V^@8J=L>Gy6Ar}3;j0B9@%jQ$#j0_LB@d|M@+2Tl%4o|de zouthybxYu(-fN}q3>j5ml$JqCf*otbFZp`u==W%M2tOJ!2#j$o`}*HW+sv z(yKOwQM=^Dk(d-Kvgu?kj2si4_Tf>XV>YnX1eL_$uFNlqs-&56w@>FN%j zr;pZdw*+1yhxAn9EHY5TGT0P3lIv=+7>(ZHeLo~1G}wqwO4b5TtGeSYdOh0HL|d;% z`X;(2KO8iWlvhBS!>pB~Zr2BfIyuuhf=va2%J_)RXv=a(2IQLkcvMhfv|tlQ?Mg|K zpd>5yHf%-Ar@Br+ITXlCCx*(t4}kc5Zo9d_!dA;8E$AHCgPA^mB%lH;+6UZ_WP+<FiLwp&t^+sc|a=Px%I;-%YDp!siQUt5}SQ+1fksEE;c);OiG&**B(Iu3Wd~gIqb; z2#t~e(L--fFMUF^jmnp&rje59&^9tNh#Urm!}ThgA-(EMmB2Sa+8UI=c~AmGt8m4E zAx4EPT{MAtsr0>4WGp>#+EIv7db+ zCv}%kWNfmDj3r=KT-g-#(kuGbHQ*;+ar2Y};l}}Om6Uqtx7pW6LwjFzHIe)=iM~4} zV6%+&($%Z(zDm6`J+=^^>>|Y}++GH?+7D!SP|k4&iB-#}ozid8=c*KAV2HNXZakAG zHN>_j<>cXVs4*DA@9yGk*Ra%Ac($}BvoIBhTqmqJbY~a+5`Y>lHe%xwi8cCh4~5aNh4L&Nqbf?%9C5V2emt%pBCT${`aE+;ZJ`2BXKn0^NJ-Mqh82(u`Wwd z2Jw9Y)1Co4-(Kb9CuE`=uzE48GN#d27KnV*fLDe|-KJKCL0b-~oWJCo9EGWes};$V zuj;v{u#}<<*oDxpr|gyX0&O{cdZju$Y{bRb2bMO%ycW&QI<-hM03zDXE5XE~-w^wyO3=U*0-iC#iJwngXe(df-`m zc22cN4o4q=jwYXjrb)M3PNX~q|`JJ1o?BB<((_IXU zjW9cFnOEWAtp^_9aPGDI_v>cR``UBtc8fE!q)=E{L2}<~JpAx)IO(xrRL^5vSZ}$u z+Rad1Q)~Z(9*je+r8g(#G4s+(S(4Dh_Ge$^z19JOQs0k~(ia(%$K(Vi_fJ$57KdunbbYr4yNtZEuvD!Z!pAXdCx(nTiS{83oyKPL-RT*>YxO|jtP``uf zxo7o^mzvrzo3Pt#nm#JOq=LfG_>8qWU3&?$=&RCiwLC0paxS>AjxPwp2EgET?jW$!U}8tm<=)d&spl->uG3{iFIuf{O$(|f>A*Q| ztolG?bzvW9x;*)O<>$}ooRU*iFT&C{>KVi-Q2nRI$oS8RylO+oDI7sArk>5!_`h}_ zTE}R)qCfIEkIDKrfvIC~g10Cr?h+iolQ_A)3hJ8Y^-()C2~j;iU#F?%ep;Ll2!HaE za|*5FtBG*XO6shQTv5})6A$dBfBd+P-v%;JEe;B2uV!g!ine2=xFTVAVY+s|%GRSD z_>u~kw{#tKNj`=HVhSx50{x8~-nNB99i!UDF`s2*s+lLdGnblqHN{A|Ic4jno^AIPv&|6)=R zp9FUywG3QrK=iJnnuV5Qa!9)?A?K=~P%Q~mGsG%jjP5Y1@~HoH=+L1U!e`J}HFE zMMm9px3|#L)D-=+bV@LIe!0ikUwdBueP|t)L2?r$zlz>ky302FY)bl7>5NKB0@T+A~(YzSsiyjQ> z_}nnQEK)uns8t&0`JDW%R+d^`r|a);1u+KErMBb0b$lwQC8ug7#_x(dewm={GP-^H zcI}6neLVM32gEsDlq6CarpaxUk2F@Bk&WX0$FwDQi5V1?6_e@+;2lv9UQf>RUyEpc zRhNC%3Q7LNYE~}FV4$&QJSbFhkpIT@VB#86W%av61e3!_QQaaI&8ed@Hw6M7`ql17 zp8ykmeeRDz#YFY{Q5%nN{^m&3$iYWP0>)+3RCSOx~9&t+gZ!cf9?%Woa zMsZas&WH!ksM?4n+K*paT-bl|QHbii{1y-S!D*iyimYonCEu4?RyuxXn9!Lix;9A< zqo47^>d6-M!(x%(&xCqL8wm#0j_1m#gscX!HbyK#gSMf8-)zJbGGh))aA=SdP1@T> z1-f>Akr90sZM@$n+Y&i2m3ydzpU~c4m{&Xa+xZHEDVFqta!T?N348h&@t-eG5oc3E z8l`pfSTK7Ab%n_UeI5oppJB>a#z;8EMNxGvrSSo}d!ifK{8m~#SsvPf-%b|43n*JL zMISybB(FK6lKD01gxy1osP*L+C8STsBi>K%!?i*80lE+&6tIy~zmO%fatQYJG4!FY zH~Ey9tc%+9FR1qi`G_wV&b@YG$DRY^&sfRw+0~SnS5Q$_N^Y`^G0y<*(eqoKUJTIQ zXI4Cq<@0AzTU9}Mg|xS#oJ>T9*Ghi1Hb&G31s{rzFLIdsw{#G4d%DPpN7Sv#>0_RF zl))G@Cs9x}g9YKZmq`DWS5lUr zj@8#m$6!F)EFvMNf|+v{FsoK^k4nlVJ%$kmhkXP;!aS>8LtPc~Svt3#s!FkOl~s~A z4SS%MPPhMK{MU!WWJ#uC-f9+2OJMNKA=-u~aT@WPrr2b13QMW1pU2ASISh3*a;glj4Uv?=A;=0+nzlFf0%{)FGgmjziBo@zN)q)vRRaJ?cU0BBY==v>W z@t+A52wEIYs%9-F$IwR0fO@Cgr?02l5Y1M*j&H6np!eu$+J{E9RRtFhq;CyY5;Dt~ zJ$D*;PBWf?A$%V-IL4u5Y>i8%eA+CstOIlns&@#hY!msy1bp$rbHB~EFE6BZ+aAvJ zj{KGr6A}o9WNa4I$he-v^lGv7Rn-(F`so=EF0OXA739oZOTBZD=HBQ#xxa`|0ii}~ z%`x$mFT09Oiz~^=%_l!Um#j1=4y)Q@>f%Bq6dcRaBG~l9!h!?ae34X;rb6 z7+&>moB|fFzk+!saj0l;Vz(i+gOAl}!)j4GN0~6Ghy4`+h!!o70<`nT(=Lb_w4JJy z@<};r%UhK`VH4DA5GL*rMf1Kt*i^fHPNbbva{1pHn?TjV4Xl}0L2{fmn)kxY9|1L^ zku&Q`u9^{I+v|JjS8|YmFfpx~6`L=mHX}l8dMOK5u4PGm2}xG9-LDK>$s65OFDj48 z69>_|UaGC*@=%|1bsBH0oUh42?Z_m*&*xSZkaNb%J-6GF919Nja^$TidFrEI=*A$f^07`66DAg%gFWE|bdLG_<%rF5$} zWLu0Ki&^S*u7AdBtm-=6o{8VlUCGY3XhIHZN2>{WobMvl*756(rzu%QvnyFhSr^Je zVdA>#+zaxl9nyTmot$duB(``qbF1>TS1KqS|1u(K>{H0d%3;pB>$!I0VycSsNOw9! zj#gZG^{l$=5*AG_prEjb`X#H_xN()}u2aJKsGQC_1|=iu5BVKEqKvwg?CGmmb@>f^ z=aw~8sB*{qUWbnNLG;I3G?$I**RgElwfx~tOUVg@P%UOS=1exXKl$F+V>E=}| zsZAziieL;|h1Y!1XQRHV5dUGeQ9So@@x|F>=a-2cx>S75bkZzALIxp@rL$PRayheW zipW)Zk&~&tD(V8NFco674JI48b1&nDOBPX5RG@K|e94>aFh_0rgfCEbP5BD(CFlK1 z6cfHp^F1n2xfc0jve>ZMtmD2Z>i1N2)cK*IP7c2D1dqP5jfQ@;0g?*hCKoJ)jQh4| z+3#C=|7e$z&l))tYUmrHR)6*VuO9cu=hLFlcATF`SMnI|1UX7< zN*0SR{|0NS6C^Z=?glwIc%8zf-q(4P+GC9&HpX_Y?28IY*RAp7R4roTr5jndYA%H- zv51x{=|@jd(p3F3u2&l8k>lzUo07wV^;fZ?Hg&x3)i@ZJliK~(7NNgkKU=pRq}}6J z^EcyZB6}%wvP36zVdB{P`$zEx6VBXeEM2jbIn&E2EKu=NJ~^og(N{re^)ykn_8VNg zC=ZLo4pE((awUyZM#rBT!{@FzUWbWt#>eKltV$oFV^7mHrBCB2pB362!kzmMlV3dx z>;7NyqX*t#@7{eJI@L_S_u{%csGtJE_`1uuBIO`|`?LFbbIW#i@7~Rk7LOQnD_OOR zSvt3l>dFd|EPgCWIpm3>9`kqz+S4g5DW8RSON#o*7F zUQ1^-tuIV!$#iPei`a8BDW6tH zc~K6rz5xb2UhVxpj^s=#>gO}Ps+7`#G-ASIxQBhjWS28z=4|bS-FZ$62D_8o> z4?!77F-ani+L_eVR8v`!iNg?Jc*u)C7$PROmijyy$m!)wudSBgyOgZhVcPq=m_&}1 zbLUg&u#!J}HnnBNWG7qk^>pA4it>w5NGYmg=B(LNmlaZ&6_0OVF#4_^shN67x!IXV zbxAJ%j-wnr+o#p|Lm_PpS~93xTtRHZyZrjjM|pYM9vWk&bImn#v79=K ztC%~jl#=2iin46vu zBZu0WLXwR^?R}LY;whRjhx*z|N=r&8tEix~FbA8riLN07vB~*NU$ls6B}EjMmQh(* zMNVP_&p;<`pMkW}8O)qHgDTOz{0s-)zClLDL%i}p@hN&` z%bd+M*Dex~g(*xNV)xtoI6J7`Lv(T3KOLVB3??Vl*WJL{q!AAF#W1gMgf|~~mo`N{ z#d#-Ym69Jf!k!oI;lUTSvhTnV8ru5t34th?zn)dIis{+%G*3VI2B+*ZS+t}GZ*K#g z{SH=q?faCCZsD=p@8^yE{W#`rW?7ksGyBid=No4*`g4R|JV=+QcSYt@mDBs`&w1eG zqx4zISh1>tk%L<}=C+VtP(e1Wy!p(7Jn_nQ_8mG(Q|AyLw|K)~v6C}xG1JE0<)3eT zly|qi$L<41wL1=ql)4IQsVXTXCntl_y6IF^6q6Ei)8`(>A67x1m4dpZ%$`;*J}95e zWE-QMecFrGvr4KdOt)yyv8I*QQ#nai~lOkiDj_0S9^!65{SAhRylVyv#atcEUTfeJd<$CLALL2C7=RB zt#zLq+M^H&Wvu!7*H~cO!{hfpz%#FJW1rM1XpYC?Zlib9PF9)lhuJfz5I5@64$r@FM5tdtl61KoJS4(T6hM{yzfg}Id1)=-q0jKwE@V?_Lh zxYUHqBC4m)Vp?UHl%0xcbVPiLPm_lVRLr?`tejIvSy>51g$20iro|m0y=F1X=T2i< zT^%lyn_yfXW!XuDyo2-%jbV+ABd=m6_0#L9D$OP(#>j~DoqErp7!+IuBD?8Q-*VxV zRnw?T^Rj>2K`HyonV-^QFqEpjVAC%>i9&g4wG{mrQi>ftO zv931E-j^QXi5K2t`+Gatf4WOsc@|eNlLfPCm@#(=#ql0I=2VIcW&GJZG;|J&8Mly_ zUc`(=3#iffUpDb!Uvy(fTP$h$WfbSQaOIU#Q&S^4lZZjarh7!K&@+=Ral`cKGTs$W z&U7$3;1+He)Ohlz#knP;JNF%;uzoSQp5456#)s7$eIJW@`1gx=`~A0p77*5~=aSq( zUfp?8d-+EDKsaOI~QQYEuoH0tX?KtD?1cy60Ed=D_`cN(9NSyag{$x=H_x#6ew4Zw)ih6FY zglTiivATP4wfmOc}dExV(rFF zOe@YJB_)}%+A5r5{hVp*#;2CUO6}~a1x%BH>F+%D2?N4(YUWju=4s*Jz6J*H(%v*i z{-Whng^%&x(RPw*S8(+ut8gXQak*U7&6|s(>jVd-PR^_fW-pnI#E2y36p>d@LP4sP zQPGQ_YdR~|%)u3Erm3lm!L+&DaMfb6e7&5N-;R=HTy@2Aa#EeRQVN*AVG|2;q2b_G z&JHC|zv6l>Un9Y)C6a;3!Z_4IQ@aGX;ygoMpEyb~}A^fIPO3HJwyBkHPvsiK2Y6`m96pK@z zL85y1mPRe>j3ky^2Uh6CVRLp`0aw*NnJ!wj5}d zz-IiNz2N|3J}ae5ui?h)Hc*plBvy1Ld-`G)x<)v9qJb_?ki?>yEL&JlL1r3Rd3n^- zRblHmOJi?{wDLOYs*6cah!sCqAilhmytn`Zt)29ZsCR9Kux3;;uR;RCmWhBcB5qXz zo$7^b-nfSB)CA!?$<)r9N6Nri4m9^;usWz+wu#GD%q20_iYq;voQzn8Pw(Ts1D_=z zRCnL4B;+h*^M+K8J$MJNoKiua_&JZ8p7vIHMlBlGSby0nYKzlJic2DQ=4__LhiGeP zq{o}eWqn%$;!_Y4w*(!g48w%4C1mYSiX8KwWWEu zgjc3z<&YE8&+aV;Xt}7CjH#tdo?D+r-`SJ6Bf^<%BQy$+Qh|;kxq#^_FX56| z#abUECM99@ws5+8l%$e5%%4_Der^^Hg9J<>~0ywo>s<^%dTWmribH)nusl)!O~^Rs4C1NJv)oC z!fcG{CGcG%GPbIOd!%D>x6s);q%9Lw?-f+5n&M05vAC{;!jf_=aP>wUq)H#!M_br^ zvY)t=QkGnD8Ovto5f_s{PDLf9X>klUo~0}7plbP5T(!EM!h8ur(~2Z06n!)g(A?aG zExU%5t5;KzpDElhnabK~;mLh8wDm@L@~2dbb4x~5ST3dsmk4y_ie)TYJe%smbYd=A zG9<(@v4D9C7PCw`dD+sXRA(3o`@I}~?ic+0?q9R(cr)9c_!)oyPe0}t55L0U7K!GS z5stNE@O87}>AU&qtxs}%)Imm8CU&Ef+BH`(C#i!spSp`*{py!IyvxjzE0>DVuxWR_ z)U$qRdBqs_J;Xo!@LzdwOApC4GbxV^iUL8b81wdBFLCSN{Ug74=@bb?<)kMj;>?`J zf`xVX4?V>lxBilQUO0-Wa5}T9G8sAWDv#WA8!v1>!O?Bca{JHznZNtj+jwHjN&FxC zETPCD97pYfY1ob*_}*{`v3u;eR~B zzL8Yw>Ps;NtduRghE)}?>+zrQAHTeVr}sywU$uae6bHr++YRm0!eEjCECE~>q~@h# zwq&vNmTxoN{R(%9jDPW~+j+Jjm#e<9oDA)n>UkkEo{nQY`LloGSHIrQkh4?*uzV5> z(HEzxicQo_&2*{n;joSJsGQRb0UOZ}L_L_MVCB3(gBQ0Ls(x=gIfePeThy+GpNj;)a8S#7?XmGBBqWfT zkxZO1z+nFXeXR{be8Qv@6q4kKBQ-mhoP;r2P6$~SXPi{Ngym&cj=c32hgy2ISFS`i zg@~4`L&t>(huV4T-sd>3mJy8~(;((njZ39J=J*WC>lcepUBbdy)nq$ku_U;#C4(>Q zA){zI3)XF7)pRQsi^{cH=3(tlgxaCp=FFpZ_7YaDT+ICXaxxNPrs~iKLIp!+V$#c4uvqNX z@)azaqn@!EPZj?Yn_{5*(Cggww?E{E_wB@5Tti`+6Jscd%~ih3wD~XqK)lxXKO}NLwH@NqwKjFTYPhl&mqbfHAyWzw9tqNq5nS1p&n9Uv@zwcIl z`O9DO=%HjbePac=(pY;^HEXZC6!Y6Z=7)d(kNo4W9^lpELd?~=>CXyPSE*N0sEhV9 zYIoG};~IpB8&jFSemygVhrRgkf6w3lar+-K0U^KtIJ?PvV* znX_cfnMb{FWt&taZT@w9qk4pw?)w@4^3VUwKmX__-2ZMj1V%Xi+|T&&FYjY_;}Az) z`nmY}f8bwkf1Dks28c_{WBP)nr*@Ea7zGsvC(spzd<;1N?s00kseMRZl<{}NPK1jhDJi2``CBZMDdIY;tf`usTpKBLo^*ZN{=x|#_K|g>|MP5>!0(p zyPxC8h?8k^>L_seX+8Wl@13<$Sig#OYu2z~X+1gViQ0{(zFkl7i+}qOFC6jEwc}xa z^rL^~pMLyr-0_y%9;2fp1Z`H5tO+D0 z6^T-qaHJKne8ozp6{cadn{i37m@L7U_Dq`?V71;@)mK~luDs93LIn+}lodMZ>T1?V z%oIqQ&GtAPj(EbO{X$}_n8lz*j1Dnk*(5q0B&BCFbM9hh6sBTyI7my3C)ujxC3WfD z&!dmM#i>Crq26P>{pvd$=?iGj*!YKgIrQe!92|+xst)@7#5rP!G31h+oi2tULSFf7 z3Dy^p>j)8uPo^N=h7|p|Ks_BBk)SX-bMGe-JA61^D}lL?f}9jWW+Nrl^H{cc0h#tOf(a=UI4qb|7kfK7 zxb1D;*we^}r-Ng=x3lMT7oPDQa1}Z6j`|oF^ON9o5pR+PPgLz9gDp`A_>5(&SiY1M z^%;yd9cK6OHoE$|IeoGPe|#Eg37Hh+=Hc+Rar8(7ZbvptmQN$0>nM901~FPCS#wynZXL_#){<_w6C9DiFRzvb zOXjnGqJf~;*Eq`7tYzb(a$JU1UU=vYT876kjRn+(q=X`$#J21B zFN5^I$>E}E#X45cv2*H`S2@@vzS9uG-Fa49DyE*vub(rYRU6i`WJWnDw&-*D9}4AC z#3xu1CCC)MQdw0+c~KrIvC(9s#meA`9c?Y5`5OhTO|mcL0-}cw!GDVS$lTMC_L!5u&G*gg;&H0Cox&DXnuDb zB0IHVV91$8PPU1@lgDXl3t+Wd@EqF7{((da3gg74i!ToZIQ90E?CF&NQe-eB+`}&1 zC0@xQ;G_Nc9uA&5MQi&MOV-xi&{0si}#?Bs!^?v4FWX#l*#0h)akk zEvb;)tQfkRPt)5yq{&cwhD|y5iwtT4+bRKYeqJV4-w-3CeRw=07?Lu{&5p-nvQvTviqA!5qvRTu@g!M^?#R!m+@nX%Asp)B;JZf%7gUoUlR$EM z9*O>D4jybKC>+7%O2Oew5FR#%1@%=V#aW3FK9?n&b@a?0p1%K=JiV(EvuhS>FT0%0 zmo1_w*&%fvf9_M%Ud0cJTWEEb3PfyiBoyWn*Sn8hhexo84H#`{;!K;D*o;(?9dc4& zgtntQc;%f#bPe{(_g(BbaEh*A4p|vV80@iB)Xrh$vZZ9lihoEm5L_t)bjn0tQ&4H)?gTMXZ5BcHW{|mQ1cL0j!u(&>t7I$(%s4ah zC@d+Xw4{_$r<;9m?58CXKy4wern5pr9)`pqSS%8RAAgM}AAEy`QE?WkJS~_LqM^`R7Ocj38k50{2NYktfhxhQE+vp_As+iDZ0Arr`}QXNqbF#5$R*K z6z_dGq>Q1?M)n^$hP8G*mo6xlU@saRsfTf`F^Od66;oPXK~+H>u z#C8ebPKz^=0UYd=Ks$l5Ih$FsY#r-n77^;)&yM5W;)o>hRDohz9z|spl$92d8#~C6 z9Y<+XL9DufUo9E(;S&oJ4z{!Z&6jy|M*{-^t;W$h$)C{J7(TC;QEC5|79wZGVWR!6 z`f#eATkHv>Nj`a2+~60BQnl!q%!k%C1DWN)I#8ASB`Tf8ziB z&EN3DpWee8EhZ}G%%UVklE;#nmX*uE@t63;-~WWij}8kNh+!-ki^uCB#;}luIo;g% zZ-2+X{p>joTJuPk>v)D`JS)A|uCC(?31yG$iIgtBj7wI|!u{6$JoDCZd=gX`!a;hD zyu-u4_y@Ew^N;aVuf3U@E}KJTd8ziSUr~CTD)k(c|1v7BA-UD_hGzM$ z9yd|CJ@J|Fx6zNBDqJ8UKGT(3LXqY(ODIX`Ve9jIX^)ZeBwBU&MCH6N+k7Cl4qj{AA-SM*=S!xX29O-LiRNZKmgq*{XE*1d;0-q(-M=)@5x zeJmBQ$_Sm{D3jZ&zD0SOx?uE?EG<$7m%bQGz2aQoop>g}CXSR7l^?{^ZCKp+Hn2`&llgFAz} zyAN)IOK^ABK?e8W9)i0QTn2Y{JA8Y;`#sS65drsbBqfhO_I*!^@_% z&(CW@YsmE*78w^mr+MR18uNgb%+WA$#oyUeY+NkKZ+M^c(z@j1?_AJot+YRUj)MD1 zLnlkl$A&<%o3XFTp$+vZV``kdprNmXmT>y3+fq?QW#%Zks?1q*0$kHLh+8s!?iYR5 z#4C}RwPY?68d3I(bo6w3i!fyODq(bn-E3{~miT1399Xz@4sn8<)uM03t*L3BFqV;B zyQ)_5D;NkA= zLGw-5A{9JkM*Ck z+Ccead|L};b~NgA@*n_Nd)dN1XqPMpPoeE&lFwaVb zeu4t4Sf+oV7CF$b;|`INB_-j5?3Jo9lC=lAICC&hw?+%g_+K7+gmRx?;I3jFbp#W6 zrg=S0a95a?>O^>ds+h)bK%4}!-tX-l=h;qwGg*|7#u84_mB@#SZz@Juuu>+E6HNWaO$iVxfyCtlNh~Ol}+^eYs>JZ$39^?ab~C zP}n5iaYDs6nt*p|-4$%rxzq-iKe8-2hrCYY#GluRUqT^#r=O?*trNIHdxbd$6Q%U= za4QtX-5)>z=P-JN0wa^9<7Mw3VwIxsVsGw1FefWyMP_FE9;x}sleDP)ar-xA7H$r$ zbEGW`^Ydcbl4$l!s`jU1-wqy0RQiXM~GG9))9exdz0%1+Iz?VMUc`g3zO{C-o&JvLsDED`NGe;YU~z>@(_o zwQO1whNtAt`yC%}B7hWvhY4w_%G`d1P%*AxccNh;ToYGUcw71Tt!Sp<-z?v&L&;kd zDSSSF=nHpO8olCL(H{l7x^3$=S>n1{w^UrOc?NkKRy&`f+d9{E&ottQcvUV{taLp+ z(TZ{DKYdcFc3*b7bPIgZuqP)EFOTdpjl9<~^F&fD#Wi}dmu0;f2k*)dHQ$Un@?AW8 z_>9y?ea%@>ZSMV9l$HgIV~PI>s!7d+ysCDNeJHk-Xq*q_B_Om@Xt6;ByU~yj;y8U$ z`&ROuO3BmIC_K6G(P1!LyL$+SF0DEM&y1l^EP_>{tM6{;u(t= zjc7be)RGSz;G*a5=W(Lkev5qEd_|wN`X`Kg4QpjmRH)}IZG51A4^;@yhJ8_=nKIWo z!iTp=cfEFlDWi6h+Mc?J4QL?T4^9Up#dc5&; zdN9l|W0Dx@H|&wKvyBfC;DFL&6vDk~hOPZ`CC+MUk94Xq0^IQG-@%Q~ zMNdDDIUGVGQ-`F0^&dGM*Eo5_!03hk^}R|2^H20+FZcB2J~kakvP5pr)=^H8p=9#k zw&Mb@3nY0^3ofj_(H)UZ?oCqDXeRP;a{l10iOJ{|K|_O%Rx6sV!XF2T-J_MJ=p@Se zk@;r)l$88wy>QX;)P*)@LEx^fm;afv#*R3A4o$9fSL>Th@ajgBcpz12HPzDT^GArW z)tJj-}(XtN|J)QObII97L1gT$zf1)(*>cr@ax8h!(h^TItb&V zPHXi$ifW1e`IU+BX0nqjW;s@~1m~Z^UlH8$rLY9X!dK8VraG2I21)4_W$e&=G6IZ& z`Wp?$SamFi6r8fr;xfKjkCLu8ap#<}VW9prOHo^b zPV80)S7_WG7{hE^Aq@g-g>#_e6*lxtRKV|;e)uYhj$6Q?J=i<5m*HwcMfe=bolgl< z+SIJmxU}*LJ1Tr6R~t4obt`eEsw%ep%Q08G)EN-i)02>-qM()#vC1vovFP8X&yHBr zI|p7PZxh~GZOc7E+wM1A@WXrj2r)5>=PYYJXAS-Bu><|=`7UFH69;x>?yESEhI7~4FnphYgI z<$!mWD5ar}neDbH#Z%X&5+Q-@{|+>~SQVh0teK=FDx>oLeH2L)>*w`hYJ+W9sxg<9 zF@_3D`E=;Rq2NlAey-89w7X5GL^-VVSt? zrk^C*A9LtM`6fa!56drh4B)gU$`?hrge-_pWus6bgi-aT-2XX=)(^91auFn~&%ttT ztqYgc3qZwfdEM3OyS84OtGE8P=&t>pfe<#}^Yng<5ci&LRROwT7)Uzty7go<(rQsc zJ46i(MfD-{Cu0)v>G~R)Sfk!-fm>5j+9Mu97;5k6Iwo6B%ng)#LAlO-OVZCmJuqUX ztMMUIe08giSA6ftO1~Q-vR$&L3{_K5$P#qZ{*kQbp7vyIlrppZs^!%f;(0Fmjtvz> zYvi8)ggf3BanPuK)!NVHE=amMwSWG70mLnL_Mdp1}$7G?C?c1gI=MR%Gb7jo{$a zfUZ27oh&M$OpwzMK2GfU9P^@`MR6&$2u}O9G*ekmHL5rzHGNsKG z^}_T*6v^}OYnkU9mTtA` z9pG&QptwU`IuhraoC_w&%g~JVF^Ii=3}a@tMvFlF^Et#*Snyp^z;_F?nRrN?sAx`j zh+SoG)L(8>*zi6nV`U4plFVp~fPgVXxmU`s)EX{N)#ZIeC^Mg#!J+k9rrL^;fc?Q~ z(cCrMIc<;bPzv35+Pn&$Xx9yDLSa*fgmOKe0;GeGv8Z?>iV`fXsi&7y5o$yTz8YA-S~sN z=94Tm_Va`5!^ms)XzXA~T?95Nt2o{%%U40kS`aE-_PH|zX8ce@*&Sn>(0NQGHjH+s z)pg7J?p5mv_={<9PJ*A%`pD_aeQj#RcnGwveu8b+B)csZ%Qm192cJD&a1hfC*~P95 z_*N)%Scvb-GTrBlJ-nz{qqmCD68++O;$$)-ZH9*d!zHOzd`#DL%SesE-HcAmv{yiR z7TJ=e3BiTMmfiRt@?vkuc+YjYdFGQ%T8dYsR=4Uhi>S|xcNb2Uy!-w33QB3OmbxU zveu!XE?l9*{oI6E$TheH1mcvs39)GJpWqfSo6=y4B6D?L1nuK@VnGBlfLuRNyo-Yu z>UBtsm@j^Yd`22~s`rh0gTUVR0fec6)W3GWR!^%)OtMDUNp5_01fk2}Z zgrk{|9UT7HI3MwL7Z<3yOJo~vzb(mp)4G56)p{eIHp#lI$I+epi0O5YM@QTt+ut`v zQ|lO7W`kPyI*36ge9fQ8RE;epqmNRT!4mZJC(HnyBnuK_EE8Zny~@p>ilqY(EJ6dA z_|o?-k`xVXH_PcBDCV9W+MP+!5MUB?Um3n7R@VzJ$hvguOT_ogJDdFFh4k5Ja(1C} zE%3xUaU0Kn(uYiUiHxXOmT=ouikQzD|6sS-o9)07Fm zKk6wd_?gR|L`*BX`a+*Yx8)UQrms$ZN||CF7*>`FN_g4b9FJ<4|9QiD%yh;?RA5zKPnQI7@TzA5N0bxj#11j^NfGcsLGWAe z4NgxIIq=tXU#CtX4r{L=DzRVZn4JsNku}j_>b!9Qr2%>y4xyF7*lfd`chUQ+IajCD z#g78Wr3u+SNMj*#T397fB9BDw-07f$n{eOD35Het^cI|JL?09eA{_IL%T(ukac-`u z>F|+b3_fhbsvFKlpBkB4*^h+FHoXBCcfEeUF^5IEgCX-Bkqs`y`Ff2JWD}xd&Xo4P z-gw=5E(j+~p&crvIT(V3764$)s$^JKm?loilBvW3Se;Xjk@dS#PJ9(v=~I6_=sB2W5c!R$9yIhFynUPKD~iviD)=8K<;r z(5Tf`G1baitp`%xynw*|>dMz81Np~lm|dQYyH+}A&wk?~Iz)QW{Di<*`G|h|hIwvA zR?7?$F>kZ*uoN(}Oi>4?zHf+gl$Vq5PokGnT@g=U{RstvS86Y{<^rJK~%n14-795~fj}U#%IQ@;s_Pex|m9!Hi;779VM5=5Zjb;PXO?a;CH*a(F zX*!3qlwQVc<4l#^w;pBs57cf8NT~N|W8>q+>@FT}*G}UL zJ5(!)Vq%gR_4hL6LWoX>8$H-7`3Cx%OFBNbi?|D(>@Y&ph~FljUUUSO_+P2dM26<+ zN$IgeVM;-Z(P!J=Dt~r>;vVsK&uoypuYs7f0U zZ&f__w$>E?h5!5b@39{Zt&~r*ks>u`i=26Din7JHuMGWaf&Cjrq&x9=X0_cYjyC8B zBrAd>i{3t$Hevl;wEhaXJfcEmVpoi%2udOVfkn7qMZ7#E00CU%!L7Ry0d*K711hFkZ37W89VQ*7r!1?+naCP?)3=Q&7f!NSp#o3}Wgowyc zROE0p+CF2{cMhFkKDgL%Y7qE^nE%!rVEeN80t@xB(1`m4?~lg)k*PS6U7A^)JVv#K zabHIY%jB#U0Q`|(QOsOKk*cT%cA-SOB+K|PeyU5;wyE;PUrvD61B5BWPZIvcPa@{W^eQpuDu-B&jxqV@ zh4$4Z0p!aI)cV(Ftn_-2yu@24@Upq0Q$$gHiKT_*RAPGweLy#Ls>xR=Dv2i8*V4)j z$jgqH81V~@OFPA=-S7|ICx_>IDofB~&&zh=A^(neGF;Qfn0Nm-*j!i8cdXUNoh4;Bn|w*lO>sR|d6+z@Qr)-TsM1^ZQ+~gRzV4Ea z+(>h{_!b_$+BrR`z&eM)9q&9eQfVjjlcoqZ8$S6xq1WY_Fot%Y4;QHgOg_YD+Fw@S zUhgqp#ZyN8F54ch(hu&cHS6axc4PmIaE7Wnr{6-xAwh$Dw1K*{;R{llZ4x;RgT)Kd zel_+Pc)xk!!t}RW>wa_Eb3d3(4>Y|GrNn)U?hIb~L;Fyqs!rX3g|kD5o{aes`kqR` z=Ucn`aN+!l;|yAQ8Rx6}@#rgiFr?wV%91NBkPt}REnmF%{t$v9G)XDC$>t{AFT@Kl zMCqVzcbC3%2UlDdh1g+%8k&prJX_s)lT|hg?tmZ<`Ajlza&ia6;F&z^k_uXx1qNoN zjzoU>9a`dCUZvte)eO;v5?!0h?5o)GnGI{Dr2#&WBlDJjujlVN3Y|zJ6|<`}jw_z@ zxSC#unb2JPFm4SI(+}%Xv@-G4C50K4hd3-`NxdTOqse3YSc@g8w%$&1 zcM#S}vAtBJB@K{g@wdM`oru5t4SC$8 zf)xKnh>a*x-J3D}^!x(rkn!+;xl?19pce;6-qMkLAWeuF2|IWWDJ><4DA8B4=Mn$j zb@G%JthXekcP!NYd}YfxG%0jp2WMnOupNta&3p0J*fFRJU7^>awN(y@i3KeMz-+1R zwk&p@zPh%D?L4uMUTUwvg+d5uw~ApZf(dTf_VD453Pwt62I7>oV1}u~&4|5SkpFDK zt+Zg}OafK4e-`qqr67iYmF!>f-B)6ETTqi_V|^+^^J$jWWMB{$|~FhzqPO&6uLF2s}{UxCp$C$a8P+WIs#2 z^h|61W}cd1I+bN|%k!atG;(5x{Zd~(IEvwevT2^Rb1c>+Ln(|qJ_$cE{ zfHAG?A57Zw_`hn#8!mxo0t}z7OkjE0f&Lr8n-E9hJ3636oOlQKKN`qRqchtx6_0V><>P<4^2>jflD+%Jg<8xXu>-HS{MO{2GBMy}k&*wyPLCnJrojG( z>>g!oFOGn7*DT^V>(D1%O6O!oMats;=i=_|W6uAzjfS=gB3Wt5mVaVF&~(3C>(2a- za`OiN|7x!y2gZZB>!n^*n12wP{rB_Tjs+8;?Eh~u=sq=!|K7phI5#q(p2B~-KI{{M#lahd&JAUL(Yt_*ES~kKkZx$nmx`1ufN!y4Et>~kG^}l za_|t$t48~J?M24^_UoItubragB#P6p2$P{=Wf=>_t%kF7J#BimJqkIc4O;$23nJwW zX;KCz-SGZrAemK))NoObh#@SbliXVxcJSUx_Ghu{zY=suuElT za6GmPiT&tT!KTB*0&%<*0H`p85}k#cpZ8l9aB*TC=+h|o+;J=H^&DJb$%+>#mN#L} zn&zWqB_2iKc7H#|+?REaMRjvE!9OmiXUmd53+H?HSNdH4>cp?CJSr~lOB7*`o5?@w zLiFvjUt2>tD>45xR~x`aV5G|%S~U6&{GQa<8@S=|Im-|Wj~j{^4j?jUII0w?*y zO9PUgg)dd8QnS>_(-hwi5SK=#*@Whm2aL%7h;+r0q7PSr`{{9t(zd0stu`BK3or-R z1@Zehe3^eRijb*@i8)tB(Bm|`#id~q$EN$R5~M2@^gtax3M49pTEoU6l9d6b2ULkC z!QfjQw&vSC557q4{`{(hV^b%m7{7jujrfC2XvWyqWoj*PBE^m)B=n_br=77pW5{^2 zmf*#fM;l$=lm2lc#F2FPK*T5wb)~dBsX(<~xgnV~> z)v0J~2o5uB;2L30AJMnRo|<&|krPFW)Z#m2WM*^>V0hW4sF1FVdzAPbvZu7AiAy)#boTv?SZINwq`4o;(D+INit~vig@%6aQ9$3JjJRN0-{m6beJ zu^#W_I(rs8>6(UYw;k)xx;4NOD;xja3N~J>fGnv8xMbD*=PSUA++Ia;3^-jV7j-5! zH@W8U8Ch+2hvXNf2etD~&p+M1b#o#lf-*XVV!u2$wA!ChZp1snv7;F$Lafa$xkOqC z?%H_HR$u(0?so20$DX4&DwZ~n57F>JACs!0uP}_2koP~zozCqoLuTd6fl)y3IG zC*%4?XJylt-cVAhg#vvgfAG{T9~Rd;`WX7<+lg(`hf{Q9%tqjC1t)pWL$%$!eaf`?jKIh zs_^3q9oA$`jb_LA>SD%~H1_K#g7shHME4&Tik-DW%HSl_uI&|}w3wgK!>pn+Bz4P! zA%>0Le?8^nRODhs@tjdVcmVeH_VVkRe?VV|q)@r*6QGV#O~T+R&d#TvT`DmI!h~68 zhto~_pnG@n0{W6R8ur0uO%iC}LAv zIc(mxr)f@A_4D^tY{Xl!!9lnSEx|#gi1oh#0B&y3z!!TX(`AeqLhun1#5F_s$=Zok zWlcgveYw9nuQ+(U)7w2bXijBSz(|<4?PIX{B^18$y@rPSuP1J!rDkyWqDyiyu21fVV%Crr(ukp~m z3;jDn{!gI1`%}#;)F?wQPM=N@FN==75IS|-Us!R2LiR2)VVm1-&bpgJ6v_;WJCm6djYJ~m z5oihdGppR6G0hNNA1i)$&mlLVlR?%*lRL{a*g&)&^RrV$zO#Lz54XexU1^Iv9y&vv z$f~ju_2K>t($uPE5LpXwQbYE}R~YH2q(^CGxII=7KpSq?bbi)MsHo>(;AJ+qYMhc6 zcJ+~H<1B|ZE>tGB8Yle>4&(?Zu8oW}eqJys*f6PesaM!nPTwzzshPWwnyWj3f8ZV* zpoDcBS_H6LOBT)?=eM7HCG)pVXe^)O$v?zPNLd(S`i^^OQXWCTE#xB8u2CV0ua?(B zdmtSb&>bUP>Menm%)Yp^#9H|+=LSQq=B1nLQf+=-+JvUa#_Xl)Qb~p@f5d~!)127D zU31Rm5PI2Z@E5_nmcmldb%EW&qNOL;HRZ+sSXf`lojHk(4bj8t0teM zYYMWFa-ZhaU{jf}U_!+DjD{-7^g4g*c-+(AOZgJVRLEB%P2uI4nZJiS8}Ug~(-|gT zOdek(p)hDCe^_pM64O7PBe);Vv+dL)A_+&&*_XJ=-^ZZq4)OSAU!%<;r_?Uu&5S1O z9M<4{<>PieZ+5rm;hlDKRM1UoU6lvP>7?D(^$hB8yEfyw8Eje7nNQ$cPGGH{npYNC z+vm!9X@Q)^o9V8ZLSuSYOh3U$W~Vf?vFcJs;QMas6c1_1R^ure+hs>B@~WzlZ9RRp zcE-;3znQt6EiEoxYYZ1>suSWI+%!6T6EKj%2V>rCicBZ`rL}AmMk`faF>>B{u)}q8 zt})udKPtp1>fn`j(2!iEHmjhZEDf@!xZ>77u9vt;>(0RE-W^Q330nTMFk{d1WRH;?WS;WmjJ9*0G}_yM*L| zZu9HZd0Ih!mDX!c+5v{gVFn|ekc`Rn(<-zk{Eu^g2$>(L^q&F)z>9Zz&8QFqlCwM?Gpa33GE zsO<-&+BUNb>`UHof{TDrT0f~?MlTH2ms}&tKWk3A^H(#WzD=hwV~?dOB=bMH#(%t4 z+iBz?CTXMlWKo_qgJ!hM(P{Nd$W04B5t)h|SjZIB00zjPBkQ;Y9+cuTle)*c;+$X5s9Nqzrqf`#H90OukC^DY z%*ptUEMzo>UsO|dmC*-;6ds{`s@jz^pc%}QIG>XUZJn3eU05D@j`g43Qd3kUplU@< z-TlCVt+y@&%@mh~z=l)fGw_ZJ#zD!u(*Ox>WUU__$(0)nR@wQ*L2oh3;j*I298PBG zl8(v=@Cmm&^nJ^6?fF z`gFhXg=t)o!UX7{euP$e>AMUZHBD|88r?DIzsrEnX=#itaR?7N{n{5zY~tehzCv5` zepob1WgipiT%SwE$s|<;5-q^$zaGaP$CK!~Gf7$&8i3nX{xKhkz^dzrvC3G{G;?`| z5DDUz;``HWh5G@^#ovOCYOW^tS<(CV%MUG%W218GLZ1`*L1=k~h4S>HTo&rylpN9j za)#b|6wTqiTpBmG)d5|-?9)C-}Ut3&z7G=q~ zC~3b0rNy+|K+;nBP&S6R%zNqkozww##&M+xEfLaq$=~j*@PYumt7pVHqW665<=PM`Ou_c@?b);mJ)!w8F(~Xmir^B@VdaskitAs`5(0D2iPEfGQtM{M<@IPM56xuD z!^8Vh-EKs)9!5Nt79#|8X@ZIGSfVcf#A4Vhtpb#JUz2;%;LsC_6=- zHH@CY4*sNk5>H!Bga(O2gj)#V04Zb&gb_#pz3WO9@%k@tPjLS~@&@ zlj)aD`0(UU>DYE(Ppxz%K@Dhh$yo#fsPWm>8O6; z=-O@%gcZ^iC^gN{&mz7fsD0hK6rtEIM;u1FXV4>drNNcO3LmC%b zC^HBw)#FPkzgo|ErqH2(%2Wj3`U&ey{dYBSIYBTZh>-kCjtY?=8y5R7$rrrP_M zT5`y!k<8T9)q-oQOY=g*2$2n+;ota3!b#{3qtkpZCU>R?FbrT8mheQ_jPRO03Ck zkC^|^Yj4eFeiT_&xtw(u)g+umr1{CkCgYrXHWbc@&n-f|yiK1Tlo#_8#-ljI(FDGt zHJUQuSy3!OnuQJf#CBr7}k`x)!4Q4?b*w z0LyJW>}^;=E$fu_eh(Rps0NP}nP{t8{AMCWcfGBq^8CDMXxNq#VW=i8##^aFT3)m9 zs=>T{Syn{_v%I{#wzk%D-`vtNueEi_bM)Vl3EoIwN=t-p6Ccn~jcz@?lBIqBcgZ$- zn5_B~mZTInE@$mn#?OY*>d?_qw6bRuwbho9+n-|?fI5~!O)|4~o6=Yo$J%~Lo=q|g zDRdj&&Mq07 zsg4O}YS}kYb<&JXW`u>MG9@O-|L77MdH3k=_|h+>e~Zv-m1wN;Z4;Mc9G?-)XNh8A zfMoWttE#=bokepB>F2`cTkB1UhOT!OneWISQQAT}hJ}XxYigs&x*}brM5#Y>ukXIY zD(GuuNrE%Oty?}~WoI8>ZjVo~4MW_iWNg9fsjg8O#a#1wk;D?jsGSbpFlyz`)#uU{9H zaWQCQA=Vj{fe%PxmAIDN+<300mA09fnSZZ$1@i-<2)QX?mW=G|rcoFcOw<1crg~>w zOcI{QOK#gtGcUKOkBCE7|)hYQrsj1=N_Y&Qt1u^fpiS15i2`T-tkbtF%l)t@APh^<9 zZFS+8L4)}s1{Dw`aduoIvUoWeBbw1j6G}5Ibqy{3`)A$))3;@!e@@3nn7N$O2kuM^ zRSUaKP|jo=HttOdu+?5uH;3se(PKF$E%}b+?%)HA6qCAfwM^DK{j~KA$cRX)nB_RJ zx;i+AZtEg+wX20XFqdey?YIoHAve3u$ zv5WLjvtevXWA5sZa22z^`*@v>==e7nk#PFrLr|) zsh?FhqW$WqAN(ojeO>;O^k$4<6kYwCiG!QWYmJ5DNr5}Lmwd%eKS~RGW#cztM^nXk zPFC^=%}R%Rd|(|leyOF^Ek*r%Vnkmsnhi%qKSA#Qh_eu-%-y<5{jnxsXy_i_bva+$GuvK zP_F}{ZQ^*AKP&l4S`bcohXUQ-N6zVPMQTnIetJRfXR3-RQdA=He4buvEfN5`Ic3en z1yWcHW&Uj9fLr?AQQO!ytqTCLcu6AyRm*Ika`vD&rEG3SQ@}DxSy84bVUGNZ6uotC znTTMda*0EtehJv$xmcezHRd8HfeIXRI}COO4S#9XqO&MBNHbO(m3owPRYAt814h0U z_Pj9gkcfzDNGmBaWL&0=k8=-^kU|QAH>8avwYFblo&G?LW+Z8>R+kqhZm0tK?6^5p zw%J#d{;AZQ&N1uZM(bwaZ8Rmzb^%1`;xeH#cKbmE^1)cc3Jamg(&VZ_6CN48QnoFuBNnH;;lOsU2zY6`3j&{OufR9=fw)|QQ@b+tDe)^K< zGqLO5Al$*=^z$bEuF*7n@t=b&kJX1)xHWIljDMuk=gD%~ktn+FWrP3Vzy8tj?xiU} z{=yA9mJzu1S}sxF_;=ZGC7LR6;;N?hO`=fbeX)#50uHUs-=)*E zN?J|$7dS@#!dR7f+lImh@4yG9Oj)1eQyQAuVy=#Vtwi>UAmr#uUqJ}MXX@*s&LHWU z_n4j9N+29PS99F|hBv-wE}`2E;urO36pMdN;Ekw-oOteVt7m!NgW8HD|7S`3pJv+~ be(}GdU+hj|$nTi^>-7MN%8FD7>HGa3$D$@V From 5e2cda1063a89b7bb0f44bc0393129b489b0739a Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:45:06 +0530 Subject: [PATCH 058/958] Add files via upload --- .../images/quarantine-default.PNG | Bin 0 -> 186402 bytes .../images/quarantine-interfaceindex.PNG | Bin 0 -> 79691 bytes 2 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG create mode 100644 windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex.PNG diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG new file mode 100644 index 0000000000000000000000000000000000000000..6c1fb5c0070afea312826ceec8c33831143177f4 GIT binary patch literal 186402 zcmY(q1yq||vo>6%rA3Mqm*Vcht+=}tr$`9yZY}No-0CCSqA+b(Yt5Qo}tUhN~%A5_5%L*34Dw4w}nw`gYWOx za~E|P@n=1ni|_1afcW-biBY}yc{5W`qh^a9s`!7i_FWo5-Mu=PJ5iMJm-QdcVI7O2NPfV|&7 z?~E`VT%9(!-1!i>A1$YIS&l8= z*M9kvfB=!GsOXEAFC(I(H*PQXBqb$3;NteeGk90-W)Q!Bn{@Z|tlVj}eEat7%1KR4 z?eIv`|J{YdMb;u@(tNu#R?BN+R3kZWcz8@>AvadzF4>Mz)WXI+`|x_BRuZ5$T!muGDH^^5+1OG zSm;pmDm!{4L@Z}PYS-)owkrmn!a9#OGxmjG$UCFQv8n;ljO~Dte~9Lsc(|uO89!=! z{UtPht-s*uk-hMjneC^@&Z99dOW{ZS`^w!DnH#~@(Z6h5oyG{Twvu_=>CcF5rW+Oy zpV=esb^p$OfNdw*B6@p!m+|0Sz|sFF>#N@>Ap5D}{|f#e`8U65lsx;ZnSYf*1Q%|i z0c&VzaQ}~X{@ak4nD~Dhe&y@_qqzUf$J7JZ{5$zdEDHE9=`E3am;43WF6&0K&i5I8 z(KkjrPf=+sJhly)?t0L)quMFkK5Lk1qwe9Y(WI^&e=J-;WRGBk^k%D9qrcMkFoG~@ z!w#nKI2-Uo+qZIZfhKF_z_`oQjePsYH_nWVx>sfR2?II@Y#-_D3|g>GZINq-^LJiN zFEQSf964-Lb!b?~uI{FZj`2>4@C?bEx-~X#u?jg^xeVO4Uy91gGB=IuKFO1-J6YTy zb}au{%1waG`2ShUnn?aaXwOIa@GH}{j>k+&ht9r?o8Y$U#G`}8QqeP#yP!$A`jx$T zQH(@6I8o6LX%q&Y8;@GlDMPDK9=hUr)j*y4yj9HCo(J`*UQ|bPZ8y@Ev}Db(0n+c> z^%=*|elIG9@*YS==(+HlH)1=~n|Ks{eJ2FJ+2Lk*?7Q25-*HxVXact$lM{K7m|nT8=ZKI{)kY|nQX<_~KX;J;|-h@D!LVWl$YWgkn$ zCr-8_B2>CJYnIh8VJ}B{-JLpR;i91&Xrb_p*zwUYrFHhxIi_?et7 ztyfG(MxL3jn{i(M`2{Pp*)RNy^qQ_WM@>uyhATOdlVPE@9sM_w_*P>TXAy=ErfWaH zwux<=I88tN)@f0k?|Zy<-N!T$o%*|X;Q?`X;Xpx#bpPutB8ithFkBYh#4=K!$x4kk z0vK_@UTtNVY``+GH&7l#|;ndK9{BkGbxw#<5-~s5gU*$QS_eA(rCd zDjwmvol~rhARfB-VKSf&Biu5S*Rxq(lxH=Zrk|1WSX+3MFTBrEi`;vg+l1X$vVOsm zk0zgUeVVA>Bm3u~hS)Wc3)xw&NnZ+)$|xLOQJIqC&{-}vvBgE$c}vhWgg?*ejAElh zvZmNJ#Zp!KI%Odxkb(6Dg5!1Rv>A2GZ2u36m#DA>l+rNWB^Y)Hx>sq#bSf-f8*6pv zOLsLkcQrG4UAj!pj7)@JWA=$5ZH>|W(UrqZKkd4(G>XOE&fRPyfL=7Ic`g0WPY=K} ztxm}`)}*m-%$I>0gb$Eosx8md;HuZvZ<&hhshWLLegWsV%-9gOfqGr)3gNGqM}2JV z`QEeByOY!zTT$Qb40WqccAbX~8;2D-$rFY7YTE?BhcGygw?=oLPjmW;9aV}M)R`xI z)wuzt(&aDgP_oX4DZz8{=hppfBSttAT-6VFG8rO*jaGl|6OpSn1#rpZgSx&|hrx9B z!=ZYzNt(`wj+2gqeN(oH?`^zib#(RDzw=idXeJZcyl5thS8O>@ z&JgmHbdlc@*_yTLVhhE*UV}JTb+CNnQo}Gf)b)1Dd@HqWG#gzu1PP_{TsZ#7f}goA zOKA@+X^6%>nX1%vuSc1q5Yc+ne8lcbb9pG%Sd^?}(e@uTYOS1ou>@QC8FYGL=j3Ub ztvoa}g;J&nRg3Lh30<%#bN2{OeSzA>u8pD-H|e>ri$Tj2l}HU2Xc4{p7-OUI)vFEk zl^d37nB5o4&wv+uRUn@6)mQYKJy!E(Y?pe*frH6AIp3t?h413thp=ioS%0hEo2(7h z@#+#`AQx=>3k8?PN6FCMe4iB2@AIJdMeCp`uZ=yg}RMX=TqJHll`*BWmqU8|a)QTX@vES+Uc> z%f47%M^?C6$9Og%6cZqQ;3-xHjni@drSjRWCFc|>cb{Qs(;ZkoAS}jXzEZ^Jw$O0j zO~AtBs~iO!X+7BsGYb8vG zuF4hS>dK#!X(%W=Mwc^X)@_Iy_*iWSazn?O@bi$x6PE0TZE|@EJrzOcIFl;+HcX80f zr-6Dw!`QgARB{oh)YSCYD|bTcDzDPj4itLny=aDwJ&0~H%ryt}`a%^l4LHJ4nxm#X z3NRt-)6u34swXCH#n{CABU@VtPUlT`o-hF@K@rIiau)k7mb`qf-Gw^79?V;3PIcBT^)PDW0jE&O`RO-^E{ILO0dh-hM6LPZiqCAD>V|BR9sB=<^0}_)3U2|0b7pT?0e~ z^jh|3y2W!QBXCw8&#yHX$}U?UN=3>aBG#u0ZH;~IeecpC;$EIKETpR$p;zqB$I;)Kokvd_9`0 zQ1A$_?M%tAQcgHv2(Gg2natZPD0mdlLCepi556PqRkorCJtXn9L{nFpvCO-aDt!oN&Sg- zM}pCP)`oIo0m%%Rx_?7}%k8o96GD2XCygr0dLVPN#NT6y^&`Y%tKf2*dBCpm&Qk?# zdF8ObFw@;~MxqGEN9%F8a~L8QajIkMQha3TAJj4((20et0;9_P5DPx%^$_v6UNEx} zA9E2?))Y>(UrNtipE+O}haTQ*t~ihuoNBloU-xLdkvp>YNS5JjsN1_Hxd`9NcCq-8 z48u&X;NxO-v7Rv@+F+DMpwIC+?fE)4I@At3-O&oBINzQ&DDfkyIYv4J4`%=IwNC<1 zlZq~#MLK+Y>Cy2l$-7%KMtziu~A1Ty78ZRlZKA=86Vy|xE3--pcz>fxBgSky)& zDnXd1Cu1;`AKRt*zS_3ftwm^DI`h0v)DImcJ(FH5H@AB#gJ+&(s|IJ7OhG7eI(t+)oI1`#WEU_O%Igjt(kDr0EA%jm6W_q@Na}JsbEg$RC@@?Ry1}86BmAkrPUM%*R;C$gulf1Z6n|KRAaxO&@(m{YIX1w zjd+)HqM>1=#!U}o=rtw?9<*)%e zWox{-*{<~BxJSs!Gf9SQs7J)C76B>6{=Pw~+KSDD&6&FO#?Ig}iwMrjF5??upz@hk`EE zqpV!?@1NgP2snJO6x!pTi&Mr%BS))OBA;Ijz*q%>s3Umu8*5w_O!Zi8PDWkYZWs5avz@y9j6Z{g1&v1eIN`6zjDMb!8~|0b#;KQ>+O)+2KUgY0 zAHZ^tc93*}?#<{Jt)B?FfjCSt=gjFLzTod6OibPrcNs!$*R}Hx8%Wn~|Opa=01#jN8K}JGm+NCQlh_z70wwQ zhUMo4?a_{gW4X-{a#9wjDHePTcP_Q?tLxyV)laO zsTwEE>sa7~m2ebzf$qcjYM-oUgDCDK^7`ua$SF6NrH))aWM4H4r;MvKrTNb{7p=tWS zSfATpbv=6oOXVC|&f9!BzKEz|rnq>L_K3U?Yfjfm|JeEU2=p&KKgWsK9X``7)>rpx zs0fdYRJV%_Jtx+6)6LSb&F16qSuZ>`i#r?MtJd(omt5377#$pb`Q=Z;(&;nS(#d}e zN$0RA1^DH$s9;12X1n5A^~j0eLCbXMOlFIlWi2;fQhA0CJG9SZgV---?<=J=C&kIB zbnNBG2p!8D$5l7_y$Z91^2K7^u1Khu8HBS)1yj1=KymNj`?Y{dZFvC8FriWY=P0o{ za=wHKyOF8icilopt^&j_Se+jK0Hn1TySAH8)mrR*z=})5!-*7!Ic>0j?E3j=>fUQd z=LNoE4D!+3uF5}?P@XZs?I>U-l;YO+L<7bjpj_{40?#ky79=b3I`jVe{&tGL3dHLjNM zXMFY}KM7pFWfd@LK-_V_jR#%1&;1DZxic;3Od}M}w*HLHYH|umL5th17VS7jJV=nv z)Argtw~@Oa^;BV-Z`)8@fhKzn3|h5JE5(_8f;=S12&ks*ufP@-0WSCXXDAq#rbAHK zK*`U+*=b`HjIVF<)K&Cc$ynDrI97;L^Fc#cic2ow0*E$y`A!^V;p*?DQ>8ymCfp;J zwm`clf%|hskq+i-9IdcX)9|-XzX-6>cxcl4MAvy+N4md@Z4%D5y$c#IN=$N(^iuL+ z&mX|$F%<2)78m7oI@4vP$wuzp`fofrlh~+)toO!^EQP8MsQ#!LX>0yLNPXv{3O|08 zqrIp2@SGF0xA@Jz(|6SDbr^?j1{*4;Vie{Qd=Vw2gw|c#P9!tWsGUHdhS6A9<44Y( z(pM=(#-Wt6{euT8mVl~Jm5VSgM-$ODfs}O}LfM&v+C+&w=yK*Ux0ZKw?jw9(UDk^F_2{50<(yh11(uS-M(Cg$%_^5_$tYR{bC{F}B2; zrAuNSx^F(xX5_1u$6yqM@_VKe-)yVmD zKK0qfI~q!1+>GHCOL zzioNMFpgnrQ60H0ko4rm?9(&)h5u*faB^vK^>Z@^z6eeMNs1gxL=x*XyRSm0AC`ef zA5NPOZX%Pf^v!<02vzMH%0Ao#otQ}t&k*EG{y!ardn43VJpRx~P%zO`y#t45{AV}+gi9+h1-#H@*zDZ<}|;J7;jKvo}9 zFUC-4fm)A<1ishiHxhLLTC`^zCk{r(IAX9cndMFhGg$vMsy#jYz-U2d zh^)|ir^qfQ(_UignIdf#TQgqVf%6=@HQng7Xue*-#ArJ~w37tYDm@~ZmTUY&PP_k7 zGUdy>#QpT?U~+VaNhcX>-sxJ^by)%4s9Ux+<)F3Jg+xqQ@EMaV}=j*3qJT zJ5^=B!J7mbDwHrt0=*Lz1(#uVDxbx_;VZF~kD>tDu|#&>Gf3?zTDnEge-zGX7;l$O z-ZlI3qg_Pgg3o2|;b*n6j^(i~*JZ)W(ph@~i?Ez-`&bJ1uZFjEj6(zU-l}7J%veKm z1~~><&;5L+OgBG{W@MbI6^&__L#ODU}o?g4l8c?%+Ptc7NF+QQZ$#21*%bK+DZ^ef?Q<{6I{zsCKyawDlPTnhxpqbb=VZ)aQt}c9%9%@nTE(JD0Gi%DV zErvKmZEA5)ovbg^V?1^C(j#$tT>7TJsv;wedWMIDy>`NG4Bp1+c;Gl%j7awDJOt;3 zVK?Jt(5_rwVxuQ6u;w7;Vw?IqgnjsYO&K4C9|qYRrY(B4-k%VL=^8+IVnnREs1ddk zzVSg^K2yigS~PxKCDmao_vn%l6&3%XZv~~!#XnfA-`u@P-k`yP!?%oo2NHQ65+h?1 zSDEacV?Zx1V;~k)lW3wJqH^x$V2=5LcoS+@2$hRE&|t2+NC4zBT6Q9^>_CrVr(O=}c7aU41B zBa5Y)GT)LE9ijUV%^_hMi015oj4*J;8tB^S(#I`#ZDfYPqfhaN97FA%!76tskP=te zl>XbuUK=Q>_0`LUTPIeAi&(drtL~HpxeA1CLj$L3!+>Hxi7a(bslRf2BdEhixYls= ztq7mQq_FrJMcBOijI6ZvyOdt`id1RU)&a^kJj0L1o~QSI&XHTYfX7;{se4I!l(9U8 zcK^CR%`plSA{ADr^rR45Qwz`wtZiYN!PfB>1pr%Te^DAvCU`Zu+NJ*MWznY>TpBe9 zMulKud_H!=h)8k*cj|WzZsRFCfH~fC-DHVjVaeA8v7}iSYT6*Aj z2u8!2RHIP%b1wN+0DYlrHJmv3kXRgQYWAgRF05%3VB7E|BJ}|6?);73Oj>Vk4POFV zbm1*ijMa+GOGt0|Fz_Qz>h`RO=>TQjqAks1zrii{o(!xiqY0P1zXi`CU9gji1tk`8 zuY$v$=$g$RW5Zr^_9Z0*%@xOm zj&>k>>x^tk*N1lb!A9ED6c9_S@yCE!l&wtUJp8;UOz2@qwT6sF+MecS{jGJ|q~!kU zAR$((we}nr%*I1Bg!VEA8?H~N`-e{NULaE{UwlR>mypEF;;tBgD<*hZrhD%my{WW2 z#U6k|Yvl1^4X-Yhzr#_e@~qBe^@5%-d(gyY2LOI#4?BaRQVYNw0OuwRf^w}5-~EC* zdOlsSmv|Ex{m!ah;y3|^^x96`JH4kxC;-S~DX3j>%KI^Lr^j9Rt7lIH)eC1Iud~6@ zOjqD7m&`E=@Lfe)zf?pb6R~C{F63z|BU5RZn#ypU8svmAK_XLE=ddReIq7$AbUADy zGJ_R0)13VE_3&iv;;R&tzu74gshOOx$$&*Qto_n;n?%VGEWGJb1stePLO4)(s^YH` z4?ur>J;98h%TLG8EKaSof_h{`M6s?CY`&jtxPPPw-zA$@>6hwaXc6SZJ)c!wz(;uGMbI}#Y<=33=4rLa%mB%U)ALW;gd zpZ5h^Ub$vAhowU{UK})?H6ff+L9Em9R?jh_FPWI_7LvMRb~&vEg#76zlNXlSA}BL| zRuHotF@Ou=oSd!k-w`fy9hDIkhJ!k|Z8BKEKFv}gb8E6~GaAg%kfx3fHYw+N^Xb|5 zl-wFneNswo4SwzomfH&lg`5WyxkzeC`n2-BQ1;rfR-wDaR)7&na3jJWt32zPRz)Wz zR1zD^>O>*HE3%y0PKs7X*a!~kIC&}t;YreCH$-Y_gq=u5K=;Xvqhrr_xDF+0cZR-x z8AHqKs@a*oEh2>3=$QUId1c>^h)vAQzZv$9NHm}!C|U1KlRy(z3yzg=uVq^opzsM( zt?PY-chsqz?>S2QV(4%YKKNo2R3Pb65}tQPRdVahrFXU3t1DL!3^6qA_7UTz^|(&} zW@Jjz`M??^6i^zhyOM0~K*qk$h_CF;Rw6CXSZBbbyb#rLY2%g)M6a7$P{FB#BmHVd zKYQuP8=;eCLNrKnj+qdCr_4uB%kj{GqH!;kT(|Gu znw3Ja7x9k<&E6l6m~@)g@x@gCpkv+jlwA92ES|42_spHQO2WWaMv8ZIkx?L{krdB3 zkh}Szh5C@O6+^z)7|X;x6+D2nKk#@oKpe0n1<;psEBfH)%_7)>yA2`KnQzK{6D8fa zb%&)B5zf16lu&>o4}8Dll%cy^g`*{U*bOKh2s!4e*j)f;e_D7yA;Y> z9KGfOc8J4^Pj%7gjLJ4Ote&L=m$UDRH-PY-*O>ugW~A)v-xequvsRJG8uoag38u9R zA;<88(w5`$og>?ZRG=BH)B+n&_b!mTzKiFP?|ZG&r=Uba*A z10|T4Ud@RSOp%Guw9mz{IHxjoD)?;VZhe?Z+9>=g1@_L;=A=F_sZ2O#W`feTd;8aEvq!0sCH9C#?w?fy%P-S~JQoVQU#-Ivn{b(Ufo>+w ziGiAbX0!9rd27$)(Y_97*LGMrg(@BX)TzXq3K-(H-Qko~!zr>J38(X&dmF0h7t!tK z&VH1XKAL1JX4MUn!@5bXmm)J$Ku}JX=?A@Y36hJ{6@OBBf8rN!AN_7v-o-|Nn&0&O z%Z}@B^5`fWx4_xCT8rXl$D+Ou#L#3h@{Z3Ve{*}AM#`V0S4b3k0{gDZ_D%4B5nE~@ z!xQ(Zc~74KThD$r1|;ONhD-1G2kWGp6H-T4usc-Sco6i|LkOmH$E zZ)kBSPJUkh_WrOwBcX9r-FHRX$V4MmdYXCq$H`npZ)+8_!;W9i|Bfq&trcJ9^C=I{ zRe4v2*YL!XDq7wp(w1}~+?g%a;yzsytE#r|2sxN`+GaDupz|*@ceE9ArEo5M7@R+u9_DE)2 zS3wuxfbsY0*lcr+*i&ZSaiLrG)KGThDDrHA_+u%;jDMAHbKQZ8n=9BxFqG?j$>aJO z(&0+ZlUVeAo85Aa6L{1rmV{)_@ZpBcCVnJvUzPo)HneJEu*?(f9V&kQWsL>D{gtnW zV(wnKgKFiTtar6Y*JF9S{mEv!l*YJR44ud=XBa-K$xdbn^M^IQ;xjhf$BH**jRpe) z6+kbcZt9qa(ek-u;L(Lg=Q4FauxBTn_P*cgauf^?^m?x=)cks7SF2bOipAVcq5yJ! zR~79TSY1&(U{gd;d(JMyyhHg)NL+~K6q_!V#1j5!BbhFRTb6+Wv(?Dw=XSx=@V`xN zA#XI#Hzwj3qKq z_#;F|LP&jU543B1k#tkUba1C=3B7iC6mR}yEcZ#|fitYwy(lH`)k_RXN17oiX=$|h z$GxMbwsV$+kaXxVPDKcgiTc`sqW1#uvoQQv)pS=#g;8S63r zuGJC~am*MC*NCg@<{|3aIODO?1tZ1Xg(UJwWnfpH$+`s}uA_CryrJs8NVfMjEMh+U!+#fAm>%gw*jeZyy6oT zw~_^$*Jm_asnK>~1*h$xRi`(plXe88JM&|)mS6uyO;?-UN!d;z1z769U)p2J%tO_b zLQ&}ReVHSaA6T5y{4i_%Hz|QE3HQayrt&@HCERA@Hhu~A5AX7O3#oRAL}Yk5Z7vPA z*o?=Q$1eU%6bZ6;yh=0?9q%v_)!5ER@YS^>fziObn_+2CZ+v3b;CNf~t&Qn-brnVt z&KGp-0gpmkW7%CTFY%kPGXgm-Iei36xSNzpCj&l4ZL3%gC878}tke0b0Y9D9+P@;X zbz&e&A@0qr`5Su%TU739+=W<2x0zB1tfZ0(?@sMMjF<8QQIUl13VT&$usPto2t*k(mqS! z?nKQTomfWP@6-!>C~3zGdcik_R)$bMwry64qnGiV-=exav@lWdJwwFdKz5ViciLlz za!>tIo?@oZo#nGkoC#l-@wX9)Y=2l^j=NMz-n%QEXR5SB=g#eNk(^x7vYJ1ybWzAW zUl>*9p7Qmhg%^@HkVAtGb_tOf7ucETXr9%tVi=>%^CEHfP?w^W}a*_Dy=oUliguh5me1Kw>&K{j8i z6~?E-eR}JT8%nlPPIR`D;noWRmj&4${1VvLIFA1IDJyjR34bX24nIuTt}Pd?PcwWP zXglX0uS1M&{^py6&8AwKIRQ;t8nPs)Moz4op^B>kL4{~;iG|*ZCXA^NUzG>ikJqNt zx}(MBBTu*$;-Y|G{nw$Um+T&B)im`>fG%N(Mg|a9`~~P zQn?9pvICi!^`oY}TiXubq%=S>9=SHqWTdnrTr)0HLm{exy;Fi;Bmod7k|HySSJ+Z`ekP|Xzxk;zICn)coQ*nn9v!dCkfKS1V^dZjcnG}?p~YpxbR7dCMZ ziCad9-rk=HO_y;euimA1)eqG2i3>a1<0s1N6eNb9T43!;>%h=dm1{dJ-z?&S#-?rX zDEp#+RJIfTtqw9%5emxNMFS4~ma~iCSR*;S=gXP4R!F|_-=)j0@CW0-(8`g`P5E@f z)I6HPXvVVzl0#+Z4olyyM0mR4J0EJ|4~#awB**yUwuVF2=8UiF#LaHo46~rvh}E(d zHM$dh%^aPafJs9LFO5!RrLYT@9)j!UB&fb zdF-^FbJ|7;_qmtCy7>kx#^5KReh<_YBNmxXhP#!ZpSV61Xk#Ai#b2}pcr$w=ODg!9 zg+jzGI$Tq;wuk6$yyrhz`x<7%8kZR-+fp}Uz)F-Q7LyNpmUD5hmT)ep{`|+B{8NvI zg#x@d{r-jWBM+|VJuObKTqwrSxgdptL^WrUWy?&u*etaO_vhcG+G$Zv7d%ZHH`x;I;)hX-_d z0bRqA43%!S1W!+5!}=uEecOD=H=z=6WyGlmy_))fYVjRrr^x#1xCsO29ITYOO712st0^19Z^PdWp>eULYAE98y($x9PY zf-mN%`mOcw@lov6D`_l<(fOx4VLO7vnNam&>TpV%F z8WNljik~Ih?l!SHvD9{*zD@Q=aD06g+V>&x(`M<>@|}e$9?H~gsN|~=CoB$owSwUq zYK07`Q0$G%u*e9LZime^=n}KldI1$G{Irp7Hi4a15{Kx=!FxG}gxg-357@YAn~2X= zToEDE5la=uOtpK~@dQy(Xz}hB=Uk$ls^V1ZvaS#fn{1q-QO7{oW%=UdbL4(@rUDNOPVz9`8S^j!azIR5o!Zma`jB27IQ~DyC*SnPHK{J zwoQA4B+9ZN0=4+bPEEqHD(Mps*Du<_G)igH8e<%4jF-zNm8QH{1-2S1r=W!?gPY8f1a`h3OJvY1PSXdO# zSmM^YP$*DwsI%og3(;G4*i=w*N^sr_&9T)abI;u6OBI-aSD}D{I+sX^`**oDEy^_h(u_lGdE%2upVvu&$a+%2Uw? z`$qG!pCw#mF>0WiK$b+tPs&)`u^JlVMpz}7 zZeON&@y-Y;?2|I2QH`NIjZHOEuh0Wpr;@epGb1 zlPuDywstRMSlXQ5Kb_$izQi5p$mUVRdfFJA+Wo}MJ>tP?MXsenv$5i^q~RVOU>*Qw z)VSF>}9WbmEdoivze)uaJuwH zEIjDWJh(5@w=OG?X&TO;SJ<}-xw%EM)gq~-+G+Wihn#rAlF~QXQm=cx zm@wneX|3Lr_c{!-1TY!P*@lxcl#MbQo8R$D4Lhfn`sUr2#||}j2$ma^PtP5gc{DQ= zh8w0-xMp)^H7=>uht)~Rr#L8L+gJw-v$Pr>B4LPpEA@jkLl3t$i3J)roob}}KyhzM zZ%5Aq{~kdy#5<%VsbI3i8(buEnY1rd*l~DAnox6BU3lX$L)c)#wyl`1>$Uo_G|u~D zvxI4n9YnyR#Cc|K0XE#U`QAgACgz-ChRtE1QJ(6tf!|?$u0rgjqj^+jjOw2@=EqL56L`jOvyr_JR@ z|2+rB-9-W6qMunv!#`qq2KU+F)i`&_*{?fB4IM-(6R=qaisUHEhw*-ZNCCZaO{At%WG$=y9(dhKQ!79B%c^;eCzeUdqt z|8WuIEZ`@z(Li*F0z7!J23%`d2mp7!WPDWOn-u3`FGg`&9qe&&m^R(mA-EqcEi@P9 zK(dAPJ>X4lY%o<=UC@Yb!22ZPww*ey@8V^MChWQxe1}}CwdMl3N-OI z&;0moTF*Po65giQ>NDVd+sO&Mx^=3T7SdWV``y20^v3T>&+VT|uR;t5;mmzo9J ze?b;8v{8bRumxLM4vzT2LD_#n6w--(r1`qSyF*J$8B$SrP}>F0|Lvk$rT}Lt)1|T+ zn%zD8A%7(D|pCOMPH>r{?CMKVrKYtz^ z7G`t!{WRt@9&Gnm?oxgIKggAv@>8}5Ak8}@5;?Kd-WVMGx0X|pb_x;b(-;0%1Ps2} z)U1@1M3;fQ?Er-ic$wRfMq1Sh!z94#x3v z@J6-YFjQ%h@Vrkk=K@BdZ&!{#-6N6z>h{cIV;l!g$a73Alj;z#wVg8nqv783Ss2|O zb2Oj-bQ$3Y0Qz11w)4-_We*3&J@lrz;E6v~5&=#=YAd0nq#`BiA>c~jvhhEE zrN4V)>u4~C8vNG*8-I0+fmkj0plGlG{j%yU%5=5Ef&do|<2s$44_Hz8PnANC^b@vN z@fnix{a7iDjN=|CFXM!6!!ry{kMN_W^AF1imI6?H_?N?E zTDlZm^~5n37Z(S4(MuLPNX~C_dE73D<*&zuBf_Q)<^gO&K9(!KOS1nzTV~LeG?{{J zg(<(==gO9TcX#?ELn3E8dS!fwkF33x#(*NR0n+Q1tJlu1izHjTgg+1MkR_@e%sKeX zk~i8f3H=u3!0M}qa9O=S^0!G$N(79;)N_}$I{4#9)dFJCwDHrQ4BjEilRcFVSNE8ii4u=!x z*~%+ZlRabl_(rs%ev;q80VI4C9;7)qOv*aXcw;L~Y;RbZ`LGAM3&OVps6FA@6~%8& z?^U3FL)x*15tOt&ITyQHX~?b@>zqD5bK5#SHuv*YIGvgqKQmXlUd;#bi#9$NUTn;j8i`D*Hi*EKkKQ!N)i_04 zyYCitEarD1p9-iHgE_Qt8P_>Q-o3@adNaV8KOeSn>-dW6>dv%3f?v0{q%W2WF6Awa zLP)q%2#Mn3Vd4%*WD=BC)p_NR!_sA-RxFV0$!+G=BcWIp~2{6&eoo{fPF?Bp^ zbNOb(pou`%TwMrNPG(-Xl1t0^WB$doT}21wPCmBOa%4adE7E0?WP2Sk482}{Agr7GwCmYn28)A7pehYRj5@Lf|y7Cf<>W7?&uvW|l*&f_+9TB5#3?~yy z94>F91P~ite~`!!4lX3IkXZr(?n*vRiFd7MvtJIEc}}FLUD51Qo~SavZo(^$0ZwEydl5)8&UrkNS-Q-fS!iwjFep<7FbRWyMj>k1n|&iwZ$sD^?fdmvMxfiSu>UYNt{nZjGtj&rNqIgA026iOCe{taPY?dZnw(g$E(`TW(5!eC zjM3vU8~3bM?#;Jsf7ljhrY3-YIamDe`3Ky|ACLf2rke4OzxeoG<7U9$Ri89e*ankQ zdR%!=2`1xjx}k+XL}IA{K}qs!!84<*O<0CzS$ZM+0Z&cnFiMyu_+?Yga@1DbBmIjx zc_Dm$K>kMr@i5mkuTQ(<*a4%ycYT5Gs<$F~@T&{0NxaKAo1sLuXkftX^Zo}7tEbhg zXrY@YdhnDa;LV|h-ps?^a|NW0MMNBQ9tFJ>80GJykSUTDM>;ep32vaG8Bf4dO6|cJbY;%j)Km(-&$JTt5PMg+y zLR4XeorAGPcA$G_JKERg5nJ~XnM}kI8c%6N*k4lu@W=FjhZcz(4|RG%1+;sdTDk0CoWpV^2S9H#uB25^m^frR%l)oie}`3`V>84 zV7!u=AKD+i=pJvAu3RBaB^@$Et8I+z-ok2>g0*mQ-VnvhgsLB&pqytqe^ZzbM_(Q< zOh9m&%-UamdHN2@4gmK=u&VF#M9ZNDvzAKKtDp;A`dcj?$xhh(8*2oM{)J}}aD@1{ zoDXuul8cT(sbu(&q@Q!ak{$I$>$TF3$Z1q%QXDmp^S3f8#v78kSeBu$HDuYlRw;Um z0%ckSpfu9hzGJDNas`o6xKuIKI|LVm?_dl`KcJk2Obfu)PJL}-PSBP5GD0anNmp-W zQ;~9P`<0~%$>wphO=c&aY+BBSl>&a0I+RY9a9cP>&ol?xYPAy(Ypm~WmY6wmH8NC5I&76_7b>~VMzoN)5;O=Rp<4{x_@+5gAe zSBABySoN=*HsF|-9sQP?(PB7;-2D8aCdiZ);@cmbML?V z<39KI%#%6ueVKEc6o?0t#CojqR)+2RZf!?}wiSNlJlTG)d7v4E zpgh3$dWmD-{RwO)5>g%JM%x2`dffJ3!luM^eI~zzaK6>n6XyI3n^~yfr-PS#>W6~I zip5Fi8XV-4`eCyu4shn=71q$x%Wf8pt=^w|>F_)LliptSY6;oE`+7k(UymG1SWmL= zsW>0Xs-lqYv9drji_?R_IkF+<8!D6g#dq?TfJ zF*kl8^YSMqJw)q2i1NPe<_rXWlA1q?+_a#!8^NS#P>MGE`YU1=%j{DwngY@nte(oB<5XtpJ=&vS;Pds(h;;{h z`L9xEb9$$VnAuwpkepVJ&8xLU|9_r%b=HqB8vUX+ z?T6CYs6Ul!l{LmAh;AOe#`F)BD#u!!2Go6YMea1f`bf*dM(=jw38str5^Q(8_WnU007zhON=x!@I`Hp8Uofq)6?Hp7#KlJ7Z(9w0b9U0k)Jvv%cTK9XcF4(jj%`hQjc zWsUv6WHbKn@-6;fp5%!Kg`YF4=MVmyQh9+0lH_Lj4M|RxFfsX&i3&Xl4i5hB6+lmX zinMN+wU>~Ttajf~+Z@j94Sx0Je-5WUfvsa>W36sZH_rE_<2(=MMhg^4|7#0T3-omz z&J5Nr)A`&ROAZk6j-blPdcoNw|7YdCw!KYV#cl|%k@vmP}1{_^nYBl z=gT>W%l3_h8MS(i_5C%*&6z8~^FxUC^9YD`@2^t)k`<|P*7nm;U z!&RHc20GX|+c$0vO)7L;PP6FEk(d`beF9bKkavaMt=0xn^j1jYlWhI6)gu0!gt2B) zu|J0xEoW#>weDryK~>91E?*^X$Si;VCVlzJcy;b8d6{li*7yp&nIx9Zlck@;r_s6-8(Pwm#*Y~b_07<+X_? zg+Dgl`-#yip9C4KOP)MECxYz>r4)}_0o4aYaNkMSg&V+lo+X{oGiW<*Y**VYB+uN1 z5&O|~4fB%OtfFVuRr`I&ySJkgxqJ<}EHgPh_Ziah`@WZOl1@7uBrP1SXq9^&`ib3f ze)#7>VbiW-XHd|)>p0cNSUTR-*I~r6Fe6Mloz;gCPeNmzN68>0G0#WEc6-x-z;b`6$Q9LhvVtGf+XXTHaj8T;)S|3&MMDPyE(bnXo3yz*lbWf+1ZPW-y7}q-Zy=L_U-tO`T9so=5+gG z@KI0nkAj~c$YJc34)*k(gYclQHTj>fo8Oi>*#EelP%nd}O0{${n=vF1OndgEGRxP; zWdd(~U%N;FJwbvy(|oR;R^(W3r>gG$JfHG%lG$n8<2p=?_|SYU)Rpa*a&b4~Qh@%> z-$PIl3p(n!&hFU-TE0&^yPk9Bb8I07(SQBqW zu%h{EXTRP+tNl16=Q=sEEHaoXYHrberRWJU~#BAPYfu?UxZQ zgWK2ZY20?4X(^l;Tpz9{7U!8!>~Lv8>O_d^ecYPA^R~9 zk2Ih|R?e*nGo$a)u(K!RXQGU${Ap+k*)TzlCg@bbRTIP!j&VGWnv|{5o>vEVhQ_LqbT1-AgpK zpX0TXHb@5nQWQ4|u~+WIbp?mh)%!G0nn~?r{iPiVnZb7s<;XFP;PW}E$I~z%K=pGY zG>B=lbcdE!kS8}Lxa!k6&a~a{DBjE3kHKN?pCUFteQ5=a@2)s)b2;L`BqZ+nB;A<9 zbpHI{y;v<Wr-fP$zDS|L~=QIy@SfXdg{OFZ_i)FQ!`VmJ*!@;`_~3Ep(U1ms>oyVFys=tf zLaHl2fNWbod|K`*=OS31B!Yp-k#NzNT`JS_jqVwaB&4pGMFs84+0MP0?(MK($M2Ui z9$k^27JJe;jPvDYr`(Y#3f2;2vL#3N(-PnChN;)bJwG;hzXB&8c9y-HhO&UWk&mFl z(S_r;iv^UXL1wpxClwO4@AE8fU*LTq0sdV7!KP*m|dVJ9C0Wp-AI>p*Z8QCa5 zTC<{&YBLH61${DAnCpsHX8BXU_I#?_qUphbvl}0uYAenepg}quG?2*h&vUuf`;){O z*VveWYmOovo#w{-zL*F6^$xx0ucQIZ+bYQJL^4=#1tLg({?KkFv8;V?ZcJUKdXcCi z`=Uxfd&4R|+qM@xu4MOmq^XpaVpse(w3pNV<`t_&BIHAkv%2|ruiJ<(^|vPv%Sl~5 z@9E+!Dk`AACiE<~tJsp?BshvM>bE32sM>v1A9t43Wn#*ya&pM9;AcC0Q+%2v`*3eB zPv@swTB03{G?)`sn_&ZcF)-qqdRCGv4GzgA)?4Q3ND7BL*LzQy!D^<>U}-PBrz8uD zFP08Ha$G+r3L6w-z$s$HZ2Rj>0E~Iz`8%jLIKT7U z#E{DX+x+-JHO1(C4Bl|3E^=Gz&t0Yl0Vf~J>W`Ty zkPDGt^>cjQv$+!IU)|S2oCi3I6KHRub4L8AX@$y6;KL!DfrKK)OiJ^Ya@-)3BwjrH z{CYS09c-I84JH;y`VYyv)X&BUU68;IHeu~dT_)90pyZ(7xN!Stf7{{H7+|53h5BAs zz5(5?f|QL{;ehtsbiP`CQbH=Vr9jO+Rr`Qvsy*}4zGqnYN*TvQYPMX-^@&nKB5HBD zDncge6@oUUWG-s4snqAXR&MG)-AqvvDmCYJ;2kKH3MmtQ(>Lo;n`X9@M%LS;99qkij;2{MDRXmICun%=| zvny_cLc*Ks&wX=g%k>#Yv9zw*UfQZ(RC({3YS~>b8e2KApJZyTBE}03_tSW})Ok6V z7snh&TkrXDbl-+|aa@JthiT5OdQI2J-^qq=3Dd)lUS%DS0@_)d+}+lBImbR&*zHEC?(W=ztM^ohU4vtBqlj6rEB^{1LA)|>?B?JDPJ z?epflJ7TAVEgfIUne21EaihGtNOR8$)@mJtXZyg2+he66V2U%Z(KVx zz;U=n`=8FK0>!&g$k`5H*W$12}usm-53yQQK{;*v19bMMdOdkN`)(4gyZ z`}5~Y#hPA@xIr+hy}Js?j%v`IAGQTIvB?LDRA~TQ?r$@(7ipOn0|&ob;7)nEVPLk) zTdSAwh!-BN<`}$HT$g!|f?_nN#tg~kh%Ec)VqDnQ_oirV-xGKsz{)pjwxWFC<*>b=0g zW0iukjQ&;!p!J!Gsjrd>aF|+e-7L|zWvHDFn8EBp!fW<2w@1OGGt~Oa5H+0Izo{kw z54}Qam9lgSi#|Siz4Ir)j^A}(Fp%25ygy=QjlE{;m@d``yAwjtHCd0JArcre!xMrz zzE!nR64CdvnFI#9JtP_~Psc^0&ws}Sl<+Sccr_h9dDuI9p+D1hNs@+_SXE#Ta$k8} zS27c3v$QqKTk&erC@`+$Rbato(M|N+uA)jEqXceFf+$Rv%k`zXG?sbQv>8!(8)IN{ zR5tMMH~LpKDCL`{y*{-=OGLmlhs(;CswZNptN$I%N$f}eI7+LdvU&qS*tZNI1MES_ zbcAclIF^Q&Q&%F-a5piW?T}R;q-fT${5jgVDSm?iQR{ST8=KX-VnpeuKe0|Q9J(WV z#)#ha#IDWSa4r(q*4^5c0UsQFW;qLIYDnOwm(P|i?O^dta zrz0rm4|Js!&mRV{&JQJoD*&)`B^g6-omXB86;_x%jdUwyH+?4*id!Rh3l$lkc6nUI zygV`*ETb}telL`um=+WA(qQdq`AQ*9MQP|HiXrV~FKaJG3cJBeb0?IW1$ZrW+a z5m{FKGn~<+g3(N+p4HQQx@NNecFI({bE4QBq(glPxg?zK{GDls76Z?GSVa%~CpB=q3?%BRuo6w`_+5NyPvV_u}maQLd5O z17MqWI&ea}E!Cp$H}y;+PV*vSnl9zed?S{)TUQa)mpS2|2|Guy&^f1Z+)QGLbERX< zil$AhDussn`%q0&@EzmmfJ2qvkdwGi|f9V z4$s)7=no?)%sHADgDm^Tf>Hh7T1oiqsH2oQ^3V42cP1?6oUFjZD199u4oU99CAr!a zwudY0nynVVKF=47p%OL8d|=w;g!rPRc-di>P6qVlW{E?06GzK0_9R4ZEu4th%zXSl zAmF^;wPO#+e@dox0^nzO#Z>Gopl(gCzLm5-;~31E6OtU_iEu4v)r+Ol1G#Iny0 zL?~toxI356Lp#66op;Iph{Wf4*BJFTHr4jM7Lkl@t~7R9AS_r@s1=j=S=mef$a$o6 z7gD_T{-FDwZGP6{5F=BXJEsG9q;j6gJV6Re#uN$&=e=ERGe?JM@2?p|$8=es17cO4 zk2qScI5UZlOfx@jmCg4u0cK{put9PkMWwN;y)Fg4kWfyV(j$c7$aj{LuI9TyY%yC@ z<_NUwDb+ewPiZ=>JwG6qsP1qck`pI3@}?O}_@eVK!Ai{TRBGy9%)}vsQR#~XWR#+( zv>a{M&*Mnt)SKsDd(LDXatZHAv+0o2C*oCBZBILG^VzerOi2*%lUw&84 zprdXBya`?nUm?-|j$L52^vpg+nL1u;=5g|w*%VMthYHHqLKNy#5(d{`|Nw)0N+N2dL-uQbx&@mFk=y_+>BfYL90 z@YlxK4Y;J>AkAJcE~MOQE_7ATnJ3cn5ntaJE^{*bahkVQmVmH$iMuA0MUN9C*QPY6 zgNw;jz_`DKu2wjxfcq^>_S{hM$P971BJbmUo)Cr#QBs|Ag<2ekJlaeD{pC%k=Y^KA~&he(*uG#>0JuLbp*H2j>EN~F~$hpL$}b5$$cGYBq0QxFrF+I$=8>^a#&pU9 zRC}W^LR3QbNeejiINwU5FTjU@A5$a5XfCdc1iSAjKNy85mK?mcyVcI~H+q2(zGGDu zeZ)Xs>Gjvx;UNyM2QC}M9=8g{SATwS-x-hT87@`b{%Ih5Wx;M#&KZLV%cWC{*5|%* zj@k?@i%I$%$rK%8F1~Xa@Yx6`Ol2uNJgzof304A)eSRZ#1$K$Z?~2;b9)o;8+FHHY z%63DNo+x(WDm2^E%r>RAJEi71u;8v%bA}iK6bt!`HuE{=R02jd0cBF}g4_uf2Z&b7 zrSlLXSAvN33b|fF27xu#6`7`;!?cSx?T9yc`j!5tRQYYUswX>6Hq&NkEQff*L;!2r zZb?_2)x0mC2^o}+7fLzIuN}$GF7J{Ocbm+8!gbNm`ukNSUfF}B+Jck)52z>x&+_Jx zlZ6lv9Lvn`WUINkf=vvbkd{Uf7|8(j4o@@kjde9*m_01dmcx@MLSTVqS{qA^G;h@f zvc1o7v+>1*wQZh@H}=Yab(larB1Rl?>h-B@;vU&Pn}BT3URj~{>=?gjUCgR8KN=f% zmMo<(9?t+12uyo zZWA2by}FC_8RrjiJFHt%S7L#P@hjwYc$^>kmVr!;K^SeS+qK$1bspAZm_)6?pPbaO zyNg0^c4ghji=|j)f5v`&JyrT3p4VE&v^82v=f$veoqKJ)r`_(>cf^=I7F^g^CLI$I z69xqPqSYnPDNS9XOnmb%STI3hWv|Lng%&d^CQr63c^u2xO*@Eab%dp2J7}ocyF*#Q z^8Wa+btaHl6*H$S+4^u1jK-mfqNeD;i0ZcaI0C-b0rBB!*YyGn$s-?D2V+2I5_yIT zTcY=KepnHkB86Wfm^%IP709HuDmW%fbVIe1cp}|BIf>~c#4!ES9fPZSd9M_ap{HpS zOzJ%1w}wwS?c{v9$=)z&S49zmg^ifYKaSC&*;%sE{ue@0Y-_OxNK(a-G0~;+yddr8 zW_-8zu+cZD{Uw~=Gfmz8M{jOXJ-P%PCL zfQ^^sm;NX&2`1PZ-dDk;mg6RV%&-#k;S{6J2)X9Lx-G&|WX3U9`uiIR?wk!XqG8zj z(bT-hxc*%tv1oRzy8JN`$4V*mZ)a7X(1lQ z8rNN0$!Xh)57t}lsxw=x1)ZLPY|W3tQ>oR3-y-NkSV;Z;+$TsEiEd)eKj-2!T<6+~K+6W|&ak;nY6P(1@OHx0mniXR!R0ylgbSPvk-kp0+Bl z=AkbJ1lF@s{r!jZ%=*m2r6p!=I1tzPb0Nd{`OnH7eoqE{8udI@+<@xR?K>kT@Dxe+ z{U?T#2&t1{S*<$O&*hEnIkPRa6=9h&Q96j0&u_1HBVJ<(ykp|pMrqo(3&1N(uP+u6 z4e}8dMWiH%xWdWKW}o#G--!(0;6MD7Icbw?Ytxi#qpRgMG%xzE(=i}0A@#LV=2k;1 zF2C`8TABOO*)>#Q$2T5y8-nxp=*+d=hwOFSZ8@ zF=2vwo^A3ue#%vz`#34xHJ(i|vCkQum>ak9u^XQhU(r4|&x7Mt-_Fse=P8SEjIcd5 z(5Y$!dQgsX$u;}uNvk(AtO1u(AMzK~c)0BmB4=2$=DX~nv7~?6Nb-y z4ptwnyhx_(@_W+9?b{RNZIqU5*PXx=lgMQqq(DQXZ!9z;BRZ4WB*0l-=61pWj!CiD#LdLp(+Pb)Aq$vP=!$UIj^*!(5o=52y?bAN2?tKx@24vm3RuV5@G zv$Ytma8)=Kd#>NoDz}qxhU9PNC48CT1wn?O*w+~cQN^Mc@F89SJcKaxrmq1O$P6(+ixeSb3?7ndj&Q8cBH`$aUZ(Mrtq@2 zy6&@+dG3EL2T+?SO3wguN%KW*2VWn(G@IZO4ddgxI?wOuMETKrhYy?8tDIUrXy93Lp%3Gf({E1hgP#)w``Kk#fr+P z+)HX{JtS7BH`ZK^3EXS*ti~`P3p6Sn_Oa50CsT7AuLq29eEkZ1T$0{Tco$<0gB(mw zc0J1U>mh7@u`cXGA(}6z)@!K2QAj#)5Lr)$HM-|CwiFSgbS4;IH{pZi3>)?CG-vr| zOkB&jghmt9c2>3ML`u;?QYhhOLW2+{@1col3ba_Wis>7NjPR^_SCiX5*=z)wvbIT+ zKDV*S^sj;m?-qg>zE^8@YH#E#ooy6@1^@$poX!+07@(Wit47KGaJr}w3EZ8_N{-*s z=&Cm-l{TW@!1*8=@CyunF;$6$asT68SnF9gv41N3-3|01qv!0ZT4+Eal4bXDs8Da5 zHF&@@!S@xbnRnQ(zt%B+`|WB#Hqie|mMS`bB3P!ZGJHEMa?GvA1v|4l)}2nNk#qf9 zO;D zZWSgFk@RB8UC-f|F&>RC@IA$uc76q&C49q4aKFg5Jd@DZ-&0m_j9 z>ggSlXGvG1{siw%fGgnh{6TYT<3pekiwZQ`??BhiQ8HR@Qg8wCc*(H5Kmf=KU(C`D zUnEM2BryN0^gUeu&hZ6_-((~cm7Rb>*oHmPXJRi$0zyi5@p;pEe(DTRo?ySTL`}1s zsvuvvG(4AA;cL{6?l#DF>izJTH?dNEsv#RoqPMG{h#mN@O*&pp>Leg73yI$L_JZtNXpiVA!QY`hCA@X85U0ZCE3*(h*z{rakpVEmcIQ@JRFuXIZk)SH27)!qx-<3wzh@eCtUe%Qf1 z_TROw)Rolt++{FRS4c)I4V?o`+Xb^5j8k)#_34TxS~xFuCv%M!ZzpzyVpirIn?T@l zUEpv(5pF<%MAOG;DMN;1!-tgx1A~a?M(8@eqiCjn8|#Kpr&}kGe-yLA9x~!mC`slc zGogERoq#qM<>5~Yq6d; zYY(%cXFh4P18+@NDksIwe`HZ(H=E@Xv9w6EB34apkBUGd#krrjlV2rhRlDJfi!sSZ z*_!LH_OgiK*Ti$y2X3qh8=uNYeV?$=f%K~%(l4aA*lQ>-t=%BQh@nwkR7pAO zsl%3^d1uEUaQv6P9^X%+i}%Tn8gYU=r7HXNU+S_Opx+vFs4Ir@HpD}BcyIplll)L9 zkSqDa(Zb~M$XXZlTs}8mhdU7&b$K(A6C0YaG z(S@Y%%E_RK9sY{UWWCd&_|p2{55(Ck=^+-ra@_rwY*>LXR`Sddi~4ZCDBWQzN=wy6 zLGHUI0Dgr~1XrZB=iPFHHHCgFHCqr#SE5dySgF1lqT0hm2;8ocumXw+p}%np7$uR? zsOV}OE41Y;R&0JQ$@pYWN-yiz)eA90o_{^Jn~J`C(Yn1D^zn_S(Yl&N$$2B>aYSz% zQcC+R6@qVCboi9SUqe>|-y3v4SW5ZIupeRh^8oKf}fN)+L;AV5{Kuq zM5Oy8I`#lRz{%2;yYq0T$?p&+M$J3iw)E=kETh6{ zQ*i{jS6vVLeEq*Baar0EfA52k<0YpgM3R0IXMcNj9a`1uFr3&V{H_&J+AZd{>3>NH zEXV``jyrMuZ@=IMIxL2_Tue4=n6*t?+*XQwKFv3s2!hdFWR|su!6(P%rpE3R>%R-{ z^~ig%S`BjtjjEz~xKgxpW+)lg=h$}pkR{dnBwmjsJp1h@T~+d+KA}&9;Hfq}2kT7#RH&8w9EvSz}`E1|LN!7)aRhxQZSag6A#oz>^ zU07d##;0F$ewU$ck|FZ=D2*DgGao+PiwaeW17*}DfF~Io0l6%EISaiHx@*Z%P4kIm zY>Ntdn??oq8lgQ%cQap;_bAlX9A>>V3V-|7sBHDp>u*&<{(z=dH*Q4@NLlmmlo@<7 z{js#wSAI2{YP6%PNcTdqpTs??9LlD8I7?j(NZst8T_AXO8o%G(roYEp?yK4v*F9Wo zIc_h#?$qPI%r4!xYQr)|K`WLLnTZr$;U|)GaXYXX^BCMw;crCEk$(bqaj{E0#)>%| zM}?OiN6BhKR^SsGz0ccp=*&L+rotX@UWM5SCNZ}u%zIE7RNXrJ>v_FjXX^c9K5775 zA{w6M`*@gE4P~Lb!?n)0nY4aCn2$vVHY77~JecFY&7({5&yqkrvE%*~V0mup8Sbl8 zi#N5UQgN&>MJr-@2TbmiolFd{Z|K5P|_Q(YH;TA(Us zSn!T9J&p(`qFR3bepG&zFex-82!Uw zeRveiX$~?o{xW{6TtmP?6{?sh{qasp>*t&s8ih{@ z>!KIB8=b5O9$N?oJj30e9Y-0^o@X&mM>eF;$@u)tm}pr4+j0N-+E8%n#K;A~+s!a% zJlq6!}?wbtzg9bROX~1JjZiTiQv6|aF+JkLR_hu(`;?a(GanroBMlGw3Phg zz9`74@@Xr@9S+{GZNV%Jcw==xuq;j2-y@okOcDn#RF=CVd_k;>Hr;3r0^8@CXlmBhKwA1j>H?zzE%mk0PSoO*qDw$(FwO7+5c0@|6U z?ul!%qEi{0+rx5UJ?ikHP_`qzjjRC0!1PyRuDsd4AL`Vw5zYdLQi~p(QxrHDgU|Hzw8Z7POK8K18$0wKIq= zXKs3x+cXp=y!TB!&VTEpx0-k5s|=Aiq+E_jTA4pG$fj~wk&&lePsCb=a~?Z{g(?V8 z<+7!9E;_MU!Rm5RWwJ-gbzr)ndfO~9m6ecxxF}b0P25EObabw_e4WItg-FLKl5m)^ z(X6I2g?9ScruJj>SY_a#vTJ*!T%AmGaUjbJS=?V*Cs(^Yl;Loehgf*69?5W7nxOy&(>;A^PK#fpEw3CEk$hlEU1tRcr^QM>TD&E_zvRh^cy95G~lrmF}P1 zs8;J!YXI5-#_|`nT|PV%U;P#hG%TME{5B@Mt$eiOtRgU$_ zdd?HKv=)_;)8gCQ<27;H`XcF@0j-|71VOB+MV3?lUEkh10t&r%+S;ghbtn>EYxPrf zyNvmJR!3bOLw`P%LTtVB*hnn(P6ChSLd~nOH#FPS=hX{kf+D5a(ZcEip>>j|@GSGP z!-aTToTomMt8rj#ZH*0EiHK%`XD4N9UG1a(Pf!8g0amlz;5NE_?9q znKC>*t|MjeR6b2BncM$U>8Rff-L&jQ5kJ&&xcH)btMzOZ1w#+f*Mn+F>d}sz#o9+` zJ&OUZTa&o%EVlxbaDAvKs9d5L$|jyxRkEi{(04}8#*6MI%Bg<-3$ud5_VZU|(ba=1 zBm?ry_;fOjoWzd?Y*HNM+p5uEt%QHWSy~bvt8L3U*84dGgB20FNK*w_JyJ#bE0+gn zrQ=cO2v`C;McF@-qa?%E!<5 z4qeD1E8e!|rpZBahO9J$)g}@A!XqW6E2aUv8`0$m;-%HSQ{;&ql3k*iu*S5yUP1Ox`IsV?0vzgT)K#+DRiRmg&p0(T<;YbTiJb}Er+ z$UcUEiocvTZoU?bd)D->JBw`|HoyZU_m$tRToJ)jnIuPF)A?KtPt&$T*XL9BbeuIp z8ZmS>jxGm~idMB>lmxVL#eQeDj6K4fytif>eV!h0yssv|+|SuCMJaVB6rlwY(O{a& zXH0JpM{WeB;N%^_Q?3XDQKDv_X$!c^E5mGNi6p5r2}XK+7svPCm|GE`P*N4Y{b$e1 zsJHn%3uF@z-Xh9Ir$NWrmZ*$yLBM`=r4IUawMV_pTA0--(C_BOLap{;ZyY1xp zsrs!VkmhB!+E81RzdinqE4k~{Ln#Ewt#cdrtfiu9gw9`}u?an8!{CocE(a)a>~OdD zAAvCR?5{|x<{wcqn9VJ5DQyKc2L?qLv>r4HtgHK}+ zwhi2R$+w2L7`IuYlSQ&--rQU-maFY(Hk%>TQ533->a0w-;957Ot7P-J7E<9AWULf;5VKotB*&0NG{Dl} zd3mo~J&vTbupqq@K{VA&pA8nPmG0aA92_wwVN_{E;2#B)x%SFp1g;vVapGlO*|y$# z7TDy{pOeg{ak3PuFia!P$>B-gF3-y{mkG3R%M&EfC`=WPnCw*%_dJ3N$~{fwl&h5b zWIcIq_9x(xmW#rs^s?;lxI^8c4RzjfSQXEGPeYgH7itX5J=TT3n4KvUE|XCNN(y9|w?Mo@MiBFn4%zwe$hMx>&12x!klf-s(_v za>9;ctp{PY*K$FI#nbErHso%{c}vRoQ*-aK&bmHb5%ev5#C=o8c=yChBOc>av{pyV zN!YyivcM*3v(9loVpdwbsiF%mQV3Tb_{E`Urm{#!|Cq^_7^wJO_R+y+$^T_k+zsw> z@^5RcM|QJgk)~jQ;Y{Cs`?2`1K)xE_Cp7PZH};gG-|9=_+(sevTd~&cLwo(pk86PT zU9JRAQoz)k{R|pQZaaF*x*U(eO>VNb)NY1cnY6%+LwH6pjqhlkskq?z&fs=Hn67{| z{rnVaxTRL6uhnFCuO~nu{Yz7m%m^j3lHl7PsF2K4RCXD7d1zN(S7t%~pr0Rj&o69> z(V5AcUkvHgYec=Tvf2$Ihmv(XlyI zd9T-*mp*G*$&ri9t5dEShHG?}MC8lvsLVp*Sx&iCi*D2Ed3=W0eSQE8ERM^&bH{b; zg|_PD&SXx@J0B^gU&3`4os00L#7mr5X1=6&G(up*6}ve-I#R>Az}zbYto`of76^P^L_9Vg;Aqi~!@*%jFX6=W|^qX~G*juYJ+ zWNIKB8b}-(R1c?FO2Pat6a&@LcnMYCngi@Ny_byF)AEo;r9J+uwo~CQ<@?0+GbdXB zyb^dDtf{np*r<~+ITnK@TWX}R$~2xANTj69z(zwTed)E^O(%eK&2Lah17&>C0(epP z&Zgy+k(70QXc`VBd&l{Dl}8Q!HX za=c9P4WIFx7MF=YX?8j?Uj3BYYsv(L0QeZ_MT}>K7vm5rFc5KismI0 z6i+35&zDXcOSEJ8Wrr_gBnJldjP{lwq9IP!JzL7$xrpF3gS3h4-f|!3t)GE`+CKbw z(PWQpp?B3b*)#I;9^OmLj0fBA(tJypo)GT_xil$C-o|7%;R*@g8Lm3wIvi$boumx< z3~D=)*7zqKaMfEDLc7qI>d~*z ze30Eu1gBn1Jl_!$Fp^`;9CS$YO)?s(5%%<3(n(8YuZGfm7|T+NE8{a*S~)@`GMxm5 zr8!$(WX#``^1DP7Iyz;r@5~?S_Sz#Y>VIA@juYnN$dWO;Jk4`iz%EjSs|VRrw`Q`a zw!|jq)!eS{uu(V-kS)IcB(Sz_w4(_yD^!2oZxcGtmuS?c(iJdnGIf=$IQKi1oVXE* z;oW<)9y_DHvB06^2vxTCf|slLXp7(*ldlEpZ?xUB1$?^HSC`oKYxjV@VVwEu->qk0v+SZ$BL5H>M z1;n0K(%q6xACm_9r2MUG%?K$Uq;4nW$@uE8XC@YB1 zAD_P@YccJZyKb_Vmw(~h)NH9)QAC7r&y)MyZ_QK*yL;;7I*fT$ zOZUugfNFD+awJ`;lt25hi}8*XF6+lYZzmXXv^8^n+nU8eiAWtzRFiojc$9ut30B_!3FUu&__f+$j@oD0kP}{=;SvrN~q2*@k852GG~I@Ar!>6Jo6IKj zuHxR2=8is749)buhciH^IwlK$qb5OO2dScXG8F zc1^`b*_%{=oMYKGQk4GKWoBk^#rExFvhky_2g-(X|GsmMI=-PsaoXgeIW7On@$}d8 z#8`|Z&fDv=QMiEb5zD4&0nqeX1=j+vPL&|a zD)FJgqEOW?)&ZWOI7~D=574X=F)ST2aVq%7t5Y zepxzOSbQmw^k=_`j1dUQ3db^FS*)iuQ^nWJQ@)iS=#2_ts-GX|qkL zP~So8=9zh!pDYT`x+3yaeRS+~+eaGy%ac8fj6hf7)>r2Wp9Mw|eq%m6XeuQG7=O(c z|32nyldiAQELn>u-b0&+hsXIohL)Z_{)1;XLm!g1zCaU``eHggMQV(m&UXw0Q&uXP z9@p9{d{eS4X80F9^%P?-Z85iiJ#YU>1ZMUcVT4-jsK_2uP!cU-Kfp}9wdQk(pR7BDDxf|2?LdmZj*O6^W7f=Q zd^o5GyH}Kv!K1XC)*OiUY^r^`o=%&>D?kqG4+twqEPjJF{r7u^}WS<$UzhDaRezFeD`bMjNy-ssgO-lrrhcWLAOG;vh!E_MC{+Zay!;- z@CXd8JQEwl_sL$piIYD&jPHDz5$kNC!WPI&;@x$O;gj7bet6_JZa>MHn9IwRXX4RH ze`IC+JWmIY%JXe!Y2aX?PxksOvC(pOno<5?SuI)kJK%UucdroOE&v)Uc z`!~X8L$w69oL{S@74sI~t1zN0F152^uWHRHfhBbyg&3=7(rJjckxxb;)IajMM;nPR z_w!5_e0(|o4v<;x@8frf)=Q#L^nKIP#%my3bRLVk&Fzj*>)km}_~Kl>^})upWuMD! zoE-1jOG6_iB+lN)A2-U$OqxjudB18N9|rNDcQC)VCSy6z?ioGdw3exqt)Y_)FPcS* zxuNZM@8d)sU)~Jz6dV*-<09zCfd7lKw+d@(Yuj*F4QVM9XmNL^xI=M*yGwC`yGtn) z2<|S$i%W1zf#3v+J3&KnciUO(+y6e_@7X-aHIvLS$9VO*DQ*Ty5Yv9q9W`B0u!?Y> z2Cc!_`FAjX&-YY|tc)j1z&Z}s-x*It^jBYKzzaiOkls~1d_Lzm z$?2$8=;VyEdF5T0M+pF&H%NVWbGCoWAmUD+AJ)cZDMfv_SlS8S-KItOUbNWQco-IbYR;R-4|U(^^np&{4V zlaJ~uBowO^K!P>59#z^nY**g*Y(aiBb=9|90zF z?LteJw3SX#ZBIJ#K$w({EVBf(@oZIG>(`ykGh!ZQ!RBp?8It!My6pad5L{QayX6tp z@wW}1{beddi5IK@-2`<>GcjF7ckHmT1z!wm6t95_BbVXizfz?f^eq-jGz$%pT|V%w zk>(NAf&u;x6s)iAkK;E*sv?mM@L-k9_l44-;H3d16-D4c_DX<{qu_VA|M?`}$0Nbi z?vU`$O)ivggN$-ih-=mhE^$!tJWIFf^UfB|O-}6M5~5cEUzwP{Hl;7&Dx9=Vu9(cy zUXkIl{lewT!>Tl~VXQb$^5xgrwO$-jM6e8<$B)fy_InkTA#ygj%HRJ{A0Y2ZKV-J<^@AQF09Az&dxBF{z{nP?85NC&~BQ|QmCWmE9#JNb{5KnK0pygXGD~}Sj z%e!P&MwbuX8J$u06Q?8JKlR2b>Zzn58+Jo$cl`sB7gg$J5gKzY^ znv`2ynn;0Yx)sHnH zG>=qVt4yKS^nTt!3z!{WoAYE6B;Tn2Dg(~~f1)GSl)OXyX*^TSLn&GQ_4?GVVI@u; z-oZe*MK}h-==`#1SDH=JS5HUt9=_Y#i@&Y@*B)QHK73*s%GE;OxK0*-R3N&`K3;foqX^+3_S+KrHr zg+6YrjFCC~Xyrgm@O=#t$iO_#mCeho=dYrdma4vn7{~;3`&2yMp+Ul7nTT+1 zaatByrf2U&xiI}pNL+G*>=l1(t`%C$J6U;TOsHTCNzMJ3ff&XqCL85NokernNafjx zx;Fm3W;}aB6DO*ljkzDtnu`5<+kJbyp(Z@ zibp(~?^6zQr{G}wBLOc&j@N3&?Rcx(*oP*&4`K*ASj45Z)K&3%tssp9K7Cj~&)N%8 zLT|$Zyix!R{%f}$+;^YPjy4VJcFnd<25kga}4L8S|cZ6Rtum?yes z2~wjdwD*g-1iBZ;s(^YwkxIh`fI-pzVdUa^0x*}n<_9UefWE=In@m?2p4|CTf5_mb zu0vBYX`i~r$m0CH6^+L^PrZ`iiZFP<&iw{;8`sJw>bkmwr{l;K2SmNGglrX|jwieA zeCVu6gSAY2lrC6u?}AFy?S5)+=nO-Ir0Hx?mI9stwCTpZC$2%M%MpE09%Y+?)|Z7m6WQWcB|ql>AlW}(f8PFi z&w_=Agj5YaCXh>U=Y5>O0G1^}c)m3%nUr)6AOYXzjySs_@yG9vFbq60_r0R5?3jQh zZZ}RufGYf~&BiMVQP7L*dCu@|X@!l(N20*p=V%*D3i}<3z`?oH1mbb|Ay;WIb;uO8 znAzaBs|%q->P%FKPAX=V6_`$2Dw|Fe3;a`DQa^Aa7RdJ`Fd=-mAK6ePkV&hykZCiv z!EYzXc)B13E!}=95O5JP2=^?UpAykUDr0z;NJ2~fNqj;cjWFD^Ta@>tp`~=03Tpz_ z{NWakNeRrEs2y2$Udu+FeD=xa*GkwhI@-)fe&JGbSl&a1sq6+?j2N`KyR%HK7I%ux zaKpb6iLSUTG5N6=eaVHJ^oT@?rayXP;kW1Q-ZHm4tv30&e2rakINzQR&^?%i1`gAq zFik8=Ag9cmxk&2`iv*y}L7!JW-2bzudmnzO^UU`aLgp^HI!IY|&X_A%G-0 z^rQ??ua_Z0e1&5|oRU&C4!d3a%E~#i;nyE4Tn2|;cb-M9Ld&O>-Q|<1Wj3wjA~N3 zMAAyVSq)@f=^?fr-}G}$7YAw+w}Deg;dm*Gon;^%_M9tT#Y~Qhl0TVQ;A2?BO~E5M z4(y0WrjGwC*2cIBgeXCBu&nB6d(%3T49>y%A97KnmsLj?<$By*2#=fsWXF9_1yTtW zZUksEqo(}EYNXGd4z&wf`*se~%NMGo&fj2;A1R!dGJQVK9W&ZzB-KCLXg+T(s!!U5 z=C6~MUAvI>8-Kbnfk-SBKq-*S*D`x5$>Ge|18La?CnH{Z?E>`MzxFigV)DOj?6J+ z#l>&jw4>pBF%Nm^-`~CVn5P3lN?1gM#)tt=bHdN&$V}L^wR+8B@`JD7JIrtpw>s8K z<&wif_A_%BnR|N2_ieWU&hZMtZ3uDjT*pW#b3Q2~(Q!ObcIj$lp;F2XiX%+MEOEcO zKW~M{k?I`$NG-40Ec1@2A#XTQ`aE683)5g+3dd!WCXm_h1Tb;uPQ(j(Q$fd3V4%?z zbVl4(1Bo>8<>d2JDY1TfIlU_yDQY+FOf#Q%V-N*&VvraJHdwH9izn$y`2q2lSZV9D z*>6lNJ}<5Ps{771m8^S>a0e}6vM7CSV&@X4!I4wRKp)vkhJu=I1m=wqv+paqXB(d% z8+2NnDBiQb0v7l%_r6WZ_bJY2i5SF%$?8osF}^pc8X$1+L5e){l*>|MPi)o*fpEmL z7`r;yl7deyMGNGkhA`4=vp>0oaV&s8ed@{^+n{ci+rsNEEty&C|1l(B1O456Pb9X(ZHon07%X>W<5Tah zW-(PUykaQg+^PU9!OuUM({vmpvy$+R5Dd%vvPt;B>pd~AnjC20=*mc)@FxV)=rBtqkwOAzuo_`FRU-5sj|LUcjzCNyGK3fZHmi+bf#J_fHvX%bM=M>t^4~BSY1gj$tB4lygYKco8|LeRyQvTWMnTKtD>p{zj*V8}q+9dg0x_!!G8(Y0#ZldNZ?Ooi`kLIi4R;hZb zG>+O0osY@FXChB8RfN^Ts)^ZLR?Dxxs8KlzQAbYy)Y%_T{CpJ+ut!L3{qV*=X#)H(ZE z8G_^EJrXa;4o?|Ye+clAP}$Hb84v;S%I@7ZZFEnxj5Pv3cPKw$Wpb`3f>agoEZ$)I z2fkP_t{9A`E#)sy6(}m#*gr<%{14Kq-d7pcpEdJ_DyL-87x+??YqZQS zaw*t;>5MG|*I1Vsu;)4D~7l# z%l>OSK{4SH+%<_oMrD{dg_04`N;IMZ(n~YPS6(c5>WV`Io7CvYY+j~Muz3{9LdprL(AU^FzEOXRJ}O$#1ND$@7PSs;FR^eK9&evN2QdF&pQ=pOA#!jR0DPMU-i-qLiV4H^8`h=pb zLurT_xmgy&7|e8ZX*ed(1#Ziab&;c%HU+)r5qx^w*#1k_ZxwJ(u{oeJwDFY>j6nlG z6o}MZXqHoC%%Y1ZoBAr=i%r8Pm|)A0#)f2a#Ug^u2#oiXG`hn?A0_@)F>Ey0ZFNML zCUNAZ|3Nb=jviXHe*W#q8YkpwP^nIjUMCeUgOg_8Pji)-xUtpVooMn|JW)p1`(xci zVyW6TurK?gf??5gyC69>yGv4K0KLBb;5p0>p8v=3vj_M8BcPqX%E zcB6@5O2rAOSu(5eR^V!DA(Po8Q{X4^oq2}mND*6sh&Gv}SbYZ`R!^bipy!_}d-t{# zuGV)s+^oFeH#BqPX3YxDMTiBn zU%F;>6IsnQO|+zFxaey_`hS)q)*n=CqrCZ+UMHq_>HdAXJ4<3kiKhB7HWX8xD+Il( zHhuL?1((?^FqYo>VUOtlK1Z4p6#FbOk(~&}a+Uxad!PG9aj>@;kwZ6 zSit1OEwNc$qM27hLWWG{)gN2sj*6-+quq>2%)n373mFzxB^#<(3Hq*Nc(8Uljm4;5 zPkPT$?aO$(u_ zqHb>A-~#2bgGrS%YatCO8jH74;%ZWK`n5w)#l9SBfoy}|G=86rBL8ESG>Od!KGw~G+!e<%7Fa+@- zMYt65=ZMY~o~yEx0{hGqsm$~wiSPo%qoQPKM7ht(JWttbx@N*@6X;096?Et8etE_e zeBFPeDCS7BwEf5UaIh5}!||lmlMP-NckXh{TG{qhUFhw~9NB+MEe9@%4+|2I=cbRa zS?x|gmRGxvl5scii+2$6tS>RpE1$8EsOt_#SF4!@@7RaBKD(1ykrcUsz*+R0RyIQq zZp{%C@ovobNY*PlOoq++YBq#q8Is*N(yqGSsB%*|K_f$g@v4+9`#D$F*$TSe+#f~h zQPj1>SCXDj7I5#l#h;;Dq{4xcvoXDHWWQP;bGYPHYkqCo6k8@fK=+Ap+J#+*waebq zNn*#f$_C;uwB-4|=W(gu-5#7BKqtgl)>TF+Zh~xV=G8vhi2*ElZ|@#GPxXPor1BpwD(iy(KY@Wv6XiA<&V^)g0ZGIK#ThOrwF*feFjf)EkcuyJu~nY4s3zF8^M}u+~|@Au516zJh+t?Qu`f zA9=92s1 zLOBMHrsN!=eAyEUBN$H67!dIM3dt5@1HS%{Yu}S?+ebhwf3hG+aw#zSLg3i%i1S4q z@90@)3-M0tmY=G^`Ja5r>~?G=sl?>{CW_mDiDh9EVAuir`u7Q1s%1(z$9EUf5c%0s z0L;a{mY+k~WM^ZW*bp#u|__pU;?C^35cP&U`f@VaOp;bbW@HKtTzOUH}6E8Q>G zFunvme8x$<#96-I=6^oe!mxVEJY%MtrRM%~sp+@xY{#(L5&MHV+wAul%B zia(?sj)bw1ar@jc>o+hB6^6C7C<*pxQALOerW4hO41inhkm-I#vG=J`&UBnH?%|8Z z`cie9f>}bJws+Fps?{EZhr=DZ)f1XNMDNH>ZH3Hv8w*_vs)$a3GIXdx-94~QT!NF< zU~4j%k&ymk%#&yafkW`Y(dDZYlh!1wR@3{1j|_rxP=95@XMu?Wb+1NNx`XO0`-78D zIhowW<3}_s21{xU^6cet%PJPy<*6l4;5+!6cBo~;Lpvz&%@SwJ&K*3`s^XP`E6HxV z(1b@1j_|B(LT>qyCTe|G05wV@>F&Cx+tE9B za<}|#QHIt!szOi7?Q@ohXm6p5q_3mG@3t;<@>F}3-52ekK~ErXuizG0T$Tc(EopKMouMI$`uh-r>5P+A*1BiL=J$Ft^cuuR+4h`>xX|qQld_l=k?x8wOp0l=EGRbpKm^7{ac2QGsA{5vRFS-t+P+QtyN12r zzcf5Y)0#PhZrQZS-cpDMeLivOe51WKs9gN9I}-O{Yp^FZF`Db?W4jK^ zS9`elS?AHk-}NDi8n)4uro30yjvIVU1U%tY=4b0rp@M}{awU<@8`pUbBkuiwy`l$7 zcO;`di9XYdtN5Y$BcE`u9eI#^zKYoTikHxaz!JX0WvF3RH!gem=;+-Z)zw<5sNaG&i@t>TUE~&ny1(C4%Y^D;tf2H!9M^K@ z?W>Txrjpfch1ZJAvOl^j2wQc!l5&{}^cMfDjx`+cg(hx}?G@<#7yM!6Mgi_z>qfS&IO5Tr5%Qmm8_|U06sb+Fm6U7O25bf;ZhEcN`rOxC7J}M zx{JURAi8Dj%2OrM#(1ROO+56FM5@dmMp(DY@T_$LF{F644)s@&7oH5;Ee(+_ zvQ9jzwY%J^)sr67ua(c#HfL$ZdyvTR!Vtc82oT1yO8DB4$d<{wy&>4-8JOme@`@JK z7fiVpR|UM{Dp^l_U@0LWnWLLHs?g@PuZ{0*`JADY9!(cbXY~2`@n)c4A(M&26G%@l z^YrC@ru(2XL&ho-Ds{m6vNW}1Vr{|OF>c25PJ_63O(;9CH(a%LN?x6}{oE&9&%5#h zKfj9XH8+m%HGUfgk^Bgc+9E>W{{o07y?+;%8~FqYYr(>mN`zICex6G(^}9v2l@pw! zeX|p{U;3cm-d0RJxs}m79lhCoGNXMd7!O-6!+zCYR~whFdxsJdGG&?u|GqO2DYNv> zcN>JmqAL#?T_e{Z0-s7zXt$OOMEPEh_o?+HaNHRyb4tfl6Wx z!hz!SzTkFMXABepG8w4-u5zYOxEn3D(UXc3ytzhU+e9RJuQvc1bG8NAdQo~jp*&De z*!N{*DEf6kqMmj?}2pQ|wEmaH-4Z=(D@X@A;*%_ei{m&3le2*jS;I0iXv6 zaD_6xSplwik=t&odZuFGim}G}RSb>3AN$SrT@N4jKc|A_Utg?lCj!w>g~6&B*)Miw z-h@oaB)2!+!LaiPNzBxee5d`2*$Qj;BR&hrjVsdZP3rS{Fv3*ebEWEyblhbIAz@nk zs?ELHO?T2sicBS;%!c!SzNcC;t39<7aXU_alX*|f>A(4Dj8^b7%JEn08rS5TGx{!e zqb#dEe+@oc<@xam$t8hiU$n-3o}VsJv(wDRAUX$G&O3j81lK#lrDjqdV(xsG0KPr^ zGN~+S)CDqA%EK$(d0V%nsO*K$!C_$~qoRepe68KBDI&js-r4N(Geu^-R@@HD@%=F? zHv6IxZ|+~Vq*4`#uG5tf?loS{ut<`Lo|gHBbC>z0qjqlF9eAs zB>$bdxj0t5*KcH;{Y4i;oU)ciw3*R_AnNADUWL?2|CbHex&ALq`4q(i2n}Jc5WeHg zKgRLwF9H&WEVsT(r54rTdOXSf9L52Y0kc76D)p*{+!L(gx{2yDUucb}BBE4o56&l( ztLM`!yR{1rY z|9CL8L4jXat;nfiDUm<`+PtAzyv%_8{$w4YmzI{j6_vvXSRE`6N9#i8aEd@H#q6BN`E#=%#SO3r^#uRYUAeOfYQV49G8ohl& zRu3%QDdI7ki~W044PpQE#7Wd3-_vu7%TUCfJ3K(v<$j|f>l-Z7&7 zMLKbW_lxOp3CNHvvPU$sl7|F~q#k$f1ZFw0?df|w!K65+ z zN%w~5;|aJ?sU5nC_t$1>QH}1v3U#W+DMZcT-TA>2{hw9&&5s840I!8QJIlvQ53l9` ztt%miXYs>H`zBMb;si>a_USCSX=_Lu0xrG1?p(ZsNH{}&r8x6`mOzgZYx(ekJvDzT zbtiupP|ogTcm(_z7Px2+pk-x_stn>%9$hp@O*Yai8oDvnXoBywiRCQSrR8__^Es3>myEvKU?O zvd;l0R{60z^DLBkEIyz8Q{(XyncA9kHL;^lH|O|4YJFarVxJ^j10V}}+J_|9jB?t9 zx>_Fl&a&zcP{A2kWoGvK8|n=dbshKw+JW?_UfCP21xCc0PlaYO^!S%y(H5W>I}#J0 zkMNK=kQ{hrr>%XcV(P<#=h6D_{zAj(X47Q1MLVo#20R{{zONk~*)d!?^^a?o)x^&! zx}(4}PwNk9*LiDeAu@6A=tJgT@>~7xcbg{Yb=?1rM zv|6Fh<%gxOUCm~+G09sLzc?7AvWwQ#du)*I`BD&ZtH)=y)m@Buz5(DS1L`&q0jp~<3-s2I}O zUDmk7zZDS640tXJz_jPgPaX>Kb@&T6Oy5WD5Ix_iXQW3jds*x()^6YCIGea)Um9=S zn>^PPG_l2|pfm;}wK0E6uas3rC_)eT60FFR2deHlo1m6J(nH8>iz`tD2S?b+ez#OV zZIVTbUNvJxk=rKlL|H)JyV}anKeZ|4G;itKO!TT85vr~#_;Vh?D#GRZlOdWCl+vY? zcXV(e*abN$$RIg2`IwHITl`)%=VR|gcX+#w2-8pi`Kq$HH(+y``1zKTY3 z&}rgJ8qvz1*da~FNml-jkK<)UjzJaJVmh@Sj1rdR8j|F#l z=q!uv4a+Cx5M;e?_cUH`c!*g!eJ)?YlAtKSo!(+Xt`O{Zo}!- zD|L|P%OE^VY^COixB8#~a~=X-WR#*uMRV+Tm?u5<{)2`q%lZq>F(_TaFR6=wnny3S zI$(E-N7UxI(8Q7Ct8tNMVHE-le`7le$xc#EJ>~A*23J#%kcd37_u1}_Hv;hLmKn=* z?Ft+UH^ygTL1KWj2p>!Z7I|`e zBL6C~lt|$e(Ei;_l6yib`LPC|ZDo$T3yPZLQrbQ6n~wgrOyN%u-Y9sA77mOfnK&30 z{oO-XRrb|8!)c^bW~6aFJ93bsm+e)u((490dhwMJf6$o?>r2!@0b*=<41DkJ+sEfO2WPXp&f2xMjO z@bMbVTr0-^w$P{i^cE`1lvDGXp~ZXFY=6eyOUwDtQ^WeRce8I-bSz5*qz9qS6cT z4UytDs1s14q0cr09yT)=g3)S{ZKaoX1i>3tAF(-~ejMdOANt29JSDm5sV4!=aQ2)a zOxkQ*3#0-yfMVC=h&aWjtEW|o8fbbG9BlB4-(2xN=mTsrFb7B@gHl_(o#dWV8_}B9 zed%4 zgO?J%-y&F=?3c#BuM9!^R;eZ$KrWy5){IU0x!A*M`w!8574?Q*1~uBA1l~Sm%r~|_ zYcJt-yiF-}ctmH38oNu9cB@XUwKtbqw{`c(gDs}Bus(`urHe@+T@}injnV!+2ufat z2jj92F?ca@jfD4`XM4;dTd-|uhtU2^y^Fv$e6(^oGoBh2E7>lyva7XUTF(tBDYe`( zrjV6kD%%LE82!RC@sJRKpp)kgnaND`Qxjy%=w{B+)c0&G_BbN+uqYLB(ckXqixe?> z8hbPp;+!6Hux;F8l^7d?uBb+f6Nj`EDav^bLMhm>b_Z#(8d-Xf&?iqX6jzHp%+th*LNLOh#Qt1_NS7J!4SvEO21#m0-R45Q$&oyHzc{uNX|G|JO$H%kmGL*M6 zRtP>3dysuuV|8mL6UMLhaFusE^h60Y!zD=%xc}_?;Jl~ub{gd}dz;IvTEk_1c=S9o z^1OGn$~YVk?qRN7ebb;v%728O%fi{nGt6W)?JC(0O_&azu1PHsnS<|^ovkd(k0?{~ z@Zrr=XI*gvsCS}0Ew=j#i1=rqSF7LBy#HC+eq(R)Cs_T}m>U<1p2Pst+)jT%1R?_| zCwtgk`I!dAEpC}#EhK$UvdRS~25h8KcO6wlv5?nDZBchH8g?I8 zeVrJBKY0p5=4{Gl;j8A&Mw2VUYgogR%2MaU1i<^|SGtV~yW_>N*@=Hwq+#yE*W44! zn@Do8_S5LJt!&kyrjLySjZ;i%WYBID30s{ov(_Dbqd_65-=0xGqF_BVj*5z91MEH) zVRIC@^bYd*P7xu*ls7v}d0S4(3@&zR&`o~a8>BN@`KoHS-p8&lR{fCX zWufpEvS%_axFkf2xxN^ymT5zl%$%t)gZOd{1&rlS)|I4hWxp%6NTBQ)r@O3quxl(u z+{~2)3aH)62`l8+Yd$;ajK3~gZTHlP<#yvf^)r|pwxfL1k*_Ts@@RdM!#1g)^(!}8 z6{x3G$-=wd-IZU4lk$~K((gcHjQWWNYWnk8So6^eLhzo}jMp0U?Xwe>tTc0m zL$Agt9c1oaRRAXEX7P6}cgm9m!g-JQX+)2A$B%E8%+P7+*mC8t^MK{+o4tuLE5KXv zpxLNA9Gn_wW|q{Sx}ZFa(rn03f7AQZ%DE80lT43i^UuaPoUlstIWyYQO2~26#Zs5r ze!=ls%*|7*(-s$FlGetvBRGLKemyd!sgp;CTgA#!;z+<_nJcjT?y=J|1Kee7Fn*{y z?zrs1fXkV*MeY>VWq^m(>|@_lFs07r1&{=kg#ni&b8~b3H}ebrwX0-W%0(h zB&a-nh3B{%vYW9bFwrP!&iQB$-Lu-HXFBi|fv6|WySQ-NkH_&8QS=v%kABh|I7L$sX z=LEW3g=DpzwtkKKvf7|xU777I29UHc2I9h3GGVPHF+f=4gbbaxB(Bg?>&>rtfx zkeUQ7cByBnfGjtA^k6@YXDGSRU|Ys30&Z^xBtF6HZ$H-!3VqaXxqgd_owel{5;5;@ zh4fyWP7(OMQ1X$0?=8N}VZVC81bn{yuTb8bZcMTsbg+@exD)WwK9F$GygsyE7+jCO zBBGfawL~ONy%w^hXxZ*PBK6a2Sjr=q8Ty49c@znP(3clBMW_o6*E5$DT4 zer-<|PUoWqEBgIY+RSRY_$?TNTqN;_we|$W-AGv8-Q22HKbJB@-4-o)fbX-cnRN?V z=8F*Ry7hRm?*0lAJxER&(#{ z-rBIeK8ZpT8^$u5=H1+6V7CK*vIOgJ9%^qK)$S;uznsK`!8P1{-dj@-kE36~#uU%b^<*hJC7#_Er zTOCQ40-Pd)X27JJ!G9X0C;}_!rp`c^EbZ6;=dcJ?gAZy?%r>g6d{NCg^b&Lf0`2Ph ztv=o_WU-DnymiC2@&gml2H<{Jeu%?0!;Tm!M!U>iI=-45)5{}fn#`9cOKmYm%$Ux+ z#s~HAwTrtP662;|+yPz=+by)ynGbX|^Fz7+fYIK}91B=ZevmZ$wr3K?p?m6Y_ZP&rizeLLKn! zj)zGEfs+<{WcqNnx%`>_!$y0q!xReea8lvG1mT8p9I~%BT}MPq<`b?CX(+gzem^Qk zQa;027Hl{VeyA2S8jnq)T`5e~fB6Tk2W#|e z!^PYyR38w;Yx%Uf$WCMFY{Wv8SpjNt#wpWuELqHSeu^8M#nQtw!?xMb_JRVpn){{h z;cV)Y2TDDQxTwl<-&*XeljK0A->zv+>V141bFH;zA2nomZmfDLZ|$|Z^cXK)*9fek zeEQG7Zu_wy)PCu;%W1^ubQZ~!rwDY+al+AG*pnqiq9s-Huyun;NQ4d9ot|YI4-qsw zNmh@+!Ep;oXwnOckQB#rU~Q7#VCW^xZyb^C)odrpoMO|FYmZhxoTTC~r9@<6$s&e) zb_-EJCe}{#&@u49Jm+$ZiLq~9!H){npe=tH$94%_`+DBiwyEO^;b~X{>uA~?G3D(A zc}uodI~$H!Yj<5=ppBKr#ty|I!nz?<{xxUxs`=LVVz$QHn|#LvZ|*O} zS(y&W5MGf}T>?eLssCd_d{f)b7WPO4|n3OYU*V#oOC+vABG1le_8;CQ_4^ zL+H$Z@0RBpDkqY8Lj=|Le&Bl>+27P})1Ztl^^|n=`P6&~%uV8i-1yMS$8HGku`F{-?_ zEX+!PYs9$*NXE%xPLriqcN zz~0}sWI580Vb2ZB;5&zmork$jAGW7kK4oPX4}ZDLUrIktQ%+S7G}|)LLhfjE#AQR zM0+fHFI>~{@ZvVluIF2)PD`W_bW;XTlR>#A248^SkjjXz)u+HG6>1ix!aNaxpkV4W zh`**$&b{xTDwZ*#VbMdGvqux*kI{?C-KgR_Kfhy+GiT7usqs6Y98Q;@6J_zVQ+(gs zKJ9+5cjhSFEIn}2Y`ivHubmvU>0s=$1r)t0`}pbZDnB)!L4^L$IuAV?FozCb2r2m? zw$9Uw9K@WlP9~qt+ZzvvlU;gKsiKUHU5D&Bmut80jK2gaN9QjQ8gCnQ`J4lD1CI1o zpVl<=Ya%z=jOb>Qq`Ad(q+dHwy+ChYpn8;C*b&>9VVfdEVp|0p52a+Cu;VxhmNdAK z3M?rpj}_(&eBn8i6X_Cj^<7S%-fsH=hHr`3g@J2@i99YQIK4_4!j`V7MwvF%Y(6x& zv{b%se0+N%S}E)J79^Zy_dp$fhzG&@_dj+U5rX(&Cs)(UfA$n0^T2~IM4Hc_nxcTN zr$vQi;?0pWLe4>67AV)a=s<;v9C4LkSg--LbIDS1>;^!TD;xkD(fC`2UwjA|dKdPV zo3QIgC)IaNzlI21`JI;osfs^ma7p#5rQF&S`dPV7O}i>9wO@`eEa_3d6o8rH=Wncy zo{axp>5buCnriFUI#0AWqEj&!-L^rtD@s<3+%tz z!kc2?r}|unocak2IiFQDBK0l@g@pyqCO5kzZ@5SEIP89qq|PL578&zNiHy$#GAnfPPQLVEKq<=xiiwvKU%=k3eO66M0@ z_}~VAPV(_V{_`!|xP%&Au3<${YBTQGWH6WzUc{2OHM<)XCeKaWiJEudO*ogjc6yW6 zVEZR=Hel(j5PD-5N5rt~$ZLE)TUV{4_O{~^WjqRE@=#7ErgSp*;DBqIo%jKuSu18e zp1ZwhtD+y1-oyTmEr~KfXKc$56c`>2kWt@2aCMk@wM`pE*2pa-UpQZRIYDccbED6^ zfDmUUcnj28oE|Yz_4nLA@mcy5rs1zIe-}lXmSKFTrSE>AQWHYR>7tW_bsBRlXXReg zSNI8k9rsh*#9rL^Lv_RL1^TN0qgJlZ8Al{9$?s5bVyOo+HRO))I*<4dP!Vgm^Nz_$ zp*5FvA`HdNDc)Y^2`{Ur#>_|zm=?DROe0UN6wjiaSdIY4ueS|N(24-hCJH+)`|X79 zr>Bw~;klwCsgswD_&x*iakA&zn?rH(XIA4Yh8Ri|T$f`j?olhDx5N6gR~3D8<6Q;C zrycnpwU%IJz>^nNGv2Z49@1z|G5x>}`T1!Xf3;RIM{ocL<_RFGqshr0`zup?dsBw* zP5o@paU*A`uejVNUaHW(`SeVg?J@D7`qQeIx88iV&KdfZNizeMK?D3r6^Ny>H@-G} znc?3z%<52!wl-P)f;&Zg?j(@jx4KoXrgI)qS2X|QX;=5;)S$+v|1TXW8gz&}%s=$3p`4fDjz6F>AO&OGr`{)He z(!Uqwk$~>#`$C?m$#Qh+wT5#@I*XAd7HEuy}98^Y;q zp^U4?_Ktg7LQx{m=$6-@?#+pnkh7q)O<#O= zOKk9)ynN3U(`b=b{Vksz$0}qNz8`D+oc;$99{EddX<#(ZZsMx+#b{En=#YH~b#FS4 zm!L-}X>UulK%Qr&5|8I5wg%&kPuC*JRXF|HSr)VVpwef3^I4&t z^R1aR(SYvCOb+5r7RL}=LgETA+x(aiIUXcmHbiCP2zp_-35^_U@P7ajjkWZ5JJ%W- zkH?akoP_41dC-$~^YMV>AVc1R|L6|5y&HM8m1$5aAXM`DP2N-JhC^DdmK0b3NE&eV zEH~h2H&5oAGT-RnT?WIUJ4UA%F{Ki}d$a)V0I6&`2d<0y-lY)ic%|$*bQOdfX!stE z(-_l%NcN%zzP<3@@-Rf4ke;C}ZG%#FP z){wfOCJ;U9{^l^p(Vt86)#|;mKOH&y3|Vi)BcP}s4y`YK56Am8j&)=w9b3`uFGLNg zlpE+z(j#NVwMj}C4amjF63jv{_cpeNX-DbLU)oI^B)ciIpqtL~HRsQSdSJ|dVn+5p zu~bC%iC+*cr+J~?A}c*ph3T_bexgh>-zKN3u?g65qa-Euwq_!Z>5b_o>(itgi^lJo z+7;hw`5#-0Z>!vH-5w9Zk10&+0M1q)U)fD>EL?XM{XguTWm_9<+ph24ZK1SC32vph zTX1i22~wbFf#U9v;FPww6%9_&;1qW#4uOOc+>2{)*Olja-?e_l%C~&Uwq=sJX68DN zW8X~^-1HphmRbQZCb!>7_Y#^Yp|QtTbl)vlP< zXIB%IPru2g3@b2gfISCzyHi%2k`&%1-S0;rUI!2|pq)8nrSB=?NXP3p6xo34Rw{44 z!8nWVQ_51;bb0?)Y6U$fn7xii1$o#rezTA4T&CiD z5F+GBoKH$THCQqEr-$L1SBHFHP_j#@aBJZ?5dImbR27O`Tw1i<7ELL;kqmxadBnOh%T$d{$u$yl1#+3M)4qt{B--pH- zR&BIhai1$m8$N1g2uG<|YLxaiD&3H%MQJ_uXrZ{BP~2RWeU6rD%SEE-6FGV}mLi~= zr;Ev6HFT!widypL4Zeeb!cG;ozb4jYf1*BsnTY9llIBTw088I6Bn5Hy6p>6BS=A#@b{}q zeI@>UFFDT)F0mmAEecQ`(CfW9Q>z{E1CqU-*;BN zEuPoBXW!7LnCJ?|?UcCS&l=d@OvU|Wz`f&I7`(sz;p-cxbl~5DUT6R|QRKrrG_d_h z%w-^L_p7H1X`Oq%eQ*k>(~gN={(H>S=RmG>@hDqx{5sI=)5g%>O35qlNLq~I$@)%T zaO?f=7lc;2JB19wHIDj3FG<+t;^_~Mzplu#*Bf;gSrY0;IP6?bO;5ykK~O$B#N%i! z(f{;1h@}I@09CKJLH2mM7laM?J4$^vySxwP!0P_?@;!sJQ7h8yPEA6o$0G7RY2S#i zAyR#R?8Ue4kc6IScEvmA_~Iq#?c<+qT1rmf>v?te>p=ngkDr1^H(n4v0X74d8Ha-C z>pSd}b8!5Qq3`L{#4aXg`n;1X-kk%oM{pWG{9;W)b+8HEIR;97)=wkCSqaVU~^J{zOqV{50A19l$Z11!DN8RS2fg%9-^ej z%oe~G^EE>%!!ZzwLSO|M&dg*+4z9-0)E@0oVEiia{fR{f+tssBm9?EtwXdxF)E+aO zhEvAB?><8LR_HND@aagUNr)J&VD4=;D}7-FL!NgAw0CH{p8OE{?x*2)=Dy<0g;dhr zg;B@DrsR_U360dlFD45fBc+iGE495A0pCXMr|Jd~wW=1?Xq!t%La7`tvzQ?IJhB4W zj(&vfw~}N14`QIR6@8h1-rt6OxX7OZEe3|Xp6u5uq`^`zLd-MSq1>gY+~qx%?+TB$ zYtqpxxxIdn)iS-M%{|gneP3hLN5ypD3GQtXF2L;uuT$XW>k0Z6=#KD_LCnt80z?{l z+bx3ZNz=MZJSqM*Bbm=n1J(%lqY{PK&8_sC#dPi~rOV_M(~Vc79L4p7Vn17M2-jin z-l3tQ0-GjdZL&m&^M_zt{7ux&`zDHxyq%={{Wu*de3pk*#$BnKCtiM4^8FtNc@vV` z5=?URip&s0`H?$pFOlOn8aU)(HANb>R*}4acNQz%F&daNiIH_b|6hxdk_%2W zv$NU#tm-qT!+|g>n_tH=z?FfN+I$i&BmD?>XD5UX~@|DXWQ&d+H6G*$VkB8FD`;l|Sq)S@?@|7O=TUpW|C$?OWxP z5_lD;yq%fmZ}5@c4Ukst$KP3N?%oalM!sPGFE&vD+LTglkM`B^)HI5PdXS1{lCYcW z@!E4x?<*!9?XI&B%MVcftFs{Op8>grsViLIq)po{??0{Yo^X-~*&(YC z0a|{kDYsD?0^HphV=I^>@J+HIM~H(iNrO7|bCmU>zZ)8hn7a%<^Oc@&aPISSlb#c{ zRWB?`oN*mi&s44_#3tO*<8NHD(K#bW=(q&Q0G#F+wIqk*ofeTd*Wz+zINs4k>+`y1#G9-%!vMQBY*<)m3^=%4VZavuGat1 zlpKB2%>A)*XTaWW*av;GTl68i^iIr4xF6tZN2A&b-Q0jiqAY!$5!w$mhyhn!2fcUC z$27bJazaKH-IoZmg;Ppw^hbsY1}Z;WPP$zEJ|e!BevIv2_E$W<%w7+vf}fUdeE^iZ zkqbxL$o1s;>ojnxVP~x+VYErsEg*O|uW1IT46?kQHDJ1d?k-jDEGjM?PtbyCb0-|= z4BxstZ{Gj6{}Ov6YWOdMx)Z&fP@BW0Gg{tf8jV05wwpJhJj^v0T6LZa z!bkJ$-})FfC~A32XfdZ>11pC6VvlC zz|n@ZR=_(rm8!)&OM%hygn*tg7STVA9B;gK zwWrzzE9M1qKXtjd?$w6JM6jjXUijzZF8WoNx1L$3m-$vKno)RC{^{`M*$lBs_^eBy za$W6Wt}!Q}m$t%^5b<)k7Z~U3e=!4@*q;gAME7o{aM?}vL>+L9dhmZR;$#a;k{s=P z*_r?)KHeiZcE8d&`t4zNjU;nKw^E9=ZkC)wuJCUtsLg8c~sFy z4#UPhxjnnqSs%X8auDGv8(FGJE6{?Od%(zivT{|<&rd;eE@>Z;N3N70^1g4Vz@*Nn zfxahz2uCQ?)#9AEf3jH3K)F#ljC6ukH?q{qkoUcuhs=eWZoQ-WaNHtOwy~U%+&g&} z>*4ZT;W5FVig+6t9^hP)Nf)raH zBuDpWVBe_aZwy$_~_J~O*rTt$BcU@m4ru+r3RQcm|`fW z;0qU;l$gzaJvc#XtPgZzJq4HNDVu3rd|Le76dbUv<02wXWTgcS_#xUk(X1-q$6xQL zHkVA>s}+%9S*wL(#7xii;D+rxsi82CsvWDuW8IT`n1QvA;r zhkhZ>K>WLNC*VKhC!E zAFG0eZudZ9yyeH>JX4*5;L>s3W-l>wrc?h>i=>9-wL;VxbzQ__-mGy0W7;nDXW!;I zPge0S^6>_cJIV4_6{e;A#rz7+1xi$^Bopg$G-F|D(;c{lL7Zw;`G9-ytFZy$8lUgj z_kLczs&_$Lx)WCEzP$S9ETlV#Jj|?L!sMep@G&9cb=r=lzRU~p)|8#Bxv^FaT7)nI zGtcKOL8|_8SO2gJYs(7cnIx6!ddPd+eaSQ=12>$JExzveaZ}J#N=to;vg%MTV>jQ{ zG`y|RrWpGP$KNqe$~`M;-NPE>`m?fyjPXs`9n(9mRA;1_<~2TQc_ab6^L8j@o;yyt zb4)a+Zdgfu8F%%jGA-I}OFb_5>CV9{bZGd}T|(t7$2NkFHaS0_)~8L_Th|x(=fBDVVb?+bL_KR@%GOz9$4cTx zLPN=XF4rJFTUiiR&7c1~m-Y^8JSAI2_)n6%|HXR0unNB*#NY+hwl<(g$p$pD3ekkE z6xWLmbq9^#Hwc*lUrA9rB|LWgw)`2EQ|VkZrNe=t&Gj8W)e@bf+sgyRmPY=V@{ImD zz>qUN9I1!4V1NEj+Iy0BL_9@;P?@_!=Gb5xth9)ZXXS_Nwfz^-^F)!9`P5zF6z6I< zSQR26RdYZ89?7BAH6JITqD(YIX&)|^>|&$nSI%rpB|juruC*V3)W8u(165;eAUUYB zQ;aIZ02WTml+Lkg62KV6U`5JFqd|(1t(OQQmhCuW9^U88%4d46@8~yI+i-f=x4lF2 zS(Mya%g;@`8Akn)ehV6bJNmw zsPV+QbvI$s1>w2xb_ps;yGLxQ!=U$XM%I-19JfOiyu$eC+V`h zQS1sSRUjHKn5a@OyrTK+uH}hW+306TrK$^U8h6A~LMw4YKHK%T7#!f&r|ps2E}MZV zrU|}q%s{Qd)?^gfWV@;X`gw6WxefFolLDF-sJ4mgw27lEHN}S~E55N=6f@A=ef-y> zc1RSpZWtlX7Cmdbc{dZc&F4vee_#K+yR3mn!Sj+=N>$FItVrOom?^PJJUpR`D&JS6lBclapl8zo zr?)Iaw&ck(T3Y%0fygmsxzn+$y=Q1Dg`H7xe!ok>ZmZaomFRwQv5eT~fxj#IB%IVv zoyPX7!@bx$Cd>HO2RqtQYTzlZJZJ8dz+cZ66&!7#xR}A1`eIkH3x{$LFvW^c0bOZ1+_?9rt;e1a z7eb4oE8J+uTMKkZPqt0*0FE_^)ienm+9=@Jg7(hwLCp2|k`cA96oG}hZW54@pSm%k zoQ45k9i|ERJ7pww9S_tNvx#gM5E55Qp52QOM9w5E^3snp(=xiC!^v{$f5<6YX$4djV zg?>K22*zbmri1D0+>*3_40y~9<$R9JNcA34=w37Y^}DmS94o#^8-|%vI@ti4cV2Jv2UXo0*@+t7m}Tl(>v; zMIw+0elqq7t7E$C!?unLmKt}1DB<-0N zO>eT1*$y-GiAFF0f?^4z^}xL-JiRQ0Se_5{>{erDv#>;w6SG-_@TGafCfd*NRK!iQ zmm}Gn<+pzgtAn~lbWGGr&5jed%2;8o6Ip|D}yA6oQI@axTsxDx~)`q&6Kmi<1fL)stDUyL*(E~yb?pt z*Lz&0#ww5W=##mrV^I0AP*wxnQlHs*F5ZmU%!$7=(DpC-1ij;>R39AU9iX3m;mmK4 z@s_T53KI31pc5RkN9OF#q1?Y-ERV}NnYvrpU-L0NMK{Msv1n#bg<1I~m=G`W2t1b1 z6w?l$HA+zTrBwG|-Q-BLee1SdbjeI{e<;Ps2dx`_gk`8>%8q66!BZ)(Lml)KBR?Lz zx8iZ3n2}>;&rxC7QPQBlIy3Jl75?K7SH2kh8`#rI>m2Iuzv%O-j9avz5Bs%;=QC;P zS=>~DEj$JMZw}R(tupT`wTTKXE zn0%~})ekD;^<`p&^<=nl0R<0X4U9}$^0aBh+H@~!@DYeD$TeJ-4Wt(;bHLng(^Z_u)x)6MaTQt9*|Xy0;?emCj8%r#_r3ym3C zvDw|G-k&Na1vdUGm=c<3OT3bcrJv?s+(=g3DrT@UoF>&qwd_BKdwDqj>*xfp5@r*B z5ZT0#?l<@hnHkKt`=j8JaU-3e@G!eKQ?I3@Zi0iLR^~;@`*tU(r}F7Ys}r|#U6S($ z+hjdwgSs3#HOr+;wa$2cJJFK@ToY>weR%;6zB9kP>$-T6Wt`~keI!SHiu-$WL4GqD z{`85zw_g!;;_or}w^sRD<$EFD=gWmOb|-`50%^1(ZWQIHe;aIn-15z>4S1~Kka0+7Ww-7)*GkyYDD z+9WKeUqt{+54G2XyJ-0xOx?WZWutVYPy&x6nDl_MqNM;mIX^Vf={ z^;F#iL_8jX5~4N=5COd@=AH_-pmSd}v18m}EzVJ@50n+KlO;=0xJDKv}4 zqx%exo1ks`Zl=gh1hI+*!?PBVfHIsw25Rit?b=WtVr{ecU+jy2yIt9x^L1hDAUU=Io9eM zTdXb!Y>vF#*bN>_a%>Oo+3Fr@8xS^Nq$VFOrR&sm|0)e-=o22g6=}*NSXS|&3>Zrt zqPp}Dr$1a$BZ`);_h&4m$O}ef+|m{%Ah&^r`ZSp6J9i zPGmi`0yJjK(rS1_#X9okxlX(26|16eM^72Tntx=Ayb)impm~L#a9 z)qz9OUch%J`n+)*mfe1OG3iS#yy2uGM}$_}=|x7{WxoZnOMSFKnB`PPg^6h6o6+eg zRQV=j3QMG|x{3VdR^*>{`&OucMa0dZi+B~IQ55kfa)kx=-mQguTX_2}Xo&<8tZt%hxK>T!qoeauJ*U%u1|g1n$FMzw{*9k%jQg4T@RR zTWGzr(&Cl_?@2<85%aBNo+zG6(Zi>Z8`?VS)fjRgQV;Ik+1c8Q+6unapBCIQmOQG zhnN}L%C@RoMr@X*XHI)sGqS4#=h;kQesgu&B7?)p?6}JZ-k|qOK`heGJ1TxF20(}! zrm~984UgOxtv=nG5+m3EQ7ALR#5iD!LO@$6mvtxZ9qBliIhjyl7Xht>cgsJtBsbq9 z=}F;RJjz*BlBx8o{9`HMJ7)q#4eV;c{#Bw!>tapPoKjZ@xck98Gs^#1B$tE#3zvxiG zOb%7yIVu9I1*>xC7sadV0^*^N!HC4Qhy@j#^`jB+g#XrumrCM(x3C-H`#VKSXvM%_ z6l$s_?pNJ=r``6YFMN7ga&X46WbW?WU9kEYN7t}R!0&OMj=sjuqk%5kQn!W>|cNUQ7wMW9!M5+&udvV@Xo1iJv=x(~i?4Jzd z+q#4AIsgINoyU3BNOHvORvlGST7}jCw_+PE(un+Ij6i@*JiIyHAeD=ck(#3K$6TL} zYG3@s&h7K1zsc}LySl%5FG@275%w0)o>K+XpFdwif(f5l6>LUYha^Xzy}LlrC{O34 zSMRsH;M{pyYjNpjZv9j$`KDOY&5{EB2ogVL z`Y&V;&CTnSB67f?irhlhGBJydrn=deyF~Yq8qz@d;0Ibn-dZl~N_o(Nb&M^@6a!ULM)F z44~dd3upzP^ff0*-0SF#O1=g9pIVgzyXq;|hD3y3#)&cch&~zt75w4z8oEXIt36ln z>-7vp1Fgy5Ti3J$N3!CjNC_4%O8M3Jc--O-Ny4;|7N^JfD%)`@ z(LE3OS`H8F{7x>#9+#HLPX5EIR*l%sc4TTe&deZuN$`5NzOhbV*=G+Ya_YqLXwJJE z0EjU8loh$$#!QqVe09}xdHv2f(X@XM&Sh6C7CpmQ8!nk9(wx`iWyjF2qGNH=p!)24 z<|gWsu+-JNO6bMoX6>?On~tgVf(pGBv!kWLYNx|9w6y;-*&Q>`3=!*E+zUvAWK^_Y z(TrO8d8sNzPg&mc^;?%VP#S4ZD)>EfNCO_OcdH1ZG}bZ~l$wMgald{=Ia#<=c3vnQ zuiWGdz3L0$JamJ!-h~55{D785&*I`?()kR|iPFVO@HyI21zREi>le-M4T z%r0(k>bN{2JbNRagrt$&o^*Lpc9+mxc<{@zw9B0DjRrI~%8%zpomN%v*kig_re!8fc%UhG7P+c|ZBGcMNiU@jS% zB?ff6S61)04F4x3*#7u!zc08T;L+_Yrz2bKbnDll)@xzQU+NKfE4vp@qIagBToS6L zfww71YuEXlrHmT0x_AuQQ{XBMXaF`wM58}&;Ymm(4#^%&*Y5f*Vin4^I$?jh^>>8H z(J=7GI8Nztag5SekxnOuJ(lu578$vaxrKMFYcPKs(p;L~5hP`^ybe?Y7W>7pmUst6z~ej}Qh&Q+vZ`>?4G0;``|xJPmX>6R&P) z>}3v5@xU~ryP2MVJa_!o7A1J%}`y!RlUm|C^ zS+?U2H<~?|<6qk(wR!Ftd$m5RXvV&vrwrJBt7DZk_eCJ9&0q^h8emwvVx`+;rgEuh zMD!2ikt~taSa-F|IGUI>&&RH8XnSr>5Uf%=s)`pUv zs9pDSdZlc%$sd)}gAV4D;d3Du==Rj6^?%45XMtvQt17Qn;KAr}+WKf&It8bDFj(tt zV=Py`DNl(70f9sjsK;SQ4D5@rc`UT;&f@!ijkftV{qKcw1fdyJrIbImH+9^RN(xGY zeb;R6X*PY6$U&XSbU#${6qVD|Ta;X`o^VmqbSKg%Y0xw7wZ^iRJT^m?2YK8o)&3v6{RBEUy;isN~}xPIYw->8yQIZ zJ`ZzFi>MC&qDHz*Z7O4WthN*=WK;W z@&*M7pD>G#c}8K8xodWoB)9LzGQ;ckghTJzbu5XW8J5PqT5JE@W1wO~t~^UFqID!( zJ98NrqMp?{*o0C>WgyQsY;X{s>lbFLwK_WxhC7k*d|WPOC!49<;ohr}T*bHpfHuwX z5&7u0ogxmX-YiM#cRY?86kIdB_#65ZT(cehyk1!$k}YDQEW<#==LK5KGwJ5IK=sng z`!;O&jFZa4pZG~@D6jI(L4)iTul2NAi8i4R5G!+049bVn{g?&T_7Vd#)yBa^81Jtu z$50m#)4vH*7iu%T%ZdkUE{_58y~`YeK`bn$tLvc@(YA-Vg*$W?AbpNiW3@p}g;k9z z%gMT~v;8GW7LD8}ML&sw5$l67azG*8Y{l+1y|^+;LEQ_}R_98(?~P$*_JVR#XgT3&^mC z5|JK`+Cg>24RXUoez{Yl#o2?v$znO92{aFRuTe~D*ee4z)#mf>6h?&NI-yKcIs!fERMf8=sP`0Q~b=Yq;6HU8w1dw!MOgXz0#burHRS`%x-C1()~ zM*}%um*Y6788vA6&yrYVO5EM=pIK&~5Pq?sSP%>lYd>A0N&j^6+n2r_zK7Rgr`hhw z462l6vh#Fm5vpm&@J#;u3!21C<3m(EtlMK(XTFb}K~<{V!?Li1=1H=#XzSHF^{hMn zw`j+DS?Ekz_REGj*J63ox%l@fz9i%KC%+cjPcZ?FdgDNMa4x)_Up(;)1ob??wCw99 zxy>l%HVHaO)8PjbAS;a)3_od%bt|*R$ZOjGZtjG3P*1mK16^dfTNfslz*n`vrH6~l z!X;_u(1!d^OO?t(`;`LK>^7IcGF`0t%@1g4uS>dSnE3jsfU8Z<&6=`PN8Gt6qDiePB_1$Dq#CqfV`$cYu8{ zvrq$|m$D!>83=CEhOsXl#`XubG5n+k$nFXnG)_;Hgk%T{d$v)yFD>F~XiamCN`7V2bE;OWAKFk$RU<8;w}dP9HC1TmD~ILc8r7`X zLiGc%#YNRz!=jfB_PfbY&@ODVbZG-dHi@8ChMy|3H!{hUx}lj@x>6$}P4mL`WI~9!g_+@@@pz1SiLraKWumqI%hgf} zvD#)yHLhU|ltKze%jt5Wg_M8SOeMqkyLVC6k2TvyQ6Lnl#pF zHmT3>6Dl7TXIyeVd|+dho(C`tiHL><(t~VhRqrZXCh*hQ)e!h44#)8g7C##@3U>$G z@5{6FMv0VW-8(WpEH|BUDp!r+?8~j%+=WC32O2ujcWYofK!*0=&K;wAZ;(&xaS4;K zD8@cF=gk~Yn-WI(?GV0JNki^|e+-*D)_fS!5&t(5VO^pvs8Hsn&z0B;QT%;7QS!;7 z%K2s#LxX%|*OBdnUprx}IufplBQ4Q8&3J1_L1eVV*r%@t`QU1!d6mlp2T#v8GCGPS z%mR-DkXH|D#jQ?S+4EJ#sB7By-(jT?rqV;dhoIM!mG!OXm!hzEh9XoRq}t{9v&x-F za{H4HjQ2bXO5Q(RJl_amu!^Q3hE@BcvuY*+n&M^^t=&Vn;hPiDuj&8Yv~{?iBbe>K z=yh}|g18upi4joD{c|Ern65<{#U8bE@Gvl##krGrjo7lr98P^d!eS%Wd_9=l$?IVyEb0lmMF&*D?4AF6M=|VremuE?%eT>BQ{fJA2{Oa zV*U_nn2-2efIjsvSxn>bik*v_{Fik|KnSeX9KIWA6lnziJC2QKbGIOw$=|}u&gZjy zh(V9m|K~Gt>%l`QtzeCLFU4ECJ-z8glVPZu?}1^5AM(F|(rpRi8BNvgdauekepb;v z@57*qSfptbcl!T2b}*#+H<&%H|Nrhk$o@CKWtr0}W~kLO)y45MHiVbQk>WHnj=JTY zqL;tSy4W}B#P?@7FU21nbY?dUTS zr?l*~|0RfHuzrvH1ZlQH7D5z!>7dk+%iGFK;Zl#2Ll>l^V{uJ*MYpt#1M=K@oR%x& zlZ%j<0DEW2V^F8V8wGcaqaonoa;E%$RaKpES^D(pgfy!@^VxxgU8bwtPb~I4&F@pj z^A_ENU^CS)g+%h!EIuYmet%3>m)ZJrW5L}4jY_S-Vz5_&0y8%ZFC)C}*7$PEf@Gwr zM!mXP!{tVo<~QmscC~q2&1K{C{4af?LjSN-Z3y|AU*(!yiYgJ3pe4h(!RlR;FgDBd z7NT)!C4@GNzweeZBCUjAGRwPmHk5%Y>uldst3u00mxV%EiaLGv8~kv>?5xY^6JK+k z$K`Fu|2-0>i2r3?rz#s&jaZq zmX=Lih}?3%^wfvYg&2+(PB~r-H9l6`>Z3>vVnDzzdbNK_5PEOBnTD|%rfO2Wo#ySe8hZCqkk|?h|^YTw^?-0#^Cq| zT_m>`Z94{?n9?gmnADOh7Y~}UTuQZj3nz;LgfsF-DvUG5o(Gv-eHh2(NNVfYs>jD|^}Q7z&yy1>z6&FfWhZS8Ds`R){y0Ih^kQI9W1* zaC@-`&DPay(eH>j!PU!Ve4-1T@obM&0{WK+8J9MDne0SSwe{q1ca@HWP=gAO2NrZg zghr;hpGhDbW{+-CVUTAw5DkRaYW$CWL~(0*Etd%KO{x-9b;GsYXiF(gN{iflmD^iX z7{%MtY1>dhuB;NyqK=A+i6H_g3q`z8ZSDV}-z`6*d`3$Kes^z1wFsD{lAW~rZ zEfCMS9H;u0Z77`Y5@{PLnpR*buikusUTgMHXG0pqlzQqPn^%FIL&2W{d@PJxnI1HXeuHoM{Lz2U|0d-dq zO-N*nTW4JL=*;-(pFgF_5`lJW#;}qoJ@yvO$55*3gQ76HEusVu|20>%&4(yv0iP;9 z3nYshgUKwL)Q=k_Vyc9CuZ8CGV~x2iPATOdVq+%>duz!tK!ZOhUgpg!aB>`>Lj2rI^N?qS+^z8013*--9xU@;HIVVF;YSJZ}xm~ z&*#D$3HRw0_`7xg3c87Y+ccqP5PS}p;xAgd^uM@Dl(_7E)ppc9Jdpv;Y$r6=H7uWL z4;xCJTf6pnzOYbw3NJG@Ag>F?p)nfYOl$z*d77^P#l=46-Ocy0iTr)tXr8F-Q7T^D zNs5RPjV6f-;L$Ftv-tE)H~P)^SEz|^1T4oleKaH5eEnEyUzv)+=!`)s5lH!c>y!** z>Y@XiddS>x0gxJbJ7F%zNdD22^>K}3YFb@6Pu*hum0rP?;yhxHle&0DtK%3mFr}Yh zWgegQJQo|rU-n+g#BakY+wX)en|(6aUKRPb&e_6nmgh>PmY-Im^G@uVlKb;e$l5bM z4cGwod79@oDHLIz!m!>2&M}UJ&9vL<=%ovAjIL?1RILYvp%^ZzC3)3$cL8ojz9(K; z5z#a55#L8979wK)?*iM2lx0mH9?R{c*IjtIRRq!ACARDPa;%6m0!$=M#qw^`s(f4PTS6Rhfnyeaosst!rVQ|3>0Q;x zGo#_{o;(z_FkcS!yLQOSW8-nVXtA8w;mj{?Fe-!u%Q$#Q-Z283G0w$Svz;rZ1!S?B z`aXKkAT}rH?B|**Ez%&`{1Pj)?eR_F5|7%(!zqQZvp5-|HEps*^dMxOUs5DCfQVxZ zW@ka^X*yJQAKc55<_-;7&=4?^6L7JX%O$uLdb~{9mQ3TbP~b(y;39cq^kt|3XqCqU2-ePnr8%Pa58k5{7yHUucaaPSGSbahVq^ z(QlW>1o$Q7hj!7J&<%;|^!`eX9bWqq`@8tY;SWW_&zPg%bgic>Yu#*}_?uKwNruJQ zOf*G+_H?o-3j;UnBUME+e|%@-|Mr~ad z{i)nCC)5t|znYszKNklPUwr>~=DUF{cD^*o?LqCP#~iio3$;JTTCKl+;U~mxaruLm zZNZr?fWV}ivLRFbI`H$+%OGSKRq__={E$8{Ny zEX#2&^$RZL+m%=39xA=)4V(%7w#bZW=ZhJgi1FWbaVye+@{3{tsg&z)`)Wesb4b=< zK*?i?Z0>2+*qU;Ahjh|%g-ffo9sPRpduzu5ab0z*xoZ18mt^Tc4FMO6yJ^}J`P?EM zmF<_$iPxb2%X-MB!Kr*_DY}ssV$qKfk`{mSX6r1LOhV6H!A2^=)m<7#)~8U(A_cBsP8YwN?LA0!H77XFKT+j5YU}!) zuOWq8i<4%S2+r+(f#rSs8sZcCqI}gGDT$=Zx1CISJ@TM!tMB%cQ4?JDD5 zzv=qy9rD$*!TPR{7*M0}tHIbKz4NfYzyVCJW)6F?L&VW;`(R5Ex*zkFwLc^4ThPEk zES8x1A~QJ3Rw~)z^0(ENNVZL*57E4)z4{OKUFwtLe&; zM#^%e>-C3YZfJh2y!^cOW!JOvUQn_PGIr36Iy>l$Fy_ncr6!k|Wl8_zaiWXQ6mj$t zmy!1fE4UG$})*a zZ$&Bn$oqxOfg1n?XZ@1=#&%vTE~}SKJeHZlk7^Ovf0kyo7Wm-}F%3I2_?+%bx`&&!E&oyo?^ zO|pbxx&elyJH63A1qc!NY&|{~8aryIHtc-e!tqB<0geab-%OYG;QM9M#~N)T7b}w6 zrp;1oasmTZ_a1pZVd0z0jeZ;)Ujql6F=T;=MVfh}MNG|nngUpXojdIRJ=s1`zcCr3 z&Z>y8_DlcvJ#kzgeJvRx%`+q(%3}w#q`C#U^%`d@J(Yb@>Sa7E=ET*tIH2~gI;bcF zQySpx?0#PFPG^L(AcDj#i-r2R!9Dk7ed3;eiokGH&y{rjl8Q!qrTkYqLN*lT?g27a z&2AHXZSPOb{AS9|@-PC}rQsu54peC$xo(CdrhIcFa*5ykVu5;$^J{~ZQ+k_mF!!s* zm9cg4xmbhWksS7m!K%HDOnQIrEyflamY$_VOz8${=lNVq0}$3MmTzpP$%O-j{3Bs; z$)D>pzj^~kIe+%;$?vqUle5(374rA*a`q*7CTkDcFAds8p8<$ z`xOBh)ENo=0$*Az7@fEe^?mv{>lQEhbfM(bP8O~1(RO8S#UY&DK7Y_S%#ZQ?WXJo) zep}0UOazm4b}rIDYuE(R*BQp`Br(@a|9{UnDE_-!Atn~|@;^^Q@0J@?P&G?(DVR}t zRG%`~o^`qruke~`7Z3M2>!J&hpBCe?zKgCPCuo+IQnLghvWdvu*o@ zreQmZG--f@t_>2e?fL3Af-Okv6(MPvgy>YK-2emzLd0Q`(>z|$;Hyy!KxB~LEydLp zOQp*<=ZUJWp8*;}1xA)r-Ryl7F6c<7O6Btj41sK#ay zB$tghX&Nyv6OTD+H{0(dPzQNRNka=`<_d6``z)#Q* zfo#3jShYc#uNI`Qk}#MGUd$Z+-x!!ktNrU3+`jE9$rq_g+Yg^wGZqI95(yewz2>bP zI}SANRw>D)c0+Gv?%%)rpQR~FIxI|1pvPmAG2Q&6?yHz_n;)Ahv3c>3R}+sf%okd zCOF|?SWh)1&H);dA5$tFcwCXpd598BN-D~&5sgggoQ(a_QGT%g9!l%Wdsy@|QK^GJ zad&JV6FaHs{}*48`LoJLs>pSx{B|fC$t|$_o-)=U&xasUWf}&(<(!hYu?rl=xS#yM zxvIyNBRF*lNj_ie(eq>VjxMB1qN^jM`war9iub))6sq4KCTlSRCuZL3TuayGf*79( zPNOB<@-MTnIs!J3@sXnAMuKGmMWTnxye6bTTq2*d#4!Va#vsh;x%OC9jatUfw*onF z-RvCFYn#JI+j2c0ei9~X^bw_7t!-Wq;&P?OL9+v}dLU|7$FP3foj>tudYp2iblvk& zIQ6&^k9SezyCW7W*ZI%T*)q_^zGZ9|H|2Ks|HIc?2DP=e;ljJ68+WH@aCZwSP~4$F zi%W5L2o4q8U4jR9cXudO+@ZL;20iJ1&&-+meth}0k~NuG>zP}xTdr}6C*4-jR|N3g za#v< z4!$UnL`hK`9s%(HE#%~=0rX)*=Z-xtDB)2I?28fotZIBBKZ-&)d#Fu94EY&8AZcF6>g3&$9gbL5 z9{)i|(g(%3s1P?3arA1{Sjj$GYf`6`){7u{n#}tq+K8pSW~+fU1|_q`By$6bi{_nA z>m&8UDIXP0-{C-1sQVnMX@}gM`B89|XA!B?H0;!|Pij}3LtYax-1mxo661rVMkIXK zQy4`wtimcsjVqb7ZKF{qhB=s%_V=~q7zUN=TXVF>8TyK@a029Dc#+aDRuhMJbtP7itOVw7!*A-{lWm+f2 zO;dV#LbfaIJM|KFC+V35C=OCy)@y_lgk@2@@UqlFMfyqUtotZ4rQMMo0~qJap>iHB zSflml3~#+%Ev}>cp54S4jj%xU=X7h9(`Ej(LHk;QwC#=0%U(7;O13zUvvV_6)}XWX zkmhu@GIC{LVYypU=UH-rM1HEt-N}cUx%s<1hTGEeJeTJj$Ktb`hQ^Yi@fXP|Ai+1vU2|O|Nrgj z_t)OkOfkeoQ;WSf+6U}a+GMobLE+IYd6oX=9DRe~i=%NfP7ms2^&{A1+w|V_n_og95q0vcga>k@HnGXVn zdu3eY$tQjXFKLW#ObEm(40tS*=w>|vLnMB}V8zCD#0`tUSH_BfV{1Ut5eZ&+vxBtoEyMH zyY2R!OLt0;f&<52xBfZ{FEadPf~$|b#T@X_gtP>vP1z6}9V61ga<_y+2Ef)~x0qy+zpxlSA}Tcsr~* zFIYc8)OoZa3Hh7kyfOo!z@NEg2TNIV4mUlqi^bVLKP#E4c+k>F1F-0N&dc7P zZlFIF3##~i$aM2-qm*W};9eaXcO?=6mm_^=}^9~8SoTW|u?0dWJU22J!ao5G_{j}I8EXO_Ns}_o% zmXG%S{KI>bUCG-W&*nOe5a;E9#VB=SKDORK^|XlHr;}d^NA?0A zhS?>KU5lKHY-R>N9BL!XqFzOj-j|cgU-{&d)aZ6j|JCFx_m6+665S=QQlN=e>Yj{f zG~8UF9(6iqF<=;8l?m@GWo1v5e)5Gvqe)atXy=6XTbg*;I=WbFoPgJjTD?{u+^k-U zb74~Px-n*Ps)%p3gBOeKq-X6&7i;dRq?4h8E(KbjC@Tctgm^wmUPOR86xS)|)DfiC)9klPEaH7DOX0oP z>L9xJV>6V$SpRXRVF%}3dfSkasAz>DXwaZ}VA-2P=J_p3M7^;Bmr;1fKw$X1po?&v zY4y>I-xTc8(SMRGE$QRTtc{+qUuMi71u_wznAO%h$KQ9XejD_P^dN0{-U)IlD2zdx zvTZao9{0=}TzhuTrHsUY<4`vgpoC(}1D79d3SCX2*6FKOfI@C!oO}_C=bUU%Ng5#(@IdUGrBP?xfLh~$I6tJh#`MX-? zW_i9%t(jw$F7~s++v79&e4Pwf#Sx+S6nTnN#F2vN%lMNHFV=6#S`@=MS6h{|G|30V{$LlkTNPzUc}K>N4WdCYIL-Y2|38n+=n9PLsYfDW>DBU+xZ zz%hL3U;R#XFPC-(qmj)%uuD~|6(;cdXMqA5*$929=w$iLNnar877idIf@M05X{U6$ z#*}h5U{TKL#JDHgZC|J9ZRXGS=L;s$)>iH3z6vWE(w3bGMHU#`xY3TrerO%4Fk}Y- ztB+E5YfYl6(uV)j7Xh)q`htZ$mMX2p8_i*rJuGPm9$=jOfGYss{owE!3JeIhX_@+c z{%+k>t7|**B|uV-PSA&krn5+#vhoY-UHJAc9R3}(iGEacFxQvuBWnrXvH!RDxA{8+ zB8tr?E5oSAhfPWfDXj&+hDbY=8=0`*;9rDES&_872Z&BN3g;eB#tbAoi|AEx@gY=c z-wSRx9Yxdq78^am>a_SHp-)@2OT4E|LGAQRS)K^JB0d>E{$*BmT>vY?DEj@CC76BG zqg4(owoR?M57z8p7lj%=#~qp3u7x4y&q@gX4yPQDv22Lce%jRU)VDjeoZFY72o@j>)fn&N(PU9h>udpy3IW=fO;##eTBma(f%kJzjW>8 z;O~5*d#Mb+roB~=limJ{P_7K4;gcNB6s!=5iAs}8tbg|#w#h_xIV;ZID~-tbea(jN zpC|6*%jEUmMtDEg`K#FU3kyIplT1vhmjxeI@V?XaP$3$V?LgzkF0&kznt2qBeZmtf z&EX?G(kuhCoGDS$m4FnKTXl5j>u)*v=dsdY4Pa-NlSWbrnKET$F^SFRv@SZJGHfn5 zmJoOJnJnQ%*^CHJQ}stL@`>huVNs#iBbYQ=8>)&H$^Wda(n2X0Ys1~$1~DQy`t&fe z#u{30gnn)Q{IJTp@`lZ#o5FSPFbh;P9Xh}hH(4~?5;+hX3vaJCMw@sc;|c{ir+UPSO_BP`oHTxH-gfJ*@tr)F^dj0H5=S*ATrntAG!+wgg*=66UWY zvsreqeCJI}asgfG3gj=?*u6xz*M5sW+Mikx?Q-Co3{|x1$;krfm_m@1c!>&@i=N3so0NW6 zbmNcDe6QB!aM49JFC7k=L|ohI{Mr}Oa4l*zEqN8QVz$2o##s)?79hESXz8pK0qi>L z`gwDPdh-S2qHXdQcs}G6-LLOpt?(>01GBQsrl{<2sY)c*vESc)Kw49R+EjHtf9W?`^ z?|(dUKjJ*Krsld!;;uepEU8}@kZ9DpPA#XN&~Iy0%9AMAMAsAB;Y@QO%NHbuZM@_yL@hM zF4x(A?ZX;ZHid?5%oe;sQ)GUk9veI}8-e%Iu6~H27BX6Y4D_{`?{hAi z556WB`5`x-XKA3ao*o!zY0ysy2(eS+ZN25Hw{?TS_10IB>2v5DK~S}zAn*%smWe_Z z*kh+;LNZIz7(tV({*J0dKr1MESnZVd^OXsyCbIINOPuXB0l{ z(V6#dg2Vhzaw;Rxl7+>Ap|BwTPtBqf`FvBAk)V=mKCv%v97s7erCZqK-T+e@igJ~~ zdf6uXQ_Op@A~g`FCwY3~3c_nspYoFl>MzcV^|B3*6{9m!4zfZn`WTm7iIpQ`kx*RW zJ3L}*yt&qOt7c!)WeLO{$xWGAI^VTA zkF=#rNzg;@eiBz@dweF$b#2z`hp1#jwf_lb=MT7Gl7-9gg50@Jlh2s4AHSWI@MmkB zEX`DCr%6YGxILcUV+y-s+r%8+2qib7cm%^)G4_B`Z?6gP0F+0`jgT5`=m^){)*1;ce}g1OnOmMou8rLjQ2Cey3w)A z0oVcyC?A?bRM$H{W)W%#WdxbP2n;D|&c2 zY14>m5BU!Ef=3w855OA1Ivle^j4P{ROyCu%Kd)^zsv(|}{Zj&EBL?22QXLn}u7 z->WPAV3?vX{yQdmGVvJOlLh3;EPr~Hjy8NIorKd;2S+a4i0?##T;=%n@_QRc^mqrI zM>W{P!Ks?93|AT%yS8mjxAX}6Sk*q2%cyO*&lOm6+y6XpqjBHOI!>F?YTA% zp2Fj8%Lv`Nk#DQMiR~tXT+Lf#4WhhXTX?fJa`&cuUr5AH2;JcOV<@668yH~DKHaG1 zyoLktA&2jzWNBQfa%}X~z%IqS?l2HcL?F8Ca^Wt}@vT1A1*j@0l%SQz+t~YXj%^}( z{Z(@D5Wc9dyQfzWNx7CFJVjlO%R62#ku@`TQz*`9I*SpC$f5$GvyRszO5I66}FDa=c0g_*W*=*GMn{&H+I*I@81Yd9H!J^YAqG7w z7zr~OEtwb%NWq?r&^q=5$flFp_qETm;j7CpxK~(TvMJrGKL`cYNuz0~7N{pN{eD?0 zU-Cpe=@#W7l(Ej>)}JYsLRZAULHTaqFnlKokw|dhw>r}{6Xq5S8-;gXo2H%UtX;dR z2G0VI+RD{S|y9a^w>9YQ%hfC8W@fR#$NQH zeyyVnyP@W3OKtf4YzBq!6_j)Klgbu4APnOihTVYKibNWxA?E-kQ8xqTzX!n)`u89< z!)IyxcH=*ceG%(mn2K0Reo!|kysG2w_dbC6rM+lDE{0t`z#^mT52AnFx4Q)V{=Jm` zkona3@%CoYGprLKda+yGz{c{-tg7^S-rv+6SEa+BIhs*-BzX-nHB&z5%5Pcu;w<7M zcIU&QeV};Gr>A^Xs5abtz#l<8=N>P?QsaM@aDVcS4npwvSNP2^QL#|-|6Rf#RR!*7 zfIVLuwj6C#mDHk5nmH>yfkbL1`FfrF+d|%m!M+o<}J(tS3*v~3pEr!g%fjlaEsgLZZ zq~wrcMc)z!iyr^lOGKesheuBu( z-K=baO+MNHc&yGhq~_pj^{Wvl&ci^DrjdRnkYLje{=6~kQnKHGKI*n% zxNuCG3}%i0q5*plX=to&Y_UG-i_VaZc|3IHP(=Hip3VWwy*CySjLM_wZJW zc^k+xMLAgSp9Y~j|~in#x+QjxR-)nxJ=r^&dO@;Vm7FM7#J)deW_v}DHK zLIa$&NhB;ZzM%G4k;*-HRQwpiMcapS)EZnqV!>@+mi|+n7-UW=V~>c#zI1I_Dx?~X zJ;;?K0POU7Tgwn_wmrl(s?(5Z(yhGN|6|;U2ix-%w=gN%XesZ4+L!lg{$$rxD{ju= z3a`Psh7QN&EWPRxM=_oAJ6EoxCuy|f{dbf!Eqn-@#w43V#fjmsgwU;2PCwRMX;!nv zf$){;Fd#J{xvFNPlj9DubTm1~lIZt;k$jrSm>=i^Tn1YH3gks)j^q`O45}31A9OBa zIO~*0d)8$8gV18F#g>`A)#3GWpK7qeNSc%X;vOX+WK_JUFSxpKQ07Ukf2Sr8b zO5D-KNh^iXfMrjw^oVRx?;{51EQOff%VvoMfkqQezRcZI1Hu-OIlwb~%X5)Rj z4i-D=m5HpPBvHalBoeO3FVm>1hphsWW?mV#4jqF>l?}%C6*f?GhNSBj)0iB_x4s%Y z6_((R(bU9b?t}aDF-k}x_5B5q z>hAmPI!{vd7w*`t^5eFbuqgL1-rS30Qb}6kYC*umZ$|UEiJ;SdThrkOA&vuiwU!OF zs1{pdRxkDm2gzV4$GLS$*Wpv=`$Y5udM>f z%A$4IR=NKk*S-%82^;vsleX#&<~fUz7+wq=~{;-LyB-XR4UUhCut*n2M&N7K}l zjc|h2p;(Z_#+Y1;gNNvVr^zoDV&2{~z@W8O#IcGRVeVqgt2(EzSg93E82C^nIF$d~ z5<~b+64kMGHtXcXKS!}S+B4tF26CuVbv}e)A2z|14EX2g8SneHYXJ7n_mA)1Jh{Vc1Wtzl)wpD4ZF=d zjLGdAa&i-NB&EcrARImU7|&2S8T8DRWg+XdT%C5K)6)I5J2N2w)Sq~Y#_H?OhDl@( zkj%3QQ1w2+uT*!mG0T65Jv8(4L{jpS7ZHj(rUxjZ6X$VO3rd|v1mmTl|Do!LnSP89 zn}kRjhhV*7VOH-r6Y{FJnW%Z;D{7$+@Wu&kVpS9LynHX&nJ#BlFAsN%iX5teNhFfB za?bLv!}!6rsECKyq?5Sw~-+C!JZHbl+tT_cTTQS zdMm*=X-0Vg`Io`jMMGD*(N4ZMawA|6rP}%y`CQT{S6ZF-4H2fx;U+U-d8W9ozQQhL z+c=xk39DH0g`rj`_ZT6!rzR(+lbKxsQu?WO9RG6x_j$m-E{cMWpgpt80tB)uj|w1l zp~TXmNtRPjK?F`8!#h0uO>BO^$ynAAs9;)hJ_Sg0x{-w|W2{HqougdFZ{<5L2(*ci zbr_EO=19>LKyJo3f$x$Q6Z7>nptZgk3qVG?9{;Algl88L`ib<1p^Mn<=VLe5J81^A$HuVgOAEW)!|R*F!Q)3cTE@w;zrixUJg=yYBEKS>xWIQ% zt1FCQGlX|Haxeiw^pBE1!s13{7v<6b29NmIQfE*c^ME; zI|~lJIufXMfxTgu*6t(9m-Bgp{vmk41P`23E7r8!Njs{2s*KWEZH|7RZHS~W)7wv{r(-1E~p zJw%AianKL~P^q7yYD)W~d3AkK#~zbhZ0%Y6tm~u0-%M&{aGN&tNyfqG8Ro~#j3*4x zDfrT1dz#aGdnK++qFN#52bo3$LEtP>84aFX6-q=5vc6+=7LvIlK5`diUq2gX97Em+RfDbSn z6Ms4}mOTZdAJoV4Y`XLpMfWy!phO}@<@7+8dv3>4%9$2aqD^1!=X^xAsk>ECjQ#T1 z8Tk}@Dz*#N7&kPNem?|ii~|3#Y}3%L0ekafJ&QO`kVh(LQD+bOV!l#2yO}LvWXZO& z;iNzvsv5>Ec#Cv@zF!UEHom4MOvj+%9Jto){L0lBVSKu@%0BU96dV?Q6mn|iHE(qDGZkniRa8kA2D_2aM^alEBgw(_cLeV!zW>~MJuwBf_ zXsn4gw?=_Oi7Z6G+Wq_D@lQb~id4+1KB@)B7S^Gty!Qx%{8XgdFPGg`wi~$N%IKfEM<*pQK)9u4ZhCb2<8@@$PMpinS6yuv;1yBlz z(US{!%C((DJOQn9chtT@pNbvXAU=zFA?7sIQ-h18Z)RPyK9w(4w#Ca^0JG_G%5$DPi+Zkma_{1L9{ykM5njWD|N2&K5`07BZ4Sr*xd$n8{jI!UmaNMiGo0EC{D`=GE}VE|qIx-T&Gv zGD%O4m!|k|qBEI|87r@*e@-WS9+>vDU@SMMV4)<;pqICPvyipOo9m8^r*4cJsj>4kM5mxdb~| zeQ^--gVMw+%M_~)E;t#Y*MQU_F8G7|V`Z&ww!5KKCQK_W@VrEd2hwuhzn58c{<0E!;frx@n}`b1h4BZf8UG`Oj+doQH=L^Wq;P&*EfKIlh4p?If#22 zY-D32VgkT%}&4;|#y*Uyj_iM>d25MW~2E^-`e z*})y}iPv)Bwf8K}JGk|PBw2fH1(wlcFf!p08J+qDp}BRD7&13`l1lpG8;=_4HEAYO zH;5s@VJou6D0!(*v8MI0H97pZ_b&iuznpuN%*~L#=(U*0y&`L$0MK<`q*7**DY?%g zZO^`PF;lT8!z7*LmgcO3e#+lkWmT%9X@`9G^Y=%OR$<~X4FJS0o$>;{3!OjvusP7-_aGPlV#{O7Ey#;biSFcq0RR&HE2lUej z7xlk+@+&vo%L=4a361szt`EL02w}2YiS3;EXL}ua+MW{~yi8j?fu(d@wa1JE1dsXE z^iaqsbu+$4%1=KRC29@g5Ng19CVdipC3Geky@3xD(KKBNZyQ+j4ERz|D>ZNpYv!BH zV!RX*VM_u1iNW(NK?Hv7GkmKaWv`GV1siJS{{&PcGUj` z>j_QB(vD0G@9%FHFJwz!EG3pRkD91|H7p*}9yD@SYTGgUALp-HMacnsTaw%?@2!M` z^my^iaNKm1ojnfKmojwgTDuW3PqM}!2KgQ!Z;|&E=#x*<^)wgkLDRlWunQy~ZBJTt z_QD5UhDFB#VXE^64jGPB23FL0A&{t$VFqLU{CO13YUR%r#2x zAj9|SC{1?JeT9>z1K5;O*C#ybg5U%i(n79Qe>6Y#-=V{UeLWNV1Mi8Xo7S14$V5h~ zZ?=f1n@M2u*XAAWv~LiPOsMrly#I8`>kT<+@I8ewmm_hyPMe)dhx?5@(3+zW8a;x! z?&7N){lwWGW>_U>cfP+1_c1odc61iuvG!A1Jmt~$dBOx-KvkljQS<)883^F+5NR91 z?D7rIg_Lb$c;%644h2T?;_pMyuQ^MF`oJ|>0}6?9chGOEA^VCAd_$--tDK|77xLZP zhrpy|Tghciu1+;_ooyn+(eLcW{X|Y-*uzK+Hw8DOiRx0d0^UgOQ0?&+MFL}s{z0^6=OoX3>#5>nM?$1Nlk3!v@m}%!d@x?8g?cZwb0e8bW!L*ErxHt% zG03h#-F*w2%P9z1;FoaAOVKJ(v)e0b<1L4|e6sR2=~UMEsyC+-%uiVae^WLjnQaS+ z2WlbEg0-(O;U}Tx#EkrU|GAf_rk|Zs{E@-V@Pf9J26E#>JSWg?bFNjw+N=<_JDnbJ zHEOvV?I3X~wucgxAnHlG;ksO1fYj{?u_Sb!p(S)9ytvyHno~NH8kzGwm~j)DUh#xHRc=7 zl|tOSvG6#efSJ9b<$|TGfvG z3r1T^u;T=`HoEBhf>x&F{ZbXwj*+xx8$~?b7GV#|9QViJ6ZhBCDzK-KiTlkohoNE? z$#4{Jpa~k??yq;udsc%*{T59ukfQ{52u%_3#Y(a zSJ4#OcS(Dvf^S+ErtcU;MhkM!_pgpGLa9a0=^5G)kfSx-|GF<0Nc}3$wXvJCJ!j++ z2CZSG1aaIBI|Ka_5q!vSuwX`?R9w=B7$72!@4XJ-T%*B^R3R7}pUGfW)C!2qrwnb> zo_gT%QcCZ=)a|JlrPd#1DP8@pi+s_9WTCCMy%u^<4_#74r!ku&(18PVK6m{6aia_Mtr* z6dEnk`ve}_pL2TKs@T)k-ve4?8YjxCC#)yP{fiRI{0~epj==1#@x>iczOTB;SrKP9 z2st<^vwL9TE9J{SD0rkk(~$N}jf8wbG;Xm}$-KZiwDKkZascR+OvH(bL7XFwQXqf5ZgJ5S0N}xgZ*XSEo5sqICp&V}Q z*nx=Q*en9TMkpSJTjixor^Im^4nxPp&P$aSAZZ8eTI?H(C4(Z!lWt(Qd};9fMNc5~ zu8*j5(Gtg4ayznfG_J&9s$}_Hfk9&ocJ&Vthjv*w&19-C9xE4CGiZKm`l%T%@DFCo zBMDDu>a~_Eh#7(Je5r9r(-Z3H31nP3qG-b5TxfE9=WyaU6tsV+nZaU`gC#;b8ujx7P-)nejwt z*zNvUx{@zclSuBrFxuQBb75%x#BE!cnkxEq+Y3ewVNy-k3GW>FDFiSJv3nPULWJ6gjN+Ra-bA^^fYctFgo z{#^~`%`;&b?df2_>`FON$-^Gr%tDCWQ!%|~u~aGjA0pNGSBPl(@`i~c`M?PArODZU zY=A>I-QGU;VwkRh%hP@@asa>lBMHGthC$9Y4SX6CXsFRsUhR3u8C{rVm505$*4^c>P3wEC=Jm=vS}Z`) z4!VK)MsslLqLc%6yF<1;ni#Jl@)$=ra^@()jbd?+!p>$ZpF>7@ZlIz1>J9XK4W}Gl zwBmX6>Fu`aw!Cz78+G^KE0!NVxZ~84f?;|Nj)p1enS}3`z6SUtSgyoU^8}`IiO^a* zA(U)CqOU3dVb@0-i~?<>W;Hv7MxigG81nSpWIvsBRUSUS=xh)7BT@Q%4E3{PN-liM zw_ZL-Y)He!jV=AGGcz_DgVJcL^AAC*en@b(%*lA-+$o3u_6hqku+aqZ2vLLDCd&Q( zd`rbcK{Mg7eZHE78@o3%^GRo4w`RvDSP$5-n|q8w?DGHs%o9}=7}~jtmaOu;@E}jx zqT%@q{HD>xdjRXOROF%CQ&akd15W?g?$)yoj5s%@q^B~?Sbo5BAHZWHOya*|A9&LG z;pN%Fb(O>5oF^4x&d}K8=G>sg%4fQ?W+R?Szf~uVBGwjOoPVXx`D) z?b}34m|T(P2>mh7b6DswoV=y)-1aQg?Bf41&}eVLzxT(_$CXx2DOR#h=+>x9I%Y@r zNqq(r)9%J#^V(iUdgb|-H7IYYbNEQNMjUmNv$F;oYDau{^g5Bt%?S~#!UJPz+&jdu z2}OWtk*9{7&rRGkOQFj`oyhA2f|tP#q73C0eb|>+^9GS-?Xajs!u;O7pK!4><*~LH z9{28facM8!+H2`0sg_}-GU-8q7$)_shfPE%0*9V2f_)f&4JFdB7;4(91S{qA9bqgX zgsF5Q{wKhHtzarmUxi%suv2htcp*=%uDjRGfy8>p^M3OaZ?MB)p@=ENoz?B$RFstB z;iOXDU7<{LahVV}-n+rnwuTiz9GC0U)Z)PP{CEvDgmY8rHKbdG^E+BDc`4_ePWv34 z+czjLb`4V@#3IIH`rt+;U*QZ2 zclN#`qz0cmdR4Tf98TNzSYA8c{f3XptaND@PI63ET+0SY16~5F_z z8SVz^0?DmuyKldhE;rWLjbn}nq=oVkOSSXciaWkGtkUc^?{YU*l5MZ-lDHmCswXT4 zQwS&5-u~97&fuao(4Uy8mXOkMcN%9z#8@BcXB6IDD7`0J9az}0=x-|Wg}d2pzd@(X zGdIk!mEqXujurPj`!jlS_pJ(-$9-|9RqyFiZ;sv5_OQl#WM^&Mst}l?7fc9TCP;hS zS8^g{8^=!E;MhZ{XF8a2lHN%!UZiio%vh1wo%S3*$Z4>keP@tMBItvqxplq2s%)EN zxd|PwHrf6pjpn_-rf^Ck63W)dDoLzI3#17_{xC7lr6A}ChzWl91Rq#3G3fL|KV-8l z^mdn4)*m_zHjcHZi??m*J()gASu7Pm2xz~>zVcf6aYKeKwyZI}gWC5x!5o=#XRJ9=e)z=Gb@n^qyROG#+^67PK7KZVM-P4W;cQQd- zlhC#*$ZV|)_eW4;rG_-+1(3^hKwd*XK3i-Afes=!=eDIEu#bgUTt zjfpEHFk5aRybi-|9z!+LwHsFM>s?W-S`cnyk3Y{ZJY{eQuv=g~5p5sEPw%lGGj_79 z`K3t`ZCc%t*kFPEcI`+1O8`cw=YAbA?=tWHG_{M@ZqDLiAB>bHQ6{V*BUdiLf`Ej3 z`~^Q*zs^t^A+eKNI5WvFFNEX*boJ@Kl%DLrPQw2czy0Ce3V$sDJaI$q&&rmp{of_L zQpxZ?nEk(-PbhE{z=3!NL5{>jC$saN$~8@5;og_06PP+kPRV=8TZK-dBjQXH?Drnp zAv%`(Hx29r!T%#etf*m&DZm70-(_G3?_^I0hu>bmPG5>v4rL&Y@{>>tN*x7D%j4Q7 zliNIu6QTz8Q3aH&$WfEH$JN0YP9zsPR(}27q+(jk39PyuMFQBDE9;%+UBlv}!&bO@ z?0Tsul3RxbchWBxpt_?BB!b(jmR1P#stv1&)}@N=KfrE&q5cDWj3up8Km5JXhKs`a_J8vT47;iNYT7JL~tHi~b&2Rf{=?0mW zy0!x`@l4$h(8V!r{<{)6CVhGlX00IT&M)=j@Jhy*%J*)XYn$c?6s71vmowZi$TZUG zKd?b}O?76Jg;B6SlpF}1MXmGxQW5417h)oMOF}=svt6p^i>sm%l!^6%rx)(K6eEC{ ze^`QnEzXSUL35kr`ff|g!U2uKSFIP@QmDTylrLlmU|!<7?#>RSab@Bg&vcH=(;XZ z;s2BAO_aZhVoF)cwb6n@RPKw#SkbyIxn_S;OS~GDGkKv3h50aGBEww0WFmjqRDMs6 za)zhV6CovHy_$-2posQgvPoQ%~{^MO^SYp6oVu2TEbGRE3}X{AUl1m}<OJ{s|`3FAg1hDyLC|QT&8-Uki+nXuJHWVegJ}7*D|hUuEBR33)7iC1YYV^+c?yY z*5XsPA#@@lnJG;(ZSX132h@=v_hLcYDH$HOCwMQ@rq=>l!*#1E#J_qrNO(+z_qiS~ zjd6r7H_XZp%H1hj3vxmRP>+C{^%mH;$?6%P5LINKR*#AN*^@rH+{REZ3Y5JFXfvC^ z*{sQw8=hFGJwVzAE=un(c#@45F#Xw&GBT09qZ47089E94X#4=EExdh7rY7cds5tG3 z$qbR%!8TvA5(>9<4mOZ5Z9iHG??W`2XaAK9BqQBoB!c9+0vH@_&X9y({YeoQO!s^* zC6Zh9{l3W3*x2`?vo?-hTZh|k004ljX8x=BAU;fOD}-74$fBK4mzdLZu`E5f%r4;RMmLu(|$mI)jjQsD%- zA76gBrqm}R7*Utfy=lEd1qDSKc~u4;qt@eDaBj)p?rjbPDq3;=xbZ`gl=t7NA4$=x z1=SXUvwc!ut}}dp=+c^~g#9`0qj#-Hh|anq$Tm%NzFzjp8iD$d8PSSp_5QIYDEjor z!f$x}TM34S<5D(*2AVM2BfOW^Aqfgh#vbdCrl22c^}uTKbbO!TDmv}Hr8M3b-gq3F zf*`w;pPe}n{TLbU>bSgv`qF-{5O^#squ9ouKTG18rLW*;wn@R_wU#qH*5 zPplb@iwlnb^8wNSHQ%&I(0&E4{#m%kye`woU>FR0z})O-AU=s%rlb+_6_%({uH|8+hDJTsSQ zy1yv+qq!&Zdt`Chh}_~_Ig_p@KHhw0ufSv$OWMO^uKm9y$t*I7%!$Qc3Mq2I!rRh6 zVi!nT7ZwYFktG5J;C5-=lFvkyzx0V69{}?vN`j*l-RblYo)(L~U%}0aGJ-;#Y@W4q z7QbR2R}^Zn-ECM}9}@CyUrG{~_0u4UXsY$s?)VOMKgxj~i17HVctb^H3BbumzuXwb0KHRBf60!Z35Ej1xj!ai3<9 zJnHhj6SF8oRJok_CjOj%W~J?omoBv8GWY?Iep4Z?Z}dOu<2na%ap(AUGvpJ8)vHiX ze$8h)&ssm7D_99lEO%dg3NO-KatQ*%ryT+}9U|e%_3!1#qCB_x>2X?Dm7#0fO-s~U zeT|y?GC1iheozzN^$?7n&pN{VRswiw&v|NYedC<)+#QbMCob3&Rh8|`rh|Xnz4DJ{ z$^W;Og%muS_WvTwi8s+AQ#h(J1KKtLGwMn1sd}E3_KjPUxS2IV2_ra#y zsQE6xLn6NV;@QG$*rnl_De-jH z-m1qWbNi{do7ce-&ZPCXq(8m2PkUC8tR+dK`SB+WM66cCx;3A%na;RG=7X^=7g)sY zL!%zm{{eSw@L}?E$nFo{77__U@|px1M*X7c1P7(x-P#HN^LK+cy{qs#ue6FhKb?d8MCPiPzBd?i?|J$kSjb zA(e*t0^hF~1MOKH*%9ctl+lOySe-k@;+ol(v~#x^ z(!>=FPQ98oSyIJBopu31Ia3>WuEVG596tQy!x6U)b>bo2dezBIF3#Njkn-KG=3ry+ zNAYazF+4Oiw>~^5tVxEKXum!sfUVr4wV!(6v;$$-Sh-*3&&qTr_bUA-vxdf^W$6E+ z@hMd(%=2TIdMS2^IS+q0K`F7ig)tS8baJlrG#EeCBcYGQr1;t1TL@!~&a_h9CzZ4s z+3im!l;6ecMSSFhA8HqzVpxnhc6DbimL0D3GZnwW$2vpI@!}T@>J4cK?U7w~C6Zi@G+W5G1$;x5C{$K;afbaCdk25F8434-UcIy$W}C zg1bxM{FV3nM)&Bx=!?Ftt2$$!b@rNT&S!DORP+X)ckd5VYG70k%cq`M8^8A0?zeF{ z9O&kwRg4K^jY?=C1{0(=Hx(1t?+N`~5u~8C#VuqJHdLM6Y1JLxZ{6}&w+S1^WhFsg z{xa#X{oycbRpH5#xyBhi_rd&k6@i0-H%G>yY*+;*4f~D&?RSnMp>L)CdZeI#-}?I) zJ#Pky^=a+Tky{#rKAjcj3bHq0X zKkDCZJ(q#`nX79=EHslX$F}+P6B}0;9v2oG(LL76`pjXPF~{V}+sZ~O){Q^@@Nl>b zw)QU5QirCaVy!M}JZ3X#zs04TmICAIiOkl)CAE{PNj}7e% zkqzbx%$cOlQu}!bsl}ZF(MHqp@1*gUV0oHS>(X8j|6dw@w_~G?(<5LC=uo6<4_}@m zoz$Ln%hLt$TFKs&62ou|hk=T0WRQI6&3pJ|{&hyMH+0r!=cQw@%vLXMEd-+p=b(#h zJghzBrb+!14v|!P32sbhGiAhm4J-)7=bS#YzvT>kmYl47oJVlbpMRuzgGnr1ATYGKIt#&*< zrMP4fXrmNk{pb~fpBAD3i>2%e;im0qRfAz4^wtOB;CN{dIa6bY6&+R|-{CUpf|;eF z$#~zapS(Y~nAGxS4m=zgHESZ98rN$Z;eGwqV|1NTA5thV@E1VfRaYoIwj_7Xdil++ z+jMBbu2vmGpvw*V?ZG!LAnm2_IXxE5EmVy!3Ixd+6E8pYP$SewMt zPbWZ^fZ6_f2_5IQLNr~*1kYzm+P?>K?{KS3zE-2MCCgLD>F)%(PLzgGm zS6Iy?ToKs~nd^9yu$ByKYt`iXwSd<~bKLkKb2>wq-~U!`CP%UJgfQOs4B;^)wum8f zS7Zkto_lLWSgP{c4*GUB%P*y zne)>_zJk;(5~T~LjE&cx+c4`xu7-YtQADTsLbd;o(bPl+%~Xwn2Ul!3;?Ld8Yx0Ot zgr+1wS~S9B256ejkB!^W^?H2f378QNBUW3sMtTvnPF0&w3t4p#`@yUrUp^7oL$bDp zh8nOY+Pmnd;5y1BW5f39NV&6u7S6&0cQN z@8taVOu@;WlcXQ)c%b9i+cRT2$7`+0?Y~xW&o)R3=T}I!bvV;$L2uTt2-oXn^UsW+ z6`0x`M50Z+oGn>shz(7o@1DnM?Z$0yPZueMn!tlsYb$&QqnT3g5q8Z*pY8rSZPK~r zVTNJe$iAA#^P}*h_wXpy zkB)Cdln~T8vP~7U<&va+Jy&cwO({#ZsY><<$&RE%=8iOZWwE)P8P3~YKnF}t!C%5~ zMb`|YD3~7J&PQu^o%!-?z*Tp}ysR5CL|fl^sD*E zCoPZPwZ`m~>{jLr=>%YtCSvc%#fCPuc<%VGqU274t93=*KDCJW%s$Xa5 z1juRrWF^UF8-g8ywra71SLb6>!0vRo;ToT@-IKc6!xR(>`m%4o8CPi%*j4vXFd$WD zsHosk_Iavux=j27mMG-7>$%v`ArzNMsS}OV!e(ZP6kL8&;vx{nF#Y15N^5H~Zl-K# z3H%!WnOd61+LYn4ea30@mQq_&4Dy_g{KeP|WmmOe z-U9Itu#H~-1!!XaU)tcmr}3X~`2Q&+W9n<2e@&tCGz-&c>6BSSc41a=)$f#*anK91IzLDa!;X5=Tf2 zy5BJyb(v$#LmuF7nWh;VkezyhXDxj>c9&ek@TY?qi_R)8v_Pf~9gK{XMCon5_{VEB z(4esx+s5JBPy7=?Tlt^0ss&?hU)sO&_1wz!+)nM)$tPqQB;zYSZ28nKvR%tBY}ie) z-##N4FEd2n$b(jmjA$R?9Lfrw(;(^vlCM}NkMb?YUcqetwJIRkY544kvAG!<5k>}h zU+r)KKFUsd6%H!q)}0|BQ0#d#>vSo9e)o_CPQ|s${FWh-@G9j+s473KiN)yc%*B85K zzq1y648x%EqMb-8RozZxSGx%$0(oY|7wjw1CI5!VoH_$uwJa&zY`@NO=75ueIb8ZZ zsF4rmL2g@}bGcwOLi9sn=BxX<;TBuIu)npJcV9IK*C^gW!RjD7nfhctror4@^TE%i z0v76mTt&nFBO$wlG9k{RgDOX*T*0wj?A2;U+tnDq@%Sa5-aHYwD-U3!#hJddzKS^f zOK>o9+NA$a*c%FI^z_vA2HHfwgRTrMfas0m*-BC7V|0AOPDaCMCM<}eXKb9h}Ch57zF~bSk4sGP1+oYI3bT|7Dkv7aGp-GW2aG!ZW1!w7BrL zvPLiNW|Z5VzrWvjcqvJ#)u)MG=x78T+T58-tAgk&GiR;gPQSdDJ7zo5W*`02IE1=b zhA!bbX{X!H-|jYr})fcAbMq%*pxgqxXb08ljx&-}A^3w<~E;nrbUP2hep$ zC2_92dR!Lh}v(YDCx_=Vo|Y}dF>Ox6kP;pDmX z1xImxqy&v(67J&T6Eo7+Xtc&=TPKHJ#H8!g@wJdJAmx(%ms8j=QoxDQ9_ctT_;6UR z{vsSyI4Ku*PmJ3bm7~-#e#c=aCSlXjrQ`0%$FpI2!u?^O-)nc5bKxG0LNYet zFRRi1_ytOo73#ahiEg-9hT3ayM?Y)^G6VmO1re@>7>FGyzw9Z1GQ83VR9S!@9c;fb zS019-6h0C_pj7=Xd;N4&_o|^%3Kw#;=Mc`p%JV z!ax0FVv|cET5Pcs!I~u0SaRaZ2jP*));hs`pVyzw?Sef0!1Qq_etyCLGXi;0Z&CHa zt{ikN^fVi@WzlnM&%Vd3W0+iNinG}?-mxaC?W+_&*@4q@VsGS+TkEA_4E{WI@&hlX ziiFjbi`%R}(dcqQRW70N*K`!+veDab+bOA=?^y1b&8{@w`=YbOM^g4HN%-9%WqL6g zwBM=AV&!_+g}A|1p3!R=*2RHiLCb)Oa>lR$uQh9{8^C)m-OVa8&Q!{br5o=yA*+1@ zTfNo(hlow~DaI@Dzpb_$nd<}NUA<&0SUyNg+=)9j!UeAypX8%EH)l@OBWQr?266y z_>HMxf`@=)II@CqLyltTo__QSD1|e6XQL#nXDU9BDE<0%Wv>->d3maYMgQ3MV$F%O zJITxGqx7Yv;&#m}aC(>_?r*bi#AtG?dh(5Y@2GgI5xQwRY4Un{KOudl;^4@rs>0jc zc0ucrd9dk|2n>fBYto=AZPp8AG^Io$Kjt8h(tS2LJpqd5ZHhl5P=di|MCgo{p|^N2 z$U+nuKp?JZ!CXlqMO8u_h^2Hv{3?+*xqop2^86uLEEOF(Yqg_cEvdfR%=>x0e6YCI zKpPeJi~ys~RXjx8^C_Z0{aIev*kc3OPwhEXU_aMyu?L0#F|n}^N@VM3$@{h*AG~@d zjor{&3aFie>+?sDNxV%H3T~=2oYx7%r;}V8bsI#Om$1e1Y1kPk+&k}Y;z!8`G5oo$>u)zwpatXZvg^>%? z`{m@s0;M}u7(unVp!$JqzF^0)yv=LMP}ji=`OaW6vOq}*%y`nFc$>)Z$ssAI_;V>a zi8K3PQ2JiIAaAIckr#WJr*h#cMmGAbvG*R-Om`drY9;K=)HfhVBdO_!8|5M}>#H~2 z{aYc|p7d2e6i@hI`sqjOIfM6z;fnlJW;fuNdYAlaDA{x$tYRI3naj%t`x~+>wv%+K z>vIvj=nDB&7QDCxtxDVNN7gnPF_TBo>J!^{)v=pP5d5rDdgj9zB-wGXNB|)%y7nqt z#H9Ez+o>GQiztWiN+SrnT$cS3{GLe&M9#&hS?lA`F`F59_6LFC^hf68UT-rxo(L!- zx#mo9j!OC@9c(@o@iAHWNNdi_JcNt^MH)SK5nMuclgelMskY)Ms6DJY{APr#Rz2nr zvLZ0?tOgiM8Qj!@BZp*wu($v|xvwn|?68aV-S~e;6BSr{NABE|=V9-QK;i3~sp>RV z#r_q!h4I7H$zt6zD>sShTZY71w>8fIH8zu7$df!R7gPY}iWuj|Q&4ujr|#cG?lqvA z6Ibn6Cg5&Hz|&hj0Kx0*Z#nLB)rXu;)_5E}zX5pW_K^tYPH<~;XI}4^yRC%m5hCgN zuI0mS#pti@O!KuGfmF73skvibS{8G70&fh6y1+pNIi&cl)pxv*kUCT2S`<(_UB^>p zRGxA~Y#pI{%mihrBy5^RnQn*a>`lqJHmZO!xjX)4F6UvQ+Ia%obl{7f0@Z+Put76> zG>Wj_&?C8GMQ%_D4OqN18FA8Y-}N>v@F(I**WXHliAr6Ip~TXj5WPr!BM?IC)`wP! zxvgYewhPlaZg9#>!R%e{N)O|beS~1<<@bwt+{yMk47;5X@qnPl=9s^L%_q^qME67} z_^yNW@ToyYQi5>KNPy?3=4kM=`;dd^D%UvqZuQG+Vhj>RvwiG5L#%N{RZj0$KEKuI zNYQW9Xk&xb_2vn(3ot#yLuFxryWEWJ0CYVq58n0es>p&AKQu`B-G8oWO9~?KsxS&` zRPtu=7<#htxvczHO8>6im-)Gt+jKi+HKSMDdtZ7tdA!HXF8q?MT{J4Xqwrczj|na< z2t8DMx130hws>o+EEVkH9qZP?B)3BaZ6;z`vh}JFqMe#PWRK`r-5iOtsPilMD0>zG z$)-8m?Gw4a`_VtFu|^tS6|G3;Qh1f+K59doN;5WMA%BGG+;*<1symdC%KRnDa6sw3 zZ3J3>rv{71AseExZHtw&A46hWgewM7bs zgL6cLExxG%wfxh6+be0VeN58ibRh}tzQD!knrboSFWbe#O-BI3?_*UR9vU+HLc2#% z@p!BzT(S?U1rCc-#*7U=eR3u#DO0ly zeVOBzZu86MVSDpJprE3Z**3=ZB{}0xp`Z_BOc@^>e6IBS5+9=2s zsqXKBdYm=3A{yCaKb=vHl%9V~Jp7!qg*F+CAArAHM4sJwj(HPuvKva3wf}f!{wk`9 zh-=5NrZpV5BiUrp(R2H;BWVChblW34Zj8vd%=C(ZF)#{GKQ97utg z>19lWgJ^B-TufvX;vG<~cWF+u z7yHH_)2Tu>gwtjmc@i(G&S$lmNO09O=sUu^TvI#!OhS!v8@SCZ&(tz%S%V`d(7>;a zzoU`5%;vwVj%Rj*QUmbVYY=ui4u|SK&o>*n8HQq9SslGg8b#k5IUJ7hC4W9zW8m}7 zel*=v_PLHU+&IFz5zjvCFRQ?&S+s9dFYYsvVM9ChOTsKQV>9b>HXS|q+WH`0qT-3+ zMf@eK`T*fduxA6CJ%!3zKM8F@H!*E8e@*~Jaw#;?R#k(&?x* zZU^S7*R&F2V_u6bmhX=GJTAUBvs!mr0BCRc$cFs4ojtN6)(Pu@v)Zgil`webUthz&59^@`QZ&ZjSSVloGToW_38f$#U zDdA=-M4K5B@m;%tgpE7`W%M@dc0Gg#iY52XYnww+)pZlt2Imc4cZ-!ywg&t|M?yLM zYv#5V9@ltwW%;Y{&F5e0Gl?!PfGa7|{mE_j1o!H``FUstnCzkr0Q2;a{#GK?JQhR(tj#wEk1yAOPbwYPQLo)bj}o&f*I;t z6;n}ZmS;U&Fmjdr5#Iq)SvZdCLG$dQ!&kmA+$W#D$ldaelOMHkJ5&(QwSnC2K8hpF zH4QC9K$6(d+HTbBAXLJbi9JqUNTMz$HUv$mA>wME-w}agP8Tq>v52tEOrHib;^d;j zk*QYNXmx>aAqOn3h_%cF4xeI8WjMl}p?NP6R8wPfDi&HzT!IStp&;%J85!w%2M+_= z+7?H2O_hUzzY(T3D1sgR%}OKGnCQM{3*5Eb&zd-SR}b_VzBCMA@-yV&RpmNZ=h%;?5{DBUws5Q1hC3b9^>qzGV}EBi1Eiz?T_U&O(9ck|6Ef6TcMC%w}+N7JS@j~ZZ!O3D?| zpg(uyxy6y5H~807q(wp;N;$G zE?A6J5-Ip^*77=2Cwyo`3ZYL}D2}}LsQt7GZ*7##8@2y9y#Hj0?isz_|8{WP`j(jX9k@!1rfsfegZ{xt18pYge#B`u#`gyyAxkF90FD&b32Cbrs+ zp@h)42cRz*8>69tgO9HXT;rf@DlaNR1gpLx_Mgjc>3GQK4$Lk))q%*F6l~!nh2)&u zEIr_jU?{TFzqX-buFOQz$%IG+3>`Oa#ha%-WJl5heQq8WF^EX?k~iFcagPIb)HyFE zNxdo`TUTP9=nft$BjodJ-^LO2*<$Y>xPu57RQLaAW2_}x!k_^9pNoZ}jM7elg z6-!;FBlrjrJ$v$b-nt2+b+&SG>T7%e`K+u0`^%u&r&JUw0!jDMwz2a)cB4e;7(sncAJ*l>dH@8w`5)JIfFpq_mK<4ZQzId&8DAN7JUz|SQ8?NR8J(t2{ zkDFOFPTfID-6L2Sb|r5CEB+_1E5$I3s&i(P>!Aua>Aed}Tt7?ZdX&JN1N*G5sEciiH)qmNocX^qb$oO8cktA3`_Sw;loMSd$*3m{?bDOHnIpVG6Oh-!Iu+DjoLjGFh zeh)Y0CGy@?G5#JMSGT-FNj?_J=t7Mp&!H9H#PLEM47HPs4xlweNp)x;TBwuqVhar+ zA^4(Zv^`P6a4SnnK6ll8!@+9aP=rR{86BX*HfeB4x2uajKl4DN6TTqzI(>|j+q{#} zTh_|tmR1!mUh%$k5kx^1wcM}DUYe1@&d=n;Fz{3NmEQ+bebwG>9xbWCFQo9u=mMc$ zNH<#ws&xQ49$TL_EDiceLoeNfa%}k4gj1U2h4dC`H@q;XlX6G|36Q$~cA5t#Gq3n0Q*M9T}ET*RTj-Z58aC`%=) zx}(iApHx>g9xZ%n1$83y(+5L1nJNxMK9ap0GPR6Rl~_!pHjAffT`kT;ncJa6G6bv1 zGXG)nlKSOAZ`ARc*idg;vq(ARx0Mx3mzK_*v#7?HO`bN)vguCQJ-^FdspV9&tuvsa zfy&J*)Ih;0R5Hc`Gf43EHxQRwWK18y*s-?uz6Si0(Te*W)T4qFC|i-(b>59=f_sFU zKOC`gIxKSU@j|wyfLC0>LNK=i5zm$_hMys+u(wXMrcE%r-7_K%vnDuKJVK+|mzZLC zwxD}nnC0C49qQ=bf>0Y-=Ptu2Sa#4niKseVtatcaR{{zuH}pTBYD8Ya7&+m9f(khA zBwEanV^8s;BX-+!GZkd9=I&;%U#_)ea1TaPKw7zj6pJE;OF=RUq}LNb0QddRcVf{s z50)*JaNq}fXE|EUI?JyRUTCPWV2FrO5{vh!2|3%T_>-FGLncyF?XR%BkZ-w1p1-D7 ziML~OSD!g8QIDyLTCnm%QPZ79O4WWXQGH=sqE0RTKt`y%jq~#ojc(39u$sy*SNCL1 zu9IF!5oD&ZZoyJpbh`6Hil&c!i)PgrE3aW?=r0ag6r}+-<i77`nxJ$B=j9)od>0 z%fC4l5fm;M&17^0N=4E&o%hVAbCgz3f+4jxy^8_#hw_?+p|@kQpS6gReW zF({usYqty22R^_L(r$dv)fj3U(u*&0*Gh9G8a_UVPZ4l|+iKA19p58tjH)nQ0T0S$ z)}}}^9!}Nwqj_e160y5ARVmNq7}5i!ZK<+ZK;;G%lTpGGp-}&Q@oiAB9B;h0nlxJh7LJn0w8~)9+&fT7=*o~%(gse) z^G%Vt+0sF?MPFUi&OHtTembS-91zgWk%%;s)usyO2phF{Dpeo9OUnL)fx#F0^-P0f z{#k0CR+1-%DUEyj^|`06STJm7gBE7rp#0&#F(<(L;Y2jdHHBFPst27SBEne|nX^%SYltw3!$cYA6lXBClziB}$|quKS;V;A43>emK0 zYP5Fk4?57vigwXca_T}s`7}xBVn+tc-c35(DY%BwZdL*G8y@Z5zp12Q(Mo3>ia|It zN9v@v@LH{LtrS)$FLrH{Mzg!`4z5!84Ds@g)N(JvBM4h}N1rjR@R%z%Rv>b=D%q!k zA)ye+XSwvlE0b>3r%N?ov~Q=3)@(-Wv;K4P^uOt6BNnFt>_&%JfGCpTx{vf4UP2(e zt@lqT*2beL2y$s0SqJa^3Oo;RI8JLaF(*xtlUm*FGzP<~<5M^sD3u=*3%n<9>quM^ zWcxlCP{Y`=H}HpQsY7uDZU|Y*;S5x5G;@x4vSx}#HBH3v0Fcq`t}l_BafQJuJ4D^ynEqT%IMVATLBO%V8Kf`yq9_UO`zk?a=O8)P@%=Xj+Rz#-#))Ku;R<`f$(+?N-^2PJ|J)_$|J)_{B>BjBJ_!Yp z!^*ey^B(M8s*E!yvMnUVOJdC^*bw#O8^dcYP?hqR-kii(l-#G z8;D@`>k85HWWDixhbm7SgZ1@qq{{WUPNb6Tm_41)$09}<(7X@;w^H$yDPj>L^?~&F z-S=eS)DX`zW2a?u%kM0j783FH#>!0;PLly^SHtX6A{r~K1&*V z(y~`}-eRBa5cj41b{`?rS`?}xWQI{CHEKHm6$aRr&Z}W=-x=oe-j{4}{sK4-^Umuz z5A%{uZ4>vQw?42pjj82E+gTc26_O4Qr@BK!rhcRyNmdEb+Ad^Fg{)X&C#lc!Q1yCan1y!JlXc0i=$Wt9a6R_hB-d^dvz<{r z_Sut(d7aKnnwV1cJY!cphNqxS>3`ilqHnq8QAg*Fy)JX~$FkLj4#zy)sU=;NlK0a| zkF1#Ex1JSgISv{2@+ur$Oi;hHon!C<`E^G!!rsY;upYr_hCX63Rh#7}qiv+Z+G33v zwLh)ua%krDy};g7i4YME|w?Wk%5dUuZT!ZW{YIxcb}Hc);SVU*)B7NDwH=`$kLWa z3V9fZ?Usghq_1?a7mIt~H@OlpCL#W& zrJF#2i7v1G3+t5aXE?Gg#%YN#TiO6D1q1P5s|vhMoSVuMJTRDK`x~f>^dnBSFYhnF z0ayeTdrCYgF>(Ku4#p%vFZc-b;6Ophwbjrgya)yvQ5?<=>yx7c`@?*n0Ruq;^i!Cd zxzho8DaQ7gtN?WMtc&oNw*W&Eee}sFkchhRH}uJ|bCy_Y8SNsTMchdyjcA7Dm?edi zn>;RjaV<)N|cP+)uzn@cBzP2RR}_cQ`lCM|H$A+^%;yCe1y>ced3$y@fos~$ zL$k`#AX6|Wss4$)a*)9dy(-LUdZ^06B;`BFmw42-8Yc=FD6KdWT1dhA)#1>xlE;y7 z*8!HLO_wFbnx$TiTy4fW*QL`p2L@TncCK9AJnK#|B=+Z->;!QSM{mMQ z?O0nhlR?%CP$DufQ?GVWgEEpu=8{6K%JpP?Kbf_VV05wM@+nh&rekC9^~o6rkRRxC zFt2i}3@W$I_Qs=c9|7e|C@bc`>A3zX7g~Mcrb&XjE|u}f&7r355s1AT@1{XCt0Rx zeh+G(8TT-Tp93|db$7@El!|7vmMS;|o~x|5$S;x7WscJOZ;gwuXBviisdsmb4pfKp zI`ECxcLWm8!ni&WBpIyv@h6c-H*l`T8||c00F<)K+&)jbO_C_K6e%#~KThw){2K$y z|Np~BH+TOUP25IsC4JBJX*>4VbyMy$_S36>Hw_7welzi!Xth*|4I}`VRU)Jas(@}axux?*uw@co^)9XlI6<3 zH|1jeKhqFe(yn@0l+OsmE2i*)^FCWlxjTVo1?n{Lmzh>sQQ`$NsTe-e+Z4i%V2jVC z%G>dUa?J(+b-TG!9^sn|KkWF-{HCppv}ONy%vc5ETz*W{P4+3-anSW1x;|FW!T=}o z6AyKEezcKkx7$o+Q?yw1;OqSh?F&^IQ&XeYhpl1Z8tAb}%ans`py`pR#Tj`#`}MmV z`n0&`0tt?6A7s51#l>Kye=*|lS3Ow5bXRJUq1XJ()Vm{Y=CR=8dsm&!{c23@>#T8b z(hhA#9;q-$(BDp7`8d*$>7X#JZ6nq*dc( z@%RuhbZc7TM@|MukFw>r1^Z=`3@lMrDA|y0u5QP(6@6!a`PY`q?IlR>k89CwSp=|| zQByz0uOr)ZvT<2^SunY~v(9*|ME~j9m8$2}A}}*lJe|V+y`*cU>1FOT3^;a`Y{p&_ ziz|NCqk*AH5yLdU{_+J6Ld;K>qP)IXh>uvH* zv{18ocXS<--|T*fz{`?U-HEeNKTch|>|d)*%n|5>=$zgXnc+g&?@5;ZW8Y5;y|6V6xyrGt%5z8V># z!!qz*)OzTs{G)QrWWY2^Y?gIn_{#zq$*uuvD;Cdf$+{y1=GURrve8VjI!kTnV*LaXIBOHeHh*4Q~*hT%n zPY9huM+R{S8zm-N+!^U+)5iSWi*O+0l<&bjz*a$V%aH4m`gFltYbhe6Nl$}p3m4%o zv*}N1hlp%X?#ON?+1je3dr6e7I8EfNoH3wH=s80LgF(^xRp;nEJPg$&LilCHpV-5S zwQpWDMSXu&xGEvh$!pT)-hHWUCc~mO+Fp9q;vbkE!v6K&ScYO!K*&#AQ;o1YE{5`2 z)IC*Bbd2w*sn$(^Q@5h)Tu?~60r9PwOc$XaEI^1-<=5}(dMp6$2;lZeAq^}>%fHBR zYw~f#eY`z3?Y|`=6!b&L4tcpFB$NzMy!u{ZkMv;8+gm~J52OmjINTeq$DD5>h!0&O z>=s);TH$eseRON*wbv(E7RQHI(A}1a(X~p37*a7E6T6MunN=1W?L}oC3;2e`LvsVs zJ_GibFaUFZq?#LLCTuT=RkNChpF>$Tdrvo=_5~V$8HI94b!Yu#y=6*9Ju`b9%giO= z7Z;AQ=LAcYNi}L1hDG@PJTsU~B2a^EF2mvn>a;>n_qHST-{nQBleB7ODskWzIGxp7 zM@l4MG6$aF<0Oq zeXbzljX0}UK3@0x8PJcz>h+DC&iDbn(xEiPsfT2pA9Vu$!G8P6#x?}3&mudY3_AHP z@Hs#oZE*Zut9sesyuv$PmRx2rx;p(iA0#r*h&%0=Y&K6qhxGjySmZ=OIRAeVSy}&Z z2u?8mV|paOS{mVlwr+QR4_}%B|6r1r;Y6fc7$18^3&{>?=`K=Q1cRNc!Rd)TxpbG` zyt$`O!B#!4pl|N_Oqq01BE7}q5Pe(rA^)G@Bm$jbM(rqpfvl`@i%VTGz#0pBykpud zqt?{J2{{OFIiqoH?9YzhN$K~5beE9d=Isr=k`seLBc&xtg5>snGy7(0`#44 zpvFP{&M^P7XLB)Q>ANon|0vf2D;NF^NTN@110+#OO1LGihws96`=oDG@k3$jeLibq zo%R3v%I#pdg0S9mxQ2cABO&?VqoQy}*<3_yQJ@^=R`!VWoU^530IuI}i-=!ssn7K@ zLLQexuKVG)d62+@z)IUb+4~T7OQ?%sJkjfJZ?GS?Km@Ycr9o2Tsp2DvMD?;MV9BtD zyt0Hnv^d7ad2}h<;eT`f`2PvrBCKcS;H|5|7I&O0?9V`QZw0PbC>Hq?jucyFqQ8qDDdnF4Z22H5tqQd@Yl<9m;8#!~G|Si{rNRE?Nnd+)UP5_jg+9F>i?-`-|4^{jgFtMgZ5a>ITr`|BBvL* zS^$-Px*=p5ZrDJyyWGivD!+oR}mF4+rdkS?&>Y118&m)S9RxD4svFf(= z_EKh=o$D#7Q036tVYrq5Ys7r}c$ZpX@98QjbBM^k`2!2e(Qk+p<_2Z`^VL-|a&e?D z)ScXRq_8)FM5(P;2IoQcV_8TSFUOEdR?8@ERc}f@f@!o=B8(uoESR_cn5}eO`wPoz z0wm#bqqXYK%=7 zCtiWGnBwrze&A~YA=10^RlcaX)M1ue>F7z{)$ii};kvjB{UbbGN#-sFFBA1VPt)(;YiRTx zL;IO;$&+#FcBxmrysxGepMKDgc=)}fwn6B>>BA=4o+Mj+!DMxenjp>RJvNU)Pn67- zaJ>ZLcpGk`s~^ARZ>kxPc*I*Zk2C zA(#kxBe-b|!ECO&Sq!^_Atu`Ha%bZRwS#IL^#+La!zWxc`DMBWrRH z0v&T8o^0EC+Xy3NIg2V@cC4h&qKf@La-$}fbU14mx%a#O=AT13`?pM^L0Gm;UuuEVGn zvr&DzrM%H%UcV;*fsX-1?HZFef^A%s82Y^9yHSi5FB(Xu>$RAcF^B8PPFBIw47GR> z&u_KmtBe|#Sgbl4r70JK^k1m=de^bz|tvLU(s^LR+$#(&jnrL~AQG*`6CB z?c3YRk9$iB0xWL7<4X`m{x!H`;({JXt#LnA@va4ieW+k0>K&L;!D9wGnTMl|`mlwX z_QJO1J^I*+XK#WN{_o6m*zNLvnd$Z$E9cajC~Q<%W|~agNyKwppl^f6e(_&km-Sy_ z`oC%3AZ(d2NA|9v^HFEms;D{ja80Hv!zHy}o(fW(VJm-p!#YQfL2nSDw5tKj7l)>} z=IRFcT1{V(*37UEOZn!u616MxsfW}ga>Jx)>>j`?&T3Nop`UaYtUw?HJ(+a(*BlPy zEWU*^hyQ1<@&o&CQ9;;BI0W`ZhXRTB-p)n3|67Yl{&!9#2-6nL%AGSORF zY#P2)xbkR#T8qWIrLkOzAUZfMH-b*_mroto515kG>WT_aKWmnMhAdNFeZX+@MNHHy zlj#&MYLcKN6MFq)&Lop8bhJn|R;>jV6_tpczEo#P1-olCvOa~NmS|Qn8rg+8?!+uY zYs+l3hWu7i6DPwAY3-9f+rY4s|FcQY*#ystE!gX_WT5y;Kz%)v`H!O6u7TfX-0@J+ zeRPb!%LnbOk>9am_XdBJKnKgXg)tf1eI{4h%mM#fI~4w-!vQm}M#nNik30OAM{7H! zi1o$a>*-YJREm7J#*i~xVvYP=H;rS^)C82=pf!H_9}#_ZK;HMm%6Xbpe`dj`g@Gox{jj1gT=+qOb6lQI9Y>=iea~F;g zaN=)Sk*8rYlxoGdoN?(tF%lT0eY@Vhd(xem+%fCw{&p&^1LHC;u`U?r*+Q~kzk!2m!*%_lwYXYI zXaX_J2^>&6nRom_uN(j;2(8}pBs6{Z={!qBd9~3w%{k>+^iAstx+sTTuHD!ZM>(s% ziGgC18Bai1n7T*^uJ3P^{vB%&Tq*5VrmRQf;?F^xfpQl?e5E3e&L^5a%_z5vO~aAk z3A-2hQ>|?rbJ$LoCMK7fdDG+1NZp?FgLq9o=EQj&^A|ojhEEetoKC9c-Y;4&js z>ZUi(v+Alscm&7EedPXcr;Q)UKOYQ$?A;ct7IU?eIxb%#jYvrxgjOk+=c8|lVst7z zFST>&GF_iM+>=zD5ia>MaYMl1sO9%^dxLN+M!7IH>;Yk8=6-194!A99oB2oJCM4q9 z@2_?bio)GGWE>cyOz&<{^c`EaBI9xrtD(6kK+QLqS7JzIiHdZ?_*DB9 z1m$Z$W)=;aqPlPH=bO`QmARWOm#bWiRxu;qEK(#}#0lcHN6I@?DRj(v+GeKt;9kB_ z=4Vdc69=qe51jDwO3`UWm37tbzCRzimGn1 z5Z-0x?Ms~zOeP_5I(SD4H+wp~2wN1dQT&Dq;=VULADUGgNK=cD!+6QN+Ci8q7-?Zs zRCAJ(DiwgxDt3Lc#;YL5ESY)v@xJ=RTB34Maiki5=Bzd9GcGaOS)D1`LHK%%XA$q^ zw)HL)H=_MJRZx5K1dS>U$C2e@)-C;ADgXUHna3Rt zR?JrP`!?-23~E13LbvY_C(UXM-J0zSc3fJeY9iW1jZ$8onz2cqxqgRo7ZH5>fLd>s*Fb>TjWF!8i``Cko?Mv@ghP+x0Z_r>^>m%RlkK zkEZloN>QrO$`8o=Rbf{GZZ0O^uLpD+(u$6ue(Bqrr1i+PN;CAhZxnCEo?Hs%$foN< zf8to%QgcNh)Vedb&{5TNYD9nwU6MH24GzNrgG_Zf0dGQnx)ssNxR|Wf_j}C z`b&oeqQGby#CU~2`Fy%0BT^Ib=3iil`2S5-kBgLjHc2!7n=~(VzoS_FGU6p_rt{Tr z>m)Jy@OwnuK}Oj-%mqQPLhZl~lOlsidHNZ(uh2YnpP5Q5u>5(vH4%#&3nb2;B}&%<{&{s|tY>YY{s@qRX3QCkSpE*_~b*&Yc+ z%v;A#1=&e^f6;c;UcDj{v5vkR1rH99VKh<_s7K2=W?m*&|9e%qf3Av|gKmYBiTEbb z$z7DU?UqwyxxatE*>J;&JG4X+fFIm$2{~Sw=b#P+5IAt(rX8MxYayJm zHMNQodu>K(AR#N^k9>j?6US_KYNV>tr1HTpy?`WXBtjdHjI>^#%|g9VP3Dumc+KBl zln(|Du<0$WWqU5+ZP0B~h`Kdc z(sX|L2V)F`dR$>In?yc!h30xXVs?}@q~C?KeAGrL;(G1W#H&>hg($kXkDxSkAL-0EfW6^H{%JN>vtCP0If7eg_PsYd`WIJpUQJ>OV z$xB}5!A#mv^);U)Mbc?7PYfV^>cR0bCzB8*q!%54@5nKqiz($glgy{Q49K@FV%%rIT)Us-QXvYMM=mDZOcreX4 z^B+liFo=NCCAOuQz)pIYJQ1z^obL^_iQorL(fx^UpxJhY5^WLLOHsS2rTL)^f2{)EJJOh6ry32xSCxb37=o`Ms}<#!gLGX5 znGUSd*qI$oQM649JOwj7Zev-F1OP06jCk;{^}E5U+Wpqtu<#KoqR)SU<$q-x#RH0) zR5vx)Nz5ng>ypgj-HB?j@2M>UCpTyz1{ZUq{m>6n{<3w}DVHlj9;e10&zGTth6V_^ zxw!U~{07O5ThHZ{iAAJlz!6#O(<>JrcN#DRMLy@omBgq_Y|OP3dCbRUrhv_SH{=DF zVUs@8Sz6DJlUln)hz9%^i+hks_iTznk+4&b#y!Jg&}Zzt7~zNN4{ObqU<=vvu()Yr zSc~S_;Zn5$L?!xh4qRU5$9YR-#v<8j3m1MkKU~KLxkOIA=MP+pED<8$q1sV7`vLQ+ z7$bKSW8YCdj=h}d0iYmpa zYJ0|`n{A?$AMBZFLA%D0kBf_ooj0lc#8%*ro7r9?`1er0(bkt!uy=IV8oua(2C3=- z8S2bnvTQUdfutK4@vI=2-NtQ7iSWLjiqFX)!ada4O#!H%JRqMTa)B8+Zb2eFZ^|8Y zVj`GjegU=yGcW9TIkJ96uV&F7$wS+UT7-ARD7itZru=1U^g%LbxgjF%wSg!FCwqw{ER zg)Ex}Jw*_si;s&$s35xZctmXeP>8q6<M&9AJ5e0xqAkZk^X1cU&ENG(J3Q04P=HxsIC z=5ou=CgONP+jgE{-x1N_)yLmT324kuspZQJ4}dc^7)!zewB|&jH;2tk>^o-?Frkcy zc9Ez%xdn~FN$KHdJOoaHKGaKmdOW*bRoALTS2_p4aX$_cXVaHfvx&5(I!@XigK|k{ zfQRhcbBnYGZ{M(WOn+F%a|homE@<3TpnCJ>Sg^+ly+VB{GT%GgczYPfl31_LrO5r8 zE-?K$+0;!o(Ste}=TpqpZ{~GM=9`mik*tj&_mFLw$oUj2hjASeZUEcN&c$6 z6poY%6XPoH#W~Km4drsu_TRjo5wAApABwhq_>?n&TO;+FEK}<@KhpBlQ{=nWH?gjf zH`0FWKf|!dj7vC(uvDybC!%Q?gY#tu$A738D~%j&ztt^!i9-FEK^XM|<8s$sGEZ_& zCb#z{hDRvBVzqoSk?HpJG>v|a_QGO|eZLmtfu=tg_o5IKgyRRdCh$yFKUvP|l{<;= zm92T^>%t&(&SCD>fgdgT`x6^Tjq+oh)1Mm@fAr@KRv`Cyu_N3ma-#9_pDm!lu!JiA zV4shB$+ZVn&vNa@gfoN(U&J>Xl-^ikH8QZ%*QvD|P0x9C!A!K-;oqJ=@bswv$K;Ny85p7`)9@B_+VA z@(d-}bay&38}{@*iP7mZ$S1HEX244$4MXiwTGw&*+hi=^TeT{m>qr%Q1)+w-3DlFf zqWrV0V&qzufqjkp(%4ix(y)&(ZwN}i&bMco8tocowuXG_V@ZNlp=KvS%MO?i(kN&; zT15;zkndM;*VU_v!2nYUI0Zg-xD!(jI+ozE)5OdC7*m$&ILb^*1%7gUx z`Uu>{dK+f3ZRCbwV}x$d%S-^9peyB8UyXg1cqq@K-(wZ`wg7d*krGS-9%~AZn(W|o z%tNXS=*=_#T?uayJ{+l+GpcA6`MA<+ZQlGqlTd6jX-EK{p6e;og?+!S6$Q36B^1wN zpJgEw+cG${SSX3u!E~9bNxeoZ8Sm3F>THPE9hZtXJ;1-X%6^3Crkqtj+`>S=g#@u> zn7%X8Mvqu*&+Ybg`lHl-9xj)`s&>=XKj!T#9Izw$0LSi!M0(|X5N4xCYBmAx3IU!> zGOUbP_ishUgpO6Mub{>BjAWkGk1|oa>#TA=VVi(E<}Op;;E=bN_O#;c>VU^8oxlW7 zXSwD^NkIO~SG@RNJ;JkMm*X(g5w&Kp(WgNj!E;+atv8e5pQ>Nvgnv>`Uac>_Snu~> zj;tT(3;iDc>G_K$mfAHaqa;QFZXjTR4{M;F6N>#c3f ze2v2b)M@QKPW2ssPU_vg%15}m>NT_Xxkbrkm|{bdytqIv`kbSSte5B_i(*K3le!iM zYs;oe<`dy-Vlhrn{C-DfwahC>^NXx{nXsuyxI^!;lfzr)-)6O@1pbu^P+g`w*ZPu6 zC%T_8{a?Bd>CiIZGSygVi*MIUuKuRBULJo!J_?~}S8r^pnfru2*XNTR=K{eszZ8`N zn^41IA1nmEF?V+Wyt=~<>i;YuiQPMO<>vT4p*6*K6ttyCt*=4{yEJ(@!h}FyalI#2 zO(y%Amn{1#c*S3TNve~*hbQqeoq*jzGCpK5)>UvggH|DW&AZdq-MrB?Iq5{~-N6iR zGN(~==M(+W)_or}tc57PsE|p`Va-2ce`|VwQg3;{~bea z3{bq32}ST5zrM4eFyZQ5;hDT4s9lFzPU?N!%T8zsbB_~q*!=eDLT=QtS;*VdoWS1@ z7BGkOrOC=lEgt`9ow>Iu18#Tc+ow9-K6lGqXr@AXdN`4r*D8j-yWwz;ZDkP>Snicm zDNKtP)g=~yDV@{2eqZ1wGLUMooSBm;T>778B;TK>FkQl|ma2s;se!0JS~u68Db* z`D+sDO&*DjXtlf`+k(O98G9+Ue&sCtv12LYi}lR{RHk_K&8eHZQJ`BpA&isL)$Q=H zzBS(YOG3r3#HNhp+3Kg8LRdkyqKH`|GpPK}{A~ld-9=xHg*?soawnSewD33Y_q{$8 zxgq1vA}-LfY>2uwsgS7`LNgcU0oPo+K98l@j|mtf7#dU~to}w>&p#&w?PHbd2@d(E z9&44QYQ7c)5;YP=XwyEl;+LXl%`(%=@2UO$jo{=l6^fF$ow`d%o6HaS@TyqE|%q;e2ihAVhBl0j)FWfudgL!cx zKqH5xcPoBuQQR9rOkkZK{ULqN1o84Ls(#R;FWiZk^~1zS+Ko296yZTll!ua(QxqbN zrE3@8DjebwMOYoTr(W8%tAuBPuWCNz6kuRbp1z6R%s= z`3@v^&b>O$U^j0)FmJV_ifc>tyqwt6x@qadOc9zqr9qJb}5-h?w8pQ}b(Vu4> zkDzcX#{HH#h7qZn%+WVM;C)4dvy%-3+2nRH>$^3CkhD3@$w-7-^W7#tsF8fOZ1Qoe zYI?@+?CgS&Q!6BoAl7+O3NJXA0%lFy;^VjN`7N-n;<9K3m+&_VLzF|jH-Q^3lp~`y zxLn2deUOq#U`NBUPQF)@9s(zhp0+Dz{d4bip-6)8mm_#%GEnNwY@{fH-|<5b7vvJm z>#jfUEC2W#s-!@VO1d)9xyR8)dVTN1<*Dlcf4Ta#0M^c>ALuEz?w~f_4}^cOSGbjb zrpEdp*Jb-VvggF)yBP5(3{vWrWT^SUb~9{N-Z;Al%o9WND0An|XiLf18#rwv;KZgb2Az}E`x(_E8hQG^6dN7z<%rP zny;Tp%M&eT$_-gtmU#-X+41}*ssWCwNyNsrKc~{`-FA*8;r_nhD zmW&&C$AnF<24Ar)Isv+}}A4$ZPZ75^%MW3-*@gk+gX% zuY72IwhgE5&Kh4dQgFprG~66*6r7xFl@3vB`wnlWQhn{G+KrT=SFcO4Z>MH<E< z`hn?BT5PHtEkMsx^adm~ATqd|mI2v-8(~{E47y-@40fx*6*NLa-Vdfou+`f8wH!K? zpzsTo!hSFjZvA3^qOt=wnT2`JVTQ_3wfbukP)aH5FFKU|wcskj6~fO&Fm6vc-kQYv zWO?=0(@t|E?H_fsu;Bue5Yg7#erLf9d*LH9qZ8uV`+BjcwO@N~5hP2`u(C#4dc3vniq>+K0laqnb6lUs=1q!_5pEqT&$m zZDWLo^w%uRpG6(7{_f83lDMLx3OlfL`VmtgMuECJW*zV_ftK0ry2u}<4IVP^oiNQ@ z#1-XiVTr=Tf5pC}Lg`$9d^L;$NE{mM zGPa6>VRZPv5tm4e5NKZVc+`VZeX1 zJ*ITR$kD=OE%zz*yI5Mdp+@e`sCO~9jRUG4|yuXNsc)KuC&?S`70=h z3fCCF>GO`~AI#aJioU8AcL>bs8}GyR#BqMgtUFiF2$Qmfor*EN=T)oD)1cS)pGwgC zjI*X0a!^ERIdbXa_igMbdFvU!x+LS>)K~92B7W6r5c?W;Z;xAk_h22_b}6$gl28W~ z`*Kmy3mD1c)%9X{f81HOob-jLu-KP+A}Lw=a}<<7Jt`1VaF=Y6rG!c60ui#xbsP?_ z+iqm4odLtyY&}-SjaCNcV+n~CB-rA(*1X=|TyG?)=amR10mEcMj0|c9R^E>L#dHz) zj^A|uh!#)!MU~x3i}~w*(oH`~7^AGQXY(@Z(($-RHvxqX&1&XgtT2hhf*q~XK9elY z+lERZNpNtIOi9MQH|>HRNSt;p{@%#%)qzm(C!VZH4l350yP8(LLJ|vg>#roBjLk>E zPbGYeo-6i?p2nHqAOi6YDYvz#NM~+jl++;I2euMG!K=~zpc$RN8BVV3pQv+D=zU6( zvNP*UZnp-i$Q&k{u60t}$JOUOOO4pTP;_0xsmDHe(_#1mwbYv7j^R<`x*%AO6oDQp zn-vI;RNC2+=(iv9B~=vS{~#&qJfIx+%Xalq5DH21vv?x&ysp3%S)wA}OLOUOmGl=V>pwhw4-Pt#V)lh%@tIx;_~j3~0E2|2QuX@G?pd(O z)DS;~XQWh08x zb9^z9wmU2vs8JzjsGa|yO_-!byf%E)k@(>S$v#?%(E@Liva#yXNwdGg?bI5$H^W(X zQs(pDl0f_&`m|or1Ai)9|JKwcOX7eP>rVY-C$JnA3@_t$Cn~KY`yp;qT#y7iJZ<*axJNYy;q%uw^4LwL}Yz4j|;t$!Wz7s?f zs%ngP3l>y&kkgsVXwL3 zzIjz|ns@G5c!MQ1>ikO($JRozQ9NQEj08%$(8veC==yy!#sJwiCKK9T?muKVw}N(- z@5O03DN1m}fMaPWv8tG=K{Z!;re{HCx!J6!Kr#`mg6>1YnI%o9zHrm~qo-~xnppwG zh~Pq9Xv{!RgVw)i5r966%m!djp5F_xr@&Y8Bk|*{*$KJHg{trfb_g4cS#NhL+8W7k zGr+;uzneBU`4g`k^8GFHKoS8VR*me+-8XnTzJIH8Rekl)+CjKy6RTL*drO@8Hjk%q zxYFVs26(Hq`*QF-SV96ebFTWeu&DB-B`q3%)aVpg?UT5yRk4{@GaTt3^cAkm6S8t4 zDwx_aqU5&DixcVY@j$+7GLvdn5rY<<6pOg;G3W#ZpNd*ww(y7H<+ef_>Uz0t$29Q5 zbOV0#_f~}Akr#KH|E?>Z3&EA&iZ0%)G1BEI5YbRL`38am!7aS`BR0ye|9Gkmo<`H` zHq54-aB?Kr6mcVBY)WPwo+NoJ^<1p*PUF5FU;~eo@S3t+$4Ez7G;o)X?h|q>grsWX zuF|iGbF7JjIMNMh!-OH;EOo{^y;}xhdSZ5TZA*5r#zET4Oxd|b{ekIK_c1@7RCgiz zu@a02_ktS*l00vPntX1OzY7&N*809`vzspT>(?m5;UQoy)R(~g{s(*Qear}p%c7Kk zEqfN3U=e7>o4o0g_X|Nf9<}8Wq2$owNgEtsVy`y%P75m2o}ZC^Wl7Jm@F1d zgHSINZ}L{#I#e?DqEf9n%L*4Cs?vbl8h^zhI7FN3uvpfz1WjWBr>$08_C}d00>9aXwCs04A@h*$!7+aW`{C zf{^c(=E&C)kti}3m1as280XxCxaY(2-2EOfJ5W;m8#B!0d(SN8IJ+-+0ka7SIeo~i z+0BE0qcAu6Wn_6^eJOB>OR5-(cF^%J!t}@ZX;J$9XZ@sX*4q;@LlhS61f-{=WGTD) z>?2Pz!j6#IH^Ehd6Cnwy%rns7?`Ep`4WQdyrI_Pu5Al*p;b_PkEo24WLDs$d_*EBK z4yfnC2Sk4Mr^NtxH|Y*F_$K@QRWZ-{6D#l@n(>?RcfZ_lrMRcSgX%%Idu+dO8m~^D zy`*!?(O^F<2Y0bFTT$$l!;0Y(C@UIS;Fkyzq9U2+S>MU{D*fYw| z=*_JiYL(o85KFSx9ca&9DoPaI!%$wCS-dKF3<}E}^ys;aiW&^`fB06E{A1O-X;){;4!~jLYLF6%iTZX*Rw` z8|^XHLmn8zL;M%c#x69x4U-c4ROntRZSmoVCH9&ZkgQ-ZJN$spXl-_P*PIF~wJhCo zQBX%zL^H(5qsF(%7w{&@2+CFu)87iPg8kkS3B@1_nq!)Vxp@IrN24z0K;RHlt6tza zbhk3{BtEyFwVOk2oKIZ7j}X;_Fwa)0ij`5Q)a`8x%zx1mezGJiOI8?h+X5At??zb; zF=>S2qzOMmRkVV*BVFsn;7E941z_}Y;b?=uIHL4wpA8Nqalfwc&;1j2rBUeW<$q8k zFH9xyUu@=22nhTCU!XyV|Ggwfq>8R!UF(jVoVS4K_8OB6PBEOQhz~W{wL@;>l*H^V zCIB`Z)RI{m@?IZ1@L5pw;AeVR=#_eI>4TvD$nJzgkqB%I4{w}MjPh$QGX(*QdJ)B5 z#sPTvu9RN=U+A2L@cxN7(|BuaEq{wHvFd1dO_qe$r=Ty7Fdko@yG(8i1|&QqT|=(8 zZm_4_(uEUW^VoJZxsQh}JQ$PRN6QW{u?wUHO7FREN^SZJdN3U_W4Ff=JQ_H4&>~0GnU2o zj0SGiYbP^^qVoG$-sUY%6;I>=LT&h$HLvODE*wQl?Yszy)x&hQ3}I zVZaamN1hlia@$a|_CT>ez!CcN2I9sg@KXfyJ6X+!$pHZ>sqs8{@6q0*YS30f?22o(Ee^X;L|dpz)XS)iv1}#{ZS!U8u<%#gY)Sm3cu8Zg zQZu`!ke9U)BPfPQU1pwsQFQ`YVv_enb3b0E-tcH9W3=)y*L$8sli4$vHD8Yv_`)& zy>7?-o1v65xO65z++CJ{aseg}yx#o&o?A>?@xw=0fTQHxrX(5bW$b6A^yH*y@ z<$w@F(9v>#y4-%&?P;z7Pl0eq-)>hU=<=bC8uj{Q$-4al=-E932dnj5iw_zXSm9pt zQ%zVD*$rCWJ-LL7Z!c{Zp~b#@w?t>q<{#J{kF#?61A| z(TWWs4K^5JLQ#!E4(7c%j|?OE6YML^8<>(PX`m@>HjO@aEMd6WmLuOvgNs644`!b@ znlufR|6-$@YYpL8OYf}+As{bi>_@(A@r-m`XpDf%kE{}KPJFP`Lz_o7!wxhlX6xOt zGP{pqVI!{W+|)HZ(JNRdq(*fQH;p-E7OocbTsm`qHQK(X@k%J*H9zrFk_m(~~?P?1`A9wqmwuFI8*!LbNMcNv$rycu_*D-alMBw-ILy$>1?*>+033 z5>L5)BDvoXcMw3#4QH?qGglf11a zN8WSCJCtPZqTW97nQ>Buu)@a>g(pLIU z$|dn7Er+o!$I4tw6c>5UoEzaSb>Y6U#Y`VcG$-4JlfE>}msuyo314iKGL+k?wbKRd z)SfV=fZ6~~HadQ8d7|+d z-%rp@D6PVf(ZydLocd#sqR`qEO0NC^!DM~&AxRWDW3kg=a2foO$L6t%m203+yVj>% zc`A#8{&$@}9k=>A>j?)8Sr3KR5m)nGvQ)CC%iU0%%v9}kA^VvXGxP3S_fl!SYv0M13`yo z&_aY6a9NH2>MPNSV-Fr_T~G)tpy+&GfUNOCwD*u95$y3|8J2JRjdgf5oA%NQu-+gb zc9^dRa%!URL_U!`Y|Q6W2ld|ip_Xcm0&>C!F&cSqnU}oaQ9em(1okL;Z}&$zw?()P z#5wd282@9gdne{KRNzgK-+uFX&t&Rr)dhb~9L>nA#uEE{z-Q%WiUrW}LiM{fxBZ3; z3C}{kEq>&-E%<@a#_MJ&&8*L^BQEnyUtD`EVh!KS#7S)ornMK?uAkT1k9|4cTwZ|< zWV7;|5CYKiyRh6N*P4u>7k$Ah*EAdaT+M8-q`=FBNc21FEFDM3=jp5mZ!wTSseLNp z3QxOgno+RMLA8ZTl!xp2DR0SaKvo-p=sSRBYL%qEG#m&aKJ`53F0wVASDEimy|m2Z z8u@yggdBI?c;L~~ht?^fsOMhGulWA10Hf^!YTBprXq~u6hXdN+G*hqu!V=Bs%??Ox zvk=wTC=o^1W>FA!3=2&C+z_{q>vGB!uakct*|mGuJ;?W0H6NLoooJwUSa#?~yaO?` zU=PGaWdbJlA`-C|s6rvAhrLCX-Tpiw@ypP*E-KHVl#Ij1!SngP$TxG>S<*f`l;mxO z2|d}`l{%%p&URADf@rs^Gt64vimL}_f1B0lM+CIalelF<^B6I2%_FwK_ffAxMMre^ zr$VCn%=mR7hQdi-8)Y>Uo~JKfb`GaBvLsCSdr<8p%g_wd*xuk5zpQ(U=c!z8$MWP@ z^$SQtTA6sAx4qwM3Xb1TRiEy(fvH%fpTtNnA$xwm0uoC*EOa+Im5yC)_m`=6N_;R7 zC7GRUd*QI`I0W5iO5|0mDbnK8_n!|X>ol~8>9kGqsPvcR3h)c~XWwEie7G|5nBXHB z#Xy84xv2U=U-dt3RT4^+m~cjlN0cDqS* zZ`sW(K$ra4Q?`u7m5ol?+CeQGq(#-Dpsk{0d!m3t=?M^J?q|@-ZPIo^6w>ZA5X|-z zpO>pr3kpBZW>RSaGD&m6u9+m!nGSQ-r&$>U&1QtJksGDPMK|1P{;B68kB$Tg*Tf@% zuY~u|3p*7}^@s2q=?`0LQKn}fM?T;8(C68^*KhmNn*NhIe-IBCztIp8<4;P5ftd)0wMVc2$h~s-mn(4*f{dsQynL?Cd3aS6=gub2fvcshWBo?-L zSbyjXsx%U>b)zaAf(r6*cjX!qj$nTEvznJcuTT8U)Z3$%WsQ%_krBR8Vu$59jqqx& zwVZojPzyJZAUsByjz=!+t!jGSeG}EY(DKqXKtp?Rf4%8rG6>_I{9@qbu#w*H?hSZ>18w0-I!`5WSv39lX$3^ZyxFMG z=HETPtXSbmv~G*viaGVYk_XRZK&xj}8n~BJtcz7fbk*cxGqt*DQ}WAJ9!R-WdDz-~jxmLWfhfT}CB*dISM}@1lz~!)nk%^EnCq&$MeD71~Jl zxwVUIoU^RX>@@GsdQ@5+=mAb0yW{wQu2{ZLb&3!TDJ;fi_$f+hMM}G({8WCyGIye7 z(tt-Js)Z$6uFb=u{i}qmxm9`5GZSLV7qzzB*+hEdh_#olr85P0Vz3MZ@|7AFl8_T* z>w~)ojO4x46{n5R5#}%EBa#dV!zX(EuHDLR;9fU0x4m>&!Q_z!5WqQdpm3os&}z{7 zdKq_i`0%Udr32Mle^|rm0{N#3Sm@obKPc@=;4sKj9E6db>mhU~bI}X8r=_^LRn*hK zf)&GocY|bWpx1wA$MsYh<%Cjyz5f^>|Pp z*K90u;*!+807`8JI_Y4ab6%2Q2lMcR?w5kc^UZjk3sJu*wGtW~Skl=RP~)Uf^QHA6 zV$&{=&PXJ*6ZwTFW=nFcS}3X%~~(;|k=tFKt{R$c7Gi(v0wk@m~Ojm@w3oDSJja zqJftLb#j!9N>fE@Ng(@(>UdL70<9xX-XX%wxa)1%EV5T18>>Yi;zO6-v>SED7ZG2P zgygN9chDS|t!o|X$g4|#n>-gHG}+_m|3t)Y*ikufs_5pK`SAdRtgMg#BL-g_(6 zo)@|1R+WSIzzx`4uW z8bG}^y$6tsi}f7O^qK^X9W~fDc%=Zlq)V7(#*AM>*?({oY7=S#pmEeh22*NARa4e1 zl{UNdb0mCN;m6n)BhCgr?!l3bYqu+71@|Ai%Pi2z98M@tkV=&?7{=!vN;`#S%0N>D z_Dz~Eh3Hi=%e00`ZBdjHoYM){joayZm}GUL2XvgE#WD>6dmyjc0$g~L;We=aF;3c} z(yVrac28mFg1M?C`Zek1&FH}6RREcMs9)dMY7Wl`ODr;nXVj8tJ0%qM(Iq#nLt@k2 zBMXum^A_rU&tpkxU8<_kN|33CP=>PEJgzPF9yZGH1dDm7XC0^WQfKnnHNDg;Rb2d) zUha8eHW0abPu##_0`h;);bEwT7nd~)HA?+&Js^cHy~W^z(b8qnhsn_xuJ^~wWypYB z7}7sSZn}E8?E2NA0kba+#E7}q23Nl~X8Xjq(J6cR7I7zBQxDm$LEJ9i-vv-N-n5S# z{&cM-rdNl>)bZd&rUD)0t8;1P3< zDBR_w&~9oUi%h~EABSEqNAn+hTKqEQx2P?&d2+VTHeuFdo|x|;ZYzfSG@lYiZzQ|l zc}VTB-m$+4eKkCix+Q5rx%J^fR>;K`f>B<2=>(WG(r6fpU7qw)Xs~D?y{~kXXzvpQ zcCySngnsYl6nPB`%tK4c*~wnJjHm_P4_ft_U9lYiYF(2qB|+9ESj;%3!eNlh+W@H? zJpYXgou|Vs^!wsoMt@$YS$}$>2~s|yD#U@q6$a2R-(*My-MD2!vCZDyOGfKg#=zPW z3ILQ=2bU(gb-R>0XVMIAGa}-4jMwKTTcOjj{k9#nj~7t#GTXO-=9QQr^_Z@;h7?u{ zd2Z8RZ=Sx`895qDO80#InWa1hyCr;AXu$_?R>^qf>^8-_r9RgeVN0OsGPEZ}UJkYG z{Mpu1m~EFK_E98E#tk~KdUj_^(H%(p6hyz(X|Evd31oF;_L+d(zj}&G-WUI^YZr3P zo7VY4`mQXl%~FwvUk?g1vj+PL%O$nqamyy*d&L(nx#~eKB3rWW%-Ze;F(1@1FZ%u$DrE&;}b%NWI#1O(_;0$!O@*WlbQ>)m|Ykqc3Uu2PpEo`2)pQnesB5xgVOp zUsb<+pTD|0v$Pf?w6rpnX1r3<9JJGNMqDDaJz8R_I)7?BXxv6^H2$%9`!`O7N0eS} zI%mLF3rtj-qO&bKXbt1WiDDf6*vcuioey}N2JhIAWssisLCs)IN=GqPGO?a%HMA^qEu135AwOc54y2aVL+{7 z?H&)+v=(}&8dgAHnNF=e6cw9m@Q;snn>KhK&`~$F+jvYZ_gWHI`T3D!83cUZy7KgH zzho&wLgdEpfz7^bz{Qo$P&58XKY0j;=MmnrcM0fQUfB(%@@N9P7!Gw~`5*SIF$*wY zBVA$~G20a^tp(JydK}f6U9jU;u;;!L{AwQ_m?QXgCgOe?OQf#%tLow#h>r4j;kCX; z!JcA-u_`i6Y1CrJ+JnjJ#$Rffn0Zlucz}~=Y~!{1eURCrLVePf0+XmI37?XL>MqU% znePYXP&j=*r2Es`oUj$H+Y((z`r#|c$;e4$n3;=Z-iclx*yG8Vtv=sgI?V%45wrM^ znUg6b)jv#AD#lZC7C4)6SgnitA1 zFOWzMl5s@z%kkF4L$nf6i|w@-KCj#rqiOwtnRQ0o^ou~zQ0B@RHbgkUE@OkmeVc(Sz=rvsG?nx8O-z}(Wde$`$YI`Mn%I9i-=SRlJg zQyX{D7#;YiX_EP+TwIh~1?IJAx+1+QXYGaM=H|l6bFV^V5fih`QQE6F>2$531qA2XJ ztlNniv>hbONXiIU9T0IlXKCF2@|}izfPaLQT9og5>YzrATX^&KOLwj*);l)B`}GN6 zDQi!k|JY(eX~co1Dvl@Bhysa&UQUZfR?uu**Jfvm76i@(sxeKw>eX|fPMXNIXcCr6 z^977&E!T+@HVL-@4$UEN%XVv56_jarC%piZjy*cL>Z`UtVi`1^GF|ywq~KXXc>9N5 zI_UY~NS1vZ`=?@L{#Y5C4p5b&MY(-30O(;I=y^Q=)x0~Ndo)%LFL|8@i#p5FZn<2} zG@M^c*!s56^^EDc6lzIXGZnOb8r(EE;C8Wy&PLWia(~zzIzZ}s3wO~Q{si~6u#toG zwG_^P6{=~=swIJQbvT6 z88{`xo8$44Lt$OYWXo0b63w24Mq%FUbD$*Bf^d`V(Xu-G44$CED4WszUUHnL-7js@ z0tM6B)J3zJyM}(~q!eu~GzBW0@h;D9Bp4@YM6sQ56ATD^bB!vo=UM2+MZAcG8TFipC|ItrwpQclH&f7d>Bz`dEqyjnGs0#@Oo_G5I04q?}X>f^FQg9--LQ zRXAlgdpf8#3^f>gCQ>8T)wubSc~DMb4BrX%3e_WtGwi^;=jz$)hEUmNEzNLc>fvz5 zv3VtF;8_itv=^+%1ymeH>G|^pi}C0Px9Cn5FTr;vzY!Sq3|Sx&oG)T@e0)fSVh=3_ z`$7y~x;qV}e>-fRahl{O&W>a5ryR;|(-j<|V~Y^k<)P85?qD?7T*tRNTfztTIXCOnrWp>&gsK+WdusDKG&D9IkN`Ywx#r*D z&U@;2Hs^bWGur%+RReMY;#L=CQ<6WcE^!w{ifu?^EeQ&odxr z$M;9QdTox+mo}dtUlBNImO0w(sn2%~@ZklH68!v=^L7r21=cM1h z>%e4buRIN|`RdfW&WVFVsf1$k_s$_hMd~4(lRuinYi36yX)H&A!~oIKIj~{VdbjUA z@oJAUh+frK*>_wgnNNBh@C^uj9|@zuF||5+%H(MaSidg(YTFXchweU)w2hU)qX)Gh83tiJhECHoKf7q{EZi3u^mbdKF*)Nc6~PjK*6C zNzi(>WYaox#a&F_{X+T|-89aRpshiWJt_{6X5Dp@d8{q&Qox@%)QEFlIJgqf%6DAm zD@%IyPIvf>eQoKrsk?HI`(=)~W_L^uTI=++cHyecK?ZdeAn~oCD`&N@8?%PG63>ka z-RDlCbv2lcM&``b+R4b(>H5QsyFKQ1WOa6B@`rD$y?WEFk^=n5cllbXOa2XfGSl!C zza6uBH{USnWxt+Yn)V@OlhoC609paAggHnVaqP&ow{%^5u$+TbCSHa6siV%tXpTL? z9%V&I4UUl=*d7^j8jo(!nS4&`*E9-0>(L}#(-~Df5peKzv`iBTfv!BMo$^x|{8(4A z^xJ01|3pA?sF>ENkmq!nFjU0oTn%eXTr{a4#&&YBPjfV9lY4R(r3IAKR;YSAx!ZCD zhcLrjGBkGTQk6@a*Nm8GRCSnL1;!!;oJp>G1&fESb5U2lG{?rD-zQgy#EZ}_kQ$+U zBPFl+N5m7NbfoUU$Ls3O?Ceyxu!Az>G4ZlZifTL8Aj-H#U@=-Se)viKxt(eoGaK)5 zV$Q2JgkXDjU7Lk%!BwO&o8taFJ$!ue zUO-*#L@l4%VTjyk6Hh8jroK|ykSr#I| z^PcMot}yv#+o4@MPZ=kt5Y-J=W?bV1ck|RqgSW>Z2i#zfd6iFHkxS{fqp^w#HPlfY zpJEOqi(MyDu|*GFO|>TVKQSquorwX~(^4nRnlKgX{SOBYP1Hn-5=gzjXiIbxOIFKb zC0HN(7X9PyfqJ`c_BUpNV20(D*$v~`KFuHy$@}m%QF-~9!Y@oxajPuP>kwy&zVfcRC>%khBHDi{vj;eh6ZuYP+8TA&ah9zbg zldtGA->_;gSqr6+Q~G(gc*eT@iRO3e0ngCus7#r@m`Ti~ZGpIAxH&`jTASL6XLw`y z%8*N;#7+Wc$1mt3GSCBl?F=a={))SE4<7eYh|7pJ$Fasa5ib~S9YqJ!_8CQt6%#z` zjnhn`(2z?aQH_d0;3^PVw})w3kVgvcb?*?og}&@5mmolm6WZ)dFI?`>@<}8@cLYv{ z46+;_HB^n1F|)eSww;K}{6sd7xfx;Vnu89JD&K?xi@f&hvSd<61VQV1vF9;GRj;X| zpGsteU32@*8-jmEJEtXWe`}XQ11#1LNmAXd6iS3_+ccCvb*D)L%}?A+`KYv}Dt#9r zaAaSHCQ1@!`(?*Z(w8|+MQfYX+GxiIJ(d|p(>VvX@UNL8Jg%e#da{y)YIM-H9#|aD zC(SyoBsv^{?OicJNpgCG7Du8|KdpnG1BZu!IIDthFMm?2l@<^39y>G4yim(Jv@7}( zmWBR=<+)ul-;58n4^<;;EoLQ6)UrgocL{n?O?c9cYUlh;W_`X8de~Z+Dh)*KhLogu zyV3!HCpF7ir7jPpdz$(?xplqg>XMOm-DGNOT|=H56G(k62hyL+{B;xW z=6QEoF`hLwK`9z0xhZy{nes&1ABhA`TX;OKDfE94>Ol@gys3(b-vXJWe7#c7&!EWq ztcB1_7cDL151a)98&r1kw0Y}|g!Tl|2lZsgO9V+W>Io3pvkBzV9{@SwB+p$S{82R9 zs|U7O75H%6?w18=ilstL^$rYm{8psZFx=%0!uOp>=Q|(aDt(DigsXt z?f38Uu=KM5x4w)0c}>@ppG4Nt&{!A9?#^FG+IU#>yxBQNt#!FbeSEhVO-i9_`nIM|`4r78h0RHgb|gLhIhkH=i1$F2mzY zyup4*|IbA*$D0>nv*SgK#wH%7YT;1~pqR3AY~CcNZ}8=`PLseM10>(DJ> zE1byc=6W1KCSgG&aYC4Xy`qXxz?)$dpzh87KYX2KRGVAWtxrn}rMMKA;!xZjibIhU zXrZ`E3Ium6#e%yeSaEmv7Pp|qtyplE;N0|_@4NTk{g*K^M&8J~_s&{t&S#RkuzU)Z z&bpUvb(GnaH2w$W7U#$6g)5toYxnZh!GjWmh+r1%R(45zz&$iS-jvQ6dZ_@J`tcg} z&V!rjbsZ{!K<)^zA)Fc{4uQ)=axMlT&%7#_Wta8*uN}^JQ^jk1GmL*$v|C~=-2t_F z(5RgUe-rCQN4|rG6cRRR5W6}4PvKLPRbg#8c?=--LlmEp<#829omagC@54wC`nqCAu@+CP&!?SF9yeFfwlyHCWLAs^7q=MVQ;Ou9uwJeiI+?) za9;CTYGRizhyen@SNIBOC_lTzup{Xx87eE!7Wevo^X zcwH?)*@tEJ&ARd74kvH*K$T6B5>8}!^KHG`8CqFozhq42Kdzscavcp`9$0t7y1Bin zsk@+(&7wge9j}yp=pQv1iQcDQz^*Ov)YSEzh=x3KbN6# zMM|T2Pa>K_Jh@RS^1GZnA;Ueic)%~e=?PQpV8hA9S|o6~niTP&R!_gD-ig84Q_Bun zU`yq52Q1C#IGQ&(47OP(~Lid`J)z*Cl^A35#Ho zcwgo&@NK|6qqR_HOHm?vpv9smUv#vEin8cj$`>^glm5M;F_cx+hghg;Q3KrB9#?#* zH&vW3C~8)oSCD0))c&=OWg>Goz&MuoQvsz_sJrMpcrgpTnzHn`X+h)3`czDT!>GX+ zK{HoAwePUNS)P?5@an7lFrY2fuU|e=eaWY{%v37I4(D;$a&=!hIuzfqE@l}#p_I~35?_HJ?=dT- zb7#3-VK+hVW#A`i=wT}~PP0UM_2}V$UiD4e%iZuO3zwwqaxUsDwY=F{*%`ujG_xCC$ltbL2;5-% zx^%4#6bKg}YKJEIE}pq{;89c!T}CeH@MbiJnB{~$D}NJ8@4PScAE7A1N{(s8nl zrAaaU56%fly9SX{I$U&EXS$qbtYaL~+}Qn!4^o}_fZoCrh25N){c&SnMTA{NoE^P3 z79MBx$)k#|)foz-x5~8g9q!`u=p;FGOMRtO7hC85w!74CK-2SR7?>;$_Lqk?zHr>$ z^Ky#>g%s?3a(mI!&f#w!f*Biqq=4rclpU`INppU(*xZ#> zC#GhE%?9x)I9aXAE{L(LRJM)`2Jsz4zrr`m<0EdZ{5yC~y~}Ghwpf@U84LG-tkP@d- z_8`KPdJcw<*6NGTyA}z_eB;iaou*z6uHU^^j@OC^G-CtO=G~mL0R_U&+azM-WZDJ{ zOo-5AdT+xPb*5|ag3o7+FK*1c47@5h_6Mq*?59la#8Pr7a;yca+^zZfpzAJQ{K-34 zFZjHjpn8&e;o08Ldt7UpLQ95q1pi8Y9RE6Zn7rkGW=IPtPu2Z4hAUVu(ZPt)RL17s zXWdIqmQ3i+0Q31O3lxsN*8w|a73*TBg8pe}98!qW=C_t8|CO@B6o&Wxps6;|lXB>! z0WNIFa>DcSY!g1;#m>xoPJ+6@7}D`MG1--|noVFTqx7B}m^}3dda+Y^yfs$@Z96?8 z-yBNIy7$c7g5j*>UNub}G$*Un{Q5o(eVgZr5xB}Cf4*n-1^+P4az3!WP6vgoO@CF~ zOTKRU!vbWN?dld4rg`Ie8Z1V5FrL1LwK&NJkZX%Uy1i^D$fm+>p*4{XF`15G1`m3g zPxJ30&yX0xw%%!RGwZUO5DD_<&90vOdZE)Y=dc$Iw-`XJTr07efzW4~mrAnw3!@Ew z!8f-Xvja&?l9g@oSt%HsZzeCv^1Ul9HN)=<9OK}1Yht`%&4xy~o@We(L###G5CBGU zp_k$#g{Pq$2>* zDuBPNck77K8!Y#Ay(3#0LC{0jeSsbD7saQnyZ4)ob^G-!HW!h>$eLEQe{FG|rQ<`! zjBMG}VdQllJ!}ZeOvGB8sBfiyr*PQeLO^Kbzuru zZCS{@r*k%oU~06DeHb|%zgNirR=9CDVInl6&(if;lTh>k&iwOxj|64gXtL27G=;y~ zVS^0h!cE7o8-qTQyZBKUH3f7lR5go3B8iho3v7@2_UXu{J)Z>m?;Mm|)JWo$QRnmXIt*AG|gBdYCp4LSOtifXR0 z#g|McBVK(mqztBHu*vpLu8!5Wd)uHP3P~E+?rBh#O+$1-@?9LJ1kDM}@)a0AJxs-PY zzQM3kGY&#n_eE0n&vBbUMCy1Apn?UK`IdYjIP7dVY~7m<_i4k1RM3mwOg^g1`vH}x zV)@r#@S-qr1>J-R&DsoiG$&cFhx)3*$m+;slAch9JvFgu1beYu}vty=NAD4XHq6tPr&AN(5bh@Q*m?F*zki7;}2jsPq69|C*%w9f+Q>tbW<)ZOOQ_6Ya>p+kzrW`jCqO2-`b*1GJT zTaeXWPj%!K(VbpPB&i<4$z{e%?XDM}0fcFKly0$FhLzqzpin1_B6DE}I!YTD38N#e zvF1$Ulxwv|_0v@NyIphtYdlFOe9McX9n$^qW4V1;y#0e3kD~MZG9A_cq<86f%67fo zuuYJbmqm=%*CJj#ZQkDMMPj83Pq6-g?~o_zmW03eNID4@35>)7d)JpU1qPmfF#e%G zMo{RTwcD8)D)k{G{h8{0)-rvMzM_B0+^l#)q#V1YT%(B3$pWrGKRxcg!=C}}sZ{mR zd$`Z|h}pV=UV5dbV(Xx-9PHKgYDf`X4hTZosnmkD$kGsfmebcC%xu`e$~z{%o&}Zi z@``rdDocRudRWF^{AN#JS8W^f3v1z6_zW%bKQrOgi8(5cphXoX$VmUC#(3{xsBF-Tun)h}U+7w*X$JZ6M>s%#qetyg1c5ZUp8xNS<){7vy(aP=>%(*WU6oPa6c? z2`@%Ygg<1GKHC~*C}|KbEw`ZQnb~>dXnINt8wTO^kIYwWoywNw`1olq0G&MKNjup{ zg(C`S6y}Be^aOS@YvL@j1$BEahw*F*=Db^$VhRnQa*>RswuMe1?{5raCTus3W|az< z_0phtACbezM`obb{rM~Iafbc`Tmq#}E_{wkB5Hu*55qjiCr%GZ>0!$9oPH(sJWvgB3Gw8Gr&FAb?}1}^U-+D=SCe9+39 z>RZ{F!W|{T{YQaD-P2>4s~jj7M9f12|38%+-{0$Rq?RiMrLXp8$|XP~oEdqo)T|cj z%56nA0qGQ#h@-N=|J6Pq``&M!#8Byo`hA6A=J60v_Zjhi{Qo#JBm?5%{jc0{Y-X}@ zj%g*GpLBFN5}q=aF}$Ddo+vuWXHjMzV%9i9?@R{*nB<#BB`H$q@8%F~{vRWS8`PJ& z#b>VsXFs-eGO2EK)I4_EIloPQSjcpul_VJcG+OufB9H$dD{!ncbYC>=n+q>pGT`%+ z>tnu9th9M%zmxL0W!`+9nm#H4vp2_fM~J6iD>{Mb5r>VA!jxyf%KR&|zexPDcMm7g z&m=jb9ag;G$Gse<8CFP4kyD(IWRyHoC*1UC78q+$a6&@6aD882;gL0OF_p^66wU|(mK~ER)KHz*DE4Mg8W1j39--FE%)WzFpocM z$1|`Pl)PZ*?d*O1ChzMki;57gV#(7x`QJxB|2T>YmGGJ>3Xe__pub6Me7 zY}J`QbgykZvN?@>5*OI!#|BU$T*GR!9fGp2~arG=mnP9=!!+;Cezg=ggU~ z-I{5sh_pSWlq6(fFlAQAC!0pHm1(y=5auR=%eTPUb#`-s9py~bG{2?4Cq6tG>r;)) zO+7T%*wFEkjci!kzGew>GMiPAPv%re;^EQqq{L9~P*e6gPESx07#v~x3O&1cZk!e+_kGEjY+I1BrTvgLboe9m1}p$OfdSIkTz z@70y^2+jOB<~9{F@k*(&8RsZ)t=?KuJCZq9M48}c4Gav z&raL(F*b&hZ_4iSDPbkEe^gcV;Anlg$>KyU|Lz9Df2A$l-bguE=&7VuVK;z4r!>V` zz@vbAK+*Y6?01Wr1bNg7K4M_BwFbW6`0;eS%Wg+<2BY}G+#8n}ALUR#^100KRvM^? zM~jYvSlwFETJqCXcW1%g&iUpa&zlcsB~_8H9_Jb4Sx-J*@R6E`>Dy=2H?7e8L-LdR z+QTm-nTkQnA*x3knTIcV0H6Gl*(=>wt*FNcrm_ZOk_ogt;MUczuz9YgKDgM_e=BD^ z72r+4v?AMu>^>Lf4oqZ_n(=Ht|6Dt^`e1l4MJeM386Xi`y!TRpY~1djc@Hy^M>H{} z2;C0Lwq+joK~LyukmPf*YC-n%-==%2qTENRnu;y$-=tn<%AX(p(^AnK#ww$j0hSs) zVjO!~d3Y49%5QDzXkpse>r}|^RSzOD*9p@O(frL+y|ndby$lr-c!t71oA;yMo5;#C z&upsSteHP8Dimezm`O4T1Hhg8@g-7tF?tWibPo^FsUr{FcsGl<$eyV6^tf%WxG>yO z#uso=k|+aS;K}JFuC>3**iBN<@BTv~y-a{AE@b(4@45H>cV&ErG7*-1SS+E_K_(`i zY^it)TTBMY4HQqmJ9l$dbZ&G#h!-AH+TTqm6lxDSHqMHTaY<7+!!#9jA1#-$WjgoU zQZaY(0=j#B8)2w7tsZ>P?R8R)HhX*rJGYrFbp2H^g6%DB$v7;pdsPOb(j9o@XJm?VwjexAK`?q%H zTo`TEd6p-E@!PbcG@_`8<}d`2qo1XteyLEj0mYc*b`oHjbybEmCa@1U6 z)9rDWg*J86bdXqN)<}WtM!%_XF2)+_S1y(T)kCwFHM{F!RIN@Yy8uD4{KVjji@n50M(IN2YiwzHXq)sra(eAD^ zA%4(X3M=)EOqH~%hz->8>+03_Puj!dRy*behq_2m!^-+HQznytz^rF!Jn@@CqqmGo zuPXLm7p5QzAFZ-ZeSg{C>?BlNqknZHDk9SzG4`k(tVNMtF0>U5*4>??Jb{7}4u)&Qk9 zEmbG)aoy7=g3|TIdd`;Tt9{rgMQ1iPVk9^EHIhzr{gNWq7g0f!%nc2 z-rGdl?$N2GAWwXgdA8~^6#B+{(hF{ZpI&Tkn5Kwu^u5k$AB#BvR^6yHh;Bv|lBy4s8S;d3wD&pfZt|6AlXa)QEDRfs zon*5w+st|nax&Taq|5rRvbvZ0F9(P&Ul`duGAu}br&Qmle5Tnsfk`P4NrQ6BV|GcS zCJPMav;T3dEID4YMltg>YA2Wv$Dc&zq{U7{QJvSg#3NJNA{oY4rc$)BlUlz9ZJ)*+h>}St`;m z!A&Gsq6YJMSv=!Sh!PrQ*_DTfnRb+SC0gIB^ z0G8c^XG%M9SOhuS%zoUnInyXmNBio!t5mvR0sOehp2;a3rF0h<^h#J(XHIE&;4K|* zf(ir_2O@r+l_7E}I%&%XCW)@8@-x`$TuBUbAF<|*uDUL)`Q!n29zr0s)XJP9i4Wkj zEoJqpW%Iu19jO#GJD^rME-%ycxP46U8OO z;%@pI=IKaGROXr_D@lBb?*+#EBA@KTwWr{ToZ0~;s;xZRIZZ@&w^J>uZ!#Y`P%~`!a`V3!wwRNCZKNKE z-`9=5EIwNCk3eCAzvw~;W`FK|c0uhL{!!MTrVzKSO|-ksYSK5KQ>`=XUf+UnL#jIg$+DV6#`xj3>hy z>pXi`xjp^krUnCRTR#O2Z_?CF60_09Tu^uOF6=a=?#1p_D%#^UWtu#>syb?U$FHpm z=I2*f+0AerC;l%(T{b)eT#?=_rxgW6>;;rvOj9A;5+ssY5&B~8$+cFT&bv;pCTOYJ zMfuke`SZQ#$&G}jmq1a=YYd>8+L_gm#_| z=X%HBULW;j{xB|M*aOKGPLBS0G3KHJMAp&yq%r{>u|fK=m4XvY9-6P7Y3thEAu+Oh zO_~+eq}UVv=)!E2Jgbat7TBa!qs35R^K;-T_y*KvmxJHyN<7;Yi$9jJp_jV4$4{p6 zrB~XBbuNCQpTbx-P(G5PGdWk65>B2_tm(;@OPo3En2_@y55XV%@2nBY6bUY!EI4x@ z3K3SE`O3Xhx8ow+R3=>&#E0W~{A_Z`mt9ojGEcU$z$(+!g}N;)Lz?TL7+vT)e4_K9 zu#GK9JE520Y&GWV>19(l2uOAA=_$eo`BjpN>27#h+1xun=@WG0x;Ir~>~6U{k=@E0 zK_yuS-_C+NtAIn*1^|6o@o)#wA(euSDmSWqbMH$#M$!sJ{9LUGaeK!WoWL9a|> zF!MfSE{SbNBYX|-jG1i+G{NTy3m5CSTGz7vfdrp_1%57|-&v38 ziH}-#yjQr+w}$zF$gqoPB4&|XMEw)R(|j3^^Z90ib;+3V?b=5No!X(DO2yhyb{H$! zC$qVq#cVMHxPnYxm|o(yopXMV`$!$d6y1)v%iCitG5DaQ8+hN*?4>B&WvjSB4_$XQ zSU{#v!x|Y1sWqWy{{1W;a?evO%IPBd-lNS>Uy@RL7GY()CPql+38izdGtaa75z`dC zdJ%um=R`N9MkW^s{^{Y%Q@=Fnqowp8DVpc6#6UQ&`Qv}W*B4?5>;vesY}mF}bI3MZ z>CuOC>_)!+jgu^?{$nzY{E_!?1EHZzU+?)wD^71U!>zWaWO*7Goka2bLd)7OD!O%l@)CgLsQKAmbk455`mW6^la)>ozmj0O|<2g&fape(4I z6%8y9xgmSdz!*rYyQ!(yL`iqm>HEs^-3>_*L~e|8TzxB>_rD$}=Gr3+TBDtigftT` z6cI#skiROFc=nB>|7wQk8b>_xg9Ufz}=m5WL&?2cLL@ z!`aNj-tYIlO6QHu7k~IGG+D@@xC7WXCCIoxuZi0BB5@)s4jJ50oBoP1?jnfa#ivu^ zP=p=+J_NkTp`fV5GzA>oTOQ-MdvdJFznL>`i6I%%%k_28(Wn-c&3<8Pyt*!74Xvbe z@YK`w0Kof6XEzu|>fjqBe&je~s*|Bvp$7oO#|C*v<{mhvR0= zUkv811?zL3FD+)BUv5*M?%q|NnN|=FKIjnmQF()nY1UB_KI{LF6V^lM-(N0Y*!v>V z_I(fgpLkgsa@+#pN{oJcQEcycE=%*X`@@j2o^UB4e^KIZ*0Uk?+Ff2u{wDq(; z7JgJ}?{tW)bN)(i^narR-4Mv3NZ|pHsHRgK-Bv3U_s@YgDufgpvB@&u{@uU6P}uu7 z4ghd&fjzdP5V8G^7p~%y%!h$@1yR0Zig*RQTKhhcwYZ3;E_E(WIeSgx!rsrC;nK>Y zFm@7{C)^+F>=#`|vt5>IdR3eMnWiKu4U8yxZ%VNaHC*mW?7f?JlL#VgWw6P5dcHKt z25OMa$e1hTl^X)AMb0GnWv_|`-DI$y_BPoB89;ig8ZwH%*wbkDYz^buAkE+XbE8<- zjzd@)pbB&2!W9>a_Rspg>748fCxK;q^D)^5qEq=c#3J?fQlWjlH-E~HZyNeO%7Z$j z6X%0|S-){r_-_eOMgPw^W~u)xysknhT`mqM9uC9wseN&%J7N{62c4Y|^j8;g)9Dom zjO|H1jP!US*Y%7t9$8yV#{u_jij5^-F%+M>0>cq2BLOlBLY@a)p`(V|rq)HVuyRcA zPCh$wH8YEYKyPRUBov}o%K_^=>M46mljQ~RBpV85pxe1|qR}mD8hx1&{p~OiqPx%j zE=FYFOq{s6#UJ(D>+_m0ET)cl(nnkzv(v!Lx`JioEhLjBUsyaos3^&0*Z|CdB2dH5 zLSQpPGTh0|q}0G?|3(luzh?bP(OINlXQ7T8CSeWZV}X$>=v-({y-zX?`1BK)%mUAefkklY4PZ|qE%QM6I0IFwywW?B+U zP(XO2lK~iOuMsLBCv#J6GKo_Z${^fINuOj4;)WUv9ZB7eOBV4I{k0}r=~M0TisJrS zBgBuvGR>a22jhj#XJfI>*dRyKq4%hMpCgWjV`}a$)GRNG)b`1yQ(b1HOm9`Ov36uv zyHt1Ek6xew>@01E*Xw{Q(eqXs6BTwU*>Lfj>Q&u}3{jej3H4|sgXt7QunEuZm-wXe z6)Rob$Pd!r6?_5c!yMVfuQ{w968zg^cS)Iu0eQU%lwWA_=kxzN)jI!b!jY6U1W&dD z|AKf?;e5svo9yXBjmw#?OJkwuPn-Om1+$lnLEp#{a)bp=us(E@NS%K`H$3)F9FV2k zK~#HwQI(jm_TUkfL?np#h)ReSHs^S^ZAcyfE2h59th$@2Rmlt#;&efXE1$cC_-jb89;J)JU_jT#!W$uFztQNsl}vc@nD&hw;9OH~SMrIk zf3t_D@0CWSYR~(Mi?C9MUKD<$~J^yso0Bvi# zb#!Jl%fjFa7+vh)i}6q2rjEdaw?!7bwso^Ls1Fn^twYCN8A*A884pAp%po%2r|3799*WuzW_ zas9PZsgkFauO6B15AT@Zt#J4{PuS+p~b{~|d#WmS|@%}dI1mVnAoq9{nWbcD! zf((5u`EKM~pc$B7%zCCh-8@B(jizJX(ObTT3qk;HaZVFWc|Zqn zn{qMWdIFZ@N7mu=5@KLcVh}F0h)HgVBo(Gxr-XMM(e#}bA1wHan;0K76EWs9=B$=J zjP5?4u|8M-QF_DaifqNxZz*@o|GrVBF+-EE>rQ;T*tM>L`n zblGx+nGN0B`tpRNit4veMf#i5-uf@UV8W;AD=@Efe5Q|Q;i@~My1J+z6>Gt^57D`2 z1&GnnJcwz>|9uE$7?FZ2Q0Sf#APAc?Ka0`uwrn2X+D_~%y zLP(UKwTU&)7O%s*ZJnFWosU6GSMhO25V8e2Gg?c?tc_#1GJ_Q+;q1G9i6_-2tFlDT zgPJn)Uc9Z%ng=fwCMIU?#q={rr7BJL4qxh z3Lw&3YWlie8gYEC*Q{2S=XAZ^r|2%PShMY|xV@((p>^;WM z6ry~r$0DcKeww7zE<&l};-9#=fMLiVMq5-)E5sN4Mermm6tv1%y=C!gnG z=!1C!>I_s(qjWvY3Q$EF7J-n|YkK^8r_{E)J;XM<-pmSCzn2&dkSsMO#@_Jm`yYo-sF9W$Sh|z6T3jubb|py% z{av_dVe28&XYO^P%49(96s3i!6hv#e*`xY|;Up5SV3k05pK`C#c$IW*TE;1oLA7l* zy}?!yGr?Py`vAas`FCkO-Tn0unvcC|N|-Q8%J-b7VFQm0aMS(S`1VFm_l0A2#4dDS zX2oai&4(+>!Q{8H=^8viOXjHf9ww;le5>Qmqb%5k=6^m;mU+CT0=hXS!+g^|YM!I> zqXDdbkKC}4eaZq!Cap!C4bM}MDC7+9WggxBy1VIoYc_7C+R`-`l{Qzkhns>wVr?-r z@YK8-{_Xx^PvaZ1kUom%CsByB+(u z%O_q-L|GaOIx-g0O=x%~9WEVy&aFy{j2{U1C;D4{B4J(sIwbGXfOYk-bCU{+J zxK}vCLr*gbum8T8rH~>8_?)q{=q`r?ynpB8K4CIx4_#ija`Z=zz8;au72{X$In$5O01$^wPt>SU|(Y3LR z3-(vs{xHO-M2Iy&z;U#otZCC};%E~Q(8}JL62UVNt=D7htEktgE89BkNTpWYKF@pw zp^A{OU^nQ&a_H|!o3kJcHY2uE4nvl&*D1Mwb)?(*I^@)9pPFK)ei(o6t$!7*Mypha zbh^Hk;Q5_F&Eh>ICJ91C;JBD0*(;7L(%9yYmb8v>CPAn#@hB+XUEwKz*Rr)2081PQjXDHH%{m!fU` zK$%xDsz)sai>7GmM*Z8hNY?V{^4$vs85UD9H%?DQ(XbMrpApwf)UQ+la0(aMRVqbDya;Nm5LwPqL+lJinY zOzGtG#(_$)he)+TsZpVe;I1rXOa#Lx5Zx-d+;T(&?LBCjKrrT%WhW@HWo+!=t+**~ z>ugl6Y>b(#EEAGoFBl>1osx7tQlye?QYhr1S+;Sag3ieuPA+Sp z!B%ZD-~WnMOt%iboGD6%W0nytl2tGEg)PRR5f8A$C=+kJzouhn;G_Mb|9)YnKC>Y+ zm43lUC9x1I>^R}XgPq06O;+{L&+Ubv@_~3>ySkov}$R}wO`IvxRYrXi~511HQ!^`Q+GspNAXXyFu z4_@2-*a(23w?Cn&IrLf6}%VP(}^G_`u8d08$mXj53EE2f;o4(t;A_rW~ zo{Js@f_}=j2>P+jA(-~EcJ*~mfC^s1NVR-p+MD*0v*tNQ?TYOlughH_gqW0@Kfa** z+Q!!nl7^diN~Bky(!h;EwI zz`C?F6H(Kg$#6X7beBU|Q4QWO73D=5mulF>SuZWG>M>L*uimxyR~R>EU4s(DI~iGD z1*G#-p&kD=imsf&ga_JETo4$w>>F}aced0)T)^Z_ORg~6Vfx*1hlY`poGp0*yfAsh z?^B{sHSmKD(dTzve{SyP2|S`=ePx(6yhKU?FJj|O2m}LbY*kDFUKJHbGL>WeV*3&y zA=K>!Tz5QQM&u`z)(;}#bvGZo2>_DA38tRK5~Vth7?UG|<~?jyUy|%S6nq|grYcV^ zYBN%O#K2#2&?RcW9lb2!_U<+JYIq9c>=9`;8Ug%5W;GD{hK{3jTXRTwtG|sYy{W=H z2D_2dh?6lA)xHQ$f^Y`ee}`<0sC{LgQc^sD9m z!GK^-vp*8a1}ZOTs9TyGK#_h?Ez5=D?)I;$)x9A``Bc7WFw3*shXcdbNV~wrNzkrv zgWNLhHCRxUe@vrk?QM(N%3y`BHabyPS&F!)yE8POk2rremF^&{V>If}@RM)h8_k&| z*%J4;d|~(eo2C;}XD7mEg|pS}{Q_=>8N-p>87v4lWjJNn+mN>vWyi3w_0;3UL#e_r zWgS5qt|>j={{3K9&4zYCI?GDat$QHbu`ak#a{v9IdOx~+V(^w&+CrVl$I@Szdetd* zdJR>Jt#l~cAdAVP4SM#a~@HCR!$X8;aHQjWtZPomv? z#tg4O?e2*kZ9LXoSkKcOPeDql!f{w>YNMy5H}RP9;dn)zzJG*snAf^*a#figdPyDG zuOgOnoeuM7tTP~ZQRlOA)>sUTKCXrj7`OK|QJ)vDs_bvM;E`lXX~-0vd7PRiEdwYr z-2f=q)hyD$_r@ELzuTwi@P%8C_m!ST*xK^mM@P$l)ZrMm#|v>ZusdG!8^Z?B@=#`6 z1}TpnX}21KnLvIxnS1E+viF)nzTo*rde870eXx(HNuN z@x4B^*lbIBNrXHfpqW=xe9qYu~pe&2!hrza2UVm+PS z*KSqiGmlTio<7!~`FOowPcL_5re1%0aVVG(wtrP?v;4XN2PD(qTR4a77YeT32qKgm zZk6;M4J|-i)FM1n84c^i~ci3y8&rA6%jbC z%^=+9UeaCV0?nJKA(2}myii@JV9}EG+lLfeOBg4?mxTxKl`GxR)Q#;h5&q;E=<`pM zuJI4tHN#_Jay@^-xC{A+bNj&=6m=M+QKEf&@x8_3=A!4)-<6tAhYf%dC4nvxnIp1B zZg#q3HJ>*~rgCZWk)0(Q=eM)G(#_S)lB#^1=SmN~Wlao`0oE>|-skmjB?+7QpqI~T zLLfBOuP;}N<@1r6nf-CINImIBLCM^U*-N0HJ&JM)o2Bp5dLl?P@*P2Ryq6!1fr7p1 zW$}BB^s}|ngY%DKRLJJYOE+wrQ9#a$@8=H2>EVvC;Vi+;J2$l6@;HprWvP%2F(x9n z>^3<2*DFZhjz!uWS3Ay>C@~!%borpki7Knv!1{iam~WXVxKn9{bZppyKYn+vKVE>J zg=OKx1Nv}kvn^#>A76oX>jL49Z@lsHGc7@oO6hlT2)T6^DOVIcDpa#^+c3M%t!$Uu z_ULm2_d`gP$VdQ#iLkHaefVV7OaW{O3zWUg^@H$@E~234x9HJn{sf1abgO#Z*E;l0 z7Yvcw5rA4hnQQpBa!QsJQvyAo_$6-L1d!7}=_?qMz47R0yf$&2y3+PYjx$n8ev*Nm zv>J9VL&z>N+rU&2dqwsMu(DRD#+yo+SpTt&XL54TWrgNo-DA&sCC@ZN;zFklGJVce z+omA3a<1DG8%PXpy&flq9hj@z+2Db zEwDj_siP$4DF74YFBm_D_20cQ!IFlA$4Zkt5VZJKMEl`6jJJ6(<(MIJ#^=MKiQXJj zvdxD3`hzZkyee^gI+gTAxn~{o6Gj?NsEO+hUR^FzzS9yymCx zwG@Ki=+5weIYUoih4wjv8EM2$?J6t8%2VFjuiSaQH`RdX%QN4NHEm2R5mrc93Qf?k z?m|jmJTM(?|G>2mWk*+D@MH8ff?(G(R@3T7obJiCb=-f`<{LYa4)Dog>$z#Wem<7G z`ysGbuu62QwPSsE{^5P{yFlvd-eO2&5-olIN$mGz)a zI*N>m$jY92KNfqcv$n)p-}3X02htl65PS#Hdq6UtKzoB$t6E4W01KC+>VB9dr6Zl# zPo1q0I}RhS7R#yFgfTVvKMH3)wLPcCl6c=_B3YWp=f4;wOrzxjvC>hmWqq(wF$+`* zm9Ti(tvhBuvcpSnPH);F9DKFvJ5mZQ^e^}31h;6H(A5(ovGyu`HN|u&R%|&N74(yN zToG45HD`Q(KYnD!R5uPvL(TP1ep>0?sEyza3hEp2%4rJO+#5l;`lw$nc4Cs9Ga+u` zjZR@M2-U2+zA^Luf>zaaNZhA^=@7rEXa^a#&byx#^8uRP8RNdbEC?To*J5|+t>xPU zTgie?tedxrA3$Z|0# zIC_5&UWnF{8k@H{%`gmDUtyYa?S4UIbl-@TeNDhlT7Qb!At0_)UER~yiWF% zqDZCBYbFU4)Zb3$IP6$kr+N#^A)90ODoai)vwgr47tzk$IK!%&B{Vr%SJqc-iC$eW zN%WtIP(rJ8;^oauLrdlr&ylAm0EBYLrZAM(n!$W5igi|XtE2{rxDy@JF3joY~f4-?H_HZ#J zcKMs&$j3aYKy2Fk7|s($QVGagBQFOonh_A!oaG^1X`=KQl&V|Xx>Hs|G!@}n2*uhX z9vbgZ^|L`DOg%>m>edzKj_S+?klXTFLz5IJmt{0|Iz>2_c#>@)*3dn8%k^x$;ZCSP zUvu(rP#g|Ya{hnmFEh{)RN)@Y(UdEq5K6}M(dDlchJG9;J-v{&EQzL~V; zrZ+n$eZOtk&1}%dPvFNPAG(~a4|bLck(9FP*U&!a`HXgGdDouuvF&+N%drHo!%8Cz zO|kZxCP@=WUS6D+PS$-e+Iv&V3VH}wN(MX!ubTfKxko@Sr2XpEG_FS z(Rlpo{k=KB85`IU&klR0GbzRq%D3p|nb$l+uhkdkf!`bT%jQ_Kq3dH`tEP}sn+A%a z7++k=athD!xLy2|?Oy+5^@bm?Vl2<5IB3wzUSw!@y1nSiQj{o5>21KG{+Fe&A!uW9 z>n65#kiye#ysKy|9k0m5*#k~dD@~*xa-E2Zce}>smzREIOtEGSRn0UxJnCS}b58Vh z&F6EsY>0)w$So=j!1%&ni)N%vGFWsrO2|xS%y0c#@b9*s@xO(|%#9q?LE;+)t|Z+3-9Gj#h3o-{DIwOnbH7W4|8`836|;0NT;bp15RL>1#uQ zy8D3m-aYl^(|`J+iSCH|NvaMA3v+#%oE^ke`Bo?0Vf+YNzs@AMgQ*PBlwtI;h(|;# zVi4}fJU}}lkctr@GWCaH-t6in7LgJB!zLEUmgFbmCF?|vw~@RGxjbS9i}`XLaX~cc zqd5?LTq4Ey`+neuIL-BIAR})g^V7?9vhG};J;4S&tPX+pCjE=7Ar4G=?OJ^A)q>+^nL z@RK?-Bz??KUBWKFbptU>b>4&HmuG5vIKe0T!(YB2Y&uwGpnZp^yrAD)Au&{Ae_SP& zz{)g(_Wb*yiFuy}v0e6fg5v0UL^QXnZb|}V6$l#zu}sbLkCEL`s}=-lAIUKdCgd8! z3@LY;@5l<~x0%@45KzHz!MDfN0=16BF|-$5j54($Hr^&@w#(EUOz`h==~O!Vm{aN| zvULk4c{eY{mU*LWA6o7nb@v>Dq{=50bbQ~TPl~lKGp0r4l~a<=H;8e%3Vrw?hh3g> zZn3_%BkjRoq1^mZx=odPY2`p}wQrhPvpS{K4~Jm&rL#cBAC<(Srx08Y_ELpAk@{l& zcAQ-Kuq_$1TH{#@4yG{jz&ROPpk``K@1917ls`a^S|a_KvYG?m!E2Lk3$^p%#JgtJ zas?HWgYgQ?<1bK+d`oUuP25xI9L@D;-uCgk-yB9sS$$>3LlXY@nipTDjqH&XXXn2f zeBmg!aNKT!vWpU>%jcZu3;UI43pSPNZ^xW{&NQjL4x<^S@kgqEZ2?boK!zU2qAT~n zw+8#aE%t^e4s6_Zd(-^IzKwIeWL9&F;AA0 zaG_C~%J|Ypih?X*<+3pzRKFP{f!*F&XST1}9mN<3S{X=dFJE>3zA{zpH=3hJ3y@N5JBV94 zSWb;!*Ef7)ak;0=8DDB@1XWuM@mqZx&JP)UK_jQM`*onXA18)Sw0Wchy?e(fM-;=p z5WiS3;y3|QgRa6sL2<2-UxC|Y!%o9us4L^f<>8c9!k0zzBxtQtCPricRkBNxeL(^3(N9{c-8J!PRs=wO_4k%W?PkNp= zFBX@1b7~!ZXnu4S;`zZQ)1$hUed3Z%G}a6~Jko3T`1Jb!fud&YekJ?5I z{wu^qBIe>Y_88iYJ8yv)3FJv@t;81phpV%WYHN$S{cTGNE$$A*9f~`&6xRa9-2%bg zr7iAGaEh1WEM#=l=ps>5RO!;SNy#@VC{VsZR@`m z@NE#~$Uek8#{vB&`6GV2jp6 z&#=`>>MVqw`+o3nHDh*|N|9C*uUpGEX3E6>+p zLD~qfDDr8F#liEGBZE>{YaT_!wdLY(KwdR>xxFjouxxUE(R*XeM-{;dI$fQeX$07l zKI#cWWk_4@X_=A^(>-#x5zTf!nC^8LTY*bfmj^sZ@B6i20a6h|60liIciGI9rz(XFDHNL9y8s;_kD!qYX= zVH`W$6|Vb+h1MBH$7*pS*%n#ZBr3XFpF07QPMTB@9@0Fc!(Q=5uNiAVxe%%kMQzTV z;S%@A_H)uZ@qrWi=0>Cg;@qrMyp}mc9z6gT z$qV1+mB?FWYWT&}!y%Pky&vlVc-EllS#_evJpp_Ie2!;Z-E>P~^iv5rq zUs2taweof&c{Tb>_!+_v!FP`6w{IM5%6u?l8#!J%K`$4bvENHOU0t1_EW-a)xk&}2 zYPcoau_{HX*;gBL!mw$ZvB%ES6s@bBziOxx((n<)FH4gnQs6{wjR>j206yS1ii}!Z z^qXGr@>`G_abe7EGQLEZap7;fR z_&d(i6`lltvQ?flWI@R>9!(i`Ivvl_+HKz@AcmUa_uPZU`~U6JyhLh-ABc5$3QXMq zhwYKoW06O>JH-Erp?=7TxBue8kw=_w$ai}d!{en37X)m7`ALNwj5sxgAcF7oUW`yn zc6~>FV$>?qf$h@$_Q`#}XRpozd{+ar2>I|hx8OXuo>E^GaK*N4)@|E{7`l5xE68o7 z{_QFyJ5w8UK0HcqG*#?=8l)OdI3lT+c5Jr`S+6tm+-cCSDYm{B(5{V}{7I$JPF=_! z%cny|3Yc&DzIlcS7@Z!20{X| zU6Vp<(i?Ug^RFpIN5_}JbB%UPqFzUMhwJw_Bn9rCh?H*ZmB*70abLcx#nCN!5r-p= zOz+~B4_E3z0jP+2FPNj}(Oh@uM^s^-A6VMCMHmfv*cDYWBj8z%ZWsX>1VVN!IcvLq4{Bn9#&T)fkg$NW4I4 z#tscdZwSDUuGt77D@<4s@Co4;CV_Jkp6wIZGFy{@7gQu`g*&Acwk zKL21S=@(&FZ>RaEe&+LGV=|l25(`<^!{qI1@Ms^OO>zYK#rn?^tE!cSzL}RDWyLp{ zO`1)$@IwzrOK;!tr3nR7L?gQI?(POzphk5?^UOs)#G74gA2;!gNIfoy zh`DapcDlZiR)*eh-+fh+rQ88X^JECXOo$$H(zzFtW%MYmRTF1@b~31MT6*CW6ZYMi zY4VB_oQ(e06gS2d(zPG%{Jk$VXhC1fxIY|fRf}4vw@A3cxgqq zmIOEFhITaWi4y5>z>o5eJTh#O#G|Q|6uyZR($i^MdYiPC%!|Yq4-Mwf7=pmV1UqY^W3-+d z35%o-8(olEX-YSdiDS4W*sWH^s6ogrMIkKWz_GJ-bdpHJI+-E)VfgLGxIVvTdwL{x z0;JFf9xok}ifbwMLB>J-biemuJ-FELc70BE0innpgy?S%o_C`NEJwW6g8)F=Z$}JE zD3|I_o~$rPDoN9mz9|U(PLfdhc{)yfR5rnhjJQe3#~gJ5y#l~#p*N1DfhVC}K}+pm!Ofm%p_+UzXw&LVa0R zzW0#@q!uy-2qTH{m3%uAx^PbMI-K_U&2LL% zHn(;L;TdO|W2`vmxV5=wYjgM-z0>ie?nNjvuS+dmvV6Ec78$C{nr-nt!tjIC&Qvb` zIyHDLEj@s<2~Ng5m~9>LxO1WQr-PjKamUCCe>4z#olh*>;>bZhQw7-m`QlLWSgit@ z{c!;afk4+TSyr>qBg#463l)4L?76ZrR&{!RZ}_qudkL45@X(&n@bGYk9g# z6AU=q@a?;$w3NxyA2sF=3v(#_UDU^VAHsJqO5{S9F0~s9W#4RE~ha4g9(fMcVSR&^@kB<(o|N}m;AW6BTOH3VnD+hTd5v2@ak|T?QZN}${pnZEQ&wInAM{iL?>$NWl7vtO zAhQ~%w}ZO!@SW8pEn`dq9BNswfM%J-7hd`O4n1^_$A*%e&Y?(pNfum*-*}I!X&EV_o9uQ=F*7ftc)UNOpAiopNR;kK zu&IS+JW4a}ov1F_rI@GmRa-G4N8&z)u|;jQOuGj?%86X*!c>v6_Md-obOCK%rRQJZ z{%moVDc=Ww<&3V@h{JqcdM1jsudaF zparNgnp(GX(KK@zINK?nXLtN!zb7Ka$!_M#jR_5G?T-vbqDz}zXZC2$;o<~yLif|I z{9uS6oO(*@i)Ukw)Jp4EerO_sS*;)CG|J25GA{*C_tp*OS^;7gP86-9=HIjNh6%Ql5D(Lhh3jj}MaY z@Oy?jTTjVaBY>T!ke5|}KZ}GULIFqvUkv@t9ZqB23n<|A*Guq+ITt7WH{9%Vz7m=U zl!#48GIJ4xHzqp;&b-kJn%GGNd7GRQsEI#``K;WA+*5*T_oe^wt$ba`f#mICwTIp} z-TC0LA;$s~w3~pc=LjU%8rk28nY6dj%BIe{{o-#V;5>@JVnOX7o&3QFYd?U7rAwPn zW(yr6p_{xzIF?Can)2;8jz)KMKx3t9|GwP`KRU3AZxS8RB-5(fR#4e1!my)XJ7Wyb zi3Rhw1gn$5^7#6kEs)Es=E%jF9M5e#&9wm_MFKXqYlhJSc%tJwF+QwsjW{)CeU7~e zO0EiJ=ni4nbkUYA)87h8?#sXT zMgjH?e4ZF7Iao6PqD-^&73O~G+6!pu)KPs#N2F9km0JGAU2sNSkIs*X(4sl~m`dH~ z`GYanNdg7PIL+tj_Q4&K)O`0|ZN9r!*4QY*_nLMBbaB~?`%}{Tb`m&v0bdIvNfR1an8WnesE45>1GmMgJFRhLm;*$`=}o zwoxn7Js0VVZV2o$wMyZO{J=W8F#7U2UH_&aL*giLt#Abpe#De9{C*f$%A8H3UY372 zbq^Nd!_=}~2S%`H%2F{yrH+#~XU0W?UbkH>(--NR$zgdsqsLQ zo8>U(&p&v3xk@*kBi)E*O@PP@2 zq2){FM|GB#!!w%BuDQwVe7da-k&@K=FA@h;E)$X|XsaLD=R7lhg%Duy!0sLApRj2U z>eUSgMtIXDfy|WsRE&o3LUKV~yFno`?<0D}sm#x-r^;tk3McbBks#pC5F5z^Q0(aT znC=6+V1_hlwCC9`i+`)+Q^9|?DI6eCk`>`j zCZ(l_oV+hFuzoEpU^HmW(%yXSGQM^uR^uhupN;)It!Onx)6iMCW?5HdRqf}b!?@Yi z?!-`o64IECuuer{j?A~)%;qhgj*TU+?763(f$Yp`Z?*l$i9 z;r93ee7uw142B1w#t$^BkfKN38uABgigo>4lT@U&V?7f56cRuo@NF_FhJO=hGU{F$ zWLv058qVxQM|xdT86>yRX&nDrM?(S2pf?+?b$vaAV4)wb_^hW6C^%FSI8^NQA&!Wc z-KZJnOX@eH~LYp~SKG?(pqn!IBZ2 zjs2&7ZoUPmmiyW00!jf$r`vAIUmyD+baSPTMI0I)@Ypk0fjmU>XHR4TV&+|f|M6Mp z;ekA%XLFwR=h-0!ODVMItYd_!QP^d%kvP@y=w(J3oZ1Fj%v+e*T8Rw>P@e`0COuct zTbRxJb!M~F@ihZE00Ezlk)>`LOM)j?*es=MBa=7*-*db>8v5BN@&psoT3LDar7;9A zfh`nR*?XLZoFE((RIDuKa%ylw%mm6ZTdaLwb9MQYn2Zu}lHmG!uq)6eAWqeYcDi z0_thV^gW(Nav9@8=r<*rkk%LyJoDGliu5vE3ljlA;U@##cX~z&G>i{llLxyekvQ==<}2vOg3k^3M9(w+xqADyF3}{j$X* zudu3QlR=XCLub;CjFADaDlKNGINLQWB<_MYe+yIb#a=w&o!!x9g#3`F?ekK!u}QxJ zGpr9Qhk5R+Oy8ah5#p=pN~0v^=ZA#J;E)}v9ri`K+uuLUiK72uu6i&lJwE0nVEy#H z!N$c45%S*I>%TwjV>~pR4Nh>DhtgT#&L|^}&BDaWisVJ0b>2<@a&|H95pX_snBms; z34Eh5M!zeM0~9C0M=lLy>kNTRqL`~i#&EQTs!Ika8CMHlH+*7=B4X>WetD)|+w0wb zh)FB#OeoH}gD-WD+4cE{^69J26oQRu`(IMpGOvLGq|PKC=Y)S^O$S2zK$xX#)Y%a$ z_Pw@(2?PO|yvYX|rvrIIkK0@+%*H9^eNktcJE`nlt}%;uvY%!TP(`>p25afPh$bkM zKmRt&^a)Ul&b8xLZ#IxNX)6%stsz_KV>|nZ5H}Qr;5IIR#-;-7eCAvH!hZeF;M!%%4yS>mDyZYWSrJ9`hgnOB`o=eV^^)I4L|C91BY)m$8%n+B zvL{a}TavO_HiO7~P~`!OiSn0m-^V8RS;-uG&dl87d{-w0O>-~;)0`@;_3{hL9rXG^4$`T(2dwY48vPhHaNgWi` zESj5W*BE8tw_#$&PNx~Wn)5_mM4TU?VMZhZPQ*;Khr8?>KX=bC(k?5$>0FsrfN@Ws zhJwEU*s;b396`(3PWy3wHA0isUh>exjA%x6CD~dN8Qa)glrmBpIvOdvLKK`7kUG_ zmUpEu9uA00r9GTjz4C@2odJ4{2WXEjSfh;i0Kuh9%}gqlz_)jEU_?MtPLRu6r?Y*q@VSg%wOL=N62y3MtU~sMp3fntUleg zN9A1#9brC?H@tqMR&p(=-od0g!wyx4#@!gJxD{YBxtf);Poz|`oC$b}zi*(3Vao3y zUPnk0K~M?<2WqWznWS~BuS<7A>ylLeXk7=auI$MM5U)S-NP>E6Nf(#$&pl|&N_J7f z9!rsN;w{;f3n&5qd{?uPcAD+;cf*XN6vw%^1zt64vdKeIFUQ&(i}UZH?37&~B}Y2h z5j{_g167?$H7h@zBFkF9MGlfUh9$j9Z_za8yevK#dC6-d<}GU7v-x|(j9G8yCWsK` z{w;3zg}q^2rpqLj9~=$T#W{E+JKi5gZ;uPs<+0KAp@O3`E1tY0%&)~pN|CuWR`sf7Gd zohEh0*l_Px-e8${r{~h5*#KN>Xt1KJ>C);cYINzi`aDlw)^da$C-}de*!!LTrz`u2!T?o!^9tQl zm{-;pyy90Z}wN;HdTO2XdgN%Ky1^R)uYu71RD0PzEbL8s1wNKaHPbD972w#ypj7H zK192NmfL+nwY)dpLB0(3DAX+FRMu|<;g3g1-Vep|VJ-&6Ua;&?0398MtGgsnq*bv& zUyQvHjW&sEJQnphndaXCvDq?fM5J0hT(QYz+2OyAP-sKE)1TO|c>oOv4=m{Xa8;vq z>o)Q$wDs4%)XYd)d0dvh^V*w>>_+#h+iarDE*R6;uT$1MolPL7aTN=EH;dr3TK`>( zvE&+FBP8yaWpB~C{Fbx8(Z%;jUto0ZTTsL6VEzQn5uI9>V=PsO?(d;|1zDPoCKB^r z)mp1LF;A+lUP`6swO$YNeC||Wwbkt=<1x+L#O9brG$~GM%iiBF55Yt-5eY6M)R4^X zLs}VX>7{vwi-Y-K&K%K+{9avIWwAkiB_3G>C8zyDZ`vMe3#&Q(JSn7@BRYfW>S+37 z_6TjRh}Z7>r^skM&%T&mz__LO`O9zr{!smqJ|#~cZIq?qU6amrKQ1og>uYq0heKY8 zz@g~FV*LqQtLN$)@on4|wc$^0(w&Tyw?)p+)r{%?sM4!T**@v(Rb*Ds_i+_2pG!_m zIbpF`^!0tI0NK0{+?f+>#cynX^BeJgiw?O~y%bEEmRcj9&1X$i4clMQ>{~DY`g0;l zC+B+?gq%C_zg~${}(04Nln5O_ zb#4&l?21&0cQZ(}etz1)r|y6CMnQGHcM5O&M^+&N{z*#&F|jL=4-LpS>pQyUpR3!r zCJQW=Intr!O$*@Kr8p&k!a7Jpu|zkCO#vAc@-uMi^fvLB+|hYoaHQY5pLs(@ZenQK zeorIKtMfYBOENGIVR9Fl7mWo_m*(-ss%=rX_Ln&B^=+NQl+&H~qodA+t3(|*Hjo#{ zX}-rG0o9B#0Xv$_7Qfr@*eH1a#xu?5?~310Kn`(PFd1!7ERtTj`P>g2*2;NCsQCzAd+cfBh`6&k}-^Gg!xZt@5lDHaDI$# zkGxNrw4vef&PnB~Leg}Ve)@HM(K&jFjG?c>RJd`-{ri;l)c@2ZY_wDU(Y3C`0{A^LUO#kBr)t0L~1rw8{4m~Uf5@V4&I7A?`0qN0}} zbD49Pb3yq5@+jEC1wHWd=-Fv}evz{;_qfkX+I*Oqpn7BU2SvXA&?K2~EDm5}C%MAj zk-+B4Kfoubs!1^vX}0uQtv}N@y_kb43GRD&`jF2*d0c`-xF%%U_7Sv&Zzg9ZY)-3U zn7GB6s(*CoQ~bMi-Lw5Y9JF#l>CUx^tWw7-l+#$*jc*B+Z6`yPgu(R!5cvl6!A!c4 z8aFo5sdIaKX z?i13T@SY^|I$NKmLobfwQFul$b;q4?+8^Za-@T(sr4J|L*q}_(~iL`Q^xZC zJ$eGzIj{wm!VEDNb_da_wNIbLY6V&=uJV?FR3jUMpDULb3qMBq;ye@W-#`R%wmIQm zw!0;=`Dy>QyQQg;Wiqe1pEhHS8l7mb^0Uhf{2Uv}q&nWAO}cPN+Iw%Hnhoe^ImDe{ z-#T|$1v2{b*Mq0&7n!v7>bcV7v&4ioUFPiP*oRtVP&iIUHjrIWj&uqeCVi(K^Q4hr zxny^{mpKwJ1#m6-Jp0B|*STHPza=9%vJg6yM*^zxnuBX!DrpEhS+rFOLz*bT!kz7s zIlfr=XWu)P2!p0nI4NK6%+};P1q42@GD*Vka}Q4liw!GXMk5KHgW95j3`&|09nY_0 zj@25MB$IYLxH>tEbM_0p>U?cfScylVJ13nGP+rhjxJq;VooxFj1N7Sne8cP=mDH2K ztpn`3bLcGf*^!QuX2XN_j0t!+BZm(7bh_xjc1c^^^+@DIe4c-OjStzUQxFq~1|qpn z=R2#XoAIrKkJ@_sm%785(l8h-7nS7c8y|J#dX+>%VRW0u=AGB|=^cgt&0cs4kUM*i zSc98{E@DA6S3Pz(8FB73lzJfN+OCD0hifnojQ&7epMJ#^C|6AFs`*3l#o4`BHh(_1 zw1^DpV-jChO(|K+rew5BXa_RAN@T!`-CQeg-}~WR6o*&A_>ky6;#T9-#xe=+$noc< z1=pfV*o?m{ z6*gJidPA*LuLVi!%TP9i&;UTEJz$uBNlr2h1V}CY-vSc3FBkbRX(~Pq#v2=Zzs^m1 zA|h9Y#Wug4&R>SQzmC*hs^E^5u!CG55cQ}y3Q5LR*88d3^bpdj`01%jQVVxGeA#2PNuB3UZp|Q)Mv-Ye@)NHCew^B?eHgQ;Yx7sL7ST2{|JVqW54cUZvcrPkX;Lo z0^Gh5`*RU7ac@o0Sn?s<1UPP8u`%gdyQpz1bCn znI$K%8JeUyAE1NQ)_d!1&3~hlq?c*1@$kW@-%yb;jo04hAo_$jmNZ~mUTPmVjn5ky z*TNkwh9SMW(x0*cJI@yqlq~z5K_fTWKq{s|Et9F@I)g=7n}3(Ce=qER$7OzH#qc-U z;nWFf#I<0u@b1UzCtz0T?V%)TLZn|8uEd#B^Ox!&9F_=<*tdB(JTWJ;2-ew7A98DZ#1W$T=PE6!cTBD=VPtn#Fo5H7&BameALhtBY;0RUC0`UEHfF&bv z1|29cVBRGf?f9}2PFG#(vmLB)-P2<=KD*`!LfkST2S%D-h{e0=Wgv1N_ZQwo-zhjLvAYgGkblz!z4_uybM6ak z(cv)aD?G2^o1G~V{v2l}$&Z82<_IAb>z>Nl_#=& zL2GPoHs^;h_YCh8x+`X>M|GfpdEH<*K7K??VBD`4y?Z(c;-{RtZ`_aUj9)^}G7Jm5KS z(l{I=%!cxNjVSN+YjNS&8Dq&ww{?aw*_^GV!{e=hpS*5JUkM4hfZZG4(}Bm&UBr7L z=Ij=LW8YM{t>(t0hO)?hi#gTj5)_d7=u}T`mE9h9f76^B~`%MPNJ{#O%mTtc^?%aLgrOk@{efNI%Ul>iV6&X`9oM8jYT)9bj#WaP@`U2l`32 z@rlwfB$Q_{X&@REV}xCUl{h&L`;?;6f6SW11ccJt0XyyFUrx%5IZ{d2_Vi`=c+&OS zH5WLHrAcLS(6^4&*D27oY47zv=jaUO%d&4d6hsr2$jCG%+^zq^M;x(r92umViAh8b zh)!@j?XYr-j2=rNsbaTRDyz@0%nCG%gER9n3*NL5yGx3fFK3*!iA zCiQmyMg&ALVI$9dId>BkD#AK}IOlZlojlFN=VKE)7B$Mw109(%6viv9%wu1rjLoFV z^yC*mt^{Sc6dzeA-jH3xPex%MqWL=#t`Qtni3$sLTf@d>7W zbM^~>YN<-H$+@%NqvS>2{d|5zDBR{vjD>0#ran1h4TnN0iA)%}8iqnLfn#5QqsO1Z ztLrhXsHq=4yo_G zcJimV_#_q8D`HVX-lm1;Ov93}S)4+^gSu&a@3&^Rx-DZ63A=;j2!bFihzN zOSPCo8p{|q2&>aF&J_@G^freT^~dtYPyRo&2)k*U#JQ+o;-c$o3;Dm zG$t^L_A*B$*Ny0+S)kVXlS3esJ0{YgIx<=lOom;Jyx&i>e@~*w0@PJ1vsZJRJVt6^ ztgcK>$zSrv*muoH>5^OvgIS)>KBA&8WwX}}O;K*INeT*(eAk$Pv^o$nnIOnVH&gUA zubsW~~|Qq>gqkTy(SjGSo%L`|5SRpN;<0Lst+HAIr$f7&j;V@WO*%?{GI6@09wC zFf@=wnX@a^P#(`}mQ+}{Q%r*2^(-*2P#Uu5oOMY*+|~!dOEz6QHm63y*+1lL3n~aW zSZr`nYY3@*+~;bSv5!fZPiL;Jj-z*De$B0si9U{um=&<3f#zPNS=1KuaUn~2$&@0! z>HN`7D_RlOD9eLDqFch^E2f*h7MM(gvCVy>9{b)bPW5yAIou*DlzTtRG&qrWR~`+N z$evc#J`Cpq)IWJ0J?q_nz#zdfk-FDRK|i-PlhoG0a?Z^~oQKRmpn=R~qu7&m?=Eni zOO-d;cQAM59lK7N7!y1y?*LKfNC9uTwISiVlj+`cO%3JQMv?^7KI1L7v~pVscCc20Bjg!!XzT<8dDJ_Wt(vZ+O~&JZGw*m$1xyf>jxnu%epz4gl; zH2SP|)~)@fpS+!B>u%2<6X}3%V5H9Fh89%G3Uf|jP8~z_#xKi$18^5BXjfuRNw}2FESK;7-=6tz zswD1=z}B@|#2bkyX@vtxkMdw2&yg&9a=Dp_!zIXfr>yb(eTpk3V3VVzWfkm3R^kiG z$VGov`!%weeHUx}*vd?c2bC%?at4Y-`%ZVWo#-}|&GSAoA|q7XVziC|ew@29gc-@h ztNtoieU?NHIXJ_`E`2Q5CA;BH2HblkIV8cDrQ3`HAdkZN9pm;(_(A*GzLMCvDwRZ; zP|{^{2m$#~k!$!bd^#Ze?U_pTj?YzWv-jq-j`w+G^U!jDs6lWwPD>#%|91T|SjXtO z`Q1Tv``{vVpzLFJ_&oV{rfE(Kt+dIQ#ckNJiwX-gWek4-{pq4}^p->p~7Fj(SzL_=i>c?~2{HL5L#;PZs zJBEt?TjC@!uN4fFW~jNPE&$bUmI^MF{W3>>5rDmOwby%?(HyF2CPG6+WRGmV4N*NuM<;)HCL6dq*1{%s{yG;6QbEU< zG6I>!sOx!2JCS;b1W#ap3>9?FWi!3w4mr_S7=e9eJ=?&dJlo`F?z{vU8WnZU z%1V4?PfF}tmtDntoV_yCk4x8ZJ#%K*lDfUK;rvFyQz*E#?t}zYJDdJfoE!1w8=;!W z#?1ll50J^Z+Cmw2sOkDGz9C_0bRR9X=_pB4(cjV|2wgEVj{rlP0$A3fNjVp@cf_(d z%^sp9;h(}NK^&BTIpiwy-m7F9v8B}RrWe|-S6f`Prs`&p({&QCTsvI0tF0d*a9*GAg4pqLny za$a!(>TCXA!Q*KKvDC8t^+Vqs1S75l^e790c)O$risvRu2}dKGP!YNFqxX2+^rb<( zk?#ZFJx-X=zS>?I;mI4_ZkV%T;q5veX#QXv(UwCiiK^`rQvr&AhQrWs*AV-OiB13Z z9>o7Yc>=j4kq>xeXFu=zf6<12U%1Bqf5N|lkk)dhS9G#BUnZPz@~m5*x>93&$*41@ zH)vuIi<^06NUGH)byMja;GXGxl&ny@`EL978K2)-z!yo|yeC|qg}Zf9?PDj{lJ?nC z*KGLS;&J1A?+G=ncxRy3ofFRX2=jsXG3euE+1~@h2~rh}><;MzAQh(%O){@Mvk0U2 zsvA#|W3!?C`d{B}||zxeFy z9479Rufh*|V-VO^`8G_2*^#|*TB@Q<61RW+~BOum3^}%%bMO>`Z?xd z->&$>f_U~^;kHJJl+#g zSTG{tr9Fmh*6=>U^5hAHg-n*5bHZ6T^ez39Rw77>ES&T7pJ+0jeBXL*_f;|^kue|a zq@g;>nFNDbs6Ul_{>htOJd5{w5`75w?A|mp{#$$25BwzG%u8`pp3V`&CfNlA9!p0x z79QE9TCkq@4^b7iE3;FmCGCY2C^#pqX2NwhFy2#4?yt6T}9*zN0c z0+!u9M0=~NMuEEEEronPBWI?@A)`y2RVuuTP|a^q^SMy%cdq5(+2V^LbQD>}ubNX@ zi;lnGoxkF6=|~pMdB~+yb}4t}1WeI37htAtEjiM-$$-L?RcBg92P=)@xX~5ojFBcG z+G+<=snEF5WtZ4!5xJ5;J`1l^nzcVX{o1=d1)DS|yP<|pA0){ufC=6i5tISU#y|e? zIfv8EVqgAPug~7prr9+#e+s!#cI-^qBvQYcVx!1hijI4ErYZDbm=>Tv0VaOHCUqH< zAar@^nl44&lhdwvWQbr~Xbj;qIrziZd$jsqrO$3c!>;S@>#y#=?QN_}{9VbtxB7-uY> zRB9|Ws`6^|*m(@2Onw^F@y9oxBH(_rwYVARb_2+{qBbL%$Yw@y5G@R1k?Ejb-(3FCFQ>xXC(1Xx!6RUw&FjwMbon?~G(xNMV}uo%sz>Uu4(oU1XW6}cu9j*8 z*$VbT6D%_29ctU}d$}M1_*^EHqvlUSZu0?D7hc9NtS%_0#JG|;0vVBL*pTl~`5nsQ z?H3@o$Q>?p7_)VJTFdw6HW!OGu3mD8SFV-GsazhxQ>uMg7&ja5zUmyTDWX$yglz$_ z#h`WWRW6w+Q~bKnSf*P_#IH098L&p1tfo)?MU%#N90D5%n9xBH8!c#KxSl>x>8#X^ zw=GaRnB`EOKVx9|Z1(n}fC(Hh^`xKoe?xRc_eMlSn|OIlWc0O3p~IFAdpKx0eF?1m z-iTmTb|oG>heY(mLD5de(E>~cqSK6<6}3?fk zYUwgi*LSJtG>lGD8hvYm0(wMkL>mK|u<=NZqR)-g;FMh66kxXu#StCYWM?7GdxjH% zsKY{>-2i7V(dnAf_<1}Bjk^a^10m@HZ_)c zHQUQpA#r#;#K@$3v~mcN9$)iQ%Sk^#Fa)YSUn-}oTm4MMtZzb!8V34jZQW#4y z`$IY^BGDXA)ezz;(rFmM`LVfH3EPnd?aceet&Kp7gNq{|{bO-HUJ z%3rt@vls$F`;b&;)?}d=LvN)fH+*ppKccX*IS=HQMFXadm@PIU(Q`gFRs<7lBVLl& z>T-JF7Xb|-5l;rA8O5zk^-`MLgQsPlNIo7^JU{6&;fQfT4PO)HC;UpUX{UoPD7pH& ztL5#GjgxRu59`40%3^M3{95ybe~gtx?4O$wmSo3;2JoUlIiSuGj`cc*(+tdhl#TNi(E}X$Al%H3}$nr5Xt$MrMn`k1 z#+%#tNg7wTe>wMk@d|epAS|Zff3kNmBz25kTXYjV(f%Ws-3y&@wGQ9mU8Hx7g_@Y$ z@2kN3TSMMgoTocKnIpH?#r}0~LjH~-x|w8d=fJhK2I>}4R*<=`Buh(K@o!=+gDMie z-J)#%{Ns2`s#ZX|(C9dt!_Gdxvt*=Bl-44k`3RdOF#kI)@ivqgd*rf20HY*N*f zr%NsnS1;H*5&tVHYTu4Qa;MG_KZdMNwmm>|ywJ}rW6q}9az6ua7$p6lDDwiw!yGl^ zot5OjRuszRo+!B?uoWj-E2(ps;tH>bE#`13RNSKy-pKL1#zh)6zoRS@VU?&aRyFw4 zCnW&XUy(~wXF>0Y@{-QOPlg_~1Ujo0iMu?SUG$2?^g`N&B06e=88BTxF(bVEALp3} zs%I0&ABo)KI+WQA;;&=^GTQx+_O0QMD_osL&h=k0M2mWh1d~{&+@Ge#F)A1GtiBFG zz+AOn_bB~Zz<~wA7cAO*UGnGXZ)R*&5R}{yMiOUTL)xcz?$6wIKM7HHS>9#Cx_-W| zRdf@w=Sx__c_@fAg5vZ^CIUKe*pn07{KO(@7D+O9==3p6Mi$NmU#|+J;BgSu-EUDQ z8O{vwecs7?o6P6s6nY}pNa}Tkg&z=9WHoz?@uzvci9|Yx!aSETFaA`uzJ)}w@em+W z&AR2cj%v$=z8U8kILrVSCpN6ADAG#~pn)O>PbTlCjw6^PY1@R zW~6c_I^JYqEi!E{eb-b-;w_;cG35wIWs`~|?ke>z{oww`P65m_&tlX@(wY@#I{1aN zpkr}Or|};xbbr`LF}!|XgTR#la0rFkJ3g_cM$MK=HKy?)$`q4-3bPmjX*IoadY&$L z7-w0PkF8fW!PL>}1(V)w)g8(OdyF7B2B4@J+at@p#G+Ky{paUA&tT$rEWhxHbMrAW zif%dz+{wj2r*=B;4o9d-eA!dbhj`MZB0D=XOIr7N+-Ai9$`taGv#d4~{)^8~LCy7U zikc#kVr`z4vbA^~%*Fw%kBMhA+;q4*X?5nvCZE=iuz2QpuU=nwDzQ{TkPK$dUAj># zJ)z{F+B|3Q?(XcjE2}PAwazpDNlQ`U%U3j#$UgjHx;~e-c{=l_81JqUAFE;S0L8?s z0Gp{gj!HIo5rpfdcj>+@Rv3dRV{T2do$j<^M70-cX7hpaj;zX_ZWo;q_DeU0F=ogh zU1U5bl#zYoIjzJ#v)i!m`mz(tc~jon%!Q(Nz)J8lgX)9?`1NYSzrx!O8jGrh*1Bqj z7nxHf`kT{+IK&p(-gHG zcV&+k_v_}m9l`G*%3)DB9wyTjcU(=7zq9*5;Td71kyMj4J8^O+^?77AbDc@5#s5;o zj4f-tI7l)|r9FSys>x;|T`x2GckP`vQO?}Rip0q$rzMuAR}ouyakw>|gfgsLrptXt z_IcyUjMdsxMK>iYAAV|8W3IM%Ua~fSoPF17tYRDRDSTZj%EIBR{fTkftg!d;o6|Fl2)tdY4vk1N1;c0EUMq3*3Bm#u#oRBEGL^2bQ} z$c7Z{5ubrb%KGe1*ZQ)=K&u_WK)PpLeUOFmr7h%oL|v+a%hkr*fYoQaOIlG-4>*kc?prD0?3xl0=eB^D#gFTX{r_UAsaRCu3e;Wb$Fti zSkh?lqU<-sBYwTK{%KX9;VGZf0eb-dKw|Vv7SrZz83|A`Qjm8;rp4Tx+3Sm+qZ=_% zZvUW*N(fTUOzuNuY26X_;&^>a#q5NG5FOV)Lj;e~P+Zvb4GAJ8jIK((GOhCVBQQmO zUEo!Zn-6NhP0r=LwEy$<4E^me?L7X$a8Py&#bw7(pugD{A`3bWcFIbnVA5I?HOpXGI;DMr(p!PTOu~b@5IHZyi2AODwKGq?mr~M3dL6rg-BX4SU|| z!ZHkvN`-ZxodcBw-VT*JYSw@4N*|ZtkjctTU0Hd!y{F^k6cgT6p7he3~u%H zd^VER@$KXcZH&Ci#nRup-9!llU^$}!3yD{WsY#|L!pQxT!2FxlWaFWn0Cz&k;T`fJ z0dT1IO@gWKoo&5!%ZVhK5U=i7t{D-Cwsc;gNPNXf+iFXXGO?ht>0*!_%A`9vjGD(q z#{1Y7>fF)(rgb!OJNS=J3CRmYh#S)t+TFm^hNyaODevslw%4g`%eNy?0nQBP@TpF* zaAHe@g))bF`m;%aIu;Satf9AKjp3U+tAo80h6c%SQ#Ue0gHbq(gZIxqKo!%WrAKl< z_7X7n0o5zhz^ZNXUQO{lKx|tzR)3%Za5MNY(|qlq%s6@sTbK#rgldnM*5-$2XjI_5 z061FN#T-snoc*_5AOi~rQ~|)M_vcanhqJeeYwPQyH-8nZxVyVsaBFd=K=A;@0zr#A zw8h=siWhgcqQTv@1TRi-owV=#KQnVX*Ia~?oOAZx-?i4Wdi8Kv_bf2>j((H4obY|s zM%q?;9Kx#k8pr3u^r$6LlqEb`DTO51>_GVtowap4#x+_gHu_UH0ff-XBLWC|tCBuZ zW8{UW|(jf8+=Ro{Fb?SS7>=4WYnG=JBzEaWys9&)0V=tNk1WOHoFazdcS< z_Jw`Ow#G>n?xO&5CYY&TH*Q=@fc8`{P72G7XLv(RQ;shqhvTkWxwhOysST!r^Mi%$ zyxvsEX|8{FxN^F1q=|EpMw_`M|C*vC=eEm+74sO}4vw=4Klus$AdGTu01dAD9*MRk zEFEV|)tH(M7-CzriG<|t=xgj2E0E#rsMW(I3Hq|BqXnZ;bTxW~gk4@+%H?ki4xdc= z(l!!y831?FAw!Z@v;c7D@DP3g_+D8Z@d#tjZI+@D(^h4jkd)hLkE1bDaFlwA@d1-^ zZ!(FCX3O<}*T*~*nxj_X3*S8X`M^?}YSJia7;@;054){2-$I}%q(Lp4P z>2H7OvUtpy{|a}O45Mv6e8F4?H!gA+1ZGA&$780oW`cSe(Jk7Isf~`SLtr&+i?f{@ zl!|rzboaAxBO9k`@v`&WzL=#%vBui+=r#uTG%S8(ujMASLCoOFT@@6@&Zv7 zw+N?pGQKBra>u5fUo`Q3VIG(8jOrO3$giTj4!U&U!1y^W0lHRcUH6tkR+w zYKZ!2)m@;*eUP&~*^G<#1}Th}I?(_EXV4bCgxh2$Q0F`=;&1SVA`5q@!c*J9$1%G_ zjKt@Pv~wl|-!ri5@-m&+F0}k#R~h$iFx{NBi~OtXifTxo--(SKf&k2FE4*R21BvCc4!lZ=?sO4Tmo!bp~;zJn*qM|Z4tq_<6*53b!n zH{YI)2>e0IVNUx-{DtDQ=nYZ*;X87A&@dfU3MbCR_ck^?RLVMSd&!-q>OzngfYo9ToIXggLp6V3KZ=<+z( z&7IUFI@x9t5NKioya%Q#fW&@JMX$^%Q$yYUv~-rDzd78c_MZtV*KNx3ZEJG;y(m;E z`=_Saox4U?rXA*P;nfQ0Wo|^Xl?q5<hl)TckbBi^3+ypB&GH*$&YaBgz2&YiOp+DdP3hSQ`UmcSF^@53u}^fqNnXrt88 zMngbWo15dA1|9cx8E}y+HrQzCoT4#NZv`{-cx9=`|DiIFncJOSay? zI{wT7pFgLFTQ~rt%0%*Jd6rWzkpNzuZY}hylt2vpeD$8+dfF#d=BiX3)=^up*O(I} zavd&iI6C?)4j4B|edUeYlKp$Y?pfeP|1W>#<>haCMZ(_$kLC{?b`}hi4<6yMyXNP5 zB(1o-y2~wGYJ_AX7fRfM^?YyDM;%bn23U2A zt!==ia3~{**z;5s#%@oMqZna{I^{hDjz*r4=L`Pa3_v`!Jv|RjK2Z{Vabos5>KwuE zKyB)k(NJbW^74D1d((G~8Ga5v?Ukk{`p}gy*TH%oC3sR2$+PoQbv-T(0x$>!jNrdo zn1uD3)}J<~UezGyCXUc=fXw!~m5&7D*6fiKWFwkC4>GyqtDn4;)NlbBPDNoDdwUK5 zUOpzY-?2A)Dt*SvS1!t4fy>6k@&# z7Vo__$+EgoMVBp(0k1FD;dfFlSZ2Bv-_hBu0Qv^k0N>8H0WvGV zSVh_R{GFYr6@i*L+)UdJK$_&6;D2sB4==S90%_@3+w&Tu9&0DzOtGDkE4w07)IH$!@U|G^|R?Oq;oR_;=10j6mvvO;G(6nE5P;h z-QgkJOkv0GxX+Mt3Gc9(ro1V72$tg(LsKOpHplcCn{fPlWqGWoaU?7p2Py^muS=QI z8bG3^aibl3X;DYX$}w3n21BB6gyT-K1)i%fc#LYsTa}`+iBgqZR+EQesNxez&JaPj zT^`HRK5O^B9kPk3?pMIen>}-{wCJ3!f&MnfgR8UI8Kw&^qCDi*FHs`yG@(2m1n;@w zhl{sCIM{fynL>w7hk>6NWDu}jrV=3MsIP#nIPWJb3<4P#@^Qg>9z5}Pa^SHot&bT%#%OY+y!OeTTdZ%#qSKWNXdu%#LIXCMIY z`xWzO+KX{Rd*gQu`hE<PSkwmXHP>YQL@)2&G8^>v|Sg|5Yp zh~W;%Q({6E?#xMucVallj!7J|LtTIKi>q3*q>R+Q|lKZVUJ0; zYW2-3qv=YxxxZv1tO|41J)A+B`CroK4LrMq2C}s$#7IFeXbj~_QQNe{ zxfsP0;!SHel@%1!1d=|r7!H;ytZ+=@YM3?_|Bg3%uL&%$@*Fu$^Vw0>9+!s2ea3 zcymw37X)aj4%@FAk4M6TZx=l>mu-=6 zGMcO9pD9yiq-4vS{unX9%*dQ)=ycPm&#Dr{?W7GH)PAHs|c7OVrDn z0|oPyP-9{N<~%hvD2?>>LWkf`{TjRJGTShecqTJ0J5naZ^5xQ(7t(a3SvFq`B};-> z`5v_{6lXhuF2P=-{~mSYkobSi=YP}LP__TTDgKI%A0JWv$K?5|>4r=EziXQq;TE1A zuECJR?OxkFF?c#XcxLmLeO#TIx$mf0Btdze1RTlGCg&r(L1pP*y;Ln?yUdL#5qZ@V zi>az-w;bTBS5zXVOFztf$oS{LW!Ou&A>_>to)PBJg8+AG`QlL?dKN~e8)}iV-PVwl zcp!-I;nCTX<(Wo5Gt|#XoQ(0}oBG|yGV-#yad%`9zms{8V15LJxAjC4CuopB~~z(W;;h@rqDZ0AL)EXe=t!T$cF%Iy<(OZig$%N_lF6Ek%lF@Pmb*-$7H%6 z8<$wNT3&#Sha!u^sGZObmssgLKTI0uJWjnYR226)R}|krY9j{s&Np7()&sAm1|^0F z_agODJWAWQ^zRqzPXYf|u@GC_Wa}lG2mrs=1dMiC_Kbet6}Nk^8u$&5caCJ~;tGm7 zqe*-zpUNAm;`N~LRnjhy3|k*Xb+d+^wYg_TW%rY6KI$&(Jd;$VIG?M}9b~o&CfQrCXcit(5d`bWH=dfw2Hm?< z3ItnV+aG_IUdwvyqM=nCuXg?Dl?hZ~kdDAbB{0BKK*=C_l*0GA)*ni4o|U-6@2h(s z+us8!|lP=C|jU+V1y%qi|NX#QUD{m4U}*EWEF1N zYZJn?n3aAwjR=+tUL`Zr3SpS_?qH$iAUUnLOjcKAL`pR%rb#jympjIGP6K$0<7Olk zx%IPblY6Avpa?7TPxLVA?ZLd^%rK}z_{v0h=?3x#`}cRx8M^IPWG2{_Ld|}-8S^>6 zo$@g1%vgJ!lYX`78iPU#k=1pkAN}QIGs!Gn<&6JyXa{W`j99Jo%fwi=T;aQT@llQ$ zjGDn)JaXjgWDEcUrW>Qb9U?Y0L0Hbcntb5@bBp}_MqWG7^Oj|&YKgm408?W|R4lv! z$Z*5*{9u5s&7F`$67kTlBmo7*29$4HX3j#@5pK?cWXnA$poEC}OS4sm00v^G(b}ay zztW%s$8KBoOMTC7j^$#$%*IHSmu4Dl8p_)qW*NzibJhz3pV~AvzKD7)+yy?}iMJ*ycoEY1$ z7XwGljG9P%(kocY?E7%Qjb=^5GHjXIHA8u#7#YL~Wct(`T((YRE?!x57-cA$wMG0!3aR;+0IIWGZ5JG8zMtY%U8cS_ ziuN9tr|qAqT7E4^A-WeyZs|qA^PGi|F$jT)S=I{I3_H_3`3}$sU0))APqN&dUQuJ$ zT>$3>CL-F!_7WLYQZ&h68K|HCzF0*|{#qcBnRySYQ#osY7-8u1Uz#n-)QgyFSfk6f zNPZTaU#YXY^z+qsHR#9AC6$#TQ+Jm{=^~Z>a%O11j>b5TrS?ge2)jG3Z$Ao(*`!{O zAn)^u$^G@~X2&hWCR!R~^eCzeRiY^c8edJEbL`E)ksIMOV;aXzZ0S`LY6juRU%xWm z0x_w$m;xsSThf2TA|{~tnxb)2zoOY7eH&W;rtkT~l(0IbC(`*_n-}Tyy}2^Agi`~a zyW}jZj&{-Jftr@5GjI5a4^!4@j_R!tM|kzGHt9elY!BYlwoOO6Fqg<+U7GLq*i0~d z*H%Z~*jU{T%a&7fbqH+6>Q2_r$3WHM!+X)qnpz-AUvTL4yJ%|F*(vB^_dXJw;kPXG ztvU3weQ}f4`}fEuQ(^l%7aNY7t0>VlH2eznaX48okzF)n5xRsa--Yxzw8$mvLr>4n zKC|!EdtfAt7)788D)}&gDaLz3@#0lzl26y6^A&$pzEIJf+O=HipkN$q?D%yEP1Gb) z9uDt``G~PTjzTB~{k{>|+b@iCl9`l}HkWkgXQ+~d4^zx$9#$k~2L(g0ffU9V2o)F!bGh3V|@cOMF|YFM18Ku5jxKGsp& zji7@}n$yf5Fb3c#eOUV$z-1^8?f#hU(C8Z(w0SSv+lb5cn5BEpv>GB*IOO>KVXo!N=q@mm{lWmxZ>h6| zHJCY`Sm=M7xVwP;dE~kK(Y&}kS}p2IWK{gh(0l%ONpbf4^j+SweDIN4k3}3|H8hi( z%=G3qcpHDk$Y&gPV?*n3bRYFIkAV;$4QDS>gJo)$V28A?hG2hsw4D`93Kg_oi(}#< zxoUrHpRU@1VGufdY#QcZ;I&=Rv*@Ve2^-UC0Bo>MhcejY$xjp4(=Yk2sQzo3TTa^9IYI~y@aJ-*MxHMM?s0dFkw61bx)342()9fh8x)BlgDkkV1 zCk;(<4>AxadTw(ia_yJ)S$5QZNd6JJQ0%kr#iB`2Y5I^lP+$5nJ;g75H2F*yN7Hb> z$HD1oU*FAkqkBCdfq1c$ILU8+F#JC;1xY&r*B96(@fZ*0L^E$zS{BRsi9m-QY3lph z*!?H7_7doo@STXV*lT z1P77K84szZh1>0SToWO^&f^ks=c%zmAbDAhBF??|@Cyx0(es^YYJEPT{05fqzO{}9 zY{@xZX{>ROHn>+Y7@K5=$m?s6S2>74#bAQmd5Cb30`7A!PVx8a?$L$YLL$+HW*Kp96OKIz zL4XCeUz`(rR0bi$qXb}kQuT=7!eJOFPVY!bnWo!*YI?Y}1HLPlJg56h+jUk;hiq!r zGLE&`Z-SDieUb_r>ZWpMxEPS+!A1%>m=bxwu_;Nx`fRKtGp~PHneov!$&a`?lTB9G z)>``$;Y6ZlUT+w9YGpsv`s&806BYn+Or=6Vw?50Ejyi<^)Uaz-r4oU67bB7XnVQ#D z1{{${y=}uN z>#7&&xpgxlQERp*8?8JyEeDoy!R{zJ&zln*Z^*62UeM93E?EzHKHH

    &C0xcC34T zR1RlF(nvd6b~pHd-1kH8JZ{i`Bi!o-`wyzztye2O6d8;CCB1328DaEg)AjNWAe%bN z0wrh9JIzjPv&h(5&aQm<#^GCKV9zKqukLEge=@$_8n(9|B8&HC>@K~MDNyL9OthvS zDL3OlcT_(fW%AD3(%|{4B*N*;=47K&!aTc`LfctJRIrg`Oq0ZRNNvErn=WDiZcowl zQJW$jD{pj^Hm@x8m>F!LK>eAdK7A3Piv^#!?wEgJJBG3^ccH@K7hw*}tXmbZkwhns z>qsUNb0SlEuC)HDe0Jpg(1s|JlQPNAdgPJ``~KqNcR|rgdUWUQf*C*ZnmrJY&u59+ zrqvITOb(BVH4aUAco%kZ>)Ikhlv#rng@$RXMI7h?vRGy!zvA^}Zm)W4@eHs6r`Y51 z2%A|&?qZLFWR*Mc)vEi$RmAH579yzu;Dty6vO=P?hz65n%TFIOg0G5ed(+~<9>IE~ z*(TFj=GHC4m&X!0=y@Gi=Vb@yM%=u9M=`=Zcyhm7nJ`*$Y+Hy7W+m#ZZFv`K+yX^ZC%rofl9bkvArX;t?cQr(i4;reV^6>$TjS6>fsZ z=LMxZ*lut9W7ee*xuB86zN?C@9ftqQS*hNJ31NrC?kW`4#_qnO)y2!}_3$LCaPsec zFycHLKsr6UUU7h3lRBI!p7YP9dlQ$@%G3v-rubAJat^dXO?XZKIUutte!xRH##UwO z$r`wEnP#%T{0FS9AH3p7zryB)Lko`?T^S!N`@a!!%~N9!Tb#b;F7&X_x8nT~D&Amc zrcslgc;OZ9;QthOMCfaeTBNIJhjcfOJeUP|NSIS;rFg%V0&1zh0uDRIS&T5VFj%&Xzg( z{R66{hVTZ~^}5h7^h4HxW*IK3RK>m~23MJe-QznKGe2pPbHs?rtB9kl$tX}&qQy^t zQ2`hJqh+DIzsFEU{J#S~p=gbmey^+@aUrX<$qYY6EIXEEg=cKOr5X}RZq!$m4@R{5 zSBrE2oe&PV{(`;iraRiITP@Bu<{k(@QZ8~0=&t|M7BKlK22hMlytdlJt^()MraS<8 z7`=HJ*6OhfQ>J~w@=@)SWh ziIT{q~ zztOJT1rmOUcfr!hdjD-+5?H%k0!9P(W_~uEa$tTr;x&J0cx^P+_+?u*G8VKa20nRG zP+zW3?X^CyNdyrhr5e^@s9d<1FSDyxuFM?VJM&s=XEQen!uw8wS5|_ntNTR&dRc?6 zz5vEzO!JS0@06Q6laiAlHDA^lqO(`V&Ws-yeSF@IwV@Zrox+JnQMyYLk&1lhPc67J z0l;(sE!6vFk;9`)BYTrk#wP-%{I8N*bP0a?z=_oy*NdNW0L#E3VIEb3G^z!lM}RHO z`GBPCu1D7Cu=3}=Putt2N@^Ld=JarU=KLVDVtdO<)X#o zCI4OzZ9+a}mq8;v0|ZxaHuK0S>^993-Xyb7HL+7qGD$~-V~~E&Ml9dK(EXC zB5F%FiC=^o@dR{IT#Nim7VfHtWUu8s81$6Ggon=kPGQ!YewX@=Qkh6KeL`!`fXxYL-}bDI!1k-v~a4;FZ{))tKQ>=de=hMkj!ga^PRF{LM zaAT$Nm1)I(8a8=d66<;*l>;AM&4firC84r zA5&$6@xvfyJ(B1^sX{Vn@Ik>)HZx)RXd;~e{U=OTMHa}74Z$Xut58^rA>m^9C0k&G zVcq#FcWJF;D=A0Zn-=Ar(BM2u#ZW>Uo!?sPjQ1yZk`xxH5>8gG+sJ5nYAC6Q2b}RY zjMilZAD&9i^Gc=PaMxM${qZ~LZO*{RyJE2O>hQM9Re&)!qJ!Bl*v8)<@7XXiGoMRu zERX(SxcjMHgW#Hu{=+}!`qEZEfj@ zZBy|S+7;DriJ+x)MW0`Y^D%64Csh}kZJq|L=p@n*0+kZrC1dIMVt=IpG>?h>`{J2Q zz26@>eHWu{uc=};rPppZ{Ia{OG6BY3T)aR<7$_LT8SJp5Fp8-F-3=G6zb;XU($<7` zb^dJjFp$|3@GnZcaY;r2H>SEshTrg1_*ne$J%$9XxZ#jB2?=yCcd#b?(7p0o7Mkg@ zGfba7kxWqaZlRJk*dw^xSpU_HEi-fu-Wz%0E!T|+<#mBBU?S39>MSg>9A^&fVt0oH1J5kkJ)Nf7T)Rqb@i9aOX ztUr8p-|z{b4F6QvCDBJ>Sg_0{$)Bg7xY)gz7ey@WL)*5c$@i+dEe0;aBHhnZ_J?yZ zqL}(i@>g4bL0|WNuoJ)k{YDY(P%6M0eiU+)Vld*x%JK^9puL}J`-DmGmPFx8j)l!B z#bxDUOuu`1A5nP$&ab7bgoCV=l!NEERfPs@H**5b;V!vGHSyn3#u*x|vZS)^fBG`Z zyzOyeo}X*YC z;Y)eC5=4tk`(gtgnXab-$}zx)ktZpS_t&t}Gg9 zT~Y@Mco`vR%r&xqYuA>t#qypVgmV(U#syo1j0!{D_@)|tTEH#&8+99nHNNAg15f1(ZdHJy=1z8_0k zWkFdE(d70TidRJ(U`r6ni+h{9l6ebik)W;-VvbP;(#mZm;0Av(;s*ccqsBuZPq>Yq z8B_3Ag!;P{j~lmBT|%^I>u`hkMDRow2{jg#a@D zTRx`#E+5#(B@2g?@1q_4zDT@5>;T$I#~wHzKfTHETtDpZbb1w&n5s2uJD+Zva}CP6 zWg7+!(A=beEmUb|yrVXJ7&a^u)r#2Hm8P34(_|T*ZQBM;PiQ43R>h%DZ;liEfJGPb z^*3qa-nUOrjb4Iw*c%tlb}tVH%+Ji`Z6JH+Z?>?In>$ipmYF1o=QM84ixJ5MEJS<+ zm>m)`H7I!E(3dScaGoZi`PUtc8v)OpVdOVTH>hyTWPF<|6~nvzy{3W-DnqE#1kX65mo6Fw!=O;@MyaMQ3K+dIgT5GdcAJP-2> z(HDt53_1FRQ-?G|ZmGEFkcg-F4 zbb3s?GLY`NqRTU&LfUZM_OkArsZbx(DD8ykL>U+DgEh%=opiU#8UoGfW_lP&E?L`o z^DU2)A{4!){lVek)4=MJxUvKz&sEKkDSizz76h!+H*(zNKE67lHsG);hy{_rV$Am4 z7W$lI(Mss;l$ylIZ!!9)N6|&P@o)G*1CNnOggtKAVfp{0ZK<|@J>w0?x5#j-$F(!O z%OJz6n2mHZsKjPCjTNKH_@@EEcZTKgiG@TMmI*w5{$O|=WBqkw0uD1LG(NvtFupiv zWIq5L5H%^xoCJz_+$jIc{{>0L;loek5N;Bc)a{S&oDnZ99r*g*|L z)dP=j;_tyd3;c5DPpCq7N}>26`;5h!m$~QaUB+ySnwno)ju$EJi2lxJnJCcV19v<) zN|BX8imnO6!F;dCwcM~R*)^lFZu2+#_pJmj{cRvbkNkm%+XIAD9bRiGhWmAuLJfG! zH*UYua~(yh+vP`oIB#bHyT%2^%qLjYKU(6jMmHVyz^NyRDl|`gZ5&^Y$I(v^GfiFw zq=4^~Xg(xTvz+nlxrK}7U-l`*`F{>Z?0=yLDFLWcIKSARg6;bl5}3B+E2F{FCX-0c z7N^{B!70Cj=?>BrIf!I@1#RYfjgj;Fap=Djx*>e-x^S6)*YZs9cL~_0^r+(t{(;I$ ztaTE$JsWU+4lFNa~$u> z`Ksrnm}g}tyLyKa8nMVi?3!9qtswS(x6NH&=RW*NDl9)uS1WiRGZKPBy04Vy)$F9c z5i0S1_NQ}i8IDuP0-q_vxBC&Btw!4=1c@GKgCaw+t7Micdmw;E*Z-H&Yg}g}3%{IuI{Og;OeAHg^<aomrecUwTn;W0JSCXN7Fwz;h}MlHra{Z9{6O@r;qf~*holGr)=0D2lZ<`MmvKe! zY%N4`u;tQh3!3=GcJ6ige;7byT7Hi2siAGF&3N)wnb@RzO9C~lQQ4ehAK@peI5hCJ zrQO0Vz^jQNpVK0F7rp^5+rL(&)^F1Ll`faOTY>ga0~lk$u=w^r751?g{(3zc%*jvS zUV=7@c2PW$5)?bF^xLAkn0)bA792}cR_tLOH;kd@nhhW0fb0}OtJAqgYT6Nn`ZHAq zZAz`=sLA1y$PjEjDPC5;lx**?j|CD|)Y@MIE@;;5x8xvmnnDWD+ve09^$0VAKV93m z-~cS*rjdl4-mFf;_UYATy9>rIE!Q{rZkVU?TYD@#*B}4(Q zU8hkOkB24Gf_WTS6SBl~Lj0*t;nt#ICRdRu-%5Qu1yd7)I6?XN<@xYI6`)DVoVIX@ zW_1eqGQ!Eq6L?&8RXkdQvp?6ly-qw7<$3B(L}a;Z8)X04*OkjE(R z2<$ecJw!B`mt{!vs!1yf-p6q+Ul)N}emIYFifPR&EAM>vX1YE7Qw}= zRXu5YBK%DgdC09exAk;;6t?HcRQm;241jdIKi#J=l%pY3bOxeO917rpXoSBh z?)Nw)#0gOEOAoyojd&eLGl4&GlerWZ+nfLyn%osoHc-N4a(g#47Jb2 zx8O$FmoXu_73k*m|6?tV)*Q?EztYEv%m*a8(mBIt>i< zBYiEHL|2e%74MR<|Da*C>}oL9`j)XsTKxo_cxSyke6F}9m)E35=F82aA3uBQ1hhXQ zO~U_`L9`JA)etiWj=huXja4flTTc~bV!={<65908p{Gv!g%Biw-aBO8!5U}%GKrPDA$iai3TgF{6FnyZhwQZOlZM-MvKfX$%@s519*9FE+pOdR9pEo_oKv?v{3ffcBP)#g() z*fy}G<`+C2sAf=m2C_s~5bB=l7v|~QIS4cqdOehox$2bp^)0RfG_#Rd5(T|=d>z+a zp69LicVA_^R?q`gin?9shY+&ZLc-V#DFdYQN*H ze{QNqvcI>x=DJYZKueUA)qYY;_F<*7A`+N6w=bAIZ>-J}yyp96g*~iqJzJ@)7&cWc z&*8LJ^($nlwMMlo+UTxq`YfL;u}nR4FWY8((5wlWH|uwwi-Vuny^xWob~GOWBr)@s zFmu?ErFKK>ZKuxHlK>Lfu0fT}R=M$WC5=U~A@zKFLW`C^Lls#uo5yaNxqB;ccf9`3cjTBq>p~rIV<_SgGCkJ2UhnH?;Vbj2jeSCEuYsYo2+`1 zt%5mWqS^k>p6pd*THd@zKcjE^T+t?;5QL^j&Q@6+&U|BhkI*F`LG&FZoHD*@Z=0lv zqgCOKTU~o1P5CI;UeB~Pp5K9m(aeAzd@#Ol!lpK9CNfXjb+6*tb)r$Jr@T+8OQLsv zbH_T}9yvAyAHWgJoa{WhlxQTi`t8*F`DveNCt+W%5QK~*c^IdcMS>hZ@t|-k5hcT< z#2*V75Q@mKoLYm|DG3XuYTg0B#zDn7e!;~uaD&6ihqeZ6Xpb_GE?m4Zq})QQ>YWdJ zW5;bK<9sLErc#U{hAFzXD*Cu;mA%S-HByB*7)qwMZIH4|Id8HkgKILx5vn_pY|%Tk z*A$1mroF3OB{zeKI&Jsa%*Y?c$3CXx_fx*5k_Hm4P_TSgaNvwq$>4KRB!;e#^Dvu zKc=L^k z`r4(RH#TO%SA7|CxxHJztQXQs4kp0G(wpg4mM3J zHtbbb7V%D9vdHPR{PnJgk{c(7Ec!!Ja<_5E*h7w1?yuC|z}0tDZc&u@P74g)J9lI% z_)i&bneqi|Aek8!a-63`ThP-8@Jv$;-N!YoSrJ5n=dyEn6`(|G!pM}$pFYxL- ztWS__xw^D`Md|O3S?%@TX+H5Z85hB6j>uHOl@|x<+JhLllQBmPe?C~qYWnC}-Wjs+ zZaQ~@!A&ndv`s9=jnhx&$=*hnn8kaT>RwS%M%+4OzdMw*q#5YOWoKbur?GwMmF1wc z@Ix|6c$V{?-V>Ezdx^iTC4XgXI2ga=(SqH_eE|7f6_=O-bofIX&$E-kj5EAF(1(I# zEvU#r+wzf5B+kjF{_2@XU9Dy3h&bT<+AE6Ek4^d6X@@zjiU^^rTsmJSWQj74jgAF4 z__4?-B*L_q9*Uf!lEE3S-ZtPdZ}4l!En;FzP;@?H+yXXblB1Ql$#!VK-+j80Jc@Ot zQY+Zsof7!pP48X{4w|2C`V%g)0GYYwY3cU4R~lJ=nMR|m;h&`2WJv@k=$s2_u_^@= zs^G6p+591rUsQ_y9c>mw6fB$aU!C`SjF4IReih4?HtEf{X~g z@LtmSS6l;)Ga=32o(5OUQFB48O`toTGGk&E_XC;iWmX|#{O%ULETX-YuNX+Uq0VHV zO|E!8;e6k4(IN9{%XELDB7JE5F&NPx?F(%&t2fb<0{k`Yg~7`sw`4PN1Tk#-ti4`< zB&YYZdRc7Gx*0MeYY((6bW-czcvs{%OWlf>Acs2l4rsq4#iM2uznIeMOl!$IGpeNT zoJAtk`{r`3L5@IGM$vK6y`~9usGojlMRBu5;FGXV)B7-M`mn@39oXWPYD8=741X;8 z#H`5oN4ZysF_ixlWO9snyK^}D82Sl{rac`vPno%#u*;bQ8jSP!9+Y`PK2LEfP|9^- zi_>&99|9`$&`pmxQ#y!GWSNS!zDoWA82ZY=htR~D8u|;Neu$~b3aOa-_2C>h;Jy^j zIMa64FQA*Lf0xoymrIT+;un2Gf}1M|pnxXzHLDG&R;k+K_l#$JA+ zpFn10tX{35rvtJ)FP>H%%jqr9f-<4Of5-@Ji0$arn|tOXsgQ@t4r0&8?8m4jeK=A@1G&MH+2A-5 z=0ieFUUy2jjn#qe&b57Dn*^z81zqupC8%&2z&V)}6bJ4jWrLEn4tAofop~3cNyR{% zrNk3UK~C_^X*eUvKZVCT_*ETkDtVUkRHvV-ez^)2+j`)T?EsslI~NJpfmtYij-H0S zljDkfy4Ve`@BGH^dMxDC+&+Y{{Qfcos~Jn)wo?V?SHdxi-KtX-#M7dp?t1AuK?U`V})s+}^U(;t2z)cz5tR4LJ1 z$^Wj=lBR)4>U&pjiERZbQl0O*H;J9DBg-yix$HHz6+l(we)B_fN z!^WS3PJnaLcM>{4RnT(7C<9(I#V9iqoo3teb{i8049&!Wn*v9XCUPO1=s(r{XjZc9 zFQJdlZH7PtfmmjAiTt@;Y5UYmV7fqHjh4T~@6DjuGSR3YB}~VIdx7(Tz z&=}{^7kNaj7rZKWr)jUYq&7q~(qdhjFYB43tL)Tdm^@fMwmboTKEXw>H-b!Wzi*Gw zm0#|z?ZG})zVKs+#{-JN)0xBE+KtQ#2YYpz*7jTrduIKb9`Lc+_4YUc5+Yj%X_{UPzGirX-O*j+?<*z2IpgljoDJ1}pov}(5$SiT$ zfA;F#g%dv$<`CmjenNP1x~Sl_B4ENLkpe{gcJbc}%&&mqNv>+W?0rDhVn~>Yi`7~h zr9tIRFn^IAd&iTSDgGK!b0z7U5%CFLdduo(Py*V z3cX>FBhhuQt#vjC@0bau=T?voi@}K*HI;gBxNUIZcBqNu%Qz)m{Lp?^zK>tnWm8W zlRuSn^jqhJ_~5(oSL2vNa*e>dJ3+Zueiho`-`TA%5*8M2FINXK;LQ@>c!PfU$&I|q zSfXhi1t-83?F(KA5x}}m|JC&t0vOGl8L)homxsHyc;Fqmq0No;nCAckY8Y^(QRvyFY7? zJJ|#EB<}v(f+rIx<;kluT?~DraD|0V?RNRAP2D%>A9u@eoGYunXrFVLTGQuho3)=M`(Agshyu!{^H3 zoXimJbaEoo@h`TXNY=hj7@ilqyTv_0gD_2#&T-?IY=dzpIP)^&`p4mGeXpml#t@70 zhy=$tDyRi3?FC-(y4qSQ1xKMC5a?@|I$$BoBe1I6S5kv!Lv>&8p-B?6GN{t4DBPY* zxDl+WN5a16H;3ThkSRA~T}F z=#9#->WE$ZPcgHjH?2W_is{FuDp<<>ClY2`!H*3eh}f9nPt%mKLI31EUx`lPJFU`B z1&Udq+5L{Fgj{Z-9U9cI&D06@A4(&^pEz`)huIC(EeCvdZ!t`tf}Md_Jh4QMq5bT^ z)wVEC4!V}=bX;z|@fz?i-Ceci(OliOatPN7f1b3-LV!hD=k!E>bA{fa)G>o zhix(~242JDrt;VavRMAUe6%EUxqfq{pGtt=hNJY=&4wLMD2xY&Wt8^C9|Ut5Xc518 zVVzO-QE@D5*wV=un!ikX)tBoeDdMw!Ec7EKK@(Aa-%gRyOjW0ADjz8}T-(^ITYLZ3 zQd(4Lvtf~=+N@7{Hwp;(rYn?kC)9{R26;ru5Q^XL`=bhlW@230uSLzzTstwsJ2hLQ zOwYeR-7+@Uo2c>c;a{ty4P-t?ERvhheyC*HZXVh>PB_qRq2VjjDFiMhU#2w%X!dOE zpb>)d5kk%hK0HH3uPBCDUa0KTH2N&n>5xv%B}YDt0-XY3G@Z(_V%iXkYvt6Q)$Wl+ zT;@MET;RRQe!G#hH80T&2L@~g=+!eX+CM1(2QCE!n#l8`w7C9OO^EO>=-MVSXi^FN zjwL@ekC>13wk#oW_EJn^n+V7_4rtoPoS4;;&BqV%IGtRNFsr|0Ukq{)F?1q3e-h_K zHc2Xj4&@A-?xeB2T{ppwXVQVnYKG`&dP7+GiCn+!PI zjFrc%v+Nx1F`~<-;qA}asiK?7488o4Kx5iZw`KgeasFksnIhbwCa0fc;Z!NclGsMo zF)qa~(k;_%e6Sh&z@mJV*`J$d$uUec6LW`J2hAlM^}n=`J>HhjYO-t~KE{8MlWf5M z7jyXkCsIQbTlaQw>D4ywH9wnwt{5+<_De!|uc@+sxWu6^Jh^nRX)dM#*C}p5?`|y> zCZuL>x>7=*FRz8l0{b`TK_wn%NwTGDfkRA|C4=|6=mDANQhoZRn*HDY&KaH${|=T@ zxkwVY^eSupmt`BPM2A#Dv=V|Oa&Q*|=dcH|>b!M%KVx`TLa;6tcfIkixad(h>fEPA z=Q%|N)81w@9_M7N=-zsy-dlII@x|@lRa%M_hhoK{xD&Lv zhvM$;?$+Y&8mxG63+@tJibHSCa^!{89SMe4!FMS<8pG2qf%n1}FA;7GOHN`}oJIQ1t<8RVj zeS5~B7L!OPW~w6oKl^e2(v@}$EV8Kc7sP59l7A+Nq)k`9zWT!1H#e8UqGe|VXBlGNVQ_;SLRh_ja&eOa05^Nk*iPy1Z?Ve(3z47_7GEvV~X9pKtw zwEK1po&9TLXxAvR)#N+DIK84`0(H0LNTtMOOE(NhX92p9*}^zCOz$suf6WgyVcF4C za-p>f;IJQ*xs`|dMjZ&Z95%vFo-VsAzLe>95uS(^#FtUAFa#xyq}1?bqRwOAqrGV- zDsrxSBkq<+--P<=b>+`eu1#3CPuD;A5RD~kJ7Qs~?00`il}>~egZ~y5uE9MJi0PpT zMi&|!@bLON?z6&)RE`l|hKfEysod2QnTsWRE*>wwUkBo>nB-4n~wOZn++d9E35^)LkZ!{N8`eZmfUY*8VY($t8W#5N1Q<)v-`2 z2+i|y(bnU-m*e)3Si~JJH{k~Qr}1h(s!{O~SAN9T1oQmhZ|?=};!bL|Hy*4{PK}O9 zXjUKayeg>;>_HPDBs)tZ!OG9;)HQyf1d{frNbQBy?YY?lbw^nVM@{Ytx1GOB2Qrpw zH-$nwoXSJb9D=@gtR%_1Vkz%m_bzO|jncx)YQaN6QiizMqm}H8NVSjat!=)E`onVg zPDqMsBwE?lj-Xp~)p~2}0kh-rl9uUZKDETh4Z{E&Z#|1i0#1+G1WhoX6g{TWQLlPm z;bSjGnv9vS4faJLKNnKifJTfpMB%il<_RJ2c!LSTgeUYHM)Gv$!6GAA-9B7BXVp(& zMC{B@CYU|jSftW)+NbWTFB?~l`4bK&96wRd{{cW?C~POUJ?84L?#=`hKzEo7{pRC} zNo%c6Eid>e znRW6>;j5R@JyHAM`v9>Fwi;QDB$a<2*}OtHI^h~y8b$_YEhb}L$le*-YKK=Pj7kn zJ8(d|FVEe7Oj8}hhWFGoq3pqccGX;Anm+Mec-OnR?TM_iRW<6IJO-U%YlVn4{ThIz z)ZYCANA%M=_9WkWiu~R50d)<>s^m`^u4Wh63Z*c;4$IzoD;%;*)5Baw@jQ)QAQ|Tk zabaS)bb@zgs_WdZ6`X-WRY0*)GxAJwpFXpOlmoO{^Dvi)wU0feux*v5?@+zFN-ryC z;qc-x{PT9Spu~u!pa8ua)R z_Re{Q0{iuSTGlX=Js-YeH}G>yGa@A9$SlW?-U8KuCD}ydAEYqn6s}~bzKCV#((GPO zbeG*hP`W5>xC4LZZ9c->pw(kUQk}|+w!kqo1jm9J)3$Xq&kqO~)IS$ecduih9#h;8 z5#vmIM&r~*S8w*2Ff#3tQZ%C)p{;I+OMjz9W=% z@Q1E+{X(pBKY&BqPukSnp$8(4NyGz7yu$IvV@3VrF2zbdd<3$nafKRNMqSo522y^X z?aeDRmECVdd~MW!ItI8o@-d?)sD!#WlHKpNXrmyLv-2o?Y-kREo2p6S5UACjm|(l4 zg8pPALT5+7 zt%5kaH{rEOoNW9=Bs3*AP5C9_(@~&S>gf!nF7ROM>8Skv0ACbVN)UV@mF~R*T;a{E z5wy-}enb)+%^~&K)m{lf$P;HaUU~(>rv2sCvog|b(uu{4&_T%XN6QS~41Jr~bcBM; zY&;ZuvNg=W!#6iD_IHf$U0TY$HZ_gviU3x;E!Yt2>Mf}@@XYT?FXG>ria$x;&)$$f zD1nmd&6~u1WHF}f5VzfDJG&`)X*Ty$z&Xx=Rk3%_9i6%(oV$1~Ax$VPze!XO7Cb-E zpRuzW4jB2e6wtm5QYn@-i(3HU55(}4py5C-h|=a-5(k(P<|+`k8CM|*9JqW z#*_8uyUgEg$yorDg3RSxR9ab%^~JdK!rQddiyP!bn@w^}bI0wBohQ(C8*eE>$SNE? zJh;L=lZ;P~7qwF~iZrW5vyDu*D|flA8D+>(D1sUDH%k{Rrab_|JzE08L*>+|y4z;n zRxZYmDCs*ur?Ko}wRXYHx07JUP7Y4jO0lU&lf46`t%nU7D2|=x z9}75S~Pm1o#(Mdwc+ z(sv%$(tb@23%!t8y+_pllx#14|K57I!>!e3(rnybUoxDWlhuE~{q6ePBY-#eBX)?5 zA?(cECd^>G8s7S^PKrKFSUs6U2lip&;sZrRDHP5I=bO5_1_f^0?_Q&ruEHdLo4=gu z5T?&Xy#nq?hkeQ2JUH4 znm1xw<6c3_7B9c+vIF26_JnqDCXL-iDAnk5nSS8?yC^chNGG_0Ev;zVjqNYo9UAtD znw2VyBB6DvHSV=uO1@5n$%vp^bf!&Ko_oWcEMHxr@FtU_qqVMfPK5 z0{>fAVZm#wui$xZYys^y;{8x0?%l{PaNgU33-91Lw(--+3zG98wyWKamoI8WuGTlt zop26LrK6<@b%}?^*+wnX`C)10+4;pd+>Vl+;J535`abRJI-VKsz2fOMm-}YZjt8vR z?T+4y-}3~S`l~J@#0G-pmh_iM=g-+Tb?ea;^0?p&j$OM#VsZrI8p&Q~5{|g@sUc6h z2HpwTdm2pvYNk-Iu4i9_9+ckbxESlu7O=g9fB>VB8jW#MtQcczz27h8V;Z{FscT1u z+DMpju7UN;E;=ohefuMJbiE>QKg|}caow4(PsI&3X!la5+pFKydWiZ+hZ*VlZL4IV zzdWnApc#!10zBs?ZZ_ZC&VqX5@put)7Sj|iFx#Knzfq<~!McYK_%e&Ak8rc8fZ9Ld zukj>&v6F68w!bElsrHTSP?**29|@Yj_ZwqH85s~krAWGvoAz{c9DI5_lE|wFa$`PD zQDmo|4$*LweHdd@9(;MPD=#=I!{ps5qg%JvwuzAfH?8;Tkvp5Im3Uv1+PU)&4>NUi z(%H2}sVy&z2w=QnnkP zPN_T>%(QqIO%Zu5Z<91+pqf?j6h#$(g8vRSNYQkc}tE`8R?#BIYz=18>H@0{1E z7x=8cuu(;uE!{4RXf?+~NO3w-v6+${nPM+jt$hp^6#Gg%O8R2ZFWt-~@7knmYH$PU049Mp}3)V)x`UPw7Fpz(-Z z&Bz5#eyq0L%eZth4aH0kpZ{&x`X7NNhq>ni;N=8}y z%e#hT{|jsQ{_$s5IQeMMluZxWmQaPIn;i%L(RQ~1r-A36aufu(W*5`u&$&n?dy%#V z1Adz}`j5j4eNWpsT}P^%M2ro0noQ*kM~zKmBvmz<2{+uS=j}JnU)s|n5&5_1W-K67 zW>>M>z~n1UG>%F%F%&cMM8NyTnCVEOXs9+D7LL<_9~_|FjtKj*9?BHk2|XAp}<4~-=+&qSre zv7vXsd7%C84}LtN!GYUhLXyRUfrAv!Pi;qV2kz?fvs)Z1{Ru@ni)Lw@PckM?(E26PhqxR$ z{AK*}&b(cF$h#O<;7i>t{DHsF!~0FVz^eH&^|B45OSgKhE!T)!$5F?J)!wh|oeZjF zs3Ef{#Jw*jx-Uvb$=megoYorCQ}=cyMH6L^Un;$Ws}XO}C0y|(HqcJm#*LBZtDvF} z>d)JgWsq92(majO)9kRI3B!I<>>~@`Y0p(bdB2V)ld>=$Yn*aqjg!3F7fcT!N;8C^ zTh!(lxvT^~946NG(HLU5QhFm>>|cF{qFoddLZa@M+;BWNpM|u5bJY8_-lP3Hgv3lH zc!*Ux32 zEE|zv)*&}SE0MC^!QuCS%cRvP7KKh9=0(L=2!~r%3OUqD?mo z>eBRPy@?CFL0K)%e4L*t#FY>F&ws8)*uh`X)qiC*iGf&nfxjuO3*cKI6t^;hEHh&~ z;FK~%&Wq4v+1!4IDd0j~!~Ml(F>i1ZZq`G#QK_$2q20UU0hDqUCc7ztlAp59gOCzR z?|k8K>fdgUJ#Gyo_%WxTk=KMeRq-}f(T)OLg*IN7NC>r(eU}>eru(aTP<{b6=80E&gf+nBh zD{Fj&>=`F5yQ`7C3=h4DWL1Zp5+uOLeDi87xtYSyrTUmkCQ+Lt^?^F>PBA4;tqZ@8 zAf05Mqev=2T%k?N>NBhBW#fE*~zVRqs;yxmC^!vZ26k^cy`HC=8LWO z0rRjXrycxNw+>lHYkl!FR>>688(XU6GT;TqTlIK~l<>GpdqxIxxy`xN?$S%b*=(da zoT1q58?X;TZuwSKXk>M#W>zlHkpm)ob)I#m(T=ZdKI=DLs{@2hMkXz5`L*@rv{9MD+n0Hk)2OSW}duM_`!5;`+GmX%?<$qwQR1bMv4)t#K^`vpILd ze_O-AT9D%&U$wEtgWC|(cT=2;ynx?#C0oi>z$2;`KA*6&60o|QD=$VrpziDtKKd5A z@ubQjo;l^Qp@n)dK!}8v@vv8&Mq3_|Z3Z8R{@FYFqi-=DS|;hAzgy~6;FFP3l24@+ zBqENJSlo$y>!4?=_oyHC(;+l7Y54~x`01cF8n_q4?U2M~6*Add`thk@WuuJIhf?59 zLSuONVmn>qN1fp5xlf-6W7_$pu1FVsHh;LycPm zmQ*zb&ST<6rj#U(goTFZl;%P%+E<^m{7B}rvVvO&{`TJey2f}YAW3&vdO9E2+-s#gFmk#Ee1XNsZh7(aL;A-+K(GWL!ya+Kl^f=e>>5o!85;U6&^P| zm?b?K^^}3H6N*6|!)jzKk&I#|dS=mp7&Wu$uCMJT-gGFOidhA%XTA(sm9CxD6NZky zRJL9G94i^Rcbl$`q}E4D(sv&bKj+W=co(-~^(SZUhcMC} z%B0sxTl?O4!%6zP0M;I^Rn3=zmo%q2Pn@l`n>M#>pKHL5+gQs<+eXo(Svc&|A{~_` zh>32zvXbkl)(l*{I%ARa@~x6OTdmIL>F&}sl*tz}BwP?lCD#Lc6B)|-vSpMpS;y7( z4CD6USDl5Y$j*}^Gbg>^>JI&MeTP>P$<;T2-GfJ`?f57fg=p3h{*L z^3u51I9O8Zfw5bwB`zt6U-vS9kqNZFQ@yvLo-;j7f&@me;n>yH)kEQ*o5rjRdH-y3^;U zsOWW7)$btASmpbho7^UKCXiF@1uZ?00($XzR&J%o`37IrS{uT-DKNh@N=*;Q_J2dv z-21A=w!Cn7ezdHiBXFvXoSuVy<8nppk-3$CL!bn*Q_jm`xk|o74ylM&RLp(bShp+V zi9ef@oY*2%YU^EhPppd$)%4|l9UZbw*f*~W9ma^L_P*(oV7Fa~Zc=kPZE`~9Ep_$Q zZg_n~;4RH{Kz?{LfbCZhS2^WqX;w92{lRPloMC#Wy+OWv&ZFv9DU~N4^+)GIq@8PZ z#I|zZf-fl-0An_N*&UgbqLS5X3T0~6s#+JqTgL}r9YAt9xn+WO1lRTpX)ph1M933x zoKi{(*0&qV;_OSZ1^`%}=@qD$@d9DtoZijJ3_%MTt zdU*<}Df;zHMbMm7zo3{LrYf-8G{wW^6Ih8}n~i2TK30AsMcLlMF)lKAg3jMeNl=Wh z*ubo4;- zw^4^6n0P*1VU%%%xIWmY8l%~f(8H}-OCYO)#78u*FKVyFhzJvk*8g}=Y>hlbUN?|d z>y%R4_+XDS^72cbAhq_gOt88)VgHOxT+eSz&BaP_b2H0(&W`KmympWxwsl#mxOU%-P1Ph;? zZ_qwi$VUzGOB-P$T!zw|05Ch8m2pL9loG1l}s!lnEtoTlKLyr+Q z&`3tyRGI^S#&`7h*D?}QQ)~RlQ7|JuAJk-#b_4aIK5tfI0aK?P);UWYB?&bBNw+$W zylq8T_9=CeHmhPrBTEObQ8U_aCla%#=N3me z&Y=3wn{8w7ir!;-8qjI=M;hnHVY4ypu()k;n}X;~k9*$bDvJHsHaB_P$ptX+hCIg0 z8a@JR_q5*j!5L#b>DY&$zZnRe?TtYZ=HCJ$I~UyvNomdw^8!sMV-K*uz->0HKpc`2Oc@k zm|lC6uMSO3lh2NHS&+;GAn=!9^ubQG^|ZSHZBwwwwR!c>%1Ps!VOs*eP zIA_;u8m=UNNb_A<HIb1iA=O2mam2~G zUs`?W5)`H*jZ+i%>QjsNRWUdvt2oF2g=FZo!GexiZD{J{3HGy^BDUt$| zqpipoUPfR&At9GP3+9gGLn0@~%EyQ^r_}Awa?YLju9a!P2ivz*sVq^0m<7NasMDfg zwDL|AG9hbZj$mZ6J6E4^AAS9b4Ec6FidE5N&su5SQlt!N8}msvUzo&M|L-tUzt&26 zqp~gu=Ux6}lEU%6CFd_}X5$7S(_XP7f>XjIj%E#rNH7f+yJyM!8xqmsYndht8XHV5 zMngF11W7zW5imPH*2*|Trrf$$Wvtwj zUtVaaj%gh4i2|AXhWL4RV77z`(_F1h%s#hT=zsUAMauX%MIV|o-{nu`w+H$C9@hcq zE*0ZE0{N>QbMGZ{|7DKKyEI(&b2&Os7fv%H^RRjM^r&)ABUbab{dJIJL!0g8tmRFF zaJ+-wk&CRQbL6ihwgQWy>@y9n5GEcu)G1ZDmpXGs8Xz@vE*j-Xx8HnIr=o?g^I+au z_oP0dbcH1`0=HWSSZ%ZRFw%h3&A^4Qn!tun#n}Nk#_JCNBX53H97|Q4`i+)QzuH$< zCL5^930XLMcQ^QT&n;~@WQS$oH|>;L0jvVO~s5K&3Qz2cnt=+b`ws0Y9iRf2zQ;iJs} zYCU(a(3TBxskmcPp0CT)7DYI;qEfRrcz830l6T|K2wv!{B~hSmIrU7CslE;h>cbKMaxJVO{|Ga+z*u-=l636+}Ck{VOjg1)*b0|jW{-m=tV=OyT=VQqN$i&@&a zqwozaJc)xyn*C+nJoj!d1IEu{Vr&}mXUY+?_F`~~QgX-jel7zhiawfFY;X1&vt=6c z{ax&@E}3pKWOWy!kU+@|TlL8+4)iiI*5nn*LhhG_(oZV6O{_&t*EF;IW2F51uS&&! zUYWQ1BQ<-+Uzjiht9SOHIqY!1mPA5+qOZ!Cm+uS+vfZ zSx+iFu)#4Y+Hq0XZ`x=|hHX5YlLj-;g2EU?BF@{6c3GDoU>lasN{Dq3WNj-)!9I+b_Ya`4{|>`%=d`~AX+bP#9_WnuCe z&ZRSO&rea(#Q|EM>dNY}^?KilF%GV&Bz_U<3MzIsCli=lybk{>jUaBvCzJaT++fg} zJm)_0!KSOej5|0nFmJ@Og{ZI=)rkl3+-Zu2zD?D@jhC)oVmq#&rI$wpeUu-9i*8{o zsN0{~Y=p;k$9&W4r^|efToVz!&fk&U;iD!yI&iuv`7iT4U-Juy(M^^xV@38e? z*9}(TUwJOKBY64Vl6^QhmZ)CF5hivqKHN*42JYQVbo?;M5K~S6X-BZ|zAL+nTnU z?|pSx=tQcrj>)q3@l1~U{Q~S*9qsDN{eG1JU5yEiO^2HUiL>mU7nsnBt1jwqnH$|? zpIH5+d>aFwPacCjGwIV@gs8MUW*k%NyyvO!%EAS4<#*V%vM(XDd4Xi*&tT7~=)n{z zoka2+-Vf*3>6+O&5J-BfiqYo?BBjuBjL{SGTtGl?D%)Y&U+s;20UPVqvx>+B@2~`{ zB1+_vJG7^6NW$%;Ie+H5m-i(Xaf!MD%`<qyhiIJUG5 zAgcAvR_yS=h3QCBepR@6$bd;tw32?8P!vKncwkUBV~rG`-V6gKycRej+ewzqyQ9lf zciHAiSte{cS?kRF09?9=qRi`!laVQkFh3st5+f_jS~oNI-P_KtQ&RNev4;#KhPN-~ zw2w%?YNtjDG9s69RhKQAqhhgZc`M*Kks)J??rvi}S^{`tZu|CTUn3V_DtHham8V05 zS>GtoxpGE)!=6sue8J2dJ$*ScM4$EWOQv)!0Lux5RWrHh57yc9v9V7O3Rw>b$m&@|-3=WqNk)@h zUyD9BdwQW5a6>uJqhz>IgveQA#oprcK(Dt5@N;fWMAo zfjMK#7*(~Ge<;i*Zbt0l)3sQB{83xH0S6VUZ^=i7xJb>+XPJqz<&U>Ft|Qv+{%k01Y?`zxKX*Lt{w$4l!KJw$}sB%728ab;!dOMZut z5y}pITd(xBC!bxO2l@v>V@_%^9+pGa2 zHlg~l)sPiNuBPAGndScJGPentiIIWDY?AlMFJY<-B1{#e=r>pPf%!WoTBToa2#2LY z5l~0qdF`b20UAN}EwT!WB|#k~a$83UzH=r2VE6v3Vqoi|@u#69jVUni6oSp#4`U3C zW4gULE0lVs31Lt(uMgdhvqh>j?D zX7-}Ci|>z#LPDL!6I>BTM|KB;*NwV7L&ZTlclWhW=gg)A@^+K0{6O^G^|2=(r|Rc* zqS-%29k%rZS>+8mC$tY~gCvO30R9OMOTT`0_ zDfvE7|4eMpieweG%Zg-Le=_)~2#ai(PRz*!=%fyZQr~k|Z#$c0IHxtmUeDp22(-YwDF=s035tiaN6DYe3@t-o}qR=6;0Z}u;*SxdWUnrTpi{4Oq$ z_j-phfsQVV6g>6X;hFLX0F#O(O=>>^aQCI>8}y{2ig|Epi=%5CV&3Y0kMtavnr<}a zif%M`grDMVt8W1y7`!!<1lyAkeWZvxcjpg4`NHg)MWhBUL+U;CHmgV8{WXE+G*3(} zT-_OMlI>=u_>%o?k}Vvpy?|s*G?5Z*ht>&gQ1&a`s!R_J&aghy2=Xfxy*MEOq=?@p znUozt`l5TEZdAxC zwXmGMvI&y;H{|vNzu)Ray>>>frA|?z;sG_%5^OpqsictCt&y` zrr9<0Y!xTLq^n;RlVHTd^8}ePs!M=mu_41Rn;;tanHU=`ElmD_RgzB z>*|BAwY=b*<=$*{*k`5yPpam8pOHU{@x(efwJI%@m&N7kz3QkQXd~6yRX<(ZV6_(^ zO!%bR%~;>+e#Fab8os)of*Js7sWV4aSireNmr!OvWSkc=}FLwI)^b-f{aMFp-oOGRs(2A;*v#W)}zWR(q@6tt+Kmj}bD%qJ_p@CZorG+bTb<>R zM>hhtc^GF(f-qv0-k3j=<=_05Z#XspNS%xszzM$b2Q;9-UfG$&12wzbRhx+f`_jX90_@>M>fEmm0yRY@eG~8x`eF6L)YrsvBJFy%%c&ZL1###%sK|+iA1;A_OyDI#7wT&T^c4 z6)uC{&SwIKgKCQaCMN?7dJHNw3FnCfhZ?5B{Zux4kINtH0b-vsR78c^FFzC`Qe+U1 zQS|UkKbd|bA1{cF*N{BUY&uMz4Uf*Gny^v(Y#RraB$jBDrBUU2iS@w9hF~SwN$Heqi<~@3!R~1JWFceL`iR((!q0Vz;D@yX z3KJf$xC=E~duT4&6pmfzxg$4VeN4N>70WdzBGQdyLVjc0nImvusDz z`_mqe3;9|$($O|myL*P-7)?O3IU~@sU%Nc`o;X}X^ca!{-v}ajZ3DeFaI~{|f5w#y(8C;ceVngC zq7vujPNOoUT}D}qyE1roqej%1Idt- zB5!Bb6U}j5DM^BTAWUZoL%foxU3Z9nt}6=?GciU0thF{X*b$6D&KpTIOyVe3^kh43 zUiwx`95+|oJIIOvhg3InTFlQ+uge@{$VHhzb(fLZ%)VCyWijr%K?ZOtK`0DUedZpO z?c#05q~hnANtzfy=VZH{f{5QrN>C+U-5n8zR zyVSP*Z(Qfnk|-Ty!Y?RaT5}hsBi*1;{kQ4Y^gIVa5saYU1P7^?`wjHm>pea2rV2C~ zxvP511|yt-ryrKHA4peTINb=z?wgM?K1tVxzS!MMXV52cPplB8k+)y34V}kbCf2l_ zb|ZNTdb4=b9%%pV|C=B&hHVKLl}No>X-H+_hTLtjqQd}N*vS{>R$P6)YS|4BM>_`6 zINKU20Mk4Es4Zj_$KAAi&jbTBlk@Gfm)>;5@#Vuyq7;?K*_aHUWG zp-h*%nI#v8>OB9$6Kbkf_EyGxW+lokXuusDaWti=Hc#!%V}c?nrqYlO_-)mWx&q$Hn8(p}xgg^D; zIf2K|J#`0oDy6*1d2>$8x?Woux2rP)GM_C%v)KAgCl7f6$wEP2PJ=I%5Kz3%i`Vr>9?*=FWIidFWNB+z z_T7FFp=@W9a$4$~G{CM_L#J-TZ-ITuVr?6blOl5nsm7lz*;ql_yU_jnY-3aC2*M73 zA%{))2I7GhV`Zdu1IxwgYqtY+g_6s7Zz^w=O=HYQv ziyaNAudiqyWn5yiw5RMV;$z#!#>S5V?suYbUw4MFsuiB77Y{RxH+r^OVuVA1!(<{4 z^jc%tS+bUqf?4hBfslf*?{Pf9D6)a!w`gi=+B!P+E;qfD%+bA<6!CdIh-au|-zXED zs{z#1QQ&-YVg9GEP+zAoW$jrArJrwKzboRS9aSwYe2ll_~ zr%H%t@YkqSI+Th+`MOoj#(1pTh|n*CUwfI$%0P-NNL$omnxLvWF3}i5p*(CcJ4E|D zDurQi5R;uwXPeZ>?X^xoDB|tfuFI!#Cx-b$1HhAk>)nYwTrAt6nCpk)Sm9a=1b(AE ziwpF8|2Zv{(eTGmQUXxilh8o-IZ%Q!KL3u1Jgo5*n)i~9Jx)5GkH|-)Q)V6v17kCX!G zJL$XSB`}X$A2qY^zHmCb@=Tp89J|2L3Kvf3R^lxT+O`PuQkF}%uURNEjUC5x3% z9ESopR(T%Yg>wUEvza=u-k?SrZ*C!63T8-|8={KIJ8na6@ErnW_&y+r?ry>boa3X? z6pVcD1S`MhD%D;(&NGczI$&sh4qv&S7KO~z13##z_S!84D0 zGIYI8#R7ZeRwh~fR-}=0d!vwhCm(PPcWZo#_%u*??YZ>{JSI16LN8pTM>~6MMHfhk zm6EKaswr&YKpF&rU~O5EiHM5%q8AhtBqk*x)^y~5@92I^{P7t~P;u^jz8o*y##}aE ziPA`>jugJ#3RS`u&9E3h9cB0}Ii^t}SoAwn&kLuF%KDQtRx-|>+7&x`B5nW97EDQ< ziqpa_r{qzVE~Emiz9B9X@Q22%Fm%?RtVz{l+hdy-D#PYTcVo4+YZppiq&=kRAa|EV z#drRRHu>byG9g2Py8hrsjjr_LzUe(B z))0$)$5rL0V%#&4>e~uQuddL?%rv?kI>rKR@6x)WjW^XwhjR@*C5~Z7&AAv)EFcsp zi!RLqvL(J3NWuS!s$VQ< zCdz)8m%8~^&=VK&Po--2|Lka;M6aD{cQ;N_83sJsQHA)&vv=#<)Iv|iR#?p?xrU9j zfm6D34-eQn|M}3Kr+(yW?|=1AVs+ zC3$Wa3WQL^+W5u*97rY#+oEcjfO(eq*oP9JqVA7J{HlMhbqE;`Ts z&un-*E*|#3PyxWdTmMhk4Udz9E1~{71%4oW=eKC>|47E+>sP`=^MBg<|E`u5fHC?% z-{4|6s-`}_y7L@y0czG literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex.PNG new file mode 100644 index 0000000000000000000000000000000000000000..d6679e1e0e616b1430d006fbb2bd90d59b42f5d4 GIT binary patch literal 79691 zcmcG#Wmp`|);1a(0>NE_ySs)`Gh9D+k|cZcAEyF2qe``i0H=iTT3 z`O)1~SC{tcTD4Z)>yA`bl>YLW@bjlnpT5Y-NT`1L1QYsCIu#NApZm{NDV~2GP_C-d zfKN43#K-?+U@gTI#6Eqhk4JtphWjUv#q8-ii`WqUx23fi0&**05ht(ZZ+tS{^3QJwAv z=cDQ)JKq>Xo{Ud?ceEoBs|iBcW9eu~5fVI4r7EE;IQ!Mw1}j_E?!V^ZMYMNE8ydww znNY?Cg$x3$swwR%nrLD8;F24z!L;dwQ;2d;blbf=MfS`?MlVNtk7<({^W=WcYw+*5 za!<(R{q)FvxIAk*{{CMx4Mz=|M>I}%8r@2G%aPn}sz`@74UJJyW8^o+9ak+22MdJd zQ%#`DuEv~@t@cSxX4s#0J{(BzlyLa?Ogw~mo*`a>c*vi^zyXu6`ndC;arY|y~wUb6KN!D_u z`XWS)N=pHZm~;?A`4h79bSaiav6Qx-PAv1!*1mm4i}XsU_ z4935{yrq33f%;QLzRIg0NCbIDjq>s|CzU}Oteh_YbH0f-?!@k#KKI4DkgXa8l#;M2 z^-cIVnpi7v(RxR%d7|%G{*YRi4x4IQO9}7290DlKmpM=2>~h(3Q~dw@iDrQE2YGZZ zc*GIhIn^*XYqXV6c>?jLF!g7!<+mIr38ps#V=pzgnesULxKe%k*OS&>85w&hGV)p= zrM=AyJ>Uh!f;?b|EfEF2SpHt?XV!G(S2%W)t^O|x^z-pr7O2z+2hKyF_D~WXXK(R+ zO)mRm(~fIT@FMXDJ?ITT(3#^6BeF(+$c|)=vfd3;ZSLQ0bB@sT_>1t+r4q>YfV98B)q&)UG z3Xe`HuC)(^3cZACSAGIlE3?oKTTyr0iJUIg7XB5G)jgzxs@T$PdtnXQ+N1Csz5g3< zFE=6n%FlC#hxzu%vVVr?wc!;4KcU*vgNNOFZ}WS19$M5LrkCrsyNm;me9b|!iCTa1 z8b=l4S4w(X`6Q!Ap)HE>&&JYx|wA#m%XX`_nkk;>O&U-R|mE=_$?Aysr-jd6F&qP6>v&7 zGcGgx8WHJ$Lg7F=~x| ziT~DY*B(Pj)Ic`B1J1lJ?`OQVPPb*E6G`fV>h;N%`WKw+BE65)mSrORL4%f01z zk|8|vCDN6TB8)3<9k;{BwuyJwk9Q>mF6jFfKw@ttP_(c5^bnLr_kejb|NPeSyz7sU zjv0)JqAfewmC(`sfoda9)7j>5HS^8)SEUnE-h zyIAlRwG1cAE(~P-|6zW^h#xVyx{e<4|x&qFZPd?j1CK)k3Cy}ReY{huGAPV4dQA2q#= zv)WVA0p83C!=!t!O0me~h}-zY#qKji{Ck0D3w`Q?tilb);k9v6?h&wB>ml58%GS;Lju;T_YG+GI-Ne&6~KYigT6^Orn3sGvgHKIk$qrg9@sgo%m6U1@x^RUXd!QjZOFWXnsNEWMm zq-YwQc25by&OpHu(O?iE)h_<@5L_+#;4QmDI2HzM7mK)@Wn%s^Csc>YF1*&9ft z_&{QMxwP!HUxMfToI-Eo;E&*b@#V}Wr!OgeG*fpA`1TVrtQF9bc6|q@*Tj_*RIPiI zezQlf*B>t8MWWG7ib_fr08}zhVUqGiL3ZfOp59RYc1an3>$v3;hv!=wp)^fH$HTrY z2*aLL68!_VO@Vjo5A{#|x0}TRL~E z-Pia%0W~27*Ix++shJ$=8uxeux5q^{6syRio0li4eZ78&ha>R2l!uWZz}H!tb2Oh* zi@fG&c?TS#t6ew+YM7S`OcJ@dSLFl&AVtvMAa@M(%g|8|N(yY0uU5 zhF={bO;34wt_C&($Y-!(_)E+w4ky4w&#tO@stu9>Kb=uCC~n@EmCXgi+pR=5Kl9(p zTm)te8;X7#{=*l*j?NrN4Z<|hT+PhG09XO1Xhb=YdQ2mB>gnyJ`d3d~UG%9`KGfWm z&&fNI_&`hnX|2#FHl_rB-4jf^DEagpVx4lofdzVH&29J+Jyg3tA0}Aa)P+1ec*O9# zMqc_y4)YS{`_4FP>Sx#2oYX#@CjGK1g@?z_bt{PUk8^4E$VugN**ta^fJ-9H(h@h7 zrI03r&=@{lTzcJI(|Q@-iup+CWwLsKi2rTp#|8S7(}og~|84HcY8$U4@P6m*^fJN> zAC~iwWyx^cIZ-HW>V~KBtT(TM1^83)ZKz=ig_j|Fo8Q_ND-T(d2ie??e>+Rd=i$6` zap*Z05-?~BxfB)orqlx~p(r{m^|#6MP9}jE_~*Fv2biB_06@Mj#v;kQ)09S z>*qaVKyEI^Ti-h2um|OxjD}fIiHT_2OptgtU0KQ6PrLqljKir9BO>wnWq*5L{Oj8f z_-p!p_eGG4qu@fO)(hg$;znZ1;m&>O1BvBY zfwww6GY#glVd;#0G~9}4yZu`IPE)zOIV3H5E4%p^XWRNwx~`o()7L9LTvzjg*Zt8J z@1$bSKwpBa?R%Y~$LL)GVz^DynFf5tY`C{M3$W2TK7UJhR(MY! z%rX~Ef`;07EN}I}`=!q4{%XkE+u%o|kgRg(jG~wZE`c>WJ_4~k%A;%Rvdn6Os>^%G z*(zhG6UWGy@8&pKkINUbo>#xkW}4g()}}ejxP#!pcl5xQzYMs^)GBRWBA4x^B##EV z!QQQ)vTb8g$?xdG6-S2hPO2bDA|+G>;LE&4+}fhP=`Elimg4r0l+t|Qs~}=z z*>IImp|-+o-=0Uv(+=(QVF;NHKrI>c&g#Kt#BOruea+hX!!Qt%<9Bb!vMbEXl)t$) zeu^-B^^~H(vJH73-tgPoE8GJjvpoXWTjKU|XfOk*p+(S0>vM{e+Nk0$P0AMLFY%Nt zn-VpZr#ro4)o~9vJntC@8-Q}Z@inqmL-WPh5+|-VnXCyd@?f2zx4K2 zTq>K1DPL3dw)a zL6X+iLUF$xehzdmcC6S)b+(g(lC?$)7xC&%#7LSo+E%hbF>wL|wE#AT#J`!;zXToW zZx6Xuv=Y7<*`yaB)jkXebUAPz%If2CbI+(J{_$G=gmqF;M5l7xcX|s_7YZL>pA9?W zedF3vw5ZSC;tP*Tg3i>e&hMs!$vQHz^OGBjM89rJnK11BX&!wztF7}*sws^$(ccL$ zk})cOT{zzA^bCE#y`Y?GZIW;L31QYuvo_&H3!QsW{Php^=x)`LUV9YrBis8)#p$YF zNRzL;1wpf9Ma)@XE}o}52M~FQ4J4j3N~c zMg^zIw!>IOhoSg~u}pjIQ86=*dXMhW@4To><7j$}g^|Y;njAJqatmbrppb+BP(n#P z!d($3b9{f#!>#j@VUa#!Wy6@{kmq=hD7vqGmej@a5@Iq>zGIf5*6sZv_vrc{UT?Qg zKBS#pZb+ld!2+n~JZ(5H)b<1eS?SB}!}AVpMLXi(Bhzj^ycIv*Y><(3FlRQe$yFcy zvV0+Xo}IG-QQS1}fz#|hD3ZTA{BR;+YHy=21JhoA3()0kN#xom_3vF{;#=$q2V_qf zr@=-8aM@J4Z+tj>NR3=u!uWapB7j0@&dZQjmU!V0y6NtQuvBv9V71yAS>5BzhmWF#nuZn0@~dk%o+Mh*Y}Q)Py{mX7_Anv63+$Jv6duV)*#b4s_?j`ow~z1 zw?Rw}DUX|h(jwR~P3Q4;pBKXqYQy)bS}*Xdw3j4w5k?D?)}x4l{|m;?Th@}gXF)$O zP;@VGI2YV@Ztq3Ctw3MCzoxqt=6=ijwBSiroJUMZWQ)lE;#9_4|BE8CV(R^=VLX!T zw7`}vVvtY9*O#%&)F5U_yU_G(AlYC{0k5A(G(ho=syDBxz(;HP6b%t0g0jcs3o?=4 zS>S;RDhe_`4-vjlL)beO|F5p+?+oI@*2hO_-*hTYCXBOZEsAUwg;*GFZeNOCS7y(t z88#K0CS%0TM)sZ5{H_Q6u1hI?e|$iRygVbU5_0D$8D#a=bmb7QwdYA+2Idrur6gax ze8Jm#=j(atClY#+>fwpiWYhp_ZuO#wo+CR(p&u-QRg5(+N95j3jjqzuV!Xr55a3sv zi^AtTyQ7sB(QYpx0is(U$F}kdhJC}DFJ4DsJaKk^r{=RdBIp?kZ_z||UzCLU9Z5I) zQ;V>YeA7o@{Y2z6naqvPzSi2=6d580y)2bdgeu%$qnvGy*GzpXEtbb+ouc%p%bDzW zC3pxeMx&W$t4(fA&V;Y4O|;3%6g@K;#KCV%@y2g4(&w<7|hvP8PNtnF&C;C=?v- zgt(RN*PYyyPzk-lT)aIVdY7*DwR_eSWU?4+%?&v{() zqoaBz{Qc>(>A4QbW)&Vo=)Pi-9@Jc}W-@AM2`>_^6wPIPL#rqiMk-s&pwKxsk1bXt z0e@>5QzGHU%F6}nD2UvVnVb>{9)VuUXjU_bkIUY*qZ4>V4-&$EhpewOxg)%03KHbF z*{Yq~;{7r=0EpIhKfwE<{x%vh_$FQ&eGq4y&<)aW`w_NZ(Yp5gdIC6!f5Si*5QEnph->3usS9lz&b{V8nHs^)a&34?p@V=TXu*row1_e^DcZV{<$p;YlN|R&T+1I##=o9!`MD+W5zt)K-$0phB-nvpi8ZND|9uSS=t~DE599tU1quU$ z-J)DMs9Wg@rg%oKKE&_7G+mvEZ|(a!x`BK)5uV1xeUZvS@nXks=)B-=3${>IATl`aBJ>%r+ zKy<^^0Hz6m05zY@aqm8pvBsodA#|dKObLpTJn<~j;F|tzQkXaPz#zx*)hsVp#PVUE z@V=3m-o~mHmqsEB(kt|d>AjRZE)g?YV9J)gy`_~|u>Y`c9nOK83^qFw^5~?M<@jw@ zh7%utp4+Y_$|AP7i6ZKCDtp|eki6D1Vwd1!!(nUm${PyD8&*sQb$OBuC8V$887!!k zl%)=kYKQ&mBHsnt=MAe%UZ~@v$)qD^=u^zVlp=`(PH3Zqd%25q%7(>a;}v6I_7#g& zkKozU@|Q(au4tPu!83c^Mv45bQRKP6-c6&rp|wcJ(34S=`|&$9gio)~tLI3RI;HT; zPtK&MKI^?zNW}i+`wS;_?-ITm05h1h;&h<(;m)M5LSz<0954p$(g@EVAaO?-YHQ_{ zEeqrt^lmGLl{&^s>b92V-3Ui@-u?si;HHFx1f-N&lUi&s*?4`LNP|Q>2JWgRWqP`P zJK4#K>jQ|{OAf^F$Lcvx5@$OKP1_K7982E$UH3@c5c3`DX4PJam6_+)p=v}4^z2obw3Xg}q17%ZjQuD0TTO7Sq7*z+= zq#*a;$Q6}%kz#46o?_L>8KQBLhwN0s1GC&=r^aBir0+_LV|qY%!lqg6Xm;7aV3DYQ9 ztsh^n%?`0aq@s$Jr-%=9jQZzAF%j|#aHEJgNv>1yHFh+t%IOUIfy_z#Cfew^<%LPkTIrX{1pZ@Rs6lvzRj?V74k7W} zjmo6~+8vtd*d+B96Dbg}oF81=;*FN|yT!`i)y@p%I@ik=?dC-7@w%++H!ws0%zKBP zwEL1gH^3XOYnM}K4+bC=KYQ3@gv(E?nD$#aJ+mGi$DCGpX-LA6k@>wyUNH<$Plfj} z*eoF>kJ34{9|Sk8ZeIj{&;Y3a=kQ_ug- z1Fo3GB?XpF3TX-eFk)u+K=Kd>*G4<7k>=-(x81Y zJ;p!1=Kun-_s(A4wVp?(P--AIT2D)OBICmj-=#V?h*=DcIEaqcTcS-5uunqWN}?zh zPqH@)cnkuslsef}Cfp$}{M|1ZXwK)EKD(g_p;SlN0t)~>52G{w(2 zEj!lUDO->;jJUGe-6>YT5VC+B(j{i5-qPSHnQz4><%rs5S|MV`6v9~zyHYhTS3TDy zfv;R-ZRZq~^MwnRAMEQPYp;$rC)p2Lzke*4z6||PadUpMuFnW;3-`SUAnVD~8-{ee zLnjqc{YnlFQ8n;;R%P*h^ra{9`Wa5@l_Ca`Y$SoZZ;MY@RgCdzKg^}7Z_P#V{e|A` zgw9X&U7il1i!@Q}tl!~!cB>&}dgEH{;{C?syQGn86ztn|y*kVHKV61xIffr^4gnCy z+tDxI>uJN-ben%!xH)59CvW{sr#jGgMiPDAe|?^uzSu@E>vzhCYUr8nP$vh9%P05PCeA5K}k)cUb0kp||SSr<+>FP@`3KrCzKV8f>iVk}+o$)u%bhe)U(ufTJ^_~6$lhZ$GwQ_P zGb(6MNX&@)j_gUMvQZ0WPNMvMw!p>PoA1+Nyu+bjo_60~^^Wf-1VFc^CQiVbfRSQp zlQEL*lK#M2GoJJ8AdoIL9v9l}ceI6=qRM$`X~&d^ZnJHx@~Q;u4#a|7Al1qiMQ0IN zr^|x*ltn17WU&HPe^)T2Q&lu1fgtTEh5gu+<`%YE&~U$bk{P8c3s;2PWzM6L>{&yw z9p_p775+G@B6&h*s2#Wj?8d9BERdJUU!bwV48{-Npz$9(|5HW^QV_pqyf)>D&RHn* zNzL^nKV|toy%zSIu21ueomMswcZ7cojjpFMhXqpJgPRotWkN<#<|}8Wo&&rqQZKHM zb;B@?rEc*+I@GU=i)Imum&Bom4ZDhrG86hV?IgOfLAjQ`Lwr(T`EA2I`*%>|w@`fk zD~_%A5pKOY2jMh*PsT03jo~QWt-(Rp+q#@Ni+>}&!|OO00K}E{vY%Y7`v zXYzQ*)30CmsxuAt?pvJ&Xb8y8jb0BX?fAK5v#?U+O; zk+ef)oX3|7;>U#rAnK-(;qwYoX5R#sms`=pKKrX;u1SkFDzKdBrxy2 zfw3>r`R0(-@P(XyguI5+r>g-i3ekqsVX02yI$=*v^zm?hRg_sn-RBzfq4K+;=aXP( zEU0UOVCgU;Lgi<{`*_O97_7aKMAJ{$P`ba+r>&SUe}(-zHnSX*YuX)RFM#GkGLkz0 zoo`I$j+z~)YbvL6NGP>XREX)poOj+8DY-l%T<#bKK2a={T<&a+Gc^5C40%Z&p3yYe zIHu^S$nBKx@W}C*iw}Uf&WS+AJPnBR9rk@Rmo1|cFu4>-3Z7f@`bud|Y&kN7 z{6a~?b$yc zgF(v-K;NaZQc}B&9u55cMpNUnOfo?h`13Mw53h5R8CH2wBN6=`Rl|-Ub~*3|nxUci zx<91%u*aDUL0WI;vABuDLJSqQBvuf$Y2H}gxoRy|6QwXI~cOPm3N+&udAZt1l%w!_Maq8+&b?kd1f;kVV@`!75?)@ z%Rgki_Fc)L`!pb+u|8a7{7x8$QVN2Iu;x!yT&k*q9X80&@bG0$_`v8gB;NUv1Tw0z z92mk_`@xW=2SE;SrRx0Ky$0>#AA?TB{;l-ySU^87W$+wN0J~oNNP+(*Kv?IR;ig8W zI4Ci-|LyD+GPuYakYy`+Lx<*gvW$y6Tl$axq^wlFa7g!7sAi0@hGo}w$Hd3qOL;g% zv%(%t%B4@2q31v&=(E!1&${(|)Y5tYKRcXaxR)syFs@{9g4=-zl9P1NaIguY%X33X zqXjfra_3s)HpoT;H<-Y<%hwmSoU1R@klpsI?m>mTfVe{ep_R$XQYadI1CBA*(YSis zya8pU_QeH@fm-EjLTg&amHmJ|RM zre50ntX|p+T%g5A;V*n+$LF#~DWAP~lF7*{I+c2evM>qvyi6w{pYy8*q(EY76N3~F z`UoNNeu(Uf+yOu?%2>o z-9!UF=1tGeZmoEO6^{U5%pR`lXtt@Zi2}tkEp$p7PHMKc!r!aq2X`tP{ZO7GKB(4KXmf@Zx52=xXKtG&5sQIrb}kQ!z_TR>MCpt}Y=dD@h2e!ktk+ zG96aa<>SFu=)XUu=jG>XcgE5$R@2my*53o9E`d#xzK+--vT^Slxr|NyWvnT6IwCMw z<)sj-soSk|?<_M;8YWxmvr>khAL8apA-pPCZgg8!J;Bl^UT+EMV#cC6)KbyRkd*fm z(uhv0FK7DsV86cVUY?U)S;D0AJ^c9!S*Tky^OiMN+FKnVUZ^W;=Nl8X!fgff6gekl z>|HjB>RuuKW=|w@wW;>P0$oLQC@=;tDQrRA_>3Q5JKdU4gfez=8fFGYf>NO777Pj9 zrW!^i&G#Rn7t2YQRK`SR(UWK2=)78iUt8$#5o=7Sqo_Qwp&y?nr({+Evr_ag4wjN2 z5M1!l8o1(mb<*SX?D7bsQ3a zewC>!Ki8!SwyPq8tD3HeV{vlx@S)CjVyM%5znDhnTGu4>%u+e|(?+3qT4uW~I%Z13 zbhB2f5g|%~N~&zZQDO5|HQYRdmq&DOXpeJwurWDDsnzEbWa|;0*~X68^YCo222R6M z9|g*Ae53biz}j1zUMmxxL#Cj*pE-Bkg|4V0#iqk(*Ctu{ARug6;U-Bm=qLW6bH_ur*nE0F$H2w4GQ0*ebrc zk>4MoCF$gf86=0BzJu`XETXDx=%-uQF_hIJK(d$}_(WNKSZQO0rGAAu;%6&c)1l}X z_aB>fc*gRqI3_uAui^+R!Uwp~T9cL(Qg-g60`(!iEbTC1Ou8Itwo~yX_T$C|D+^*| zD(X2})5M^#bg)F!*qkhP2SKunKcGCCfq{-SqSwC8R$wZEn}dhkY?g#Z+%iN?6-@IL ztc$^OjQUOHwCL`m;}M z4DQs(+CL1+qWhvrnyaW}#1u7$1XVa?RitDVfjCA+Vg@P9My#fb^S@@@J$-`F7ru+< z|H_hhcjvY%8UOGkfjNjq04*ZaEo+Tzo<{)Kl-DjSl$DpE>cyQYO{^j(XQ_(#D?cmg z%uip49DYQx2FB^&N=VNY|6Uk0d%^Rw%VW0$Vm?HeespR+U{9&=rl|_RUIG(;zC|7d zqRcIC4*q#U7l}Ti;KisdjrPJ!VL>q%`b%EeSed@8uGlv~zPU0pA)$wgQ$irovG5vh zKweC{zKm4Yn1x#B7}c8=kG;J z(kpagGe$?pLM%J(mme<&eJx$C3; zuGd@>5YpZ|f0B-?cO5oXK&?XOa)hWnT#5uUwk1g(=1KcoBqw~Ml_FQ)9}UP{U)V*0 zN@|$DZn8HG3>Ob(udvl4^ad33*xMS92$Kh8=S1-@VoJOo3$({?ysi_R@K4R+Hd7e< zczVN(J;SE);%nNWHdvzqk8!g=eWxLC7C-ZK=aqgyGiFv840J=7zC5Qgn=;xQOsi|H zOfM|NjN<%tcjosKAy+t5iSo}5A)^ZkK2b`9KY#RReK#J@owzZ}+y%=3d;USmFtat9 zmDeF#yVd2`rXOrLNM0ec*h@>sm);?Vo=q}eadHK+z6*s@SEbG?8%QL=Ho+|^<_0|R zKOkK%LCaX5%9688-O1T7d@hMa9zk)x9V!U$W4Tvc$F8_XPS^eZO+}2fLPg}|1tC2- znE3*u-AC&B^CoaK z1{laEjpf*YbdsaPRpFxV-)hGAtU)f~QdqO~Jii?w3wa`cw31;$3PIS}E*?cAYG|QM0)Q9xZVo;g%pq zmMkUjzMC<^jbu@P;KXsM#I{7~1I*IiPeUUt5Treh{+s^L+ z)l`C5OSkk8d(<;oByHmNGr^VG>hAc@OR;W*|r#-VUPZO_0bF`wI8&Q)!`F8{y@t~Pn_DoW65Ki2YcKetby++!|c59$iNewct}5hN0?7a>Uwy3Ns?G4$hmz8 zP)vtulN{i7h2Ax%MU(Bo#C}|yUW!jh&`(yOSsDzv26olEVGlZ;!sYZnmt zdJ!1al>^Ftudn}4Ea!t5xc@E>$^Ug75;kZ-4t53p5b#Y<56aX5s$C-5&=-6aX$BN4 zAr9-}D=lK7gBIiT{b%&2(BR%(x`-kT`(9n*R_z8&P+5};6|4nulET@Gl1gr)*gein zPlHJPa1%%A8mulS@!5f2EjVDQ9P?lsF=J$$On5@erYdltW5vi=?5{)7EwV^V{}gqJ z7hU*N(W`s7%IF?_J0~;~WsqaWr)YSA0obLW*irmZqSNJDW~TaF?zjIG3Jms237QKz zn!&a0tvQoZVD<2EehFR!b>nwrx|G}L9Ls)}Idhw%%oyXgIOg4{2xTbJNw{4&BtJXJ z5m|I-sNL+jYkilO6-@uNBlJ!Yp7}xh6Yy*CtN*vrD%p}z^GMt|Yc+d1b@4R|)w$;R zk~j}*@#dOj0oJcRZj}`^yV$=htUc=;FWn#lI4AE$9T+_efu&4Ag-tZpc~AJ}yeB!z zvRbjFU|fBx%kNRy?Ch#Fca+VSAfaqkgp^pHO7oUz`$)xPc^efP?sv^<%-5Dbbp9j1 zMnaOy6t>h~Q0TVMfBU<`D4a*9Sn=X4RM=FuYkD?YpPNOkIIqOZ_wfGOY}Vi%QjZeQ z5w1{I^GktNH;{|x+dJqp>m$TPx27HMxg4jQdZ?d zFN&Fg$#`sIQ>IgsN3V7pvh#vpVrbj_&7-e9q1{F;k+MC(^u+&~Z8Wb0*}NvHOm@HO zrTyTCI!~h;d-Wlrx=7`P4GIT=1R8_kx%zC`h@<*&acsX<9@1E@or$f=&Ib#}tI%%v zUz^H@NSFUaVYF~AgdcMQo~j-F)!>2rg>a`k0|ezkhW3g2Ve=P-JxEP(Knrtp8n{G~ zpwu3_GSa*+%_q6km{ygZ+UiDFN!x0|J9E%nk=W`h#pl4aQK+Q8ySAjX&&pIi87ty& z)STW5m$vjL4EIV;T72xPn)r?G&Mv}=BiOmAZa40P;P%EO5~N^kvH8uwh2U{e?c!KU zK3zp?qNGCe!UC?bKxd+Ku3uPD5eu{Syc4{Bw(NAKB1Ml<(rMFazmIYS?IGb$0gZ;` zfNa0jvv#@M`Omqr8LoZps;_~OISPBl?Q{}1vo1?u0ogj4*X%!|(H+^j0Sp#5g3U3j z`?(DB70+YOw0Fd9ib+aoTI4R(9^vEW8L5)eSw_iy8u|r`N3nC zQTIgKetTL-o-Ey$%6BDJ;EtIghN8ym1h{0Bzv{2f`%?_ZsJkW39`i0(sEj?wQ6io* zEc8)hH`0W1m?FJ8ZT?n-+>!5G?p)hm$1l%RLv%o0+Px21Z7cP#MC5H38*o;+x`T>2!)&vuMXJ&<*B9k`^*4 zRS#Cf=w*hG($e7QeY%LFz&rS~$$qK1j65Ir=E@2=svJeBOH*IK-+kn=)N%_x*WVd= zcvvrS(2OEstFbn#`$0WB8Ny$y)vg>C4#{l~yDtxz?v~<_6%68Ro<4I0`>bj`zjO0} zaxGn!%(8O=d>xf0D|kr)*jnr!398@E-x> zCOFd6j$Cjlc7I5m9J@@`R3#lRWLxY_nA2z5@y_38xgS*Q=O(+sXG~EK>4uIy-Z3Z9 zH7mc;qRYmgg|YijRvhNiU&;h;FTBrVw9z#1644$KY+CF!-HkYZDJvc2iB*daZ^@9b zhrlYX#uw)`NhV<{0tKnJICEYtln=8lu>K$Nk2F38;3*J_BVqi1<5FZI@Y3biJL6`sH z`CMxjVD&*x)48eT0y)b6LooZ7wBveU1;`ivcWZGi^lpIvT?CcHQSB&H`G2@;|F`mH z=?qfAf6>J{6$-Eb|HWhS$^y`a{`V+&!W0qzi>tP0|2YT!xF1QP%Y6I2&xu4aENTKdI0 z+^Dz^h!uh6E<0TY2i%%o_rovDlV)@q)K}J&BHKX(UJ0)0tFxW8%`tA;adIo_>=*loA-j z1FK4llTS}Vm!p(s8WlxdRh+vvC&YnSge2>$)c(eKj~a#|F<7RioGq=I3{^WHVtC&W zn4T}-7LgKq)w#v7XzBXp0{&`gui9$lHVn( zf;DOHX+!A+BG39b#(>cyO0m6{SQ*9oed*l~5*s)fi#JLB=MitHpb?qPKsfma2@cLd z8kB&)4(3>u*>w|~S=o^EkQE)|#j@D^b%THP}tn zjKd!zn50FP_Ac6yxG0$sK-RCKf~X<3dUgl3mz0pQe7|QVe>%pOErZLt9zK0V>TYU= zM7zjpPAvPU9G1=xqt+mZRQ3gy;_u_0rErDA`^UvsJATS60VcTYMnrz4So_gujRkdV zP+mqTGuUEbCqskvSX>O59u7wxhZZY4d*I%4m!NEvSo0`m0utf8dl^d&OwIlpDrJhz zuff=M{JyMuWN*3EP1;FQq%OmN$7KR!GT%Hw*6wIeJc;`J854l==($r@tfs9lXB>dK zy1KfSii1FjHPv&3+R5?V_Fl5{u;KgL`LH!vCWVzB7UdIT{sk%(cu`s9yNrQi>IhM) zAm^I&W%+6LK0U$YgV!77ckEA;|H z=%YuAzYMU(%K)kru%74Q#1aR|hg&bTs@rH9^zI+B8X35Yd=%h5xW|~{b|^2yy<2cp zX*u;*rzw-3m+oofVL|xB+&ec4pg-Au9>m$lwvgH*%}WX>5HO+=4o;YrcU#4*(O#C> zl_0YhHhn7dmmP`M@>{J0E;mw5D%ra7g61M2w8YKAT{3S8=*2?&A!g(9v{Tzg1MC|x z5FdO6B=y?X7@}I;DF6J})Hq{5c%<=jBJQ)Tb-@+K`TRAd;dKQNX9n-E{#dl5m!5IQHJq)o-Ft=G;_d%1WO`Qr`>_rh8`pUjr?yn!rHDl^J_}C zCN$1_++h{&EK2g0s4-Qf2p5iio|HtuuhA+vsl#BxbtZPenmJPpcQk4!8*u(jf5^~% zZ^jB(&=QqniXgl`LqN8M6m0sQsh3y`Lr=W%C=UX69B^avx6QUAcFN;Rr7@Pd& z5;a$Z#7Etp)NFK7O@YmUnYJ__C<?$k1+!2N5;Rb+gLELOY!!DSfCAvN*EotPmpgiY&OTPRXEqs-={xE{!WRnv&2@T z?G1ErU|BU$qJe}S5Pcx%J!b(DVO`akRtHmx@udkeK2O{jGYsLX=Be~k^BPXys0wa` z>k_E?YYtWSkTOVdCZ?-N=y+!gfONp%gG6I3|GrqmmmjlsG}U!UD5uz_ipLR-7z}Z7 za#Iwdlt^kbvATYDTPVk7Qa}^}IO^n7>_plRMp{~Z6MGngde^+05KEPCD|AzJAxY#V zm+NOnK1W%YicKCK62h5mp!OoU--R~r=9`$vTO0%Y@AI9ftF19kiD4+L>tk>1w9jZs z^+M9S4>9SVK#Kp6|27Vi`vg9l=*7tUG`~Y)`6AH?V{lEd{y6}UH+fqLKy5`wJe#vU8m*1rsl=38uHtjxD=27e_T+vGO`yg~#y@XP$2? z+DjBai`7O4{T6SEg_9j;{<_kUmQ!tt0iZ+7h>)G4V&x60xY*-rd0_J%BS|~vP@>oD zk8GOXpDWl?4-F=jhqLv*>?qk{nKm}M6l)*Orrq*SBV$mGAFH;IRe-;Eut4>Ul|n3d z!~47)JznA*Ang5N@IZWIWWqz9{d@RolSv}ZRu??Olq~~dcCjP0lm~qxx4rj$UJ;xs zl85hUxRGN3-b7~ESSSsffr~-4!e1KW^O79c)?~)U$Qf5JUmD*Fb%8U(!tI@U8b}j>}2#~t|gf|b~id9nF2x^)x`WFvNqS4ES+9Z z1ierK-`A}LJrYdS>XY{eX18Yh>Mv9Xbb|pC2hQ`-Tm4~!s1Iky1NMsMs~w_KB!_tH z^{?)zUwmb%zxT#28%nONXnMGL)n#K}cSrikC?~UrYaFuDta>Ko2%>Rrvn6J4jhMG= zjJ;5&VB@K?IjT@nN5cCE`rv!ydT-}eBR6tq-d?`YXbp7ss`>Wwjwym9rnHu`Wy5y% z5}94(-_el=G4uz*@VGEM-_jSh$cy%}D7PP#>%iYx^c!Ptm-PE8+Xe~A{|^9nK#0GL za`&;nZTO@-rpuj1DBvTZcpjHtyp~*J567g>_)fpqGE3&jff-EK;nZ|>x7;iN(;UuQ zJCB(DS9$1<5AotQ8CQBoaY-TS)U)S1jp_8$PdIUHBuz-Y*U-efK79`t6_2rfM+bqp zJkEd52f1cWB7+BZ(C$#zX&0Y-tso?QB)MWKSFB%6TA-U_J>#e7Le8K5JAJ*jAAt~H zTXZU=^+kj_ce7+7g0h@x9!kg-ue zS#wsgpbR>8Zlq<*BDQ$ud}ri6OSx}VrvFh08H_8aXQ9MzH!ZKGu%e2p(roO$LE1Zq za0gW#&QaIt{WGP_;4If_I9J-q<<6WTel9wrgez{pm$}|odF6-`t9d$A{S}*uNhY@- z3$vq_qlb<&;y(FK$%%X;2Tp-1?L?W1s2GSzt>nBbFK5k)c~lEwsjR7^$kM~!mOgFv zfz2Mr>RUg_%IJM;Y95Q^ax$jNosFQ+OV+&0xnWHmq49RQhMZ@Zf*FxV+aia~0rgZZ zD!!QWZn%xB*Dau;AfM`{xzrS;6YTG2aBLD!ehs;$rf$GD(iJ5ttlfN{m(A$+IVAQczq*epVWp<#U*q z2S>N<<=Bt|b4)y$1!WZGW|5f|k5wGK%OwMKR1(?w`DDf!a5`NCO?K_BLUxi3|Kt=N zWm#u|QG&(sjstAn@FM=&cTm&)Q$F*Z2Y7vdFX~}~Me@!mDke4BN_ue-*{MlH8v}TR zl-ZK9D646psjiA-n;)0oOk!NLjKp4T`jdJn9G_7{p%}8dyO@z|!!sfBsN3M;#Nx9= z2l4VdxtQ{T9MY3xG5aUOcf93lUqU5oE-NRrV>7RAI>xBqhfhW#RU2z`JXr;$nl3Uj z60u9z;8s&KwMv;a*-8ov$j#1@eB-eMU1E$PQ%H2Ih<;J2cGoy7EtZhmHFMW96tGZx z-TPS5{|K8?R#V>lA{)ECVZ)PaeO?d7ge=O7^YL}?BLTnI5n7+03D% z$LUi~g(cHzyNu5)qNpHGbdfJUoLdFAC4WT%snnN3QZg@AKJ>`H>F zztOOD{4*k?x)~)G+`v*x3vJdcVn>c}w0lHsD(noS;#0^e4BrXOE~%t8*T%r%gB+G~ zh>9Uid|Y8(HW~S4G}Pu3HPXt?eQmg6q<^HvV2Mj1J2#&^=|ib@Ax;i=$s z;KL(nUVn(>+BK|+JIH_j__sXu+)HfOxP^V~4mWa&4VS=l5?u$h#fM^=jT?Wqa8mN?RL^GGmE(tb$l-_gsM_~UTD3gP!S z@mZ58FE1m;(Zh_5E4l*Zx&285`G389e5>_#qKl1Hrgh~6y+ z7_*jf!6ntiit;;mZek#>~?%=G9kVada_C3VA6}c->PtTn5q#%gKy(Yftw41`E+? z(jF;RoRcm@&6uJRsa?K;`h;;diJtfODY9o0|5Q$OWePp7|AJrq<|+2Oa#*>nM*LJO z2fHQ6E-E0^BEH@2)#MD>GbyXgCCWKUFr`d_&;lBkucst*l;+7;a?;f_B^M(OFD8=& zt*O}*6qd-imqKEU1;4brx=9+sOl(Rfc@ck|nUO)f#e>tOrre8YK_Bk^Hpb$XaPiV; z_U$>!go=dT#4j3U92oBs!nO_P|1lDqmPch>ql|6k#D*M9g`!DMlu^bfdR1eEj0N%8B|@C@$r68_DPx;!%pn1q za`&X$)~bd>^n=wwv+@c0SDtwb(2)awuE%@i`6(HbxV)K z;Bn!ca^cNdz_lw2q+WJ9Hy^+iSH2 z5;OCts-Mrinqr~?lQ<1AWF&~aN#1Ilx1<(Qlq@55d=AC=xnyT%l4NmecmG2oZ$fSb zrCDb2J$u==|0takUTK?fk?CKF zKjL?fy};J?F-#Jt#EMVvby`S}Hk|g!nc0b$98=-fn}{N-w48LCnG|V*T&Z_btQEib zO;5;5LaOK@Jymp(D!Ry(J`j!3=MsAqT}a_k@yeeUlP_%-wm0$hTE1Zz62*2(!|`8w zdK&ReG9qp-F{gss>IxbcE+xg?Ot)8jdrAyJuM>wSr1^^Mj5s_4Z5%#$l#Y>!@J$F! z`C*$ZC{+1oke(KYamtBH`iRjcF>-z(Y0*)ns`_M$Ek>L1ImU2I#k1gsySTP~oTq>B zJ%01ZD{S2GI-3vmXt7~*Mk!TgMKmlvk32&cy)HXxNn#g4xAA4h0-^`Uh zk|cd3sHUXMBNxtYw*;b+n$A|;vdCzK3 z(zdpkEGp~E@gIGZ-~IY`ynM(--on+?rv>Rfa*RQ-*Tk%Rktv@X(M4KnECz>Dd&NvV zv^KVRtw~hW){`{0k5?tG*OV9vV2;b8xJ<@=viKU?KQUS z?_x~)UQ}ukG)q$XPNitp2AP5l*^A%xp@AEa*m9lZO> zRVCdO8;=ZPwpxiz&LmfYtm?W7O44J5aCsm$nkZ8UuMA*5aqP-brZ=pm-gcY~ zJB~0o;gOE3?s!yj<7fVj^%-W$*R5g6{3R@&TZ*B16T1eyM8zgCZ|(J5b>$T-Zm6Q6 zx{NH#Alo+V5+@p*3!Z|EjSW9knknZ+g9I+LwyZQz$ofj{GMW;CXa;|#c zovh9e(zU0VfrzrsXn1m5-3|4K^UqsxGY#&Sd1zz17?gTSAWkB8DYt&&qpZ%hQ+>gO zENz-gv5>gI-T|Vj&f~I+E}*GG3`T;n!tz?0iW8X}?xnqN3~ORGD=)v5i_Txpg2sAQ zEUARfHd+S8B(O?g?)Cr5T}y0O>aXJJE!V$yEv{F7z|&JJxv{#JXEt_) ziKZG1WFU#lD4@Em0B?j4nv4>}#ididWF41Zbq&|7timjv?9lOkaZ+js0kaHx3og8x zOV+Gl;k>!5Si69PwqrE+O8}3R+`9GL@xfbIP$_{z(|pR)O^h7hPV1;y2&Y!K4jm^T z4&7@gVD0r6lhFGdZ}eo)nCs=BkQo(p+JrpSE?viES6nSVtVVoEDcSZ(4(-@OOWzb3 zRr9#$s&{a~@&z=_siC$Ynvs_MY~9@gbFSvSmq|aLvyi0=mau5~I@Z>~VF~62Cw$u7 z#;e}-LC&9FMPp+FiyCto+_RrH3H0m`08VxJf zbHz26vUFYpbLTdaXX(?@#+*SCs#dZhZHSk)9%NJv0DcJJqS{yIK+%Vi?xTo$dpmc^Ng)LgKJ)r)Hg9Nk2xIiJNB-N5yiUBIfE zG)B6bInp&T6O^j_O^G=|)+&jaIv##P==I{YRdD59cXCO=6fH;F7@G28seA|j{>k+i z4{YSnfLj8eGkR5w(Ww-Q|4tGzG156Af%O<;{&Y&pQ}J{ksXxzy6mP*NK1)`Qp<-o`uDGzhVhKrJJO(wZig6h+Y~q_Vlw z!i69H5|`yPv+s})4MP&eYj5NI%i=h=t(h?y@a@_4EL~cOp=~Q0Hn-tadI$<35WiVj zosF+^HwTaP2PFSwK|FI*!DkKWPOOR8&+*pqz=#H6{LE0(rqIOOrbIP(XjT~Zc$0QcJjH%~e&6QVQ#ge(zEMM6` znsR7+bFJo^mX^unm$JJ0_>Se?p&FKCu^qVqSu;xlGy=1-g%^DhO@-dF~ z)8n*Kw(N4QShJYQ0?|cQE+ti>i$XhHLbf`3heKZ<}O*wn$iij zZEs;RWTSNLd%5GPRjgXQii*$y9^Tr8)ojw5NcFqw)t7Vg5#90K3PA>1l7L-)SH^sf^WEUB~5@oF}Bd zmPP9pQ{))pc$)<2zHF}f?3cN$Aco2{D@A_`nOl`h;P_sSIg)9-@OrMj^gQO*moRtL zc`O!k67TG$Rr;pe97p}~^;~?}FIYgHZJd2a zI~aHQFiK1sn_AAQ%dcepg)5ma{$hcYn=ZE6);)qDxsGe@`7rBBlf|x9N>IO?MV0B| zH+OMxz)ty+l~m_=>Dni;)qoR^$mtdTpr)5+F1wj`U9pOqq8!rFGbkvlp{^*6z*q+d zIwyo|ikb%I=Y%*YeQ$We zO}r4`OK-W03m4C!ac%?478Wyk;Ghs9m)O%;3`$&|H9DQL`bzBM2iSX{mCjKciP^;z zCpqb8k^U7`%IYhxW}U>9^JFYuu&j=h!9MX(LrjUU*Iw&N$fABu1Bv582=|2vp?Z2~ zFI&OoSBTsaN8eCyV#D?W^p3eDo)vlI9BXzJ%dUPm?_1X-gtCtEOgj^O$LTj$vi_PY zSd!zTqq&6vV>a{GUc==}vYBe{$DCVBS%Hzq(S__4KkiDsH$e(@+OL+0`whiW!REL{hDjJX3ZQb z8kVqh$!b>3DfxzKtbdATz=UltZXO|7Mev)Q5m&Or6h{e?rrPUoVI!j zmEE|GhUgBq>^rUvo@&~J*(L+u6>F)CZR5euf0pmRa1?vx8dhZV@#Gurl$?JncU)Y~ z)}McdFaG2KHVnp4n{N|Y_A_KJ=HhEFC;H%@`Q{IQ#nx^+a~BJ#@OE)v-#(7^c*v|@ zKvkjzdtMV&2|c`W|ATDnS1)j%Vd~CoC<6%wC|-3lbA7M#__p52<8BEOl1f-|>0<0% zFY$}7e~;(8OcYm?VjelnD=)mn{#G$CvxUyB5A&0s{ER<6vxQ?lV?v58G~M`NuFLP` zcR&9zzrX)6x{@#FT^Gi%ZR0^Ef+q5o2zgpoz|`hn@wqSD$MJ+lE?Anvc-t67Ldb7k zQ%_M&Cg~FN6xY^JSsu^$J_$;VN#vFmi(`3~Rt*&o>9YT%~Js~KoMNV^O|mb&YB z?*)@Q^`qC>6Dr|`D@tg7`VG3(;H2qFbdp{`)ht42mccFLanOBmGncYeC#vdn}>C^_dN99Zr!!DxZ;k2k06LkX5^a%hop0^Xzx| z>Q5iw^$s6dY0*r!9Hq;fF2U^8A(RF=4;Lb1nlowy$hPm-BZkRK`voALjSJlMIrL_z{ z{{z1KU%%z~S2wb^RR$+d5PLx#=dWlWbmT>T@snTj;G>W8`ra-^gbb>|FHs2L>S7x` zqi$joQbU2{w1fvEqt#WH|N<8BS)+)$6dm@oioh zE?{nLBD?N?mhnvSQ~g`mwzr)_+h1cxPk^-41V%d!a_A&NC;_4jChCs$3?Wo^N}UeK zlEJ&$PWzE&+WWm!U-@p$FUgK~!bDn0 z3cj9cLKq?{`wWCIy`D9VF>K%Jl)9L3C8y)r+fBmUxfl-ok^3HalC454vNMv|{fE!+ zZ{L4_r#I}TYs5v!A4By8>&bJfdUrDsiXp9X9`ln&*}C}%<3Tf7(ngD<%=Ud7+1};Q z-mg;c#mA%+QZu)LB*PdEe=4=abct-i-1)4iHq(5dnQjT%YOlGSHI66w z_Os3O?|YT!Uw#c^?KLF6@h`mhOMj64*V!$;+-i%bZslcMP#4eZzy1n8eqtY{tU1gn ziKnlv1xMN()~_sQWb32+^k={2(I=kdjRXCRD>A4-lq^0pWSSzi;$j-bE;sDz2@mq; z9M}YMf|@d2w&-H=ojYVq@6+DVQ)>idmew(UNddzf@8@Sf{u6s#nIcmPea8;4^_Azf zsmd{SD~F%|8UOW@-}2B4J7^ce=l7af{GQKpQ`S+w|K0D&*!D1888`ExOQU2=+=oNP z&739Ial^_od^>*4XFmT2T4Lsi?PuZXbxJUND_1VBl3+NS?7TwC=Twjr2gA+nOr_RP zn(XAzD}Un8_dm`7zYw{#WsDs@O#7&ZtaW$u(ZwDf{jaa^-QPdT(=Tllk~yUwqEfi@ zTHbTTTn_*Fi+trre`M!WEjL^>4@c{6j<`#>WJNq%-k7AJMrsw}38i^>+IJ8v zS;3ipipGQ4O^3 zqSa8wd6%pt>hL4{?YdpOc%V9w?1sY&hQiLZZ&Uy2Vm z7c8VUevmDPC&{mGqMy-|f!W?5)!?ZjSnAvc^~MdvHO<%d82HJeAv zxnf-vO`LZ&cE^P-#*Hd&pgMb76*o)m)_ma@yf1N63dq`^4LfD z=r{@8xkuafvUSHk#w-~mhK4zK^f=>FV&tX_mRx&1%ab~Jfj6}#vfm)Jd;l)`G#{Kt9yp`Y-;YsZNy znkW7un(kd&c>RSZIp9bj)7Z~5fA}Fk`t^N0_WA)v)vTI83>V(}b*}I}$|t|}6P|qT z6OAnr?9P!I_WQO`UaA2I$ORi?2y@mUJ z_CtRCz%v|jR&vp06*vwb67r~KsL9wS#JuhlLTEIZ@edwj>kE&tQGCP7yZ{@w?G{4l z(FmcM#ZY|tz1&mP!B4*U1%C42v%Iu<5AA~(sB*&!a z7-G~3lDT$=L$>g|UFD2q@U~P^RvgdB#1z@N#mtpphT#q-3(8m!XTc=rnSxGwcRtF0 z{_Hiz@GvTa&yM2*3?AFTeP6zlTR!+5o;`ek*MIwMK7RY1eCS_($jiMFtV|5hyn7b| zwhHPR8ns8re)oj-Ai-*hp&~nli6fiX&@#Z31VEaBi%dadE;+dcBI7uws5I?PbewC1 z!K8HNq$Uy@v{JRak@$T(*e(Q_?QgIxYA(y`>}Qw{er9N@i2R<0LE33#*Rw+6qsS;} zph0vI@{DMArPKu>pPS*q9wu`ZaMj!dQYWNmva1C{c^z}DL0pb;hQ;@0 zS1e}j+&NU2=8_Pth6Mvb=NP^207*GjET21%g>@yQCq-+%KtWl%F?%l8+;9u;dC%>< z>y{f>R$`X^W5he$$-a$m&=)_C1@oG;KJS_wl3e9lqXo<4F1G9%qFD&Y)Zxu+><%xS zk(ih&^$YtY<M$_ja^bgHNw(Usssd%3*0VOQY4#H!V6LaCJchoZ3G(vGnKyqv!R}^8i)&dPr|K;K zg}jU&c$lyJ=L?J){EQ#n%T5Ve+V*eYmtXoQ_kQJ9JiF;N9{J&y`N+FJB&7a9c8*Lj z-nox`NBRgQS5Yszh_gz0J|X%duh|^S+>$JMH$TRU9qI{bI7U%+7BFU$m0OP0JcQqn zN|W@F1n)Qlaf#HWr;w15D1mhd&)%K%XD*~Js*fXsVpB?1OD1XQdEz&wu*FHhSt0pI zJxNHSBq@$qgOon4gXwnG%8i(rn#MZ(2H%yS{=m4KP|p$RiwEhNiWr`{M!Pn=tDsU$ z<|vBNlL+=7WYd8bhWwWB>lfiu{z5447P(gHX|&oI+4B&8e&{I<3`^Tij52ADCOgW8 zB^1T{+A{h#J;X~L>M4IjK9!67Rjb9f?|g=5UVek-P8WTLIv5PuMMu%t%_sM#|4}G8 zlx|a!NR$}EsM=|^Y|>x+$psV@SsC2Fo93e~Y<4Rn8(wA0XbR=!3B=meSmI;fV?W}h zE}u5laK!BK!UCtom68{;agoIkv0!{hShHlLEBx-8skm#Re zBq3GEWdiZoSU9JOiB0$M_^~N`l9%QarW;qYiLifAzE&lK{m0A+nvH3_T-8b2f&`QE z$jb`Sd+->&-A*|cVqo)j4*60kF0^B}8S#wvvi-^5v9VuG?{+ij^AewsK#Ivi@79O- z+8001b3-Mpz5ZYM(kE_b?TRWAt?HdtRi=_bD?Kc)vPaoej5g4`k0aeK;)~}~SyqHu zVphM`ql_jjzY=}=w^mnmKw{yj1=LprIVSQ}*VNHaSBJCnDDH|mEQu2R%UNfGivA5k zVw18tebMHHsxkYIDu)76I48)Rtz zOZ@md|H0G8V`y4;H=p^~9jrgUp0pTSIFE>qH7#p8R(V4(DvqRz5)wy*U~e47Vly*w z_$Y_koy6s5lMy55`y90IdW8oc+emwFKYgu-In>s}Sg44Cyd+#=ujyHZ)YsKum>R*G zl}}w<6gJ8KT&g%5PK+|5No~2*nQYWwsf_A)7Ar=xNqaBCESpsruzIOqGYEC2IyG{c z%Ht$SG=-Q5zdswkKwE+}Du&op$$Mmi$w@IzNwQj$gESFRdB;YRl2**(i?8P$x7@<5 zS1zHz>SuV;fnRDH^amJkYoTLkl!;Lpc)Fw$3g38ZI8jUOw^sMau0VBLlafJ`S9O(H zRSH)@gF2=iSJzA9+e|SO&AWihuD_X^Mdn-1&tdGyFwPk1Bqz7%LpC}hbMckq!9y^q^&m3%K*L2YilWT~|Dg1HOEN{qR*auBA z7%y04z}=TdPNav=)s6+sB-dWX`|f!^cijF?Zn^m;Zdy@J zv^XK<7=z9cw*T>){A>fvf6pD?D<{>+CF1wize&D@ad%--?678BFQ6ZiG z@MC=D6CdJ^J8tLB5C03l-s(~74`4|sWA%+6<^O&Bc5c4)o!oxqc{F6lqTW4JJuV!m zs{S95U-Hv>PNWlt`(wDbs=tv`4cfkzKAjeU_#9K~KK2gAQBaab=7Qza1UB&EwkcfV zBWAh2GeZ=rp5zX7Hq+}gk&=}|l0||VNeY)T%SX&ETmFWG@v0-x`9YR2R{0`hI z_LwR4#4m*ta;va7EL*r<;hmXt<%gQVqFxd3dR>u&VHnL8JVQr$=BJksqq;8JTPrA%b#U%`z^# z`8~YnmaAA(mqlPg#yZi4t9vI;{PA)2cr#dh&24=6?ss$fs(O-S44Dn}&BO^c-bujf znyK%bK+{3E-IX#<=t)6zsM(E-yW!n1v{RHG<%b-L)F^zd+Jvmyuv5J7BCdLej6b*B z#yc;}q;F3j&V)$*GG6!xhv}1kXE9IFw)X*k`kxPS$Sr+S`kGqJ&?I(hGFl{XQ|HLY zCWB&hb`zK0{9f+5>vnE?=WX1!Za#U^UsY=xjhQ4Sn#B$rvZvl(4a+3W86MlB>|_c1;8J!4di;NDA4dhC{=2dUuLV_0q9-H~j%89OinN^_8YRO3PtKQTMsi34GoXdFEXj65JGI{=l6b@N87@$OQ>@-Ikn#> zHls0-n3y=}t4{nvO4PYC=lumx*965+S>xic%DC^)mev=kB(5+^prsKdK{$UE6J(Q; zEaALoQgkkQoGsrpBm?D33?}(&mwY5__j{!8DqU-p`dAL5=_e3AclwBu zMoSh#Zdhw#X~>Qe%MXH|oEcvMqL^`?m7yuYN>g#}D(B z?TOs}i95NdECusSfto;(Yr>ns97}Hf1>ADyJ$&H(@8-4}uHvHkLSF19v56Dcg{u;| zP90SC5+6g1A&%-b*K*^{%3s{bwTohD+tr6BMXpfioDGtXNr+N$(?wi!(|fsUQ63$y zJ;;5}Z>LYZmQC8*A5^c8C=tY#l`cFsqM}usDY-N$)SolpMB2<>?L4WkQO2qyaJd{9 zRUVN|HI_ka$V@1@^ULN}1=eg^SkMX6~;L6)? z;i9Tc>|$hE8DSM`1{xl!F`y+hzM-Q{3R}GR%{h~*2kktHgGUBBELJF0P+Fd}$5F>*<9N+U2 zzx>L_<=Xdi=UpG*?mO@0$1gWCoHvj9gkcO>7jenu*K+mM*OC|NBfeoJ_0dvKDPP%y z`oOoc1*I#^E;P~9U)AnXA7!jcnVS8m^0QcV@iG$HALi?y{vdbX{r~u{mk%-J3*Q@3 zQ<`v&vHf?S=Fa!NhkO3(84QirbLWLcGGI&OsYAzX$Y2=As-PqTVpHl^vR0hm6_-;i z0YOSxHKoF@0#3J@r$}P56+>(~H5FwPrp8MD6cXrk;tj=+m}JKi6-!=`5Xzzq?e4rX zTMg1VXYSUDH?^oc>t;FDxtGHu4i5b8vl6sQpMJk=cYTP@e(e`*8?#}S{xEW66TklQ zJ>2=pukd7h6pL3Zqe{q|9}~X*gFN-~ukf*Z-pgm6>ZNhnGUk+|Yd3yWXIDX-Eh-AT z-Hu)Us(U7ZKomJei&(SB%nSeVK0a{w2l)7R?`Qk4m#EWTusz{0lxNj;rBccdYv1jY zO)XfZ4MN&kk|w@STO=itZZ=4|mZ}2EHg;_4AW8+=SIlK<%KMc-X;mSWF%zEpT5fXpE-il*~|EN*v~5W z=$C;pApSBgCI*WNR+V3pdKhE?b$k58#ieMvw8rL9RUpBRDXgbZ$R|F%`fQ2NLD5Ak+c$I(Ti(Qlm(?-;#$Gx-F7fw~iv>=fpO~a% z>>>3rWF?avbPNkAKEjSyALVA!zaYo9ys`~d&*Z{OvKJ-s*sLWh*z#3rJ}{wxw`s;OwIKWXAC zJ6CoS-V>Ox+QnZelT+tuF_74{3Vh`svr%2Ee!6ga#a7b`$xcbZ6!b;To2{d>Kx-pu z6OlztmyJrPV*ZMHq6hb}_295ZVoriOKP;?llMIi0$gOT7P2vv~>uGwNZa4)MjEcNQ z2~g7tGl&m57#MWo@+-^u-vW`u@4>xy7e{@i%)hvfyjby<;x~v+Afup&jLANFMuH^f z7myPx-pCsuK7SGQc@DadJ8($=e|n8(9Z^4KC2K!LXGZ@h0_=)B^6Y@#-6#D(;N5fwZeSEg*I@ z{ar;ZLD|_*KLb-jL^9L0#bVUWt>l7wic==&?egH&W(J;IpKuk_zmk{8p)IUsjv~s^ z#mkRv$D0TT;5wF3`BZg!p~~g*9_YinN`ok4iQe)MAz$w0BLA zQc_P{MH-IwPKGAKpR5S;2{9A1kaSBgZ@jRLBLgOq64WbDVV~jhc!^FHIsPEgX+;$0#o-bzAu0^_Yo%|k0;(M)PpcW@SPy*zy&QV^kNn4{ zKRl!3Pkj2DJaKp&kLXLg<}ZZy4&jbH?KEAmmL-jIXsD|uOFEKIG7Neq8ByQxF~yQy zQAI_%iT*=JX_o*gpoon)mc-%)7S5l~;$svX}H$q(IT;?yTCpkTv zipnZ#3R4Kl;O>YmX4&O8acN;M&))YKFYOv7W!W0meAyU!j=Ce zO%-|S!_S!s60f=$cXTu1&S25Xr9$9xC@3tWrly+8bOT+Yi;zj(VO`Hc(|+!Iz4del zE*;8eD`dsGIoOZyW5>ZRT-se!8EoQnDX1$ZKfy|J_B@u(Uqn->fwuko*w@^~sI*Uh zt&qFqbg~MHDJ#wLw4HLd5`26*Z}|D7-Y^iMqT)QjwBF;KI79&x>! z+1U=cbC%LHM+S@1M&>uvQ5rMBp&dIp&@xPP(L5F}EF!V6oXVypEGmp<;`n|x?>>ev zZ$9g4;y8L>FD*S2vj$lCYv{t^Z{n)!mJl*0NuREzwz7;&n}fCi4{3RoEIe-&^J}Z9 ztSBZc(aL!1QT85eClH%M!{Q|@XlkIYs*HkyOw5Bqxb_?o!ZbxbLr|l2DWddH+3P)Ge+5R*h$&^ zI&4BT4vr-;SN!q9rbZen3y6=Ffyx+Qa(oi6^xNtMi&(s9AqyI+$WD$WN(PvK`1;`q zmyAF#(CMW3qN}*JYLfeY^dyIe)F*(>HM|%wMW<0NI?p$Bv;EbBj2h#qUf4uYj)jix zJL&T#Qa*2y<}Vgh=Mx(nONu?j=-4<(br-TWXNp(09}*v`ZaN7Wicb|kyq>(tt-P>* z2(OUj%*r{;mmnoMI-RQGL|hZ266g-$OKjlM^X6fXPobz`8EeWjF?x=(Q3Wso37Ra4 z;*WE&j(2dRd60lAKwDI%h`CGVQIcjSHaV9$OXgD%>*m1bt?cg^!6$X@@0_Ci^6R;# zWQgB=?@5k{j?_C#s?ORCvFHNMzj!f8{%8uz^GOJe(Ka{;mU!{IE2yX`AT_f{{AUU2 zF)%jn!k$(_RG3HPUH|4PE!WAT?sa3(%>algyq=z`(D`T4w=)5IYbAHrL ze);0D@arG5pslK!QNogUX1Zb2L)1AW9b zT*cKT4xZhx2jN0OuGOldIn0%@GiqQ1n~w)5tyxM%ZLtKHMbyjqmYZl|d_qWrkT##l zmZ28ekiMQJ*OlkQX=B^i#1wJ0Yq`9{#S5GEGpZKZoADPC@>tVpxL_Si8|!G4@v$^9 zghSOcI7Zj-nDjr%x4eOdoP2V!^C(hdwP8x~acV2fp0Rz^JA@Joty@zg!K%a`#q}&) zw3;PFZM^W%)4bg5B7e>b<`xAww(WIVhQt|7C*?dC`P1(q;sAo=n5lJy|6iFXjSdq!l;oZEt{}>Zq)gRAgb^qN^!Tu2bs3K~Y zt!I9!#2UHf)X$qsWljtehqlu?mdTu@^C+uICm}hXOWt`Yx&7OC=+Vt|PR6s~%1cN% z{upl@brH0S�SAg|U+@yM{@tnL|OsB**vdrBi%XUZwc^WIt^O_R-w$A-{4Vm9^z! zGx^%*1?GsoO^D4*c}7K-W{Q@d$2@Daj6r2oN^Fy59Heb1{C#VG&_qmD6)RRWkcjBI zD3y>?u5(3EGDl+QrQ#dKhZbihVz-(k)^##EG=S4D=-2cRG zdR=~P)mw973CmW`Bi)ifZb7;b!$}4l7E+4KDJe`MF(!+Ws+F9#ppYnc7rS@J_%-Rm z6^s#oJD2K$d@?f&sLZx9G&(8$vIB>=iuG44!y27JrIcM;T}es2hhx1H8lgNRgz#8n zGO28=C(+x&(PMo$rSE7rX4NG^puFVMu%w3E!ffrv?wU)NU_H8#r(ZtIgei@>6)RXW zf1dc(T5=>_R__LyeB*Qv`N^)H&l2(XO$(N=xGV{udVf~9O2@z$Zr>OVV=8q^ms4$x zA-z)M&5jo)H!MC`xQmcYw;@T!h(-#{1HAUkCR)_{)wW~`s^_v~@qFrQCEl;7&=$tZ z7}~{C&+VaW!Yw4!ApJg@m6t3dooMpPOURFQ(A+shz+oV{LVWhhRLu5#&bxRS#kNsi zfBXdwO^Q9$HcA{b&YlC!sP7Ypd4p_*F(G|v%w4oZ+ANQ}0`bXWZ))}90kuM{Uq*|w zsQGM&EGo0=^SkzT2q9ced4hq7fo{eE(WFNQ=?0{SMR9+m9imm}(i!wWVwAB2#Y8o_zbTf z?Pl0Hg78ODw+!^+pz_p$ zHQD6aCfIkho!G=I90z4^>>R^jl%UZjn{${+qVNtLqr;WXg7cSCX!kQR*pJH)O|sQR zS7$Gih7@Y%EtJ7Kj;WCWZO}`P3DVcsCvDNe;kH5IB&aRS&nG=?l1=wLNAo}@hYpEd z2mzlXLG+w_(NSg&Sut)7z4{OjzH%IMwB?NLrsM4k^`s&rBMXD{?QMrznDAS$TV#;% zIuQQA)NmWSn>!dBH;`3WL{_Me%^Tie``#A1)yjYa{qzh@VNWlhB25C~{hN64js0}B zAE&K*2#-+)9oLWyK*t%L^q%BM)yl&?dxUtU)v>5l`c`@dnW+gFCt8J&I>;!fVg9lO zlx3x9%e8xY_Ve;fZ_wQ1A~CmwS|MfHGUS=rqz2k~{^^(4cYHAX$qI86q0x5sxAtl8 zvV>s}r>{O7+$8~|ovO-u^7C!hn41 zJ$8&Sa}IMB%_Bd`!{E>e0dovVW(Te9GQg^SyKoV;670K%`xy4x$c{HM+}A~Wf0%UO zaF9IjVrnK{;*Xp5iH{D59?sq?HEJZj$}GNWytkd!wtmD@%781uumq#c`&w|=bEuxb zfYO8zg99=Un&Zffa?;Y)&8Ra(Q1oy>0ss|^Yk5k3YBs{)@qIGzdI^jVi*Fgjl3PYu zkpxCD9*(!QiBI-0(kFF~j;BQYTeRmOPyGIMI>x$1jzI}pLii-8O%VTAo@8R6xtTtR z;Z=|;akdP?LI%YTW@Y7)VI5}kQ%~^RwpOM@25s=2bdb96GOCB3;y0U*2r-h8C87#- zhk3mD2qVd5REuq7CPm{JInJKrqhgao3`*N%l~q!nt3J~ZE5Y9otsNsm@Qaxa^`4mWo*BqV9%_#O_ABvCe}n7kY{w%KHi zKf;lIpZx9N_`oEIr4qE~r<10}wkQXOTG}MYma%)HjeRZM;gzpdd#jt+elNZ1J)9$* z^iTQ8kf5?WHh64+2*OmdWsm?#Uq`(Ebp7q?2x;hTBV z{=WsP9fLj}od>pXWHg$5iFwqA>5~IP?0@}fHukw0Z#zzpCz^t)O3HHcu?=qE=RbIm zJp&Gm77NxW7;N4n@sWxXP4b_gslIla)go6CpE{&H+B?J!yz14c5T4OKI>at|r7x(3 zOX6~hD9@L;B{Pd0yOSfWof543adqrqduKFdb4$s~mRKt-73=5$cC<;kVtYZi#E5Mj zc(W?0QmgseC0>%avTNK*dE){aD)TTo1{jpSo*ZkzIVOE|U_gAjw5c(k{Nf@CGSl(4 zzsm1_{~RsSk5pi8G`Q(Ic8ILKRa6{Z)UNwQfFQwX9D=*M2X}XOcXvo|Z`>`o6Wk$a z;~m^x8VK$*&}{bkZ_adw~{UT?vcde+nLZabn$j62pX|e zP)K!E{$lDFkv9fIg?6)HQ|I6%vmMKn=X67#7!BrS68fa|J=pl!QUcb{^%n+lj|0qW zyLb;L%gR*EqT)C)89yWyYwlseU)@>ZH#Oeeu%cd=&*h7w@P7)ck;T^LVXglq_EPki zR6~?pet!iq7U}N|+CfZ06{?9rZh33+OAF``V<95T0#5#&h8r5Eswk#m}r}--3S&@>qg2!zL{x|mOi?RxKYgxwO zwWyYA(3mitdf*lnK@Kkhm*Q}F2-jVO7ThnlB){>al9A)fd+v*4q3YM~QR zRQHL{c-ExHQPlT14%#3orinTSAItwc{|VMAdyM!fa_n&`tF>5*pL8;^q|B?H1wD~E~JgHo1zvh}=Uz-qm-#V175x*H0~2@FsA zLo9GZ%Cw|7;dHc~TCZ{^7a77NYC+@Z^W#Ee1+fOIv*3l2sk!G`)mwtnC(S!WCiVBs z+iM5mmEfIX(2W|0Imyfz-EJQI@thoP(4AAt6l1U969O;}U&_@QP}u=3J9aSqvcFC{ z6M2n8(#OWQ<*^38@Z^N}*Fg+cdOmA(((?@nZMECi%Q2{Cg0P&G_u^Dsb4Q`E>zAgh z)!mwh$7siUAC1<%ykI7{@#A%SpVV7%acN)|I!N7_Iy$7ds^5iPQdPyz-?shkwsTOI zKL(FddYQIKo1(P4LccB#OO-vRlV2Kffu%ZBZ6^{%b_g0sgucUshx=CZEJiL`;8&IltLglyFN0QItcK4`vTv@< z`vfQ4YhE1E`{!nbR5;b?pXmt=_^I$~gmKCR0EtrAb4h*)kQZMEBiZ$1A3&OkG&*(% z&CHuJ+s+992VXB|FM`KLl&(yRB54=A$pf!~shVM>X1%su=z&qSc5Fb=)fFaa<}rd9 z$WE?)HuO6Fyb%Z5on1!uU^XaSY&5uV^$=?eaes^`{*-YioI_PrWwdgpt z(vX^&bCEe$8Ldt0iO|g3yqU=ADk4UOa(+iCX=SF|@G_vKFeOo`;I<=WSE|817JxAR zSOU#|oXvvLZqZydEm~{7VffCM8#hCv;;WbEt$%+j54%Ih7au@3l!%R=w9~&c0TuTO zRI>w@s~SOx1brpF!ff-$!z!u4n(Ba-@{ze${6GHu{Z63&FcdJHoG0 z)k6bG!YrPbbRvM`ZhGfZ8Vi>>alw|IFYkYSBazp1MKo04X2l9u zVKZl%W=6KKN4Ns&oD=ht!`Sx{7@Tceudhe3wjIuO!Y%!%eK?!jvbI^9D5co{dDDA zaPYTXJ?iG|szEfqc?6qY+j#mQ)&yb>yqe7yeZkz$tF)5CWlMv&ubfCu>Kn!$96Ue5 zE{scte{Hh7Ap8@v;99xSd7S|^SRIK5T{bNp`^Y<}yfZG*&9toa0kO>f2n_NFKCrev zbg>F2REb&7BOiTnK666bgPRVM4Y)~$=%R-^T%X4)ZCfpl=y{abVDfhqYL9rk?Hu+0 za4JD-cv7*%UHBtG6Bi5(?@@~Km%(pv6$^(bDQ6BrmJDZhI7mr1Zvliyk6Q?q8e}5s z=7G&^By(j)9Sh{_oejr-$yBCwri_}*ka&+*`@)yFPfG$PC284n_6iV_=!&8L1K#xM z5?8Feu~jddp9ftwF9lPFX@5sm4n|V8=NFj2r6>T`AB!pOsLl<;o(s#6o?7U1PJ~1P zEf%kUq1laPMl`DG#|zj!qo(f=PaBoj!3%BmiG|zeONcuRzbo2LtU?*}e>k0Dsq@c( z6D+)w*T~>rGG+h1zeFT|w@_AT7|A;yFQ`J1Xf}0c_uPr!bSfV57yR@1@#lZNqe<&? zFiLwkYBtwitk0?c|3ZAanx(0VeYO(*YyVeRjPHhQNF~vPmGee*J`1Q}XGS0LhTP`BzTg7ZO;c*@?$X-x_ESvMReY~ZJo78Mej65HCRxYym zY}NTC!{5rV0?1;|u9#6>+QVg-o9nD|h}HS`{Q;ooVCoCy{|U$Ny|#X%hzMC^0kXK2gDsZDYDmJACl$*qdT3-3_7G3c)DrEeq!~i76Jm<6pgFL zh!X7w{j-^^gv0z}m?@2G*KM`CM>jDJ=}kwpJ}X zICS!6h@j_+;&QM{U+1;D*RJaZ!g75$3}v!7u0ppB*!w&UUs%Ga>m8Cd)ID7rMc$A- zFl1wa+YEHat21{AcT!ZtD>$Lf~ zkyiJym#xxR_nkg%+;L{|E@x5PxuxC?=IQ);Igu4+B@&2cubn!tChku2Xj=IwHnX=D z;Y&F0l_}Ku4OjK*T^%-LiuplIlqDg_R7#4-M-fmngIH2ViEhpj`|+iHL<*lI|IY!g zwS58=lTdgVp8dXSaqLb)&`6J6mR6;Y2NK^qh*VN4lq?FwH*Nx9RjSk&wV`3-N^6$r zy4MU6dtVIT@!kEt;4w)IQzhjS02S4L0O^u!b;e5QonmR2n4*_yTllrU6xfIS+B7YD zA%Ek$Ba>^UOwLIWyPd?d3v^R(IeNV zbB8I@W%K3F-&$avk|S$IMrCYLCxwsFk81n)YNwyszNBLf{Q!}uyixeqO%!^xJ$z@UW|AG^Ipl3RXJ1g zO0aS1qSjMBhVc)=VpIZM;(<8Hb?km zZZ??8zN$7l;YqHoi9?3%GUwSEiGd$0)s*K0Y5$5fg&H5vy1WMTmsnw~o~O&gwkFal zU4j=G+z`4&i{I6jTF;iSDofF+Oc6aHLPCk{NxY}+GRGtJuS9Jat5Pz1^YcGGCLUmc z7a?z@rkJ2=m8yx(tv_%)8!jdSj!6ZmX#l7#FT{G^?NZV$uJ-N{XH|xLR8#p6b8G)b z%5$@2Pkp6gsLea7475+5R+QjB_P;|gLQPp?g>dy#a!qjgA`oL3;X9x4FbM(da&NrD zMwHQvoYE)O71cRGmFnMD{>vF9AC#R8V;qSXR`%G#;FCnrB9g`Ol1b|NZ}8o-LvLIN z1trT^X(74p7NjzUnC~L5`r)g3X`C8|a7flwpBifb&d-hDg@k928}3}k$YXsRVp3z{ z(u6L~a(G3|xG`KM%-zN=~t}}0@NlHqRh`R+gLPWRFH;Nz> zq)Q*SE{7u>YY`` z`tw@}bZad4g5u-xZFIU{QW>W`*lD5EB17O<#zw5+{0Yz0f`=%^{Z8Se@G*kOIV%3r z_hsF=3 za;oLA?fLD1HWnr8(NkDYNI7@_tb;J>F&*kHAge3AadK8g)u0=E>HmTYHv?r82R#=M4c-aOQ zzdX7iqj$lAjXJ0|R(R$nkvi6*GDSUw;-r&;JQg)6Jh|b>PED?{tomf+yUQd+;}P)W z#F{eWElb5<95aXUo}7&yc}LBB@Y4Wkn7piKu>rkedup@v{G81-+h6iV^qiVi^JZzj zO2s|F0U;^);}jUaX5(-EqQ)rodu4}cuz26-z#cL>c30I3Wr; z67!{gk^qucwJ)R7KA*+BlQ#Z6^Y?J+xM#Szy||Ra)Q{yG<_3tF|K$B=gMl4vWA+OE zuV}Md98ua=R9DJlbr#9Hrxo-JPQ2gNT~to6ll^qUwXMo%zJRnmF}Dr@2^*EG6p(B) zSy}lsHfJoVq=^`3LYwmv<10C;SUg<50omeiwd?Wrvv(;wjiqfTeWS{{(HME*an_<>5F4!4%WnoSe(yzp<#I}k>lsM#cL7ENG0vT^jIy!-BAX(+Yw%&_-tzwQ9mz{+ z`ErfT(*H289AD$fksHKM@|vw0Om*b|*>Rs#6aF#pcGL+LZd&H4^Lun6aaVWQAY6_qTfeL0Q>V4N7UkVs)p<@S~tsa~(U0QO-Y%;TLu$l$B>*e;uRyyz*zKb|}_=2oUL zv`qz@5f45m+R9CB!4fE)9^*a~TahmR1)tFOzTxInxD4CDQ(*E9eG0yoZGLMwXuUi7X@~OU)CLm3Js;#$a%v`glsYTUn@1CL8Hz-lLBYa51fkXE_ ze4RlyP&HTF<&=`;W$jb9Ya?+zIxyxb!*vd)Nj9aB1@qkOf&+a0;(R~LjFhI*9z|GZ zEN_^P6^qwbSA223?+AAP!zAjjz{bFBJcctd;S#0VIOK6TqI|xy(qoN>35Q%(zZd+{ zCQpZvT$ptFC+PfnPTyBq!m_bkt>sp)*Y}R|lss1TLAO=p4uz%9Gc#WY*OEiqeYg~v zP7ye0b`IHY0^h7p2-p%O{g~k@&<}c3v%)R4`^1RNJC5}RVQ#JXriEf)^{V+Y%!8X) z(sSbw7Euen`om(hQ}cOl9OdXQ8=R>~@m13kw5`rm*OERWF|oP#eZ;p|+Na(*O2q(` zL)&1w};c~YXyzZ6Qyh7e-`vqJ6mRD+B;optPgMep! z!U{PcZaINji8C7Tr4M2GAjM=jS*|6nN2IftMEbu;woj+QFRCQIFGBn^Vyl>to7xMb zsqS5iI5O9fye^*?5U^4IY0p-6eAKpW}1WxUC zY?5QBNyF$gMu9(RNP;6ddQ}4uIohuXwHuqMKiNxsscHFH4ujNouX26=?ywpuTEUXO z&#q;h;0uF0eN6XUYWVEN(=ld7CNDjjDK*wJtSs^w1 z0$Y009Slkq7}$L0+ev+aQ9UrWmqnBlZDTO0k*0i{u?5B&sP38cumSh}FVl<;tuNx% zYYIbFQqH$~gSs^+3Gnq1@jh0Zn-b9IvTAv4#?Q^~2$Ql2HC!amI^md5^NG(O|&~EB1_j#!g8YX-lBuB<#v(&x{ zhPm;LnGK>~#(CuV52&6lBCwou+KtzDrFX1qBHBFNbg%Z8k~` zI%~4A5xL_>v^G2LFpShZF@r58j0e5@TGGw9I>`DjzRziqz#^qrSi+7dI=>TA^v|aS zT=?fyV&o`D7(N)1ydJ9)VZPbP(OZs1Oc}H`>!gI2U*I{fzhOHQJ6Qb5ms$wZ;M}xQ zkorZx5{F{qNqmZa5FgF&mor;|@4bm+7){~Nk{lt9+}z$Nkn;~4MK~?3>4fUl8LGzV zjzn>_hAssM;DS$`Oh(CtxxGJay=}rHQ5{hTimlD?_})Um?qa8Th8~^^mN_~CG-!l& z1Mee}>u-!}O5W_yU!KtV5Oh1lAVbZJ%e*apIj#~Ul{A67g#&2U0`nGrPfFREH#HiC2J)ymjXx3!b;@xndjdq>8ywF?tIqtanDORLQ z;&zJcv!S8_@pgY-d*0cesNr-j;bXP)G?kUYNR;glaTbxWVl>BJQ_MrXK4jX4P5HW# zN;7n5@d8`>9n!{-qaVxJB?QbJPpCAIGxKlT`YmmE4bm6xXg$T#|q!Axr}_5THq61Y9~nFAET{ zX>GY#1fN5EchW+OfIE|(0dHU)6~^w_lBYtU^|uV~-|8qjoDwhJDr8BH*BVO={HN^7 z4#pqZQD%Ohapeb|GATtlBfrx>o?0>*JoH*W>&TdR<>JEb$Tpo$(tG1+oENQNM~84F zl@D;Mg1G@_x+EPBUkQf$;CD|tU=MYs3%4jq;g1Z@y7^DWeY*$g!XuM_Tutq3+$|%y zs?Sb4f4`Nt_D*6w^vM~R)aEFQx20Btj zqXQO>DGlCeEF`vOwB+zY)}P*9!AmLi)I*dfglAi0fx(_U{&BlqlXM!4T}c-k8o;S? zCnC>=y&37@^K+bpyzg2Ia&>)vd})}@nJ7+5-FHY};V0Dc;WkM%E0=|@8I2Y6SY4g{ zoE~8i*d0b|v%J5C2|x3Ka?H(#U-xFv3Uwf$Xm?_4SP>Rzn!WuAH7^p6L-ys58`Xc& zuv}j5r*+_1vnTs8t$16?kG5k92okbNptt_<$}%^4g!?8QF5xM zPH-<*o)T!;N8YEDwexZ%XM$er-z$#HyDeOdQB})TtR%Zz8>qC>Yws99`3!Wf%X9}M9w#?0*;$na3?vabKr+ zXM5u~x{4(JGwTp=P~SfF&VZdl|9yhrbgaDADyAkhoX!Gm_G@rdfh-O z;{{lxbXxsZEGSsZu;=$W@{J;2Nf509k&5p^JzAd@=j%X#v5E{AIF?Hf@^Cl9C!y~} zqHg(%2_#V7g;lD^{2VI(`c2{N7qT6tWS|_@)z8PmfE1u%X3(#3MOkeTY-YwwbF$i$ zk$_pZ@{&Nt&H8G{^#pFM&C^x?fg$Z3a=qY__w92B#dyS6+l^y(_Cs+{&)Wl~LPLDW zgXbvRF{$PvoQgHQjkU4PdHK+@u|hq4S>Uv>&BvL&JzHGL@fq1;+(YbK`L1vERoz~v z0ZRYQJO7zy%#OCz+~5l(^2qAu(@XM`1)pW z;nq#JY z2=ryaqfozA+Rrr@nD16EL{*TRbJ*mi4yhRPW$8ZO=X`pOHs#G=fo270h6Cxn<+5Mg znd|Q*1$=}J1q6*k9+Pf-i;vY=sT76xBDoYAASWEMn4~J_B^p18GE=GF5=e0?u)w8~ zBI<>fnKJ6WG{)LgdCEC@JHURL_Vd(6mOuN=bYrC2=cyidh5~*hRo(8#7s|Q0UZzz< zM9Oo$N+Fo@`)(jKTb z;k!2t1t#wpCAv6B)}zADbW_1CI9X#EgFo`~)^hgX()e;9sW1YQGN<9rK=%npk~ckd z0x)<4m_NAh#-h-jcw_J*dXF?!_}~%Fb~U`LZ=)ne3L(z z>UO{pq!UViI5>;FnIU}F2}!UoxC+HmL7<);L3`!S^oYC+8Tt4B7H~x-!~!n*#Q(Pe zjK7!t@2CH*_j-&GL;L^8ycm##zWr~PSUv6Sk4yD$n5bB47deQ5!UE8M9duOoGNTb8 z*iCGdj6_e^8aNXi2_`*@-GU?ELI2QUbTp7x-up+T5edFz`UGxc5A;7BBgrq~VJ@`a zgx6Vuu5PY&$1mRL9am)6fiKGz68nCzhK33eRGa!8m_t+rt``F0XK|a0ho!4uQD2mA zZ)^T=I{K*wBdDY}qcPDeuSRwR2muVJzFBdp-YZjB& z`JF`=MSYwIjGGhyxg}RHVT>5p2FnnO1-!_2wss74DqUN@UPSb zF$$}V*u@R8{mXW~Dd(B`<9&ic99kSEqWDA_Qo)>0T7bKH>LLSonF9KUi-rtfjDipA zLd`chkAEY5+k4qv&1RW)aIy>iG*X$SHVuc*yq*=m`k(rG5nOKfqu>S_hxRjC(W;_Dt6U@LnS!&-Q5$ z@Nh=Ks(ytsBAB`16LGWW7~cr^#6g&1-^|Wya&AlXA~QU9ohYQIoY$w-`6UcZlrm~7 z9TXz(d?*m?ftAB8S76*2&2WOn>)D!h{;L7#GCDq^BRf^lKTvuQM--H{*OSf?@Vz4B z=?5QRsTr=OPTq3g0xNG!4jHdw}0W7zleYjuWN&gsFQ z$`1yZzqc;mNoG?S&K83ao;60Q;zeD+ghitO(lskGN^?{zqdSCv8?-)Z{@&XqlN%$WG5O+UpQXe041STZhTQ6s6+us$O~2LxtOH(xZ3_hK+0Dd$ z&G_vliZd<4!j$*vQJ4}wCQ5i1P@Sc&QjCa)v(A=`w9!xVFkr@Rj-#6+%_Io=YzC*Ol zH*(cZ2Wj|L4`0QSow)e0bF}`9=)-bX4tq}RZcVuZBmAm<{PsXxnp7^c-E!57?9Nv1 zvnl+@Z_b$2V*k`5(jD^z$30Vz8X@f9q97&_Qn!3-wrF(cc|sgdj3oiJ_Z9Fg{&ulI`O-qx*k58cKJw-9u z`Q+T*TNrLQpecOdF?NAM|83r;cE*fKm```~d~V(EnRwk394L5|L(F*($7(FmUkJ}8 zyx6Q(28zA%+YdT#zfpQe7dYjwZd4!V%sBKXZBw>Y#MPwYOsB#fY(zv-8$5Y=GfZP8^$`D0IfJEsS$btmyJVJ?+ zox4?1$493aifz&`oS3aHA=-*89j7QDz3?w!6DXx~`jETz3~=Wsg)HK(hJUXvHuEtv z+{eL9CUEZ8)S9S)s*z8D_-2-+RR|^E<5K=r6L2KBJLXXW-QiVE>aHtqruJ;p$L=&g zzAuKeoP1RpuHP~7Zn+BfeZ-LiH~)fGqG(f-*oKmfaw95Vzp-q+!_J^Ugk{sr;R0A& zeG@MaehT*<{VPo%hpKUGVpsG`b&KYSy~Z6Th{VzPcK3w2c%}sERum|843h0@IaC-u zevw9|*W8*YxCs=1C2`xYh^PSeRNUrID3=Jq&Wm3vOJold%k%cuTHUBM{&Z7u4S}*- zxP$Ob8<&rSdc$chVBW2sATv__fhM5Hq`KJmks<9N>XM!2=b_Q9L7@l1Kdn-+pM91Z z%IXq7ld>)?Zn{%=Jm zleE3)zYK1zOGqt`H&+SnauJe8$21Sq?0mWV4M{_2ziVAe<1%83shWkMk zaKtzDEeYmInXIj+C~9}=gAd^g3o*sa@FNY*NlY0vo+zI!&vkMAzJbrlN4X4U`9>j} zK9u|Mde&Sr0peKDDbJt9B56q#JYt!vuOS!Y7m#XR-3!3C?*^HWQ8WM9u@0I>3vwY` zTSGup9@V{D;}cR*If!=;i>8n|#*I#!Hg*rdw7R0^W|=Pa-f~~}e#l#QeRdRlTs4J8 zeA3I)=qtrpR7uLAe8rure>~??SR6*oi{i(WReNEs648UE@>kWQ+$zSeUF{X%tP&68 zJ)D@uDrY}=V#J4 zYJZ}+dZ=))-<=wL>PGKvLRaQ2@-2xyuZziG2#ivvuwt zeoEn>#NF!F-XUS#&a5YcE(c4>rg^*v@bM3c@)Xt9Zl@mGhCA%X#fA^v1VjrR!Z*Dc z@n2fC)AscNau$a(zkPjILi~hP5_>@UNJ3D6DMh8Er$hHs*Lu6{S9^eF5;jp$t@#&7 z+}CxV*Sng0by-nSwuL6ZZ@VC3d@CMMwm)K+@S&3_r3@uRt@k0%;2w4x)apSySZ6{` z))Kaw74DOxgrVLM6|iL*baSgkApJUiyE9pBwve{9-C50SJ$J%Ci&E_2b^8wXbeZl* zCxp;osZ-o_nQ;&<)|*)&9cZo{3!jFn)MBL|MW^O+-uOcX#hL&55-!3!}+xSx1{RaBn81({ydf%b`QjO`|_(4sD^7gGi=onY}e3I6Db<)k? z9?#17HPWEfg5X$+CvVD7=jO1%ZYsdd@zulojxCixrMk{Qs$oUi`{BPJarlYedqt;C zDEnfq-XK(-+4OE#m-5zm&&EG2HAHg#@l|ARbwOUY#p_ds)9TP^F6%}-IZ*VIrhV@; zPw$l{vvF6ZMawzW>Q4=<9n_d`+^ zQ^vUNN|?UVEdO>&@pwQ`M`6f$Az0klTR?Wfo)(dKzm&(@rFD&=a#myoClzLIgntMI`@i;?9O z7_&(9W8Nt47E1sxQs-i4lf<2wANNtykzzjKOg-6DO=m>Dr#N1mTr=}R3Y4`8!!4+* zUft4>_V5{7*N(ldzHqTOQ@MhkF&sjhSN|#SM)pKa!1lrK!*P0A(at&QY2xkvBJr_IxdJy8!!F_p2up3%HZMo6`tz=mN$_g=%H8`5P6tq)VLRFREpcnBIc$N!D#@I5=XOSGXiDDY)a*VY zr~P>3eV?`tXefk& z;(G;$mDPH#*9${1e)q^Q==AvlqRE>^riFLZbR8ZyjT`7G@_pOZhYmFvGIg^jN3+a5 z;0))PJHz4`G8%2J3>FRDaTv;Q%}AY!YyA^duMl)wCfau+wjd{p|4L7hYCZ|=s>5H& z>ua*w6u5s9d0cF%(Qk^unMhZ0;vGpy|I(uUinG-h1eX@RVu72^Vc(CWr35yu>5Im4 z92}yuW_?T6Z@-H8x6%533fLc%n+Qapy4`2^| zZ+Ti1Mhi4$z}goHledblMc0Clh3h zIHk7*8^h?dYxTzEj-Mz0qSuz|;k#0*cbL3W%+jOZckyZ32E&~z?A$%X&G#r++aKiPQ4M&*2?ix$G9P22 zRz&4us$s70~GA!0pxVs>rt^4DG zFWl8Rz4N)A}SPA0-qwzEpV zP5YWc#`r;p9G`Ecgo=+<)^lP>_D8|R-Ucqo-h1^HjnP66Hz)k9KQ1S`>w2EGq~3Rr z&4Dj0c?0=ltx}VnGQ473ss1WUKO?RuG0MeqG$?oednyejXq)xUMyd$XP||?` zTcu0GTNDdY$w=1Z&8|FO zR*Ye2FbLWkZX08A5SRV%$=@qs2{EzJ^PUWda&GC;+XpO0GjAqtgy=EmD;DPDT{G6$ z-iSO~3qZ&3b_9F^6s#11l!I71x=Ds&ULI7?tsXsAqz&KsNM@p_=&Re}Gy^$b$Bz&c z#WT-@dZ9_=;6ra`2v*7PjRG*N2Y3W7HM~ zG^V@#SlTv%7|MG*UA!@0Owpn0~CatuUy`;r0dT^)kJm#qVxHt0f^#Q#td zH8<@)*XOzQ;0NM$*eLR;@J9KDz<1#2fR!mnlfnXfu7zd)jv!HWdE5iH|I{;G+&BAeM^%>=BgS&1+0ACY* zlZtHHH1s|7GRIc^lmO0D2i~b2go8KXYSO zJQ}|zei>~J64jU1 z`wt_z#~L`67#HV-4LjJ5?WeLmNhF9^WAl1lr>Vrycqif!6=&Lz?nCyDj<+$roR z(*)(I@}llIl|BDcJ3MmQej`duc{M#gUp^&rax`yaw5j+FpAw}sIQDN2)QSy^J0z{b zujJ0>%TxVl&%9hjqQeyQ?MMlzE&=~iy1QTh^PhJ(sfg}g_b?m8Y*)zmzPza%Ts>+S zHMe5L6K$4ipRy;RH%=Ucn%Ii}LJ}cOHexz#k~bD|Fiak49_O>)9*{tELFIgBb~0rr ztMnPjyOHNC46?r<+8@n_hrTpWT9uQl90W=WjIn@OU`lZcd(cY?O}piJjSF<1C46OxZrFsCKMtdoGrT z>INF4HOFE_6i(Bep0k@P3ZdEIQ`0m|(~?e3Y|QGUG^nJ%K=%E1$|ba}VXtdOJN*b3 zkjfZcj8{{6+PD|c!CS^QNfPR_`@=u?i!k4ihCE$E)J+hB}B=caFL zu~?i#HoHbx0>ydUwu`e%w>7QZWmC1(>o zC;CO@wOY&{pQU;}$FU8K=px3W&IUohNrS!E8LN1Fb+gzXsB`d(v;TXDXXEFTan?rI zAdyYvCCvpqxd+b6( zf*W_=%CS#UxFdn^t4Pi2ussU5K)~@{t&x9gcg*_%*;#NPsTjmNcb4KuXXKk(OauN4 zNxE>PSq?s8l~&@K5g?+Z?#(Qk{pj%13BIfA$mXJy2UA>Bmc-W;E>$z#jL2^LF`t-7 z*e$Gh%8cQqZ#bdOSfxVta|%;>O}E17AaO3gXYz;_Pl-iRiro@5(sfKVZB%oEImF*# z%R94}d@n+2hOi-PFz;)wU|{kg9%VIglfJ%qZfLdG6baqkY`6cBLs1T|(eHw{YP!#iEcZJWVGqOB-| zrq~4vbPCft~UK)PoVIKTAR*QE1m;$~$uQWvhIGHTe1ek^V z0&86262Oy9iv2AJh9Z&#-l~!Wp0c&(5gU^*yeSAim$vA`p`LKSgic9Kf48N4h^8Eo z;1-o-trkSZr9*Tr!3J9l9xPqA>ncgDOYLG(RwF^hf&`~%me)9GKWu+d^v~Zv zU(1I)RwRB-!RYJC$^RKNvOgf&GMG%;Fzf)z&y>=WLY+%D7>MWDnAEJcP9!l;h01<6 zRky6>uR@agSFzx|`yefbe~y>Ddv<&0Ir^jf+qYCdAB5-QBa#7KzR=?iR0Xs30nBc_ zy2s8a6*2Rve^?7JuI3 z4*gtS9ERyOn*2w|ch$}b9Y6T2j8IqIw6GfVLqpnKFsMGq2(fdx7oFs8Pn$47N8_?I ztk!~#h7Lc*eD>VJZY|jNGAh#Ra8b?3P+IX$q0BPO_Vg&FNisNOcB}t0QaMv$O#nX! z15$MC?cD4hHRj$xR%TSS3xRzdy6$>KezZIWIeLHDnArFO>def#jQAU?d2zghKa4Fu z_(9^fE}XJD2=C_E73kCAc_dXDg-b_dOEszQjm2Zc(r@7Oqo-aNye7ToiuT}s_y?oY zB{4Tw(#Z%(%Nx0zkkaQKS(lygNWed;7&DPnFd#9I<+M;T*F&`T^M+Kd_InzSbowcr zE|DS${ZqNu^=*#`MEgN-K)v3fd{ApBSu?g$#ufbwwYrA3oTvifv$0PY$aopFBHWOa zEI`DH8B=X?EQc%JWxRiEEHdpJR`ED&6h6EehjwyQ>Jf1DEkO)JUph$0-uaP#A!(x< zdb;NEnW{bcTiwmyoEK=mu^Z?;PvU%PP1}-=!*HlZNjd#^#nBG=ma4)VrWjT5IimN6 zjp6(z!)(AWuL{VnK%3y7L4i+`y}N$BS9kU9bCx$_3NcA;3PY3!9QFrRPLCrOu5&FJ zO-0OTo++Yd>y=Ck5BGC(bKz^a6ZBE~xMU>pg^-zwapZ^a4wLnV0 z#r3QHi1vvF^?jVDX?31Rld_Gm!lhEuDW0~FORu?^n=W5TO}3Cm(FcnJ@vc-Op3Yu| zw8uc?TEYue*%uu|mUc%LMFlxHV$8VG<4BCPl8~G$K06hgDT#Df3WiY$$_Cu{g0oA$l0@YqB5bI*M*vuCV`tAFom78kj+)pF{OqH0>l zYjucTKO*Gap6bNzZl$?DB-J$%@bu9)7{C%APh5^)Xiw@v7enMYuO@FO81$A?B2bbU3(4)iSH#4n@F}R z97Mh!kjCZ3+SzOtF)~8@)q8lvFepSjS9Pk^ zw^69yzCH%MK89Nk^UkX;^2{?&i!;BAfB*4ayxs2Awk6k`MKFk8&NmuE!sRD_PeoGSP6hq&vPck$HLWAp^n9XlknP{E;1S{9c2ijz<; z4*FQA>-iY+_(_(aQ{Cd80)qr<-cF7l+d)&Ph-Ir*QSGvV&&QYqB18RMG#uE@YcD>_ zb5B0Zo&RwwkGy$+Hf0c1*%B~I^)&s7L}bvMZlq^qVrFZ+t>eEGlo2(C2c$k883YaN zcC?-McJYKfp~?3mj0pj*b~guAR^9 z+%b+FZ^hfyM2`eoo|Es2jGy7@r=Q}EFe)%X$BiF-N2%P2!~#MiZ_n9F$D%i79$L`pJdx_p63~<)8h}_#jUqJ%Fa%&_8JMq zD5>p^L(;fN#7lo?JDoie9ID;mq|K_X>f!1H(dUsN=`$6qM#b?ZgS1ceov3v{ZSSnU zOQ0K^G-2iKYhvHqs_&lWktbhd%kJY0j0VKXkI*Cf)G`o5L2VxC;%ocPHqbOI1OhKU z(FJpy1BW6DQl8N)#6d=s(lu4~WF6I^V*;VTnD)*$wKQKnI~GtYPXbCGBlz51oH;7~ zW!Elt>_5ht!4L^)$)qCoqJIqkz#vDD?BUJ#_S0s{q%_V)SC1cGa|7*zVr`mt@!~u0 zvFB(fF*%jwN4hxPC&X1WR$C^m;|mDsdGVR1j7ruDv7cu>$cxTMw0R9Ar#XqYeS(!6V#|X{&r|^D$f0spg^<<;j+}9ejgsTyTGb@A+R-v7 zwowI0N>>y)^mLryoyYIz{->Ve)g7mZt6R_I3koHWNv6DZHnllHPQLpL&%g2x2by|O zj|XaOAnHV!RYf$oqJ!_ z{P;6Z{+fGlyOoDt+CxXkfJuTzwMhy_3rWct6lbRqW7RzEhd^-(@%JZB(i$nCdSO1v z;yeAqM}lIr6VozD_PcR=AuctAM61+i)Q{CwOo1ziyI1jsXp<(tZfe55Ph59O5TT%c zh;JPo75~}W%Hi#=^Wt;Q2CB{lj*HlMD}yJF(kKBIz9BsBKH3`&vHdmGKacU?owsw(W3O_kYZ$+j9}FP(stLP|5^ka$tkD>Xi1gkzZHnwrm$-v-5F`-cc5XOkTl(Z;pe;UYcNA?1yr zwjNOv028k@k_>nTI_c=_)9T|Eo;=Wel&!D5z|&7X$>R^+#V>#HFk4$aVsE1S@6$rt zRA%?Sla$VwMRjojg@xtRR1}kH?qTn)eVkD5c$>7-&X*lZDH5k&%H=h&v=2qd$jXy8 z7m#Lg(>0`K+QdHD;>jwhr7|yGyuKY*axB47>76(+!d3a0hfZ_iR4aoqMa-R1Ozc1# z$4;DJ$dXBUPQv(xJSsr5Vj1h@O!o*_Vkn%mo;l`2JofHcEm%;7M;YsIz(VefWz^?- zIk97_kOwP{;yJ9Uut^ZOkH*1KoS8)=+X8gCecF0xYuHO){~&Jl@U;vi^_*c%Wezb0 z8!5?2#F+yOs*P@u;t8{n@8u{53{2^k@8vd zC`&QW*VxK{FN8BKi=YV^vBwuM zXU%LP2cKZ;*)ZYwZ0hFCqIB#Ouf2N+Z%jHB1zC)G`WO)7t_HVpw2#(aFQ!-*#nrV` z*VZw!x`cS6a!3J!W1}*FK4jNXWuUDYOq(w{?y`wNkhW#cX4%?W@_Yw*;>A5QceTkN zp3cmi2*+F9B4aByaaP8W4jOtwxN@qPvve8`PY)(nDfQD!Ns9Edcjqn|JvIuslHSl5 zBc4G9x;yFY9TGVXisR3sB0o)Y7(-)97D61n;yn6BFv+!QYio#eA7{sjF3qq-o!NO~ z5EjRqm{G>;nWgy8>|jqrk2shM9Nw1zDj0NRmQqz!$*cv-s7emtmH8Y#vFJQq$83 zG#+GcbCB%HI?D4*47asw6PKms`J`IPtuzJ8P6+q;CFv%HsxjZ`*E8 zwvOQ{t)aTCn5sD|Sd<$?h5#9{e%kwlH-@~#WzVD}afoAWqY?syQsG&BfezhJ6Q4f5dAiByjK#W6i3jsva6lKQaJA0CT zV*xeOibzT{V~NjT!G;agI$C-Ag?BmC6T{5S8%a3(EZa_v5{^lsP|3#7%#QtixT>d- zmoUtk!v|^gCy`T8Bfdu3b@(tX!v?amvoSL!zS*z69>x(KqOI30G9Do)yrpth4X)u3 zF`3!q=H-xLa?|aWwrBxQ45`KS%qUI7=dntllPHmbhrtn%lQWB~6o>XKoKFJ47-I;} z@F2bY9!$w4VrR05ONb@0bOsCRr&EzQz|Ob#(JayLMX{-j;+^7uv+5QwGjogsZ@tP} zyN+_=WIJOb*Su5{y^Y6c@>)e-E6BCR;7CXzBR59^#WCCxJq5!O=$T?kEvluqIE6^i zPF6+|X3@hwcZlS?GODV}shF{trKNH74Eag2hUj%m-w9WU7{icQ$%e(b_(w-M_U7xH z_5`)bjhKW~GF(acyu)|`MqeXR;ixkg&7(TY$gy|ckzg|{X)`E^ z9pd28Q}lZR5{jvb3>7qZF*-6R&PviAZyJ?&!)`TW7>#m66$F1;wK(@4!o3HZs1p)Y zlb=auMkg-As%F6X1}m?YEXrbR3~hP98o%_oxL+f{P5x5T}owrnP54 z0tpkz;zV*Y)1~Z8GU6mK>*=OP0>p@#of;X#=925CXNX~mBO(D*qk1vz$0&w@Ansuc zGcH+zW6u`$^#!ybRi#*C5=cmZwgcNa)}$h{L{eNajI_7V(%Ow%WR#GRLyp$oEOMP@ z2Ku5eK{q92kYViO(1}LeUWsHTAOqiQjUzeDLGO|69PgGZSsfC@#$oI}#r_lR^!E)A zj7=q{sDSLWRI;VbNroZLwDx0+mmp~F94cfWn8E=q5KWNax2L;HoQzM}`azA28e^w3 z1()<^Tv7_@Vo2jW`LNuB+_y+ zNQ{XmB{h|pU=Ig(@8H0x4o3W9NGuLqBKwR?2mT%jWV>29ed;ugVgNFy&7?db!k7d# z5rY|fLMd}*q|zbI%M+8&v{|*J`Fa^tTSJ+WDHfuTo$RHt@eEz%$PHsl5DZnP8p-E2iPhBUqkmGzQJL}3|8W^^2JA_k>YP= z>lU#?ErSdXy9suRuI6QvlT}D&vYFA-+j-`#z4VF?PmM z$r0NX8<$A3@CsL4fTrCq@SClt>Gc?dt5h*_o&;Y`ixv!q&GBT!jB>iEU4j=Yx{as@?t82+~Imyb( zAuGv>r>~u}o&AjZ%_L<=;FOu9-G%9tfV88rfzyqhANpc?gF)Rf@zUGbiPxSha&(a_ zWn{z~wYw$9n!D&}_Yg@;CATzBNPHIA&S7@G@Cw_Hwd0N0apkAuJ^da>+x-$i*ojMw z$2{1?QStNU!~~4KE*cw}==a-+PlzMNKS0x&CR#dr88wQZ&&${3n3W}UPYBZ7CS1tt z!_(DFw*=H>xndKt6#tW8*K>v=Z6n$Zfbdv=Q3)iIipqpnI!R41;qK|6xqCqPTL7y| z|rEi!C?#1)6q!7*=BmiVuiPhoU$|I|1=!_PSGc~w&E)6_v0H4k&shB zmhiOfWE;au-#YwcRn1`5%xM%Ps5{(a7=_PfT8B7vrc?MtNCt3(kmPmdW#Mn!$9sFu zGAbid-OcrS#xNxcH^|Q=TXY61~8G2ajA#Z}Z#ucSbDaHi6UL=XF4dxM?AWj*6N z?s|p8Tk=ZDm3~jpaFGz`u%d^;WmTQBMHWd$H>ZUgMmLnyPW{AC0iodsKlnl9-+p!* zX`+Z?pF}8O{3C<(^z=j@PS(~kUPO>iHz%Z%krJ=%q&k7Iffky3)%{_Cj4%}pxnw}c zo5KV~hv@0;XCx?2JRt@{z=Ov#O2FhGDKQq4f0W^oQN{x5c6NpYiSbyqt;3|KkzP?& zA@$-cVw2Kv8r-z?33-?V^@8J=L>Gy6Ar}3;j0B9@%jQ$#j0_LB@d|M@+2Tl%4o|de zouthybxYu(-fN}q3>j5ml$JqCf*otbFZp`u==W%M2tOJ!2#j$o`}*HW+sv z(yKOwQM=^Dk(d-Kvgu?kj2si4_Tf>XV>YnX1eL_$uFNlqs-&56w@>FN%j zr;pZdw*+1yhxAn9EHY5TGT0P3lIv=+7>(ZHeLo~1G}wqwO4b5TtGeSYdOh0HL|d;% z`X;(2KO8iWlvhBS!>pB~Zr2BfIyuuhf=va2%J_)RXv=a(2IQLkcvMhfv|tlQ?Mg|K zpd>5yHf%-Ar@Br+ITXlCCx*(t4}kc5Zo9d_!dA;8E$AHCgPA^mB%lH;+6UZ_WP+<FiLwp&t^+sc|a=Px%I;-%YDp!siQUt5}SQ+1fksEE;c);OiG&**B(Iu3Wd~gIqb; z2#t~e(L--fFMUF^jmnp&rje59&^9tNh#Urm!}ThgA-(EMmB2Sa+8UI=c~AmGt8m4E zAx4EPT{MAtsr0>4WGp>#+EIv7db+ zCv}%kWNfmDj3r=KT-g-#(kuGbHQ*;+ar2Y};l}}Om6Uqtx7pW6LwjFzHIe)=iM~4} zV6%+&($%Z(zDm6`J+=^^>>|Y}++GH?+7D!SP|k4&iB-#}ozid8=c*KAV2HNXZakAG zHN>_j<>cXVs4*DA@9yGk*Ra%Ac($}BvoIBhTqmqJbY~a+5`Y>lHe%xwi8cCh4~5aNh4L&Nqbf?%9C5V2emt%pBCT${`aE+;ZJ`2BXKn0^NJ-Mqh82(u`Wwd z2Jw9Y)1Co4-(Kb9CuE`=uzE48GN#d27KnV*fLDe|-KJKCL0b-~oWJCo9EGWes};$V zuj;v{u#}<<*oDxpr|gyX0&O{cdZju$Y{bRb2bMO%ycW&QI<-hM03zDXE5XE~-w^wyO3=U*0-iC#iJwngXe(df-`m zc22cN4o4q=jwYXjrb)M3PNX~q|`JJ1o?BB<((_IXU zjW9cFnOEWAtp^_9aPGDI_v>cR``UBtc8fE!q)=E{L2}<~JpAx)IO(xrRL^5vSZ}$u z+Rad1Q)~Z(9*je+r8g(#G4s+(S(4Dh_Ge$^z19JOQs0k~(ia(%$K(Vi_fJ$57KdunbbYr4yNtZEuvD!Z!pAXdCx(nTiS{83oyKPL-RT*>YxO|jtP``uf zxo7o^mzvrzo3Pt#nm#JOq=LfG_>8qWU3&?$=&RCiwLC0paxS>AjxPwp2EgET?jW$!U}8tm<=)d&spl->uG3{iFIuf{O$(|f>A*Q| ztolG?bzvW9x;*)O<>$}ooRU*iFT&C{>KVi-Q2nRI$oS8RylO+oDI7sArk>5!_`h}_ zTE}R)qCfIEkIDKrfvIC~g10Cr?h+iolQ_A)3hJ8Y^-()C2~j;iU#F?%ep;Ll2!HaE za|*5FtBG*XO6shQTv5})6A$dBfBd+P-v%;JEe;B2uV!g!ine2=xFTVAVY+s|%GRSD z_>u~kw{#tKNj`=HVhSx50{x8~-nNB99i!UDF`s2*s+lLdGnblqHN{A|Ic4jno^AIPv&|6)=R zp9FUywG3QrK=iJnnuV5Qa!9)?A?K=~P%Q~mGsG%jjP5Y1@~HoH=+L1U!e`J}HFE zMMm9px3|#L)D-=+bV@LIe!0ikUwdBueP|t)L2?r$zlz>ky302FY)bl7>5NKB0@T+A~(YzSsiyjQ> z_}nnQEK)uns8t&0`JDW%R+d^`r|a);1u+KErMBb0b$lwQC8ug7#_x(dewm={GP-^H zcI}6neLVM32gEsDlq6CarpaxUk2F@Bk&WX0$FwDQi5V1?6_e@+;2lv9UQf>RUyEpc zRhNC%3Q7LNYE~}FV4$&QJSbFhkpIT@VB#86W%av61e3!_QQaaI&8ed@Hw6M7`ql17 zp8ykmeeRDz#YFY{Q5%nN{^m&3$iYWP0>)+3RCSOx~9&t+gZ!cf9?%Woa zMsZas&WH!ksM?4n+K*paT-bl|QHbii{1y-S!D*iyimYonCEu4?RyuxXn9!Lix;9A< zqo47^>d6-M!(x%(&xCqL8wm#0j_1m#gscX!HbyK#gSMf8-)zJbGGh))aA=SdP1@T> z1-f>Akr90sZM@$n+Y&i2m3ydzpU~c4m{&Xa+xZHEDVFqta!T?N348h&@t-eG5oc3E z8l`pfSTK7Ab%n_UeI5oppJB>a#z;8EMNxGvrSSo}d!ifK{8m~#SsvPf-%b|43n*JL zMISybB(FK6lKD01gxy1osP*L+C8STsBi>K%!?i*80lE+&6tIy~zmO%fatQYJG4!FY zH~Ey9tc%+9FR1qi`G_wV&b@YG$DRY^&sfRw+0~SnS5Q$_N^Y`^G0y<*(eqoKUJTIQ zXI4Cq<@0AzTU9}Mg|xS#oJ>T9*Ghi1Hb&G31s{rzFLIdsw{#G4d%DPpN7Sv#>0_RF zl))G@Cs9x}g9YKZmq`DWS5lUr zj@8#m$6!F)EFvMNf|+v{FsoK^k4nlVJ%$kmhkXP;!aS>8LtPc~Svt3#s!FkOl~s~A z4SS%MPPhMK{MU!WWJ#uC-f9+2OJMNKA=-u~aT@WPrr2b13QMW1pU2ASISh3*a;glj4Uv?=A;=0+nzlFf0%{)FGgmjziBo@zN)q)vRRaJ?cU0BBY==v>W z@t+A52wEIYs%9-F$IwR0fO@Cgr?02l5Y1M*j&H6np!eu$+J{E9RRtFhq;CyY5;Dt~ zJ$D*;PBWf?A$%V-IL4u5Y>i8%eA+CstOIlns&@#hY!msy1bp$rbHB~EFE6BZ+aAvJ zj{KGr6A}o9WNa4I$he-v^lGv7Rn-(F`so=EF0OXA739oZOTBZD=HBQ#xxa`|0ii}~ z%`x$mFT09Oiz~^=%_l!Um#j1=4y)Q@>f%Bq6dcRaBG~l9!h!?ae34X;rb6 z7+&>moB|fFzk+!saj0l;Vz(i+gOAl}!)j4GN0~6Ghy4`+h!!o70<`nT(=Lb_w4JJy z@<};r%UhK`VH4DA5GL*rMf1Kt*i^fHPNbbva{1pHn?TjV4Xl}0L2{fmn)kxY9|1L^ zku&Q`u9^{I+v|JjS8|YmFfpx~6`L=mHX}l8dMOK5u4PGm2}xG9-LDK>$s65OFDj48 z69>_|UaGC*@=%|1bsBH0oUh42?Z_m*&*xSZkaNb%J-6GF919Nja^$TidFrEI=*A$f^07`66DAg%gFWE|bdLG_<%rF5$} zWLu0Ki&^S*u7AdBtm-=6o{8VlUCGY3XhIHZN2>{WobMvl*756(rzu%QvnyFhSr^Je zVdA>#+zaxl9nyTmot$duB(``qbF1>TS1KqS|1u(K>{H0d%3;pB>$!I0VycSsNOw9! zj#gZG^{l$=5*AG_prEjb`X#H_xN()}u2aJKsGQC_1|=iu5BVKEqKvwg?CGmmb@>f^ z=aw~8sB*{qUWbnNLG;I3G?$I**RgElwfx~tOUVg@P%UOS=1exXKl$F+V>E=}| zsZAziieL;|h1Y!1XQRHV5dUGeQ9So@@x|F>=a-2cx>S75bkZzALIxp@rL$PRayheW zipW)Zk&~&tD(V8NFco674JI48b1&nDOBPX5RG@K|e94>aFh_0rgfCEbP5BD(CFlK1 z6cfHp^F1n2xfc0jve>ZMtmD2Z>i1N2)cK*IP7c2D1dqP5jfQ@;0g?*hCKoJ)jQh4| z+3#C=|7e$z&l))tYUmrHR)6*VuO9cu=hLFlcATF`SMnI|1UX7< zN*0SR{|0NS6C^Z=?glwIc%8zf-q(4P+GC9&HpX_Y?28IY*RAp7R4roTr5jndYA%H- zv51x{=|@jd(p3F3u2&l8k>lzUo07wV^;fZ?Hg&x3)i@ZJliK~(7NNgkKU=pRq}}6J z^EcyZB6}%wvP36zVdB{P`$zEx6VBXeEM2jbIn&E2EKu=NJ~^og(N{re^)ykn_8VNg zC=ZLo4pE((awUyZM#rBT!{@FzUWbWt#>eKltV$oFV^7mHrBCB2pB362!kzmMlV3dx z>;7NyqX*t#@7{eJI@L_S_u{%csGtJE_`1uuBIO`|`?LFbbIW#i@7~Rk7LOQnD_OOR zSvt3l>dFd|EPgCWIpm3>9`kqz+S4g5DW8RSON#o*7F zUQ1^-tuIV!$#iPei`a8BDW6tH zc~K6rz5xb2UhVxpj^s=#>gO}Ps+7`#G-ASIxQBhjWS28z=4|bS-FZ$62D_8o> z4?!77F-ani+L_eVR8v`!iNg?Jc*u)C7$PROmijyy$m!)wudSBgyOgZhVcPq=m_&}1 zbLUg&u#!J}HnnBNWG7qk^>pA4it>w5NGYmg=B(LNmlaZ&6_0OVF#4_^shN67x!IXV zbxAJ%j-wnr+o#p|Lm_PpS~93xTtRHZyZrjjM|pYM9vWk&bImn#v79=K ztC%~jl#=2iin46vu zBZu0WLXwR^?R}LY;whRjhx*z|N=r&8tEix~FbA8riLN07vB~*NU$ls6B}EjMmQh(* zMNVP_&p;<`pMkW}8O)qHgDTOz{0s-)zClLDL%i}p@hN&` z%bd+M*Dex~g(*xNV)xtoI6J7`Lv(T3KOLVB3??Vl*WJL{q!AAF#W1gMgf|~~mo`N{ z#d#-Ym69Jf!k!oI;lUTSvhTnV8ru5t34th?zn)dIis{+%G*3VI2B+*ZS+t}GZ*K#g z{SH=q?faCCZsD=p@8^yE{W#`rW?7ksGyBid=No4*`g4R|JV=+QcSYt@mDBs`&w1eG zqx4zISh1>tk%L<}=C+VtP(e1Wy!p(7Jn_nQ_8mG(Q|AyLw|K)~v6C}xG1JE0<)3eT zly|qi$L<41wL1=ql)4IQsVXTXCntl_y6IF^6q6Ei)8`(>A67x1m4dpZ%$`;*J}95e zWE-QMecFrGvr4KdOt)yyv8I*QQ#nai~lOkiDj_0S9^!65{SAhRylVyv#atcEUTfeJd<$CLALL2C7=RB zt#zLq+M^H&Wvu!7*H~cO!{hfpz%#FJW1rM1XpYC?Zlib9PF9)lhuJfz5I5@64$r@FM5tdtl61KoJS4(T6hM{yzfg}Id1)=-q0jKwE@V?_Lh zxYUHqBC4m)Vp?UHl%0xcbVPiLPm_lVRLr?`tejIvSy>51g$20iro|m0y=F1X=T2i< zT^%lyn_yfXW!XuDyo2-%jbV+ABd=m6_0#L9D$OP(#>j~DoqErp7!+IuBD?8Q-*VxV zRnw?T^Rj>2K`HyonV-^QFqEpjVAC%>i9&g4wG{mrQi>ftO zv931E-j^QXi5K2t`+Gatf4WOsc@|eNlLfPCm@#(=#ql0I=2VIcW&GJZG;|J&8Mly_ zUc`(=3#iffUpDb!Uvy(fTP$h$WfbSQaOIU#Q&S^4lZZjarh7!K&@+=Ral`cKGTs$W z&U7$3;1+He)Ohlz#knP;JNF%;uzoSQp5456#)s7$eIJW@`1gx=`~A0p77*5~=aSq( zUfp?8d-+EDKsaOI~QQYEuoH0tX?KtD?1cy60Ed=D_`cN(9NSyag{$x=H_x#6ew4Zw)ih6FY zglTiivATP4wfmOc}dExV(rFF zOe@YJB_)}%+A5r5{hVp*#;2CUO6}~a1x%BH>F+%D2?N4(YUWju=4s*Jz6J*H(%v*i z{-Whng^%&x(RPw*S8(+ut8gXQak*U7&6|s(>jVd-PR^_fW-pnI#E2y36p>d@LP4sP zQPGQ_YdR~|%)u3Erm3lm!L+&DaMfb6e7&5N-;R=HTy@2Aa#EeRQVN*AVG|2;q2b_G z&JHC|zv6l>Un9Y)C6a;3!Z_4IQ@aGX;ygoMpEyb~}A^fIPO3HJwyBkHPvsiK2Y6`m96pK@z zL85y1mPRe>j3ky^2Uh6CVRLp`0aw*NnJ!wj5}d zz-IiNz2N|3J}ae5ui?h)Hc*plBvy1Ld-`G)x<)v9qJb_?ki?>yEL&JlL1r3Rd3n^- zRblHmOJi?{wDLOYs*6cah!sCqAilhmytn`Zt)29ZsCR9Kux3;;uR;RCmWhBcB5qXz zo$7^b-nfSB)CA!?$<)r9N6Nri4m9^;usWz+wu#GD%q20_iYq;voQzn8Pw(Ts1D_=z zRCnL4B;+h*^M+K8J$MJNoKiua_&JZ8p7vIHMlBlGSby0nYKzlJic2DQ=4__LhiGeP zq{o}eWqn%$;!_Y4w*(!g48w%4C1mYSiX8KwWWEu zgjc3z<&YE8&+aV;Xt}7CjH#tdo?D+r-`SJ6Bf^<%BQy$+Qh|;kxq#^_FX56| z#abUECM99@ws5+8l%$e5%%4_Der^^Hg9J<>~0ywo>s<^%dTWmribH)nusl)!O~^Rs4C1NJv)oC z!fcG{CGcG%GPbIOd!%D>x6s);q%9Lw?-f+5n&M05vAC{;!jf_=aP>wUq)H#!M_br^ zvY)t=QkGnD8Ovto5f_s{PDLf9X>klUo~0}7plbP5T(!EM!h8ur(~2Z06n!)g(A?aG zExU%5t5;KzpDElhnabK~;mLh8wDm@L@~2dbb4x~5ST3dsmk4y_ie)TYJe%smbYd=A zG9<(@v4D9C7PCw`dD+sXRA(3o`@I}~?ic+0?q9R(cr)9c_!)oyPe0}t55L0U7K!GS z5stNE@O87}>AU&qtxs}%)Imm8CU&Ef+BH`(C#i!spSp`*{py!IyvxjzE0>DVuxWR_ z)U$qRdBqs_J;Xo!@LzdwOApC4GbxV^iUL8b81wdBFLCSN{Ug74=@bb?<)kMj;>?`J zf`xVX4?V>lxBilQUO0-Wa5}T9G8sAWDv#WA8!v1>!O?Bca{JHznZNtj+jwHjN&FxC zETPCD97pYfY1ob*_}*{`v3u;eR~B zzL8Yw>Ps;NtduRghE)}?>+zrQAHTeVr}sywU$uae6bHr++YRm0!eEjCECE~>q~@h# zwq&vNmTxoN{R(%9jDPW~+j+Jjm#e<9oDA)n>UkkEo{nQY`LloGSHIrQkh4?*uzV5> z(HEzxicQo_&2*{n;joSJsGQRb0UOZ}L_L_MVCB3(gBQ0Ls(x=gIfePeThy+GpNj;)a8S#7?XmGBBqWfT zkxZO1z+nFXeXR{be8Qv@6q4kKBQ-mhoP;r2P6$~SXPi{Ngym&cj=c32hgy2ISFS`i zg@~4`L&t>(huV4T-sd>3mJy8~(;((njZ39J=J*WC>lcepUBbdy)nq$ku_U;#C4(>Q zA){zI3)XF7)pRQsi^{cH=3(tlgxaCp=FFpZ_7YaDT+ICXaxxNPrs~iKLIp!+V$#c4uvqNX z@)azaqn@!EPZj?Yn_{5*(Cggww?E{E_wB@5Tti`+6Jscd%~ih3wD~XqK)lxXKO}NLwH@NqwKjFTYPhl&mqbfHAyWzw9tqNq5nS1p&n9Uv@zwcIl z`O9DO=%HjbePac=(pY;^HEXZC6!Y6Z=7)d(kNo4W9^lpELd?~=>CXyPSE*N0sEhV9 zYIoG};~IpB8&jFSemygVhrRgkf6w3lar+-K0U^KtIJ?PvV* znX_cfnMb{FWt&taZT@w9qk4pw?)w@4^3VUwKmX__-2ZMj1V%Xi+|T&&FYjY_;}Az) z`nmY}f8bwkf1Dks28c_{WBP)nr*@Ea7zGsvC(spzd<;1N?s00kseMRZl<{}NPK1jhDJi2``CBZMDdIY;tf`usTpKBLo^*ZN{=x|#_K|g>|MP5>!0(p zyPxC8h?8k^>L_seX+8Wl@13<$Sig#OYu2z~X+1gViQ0{(zFkl7i+}qOFC6jEwc}xa z^rL^~pMLyr-0_y%9;2fp1Z`H5tO+D0 z6^T-qaHJKne8ozp6{cadn{i37m@L7U_Dq`?V71;@)mK~luDs93LIn+}lodMZ>T1?V z%oIqQ&GtAPj(EbO{X$}_n8lz*j1Dnk*(5q0B&BCFbM9hh6sBTyI7my3C)ujxC3WfD z&!dmM#i>Crq26P>{pvd$=?iGj*!YKgIrQe!92|+xst)@7#5rP!G31h+oi2tULSFf7 z3Dy^p>j)8uPo^N=h7|p|Ks_BBk)SX-bMGe-JA61^D}lL?f}9jWW+Nrl^H{cc0h#tOf(a=UI4qb|7kfK7 zxb1D;*we^}r-Ng=x3lMT7oPDQa1}Z6j`|oF^ON9o5pR+PPgLz9gDp`A_>5(&SiY1M z^%;yd9cK6OHoE$|IeoGPe|#Eg37Hh+=Hc+Rar8(7ZbvptmQN$0>nM901~FPCS#wynZXL_#){<_w6C9DiFRzvb zOXjnGqJf~;*Eq`7tYzb(a$JU1UU=vYT876kjRn+(q=X`$#J21B zFN5^I$>E}E#X45cv2*H`S2@@vzS9uG-Fa49DyE*vub(rYRU6i`WJWnDw&-*D9}4AC z#3xu1CCC)MQdw0+c~KrIvC(9s#meA`9c?Y5`5OhTO|mcL0-}cw!GDVS$lTMC_L!5u&G*gg;&H0Cox&DXnuDb zB0IHVV91$8PPU1@lgDXl3t+Wd@EqF7{((da3gg74i!ToZIQ90E?CF&NQe-eB+`}&1 zC0@xQ;G_Nc9uA&5MQi&MOV-xi&{0si}#?Bs!^?v4FWX#l*#0h)akk zEvb;)tQfkRPt)5yq{&cwhD|y5iwtT4+bRKYeqJV4-w-3CeRw=07?Lu{&5p-nvQvTviqA!5qvRTu@g!M^?#R!m+@nX%Asp)B;JZf%7gUoUlR$EM z9*O>D4jybKC>+7%O2Oew5FR#%1@%=V#aW3FK9?n&b@a?0p1%K=JiV(EvuhS>FT0%0 zmo1_w*&%fvf9_M%Ud0cJTWEEb3PfyiBoyWn*Sn8hhexo84H#`{;!K;D*o;(?9dc4& zgtntQc;%f#bPe{(_g(BbaEh*A4p|vV80@iB)Xrh$vZZ9lihoEm5L_t)bjn0tQ&4H)?gTMXZ5BcHW{|mQ1cL0j!u(&>t7I$(%s4ah zC@d+Xw4{_$r<;9m?58CXKy4wern5pr9)`pqSS%8RAAgM}AAEy`QE?WkJS~_LqM^`R7Ocj38k50{2NYktfhxhQE+vp_As+iDZ0Arr`}QXNqbF#5$R*K z6z_dGq>Q1?M)n^$hP8G*mo6xlU@saRsfTf`F^Od66;oPXK~+H>u z#C8ebPKz^=0UYd=Ks$l5Ih$FsY#r-n77^;)&yM5W;)o>hRDohz9z|spl$92d8#~C6 z9Y<+XL9DufUo9E(;S&oJ4z{!Z&6jy|M*{-^t;W$h$)C{J7(TC;QEC5|79wZGVWR!6 z`f#eATkHv>Nj`a2+~60BQnl!q%!k%C1DWN)I#8ASB`Tf8ziB z&EN3DpWee8EhZ}G%%UVklE;#nmX*uE@t63;-~WWij}8kNh+!-ki^uCB#;}luIo;g% zZ-2+X{p>joTJuPk>v)D`JS)A|uCC(?31yG$iIgtBj7wI|!u{6$JoDCZd=gX`!a;hD zyu-u4_y@Ew^N;aVuf3U@E}KJTd8ziSUr~CTD)k(c|1v7BA-UD_hGzM$ z9yd|CJ@J|Fx6zNBDqJ8UKGT(3LXqY(ODIX`Ve9jIX^)ZeBwBU&MCH6N+k7Cl4qj{AA-SM*=S!xX29O-LiRNZKmgq*{XE*1d;0-q(-M=)@5x zeJmBQ$_Sm{D3jZ&zD0SOx?uE?EG<$7m%bQGz2aQoop>g}CXSR7l^?{^ZCKp+Hn2`&llgFAz} zyAN)IOK^ABK?e8W9)i0QTn2Y{JA8Y;`#sS65drsbBqfhO_I*!^@_% z&(CW@YsmE*78w^mr+MR18uNgb%+WA$#oyUeY+NkKZ+M^c(z@j1?_AJot+YRUj)MD1 zLnlkl$A&<%o3XFTp$+vZV``kdprNmXmT>y3+fq?QW#%Zks?1q*0$kHLh+8s!?iYR5 z#4C}RwPY?68d3I(bo6w3i!fyODq(bn-E3{~miT1399Xz@4sn8<)uM03t*L3BFqV;B zyQ)_5D;NkA= zLGw-5A{9JkM*Ck z+Ccead|L};b~NgA@*n_Nd)dN1XqPMpPoeE&lFwaVb zeu4t4Sf+oV7CF$b;|`INB_-j5?3Jo9lC=lAICC&hw?+%g_+K7+gmRx?;I3jFbp#W6 zrg=S0a95a?>O^>ds+h)bK%4}!-tX-l=h;qwGg*|7#u84_mB@#SZz@Juuu>+E6HNWaO$iVxfyCtlNh~Ol}+^eYs>JZ$39^?ab~C zP}n5iaYDs6nt*p|-4$%rxzq-iKe8-2hrCYY#GluRUqT^#r=O?*trNIHdxbd$6Q%U= za4QtX-5)>z=P-JN0wa^9<7Mw3VwIxsVsGw1FefWyMP_FE9;x}sleDP)ar-xA7H$r$ zbEGW`^Ydcbl4$l!s`jU1-wqy0RQiXM~GG9))9exdz0%1+Iz?VMUc`g3zO{C-o&JvLsDED`NGe;YU~z>@(_o zwQO1whNtAt`yC%}B7hWvhY4w_%G`d1P%*AxccNh;ToYGUcw71Tt!Sp<-z?v&L&;kd zDSSSF=nHpO8olCL(H{l7x^3$=S>n1{w^UrOc?NkKRy&`f+d9{E&ottQcvUV{taLp+ z(TZ{DKYdcFc3*b7bPIgZuqP)EFOTdpjl9<~^F&fD#Wi}dmu0;f2k*)dHQ$Un@?AW8 z_>9y?ea%@>ZSMV9l$HgIV~PI>s!7d+ysCDNeJHk-Xq*q_B_Om@Xt6;ByU~yj;y8U$ z`&ROuO3BmIC_K6G(P1!LyL$+SF0DEM&y1l^EP_>{tM6{;u(t= zjc7be)RGSz;G*a5=W(Lkev5qEd_|wN`X`Kg4QpjmRH)}IZG51A4^;@yhJ8_=nKIWo z!iTp=cfEFlDWi6h+Mc?J4QL?T4^9Up#dc5&; zdN9l|W0Dx@H|&wKvyBfC;DFL&6vDk~hOPZ`CC+MUk94Xq0^IQG-@%Q~ zMNdDDIUGVGQ-`F0^&dGM*Eo5_!03hk^}R|2^H20+FZcB2J~kakvP5pr)=^H8p=9#k zw&Mb@3nY0^3ofj_(H)UZ?oCqDXeRP;a{l10iOJ{|K|_O%Rx6sV!XF2T-J_MJ=p@Se zk@;r)l$88wy>QX;)P*)@LEx^fm;afv#*R3A4o$9fSL>Th@ajgBcpz12HPzDT^GArW z)tJj-}(XtN|J)QObII97L1gT$zf1)(*>cr@ax8h!(h^TItb&V zPHXi$ifW1e`IU+BX0nqjW;s@~1m~Z^UlH8$rLY9X!dK8VraG2I21)4_W$e&=G6IZ& z`Wp?$SamFi6r8fr;xfKjkCLu8ap#<}VW9prOHo^b zPV80)S7_WG7{hE^Aq@g-g>#_e6*lxtRKV|;e)uYhj$6Q?J=i<5m*HwcMfe=bolgl< z+SIJmxU}*LJ1Tr6R~t4obt`eEsw%ep%Q08G)EN-i)02>-qM()#vC1vovFP8X&yHBr zI|p7PZxh~GZOc7E+wM1A@WXrj2r)5>=PYYJXAS-Bu><|=`7UFH69;x>?yESEhI7~4FnphYgI z<$!mWD5ar}neDbH#Z%X&5+Q-@{|+>~SQVh0teK=FDx>oLeH2L)>*w`hYJ+W9sxg<9 zF@_3D`E=;Rq2NlAey-89w7X5GL^-VVSt? zrk^C*A9LtM`6fa!56drh4B)gU$`?hrge-_pWus6bgi-aT-2XX=)(^91auFn~&%ttT ztqYgc3qZwfdEM3OyS84OtGE8P=&t>pfe<#}^Yng<5ci&LRROwT7)Uzty7go<(rQsc zJ46i(MfD-{Cu0)v>G~R)Sfk!-fm>5j+9Mu97;5k6Iwo6B%ng)#LAlO-OVZCmJuqUX ztMMUIe08giSA6ftO1~Q-vR$&L3{_K5$P#qZ{*kQbp7vyIlrppZs^!%f;(0Fmjtvz> zYvi8)ggf3BanPuK)!NVHE=amMwSWG70mLnL_Mdp1}$7G?C?c1gI=MR%Gb7jo{$a zfUZ27oh&M$OpwzMK2GfU9P^@`MR6&$2u}O9G*ekmHL5rzHGNsKG z^}_T*6v^}OYnkU9mTtA` z9pG&QptwU`IuhraoC_w&%g~JVF^Ii=3}a@tMvFlF^Et#*Snyp^z;_F?nRrN?sAx`j zh+SoG)L(8>*zi6nV`U4plFVp~fPgVXxmU`s)EX{N)#ZIeC^Mg#!J+k9rrL^;fc?Q~ z(cCrMIc<;bPzv35+Pn&$Xx9yDLSa*fgmOKe0;GeGv8Z?>iV`fXsi&7y5o$yTz8YA-S~sN z=94Tm_Va`5!^ms)XzXA~T?95Nt2o{%%U40kS`aE-_PH|zX8ce@*&Sn>(0NQGHjH+s z)pg7J?p5mv_={<9PJ*A%`pD_aeQj#RcnGwveu8b+B)csZ%Qm192cJD&a1hfC*~P95 z_*N)%Scvb-GTrBlJ-nz{qqmCD68++O;$$)-ZH9*d!zHOzd`#DL%SesE-HcAmv{yiR z7TJ=e3BiTMmfiRt@?vkuc+YjYdFGQ%T8dYsR=4Uhi>S|xcNb2Uy!-w33QB3OmbxU zveu!XE?l9*{oI6E$TheH1mcvs39)GJpWqfSo6=y4B6D?L1nuK@VnGBlfLuRNyo-Yu z>UBtsm@j^Yd`22~s`rh0gTUVR0fec6)W3GWR!^%)OtMDUNp5_01fk2}Z zgrk{|9UT7HI3MwL7Z<3yOJo~vzb(mp)4G56)p{eIHp#lI$I+epi0O5YM@QTt+ut`v zQ|lO7W`kPyI*36ge9fQ8RE;epqmNRT!4mZJC(HnyBnuK_EE8Zny~@p>ilqY(EJ6dA z_|o?-k`xVXH_PcBDCV9W+MP+!5MUB?Um3n7R@VzJ$hvguOT_ogJDdFFh4k5Ja(1C} zE%3xUaU0Kn(uYiUiHxXOmT=ouikQzD|6sS-o9)07Fm zKk6wd_?gR|L`*BX`a+*Yx8)UQrms$ZN||CF7*>`FN_g4b9FJ<4|9QiD%yh;?RA5zKPnQI7@TzA5N0bxj#11j^NfGcsLGWAe z4NgxIIq=tXU#CtX4r{L=DzRVZn4JsNku}j_>b!9Qr2%>y4xyF7*lfd`chUQ+IajCD z#g78Wr3u+SNMj*#T397fB9BDw-07f$n{eOD35Het^cI|JL?09eA{_IL%T(ukac-`u z>F|+b3_fhbsvFKlpBkB4*^h+FHoXBCcfEeUF^5IEgCX-Bkqs`y`Ff2JWD}xd&Xo4P z-gw=5E(j+~p&crvIT(V3764$)s$^JKm?loilBvW3Se;Xjk@dS#PJ9(v=~I6_=sB2W5c!R$9yIhFynUPKD~iviD)=8K<;r z(5Tf`G1baitp`%xynw*|>dMz81Np~lm|dQYyH+}A&wk?~Iz)QW{Di<*`G|h|hIwvA zR?7?$F>kZ*uoN(}Oi>4?zHf+gl$Vq5PokGnT@g=U{RstvS86Y{<^rJK~%n14-795~fj}U#%IQ@;s_Pex|m9!Hi;779VM5=5Zjb;PXO?a;CH*a(F zX*!3qlwQVc<4l#^w;pBs57cf8NT~N|W8>q+>@FT}*G}UL zJ5(!)Vq%gR_4hL6LWoX>8$H-7`3Cx%OFBNbi?|D(>@Y&ph~FljUUUSO_+P2dM26<+ zN$IgeVM;-Z(P!J=Dt~r>;vVsK&uoypuYs7f0U zZ&f__w$>E?h5!5b@39{Zt&~r*ks>u`i=26Din7JHuMGWaf&Cjrq&x9=X0_cYjyC8B zBrAd>i{3t$Hevl;wEhaXJfcEmVpoi%2udOVfkn7qMZ7#E00CU%!L7Ry0d*K711hFkZ37W89VQ*7r!1?+naCP?)3=Q&7f!NSp#o3}Wgowyc zROE0p+CF2{cMhFkKDgL%Y7qE^nE%!rVEeN80t@xB(1`m4?~lg)k*PS6U7A^)JVv#K zabHIY%jB#U0Q`|(QOsOKk*cT%cA-SOB+K|PeyU5;wyE;PUrvD61B5BWPZIvcPa@{W^eQpuDu-B&jxqV@ zh4$4Z0p!aI)cV(Ftn_-2yu@24@Upq0Q$$gHiKT_*RAPGweLy#Ls>xR=Dv2i8*V4)j z$jgqH81V~@OFPA=-S7|ICx_>IDofB~&&zh=A^(neGF;Qfn0Nm-*j!i8cdXUNoh4;Bn|w*lO>sR|d6+z@Qr)-TsM1^ZQ+~gRzV4Ea z+(>h{_!b_$+BrR`z&eM)9q&9eQfVjjlcoqZ8$S6xq1WY_Fot%Y4;QHgOg_YD+Fw@S zUhgqp#ZyN8F54ch(hu&cHS6axc4PmIaE7Wnr{6-xAwh$Dw1K*{;R{llZ4x;RgT)Kd zel_+Pc)xk!!t}RW>wa_Eb3d3(4>Y|GrNn)U?hIb~L;Fyqs!rX3g|kD5o{aes`kqR` z=Ucn`aN+!l;|yAQ8Rx6}@#rgiFr?wV%91NBkPt}REnmF%{t$v9G)XDC$>t{AFT@Kl zMCqVzcbC3%2UlDdh1g+%8k&prJX_s)lT|hg?tmZ<`Ajlza&ia6;F&z^k_uXx1qNoN zjzoU>9a`dCUZvte)eO;v5?!0h?5o)GnGI{Dr2#&WBlDJjujlVN3Y|zJ6|<`}jw_z@ zxSC#unb2JPFm4SI(+}%Xv@-G4C50K4hd3-`NxdTOqse3YSc@g8w%$&1 zcM#S}vAtBJB@K{g@wdM`oru5t4SC$8 zf)xKnh>a*x-J3D}^!x(rkn!+;xl?19pce;6-qMkLAWeuF2|IWWDJ><4DA8B4=Mn$j zb@G%JthXekcP!NYd}YfxG%0jp2WMnOupNta&3p0J*fFRJU7^>awN(y@i3KeMz-+1R zwk&p@zPh%D?L4uMUTUwvg+d5uw~ApZf(dTf_VD453Pwt62I7>oV1}u~&4|5SkpFDK zt+Zg}OafK4e-`qqr67iYmF!>f-B)6ETTqi_V|^+^^J$jWWMB{$|~FhzqPO&6uLF2s}{UxCp$C$a8P+WIs#2 z^h|61W}cd1I+bN|%k!atG;(5x{Zd~(IEvwevT2^Rb1c>+Ln(|qJ_$cE{ zfHAG?A57Zw_`hn#8!mxo0t}z7OkjE0f&Lr8n-E9hJ3636oOlQKKN`qRqchtx6_0V><>P<4^2>jflD+%Jg<8xXu>-HS{MO{2GBMy}k&*wyPLCnJrojG( z>>g!oFOGn7*DT^V>(D1%O6O!oMats;=i=_|W6uAzjfS=gB3Wt5mVaVF&~(3C>(2a- za`OiN|7x!y2gZZB>!n^*n12wP{rB_Tjs+8;?Eh~u=sq=!|K7phI5#q(p2B~-KI{{M#lahd&JAUL(Yt_*ES~kKkZx$nmx`1ufN!y4Et>~kG^}l za_|t$t48~J?M24^_UoItubragB#P6p2$P{=Wf=>_t%kF7J#BimJqkIc4O;$23nJwW zX;KCz-SGZrAemK))NoObh#@SbliXVxcJSUx_Ghu{zY=suuElT za6GmPiT&tT!KTB*0&%<*0H`p85}k#cpZ8l9aB*TC=+h|o+;J=H^&DJb$%+>#mN#L} zn&zWqB_2iKc7H#|+?REaMRjvE!9OmiXUmd53+H?HSNdH4>cp?CJSr~lOB7*`o5?@w zLiFvjUt2>tD>45xR~x`aV5G|%S~U6&{GQa<8@S=|Im-|Wj~j{^4j?jUII0w?*y zO9PUgg)dd8QnS>_(-hwi5SK=#*@Whm2aL%7h;+r0q7PSr`{{9t(zd0stu`BK3or-R z1@Zehe3^eRijb*@i8)tB(Bm|`#id~q$EN$R5~M2@^gtax3M49pTEoU6l9d6b2ULkC z!QfjQw&vSC557q4{`{(hV^b%m7{7jujrfC2XvWyqWoj*PBE^m)B=n_br=77pW5{^2 zmf*#fM;l$=lm2lc#F2FPK*T5wb)~dBsX(<~xgnV~> z)v0J~2o5uB;2L30AJMnRo|<&|krPFW)Z#m2WM*^>V0hW4sF1FVdzAPbvZu7AiAy)#boTv?SZINwq`4o;(D+INit~vig@%6aQ9$3JjJRN0-{m6beJ zu^#W_I(rs8>6(UYw;k)xx;4NOD;xja3N~J>fGnv8xMbD*=PSUA++Ia;3^-jV7j-5! zH@W8U8Ch+2hvXNf2etD~&p+M1b#o#lf-*XVV!u2$wA!ChZp1snv7;F$Lafa$xkOqC z?%H_HR$u(0?so20$DX4&DwZ~n57F>JACs!0uP}_2koP~zozCqoLuTd6fl)y3IG zC*%4?XJylt-cVAhg#vvgfAG{T9~Rd;`WX7<+lg(`hf{Q9%tqjC1t)pWL$%$!eaf`?jKIh zs_^3q9oA$`jb_LA>SD%~H1_K#g7shHME4&Tik-DW%HSl_uI&|}w3wgK!>pn+Bz4P! zA%>0Le?8^nRODhs@tjdVcmVeH_VVkRe?VV|q)@r*6QGV#O~T+R&d#TvT`DmI!h~68 zhto~_pnG@n0{W6R8ur0uO%iC}LAv zIc(mxr)f@A_4D^tY{Xl!!9lnSEx|#gi1oh#0B&y3z!!TX(`AeqLhun1#5F_s$=Zok zWlcgveYw9nuQ+(U)7w2bXijBSz(|<4?PIX{B^18$y@rPSuP1J!rDkyWqDyiyu21fVV%Crr(ukp~m z3;jDn{!gI1`%}#;)F?wQPM=N@FN==75IS|-Us!R2LiR2)VVm1-&bpgJ6v_;WJCm6djYJ~m z5oihdGppR6G0hNNA1i)$&mlLVlR?%*lRL{a*g&)&^RrV$zO#Lz54XexU1^Iv9y&vv z$f~ju_2K>t($uPE5LpXwQbYE}R~YH2q(^CGxII=7KpSq?bbi)MsHo>(;AJ+qYMhc6 zcJ+~H<1B|ZE>tGB8Yle>4&(?Zu8oW}eqJys*f6PesaM!nPTwzzshPWwnyWj3f8ZV* zpoDcBS_H6LOBT)?=eM7HCG)pVXe^)O$v?zPNLd(S`i^^OQXWCTE#xB8u2CV0ua?(B zdmtSb&>bUP>Menm%)Yp^#9H|+=LSQq=B1nLQf+=-+JvUa#_Xl)Qb~p@f5d~!)127D zU31Rm5PI2Z@E5_nmcmldb%EW&qNOL;HRZ+sSXf`lojHk(4bj8t0teM zYYMWFa-ZhaU{jf}U_!+DjD{-7^g4g*c-+(AOZgJVRLEB%P2uI4nZJiS8}Ug~(-|gT zOdek(p)hDCe^_pM64O7PBe);Vv+dL)A_+&&*_XJ=-^ZZq4)OSAU!%<;r_?Uu&5S1O z9M<4{<>PieZ+5rm;hlDKRM1UoU6lvP>7?D(^$hB8yEfyw8Eje7nNQ$cPGGH{npYNC z+vm!9X@Q)^o9V8ZLSuSYOh3U$W~Vf?vFcJs;QMas6c1_1R^ure+hs>B@~WzlZ9RRp zcE-;3znQt6EiEoxYYZ1>suSWI+%!6T6EKj%2V>rCicBZ`rL}AmMk`faF>>B{u)}q8 zt})udKPtp1>fn`j(2!iEHmjhZEDf@!xZ>77u9vt;>(0RE-W^Q330nTMFk{d1WRH;?WS;WmjJ9*0G}_yM*L| zZu9HZd0Ih!mDX!c+5v{gVFn|ekc`Rn(<-zk{Eu^g2$>(L^q&F)z>9Zz&8QFqlCwM?Gpa33GE zsO<-&+BUNb>`UHof{TDrT0f~?MlTH2ms}&tKWk3A^H(#WzD=hwV~?dOB=bMH#(%t4 z+iBz?CTXMlWKo_qgJ!hM(P{Nd$W04B5t)h|SjZIB00zjPBkQ;Y9+cuTle)*c;+$X5s9Nqzrqf`#H90OukC^DY z%*ptUEMzo>UsO|dmC*-;6ds{`s@jz^pc%}QIG>XUZJn3eU05D@j`g43Qd3kUplU@< z-TlCVt+y@&%@mh~z=l)fGw_ZJ#zD!u(*Ox>WUU__$(0)nR@wQ*L2oh3;j*I298PBG zl8(v=@Cmm&^nJ^6?fF z`gFhXg=t)o!UX7{euP$e>AMUZHBD|88r?DIzsrEnX=#itaR?7N{n{5zY~tehzCv5` zepob1WgipiT%SwE$s|<;5-q^$zaGaP$CK!~Gf7$&8i3nX{xKhkz^dzrvC3G{G;?`| z5DDUz;``HWh5G@^#ovOCYOW^tS<(CV%MUG%W218GLZ1`*L1=k~h4S>HTo&rylpN9j za)#b|6wTqiTpBmG)d5|-?9)C-}Ut3&z7G=q~ zC~3b0rNy+|K+;nBP&S6R%zNqkozww##&M+xEfLaq$=~j*@PYumt7pVHqW665<=PM`Ou_c@?b);mJ)!w8F(~Xmir^B@VdaskitAs`5(0D2iPEfGQtM{M<@IPM56xuD z!^8Vh-EKs)9!5Nt79#|8X@ZIGSfVcf#A4Vhtpb#JUz2;%;LsC_6=- zHH@CY4*sNk5>H!Bga(O2gj)#V04Zb&gb_#pz3WO9@%k@tPjLS~@&@ zlj)aD`0(UU>DYE(Ppxz%K@Dhh$yo#fsPWm>8O6; z=-O@%gcZ^iC^gN{&mz7fsD0hK6rtEIM;u1FXV4>drNNcO3LmC%b zC^HBw)#FPkzgo|ErqH2(%2Wj3`U&ey{dYBSIYBTZh>-kCjtY?=8y5R7$rrrP_M zT5`y!k<8T9)q-oQOY=g*2$2n+;ota3!b#{3qtkpZCU>R?FbrT8mheQ_jPRO03Ck zkC^|^Yj4eFeiT_&xtw(u)g+umr1{CkCgYrXHWbc@&n-f|yiK1Tlo#_8#-ljI(FDGt zHJUQuSy3!OnuQJf#CBr7}k`x)!4Q4?b*w z0LyJW>}^;=E$fu_eh(Rps0NP}nP{t8{AMCWcfGBq^8CDMXxNq#VW=i8##^aFT3)m9 zs=>T{Syn{_v%I{#wzk%D-`vtNueEi_bM)Vl3EoIwN=t-p6Ccn~jcz@?lBIqBcgZ$- zn5_B~mZTInE@$mn#?OY*>d?_qw6bRuwbho9+n-|?fI5~!O)|4~o6=Yo$J%~Lo=q|g zDRdj&&Mq07 zsg4O}YS}kYb<&JXW`u>MG9@O-|L77MdH3k=_|h+>e~Zv-m1wN;Z4;Mc9G?-)XNh8A zfMoWttE#=bokepB>F2`cTkB1UhOT!OneWISQQAT}hJ}XxYigs&x*}brM5#Y>ukXIY zD(GuuNrE%Oty?}~WoI8>ZjVo~4MW_iWNg9fsjg8O#a#1wk;D?jsGSbpFlyz`)#uU{9H zaWQCQA=Vj{fe%PxmAIDN+<300mA09fnSZZ$1@i-<2)QX?mW=G|rcoFcOw<1crg~>w zOcI{QOK#gtGcUKOkBCE7|)hYQrsj1=N_Y&Qt1u^fpiS15i2`T-tkbtF%l)t@APh^<9 zZFS+8L4)}s1{Dw`aduoIvUoWeBbw1j6G}5Ibqy{3`)A$))3;@!e@@3nn7N$O2kuM^ zRSUaKP|jo=HttOdu+?5uH;3se(PKF$E%}b+?%)HA6qCAfwM^DK{j~KA$cRX)nB_RJ zx;i+AZtEg+wX20XFqdey?YIoHAve3u$ zv5WLjvtevXWA5sZa22z^`*@v>==e7nk#PFrLr|) zsh?FhqW$WqAN(ojeO>;O^k$4<6kYwCiG!QWYmJ5DNr5}Lmwd%eKS~RGW#cztM^nXk zPFC^=%}R%Rd|(|leyOF^Ek*r%Vnkmsnhi%qKSA#Qh_eu-%-y<5{jnxsXy_i_bva+$GuvK zP_F}{ZQ^*AKP&l4S`bcohXUQ-N6zVPMQTnIetJRfXR3-RQdA=He4buvEfN5`Ic3en z1yWcHW&Uj9fLr?AQQO!ytqTCLcu6AyRm*Ika`vD&rEG3SQ@}DxSy84bVUGNZ6uotC znTTMda*0EtehJv$xmcezHRd8HfeIXRI}COO4S#9XqO&MBNHbO(m3owPRYAt814h0U z_Pj9gkcfzDNGmBaWL&0=k8=-^kU|QAH>8avwYFblo&G?LW+Z8>R+kqhZm0tK?6^5p zw%J#d{;AZQ&N1uZM(bwaZ8Rmzb^%1`;xeH#cKbmE^1)cc3Jamg(&VZ_6CN48QnoFuBNnH;;lOsU2zY6`3j&{OufR9=fw)|QQ@b+tDe)^K< zGqLO5Al$*=^z$bEuF*7n@t=b&kJX1)xHWIljDMuk=gD%~ktn+FWrP3Vzy8tj?xiU} z{=yA9mJzu1S}sxF_;=ZGC7LR6;;N?hO`=fbeX)#50uHUs-=)*E zN?J|$7dS@#!dR7f+lImh@4yG9Oj)1eQyQAuVy=#Vtwi>UAmr#uUqJ}MXX@*s&LHWU z_n4j9N+29PS99F|hBv-wE}`2E;urO36pMdN;Ekw-oOteVt7m!NgW8HD|7S`3pJv+~ be(}GdU+hj|$nTi^>-7MN%8FD7>HGa3$D$@V literal 0 HcmV?d00001 From ab380bc58cb49a1edb21b1931a31ea9e3e069bc8 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 11:51:44 +0530 Subject: [PATCH 059/958] name changed --- ...ine-default.PNG => quarantine-default-audit.png} | Bin ...faceindex.PNG => quarantine-interfaceindex1.png} | Bin 2 files changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/windows-firewall/images/{quarantine-default.PNG => quarantine-default-audit.png} (100%) rename windows/security/threat-protection/windows-firewall/images/{quarantine-interfaceindex.PNG => quarantine-interfaceindex1.png} (100%) diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-default-audit.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG rename to windows/security/threat-protection/windows-firewall/images/quarantine-default-audit.png diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex1.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex.PNG rename to windows/security/threat-protection/windows-firewall/images/quarantine-interfaceindex1.png From 390633dab67119ef5e88425fcdc5f0eaf7c7e093 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 13:32:45 +0530 Subject: [PATCH 060/958] Update quarantine.md --- .../windows-firewall/quarantine.md | 45 ++++++++++--------- 1 file changed, 23 insertions(+), 22 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index b1f76da025..59f4c6ccdf 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -1,8 +1,8 @@ --- title: "Quarantine" description: Quarantine behavior is explained in detail. -ms.author: v-bshilpa -author: v-bshilpa +ms.author: Benny-54 +author: Benny-54 manager: dansimp ms.assetid: ms.reviewer: @@ -19,15 +19,15 @@ ms.date: 11/17/2020 # Quarantine -One of the security challenges that network administrators face is configuring a machine properly after a network change. +One of the security challenges that network admins face is configuring a machine properly after a network change. -Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are domain joined. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. +Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are part of the domain. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. To counter this potential exploitation, Windows Firewall will "quarantine" an interface until the system has successfully re-categorized the network and WFP has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. While the quarantine feature has long been a part of Windows Firewall, the feature’s behavior has often caused confusion for customers unaware of quarantine and its motivations. -Ultimately, the goal of this document is to describe the feature at a high level and help network administrators understand why application traffic is sometimes blocked by quarantine. +Ultimately, the goal of this document is to describe the quarantine feature at a high level and help network admins understand why the application traffic is sometimes blocked by quarantine. ## Quarantine Filters @@ -39,7 +39,7 @@ The quarantine feature creates filters which can be split into three categories: 3. Interface Un-quarantine Filters -These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and these layers: +These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and these layers are: 1. FWPM_LAYER_ALE_AUTH_CONNECT_V4 @@ -49,9 +49,10 @@ These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and thes 4. FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 -It’s important to note that any FW rules customers add will not affect the filters in the quarantine sublayer as filters from FW rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. +>[!NOTE] +> Any FW rules added by the customers will not affect the filters in the quarantine sublayer as filters from FW rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. -For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/en-us/windows/win32/fwp/basic-operation). +For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/windows/win32/fwp/basic-operation). ### Quarantine Default Inbound Block Filter @@ -73,11 +74,11 @@ The following describes the general flow of quarantine: 2. The Interface Un-quarantine filters will no longer permit new inbound connections. The interface is now in quarantine state. -3. All non-loopback inbound connections are either permitted by Quarantine Default Exception Filters OR dropped by the Quarantine Default Inbound Block filter. +3. All non-loopback inbound connections are either permitted by Quarantine Default Exception Filters or dropped by the Quarantine Default Inbound Block filter. 4. The WFP filters applicable to the old interface state are removed. -5. The WFP filters applicable to the new interface state are added, and the Interface Un-quarantine filters are updated with the current interface’s state. +5. The WFP filters applicable to the new interface state are added, which include the un-quarantine filters for this interface. These filters are updated to match the interface's current state. 6. The interface has now exited quarantine state as the Interface Un-quarantine filters permit any new non-loopback packets. @@ -93,9 +94,9 @@ Netsh wfp cap start Netsh wfp cap stop ``` -These commands generate a wfpdiag.cab. Inside the .cab exists a wfpdiag.xml, which contains drop netEvents and filters that existed during that repro. +These commands generate a wfpdiag.cab. Inside the .cab exists a wfpdiag.xml, which contains drop `netEvents` and filters that existed during that reproduction. -Inside the wfpdiag.xml, search for netEvents which have FWPM_NET_EVENT_TYPE_CLASSIFY_DROP as the netEvent type. To find the relevant drop events, search for the drop events with matching destination IP address, package SID, or application ID name. +Inside the wfpdiag.xml, search for `netEvents` which have `FWPM_NET_EVENT_TYPE_CLASSIFY_DROP` as the `netEvent` type. To find the relevant drop events, search for the drop events with matching destination IP address, package SID, or application ID name. The characters in the application ID name will be separated by periods: @@ -103,11 +104,11 @@ The characters in the application ID name will be separated by periods: \\.d.e.v.i.c.e.\\.h.a.r.d.d.i.s.k.v.o.l.u.m.e.1.\\.w.i.n.d.o.w.s.\\.s.y.s.t.e.m.3.2.\\.s.v.c.h.o.s.t...e.x.e... ``` -The netEvent will have more information about the packet that was dropped including information about its capabilities, the filter that dropped the packet, and much more. +The `netEvent` will have more information about the packet that was dropped including information about its capabilities, the filter that dropped the packet, and much more. -If the filter that dropped that packet was by the Quarantine Default Inbound Block filter, then the drop netEvent will have filterOrigin as “Quarantine Default”. +If the filter that dropped that packet was by the Quarantine Default Inbound Block filter, then the drop `netEvent` will have `filterOrigin` as `Quarantine Default`. -Sample netEventwith filterOrigin “Quarantine Default” +The following is a sample `netEvent` with `filterOrigin` as `Quarantine Default`. ```XML @@ -186,29 +187,29 @@ Sample netEventwith filterOrigin “Quarantine Default” ``` -Alternatively, If the Filtering Platform Connection failure auditing is enabled, the drop event will be logged in Windows Event Viewer: +Alternatively, If the Filtering Platform Connection failure auditing is enabled, the drop event will be logged in Windows Event Viewer. -To enable Filtering Platform Connection audits, run the following command in an administrative command prompt +To enable Filtering Platform Connection audits, run the following command in an administrative command prompt: ```console Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable ``` -Sample Drop Audit with Filter Origin “Quarantine Default” +Sample Drop Audit with `filterOrigin` as `Quarantine Default`. -[image] +![Quarantine Default](images/quarantine-default-audit.png) -Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the interface index value from the netEvent or event audit in the following PowerShell command to generate more information about the interface: +Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the `InterfaceIndex` value from the `netEvent` or event audit in the following PowerShell command to generate more information about the interface: ```Powershell Get-NetIPInterface –InterfaceIndex Get-NetIPInterface –InterfaceIndex 5 ``` -[image] +![Quarantine Interfaceindex](images/quarantine-interfaceindex1.png) Using the interface name, Event Viewer can be searched for any interface related changes. -To enable more networking audit events, see [Enable IPsec and Windows Firewall Audit Events](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754714(v=ws.10)?redirectedfrom=MSDN). +To enable more networking audit events, see [Enable IPsec and Windows Firewall Audit Events](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754714(v=ws.10)?redirectedfrom=MSDN). Packet drops from the Quarantine Default Inbound Block filter are often transient and do not signify anything more than a network change on the interface. From 84df09adee64819e05f796f9ec2a4056081bd754 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 14:09:04 +0530 Subject: [PATCH 061/958] Update quarantine.md --- .../security/threat-protection/windows-firewall/quarantine.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index 59f4c6ccdf..ec93d0c0a9 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -1,7 +1,7 @@ --- title: "Quarantine" description: Quarantine behavior is explained in detail. -ms.author: Benny-54 +ms.author: v-bshilpa author: Benny-54 manager: dansimp ms.assetid: From 02f0b7c9c17ef086e30b4b2e83c1f0b023237440 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 14:13:27 +0530 Subject: [PATCH 062/958] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 34b7c1beb1..3bf2022518 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,7 +165,7 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) - +### [Quarantine](quarantine.md) From a9a76448a996bb5241765be32a44ade8f3ca0792 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 14:19:00 +0530 Subject: [PATCH 063/958] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 0492170b3a..45fc0886f1 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -1,14 +1,13 @@ --- title: Firewall Settings Lost on Upgrade description: Firewall Settings Lost on Upgrade - ms.reviewer: ms.author: v-bshilpa ms.prod: w10 ms.sitesec: library ms.pagetype: security ms.localizationpriority: medium -author: v-bshilpa +author: Benny-54 manager: dansimp ms.collection: - m365-security-compliance From 70f5d6d5fb1313c59503220e98c293905c0af086 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 14:20:36 +0530 Subject: [PATCH 064/958] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 34b7c1beb1..0720ca4cc1 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,6 +165,7 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) +### [Firewall Settings Lost on Upgrade](firewall-settings-lost-on-upgrade.md) From c19a082099d79f7a6d5819c67531cb7cbcf3d4c3 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 15:24:45 +0530 Subject: [PATCH 065/958] Delete quarantine-default-audit.png --- .../images/quarantine-default-audit.png | Bin 186402 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/windows-firewall/images/quarantine-default-audit.png diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-default-audit.png b/windows/security/threat-protection/windows-firewall/images/quarantine-default-audit.png deleted file mode 100644 index 6c1fb5c0070afea312826ceec8c33831143177f4..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 186402 zcmY(q1yq||vo>6%rA3Mqm*Vcht+=}tr$`9yZY}No-0CCSqA+b(Yt5Qo}tUhN~%A5_5%L*34Dw4w}nw`gYWOx za~E|P@n=1ni|_1afcW-biBY}yc{5W`qh^a9s`!7i_FWo5-Mu=PJ5iMJm-QdcVI7O2NPfV|&7 z?~E`VT%9(!-1!i>A1$YIS&l8= z*M9kvfB=!GsOXEAFC(I(H*PQXBqb$3;NteeGk90-W)Q!Bn{@Z|tlVj}eEat7%1KR4 z?eIv`|J{YdMb;u@(tNu#R?BN+R3kZWcz8@>AvadzF4>Mz)WXI+`|x_BRuZ5$T!muGDH^^5+1OG zSm;pmDm!{4L@Z}PYS-)owkrmn!a9#OGxmjG$UCFQv8n;ljO~Dte~9Lsc(|uO89!=! z{UtPht-s*uk-hMjneC^@&Z99dOW{ZS`^w!DnH#~@(Z6h5oyG{Twvu_=>CcF5rW+Oy zpV=esb^p$OfNdw*B6@p!m+|0Sz|sFF>#N@>Ap5D}{|f#e`8U65lsx;ZnSYf*1Q%|i z0c&VzaQ}~X{@ak4nD~Dhe&y@_qqzUf$J7JZ{5$zdEDHE9=`E3am;43WF6&0K&i5I8 z(KkjrPf=+sJhly)?t0L)quMFkK5Lk1qwe9Y(WI^&e=J-;WRGBk^k%D9qrcMkFoG~@ z!w#nKI2-Uo+qZIZfhKF_z_`oQjePsYH_nWVx>sfR2?II@Y#-_D3|g>GZINq-^LJiN zFEQSf964-Lb!b?~uI{FZj`2>4@C?bEx-~X#u?jg^xeVO4Uy91gGB=IuKFO1-J6YTy zb}au{%1waG`2ShUnn?aaXwOIa@GH}{j>k+&ht9r?o8Y$U#G`}8QqeP#yP!$A`jx$T zQH(@6I8o6LX%q&Y8;@GlDMPDK9=hUr)j*y4yj9HCo(J`*UQ|bPZ8y@Ev}Db(0n+c> z^%=*|elIG9@*YS==(+HlH)1=~n|Ks{eJ2FJ+2Lk*?7Q25-*HxVXact$lM{K7m|nT8=ZKI{)kY|nQX<_~KX;J;|-h@D!LVWl$YWgkn$ zCr-8_B2>CJYnIh8VJ}B{-JLpR;i91&Xrb_p*zwUYrFHhxIi_?et7 ztyfG(MxL3jn{i(M`2{Pp*)RNy^qQ_WM@>uyhATOdlVPE@9sM_w_*P>TXAy=ErfWaH zwux<=I88tN)@f0k?|Zy<-N!T$o%*|X;Q?`X;Xpx#bpPutB8ithFkBYh#4=K!$x4kk z0vK_@UTtNVY``+GH&7l#|;ndK9{BkGbxw#<5-~s5gU*$QS_eA(rCd zDjwmvol~rhARfB-VKSf&Biu5S*Rxq(lxH=Zrk|1WSX+3MFTBrEi`;vg+l1X$vVOsm zk0zgUeVVA>Bm3u~hS)Wc3)xw&NnZ+)$|xLOQJIqC&{-}vvBgE$c}vhWgg?*ejAElh zvZmNJ#Zp!KI%Odxkb(6Dg5!1Rv>A2GZ2u36m#DA>l+rNWB^Y)Hx>sq#bSf-f8*6pv zOLsLkcQrG4UAj!pj7)@JWA=$5ZH>|W(UrqZKkd4(G>XOE&fRPyfL=7Ic`g0WPY=K} ztxm}`)}*m-%$I>0gb$Eosx8md;HuZvZ<&hhshWLLegWsV%-9gOfqGr)3gNGqM}2JV z`QEeByOY!zTT$Qb40WqccAbX~8;2D-$rFY7YTE?BhcGygw?=oLPjmW;9aV}M)R`xI z)wuzt(&aDgP_oX4DZz8{=hppfBSttAT-6VFG8rO*jaGl|6OpSn1#rpZgSx&|hrx9B z!=ZYzNt(`wj+2gqeN(oH?`^zib#(RDzw=idXeJZcyl5thS8O>@ z&JgmHbdlc@*_yTLVhhE*UV}JTb+CNnQo}Gf)b)1Dd@HqWG#gzu1PP_{TsZ#7f}goA zOKA@+X^6%>nX1%vuSc1q5Yc+ne8lcbb9pG%Sd^?}(e@uTYOS1ou>@QC8FYGL=j3Ub ztvoa}g;J&nRg3Lh30<%#bN2{OeSzA>u8pD-H|e>ri$Tj2l}HU2Xc4{p7-OUI)vFEk zl^d37nB5o4&wv+uRUn@6)mQYKJy!E(Y?pe*frH6AIp3t?h413thp=ioS%0hEo2(7h z@#+#`AQx=>3k8?PN6FCMe4iB2@AIJdMeCp`uZ=yg}RMX=TqJHll`*BWmqU8|a)QTX@vES+Uc> z%f47%M^?C6$9Og%6cZqQ;3-xHjni@drSjRWCFc|>cb{Qs(;ZkoAS}jXzEZ^Jw$O0j zO~AtBs~iO!X+7BsGYb8vG zuF4hS>dK#!X(%W=Mwc^X)@_Iy_*iWSazn?O@bi$x6PE0TZE|@EJrzOcIFl;+HcX80f zr-6Dw!`QgARB{oh)YSCYD|bTcDzDPj4itLny=aDwJ&0~H%ryt}`a%^l4LHJ4nxm#X z3NRt-)6u34swXCH#n{CABU@VtPUlT`o-hF@K@rIiau)k7mb`qf-Gw^79?V;3PIcBT^)PDW0jE&O`RO-^E{ILO0dh-hM6LPZiqCAD>V|BR9sB=<^0}_)3U2|0b7pT?0e~ z^jh|3y2W!QBXCw8&#yHX$}U?UN=3>aBG#u0ZH;~IeecpC;$EIKETpR$p;zqB$I;)Kokvd_9`0 zQ1A$_?M%tAQcgHv2(Gg2natZPD0mdlLCepi556PqRkorCJtXn9L{nFpvCO-aDt!oN&Sg- zM}pCP)`oIo0m%%Rx_?7}%k8o96GD2XCygr0dLVPN#NT6y^&`Y%tKf2*dBCpm&Qk?# zdF8ObFw@;~MxqGEN9%F8a~L8QajIkMQha3TAJj4((20et0;9_P5DPx%^$_v6UNEx} zA9E2?))Y>(UrNtipE+O}haTQ*t~ihuoNBloU-xLdkvp>YNS5JjsN1_Hxd`9NcCq-8 z48u&X;NxO-v7Rv@+F+DMpwIC+?fE)4I@At3-O&oBINzQ&DDfkyIYv4J4`%=IwNC<1 zlZq~#MLK+Y>Cy2l$-7%KMtziu~A1Ty78ZRlZKA=86Vy|xE3--pcz>fxBgSky)& zDnXd1Cu1;`AKRt*zS_3ftwm^DI`h0v)DImcJ(FH5H@AB#gJ+&(s|IJ7OhG7eI(t+)oI1`#WEU_O%Igjt(kDr0EA%jm6W_q@Na}JsbEg$RC@@?Ry1}86BmAkrPUM%*R;C$gulf1Z6n|KRAaxO&@(m{YIX1w zjd+)HqM>1=#!U}o=rtw?9<*)%e zWox{-*{<~BxJSs!Gf9SQs7J)C76B>6{=Pw~+KSDD&6&FO#?Ig}iwMrjF5??upz@hk`EE zqpV!?@1NgP2snJO6x!pTi&Mr%BS))OBA;Ijz*q%>s3Umu8*5w_O!Zi8PDWkYZWs5avz@y9j6Z{g1&v1eIN`6zjDMb!8~|0b#;KQ>+O)+2KUgY0 zAHZ^tc93*}?#<{Jt)B?FfjCSt=gjFLzTod6OibPrcNs!$*R}Hx8%Wn~|Opa=01#jN8K}JGm+NCQlh_z70wwQ zhUMo4?a_{gW4X-{a#9wjDHePTcP_Q?tLxyV)laO zsTwEE>sa7~m2ebzf$qcjYM-oUgDCDK^7`ua$SF6NrH))aWM4H4r;MvKrTNb{7p=tWS zSfATpbv=6oOXVC|&f9!BzKEz|rnq>L_K3U?Yfjfm|JeEU2=p&KKgWsK9X``7)>rpx zs0fdYRJV%_Jtx+6)6LSb&F16qSuZ>`i#r?MtJd(omt5377#$pb`Q=Z;(&;nS(#d}e zN$0RA1^DH$s9;12X1n5A^~j0eLCbXMOlFIlWi2;fQhA0CJG9SZgV---?<=J=C&kIB zbnNBG2p!8D$5l7_y$Z91^2K7^u1Khu8HBS)1yj1=KymNj`?Y{dZFvC8FriWY=P0o{ za=wHKyOF8icilopt^&j_Se+jK0Hn1TySAH8)mrR*z=})5!-*7!Ic>0j?E3j=>fUQd z=LNoE4D!+3uF5}?P@XZs?I>U-l;YO+L<7bjpj_{40?#ky79=b3I`jVe{&tGL3dHLjNM zXMFY}KM7pFWfd@LK-_V_jR#%1&;1DZxic;3Od}M}w*HLHYH|umL5th17VS7jJV=nv z)Argtw~@Oa^;BV-Z`)8@fhKzn3|h5JE5(_8f;=S12&ks*ufP@-0WSCXXDAq#rbAHK zK*`U+*=b`HjIVF<)K&Cc$ynDrI97;L^Fc#cic2ow0*E$y`A!^V;p*?DQ>8ymCfp;J zwm`clf%|hskq+i-9IdcX)9|-XzX-6>cxcl4MAvy+N4md@Z4%D5y$c#IN=$N(^iuL+ z&mX|$F%<2)78m7oI@4vP$wuzp`fofrlh~+)toO!^EQP8MsQ#!LX>0yLNPXv{3O|08 zqrIp2@SGF0xA@Jz(|6SDbr^?j1{*4;Vie{Qd=Vw2gw|c#P9!tWsGUHdhS6A9<44Y( z(pM=(#-Wt6{euT8mVl~Jm5VSgM-$ODfs}O}LfM&v+C+&w=yK*Ux0ZKw?jw9(UDk^F_2{50<(yh11(uS-M(Cg$%_^5_$tYR{bC{F}B2; zrAuNSx^F(xX5_1u$6yqM@_VKe-)yVmD zKK0qfI~q!1+>GHCOL zzioNMFpgnrQ60H0ko4rm?9(&)h5u*faB^vK^>Z@^z6eeMNs1gxL=x*XyRSm0AC`ef zA5NPOZX%Pf^v!<02vzMH%0Ao#otQ}t&k*EG{y!ardn43VJpRx~P%zO`y#t45{AV}+gi9+h1-#H@*zDZ<}|;J7;jKvo}9 zFUC-4fm)A<1ishiHxhLLTC`^zCk{r(IAX9cndMFhGg$vMsy#jYz-U2d zh^)|ir^qfQ(_UignIdf#TQgqVf%6=@HQng7Xue*-#ArJ~w37tYDm@~ZmTUY&PP_k7 zGUdy>#QpT?U~+VaNhcX>-sxJ^by)%4s9Ux+<)F3Jg+xqQ@EMaV}=j*3qJT zJ5^=B!J7mbDwHrt0=*Lz1(#uVDxbx_;VZF~kD>tDu|#&>Gf3?zTDnEge-zGX7;l$O z-ZlI3qg_Pgg3o2|;b*n6j^(i~*JZ)W(ph@~i?Ez-`&bJ1uZFjEj6(zU-l}7J%veKm z1~~><&;5L+OgBG{W@MbI6^&__L#ODU}o?g4l8c?%+Ptc7NF+QQZ$#21*%bK+DZ^ef?Q<{6I{zsCKyawDlPTnhxpqbb=VZ)aQt}c9%9%@nTE(JD0Gi%DV zErvKmZEA5)ovbg^V?1^C(j#$tT>7TJsv;wedWMIDy>`NG4Bp1+c;Gl%j7awDJOt;3 zVK?Jt(5_rwVxuQ6u;w7;Vw?IqgnjsYO&K4C9|qYRrY(B4-k%VL=^8+IVnnREs1ddk zzVSg^K2yigS~PxKCDmao_vn%l6&3%XZv~~!#XnfA-`u@P-k`yP!?%oo2NHQ65+h?1 zSDEacV?Zx1V;~k)lW3wJqH^x$V2=5LcoS+@2$hRE&|t2+NC4zBT6Q9^>_CrVr(O=}c7aU41B zBa5Y)GT)LE9ijUV%^_hMi015oj4*J;8tB^S(#I`#ZDfYPqfhaN97FA%!76tskP=te zl>XbuUK=Q>_0`LUTPIeAi&(drtL~HpxeA1CLj$L3!+>Hxi7a(bslRf2BdEhixYls= ztq7mQq_FrJMcBOijI6ZvyOdt`id1RU)&a^kJj0L1o~QSI&XHTYfX7;{se4I!l(9U8 zcK^CR%`plSA{ADr^rR45Qwz`wtZiYN!PfB>1pr%Te^DAvCU`Zu+NJ*MWznY>TpBe9 zMulKud_H!=h)8k*cj|WzZsRFCfH~fC-DHVjVaeA8v7}iSYT6*Aj z2u8!2RHIP%b1wN+0DYlrHJmv3kXRgQYWAgRF05%3VB7E|BJ}|6?);73Oj>Vk4POFV zbm1*ijMa+GOGt0|Fz_Qz>h`RO=>TQjqAks1zrii{o(!xiqY0P1zXi`CU9gji1tk`8 zuY$v$=$g$RW5Zr^_9Z0*%@xOm zj&>k>>x^tk*N1lb!A9ED6c9_S@yCE!l&wtUJp8;UOz2@qwT6sF+MecS{jGJ|q~!kU zAR$((we}nr%*I1Bg!VEA8?H~N`-e{NULaE{UwlR>mypEF;;tBgD<*hZrhD%my{WW2 z#U6k|Yvl1^4X-Yhzr#_e@~qBe^@5%-d(gyY2LOI#4?BaRQVYNw0OuwRf^w}5-~EC* zdOlsSmv|Ex{m!ah;y3|^^x96`JH4kxC;-S~DX3j>%KI^Lr^j9Rt7lIH)eC1Iud~6@ zOjqD7m&`E=@Lfe)zf?pb6R~C{F63z|BU5RZn#ypU8svmAK_XLE=ddReIq7$AbUADy zGJ_R0)13VE_3&iv;;R&tzu74gshOOx$$&*Qto_n;n?%VGEWGJb1stePLO4)(s^YH` z4?ur>J;98h%TLG8EKaSof_h{`M6s?CY`&jtxPPPw-zA$@>6hwaXc6SZJ)c!wz(;uGMbI}#Y<=33=4rLa%mB%U)ALW;gd zpZ5h^Ub$vAhowU{UK})?H6ff+L9Em9R?jh_FPWI_7LvMRb~&vEg#76zlNXlSA}BL| zRuHotF@Ou=oSd!k-w`fy9hDIkhJ!k|Z8BKEKFv}gb8E6~GaAg%kfx3fHYw+N^Xb|5 zl-wFneNswo4SwzomfH&lg`5WyxkzeC`n2-BQ1;rfR-wDaR)7&na3jJWt32zPRz)Wz zR1zD^>O>*HE3%y0PKs7X*a!~kIC&}t;YreCH$-Y_gq=u5K=;Xvqhrr_xDF+0cZR-x z8AHqKs@a*oEh2>3=$QUId1c>^h)vAQzZv$9NHm}!C|U1KlRy(z3yzg=uVq^opzsM( zt?PY-chsqz?>S2QV(4%YKKNo2R3Pb65}tQPRdVahrFXU3t1DL!3^6qA_7UTz^|(&} zW@Jjz`M??^6i^zhyOM0~K*qk$h_CF;Rw6CXSZBbbyb#rLY2%g)M6a7$P{FB#BmHVd zKYQuP8=;eCLNrKnj+qdCr_4uB%kj{GqH!;kT(|Gu znw3Ja7x9k<&E6l6m~@)g@x@gCpkv+jlwA92ES|42_spHQO2WWaMv8ZIkx?L{krdB3 zkh}Szh5C@O6+^z)7|X;x6+D2nKk#@oKpe0n1<;psEBfH)%_7)>yA2`KnQzK{6D8fa zb%&)B5zf16lu&>o4}8Dll%cy^g`*{U*bOKh2s!4e*j)f;e_D7yA;Y> z9KGfOc8J4^Pj%7gjLJ4Ote&L=m$UDRH-PY-*O>ugW~A)v-xequvsRJG8uoag38u9R zA;<88(w5`$og>?ZRG=BH)B+n&_b!mTzKiFP?|ZG&r=Uba*A z10|T4Ud@RSOp%Guw9mz{IHxjoD)?;VZhe?Z+9>=g1@_L;=A=F_sZ2O#W`feTd;8aEvq!0sCH9C#?w?fy%P-S~JQoVQU#-Ivn{b(Ufo>+w ziGiAbX0!9rd27$)(Y_97*LGMrg(@BX)TzXq3K-(H-Qko~!zr>J38(X&dmF0h7t!tK z&VH1XKAL1JX4MUn!@5bXmm)J$Ku}JX=?A@Y36hJ{6@OBBf8rN!AN_7v-o-|Nn&0&O z%Z}@B^5`fWx4_xCT8rXl$D+Ou#L#3h@{Z3Ve{*}AM#`V0S4b3k0{gDZ_D%4B5nE~@ z!xQ(Zc~74KThD$r1|;ONhD-1G2kWGp6H-T4usc-Sco6i|LkOmH$E zZ)kBSPJUkh_WrOwBcX9r-FHRX$V4MmdYXCq$H`npZ)+8_!;W9i|Bfq&trcJ9^C=I{ zRe4v2*YL!XDq7wp(w1}~+?g%a;yzsytE#r|2sxN`+GaDupz|*@ceE9ArEo5M7@R+u9_DE)2 zS3wuxfbsY0*lcr+*i&ZSaiLrG)KGThDDrHA_+u%;jDMAHbKQZ8n=9BxFqG?j$>aJO z(&0+ZlUVeAo85Aa6L{1rmV{)_@ZpBcCVnJvUzPo)HneJEu*?(f9V&kQWsL>D{gtnW zV(wnKgKFiTtar6Y*JF9S{mEv!l*YJR44ud=XBa-K$xdbn^M^IQ;xjhf$BH**jRpe) z6+kbcZt9qa(ek-u;L(Lg=Q4FauxBTn_P*cgauf^?^m?x=)cks7SF2bOipAVcq5yJ! zR~79TSY1&(U{gd;d(JMyyhHg)NL+~K6q_!V#1j5!BbhFRTb6+Wv(?Dw=XSx=@V`xN zA#XI#Hzwj3qKq z_#;F|LP&jU543B1k#tkUba1C=3B7iC6mR}yEcZ#|fitYwy(lH`)k_RXN17oiX=$|h z$GxMbwsV$+kaXxVPDKcgiTc`sqW1#uvoQQv)pS=#g;8S63r zuGJC~am*MC*NCg@<{|3aIODO?1tZ1Xg(UJwWnfpH$+`s}uA_CryrJs8NVfMjEMh+U!+#fAm>%gw*jeZyy6oT zw~_^$*Jm_asnK>~1*h$xRi`(plXe88JM&|)mS6uyO;?-UN!d;z1z769U)p2J%tO_b zLQ&}ReVHSaA6T5y{4i_%Hz|QE3HQayrt&@HCERA@Hhu~A5AX7O3#oRAL}Yk5Z7vPA z*o?=Q$1eU%6bZ6;yh=0?9q%v_)!5ER@YS^>fziObn_+2CZ+v3b;CNf~t&Qn-brnVt z&KGp-0gpmkW7%CTFY%kPGXgm-Iei36xSNzpCj&l4ZL3%gC878}tke0b0Y9D9+P@;X zbz&e&A@0qr`5Su%TU739+=W<2x0zB1tfZ0(?@sMMjF<8QQIUl13VT&$usPto2t*k(mqS! z?nKQTomfWP@6-!>C~3zGdcik_R)$bMwry64qnGiV-=exav@lWdJwwFdKz5ViciLlz za!>tIo?@oZo#nGkoC#l-@wX9)Y=2l^j=NMz-n%QEXR5SB=g#eNk(^x7vYJ1ybWzAW zUl>*9p7Qmhg%^@HkVAtGb_tOf7ucETXr9%tVi=>%^CEHfP?w^W}a*_Dy=oUliguh5me1Kw>&K{j8i z6~?E-eR}JT8%nlPPIR`D;noWRmj&4${1VvLIFA1IDJyjR34bX24nIuTt}Pd?PcwWP zXglX0uS1M&{^py6&8AwKIRQ;t8nPs)Moz4op^B>kL4{~;iG|*ZCXA^NUzG>ikJqNt zx}(MBBTu*$;-Y|G{nw$Um+T&B)im`>fG%N(Mg|a9`~~P zQn?9pvICi!^`oY}TiXubq%=S>9=SHqWTdnrTr)0HLm{exy;Fi;Bmod7k|HySSJ+Z`ekP|Xzxk;zICn)coQ*nn9v!dCkfKS1V^dZjcnG}?p~YpxbR7dCMZ ziCad9-rk=HO_y;euimA1)eqG2i3>a1<0s1N6eNb9T43!;>%h=dm1{dJ-z?&S#-?rX zDEp#+RJIfTtqw9%5emxNMFS4~ma~iCSR*;S=gXP4R!F|_-=)j0@CW0-(8`g`P5E@f z)I6HPXvVVzl0#+Z4olyyM0mR4J0EJ|4~#awB**yUwuVF2=8UiF#LaHo46~rvh}E(d zHM$dh%^aPafJs9LFO5!RrLYT@9)j!UB&fb zdF-^FbJ|7;_qmtCy7>kx#^5KReh<_YBNmxXhP#!ZpSV61Xk#Ai#b2}pcr$w=ODg!9 zg+jzGI$Tq;wuk6$yyrhz`x<7%8kZR-+fp}Uz)F-Q7LyNpmUD5hmT)ep{`|+B{8NvI zg#x@d{r-jWBM+|VJuObKTqwrSxgdptL^WrUWy?&u*etaO_vhcG+G$Zv7d%ZHH`x;I;)hX-_d z0bRqA43%!S1W!+5!}=uEecOD=H=z=6WyGlmy_))fYVjRrr^x#1xCsO29ITYOO712st0^19Z^PdWp>eULYAE98y($x9PY zf-mN%`mOcw@lov6D`_l<(fOx4VLO7vnNam&>TpV%F z8WNljik~Ih?l!SHvD9{*zD@Q=aD06g+V>&x(`M<>@|}e$9?H~gsN|~=CoB$owSwUq zYK07`Q0$G%u*e9LZime^=n}KldI1$G{Irp7Hi4a15{Kx=!FxG}gxg-357@YAn~2X= zToEDE5la=uOtpK~@dQy(Xz}hB=Uk$ls^V1ZvaS#fn{1q-QO7{oW%=UdbL4(@rUDNOPVz9`8S^j!azIR5o!Zma`jB27IQ~DyC*SnPHK{J zwoQA4B+9ZN0=4+bPEEqHD(Mps*Du<_G)igH8e<%4jF-zNm8QH{1-2S1r=W!?gPY8f1a`h3OJvY1PSXdO# zSmM^YP$*DwsI%og3(;G4*i=w*N^sr_&9T)abI;u6OBI-aSD}D{I+sX^`**oDEy^_h(u_lGdE%2upVvu&$a+%2Uw? z`$qG!pCw#mF>0WiK$b+tPs&)`u^JlVMpz}7 zZeON&@y-Y;?2|I2QH`NIjZHOEuh0Wpr;@epGb1 zlPuDywstRMSlXQ5Kb_$izQi5p$mUVRdfFJA+Wo}MJ>tP?MXsenv$5i^q~RVOU>*Qw z)VSF>}9WbmEdoivze)uaJuwH zEIjDWJh(5@w=OG?X&TO;SJ<}-xw%EM)gq~-+G+Wihn#rAlF~QXQm=cx zm@wneX|3Lr_c{!-1TY!P*@lxcl#MbQo8R$D4Lhfn`sUr2#||}j2$ma^PtP5gc{DQ= zh8w0-xMp)^H7=>uht)~Rr#L8L+gJw-v$Pr>B4LPpEA@jkLl3t$i3J)roob}}KyhzM zZ%5Aq{~kdy#5<%VsbI3i8(buEnY1rd*l~DAnox6BU3lX$L)c)#wyl`1>$Uo_G|u~D zvxI4n9YnyR#Cc|K0XE#U`QAgACgz-ChRtE1QJ(6tf!|?$u0rgjqj^+jjOw2@=EqL56L`jOvyr_JR@ z|2+rB-9-W6qMunv!#`qq2KU+F)i`&_*{?fB4IM-(6R=qaisUHEhw*-ZNCCZaO{At%WG$=y9(dhKQ!79B%c^;eCzeUdqt z|8WuIEZ`@z(Li*F0z7!J23%`d2mp7!WPDWOn-u3`FGg`&9qe&&m^R(mA-EqcEi@P9 zK(dAPJ>X4lY%o<=UC@Yb!22ZPww*ey@8V^MChWQxe1}}CwdMl3N-OI z&;0moTF*Po65giQ>NDVd+sO&Mx^=3T7SdWV``y20^v3T>&+VT|uR;t5;mmzo9J ze?b;8v{8bRumxLM4vzT2LD_#n6w--(r1`qSyF*J$8B$SrP}>F0|Lvk$rT}Lt)1|T+ zn%zD8A%7(D|pCOMPH>r{?CMKVrKYtz^ z7G`t!{WRt@9&Gnm?oxgIKggAv@>8}5Ak8}@5;?Kd-WVMGx0X|pb_x;b(-;0%1Ps2} z)U1@1M3;fQ?Er-ic$wRfMq1Sh!z94#x3v z@J6-YFjQ%h@Vrkk=K@BdZ&!{#-6N6z>h{cIV;l!g$a73Alj;z#wVg8nqv783Ss2|O zb2Oj-bQ$3Y0Qz11w)4-_We*3&J@lrz;E6v~5&=#=YAd0nq#`BiA>c~jvhhEE zrN4V)>u4~C8vNG*8-I0+fmkj0plGlG{j%yU%5=5Ef&do|<2s$44_Hz8PnANC^b@vN z@fnix{a7iDjN=|CFXM!6!!ry{kMN_W^AF1imI6?H_?N?E zTDlZm^~5n37Z(S4(MuLPNX~C_dE73D<*&zuBf_Q)<^gO&K9(!KOS1nzTV~LeG?{{J zg(<(==gO9TcX#?ELn3E8dS!fwkF33x#(*NR0n+Q1tJlu1izHjTgg+1MkR_@e%sKeX zk~i8f3H=u3!0M}qa9O=S^0!G$N(79;)N_}$I{4#9)dFJCwDHrQ4BjEilRcFVSNE8ii4u=!x z*~%+ZlRabl_(rs%ev;q80VI4C9;7)qOv*aXcw;L~Y;RbZ`LGAM3&OVps6FA@6~%8& z?^U3FL)x*15tOt&ITyQHX~?b@>zqD5bK5#SHuv*YIGvgqKQmXlUd;#bi#9$NUTn;j8i`D*Hi*EKkKQ!N)i_04 zyYCitEarD1p9-iHgE_Qt8P_>Q-o3@adNaV8KOeSn>-dW6>dv%3f?v0{q%W2WF6Awa zLP)q%2#Mn3Vd4%*WD=BC)p_NR!_sA-RxFV0$!+G=BcWIp~2{6&eoo{fPF?Bp^ zbNOb(pou`%TwMrNPG(-Xl1t0^WB$doT}21wPCmBOa%4adE7E0?WP2Sk482}{Agr7GwCmYn28)A7pehYRj5@Lf|y7Cf<>W7?&uvW|l*&f_+9TB5#3?~yy z94>F91P~ite~`!!4lX3IkXZr(?n*vRiFd7MvtJIEc}}FLUD51Qo~SavZo(^$0ZwEydl5)8&UrkNS-Q-fS!iwjFep<7FbRWyMj>k1n|&iwZ$sD^?fdmvMxfiSu>UYNt{nZjGtj&rNqIgA026iOCe{taPY?dZnw(g$E(`TW(5!eC zjM3vU8~3bM?#;Jsf7ljhrY3-YIamDe`3Ky|ACLf2rke4OzxeoG<7U9$Ri89e*ankQ zdR%!=2`1xjx}k+XL}IA{K}qs!!84<*O<0CzS$ZM+0Z&cnFiMyu_+?Yga@1DbBmIjx zc_Dm$K>kMr@i5mkuTQ(<*a4%ycYT5Gs<$F~@T&{0NxaKAo1sLuXkftX^Zo}7tEbhg zXrY@YdhnDa;LV|h-ps?^a|NW0MMNBQ9tFJ>80GJykSUTDM>;ep32vaG8Bf4dO6|cJbY;%j)Km(-&$JTt5PMg+y zLR4XeorAGPcA$G_JKERg5nJ~XnM}kI8c%6N*k4lu@W=FjhZcz(4|RG%1+;sdTDk0CoWpV^2S9H#uB25^m^frR%l)oie}`3`V>84 zV7!u=AKD+i=pJvAu3RBaB^@$Et8I+z-ok2>g0*mQ-VnvhgsLB&pqytqe^ZzbM_(Q< zOh9m&%-UamdHN2@4gmK=u&VF#M9ZNDvzAKKtDp;A`dcj?$xhh(8*2oM{)J}}aD@1{ zoDXuul8cT(sbu(&q@Q!ak{$I$>$TF3$Z1q%QXDmp^S3f8#v78kSeBu$HDuYlRw;Um z0%ckSpfu9hzGJDNas`o6xKuIKI|LVm?_dl`KcJk2Obfu)PJL}-PSBP5GD0anNmp-W zQ;~9P`<0~%$>wphO=c&aY+BBSl>&a0I+RY9a9cP>&ol?xYPAy(Ypm~WmY6wmH8NC5I&76_7b>~VMzoN)5;O=Rp<4{x_@+5gAe zSBABySoN=*HsF|-9sQP?(PB7;-2D8aCdiZ);@cmbML?V z<39KI%#%6ueVKEc6o?0t#CojqR)+2RZf!?}wiSNlJlTG)d7v4E zpgh3$dWmD-{RwO)5>g%JM%x2`dffJ3!luM^eI~zzaK6>n6XyI3n^~yfr-PS#>W6~I zip5Fi8XV-4`eCyu4shn=71q$x%Wf8pt=^w|>F_)LliptSY6;oE`+7k(UymG1SWmL= zsW>0Xs-lqYv9drji_?R_IkF+<8!D6g#dq?TfJ zF*kl8^YSMqJw)q2i1NPe<_rXWlA1q?+_a#!8^NS#P>MGE`YU1=%j{DwngY@nte(oB<5XtpJ=&vS;Pds(h;;{h z`L9xEb9$$VnAuwpkepVJ&8xLU|9_r%b=HqB8vUX+ z?T6CYs6Ul!l{LmAh;AOe#`F)BD#u!!2Go6YMea1f`bf*dM(=jw38str5^Q(8_WnU007zhON=x!@I`Hp8Uofq)6?Hp7#KlJ7Z(9w0b9U0k)Jvv%cTK9XcF4(jj%`hQjc zWsUv6WHbKn@-6;fp5%!Kg`YF4=MVmyQh9+0lH_Lj4M|RxFfsX&i3&Xl4i5hB6+lmX zinMN+wU>~Ttajf~+Z@j94Sx0Je-5WUfvsa>W36sZH_rE_<2(=MMhg^4|7#0T3-omz z&J5Nr)A`&ROAZk6j-blPdcoNw|7YdCw!KYV#cl|%k@vmP}1{_^nYBl z=gT>W%l3_h8MS(i_5C%*&6z8~^FxUC^9YD`@2^t)k`<|P*7nm;U z!&RHc20GX|+c$0vO)7L;PP6FEk(d`beF9bKkavaMt=0xn^j1jYlWhI6)gu0!gt2B) zu|J0xEoW#>weDryK~>91E?*^X$Si;VCVlzJcy;b8d6{li*7yp&nIx9Zlck@;r_s6-8(Pwm#*Y~b_07<+X_? zg+Dgl`-#yip9C4KOP)MECxYz>r4)}_0o4aYaNkMSg&V+lo+X{oGiW<*Y**VYB+uN1 z5&O|~4fB%OtfFVuRr`I&ySJkgxqJ<}EHgPh_Ziah`@WZOl1@7uBrP1SXq9^&`ib3f ze)#7>VbiW-XHd|)>p0cNSUTR-*I~r6Fe6Mloz;gCPeNmzN68>0G0#WEc6-x-z;b`6$Q9LhvVtGf+XXTHaj8T;)S|3&MMDPyE(bnXo3yz*lbWf+1ZPW-y7}q-Zy=L_U-tO`T9so=5+gG z@KI0nkAj~c$YJc34)*k(gYclQHTj>fo8Oi>*#EelP%nd}O0{${n=vF1OndgEGRxP; zWdd(~U%N;FJwbvy(|oR;R^(W3r>gG$JfHG%lG$n8<2p=?_|SYU)Rpa*a&b4~Qh@%> z-$PIl3p(n!&hFU-TE0&^yPk9Bb8I07(SQBqW zu%h{EXTRP+tNl16=Q=sEEHaoXYHrberRWJU~#BAPYfu?UxZQ zgWK2ZY20?4X(^l;Tpz9{7U!8!>~Lv8>O_d^ecYPA^R~9 zk2Ih|R?e*nGo$a)u(K!RXQGU${Ap+k*)TzlCg@bbRTIP!j&VGWnv|{5o>vEVhQ_LqbT1-AgpK zpX0TXHb@5nQWQ4|u~+WIbp?mh)%!G0nn~?r{iPiVnZb7s<;XFP;PW}E$I~z%K=pGY zG>B=lbcdE!kS8}Lxa!k6&a~a{DBjE3kHKN?pCUFteQ5=a@2)s)b2;L`BqZ+nB;A<9 zbpHI{y;v<Wr-fP$zDS|L~=QIy@SfXdg{OFZ_i)FQ!`VmJ*!@;`_~3Ep(U1ms>oyVFys=tf zLaHl2fNWbod|K`*=OS31B!Yp-k#NzNT`JS_jqVwaB&4pGMFs84+0MP0?(MK($M2Ui z9$k^27JJe;jPvDYr`(Y#3f2;2vL#3N(-PnChN;)bJwG;hzXB&8c9y-HhO&UWk&mFl z(S_r;iv^UXL1wpxClwO4@AE8fU*LTq0sdV7!KP*m|dVJ9C0Wp-AI>p*Z8QCa5 zTC<{&YBLH61${DAnCpsHX8BXU_I#?_qUphbvl}0uYAenepg}quG?2*h&vUuf`;){O z*VveWYmOovo#w{-zL*F6^$xx0ucQIZ+bYQJL^4=#1tLg({?KkFv8;V?ZcJUKdXcCi z`=Uxfd&4R|+qM@xu4MOmq^XpaVpse(w3pNV<`t_&BIHAkv%2|ruiJ<(^|vPv%Sl~5 z@9E+!Dk`AACiE<~tJsp?BshvM>bE32sM>v1A9t43Wn#*ya&pM9;AcC0Q+%2v`*3eB zPv@swTB03{G?)`sn_&ZcF)-qqdRCGv4GzgA)?4Q3ND7BL*LzQy!D^<>U}-PBrz8uD zFP08Ha$G+r3L6w-z$s$HZ2Rj>0E~Iz`8%jLIKT7U z#E{DX+x+-JHO1(C4Bl|3E^=Gz&t0Yl0Vf~J>W`Ty zkPDGt^>cjQv$+!IU)|S2oCi3I6KHRub4L8AX@$y6;KL!DfrKK)OiJ^Ya@-)3BwjrH z{CYS09c-I84JH;y`VYyv)X&BUU68;IHeu~dT_)90pyZ(7xN!Stf7{{H7+|53h5BAs zz5(5?f|QL{;ehtsbiP`CQbH=Vr9jO+Rr`Qvsy*}4zGqnYN*TvQYPMX-^@&nKB5HBD zDncge6@oUUWG-s4snqAXR&MG)-AqvvDmCYJ;2kKH3MmtQ(>Lo;n`X9@M%LS;99qkij;2{MDRXmICun%=| zvny_cLc*Ks&wX=g%k>#Yv9zw*UfQZ(RC({3YS~>b8e2KApJZyTBE}03_tSW})Ok6V z7snh&TkrXDbl-+|aa@JthiT5OdQI2J-^qq=3Dd)lUS%DS0@_)d+}+lBImbR&*zHEC?(W=ztM^ohU4vtBqlj6rEB^{1LA)|>?B?JDPJ z?epflJ7TAVEgfIUne21EaihGtNOR8$)@mJtXZyg2+he66V2U%Z(KVx zz;U=n`=8FK0>!&g$k`5H*W$12}usm-53yQQK{;*v19bMMdOdkN`)(4gyZ z`}5~Y#hPA@xIr+hy}Js?j%v`IAGQTIvB?LDRA~TQ?r$@(7ipOn0|&ob;7)nEVPLk) zTdSAwh!-BN<`}$HT$g!|f?_nN#tg~kh%Ec)VqDnQ_oirV-xGKsz{)pjwxWFC<*>b=0g zW0iukjQ&;!p!J!Gsjrd>aF|+e-7L|zWvHDFn8EBp!fW<2w@1OGGt~Oa5H+0Izo{kw z54}Qam9lgSi#|Siz4Ir)j^A}(Fp%25ygy=QjlE{;m@d``yAwjtHCd0JArcre!xMrz zzE!nR64CdvnFI#9JtP_~Psc^0&ws}Sl<+Sccr_h9dDuI9p+D1hNs@+_SXE#Ta$k8} zS27c3v$QqKTk&erC@`+$Rbato(M|N+uA)jEqXceFf+$Rv%k`zXG?sbQv>8!(8)IN{ zR5tMMH~LpKDCL`{y*{-=OGLmlhs(;CswZNptN$I%N$f}eI7+LdvU&qS*tZNI1MES_ zbcAclIF^Q&Q&%F-a5piW?T}R;q-fT${5jgVDSm?iQR{ST8=KX-VnpeuKe0|Q9J(WV z#)#ha#IDWSa4r(q*4^5c0UsQFW;qLIYDnOwm(P|i?O^dta zrz0rm4|Js!&mRV{&JQJoD*&)`B^g6-omXB86;_x%jdUwyH+?4*id!Rh3l$lkc6nUI zygV`*ETb}telL`um=+WA(qQdq`AQ*9MQP|HiXrV~FKaJG3cJBeb0?IW1$ZrW+a z5m{FKGn~<+g3(N+p4HQQx@NNecFI({bE4QBq(glPxg?zK{GDls76Z?GSVa%~CpB=q3?%BRuo6w`_+5NyPvV_u}maQLd5O z17MqWI&ea}E!Cp$H}y;+PV*vSnl9zed?S{)TUQa)mpS2|2|Guy&^f1Z+)QGLbERX< zil$AhDussn`%q0&@EzmmfJ2qvkdwGi|f9V z4$s)7=no?)%sHADgDm^Tf>Hh7T1oiqsH2oQ^3V42cP1?6oUFjZD199u4oU99CAr!a zwudY0nynVVKF=47p%OL8d|=w;g!rPRc-di>P6qVlW{E?06GzK0_9R4ZEu4th%zXSl zAmF^;wPO#+e@dox0^nzO#Z>Gopl(gCzLm5-;~31E6OtU_iEu4v)r+Ol1G#Iny0 zL?~toxI356Lp#66op;Iph{Wf4*BJFTHr4jM7Lkl@t~7R9AS_r@s1=j=S=mef$a$o6 z7gD_T{-FDwZGP6{5F=BXJEsG9q;j6gJV6Re#uN$&=e=ERGe?JM@2?p|$8=es17cO4 zk2qScI5UZlOfx@jmCg4u0cK{put9PkMWwN;y)Fg4kWfyV(j$c7$aj{LuI9TyY%yC@ z<_NUwDb+ewPiZ=>JwG6qsP1qck`pI3@}?O}_@eVK!Ai{TRBGy9%)}vsQR#~XWR#+( zv>a{M&*Mnt)SKsDd(LDXatZHAv+0o2C*oCBZBILG^VzerOi2*%lUw&84 zprdXBya`?nUm?-|j$L52^vpg+nL1u;=5g|w*%VMthYHHqLKNy#5(d{`|Nw)0N+N2dL-uQbx&@mFk=y_+>BfYL90 z@YlxK4Y;J>AkAJcE~MOQE_7ATnJ3cn5ntaJE^{*bahkVQmVmH$iMuA0MUN9C*QPY6 zgNw;jz_`DKu2wjxfcq^>_S{hM$P971BJbmUo)Cr#QBs|Ag<2ekJlaeD{pC%k=Y^KA~&he(*uG#>0JuLbp*H2j>EN~F~$hpL$}b5$$cGYBq0QxFrF+I$=8>^a#&pU9 zRC}W^LR3QbNeejiINwU5FTjU@A5$a5XfCdc1iSAjKNy85mK?mcyVcI~H+q2(zGGDu zeZ)Xs>Gjvx;UNyM2QC}M9=8g{SATwS-x-hT87@`b{%Ih5Wx;M#&KZLV%cWC{*5|%* zj@k?@i%I$%$rK%8F1~Xa@Yx6`Ol2uNJgzof304A)eSRZ#1$K$Z?~2;b9)o;8+FHHY z%63DNo+x(WDm2^E%r>RAJEi71u;8v%bA}iK6bt!`HuE{=R02jd0cBF}g4_uf2Z&b7 zrSlLXSAvN33b|fF27xu#6`7`;!?cSx?T9yc`j!5tRQYYUswX>6Hq&NkEQff*L;!2r zZb?_2)x0mC2^o}+7fLzIuN}$GF7J{Ocbm+8!gbNm`ukNSUfF}B+Jck)52z>x&+_Jx zlZ6lv9Lvn`WUINkf=vvbkd{Uf7|8(j4o@@kjde9*m_01dmcx@MLSTVqS{qA^G;h@f zvc1o7v+>1*wQZh@H}=Yab(larB1Rl?>h-B@;vU&Pn}BT3URj~{>=?gjUCgR8KN=f% zmMo<(9?t+12uyo zZWA2by}FC_8RrjiJFHt%S7L#P@hjwYc$^>kmVr!;K^SeS+qK$1bspAZm_)6?pPbaO zyNg0^c4ghji=|j)f5v`&JyrT3p4VE&v^82v=f$veoqKJ)r`_(>cf^=I7F^g^CLI$I z69xqPqSYnPDNS9XOnmb%STI3hWv|Lng%&d^CQr63c^u2xO*@Eab%dp2J7}ocyF*#Q z^8Wa+btaHl6*H$S+4^u1jK-mfqNeD;i0ZcaI0C-b0rBB!*YyGn$s-?D2V+2I5_yIT zTcY=KepnHkB86Wfm^%IP709HuDmW%fbVIe1cp}|BIf>~c#4!ES9fPZSd9M_ap{HpS zOzJ%1w}wwS?c{v9$=)z&S49zmg^ifYKaSC&*;%sE{ue@0Y-_OxNK(a-G0~;+yddr8 zW_-8zu+cZD{Uw~=Gfmz8M{jOXJ-P%PCL zfQ^^sm;NX&2`1PZ-dDk;mg6RV%&-#k;S{6J2)X9Lx-G&|WX3U9`uiIR?wk!XqG8zj z(bT-hxc*%tv1oRzy8JN`$4V*mZ)a7X(1lQ z8rNN0$!Xh)57t}lsxw=x1)ZLPY|W3tQ>oR3-y-NkSV;Z;+$TsEiEd)eKj-2!T<6+~K+6W|&ak;nY6P(1@OHx0mniXR!R0ylgbSPvk-kp0+Bl z=AkbJ1lF@s{r!jZ%=*m2r6p!=I1tzPb0Nd{`OnH7eoqE{8udI@+<@xR?K>kT@Dxe+ z{U?T#2&t1{S*<$O&*hEnIkPRa6=9h&Q96j0&u_1HBVJ<(ykp|pMrqo(3&1N(uP+u6 z4e}8dMWiH%xWdWKW}o#G--!(0;6MD7Icbw?Ytxi#qpRgMG%xzE(=i}0A@#LV=2k;1 zF2C`8TABOO*)>#Q$2T5y8-nxp=*+d=hwOFSZ8@ zF=2vwo^A3ue#%vz`#34xHJ(i|vCkQum>ak9u^XQhU(r4|&x7Mt-_Fse=P8SEjIcd5 z(5Y$!dQgsX$u;}uNvk(AtO1u(AMzK~c)0BmB4=2$=DX~nv7~?6Nb-y z4ptwnyhx_(@_W+9?b{RNZIqU5*PXx=lgMQqq(DQXZ!9z;BRZ4WB*0l-=61pWj!CiD#LdLp(+Pb)Aq$vP=!$UIj^*!(5o=52y?bAN2?tKx@24vm3RuV5@G zv$Ytma8)=Kd#>NoDz}qxhU9PNC48CT1wn?O*w+~cQN^Mc@F89SJcKaxrmq1O$P6(+ixeSb3?7ndj&Q8cBH`$aUZ(Mrtq@2 zy6&@+dG3EL2T+?SO3wguN%KW*2VWn(G@IZO4ddgxI?wOuMETKrhYy?8tDIUrXy93Lp%3Gf({E1hgP#)w``Kk#fr+P z+)HX{JtS7BH`ZK^3EXS*ti~`P3p6Sn_Oa50CsT7AuLq29eEkZ1T$0{Tco$<0gB(mw zc0J1U>mh7@u`cXGA(}6z)@!K2QAj#)5Lr)$HM-|CwiFSgbS4;IH{pZi3>)?CG-vr| zOkB&jghmt9c2>3ML`u;?QYhhOLW2+{@1col3ba_Wis>7NjPR^_SCiX5*=z)wvbIT+ zKDV*S^sj;m?-qg>zE^8@YH#E#ooy6@1^@$poX!+07@(Wit47KGaJr}w3EZ8_N{-*s z=&Cm-l{TW@!1*8=@CyunF;$6$asT68SnF9gv41N3-3|01qv!0ZT4+Eal4bXDs8Da5 zHF&@@!S@xbnRnQ(zt%B+`|WB#Hqie|mMS`bB3P!ZGJHEMa?GvA1v|4l)}2nNk#qf9 zO;D zZWSgFk@RB8UC-f|F&>RC@IA$uc76q&C49q4aKFg5Jd@DZ-&0m_j9 z>ggSlXGvG1{siw%fGgnh{6TYT<3pekiwZQ`??BhiQ8HR@Qg8wCc*(H5Kmf=KU(C`D zUnEM2BryN0^gUeu&hZ6_-((~cm7Rb>*oHmPXJRi$0zyi5@p;pEe(DTRo?ySTL`}1s zsvuvvG(4AA;cL{6?l#DF>izJTH?dNEsv#RoqPMG{h#mN@O*&pp>Leg73yI$L_JZtNXpiVA!QY`hCA@X85U0ZCE3*(h*z{rakpVEmcIQ@JRFuXIZk)SH27)!qx-<3wzh@eCtUe%Qf1 z_TROw)Rolt++{FRS4c)I4V?o`+Xb^5j8k)#_34TxS~xFuCv%M!ZzpzyVpirIn?T@l zUEpv(5pF<%MAOG;DMN;1!-tgx1A~a?M(8@eqiCjn8|#Kpr&}kGe-yLA9x~!mC`slc zGogERoq#qM<>5~Yq6d; zYY(%cXFh4P18+@NDksIwe`HZ(H=E@Xv9w6EB34apkBUGd#krrjlV2rhRlDJfi!sSZ z*_!LH_OgiK*Ti$y2X3qh8=uNYeV?$=f%K~%(l4aA*lQ>-t=%BQh@nwkR7pAO zsl%3^d1uEUaQv6P9^X%+i}%Tn8gYU=r7HXNU+S_Opx+vFs4Ir@HpD}BcyIplll)L9 zkSqDa(Zb~M$XXZlTs}8mhdU7&b$K(A6C0YaG z(S@Y%%E_RK9sY{UWWCd&_|p2{55(Ck=^+-ra@_rwY*>LXR`Sddi~4ZCDBWQzN=wy6 zLGHUI0Dgr~1XrZB=iPFHHHCgFHCqr#SE5dySgF1lqT0hm2;8ocumXw+p}%np7$uR? zsOV}OE41Y;R&0JQ$@pYWN-yiz)eA90o_{^Jn~J`C(Yn1D^zn_S(Yl&N$$2B>aYSz% zQcC+R6@qVCboi9SUqe>|-y3v4SW5ZIupeRh^8oKf}fN)+L;AV5{Kuq zM5Oy8I`#lRz{%2;yYq0T$?p&+M$J3iw)E=kETh6{ zQ*i{jS6vVLeEq*Baar0EfA52k<0YpgM3R0IXMcNj9a`1uFr3&V{H_&J+AZd{>3>NH zEXV``jyrMuZ@=IMIxL2_Tue4=n6*t?+*XQwKFv3s2!hdFWR|su!6(P%rpE3R>%R-{ z^~ig%S`BjtjjEz~xKgxpW+)lg=h$}pkR{dnBwmjsJp1h@T~+d+KA}&9;Hfq}2kT7#RH&8w9EvSz}`E1|LN!7)aRhxQZSag6A#oz>^ zU07d##;0F$ewU$ck|FZ=D2*DgGao+PiwaeW17*}DfF~Io0l6%EISaiHx@*Z%P4kIm zY>Ntdn??oq8lgQ%cQap;_bAlX9A>>V3V-|7sBHDp>u*&<{(z=dH*Q4@NLlmmlo@<7 z{js#wSAI2{YP6%PNcTdqpTs??9LlD8I7?j(NZst8T_AXO8o%G(roYEp?yK4v*F9Wo zIc_h#?$qPI%r4!xYQr)|K`WLLnTZr$;U|)GaXYXX^BCMw;crCEk$(bqaj{E0#)>%| zM}?OiN6BhKR^SsGz0ccp=*&L+rotX@UWM5SCNZ}u%zIE7RNXrJ>v_FjXX^c9K5775 zA{w6M`*@gE4P~Lb!?n)0nY4aCn2$vVHY77~JecFY&7({5&yqkrvE%*~V0mup8Sbl8 zi#N5UQgN&>MJr-@2TbmiolFd{Z|K5P|_Q(YH;TA(Us zSn!T9J&p(`qFR3bepG&zFex-82!Uw zeRveiX$~?o{xW{6TtmP?6{?sh{qasp>*t&s8ih{@ z>!KIB8=b5O9$N?oJj30e9Y-0^o@X&mM>eF;$@u)tm}pr4+j0N-+E8%n#K;A~+s!a% zJlq6!}?wbtzg9bROX~1JjZiTiQv6|aF+JkLR_hu(`;?a(GanroBMlGw3Phg zz9`74@@Xr@9S+{GZNV%Jcw==xuq;j2-y@okOcDn#RF=CVd_k;>Hr;3r0^8@CXlmBhKwA1j>H?zzE%mk0PSoO*qDw$(FwO7+5c0@|6U z?ul!%qEi{0+rx5UJ?ikHP_`qzjjRC0!1PyRuDsd4AL`Vw5zYdLQi~p(QxrHDgU|Hzw8Z7POK8K18$0wKIq= zXKs3x+cXp=y!TB!&VTEpx0-k5s|=Aiq+E_jTA4pG$fj~wk&&lePsCb=a~?Z{g(?V8 z<+7!9E;_MU!Rm5RWwJ-gbzr)ndfO~9m6ecxxF}b0P25EObabw_e4WItg-FLKl5m)^ z(X6I2g?9ScruJj>SY_a#vTJ*!T%AmGaUjbJS=?V*Cs(^Yl;Loehgf*69?5W7nxOy&(>;A^PK#fpEw3CEk$hlEU1tRcr^QM>TD&E_zvRh^cy95G~lrmF}P1 zs8;J!YXI5-#_|`nT|PV%U;P#hG%TME{5B@Mt$eiOtRgU$_ zdd?HKv=)_;)8gCQ<27;H`XcF@0j-|71VOB+MV3?lUEkh10t&r%+S;ghbtn>EYxPrf zyNvmJR!3bOLw`P%LTtVB*hnn(P6ChSLd~nOH#FPS=hX{kf+D5a(ZcEip>>j|@GSGP z!-aTToTomMt8rj#ZH*0EiHK%`XD4N9UG1a(Pf!8g0amlz;5NE_?9q znKC>*t|MjeR6b2BncM$U>8Rff-L&jQ5kJ&&xcH)btMzOZ1w#+f*Mn+F>d}sz#o9+` zJ&OUZTa&o%EVlxbaDAvKs9d5L$|jyxRkEi{(04}8#*6MI%Bg<-3$ud5_VZU|(ba=1 zBm?ry_;fOjoWzd?Y*HNM+p5uEt%QHWSy~bvt8L3U*84dGgB20FNK*w_JyJ#bE0+gn zrQ=cO2v`C;McF@-qa?%E!<5 z4qeD1E8e!|rpZBahO9J$)g}@A!XqW6E2aUv8`0$m;-%HSQ{;&ql3k*iu*S5yUP1Ox`IsV?0vzgT)K#+DRiRmg&p0(T<;YbTiJb}Er+ z$UcUEiocvTZoU?bd)D->JBw`|HoyZU_m$tRToJ)jnIuPF)A?KtPt&$T*XL9BbeuIp z8ZmS>jxGm~idMB>lmxVL#eQeDj6K4fytif>eV!h0yssv|+|SuCMJaVB6rlwY(O{a& zXH0JpM{WeB;N%^_Q?3XDQKDv_X$!c^E5mGNi6p5r2}XK+7svPCm|GE`P*N4Y{b$e1 zsJHn%3uF@z-Xh9Ir$NWrmZ*$yLBM`=r4IUawMV_pTA0--(C_BOLap{;ZyY1xp zsrs!VkmhB!+E81RzdinqE4k~{Ln#Ewt#cdrtfiu9gw9`}u?an8!{CocE(a)a>~OdD zAAvCR?5{|x<{wcqn9VJ5DQyKc2L?qLv>r4HtgHK}+ zwhi2R$+w2L7`IuYlSQ&--rQU-maFY(Hk%>TQ533->a0w-;957Ot7P-J7E<9AWULf;5VKotB*&0NG{Dl} zd3mo~J&vTbupqq@K{VA&pA8nPmG0aA92_wwVN_{E;2#B)x%SFp1g;vVapGlO*|y$# z7TDy{pOeg{ak3PuFia!P$>B-gF3-y{mkG3R%M&EfC`=WPnCw*%_dJ3N$~{fwl&h5b zWIcIq_9x(xmW#rs^s?;lxI^8c4RzjfSQXEGPeYgH7itX5J=TT3n4KvUE|XCNN(y9|w?Mo@MiBFn4%zwe$hMx>&12x!klf-s(_v za>9;ctp{PY*K$FI#nbErHso%{c}vRoQ*-aK&bmHb5%ev5#C=o8c=yChBOc>av{pyV zN!YyivcM*3v(9loVpdwbsiF%mQV3Tb_{E`Urm{#!|Cq^_7^wJO_R+y+$^T_k+zsw> z@^5RcM|QJgk)~jQ;Y{Cs`?2`1K)xE_Cp7PZH};gG-|9=_+(sevTd~&cLwo(pk86PT zU9JRAQoz)k{R|pQZaaF*x*U(eO>VNb)NY1cnY6%+LwH6pjqhlkskq?z&fs=Hn67{| z{rnVaxTRL6uhnFCuO~nu{Yz7m%m^j3lHl7PsF2K4RCXD7d1zN(S7t%~pr0Rj&o69> z(V5AcUkvHgYec=Tvf2$Ihmv(XlyI zd9T-*mp*G*$&ri9t5dEShHG?}MC8lvsLVp*Sx&iCi*D2Ed3=W0eSQE8ERM^&bH{b; zg|_PD&SXx@J0B^gU&3`4os00L#7mr5X1=6&G(up*6}ve-I#R>Az}zbYto`of76^P^L_9Vg;Aqi~!@*%jFX6=W|^qX~G*juYJ+ zWNIKB8b}-(R1c?FO2Pat6a&@LcnMYCngi@Ny_byF)AEo;r9J+uwo~CQ<@?0+GbdXB zyb^dDtf{np*r<~+ITnK@TWX}R$~2xANTj69z(zwTed)E^O(%eK&2Lah17&>C0(epP z&Zgy+k(70QXc`VBd&l{Dl}8Q!HX za=c9P4WIFx7MF=YX?8j?Uj3BYYsv(L0QeZ_MT}>K7vm5rFc5KismI0 z6i+35&zDXcOSEJ8Wrr_gBnJldjP{lwq9IP!JzL7$xrpF3gS3h4-f|!3t)GE`+CKbw z(PWQpp?B3b*)#I;9^OmLj0fBA(tJypo)GT_xil$C-o|7%;R*@g8Lm3wIvi$boumx< z3~D=)*7zqKaMfEDLc7qI>d~*z ze30Eu1gBn1Jl_!$Fp^`;9CS$YO)?s(5%%<3(n(8YuZGfm7|T+NE8{a*S~)@`GMxm5 zr8!$(WX#``^1DP7Iyz;r@5~?S_Sz#Y>VIA@juYnN$dWO;Jk4`iz%EjSs|VRrw`Q`a zw!|jq)!eS{uu(V-kS)IcB(Sz_w4(_yD^!2oZxcGtmuS?c(iJdnGIf=$IQKi1oVXE* z;oW<)9y_DHvB06^2vxTCf|slLXp7(*ldlEpZ?xUB1$?^HSC`oKYxjV@VVwEu->qk0v+SZ$BL5H>M z1;n0K(%q6xACm_9r2MUG%?K$Uq;4nW$@uE8XC@YB1 zAD_P@YccJZyKb_Vmw(~h)NH9)QAC7r&y)MyZ_QK*yL;;7I*fT$ zOZUugfNFD+awJ`;lt25hi}8*XF6+lYZzmXXv^8^n+nU8eiAWtzRFiojc$9ut30B_!3FUu&__f+$j@oD0kP}{=;SvrN~q2*@k852GG~I@Ar!>6Jo6IKj zuHxR2=8is749)buhciH^IwlK$qb5OO2dScXG8F zc1^`b*_%{=oMYKGQk4GKWoBk^#rExFvhky_2g-(X|GsmMI=-PsaoXgeIW7On@$}d8 z#8`|Z&fDv=QMiEb5zD4&0nqeX1=j+vPL&|a zD)FJgqEOW?)&ZWOI7~D=574X=F)ST2aVq%7t5Y zepxzOSbQmw^k=_`j1dUQ3db^FS*)iuQ^nWJQ@)iS=#2_ts-GX|qkL zP~So8=9zh!pDYT`x+3yaeRS+~+eaGy%ac8fj6hf7)>r2Wp9Mw|eq%m6XeuQG7=O(c z|32nyldiAQELn>u-b0&+hsXIohL)Z_{)1;XLm!g1zCaU``eHggMQV(m&UXw0Q&uXP z9@p9{d{eS4X80F9^%P?-Z85iiJ#YU>1ZMUcVT4-jsK_2uP!cU-Kfp}9wdQk(pR7BDDxf|2?LdmZj*O6^W7f=Q zd^o5GyH}Kv!K1XC)*OiUY^r^`o=%&>D?kqG4+twqEPjJF{r7u^}WS<$UzhDaRezFeD`bMjNy-ssgO-lrrhcWLAOG;vh!E_MC{+Zay!;- z@CXd8JQEwl_sL$piIYD&jPHDz5$kNC!WPI&;@x$O;gj7bet6_JZa>MHn9IwRXX4RH ze`IC+JWmIY%JXe!Y2aX?PxksOvC(pOno<5?SuI)kJK%UucdroOE&v)Uc z`!~X8L$w69oL{S@74sI~t1zN0F152^uWHRHfhBbyg&3=7(rJjckxxb;)IajMM;nPR z_w!5_e0(|o4v<;x@8frf)=Q#L^nKIP#%my3bRLVk&Fzj*>)km}_~Kl>^})upWuMD! zoE-1jOG6_iB+lN)A2-U$OqxjudB18N9|rNDcQC)VCSy6z?ioGdw3exqt)Y_)FPcS* zxuNZM@8d)sU)~Jz6dV*-<09zCfd7lKw+d@(Yuj*F4QVM9XmNL^xI=M*yGwC`yGtn) z2<|S$i%W1zf#3v+J3&KnciUO(+y6e_@7X-aHIvLS$9VO*DQ*Ty5Yv9q9W`B0u!?Y> z2Cc!_`FAjX&-YY|tc)j1z&Z}s-x*It^jBYKzzaiOkls~1d_Lzm z$?2$8=;VyEdF5T0M+pF&H%NVWbGCoWAmUD+AJ)cZDMfv_SlS8S-KItOUbNWQco-IbYR;R-4|U(^^np&{4V zlaJ~uBowO^K!P>59#z^nY**g*Y(aiBb=9|90zF z?LteJw3SX#ZBIJ#K$w({EVBf(@oZIG>(`ykGh!ZQ!RBp?8It!My6pad5L{QayX6tp z@wW}1{beddi5IK@-2`<>GcjF7ckHmT1z!wm6t95_BbVXizfz?f^eq-jGz$%pT|V%w zk>(NAf&u;x6s)iAkK;E*sv?mM@L-k9_l44-;H3d16-D4c_DX<{qu_VA|M?`}$0Nbi z?vU`$O)ivggN$-ih-=mhE^$!tJWIFf^UfB|O-}6M5~5cEUzwP{Hl;7&Dx9=Vu9(cy zUXkIl{lewT!>Tl~VXQb$^5xgrwO$-jM6e8<$B)fy_InkTA#ygj%HRJ{A0Y2ZKV-J<^@AQF09Az&dxBF{z{nP?85NC&~BQ|QmCWmE9#JNb{5KnK0pygXGD~}Sj z%e!P&MwbuX8J$u06Q?8JKlR2b>Zzn58+Jo$cl`sB7gg$J5gKzY^ znv`2ynn;0Yx)sHnH zG>=qVt4yKS^nTt!3z!{WoAYE6B;Tn2Dg(~~f1)GSl)OXyX*^TSLn&GQ_4?GVVI@u; z-oZe*MK}h-==`#1SDH=JS5HUt9=_Y#i@&Y@*B)QHK73*s%GE;OxK0*-R3N&`K3;foqX^+3_S+KrHr zg+6YrjFCC~Xyrgm@O=#t$iO_#mCeho=dYrdma4vn7{~;3`&2yMp+Ul7nTT+1 zaatByrf2U&xiI}pNL+G*>=l1(t`%C$J6U;TOsHTCNzMJ3ff&XqCL85NokernNafjx zx;Fm3W;}aB6DO*ljkzDtnu`5<+kJbyp(Z@ zibp(~?^6zQr{G}wBLOc&j@N3&?Rcx(*oP*&4`K*ASj45Z)K&3%tssp9K7Cj~&)N%8 zLT|$Zyix!R{%f}$+;^YPjy4VJcFnd<25kga}4L8S|cZ6Rtum?yes z2~wjdwD*g-1iBZ;s(^YwkxIh`fI-pzVdUa^0x*}n<_9UefWE=In@m?2p4|CTf5_mb zu0vBYX`i~r$m0CH6^+L^PrZ`iiZFP<&iw{;8`sJw>bkmwr{l;K2SmNGglrX|jwieA zeCVu6gSAY2lrC6u?}AFy?S5)+=nO-Ir0Hx?mI9stwCTpZC$2%M%MpE09%Y+?)|Z7m6WQWcB|ql>AlW}(f8PFi z&w_=Agj5YaCXh>U=Y5>O0G1^}c)m3%nUr)6AOYXzjySs_@yG9vFbq60_r0R5?3jQh zZZ}RufGYf~&BiMVQP7L*dCu@|X@!l(N20*p=V%*D3i}<3z`?oH1mbb|Ay;WIb;uO8 znAzaBs|%q->P%FKPAX=V6_`$2Dw|Fe3;a`DQa^Aa7RdJ`Fd=-mAK6ePkV&hykZCiv z!EYzXc)B13E!}=95O5JP2=^?UpAykUDr0z;NJ2~fNqj;cjWFD^Ta@>tp`~=03Tpz_ z{NWakNeRrEs2y2$Udu+FeD=xa*GkwhI@-)fe&JGbSl&a1sq6+?j2N`KyR%HK7I%ux zaKpb6iLSUTG5N6=eaVHJ^oT@?rayXP;kW1Q-ZHm4tv30&e2rakINzQR&^?%i1`gAq zFik8=Ag9cmxk&2`iv*y}L7!JW-2bzudmnzO^UU`aLgp^HI!IY|&X_A%G-0 z^rQ??ua_Z0e1&5|oRU&C4!d3a%E~#i;nyE4Tn2|;cb-M9Ld&O>-Q|<1Wj3wjA~N3 zMAAyVSq)@f=^?fr-}G}$7YAw+w}Deg;dm*Gon;^%_M9tT#Y~Qhl0TVQ;A2?BO~E5M z4(y0WrjGwC*2cIBgeXCBu&nB6d(%3T49>y%A97KnmsLj?<$By*2#=fsWXF9_1yTtW zZUksEqo(}EYNXGd4z&wf`*se~%NMGo&fj2;A1R!dGJQVK9W&ZzB-KCLXg+T(s!!U5 z=C6~MUAvI>8-Kbnfk-SBKq-*S*D`x5$>Ge|18La?CnH{Z?E>`MzxFigV)DOj?6J+ z#l>&jw4>pBF%Nm^-`~CVn5P3lN?1gM#)tt=bHdN&$V}L^wR+8B@`JD7JIrtpw>s8K z<&wif_A_%BnR|N2_ieWU&hZMtZ3uDjT*pW#b3Q2~(Q!ObcIj$lp;F2XiX%+MEOEcO zKW~M{k?I`$NG-40Ec1@2A#XTQ`aE683)5g+3dd!WCXm_h1Tb;uPQ(j(Q$fd3V4%?z zbVl4(1Bo>8<>d2JDY1TfIlU_yDQY+FOf#Q%V-N*&VvraJHdwH9izn$y`2q2lSZV9D z*>6lNJ}<5Ps{771m8^S>a0e}6vM7CSV&@X4!I4wRKp)vkhJu=I1m=wqv+paqXB(d% z8+2NnDBiQb0v7l%_r6WZ_bJY2i5SF%$?8osF}^pc8X$1+L5e){l*>|MPi)o*fpEmL z7`r;yl7deyMGNGkhA`4=vp>0oaV&s8ed@{^+n{ci+rsNEEty&C|1l(B1O456Pb9X(ZHon07%X>W<5Tah zW-(PUykaQg+^PU9!OuUM({vmpvy$+R5Dd%vvPt;B>pd~AnjC20=*mc)@FxV)=rBtqkwOAzuo_`FRU-5sj|LUcjzCNyGK3fZHmi+bf#J_fHvX%bM=M>t^4~BSY1gj$tB4lygYKco8|LeRyQvTWMnTKtD>p{zj*V8}q+9dg0x_!!G8(Y0#ZldNZ?Ooi`kLIi4R;hZb zG>+O0osY@FXChB8RfN^Ts)^ZLR?Dxxs8KlzQAbYy)Y%_T{CpJ+ut!L3{qV*=X#)H(ZE z8G_^EJrXa;4o?|Ye+clAP}$Hb84v;S%I@7ZZFEnxj5Pv3cPKw$Wpb`3f>agoEZ$)I z2fkP_t{9A`E#)sy6(}m#*gr<%{14Kq-d7pcpEdJ_DyL-87x+??YqZQS zaw*t;>5MG|*I1Vsu;)4D~7l# z%l>OSK{4SH+%<_oMrD{dg_04`N;IMZ(n~YPS6(c5>WV`Io7CvYY+j~Muz3{9LdprL(AU^FzEOXRJ}O$#1ND$@7PSs;FR^eK9&evN2QdF&pQ=pOA#!jR0DPMU-i-qLiV4H^8`h=pb zLurT_xmgy&7|e8ZX*ed(1#Ziab&;c%HU+)r5qx^w*#1k_ZxwJ(u{oeJwDFY>j6nlG z6o}MZXqHoC%%Y1ZoBAr=i%r8Pm|)A0#)f2a#Ug^u2#oiXG`hn?A0_@)F>Ey0ZFNML zCUNAZ|3Nb=jviXHe*W#q8YkpwP^nIjUMCeUgOg_8Pji)-xUtpVooMn|JW)p1`(xci zVyW6TurK?gf??5gyC69>yGv4K0KLBb;5p0>p8v=3vj_M8BcPqX%E zcB6@5O2rAOSu(5eR^V!DA(Po8Q{X4^oq2}mND*6sh&Gv}SbYZ`R!^bipy!_}d-t{# zuGV)s+^oFeH#BqPX3YxDMTiBn zU%F;>6IsnQO|+zFxaey_`hS)q)*n=CqrCZ+UMHq_>HdAXJ4<3kiKhB7HWX8xD+Il( zHhuL?1((?^FqYo>VUOtlK1Z4p6#FbOk(~&}a+Uxad!PG9aj>@;kwZ6 zSit1OEwNc$qM27hLWWG{)gN2sj*6-+quq>2%)n373mFzxB^#<(3Hq*Nc(8Uljm4;5 zPkPT$?aO$(u_ zqHb>A-~#2bgGrS%YatCO8jH74;%ZWK`n5w)#l9SBfoy}|G=86rBL8ESG>Od!KGw~G+!e<%7Fa+@- zMYt65=ZMY~o~yEx0{hGqsm$~wiSPo%qoQPKM7ht(JWttbx@N*@6X;096?Et8etE_e zeBFPeDCS7BwEf5UaIh5}!||lmlMP-NckXh{TG{qhUFhw~9NB+MEe9@%4+|2I=cbRa zS?x|gmRGxvl5scii+2$6tS>RpE1$8EsOt_#SF4!@@7RaBKD(1ykrcUsz*+R0RyIQq zZp{%C@ovobNY*PlOoq++YBq#q8Is*N(yqGSsB%*|K_f$g@v4+9`#D$F*$TSe+#f~h zQPj1>SCXDj7I5#l#h;;Dq{4xcvoXDHWWQP;bGYPHYkqCo6k8@fK=+Ap+J#+*waebq zNn*#f$_C;uwB-4|=W(gu-5#7BKqtgl)>TF+Zh~xV=G8vhi2*ElZ|@#GPxXPor1BpwD(iy(KY@Wv6XiA<&V^)g0ZGIK#ThOrwF*feFjf)EkcuyJu~nY4s3zF8^M}u+~|@Au516zJh+t?Qu`f zA9=92s1 zLOBMHrsN!=eAyEUBN$H67!dIM3dt5@1HS%{Yu}S?+ebhwf3hG+aw#zSLg3i%i1S4q z@90@)3-M0tmY=G^`Ja5r>~?G=sl?>{CW_mDiDh9EVAuir`u7Q1s%1(z$9EUf5c%0s z0L;a{mY+k~WM^ZW*bp#u|__pU;?C^35cP&U`f@VaOp;bbW@HKtTzOUH}6E8Q>G zFunvme8x$<#96-I=6^oe!mxVEJY%MtrRM%~sp+@xY{#(L5&MHV+wAul%B zia(?sj)bw1ar@jc>o+hB6^6C7C<*pxQALOerW4hO41inhkm-I#vG=J`&UBnH?%|8Z z`cie9f>}bJws+Fps?{EZhr=DZ)f1XNMDNH>ZH3Hv8w*_vs)$a3GIXdx-94~QT!NF< zU~4j%k&ymk%#&yafkW`Y(dDZYlh!1wR@3{1j|_rxP=95@XMu?Wb+1NNx`XO0`-78D zIhowW<3}_s21{xU^6cet%PJPy<*6l4;5+!6cBo~;Lpvz&%@SwJ&K*3`s^XP`E6HxV z(1b@1j_|B(LT>qyCTe|G05wV@>F&Cx+tE9B za<}|#QHIt!szOi7?Q@ohXm6p5q_3mG@3t;<@>F}3-52ekK~ErXuizG0T$Tc(EopKMouMI$`uh-r>5P+A*1BiL=J$Ft^cuuR+4h`>xX|qQld_l=k?x8wOp0l=EGRbpKm^7{ac2QGsA{5vRFS-t+P+QtyN12r zzcf5Y)0#PhZrQZS-cpDMeLivOe51WKs9gN9I}-O{Yp^FZF`Db?W4jK^ zS9`elS?AHk-}NDi8n)4uro30yjvIVU1U%tY=4b0rp@M}{awU<@8`pUbBkuiwy`l$7 zcO;`di9XYdtN5Y$BcE`u9eI#^zKYoTikHxaz!JX0WvF3RH!gem=;+-Z)zw<5sNaG&i@t>TUE~&ny1(C4%Y^D;tf2H!9M^K@ z?W>Txrjpfch1ZJAvOl^j2wQc!l5&{}^cMfDjx`+cg(hx}?G@<#7yM!6Mgi_z>qfS&IO5Tr5%Qmm8_|U06sb+Fm6U7O25bf;ZhEcN`rOxC7J}M zx{JURAi8Dj%2OrM#(1ROO+56FM5@dmMp(DY@T_$LF{F644)s@&7oH5;Ee(+_ zvQ9jzwY%J^)sr67ua(c#HfL$ZdyvTR!Vtc82oT1yO8DB4$d<{wy&>4-8JOme@`@JK z7fiVpR|UM{Dp^l_U@0LWnWLLHs?g@PuZ{0*`JADY9!(cbXY~2`@n)c4A(M&26G%@l z^YrC@ru(2XL&ho-Ds{m6vNW}1Vr{|OF>c25PJ_63O(;9CH(a%LN?x6}{oE&9&%5#h zKfj9XH8+m%HGUfgk^Bgc+9E>W{{o07y?+;%8~FqYYr(>mN`zICex6G(^}9v2l@pw! zeX|p{U;3cm-d0RJxs}m79lhCoGNXMd7!O-6!+zCYR~whFdxsJdGG&?u|GqO2DYNv> zcN>JmqAL#?T_e{Z0-s7zXt$OOMEPEh_o?+HaNHRyb4tfl6Wx z!hz!SzTkFMXABepG8w4-u5zYOxEn3D(UXc3ytzhU+e9RJuQvc1bG8NAdQo~jp*&De z*!N{*DEf6kqMmj?}2pQ|wEmaH-4Z=(D@X@A;*%_ei{m&3le2*jS;I0iXv6 zaD_6xSplwik=t&odZuFGim}G}RSb>3AN$SrT@N4jKc|A_Utg?lCj!w>g~6&B*)Miw z-h@oaB)2!+!LaiPNzBxee5d`2*$Qj;BR&hrjVsdZP3rS{Fv3*ebEWEyblhbIAz@nk zs?ELHO?T2sicBS;%!c!SzNcC;t39<7aXU_alX*|f>A(4Dj8^b7%JEn08rS5TGx{!e zqb#dEe+@oc<@xam$t8hiU$n-3o}VsJv(wDRAUX$G&O3j81lK#lrDjqdV(xsG0KPr^ zGN~+S)CDqA%EK$(d0V%nsO*K$!C_$~qoRepe68KBDI&js-r4N(Geu^-R@@HD@%=F? zHv6IxZ|+~Vq*4`#uG5tf?loS{ut<`Lo|gHBbC>z0qjqlF9eAs zB>$bdxj0t5*KcH;{Y4i;oU)ciw3*R_AnNADUWL?2|CbHex&ALq`4q(i2n}Jc5WeHg zKgRLwF9H&WEVsT(r54rTdOXSf9L52Y0kc76D)p*{+!L(gx{2yDUucb}BBE4o56&l( ztLM`!yR{1rY z|9CL8L4jXat;nfiDUm<`+PtAzyv%_8{$w4YmzI{j6_vvXSRE`6N9#i8aEd@H#q6BN`E#=%#SO3r^#uRYUAeOfYQV49G8ohl& zRu3%QDdI7ki~W044PpQE#7Wd3-_vu7%TUCfJ3K(v<$j|f>l-Z7&7 zMLKbW_lxOp3CNHvvPU$sl7|F~q#k$f1ZFw0?df|w!K65+ z zN%w~5;|aJ?sU5nC_t$1>QH}1v3U#W+DMZcT-TA>2{hw9&&5s840I!8QJIlvQ53l9` ztt%miXYs>H`zBMb;si>a_USCSX=_Lu0xrG1?p(ZsNH{}&r8x6`mOzgZYx(ekJvDzT zbtiupP|ogTcm(_z7Px2+pk-x_stn>%9$hp@O*Yai8oDvnXoBywiRCQSrR8__^Es3>myEvKU?O zvd;l0R{60z^DLBkEIyz8Q{(XyncA9kHL;^lH|O|4YJFarVxJ^j10V}}+J_|9jB?t9 zx>_Fl&a&zcP{A2kWoGvK8|n=dbshKw+JW?_UfCP21xCc0PlaYO^!S%y(H5W>I}#J0 zkMNK=kQ{hrr>%XcV(P<#=h6D_{zAj(X47Q1MLVo#20R{{zONk~*)d!?^^a?o)x^&! zx}(4}PwNk9*LiDeAu@6A=tJgT@>~7xcbg{Yb=?1rM zv|6Fh<%gxOUCm~+G09sLzc?7AvWwQ#du)*I`BD&ZtH)=y)m@Buz5(DS1L`&q0jp~<3-s2I}O zUDmk7zZDS640tXJz_jPgPaX>Kb@&T6Oy5WD5Ix_iXQW3jds*x()^6YCIGea)Um9=S zn>^PPG_l2|pfm;}wK0E6uas3rC_)eT60FFR2deHlo1m6J(nH8>iz`tD2S?b+ez#OV zZIVTbUNvJxk=rKlL|H)JyV}anKeZ|4G;itKO!TT85vr~#_;Vh?D#GRZlOdWCl+vY? zcXV(e*abN$$RIg2`IwHITl`)%=VR|gcX+#w2-8pi`Kq$HH(+y``1zKTY3 z&}rgJ8qvz1*da~FNml-jkK<)UjzJaJVmh@Sj1rdR8j|F#l z=q!uv4a+Cx5M;e?_cUH`c!*g!eJ)?YlAtKSo!(+Xt`O{Zo}!- zD|L|P%OE^VY^COixB8#~a~=X-WR#*uMRV+Tm?u5<{)2`q%lZq>F(_TaFR6=wnny3S zI$(E-N7UxI(8Q7Ct8tNMVHE-le`7le$xc#EJ>~A*23J#%kcd37_u1}_Hv;hLmKn=* z?Ft+UH^ygTL1KWj2p>!Z7I|`e zBL6C~lt|$e(Ei;_l6yib`LPC|ZDo$T3yPZLQrbQ6n~wgrOyN%u-Y9sA77mOfnK&30 z{oO-XRrb|8!)c^bW~6aFJ93bsm+e)u((490dhwMJf6$o?>r2!@0b*=<41DkJ+sEfO2WPXp&f2xMjO z@bMbVTr0-^w$P{i^cE`1lvDGXp~ZXFY=6eyOUwDtQ^WeRce8I-bSz5*qz9qS6cT z4UytDs1s14q0cr09yT)=g3)S{ZKaoX1i>3tAF(-~ejMdOANt29JSDm5sV4!=aQ2)a zOxkQ*3#0-yfMVC=h&aWjtEW|o8fbbG9BlB4-(2xN=mTsrFb7B@gHl_(o#dWV8_}B9 zed%4 zgO?J%-y&F=?3c#BuM9!^R;eZ$KrWy5){IU0x!A*M`w!8574?Q*1~uBA1l~Sm%r~|_ zYcJt-yiF-}ctmH38oNu9cB@XUwKtbqw{`c(gDs}Bus(`urHe@+T@}injnV!+2ufat z2jj92F?ca@jfD4`XM4;dTd-|uhtU2^y^Fv$e6(^oGoBh2E7>lyva7XUTF(tBDYe`( zrjV6kD%%LE82!RC@sJRKpp)kgnaND`Qxjy%=w{B+)c0&G_BbN+uqYLB(ckXqixe?> z8hbPp;+!6Hux;F8l^7d?uBb+f6Nj`EDav^bLMhm>b_Z#(8d-Xf&?iqX6jzHp%+th*LNLOh#Qt1_NS7J!4SvEO21#m0-R45Q$&oyHzc{uNX|G|JO$H%kmGL*M6 zRtP>3dysuuV|8mL6UMLhaFusE^h60Y!zD=%xc}_?;Jl~ub{gd}dz;IvTEk_1c=S9o z^1OGn$~YVk?qRN7ebb;v%728O%fi{nGt6W)?JC(0O_&azu1PHsnS<|^ovkd(k0?{~ z@Zrr=XI*gvsCS}0Ew=j#i1=rqSF7LBy#HC+eq(R)Cs_T}m>U<1p2Pst+)jT%1R?_| zCwtgk`I!dAEpC}#EhK$UvdRS~25h8KcO6wlv5?nDZBchH8g?I8 zeVrJBKY0p5=4{Gl;j8A&Mw2VUYgogR%2MaU1i<^|SGtV~yW_>N*@=Hwq+#yE*W44! zn@Do8_S5LJt!&kyrjLySjZ;i%WYBID30s{ov(_Dbqd_65-=0xGqF_BVj*5z91MEH) zVRIC@^bYd*P7xu*ls7v}d0S4(3@&zR&`o~a8>BN@`KoHS-p8&lR{fCX zWufpEvS%_axFkf2xxN^ymT5zl%$%t)gZOd{1&rlS)|I4hWxp%6NTBQ)r@O3quxl(u z+{~2)3aH)62`l8+Yd$;ajK3~gZTHlP<#yvf^)r|pwxfL1k*_Ts@@RdM!#1g)^(!}8 z6{x3G$-=wd-IZU4lk$~K((gcHjQWWNYWnk8So6^eLhzo}jMp0U?Xwe>tTc0m zL$Agt9c1oaRRAXEX7P6}cgm9m!g-JQX+)2A$B%E8%+P7+*mC8t^MK{+o4tuLE5KXv zpxLNA9Gn_wW|q{Sx}ZFa(rn03f7AQZ%DE80lT43i^UuaPoUlstIWyYQO2~26#Zs5r ze!=ls%*|7*(-s$FlGetvBRGLKemyd!sgp;CTgA#!;z+<_nJcjT?y=J|1Kee7Fn*{y z?zrs1fXkV*MeY>VWq^m(>|@_lFs07r1&{=kg#ni&b8~b3H}ebrwX0-W%0(h zB&a-nh3B{%vYW9bFwrP!&iQB$-Lu-HXFBi|fv6|WySQ-NkH_&8QS=v%kABh|I7L$sX z=LEW3g=DpzwtkKKvf7|xU777I29UHc2I9h3GGVPHF+f=4gbbaxB(Bg?>&>rtfx zkeUQ7cByBnfGjtA^k6@YXDGSRU|Ys30&Z^xBtF6HZ$H-!3VqaXxqgd_owel{5;5;@ zh4fyWP7(OMQ1X$0?=8N}VZVC81bn{yuTb8bZcMTsbg+@exD)WwK9F$GygsyE7+jCO zBBGfawL~ONy%w^hXxZ*PBK6a2Sjr=q8Ty49c@znP(3clBMW_o6*E5$DT4 zer-<|PUoWqEBgIY+RSRY_$?TNTqN;_we|$W-AGv8-Q22HKbJB@-4-o)fbX-cnRN?V z=8F*Ry7hRm?*0lAJxER&(#{ z-rBIeK8ZpT8^$u5=H1+6V7CK*vIOgJ9%^qK)$S;uznsK`!8P1{-dj@-kE36~#uU%b^<*hJC7#_Er zTOCQ40-Pd)X27JJ!G9X0C;}_!rp`c^EbZ6;=dcJ?gAZy?%r>g6d{NCg^b&Lf0`2Ph ztv=o_WU-DnymiC2@&gml2H<{Jeu%?0!;Tm!M!U>iI=-45)5{}fn#`9cOKmYm%$Ux+ z#s~HAwTrtP662;|+yPz=+by)ynGbX|^Fz7+fYIK}91B=ZevmZ$wr3K?p?m6Y_ZP&rizeLLKn! zj)zGEfs+<{WcqNnx%`>_!$y0q!xReea8lvG1mT8p9I~%BT}MPq<`b?CX(+gzem^Qk zQa;027Hl{VeyA2S8jnq)T`5e~fB6Tk2W#|e z!^PYyR38w;Yx%Uf$WCMFY{Wv8SpjNt#wpWuELqHSeu^8M#nQtw!?xMb_JRVpn){{h z;cV)Y2TDDQxTwl<-&*XeljK0A->zv+>V141bFH;zA2nomZmfDLZ|$|Z^cXK)*9fek zeEQG7Zu_wy)PCu;%W1^ubQZ~!rwDY+al+AG*pnqiq9s-Huyun;NQ4d9ot|YI4-qsw zNmh@+!Ep;oXwnOckQB#rU~Q7#VCW^xZyb^C)odrpoMO|FYmZhxoTTC~r9@<6$s&e) zb_-EJCe}{#&@u49Jm+$ZiLq~9!H){npe=tH$94%_`+DBiwyEO^;b~X{>uA~?G3D(A zc}uodI~$H!Yj<5=ppBKr#ty|I!nz?<{xxUxs`=LVVz$QHn|#LvZ|*O} zS(y&W5MGf}T>?eLssCd_d{f)b7WPO4|n3OYU*V#oOC+vABG1le_8;CQ_4^ zL+H$Z@0RBpDkqY8Lj=|Le&Bl>+27P})1Ztl^^|n=`P6&~%uV8i-1yMS$8HGku`F{-?_ zEX+!PYs9$*NXE%xPLriqcN zz~0}sWI580Vb2ZB;5&zmork$jAGW7kK4oPX4}ZDLUrIktQ%+S7G}|)LLhfjE#AQR zM0+fHFI>~{@ZvVluIF2)PD`W_bW;XTlR>#A248^SkjjXz)u+HG6>1ix!aNaxpkV4W zh`**$&b{xTDwZ*#VbMdGvqux*kI{?C-KgR_Kfhy+GiT7usqs6Y98Q;@6J_zVQ+(gs zKJ9+5cjhSFEIn}2Y`ivHubmvU>0s=$1r)t0`}pbZDnB)!L4^L$IuAV?FozCb2r2m? zw$9Uw9K@WlP9~qt+ZzvvlU;gKsiKUHU5D&Bmut80jK2gaN9QjQ8gCnQ`J4lD1CI1o zpVl<=Ya%z=jOb>Qq`Ad(q+dHwy+ChYpn8;C*b&>9VVfdEVp|0p52a+Cu;VxhmNdAK z3M?rpj}_(&eBn8i6X_Cj^<7S%-fsH=hHr`3g@J2@i99YQIK4_4!j`V7MwvF%Y(6x& zv{b%se0+N%S}E)J79^Zy_dp$fhzG&@_dj+U5rX(&Cs)(UfA$n0^T2~IM4Hc_nxcTN zr$vQi;?0pWLe4>67AV)a=s<;v9C4LkSg--LbIDS1>;^!TD;xkD(fC`2UwjA|dKdPV zo3QIgC)IaNzlI21`JI;osfs^ma7p#5rQF&S`dPV7O}i>9wO@`eEa_3d6o8rH=Wncy zo{axp>5buCnriFUI#0AWqEj&!-L^rtD@s<3+%tz z!kc2?r}|unocak2IiFQDBK0l@g@pyqCO5kzZ@5SEIP89qq|PL578&zNiHy$#GAnfPPQLVEKq<=xiiwvKU%=k3eO66M0@ z_}~VAPV(_V{_`!|xP%&Au3<${YBTQGWH6WzUc{2OHM<)XCeKaWiJEudO*ogjc6yW6 zVEZR=Hel(j5PD-5N5rt~$ZLE)TUV{4_O{~^WjqRE@=#7ErgSp*;DBqIo%jKuSu18e zp1ZwhtD+y1-oyTmEr~KfXKc$56c`>2kWt@2aCMk@wM`pE*2pa-UpQZRIYDccbED6^ zfDmUUcnj28oE|Yz_4nLA@mcy5rs1zIe-}lXmSKFTrSE>AQWHYR>7tW_bsBRlXXReg zSNI8k9rsh*#9rL^Lv_RL1^TN0qgJlZ8Al{9$?s5bVyOo+HRO))I*<4dP!Vgm^Nz_$ zp*5FvA`HdNDc)Y^2`{Ur#>_|zm=?DROe0UN6wjiaSdIY4ueS|N(24-hCJH+)`|X79 zr>Bw~;klwCsgswD_&x*iakA&zn?rH(XIA4Yh8Ri|T$f`j?olhDx5N6gR~3D8<6Q;C zrycnpwU%IJz>^nNGv2Z49@1z|G5x>}`T1!Xf3;RIM{ocL<_RFGqshr0`zup?dsBw* zP5o@paU*A`uejVNUaHW(`SeVg?J@D7`qQeIx88iV&KdfZNizeMK?D3r6^Ny>H@-G} znc?3z%<52!wl-P)f;&Zg?j(@jx4KoXrgI)qS2X|QX;=5;)S$+v|1TXW8gz&}%s=$3p`4fDjz6F>AO&OGr`{)He z(!Uqwk$~>#`$C?m$#Qh+wT5#@I*XAd7HEuy}98^Y;q zp^U4?_Ktg7LQx{m=$6-@?#+pnkh7q)O<#O= zOKk9)ynN3U(`b=b{Vksz$0}qNz8`D+oc;$99{EddX<#(ZZsMx+#b{En=#YH~b#FS4 zm!L-}X>UulK%Qr&5|8I5wg%&kPuC*JRXF|HSr)VVpwef3^I4&t z^R1aR(SYvCOb+5r7RL}=LgETA+x(aiIUXcmHbiCP2zp_-35^_U@P7ajjkWZ5JJ%W- zkH?akoP_41dC-$~^YMV>AVc1R|L6|5y&HM8m1$5aAXM`DP2N-JhC^DdmK0b3NE&eV zEH~h2H&5oAGT-RnT?WIUJ4UA%F{Ki}d$a)V0I6&`2d<0y-lY)ic%|$*bQOdfX!stE z(-_l%NcN%zzP<3@@-Rf4ke;C}ZG%#FP z){wfOCJ;U9{^l^p(Vt86)#|;mKOH&y3|Vi)BcP}s4y`YK56Am8j&)=w9b3`uFGLNg zlpE+z(j#NVwMj}C4amjF63jv{_cpeNX-DbLU)oI^B)ciIpqtL~HRsQSdSJ|dVn+5p zu~bC%iC+*cr+J~?A}c*ph3T_bexgh>-zKN3u?g65qa-Euwq_!Z>5b_o>(itgi^lJo z+7;hw`5#-0Z>!vH-5w9Zk10&+0M1q)U)fD>EL?XM{XguTWm_9<+ph24ZK1SC32vph zTX1i22~wbFf#U9v;FPww6%9_&;1qW#4uOOc+>2{)*Olja-?e_l%C~&Uwq=sJX68DN zW8X~^-1HphmRbQZCb!>7_Y#^Yp|QtTbl)vlP< zXIB%IPru2g3@b2gfISCzyHi%2k`&%1-S0;rUI!2|pq)8nrSB=?NXP3p6xo34Rw{44 z!8nWVQ_51;bb0?)Y6U$fn7xii1$o#rezTA4T&CiD z5F+GBoKH$THCQqEr-$L1SBHFHP_j#@aBJZ?5dImbR27O`Tw1i<7ELL;kqmxadBnOh%T$d{$u$yl1#+3M)4qt{B--pH- zR&BIhai1$m8$N1g2uG<|YLxaiD&3H%MQJ_uXrZ{BP~2RWeU6rD%SEE-6FGV}mLi~= zr;Ev6HFT!widypL4Zeeb!cG;ozb4jYf1*BsnTY9llIBTw088I6Bn5Hy6p>6BS=A#@b{}q zeI@>UFFDT)F0mmAEecQ`(CfW9Q>z{E1CqU-*;BN zEuPoBXW!7LnCJ?|?UcCS&l=d@OvU|Wz`f&I7`(sz;p-cxbl~5DUT6R|QRKrrG_d_h z%w-^L_p7H1X`Oq%eQ*k>(~gN={(H>S=RmG>@hDqx{5sI=)5g%>O35qlNLq~I$@)%T zaO?f=7lc;2JB19wHIDj3FG<+t;^_~Mzplu#*Bf;gSrY0;IP6?bO;5ykK~O$B#N%i! z(f{;1h@}I@09CKJLH2mM7laM?J4$^vySxwP!0P_?@;!sJQ7h8yPEA6o$0G7RY2S#i zAyR#R?8Ue4kc6IScEvmA_~Iq#?c<+qT1rmf>v?te>p=ngkDr1^H(n4v0X74d8Ha-C z>pSd}b8!5Qq3`L{#4aXg`n;1X-kk%oM{pWG{9;W)b+8HEIR;97)=wkCSqaVU~^J{zOqV{50A19l$Z11!DN8RS2fg%9-^ej z%oe~G^EE>%!!ZzwLSO|M&dg*+4z9-0)E@0oVEiia{fR{f+tssBm9?EtwXdxF)E+aO zhEvAB?><8LR_HND@aagUNr)J&VD4=;D}7-FL!NgAw0CH{p8OE{?x*2)=Dy<0g;dhr zg;B@DrsR_U360dlFD45fBc+iGE495A0pCXMr|Jd~wW=1?Xq!t%La7`tvzQ?IJhB4W zj(&vfw~}N14`QIR6@8h1-rt6OxX7OZEe3|Xp6u5uq`^`zLd-MSq1>gY+~qx%?+TB$ zYtqpxxxIdn)iS-M%{|gneP3hLN5ypD3GQtXF2L;uuT$XW>k0Z6=#KD_LCnt80z?{l z+bx3ZNz=MZJSqM*Bbm=n1J(%lqY{PK&8_sC#dPi~rOV_M(~Vc79L4p7Vn17M2-jin z-l3tQ0-GjdZL&m&^M_zt{7ux&`zDHxyq%={{Wu*de3pk*#$BnKCtiM4^8FtNc@vV` z5=?URip&s0`H?$pFOlOn8aU)(HANb>R*}4acNQz%F&daNiIH_b|6hxdk_%2W zv$NU#tm-qT!+|g>n_tH=z?FfN+I$i&BmD?>XD5UX~@|DXWQ&d+H6G*$VkB8FD`;l|Sq)S@?@|7O=TUpW|C$?OWxP z5_lD;yq%fmZ}5@c4Ukst$KP3N?%oalM!sPGFE&vD+LTglkM`B^)HI5PdXS1{lCYcW z@!E4x?<*!9?XI&B%MVcftFs{Op8>grsViLIq)po{??0{Yo^X-~*&(YC z0a|{kDYsD?0^HphV=I^>@J+HIM~H(iNrO7|bCmU>zZ)8hn7a%<^Oc@&aPISSlb#c{ zRWB?`oN*mi&s44_#3tO*<8NHD(K#bW=(q&Q0G#F+wIqk*ofeTd*Wz+zINs4k>+`y1#G9-%!vMQBY*<)m3^=%4VZavuGat1 zlpKB2%>A)*XTaWW*av;GTl68i^iIr4xF6tZN2A&b-Q0jiqAY!$5!w$mhyhn!2fcUC z$27bJazaKH-IoZmg;Ppw^hbsY1}Z;WPP$zEJ|e!BevIv2_E$W<%w7+vf}fUdeE^iZ zkqbxL$o1s;>ojnxVP~x+VYErsEg*O|uW1IT46?kQHDJ1d?k-jDEGjM?PtbyCb0-|= z4BxstZ{Gj6{}Ov6YWOdMx)Z&fP@BW0Gg{tf8jV05wwpJhJj^v0T6LZa z!bkJ$-})FfC~A32XfdZ>11pC6VvlC zz|n@ZR=_(rm8!)&OM%hygn*tg7STVA9B;gK zwWrzzE9M1qKXtjd?$w6JM6jjXUijzZF8WoNx1L$3m-$vKno)RC{^{`M*$lBs_^eBy za$W6Wt}!Q}m$t%^5b<)k7Z~U3e=!4@*q;gAME7o{aM?}vL>+L9dhmZR;$#a;k{s=P z*_r?)KHeiZcE8d&`t4zNjU;nKw^E9=ZkC)wuJCUtsLg8c~sFy z4#UPhxjnnqSs%X8auDGv8(FGJE6{?Od%(zivT{|<&rd;eE@>Z;N3N70^1g4Vz@*Nn zfxahz2uCQ?)#9AEf3jH3K)F#ljC6ukH?q{qkoUcuhs=eWZoQ-WaNHtOwy~U%+&g&} z>*4ZT;W5FVig+6t9^hP)Nf)raH zBuDpWVBe_aZwy$_~_J~O*rTt$BcU@m4ru+r3RQcm|`fW z;0qU;l$gzaJvc#XtPgZzJq4HNDVu3rd|Le76dbUv<02wXWTgcS_#xUk(X1-q$6xQL zHkVA>s}+%9S*wL(#7xii;D+rxsi82CsvWDuW8IT`n1QvA;r zhkhZ>K>WLNC*VKhC!E zAFG0eZudZ9yyeH>JX4*5;L>s3W-l>wrc?h>i=>9-wL;VxbzQ__-mGy0W7;nDXW!;I zPge0S^6>_cJIV4_6{e;A#rz7+1xi$^Bopg$G-F|D(;c{lL7Zw;`G9-ytFZy$8lUgj z_kLczs&_$Lx)WCEzP$S9ETlV#Jj|?L!sMep@G&9cb=r=lzRU~p)|8#Bxv^FaT7)nI zGtcKOL8|_8SO2gJYs(7cnIx6!ddPd+eaSQ=12>$JExzveaZ}J#N=to;vg%MTV>jQ{ zG`y|RrWpGP$KNqe$~`M;-NPE>`m?fyjPXs`9n(9mRA;1_<~2TQc_ab6^L8j@o;yyt zb4)a+Zdgfu8F%%jGA-I}OFb_5>CV9{bZGd}T|(t7$2NkFHaS0_)~8L_Th|x(=fBDVVb?+bL_KR@%GOz9$4cTx zLPN=XF4rJFTUiiR&7c1~m-Y^8JSAI2_)n6%|HXR0unNB*#NY+hwl<(g$p$pD3ekkE z6xWLmbq9^#Hwc*lUrA9rB|LWgw)`2EQ|VkZrNe=t&Gj8W)e@bf+sgyRmPY=V@{ImD zz>qUN9I1!4V1NEj+Iy0BL_9@;P?@_!=Gb5xth9)ZXXS_Nwfz^-^F)!9`P5zF6z6I< zSQR26RdYZ89?7BAH6JITqD(YIX&)|^>|&$nSI%rpB|juruC*V3)W8u(165;eAUUYB zQ;aIZ02WTml+Lkg62KV6U`5JFqd|(1t(OQQmhCuW9^U88%4d46@8~yI+i-f=x4lF2 zS(Mya%g;@`8Akn)ehV6bJNmw zsPV+QbvI$s1>w2xb_ps;yGLxQ!=U$XM%I-19JfOiyu$eC+V`h zQS1sSRUjHKn5a@OyrTK+uH}hW+306TrK$^U8h6A~LMw4YKHK%T7#!f&r|ps2E}MZV zrU|}q%s{Qd)?^gfWV@;X`gw6WxefFolLDF-sJ4mgw27lEHN}S~E55N=6f@A=ef-y> zc1RSpZWtlX7Cmdbc{dZc&F4vee_#K+yR3mn!Sj+=N>$FItVrOom?^PJJUpR`D&JS6lBclapl8zo zr?)Iaw&ck(T3Y%0fygmsxzn+$y=Q1Dg`H7xe!ok>ZmZaomFRwQv5eT~fxj#IB%IVv zoyPX7!@bx$Cd>HO2RqtQYTzlZJZJ8dz+cZ66&!7#xR}A1`eIkH3x{$LFvW^c0bOZ1+_?9rt;e1a z7eb4oE8J+uTMKkZPqt0*0FE_^)ienm+9=@Jg7(hwLCp2|k`cA96oG}hZW54@pSm%k zoQ45k9i|ERJ7pww9S_tNvx#gM5E55Qp52QOM9w5E^3snp(=xiC!^v{$f5<6YX$4djV zg?>K22*zbmri1D0+>*3_40y~9<$R9JNcA34=w37Y^}DmS94o#^8-|%vI@ti4cV2Jv2UXo0*@+t7m}Tl(>v; zMIw+0elqq7t7E$C!?unLmKt}1DB<-0N zO>eT1*$y-GiAFF0f?^4z^}xL-JiRQ0Se_5{>{erDv#>;w6SG-_@TGafCfd*NRK!iQ zmm}Gn<+pzgtAn~lbWGGr&5jed%2;8o6Ip|D}yA6oQI@axTsxDx~)`q&6Kmi<1fL)stDUyL*(E~yb?pt z*Lz&0#ww5W=##mrV^I0AP*wxnQlHs*F5ZmU%!$7=(DpC-1ij;>R39AU9iX3m;mmK4 z@s_T53KI31pc5RkN9OF#q1?Y-ERV}NnYvrpU-L0NMK{Msv1n#bg<1I~m=G`W2t1b1 z6w?l$HA+zTrBwG|-Q-BLee1SdbjeI{e<;Ps2dx`_gk`8>%8q66!BZ)(Lml)KBR?Lz zx8iZ3n2}>;&rxC7QPQBlIy3Jl75?K7SH2kh8`#rI>m2Iuzv%O-j9avz5Bs%;=QC;P zS=>~DEj$JMZw}R(tupT`wTTKXE zn0%~})ekD;^<`p&^<=nl0R<0X4U9}$^0aBh+H@~!@DYeD$TeJ-4Wt(;bHLng(^Z_u)x)6MaTQt9*|Xy0;?emCj8%r#_r3ym3C zvDw|G-k&Na1vdUGm=c<3OT3bcrJv?s+(=g3DrT@UoF>&qwd_BKdwDqj>*xfp5@r*B z5ZT0#?l<@hnHkKt`=j8JaU-3e@G!eKQ?I3@Zi0iLR^~;@`*tU(r}F7Ys}r|#U6S($ z+hjdwgSs3#HOr+;wa$2cJJFK@ToY>weR%;6zB9kP>$-T6Wt`~keI!SHiu-$WL4GqD z{`85zw_g!;;_or}w^sRD<$EFD=gWmOb|-`50%^1(ZWQIHe;aIn-15z>4S1~Kka0+7Ww-7)*GkyYDD z+9WKeUqt{+54G2XyJ-0xOx?WZWutVYPy&x6nDl_MqNM;mIX^Vf={ z^;F#iL_8jX5~4N=5COd@=AH_-pmSd}v18m}EzVJ@50n+KlO;=0xJDKv}4 zqx%exo1ks`Zl=gh1hI+*!?PBVfHIsw25Rit?b=WtVr{ecU+jy2yIt9x^L1hDAUU=Io9eM zTdXb!Y>vF#*bN>_a%>Oo+3Fr@8xS^Nq$VFOrR&sm|0)e-=o22g6=}*NSXS|&3>Zrt zqPp}Dr$1a$BZ`);_h&4m$O}ef+|m{%Ah&^r`ZSp6J9i zPGmi`0yJjK(rS1_#X9okxlX(26|16eM^72Tntx=Ayb)impm~L#a9 z)qz9OUch%J`n+)*mfe1OG3iS#yy2uGM}$_}=|x7{WxoZnOMSFKnB`PPg^6h6o6+eg zRQV=j3QMG|x{3VdR^*>{`&OucMa0dZi+B~IQ55kfa)kx=-mQguTX_2}Xo&<8tZt%hxK>T!qoeauJ*U%u1|g1n$FMzw{*9k%jQg4T@RR zTWGzr(&Cl_?@2<85%aBNo+zG6(Zi>Z8`?VS)fjRgQV;Ik+1c8Q+6unapBCIQmOQG zhnN}L%C@RoMr@X*XHI)sGqS4#=h;kQesgu&B7?)p?6}JZ-k|qOK`heGJ1TxF20(}! zrm~984UgOxtv=nG5+m3EQ7ALR#5iD!LO@$6mvtxZ9qBliIhjyl7Xht>cgsJtBsbq9 z=}F;RJjz*BlBx8o{9`HMJ7)q#4eV;c{#Bw!>tapPoKjZ@xck98Gs^#1B$tE#3zvxiG zOb%7yIVu9I1*>xC7sadV0^*^N!HC4Qhy@j#^`jB+g#XrumrCM(x3C-H`#VKSXvM%_ z6l$s_?pNJ=r``6YFMN7ga&X46WbW?WU9kEYN7t}R!0&OMj=sjuqk%5kQn!W>|cNUQ7wMW9!M5+&udvV@Xo1iJv=x(~i?4Jzd z+q#4AIsgINoyU3BNOHvORvlGST7}jCw_+PE(un+Ij6i@*JiIyHAeD=ck(#3K$6TL} zYG3@s&h7K1zsc}LySl%5FG@275%w0)o>K+XpFdwif(f5l6>LUYha^Xzy}LlrC{O34 zSMRsH;M{pyYjNpjZv9j$`KDOY&5{EB2ogVL z`Y&V;&CTnSB67f?irhlhGBJydrn=deyF~Yq8qz@d;0Ibn-dZl~N_o(Nb&M^@6a!ULM)F z44~dd3upzP^ff0*-0SF#O1=g9pIVgzyXq;|hD3y3#)&cch&~zt75w4z8oEXIt36ln z>-7vp1Fgy5Ti3J$N3!CjNC_4%O8M3Jc--O-Ny4;|7N^JfD%)`@ z(LE3OS`H8F{7x>#9+#HLPX5EIR*l%sc4TTe&deZuN$`5NzOhbV*=G+Ya_YqLXwJJE z0EjU8loh$$#!QqVe09}xdHv2f(X@XM&Sh6C7CpmQ8!nk9(wx`iWyjF2qGNH=p!)24 z<|gWsu+-JNO6bMoX6>?On~tgVf(pGBv!kWLYNx|9w6y;-*&Q>`3=!*E+zUvAWK^_Y z(TrO8d8sNzPg&mc^;?%VP#S4ZD)>EfNCO_OcdH1ZG}bZ~l$wMgald{=Ia#<=c3vnQ zuiWGdz3L0$JamJ!-h~55{D785&*I`?()kR|iPFVO@HyI21zREi>le-M4T z%r0(k>bN{2JbNRagrt$&o^*Lpc9+mxc<{@zw9B0DjRrI~%8%zpomN%v*kig_re!8fc%UhG7P+c|ZBGcMNiU@jS% zB?ff6S61)04F4x3*#7u!zc08T;L+_Yrz2bKbnDll)@xzQU+NKfE4vp@qIagBToS6L zfww71YuEXlrHmT0x_AuQQ{XBMXaF`wM58}&;Ymm(4#^%&*Y5f*Vin4^I$?jh^>>8H z(J=7GI8Nztag5SekxnOuJ(lu578$vaxrKMFYcPKs(p;L~5hP`^ybe?Y7W>7pmUst6z~ej}Qh&Q+vZ`>?4G0;``|xJPmX>6R&P) z>}3v5@xU~ryP2MVJa_!o7A1J%}`y!RlUm|C^ zS+?U2H<~?|<6qk(wR!Ftd$m5RXvV&vrwrJBt7DZk_eCJ9&0q^h8emwvVx`+;rgEuh zMD!2ikt~taSa-F|IGUI>&&RH8XnSr>5Uf%=s)`pUv zs9pDSdZlc%$sd)}gAV4D;d3Du==Rj6^?%45XMtvQt17Qn;KAr}+WKf&It8bDFj(tt zV=Py`DNl(70f9sjsK;SQ4D5@rc`UT;&f@!ijkftV{qKcw1fdyJrIbImH+9^RN(xGY zeb;R6X*PY6$U&XSbU#${6qVD|Ta;X`o^VmqbSKg%Y0xw7wZ^iRJT^m?2YK8o)&3v6{RBEUy;isN~}xPIYw->8yQIZ zJ`ZzFi>MC&qDHz*Z7O4WthN*=WK;W z@&*M7pD>G#c}8K8xodWoB)9LzGQ;ckghTJzbu5XW8J5PqT5JE@W1wO~t~^UFqID!( zJ98NrqMp?{*o0C>WgyQsY;X{s>lbFLwK_WxhC7k*d|WPOC!49<;ohr}T*bHpfHuwX z5&7u0ogxmX-YiM#cRY?86kIdB_#65ZT(cehyk1!$k}YDQEW<#==LK5KGwJ5IK=sng z`!;O&jFZa4pZG~@D6jI(L4)iTul2NAi8i4R5G!+049bVn{g?&T_7Vd#)yBa^81Jtu z$50m#)4vH*7iu%T%ZdkUE{_58y~`YeK`bn$tLvc@(YA-Vg*$W?AbpNiW3@p}g;k9z z%gMT~v;8GW7LD8}ML&sw5$l67azG*8Y{l+1y|^+;LEQ_}R_98(?~P$*_JVR#XgT3&^mC z5|JK`+Cg>24RXUoez{Yl#o2?v$znO92{aFRuTe~D*ee4z)#mf>6h?&NI-yKcIs!fERMf8=sP`0Q~b=Yq;6HU8w1dw!MOgXz0#burHRS`%x-C1()~ zM*}%um*Y6788vA6&yrYVO5EM=pIK&~5Pq?sSP%>lYd>A0N&j^6+n2r_zK7Rgr`hhw z462l6vh#Fm5vpm&@J#;u3!21C<3m(EtlMK(XTFb}K~<{V!?Li1=1H=#XzSHF^{hMn zw`j+DS?Ekz_REGj*J63ox%l@fz9i%KC%+cjPcZ?FdgDNMa4x)_Up(;)1ob??wCw99 zxy>l%HVHaO)8PjbAS;a)3_od%bt|*R$ZOjGZtjG3P*1mK16^dfTNfslz*n`vrH6~l z!X;_u(1!d^OO?t(`;`LK>^7IcGF`0t%@1g4uS>dSnE3jsfU8Z<&6=`PN8Gt6qDiePB_1$Dq#CqfV`$cYu8{ zvrq$|m$D!>83=CEhOsXl#`XubG5n+k$nFXnG)_;Hgk%T{d$v)yFD>F~XiamCN`7V2bE;OWAKFk$RU<8;w}dP9HC1TmD~ILc8r7`X zLiGc%#YNRz!=jfB_PfbY&@ODVbZG-dHi@8ChMy|3H!{hUx}lj@x>6$}P4mL`WI~9!g_+@@@pz1SiLraKWumqI%hgf} zvD#)yHLhU|ltKze%jt5Wg_M8SOeMqkyLVC6k2TvyQ6Lnl#pF zHmT3>6Dl7TXIyeVd|+dho(C`tiHL><(t~VhRqrZXCh*hQ)e!h44#)8g7C##@3U>$G z@5{6FMv0VW-8(WpEH|BUDp!r+?8~j%+=WC32O2ujcWYofK!*0=&K;wAZ;(&xaS4;K zD8@cF=gk~Yn-WI(?GV0JNki^|e+-*D)_fS!5&t(5VO^pvs8Hsn&z0B;QT%;7QS!;7 z%K2s#LxX%|*OBdnUprx}IufplBQ4Q8&3J1_L1eVV*r%@t`QU1!d6mlp2T#v8GCGPS z%mR-DkXH|D#jQ?S+4EJ#sB7By-(jT?rqV;dhoIM!mG!OXm!hzEh9XoRq}t{9v&x-F za{H4HjQ2bXO5Q(RJl_amu!^Q3hE@BcvuY*+n&M^^t=&Vn;hPiDuj&8Yv~{?iBbe>K z=yh}|g18upi4joD{c|Ern65<{#U8bE@Gvl##krGrjo7lr98P^d!eS%Wd_9=l$?IVyEb0lmMF&*D?4AF6M=|VremuE?%eT>BQ{fJA2{Oa zV*U_nn2-2efIjsvSxn>bik*v_{Fik|KnSeX9KIWA6lnziJC2QKbGIOw$=|}u&gZjy zh(V9m|K~Gt>%l`QtzeCLFU4ECJ-z8glVPZu?}1^5AM(F|(rpRi8BNvgdauekepb;v z@57*qSfptbcl!T2b}*#+H<&%H|Nrhk$o@CKWtr0}W~kLO)y45MHiVbQk>WHnj=JTY zqL;tSy4W}B#P?@7FU21nbY?dUTS zr?l*~|0RfHuzrvH1ZlQH7D5z!>7dk+%iGFK;Zl#2Ll>l^V{uJ*MYpt#1M=K@oR%x& zlZ%j<0DEW2V^F8V8wGcaqaonoa;E%$RaKpES^D(pgfy!@^VxxgU8bwtPb~I4&F@pj z^A_ENU^CS)g+%h!EIuYmet%3>m)ZJrW5L}4jY_S-Vz5_&0y8%ZFC)C}*7$PEf@Gwr zM!mXP!{tVo<~QmscC~q2&1K{C{4af?LjSN-Z3y|AU*(!yiYgJ3pe4h(!RlR;FgDBd z7NT)!C4@GNzweeZBCUjAGRwPmHk5%Y>uldst3u00mxV%EiaLGv8~kv>?5xY^6JK+k z$K`Fu|2-0>i2r3?rz#s&jaZq zmX=Lih}?3%^wfvYg&2+(PB~r-H9l6`>Z3>vVnDzzdbNK_5PEOBnTD|%rfO2Wo#ySe8hZCqkk|?h|^YTw^?-0#^Cq| zT_m>`Z94{?n9?gmnADOh7Y~}UTuQZj3nz;LgfsF-DvUG5o(Gv-eHh2(NNVfYs>jD|^}Q7z&yy1>z6&FfWhZS8Ds`R){y0Ih^kQI9W1* zaC@-`&DPay(eH>j!PU!Ve4-1T@obM&0{WK+8J9MDne0SSwe{q1ca@HWP=gAO2NrZg zghr;hpGhDbW{+-CVUTAw5DkRaYW$CWL~(0*Etd%KO{x-9b;GsYXiF(gN{iflmD^iX z7{%MtY1>dhuB;NyqK=A+i6H_g3q`z8ZSDV}-z`6*d`3$Kes^z1wFsD{lAW~rZ zEfCMS9H;u0Z77`Y5@{PLnpR*buikusUTgMHXG0pqlzQqPn^%FIL&2W{d@PJxnI1HXeuHoM{Lz2U|0d-dq zO-N*nTW4JL=*;-(pFgF_5`lJW#;}qoJ@yvO$55*3gQ76HEusVu|20>%&4(yv0iP;9 z3nYshgUKwL)Q=k_Vyc9CuZ8CGV~x2iPATOdVq+%>duz!tK!ZOhUgpg!aB>`>Lj2rI^N?qS+^z8013*--9xU@;HIVVF;YSJZ}xm~ z&*#D$3HRw0_`7xg3c87Y+ccqP5PS}p;xAgd^uM@Dl(_7E)ppc9Jdpv;Y$r6=H7uWL z4;xCJTf6pnzOYbw3NJG@Ag>F?p)nfYOl$z*d77^P#l=46-Ocy0iTr)tXr8F-Q7T^D zNs5RPjV6f-;L$Ftv-tE)H~P)^SEz|^1T4oleKaH5eEnEyUzv)+=!`)s5lH!c>y!** z>Y@XiddS>x0gxJbJ7F%zNdD22^>K}3YFb@6Pu*hum0rP?;yhxHle&0DtK%3mFr}Yh zWgegQJQo|rU-n+g#BakY+wX)en|(6aUKRPb&e_6nmgh>PmY-Im^G@uVlKb;e$l5bM z4cGwod79@oDHLIz!m!>2&M}UJ&9vL<=%ovAjIL?1RILYvp%^ZzC3)3$cL8ojz9(K; z5z#a55#L8979wK)?*iM2lx0mH9?R{c*IjtIRRq!ACARDPa;%6m0!$=M#qw^`s(f4PTS6Rhfnyeaosst!rVQ|3>0Q;x zGo#_{o;(z_FkcS!yLQOSW8-nVXtA8w;mj{?Fe-!u%Q$#Q-Z283G0w$Svz;rZ1!S?B z`aXKkAT}rH?B|**Ez%&`{1Pj)?eR_F5|7%(!zqQZvp5-|HEps*^dMxOUs5DCfQVxZ zW@ka^X*yJQAKc55<_-;7&=4?^6L7JX%O$uLdb~{9mQ3TbP~b(y;39cq^kt|3XqCqU2-ePnr8%Pa58k5{7yHUucaaPSGSbahVq^ z(QlW>1o$Q7hj!7J&<%;|^!`eX9bWqq`@8tY;SWW_&zPg%bgic>Yu#*}_?uKwNruJQ zOf*G+_H?o-3j;UnBUME+e|%@-|Mr~ad z{i)nCC)5t|znYszKNklPUwr>~=DUF{cD^*o?LqCP#~iio3$;JTTCKl+;U~mxaruLm zZNZr?fWV}ivLRFbI`H$+%OGSKRq__={E$8{Ny zEX#2&^$RZL+m%=39xA=)4V(%7w#bZW=ZhJgi1FWbaVye+@{3{tsg&z)`)Wesb4b=< zK*?i?Z0>2+*qU;Ahjh|%g-ffo9sPRpduzu5ab0z*xoZ18mt^Tc4FMO6yJ^}J`P?EM zmF<_$iPxb2%X-MB!Kr*_DY}ssV$qKfk`{mSX6r1LOhV6H!A2^=)m<7#)~8U(A_cBsP8YwN?LA0!H77XFKT+j5YU}!) zuOWq8i<4%S2+r+(f#rSs8sZcCqI}gGDT$=Zx1CISJ@TM!tMB%cQ4?JDD5 zzv=qy9rD$*!TPR{7*M0}tHIbKz4NfYzyVCJW)6F?L&VW;`(R5Ex*zkFwLc^4ThPEk zES8x1A~QJ3Rw~)z^0(ENNVZL*57E4)z4{OKUFwtLe&; zM#^%e>-C3YZfJh2y!^cOW!JOvUQn_PGIr36Iy>l$Fy_ncr6!k|Wl8_zaiWXQ6mj$t zmy!1fE4UG$})*a zZ$&Bn$oqxOfg1n?XZ@1=#&%vTE~}SKJeHZlk7^Ovf0kyo7Wm-}F%3I2_?+%bx`&&!E&oyo?^ zO|pbxx&elyJH63A1qc!NY&|{~8aryIHtc-e!tqB<0geab-%OYG;QM9M#~N)T7b}w6 zrp;1oasmTZ_a1pZVd0z0jeZ;)Ujql6F=T;=MVfh}MNG|nngUpXojdIRJ=s1`zcCr3 z&Z>y8_DlcvJ#kzgeJvRx%`+q(%3}w#q`C#U^%`d@J(Yb@>Sa7E=ET*tIH2~gI;bcF zQySpx?0#PFPG^L(AcDj#i-r2R!9Dk7ed3;eiokGH&y{rjl8Q!qrTkYqLN*lT?g27a z&2AHXZSPOb{AS9|@-PC}rQsu54peC$xo(CdrhIcFa*5ykVu5;$^J{~ZQ+k_mF!!s* zm9cg4xmbhWksS7m!K%HDOnQIrEyflamY$_VOz8${=lNVq0}$3MmTzpP$%O-j{3Bs; z$)D>pzj^~kIe+%;$?vqUle5(374rA*a`q*7CTkDcFAds8p8<$ z`xOBh)ENo=0$*Az7@fEe^?mv{>lQEhbfM(bP8O~1(RO8S#UY&DK7Y_S%#ZQ?WXJo) zep}0UOazm4b}rIDYuE(R*BQp`Br(@a|9{UnDE_-!Atn~|@;^^Q@0J@?P&G?(DVR}t zRG%`~o^`qruke~`7Z3M2>!J&hpBCe?zKgCPCuo+IQnLghvWdvu*o@ zreQmZG--f@t_>2e?fL3Af-Okv6(MPvgy>YK-2emzLd0Q`(>z|$;Hyy!KxB~LEydLp zOQp*<=ZUJWp8*;}1xA)r-Ryl7F6c<7O6Btj41sK#ay zB$tghX&Nyv6OTD+H{0(dPzQNRNka=`<_d6``z)#Q* zfo#3jShYc#uNI`Qk}#MGUd$Z+-x!!ktNrU3+`jE9$rq_g+Yg^wGZqI95(yewz2>bP zI}SANRw>D)c0+Gv?%%)rpQR~FIxI|1pvPmAG2Q&6?yHz_n;)Ahv3c>3R}+sf%okd zCOF|?SWh)1&H);dA5$tFcwCXpd598BN-D~&5sgggoQ(a_QGT%g9!l%Wdsy@|QK^GJ zad&JV6FaHs{}*48`LoJLs>pSx{B|fC$t|$_o-)=U&xasUWf}&(<(!hYu?rl=xS#yM zxvIyNBRF*lNj_ie(eq>VjxMB1qN^jM`war9iub))6sq4KCTlSRCuZL3TuayGf*79( zPNOB<@-MTnIs!J3@sXnAMuKGmMWTnxye6bTTq2*d#4!Va#vsh;x%OC9jatUfw*onF z-RvCFYn#JI+j2c0ei9~X^bw_7t!-Wq;&P?OL9+v}dLU|7$FP3foj>tudYp2iblvk& zIQ6&^k9SezyCW7W*ZI%T*)q_^zGZ9|H|2Ks|HIc?2DP=e;ljJ68+WH@aCZwSP~4$F zi%W5L2o4q8U4jR9cXudO+@ZL;20iJ1&&-+meth}0k~NuG>zP}xTdr}6C*4-jR|N3g za#v< z4!$UnL`hK`9s%(HE#%~=0rX)*=Z-xtDB)2I?28fotZIBBKZ-&)d#Fu94EY&8AZcF6>g3&$9gbL5 z9{)i|(g(%3s1P?3arA1{Sjj$GYf`6`){7u{n#}tq+K8pSW~+fU1|_q`By$6bi{_nA z>m&8UDIXP0-{C-1sQVnMX@}gM`B89|XA!B?H0;!|Pij}3LtYax-1mxo661rVMkIXK zQy4`wtimcsjVqb7ZKF{qhB=s%_V=~q7zUN=TXVF>8TyK@a029Dc#+aDRuhMJbtP7itOVw7!*A-{lWm+f2 zO;dV#LbfaIJM|KFC+V35C=OCy)@y_lgk@2@@UqlFMfyqUtotZ4rQMMo0~qJap>iHB zSflml3~#+%Ev}>cp54S4jj%xU=X7h9(`Ej(LHk;QwC#=0%U(7;O13zUvvV_6)}XWX zkmhu@GIC{LVYypU=UH-rM1HEt-N}cUx%s<1hTGEeJeTJj$Ktb`hQ^Yi@fXP|Ai+1vU2|O|Nrgj z_t)OkOfkeoQ;WSf+6U}a+GMobLE+IYd6oX=9DRe~i=%NfP7ms2^&{A1+w|V_n_og95q0vcga>k@HnGXVn zdu3eY$tQjXFKLW#ObEm(40tS*=w>|vLnMB}V8zCD#0`tUSH_BfV{1Ut5eZ&+vxBtoEyMH zyY2R!OLt0;f&<52xBfZ{FEadPf~$|b#T@X_gtP>vP1z6}9V61ga<_y+2Ef)~x0qy+zpxlSA}Tcsr~* zFIYc8)OoZa3Hh7kyfOo!z@NEg2TNIV4mUlqi^bVLKP#E4c+k>F1F-0N&dc7P zZlFIF3##~i$aM2-qm*W};9eaXcO?=6mm_^=}^9~8SoTW|u?0dWJU22J!ao5G_{j}I8EXO_Ns}_o% zmXG%S{KI>bUCG-W&*nOe5a;E9#VB=SKDORK^|XlHr;}d^NA?0A zhS?>KU5lKHY-R>N9BL!XqFzOj-j|cgU-{&d)aZ6j|JCFx_m6+665S=QQlN=e>Yj{f zG~8UF9(6iqF<=;8l?m@GWo1v5e)5Gvqe)atXy=6XTbg*;I=WbFoPgJjTD?{u+^k-U zb74~Px-n*Ps)%p3gBOeKq-X6&7i;dRq?4h8E(KbjC@Tctgm^wmUPOR86xS)|)DfiC)9klPEaH7DOX0oP z>L9xJV>6V$SpRXRVF%}3dfSkasAz>DXwaZ}VA-2P=J_p3M7^;Bmr;1fKw$X1po?&v zY4y>I-xTc8(SMRGE$QRTtc{+qUuMi71u_wznAO%h$KQ9XejD_P^dN0{-U)IlD2zdx zvTZao9{0=}TzhuTrHsUY<4`vgpoC(}1D79d3SCX2*6FKOfI@C!oO}_C=bUU%Ng5#(@IdUGrBP?xfLh~$I6tJh#`MX-? zW_i9%t(jw$F7~s++v79&e4Pwf#Sx+S6nTnN#F2vN%lMNHFV=6#S`@=MS6h{|G|30V{$LlkTNPzUc}K>N4WdCYIL-Y2|38n+=n9PLsYfDW>DBU+xZ zz%hL3U;R#XFPC-(qmj)%uuD~|6(;cdXMqA5*$929=w$iLNnar877idIf@M05X{U6$ z#*}h5U{TKL#JDHgZC|J9ZRXGS=L;s$)>iH3z6vWE(w3bGMHU#`xY3TrerO%4Fk}Y- ztB+E5YfYl6(uV)j7Xh)q`htZ$mMX2p8_i*rJuGPm9$=jOfGYss{owE!3JeIhX_@+c z{%+k>t7|**B|uV-PSA&krn5+#vhoY-UHJAc9R3}(iGEacFxQvuBWnrXvH!RDxA{8+ zB8tr?E5oSAhfPWfDXj&+hDbY=8=0`*;9rDES&_872Z&BN3g;eB#tbAoi|AEx@gY=c z-wSRx9Yxdq78^am>a_SHp-)@2OT4E|LGAQRS)K^JB0d>E{$*BmT>vY?DEj@CC76BG zqg4(owoR?M57z8p7lj%=#~qp3u7x4y&q@gX4yPQDv22Lce%jRU)VDjeoZFY72o@j>)fn&N(PU9h>udpy3IW=fO;##eTBma(f%kJzjW>8 z;O~5*d#Mb+roB~=limJ{P_7K4;gcNB6s!=5iAs}8tbg|#w#h_xIV;ZID~-tbea(jN zpC|6*%jEUmMtDEg`K#FU3kyIplT1vhmjxeI@V?XaP$3$V?LgzkF0&kznt2qBeZmtf z&EX?G(kuhCoGDS$m4FnKTXl5j>u)*v=dsdY4Pa-NlSWbrnKET$F^SFRv@SZJGHfn5 zmJoOJnJnQ%*^CHJQ}stL@`>huVNs#iBbYQ=8>)&H$^Wda(n2X0Ys1~$1~DQy`t&fe z#u{30gnn)Q{IJTp@`lZ#o5FSPFbh;P9Xh}hH(4~?5;+hX3vaJCMw@sc;|c{ir+UPSO_BP`oHTxH-gfJ*@tr)F^dj0H5=S*ATrntAG!+wgg*=66UWY zvsreqeCJI}asgfG3gj=?*u6xz*M5sW+Mikx?Q-Co3{|x1$;krfm_m@1c!>&@i=N3so0NW6 zbmNcDe6QB!aM49JFC7k=L|ohI{Mr}Oa4l*zEqN8QVz$2o##s)?79hESXz8pK0qi>L z`gwDPdh-S2qHXdQcs}G6-LLOpt?(>01GBQsrl{<2sY)c*vESc)Kw49R+EjHtf9W?`^ z?|(dUKjJ*Krsld!;;uepEU8}@kZ9DpPA#XN&~Iy0%9AMAMAsAB;Y@QO%NHbuZM@_yL@hM zF4x(A?ZX;ZHid?5%oe;sQ)GUk9veI}8-e%Iu6~H27BX6Y4D_{`?{hAi z556WB`5`x-XKA3ao*o!zY0ysy2(eS+ZN25Hw{?TS_10IB>2v5DK~S}zAn*%smWe_Z z*kh+;LNZIz7(tV({*J0dKr1MESnZVd^OXsyCbIINOPuXB0l{ z(V6#dg2Vhzaw;Rxl7+>Ap|BwTPtBqf`FvBAk)V=mKCv%v97s7erCZqK-T+e@igJ~~ zdf6uXQ_Op@A~g`FCwY3~3c_nspYoFl>MzcV^|B3*6{9m!4zfZn`WTm7iIpQ`kx*RW zJ3L}*yt&qOt7c!)WeLO{$xWGAI^VTA zkF=#rNzg;@eiBz@dweF$b#2z`hp1#jwf_lb=MT7Gl7-9gg50@Jlh2s4AHSWI@MmkB zEX`DCr%6YGxILcUV+y-s+r%8+2qib7cm%^)G4_B`Z?6gP0F+0`jgT5`=m^){)*1;ce}g1OnOmMou8rLjQ2Cey3w)A z0oVcyC?A?bRM$H{W)W%#WdxbP2n;D|&c2 zY14>m5BU!Ef=3w855OA1Ivle^j4P{ROyCu%Kd)^zsv(|}{Zj&EBL?22QXLn}u7 z->WPAV3?vX{yQdmGVvJOlLh3;EPr~Hjy8NIorKd;2S+a4i0?##T;=%n@_QRc^mqrI zM>W{P!Ks?93|AT%yS8mjxAX}6Sk*q2%cyO*&lOm6+y6XpqjBHOI!>F?YTA% zp2Fj8%Lv`Nk#DQMiR~tXT+Lf#4WhhXTX?fJa`&cuUr5AH2;JcOV<@668yH~DKHaG1 zyoLktA&2jzWNBQfa%}X~z%IqS?l2HcL?F8Ca^Wt}@vT1A1*j@0l%SQz+t~YXj%^}( z{Z(@D5Wc9dyQfzWNx7CFJVjlO%R62#ku@`TQz*`9I*SpC$f5$GvyRszO5I66}FDa=c0g_*W*=*GMn{&H+I*I@81Yd9H!J^YAqG7w z7zr~OEtwb%NWq?r&^q=5$flFp_qETm;j7CpxK~(TvMJrGKL`cYNuz0~7N{pN{eD?0 zU-Cpe=@#W7l(Ej>)}JYsLRZAULHTaqFnlKokw|dhw>r}{6Xq5S8-;gXo2H%UtX;dR z2G0VI+RD{S|y9a^w>9YQ%hfC8W@fR#$NQH zeyyVnyP@W3OKtf4YzBq!6_j)Klgbu4APnOihTVYKibNWxA?E-kQ8xqTzX!n)`u89< z!)IyxcH=*ceG%(mn2K0Reo!|kysG2w_dbC6rM+lDE{0t`z#^mT52AnFx4Q)V{=Jm` zkona3@%CoYGprLKda+yGz{c{-tg7^S-rv+6SEa+BIhs*-BzX-nHB&z5%5Pcu;w<7M zcIU&QeV};Gr>A^Xs5abtz#l<8=N>P?QsaM@aDVcS4npwvSNP2^QL#|-|6Rf#RR!*7 zfIVLuwj6C#mDHk5nmH>yfkbL1`FfrF+d|%m!M+o<}J(tS3*v~3pEr!g%fjlaEsgLZZ zq~wrcMc)z!iyr^lOGKesheuBu( z-K=baO+MNHc&yGhq~_pj^{Wvl&ci^DrjdRnkYLje{=6~kQnKHGKI*n% zxNuCG3}%i0q5*plX=to&Y_UG-i_VaZc|3IHP(=Hip3VWwy*CySjLM_wZJW zc^k+xMLAgSp9Y~j|~in#x+QjxR-)nxJ=r^&dO@;Vm7FM7#J)deW_v}DHK zLIa$&NhB;ZzM%G4k;*-HRQwpiMcapS)EZnqV!>@+mi|+n7-UW=V~>c#zI1I_Dx?~X zJ;;?K0POU7Tgwn_wmrl(s?(5Z(yhGN|6|;U2ix-%w=gN%XesZ4+L!lg{$$rxD{ju= z3a`Psh7QN&EWPRxM=_oAJ6EoxCuy|f{dbf!Eqn-@#w43V#fjmsgwU;2PCwRMX;!nv zf$){;Fd#J{xvFNPlj9DubTm1~lIZt;k$jrSm>=i^Tn1YH3gks)j^q`O45}31A9OBa zIO~*0d)8$8gV18F#g>`A)#3GWpK7qeNSc%X;vOX+WK_JUFSxpKQ07Ukf2Sr8b zO5D-KNh^iXfMrjw^oVRx?;{51EQOff%VvoMfkqQezRcZI1Hu-OIlwb~%X5)Rj z4i-D=m5HpPBvHalBoeO3FVm>1hphsWW?mV#4jqF>l?}%C6*f?GhNSBj)0iB_x4s%Y z6_((R(bU9b?t}aDF-k}x_5B5q z>hAmPI!{vd7w*`t^5eFbuqgL1-rS30Qb}6kYC*umZ$|UEiJ;SdThrkOA&vuiwU!OF zs1{pdRxkDm2gzV4$GLS$*Wpv=`$Y5udM>f z%A$4IR=NKk*S-%82^;vsleX#&<~fUz7+wq=~{;-LyB-XR4UUhCut*n2M&N7K}l zjc|h2p;(Z_#+Y1;gNNvVr^zoDV&2{~z@W8O#IcGRVeVqgt2(EzSg93E82C^nIF$d~ z5<~b+64kMGHtXcXKS!}S+B4tF26CuVbv}e)A2z|14EX2g8SneHYXJ7n_mA)1Jh{Vc1Wtzl)wpD4ZF=d zjLGdAa&i-NB&EcrARImU7|&2S8T8DRWg+XdT%C5K)6)I5J2N2w)Sq~Y#_H?OhDl@( zkj%3QQ1w2+uT*!mG0T65Jv8(4L{jpS7ZHj(rUxjZ6X$VO3rd|v1mmTl|Do!LnSP89 zn}kRjhhV*7VOH-r6Y{FJnW%Z;D{7$+@Wu&kVpS9LynHX&nJ#BlFAsN%iX5teNhFfB za?bLv!}!6rsECKyq?5Sw~-+C!JZHbl+tT_cTTQS zdMm*=X-0Vg`Io`jMMGD*(N4ZMawA|6rP}%y`CQT{S6ZF-4H2fx;U+U-d8W9ozQQhL z+c=xk39DH0g`rj`_ZT6!rzR(+lbKxsQu?WO9RG6x_j$m-E{cMWpgpt80tB)uj|w1l zp~TXmNtRPjK?F`8!#h0uO>BO^$ynAAs9;)hJ_Sg0x{-w|W2{HqougdFZ{<5L2(*ci zbr_EO=19>LKyJo3f$x$Q6Z7>nptZgk3qVG?9{;Algl88L`ib<1p^Mn<=VLe5J81^A$HuVgOAEW)!|R*F!Q)3cTE@w;zrixUJg=yYBEKS>xWIQ% zt1FCQGlX|Haxeiw^pBE1!s13{7v<6b29NmIQfE*c^ME; zI|~lJIufXMfxTgu*6t(9m-Bgp{vmk41P`23E7r8!Njs{2s*KWEZH|7RZHS~W)7wv{r(-1E~p zJw%AianKL~P^q7yYD)W~d3AkK#~zbhZ0%Y6tm~u0-%M&{aGN&tNyfqG8Ro~#j3*4x zDfrT1dz#aGdnK++qFN#52bo3$LEtP>84aFX6-q=5vc6+=7LvIlK5`diUq2gX97Em+RfDbSn z6Ms4}mOTZdAJoV4Y`XLpMfWy!phO}@<@7+8dv3>4%9$2aqD^1!=X^xAsk>ECjQ#T1 z8Tk}@Dz*#N7&kPNem?|ii~|3#Y}3%L0ekafJ&QO`kVh(LQD+bOV!l#2yO}LvWXZO& z;iNzvsv5>Ec#Cv@zF!UEHom4MOvj+%9Jto){L0lBVSKu@%0BU96dV?Q6mn|iHE(qDGZkniRa8kA2D_2aM^alEBgw(_cLeV!zW>~MJuwBf_ zXsn4gw?=_Oi7Z6G+Wq_D@lQb~id4+1KB@)B7S^Gty!Qx%{8XgdFPGg`wi~$N%IKfEM<*pQK)9u4ZhCb2<8@@$PMpinS6yuv;1yBlz z(US{!%C((DJOQn9chtT@pNbvXAU=zFA?7sIQ-h18Z)RPyK9w(4w#Ca^0JG_G%5$DPi+Zkma_{1L9{ykM5njWD|N2&K5`07BZ4Sr*xd$n8{jI!UmaNMiGo0EC{D`=GE}VE|qIx-T&Gv zGD%O4m!|k|qBEI|87r@*e@-WS9+>vDU@SMMV4)<;pqICPvyipOo9m8^r*4cJsj>4kM5mxdb~| zeQ^--gVMw+%M_~)E;t#Y*MQU_F8G7|V`Z&ww!5KKCQK_W@VrEd2hwuhzn58c{<0E!;frx@n}`b1h4BZf8UG`Oj+doQH=L^Wq;P&*EfKIlh4p?If#22 zY-D32VgkT%}&4;|#y*Uyj_iM>d25MW~2E^-`e z*})y}iPv)Bwf8K}JGk|PBw2fH1(wlcFf!p08J+qDp}BRD7&13`l1lpG8;=_4HEAYO zH;5s@VJou6D0!(*v8MI0H97pZ_b&iuznpuN%*~L#=(U*0y&`L$0MK<`q*7**DY?%g zZO^`PF;lT8!z7*LmgcO3e#+lkWmT%9X@`9G^Y=%OR$<~X4FJS0o$>;{3!OjvusP7-_aGPlV#{O7Ey#;biSFcq0RR&HE2lUej z7xlk+@+&vo%L=4a361szt`EL02w}2YiS3;EXL}ua+MW{~yi8j?fu(d@wa1JE1dsXE z^iaqsbu+$4%1=KRC29@g5Ng19CVdipC3Geky@3xD(KKBNZyQ+j4ERz|D>ZNpYv!BH zV!RX*VM_u1iNW(NK?Hv7GkmKaWv`GV1siJS{{&PcGUj` z>j_QB(vD0G@9%FHFJwz!EG3pRkD91|H7p*}9yD@SYTGgUALp-HMacnsTaw%?@2!M` z^my^iaNKm1ojnfKmojwgTDuW3PqM}!2KgQ!Z;|&E=#x*<^)wgkLDRlWunQy~ZBJTt z_QD5UhDFB#VXE^64jGPB23FL0A&{t$VFqLU{CO13YUR%r#2x zAj9|SC{1?JeT9>z1K5;O*C#ybg5U%i(n79Qe>6Y#-=V{UeLWNV1Mi8Xo7S14$V5h~ zZ?=f1n@M2u*XAAWv~LiPOsMrly#I8`>kT<+@I8ewmm_hyPMe)dhx?5@(3+zW8a;x! z?&7N){lwWGW>_U>cfP+1_c1odc61iuvG!A1Jmt~$dBOx-KvkljQS<)883^F+5NR91 z?D7rIg_Lb$c;%644h2T?;_pMyuQ^MF`oJ|>0}6?9chGOEA^VCAd_$--tDK|77xLZP zhrpy|Tghciu1+;_ooyn+(eLcW{X|Y-*uzK+Hw8DOiRx0d0^UgOQ0?&+MFL}s{z0^6=OoX3>#5>nM?$1Nlk3!v@m}%!d@x?8g?cZwb0e8bW!L*ErxHt% zG03h#-F*w2%P9z1;FoaAOVKJ(v)e0b<1L4|e6sR2=~UMEsyC+-%uiVae^WLjnQaS+ z2WlbEg0-(O;U}Tx#EkrU|GAf_rk|Zs{E@-V@Pf9J26E#>JSWg?bFNjw+N=<_JDnbJ zHEOvV?I3X~wucgxAnHlG;ksO1fYj{?u_Sb!p(S)9ytvyHno~NH8kzGwm~j)DUh#xHRc=7 zl|tOSvG6#efSJ9b<$|TGfvG z3r1T^u;T=`HoEBhf>x&F{ZbXwj*+xx8$~?b7GV#|9QViJ6ZhBCDzK-KiTlkohoNE? z$#4{Jpa~k??yq;udsc%*{T59ukfQ{52u%_3#Y(a zSJ4#OcS(Dvf^S+ErtcU;MhkM!_pgpGLa9a0=^5G)kfSx-|GF<0Nc}3$wXvJCJ!j++ z2CZSG1aaIBI|Ka_5q!vSuwX`?R9w=B7$72!@4XJ-T%*B^R3R7}pUGfW)C!2qrwnb> zo_gT%QcCZ=)a|JlrPd#1DP8@pi+s_9WTCCMy%u^<4_#74r!ku&(18PVK6m{6aia_Mtr* z6dEnk`ve}_pL2TKs@T)k-ve4?8YjxCC#)yP{fiRI{0~epj==1#@x>iczOTB;SrKP9 z2st<^vwL9TE9J{SD0rkk(~$N}jf8wbG;Xm}$-KZiwDKkZascR+OvH(bL7XFwQXqf5ZgJ5S0N}xgZ*XSEo5sqICp&V}Q z*nx=Q*en9TMkpSJTjixor^Im^4nxPp&P$aSAZZ8eTI?H(C4(Z!lWt(Qd};9fMNc5~ zu8*j5(Gtg4ayznfG_J&9s$}_Hfk9&ocJ&Vthjv*w&19-C9xE4CGiZKm`l%T%@DFCo zBMDDu>a~_Eh#7(Je5r9r(-Z3H31nP3qG-b5TxfE9=WyaU6tsV+nZaU`gC#;b8ujx7P-)nejwt z*zNvUx{@zclSuBrFxuQBb75%x#BE!cnkxEq+Y3ewVNy-k3GW>FDFiSJv3nPULWJ6gjN+Ra-bA^^fYctFgo z{#^~`%`;&b?df2_>`FON$-^Gr%tDCWQ!%|~u~aGjA0pNGSBPl(@`i~c`M?PArODZU zY=A>I-QGU;VwkRh%hP@@asa>lBMHGthC$9Y4SX6CXsFRsUhR3u8C{rVm505$*4^c>P3wEC=Jm=vS}Z`) z4!VK)MsslLqLc%6yF<1;ni#Jl@)$=ra^@()jbd?+!p>$ZpF>7@ZlIz1>J9XK4W}Gl zwBmX6>Fu`aw!Cz78+G^KE0!NVxZ~84f?;|Nj)p1enS}3`z6SUtSgyoU^8}`IiO^a* zA(U)CqOU3dVb@0-i~?<>W;Hv7MxigG81nSpWIvsBRUSUS=xh)7BT@Q%4E3{PN-liM zw_ZL-Y)He!jV=AGGcz_DgVJcL^AAC*en@b(%*lA-+$o3u_6hqku+aqZ2vLLDCd&Q( zd`rbcK{Mg7eZHE78@o3%^GRo4w`RvDSP$5-n|q8w?DGHs%o9}=7}~jtmaOu;@E}jx zqT%@q{HD>xdjRXOROF%CQ&akd15W?g?$)yoj5s%@q^B~?Sbo5BAHZWHOya*|A9&LG z;pN%Fb(O>5oF^4x&d}K8=G>sg%4fQ?W+R?Szf~uVBGwjOoPVXx`D) z?b}34m|T(P2>mh7b6DswoV=y)-1aQg?Bf41&}eVLzxT(_$CXx2DOR#h=+>x9I%Y@r zNqq(r)9%J#^V(iUdgb|-H7IYYbNEQNMjUmNv$F;oYDau{^g5Bt%?S~#!UJPz+&jdu z2}OWtk*9{7&rRGkOQFj`oyhA2f|tP#q73C0eb|>+^9GS-?Xajs!u;O7pK!4><*~LH z9{28facM8!+H2`0sg_}-GU-8q7$)_shfPE%0*9V2f_)f&4JFdB7;4(91S{qA9bqgX zgsF5Q{wKhHtzarmUxi%suv2htcp*=%uDjRGfy8>p^M3OaZ?MB)p@=ENoz?B$RFstB z;iOXDU7<{LahVV}-n+rnwuTiz9GC0U)Z)PP{CEvDgmY8rHKbdG^E+BDc`4_ePWv34 z+czjLb`4V@#3IIH`rt+;U*QZ2 zclN#`qz0cmdR4Tf98TNzSYA8c{f3XptaND@PI63ET+0SY16~5F_z z8SVz^0?DmuyKldhE;rWLjbn}nq=oVkOSSXciaWkGtkUc^?{YU*l5MZ-lDHmCswXT4 zQwS&5-u~97&fuao(4Uy8mXOkMcN%9z#8@BcXB6IDD7`0J9az}0=x-|Wg}d2pzd@(X zGdIk!mEqXujurPj`!jlS_pJ(-$9-|9RqyFiZ;sv5_OQl#WM^&Mst}l?7fc9TCP;hS zS8^g{8^=!E;MhZ{XF8a2lHN%!UZiio%vh1wo%S3*$Z4>keP@tMBItvqxplq2s%)EN zxd|PwHrf6pjpn_-rf^Ck63W)dDoLzI3#17_{xC7lr6A}ChzWl91Rq#3G3fL|KV-8l z^mdn4)*m_zHjcHZi??m*J()gASu7Pm2xz~>zVcf6aYKeKwyZI}gWC5x!5o=#XRJ9=e)z=Gb@n^qyROG#+^67PK7KZVM-P4W;cQQd- zlhC#*$ZV|)_eW4;rG_-+1(3^hKwd*XK3i-Afes=!=eDIEu#bgUTt zjfpEHFk5aRybi-|9z!+LwHsFM>s?W-S`cnyk3Y{ZJY{eQuv=g~5p5sEPw%lGGj_79 z`K3t`ZCc%t*kFPEcI`+1O8`cw=YAbA?=tWHG_{M@ZqDLiAB>bHQ6{V*BUdiLf`Ej3 z`~^Q*zs^t^A+eKNI5WvFFNEX*boJ@Kl%DLrPQw2czy0Ce3V$sDJaI$q&&rmp{of_L zQpxZ?nEk(-PbhE{z=3!NL5{>jC$saN$~8@5;og_06PP+kPRV=8TZK-dBjQXH?Drnp zAv%`(Hx29r!T%#etf*m&DZm70-(_G3?_^I0hu>bmPG5>v4rL&Y@{>>tN*x7D%j4Q7 zliNIu6QTz8Q3aH&$WfEH$JN0YP9zsPR(}27q+(jk39PyuMFQBDE9;%+UBlv}!&bO@ z?0Tsul3RxbchWBxpt_?BB!b(jmR1P#stv1&)}@N=KfrE&q5cDWj3up8Km5JXhKs`a_J8vT47;iNYT7JL~tHi~b&2Rf{=?0mW zy0!x`@l4$h(8V!r{<{)6CVhGlX00IT&M)=j@Jhy*%J*)XYn$c?6s71vmowZi$TZUG zKd?b}O?76Jg;B6SlpF}1MXmGxQW5417h)oMOF}=svt6p^i>sm%l!^6%rx)(K6eEC{ ze^`QnEzXSUL35kr`ff|g!U2uKSFIP@QmDTylrLlmU|!<7?#>RSab@Bg&vcH=(;XZ z;s2BAO_aZhVoF)cwb6n@RPKw#SkbyIxn_S;OS~GDGkKv3h50aGBEww0WFmjqRDMs6 za)zhV6CovHy_$-2posQgvPoQ%~{^MO^SYp6oVu2TEbGRE3}X{AUl1m}<OJ{s|`3FAg1hDyLC|QT&8-Uki+nXuJHWVegJ}7*D|hUuEBR33)7iC1YYV^+c?yY z*5XsPA#@@lnJG;(ZSX132h@=v_hLcYDH$HOCwMQ@rq=>l!*#1E#J_qrNO(+z_qiS~ zjd6r7H_XZp%H1hj3vxmRP>+C{^%mH;$?6%P5LINKR*#AN*^@rH+{REZ3Y5JFXfvC^ z*{sQw8=hFGJwVzAE=un(c#@45F#Xw&GBT09qZ47089E94X#4=EExdh7rY7cds5tG3 z$qbR%!8TvA5(>9<4mOZ5Z9iHG??W`2XaAK9BqQBoB!c9+0vH@_&X9y({YeoQO!s^* zC6Zh9{l3W3*x2`?vo?-hTZh|k004ljX8x=BAU;fOD}-74$fBK4mzdLZu`E5f%r4;RMmLu(|$mI)jjQsD%- zA76gBrqm}R7*Utfy=lEd1qDSKc~u4;qt@eDaBj)p?rjbPDq3;=xbZ`gl=t7NA4$=x z1=SXUvwc!ut}}dp=+c^~g#9`0qj#-Hh|anq$Tm%NzFzjp8iD$d8PSSp_5QIYDEjor z!f$x}TM34S<5D(*2AVM2BfOW^Aqfgh#vbdCrl22c^}uTKbbO!TDmv}Hr8M3b-gq3F zf*`w;pPe}n{TLbU>bSgv`qF-{5O^#squ9ouKTG18rLW*;wn@R_wU#qH*5 zPplb@iwlnb^8wNSHQ%&I(0&E4{#m%kye`woU>FR0z})O-AU=s%rlb+_6_%({uH|8+hDJTsSQ zy1yv+qq!&Zdt`Chh}_~_Ig_p@KHhw0ufSv$OWMO^uKm9y$t*I7%!$Qc3Mq2I!rRh6 zVi!nT7ZwYFktG5J;C5-=lFvkyzx0V69{}?vN`j*l-RblYo)(L~U%}0aGJ-;#Y@W4q z7QbR2R}^Zn-ECM}9}@CyUrG{~_0u4UXsY$s?)VOMKgxj~i17HVctb^H3BbumzuXwb0KHRBf60!Z35Ej1xj!ai3<9 zJnHhj6SF8oRJok_CjOj%W~J?omoBv8GWY?Iep4Z?Z}dOu<2na%ap(AUGvpJ8)vHiX ze$8h)&ssm7D_99lEO%dg3NO-KatQ*%ryT+}9U|e%_3!1#qCB_x>2X?Dm7#0fO-s~U zeT|y?GC1iheozzN^$?7n&pN{VRswiw&v|NYedC<)+#QbMCob3&Rh8|`rh|Xnz4DJ{ z$^W;Og%muS_WvTwi8s+AQ#h(J1KKtLGwMn1sd}E3_KjPUxS2IV2_ra#y zsQE6xLn6NV;@QG$*rnl_De-jH z-m1qWbNi{do7ce-&ZPCXq(8m2PkUC8tR+dK`SB+WM66cCx;3A%na;RG=7X^=7g)sY zL!%zm{{eSw@L}?E$nFo{77__U@|px1M*X7c1P7(x-P#HN^LK+cy{qs#ue6FhKb?d8MCPiPzBd?i?|J$kSjb zA(e*t0^hF~1MOKH*%9ctl+lOySe-k@;+ol(v~#x^ z(!>=FPQ98oSyIJBopu31Ia3>WuEVG596tQy!x6U)b>bo2dezBIF3#Njkn-KG=3ry+ zNAYazF+4Oiw>~^5tVxEKXum!sfUVr4wV!(6v;$$-Sh-*3&&qTr_bUA-vxdf^W$6E+ z@hMd(%=2TIdMS2^IS+q0K`F7ig)tS8baJlrG#EeCBcYGQr1;t1TL@!~&a_h9CzZ4s z+3im!l;6ecMSSFhA8HqzVpxnhc6DbimL0D3GZnwW$2vpI@!}T@>J4cK?U7w~C6Zi@G+W5G1$;x5C{$K;afbaCdk25F8434-UcIy$W}C zg1bxM{FV3nM)&Bx=!?Ftt2$$!b@rNT&S!DORP+X)ckd5VYG70k%cq`M8^8A0?zeF{ z9O&kwRg4K^jY?=C1{0(=Hx(1t?+N`~5u~8C#VuqJHdLM6Y1JLxZ{6}&w+S1^WhFsg z{xa#X{oycbRpH5#xyBhi_rd&k6@i0-H%G>yY*+;*4f~D&?RSnMp>L)CdZeI#-}?I) zJ#Pky^=a+Tky{#rKAjcj3bHq0X zKkDCZJ(q#`nX79=EHslX$F}+P6B}0;9v2oG(LL76`pjXPF~{V}+sZ~O){Q^@@Nl>b zw)QU5QirCaVy!M}JZ3X#zs04TmICAIiOkl)CAE{PNj}7e% zkqzbx%$cOlQu}!bsl}ZF(MHqp@1*gUV0oHS>(X8j|6dw@w_~G?(<5LC=uo6<4_}@m zoz$Ln%hLt$TFKs&62ou|hk=T0WRQI6&3pJ|{&hyMH+0r!=cQw@%vLXMEd-+p=b(#h zJghzBrb+!14v|!P32sbhGiAhm4J-)7=bS#YzvT>kmYl47oJVlbpMRuzgGnr1ATYGKIt#&*< zrMP4fXrmNk{pb~fpBAD3i>2%e;im0qRfAz4^wtOB;CN{dIa6bY6&+R|-{CUpf|;eF z$#~zapS(Y~nAGxS4m=zgHESZ98rN$Z;eGwqV|1NTA5thV@E1VfRaYoIwj_7Xdil++ z+jMBbu2vmGpvw*V?ZG!LAnm2_IXxE5EmVy!3Ixd+6E8pYP$SewMt zPbWZ^fZ6_f2_5IQLNr~*1kYzm+P?>K?{KS3zE-2MCCgLD>F)%(PLzgGm zS6Iy?ToKs~nd^9yu$ByKYt`iXwSd<~bKLkKb2>wq-~U!`CP%UJgfQOs4B;^)wum8f zS7Zkto_lLWSgP{c4*GUB%P*y zne)>_zJk;(5~T~LjE&cx+c4`xu7-YtQADTsLbd;o(bPl+%~Xwn2Ul!3;?Ld8Yx0Ot zgr+1wS~S9B256ejkB!^W^?H2f378QNBUW3sMtTvnPF0&w3t4p#`@yUrUp^7oL$bDp zh8nOY+Pmnd;5y1BW5f39NV&6u7S6&0cQN z@8taVOu@;WlcXQ)c%b9i+cRT2$7`+0?Y~xW&o)R3=T}I!bvV;$L2uTt2-oXn^UsW+ z6`0x`M50Z+oGn>shz(7o@1DnM?Z$0yPZueMn!tlsYb$&QqnT3g5q8Z*pY8rSZPK~r zVTNJe$iAA#^P}*h_wXpy zkB)Cdln~T8vP~7U<&va+Jy&cwO({#ZsY><<$&RE%=8iOZWwE)P8P3~YKnF}t!C%5~ zMb`|YD3~7J&PQu^o%!-?z*Tp}ysR5CL|fl^sD*E zCoPZPwZ`m~>{jLr=>%YtCSvc%#fCPuc<%VGqU274t93=*KDCJW%s$Xa5 z1juRrWF^UF8-g8ywra71SLb6>!0vRo;ToT@-IKc6!xR(>`m%4o8CPi%*j4vXFd$WD zsHosk_Iavux=j27mMG-7>$%v`ArzNMsS}OV!e(ZP6kL8&;vx{nF#Y15N^5H~Zl-K# z3H%!WnOd61+LYn4ea30@mQq_&4Dy_g{KeP|WmmOe z-U9Itu#H~-1!!XaU)tcmr}3X~`2Q&+W9n<2e@&tCGz-&c>6BSSc41a=)$f#*anK91IzLDa!;X5=Tf2 zy5BJyb(v$#LmuF7nWh;VkezyhXDxj>c9&ek@TY?qi_R)8v_Pf~9gK{XMCon5_{VEB z(4esx+s5JBPy7=?Tlt^0ss&?hU)sO&_1wz!+)nM)$tPqQB;zYSZ28nKvR%tBY}ie) z-##N4FEd2n$b(jmjA$R?9Lfrw(;(^vlCM}NkMb?YUcqetwJIRkY544kvAG!<5k>}h zU+r)KKFUsd6%H!q)}0|BQ0#d#>vSo9e)o_CPQ|s${FWh-@G9j+s473KiN)yc%*B85K zzq1y648x%EqMb-8RozZxSGx%$0(oY|7wjw1CI5!VoH_$uwJa&zY`@NO=75ueIb8ZZ zsF4rmL2g@}bGcwOLi9sn=BxX<;TBuIu)npJcV9IK*C^gW!RjD7nfhctror4@^TE%i z0v76mTt&nFBO$wlG9k{RgDOX*T*0wj?A2;U+tnDq@%Sa5-aHYwD-U3!#hJddzKS^f zOK>o9+NA$a*c%FI^z_vA2HHfwgRTrMfas0m*-BC7V|0AOPDaCMCM<}eXKb9h}Ch57zF~bSk4sGP1+oYI3bT|7Dkv7aGp-GW2aG!ZW1!w7BrL zvPLiNW|Z5VzrWvjcqvJ#)u)MG=x78T+T58-tAgk&GiR;gPQSdDJ7zo5W*`02IE1=b zhA!bbX{X!H-|jYr})fcAbMq%*pxgqxXb08ljx&-}A^3w<~E;nrbUP2hep$ zC2_92dR!Lh}v(YDCx_=Vo|Y}dF>Ox6kP;pDmX z1xImxqy&v(67J&T6Eo7+Xtc&=TPKHJ#H8!g@wJdJAmx(%ms8j=QoxDQ9_ctT_;6UR z{vsSyI4Ku*PmJ3bm7~-#e#c=aCSlXjrQ`0%$FpI2!u?^O-)nc5bKxG0LNYet zFRRi1_ytOo73#ahiEg-9hT3ayM?Y)^G6VmO1re@>7>FGyzw9Z1GQ83VR9S!@9c;fb zS019-6h0C_pj7=Xd;N4&_o|^%3Kw#;=Mc`p%JV z!ax0FVv|cET5Pcs!I~u0SaRaZ2jP*));hs`pVyzw?Sef0!1Qq_etyCLGXi;0Z&CHa zt{ikN^fVi@WzlnM&%Vd3W0+iNinG}?-mxaC?W+_&*@4q@VsGS+TkEA_4E{WI@&hlX ziiFjbi`%R}(dcqQRW70N*K`!+veDab+bOA=?^y1b&8{@w`=YbOM^g4HN%-9%WqL6g zwBM=AV&!_+g}A|1p3!R=*2RHiLCb)Oa>lR$uQh9{8^C)m-OVa8&Q!{br5o=yA*+1@ zTfNo(hlow~DaI@Dzpb_$nd<}NUA<&0SUyNg+=)9j!UeAypX8%EH)l@OBWQr?266y z_>HMxf`@=)II@CqLyltTo__QSD1|e6XQL#nXDU9BDE<0%Wv>->d3maYMgQ3MV$F%O zJITxGqx7Yv;&#m}aC(>_?r*bi#AtG?dh(5Y@2GgI5xQwRY4Un{KOudl;^4@rs>0jc zc0ucrd9dk|2n>fBYto=AZPp8AG^Io$Kjt8h(tS2LJpqd5ZHhl5P=di|MCgo{p|^N2 z$U+nuKp?JZ!CXlqMO8u_h^2Hv{3?+*xqop2^86uLEEOF(Yqg_cEvdfR%=>x0e6YCI zKpPeJi~ys~RXjx8^C_Z0{aIev*kc3OPwhEXU_aMyu?L0#F|n}^N@VM3$@{h*AG~@d zjor{&3aFie>+?sDNxV%H3T~=2oYx7%r;}V8bsI#Om$1e1Y1kPk+&k}Y;z!8`G5oo$>u)zwpatXZvg^>%? z`{m@s0;M}u7(unVp!$JqzF^0)yv=LMP}ji=`OaW6vOq}*%y`nFc$>)Z$ssAI_;V>a zi8K3PQ2JiIAaAIckr#WJr*h#cMmGAbvG*R-Om`drY9;K=)HfhVBdO_!8|5M}>#H~2 z{aYc|p7d2e6i@hI`sqjOIfM6z;fnlJW;fuNdYAlaDA{x$tYRI3naj%t`x~+>wv%+K z>vIvj=nDB&7QDCxtxDVNN7gnPF_TBo>J!^{)v=pP5d5rDdgj9zB-wGXNB|)%y7nqt z#H9Ez+o>GQiztWiN+SrnT$cS3{GLe&M9#&hS?lA`F`F59_6LFC^hf68UT-rxo(L!- zx#mo9j!OC@9c(@o@iAHWNNdi_JcNt^MH)SK5nMuclgelMskY)Ms6DJY{APr#Rz2nr zvLZ0?tOgiM8Qj!@BZp*wu($v|xvwn|?68aV-S~e;6BSr{NABE|=V9-QK;i3~sp>RV z#r_q!h4I7H$zt6zD>sShTZY71w>8fIH8zu7$df!R7gPY}iWuj|Q&4ujr|#cG?lqvA z6Ibn6Cg5&Hz|&hj0Kx0*Z#nLB)rXu;)_5E}zX5pW_K^tYPH<~;XI}4^yRC%m5hCgN zuI0mS#pti@O!KuGfmF73skvibS{8G70&fh6y1+pNIi&cl)pxv*kUCT2S`<(_UB^>p zRGxA~Y#pI{%mihrBy5^RnQn*a>`lqJHmZO!xjX)4F6UvQ+Ia%obl{7f0@Z+Put76> zG>Wj_&?C8GMQ%_D4OqN18FA8Y-}N>v@F(I**WXHliAr6Ip~TXj5WPr!BM?IC)`wP! zxvgYewhPlaZg9#>!R%e{N)O|beS~1<<@bwt+{yMk47;5X@qnPl=9s^L%_q^qME67} z_^yNW@ToyYQi5>KNPy?3=4kM=`;dd^D%UvqZuQG+Vhj>RvwiG5L#%N{RZj0$KEKuI zNYQW9Xk&xb_2vn(3ot#yLuFxryWEWJ0CYVq58n0es>p&AKQu`B-G8oWO9~?KsxS&` zRPtu=7<#htxvczHO8>6im-)Gt+jKi+HKSMDdtZ7tdA!HXF8q?MT{J4Xqwrczj|na< z2t8DMx130hws>o+EEVkH9qZP?B)3BaZ6;z`vh}JFqMe#PWRK`r-5iOtsPilMD0>zG z$)-8m?Gw4a`_VtFu|^tS6|G3;Qh1f+K59doN;5WMA%BGG+;*<1symdC%KRnDa6sw3 zZ3J3>rv{71AseExZHtw&A46hWgewM7bs zgL6cLExxG%wfxh6+be0VeN58ibRh}tzQD!knrboSFWbe#O-BI3?_*UR9vU+HLc2#% z@p!BzT(S?U1rCc-#*7U=eR3u#DO0ly zeVOBzZu86MVSDpJprE3Z**3=ZB{}0xp`Z_BOc@^>e6IBS5+9=2s zsqXKBdYm=3A{yCaKb=vHl%9V~Jp7!qg*F+CAArAHM4sJwj(HPuvKva3wf}f!{wk`9 zh-=5NrZpV5BiUrp(R2H;BWVChblW34Zj8vd%=C(ZF)#{GKQ97utg z>19lWgJ^B-TufvX;vG<~cWF+u z7yHH_)2Tu>gwtjmc@i(G&S$lmNO09O=sUu^TvI#!OhS!v8@SCZ&(tz%S%V`d(7>;a zzoU`5%;vwVj%Rj*QUmbVYY=ui4u|SK&o>*n8HQq9SslGg8b#k5IUJ7hC4W9zW8m}7 zel*=v_PLHU+&IFz5zjvCFRQ?&S+s9dFYYsvVM9ChOTsKQV>9b>HXS|q+WH`0qT-3+ zMf@eK`T*fduxA6CJ%!3zKM8F@H!*E8e@*~Jaw#;?R#k(&?x* zZU^S7*R&F2V_u6bmhX=GJTAUBvs!mr0BCRc$cFs4ojtN6)(Pu@v)Zgil`webUthz&59^@`QZ&ZjSSVloGToW_38f$#U zDdA=-M4K5B@m;%tgpE7`W%M@dc0Gg#iY52XYnww+)pZlt2Imc4cZ-!ywg&t|M?yLM zYv#5V9@ltwW%;Y{&F5e0Gl?!PfGa7|{mE_j1o!H``FUstnCzkr0Q2;a{#GK?JQhR(tj#wEk1yAOPbwYPQLo)bj}o&f*I;t z6;n}ZmS;U&Fmjdr5#Iq)SvZdCLG$dQ!&kmA+$W#D$ldaelOMHkJ5&(QwSnC2K8hpF zH4QC9K$6(d+HTbBAXLJbi9JqUNTMz$HUv$mA>wME-w}agP8Tq>v52tEOrHib;^d;j zk*QYNXmx>aAqOn3h_%cF4xeI8WjMl}p?NP6R8wPfDi&HzT!IStp&;%J85!w%2M+_= z+7?H2O_hUzzY(T3D1sgR%}OKGnCQM{3*5Eb&zd-SR}b_VzBCMA@-yV&RpmNZ=h%;?5{DBUws5Q1hC3b9^>qzGV}EBi1Eiz?T_U&O(9ck|6Ef6TcMC%w}+N7JS@j~ZZ!O3D?| zpg(uyxy6y5H~807q(wp;N;$G zE?A6J5-Ip^*77=2Cwyo`3ZYL}D2}}LsQt7GZ*7##8@2y9y#Hj0?isz_|8{WP`j(jX9k@!1rfsfegZ{xt18pYge#B`u#`gyyAxkF90FD&b32Cbrs+ zp@h)42cRz*8>69tgO9HXT;rf@DlaNR1gpLx_Mgjc>3GQK4$Lk))q%*F6l~!nh2)&u zEIr_jU?{TFzqX-buFOQz$%IG+3>`Oa#ha%-WJl5heQq8WF^EX?k~iFcagPIb)HyFE zNxdo`TUTP9=nft$BjodJ-^LO2*<$Y>xPu57RQLaAW2_}x!k_^9pNoZ}jM7elg z6-!;FBlrjrJ$v$b-nt2+b+&SG>T7%e`K+u0`^%u&r&JUw0!jDMwz2a)cB4e;7(sncAJ*l>dH@8w`5)JIfFpq_mK<4ZQzId&8DAN7JUz|SQ8?NR8J(t2{ zkDFOFPTfID-6L2Sb|r5CEB+_1E5$I3s&i(P>!Aua>Aed}Tt7?ZdX&JN1N*G5sEciiH)qmNocX^qb$oO8cktA3`_Sw;loMSd$*3m{?bDOHnIpVG6Oh-!Iu+DjoLjGFh zeh)Y0CGy@?G5#JMSGT-FNj?_J=t7Mp&!H9H#PLEM47HPs4xlweNp)x;TBwuqVhar+ zA^4(Zv^`P6a4SnnK6ll8!@+9aP=rR{86BX*HfeB4x2uajKl4DN6TTqzI(>|j+q{#} zTh_|tmR1!mUh%$k5kx^1wcM}DUYe1@&d=n;Fz{3NmEQ+bebwG>9xbWCFQo9u=mMc$ zNH<#ws&xQ49$TL_EDiceLoeNfa%}k4gj1U2h4dC`H@q;XlX6G|36Q$~cA5t#Gq3n0Q*M9T}ET*RTj-Z58aC`%=) zx}(iApHx>g9xZ%n1$83y(+5L1nJNxMK9ap0GPR6Rl~_!pHjAffT`kT;ncJa6G6bv1 zGXG)nlKSOAZ`ARc*idg;vq(ARx0Mx3mzK_*v#7?HO`bN)vguCQJ-^FdspV9&tuvsa zfy&J*)Ih;0R5Hc`Gf43EHxQRwWK18y*s-?uz6Si0(Te*W)T4qFC|i-(b>59=f_sFU zKOC`gIxKSU@j|wyfLC0>LNK=i5zm$_hMys+u(wXMrcE%r-7_K%vnDuKJVK+|mzZLC zwxD}nnC0C49qQ=bf>0Y-=Ptu2Sa#4niKseVtatcaR{{zuH}pTBYD8Ya7&+m9f(khA zBwEanV^8s;BX-+!GZkd9=I&;%U#_)ea1TaPKw7zj6pJE;OF=RUq}LNb0QddRcVf{s z50)*JaNq}fXE|EUI?JyRUTCPWV2FrO5{vh!2|3%T_>-FGLncyF?XR%BkZ-w1p1-D7 ziML~OSD!g8QIDyLTCnm%QPZ79O4WWXQGH=sqE0RTKt`y%jq~#ojc(39u$sy*SNCL1 zu9IF!5oD&ZZoyJpbh`6Hil&c!i)PgrE3aW?=r0ag6r}+-<i77`nxJ$B=j9)od>0 z%fC4l5fm;M&17^0N=4E&o%hVAbCgz3f+4jxy^8_#hw_?+p|@kQpS6gReW zF({usYqty22R^_L(r$dv)fj3U(u*&0*Gh9G8a_UVPZ4l|+iKA19p58tjH)nQ0T0S$ z)}}}^9!}Nwqj_e160y5ARVmNq7}5i!ZK<+ZK;;G%lTpGGp-}&Q@oiAB9B;h0nlxJh7LJn0w8~)9+&fT7=*o~%(gse) z^G%Vt+0sF?MPFUi&OHtTembS-91zgWk%%;s)usyO2phF{Dpeo9OUnL)fx#F0^-P0f z{#k0CR+1-%DUEyj^|`06STJm7gBE7rp#0&#F(<(L;Y2jdHHBFPst27SBEne|nX^%SYltw3!$cYA6lXBClziB}$|quKS;V;A43>emK0 zYP5Fk4?57vigwXca_T}s`7}xBVn+tc-c35(DY%BwZdL*G8y@Z5zp12Q(Mo3>ia|It zN9v@v@LH{LtrS)$FLrH{Mzg!`4z5!84Ds@g)N(JvBM4h}N1rjR@R%z%Rv>b=D%q!k zA)ye+XSwvlE0b>3r%N?ov~Q=3)@(-Wv;K4P^uOt6BNnFt>_&%JfGCpTx{vf4UP2(e zt@lqT*2beL2y$s0SqJa^3Oo;RI8JLaF(*xtlUm*FGzP<~<5M^sD3u=*3%n<9>quM^ zWcxlCP{Y`=H}HpQsY7uDZU|Y*;S5x5G;@x4vSx}#HBH3v0Fcq`t}l_BafQJuJ4D^ynEqT%IMVATLBO%V8Kf`yq9_UO`zk?a=O8)P@%=Xj+Rz#-#))Ku;R<`f$(+?N-^2PJ|J)_$|J)_{B>BjBJ_!Yp z!^*ey^B(M8s*E!yvMnUVOJdC^*bw#O8^dcYP?hqR-kii(l-#G z8;D@`>k85HWWDixhbm7SgZ1@qq{{WUPNb6Tm_41)$09}<(7X@;w^H$yDPj>L^?~&F z-S=eS)DX`zW2a?u%kM0j783FH#>!0;PLly^SHtX6A{r~K1&*V z(y~`}-eRBa5cj41b{`?rS`?}xWQI{CHEKHm6$aRr&Z}W=-x=oe-j{4}{sK4-^Umuz z5A%{uZ4>vQw?42pjj82E+gTc26_O4Qr@BK!rhcRyNmdEb+Ad^Fg{)X&C#lc!Q1yCan1y!JlXc0i=$Wt9a6R_hB-d^dvz<{r z_Sut(d7aKnnwV1cJY!cphNqxS>3`ilqHnq8QAg*Fy)JX~$FkLj4#zy)sU=;NlK0a| zkF1#Ex1JSgISv{2@+ur$Oi;hHon!C<`E^G!!rsY;upYr_hCX63Rh#7}qiv+Z+G33v zwLh)ua%krDy};g7i4YME|w?Wk%5dUuZT!ZW{YIxcb}Hc);SVU*)B7NDwH=`$kLWa z3V9fZ?Usghq_1?a7mIt~H@OlpCL#W& zrJF#2i7v1G3+t5aXE?Gg#%YN#TiO6D1q1P5s|vhMoSVuMJTRDK`x~f>^dnBSFYhnF z0ayeTdrCYgF>(Ku4#p%vFZc-b;6Ophwbjrgya)yvQ5?<=>yx7c`@?*n0Ruq;^i!Cd zxzho8DaQ7gtN?WMtc&oNw*W&Eee}sFkchhRH}uJ|bCy_Y8SNsTMchdyjcA7Dm?edi zn>;RjaV<)N|cP+)uzn@cBzP2RR}_cQ`lCM|H$A+^%;yCe1y>ced3$y@fos~$ zL$k`#AX6|Wss4$)a*)9dy(-LUdZ^06B;`BFmw42-8Yc=FD6KdWT1dhA)#1>xlE;y7 z*8!HLO_wFbnx$TiTy4fW*QL`p2L@TncCK9AJnK#|B=+Z->;!QSM{mMQ z?O0nhlR?%CP$DufQ?GVWgEEpu=8{6K%JpP?Kbf_VV05wM@+nh&rekC9^~o6rkRRxC zFt2i}3@W$I_Qs=c9|7e|C@bc`>A3zX7g~Mcrb&XjE|u}f&7r355s1AT@1{XCt0Rx zeh+G(8TT-Tp93|db$7@El!|7vmMS;|o~x|5$S;x7WscJOZ;gwuXBviisdsmb4pfKp zI`ECxcLWm8!ni&WBpIyv@h6c-H*l`T8||c00F<)K+&)jbO_C_K6e%#~KThw){2K$y z|Np~BH+TOUP25IsC4JBJX*>4VbyMy$_S36>Hw_7welzi!Xth*|4I}`VRU)Jas(@}axux?*uw@co^)9XlI6<3 zH|1jeKhqFe(yn@0l+OsmE2i*)^FCWlxjTVo1?n{Lmzh>sQQ`$NsTe-e+Z4i%V2jVC z%G>dUa?J(+b-TG!9^sn|KkWF-{HCppv}ONy%vc5ETz*W{P4+3-anSW1x;|FW!T=}o z6AyKEezcKkx7$o+Q?yw1;OqSh?F&^IQ&XeYhpl1Z8tAb}%ans`py`pR#Tj`#`}MmV z`n0&`0tt?6A7s51#l>Kye=*|lS3Ow5bXRJUq1XJ()Vm{Y=CR=8dsm&!{c23@>#T8b z(hhA#9;q-$(BDp7`8d*$>7X#JZ6nq*dc( z@%RuhbZc7TM@|MukFw>r1^Z=`3@lMrDA|y0u5QP(6@6!a`PY`q?IlR>k89CwSp=|| zQByz0uOr)ZvT<2^SunY~v(9*|ME~j9m8$2}A}}*lJe|V+y`*cU>1FOT3^;a`Y{p&_ ziz|NCqk*AH5yLdU{_+J6Ld;K>qP)IXh>uvH* zv{18ocXS<--|T*fz{`?U-HEeNKTch|>|d)*%n|5>=$zgXnc+g&?@5;ZW8Y5;y|6V6xyrGt%5z8V># z!!qz*)OzTs{G)QrWWY2^Y?gIn_{#zq$*uuvD;Cdf$+{y1=GURrve8VjI!kTnV*LaXIBOHeHh*4Q~*hT%n zPY9huM+R{S8zm-N+!^U+)5iSWi*O+0l<&bjz*a$V%aH4m`gFltYbhe6Nl$}p3m4%o zv*}N1hlp%X?#ON?+1je3dr6e7I8EfNoH3wH=s80LgF(^xRp;nEJPg$&LilCHpV-5S zwQpWDMSXu&xGEvh$!pT)-hHWUCc~mO+Fp9q;vbkE!v6K&ScYO!K*&#AQ;o1YE{5`2 z)IC*Bbd2w*sn$(^Q@5h)Tu?~60r9PwOc$XaEI^1-<=5}(dMp6$2;lZeAq^}>%fHBR zYw~f#eY`z3?Y|`=6!b&L4tcpFB$NzMy!u{ZkMv;8+gm~J52OmjINTeq$DD5>h!0&O z>=s);TH$eseRON*wbv(E7RQHI(A}1a(X~p37*a7E6T6MunN=1W?L}oC3;2e`LvsVs zJ_GibFaUFZq?#LLCTuT=RkNChpF>$Tdrvo=_5~V$8HI94b!Yu#y=6*9Ju`b9%giO= z7Z;AQ=LAcYNi}L1hDG@PJTsU~B2a^EF2mvn>a;>n_qHST-{nQBleB7ODskWzIGxp7 zM@l4MG6$aF<0Oq zeXbzljX0}UK3@0x8PJcz>h+DC&iDbn(xEiPsfT2pA9Vu$!G8P6#x?}3&mudY3_AHP z@Hs#oZE*Zut9sesyuv$PmRx2rx;p(iA0#r*h&%0=Y&K6qhxGjySmZ=OIRAeVSy}&Z z2u?8mV|paOS{mVlwr+QR4_}%B|6r1r;Y6fc7$18^3&{>?=`K=Q1cRNc!Rd)TxpbG` zyt$`O!B#!4pl|N_Oqq01BE7}q5Pe(rA^)G@Bm$jbM(rqpfvl`@i%VTGz#0pBykpud zqt?{J2{{OFIiqoH?9YzhN$K~5beE9d=Isr=k`seLBc&xtg5>snGy7(0`#44 zpvFP{&M^P7XLB)Q>ANon|0vf2D;NF^NTN@110+#OO1LGihws96`=oDG@k3$jeLibq zo%R3v%I#pdg0S9mxQ2cABO&?VqoQy}*<3_yQJ@^=R`!VWoU^530IuI}i-=!ssn7K@ zLLQexuKVG)d62+@z)IUb+4~T7OQ?%sJkjfJZ?GS?Km@Ycr9o2Tsp2DvMD?;MV9BtD zyt0Hnv^d7ad2}h<;eT`f`2PvrBCKcS;H|5|7I&O0?9V`QZw0PbC>Hq?jucyFqQ8qDDdnF4Z22H5tqQd@Yl<9m;8#!~G|Si{rNRE?Nnd+)UP5_jg+9F>i?-`-|4^{jgFtMgZ5a>ITr`|BBvL* zS^$-Px*=p5ZrDJyyWGivD!+oR}mF4+rdkS?&>Y118&m)S9RxD4svFf(= z_EKh=o$D#7Q036tVYrq5Ys7r}c$ZpX@98QjbBM^k`2!2e(Qk+p<_2Z`^VL-|a&e?D z)ScXRq_8)FM5(P;2IoQcV_8TSFUOEdR?8@ERc}f@f@!o=B8(uoESR_cn5}eO`wPoz z0wm#bqqXYK%=7 zCtiWGnBwrze&A~YA=10^RlcaX)M1ue>F7z{)$ii};kvjB{UbbGN#-sFFBA1VPt)(;YiRTx zL;IO;$&+#FcBxmrysxGepMKDgc=)}fwn6B>>BA=4o+Mj+!DMxenjp>RJvNU)Pn67- zaJ>ZLcpGk`s~^ARZ>kxPc*I*Zk2C zA(#kxBe-b|!ECO&Sq!^_Atu`Ha%bZRwS#IL^#+La!zWxc`DMBWrRH z0v&T8o^0EC+Xy3NIg2V@cC4h&qKf@La-$}fbU14mx%a#O=AT13`?pM^L0Gm;UuuEVGn zvr&DzrM%H%UcV;*fsX-1?HZFef^A%s82Y^9yHSi5FB(Xu>$RAcF^B8PPFBIw47GR> z&u_KmtBe|#Sgbl4r70JK^k1m=de^bz|tvLU(s^LR+$#(&jnrL~AQG*`6CB z?c3YRk9$iB0xWL7<4X`m{x!H`;({JXt#LnA@va4ieW+k0>K&L;!D9wGnTMl|`mlwX z_QJO1J^I*+XK#WN{_o6m*zNLvnd$Z$E9cajC~Q<%W|~agNyKwppl^f6e(_&km-Sy_ z`oC%3AZ(d2NA|9v^HFEms;D{ja80Hv!zHy}o(fW(VJm-p!#YQfL2nSDw5tKj7l)>} z=IRFcT1{V(*37UEOZn!u616MxsfW}ga>Jx)>>j`?&T3Nop`UaYtUw?HJ(+a(*BlPy zEWU*^hyQ1<@&o&CQ9;;BI0W`ZhXRTB-p)n3|67Yl{&!9#2-6nL%AGSORF zY#P2)xbkR#T8qWIrLkOzAUZfMH-b*_mroto515kG>WT_aKWmnMhAdNFeZX+@MNHHy zlj#&MYLcKN6MFq)&Lop8bhJn|R;>jV6_tpczEo#P1-olCvOa~NmS|Qn8rg+8?!+uY zYs+l3hWu7i6DPwAY3-9f+rY4s|FcQY*#ystE!gX_WT5y;Kz%)v`H!O6u7TfX-0@J+ zeRPb!%LnbOk>9am_XdBJKnKgXg)tf1eI{4h%mM#fI~4w-!vQm}M#nNik30OAM{7H! zi1o$a>*-YJREm7J#*i~xVvYP=H;rS^)C82=pf!H_9}#_ZK;HMm%6Xbpe`dj`g@Gox{jj1gT=+qOb6lQI9Y>=iea~F;g zaN=)Sk*8rYlxoGdoN?(tF%lT0eY@Vhd(xem+%fCw{&p&^1LHC;u`U?r*+Q~kzk!2m!*%_lwYXYI zXaX_J2^>&6nRom_uN(j;2(8}pBs6{Z={!qBd9~3w%{k>+^iAstx+sTTuHD!ZM>(s% ziGgC18Bai1n7T*^uJ3P^{vB%&Tq*5VrmRQf;?F^xfpQl?e5E3e&L^5a%_z5vO~aAk z3A-2hQ>|?rbJ$LoCMK7fdDG+1NZp?FgLq9o=EQj&^A|ojhEEetoKC9c-Y;4&js z>ZUi(v+Alscm&7EedPXcr;Q)UKOYQ$?A;ct7IU?eIxb%#jYvrxgjOk+=c8|lVst7z zFST>&GF_iM+>=zD5ia>MaYMl1sO9%^dxLN+M!7IH>;Yk8=6-194!A99oB2oJCM4q9 z@2_?bio)GGWE>cyOz&<{^c`EaBI9xrtD(6kK+QLqS7JzIiHdZ?_*DB9 z1m$Z$W)=;aqPlPH=bO`QmARWOm#bWiRxu;qEK(#}#0lcHN6I@?DRj(v+GeKt;9kB_ z=4Vdc69=qe51jDwO3`UWm37tbzCRzimGn1 z5Z-0x?Ms~zOeP_5I(SD4H+wp~2wN1dQT&Dq;=VULADUGgNK=cD!+6QN+Ci8q7-?Zs zRCAJ(DiwgxDt3Lc#;YL5ESY)v@xJ=RTB34Maiki5=Bzd9GcGaOS)D1`LHK%%XA$q^ zw)HL)H=_MJRZx5K1dS>U$C2e@)-C;ADgXUHna3Rt zR?JrP`!?-23~E13LbvY_C(UXM-J0zSc3fJeY9iW1jZ$8onz2cqxqgRo7ZH5>fLd>s*Fb>TjWF!8i``Cko?Mv@ghP+x0Z_r>^>m%RlkK zkEZloN>QrO$`8o=Rbf{GZZ0O^uLpD+(u$6ue(Bqrr1i+PN;CAhZxnCEo?Hs%$foN< zf8to%QgcNh)Vedb&{5TNYD9nwU6MH24GzNrgG_Zf0dGQnx)ssNxR|Wf_j}C z`b&oeqQGby#CU~2`Fy%0BT^Ib=3iil`2S5-kBgLjHc2!7n=~(VzoS_FGU6p_rt{Tr z>m)Jy@OwnuK}Oj-%mqQPLhZl~lOlsidHNZ(uh2YnpP5Q5u>5(vH4%#&3nb2;B}&%<{&{s|tY>YY{s@qRX3QCkSpE*_~b*&Yc+ z%v;A#1=&e^f6;c;UcDj{v5vkR1rH99VKh<_s7K2=W?m*&|9e%qf3Av|gKmYBiTEbb z$z7DU?UqwyxxatE*>J;&JG4X+fFIm$2{~Sw=b#P+5IAt(rX8MxYayJm zHMNQodu>K(AR#N^k9>j?6US_KYNV>tr1HTpy?`WXBtjdHjI>^#%|g9VP3Dumc+KBl zln(|Du<0$WWqU5+ZP0B~h`Kdc z(sX|L2V)F`dR$>In?yc!h30xXVs?}@q~C?KeAGrL;(G1W#H&>hg($kXkDxSkAL-0EfW6^H{%JN>vtCP0If7eg_PsYd`WIJpUQJ>OV z$xB}5!A#mv^);U)Mbc?7PYfV^>cR0bCzB8*q!%54@5nKqiz($glgy{Q49K@FV%%rIT)Us-QXvYMM=mDZOcreX4 z^B+liFo=NCCAOuQz)pIYJQ1z^obL^_iQorL(fx^UpxJhY5^WLLOHsS2rTL)^f2{)EJJOh6ry32xSCxb37=o`Ms}<#!gLGX5 znGUSd*qI$oQM649JOwj7Zev-F1OP06jCk;{^}E5U+Wpqtu<#KoqR)SU<$q-x#RH0) zR5vx)Nz5ng>ypgj-HB?j@2M>UCpTyz1{ZUq{m>6n{<3w}DVHlj9;e10&zGTth6V_^ zxw!U~{07O5ThHZ{iAAJlz!6#O(<>JrcN#DRMLy@omBgq_Y|OP3dCbRUrhv_SH{=DF zVUs@8Sz6DJlUln)hz9%^i+hks_iTznk+4&b#y!Jg&}Zzt7~zNN4{ObqU<=vvu()Yr zSc~S_;Zn5$L?!xh4qRU5$9YR-#v<8j3m1MkKU~KLxkOIA=MP+pED<8$q1sV7`vLQ+ z7$bKSW8YCdj=h}d0iYmpa zYJ0|`n{A?$AMBZFLA%D0kBf_ooj0lc#8%*ro7r9?`1er0(bkt!uy=IV8oua(2C3=- z8S2bnvTQUdfutK4@vI=2-NtQ7iSWLjiqFX)!ada4O#!H%JRqMTa)B8+Zb2eFZ^|8Y zVj`GjegU=yGcW9TIkJ96uV&F7$wS+UT7-ARD7itZru=1U^g%LbxgjF%wSg!FCwqw{ER zg)Ex}Jw*_si;s&$s35xZctmXeP>8q6<M&9AJ5e0xqAkZk^X1cU&ENG(J3Q04P=HxsIC z=5ou=CgONP+jgE{-x1N_)yLmT324kuspZQJ4}dc^7)!zewB|&jH;2tk>^o-?Frkcy zc9Ez%xdn~FN$KHdJOoaHKGaKmdOW*bRoALTS2_p4aX$_cXVaHfvx&5(I!@XigK|k{ zfQRhcbBnYGZ{M(WOn+F%a|homE@<3TpnCJ>Sg^+ly+VB{GT%GgczYPfl31_LrO5r8 zE-?K$+0;!o(Ste}=TpqpZ{~GM=9`mik*tj&_mFLw$oUj2hjASeZUEcN&c$6 z6poY%6XPoH#W~Km4drsu_TRjo5wAApABwhq_>?n&TO;+FEK}<@KhpBlQ{=nWH?gjf zH`0FWKf|!dj7vC(uvDybC!%Q?gY#tu$A738D~%j&ztt^!i9-FEK^XM|<8s$sGEZ_& zCb#z{hDRvBVzqoSk?HpJG>v|a_QGO|eZLmtfu=tg_o5IKgyRRdCh$yFKUvP|l{<;= zm92T^>%t&(&SCD>fgdgT`x6^Tjq+oh)1Mm@fAr@KRv`Cyu_N3ma-#9_pDm!lu!JiA zV4shB$+ZVn&vNa@gfoN(U&J>Xl-^ikH8QZ%*QvD|P0x9C!A!K-;oqJ=@bswv$K;Ny85p7`)9@B_+VA z@(d-}bay&38}{@*iP7mZ$S1HEX244$4MXiwTGw&*+hi=^TeT{m>qr%Q1)+w-3DlFf zqWrV0V&qzufqjkp(%4ix(y)&(ZwN}i&bMco8tocowuXG_V@ZNlp=KvS%MO?i(kN&; zT15;zkndM;*VU_v!2nYUI0Zg-xD!(jI+ozE)5OdC7*m$&ILb^*1%7gUx z`Uu>{dK+f3ZRCbwV}x$d%S-^9peyB8UyXg1cqq@K-(wZ`wg7d*krGS-9%~AZn(W|o z%tNXS=*=_#T?uayJ{+l+GpcA6`MA<+ZQlGqlTd6jX-EK{p6e;og?+!S6$Q36B^1wN zpJgEw+cG${SSX3u!E~9bNxeoZ8Sm3F>THPE9hZtXJ;1-X%6^3Crkqtj+`>S=g#@u> zn7%X8Mvqu*&+Ybg`lHl-9xj)`s&>=XKj!T#9Izw$0LSi!M0(|X5N4xCYBmAx3IU!> zGOUbP_ishUgpO6Mub{>BjAWkGk1|oa>#TA=VVi(E<}Op;;E=bN_O#;c>VU^8oxlW7 zXSwD^NkIO~SG@RNJ;JkMm*X(g5w&Kp(WgNj!E;+atv8e5pQ>Nvgnv>`Uac>_Snu~> zj;tT(3;iDc>G_K$mfAHaqa;QFZXjTR4{M;F6N>#c3f ze2v2b)M@QKPW2ssPU_vg%15}m>NT_Xxkbrkm|{bdytqIv`kbSSte5B_i(*K3le!iM zYs;oe<`dy-Vlhrn{C-DfwahC>^NXx{nXsuyxI^!;lfzr)-)6O@1pbu^P+g`w*ZPu6 zC%T_8{a?Bd>CiIZGSygVi*MIUuKuRBULJo!J_?~}S8r^pnfru2*XNTR=K{eszZ8`N zn^41IA1nmEF?V+Wyt=~<>i;YuiQPMO<>vT4p*6*K6ttyCt*=4{yEJ(@!h}FyalI#2 zO(y%Amn{1#c*S3TNve~*hbQqeoq*jzGCpK5)>UvggH|DW&AZdq-MrB?Iq5{~-N6iR zGN(~==M(+W)_or}tc57PsE|p`Va-2ce`|VwQg3;{~bea z3{bq32}ST5zrM4eFyZQ5;hDT4s9lFzPU?N!%T8zsbB_~q*!=eDLT=QtS;*VdoWS1@ z7BGkOrOC=lEgt`9ow>Iu18#Tc+ow9-K6lGqXr@AXdN`4r*D8j-yWwz;ZDkP>Snicm zDNKtP)g=~yDV@{2eqZ1wGLUMooSBm;T>778B;TK>FkQl|ma2s;se!0JS~u68Db* z`D+sDO&*DjXtlf`+k(O98G9+Ue&sCtv12LYi}lR{RHk_K&8eHZQJ`BpA&isL)$Q=H zzBS(YOG3r3#HNhp+3Kg8LRdkyqKH`|GpPK}{A~ld-9=xHg*?soawnSewD33Y_q{$8 zxgq1vA}-LfY>2uwsgS7`LNgcU0oPo+K98l@j|mtf7#dU~to}w>&p#&w?PHbd2@d(E z9&44QYQ7c)5;YP=XwyEl;+LXl%`(%=@2UO$jo{=l6^fF$ow`d%o6HaS@TyqE|%q;e2ihAVhBl0j)FWfudgL!cx zKqH5xcPoBuQQR9rOkkZK{ULqN1o84Ls(#R;FWiZk^~1zS+Ko296yZTll!ua(QxqbN zrE3@8DjebwMOYoTr(W8%tAuBPuWCNz6kuRbp1z6R%s= z`3@v^&b>O$U^j0)FmJV_ifc>tyqwt6x@qadOc9zqr9qJb}5-h?w8pQ}b(Vu4> zkDzcX#{HH#h7qZn%+WVM;C)4dvy%-3+2nRH>$^3CkhD3@$w-7-^W7#tsF8fOZ1Qoe zYI?@+?CgS&Q!6BoAl7+O3NJXA0%lFy;^VjN`7N-n;<9K3m+&_VLzF|jH-Q^3lp~`y zxLn2deUOq#U`NBUPQF)@9s(zhp0+Dz{d4bip-6)8mm_#%GEnNwY@{fH-|<5b7vvJm z>#jfUEC2W#s-!@VO1d)9xyR8)dVTN1<*Dlcf4Ta#0M^c>ALuEz?w~f_4}^cOSGbjb zrpEdp*Jb-VvggF)yBP5(3{vWrWT^SUb~9{N-Z;Al%o9WND0An|XiLf18#rwv;KZgb2Az}E`x(_E8hQG^6dN7z<%rP zny;Tp%M&eT$_-gtmU#-X+41}*ssWCwNyNsrKc~{`-FA*8;r_nhD zmW&&C$AnF<24Ar)Isv+}}A4$ZPZ75^%MW3-*@gk+gX% zuY72IwhgE5&Kh4dQgFprG~66*6r7xFl@3vB`wnlWQhn{G+KrT=SFcO4Z>MH<E< z`hn?BT5PHtEkMsx^adm~ATqd|mI2v-8(~{E47y-@40fx*6*NLa-Vdfou+`f8wH!K? zpzsTo!hSFjZvA3^qOt=wnT2`JVTQ_3wfbukP)aH5FFKU|wcskj6~fO&Fm6vc-kQYv zWO?=0(@t|E?H_fsu;Bue5Yg7#erLf9d*LH9qZ8uV`+BjcwO@N~5hP2`u(C#4dc3vniq>+K0laqnb6lUs=1q!_5pEqT&$m zZDWLo^w%uRpG6(7{_f83lDMLx3OlfL`VmtgMuECJW*zV_ftK0ry2u}<4IVP^oiNQ@ z#1-XiVTr=Tf5pC}Lg`$9d^L;$NE{mM zGPa6>VRZPv5tm4e5NKZVc+`VZeX1 zJ*ITR$kD=OE%zz*yI5Mdp+@e`sCO~9jRUG4|yuXNsc)KuC&?S`70=h z3fCCF>GO`~AI#aJioU8AcL>bs8}GyR#BqMgtUFiF2$Qmfor*EN=T)oD)1cS)pGwgC zjI*X0a!^ERIdbXa_igMbdFvU!x+LS>)K~92B7W6r5c?W;Z;xAk_h22_b}6$gl28W~ z`*Kmy3mD1c)%9X{f81HOob-jLu-KP+A}Lw=a}<<7Jt`1VaF=Y6rG!c60ui#xbsP?_ z+iqm4odLtyY&}-SjaCNcV+n~CB-rA(*1X=|TyG?)=amR10mEcMj0|c9R^E>L#dHz) zj^A|uh!#)!MU~x3i}~w*(oH`~7^AGQXY(@Z(($-RHvxqX&1&XgtT2hhf*q~XK9elY z+lERZNpNtIOi9MQH|>HRNSt;p{@%#%)qzm(C!VZH4l350yP8(LLJ|vg>#roBjLk>E zPbGYeo-6i?p2nHqAOi6YDYvz#NM~+jl++;I2euMG!K=~zpc$RN8BVV3pQv+D=zU6( zvNP*UZnp-i$Q&k{u60t}$JOUOOO4pTP;_0xsmDHe(_#1mwbYv7j^R<`x*%AO6oDQp zn-vI;RNC2+=(iv9B~=vS{~#&qJfIx+%Xalq5DH21vv?x&ysp3%S)wA}OLOUOmGl=V>pwhw4-Pt#V)lh%@tIx;_~j3~0E2|2QuX@G?pd(O z)DS;~XQWh08x zb9^z9wmU2vs8JzjsGa|yO_-!byf%E)k@(>S$v#?%(E@Liva#yXNwdGg?bI5$H^W(X zQs(pDl0f_&`m|or1Ai)9|JKwcOX7eP>rVY-C$JnA3@_t$Cn~KY`yp;qT#y7iJZ<*axJNYy;q%uw^4LwL}Yz4j|;t$!Wz7s?f zs%ngP3l>y&kkgsVXwL3 zzIjz|ns@G5c!MQ1>ikO($JRozQ9NQEj08%$(8veC==yy!#sJwiCKK9T?muKVw}N(- z@5O03DN1m}fMaPWv8tG=K{Z!;re{HCx!J6!Kr#`mg6>1YnI%o9zHrm~qo-~xnppwG zh~Pq9Xv{!RgVw)i5r966%m!djp5F_xr@&Y8Bk|*{*$KJHg{trfb_g4cS#NhL+8W7k zGr+;uzneBU`4g`k^8GFHKoS8VR*me+-8XnTzJIH8Rekl)+CjKy6RTL*drO@8Hjk%q zxYFVs26(Hq`*QF-SV96ebFTWeu&DB-B`q3%)aVpg?UT5yRk4{@GaTt3^cAkm6S8t4 zDwx_aqU5&DixcVY@j$+7GLvdn5rY<<6pOg;G3W#ZpNd*ww(y7H<+ef_>Uz0t$29Q5 zbOV0#_f~}Akr#KH|E?>Z3&EA&iZ0%)G1BEI5YbRL`38am!7aS`BR0ye|9Gkmo<`H` zHq54-aB?Kr6mcVBY)WPwo+NoJ^<1p*PUF5FU;~eo@S3t+$4Ez7G;o)X?h|q>grsWX zuF|iGbF7JjIMNMh!-OH;EOo{^y;}xhdSZ5TZA*5r#zET4Oxd|b{ekIK_c1@7RCgiz zu@a02_ktS*l00vPntX1OzY7&N*809`vzspT>(?m5;UQoy)R(~g{s(*Qear}p%c7Kk zEqfN3U=e7>o4o0g_X|Nf9<}8Wq2$owNgEtsVy`y%P75m2o}ZC^Wl7Jm@F1d zgHSINZ}L{#I#e?DqEf9n%L*4Cs?vbl8h^zhI7FN3uvpfz1WjWBr>$08_C}d00>9aXwCs04A@h*$!7+aW`{C zf{^c(=E&C)kti}3m1as280XxCxaY(2-2EOfJ5W;m8#B!0d(SN8IJ+-+0ka7SIeo~i z+0BE0qcAu6Wn_6^eJOB>OR5-(cF^%J!t}@ZX;J$9XZ@sX*4q;@LlhS61f-{=WGTD) z>?2Pz!j6#IH^Ehd6Cnwy%rns7?`Ep`4WQdyrI_Pu5Al*p;b_PkEo24WLDs$d_*EBK z4yfnC2Sk4Mr^NtxH|Y*F_$K@QRWZ-{6D#l@n(>?RcfZ_lrMRcSgX%%Idu+dO8m~^D zy`*!?(O^F<2Y0bFTT$$l!;0Y(C@UIS;Fkyzq9U2+S>MU{D*fYw| z=*_JiYL(o85KFSx9ca&9DoPaI!%$wCS-dKF3<}E}^ys;aiW&^`fB06E{A1O-X;){;4!~jLYLF6%iTZX*Rw` z8|^XHLmn8zL;M%c#x69x4U-c4ROntRZSmoVCH9&ZkgQ-ZJN$spXl-_P*PIF~wJhCo zQBX%zL^H(5qsF(%7w{&@2+CFu)87iPg8kkS3B@1_nq!)Vxp@IrN24z0K;RHlt6tza zbhk3{BtEyFwVOk2oKIZ7j}X;_Fwa)0ij`5Q)a`8x%zx1mezGJiOI8?h+X5At??zb; zF=>S2qzOMmRkVV*BVFsn;7E941z_}Y;b?=uIHL4wpA8Nqalfwc&;1j2rBUeW<$q8k zFH9xyUu@=22nhTCU!XyV|Ggwfq>8R!UF(jVoVS4K_8OB6PBEOQhz~W{wL@;>l*H^V zCIB`Z)RI{m@?IZ1@L5pw;AeVR=#_eI>4TvD$nJzgkqB%I4{w}MjPh$QGX(*QdJ)B5 z#sPTvu9RN=U+A2L@cxN7(|BuaEq{wHvFd1dO_qe$r=Ty7Fdko@yG(8i1|&QqT|=(8 zZm_4_(uEUW^VoJZxsQh}JQ$PRN6QW{u?wUHO7FREN^SZJdN3U_W4Ff=JQ_H4&>~0GnU2o zj0SGiYbP^^qVoG$-sUY%6;I>=LT&h$HLvODE*wQl?Yszy)x&hQ3}I zVZaamN1hlia@$a|_CT>ez!CcN2I9sg@KXfyJ6X+!$pHZ>sqs8{@6q0*YS30f?22o(Ee^X;L|dpz)XS)iv1}#{ZS!U8u<%#gY)Sm3cu8Zg zQZu`!ke9U)BPfPQU1pwsQFQ`YVv_enb3b0E-tcH9W3=)y*L$8sli4$vHD8Yv_`)& zy>7?-o1v65xO65z++CJ{aseg}yx#o&o?A>?@xw=0fTQHxrX(5bW$b6A^yH*y@ z<$w@F(9v>#y4-%&?P;z7Pl0eq-)>hU=<=bC8uj{Q$-4al=-E932dnj5iw_zXSm9pt zQ%zVD*$rCWJ-LL7Z!c{Zp~b#@w?t>q<{#J{kF#?61A| z(TWWs4K^5JLQ#!E4(7c%j|?OE6YML^8<>(PX`m@>HjO@aEMd6WmLuOvgNs644`!b@ znlufR|6-$@YYpL8OYf}+As{bi>_@(A@r-m`XpDf%kE{}KPJFP`Lz_o7!wxhlX6xOt zGP{pqVI!{W+|)HZ(JNRdq(*fQH;p-E7OocbTsm`qHQK(X@k%J*H9zrFk_m(~~?P?1`A9wqmwuFI8*!LbNMcNv$rycu_*D-alMBw-ILy$>1?*>+033 z5>L5)BDvoXcMw3#4QH?qGglf11a zN8WSCJCtPZqTW97nQ>Buu)@a>g(pLIU z$|dn7Er+o!$I4tw6c>5UoEzaSb>Y6U#Y`VcG$-4JlfE>}msuyo314iKGL+k?wbKRd z)SfV=fZ6~~HadQ8d7|+d z-%rp@D6PVf(ZydLocd#sqR`qEO0NC^!DM~&AxRWDW3kg=a2foO$L6t%m203+yVj>% zc`A#8{&$@}9k=>A>j?)8Sr3KR5m)nGvQ)CC%iU0%%v9}kA^VvXGxP3S_fl!SYv0M13`yo z&_aY6a9NH2>MPNSV-Fr_T~G)tpy+&GfUNOCwD*u95$y3|8J2JRjdgf5oA%NQu-+gb zc9^dRa%!URL_U!`Y|Q6W2ld|ip_Xcm0&>C!F&cSqnU}oaQ9em(1okL;Z}&$zw?()P z#5wd282@9gdne{KRNzgK-+uFX&t&Rr)dhb~9L>nA#uEE{z-Q%WiUrW}LiM{fxBZ3; z3C}{kEq>&-E%<@a#_MJ&&8*L^BQEnyUtD`EVh!KS#7S)ornMK?uAkT1k9|4cTwZ|< zWV7;|5CYKiyRh6N*P4u>7k$Ah*EAdaT+M8-q`=FBNc21FEFDM3=jp5mZ!wTSseLNp z3QxOgno+RMLA8ZTl!xp2DR0SaKvo-p=sSRBYL%qEG#m&aKJ`53F0wVASDEimy|m2Z z8u@yggdBI?c;L~~ht?^fsOMhGulWA10Hf^!YTBprXq~u6hXdN+G*hqu!V=Bs%??Ox zvk=wTC=o^1W>FA!3=2&C+z_{q>vGB!uakct*|mGuJ;?W0H6NLoooJwUSa#?~yaO?` zU=PGaWdbJlA`-C|s6rvAhrLCX-Tpiw@ypP*E-KHVl#Ij1!SngP$TxG>S<*f`l;mxO z2|d}`l{%%p&URADf@rs^Gt64vimL}_f1B0lM+CIalelF<^B6I2%_FwK_ffAxMMre^ zr$VCn%=mR7hQdi-8)Y>Uo~JKfb`GaBvLsCSdr<8p%g_wd*xuk5zpQ(U=c!z8$MWP@ z^$SQtTA6sAx4qwM3Xb1TRiEy(fvH%fpTtNnA$xwm0uoC*EOa+Im5yC)_m`=6N_;R7 zC7GRUd*QI`I0W5iO5|0mDbnK8_n!|X>ol~8>9kGqsPvcR3h)c~XWwEie7G|5nBXHB z#Xy84xv2U=U-dt3RT4^+m~cjlN0cDqS* zZ`sW(K$ra4Q?`u7m5ol?+CeQGq(#-Dpsk{0d!m3t=?M^J?q|@-ZPIo^6w>ZA5X|-z zpO>pr3kpBZW>RSaGD&m6u9+m!nGSQ-r&$>U&1QtJksGDPMK|1P{;B68kB$Tg*Tf@% zuY~u|3p*7}^@s2q=?`0LQKn}fM?T;8(C68^*KhmNn*NhIe-IBCztIp8<4;P5ftd)0wMVc2$h~s-mn(4*f{dsQynL?Cd3aS6=gub2fvcshWBo?-L zSbyjXsx%U>b)zaAf(r6*cjX!qj$nTEvznJcuTT8U)Z3$%WsQ%_krBR8Vu$59jqqx& zwVZojPzyJZAUsByjz=!+t!jGSeG}EY(DKqXKtp?Rf4%8rG6>_I{9@qbu#w*H?hSZ>18w0-I!`5WSv39lX$3^ZyxFMG z=HETPtXSbmv~G*viaGVYk_XRZK&xj}8n~BJtcz7fbk*cxGqt*DQ}WAJ9!R-WdDz-~jxmLWfhfT}CB*dISM}@1lz~!)nk%^EnCq&$MeD71~Jl zxwVUIoU^RX>@@GsdQ@5+=mAb0yW{wQu2{ZLb&3!TDJ;fi_$f+hMM}G({8WCyGIye7 z(tt-Js)Z$6uFb=u{i}qmxm9`5GZSLV7qzzB*+hEdh_#olr85P0Vz3MZ@|7AFl8_T* z>w~)ojO4x46{n5R5#}%EBa#dV!zX(EuHDLR;9fU0x4m>&!Q_z!5WqQdpm3os&}z{7 zdKq_i`0%Udr32Mle^|rm0{N#3Sm@obKPc@=;4sKj9E6db>mhU~bI}X8r=_^LRn*hK zf)&GocY|bWpx1wA$MsYh<%Cjyz5f^>|Pp z*K90u;*!+807`8JI_Y4ab6%2Q2lMcR?w5kc^UZjk3sJu*wGtW~Skl=RP~)Uf^QHA6 zV$&{=&PXJ*6ZwTFW=nFcS}3X%~~(;|k=tFKt{R$c7Gi(v0wk@m~Ojm@w3oDSJja zqJftLb#j!9N>fE@Ng(@(>UdL70<9xX-XX%wxa)1%EV5T18>>Yi;zO6-v>SED7ZG2P zgygN9chDS|t!o|X$g4|#n>-gHG}+_m|3t)Y*ikufs_5pK`SAdRtgMg#BL-g_(6 zo)@|1R+WSIzzx`4uW z8bG}^y$6tsi}f7O^qK^X9W~fDc%=Zlq)V7(#*AM>*?({oY7=S#pmEeh22*NARa4e1 zl{UNdb0mCN;m6n)BhCgr?!l3bYqu+71@|Ai%Pi2z98M@tkV=&?7{=!vN;`#S%0N>D z_Dz~Eh3Hi=%e00`ZBdjHoYM){joayZm}GUL2XvgE#WD>6dmyjc0$g~L;We=aF;3c} z(yVrac28mFg1M?C`Zek1&FH}6RREcMs9)dMY7Wl`ODr;nXVj8tJ0%qM(Iq#nLt@k2 zBMXum^A_rU&tpkxU8<_kN|33CP=>PEJgzPF9yZGH1dDm7XC0^WQfKnnHNDg;Rb2d) zUha8eHW0abPu##_0`h;);bEwT7nd~)HA?+&Js^cHy~W^z(b8qnhsn_xuJ^~wWypYB z7}7sSZn}E8?E2NA0kba+#E7}q23Nl~X8Xjq(J6cR7I7zBQxDm$LEJ9i-vv-N-n5S# z{&cM-rdNl>)bZd&rUD)0t8;1P3< zDBR_w&~9oUi%h~EABSEqNAn+hTKqEQx2P?&d2+VTHeuFdo|x|;ZYzfSG@lYiZzQ|l zc}VTB-m$+4eKkCix+Q5rx%J^fR>;K`f>B<2=>(WG(r6fpU7qw)Xs~D?y{~kXXzvpQ zcCySngnsYl6nPB`%tK4c*~wnJjHm_P4_ft_U9lYiYF(2qB|+9ESj;%3!eNlh+W@H? zJpYXgou|Vs^!wsoMt@$YS$}$>2~s|yD#U@q6$a2R-(*My-MD2!vCZDyOGfKg#=zPW z3ILQ=2bU(gb-R>0XVMIAGa}-4jMwKTTcOjj{k9#nj~7t#GTXO-=9QQr^_Z@;h7?u{ zd2Z8RZ=Sx`895qDO80#InWa1hyCr;AXu$_?R>^qf>^8-_r9RgeVN0OsGPEZ}UJkYG z{Mpu1m~EFK_E98E#tk~KdUj_^(H%(p6hyz(X|Evd31oF;_L+d(zj}&G-WUI^YZr3P zo7VY4`mQXl%~FwvUk?g1vj+PL%O$nqamyy*d&L(nx#~eKB3rWW%-Ze;F(1@1FZ%u$DrE&;}b%NWI#1O(_;0$!O@*WlbQ>)m|Ykqc3Uu2PpEo`2)pQnesB5xgVOp zUsb<+pTD|0v$Pf?w6rpnX1r3<9JJGNMqDDaJz8R_I)7?BXxv6^H2$%9`!`O7N0eS} zI%mLF3rtj-qO&bKXbt1WiDDf6*vcuioey}N2JhIAWssisLCs)IN=GqPGO?a%HMA^qEu135AwOc54y2aVL+{7 z?H&)+v=(}&8dgAHnNF=e6cw9m@Q;snn>KhK&`~$F+jvYZ_gWHI`T3D!83cUZy7KgH zzho&wLgdEpfz7^bz{Qo$P&58XKY0j;=MmnrcM0fQUfB(%@@N9P7!Gw~`5*SIF$*wY zBVA$~G20a^tp(JydK}f6U9jU;u;;!L{AwQ_m?QXgCgOe?OQf#%tLow#h>r4j;kCX; z!JcA-u_`i6Y1CrJ+JnjJ#$Rffn0Zlucz}~=Y~!{1eURCrLVePf0+XmI37?XL>MqU% znePYXP&j=*r2Es`oUj$H+Y((z`r#|c$;e4$n3;=Z-iclx*yG8Vtv=sgI?V%45wrM^ znUg6b)jv#AD#lZC7C4)6SgnitA1 zFOWzMl5s@z%kkF4L$nf6i|w@-KCj#rqiOwtnRQ0o^ou~zQ0B@RHbgkUE@OkmeVc(Sz=rvsG?nx8O-z}(Wde$`$YI`Mn%I9i-=SRlJg zQyX{D7#;YiX_EP+TwIh~1?IJAx+1+QXYGaM=H|l6bFV^V5fih`QQE6F>2$531qA2XJ ztlNniv>hbONXiIU9T0IlXKCF2@|}izfPaLQT9og5>YzrATX^&KOLwj*);l)B`}GN6 zDQi!k|JY(eX~co1Dvl@Bhysa&UQUZfR?uu**Jfvm76i@(sxeKw>eX|fPMXNIXcCr6 z^977&E!T+@HVL-@4$UEN%XVv56_jarC%piZjy*cL>Z`UtVi`1^GF|ywq~KXXc>9N5 zI_UY~NS1vZ`=?@L{#Y5C4p5b&MY(-30O(;I=y^Q=)x0~Ndo)%LFL|8@i#p5FZn<2} zG@M^c*!s56^^EDc6lzIXGZnOb8r(EE;C8Wy&PLWia(~zzIzZ}s3wO~Q{si~6u#toG zwG_^P6{=~=swIJQbvT6 z88{`xo8$44Lt$OYWXo0b63w24Mq%FUbD$*Bf^d`V(Xu-G44$CED4WszUUHnL-7js@ z0tM6B)J3zJyM}(~q!eu~GzBW0@h;D9Bp4@YM6sQ56ATD^bB!vo=UM2+MZAcG8TFipC|ItrwpQclH&f7d>Bz`dEqyjnGs0#@Oo_G5I04q?}X>f^FQg9--LQ zRXAlgdpf8#3^f>gCQ>8T)wubSc~DMb4BrX%3e_WtGwi^;=jz$)hEUmNEzNLc>fvz5 zv3VtF;8_itv=^+%1ymeH>G|^pi}C0Px9Cn5FTr;vzY!Sq3|Sx&oG)T@e0)fSVh=3_ z`$7y~x;qV}e>-fRahl{O&W>a5ryR;|(-j<|V~Y^k<)P85?qD?7T*tRNTfztTIXCOnrWp>&gsK+WdusDKG&D9IkN`Ywx#r*D z&U@;2Hs^bWGur%+RReMY;#L=CQ<6WcE^!w{ifu?^EeQ&odxr z$M;9QdTox+mo}dtUlBNImO0w(sn2%~@ZklH68!v=^L7r21=cM1h z>%e4buRIN|`RdfW&WVFVsf1$k_s$_hMd~4(lRuinYi36yX)H&A!~oIKIj~{VdbjUA z@oJAUh+frK*>_wgnNNBh@C^uj9|@zuF||5+%H(MaSidg(YTFXchweU)w2hU)qX)Gh83tiJhECHoKf7q{EZi3u^mbdKF*)Nc6~PjK*6C zNzi(>WYaox#a&F_{X+T|-89aRpshiWJt_{6X5Dp@d8{q&Qox@%)QEFlIJgqf%6DAm zD@%IyPIvf>eQoKrsk?HI`(=)~W_L^uTI=++cHyecK?ZdeAn~oCD`&N@8?%PG63>ka z-RDlCbv2lcM&``b+R4b(>H5QsyFKQ1WOa6B@`rD$y?WEFk^=n5cllbXOa2XfGSl!C zza6uBH{USnWxt+Yn)V@OlhoC609paAggHnVaqP&ow{%^5u$+TbCSHa6siV%tXpTL? z9%V&I4UUl=*d7^j8jo(!nS4&`*E9-0>(L}#(-~Df5peKzv`iBTfv!BMo$^x|{8(4A z^xJ01|3pA?sF>ENkmq!nFjU0oTn%eXTr{a4#&&YBPjfV9lY4R(r3IAKR;YSAx!ZCD zhcLrjGBkGTQk6@a*Nm8GRCSnL1;!!;oJp>G1&fESb5U2lG{?rD-zQgy#EZ}_kQ$+U zBPFl+N5m7NbfoUU$Ls3O?Ceyxu!Az>G4ZlZifTL8Aj-H#U@=-Se)viKxt(eoGaK)5 zV$Q2JgkXDjU7Lk%!BwO&o8taFJ$!ue zUO-*#L@l4%VTjyk6Hh8jroK|ykSr#I| z^PcMot}yv#+o4@MPZ=kt5Y-J=W?bV1ck|RqgSW>Z2i#zfd6iFHkxS{fqp^w#HPlfY zpJEOqi(MyDu|*GFO|>TVKQSquorwX~(^4nRnlKgX{SOBYP1Hn-5=gzjXiIbxOIFKb zC0HN(7X9PyfqJ`c_BUpNV20(D*$v~`KFuHy$@}m%QF-~9!Y@oxajPuP>kwy&zVfcRC>%khBHDi{vj;eh6ZuYP+8TA&ah9zbg zldtGA->_;gSqr6+Q~G(gc*eT@iRO3e0ngCus7#r@m`Ti~ZGpIAxH&`jTASL6XLw`y z%8*N;#7+Wc$1mt3GSCBl?F=a={))SE4<7eYh|7pJ$Fasa5ib~S9YqJ!_8CQt6%#z` zjnhn`(2z?aQH_d0;3^PVw})w3kVgvcb?*?og}&@5mmolm6WZ)dFI?`>@<}8@cLYv{ z46+;_HB^n1F|)eSww;K}{6sd7xfx;Vnu89JD&K?xi@f&hvSd<61VQV1vF9;GRj;X| zpGsteU32@*8-jmEJEtXWe`}XQ11#1LNmAXd6iS3_+ccCvb*D)L%}?A+`KYv}Dt#9r zaAaSHCQ1@!`(?*Z(w8|+MQfYX+GxiIJ(d|p(>VvX@UNL8Jg%e#da{y)YIM-H9#|aD zC(SyoBsv^{?OicJNpgCG7Du8|KdpnG1BZu!IIDthFMm?2l@<^39y>G4yim(Jv@7}( zmWBR=<+)ul-;58n4^<;;EoLQ6)UrgocL{n?O?c9cYUlh;W_`X8de~Z+Dh)*KhLogu zyV3!HCpF7ir7jPpdz$(?xplqg>XMOm-DGNOT|=H56G(k62hyL+{B;xW z=6QEoF`hLwK`9z0xhZy{nes&1ABhA`TX;OKDfE94>Ol@gys3(b-vXJWe7#c7&!EWq ztcB1_7cDL151a)98&r1kw0Y}|g!Tl|2lZsgO9V+W>Io3pvkBzV9{@SwB+p$S{82R9 zs|U7O75H%6?w18=ilstL^$rYm{8psZFx=%0!uOp>=Q|(aDt(DigsXt z?f38Uu=KM5x4w)0c}>@ppG4Nt&{!A9?#^FG+IU#>yxBQNt#!FbeSEhVO-i9_`nIM|`4r78h0RHgb|gLhIhkH=i1$F2mzY zyup4*|IbA*$D0>nv*SgK#wH%7YT;1~pqR3AY~CcNZ}8=`PLseM10>(DJ> zE1byc=6W1KCSgG&aYC4Xy`qXxz?)$dpzh87KYX2KRGVAWtxrn}rMMKA;!xZjibIhU zXrZ`E3Ium6#e%yeSaEmv7Pp|qtyplE;N0|_@4NTk{g*K^M&8J~_s&{t&S#RkuzU)Z z&bpUvb(GnaH2w$W7U#$6g)5toYxnZh!GjWmh+r1%R(45zz&$iS-jvQ6dZ_@J`tcg} z&V!rjbsZ{!K<)^zA)Fc{4uQ)=axMlT&%7#_Wta8*uN}^JQ^jk1GmL*$v|C~=-2t_F z(5RgUe-rCQN4|rG6cRRR5W6}4PvKLPRbg#8c?=--LlmEp<#829omagC@54wC`nqCAu@+CP&!?SF9yeFfwlyHCWLAs^7q=MVQ;Ou9uwJeiI+?) za9;CTYGRizhyen@SNIBOC_lTzup{Xx87eE!7Wevo^X zcwH?)*@tEJ&ARd74kvH*K$T6B5>8}!^KHG`8CqFozhq42Kdzscavcp`9$0t7y1Bin zsk@+(&7wge9j}yp=pQv1iQcDQz^*Ov)YSEzh=x3KbN6# zMM|T2Pa>K_Jh@RS^1GZnA;Ueic)%~e=?PQpV8hA9S|o6~niTP&R!_gD-ig84Q_Bun zU`yq52Q1C#IGQ&(47OP(~Lid`J)z*Cl^A35#Ho zcwgo&@NK|6qqR_HOHm?vpv9smUv#vEin8cj$`>^glm5M;F_cx+hghg;Q3KrB9#?#* zH&vW3C~8)oSCD0))c&=OWg>Goz&MuoQvsz_sJrMpcrgpTnzHn`X+h)3`czDT!>GX+ zK{HoAwePUNS)P?5@an7lFrY2fuU|e=eaWY{%v37I4(D;$a&=!hIuzfqE@l}#p_I~35?_HJ?=dT- zb7#3-VK+hVW#A`i=wT}~PP0UM_2}V$UiD4e%iZuO3zwwqaxUsDwY=F{*%`ujG_xCC$ltbL2;5-% zx^%4#6bKg}YKJEIE}pq{;89c!T}CeH@MbiJnB{~$D}NJ8@4PScAE7A1N{(s8nl zrAaaU56%fly9SX{I$U&EXS$qbtYaL~+}Qn!4^o}_fZoCrh25N){c&SnMTA{NoE^P3 z79MBx$)k#|)foz-x5~8g9q!`u=p;FGOMRtO7hC85w!74CK-2SR7?>;$_Lqk?zHr>$ z^Ky#>g%s?3a(mI!&f#w!f*Biqq=4rclpU`INppU(*xZ#> zC#GhE%?9x)I9aXAE{L(LRJM)`2Jsz4zrr`m<0EdZ{5yC~y~}Ghwpf@U84LG-tkP@d- z_8`KPdJcw<*6NGTyA}z_eB;iaou*z6uHU^^j@OC^G-CtO=G~mL0R_U&+azM-WZDJ{ zOo-5AdT+xPb*5|ag3o7+FK*1c47@5h_6Mq*?59la#8Pr7a;yca+^zZfpzAJQ{K-34 zFZjHjpn8&e;o08Ldt7UpLQ95q1pi8Y9RE6Zn7rkGW=IPtPu2Z4hAUVu(ZPt)RL17s zXWdIqmQ3i+0Q31O3lxsN*8w|a73*TBg8pe}98!qW=C_t8|CO@B6o&Wxps6;|lXB>! z0WNIFa>DcSY!g1;#m>xoPJ+6@7}D`MG1--|noVFTqx7B}m^}3dda+Y^yfs$@Z96?8 z-yBNIy7$c7g5j*>UNub}G$*Un{Q5o(eVgZr5xB}Cf4*n-1^+P4az3!WP6vgoO@CF~ zOTKRU!vbWN?dld4rg`Ie8Z1V5FrL1LwK&NJkZX%Uy1i^D$fm+>p*4{XF`15G1`m3g zPxJ30&yX0xw%%!RGwZUO5DD_<&90vOdZE)Y=dc$Iw-`XJTr07efzW4~mrAnw3!@Ew z!8f-Xvja&?l9g@oSt%HsZzeCv^1Ul9HN)=<9OK}1Yht`%&4xy~o@We(L###G5CBGU zp_k$#g{Pq$2>* zDuBPNck77K8!Y#Ay(3#0LC{0jeSsbD7saQnyZ4)ob^G-!HW!h>$eLEQe{FG|rQ<`! zjBMG}VdQllJ!}ZeOvGB8sBfiyr*PQeLO^Kbzuru zZCS{@r*k%oU~06DeHb|%zgNirR=9CDVInl6&(if;lTh>k&iwOxj|64gXtL27G=;y~ zVS^0h!cE7o8-qTQyZBKUH3f7lR5go3B8iho3v7@2_UXu{J)Z>m?;Mm|)JWo$QRnmXIt*AG|gBdYCp4LSOtifXR0 z#g|McBVK(mqztBHu*vpLu8!5Wd)uHP3P~E+?rBh#O+$1-@?9LJ1kDM}@)a0AJxs-PY zzQM3kGY&#n_eE0n&vBbUMCy1Apn?UK`IdYjIP7dVY~7m<_i4k1RM3mwOg^g1`vH}x zV)@r#@S-qr1>J-R&DsoiG$&cFhx)3*$m+;slAch9JvFgu1beYu}vty=NAD4XHq6tPr&AN(5bh@Q*m?F*zki7;}2jsPq69|C*%w9f+Q>tbW<)ZOOQ_6Ya>p+kzrW`jCqO2-`b*1GJT zTaeXWPj%!K(VbpPB&i<4$z{e%?XDM}0fcFKly0$FhLzqzpin1_B6DE}I!YTD38N#e zvF1$Ulxwv|_0v@NyIphtYdlFOe9McX9n$^qW4V1;y#0e3kD~MZG9A_cq<86f%67fo zuuYJbmqm=%*CJj#ZQkDMMPj83Pq6-g?~o_zmW03eNID4@35>)7d)JpU1qPmfF#e%G zMo{RTwcD8)D)k{G{h8{0)-rvMzM_B0+^l#)q#V1YT%(B3$pWrGKRxcg!=C}}sZ{mR zd$`Z|h}pV=UV5dbV(Xx-9PHKgYDf`X4hTZosnmkD$kGsfmebcC%xu`e$~z{%o&}Zi z@``rdDocRudRWF^{AN#JS8W^f3v1z6_zW%bKQrOgi8(5cphXoX$VmUC#(3{xsBF-Tun)h}U+7w*X$JZ6M>s%#qetyg1c5ZUp8xNS<){7vy(aP=>%(*WU6oPa6c? z2`@%Ygg<1GKHC~*C}|KbEw`ZQnb~>dXnINt8wTO^kIYwWoywNw`1olq0G&MKNjup{ zg(C`S6y}Be^aOS@YvL@j1$BEahw*F*=Db^$VhRnQa*>RswuMe1?{5raCTus3W|az< z_0phtACbezM`obb{rM~Iafbc`Tmq#}E_{wkB5Hu*55qjiCr%GZ>0!$9oPH(sJWvgB3Gw8Gr&FAb?}1}^U-+D=SCe9+39 z>RZ{F!W|{T{YQaD-P2>4s~jj7M9f12|38%+-{0$Rq?RiMrLXp8$|XP~oEdqo)T|cj z%56nA0qGQ#h@-N=|J6Pq``&M!#8Byo`hA6A=J60v_Zjhi{Qo#JBm?5%{jc0{Y-X}@ zj%g*GpLBFN5}q=aF}$Ddo+vuWXHjMzV%9i9?@R{*nB<#BB`H$q@8%F~{vRWS8`PJ& z#b>VsXFs-eGO2EK)I4_EIloPQSjcpul_VJcG+OufB9H$dD{!ncbYC>=n+q>pGT`%+ z>tnu9th9M%zmxL0W!`+9nm#H4vp2_fM~J6iD>{Mb5r>VA!jxyf%KR&|zexPDcMm7g z&m=jb9ag;G$Gse<8CFP4kyD(IWRyHoC*1UC78q+$a6&@6aD882;gL0OF_p^66wU|(mK~ER)KHz*DE4Mg8W1j39--FE%)WzFpocM z$1|`Pl)PZ*?d*O1ChzMki;57gV#(7x`QJxB|2T>YmGGJ>3Xe__pub6Me7 zY}J`QbgykZvN?@>5*OI!#|BU$T*GR!9fGp2~arG=mnP9=!!+;Cezg=ggU~ z-I{5sh_pSWlq6(fFlAQAC!0pHm1(y=5auR=%eTPUb#`-s9py~bG{2?4Cq6tG>r;)) zO+7T%*wFEkjci!kzGew>GMiPAPv%re;^EQqq{L9~P*e6gPESx07#v~x3O&1cZk!e+_kGEjY+I1BrTvgLboe9m1}p$OfdSIkTz z@70y^2+jOB<~9{F@k*(&8RsZ)t=?KuJCZq9M48}c4Gav z&raL(F*b&hZ_4iSDPbkEe^gcV;Anlg$>KyU|Lz9Df2A$l-bguE=&7VuVK;z4r!>V` zz@vbAK+*Y6?01Wr1bNg7K4M_BwFbW6`0;eS%Wg+<2BY}G+#8n}ALUR#^100KRvM^? zM~jYvSlwFETJqCXcW1%g&iUpa&zlcsB~_8H9_Jb4Sx-J*@R6E`>Dy=2H?7e8L-LdR z+QTm-nTkQnA*x3knTIcV0H6Gl*(=>wt*FNcrm_ZOk_ogt;MUczuz9YgKDgM_e=BD^ z72r+4v?AMu>^>Lf4oqZ_n(=Ht|6Dt^`e1l4MJeM386Xi`y!TRpY~1djc@Hy^M>H{} z2;C0Lwq+joK~LyukmPf*YC-n%-==%2qTENRnu;y$-=tn<%AX(p(^AnK#ww$j0hSs) zVjO!~d3Y49%5QDzXkpse>r}|^RSzOD*9p@O(frL+y|ndby$lr-c!t71oA;yMo5;#C z&upsSteHP8Dimezm`O4T1Hhg8@g-7tF?tWibPo^FsUr{FcsGl<$eyV6^tf%WxG>yO z#uso=k|+aS;K}JFuC>3**iBN<@BTv~y-a{AE@b(4@45H>cV&ErG7*-1SS+E_K_(`i zY^it)TTBMY4HQqmJ9l$dbZ&G#h!-AH+TTqm6lxDSHqMHTaY<7+!!#9jA1#-$WjgoU zQZaY(0=j#B8)2w7tsZ>P?R8R)HhX*rJGYrFbp2H^g6%DB$v7;pdsPOb(j9o@XJm?VwjexAK`?q%H zTo`TEd6p-E@!PbcG@_`8<}d`2qo1XteyLEj0mYc*b`oHjbybEmCa@1U6 z)9rDWg*J86bdXqN)<}WtM!%_XF2)+_S1y(T)kCwFHM{F!RIN@Yy8uD4{KVjji@n50M(IN2YiwzHXq)sra(eAD^ zA%4(X3M=)EOqH~%hz->8>+03_Puj!dRy*behq_2m!^-+HQznytz^rF!Jn@@CqqmGo zuPXLm7p5QzAFZ-ZeSg{C>?BlNqknZHDk9SzG4`k(tVNMtF0>U5*4>??Jb{7}4u)&Qk9 zEmbG)aoy7=g3|TIdd`;Tt9{rgMQ1iPVk9^EHIhzr{gNWq7g0f!%nc2 z-rGdl?$N2GAWwXgdA8~^6#B+{(hF{ZpI&Tkn5Kwu^u5k$AB#BvR^6yHh;Bv|lBy4s8S;d3wD&pfZt|6AlXa)QEDRfs zon*5w+st|nax&Taq|5rRvbvZ0F9(P&Ul`duGAu}br&Qmle5Tnsfk`P4NrQ6BV|GcS zCJPMav;T3dEID4YMltg>YA2Wv$Dc&zq{U7{QJvSg#3NJNA{oY4rc$)BlUlz9ZJ)*+h>}St`;m z!A&Gsq6YJMSv=!Sh!PrQ*_DTfnRb+SC0gIB^ z0G8c^XG%M9SOhuS%zoUnInyXmNBio!t5mvR0sOehp2;a3rF0h<^h#J(XHIE&;4K|* zf(ir_2O@r+l_7E}I%&%XCW)@8@-x`$TuBUbAF<|*uDUL)`Q!n29zr0s)XJP9i4Wkj zEoJqpW%Iu19jO#GJD^rME-%ycxP46U8OO z;%@pI=IKaGROXr_D@lBb?*+#EBA@KTwWr{ToZ0~;s;xZRIZZ@&w^J>uZ!#Y`P%~`!a`V3!wwRNCZKNKE z-`9=5EIwNCk3eCAzvw~;W`FK|c0uhL{!!MTrVzKSO|-ksYSK5KQ>`=XUf+UnL#jIg$+DV6#`xj3>hy z>pXi`xjp^krUnCRTR#O2Z_?CF60_09Tu^uOF6=a=?#1p_D%#^UWtu#>syb?U$FHpm z=I2*f+0AerC;l%(T{b)eT#?=_rxgW6>;;rvOj9A;5+ssY5&B~8$+cFT&bv;pCTOYJ zMfuke`SZQ#$&G}jmq1a=YYd>8+L_gm#_| z=X%HBULW;j{xB|M*aOKGPLBS0G3KHJMAp&yq%r{>u|fK=m4XvY9-6P7Y3thEAu+Oh zO_~+eq}UVv=)!E2Jgbat7TBa!qs35R^K;-T_y*KvmxJHyN<7;Yi$9jJp_jV4$4{p6 zrB~XBbuNCQpTbx-P(G5PGdWk65>B2_tm(;@OPo3En2_@y55XV%@2nBY6bUY!EI4x@ z3K3SE`O3Xhx8ow+R3=>&#E0W~{A_Z`mt9ojGEcU$z$(+!g}N;)Lz?TL7+vT)e4_K9 zu#GK9JE520Y&GWV>19(l2uOAA=_$eo`BjpN>27#h+1xun=@WG0x;Ir~>~6U{k=@E0 zK_yuS-_C+NtAIn*1^|6o@o)#wA(euSDmSWqbMH$#M$!sJ{9LUGaeK!WoWL9a|> zF!MfSE{SbNBYX|-jG1i+G{NTy3m5CSTGz7vfdrp_1%57|-&v38 ziH}-#yjQr+w}$zF$gqoPB4&|XMEw)R(|j3^^Z90ib;+3V?b=5No!X(DO2yhyb{H$! zC$qVq#cVMHxPnYxm|o(yopXMV`$!$d6y1)v%iCitG5DaQ8+hN*?4>B&WvjSB4_$XQ zSU{#v!x|Y1sWqWy{{1W;a?evO%IPBd-lNS>Uy@RL7GY()CPql+38izdGtaa75z`dC zdJ%um=R`N9MkW^s{^{Y%Q@=Fnqowp8DVpc6#6UQ&`Qv}W*B4?5>;vesY}mF}bI3MZ z>CuOC>_)!+jgu^?{$nzY{E_!?1EHZzU+?)wD^71U!>zWaWO*7Goka2bLd)7OD!O%l@)CgLsQKAmbk455`mW6^la)>ozmj0O|<2g&fape(4I z6%8y9xgmSdz!*rYyQ!(yL`iqm>HEs^-3>_*L~e|8TzxB>_rD$}=Gr3+TBDtigftT` z6cI#skiROFc=nB>|7wQk8b>_xg9Ufz}=m5WL&?2cLL@ z!`aNj-tYIlO6QHu7k~IGG+D@@xC7WXCCIoxuZi0BB5@)s4jJ50oBoP1?jnfa#ivu^ zP=p=+J_NkTp`fV5GzA>oTOQ-MdvdJFznL>`i6I%%%k_28(Wn-c&3<8Pyt*!74Xvbe z@YK`w0Kof6XEzu|>fjqBe&je~s*|Bvp$7oO#|C*v<{mhvR0= zUkv811?zL3FD+)BUv5*M?%q|NnN|=FKIjnmQF()nY1UB_KI{LF6V^lM-(N0Y*!v>V z_I(fgpLkgsa@+#pN{oJcQEcycE=%*X`@@j2o^UB4e^KIZ*0Uk?+Ff2u{wDq(; z7JgJ}?{tW)bN)(i^narR-4Mv3NZ|pHsHRgK-Bv3U_s@YgDufgpvB@&u{@uU6P}uu7 z4ghd&fjzdP5V8G^7p~%y%!h$@1yR0Zig*RQTKhhcwYZ3;E_E(WIeSgx!rsrC;nK>Y zFm@7{C)^+F>=#`|vt5>IdR3eMnWiKu4U8yxZ%VNaHC*mW?7f?JlL#VgWw6P5dcHKt z25OMa$e1hTl^X)AMb0GnWv_|`-DI$y_BPoB89;ig8ZwH%*wbkDYz^buAkE+XbE8<- zjzd@)pbB&2!W9>a_Rspg>748fCxK;q^D)^5qEq=c#3J?fQlWjlH-E~HZyNeO%7Z$j z6X%0|S-){r_-_eOMgPw^W~u)xysknhT`mqM9uC9wseN&%J7N{62c4Y|^j8;g)9Dom zjO|H1jP!US*Y%7t9$8yV#{u_jij5^-F%+M>0>cq2BLOlBLY@a)p`(V|rq)HVuyRcA zPCh$wH8YEYKyPRUBov}o%K_^=>M46mljQ~RBpV85pxe1|qR}mD8hx1&{p~OiqPx%j zE=FYFOq{s6#UJ(D>+_m0ET)cl(nnkzv(v!Lx`JioEhLjBUsyaos3^&0*Z|CdB2dH5 zLSQpPGTh0|q}0G?|3(luzh?bP(OINlXQ7T8CSeWZV}X$>=v-({y-zX?`1BK)%mUAefkklY4PZ|qE%QM6I0IFwywW?B+U zP(XO2lK~iOuMsLBCv#J6GKo_Z${^fINuOj4;)WUv9ZB7eOBV4I{k0}r=~M0TisJrS zBgBuvGR>a22jhj#XJfI>*dRyKq4%hMpCgWjV`}a$)GRNG)b`1yQ(b1HOm9`Ov36uv zyHt1Ek6xew>@01E*Xw{Q(eqXs6BTwU*>Lfj>Q&u}3{jej3H4|sgXt7QunEuZm-wXe z6)Rob$Pd!r6?_5c!yMVfuQ{w968zg^cS)Iu0eQU%lwWA_=kxzN)jI!b!jY6U1W&dD z|AKf?;e5svo9yXBjmw#?OJkwuPn-Om1+$lnLEp#{a)bp=us(E@NS%K`H$3)F9FV2k zK~#HwQI(jm_TUkfL?np#h)ReSHs^S^ZAcyfE2h59th$@2Rmlt#;&efXE1$cC_-jb89;J)JU_jT#!W$uFztQNsl}vc@nD&hw;9OH~SMrIk zf3t_D@0CWSYR~(Mi?C9MUKD<$~J^yso0Bvi# zb#!Jl%fjFa7+vh)i}6q2rjEdaw?!7bwso^Ls1Fn^twYCN8A*A884pAp%po%2r|3799*WuzW_ zas9PZsgkFauO6B15AT@Zt#J4{PuS+p~b{~|d#WmS|@%}dI1mVnAoq9{nWbcD! zf((5u`EKM~pc$B7%zCCh-8@B(jizJX(ObTT3qk;HaZVFWc|Zqn zn{qMWdIFZ@N7mu=5@KLcVh}F0h)HgVBo(Gxr-XMM(e#}bA1wHan;0K76EWs9=B$=J zjP5?4u|8M-QF_DaifqNxZz*@o|GrVBF+-EE>rQ;T*tM>L`n zblGx+nGN0B`tpRNit4veMf#i5-uf@UV8W;AD=@Efe5Q|Q;i@~My1J+z6>Gt^57D`2 z1&GnnJcwz>|9uE$7?FZ2Q0Sf#APAc?Ka0`uwrn2X+D_~%y zLP(UKwTU&)7O%s*ZJnFWosU6GSMhO25V8e2Gg?c?tc_#1GJ_Q+;q1G9i6_-2tFlDT zgPJn)Uc9Z%ng=fwCMIU?#q={rr7BJL4qxh z3Lw&3YWlie8gYEC*Q{2S=XAZ^r|2%PShMY|xV@((p>^;WM z6ry~r$0DcKeww7zE<&l};-9#=fMLiVMq5-)E5sN4Mermm6tv1%y=C!gnG z=!1C!>I_s(qjWvY3Q$EF7J-n|YkK^8r_{E)J;XM<-pmSCzn2&dkSsMO#@_Jm`yYo-sF9W$Sh|z6T3jubb|py% z{av_dVe28&XYO^P%49(96s3i!6hv#e*`xY|;Up5SV3k05pK`C#c$IW*TE;1oLA7l* zy}?!yGr?Py`vAas`FCkO-Tn0unvcC|N|-Q8%J-b7VFQm0aMS(S`1VFm_l0A2#4dDS zX2oai&4(+>!Q{8H=^8viOXjHf9ww;le5>Qmqb%5k=6^m;mU+CT0=hXS!+g^|YM!I> zqXDdbkKC}4eaZq!Cap!C4bM}MDC7+9WggxBy1VIoYc_7C+R`-`l{Qzkhns>wVr?-r z@YK8-{_Xx^PvaZ1kUom%CsByB+(u z%O_q-L|GaOIx-g0O=x%~9WEVy&aFy{j2{U1C;D4{B4J(sIwbGXfOYk-bCU{+J zxK}vCLr*gbum8T8rH~>8_?)q{=q`r?ynpB8K4CIx4_#ija`Z=zz8;au72{X$In$5O01$^wPt>SU|(Y3LR z3-(vs{xHO-M2Iy&z;U#otZCC};%E~Q(8}JL62UVNt=D7htEktgE89BkNTpWYKF@pw zp^A{OU^nQ&a_H|!o3kJcHY2uE4nvl&*D1Mwb)?(*I^@)9pPFK)ei(o6t$!7*Mypha zbh^Hk;Q5_F&Eh>ICJ91C;JBD0*(;7L(%9yYmb8v>CPAn#@hB+XUEwKz*Rr)2081PQjXDHH%{m!fU` zK$%xDsz)sai>7GmM*Z8hNY?V{^4$vs85UD9H%?DQ(XbMrpApwf)UQ+la0(aMRVqbDya;Nm5LwPqL+lJinY zOzGtG#(_$)he)+TsZpVe;I1rXOa#Lx5Zx-d+;T(&?LBCjKrrT%WhW@HWo+!=t+**~ z>ugl6Y>b(#EEAGoFBl>1osx7tQlye?QYhr1S+;Sag3ieuPA+Sp z!B%ZD-~WnMOt%iboGD6%W0nytl2tGEg)PRR5f8A$C=+kJzouhn;G_Mb|9)YnKC>Y+ zm43lUC9x1I>^R}XgPq06O;+{L&+Ubv@_~3>ySkov}$R}wO`IvxRYrXi~511HQ!^`Q+GspNAXXyFu z4_@2-*a(23w?Cn&IrLf6}%VP(}^G_`u8d08$mXj53EE2f;o4(t;A_rW~ zo{Js@f_}=j2>P+jA(-~EcJ*~mfC^s1NVR-p+MD*0v*tNQ?TYOlughH_gqW0@Kfa** z+Q!!nl7^diN~Bky(!h;EwI zz`C?F6H(Kg$#6X7beBU|Q4QWO73D=5mulF>SuZWG>M>L*uimxyR~R>EU4s(DI~iGD z1*G#-p&kD=imsf&ga_JETo4$w>>F}aced0)T)^Z_ORg~6Vfx*1hlY`poGp0*yfAsh z?^B{sHSmKD(dTzve{SyP2|S`=ePx(6yhKU?FJj|O2m}LbY*kDFUKJHbGL>WeV*3&y zA=K>!Tz5QQM&u`z)(;}#bvGZo2>_DA38tRK5~Vth7?UG|<~?jyUy|%S6nq|grYcV^ zYBN%O#K2#2&?RcW9lb2!_U<+JYIq9c>=9`;8Ug%5W;GD{hK{3jTXRTwtG|sYy{W=H z2D_2dh?6lA)xHQ$f^Y`ee}`<0sC{LgQc^sD9m z!GK^-vp*8a1}ZOTs9TyGK#_h?Ez5=D?)I;$)x9A``Bc7WFw3*shXcdbNV~wrNzkrv zgWNLhHCRxUe@vrk?QM(N%3y`BHabyPS&F!)yE8POk2rremF^&{V>If}@RM)h8_k&| z*%J4;d|~(eo2C;}XD7mEg|pS}{Q_=>8N-p>87v4lWjJNn+mN>vWyi3w_0;3UL#e_r zWgS5qt|>j={{3K9&4zYCI?GDat$QHbu`ak#a{v9IdOx~+V(^w&+CrVl$I@Szdetd* zdJR>Jt#l~cAdAVP4SM#a~@HCR!$X8;aHQjWtZPomv? z#tg4O?e2*kZ9LXoSkKcOPeDql!f{w>YNMy5H}RP9;dn)zzJG*snAf^*a#figdPyDG zuOgOnoeuM7tTP~ZQRlOA)>sUTKCXrj7`OK|QJ)vDs_bvM;E`lXX~-0vd7PRiEdwYr z-2f=q)hyD$_r@ELzuTwi@P%8C_m!ST*xK^mM@P$l)ZrMm#|v>ZusdG!8^Z?B@=#`6 z1}TpnX}21KnLvIxnS1E+viF)nzTo*rde870eXx(HNuN z@x4B^*lbIBNrXHfpqW=xe9qYu~pe&2!hrza2UVm+PS z*KSqiGmlTio<7!~`FOowPcL_5re1%0aVVG(wtrP?v;4XN2PD(qTR4a77YeT32qKgm zZk6;M4J|-i)FM1n84c^i~ci3y8&rA6%jbC z%^=+9UeaCV0?nJKA(2}myii@JV9}EG+lLfeOBg4?mxTxKl`GxR)Q#;h5&q;E=<`pM zuJI4tHN#_Jay@^-xC{A+bNj&=6m=M+QKEf&@x8_3=A!4)-<6tAhYf%dC4nvxnIp1B zZg#q3HJ>*~rgCZWk)0(Q=eM)G(#_S)lB#^1=SmN~Wlao`0oE>|-skmjB?+7QpqI~T zLLfBOuP;}N<@1r6nf-CINImIBLCM^U*-N0HJ&JM)o2Bp5dLl?P@*P2Ryq6!1fr7p1 zW$}BB^s}|ngY%DKRLJJYOE+wrQ9#a$@8=H2>EVvC;Vi+;J2$l6@;HprWvP%2F(x9n z>^3<2*DFZhjz!uWS3Ay>C@~!%borpki7Knv!1{iam~WXVxKn9{bZppyKYn+vKVE>J zg=OKx1Nv}kvn^#>A76oX>jL49Z@lsHGc7@oO6hlT2)T6^DOVIcDpa#^+c3M%t!$Uu z_ULm2_d`gP$VdQ#iLkHaefVV7OaW{O3zWUg^@H$@E~234x9HJn{sf1abgO#Z*E;l0 z7Yvcw5rA4hnQQpBa!QsJQvyAo_$6-L1d!7}=_?qMz47R0yf$&2y3+PYjx$n8ev*Nm zv>J9VL&z>N+rU&2dqwsMu(DRD#+yo+SpTt&XL54TWrgNo-DA&sCC@ZN;zFklGJVce z+omA3a<1DG8%PXpy&flq9hj@z+2Db zEwDj_siP$4DF74YFBm_D_20cQ!IFlA$4Zkt5VZJKMEl`6jJJ6(<(MIJ#^=MKiQXJj zvdxD3`hzZkyee^gI+gTAxn~{o6Gj?NsEO+hUR^FzzS9yymCx zwG@Ki=+5weIYUoih4wjv8EM2$?J6t8%2VFjuiSaQH`RdX%QN4NHEm2R5mrc93Qf?k z?m|jmJTM(?|G>2mWk*+D@MH8ff?(G(R@3T7obJiCb=-f`<{LYa4)Dog>$z#Wem<7G z`ysGbuu62QwPSsE{^5P{yFlvd-eO2&5-olIN$mGz)a zI*N>m$jY92KNfqcv$n)p-}3X02htl65PS#Hdq6UtKzoB$t6E4W01KC+>VB9dr6Zl# zPo1q0I}RhS7R#yFgfTVvKMH3)wLPcCl6c=_B3YWp=f4;wOrzxjvC>hmWqq(wF$+`* zm9Ti(tvhBuvcpSnPH);F9DKFvJ5mZQ^e^}31h;6H(A5(ovGyu`HN|u&R%|&N74(yN zToG45HD`Q(KYnD!R5uPvL(TP1ep>0?sEyza3hEp2%4rJO+#5l;`lw$nc4Cs9Ga+u` zjZR@M2-U2+zA^Luf>zaaNZhA^=@7rEXa^a#&byx#^8uRP8RNdbEC?To*J5|+t>xPU zTgie?tedxrA3$Z|0# zIC_5&UWnF{8k@H{%`gmDUtyYa?S4UIbl-@TeNDhlT7Qb!At0_)UER~yiWF% zqDZCBYbFU4)Zb3$IP6$kr+N#^A)90ODoai)vwgr47tzk$IK!%&B{Vr%SJqc-iC$eW zN%WtIP(rJ8;^oauLrdlr&ylAm0EBYLrZAM(n!$W5igi|XtE2{rxDy@JF3joY~f4-?H_HZ#J zcKMs&$j3aYKy2Fk7|s($QVGagBQFOonh_A!oaG^1X`=KQl&V|Xx>Hs|G!@}n2*uhX z9vbgZ^|L`DOg%>m>edzKj_S+?klXTFLz5IJmt{0|Iz>2_c#>@)*3dn8%k^x$;ZCSP zUvu(rP#g|Ya{hnmFEh{)RN)@Y(UdEq5K6}M(dDlchJG9;J-v{&EQzL~V; zrZ+n$eZOtk&1}%dPvFNPAG(~a4|bLck(9FP*U&!a`HXgGdDouuvF&+N%drHo!%8Cz zO|kZxCP@=WUS6D+PS$-e+Iv&V3VH}wN(MX!ubTfKxko@Sr2XpEG_FS z(Rlpo{k=KB85`IU&klR0GbzRq%D3p|nb$l+uhkdkf!`bT%jQ_Kq3dH`tEP}sn+A%a z7++k=athD!xLy2|?Oy+5^@bm?Vl2<5IB3wzUSw!@y1nSiQj{o5>21KG{+Fe&A!uW9 z>n65#kiye#ysKy|9k0m5*#k~dD@~*xa-E2Zce}>smzREIOtEGSRn0UxJnCS}b58Vh z&F6EsY>0)w$So=j!1%&ni)N%vGFWsrO2|xS%y0c#@b9*s@xO(|%#9q?LE;+)t|Z+3-9Gj#h3o-{DIwOnbH7W4|8`836|;0NT;bp15RL>1#uQ zy8D3m-aYl^(|`J+iSCH|NvaMA3v+#%oE^ke`Bo?0Vf+YNzs@AMgQ*PBlwtI;h(|;# zVi4}fJU}}lkctr@GWCaH-t6in7LgJB!zLEUmgFbmCF?|vw~@RGxjbS9i}`XLaX~cc zqd5?LTq4Ey`+neuIL-BIAR})g^V7?9vhG};J;4S&tPX+pCjE=7Ar4G=?OJ^A)q>+^nL z@RK?-Bz??KUBWKFbptU>b>4&HmuG5vIKe0T!(YB2Y&uwGpnZp^yrAD)Au&{Ae_SP& zz{)g(_Wb*yiFuy}v0e6fg5v0UL^QXnZb|}V6$l#zu}sbLkCEL`s}=-lAIUKdCgd8! z3@LY;@5l<~x0%@45KzHz!MDfN0=16BF|-$5j54($Hr^&@w#(EUOz`h==~O!Vm{aN| zvULk4c{eY{mU*LWA6o7nb@v>Dq{=50bbQ~TPl~lKGp0r4l~a<=H;8e%3Vrw?hh3g> zZn3_%BkjRoq1^mZx=odPY2`p}wQrhPvpS{K4~Jm&rL#cBAC<(Srx08Y_ELpAk@{l& zcAQ-Kuq_$1TH{#@4yG{jz&ROPpk``K@1917ls`a^S|a_KvYG?m!E2Lk3$^p%#JgtJ zas?HWgYgQ?<1bK+d`oUuP25xI9L@D;-uCgk-yB9sS$$>3LlXY@nipTDjqH&XXXn2f zeBmg!aNKT!vWpU>%jcZu3;UI43pSPNZ^xW{&NQjL4x<^S@kgqEZ2?boK!zU2qAT~n zw+8#aE%t^e4s6_Zd(-^IzKwIeWL9&F;AA0 zaG_C~%J|Ypih?X*<+3pzRKFP{f!*F&XST1}9mN<3S{X=dFJE>3zA{zpH=3hJ3y@N5JBV94 zSWb;!*Ef7)ak;0=8DDB@1XWuM@mqZx&JP)UK_jQM`*onXA18)Sw0Wchy?e(fM-;=p z5WiS3;y3|QgRa6sL2<2-UxC|Y!%o9us4L^f<>8c9!k0zzBxtQtCPricRkBNxeL(^3(N9{c-8J!PRs=wO_4k%W?PkNp= zFBX@1b7~!ZXnu4S;`zZQ)1$hUed3Z%G}a6~Jko3T`1Jb!fud&YekJ?5I z{wu^qBIe>Y_88iYJ8yv)3FJv@t;81phpV%WYHN$S{cTGNE$$A*9f~`&6xRa9-2%bg zr7iAGaEh1WEM#=l=ps>5RO!;SNy#@VC{VsZR@`m z@NE#~$Uek8#{vB&`6GV2jp6 z&#=`>>MVqw`+o3nHDh*|N|9C*uUpGEX3E6>+p zLD~qfDDr8F#liEGBZE>{YaT_!wdLY(KwdR>xxFjouxxUE(R*XeM-{;dI$fQeX$07l zKI#cWWk_4@X_=A^(>-#x5zTf!nC^8LTY*bfmj^sZ@B6i20a6h|60liIciGI9rz(XFDHNL9y8s;_kD!qYX= zVH`W$6|Vb+h1MBH$7*pS*%n#ZBr3XFpF07QPMTB@9@0Fc!(Q=5uNiAVxe%%kMQzTV z;S%@A_H)uZ@qrWi=0>Cg;@qrMyp}mc9z6gT z$qV1+mB?FWYWT&}!y%Pky&vlVc-EllS#_evJpp_Ie2!;Z-E>P~^iv5rq zUs2taweof&c{Tb>_!+_v!FP`6w{IM5%6u?l8#!J%K`$4bvENHOU0t1_EW-a)xk&}2 zYPcoau_{HX*;gBL!mw$ZvB%ES6s@bBziOxx((n<)FH4gnQs6{wjR>j206yS1ii}!Z z^qXGr@>`G_abe7EGQLEZap7;fR z_&d(i6`lltvQ?flWI@R>9!(i`Ivvl_+HKz@AcmUa_uPZU`~U6JyhLh-ABc5$3QXMq zhwYKoW06O>JH-Erp?=7TxBue8kw=_w$ai}d!{en37X)m7`ALNwj5sxgAcF7oUW`yn zc6~>FV$>?qf$h@$_Q`#}XRpozd{+ar2>I|hx8OXuo>E^GaK*N4)@|E{7`l5xE68o7 z{_QFyJ5w8UK0HcqG*#?=8l)OdI3lT+c5Jr`S+6tm+-cCSDYm{B(5{V}{7I$JPF=_! z%cny|3Yc&DzIlcS7@Z!20{X| zU6Vp<(i?Ug^RFpIN5_}JbB%UPqFzUMhwJw_Bn9rCh?H*ZmB*70abLcx#nCN!5r-p= zOz+~B4_E3z0jP+2FPNj}(Oh@uM^s^-A6VMCMHmfv*cDYWBj8z%ZWsX>1VVN!IcvLq4{Bn9#&T)fkg$NW4I4 z#tscdZwSDUuGt77D@<4s@Co4;CV_Jkp6wIZGFy{@7gQu`g*&Acwk zKL21S=@(&FZ>RaEe&+LGV=|l25(`<^!{qI1@Ms^OO>zYK#rn?^tE!cSzL}RDWyLp{ zO`1)$@IwzrOK;!tr3nR7L?gQI?(POzphk5?^UOs)#G74gA2;!gNIfoy zh`DapcDlZiR)*eh-+fh+rQ88X^JECXOo$$H(zzFtW%MYmRTF1@b~31MT6*CW6ZYMi zY4VB_oQ(e06gS2d(zPG%{Jk$VXhC1fxIY|fRf}4vw@A3cxgqq zmIOEFhITaWi4y5>z>o5eJTh#O#G|Q|6uyZR($i^MdYiPC%!|Yq4-Mwf7=pmV1UqY^W3-+d z35%o-8(olEX-YSdiDS4W*sWH^s6ogrMIkKWz_GJ-bdpHJI+-E)VfgLGxIVvTdwL{x z0;JFf9xok}ifbwMLB>J-biemuJ-FELc70BE0innpgy?S%o_C`NEJwW6g8)F=Z$}JE zD3|I_o~$rPDoN9mz9|U(PLfdhc{)yfR5rnhjJQe3#~gJ5y#l~#p*N1DfhVC}K}+pm!Ofm%p_+UzXw&LVa0R zzW0#@q!uy-2qTH{m3%uAx^PbMI-K_U&2LL% zHn(;L;TdO|W2`vmxV5=wYjgM-z0>ie?nNjvuS+dmvV6Ec78$C{nr-nt!tjIC&Qvb` zIyHDLEj@s<2~Ng5m~9>LxO1WQr-PjKamUCCe>4z#olh*>;>bZhQw7-m`QlLWSgit@ z{c!;afk4+TSyr>qBg#463l)4L?76ZrR&{!RZ}_qudkL45@X(&n@bGYk9g# z6AU=q@a?;$w3NxyA2sF=3v(#_UDU^VAHsJqO5{S9F0~s9W#4RE~ha4g9(fMcVSR&^@kB<(o|N}m;AW6BTOH3VnD+hTd5v2@ak|T?QZN}${pnZEQ&wInAM{iL?>$NWl7vtO zAhQ~%w}ZO!@SW8pEn`dq9BNswfM%J-7hd`O4n1^_$A*%e&Y?(pNfum*-*}I!X&EV_o9uQ=F*7ftc)UNOpAiopNR;kK zu&IS+JW4a}ov1F_rI@GmRa-G4N8&z)u|;jQOuGj?%86X*!c>v6_Md-obOCK%rRQJZ z{%moVDc=Ww<&3V@h{JqcdM1jsudaF zparNgnp(GX(KK@zINK?nXLtN!zb7Ka$!_M#jR_5G?T-vbqDz}zXZC2$;o<~yLif|I z{9uS6oO(*@i)Ukw)Jp4EerO_sS*;)CG|J25GA{*C_tp*OS^;7gP86-9=HIjNh6%Ql5D(Lhh3jj}MaY z@Oy?jTTjVaBY>T!ke5|}KZ}GULIFqvUkv@t9ZqB23n<|A*Guq+ITt7WH{9%Vz7m=U zl!#48GIJ4xHzqp;&b-kJn%GGNd7GRQsEI#``K;WA+*5*T_oe^wt$ba`f#mICwTIp} z-TC0LA;$s~w3~pc=LjU%8rk28nY6dj%BIe{{o-#V;5>@JVnOX7o&3QFYd?U7rAwPn zW(yr6p_{xzIF?Can)2;8jz)KMKx3t9|GwP`KRU3AZxS8RB-5(fR#4e1!my)XJ7Wyb zi3Rhw1gn$5^7#6kEs)Es=E%jF9M5e#&9wm_MFKXqYlhJSc%tJwF+QwsjW{)CeU7~e zO0EiJ=ni4nbkUYA)87h8?#sXT zMgjH?e4ZF7Iao6PqD-^&73O~G+6!pu)KPs#N2F9km0JGAU2sNSkIs*X(4sl~m`dH~ z`GYanNdg7PIL+tj_Q4&K)O`0|ZN9r!*4QY*_nLMBbaB~?`%}{Tb`m&v0bdIvNfR1an8WnesE45>1GmMgJFRhLm;*$`=}o zwoxn7Js0VVZV2o$wMyZO{J=W8F#7U2UH_&aL*giLt#Abpe#De9{C*f$%A8H3UY372 zbq^Nd!_=}~2S%`H%2F{yrH+#~XU0W?UbkH>(--NR$zgdsqsLQ zo8>U(&p&v3xk@*kBi)E*O@PP@2 zq2){FM|GB#!!w%BuDQwVe7da-k&@K=FA@h;E)$X|XsaLD=R7lhg%Duy!0sLApRj2U z>eUSgMtIXDfy|WsRE&o3LUKV~yFno`?<0D}sm#x-r^;tk3McbBks#pC5F5z^Q0(aT znC=6+V1_hlwCC9`i+`)+Q^9|?DI6eCk`>`j zCZ(l_oV+hFuzoEpU^HmW(%yXSGQM^uR^uhupN;)It!Onx)6iMCW?5HdRqf}b!?@Yi z?!-`o64IECuuer{j?A~)%;qhgj*TU+?763(f$Yp`Z?*l$i9 z;r93ee7uw142B1w#t$^BkfKN38uABgigo>4lT@U&V?7f56cRuo@NF_FhJO=hGU{F$ zWLv058qVxQM|xdT86>yRX&nDrM?(S2pf?+?b$vaAV4)wb_^hW6C^%FSI8^NQA&!Wc z-KZJnOX@eH~LYp~SKG?(pqn!IBZ2 zjs2&7ZoUPmmiyW00!jf$r`vAIUmyD+baSPTMI0I)@Ypk0fjmU>XHR4TV&+|f|M6Mp z;ekA%XLFwR=h-0!ODVMItYd_!QP^d%kvP@y=w(J3oZ1Fj%v+e*T8Rw>P@e`0COuct zTbRxJb!M~F@ihZE00Ezlk)>`LOM)j?*es=MBa=7*-*db>8v5BN@&psoT3LDar7;9A zfh`nR*?XLZoFE((RIDuKa%ylw%mm6ZTdaLwb9MQYn2Zu}lHmG!uq)6eAWqeYcDi z0_thV^gW(Nav9@8=r<*rkk%LyJoDGliu5vE3ljlA;U@##cX~z&G>i{llLxyekvQ==<}2vOg3k^3M9(w+xqADyF3}{j$X* zudu3QlR=XCLub;CjFADaDlKNGINLQWB<_MYe+yIb#a=w&o!!x9g#3`F?ekK!u}QxJ zGpr9Qhk5R+Oy8ah5#p=pN~0v^=ZA#J;E)}v9ri`K+uuLUiK72uu6i&lJwE0nVEy#H z!N$c45%S*I>%TwjV>~pR4Nh>DhtgT#&L|^}&BDaWisVJ0b>2<@a&|H95pX_snBms; z34Eh5M!zeM0~9C0M=lLy>kNTRqL`~i#&EQTs!Ika8CMHlH+*7=B4X>WetD)|+w0wb zh)FB#OeoH}gD-WD+4cE{^69J26oQRu`(IMpGOvLGq|PKC=Y)S^O$S2zK$xX#)Y%a$ z_Pw@(2?PO|yvYX|rvrIIkK0@+%*H9^eNktcJE`nlt}%;uvY%!TP(`>p25afPh$bkM zKmRt&^a)Ul&b8xLZ#IxNX)6%stsz_KV>|nZ5H}Qr;5IIR#-;-7eCAvH!hZeF;M!%%4yS>mDyZYWSrJ9`hgnOB`o=eV^^)I4L|C91BY)m$8%n+B zvL{a}TavO_HiO7~P~`!OiSn0m-^V8RS;-uG&dl87d{-w0O>-~;)0`@;_3{hL9rXG^4$`T(2dwY48vPhHaNgWi` zESj5W*BE8tw_#$&PNx~Wn)5_mM4TU?VMZhZPQ*;Khr8?>KX=bC(k?5$>0FsrfN@Ws zhJwEU*s;b396`(3PWy3wHA0isUh>exjA%x6CD~dN8Qa)glrmBpIvOdvLKK`7kUG_ zmUpEu9uA00r9GTjz4C@2odJ4{2WXEjSfh;i0Kuh9%}gqlz_)jEU_?MtPLRu6r?Y*q@VSg%wOL=N62y3MtU~sMp3fntUleg zN9A1#9brC?H@tqMR&p(=-od0g!wyx4#@!gJxD{YBxtf);Poz|`oC$b}zi*(3Vao3y zUPnk0K~M?<2WqWznWS~BuS<7A>ylLeXk7=auI$MM5U)S-NP>E6Nf(#$&pl|&N_J7f z9!rsN;w{;f3n&5qd{?uPcAD+;cf*XN6vw%^1zt64vdKeIFUQ&(i}UZH?37&~B}Y2h z5j{_g167?$H7h@zBFkF9MGlfUh9$j9Z_za8yevK#dC6-d<}GU7v-x|(j9G8yCWsK` z{w;3zg}q^2rpqLj9~=$T#W{E+JKi5gZ;uPs<+0KAp@O3`E1tY0%&)~pN|CuWR`sf7Gd zohEh0*l_Px-e8${r{~h5*#KN>Xt1KJ>C);cYINzi`aDlw)^da$C-}de*!!LTrz`u2!T?o!^9tQl zm{-;pyy90Z}wN;HdTO2XdgN%Ky1^R)uYu71RD0PzEbL8s1wNKaHPbD972w#ypj7H zK192NmfL+nwY)dpLB0(3DAX+FRMu|<;g3g1-Vep|VJ-&6Ua;&?0398MtGgsnq*bv& zUyQvHjW&sEJQnphndaXCvDq?fM5J0hT(QYz+2OyAP-sKE)1TO|c>oOv4=m{Xa8;vq z>o)Q$wDs4%)XYd)d0dvh^V*w>>_+#h+iarDE*R6;uT$1MolPL7aTN=EH;dr3TK`>( zvE&+FBP8yaWpB~C{Fbx8(Z%;jUto0ZTTsL6VEzQn5uI9>V=PsO?(d;|1zDPoCKB^r z)mp1LF;A+lUP`6swO$YNeC||Wwbkt=<1x+L#O9brG$~GM%iiBF55Yt-5eY6M)R4^X zLs}VX>7{vwi-Y-K&K%K+{9avIWwAkiB_3G>C8zyDZ`vMe3#&Q(JSn7@BRYfW>S+37 z_6TjRh}Z7>r^skM&%T&mz__LO`O9zr{!smqJ|#~cZIq?qU6amrKQ1og>uYq0heKY8 zz@g~FV*LqQtLN$)@on4|wc$^0(w&Tyw?)p+)r{%?sM4!T**@v(Rb*Ds_i+_2pG!_m zIbpF`^!0tI0NK0{+?f+>#cynX^BeJgiw?O~y%bEEmRcj9&1X$i4clMQ>{~DY`g0;l zC+B+?gq%C_zg~${}(04Nln5O_ zb#4&l?21&0cQZ(}etz1)r|y6CMnQGHcM5O&M^+&N{z*#&F|jL=4-LpS>pQyUpR3!r zCJQW=Intr!O$*@Kr8p&k!a7Jpu|zkCO#vAc@-uMi^fvLB+|hYoaHQY5pLs(@ZenQK zeorIKtMfYBOENGIVR9Fl7mWo_m*(-ss%=rX_Ln&B^=+NQl+&H~qodA+t3(|*Hjo#{ zX}-rG0o9B#0Xv$_7Qfr@*eH1a#xu?5?~310Kn`(PFd1!7ERtTj`P>g2*2;NCsQCzAd+cfBh`6&k}-^Gg!xZt@5lDHaDI$# zkGxNrw4vef&PnB~Leg}Ve)@HM(K&jFjG?c>RJd`-{ri;l)c@2ZY_wDU(Y3C`0{A^LUO#kBr)t0L~1rw8{4m~Uf5@V4&I7A?`0qN0}} zbD49Pb3yq5@+jEC1wHWd=-Fv}evz{;_qfkX+I*Oqpn7BU2SvXA&?K2~EDm5}C%MAj zk-+B4Kfoubs!1^vX}0uQtv}N@y_kb43GRD&`jF2*d0c`-xF%%U_7Sv&Zzg9ZY)-3U zn7GB6s(*CoQ~bMi-Lw5Y9JF#l>CUx^tWw7-l+#$*jc*B+Z6`yPgu(R!5cvl6!A!c4 z8aFo5sdIaKX z?i13T@SY^|I$NKmLobfwQFul$b;q4?+8^Za-@T(sr4J|L*q}_(~iL`Q^xZC zJ$eGzIj{wm!VEDNb_da_wNIbLY6V&=uJV?FR3jUMpDULb3qMBq;ye@W-#`R%wmIQm zw!0;=`Dy>QyQQg;Wiqe1pEhHS8l7mb^0Uhf{2Uv}q&nWAO}cPN+Iw%Hnhoe^ImDe{ z-#T|$1v2{b*Mq0&7n!v7>bcV7v&4ioUFPiP*oRtVP&iIUHjrIWj&uqeCVi(K^Q4hr zxny^{mpKwJ1#m6-Jp0B|*STHPza=9%vJg6yM*^zxnuBX!DrpEhS+rFOLz*bT!kz7s zIlfr=XWu)P2!p0nI4NK6%+};P1q42@GD*Vka}Q4liw!GXMk5KHgW95j3`&|09nY_0 zj@25MB$IYLxH>tEbM_0p>U?cfScylVJ13nGP+rhjxJq;VooxFj1N7Sne8cP=mDH2K ztpn`3bLcGf*^!QuX2XN_j0t!+BZm(7bh_xjc1c^^^+@DIe4c-OjStzUQxFq~1|qpn z=R2#XoAIrKkJ@_sm%785(l8h-7nS7c8y|J#dX+>%VRW0u=AGB|=^cgt&0cs4kUM*i zSc98{E@DA6S3Pz(8FB73lzJfN+OCD0hifnojQ&7epMJ#^C|6AFs`*3l#o4`BHh(_1 zw1^DpV-jChO(|K+rew5BXa_RAN@T!`-CQeg-}~WR6o*&A_>ky6;#T9-#xe=+$noc< z1=pfV*o?m{ z6*gJidPA*LuLVi!%TP9i&;UTEJz$uBNlr2h1V}CY-vSc3FBkbRX(~Pq#v2=Zzs^m1 zA|h9Y#Wug4&R>SQzmC*hs^E^5u!CG55cQ}y3Q5LR*88d3^bpdj`01%jQVVxGeA#2PNuB3UZp|Q)Mv-Ye@)NHCew^B?eHgQ;Yx7sL7ST2{|JVqW54cUZvcrPkX;Lo z0^Gh5`*RU7ac@o0Sn?s<1UPP8u`%gdyQpz1bCn znI$K%8JeUyAE1NQ)_d!1&3~hlq?c*1@$kW@-%yb;jo04hAo_$jmNZ~mUTPmVjn5ky z*TNkwh9SMW(x0*cJI@yqlq~z5K_fTWKq{s|Et9F@I)g=7n}3(Ce=qER$7OzH#qc-U z;nWFf#I<0u@b1UzCtz0T?V%)TLZn|8uEd#B^Ox!&9F_=<*tdB(JTWJ;2-ew7A98DZ#1W$T=PE6!cTBD=VPtn#Fo5H7&BameALhtBY;0RUC0`UEHfF&bv z1|29cVBRGf?f9}2PFG#(vmLB)-P2<=KD*`!LfkST2S%D-h{e0=Wgv1N_ZQwo-zhjLvAYgGkblz!z4_uybM6ak z(cv)aD?G2^o1G~V{v2l}$&Z82<_IAb>z>Nl_#=& zL2GPoHs^;h_YCh8x+`X>M|GfpdEH<*K7K??VBD`4y?Z(c;-{RtZ`_aUj9)^}G7Jm5KS z(l{I=%!cxNjVSN+YjNS&8Dq&ww{?aw*_^GV!{e=hpS*5JUkM4hfZZG4(}Bm&UBr7L z=Ij=LW8YM{t>(t0hO)?hi#gTj5)_d7=u}T`mE9h9f76^B~`%MPNJ{#O%mTtc^?%aLgrOk@{efNI%Ul>iV6&X`9oM8jYT)9bj#WaP@`U2l`32 z@rlwfB$Q_{X&@REV}xCUl{h&L`;?;6f6SW11ccJt0XyyFUrx%5IZ{d2_Vi`=c+&OS zH5WLHrAcLS(6^4&*D27oY47zv=jaUO%d&4d6hsr2$jCG%+^zq^M;x(r92umViAh8b zh)!@j?XYr-j2=rNsbaTRDyz@0%nCG%gER9n3*NL5yGx3fFK3*!iA zCiQmyMg&ALVI$9dId>BkD#AK}IOlZlojlFN=VKE)7B$Mw109(%6viv9%wu1rjLoFV z^yC*mt^{Sc6dzeA-jH3xPex%MqWL=#t`Qtni3$sLTf@d>7W zbM^~>YN<-H$+@%NqvS>2{d|5zDBR{vjD>0#ran1h4TnN0iA)%}8iqnLfn#5QqsO1Z ztLrhXsHq=4yo_G zcJimV_#_q8D`HVX-lm1;Ov93}S)4+^gSu&a@3&^Rx-DZ63A=;j2!bFihzN zOSPCo8p{|q2&>aF&J_@G^freT^~dtYPyRo&2)k*U#JQ+o;-c$o3;Dm zG$t^L_A*B$*Ny0+S)kVXlS3esJ0{YgIx<=lOom;Jyx&i>e@~*w0@PJ1vsZJRJVt6^ ztgcK>$zSrv*muoH>5^OvgIS)>KBA&8WwX}}O;K*INeT*(eAk$Pv^o$nnIOnVH&gUA zubsW~~|Qq>gqkTy(SjGSo%L`|5SRpN;<0Lst+HAIr$f7&j;V@WO*%?{GI6@09wC zFf@=wnX@a^P#(`}mQ+}{Q%r*2^(-*2P#Uu5oOMY*+|~!dOEz6QHm63y*+1lL3n~aW zSZr`nYY3@*+~;bSv5!fZPiL;Jj-z*De$B0si9U{um=&<3f#zPNS=1KuaUn~2$&@0! z>HN`7D_RlOD9eLDqFch^E2f*h7MM(gvCVy>9{b)bPW5yAIou*DlzTtRG&qrWR~`+N z$evc#J`Cpq)IWJ0J?q_nz#zdfk-FDRK|i-PlhoG0a?Z^~oQKRmpn=R~qu7&m?=Eni zOO-d;cQAM59lK7N7!y1y?*LKfNC9uTwISiVlj+`cO%3JQMv?^7KI1L7v~pVscCc20Bjg!!XzT<8dDJ_Wt(vZ+O~&JZGw*m$1xyf>jxnu%epz4gl; zH2SP|)~)@fpS+!B>u%2<6X}3%V5H9Fh89%G3Uf|jP8~z_#xKi$18^5BXjfuRNw}2FESK;7-=6tz zswD1=z}B@|#2bkyX@vtxkMdw2&yg&9a=Dp_!zIXfr>yb(eTpk3V3VVzWfkm3R^kiG z$VGov`!%weeHUx}*vd?c2bC%?at4Y-`%ZVWo#-}|&GSAoA|q7XVziC|ew@29gc-@h ztNtoieU?NHIXJ_`E`2Q5CA;BH2HblkIV8cDrQ3`HAdkZN9pm;(_(A*GzLMCvDwRZ; zP|{^{2m$#~k!$!bd^#Ze?U_pTj?YzWv-jq-j`w+G^U!jDs6lWwPD>#%|91T|SjXtO z`Q1Tv``{vVpzLFJ_&oV{rfE(Kt+dIQ#ckNJiwX-gWek4-{pq4}^p->p~7Fj(SzL_=i>c?~2{HL5L#;PZs zJBEt?TjC@!uN4fFW~jNPE&$bUmI^MF{W3>>5rDmOwby%?(HyF2CPG6+WRGmV4N*NuM<;)HCL6dq*1{%s{yG;6QbEU< zG6I>!sOx!2JCS;b1W#ap3>9?FWi!3w4mr_S7=e9eJ=?&dJlo`F?z{vU8WnZU z%1V4?PfF}tmtDntoV_yCk4x8ZJ#%K*lDfUK;rvFyQz*E#?t}zYJDdJfoE!1w8=;!W z#?1ll50J^Z+Cmw2sOkDGz9C_0bRR9X=_pB4(cjV|2wgEVj{rlP0$A3fNjVp@cf_(d z%^sp9;h(}NK^&BTIpiwy-m7F9v8B}RrWe|-S6f`Prs`&p({&QCTsvI0tF0d*a9*GAg4pqLny za$a!(>TCXA!Q*KKvDC8t^+Vqs1S75l^e790c)O$risvRu2}dKGP!YNFqxX2+^rb<( zk?#ZFJx-X=zS>?I;mI4_ZkV%T;q5veX#QXv(UwCiiK^`rQvr&AhQrWs*AV-OiB13Z z9>o7Yc>=j4kq>xeXFu=zf6<12U%1Bqf5N|lkk)dhS9G#BUnZPz@~m5*x>93&$*41@ zH)vuIi<^06NUGH)byMja;GXGxl&ny@`EL978K2)-z!yo|yeC|qg}Zf9?PDj{lJ?nC z*KGLS;&J1A?+G=ncxRy3ofFRX2=jsXG3euE+1~@h2~rh}><;MzAQh(%O){@Mvk0U2 zsvA#|W3!?C`d{B}||zxeFy z9479Rufh*|V-VO^`8G_2*^#|*TB@Q<61RW+~BOum3^}%%bMO>`Z?xd z->&$>f_U~^;kHJJl+#g zSTG{tr9Fmh*6=>U^5hAHg-n*5bHZ6T^ez39Rw77>ES&T7pJ+0jeBXL*_f;|^kue|a zq@g;>nFNDbs6Ul_{>htOJd5{w5`75w?A|mp{#$$25BwzG%u8`pp3V`&CfNlA9!p0x z79QE9TCkq@4^b7iE3;FmCGCY2C^#pqX2NwhFy2#4?yt6T}9*zN0c z0+!u9M0=~NMuEEEEronPBWI?@A)`y2RVuuTP|a^q^SMy%cdq5(+2V^LbQD>}ubNX@ zi;lnGoxkF6=|~pMdB~+yb}4t}1WeI37htAtEjiM-$$-L?RcBg92P=)@xX~5ojFBcG z+G+<=snEF5WtZ4!5xJ5;J`1l^nzcVX{o1=d1)DS|yP<|pA0){ufC=6i5tISU#y|e? zIfv8EVqgAPug~7prr9+#e+s!#cI-^qBvQYcVx!1hijI4ErYZDbm=>Tv0VaOHCUqH< zAar@^nl44&lhdwvWQbr~Xbj;qIrziZd$jsqrO$3c!>;S@>#y#=?QN_}{9VbtxB7-uY> zRB9|Ws`6^|*m(@2Onw^F@y9oxBH(_rwYVARb_2+{qBbL%$Yw@y5G@R1k?Ejb-(3FCFQ>xXC(1Xx!6RUw&FjwMbon?~G(xNMV}uo%sz>Uu4(oU1XW6}cu9j*8 z*$VbT6D%_29ctU}d$}M1_*^EHqvlUSZu0?D7hc9NtS%_0#JG|;0vVBL*pTl~`5nsQ z?H3@o$Q>?p7_)VJTFdw6HW!OGu3mD8SFV-GsazhxQ>uMg7&ja5zUmyTDWX$yglz$_ z#h`WWRW6w+Q~bKnSf*P_#IH098L&p1tfo)?MU%#N90D5%n9xBH8!c#KxSl>x>8#X^ zw=GaRnB`EOKVx9|Z1(n}fC(Hh^`xKoe?xRc_eMlSn|OIlWc0O3p~IFAdpKx0eF?1m z-iTmTb|oG>heY(mLD5de(E>~cqSK6<6}3?fk zYUwgi*LSJtG>lGD8hvYm0(wMkL>mK|u<=NZqR)-g;FMh66kxXu#StCYWM?7GdxjH% zsKY{>-2i7V(dnAf_<1}Bjk^a^10m@HZ_)c zHQUQpA#r#;#K@$3v~mcN9$)iQ%Sk^#Fa)YSUn-}oTm4MMtZzb!8V34jZQW#4y z`$IY^BGDXA)ezz;(rFmM`LVfH3EPnd?aceet&Kp7gNq{|{bO-HUJ z%3rt@vls$F`;b&;)?}d=LvN)fH+*ppKccX*IS=HQMFXadm@PIU(Q`gFRs<7lBVLl& z>T-JF7Xb|-5l;rA8O5zk^-`MLgQsPlNIo7^JU{6&;fQfT4PO)HC;UpUX{UoPD7pH& ztL5#GjgxRu59`40%3^M3{95ybe~gtx?4O$wmSo3;2JoUlIiSuGj`cc*(+tdhl#TNi(E}X$Al%H3}$nr5Xt$MrMn`k1 z#+%#tNg7wTe>wMk@d|epAS|Zff3kNmBz25kTXYjV(f%Ws-3y&@wGQ9mU8Hx7g_@Y$ z@2kN3TSMMgoTocKnIpH?#r}0~LjH~-x|w8d=fJhK2I>}4R*<=`Buh(K@o!=+gDMie z-J)#%{Ns2`s#ZX|(C9dt!_Gdxvt*=Bl-44k`3RdOF#kI)@ivqgd*rf20HY*N*f zr%NsnS1;H*5&tVHYTu4Qa;MG_KZdMNwmm>|ywJ}rW6q}9az6ua7$p6lDDwiw!yGl^ zot5OjRuszRo+!B?uoWj-E2(ps;tH>bE#`13RNSKy-pKL1#zh)6zoRS@VU?&aRyFw4 zCnW&XUy(~wXF>0Y@{-QOPlg_~1Ujo0iMu?SUG$2?^g`N&B06e=88BTxF(bVEALp3} zs%I0&ABo)KI+WQA;;&=^GTQx+_O0QMD_osL&h=k0M2mWh1d~{&+@Ge#F)A1GtiBFG zz+AOn_bB~Zz<~wA7cAO*UGnGXZ)R*&5R}{yMiOUTL)xcz?$6wIKM7HHS>9#Cx_-W| zRdf@w=Sx__c_@fAg5vZ^CIUKe*pn07{KO(@7D+O9==3p6Mi$NmU#|+J;BgSu-EUDQ z8O{vwecs7?o6P6s6nY}pNa}Tkg&z=9WHoz?@uzvci9|Yx!aSETFaA`uzJ)}w@em+W z&AR2cj%v$=z8U8kILrVSCpN6ADAG#~pn)O>PbTlCjw6^PY1@R zW~6c_I^JYqEi!E{eb-b-;w_;cG35wIWs`~|?ke>z{oww`P65m_&tlX@(wY@#I{1aN zpkr}Or|};xbbr`LF}!|XgTR#la0rFkJ3g_cM$MK=HKy?)$`q4-3bPmjX*IoadY&$L z7-w0PkF8fW!PL>}1(V)w)g8(OdyF7B2B4@J+at@p#G+Ky{paUA&tT$rEWhxHbMrAW zif%dz+{wj2r*=B;4o9d-eA!dbhj`MZB0D=XOIr7N+-Ai9$`taGv#d4~{)^8~LCy7U zikc#kVr`z4vbA^~%*Fw%kBMhA+;q4*X?5nvCZE=iuz2QpuU=nwDzQ{TkPK$dUAj># zJ)z{F+B|3Q?(XcjE2}PAwazpDNlQ`U%U3j#$UgjHx;~e-c{=l_81JqUAFE;S0L8?s z0Gp{gj!HIo5rpfdcj>+@Rv3dRV{T2do$j<^M70-cX7hpaj;zX_ZWo;q_DeU0F=ogh zU1U5bl#zYoIjzJ#v)i!m`mz(tc~jon%!Q(Nz)J8lgX)9?`1NYSzrx!O8jGrh*1Bqj z7nxHf`kT{+IK&p(-gHG zcV&+k_v_}m9l`G*%3)DB9wyTjcU(=7zq9*5;Td71kyMj4J8^O+^?77AbDc@5#s5;o zj4f-tI7l)|r9FSys>x;|T`x2GckP`vQO?}Rip0q$rzMuAR}ouyakw>|gfgsLrptXt z_IcyUjMdsxMK>iYAAV|8W3IM%Ua~fSoPF17tYRDRDSTZj%EIBR{fTkftg!d;o6|Fl2)tdY4vk1N1;c0EUMq3*3Bm#u#oRBEGL^2bQ} z$c7Z{5ubrb%KGe1*ZQ)=K&u_WK)PpLeUOFmr7h%oL|v+a%hkr*fYoQaOIlG-4>*kc?prD0?3xl0=eB^D#gFTX{r_UAsaRCu3e;Wb$Fti zSkh?lqU<-sBYwTK{%KX9;VGZf0eb-dKw|Vv7SrZz83|A`Qjm8;rp4Tx+3Sm+qZ=_% zZvUW*N(fTUOzuNuY26X_;&^>a#q5NG5FOV)Lj;e~P+Zvb4GAJ8jIK((GOhCVBQQmO zUEo!Zn-6NhP0r=LwEy$<4E^me?L7X$a8Py&#bw7(pugD{A`3bWcFIbnVA5I?HOpXGI;DMr(p!PTOu~b@5IHZyi2AODwKGq?mr~M3dL6rg-BX4SU|| z!ZHkvN`-ZxodcBw-VT*JYSw@4N*|ZtkjctTU0Hd!y{F^k6cgT6p7he3~u%H zd^VER@$KXcZH&Ci#nRup-9!llU^$}!3yD{WsY#|L!pQxT!2FxlWaFWn0Cz&k;T`fJ z0dT1IO@gWKoo&5!%ZVhK5U=i7t{D-Cwsc;gNPNXf+iFXXGO?ht>0*!_%A`9vjGD(q z#{1Y7>fF)(rgb!OJNS=J3CRmYh#S)t+TFm^hNyaODevslw%4g`%eNy?0nQBP@TpF* zaAHe@g))bF`m;%aIu;Satf9AKjp3U+tAo80h6c%SQ#Ue0gHbq(gZIxqKo!%WrAKl< z_7X7n0o5zhz^ZNXUQO{lKx|tzR)3%Za5MNY(|qlq%s6@sTbK#rgldnM*5-$2XjI_5 z061FN#T-snoc*_5AOi~rQ~|)M_vcanhqJeeYwPQyH-8nZxVyVsaBFd=K=A;@0zr#A zw8h=siWhgcqQTv@1TRi-owV=#KQnVX*Ia~?oOAZx-?i4Wdi8Kv_bf2>j((H4obY|s zM%q?;9Kx#k8pr3u^r$6LlqEb`DTO51>_GVtowap4#x+_gHu_UH0ff-XBLWC|tCBuZ zW8{UW|(jf8+=Ro{Fb?SS7>=4WYnG=JBzEaWys9&)0V=tNk1WOHoFazdcS< z_Jw`Ow#G>n?xO&5CYY&TH*Q=@fc8`{P72G7XLv(RQ;shqhvTkWxwhOysST!r^Mi%$ zyxvsEX|8{FxN^F1q=|EpMw_`M|C*vC=eEm+74sO}4vw=4Klus$AdGTu01dAD9*MRk zEFEV|)tH(M7-CzriG<|t=xgj2E0E#rsMW(I3Hq|BqXnZ;bTxW~gk4@+%H?ki4xdc= z(l!!y831?FAw!Z@v;c7D@DP3g_+D8Z@d#tjZI+@D(^h4jkd)hLkE1bDaFlwA@d1-^ zZ!(FCX3O<}*T*~*nxj_X3*S8X`M^?}YSJia7;@;054){2-$I}%q(Lp4P z>2H7OvUtpy{|a}O45Mv6e8F4?H!gA+1ZGA&$780oW`cSe(Jk7Isf~`SLtr&+i?f{@ zl!|rzboaAxBO9k`@v`&WzL=#%vBui+=r#uTG%S8(ujMASLCoOFT@@6@&Zv7 zw+N?pGQKBra>u5fUo`Q3VIG(8jOrO3$giTj4!U&U!1y^W0lHRcUH6tkR+w zYKZ!2)m@;*eUP&~*^G<#1}Th}I?(_EXV4bCgxh2$Q0F`=;&1SVA`5q@!c*J9$1%G_ zjKt@Pv~wl|-!ri5@-m&+F0}k#R~h$iFx{NBi~OtXifTxo--(SKf&k2FE4*R21BvCc4!lZ=?sO4Tmo!bp~;zJn*qM|Z4tq_<6*53b!n zH{YI)2>e0IVNUx-{DtDQ=nYZ*;X87A&@dfU3MbCR_ck^?RLVMSd&!-q>OzngfYo9ToIXggLp6V3KZ=<+z( z&7IUFI@x9t5NKioya%Q#fW&@JMX$^%Q$yYUv~-rDzd78c_MZtV*KNx3ZEJG;y(m;E z`=_Saox4U?rXA*P;nfQ0Wo|^Xl?q5<hl)TckbBi^3+ypB&GH*$&YaBgz2&YiOp+DdP3hSQ`UmcSF^@53u}^fqNnXrt88 zMngbWo15dA1|9cx8E}y+HrQzCoT4#NZv`{-cx9=`|DiIFncJOSay? zI{wT7pFgLFTQ~rt%0%*Jd6rWzkpNzuZY}hylt2vpeD$8+dfF#d=BiX3)=^up*O(I} zavd&iI6C?)4j4B|edUeYlKp$Y?pfeP|1W>#<>haCMZ(_$kLC{?b`}hi4<6yMyXNP5 zB(1o-y2~wGYJ_AX7fRfM^?YyDM;%bn23U2A zt!==ia3~{**z;5s#%@oMqZna{I^{hDjz*r4=L`Pa3_v`!Jv|RjK2Z{Vabos5>KwuE zKyB)k(NJbW^74D1d((G~8Ga5v?Ukk{`p}gy*TH%oC3sR2$+PoQbv-T(0x$>!jNrdo zn1uD3)}J<~UezGyCXUc=fXw!~m5&7D*6fiKWFwkC4>GyqtDn4;)NlbBPDNoDdwUK5 zUOpzY-?2A)Dt*SvS1!t4fy>6k@&# z7Vo__$+EgoMVBp(0k1FD;dfFlSZ2Bv-_hBu0Qv^k0N>8H0WvGV zSVh_R{GFYr6@i*L+)UdJK$_&6;D2sB4==S90%_@3+w&Tu9&0DzOtGDkE4w07)IH$!@U|G^|R?Oq;oR_;=10j6mvvO;G(6nE5P;h z-QgkJOkv0GxX+Mt3Gc9(ro1V72$tg(LsKOpHplcCn{fPlWqGWoaU?7p2Py^muS=QI z8bG3^aibl3X;DYX$}w3n21BB6gyT-K1)i%fc#LYsTa}`+iBgqZR+EQesNxez&JaPj zT^`HRK5O^B9kPk3?pMIen>}-{wCJ3!f&MnfgR8UI8Kw&^qCDi*FHs`yG@(2m1n;@w zhl{sCIM{fynL>w7hk>6NWDu}jrV=3MsIP#nIPWJb3<4P#@^Qg>9z5}Pa^SHot&bT%#%OY+y!OeTTdZ%#qSKWNXdu%#LIXCMIY z`xWzO+KX{Rd*gQu`hE<PSkwmXHP>YQL@)2&G8^>v|Sg|5Yp zh~W;%Q({6E?#xMucVallj!7J|LtTIKi>q3*q>R+Q|lKZVUJ0; zYW2-3qv=YxxxZv1tO|41J)A+B`CroK4LrMq2C}s$#7IFeXbj~_QQNe{ zxfsP0;!SHel@%1!1d=|r7!H;ytZ+=@YM3?_|Bg3%uL&%$@*Fu$^Vw0>9+!s2ea3 zcymw37X)aj4%@FAk4M6TZx=l>mu-=6 zGMcO9pD9yiq-4vS{unX9%*dQ)=ycPm&#Dr{?W7GH)PAHs|c7OVrDn z0|oPyP-9{N<~%hvD2?>>LWkf`{TjRJGTShecqTJ0J5naZ^5xQ(7t(a3SvFq`B};-> z`5v_{6lXhuF2P=-{~mSYkobSi=YP}LP__TTDgKI%A0JWv$K?5|>4r=EziXQq;TE1A zuECJR?OxkFF?c#XcxLmLeO#TIx$mf0Btdze1RTlGCg&r(L1pP*y;Ln?yUdL#5qZ@V zi>az-w;bTBS5zXVOFztf$oS{LW!Ou&A>_>to)PBJg8+AG`QlL?dKN~e8)}iV-PVwl zcp!-I;nCTX<(Wo5Gt|#XoQ(0}oBG|yGV-#yad%`9zms{8V15LJxAjC4CuopB~~z(W;;h@rqDZ0AL)EXe=t!T$cF%Iy<(OZig$%N_lF6Ek%lF@Pmb*-$7H%6 z8<$wNT3&#Sha!u^sGZObmssgLKTI0uJWjnYR226)R}|krY9j{s&Np7()&sAm1|^0F z_agODJWAWQ^zRqzPXYf|u@GC_Wa}lG2mrs=1dMiC_Kbet6}Nk^8u$&5caCJ~;tGm7 zqe*-zpUNAm;`N~LRnjhy3|k*Xb+d+^wYg_TW%rY6KI$&(Jd;$VIG?M}9b~o&CfQrCXcit(5d`bWH=dfw2Hm?< z3ItnV+aG_IUdwvyqM=nCuXg?Dl?hZ~kdDAbB{0BKK*=C_l*0GA)*ni4o|U-6@2h(s z+us8!|lP=C|jU+V1y%qi|NX#QUD{m4U}*EWEF1N zYZJn?n3aAwjR=+tUL`Zr3SpS_?qH$iAUUnLOjcKAL`pR%rb#jympjIGP6K$0<7Olk zx%IPblY6Avpa?7TPxLVA?ZLd^%rK}z_{v0h=?3x#`}cRx8M^IPWG2{_Ld|}-8S^>6 zo$@g1%vgJ!lYX`78iPU#k=1pkAN}QIGs!Gn<&6JyXa{W`j99Jo%fwi=T;aQT@llQ$ zjGDn)JaXjgWDEcUrW>Qb9U?Y0L0Hbcntb5@bBp}_MqWG7^Oj|&YKgm408?W|R4lv! z$Z*5*{9u5s&7F`$67kTlBmo7*29$4HX3j#@5pK?cWXnA$poEC}OS4sm00v^G(b}ay zztW%s$8KBoOMTC7j^$#$%*IHSmu4Dl8p_)qW*NzibJhz3pV~AvzKD7)+yy?}iMJ*ycoEY1$ z7XwGljG9P%(kocY?E7%Qjb=^5GHjXIHA8u#7#YL~Wct(`T((YRE?!x57-cA$wMG0!3aR;+0IIWGZ5JG8zMtY%U8cS_ ziuN9tr|qAqT7E4^A-WeyZs|qA^PGi|F$jT)S=I{I3_H_3`3}$sU0))APqN&dUQuJ$ zT>$3>CL-F!_7WLYQZ&h68K|HCzF0*|{#qcBnRySYQ#osY7-8u1Uz#n-)QgyFSfk6f zNPZTaU#YXY^z+qsHR#9AC6$#TQ+Jm{=^~Z>a%O11j>b5TrS?ge2)jG3Z$Ao(*`!{O zAn)^u$^G@~X2&hWCR!R~^eCzeRiY^c8edJEbL`E)ksIMOV;aXzZ0S`LY6juRU%xWm z0x_w$m;xsSThf2TA|{~tnxb)2zoOY7eH&W;rtkT~l(0IbC(`*_n-}Tyy}2^Agi`~a zyW}jZj&{-Jftr@5GjI5a4^!4@j_R!tM|kzGHt9elY!BYlwoOO6Fqg<+U7GLq*i0~d z*H%Z~*jU{T%a&7fbqH+6>Q2_r$3WHM!+X)qnpz-AUvTL4yJ%|F*(vB^_dXJw;kPXG ztvU3weQ}f4`}fEuQ(^l%7aNY7t0>VlH2eznaX48okzF)n5xRsa--Yxzw8$mvLr>4n zKC|!EdtfAt7)788D)}&gDaLz3@#0lzl26y6^A&$pzEIJf+O=HipkN$q?D%yEP1Gb) z9uDt``G~PTjzTB~{k{>|+b@iCl9`l}HkWkgXQ+~d4^zx$9#$k~2L(g0ffU9V2o)F!bGh3V|@cOMF|YFM18Ku5jxKGsp& zji7@}n$yf5Fb3c#eOUV$z-1^8?f#hU(C8Z(w0SSv+lb5cn5BEpv>GB*IOO>KVXo!N=q@mm{lWmxZ>h6| zHJCY`Sm=M7xVwP;dE~kK(Y&}kS}p2IWK{gh(0l%ONpbf4^j+SweDIN4k3}3|H8hi( z%=G3qcpHDk$Y&gPV?*n3bRYFIkAV;$4QDS>gJo)$V28A?hG2hsw4D`93Kg_oi(}#< zxoUrHpRU@1VGufdY#QcZ;I&=Rv*@Ve2^-UC0Bo>MhcejY$xjp4(=Yk2sQzo3TTa^9IYI~y@aJ-*MxHMM?s0dFkw61bx)342()9fh8x)BlgDkkV1 zCk;(<4>AxadTw(ia_yJ)S$5QZNd6JJQ0%kr#iB`2Y5I^lP+$5nJ;g75H2F*yN7Hb> z$HD1oU*FAkqkBCdfq1c$ILU8+F#JC;1xY&r*B96(@fZ*0L^E$zS{BRsi9m-QY3lph z*!?H7_7doo@STXV*lT z1P77K84szZh1>0SToWO^&f^ks=c%zmAbDAhBF??|@Cyx0(es^YYJEPT{05fqzO{}9 zY{@xZX{>ROHn>+Y7@K5=$m?s6S2>74#bAQmd5Cb30`7A!PVx8a?$L$YLL$+HW*Kp96OKIz zL4XCeUz`(rR0bi$qXb}kQuT=7!eJOFPVY!bnWo!*YI?Y}1HLPlJg56h+jUk;hiq!r zGLE&`Z-SDieUb_r>ZWpMxEPS+!A1%>m=bxwu_;Nx`fRKtGp~PHneov!$&a`?lTB9G z)>``$;Y6ZlUT+w9YGpsv`s&806BYn+Or=6Vw?50Ejyi<^)Uaz-r4oU67bB7XnVQ#D z1{{${y=}uN z>#7&&xpgxlQERp*8?8JyEeDoy!R{zJ&zln*Z^*62UeM93E?EzHKHH

    &C0xcC34T zR1RlF(nvd6b~pHd-1kH8JZ{i`Bi!o-`wyzztye2O6d8;CCB1328DaEg)AjNWAe%bN z0wrh9JIzjPv&h(5&aQm<#^GCKV9zKqukLEge=@$_8n(9|B8&HC>@K~MDNyL9OthvS zDL3OlcT_(fW%AD3(%|{4B*N*;=47K&!aTc`LfctJRIrg`Oq0ZRNNvErn=WDiZcowl zQJW$jD{pj^Hm@x8m>F!LK>eAdK7A3Piv^#!?wEgJJBG3^ccH@K7hw*}tXmbZkwhns z>qsUNb0SlEuC)HDe0Jpg(1s|JlQPNAdgPJ``~KqNcR|rgdUWUQf*C*ZnmrJY&u59+ zrqvITOb(BVH4aUAco%kZ>)Ikhlv#rng@$RXMI7h?vRGy!zvA^}Zm)W4@eHs6r`Y51 z2%A|&?qZLFWR*Mc)vEi$RmAH579yzu;Dty6vO=P?hz65n%TFIOg0G5ed(+~<9>IE~ z*(TFj=GHC4m&X!0=y@Gi=Vb@yM%=u9M=`=Zcyhm7nJ`*$Y+Hy7W+m#ZZFv`K+yX^ZC%rofl9bkvArX;t?cQr(i4;reV^6>$TjS6>fsZ z=LMxZ*lut9W7ee*xuB86zN?C@9ftqQS*hNJ31NrC?kW`4#_qnO)y2!}_3$LCaPsec zFycHLKsr6UUU7h3lRBI!p7YP9dlQ$@%G3v-rubAJat^dXO?XZKIUutte!xRH##UwO z$r`wEnP#%T{0FS9AH3p7zryB)Lko`?T^S!N`@a!!%~N9!Tb#b;F7&X_x8nT~D&Amc zrcslgc;OZ9;QthOMCfaeTBNIJhjcfOJeUP|NSIS;rFg%V0&1zh0uDRIS&T5VFj%&Xzg( z{R66{hVTZ~^}5h7^h4HxW*IK3RK>m~23MJe-QznKGe2pPbHs?rtB9kl$tX}&qQy^t zQ2`hJqh+DIzsFEU{J#S~p=gbmey^+@aUrX<$qYY6EIXEEg=cKOr5X}RZq!$m4@R{5 zSBrE2oe&PV{(`;iraRiITP@Bu<{k(@QZ8~0=&t|M7BKlK22hMlytdlJt^()MraS<8 z7`=HJ*6OhfQ>J~w@=@)SWh ziIT{q~ zztOJT1rmOUcfr!hdjD-+5?H%k0!9P(W_~uEa$tTr;x&J0cx^P+_+?u*G8VKa20nRG zP+zW3?X^CyNdyrhr5e^@s9d<1FSDyxuFM?VJM&s=XEQen!uw8wS5|_ntNTR&dRc?6 zz5vEzO!JS0@06Q6laiAlHDA^lqO(`V&Ws-yeSF@IwV@Zrox+JnQMyYLk&1lhPc67J z0l;(sE!6vFk;9`)BYTrk#wP-%{I8N*bP0a?z=_oy*NdNW0L#E3VIEb3G^z!lM}RHO z`GBPCu1D7Cu=3}=Putt2N@^Ld=JarU=KLVDVtdO<)X#o zCI4OzZ9+a}mq8;v0|ZxaHuK0S>^993-Xyb7HL+7qGD$~-V~~E&Ml9dK(EXC zB5F%FiC=^o@dR{IT#Nim7VfHtWUu8s81$6Ggon=kPGQ!YewX@=Qkh6KeL`!`fXxYL-}bDI!1k-v~a4;FZ{))tKQ>=de=hMkj!ga^PRF{LM zaAT$Nm1)I(8a8=d66<;*l>;AM&4firC84r zA5&$6@xvfyJ(B1^sX{Vn@Ik>)HZx)RXd;~e{U=OTMHa}74Z$Xut58^rA>m^9C0k&G zVcq#FcWJF;D=A0Zn-=Ar(BM2u#ZW>Uo!?sPjQ1yZk`xxH5>8gG+sJ5nYAC6Q2b}RY zjMilZAD&9i^Gc=PaMxM${qZ~LZO*{RyJE2O>hQM9Re&)!qJ!Bl*v8)<@7XXiGoMRu zERX(SxcjMHgW#Hu{=+}!`qEZEfj@ zZBy|S+7;DriJ+x)MW0`Y^D%64Csh}kZJq|L=p@n*0+kZrC1dIMVt=IpG>?h>`{J2Q zz26@>eHWu{uc=};rPppZ{Ia{OG6BY3T)aR<7$_LT8SJp5Fp8-F-3=G6zb;XU($<7` zb^dJjFp$|3@GnZcaY;r2H>SEshTrg1_*ne$J%$9XxZ#jB2?=yCcd#b?(7p0o7Mkg@ zGfba7kxWqaZlRJk*dw^xSpU_HEi-fu-Wz%0E!T|+<#mBBU?S39>MSg>9A^&fVt0oH1J5kkJ)Nf7T)Rqb@i9aOX ztUr8p-|z{b4F6QvCDBJ>Sg_0{$)Bg7xY)gz7ey@WL)*5c$@i+dEe0;aBHhnZ_J?yZ zqL}(i@>g4bL0|WNuoJ)k{YDY(P%6M0eiU+)Vld*x%JK^9puL}J`-DmGmPFx8j)l!B z#bxDUOuu`1A5nP$&ab7bgoCV=l!NEERfPs@H**5b;V!vGHSyn3#u*x|vZS)^fBG`Z zyzOyeo}X*YC z;Y)eC5=4tk`(gtgnXab-$}zx)ktZpS_t&t}Gg9 zT~Y@Mco`vR%r&xqYuA>t#qypVgmV(U#syo1j0!{D_@)|tTEH#&8+99nHNNAg15f1(ZdHJy=1z8_0k zWkFdE(d70TidRJ(U`r6ni+h{9l6ebik)W;-VvbP;(#mZm;0Av(;s*ccqsBuZPq>Yq z8B_3Ag!;P{j~lmBT|%^I>u`hkMDRow2{jg#a@D zTRx`#E+5#(B@2g?@1q_4zDT@5>;T$I#~wHzKfTHETtDpZbb1w&n5s2uJD+Zva}CP6 zWg7+!(A=beEmUb|yrVXJ7&a^u)r#2Hm8P34(_|T*ZQBM;PiQ43R>h%DZ;liEfJGPb z^*3qa-nUOrjb4Iw*c%tlb}tVH%+Ji`Z6JH+Z?>?In>$ipmYF1o=QM84ixJ5MEJS<+ zm>m)`H7I!E(3dScaGoZi`PUtc8v)OpVdOVTH>hyTWPF<|6~nvzy{3W-DnqE#1kX65mo6Fw!=O;@MyaMQ3K+dIgT5GdcAJP-2> z(HDt53_1FRQ-?G|ZmGEFkcg-F4 zbb3s?GLY`NqRTU&LfUZM_OkArsZbx(DD8ykL>U+DgEh%=opiU#8UoGfW_lP&E?L`o z^DU2)A{4!){lVek)4=MJxUvKz&sEKkDSizz76h!+H*(zNKE67lHsG);hy{_rV$Am4 z7W$lI(Mss;l$ylIZ!!9)N6|&P@o)G*1CNnOggtKAVfp{0ZK<|@J>w0?x5#j-$F(!O z%OJz6n2mHZsKjPCjTNKH_@@EEcZTKgiG@TMmI*w5{$O|=WBqkw0uD1LG(NvtFupiv zWIq5L5H%^xoCJz_+$jIc{{>0L;loek5N;Bc)a{S&oDnZ99r*g*|L z)dP=j;_tyd3;c5DPpCq7N}>26`;5h!m$~QaUB+ySnwno)ju$EJi2lxJnJCcV19v<) zN|BX8imnO6!F;dCwcM~R*)^lFZu2+#_pJmj{cRvbkNkm%+XIAD9bRiGhWmAuLJfG! zH*UYua~(yh+vP`oIB#bHyT%2^%qLjYKU(6jMmHVyz^NyRDl|`gZ5&^Y$I(v^GfiFw zq=4^~Xg(xTvz+nlxrK}7U-l`*`F{>Z?0=yLDFLWcIKSARg6;bl5}3B+E2F{FCX-0c z7N^{B!70Cj=?>BrIf!I@1#RYfjgj;Fap=Djx*>e-x^S6)*YZs9cL~_0^r+(t{(;I$ ztaTE$JsWU+4lFNa~$u> z`Ksrnm}g}tyLyKa8nMVi?3!9qtswS(x6NH&=RW*NDl9)uS1WiRGZKPBy04Vy)$F9c z5i0S1_NQ}i8IDuP0-q_vxBC&Btw!4=1c@GKgCaw+t7Micdmw;E*Z-H&Yg}g}3%{IuI{Og;OeAHg^<aomrecUwTn;W0JSCXN7Fwz;h}MlHra{Z9{6O@r;qf~*holGr)=0D2lZ<`MmvKe! zY%N4`u;tQh3!3=GcJ6ige;7byT7Hi2siAGF&3N)wnb@RzO9C~lQQ4ehAK@peI5hCJ zrQO0Vz^jQNpVK0F7rp^5+rL(&)^F1Ll`faOTY>ga0~lk$u=w^r751?g{(3zc%*jvS zUV=7@c2PW$5)?bF^xLAkn0)bA792}cR_tLOH;kd@nhhW0fb0}OtJAqgYT6Nn`ZHAq zZAz`=sLA1y$PjEjDPC5;lx**?j|CD|)Y@MIE@;;5x8xvmnnDWD+ve09^$0VAKV93m z-~cS*rjdl4-mFf;_UYATy9>rIE!Q{rZkVU?TYD@#*B}4(Q zU8hkOkB24Gf_WTS6SBl~Lj0*t;nt#ICRdRu-%5Qu1yd7)I6?XN<@xYI6`)DVoVIX@ zW_1eqGQ!Eq6L?&8RXkdQvp?6ly-qw7<$3B(L}a;Z8)X04*OkjE(R z2<$ecJw!B`mt{!vs!1yf-p6q+Ul)N}emIYFifPR&EAM>vX1YE7Qw}= zRXu5YBK%DgdC09exAk;;6t?HcRQm;241jdIKi#J=l%pY3bOxeO917rpXoSBh z?)Nw)#0gOEOAoyojd&eLGl4&GlerWZ+nfLyn%osoHc-N4a(g#47Jb2 zx8O$FmoXu_73k*m|6?tV)*Q?EztYEv%m*a8(mBIt>i< zBYiEHL|2e%74MR<|Da*C>}oL9`j)XsTKxo_cxSyke6F}9m)E35=F82aA3uBQ1hhXQ zO~U_`L9`JA)etiWj=huXja4flTTc~bV!={<65908p{Gv!g%Biw-aBO8!5U}%GKrPDA$iai3TgF{6FnyZhwQZOlZM-MvKfX$%@s519*9FE+pOdR9pEo_oKv?v{3ffcBP)#g() z*fy}G<`+C2sAf=m2C_s~5bB=l7v|~QIS4cqdOehox$2bp^)0RfG_#Rd5(T|=d>z+a zp69LicVA_^R?q`gin?9shY+&ZLc-V#DFdYQN*H ze{QNqvcI>x=DJYZKueUA)qYY;_F<*7A`+N6w=bAIZ>-J}yyp96g*~iqJzJ@)7&cWc z&*8LJ^($nlwMMlo+UTxq`YfL;u}nR4FWY8((5wlWH|uwwi-Vuny^xWob~GOWBr)@s zFmu?ErFKK>ZKuxHlK>Lfu0fT}R=M$WC5=U~A@zKFLW`C^Lls#uo5yaNxqB;ccf9`3cjTBq>p~rIV<_SgGCkJ2UhnH?;Vbj2jeSCEuYsYo2+`1 zt%5mWqS^k>p6pd*THd@zKcjE^T+t?;5QL^j&Q@6+&U|BhkI*F`LG&FZoHD*@Z=0lv zqgCOKTU~o1P5CI;UeB~Pp5K9m(aeAzd@#Ol!lpK9CNfXjb+6*tb)r$Jr@T+8OQLsv zbH_T}9yvAyAHWgJoa{WhlxQTi`t8*F`DveNCt+W%5QK~*c^IdcMS>hZ@t|-k5hcT< z#2*V75Q@mKoLYm|DG3XuYTg0B#zDn7e!;~uaD&6ihqeZ6Xpb_GE?m4Zq})QQ>YWdJ zW5;bK<9sLErc#U{hAFzXD*Cu;mA%S-HByB*7)qwMZIH4|Id8HkgKILx5vn_pY|%Tk z*A$1mroF3OB{zeKI&Jsa%*Y?c$3CXx_fx*5k_Hm4P_TSgaNvwq$>4KRB!;e#^Dvu zKc=L^k z`r4(RH#TO%SA7|CxxHJztQXQs4kp0G(wpg4mM3J zHtbbb7V%D9vdHPR{PnJgk{c(7Ec!!Ja<_5E*h7w1?yuC|z}0tDZc&u@P74g)J9lI% z_)i&bneqi|Aek8!a-63`ThP-8@Jv$;-N!YoSrJ5n=dyEn6`(|G!pM}$pFYxL- ztWS__xw^D`Md|O3S?%@TX+H5Z85hB6j>uHOl@|x<+JhLllQBmPe?C~qYWnC}-Wjs+ zZaQ~@!A&ndv`s9=jnhx&$=*hnn8kaT>RwS%M%+4OzdMw*q#5YOWoKbur?GwMmF1wc z@Ix|6c$V{?-V>Ezdx^iTC4XgXI2ga=(SqH_eE|7f6_=O-bofIX&$E-kj5EAF(1(I# zEvU#r+wzf5B+kjF{_2@XU9Dy3h&bT<+AE6Ek4^d6X@@zjiU^^rTsmJSWQj74jgAF4 z__4?-B*L_q9*Uf!lEE3S-ZtPdZ}4l!En;FzP;@?H+yXXblB1Ql$#!VK-+j80Jc@Ot zQY+Zsof7!pP48X{4w|2C`V%g)0GYYwY3cU4R~lJ=nMR|m;h&`2WJv@k=$s2_u_^@= zs^G6p+591rUsQ_y9c>mw6fB$aU!C`SjF4IReih4?HtEf{X~g z@LtmSS6l;)Ga=32o(5OUQFB48O`toTGGk&E_XC;iWmX|#{O%ULETX-YuNX+Uq0VHV zO|E!8;e6k4(IN9{%XELDB7JE5F&NPx?F(%&t2fb<0{k`Yg~7`sw`4PN1Tk#-ti4`< zB&YYZdRc7Gx*0MeYY((6bW-czcvs{%OWlf>Acs2l4rsq4#iM2uznIeMOl!$IGpeNT zoJAtk`{r`3L5@IGM$vK6y`~9usGojlMRBu5;FGXV)B7-M`mn@39oXWPYD8=741X;8 z#H`5oN4ZysF_ixlWO9snyK^}D82Sl{rac`vPno%#u*;bQ8jSP!9+Y`PK2LEfP|9^- zi_>&99|9`$&`pmxQ#y!GWSNS!zDoWA82ZY=htR~D8u|;Neu$~b3aOa-_2C>h;Jy^j zIMa64FQA*Lf0xoymrIT+;un2Gf}1M|pnxXzHLDG&R;k+K_l#$JA+ zpFn10tX{35rvtJ)FP>H%%jqr9f-<4Of5-@Ji0$arn|tOXsgQ@t4r0&8?8m4jeK=A@1G&MH+2A-5 z=0ieFUUy2jjn#qe&b57Dn*^z81zqupC8%&2z&V)}6bJ4jWrLEn4tAofop~3cNyR{% zrNk3UK~C_^X*eUvKZVCT_*ETkDtVUkRHvV-ez^)2+j`)T?EsslI~NJpfmtYij-H0S zljDkfy4Ve`@BGH^dMxDC+&+Y{{Qfcos~Jn)wo?V?SHdxi-KtX-#M7dp?t1AuK?U`V})s+}^U(;t2z)cz5tR4LJ1 z$^Wj=lBR)4>U&pjiERZbQl0O*H;J9DBg-yix$HHz6+l(we)B_fN z!^WS3PJnaLcM>{4RnT(7C<9(I#V9iqoo3teb{i8049&!Wn*v9XCUPO1=s(r{XjZc9 zFQJdlZH7PtfmmjAiTt@;Y5UYmV7fqHjh4T~@6DjuGSR3YB}~VIdx7(Tz z&=}{^7kNaj7rZKWr)jUYq&7q~(qdhjFYB43tL)Tdm^@fMwmboTKEXw>H-b!Wzi*Gw zm0#|z?ZG})zVKs+#{-JN)0xBE+KtQ#2YYpz*7jTrduIKb9`Lc+_4YUc5+Yj%X_{UPzGirX-O*j+?<*z2IpgljoDJ1}pov}(5$SiT$ zfA;F#g%dv$<`CmjenNP1x~Sl_B4ENLkpe{gcJbc}%&&mqNv>+W?0rDhVn~>Yi`7~h zr9tIRFn^IAd&iTSDgGK!b0z7U5%CFLdduo(Py*V z3cX>FBhhuQt#vjC@0bau=T?voi@}K*HI;gBxNUIZcBqNu%Qz)m{Lp?^zK>tnWm8W zlRuSn^jqhJ_~5(oSL2vNa*e>dJ3+Zueiho`-`TA%5*8M2FINXK;LQ@>c!PfU$&I|q zSfXhi1t-83?F(KA5x}}m|JC&t0vOGl8L)homxsHyc;Fqmq0No;nCAckY8Y^(QRvyFY7? zJJ|#EB<}v(f+rIx<;kluT?~DraD|0V?RNRAP2D%>A9u@eoGYunXrFVLTGQuho3)=M`(Agshyu!{^H3 zoXimJbaEoo@h`TXNY=hj7@ilqyTv_0gD_2#&T-?IY=dzpIP)^&`p4mGeXpml#t@70 zhy=$tDyRi3?FC-(y4qSQ1xKMC5a?@|I$$BoBe1I6S5kv!Lv>&8p-B?6GN{t4DBPY* zxDl+WN5a16H;3ThkSRA~T}F z=#9#->WE$ZPcgHjH?2W_is{FuDp<<>ClY2`!H*3eh}f9nPt%mKLI31EUx`lPJFU`B z1&Udq+5L{Fgj{Z-9U9cI&D06@A4(&^pEz`)huIC(EeCvdZ!t`tf}Md_Jh4QMq5bT^ z)wVEC4!V}=bX;z|@fz?i-Ceci(OliOatPN7f1b3-LV!hD=k!E>bA{fa)G>o zhix(~242JDrt;VavRMAUe6%EUxqfq{pGtt=hNJY=&4wLMD2xY&Wt8^C9|Ut5Xc518 zVVzO-QE@D5*wV=un!ikX)tBoeDdMw!Ec7EKK@(Aa-%gRyOjW0ADjz8}T-(^ITYLZ3 zQd(4Lvtf~=+N@7{Hwp;(rYn?kC)9{R26;ru5Q^XL`=bhlW@230uSLzzTstwsJ2hLQ zOwYeR-7+@Uo2c>c;a{ty4P-t?ERvhheyC*HZXVh>PB_qRq2VjjDFiMhU#2w%X!dOE zpb>)d5kk%hK0HH3uPBCDUa0KTH2N&n>5xv%B}YDt0-XY3G@Z(_V%iXkYvt6Q)$Wl+ zT;@MET;RRQe!G#hH80T&2L@~g=+!eX+CM1(2QCE!n#l8`w7C9OO^EO>=-MVSXi^FN zjwL@ekC>13wk#oW_EJn^n+V7_4rtoPoS4;;&BqV%IGtRNFsr|0Ukq{)F?1q3e-h_K zHc2Xj4&@A-?xeB2T{ppwXVQVnYKG`&dP7+GiCn+!PI zjFrc%v+Nx1F`~<-;qA}asiK?7488o4Kx5iZw`KgeasFksnIhbwCa0fc;Z!NclGsMo zF)qa~(k;_%e6Sh&z@mJV*`J$d$uUec6LW`J2hAlM^}n=`J>HhjYO-t~KE{8MlWf5M z7jyXkCsIQbTlaQw>D4ywH9wnwt{5+<_De!|uc@+sxWu6^Jh^nRX)dM#*C}p5?`|y> zCZuL>x>7=*FRz8l0{b`TK_wn%NwTGDfkRA|C4=|6=mDANQhoZRn*HDY&KaH${|=T@ zxkwVY^eSupmt`BPM2A#Dv=V|Oa&Q*|=dcH|>b!M%KVx`TLa;6tcfIkixad(h>fEPA z=Q%|N)81w@9_M7N=-zsy-dlII@x|@lRa%M_hhoK{xD&Lv zhvM$;?$+Y&8mxG63+@tJibHSCa^!{89SMe4!FMS<8pG2qf%n1}FA;7GOHN`}oJIQ1t<8RVj zeS5~B7L!OPW~w6oKl^e2(v@}$EV8Kc7sP59l7A+Nq)k`9zWT!1H#e8UqGe|VXBlGNVQ_;SLRh_ja&eOa05^Nk*iPy1Z?Ve(3z47_7GEvV~X9pKtw zwEK1po&9TLXxAvR)#N+DIK84`0(H0LNTtMOOE(NhX92p9*}^zCOz$suf6WgyVcF4C za-p>f;IJQ*xs`|dMjZ&Z95%vFo-VsAzLe>95uS(^#FtUAFa#xyq}1?bqRwOAqrGV- zDsrxSBkq<+--P<=b>+`eu1#3CPuD;A5RD~kJ7Qs~?00`il}>~egZ~y5uE9MJi0PpT zMi&|!@bLON?z6&)RE`l|hKfEysod2QnTsWRE*>wwUkBo>nB-4n~wOZn++d9E35^)LkZ!{N8`eZmfUY*8VY($t8W#5N1Q<)v-`2 z2+i|y(bnU-m*e)3Si~JJH{k~Qr}1h(s!{O~SAN9T1oQmhZ|?=};!bL|Hy*4{PK}O9 zXjUKayeg>;>_HPDBs)tZ!OG9;)HQyf1d{frNbQBy?YY?lbw^nVM@{Ytx1GOB2Qrpw zH-$nwoXSJb9D=@gtR%_1Vkz%m_bzO|jncx)YQaN6QiizMqm}H8NVSjat!=)E`onVg zPDqMsBwE?lj-Xp~)p~2}0kh-rl9uUZKDETh4Z{E&Z#|1i0#1+G1WhoX6g{TWQLlPm z;bSjGnv9vS4faJLKNnKifJTfpMB%il<_RJ2c!LSTgeUYHM)Gv$!6GAA-9B7BXVp(& zMC{B@CYU|jSftW)+NbWTFB?~l`4bK&96wRd{{cW?C~POUJ?84L?#=`hKzEo7{pRC} zNo%c6Eid>e znRW6>;j5R@JyHAM`v9>Fwi;QDB$a<2*}OtHI^h~y8b$_YEhb}L$le*-YKK=Pj7kn zJ8(d|FVEe7Oj8}hhWFGoq3pqccGX;Anm+Mec-OnR?TM_iRW<6IJO-U%YlVn4{ThIz z)ZYCANA%M=_9WkWiu~R50d)<>s^m`^u4Wh63Z*c;4$IzoD;%;*)5Baw@jQ)QAQ|Tk zabaS)bb@zgs_WdZ6`X-WRY0*)GxAJwpFXpOlmoO{^Dvi)wU0feux*v5?@+zFN-ryC z;qc-x{PT9Spu~u!pa8ua)R z_Re{Q0{iuSTGlX=Js-YeH}G>yGa@A9$SlW?-U8KuCD}ydAEYqn6s}~bzKCV#((GPO zbeG*hP`W5>xC4LZZ9c->pw(kUQk}|+w!kqo1jm9J)3$Xq&kqO~)IS$ecduih9#h;8 z5#vmIM&r~*S8w*2Ff#3tQZ%C)p{;I+OMjz9W=% z@Q1E+{X(pBKY&BqPukSnp$8(4NyGz7yu$IvV@3VrF2zbdd<3$nafKRNMqSo522y^X z?aeDRmECVdd~MW!ItI8o@-d?)sD!#WlHKpNXrmyLv-2o?Y-kREo2p6S5UACjm|(l4 zg8pPALT5+7 zt%5kaH{rEOoNW9=Bs3*AP5C9_(@~&S>gf!nF7ROM>8Skv0ACbVN)UV@mF~R*T;a{E z5wy-}enb)+%^~&K)m{lf$P;HaUU~(>rv2sCvog|b(uu{4&_T%XN6QS~41Jr~bcBM; zY&;ZuvNg=W!#6iD_IHf$U0TY$HZ_gviU3x;E!Yt2>Mf}@@XYT?FXG>ria$x;&)$$f zD1nmd&6~u1WHF}f5VzfDJG&`)X*Ty$z&Xx=Rk3%_9i6%(oV$1~Ax$VPze!XO7Cb-E zpRuzW4jB2e6wtm5QYn@-i(3HU55(}4py5C-h|=a-5(k(P<|+`k8CM|*9JqW z#*_8uyUgEg$yorDg3RSxR9ab%^~JdK!rQddiyP!bn@w^}bI0wBohQ(C8*eE>$SNE? zJh;L=lZ;P~7qwF~iZrW5vyDu*D|flA8D+>(D1sUDH%k{Rrab_|JzE08L*>+|y4z;n zRxZYmDCs*ur?Ko}wRXYHx07JUP7Y4jO0lU&lf46`t%nU7D2|=x z9}75S~Pm1o#(Mdwc+ z(sv%$(tb@23%!t8y+_pllx#14|K57I!>!e3(rnybUoxDWlhuE~{q6ePBY-#eBX)?5 zA?(cECd^>G8s7S^PKrKFSUs6U2lip&;sZrRDHP5I=bO5_1_f^0?_Q&ruEHdLo4=gu z5T?&Xy#nq?hkeQ2JUH4 znm1xw<6c3_7B9c+vIF26_JnqDCXL-iDAnk5nSS8?yC^chNGG_0Ev;zVjqNYo9UAtD znw2VyBB6DvHSV=uO1@5n$%vp^bf!&Ko_oWcEMHxr@FtU_qqVMfPK5 z0{>fAVZm#wui$xZYys^y;{8x0?%l{PaNgU33-91Lw(--+3zG98wyWKamoI8WuGTlt zop26LrK6<@b%}?^*+wnX`C)10+4;pd+>Vl+;J535`abRJI-VKsz2fOMm-}YZjt8vR z?T+4y-}3~S`l~J@#0G-pmh_iM=g-+Tb?ea;^0?p&j$OM#VsZrI8p&Q~5{|g@sUc6h z2HpwTdm2pvYNk-Iu4i9_9+ckbxESlu7O=g9fB>VB8jW#MtQcczz27h8V;Z{FscT1u z+DMpju7UN;E;=ohefuMJbiE>QKg|}caow4(PsI&3X!la5+pFKydWiZ+hZ*VlZL4IV zzdWnApc#!10zBs?ZZ_ZC&VqX5@put)7Sj|iFx#Knzfq<~!McYK_%e&Ak8rc8fZ9Ld zukj>&v6F68w!bElsrHTSP?**29|@Yj_ZwqH85s~krAWGvoAz{c9DI5_lE|wFa$`PD zQDmo|4$*LweHdd@9(;MPD=#=I!{ps5qg%JvwuzAfH?8;Tkvp5Im3Uv1+PU)&4>NUi z(%H2}sVy&z2w=QnnkP zPN_T>%(QqIO%Zu5Z<91+pqf?j6h#$(g8vRSNYQkc}tE`8R?#BIYz=18>H@0{1E z7x=8cuu(;uE!{4RXf?+~NO3w-v6+${nPM+jt$hp^6#Gg%O8R2ZFWt-~@7knmYH$PU049Mp}3)V)x`UPw7Fpz(-Z z&Bz5#eyq0L%eZth4aH0kpZ{&x`X7NNhq>ni;N=8}y z%e#hT{|jsQ{_$s5IQeMMluZxWmQaPIn;i%L(RQ~1r-A36aufu(W*5`u&$&n?dy%#V z1Adz}`j5j4eNWpsT}P^%M2ro0noQ*kM~zKmBvmz<2{+uS=j}JnU)s|n5&5_1W-K67 zW>>M>z~n1UG>%F%F%&cMM8NyTnCVEOXs9+D7LL<_9~_|FjtKj*9?BHk2|XAp}<4~-=+&qSre zv7vXsd7%C84}LtN!GYUhLXyRUfrAv!Pi;qV2kz?fvs)Z1{Ru@ni)Lw@PckM?(E26PhqxR$ z{AK*}&b(cF$h#O<;7i>t{DHsF!~0FVz^eH&^|B45OSgKhE!T)!$5F?J)!wh|oeZjF zs3Ef{#Jw*jx-Uvb$=megoYorCQ}=cyMH6L^Un;$Ws}XO}C0y|(HqcJm#*LBZtDvF} z>d)JgWsq92(majO)9kRI3B!I<>>~@`Y0p(bdB2V)ld>=$Yn*aqjg!3F7fcT!N;8C^ zTh!(lxvT^~946NG(HLU5QhFm>>|cF{qFoddLZa@M+;BWNpM|u5bJY8_-lP3Hgv3lH zc!*Ux32 zEE|zv)*&}SE0MC^!QuCS%cRvP7KKh9=0(L=2!~r%3OUqD?mo z>eBRPy@?CFL0K)%e4L*t#FY>F&ws8)*uh`X)qiC*iGf&nfxjuO3*cKI6t^;hEHh&~ z;FK~%&Wq4v+1!4IDd0j~!~Ml(F>i1ZZq`G#QK_$2q20UU0hDqUCc7ztlAp59gOCzR z?|k8K>fdgUJ#Gyo_%WxTk=KMeRq-}f(T)OLg*IN7NC>r(eU}>eru(aTP<{b6=80E&gf+nBh zD{Fj&>=`F5yQ`7C3=h4DWL1Zp5+uOLeDi87xtYSyrTUmkCQ+Lt^?^F>PBA4;tqZ@8 zAf05Mqev=2T%k?N>NBhBW#fE*~zVRqs;yxmC^!vZ26k^cy`HC=8LWO z0rRjXrycxNw+>lHYkl!FR>>688(XU6GT;TqTlIK~l<>GpdqxIxxy`xN?$S%b*=(da zoT1q58?X;TZuwSKXk>M#W>zlHkpm)ob)I#m(T=ZdKI=DLs{@2hMkXz5`L*@rv{9MD+n0Hk)2OSW}duM_`!5;`+GmX%?<$qwQR1bMv4)t#K^`vpILd ze_O-AT9D%&U$wEtgWC|(cT=2;ynx?#C0oi>z$2;`KA*6&60o|QD=$VrpziDtKKd5A z@ubQjo;l^Qp@n)dK!}8v@vv8&Mq3_|Z3Z8R{@FYFqi-=DS|;hAzgy~6;FFP3l24@+ zBqENJSlo$y>!4?=_oyHC(;+l7Y54~x`01cF8n_q4?U2M~6*Add`thk@WuuJIhf?59 zLSuONVmn>qN1fp5xlf-6W7_$pu1FVsHh;LycPm zmQ*zb&ST<6rj#U(goTFZl;%P%+E<^m{7B}rvVvO&{`TJey2f}YAW3&vdO9E2+-s#gFmk#Ee1XNsZh7(aL;A-+K(GWL!ya+Kl^f=e>>5o!85;U6&^P| zm?b?K^^}3H6N*6|!)jzKk&I#|dS=mp7&Wu$uCMJT-gGFOidhA%XTA(sm9CxD6NZky zRJL9G94i^Rcbl$`q}E4D(sv&bKj+W=co(-~^(SZUhcMC} z%B0sxTl?O4!%6zP0M;I^Rn3=zmo%q2Pn@l`n>M#>pKHL5+gQs<+eXo(Svc&|A{~_` zh>32zvXbkl)(l*{I%ARa@~x6OTdmIL>F&}sl*tz}BwP?lCD#Lc6B)|-vSpMpS;y7( z4CD6USDl5Y$j*}^Gbg>^>JI&MeTP>P$<;T2-GfJ`?f57fg=p3h{*L z^3u51I9O8Zfw5bwB`zt6U-vS9kqNZFQ@yvLo-;j7f&@me;n>yH)kEQ*o5rjRdH-y3^;U zsOWW7)$btASmpbho7^UKCXiF@1uZ?00($XzR&J%o`37IrS{uT-DKNh@N=*;Q_J2dv z-21A=w!Cn7ezdHiBXFvXoSuVy<8nppk-3$CL!bn*Q_jm`xk|o74ylM&RLp(bShp+V zi9ef@oY*2%YU^EhPppd$)%4|l9UZbw*f*~W9ma^L_P*(oV7Fa~Zc=kPZE`~9Ep_$Q zZg_n~;4RH{Kz?{LfbCZhS2^WqX;w92{lRPloMC#Wy+OWv&ZFv9DU~N4^+)GIq@8PZ z#I|zZf-fl-0An_N*&UgbqLS5X3T0~6s#+JqTgL}r9YAt9xn+WO1lRTpX)ph1M933x zoKi{(*0&qV;_OSZ1^`%}=@qD$@d9DtoZijJ3_%MTt zdU*<}Df;zHMbMm7zo3{LrYf-8G{wW^6Ih8}n~i2TK30AsMcLlMF)lKAg3jMeNl=Wh z*ubo4;- zw^4^6n0P*1VU%%%xIWmY8l%~f(8H}-OCYO)#78u*FKVyFhzJvk*8g}=Y>hlbUN?|d z>y%R4_+XDS^72cbAhq_gOt88)VgHOxT+eSz&BaP_b2H0(&W`KmympWxwsl#mxOU%-P1Ph;? zZ_qwi$VUzGOB-P$T!zw|05Ch8m2pL9loG1l}s!lnEtoTlKLyr+Q z&`3tyRGI^S#&`7h*D?}QQ)~RlQ7|JuAJk-#b_4aIK5tfI0aK?P);UWYB?&bBNw+$W zylq8T_9=CeHmhPrBTEObQ8U_aCla%#=N3me z&Y=3wn{8w7ir!;-8qjI=M;hnHVY4ypu()k;n}X;~k9*$bDvJHsHaB_P$ptX+hCIg0 z8a@JR_q5*j!5L#b>DY&$zZnRe?TtYZ=HCJ$I~UyvNomdw^8!sMV-K*uz->0HKpc`2Oc@k zm|lC6uMSO3lh2NHS&+;GAn=!9^ubQG^|ZSHZBwwwwR!c>%1Ps!VOs*eP zIA_;u8m=UNNb_A<HIb1iA=O2mam2~G zUs`?W5)`H*jZ+i%>QjsNRWUdvt2oF2g=FZo!GexiZD{J{3HGy^BDUt$| zqpipoUPfR&At9GP3+9gGLn0@~%EyQ^r_}Awa?YLju9a!P2ivz*sVq^0m<7NasMDfg zwDL|AG9hbZj$mZ6J6E4^AAS9b4Ec6FidE5N&su5SQlt!N8}msvUzo&M|L-tUzt&26 zqp~gu=Ux6}lEU%6CFd_}X5$7S(_XP7f>XjIj%E#rNH7f+yJyM!8xqmsYndht8XHV5 zMngF11W7zW5imPH*2*|Trrf$$Wvtwj zUtVaaj%gh4i2|AXhWL4RV77z`(_F1h%s#hT=zsUAMauX%MIV|o-{nu`w+H$C9@hcq zE*0ZE0{N>QbMGZ{|7DKKyEI(&b2&Os7fv%H^RRjM^r&)ABUbab{dJIJL!0g8tmRFF zaJ+-wk&CRQbL6ihwgQWy>@y9n5GEcu)G1ZDmpXGs8Xz@vE*j-Xx8HnIr=o?g^I+au z_oP0dbcH1`0=HWSSZ%ZRFw%h3&A^4Qn!tun#n}Nk#_JCNBX53H97|Q4`i+)QzuH$< zCL5^930XLMcQ^QT&n;~@WQS$oH|>;L0jvVO~s5K&3Qz2cnt=+b`ws0Y9iRf2zQ;iJs} zYCU(a(3TBxskmcPp0CT)7DYI;qEfRrcz830l6T|K2wv!{B~hSmIrU7CslE;h>cbKMaxJVO{|Ga+z*u-=l636+}Ck{VOjg1)*b0|jW{-m=tV=OyT=VQqN$i&@&a zqwozaJc)xyn*C+nJoj!d1IEu{Vr&}mXUY+?_F`~~QgX-jel7zhiawfFY;X1&vt=6c z{ax&@E}3pKWOWy!kU+@|TlL8+4)iiI*5nn*LhhG_(oZV6O{_&t*EF;IW2F51uS&&! zUYWQ1BQ<-+Uzjiht9SOHIqY!1mPA5+qOZ!Cm+uS+vfZ zSx+iFu)#4Y+Hq0XZ`x=|hHX5YlLj-;g2EU?BF@{6c3GDoU>lasN{Dq3WNj-)!9I+b_Ya`4{|>`%=d`~AX+bP#9_WnuCe z&ZRSO&rea(#Q|EM>dNY}^?KilF%GV&Bz_U<3MzIsCli=lybk{>jUaBvCzJaT++fg} zJm)_0!KSOej5|0nFmJ@Og{ZI=)rkl3+-Zu2zD?D@jhC)oVmq#&rI$wpeUu-9i*8{o zsN0{~Y=p;k$9&W4r^|efToVz!&fk&U;iD!yI&iuv`7iT4U-Juy(M^^xV@38e? z*9}(TUwJOKBY64Vl6^QhmZ)CF5hivqKHN*42JYQVbo?;M5K~S6X-BZ|zAL+nTnU z?|pSx=tQcrj>)q3@l1~U{Q~S*9qsDN{eG1JU5yEiO^2HUiL>mU7nsnBt1jwqnH$|? zpIH5+d>aFwPacCjGwIV@gs8MUW*k%NyyvO!%EAS4<#*V%vM(XDd4Xi*&tT7~=)n{z zoka2+-Vf*3>6+O&5J-BfiqYo?BBjuBjL{SGTtGl?D%)Y&U+s;20UPVqvx>+B@2~`{ zB1+_vJG7^6NW$%;Ie+H5m-i(Xaf!MD%`<qyhiIJUG5 zAgcAvR_yS=h3QCBepR@6$bd;tw32?8P!vKncwkUBV~rG`-V6gKycRej+ewzqyQ9lf zciHAiSte{cS?kRF09?9=qRi`!laVQkFh3st5+f_jS~oNI-P_KtQ&RNev4;#KhPN-~ zw2w%?YNtjDG9s69RhKQAqhhgZc`M*Kks)J??rvi}S^{`tZu|CTUn3V_DtHham8V05 zS>GtoxpGE)!=6sue8J2dJ$*ScM4$EWOQv)!0Lux5RWrHh57yc9v9V7O3Rw>b$m&@|-3=WqNk)@h zUyD9BdwQW5a6>uJqhz>IgveQA#oprcK(Dt5@N;fWMAo zfjMK#7*(~Ge<;i*Zbt0l)3sQB{83xH0S6VUZ^=i7xJb>+XPJqz<&U>Ft|Qv+{%k01Y?`zxKX*Lt{w$4l!KJw$}sB%728ab;!dOMZut z5y}pITd(xBC!bxO2l@v>V@_%^9+pGa2 zHlg~l)sPiNuBPAGndScJGPentiIIWDY?AlMFJY<-B1{#e=r>pPf%!WoTBToa2#2LY z5l~0qdF`b20UAN}EwT!WB|#k~a$83UzH=r2VE6v3Vqoi|@u#69jVUni6oSp#4`U3C zW4gULE0lVs31Lt(uMgdhvqh>j?D zX7-}Ci|>z#LPDL!6I>BTM|KB;*NwV7L&ZTlclWhW=gg)A@^+K0{6O^G^|2=(r|Rc* zqS-%29k%rZS>+8mC$tY~gCvO30R9OMOTT`0_ zDfvE7|4eMpieweG%Zg-Le=_)~2#ai(PRz*!=%fyZQr~k|Z#$c0IHxtmUeDp22(-YwDF=s035tiaN6DYe3@t-o}qR=6;0Z}u;*SxdWUnrTpi{4Oq$ z_j-phfsQVV6g>6X;hFLX0F#O(O=>>^aQCI>8}y{2ig|Epi=%5CV&3Y0kMtavnr<}a zif%M`grDMVt8W1y7`!!<1lyAkeWZvxcjpg4`NHg)MWhBUL+U;CHmgV8{WXE+G*3(} zT-_OMlI>=u_>%o?k}Vvpy?|s*G?5Z*ht>&gQ1&a`s!R_J&aghy2=Xfxy*MEOq=?@p znUozt`l5TEZdAxC zwXmGMvI&y;H{|vNzu)Ray>>>frA|?z;sG_%5^OpqsictCt&y` zrr9<0Y!xTLq^n;RlVHTd^8}ePs!M=mu_41Rn;;tanHU=`ElmD_RgzB z>*|BAwY=b*<=$*{*k`5yPpam8pOHU{@x(efwJI%@m&N7kz3QkQXd~6yRX<(ZV6_(^ zO!%bR%~;>+e#Fab8os)of*Js7sWV4aSireNmr!OvWSkc=}FLwI)^b-f{aMFp-oOGRs(2A;*v#W)}zWR(q@6tt+Kmj}bD%qJ_p@CZorG+bTb<>R zM>hhtc^GF(f-qv0-k3j=<=_05Z#XspNS%xszzM$b2Q;9-UfG$&12wzbRhx+f`_jX90_@>M>fEmm0yRY@eG~8x`eF6L)YrsvBJFy%%c&ZL1###%sK|+iA1;A_OyDI#7wT&T^c4 z6)uC{&SwIKgKCQaCMN?7dJHNw3FnCfhZ?5B{Zux4kINtH0b-vsR78c^FFzC`Qe+U1 zQS|UkKbd|bA1{cF*N{BUY&uMz4Uf*Gny^v(Y#RraB$jBDrBUU2iS@w9hF~SwN$Heqi<~@3!R~1JWFceL`iR((!q0Vz;D@yX z3KJf$xC=E~duT4&6pmfzxg$4VeN4N>70WdzBGQdyLVjc0nImvusDz z`_mqe3;9|$($O|myL*P-7)?O3IU~@sU%Nc`o;X}X^ca!{-v}ajZ3DeFaI~{|f5w#y(8C;ceVngC zq7vujPNOoUT}D}qyE1roqej%1Idt- zB5!Bb6U}j5DM^BTAWUZoL%foxU3Z9nt}6=?GciU0thF{X*b$6D&KpTIOyVe3^kh43 zUiwx`95+|oJIIOvhg3InTFlQ+uge@{$VHhzb(fLZ%)VCyWijr%K?ZOtK`0DUedZpO z?c#05q~hnANtzfy=VZH{f{5QrN>C+U-5n8zR zyVSP*Z(Qfnk|-Ty!Y?RaT5}hsBi*1;{kQ4Y^gIVa5saYU1P7^?`wjHm>pea2rV2C~ zxvP511|yt-ryrKHA4peTINb=z?wgM?K1tVxzS!MMXV52cPplB8k+)y34V}kbCf2l_ zb|ZNTdb4=b9%%pV|C=B&hHVKLl}No>X-H+_hTLtjqQd}N*vS{>R$P6)YS|4BM>_`6 zINKU20Mk4Es4Zj_$KAAi&jbTBlk@Gfm)>;5@#Vuyq7;?K*_aHUWG zp-h*%nI#v8>OB9$6Kbkf_EyGxW+lokXuusDaWti=Hc#!%V}c?nrqYlO_-)mWx&q$Hn8(p}xgg^D; zIf2K|J#`0oDy6*1d2>$8x?Woux2rP)GM_C%v)KAgCl7f6$wEP2PJ=I%5Kz3%i`Vr>9?*=FWIidFWNB+z z_T7FFp=@W9a$4$~G{CM_L#J-TZ-ITuVr?6blOl5nsm7lz*;ql_yU_jnY-3aC2*M73 zA%{))2I7GhV`Zdu1IxwgYqtY+g_6s7Zz^w=O=HYQv ziyaNAudiqyWn5yiw5RMV;$z#!#>S5V?suYbUw4MFsuiB77Y{RxH+r^OVuVA1!(<{4 z^jc%tS+bUqf?4hBfslf*?{Pf9D6)a!w`gi=+B!P+E;qfD%+bA<6!CdIh-au|-zXED zs{z#1QQ&-YVg9GEP+zAoW$jrArJrwKzboRS9aSwYe2ll_~ zr%H%t@YkqSI+Th+`MOoj#(1pTh|n*CUwfI$%0P-NNL$omnxLvWF3}i5p*(CcJ4E|D zDurQi5R;uwXPeZ>?X^xoDB|tfuFI!#Cx-b$1HhAk>)nYwTrAt6nCpk)Sm9a=1b(AE ziwpF8|2Zv{(eTGmQUXxilh8o-IZ%Q!KL3u1Jgo5*n)i~9Jx)5GkH|-)Q)V6v17kCX!G zJL$XSB`}X$A2qY^zHmCb@=Tp89J|2L3Kvf3R^lxT+O`PuQkF}%uURNEjUC5x3% z9ESopR(T%Yg>wUEvza=u-k?SrZ*C!63T8-|8={KIJ8na6@ErnW_&y+r?ry>boa3X? z6pVcD1S`MhD%D;(&NGczI$&sh4qv&S7KO~z13##z_S!84D0 zGIYI8#R7ZeRwh~fR-}=0d!vwhCm(PPcWZo#_%u*??YZ>{JSI16LN8pTM>~6MMHfhk zm6EKaswr&YKpF&rU~O5EiHM5%q8AhtBqk*x)^y~5@92I^{P7t~P;u^jz8o*y##}aE ziPA`>jugJ#3RS`u&9E3h9cB0}Ii^t}SoAwn&kLuF%KDQtRx-|>+7&x`B5nW97EDQ< ziqpa_r{qzVE~Emiz9B9X@Q22%Fm%?RtVz{l+hdy-D#PYTcVo4+YZppiq&=kRAa|EV z#drRRHu>byG9g2Py8hrsjjr_LzUe(B z))0$)$5rL0V%#&4>e~uQuddL?%rv?kI>rKR@6x)WjW^XwhjR@*C5~Z7&AAv)EFcsp zi!RLqvL(J3NWuS!s$VQ< zCdz)8m%8~^&=VK&Po--2|Lka;M6aD{cQ;N_83sJsQHA)&vv=#<)Iv|iR#?p?xrU9j zfm6D34-eQn|M}3Kr+(yW?|=1AVs+ zC3$Wa3WQL^+W5u*97rY#+oEcjfO(eq*oP9JqVA7J{HlMhbqE;`Ts z&un-*E*|#3PyxWdTmMhk4Udz9E1~{71%4oW=eKC>|47E+>sP`=^MBg<|E`u5fHC?% z-{4|6s-`}_y7L@y0czG From 6c801cb4ad21c50e8ad781b9e1f51a2da10f2060 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 15:25:15 +0530 Subject: [PATCH 066/958] Add files via upload --- .../images/quarantine-default.PNG | Bin 0 -> 186402 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG new file mode 100644 index 0000000000000000000000000000000000000000..4c7a173be7db5621c2d2a19fc9b4e544790b61b3 GIT binary patch literal 186402 zcmZ^~WmH^C(*_zLxCD2HAvg@KgS!OR;0*5WA-KD{Yw+NMy9Rd%?(TlcIq&)I{c~rn zy=Lw1>aObEE%iKI9r9I990?u|{@uHGNRkpFitpZi`2FtP`z~1Mx0Jq|mzcM|_YR8U zLhmZZ2=?DzpiBg11>e1^jzW0S|Md0_XDgxM@a`QJ<=^MMq$0)HyLYbzk|Ki2t~y5< zFnZ~|84X#-Et=P>X_QMf+pAVgg|}$tu=$@!GW;o$mJ2+wW3}-lB}fL}=eUG3L*w7B z(l6O3g;A8G6e0NU=X$&R06G?O$iCjf{=q5xM?(?_+662Z)0U7~e%` zy>*A+M2I0m3;%%tFCU*z%_@)L(_(H+f=ZTYFK_X8nvTQ+OLQ>1^)qS5e4LX{!JtW* z-jWIz1SLr6*(&{r{-b_vJLc}$V>@P%P=H4T)68MhhO$1*<+@t$S`BFKv3<@v*{A+_ z!8ms{%F(6%*<+@=Wr3CjbH`($Of3MYc5}KTUNF3QuE(ARvQ0KwibA}!>E*Kg*Njul zoi+Sj3DAK`&IqWSDFM>FN-uL=+V!Y)k7IV@-KE@`1PQg7x6FsQS9b9yJy+egETFJV zdT%}IzhJ)AysLdfOff#B4S6-0o~lX-Rf7;CU-~U(5f<8m2zG-|3*A)^gWM`O*W}+c zmmPK^Us^uK=$ESXg7Dt7`q2K>g^zr>auhTgc)a%0Qf!gdXBUX?t@1?w=m2?jsqq0B z-v}P8|0|G?5_4M z{dK$;#<*}pd55?zB5T-ttFff(mFeN2>7m_SrByBYl!`d?7QHZ3ccEP?x%*~Fu1Vo^ zTxGS}4mrrJ9s=}e;1myZb50L+LAZQgEMo!{XVo67XwE#|T2yW*gAY`gpL8HJ{K3x) zVDh#0w3H3MMU*0+`4^jn!64(x5#{tDPa}NQeQq^;;uDVU8x<85!S@+yY51_}c@w6r zcoAZG6Y2Prxzf_oejgsR)*fb~tKX9T&Edi}FL;pmc~JT)u;%mnEZp~x_}{!8?PAQm zAY$+2KZT$FR`HMgWt%JUhsE!mrihk>L~cmOw=broAwV3lLZy?Sayj%T)xvXa+^;+2 z7p{x#PkiLdF>_5DoG>(28>%nu9KNi@tjH^6SDALN6JS@RHk!5DB%_1|hbBUxk9ePa zT9zHs!pk#a5SwEeS6I%4Tl?{|?$}pNdCHrkM~8Fo<^Nd#Rrd#lNS@{5VGjt*5Ek40 zvr;a$b1w5rJ}RywJbMab_voG8PCkNy)-V2Dpa~H&=Q(ocQaayWM7$qZ_STHl+fI)o zUv_;sv!Vh=s<8H3M6H%bQw7?vgFTemloFR$U-=A<$bDw7#vfE0PfBMjb-89}KTog! z+}=lH475+-$f$aH(L0{Fr;8^NWM|hA#*qqHg3nX3*1AL;fRcF1$j>;mt6K}$QVWX- zy?mgSK+l#>MH7KVO~Iu<$1hqa`%6quI(OwL$n5xaJTb@;Mqf8DVNs4)Ws^&Mx`b&q~IN%Y(4NMjsiv(!$>nC4;1hF{cWMIK(p$C`ht;)1{ z`{~Z~Eblmk4Vj+#0%;l!B1Xku#4+sD}NgX{gTfc z*vTNqsA@TtQ!%&9V#5%b>ij)lYOlWXfgw zs6`Q|QqhWH`B94=e!GnN@U zdJY!MH_VnVnlD=Q^A(gfio&RzYoWc=)@5|_~|sEh34=*C(}X9ty8 z27~pQPxrOBX`oQYA{8h>))K=S$w&msX;$TOUwfW!g+&TGrL2Bhf*)?XcQ#HOaZ%Eu z1X3c(i%2&~1Z!hn{0hZJX5T;XL{=RSQmI31-mT3eaM?u4REVJ{Ld@xxREdiC=`w?p zZBxpj#=%$kGK#D^bg~``PIa+tqv!d6o@jgvZ01#o=gwbrT8;77vg}71=s0PADB^Xv zqbdy#eGMWX><7ms0JO}i2b2L<;ZV5*fD!XCG>OOHx>DHjv2viA8|JN;68MLUcy{VbORM)OCGzfGDE>^qFi^@)$I!A;M+hbdbd-DcC2BrqqKSm=`GiE{a!yf zCF%Gb!-s@Jcmj!(!@#!hQjdZrv-Xm!Yb9kLPiTeqmYhecLuPyK$LOk@g&V2OvjLaY zeXRs;mSn0-Jbff5ux~dub6I|F!pfjMc{14X=zKyXZH7g3F`sLGP7$3PHtEH!w4CCJ zWpPTQwOa?$7N+%gA%5~u`ug=u=YwWX@UO73W_xFT4awQ(wavhB-QjDNLMGz_46)u+ z=G%tfGYfvh7@?xjsU0MHw||KD3UdrUw@-wR(g-$rm|9ro{DfrOM81E3eo_~~NsS=V zUh%rBbK2|`wb0_Rva-6mYO%#Xniommq}e`8ouTtKCHxszgocVu>PI;LQHnZv!ZOxY zlUnB)i|?L;Wji;l$w(2|ZAv^2b-iQ#cKsTcX{kFTD>?L+Yjm_6kA}+_#f$+!Styq_G+i>4%tnuB4r59u`RD0$Z79Ia zj$%M!-=p8Y04MZ2yGAN!ee;jP4e-VVAI5DY87WQT5fnZE*XY^&j9z27kNnZCgx^0O z?_-n0ZZr#9)Y1GGH1v&-DD-n`16}%_GL@;$3U=-#O*5<0{4(i-4x1R)9{Z}S)miI@ zZ+woK#YDYGBj@V&HUQR@b?z^MJ<@)*rZiKMxDH& zB4%}O*E2+kdkKv?C&yqfo`{5*^yR5gV@v+L!tGcvZqM$1UfDN5OzbZ5po5EiR-JT$ z34++^yN`Uwh!VIDAN9lDT{iDo#o6P=JJTYqm1AT!9v-_)f%cL-Jt)0K>!k5*_V;p& zim;;;0EmU8>mdIJ$8OsFLo=&<(aALiv!f&?$j;|-MPq*4hMIlE^@RJR=_D}Tu# z-m}heYK}aqO#TA&9mE=1>@T7iw;2q7DKz(f_Qe6T$vued^cFsOSaFMAWzO;eRyn{ExBk}WS;a<2U-*=NJ5JpZ{)N^L zZ2m}53>d=}>ZQxLLJw)AuNPS3z;C^Sel)c)PuvZfZjeuqB@DvO?BMs|Ux;%Uj0~k< zrq1L{xmxnV#IVsA$499wu$xv-KUWZuY7-X93z3g@PQ#IG6kaU0`JTCBy<94PefxWo z#!K!&G)o+4QX}zgplqw}%W*|}OI-a9)?xx=JgBTl_dsCMs$MF!H$rvt%{RNOUbjIo zO+))ldF1L&b(|L~y5}^hq#*1j$~bF8D~q3{*NtyeGhjg4J*s^JA)lZef3yLce!tzMsi!zN?b~59iQSk+!sp4Q8i1muRu2A^r5rUoKs4EFDMapyB-CHVd3Z z1ud=0U0sOGP3v5Beyyg_>_}P0ZmlogsdF&0&{K%JPm891HbtfGq7HQ&Ni&4U=Wm>P zmQb$0Ep1bC7J+2BSRZqomRR%b3Oc6vj7__tUll(pt-Bd9msACw0@t4|%LY&(n+O3F zUhq^T0h0ZFY}*wi{Zp!Ub_T?Qxb9p*cCV>wr@ z4Yoa)({O82A6KJc;mU%;g?oZXnbw*7{nslhJDe^)Lnh4pi^L~ATtT8RnoN-y0+tQf zLBUODPwI4;G|rVj3uY5W(`jocwkeO?H`r8vmKo{E;34b6J!ZOvH0bE`-lQtdR(=~T zG!E1Fbx9!#fy*xxLBpoWEjMR;Ol%)QVEk#&`(Q=zg>gq+65+bQ%U?c~0zCZWBxY9HB!^v``IppJvD)jNWNVB}H=XEz-Sx7z)MI77&keRC~GXSNn&pidP z@e&Yic-*7%E3j8f9#jiVx|S*9-~Md*hM{u`!|Kf3KV$cz>*{Dl(tGnjJCTl=6g#`m%) zW|OyL^6_;ft+G0UmR2O8p0FVgtw8q zUlOib*Lk9F2f_Osq<4n}gjSyMk87-`DQNx0(@Zj}e~LZ>%KR$g(&pPQDqE{OQFxro zw<016e1Vy)qyYm1ah4CqmvkQc@2psMV~N0|GyLYA7 zZdV~Qp2jy+p6 zKA=Q@U|y$Ezl!LmHbv^>6g+5jK?ytY@Rx-_sr^+K>@=KM<8)6;w|bg0n%|!PhHIJI7j8R_O1B=GAS7Q<3&bCa3yC+yDHFmV8`RgT9~Sw5)S3 zW$ARbCDMdOo*1s(d^}n_26(TE016!^b(F@tEo8Ong@E)7{>_G33vGLD%_b}TqAa|Q zmEU?cQOa{3yDXA94QXl(7prcFH%dyYM{s$*oAlGHdRj3q^{w=&Swm9s8G-@LP2nb) zUr6^i++@(0Kl=Mxl*2{<=;7b-OeDG|zuJ-~CNBp`F&k8g@-@lYl#LIUlOsMN$S29-^|`*it} zm{MU*WQLo(IK#TT*Mz^*lKVyDtft$%5Z5?Sf7hbH+VJ(=P&xnRGKWu5LbFx2G2T9X z84>Gd71MR5<qBQ5QvW*S&diqj>-fYTWm)Ps0 zEo3%*Kk{^SylmUc3N~IS)@blGWaB4@D~e6R_T81BjT~`Hcj>3sX7->{0*L&nIEW1q z$5OIxPr$EC@2tzO>IiKIo!z%+4x$Urs0cL#XB)mal6A=A2XcHf zsrG0$-PX7z#!Lz8qj#8x^>(e!?@V;qnZNbYae=#yL-f5pVUT!q44v#Sc{~h_e#8%j z`|}?(&>4tBKBs^z2VmBp`LF8Av#c8UofreEm9$JvqW&{yILmn`HDNfvgIExR#%cnEI^`G=Qx-1&9IZ_^TkG zfWtd04dj5E6ah4#Ug?V^T?UUaoywZH<)(3g$T>7CuCsOgLYF(<9>e$zlonRIv{17Lh55~Sa$KHj z!ZnzK*fsW>lbzA(%O~rW8#3?$vV-0;a=n^{gf>&wxnzz=@){Rp_KocsZKskFC>tkP z`*>YlCs{$a<8w~+wC9txy--B7Q7wM@C%1YtSR9}ft-92MO#KU)I564Wp=C%7qlO8_PZ%Ul?PHYpnkAk46ZCJjN#m`fTc6Lbkh^{oRrX6i5!;QLTnN@_sj-IggC zSr;ry$Y&PnrAC}w3ZGJ%A1&XEHb@O<7})&cC(uhO%+`CF*_7*M9e|Wb;_2~{U|6wT z5)TAv>eyji14;{Jpj?{hf%2zZejzn{A?0L1_=~GO3&3Ij(^Lw#8*fu>5sR7Q2RFi* zEB3mn+22xzJ{Wu{YPK);amgIUh)q+X^I-$&xCaztn|*Ura%!@SGkoY0M4*_IT8F`* z7|De?=_XrEY{{Jd;=K@33S&gBj8S#-umz>1!OrgItxS%9kPubqdYdhgN6C7Ohk}S6 zht(&7L3y;emZ(Yh4JM1I`l*$v;qQy7Ig6(yJJjER+zHc6=y7=UwKoEkLFO%XEzovN z%fG*hxj7(tgt=6^t!LdG8b+ND9H3()-s+wF^lK(8*U1W{w`Sm2W=$E9N#O+>$Keo) z71u=xcmPu=+VoOB!5#?`Ee7!#ZCz8v(Ht8`!fuX?;N%{ghlO*hc+4RolZo|8tprLZ z>x)oDk+A{OxAw7_*~x>-;8kmWwIvOW9mmhzR+k-0FO#A-RfqHm5aaZj?)9p82MZ7D zY@+x)(?&h*Td@<<=L{a?igPDCWD1jH(0CQ0<|jH==n~Vej{a--Fr1 z0mI}Q0!MU#*3CRJSGNmQfr0vxEpHU$9x9RdA7}pU<*rciwlS2~=JW<>-bML=D!+!8!g63N(+GUWy@^+?9S zwLLrg3BcM7Jjadj2vRa*G6%BZ>REcQf*|vf2cwD1i^?+Ztd#ef>J2ubQJxRlP5ilx zyfg{;0P@t{Pqf=`8*VsVy>?mq`hW-WDhu};jn%28Nzz+D5*ssEHSrlUWaRJiiR9{f zp=uv_26+X8u)DIakPLl3G{xEMTKIUSVC#7L?&@gurTIKC61CBbgQauk>5pSitQXx? zQp#@hk?LV6eUTK`#*kZ~XKJUhToC|+9%b=@VZ|-$Fh6vcQ>XJsJu4v3rCY}K+i>3J zV|2%>ShgIA6LEcKDIRI+%||5CKGy{O($afP5AeWrU}pj{p|+W`8wV`A=9yA13XatfH4gc6oH*O&>q|+2>AlhFM1a!dPmmT zdE>$36d!aiHmq%OM2|&P6+Rgf_~!GR$tZXUUf-`fyE*eGr0|AOAeU_^u$i|%jD4pV zqjOWpUAAE}bpEw|a8f8vxJ>pu@jLIq1SMl*l}a#KhOaIjOUXUkKUI!{fti(huxO&M>|D9gu+!QzU*~+ebc|POF|~q>P|T4;`;- zN>!&dL2EGbeTWoq1`*MWDsmQV%Xfxo-({oYys~xJPYAl(*J@Z72XXD-^-v*acmCn4 zboEK{nT~luUHMO1iMUm`<@p8F%w*KjOy%DS2>7a^Fh60|HHuI`saB2kRQC8GF7o5n z@wK@EblHLw78K%JAz1?{=(q`4lHm_s1$fCwrMwiQ-LKP-@$PK4gu8R4#usPu3=h@n ztr!zGQK;#%Fs$lzTS6y@`HD<$!SXPE$hbvhR}3)l6M|8$Vy&Nw{4mr`%C6gWNx!-` zYd~jXSxUwx3Aie`yM?3HT9>kS(3d2Hw@zDsI;EE#c&$@5SFi+ zXcablIt8Q>zcXk&DrI!SQO&|7nd25(GC6eJBE;Y3UnQf?SZani_5Mkb8dNEWBBrO6 z4lHY#<94d4^LRBZ&XKo{G9aZ%K7P|64%pZwUkGX`KLkHWnt zrJ!Q3z5HcAfGgh@Pq6X0v{$*>zw=XT-myH**${aXJ=TtMka7 zyP@XHx8L=CMy+7Htz&4VpZX-Y&w#KuU`}hVVr?jvN@oXiW_4}3@8rRGak_`}tF0oq zRK65WfkYJEjd+ivb6m@_4ay*HgtL6oCQ&kNUUTI9L5FOzKgQ|YX)A%hyJqwkf&H%C zW5A&QK#y7gww^2QEO{x9L9~v=r-C$&8mG9eTUWjaNGX3oRwD~82YF(7x;Z<8_7^L; z$re}4vYSN3{qxPl`prljVQVqY%W{0Tm%)Ii>k>6Ls|jGD4Sx?@W!OtjTe1B{oJr`z z?secgtipIafX1c0cXEbjUU?adS5 z0yJI&Rd{l|W8di5k0GFD+F^;AWp*_rNKBf0bE-R-mAksXfZ2Q%YBHTHTt;V^;g>m% z@XdXkWEA>){RY&uNm(svY%4$g`CRmrA^m1M#ZG`!>P{0E}(~2o)(qdt0_b@pqRvM&FUCj1Qn{fO#RGeQmD9 zqq$Z5)y+S^Rg>*eMNt*jX0$y>(cmANSzGlJ#|dkDVxWqlvy0Q2DfP$1pvfgG{9Np3 zHkV?^34G6OF;rq@nv=s4u8^cX6reV4B;+siVNvP}udBab|FEg$zo&^W-vl5@NWllH{;1iarp+s*j~|bj=wuI!b9F1Ak7cIwFB9InQoF zyaKUa^hE9H?~lPV?xr)aQjZVriGHX@#Uu>j(;6~Zq}z!|Y7Hzl9{t?`uji=xLDGRy zZ>;WICcHj`H|b7f_#Psc3#=I&lc$oi@;MLsoRUeuKT6SQ)Hhll6>MW_kMqVC1Q zP-ZlI&wO=K-|8Km6_PkZaP9IMU1vpr0OM%Wn?EOZ(M=g%bPZ@vmR|bq_$bii`<;=36g;{ZHsbZ;53<(bq z`XG+ZLk`9rAzZ-B>hl~N-W&?awc)W4;T^NPW&M1aVJcc$9Y7=5VZj9Q%|Zwv`7y5# zh9qfqI8ho|oTq6_-L0d{m2p8FM0RM#@z!-lB|VA_t)2dD|cjx8I|Ob{R9Z@1`wBgGpJdCfU%oZN3!7 z+$)Ru`iF;8?y-MOq)F9px3A=d_M&C^MFXgO4>E8sm5I*)!YArRXE)K9+H?R1-pI4} zE#H6LsTiZ5Q8}CVqssITaDKe@8SrnKUKi(jQ7z_KkEu_TgKV7>k}lso-o}5&VE&yZp0y=`>cQ zydNgMC~Z^O=5--+q8ka7PI8QVz0X2T7kbJp4SPouu6Ng6oG>APaUkEJ{vzSp`Azgf z+$%O`lBhNA21CZ93RKKm#;uU}9t9|=^fHsC=luWc9nv&JGl#&MFTQRnC zrxsk>vMQreuRkulPwLcC8+*L&-39IECk{I>^je1H!B`U6K+Yf#SsZi zJ`>E#GU(*%-7_@!I?#<_T9c==!#$%^lc{inP!$W@$sJOxYtOZn6X(YMsh?$>?C z!E6hH_**0bb?retOJ1`}hY)OwUyWChu0c~is>w91EK|%FL5+Cq{Ez${wys4u^~6K{ z8s}eD75Gj3?;9>(S6}3p+D)1=$-fohI(vW{LzV2Zj&(;8MoT!y+td(KGS*$@j|juV zJvjNuIeEO-)6IC)(syA`kD5WfJd+&2Z(Te`nB>c?MXxS}hRN$!>9q_&UA$J#+yu41 zqH1JqYCXEK;M3@@z^enJbFyF^9VkGO<~JXXRZ4oa{{5}Yj3iRAX16)sj4>Ay`BSWu zXg8)clY3mdN=}tEvh?RRIXP=}sm?a^^gSSSy>HzKV=l-7?|yEr%VcLan)T|_$UE}Q zxqrwtLUY6?{C1IIHyb0It1_oX+t@yn=vY+Y;^hpyXtq>&G;<4OHJE22s`~hSZSQA- zz9N6r+?!_cUV<8*wokJl9 zP5u+?^*2t3{Hx}Dbw3dgefG?KKN}kx0iQcY-2QYV-~R=rkr(s*e!M*eDG8{ls3<5a z=YOjEJ68Tu2@Y6N0>s>odv)JcAF*d{kQ$cwwnYAymp6f!2X(a>1@b;&M9t(cl={E) zFM(0j2rookuyw9~X~=&Rt!B8un*N{4%ac}{_k^6AD!M+G|C#F9>ef%R=aSdnuA7DW z%)yj4I)Cg;pU?JhdH%rG!@s!=4IH*YL1-Zl?z;s5?9%Y*_e=i@u%<>ao_c(0ZfZ&i z4u;*>*a(ziB{#FMK+q;7B_%$@G-bO~yjP+frq-VaQj~yZ-dM_e|$n2 z$>j6cyII*kJVfyHKXv2|l369pD)K8lj=C7S3^=ls(myz!v%7bzO<{3ih>Js)ICuKY zOr8ZBhk6*D6@?WMZ?iUZ(0}^}av^2ULKe)7zv@t*6M3)X;WvK0&7D`0wzILB{)Km7 zeFH62TADg$?xIhQJ3K~&hhAOw)S*`gPB(7fYs@qJqB5&5<8*GEVbAw{- zD}^jXQ7uP~0KEB#b|K}6f{Y9;ho_*$J?)JA?*Mq48lOIWdPRJ{5>cj4CBJ;jxy_}< zeCg0&yIEen1qR2)#7N3nV>P+q_DFCdQ$p|SXWM~jGkxNac-R9 zqWMJ5$GXwXk))G;>TmYZW6ab|5yi@BHsVhF5dy77lFhbW0S+51!IzOhxpKxw zYDa*UN%VG4E8}cFA&KyY3A7#T_b3=9`LMV)ETDx6Q=jzPI-CSJ1^p97<9RsX=oG#) zl_xZxiAB}#)dt>`KKtKc>N$D83u|h__e{lc-Xfl{wPH^_r=2XDZWH}dGitfm95(79 zueh|{jg=%4zal$6@$<;j2`3CW`#8Ki zPij!V7o9dxE~5x+bv)J{DD-lQpCQ;Bs77PAIi#{Vz?sa0Hlyb5X;Yc;U%88dHC5<_ zCI(yZJ?bt=8w=CjuR)@CDqE7n#?z#9ie;eK8Fo{CdXr7X;iln7u>I-(;%zx^salSO zfEAW}KVrWo=x~mV^?Jo7*B42t10X9Q1;U-*GbdZBTW<81E)N@Ha2?&QpNF}r!!O)# z;>4xN7`TGGWDAbGOQIw12x5!EDOn~%g`uh`&x{4nEmUcjhh9^1H4*-|3}rdSfA?mT zy}QlvmgxD@9~Ubjq7JKIE;=(MKJFXPdeP%^39<3YsPuUe#8PwJyT-2dST`Vgok7h7 zJ<^}tuaDnfH(WHCUfB_O{R{`7S|AG(CVb1(RuLP zCeXRY@_87Pvs7CfHu1Sb@V-BGTV}na7;o1Q)7X6n_W20;$iUs_9R`!t8pZgHFO^vz zSLWr)=5ENvr_1LxD*0Qq+*ot3C5?4amr0M2a@i&^fUH9nj9Rije?;of2^>iC`KWv6 zlLZ#MM8%Vqvu{+}Atuup&2+|-jz%QZU8p$Cq zASgT3@7T<#yyv8f!l-J|OKQXhQ6f#dG=2QAy1So~R}r~W$k4pPA0l{B=-4ckV5(QC zbwnF!>*(X#(-6n^h@vz(FMInZNbAG@)+u5b{wGXRVNhlTaQ4NWqi@iSLPm~!5cP+{ z(TuiFKjlb`;AtNit=*M&Dnp#BO&>qZCE@FmUGg)&TD7?vCCn0e$Y90*lG2JY9Y|8z zgPY@d#~R$T2>T0n->N+C@mP4ivL)ucnvL~nzN-tVzj&XwFXv~Odaba(n=ovQMqHD7 zYF6Yom3SgJZ6X%A-0&5>%li{0mAa+*9Xdk4c0Twbz8~emGKF3*@4X+w)-HlT{5_|yyD+?tWx+OS2`_?9F9Cwb=CI|d z(5q$bWE)RtiF0^@5~diqV@3e49r33>CTM-cL>oD}&+%((%qi(iFdzMNlrO+DdZy}#e$`yB=$=L~E~ueowpj{bu$^2G|8Z{mXS7 z9lwr42UrPA-$M|SS#Z3zjXm#|%#`^a9K5MtRB+ZF&&Tgq%Yrx;R)}E@T|qV^h!$8A zxPvlCYaKN(uW7HhAo+{419)vx{_w)@QpAyTdsJs9!hL#uob!P#CF$hGDeCDV`8`*g zr~8G~v?2a>O36)nfLeye=!Lnp;kk;mem3+CTkd1vJ(J-tE?Z7vIF{Q#R*Qp&J_}NU zs68_2!y{a~%!ZCQcKT$glr-(SRtrqfs?k9W)=+05jrB#J(|nM0AD?8GqbDQ=mr%}I z)?Qu0`B6sRWqdH>IsV-}D8M?la7o%M zQIc?2bkMYs^Ny33R7~9T3CwRxbQ(vboqbkT(r{zG>&B!Q%gvM7R+Kbg7Tn>F>0tz) zw=<%*QD+&Oj@-4)Z{^9)WwswqNQ`Lc>CL~{AEB=;#Tzo1H^61XjSeV`)8jCx_D98w z>+)}vsS%4ZnQk;2N#+Y0uHeraM7Ni84*ZOjAaYY~CX>z|I?Y7O{_6vOe7nPWL%l5q z#OwPam?vaTcObqFmduh+`Bc3J|MikryaqJ7OgnC9&EU#2MD6MDadZJ2cwKtf2);1_ zNG{0YBna6X5&zuoJ^JR1c6oFko)sfl+MfABPJ4H6&vApRW zmD*T@PkfD6ME*h@xNG!zw*tv}U4l?}2$A~n%28~02k7p|4!0`BeHd9&1WJp~H>$~# zO{U~A=g(=d{h$AtpI2{-^Y`}E>+|gz$mr^Xm4gEv6;)7MdpUY=4N$dHrs_Se-lamD z+Fh196wss0ri0EXwROR+=TNU!< z_P~39;d5ZKkBz35*8b5E1rTWOU!`2S?U%O*QDYWM3a@4yI+u8nfKAV}H3QqC1Str+O7* zNM-TWQlfR+FDW1>Kkbi6{V{5gZ+OUTz}W6L+-47_#2e7+e2Ty-*X)bX#+PLW@lb!d zRx{0XLcm^OPf4$Uv^F_|sI-<{(|DNGbA#LWoh#CKGDBiIS&C*t+i8X~Gl`b1UG&Hb z-W@i(-sEJK^F+ALydsafU+`rK-4l{s)Wsz-cLD3`cgg z+!L4qpz|iyX-6xwmRW_4Jf_ZV%uPX#l6P!O?u#&fn&$=dx$l)MkNFy)&Icl*Ib0;C z9e1cSCv6t6DI;++`%}e$2`R|f;^wcQ$exdl zrOGs&E;pr3WK{=zj!3vAvVZvPeB42`@J>B657eL`E2fb@2ar~fF~23%t+|GqNKg0q zC)l2X^hjHhFCPErNGjrD{q9b4VtZBoAvCvpy}{>nf0ilDOB+9+LIn#KEGM0_)hIB{VtacJ~8pN>uGSWDf0{qXB=l#c8&E99IGs&T{ ze_`V&lRH9xkpE)W#OkV?tLt5f5+}c0S!1_>Mh1Isy{*5$|J$X#YpGxVNT0{A2e2i;XYe|Nfx)ALhM(XZrqs@b68{yZ?VR-5*hS z|FplpJO){>W$f&L$;ilp!@}@^zHh${Vqd5TFOHU8oEG zuhpJg`zI$abFh0A6%6dw%L6AXErV~Y;oJQkSKdrg?EiHf-l#bGFW4tW%-=lDM|!j6 z8q1!Sqm9}X|6c)=Uxpho;zakR>0LQcjcr#2j9&ZFx(|~{ZCBR{?HI%{hDV-v&>nk- z$Ax7rJXH<(MMYF+iz_pt^17gBYm^EdY(HzpRZ`v8&)$rgZ>O?+{H-rBw0riav98e2 z=Xbp+K*d?_ELYrowcfY8V|Fb#d-xs4mtj%u#O?XrE4y8MU)EpB8hr67PBR6mcZuAC z4su$whT0qChjb@*m5c#5itN^v(%6$c^mn`urx@UeAzfwkzR*74#u=Sd+&j#N+1xsF0@;pBXN<1cbA~*Brdm;yv z3|W6&+y^xr@e|=}aUH~&jOh8CX`DPV9jLwypqEd{Saj-V-xvL!8uktkyR92G{~~(W zBQ4drDm))hu@c9$b3|w;d}&#kspA*h^gXFpVv&YJWBu0J~A5BClvXFqIHL!7<5DAV2!epU=@^? zgx)X|#SFHTatT_wG(x2*?^5UXv8eiF2}G-YCri-b96=EeS6uK{d{O`^wD5X6NG928 z<%%8qqR)p+MiJDhau2%qu z`9=;8-leuIJG4GpBG+Jvv)&fY0-G?KhBsz_0)KT856^;UpJR!V7hwm5n_o%`__%0B z&odDD>+y?qoFioqI+)FX+4DEhn-LL5R*E;t&glNI_3F^X)#H`a`Iy#dJn-6b#VKA< z_ya1leos*SSBT3;n-^zHs^Ff)46)XUM`O&{ zkYOKjre&8$cM=V-Tv8X={*L6~Nw+>ZAKpCjH^>k5FPZXyY5Hr@)LtZ(b(6iKY5#Kh zI)Jv(Q4GzpjGXt>fZ=WgyYcuTtdVI+RB2sbYG`rq>&NO~P0GDvRhAvprZfC-pt`1? zv+r==i~%=!p80F&3Yd&xajZ~QoYOHED{AmZcvYjc^H&Ysft?F`)#LJl_BFqmgS?;h z>F7KNwzxlCk2H*A_@bmizrGK`Id>`l0f*%ehH7loBNfSR)JtxB@bl{_QDs4bPH@KM zjL!%b$_wsIg^=ygYMMHf{ZfM)A=y}@xhcBP>j$_o4Q3lfKjG4=(t+(9%zrDK^vWdk zMyKco=(C6M7mY_Xyl zC=RBwCm}Fob;pM@k%{cpsU;~n=l^JqeBYV~4pnRGt$Fndv!b+elupr<5hixSp`?#3 zTE9DHN1YoQtMo6QmrPMt$)qF(SYRmZqo=qn1f+BDr6~u!52H}s?j*ZWZ3^tJF5#8t zEW#;$U9VAEr@kH1C21oy+4!3NAo5OO)U`Igwu|VJ}b67t#8~WzqujzX1GBAoZ4(RE(4JwQ5}!p^Qsnmg%RYR4 z%erUrmk-Z7;cZmjD#Y;q-rPv_0Nvg>Oi))7N;QgB+@#zl}M+r=#H!;ASXTSjaeGDEtKv)vXFr=?nTG;ULKZOTFz zOBF{S*tl#q0x{sPrOJ;bLC@18>EuP~M?I47c2hLQ3*XFm_A$zQ+j)0hBYp1S9i^n; zH!rCS>H^SFF~t?(8`CT}&kiIFPFpilY5`2t3Q+MyfrS4LZ)f??M!R+WyM-dfin~K_ zcMC1PLUAJA!F^DQBwSm}u9F%bDL;=JYR=73VUg=+B7!bsl0zx}wLBAwCG3b9mgcv?^H#sx4B(eYYdA^mIa5S{B z%qz|zbX8#=pY&OlrYq)kiv!A&d)}QHO=Ni|%yQ1yL;|J_l0Ioc$4o_Ss1C$h^DWg_ zF%6_!6(61ycpb7tZd1hqy$P1G$18DeG6lthgs35E2nZ* znlbA!LZ<5d+bhPW`i06IMBGb=7rk~e0I@D;EeI%(V?vIIIExb?SZqo5?+zf~)08U} z6oP3~sN!pTGODguZaU`P9T4c%@u9rllQq_{^oQFwCnEr$S}^kBr&(AXbe-C5+PNsV zolxeou%s^^@(NY|=n6 zkHg~f{40GH4h~8JR8plm&R-Kp1r=49KFOh7)O77V_~==xCMdgxiBjFlEXGaRNN?4{yAdF`zvCbDz62 z!STxyfTcI7$dcy)&05c%XsKqy77mge+fOl?h9{*XPFv&K;dpjl@-VziAukm&cmo$9 z(aw4`qFnto&O1UH$nV-?ykcoRCx9YW1ze+z7F`L=l27Db7OTto-&}kBe;nNecaNi4 z^^XhdA<)m9pxy8GxB}Tr+yY}xn6?JH^8o~ETeqnfyg8vYu*PfOq^RAEyA=nr_U~sb zkSX8%oto=G#v6VC2`+9pl>?~fzv~U^rxr;3UEV!7PkF{;144MFStSZtGDaoXG+v#+ z{GFF;+Kbil!$%iC@K)szNvlMbX77lCW@F3K|30z00JTMWDIXVQf6m&hb+>O*&OYQt zg#@A<6X;K>GQ76^?mF?B-j_G2T?^@%rN6|k_FQ4Slgv_S*9z;UeS;O(DJr$I_tS z@*T3M)%li#P5@kvS~%>)-R%uViRcJYvKVM-z_e?8$$L01bh1D_yHG*fpU`(ofM1!+ z`w<50SP)iULPkDa8T;EN&P`^0r_qom!WSC5@9*K1RTA^-LA`sP$_LrbX#&~hl#k+( zUoKz-aLONU*D~m1OP(Ke-$TG>AIB*S&1n{R1I4x8#aVKfJf)^CY;DBj`Srf) zT^}{^ir!AUn*x!B%82WBfXmAnA$+sh-%aY?J9F^6vIpIOFc_t6; z`ZcL})>8OI)`bI15H9{mg_=lm0gi-{=CvmA;a9l6-8!cS;i@1pRMW%cAv3nRt5x%o zlAQYdjGtdT^T8O(YrB0$5ft6D6HeQM_5XG|@BFi0Z#s0o7Zwz-`n)uL=eGRLwZdo4 zNK>#mw;ibCOPT8!Ct2spGO11pbz}pB<~7Sjv{SAJ?6s0!-y9pZYn?LU@hwvh{DUvw z2csr%kAd>GXR*Fq>({XH&A=jp)L>mh$wVLj&3suuacgqVSpW38mKXgZdWfn=Vfg8N zEzIf)+EBQ=vZIRFCPh-pP(T%5da;@((!zBDAeiq5CC@*BAox@C^#oyX%sS_wV&Zbx zS8xK=7jvS$_4k6FTTtD~U5%AKf4ulWJet+OEyF^Bnb&Ef1bC!x53_yYmCCCK@Oq3Bnrtq-MZ zF`~nWkICnHqKwgn?RWA-5uD(7KPG=oPN4r+rrd6;#jDW({<~g;)<)wm=_Vw$QK_P0 zTC_t3tfx45y@|j6E;|NpKjYiw7osv6uCJ_1c$%R=k@=KG)4B*gqS*o!zpD;Y$BCsL zENW5&IH3fC(C0?fD(!boUAQvx4tC(britR~KoxCo2y^Ps<6SA;0zc3g!4TUkUs_ayoP>;QCsI1H& z>P&WG;xLoQoveu~CX~imbr&@7cqpH>H-==T+2nxRBE4)L)BX#-*fd8-zWRAr-R*?W zH|Nhj^8~;4kMthdlOjvqW{5Ah<++J=7a-|n4~1Uq7Aquk-@u9?&*7H%;f;7h{}ew$ zQ`a(wjtne)CCrk+>*%fVeWCh3zm45xB#^Q>wZZr9TLcyZB#Qi0WwFrVP=scsk~s|_ z%jlF%5Mnj~GC57-(r7IWV3o&P7?%Q!D)a=K`HUEKc&3;o*&5DWH57l%loC2K?iU>~ zCi#|+HYwo5kx;e0)b=otMzh}FN7>;SC~CECXl=wB3$H1YgNu@s4HMHrHzL9ir=j*8jT%(0@AOzRTAEiAm=x4j6I=+Gw@j5{$u3IaF+mrcjRq~E&NjZG~3Cw zD8E|*zJ6hozh0!H)2OqDvL#~uh6xt(QL7DANqs<34I#bARr0=RAU1lAh`Crb^4&dL zP_MRJgDC-Rhfa)>k4(wj$M*4)?p{17UwQqmuht!gNVtBDZX~FVGmcwV9>f=POF*)! zuapFgGqvA*9l>HWo@2qbz9YDD6beJ8F<7$&Z=DtVmt! zqBc+0m#Eno46ImDo6~P!4558Z9}6rD`li_)q>57hr;;k;VklPARDDyv3!**CCI=BHR~s9W z#CyGW7}F*Et7cxtE_PqODGc2ha3Yn5iz|9q?&0BJ7vn#~+&6-sketmno)@>so_`h z_Q8DMlk*fEnf2O?;I`Su6RY0iu=>N9yibpEdTG%CCoGJ6JmOQAum2P4-mm!I2kxs^ z1H{+26+V6wKQAbKZbE{}-ZsuJ)*|>5KpOq=C}-K8H`ZRa#S3na6?*$2U>0Rnt>Nfy z7x)~cDN;A8)u9HWHv#!~h$*8qB9+r5KD`-cVHNm?9)8eY#JGxA4t%b1?fZ z)t%Gv1b%raCcZjMpnDh(AY%vr?0p*W9Y;}rOPkpF+25x3z|i4+_~p&b8@j69n*TN4 zOrsi*fUllqEIwslg3JKHP8L(RuHkb#Q-Gz)w<8GVM16j(m4Bp^FLx6G*sA~Dm${YjX8b{AKrP#;i_vKu>Zt zX`~S8^d&8pc<|}+Kvg&FqfLEG4~oE0Gmw}8%9}#&nVsvkgMKk#i8dOO5MsPlqq9*JzUKS% zr6OTuM=@}*`rJ37Fo|RPIp!3U5N4>UNlEwiBGAr06)~1)IT=~l5ZGgtwSNh#YjBYz z{y2l+3khn8V{x|L}V&vneYbAW+|IDF%Cm9od*h$T+H{8*Ec5J^q?&E(xQs%!LsJJ{#5=xagH*(BP z*4?&uz*;_o+*EmHn^ZUQWZqjH_;;$w~4< zmsaY>yJ^GsVL=DY>#r^ySBN9h9v1h5*Ml3KS!WXbGaWs2(hG{sTR+ai@&A|x!A%Zx zrg^iHa&nMsrBwH7KOP#56w$l+Z|Ee2yS|Fm6Vc?3>kW@{C0$Iv6NT{HUu70zS6@s` zT-KHH69_1Ew+9Sx*B-FwK5SqT;67Wox8#MQ_faiYKOnt5+IsG+u_4IL`terIA$tV7L)PU!}6%@0q@x2z*%`_N~R~w8sltzsGuK* zUNLoaLV-?2m`vj0**KIlEyZmJ35OpGx$TXYit}&2$Fv50G0hHz=x+gmDDsy38py5C z)3TQiw;5u#O9Y}@Pd4Iq&uJJ1fHp>(2`px+gi&xqfY!fjM|9h$^^wnFo$c8v=Do}@ znwlh}8y9;KDZ|RxnBu;LN+C@h{AL4_-cob~77=pcZOR=D3>+|!Z%es0eH@f4Dp7)|MbywYH6fF-~1!XT19*$=(r~{h-|!+`dzxa3mtB~JGNXW+Pg<8TD#*>UNfE<$H=I3XtJ}F z#l@l(mAEW7@+D7CRXkauSaB7eF|19?pw@1jofOCoE85?nsZeap2CBrQV9r?yzubA!YO+vdLlXnRNa;LLn&<#FUoFlp$uMq5F*e}3l$a~q8pBa< zl8@HuHXNZZQO$Km9z_T$n?2s+V|*%wGa;?BPjHel3(jo21J~=?Z36M4XjlE(N!eFY z!z;7LH?F@s;Y09?ty$T4>W>)rP}AecApJ|QuF2MPRN0!Qki94$6e^LInq<@RIRn{` zQ$^&H<62GsXWeov8hjdXC(%zD^2D@x03M%`y||p|5eD7XmdmI;8!j7ZNJJq~Zqt~s zdPO+j=MZben!^0}-g z^3}_^-qx-E8fZyLGIO?=t3P7FwmZ?Ara@)|@^taF{;zwK8Q3dBbVbgtb?qv;@dd~R zv;`z@IPoO^WY2;YXOF(QPUXsu!toTS8?&TT3)gx?Pc(75g;;}fT0OtAq-sVI8}*(= zcBVP->`w&Sr_RlCH1>{tLMD*wwo32HM^FljgzK_#MLb{= zc$mw#nWfwz zoWwy2Vc2#o)N71qSbiJ?g%YymKs9gQm;EG$9mc790B>~I4=7uj^!P}*oD z&2KDaX~&kBPsuwQ8N)kO@r}lEjEeA=++tCtASvox&!a=o?c{OXe7@X>JrdaF-v#TP z|4kOUR%l4=whx1HbQb$fMCD6w=%;wS%uxMqY)s*VrkKe|?wrE);r;XG5GLR47O#89 zh090HFh8brw~!?5#9zpfCrt<`XJvg=o}?WUW3Y<4X>P}d4oy&59JA4DEB0sg z8=K08#eLF*zz5m^{FoGRN68Xoa;k!L2KBS$qM3`xH;g-7HGYcBTW?87!q%;^l773K zbC1Il|Px#E^#+_FG*J*m1BI5yGhu!C!=UjSR zJp-t6901(^YLfyo%P~R;smE5@OcBwT*Ko+m4Uf+6iK z6}v~Nhk@=gMK$LyM@5WbOuwVDTZ`1^_EgqqchOHz;$Oa@{>aNEGD;5AwCO#?YVf9< z%>Wf%EINsqXob3jO593iC6cIbP$0n2zt4KchbC=e|5bSa-sbbCb}q_VzL(SzV-`LM zWgD;313$YfCYRL2N^l>Igd)R_koe374wCGawhtB!59+q1a;(JE6xky-Y-`ebbYDry>{jPX2!{YdcJa=Ee|w9-q_mhu-tZ_)zGbqi){0YRRas< zm)*2UJ&{dVH%E+R(h@Ffso8R)C0S6o1VVN2(iroLB4U*4ld}r_msgB1t3SB> zn(O$gL^O7A)yXD8)bMt)x160f52+y+vDB%5%zmR;CGAIkmCF*C#+t>JnoA-CTec{n z97$)wSU}TS?uyACd`4HRI~BS512j-N6?wem6S5CXflJ=E*61hL`}xXq_BQOj>Uxg- zusk=D%I$$+Kg1eanW&(qDJ{Ew5n~Xhcgr=25)Apein4;ZR)p=ox772>?QK%aRXeyN z3XnhJ^uVLzu_qI{N)Q!eB^yk{mRwQD`uwKqn)c|4$oR1UNXUZGw+Y$ZyPHnjUt1zu~;Hs410|x%siq~M|*W$ zIQC+bAr$1p0SgJC9EM*V$x)QCF@G2-0ol4mBnH2e_h4mpeS&GG)Rp|Bch<((bbdIn z8{1_`?d7~~(IG#*Z$D#2AbQqV?6rr6a-8+>>0ZYd$@Ois;l%*_#37EY7Ss9!2^~xs z*?%{py~{~{9ND*p%;N)l#$18DSo=B-OdUy0L!^OP!noe+IP}&~?4SyOLpQY{S{$wb zWl#|{TL>05de-mnV!D9XGqGkD!2u?p8(H9U-T8IThOOc485~48M?waziitsA<9y`i zbH#8n@4fpZI`_7R#>JO@zJOt~iuBPYg2DfKB^Z+H7bszZsSx$YH52S$HkZ%X6SAc1b;jVr}D@t>dSfR6~b2bXi&+afc(o`r8QC<1orwcg4cON4)5EB0nNxX2S{F zBD47TW(m`%k(}#}Ds(YaR`%w7+EBx zY>D@6DO)I%Gc}gaAywS?+uJ73Ue_ve;?Ig@81&Iw3lVzBw&pzKXVs4d5~!kmA<=f@ zESa7pWltq<;N(HfVuEtniQO@HD(Ib_A9BnRcQZ(o zX*NU~9ASeMRUuIkRZzKorhkZO@6QQo@2y){?H&U^vwYFyVm_Nb=4Kjaxb*aYRCv|) zZen)%_@{>W$>^}JleH_h3({@&m(zXwJf7*rHk@Fw0b0y_1CG1C>z%D-rgy&EY^%;I z3_7l-s;l?M`G`<@_}v4F)8;QDsqHQmB_ z@#K28yWRpE_z8ZdZ+O|!d}|$(HGgqBYbW&|j*7V`U$OZe*4yxKJ~lR6*9dPP#m}W< zqI_i$(U}rAuyfFp!1Tzn@qQQca73=nGrj0PP&VFxb>HK>lgxV~9;%SpU)b)8n~TSF zakn5iVkYP;z_sB(C+Oipcub2HO5{xhemjCbl%BXA#J1U+KR(-J(|gma4;eSP5mjfQ z69}}+tu>3`<=Y72yYN!VCoY@t16CnqZ2hg*mDEn)b^S8Fjob{M5ytqcCkup;U6N^h z`24pS5Z*59yX&gg9MJ-#^S&?L*d6iJ9C!+62IzRhtLtKhcpmofyFC{+UIrgObaVOk zg4NZPmQ!VwnghNiMHIb$(tACu;n!9W2lJn|qBV?AS`Va1jh9_FUIn|s-1GNUsI0Bq zVe35~D%}N*k-djorC>oJgXt!HVDo;qtwFY?w}V2`QkR>$jaTe#O* zC5SBz|9n;d*f9aUfMj}P1WcbPAGSQ~FsU*I9~5`S(!ZNV{v_(O+#UBLXHA^C2E@kW z3g=0VdYO(QqlPPA7RuFAo(1@t-bloRv2ie1y6sB=83gEU@kSC?6wb5xY1k zvI3y5G1CRKdLPWEjZ7}^wVaU;DYOv{V^T&JF`z z{7at3kTT2?TmOhRyQ1ZlAsm&Qw;F%|1$7(r!y1$_lD zi#5K54HT`cC=Ltd^{0;=Jw(qZ&X*F56U(lbOUY}KTG|`Klg+8^*|BS>WlIeX1fXW} z1T3*p*-uf<3=SoQpdvGl;`^Dn_4BEu!T91BOrfU$^^WK{ zRfaj^@**X5yavW}m?@($;-BDjuTZmu#xp*eg4(|2Zpo1eO8Q>8qMOsnUJS!{fa6xV zy4{vL4~29lq~RN-w*XLSIa?7hav3Hv(EmFtUH+~}F)vUH9$uQvv7ftNZZOu&e>Sm- zI6@ilx43C%KicpnPzOS`^SJF4sxL>PyKE^FTpKkC>i;MZ7EUPXqT20mA$jf?OEnex zU5)Ug>2!w#nIak9ZoW+krG3FHD$DwLLFVu?cnl_BwkU*sdBeR7N#jC^*F}}%uQ`Bf z)6)1N`k{b6xxAiWRe+&=SQuIbKZ5eKWc+uK&5)+)Jcp;5CxN& z$$t(Dvdqh=IB*+W@rTL|8-UdCmP+0WP2xE$B6n!AdJnk6$P?|Hm%{=-_8vd_8&gL+ zOo5JtQmfPcQ2<<6!x{fqK`K8ScjUC$Dc3uF+9ZpS4M6HJjDkZ<=5)-REd)pSYJoMZKfAJ|?hm)c7EFQ^h?}C+ZTS z*m2>~Km5m#ddxBoRU+m}5RH;Tl^~8x6*fon^CR+V=>r9OJmTz8TrK|W*VvR&Lv=I7 z(q_R|_+Ojoe3$6lsKVa!C2HND?O_C^kOLVE9w`2)^X?|Oryc#iD!gkPC-l|pg&=eQ z|3y_~&Zbw6uwu?>6Dg_HIZ(J@G(xsp`gv=9}QKc zcYIysLT)oVpZ^_Cyp{=UsVDp@a{8=b@1Y{7xC_D_B0Qk#;(oF84DPi`82UYt-;J2} zz;0F1O8l3}ym{$ma$UryyUOjCiR=b(=8t*gwa(7} zG7!77O@x!I%5xtaXQP(=ek(ZVCbmbeu~A~HJ$`^)(n@J#BIr~xZT5Y4?MU5LkD=y5D{L4S(NM%6W#r^IC#N8Yici0TshIajUxoX;zv!R4yym(puR z^1`2;nVh}EmZX3()5vm}KmOKpNCXGGO21_M#Qvm$r?R1zk1mp#OiYi@qG*zP+Phs)UV9bfsDCdi@Wyu=e;NMOaw&xIJIET-D&*IIP*1x$RD>d|~I z^~;a-wwMvWQvLK=#Y2Utuj44Dgt$oH-H#W6AI1Nb?^_5(H?c&`(K$q~n;SDEa0_XN z=HP8~zw6K|O~r$<==+ki7StheyYImDzf%m}>}LzFK3oD9;_@FXI57d`@J9^Uys~Dc zUnbw3W7&wv`!Bd77s2e@t5o;v#L*E+k|_Y0Mlsg^@OPBK%3o^7pFbE(9-lh>pdmcj z=|F_0gZh@om;H{;HoYgb``68t)%#uTMpmX+=(-BA2($kl`cCozp98T51HT1KiAgxI z(&YBD0Bi}i`=bm_7TJ~1h3pY|rmr;rRfF)x1jDf=(_#n<<&kmQgX#Z+#DDC0p#N{k z{Qncn{(qikGneKM63nA*FOC}_>vJK=7QQNh!xx*0=J&~1h4({yL^cfZO*~c)J?MWS zcNR%rC}(El>)3r2pZBQgvVXsG)ZRvPOvx-UMc_G0L!>6kT=vM@3!F9K)- zKju3w0LQKv%IjvG_u0|{l)t>=I}aNdJCL6&DOGOEhrCURTzcNY zg20+M)#nlm+#3k?J29cZiB+{0bGocjJ=xvsYhzk;we2mQS~>lWNJz-1j%xg?e>?6E zi2j=NatdvdY_lv_Zkg8Q@+ddvYF`jIRwB^H{s8)PdB0^ridwt(33XCj^L`V(waJ)R zv~AP5PSLeG{OQAK+4e30f#RZOf z(ae4=Ly6B1?y|v zwHWb#P19EM2RtJXKA8teGXT4G;E@BE}Jsjh8A`uSouWf5=>e% zVL#H30(7pJrZp&Gp0#|i$so@z7Dl{U0(4k5tt&9pi8m-P zbZA93JM47%ur+ns_a^9R$0xj0G1bNrpV|8KKOI}p|NWUC^9;2r^}C>I%qEDMy0TBtHLNt~qx$dqq#vNXIo(2qi z$hd7oLfIo8ZfccP8^ipgj+YcFW7<6Lm5#&u(Qw5B8#05TY%A@pK54t2nVxSM-m#}h zM!L>uSBF?vRG3_!v8IhO;^_eRvB)K(O_AHHqT)||TC1u8(@h*E?ft#e8>%f{Ib9_2 z5Gdt$f4X=@o97564%+-Nf0UC#Cfqev#?`L3F4SMaLRN8^I*FlR?2aDul5&^wb`xdh zvlbduLF6Sh`Oity96r@cFavHTDjJY?U>WrXrgNyqani1IS?J) zre|YAYr!9!E1%aBM#J}Zlh>sQ8mceuuqO1xrcW?HsXR&#)@kDzY zXobSWGe-y@pcu$YDB^BO&BWU|9I*BvM9?eB^BMi?e;+_#{;yxZ0?9t}`hM1hADFL+ zQZ1!hR0fY(yXtl3O-VXo6BX1oCbSPZO1Nr;In67#zR6}icNw*=VF!^?1iDGXdPjx0 zKhFg;evFF2u^P~5^ZRf@Xs;LD%^ZbNEOGwRCa!t?{EE^J)qm3mgja80u1M)`;5u>X(G5OE0Me#(_$2rW<<61 z$dNDy7Hcoy<}(n5P8fORGrmnNM!M?|UFJIAB$`rnIc0ElTz?J`xD1q?ps>IAmQMT_ zAIgSWS&x$=+_gt*FwxwT!1+snFZSWL66fm#*xh-I1$hw?iok-tT$fyaEMIw=0!}E# zr3ekJe|nVyMg$XKO_Hti5mM;!21hn}+`S%3Vll1`x#;DE>f)omiV`flCpddPhY>J* zzRT_bd-gp`-b9~i!eK9&7X}9ZD3Qe z{_PSz>9pt%fFiRfMPhoonOeI(g;L(u*t7H_J|-ZvODP-$WYm{L7R}+=dDOZ0H^1rO zA1h9dY11f5I;L0!7#vV6r_zFmkvf92$pBAfRe~HiGZdO`?V~&+v=3rrNPxZsOT|ip zN_w!mxY?GR=v*`dIo$0})^MA(Q$*CKRf%hm*8wq0AMoxYAT z{X#*!0JyzHKUUg%?5jIDuK7HiYVu?5DiZdoJ`O^`=EFths0JIEow}U!icGsrQ#D6>mu3VY@YvK2+Hka|6 zZqID(p9#U+%|%?re`&TP;x$k8JNY)hZSiLEBUlIzwX zkpK2KczF;Re0~v=(M2^=<#Rv1#A`O(tK2;EY`h-lgIX|Ao*sg`Hso{*<@BHidIX+o zBP`V%!*L9tIM$B)o4gno=Q4E%RDI z!o6-hk_K-@Pi#;gz7Q?!su);liW}^btOdZd+OUzb@I-=LDY@34EP$>XW=&)(KUSxN z!b?35zHyxcW8nWLd8`6J1{OQxje%CStx*%+uZ}u=9AP(cJt_(Kc5&yt~8xxu^QKR$$Hg(V*kVV<1T|= zl)JA1Z;}b5A%^P_^%jNKuK!q^&jJz%`G$vrf2TAxe3kPFkFqve7x^6i)TE043#uvMh( zoyC}z8zB83+?8Ope9hBr)e>)W`Es*wdf*5f_0Qvja5>%98VoL@lqdAG3xKQO9**bkI7)6C2_y zf7_9f6L5npC#rYm%&6GOl4c`CAUPR}J>76f5u{yMl7?>7a)mofL{g!Fghsap#0f(p zdJJ>VoLAFEWGApx_OGrTBkJv5R9s_nq;%c6X^5y6}NcKt8dw&vq==Z+A ztgG-&eD-}pXn&t8ZJc@h+Jfw&uxf=FyA-hEnc?r9ILqlgIi>c)^$|FK$`_Loh|zEQ zEJ}|Y9!a~augKGf$>8Kt2Ps+V-fMeAOzUUinJ9ItZbXmeQj#q7MAg&vB$!X&-`hLi z-MM@Pt*yuuhOYfcMySveaWZ2##T3_=Mwiuj(_zG8OOhNiZC>_5L@fH{Z#k}i1$*b} z$?tvBG&fuV=ZYC3zrNDLJRlxRRF&Lc?GT;pJh?=E2+|nYD`!#RkT=%(oBAzeI40EL zk}E?6(}M)(c7ILbOk9I*!)N1=8RHWh3tY;VIDRj5FS=nO@r)qoebS?m5^l|PacxhI zpB!I6E4adr_ZrpHpg^9vlIA?cSNuET?`M=1v}J!Df9FdL6o&@=%D-X|YAlRRN>i$L z)xIo{H-6ihij+q5^AQwS8@^OnBD;KCRr+bON<^&G+NJ82h-?Lyw8(5oR&r5G1Ua|_ zrfH`i*nBW}ucrj`nE>=(aB`vDxd8L_pZ;k)93&!4B5$9A2yMXC`8}1pu1=^WROnJ z-6`w=u`d<2jw3087%p?m3U^aE(eWa@@z^Lusv4~eyCIm_?`CLwFg%>hwFG@(=&KZ` zwb^-BCTOKSO3LT(#^F=9!We0|9pbQEI$RFjUHYDU;)^Qv zl9a<9<5u>@F_VK&xM8zdQ7y{NbISW9c4{Sej8`tzI4743kXOwLMNt`rW^u88SXReI zA2~=GeG1}psowui7?6t1{2KRVlxVl}@GS351fjhVaT*W>U>FV@+Ys#u13Y=f_R8YQ zt2uC^?g4o%DaK9V@TpArc~iMp{(;K0W>2`+ml+3Gc@V*8>!0yRDldKDKQy@#0Bk59 zI?3(6iA8=iS=Jv%bOqIy+|Q*R=GQA>&Jv!W1B34X!D6<;->DelYB^uF_0dIF?kjx< zknc_y3dVo;rHlyneThexOmYB~g7R|*eoUVX8B+wK8l2?U6bBX1GNEpp`2XH1X!#hZ zgGp+OZdeF)Fk=*yW2(D3piu4|6Irqh`Ru6=g)_Up4Afa0Q$ZGq%~F#;%*p3} zye+4Az3oVi#s3kfKCNGkmc<{gQ5bM>VOertzI~6~7Wn$CXE1Dnj&pk6cg}^DmLdsi zj8`ay1vkVbUAcIT!wEsU?WUzmn^7VtC;d3b%kSV?#h(O?LBapJxYY9=9KcoPF-ICE*JucW%GGF4j}aMZpkkcVDl zcFN<^ixL%MGadzh1FEMG4k;%}n=|1}i>!uWE__XTRhrI?WP3BEw;1Y`!Il_5A)09+ zpB*tC?Pc*!5qhG4Ko`5qEeo{;dx~(VOehsCS;DuPg!~rpcrYVOlnVh%EO%e-kl=S$ zM{I8>82Y&T$#12-JcHjudY87)zA!w-*g?L%+tig8G+{T0LVJQ5L(hGlv_;LOQ*ZQp zC`|AzS@coj9pa^zT6pm-P7kt2sCF?hWiv)kz2e$^VsJfm*yU8^+JQrQ>9re-Ece^V zH$3FIVPVNHnt2&sP&Xybr*{TX5wYxAm3S0U0%$f7wRB;0DgdeVb(^$jYY~wkw8Pp1 zW$ynhL66WmKmp%}t&sQI&mR9K6?hz%H|hi!(&dPtxyV_N*%w_W3U|v_zJ@KhLE5d2 z={!eZxkTu#2U(VMRl>xcWRrsTNwf_+V^DCtP}S>C?k zq}OcI+{PRtlVBa;`%mL0oCNc!$RVS0_%P=oBWIa+4vxXzljegzHyI^1-^!{5*p3`i zGBf)foBt<@N$!x7{@D;Df@xMBYJup!c@E^RvIztuUXuivfyAA+kD^Ec#~yEvE6QHi zdy+EsEf-$1f)46*8Rw0`CqTxGOt9+?mzxDJ3~}Lo()t(MO5f4~%{VhLEB??%^}m^% z9|0X#wtzof=WK@TnpM1~8gmnZD5+pSK{t?2XH*}~L(@qN=h2G=mrXL=#TRL3Bt%4r z+P)}C(}SzH0}l85^6~8#s~#r6S*$xzC&#AYz|t-)K@aMp*;6Vwpp&12Z4aDJ93u*zj&L^Sf6Gk8GsFoD2Pj*D$=w6xhmpq@+#P; zByAgbL>n;w?3+24m?Oip?$5F4wZ4QV5%$oi4Pwc?+Q-qBqtAf8lq!625Y4lDt=>5O z2t2aQYPWQ{JWQ|sPNa6D-8v%UunTnk-D0|HrN=As`nvMip9P7NR=!5iIP_kg=ER~} z{(r>j=O5PlFM}t3Z##ya`YKf3?8;;TFMj27Hvn1vlLXwzhC~Oi744VDy0rwSn{A|* z&Y|B8zI2f(ql`K~=Ll9RV|t!TEpBh7W)z32qFQ)#fuS^3Umw{3Y$jfC0WH|qCly3{ z4Yq`v8Y3iXLk)Y|p`U7cM91o}-QKYEwj(0uYxas6R8C8CH0PSwT^v>L4s)rP-LEhT zWPF3qKqKM2&xkd#@okyJc~x%rB53Q{}bs*%s;)xc809%lF*ub-QV!wbM-#dZGR0| zX=GlLpQxTAC_2dNGwC+2GDN5{s#$@zU#!&ZqbKQ}lUL+}v*(4{cMAE)zG(zOG zG_N;w4uoF)vbs21L5{4QUb%R}-Mf0IVgu6XQ_{rm9S1ogE`{lZe9UGGdx8tJz`j3P zc#cyJE1{g6w}nVtrxXuZWc-Wo1oX z9xmP5z`bB`&hUp@iBxtw^C95Tb5AJHmyrk6v^(dumXNm4M4cg+=X#KEH@`+7n-8me zUt!l^-j+VMU_wHo6?&!;JZ4*NIF}|1TB=XYg#2w}BT$y0KqWOr{RnFgU{E<*>zr4m z)2y*a(5^rKQ#%vR#2!t3{7-ul+1L5MCbwxHgDIQSGx=yOY62mVHCt8;yBE#*Wtufv zx7zhp=Ngnz!8qOdG)@_d9TL!9wwJo`sPlGU`1HUsdi**cI1|oLd%=iFuo>A>z**pmq{JH z2*|y9)u}&9XbZcZNOolQ3;t=|o zO-h4dVQNkDL%kFh=G%mXz@rZX5#Cu$_=4*Gs5Jf z5E&g^e4d8;`AI>G3-$<+hyOzI*`B_U;2PoW z4Mv6jRKGykMtibRi~7~hu=j}#Giq#toTUdXd^U_wnroFok7d@1l4KiGTAovwAWQJz zH`FoK!Y7h$5$`4GEe>&1EF(%_bE;pKT(i{?wV+R^H7sp02t8Y{_G>vd^7|_b&dWpV z5rW_AP0Or&*Yn&yjc|RBgf=Vk=3%LRUp(x^jxqCT4V&cU$j;3F1Ft|(zcGgM=BJZs zJ;92H9^?Y zrPt15cD9JrvMP4&jwEsB`CM`PRa|@1om_k4U0gNl82;`FH^tMmumgtb}?8u&G}WG({1SnoCwn9C1#`kNQ=_545y5ER5C33n6$tiA1Si zLmV@c3qExx|Mi6nm_I5Ci+lL&1XX8$EyAP zR5<2x^KG|q%gtZqhVdsDY+23HeFJ#?7CaJ!+vgqHsv*-fpBtmJO{>YIw{K`P8ja@f zMhobV1U@{jFcL>!%BTM0SN!b3-}9$u{)eC3eK z!sD61tQ)`1cYgD09(?#u{O&K$@XC+xAZkck8 zp2hST)0i}Q3Kvh!Wk4o$Zx$325tmF$M=y0PZ9`ue^ifw+josj5RC0o}Ph;TQ)EbRO zqtSd&w1ECdpgzhrV77)4m6S$mS_YY!iNwc*V3!&iUMLIv>Yi`tmk`x2>V?G-mSiV0 zayuml%Q$khnfitznvSjDt#x_ydGi=MKAEW8JmyR(rm12(>(-S~Ufo7VR~J3K1N7S? zu_s278F!qD(vuu3^WZUv&~}E(Wy5AMVN_ot3>7gu?N)BQ?rLtD7Dj(}3(cJak~kCA zF#%*wKrbvhgN6&s>Bc9yBQqp4Sdwz-cd(m{ce^&_AKl7 zG!plz>zO-g6q)5KS^DH3`0}rpvFvCIE~_aJ+Q^VK|Lz1utWPF`furRDcMA2%Oe@WG zwQOC{PeQznm^c$&=>sN{iNwTAx@+q>UUZnU#uhp{+SzxYkoLwZaUS|L=m_~Ct=ZvjLnar>A)TeR3tZyZAv4uE-@P#)d^BLk7`Zi1Oed zo%K%anUlzvlSr7SpYFO!Dys^~KXZ)3dk%2$a0A1st61^=d$@LGHrWwA%ma;7H1yEm ziX}HUjhw_VOj0m9f&OQK+C@g}%r`*ou|dLTWRtlxlQ`)Q#BwlOI_a!#r}Rh|)9zfv zLo(`Ln`koq}+rk8}KmFJB-_J#u649 z+#>Gcq1|9mFBy*F9Q9$02*YMEV^+~6KHf0~dIuODbK}vz)Mz6#CX!IQ1&bD0WC>As z_75;LIKrs*@{|Efh=d6XBSZq3{7#1Y2N@c6iXH)fpEZndhZ#Fg28PCPsjmq7Em-Yg zL`2!K8=MRe3^6d`60$Eu$Y3W#bPEf!VwQ3U>|tYwq7&%%3KSVozZyAs6a0lRZ>$3e^Tt4d z_!BWf)}`xF$&q+(5Fd#5meL)Emi`3)OX+i|_^*$rE~-ppOcKNnObzeznS+jvuG_A%iII-kcy{y{e#I&|pJq2vDm zoj~i*p+kob9XfRA(D62)6X^FC)T3sD--|bRx9p8e9NsCs{;r(b2}Ess_fD-1HE56B zwL`mBLIY`dwKODM&HZl$k?)gqe1Vj;a@E|&F(Lm!7af03h%Jbrsb%hBB5w(*rnKE> z0tWkkKp?(aOYie~1A1sKe=UM~y-CAS(*M4;7SQF*^a()xr0~_wK3XWHoBHyjSLvw* zxHPo78keuR{LL_)hrdsm{cjlW%L3)5$|-=Lj@lCZw`jtsc=LBiQWDU1#PYiFxYdWCT-um6{%X6@Lo08e8+Xv( zqsAi5SJkiblfwCX=sFQv8~+>IfmR2BdiYm>z6-~D2u8CN_h1_}JO78rj-;6mul^BzHnN!E#9?Je)(hpR#`)7M8Z5+WoKZ7V4VBUN-uY9~% z>vJoLsk$ypldVnPMMyqn3wvCXK%WQlCE8 z2=0cX?Ax@T$G5Z-voMVqM;A4_jIn;RL@(4+lHmCmm4H=x->ZG&y00*CclxJSu#-`V{ak_q(!O$#{qilr8fUUj| zeB!k~^2EBWY}z7iU)o}?HC+0bHuC;_n2JspWW*6BVbx2~e>*5LE2Uy=rEL2ij%+WX z)e%c*Toj?kce-B0?$spRK0cE1C57xetQikUtG_*gZntz z;bO=ugWh>d9G~I6{!l&_aOp5|s6S~qMne~M$BvV??;I6fUPi6SWX+w!oH^N~MNAxU zC&WE3BZ$|#Yko$|woyiV&#~{JKk>qo`^l3$3>&PN?D3?{n8loVQ%H|i+lU1l@FnF; zz@_}PBj|q~0SAL=gu%{6inbr(=nKDP%dVH%R_UV0X~tp_f1~)fmQ%3n80U(b>2L@4 zmi~+KU+*`5jC;S%J?MNMulJWD=n=dQUjEZV>`H7MLp-LQ7bq>;&Yp53UbSP!CCVUB zHtGXG>ILL3YL6V@HVGK=Y=8A>PnwCnub;8z& z=jDtaD%J&D8gK<-9>%04XC_~hw%#`?4>d96nQ&NQP$~X)NhhF<6(kA z$8kR1_z`qh_zQl4Ya!4kw-CKnD)t^B?|23E10G!Jv*#*oFpN=a|2>*cXZD??yu-HDElAjA<z%D-~d=(aBIp zK6@Vd3g3F_X@0xmEbUtgX>=GJ+LvtyTS__p%q|LBhUoVRQPUz!i2nvTa(2$ zRu;1Jk*%C;?O|vzkLKPnIzra4aOE}JaPtge8qRR;iEZpJ9ig*h6Gat=IaT9i*r|5h zQi)B#8`7PiXE4ZlT*`giO*_NRYZ|3D6KgDZ@YH9RXwYN{ezbQjE9?W1bzOV(Ci7<}a2=PYbP;ZIlJCl4c4|1$>WeBezgAxsbPkNknHQH!2D9FNhDOG4 zNk?KdnlYPX;PZQN4mzbw-BLd;Mg|5L92&+cgaeZhb+fty)lTu&bF__y5xZhBx#2dv@F~)}a85|fA8AG_Fn*1U|b;dsDAS2?}FMh)#LJWLLz6p!3 zm+sng9C&&UrG3)D=ocLahZq_j!R3)Wn1yg_ z4P0ilE*Gv*m*hn{9I->Si_54>@`mJB>?trXCQ zFQW|g^=o1LMvEHu@Qx19+ds(Q$S5AIoRw~>?W@Kud2o(0*xSe8@UY}jt|g4cCIP%- zjH+$=JnHVAbVOPX{@J0v02oGkY8&M}Ch{vnSu;Ntn^~C0`8&6YFo_+Hh~4!_xs8tE zG<8$5A)oevP!evriW!kcLd{;>V^X#%j4In9uhfYmdVZW@n{K~FI(PLkAT42xK4}kQ zLKxj@8%MGCSY;CtVw=j2#NJFo=EsJ`=KJUy7-o2QNMwj!V)JIrUOi&-gIfI$4vXCi zxigp}NQfQ5?-*n6Sv!+cVn~g*Yjy7z+b~%=Dc?~*W2=Fv%NLR!>cuxCHmsh|NV`=w ztolX2*NJW_?xAX532l9LqLwWrCo6^2$Oz)% zqKOE%3JLU!&5np%)gC0jV%KhI-zK}0{>B>04>d5FoEvC6b`O4OHv`f}oo**Sx3m)> zapUD~@cSfhGKn4&fAzsAX&45-=o8dg)!V4#&8waam{tEI6Woq^A<(t-39(OKGoN&a zkV&=cliMfdtvsf2HbO4PiYkg{k3yM`VOli7*eKEe;$up z`V*OK*&~V4Y%+!jhor6Az>xG!s(i$D`;=~~9~J_n`eCVl(M?S{)UpX_2i?64NFGM~ z19a9@bMB=oBJRGKshM#kTO`jSL$h6FV>I_a%3S(1rK?)6GBPT4s@j9}!tS9S`ovz9%rR+K21_{E8EqV_bkN@y#?qNF5>B;i z(N(nx8J|4Ey;}HwIh<|}KIun2(uca$@;;+Y>|IUZRC^WqE~nU*N7|9-D1GmRwmFPP z+K=DcLs!*FHvMcHtx1`LNgc)6OxUGv%_h}9NWUQCF8DCyf&GY@G7jdw;?GTuQ-@h9f_NJBruMteq>DbF{++Sz0@5krlHYG z*gR>o2@cHCKaNP*E1Bx6tXlu4R8U*YsEQUViO0_O^s!3Qs0G zS&VzQh^;?-hLa^FoUO@c>z|+CrFAc|tx^U*OA1*@c0y!OFWw>qdL)wg%Vv?2&`RF# zUSQwhCVEmbh>Nk~@OM*tY%^OQe}q3jzn+&jZYHnQgDW!1(Rqf0e_F?;19{{(SCC)dLDi^@wD>_cKSqa;DC9V5#0l=}0`*$Ye5OM*{@8NBYWu#VtWfI z*z|LrcfwBZrA=a_w1S@FN9mq(8A)MQ!p|>Pa$;ydz-x~` z$-}>Xk`4R!lJ7Cmbf8Ygzi1L}zLJ?y20{k%Ikn|Q9{z7B+a23j|57PUJ{jne`ze3q zJM8R9!x@=LPPFP+z1S*W=JEA;yjU{ClqsF;{>D?BY7)AYn@fsA`Z7-|MVlXI-JgEX zV=qfxZQ4wkD+OE96f!~w@iZOa)jvMT<9~jZm$&R=`<8k}Qf2Zvdooedh4t*%N_T8J z*5qX3g_Ntwl_Jn(y9#Nj>xM~g&c6Ht8=rWJ^(V?G7)vEPHH!GCP=@PIaAw2L`Q4MR zvhLLlymGjlQyrm9NslEtu8ZQ=WODt`3mhpq%nR#Fs2;QslPx5wpEv=2cUO=*i>QpEhyiTtD9F(?|?;V;Gk5d36gr zHkB|qIa4N6jg-B*k!>%^#C@=iozFeTD^EPb?y_b&jd8e3H?ZyH$9d?nm)R+8H*X-0 z@YqDMc7ufLRX*!oI zCoSAY%*bi-&Yb2qJ6x=s-^KA?KF8M0)eNp!L{3BzyB>U+eH(UD>MZAx-#o^~7hYsX zaTj&w=`7B&W3>vg87QIh;7k1c!9ViChK(HS>87H=#pv-SqVKtdY1s*+cwob*{`Ar|*1h~PCn~!cNxNJ~<0Qro?x(w@m4O*cNDo2C zz9Kkd47BF6{ny{;F&R^ydwBy#@=NIw`Q5MnfMeyoRE5oFS}a&BHta2XIl5;%-`hMu z&U7oS2cG4XKRhgLb32cQVZz#Tj?$ys`R$fQ`fX99ry3cq6l-N{z5l3Hol&AmvIM2MYmHlVVP&YbCjf6Y$oTOP>L2*+pXIo?v zYD;8hvgA)DH0r%BHBcMfz4TQcV7uy%{_w1{|AQPj(oC;ixZ&_wjz9k_`&weKM8=Zt zE#uto*ZAGOZbltZOwNqNJkmi=>2B8l`AHso^m*2AKf-}S9XL}Gh|7v6Qn=*bgG1{C z`aJ zB~}Rg_Iz4}K*z}dIys@6lBai3+H4|p$!s#BdMJ777rc6~p4QA8xc=swx#^lUEL$*# zsVPxJJIpx3qlrw)C40tXaweG>*mI7q-Vh?yU9Zd#++_oV=3K@VA9_Ext;!-driao^ zhbSl>#kOD?lM*{9{PQ1WaBj!9V!F+)upJJjVIIBZQ7R2*x=nerk<%jZmF?%X-)&}h zTNGgn*YLqxXEViL!uAcXv9r=AW%fQkxOP4(6ZPruH`A^cQspe>un_Cb>l?A( zb}ws|&1FSWr_7k!+0mZFLT^5YN=B&jCUM>6nS@9uqdi0j7{@;~Jf>LEEUh?9O*~PR z#oS3@(m~s#ISk<*Imr{B{t?Fpa>@L_=lQ4%JTnImaqvJXW%eBA-Mor9F@wPRezRf|tI}*}e$E7hlctq(%!`!{Ybz(c9N@<(kV`G-n1=Q%4ySqWaY5pP|H&D+A&6 zTrCsZd5%K%cSkU2$!1Bam1&N0wl>S8${fp#ln^XxxrC*gY9XzMk5_TVpUdi7ujkGc z!YCT**t(^S$OSnhr$rHIkqLy5@3=`bn6o$$M^h7Rdn<9~OeZDVOZ&b}?B9Hv^7L!D z>ZY~avN{Z7{XsVU^jV7S%b9oAN4a%L3hBKvfj! zD7Rg+ka_-c3Qm+zWlkgWvbju8>ZkIhy%g5?aZFDkb@VhZ9~DAsTgc6~-omZdU&Yed zQ^`s8;cOK$aj2Hzm@vj<0#kKV$Y9bM7F~HAH|01P?r&pjh4c@RG0YPZ(_fcI!J*Am z`%+0?FqLqb%;7?^U`?JS)!O!w}m_}v$tr0tq7al_qr@}X;Tm=@j7w*P*a*4W9UNZp2X z6!Fy~v8YOBXOBEt+uYyQkX9=olMgOXDO~PYER~)Pb$zjFjIN9yk)msM$Uw0(nt3tJ zoPOkSUOGNNTk;Zaz2{19nli+ho$Gn!Ko#wiuH}~N)^gW;1H%=yY}?U6?6O=^(_)3# z=TW@vcl`9>r+6mMh&f{(w_Y`iX)+nMn*w)P{XP#volPqCVUH}UKVDM6dFys zxtS4nzqrSfo)AT9jFe4(1uf@x^Yf!#98<62-aBvR+BK`0pPRu9M*{_Qo$RT1FgYWR z>_i8xXSZ|q#6hXM#WG<@#eeDrwyoR7ank}8UVA5ZUVkN*EnmW%oJ0~L`e;3Qn8ODv zDe`47^Qx=4>+(3PtqtPVi7PRIoS8ma_rJ>K-|wIzWGM^Z_Yv;Bb~@7|hN#+eg0eOr z;qfq7DHHf}Zd@5xaNoVRa@Fcp%%47msZ%1bIY$}kj3oDlySVx8wOlnhhFEonU3gAl zZ0@F|a37m~vx`ERz^31PD_75qCDS2&&7hf{uyhv6gui8HC0))sDw>9mUfj&f8;;AYvyL{k z+#)oN_{kY0$Hb8spTXp*Q<$C}tC4OsSumJP7`;yX-Az=MTj?{;WB!%%S#`xC=3jOX zS6@Djlg8crTz%f?Oo`Ni$*JXl2ikj!+w zZbrN+l!MU7$t=6-Dw#|OnOMD?Mb`+qGR899B7^O+70h2QWpv|}tV|CftG<}pR;TtT zx~{gILq%sewPzh0*1yCH`-I?Bb}%sL!!YM#eDy2;&aXbTh*-CfE%maJru#oX{BA$? z84E~WxPbJ1FH_&tPK&Z{*C77Z3J#C1BxUI}eBkzZEL^;h<+t9%>KvJfsmJ3&PK+Iu zlvmeq^xSDqOWD5q@{2rouzzyxy_4bYoougKK}^ckd|*X1 z5f-&HB4G1Iw@fS>PO|m2aBL~7xb{vNoR=(O!NP@1%a8$xUR+IOoT{ki^vOLO*zy7| zZQRUDc|s`aWkS?9h$$+GXla)jO~s5Ao}qfkqpjUlLx;y5MqKl-yqKopF1kD(#w5!=UpQeAQ<$@82}@Vb zWJ-(+clQv*{^iV)f%c|r=do=4`^9th(`fZe5nngxVbBV=ndMh4>5vAE z!5>RX+5*+&6_>H(8Yx3hE2jD;=?@1PZY&eh zTF&tkdpRg|`{Kr}yef5D+SrYIXh^$B^rrWTd{WMliNs3Xr`MmudHN`&POB(wB6Q|b z(v4OUN={Jj8fNd7I_#O*tiEjlzKuI+l?ll1Q$5sHgmde4SvW$>f%gF30@MA3W#ITUb3kj(N4Gq;7nSwU<-T6GL6%9o+Xpso&*urEglxWnv3Uq(8B# za_g_7y|R~+b&FYc>q1svGn=`~Ze!^+ALZV;dl>AlqRN*`!qf#!EjmsAU@IpJ+9)X) zVa?}nAg-#4zJdefcQ&wX8!VnZiQI*`gxl@R?JXp~u8;abkMz~bKE&cZM#7d~L0VD_ z@%vt(w8u%W>PJH(35kqm;ZO;+4V{$t$ao?BfXV0};+i{IDPzQp<9pfLIYMvOZjRR` z(88U3^4b)VGt;H*_Y&D&$;rl1hMhiX6Ar@T#MWnK5^s$lDQzm#W=>{Sq7_?L6@^tb zoX9)QiCxk^yz&yyA1UQjbvr}7ebVns)%g>dzIYYa$z*wz*v7)Uu4id<8gpFXOr9fU zy=W10Z@!+D3o=>QT|r0Fu(VY##<*$ZUh`SL^v&<{^(``P8t~Y{u}4HR&DG3M zOB3atWAsbIHyCV$Exeq0Nh!=O%cruok=pJ&iW*&1kFDj31=Cp)T}##RHi{~7+@-=I@c76|$h61YlLoiyy$?>$~Y-ylWbR2Ri4iiR9dMYWILUO|s zNXwYQjNDAJVjY-eyw{fhn53;re>5n4!?}u5j-5Kd!EGY98&niX)^Drv8hZ#~79samJE3+NG$foN zA9f*Tp?;C=6*8>VaV&{xGMV}8SNX~}zs0wI_)C5!Y5eTYY!Yo_boLC$WXXxBd7*6n z6(Bb1Hf0eNJB1r(?d3>eEho!eVw+;X+FJS%JYo!EYRSHoi+6NHCWmTmda!ep4%z39 zA}ME$l2^rw(%R>5a7I&L(ET95U>I z$;xE|KgiJeuziDbUPnj z5+}_q9G`6gmrtv~H7vyFY(K+lZJrp5-)F{VS0p+Lhef(~qXo0gN|;ft4+g7D>`v|2 z!y~V_$-VL8eB~Se$!G4moF%C?LQP6f^{3u*uoEIALoHdARxNVmfA1)6r$<{8jaqLz zHi}bzRk3LkRv|QI-xyvgOQ&0!nA%2bY)sDG()%d66W|kjH_9NHvYOjI^%cJR>8n{~ zIKqL)zs=8{-p-CH7sE2Cv=|4mI1(_MqZv^X&E6hHMFFoNh4jf&SaZ2Y`kN9qKDv{0 zXDb+*I-P{+IV4JZGf93_zvtDSV2X-j2ijU&m)Zs;gb=$@d!klmZPIPAOUGbx3ZV?F z^YM=kF)TLGBjz9+R-mRT790*4%wxl)oRuA!rJTcvHir`FQ0uFu_mnb`%FuQpQ2mGY z&Vtmf)tbeOHTUqLFMo}1efPh3@JGMmw-4OKzb%W!BYm0b&)x_rKeeTqF&tBvkk_eI z(q*3Hl_SG45tgz~TEhGk3rpRbdF|jf*40eMlz9*DTQ!~Qtfy!?x1G%$aWp4f!S&fj zgg*-jotTbF*D7TaN_=#PoJ)a8A7izdiIC};TgZz~t<9BlqY(5_r-YaM_@%Dh&M`(c z2?8kxH7=ON#px02^JXZ^Qw_2t)c zPihAdP1`w8QpY~~bu7q;Vp7UwK#ENB&ytM8# z`~UDHl~UKfWvj`NKGzt(hI>BuEq?r!+gWSa%}c-f5~)qvzvW4Q;XQ_A09#~hJN z@`Ahg_!qy-SMQ!eO!-qh^V^^D>y3GwYF2fiIw9320%;mVpRoa%R1}p{ThmFeOsss^ zu-PO(tM1@~U-}x~{O%9<-VcAquOE0HA737e!RumlNG4UbP#kutmBA6|+r*xfKsBp2 zIArLZ!rW^FIb-w-J5BRSi{+!=@?q=STz!tpM`AOp5^mz1eA+c!d3_GqG2N7J z$fId6oY+-!n4CCB?dH?8j77-xGNxoCl4vcby`_qRvrV+tRZ>w}KwYoYxydG^v!0`c zm9&Um*z68uuZDyjDFC=Gj z43Yh%bT(B}-q1%=O$D`Q_jBxY4=skJ%(+Zvz*F6Hohqd4+yLg8bI6&QPKvFc9<|Qu zP(8!(lHT%Jq&sB3AZDnVjmbPnS5-MB2b&p7$sudm4AP{tbU1`;B}HTGsOH$FZJZpG z&U5}U7Eh1B*Hp-%@>ZNCm&oa-p`?5gm2O|lTuQ>o=Kzg39;Xcq(BE!209(kBC1 zQr(OE?Add?T4CktE3=XL$G^-H4h5gjDE4C^IWv^~TdQS&GBasT79lp7j2wT7yy{kt z*7Px0caDm(W9-;gLA!Ml({HZZG{oFkR3SVCm*b9GU5rkuJ4 zClSk5GAq}}z=?BI7W8A4{yH~1j`(m3hT#s}1v@2P7lrk$v{j#_iY$dxnS0)2{o#rMvuGySp?x%06meDt zy|&H~+`U4)q^+e+OC)BXf!f1em=@j1HMdM<=GX~}^2;fxbK$dw5uY4ESeT2tQ^z={ zwj7L{#meiKvUo}?b|J7TZ)0tuLt_V3we2*Q9_8%GbDXVDCTiLmE?*TxXm1_m`zz@( zCo<`ZrDRHfV(C6hd3z&g8;0qr%crFH3`dUF(Cmq2>NQKq4DX}kSRqx-M&hqtC4HJ* zNM<_?g=G{R?IdK`QnII|kYeehx4BZ~h$g5SuAr%uq=A3@6d zu3=teEqQ-FN{ct1uljF&8$T)MNfSq|#rZ>Hh+vX*Z=53{=x|n@uDrgyi(WXuz&C&R0 zE@5S=6^F?}c$9_EXgj-JDIqp3iPQuWuErwvpDClZ+r>~@AATXDV>4H(!Pcx91L&}PIOpcUxVs0V- z)zdU|T8X-971I+#h_ZK5ce04W!yVYJxSZLJ4!X*Yv+ab`LH;?4i}!Q3pqGCCVi~if zE%j_+3rW^kgO>gtM)Z(#AoWU2&vK2RUoW3^FHABPA@1sE|$uh8n5r@GxMJPB=yK z<3e;wCT-3P(i4-JoRcj1_0m~ULS=ac6-_Q|nG0BX=USFePbALhWTe-P-yB2ooN3a* z#t>z8;~H^_9XW`al1tXKG;JF)^@gz4ZVWQRA9mq#g%CSc`KQVt=92-?iZL{ic*$FW zbX?Z>sZ5bta;S=qrh1CojkrV7wC&BNEt;i0h72DYWy}>Sv+tQ?WX2O~ zQg?quw?2uNlS}s8Y?7@WVT4YGdwp15_XVhRzWD(y5QRLZA`s^TKrN44GPbM`+`XU+3tO?Q|%uFTOTf>=SN7;9>P`h(D zVwugtH7i)XSSAu~kF+m4(KBZ;f6a2qcN7kplvXtjGa8mmMpmNqTcY1^C$5NCq8F@Y z^|VP$3N_*JI*5!y@$941S>36FpQFQ%vzvKGmtInsh17o&r2JpM@1 zq%EhXMiHg%(v7(p8L$#NeY%v<6sePVvS-9&9O&=+R2Q!;4wwf-yF%R+pl2Z z)Og~gq1&S)s5%Ez7A#=Rl`}{dn~;pt+u+8YD)oNZY%=X5^f$T*&73R*XC~=3FJ`lo zfp(|pAbrc)C8USOF(oyUm_*1solkRhDZR1TL}V^yWmp7Lu3E;V*hJEkk|eEoT2G#) zwz7zl+FrU{>0J56k8;J#WKxXkZmWT?gmBtx9AcAmS##q8Nz+f1*k60ARoYA^-68$I)ui3k^oK-IcERyzV5PibxWU|*vRhNO`&`cI*PiD@N48qN0bQR0Qshu#iUB;}L8KkJEr&9g{t*RYNB13E_LnZ)rsh8m%C+daUR3U&fb!aI8S|5was73|FXk~tI7ffYX{m=( z96MJ@OOHc1gw(@TOIS2@6453PMpL5@+aBurWulOfNOqV3--sD|x^Ro>LbT%($eJ9B z#o0r%s+R`ox0~8%81aifgE)o z1ivWIRvX)B^h6UKpTg{9$KPccq$1FU2OoUU|G)ze1fAX-ot>RTMn)1JA0KpqF}1Cb z9B+p}o6Tlz8?t@-_Hp#+QI;-U%H4P0t&!?~Rj5aRQiwvFE?thQczu4gIerVZM|Sb# zzi+|!@y~GO`<5{;!iZh1ag&kTpq4t=WmedBoX0=#46QS+X7OilVO3g~_L7}igQPn7 z^UqfV<7ZmR+J#~?K|PdC5?1?KoBS$oZEc=9l((3v(p{~4Q;$~E)mqt z$vltO>3tqbj@q8;VnHhFTA3(l?L*>EEJqQp#R+6H79?MnSfJ5Z0KeIie7D;3CKz*~zPxSRl`lghtZ4=P5d+KyVb zF&;J;UejCr1KX=f9F-^SZ2UjLL|s&QX^+Jvui~J+A0a{l>PR>hRAF34wQNgs8!vYS z6;}n7xB-VC0y_JHI;(oo>R0tonyjGk^JxTs1=?~6Ma(2zU|qEQs&L~81QNV(Jr0$Z z@%E_wuOMzJZS7pi6Bm`=33V?@Y4xD|#-U=VH6xPz>mY%ooXl-PC~L}icJK=BT@=r> z1Pf~WJ@pkh)u)VSO9fYMTAr2sagTse3bg+;jC-ATdA)*znCPXQYIzKpg-8!nu$(G+>Re)or}_$C0BQ+<+MOa8 zM{_b`9P7hav4O{0rW2VwjXP(D;FfkBc+4*4D{-{G)@Z?D9-;2kR@VRSVFqscC08w9 zz~VSpaBK+Jq-N(@#??~9q`gygWa}C>y1F|Z+fK(F+exKkvtqkr+qP}nM#r{o+jeql zt+n_5$3M=+xj45~HRl{P@y+*r-Uq+Z78Ddd^n$c(uMS?NFqoa&ssUI%~d(={a%%Aigf1+2H1#m)t&J6`xXKt7EE!Ad_c3+3y3 z%xlZZ#XNNc+DbV%+PF0x;t@IEhPq<5O85Gmk!r#k(Gs%!SRrSFHQ#e`@#@qt{SoF* zC*c>vvmMN*$AjePz?oaCC~qwc@`5$rq9jVH{YNi33q6j|>=2VrZJ|%5EqAP9Uk+`g zsA5e%-Y+p*xHia{!i_6$ncEK`GX$`3kb51xgKjcl?yDc;vyRMPNI^_Zb zp*Y{adrTzFYR|dgqTH6;AaQ#zwUt;}MZ(-apzlFkKiphlSc`dVO0Rc7DS*Y~yn{`$ zXi&CGocwTRdJJh6OlFH8C!LMw2A4@VBprPppZSz9f!;9P3SKt0{asWxO4fBW>MgW;Rk(CKPF zyUzj{1m_3RR_`e+F{J}Q+4JF>Mmu#FY>?!rKezT#JxTZ=8Hp?ODDMNHvfT#2lqXMHAeq zT)8#2Jj1E(B)3G*aR_%zziqhF~T#Bkg5GGe{83x5)M*Iq7z}rM`Gk zSEI792j{vlr2V@Gm=)>Rcgg5yC89Q#9E@#?VT2v`^sRgC2nlG+#lz3&K&8!YE?tbY z8=Pw+sI~-uI-~4r)C#e=dH-pDO_~z^asLLMgQ|C zI{~lr`{EYeDgA|033K0m?1fcd0P~0KlfE%1E8e&Z<2Ut;{GIFQ?H3`70i5j=-QB#-*0X6PwRM4aB6wTNq!} zYZ%hcC^qzvW;69-!Pt%)c+2M}@~0`yq`Ds)<>&B78Z0+52nkZ_8Xwmn5wsU`F_)UD zM|A3Vl#Hr2!hX>Lwb*%wD&l{1)9qg^q*`Az?l$$2%HZ)X|FZvD@wasTA5pcy;HtND zw!?qa^q`NNai*Z^|NG_N0{d^AJ`4ZK#{UsvTl^xQ`ghBJcF_iR1g7@CodrcUeffWB zw2l9Bq`!Z)0sjB*;9ER`*>ISWMq@_AWO;-~tVlanth%V363-n?KRB@?Fr{qUNDUP? z6rGmS`0ZIzeea(U^8WYl2Hiq`yZ3A`lZqVCfp`IE~top2*wc&&_ zDW;@~$GLr`>Yx?xr&Px$?<)J+g|5PK_h+ife=km?6T#(|!h+<2KSgUYX5X7(8fRTz z2t8{Xf(H0_$-?A@8ZbILvl4T~Q`KLvu0mE;?7Z%uHofI&lBVDtEV@sQ@~Ujeqt>oJ zpKi?x;+xNs8}^aJ7X)pwgS||ew)UUypP4^=VL9SEhv^4?*`Y`kMA(PBg4}T4x~^Xg z(QPRP>DTWq>K7cDw(hrqw!Sw5hNeM|c*Trq4S^`9i#69N@_Nc%sa2lW-`3iR{8ak+ z-x=R!bq9Bcb2QBu&}fGi_GH*Qhdj79p7nF_ZNUoKYr?0X!vw0b ztO|2D%dmG{mH#YV`C$SEJkacJ*3gljk=eIm|3^e7d)ope5gx7k1}&vyW}XA2yA6Xs zmPfLtRQ%k-%!(Na!$9c#qWJT0TsphEZ(A-=XlUp$W1kLG7}3Z<46cKmM}Bx5HJSKnc}*D+FJh6XtevrxIt2$#tj0hT{mX*mJ9G zaDR3^0l}he;m}C@-Mx_6bc&zZ^|g@zAZ}!}b>NBYbOxOl1CwQ%z> zZB<@fO~A!A{D^c0*`)%$!#DX!GOof4qKSiyt)bz%_=SeqeHc<^62ZNcYuJWqCCB7A zav2+UE)_-YzU`ZeD1J@bGf;mDV z(~w?`ndap!g~s&=avXd3$1v|miT<-1MmmAA#?qbXkd8PbKepNP;;IZ@GRj)k?ikZp z;TepiNz5Ek6JxL=-?mXRQ^JPSm?B`cS%fA#`X=-hQ62A?)>iqP_!#bMa_k)&r&>RM zl8dimLDy}CruxrwNt!MTyfw1o$f%Ho#lBoKpYJ_xzA1au_&MPmVzj`W?FwAc-O2?>{je?u2`vH#}*#R=l<}QkPKkZ>=fRn zT;KbFY}l+@OByx7y1X=Fp-|1V^wjt#V4!98_p+uQ5j9K5n3x=9(27YFJD;u#58U~E zJbIEHS=Bd*dbF3*p8)67ofYX9gPAR884|*NzBy}(!H@b7lnC%MJ93osk{sQ~F!MG0 z@Lt1q`5>11#Z1Ca4RV@ZhQ7kp8W$?|=f2r;H(i3kS7Bq*%Dl3p=;#;9n?F0EVs_Eo zw&_w;7YEm~S|wSiw(>m;E*r092mgHwd}7LiGz^U@3svoi7_qUVxd@&KID-?ij(3QY zs0jM#QuBGPo!#NfQ8xUh+t-4-T^WX@lq5ElCB9)C+6Z zE»N7ovldH*V_xDG*^SN7mfd;SKM+4R-F$V6f`%kvi19$P zjn2nu{JPXMf;aTd=Wc|jk4JnRxlb)h#|nL!yePRUjKyClJOijZ${xvd9=nbU2K^|z zOuP6O*~eoNZEtUU*gHzrsW%9<7d3Xyha26m1aGvP zFT)5=FTXDcn{0>=BQFjW($bKUV18TScsv}BbsT?le~VkJA)-l-&Vk2H3p`>T+X{Wf z-zwvMa-xko&Ual^f{&Uo>=*gl>+9`1pu>@p@VAVdih{&>F@l)_Bk(}Ge=VRaxmAY} z$gi0^xhJPU4SbFwD5g21NGV8i?mq$1o&EsyzZj~V!{lPglZ$61b5N9 ze35WVgFL0(7qvrZMQ~NMUv(%CZ`fh4OB(qgV#P-wr=|3pZ&7;7;9-U>|KVcGIm<{4 zStp_=^(V7T=`}fXT2eg-(Ub1Uy(GVAkKW4Yt1cng`MyZq_@ItD{vg5U_tT1|n6^9c zzdgVFg+>pwy@}jCH8M#GLDtNPEVChD@TA;k;4N4TW4DeBYsW?k6>v?(+@&mC@>;?v zDzNvAGlto{?a5~)P`Pm#!NHP5Gs?F2CrHS-oX5wv!RBRsqdK-m=q<|(eS)DAWPXxb zJ1MNcvDnr-(y_2=1Pu-25?G_=V_M3`qzD;k(}Vk9XKI;Ljxc*@!JLhCf_+Zx_S)}o zy*%G+@IBpO)T0t+bgXxvk#1|lB9-z1d-TvbXgoBriDL6nYUCC3hd(AP$u;wUA>yOD z;*AkULnJ+MNwvl{U`%#uSlG6V%;kytB=jtH@Qc)G;uHCpxL7F$BmRbotuRh>cY~V4 zQUp(6yf1U6i87&mM|Y;ArT@F8(%U>j+3z1)nyLwa4i9Gao;^7{t#Md@#(??cj|H%=G{nnf{)-C$qQY zzTB0~Wp3KK!EA_j;)Zi5;rL$3f^nZkqcGzyYDaTU<6(c#j)i6UySXej_Xcc@AAq7C z!LKvFU~>Xlh=qt1UzNxOHmiUsBaq%uJtAf=cj)N{_4*6xS>)k%2%k%p%{^ul@GRl^ z6yVm(NgOJg0&B9}An;+(vwQDaZvow&N>4f%G51(R}jJb6~x;S z#Am-#)>40>9?CWn$C%cJ)O@D)?dm4?uz;JI&9k10`|8)Tbpht{O0w&Nf<7T>y^T-> z`5BsY&)U#%L%U=~9;jBn8Bz7_!Ou+v-1$}KgR;$oRqapo&9@Z+Tvkn?gH*Q`vff|; z$a*=IdNGeZp;^wqI(gHl`o52~-s`*X_l6}i)MqVvKH7QSED=J3Wd9`@l)k!Xx-4p6 z31Xm{M;eA^4KlsHNxR3VDbCDT9**#~u&RGs?ZkT1;y!?7#Gu)&L?B~yzjDEUe`$JN z@bXL}_|W4y)U(t-xS>*wH767tnbN7#sSQ6ZpOG~wbx)=n3F;=fAx#%M*Fz>LKbfde zy+fmOj}*)W>Wf8DB>MeuiXcsqt}2XT%Z zUTT&VJ#em4c0#ghqs=ZS$Sk+$>3E+sJ0AP3uGbw}jXMFSxmZ{`|_M)K1=R@>hO4FcfI>5kwm+j>1K(+L8EY1p+`-b zva}2oZGij&L<%=@&&z}&zkr14)FWi$R>fY<;qdFm-$L*UuD3rCy48mj|kOBdt}{kqzu=cQOINB(SkhkBO*hQO;;d}oBFn@S3(-nf|KLL+~tXK zh-vH>G31uHMUz-E#Fk4W;hmUd*Sn*oAVDEqJ9t{*L`9XkiKzqlfot;jjiSi4WN|4O z!u-JyopnixGw7~^XM$4WM11!4nBYgHmW2)d5j?~J{`BOU73<8cdBYQ-Hne-Pp3JVuAd+X(Gvs_7OZ(Z@~~&{2hVFt>vnrqsWox(75-T*K7Xb<1av;!^Nee+ z&1-et&{?A>X77~kqXGzv!1G=dKtQs{N4McO%1o0t0b(^yBKgR!jb0+)d2e|lM7V&2 zazPcO>y#!9S2WmH&QSPN?rWg7m;&G46kxm}_oqifS}fh7u-Lgg9U{1asPnxc;9PCp zG>NGo>HujtDY#c&#iqXNvPzyDO&pkYesKk{wxh zlq(t(IQL~ zVL6K)YPP^(4y3}>?9vHvpJ7}T4({$kO zY8@JaSFxnNn~yg)ieYSD6nB@VSTND<*|K z>F2W{&{n&C^zANg*D2PzX%i*I}Gud8ICCHqVjL`8Ymh}Z>q3|BO*zy)ka_GJGD%9(z2C9;(UsOkVzW}r@rLa6c7@>FlAUHW z>2?iYg;ds_wvc&`# zH2vXLLrbt3w(5kpL{-Kb2s)#p+>PNRfO!7cZ7V?vl83X9L)B&NZS#OxHEiMQCLN@9 zYNfKH--|u$dn<+ZF~7tEm(9Bi6AO;a1U?FM5OHkb;Tfhlexfkm-;~y3)QANwg}rh1 zRg$fQF`A(b@^DIexzP#G+Q@FR;Gn-YftgcYEtEi)Ckic3j!v6voEKCE$bF{xHkPb} zYfujL$(~bK)`Z}hIraH1QmzSR%*j*LJ(*q4!IYg;)-Bb{koHB+8}uAu85RTYaBX%M zHjV%G{EYOXOa_H$+-}txj`}89MaIM+Mf?>I7znP}mFK7!y?bu1|C<@xhBISsetvps zNmNY@o9Xw&oTKK`qF?maJdu(72oQ8?|7TaM_1Y9&GL(pnIYta*LmLk{o)*cFnkjHM zXFxRg$Aqf5X!58FnPRW8Dk2rdu)bbNPGdn(Y810DS(aalhdC*o__7ac0xdyKW2HA( z4Dwfgv*2UIA(!gvO&Ma^dXG>ZKKmRZRhllBhG8@*hm* z{vAD(CpTr7caF9@b67XGFvaF4`Ky=`;l1L;c|ikqhNx$jL@xs_n4G1>ydJ5(rLJmi zdQPCb%Y4=wBd;!CCa#Dh!zs~s2U&b%e~sX#!P+n_D#;!L9F%J_Vm zN70%7VroJcvtvY%eJ@E`LDcD1of20xDJv^0s@RI?C6IrVzX227%iAZaO!F)vZGE6Y z$Rcn)H}5!A-TCEo1Z_`Jg1Em@t*wJA{BPL)EpN9k1O@c)J2Axk$|`W6PH(14jKeYO z&H+^KK*re~>mRMn&IQsEk&(w#544xNZP`Ez*afFy_%=CnO@1C$Iakz%*hN?hw;Sm( z@z|el^i(dw+hv!>ysS`S-`r5x1#O8*k`1p(3?74=`P=;32S~>c>x2rovT9^2egFzaP{fy{XXBG&&ukNV~{6NrRzN2(LGz65Y%lM zXPNSdTEy{_XSIl4)7|dhubFHmjd!Ox$%vi8o{^#vlh8pqhx#@DI79 zDx;Trg;Ngf8;bBS1-xKW_1HgXsvqyk2 ziO3Q>*i)FXBa3U?Q?hI|C1pEIt%i4yU61}{U`_@k8$nqc99Rz6{{H?k zh-njRCRq8Tf=IC>u7!QE!`1ZJ4B+N1lG?W4A2o1(OueihdKo@lIroM{j&0Qj#Dzpa zk~1?zG~baJwQylw*fHfgo?eA$rUF$R`}qqE$wJ=;kQ3QM(x2elXbD?2iJM=AO$dfb z30V^34Il_}YL-yY8LVC)8Mb-u;D6?pCo+B)t?O}4oB0vByNGW^GJKsvoe?Ld;EYLF zqMA=8%(y%|YTb$P+X~_RLnU48Hid^HwC^Vb(lN5p32dPnjem(_>F~@yW&S5MsJLqx`ZsWu+dvAz>;zK|9aJC!!*ltx2{%JH&nI2%7Go$;mLc<>)p;b@E zPU(T_(pbil$rqR-uXL<_j+w_FQm;rqCno_6!boaf%($#u=!81^J4QKio&>H@wVB zxIHaM&a&O`z(jvASgwU$PLWsM>SxEF-Hu%ckGsMeYirC|LN1WX@%oM6Av}b*M>DL( zoNbUQ9d;ytVM>Ea;!@Ef5EdiqHM&i(`q^~7IA-jFZed-f&S_G`{p zv-V*KKIsWsFNxP)$2V`wG}oVy5A6n(tqc~Hu;AU_>$tC`5w51A)(0Om*T#MRs8Ay< zOJ=MJo#$j-zh8ca612;UdQ?e>1|xnUT*B98Z*2a)_7*alf~7Swap@64=Xtd2ez(iJ zpAe|Bv$!#CI13c3fyBa?_f^XrWG`VI3Na~;S&6MX<4_ece5BvFT_rqvDhgWS%WfoJ zs!fOXg4fWr_LW6b$$0Jq7oZPZqE7-$TzXv*tT{~%KJ7#;OnZzUs@B-UGxg|)WVEGD zy4!IK=to^oc@XTP5WFxGyq=*bOtz&3uxSk57~`-?u(G-9KqYQ`d%F(H+5u)gIRRew zC~k0s#pt0!l#fG^)n1^xQKV=%lAsN(YXr(jCy_?cuM1XZV(Q78w_wOY(G|8=<~f6rg{*rb543XbeB zHW^(ceEjFPPK3IuxKdx_k&)D6TbFCBH|JdPI2IR5333r6d`AA=VRy5EEkLmb1jaRI-=0wPllGE6Lun(M#DJI?qZim1!F?kT6&*=>R>;GIqQ4)`J`%cy zRXCPYA07DHAO_bI5zp0xw!ElrQuHVuHx{J_vI%xZb5&5{oIY?)EFXlzSe)j2l7!cX zlg#W2kZO5bA3gmR%I>6BcQxT$6n4wY@-Hij#bgwHEx}e(Zx<|A5p_*Ykxg5Y@IaX- zU#+226?9Flj{t8;WYv+hnO&L|aayE*2*#{U)SSEn_G4sIOxy1J>+Q)A9xf>fPh4^^d#*Y}^<=s*zbWjr z(*1|GBZB(B-J@R*-TPCO*Si@=;jEkuka-KVh@RIueY8Q!imzog#`zhRb(3se@l^}5 zbj|N|Co?FvXd${(*2npz=FX+Ko*652NkZfN+24PDXXv=OdJ87pOEr*RmTkXcC!DJ2 zn7We)*iv#t864^W2#@rFGS>d1Fv`;QB@N2`3s6(rxkiSgc-`%d-d%_?LtAfwHp-OJI7@>(WE$GI3YD8b zn0{H(J-yOC@X`r*1{jAALN!D5m<6E=6K*-0U_p1Yi+6^Mm~f8faDaQxM?zo(OkdM| zskrdlQ*A|eyQXl1(lVRs0UN&cH*OE?zo-Pn(9{-!@HS zKhxTp%3jr>J`eb4JJc)xMJHX3w29nhy1ZSQ0|rj?A~OLZsxIFR3o`CFB9?Y~Ytmpp zy_xU~QNV?{K(%pYcH3%H|G|$Q{H4{caUFX2*+p3y4>1@IPpX4zS@Uj9*a2O7POM|g zf|~5e2R?$2AxK;zr7XCQZ~XUo7rO52Xt>-nl0~DU&LA8A{=eXasfjJ@=g{jepEyQF z#Z55jw;BZzFN_@u4Hwlp_#V{{CCRwmMv!<6>^i&o)txARqd4Uthfmv?RI3 znc-~GOxaenp!q1f?1;ji-93y%`JW$fcpk86yO4ItHSN+Ke$(Ntohc8YyL)Ky@+8}4 zs}RSJK}blsj<5{71g3dqmEOSLAW!~L3Ob9zf>l2bGT5N}0S3!yLDWx7eJB zERvQbNR=Fm7wb#&Sb0_Rc^ft8oslrx)^+@_g!sPB%6}kDylmN3s&zNhbL4C#px7}7 znj?s86GmFOMJ7qyEMMg@!E)w`sWK&iWkH0sr;R8()?Uuhxct3$BeR~Zf5VY zB7cD@1;(wYAC9Kj+Z%kTTCd=zk#jMNmc5iV;IHF?`2$F4h>@NP8HXX$IZMM-#dR|szP-=!g|=kQ))f*N8zFf z#1vqPFznyMV3}Q;@700#&&Woo12H4=Fsia)yu3W{l$0i$l?a?NVF%DnQoc@cs!#<$W82*LPG zx(`R2CRO_9KB?sVO{;jH4PV8z288Njx~i0MTZ^RT9ZME{2CT1icTheos)8Mw!M)Ay zd9JACTJfPNBt zOwt4q@t9!n5WTu!tpv=P~o0sKrfM!+v9=K%cAI6k=l#Y>ZYoNcfB zOi>XM&(yEU65iX@-f2O)w#X-^htgnLT_=7B);NX!`{wlec#U+LLXqfFT|; z^g44J_>}9M6{S<`Ww@S8C$TidS6OW~jX&{dWqs0c#CyE1@UuO*$c2JP`tZcuCP=qQ zv`C)@J+Ci6Jxft$|1Ey3Yd_Lu5jon-#!8KuP|9MpsLidK&54KS%@_L$}ME5n1mf z|6z>Kv8^ox?-il;a*L4i)t_5XifBQ%%jh`wVM#SqW^on;TPnC$IM~AbB9#%^32jOb zvKO5SEUz#%7mvK8bX5Pcn=v#^Lj|ZG9O}LC#)G@um^se%Xmd4WQyRoiA4rOXbJBlS zPH1(=+Gw#xbey$s;7PYJWZknXP)+$YJ4W|A;W7HR%5GNEN6S0|L9(wB2lTuq$+eui z;|tD(h5@=w$pL&}8v}rq5$S5DUZciKo~~uf;UcvTc{bstbPj`YME-(@0!yl$qr?jH z^)|maDL4g|$7$6mKMt0(aI_S`hk3b%OJ>qTX`34jC~{~BhCY8JG}d3IDc{Uhn_}?X zqHK>0VDR#k^lJ0`?eAtXo6-c-S*vv)`6BnxX4ug~IVkZ5Wl0ma)((3GSH>+ z<^H9`UQ2`cv6rlKTO}Q;>4+lcUQ8bguF$1v$EMUd4t>6($b8McQPZ1z_mM@*Pdn1A z8OGTqc>xbEK-7eK;3myCXH)9yntR;W``NY!cf$2LjJOnRDLoY?LoRLobp%#m9A})E zUHILZM?jM26Q-LQCxyw4K6C^LMQ@kRw)BJf+Q8um31cygEu&e z^^g{vnl5Hv?0;K7>-@&j*xBqO1yNRPZj$GfpH>*k`p0!lkWQ_u9t$bi?7_x)9b~b* zi~HMje9goy~x^rVl zGR|Qf1sJEaXj9QWH7IITg(!D;9DZ=?EZ6c=0{2w9E1orNl&L-Z&VG7fL&OdE9c~6* z1|KgLN)h)u4urRIY`P>HFdpISHD9m?MS)m%-R={OE=L)iv8U)p3@nsjpT-F9EadFg zdnCW%vvxJIQfh>#nsqHXQ*_aD-Y_yZjI~){wOrOMUvLa^o!bIKyRoR_p@b|${V~sS zi&~==4jfn1pnp=E=XN0F&cud9)auS>W(KS2zuPNY?hajBa-Q3%RJ&3xU&mfT?f(bJ za{c+WqEqdrl0P^J_DSnEco^V;1#r9mxfLgIrs5`Db6fJcT|>T5*HZ206N%FHc7-(} zjBYbo_1Q;|<(%$9DN|ACrg<}0Mrs{8G(Rh3xe4e#Cbv_s-f0_`fG>{Uf(j;|r zd8iSHhZTx$d}CD71jK!>TW4mQ11c><%BYdQ8@;)*ncx+o*reQ^{n|7Vw>)=-GoYlBL zB$Cj-_HJ%_EwuL$bl!3RNcSih=AwWHn&6##%CT&t20x4@q}HDMtFC*iv?q`y&;~P? zhbLzJ1gTX=perENr3stSha{+rp}%#td>#>aJDL9Ne6gSOe7vqYW(-P9ARnc; zeAvOm$!XT;z%t#MG%9J&umiIUmuNIf+Y-mb<(#4jn(VSrAl8vDKY zf)byxGCpk)b(5C$mYnr5naAza7QYK24Xi%IG(7jXYvm44$)y)5ibb>_=kD`oA&X3I z21BMsHxKo07RI_=z820$#=xkofM^m7z6cQ`S;F%d+oIdM{ygrAHQ{N4~G1^HS3T06t47YoF~ zd6=4+ic}w2F~6UlrjAR?)U}Mg2&qTZ1VZN1?nX|!hs$_8 zp`-j=Ao@o58a+2mQ{rb0FA=af!j zk>lMOWTD(^%}eT*yGO0cDzp<>dhTHr=eah}dPcJBxHejt5dX2F8(WV$tn^X> zEy)LBJs69XY-&gSfKSQY;C}7x&JYlgFfhHz$^51U-zOgQLd7#+;aeE)aLGRF!S_`fN^K)s((TO*JctZr6~R_%{X9)MZ*517E5{G# zQfQ?*9unB1a0z2T6nW8F*4cG(1rm2Mn8b3u`%*)YH!z=3IU*cV1>96@U`dOA>5VY_ zs8j~PQ4auKTOqz|s;T=nCPEAhf#6x$b9}AUq^@N0i1KoVKrZ;}G4jsQxYJvT z;tPZ3{P><}xf&Y6#~fnkaDCXsK@?L+;@ql~oKQySfq^5%58YnpHp{@W_)fp#X4aF) z%EOS!k9Z7tmMIO#@U~d~Osok)j|E%WG(bo_WS!(xJmBP_Mtdb6(d9lspb18Mk^y?M z-nNv)uQ=FxhZDZGsV&l?<5)7KE*7n2m}JNRn5OYM2L>GN_Y};~pw8GE?WV$Z~6?;8wL(4=w9$Uzin&FgU{n@6qEHywKiirzT1p zV~Nz@exCaEjF`K=DU&csW+(_z%r9nO2dJ=!j?C!68kSUPa2$>`mdcTF%ydX^cK}_f z#*@~}P7X0S58O-`yKmCyejDS|db!|P^XxZVyKU7xI}RmZwut4%vSvsTqN>_knKy#g zeq$t1WlF;7e5Q|D@ZY-fk2$b0b6P|jzG^1X=J!Tjzk2BjkyIUk%lea2c3^LFROVzi zc~U^FW`i{fcyqvaw#O-Ad-Emm`k+OxYzxH!yhwO<@CD20p;N_$alG#(HJ=BTso3so zwtbGeEvYdkkizJTMxEpoRQePKY6+vwLepwaUwe5s0t8NEmJ3RG@Avq~l8B+2Y(L2l ztq1oi-d0N$sZ(81q9D5^pXZdHWGe$iPZ7@*8<^wSX7`cgqX+-`>+?=bkWWDYnN~8N zd9~5yDs=p{Awz4R@0x_}eK6?x$X9i&^Nd*IonT(F_15y@kH>dl9=Htx{#HrUMt?gD zI=$02+S=9e=2Z0quc}+G8f}!5Po2a`duZVU;Q+tL@#S*w?&I2+W*7#8+llzb=RA2y z+kKfvixJeQE%l z-dF7V(~iN<)<=+Iug1iU&~3}v3fJ?H6@ty5y4cw9&t8N@t?qe=L*~ z%rp!m#0{YM>##EW^v(+AGywKIOex#hTmgWW%b6DRQhBjBgo z{J#YJH8l+9&RldzspCfA;NVM5Rs3^kSHc25U1god43^m7X5|#b^gXyV zLyw@5?)zm3$%!M5p&YTE<~^If+0V_(X--Q$l=u&rC6Uk`oJQLLe2Ryyj;Rb|EuJ6`ALnrU?b- ztQrwnOu*yF3gVD2diRbCJIVtC6SV@l`6VUM-=?wlB*jU|3Bl4hsxy|1f5U0M`-S^U z5;2ga{#5@_Brb67RGg5AKODxETK{A$kJnqz!X~RWJCHpqA}S9ZbAZ_6AHNzG7c7a0 z15lj zXCy|`F1jsVQmZ#?&Avh!Ftz`$@$WRSF6aIrlBSlqlscA$EhA@kqTt+R1_np8;ZKm9^{pjXHQ&%^p%^LH->>PQk?e(@sSgu&tC)gahQ}| zUlPdnB>Lq#S4?C@&^{cV{~!uaB>0ZVtZM-mDL1|c&?Z)82gsRFxr}`JwmLonf#MZ@ zJeNq21V15ZB44b7=$`ZvBb~m=Bb=1|OwG_L);6RoZJS&SsO2Cm0~pRxM%Jn-@*>NW z;lp)v#t!E&|ERe5szur6Y9iB$2zGka*143NDl5KbQ%s8Zg$sT}A!c$l$zRdJ)|Xof zK~8Wvu`yGvzs0|kOs4&;jGM*f%d#4F_tY-r(GPNzRc~J<^e>ukBQg?nM^5?qMhSvI&Csg-Z%%=Nu3b5Di6>;(onVwZ~-sruI;8@Y~n z`0m}dGl{)ZeoR8d6T0F}_8j)8#ZiK&s-BQmD-ENmcYY43u`+RqVYtG)j}P- zQ-u@x&XL5!|Mj zY?}0@;cRZ2Hh=hN*Mil8_xaj{uoXSo2O&pn?ysC0{95#zU+xv&pga$wbW+uR{3A=a zmIevI|Hnz?wEtTt{lfF@9#Yu?uc$E^2LB|+a_W%)dS!PH>Uk=%Yxg%u91Ussim^I^ zLoH-}0>_$vc1DDg<{aLXu{hk(hYUq}=mnSe&-}?=(z^rvMKdTqR_Drw{ol=<(f_LDd>UEDp8YAtp$&hu<$I5 z8mp6X{XZ;yWl&pP*LEFucY;%#;MziPhZc8t3GT(+B{;>QSaFBq?(P=c-Qmmqyx-r< zWM=OfZPW8RvV9&fs zg#2)5ZkFl7cQ9r$nuBuC(1v1!la$mQ2Sh#0sA8*3+4h|v7)@ok%VzO~8K+Mv>OKAb z-yWIuy-;dj>Caqo4&~F4U%PvW-3*Ce_^{S4}7*5#z=r5omi1 zk(t+iOs+|1^{nsXJssq}LJ{O`8472y{RD;5?2Yv2-;=zlvucoBL(Xnd3 z25M!j2S}x~RS7Q)U_pOveeEPHmtH=AWuLSd7Qv{Q0^XjM3^$L`5{uJ07gME|*yWQP z;Wr%AtctxEb(+#-&yweDRn*KsMV+Vphvi#6%^�NdgsyY5JhKC+FDG^LL zgw)oPCIozJdbfBt;Ijo^;VSp}GOSwHn1F>wmaY1F7W_yw!Gr zgJf?X8uYw*)hbekk1a&93Mxj~4ZtY;7a?Ifv|<}xbrC%#(~^2wV*WE#yk9d%Ru&mk zI$}Q~nN`_KQ3+OZZpEZ^Zz)u4RJWfzo2R3#*K&GYs5JaFd_|7`!>zJ%R>VvZ&~$Ng z{J4tYVT4ez`aepw9y|=6n9r&I7k^pfqEvfF&WRGh zLpy3BZ}|yhb22ax(H-?C6&~X$B7o?~?Rc+adk~^)u-c5rJ9%ut_%&ok5||TBGuB?4 z6p)T&5hh2;{`JR}%cR>QYs*_>y0i+hL4v?_7H?nHdgY#RCux=^bqv-|c@Z#XC<0M| z&t5|7Ws$`Fiwev6R38&ID#$Q=j7sAfxvgmN_8v>%_Nm|Puy@sZb#=sCn~}{zDUgnW zn5vv+_}xhX&X0`aUlxw3>~`z~Z1Dyc?z|3+RF>9% zkLAk)XB##Tcgdg*Z$qU&<-%LQxB!s%+s--zNSa^0SiciReTK1{Q+D@`%RDo3Mt0DqLhl2tk4*6cON)70HVafSyYBw6jHzvHa0Zg1Tcu>b= zNdcHdv6uhCDZ_9)&sTqVP4h7Um(}XP3stvCc83u$&O1`BEPIljXEdM~O*D`?XDgR_1z zwLO+VMh)1nDKa1Twz=6>?u7ivO4JjbpIKaf$c&Pzui1xxVrP1`P0J=ftiQww48>X| zBHgE)G6hidFmGaG-EPB2C32Y*Ru;k8sZieZ2FkM`goo=URw*L;UXTptd(`0)cr|I^C?yNkwgGgYodnKzyCr{0C z2hLk{n^zgtd}$vtWnKKsUlz#6K}w!Ga>)Sw2Njw8oUn*26n8*q^6#v>oVs{UW;swD zgo#HI-fh{l;VOksOUcZyss*0|FuhQdkqNYCzzMQ<)A`cc{)2|4B}+^A`Mc1)-Q86f zT>G%XX-ASLE-kvD80FXPbB`GhC{-bIo1d1@HJi}w+af>GJO1eI(>Ky9e$y|RDH_$( z!^w-$B>m`x!RcJKh!)ZgOSN+8`6b=^DfIQ~)hVelPOeiI2Pqd9p6es+u2WLU361Xu zv-iv@Pfu7+PJKYonPkt9-d`2+&-~g^3@TDk~2YKv}3ZG@}%B)o)&gT0CK|c zL1PC&jr8;r=G3ZsT@T*Y{cFqy7%6KaYy69 zUifJ-_Ln^lF2wv28Ya|9cz@_^2rzSJy7EVitqFo;GiM?ken(GEh=1RfN2d4I?Ea3de7l#D zDN^!=DKI8ph?}lDfRf*tT1I_?3#`)1rOU5A80Of&PN6k%nmn@j?2}tsv-)DUjT~37b?SHv97WYGMmsA$bKLh{WMN&^z<;Dn7uqw$qhI0 zRNZtlN3gKVxZT+){Y;Biv*X5FG>mq&5)ACoT3O*MeV1UqT)j$BXpd$+ z{d`3?q(HHz-?J-E<*Livx8#_y+>}J(=@NR5Hia(Ro6PV3*qrf?hF?qr7n=#nyNt+E}wKdM>t-4H(o?O=r6Y- zBjSOCApsbUkl42o>?*CaHaI&4?yGqxFRwWgFqAbVa)eA2S-gXgH&rZgo>sU;uJTY`up{W}lnYw^Sjxa^?MvzQ<3v)fIj(M}HKSa>8T7 zl|hjqBlnHAC&GUF>Qi8wWcp}+uLE@z+fk_A@bo|mx@7emRZr_I;L;cZlhSRz6H=n_ zi$%>7&7Y@(lwkFJXL+pxh(8;A$lczkP5Hau?H0rzFzByCm%ZL5_O*iSQcf)NcZTVV zu)iLM|8KFmj)YGw#TJVo4%bVGUz0wa99orEKrVry{ZMl=uu$x*Tx+*iiD>cv3Kpo3TUqJD zWAL}=Y6J&2F}85HR_vkN++6MMsJ}?V^aNO+0_1rb!NbQ340agFWlo#lUVRUqtHm2t z?+ut<&F?9+4SY?0BDF9~;fryThFmjjhY{)pSOwB=w?b*t$Shcj9JIs5@%K%L(}Yun z4s=rnffrAQ*L1eVAnNe&#H+`=&}OU~JWQJnY0%3M+MBVC-ee(7Eym(SM5?YxEtb0= zXgPc%{FXZImA2k<(uby=^S`%&j)s-_cfqcrwrf6JEZKmZKCAzYgiR{K;G zGA(Yh6Jgv3!>$LD3Y>P<7N{g*MCtK*Vjmr3t5Kv_JHjf^J%}u|&|F;&L@Cew1dDCC zVp`Ru6bvUKP}0k7)3*IsOF~E|Y-9gxwV>d1zI==WI{|Fb zm=oOaOU00TiS%f6{@gvKCt*U!Rz&98WJ+wMF#ROB_4XX9g)XyacS~_n(6Ugn^(I+X zW)#9W!4PpR?KvtnVw%Bll4rXXU%C?JTZs&#w^KhA=MDFa(Jm>}`e3ECIWg$ybf0{B zl93pZHp+c~E$-WroP7}q8$(p-Np8Ohv?=nk{QoZ|?W4C&+?CtMedO{CcXtN3JBZRY z+J;0?`RH+m7tqnxH>H1;ckSztYCIU{vWexP)FXtZ~i`pZQ&F);`#|2WujtHL4_(P1} zm_CKToQzs8(Q(U!gu>&h01r!uKM1RRGp~%nwFFfk@Kt#~_2C_NXPYW<=+-{pKmO~764If-F5(ERgJW!oT{ zbY*x>Ma~H|I4tlowfWgpwZl#*At7@C^iWDup-8uOGT`@_6YjAY3&+?)l$LY(&hhaZ zP!zn_sNty5NQLLRXW-&}rT5UHN4f!;4!vdjacxvIT&b2vrWhuQq`+=V+v|Qkanvm` z!R2^ZfaiV!ceJ?9Iufg`vbaIcEEw@T_+Z?pRTVx*F4~NJJ1fEX1!a^G_x0XRE+1_| zsVanN-90#}#mfBp0O4RHC6nG5cP9aoDVc#jA6#4(7R-QlV$`*8W{yk<88MW&&J%s$ z-`z+Hbqf4Ka3nCi)+V9xw89nLQ5AIQVzWx~+tm~7A9I$VCz;$vdu((&$4lgLVNDc(9Q?=DuoYUAayh1<{60=D z_Y~y)MAtskG?D^L=XLCSQ_ZeI0i8$zD+9nLdgev@3u^~!F-}Kaax)sQ< zO{O{*=f~NOQ##{W-gwEHT&Wo#jAjPy2wG-1%X1BeOk;o=9-Ibj6$9a{Nu|D?&5L_6 z_uw%6K)NKN(7+G(f?(ceHt~Ler73;Db71T2@zW$BD)EuNH5h?lkeS#N55Zy)in9~X z4D#4P+$GO1c(p)_=T5AP-) z?}MJPE^XIEG^&;JK86H2Hh}Rs(jZQ?@|?D|T`BsqzxrZKBwv$8fK_BcM`W&Sx#?++ znz6&;OTD9sQ^udpnn&A0DlL4z_M}~1NssmQ^Bk?+YNthO00mGITlr_Q%62=7Q=syo z$Nu=kzwjnTU9O0dUJ-0@npP9^9VSR;MBvALpsnd?JkE;CFa_@Dxbenp)OB-w)kwNn zd#C7hMIAD9bu8nFY}aqcQKQz0u-AfFTcperuBBwTB`D4Ut?GX5&i?F@R|H>yT2Gh1 zD$W+gT^KnEgROu2t9EaAI-~}?qkRdwf8j@)5O!uJ=+#hPE;X+xCa;EKm9-yn+3E?& zgw9b^XW&|ke{AC{vM90Y`}<6};=O0HLUUP&;L@UjHKFNMO}@1YnRZnq z4!2ydl9rsFDF0dsaBxt%N6q0^y@4PC1L@A`Y{Os6MOmff)cm1U{($#OGH4U0&hhn! zN~fA_@mk69W{3I6%8Xl@SSJd%P5-qJ7&>s82>VAvChv9XZ#hm#@uV0a?DUdNdf@hXH>e`>f0_q*c~qn zSF}A9H@d~0+Nbm}EiZN)!JA~B)FR(G8qA1$1ViGm;1(Wce3%!eB?oS%tIYWMed?pP z54ArlCE;`&JKb3}5^@re>3iY*f z^7E)`$aE{xI(O%0E?oCKSnNz)YgM@s?&3P zum~Dh@_0mN#P$fJUCXw6A)rNKfu6;_FP4WM2gQVdgWX7T}R zpN?th%TxfIBdX|sieVCx)!#bOpm&8!Ply?x8 za@yx~fJK-0g{_WqpzX1}1w_z+JqgOb7W^rTtC^imBw6ixt^VFD5QYtHslpFADC3d) zX#ypH;76|$0R#Ke*e zhgd;k*5QH{I707jx>j(({VO zR2FS1={d6k@8K!S>t>Q>mA@Vj2foBjqs+K0OG!ucGc~Nl^wNCx?7^;FP2VOKkMx+# zAz|D;?xf*sCBR-~56G2`3v71Gs4ULQtqz|`c;eBX`(D&9ryPz{^s}}JDd`6!qV`7? z)&hCKrbp|)Plxn3JzpBcec+bC9?i~Nfvgml5#;R0=$BT}lUlM> zSU)PEVk+( z5n7m#UXWMWiq#W=H^Y{qujg^&LKeFNGx|TJAvC zG3Tv)JJY*enh!9v8e$wvH$|;y0e1}xmO%+@W}d1&5->s#gN}`MpAZ-~vVo?i_#1E9 zwVEudQHJfAXm$A{Gr7ZRsTUWXqHE5~SR5NgLob(4&1U7MQ!;JxpY9!oN}Cb(km78P z3VmJ(=T7Vj1nmfhAuRgN4k@RXSH!%W{&lPo8UDt^fTro3Z_yk>$|NNPw;AZwC?&>n zdjCimXgA}pw8q2O=axf_<#GpjyX>FXTm)+5L%k*2o<6SBlczsRBB6-vC!!UxKHLUj z_cbWDY;w+(H~li`&0BFAmffX^Wc%UlA5iBJ4`DI6bz;aF(y@L$Ks|J{H9h?Eb474I z+U6dc==H=ox?!J{Mf+dm4`5hUO~yX=6g#@U<{Rp(O#_+4r1F~U+t=N(jLyW?AMu{9 z5o28#?P|$Ao@rjZ z@z#A`HrR=Z;3-_f?JVO{M%P-h^0&2&-jQ_bA#Zv1?v`8dtMNx~AfD1bdwjf#$m_A# zNIKKfRhe7!ylp|f&#$^5l&=XN7gaC~g-(nef0|0qLhq%e(>WD^FN`X7qhzHii z=bBV@&m8#5z<6R3lnzaaJm&X0w(lPhP~&Mw4Gxb#kE8>`T0f!PjN9feW`*(6hA_5x ziDE^_UBlNpmpTK)`3Z|xo~)u(xhDm0d~9`;MGP`9(skgk=yPq&MseJSyJwd{+e9H2 za?BI}Ic+?83uF28{t*qwKyTdLLc+A$%tE<^qI}wT{jhewus%8;BIm%5dDom7+au9x zJZ#W^TxTw-BSSQz@U~jY%uUm~K&xBE-4W?N-@|OthE`Ca=Rg)44N5_Sv!fKdHKQwqmHa`p z@dA~7X--T|=j(1HFQcwth!`wV@U1XJy=~xYpaT7gVE1(teh{N1Ik)E*1~o>L2RRYC zRR<&)Q)70G(8taC_a5T390qby!T6SZ3Re$^9++Db{b8uMKRxnW5P+xC-DzFd>V9ddF=8HQ zkHr@trP#1<;*xayj^r}zw`9>@%5Z1YJWZLP^jP^ zxK%-^MRQ|YWHO#3+w%I!VAjV@H!w&sXwb6--n_kwQ*TPQiQ*H_Y{E9}*>-9U9eE&r zdl@I&vxja!6CVrB?1(2ap!m+n9|+WEn}iO*+si}^(=(nwDbQ>H+(P4 z9%06+-ZK(sGX@ZP#XD-r6|bz!{qS z51R{v0Y2E5espBe%c5xeGxz4N@{Wxq=r#OFkv-_mv2u;gVQ{aH%K{INR?i;YxN{Zj zLpf(&foSXXX-#M^lgNl!uX z0D>ZPSDHM@n6+PPRG>^inYXzyX=%RKooV|`8|jwaBj)=0{Z|F=yUK@=YGm*U*ryVG zb6}JXYD!zhvql`pno!cj_%2t*bnrgcu?YoC`WG93&qlEx>K@keLt%k{d~B7zs}MT!++Ko0Vnj(@Z8N3?O-`g&nKU#yc@BB zGrCT`4WW?f$u9u72>BR*dc*!gOuKYxhZUMJED~**r4UnH9;)&e$*1VYcM6G3<5qgh z9yhR_#|u$f+f7N1xNVK@?%I1g1X~mH#q^-dENugKq+GwBZj4sk*8{wqz4=X=mm80+ z-nx-0y|X)9goagotKwUPo+_VJ7(?|Pc7%ZyY8>A zEJ6ctdqn`Vok%Pj;p(=bW>ie{9ZN^`L3x?krSBkSZ;B&Ob6jaVsEbD%m0cx4j0ka) z0AC+8CWrSX=2chrviD}FXT?k%^A`AazaTd7+UFVB*-s1KP*Dl`APHO+nvTV8bT7#6J+K#v#28Ph#Tfb`zGZ#J>X+xG$)@Ebuf_ zPBa!zf34`v>&1;w2*kmiZx~SVkY=~_yq3$BmEaI^_!;(0G)gnNM$gv)etjPJM`!f@ z0rzjjbY=U$!g+@CvPZ=1rz_#@mk7rJ`|u-fTqTZKb^!@5iV_7K336jLG{n zpsHFBv;k|Ya`gcHLFS)jojCwD1q-4GPwR5fiR+S;-`vkP+-9?6L1j-fq?no?>V>7! zA20QXVF^;T-EEh(TOcN=1Z8$)SM4Tb98GUugiLsT!QVg2V<125+X&g@`jftNaIwr9 z9c@tCjIbkb=92ZTKzh6su7BnpuR6;!)uI$@)Pzq(@Sku}x~%TR#l?jdLJNk{{GXLZ zBd2}V2w}CgD!zY{ebi8SxyLD%cfQX%q$O7XY^2KlR3E<2Vnk;k1GjX?wzR_O>~E%P z6#{|BYKb{g|`)%)jO zF}&f*md`DR=d)mI(ZBT6~Kk~5XQlsqzPg7!-P6eg#oiT=o1 z7@xyRHD+lK*olY=WI2XDbUgAF%zem+L*mF@7)#g@IW`Mz3}|zzpP63pibKstDb*R6 z%;B0$9xnbi1=IvJ+x@K>fTv>Yick{FldFN2pvZR9ylatfb`f5ObS}21Vs$(@cwMzdFx}tdcoJYFKisj|>dM+>gi!Ogq2!J<+< zdu1EZEvD?K#s|dTyl!JRSKGGpuh(P46 zYXodcDzC-h9p`2}C}q6xXwE~&S5${GQ|CI#5@@@bNw!^Y0!+!mB^Q_)dU%0J_3a8_ zV{8l^iiFb#x>7tGAUzw%d}LU%!!JK|S}F$5o9|50=_kSD;0a{j$&)B^)f-uhT}q}# zpU`}_tE%P)XIQkT7E4@W$w>2)cUfAJn0!W~d^%`vvl0DT#ECmXK8Vee+3~bBCTV(l z!2Sz9)&olVwp6OBWVpuj?L%1TEjsZ*QA240S6ss>h64((@_-~FP*qQEH1(^c=92l* z)ka!%d~d0pk(3m1*sjkKL!g_GR_{ZEO>Km{&2!{WMjdYkBqWeoAB9Ar(QFay1f7BN zf2k6cte^)5N#b;|V$bX5eVO zUU_{qpa8q`=4q$Ng?`46`1Xlv{#UGH@eZPgN1IX)tsa4lCx)70AQL1V%b7Wsf&!AA zV1a2Mc?Xuaq(euNC{znH!oDDcHrGsPLa7u91aIPh8 z(4#%YZ_A3J*rejAJ_aQ?L7?YYnZ3^@O$UZM)LlqlK2V@g_~u5|vIg-Jz~azzll&wl zBoiZq$*1Wd3P5xBSf4=RYTR7?uo+)y3!$Zw5hf=q02-_Dm@fa zUxx;1E}6FyEaHc6#Ntfo4u>(L`f0D2KQ)(i4EwcTO&m%m%4~$o{~AcAgUeKMN|qH- zkElipH){1P=N>E(yG)Bsq8b{+L)liAlJayP4Yd!nGa$o01$hrrzk!}0H;mjEX`$9n zm+i*bBvrBSEaVjk2O_$_FEwH*!?$0HtV3(zpJIzy2(sntZ3wc9ecdw$TnMfs5-n{w zmvBG6KX4K8(j)>J;oh)7c#uPnbc1PiK-}bnb`2Cvxi$l>a6xS#mP)0#hGK7!l^TWg z$4=CO9>O}&E z0&Cac*OphDENr$cBe`!KpVfkZ0J4ratAYy~`+_?J3;dWjxlKLFOtlvGglvZj=F(x4 zw>jsVxt-k9hy*L~8+lRV-SAw3J!PNuX5!pu+$VJnv8HCyzEs6iwSv7NE~fkP+pT+> z3pv^C<#0O@zW!AF^`8bhTjg8n=A_%MA4|M@8BS{9&rVUv4nIyXD3~hRpuiQbxouiE{ zrK_!j<2-5)nH#6&Bb5Yt$OorPc^*Y*`m`QZ{v%M~zz9^Lzo&HviIBx3 z!D)d!P{}s!C=vPZ_uGK2*+I2d-($B=d^#MY7?WheUsGv$PrfG?F-m9@g8xX3_-*xl zj}9H8XX+>)9kvij%lrfSk1U|=3uClYfO>z)Hzd_rdUP!32k=xutEHx2Wz;lhgeE66rCIPkltgYGuT48}4p+fIak(k4A2f%b;|- zqH?(kZh;Yda?Oe*z{mwk3?his6s<9pD`+{f~Y2XfLyN=PUCay?4G<5!*Tdfv)Gfs6A=ue*N=IS?VDP zg#y_VYj$YT4rPp&Kg)A>jQdUGeny~dhgoZt*B}_%o9HI(=`Fg`(CD|}N3HgU_d@69 zwWGerRvjB=5+QNJ{KE}67!QDDb)b=iPuHH%vtWBiQ#`K9ai04BC>s@6mIN(F;n?2q zuY+l#pS@UaG7+$SF0TY`|LF+aXNh1gkAa^{>RM;W6l_%q#llp}%ht2Zr;*}F|LGSS zz1`^SO>&_R-bMlu65c8}OJ3PV(*HeF>2xp!~=)*ty~=ST_B&Wx|_xEx(( zqG8smfbT%?txLAQcA_kIAETN+;)`Jz$eh0D`F21 zhN99h2=WZ%Op9U5*8Q7ctg~p!F^f*dE>w@Uu8xpj@McaFA^K7-|_h&s-M6 zu?JmU>-+HC6l9bXqt3G-i0D`yT$n_$o z7FtL(aL8l;^k}T%CboR{D45ImcwkeWW4-r1n%Fid=t@%V@7CM{Lc}%7ut%(;yI3=J zN0@oRAT^2{0yR`2vpbhJA%%lJLQ#Vtb1xl!)fp{8EQEQCs=_b#LwI39_pXm}vI4a$ z41f8LdDiFyD@m&acoQUv<$`igDG5C|GIZey>4N)Jg$SJ)Wwc(;Vre?le|K=>aM~r0 zUbz>lciwr*Co6kwQ5A%YDcQ;N?Od~Kd&bV|>W=$S_Var0a&VH6TnACso-TIBwbAm< zFUvsIhsClJA|sU^QBRGBV_a3X2dGN^Nj%-&Si4=~+|F>?msLkjy=X1eJiXHz5=}{n z9~`pJBeLDzDq%WaYsvmd8x7vrKyV?mlh{Mt?ojWWWP0M&ogEN6L(lY~^aw%iSLc-Q zdE|R4?SseO!K^&X-GiFemn{zUtrqb*@6r{;oNS#h$}hD^^%SL6fh>7nuVu=7ZHYpd zxg0Lb2BybuTB|Dku`*FNY2s=>MbwjCnY>?R_~gV{_fseXX-`=_QAD{hq8@3F*VP5z z(FcJV=`xf|pg%~^YO&D(P3sn-tm_e*(2okvwG4c3b|b&M8-q`$`P~e=-#PHoL(Q7mv^BdmE>r{M!g!9kFs(75 z^^-=U={${HgjsJHS#YO!Ykg^?kq8HOGMSOe;yWV^ zhQ^o4n9FnTyDH0F<7C0Vks8zqscD=c1+FXoMh#>7;)U-O6o{CTZfb8l&JUj>U1l9} za)YtFrLdXWveCS+nN=04fQ^nU{jfKEBTC=CFX5-6tf4ZZD!}JCvyQ`Nb#xNgeILHd zX0_;LYKjdso6LlnsFts=3lb0o)XvXLPt6RQ|IW@TOtAKJfiqiL!Crs+PWl4vzdwJn z%`>k}{Bu(2P+S2)je&ITejQVFp0G|E@?R#~N+473l!ci|+8u9$u|<%q$FGNc6!^63{ZB&Y0HOPZwz4e#%#y)rb(gyU0rDXSRa;DP zPvV0x)MKzC7ANr0Rn*A~+4SRgJv@{a-Q8I{SLO7SZYbLNuyzY+$ciioen*j~*ruLh zFN5L#SH(})C=u^PdrED_m$_pVv_&XNZUL=rcqL5>axX!^MAEgsif-D)<$V*`P`Ln^ zMky%+zmoLRUCpr!EdLurvTh-y+iR*VZPW}dJcJTnW9t6x+5uiX5vOob+oG})m~H8{ z3(jAsPVL>16xq$lMcFK!E@E%8=8Er+A+2tFgcbsBzetu{|N16Y;_eQ`9@W1r6Jt!@p`6wb zRWbXdHxW9SBJE+y1_TjcWA7@*LZqvggQkzE*f=w5p~hQRcx*?f3g=NQD_wFA7x=B; zsdIeckZC}kwz;npU+T-#v!)`KOH^qAPhsv09BT8Ba6j5;?3Izi>Tq$_-L2u`0WhsqBDsh)nR@8 zvQptC-fmq;q`%a+ThI5#%F9uUXf&W|QiDFZE``Q?EDYX{VHMv<%UI&34!fP*=1ZAT z(ht&w&bzFe1n+s_%hIUIs}HTwr0MdLN7y~%1B9d^Q%ZPV!p}m@b?!_ z&RsEzG5|Ev7}V_b@WHZfss`McFxx!3gp0pWvZmU_ozT9ptdI}P%HgNb0KF#y;r073 z%dXGydR}*;D?nB{oJ)pI;4!ng7TuvIy=|Fp|Sgxj~3l_-qy61&_h0#Wx z!f#((gwKEcuhUbAfC2oU_>c?V<+Z_J%JrUTCYXHJH?GLH9p(lWlKKX-1l_AHfvN+g zn3;`dM>A)Rmqr+bJ)`Q5xT-CVh^z&4CA=MhI-C-VlzTL23c1E}ucC)*J4tW2rVh5qHr|i57Z!uPPh1fla|r9F2Hqetao9fVFWS)3tH3LW#$xcM z5kVwXy#yR!?YJ~s(*v(Djfo;pT?!Q>?wcLli+3J!2qwL{3y|S7r9Tmyh$|=Uy3b7+ zF@i27O*GBkYEF8@kDoHeKQ+j>fX`u{*6S}GhKB0;zK4{v`^K)?YWC?omc-^x`;IYhcwZ!H=uF3@d-TxN2bM2qP9Q*jq zR-&96aT1p^?OR~%eq-QH$j@z)N~{l}EPCD{2#8k~2K-H8joPYAd|=v_ftc#Rq!m7G zmQQ~owZy-UiLHy%;l+I!)n$2wP*#GagJrW>BjwsA!W^3tbtLbnb?YPk?v#Bdfb2>v zg^2A**FZKwko1IU4rr5na5*)9+S$ZCoFO~0&5;ekS)=!iJl=3Xau$L`qI+YSBn)e~ z#~7YY*NMc!-Ju&6>w+z5hc&fXeOMU!=xag{dMjthZ}{&Pbo)mZ;%5D_m#Lxo7>5b?b=Yu}2Mh|+=- zfQgS&X_D@BdaNK*Afm4T%U|4)vNwk#&R?mIETY>wo@_ZPB!?IMgXF^Svm`&gTfX^R z&qbqKGU%#2i1L!5n_U-k9MghKZhR*bzjqzMq7@f%QgE~$I5OXJ86L(pD*uf0FgNU_ z^R=69^1Q%PNr9b|$@fcnS(2L%(Eu3RhH5F=Fl4S!Y&q^^BOJELg0}bQCL}n3-JQ`X@?Pyx7V zUdJF$%rA+p|HIeiT~*Hs%^7v(+Gq8I8G`I@7@pAy0b;2)bGViWOX(|%Cn^x!GfMw# ztu*mjvN*A!!(%jqvqJvw!C=mOC7#FOjmHJqHUC>X^NP`XJ*UrFZA#BvHB&|7;GIl;f5W zv`CdM){Qj>5h7M;Wr(wZg?_UxDT&Resyz&?lR>rr$#2RfNFhI-XZWP;WqD?u3AgwO zwzyUq!30j$9+~s=Cwox=0I+SQY_qnB*pvFt|33ZU!YGyuXGhVBaU!67XQOM5NJM}j zgummNr2V0d?5evXOU7@HgXPs2t7sV-?^LBWe<}L?;UbAxF6+EgYv%Y8qYkKF8@WZm z(|4rz`laK3ku>@y@B*o!OY^EojwE$MA^fO#6%@#C;KS>6unS(XLp1Vl`yW^%q2S0b z=uO&cFbOqQXZN-Xm$*3nW<`)$htlxoMlG57hN8XA z`d&GUxZ|BjA&lwTH*kKG8K}O8x!-G!6OY3;LqDvhKlmx=FtO;!6$@ ze3FL`kSV>EQg=INV*FrsEQwWBO`DaF820lgY2MFeUgUMs!%Z_Ey6K$~K5d`m$*p%uJcCDVG^yw!LQjOh zn1zRbZS>VqeD-mKOUL5i{KoE(*zC7lMvms3GJrPKbPkW_XR->)wjl>{GrnmyLfynn zmzuMVp`7ew6xJT>p@!6V<;?skNKMXPQ5Sp&BieN;J~pFlqe19YkbP(Gq4s%5M-2R6OvD_R$m%o!J?b;`+E1&pYjMTPZ2(0UV`W=pS&uX}j`C^+RZIe&q)XT>tg>y4&y`aXWU z&VqyE9&qgdF4eQPK+soSyP(tlfDhRTV$J;Ez@O32&uTIklrRnBCv;v&4`-XS!kSnkvyl!nJ?Ssh_p)`qfYuJ+q42rP#(dw|yZ zBWYlDOjaMd(*36B1>5Qiwdl(_@7=8f-dAB!%f;{uZj4&B`sdF^es-dS=alQ~fzKkM zkI>QElfXMtk?Idw{)%)+#`FEX$^o=X7t-yIo3VF$v5?`EW7b}eeg11QJ{em`b{v^< zQpHx`S`~d_y8h4-ldeUNE(asRWx0%#0v>MI(j$XF;@$7^q$MgwPC1jG--_$sxG-3` zo+uONP0}4|F8&S3@Ra?R6qQ9C?EEuwCY|&B;HWysr#}UjCtIVUo?MgaWI8~%Ssn&Y zKUR(6&G@V=a3qeuun}vF5}ms`k8}?!t~#1LYioGMHb%V3NnW5PGIqwPGq-7-fJ(m`RCK0F`kY;r#HA13u&yO_UEh`>R@ejq~kq@RW{S6`^Fy9~WUR6B! z$E^5%!ROW;#g{*#0Z*%UCnt|@bNpV+teS^(Hj^jPnfV16ME~FgZeCAX30f6XG?Ztr z#8BTOhDf`_jhT>t{s_I5{8d1|&yI3N9xw12O)9vM@R-bLson@cQzjvYbb1@ye-*LH zVnm`>9UkemrlLsCgt0UuL&D}cK1n%MUpdtsnOSe{1*?oTxvU$T-Y~UL3dX_CYYX_& zybV-J_D+Cx0@^sA04nR#d{c7E^E3`C+TxZE>|c2UtA2VDx)(AgJ6pA0*73MoDe})x zqR9=aiU;Tm7sFm28Q1zx?BL?Enfgzp`R%O3`=9QjxcM&jdvnibouA z5FV;pewb_VVh&TV-(%mz&PkU~&QB2w#OTAyUO#OYK3r@Lk+kfJvM9CMD?>{)-YkaH zCJf|f1uGOqw$`cF`yoO2_`cCFWY~tF=pl(icfFY1-V#>qu6?XILHZcHNw(WkoXE5z zh9+23meq@AJ^vV_#km4W-|Io4#hDS|`fnHKOSL1$j1ce|J3N(rULBf6BXv;gFmZ$! zl_$r5SuM?O!cLc<#Tk;&)ML?;5mNcl)T1y_Fh7{DhN46s*-;i3Wxht|?$j=M7)rhD z(EGzHE@`7Xi!7FfHM*cyh~9eplTcf5Z7H|GeH<9x&KmxivgCC=2#8FL-|nWEF;^W1 zun6X$=Offi2d~&Ni124!w#r-36(l6)$jXTGxXM(fN;fah;}7X}4m_lARj|kN#e24m zE1Nk{OS>!d4=d4%P$xd-nOUh0P%T^H@JD*$;h(72isZd35zNYyPV664{=>9diHz2S zZpOIzC!RYxjrU!`9`2FR+%E*1f6EoNf-f_|XWe-5eUyPhR+lqCFE2boLRkd`g`qdC zMiri|X^1huyX1X*32Cs|^VNiN={+|Dwpxj9 zd_S!elIFtRUS6|p{QM5Vem$~wkZ#|CNbMoDq~u6?$qoAE?%J@P@J`KCM=-WG&zqNK zG0J9DuR^UBkjqtg*lQcP!sv>s^k90HO6Cj`j3B=tutEP-y#BpPxQy+x7mfL^XA&KCqOYmuAU@cuR3nJT_Z0yl1ne(CEOJoc*QB|lOLLHM6(Ci_iV~%ws>?MH?2lq zH*!zleYWO(M=tJAQxncb%x=gr`_Pap>l}BW$*bOM#bO`mA6Iny0p>O-&mBCqG*61% z*7J2|NdU9$w!;5PTXr7eh1627r4gVeyPx2XyE(vSw^H->o}JjIv{q)bc6X~(c1$bl z^ug;0GIjCBOo$i@17yB!;`&XrzF>D#29N5Vg^?zViqmt5@MugrTnAS|EH+jqGVn6g zRrEZr#G+d!y)X-1c8(MsKCMub@g1DIKLjCAS*FGW2d!?7q6L6eX}E z*eQQE&Ks$D&+fRuxj#&GQ~W`-=t5nMNiGyhVHVq!Zsf%8 zp~Tg#cp}W$Jvz?6U5Bi@2R^(}^?#c5-=;xh!nI@-{AAZ={r500fq&xc!dG0-aux^rK}6$JObi~@sG#ojj4}W+keJiAI>!; zwzXhYotV5n0*TUgZzzq>Gmm_OI3b03m0Lc|1RM(bM|2&DOArteJ26`&VyA5*OV;)A zHw9p1)E`;hJWFccyg`}ck_V=`xWw;w`OP(3(JbDOZH%3%grdU-Ez5HSHq%<`af2!F zGJ9pB?OlXY?_2eSRXY4Q`WZ6QR zzu!mnBo`T)&j#t)-4nGDQJF&hQ6stf*{>%Sfe~%?yj7NiPS<2@Vga&58m(dNBJFU_x2=2?W~$0xHfd>Q)_q-#x^jD|`i2{eB+p=hoDv#msmvr27%0B2jS!6_nyCOdJO5 z$9_^XQnAdhJSpATt@7-B<#eu4?V{gyIeTcfnmp_v`bk{boq^oY@RnS+0G}Y<>9}a) z509s#;7GUtPM{a>YYY}(8rd#qwVaoZ%kCDkxsq5zox1yv#7{CjiOCGO%`T}~qQ0S5 zvhSJ5DGJM)HIcXS$$k>$FUIvuLC+d@^R7;PSG+yYGGdJjnu;^l$0^e77xu`j66^h` z>7=!QA7%OKL4tlG+-kGaeJ=LQZE*5JA2G45h(gaXs={I-bo7ed#fDA4L0esDDdb%5Y~@e&bkQ1XIkhT%qe;rkE>$`ZBbVq<23sPW%*&x*^^1xNBM2T@@Gp1 znFPWzO+`LKZU2HC@2kIKgK~l~R|zpy>cy48klBW6$fUB#wDoOHg@33jgg3**l7`_1 zhzHr{IrctLO7LwXLcD0&Gj1QzUJ2yl-SJSX@#9i`+A%`3sxUkAJKh*c^E@Z>aIlMF zV1g=`S@TcJlI$5i+KQa@KsL`*S9$a1itE5V5R_h~L;qUjl z7)hPc_mtYnm?u2MmPPaWjm@#sgK;#3n@uAORC?(DH-?!Mow4}A7&zfALM;x!M>KA+6oSETiucPO&F z{&aCr*LtnMRrLL)64tKYSocSjZ)^ZMj$6d0GsNO5;Cp?%eQCoYt1>S)+7ccMawQIN z1Kgkf=LjU&Q6P~#IzlyWCqbx{aEv9+X98e#CU8G_{tuSuIdZI!FX=pC%vhzR;P;vn zGrQ^#sc}rn-;IA$xa;fOZL!rjxjO6)$^jFZaR&-L-EUoak~z9^AQixcN1Jy`Kvci7 z>Lw!H0zDqiEA^@97;GYnB4+#_b;sP+*X3{wCmPxDu$iw4ZeqfvR441uwuDuRMMAns zufuudh$0n%$`>&zCB9v{DPw4Sit+Ydj!+-kfme;A*T<_BHGdTPsCCm$VdW_vOLNuK z;U!xXS^=6juR9@`4f|I(Bt&_m8~J55U-!+OEA3CH>t}Q;n`%;X96KDJlsn}L=o~t1 z`pxf3=SwrQ!WZ}cBz%{ZkN6H7M-URuk3zpE0*=r+?c;85qgHLznlqe-{Rh&hmKO^zgTcc&Dc#Y!^m}^;ahJ^DgWv3`ZH?2HdnN%dBMVxiw|uXXI6j%#I%}8-L=G`Zl37QoX+!1$AZ3%^BL-gfFq8Ig7aRV^wKs z##MYrG>gi-Q~N~jt^KzrbGAoUyqFt?0+(p8qvh&b9`n z4`u99retzq+GHQeFGprrJ(9DzR%LAcau^>kNjD)`*Q$SNTL#bRWZgUN=)3S#bcL~} zuVZ_iZ-lzgJ#Ho@CncS`SXELm)F=59n-Xzd7SLe=pC&E;EkHMN;Z5Z?`hj5en24G| zW)V4ZACx06sX6&GU8R+&H|n@5r@b%!X^_X!6ra7uv|68r^KpnCIREl3=$hAf?IPzH zKk&MV?d;cylhtAqh2xYqo0J>(lFi!qT(|R`?9Yq1o@fzkf{TmhGs-*a)w{mH^~lu~ zXjMHmIwrLZy5~^%q|Q?hl1}ot^z;iT1oE_tHV<%02-YB_uOz5h8<`gJ&dJE;1@#98iWf+FzJI>Xxjj#Wz=~Bt zIm2NiV?qxcaAsduYoI3td%fapxmZr$&kE<8wdml&NQ} zo708r?X|2(cbLd20>#sq@tK1=Dm3;P?Sz>l-Uj!oG{Pk5XV#iVVSeB7HXFWov!LPei1e_B!(( zLv5K4I%sH(AE)qP%K5-#BMVyCAKfIyh~+Qy+!Cq*NNw;+LOP^?u8AFeW^&%`>-{md zdAUTyMKz-e2RLG{s6Ov&eLIejTjPQWb%N%f+B`m(u;gWJRNf%YdQr1$+T(4QpRM4m zGCRlj+fsboQnwIvwxHo1TU)2%E^B%RRjPTSj_;XZL6!{KFoa0csP<5Ly?wpCb3|mY z=b925Epr37luvj@PPFVwnY-?i9UmEYW-pwNOKx-|m$oZ<(qT+y(gTrlC0D$8KPhuI7`R zHR9egCQSd zCe&w|6I~cFkvOsb8u-SLwlvx(Y^(L)2X>db6en9^4Q`TC?PnXZBr!YC z%#aq4hT7~Uo@)tUMV`lP;Sr&ZjIB&(qYED>REA$c@}{66PQ(Q)6RZtzvGq{=-33WIX0G_1}Fbtk>K?tb~b- z_tk<7Ktl6Acx`f9tKXeX#FXCH)P6yYp*sV+2o#G=D6u}UwF;0ZMQk;XijLvjzp~#} zCqms~eDuxRUf`fVl-5zt9KfoVA_C!5qSM?{r(lN}nHGh65vM67MX3Vggz^_qKjdfI zSVJpN?thAX&xhN*dbW0ggji#fV{Fo;U!mN$dc&1?Yx`Ze*ICJ<@RTJ#-M`E3(o6pa z^Os2Hw&oNHEHyB*jXQocikHEu2lvrDdQ0=Q>-gCC;J*x%b+%=r>=EH@(Jb9t@JEhh z)O$2BK7d_z2zM5E)~Z>hZV@1-f}nEXGG&xa2EmbOt4jAe&Q(eGf15pE(wBczyT66p z3ZjD8zg6(xbmsh;?#I98AO1O_;p>0lU;o~-MKP3r!;XI?x#N%jy>HU{``f?Wxi{(m z)v5o#y37*QD?J8GVVN4@i|H`v7d5s+4_E~};arVN9poM7@8H;;_fh9{nQ)rn@5TLk zT*ltR*_$L*uJT8I;lw&Y1_Jh~OO^HJ_g9#p|8tACc&3e8$@{Rz&19pBzMYHlxj8vSMYQ?(rlHKw5{z>aTSZ53d5Ad4Vz^b_CX-5* zki4bWn+m9m-mZ|}3|T(ZyfjkD@> zAX30f?p#!-XlBjbVgp&<_w+b~uD-8S1D12aXCks!>Pg_q*!n}AXE(FoqWL1|oB0Wvq zBn^qS<1$wtgBUlg(tU<1fIre~Sy{uppdZpde0}8L5V5W3!rm*~>Ncu>vB2az&8&L&>iSCOM3PTdKXkW<)NQ|A&aWA!MjzniaeRPoI zWx~195e@@^2qq)UsNb-up9SsA0k4HTf(U=vlIN|Ybhio-9-CnFt?KmEK>Wio1U;)g z?8yxUc%d2_l@IoFS7jKP0_|Z>me#rr?HC7BO1QX=I)$%h-*ONw@?R;CONP>-t_Vhx zx#RVLnnNa@`hM>H+MM4pf}0ew9Eys{r7(qjE6`FAetKm;OTHte&$bNr5{{EGkU-Uq zF%>G4^?oWIJv;Cqoo{s{^}`~|g?>^p@CPs*!}U2wst)`z_%!Nsj*tfC14=P8;!}QW zUw;ay|F-Zf;0ZZJwV!ofv#<`12ftkoxoSP%w{LCsL~Bu<`m~`;%>tFqTa0M9Ap0yB z*l|%&YJF669?PYIzWD!dr#md zs|;98Yyx3r^h0h1z6N5D4{w2hw^#}YhJ#;UZmHQ$$~PR&xd~JU%+l+!xsdGVHAu`R zBK&ccB$TvkCuW^#Hm(8j- z8H!f$9G(|q=ec$P38E=)CnuN&PIfMD0(%yCe>2hr0dRI`_0hifVO6gG;nxG$T3GCG z(Y5EaqkVK(5DxaUW7Ta!;gc|u5W&jFVJJ^x&&P;1n41K%^5zt13Y#k*0UJWY;mWMK zXgeH%5yTqWZ~Z`xS-$qHwilC?wd5A7u{l;=`55No23GieiB|itrFI1pUyM04Jl8j) z?wXB0S1zQ=;fbjUIZEMGAsS&MjP?x)TANhU8ol@A)0xNaT$XwS^LhDsSpS8`!eeGu z7X~Mi9za?%IBr!&{rUsJiVyG2k{{(w+m5)_5G(EKyD z+_|Iyc;``dpZ$4>cQ~Z3A~V1*w(4PwY2#L#E_AOT_q1WQWXS}9pRm)%_S=b!9Uv4K+k6qhW%XBGTr$sWoGCdv{B zmq(EvGJN_^$qu2qg?)ZqUQ8Ae9#i{{(aOy)S?^1loSiBxP=w#)&BUsjf{$OYm|Xca zj_ktbR;l-B){@`NhX@0$A!=q6VvSVyLGq;s@aaPjmaC%7E8^%U9W?Dq*mIxvCKu&; z$D$QSOQDwYWJIYbaHw^EC~DNc>W@l-&r6r5jC~$lJ&UV zgBtA|x02*as?+Uv2tr~*Vm8_pnUGlzzhu%uF~#O_R?T3r7HQIOGV z->k&$OyUm)9#~jH*F>=a#~jBa4GF;9sNNX%*YjTIUt>XFh@S((Wa1Igw_KgH_x~!4 zPp$5aU$@018Eq!t%q{7kY>fyWuVwoko6biGxn*|DW$F*lf5gt?f#c@Pjw-Noan5EB zEawsxua{bUZn<*SMn#@%MV`G@w;_}-L@zGZ1oS~MCjH8pgUV)^@)?|NwxE-b;S0f? zmaPL#Ut*}teC>y1V!)EUf)AYyl)e8wj{C2&3Y^ZU3tdk<4hx8q~xV1eLZ?D zeZpP=mT?~897arL%o5C?m8g|;IkN+#DsV2(*@IWK3SCu<+YT zZD7pho3g!4!c7i3-gxiG{vG`r_5c2(j7~aEKVy+;*5j~isi}K`aQ|U$HL?k*GEFzP zO>MA|8S)?5;c|s|xP6#LlrS=nwdE zZa%E3H{V6@%zh|hH&r%>*QWtYV zN$UL)*gXr=JdpWlxr~gfCqBurzxEZH$`cWJmbj1+aVSFDt`rdv)JpRNpNp_>V&F~< zXcicTZpn4V?@_VkCe8e|8yEqOEg8rkG?6>3=7{H5V<_qA7@ygG{C^jjMHG0YDnUk zY^GHH`Hjqy_k+l99AJ=*glBxlRdZy~tSJzj)ACu+!h2~qjXFa*2A6e-;2SHV`d z`D{2W0(|jk!0E05=9Nw)#zZqs&lHz&C4ln0?ghWqwnI#V2|pOc%r5mnG|g(?un+Xzifm(^>2&BbJ)49UU*Z9OSPW}4nK zykrMHmpGqZQBqht%x5j#KMU%{?RQ(^0-CAx3pnEW6oEAva^0cK%1Mf#^kkVDl?XSc zk-oR}|0nTcE#s*Q;rKkB^_dqtD|>nIy1Kd+6cltT{W-X@>s!17kJ)f@{x7uT`nc>W zLnpDx8jMQ3=C!>WnF>?h$4vtR{@;7K5T7_O7p7kxxxIyECYHE?P`x)H&#PO+^u6O7 zcG}>okF4QB>mv@QoJ)(csIO#l`4&i<8C{?u#f^%oYC3qNS-tfjSOV!dxOD~Ba zF7_esE6q&=3%ZI-@PJjVI}*rZyO0sva>iFodu1euG!k9szuo#u`I`eE&~UzxAKd*I zia>Ed2TrrTAMxcaa`0A6ASQ101UQkBb^rAnf56ibjg$dE)ro;8-#~J-?^7QY0!}eM zHD(z0xD3t?7(B^E&=HsVWzr7c=iOOM6!Z6@-5`(iXi6DyQgHiUz*Qzpw$Q6HG-=L+JdbGD?A)KNHCB`6Nve%bf7#Ksfq zfi+rqUfsRveKMA4OxxX0x1H#0NuJNx7<*JjzED1sr|%_3lcli&m2p4T17*9KCPuyI zHf&q1R{kf>tsuw=)4aXJ;6@Ti|G7$ATK@N9NB)oCH2HG&Sn`z8O`pTfvc`d7Zz64% zy7{`LZlasOJ#bnq-pAOisEcGP=a`LscD5d_Gw{5vL6?v(gf;Zjm)W~?}erK3iTtY&$F{X~`gQuzNXu;s%t$hGRD_mdu zh^7@=yaEd%D#p%}&Ri^GBYSy?CC9ClB^NZx<;(8~JNd~bciO-zO$fk0U4Q3u7T)^k z^iULx683m&@oY(E*M0wDT+1Znxl9I#oR?)yOyGkuoMk@7r?ZkWdnE=2U z4G_*FlUNX@@r3yHO_jk(eF10_KZ0>hMO-V(4S)?`ceDA>nX^x2w!*rJ; zL%KfNw%A~A>wV)Eg+ZoU6FZ4v1ekZDi;2wiw?nh6qw(hCl&_5h#mzDgd=jdtLu%wR z<9GytT`auKm(gbqt&c*7OXpiNf*x+%Hg8cB1cQ?r=o1d>O*r-|A~dr1*bx_Pg#wbE z1mD}B2)Y)~t|i!OK|a5dUWi@?`P!+vuSMf&UVY)GiH5^X^6T5{VK1Z>g6}Y>*~cUf zI#PU`mOXh+=0>X|k@$d{jEfnasbo%WiDX1lcrRVGd!m>E^E_SRj}o<^0GJ*-5r<4D z%4KrRQ%GCp0WJ%#aF$d_w&)Tp+V@fhf?b4>>3jB>rxgy!N5XPlJ2l0mTpA3&NAQ(! zrR|+}?bhnOi{6!52+gn&t_jkfZSP2zEW4B;D=6q&uO7exnIEqZ2%ytbngx zeUKupzq8jd=6ve}oO5c(dFXPaX3?TnWoFyAt516Az?9eYXX&d)~uB!jeQ;_KOjfV4-HrTiFwt$`NDQdFSwrE zmg)Os{n+(VZ=&0tdN;VuS^Oh4bIAd{P}Ia-nsDn`NQ!>f@SU7Ja(4epeZT?CF5~!VCe|GG`xOF6%B0##BgDPvT^M z0_n%_hwB%XWw*jywa}K|eAk^$10)`eDfoChqN?*X8GPQ&gvKC*a7;WNM{@@F@oqe8 z`dWVuYQUq%XNS4$a9QrX*IEW4d98S0HLzs$lpek*EjK7)Gakt6NrZYGaM+P1NyW9i z><#-4U2`m`e%A$WYo0 z2oXc#QqSB}Am3E)P`=>Zu*G^r&k(B;{Wv~>>tH+=8c&N0%_JSnYr%0Y%X3_wD_kY{ zwY4uwjg#KcH{zxOG*c%YB98fxw%tGTM=?5}O{XZW4-!fJ<6K$jlk@^aTJc!(zcf@g zNb#9^fI4k`e5dCWM!x(*Ly+fJls+#H-k0@@jmq^e@X~xE=YfwIxE$qZ+_z#xPD7pe zGjLo*I&1>B#T}X@h+(C+!x~oqwoL@EkkSDtM;YfasE!6p)=CzWiGNoHQ z;ydPhjvq(o)!0-kpVE}SYZxww_E!{z3nLhWVSdnRap3|9H`Q*@UYCHR1X0fE1$r4TY?)>UAFZvLcs+Dw(M`h_I@{s1$ZEJ`DXlNTUS}Bnfh1) zpVU(SgQhHrb1)7R1Xb4++mL!-2TlS}4G=HIA&mNGVjORRO9ZZ8yy1Ifw6B?I60J=c z5wjzl37fr1`-R78Df7)YZ>$CFeznetOXqyg-1JsgcATPI?u-=mNlq~`9z3YXDS9-+ zb_cz3jlonf_6`cDa5Q^K>uPOp4^;_z=cOg2lCS2smgYZAX5_U^3YH?o>_BrjeUL1 z6X5~hJTQ1CyQE-xw|D=rz;Xi)!ndA1+qbvZt$}0)kbBZw(#NIGsUAHC9Nw<`k|34% zICcpbd2j2k%moCSOEMK$`|gTXWnruahOiWV)bz^UvAAF~G<_X%=16wmp%*jja|-6! zLpC;fNwjAa4M;Hm9_Dj>N2qhNV1M}gYTQ}r-E0|lqQowVto^UKmUu$YJ$gmy@}KlN zOM~55lMzK~6;wZETZOZInq9|Y2T9_mdUSQd;Q}f(AbY3P()`|>M_W|*L7`w3vez+f zb#y=!H<`r-*XYIL1>42J$FS}?-}v!hH9Zx$n3ubAWkYogTH7#pY=qHQ;Y2CdHczsE zP;F!HbZcYX(exwPIo*@KT`+^_um^_ScTu;@~UXTz`xw~bfKY|N#$C3=MIF?M{M}QQOTqZJX zC6ZzOVTtYb>?V5?dICx*o;if|OS5I0AWb_TZuXDVWKtrpNA}}TAcraIEdAOX$(FJ* zz)johQOf3syps;6ohRXYohSy?}k3cl8jR zQ)b>3ugB^ujP8ksP~}M37c(=lf5Sdy2ue66SAMej5bX@11muH&R3%t#wduLx>U|Z>OKqVKivk(L#y}iXliO$D$V ztw(Q+tz>I#WbYAJDHeyWwRx)AXhN2VrIm29dcA85Yqvf)YAzgKa%!>&*u6Y(FOFP| z<4_cyJc@g^odQHf7$@R6gE9!V64(UlNndu}@lc*vu+xPJ;b?`@eLd_<8_MQSBj)F! z2I@2EL$YWd>}}3(Pkl0e>bw9{D}+0~uFw_@rwI8~;%LGZIy zj1Si=REZ$aZ}ywC)+)zacL6N5SYVZ_I+AO;b*8{zYC`j0vH?_Ya!fVl@V!ie?# zNpus@`c;$}xaz(zaanVgP=#28skL##acw6=f4c!NHYPYsQyphgyL@}Z?_{g};bdoq zjw>y}?2p4(E-x_$2?jVPy*sYvtt0|z%%*?Qa(i4ttpoi#R+IU%2G`M62TlNsX7;c3 z+a}gfAi^CVoeiPc3~eyM&qDVZ*mS#`w{7x4H))~knJGElKsl+35FTT1+$Snrrf5j1ynsBsf#I7 zhdPyNzkj04Ctt3e^|iTqOB_8{buY^iTR+D6zS~!)o{e-Q7*NCtNqnGePwSy0AQL7B zPDf3M;F>U+_28qg5!n|xPL0N$2910hPVd>gYXBcyh_AeaV_mFC^49!(AQP@L`qng= z+HObDQx5m5YKdOdX4yz)g3k4Lln@^27`5mnY{eAZ^G%>_S8vX=`0U1q`P{mnSbLCk z^TO5U%!yRJ$SoO0-LECE@_l`dB1*K4T6|rHvBK@Of!wtem->LC?khavF3}=$6UNxv zZa(!7fLM=dGX80aMQ~W$2V+-JWS!wR!aSVxDeM6&+^%dmH@Q9ymHy)&ioy>D*%u^L zpQw(OLE{KK;M|N4*RDyd>oi@q$Q zKbw~Bsp-a2^2Y|r70utL-7lcwTsZ1oqws+^`M1B8JL{D=ku)Jg^03^G0R%NxBNlGr zJhm!lRFBams>m5~azd%ys&|#Rs_gt9)yh$^FZsh&jfYq$pJ{Vm&Nqafv0g?X0b7dx zPx15kboxDA3aI+bn0E>~LbtVFE#(idT>3vtKrKk=tWpyh++Q( z`cktM#2peLuj-j-gZJ$tp!=J6DASv0WNv?^F-AQVfNA_@+$~*ql>aWt=4-7Or^pzo zq2-J*ndP#^EEQNL!EnwBAUIY&jD>7!TPswu6N0R*f)pXcZ2oD9#A7{$$!a*o$c=^j&ZB0gr=UQ-YDPwdV~{gBH@2sql)I&_5}j11KUQ%pT91VBtMBIIm0e6fLhr66`Xev9p-eh?T<=p- z(8J)?%}1J^_fm_5DI1^rWtb{Z&|Fy=!dW9{)X;U07Oo#XbCtRfd@%a$d1E#^Gn$?@ za<k)G&iL{4b!m3CM8xM6pxF&sO&Hk7z)K*pKar7bm52sm{0^IS#b0^w z9RKD+d>9!2zPjcECV$O8MKPwI`ZE|I{*_XFcAJ6c)I4V#Oo7G%kW0zt6dEygA>Y%O zd*W+ZWLm3)teG&=UG%URbk5Bx97;;r*2%AmF;=m&{@f%-jY^laL@H+cc^RpqC8=l! z_0>mzP~L~i5?^~vuKIvyAs6T^2QsdudcCEY770C)YJdP^oJ=Vax%lijg>R1F#-g%J z0d;7&9^3Nt=P9zKp0D*<`#nLI6H{m`rssW9<=m4X)IziC+Ho%!-SbV0=tel<=-43! z0AH1xtOp~sv<~^Xphc(seMm;+?CFWIPujAjGVr0*yHye$L#yhpBnKwg=gTL2L`^Zm zg;zmHKJX0(HbL@}@W{!;J4()nscw2_j#=VzKP2wJ4o|{A=|XqUqMyGm*{XSAfp4~S zW8mwe4o!k%Sw+Uzc#-#98gjs9sGA4-(z29~c`65F#(@o|g)`saOcGg)i7y0e}w0EH(jU+M z&a+*l$MPIPk%)=+b7veGQj?^T-QO(haCr>V05QWy#P}#$7U}j2k&GLIW<0U7BeT#y zC%HH02f63@zXoIuVx`*@c`W>_V+^X)erUIvBBeS-(slU@EP3XJFDELP&vQv7iYfEp z4m7RF+?>h7xr{5ppY0Pa4YSY%(i%<-WRZdZW8 z;e@HefO$t0I&4_xh(_W{r=26-nVQTeGPTO)o!5fr#R9xqPs|bSJE&+Mu&+2;Ta!lP zzi`@^v3%S3Xe5ygq~B>oj;^cP{*_a;KFfAmQjSedBVWqX8}GF*Yb0Z zgR8Ay{<=DY2|9!4;82*)Bz4X*$T$)OH{zBucE*bSEG9@T^;hO?f}#E^pDI8 z+3^qhT`Ny|VAin|xBof8W}+<_3Vo;ib3{ z;p{~P7KN2x&RZ|WY-#Bpe6|ntJ$wTuZP@e2=x*Di47?*>1>LfnFPtl_yoec^9pLN1 zPnm$#s9(%l@E&KbKNi_TRp?A=^Q@0DmbmTX^73+bPdI61BQ$#B9}pASCV%|rQ9|AS z#$j@+Jsr~m2H3#XW0LF+f7WWvIr@FlCsZEu6Du@Ap1y>|jRcR|c9deRlakRC5boqj zn$H-eVX_Md49JZIkH7%qwmnWUHWdwFNHV7bzcAF5(m$k@s^DfK0?b8TnF=GeU_|mj z?n%rvM&_k}POm8L!(?jX0eAbKo!QMi=wQHpx}E|y{sn?gQCJTpw&82yBAy9y+O?~7 zQoL`oW?c^7_XtgIWp?rQNX|l$vA%2gxG>l^5cjtqz@2t~(cu#XdsANGa;MkPm7}{^ zcdCh+x;o*Ql7$~{xDbB2 zL=S%m7yXc)sghw|fyJ%nUL8^W8}zE2Y+Klc*S(sY@3kZlD@vyLKXW}-d0Zwb`Gc;k zrEbFftBfnT2;=dQ;A@%`n@L;6CE`Q3dui~WN~9c0bSDO_Aa+8dPLL_jhez+A+pTIl zn204F$+U^PX%+Grlh*_pMjj!k*0XGQl;Ftm51OYd#=-}9!uz%&5-Q{G?Si~+%g})d z8jq1g7qCi6xrN#rIi_qQPAV@vAsO=QKTY+_(VPJ+Q@ffNsC`KqKip`>f)PIAwlN7fkOu zl25uZ5A%|M!3n2a+CT$je5qHbvxN)HbLg(yp(KYRP`@$&%DM98lcFC_bqkEi=zU^Q zeTYa1ZYW(psF=$hUS@-U)?rN7>V%Z7pE+ty*?7PWgTK27S6UQrylBg zaf{ngHhq+_Aj0d4U$M~9zHeJ12)=6!x#WGGT+6SxMz{3yaxbk9b2>Y{1bT(@;B++Y zvL1s@J+%lJ)(Kvj3ay=e7G23)DH&qz;i7ix5qz!Y<-Aa>kF1`9A0japven!v;gTNQ z$UWej{pqB7qHaI=o8I&EAzQ=SBjY=U8K+vF_bh$O_T7&**(-+(Bvyxy3B|5A6MR-b zoAAO;>7q9|j%6+cJ5(=)1_}?hm96lWj8WZ}dMxvN63&da^=7S;Y*JHTNpfE2jrcO$ z<&0I_27^v;N+avG3a1lm_!CHjg6%Fmgm*ml@4(_mzh5E#SW0mbQ#tcO*8#7PSb1&i zQ}(WrU`oE)`1o%{CGOc6SJ!}Ob`Xtr7+!nPs-me%ZKDM}I*mXSJ@a*=6mFu1yov&# z#ezfebJ1zPpo2UVn_4Q|MxTB&V08vRxP=#N1 zmPIz;oBwKM=($mNgv|7bb~#yGpSYqw1s zH@0otX{?EDn-il+8hc`^v28cDCQ0L@jcxOr-p~8}glk`$=UV5nP}w_n{MKT4OqdG8 zDvoz;xE&#}k}m%|pfC`3=$4`^k5ykbe{Rvae-^XfEnN2M1WxroDVb9l63VZ6XE6dx=`V@t>A_2(Zm9BfTWe0Ifc8w9jNfnRpau)@c%Ja z3#G4NRu}#^5D$!{yfcfKZSYbby6PhOg|&wR`mwDdT#UJno2oji9ub<%ch06xcOF9F z+w}(lT`o+jYm)>|x%#ey^2L7wk|$&qP|pa-tQt*Hh`-|c8VDQox^i^99-YIAIi^z-knElqmdZR-yM`P*sh{Hz;WT$%;7OC(62kB2Kpa z&VmIMt6&I^CVYx9lr_60yXhm~%HA2+BYb9S+$G}rSrVV8qb_4bhn@Z1`-@k*##D`O zQ1+^C@8H&BZzSRB{h53>GT6gOYnM0(LzL)iGn^e6q1~fe5pG65*P(6D}_Hk2h zJm5$R;57`9kwZPMW@~PBD1>dd^y@G50ikOmy9+CK*E!PO;Nv0Rn=KNtaDRkGTWcn^ z@7*bbetXiwwMwlu@pM41UEijv+#JaA0cid)(a~V4AHrfKzGVNsI%(xdSu}j)wVf8k z|NcaTg+-l6<5B-Tb@AT&f){ za%fMZ6Jn|aplzvFoBi~{zh_QExm(!Z4zokZNWMGQB}p`4fk0nL8h!?ks-m+ta?Cl~ z;0$+WYI)x?GURfF$Vfsk$TZ0x|1Sr)Z6Gl>pK1TP^-3q=o;x^aUW}H zd+L>O7j2J#I&WF-WZ>Nh%OUb43GbTdLdI(r50~VVl+ai?P-nH8mrU(HmlF)e9>I^*-|-{?@uL5KYMa9B@6})oS91 zsSzr7o%4OrZd97E4>Wr*W@5HcAE)aN@ZIN5po><$6MTb3hP5BCrnSY>=uOZ0)T-m} zsQa3BQ?h3F8^(0XvUC<-^6oWT?Uxna=Ntd)lhJKE9$s;?=@0416O{D)0j;$vkSYa4 zj^lF1<>w694*eFsUW=-$2i-P@&FZlsip7NCUxHKUkx-fDldcswU)%|ub66Qod^-VB?QRvarqk-uH1`d8z zYr+19k~*C-#}H#P@Oz`mGd`DTQ&CiV*7S+jxK{fO(V6dsa`(lub}RDO>ZP z({7zs2L`Z&jgerDy5(R7>!_4eK^q-U$MwEFz2sGz*el~zxZ=%ozoIRvLU^zSmE?Dy zYRBgtnHXcq>t3DG-=!eyoFKjX33JtOS8DU+qhi+u+O)7wF#9CwMB?#8)-FIIFiPQlsft zOw}b0`=mFpKWV(Mzd2qXc*vmtKtlY`pm!Ha-B(-BY-ze!fx?=@vj=f=b4|}{{GCxN7 z>kP|rwsr0&o^Qt|OB5pb82ZChsoyrbBeJ0-h;jo)78Nz^1t(+lZ=QGe5CvU-6PjM9 z6X~F9T=q`C^1k1cWsY`g4F)tl^UQ82`WvO?>|Lv6^Y*8!TJrj6Je(5@q02|Uyk{Ih zypLj#YWTd%r3tZ^G3ur?`>iFY-rNJds#!wdsm1Wmwuj}G-~+wi&5g!Xp}^R4&x85f zA$tqUJqqdH;k(cTVN?tw9El)Q9YN zO4>115Km@StNuqo`v;*KmXyOJ;>JXI0zkD*s$~uz3FtJil*p*5#p;Wiw{Q`PkI;O9CwXMx=IcEPNvskc@ z-}BGzVdL*i`G;x+p>2sf4$z1fC{K}NIgp`}hf4FQ%I>+0k7c$!Vv#DGcg190pO|^H z%q;Q_d^1GA202*1B1~Vdxzt>NE1r3D7G!c^Ss5f^vF@7UE+aevWJo~|^Z+tc1TIaY zhSaqQ8`Noedd*t11xAMGaWiNcj7im#DM-FcFdL}t?NN2hs-s!T(nsaYS98=ve@(}oSz^Du zA^+{}hkJr6OhIWm@gr(8{WzYwIq=%TXfZoaaF@!(%E2SbVu^Lgy*}RW!C*X^U@qYF zj7GIzR9o}%Ugv@J!;Mh$>0J<-wSkfyvKgeOCl*_SF;pDp999|6iq{-k?7@xlD=a~# z;iqZ1X3chWW~}V}+xNmQn~4moGAlQ^Tz7kZ;N%TL9v6$fiH^+)!cy}kZop<;KY`BU zr}N5nfFC%u?G(Mm`8*j8XXR@7b@hF(4C-{J$(22=Cui3dSykC5xZul|6FxP?8pWo7 zS|&c%gPAzHy3Ybv)HD>oYKp-$ zFbG&~1Jx@b{SJeF8qn~$gCslz2U2^k1>dfRh4)L|A36P8pY^CHRxT?F`eU%{G-90L z4+%0O1J^3HL*$Y2(b;8koOu`5-LO(~Ii+uh^pFT`idT<+nX#I<-2LT_WD+fmfo8sO zo82QSRvjrwpu-zAWJk)3f$c!i4{FVv&<=3bjl?S2>Ydnj_sN1Z=?LiRm>{(decyc>V+n@KF)HmT6Gt?^vgMJ*nVw~o<<)j`;?9=N<^ zT*?|7<<`oguZxD7tPc`Jt&bnh;amn4~@9_zvR55fI-5(Ae zky$St7kndQN>3Vy>00%?+@`JU_d-DCVoOdACMNrdn8N$OsnC@v!T1*ib zK2ISmD&-Df))PRL`YWrUF<)0#mI?~$SZ;IwGM?HwlzG0RdSEbe+vAYC|F($7`M$hUAJdgdxwB^Czxsc%R(62Zi@9L3bB zsl5u}6L^YKFSKS7VfPwX{y``+Ml-{455s`8z6ajrLf$~n_OAm9Ie@!LnL;Uwgru3? zKT0rPV|+Q{$9AG+Cis2$w6zrk+;-K}l2kR6MI??<2=~N`EyVv`XoZiA7_VhTmJwSj0-h=@qG1OZsQnB}f^p$ZWY#QZM zEii1R%5MmqkfABo&Diz;#(Lfivo^vOsbu@g6!Mslsw&}V9iQ8Bi_hkyYr}oZ)+O~c z@(Z(ur?aIq=6)Xj!Q(KB08sk;MXXPlOXD#nSVqssDQ7BZu8&TLq@&C9IczSB&nA-c zj#h_lp`)B-{e$j1!BdFN`j$l?BPG4`2L;MT$iw#Q*JPDFb*Kk)EZ{PC&k&~z8ty(K zq0)9dkxVRQrdPudE2kiQ0UzeR>E|BdfXcGN9RRy>n>F>9BK5|h9Equg`|ClM?Fbeb z?MVe{&i>)Lst#I)iahpLXA6B_?p%X|UyG~K5LbEc239#8-QW;?X=P=h-;6kmF?<6! z8~m}sh@-;(>q1I^pSNHHAd4!yaP*R=&$~3F^Gu{H@f!y(wgM&N?*MW@rQ5%KIt-MU zhlP3sQOrRbvhW;$xl(<#Y=8Ign^lyR3=%o5&!H>*)#TYw6Q zN1R{V-S%wZz#KZF>@kIk2;-`+7@+lF^d*g@6LhNq6DQNZCo|kC_lG|}kN6W?smd!v zy7b+k?{ZN^w}Bc%V%0vZH0Ua2G#@Im{aLsZiRPHBW+bE z^V=oR6t--EnO(D|7nH zjj^hw6ewMvHMPTU#u`y%$=(HjLhi8j8&iE=fP67z87KsJ@0A9r-Ov)0e8E`$idv~k z^n^EH_!yHA==4xWAre)y_bqG>lini+gT`am0#*1F{xJ**4$km=6bppjGt0OuNpfb> zyK&$O&6tJTAS*W4i=i{aP4=!oho5lm4;?qL(^Drs(p-?^S)XzD)ftE-72VAnTcOx3OioQod`&Fz5AT~l@kDMhKY9bOKu0BOF7j)AG~(x<$a)D54&)1@W&uN3-q2i=+Mon<^IqZf z{pPXX(T7YaCP&Uf!K*)CvR~cDd$GCjfB(nh;PX@Cw+}swQH$FPSS8sx7q$qS^Ovg* zZfc%Ow>*7b7f+s>1#NBzuws)i$PWV+p<%#LPJ(VdChqeN)jwgdK}${31t7ck+SMGg zAu!4(gEfPuph>O2TjXae%2x@>_6{xojTuh?_PZgowb8rz z68%1e+S&tCaIinL&o{QW`8}-W`xDIf=Vg72rms<{Y{cjmt0?_~FxuA*n^*J18VwB_ zgCF+hXps37m}&Z1jG`*Z{YTF|cOq@uPC*@Q+c}C(`|^tyhs?g2@9SLB*Kr@`A}aKS z1#kx3gZwI?p0(~FJ9z~p;3R{O+xHE*1d?Hi1%UdBc;Xd$F3=L7iPR`t@{JM1VU#4m zdF~ll;`jVj=si`Qz#cEDxlppKKVI0z%KJf-Fq0IUC^uupxt*ru-(Z%&xPE$#hvX9J z5XldHT%o5cqb)12r};JFU_mWV-}ptz0$>x6BqMF>*_-HnURkVB8lqehyjZLj-5SV>|n z$|28mDOPh;gp@&*u~hXvS%`Wh`T2tL>B-=*VwZNu;`dd>R(4#6(wn4NSbuO}^hol% z&Nspm`e>7TLUqQ*1>SV8caO&- zoHe-$PM!;`NzjDNO#eP?m7L5Sr}b{>p6_f-8}x5s(4$&B%3|EBn#;W?XTooW%_+lN zX7OP5hY!w+x#+`Hq+mg!)5WG*KQn%3`O`bom{Rp6d*|$Y*w2b~RrZ+XQ2E?xXbdHK z$BRO7ta=z4XPX#oUfBa?P1@Y{qdxK%UB&-eAmk%4?d&f6_<8#6N}enEex_heQAy$7 zaunK_xes`gCPlU>P#h~v4#bqQx*bUPzT5_oYuw@p-8cp%ojU2lHDOX>q^c|H>nh6U z^5|48`L4Taq=Ju{Q5*T1(C?yqKNRO-l^^k09bB5m)*5l&%&K@r*Ke_b)EAUhxqm=J zLL&1|n#hcz8>_2$rM6Z@)m~}eg2nhH6s=$-8}M^GLh_q-KX1>;qzeZ09!W-=lTfK= zzw8aJZc1Oaqj?kHn&t3^WobcuoNX)bOaq%P7o1zqo( zR8=(;)YTcY4cvZ8e^B)KGCVd;8{ZnEFNTPp#bbwMcZI?I2P-*~LIJm^Xt=b}x}b{s z$1Le%VQO=+h7E+$WUmon3U-&B1M-oY&0*={n`cIq(y_DOW*Y95KPINLkACW^Ix)~u zc*5LIOiUK72SR#H>35~zY56roB;4rb84c`Y;+N*D*;b6|<1WGdNhz922HNssw)|o# z6sJ3K9oEt(MFHUc5R>O*H4P8&EdD?aM!+P}#u@2%qB?nNgrJ2lu87dU%z}v8$SRp< z_O?|B1E;8QmhyB^B-lJIXUInOI!YpE$=!`P$Pc|)i(13D_UJP}bzfv`EJ|y=Dejm# zXL##!b}88ESx75^IU}f*58o>3PF;oQ%8~eDyCJei-4*U`#z0p_JKpBJNp0a~i%t4D zJmqfpw4e&&4SF+Z_gO7VcGpl=mQUQ_r`a|C+Bm1vnmSqIxMd_k-36TeY^RXF`%KmM zcAk}6{oit@o)?c^f5+L~HCH2K zC>}$Jq0}czvww!{eAL=q`>@Z!>D*0XCj%I0+gVG&CusnO&i+Y^ZkOP*QZGQ~cOe&Y zWYxx=fZuuID#H>cm(5D;)!|G&e7O6Qr1X8mN{?7~r|bQ1fuf)tVvB2#H#Ah8nPUC6 zHSfrfRIc&kUjGgpZ`sIr5sL?*F1!tGrES5Z7LgPZA%){2bn^+5vA-=MTzZ5VCCmYO zPbcT`axHtTSW)sk2E203Y5pAPPO)%ob_Lf(OP4{ya0#0bBi`I0f8C2|BT)yty_c|k%Y-=QC$Q~KSfW9cuhOw zenUD9{+j>pRF{69uzNZ7@2^J_-c5o82++cayI!HF?t? zBg67mRsXbc6iN=7$;}#Ur9n`5W@*agQfaLr+Wf)|{M~4lKqxs8>Zhk)RO#LJL2*oP zs>hggPGu6KhISAKT@Jj1XkrgGPDU~@Y--G8tnjitWkSM8QPE>C=dkO~VvBD~`%s;c zz2l%YxpM2nQ}`kmX?-jCS9&s`F<4+*UI}NV;1i z;}Eta4q168EM|9Q2rx7D;oeGDc1qgp0-KJx^mRO1mF)*IdpC z*MRGodd|IGD>A{O@e+3LtN5LFu0&$kdVLdziRph!^Ga$`C~ueb*!ty%hs2Ty5YT*1 zG4)vM!cKi)O6}{Md)siuC0cpvU%rBx(s4a@<@Mrp##VB>2a5Y&)20M-dC}R^O!&rT z?~IY|W4H4oSPRpT>#WroVd&Z0{(#y53eBeMODssg!K!u1i*jtE2DNGQSPB%ZV*y1* zgp__TzCiReG{?TP3bS#;9JBR!p(0pCqY~V@xk|Q^vg^yh|1BEWCS883}a7om;qVyzH2@@9e8-cHLnX1*V}@A=q7DbUdnGGsukOjRR*vB0~!ohATe zn}bX|f*OzzQ9831S)dI!lGoCz=^pUal8J)8Be7Fomse+b^v5PeHZ5nYO5e@AN`o8Y zxPfQRaIRNSYU&wfPf?T*{lmhc^G8lWGXjL^ws6~OAvt~|0pM>23ySHz`~%=b;`0P> zlmd|3J5PH!f#fQpODs4kc;nHcx^6HzyQbcGz0x4?dgs8Eg!l(ZDd+i z+r>|VgG%urn4ho&g3{7gFiB+oyRq5%YmWIXAU8WvT4B_I>(=`KIgRDkgMEHO)Jv0^ zvLmH#FPYl&s*15w8E3%w3YA;!TlV~GdeVoAT=m7R3I zpxnC4nbLiunWN>K7LzQRR%BWVszG)`->q2&8TWGPnFCp?*kWUD2^$xyEF6ykdcYRo zxE($aYLWxlRaGN*I)Ib;;z@4$a%T?@Ugu?CrBe&B-_>D7Ml}h2n^2RDpDPf@IE%`< zqALb-r>7wu+7ZTW(wtx;dAxcJt$niUWXU6(6Cd9C_?&V{UHolUYb~^)^wRxDhfE+6m2HX+Jc{eKIC3hU}5(&y&JreF2mEq)W@9E{fQ@5bAHk(-#AuQ_h@a z14W6FSn1J*Wvi4mi@JlrsMfochIBU8%q8G{tyMtKXj#k+@)K}-z@o{9`~oQ~sYL8d z{%KqE-=$IVr$2cP7c8OX$u-gzumjk!qp~{K){*Cq+2hq7h_)K@auBiadDtfP&?k|Y zZg-D*v$FeFAp2N2Gn~9QG}&K!Fx2w*3@2~mlJ<5)oi6Jtc|@Z*+j++H_3ozNpel3M z7=2CGRK20lz#=noO&8Z)>`75kXzD!cd|n57-V296lt@ALuYvJ4KLfH^Y9kke4Uqrc2 z3^+W9Z%yM=3*(`a_8gkm0PMAh`StvfS1Fm@sH595i zdX_iv`HP$4d#%Eh#tNsKm7bKQ10qbkI1NH9Unej8>Q!`(i?U_OI+&R5`H}nk`}E6U zh^FW6WD&#T>bd73f~9pqzkwUT^BbRz$ZRkD;acKoql=FA<29w zyG03#OF}x^x%=7kcdYab`#K36;7T#2UFii$A`|YZfx)4ybJFtJu1P*&PHp1F zt3k;0(3WUrWuk?GTbnawkH}FyE0NRGgjxj3;yUbUz)RoncbbY<15w}&!{oa+;mtq7 zHJOsKg&%W!!g4m4R`{O}RkM?bIDLntTzueX<2ACHl~xg~R!_ff-$mN__6Yu~6ySsi zg=~|D2%I3Q_!Ya4ah(;^wq}{G->MM^{_4(N<#hA$x79a5PN>F|>Anc3kf*oP-`y-xhR4KNJlCG|pGO(&}6U6I6hmH-R-dLCQ zb)b9&E=TKfB%ZXASSTW3c8pu&hLc!d3Q(DeqnV!MlfL6{?lPUY?6DY6QPgKceTJ@} znPM*ZGlMFNfK*#j8wy6^25pdm&Uk+ve~A+!jk&Z|PLpiroCRi(-1wqqK={2gfIIH7_nCah_I$Z%puo)+>>apJgbZJ0@fybQP9xxQYHJMIz*X#zQ;%Nkpz zwmhv@u!CU(j_(Rrk#q-<849A#Y_wBCfHQdaGn%4yir9j%!WfK&IBt~5Bmg(#*2atj z>19S#8kQrujGaYmL(bT(?b3>HluLDc@G+J-ia8frqa>=ObzVtVq;Cg8DV?C`Mz5Z` z=Dq6btd!k4^c@a%BJaK)Q#t{uSNvK=<;^am`%9}da_$ftyBu^S3u-^$-f~2(lD+K zeAwT3DIz!_NQkv@$-ShHPsd#b3oR|}Ngx+pel@b_&jojYudlD&db>JNcpHO3XBz)` zrz-gZv2dyL^*B^>*i#Utnr6!^B_X2y1?Qh(yi|#+VCxA0=ZqmO@^L$sj<0*TG)b>8 z0N_mp+;*0ZsWoa?Db;<{|9ygXCHR;6`{T+Nh6$Dk8n30tuFqkaWejC`#d%R8ob~i> zd$E(oF9RG@lI>Q4E7AP4iG^^76e}@lQgDsZERPpH?WO!$a=EmjOQXDn1533P+iK#Q zzm%v2Z+9`^BVZ{MjJ6tq6nM{v)ilNB-N{H~tjh%v?9kydi5&H+;TI5;@Y29f^7sK- zUJ5B_R<8~#hVl}Z8Oix1xI)S$U}P3(3_1hSs8`=0Gbu~LH6x~IOE^51VReezM=gO> zJBSjWH99Z;D8K>eq6S55Ln518jApP=b5dBey{*S;^6G}<=e-bcvF(Sfx&GoG{jAxe z@zFsqLgxVCYJ;FNZy8gpn^C2+2gx{@4fqVjUSpEZ8S+MVjipb(c&KtK z69{QpTX70$OO`HGaU*=*MeMuS?>`u^c=4jy2+tSiI8h<-m_*Ka|8qm=b3vw$O*zn}Po=zWCtFsRB z4l?0jpZ5$NYF1duZb-|)RP1!+i%nF5>b^sxTYV~{PJHAAQ;~%pmR1+Hmx456kz)@C z;@RRMIO6m;t3hM6RY?t1)!)*Yi(!i>6m-7u+f;z~sZzMi774y=PPGNs8Rk3UB(AO4 zDN;)v#IkA=4S&lo3*a|)2QBgP!4mn`@QJkE*2_d3Y{x;H3-G3vw7fbcCzQe`xWqI; z)}Tu;)xu)eor&~+b)Qfr$9*E76V~i+xkM-l<(>^Mym=H0^lG<-D#-MvRysi%^IOG& zJ@dqgU!oSG2VIiP6&cL$S;?=@{NtjEi{fa+zlF>~^11A7g4^f20u#`a!YZ6+*B0n? z8E?vF0%=~=2-=8eMS>D4u*Ay;l6u-H0$0Gc6kYMIYItY>7kn92xcT7Gt`tQ|Dh9bW zYwz40E;J4FLX@kydF1i0hp1NzK)x+cLTD)PsIqz~Z^e^pb3r+W9r2b07%u{g^>ai) zrL2UybMzSW@I!?{X=M4Grbdb_kFi0IECUAjeDi#j^c;rLXhf#P`BCAo#8YWexnbo) z>;!5;1y$iL{p_Uu4(W^pSre7dHs&HUVzLI(9uk@A`1~SSfhjp)@lmS)fKa4Xfonpt0bRGO zVHAm%+EwxgAmSn6)$Bk0B9?yMql#?is;YXsAk5oo6l$yn>ma7BF--d)uZYObCTB0a z!#fRkLg*>;dg-x+`1;!M4Y|T*E4=HEJC>`6E&XTpjPAJZfhA)lBub@DI`P^u%si zzhM`X@kj-G5!Keqo-lgiWs~0D(2sPP7_){jIp5JwMNU{5*f|_3!MMl7&DggE%W~3T zs5JcGovsSPh@c0;)cwIz_pR_Li@)Y`BY=p$@~tcq#T_}kJdVvT3DVNYrv)@sU_oWe zs@Kw=d9de4!gN038#w-_&*G1?DyMOx>=j0N?uYkfENBLwqQ`JnhZDa4;tkb|5xD-7ao$15Kz3KeL!+7w%4YNt|Uf_4tM(*D5fo#^G%-k3gr(gtKa&)F zkgHxrvQTYW!XOUq`*KyD8F4XP;cT%#;k9IxmH!DNt}m;3=Y5y)VvJy*Y2(iI)4m~D z4|R5#@C)6dyoQu(m}H2McVLmEG7Qd{;Kb_YJ9$mFOPq=02TiSp%T#}muJ9}8nGk)v zYYFyy&w+mJtX)6%lE`iG=H*cobM1*$oP*{PJEE=GXKOI7+{G~Jw%lG;jnGJP>V#4K zpc{B?3K^Yrl{vz_&B3rLRgxI>q+8mt)$wJYXJ1Z5Y?>|ZE+mgO_k?JC$K*C3%XXlP$Ad2 z&Tt=M5xrj)naQSS6as|z2LF>W_}*faY^DCG*Sx`M);)d#Vq%EM?U$X@AJwBm16T6t z?DN*NemnI|M)1r^ZCOXF~sLG@4#)lJ=DeLw6rdjl5OApDpMQ@|N`GETH->%TI%a*D6jveoka zyqvzxxYzf)rmIf91A^o0Bc$=D#PC8`(Jx9dOBe*S@Hm)BslAwmkcu$o5B8pqSkR;x z%e`}1J~CH}U^}F0c41JH5PqFDf<~x$L{viRzZZJy0! zr_mtUKU{tT4CpnA@4Vk4)S3pT-Zxn4W+r7CW-p)z&IYnBO&RU$82B^Ac6Mc(AlOVf zl%D>l=^_yle}QP5#I(^k(L%I|8t@tfc?*PMVDo)8#@R?!d$^LH28IZ@$2A*by?J`> z#3R%_wP}4^c~(gL@f%oppp#-}lE5E=88n&7uwlrmio9WwN3_XK@pW8eFI8#;LchA# zpLtyyg9H1RLaP+W(B(hF=#(y{GrOrsDti$YslR^SCM&A8hxP5Hp_t#dDRz>F^Mxb> z8@dT06jLPPvP-KglUM0u4Nc~b4Io1KevweaXqmB%>LW59cEJ7F(Hvba9;4w$Icg5h|fsFy(UzTtRP`e{K9qe*eiv#`xbrHd&C{?0yScGFFg0&Utt-^fro^ z{#T4@TXGsM!OJlQvQ@fKLw$LpEdh&lXWA$g6Y21A<10v%{9(Q~B)ba%JJIO8pr$;D zvB&{UCEsa<;xra29c#7uv(G{0sO5Tnc3O$N*;0a75@~>3b-HZjVD$Q;jM$+umy9;= zzP#nHLhw!<@Y$l#I~@f7fy!vZRUqT@}8YAW-OJ= z<~X_Yu1JL9K{Q8)Lf38nN?!-YHgkQ~NBJ~L1>0FBF5#wVd7pBttNU5K)_`RH7xEro zZ$^B0T^uXg0`Gg-oabZNl(Xt$2{fegK@$zqHL!I9|NPcBc8dk&x#k5GpWo&5ja@0t z3n_ee0zbz}BF5IfR$^&)L}ggtwy1V^e5rXkxqo>pyS1aMEa{NoBf-zzt`ioVB2KZh zysvYBUbVGa>WECu(dk7v9O>|3S!Wm3@vKIaEEdFdb?GE#Lu`4u?3gTlDPLz;U!V@29j=*vEzWozoeq*ZcvpF#I@=fK zMO*^3pAZ5ZxWlfsKBW6?w=$WRz&1t~$)i!1j;VWB|0oUhDkkRX9R@ovWpuV+!{6DE zRwgMLBA)w8EqDnJz-1@O6x3yIr@sz}rOqDQpEgo)rfB|&ookzx_hzhTK-$>XzVJyr zcQ~fPA0>4)Y{uZ_j5IWKP|$%7p}I9l(f3ew4S1^OtV3@tprWAf2*YTu>-jw0vls8^ z8|5hYBIkE|pyRIQHfxEbh(7z)jsG1y>lEUuZ-6qZ0L^+J%0WS+AcNwcaAUI!VlAq7Yn!|c7)~xR``X()SuOt05ln7 zQ!B!!v11{U?(&E6ikBIwDAV{&`-Dr_iO?)61u*e>i?R1 z)m8Q9L>6md-i2-IbWHLDJ_p7RP%G|cA?&l+%CeyX;RY-L=I-KL*D47ziZOk7sN{TR ztgLtmq233FSAWjVihO8D7FqhUG1V5iRkvlxxM(v&4mB87KK-iOy}AE6_Up&;;3sXoh7Ai-2IvgSPgPy*mIENWn9g=JNRZeJ@`4df=M*ax7~4 z`p92+1ehSc`et39R&{Gwn(Ppzo^u$R^%4@R{vPe((p~*h1Iea=+(Km^>hBqYX(c^N) z@og-sLbJhpa?|r@_8Ag*N(aoD(R)M_Kdlf-sC-_@Odflt0_K= zt@i;-Q5>#gaZN?w-JYoIxGawnSo*b&>twrx&EbrJYCtDkcB)sYC+z4&@MKS~y6eh> zDT6?&a58k3NXA=_ItH_dV5u#(^R;7ia(%QoQsgOwh6?Y=ng=ZI^nwWS4w8_AgVo8C z{*@q+g*;%?eQa=|rOAEsg5^LYe7sR<0a)H+poCSE-khY#N)B!VO-7$s3>UL^AtX(8 zr^Zf%`yW9!U#`=+*s;X)87I~IwMwSVwr&_y2*eQGI8-w?Llv*$yNu{?6`(XE%KN1d zV+r_)0!3V}ws4Pr=KYK}*pd;pB;u9P$m(^-kUO$+;6U-evvVHOz9gzBuG2o7&KQ2k z`iv(3>dMWbq&gpFex)`vohcpa3#$pq%aqc=X)Z}{8#SS#lt{o^mhfCppyadQc{BmHm@y3m2irAFg-4Lo=)&{iFB$l4>jkWA5Z>WiRiNS^VxGZ;d z#FZ0KUm`H=Jv~<&Ipl|oJe}HYwue!B;PO5PUKS25vF0|HEWf^sI%9Ik4wD5`O6)st z+%5tqn-*P8ITxL-Lx7(<)3wlrFn+>?XRsm zHdYSkZ2JvA1VgPlSJZ;T3o*7rq?Z_==~CXqV|);3avouk4TPfFMxjZuo#9Y9Jv*$+ z9P`?`h*O6iei6sZ%6bzVx-&z_0G|2i;W81_D>efZtYQP=UC#ID7hh)#mWSd<1H&85 zw#b4z!*c?9x%l|nt$-47X$drDOA`K4^b3=Mh;5YX2hw)Xqz^*qQ%M*mswXqcA|A&q zy}=Y)2__Nso)<_rGX{%6Qdd}sIi3kf)Z~SUn^j0mhi1P_Daq)wmtYIx&Pcs=_zn** zOyw1+xTb!zG-WfjwG@@0V($-F6Ij%iM1ev@!sSW07z3cSID4Rx#55!H>GroMxrCB+`n`D&Qs7C!?QZa zH__tHR&q3<=DJ>G zgdV!A;&Rh|?BJ78q5lk5wCn`q7DKcq9+!?DrOuiAejW0ECOzuXmI)hTD@bMGw-UvX zcmir4(8CQjWR_&d$qAYH%^n*jbE|DDZ&gb`B;3i9c71wv@v@JAc^Mh|oIWBWSz{8(PZ4udaADN44*LKSlU z^STaO|Eq%3!EW8-ISnY9Ovxi(9-hCXoeQ|4w`3;+vee6O-*1Gh{&^JsyPgpfx_#bk)8zTr2HXrYJ-a8;w{4XmM9?8 z4Y2XET~ZI~4VT$ngm7Zs2ICrIsALqGRHc#K9EI9ms#K`+r#FQeB!-1y%#n>dG+hQ1 zX)PC+2B<1cm@{%kjsU0Vg3iL9+E`1U(0iPGL0!U4a3M#A*TTz4o9J|)$3iY|J>~+L zQT#f6IR1nhbS9wc)2k`m(f{5BI8RKF$KQNE2MzL`few7EO6&cHFnD+x2D*Hbp12_) z;(!sg{3;vb-TS-&8|qJ|@SFZiN-(9-lr+Si0hy6Cp##rWj1~FS?TI24=oRac5&)^w z(!WQx1$jRs_Z&uD)F`+})rj9L97y>&ar6*f8&x!yBzs&%CoUyB37ZI3J%03uUGb3Z z8fs}t%SbRz67h32WoJW4BK?|soPK9kgQH^;_-5(#@yj#(C_adsb4a#ufo8YzB`9s8 zi({9#ptv&o?}K>$30UDuwyf$1e3otT_z8W;hNJBgu^DLR!+I(LQ>?`v+KYACJ$LX6 z2RC4y!=#RG-57cWzidfgp+yirv7hSA_}oKe#;8|8_^g?%*=}<Y|x%j1uH_yFm>AjF5af3|JpC-h|yoD)k_)R`B>E#T_n-l#dL{;kCSPg}{RnfWYhWF-8^W_QNgC(-8%iUv*EaV8$zP3ng@%U=QD%cqL2wO*mSVyDX_I{5*b8kt&T^A_%Gs`@UbqcD8$Q zcYxHD{LE@lie3pAjtlIUL;#`~K%`sAU!EDDvs@WiU&AHx@}=kb#FtBI#jEeCKQ7U! z*_mjOGM9o^5?8U5huU)mCRdrUXZ;5$C!`ro$C2NM%6Bml4cuu}^J94COKS_Frd9|A zuG5882{@A<8ccw{?Y7dxatbMc(6e*SIF=B%5#3buka%M|0itFA>llma;N?w6+~5byfOH$s&ZWgZ82cpr)^iDe(7+ z+<&_ea3rMNEp;7=1fBf(HA{x1{shNE77+`S4f__}y@5aXueisK6#4B~l}7>L0eCAF zC-fIf==oXG>uqwkQvV7zH_NE-#c{f>sy(RrhuZ(+>KohRYTIy&G-x=nZQHhOHn#1i zv29Fj+i7fjqK1ua?s?wsFMI!kwT`*gJ=c9Qxt9_TDG|wT{7Rz_{SL&*nqN{ZQEG`q ze#foVXHgT^WJxHD8*GtZC= zjsDSetg-}Q-)3NIC%&rTJb+x#3hSr2Ikf>5TFdr zUV*h^6fPS>PCpd2fipk}0g^@Zb$waAoO9;ANfo$yG_JV<)$@))>3US@Eu4>=Ze7FU zj%^J;lhs_U7sOt_CN$YFTogCiaI9_m<@CHB#lG&BVR-nOe^b-b-$s+J#()f>w9_7{ zP_xmT+uw0}ZJK*ew<{efexLA$>{8JyJ8!T7D?s2nstw4C$z zNZ>7f_~Vh=zM5ay^MTQhsPh9Zs+ch69g^CO-uS7(e`h-OBfdo6D-d2H(*ipIK{z*c z6ZB@IbB#RB`)>Yz`&iN0eu^|`6>F`6NEaNs@&@|O9+p$nRTr?hMs1-ST89~na^xN; zlo?8g2Sv1RrhH^AsR}?O@rUbc;-&Y7 z=)j)CeV2f#(Y#eeGwpUZ^-*ovJ<|8c|g!wJkAU%b*0FEutXty@TS9-Rsn@>17{=v%zTfG58y)$*ARtx9`;Kd85P+5{Z zR%NaAF(KWI(Kxe{z*zN76?b)Ntlw4jyO0LteE{^YIL+}Ncyhry9*+Hf&8RKgS00T@ z)~>g1Gc!UP0dzJV&$i9@l?8??3b_SY&#z~de9A&XI()7#DOU#<9}}<_xJ9{xa*BiV zCe~D)9H=nLHy!)RB&nYhzgi2Ur|%N7|v|jXH6*ga(pV_C>mXQ2byfk1!d=C`F3W{5Q6r=4v(C+p#{?c{9I|cN+ z<@0+vU9+i7ipg=Yi5@~JYk)Mhwqn)J&Ml+wSt(;f(0L{`+gtcUV3pfE8Y_`8E5%^_ zzx8Ao>(kq+e+D5TqERGCz+R;bIhk90Pf>F7lEqZJ10)uc8*vEre*ud7*3I=LjKIDG zi1@Z)p4v zM>OeM`qJKxY)u( zE(dZQVb*rt*)R0KAy#vgLGR`UX_qlRr=a{fBWW6hIu3t=6SriQWnN036^AcE&|UNb z=}e{GZF?G?IIsO4?I)IHc7=0AB@!8pYH998B2Rx<28Bt~xP{c>CYPi{ ze`KFyb0XC~Q!HeovWnIR6F1?xrjyc59jY`jg+~SlOZ!D3eFfv zw4kvUh`F-#*m{;LrNTRrsyIS^d$`eghW%p(pLm5WFF@)f^Q^ZARn6;jYG-qe2zO21 zk%+Mx_qPn?1ce0)m+!Mmvjd_yK|VABbpPlx&cOfZvoBT%)!B~=T3OC(f$J}W7gt@G zxF+9jw0vvRV}$a2`$gaoG%wRA7;UeFr?~8iVCg#ot?l1Xx7zKfRT6AHx)Ab>S<*W! zsIji%R|<^6BgRcS+0w&D9S6j<>O`TjWaY`%j(eF-huHq~u^bj{WrncO$2@Y9sOyjx zmtL8er%Q!l{XT>FGoMzH4=uisqGxsRYnE-`cP<(+Ig9D+mnnXK04#k^HjZ6aD1$Cv zV0xL`5hg^FXC8zcGEd4O1O=0nUpQ{YaQWyp+|JQaUjJ@TDP`92<8?5{)vCh!z!^#h zrT+`Y>-5KKN>4RIQRiT&473cR5%KQd>A$D2(?;8591fFJz&{Nd)23IPP<}ml9enYP zg_uV9HrVc1WQG?|qlv_?;-gt}c5e=q7-Qk?ag( zoS5oepjatH*Ez&oO=}3OUDibFnSkkCwG~1OmA8r-iRc-6A>&J&g6!CLe&XmCOL8=1^#3LGV0bdH@aJQ?buNdRAVr78+~!{+CI zD+&PYjgrgF>9Q&h5cn}~@+%gTik7S5hf=!PQ61B9*a&V1o_ z6+m2fC3(o=2)Na(KoVnnCJ%BAYW%*itK~cQZY9dTmmhPv)W?%w3v(pth&r!kAR(6x z+m|CAvQ+zH^R-fea! zk3*y2w$!Ffu#Eq(EZk4qua47OyLY(NgnjF?;fX<0an+`nEF}Z#An}g#ogn3#(3AS z|H~Mi^7zr5a38-KN@ON*nkhW14ddzz2bt=5O{O!sBlb&$OB$Thx1mH9y)PNpn(x=@ z)a@@0Fh^&UlN9#5Yq%L5aTDQ3vaA*Dh+1u17l~74II+u-!z8XWd_txKMsL?7z(sjs zeT5N)J`V*ynY?0DHuM=yuOvOW{#&@VE9@%FDs|!sy9ps6gz_0Nst;}B{i%u*SyWjz zh_^0#t4Fv$=qAl$$*5Q&Bknx=^`D`V1^$`c4a~h=`=ng6G^^A%havdmQeglmlQ>}k zj=N!Z?noA!{T1Jk(z%iwFi7LkSEt_5DpniKzR_sV8;%wSR$AAy5W$ArR9M(?pm+z2 zNXC*+Ey-AGv7v?X)MmS~qfnG29^e|aR>bd|B|i?ykvYHXl9vpzm}aGh6uhie2;f?Jx6#0bca51L<5819C*(d$Uqx3Bqe6k-&yp2+oZaMF6T zgSF>zQo7cVBp~nv=kMuCw}yB>W1ZD^8acgx3ikD+oRfk;!n4&?l{(Ey?weY@nK;3x z>;WvGsD`3=aB0bGxz$z&xh>@jJYdhOiM)PS3@*d6v85lRxs_85_oeQv5rC5Y&X?XU}`O}0Z z<9SlGtd+na==&V)b5kA3=`a0r=Bg}+6QATB8h z)$McYc#$4KkYEMf@8{>|m3CK}wzmIAD@Q3@!i~`HqT0l=*YamXl4QxQFMkuJqy6y2 zvZQ=i$jJ(sst)qi7jHp>ZI*4Xx8fj1n}lh&h=pw)A)D{^A&`wPc}0@Otszs$@x%)I zcO0#qBS2KMaDMkV@wWX+dAp#P0wu&Mtrw(E zYrD0Dt!QqHjE_rlx6fWUB8vJYBLv1XU= zYqkp;`^+5QK(0dPWW4A=2{XN3m`dTdMDL%y=j!E|;GQl;9%jy9OqsuiKEyDy2sVCo z9q(=#$DqSQ9A)n?q*~58sSK@AdE$_lqoZqMDJf#^q40i8{OF}z=*HA-eVF;3UQ_}( zmk4+-Zi@=bcwRUeTgqg)G}}5-b66so2qI!i()Ei$js-E9*vw5q)Kx4dPH=io+UwDy zL|(BP+^ou$kb5ZN@Se@izI8{;Er*LF_ZejZj>ymr~ElFITS~h8FDv+Sj>0?yPhzPBvJ zObL{*Gi%fGnAPC>NZ=x&opQ5ypp(WtvoNV(^bSyQ?^^J|I>+!q(88}S0Y`hFM0_qt zG{Sg9Yw|_a&Z%S$XScX7L^O0>RfVY08;!J6le$w=W=)TfaGA$j4qY;~fS!^4r)G?dlq4vgRcuPKvvxv74SEoTtrO% z>inPdiPM--I9I{5`|yzxi5S}NY#YZ-c}8+Ktm7IQz-_B^>YJAcgT@_W7 zIMB;ynjh{p6@cqXLV`^?S{uM}jZ(RIqv`8=aqZ z;q?2FUdeBCNVl* z@kbK~kO)e&=r|hC00}Gq0;Asei4GFfWdy8-(cwde?631Bb68RRaE*&9uB8!6LPXki zvz*aZ2gi<>f%G9AR+K!-@@nIZA&(we9|V@&G;n^u-sz8H7nC&?W2tx`b!robL_#?` zoe4svWvJ*=+8L;G^V?GGRG6uh$Z7Kj%I3dM`J~alH74(cZxHPN7KD&uLYTxCFSbsj zY&|=9d-*<@foFS?O5b4I|-L4jX#*#AN-O zhU`4IZ7^CR@trN>AQ{Sw3&;Nn)xM`KRX7q0=p7eOZhN|>(mUnEW67c{71nH|CaU^Y z`pw?Brk1shYf+(tby{VkNs`0^!ykswKUm=L(i?|LyCXHBoL{#NMwGisb3vM$?s)V{ zwX%*;3cpJjpJwG{-J18~P`a7@{>K!ygt*fefUv$QTsZkY5$Vee4_I+R@N^>6mW0DH zlEs!B1&zXfBx*sl#e&zXDL|xQ)mt#SF0|1**?BV@odhQVV6*4OY8LcZP#KNm{T|?U z$Eu{VBwVs4ecS3{R2h+5CX7kL;uEaQ6XOo!OiT)2AaUFrM;B{rxIE-$bdfHWP!fmN zKk?X&mTQA6K z3(h^V&Q2J$T;lF5)ycmgSc$R6K#VGJDfDPw`2>&(LH9hq2p_^m{?br6p~}I z=7IBoj2iF`>WuUkl#y`d6y->svcQ+02m(huGQgbrLef%b(X>_@0T6A z+?Y9MBd*X`v=>}smtSn@@Wuq6*z}ZrL$#`EKA%kyH|Ti_U_Um$QRl8iG@TK?JP;f_ z8C&YQEC>4B;UL~jemv3wJ^vUTka32=J&P(J($9{U(9z!!`TnR}3a9PdZ{WQws=2xg z?HTR|wx#owxW#{riL;+^if3!jJnFmU|L^FRw+4$TT!d!A2GONlbXj3w90$^TJ?MnA zjrJP)qvlKRUC)ajR;=FdvuiH*U-*0V+~0m)ycvBB^$xw{%B0e6OK`{c4WR4LxLyYO z0Bbg#5x1TPRcN{9WNvynJdZdGcIScZsZc%Fwtmg8l;5iOJw0@4vEMX9BUkR%YaV9< z5gk4#&i4bRc?W7z@$+;2!(zsKE77>@FIFbX>87s_83?x5{5M4H?ikUXDXM~LJdU9Z z{>lJ5Q@#1GjQw6a)t zc*m(#+36`#A;~5%3{X;%k-ymU=i$Q>@xlK((PxK7;LkROTYZI{;%#bugEr$M*u3=G zm^AIn`&j1faS3a%n_6@J!=U1u!OX8o)B#>i>G!eWr`eK=zs?4)=pS!m2yPtETI}$< z$5bX4rYF}@|a z+nf3{iGjb@@UTAI_3#k|e5XpKw$$UN`noFxA%`Qz9{@o!XCKeYS-W=1nN?;o(UmsN z?+TC65K(U2gbU91aQ>k2IYG=^(O(SSvU?Yp@qmZ$(YFB`{9AVn(Y;d?{r$sRK=n2j1V8m4x&Y8i@W_GJ3I;f$g|x<9LtIi1HXAi|HvfGhEj z0ATu$0Qme>{pHgn*@@@L^2a1%_Zz|MaDlKs3A)po#>Jm}sX9^#R;4;uJnNiw$vU2# zLl~B{WZs``CrI`L7KPn4$>MBx+b~3}4EXs=NW-m3pZdw{Z}tj$cHB>_N;%A!nD~A@ zZVIdOHe@7wS6Ct-%&j@5RVloOH?3J)I?57)F z$)Z-`=&Mvp1EP&eb(VOU`XDhaf7IFC5*C)cSixZc`#y*A>h_|zmBJq=;V?PJM5*l7 zpPuo-aBLTUEmY!q4KaGVo$gcM<_^XV`qH(c6q>Eq1_7uEhHglJRH^4yD%tcL>HNH4 zQ1Z!2Q`yh&Ex_{>5?rqr`_86qq~J}s`XL3g>wzm1Qc)C3^c@=)CQjAiZ4t6P4LCq1 zK;-rZR!2(p?w$K}S^wk@4K^~I=6dUXrE)!eNKxP~*P5GKnTy&&R!JxA@4J(eNp|aC zkM5rG0lwLcj>znDQ|HYD{V|ENWDaZiQJtPg=0ok?PZ#>VmGJG`}b-Blh{Cb3?=d1n+ZfF7Ri#=L!DfEz!W~ zA_?+!*iHF-(r~D&#d&o7TUN^-NN||Gv(Ikx(?qo0&SA4&<%YI+Akt^+%DBUzPj&{d zWMt8eEr`M5unIpg@*9SQOoZ7Z&(q|C$|C2go{~~il;b+W$(>2V|LP4TkrEv~HkRQ) z@PaG~=hMMfH#{9x+B)KU4G zcyaUNokIO5_GPIUBpe)Aj4~uO5hO*L{bA{M)m72vFv)0zCOo2o;%xar{yPI=1KXjSv6YUS47^9g76H#C*ow*EeU2rui>K%2>dt3WV4d{V}ik%}y+7#^K>j02DMNr$56N_Ypo%HIPBUwWTt+mma|& zZe_`A-stojGnSJ+owoY}@26{5mh^19Wdv$2&zLf9xnMIk<+zy*v|_wWKA)ROp3FM9C6~ zNn*HKqetNS&H00%Ok$((NXIw;<^Uh%{=wDuofea*3A5c2?E!7p@M)yo-{&>{L4RGo zm`Y6+dbWTE-#qBNII0RHkBV=JQhUuQifzUmPyMNJ8APsWWTq&Ylj~Geq+*(krSVT6 zEYMhC%V<&urpu038C0MlZyHruPm<>!7BDfp(mV zG4j!6sH!^dB~Z|=M_S&4NXQ3UkRXY|r9%W<+H>wzQ$7q^c876k{{D1O*(Xn>LzmD- zp0CFa4nlSK;f)m>ilEqO&$bp*I5SLKTr7dS+i2wccm>Zkqo^`jH^lE%6>bvaoPf?H z=$;DAK^B)m?L`jD6@#1|^q4gQFZ{G19|oJow8En0@oqAQJ9)a6Cc~vwIGrXU51|>) zxZU~ZxTvNgJpVIC;FM;4Vt!Z?RPgWTpvMULdsbv}Qx@+Oq_Xxd8$WM>Cka?eI+}vw zqEPDU;%oxGYSGP9(hssWHJw&R-5#lze*)+yDkl2d0HJSzj#x8QEY`%DK_Wm|CR| zAFvSW-26&wK5ZdcqW`|id`F z@m|MP$&zi!{@6`AGh3ofq_#Mv zQ{Yz@HgzR6>b>^TxcnWXvCJUojxWM?g9eoy1@D;PJjTJ`VARwUr^+HAe~XK}IFE`r z?b+Z0+NqJP9Z_g3x{{A9NK%BtmL7H&rD*<`G1x}*8c=S1HymhPo0wA0JSHPeDbO6N zhqGlk2-^Xj<^S!5fj6=Yc{=~tKkdai7PlvN|3**GYU#~BHzFk&|~=yN>$!06~eQp4xNLM9UtzD;}HE*eiWPTMz3O zJ8isk+ux8t;&u5*9Y`t8xjAJ}QUy!`&?c{iVKCrWrV$b@1^)q=OB zF#O|jjmwpi>VsyS>c8zcJ;Mb&`Du?m(^r>#DCt0>LFUswo*6k$9f7a-K-7JUyqsR> z#X5Fjn&f;ZRMj;jZg9oWrB=7cFe~~#Csu-&vK~{XAGXtf`DynF88q6yKPf!ZN-7+a`tQpM#3F z)a(%}&|lxTKevP0v2IHN&7Xu4^)l7tuOk!eItPx$4SnNxytnDiNvZ;BP71 zk0PTYPr&s4^f2>@FS`q_wX<}iGti7EC11rz79yVg2-%{hL2NlUHShfMy8hRLLrPq? zBUa30UAAxiG|Y=J-_$2SZl?WkcW}E6oVAg-*1v;0T4d(!6~kIajVOdQQ|bD`7qRm8 zKlfzjRoi)aLt?2$VwfH9(o*6Qe73;ou>~Q$-HKP4Z3fB_oWOgy}+n5*bhwucS&( z@S_JsycNVVoVfuc7_YManHTU0y@{Z8k#a$0OwbotTG_^Zc$jj5i90|ltyLPR614gp z@`8D4Q{v2-Yl{;qWkbjuvmjchHs~`r<Mtlf^KI3Lw$lprwY$s|FBLSWsGh2(92 zR&3A(uk@~*5&@A}kSK-p5>{KTjM)3*cK7_EsHG}2;4(Atr`#zAb6C>LDNsqhiKTsH=63Gi8Hv1b^IA8IKM!+z^qGx} zgmtV~-;ze36gZ$Y*^9DuD0 zFna3hq-gdcu^SbbNO|c^No?sH5Cu2y7PkvSuPPs*Qxd|p)KPA7;yT{6NNaUcmcx@J zb8KD4^vBZqyyrQyOjeU9uMQ#@DHkw$a zbaV0~x{N}U!ZBUCG*zv+dYlk9o0f6~Dl#@xakPr>DCN6~>6Y85MakFKmh5N=7022% z8g!zirL3#l&H2abbdn1ul7)bexUQ%LSLh7hGM%&U9lqQ`gJk7!$i zQ8QeihkvI<;vRwdoomLVG>%w^N05}2gGCfuw0H=$&#s`*VL)zf&ZOd7pcTS(SkIi; zH>K-jpf2b$>X>ts{PsABql61Lpyar;jk+%%5DDOTs=4ORFK~iM6{EycBfr*4UZq@( z7a%e0Gc9m|*%vzU;GL!@%sWCsVDTcT4h7)JbJ`f&;5VwO{oXZ2s!oh&R)nXUxaq@8 z3~?hU_eSGDWl#<2u6;!kF4Qez(mtmc;bqA?RiS~Us+i?EFlMx}Hy-02a97hScT#q( z9Mf493FD=)aI5JH8fP|1+@2=6&*lDk%x^ z=C`0eth@7J_q6bDi1A&%{L9k*r^EVR&OM36JgTg^jT?`AiAo3Vwbo=F+k01rvW}Nl zC5Tvfe6%KJ>ucWfiq&==+IZUX{D;AezI$dJW%@Ci=ZYt4M$aMTQ#}tZr#O9w9PCFP zTxIzY!hs?e_oFuQcgiT~?OY-JLTrA!|03RW|AP$|*wAmxs`99l7FrNhtvvNl8ba-&vmW z{F%sGJ+qndaw9xI(a->=No*gNXK6H-<$DLxQIGqloYgHk9aplVV0f^t--wrp-~&ht zvcNBHsY@9XL2GOc&Jq{PXV1e_8nnRAZ^`?Wu>N%qk1DscGbA<>fhk;{N)>;>Q`GF)8g{9DO=ppEWi_DCN6L_ zZdiXmr>iJ^^p5?Us3HQ(toC>4F!>^oU3!_IxQ-!=fj)yo7^#<;rnP;@lS`!SY_OHs~{g06CM>c%qCeAbx znG=tA;4BtSVUh_eqGa8?V0B?}A3atL*4eqU;fyR<*`RNk-%G@eB`^e~xUq#`qHi-^ zeO zl6wp!>Zp<*k9MW%uvnRE@-uDel5Bl4i#|G%^r8dd#8)oa(G~qDQ{}|I!to@IjD;<^ z5o0Z?9p&v=Bdcml*IX9ySKKbf5^IIH9lOz+FRIwrce4w&&;>+!zyjcAmKc97<4f6O zgid`u@qB5qrn(;j@cCn7q5E6V@FY{jSJ=L|D`)If?urCZYkZ9vk#>83Lfd@Z!n@V= zg-6-39f-)ooKRM%4&?QpHpaya8*(}qE?)VX7hI!Ek-4zgKs za@2a_>*8~YFro8mZrlmyr4w<%{~XXPP+;wM(jSswuUg3c0Fc-=D0QX2Bkdf^{qpx4 z;`QP*|L?De`~&9rj}X8%>hMiDp4Ikeq#}9-{6NsNE#~r1(3eVJH$O(;5b6*eZ=^Fr z#`vBn4nmdLSBOsfkY}%>v!gr(ZlS<_`f!e*wUc3Ec~VypFSXxBu`?`?cr`-;8YB+wFL0%hlP@w#rCcg z(#9Kq0n(WZInbMKdFzD`_yPLrvvc5SqJdXr^#U04euH~@eI$+TPZ$45a7ct`y#%H7}a#gdmzi}#9`}GT3znqp{}96oVj}! z<@kC)hC0gdIE4E?+=tkd8k`Onotc)1B^We)a!d=*uk%focW+q%7M^I_t_c1n@oE)~ zi6{_LVJ`zMGUE3*A$xz1czfxDlk$eQI1{sBU9VoC7p30Vd>0BC=uT2QK`;8>Eerh? za2Sg$&NB29R%P05(|MMXRRQac7AZlh5_oGXx$#9<3&h))E+x zE9jff*Dq@|8MFBNwWs}NMP$q5NPHPG%$TD{OhXmip2xF~_nfWweKCE_hS)ngK-9RTp>jfIbAoZwxjh*tSjP1?iei#H zgq%FTHDokje=XJVRFVU1zDj2`C*Iu&%D-<>>gmejCtAY7Ffp>`nz-NU84E#^@o;`~ z+XStIaPY-DQrV(1_-AarJ#xHmhnIM~Cu^*NqcsSvxvzSiu5RxEO^+8qc+2%3`N4UriH%t9637wtJ%;p&s;Ol?7N zONlSHLhC38%-a#8Cf*NMV%O2`v z?P#7XW>FO1ZpV1sZ}IChp6>q5!qE9UC4nB2W!f;qMP6t5{b$unY@9iFW|jwy#an<)?ct~nAAQzXA9s6JnWx2-sEB1%4{t0{y|p{B6XR^a1hc-RwclF>}jk#DnP zR+%rX;{Lcw-~0y|6$FD57q|&2MQvI`&qrjzNvdhM=7V<1Bz74TLPV1*#^I4=gM7LY zzKIIlgk6ov)y5i*9CTEvjvpc#&a0{vsv1fviXzTijDF5+-oVt*TUhVIY)^uR?^us> zvakTO6HTv6XbJ8RMG4j07IsA)MJbVC!hWlynlnnMd%Jyxm%u{W?oa~%D{{MOn7AGj zk`qJ?MH)PE<8@AQy=yJ}M-a*DYpTJvbE;WFvo#Bpd#Vzz#XyC=eUAZ9dOYix5P~t& z$0K8`bV@+5nn@d4g&oD{SK706Db3dCIk!Nu*0S>j1%|VmG)gG&iH2sYdcf!W@6&CI z{{YEWYy49Hb+f=bG7jvksJ)BTbT((d{`_3yvbPvJxNV-> z^%MT%&el!)FVpV*%hPMH_vT#Yr%xKyQldht>70c(OUkVo<{YRE#rF6HZ$lhU`@Sr- z82CF?e>ogScKc2^hn55c#&D(y2AsE-pI%!&G7Wql$k8*cSDzb(HT7o#xR^r@&iOaj zouf915Qj2&v8h`cnycf;pfW7a;CIUCa<@m^B3{HW3Q~KYb=fagdJV3Pxjs@t9|tk$ zcfWW;Wdijlo7>$$jZe6F97O-d=r(i;f?ql)oD`ixUIDSU+YJ=@#UmIFSK?EkeOg|g zrfjjMkue;|(gt!z62B+xrlu|B#GX6ysH{#jQx>GOaQp{G#hl7h%`BsU;h^}%ekT#w zp1fw?lT$I3K3Qo&5fAd2n9-Fz)3hX0Nr2xWq;~t_Jl&CSV&9gGBj7H;vEju37jc(1+(*fST6rr)M8StLS0$Rg>7^z{gYBB>V6@( zz%v(Ip1%9_z*DZ;R1qlmx|`ph-IArSQd(vvP|-J@P2X=fPFfAkkkMN%x;TO0lqb^~ zaa#2|Gpj=7LX)q`6n+BTKV9&_RqGUaGH+NY>6|CL)ty)BcHJt+?*jb&uCs3g$+&s7 zdfZZT7)>j5jriKVA?ALQ^Lop*ms3!WAm7L~7j0bh0%TN$C6gmvJ$IItbw3OafmbZM zk>&&~x1c$4#Peq4Bk1;0yqsw?#Ep?NU~6zD|C{f5w;TFj3Hp-K;>7LKo6#tFqGD2D zaWDS8J%0!Tbw>K~WM9t(W0jo52;ZEjCsUTMI>M+FAfZUoD6ypOaqgt;DrK$pY8=t& zrl>)4MpsZpj-x7YPH!e!`addl3KLAx7l<+n&RCGe)y730ASV3T7%op9F1^6`VyL#} zD0K(Nrr6+z#Y2;b6_ec`#R`kCjTZ2Obrvu?ASQ*`!{L$}mQWULB;^Ap(fe|ntyM~v zEuBS*+MC2wsMEMFg@Or!+hN0SdE9hx6Pb6ym4_X0XwyiDrJBFhz67N`q$o8z!^iTe z$yzVyR=2+(*mYjp9PAAs8FN_FZvml7+p4Urq#;$N0oNblP#%}o1_v}-@4UdCZCdmq z(H|;MDwKUDVZ`jr2^OJo-bAWan@)<(8hFrBVjI?#{lCC$vRR_fw}m`3ep~6d=L>-R znSaeHdV#3+7%}Dk-o%gf*T}Zl`;NAg0EX+;nzuNh?}631b{gUSkG}ko^%sPylSjf! zC>AMMa8{fytf}ebZQGy;osoUDpBLf<>2yvo6H9hDz{)E%K#(xybb+)!@$Avp&L`fH zR6H$AL!uTj@=khqUa;hu&=ojAs1F(PeAT)L-F(dwMkkt>lQuD+O4LN$e-Q=1VM#P` z*u_tA0O?wYE%oD#{a86yat zuXT?gyz+t|ksvk667I8!eRR-|J`9dv2!-MYCoCKJlitKpB9o zZ5=RT7bd&B*re3EWn@NPO(oWORw+A#@*KZuPG-)*^Tp!6aduW)LdTac8eHvn+m5+} zzCId@&6mXLV->G2*~T;=xW3R=_A~IXQA#$w>*o`!8KbimwiG~JRvRKdPu_3-x)hy3 z+JlIpxzKSU&6;G^KS)J2MIf#Hjzh(x%TH*{0?bdrepUuM+*$*q03FG~Zqqa-9Wh z_%fWjvp7CVZ)7Z?r_-xH=p3e=W6kStX8Gg>(?!5%~fS8ID2(7o_JS8)0(}Nb!TbNLzi1ydNMJZqnH_}24{h-m|09PAS zpQ-ZXJHijf&lr*3>f!kMs_$S-nHtG|xpKo0$=+yG zgWt|#PrNdpCa0m6RPDEmIo}u!`Q?`pLY&4(pA#N=z~bkF+e}ZCUG(q*Dy*_zxvUEeOyY@9ttr2oXQX2d$FwfAD=8U0`v8vmd^odK z8hcXA77j%M^bIyGZI5(}UDRC!3ePC<>M!jaNc$I=F5|xyr7=WX)WTygUg8&`z^lW` zQP=F|ro5~yoRpN5A%;VnF6d4Ox>0+-y4ex*|Ci3iKB&Bn|cmRTb zzH9017QkOhWR2%RwRHKwiig=y3UqR-h>s@xq^bj?>RL!Kw8C$(l;wihqC=!OL|szC z3C1ljR@{^3SL+^-FqQOMY=l>v6MF4c)NL|oj6now>s7>?np!*6BzJJRFz;I^RaET@ zvs)wi8qvgT>7q%C-Ffv9mzp{As#VG`H&7t5E#-IW**Q2r8~i{MiKy9 zX?&BSE$`W|C5UWPtibXd2_2DKE-2C*IuE@<#TPh#17@)VR z(z=evUY3dyB{8;%U(R4Fmj_wr*`)sCHb}lnP|e0HiVu@+&aZIu44tT2I;8${lZ9JU zSCEM$pNtogxhaA2R{nHYbha0-$4D_PNa@Phc7*h7*h$%Akv&+HxT9)w6YJY?)gE zjVZp0WqIGEdOr4!Yo!6ANcZx#<4$VDR`*L*WW0T zIzE!>Q(k6U5QZJ|qba$N!EYY)x<9uQ{I(@CggHEe6IbWvV1x^gyxn>V2%6(uBv+6# zChd0O5o`V@g{jIzIs9-|M6?X#eYGV8dv7Dp-;seY*UOJ%8r@?YJNUtV7W3>P0 zdjvnnels93Kye1w=0D96qipGKN4?q(Jr zR_gi)Z14vUD)WAhI4u4}LfA>FMbc1i@P&UyYS^5ZAXzpVe48vP-Fe67ltd4q zd~E<^iHii|79ZVYgkAcKXud}^4?7@lkAg@B@=~ulu|L3>`iJ!DwbuZ;rGSE*-w{bt zO}PCPq&yh5C`dwsRu&`r6v1B#GA8~ zQ;gUeD&+!WyK6-rlrF+)vEUQ+>;zzjy}HHoaK3hefB9>xx>H)#1zw4~0Rg>RCbaR)V~O5cFh3OPH7Ittv$f*K zIotmGWw2e+#Hw6OJFbLFHP@Q>mj+8h3gYxW#epXw>oC@7*pL(5MuSVTGVL$%3P|+f z5B%To{!dgo4&$h&EY`u&=>2%I#>wQfpUc^1X8Rcg-D7RAvUzRrw0UjflxuC+tbP_0 zdy9U9II}V%yzvX)<0lAqq&n*N9iw-9*vAo-x%AoIdu7?u!LG1Y=|xxc=KeN9hfnX6 zfqkxdcDfu%4-Vx9X=-g%s*{($pe-S^NDzAdFSP{mS&#qI3LoylVL@S`w2zD8;*v~z z!8x4g+I%}!z3JT1Uny?{-b_XG+U9o6jri+v*685^Oou$$TFUFxlL)M z%HDP&`<_KhT-BL>8?->)?^tB~5896sEB!r{vUDj>>8jk;H@z!W0lNJIMrEJh)RcJ~M)t;wX-n=V zw`Q2u`+2k!NaqjDmI*A$KD&@B&^#X;C}>A{)SYze=T9X^3)m2pPK!Rkz-vD4U=K6g zZ)T;6*!~Ir@OD<9T)9;UY4#7E%4f=T*%Qf%Q_6RB_EaoA%^a0oM3${XIZ%wd?tiCsdOaGSB z7HbL%qGtw8FxU~NO=L`!y%C%gq7JHyiV)bAlmLeilN$+(1g|>+%6|Ns#})3T{ODAB zD$u?h8Qb5OynTcHQ;Q8_6@8*(56&4Y=lJAh+2h=lj?0tsjs`K;)tb=L=cp2b$U#&K z!#{>(Hb6a4YOl=5%5mvA<_KY$T(-fDms!YeH|qTuoY;eo)i6WxJURffXTc`uj1nNv zxRTn{!v^T?8M)N~w^e3m3gchy{PXjq0MIiT85HMuxhU60W#HdFej@%NvVo1I!)KNi zr>xE_wyn3wMm83quPKW~#Xax}W3m7q?S7ncJp9|{0_8M?2`UdNzgn2!J)0S$i zanF-+aUG*g);;mfP0(Qsc*N2uavI7Z%oFuNG2MQF#S06G4pBR++0YBV_qgt-t9|Q( zzWV-K91ESVST^6GEji6ue0(w7KWr1JuLPQ}&;f7P=xLrXEJ<EC@HC5J$q>BeFSaY+Z$W$gDWf_OEK-1ocPlDVt4&%r>?Ek+XmAHs4cB8 zNh6!uJzmzlZhCrVjC5PXN<#NLn7VO1_kW8F`X9j7L&;xWqMlElPY2D#hS8JcY%{?j zweT?W2RfGJbR3hjY^&lfN|@tzUlATCx-$Fl4~p~iGK-!Vy*oeqz7g@po|1IW|2EmG z^u4rMbUGxb3SAaWR&$$9b*8xY+fz7e9TwY%sC8U*{T_ zag0R#>M!pnGG=N4MA4fjb>$4;XzqB{2S-QS9ZB;t*8^+TIZulHZi=kGsG$nDl}*=j zThHZkA40jj$YgS;;&Uk1p2^qsF7yJ~-`K9lF5cd_gSOe2$akBe(Dl4;)Ma%e!PfJ{ zzF!SM<{FP9o0tRW$P2{G+ue8<=r$w>i?1W34^&q>A=|t)MRR1WM6?}HR<*quS7iuD z85|4iudK>V{vj?G$1g`R6ZxRKnXQcY_cfdR?Icu;`S-&;f4wYRKF!twoIsK}W4~=7 z^vKfvdPPc#bY?VLj?c6CeLG=_GXGn5d4~7lOULC(ap`bZWVzt8R+qaL7Si>noV|8W zs_Gn({XO6FXCcTvvVoMlAL@#M=Fs{Z34f@_g1{ZS14Ajv-QD@+1zGp@efI;}V)3oY zT|Yo8b1{&FB&ti8$;Ja~Mqszc&6IdN=9zob-f-{kJ0360Aw8eW{F|<}JZHz<57BW+ z9><1Y4#K3?w>O8&cH(tV46eS6zBcGC(meAkEwHWde*m2?IX?rEryhQ*{$>a*`HS^s zEruQG+a=xApO#uIDL=(9nP^2JH&EwYjar2^L9_%3(vfnrh*Y5Uge5C3m@UI&!L>+1 zmaNCB2Pd3_(TUXsYr+VUZOa<0h`_n1q^KmlwPkm*e8K79!1r(AN`bfSnfYNA>IJob zP+|AQ1>5CL%O%76%xg@KJ0;||`-^-K!b)PetUT&tEjhVGLQ;;fxi1u_lEjLcXwU&I zIjkslqt~(4<)Wn5$#j~hwcW4&$Hj{XK<;QZLIhc7=ugF6a(Sb>z>KlX4BWZtYaYGoAGd%ZK7is5^V=g(0LE?XZ+>zjh z7B7wd1%j=6&e)Bc(vwpxtDsp3@)yHaEGR5lWvL`&1T0a|at5=(@U1V#hmPZ!pgH`i z-9T=xQh7C151fYE&scm7gnHveX~12zmDg;)z4=vlVdx$76Jr>Oj<*k!^au4OEqDAz zi!I&z7Bf4`-Yn4d9Pu@g*N#=CGE$b zMN`%n#Y-Gcovng{xmZ)gH6|!oyMI+J@HL(@UzviRRt_w*l}97Ul2);IMp5%8^>y4a;fIkui3Fmhhx zzRzsSSgwPgC>{9L{Q7Q?bP5LLG;>5nuwEWQRB>MYKhWu}KAksoxu{r(>Lf&16-Nj4 zKP{nj$ml8IIip%i6NJ39VSE$%`*R2OfX{+LPklhom%}u#Gf?*hq`7)$#Hv=re9l)H zUP*xuD`p;Ei7Tr%D|pvZMQ)B|_~?7Ws3PxBBdjp02?q>siWT<8q^Qt4S)Aaj#oOHr z^5cTvem(OJYa)@+oVJ`G;KBA{ z(-1tdFRJoxCvLXDj;==inMFznrvdkOQGPoh{`}rCsyD5BVSV zyO`m>T5f^@+1pRn{naZgMnNvZ``C@Eegpl@QtY(Lg_%Nny*n(~4gH=XGB;IMaum$8 zaWJ-zRr&frCYQl}BgLpzlQ*^xADs2)dv+t*5gfh}byA528F!g~O><$1qH`r1J0zEZPR&8Y5z<$hQb zphJq7*~&vlD$i?f4!OLpQ;M~&?)2{(askS*C>JN6)bojfTo~t`sq+?2Nx=B5Rk}JR zs|R`|F;jqX&lfhOzA&xlUOdjqm9aZQz9r{B;ep$vWzGDf)o&NyyY=Cl25<3B;tR;rpwItJ9>$GaB|G(j-LA^ZBJEv z&?wgjX?A9|<-i(wh!azB4f5kKP~23UCwMcA&oi-$*N7!Jp20dt@K%e9{y$Uyqj;Q& zl%MbiVDhIa)=ts5>2w487sUAn&iUyjQt~Fh_|#2u^T~{Vb8?N$Oo15@M^)kb=%&k7OD6-e0hZ?ehv&>f6Q{-!Q8QR3<7P#{x= z%NYlHpAzQ?tGi>>J8##-L|Y#}D54}kITbd$Lcpl!S$mg9e_|~a|9t+d_gylrlJ^^4iM*& zH%50u6wWJR+@1mGje>C##P9<(bJWKYKo4Qcnyw&YtZ_Lqj+tOK!Q84Q>N+aGe#dp; zxEL-Ae!=N2ZiL(@rNx^nYvC!+m|%w}babrPAVa3Odszc^Bj~?+-~spPUo2ESBCp+q z%|2uy0(WnRhUR8;baYW=W#y%Bx{PV=ekfn;II|9qk4-*K&btsuo#& z#v_UsEwZ)i8kN6uwSw*(76YvZsNTELLDfgDd|HA-o8}&xLtG51yyeYN($Q5_c~5pv z*p!;9u%1HIkXO*O44U{&#Y7k7bX!+HDDL9P6jj_nL7U9aTH=`M3s5 zJMU26>U4=SHQ%VEu#Xf!e!S;MZV;&`IJ_*tPKB4ljqC-|YglXPl$=#3T0KGHO>wf+aas^=%U~cii#`Q)X+>VxMgkkatU%d`wJ`FJKM#KzQ z!#}R{v`!E>Mlcx^^yxmVkBJpOGRC7CJZffczzNG#IY1xw5{$Yw^;Q|JAK z7}+?HzbazDRb%;;KF*2ghrn8f$)s0mo}y{o)JV5Q-ba%X?5pM|1O~HYQbZSUiR5C6 zc&YO)_wD`Xxz#aKVT+$ygn>6Jggj(M-TyCt`8R9rOqsBY&SeJqZ?nTKnJ$&C#GrR6 zBGq+@4u#xzH$?-nGDHjQMxK@+6&&QBj2|X9v4nnja|`rr%B_hy z>so7aja{(HF-Kv&)N!QAR%6+z7!b{7^Ww+}-2aC?vVe6p|MOp&@&B{pqL*mQ6PwbG zIR$UOswllziBxdMg z!PrZMP*SOhgEOgXihXrjA|l={w#IyCYjq4diFR(Fqs|!i#3J8!7mHmqm~gLqGRPkP z!tGdRG4NVw|7{}2<-F42Z~0<`3IpbC`;Su88qz$hWE5PB?$sl05*v;n$lc3qI+Rai!@#TlK|qfbC9;Ni=Fw!0SG6 zAbNgXbO?0swO0%L2-STrBQW2AF6(~vmT3%~B{Q@7v)hR6dHKwAr7z7#Xz#YO{+?QL zDUTxuF{f?r>KO&_4?PLovbTMCsmkmo_N_ESw%+dNo4h(l7U)mwdZUixf5M3q{D4SY z=NnvP`Q^AG`$XRkU~eCDeZG@vdVj#p^*O?HchA7NJZS94i;>8GT>10uW+=Mtao7|u zulR4wLMS8j{4A|t9xSuYAdZ{swD!VJogtLixKrt0l&EL=k2vOkDnnA+)OnvJag{Xw zyf=S~v4WD+z-Qo)Z@5QdJGsrO!BPnDNFO)8Kf1lXogVYMa3buMyE;D4jr)SqO|7yTLv z{5%w&kb8;4l#=YdyEgnoG^nfY7Ez{cF#oxK4Lc$s*QTH3Fr1id5-B_XNE~A%uDZ%M z%Ug8~RzbRNi@?lQ?#RkD*$C9`y_WSH6L)j1=H;r z)R+9ka732BxgO=c&`VE;6;<0ygW7WSkVKVq3Fmm{%ZM*7zp@gVlojl}BKCm+ako0| zwLXi`?x#z=RZ04~ziY*Yz8Mqp$j|03dftZIcD$V_d=w${uAiRQyjn8lFkU8M{2Eu8 zNGystR)bor2EbRQ+GTBG99l?ODYZl~y12IKs%L);y9blpoFQkKpL zR+oP@1#f7JAUl0r`kJSNs&;fmrU3$9!Iz%AHdYl?1%E5ENPI|9NrVy9Yz^NB_dVZo z1ZI%ew>%txe>%VtZ@Z=+wL#Qgwdo7BIEf1rCW(jK$G~?6rq?ZorgOd@O)ayi4R!q|aTdSBC@ru1 zulyHNyn=qWzS|02|K8TxxtEtET;@OPzfV@G#+tFcHnq1t_qeTk4BhVDpF?)<7QtGx zlFcsZU9*_UDehDD6J`sy%~xQUGgC8TrU|m@+G{bkV!|V@4l)Fup@VC37N^I?)wj(~ zT`soJ@JOzufQINgdys}EMue4CaBygZr4y^Ffx>v|DFL-jo>NUqq#eH3vzIiVA?vJz z|F36a&7rmC_5QL_5IM|f@VKp+?Vp&oZ7%S|oe#lTOupeM$7+o;Z&ICdgtP(~6GLXn zzfU`-q1rflW$FF9^YG4XR`fz+wcBI_g1Te1bt-fB5oRs&{p5v-iKz^y)b0+>Q$B|H zh4@YN-|yZ1ZDGV`8tbXQ#xEUD*h2*ICMB#euwKPA)JS1`VR@Qe; zRXE$~7%jjja*?b%u%PtOK#s-wvrsKLS%kj4_4JZfvCDAJCNzS?(HFqlP|p3vk0J((j!1`}#mKx@B-F8GF6-0lbP1QHOt;g}r0Hpg6}>EO zVZAN7L&qalJ8j#+i97S^x`KE;qO9eQzi44R+-Nosgd&Rw`7oLlb#w-S`58-gym3iU z_ybuu)G7TW*n@*_x?bmL56jpN+nGx$1YWn#FDEgtw$<)=sR6kgme#Mu-fVxo(f@d7 z{qfcT!ph$+uz{PGbTx;Tac~^jAaED~L~{9l>|8M0cTlK!Run&QY#~UY1bqlme^_)n zm-zKatG?n8eCL7+laDpR>u1?E{8!5Oqy?MEtjD0Boz+*fVkcFXh~G%LEc{*rOK`G8 z?}u=6Z*W}P_;t?ZYuVQite%Dw1Y(zk0tay3!|Iy%r8S6{IiC-Uzt7V$H+vNU-&zY zZr4cvn4~(cwN+mYr`d0p)sUTdzB#?^jFX+%C$wg8r2kamPpZO9c#8?x;{))I?*ROP z#6mTZ^C1a&K%o&PzW**w4^uXOgwzKYe>S_kRBAtsPZv~AkhwKv99^L&bH=b*N|O(r z8I!lhCy%Lq-xiaKgeYp{eYO4Sx~T4S^2)m07bvcaJhh@Iu4gAOE=u}`tPhsJ#;oF! zxw!2M?t$B;<3ira4q=z9&YL7Xu%txDJcUJC{8NHT{lu~9;s=zb1dq*y%EDEItQ|!no z!Rn&Oz@}|cb!J~LJ&avUG0(zzKh_cDKP7R{gt1K7AS`WmPrp^tFs%L12b)RDjmd8O z6~SZPxveqjBeySL862C)o2jjmaRFLsF-i^EY_qeiWMyGLATMyCa_H!cuyBt{OwW?D zm*K|ZIG)lKc^HH*uM8ToD^yM4i)goE_{PH7E6&|M|G~EzT=z@Nam$&Ds*#T(`dfYW zDQkmQp_48mn zl;o(w%pBy;5N8$zojF@Kb0~9En{{#TgJ35m-Celh7$r=Q9zz2s$IQ(1z%Pc_@CyuQ zXDVhVdy*be!W(uC4|@9SD{~4-$}9 zUAQxmW-y&-q{|SZNm&}!%*!VOHQck!%nI8%!2X779m~}Cw`=7^E-sOfoGI+BFBm}t zBg)V?#~!7L-E)d4OG(R`>8SH#3y#KAVccT-hG&;*09|lN;XWSMCAk2YAZ>2WsZuwe zKlOzf_*iM+Vzo)kwA;4>N5U%*maT;@^_|m1gR_9~8(njYE-M*>Y36bX&)R^M1~kv( z2f39q;v^ek`;;|;JUh7ei!(f$6anwR-+Z$f2ZiZnLAf|TRJz3p<5;-@<6g6DEx{zu z^H2GD#ib7Rd995>vuBpuCZy6a?EZoun+aYFgeecI;qb#>bnU+dZ*W2UH0$c>ih_zN ztgD;-4$GaRVA78BnGglVkYC^WLrpjV*N3&b>|aFye0x#m-&;H{Tl`2TO*uhct0w&K z3wHbhB1a1aM7L%Mps=ky0$=04W92xHYpD_^xpanY1J1(c6rpB0S5@DmLjuZrg0u&E ziT1}?HGfmIozxcJ%kZt8~0s|cn|IT@=82(tUjnmVGlT7TQIc!Vrjl+`F zmS%NE-xeeigR&&Mo@Z3JaGqwa%YdT-iK)AiYgna}YSx7z(t;@rj~&uWEVq_?dy?CV zT#+$DMlY*XVyWEaHnIZ{J$>W4Mk1t%_`r#dyNaT8QFdR)pU3e^|?F#% zqLk1pq1>8CKw&XdlXH@MXOBYEN65y?!o-(N&!@nFqh{&a{7+^MGhKq+ zBjzcm4=dWY__eJ+Yq9e;mQv(PJ$>ExZzBWDs6yo*oBn+=V_H`D&&9~a$?|jMBYe0c zQ9ZgL({>$G#SR;=JCY)UBsfENr|rKNgO5>1{Qct;gE=?9D71+8R$l%7T;l4dVK=$* zQgy`oXVIj`R{Dp}7JtzsP)eczvz_LC`vNw*fQNlAmHWGSy1sWF) zj%>>M3OH4$FK^ul`D90Rba+5yM9(d@YW9a?_5GY#N8%$opZE6!3KLUJb$(u1MMc)d zhf8z;b_1|w-q<4gcOmO(f#Kb*n!g-9L>rBiRA2h8o767JDmme|JKiWj+3N}eQ+Z-J z6YnT%`GBC-816e6sbfcS8m%&Ni(x^^2-!TlM~sLnJ4tF>rioe{Bfp6NJ3(2|klg?V zmP}1UwbqH<9|$#Oqr57QsB~-%?x-2#THC{H`q$7y8{53nyqK*iSX)kb_Q2-8Ek-z!3lx+O-GkER=rtx?h~c-$Lm??XeeZAY8E9}+^6x9svAB{U^~Okl(u7T*m$na2>SdY>Gh$S+oJ z=n0pRnv`Ki;!n%_?bjk}CiJF1>I$9r&`j?aTpdm&(P+41bV&Al!#&1#&4Vat#FEC* zh*@o!5cmhK{nYDpf$+PN%KpaB`vrgAMhHg@!pd5)!1Wx zZ-9W$KVG!3GW)C^6^&5XwI*3Dcn6%t!bBp6l_AT+a+`Lw9_7P5ZA5A7{8?JPxwh+t zX)#>;18z}&j?&$EYLUF02%D=Vmb$d4xVBOea4D`YFr}b31(muxyemy<6<~nOq-1AD z$z1TekEv_oSZGydC_99F2pS#t$2Xp4dgDo~jPy1_`I9H$(BnXsB=-z{&u*`)h@JVN z8*%6prn#8wJzPGMz0gvK%ZTbsU*-OdI7OkrQs6Q8{#aw_;ste?N`ZohF&Q=mCPw09 zm}r$TY02YpToiCQSPC6Gud3qr0&7-GYX!$hO2!g7=LlZ~&--U`Fi6Cj=VGJ!;%Zjs zP^U5TMv4vA0#c;`9?zYwm!>$d(*e-r^U-~ z-Z7rqIaG>!y`3l>mr4F;zr@@AsP9LASqAKx?|P`u&Z;V~;`ApK+F$Z|R4wU{X<<9t z@h6wBm!!n5RJHR-!R~&gclan3YtRvE7>Pm+^Yv#wgCC(u*Nx`Q<|bs>rSA&y>3U`d zysaep9{1pDK?Fu}fv+%tZqMlDT%|8xDEuR?U--*9q+SvMI}(xs{*wTmQ(#t;&=}9z ze$($VHUpdh@H}FCC^2y5(T(A`TgRhA zC}O;HZGCfCZmK;rIkNqENRuOEa6o9*9{Y}GuV`e4?%K<~tO{X;{}|vxLwagV#4?z_ zexz9B_hj<|EY9727J5P52)KfKdyFKw${R*C~Oj$>Kf5Y;fD`pPO;ZZUx~ zDm-x=un;@3w9m7Wf#1Y|H*OGvHI?>#5TuM4NQq0mH_I(do3O>F^t3SasE}xlIACc2 ze;PACr>dr;rYGtq%Oubzb1S8*k89YTWmQ^T)K->ww9K376N>Bnn8+J-MSqxSyA;$1 zhZsY`=<>xX=_=jc1BE)UvwM>Ki@aFZkg$Ue8RC4Rz8V9E+vyFrgj19z4&hmGbzx4| zx;-zS4!53)yq(_H%FaZ{)Q?v^w5qD*VGBQ-<^(_-i7mOE1n%K^UZeiDs#!v1S8I@d zv9~Lj8Yx55wW(oxeN90&s-MjM^lM_3MiHt#%qyWhJIV_43-ov0V;F#Qk)yq(EhQUKm&a7Rnnr4jN6@XPq4TT-WItMs7CS&QNNq!c_pnwo0VC@86?t^G3z=rCuzT1HflG%ZKX90 za12~pe%Kjwih4?L`L3%DlV3g-**me=e9-vz-)`5hS-@wa4GzB~y6Ub7CWaVNDR5eF zU3xacZIjem$g^G45%8XTHXAam;!ZZ(Hap=~N0~ zxg-M8jLM>j!v|ZUU|^oZKdBrTn=AYTttZhscJ{d~^QbiGhL)o9C{tTIWjKwsj63<_ z+|D+?yf7jaLTPQ?e!!Irn}1TALs=_pcI-x|?4f|#Bcq5{*oktRoc^~;-MYzPNUJ3= zg=^BnJvJ$)-TLs%?P*=#Dp~f$dth+6@U%cdP00FyXz)TGkr- zgjX6sqvMyf)I4{bu5r}VoDvH?|4w0GOeU{qoYpt9@zidW8sYhVu~hgd8~Kq50sM+? zHwu>MN5{vM_H6OhnB+ue-oZ_9s&9?F`IQ8H7*Ukl0~3_<-kgDmC)zrNPy_1B`y{!{XQ2Lo#xSLH7%HJGU= z#+sYd;J9Z?4)*Xq%F?5@R?X;rb_J`3Yj*e_=s3@Ld*7Z=Q8^UKp5Zn9Za=InW|T@_ zCB5Fd*Ec=wxbllW*=~I>ox8Fy>#sp^ShZy1g<`b=1*v}B{t+7fZNT+Cx(rsfAXA+< z*kM7L%$@XZW5LmV3e*`D*|peva7%rliu1Nd-0yh|*`xVI$H!%{z^LY{bpV%2TB5L_ zE^KZaD{AIf?wJpaC6RD)y?(zWx*y?q1Gp%u`-bwYr71q5w$GIiJT@V8X0{R`3@siG zW>{-E%_taa2`q%qt4Vb*>SNk4wYdFM^&(xs*qT^QZeTMLdO*8A4k6r2cH^Dj39N-C zkFPVPh*}&oQ3%e?7W-GC!LCy=u4?O_w&?E|oDiZ>>$~PQhD_K;w268dkZDpaG&*=6 zyQ6!hRR0hiJpQo4SHw^}4@|#VCw})qCemaXyf&s!RG#Rsbk;MoYyf;2CHGVHu81v(p3pSYCF1Oz_u$L!yG$o$Yf7h`lwP1ag zG=LmkFhVPw87?;EoG?}ubNxuJO(0>#+8D_jt=_LQ4KuPLs>ZZYr21;N;^{mXcR0p6 zD`>{)cQ^Vlft|)oMw0%s7A|cr4YVpd3uy+|H3sLniE8$licHy(9WHaoW!qDog#_%~ zX8@eXN4!?~K@;&NpZ1HGu1~i~GsQO7QXeRp#NNUu8M6j4Tiw_RwIgN< z=jHjCIQ(z)25Xsso}0r}K8yIP=C`bU&ih%`Z3=2n*lSHL6B?k=e9EX+CwKV2b-kC9 z5d+06lvp+oG?FSg!OPnaay5tTe|#`Yio7z01sN@ePOj&r#rq{8;O<8fE`=zH(W+c3 z`xgkQX3ffS$#P?k(2FIy(fbYNf*k%|he=NV$Cn@F-QIlgl!b|wgeI;R?6+C^n@@M|fl^06fl$9*v{e6R;i?G&W6N_o+m{_DcU9h63C-{^DPY;rS^<8SAE9*iTH_q> ztl`R{^>WL;W{bWrP$)R+qTna42T)_T$*wFivz_)A+-Ok$gu+Wf;cnrOiOsSCDD-_d z1P%9ih}ViRdH}sKkczl7mPQNH_6g$Pb(mrPo$C!7C|wOXIIh0v)fq_7L&tUDl`?q3 zO|8-!-L}j~?tI2OKdC4v@WauG{|3Q~FQL9q7CP0lGz$^9ds?=!i1H01VT3fdBt~Q{@ z9aOF5xG`f^l6YWiPE%cF#}86>9WR(Z(m|7LdeV#0rM7eG_Sj|?_PMzH=Cr|eOJ(f! zvDb}PUV}Cd9%)P+9!DuC$W438J$~F}zlq1kJ>*xcoezzb<=@VGC_aN_&_q7T?%LH4 zgO@iI{>y%kRu?1s-xN%>=bFTyqpHm3-AE&^v785Pfje964!bHU;~(U;{dtSU`bS52 z(S*ce9QfZwNhf@|W2s;5qTBePUbK$y)B-g+qX$U0r}3oaL}C z+S?1>bV{vY&F8N`a;YH1&W|{&7w$+)_6pGp9zf_3#e-hX)bzETfEO&4vmz3_OVe!m z84hICKNN~~WSJjuObj+yl>9)l`85E$nuzdnwB*{i1c@G}xgKXKXK{SrENuBOrKZ&4 zE*$^?S?9hx(BF?`xNirs?hthxMH7m%vad+nFwlin^wHkq+ZsnAtMp%e9{P|2CS~yz zrtyJdrm6^_X)12tlJsUI7}ocNa-8)BV5Fa!D^v+~(%j`jC=psBYs+zL${2k%sMKzN zy`f=NZDZ`P@_a`RZ{RZNHu;RM*rX=sE7N&D8kT~{AT^Z zCY=Tb3)zA=5M%YhYQ^BlN$xY}pf&QeqF=OVsRj!VS!_kWw5b`y*=xjTebpy1sIhOm z9$s>kDEC#ZRSt@2e-^;sW3ustO_Yu=>6;!VT*`#gI~NeI;jbb0_)o0rVL9LT`11U6 zZxlWqW50*Q&8}m0Xg9UZKHq^IM(1qr?0NBW zv(2qS=l;jBU;xlpf5;3BA_qyYY&&fp3ikSRuk}>D=0x`wCM0Y93vT#9Dw-XwnO|$c zxD#umQBT>J6-qdHHO4l1G4nRdj-ZL~=z0h9_0}1K?(UCmQB_xn&VpYEOm)WCRk%!S zu6?n(7%5p0w-2<{c@#N4PtHjMO@RV6sm%mll{RyP*P*cHI45p6I(0U02u+fUl&ma; zpv4!SCMe3#{`kyHY7y3qC4L?(VyV1(Y>R3+*tX}xGq^s?Yx$WYrsXK*$H*BuB9;P0zOSP04)x3W!u1ahBrJ_?5X`lG!ayMHw%Q#}f^HzYvv>kRd4or&m<0LQBwdPwCF|3&dGGv3=XccRQ4# zg2*T4-2athA!wO~xz-jPmw z7^_n1=p>4;3)j11cjsa&UnY@}W-%#Dj3+QC3uHH>T(=V!T%XfYrFTXk zM%?y9bm|5}eRL|dsX{{mZx>GfZwtb)&7dDkYZ9Uk2tBN=4C$nPJY-P?tz6D)iKP`I zNbKturKh6#kH=GAp3sB`g>e-b26Yx~j}ZL^@nQWOWZBkxsi;hncz*qw_Fr}5^R#zh zVt`9?T0!*qXxPAJW}zflDUpR<`dM)~tLfawuSTVt2VzW9n_%$V&6B$2mMzhQ6 zPjH08gQ^BZjsz^H&yi+Em+xfn85g7jnA$|@$DrNj|0gcBEC8h@_0JJEXH@{7_O!uegAki!)edL^FW2m@imZML{ber2}&x< z`eY!0yDw5ogPFgaCIn6kc=MDGMNu(`jyGnibEw^knIL1TjQrcBe3#1S#|2x8A42Y6 zT{;oAof?tE5HvQh=y=_Bti}C6%k(;##ozwQPNv-4FNS_dNKVe4l5E!OaxdU<-Rg6` z|CY7rI2+Aw6=uu$?25+;U^ouA!oxRMiu1Eal_vcaB$u#cT;y~+N6CA~KLmdc%;Vnk zj&#OynQib#gZ8NL)4?2aW}=d%q}NIi*6d~I*Nn2V#mUPzNb&yUV!+~aXR+;C7@zYu zHH8}0dM>yc!PsWKL^JO>jz!fgy)R~lk&?}XgJMn~$Xz@#r)Ez!7MwoZr=E)6*%EstDsgoNaVFD z+->Y@KnO$k$w2Gl44liaO*UkX+jiq}+1=}N)k2rnWlzagq(W4av?}3Y6uHLniB)&X zYe90EFm;YnmOfePE3fVv%vzD9sU$F5LKQzb;gMsIB4uFzhk|(|U`&>;tLE1 z)(5I_F`6qk#26-pH*Px0kp;06YEJ$=b0jUQf~4*}l0&sR#<8o^zhlhL6QM0IQgD%k z!@6KsVx}b9+LM@0`#OvLTk$EUVORmU*zrgLl50OSu6n=V;Jvg2Ak8E1hfw;8MOv*p z9z3R*SkZaoHed7psGQE3RpAw~yG+39WSRGHA9hIod+r!Z2}f1*GJrUbjyYt`Mne$? zSK3?~KBuvG>2iih+67yu*|w;G?i0XP(28WoBeo0#Mj;EjJ@JHmTFAFoGbsE;;=fJ4$nEa-CN^F$^ZC_)54h z1kb-!KwN;@6RXk8^wxP~^~nXpw49xe$yW=Slxse8<;tYPk%Ax)85OvuM|`2!!QAby zoTjO>d7`vf_B~V>lB$d0;^)|t<$tL$&!sUfsjW5|HO`50&;++9Z}TLB-;0x4f1dDb zK84BE81o{}s`{mGoR=ha*zQTGAWFu%&urjI-MQJMCzlYJP$eO97$t$^pW6Y~5_Twk z@Wh*!Oumse8VnYPAAuE}ra+48$YH0B@z@FGOgnLUAd0Z{vwIU!x#4xLvI4=fu(S)^ z(0v0sO4@iZCOilbO+SqK0J?dv#D>xT4=nk&XdYd_C_>SMo z$)4u>>97nTA)t6X-;TKx?*1b-*jcQ$H8(I5@{>o=X3i4f(U6NlCS%zoFD#@2ca^3e z)d`#|G5WQRNHl`oXA^(TExBhB#>!O8EOIu2dyHniVEws41 zJHa8idy5BmcXxL!UM#p5eHh~^m4z|+CQwmWG&g-bSCqmu zmc273L-x{IMI-O@gIG}vYvWG=un;LjSpS%=@~#O938^rLfa*x9NKZ!)gC2WkZvqP% z?ynCLV(}^Qvfe;+)>^3o7*8%f=|}JmKf55f{|{>KoZ3u@=CBHzrPO7Cq*g@oFG(fS zvY%=rnDMblyWAs>5q$wGxdu+m^Y32+kX8;Rw8r~C zF4WM;Wj@YES5K=em72&il2x-LwtT~C5Bm9?7ePMbPd^@pq+F7KR3;{+6p`ov27a>4 z*^X9)wqSf-uP%B(p$mm-zIw6GroHSULR+v0LVsmZQM47L$9kM>qX1R0$^mHF`S4rQR> z7x0kF6_O`B{-O3OhZ`hF?y1Yb-ATi}<}87ho;TnYajdOiSnR;yf#&k1=H8=NvOMKMT4 z<^=?RweWy_zeHu$sO9xWR#U%fHQJX&*c?)PkRgy38czX$JKmRySW?$Z%vqP+1Pz-E zilgE%n#OrXg@Iw6W^!)GeaE#?bYjdT3y{s6-T3u=l02At@T9=}JC)}mEgScHKm@o^{$tV*|CWfVoIc?~Xv`b@hymaC#9LyD8l3LuN0@&)YZiEmvLy|Q z7-G#Lxz&p*jjqp#UqAtGKMOoX;~heuO9M#sv9Zou+6`Mq%~}xXkQ#k1T7G>g@IAXf zf5c-he!LJnk{HN;Ej7$y6({mRbeU6h-Jv~+Pgn~$6c@<%~owA$wE_9nCigwlwrAmo9>I^yfN!tB7F<%v?>3S-(F?3_k++#*5 z`m+9Vm|-_#zAeyvHtTTf<_e7_AOtKi zyDS|#D*ZVahX&$$AWmq%a<%oMpY1`RZANQ;ya{4g%zmvI`2@fn z44wHC{ygkTWtS#{Z15z-KkO$?qGlXC_1j#jDG&c@HDBDRtWd{s)}E{P=~SjG`?9FHm3`}t4du0Pq>6Zqo;`Hx93$^&HpqB9#R-R9NicIw1S#W&^Ggtu$%ji05T z22q?;a+&%+J5inR?Dua*JFRX&FCU}dz&wzNdSU1-iHcN)(@C%U(Ar18XYddSYk%e%LumW-cc*eLmMoP<8xLeN9*tiLz}{9sK_K_@e;7+bYybi#?~t7_4r zYWX2v9e7{A*O%*Qw$;S)D-PlzcZx3KE}oqkKUJdp0e0V$fTu6es-ugJy3Au=rmlR% z|3Vb%s?%?QKGSrQfb0fB`t3k~xBa>9sis#BA&Q78^c6o zIo-E&?GHCw9Bh4Kj$2dI_^7dbKq?+v^si?xOa^|B2wlDt((`*C(Z5k|*PC1akJ7#& z@zo+yobgYCPXrY5me!6JWS4@D;uzng5ScM}okZ^WPd6 zESDDk{ol|0m$?n2J&{eqLcxDe#q(P~H~jqX{r|qm^#1>eCBJVLjiWtCJa*9D&awx0 z9gS)=YqTq0$^TxuN1Os#(#OShJ3BiO5fM?bvBg246S1NH|7xe6881CM1zsPv0q=-# zaSwzl{=eG*n>4_bFOGjhnc$(9{u+Nh^AGGHB_=OgC2Z&~FtF{{5_~AQ4Mv(k%pqC* zkN<1IQ5=jt`PPljVeBM^k(nYbt&Lw=YFSWBjY@Ld%hXt9fM@;RjLy`vwZ%Ih{9JLl z;6d{;x3;51yMtT%zXm5%$eqD=o7ZJa${p@=&RT=k7d0W(5%z7}5p>CaqP;R-Oedbq zOB@O|f41o_kQ^Ea(RQ~%?U(IkJ2L|v9x(rtxWZVT`EN_#J_tsxSq314k1I%sywln6 z_2=G58)zq)*q!-Up3*Eb0-%hY-Ju~g053l)0F%5MXVlx%8|}J=b(kki=2u(CQrltb zm`%!yXTMXEesqlbk86J0Gx%-Nb5xb@@dgBV+fgY@ERX#vLmpdy@5-b*Ffz`W;#mYd z|6_jt6t3A^8wbfC?ibgLR6}_yk zOwM)$ZG|~PkyyaDOh-5cKdW!+-y#&m^$9u7xoCt{k(mgPqB;X3b7})^@l6 zJoi_|)r(C2meVNyhcg?PH`bgvD-(AtPx)t+a3Tql56JCU;pp(ebv3}~(BFr3#%eR> zsl89JN`nLe2Q<{k;YjT>V0OB=&``;|Jlz%$dN4W(cE~0-9bejk1(e{hzpCgA{fBWa zzrCoGchzSEdg;}H=s>i?1|wFTS}oBBRh(M49__mw?kThI{zKGe0B zd)wh@9ZwM}3 z^(27SKphE!^#5q*ML8k%-jyX;?9AA9fa`4U@KcwygQtLO$J-0{X~Htl%foy1_Yg$o zEpo}Q;&{_Na+8mKMDIRch8tHAWce%~&d$XM<_qg!z}{jC)8&T(K1m z3`V#b=~f=cPw2}M9>feq-7T1xAcIhP&34-8J~JUXZ2GR8$OlQZ4l=6QaJTTvfTm^T zJ7!)<6;&#{{7*CF17foN;K4aBOPaWcVB`Xwv>-@;2j=Or#AdFy>q%+eybY!HG_D1W z*+%d!`Wsc#$>KmyoRxOP6j|{5meJ;V%O0!wD&~CY4_Yit+8<*2VQ#u-hVKR_$K8QM z4?3f?y73B)+*!8f(fQ^bK{S4xrtq#cwo6uAHY~~*J-wc32qbF zIa4{vV^oS+)0UUy1!KbGK+tAvW(jF>EF@?dm1-A>kac^+)9|ep)fU4>=j4rj5lp?l zSXj`S_7#nT7F&Ygc3n79fM6HmmCuu~C^&u?h2NVCiwWQ(pRdk_Ra(RF_1?35Ax;oZ zkv~y2z&p3d@x-_C=rez85EGi04$j39ioS`22@3G>hKjli$zYVqZ2gjg{z^100unp) z=n8mT&mVgQF*!Bw*L&+RBIK{0c-de(y#eBb;9akWpT9h((wY=-D0V)>>HBWEtY-;E zQ_67F`&561tPB1*oa+C@y}tD#)HOUJ;+5J7Vs!$zM?*)O>x%fI#`GuKYysKhy1&En zgpm_Yj2DcUPh+(Z4`W3g8zR5w$b3((v6CW}V_h32778S;)gQZkT513Zg{;!vq)bPj zAy9(6Z$7SjI#OMW5;AHV$e4o|*4V6g8vZisdpyeNKiLChl9^5B_IxlKC{Z&(xh_w_ zdtEmO^k2U$8j$+80)95?xJ}DFEk2Lwc()y}^jro=p$@Cm?tM$l`cMbKlZz^ky;}=U zd3rn+xZZ*v!{})+lY3XVZV~4s=RQBa6U}~K(?l9Pj8O-USyueIX8Ecok2=Z!7W3-$Hy4hjIJ=8=3KE$Rqf&^2cpijoUM>weq z%I4?0MYPADH#kk{q}AT;-#1TsGZK~WbNP00m`22KDQDtd6ppzdpCovT&irP>>(Od_ z5Su8g{lwQ~t2t<}2eWE2fb*yxGnvmnudS+$(IW91d5$(`wVTtQ=Qd-nvBN*Sbj`=n z|2Huz7V<>Au@q%t{Uo7`=wODH@n(^Rh_mKpj>%*o>zY~wDj-#30QG-BZE z@@_%S3b+<5&~$D$U}c#*wPRfD^rdiVJiV@4n{Na?8E3`?^o$o&E7se#90(tV<(KrLhF>5=lANTVAItJ z;;nUfU&y(w9QANp_B{^wUsp4BkfOpTlR@A@FZAu7IUdaRhYpvWftI{&3lX11N}3fLkInC zm(Q%o^jy}ID}3k{1m4`);|61Q3cdr4O5>P*EZL3Yr|5&O0N)+CJ*Ilcz5Hva{eWjv zwND57v`>B6e^(X7zQ$LDR1L=KKNXT3$O`Dc zlO96D30PbHF7}NEX(RlhPvyMcWeVf@a0|fV2RQyhPjfx0M(-g2Ec*9g%&c~lW5Eb#yZoO z%*4^3uZI*=;)XaM@enCS&h-(A7c(1faLM@6E$vEjYuXaltN}(49p;N(_|XSX|cdH7&X0+ zBM_gytjo8e*klL@@HwQ-@_iIs*W9JBzJac~-_kr5x7LLH{`>($O8$uQ5K^F{O;Hs^ zl~!)UkqRF>M;*SJH6==UU+nePBa1sP+)*FbrY>O-QHo!E8cHD?>7Zt8)K}=DtK6F+ zkoj;_URqLZVz-Vx?|b#d4&oi6k$hq<;X&P0LZLilFr>H98AhT%8KT+!hllf4|G|4) z;}=r-S}=Prh~u?wCtpgmap}14v>qd2FnX;hut^HU8t%{+>;!pO@28?d=X52^kALrM zCos0D?SPU}!yBM#mpxkNroX%0K*DM?%~N#egkDM|lzbuB^Z+mkt-R;+{@Is# zTcK?b&P*46X^uo{`3AtZZmK;q#P}Gph09J8x#P}HY)5!V`_f`KV()2Igqq6#GXszs zfvCD!b(qttS2c05`)@^+HbcUg(=G4sJN1$4y_5(Zpd?CkRGbT>nkO&X5a)Mf%zYbc zlmpj16f(p-R~T3~hm&=z={sr=zYxHmW0v?i#M-dWOpOFO902{ZI-$NDK-I1Www$}( z@7o7cQaP~UtlfH@`CUm7`@M4NdmbT}z3vDU-9=)s!o158C5vGL_%S?;*l0UIfx$_1 zKX;X0Jw`dgM=t?sTp6Aojz_sJFh8+(MtA3fTb378OEE%slbiJTk6eFi8vBaf7&DQ+XDdCDL5U;v!vOJ?GEnk(N#0r}WU+a%ZZ5dA zo=8E7_~VwXynLQc;1oO~%pP>tSrTp>gb4kTVk6!+Nt#4H$9y)Tk-AujWA`onDp*{5 zS%(E|V2Ye;)gUc0DqqlN#V|({W8F^|d>V5sD?9YL&!QsC94o^};vHcx`Sbl{ZA=FOs#Y5Fj#URyLM+-3Yhq)jaDKzUPhN0(oTX*j#i zd7FH0k|WIO-pOn8UmU?{Iq%<^1igoB+8<9glQr|KN*K^`j{Vw}69`usyQrrmy2$4+ z%WQZ%PsX)3WYi=Pzn=e7-GHBw*yGN%0k~eD$QkK!l33iOAS|d{Dh&#DG5Or+bfftV zkh&P?N~X}f<(?bllP|i<_^aDLvp0U4QtL5NJtVzn<%aB`eD!f9;UDY{^(T$GF8O>KJhO{_& z(o5cT;+i0+Rn(#OF$o8gm5?93qz0R z2h{|(AJhcPe3*9Q`27Y&n(vCvf=KKaBBU~W_S~uDx_{OC)yBgy0?_00B}Z|8--Jsz zxI;G{cCl1=@7wrWFFFG_!qXrekCnTmjD9{;DEe~*)}N;oMSZJLs)s@h`u#nfy?oa2 zJkP{*-S$~B=!rL9%ORT?;O!LqS2fv}7kKZcV(jh-iSIrP%X8tCqCd6QSpN3lBwTo> zQWTj_h!|dc--uKo>*C-wYtFX{PTsgLiD!jsY1WQ%*D23NYh4IHSqa!8N627 zKkGRQ2T-KYzsM<$xO^{UOl@WSe#k(P59xOQF*ZL6pVS$52HwUKBS!i9X1>sK z=*nwHXuzp0UnfxK2w(A4t_*=jBb@MBiU-jBG1`v>=jA~h!cYGvI9m_Gxi1UsZOOjg z`6SfocP9u@CK(!OL|qXKzwr&QSeci;pLK8Br;;}2h&nU=q*B*~>{J=@L!>RpD`Oxj zl1JFpM$`L&@9NV|%jKY`^}pyKl**{>yz9x|ZNtaS{XV?3w3L*KD`{tE=K}5EGRI}Zc(Re6ox2(L1&1~<%j>^LIZ(Y-7)v)oLf8@?W({z<+5#tx9 zEmSIn6OrsOcinYYf0rk%23u|qN*8x>;~KNw7@ZX<<$HY!q;axgU5Tl>fQA9{IJO)d zJXS;Q1(g=A=w)^Iseq^W%$;6SbrIHOi)u!b>k%75fmO+Jf!P;`J4j1}*V=@wb}msh zsjc?zSVGjOC_5kstGS}n*gFOC>oGD$pJXWe-bGOB`hz@ z+#3;atymfG9d@#2iCetU{UnboZy=?TQJNauXNq}V))PM&8Sw+XYc#UDFid1cru1Gk zo~;cBVOFI+KakH3bC?`H9?vH3sv^gI!j{W+EMGe?aRD@tFd1+r=*31?1@`yk|CQn_ zjw0D($?+lLXxbY~QcGJ;T|f?tQ2UbhScb3U7}euMws*;f0Vg|C#Ir&r!IdBjBJDc9 z9?f0Md>G&ryQ@f#GGF62<$Ki0N|D7HNUX$($*?LBKpDG(AaaOzTHhV3Gcr5wl0Pj%=PfdE`sH^hX-OMI9cjY%J zVzz)kanwIRQca7z+C0&!^gdBUJYjiTZe<&y4=W>!H3k1P>v}DbKgQ#s_1jh!yZdDI z8sC-5q*_d=UXE#e<;;Fi87cHy(6X^M!V5p6F zmO9Y<8xz^OPuYq(l8z#>RY%E`SJ54%Hz$iGf;U$7Y`0cmu^3b=3U50m8teU*#&gN# z$Pwq$6h~$#z5x;OtAjAUT1M_AWK&dnJ;I?z&r;b^ano&A3#zm&tLDDdM}xDg5JcJ? zaam1gze`Q%%40%~m>;r=i$bt01Q1HAPPlM4G*y;3{vADmQ}+v1S;FdX=j=-CW1_KH zqdgeEyJB5{rX7XZ1ij3_6k~*Gpd2kL<5FxPC=iXK7uCE^el}${p9_rx#0O&kq{l@I z=x6+PhgQei_%o~pPjF1{RgI4V8LQDVe+D)<&Qe9btAI?5@E@FC%&7NXTTq*$80iWX zsk`jXJ!)yz`j}k77D|tDLhd_jz}eq>+-LV0c~_(}3D8C&3`V@9ChNhSM+0~&yASRq zvdr}vK$1h+(dJ{}JD$~m!bI$%rF;eb{y5cNM55?7eK@>>PH55SE=jVBFc84VZ~FyG z1BchrZBYrs2$n}*-a=c@RUadH)bxdY+eZFM;ztOS##9!w_rIlR1 zH92_`1s`_jA`Pv6hVrLYDE#HpEyrwi*2X zjLTID5(^>}=X9N`-F_~2F5#g#Gu}REi|XHY`0+2$zSrBTYkSmfS)|#JMwbq1Rnx!bYjGL=CEmN_EXCeXz2H;A^Kvmq$tTJ)cDt zjp5soT7_1tKNh`ujrSqCy3JzmU7hQ)&yRf4J7{QUs!j=CjKoxzvel~92j}F(e}QrF zYrk;pNdtPa*D(OYT|kBVmY~^-4K4qQC}w(B1P!b&0fTSsSkGTz4pTa=KRdYUYajmL zgh##6iz24Jk4qK-W#3Y8PQYT%Eod`{q z46^?w!fzORR3bDt2)tc4RsUNTyotjU-_n%o>ryYKr)H&PjQNQm`v3+WUY%eq?rhRVaspu z$Wo!$Gy*AYd|D4)aXg+AQ#)SHygHs2U!M0?osDT-s^6|7+R7n<&Kw-my3BWbD7WAL zYs_3{!*+G%BWKqApWj9p>Jk*OQ>^{{flV~UNSr~ZQn=ec+h2ot*`h?`qA7RSu>VfiCvO#PC4sLv7%j*8=u z!5vgY+pW4Pf0Y6d#t}P2M>%iR@Yl#ZMl{e14ao%+@vbS#EUi>1^%t8?G18}>t+mIe zW{F!h)WMfpm(N<7EPg`dk7-kv87sHqJQ2MWA2sN69@ESOQtSDehNGv~O7R@={RSl; z|4pd@>hjELdfJfv7k|ZWgy{_EkKjt=8Rl&|Jo|*h;Iw4jx9|rkA4@X$<4x(CYig%q zDW1t$YqQf`e{Fu zcEm)f0f#<&l)5}^)G$#Q4wB{mv&4GMmcop@PhVemx^^P6201aF*m>5(CJA#YkN#=L z@foX&gkRi1{hhd+PP(rP(K61Q9rsLzlFVcHjUr`uX(6K#?6LaklkVcdvW*%zYZZ+2 zidBQfDEr-sd%DGN9}AVfDJT*I(++Z%yqqfeZAyf6VYav_xUS`ibNgZ5zP)_dTyk{$>(z)r*=r+3bU@QBAm%X+?Wj^8(GF$U7y1$ zj1Y-4*5XIDNlIy>(qpaUEgq$6J@_CS%I*^^Cr&m&Vx#RXZRC)~-i|zKUcfZB`Z>hQs^` z@HCyI&QOnZfG7^x9Ptv*XZTboaFd)Z)Q*<;3q5RgS%GWM8giKL@t^J(K&sTx@qVQ~y*Yfh;;JI|j2`Tzn6Xj_Rp*MIg|} z(n0&RS~@6DZa8~&yza{2;pE}sLrb5of=kB5Zt@4!vuH35S5M(37s=cCZ3R^6vPsAi zjOK%WXt&gFo*uU3Skk9Sd4c)(?!V}45T%Y&j8%3#jzXk1i;bx`6$?}NU1{AuGjKfS zg~Lt2O!)G|_F{q_Rr0R9Jwb#Yxdv1iIp$QoId8DmH{s_bYv@iD<6G~txh6DBA2b=)w}widh-KIAI}H#C?MQTc z#++xSL;jh!&uK{OW5nKWY@17!)qazb?cU_-dOL=H*ldjFp||~t6>>dXUjH{VijtBt ztEuP{GBJ;6>rUgH;yW=;xmnJ{m}XD*@+22SB5zua*OTPc>-y~LzVp@oh}cvUaVU!x z$axmC-tLfKOiM-71yZPcy_WuPw!4kT=lBJ~Tz6QZig^5@fo81j9?C%_`CYVT4qs0B zUe|N)F4ry_aC4L;C0)Q~gfVPMThK3|l#o2p6A)5LzpQYZD}2{z7y(7G)W4moBvFx| zob&jY&^{x{a}58y`w8TpXLKFC6|CLS>pEM)YL2vx>FqB&BIg7OEm?AL~q z8!^U88)~vTZgbr?pRVgZlFNLOx0Dszjx<_cD)jeWnr{$cfTt5Yrvrj01z66cKQ^r_ z@S1fzFK01Wm;1G%bk%)|S9dBOJPq~RZ0_z%#z_jjsJhs+yPU-RL&eD-IcCe+Uvx)d z`G-=MtCX9ZO)m~}j%7}c@!y8FH!my)%S3%g#Ic0XAGLL&bGB71)S5(JPfw%!Ojtd! z(VLbh4KT8o8T{}7Cl)2S=NU8boRBfej&n3}Db7&%i)}fl(v>is z=2UPX7xxp9@`;XrTw7oI?h*hWZ7^+8THM<7E3X&Vzvr_E=ILTfB(Ik;9>?j^^JR~L z!#$@8UOc)~pw;(9n5q4xijsb4Y*%hYBRi61fNf`j$6noWAvP|cXpxtS_Y=Q zTc}TLlx%;u&M!MR0KY~29@*cXY63l;mNMqJ}ru)~qfh#s#yOx+q13t>*wvvB-WZTvIFL!5V3y{o{_0Et0Q^`GMuQF&WtPil8ov5%HA*VB`pp(6b1byB^{%9GMQ#fgT_%$`UJ z#^2B1UvXEN3>OnD)jGj@q3o$BuSlm)1a1(Bi7snJbZ)u&Iz|PoC!SvpnjdSy+~V5= zub~H#`_Lu!Q7ygczzyQGaBU|(vM@CSjk%}tlMSBPTaB^Gf$-||pr%=_vTL{aW=p_m zb5c$5h=n*_R)pVC8$!u(QN&h9=Sf*qKgSOL^YaLJhw8}^7J$#PdJo2kDjw~LNqlQk z;T$VZ*6Y)WpjfJ09u#agl>eq$&@0U%*;L1k7KiQLb^}>2ul6YnTs%BHfd8eoo=q{^ z*N`O;m)R-}6H`$`L&DgY>?dSGi;kkVbCHp8&7TFS(~L+lG4hZ_j_J|8>*?$2t9u*+ zbI5aKg}`En1I$#U0jx!#vr8xCvnlR+(l1SCiOUKb zh$Ekgb>|`^RHaSCMQ>~gq7|fv<>R^zA?dQ%pmyewfx*&+8wU)_U%2WY^HaTf%<;Z1 zxWzb3QI55^e#vJW*W^d3_tM9+8E14KgV$v9Lnawpmz9ZTm2Ekbh7c#vSX$>DPK^E&~OQ(kTK=+0R|4yJJ;xO;~2U+R9|b8#t75ldCCns`Rz3#)r3 zJ*%sv4Qy{T1#^;gkG4ArVQf0bSeYXaA0jMT(^**5#P9%dMIdRiBoh3M);P65w}4Pe zdamL4p~Uf$o>XUrh~LkxP6*ar0O9+u;f<+borxSAe8Vk<=&cUwWaB?9Dd=t)%(7x- zfTOma4pLw=Ot?<>-?B8# zuRj=x;D!Sh+Nk1_?>=$+GAtSsE_zpTa5PR$Z^oLpeT=6JdnlkG)0>~9huh|@4z_)` z^x)fFHCtZQ?+|Bh;z?s9BijbY4$3EpbUgA~lv(FBiu6|onm3l`64VCc*5U&xY2G|6 zY(RO1g?*Y+Nc8~+fjoH>h{^e>QNfHIPXWzK=0`uy&vk!?o@j2p_a&U#qNYmvTpo9$ z&!@wG>0DMj4_Fq|7a%sUfb1_mTnIqkJ!c{F>EKiPZEfuI+t%YbN$KdJEuLB}hV1ke zw#paEoylk#D*{^(Nb6A1|k2LaZ)#qQax2RG&W45)yR-5j7Y|vBQJ(V#Q1P} zG|h_@Q(AHMK=xeuRsu9JfcDz5KoW`aQ3|zvYwI|19r8$G_8;xKa6kfN(`K}(tql=# ziQVM8<{1@R$hRi0r`GZkQMEXh5ka5> z_lO|nenFE@BLTA&WvYF9J1wEMyJm~^p7i9KL}Ev8Jnc^%)?(1ZI)i@?Pm5R9qtv|p zUjUoWLj7}n>x+pSN5*C3>7Kts*5r36x;MvBkqu7vcP?f_bf_N=r4{~QWiNy;Y-4d_ z>3`cf=eZ<(o$KPePqCMm?tTW)3X1bkKR{P+oCh3cyGj2d30*DFNJy>JLKiZMoaYMb zhAv=Uo{lI>-~a3hHvwUgjtf(|(gF~EXnAzl)eWRM^oY>@zY3ai>b>^00;A86;G<7eiz{zu&a9v!GI451|kSA zT!M8LFSF6FV5mYD;9q!0QAS0lro> zGSoIBnvc{=4r#LzDsOaUUH+P|I^pzhjypvLhQRe|=^^^&93i`bhE8w6M>VEtgMQ+G!A$>aY^0?L2y-=wQip3Y!B1 z23t%Ae8ganC79!%v0v)`kt+{>3yC-=ZcO_d_u0pGlR`>&uCl3gK4dmxxmlyhyftP0 zU1a~0$rIRxjAEt{lNX(3wE2TO#8VGa4H>7Hw(Z$}qvDJgzWxMQ=hRX!Pn;;US!-4M*1LDc6`d{6KVU&b{_X?F34mlONA+<1fQV+2Z0cZ-TNXjNb4vW?RF zu3rLFhB8@%KeXHh0|0rnzx%EIiJYK7F$y22Ls^fv3v{GUd<&1^TCH>}M|5M);JMjq z(HOZ>6zX}|A;q)875}H3*?+O+QrCUKzsc`fgGTRBa)PlVxmFxPx^`Bk!2Ri))o z1@L^GKBnUp+V?I!A@&Qma}`>XLspo`fC~^H@&Qhs3?qbfchA7Sd*}K#)$Zz~PiQx3 zO!~`)S1R?!nv_uheE5v*&gKJ0S%c)m;PG7kp&-D(>TR)QjyEpZJ}cseXuE1;EN`TS z{=6)C?E=G*orHf?bXO+Oc9QVNHxK-c*U@w695d5q#2Y4QTU@5WhpGd?%|>K5OYD1#}y`;8WPXC zlAG@j=~d906acGM2azI`rx?u2ck;VCF01L498XB9EZBkfLxt3+%8*44YeK(sPv_qy zb_ULr9PuaIDQX4Et8Iq7l%J+}9=GkajTBl-N@}nKWDv;)bQ9@enpgLojFspgG9|&*Wp<&vdpsg6oAB+T22Tg<~k2G zy?D+ZQC9X@je<@jVXSEWe~I))5#jO0b)>ViaLTs+!71_S1`9|N2dSSwU2+f?l~F`L z2f*{DBrB|Meu90&BQ%8{%tS7`giIsk=YQW_efdILeV(&sF6xB1wRBN!wtTUrzAr(6 zo;Z_<#`!~Rt zQa)qM{g(q*+jeKvwI*AjhA9@j6$MEnCr7K?CWkZ{botPttgxaeR(x1N#~99~5Q}40 z1Lnd+;~?WJgRHW)H9!y}AVmZftZY!-RnoQpZ7-xraR`cO055Zo zVHIMY3VrugLYT8rZa$6VP{Vfo`@O^#MU8vrBsN^Fvoa?LpLS(B4`r{_ z?c?BZou=hvqNF!nmUZ!=kE{d?CntcrgO;bszEF0-p&RJ?zQY;^#=}Sfy`QCDxD!;B zy;>src1?G1W~VFGwbBz`RF&vlOF^9_ZQvqgwL#LESAj9Iu9aieJ`h|{k2%}zAUp0l zJXa-SUT*1(`!*TgS13|gq#AflCbjJNKrwUCUt=!F5yi%AwE@hSus3{5r4w7m+`Pj| z7(85n{jscAeM!<3FX$ue#J#0aXGpeU=PVqEvor0BdlPX1dO7<1$y_R~D!+m$M-@I( z+6|ZjHtz`>PUUq)<2jU8YH&|jzu^_R07#j5ro49d(PFgKLHB8sFtl7A9%6pY zOttIk3(1BUAEwDA@IS?7#EFNgW*_mYbjIegPI@i2cZCiX@POvIw59LCJiKFOD$JiU zdHpZpw!kMe#g5wo>wddLW{}4O4=0TpD=h#P>oCQw|DN1e=tEDkW`jA&aZ{CfPdW3| z;p!3teL&lnR-DY{ry< zIyo}c4zQ>=hjQIt472W6ymHZ>=lr_;cXTALDVUDNX_kw%q0t6@=?k!cI<7NZmiRGY zB@cWQ`y);b{N30R3oV6l7Hb50Om}I1pF5P|YqInrKA}Hp+oRVh7r3NO2cn&=di^<0 z&|E*j8T?8szg0mt8J1LMcBb=eT8Jal5Sn6I@A1^LpsAzsJEUI7>~2g03R*H#=X9nn z_CimULe@q(H5`>dxx8w>_V9xU>{Ts}`FFZL-j9D{tPKwMYJT~wr%*ekH*_@cHRY|B z-Mh{maJ*c1K%+kZ`B;73oGfH=8B%?DX3H;!CYZu98O&Rg+T3-Ed%Z9>`JXcf43%;t+3xjq)5NIy`yo`2LDQq z0PX8OR!b0{9K+-&v?#}PTVfZtx-Wp^CUF?khv~{ceAdkc9LJ3-YR!z!`G0mbX?J{N zhrW2ZsCoi%)7M0yVXz(^vvTse?_e)wc8&Y`Q$^)i52=y!L|ll^wYGlSp2C=3Ybfu^ zwPr_6($4Ubs0O3)Elj%Zk8yoUv-7)jtK+5a&bTHz$xahKxM{M`=HPuW7mIQ8f`j{p z{9bpa#1$_)&+(Y;V!HMspgW-qgmNS&B{?hdJg0=oSL(lMM zqep@SXNC|%L>Txr(%Srb(CM7T`c8KbHX6R{vdgh+5|6g=1KOsL0zFabcp4S}WU?pQ zV3D=#_>b0L*I#9tdu-2fL%&y@i_y<3nj~!}#B^Vg6T6qA8aUDk)@|EM8Gm1EWp0XHI`A;#jM~e7`0_SXEN6mL)0bOxQK;0`fR-7I?j*!)ADhxlcMV+4RMU z7vDuCQBmlrJ3U!jmA;ZoW@GD$(97=XW%u*Rh{mo4Mmf9`|NVm}eqN$oyBVE&d$rQ> zJUGOl-x?-%ews(d8+nkG>a0@U6|7POE4~D*XzgHJPxZDB4UY#Fyae;r<}d3+Al>>5 ztkI-e(2{b}NE7JLlk22%XxfVgjv7oO?HrSkAP&4!d_+7Q`unQX09g_)rv;}F;!K&2 zKCFm;b?9T-iqfgtoyOY_LxoU~&jYD7UO#|rIG-5v zTcBx{8Qg5?n62+f*1P;s-kM^1OWq;294JFb5(j^`D09tAY(X_EMQLSC9-Oin zDO|N*a~~|`taX?&XP}Lw@OYln^?@$wa?SpL?xEi$r%K_aiEGQ^5oG&iiXHQTGacwP zHaxKwvR0B8A4N`dTB9Eq^>5PIQX+n)e>Y}>V{Xqnw&jbye)?#+)}7WmQL*!rIsH{b zZ}=m*@*##sPnX%(MrUL9HjHEwb;g2AvG>bmp3rBT*hUjfT@eSVvr zt52198E&soSz^J^Rf@03lpi9O&(J4>D*PbnLK^D!v0|8SOgda03I znyo*-mRAU3ip<+II~)f7AMXD8sm->H{)O)v6faU-ikIR}(BdA76n6{muEpIQ0u+bh z?oc#1#oZxTkl+^BJo|lT&v*8puz$_WHIqrMne#Z;vDRl9Dafu5pW-986LZ|n|Ft65 zIiV63jvWq4babDuhhHNzM3O;j;JAE@b@3t<5oQi{NYr{}YLz}|w`hNsh=*vonX{Bp zF!1~zxX=W`l7wgyV4<{vt_zp53Qz2uUEa7GT`pAn=x%lJR;)tG&*Ho1T`rerCVLzD zCf=(aUV4rK?gpIkltdw8-DgCpCpAgeog3$UB<2ooYUCkVO?4gLLf@q2Od4YUbA+H; z)RTE%@?f5>4|sb!1NQS1qG4Gvm9?3%<53JF#K1sZ9WC}4E{!T^igymZh$lbpX-BpW zDB4W((JQr@W!pi_KNQTF?5EtGL2aq2ks~!}kBDEXY7b|acn8~{S&)$CXq};B@9<_c za~3f|#3E%v{G-lRxnd4Y@{CS!guPs7uf>ZwZhDEpBL8I7B^c2Ds0>-HiTe3bI%gs| zz~^`!N4e8DT&D>`>D;!N^#5)wv>y%u(#}@Bm^JjAghA-zMI|R}pNsZv{zT`WZR%f* zM-P;-xK_pksgr-%^lqs zf%I*K(HB^5J<*qk8A}S|7q&2!w-1BzM5?#g_3CLCW%eAmFR*r9$6DQ&ozN+fMvUe8 z3s_8boru*Jgk4vJywt6^7>q7;zF&E3)KJ@={te=fSOLH+`PclJ0}$=4hd{yM{EJxC zOW(%*N(R#`&73Y*) z{VCVU70pk5qPeVdP|9Fzzk~@L_ll(VL%j2QDt~-k3glkE|M;q@@ybxk5vxz=(kTk0 z9nR3PIbD53Qb-@t1i23mnsOMPe?dYg6Wge#W3Q6t>deH9;#2O!`}6g4-ZC~jm~sc1 z(|Gs07gk13KMErKUy020yhN5zMsV``ZE9m#g$X*w0uoDn-kdh$n-qJqbufX)g+^kr z!Nw$OPWI>{KzJ^K@NKiK58>>7qLli_xc(EyYyJSiGvQb+PMOlE*h#cgOF# z_f9EZSmQcce%abq&dMW*3`UU)A|i;#LKgIg0HBz>4H-*x#aE(ItjD0~)$g-X(JPXF zaRCHCkem;)*4~HRpE|onAk>(m#wE5#9rmapod%kW@3RtBEk<~qUf22VXTqk%{n*w5 zj>Y)bgzVCA+d$6R8J5io3~xgX%60|C_dY9{UYo{V?j!?0XJ*0=+2i#ki|({Dmo!u+ zb1L_uTRk}2HFNIMjkq3t=`7k+xbLWIuk6^J5{ue?=4V^ z&h;v%YbNP-7Yi#q!gE_*mNYz1QZzgs%INRbiBMePZcHr8`|F+YyB`LW?s~}lp=DU9 zwP?JGPM1I4wZ^V5nTjxk%xYsVjBe~@WV?};weFhJ;NaR&|Hy%KwfQoEZ{JQnKVkY^ zCFNcsK=>C+Bb}tF-pvCv3r`|#idI~itP-y#tYE{xkwR2CyJO^62TM`9*kYYtd((^> zi19D9BO$6Z0kn(J-A*X}{uZ3bnGi?Bi|~laYkAde=?oJV_nOIPVD}GK8+C^n)b@)OM$85gS!}03g%GqGv zUT5%|+zedt9~Ea68J%J6>c3>|9Q3~37;C0C|73)#Ow@o&hO3y2vu0(JJx&?8CRwo- zJ4(mv!wv5J#_OIHj>>&AvroTyvvVoH4#;-^j8P@*8X4k@yb@mSz4C-8rB;jO2Mu4Xcx?6FAn{tL_-h z^0^L!f?G1)B{mnogK4*gLtaizhFrTh19)@xCSRNxHEuX@L1}_fvD~3*>3TQ@=n0tC z2b53;Y+5t?op`4@#wl9z6X0+ZpKQVK@n4Hs5l!DjIyYgl{q~ChzkV-y58k8{zfLMK1=N-yK6G%m z3`}rLUEoEAY<0`tZN#)h^%0roLE;~>Bry#Rwq=i^jj2rPTN<`ahet-xEaRj0WX3CiXBf8C+|-D? z1wCLWe8v+01p4s`fn$lG2jLdR15ryd0e{fAyW4_3f-H2s{w)NwD;_Dne~7u2dv~0& z?*R?b@PLO9+#jTI@>!29fgN|w?ssziM%;Hqwo-C|`+q1z#%8j{xQg}1vay853z~0f zK`Yg*mu+Zw>#C!g>O?U@lu4_k*vraJWO9O;GuW=!f26BdDQ4P}*2gmgB zf!n?$nwM~0KmXh;B7cuy>2<$=ux|g)8dn!X*N$UcQAfn_-o`p(rYx=d46iZYM_pC8 zbC>UyCJW+3XG{n$VtA*Z@e;jw#P>qUiCN@!)macR!nFRl<9?T0KXZUbqJbg!8Vovm zmE|&jzt6|{&+2Q`!tubdsx$ehfyw2tW9w8ID{QUuyHtUMHkDLs)cq>m96CVWPC;cOkgO4sJ#E`Flx@YxN5zZ>! zQYKJmiORBO^Y0JOD-Qz+LZ(hmnv z+R=_mU*M~Gs&2_^sTe2>=eABS4JrJ7x*~E zDe8zfB%;|bi~>`)uh(4|S_bfRk&yiUN-RmmdCDfwG?r%fyfB>rb7U|SAhR{ zZptHJZ;6bBrhzy?ZYY-2&Ij|a;#Yw=I;V zRbLogmzOlGph(00O+_L%h3iq}0;|cPMf5_7Ik3N=jbJ5>=hp2cuPQMJ6~^-pMU#FMh`zHoYO~Exlv~4PFf^ zoJ|3X9z5L7yxf>PqQY_>qC>pPEjeL(QPJNoUGuB_Tv?T!6DT?-z2Wlp5bf5mpaDrA zyaUM6Oo?MpyzT>yc4^tC7vo2WdKu~fNRh4xWFVE}|6$+2g?ZtMK%ipOq?Jpb*^LRpU2I>XMds<2h5tDXFocjEtoIJ2g9U_FY@-_3j zf8w6r=zykk%QL;4s*pJg4-YsrmDI*i&KnffIk`@@TOaMI#8`wx=egT)lsUpnmjWui z(;~lG7E}EZ@bwx@JQN%|#n92Jw_(9CZ1xW}{gfI2VOq zUo;eH``1$;Q!qW?5c`f1_3K))?IApi`ul0t<(=fGuud;GBQ4U&!OSJjTbksVl%-N0lGO-N(6XkrTH-@XE zXN4b#cEzpA5Z?O%R?&zpb0qC%x-iRVwJ0rcIxk+~<3-(*P%xas6(}sbM##w&+Ggv# z)M73mu$FN}G99&A%JC=i=6p%|c(K_RAU_utEAVY;gJ`nU#9 z#852AW6wAA@cDSDZkrQ-d_&B0#7rUG5g&xbW|Znu?PddOd>Jsi@7QSo)=i9VC zd76+4y`~5ZCm~z?`rrY^h5AxL93jbM+l>_ zcv(@RA*27J0AFJG7~$AmZ4e=+5n<~gd;i@LL%C(&3D$P>#23IVdT|bS_#3BsmtZQj z7Xr0vJ9Lz#&I4|yvxK?frOd@}B8b+8iKeqoiE1TuX!k?~Vh_0Lkgf|rlXy5}RztzzeBN&@eZ8ZG#wdk& za;{*fg{Fm{81@%!sK5pF2SVn8Ns|-X=qOtC0r&Yss~>g4Xr5!iJbyg?FCA^pNZvQdg( z7#0I`s+3AbY4691bky-JvFY_SRC3r=N_L8rXP9F(=YGf&i@l)BD2Df#ob~+H7dl{W zN=?WS>yRY&_@+>jY#_#)$jLzjro8=C%EWYEZ(%b*?SGZq>Z_2?H4*3$UAFg^JU5p5 z50-cs7U-fShh_z_Xo5rQRdzO;0~T`q1ei9gy{qJ-QXL{<4=?>iP{RBRKou~QYy|cm zZH*>LmP(wJ`%((~5~OduFH~2AIR{C2wwU&Iqo-8e?iDXwG~13JMkjzfOq}~&y|TTc zEl@Uo#OGO;H5Me@<@6B>=@Mt*bZftvc-@Ruulhd;GqN*SE~+>W0~M2wX@kI`ofwa* zH$>QJ-;YY20RUN0>(pQ@1_C9CTnUc z*RMg4oSx*ZG8J;gWR1purzkQ+^w=A|f~v*nCZ)Rd%It@QdspTj-F7%}s#rUGitHKr z5%R~P-JD1XWcKu8*HVngtw#3+D&Z;KCNC}jkvr4O-}yPckc~7r_nSXnQ})sF*d|D+ z=K5Wctz|K(GS4-}%r-QbmKhWqu1L9YAUhTH%<)5%9-2qB(+4Q~2O^$w}Dh&|DPJJg8 z>m>Lll!qvwU>?4=LJvSyA0QLPmur3!Ow9Smo}y2U6M_oy*s}$*gv|k{0#oX@@YkbF zw$9rQynd2Lo`1~q2}O`Q3eYjRj?ru{8bQb_iVROcV_xn6XzhZ-;MHMtxE=2kDYN(I zpI>883s}_NwqMXb4jQvbEsN#Mwn|SZpKgmZ*psq7t70fnV?mM&GAUMRsLo~9bW9Dh zsrQMo^!k)M(6UW~;rBbge|E}{Zh5q?iaVBG&ehK)>R5JefoHNoq(hUpVR<+Bk5wp7xPpN)F z@#Qt-vjlR+&gODxb6+VQjg)Sh@HusJ+@PC$oNM5^iq110QRFe%sHr|jDCeDi9wDDK zhlTB^lDFB2MT;+$o%+sO0LffW4vIRINW^$KXbGc{_hp0aLXUQ8;+^lHrB5U}3-G?1SprB@-wVoIY-3oUvig#9O2&sysWCm8-purOv&SrEFqww<0ad zQ$3@ho`3KvldYXChqyMh*TQ4S+?j)5X!kjsdjFgIPQ?zNQy05>yEWQCSQAzD!Q_T=L0r*&jmyeP*OgbdI9^~iFuuK#`^R8dN{{mpkBij0O@%704EOiN-OQ6j8 zDe20vQ9x?#oX3y(g4s%ZP0BCQ;a}n3?UXit&iGYFdByP-*^GKw=5@43{-2S5*ZcbQ)>nl!$h^76nPefA;{dAhdxll0(le@mYLLkn-h z7ul+hbx`q${Na%cnQH0Pxx2%j_007?LfH>#o|ImV_BROTzrC}FMY|pH8#?(2c>tIT zq~hMT^TELd>s<$T!~3M8DD9au$+*WSG_hp{eP<}oaRM)d{)70!KEb$aKOKzdUn8*9 zc^?|2sN)iUO$KrreN^?kd#}W#JtEDD2tGz0jE{ayH$r(Ce}CSj6LHKQb8N8Qf5A*~ zIjaZaoS!nk3OuCxUovRiA6NS|6KbSD#~546x1E?M6CTxTsk|fG$ORKi2_8P`|D3C! zBKOuYA$C%);{Ps>&V1Q;^}ZGW0*UDfGt=fu@V%yl%IOORwI9TslOAVVR?m(8f6m>k z|5p(C|6#2H-~1n}Rn`9!&-(w)F8_b$5rx||cZ2hF?=y@uKlXs{|0N9v4;Z6R1Q@be z*pvjKiigZCEk&%H3~o8RcE3B0Z2jK`;{RFaUu2W@eb0N4#osPlHHKpS|G}!S7hTrg z{Y&`Ef8VF8pGD8v`TkF8E2yhm&v1V5R#rIz0$uO@Z6o=r#IarOeh6BGzLv)mZMb(U zIN2CVWpK!(ncv#crB(nhao%Yr(xgQuR6DRRTPW@yw9!*03^tHQkxG<#Jo4!kH zXX1Jnx1TPv6FrW)oRTF4{M1bk!6xX623CJA6yJ!kQIesh-288*W21QR7eGN|=M##K zr1tQ#@t5Vvq1$OZ*SVwph;roPZ}HdIp4tty8OH50JI`)fJolc(CcDquh)xcx6UXi+ zZ8CBzr3|UTyGdjdrLMFS5OvIq&EW>pnfo8kqmCQ_E!mKz2<}r3W#qOWbyEITd(2X~ z^UQ=E`aZ0O(O8N_>FWgQj+lHnwM)$$Tp&yBS;Fz{AvIeHB3$h!ZQFcwa}~hY)5Epp zg&rCm@^Zv{R_$tKL`6wUJ(E_Hj50}Kc`x~` zn~Af@vuV^{j}&CqZhq&p{L4{eJoqq#&oPD5I&8YX{3D`yeY=9imsa>*T5ELlaxY8k zN2AF3h3}v^OUA{O%x|W!62VM#AvJu(@0?8_Sb?nbTb>0>DJX+<)E{ag_oV?IrIjHU z!D)u6Y5(u9cjO{Zm9jrv%+oF@(2?>9e>LbN~k|)CY9UR_}#AVZV;Z=2Q z;fuJ0u^CnA6EV@z1=WSH%dU;*9Dj<%oSe{(p@04N0XI00MHE?%tB8xC9YKg-eA@ir z;aGach>F*sj7hoaG$M>=HFTTP>Axi^eZ>sheMgOX`PR>l9m^I6vWAdWuX4eghrmkj3xFZ|uk+fMgf-y6Wb`$YR$=XS|7C=!ag!bqo`$;voc zUCnz^4{9jen6pfI`BqJztI_C-xW94>XZ6DkixffoneX{|2Ys32W!D5e-N@Vd4CV6` zQlD?{@?SV=5aUV{l;^UBUn#A0%};z2SvXrTuJ-a_#EbMtrph)LSH&$XnC3qsm-=hsaN+U_MJ)$y<~OTQcfhzQj*I@ zCQw8_T&p0bn5!7puoYlG*5&X+`9Ou*aI78yjZA?$x;CdP=|y4e|P5#R!a`G%tX^epbzksDx~ zm?WU^j+S_{f~-r?@iw3NhR;F%j=OFSJbNELaJ0x9)mPQ7*nA96j&ZRK!wv(29G@U;oVq&+{ z)xT%*#H&5r-sZPzvSvEhUotQOX_hZP%`2|=x!e+|+vpDP>y;`oVNmZeiLXbop=)2Z1KCEOwc;2jU-^YF=s?2Bw36*F9wYDFoLa2HCA zmyNA>M}$?zz+;4A0bDb|n&c*2*a5&+&r!||*U26&&k1#OCQL=2m z<*}tZAKeP$i|}^Qa@-B0FnNC9gaHUp2M+NdxrVYYn1p`1S^U?>Gk2r-V}iILCH?$G zwKNa|b8#$Zbz%%NSh_NoZEGSfyB1!u_f884-`CoItR&Y*EY4M)P{ie%IR%F4HK(LA z&j+*Vw6%IOP@MS~A8zz3_mbtABMTo9w@sX-pq`g3`;?N!?3&^h5VO-=a`H&=uSJg} zlzcH#d7Nd8yeZVT7N^aL)YH9IM>wa7!dIeTFy^q`gba5X3-WYaW`jOL-8hs{@0?cO z^5}p+_7b2(l3ssRAyV6)bOh&=GVq_!aJ5$1*~#%)u;+dCU<}iQeQ*CE9c4eUqekwa(oZS-h!nTxupBy#1(RJJWujQeS6+G zzmmJ0W}LeF>3!l|#v=Vt;AFfy>9E>>Z{WWk-=@;->P3M4Km zUh$5q5?ltxh-TZv8&R}2g(kzc3?feRbR%=~*n0)+H|7Y7XE{|QrKMrnse#NNaFOn4 zTgI^rTg%?DjCU4Shcu}$S86)uXbWVLwp+5XgQ*?1T&sSUsC$@`0<9n*?k!?OD#gNW zcei5e%Dar5Y;fFg+64{DQa9+drVc&x`sHujCUY)9l?`+-?Ufl+sxe%Kd5&>rj)4rKurXFF;m66j5JFIeK<^o&7Jo-7Oe19rLhdB-5Wg%_Eey` z=kzJM94g=z_HF@_Hmu*y6r9D1M3W6h2LEcyKXCG{{bj$R3j7009@&VV&h*1X;ZCaS{nUi^+-F=tOJd?@%wC{bsisX+y3$v&Fd;qIJ*i)i{@e{EA zQ0LuXg~%v>)@NAeKQIzcS4&8g#kZj7zbhUrxIH3PtjAQ0EMG z71+xSuD*4BK(1YAJd44IOn85vI#THX{#b@}aBc1EB*+}rLM#>;ZoW|-MQC+SSNW)D z)N=n88haY1T(Zn{WIq_5fu?C8lr=21!+xS2l{ro~16mT#ALSfk6o%B%ZE)lxbeke9 z#)lN~dOFZaI5XI;?gJQ9iw(Jqn4;WscH|uPFbb3;oEyTSL1WLGs%_nm{EA+2{SIbd z99vtbpPd+U2C|cYzyOih2LpaWW`SAx6g+$AHWxoe0U#eyn_acEc0me2o*JE z)|l$N73{{$V8u;EN@>bhk$UTbdn!>!gmO?sm<1^Kad==TVjK;tree6EvM80A6yE0#YLv*JFoQ9Ez`i%{CM%QkHtgr zUj%*aE;ethq&gRqBjyQOw$J45dX%4v7OZSo!lKx!7Drr{kF1KHp|u8*m*Oxc-M1bM{BedUJa4flkk0>b;P(dtNBsMAoQo** zFZOKxS8R~0yr1tg2sAGg8NFP2KqeLuiyp78MK2Q$i+7O5fmCDLy|tXR9i&LYWVLo7A#+Z^vese7$^D=iyghHcEP{Li#GaaO-beJ z?8#9Cy?Ve}+s((ZX0%>rUZjmAP9i#=Znfjy2{LNtfZ!m!Nv-OU~Qg( zCHVXM;V*~o8KYtQ>_fj9X53r0G)bioDhE_fH9X6g-r{e>qozbeoQ4v`7;tP>oj92MC?DAP|9WR((cE~}b2a;1SlDo?E@O>PUx+*DOfC*F@5 z?pT4hamIDms9vvq!lya3F~}7VtL`uf8I;4ayv5jZNMOt(;DjzIu)g@ob_lbHuU~Z6 zmc055nA?+G#%oR=H3>;1I~#vDYL2ew8k;RF9K4>cBoeeh)I1Q?-kN!xksM0VU#k8t zRAFrbyOx#NO$7g}L$>|dTJtoYHV~?u0g&tH7OiPl8|vYe+k)ajhiOeoSbTz1Ga)20mG}@>R}?QSH6& zx3O*uuG?cQ*=;x>xO+as$ZU@-_(5UI2dZIQj2BfvbG4btQp7d7AIb=I!7h*Y18;#& zwjDYk185gvUWQA6A5#)0>a1Wx*1Ah1c2Lv^*5!^~PQ8T#gr(^+>1M$`k*~8NQi@Io zCkjOBQhlRHbMYas{E4v4{t463qfcxZ2#C$nwtU9TkAVK?Q^jl)-7`At)r>?jTd9<- z&24eFw6DNVIM$c0a#+I2AQLwTnaP6m&@Y+^hx)O)oA-3$QJrrdQDKjtVaDH0&|IJ5 zm`{SmFm{rHhe(^O7+EptX|3pS^(~odTfrDWqgOSz&)!?aOUuR>7QiOw(p~(P0Wb1} zOpfbi%Od~&5DXP!H#0SlDxGn{t-lrGIuiN@gl#@)*5WDhFa97%dpdpGu}#-sT%I( z63}S7TyroaetMk$(Q$E5A_&FC`QtPW!+BR{7Tk8;v5z;0^vO}UBb=SpcQl{T$fGb# zRUaQ{bFQzT&)M&DFUc~z`7@bVv?rv@#ezzBdgUhapB$2uy`X&l$A)I3j?{%$@Plnn zQw3jWa&W*aXzrS|2u=ke=xkW<`rzF9Q7a*e%C4Og(*J0FmSFqkV6~Poeea zN_&!*@9nv;;fZ9;3hoHW%gNDx`izGDope{dfm87u8iEfv-u8g(Wmc1wluv>bIel)% z);wT+(fuyQT3y>PP_Ph>ExMM?ac>_VmJg=3(bwno%}r^;)^Oj9QnSJ$2a_9bO(v~j zZKa6O7V$Bka^{(R^8E@I(YA{BsPA|=JnzKlwDiAJNNm%{kJ7tsS6p)qJ|%&nq z3QnmC4~eW!M-X8yyzVZ|HHd$8P)|!zODk+=D0!aC>k@al>bi&iTlRJ@6)H!dtY1s; z^Vw5~S2k0It0Xa?7WEq3;5Y=lJrIm2Rtink=)DVt)8cVT+%w}?DUcK}HS%i*t|6-nsx#jj3? z-=N>6#j>_gzW|l$jW9GX99qljYB=2JAjruzMJj4DB&=Xy9dkc&yebn*b#o&{=OY-o zL}CkoKK^2C%Br=PCqCXe<@@}qIk++L!8MV9*yFTRnYgwY2siKIN#Q^}ry>iM_6fRL z@4#@VZNi-7CF+f2Vd6<=q7gUUYYX5<=7ebN>}UC@inWh-w{EX(ktN7V9_@mj>m;$n`W{=)rgL~CCr`{>=06FFqfFK=Z5AJ$1G zCYQr`>dkCv#1=D-^@JkoJuF^(#Q@;be#r(*^H#cGZy+_u!5Sl~ zNhmpy;7GEbZWSw*c)V~hX{nT8oL7Pi%h-p}xhXVFEgagPM4D--5Y-(6>dRiyb@lr( zRZObaaz-HTdw=fv{U~2;5>s}z- z(hl`QczNeFP&3r`-<|DzheMQ^OSG&X-QKk9$;5oNLih+T$5a#%xwm#&Qc@oQ4dIf9 z))X7i0}eFvrn6zx5iYTc zMdMUfpv!rm1(ST5S6)D!_x(4#7vcXMnNNO2_Xfg3eHN@GePXggAc@LM&J5SDYDkt# zI7*!5$~p>Ze78C)JQQpL*9!43m$*Em0HjIXrI=NmEGNbW z0iBms`;xvEbKh=R z3RJH4WhDhlKDtPfEw8=`NNup2_(geHgEIeKbwFLc!duE~uv%%7t+DIxD|Wi}_)EP& zL*80{t|s&oYmgURTcPh*=}IEG9)A7L_Ufy$O3i*vOi!$_THTsoZk^Ej%P>|V%Dpzc zZ;d|^m9&ljyO~)w0@TxIkE?T7JSg_oCpl;dBq5+e8Hh_UVG7^S^7UmsKVgsTrowVj zadT4mfFeb+XY!!IJ_O2~Zr&NDI^A73K;HYr9ARI+15T+vbV~fH02l%T^@ygWx7CDa z(u6&t6pFiw;9=r9z{&XGbh^xlrO~+8M$1wlYcVT0DrAlnsyWs(vK+WnPd|mo_EOMy zM|q6)FxJzUdL$Ev+Bo)$kNPAGTQ8p+UX{;9Pl)?NHFc4+lvgtT6$;@NpA6_nDOzGl zu8&IWHWX{k9NNq~WxgJR1y)6XhV)&9h=N`ca3*ggCK6ftUi$cq9SfC#hPpDjB^LiA zViDat*B+v6;7x1&e^9| zFh?{tAp$A$p~+~Ud*=rwp&?n{W!1(?8YPjzr*)|iF?jWl{ClhtIW7akdyQaX-SPLOzAp2s1Ji&zH z%`(}9yI|VPQtke zkylkRk}5OrxzG3Ez*g}nR)(K z^SD#GULm>suEqYHT?zsoDXO3e=W#y)YsE0OHc1L~KKxHP+A_8M=KAWSfIO;GY4rRU z1&Pq;W~htWn}`hl5jeC*)LJThv#|>=(!0na7G*gEjyBGwXEa&)!#>by^z*6?mI z8!#GDUji^Y8)7zK{`ocOBAEoHWiAGxvpsxT``84K`~?0fA=-6?T!umeCZC|`m-^|(5dd2~GpIjd@DnMHZJdOgTbLW}vDc2fq)uy$r zKWoCVEGJ{2YM$TMo4I_6nqT)j`?hkf3Gdd}kgD3pJ>fG;xk%Hkz;{Q!M!m(~vFVF$ zY);n0loj{vvBzbJTB$0<9hyJ)Jl{jO$m`x@WltBg$C|;n|9j!Y2iTg>?e@vx)F9*Qz6IT6Uj5!+!P1>zF{xiNMAxp^SNB0Z=7u}()C-8vCoYaA(CdMNPx|bHfDR0iGhn23N5n)nsoz(?%S8ajXzF1 z>mJ=yB>))R?Sc;5GvZB!qdc_)Yi8qBbS|6UHAzLB$3cjZrE*0$6jyWZ0h9Cc9e7&h zQ{D8}IKbcOE(2w8|Mj$xYQn~Q9!#nu)XRPm&kzrr(~-qVvljzv6Sij>%z!%8{a8ps zS%YuSFO71Whu;kL>CZeR01UlhMK>(lxIDM9D5Q=r8|-YQAzL!oA}Gry9W*T0&-e)$ z<(;l29+28MA~_kf;HHM`N;G}g1gD-It=K0BH=2zuJgPX%}d0G z-G|{=_aEe6lJvx9E5NvP`t^EqIxFA6{VoSK6tMd__0qzcchFBGxB2m8-$)LBPb&>z zelHZWtIMjMGxHn%NxRx{T1kpV;-er}4j{<-yl$AAT)Oy2@x6e6(hIbA`#f8-;aF-C zc)5hDCHJSFodE=}5KeSE!|ERtiur-vupCo-pE0%j@Ekm~&&_yQ`Z6+F?F)g)_jrJ; zc)8UVg&q-@={mW);Kl4}jJwPskA|p|8EuV4dLMpkB*d$-F4bwY=wYg+D=y&-)PIvf zbjUYW-lsXkKsZ`a_(g-x^rtI}n<*Uxr>m1b6u0uQeN73RCUZExbY=DWub(amKYi+J zJSO~EE|6NV;LN7)y$inEm_sTTjk$(&+@*E@bAgM65@Lc<^N6y7Uf(Aj7%>}OK~w!A zzPdzRs!}c^Zo`;#ut9VF3Q6^aR}li~rIZowi(0LUR!f8^daftX|2Hl5z;;^lcy}Bq zBg~QLMbV+`*wKH!v60o+b-?BH&b`L>lxF?G5BU~XW%%omD(~CpvVZECi1Rj^ps8}Q zJ9skdM5e`j36|yVZ$_nomrRA_Oycvb8x-wr)7)nzoJPj=tF^HQhlRMa;XK-)5kOv zT8IfDBEpqE=lvE^6A?G2&G|^dAniell0jv$=jEx=RQea<(aJaKxfTq051~s+WDeA- zSB1&OV0_uF}9raH?{v2Lit_z!QSKK77hZ zXEFXUl9B|J@**|Te-4(WO)R`;rH*L%56fp&&jCM6&{zB;+Bv;Sze40)UYorN*T!zR zJ;yf6Eu3JZKgzx#cb*Xzi-JxyYY^-iijNi{@i@AHLtp#AH=HW_lV4Vu^1a;s+G+#8 z`yf4=*pXNkm)cyTTfOogcgMg)_=xqvXtH!0)WF|f@U8K6K8waS6(v=?w94c%fO~`g z@qHv8a6Xr{8}BV7yUq+a^7CU05UHO>T`t zU|?^!2cGT;v6GD%6HUnDCn`93>bbS=@zjmHNGdi#xPi?30QRy66lwj)rwt7{{)vee zZ?6kJ{?JcwaS54*Wcf>bo_kAniT6U&&D`S}aa7bOH?PVsYjnB`pc>y>v_~au>!F)5 zN57yk%!Nah3gtX`*x+Z@MQQk1@|^?K9(Y3Oh$}w+0B^cT&us9+7W2kb)&9{@NSMZZ zILGh=Fpido3a|QmSs%J(wbHf$eE++(wPhildIMr8m`ml)c6}mDH$v->B;Q959xpty zB=8?a_y0A8L(SU1uJOFApQLnHg{}E(|J5^IeM(9fp1-u{^itAYuVl7$pQ+Ui@%N{` zJybJ%_QxVb{=U}o$b~Q-~3IbU5Trk>%{tRRZqCKobx@Ms^hdgUh~?wZ0#0R zk?GTd!=jur3l&?B9u;|#t>oC!1vr*dxEzrTxVbzEyw+8I{)wDPI-EpOu@?eE!7UgUS^ zERQ)ARp|S3o|?@kF3oB0|71;`V&xT7K@YredlDDJrxrP`m!YF=@gMu|K`O14R_p{ zEs|k>H~g*m#Z^DIM?6}xBB|6Uc-`dX+N(C~=h~Uqd1bPn_cq;64_*ib_qd;V;8G#j znUsFjYp>kO;JGsKOSbR6 z)5+_i!Eu?%onPEtU0YwM%$vW@jddrhs>mrr|NURrbFCEr=)CdAI*;mu9e?J|)PAn5 zw=||^_15K&m^KE#xxW4Is-n)fyA}!kHJrtJ%g{CG{;pM4m#;4j`yW~w(I~e6=B=Oe zvw}rGu00yjcqBV?=c!Xm>%R0)5ZDayqLUBApI-W7^Md#G zb(g=*w{lanzxA(a(kVONUw?!$-K}0SfBCp3|MmWFTcd6THuf<4AMO0&XgM{xXxSEN z-9E2XU#p)AwYUDf<+ANosVLXc|6HoTV%@9g)1?m1f`<<~ePyDIC(c{^ZNo{u2A@^? z<9_WI72HrcbIB3bN0lEHp4ZJg^uu$tLEJ-^nu$KE>OOO~IV}V(M*E+sadAyR#_IB> zbvkm(Z7#A*VzB z-#*8dqbd^@EtRl&9D%G?DcIXl!y!Dzt8<$Dzcq6X|4-X8`)tvt6Z%>Umu#7FX!)l_ zqFg}rKhC>#rh)Z|aJ4?N1UX#;$O1aT2DlOmtOO{~^?ZTLX0Y#oQXgfeWQ0K#Y0PUD zItx|~6gXN8ay3+c1)rCRHpCq;QA`r9`bM1XYF U9}D`&UY*&R{@hw@4e| Date: Tue, 17 Nov 2020 15:27:39 +0530 Subject: [PATCH 067/958] name-changed --- ...arantine-default.PNG => quarantine-default1.png} | Bin 1 file changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/windows-firewall/images/{quarantine-default.PNG => quarantine-default1.png} (100%) diff --git a/windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-default1.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/quarantine-default.PNG rename to windows/security/threat-protection/windows-firewall/images/quarantine-default1.png From 2a212f8430688d63d3d85159e1e20bc7ae901a8f Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 15:29:38 +0530 Subject: [PATCH 068/958] Update quarantine.md --- .../threat-protection/windows-firewall/quarantine.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index ec93d0c0a9..3c2c94f178 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -1,5 +1,5 @@ --- -title: "Quarantine" +title: Quarantine Behavior description: Quarantine behavior is explained in detail. ms.author: v-bshilpa author: Benny-54 @@ -17,7 +17,7 @@ ms.topic: conceptual ms.date: 11/17/2020 --- -# Quarantine +# Quarantine Behavior One of the security challenges that network admins face is configuring a machine properly after a network change. @@ -197,7 +197,7 @@ Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /s Sample Drop Audit with `filterOrigin` as `Quarantine Default`. -![Quarantine Default](images/quarantine-default-audit.png) +![Quarantine Default](images/quarantine-default1.png) Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the `InterfaceIndex` value from the `netEvent` or event audit in the following PowerShell command to generate more information about the interface: From 1644a95e3c6b4feabfef6fcd63f224464733fa06 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 15:38:22 +0530 Subject: [PATCH 069/958] Create filter-origin-documentation.md --- .../filter-origin-documentation.md | 170 ++++++++++++++++++ 1 file changed, 170 insertions(+) create mode 100644 windows/security/threat-protection/windows-firewall/filter-origin-documentation.md diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md new file mode 100644 index 0000000000..900e12673a --- /dev/null +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -0,0 +1,170 @@ +--- +title: Filter Origin Documentation (Audit Log Improvements) +description: Filter Origin Documentation (Audit Log Improvements) +ms.reviewer: +ms.author: v-bshilpa +ms.prod: w10 +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: normal +author: Benny-54 +manager: dansimp +ms.collection: +- m365-security-compliance +- m365-initiative-windows-security +ms.topic: troubleshooting +--- + +# Filter Origin Documentation (Audit Log Improvements) + +Debugging packet drops has long been a pain point to Windows customers. In the past, customers had limited information about packet drops. + +Typically, when investigating packet drop events, a customer would use the field “Filter Run-Time ID“ from WFP Audits 5157 or 5152. + +[image] + +The filter ID uniquely identifies the filter that caused the packet drop. The filter ID can be searched in the WFP state dump output to trace back to the FW rule where the filter originated from. + +However, the filter ID is not a reliable source for tracing back to the filter or the rule, as the filter ID can change for many reasons despite the rule not changing at all. This makes the diagnosis process error-prone and difficult. + +For customers to debug packet drop events correctly and efficiently, they would need more context about the blocking filter such as its origin. + +The blocking filters can be categorized under these filter “origins”: + +1. Firewall Rules + +2. Firewall Default Block Filters + + a. AppContainer Loopback + + b. Boottime Default + + c. Quarantine Default + + d. Query User Default + + e. Stealth + + f. UWP Default + + g. WSH Default + + The next section describes improvements made to Audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron Release. + + ## Improved Firewall Audit + + There were two new fields added to the Audit 5157 and 5152 events: + + “Filter Origin” and “Interface Index”. + +The “Filter Origin” field will help identify the cause of the drop. Packet drops from FW are explicitly dropped by default block filters created by the Windows Firewall service or a FW rule which may be created by users, policies, services, apps, etc. + +“Filter Origin” will either specify the rule ID (a unique identifier of a FW rule) or the name of one of the default block filters. + +The “Interface Index” field will specify the network interface in which the packet was dropped. This field will be especially helpful if the “Filter Origin” is “Quarantine Default” as it will identify what interface was quarantined. + +To enable a specific audit event, please run the corresponding command in an administrator command prompt: + +|**Audit #**|**Enable Command**|**Link**| +|:-----|:-----|:-----| +|**5157**|`Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable`|[5157(F): The Windows Filtering Platform has blocked a connection.](https://docs.microsoft.com/windows/security/threat-protection/auditing/event-5157)| +|**5152**|`Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable`|[5152(F): The Windows Filtering Platform blocked a packet.](https://docs.microsoft.com/windows/security/threat-protection/auditing/event-5152)| + +## Example Flow of Debugging Packet Drops with Filter Origin + +Now that the audit surfaces “Filter Origin” and “Interface Index”, the network admin can determine the root cause of the network packet drop and the interface it happened on. + +[image] + +The next sections are divided by “Filter Origin” type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, “Firewall Default Block Filters.” Otherwise, continue to the section “Firewall Rules”. + +## Firewall Rules + +Run the following PowerShell command to generate the rule information using “Filter Origin”. + +```Powershell +Get-NetFirewallRule -Name “” +Get-NetFirewallRule -Name " {A549B7CF-0542-4B67-93F9-EEBCDD584377} " +``` + +[image] + +After identifying the rule that caused the drop, the network admin can now modify/disable the rule to allow the traffic they want through command prompt or using the Windows Defender UI. The network admin can find the rule in the UI with the rule’s DisplayName. + +>[!NOTE] +> FW Rules from MDM store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the “Filter Origin” is one of the default block filters, as they do not correspond to any FW rules. + +## Firewall Default Block Filters + +**AppContainer Loopback** + +Network drop events from “AppContainer Loopback” block filter origin occur when localhost loopback is not enabled properly for the UWP app. + +To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/en-us/windows/iot-core/develop-your-app/loopback). + +To enable localhost loopback for a published app which requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/en-us/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). + +**Boottime Default** + +Network drop events with the “Boottime Default” filter origin occur when the computer is booting up and the FW service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through FW rules. + +**Quarantine Default** + +Network drops from the “Quarantine Default” block filter occur when the interface is temporarily quarantined by FW Service. The FW service quarantines an interface when it detects a change on the network, and based on several other factors, the FW service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the Quarantine Default Block filter will block any new non-loopback inbound connections. + +Run the following PowerShell command to generate more information about the interface: + +```Powershell +Get-NetIPInterface –InterfaceIndex +Get-NetIPInterface –InterfaceIndex 5 +``` + +[image] + +To learn more about the quarantine feature, see [Quarantine Behavior](quarantine.md). + +>[!NOTE] +> Quarantine-related packet drops are often transient and signify nothing more than a network change on the interface. + +**Query User Default** + +Network packet drops from Query User Default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: + +1. Create an inbound FW rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. + +2. Delete any block Query User rules which may have been auto generated by the FW service. + +To generate a list of all the Query User block rules, you can run the following PowerShell command: + +```Powershell + Get-NetFirewallRule | Where {$_.Name -like "*Query User*"} +``` + +[image] + +The query user pop-up feature is enabled by default. + +To disable the query user pop-up, you can run the following in administrative command prompt: + +```Console + Netsh set allprofiles inboundusernotification disable +``` +Or in PowerShell: + +```Powershell +Set-NetFirewallProfile -NotifyOnListen False +``` + +**Stealth** + +Network drops from Stealth filters are typically made to prevent port scanning. +To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/disable-stealth-mode). + +**UWP Default** + +Network drops from UWP Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). + +**WSH Default** + +Network drops from WSH default filters indicate that there wasn’t an explicit Windows Service Hardening allow rule to allow network traffic for the protected service. The service owner will need to configure allow rules for the service if the block is not expected. + From a214d9d47220c1c38978dffbd992c2daf9634dd0 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 15:56:44 +0530 Subject: [PATCH 070/958] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 3bf2022518..3135035738 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,7 +165,8 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) -### [Quarantine](quarantine.md) +### [Filter Origin Documentation](windows/security/threat-protection/windows-firewall/filter-origin-documentation.md) +### [Quarantine Behavior](quarantine.md) From 5ba4f7e9c0e7108266401b2d8fc776c676771cf6 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 16:03:00 +0530 Subject: [PATCH 071/958] Add files via upload --- .../windows-firewall/images/Eventaudit5157.PNG | Bin 0 -> 150077 bytes .../windows-firewall/images/Eventpro5157.PNG | Bin 0 -> 133616 bytes .../images/QuarantineDefaultblock filter.PNG | Bin 0 -> 51762 bytes .../images/QueryUserDefaultblockfilters.PNG | Bin 0 -> 186215 bytes .../windows-firewall/images/firewallrules.PNG | Bin 0 -> 127030 bytes 5 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-firewall/images/Eventaudit5157.PNG create mode 100644 windows/security/threat-protection/windows-firewall/images/Eventpro5157.PNG create mode 100644 windows/security/threat-protection/windows-firewall/images/QuarantineDefaultblock filter.PNG create mode 100644 windows/security/threat-protection/windows-firewall/images/QueryUserDefaultblockfilters.PNG create mode 100644 windows/security/threat-protection/windows-firewall/images/firewallrules.PNG diff --git a/windows/security/threat-protection/windows-firewall/images/Eventaudit5157.PNG b/windows/security/threat-protection/windows-firewall/images/Eventaudit5157.PNG new file mode 100644 index 0000000000000000000000000000000000000000..a81af9fd83c1b649b6716143077f18de374bb02e GIT binary patch literal 150077 zcmZsCWmp_bw{;RC5G*)@26uN4!QI{6-8~7egWCX;;O?%$88kSWdezJYT$c*@O7@Pl@SH$h$v( zFWpq7KEJ3OC))dS@!CpMLG;Co8X)q6$(ujdNY2taZZBToQvLnClu@NTeevSCKt^0t z-P`am`^^`F{@W(-!F6SuoaY8}pBNG1hoxm3x?i}RQ@HO73Yg}Cen`XDUn7Nli1-wN z;nk#2+XgLf8@W8mcJrc;mV;rxAH`z!JIPA$TFG$R_OgsiKW;neGwW}BH7tn&rwL296*6h&=b9sj~#@reFJoNJE@~JE# zAj<45XMP6Fk`S3j&?vadXvee6{zU%X0)MYO`_?^-ICvOFJ3;SR{KBG1!v1FPHn6Vv z3Wu<5ACAsIR0@<>CyFe5pb5k=BHqKK|8~|etmJ?^d%JqT{^Q9C_ubRU%^~RH3`@$% z=YXA{*Lw&*u9O3KFN9{svtdB8nWiUb;NRh9KBIx#d_JQx2EJM$*X$Au)*-DRtLl{t zA5<{cb)tUW#Hb_$NYqnEe_Y7eZ2q{FSXjlKv2jqa z`VGNz>A!r8Sh>Kw?&{1qd+TKVL1UOIURHM4+|lQjJ`D2P7M)fg&bVf_#%sl|ovSPP zDq-hrIZ+6nFPzZr!wI$6xuF%LbheOu=eOr1?eJ~KL)AM5iBg?1P{f@t5aPxM| z6lFwv|GIj!SL^1y-Pbp!>kC+)E8{C5A)S8_?u+o6-wfn{wn%?fdz5WdW7jv5CHygN z6j7wpn6C}5(s<+U1%e|#_$3k=`Qixea$A^`m$=KVG7rd5Pr_$FyU;M;ZC>u0Ux*DGT$20jL9{s%~K=%K&<<| zDyOjKI}Ag(NcVq}W)y%{q_8XMYmS1{LG3dBCe5`UC(W&YR%E>vu5%GZXQ}0lTcX-{ ziQJ%`n-|+EW^tJD3;^MdnP})BJAAFoKtkr$BF4E-J)LthG}$X+fU4~b932jPN7?`g zqLg;N@% zcgt#{I!2P&CqwcvnDc0I@#1b+K$fNMAB(s|>so4lT>a$fs|I%%BiA!)SJ71h1SJro zk6m3cSyV#W3J|s1C7x(z`rH3E8KQY}Ba@X>7Mfp0>mcaS4G=(L< z1qJ7w-Pm^WD{9@OQH!)6fwjFZEH~QnF<9P=u8CWqTAXE=?WN%7SD2%c3Y~dbvMk9J zC_Okn+>;v_EMoXQMM@ZD%FsHzaFToThOjZo>wBuDAAf)n(O^18$55PIq5r`v!?q)r zZDQ+!S<*fyg`$Z_taRUD)>`7u_~L`nds3+DXk(CV`QP=aGl~VVE&h}>vO0>!>xOf@ z?N~DKtPXshSH@yt>P0yBB`f3J{FE!V1fj+s`DXX@hTp34)r}x=eN)3^;ppcBGW27%%9;Tm zrh6y8Q%qYG*-iyHt<8~wAvcC*yM#O`dVvBNL?vkw!y=}lh-UG%eTf)bA2WjeTXjN| z%UC!+==AYe2rPIx)0_;TT4F2ank!#~@34ALi7OIK28)-i;o&_e%}qk#wCU zAlkyiCyoX-;L^=EYV4YycdA9GDq%33%Cm$Ap+u#&GY>)%c!O>5FKSZ9Jk*&Y;wqya z%B7QvwO`$`ncq5i57wu7eZ1cnMm^d;IMacyw3Mfr9cK8rurKawLZyc1!&epX^jI4gw;mc5r=J&JcfTA$#C zt6Af!q%e>|VDmOXZJ8a3F$nZ5;04qAswjHyNTmQr4KJMU!)NQ~!$@C}XZKTtlQ_O5 zP2fv`wXGS(&CYwa?3YxeE!y_+9Q_lGtVNJb67Lv{?qWV!NYR*rR$)+{z8tg?JKF4h zD@>!yyx!Z0qjh(%NzuL@z5Ij2jm-Xj!eck{qu$~QQR?^?I93L0EuKxBrY)Mi#jIcS zg6h(z;F~^&vG31)bXl(Z&aDFNl77YQ8iW7`r;9a3uxDz)U1?FB!z^3(sgjlv_u=%P z-Fs}lpWS1BW)+CfmU~`AWIg8k=~AO^XL>C8&4%>xe5`jJdKHSNqY|JD+#dbrlCK$) z9TL^}Ne;keXS9KL()cUSi70O0qy2fwP4K)2#WJ8d>Af4{Ucli@#dFLX;Fzh>vLf_~ z{iIVUNg|Y+XwQXmu4*#{mSbutigZ7GRo6t9l{};Fx}H7o!lALX1On^Z4@J&+hP+Q@ z(isgK;B=*Oh?%DTRwd98eqr&+949)5UwRvL10oaEH>uLwtpJAaEh(ipIn#|arl>k8 zQ1MVlqdx$yj{Rz&Go{tF z%c7l{{okTdx+8Q#+CRsycg~@e#D|QFW2KqSu2X75GKfi{I_)3VhfnIKIL{3h?|_ti zJehY}(NK@#(CREv-fQkeVSW-XotFo~w&Vf(&Tp?B%(uj4XH+8DDwB>O_B7@C zE1@UX6RgpjQ;LRB%MH-)r^r`k2ag= z5wc9oxyJx*z0977ad|4X+|1?k9r$GQK`|lkm&2hBf9Ly=@}&!;6XvDv%;g4g%hWSC zLLKj}z2!2f?#6wLx-o^w*vvry^}w>`S{Vyfr2`V@Wen%uScSiB>hMQg$J$H43Dvl( z%)Gte)T(tHFc5_I=(V$1(Sf(yBIOi|{B(s5jI#R^EyArwjwCGWrCWY7TRvU9X-pCq zpRk{L)la1ROoG00$;*+(Y$4SVe%Fqh>vvr^{{h+0&^KJe=gr~B>bOYE(LfjG6X>ApfrXW`s3#j~XGi$aC0h)i6MjpiBid+*`R@vmop!Y_ z4q854gr!(DF;W9#5O7{Cmc3g#~&?~@e?_85t5)yM-T4Wt6Q&yWg?ktxp6c1osZ8F z$<=n4Uu#l=HC!lTcjXk%VTVzf;=p=rRsVzZw(s#3u>k!*M?rxcsQ8S<4hL;nCUF(B zxl;h8j@sRCgIi3efa=WB^1Uptt37#Qk<6FN(=xFvR+m`7^EF4TxDu`Nx^v%nlDhEu z@vaoq$Q_QYT83uh=IB-?LY;;ZoxU(&hX6NQ6SLGAU+{FHys`7ivAbM_>2h7r+7XW@ z7Vq`-!{*_d{NDV~Adu-hYy4-ROh80MRl)LdY~;LA@1B{PjE7G#?119Fy{y^$jy5b` zYNI;ibIiZdR}beysblwG(ikvw;8v9wETE%=3tE_HiKaJ#XH!^d9au0S0Q zH4>q$qWD^0(h*svJs{8(5QTS`)Nuiv^x&`(VDiQxn0YhC zCT~xpDT8uFC!Dc5ik?y^nw2Oy$~m`^%+(M?U#%&aXcZd=mj>%q+@v ze$9Ou`12O-T z7DpWIXFZHps5f*xMx3EF6yY47u2A(xgy-5jvue|i-AU8sbj?xyM0AFud?a`al`M_@ zg-KU0Um!mq?70o}KkQzZ7cUL;&@_GsICj4))H}uYl@^9Gj*C2FD@F+pN%@Rz-Y2I2 zqIt7e3gzF>)Ev|w-R%z8B_{0KIXSGrWl*6L0B0rOHFiW@)e2bB6kP9i7knFGIC1qlVuA(O6WCgpb#=?+g3d!)aMHJ|w)@NOk* z;&_p_Re?}4Zd&0;lO@3EmQPC_Fj}4Umb;T3>_G^NY%{0tXt(p(;8EgOyiAVvo>tog~x3RN;B1Di#yTPp7<@~D+Q5MRvvdhyrP>__ zn3dV7pFSVF#qv5cep$#+iB`Kox ziC9ikGGR^0G7*yIjK109`V!bu(ig6?DKF$Mj{bIxH%|?+&wwz9l!VW>ZeJL?^fNPC z0K(wdZ~K&JODm6-o7gsKcj~N&A4p9TD?`rgD#YN0J-JwE$t^BETWMt?h1OlKqCbOb z_Vxt4cAgojFk*QFNTN+|%MqJBI()p)pl_ee&+#Ga80{QSC%d0D$hCz)X8hxq?HEcN zNk8} zz7WW9L;3b72QA~LJ6MEj>mWm8AL-adpRUZLft>5T6}D6ppCSe7ppg8e!s^oR-w?oo zqfgt^o&{It&WSj7-V}sQ*s3aqpUo{X+1Az~EXWaO*+II}Sd-ZGW;~b1cNx?8JevFd z<9qVScLjKd>&7lvTN=Uys?=;2i`s?qfc^yz#kIaoN=zymIW?qypNdVcIO9c&UI3qJ z$Rni5tviHUm8ooDmA*%qIkY+$Cpl$SMMp<$|ED^y`e%vDK<;w7!DFvUFK^trI9GpC z!Lex{$R-;2XGEtBC2w1*#GA4=dUlaF?wt{e3>ZQKtdv?~cPXyB@e#X9Pvdz_2E86U zD??o99RuZWV8u+@-QzeKhm0f;KAx=62#j6;zp^6HjJ^5}zv~b>Ss#PzS-wBk9Wi45 zwAZQifD*Cn2?IaldB;=aOblhbsU7_eaGB#k@8Bz3UV0(PZHQP_SeLi^?M=O`Zk z;hdT@cG}^PF^X>kY%wKiPcf?xw}Hp^(I~k=?V)xwmXMD{Bws(sSgIxyol5lal1F-G zMxOfZ?jjoa;J=#by~Kczc{yq@*o+5c9?n!E1bCoW}L*YX+GiJc<(q_+3U(tiBK zq{{~Y30ZK`5IVqzex8w%7D0U~9-}W);6yv+>xB2rKmz&!-4>;q8w#6==O`vFqPq@DP%v{(_L?ae+WeM&_xOA4 z>mCaGfvK7aB1La^UJMiAMF%K~z=0=8^SLWES65F}l~AxzdrfTn`>M^oM9&Da#mY(q zEF)O1v^?VPYM;|)jf_B-f*W!F%1Q&|VJE8G*dXwAN3EVe2A4Ib4b?1mg|19^#Idm0 z9R?^%Uf)+R6y&K^Ul;qeg|4rkH;k`X=R^AHaR3($&)ExJxHid{OuOXjTuaJ(aW<#dcb;o+=0NQ(=h= zB=^P`SBi<4Xs5@62SY|TXt1|n(W+$Yb*5n;{SQRWAS?|%k>8;^1iL}UOiKZ)EG@RS zO6@j?vJQjuN@)z74;l~;lxu)(KqV#z!{aGzX!*FEiAT~F5MN#L!!6eiwN zF}h+Is-Ee40NjzUwk<+_zc;=c0kFUkyh#hlwQyF&Q}#{0kGgwsP}ml9-0E#9Gsr|di5CmOoU4GPfdr|K#XMM`S8upc<=kxxr zIb{V27q)&MaE++~z-OytNCw!wr`+^0x$Z2_wa>NIwKo=dW%i5h8K;`cw0v1>XA{%60-1WwI&h4uPjmgQE@VIB5RRq4qUoN}Z2PZsyAtyYUj zz(}f+Rpqylw8R*&(WgXJ*>V|kD;})L*3<&IXj)Hmj`FUZOgEx=Vtx?!c&K|p z2i8bcsl1a{e-F`#cQhQc0uyci?#7I2>Y8}Kk(u!wWGi>#g#dImn>|mVJzSgpD209} zKe7bNbJjHupa(-#l}b)i5&S%20A(vg@mW@V22C!{Nj0MmOmP16@N! zgEB;FDMp)?SWZq7%I8lQp#n`c0jq)Ba$P5xv8p`D#e^|4C(I1$q?$az#e)y&OvLq^ z$!eM!QfkrJhgji>DSH+>pp)q4GP7N}j)++IsPuzT<;CGco4gixbh~!8&8x#fBq$PZ z-~2J!EHzTTCsqP!V8o-}Io&AB?_Z@J<<>R@vJG1H{4y$zs_5+l2Vm^FpjBbda-AMs zxL84in#WJpzO2bc%^Ib?=7N+vSsOg4)ndMZLg{i0A)C5GepO_|c_|_FOeOREHzkL( zz~4X_vRR#Ihi8AwpwvNOzJbHrO|evsWS61!5AaoSg{N0J&1cNQqiIicG>B5GOjUn( z9+tB=CV1)yQ7CAY);ysMMjKU4t3#J*M#GmPk2vVew7EaVg6Vd!C8adhtF>y`Hq^)E zRNwi_Bypy?ISD3&)ZPkuZlvh@%%k|GwQF}}$5mHb$a;$TmVkbXC3 zoQ~2e25|GGlFNDIx)v4!a)mEe%jt*q8;*RXayq?Hs@%yOsoL6J?UFqQc)4!x8eSlx zFTeP4$PJP>>f8#jam=wC zfK*&6%MP}^n-1MgR~U{r8$_wwJRj=I2Ibvj`A8?QRY!!@uU({uIex{W8gKZtOB8{Bx07@(=qII*9 z+U}HV7>f4$$B^$Rb8A>P{i{`ErXzBK-dhFw0p~`y`OKk{X$C)8?daNseY2ju&J~v2 zC!$A}er2zTaY)M@PxRTbY-Q~+Ypw+HX&D7Dr5WB+I}{o8(^=(6D}l6Lhs*7M6viWc zgTU68?_M+?|9-B+1zjZIfkG3H6MqCIweLV~eAK&%l@z%rl32XCauJR9(pHw7iw@Me zu^vev5TE0cAWk6WQ|!>&OH4jrV8EzogSUl#>u9e93`3$JAEwIvC_0?;bHU_gYWsy= zpeKyQ$2>aRIxUNmSK{fO1K<6wMc+ft$#d09NTl;hmbv`_aCOBSndHH1_mL|8wI4?T+%b&jtHin z0FC>ov|QFCI(WS&JoMdWHJ025PrL&xsEEgNvb=|p>JPIZV8@oMk>@j#^JsaLxJXKQ z>?oN#5CeCVbDBYC=v{R`eJ7@eJx^Oi)EIS>Qa0kU)a_OthfZS?W>AlHn5E<-k0qg8 z;`r8jr%E5+Zaagf1^KICfWqMymzbuBtu2w2?une6^bTTb)AcR$ZqkW(NYY-a`pA9I z9n$>s=8k?_btb>tYByvOVnoUsy+nh)Ru&IJ}NF*n1o}A17hMO?HRh37DO+{QXd@UZ$oV_G~{e97)l&$HEdF`6={8AWn zGoLQW1dE2vr8y1#>A@|~zxPtGTCA^uB@CtDcRBeJ?0|OJH-6F6qcq>Y@ULG7_3e-- zFNFf*wsCb~Gh$M+P8baPFH6^KkyJXql1CIZB;Yn>wFua*Wbh6hmNF+%_ zzxDKN9BhhuSz0nvPUTrs-Dlvdv@q}F5YRROdfW}77!#onE3P*q2tPd)*re8Lixy>oI%VNFWRzKMT{TDxlQTeDajJ^#cK57;s=kD!wCg@Q( zbhPD2O}AHUlg@k*2nMBQdX|%0W?j7?fgYD=_EQuH_8!pAu@sTfccz zjWVbXkrce`kC##qx@&87`zo=)E*h-gX?1~AX>1>d@FNU(w z<(1TEoT&-dW02s9g@`rEz*-9oG>C~3_TS>bLsp~PI=*gmlN#z#vSBdi#l}gTx$sOa zkWs@7#D{;D%cIB|!1((d)$lQxG4|+ntYCNM%3jhiy#V6+8LtQtQxvd{{8X22{*e&% zA-OA&X;P8cKKaoBmW!EN)mi~8mC6c}D&@GENIsr~e>SI|qs1KBr$w!Hk3>Z1v(sIsg} z^vu<OjjPp2h7e-$~SN}wqA{ICtt-^+IkFg7XiRGKa1{6o8`{VemgpR zFEP05$lC3bh`zyk_V6xf*M?RFPhEL9GA5iE+=|^veflXC za?KIwHEBy^mEEs#4HoSRdrPp-UkwP5LKgU|QIINrhaD7Jom8VUwvZkt6dzXE|2{wq z7OUk|Vv&+3g@dHF7S4jNHR8HY!55nA#WVpq8AmQ}>zO%7rW_iYZr(m{Zv62OrypOD zOH{LkXse9#GWU$5(W6ksW>yJFeLjmg+iCZ+vqtJ0P+m@E56*+n(mjgq4QtVb9NFXn z4%Fp!3ivDbN=ocm=rCvfsC7sLG3K02UX4Njv8);9D!_w{-fn>~s_65~35Ac>77jg^ zy5#&+T`Qf~7S`t;fwV4l0*#$s*d|by0JR}l7H=`InF-~&_)1e{mK`>^MH))4WKm+j zTUtghMWycJwO!@PSIA5sch)`mIN1Cn->ogmsc)}dt05tTID2Q(L!%!c_f-lC^$3n? z&6#3V*us0iThC>#Hh-}Fd7?m|l;rK;Ktdmx5mCyMvym!U>B&grukA{1RF~!;&&3~8 z0E}7EhGlC8XyILC?X9x`rTiJvtXK*Z%3R8rVs*g1J)sY&?O@aQnXo{Ks2_&(VTcfo ztv$*(q#=f}pb~z*BC0HUueBQcD7jVeo)dzU^}rQ~yl+>;f&xx(|~m&k|XdK!g6V)|{# zi%E{YOJR>aqXaGi$P;<9ODGr4$mf>@jaJn8{^lZDZ5jJY?{fSp5z1Wt%=fJ(8Jt^`i1rJHWUX7Z>ZR z{~q-HbpfaLK={_>rC%$4Fk)*#U%NvK2AFM+_lVmTg+jmlAIYUjZ*S7X7^}- zAS_?|B765hn4#ySw0U7+Z#US;q#Oy@Od7Q6?8c@11^wP#W_0Z4B#E2qGqqVVnOU>| zv}_3;v9i4pjB~BGNkdE8QzDy_(6Fq0v5eW`KqqRnJlX zOuQU#5T6f;{eXNHEo~iYcrSBLQQ|V`gw>=JA)OO?WcIUps@$?V0b*Fvlpp5K^C8~D zHv08>k%-Wc!88$3<~<$h=&C{rn?Q+r79d)KDO)#IKs9zt-HqbiJc}9paCURn^LH96 zmrGHq7ZYw78F>YLES>bP&7aAvab?GM7*=r~zS^B(B>U<(kSC%h(AogUpGC?+|B)FA z51J4R#>j+(j_r4!ppSiggJ38~9KLYVEx$bq{bUlr<~Pr@J=Qd@vKB>7O&3`ngUM~b zGHi8F=G=1FJnGV{*c>Jza>)x6ykb!Fm{F^>5D3piueE&|^lz{Ik~-v_sAeE8zQtzO z?MSb?%&Tun?x(Ps3<~Pc17?kUDp9$9nKU%Cr(o;P>Eh9!e8jRDk0{U|L>>6K1VI>` zm?@B7SHRjv(ei>N2oftsP_t8I=@J>Clms%qlwI*Y1wK5Dx7{w28kx>bHI(Z$WLZSd zRokqpuJ{~z7#g;NGsCE(QU$v=&>zEAmpt&i9zEVxRh0EOVv+5@y5C(t#kQ116(dF! zAJ{V`LFJCVrubisB0Rv4+isR0gSIO!ac11DUH);sG4zaQ{e_I9^o~KrJ z*DjAr>pcffzoRCDhqz(Yw~Kq$b(j%*Bi~g5_U5bbmJ63gkJ7S-EfC19UG!@7>iB%T zak<4Q7dNDV^&gIozvul3=Jw)D&o=l@CxP>+pKWzf=ZvXvW{KCACK#g9-r$$+JbWHHEZFgE`2);elRL7b z`?IE?P|~abLot?#m3}G>shk6e9e24^V8%?%{EINueJRg&ERV=lcvaqijOYDxOErfC zR;oX_m6Ax`!F5M}?U4t$2c!0(VtMKxQlS^3^tzH&#H1pHlSa|x4vOcx){o}~pZR*B z5YhJsdy64qD%)je4{x5%?;?^rpe6!io4=~@UM?ZG>^`_PJG*nUc?t+`_;TOUPHr6h z?6MPP(I}V>TEx-!nX>kk6tJ;FvA8n=jj4`&FLXD}Rg;dh&At5XyUlnTg1&ky!1DZP zlamRjuJW%9cD0L&m=3%cCmC%sQTC#3I^WJVsZ%i6L zI^OPJ8JJ49e<20yz5X#6y*d>ONz3U&g4}ywTk*I)hT=IxQs!MJ&A=)%bKjsR{mW}O zUulpk&_;!5*w}oTIgVSB8BPMfW#|nf^8QhI%9{Jan}u#3x}WVW%iOl*A1BOfjqP9) zIUN|BKGQ?8dq3xQf3UG;$>8Nc`2L)m@M%57z^eFxb@x*1*Y9FL1g}J~wm(rQgfe(< zE7@7g5Rc{~Gq1%&BJ8CdKkqk*OINex3YZld4LVp|_cX$*9xA>OjMJG z>`6V7EbnG#%6@JNM8RJUS5HF%&C0mD;x30@{Ls^+kJM=~w=75?B34v4WvAQA$iLd1 zI6W@O&v&Qr+WhEyEl)LW+K&y56^2vyxI}!9Ctp{%+*0I4# zPNM#5MPj$ZLt7a%yBMw*Xc-wfUr#1@^=DS|%j(?stoq#U^&cupQ*!g8faqclMa|N^ z7j0s8L6V6ha#Ct9?^o^#yZkOcbRrU(s4$l=54zkzr|}JMF`U{3lTg=a*e{Z&TN;BX zPK0jBLHohlQ*Jdxj5K5|cxI%{Y3I3k@WB<}TJy=v@h;v(F<|HL*#oxX{iTfe{DkRt zZNSXTO<$OK*we$HK0kXJXEnyDVXK- z^}mTtvB!f5xyrRjvL#HH}fXO z?mBMH;XfGty!SJbK)~8;R|KY6AQ*jBg|ut8fJK_xqb>}wvlpJMtkxsjgCN;V+J(ru zVWcG(xpDG9+fn3tNg9VoFJO$wONIF;b#_I}u>UXOd|;jIIcB&K9(63y`Aeh!Osoh| z+=M~Rs@VR)K@HS?0CU?5hwHrPI0_XR`2gh~NGN$8V6oilaYxWrmHYksPwnjoX5__R zi4MO7m=ym(>XZILmZRzLD&#iO;Wsz3GkYM^{}2o<@6+yg&s-)&A#u8kYIUDhy)G_o z{sHaQopKLbEJ3&Pp$2ktBj}(1hm)lJ0t)=wZQd=(kN4*70_I9R1n({A~`9r~0*Q$aZ4}!E7 zN(61~>|*`Zbuab);W@FAZVwq8R^vfN3rEnpa3;M*Wi74n`GcdSzbC|h`{Y}B_%l93 zLy~Ab7VZ!OU0nj)=mNL0f9Czqt9k#ZpW`7v#AVi(wzp@*GxBG{z`&3c{?FTHZVdLK zi#&`Wwe9X&Gq<09?&<02^z{ArtNl@WZqy8tY!C)4MMBI6_E9JV1$)w4?jLBDOa=kR zJ&tt|CeKghIkOmXy_Wr^`@>?x4Fb;mM+>6{JkCQ#(ZQ_Ys2~YpMLZJ>#l!Gv|A23z z$XBd*ifP0LT?tRCgCP*pK@42Qo5@ZTx8K#etUAP)Bw@Ye@IFbz_@6 zr0*BiNsmyTyMJ8Kgd?XBfz{LglK1BjCr3JN;e>^f!^5;OYdYg}5KD1p`Uwui!a%}%%f*~vh4_wZzxO&e$t}T}$l%1tE zI0f5#oIiYOVl}C0v7ue*U(}IXP*#;l!rs4bMmq5OD}}SF_jy;DvNnnyYEgArDfMqit% z39F5AiSlKm&kYmNgM?BO2}$Xm-Ppbh`D2Xz{#To_{C8QOPLL4xEH8gQf9~GL5U|9k zMH>w)0S|^NG1lLMPH|aw*0hB4X4n$X$4Mt{UP2a@rY88+o~}Ox2@ufgcf<<8bY*z& zvETMXzAzhH-MHgWq3zQxHwMR&Y9+cH`CLSE%REgnm%gCd4%Rr#YJ=<+Ef1hj(x~=5 zcd4{Ob){B%6tHu z@H}C?UgkR7Q}!fndt{gnV(O$v=fJfSxD4m6+pX}@ZZ8XoD)iL-6Gu<;z3~tH7RW;E zKuo@rjL2v;;#Ze0Vn_V0!-4#TW{vxt?3HF4oUUdrqikJnYF`^xi)KWyB;%N-Pw$t1gQWN|y%bZg!lD4QwBNvhplRJXbb0bWg6zc;SMt-hE{ z%jk0E34izj=%uhI&Dwgl6cKhpB3!-wVqy25_Mlptu*HVnp!ZuisrmMR?l7UmC^40F z?8TW1cOYQ!wO7E2yqme&&I!wySV&q$f|wmH+jR;0f-(j9QuXETg#i&{2N~8$uYVUj z1{LogpYVQ8Xj)jZ#_VPg<}xkioKh})-#GsCMQPh%{ZkU+JB`Mg7LEy)F&^=G&(MC| z-W;Xvn%~(I3n~Zw&p0;dMYpx`R7P{HjE&1Ri$e}}v*ak~$VaArpENvh z<6dx|=#T!+V_@&0;LmEinqG~3v$SA31#pF$3Es`fwLhGZ-oQg3S=`&~j(*1$hTeBF zfdQ_#5crxlBRkO>i{A-(OKCX`vdx)X>Imm-u-TaqqD|j85s?^$VvM z;6T3f@O!&cAO2JCeQ0%M9Q=`eXkR#N4R3XbCD4m+Be#7(bc*+Es7 zz#+5-Y{IY+3m!{jG`EFuN)Hr1bNI=J) zwsjT$TP=Suv+%J2B;_*bo+57aUaC*y|JO=&F@F&m0 zz0ybwrBGrtzV|rfuk@Hqq?)UB)B_XeSm0t9{0ZI$mnz`#Umt2K81#ql`~jj6Bc}dV zeUkyIHl7IbC3^?iqt67KuSB`~lP zg$QC))f^i`caX%4g0xwUVTNY>JPGiw$WOBfa>;;1AR1{I7yISQ(f<8Sf;p^MTE zlLVFz4<2Zjd|xk;CDBHq;sy2DX_%>xN2saThZZBo0YmFB68%DerPJA%y3ewXKUXzLNBNY>rnGeqYm`u6QTf@3@iYPYURK z7y~dXYL!YJQWk8#+us{D2I@<1T63I}Jct+?odVhfBhB+^lJGTq<61x^jYUa9mLG)j zVAcZ75j261A169);|`ThstcH7s`cRkArWSf*?G;r+MSafNRiR+OLSoqB|An4baJM0 zMP9}YJA($5oTFLcDsAIi_COTyscS@h}E ze50H=6&7o&Pkp@;T@a8{msm~^vnq*k-g;8hiUE`MPQ}ha)^Y(W|N6 zT$Nn@Mh~s}t|QI+@JAPXAI7kticM+qi92$Q`!G(^bKED}ajQA}!9d z(f`Cr4I9&rto%ZW%<`CCb2D$KL4h3^e3Vk2zv@raa-MsQyssLXyzRE-JsW9;J6A!+ zH5K(U4qFv^tKX@c)9_ZjW4pR8xXYp!UGguec{G`->^L(?>Hh?+AHzZoo}U)%xi=1{ zw~Nis1r9c2xDp(#6mr3J#NetgR1+P8Q~QWh=08c37KaCLLX)+p@Oft>mRl|S&(?i2 z!<5YSH`(N4M$O#xUXR6bDoQu59q=#cQP?cp5m=04lh?7^EC$Bo%8A?+-n!h_exylB zKl2c*Wl6CqLNOEf#L`>I8JY622r+Uc2<}aeZvpcVs6qh3S!$}f3!U8H#~kywz=&Lz z$9JPX+X0PI3YI;6YZvx96YCZ}>K15bhk#&d8||J0o+U_B$T>jB1|_d9lTH^rcx>8+ zg2-gQ(f~wt&_Pi|G8JM?vogF7!MS>gvOAr0xERW4)R76KcWeH|2DZZsXY-x0RwUpE zArbORO3L|^uQ02IB)}6}(57=g89r*j4+dIx_1durk3^Xg#*qX_+v@h}bv=DJf$p%; zHih=^5f-yn))308OR&WrAzgq1->MC4$2&5c!+THaL>v*tin4p?02SW;sO4zpY}_s^ z98R4;r7W>sE=%^JIM=D_03kbEjd)%M#H)w?_UCK#jQP~@g&G=Gw!4p{<4k$nf+=Ja zrf?i)^MQ&kGmAwk`AlDOF$b6qmmhQVNG^agfV`#hd(EL^Ev<=H#L@W~D=>ZNbWNu( z`s0Il_j_S$z|WNV7;=H~kXfbh5CbqA0aE+Mxi5dx&e<8iE3eIQF8DwbJBynbCRL7B+m z{5?zDyI4N~2m?rkd7!f}v;3f{6q#1UR$;hTty*%VjBZ9m-IQJ6Qfu%-1-ExZcr*se zXU~98bO$9NGX5xG?@rizAli1r#20Zz>-MV@J}5PZSkl9=g%vle-AxuU zHs%gxU`DVxIy3kg`T)MTjXE1RV_U@?DNb!DaVLoum8ZV68ks}6Im&7BdPg#Bzj8a6 z>q&nKC{Z*u-rBFN=P-GP0bAb?kdF3g&QDK2V{ph~_mbLt%^lGp5~b&!+$zjGuP>?= zNf}D8JlKG`V(`hlY!|pskBzszDc+&Hpj#;($**Uqat9`}vTP89x6e5CM4bSG5Ksx(4OuHzn`D2%EVM!y(PPD4Zr(% zIZ9aRm&HNJ#Z{|&)IO#xRloA>*l4UW5U{XRAwMKR&^Z5w9W@-5tl<|Qx6DpcVJ8;dsl9G4?f8y~Df{T((r-kg zgxQOoj>LWzbye}lV|97V zF90{_Ex=jso^|{STv-{*_IDLzKLPWf-ADR09e1wG!hV9{YG#q@UR1sW)^sbNlVUcc z&aF?(orkK-T~|1hc&3Bu-QyXcsD@!o+UkOyuJkR3XBj>^z))AHdg^|on-xOZ^D^(| zfa5pvCdXIXtB`K|_gBr~c0^kx4+sw+17jq^3nnr0i4SpH7OC-`HXX9J-Emsp#unH7 zlzf>!BrGmdR4KZ_ANheE9ncug{#Zn(fR7hZ9f%sUz-UqrKcKu9G_XQ-opB5Kic`g$ z95$mku40bFm&w5_9HsKg9*M!BpxV;$V7Q8X601-;HIl-+pFGxn(^AO`g8cL{B9mlN zjY#&#!9v+MAvGA~;xQbN+|M1)Ff1P+pn)d~ih$M*@{xSassK9ffs@Bblan-JCN^dk?D`hn33K#N2RV9fm&4xb;v{}VtJ)ta7&g&~r zQ8r&}O1fz(X0v~?$l)iC;FSNkteKvuC6ego2uvNT?Tm_<gM`B;%NQv%!vKyD$4}dn?Iu>v-MFq9@_5ui2knOJZ#2x_v`> z!3{LnAd;6T@9K@#xGH-(DarV>!G!Zz>bjOtvk{*1oNPg7am7;(l$!8FQppDm%>{zR*Am>39Kj^vo*xbJTt&u)$H z67u6+{3n-U^wbm^{ zM1-fv=siN>k$(;^I zs!eXI$_5>t0@xaSdFH+pr*fq?SY@A3$cvav)3{}_3>V)6SoTvi1gvSbhjSL_U62Ih z8V9@phIBspF4Pnpv-klZ^(Tp94)X_fB>@}wSJi&;=Xyx=gr4}}S*Sfo-uOV$$`#__ z>fe57$czX6X`u8p50cI12jQG2a=6o5$&m^^56ScLX~ir1dAgO!R?k#ym$@ds3k%tm z2-OLeCcbw>&cB!wb=*KLyeM=OQ$a_;IAZrEJ%li?LO&p*t81eyu^*QRzZLsF()&VD zh@G{}E_K@vrB`!7ZaR9GlW&(bBSlKCCFgKhy20tyle@ZRd!XlVK(dqaR|o&0_NQK~ z@H;sgs-f6*GPpOH$2NfraO-w@?^@1$!iqPXw?LiwO@W_1dHInqZhpk~7(n{QclKl$ z?GVF|bZra{i62xgvqz(pJk+r(>9c@AcT#xwvWEm62+%muRE)092kFH*#@|o|j2| zF7u~ul5H`E+Kyu|#iu&)trp*di{g}dp$L-IK`n8m?bJhD*XL9Tid@~HN!b|cm4c#` zdaoqdPbhyVRPkqo5CC(^((0ddRH#k69G8w(9)v8H8kCBRqDf=)uuSy15Ajz=zJ^&E z#IvadW|-H-DNYsp)fyrRK7L|O`glvT?G}|NhN^s!;jk!ZaiYx$STI`sf*~SMDgeNNYlhx9_U4vimL1Lu9&WUHtRh&hl`RjXJZ^8NfJ_{ zvZ6~-`T^7J`iUB#EI`l{DT#L&Pph8`T!-Zemgq|$+@=a77JpsZx4cdEv$lDv)>A=; z056t2zIk%b$#LC=%Pl#R?9%#jIN-Btr{q7O&R=`5mnLdlx5V9t=>(ER8ZWcV0qd1# z>bNErHbw2`r~>z#brhDIFv*{0xP?O$Cz|}o>#6Qb*8jRUxcN{| zJDK{jPp6}NN-8g+v`S$Tn{{of<5+g_L9O#xBO(d1X6jkdXK#G>juI-FXV{AnY0MSo z4f!Gpt1)-0>VLKfvbVGAKSe~dw@c$j9ma)ZS4nudslzQMkDOU1L6?G;tDju4+HEp# zWDthQ{w!hPvTOl~gWNtieP0?QRn&CFDSR6GS8$~``8#4Pv{3P7y6i5WmOQy*wowcA z5Qdsn^yxT(#sY1-wz#Msj!y@HQsU{djBu#Pzt*Uyb2$!p6tB(KRKWa$Yw5?U@+bdO z6#q&4WK)M3W(?eVz6DudS3;%r4;lOwfhK(08X)A#l@J)1a=&yebu zmlsU@RmCuagF6Knu4hZ-Q^laG#b*dViu$iv0Sb&xBq$v-zW@BB#n6#VL+3CCrVXFq z1&LiW(PCU^p+9zS$qB1mWGvOvS{OwT`dI6n%JNBp??h=8J+pa!s-3Hpv3wlWLQhzA zc2;>!Qg62N*xFGw#p1u>BgOX zz*E#up)Q5mA4VGeQpL%Mi$A+fV3s{&Saj*>#u&`~3~S(_-ssmyrrum_UU%XaibS`tvKJocS!OgjBJp)7flBpwd;F74l0}(avd-9)rgznv4O)mx>>qs zdFp(wKcb|!MAKr6(Dzd6JV-LqAoFD(S}E-pEdeiYLb_8UBTrh{efMA{EcR)dYO8oAr0!qdDIKp|V29ip zuYBZ_dyB>R7U@MAkX`&tV9jAU$3-xK8s((22olv1>X${amqwW*hd2MA^+}AlCRUV- z7Ov-Kj>Gf&{Na|9xtsh~7jWe-BxRVx^9FB7{|!EYrS{vn39J&mJW8p5m}0S7+pJvOy>G8a zZ!XWX*<}fMy|?#DLr;hKkB9j0E_hqc!m0Ks2BS499obXlps>*&*F+!Zn8}S}MWseB zzwVnwW$$u;KYUcP|HW3 zQbwU^Erb!5hr{PJZQc;34qRNlZ6{-vI*&TxB&|=AKYJ`p&_;h-`~C@LN+_aHNxpcC zMPzFwg__;*#XAr>V>_>YXY%r8-|e+p*54n3r!dKeq!?iIOST=fH} z*{usL$HY4fGH|du;kY_HSrW50x{!m>{qw}SyH$?#)o5xPkk^-5Z-y5z#HD|?!+%s2 z(Ec)gd{BQT3H67XOC{hBXKF#itXh6WMG}EV=!&cScePetuBCk}#GBz=4;M^hmH`Uq zn58b8X*wr?C%(*izT_0tZ_&#A;T(4z40xp5IC`mVCo8oYz*H18)`9XSAVhJsAmGHX zH72xqrnF~5yz9L}*L;{aq_b>kQmwB{-TR*5lH?Pj@i`BeC%#-!S2XqkfEC5DC^pe6 zryH_4U`~m-pV-@0pYz&@qI#@pRq6T@b2>dGS2mwgYd^RK6CM66oIToZ)zvar%+r-u zGv$ksJocOhRca>t0RSgvtYq!qKPd-MzUF4pKd?97K$=s%$W+=59Z88qk{OFCdis(n z%VbttM~)pRx^^h_+u!*d@;+?pKqR<2T%;s0Gbvh@cW&172G5Y6%N+qQbyUeaC;A;8 z^3?jUMwq9Z>guX0rxdF8%CYVn@L-j?${Z9eM$jrp6i4%REranyo*ch9E4Lno%-E?^ zYYyJY&`D8N($&nGwzP%`%w8;GvS}_a*rmrUyR$f5T(8m@Z1j6wf8{lM=K%~d_JTp_#aI*SZen~7?_1otgWg> zhLQ%v12;0g^QzJYk^=K!bquqdMJA@17KFOCua>ml%BcPL| zvJSsimj_4x0L@Tbt|flX5@Gp@mf|*aZU~_i>6nVIZu~U(uOPUJaWD{S5ytdP72aisOC&1HJ!@C z(5>6T>djr{0Hj(IQX5fV`!QTdP@&~xD5v(z>jiLG_#M0494oqpAxAXN9SCrZ;?8(s zIFLiLZOiB#dvj97#QejWWUW7N>+xIDRu`4@$!nkMCrj?=4QN>`%UL%|p)b&+(0Xwd zcY6H*lhe@GSYz}RPf<~!TiF#J7_;qqFp*32MJbIG?Qd}YiOs<-c+sn{rJKNf8+Vw1Q=oZDRmE{x-OD3(%G9k|I6AHvbL!;6s|I3? zS$FKqb)`4IgET+6fa^toky}SNL{U)^S-D})Okum0Nq9ADyqJCFT$?p1ukJ=9zp61v zGR2}PzN_oPvazY+qCXUL8weFnE9*IYiSWe!QDdoUv7RtNEZ5pZnVfUl1O_zNxqXaF z?gU{dTCN+KQ%Zt_7ZfH6$kLZZh+!I zCK5)n5|ay&Sp-|;=x=6|3I#4R%v9G9S7R*>jld`t^Z_qVK1^J3Fk|YD1>-3}`ulW| zX-h3-r_>T@Cst3Q)WBf7F#QtDm^Pqt*GZ|cnpl-?2p$h!ps?DFIHvO~J5B*Vmz!rR zU-9|F^Y|CP*pQXgFr}z0ZT+~5W=anFM=4xaxqnuUPqQns>r^k=T`}hETI!eIq@>6Jn|8(lnnke2cSu zg>ohRE7H5b{iP1cUO$-T%9&}~@dFf&{`iyH(x*9}lOYLEsY zX@J7NcRt3i$H1iY@grK6q7D6W@0As)nG$*%Rn_Kq!uNf|_+zW#WRdzpJ?^C4f5FAa z)`xH-x{}Au0?Tv--abGv1|t!0X7q--$|$>=Ae329{tsLnMtpzZI?~Zo)%OKyqx=7YloLTP z|3C53{~yAg|F539ua*8p!4grk61#E`jPKg@&fw{?>Wyb8T&gO?zSv)gv&RI&39G{%X-+&8r$jR6#;s4 zGF-(_)=$A5=tnRb@{U(JMk=5Kdwq}Yn6~49U4s?us1Bm#+pShP|HV?*?Ruz8tok-t zEKmDTz4xZ3F6PIT7x!B*Ia^+6!c^e`;IyGz0*v|%5v~dOEl>PM1iH@8FjDw$U*+n) zz%*l3>Gh6EF7tw`224H#NppCld2o6>TzCwdIW>7fpH6i;K@99Fnf)q?wX*!K&q{WSjH~k7|z+ z6G~at(l0wd#+FS}rE!I{q*SJ@Aci?Eb$Lvj2U(LN5R9 zJ%v>4!Hdsl4~MMfQ*Ky4z}PPxSf5|Rg`XD}vhP)W!0(pK{Cp>*jo0UUo-pJ+&%3Ti zBE3Foj;qvHt!!3PZk4|mOC3ILHW3)x=Xx6HFZV2*Xou;_&aJjYFghXzt1F**O77j~&nR5fg7;R}=B#K=Qp-LuXayd>Ji5 zBgS6M&flX|b-q6ch+Y^<$dUrw^;?Zx_G|T_!~&i(Sb5?KZ7>42sb@>Wy#{b2EXz|% z&4i0;>WV3J(QWThDG|HP7*)urjuTeTTb8~r?&N%Tx?gdk;)*4Auum;+vye|%oT$-A z;@clT=m{GPR(N1H4e-K;4`UMIi^dja9)+A%X*Wg3nU39^E|=F+qT}N$hBZf3yc1KM zfdYPrs4Ci!*yVMZ!IoEW`!Q&_De0Dw+qG^mT4x}obc17$WqHICR9YvL962Ims*j^v ziMZGpSn%Ksw|oasIc!F=vHR`3>ni+ejajT(s;S3&=Zsk2_eG+Vi!qR^9t_X!LpHG78e;9$WtJ4VG|IOU8-e5fuF>U~>v9|WKRrF^-xYXN zXJ#WWHGeeNVP}6Ouu1lgu{S45rG2z@N|KKdnj!l{FR<77TD)BMik6h8kW zQYAmlKn8dsbi&x{t(d}h=AjGtJXiR6A2z~ZMgIG`SGza+D|>O8K-^Z0fr^m3(MKMg zX*x;5;;zuhi{ZA?@&f91&bt2_rm-`mBwIkJO(xJJB6U})y@Op)!5keA4B{&pa zY{5Yay~JOG=!lEkVLCkH)*C}?h1WF2%mTQu$?FJtx+eg*_< zN5@8%JJRCp#_DO>t*6#|m#{m_>*e#KrYMDmWfgAa^12RuDwG7WKem&|Sqb&VF5om) z=t>06l6X3;{7rw=GrJxx<@@-pUc3y~zPHJe=X9#U4MFu5+w349Cm zFNeg6kRfLezp=2qGeqxFaUCFm(COq!H*fyY=;yox;>Z|@`21h8oA<)lFP|(&z#3OM z!2jnE4hywMlJ>uNh8k3}sqXOQKrayyA*$S_JqvqA+v5JxbZp7Q0c7(nDxQlNKhm9e z1|<{s)s*pd(%*wLTbI`i9@HG%L0{lBYj#o|ktuWhFh!mxgjU?{h4kI7zIRAx!Y4!* zJ59OE#YEGNu#~tDTYep#kVwew+d(MA7xE?m7zC18Ax}}SSPJ`hXH>@Hv!J>wP28x8`ud?C`#P_BYwN z+5J378Xx-}JAbMCFwrftolJ)Cz(e|*s)dw7DZg(dHdvu!gSsY%JJJySOVy(@9O2gv zmr2sIop%&$FYg&TZZr7{>rA&do}lz$C|2G+(|OZE-}B7cw_K%I!eYpzO zr9)hNJor`wHJFel2X@re}NBWGMRJ-(dttCzJd`|^~XtEh~Wy0zFk(ei!D|X;00TNgj z?c1t*)@(LKF!reRmMU-tjAIx!N9(aCJ3g*z+RqzX72%6Jgh{C{JASt${a<{6B6@&X z2Af`&_bZ$ZbX3f<=A9XwdP(vNq}$pqc+bCfBeBcZ>w6Dh@fT(A)WZmXyD1H-H7A;s zz(_eAh*+2g@AU7tj{M9UT?DG_K=kf>8KblCz2G0x z27Wk`VfLKXwwYRoSM>v}|)1Mw*3;cU> zey8St&tI|kwUiPy=R}B7q4d>r@p@2^MV>Gp;4*Qnz;z*#X071qR@ErO54tgyLUN!O zo%^uPk7tDdI!3VIQVkFHs57vRu`l8=Wpr)p@b8tf15 zFl-qIG7Rn>Qc^|#tb3AVOl<_#g>+b=^Wo4iRdkUqqJeiCs`2#~;kTO=Z zj&Q{F=?g||JjIYtWPFx57T34F0SZ$mp-S#MN=EXm2Rx5fYqX&6_P219!5sqXfee?k z<-ze(=0Ug>)bzP>(L0#%WnlW#q_Bde(KiaSNTk|9a9hGl#qULO4|_=O5EIBd6jVeh z1IhI%1CFvtjs7Oh*E*^giw0oRXG17AI`BH=KY$-G~y0$79))r+>RXttGJrxl^VV*s8&H*Lp zNk)1(lEUlK{)&4!I&Q(ZrWU$R*5bZb^Ytb-}`nD z;Bz~t<-NPR@bIj5?>5}dRi)jSzg2-!Ma^>SlYhB(jp}+{8#J7q{lXibHx{-cqmM&H z`ib-OA(01q_u+okhevs0Nolw#g15Cc3Z9Bq0y7NumHFe&u$^q-{X3f}usR9dC)q9N zJl}MD6y)*3>|AP;JxdbH2V-}6FXXmUcBQ*Y* z#3v^kZDcT!hjiWbDDZmG7QPF5w^1|`up8hPc>AHUpV@RI1B4W3!}D2JYb>JbU~A-_ zg+V3LHkln>o}7*WiQe+EbzNj+-7;XPMi;bTj!Tv)I{6bNdZByhdTPRSeviH?cWO?} zX4OPI({u292W0;G<@7%K?d|Wi8{*|1Z@$Xb8?W91Wq<7i4mMzj8qRf%c zWbX|@5})-4iabgeE_%$VBsVy9oTW+==YTxze5T6kg5}-5QKUsED%|53BFvR=Isv|k zJM5TLw=wdBqq4Zl7T)<11Y~|*aH|Ul!deP|Nyfrsg<4 zROq=9l)paBdRe1Hwa7r$r2W%G^)uoQcI=;G@y3c$;HH`8f30GO`nQtY5P-#(R)0;H z527b2+--ckIRl8=+tarPz_GRj@q;!|%wX02J84in*h83wK@~*ndfdwv2#xoK8U(c!GkSHnmly#6((4xPUhzADO0Jed!0Wz%|cIguPZcQA)&1sUgS`tZ{Y&Aw8}_ndlfQEa5R7Ze zbttrFJEAeEV6G6-c>39t)ZsX#{eA?+|2)BXf_IB%5zP}kVHkLU_ygiFcl!v@tZEC% zbZoo#PZz#j1^7abXIi08o1B6E+^B}YtkV>4VW)$vs{Unha%M{No&UVe)0L7iiN6_i zNC8NGu?`r_k9ZaYHXWby<*2#KuhiSf#Q4V!7}cVF{{&YvDCcWImeXoqG{ko5kTL$) zv(9+^az~Fo=8-Ts@Y<*&CL?p_Wl5VKp;4blS0|B%Y#rY`ZaTbQy*4Od)>@n-YnwPjX`tIoB1~s5Y8@>3ivNq|Kh|k+9claJj$X_2Zez-71eORzX@uH*Cm->ifxJKb-4ct)t0P zq`PWWE=YcVC3}4YYP5Knfzzy58vwq!T7TQF z-@%suIrt~va_SJ#b>jsZ{GWUz#>;mhHM<>eU%;KFbAERHeX-e!vC0{R*8z3w*t_Lx z{sn8Z6*akP3muR;QUg*gJf-dK8Uv29tT!D6YDQ07C7V{(M_&8+elM4ZL>%=6SzY2b zqWOOl0-}(7%5hUSG@O#9@bMM;Jx&1PP5c@3)vh{HSO?-!Kil>Me+a{ul+ zq-e--;CLHn8H%+$$w-PN5z0cRaN2>SQGs>)>N25#;>3=EJ_b`?nseyOmp%WEd|fLT zNd}{xd(0sYlM~wVDcW#Uf)Stl?*3$UflU(wr`?5@+V@kqE;u#n4>oObxNPA2X>xnx zl$p%^6j^WnT4PH;6_pqK3~)Q!4KeB->xjnjH&KyjbujB^Xl1wl`$I|akmyY3hnzzM z0$|kLRuon+zX$BhZT@pWhT)>WJiHE^4oW&k)RW9xwRv5Z&h0Ub=-6wykmRNAK~{VT#! zlb?qu#Y*b|_li$H@u|kqxUA54l_Xk@@BqF^&8sdEMj%T@`A%KzQy0&j{A9jbei&VU1A9wFSc?oym|!a^fV?nl<1-`24;EjEMRaQ z*#_RERJLuT7Pu!g8LM&xKYoOrO`tu9$uBQqfUQRu2f8# zZznL`4nFFnS@&8tnl+b6=hF5?#-9y8#MEpa9oKADFr07JEGt#EoG`bnxVEciGf8BfSKa&&Z#l8fheR@;_@bScfKaJx{-2- zgD;vfCp9|+sj9Lo4Y*2ZJMYMDgC1q`cD@C2pRP}x^>y2?u0`|t63v$6_un)sTWysE zCUf6t6a8oI_~P{Y*Q(2q_jshh&*AOx0dPi7jwK# z2C%SLNh=D7Hcys5rlTiW;JA<^DXA8ry4A(qq3~r|M^n*@2`5?FD`xA|SLe(rQnYR5 zrnA)yqOS-p=z#~Cmz_RrW z1Au*da=)B!bARRfM8N;zJ{w;Hn3U=Dn%R!bjsHhJ!|%9UP)j&c)~ma3e8Ff-S)?=8 z1%hp#F9Jx|Z((~Vk@mTq*!Ot`B-yVUDD`%=`UC;<4QST-pE=fd=ClmA<`FK<&jNE7 zvD(Q)F^8}!K;VErj7-LtRd%QKI^Z z#|ij|zF_3Wq_y(K?*_0hT{kkR=cJi^ z8YX6bPLZ*jDKT#_W@)Td-|w>=&Oj_#S&+SmwvFI#-DCduyYg}U`@4WieW+cQ^*{Q| z-196-;(zfG`g9bqLLO2TF)Q}hn<$^SR0s)Ru)-W_@}nD8vCp2HgW3%(pDuFFvfo6D zhf?MfFao6(Gos&dW#RxpgtUp3+8~%jc_SDV1AR}{e-4Iw>@Q@wJj%6Vb=|Sa@f*wc zep=%=1U{p_>{Ph5KNqTg%_+T3=_K7i1(^T1J*$4XxldrXlZHDDytQRXJH%zPypnj# ztk$fb4%axboige_BUV(`gH6u09Xk6;v2uv^oGJ!xI9ryU$m+16hYXzX;B1rn(g6%T zsAgeHF}E2l_K#Lip4<^)41*Fo9iOSZR^F%uJiGg05+*Dz15xoy4M0pm-XZ%WP)x6N z7iJ;TPwvVw)a=|}J6GQoFGNG4P^8SUuTIwG$RglB<;tUx==-M@?%R@wZzVy{J)~gL zHxQ+ewV0C1%0OKk$$QIEww65o=r1hIsd6~&p0GaAGUZtxFc$cg+yC#@+{dfz5;m7I zVznpjNqz@XfpiwD!_sBmL|{Vbdoqu%ne1rnx3y^rhw8Ml1M?ZRWSM9b%uHIC8j9Gu z@wJ-+j$}+s-9>Ran+SAiS@;THSwql^>i66NzvoH1O3Ge@0tjH*1b@y(cq4*g#UzLI4wP2XAU*cI!VOK<}c~cgBl8 z5Hfc-fbKZVxHWQo8@}ekKu*VbkXgS(%o_*cxy=LPvBN2CS9B^3avVDb`a8mRf#{nE_A#THn6I z-k&PwpJh@~S^lFC_?5ay(9-qv!7Im;es;1WFFXIM>$Eb9sd_C^GDo=UU0T2MX;7|F zt_KQF&_5}=^~N@9Z$_mUew#zi@Bb-s*Xc{(NW8y!Ur+FOK?OrPW~=M#(Ifgr_4SD~ zD|6DuraOy^2ffi>7DRWG0D$4XUx-oh@q2xUER>9lCw8T8%msNc`!-%N88CLAXk6#JkmJC6F4W#{I}`~6hPeWgU~+P{Z%}oo zFV1a!buqj*eydHbeqt=sT5cAexai#Q4}wiTFRCRS^P@`MO^AAb6|)!j?_envMpejX zEktbbHPiNoSGQ99?M)*xe-AVDRl}T{xY)9-No=Y+l_sKb!5pHaZz4y3bJwmX$$Omj zuf+3WkGXJ_&*ytT3ozqUN#E79U@aU&>?!UB*n(1|Tt2+=`Ld;Xw&1D$2EB1m)VpZ5 z4e9T}hmYu2r|*M6;SkNk2v>V&$ZcrFd-Jsy^lO;JPvQN>j)C_Y7e>!JBbcj;wsndO9jdxvoQ z;jr+rp{KYbjkEEFZZ7aj@3y&c2^<;38+;_5``YZboMhqmpGwMqnbxEfV46V4j#d$T z#vqZqH8!9wQ}!t7|9Al!4jTVk`J>U-_OQk6S>>^^$>1ikdNX4Vt5>t$~IeR8J%?D z++=(%=&`T|2$%mCUU)hG|4*5M>XjAGnQ8UK6WT&ruE&zjhtbV+9)Q+<3k}!%k51s- zh*99ySgmbB?UYvQ;Q~b}wDMu<^m+KDze@uW;qXjwD@YA>*#V}VFYLv5yd|6-R?Px) z<*lBaLYx-vheMT&NTKeq4Dkpe4Vwq&ZyLf{HG3k`@84FOZ;jU9gwC2s@#gBbfZkev ziv?gjAbwBks51ND0(4)(UomE9ZLfuzc^Z4gVtO)u)KNZ3Jcjk&sdj}_WLYl3G)%w? z31=ucW{t|zGFKM%P#EhkV}C{6IJGV)sED^Lj|p5k1;+4yf4cP1D`#*h5@$*ZDrV5o z_rU*7cuSSW=_$h>^-}9&IC#H(ZvFdDSxyJ{Ixr(*fb03PrS*r=nvK(b`oESBfy#)@ z5%e}!k=0T@!N-+({Gx2C8QaDjU9WK_sA=TvJ! z6WvEM`P^BRwl?->tntLdh}%yWZ^DzV1$5mty zBuQ{Fn0(hC6+J!qz(8T8(iG_HGa+inYsVqbFQZ=fr77KMvwGcVY?ZV%WxA23y__w> z0`5`yM-LM0SDoh}!Y&>+(z{@rrc=X-8D-Duj0{Cxe_oVX;GPzjF{f6VYL1ptBU275 z09$%lX|J0%LD2$jx>0~Ge#!`Nd;YBx5DA}chFF_(?{?L1+A zc)Fva7z$Q2u(BRt+m2owjsW`Rcv+EBvU>3HHOu=z3w|~2+)+{SE!FMH2u&>JHlG;X ze5`#t3;609F%n2ByBOp@TZdrvAiTG7iFY2PuV6gm?c3=;Y?A+CMN1l7Tb-WlFs9SG zCj`A2`-K%jGwUWHI8ljn@pL++=CS1NT9m9*e_*$4p4@T^NCsLWH~|~b-~MfyOUW1| z_75zKiH{<(Y&8z&Sq*U<+hlS6>Pd3_wAz0AP~eDVTi`uQZYd<3Fw_GhBO6Js;Ja~o z4TR^nBb<9i1^-wVC- zM3Zqw_2`nk=ZC#yq~8>Y8TZ`md4Cg}1Yh zcu}%$+2K^(-f%P`C?MOyr`bF0AfBjCN2EK-j)idQr!yBOZFsrWlE=~?;UgCsoNX6o zRni!Z&mlWjUU)Pgq?i3ZYj{ODUHzNM_#Pj`L)9r_c2^-4a`%sWdzy)sVDJM^^psS6v1V=dY4^^I`LK93;!u9BIa9VoGQy4 z&gfgN3UE8};8GeBKV{R3AD9sd}yhBr6lca zcB@lOSaOjOz~4+RN(jf+;KmcHhfLMqam8CiGxJmC8 z-AE6yT5+NQD7iI~Go<|HPiTcAN2vr$r7|7yoO+3e521OP^Yew}uw_F=@aHOi@o{m&n8j~}l{^SP(ch2E%ZYs<|1O0e|AVmUwUI*3hjwYzEw zY+lU6#^{1bKgl^cFin%m2gN zJ9bz0d{Lvn?sPh~ZQD*dw$rg~n;qM>ZQHi(oLDC(c5a^gf9`j<>+K%9#vWCps^(s6 z%{eUw>7)dbTF*&z9+c0Pjf%g0hSiIztrskW9+Eq-KhLa$m8IqNm3|=$ho&hiromm%Y1f4 z3)}@UdU3u^v)RLJaRGf{mIVr-Q4%8po~~L6?9xj=F;{Bs%hb;+##hG^{(NtS(Y~73 z%E!MY6&k>>YXIjOA0V=k-Y)tdz2pP z%TfCNr9K|Bb04TaE^s&(KTU2OL{quRmF^q{y%tBjchZ;hdn62N&DX@)DbBe6JOSNAU2{L>>|q zSlQ&f;8nj8bp*9}BFpf{1$+I;AO64o_FQ8U;>@c`b-ozENAQkv*kZ`CtjVkM2B}~{ zmum|Y7W_?_K0K|BKC`|N6V#{nB}jOth1DXr3Ae77bcgz~F!&Y_US3367<48NuRqU? zjF>{j<5AJ_n%g2?Rk7NL4=+`ITQ=54=vZ+~`r8n^!J{f{8jRql|7mLuOxd8WfRQRM zXE0jb;e9+IDB7Taz~Ca}T9U9N^jn_FY7RP*uO_pdFfK?iEZ zI(LBM^XG4OQ0R%)>2$4^K6l7#i1!?jjBXnD-4X#E3uSE6EiHXh+X3tm7n{RR^c$1k zf61jwU;0>Zz7+e}frZmsQ3IQ31#HVX<1IR2j z$7%eZy{LwIPgBA*pR#0FEaFordS?|mS0>$*(P~Qep<1fKj>2q@n=6v*u?6fm7t6#h zzlZqS(!51tmsiB09U&6(JtZP=sby?`4$C%+c8wPra=Y%gwpjx1l8Riz_!OXh zDT!v~WIeHUej2|aPVVjk&J$W%}6z^3GDBVdfp<(AqX(L@aCqU7UuUf0@c za_@y-A&2S~8}-3>!_7&{D*I@Dt2_(gO_gSn5o6|P^D5fHvYp{+VgHsM{_AYLj{C3{ z2%WGp-jyX(+E_R%GrXvJNb*7%=Xav*u1c`g;h&~Q%9QHLOPQW1t1|CLH5nx_`HP{p zu%;@$PY=55@y@7%YU^TCIkYqTXyJ{JqBd_DK>{T8%LD~b%?Y{8^S9V-(7#ELxl}L2 z66*wsmoE4`i^$<4iH<{rGCo|%&5UVxh^j+HBA7i!b;IIpC$^uWB`?w+ z1#`W(;Z&5zy=&5)4=KfPeR@VrXqn%6)_Z1@O<@>Nj^@~#(H!x>FDNKWTDUN2wN8xd z*|6}7qwX)1T3eQ^=m_^eUO8%y6%wn@`X|2~s#_90WF=x@QaxrA^=!5@8jafC8Vl5# zpY|aq2M8}L|CQX~N4jv_YE08AUvoj^ver)kR4gtL4YbE}86wOxscuBJG@6~jw*aS0 zwdJUB!_PQrbpd}P&eA1GrMi~^zB0rz8&XGUtyU15uF|`-sh%4o7Cd$F*nUZnXh>A& zf_FWx8AWnl)LX=sn--juAM!EE9*$MkH*Xd-TazIOsSU+>@NT9NQOyQLB9XxAXjI_( z^y4&-u^w$1{q2Nitbw>4gz&wAT2#&&83ib%qNOXCT=B!w2{lFLtt*culH0W$ku}QCo{+`R*!aXud0k(AmxA|s_Xx+oR%pp% zw&#xUPQ)jy9tE^EsD{184gZ9#T;u<43(Dv9&f$~)l*AZujLzbP^`(O zr!FZ|DT=0OTFuHY=t1e+!jekjE;c#HCZ=W;Lm<*0_L4WMq!3U}k}Z`BKdHz$mV?tZ zz&AIsdGrdfu2&A)_7FBk*TD-;$FkN`oCHUBj~WMC!qrWWU75{IBSLChk6i!Shwy%V z#C}A_HT$5r(`a%8&y)tk;v~#@zL9e6y5T0^ZA>F6Az%3dknwA^hy4ZD4H_Y3W^Bq# zxKGR~XHIbUz`gQPtvhUwMioaOW7+`2j%j%5{!Z_IyC(D+;(5WJ=;M2%7!}H>*gf;r z_JHW^{963~dJRV^UPPPnsdCujK&3x-Dm2Z zJoWm723xH(`VLCLA4gi6oT@7oXpV0`W99OKh%y@%G}^qGD$%EmMEwaA!yQP2GdzbE zxC~MsS9CYTw}zgfOj&~~*OmFAn5f7%BAmEp}ORBB46Jkxi%f$EA2Z0=FH-;VI>uRul)8yg~A9F~vDPkwMJd5pC zXfOVOP_XdCf5Mp6iBCW!n{XvwT5=$=NI zoice?$-b1VL}Sq5AuD%U&${Z9J#2OtP~=3fGTte*O82V>4a)Q8@7X7Fgpehtr-#hV z5sI;X4tx6iq_wNvnOMy4rs25@b9$zlu zu*Kc&{~^8=l+;}0wKJ!7-@z{=8XIhO0_*kX9al~^LE&-+_D${&_*xSS?X!2a2&whX zi>@iSEQ}s9%ntixRbPuVU0<2mk_ds6zqA(LLI1Cz?FG-84NQ|-hajc zH!?#`MU3d>i>$Wu8CpmlcApI^H2Ah#>u!t7E-qca1@WT$@TTh6#FtsY$G4p8==#1X zuhi;}SA@*V;NVGx#YP-oR#&-SxahinD6d$r&5m2%;3kMP)gs=i5Ak$H+=I6>Qu;qL z%|Bm69i(9oc5tkrap@GL6YP_-p}n0ndTukvcxg|R)saWEFc@ApT5+E7{UcR$xT(~g zfsuwTM@-i4Jy6l@_TXnz(;F=tL!r(3_*Kb%ZEUnJc>Hl8yK==Zm~OyGk`Q>~s^Vz6 zO3`&cl=)3u$@+MhPC9N1Ypp?;U)3HWj785t=oxMFL-M#-OtxO@is%-J{s4* z{eEsw>e$4V!(85GHSshp`pg}l)e$!PQ!K@Zf2eyje-ytq@T%^W=77 z^G<_iXLz#mH;b+NFU22Xm)WwcDmnX2h%yON#<@K_SA!Vdm0A*cbpx)miX$k(enC>Z+ILPtx;Vz z5E}91kC?vvw$^&fcdcb$cAx^1 zbE!Le(7K~+LAyzYGsI40qTrJ%J+TaY zj+zfdvAp;gsSWwj{UuP|<<#D0%5qdR(?kjGrEjpV27 z==}F<=32^(BlI$)X&(_`=0H40zY$<)`$?Lem4*9gtJ|MTPH0)gN2&|L@O@dUe7~CQ z-D@EwNzo}i!}SAe{Q#+LvA>wTpB2lmzfZ|Vg+Gds4Ry(x^~oyBn>=!VIsjdNe>j0z z#pIL_IDayO0Oo=AJ|1rOp*f3>A_Xk>p{bp^!Ot= z>_X()lfx(s!&X2;^jypQ!E1YVfb?`Ndh?s08t+7RY|mKYEbr7d2^gf5&R~Tj1fMJ1 z_4R{smJ$l*m3-Bt_GqKpYrS1Ram6U_@aToIqz?cCc53=?u3QPbimS@c3aYZzh2{Q} z;^i(E|2TZ}e68UV(?aw!3YQ}TYfxzJ37+5Nz9~Bdg)@DjY9qF_$R-{*4Wr+&IyCxGh3^??cop= z1V31b{^@xELNsSJso|~}<5_A8Pl7ngOue)DXEIg5q%WWUg77y`W;I9zs}a#v zG#EKABk$%6-u3QEg3Eo6!8(?Txt=_XS{J+tt4#aon|yyM7r5)(EMa`SA#XY2P_$hP z*Yv>S6C5Yq{=~<6^P6OS^F0>mCFrI3oH6TM(D=MLDsqoZZN6kzQj1S)Ntee^VcJh$ zww|6c7>)*sba2F3sX_f98YoC$^HEE!Y~~D{di<{d=$i@m7E^!xu*>2Vha(n^EiF%j zHkxv`4?|PG{mKjMxx=2!c>y<~&zu3tuPRW8v zlnSdTsrfeR1-1J?T)8l-utV0lq&*wo*r^^QMv>Frvu!2Pm$hy035uW1RNa-;k;Y)l zkmP+`$9}Z)j2P=?0PXv-#Ut1fKdq^@ba{fsAn+TCYv9OkYgp%WM(A+yYu~OZ^MdAB ze}gB%DC)`RB#I7AW8@k@xK`pPs?4)S<`i{Oq_S~& zf#f6mB~8`*0GGAlq7Lbb_6ahWd0u*OO+A>~Gc6;NM*HTU>=H8gurX+7ivS+^gp5-X zG84qQ|?DCa2m;m3a3H za8d^~nk`XMM^u(ql$D(A8FVNUR!VC7X?EpGOH-}61&lF;W5Tf4m$Ao$b?z8V<}X_7 z-Z0q8s-hrajOIz!v!bplt8J1m$amF7EUamsg}<@QHrkIux!P%tqF|6YKIswUy|f`J z9Qdr0{nD4U0XLhl+47lI;60b-I^xUL($yZU`4D#p_Po7pdd1oUuQ==n!Jlro23#&b z0pLNH@He*%Cy~7D|1|vk(o6mP@KOu|`3OFL=AucjXX{A@Pr%6<@pIwq?7eUZ7}$tnVnA3jmR&Wi5AkSj3;XN{ zuK3g?Df{A+ZgB^rt`A#50wzK!6nz>38s51t#lSKisWnA4FJXHkM^AvpCnlatiL;ncZ5ecQ>4H_}nbj z*>I@MVl04ozxa*|9oxH$LzxZ5Tg{2!y`7;=c~j=+_2nvg0m=FChj#~io_0Hdi2!ei zl*{R&4xMqlT5IFc88GkX6M>tPRKICHfzI?z)30=nUBAR9AYN?j7PoTG)?dx2^F(WJ zH=;X%O0(1492Ap*LS9D`7V(&;Jsyy*E!L_0^zrJ;XaaJ)o$2k|m9oU+SxK=mPAzX& z$RpCK<0fGC?!Yc24%a$o$4C7Q?uIVlsTq7L|n5 zUnGK|tc<{($+IsQE`yB}>leqc5%eSK{!(anNzkgZ?g=e@yPdL;@81wqB9>pgf7bLQ zm&Q7YE~KZTu|{3i`scY<6B|Usy9JuBl8+xs@T3Xc$Li7>ZXs@clirH=zYQ2DZlb zEfR~TeMlgJBKu)tPl-hS0*jiO;wI$cQKzGq(n64!oH+*zg5qGHNL~k|(<)X0^o!;7 zF(d3Se@$WV&_c(jCW`0KWgV?Cp{Rt@4Xq2xNmBt7t?`P0XfpfXi3L%oM~AQ{(#k5@ znhl)UMg`g9+I(zt$+fK5OU%<+8Rd2yiI;Jd{-+e;#1+kL^AjR9BaT2yKMkOykVaP zM&Z20WX-I#kpm9{rVeiT=NX2R>AinpkcA@6*X0i9b`1u=S!7jU>@RPeT1@WWB*dy) zcKO4M6fqLdMR3^@&P$TCclwaPIC7VBwg-`97v4l>jZq@Ri)VVzLm^?Kko?LpgY01% zOy}p?M8JJQVl;Dec0-Vi8RyUt*!CEhPPIA8z6>Y0VK>1fqNAaFvc0! zf{AE~BBSm9*y%|Nfi;LI)P`iB$&Q9&ZGKW%ofn$MQlz4>EZoHG?^9UEBj+eM>%8+_ z6Wuu5R)p&gfsr~L8rS}rDX*raDH(?SK3C9`>ZsWav4EirU*Zc%&K01Wa@)Mu?zrT3K~*sT^biedkzhVVe7sz{~0M$qRsz zB~0K69yVYe2*p=Y)=9cTV?qa&y0iOXPNAe zXV|O}JjLp7t)Q_tf@vebxaWq@h+}!{7{^gC?)Z+dss#)9H3t)oMweMejMLts{y}00 zvuhm&yM`h%@Rvs}JkhD_b-lLzKBpLb#1Jad^glu{e>|Hej^+hLyFxj(7$RX=caODt z&sfvvv_B(cxdn9-cs>g<*D?*tZpLT?-khn+79LCYW7n=osxLBO5h-_E@c@?X!!>cb zjbqOY&FOAnJ8TTT!1#EMdcxq(a2Q$rrC|Q1)GNa3b-6r9wX9B@j%)g=0z)O+mHB0r zzVypL;@v;3X2gpC=Nj#IwAgV!7}2$C1Y^29x$WU zmgfWDuGYUtaePEJy{$mV2dd%77t`tMx!8|rMb_6oOh5$sNB+=NI39#te`-yYrk0x#K^9sw<9bo4C(K` zUN&_^!D5DtMe7TFYJui@&O523eqHlo>?*22+* z%6XLj1f>ex&A9-=P=meo_Q@f7EDvE6c-!a&iS&>U)N{oL@~74uabd|xG%Gc`lEj%m zdPd!E&&=FkUs9h>7=kE4R44kH*qIBHXJ-PO&*J~U_;PaMNhz9@6m*3po6({}aYh~u zGpH*p7$cwSUFQ|!hN&`>@zaxt5iDsf-+g{N?FY)=HicE1<-Fqfr8yCi9H2;~A4*yY z<7e*f$W}{<@1?nW%Y6JshtadKCHnQ;lHYO&RbMl3xPOhCMGFyB3FoOO2qHFJT7G{= zkiWZkVz@cT^_})%IdDj%+xhOVOy3w7XF)SQa^cb&WA+do%R*s0G=@%ZVI~-3$#?}= zulYvs0$A}qZlH2{zOX}Hp!2DOi5GNT(Iy^o(+RR&c||!b8_UYkgam8$=M?CmU!^L7 zwKDq&e_2wTS6D}!A7T=4EG>H^EvYGz50|r`(ihRm#!==0-Q&cs+k=80`K-6P{B24z z&R8>T!M9%9?bJ`Rhk*PZ*B99|W7oGIPM@U@M zFhHJ*eAI&Do}S(cU9u5;Q&91e9y)NB zJxe?faDC#u(vGtZYQx(P zQDYHZmq?B!t(^L)Kw&JmgW8IYn8y`4&0uwSNR$Is56nQ9g4^wN8KZHBm8cpqw~>`OytA&$u>kb6~;-Gd!-9;K^~I{DjN7OeksWv;JWfwM;CQC+l_dQ$37otI$!PBbuhZLfj z6Rn*fIhFh1=M}djR5jF})gWpS7A;DZKxVndN&#&c%hhc$wBH!;STMH-DB7Xopb zp*xb%uJYkVl2MnAbw;;OSCT_r0O-u{l?M}ZPm9`{yK>vo;`<*v?8NFk;yVb)#uGg5Kd8Z!y^btgI zJ^7KWD&AT4fLo2haMP)KSop-RztiP$aEIiy>zPXdgcaL#47k5^jrW*tTFD|edJ|)( ze+l|Kx#Ac^gBg!3SmeG=G~>p4=)~$mCY?fSGVE2`SPKv;NEl_DtAvQuX~7TMNE)+t zd}F8-{ah)8#+*57b)R!_#G%pq3QCq1Fgn_hHCFW>J`eYD<~e%dS!?sjE~`HdhmeWj zPHfy;wu&6*t_x&?fG)GS7@=>?ZAhy>eZPqz=qm7UZ&LspxRitWWV)UU zg4Z0!RK?mqlBQM~+7Nf?&`%;O7z&?0(A2nQv$xTwZ3#IYkWogWg>`)YCF(S@avML@ zAPKwUm{7Dfdc9GzmzXH79cI{2jh=H|!3exf;Dibf`G;Y6>{zT40cD?!T8%(qCePqK zzt&>w?uU!5b$k7zFIMYc?V)7XGc{Uoj6OT|Fl`DDlQ{KQ1%8WsGP=K^@Es7tHve5p zN}AutnmnyDJ(ssW3`AII^d8q_zaAr9-I8t9DJm34CLs^E+G2h_3=g*6X!D25Y>o3Q zisO#N|9Tb-YB_4)=>E}#f+;YE6DW5m91meloqnu3bv>A7?*bc0+@St4nS~yG-BpUf?)6|S>qPJnGY9kGB_khq*)v!QXmu_hq@1lZ%(&z(+ zHwbV;4`r`C*lxf0Hgv*)7>ewivF)e*W#OKNK!vM6KU%3?r_VL121GomEKBvB>>|7C z7*lH~9#_>HtN-8`Zv4(@3^V=~`4v7e5j9OKl4n6lV%ru=QQD-?W<>;~+Zy@2q{jX1 z4~ohV8`|f1CS^%m3vw3|?Sx{&m02Lv^WKPUct~un%J^ccR0SSLJpGN5Ll2m%e&T9{ zesfJkjH#FD*%DgWfvZBi=BU}3$yq#FinJd$8z7>#Vs8v%StmY@VqIk+0j!aw4T-lk zO{_TVubgL(?I~Uhab6jX_ombt405m7Y!3D;{%y*<60&aJ+B{^Tz-P7?_=cm|f{lKG zZn9L%>*5x!?kLD85wRWV0VJa8hJf%WD6>5Un$i|@eV9mcl`IbPAinsMD(0*i#`b~J ztqQqM)Plu!@B+jM^lXeCK|xrTNz=^=w5d0D@JY4e29DA+>PiU&#kGonQ09vRcxqQ0 zL(ry`#@)Jj)wYIIOviEURnAAaKw6#T@AXsq(YqO7jXv<|`%+xem z>XU3@-6{8|EV?0OtmO2!wN?JG$kc&8H$nF1~hHc+WGI8%4NfAz}%2Huxf& z5`F>=Rivk7{Q7$2=k3A@(^n%It;RbQjnZoTCR?&Pfg7ud*SePGaQUS*yp85~#4wCT zy+y3ME>Bi~Zq0ax^AW?%g?aw<*bmDNI%o82v+b2`TpL&lc0)v@9|v5^>o*d(lE$%N ziGgHEYYA<}ZMjY>wcCEQtJ`OCZY}QDddNZ^FT|=>2&yiUim-zTCI z&BAgOiV!PPiX@4ZgkD`lF^p>6@!+aPVof34y&OFb<$!w5Oo>e=m%_26{i(u%Ft2Fv z2q8}KS%tjW$>Yc6Bwcvg3$c@A!%#(puW)*6GmdX^=UA#-Eo#nGntdS|ZOX)W3F5|^s&j?62KXnLmes5cn%B_CcYrW@gJC(Hf_VCh%A)pL4A~BI$09)8zz?mO`&`gv?4N{ z0a|{1f$E`%zY56B6)zsFack2vD z;UoI==+%mvlYYdV+7PhpoJMDhE+?c~P zAIk$SHL@$6)rU5|C%!1GEh2nLslfq`M?PoIT$SJC9P;;&C=&W!aQ(L&rUFu_5ji9I z7)-Ucep_c|3N&OUZwRIUfng{t*}!h}muCfK+Z();lCTF93<8 z%h%alL8nyh3af@gI2h5Jt}J2lc6yy&Ga<5@QWl!&3VR>f!kelpS%euc-B8|h%m1`Q zP~!Gv$B3078dq-VaYxQc`j^_`57^|WyHohFeEzHE{mw=v5;Uy5DXOeN5mJX~C|(M= zZ$r#Q6b9zy8fIVOAaukaa;88pFNZ3`kNq?wcUho>PM~ZXLRW;xBPFJYqLUL38;(RgMyWN@X+hnL!pNFa z_WU33Fi#iIqTVBT-_00{3lAGRNF58SV$d2iur2Fa4@b_wgcq0zapVCn7RJkLsSn97 z#*#g)J|X z6luLfs;brNg%zP)w8Z6*-PQw5wx0Sh2M%S_XGyyv_>0R*lS{(oZ%@q&DN!>h1zLi^ zCs*rjfDX`_znK9W7TS!Ql3j0`r{|o48~ZF-N)*gSeF`HwT)45{%_mnfCad)T+*yXg z6{r6S2TT}(puYSMG@>5|b?7jBfdiQM;+K1zLR+F6>W9!Usvwyd44^VxG{s}$>%P=u z7O$veVmJ)GcUroz4-+f8vW9yEE~v^Z!p*3Jl0$C!aSsxE2$Co)ySg;zfX~+vj4Zm^ z*o!<)yFJ8=Uww3c%KLn|FpbFy8j$!Q!gcB|?nPDoNfZ>-9(P6zJP-P9A2uPel_dF` znni9mO3rRarBbh8F2rL5M- zz!$9}J|&{<&DQ#L<{0A4y6EDG$1trmc?~v7b%EO#gvF9Zy<^~CLVjKuYtPx5F4hV; zGURTA1dP9tEDVDRLpCvFc9`d$;D~(Mf&%66_$FM^<5g5Z^Ztf6m}}CIkv%ODLM2_s z%Nelw<-ZdTo0}5!^6bmJ@YE2ge2zRP5bnWi>hbO*`_3)O<;*{r38LyLn%MC|9tF6lS%Ae_Gh1q%d*B1Vq z%dB~}X^Q8g`{lsyOl_AfmuKB;EB$4tes=wII?gBHP1-jM%;)5nUdJj!2hfG+Wy_!+ zL*`)+OUTkJ?{SNQ`Wn%lOc=u?Jg3doE5WTVNK(V{MYV(M5;1r)ivuA zCs_|)WP{fO^Ot>8*c%LKPN0oH@X9Ru6D8;b99!Dp9 z&c!NU?w{{344=-RWQgA5vhM-Cg9~e8Di}B~zwVqKm&&H;oK><-^#aQzMn%FRq8b5u zoM)Xpii#=1@VMZ#Ui*5u-zVVtpgiMt?cg%=*&)p5!~VUr@0s7V)t0Y+ZI_C+7rRgI z{1k?q?|ikkc+D~58JcRugK(Q~*!cRwu_NV+=Ad4lpYPl5&Gc$}z(s`L%k+`lyDNU2 z1%Q|Exgncjry|lxy!X}HuSnqI;~99jVO2||Q-2a^ms;a`^0Q=Hhi?W#SQju6<+E0I zA9gnbuB;=TwcgwdvIE4A%{M4Gnq2yh8QsQSta1fS*YfU!PBoj^NU44CBQ6Z9wZFd7 z45!a#Up~}6srhBi^cbJsAzY@$QM_#jPS$WfM`L{SA)T47b^!3XBE|=iB_QLfk8ayo zTy-4wqEc(aLVO(_s-NB1`Q4P>uX$Fz4r$?W`0`QGI4wC@kfY=jpG-DC{KB16#fl_X z{dfMimhV)7Bn~lv_*I@Sp3!zjzhF3zwx`O&s?FM?${C+wpC{s3@5XN5`&T-huTGjC z+VfurYwg0_yE7X}qI<0(t|p-|X76JL+K48nXf6q}T5$%?1Mz+YHw?i8XgziVSiUbW z2gL!koTSf|0@|QCVAf!a&Plk|5~gWP7}>^?wOf!q&F6C1-HH@^&mCoN@7)t^wG6rC zF`f+c*)_$vcH8CC=V|Do9Po*MCgiA+{-ueHw)^?DcQGeg?6fzM_;LnkH>smrG;}aD%|SWccN&}&0()*8L$r6`yEsMRutBEnx+)Xmu0Bkp z$e7Fb#pZq1bR(&~_{1gt1?Uc)S@7z5T1~Zqp3&W$)gk!$?BnWrDChqgYGu&9gJbUr zZ`@DK-7!k|Dr_e})Qjosaku|?cZBuU(e|O!J1WbKo?V=MWV!tiY+PtkqN?9{ff7f8LM5v(i($RD)egos3oQ=sdLqs)}R>1OyBq zz=h&Dnekj***H6E)l(J7?f3p8zC``M;Y&(6ASd|0*cT7@|ILGUjG%1jX0brAYO(5b zK4)|fIsC7M@GoL&6>21Mq%}MEWKM>yGPbW79f2U7=rEY-wiDnYUZ?$bt60d@8wTe$ zU+z1CYxj82UEx8!XijPvI(+D~>{JA=MuQ7B=%ZH)M^C?a*dwtT*Qte`;L3t{_D8lp z?6w{X969aRrkumuPEVPQnxAr>cL=XXsRvi@_+T@?=kxzesTv3mngoRtWRzxS58)__~5t>PoChZ&Qg>G#=4U3HJg2MLrL?-sp;d z{5UoDLd5dwS#`^Bqy5QUr(78TzKziR5zV_FMgUp+feA}1;^67{}VUe$2==Y zN}TEzR**z3?|AH2Tm2I#uCSi@m_uLi;s{r8bk5FD@f6vW#;Yah)pDV76ra$7MT<}R z*K4yptNcT6S`n13IE<&Pa&9L

    1+BonCJuY0q?>zS%y#4Uvk0-;&bo#X8xIH22o6 zb(g-Vz7|1z*>(AjYeASch27OKk%)ZM&21}KDYI_56)LKp8$9NA=Y0p4otKSHGYr*r zrRcsFF40-sP3f|g6IdQ6k+kktCo-{jq7+&qMZMko3AwY|ftLg5Ek%50X~TRLSx@V; z20V0^2QDwbzv-`!%Y=@ zOl@9({Hy*2l1sCc`2`KZ&ves`>Sz^{?ED^{e?M44_g7U%(zlSQJJ{U4Fz30FBQ(Pb zxgA@Nl{NFt`nCaKO{|K(RY^5DVi8i2oXIrS&Jj16u$e{cjOi& zVP~Fjq2gcH`%lXb5qw6^{la>E8!CXgA_n)jMvjBPIZ$4&^M6}5HXslJ;q&`YDNgVq zC@So{Zk2%&5E0hp=BW%}^eJLchhFFS`t=Gzk&pukC-x>LI|&>F%BwXP`22pE#&h;s zN_?4>U;oYx_<|hZo52kj*2BrXpkS&v>>aAWT;6Q?-v>i4t!{|T&584?Av97vgD!s~ zBzRkn?e_dj&B>mPSW;=RRhRLMW*F%cgpE2wf3@eS)&4;BvW#u?l!kl!4~~@sO7T?q zUY&z_W#(wx!veP@*s;Hlkr&P~C|1tEjhiht!7&igl_Z?86m)FzMOb~yTKQyaGE9+M z_aMU862}-d?6r0?kL`MRtfZhQ75%0!1`pZSDAwk6;`90P>c|dUADE$|;j+M!*LH^N zzYe~9xe-3@eZb0;OK~h|4y<`Ky7YA7dZU@GvpPdorOTSlK^Lf+9zL|ooQwq08J&!n zRF&gRg$WuA{lYAtQXh|q)!q9z;!$tq$V|Wo6Rc2z@99l*8Fl2;$r|?mZC8*OjTvKo z__14E;;@2N^sG^ztveFR&^wAlP-VEeBa6$cA=V0{L@vZ_IQX{$pir6#`&)VC+-lNzG-#7mFMF6T&t7-5$kXnc7JbfSi>%6~QNN!t z5CZz;4r{sA`&|fNDc6NR*!ldiY=nv~Ow2ilbqu`T2im=d>&@bZ^=579R|B3SY4WchZ?!Mg}f+D+5PF;NronNlx(H5EYBu$}GC6VVA9q+T$ zw{5!L&}8Fq_Z1J-fhB2Uj$aZEge+i2z;Em}m0<6YiOAW-ZE<-%T4ShOE_G&8z%PV$ zS(LYfD!M!K1eD2SYwUZ2&l9O>?$)Hdt3EW5VeCsHa(9gu%e1ICnNzGao)m~STq>Pz zQ2D=GiQuT0|dtn&x#!AwTpAZHBK05hitG|iA9G$nOnEv%!VP^77}v_BGgNZoRfa^f5>oBW3B zAoeJX&jc&6Uk7IP-oa%TgDwM>I72p#C5*ljoY#u=urV-%`Q;(U^bXak5x5=*o+o-P zf1yNWNkHKQ!)pd&tk?pq4sK4nbRNX~*yT2H(y>8E7<_5@U|@`p*=CKNi1^Ohu2|WKO>6r-GGq7QW(-O9BnH>AOSG4cLmO^7P~c zwgV<4heBTt*wwehyD$bbp{dMahn?#YgC~85*~b0NgUZy%H~zPkviv?H2js>GD&e%2 z+(Wb({de8IBK^7&1yw7tDpk-N3xcQv99G|B)KY8B0x#KhUdf$+Sdp=~6clC_=TVr= zLLwdrgtV6bsb#1(dTtu3uF4P@%+Z>Ty6Ts0Oh0-eToMUO!XjV0nBs0nH%)?Ux%o6@ z@gABrxjXqlkMSs+#$!Qq4stPZ)6%XWI~?*|$}Z=erPLFJg{?r@LYEeLUzYDr$jT$U zlU-)^BMI$j7?hPo#JgnfX)`$vPyG#M7={4+s`PwQP!H3zYaLM>pWZym!m^lkhA4)b zJLO^&qkR@ZZ#`}H`;6Fgn^tF*z>-n&!={yp_Uh0TRe2=#R6k}OE(!@wr)1d3s2~2z zQPm(=2su@SU7~}p-I4zfDt-lj1=KY{DXs(#+m2q>8P#_nVG4w=KkY<20K{=GD@vg8 zet$_Qg|rz}j_F@SR9~*QCuT#iaCw)&We$e^%lkc3RBJN4;=CZu8YDW(=$jCeE$=I~ zo!1}qtuFrjpE(1Muw*t)Kb3=fdnj@?vXGQ9(;G&O!FZ{(`s>a`)i~BarUT{@kth9T zsQ!af*P3DqaepomP8)Q)fDrA;tJP@Id>5KY^lJU>9bRnDDxsqLofLbkM)kUT34cVsD8nqlfK=zfy-c<8BfmVYqxO9tPRjoa04V#_=Q?aLls zOY`>l-r=tUKF`y5tM>=>nTJCO-owonDs+ad!Gd+R);R#HUEV6UOgD|$|CP=j)(W=B>9rw zVuYSTUV;Mpe{qrwZ1PS{gk93qEBK8-y0D9vs2K*=iIz$K-|S)L^Oc<`lkX7XfcF;Y zUczvKj>BOclC3ngcluk8Z?w_QXX<^MO?@da?X?k+JC;HJ+ALFYx_p$5GHHxzm1WL} zP%SEwkaP}gwhc+>KX?=4FaqHN-k=c>$!9=i`p0B?8-dPPXl-|&axLz#{WzJn%PJ}I z6}!sopMwwt@-3}cU26Jho=+jx5z>%E;+k&fcYEI3)<*6JN)tRG-QeZ#T61|Gh)fe=E@Ud_(m( zqiRh}O-4-E=a&~Qv(bt5x~r?JnPBT)xCJp=Tl(_ya(6E;7PA@LEtzX`XY6w0y7i(z zXTrf!g`x~{>(=aM(ka4ZozI6G<~4GP>$GISd7|2-3y^}Oo$MwsdCMW9za(prN|!6^ zwSsKS8dJJ-Nw&sxP+v6{g6K{(op0NQmT!;lm7(RidZzOF4N|IgZ=u^=vo2FyIBg(J zsI8&h;P-2-moF}Aox|!lJBfn%8gD9BV<5GGJ`s1!v;)eWTaLos@tdXNDLkE!l}*IK zwc0pxHHs%iZX7Tk3^NzSK2#aTG+h_-Bp2?fNzU;?t zI#+U0*hSZhcU`f5Tj-6HhgqF;YXt8eXhzGeVK@*mxP-{p>{A@*d^$oB(E>zroLrG$ zT8Wjk*+sp_I8!=S>0`t1gmw+i_-g+*$M(J+SIw&;k{@^^;0ev6v=e@*XM14h<@j}I|UXAjcoVBfOLqQi|f1r`i zYF10^f#y9=i0r+bq(CXxp)8imhmqC zAFjSCsLifxyNVZgmmlsrk66ez$ZIt)^x7r&SY)CxXLwbMxlK)mv`yP9~ktC;_JwqHc8WUN_QY zDEbkGMsMn4rEHOu;$3p^<*j*FA6BoovHiscWLYiw{{VR1=rYBnW1|F9yHjx|Qd`em zrV;Sg;8Gj6@6---g&WHg$b=+q6wy%Q!xZ^bPhWgW>J2!)hh<@6VT7@ks{qAPpu7eIAnQ#0)+IxqKZZ`=87>{_NpMi9>UWYIC^4 zzRwP;Mqp4KR`I}~u*_jz zZ0c<2u6fWbczHa4#p(Ct0ny-6LnJi|lc|;qt=yVl-0t7p=Nh9&u{{a4TN$vP zU7&&{S~im{vH|+@%`F6(^20LefK;p?gs{&2&=#LcB9HttE!O<*DO{kIu{;N6LcNJw}pQPedIZ+;GDieq~0k(WX%{3NfVlGOnrp zGn6hQsNkNM5i?2=YxM=)D84$n#F1%tH-a5izAj{!RM!KdpaC_?)8^r)&+MSmC8M#( zIfUAxTCY*@1&`@lRM~Gf69f{g>{rmFO??`f&`!l|X$)YPCryt>D%r~N7{r+e;c*H) z5@5SgsglK!J3q)p97180lJWN6Cb^T%ck9iBe4KRg4-#+tIXYK8xC~Mk=zhfGTGodo z9N&X4u>WPX|55LV?apWO)Ip-0QRm`WvVwMhKZha!Z5S7uef`F#$zF_6)Ruu8hxM*~Qi0;qs8f3@l>(L?v-!Gy*a|`U`oQ;zixxHH2rk zuvG3>YzJKuZg-N@Qmv}%2^Tq(>YlqHrkAUxgR~OCYLMjVfM9EK-IbZ!9Sznt?T3QG zAJZ*pAic?$zBMuyHM|(B8ot&I{A<|cBrh&!K<`_6B)|Z_Ys!6g8TrW>o2>$(#9eq~ z*m4WFG}>%wzWTUUgSf0bkFGRyj1VD3I6lERzm_upA7ZE`0qmvkg0@a5FW~Sabesd= zTJ$o@?NQs3Ld!G~fYxU+3b}sybjRH4#wqAw)c`X2mm9)#yQME*rm?u_(Zwy`eD=yM z9W=R^%H3xyG71=d-3|l zYV=v|z5q!wc}7jlzfpzA8(OSd*%aV#POW-Iwh~hywd^>eOEq73RP7HoYO75uxVUqD zqUEl(2w;+o{ZJIEzO``6uhsso|9ixH0>Y!HzD?a}zX0fEG^Ik#{U{_kh30`4t%HKtHXToT*d z($Zg%PtWE!UYj_i(b+z1EvrunLcO~0q){mPDkC^r=4#K*uV)lf`@$DY=Uy(p;6epu zix3>ml;Cirxodd^eyMEbBf3;ld2ET{`ZZ(*g{0a?JYeR+%ELS!$YK1P{aC43dIqwuI3GH*L=w>wda&y>(k3=lT}9Iw7h1uu_EbV zV33T0g1HO;(dWj}MJ&9LsJ zjk=41-1lc{WA`A|@Z{@Sb(|Lqac>%cXxv`A_g63S{jmG{Zx&3O-((p`P$Bg@9}%_A z?=DZP>{rsC=qJCzY+VKJ_qjxzVI6{;LDd_EC8L^>GtcM~eCMk0TQeezRN5mV|_JG(Bz-@n-2|-BW8tw+0IYyx@<&LZymm!hKD7rcFOl9&Gw} zIc~5EdtbBYue@L^DRX_BPv~t>zNx-dXYWX2>WRX;+#pisDDt9CmFD1^cI+x~>85*f z2lfu-zNulD>;4p!VG{+HPvrI?)_5c)0H*wu90}OM>w&He4032BB;1#34<5x@YAGd0**_$sTet8QSCkmxyafyU)zt|m!L%U!!d}~xPDYPZ^pADR zE1fhR5cCe%8*fDYgmH+_p4T`AU2+{Gf{yyHH3De`$CRTRmasWeZ8^GPe?vXz3He5|AS2xE%#wFa;xs ziWLzfT16B535P_#8+3;XM?I zLP?35H$=9wd`@=^&%uuu@tX)<$c`v%hyRqEOqxz{s%B~_i@Kl$28zuPNCwh<3_PM2JvE|GnBBD; zkrvr)x8km9EcobiN)8M;We{5^jlK*1wAH0z3uJ+G=c>h&2nwBF*wVPJ!rSvthWq_> zRyB{Rn0vpr?yKvKVy&pVUy@(X8)wia&hmAeDcydOD_oFPA|=B-_fJv5pC5od*wCC3 zUhEpH*RNev(VqQ}Te*Beh4i2dTav6S#|6DOkUt%9x$w`w~5<}Z^c%y$Ngx{C$3MamZ{!v7K3qr z8?;gEebCl*T_8okJS;(Ap*Qyr2Qj1}YZNvUaRQ@nfN!3|74R zS3quXF(b_KA_OJk97k*vi_8z}M5AB3-Wshq_SAg1@48GNzl()4HuoI&@B+2gZxHq7 zctu7Ri0F{jRiUDIS-oQ~k~J6$5EAYrTpqsUt*id=U7*5ByMzp*`CUz1mhn+2=gsM| zn0I_u6>^0|AFs#^4w!h!8}2$K0!0a-XRSQ8>^h9D1VD9IWAZs8YnWyA#Q1Ec6D98a zfTXhU>{*gpB7rv0f0c8O#B?wB#2%706dS_;@zE9EPbdXnM5=s-PnlRa_Vg$|KWMO@ zYCPF?2Eqw&l(Hrt;d}SntDE}9|&B|7#q z8(T!x_pi|_B-%YL9KoC0=Vk4O}K)jzn1cHSZD4dw@*P2Zslc_a8c z5)yCf)+=Lw!72tE;82CTCAT0nZIIxKKUIC`^4(#lv#pZ~=z{4=>at2>Y+MO7gFYVJ$-ki>5f-AoO~@7`$~H<}hqx;pDkL(og9B zpcCg}Jbp(<0ontB`?fOxT-3ImAoqh zzH}lNc228&>5aq}x-L09P6HV;9x*G9?z`g2Ixek7!io1oG#5>6<7)A1<}bgvJC3t6 z6eub{+&iut&0i6|)$^{|iR-hR%I;dE#$`H=8J@O&{qNuzw5x0@Qg<9DQ)P_!F>cxk zxG{6b4c;3fJdnax@)J`+`cldm-M%lS6uxiOuao0tG6Od`LFGSTn$?(-DF8oxL{6?t<{bRFRC3c#Kpt*moZn@Q^>Z_Yb zl){=Y&t_%D&uNj6d+W4i2x2LE7J?r2tRrLGyEv_+rlxjU400@8;q%}3iDLXqtjW0IPzSs=e(rl=^r8YX3az+# z0I3=YpV?vDJWQ;lUG*Z;+=u=0$_tvC61NJIsjTHll@!J~aDX}%>+DYM;x2mYuhbe9 zS`_?s(QZDlKh0ZOZrmEsT3~HC7Wf#yqM&S5dX#a;$>T9~39it<1G?g6mX9*?FqOOM zm=~AUF$;^?n=~3bp86%FEj_G=iv$PQ?g@_?)YZG2K~E|YA9ohL`46lQTG~UHkN6%h zj9OYNHNDzXaa{tq6H6I1|3hX(%&}pp%mh9w7b(>o?yfT)h)2@m~Xa#{uw8+ZRmwr26N%E5WWDaML;uA1GMbo<)FZ2*7k&TT+LwTfIdz%ROD!8&8MRaj60x%w$iaXzsNkk(e9Xk0roK zi*1&~0-CNlIT^p0RdNCf$+7xph3aNCRW$VF(>2B_Ph4qV`Twqp8kl^Utv_*F>|vXK zMOq_ZkFl@QB3mz)wsh@pCBY_j`rB5%1pZz*_id!XivWAO*m>`0{QPMv+1T^IVh(nr zFH=gyUB-~xTid&FS)Q$SYXOd0Gq=g?{;D;EBhD6{j+mbxEy)Zk@7~O3ZGihNO+9xs z=8%bIQMo>a*vz=Qvt0%D`rdU4v_3pBDInc;c>?21&MWiZ*`4tgt=`i(b)0hswAirf zD39T6{>kF@P`2fM4f&Ye)*afEoN~MI*m_;L=6b#Urd1>FVx66mv;}yfDKz>%;8`fH zVyMrpd5q6%fabE|8awGMDg`j!@B6eN|8%tBQXulc|0oyCTUV!AwPS%>n2heZQrddC z3L{6fwAi^N!ll4e(Zj7Ubg>H!^Pk0d8-OwEm0@j9$zc9Q4J(Wduq_ih-V`(37mRtb zqK6N0sBj!{R2k4U@Tq8)h@{00w%T+jFn@TJeuTM_DJh9t{>8$9yfcUe5{ zq!+9n-cnMr?5BT(ytWM*UQi+OiKl>^#=@mW=iIC5)gP(hpS08Qx*_Zr(v9*sK!V zLwA{^?zZaNJf3#{IA+3O292TG^Di3Px)3(#&*+yF9Mp+sZ_gNZqPr6Biy`D$Gq3R6 zCwtl%8_w`~8mfo4P_RK_hgj6A^0}cT(q;;8Ab#EgL(lb!9f%+3_H zFW|Fx&RdwR^n>wi!O^j-QyH#5eL<+%zd68+Ui=`b@y(kfLP)xSoNW2WQV5zyIZav!_fh;i2<;Xa0!q{Z-tb3^=Y#qj;k zcqkSDmb`+PU}u)M8@s&{(S-|u%J(Ve=`dd8Y+%+boYgjSxPbSvojSf}BOiRmZW3^1 zEu}=HsO`su8y~+Q2H?tluTYn_54S(Z0MU6kb$^QkNT z?fI=hv?JP=gd`{?9v=DWui|HLTX9k-RrYz;+HQ?AL=Kf(T`gsn5y{92(^B#CqVC^8 zrtI^v(o5|czQpeO@`O`{ZeDxAZW^DdX1h<9WIoA48mS}M3>TdP)<1~B1%4M4uimb? z2p)u~AB8+=;PZbA^d+Ia_QGc~THYVJXRu476GP>-#`uL__K-*Pz!6-fT588a@t^JB zh_uQrpejsQ{gTGtJ{XDwSIvR9$Vg)w!GU?=_12hMviQW2&v!IahZ;?^u_mfNSl}qC z-V@V$K}%T7u(}E8FY+P3+d~E>n>WZXU}5X=9PqZ}%t^r}Ci@p2wH;l7{HFL@SnpUD z7HwE`$NO$374VN?QF$geMNrer*!RbfhS=yn>rKk%^Xm!TkX+>Vx-G>-K z3J62ltsaaqkGL;gEZ_dtN%V9y>VzlasogbZdO4pAzVph#lG3*fzPm!j^;*T!kfi2= z*F^w3a#kBkU8PJwmJaM0ic3mT(lSsq_xk}`l87HTk4jH=Xh81@$qnz2!n?z`933YuLetr4sW~N{mi@o$gWzZ<4sI7gjmbK#N`}|Qt5uQTVpVJw4d)%m8udo@rVo5-k0yc!M2kFa+>Q{CDMlMn`0O&7 z96SlOR<@_7J2l5=$BomvzuHV)@=qT5fb_#1HGKGXH0m>4K68BLj+{ssRG8aSRRM;o z#n8Jw;2uV)d2R8WPI5v?p}tS!%OFOik=<$Y((S&JPuqp%7AKKd`~3#}4joPD3~hv8 zYB|-YdMo3w0Ce;f+hD*_Mun2&29-&TKJ z8hxZy{i`<$03VK*pIYMfo0lf1msDN57aX}cx~1);Icr*395Vvic%usELx;pc-S9*LUfvr%A9V}5oqlG7C9*V(u+xt&)^2TW zZzIS(-G-N z&u|bvi4+GQM^bx8q>qZ7yLMzqlkX#p6Tjnoab^vLcOqiWLZfQnKhMCKHH{(dltg=u ze`LmX951u#4OCrh4lzE#`}kiy%Lyy644uQ@Ng+^F%D@?1xRUz$P>_kZeoP!6-K`Jt z8DzB1E$Sk1-}j^$CmuPg)?)WNbf%%%Rn=HivWg>&(L`!)rzY4Iu~k8^^+6_3DY5Me zmnZBEjtC0BwkdqFW=f0^PhoXs$D%Uxv+1-$TbbnUu1AcvZyzfmX zT4*@MR%9Zv(lfMpyQ-ohq2cgl_s;sApy0QqAbbwZ-Yl$sNR~=$c}qmYAzZBI>QH&! zL?)*u^P z6os@$W4d2OdqqscEZr0L<=IXixMF8!#d_38R`rlc>q&J_9?*26vMOJiqqGyalye>p zmf2pa7Ek4~c$Z5ds-Db)K*7*cetG|o?7TDik0L|&$osBt`rpN#*vHTXhD2P{xYR(kkTHbW^ZxhSNBBl*pA9}d^@w+9v`?oS&Bh;vz6G#66fXj z)&35*$%UIyV|;$t*c|>Z>6cIs)WT}lTSp*NL~d8W!}a-_69r`mIabLm7q&T><#Y>! z_IVbDLfRC5AVG6NXxr=7*pAZs5}i$O+qq? zJ8n&o#YM-LYxy{IL|7djZCR^B$MA*x3nPM&vd3O5Dv&Q}%pIad*{}T&+Z_04s4shX zlUZi);K6)dY5pyk3<`x(>J2#1nZG2Y>O^(!!(=05JVBi{M#8l0ECUsW9%w92oBeEO zd3v7a7l>&RlEuHpx2ZEx%kQiuvOo~2d^TP^(vvX*TJ!ct9+QMv_pbJ0G*OrC@YZdW z7r`C$lhIMmhA6p&fnt6KC*(ZO3gS(OoA;HX6wW^e_YIxJ=KWWuVEMtfu|*D6kQaLZ zpk`oj*mxImzW$pGmINFcvJETe%C2(o!m%PBw zK_eqn<|lGgvnGY|*qpX1>kB&#ieeLkfc_0q*)ExYA42R4^)@WFlvm}-A9v2fc2;TOYSLQ6Ht0LKZ74xY4$?HD{1k~;X$I5riCBH`E z%4!P+=?Y8`^D$1Hze$zmIUlsjQXu&C_iq8AYPMfw!14nok)Gn%T>{yBk}Ck9Y~)d# ziW={z$Q8q>X`$v~&OlbTGE8kICW~^I3oiOKbxaJXK?T)6zSkrpke2z0=C~_f=6T_@ z>gyqJUyQ`(P8rk&(IFN{RnqKK0n|uiog9U_Y?>Ddq(!XON5-KNQ|-+-?lLLw{Rm`} zNR!ik-mYyum!dD`=cE*@DXiv+_N#T&AiOG$13YQ->($l{jtys zi9RSPa`m83XJ^-Lae=SLaX^ui{d!u22d?9(_-7#T|4s*@9Ydyf^T!=RJ+|x@$gX+# zYj^|Y8>lW>^4c#VP$0rrG%lfSDAI4J)b4LE=r5V;VZAAWC@3R#%5N#@S7qi)b1bwA zCyL+qW_*)ot?vK2oXA0dZ(DRAfrFcEjoFX(S*Em`g&kYOkG3$K2h{A!&~j6(a>SQV zH39P;f9e@854`GSSn%SF5rWNIDC|og7?6R3ORqu*oY&8Sr6_$0G^^aLK@=xIClJdy z7W))Qx!9JJ0c46Or_>J0sHAjqJPGabRfbB#a`ykAPb=z1KM5%?wTzkjIcr; zVOk|)@~0Zv&-i5}GhI^BSX`2pf*{jyS(F|%ri=c*M8?dP?-uECt~LCTcBIb)(_8P( zZc8@rE(#gFpUqSTWw)GxT<@Wtkw?topMTPinI}!|;D~O1;~BbjFu(qxVZYcML*)fi zYI#NTfhZBrF-;V%u*F!DxlWl)^rX10Fi*E%N~J;jvyAo$6C0#bWdrGf-YVylz-iT4 z8NZMLD-L)psAG?T)==m5k@oo{K=t-y_iv}Km{UL?1e71~>5Q6DrZxQnt;P|;4{Z3r zW_)Nb^+B6%gulyTXdCfgB})gm2tI^ZWxFqXtogxwVib}(^76=VL2pGwRK6ky(i*wJ z(A0{GB&Wc-`1Ex7Kj7-MF9n+E#`YKZkf9BI!-C@O`nlxV>w*1GsqQax%~RN96Wg%VNaG@pLPij+>sRf9F`$YF+av(q)i z@1mgZkLpsfM890()^ya%=Yv*$0*JsR(xteN+|Mv5C(IWOmVB5Mx3c2l-bkJ^mS70Z z*Db~|nO(2at-4uIX^Gg%b0lw5iE8@gLg69t(=L{8hS1IXJzS#VatA_klVRc1)~*Tm zMj}Yr+xnDU;8aI~9=a-ZMPFLtxlk4Pvx#6^;!Q|p7dWs(KS+w>R)fw^0|Sc*auX zAmYch(jQ6|g)N2g4?}ReBbIx?sP%oBfAi+xXx8NS35HI2W1?e3S5^dtF7gvDj!^m;Y^|$Pp8g>w{m=`)VQE)Xm>20?o3U>E znUyBuD+sQ>9F){dZ%d?mQ1zoF0AExz&~tc@YvG&6JfOL0m5)N4W&C3px+%a|gRuSI z-PX>LFo?DH3G!gk?G3k{5Q21@BE?rz@R z&#TGH@C1pMimz-9-$`e0w)0`(6XalRt}jKY@I_5p9u$E8d4XBG27O5!!2A7E_B@X>VzA z3pb{Wj&fTaEhjuCUz}aL1TWSuJlv#@=+$R0-;lnOUK>;NcumtQ`mjE!sc>+})3nvy zHp9h}AJg{B&hhb6+!}h26!cpjY=v^pGIJENc#TTjo8}!hg3zY5^#M5YN*UW{8*Z`o z;6RtRq;6Wn*Hkms=JUnNsiOYd0P>3Gu7bCmfI>fr#+*+NFy-2xpE%eSXEMA^&a|avsX$?zwK;(71E_ zc|eo=;h-xhJWLX5J((o{<7VQqx_X0PC@dlI8qqG^u%3x|uF4{TLoI1U5fdG-#YXdiK zJeU32_naT3H&0fi4%+iGus>eKPv2)$xUG|6g%|w}FFRq-skNYe>;cQU;|s68+_f}* z1NnTf&n`1x%I!X0T8s3tC-;AGv}UA)O3IdMHmZ41Mm_m5yv2*QIQ#zQ9p$xpKvm}M z_YXhd(8$N~(<{=p%CZ|1${*2ctWJe7rr!99iJi|Pi68;^z?ZDFms5}iR~{c=VRgVO zq8xwPm+GdiO541)nsA5WmWc2hNtXN}95bX>wt^-+%9i@*Xs%K|)m1SYuaAnT%1_Tv znRcDBlaf$woJp%kow1gzy4$)0o`LQ#?WucX0!$V8GOmu zVNln9p!xHim)T)iZ$`k6x?@Vhp-byqBDtzY3?6q9YWVq@Ly(3&pRS_Ajtf9JGq;H? zeB$oSlR~lfQxp$hQN(9w38aWs#hFY<=aNUO{K}ObKDO5AiFrHOoSCxanBD~S(3z3yv@~AKkD^wzInoKMe!G!M?FvAG zv@^8y68(nF+G#3_&g0T=uDNd(M_cpiXe8TFcj`zwh?$UF2KShTzU%wG4bxRAk0 zMEF~y>A&qk#RDUbk}SmxH+fSq#T7k;PXM8wrla|RUOHbUdt`96EQ&M3j^`m9ZmVAB z$4VB{&PWT!CDu3w_kO zdeQGCrQZ_6(&*loyXqmpw!p`b(|@cHt-3AI3JI=Y9?LHD zBf;_7m9QDwYXlFTgXL`mE@P6lAQc=2#zMp_u9UheF^Hzl6v}PZz{}Jm+!hd=c0?O| zylM5p1;eE$9ufJXAXu&Ap^jp+&NzT8QZN`6TPaq68d=yo3KdqYBaO?leI z0*2Jf5pDpGd1o3q((Agi!wQ-u_DAETNB`;#%gEZ$`FsWK=8UhQ=QWe2=KV&%#`yhy zNTA!PVc%0S&rieEn7!|;g3*p`xhnt3m@B>ouiSqv7gbA?mb9P_;RY)NBP!l~)EAsf zkB!wm32Z!c6bH14eKo9NRf z7f8ETJj84dIXYs!TPIroYBpY6m6z$*@-{!cii+0AGi?Hb68tfCZ_x^`+INRuv%+xn z53QxEN*-ROCB$^A%hrYJvp`$Z+M)S+;cH zR34sJ*C=_9uN98f#mWA4?%g9e>dB^P(~V*Wvhz7M(p721r9`7-xYXL#F;@wCbhsO| zSMq!0s@C-Ips3|fmXwOu{)8>LFGBZL9=>Ir@lnmjgb$YQdA8S4eqq`DHgg|ZL~$)c zxQ^Mg%RuTZyB+KZfgK{WbY{n6@bsUg^q3FQd1}@(ckEZ%QknGTYRLPe4w4PKaj-yV zT3XJ#ccKlBe1F?#t_w2vzh-(8;EgL#Om$~|zv1L26_&L<^p7Q#H(MISjEtMX^q6Lf zj&Yy}&>^&#L;uB0B3&mN7nU6YZN@4nUmRT(T7p!&5=s8Sf9lHby|*QlXV(VXixewE zO-m8xn=zUE--`C!6I4fZX_njM9}i&EC<8ZqI(b#|{MddQTqq22qCoMvPD;|_sw`(Q zVu=+jE-$z;?8&;;PS&|%HGVL)K7-5wkQ8_?2hK>&}uaz^5Y zgQxhZH~;Z-dUiniM5Ai-Y^s4-@?WbV~L*v{9##V;a?Al z4u3N+(e@&ucWRgTqxH5No-p|xG6?|xxtDj zZ8ViIXVTj)Me8ae2QXOO4LCWuDiwA6CX^bMn_=BUkE91q|6bo8xGIpaPk|VGj~}03 z_TV^R$+dxpt914KjV%ZJ??dbST&7^e#u3Xo3vq;M;Pmt-?>N@YP+IiOf0E_UV&&SV zI4N5$6_jw?25~Xgkk7pRkW}w-h9}ziTGMj3MjTgPd48|!a&18>eAjDY=IjKqlt~(P zJKB>^gl^F40)^OKBZdl>k_m61N~+%9)clV#H`>no;wcZM@F{7>5k&6T*(3S;3OF$* zz%E*Y&gfDWQ}q%Oc{>7H9x}?t>Ui5Da^^IlC_NVWzS`+%1DiaJf8hGq&n_jMoI61Z z__CvDxGVlqu;!PRRH!2|?w5iY!g+pYKpahAw_`75aIGM%MTK~Nzxj+SuoXNSs*&GE zft?2_k~*RpGwGgM2`cya5u#g)caSgO6SKnDlhpfTHdm722{3)TG_q{c$JjMxhGXK= zti{(DK6RkJ@EEd1e9=f4vrIW!BD54@+lU|{k?Vw$J9${QA52$uol+ginW*>2=Gqb8 z%~l-UK>K1tf5vEWDYfdikU9A$LVOwBW1#tgFrrN5oG$WtYM#`GG64q5;A z4z6Jgjr}L9`u9x)Ga-}qUpw~i@t62NVKrk|0RA7#e`KMVf940D)eOkW=jzYSUZcii zG%#NVb~MJIkcZc8SMKc;ekQ_tJCp5K1k{Z}-Plvi?0}Z<4Y=tuqK+LX?S}`OEQ&k2W*t(*2yFkxU>x+hTR!eZP)k9Bl9Fn7ze987**& z^AhPi&=%Yg^NBC^G-|`S`FSl^{6A&ecXo!G)*LA(dvd2oe$Cd7?-olQRj&Q04TVL3 zvR)#x4)PyDT$}AanXi@3#*Gl?fi4yQ=F)-Hwjcv|`YO24^}SqahS{mtw_)9};;7Mh zHl;xADxPffm9TWa6^kxx% zvL#=gl-{qanV6kYDCtlJe?nWnrp&%gbEfdu;kOxr^w!Km5;l}%3ee!f5Tsq1!y3T$ z1yK3DI-LcCb8PPIj1xn1UVEV#;=6DUk;ILK&eb~1MU>SKQukYs1lq3Z$hhDbCLc7{ zMNFx(CcN91+kegL8I~wS^|+NnBD_5!uMIXsj3#XC?i_`T?FZYI(3h8O$(NU|;<7;- zsml8`iAH-5=NyjR+JoN#)%IR+lHBiY%ZY?@<9m8SHjilZ{=7K#ChJZss4T)Ib+l)+ zc`3T(h&!B7vGWDW=rq}mb(FYP+|K*|oH>ElX7?Z=SmJhV9i{%z{wGl~-!9MjRtZ=x z{M9kcZE`Kq-oUAt|2iatiowsUyWM`uJkJkp$ksw~v_ z*ScnURF<{wm-1`RPqLJ3HBlo0t%JK|-nKiNi*4t$3>ZmJ&5Ij08DCFY=`64GQOKv6%zBEhT%hp*z3DRp+Id(UZtcS~r<|+Zc<9!^ zpSI&Q8vBCJ2%__ylY46z+=ss#ktSF1U~mf`mVncvUS8LR{MlcZXwvwv5;^cvid@q3 z(4Fs98}Y;}9}M984SlnjD2bmP{$12h39wSgt2=PT@$ZsAAe+{h$;~lDpXX7O^!eKQ zT@-+?RVdkZPn8xRi%vy@h9)Q^bauv?2U?Ls#UX4XawN^#Y@#KFLh&u^e&Dopme#oVpHE`^=T^;$w01NIA0#NQL(&H zx}5SSM|T>VXhEV2FGKHOoH>8mG#;o>j?#aGH*~)Sk~T}fsfZL|$U_KL2ooTsbi5*j zZI~XrS11=aI_y%oSE#hNAEL-GKJ2KM$sy=S0}2;$$-dyHpmB%85Z-$pzT-wfWY~{! znud6?A-)EC)h}0fl6ZJ^Z2B+vJeSmWRfLm)eMfFz12JrsV20{e385cPRcor{oV{}YmBz{z-%nHaNxa)NV_RKrAei+GrUIi&+Jr~(|D4h07i z?J8JEl#v-y_b;fwE_=t+xga;jjGKj3spvD<^D?k@iL~ge(*86_evKxoNbA~X zB~t*9DZY=s^~%bxYO9DiQ2)BB>F*7K>WZ@i){Fugz1WPVUpj>ubrR4d^h`lyTs z>q?x=-`duifQ}|o+agl^snyidsJC99r zop(5%o~`g)HbSPGc9YV*PQLM1j(YvlfIMn9-P!nG4n(y!zVa4xGwp6AYyC7dkhgj9 z*L*scoEr-W$zJp0m@ZP<+3gs!uxXG)z$kZZYt4vr++O9IZgO7i9r51g5*GX=-q~Q` z`!Gjaw)}`V{(8a&^)bV`*O1nJOvbx&v!DSRh|wMDS`Xewi|7N{k_`kw$i)g9lV~14 zXHB{a%BccwZIhmMyjJ~oDo0XXagy~t7&=~$5vWJG_fne1aZ1Hd{9#u@Tunt8Lx=r!H~ta&&TSM>sExrgkirFz|K2;Ru@_x5|RJ5_`i zTlAN>u0~zPw)dAz5I)P|^M#xvs@$d4ja?s^SLsEL8*~3Yi~ZF5S+b1n`y`%}YhKf@ z#Ufzc7zG}CI};_Ema69!0@)K3=$P$?)#1gHxK+>1KNQ8-Sy+Zi9xh(ayVrJft^EPF= zf4%T!EamYFh&Q-t`hIh3iGs2@FeynFpvqI@?)SFg4iScR{xlIT)=AVGpg}H?%=KF*|6HO)tsLDKS-7<#`7qzy58bZ~G6%2+-1r8CF zz~Alq?kB38crN!&C@UL#hgfWo%xFi=`=TX$hn0U;-@UO|J?|;}j7juspeo)hm6!K} zviN(5o`)-AOPZzwmZZ(_-CYFQU|eeoGD~~L5p!&g|1coQw>9Y4kw}pmUc1^C>$e3d z3ISJ!%S*X^c1Iw|{VeCO*tI>FzCFBYVg_m{?n3$UwpxK$DERE}w|B$S1CDOSvu@MQ zmOMvmF9}pk6ewBzQPqFE4~dWllgfj1Ig-Y@eV^8`jvXQ>p}+VPK5-c{2z9a5+uPPo zsQ6_B={5e+v?RCmM0ziFxNtj12_&`d<9xuhG-Um*LJFVSQXiQ_#h~rnltI-TukUls zSfofSp4T4x3uIIF#g)o>U)>T>RDgyp{Ea+DKfChJBsKA3Y@$8K+jMgTsR!a(_>PE2Uh<(;n-qy!z?-rfVH0bFJK41dA!5fQ>A@%Dt&cQMc2jzOfmz z3|nl|mhsSUHW!38`H~B)dgVspBm&&>jU2>dNs!gr6`_?eXHP=6F)DhBF$3;qeQxjf zl>OgruU-`Hde^|WNk^$%!YFzV%s>ZT2_Ogpc{sFTRJZ;ZZtur};@vn>AO{CHx0XD?PZx%+S>q^@pGMUNs_(|{4= z2o8b|cqQ*>-2oJR4&6LLe>Xc73O>Y-ilb)TiEX)m#zH$E7O33&g%N)T(ML8EQ1@Pb zze&LVZ0p$O3b)lp#9Pe}llh1S%JlhFHciW`;_{>X5y|?D+R$+0h zLAUTuAV?s%Yj6lKxLdHnodkDxcS~S!3xS{m6C^-zcXuba%i!*Ab0&K~|MP#}#koFL zbJG{o-PKjA*1J}f9G}bPCqgd%fvw>WtrtK51x1|I2KveKjDc|Al1KBxP-kygd+veA1XwtZ~2u z5bpSG%jM}}cp`8l)f28X?>s8&LF}x2<&ybK7Qit_h+)&cuMGYM{bOrB=X(l2L{POu zAUcANvJ<|Ger)u#CY|Z^6VRF1TpsN?*;5L-U$Jzn6BN{Y3Tzn6`wKRM;JSF2oVmCT zMA9((D+au=Z?hZ`d67bI|DJIIqicUzF?%{WPr18$`Q7ubJsJ7sflS57ByXcTBMshE zwzv)ei6I zH$8b;Ic+$Os?0+iK4C3pT<-0+>@`jB>yA>dD1V<6nzIlyW7@Gpp!}tNRDg8R5{>%3 zR6N8Bb7iHgvHMFs+==jVG8RdNktp<4m-N6fqhiTU!JOkq6K?T6JEXNGzGQ~&{DQ_U zRn&~0PxK1?6d)u&JL^7H2i&4TU_>Az|Ug^Gm?%wybE_4Z#T#oLQFi;BRBBSUEJB<5RGNsGdbs|hX zO#S0?{DekyN&y4h9&>l(HJ<2zX*w{If_-Y!GgX~-)8tBW?1D}tnjnYEz|J9nhgptA zoruigc!RL~c$|6{`81lv@3jGEh&^LNi$xg+vEEApGNjgjoxpC|hrS@jU< zChLtprOgd0(bN(0q)&3Bo@$Q6$r$87zIRBu#kGBr{3mDcI;P5r;~(A~i8*!{U-THS z^_6MT^v-k>fvGLNP8GNXMzf8Tw|autcu2U(S^49RHpq|dPkc^1L=CQ9Iki7yoQ?-U zv|juLa*zE6iznabG3U2<9Es^l7k85%LLKrfESx{4su8cKhTmbQ-G9)-;L&iL%La_? z^qj;VVc&jucD1l1rkG=sF@7)JBwX}?#AXu1WcqGUk>Fg!=HoxW`1f5>{_*WMb5BoW z%?+L(xrnXOJ7~a3aw#q|4!4(o@GISGXa1x%rfM1bhscQW%ht9CSZPdR;wo9Ay!h~3 zkul{LEd`hE;zb*lnORG4pATN!2i*%~HDB_m>q+|$&l>Oc;849}D7zXv@x_+Dy2C{8 zZm$@#$<1#@R+wW-ZdD(z@J<;2elY*=R4p7dPHJz%CD1G*MyW^b(DO=3wW2~zMa2@e z)?nqz9c-l1Ot=|oEt*2+7EA2Uh zjzx$!Iin1{<7Y-kVYHw??X$|V+ZtL+bpc7N{*|_4%_$4Vr$VsVKKLsZYALw5OT-;Cyh7oN$ru0=rc|$SL_i(8jG!rQrD9fmVDwm$W?vLO zkwBru*VWptG@!RbdT~t4mWKEI=!sT8v!ln z^Vp#E-*2$euoO(4k$>RhO0+hv3E?%w=|}bn8Tf;+(_36j^X#R=|x;f57d^+~Xx#)i*~Qn@(f)_1)cF z{X*?JP)&XPr32r23a_i1o1BtT@6u9+fZL8S=io^e?>@w|--RXlEoDlnmmMoY=~SED z=kWQVWum}9IUbK9_8ikLl)Ac!>7p*K5C7!;iVgd2ISs`|^lpac6NZ{*Go~(0d(-#h z{KS396qPXa5Mq6J|5`W(@xf<s@Q0meUId?v3UlpsE%)!&k*Lm+YZ~2y%Qz&uO&rp|O*1uU z*~BIRq0-OQuVu~Pm=aT4(nS}vA1@CZ3pTwpOk|Q;xJombg$N<2XFS=s_bLS^Kbs08 za=2z{hNLF;r0$S7ISNB2FKnaimf${*E(XTrBs{i}8EG&8CpZV~st;=eSq67!7N}!E zxFX1AO5<-HevbM2$532jb!eC?HUq4CRp*~R7c%=tfi_$&ZS%pA5l{PmjxaMJvhYeH z65F3PlX=jvv^4T1j-HW`5n2TTE`@^4AWOIbUwM-4S?pKoiVrx}G2F&#H8V3aHtIbm zz0}F)h(QfG@e`LDa#nFGRI1-gA33``Ht2J*OqmXB-+??Fl|aqk6xD8ft1=gZBUK1J zAdClwC=Mab>dQS5?4Ub|u!&D$+5PrKzwVr=X0Cx=(1PFM+E*<*a25X1YLGZkpY4oCWac4}_d4(`~egLy#~wgdo?w_?HsW0$zCb0)^FNq!@c+Z;Y52 zwMaovknhVIPI5yVz~;O6mu$C)0>2!k1O_h%%DAg7w_W>w{%BQfF1h?TlyN}wO{tMC z4))vPr(&L4>G42)f=Y4%i(=$LfhdKCW=S5sO zDl6Z+$H)aBogJk5V`FRDStOl3@$;lphkm{|#>=ErHTUCIGAqN=&=ca*kavyyKm!lL z{yZdk>arva4L13NhxWB5(P!=m^b5~G>HN)wi!E8fFPWxrK^Ga_ zD1TVU+bMvFD==2_QP(0>Mm(4Yqe%h$7aj{P$v;5`(NvUQN!ZgBQ`0HG_UEvM`zu;> z{0xw1Hl9}B+oEB+Z>&s=Z`H-XzOk{O5i^>(IA?qsxUsgMrI2n#B8ho=vAy*CP^32# zB9W~MrXzx{xW6`U4}5-Iz>sjbNrrKMEK9?i@y_8m>EnsjY)#pIkYt#ep`o&+CH?2( z9{__UYlK0k>!6+Y$ZE(Qy>GV2gu5zRgfA{G2Zu*<<=arOX~n=}gZ+^(bkTdIsg7GM z>Bf8EcbWuvs@nSTb0nZ%^E((>(z9Knas)qw5K^sD5Rie= zWmeUDoxMMfa@X6jj1l5$OX{IbBZ19Iy?z7vm=tXoq1SjLPf+6fG)tzIYe@L+mkyag z`e5ae@Z0DE=izb3H>55}kr(5_BhV84w+hV8$o)9>-;b%*4YJ|S(TbLo&r!3h%z{1Q z6<5mjY5Uk3WkBRD0jt?U@cl^Uqln!F4QjkXwnqui8TnWcMrNm+hsm3Fj(_wvPrT*BQ~xHi=O`5=%Y;M%V3!GyT@Ghy!dz|Q~%uEtBT-Re2R&CK#3AaDR^u5@e+G@ei04igNCATqF%!|1Kr}dUAtda{-FpM&!vQu@a4I;W- z>bGV(dt+LJ+Bt2@g6aS8HmJ$+pUe=EudH&qugkG6DGr8kh;Qc!{p(Gb;jK?*XXn!0 zRiXu6Q)nwzYkRAE3}Wb31#~mT=cSKN+u#^-iF=Fv_G?SFs~|~XN%2n0qnPo*MQw@h zgRocDT!OaOtNbzC#+|g<5~JoXlv#~QT?MO_9)_s+u1MTiVemj^98*lHuv2s2fV@i7 z2^^lG?peih4BC7JPzjE@7FyWl$eC+&nNHS7O;noYxYw=<_Ennyq7cZ&!xwGVA7>NK zJbdIigh60~;O-;+$|v+biHF~rZ(2>uKqa?7WO(7Dk_)lNCyTA^?YHeZTgjU0n@NGTr$!a_X7PO1K$4Vq2KoI8-->0IThfG1J0-@*8$e@KB$Xvc}afR>engeIi!a( z0XxRAF=`>^XvKuGoFQK_>Pp{CWUByH9y$xnWWvNmH}DZyII5V`#qX)=%H2Juaj@0^ zDLCSUFIBv?Y0|MDcthYPohsTgraOe@Dgf9Jq>tMuLLzh3!)Yaqug;2E#wi*?lh)Tc zT1!+g(fP$ls+N4;h^I9>p{gP6^GU>Wj_K6wg^)V5#xO}I2kQl2^K<0IZ?_1&eM8T%(O2C+g+H-%MD#L7iNV& zl!ajYAz|N-HLpg6ifJ)eyx5ZJ^*d$#*o6{*JG5CewmhwPL{oi%qosx)~KO(#FC zP>iDJ;bTs@Jk+GrERgz1-m)HBU!a0V?lXcbvsmcgx0F`M60`%ex2$~FW=p{x#7-t+4Rbz427ju6b{pWTmP0-AJ%?y0Jc%JK+1E1^4oieR1nhtD&q)7KR z|L`MMFLfy;e3?d#)!H`nu+Oa%zLgh{)jgJ53%WUt+g^9w0kC!mANZcMxUkTCC((KC zHgq=-nxGd+W}h(M3hVX_Q9y}h`P|-|6g-bY)%9V(uqk!MZ`inpPLaes*L{V|GQbUM z>5ggHe-4j6-d16-g>pgbZKsGJjzL@KuT!?XyDkQwvt&6%(RSp@Pcsd+i|ps8m@XE6 z%&|Q9c;1_PlN>*iWJ#M~@+J%uCN>m&bbczYG|ZptvlEMXHy_(&7v!ZQ*U7Pf z`r!3Rn+1Dh7Lsjr%QR8bWSbl5z3(R}alX>!zY74ggj&Jazh>J&_h7?fctumhm58A@1aym1^2kkBg$0Xg(&B35 zeX}%;S1!o3}hr`YC;!uAzTRr+9ED+4)+PA!hNw%7LAFz z3@@e1PvQ_Pd8NB?ILeQJMN0-!YRZ#9IzbZ}k&kDDifzqt6G8V`E8)Bs+Ykm$_T}u- zU*EY3l-zWw8w=h)lcF1919@t%T@REZL{(^bcznSp@9jTR)#VADiwSVhciTQpr#_7{ zVA`BwD$O6B@h`gd4p*nuGiQu+bKURlyVSTeg8ZoHVa-oFi{b-d;6u+WuDOpI7InRT@U+G`t_aT4xZa zEQLyHri%)P6lQC9Z?s5M2o+*GYKH&(ix+r{D4oRJ1%*ES2%qP_^$P?GB<_p(kN8nK zcJf}40UCS}2a|~wZ_#_zYtwB`{RdNw{QIZV+*0c}5{sUm?F|JJiG@g=3-m`kB%4qx zHJEzTxz$`e<*Q~Zytk1&38qm^Xv842Yhgc3heGrsXzKAkrAOgdUR=s6-|y3LR5bVe zS#69vDveGPyF}h8T~e_O#WUj#mMGa<37@ZYAx5jWQnT?w6{BXU$F-6r*>A-m`qq}2 z#-?P|ca`Q3JJ(QLTP6wU>P2@v?V#Dbxf6Tyi%P6@8~0^9%X?#*jWzvj<3iA-(Y#6c zMe;83q-B;7M~H4x^o3~2YIGxM11mFt?T4R*q{b0q(sv5L#) z=Gorp9(V2Ojz;Y13{`CGKAlb{WlDrK3goN?fvw-a+oxEbhLUCpmbtgPsYgn(RE;IULj8!pG1EcsbZ1iw$JDPP*u zmK}Sll&f?~cZ!!M^lEGZuf(Vy+QJfNp0?*b0au^91WjJW@{1;4E+|L5&c#Xq zkdTh_c%1@)-?0pVOv_RWDA`cl;L5TQ*`bO+^P0Et!GAn9D3EbQ?HGS^A_=8g6Abb( z+UgF)T?IDN5g(C3l$&*Xcc?pJqG*m-Y4^L->jZ69Fj}gj^nDaakEbNI_^}A*0f|ocL!g ztpX9(N7ey$406GqjoxTfOiZhbtwF>$Z=Nk-Rs`zH@ClivHf{2b0w(OT&`ItL`q=G` zVoAK<&sn04h5+_bI@sMXu*?nj1SBRvoS$g7R`Yz&V-)n~RsZB9Wfpz1h4-YqUI;_r zaQq5dcse~H)ECs~FU7Lk;_q6g_>`=de#fv3YP>6UNT9A4K%F11@GxvgxxC*>`H+`M z5KK^yt~(q~020Oot(kkiCY~!_kdqQt+Gb#>bsx6+qq{K3J*b|r`*JVXPM9W&ova9c zI)-hkH1Djpr{z~+(@`BtCzXCa$ziFr#oDPN+urT1ad6N~W5RpeOFaIUh=?7IA`r)j zd%1RSRh@ZZn`^dttt@m+gREskA7p1L_4FO1MqCTMW>S&V`uVj?&hyQKbnJ}^n&iuO zpy`*{jWdWs-nT2;9AzQg8&@nsDAMwf+o-b89N4;@r+(6j%P%O4dk}9RzUDH#!$RuIV{_PkGN#f^~JY(BS`L>82a;laiJFMKqj*@hKI31htxsPUOP7D(ma`h=fSp%ZoNYV@{0!qy={=mQHrWKuItj<|(SMDIz$$6e_#FNW%$u(={??^h z#y1tVlMHOjTkleXjIW03F@21f`18Kx!0yb7Td>ty2v|72I#~2hC+WaJ3Wx+{ogZu3 zMoX*q#wUgE2-@sZf}2xASP#)$dZn;PXcmif-To2;RE|kwgRNChv&~4dJn@tjw#NztL`&=?8P+Ye~d@G-2U;%LETfrAo) zk45PevqEK@{#dI2qP(ATPT!c?m%3x7lD{I?J$&H}w$Lt~qAQ6G|vs zlac!n=q07+zQk1iAy@E28bFOBk7WCCPSidVu(i`KX1rLVGxD%6)b_GP?6@x+mSNZ! z=@OuaJGUpXtp0DXpi84RC-*V5BSP`RGuF!__fN`twKU~jB$<#2o_lV`pE3zwZg9q1 zT4O};XXb}zFBfueo%@px8!n=ly^p%z*q8FHe=z9ZI0TByaQ9-&Kl=} zo}rZ3-1`yp zYMTeU<)E2Q`hLeAPy4;`I>{FO&_q+tZ-G=t_PvL9E(h+08LjcUOdk&*rffyBi~soRoe`r^Xc&q*m&Dl*dt>OKQ*{wLxWO}k zXt`JFya;l)@nhl0z5n~PNG6dP`#IC`{ycps=$kx7+0$164J{3v$4IWe)Fn$Mu47 z!YZcbWZ(qeQ=*pyUec*$?x)wGe%7Bsx^_ABciFwSx>6+pXzRF0*MDnjfr z%A@b&A{2ZXSK*%>jRCL9tt!G@A>-|x*Uwjbw}InL>8oH^O7WhZ(l$8SaWjsIW)Gs; zI~E%*aB|$&BepgU$?{2trMXhAknUD*%f6bic+|NVw7vP{Wqc>8a(R{;f0-f!8?g}S ziu5|Q+*VmgT0(N2TBC$cFhI6RCRVqFj#&L*Q94}+CKk)4Jv z$=O`St_0sTlKMAtJQWW}#6h3RMH%w{W`tMr^R=|DqhK8rTD2nAW4)_COAV(FF5o2q zPNqWJ42ihD`Rnrp%d28vN?;K1rxk7@J? z|6Ln*u$e|=oq&xqB6cE~OfxTr{{_P1Nyl{DxTKk)6A&U6M+!tcX98uCoQ?zBk!Wtf z&q)O2{VrqpS21;_Q-0?~QJ?=-W(v9^U350b@X!I!SAG9e+^6jc8J{OM+`Tlcm`-R{ zabj-%6H793JorsDl3DCD?#XH&RPvpKwGIc*iRl~xVRQUVwiTa%2EEuVo;Osy%meKm z6?e&Nt%X;v7uVikx+F@mz6VwZIeUDdv#wQB-Eel1IjNoJj7e20`(O&QR7+c-caD93 zA)Bz2XTqy$1_=1sf^5uI(qEIklYna79LEDG_-*p#Xo1n$G@no*Z&85C7{GlaKR0Vx zQo#HaP!N!!?LwGyJJcaFNw_)GA)~Is*-zB7b@66vM0#1) zdzt?jLw_-*QYyStRdF?eB)y0zmh9%f zPYo8y5Ba6COzT7n$->Sr0*v41V{T~adJB$&e{y9o zo8W*`J{5(T=Mx!qOOmGG6-CE4H5y`$8U(pc%a{k%4bG-Njaqs*xHz)%r#&4M4mPBO zUE@_b{F2`eMY|*6>~zK$Q%_hVFZIFX?vx3J9Br*0p@q#mvl%HVZ*cP7e21hBrC}2IPjPPI{_r-EfHrRx}|Sy|6HNFp&Wl5AQ1D z86tNl#zcP`hM;0b#-l_5SJpHYV{gz7gc@i3)Rd zlxB2tWAD=CC$Q{V-k&kyPUFaUA{~5aq0m=Gc8rJFy;9m|k8ViMHxr3NB3slIXspk? zVqW`lJ-*Xmu20S3N-2~$6T#j=hnOSRz_Fe^LG>noV?^r2hjB4Phg-g0UuGXtJGB_W zj(baxGiesJl; z>c@b9R(_HS z-~EmRj$gG?mjMgt4`@Xp{^oNL8W=Bz=SxsL8?~I15nvq~)swVHGyD`MrxrVhIlqo{{A^C~~@$b8X~n`$+od>0WrzSGZvK zl5IXjaZ4dEZ5<{=t;P#z)LL|6q3nebA9Iupi<{*lgm=g8*4HWh%coT`n#@rXRUmFx zZVyx5T|sq@>WAvd1IZiv1|7-^>RQr$!?7%0U9QF8dC>W3KVDZa`;5~pUmm=^NuJqE zHk~-lc{71WOMgg_zk2!9$jBUX)!?-*`|sr2$Ly)i z-)t7Q(_(IGu;spMzO_-2+t%UujChTEm>~txK_R)FKCoy1M^L%)K({;gaaCliT2vP!MD8C@<(aXsQXzGh%}dfu2n9nWa98Rxoh{}MC` zf$ff;A+y2?`hRj|U9Eu#3d9WCcfQpXH1LNS)vJMf7=|Wk9sgOJYP3>$xH^`r2Qc-Z zox|dHzyFKi^K;<`YcxIaV^n>!GcBA?1gilX;$>;B*yKVU&}F@>jl)djg{N*S|En%P z|Hc#Mtj0smFp&#{rORU?@};!L$;_C;KVQoXkSCgVr$#|V0%E|T_5 zG*0>G-);%{S8X9=1)O=lTrGTd{a`?LzXNm>XlFKn?>Krcv}-t9F-Qkap{ZGLPFL)2 zJ~sF`lL~t7kKNb5{IKy0?Qs8**!m!HLK=ke+;sEPEnLXkW!3N^28pUCP!34^N8n(X*ic46X6{`P%%G56GL#*m1rmetflW&(mR#XG6mAo;QP}fG|WH z#B^lCKad_zx&8#;Y|Tyc??+ZN5=ku2YEJW81&^QLV1}7-c|+4u8a7*5H3g!68{ObN zmpy~-)9}4Z7;g79xMgP3(CUR!x|cqmAG|Xo5;4b05fzBNUcgZL$o#j}I+70X$&tqD z8dM+Z>}RHTFN+0@TuAbAIyS@>1Kmwkdn`qVPo+-l-rsB*W3I4+F+OvN z*I3+@*1KHqoz%qD;9x@}{4-wAiB===tnj79PI{eR_!q+oE4G|&Ik?*KGs^=&Vk_K{ zl{Dd#T-^%LCZCZfZ|0jUGXdBJhobDTWq<|a{P(?;A%axtOB43(s-0FzB0u;1sSfrJ zd@SqXy*kb(vBKUfs=nHX^A#;bdbf2o3WH`RX604+{IP*S{@`Zmz$JXZ`lSUvt-dpp zq~C(T)k2CQ!~oc*RPS=%!7rh-O~z&MCpUoEe;7lJBCC6m()E26?ydn3NZC>-Zc{I< zjwXqUMrZ;6Kn$pEUBDZih`b?^&iJ}Xw8QS>$7--y0> z-!7c}aJ%+Sfa}N5H>z$T0b9lZnRsK_X2zV0C~Nk9+>CTZ38~jM$ITPWG|3SU`WR&J z(W99e^DX{JT)P1Cu}<|UG=Py$=>lNZxhif6q`*O5Ex`f#}8V6j-3h&}V zp^9*eXo8FDtL>5{_Xv3-{9hPs50kYl>2_57+hp|mg28P850kBCf~aA-MVDL)F29l7R$5c1zex zet3y&2MRE%5MtkRZKO0MkZk+Rn=K1+)9w>;dtHviGzG0nS0mBw+Ri*r!Eifi8C{|=w_uvR$QHTaz%LDVJe|j~%+@~nN=$-BV$&ie6T8ces4d?XkKtb{< z&&#{`XQ9`XSEoUZ%j<6y{G0WzHK&ecNx3DW|g0HYo zwD-Y&D^Zg{_a$3 zOJZ~)(E6V%&`2}GSI>ZQXeZy=*66L+X0(^l_RJyj6z@=s7QZW+$?x7gF4@ctnI{a+ zXy;nhbaedo2z!m3Wed_vZz(_AUVLl{V8kea^Ix_&su~-P$G<_M-%~Y#yls8Kzn`bB zB4DAfvV)z4$hieq8aCB!Nd1z!5cIU0R%A4_*?EiKWcU+H7IG1T#K82g8FbkJjAIr~ z{`~p#MC#O0g(E^kJKdb3B3XF}F(ftNo5-K5{T+w_S~M8gPe^A=3IZqHfA5BaMm z^!x+BZ-a%U<&Qdn%3R;N{=l?FjH!aqf>wJp7pGaa_ZIP4mghbOn23hAKgOgf3t3Qi zKBUraY!tifl$y=#09gn!==trFNruqsF0cJ!_3zFkV;DvIpbH8Mo0Dc$glhFiHV-QI zsrPBywy`U)uqS`8&Xtz7dJSYc>s313;&{_PvDPjjmxqgof3wb?i{Hw64J4O-&?lVX~%X(hW{1 zI1|2aV2a|^3xPRNI0m`t`9?1Yjf∓_v3dz-ky5YUZk>nGy}407JnYiyjivG>PO+ zMWyXviQeEm%eQg0#}STbcN6y@UqssCJz^pij*OPDligMqmR^Je=2Sc%w~Kxc&`$~o zK}Z>ofQz|UH(YtNp@3^(Z};I6cP*a=6{bu92~Co-s5??} z(QGEk3ZhU-flF-$b#gqo(7o%ZI=bPYu&g#j4IKWqQ_o6y%RAt;Lr7LFOQD-7iWo)LRDRi^QAP z(7~lGttBb#Fv^caL(bBgqgXdzp9VbF*H{{L?!I2#J==bLn48axP&SvyLb-i$4t<1d zf7(&Xie|SE<}^sJl`X!a9jm3~9!}ht`*u9uPNJ4mi>s6W)$L!H9sr-fLeX1CWcmjW zp}^?p{dnueQc?QA`BY76>!4xau!i1zU{soaC6#et*O*h_WVtg_*9_v=;CjYAeh|-X z!P}o2a5h;hs)7FUOJ>9Yx70GVe!F$zIfS5%Jq60Qpm4jI{}d^izhXr3%8uCZ@`}5c z`3XE=^&Z2gjB2db{c#)*hNZJwklg-(?=RMURQsPSv(VrF_%~r9{@;3*|3OLrzq|M@ z<*g7zh2h1ihXhB$+S#HGLZ*0t$EH;*3-nRbeH0zS593h(c zCVD33ygsVZNGg6%T}EdI80hW(ffUWo`Ys%Lf9x);mv%oUsqfou*1{bi^d{DkN&;rE zp&Y+zjdPC`JZIdqRh+$Z_ImYhbIQN%faqS?1O~|!`U{k@RiDuA3Ev7)eRl^e$C2?W z>5aLlP!F~~a{Yw;^Wc7}*sRTkq$ljqRL4L!8#bZS1ATWm-?EK@zxoz~HLW+s%d(Pc zJWhcDv>M6ov3D&oV%;y7KtIYObnMijI)4xwJDp5s2JhkqOB_40?{AwOD3Uz^^8JT` zV>kC=73TYDigK9)vN0X`N>uWX`Q8X8&j~1b1{&Tk?W35Z@i%&c_(2(63GL6XtoNi| zr*}EImQVd~G2d1hxpNj>LX {yakEVjkhD5R1{5e|v9ro*vGOar`9J@XF8S?s)t3 zi$&tv4yxLJ`a$5Cleeo?PocuE(_TL3%T~;bKi%=pr=@ewa&yix93sSSGl)p;F?9MU zcp;s^y~cQvCF^&y?@BW2vs&NqObduew8)}vbRN6^ng8=qQj+Edn8Kdm9omSNA~`Pr z=3g-!ZKY(gj7f!W0KlL!e(kuT%m7Hy0MT?+E%AtPk`=T@&>$DHgKl=4NZBm(+ud^% zeOnv}$ACgN^tXWc2)(z|R3-k7`kusD5k@Z_%`U@|`EorIjLUq2QeX-QN`Iszn2#HU zD}~gA_D2dzcXPJoc~{SM|3U&R@V|tS)w~!~ zF)={6Fj6UFA%Q=X=v&Ta{rhf4HZ}$>F5Kc7;GCnwdE;B1$8!R7nz3IB1?D(P5@1xG zoofNm{QL+*eP9oj-fNT6tE93O>BtH;v4+SuMx*Av6PYDTO+V=H&ts0#6@yKfjl{0G z<3+CDo(A!TQ|>P9ds{e}w)mw!56Fz9bNpc2bux3ZV0ZAP$EBY;PCNL`9|+DwlaFYw zp(Ia4)47=&*AcR!I*eo8&PImp470UcCRU0Wd{>x%>3sCRn=zdwU+KI7lU!A1?te2b zaDU{^3R*{fc^M1$f4JYZ_sYl3SdF}?oYCAWgSINHnY(qWv|P;sq8w_IPW1a9_7!y6 ztx(Hh*8=$t!v$kFv4KlV!gup-E$1%5K2d!#|Fxcg!H zmutS++W#_b5F1?K`J^>IzyAjguoY!eU-rxaCv#~x$4i_WRir*{1^Dp=QC-h6Oe{`6 z)%+$T!pBJ!c2PHpxOT|GJSlqdy;jFJ6Ps{I1HZ7H+@&i{IhO_P`n3f-#|yiO6Htyb znKz4pay1<2FO;{?x zMMED{+%QbDyAHW!=k8B2`>1aY^DmxB#nk2wF(`a@KCM0&OBNeah*Q)}evy~=^UC=BMYJEW**LA+n5gZe^7_+opR@9-4qN!4pR}>E zI@CcUrQ$<-%tI5I=c!27*C$*3Q3{8@4ZlS8-T1B%%h8sZ{CSXyZ~&k!v-#yo>*Z#8 zO4zyo8l15)X?f@Fdk-uDA19vl!u-X1^75wyS$`xopbOrfbgtj1A%3DT8D1S7fn2|V zw7;N_w_XFvM|FCKl+w5bg;QDOYEF5-xs4qv^w%)j>ppS5DWKNM^AS!kuQ}}pq4jf_ zk64ej9?Jtio&4flilwSVIOd$RUMZqkY4XbVP~`~?XXe+P&3Z{ehqj#45PL3!=!+JD z+2@cvw+5~<*zYFycog z<>vP02z9wK0_q5sU@6U`t=4*@&3!9TE9is47WbW$@1!*UeqLYwFTZg|_wk56OU?*z zg!eln#ZPHRD^S|;B?y`m`A8%6ksG~eAAajCv}~mtYI>jSLd3)*BH%PagktsM6?Nggn-}c>#qCHd0U|wgdKX)eOzkufo33?_Gf?$;Mfq6svI0GlQ^<8Fo^f_Pj zeR~=Zm^;#G#zALYp~IWAvqh0&8)w1r0TzkC=4{+l?_()?rN%_k6POTuopERb7LB75 zBX+j9wvwp6`p-Lrr#Dh}t5`U>o7PK1VN+2~!*!IVg%v=nRR1uBpfWDiPSLb+W;W}89zxVzYDi58-GLk?7?GtkJJ=wTMPjy*Pq3@ zpe#R3z8Qztjej zT-5K-zUQfR-l9C8BaqW-X{eG=?Og~#zoSl;sliod*T3tnoq+lgT|JLQhHSnM z@tz#mBM6z{3FkX)2s%s>%}X5Q3EFcL&0REp&#j7$jZXkbC?@iB7mFy@!;g@WGWs& zvzq5Si3eyfMLbrFZK%1DyVaGif!W*>A~p57!pChJm)dvGP{!IZ{ihglq5t{6I?q-; z4-X!K=)Yp1<6~`sv$>fWo7Y=#DDeNE@&pg2sPx!|MS(v=MA6gs1WUig8Lh=5@ceLT zJ0T;5g@-scqze{A>r8+W8GM@7Ojcigp9gd%v*DnckBLnp{GqNk^F;wEoA0AG^*)E- z(XVT7mQF+&L^A@HJ8TK*-A)^)pLNrb0#sn*=!~Y|4`hPO;*|-Aq+3m#Liqi~f1(bfNgugEH0HC@K*QAA}K$S3`%@*e87$ zO>0e0?(t&d;f5*oK=HP+07AIRS00q?lS2jBaqXNFx;xg=#ti^;w?d9csGNO7k$O^_W0ydCsN)~I*-vQ zv0QC_X3}`hBs#Lk@?xWMPD5`s0w4@l&CQ%7;X|@xpMZY8Qj-49?y@14K4%p4Y{Ycb zl_u;{g=OEl7vt-UChk7Ok|q@|u3YQ0Wu^&TGsaRMIfV315wl0Qh2Ys3Qh9DYa5jo6 zrW1oG1)gcohpwHeX^F$Z#7TkAybOPMUw97A-pm&6k0MbS`*#)N*|^5Z=SxONVJAln zK`=5=WSVZne>%L_aSvS$o^3UW)!!7(Fh32Af_?=-xTh>1+!r@B_QwvB51*f2u3dA@ z;@xS$cTa&*McjOxPDpAyNKm=5i9j!h#vLRt>3%V%= zE2ud)Kx=*CY_LYQU01*kdjISv^{}m?C;3%2`}<0+*V zUP2ULFD^(2`}8k@6uKB zPNjSxiV7MR>5nPfEK@(F{`v;s2f-9Dr2o&plzk`iKlE47wTeE#9^a#w+c&!%{rTde z-+2bgg^l-ac>k}Rh zNDfHefqH=0=2zi4cPip~A0uIT@mf=3nw)hATX7l(h_Izu_7u_$dZ?yv_! zQ^o{si+Bdw*kki*{{}U5XraLsu{JY4_ z3?r8I17|SS{{aU<_`ZvX*Wy|%=`<29&QA9*XVRec2A^TIgtVZTZZz3pC#1n47RVC6~CHmAr8swVgu!PnkjRukHz_J+G zltg>3EH0tCQN*Pa!3l@qsEDA$tvnUT)1cy?V}!VWD+q}VJDoNQXPu3hJVw`6KA8a zGhhwLV#UiJ@cBC{$?e&R1e3VvJuZ^Q{12D+vr@Zd8~YrsIrrKwRLz*dnsqK(-+ndc zb}&=BuK-_iDlyR^1j!3N5b8gVUJO9h~|9TbTC6ZbHUh!a4oYNfaHQzvDR#odI3_QMNB#!}`oH22Z(=uF)nj zxXVsX@$W}==w2Gj53}s8H<@4EhtaoO$e5mq1UcOp^o{JB`!=5}*iTKn%lXUAV@VFy z3tv7A)(~npyu*wizT*A;X><_v8WJ^}EAE>>pY&*g3fP)K)% zkDJV;<2n;ox`|CQUgf3LdV;N@ojW@*>gG#0|H3XL+J(3f;zVz(XY0#<?%;z;a#DK}j+jP`M6ZL9KMMD&e%>Nq&-eLkF_E_BX805+OKJ7(8(j=X7v! zXweVM-Bl@TQWM(M6+(bp#&O?^Q#iMM3?V1PsVr+RI#(G-r+v=58;)>H2$P72?hH8h zYOc9Bo|-)?SU7btTXIT;B=8d2?GCQHau|a;mayTikNE7(rDS*QNP_4~d@ctuBk$m< zalL3$yoTvB=Ce?UHM22}_I)OC)ujVymtaMAO22Q!WUZtua|y3q@*>+(+7c3B#p-S( zx!(m$xMBj4JHO!L=jL%NCPvhgQHYlax?Lpt(@{RQJ^4D*S7cI_kxaC~A@W;}wf9rp za&1p~rCBjL8mKBh%$60)*}Q2FnL-RXbV78e^km#+7cr_=Eh`^=gBdGD7-_ADvA9Ip z)L{?5fD0y$Vr-vuk|RsmIsaSUd2|}N>1_zNx-|i5NgT$=@uL~rD@oiygi^cxb7qQq z`(#f9siMw2&fZ+{#N~|W9glhIBIbWHmG_S{5E~Lia<{9vdg4I3q=blm*@NEXCV$o| zyf{6Vs;-lH_JJY9IS#Pk`43r^BW||q3oynGr1u4XA*_z$ z>o>D^pOdIzT}iPXWZHf2aUi}sX>D5(E4Lr`#Qan-q6#+dks$kCw8iVGw_O`d)6iP^M!9@q0gD-r6!MLp#&6LzwLP zML6OvUVA%N+=+*!(6L`HI=2>g>?SQVq2a{9BGO=zaS9W?aIcqlsroQt(nUDE+L0t2 zn+)=;TH!`72UeM08Lsf4bsRDrBNq7<@`-^(@%te^Emu!v{(5G=l}(!|lNjDVomg3K zvRxIgVAk4v_U|esURO*}>%nx3v4}bpKFwD0*MHC9q8gHJeTT=c8qK*Qx{)3ogh~39 zn{L-^VZ{%##eirhtV3@`^c3P^`z)S%*UN;*?&i)bN06|86Z_X3q%-gyb*d&E$@Vh33bCX$B?pl1*H*}L-?Gj=TF#tfo$_BKkpk7eMfAq>*(X6ww? zdH$VUBwha^w_bZ87mphz;ta>44?<^#qE%Zda8`7P=sr8gMM3T^JG7~R3hfby%@_t%RS?9jAO$=_WQRfN4A=ltH{M$P8$zcobP zqI1{bIPeL7da8yl*WJXu*N-8!>>&F$W#j4IPV`e@#J3&8m*;mF!(4yG1zb3$ zKSMhig&2+@BCMAEKWv~XdJq#H|0B1`e4Lj;!q@D$Uc!XS#&OX_ z85nkEvg-Tew7Kg%y0q@au;J%vbv$ZtPujRkscYSnf#WabqLCvRBkEsXOJhg%CF#gU ziUwT9IRpDKtaCVedjs3w*hAcngNQd9#5Jw@C8#jupOVM(O&fjDS5_g^{#KguB z7aK=JkXa0xUhNATPKQg|nnar=6P=vfA?~R23Mt7iqbN6_gYM>cXl7HzIW+`$#FX!-)GBD-?+Lw7MTBU+nn zjf`r`gu8F2Q%w!WmagNdsC7qewH9}w2q(9of*Pj-m&1-jgeQfiUfc~jYD>uz@n;@8 zMs9TtB{@Y@RyK$`UpdA(w6~F6Vz6^I)KXnkN@ZCw$B$==^d2Rrq?$UH=)S$eU2PfJ zLM${&L4Vp{tN4BJ`GnZkr;?NuMwpzDlRdZ)cO|=bP-cjw*G0qW-_9pGfovL_@;i7! zxXJw)U6I0BG@&LB^voCq4l7Cq}r@FOA9H;+>QP63mBN% zij>5Dj2M?jr@rMZSz9RligcJP1cgNt8<$LCs(cjX##32Gquq=pD2&L+SYo2Bgjo)- zU_pC^^z6Z?Za(%epUbRox6%3eAGvc>5^drmiHdGTT`aTt+^Z{{;=3~R+;l<{t2mHdL4(~Q+I5^rhnM<> z2AopMiJKau$iGe$ptrG{ol|FHykG+DJGCcTzJVXsnND4M(XV4PNhz&JNK7O#L0sSF ze>7-{@}z;R)oZCuXhr&nVI+D3@8rw;m~DiFC5rsS5uYYRYIq&4T04z(nG{#%vO4cd zZtP=4?`WXj>BZ%h@tLuOgllCPAKyrIWi>|+c3|9)wzP^C3RonjDLr!5$s_usf_00i zoH&*qJw+bUI@4=l2Cdqcv-_}-i0Jlo?U77c>o}s56Np6Ap$I^m+ZFws(InCskwmm8 zZ`sd9g@sa|wU5$Zh&z82y<*zZtG@`hkDFtnZ>Xwq{>r5o(;ydKzeSiqi1Zk+pmkwbFd(AX2p@IW}=))|>uAVo6R(AT_-e zQ6lZ(!nsl0$Q!MpL_|ar7iYz4EN1tPSh{9(p?B9 z7yXe}e%wixBacmAyvk!2U&}4GJj&SGO}JubP=p6qmsH?wJf7xZDGW9VW;YCdh< zo>vT{asBAg4dR3HC@3mo=a295)TP&P`>lWC?k7HB=H{8ae%1ZFGjku=E(6}O4J?26 zPh4^SWn6H{#oYb*o7^*G3NOF0oV}iMc1?SS=Wl(B)n#SuU-JX+P5A?V`^&>zcjGl& zJmwt6{P6?6-c|>7`^25`lk~p+8+O+^@EQ%O(f!`|#NC73?na0Oxi(3RV8T!c2TuVz zb~Ir1Mly8lAW~X)z_M-~nRXXWIl$`5aU1G6x@j|?+%S?0F1v)g-`>cPGLIOzYNi*a^*HVjg2mGJ;-=P`x66Mc|kT=d-rm1 z^-i`YcP3?Ye|kiUfl8!LJ~{H#R8q5aC3&}BMEfr7NU7f;go%TlC08(ZsEA7pnoZjv z`45>F3KYz)J9xHnDFf-LI@#; z5G{q}g*biU+Re>j)+0A??Pa65vb_(Ef>XYuNoc-{y8FI&}~e(w!$hVJPif4sjEe zmrdq@gBK1l-gNMf2 z5(=_}`K~=2nYNPU*WAvqVV&sa*v6rQJ__Aq=-1UJ+NWq^&D)O1|4C&d%>qvogqb^W z1S9)z#ZkS79f!?`t~KCR{7>A(dW<2M6Wh?I%RbRo^2jf&#%*jMbIWGFxZ?uRUytF+ zrIFs!Gn~X(~Yzq?P(>_uPyKs>GhPC zP`Pq7`S)K*x6}lZM4h;0`w(?tG|8>GWPTK9Gir=&F~lHcc2H5ciCM2b$urM9!{7e) zBvaQPr_e4s2zkBAo<;DwRUWi&Uxejk@-4B^JdKjoV@g~%G|WcR$Oy!7ZAVy?fB zyB>I$2QJld{MarQZ7s!QtivAJj`RNbB(FVn1tSteG06c{gsKw)&K((nEnM8y`Fo>g z7)57Tfn9WzHFct6_lgcZB$>X~|Cv``x|#D^M`G3X(9>hl?_>T)Q<=9ZlIy=&$C~9! zd8=DBwfY)zM6crS>*PO)=#YGMlsFya#9hGOKbXemnSW(?$zirH+rWNbBoQfHn9whk z2qEfZ=W}|>6fK3Q3%R(xB98-$axe^RLv&OSX4#R;jk|NVvdf!DQ0pGFPwq(jwxS(H zZD#tmVyYU1_;0Y%_JTk0oY{Vuj1*vXpJImD&5rB}Z+AqvcL z2qGjZg_QKZM6LRg&u0C==U-1}*5WPf%&Zmzs&paRdgC!xfAbcvJohTEeS3ruPY`Jl zI%?d~R*y+17vmr1vw1E?bx$NC!G=x@M&2MHs1jm{6$7&j>F0>HXtYywcqKF6dx7Vk zdXi_Ke}QS+%Bij^s`w z=C54C`i(zuXX8?~&RxLVBRS;lUe3oqIJn`~p~NRg2%jR|^1IIBCQWY?Lalf|Yrmh$ z>a08>ZX8YD*ib_3x$IfJgn2WjGi}-;maNL6ObAg|(IP(mCZG1*x-xKZx_`hm8ijb3 zOBtM06>ekEr?2qB^Dpw`x7BnHH6x>x<>jjo5InX z!ts@{`#=tRkLnrFA&#gJan0HD*elcVqfEzQmaaKWl{J{8J{OU^c?NT)f5!XY&Sc)Q zP3+655v3s{MokX;7Jtku?|sfYJ4}pe6-W!=}W z@y4@{^Vh$A%nyqXQEn3Dsu%s~@lDMA_$6NW+Y7w-%1>;}tHLfS&17jHch5q;f8|M@ zc>X<}pJQfXh7p@pv@7`nNw5u5bR^-TqJO#V{0gGY>UAMPlv^;Hf2pUE;#)3v5N<3+ zA%HEUpZ5nI{cb5M*9mdC=v^+@_!85X?qG9)oA@^AM5l+c!(NTM3 z8*>-t(6&oQy7f-gmb@4YM$CGXcCFU#p329s{FMi$=Tfd~&Gl`3PnC`0j6n&z7DL=!I&8$IjAY7lukq$vZ}HB%?{WL+cBI%G{x<@(yHG#!E>UkZ zV-X#YyqK*)p@fA6V{5FTrlgFcRW7RYwz7ST7-WmA1cii?B5u9CUins68``%^Bs|P2 zE^;j}t@rW)5kUVcXZN}WfJCBW{ZIB6lK!hrO4`ls0X{;^f_+BURJ=2KM-ddHL zPM33N`AYWg*~I2e3z+)p*G!+cf}Mp2nEviEj#Sp+62jYLvSJGj6Kyep*tp(w>vfcz ztc@)C=yPVQ*~zvYn^-jMC)SB}xp~W47VUOm>UTL$J#yPnStk3GlBZ@PRmV^;M=q9cm)sbkM zs0&9ChebK9T)dEl3)Zo5Mn4eMB_+5f^h|hbR&v!|B+gHzLvG7ME)?VV=?> z3gL$yH}Ut!`jg(cU);RyB(uapa9l7J ziy31~2l`$108c;lI8Tp@Cwty2e6xB#M{7kN6p|8G>{TtV?V)0^;hE41|TtcnZcgfYh8H~RBIi7yw z9o~8WA#R)4jX3$KMz82k+m7Vwho9rccV6Vh=da=1jA(*=qOWZXA*0`9Zh!t2UVrBW zUVm{Q4e$MxX$y99(3?cGxB)hl@8x)%MQbZ&Q&wuIHI zHn7fjK2N;=E-&1772Q1x`C-mCeEH@F{J8Z9ySJ7q)t&(Z_g6#%!OOdocgn-ILlDNt|gIT&0xkB97||OD4}6t z*uTfCil^9pIO3884U5**q<&iwCLd(ev`suSrU@_V>` z5hufH3PD4PM2i)(s}gs4A;pab%qA0_l57eccF`FNKLMvF2!v%4J*G^NM}#TYIBDyv zoDJ0EA7#^?d}^eqlj1SpP0`ZGFNlN^mE4`tH%GGjgQe`vuAofHrG1d7pEh>>8M z5wlNjFH%i~+|5U{Jt@en!BN^8qtH+xC`HM`MaXSIjCjNQa@hk<@b`B=;KPre;_>^2 zlHn{SuOgikA@KIDp3M)lRv)C=)xkZbHBVu+86BR(aCI9oZ+x=N}H zqCc_Oh|A8RP}G%9+_^Or6{2%_g{TM0psY9VS-^g=KcF?Md`P z44JKZkr#1uZ7%1)cb~Djx-CITooQonYUz`olr)Jx(JC62w>F2&Rm<63l|)Q}5RgH# zEW|Y<`%Ka9OpZdbj+;bY5(yDvHov5h%J?*quXtLCbcWh|9LUWkyHHO=Z65pA&Sm<{ z)uIjT&Ht)(L*AYW< zmpFQ~+QOGF&SAy6E$rH{jqL|=D6DmeK~jVxL-hxH3LaMk{Vu(p4#7Hhefu6?ZQ8)v zb!*tL@k`!*VJQ_ET^Mv}e^NZ+E?%Zb3?gz_hCl5xOcAm;T+wam8eNL@=uF=EdMj(! ztYyWFd8{j~pvmz=9#eiLzNgfc7^t2{0m<(XWZ}-HIlW{v&ca{5kiT30yCwtE}wyavq1`+4Bd~xHG*ol;A zIYU@UX<-RF*P9XJzxMb`ws4ojO6%_DG3L@y6n=LruYA6gh0E8oQMBiEs}{3*=P`0B zb^hy2+#JcBG_)HXdH9>5_$}<@jfA$2%Wr6H)ro%9;)Z4WGJf1Vo4G3s@wnU4yIq)2 zNd+9rC6$8oT>kF1zU#o?f$tR+=D>D#$n3rr)dzt%gzKt8M zypg*u?Mb4@zr8Y_qdRx9Vf7l;%$dW+@*YIBYC~GjHl()e%#>q4@##jx z-5W%owRkp5S7viCWITO3CK3}Q*L%ve`0GO^NBk1!!Y@_i?ApktwQE?tYPGmoI81J} zN4Rs*P?g8w?OU|6Si5c`JC2o6)94j9jSi}cGTFOn8|y_`u9+ilPTc2{k)A|Sh>?`; zqv_i-f$iTu&IeOhh_q}F^}2#JYZkF;Um2zK@}|~FjR<4krmbvPw~{rhXYkHT>q(q) z3F9v5OR~=)R~}L?1lXai8^krToFxnAFnjJn;w~D^uwLy*&^J<*Cq(-C4Xj_efHia9 zX6pViBt*y1qfa+tgTg7_^dmosye(KI-0ZJr;D9Um)2CDUcG+^4FI&daxi9g@oBzP& z6Yt>Vdk2wpa2@m4u4d_4(cZUw#j?#M1j zf}Aq;Znn@m*^5EkG-+01nAhuTu-Dg8dR*KnM1%2!o#JdnZFkZl$h$TN)%kUJt?^_G z?@eoq=$Ha_KA)Z1(nbuC$+Yd2img_-Gey#>M^{?M#1k8_j~$yfv+=kdb5uu04DLnG zfr%8&pTTk=&Q`DA#ExPE!HKQJT_m_nab)yvPh61PhNM|piUH0Q)`_A06UeX};JZ&} zvTof5(P14U>86*s>*fm?mgvUecG6H;kJ}JUTJH`dMTlE}M?IAVZlZg4r*&c*x_3?` zB(#Qg3udx@(#()%K-ekqaJj|6>@^V;4jXFY8PM57-P-wl_wo14*|?p3#TLds{3I9kj3r9fNTc@6 zVi#UVH6`UEEf(dL4yxpMLl+J)%E08>Ym5R?^#adaBriB`cTjIw#iHG$?>qB{-cx^ZndH2qta zu3N?Gjl0=Z98H^^JsH@=ioLK7!V*dC(Uzo8A!z^MaHYc(o?+#I3BJc8>%`}u#RAnPBMGBUB zN)PSikhuBUxN!sP!~nl}_hIs_?dhHtMX2TU6v4VQ%v}Ok-ZLi||OV4L?hJ0B{ zzGW}UT$e(-{%ORCveY)E{uxqSN#S&qCC|Ul4~v(v=2#HzhF-+&Q+g9?sHgDoW|n?G zn?+03v2A|^={G;X#E~6H50M)R*WotB(t3C=THBh|KZ?G{SjwT5bD8@7cg)#YNl@F7 zOu2p--Qt2VXxjmtihS|K?Wm#rSQdvex3hhtxS`mvkv+vutjV2dW2+|j$N~24+rp*| z>)0r69FCDf`_@rdYlYY;IKtkot695#2b&H?ap`MMaQUEAaYNIHQ})9>2QnnZ$IdxF zvRsJuHCv8~o69x~8{UbINje&e3OJsBn0?!XfL^uRn!r37lKl9 z5A0|6UMcu@kXac=pIh$Xsxh5Nw0baF$~m-nE;GOUf!S-eu=%KiVUNASHG>jKjBiIq zQZUI?OZfP!C2Y;AC$#^~Oc~RYwoy9KrktW3h6o;ZHt3Khf@lBk4>&W|D36RQ&ZV+mHWkQ#l(Y4r%Ta;TUDR zmVpTuvhF<|&8^mMWw^54%eE|o()`FEL~HrQ_90C~n%puB`A?e2>!j)0k!G@;1=`yG ziss2b>m>a8uQz|Za<*FLL%ZH&c*5@FHPaj^i2ZKln~btQlc#>GfM2=5{zM-C0m8kE zPv)ViESs+TCj9AW9+E7NKsvQ}WO)i>8BSAq{Fb<7+T{yVTKxVpm1`Ge)-wH%Y6O3UC1y3>C@~2^($>;`Aa{tz55+&36Xg}+21xH!VsQBlC^%>ZzW&q z^HF|a7W2QE&x+$0@X!Yrh#P-Vj-pdOnRmt6g4&?CMUfY!?2u0B76LTc1unIKyQXVW z+cH9S-pwyw*#T*0fkXO{<^jL|7#W{jBz)5U$&N_!OKENDuw+Nzq;SVFmQDYb8Ot`X zZp|8|eXtDssLMG2(joMYvWosny7&9{cXrJ?aM^*$@cqBF&QuN4YOz{SsyFC(02nmU{C{*=B}xHY<|$~s0#H6%^EoMDObA?}H)R-9$14T@VDAy|J^v^KXp-Cf{ZI|4@X zvO8hc+%E9@f2FxU?Fg7R5ioB~lRNo{q@gsMqdVo}pml88vW=p++xf$tlNjGK0fWOW zQ+JAg&2QkhHftLun{NP`9H_0VV&eu^HZ!&qq)CR{rvBKPv=zkr-vhs zfXzuxwLgVlGW!QK59btbrAu0y$@HTk%T@InSAf#+}Jl%6Q15* z^R756P{K}e8uA0+Rx-xi#Y11M&=!m@S-g;COYY&qj7Y4tcI~ZK#eX=WbN4vyG}s+D zn;vH=6pH^kWOwa#J8(2K_+RKzob@PS*J9|x~sO8?R57YL^ZBp+26PmQnXkdNI>CXsJ( z{N7JuwZ|%2nff0`$nWW%QVud5EnndO*@&{x8=K0(q-|iUm4MbBO@Xoz_9xckh`W95 zQO-#_;|aR}!d@=VI1!eHj3-de;*i_k{I?agLZMLnr=VV*Xc6QltYsWrxP-;iR2Gl&!N7SMx>0{}gf* zmHS^6u=UH?EMK>mV{(^$9~dp647>d~&Tk(=v`L6Fk*=0P3aI+L?W|ky4U2bIQ{%E= z4KksVqOj3LWV<#*=p(SzSm=KD4GfOfVUeHrY2oQ3oxYx;{Rh~)*+I&<&cs`b*#7lT ztlEE^64BP&4hJFahcV=m>$s}B6_@rX`RqmtT^wcXTlgL`R%KJ*NN2z$mofUBo}_#C zvwq0}zMQ)YPf#rFF1wdo`o|Cv5`v{}H``at$(-aExoLGFTH#(~9qDXwkDg`d2{pDrH5=&@rN+##08@K{=P z?m>@Et%$T#le2X%Svh(VMsy|FbdVqa{2AG82GFi!GVx|FatFK}KN|;M=a-t~x!fxxgd(d~ih$~;bkJ~RA&Zw>~zI|jirU89u*Ey9~IVUL9W1tS2 z-bj=Ku=YB>h*QR)y`?4N7jbAB=ohQZhdC^fHoZqNa@08t>KaYmvU1X=JiwjzPT``# z0~ye_2fYS$CDq~U9+w8f*M5tTn$G=ifCVzEA>9gdkw%$sZ99Nd+K;riQ<`~< zqkG-7I;Sl$=4y^EC?x5MySd}u>zOoeG=mcADOtIQkC$5*by-&-LM@m?#99%`X;PVp zvjSNjZfeT*u;8l|SV!H>bvIqhrK1PYH6;R5)@;6rL5k*hiyk2uqDM18Dz#F%G6*gX8U)W zD6u5aYDgd2QbBFWZe}cV(sTT9`lNfwU9pml8w${8v?j_X#LoV$Y+A5~l8^|(L(ACm z*&?!z?`PGP)y$YNn^l{3k!fg0#{?@DgC@C7Meg$?KTV^nqq_76TW0OS*`*h4G7^Zf zlyG$YYLNUl)iz|qenTs+ezXuDeNjav|umx zwq0n`HlA>uiHOuxl9TmR{rCfggD26$v4NS353sAkM2EJ~7)4lT1v(>oXE`MY=JL_@ z5Mm0Y$XdtJ-Q^G-i6w6pTOFZ<_ZY&kHWBDtK0>{VnNih;w7eyhgeRgOa3Pc18nM?K z@YYv1AhqcGpoF*Oe>A zw|ouGE7@_pk_I87c20elCqG)r*6L^mwh1FFXC==(I-Sk+ z4(vjdo8=;T`7Ke4d^tkC4DxHpO^$0R+Pi^eA1`2Ml^3repPk>m!P8HC&D=v?(lUan z+440{y!19d9<`9zDuJYi15AByHj57x(_k)Q`_viy^wkck(+AL}XIBPT*D+&V7CUmB znB|n)|B9TFbK};BUy5<@%25or!QhLnSDKtXstW`d(z)9u{8bcjfz z>!9&mFsd&-qUy=tzn1AM<}&w(&-miAkNI%g_k6K%BYTcjVAKZ_nb@6S=a1#QVI4^h zHaGihkWUQ0R$@~7GxEaWj7W2_>5~%L4rxPtT(GEYuN;X_JpPnuk7BiS`AvMjFj6}Y zV$6k;xa5{=m~{C$^w_hEy#*fJHCy;mh{Q=lhjZSTn|bhsMI4el*GvDJ@1G+dv1-SO ze20?UX#nS5GMUS7xPoy5yOLPwAi39hjJft2CSEm$f%VxGWtUT3ah&}-*D`zlkIee! zLq7ZbGd}rg8sE>}!qL1M?Su8d744l7U9b>?=_JO1v*YDFa{moHd~pXXjV@U-XA$DY z!5B>^wOlvlI!1PhBU%c(UzoaR`h=18NguEO zjaZ$%9!H%Kx1m4hT|S1uDLwE#<7Plw|H}2Xx>KY;lO&QFXiK7`cW*p~U_ZW{}JCMPxtu$(%JNrk7TxrTe zKGLngUQ)!4!|h2+6?snX%Amph7}hl&W#7Vy5KTyzU6wZyXYduoHv|qaWy2zghFITdR=rm|8wtcOc^&$w7ubUjkgmY8HCAX z`IRLUqCuI(%|`o?Ts-M2uDtwehQ}YL?&u8GWC=m2RGmVhQ2a|#!mcF|1E1IJ#9{YP zUtdpsUA-ngwAmmz*ftG}^6!a3QitB?#qDauZf~S9D2(995K@A`*8M7OzVQ}ryX|If zn9!fD2|>6$9y~t(w+FRJlv5CKh}hhY1|f)am{NN&`SF1`-ujSbYmQLhiXkf2gDJR> zk`g=hr9$xKWpSXfkp|&gj=??=wo7i6A`>ms>=oxSXgoMA8T7ySdhY(qpLyuPTe$Lq z?zED#b<&;YMk4bW_$iQi_8(2>UjN6`g_e@Od>%J0?OTd+y_|5Q{T6mopF~6x8KNU5 zB95fNmvhrCw{qLfH*(9^9(0Jc;?xqUh3Y?=PPLFk9<*&&8gaM^*|%&abH7}H_u?BF z5EDdf_AK6c|6AUfe+0+b^!BDGKcCe`aB>eqPfjX7l zhfauZ=aGZ#t}3Ufyqrp%nb4pF+7LmoRk~3q6bi+^5+&?f2yGV3Xz*{w8!$VG6mP;j zutBkW5yfDXQo@GCnn9QT73`e)1b_Ma*G$_HMCZ|Cx%m&#Y`phIZo1(HZn*Jg?s)!N z=I*b;YBBx#=Egz|8MJux=;a`63?ZoFjoj8_FSCFAi8(twbQscugph;0^}r3>`q*oH zvNl&}HUl={N2b#t({B)I)WVZSB2Q)!rzYTpxNB^np}~JNI$T0NHAij??Dy|ap7^Vm zWg_3M)k;CLH_G&B_QFis%lv4MbHzVhAPl_^r@j-TZa9zO-3pm?_Z{4F(+%7x%H#T% z=CUHQmLPLeNeBD|K0Ysk6v88)^D<9FR8#PNOneMTX=@i%kdp9a&$Y9y#+JByZY zX6c?{JR*H(4RRLP7*1@LvD`SMp4IO^!5{8_hG#Zf=+?6@!#mcqZ}x{gf9LJoGUb1` z_k|rKUilznx+Rbtna|GYZ}N;R(+`Wlc;M=ZHrozZ!>FUE$Y=M zZX$|S^ZC91!yj(CNwn4L_~=M1krzG4q}C1EOtq4C3WY-PuS0E6+#<-q&Q4`+DOFVv z(k_i?)5$#gd<|3=R8Z$K6OkGT{=_^>3#5pIFTl0zIXuBYCdK&w`Xq($j))D&~{ zU;%YvWb}%1)Q1YY#0bJ1wN%yV2~CbC)Ep3C0kpS6j}&7!gbo zZM8~-6Py%|&Cp2su{=s@8gR(;dQIA9yRBMFfg;O92-y034i$UR1xJwHDipov?2;ck zytwL0IG$BRrNf6IB9Ydj%%elxROJ>>SX4o+5cCF1Ea^hHg$uD}6!lS&lTSfj8MQhS zCQCeRgk7i*aXPJ>CBn_|DqN-@!bE!v(m6#uWgI(PK&{&&guaj9*fbK7l8Cd&+2w#Y zg+ifF{O-sNij}ZyF@(sH(`fRLFBAk!{m7Xsxt>jk3i+I|>16^@4syKI>E#TSa3g11 zyz+|?{;=fCh;$|o;SsMGB{h*J3}iSzFGXP|2VwcBthv3M6_e}nq(~I;`S**Hfk>ew z{{_O+?4*C04!^ma3DX%x+GL)Dfi(LyWPR(Te~~Z0;F9_FA9$pHIio1Vn+#jHX$oHy zhjuRQWx1RlhJQ~zVJ0Jy1RmXL)&XSPvdm;Y8I##k#)SuUbYoM^B9vX^0yCruZZU?o>J1vR<!hhX{q=vcT>ND%+nwge zb-JjN2sbh;5t!df)|rS$_-QI{xeoO7`cWtp3dO$$CF~Rmg+ifFD9#d;uxm-=qd)m9 z@jn88TK;2_qxd({)E54e+NVOHP$+&6l(1_lv~_U?41qU5|GkI-TzebUgsJ)3G!3~% z%AZbciJ9W;MhH3iMz+=#v_t%s>*xa33WY+UIJ;27u0=3l4Li=7xBt%5mp{+!3X8V> z=-)GV8nJ|wadgQm+|zFa{hnDvX}ue>QB<`~R(B4Yzk8Qg?){K8g)W?;2`GVgHX;O_ zXodB;+nM>dYq@N2S9dm1Y;=aYZ5fJ)cT2TVDGW-vCNHIa|S6tI0h4^IQ!|kJvl&nN(`Ml0 zjGW(GzOAh71J~>kn_k~YLye2lBSn~YKhDdGipi|h`@gN~b5LJVOkrLrHBK>r2GZaU zUmVT$$kWm+;*@VnHqH3R`2BmuH9VaKS6f{dt-qEQXmNKaUW&T}DPFulad&qo5K3_k z?jgmYxI+o$gu*4b(;M|vO;XAl2KnEhwJ1`4E>HUZZ(Ugx{4lN+^S^M{C0MLjD@H{o=;m@RiQL?wh; zwM0@@7c6Y+?(Fgc8bHVr>}~kqfzw^2rucP(wRPbamK?DLW`^p3;q2joelOzqytE}q z2wwv%uH`n`Z1oBfSgSzCPaFKnfM|a4CO*+F`+80^S33xqiGSoACKfI`z+g9J!k%84 zDl}*Fr|5HGo1L?=GgAnxgNoQyl+a08Bd)u0$@t45@i}3MX052s*0id$j6M1N{d-*8 zSz`~9ilC3|-wmY9D=n4q*+b>d_gIM}BdEL6BGR6QhrCaL2M_W_9eFr}D?$M?MMb&! zb#x3o!G(sL_&Eg7;BhA%Anic`t$_`wRN9h-l0sOnLHCQ*fhR39T`i!Q%q znd9+(us>3po=W&(>@npiNDtlEz_x~&M`k~3J_A&8T-0KLKY|U!v=a9Kfj_G?pLr3= z7F1*}B^OyfXP0EhNsa#`MyY3e9ftC)VLG{fqgK%+Sg%`sQ80x6mhK$PH+!Ps92HcM zk%wcyd$j4px4+q`74e)_!Wg}?J{^y&f?d_8ikpvSNPWCr@%DTjJ4%^mQg%uU`8`-T z)}3ihq0oF#=W?}Ah6p7jX0zJs-oL=}B?^3RKcnaj8Ly!rmwGwc_jw&clGmxsaM;Di zoN1-Ds-)EPHD1H(U~zb4aW5;Q-EX1i<2?lr4cSY6mq+^BH5*%Nh9O;zmJ6m3)1Agw z2R#sE`kea;Kf4R8p3F=NE@V{L#8*#HN*YV2)hF-~ z`kat@h^|UJmB~WnB$0MdC?p8wCHGCzSh@c>+Pd79Gu8YpUB9HXQq z4OpU3U<61;WaIE6pUBF3FykH5hQHyBH2X?Vxwp+j<9tX2_1hU@vM?sQ-*R}0lXiF| zIR#yk8TekJ9bTfPXk!#;sF10>AM|=XnALL+D~Hj+`FOo+KsRp(#wpXW{={5U?V#v zR{&?4V3$kPu&4IqA+5%=sz3>Mkr!eYxbmSh!!u(q(!(NdQMOOQN->7WQTR^~H4y&@ z;C8wIQcISMd_BbSIGdv<(QI-eE;pEoKI2a3(ZNcOge)CNK(Pw2dQF9ly-u$STss%^$Y1g8Kg2=G1T((fY^b{msO1V)6<7Av}S z0eT|3ow=DoJ_5`b&_$Uj@e?OH4~5I#@;eBo-H646iREHipdpGV*J`KI+FmN8t_)8>@F}<_~KPttgdKdOvG}(pnR9g0-(nEfqP7=&IU|dhb+G8p;1?7IF=4QJrWOB1+Z>Qly14N$V7q=mUm*9fSZ@CP z@0z6e+2|ISGnsX{P_$T|!1@XjN!B};&U~^ZUnH@vknY79_r)YQhNq)oA3qN8Rx$GW zb1X+K33NrV>>?u_&p%zQ8+h&oGd5hTd)%99(V@9bdkU_1b-QPKjPi7K2N~Mex$o0} zu(qe6gF;Fe`7Y%Fw;5g`?1yU8Ta~?poS=(jwu$B{0Qq770E3 zc}u;g)eeg+#QfI?FmBjjbwHBLc#Kyd{R5ihAe95n)n0S1flN6 znAzoJkq3eVy+S#JJYRyl0zZ{l#S?N0BpE^KD{fPsKxJWPF=e{mD_;dXY{VtNC#dpM zSlZf(dCLKvIHHGJ!t#x#Z08@?-+@WHQ}(=#BO>}3syA8qI&S_f`&`fJG+g(jH*Du= zG0n$D6+6-c>Vq(ec>~uw7cfb1L@g}|Ma^+UjYLzT%!hV9iHQY#sLhaEJy-i@D*VGt zv0Ypm(naV4uWYAVx~(x0mITb@S4WhWJu|&d)ySLA-y+hau;1CvQ8hVj*ShmKEcU|c zMRpDC$THWdEp43r$A8vSCT8&p4{%bzdVv(aBgw47U1Zep>_m}b8L1U1*9$qvel?S= zy+yswBWk)y+W$Lj*&Lkip4z)kInp}PtVyu4=}2`PjE6nXnCQ;ZC%%h_3FMG3*A;Z2 z{zCUIM=4Y&mbaQA^n1MSD1GbL7ZEJFiBG0!H$fjM-$mwfUIj~g-jvpR9!{R#os?R5 zJ^n%UK{F#|Ey-Hh#tOQUqxvyU)#uF-j5+g{1c9Tj(rVhfj=ZeX4*OWSPR5tnt+w_D zPpF*1uH^2Y?)9tIcm6Hpz-Dw{4yGQZ^NmJ`z5^vwU!)A*?LL}jpcofoi}AX6%MT+; z!MSW-qb?H;6TEi9Z3ljv!fHeATf+$hgY|0+;jK*!k#!fRc(ytnQttqqZ{U zgChI@^VD)gpfbz-y(F$WU#;k{B^tF^*Jtd@q|3=C`7e>BgyXF0Iw*N^M?;~)d8Q7l zy=A3dKa!Ha|In6kYaV>vXRUwwk;2pQBLDe5uz7L&21OV`lFaL$MF59@6@n4u@T&|` zfbiU-;B^AwL18̓f_$$jnA+_p~|Vaj$vK_H2Rp-{$C1+14A$rP)eD<+_xG<3V5 z2(?`kCw_mvEa`|0X|A3gToq>=K44SG#M0KXPG;}5hm>TYwqA>@`~}7c!pQx^i9@`Y zh_(5sQhROF@?!j@8sFY@d4an`j~|+-gW*`glC~Gg=bcM#cw7TV$k$~mTnd}LNRf2s z_eUOVV2XM@LqEiW#cF@&8RFQ9;arH_4f5>}Q zPu2RSm1>EBhc;)oe?>+fnPrV5SHNO?eSuf93JdDY<0x~a%7#oO9~&JeE!&Qksye8^ zD^R;d{NaLPAO?z&lQ}Wt?AbmAo%6JshSPnn%+l+=_Du-7p(_FPL!Of3=CT8)TR9{p zl8q`r^87F$@Mn5kSIu!k?O|x;GMiM_$MdbqY)N51!sx=mCkt2G zqUHd7nteH@^Zqfkx%`;#c;6-0a8*X{X=zR;5Rax8`aV9*|Nc3)+CAwr2a9J+!AW!I z9faa?mV{;F0uD8t5GgmbVW;Wo9U!^Qc^J}^IZSp-3ZCH zTR=_*ua#yW4>-DIzjRU~V^kW=3_fFv2l?`~)7|sb!LZnHNO2TAbKeJWCZyC{HokVI zvkilOi72EF(Q2%=U9%!P`AvOmEq2(>zMs-^<;^MXu>?%*VotOGX+zB|Ni~2FGmd3R_w4(T4h)=X~{t`DL`?=(bC;GaN-5$ zH4q|tg0=C-XgdN&3(tk~xmSNMs1(Adp;vpVTs$8pN| zv$Fj^rs#af-1L0$U|QWiw%V_L_`!F}Kiss5b8B6xL0oz8671K$R&$n@el3Dj+Q!w) z9Ywg&Fas^Di3cBSZ%&(w?I%27yHOvi6?2B29hP$q%X5yG>9scDxKUW5qydRyT^DhK z@$2OScD`~ZKYo&>=g@np+vAyY$Fz4$t2Krkt;pCIbZJ98O%@AQuCliI8pj)8Lqyg#R;%FtG*gg za4>tRMGIGpc%03iHi8q##b+Ga6sZmm10j}3Rl*4B+P;G~WAd8)!_{WKa*9*U?sQmG zOk*I$6iC&FO1|9JpLu==M?V`aIsFYKn^5jzXZsn#;D^=6?$_W0Zk@QcBk9Y{F8QDg z|FNMbPDcR$2DKg za#1^9EKz{kz^JYLCkbp%?)1m+{Vyk%GrpCdu}(5A-&>F)jNrafNu)vxBfgSBRgeni zQ3fXus~Rs=4@Ax$aUZ`v@*C0lLCHb!+g9%MLuRnyrTgo>RAXMu7ZtB+ouKU4t3GJ8nR(GRfN#d%h z-xQMu{VcrxJ)-#tZ#b}N%!qATxq&x*LxlqC85m=H^X}+ny03;yB{8{sT_L28z-@g6F6D#iC`S5dh zT^&nmtI!yEgOkdV#6$6#BZ9*@K7wbAWRyO!jL7xhJd+MGWQjd``(r@*Wq<6t5RM51 z8d5iC^I*MdeWTsA&&}T>43Tq_pv#NFCkUQa7E|9bawli$utBBzJ8Afk7mRIs(YluX z?|RRPbAJ)|pl%ys*hcJ}!R_EXas~F-Y`OFKi`e+8FqtLA)ZR_1dxmhja*u9P+Rmkp zY*g(l;KDm!gep^@Q@|$A%=c?hA$9rM4EM;O`+*Fpe_*jQ4xC@PxoKKA(NqTiP*T3rCBWYj8y7#e*U`vuZ9=ne|#NIjYZN7ib%GyA#GfJc| zA~5bXMe8uO_9mr6oPM2M@%o>X+Lqr_wJ&dTT+DauPp&ak*;K!cPoIyDr!ED7{G*pg z;d+(4U%%$boHpOCsD2Z}#>Sp_yjgx7T10#I4&3B7^0?_IeAd^J>eZUc%W2vIPz$BW znRhllWouPLu8sNL(XnmyKgv0#3B8+v)SxCboo~olS@`l|p1e_o{XsVRLcyJivkWQ4gOPJ%ZWOzT{iEVwVa2&5-kSF0KszI_rd0<=k5pf47*+nAP%DTD1^tILi{=felQ(=VIVsR)lNR#*e%{G2>kJTaMu`lR#&TVj~y zi^U2X$ryi$?P@3-$vj?lKO$x_YVLu`js9% zrD^}|qtCX#SIFUKX5x5k_rNt019#@&CM&F+ar7xR3ol2rvOMyaH$r~C?0?%hlmASW zgf-p#HNF2a$Uptqb$~Bpj7Q#sP)*F4Ocd;iYVqz(%MIG1VcG}FR2fTG)B0jY4?OuL zLwV}B;6$-H)|8PumQ^jFCda`&?N&URv6;Q);K=1|{=*{a*GcxVp-=*J7)C+~~r znr!e)dZV`=D@E9VI+P(Kt|>~|Hl{}clp|fOVln-(Uy-|Q&o(Y`D}m$0H(Rsg@M3_p zmIyMr*=n0nMDs|JL0n2ck6jH%J{Pjf{FkmxU;O)N{d00eR25Vn^Gf3l@YCJ% z=N6L2pNUkgM`E_*zPq3NL%C}%FzW^MLNQy_Db*j(LvEov-lII>94_;!%A!s^>iG7| z*`k)BjmfL~U{8zIkl-p(_oGsphau3_QKneRXviu<%dfy7BO5XqTi17#l;>UDkAX4C zLWLYTzv%us^G@2?!Nxl8nlZoQnKG^PypW3Y`!)R1&$^&d^T+)NqA+_*s&E~V*ePG` zxKL~AFRh5f)gSTaH#k!>A{GMB#F64edz^Zj%fI-0c(|J;#a#~x=+-b z#ThuzRC(a4x%e3`Et;f2)#T0nqqknjWZ=swN6F20Dk;Z?&r8P%G;?r%8u%A;)4bKb z?5$A%(M+vBSv<&iB1O*=cw1niqdX&7OmsPyd=$PfqisOYB>a+ax&j%J^`q8FW-&XB z3yWMar2SG$?F*33n&l}=6p9)SD#1k*Mh#Y}Q&^FZ)C8&oUlqtn2u1&$hKXFEar{Nk zx||oj@#FqAy7G|9yyAT`4DB9>N}o&6=w8pTE77j}H5^gEX;ezKp#qQSU>kS|==4Ty z6+>sM_MATOmWytm z5Q6o^p)F#3^TdU#&B=nQ(jyJ$bg0F3P8GRt>oFyCZhxrEkA)>ei6xA;orS$X*g#UO zTvWbzVMucVu7k<`Uu+)`Mt&g6RqM43JP`SYMJbGO%A-a(sk2hp0D<=LHm3R^@1DDKXawX7^pd-BEZX5qIW^ zZ2|FWU2h*5aEB=wfKrnU9zx4Oy5io62w>f7;?Nhun#@nAnvpz1Qdm-UKWbtijucKM%91oZEGs9f@4?bk2jq)RpFLuo3qH%x1ryaX!a`PG=22t=;I zkhqRvc^zGvm2HEPo{fm0+2mX@eFvF?Z@2BUXT8NuILz@39A~chJkBjStIEUerJPzB zvuTt8z?d}bpjlRoX2gNt;d#rd*so8R(!Yd% zlodRd`DUfyyvUagK;MF0j_hW$7>W4=VdJNLU7U$c3Hm0W9(i}>Ek9QRX}n@(J%1`b zJqK6I@@2G!;Jw!$LR44`WvqA(b+_s$D-ydq^X!lbSK5XN+tu&~tR!G};tDlV8Y z>Yy6Uj*6n?;R)|^q@1hCEK@x`K3~5Lip`h`svbFzu>3~2&d%T(Whs{okD1s>36{bo z%?_p9=GX^qK-q!Rmv33($$Z!woyZDJF_hvVPQKu=O~nH~eh>sVQ$Q@E@kr4D+>b4) zTmQowwJ|!Rd|xqvXZ38#_IXv}A63of!~|nfMsrEBwN6)yOaFP*uzZvkDOe=OgO%RKj&L>0x#eg=vOQ3WP_x62&kYmIe!EJ(Ei@olF$-npJ<)Uj+@cHTT>Dr&9aVL^cu(hf~ zBeTG!Vh%YhhB0|q6IE;IesS^0MksJ<<$2#+$zpe4J~AU+v6jmv%|ojnhXhsZ%!Aw= z;Kv8A*Tv51BKV1EhZQ+&j+I>(U6m#<@Lbh9BW9|JZ0>+YyR9|{A-A*C`?t_64yXWoqz(e!L{o<2InbW0yl!w@IOYo^bp4xl(~T1Tw$UuubA|v{S3#wn@r9IM zMRtK88I{Vx%x8hqnU9~a$UQd!P7TLYDz<-axEBy%T=kAvXKfv%r+{?=s0-lh#b%Ct zjSQKF3$;qwzeue4E1cj>|2`ekr_G%}if9Xv^2cNmAOZn&F}iSL+17v~NLkfGl@|CC z7@L2U2?~93oe%vc2nGs!Lp_8aQotghc#Ri#kz};y;6;aqgkt-@0Y=A6d_3Uw&e4_K zT5!wG^l zdXw_vT&b<*Nn9CS6`%lZ7tSn;+MK6Bo2*L`34Mupc;6wJKpoY<=kBx*a+Xw9yI0wIuqaGlLMJkT507?X_&09e zjO!olWcFA5a|s#gls!;;2#s<$8II$u$kOHO+kHd-uw<>66_izCHSq_}ZQ=fF; zPFUg?wLLR7L;suWTcdOZvlKHeWx5_^-z@18TM8*tt!~8>>Zfng3J;28KPLctiBR>g z)JQxZPjM(&q4at9V(?*!L)bV>R?$rMR~o!bEG(-$JZ>#OhtNz?qt-n0o&P@Lclk zg$0`f%|&ybg$v0-rD;2W==)ALmP5aj`_{OY!YPp>{wQfYJ%{{S>guWgrNZfILj6U{ zJ~ld)NJ1tY)Db>O;dK#69BwC*YkB5<&eQbPq7Cucr$d1&dxO3$*AQ^Tx+hrVoj6?ZsI=5!`KZd}!$>tiNRCatn7Lrdy z7q!0~-8q4v&yfNeUBzJo=7 z>U;%BLbmQ;iO}>5$uNO`Hlk2g;IiL`R)WYn!Z={Y;C%8*M>8+_Z;eG{I|}yyrh2%L zjs%|vu=#7IYpfj3s_&fMnvTY!>&RP-{JmDrd^q$)m5ZPg+a1SeeX6%2&Ie@1H`e3! z&Y}0@>1hiOjEahMGdN8MPA;Vj{_-M)0c2fn*LDpm-Kfe9CQJ+VKMJ61`QoG*T)s*# z;9dP^SC?l8>d8?OlecPQ;vM!JpRdIx-yK~)__1Hj2CnY5A6HDyS-BC1I&o!)A5s;fQ$LzeD0vUbpOr z-O>%W9VimQ=w^MtMRlDgpP%fE^6L64Wc;3jhr)CA#t+G+aEEsTfUkW}5xs#C75bgE zo=zz_tV3x~w?}6|MI9_SZDQI7c!(0Y>Y0LFj+L|Wsbfmj%TO4){O|?k;tvDM%23HV z^n7ya7`Gv9WQW_ZPEEDJjBZt!EyF7HI(sRaWrQD5*&MMo{qJ(T=VOtGl0Wu^9JiQKOixV*ruuXj)NxMGv+as zYbHAmi_)2x`zn!#SMHPx&ipZ25_y9GgIXhRl*@wD&`B?7uo+O%?3bcK`sXthWdc5v zNYi!`@sl$B={W&tUkEg(_xv$Nw;jwb9O>-O4>@>Nw603Nyxf!5EoI%Utk>U-DtL&) zKg@3!lChIycn?4+#N0oR@K&#AMAqvtEc1O4S^*ut&jdcnqqpAt55uqOXOyJ7*pK;t zlD&*_E2R!*>!_@$F)yON*Lyg720=s6i5G#`xoAFFA$GYijImYegng%L-ErNWg3KG$ z77@M(v2|90kSxvR>|BiAYRR_D0mD&pB>cfsx{yJ`UqgFa7oYwPfS{B6&7-;6|IaTb zcb0iEcLg}p80_;MNMpIWo*=HLa84n)au|ge>8!8gVlcjU7_~tbJw$@*6yeGbaSkx% zU0Ku2SQ75sbwX+XwBgur-gmCb?Bm#=fZpBM?PmJ<`v$@2K6{^wX>G+u0cBiWGZOpN zz+l5s6`*l5TIAv=peVtY6N-k!$iPb!2*R@B%VTeQ1rvrv%jGL2n|`c2wkW_HcDE}| z`RY(68cLlytI|jGRHd5-9+LBt!3eku$1JRNPAAv8xsYG^de23fiFMunX+Z1-m11+6 zv^?T(08q=og7WX;cl*WzfwIG`_9Y7gBu zGi7-8rG)|{xhl29PkI=9 zE|w5FMi2yVcj)C8m1RmXU84Bq2p@YQ1fO?9yv{QH*q#RQj>a3$_;@*QS_tkpo|C;E z%AuFrqX35LR1mE`gLcqwJJ(IytFICoBR*@wC!vt`x=3sEW6k~{r`3y%2C}ISlz;f} z`5lHa7sAn>%eNxOAhtS9q0IbIR2r`+gz|wkHcDyN|C`sDsWQF zETSR&Ax`i#F}Bt_{Tbwqy$`%y)}8TYlte<0QDq2(JPiNCSkp^9d)u;KrP!h2Qt0*( z-0BS~@GiAQt)>#*tm!?SADl=uIM4C9unf-d?fGnW3VN@8N33TxZhv??U_HQBTb`OZ?#Ef&zrc|7CwmrZew58WA z96?_TKlInL_c-}xn@4`a1bVy)!dZ~UwHJD?n?L%lk$|=%CAv!Uh}ahlp-!Co>#S1l zki4Wg7(GBZk*!;cSzT0%|lCv_g@<{%N%hz|5DyFA-vzUrLwhU2G`b%n5 zqZcmo5Q8W{A-a-Q#*0WhW6PUBTDPqwxzQ}O9`qUJ6Aellh7f)R60}_U<(M?Uc=O(L%^KR$pc~@xBkUmrpIAE+hJoj6?!>9;jmsO{n~DmlT_j6 z@y5MggDXK=N4D|nMT%q`Hoq<%P(8P=Dy=f9AimyJ*yeB{cA*ia2&<#nRbJ(%afaIEpTAzB)9Hrdt`^T(R8yR^0HdLtN>*$bV>8xI>Pz zal6l^LuEN##0o(YX$OEwO?OvZdCa*6HdW6(7bbVZ3p_oZl%BYJ1t#gE%^o;AzeUw< zT&9PGhSN|@l?>~2;L8S%NChg4_+f918FmWwil#;VxHx;b@Um+5P8N{ zj?B1QF7t*?GT!o80;Q}rRUe=zO)%1Y;3W*Fe0@+gXEQkpfq6-b#C4#0)-+lRoTG=) zUoPu`T5LRi>Vb+frwyl+QLz*&a0Zo`> z7Sw+eqt5pDHcZ5S&M9ra8alMO6$bj~AYp40ReWQoD3r~%AK<`R-->~iXtp~~-9T*qrXA>VZV|k_q7&O( z9B)}wSaR!Z)Eo}ctY;E*OzXKJI)7+Lq(INNj?74g3-AbTNC zWp_+RcStXuChj^%kMoYfN%m&`eF^k$U}+g)oGL2eGHpV_uX$oI%@n+1HO23@>(_nF z3xe&<3lafz1X_2?eQp@U&PGAfC&xRT6!_v|KxCH_#MJ&FR_Ut4p)yy#Y7~g6wq$^f?2-Jb{_{Tec2@4Vzcg}b+3~>VzVhx9 zHXLHQP0UkEp1vilQ+(YD%IpWTPS#b{wSw!Bd$OqnJmr{l#hw>3TWx-bgF(7XhYOf9 zSBDrbnsYwHV|X47Mop#V`gT{oJBYyD)ju!oz=dG1c+7 z0tzy_SHUJLaok5EE2A@Jj47NBZ>DDr#8#0}jH-ASroT?F3tm)l_6-bB)fXlVAcFfm zpoOQk3FJ#kii-HDL_}NUUkWBz2)f>>WMA?*nZoO9dWK6DC!NYxxhaQ!A!ohDK zObI3Z(yPrFR?Vt1b=(u*y+VZ|A}nc%H&04Ckta1A9Y;m2VU@0g0--Bp*&oiyOqZ{; zhBBK%X>HKsU7vk*-OhBD(Gm|9rvX+Hx>CY3OItZcOpg zL3f;+OUpdo46Pu3+iVFE8i)MF9FI|2iIb7nZHUX0ORBE1#=I4BXPkvB`;TqdF{KN{ z@wQ|REF8P-nIJi~;|1(3Rx;}W4*IlVG4HE)s~pF5cWjwy7RQ1kCSXUI5V<=^f(hnQ zJSRj-<67%az@HgE2*~nt$CRG5$gFTq^Bso~c^q^`)7%ENI2^baF*NsI#^RUU%y?C@ zhvo+AE1e%Ht9*_d;nhKN5*uKGh*uG;#@{ZRh0M6dt!WLS79T_@6dFXq{P_qnJ73Vr z%GwgA(m6*@I=46NNWfs>}v`iU*h+0}H)KZ|cd6mrJhZ&-+((y{!6F-EM}Q{nku->3MRZ3tOjndhz3!aCYo3HIn(iCe${(rRLooW+j?B(#em| zoqWc}G5(p*6M}S>{}{tnMxBVRogo;vA{Twsq6InMl+{&L1GFA_zJXK<*XJ@IE zDERPlqlSj$@tL(HOigKcSA94sDJct{p7sM3cROi;rGjG2AwkA7<^_jmz<&?~B`Fk2 ze2Du*pdO#6g#N=eTf7!}J@FYA-+Ag#3KLzV_xdhYlnVp}Qe!rSvj4fB!6__Q1>8@^ zi=4!WM8?I#=Vl|9UZ}(y63(|(QA%Ku1CeUt{PYKvZU~uM9&SFJ2aK(Hs!3Yd!5 zZn!6u=$|E0LsBG56t=VTq^D4<#HZ*X}DP$gdgJ`i6e+6z4BWZ<|58(>B9>?FHY+ zX$pr(bdKAOC&`BO%NRS4QVjV&(dFqa!_gFJ(<<@&9$Dir`#2nK-GViDF&$~-hxez^ zj$5fXcig+sK){9vY!~ZxGxKq}FFL0Y&57X!O)<%i-jyI)`U0>wl|c=n{|w%IQp7LK z^=dHTd&x3ikH+{1*A0))3H-k#%#Yot@8I$dY9n&n&vDzHrK7lBT5b|w0W{20BR1nW zm+Leom`$|%Q}Ty+LBub6SLM_fl3U5`p4cSXr2Zx)+BI>qP3Db3!JfSQesVDJOAgM| zEz!GPH0I3czT1RT=U*mmTjzR+TJ94lY>xT5aNw8LqXd zq=}cqy|WE>uI~nVe#RuiNZ0Tc{h4{EkEcofA|fDY{6m!h>BW+Ez&CMmGBt&5+OmlY zS!Hv7yrzQc=rbVMl-ds!H3CiD$txCtMtWUeq3hc0qpbrKtg@EuG^u0_9m1@v%gyV# zAYfDberzUcyThnB}pi?l%$4zkjIdVS4C$bnz`OoVLh41hEdSi1ZI^%cAdvdsv>`$QI zAxU5`M7w*v3#MQ;5wAoK*sr&aHN^-e&=5z%3o@JX2J!puclBM}vujPH-gnvQ`m{su z29*Gg{moyZe~UZJs8)IjQmnYV*ATiQioo!447bMJv*TBb+*5#0o)7OGR_=u(A|y;! zOvQ0>gd@2R?_V1I&Ta}W=XIHtO7B*8phu}TZTiiDyrZ6}MNNa2$Ra~Y%B+qav%(oU ziSt2l{Yp>pW&SM>d12?V2wDAitb5A})zn)~KN4@ESz+EZT7K@0>!^h$!crv7ixCpo z<<@6>GW@qMV{cc8JTaiGthr+*9l3BLP+c{NKQ$Ricqn&B_5!19D}-Ku{ZiSc-<=0? zYSTulB6>1FK?pj>iCj^Zi_(|^^TeM{In*&R> zC-2V|l(bazBj`;D;!j$`4j)jrmW+}e&m{>Q`?m?4PeTUhRlb*hIPohjWBAWCfJdJw zT|FyiwPh?l@J3%?8MF}u)knS36)YM3utuA{X)QL(PIYs;yh`^}g${)}6>mGfvCkpD z<)xn$vRz#fId^u}!3im(D)Ebn@1DEx=J2~inQOuk7=!Nq-k6!IrHm6rr7^djadTBW z*b`gZL?3xw)#UhYgN`0|Iow;7NX#dH?MrBr0<@aE5H4qDu#V5)(bb`xTj08b^Cvxz z*vhUPF5;6zXMbO=UwZ%Zg7(<7-i{6)^KOkn>5VZleC~K&Js-XxO5Mj;bf*Qj4&_k0 z*OVIlatg&AnB#Ik?z9BE&f>G)omm^b)k!0jyt@x9HEh@v1pmI}QK_>*r?%j?1a^}Q z>9!K( zA3K@w%Lns1HgP%*=FBH{xyM>8-p1mKEcQ6$$WLKIF@GZ#gTviO`rP&_(1;{3ux5Vq zu9Y#HzXtEir?VwFiO8=NaBJbtG`tm4&-B_U`ve>Z%iosE%uSs?ip6Ml>YJ4}o!5Lw(Rova#&)Gi&zFl^2lJjtD3Opi>SU4w zZ832q2RS4?IBvNljq<`|2tIB)F~h4*8=?y*=mJ0C`$Y>7v1y5iMMlxn<&){b!D?vr znbNG%`1_9-D&Bm_3OY9x)UDXkXJM0X=4T0sArhmUqrEN-eKbJMzi_6=xaKLOg z&TJ^XH8c_BRu#C@=t`0zrQ?Ez_sCmy)m!Ovdwd)Du%Xivnc4o7(K+Qck$MT9B|LAh z_W^)7M0_sLp=f^o8okUW?HMvpY&(D!pHo_WKL=cqQsy4Y4J)RVfd!e>v;9Ydi+c-$ zv*A#UyS3sVTfUgyOf<1M=7lz43zkE=PzwSJW#jTZ^HJHIsF&#SmY2-aR>JOvum~-U zAJRFebCg`rUKvklmaE-jX0GIFHB2g$w>1+}k9<&rwCm8io14HrwzPI;uE`obuF;z# z9`qC(njz19uCXlr5s8re+3{XUc|65d)C?HP5W>< z0j88e`(c+dI2vzWN!grYUH>5mbEQ>2_J}sYjH=bNFRDyoPUUf;dYSwSI)SP#$kzA2 zjag;*pD|n+9C9C!oxRwMz_{q@tcRnsJndUg>0UgQKL#(zt1Cc97fJ}rJhhPHl*l() zA~KkC5~a2BNFo{ow@FAP(0zlg00f-t`=AoPZSNJkhLF}Mt^Tw|3P+d70J}@|_)SKm z$&7s_?frF_hBUj)CcF^&C1qt%irqw(oYF(ENA*-_B&xF0(|UrKr^O2oVbSz_5~w<_ zJ{Q*1LO9Ipu-f-q(X3?EHFUrlT=(VTv;NY^j|Gn?i?&37ra)7qHyF#}fyo_UlJ(4g z6&WKv_?~#Bg2%UEuN@2axX3x4qMPenW72)}B*oYOxg;t4F^g4O?VDuKJ3} z@FjPy!k8z0ET}%)B*b)~H^?Xsq}?}(z%OqdW~WdtXK!L?!my}rXDZz&&4MUg8!up* zg70b6I{MA>$?)ZDLZqSEk2ziB5oZ*3jW@}It1|OhJmcFEw=|8II*(Y55y<4y>OT*d z51vHUM)lIw;5(kM-yH4+%vIglkX!4H1`Ev}6`h+Dmcx79<02#76X>ouFhc?@l0GMR2liPwG$NY_p7(k#lB3o6QUkwS4`3@JQm`$#k zaxC%28G*BoZVnK$JO6xUytMA+@_JJF&0o>v`(0bMwjfF9QG;VYfWY%SLW^nm4AbP? zh+T#q$0zF3#kb0aGK+CI?~5z?G152hkqF?;kndhfBtv<Ndq9e*?TGQ z-<6C^@Z|P%aJ&-UvF{Vytr9*UUciD9N?X3B6TJ*j3%a;r7@MYSavr>LIlC2yo$a0I zUbKC3ErZxB&T!ZidrpvQfuDDx8{WIEM2(uT4$P&CbGj(>OE?`$ntx1ZOfm;L7O_WlUG8%Js;{5LUR zrY+2`E6ROwNa2w(C}^IFc*7g!7E<`fCE`X4Je=OUBE-ITg_XUI(;B|doyj50$B_rq3}&+HxTS~TaFJ)BGF1Q2@4&^vRdk#dA4U# zCz*-Cv~?a2@F8NBJGiQGVCIsK(je;-S~z;c>8i0(31q^fKHc;Y1Y}9QwM1v9ajxsJjYRQ(K*Tl|0$wLSgqT z6tK(p#k$F3wbHDAr6h2Oi9}ty@OS(!u}+7UBr}_E#986d!eio|<{QdYpG$6oCqBsh z;>RMlaC3kr&Xzj0eG^WBc-JNmHaWCot%)_)^+A6Dbx*#4bHPX)82~-I9qimH)yzh{ zJJQho`^7s&c*LqY;5&ugp7RGX zpGR{b1^v%4tU-@F)sKn{Jra(yl+dWO?z#odhh?8P z79QbrRDKMrQJFotwT)BAjJ*Q`uf^{Uz}4+xIx~_`OxYxL*Va9JLP$UsOni{`t8mIp$e5LAk#W!S> zj>TLY1o`|P;C2nvV~y z&*K2Q6K@T}Dt8?j`HCPo)wpyyk^YMeZFgoHXc)R6S`Vh*$jNZV*5o$T3XIjlly{7s z&er%D!xNb&k=FG1l@?6k@+VwA*EhtCm{!ayN6X0rdbjCzL2>F}rVuqWTkQF=m~_5w z>v?%BU)q9IMfJ1uF1!$4Z>TF@(ijtW>BF&l2T8a#y!GL785pBK z{4{wDB~4sLi|ZEfSh(NDyocv+WsAW9V-bhsrcZ06!?qRxIDR0h!9x?}&m9v*?{q@5 zHv3EdmtT}i5@La2M9R>)08>o^IEvRpSvwqUzDmYL4W+*)?H%9Rjx z38-cc>kuMsK8ZK^F|=zsK|dK-n3o)|*krV48eLTp4JFM$|9bsdi>(r$$pcfzlkEW> zInU`#q+$lEwEu?oMOP$G-UjcawD7UgZ^!X5IuLpo@0=z2X(xxqus#z6V#jrnvg6Ai|DuOiG-j$s_-_wklF5 znOwu<@S)ESM&ZxHBSXaA=k(vqWxe{>zDr;{(0r*K`_pe~vGdPAs8qcG+4AcJi z9dC)!?+%7P2u6gMChf$C`^$;Ph;TwERYLS2zt0jH8O?3#MPGZjg?T z(_vT{^=ow2NkaNbut~7MAm3NPM|?+dJ&@UC@)S47s1k!=ea?&wvWsm~77K^f*TUVp z9Xu7?VN$%(*0y=(zEmf8BE{ss|3rZ`&^EP0tyD1p?H-sgXwgS$9eM|D&S(sx>k#B8 z*}oq2o(Rm6sF}>`XUIx$C%YEO6K=1N?*W8-dSSK|y^T3120=|{x(@9d^Abm>@5RVe zF&6EXRXQ83$c6DhuwTLWn3W{iMj-Pv7^3SnmQPwylFh_GIS@rliRdjtbyjH%2ZDB{ z-|U@;J0dV*l58F_J6&T2;DN>jg9ICT?ZaM7sbyPljdC;0>MSDIo~xYcotaD-lmapG zekA`s4S1BC22tEm#^36=nfVZ(zvRfdi?q^nwf%sj<6H|KCpr3!+d%pG6vz@cV7SP0 zjA|a^EE>qeolZ3M_eH=AOzO zes5ldPUny;ncFrh5FsHP<@NS?=J1$msVYU52CRgNEFQnIFSjfrM;~9L_crA|@~Hof zC6ONWyvpBr_)Yyc(kX>1-jhw*%*1u!Uz%dtqfVX|-XDzDh3f&FCB z@o3VGy+q$G)=__W08XU9)<(AxvnTWx|ENR@5*hKy9my7j;>$Cu!vD_k9j+9A4heYO+wNaiAX1;l?D`cOmC{BZdQqi3wDFw%#U&1(}OFEV~iYA^df4t+ZKk zsNYqdIzR+(LC|-j@j@h*Ux%eBm8n9myrERqp?}v#@&;?v8jq1Wm0F`ZO}|sLd*jBU z5W}K(z37(wno8F70u1O6dg?OjuULQ^%lu@E-WdUxX%G@*I8lSyMRbGxH=4xqJo}65 z=WTgc`}0)@?*iX0TAc*41q1j(|Bip~T75A64 zK_>2ro-B9>8Xh(wA*KCd3B(TIN}TZ#ZamoX$?F|Bm61^s60XC4>+bU3?6y)9Em@jj zvZ#exWfK4p$SUec$<4J8-_h3~B}~K#a;y%mx~}(jSFDLO;Fk<)G{sqkpojNTPoc>{ zoEY>0S7@KORv?_(Mgf#0JC5VsIZ8d)65}Ta0X~N2fF}apEJqLLY~k_i#+xudCm0Sh z&1|!wYAPlVcN`HG%}v2@!}?bwnKjwQo>0iUAnta5&S>IHP+ie}V>I&g$u zv3?zTl~`1h%{h=+7;(8uDl@zT8ypGA1TK8Km9cps+5Q%Yc{@(q5&fUQ7x06Sc43{w zN;BJNaaz*Zo=}@!U-}z~MnZLY=7vSwyg1>Xt~s?1iS&O`M~xn<^O$1{&y|@RJ!?7P zcxh|7I{vGn zNww27ccM)NNo@wwCug2y@Zx;Lqdkg%d`4H)H=26zDNKc0Z(fJbSgp3`PW(BbgDDo+ zh~)G%U+LDTvy!2)O*KMn>G^ez|K)IwDN1deAHz!^HD*0>udw)dv36egYS9`vm@;?~ z%B74gENP7!)LBwL#)YwHxSx|v93EM71;pY7(r0KQ8(Z#7Y?Z~QEk`@J@QzvIs`Hyb z;j*YO9X-(sJw7e4*zkKIDl41}k$7KGP8rhwvCcy%>F_%`xqWVB%@6{?D@}eXhJN7IEZb8AGqQbk|{PldXnG}J;lh8DLU4$48 zsIq3oARB>1SdOTIa1~t;Qe|*+Kz#F-c?5r2dzsdNY^jkC= z-GP%VlS85xs^zR$E)zcn~4+^`7p0bVWRXDltCVpk6MkciwO=+K|<3YYAmCEV)qx1=TCw zMyqq`l4hVNDJ10OQH!#pKGcdYs!uE|X;fdlx1^}k88hK^I^I>X@Y~^->&3qO=D>kufvq1y4nONWbGB#*Y|;t7aXFW zJ_|^!+!#_0n2hKpc74LEH?qyHV>^A)?fnem?Ug2MAIQ+|hFPsmEJM$66TQKY)lgFL zNIp3c8bUBqQgn(AaG^Sp3nr*3^UGNYityU`1(4?=&8cj8e%JfwJdeWRPQMtXA%zn@NNdrZ;tk~>SfREgBDQ7EJ-}lJ6mDu# z-Z!bPD1bNR^WxhtaMJ(rX4!bX2_ZWyDsXr0XWsIo~{kJa0 zN#W)_b21ZzAhxhO_DYj{hZ6;{U(ShDPEm8DIV~d-(P-d<&7if`1 zLehdbukrCy6F>Ds+Eki$uQqdJZ1di)5`2fnmxu}@QGw~%?oD2|?J|#DfxX-{E9%$ejN3og3@z#Yy7D}eyW(>A!Gm;2xMQc=kFcW$)Nc$Z_(d4J`a}uh z2UE&-yixnMUE)3Vs09(lnb+&ph@oKH2<PMlV+-@fUje)GT;ClK=q1Bc*DY@H4%{(Tl@ZAXINsY^QX1WSJJe6~ zGe6}93MNOS5IgZKx?7At9`E`ch$-pC_-)+pgVv;%w?Iho9;%<)M`j~zWD1TaN}A3h z5Ng>ysp#OKUV;+H^FFX3qbw%c1O(f?J_t8mblKEKR_a;t7s}QTIlN(5!X#2M0N~RW zv$VrQ7-=81t+bB~T}^B~vH)KKz7x0|!St_%^H9-$hjOZl>A|{lEP@2wSOAvCB$*bo z6%3|JIH}V($I4TKy;ldAC=)5}?>~x8hQN$L6!8!iD2KDJ0oWco@`~HSRjk8K>Rzdp z+yz8Ni@24dbp`umR7T@!U8zBJq_B@Ka71dP*2?vw&MyFsCh%Z^0Fe`~GmLhi1ESf4}c{+t)h8PAB z{4%JD2M=+1IV5w1vA01vcDL~rrC&0QuR8NI=-x43<8n{zmwR#w2!WA~7y}1KLw9+b ze<)7{^DF!2nJU>v3sMz8 z=#a?W>KSNCU=}d8O<&&aBtv|jACli`yB9AJu8v3>(%ETUBRUEyLaZh@EJYT{&k)~# z%(vpmpCZr3$L}6-L-n+i+xI{ie}I-Jof+7u9mUJEq#tXzSXPh*5U(o^4MW{CAPxARYrREGr9-5gwGB zjAiXyipN}9Q6aD^{G9*)DCfCN}=sPg_z-Lx~3dKFfxH|R}P4I!kH(lWv$si z@Y!pqGF>TWljLXFfb(!8FM@99dD1`H<8Z*TSgqp$of-VS;#yT zluTeK5a%Uaw!ZmlBpmABMMWcG`eO9r(9Na4 z3wy;%z^h4E!2Hj#PVWRYMI|8SgE_h`?579P;d!}VI!wm-1VYVDqzXXG+-#MZPA?p5 zrXCj?`Bp)2`>bModm4%+^wbh55<_5X|9L?>V|aQxZ`jJ_f)I%$ia#G~K3wP~z)iY7 zI>GU`mM2Y)l81v&A&gfPG1vxn2Ce}OGmT~*d`(nED8Qa3QpaWZvp6?+6=6w&0TT9_iyzGtrEb1y@j zvG(tpnXnhyy)_vRC1G4rQ?@_yfo+oHJne2oVp(>aAS;SIs^L;Psx_d}u}2r&Jh<=Q z(BIzRB|aH3d~x-X7hVfUH^Q4rj!GoigOIV6mELO0iHWLs{>+paTUn%ebF zM9hIumE|Ih>o{}jV&PNMqt~3+EYZkPDY>TpNCi@&ZuRZQ;dXm)wHl%j>aGTzt+q^( zmEk9Ks7bB_x!S$)c?T9b5_;?KQ$?7K6EI;|v4UWj-PdX9G{sDYt&^;EdN}zr zKZ(Aej}y=({mvlS-NZCrX>DcYz%HQjx=7iB`mbPw@a%lQ2@r&2CfC9}bn^%>+N3x3 zMHz05>t1wa2p?J`@=SfZeD2~KaVkfw(O!Cl| zKL8q0e<1q0cQ(?cO6B|8jW8Qgg5Iclwe0yBOipU_JhUO#!aSwLh};NhY7+ z1YaBMDSiA#Omi>I@L91x!>RhOb&w*p7i&RgR>ZvRBZI7q*dOUtC<= z!K2NuUZcY-eRUMU;&M8&=d$C*=ft~m*t{g*!2_QIL=z>l>K||1^1Pwz$VBl*1_9!E zJUmYy9)fmR-9FFm=-OQDu26U2%6n5aHF2E?sEOv*Bo1|x;qhw)bf5Rn5}lWr**(;v zcZ6a5I8)j$&ut~j`mBME=6v}BdDj_Xg`zl+I}6750x3k=vg+wo+n(ascSAaYS`w0a z-Jkz~C=7^kS@2z`;W!u%FNYg9!=xK`s!JNrUK<`<%-JLR3cBy!H198(wHomV{58>_ zV+_Uv)@uT?2s=PL^lgFC45;QEJJdGK+ic``cH0++ueUmE0kDqF+}NnELkYx$^e@*U z^+qFxE0z_Pd&?|~hkr>td*!_@Z<1&ib;U`btn~x8d;`!_5dMbmU9CB*+Mkl;;4!qN zmz29lbM)C7`L;cKOlY|c%KOmP(cC{)?Ym!ZyIVO!oZ3%GN!p`<48-)N8$d|=dI&!f z3_;)&59rkRu&rKS)z6x4%%{%PM&t8w7h8S4hV!>1J8mB@#8KfWH$7h8v!7#y6fpYH zY|O0CZ8&w=#hTcNGaTyo=#7{>B%NQ5ZIh_$TEm=#7V@F>oaeXm#@3wUjU^3(D_{3H z-1b(qbbL3(!9!~V)&nfE6*S*P32n>1?NM+8u}jfv1}J|PV{ z9YH>GVgP1*)|o~7A=uj`$1C)x2C|sDPEeSyzwWZ{gx=ZkYBvRoVJOnHFJHhGJX~@M zd4N>Mfcauc!EV)vE#KHcxVynkVe3Oz-S=A7txJyarw`)S9fym#Nj)gl;e=;i@eMjD zUEJc7dnO&)QLuzg5WVp?(cxUki}|PDfXZ}wT%cOdoT+U+YjB-j@{h0sZ`CC%sS9^j z&Esv3E3P|{Cwf9Y8|%=6gTuhcvV`-d{@-J5Hzxu-wpnE~yqp_5fVz4}@%3UcJyl_A z5wNSvAWRBZgp*;cnfY5y&4A1}`Th?sc!COv;PA&O2MdHGMFkZRF)=9hCr8S^34Bg+ zM~E1Xloh}Ib9f!D;V8@P%{))>mnXgnVi3qGJ8@c%^M^Q=xA=$8jTv~C$4OO4=!$;b zg%0Obb^`hfJ2wX6IWE&s@kh%hV(7B>*7>=b^D2u>`ax0Sq5?sj5#qK#DE1edR^9M3 ze@COnKyM{Qwi9*~W>))uHZnDd&QuuKv?zqx@A{=Gs1pj5r{7i{+CYQ&hN;1ZhZX#? z@bu8~V8T2&GFym~ZZARvH*5SA@usGsGJ5k-coTWK~a|M#Avac z!FfbUhj|uBpMIMUvA#Cn&9L7f`Z|k%T<#Y(@(Cgm;BsS3N^g~^E=m75xnH(z=R^NA z%`!MdUm!H&oRz9v3_*0?kiSDt6Fi;&{r=dwoI9X9AXlig+%aZS1GqzrYt$-_v&pvO zoe~Q|`ozV>rBM zVaKR4?jkiAT>#Z6sV7-pJI$>!x)XE+8IR^hy8Y~g+Zs@zZdy+CNFO)Tb4;$_deo~C8;KdGN1{SqRL_H zOP^`sR0#;Q)ytC1Yy(Ie4jU|X+yDo`zr=@bWbwi_| zh8n#gfZ};;)GL0t+U-(d#ET2{@HZ*0pPxdlEeDcsQFFz|jLu?vOLe$H;2#uvYFQMj z^!Xjd#tmn)4Z?b#;)8E@N6tdjUyf8qbkw7)%@Aq1cou8A<&O1D<4_buC;z5AbGmRl zCYBk^u2|zS_Ml)YN%mG(@!lJAeP%cl@&aOa+iTiUrXqEz!#oFv(Xx+H6FqiyI?0Cj zXvK~8^&Ya;ABn9yc2i~Yg%au#4(9m3&}#e?yZS1p@_ec}XBx_YlTBviE0CT=H_up9 z7KEfr_Vu{`dbIULSuHNKOk>EucsqsLm&q~7)?|?%(e&o3@-Vz=M5isFZTIU50|Xnl z7#GdpHDX8}NUmZ@t}#Q$oikCiiX!JHi!sZU^R9u2i^4FBAaBOeokcj2XU2+4Iw0mi zvo1eU{cMvAy2l>|K+{{ge%`B~Df>&EF4D%n;&x%Nc#I~uc`Z`)yjML%(ntL>SO@WH zvcJK>CgP*&E5_Ar2A13L3$LB^r{3$mDl>boGWym?&vVFP`;=I%_lrHq*cl>Pt+etb z`BmI-wP|{OdD;C!iN_Pu%X5>b^#pCxc!|)sGTY{_)KC$GB5Ia8P%$0OfK-Q8SYh%w zUqU6%n?`fy4(zXJP*iFLaaqzZYFJ?j$zmBHMoW~VICn&yyxcVY<%*B%EO$;*W3%Q; zqbma*Psh0E^RKWq;n9{9(4VrexjnH5ldE4~eEX=gMfTSk(<5UshOA~@aoc5j;is^R z7*vcsvXi7NdEGvlmdCIm@BIM2maiDv9M`qF;zVZl`06-W#*^Jt{ zg~5$wxLqFn_9OJ!Rur5J+FoG|S)15v1JdDla<%sZ96JAZuhn&0k0IFj{R7o~ z!)~LLnmE@AE>6HZv17#@6~g9@Wpb={h-PRM8L?|_R?)TjVr@f9Sb@$iwnfFJ*T9z=DlA~fs!)zjl z)-s1Na0WGk@SL%sv&D*mB0Iyyp?Mco44W7kgp}24wxVOuHPCij6~s@P$T!w3F5VH2UX2WR8NZQo8-0?tC_MFP)}n6oT;y z<08siy}W!5T*oymiw)bjuP(B-8XV^t@H*m0iNU-i?1_y%A6M>^czs^Y;f~2i3QM)| zHt|tl7<9(^39SpuyW^f)U3n}ET8FbdHL5~Ah%A5nYsEuIoE28%PzwdNW+wUQ^zJ=- zAsC&Jd2S7_2vABsF+1M$p#5idzd&Xe#s{#{b;xppsKr~#;%@jl07p2gcU7A*lFk)* zSW{4GXUN_3tIRA3LsCr*s$_qBV}Ecuh0T=A(z2v@QbS~tv01w@-Nsr$_ygcEot~GV z;+`~&rW76DLk!tuedL+YgvoNx3xi&FEOs?Wd0G2j%Vxy}yI%6`zNbyebL|{NL^=Y> zHQ^~yDKoazVUq(1END{Vx?;}-=-PInpioa?3js$1Hzl@dR5ian(F0_H;?^;wm(MP1 zt4{SZ+~x-bWcBv$ZByE9VXT!rr%5_7Va}uZyqC5=;?k@B3vRuJ18gFnTSXAn8#41L zhAprtueWxEr`tO?#drl zt0s%{mkPnCpcaQb8#DEH|D!I79%VD!C8y(2cXJc)sQN!}g!hT0JVgn26uY)3OQray z&`tLA$b75i+63>fWN1MJc5-IKtI&vfj$!Dwke*7K#Q4Erl3r>Y6XDMxEJvXyli_lF zOUStmDDwquO!XcJR;wfBt2~Qo8S(`bF+S##2T~bo%Y~EKwx+SPLcH#{l!JEBoJK_E z_=>>kBn6$Sj8W)TEQrHj3SQ_e>D~Nws6&;K{hyeDObB936@wLk^g(<`DrC*9khc)Q zQ4xA->_~G`O|EDz!G0X2+|Iqr8LgrW;C12f{o#7tZ-z`SjD&*DE z6~ly~5p8OmCq~lWjV`UX6NHM_PlZ`Rj}qUuh^nM}u0zWC{(0~7c`i?E;=dM)EVlE1 zmFXD#W+3=bSa(b}EAlzaItCLj63z>}^Cz~r=AyQY22fDAN@inzv~ef?;Fmtv zonh&m9oKL-i;^`a4bl00EBbmF%D_IQNkCXQJ=iPE{e7$RM*>`8m5ON(G#!q) z^6R^NTU46Kpa=LPt=Npp$dC-T=7*t2-s;p@fNQm%l?7+rxK5eE_j~BGwtiX!7$EOD zlaO>HEbbNds4V~TO)Exyv3}w}C3DmdwK6}12tTQcZI~rK^76d_(*SS){Z!N*xv$0D zDF3h~gx67+B1qTDODx-H{yL?zv1w=x8wKP&O))&BlnWloE8s@4<4XMDlUbRGAJ;F) zQRbD3mo_Bf^Znkl?W02B!%*`ce7vU8iue$xT_GQ4>w9}9QMmtGtoIH=Kr)Q~&`^Z# zUp&5>uwYoDn@?P-Mqdx!Ttz=4!I|WyCxJDIrz}_v>r0ja0$qn_88R|uwyIt zJ~HIS(WD7O)*m<$nHC|~s?^#meryf=dNmRJdcAm5ws#!Hekprt9YZi=Qd!(w48wDN zPf`Egbdg#lV^Y>|R*+fM+VpJ`>Ldr>8rjcTid9iPTJ&*G24S}O5}5qvY9GE2Pp|?; zsh+nXtN9b=VLKsxiAy4-xZgYb^WRvIV+xNowNjy+{?bhf?Mk|=!ssMEDv0c72;%u- zZ~3ezl>=_T+56w*%y{n^HDL(LHPClXak*MEy=Vx>8b*OB?IE-0AvKN30V#h6ug#RMHIf6o zesb}ql?ZC0T&a<=x5B}3#x$Aef=H;*3Ie$)25gM%fW7a4Z!`$ zVDjYRgY^o#O)hWP*VSt@uL-oEuu^+YzJd5PX$<96h+PF-WVM)K_inCAMt~^zTm2yg zm>QP}nRA(C%I)iZL>6m;>@BhgX>Fmk8k_s_T}+lzBtvW1t$@5Rl-%)CH^S`u=M`HLY?mC4i3^6j2m>T;X#Y z<4k%r75iD|_G!D1-qbxK=ruF4l_fX+VveatJoM3N%bOGJ&2p#Rj~<7*dV#qm`hJ)p z&-6}YYeaD;oOd3(XoUmxfZDN;0=zeh>0j7Dyky zUm$I15)QLl)~)f(;gImVI92n0%JKD?s4qMTHtB;p?6m#ke$7<e75bD zOMGDsGOuw}*kXgtUXxJp;l|}K`l;xy1{}GSd5~IIc1)%Q$rPq@n39wB{2om1pF;G} z+oj($ol%NuPyVXpV=&lmak6A@N^lyXVSTM`pJMg1)&>u5pTR&orpRE-Ld&y|WovlX zil)4q!V_5Q`s=wcI_(R`+==1j0YvZuN^;w+p2VPT$)A_!vU?-1myH#c&V{a>_ikSUO@{}y8iBv0?-UQ}4X)=m$25m)Gj?Y< zy*df_-j~YfhM%XF(j=~ncieyMaF1zF4;)_Bv0n$1p0{6V4srLtg9l!|U0rxlL!4|z zF|&52t{)KZ&AME@Zb$c5W>$Jc!_E!Fzw zB6uDC@{+oo$iHQCF#Yk>eFV$pzht6Y4VPpWWk+Y!>{WS%L}pijjCU3Y?{{uZn|4Rs zh)4MW7p-WvX+43LmQ=@HsPgS^Ul`UFpp}+-SKOa|H1~((B<;^Z>8f553Q>&TmgUk4 zgqOCpEGA{jz3Kzj(seXKt4~=DsK@X)fAgD5lA4wq80zEa`*6k6msA#YZw&|3m@ynW znGO)HZ)70yZxkOtPIT6S@&yu0C4?;rV04RyJDXmrU5!x49B8c6aP2>e0?09sXK&8)iM4hdE*4hiihYi8>Vg z5MHcj&m>u0>SMPH4sH%pp9_F$jQY84Ce71+O%G9FGje7g)^8UUIm^>=J^&Nx92qQ8 zU@guE8#6mIGeq)-_+TNQ0rUH*lvN|Tyc+RpGb_=|hu6o?RvD}*3WV|ol5-!yraVlf zX;ndKjI(=6ig>|*8`?*gPoBbj@bE5pHUd5w@_8M}rCb6mIIwvAqLNHf!2H2b(z$zd&0g85YJeysz@f~a@ND<@*(YN zrZiX(`tb`KMu|=u?q67&ENBRm=zxFz+6dxuH{7wE;kssg?+-MMm%zK6XW1B5DJzH=$b4cIUk-<#`r4WKydNc7X^I$3Iua)!pK zn+5hqs2tuT?~sCj+6M)q7%=I7hwr8QqKOy2n3msvhzjQAGCH?cR9gzI&#(>@oq@Sb z64VdH2aSQs>}iHoYXwcEkPPG*wu*8gp76oizpzFCLeHlr<55V|N8GVfIzxYPq-d@N z>8v0we7e8baqIJt&@qK$z3Has_p8XBzv+11qU-p&A(aLF{CC)g8zXgW)bi6QZ6Wor z(+a-Rq((0h?nh6{F--n2+qk`93Ez%wX5WnrcyAFpuUo*wwF27Nzq zOE!01|0g@IHP|NK)`y5IRpfMF_axfA{tLL|X=C);lq62qGqq44dAxIFS0=SOA;Llb zj$=Lg;SKkSR~0j=Sq!igBoP-zr*_zCpK-X>9<`KEaeW{RvReP&IRClH2h`CX)!VwyXj26Nq>o~pbq!t36}rsK?_yzNxS=G6*5 z=$D*~1*OXSHda#ftBTG)J-WQ#EDF%%DbDQ@Nzr=7_%z%W7%Uo_&JN7R%CMASd-Lr98FS)19M2LknNFT< zdfc1?!^P@OfSTCPjaK#7#iqXKkE9ovy)MjN5Dr1!HWfwRZe zz0Giu<-80mQMNRYw_NmrktEsH)cDiQll1Ii$p=P?o`sWjuD;wbxY>$5bw@H;{Mw$RH_B=o(OL_6jgB!=QFX>}4`Rm^OcZH@_{c^ilE4NsN#I2Z{i%3G zdz%?5{m?Lqw8MF()9G63K%c?Y-{-)7(%7YIFM1po^3~;9;wo)Vlr0jNhU6+yan!Vl zR26&=JC#Dt%ht_-M9%l*`QAFF#K8Ig;YKt0B?Rr=j0P@y^EzYcJJtVBy#O*~R*yJ< z_i1%O)M?65W_1vhZzaIAalLLbR$RdT5qN0@~qGHPW8UkEN0fnfxphOj%4cQ4qRciW6cJLa#*;RI%NuK~3!-HdB!f(kVA zel>>cbNm1N@Zsa2q==yMJ#J7|?WR-sh2qD9Kp^gG|IkB!miisAQ2eg@6Dg~87DhG(mHl}jgo2Lju z{$s1#4w&?B;eVtRVQ(Ci`i1WoKxpnfg0MXAcY%D>I;_;fJ5TEUo^t;!!*GS*=>PeU z60HL@zViK`^Zh|&{Q18OZ2pg$_KTEzPb>h(JNHM8-CZFE9SX%qYqEmWW z?SDnZlB}cA@6=QrS`0WQCMK*%v1cEF+uPfIV6Cq3l7zgx>Fv>MY9vj0#h1Ipo~L}uWCa^fEP$G(^&(EsGK4S3;I3gdS0G=(h8LC8O=Z-A z(<8lxO`cRCH?Cj86(9W|fMb%K0~uG+MM5m{F+$S;+5y~?N827Z%R57_pF=q7Y`%;> zGUz}0J;9g*$-x8-DhPi>7sKMI)MK}@e&s4GKUjsy6N%PjtUa_BIES3oo-V~`WVOmp z3S}uecPX&TIp(QnRD0cR4tuFI5(`ANOXUgj8qwK{q^EWrWYJuXdWur2)FSnEP)XeS z^mC$~3|6_fnSmcmS|3+Ryl%Xy+VL8bhC7iDY|f3WJNDuklw+BVhZK*xO}?*qN8)NI zCI0ZFWu?F@?w_!~PHuPln%i#Pd&Ef-x+R#Ia@4!m8GyCgz+g#l)pOW1B*R50Su_Eg z-Cw|1=M4x;q!c_P?AQ#tid%5z`jRn9eYAm)b&D0bnlU(;St>yZ4Q(*H1?y4dAf(~Zaf)A$F!39*#!U}`ZmX^ zjvDQ0<10V43TSDXH?#q!Q$K=uXF^7dwOIJDi;VJD?I-l`Tcf^JiLP31(b6}a>|*&z zLqN*$aWhM`AhO5lbk6!>DrPv?bOM}4YVsQAG3xMbH0-5iI{FF-_mgt&`^XmtS z{Y%L)SL5emr=J%C`bNSh1kM?)F27}_9P;TZHDQ?M zCg2=GFLwPtJwX-u$b4dz^Cl8CLu-IsONhdGM;{HLlfl0=B4(CPuv)7T`yyUJV!AuQ z&%wz~5%`}qt~EOSPB099G6Zeh5l-a|qRk1!(-m|cwM1m;(nn1DOK-*C^_GpI9zLqD zXbB`{KPdR~Q7TWSjbhYSg$pY;~qeayl zM!fyy_6|Ae8jbxi(IlC}e;qe&PMCS6>A6CW;cV9FsT;Xl`3tmG3j&-cb-b0#@?YWPcamxoHfE>0j*Flji!f7 zXLZoXe;XC783)eixe=UXNS-%XvP|(w#_xZ>9)inW1ZbL>zz*r6q?W(YWK&s*(^OE9 z2x2BOHz$8)=y)c+HPzjB_@k~RdB=HtwJbDk1aD*+QgOg!M@@6~4RSqmL#^`rc;$GH z{6T`;#e}im$4X`*KT^=)j87A4T!U`6{ETsPU&!xVVM+?q-l0L3MX#TU41HN>LXHdp z>!ttxG!-@y3A7b1Q)oE3P>#FJ>v_fIQ(kX%9ZfoUU7PN$VxFSZ`kw{i9kMwPa)=`A zbnB+2|EuD!nDCrL)-oh;fPkfVaA6mS5k2|I02cu`p2Yo^boXfGw0|=5fACm9gm9z$ zW15`khvD;`u<;euz!F$;dO3zJprn%eD^X~rW%vPY;GPi`D?D-9E05agv!Tk0L!S#% zvu&IFkCm_B$OG}niaxsqD^kgYMD6rN(+tn1L8esVOgM!v=6RIu-Ipn!5APK;F~WgL zwEf8!5@vl{zAp3`nI&EE!&P5sHfOek+>_3+X1R>jYzbf*!NcQ>_s)?)G9?YF>7O~ z+_9MoUcZb^ot4&2zmO1Uj#goJthDsq#wV)mMNdA89$|s!J^J8;qOqkKOY=n|%IU-` z^ey7V-_mfWLf1mHlT{RIvx30dKBYw@yO86vCoJ7^-fi&8p5P9)3;daM0z-j=iVqN@ zK7mdIE!*9tomtHBF+mOBlxNo(eq1W(^a?q*evWK{8{IEq+P3ggx#z)4aJ{pdToj_B_yRB@5tbvXfYlEgc7tqnC`F3~%0BmZ^Ow zxAGwTBtP;eSXeW04bwS{g2&?-F|Yu*Y{m%VIcLb2IzbU^Zz$#7e$)zdKQq15;-coO)HXHr#Oy|MCUIILy;J({ z1ltgwNMghanS8%)@!G``@c~rSUgPlv0;pCUKftxTqXPd;{)89nE1jkp|As$OYLqQZ zw!3bKN&{$97d=O`CFmrHPf@7VSnM?SNgN%k{qox#?8epAX02x#84dA2a?={qbbZNb z9Ob715+!5R<6Ju7OD?nX3{NRDu*R^0K1RWX<_ex_xPgGrP)lS|^MezzvBdsVsk8#foDba5%Sj z>tcL@VZ8c92NCOT={3EstD(2h9F>q_7XIpQx!vUnM|GIVzAxX;=s6>odiJD0l4{ma zD88T$$eI-x)?iKcJYDGBj?a{+MIqvSo6ftVjxs0Wx~I0p;_lyiNYGJqcMC#dB(S*4X zlbMflxXnaVO;F!47>?*HJJ$4?xBn>3OYi7-sw7k+p$+wYsgtYs;RjAiagw_Bwh|7j zZl6>G7OVMNUg&?e<2RZAxf>^pt}ahLhL1G{=FvQr1v*yG%h#5!X4rV1A!BV5r&@d-6Ad^><|ufp=i5K_~*U{J0_W(f-Lo?pLmHI&2(pyh=6oBfL3 zx;gxg9-?O#kdefx16uh^21GE=>@@M=k(RHo_-S%s1k`V)F%`wUR};qRtTW~VXk>O$ z$aAC5IU3HIFj_+%6C0-RWL(?dpXkd*GaT#8x|*DUhgamHdhSkSGHC|7Cu`pU`;9_p#DATd* z(h^wAbqB^kw%fF8cDdofAB6?eL)om`4933P9lhDGeCD@eN_!7!lLOfMaXtn1LCwnM z2O~wu0ocq2XrDQBDTtVnYnVJEOgJYyaSskAFp}UtiVPBrUg8&TUoidhj5NB4&i;2!xQJ3GOfu+y=Mc?(V?{ z5AKizcelZU+u-iOePD2R*WeES%Tbnr>|!1>6zWTc6HZNPjy#G-AXDTEr_4) z%8Xkaur39RCm6iGow+AQRea}Ae zwsOY!sDR9gEQZ{~iyqBf2+)bTLyY|K*cxe;!LI$i9Iu45nVy7fLH_W3nnOb9>YyE3 zBnUn_cbhvWd&}sqQl9#J1y@0COM8fPuH=Nnjz^B_$GkqGZz7unYP1IF8{()JJ{eI! z1J}3uLp({G`~B7WTmgGBl+!rUjbpFPXAg$&tuaNUw55mNZOp85jNEzv`QBXhSOzv$ zFKw+sR)CKR&~qk9{QdN0P0@%>krF`s9CG0tR{`So(BpucXn@rD=i@ZYAG?{-wTv1G zDngH6i#Nn?n;#r!^wB6)9qbqv^%RO4ha||~~;tQX{#LaiHv2Ke|=wJpffPI@rQt74M&$EIzWMnD3A0!AXQ(w4MW9azGXGPVn7 zf3idq%iNCMV1#odLkS?Yot>R|8hi)X$X@(l-Mmz9P ztvnCv)@F2m64mRG-kC}5&2B*trA$cUD`2m5w)ADt4gD)E%49m;Nw6!w{>soi#_=pHq@(f3G&)jz+UzAgy1HHhf~#jw2mP zDBPmrItd!KdmytrS{_=`pl_n;DTccG>m%^O3e;$gh5=ucTZzniIVw5-h~)GJjsEpB z#8Lmx?A_$PALW-Qoi<5mf1ZG(IL`}w*{D!Hs+ms+rQyBvP_pk!%2be$2qKFgxm24- zFc71}Ia{RgCG7FgDbo|2pdwk>Ah(Y(!QU2a!w|=T>~o5L8W{Vj`hE#fT*U{k3@gT>Mgn?5qzJek2@BC`>=(9q^lEkkLiJBtW*B|QtL;^r5Lw$5Vs<; z@9>$wIel?7H1 zq8Bx~2;Gt$KgYl}hp7fyWr$Eub0EK<(LB+f^Aw3=!xJ64y3eWX7nE)r>%|{!quGR% zhwY0hfp0KZM9aY#%qUA@h%oO^0#CkEw8dC5uBQC|v_WjO?Baj?z`qtpQzWAL?-l)P z07a$10{Bw#Uz5rF{eDykRoRd?7e8$@Nt{k293?&-mZp1alORoxBR7 z>A4{$o_Qoi4#}(wirrsLZK$PEGfauOPZw3?6!6gTo6D$bL8=bSN|--PeCCJQpgfbv zRwcPbYrUaZzFYd}XZ**sPEljnPPY_<%EL;3^Y={#cfWCGdRp1P!52MRC z$8O`&>`w9c1_d>e`lPrvpD=x{^6O*GP;SD0IjK>VG*#&N^Xf$1VuEl|=YwFw2{Ohd zOWbV=i?{d^I(98cycyQn8Gsaoojd62lY0&~#XVYGKCNdO3s-1vCrkaqd?}zvh19p1 zx{C*Kx$n-dDOtGV<_zm5S4HL^jhcJg3@>`orT;xfywbnNfCVu=BHic{2pQ<=Dph)t z1`$UArqjc}P2jVFC}1mK={8N@y#8P8deSo8R_=65*z1&1?L7X?%r8=7y}RF&*ZoTS zftp7-({Zl9XvM83Tl(qHXb;6LNV#H$TY9wh6yW za)Bxo2ZoxBmUO?RkMpJN@#Y7;hedu70xC=_xepn&0b z!+IXy-~{n{VS6iN*LlQ88`kJo4b3kDNq^K9AEQtQEqLGuZ?GM=b7h4*pp%_&C^k;2 z{L`|#{+#!tt$is-MuptK^0)RKs{Z8tBx??<(J{eXb3EBR83)t9hugKxM$PuS&jv3z z@~FhIwurxKsl5rUZrBaoRcW?L&oJqd8O^;AF!5FoG6L1 zyc&483K$G$@H<16Z^lhiUe*e|_Q?dI0``_8?rs4D=nF&5^i@5567d+g3V-~`D6pKh zntF!J868Rl!Sb;sCTvQz8CP_h^mE6TYJj(L8e(Nh1<=XU&u@Ag>C_RdyTl0!#j zRNW33A2~EeCSsd!3omrWtaddLXloLNC5WYYvFjs%O>{LI-w0G#_qVXZa-fqVA`w=f z3J*M0OWwuSg?h^2?&g^tcTqli7j)V5+L$DHXNZ( zaD?7_FkZNOpyvr()}GBq&@YWJwtf@l?Eh^ zw=(&(*ss;<-SW#b>BRifu)yRjM}#gwhKA>B%#{AqFTQNJeu;$?0=v~Yc^dNdr^_MH zqL|j_!lm-8sBO3dSEEjQk1l)~;(JoHx8LpNHC&;Yy*Y24@L9b1xK!+_ydJU8GJSqj zNQ5Y<5{15&Oqp%r6X0_*zbqGkxXeT0TlX8WDrm%=;(bhToz~Jx$#?MHEa}hlEChyI zaKSn{;B|@lSgp2&748qE*$Kw2;+h&vST>Pevg1u~o1^sqMAV>5b68asyflyNtyT#r zd=9P_q`>w!puE;MT5+4+o3!OXj*Fy1)c>|P4met7^M8hhYkN$kX~l)yEQ}qI=x*8 zoP?h+F(kX}4p9dQq7PlOM9?;WG~9Leab^ys$1_54Hb#$ATOimZ*lzgUkh z*sv=wnQ@S?EtNAHNtZiA%yviqtRdViumi0 z#>^gH8ye|~{2(Z=@w&!Cayj^6lB^t&aujA?f*IL}UVK~vw@2qU;-A4Dp(}FcQ=H~5 z1X8(3){TMU^Y(r$2doxU7k^x6C#{prFU84$s*0?K!RJ#?dEDv?m-*6ZfsK}KYg{)^@J4eCmvl>D|dE>-Rne<1N9nKn~T`e^Hw#knjS#k?( z=|rAqFG9<2hlp$sO&6)0+YWIN_2ubjF15D=q6pz^)Oc51tmCdKJMAI4-rZuj+fg$T z%dlO0Gbrns_{h=%`>O%e#6H#NT>41sY8B)hrLzUs(N~r;&Tmj#DOpb}yXnOr#!Z$v zu-M8D7_L^SETYZLf*AS7T;@wb7yXMa+=+&FsduOW3(H zD}&d2t;f3^m}Jo_I=6QfzqIg2RL*^}DgO4UzOu+qU+~29*Q<;mYkHlDTy=RXlr(yS zVy0f5=I_k+ADBkz&P1PQJx((e?+T<1dCPCaDp1#;CF_@Vb0GxNVuZ;Rit){&smB># z)2ZM3^LmTG(Z;rYIGhW?q6JdAu~-b?>A+)GEX(PejU=+3SO)#(tnKH>m)u2^P{&Mw zdV7xJTZ=w}I7N2>q)`&2_J5oR^O_~<&d|XLkWMKiR`U;;NS* zeOe!E=!`OU`JJEZvY@@YrIq!F|LmL{v_*iVX)hC7Qp25^NlmiB3kjm?>hAKu+w99M z_5t1Lh?=|a!}2msJ-X*C!L;IqmThuerCkTIL`S4x7Jiyc%sKqPALw1 zOre&3&Lew%vHc=We;3X6I88Zp?E=3aj$0-1Chi_{9yVcQiV?WYO?IHU2th@kl*_FE_2?h}J+_a!7F-|YrQ(nOr!r`4dOg})2O;B<@f zVSku7-@cdYu)uM33JetDH2roOnVxhF##B_fMB)uiF0_lk{{Dp}w9$HzyRJxJHR^^8 zNUg1nAary7KfE>#XEK>%McD0_Q5Po#5{bH7%idYoX5_oG}#U1u5zd^8$Sg?);pXISW(kp@xPt(`NO84h#;F)m~8 zMls6E@gq$-vr=FFNI_=A3NWnF(uo}I9bQ>?vBRvfr3F}1=vF(@IJ$4uS00)XP)YY- z&n4rnooKuFkGCN6bJSn;a(oXz#z#I(O#V7+sttkO1$=GA5dW=EG(@FYkA5gw$K2;Q zWd-M#V*nrRDy%v$$>s6g<|C+G34P9!EqWHLm!zPd`lthU9xVdRkELzU70K3z5Utu& ze!O8rzpFk!cO_pTaQ>AdR#qfRp85Q{?AZ+-h7&yWo}&4eqPhMl1ihVLj663}%wKv) zqW;PuM^@TGLudr!8q%BO08SMFT|4S^V){^Ey3I@qWMLordEI7}u4Mx3+-uYI7W z1yiXgqUGzr`Z;f)xVEXx26nZ@g{fDf`krq3&`!iNibO2oiAc-G%bC*Fgqq0J+l1td zXbh~30P!vQ|NAw;gHy8TyFIl@+_R;fi0BE@bdIh~8q6Iu2D?XHu~T36M$jVBh%Hi8 zXPAIDy#n+=dr5;nmtMpYu7w|2+B6$1VZqOgu9qh=H>8fZ;Mq^v^S9dB+OA&?yMdq+ zhJsPPsE9@9AZyy!>ALLxtaWKDir1h8-!@67HWOVU*&E}Z7F5EoU*A4RV#MbuQ~PR> zpo|X54dQ@9`{y}ph15IJ2SS0AgE=H4BA^w+#q?BBLe_&W($8Rr9>a98?Oi^Wr!{dq zv0%)j-DtmWEW*m6ppP1C6AZ58InBd MnX?^1@gemj#aH$bmzxz7wtNxVVAbB8=bp*+C`BqV~L(G18RN7Vyg}n9XJ3nsD~Ep z1?H4HE6Htpim0Q(RQhQWSC7Z|9os-n6H=@rd;85l1Bk#J{b^S4zu=pnAsi0&@0Dpd zpP*_jWh1>EE?+Mw61wZfGj6JC#6Ir0{~0D)@mDE?yY%t#R#wER^DY1Av!32`Jd%Bq z*$!ijVG_H&LbhSPvA3?T7*iG$9yakX2x7?gNQ_h<-dFMECPc`QURX>`?nwP}z{iWJ zi^rvhG_f{mE|T)B5p6yLxfr6H$6`kOIsI$es;h{5fm47SNRt&!r9}D3tN=NfrXk<% zCu!=I*~^+t-{+({E6J8VY@Tm3@t>af0t?Rf^<<5Iqm~h^D_eS#oZ`W#81BE{l zDi_CNBxhuNKTz@Ck=L299l*JM03~KZ)f8CvALzI_)4HKre5}L0%DwR0vHN^baOtE zOD?zq%{cP1*WaS-6Dx{LNi=hRGWrunuP2{0gY&0Nm0gTKAJ0oL3RE6)&Xs37Zv=_P zq@cN@w&_A@HD z+X{)cZB*`6p*Q*C&K4%goVCx@s7%?~Sx|QURJF$U89E~-$?nqCgYFb)Y(8{h^QqD5CY&oml?o;Of>n+f(~l66kT5dkTE^X zIU^6I^E?wvF12_vNL-pX^(;Ru#*gNKn5t%!1BARu{j5K&&~VihU3@@8Jd_?MsLc0r znlZzam4IwIwkF}(LNJ*tjQKsI{V<_{>8>gbs~sg__E+TsupUi;CLoKrqlY(=mCkIrE=IGlt5X(^MVt9A96#-byOXStohX0Hc=;FUZp~ z(%*$a7Tw~#24@OqHj_=leYiU&0s*2L4ipO|t>04ekE1Z^TW&)tm(`3~CT`5$?H1JM zJk`qEw3B?C=uKF%f44a?a_#(7OtG!|@%QA~JS2-xw+cojN}Wy9$6lw)GsNLmFnRCQ zW!Hlm_e^mZ5@p4_ii9Aa*~i8fW-@xcvK#kXFg zYj|20PRwcKS=-JN-n}gFq2JP#TpCHv)*Tw(9Ue4uYRraBgaegju->)BBfi6k8xJRw zkyL`$h^Ca1^gPW_!uFIW`zob)($>_rdk0;j!iaI19wRG1-Mf%YN%bm7zcJ6`Vc!)1 zW8fwH)t+v0^Qc8U)xmPAITesLWIED|zF!TTJRY)co4W2Vz3#W{&Z*bGO{sOXX?L7r zy&Y<*8VO#gAGA?jy#A(1p)|gbn*4nw_2vEt=k|SEoAox~l!aq$-qqd1DW8EMkBk!P z(BNvhs;wrUWV>zZlxu5XjYsK32F~humO%qTu=)z@(QFCJse$39H%4{3t${4aE=qs+ zYL4U1SXP}SN(2FMYjms)uyby#_E4T;L*mWzJk3^-OJ>v}Kkc#3tI<))%emt0Px*nxx%i;?}Cow+V?N^zh^Q5UtUZ%$1Pch`n|Xjd)621Szh72V&acu{!H zhn#hM1R`zGTztKW1E+W;>hv41)5Oc%hAjeD!M~ymxDMvZrqATt#_WZsqnGzvSAOo* zAO0JVAFmkj^qqtpP7PL`GZXRrV5UCbT$Ksm;&mUU7t`Ce?c|K%obC{qY2OiH{aOF8 zV}$2tWa)Gv4ABv2#?ewSale5vTE=>bV1?V?3W9ublt%F^Ve<_K*W-o3YkyoRnYMvD z6UoqUfr=qc<8c}XrkyXi<>oO)EKkkH?_P)vna{0zNO}J}AG)*#`yeYgh+B01?j5id zv=~y@n)*pe#OD!eO^4&_^8{M`3@9}(Hi1j~7uOyB)EEP5<&Pefeb_~LnvxE#T zu+@tftly$QTk;wj<39Mf;-p%pn!Xezs$-7>t0#A{t_J)+OWSVZ{2uU5kIEP@1}izVRvyVY!S=V?q<%qbrxlKD>jbp4mU)>v zT_=&S2wjVtx|PRvp4W9tp@nliPfon8Q|Txc40+Zb+!d$sSn}c2VAK%zBA{~aY!zT$ z;=Ej2?ocb}!P;jyGePcyj`d#j&@*lAai;n%O+eCEtIXdnXQ<)epWkCt0s!%hLYvDO zHMa86{7J*%35%K6Xb0(m60}&peDB4aXqUqh^Dq7YAT8#UW-k;w5=mR_1lV)Vw4eQ- z`dw^*rg5%}sR?Sw)Z4S~j58}2mUZtA{O_H^Q#!#PPG5p6|7o-v0tHw+3^Q%^PnC!A z2Rof0oLqDVk-^mYl1Sp?KSnYDKE_y7&AQm1kjB3o3{r7rOfwRUm`&h9K+6nPqP2AO zvd%B3hNP3Fz)?_db{l2!f#@L~A{u1DwQg&Mi!G=0{cx6j<=Qw_r5Asre&%DKRh8;t z)rnF^Zw>Q3y9f!Y@rL?$D-*pmR4iNEkR1^Kczd7ERw$V9fD+11q|5$82mOwnnmRSy z6WLC2#n-d^wD8))_VJ>N@2y?hHJ--e$y-;21L=WDVL7Qc6}q;X#4Yv=&Kyn0gL&3D z9)9F7U>eJ!o`-aYPdsw+b-Q)c+wkSG_f@jZg@$tEut!~St!L0gEE1^;e6dN$Ob z1Hb8tV)shnvwv8cF|6F`YldqDc43%(F!;FIs_d>r@2a8u_rYYr25$5yO)-vo6W0N> zRAj28zVz)Bi9}+Nv}rJi)7t;8#h%K>ZJDXy?Y{+x0CO})EcADOW12QGc(T!0GN&f- zz0OqA7Ys7nTC$qvSGqM*z3xIzl)9OGLBt1=Cy=F6OC#r87M?4T+x=w z2q}N%{RlYI{}j~X;rMa*pCVma{QdK~7VRO^hq_LF*kA`Ogsf3P{s7UH3bN>^&^%S2 z-mk^ujztg8ZgpQPJavYiXLNxfsQXzl?(B`E`AzP!HS^h{;fq2juY3`QBV{o5L?Sl` z_n|9CJIX-SwT4+&HPBiwB10iy)$4K*A~s2)I0E63JLUXQWpY1RH28@#pFrIw%XBhN zabKwr?WeFX&<=AbpU4qH1!a!2v zT(7GlykG%B8JgD(yDZa8miTy}JnTos-q4%Np0(2hF0OqsMzE-Hmicb?qLBTa?|lPE z58#EtHs_)Ruf%Ug^IFv#r8;#FErK(0&jv#Tv2#e>VI><^5 zSlpkNoeL__3=J4G?oRvE9Yt!6RbWg$BJAyBDGMn== zsYe*Dp?mm5b`}=L3zd01meK`@`OT>u;pfRZcq}pd!BL@!aWCH&{(eua#DL*g@sUeg z9uXgo6~6tEi!#0$?YQeI(qEdKzSI9I+0n2Mv>{$hh}rSPmgYYHDF3vQH+CR~6>6p& zOeWZTBVH2hlI#2AU^C5_>o>^e{b(#*QnxP(>IYqeq19f_ZWM%dWJN}(I*7n*c_l@p z-hv#rGLtz%K+%~ehn2Vs9DZ6MCb@?Nmnxc{rTQNk{G~k(e~I5c@q+Il{l}+B5A4s5B$g$!PwfRNM^&F zzkQd{i*?JmNr742L#n~rLUml(6|H|(U+x)B@3<(9p|o)}i>WwxQZ;b`sfl(H$tq;v z;E=jhDZa`Oo(x^3*$x1sPJN!oU66BnZD3ijX0_S(SH2bK7LqzR_lA#OUdH~Lh5%2$ zn)vPojJT+pbiMh&xM)t(r4uT)TCF3ktmqTvs<~`>VPQI)n&gSy46A@TlF@{^Ro1$* z;Z}C0pTm|&=_MaFqsSv7?_-kr>}fhdYk!Ye?wxI9E|NHk&mCT!B766CTDPRY>Ty1k z`o{SQz90eo;YqjGikeyZM%$TNCbWB|b7q3G2^v;C zcDrvPfg6t(kr*Nx1rIZBr$@a)PjB{kU+@MGI_Bp6K`&~Q)HF};1_)b=5BHy^LE|~XHPYE zyl>-5|K@kZ$|TnC+o%KOGNtyHYB-Wg^RnIso6BDQ%{lX05a`c2|Ef7oSjez#RpMB~`t+E2%XwQ*+7h-N2DZDi;rq!MBm)mwl`z;n#EGtb=Wk}ZvQZG zAL<#w8Z zE^z^$B;V-=SEx20b(z;^4-b7a*)rT?aiG_oV6OJkL)Q^n45_lPH6<8v=YZLG6T;Gc zB5I1gw0OwAqEwUmH5n3b`nC@06(3a<4Jadz zM+n%G6nQJw!e&Y;WcypI=@VByB@)XLU%1CwCn8vB<@b8}covrv%Kc~tVIhDux zeEU+D>HfHr;@ixv=&W5T#!lEG?$v+i+W#NWT7ge9T55p*pbg1uMta ztzFJEq~M}FLrl;aj9zO#{%e^?756b>%QQ}PLTYfNZ)ato66=6s#qK>l8xSTZn%opJ z5IhWX>N419eUS%V=m056nM50^(&jwX6*a8riWexY4Ea+MCFo!_u=Me;wvhHDX7FxD zwst#+gq{jaNO1zN>B6bcds2Zd_2ryo6rWr9X~1un5GPXNnr?}2x;G`L3-QPWEUV#m z`Rz)Co8K63hY(e#Uuk~ya7hOTLUB=XmIPrR09(sYxt60QaUe~lUT+1@KH>v%(sp+R zdX1;|yR47T5m6Vae-~87dn27?2_WY>8nh7AZ!iA?Y z{A%}#u>GUQ6a{tGvSE8$T(~E6q5(Hlc)8u7SL130h%ez@1|@xKcrKVsdw*?t|Kv9& zirG)=m|nA%Oi|X7HYJUE){Qs>_3X{?Z)j#399G0!8j3lkQb%b3qKa$YU3*2)DTiyt zgB$Qyx9aHd=LW{zUTQ!jR|em1dJJmaTUk|WC3m4OONXsvwRmW$YE@`}p`>5^lMNx} zD&<(}#ID0Cp8PKiA9WPBf*EWrBDlvC3!gv5=zI>^DDGQh%TDPVt% zT+2R8pW4X+y=3YoA|~!5KC2~Ksa#Vd+s2^5L{RVw(Lh4C&TpDZKW{2hLEU5+P2}G4 zA>O^YJg-~p9n8bJL$Y|{3VEjR&WgwWe8HQ`Hi(os7`~W%Zy?Ljo=QnrGc$x2)iOnL zfrt&dy(vx58;z_B*#cDFoEvQs?nk=1MwBF7s`XTGdZrC z-wq;IMT1-b{^6Q=@)r&a%7-mSGDPgV6VOw6-sqLS*M(`Qr4q0U4k3eLjV!C~8K*CT z`Y4vZ7G&0R+WStR(wXR6b7ZgTW$ux{=vfFAyejeGbpAdcrd(S|Xu<26V>X(c?$Dwu z@_gC1SXzZRuhp$4Yx{ZYY4#kxr@M4_S>ArNmB_4r5MxiykSjV?oQ!KrNh}B0L~Fcx zLQ-Bm*^L>MnTZ7z)R*-PGpiLS5c|Ecp8jn$hClM?ORyL`+kLt^fxnlW8*1Ks-!wkU zTDBR(VKaKYq|y%toou$OQ3HKx15jp790U*yE5r_ia<%h}hb;%GXgof)4GYLt&HC^2 zoyIh`{rv_j%;Ce7FO@kx??g^ii)hH!xZ=I-IK%9YP91cls$qkCcz*E>(ga^qdS}ky zOZ8sP$`@(pP@Gz`694XXCOn8GX}h7q{h+8gp&IODO2Wye{129} zl$}TdSdp;)8H7T=3i1bkfcN2uiS-E0X ze{XCQM`i!oxe%FLjaQ@!n6L*|6SphiwCe>FATSUuWL(1$G6+MgdxjXq2?$aXWjG9q zGP{P9S^3~0=hZKQ+B}amOh|J{PuJ0( zt9~SBvnVodWe+zOnnCHa_OuTM4SFf>iaMFhq?Q65%`nTvu?<3jrj_WNu z>kVVTJ|PM>reVTbMe%^jHQe^TBc;#VE;_6wPKUaZj5kXI#vkp2h>7Zny=NG@X|T@J`1%ML0CSw;b@w&5-nL zSAr+1HQ;oC)pAk2I<7(g>Y^av*lHp!aM3p9nCYs8%I3vot2Y3rSRwfBuwRME)zee4 z*2qJIj$$|6zqoVw!8y$(U=<(LH5xhkK6BTzt^KrR z_OR28z4-L$cxH@}d4`yKDJqS(@E=9zX8^Z0pKKGrpO}dG2CD=tq}g85v(FPkwArMZ z+`}l-(7tmDAZLL6b_3)Fvy`KSvj(any|^97Q$P8~jjrY)H&CZ)n^I*_x;_~w&>Rk^ zY|vJFH2iL#EIDykRumtle&dPd^K>cqj(4xg4~3FKUe&3na=)nuIR< zMBE;=u57?Z)0IVtIZ7ceYuA=Mf9#2=Vf^LL;eO|(R?BkVU!ls$lN7w9nz1e^pSLI9 zuvN++Q;YdSWe}PonX=mAd}sb(i&gWY1DO**Nnf}Ij6TY+e)D3(z0@#-?}VJiJz;oD ziNILkRVC>zLm2$n8SK8+?&W@TTA^}vxTz;IZBnyz(o)gu`C&B>n0t39+{P1H-p`0u>``w0zF&A-!DvH1%(g%%(g*#!g`x+2_eMyLsHTYwV zU^wK+rus_giksgaG}J`we-SM05)S%D0KxA*T$WQ@2eP6p-Lfh!x`5_OS~D_uzkcD# zDTcNUDy%>5Hj&_7i)`aX;MgdP$)k+wb5c?>rq*Ah6^;I6pN(90%uUyWv%tN-ieo_6 z>9x__^{v}mo(|Th`|4WtMw*>2lr#1{MM*!F_s@3v3$K}qh=-%ECE@enHkUF-J8y{r zoCXIJGo?rPD+w{YiC@&4fgii>S+1mf52F>SU(!H2EQD9wsN$E%j=)3C zbn)aVj#WtF=Bo$gnaD%wnrgFRwI;S{q4(dWm;^Mh7Ni(ZddkxJ17;Akz1&#^5Uekh z_p5UgY{SfW8!1%nUyMX*NVEW4qv6=R*na+F4sczw=ar03r! z7T+5Y3lg=2Z)#Tm)k@r=)1E3M*$IXw7T+1E4<*t{FES@p^8hl!z21wlXE>|O3DpzY z9tL6ax)9#$Z-N#q$O#o`vNeBEZYHcszYpI*zRYNhZafr0v9m_QNeiD0_Zsg|w;W0+ z6Z`y9fG8IZ;Fv6$;Z9)&$I2<5$CxyYoMcB@sX-^*_r+U)|?@n&d2SwH05k z&R2T`<}2@cZ|LD%vY8gaXVc54e`-q(gZ%xhyX5)7K@~J!NzSNSn`Z)|Z~k}>2GF2( zwA`t}6-&%K-oXrYn37I8*NTvU<5a9aDY4kFkkf^)%-FEH1a}vJruZHpGFqxricP%0 znQJ?~sCG#@JYqYz$K78}n^Amx`wq?G%Iv1o#|rJKsVNh0mt}ybPd{QMC+6C6kVV1M*&3w|5n7d*m)b68Ud3FS zZdo*ow%y*7cb~$N2y^BSQ~i{m{QH2Xu;`WLmI?bc7Mvb}K_G8aqZyHEuq#E0u2)yr z8`@_L#Uv8x-X2UGXO)~gUrlp^p-v3G)Zh0XLDSWV%rh*^&R_boYqU!V0D=O&Fh#*DrWixxDRS_r2rxS$DchBa|!;P_Tduy`}X*Atn)#Ibtc z6bp@AEy#*gqqS`Bnp*s`n$Pe4xuXrWAkRdlOt9GEhT?@mypea)J=LJJrZkk!+vo`e z2Ap@;i*oRk_LEt~hPt6h>pAIs|FYZC>P79uDyOEA%his3W;f;0ITp^wPriOlS(2na=?@8@`Yfjer{YEJ1)4Y+<`1Uvvq4bP z5!}93=vRxIh{D9xv;^PLXxwI~g>X8G9`y$v>WK5Gol~iG$=$>~0Xy7a@1VWj+%{Po zSbM*xTw43@@E5|{~|j9v@6z}aTT*A zT8at)M$yon&g?0VbK0=wn^))p&+vjrmt^Q2e{sfc^!j@f82%xUfERK&7Dy1u(Qf}e z+w?lOS9&Pyq?XnL9lcFC{59X5$0_Ju?1H;6*;i)XYk~b@NxhsGA_!}(HKAi)5Rz{( zlL3y&Wj|SWI^Ub(OM2&6cK#kV7v1ug0cut;iDQo{g7hIwCJNe8Tq)DO1=Su!Li)d~ zChZk7K@tLbf*rF>SRWfQhx>6@a+ca^Gkp?oFNFS@ee)uiNgYstm==<*r44=~cXFhtx9K0Iv7tH^QLj?=dw81znKY+*u_*6W>N&3D=G-42PYRcR znL-~t14zvl_YAymoxjwuC+0QHoZlUeDKmrcoZ{-Xc^WqhRZcs3y_?rCa2rQ{?i0Uj ze(|u9YY8*(3OZdGnY*_w(lo=f7BIhrPyg#Zgak{z;9lHXw({=|qe^rSZ&}xEkorVL zEte~?KYN}2$-AC&awYm1oj~rm;2Xu~+~YGF>1yBhGn% z|JL~mpW4|YZKh4gVnnzuiZS+bTfkj@aJOqt%vmO98+MnmMI$y@RL4dzu#6=>SaLvZ zIfT->H!vp{VCBcC_;Qu39`FfAp1JRr)|iWfExh2?4M-%za(7@bMSjkZBu6CpRNIrs z{`2aV%2ioALeSz#+P^5Tq!@e|g^4+#!^oFWe7x`o_2%*F(EvrR95R{^v3*T?)xyqK z)cR~&b)b8}T!4+xXy%@j;Q7VoDS%F;Kty~f(K{K8X_C?^gkZfxe(gK`#nF7&HeVo2R#Rj6c-JRn|1ZU)3@yFmrb zuPvqWH8XR?t_aj@u;e0XUc^l=?Tpomv?l6n&K8r@yf$p<5*QWtZ&tHM#{o7n(v-ft zxWIF-=&@@8ZZ}ty8c$!bx{^`Qv;|$i`E37bqM%$1^lJwK7*tT2g}T3YgF_q)hmQ5T z1vv5+2h>4zDre^l;jNmJSu$5()x%V-{Wif^u_zYiM%Ku1w{Pcf1%enw-$Aq!*>oTs zdiXDW2zS?EIEQEH>C;hv++@!eh5^ND*&ocT5moNOiS-ml`>tyw#%SA|8`%uzMo_Ruiy9FaIau|#BVNEHSO_+XpT)9xTUzmfu&LhZNdNXD!a@+%3~N{j z)25amAXu(OcX|!QRqi2O16^Y?p4Jf7BujNHy2xtP$%&TlKO7fm;1;m$Z(eEBHyeQm z3m%Vgy?nHx8ph^tzY(ytqfB=79XnE-b`ZO!*eHEFlJ&bD6Iao@9wAv$ai&gyA!JW1 zVd2Hq)*qjsE!Ag`C$Hb$LbzklhCf-_wcLMLw~*cA?^h(b`L7~J6oMIzu_*zcE;VZS zMLKdp-O=WySq>09VCZLEMF$1@mSWt-!Q$Pc0|&VyVi{1wYiCmSEYkLjfxepkym{=< zCnIvy{tBuc9h@M9n!QCzp_#=<(~*%UJ&h|{HLh<>JKP$PgmSBuEWFO|a!nfA#h^U! zx*xjB3ahSf)e@tQswUYaUiK)<+S)q6PQP1Z;Kz3qn24w*CF zz}B!-x6Ew1G(b5~xd<;gPEY>1)`bD>CemlXWmCgpUCj{$g~fH1+7|mTc-J=BwJb

    D0re*e*_Qp+lc8%9nTMqeRQS!WQ$Flr31(Kg3Ez0rukshAQRoG%+)hqOO(3n@<4e z>8Gp!{|KO8e|6z|KME-gfrX$pC<4BZjF{>_Fc6RNs;JZ3Zcyl|ZPOB!~TLytDeO{22kEJ`U~4^!>j!>Nh!k7X$=ChW|O<$ZOF5ML>8hmY4dh z~vw5{qc0}*L2}qP~Y{E36+QUb5Tm1Y#1hm zkn7=e{!U@6rxo6PKPNHzNc=7G6NIy-N+OzMc_jYb?^B#@2S&^ef*5F5ryB=%&1;m_ zFQ(=Q#zfe3zT|%#_y*^l{}h0j_$RB9`RR>Yvfp)u(x%BsW_3LWRSChPpsGSxW?X{7 zjp<5Pwf>Od5{vQ5k5rN;HC+VJLiKb1^&*w8a~O;)?f>j1W^whQzLB18!;q=lCMnHtwhRClOp_ zP}TpY<8bB!mTbwkL%)0R%$xG^HL^%U2cXvh+HZfnTcqt~h(^*GnE{uKse zWXU?p24VUb_Nx#$#)XU=l{0pli|+4RR{Zdfb?z7B5}w3C66b!~r*vjxr7 zoZxU9Z&Sm-!Ji#HZnhnWvL^_8r(`KJpO>9dP<_|c8ZR_hC>0Vf^W;3dX-)l!hhA1K zwrsdOTpD=&io{jmU;AW-+duzjoSDz8>6*68raR%k{;Kq~$l^hwK%w-oHX!lB)S3zG-;HRfJo!oQ`%xzA$LRIa==^WO=}Eb z(~-J??Q;>qzTLCVkm2_xr=RB*H$CmK@y*zV211tRNolr~p9oh8*gt@6_}o%Z&xNca)lz1Y&0gs+OK|-jv5|y zk@G)mbYd;Pg038-Tc9Y4ZsdqouHXx5q-Ufm+q4ITni4fj(p8-u4bZAwCRG5tc>@T! zFI<|$9(3$#XIW+*{QOrc4$LU|1-~V$ZTI8@hJWzs$lx=NE z%gv(Qg^TptEbH=q+u`F+vGR3m$FzkTAV$3tz@zsTg z-6v#Y5yd9aGTsbF1IL|PtC6y{JRxhAwrWvbbaAhPR(t2dmed{ONv1RB`>K4hF{=o!(+3l_WgbP8 z>YAmZ>TIL>)4Vn12s{;Sdb(6Ssdh@>_K&=>D)vZ@%iY3IwDH`gwDoYsrL;CH13k!V zB8Fy-6j}D4^PlE<3|V^HxidVd6(-FY$sX_Ye7Su90ZZ9`ZDBj#T4K=NIG&$a-BK*o zU+2gYM}WU@l*iji{i;`HgGF~6pSLs#B`DyBej4gl0hY2Q91kAx zl=sa@GV3nK%(`i`7V?!BU?!CgypnZ@izox{5J0K24POZuUgFinB@J^+_wyhB;%AKp z?-0i8r$zWIu+OtO_Gg)}w!#HZ|DV1ZgR^BFPiEHBY+_ zX;-y5B9cU@GSEp!{Q{$GueB%nO^M0R`BSywm42aI`K)XAJ&W0e=e2sdumqXG?rOtCRT{Ifh~m zVDy!!T^zmEE=&^r_^&6bKvg?w5<0T)KJh)zGOjolEwjmmk}#EKn3Pw`0$lf*hfk(~W76ZjL1%5DwbheL!rW%;4J! zNG(=$|I9peCPZDzg|-suq*Jz<4Dbd(!nR;X!=IOITjS)x$=r#VbmL-aDs0}>rpW< z-hZNGNwj-zq**Cv^=F%T!Pjfj^+MysAfq)X*nb1VjInMwdS;)JUPK^xAOV1Pp`|qA zuR&MIJf=6+z}uIG;Rm)PnprkyWMByS>?B8LyL|Kf=_E-#SQuvXLf(5q$1Dgl1F#u< z+Spy*Rn1mbk;W+rC(B)7WJ2#}qRT5G6x=@N#IeGnv_es|jU3l17VCBpS*P&y_CfW0 z>W>dpII4;s$41+tI%Kp}pxJjw<;nJZ3=0poSp4cSJif@(=w6Ec+pgT_LcOybs8>Q- z{2C6a*t4~l7e*yHvCv9&WgQlPWhx1rODPQK>YK(srqPiFNrfp=()D7vKi<`nr z&~Hayc{cV$HkK*?K$dIR1Bbfc0;?<1DPm83lr~xCdmo1ybXS`3bYR(mGId8MenYq*)~jQRzq)fGgdXD^=}Q7y1)z}poDmT*XkfT&*; zRqNf026u|la>*YOyj@;ou;+d&LCNl3E<4X*uP*z#s0&-`CaW!utWu(}L~+ho1jW~0<;dXbedPX~|~nZ)3d$>;S>(fy;z=b`qcZ_Abn zCIWALB1y~XsphaHGePEcg5RIh#?pNT&78HxA-=P~uLT}-DJQtVAyo!d*939<8gdsV zCfB*EJ8p2+J>H<|*pQhR)A})W@WifN$^G5}`t9N$SCV?mWQcG#{@k0{3IO6~@7(s7 zly(42)fj1#TN(oX*_r{5ihNbfFa%kex54>e2@L7$jA{=RcRs5Y2zcklBAl;S+$BMZL-VH z*fT%p`&j(slu<$uu+MQ0A#bWWkYDqlUw{4J)!fx=!66=8st-G*AUmu${>^m^{xJ4| z(>ntOx<{dy_*^B}wvvsgP1C6SAR&Q6tXU=X*rIuBi${`ZH7dm^+wq?CR^Fs0AZ7xq zYLEgdO@D^Z!nkjH(cfw8%H|Up7>iKOtx{m-P(05VH(oJPWWnfQI^;|Du8YPDf}nne zkW=FhvqKCndd}B-=JX@m4WVUIr-W0Ev-O0-fw?B|$VeG&O0=BT*c#x?dE->(}JR=k~ z>%u=qb77s{$kZdw!0R%98t~LrXumG4rmH_$gUd*)!V>ax^GpDC8aXSc`71MdC*Yqs zI55X~>xZN{A!~%r7<6gWEXBJ+3YNn;c*@CaX z>l<|liKcszS7h7?I^>#P|6aKn)SJR`qxVT>84Uc;$W`9n`nA~OnAD(^HxXzk|F*)32k}3z9cjFE9S*qBl~0n1O+1s=jIgXr~S{&tGZ}IU^ZZ6|X7;ne9(d z+q;02`FquSY_I)q>F&bTw)6VqDj!%gW5bGSo;`&O&ck0n$kM$dWoymPh>jw*u zAFrX%@-X^&_<~MpX3yD1DZE3|?eG?v33v4)&X5Ixcs}U!txkTCMnM-EtNS)_kiUj6 z@LTL%9g1mvdO;BhDRYA(t$0W7{tXj@v`o7Eqs=KZJ`gfdHxsHEefC^$#u$nZ%XfUX zm53byt7J&4bPp%KP@+%1*~?9G(#$r8cE=^YZY)y;aHV$w~X} zw#MT1nSZXyhWnW}6Si_kn(cFhqCaXesPTP5w{M@UXY$nT5u68A*vz4Dt?`e&X=a7N zuOMPJLMgrWJR&dD6h6nn(f8n!Gg@1vzLZRkMkk0}(;h+nzJCJ zD4o@f{?Pr*3PX)8JxcQm26aW~I=nDS+6%)ryMkT-G>MDo4J@;N&-5p1dN!mkPf3xE zZ4dpgNtioQ>Ua~Ae&Dik5%r2JX#;+scd;jCO!tNNW;b~a77T5@;6pYK-rW*W`W zo?|5D!PA#x)LU0Y>N*q_2Qiz4rbWR&judD-WN5grT{!}xR~RYt?59AXc1tsVXVE;- zwRe+<%px)7dM;>=as!e|Cdi1PJyA8+$4;`5Oj+v8=dbx)5!H76ALm(vwi~4wjg>izO)_tN5 z>p~$b7(87UY;=JlBxz9=mIs#KuEm%AUQM7~wnX`F>Juk~552EHlkzW_5)L_X$8t7V zkl0s(3Tvh1a_1s?8e`=4J!d3i+aq$542Q!G`&TDevNtd~EEuv$ z9p{?P;jPMZOb#AnnO4eSD}{XqXpy}RCW`w+cFs*Pa7z~f?@06+`7ZB_d8$Cts&IcK z565CFO``NtDpl`eO}57wN7&KYz^_UBE4V!!adUz}R+Qkh)H6i@c+;+y6WWy9U0rEy z{K7&R(Yj9%<-pdTMd2#$$Gw{C9UE9;(9U0NmN)jv+k%8SoeNfyX-(j>{<>Xw#m_HK zwI(rVZo8dQdQGu24QgNNk-BV;iFUmiE&{*14UaD_*=w?29+8{E4&3^f{z)d}&u)0k za9-`bvV{>QjL0c;Ni2rnkCudCugJmx_2#75a?ShX3YAOq3k*Ku&NjE_{?L!{G-xbyla(jw$Vb+O;uE( zX%~egxN+bnq!x2&_F=y3B;W#d#lyj>NF9JZd**#iiefccXuE}e0z)F1zn#8Wd!844 z6`bEow<=s$XhEKBQer^*t0o+9PEPS$dLd?IeU zhv`K>H;LZ4+*H~3+YQr=t;w&>W-ebJv4m#c%r;w6wjQlpRh#m+4RB5i7Mm3RmDCOC=M3Y!#=%4r8oc>3S~}yC$8)0P)eO}Q`g8;t zG8^9$$`UFpe@doWnZFg?c`5Y&_D~6!8C$!j>)-v~Q+KpqnL4NtW5>lt6z+*_$ z$rHgb)rR6x(>;)DEZ&L#BVK~v_U)-9oITDg(*xk;rBm+RaJt=L2J|{JeC3Im`dDn$ z13llM;1P3Wl{{x@U{$PN8UMNT5@U?TQP?r1@B&G!lQxs!>urWjRlO|i=m9>`7g8fi zmSt}wt2Vs$`q)70^Z}(E#T?c7vMXy=l&Z@(W>lCQq8yuj-Kn6$rBvk^0W#ybXZaHw zj?*`BO7Fl0c`M8l(wn2Q%a>~kzJiTR<>P%Kbty~!S8hk{Xf|JQ8ko#=hALHOx}8LW z=q!Pij31`3P0ZbAFHdrzcVRv-8^X+$*7O`WtF<@G$(G6|@Nl=0iMbi)QPuB-DM92= zoWcDFGnN&9kuvG-vPJX+cQ(VO*|ybk)reBZ&DF+UJ7J$%6TsrAZN!j_3$MoR=(Bn0 z2?ZylaSd06VQ+m)`$QeeaccU>5_AeNV_QVo$iv2MMIXhbN}^*4P1AcD5b(L9xy6x= zuN0knC3^mQwJ+xVo~)XiEAMKnqnY)ERKrCvV!MzN93*RZhQAMT0S?|QLA_Ru`wxr< zt2o$bTA706#zErx zfxQIHwAU^rUu6s_)t-#y(n)|Zxj7pfH-z6SLx3_W;#|gJmXH8hqJ$iSe|C~tJJ3um{s@K6O+gJV#2cXv&or3Ie;>3%m3RD|`oOX&^ZMg1h!U0=RE zG(i2!03(T*-<$XM<-xYPGdgzE2f+hoii9$Y;?hCrNHh8-+drpr=%rKy+R=+@pZ7qd z+;eFnJyJp`3U z;YgDaIZQq_GqF+gsNbpUb*fWT z6h`*7rHA$ZQFb;Vw#E%5GwP@Jw}LbRtOg^Ezi897Tg4{+#JFu<15?vCt*rW ztX_*e-w-L8{iNerh_v&->4_si+CN2d6cTvYw%Mo{?%BoqyI<4t3(ROT_AyoSX=f-s zK!U)j`GRY=mmZJnAT-P-{swldY&E%Xs|Ly_hkXIV9rYg%dT>$o(tIz}wM_IR6#Qv? zOrTO*2LS^(XlO;M9V2eOL85L8O6|LsNh-{}sG+Y}w^C=bNRatsLIe zwNB2L8a|o=uE>-uNjLqE6FmW;HP5Ag($XU|hug$6Bv!6$cJZy`{3R0-XVV)_`Z>7X z(wY(to|rQUJ|}7^ji4+ggA z>bt=evRF78)72imZBN^YN}YhkRF5QhaXD-cF?encma7Y!;6C_!w)+R%NFt@at`00+ z7qTr|l4y|$T9^2%285Ved$Zp~E}XYx?~0YfeYK14XlRNubFFS8L6$E^Dgfm%!fl2` zSyk-BiGurqcUmz;**pJIe$6jH^qh>>VB={;uc= z@dbR9~5^syKy}|H&0h5I;k%;vZ zbf!Yr#eX$oR97X-8-5x*6nyXH>$ibE%02tj(UF~lule#{l`&*oDzB4QdE95@{T+I3~%wBt}@L)0A|n)6)@=r&um`-PVq4^xRVM8 z4LSU7o}IImJfa7OrU2sku~>1EmYX)n%TKg#R_$fd&-H9A41S2l#QGy&d1{W`?UwJO z)uwR|c)d1Yxa2W)w!PNa`-St3hg6jkxie2#=Y46oOCEyya9LYF~H*sANtMj zQSsP_dm`iI1X}E3B$?`>Rk-u9WrzAWb7=yt)|~ZDuU}#oN;Q9blJQM9I$}w(JAd^L zXYc6>)#iUr%dTC(#-n%)>D0fRxBrDJ!Ol^CxtQDV;HXGKdSk9Yp3&3`Hsu)B7sa_Z!oLj9ZNkDoB@D) zyo$P?$FR-joYM!HAM6~B&$ktr;^4wdrivx01P<}`_)Lg{x z?R!lY)HbB1FiW$oendvDV*dK%aBsQKa_cnMKk!@e;|0&&?mr(A5*ptVSb`o1EVD#I zUc&sDgRLkgX>zw46142+Q$;q*j+`PIlhs|1QquyiYXu%Yj2tAe(&x%wJ?$`l^>$}{ zW5UFRP&OWne`n}1b8#V~5&Q6#Akn3mV3W37k=8+u#%F^$X(9<#Z4>FH`zIuP=7&on z_Md0I`XQH*k4pb`?&IB!l6g9K9ft<>gcT|USHp!PV~Hf4q-r79B;1$S70mJZ<5_g{ zw^Hd%7G~HI6z(3|cB>L&m{igS#-FeXtUFhy9ixf|OZrf@icNP+-QDmvYNdzyOJ-)Q?W)bFM#r=|sGkye z_TiJ5?gzHW7=9J}92pcoyuzpQ=-nWBesEze1eTAiNlGj z>ZL@t%SrUcb>Ov>j)6Ty_DEi0(D< z5w1q}G5vQJj>W0n6!1-z0Ar&1arq?j#&}nAz3?U~^K;kH{c-Ab>U%j*7(NF!DaXZ_ zXDJ|iB}iC`QIxb^unhql!I^KtoZy<7DoD+Yov0brc~d17nm{`jxNgzLvlD zxNnW9w^(TmE90009h2CfY#B53fXeurSi9IkIVQ_Nfq7N+1OJluNNIfCkxmS4dM1V{ zoz;q#0OplML&z5+`{oBCnX8RnkVtx`7o&#L33C#MkiPImtkDPf6%n56%Zx%F<@@5n4D12=Ov`5<~0065aRPDq`o_`Kw8bPk+zDPzf}}FkAxPS#RWw}zn#tnPR? z33dbtzyr1tzXz7spBInguiGB!kJp>u_BYQg_n#CrE=tw>V5$N~teamh#?gI+Uq%&a&Sr1q6kri-1VxiA+spX57rgt-Ud=l!fT>yuxQ8z{Q?&qqTsge~GJtBxoMWVH zkg@AH)-QHXZ<#A1k8n+h)e#3bjUm`n3Pj4MM*0_FqG?fdKd`EF zz(4Niw!~MVyP?T17=T6dT(m11@N6<$TWdb5*)ufmYayrbkOXU74ySuy7IRyG)_!8u zuF?hF&}4Yw4I|JXrmdh^%a8SMGf`W;+$T-Nay3|CiII2~c@_KZNEuQ56h3kq7)|$F zIfo7)MrS|`L-^9=S!sNZ&}mwAymNh$He#Q7L@u!R-{%&Z*}l<-J;x0U&6^Htek?(N}uq0A%VSvEq`u0Cr|1@KnA2>1W~ljbBM%|K&> zA#82ZECYx@)THkxq3p<{oZ}w&p)Nb2e#jJUuh*TG4D#N$s z&tI7X4_V`RC65Db=0S-G87yx2ks=C8^J0wBGEK+Dn+igO3ng8HlI!i_dG5`dTJSyG ziwZ#P;;7(mDykPTRPvaV2D{@HPd>e-8s%WweU<}nVgnwO<^q6#G$MHmzc-N_IL|k? zHXi;k&)c!k2{@qT6Kz9^lLe62M*VujBymF>)fK$Aaf7ZA?m|3>2CaI=e z5*ZKzT!wxdPe<;YG=npu)p^AHE`sf&P7(b)H)%@q-i4Vom7|57`+_8D7=@2}ZCw&djaVm%^uft< zMaHU-RBKS{?yt<8O5$FH0F8oefQA-{&Fp!PU~qW3a%(vZI6ay_+7wG;TO0I&=pHyW zoW+xiz6ol-;m4hwRV2G(;8Xb`>k!0HL`-`Q{3oAp@aYCnDpC1S;dPrg9pgMK-Jc%9}`= zHp=fZo+k-mwza$GjwVxi;5p1|VVt7Rg2p6OoO>FcDj>rG%T}~x+{+ZlNElM+V1f*lHQdWbae-$wrr%7G z#*gGzs(pjn9r4h%?aD2_snYeX4eV+!W7hDL`~C){?{!#oqIB7$N3=5m9e;!P!V(6C z)U)UMYc_pzQ(h9&T?c*Bf0i|9`C-l_x9bE!l{>StY`lU=J%IBop{gjs^wU>)Am${w z^3hp;dg=!*=m(1e{>%g?(+Ay}-s0sh(yLC1P!G=S7W1)MK&_tglN5(UyoROGuWho^ z-Ql^xoy}KLKSWH8Aym}*4k!Ed;rK%nTMk)#lOZJUj+3IeOeL9EXclQ14_Cqu`s2J4 z?iwBA#O^;BG%x%)z>tf=eTgN|3SX5uwKc8J!&h=-#k zM|9KbV`?5f1xPH2I30np$!=+-l(POc+P*Rb_l^5z{6a8;*63~s&PALkWtcsAGUG%6 zd`sBogzC2eNXA0R~hBgQ0`%~f2T+;p~4o1B%q`gHi z@!um%F*=t&Kj=7gJn7G+wHK^;XFjL%VEp-fbGt+4IaPo#=+4u}fw^2?hgLcB@bplA zUJ{=e?XFq*5y>txUODsK{W%7@U8SZiEd{hErlv+`V#v10245jLtlanN=~D+&c7XkV9?bKjo_>0C;g5#%qigX0@hyVpS9L6I`+CS$uQb&c6t=E5pHL^aF4xf?$1UPBe zW%l;~tZ!1utc*pC+1EW8CkD9vOX6dBLLZAX4Yoal!|#gbh%GpMb`~G0BuFfqas%Op z#4xf!@%fMr3nE0`RT5}xP(C5eHw$grRwl+q?7lyIp+Y{WB~wM)|Gvkv)#GBxmkw7` z7gEbjRoW5TRxW{pxPIzhlsW!}H76MB1WS*?R_Y@3?jiWvsb-pIDL@%itfp;S``^hz zQOuV^c!?zG>uffyXT3|S(gHOg47#9z(X@$Qqvm&HFum5WB>hr|VMgJIr+`)|TJzVu z!ak)JBO2#6n}||0cFeCK$-CiC#vCFeUv$anFnC=Zjl;&0C1>hO)!eSWYM|hru1fBV zdXKjep5q){Q+B{S_ZW=o-+qV{POi8=x~AVYVpJLAX^1IF5r0wY#Ca^KohP$dca^A|b_qllE{9H>AcCYp1&`@Pe*|57#@eQpIye=fqWJ z?#O949f1Nb!q$@tH5gd49S#J2H7HyDPPC7B?m)Fw2~M-YgzU=ZAg;={E=!v8@DCcE zgG6O%>OZzukqnW_@0XzzZ@fYNA%PowSr`?VnR_1Zd{iji4be?>@lN0HpFi0oDKpRQ z@}(7c-gYXO<^K-iDO;3O-0D_0F!xGeTrH^vplzIwOkn;U!>9ZPOYa??NE?clZH zH$K$-N@I@ussSx0%(;(Z5m!z9J}ui@4oDvM1wAA3gYrb0+9?$f`{bS(+b`e&_7na3 z%hUgAn%q_T98Q4+9*(i8_4qtQO7R6ADF=RyH8chNny8;k3v7m zuWZpItGWaz_nDq!!`2mdau5itvSivPBp#YbpwEZ`c6_s}_PlEvj1L9oSqVd7~ zszNVKJeW%?L#x1Y9JddH2EsgXjx9YyKRGZ2Jq&{7ic&zbm*!PP*XJn(M z6V^uBH0@lkM)yF6@Ll46h#L5(N>SwAu}x|a&OAqdA8trd1TM8%d&NeHs4os9S!vLD z(o0GzXVmcfU9S;90tFXXOikcAcVxsGgCZw8gCpDKrG2BYE6IMHAIcdPjPRM*w4n`;s6P@dBtA%ZH^=U!J@+7y3MGTBcK>)NH5piLOU<#*BzCe?Z{H=4 zWK1>HyqrJ@`e4PxvGwi1@JZZ( zb&_(OceIAygt6Niv-74mv)9{nS6GZKl})u9AN|USeL!!RVMynx?6aGT+-q}zl`2n? znrJzvVoKVIOxa?w_%t7r+86^kiI?1U@N&`36ST-A@SRg3*aya2wH z=2rE=MQrAf5WQJv=|xj-kWb1RRZ4x?+^M2_3ke6zTgQaj5gLD5xw_iy{B>cc8(ywD zdtu3=>UW~17qMcJt9TA$6EdWjwMs_q?hE0fd~!bUeqN|7b(-SHZ}SlrHkvN#Kpdl3pX8knM{(;Ro-BMg)q zrk4#&ks9LiM56F@E3>QCxfTcH7TA!cT27R-&x4U%rgueWVbG@+h*B0GrmRg{G-IYU zsKe05*6*h~zaKl$A0;3{0ArW!g_yxMV87bL>Oh6tOVh%+IwoI!p;MdQE8g4FEcWve zU6CI9eCJYF1JSj|ud~u(?~f?~=YNB@9*%3{dj6y5@6ygXu^zf3ijUR|hQ23VvH0bd z2>2|>m(IRYoLIrIdZm;Of`aQBq8h6QAeKcOt?_|bZ^zRU9wsdFU%A77Y=4GdBh#o) zZ>dfbj{}cCGKu_!HhF_Z4l!`~OHHT76J#ij6H+~c#!((0Q63OSmILLH8nnJH1NDZ- zRjX|ukdZA~APh(~AXe%J-u|Z5pQdq{bzDJBY}b@jBdkX=pn6jljJwef;1b=dt$R&EuR7Axa!Uv*EoAyvX%hMEru*~uNii>SoH4CI{5cz4+ zC&HQ*h~7JOw!H_UtTZo`zYEPCS)i8I8YiX@6mSkcc@j4CXAOUkQpSfldg8@4Zzt1# zzY3g{raCgR-971N)ztIJi5H^bLC&-My@imU|K@F=8gQD{do)pq$#1af*~l~?Jnf$z zCeZtXA((&Ag7cUG8}gErQ`1~*P_15Dc#ef`Q!7&sCK~-?rmGD3K8%C)7~v^{g3>4U zWn&SYyiL%tQ;1n8Rsgvuc01gq0k^gSXR!3fGSrCfou33}lP|r|uFLKoz=1WEmQn%Q zXh5Ov)-ckX!G#itwbXdv=&?OwCk61UC|0fe|Bc4CmTeuniG5fU;`IzU`)wb^$Q#7-|!XVmxP zHkEM5#-@G~yN^iqv*Yn!Ps$zVKg+EsbbX1>R-6UBMbiI-+rM9z zDC>(@b(Kl)*Egq>;5yINrwv-9F`IQPo~n4E(0bO{O&+nZ1&I;He79Lfn~#Jf#_O^` zGGZhlAnlMete*IRG*QDNhHf?2+T~{5YYz|Sg^_S(cGXe*uI_wp^gqXkfU4!p{!EQ} zRw}?wA`pi`N(3O*UMV{p{ek{P?ZmK{WI_Y(g&ybn=N3RVmjt+u?=Cu>41ZFGFdw?& zERq^N6h-5e)Ey3GG5Beo3}WMo%DrOqrX|&u(gj81ahq?stG_b-d6Q4zd&>*fsr&W&EF%mU|8tV2e6By(*DKSXf@1 zRz&ozG-cpf2M5N_aaT?YM8ys_YY$a#wwZS432KS z7;ejSwQx!a8rav_IQVvEGOCSvHTFQBkyYJ6xY$<%;n0DD%-JIQh3fkoctvpyQEVfxB)$_@>|q%b$-jB;@dh;UPNWH4Wp*D9M>#B98y zSx<32^c>@4k(iU;S?|g7`k9olGim-CXRb+mAx=S8!w~;B#?%}T7#m4~7mV=X+?{{= zVcT!s(I!kj_uwZhktt>{)+EUbD@y%Zg9c!@=JtI#8JgSDJkaf9Xo8c1QlLSxA98qh zXrJ6lSz~P2Zy+j~U2DR&?PwurvC^_Zh|BY}j~b5ej%TYskn(t=c0Ez6k#&sSvAC)- z6oBxr%9d{W9H6&KWUJ$Ian+WMN#RIh%hlib>~9NNl^^FyZeS>dhciz9QSL1Y zNsx5vcXAH?+UBm|$>P58xkta)XDoMm@40`QrIzZ(bW>J=1mEKXPs3BN#z<)fB%?{_Da0;Z1SB zq;$o_ky>l)Lbn@9sT3oXMTL_<{Uescr=Isr7;%(BVxI93y<@f!O$wnG7kWn2cGiFB zn|P4-*pG*kj27>!nN!7;$}qM9wCg>p`%FFcN9)9P{@)#vC;!99{V&}0GyICoarH=I8C?egtBQRX$|MmG|rPlwEcCCtz_`ri5 zrz)%qdLd5jjwGfDE>U81{|~?SANEbtx?d$W_EVO4Q%DHZrWg5dj~9#1|0CaC$zKWT zH91u0yG<;4{OK{D$4LIqHujeLWyi2SayM9lMg&9^_(?5r`1jS6vcbh6)8-2~$` zZ!?uoPV@M7(d|E(_-CiS+*=!6_s`^BRBo815AoD-j~w;n&xW6(lN=;Aj*XW?U6Jr#&(|vXrqUC z@0a)=PewHE=1J$DgNQ>miGDGIuggL%<&~R{D?R>q*h7!luRdl6SMeNDRub1g!Q)|g z#_L@twbhJ_!cn7<4Omx^+3hhkI@GQ9n_~s$gn#6eXCnSRs{dnsF4n)w;QqSMhexH% z^fu}4We@pYO<?MXGNAD* zbWPN=Q+r#}n<$=67bhYS8xc&JVSP*vcoO^KZtB62ZAi6qO2q#su7C64vgUV5!5e-* zV>l1ryr!-$qpaw43_JQe3~1GUYYU4dr)hKA=5I-KT&g(EwRIK8SI(R-NpjG*CEoBk zs=1N>#)}hXGm^lt#P5Eq`Rys4RGkD(`Wra_v2iXMoQAQI)1h9b&C+}?MvT7ottcTe zF*{l?{L7{e<-<_o7188Qk)rrO2wJI{j)8)W4KG?;x}=vWDIpE_%rxg?Ypv--#llx; zckcd2thVHVqKtwj2mf@-T*#o?m|m+XW41rt;*}Ec1b|+TlHco{;lr$-Tj$??w5rw4WVo_QG#~PEI&*&~B08S~c<&3> z0l9E0e);hh`3U?R$SEMD5Sd*yjt+M(nfY3H)-3M4aCW+PPjI~4Xii49SZns&p6a9$(wSWmtE8ULn&xIw!NvbJf$$j;y4~RU;TZax~GY&<5`fk~|q!Y~4!)GISBA zFDEsu=bAS~)E8}xE=s_{SqNhN6mPeI!lKe_sH!Tyx5qHD)cW6bVZ%|aux;C<2IcFw zK}_dh`gvm!M?<>vNz2F(#IC6Rk2066x93;xWSX%?{qnLgeWVwh^X-{2!ge=iibBpTF_@D=&nu-`sm1v$i2qFI-7q{{huQ<%S1?4IP*&z?cApVH97uyGDy%6!9{JpDOmN^SDEFQY)6QWAZc!Q> zky(GWFKx8@9xfV$4q5#U8INQEC}%6_$09l|`5R>1?68Q1;4xZaySp{IOo^?m2$7r* z)k8I!lKbiv8~=YKSd7@SqyN;nlYorz1QVA>h|>VBS5)LFBBM8)y}JHOlK&+p)xCMH z=|%n2>xy8}0s48O2L5%mG4t72!t$oJnC{Dq2nQ9tQ{A@=GDrVZg+!YTj)CN?)Y(jz%AO^RhTezhJyYG zZm}%cbFl2zarkY3tCCPBcA>OW1GUv}=(UsC_SiMi*E zn;V1ct1tYqln1J?FL&rNI z#tF85(@3+Hm8J!$0k@sgg{MEAm3joAUkoNs0P)Uk5keLAK{JIarEZt_wcuYe<9ruU z7jm~~TgN6-;%B~)_I(;(=hKS^V$?X!hI2w4_ax_CoW>E>>|dSIQEB}7-`~;{aTAh{ z6xc`y8`B-F1JQYS>N;G))s!GR2wUNYTiCq|lH_j;ZrriMgGmCmhXl{Y@zRVlLaZ}d zAC>+=(EnL-cY?w^uD2q7ds(?GqIxye`sZ{w_$6VuRX4SIOwVvhOg1fuByL-^V3GNUE zcbLKT<=k`5UH1=o*Xo~pbyrta?_K-(JbN^=?WfZNjix+m^x6nrZGrbHCZ%F#-?}xK zPpkc0j)dLmU7`k0KtUIhv<;;|ZB~O52DK|LbBP9PzHJ&I-?63Tt&*}p{1uxyo68tC zEh1Z8TGcXyirL1u{PsI&+p|%?z202z=6;c0=d8)>b|Kak*mZ)YQnky7r z@sV$U!>1l|+H})NR+JV-6^1MX_&URMk}6%F~U3L(d6g9WMx}sRJ7}=FnMO&+8PG~%KC0)OWb+a zY&gkST2}XyJrZ@~Gt+!neh*0D-*J=Yn;z2}~sFT)!Uqglt-K*I;w(e+wXt(pPqKab~n)-y;g z)Z;k%D#g|K>1Z}rMyF9EIxXw~&;+LWUq}_GBkPWXVc}DA$JUQj>aXn$*HW6V6(3m* zayCcpTItQE^K#P|q8~unL-o*7J;BBlk5ogO zFkNW%bKi5g4QcEp2~Gb zt<~o9An3}JB--9?JDS0je!eW#)#zgC@r!AsCC7Us&eiVOBd80r1PIy7|1p{%M(WZt zzNf{u)_i2P7}J3u&<$X-wkMn9UT-Jvd5`JuQdG2d*hrV`IdVy2x# zn;k?$T27&e&S}@1?OtUG?7^(;U*dJD`PQb$)?B8_FvP8jbHh1Zmgf zJ9R8~*r9+Jd6n15%14U+^V-`X!uY*HQXb`-=MmWor<6#o*4>xbyR7B+V+_Hl!xQ|xntW-t zkdNgTuz(DCxOO(YD6zx~ZJr5*e@CP-DDdb$YYXb-H~6g$mtj1Z*!%v5*zB7s#-%A- z0z|Pbq}N7)tpA8>%dZZ=KQ4;>cL)5Za-o9on8Sdnw;^FPaTvayjyve0EB7h~gRgb% zC7=Ai*+UEpHYTxBk-~8Sx25Rh z#G<98rJbg5`QPzkn&-~V&7B?$$0)C=8a#k@pP2M2oW6z*o^SeG?13Yh%=?4jSE)K& zjZ6QX*!g>P#8ceAwZcsO{@ z06s(SygS_vSHhK(kTY*Y6=%bagpq}`YJKLQCADNlyh`jHy?%p75+P6nnn0OxH#`1}13ucj-oSfwGXrZ8sC`o9s_0(z<0L+* z)~)|SZITed6mQh|B%Ahd=G(j2^mu(v-vz&{f>1Qijp3qc^587#XS;izNd^w%TJ~{|I?ji~zyDUqDz?bDM+Is9C3GtWEU@rFcP zjihja@)G6%os_92{a`#H}YKVCAStds6%H)6$p| z+;9*ve}a=VuDrTP;McC(`EGv5@=jNmH(lmZH8^=sCmd6;fS)T`Px18^mO#3x*?wHM zHTDx9`}AkAVb8FDS725E^_RwE%=! zx$19|3E!SgYUgSMeu@rYNV3X=#@w+aRab;k%o{XEl$=Al*M69l2g7oNYwU4wHpiu= zz6;gJ(!nn%3*A_6&fdB-IVtS>bQDxGAV6Pe@v)3CvAd`HJZ3OP{-d_J4!X@LZi?_(J zq~M?nobRV0a2Yc;SH((@NOGk9DfAa~fma|ohUX3|2BeXFRUzj>cVuH-mQ{2R>i$G_ z&4Gw!%bkef@LtPXxJ$X(&Dya~xkPqTmCd=Q5bd@f991O*2c}-H4|# zC2P0PGwN2D%CB2Mc?-B6P=}kM zN=Zb4e!BzpxkN&lSrZUrZ;pd0&FNncA7cIRv+j`Q?;RN0h8uVC^hIE>s9LoWmwe0f z&(P)1*@b@s2N>mR?ftoxqLri`!z8ac_>@>l5gq_IUwpu?Ibc7evhfM^r<#C1^Ato*j({S z9l>6b%EwZD)?wQoC~SX9kLhnYcS%t((8+Ay|A?an?FA9`T0)b6->0^~vF(a*nF675E4|+wabY<4cj4XM-v7$y3LKW1 z1jLks0^4A}ILYW#B;TePz(rLAHZ@usRQsC29*0T2h)r*F2S#0cG*s5))EF@tUFlc6 z7XEQXy9x(lbR4Q!6`jrq0^!8&lzp;9XJOT}k1XsBq{if{=!ZX%X}48~_R%v?5%h;)JE}1z?{|TE&mL;;z7ujp z*TyW-%XOrKie2R~Vd5(e9L$wZ7E*)(0WP|aI>egwJ^0!wLP@W1o5oR!I_#N z1S$;V<_O!{GXfU5B^qUYlfzS@rycJquz53djAqdlc<+3tguFlA{{9C)w>Ps_u=Q); z#7EK+>8#s_Y3JErG6*WBWwB$_MootFI)k9t?qm=rJ0u)H!EK}7IIbkUV9SL)hl+pO z;w&T1L)NKY*9~R|vQi}WX*lfEtlBE@JRnh~t*vxe1ID>L;*&Fl^+Z2Sc>*-n9SNxv zNBZX4wBfeNY^#n2O~z8wg(+LoFraAGsEw$EDMrq1M|5CumX{1edcL;sq+j>a@zI3_#>U zOsN?|t>7#9xW3(Ry7KVIcRq`pH~6V)>z%30w^*~UKzbq+n#5^vzpSE#wl~+;6aC%2 z=BKOB2skYZXgibnCD_G=8+_`(Qu}ALgo+3?`&LRP1>?}RsKzTT_T?5?us1Kva*K$l z^9g%#p6^NwI?^;$&nt2|%9op3BdDiyBmeDcsZ4!YnQdfhytIuv^014hsCq33#1vRD zucl*!(SS}^VR90Y`f$*=<}_+}Mi9k(F=ud)X(4BJ(D?Q@7^h_xJZ<>&D&am|Zl2?h zg;KpD_pLV8(TSq>bx=2hQ(#EQz%%+$KNb~>?Hwd524zj7FbTwCZUN7`x3x3Q8iTru zoOjbDN+Ve9z~yx-Dr}0-siz zz%Z{}wzYEHq^8r{sdPO~fW%obV(nM>S&SQmd>g%Cfxzj;YK3?X#8M!%Qx`Z(Fq64l zOb~Hu`7A26_=)L@4`Q;#q*2##Xlh5 z9mW`hN(N+!dNQ)}8arFh2efnlid+o;dlf+zx1cBcR}6gKAWfcb(+TcGwkf`3ibe>W z+d_ly5d(k2ifn}*C1LpoJmX*jE}5|5-{fvpK1bNV<|g4TwV#3x$fbJjGzSDip;zhd z^-o0#Smlvk%g>j&?IwFf>GVO&7RilB4J8O`wn@+{UuloqL z7-|d8wM2S@_VhE+BTP`|vffgN*JAMV;gdn$NPBv*zkir}FCoVr?&0Zx$;99O6X1~9 z92yBTk0yXrZnKSS7UmUseQM9v?sP>F*~; zySZkLT_U$SU76)lSv;t%U)+D-(q+fdQGH&;xVswc5MbvM)ih(pWIk|Ow5a)uNF`rj za`x%@C42+-jPnuJ)c7xp3dfr#V?y|JKR?O&*u}rL9kR%~YxUD6tGSV>sg%C8kWN3k zci7}=bzGCxf|WB7Z$9u8_z2{@KXBettl5TIsQqc}&S~lS2cT9S)zy+D#J>l25vgMo zxU-efJ<)1xM3fZf5rMp8Pv)m{IaH!|P9MRc}v&qnprjc`2oY=1to#Bn+{*Z7vp zf3UUo9+QfYCw;aH$?4I2;>&_ED|H5gt3yYwWXf5o{Q;%EUQhISUV4%%KAHs`hmVJG zwlkw-O2%?Gn5Y9{n)mJ%15%XB-_jJn0VCcYc`zB8dlRGRK{52lx_;vKLIG2}4j;Pd zhze=qevO)co7ZCcOfyoi@e*NEs~c49f(lZg;>q6rq zXVdl~hy&7N&S~a)`87#H<+7sDJJ~Aak39z+V7D_E3i*p!!*3QcPsZ|t4h(Q=sjuxp z)(|_T>y?8O$7kB`zP* z+tJ|;x6@VpV81zSP?4VZ=#cMg6OXDwMo9CD_@4OI_V6@uunS0K-S5JFOyL2^;BlX; z9kN4J=a`i}iNY_E?MLeZ3f2T}nWV)$uo^tw7H4r6#^raPEWejVeWy~}_DU|CA%lXi z*WJBJu18F5`YI`BP!>!JQgT?EHzq1!t$xQmcF*`$V zGrW1Jjn3yqj;OQcPqO=DtTyx_8;*Jl--NZs*xg zkJW3wpYdJao|@d{5LTVExNK|q525rtTPf67f|>j^751AROoMf-j`6okGTTeK5W+5ZSgv6GS*p+mihJ!x7*iwzD6EnBbfak&dmnz2@;?Q z%i=}-bS=bKl{ihO{@wJ`V*IMaqU-vj3wIlJ|t zsmd55rr;)cOtTW>BrTi%_R-!e>U6~E15ADM2Shrr`pNH8_cU^u9I02u>Qyz9Rh~c? zy3m-v;6$pCztq-%9e~LUTsaSq94{DdUu|FJXM97!$7jD!NK5u64hCq!J5)dPazvP| z`+l&8$|__@tXl@uF!1+KObt@7mD9?>IH1brAeABRvs71xob_2x>1K)gK!MgaoIehD zB1|k43}yEJ>1?qtHh(hjFxMTthQRwmDnV$Pckg~XbKPBaHQ{LfpDQt0u$=&h5eHen zVQ>ukO9kDCKvUHvzm3qasLd!b2!A5wDYrUO%aN0YJ|lbS1?jXvrriXVNpJX}yC(E{ z9T}QV6bs44y9fcSi1E~E%*j?1JgX6gau7nb)RM|7T}rvkv5E49Wn&{qWsum{ccQT+ z_NyB}E`u!?tlPYrAfta|s=#Z`383lU1yxyE{b=P77-%}({M}GWymxf4h??d`vGukH zqG_cGMNNI1H|?AL;Xt*f?-yNq@r>vpa7)f)Yfpw5h7mUU4F?%LT1;&5TfU=I471XW zMt?s#c6djbUTgSNRd`gcvV;+DP_#R%49KM^E;L}(y;@Yu1(MEg#;R2in5OF>C0$(C zkdV%1Mv4w^NSitKTv4dW-1wc6QUZbyG3v@)RK+YzVNsxtN2=_8(=WbS{Yo#1kPbFw z-OUhgCf&U-A0M{~mfPqPjTIc;PciDU7a}3?F>^U^>8COCGr+rm!Na|136=7(DWgN~;kfgIOexy*p?8_kSA3 z(go@hRBKaTv)5KM))b>}s0D$-SW57SnzUu~>_*L6j%Nmavp)KUpzkCg1BjPGW`cOp zzS{W~>#vo@$b($$CogA=_+PA)>U+lcxOw#y48&HoCm(qr(Xak~w{W zt<5PGCyhKOjgsKYr%P`WRRVuf6~C7#qz(Y`@F-I%FO&YnJ!U&|;ZNtQhwcsg=K$uF zz2u1uj^v1bIb~aONaT2aZ+3o%Jb#ndKY^_wSWJRL1F_XcBjkdX&M-V=FSfdKA`x1D*&j&zn3G*_r0|pD&*~D>a}-LrKYDl&+s~A0b!J!6{CGdWBNp!J4c9{-lcs5@ zQ2%Tq*7U+Jq4Pz2NPL$^hWlZb?qO`HcM8j(D1WO%PYkQB>2gz22`e@L! zZ+=#yaYlh3PS%A{Secy6hc^@uIS<&An<6gqvOo+xr^W^he$}T6jE=tEk1iFHT1uKz zpeS`Cu6?gO3}C&R6^xN0xIEh~cf}-+Yiqg=#}~C_Vdgl(8$3-l`#Rf4b+{?kd#il) z6LjM{&BM`vlz)BLsi;h6&QB;^f-`X+BeGRTF8`U^YUL`HrnL2tO}Bcc{XWZP*( z?PYVVfAqBft;`g^H(qkP`B_RXEh`T}H*$n&8LpbCT(g!OME$YBG%k5o)Fg2A02@aH zeTZ##Xv**F{d`VM{izr#PP-hyOHSAEBXQ?xr0!Mm_``EBNF~93C=c#uMS{|odPia( z^=b>K0#0x#Fy;cdhoF$D6QMPdk|MQAf(Iwn%X z_-hiEf`3-hr8f1ng7nl_G5p2+7~w&(K}~3(+R)7sY?%l@6D!=P9&fOchYpF(cN4^_ zu2HiZYAAfK!**b;-#PL{3O;f4I1f>!t1t$Mh{eE&E<4MlyAPM%@2d%IH+T`{bU$IY zG==P~1}Y|32nkvUP5QLX?zfIl%#V#!B-`f4b@}qq9FvgC)7NJwVLHn=vot%Dw2;x8 zQo}_0r^Vz57l_EP(T$Bxx5S@So7`=pRasdT;e`NPhd7jTIbSWOdJnlvmU*?@5B&Ih zw_=-p(b=H#yBfI@r9EY*2bH?7=}gYUV6rr2#=W%{SN0_q^cKTbz@h!7q|ZSfYW88D zPW^H1vV5Kw#oeaH^s}OWFkNj|6xr||n3--v2E7_NVm)$yuw{&n?Q-Fw@Lf5bXU@+; z+>?goqWxuupxV~AI#{#fQ|Q2$A&0TprLy zP->-7PP0GVOm4C@PQ#0y`0X^c$s2eD)o`4mpwfCyU;KSSO0g@wQ48X@KwkNuKL6(cm?_Q{xn*%AS7glx(W? z75>FC?t@5Hr}pHJ@eS)6Q8H}lgW6pU>12KIOr3jnMJY*b!mK7NVeR^)!|UT`8(oZt zscE6WyZFlX$H!dA+zIfvqJ!4hK0U10QhPl_1raH&PVu|=t>7udFIp=(9}*?Fo@;ta44&j zdwBN3Kg2=r$)x7t^(%j?qQEIy3X*bq(=I7v_o=VKh}}+2W$kVWN4f8jB+j4PSO;ig zuEBV-v5?RcR5|4WKxqReh~c~NqLZdb~V@PqlfLhzPOr)jA@SuNC=LF{|6wtiVD1RYF4 zBVbe9A2-kwdlL`>p9sB@2t96lv~34Slo&YUA(o`Xk&r8#$;w`n?QtdfRkr-##lly$ ztH9HulkHFH4iyP%Jdg$AFhd5vK0o6K?SqzH!cN{ixngUrhT?<*b{HQpBcsRfk6L?% zQEDF;h292UY^?z#2`b`BRiObIZ+-7(BcKjWV)b;XGOVt+@+cLdJNSKV8?WsPuB(m8 z-f5JYH>{->6O6{58!c=cUQ^}7I>Nn7_INSQ$rw?=Uv^ARlclv58$Yq#+E)JOSmEa# z2r)w5yg%oI)A5FJzyMDV1FyBXaeqP}d)g zy3MEqOgG> ze_M8$S%l=jU<+lteRb{h9kfkPk`{nADvP&}JN>D!99-HO%p-{{um$zq9m0phJ+8N{ zGft%M?H0fLZdeUEFp&vu(Aru3=316^xX6opf3k79@{#G^D?P!hoJ_}kQ%TRPv=PCW zX=DY6D4Tf!RnH=J6m(#mm*_TWtnLz-u4x_-TsoR`ucGwApsqmI>yXh}YLX3Xv$Eop zlpLcjG{k^cbKYAA)1|iY`xh!~OH&15GJO&zh5FL4J_+rPStzxa^kC;x##IJ%WK4<* zhDr2Apves(KYUGGNIXF;E9%sCHaWX26rQ&efTS%o$zUoHkiC5_++VJ>YgRfU_WKvl zaeiZU^5zGs*EE2S1hU#rz(l^P3m)yDf-YsJnv_bwAqLec@6|Gx0$tl z%I+?>P;uLFA$oGLk<2*a1$9bsgrw71#sDKTA$3;PMyYr~>}&4gi?A0RHtGpQ(2|O% zU1ee&N9-{xY(QD`H9LMvSZF|vy|?a%x?(n?F(k-)y8?|M6_u!w?RQ!m3XaKOxo-Wl z9b+<8ZMyGi#Z>3LgjRgHd}n58|eSlucmI~B+qtTEP_>~4mY?=cDRC} zL&y4%AmK5MwLFIhP0|wA;~OJJk=(3uRl)_F-x)*HvP`Ow_am-d>#yw) z@AU#bDf|XAq;u|JRQSK0EsN5V<(?+Noui>p)?-L&R~*uO|4nv7!16;=ODtpISEC86 zd^XYZb{p!92m&G^O~UP>ek=K_m4O|;{gon3I)&;82cX>iqp05X-8CDo(+_Qqn5ggg zpN2(b8V0eeMdtmC$ItYxk-UquPmA`$6)F*iU?r~jo&dLlQsYxYMr`P}9gg7_NPyE_ zGr%Ew=V&=PpMY&<$iMWDK@>Gy z>a?-VT4p^6KEBQ7Ra{h?jj17z5*#XvD?8{rk<3qK zD_Q>}wNHgZ2@w*j9X(0%)n2yDVDWK74x-w_Q}IY{t>|>;V*%72m(>999hlROR<5|G zYpY9_03yr8l$~+w@bAWiRfT1$K2-@2%O6XYc=(A+xKWG3He?KMVmt^k*wXngYFd=0 z>W_&{(i@d0&Aw_MVa~jhDV-|75^nhrWu|MwNkzmN^opH2_F2ww6&?+Ln9x>`rj}|{ zN-9C2o%4^oW8J-~UDboaB}!mr^6o%`!fs*A%$9cEZsD#BCZ!RrtK7!kv%zYrnB~=| zO0{lsWXE4e!pdY>w8xuUm%6U{7c+L-Dti#va8-$r9O6~jlyHyg?`XK7?O4WNNay;I zqE)?7bWcTxCP}~s$7-*P_(i&-?72PqfYgcccts0fP1M%3`F2Z-Z{k-cA6~?9&1x4jL|5KE6 znsW`$$;>yWKgTWM?qyA*ms~+fBuDxhA!922DDXr&G0%lj4ySIgySM^4JSZb1z0LOn zbFsrV&M^%1Xt{0n*Zldhp8{j|n?#NZEBfxs^xWRmLYpsq18adVF24Kgg*2@M633XTM4<;9 zUkcr%FzNi&0ELfe56ELh1(G)&b(`>hQKJvvGX_qo94&ze8M+z1qd#ZZN7=CQ$Gr8r zKZlw)tE&* zL8nzSCb__se*M!{I@7QFg}*ey@4dg@;t4N}Qy z3cpCZvwan`BrQM?C>QSBH#~(%iVKiF*e@K<` zF!=r>r3`(SU;VF6=p7y)3HU#B#{VZ>R1c~9mqN6}m7o>V!8jzJQbXnp763*&9+Gm* zXpqv>R=YD&LM}~w?RIvu{;16&ME=V&KCT#Yqt=4P(N*^1?ixrFKFPL_*ZYFvKMj=x zbv<)Y`AD?C5P!wb-L83i`pUI=%leXrg25>K2`K_Kib#8eTAw%<>CedEYiZ3+%ic{8 zg@MP3L=N!MN!`xD@Ef{N+^yS^H8-yNH(j)WwA`90#xMLI3cj!@88G=Q((fEe<`}t@ z;s>ItCVQVY7p4+_XZ;)31^SN0i*@XvH6Y*moHKc*kLCUCtj{-bNygh`el*1Ym6+>w zADhVA3jd5u5F9}rE6ta|A20x&Rlvv(4KDxl=_r8&J_?>#zUp|OSMYIB6sjd;bO zb+`rnD0|_P!VoRsIqw!eU)%fYND!u&gSg3F{U5Cu+R)RlWdH+q*3HRsgAES8b>`99 zBdSO3albhS1^S>#(1373JgQ)9PHjJFNhY=#8d7c>ItNV|7N7x>Vy%)Mh?R!-*b0_8IY$ zI?9zrNrw|eq9WgiiIKL6ZRQ)bCY6)(1hre1qFM0Sa5)r>15zp^!owK*^Zy}AP2Ao_ z)7{Kd{f-bB0B}| z89O-n2f6HZWxD6L@Zl1aSW-l2$U0U$ngHu5TibXWC_wp!&Rg>iCtqX9^=Ki z6DKreZ^o%>1RnNX++f5E7m@#W0sZ>FyfKF`au9j6$W_$G%7AIibecx|xccXRCd@Ia z?FhNEi6Bsy^dABWaKf1H62%fans6+fPlSYo>pmCVx~?7IpHy|z0 z7594e_07#6d`43+8r4<$boRih9OAgY3+bK3#>iwUley)>g;ySDFpp%;#1&g*7!rG( z&5E);(1?z5A`L=$SzfCL64|jP^1g&2$=vWPpo}V~$hur%x*Q7T;eW{-f4E7s!-b5c zJ58lNT=Vnw_3+-d&vGACO*7ZRX{!rOT%7v`<TmgSP$JtTYXfkVAK1j3y%y ziBk8Oz+eL%_ra6Up2!m=@T$@PvK$$RN$f#@qkl^=m6$dPJcM zNv=#+f0NCDFz#RP#F_w$17BAes(`mF=NpT{9Sc!x38OUchEBPsq%!MNG_W5=JHVDXig0Qpy6 z9+KNd&5pX6R<-)6JD@O-L|^+BPlYnJw65+iY7Z3nUM)f6;r;0J`UhLWa)pFBP44=C z+sM6c)-D4k&DWdx$^f^9)U}4M@z6AW3+$nzOfNG(A&Eq#ps2a687a|ksXIb9pX__@ z7+>!PA^}@hNd8?WUx^Z7Jp2*)ItvNjR!$xg|Mn_apKJ_M)ycpYLnj?=TsdKJIb3Ouxil z&WpBQjyj_}rSy(PX0E~`^x++!7O|;M#-4kJbpqX3?G(Evau)UZN%u23qNEfZWMOlf zj&$$Oa$TSoJ)>0SpS>Wlip;Dxw)P#{YXm|^AAyf+_z$x@$=8hjQ3v{GWH-wf(7zb5 z(8I!5$AgD2uh(<1Wlmq7N(R_^%JMb(6M! zBQnjaxQ``2Z*9GesHIMU+Wje*9L`8+I~a2Oh=e+C?$)0V*6uga`M&BbLY%YXS1f=b z2EaFGS{%Kpt@CGrTy0Gm`orO)uc%xhM=RYKW{TCOXCwSTpWMUOcq-5P)t%+5SXj-T z(m=GM>raFQD6$lhy`BOnf{t{#IsCsd?&vM3O;|1bUq!H^rYSa_1CDb4&FFzTBkod` z0a0n9FI76P=xeR#W?PHVRo>fHIlfkOeuNwRSATZcJHHMFQ}aa7YWhwn$uW$B%$pO{ zHHVbusL<`KO~lHoc)EWMQRPlfG$7fgQR51w)9lcVSlZ>wf(_pO27GWC6m<}#d&1{0 zB66XPq+GuA*(oy9P|n&Z=xk12h-KJ|e>yim8n0Z@)8+mXNHS`o)*5pMgX3-MEOoBO9D_@XkI3u73 zPN(rufJT~p#e%Se`3D%DbkAQRNMswf20byw{%^1-41P%r(JxV+q+&%1z!_O?OiJuT z=Z_!yS(?98LAZ==@8;S{(?dwelBtL%2VF0{f0<6}41(vs`E4-jI_IeAk2bB$rEBMe zve@S}G(;Fm(uu0NK&YmS-HS(xusJb~XZ{W13eI{ehG%=zF09lCRyQ-!#&QR{O!0+M zND_|r?-u^Hh!L+ZYC`D_YaKe zjm|7VkgG!1HG-hWb~=64)G+4P(c}oXp|HoGCR~P9m9D};r6GVE_N?rf6!EIKT_R2) z2TUf(h@m2}ejtobPaK+yDj8YDhxx6xxFK$|c$M8pE_$;hsMV6RakBvvrKy7FexFpb zfi=-kyHP=4Hv7U?R9R_?Nh46V2drK?7N!|uANmJ$#WGr%jGvD-$p}`?gTYP162v_} z4l4L5Omr)uBQ>d>he!I@`p@D$*Tu4$%p|$&k*jx%Zw3Xv_F{ew@Q$G{2f@OlS3?oim>@el0(623qmm@joN@)lk!Xw%WKv zx_dsldp?w0f{yp{4^oa3^xTdXN}))ygV~!-w9fB)w_FBdYxhGsHGY^7Oz)-UN*R&M zaN|)HEN6qUM1IYSBIc(>_ghIiPK-*j480%;JubGkpLY;nRqC9Z`1m7ZP-Y%3Kak#S zcq6vH?HK8=&PGs?J6DzputlaHJ2t%bt=*3&+LRqRTL+0(gNNj3lIUNN40tDh4{+%Z zHTSmV5I^606O}u~3;7d)7ztv@aLEafDbybmKGTxkgwf6xxw0Wd6VrGF=UMdz|A;t^ z_$Njm2Ll}k9xcyjHO8ZIpKhX#G*pKP#PUFLUJremnP*krJu6t#Mk>Ykloc)AKw#S zw@ZSl0ax8#7h$ER=(JP&I?>=4n4!xuN@qD@44whG^nTXXBU|gJ^0PL1=)y z;!(xhdl4E*Q)aE*#}AL4Yh?}|=r}K>Y7?gRYAsFTm>1u1rs9I!+sZS7 z11^K$+b)Zr{S26uo*Rw5VuT2a~9Q?OB~#hVA$&HIRr zh3gO~yQjq6p`HiWKl;)nVXYln0mz%%(yG|;vE>c^4Mx5oaJ-(ND0cZ#Q(n3g<#_y z|1;A;Psn4rCxho_qS4XBWu?Yg`FzZA#9zd}lWwE#XI<%Dwi7$u#wXG=Ny3Ma;)N3s zp6*B>Qu!aL3wqd609v?7++Uu1rm*L;ei-Gz zGn%i#?Usly64Qs3l4jLcwroXSs8%_{t|lcJ#br20Wv!egqMiF7l{Q9&M&?C8>eI0P zNsKW)_LdLct$VgOL3H8bpC@G{8S`XG*6(=>Hnw;)7jf*`K$(!;^4;nq#&WVV?ljF^ z=|zM7CdmAjX;sA17=E(+T%TpqAYno(g7QNp)Kma8_+R?Xt?S?&W$H5=G;TIgGH~IJ zDyKC3Z7e%vtx)y&U%uVd7xSv`n>(=-E^~VIDteu}Ci+&zOCG9X;3&NquN9F1iaXZm@!`{tmk}ql) z63xj+8zHo^XA4}JliFU<@(jCsW{D~LQYG&cYP;G{uP)m1->B|$22^X}uGZ>!PYbpo zp7h6v4L)QR(xGVM8swa|CkcJKAH?UeGi|5Hub$8?FKa(C#z2@x?{C8Bltjx?EeYPt z->1~ly#H)}zo$+(Y8C~?Mictoi;gn^DDy*uVg>p0`%!|rg#{z>mUH|ff?}eu|T_9#d>F~yj(YKvWgPs%% zj~j4Q8cQ^Loz;NMYmYBepQG_~QA?`Q>K4(t#l~@}r;`hV-GFetT6ik=!bFB&P^Twk zG52aPL_OpM?Mygx=I!50(g)FR=sY{5qVPG~`*FF+52I1gi7Z#}NfUc&G~exn_RBBz z({!F9?h`A*+u5E{;&#i9mg43~uGf30*7zVHM2`$)cTZ6)uM<_YOoTEW5r zCqFECqKf@jcBa>M%gMvSR!*rAd4V5S^Y%(-oBUL3^X)eB(^2)-?{V3S{iQceS>_>; zx8czHh3N|;l_ymDi+{QWHm<*-%r#ix(-F0$!Y;Z=y`uGZXSUyHv^F*uCacBrPnalH zoBNpL-qv*X++u&xjb4ZD2-Q{1gfFcqYG~km+C&uraX{`%!o=Z214VW}eSU^;A<@9h z-S6%l80xmC3~%dmcC|%K`mEtziZ@La?Q{n!`;+gQZjJRifg%JM+pnP$G~;*aO zoF%4-4v{7fdP8>puVg}<+c?jAM`xaaEZ{|?_b!iZHtLX5zc*0rdqM(y(5PS7hU1)8 z$noupX)@$uV)TpCad?F3?X;s|vbPy1Rkuyt`=4kw=I+Zo4w{-LNQZr7_cwpbFV?~D zj84}LDg(w)0H>MktHcwLnah`2ZXWqQ|58ayT^ZE#ur2(X-dvlosxY8oyJT#N@*?L)Yn zf@3!xcKr^wY~05E>fG5bf?fcF$9J#!_Lj!|b}BEgE#{PZ6wQBI2EFmP8s9Mrcdtz* zsZG=$_~+2obS0bsUtM}`R~pmU7;!4&sBdOBtE!Of{L!aKc=??skm<}5g`ZqggazU) zTa7igstKKD*i8GClA=FbRg$g(Idfrqr$frYp9P<~Yp={`4kDNgCJkO6a8ntweoN=} z{HpBnhfnlfyFcOT8P@QBM*W&%-Q&GxaNh@jS%2D?cD$)2GL;3vp~W9;0RlTltJJ~s z`O#Y}#DqF`e|6i^u2#%XIU{eu)_%7BO!=!+gN6sdMZxAIKfV@dE3xjBmxX_#k4Mel zX)e8SgB(rC0mHQUBur&xLT*-Qy5|JTgdzv?Ap{-$iA~FPSw%&9n%3-j(29Vg7Xh!s zQA>G5Zru3slxEk$B3^|fI($!EnJm!N6_$PN-x<^e;roEulMqpuHz@z$Nw-olyQCW@ z8OnMl4O%TDQe(PFMq|gL)a{CkRFux&Ucu4o2Ga4}UYJ8Gnr&;3emCu6nk%IJKC;kY zyL?vG*KbYM>*TDrJ7CNx6i-sj9)m9ywe@!s667cw?sjeQVS(wivM+mgeHh=xP}nxX zk)s@F4IZ}h(dsQFG+EHneJzJ63SGrLblXOxZAeSf8wq&SukzM%{ODA$Nz$=~x6L?Ewyxd1ON$nFFYfLZio3fPEfjZ$ z7I&B8h2ZWkMS{D#1b2c42^{|a`_ApTIU~30$;z|lTq9$Q`HHBww*;xtMeV5gkZ(|H zV@_xg1D(@|Qhcq$qsGh4uOi{=BgZz2)jC5+*D3V+lT5usEz{nhrNQ=;aj{x&qTGiKJ1$Gw=R}zGMHe8H=N;!R zl*H?R7yW$?+uLBQ`#+^`PT1?!fKXhpdt{bfiq2F4`$l1y!Hf!}Hmpg|g`R*fwwwe- zEjakZ8->0JZF+H0UPFTkE}#3lgbd{Uom?z#MSkS=QM34ddU{&f*A{=XH8>mWteDB0 z!H^ss>3;dm(UtF<#a{A;rc#(x=R4Q)!_wR`?^ofjq)#Qrf1MX-Pk8OERQ$1F5JS9N zC)yjj^d!sld!@LMA0X8#{^GQ8i{21QMaD1Ny_YyHODkdqzIvEIrhooahI?4*MDT7qG)*#E#ZFnpZ;c1DL@cxdI-qAJr3%L0m;L!vv0q|rke?}_ zmR5XY(W*VDTY7mL^~pL9FS&8mR;_VdIWP4OfR+RhN7& zuv$F&A!Vb~Lm`AN%`urJ6RKlJF;j`fW}j25g{08z*@yO@(kkCC`n77g1%2N}RCOx~ zb|sD)QbXsCJeq)giK+lkFZ-KF7gt~rjRhcgg45`A*QJNc<~$;%E2OzPbGj$%XP|}J z9O>2S;l0?~i_+^XU0{0&g2xIa8r&t0E{STlt*9&#nlyC4&ff|5s zC3xlR;a)xJeJCGk`;4tLUY~^Jm51Lq#d>O+kkgdHa*A7? zP6!tUPu%(5Lfd%^QiM}-Ug%VpXzv4P;n2RGNuFKyB%V*?--kx!zJ}TpC&3h=l^4|- zlvwWXRF9k5J2kH50s02=-Itnaj;KG#EzSDd1exUw)awa~UJ*o9pa%qZDhHk=kWEj5 zyVRP~f8|6-u3TNJi{@Ziah^y|8g-Y9A%6%qDg&TX>u-KkgV}!9H}lbETi-<0)%hIb zBwwtN?>_APg4NV}pGr5Qe&?tXM$y@2OapXc&b2bupNao&d`Vi0ZPV_zUjFqJmz)ag zYIaRja@d-RWkK2N9W$*WEMv1F2hEp*%w%aL6_LeN0(ZM|RkY2L-7 zoil?oA2CZTqHyHh`__EDxjJvXlG$bU45$M;z1D=9LLzTRlKZdNZl1nMoLJt@8MGuX zDCCv!1TtbbOoU$?&i^@KgHvXf^eW8=&+`ikc>Y*^V_b6?SVAKqEbjC3+Z7IG| z%Z1TUgKbN)8ZX>}a81P<@y<^}AV2q|gp+RD$vaiqGhuK+#q}_`rq;P%KG%3o(n^g3 zQoUiP*ORV{Z-IxO@PniQT~~sVjmPGu$Kr#-*R{I7a4pI?K`9hVZ?ybNcd!Ep&^~_^$7<;D5IKkCN157s&Xp5 z=(wS%juWW-t|i@NePwU;RUJE!R00Nk>mAM!8V_ zv!>_Q;410a5Awx&1%}MY$anKFt#;A|v5DGUNpXNMYsudE;4b>;-=ga{OeeZ)*EX2s z{PXR6xzx9a%}kz`^Qpky#0eI4ZA9}Q6s~F6!)HiE7O{c^&Mp)^1|6HnZrCwpspum* z)H>JFKuq!8e*k6iW7uD4uj85|EJHB2*hT!Gm)my)a$%TRq zDLP<%`~j{8XE@a=991})COLP+Ed=L`6Ixj0etkQO3bjZeUFeZMNHKcH{s}wS1mfrJ z06flCCHudsx(5B2#nbQr+70aY;^R0{nmW(8f2DOmN}{)CglqEYW1+rJR#Tsd0mdI5 ztrY1}sa26C_D)vWsjT+WHRE6!RlF>GAyiy#SYzTPR48es9PGAVTiKcpM<#J6epTnK+o&F_va>(48pfs+=?Ox*i8CFk(-_7e zOd*pwpWVgohz}>UTT}3#AWP&csInsr;rBHJ_;H#dM}A0Jmp;A0oH0_hQ(mcvbW+!u zrSmV(V@!=EMcDZ4zF4nC+t)8<*`wCid-ZQY?l2u?fFvgKf=-axoZ3v}3DYd!0?^Gx zY4|c#umkc`1k+rjc@FluHd^Q{I$_#pH2G6D^#!|s{n*fNgvQWgg-#d8XsGI;Q##8~ z6#N6|@fMKTE=(|vU}9SsQR-$_mnCV?`m}2OE?Olak+*nA^GiCd3wU=6pR`Z2rZ@uh zOTG@(?`&-Hk(KeYkhJ^JI7tM-A*Cm^xl8XRMtTAP3VVDz3pDnrQl~WSsov|n&uq>` z^?`T$secZ72GG_45S0R*$an@5%Kgw_<1&f9bowmZF$5L-F>)w&PoN)D7Z%w9Yr^aH zjkV9+BbDwMA?38OcBj6A?5eTlj|4%4a4B@N@6Y<}Af3!QD;(E7n-Z=HW|WFiI--G+ z6{iA!&8^QK=X;Z)Tcg3Y#71q6Ltupda`G~dbO2cS=xZ#M zKB&nfj(YIlnF>*y#Ct7gGd6k85f!QS95Wz7YGqS~nw_BO?r6HauWX~f*Jp$m^|0*H zGa5Fn09C*KQc<3P5BhrL$`m{!8lYono><_9YHOFFFpExMM}5ccX~(x)voC zz%77r?gjH-_*uJe{ggBL;=b z;N*spi?b)ihY;$JZPm)@G(37$U#7;QuM8~q&YntNezkV2NnIp$WOsBtZveN(0iGjb zYb_HGw4eH3zqw9Lj{nc+;>9yXmOOEC<$G|H?4j(s0fa0cWG~=9o)M8GK0Ie;?e#yv;154Tc4w@FeAL^ zcLZ++-**imgbr5&XMAV$+#7Q;Z!a`dViQXc2YNMzji|jLb#6fc>22JzG({dqNmJ}# zy+-HTI6o!HKKBmy)AsSM46rK)^zf2FK8Xlyf+8}d z)oe=!Ns6N`Po%pKd}!yPh0WekXXd28rIY9bdm*(u;9ytY$)XD)n$b<)p)3m0MGDg^$k4h3}M zhbK&UoOH8trcWN5es}ir%>N#Vgm2r94{?GW$T|baFk^)Tyudi0c06yOP0sV@Zz(1{ z4ey-xE+E_P!E^OcN?llx3sZ3$`b}3IX{GlCIgOm!Z0E;gzF!jkim zCWTfa-_7zw{+aKioUx#KXx5@!IzvGh~jd8Mq)UT&VSl*KONrcZZv z#p|v4U}%Q*)G{cpYr*X~cKgHtyY%JA)R>K2!EB9?Lf4i(t|!u4Vq*TlBGI`RD?E@{ zo_I!36A4NdG!bahwYb{tRl z%alqDRe_ag_~iU7CP%n0z6!|5786TM#l#gYuj~5bb95;GTnILJMJ`?E%l!Ziv+p;w zxJ_C#e<+_ZKs82NleO#VA6lcjkkjhly-;hD%7Sd1Gvm>`^h-=jt?*6J+%>W%K=Zlp z@olW-aB4c2i1a`OLyqWHPik3>aNqnSm0#_T9E>DEq7$hM{13ukXcHOcN@hLW;AG@0 zYCER(m!?FA3%@vWvq+IFcgGopYcTw9`c|7k;5|j|wRcak$KsomnxQ}5<({IWJ@X^N z>TKP%)n>*^f9WmCq{~0aN8%%}x;u-mhwE3^Zq`alwv<|I>Q$-fc>9~!fxG?Q3Qv*W z;bEYKdIWqhw6#XXsCRJJyYW#899MB@TD?BORN=vOdC|kc^e1g2uN!nYG;00BC5hh# zkBSatCVY<-Xr%Frf;zXZGE-h>lNGR5n-kNgPf_a!K_MSX3cvX7tWKQw@?tz2 zjF-=b|Da{4@b@fB&!r!$ngH)-12A`<pXoanqu+z;;%nyNA&TPMUnx4*zK^##Y%vq@*<&n!3ypTOAWUyjdiCxj^5d zDY&5~?`#M=_&Z_<2xQ$=Otpi(_@~kEZBu+S`MY=N@)nPmgmYAUt6eshlP#*QHsZ+b z-j-a0rIyg>19$#C&bd=%sy32}fX9+oqQIcEf`z)HRRhr+QncTwM$=K-PWia+npb~v z!`DXB9+z@1wBjiqfs+LltY$e-6%*onb0Dl(@}G44&fT!nbw@H*oi7u@)hf5RxhAdP zO9#G*SxuSpegIOn#=o+vbaiB=Ds1gtzPTdQIdr)RnYBJVE_vVGwRk_LbCr$>PQGgF zL*p{1azr1g_zYd)ME#ybHs8hkXqmw%b*TWz!ophiSU#$OfKz>ZnW%U8o$XSC&Hk8T z#mZlUJQ85>lDMy{2rjB}0b55b-Bw_%PJlq1h)SShu2cZ+XX)l<{^>^$CfA`fSx`J0@tgm-~$&H?z4sW()DhavR#PtMwZUy8liTYq&0&5!F zOpwST=h|F)slk2117k7)=K-#XZ1PpT*m-}bX_aKZc*7i4Eh-YkB+Tzw7c1pK++b}o z-$0hUZkSF$-Is*X7e+VvB@;pN*E|1{zM9=`(a!O;DUktizW-U^A?|g*6?<7nj)wS^ zz!^(6AoEv0j&MNFS}g0g!wff}MB1BCwJKs{V?^dBb< z%#5aCNlhMdwVrO>Ar(&Rcx47Z9vJvtE&EYuF4l=wM8$0yXEJ5g`p`Io`rrDqE;m#p zH?53)UU+hcIWKX*d^e*TbSeG0&;hM_w8KM_vBE`$^#68o7+mY)U7M&zwBaGJX`9@oCB zT+d0NaAafRT4=OD5g7`;l!T>Sd_9=DrrY1|xfZ);&oye!Y&zwG96MU6cR2D1J>(Rt zBQExu*PSgI3+h`kMO0YoHBaBUdCU|w5=4F19N?>(9?W5@2H)(fU?)E^WT`9@1P+<| zU2Otij^qP*1G{tTF94(Wf#V8!sji^-w^6Q|uBoY-*pilQ3?UEllHQ##V8K*dAl0Mv!&Yg(?O5WzPjXTn#OyH(cz}weHvJHs-|M z-s^#U%Y&220aLzoR9?5SxL~8^#HrWTkFH|KYb_*{U7bH){K+AQOAW1eQ%q8Vl?UfN zFEKXGWc=-hRVCNCxFleaxq0cDmunY&`bk!CzH9gZ7+9$Dc8!?Of$1CQS>`u%INVO} z5ik9*Bockba8*!Y<*pZjg!SHR{9FZcaT<8IB5JHKsnBDpkfF5aNT*j4718;WE(}|( z5O&(fc&d+g=5I+}LGKx%+Atj}(scUDQ-VH$KS#hq1bv z5_4>I5@;BEvn8_hTD(Ow1T3@pU1Ea6)k{xOH?YvwsjyowP98(rki>S$297v@h?tb+ z9r>Zkv4rtI5vw~dl%)~$Kucj6Gdkl`#Z8fMX=sJ;PvJw7K+rdPnq5^vmR=wsFK;5f ziGas2Y2IJ!0=P_i#!8E=aL22e?|BXTUKDpq^?Dnu16imgXZN*hsjSS=7{+iPWOyH1 zP%tx%RwR6v`Ky29G8nfSEwA@w@c2@O6_`O596vSCQPC<}j7OM$Jc@;aV!l*%8ERUy z=5>>pFo?%obSrl5JggHY4>nBID7S|19qh`PtTR0r7O&a+_3|yY%$lN!cMzesun0wGh7iFI?S}~{&YfIs{rBf3? zBhipj=*NN&1Nc8NeyW)taQK=mUYfaD5u;i%kZiPt;jXC^PtB${IdlfX_riBTxe+Ouhp~+m{uLm! zDb(av%c#%A9ZPTMSsia>kn=ii{77xon@vsEe(>2N*FoBLeh0^LhKV{xKxdNXt7g)# zLuqBa2%-6yn5=C|zF@SEcktcP#d`#LF>8eiFGkdUau5dNGy6jQ>u zSzd24ct>@hw!K2iDanx%Na*)}YKqbpXDRD_tehrN)pR>LYQvRwo&=~6Z=E$p%TO3f zxtC*R3}Ic5UI#4uE8hVYLl8k`Z93Yj;1e#H<$DMM^HdagXA3aE?g(+FWPI5He6rZX zbMaeZ9kp`+18o_peCqY;8glDAnZL{^A#zbne;8Exo>bx`#NDh$lUK&pS!5|}C_)Yw zUdcQKC=rA+uQvQzxfw>Q8*z~!XUO6I&dmmR`FLT!3wYE(OV5rSzU=>{Kwc9Z26Sei zR*3HEN+FP$Vp2;-+}7(Jozt7o&Ek9cuZV@MU)u(>TfnOU;IjkzGX#0lY$&w+x>=GP zAegqLLKD4}s#b;oyg)uwZGU>8bo}?lR%+op_1?V(Q(pn3rK#_~YtXXn_DKM_klszN zmifdCV@Z9Nf15{^oE~M_D2j8updbvqKSPD-p6Bf<`(*pD`yN>m-Yj}PD#BzOsh{cp zdTy~}g(+JuLY)UbWz7hR$i>9t1uaWELO48fstal>6K1)D^y*x&PtkNZ9D2QiNa}@V zMyCaI*m+qI1IgJw`1xJon(}D!%&-iU`LT^U>=;ADE)w~Z#|}Tvrgg+VY`$hsp{1E~ zM|nNPZs$rtaB>70CAHGMN^)cGMZXwxd7*b@gVKGG)H;Ir0PBOV<312mYL|u{gJsrD zS2SCp$02m*;_}3x7%Gx=%FQ(d4F+d;c6%2R_-NFea5^qLBc+rqq@HQr5Bs`DPmI@` zC<0#GvAht9v`z<_yeeIpCWhZ3%T9hF#9dhky>-r?iIaYYgPK$t7r*t*Cx8y9q#7I3 z5(E6uE41wntbINO0A&)k8O|h1oS)szWdm-OIyErI3y(E^lda3xc+hqzr~YZcZ7>BP zL*h2#orf{N!7uDgB0(^|8W%OS_v|O_9RUj7QcE3uowGM|UW(Uccct8=RXl7bt}%D1 zRMY%YB9OcFQ=_J&qAl?yN&ZZb3f_R2CWB^PDE27W4>GNHd|^!`$`|YqOY9*2qD3ZG zG_Iss2*~X-{&=TChEuW`V^Yi3z9^`lDR_jN+Bs5)OWs0y%Z*q6(uT@@ryXz$d~P+? zTsF=1;l5^}N@Pnm&QdLwR+Afn5W`usKS6gbk9s#%<>gYPtoc**nyxPY` zC|%AHTjfbc!9y-ndX?bN<;#imL(_k+`@*okFRqkD8KTKlOZV-yCa<*4tGE^TOAVl!Pv7#WK+I`(4j zk4*j5<9Z@VqP62nCahE=D#09Cg&ssR|4{zC`iQI^UvhMj+b<8%evgwp3X-8`)Zh~X z!rZRVDecRGcD~5Oeo7<=PXw~ZpD$63H?dzfD}ITq$*s6qt;d3al9~XIV2sVz`~ewi z_UA!z$e$zxbjZdjej<(?#)qw})*0ZH=e@e~5xZ2EbPO1k#zeh-MvvEPI({>;AB(S}v2OmC$_x=(nr1qqGpQ-7;@DYXyPgo~_r&JF#|QOn zb=i_dYJjq2=gDYUQv|xGBf4K|c&DggV)J!CJInd)aGec2aV(8x$`bc1^LT1{TST$i z9&q+I4H=Xo%r$yL22%;@U-f}-~A8IL?IwyOrqW*UG zpI_2aSJz`1h>fW5dNmWb(=6UcNu;>x`>3=q@3~sr_KbnWSdH#9WUThpy#&6YqqfC! zW`pXoD4tcJ2ICA3GGhsBD2%Y9IAKwzN8GD4c+YMkV?!Gho5(~tNtV~SMkrO${9d6L ztQQofN0JAuZCME9J`v#qLfZ(QqJQVDLC$X-k}3E!Fgr>+OwkoV#z|5|uNIpQw~hNvz@J+!q1B2onGC}uW8EJ8}PC%vF>?^-gZ~6_p#${ zWT|=97dT*WPzQ}@h>rK`T8W0t^Zl9X@ufyb3o_k*pmLN#>jpHxF!0VB zO|k`eQ}t5?At9mBapww*mOLy{0)`-SJ2&Cg?WpyQ`?w-u!P*RVZUq>X1DH=E+djd29TOBojX?PZvLy~275hZ70RtQF+i(CJ*uE7Zj2NY z?Pvz`Wg4E1-CflKBIQSdlSn4__EptW6jqP9<189E{4Vwt5&05)&FFFfz=-Hry7_f6 z2}>k851r_%YT89>AkV`;2J*rgoc74rVNcUqnSF^Y#QcWFV#cEZykw$HoV7i2XX| z`R#k3i*RxI&1=jKN_PgJsr3g7EwW|hU);BNXHO=elJQ>v({ehm%G&ly#f_ZtT^$eV zi-f}o1K-v^!wZ8tB(+&l-4`_V#0hX6cdky{y~bYv=Hj8{))PC^ztnGckSM3R@@aG6 zG9Kq~_ao|^GyA=@X~(mqI%SwF1*C4j#-C#rvefBEm3EiQlC#IF z`w4_o)OKmPgaHI>YnT8(&khXgM-q{Yz8Q^2-To4Gf42|0_ABE5q-z}VMB1AF@V=Zt zU-4@ES&$@5@+$Ezj7HMlu6W|B_;IQ|`niT!;&^pQ&*uo|0?Czt>6*fFNI&YsAgAf1 z@Btc<)c1QTz~tAb@8op?EeU7y5_T(TG3G}&2jh5C*)r(vxZZ_YZk$%5epo?Gd*AKN zFJBd}XQf`V`IT(C(*CsO#}E^Lb-iX(A5VAP2$6MrvQpP3@5N%ujhCeO+f+55g5SUd zjMhUr;B=Pcc1HkM-PGA#yUg-??R}Ku!BZ5Eusw~xTGx2y7g)o^6v;&h2bbb=>s1PwS=|@teMT+&)<47~$2Posd#sVopC~Tfg&~!{+v+|kSzxZT zS8ecadMwPT5npFMWU3E`ox$(P+aNuNO>!V}vxBZz_x4#zPe#B^7@_1%mog}8L|JHZ z#(x9{_q*%MJ9d|FWBlp$ZouO(nHdl!fmITL4zGs5ldhqyDyEf%zk8_iWqMOu|2iPb zUCxl#6<*>clYzfG9QKT!pq)8XM)ka$bzm{LPQjhMEUxXzPbG~;H@+rkZ;bbeWI25FZL3;R#Lpf|cu zT;V%_y1$YEnD50F9#6WvckBi+ERK5cp`Dmi9Yph_a$n$llHMADTBDCIA}f;&7l1H& zue=*FI0jse=`wk`lKgrNQ^|rl|{W}Or$Of?tRw5^qBK( zv-=&keqJGvoh$uA8J=NCo!_fGE@Wq>@SPTyx-Yi=IL+3^Se8k8il#P0m%IBua|F)~ z|BBzVGO@@0RQ9~=^T#k{N;k-Fg9A~7!m}dLz56}sipnfzsRx$%f&xN^^|G5l$BpfD z9L%Hm_HSJyFdi0CCGO_Nx%CpN+4(-98W>rgcc6KvFZKqS$Sb5@4ug%~kxJ8o-0X6+ zCs6>b*Nv~I;@$!u59LsdxbLT*?J21W(-ycNz)@_3uAbX4<`=9fx>+MyB_nc+1y^z<@(6J@O1$|24yZhA}3$5dleHVyY#LFxnJ)V089~0AGi20r0H>#&B zNp4?JK(h?@#U~Y$8({jY`p38rXDl!GoFg@6D^H6GQpW$HX8r>%5WnKMozXN9v++hf zr<{190wZ130`Cwhb^V+g=TpsjK7n`7gTpt=$62dcE~&qH2?GS_{8>^{8nX~lARvPX z_%=UDqfoCIZFh?Asy@hd9268EZC!EQN%j4LB|Alwj#x9;6j*3o`3&-)pM0q<_VTle zu?tTB)JvvCYgf838+(1G7-Z!(P7HY(zFLk5RQ&@Y$UV<%j+~&UXVPmC#)s#f+mKN%=ci%fa zh(wm^+@3I|jv-MgjK7lUB$iYwWVj@tLnGV&>PnCP0u>@CcbN{2r=B)S$?LW%FJGPU zd5Vq~PxhMAO3pBlH;Df=4CRjzM96&=14}ffqd~G)?sB~z5hCg-vbf!r2e^{mX~T=j z!b>HwksvN+9yfg(a|oh*Rh)ooc9zg6G$A4isPvP;(c&{xRhP5^SCvazEkg?QOO+Qu z3S=@z*?0BD1FBm92b!BRWC4RE53$7}TImdIF-xX!c2l`EB9IZ9a2IZgLfNk#KubpJ zmGoBir(-KA{fTo$w^8Yp4D@k3NcFZeF&fJCC)W9ObMoJ;KLalGeXuU^z*{ ze;j{Lx5V|{QL?sRR_om)cp@5^U?^(qK*-`emKJV#S0s>-#>U)>4UcG7LcV$dc0OHO zvHD)ySI2s)=VXWnC<%!S{zLgeL~7rrSml)AV;RPdPXormBZ&f2{+L<+Holyh;phAS zml5=pQN~RQQe5%Iy_wZRoPAb(KgB_;F91XXg(wELDxeb8sJh$7K{8_FI!v#%P+fbR zOFEOs0IXx0O(xPR$_Zw8aWiozY|FO%VsXPmwvPoZP_OA(eT}c7(Ao-I+(K!`FZ?!G z=9C*YH7t1KnYjhC`1>Gwz*qfD$$$s26aE9%Ni47-_l0X^p0JM)_gorS`bH$BtIP&r z#Ue-T@An@N8jsWH+-met8-m?)=pVweKkbS`mh>bAy)gC;gBNGTrHr@&3SPVgPDTVY zzMAWh!@tQE6cj|DUE`>{4>w)gpjV9Vtd_{KejvMk7Cj4dL3@6zaZKy;M=Vh{{v9%K zKcgtV!L*ZjC+g8T>AW_Q7~^P&<8Qx%##S56>Sq8;T%KcOJ?uYWv+a+JiKR&QGo zq`}|o&Cg4VY8%6A3w8ZO#&74X5>50aB(k*pLcDgc@u)6DewKG?GXD#d{d|M*uqviy zit8^8`5YRFE(#1?jN(?tZEV}D!<37OLeWVZP1=9=Z*YDc&eZVmft4iFX_|T_CTP4h zfhj~gwod*5zwUFw6Lo}EKluRy9tg!9{IaqJTca6ul||F%o9LF(Z|F?u4cSpIvuqI^J<#f~>B+Za4|Cov>^fVBzq9GC*i-(0B zj(Jujsxv70MZVKAdyj{c%`yX9n-lOZpr|s?vt`tC8TAH-f|WOR8o&p89jo!Bark~I zwLH>_j%+Zv)Pzw7o?Vb)UiT9q-D~q(G=$(UMF*9nod3FlpFRrVcYQ1}WMUKiP%wJSPFs;ZK0@XFVi|-OC$V2!}Sg zn80jGIvYaZmO92$>8f9n52}4NXIn+be|gTX+-icC1E)Ud@mjv%c#b}P73_FX2d`YV z*ydY1Zxxg>K#p6|ok?G+(+`wDWhu-35$NcY!(*ib-~W;mc7N9K#?MoF3mo^P$qQ{$ zf~T(`mNkiVqD$vboV3iLOwV_b>eZUWp?iNmbhCHs?r_He_qkF8^0o4QlU+4EzqP9y z)1TwU+>ukSQvQ+hqRi!dg}cP^-dOpRVYzzS6K~mG+IR7i$WVsd;fQ!`T7P>N!Di}d zX*iyqxI4E;B!QMAWEJe^eP>Ymzv0)PaM#0lHko&W>jB%EV>J169X)Pw4=pKBE|@vt z_$|zStff}+{(is5^`%;9PSk&5lqQJrO!L3Nim7S(-)jn7BL5%@;r=I56+UV$m;L8P zrG}KHeace*iG3_FT#xrD#s5Y+VtK8G+JB-=QuY7q7Jheq%0RJ-IpEys^ba2Er`TSG zO1C5TRWYkKp|`S*H)0|;%5KW?x3GUb-}EZE^_^?rMSQwix8ANYqet)y{>q-)7cAXO zX;qJ5^O<2v^nvrTieJ`2iFok_qY)o%NyN;iq_H5EH4Cn4Q`U2Vp}A6bXogFQTaVNP zWvA@FD-!Ql)TfO6QAUNya-WXB@faIm)ShcE6J2ZLZr$i(*OXx=lp!Niqr{IFq_R8U za1Jaf$-2ljX67wn$NMn6D0MOU;Qh4gzqiJchVL?jA6TLZrqIj7-&s@g1L)RIGpl! zPij`7#K{wUg*U0`KKhR{a$uo}wgPz<y+Tg{Fxp1S82l5IfE_w3pk+qhF7VDO;HX%7iBk8Y=>i^x0e~u0&bDoC^GU0;` z4bRo7gA-C~!j=1VRaiECDEbTsk?Xaps;Z0-Nm0niE}+lPNL_ma?<#XTS8oyA=`y~) zLdVC)F(d-=&@~zDci1bC?%PSTs=nbb_ai6i=e9W`pWmsUq^olT;{HKLT_|b3hJ-sp z7N5!MoaY?wb4zI~t}T4-VUcvkD_^fiG?i05=aQN-jLO<9+@PGUx)}NffT?v4gbpQF zkT=2N*_4;5g5ZX}V-WYdT7|*L&6G(0Y?Fa*iw9{qaTj40PH0P6s6?LdSbJ=iUJqBS zh(VlLEP4r*JNZGz1J_7T(83h#SBuVp84@A|B`wCotFOBUU!CVAp0M=h@OTKIx#xxc z6ur2?_8D!l`wfui2oN`)r>1>(+S$Ab1kY_8<7lPK?%=AZhp4gfQvFyJzJ@ z=O^yFSL{fe<-dnR$TL2nn3#L%4>K$VT(LTK_aN=gR}fyN4%v#rm>8PBeUN~IcrHDZr2S9A8!d{fe6xfLd9mdt zs#`mU@#3QsrYV<5)GRUW;NqrZ5gdh=l*sf%*Sv#6eY%XIuXBX zA(_4cOoBN)KCEOG$G-by5f`%y6{k(*J*Q+VXGL^YEGRmZCEI=g~CR`!xQ= ztd2Y@@AY@kU+0$>h>RZRiGBd21>gJZnahc7bt;pmETxrYJ9LV#-unhm`-MAlA<#Fg zpC;B#uf24%2K3vDu;uO8Qy4bTG;oVt=f{m2|JZXdcgN&y(VYRyb10xXLk@Vn77~8Q zB91r_8h$=?aYi;RxgqPHGWO3|+ImjF?;)0v@ZhY7o5$d_Wq{y zti%$>t$^O%+yv!#NJUlENa8hP_iXJ-Aj^Zipbuv>WM{|P_o;T-a3c^e95+aYU3f8v z{X1<(yk*0i6C29KD?@Z;xIji`-!CGrZcGk>EO~}%>mnL6tY|A4)5|mQUHqYS8{l+G z+T8MD_{5&vKtet>?I6+)ZC~O>-_G!irARZR!1sQo!IYJz6`LN+3mgQ`gq3Y z_-Kmhx$y1bj~}uW80_7)6E>2SJ1Qy~yMpGErRGmQ5C9ypB-V4>-1QN&{BhH54d|=S z{!|PF$yf+WBwGH>A#BZ#KvA#(&-7|K6OFzRx}2Bc)B7iMC$ z<|O4D2s_fd$4bU@YT1B6Pgc$~{_nakMDlMW$_U!g70-*I(383c)$}|SV?C7ncbN{p z(fICavi03T4n7Lm2qTIh17CLd5O%wDUD{aExRN>P`K!p^71w1)$d>o^E$p6#+`lda z6Io%#75^zG3^BTS`;@`+nMle6{i#b^;~^Kjo%hG4`Xofzf?R;j?vL;T?A{j(>-WLW zP)IyE_}4Sp!Q>~6D?Wn|f;!4uOrKaXpaDjt`5?v)aA*8`p7ShM!VIv+qLP$-;sHBC?Nx3E z!D{08NmDqz^%1CS=}qG1=$l1Hj@_@69*guQ2}A(|UYg0MI?1?XF0bvw3W>Q5Nqaq! z4e-0)+{AK)0z->$q;&?zkx@V!t%dB{9*8Ig)(}Ua1W33q1<{+%P zBBT7kI3{58_eLY70~|IpxBPFkaGWS`?VY-bwwQzhpFgkG!hcFNL+frIQ@Vi=5(~$M z4){0VLm!is@YdTguGv&e(5~&)!6Ux$-uoHsLEDn(fvPqYQ7~rS zHamA2v0k$em(0!S%=4!m%SP4o=5V5ZC+UG_>_qO6$wuKTVmaMfHZ@=gm-`@n*s;17 zY-a2FVaa5lO$CG>h;n_KoX;(GhE(_L1kD@@onsoOcy@mW%k#mxY+yTavhfa_Z!Fz(Xuay={JdO ziP_lc%PU*p?*3Bl;Y^7R*nJGkiY{!MVxU;5d3L491lBteNmyT`l#9q#^gGFc1jZ$u z4Tj$v_~gx|?@Aq6cSo{bo3?-H|F@l#ZluOegBJK_4hTUpms}zQ_?@C^m&|{|baov^ zqDG^lpep9{KOji*xxY>qeaXc)4h*Hs^$A`7lRus-5{1adrMxmr*O%n1ktESvxEgZR zxCgnP3hZCYnx(gCx{nt9Zw-wSdJrG@0(AZU0}n{%t27y*`f=nRb?T4AJnN+8bhDMF zPE^sxHNeWwq~>Pjpr8-3iV+&{v>tA5FJs6CnPb5E`lKR-beEfn77TJ+aeoO^G*^sn zK(|-aRpHgl4`$5+D>XZ$Z++8<>l+)+Zkp5F=xhA?{0^EsCqUefXGHzvJ5qo!>1533{>wkfC z5_FT4y(V<;2ouy)%Uhc+$Y(^*6!So0SNLeB;cenB(gV+&LAtcI8ddQ&g`{-I&i5o1 zb4tRh4IJEkQ$#Z5#=NkwSxUQHOz6`SIRCV$qbegQiC0`E{)_CAyr~rxnez_R_cuFo zzPt$vsun1Fq@s8U&B0Vok(BGBN^tV#BGHL~4~Neu#5X@ldEHt!UUmH~X(tP;fcj_c zLK_JtugFdagwyQOp`@%V!$Sf?f(mwACOiSD{NcmhO+5(RozLQE_r}Bo2OFCMtLS4> z`mFqtiaFOCQlA`90o}i#KE7sO5vT73XXm)eE^G5|KAX)$BSU;oopgn)%d7Aocf)jQ zTTOte-HVLZ@>K(9=*4BVSV~{{#a@kD3IEeIUE7N-zG+vS0yq2ngS)!{McqBWhimsF zQ5#k&74O&UY(@LS2C=cQUOsi*xJxgl@H%VW3wqbBM) z>By3kRg|omV`5R3SJ3V;h%{`~Wvwu6=|~$=O?$?07VhA$b#m0HPNu8QU?Ymf(4Ot$ zPEjaC9I9`UKMvDew?@e6NO)zmJ-mB9#dzS@Hr7*?^017uHPo?|>~!l(JTp!aJ2EsX zsMorvBp&%Glx{McBi-t}0c0YzShvu&l>x!)5SBAvL}d9r8`>Z1Rz2L!r)F`-R>CKCi>6P3Z9Q+e7u; z;Uq{bbA+fdAiY3YK;*RL^wr`8K{986;U(#Q7ADZsjkEc6J%#&{Fa4ny%0n-b(%M$7 z^YPDZ!5;v9HbYlXHYsCjH>aGRz8)_ zozA>DYItg~vPg<0d%u#WvRIl}38dt|y)a35?2kDF2n^(J$^Oq*?~6*~df+2f^^1GI zW6AAwhcbC=b-R2}Pn*vV73JW%l&OkeCtmH(aY;6sgU8Exnd<|uKWJLH3}h=uNCCwh z*4c#JbZshFXkdSplNwIzM&zhq4qB{g*=Tkmq&QY2v<<~$JZQIh6yufxXSR%#B5Zka z-8HqzhJ&C@83liuM=2@IM*W$JlmBV>_dDNFd!f>0^kPeMe>3A>C)b2#=_^VLo2!Fj zfVSQ@j)8}5Iy%nv+M3Pcegah@-1GCZi&W_VwN)k@QN!2liut|EU%TW2-|5hS4Ox}J z2D+Z?(e-HnZb8(=O;&xPA2t_9Ac5_nKemM<`2Md2S!_2dF`C`d*4Z9{#0t8Q(f&^F zQf<9>r*C=N4c^rx*KiUtwogRHuhs(lRRuW64S_Tt5lo)Z{YK8#kH6gfI(=3_NU+iu zz$~lDs7&tA>vll(MHY1CDy^Y^Psyn_J4_o)9s?1WV8OS*<5%LyP8o>I+R|w6yjua@ zE4paM&5wieOwgG?1Hs9PcyGpTC1CUK00R)hWqlPBL&?f4xzb)y*Pb2r1plKv%f{gp zw0#;mGb^nYfJU>gH9y}BcDw1brBkCE41J;)`-9=(PpXtHSRYvpHPGc;&1wf5o(QqX z6IP_4NO|fyWeQ($pB^)d4ECC#Q0?{^-D};stuzr#(2h%YaRS#CS7ZZ>0K6Aa}h=DQv!;B2u5Ke!qwu+2UBX7v&U(37#;?GgLTWED=E< z*Q)K2Eay!)_&BPpFIA4EC581#VGct7a_s&l*pJ&kyP$i2+qWz%jM(TFM|w_->)r&^ zHDqCTc^9}9$Q>xL|FZ~81IvkfaPQ~1TvUq+hzv~HB^ldJy z;T2a(nKC~`vKH9hQjL!9xOc-_!qFPKQ{l+{$7gu4jeUeB2oaW(3?l_7KN@Y=pgArN zpTLT&#XG0@_SI)e<^MG37dpZ(XtM?NQAJ+Q%&B`xMs&55B6fz^)ZxW-JuoUfq?@|( z{cK8IPezafXvsE-{7i%p-M`+23pcezCeVwnx_aI`7IQ88zf3=9CVMi6?tLKcr$qy4 zm}?YmETQVbht{6r_Ob3?Nek{eSdMs+o|3&$T$0%JnsUw>cn3)!#JLtu_eL z)&;Pg7dv&LdJx?tuQaozo;U=1Aw^vqWPw(fHV?lw;EAfS?&tPq@sbxv?S|Lrpa=*( z)Vdn+l7V+=CQ$`lmaYdJRT7-~bx)eR`h>>r6O0^t{~Z5eyunb=$@$`T;wJuXQ@^*L zE@y*dk|B=ap=puqA{bntE%JZ(dZ)O^8#iwFUR9fI+mnsm>^8eLOt#%-+umH8?b?jV zwkLD4-`W53c@LhG=V(sn=j+Rhf_mbocTna(7LXauM6deaJJ>Sf8qL*Gc*qZ<)jF&v zY{a@(!?>tK$23_NrqF;5RHPEs)gP1HldNITGiG@1TwJjq?B*7iojy3-7s{KGD!x){ zGn&)7%9XR_9311&>=WyS&1CX+d+!K3{TvdVKA2Ycc}GIdWUz1=G4@Upuy~KryIMBA zOS?K?1)@)fthcvR3eQzJ+Jb?M~C_aw3}D6{*P{p=@8KhpYy$dQwJW zGnr2J4y<`>o{b^T&7`LeO&gaL60LwXp2U1F6G@=`W5H`L>-?IyHpSGPzY<2VpMo~o zqMTY%I+c8RtsiKjOd(mpx^Ay7y3G%cAq@+TeBBv!QKEYqR5e@0IxXr;OlV+-^Qh_m z&&M@?f@S~r>V#VU#3hMai>8L%`0%eiOEB@V5Ul zX%}-_+fjvWv7iw)_ol}uS!}?5al7we?%Nx;Eg{CQ`XPz(iP$YTxA^#8l4u3*bg6E! zB6dls>LJee>A?Za4-R zgu`pvpBYhywvgeNr9{589kVQwgGP;d6p&yxQG02|4ZHj} zsleDBfq_?7T-%2ZzrV_v%=Dw?6Aln+*9K#VQze;_P*8Qp6NeHPT$Z;N2h`Q!lTmtM z3KwlUPMf^eFtm7xA%&`+QByIbzT`71#}+CtAb(&lPWajMvv#!85Lj5qk&J)%}8}Fs2#Kn83B|(_ILkBUih{#5Z5{1mDXi$oj ze`F2x+`B=njQaR~m zKm8B=Wsw}?wnzSQL=>W= zLK<4!`@7GAPM9cW9tX&=wQYeNWHUAS4_p!(r>806>+l8t9hY3BFI*O1L@bOyV-Qif zUWS(Wj|fhNl&%=6Zc>(sZi_`p!Z4$av)C1FKj_5Q`&3>L!}k1iYV^sUg)) zmyo9d*!`mw?jGiTdwa7(B%Dr`SC>2>;T9V+)&Ds_AV^P#Kpxv|Cy|`R$+j6Gxf%!J z(eM?B#b?4-(7SecblL;({W#r|({eCiw7>tum!}9bEm0RsK98d8&j@6= zB>0m{BMvRAPxc656y$7K-vEK+w3V(Dc@z@tzP+00qQB{BLVG`6MQN^IeT_6e4a@5v z>_^`=Rt+kH5{ujl)n})*=Dq=*j9qvWSa9b#>sv&2Quid#&Z! zV&wN_SO@tvATCzmI`6ce z3#y~>1$FutMS~RfYU~f=c7?G%4R8bTlANe!Ic@9TKNU_imOXk?{ovj^ui$x3g(?l1lGq)c~_A4GQrfkETeW8!VC z@u1h`%x2Y(e4XB~CPdihg@eW$ zBE9V1{T^5Ul2j{ZV70fzPvjY>yHmJ%==Z$<>;A5qFd{SA`1WS>K_Iyr9(bCmkR;5T zQn@Kd4l3c`4y&U>0m|(Q_o&4n$>6E4z0Qg-4vl0x(F|?9oj`US%jfZ)hHkS(Cnf~% z$8IiMD*h+CkrYfsbm9)LI%w0$u1@ZcXYwR?i)ig}R!@gyrgHlW*~)19bjE#J5r1=; zkN0vXs`hcuii0Lz>=%8$BO;R4%cX?9ypq(`&1E`FcfDHew8nk9JzF22GqXOJ-(4TW z#V^(^fNb_AFDZBdkmer=moL#uRsz2w+znVy`By^MekKyGwWf^2D)TsQ@gyr4?2vzC zLEbAEX7RG)2e%F_H(Gr0N|;@07mn6{XUTsNoP_75n_(onO){mf_jsj8&XzO0-xgUb zF#dYSk)7E?h48CS!a##P8HyeBu9%DT6T`1@J}M^R=xBVhkZh{+TI9MT<{gjU<#m1x zLdQ8=zVQF|oZx9Kg0AWz)&KJ|b%_+cDZAx7MEnr@(NG2sk|Ti#dG>Y}D3YufvAd~pOjdX2*p~1rOO9K#$ux_QrxfQW82R87 ztQJOn*UZcEW<{-&DlRVoKl_Qew{9hq^67G6=YWKr20s(kkd{~e5~sOAzfM0)Xjrq_ z5(vnsd$fgm0KrG#+Kx3^u(NFr_d?%ScgUSVv0!#%tI^cmX21~Y-_BUtjwp$cqlqW( zw81>r?U}9a0R5R%wn$lVvUcbJ``c)wKDOb9lX#O%pCmN6GQb-m6o1O6r)2*wL3C^pCdItc`pMD{p-ZIZ4}d zjYxf~i#iR_R~prOEOU!E$Uj8nPwfOnf>LTBec-G=HDTU~Og>Cm4>z1mRFQR3kl7LwWE3@({Nut8Tj_- zxvdS}pLd1k3U_Ag5NlbWRMCQQqLc4J93hISQ`YG{7X}``y1*yWb~r{qmSm?FR&{&3 zuqGkTu(n%wUcSRbD8hX?Gt5eKAOh^(n(~}=l2`vt0eAjppZgEKPtO{fbU^_U-syPj zE_*hfF*pX#2(jz$2)^&_u}jpS4bS`<-6>2+yJLB_~6WjB)>%|KBag)_LH}?~8td>(DX5_{Li3^#* zF)jJx;rG3p6Ze<0Ts8)BxGQVnX+v!MyK{kG>K(rCxm+o_d^3Vsk_*od*PQI803H;3)i;?abfIi4}T~|wq zL^81V#R+e{B{Z;ABszjXxnAwx6uVgfg=kUbk@I3dcg9~H%yyTb2kks|6#cee&r0ZQ zPSI{H0i5ZfOOSnKSMBP9UHQzV4&bNi@r%7z9CgQz-yuyC$b8U%#;KB}f>PeHd9_`B zrB0Z*89+^I;08u+D`v=dpqe-<-0U1V$7@Hlqsk|_F_Rnexazk*8m~Wh{+d*z6EPLj zmTV^M9h;it6NJV|;BE{iTOsruu={egI6W^RZ-MrR6dg3yoe*!l?=+rd&2`FDvPw>` zW+wQY+BG!&5o4F+DGljF2>6O|O*=8xM@?^=ofjEs_YzE$9Iks?&#m?RX!UYNb3M(G zGP7bBkMvEmEpvodX{hwscbp`rI~L?!&I5TgRmT~EJgmw-{)F07jy8r$PVN$YjR*)_ z-B>NR`#PF;ko0{{kp~~{?M=oVXI9LvUh0y)-&XqM2+$SArqH7B*^`2P0GyFsdiFkW zXn(Tx?FoYQ$WH_-zg1)9cXcL9WQUypXZO+(O>Rdd;{1pfzoigcB(GK1PY05)LXd|M zJTvqUN`Fr6AWJHxWI9_Xl4%Zc-Z!@@lBXHV?}M9NuKoJ%TnyK1RO##t(o-z_foT{i z^4snDFMu|V6i^S>ES%4#5Pho}5lgK13r7fMyF>*}R*#gGydov0$v5=>OykIEOM0J8 z+zRwACgv_);umw?h&I#l<=(oAI$kC`@6Hsd8Onn`6$vqV*bC(?2zj<~A{sa{VQ4dy zS)CTn=R3H7?wXadPBJikBS+^jF~83YqxFA&`dLk1cKMThaY~`u#Nwp>rK||&0Yr_47@npPmTLcQ^3YLJj zzBRGqhAAe=by_c5TE7)qMP!^VBqUbKK?Xx^c2!U=$zY6QK0?mhm)&1$jE8>`t8fr* zH->Ag$Aaa@-MUl>H*8B`zQ!RT8I1nZj#8K+FwxA>!nS;C>kpXm*%_nq!*+k@(+-Jn zAn)v}`NY~FEQ#&U*E01EA0O!qFQnN3$H%P!jR$u-BK1&$J~RCZEChh@%oJ&A4FM`5 zy$tcYsONCqoK+9?{hQj|OM(Qp=L+K?hsdFH9u;z{Jxiz062I3`e324esGu|FD(fMV z3`132OAX`IOm~dFXR=fJ=DKt9PKI@!9DYJEy2j$8ut|IkjsctIQ-x-cY&4d#YbVc_m)aAJ@8!r8 z{h1v;BskyBxVq{eKrvjHcVh?qiFgg2Ej`0DJYF@wFwf6J8nZQ(TfnZ1pf^!tA_s@G zw}wB3UoS4zew3Oci@uele&^= zhEDro@+aD7@H$Q$Q;?DxxXzgfh36kUu!B6z=0|2aA_y zKGXVeoy$;}1>M2k29c`AxZ#eJo%YPVBl#_*1(sS8xUk-55>J2vBOLzj$LCTBv)@!! z7$?m*)7#v^tA6%OyT-k6NGLSaWXRny91AwQ(eG*HczEj)E(&a3_k}<7ReH-XLYL|; zFjIoWz0K}0cLFSVI;^;l@Rl(#!46LkN_V-#l#4#}!tJhc zW@}T+ktnWja9Xb?N(ZxtZA%;Cf}6CeP9IVz5DH*ATN9J8a+RddP_@3$!S zlZbvXU9W_oyG5fgTyfpPkn=VQ>lIJcq(?>}ZHF{E;Ws8(bREsxJ$7qA9kelwly6G3 zf0#N#U(jn)>x)y@WQ98gp9);pxtd9qkciCa*O_{@rLI>V-^F#1;H>d<8SkHbNVMd_ z?QsPZcEw}u{J4*JrH{{izMpgOG@$2H=f%L3%ejim;RyOcW{T*l)N8xrC*h5)OS8#h@I~IB#J`-rO86$8=fzz;fQIa&+Is6seP(Y^>)> zj*uUnM3RWtf>)K>W$OlsLckTy*tp}UbQHXFBm%W3z{GY$h1Z^o{7{{ps~lkLMLyrn>r@;i?oXkgmykyU(YVJdG9!uN*S1nm&t{WMFPKGvQ4cji#oW{2S+1EU8!jC zP!nbsL`J+Qd&>DfMBWGGhJNobHVMBdJamW22%_tUX<3k)JGyC5FI3S~l>w$|(UsQ^ zQSB6CfS;8;g`v<|HvYD|P2=>D0&D*9^dAQv87#rP{hNPvv64}V{Ju}XE0>(9-{%BO zeHP&F1DsqL1ycuQS6n6)DF&t2>4ptsdSt(l&7MY{>qYjq_2O$17y5N1CEWFPvLron z*k_C3sZgEjfl3jZ(1xE;bJ|jL&<t-y544SjzzWpu(3S5lGu{4dw2&$4 z(RvoO(OPGgt%+dFEI!~`5u($7>D`~evTYdYYz6gC3}~9C1=;@P6oPuNgQ7HS(*R z>iYV$(lX?iZNB?`YxN}+xXQ)+Jp;hw#xwH}I^+ZTbozSXr8sT~e=}%P<8srOc#3~R z)-5Ou49j(%@_YYeb&C{~*K(%F-fGy%f@W%fJx*_6`t7qH>lv_ZgpK;z>PNcLXkY71 z641P+{ey6lbLu0neRhJ`r$^dr30AdU;?s#>7M#atFgbUNx6fnxkN+Q8{a-d(9E|0G zQtqEDEy&Aff1L4rk(AnaUa!0tlPLmTyd%z&` zs_>Zk)5IeKS2pP_&J$(hVN(=cls+J z#d_eZ1eeXqSZ%&3Bl2PzZ)IcP$`0b)`O;|dxXzM?K%{HAKHf>`kc^K7Oz8a?>Y@$s zy_OxbnV0pra7a7LX5e(SHd>y5yZ+e(S&d0BqV3{N(GK%1s+k)LE$_*OLt zzv1wv)cg>x_)>2kdn98|n!O7^rGh&4tmz59M$M{QVQzcnZVZ!K>2xL~7Ctg?n zq2D6NgKtFZ4W>Ne_|OtS<8n_titp0$D2aM(m-6ZC$@qUqBo38PpvUwk6-(M@SN(HJ92ELsd|FXdmxofH3hSxl%A8I3-j@H}>W0*$AF-zH(BC@1c%G(A$UYSH&|l_3<|Rq>SZiKsMTG z-jF6BaKyXfYpUK|pD(EmbXeoYX{r`J;I|mUudDQ!;)Y+#HG;z7B@=OffBhwJxuw zXSCC$+lQnC2xgX>4^T^Fj%&h_+UQRR^^Q8@~*dS~uoJW(_9M ze$tbFBwTX;6(_z)Q7f3-NMg6A>VhDM58H_Z+{;>QzZn&X9?9!XX7myDM-v59OML>iVkSq1o{B6+aJV)kCMJA0gl2xJ zsEe7}0+f{e-CL~=E$j;U_#?B{bYqHCF$5kR_Z7m1K=P4|_3?GR2lBTTmFV2jU@ z)#(yp50_Kvl}XtXziICghuAahV~GX|r76PioHTU)r3Bun>U>p$*B>cP4xs`eRAE4f z!fbX#;tJfP^}Q@PXf?|xNp3gTHS2!I0NC(}OS^mxE>YI(?o3g-7y5gTV=&$u%niBp z(a00_&N{7=$f(SBOp=wOO)ebkd848z+*DvtFF?7%*ss~j0Hx!Ce+#()$`zq2B1%vk zXM3U4)&i_1PeW*fpw&{_?te52Ib_$Wd}U^AbmPmT8x*b1HzPfesu{9(%TsJir`THX zYd0j6CTGViwjydZ#1|55K;3O)u9+0Y=rhepV7cJ zM&BF*cAfbMBXcfi;8ovHVj4$Q{OmrPn+akc&gKxn&y%xOUt})aOQrlhGBTmQj=!lg zp+QuV$D5j@y(erTU;G5M2_J#T1-zFdFfol$rh2FCFq<*GvR4RCvmTALmnAe(d&3x! z$;Z;(PNor;f?-M6gbg1p@c7Q)=FFl{#CEDA^Z>P?}e|fodb)8;hSj=*w$EuIhsp`(}O|ohl zu~b>ercT5IC@RXq2sYg*D1CREI>b{nv40nt^!!xZ#btR?fm;y5?z^E|mBt+k0vL?l zlXzusZn6^DbYzH-CdckS6|5%yRR>A231tw_@eDeU({Yyk#YD6@VM)*thgQal*LE1qrYyJTD)xC zcZ2V{J;JQWkG1ZeU}93{ri-q~9p`|$_p=7qtDAzo)zz`aiwqa_WYyYXzDVEu%p7Ms zQLfqzg!|W>(5KBVz;FJOZzbtaNhptX@%~|| zYHTQ(ftba$VyRGXV+Jqo!Mms4kUx!k#kDl$9*V|FnUX#|PN>zEoK)vH%7DPr<^W)l z-VKk2r(#=+*7sr$el(*Uo}^Z3irK@QscNXX1)S0cTfWO`e)L_SXdCxSGi z7W5f&SjSozvE_Z?OJa)>^nXZw-^WuR;rp)jz*CHPj}3zQ;TSrBot z_=?4Jrkb-h(I!t*b`qa3Nu{aAOsrsrBA5-%;>(iowMFI?e@x=$fr~|^7zTZ}vcdDf zOE<|KA#Wy4&8jo??xP65e099`+&kiq%7NL(2>+f&B)xQ!pk9fuvb@P@u$#p)bU3DQUYg;O$$ zB{L!8b*1veFjPk88sT*H-g;T+)w-S-fF1%`Wc{$Mcr9Q3eqH;Jg&IhkX`P2X$*&iZXN7@PBNq4IjQHT-ls_k1}HDrrveZwC{ zUv1`ddYp!9?dupvo$;dBkez?vz1F?{HsbIZX3rRuSm}S_Jz4wd;1*Z zYhm){LssF0T$tUpsel|pZ2i9o-i`>A144^yE~syEvOhav-1JRgFHw<}=9P9lwutz% zQfnc2dFL=h+duY5j~YGu-AxkVtP`0dKY`u+%y}U-vCau&Is1dy&_mw)J1&U2D6X

    <&~w_1V z+IIG0F(fA$hap<>DrJ_!I%>_SgjJCeN)l-tOkHAub{bpC7M2xM2aa|mo-Vf~bPmn% z*t2|!^!tqVMriIonZ!OvH#)Z&_4U2RW%kib^rFN*{(ylF|#{E30p#(-cb__q}@;pEz5 zq^9@y{8%n4q0a!Ty59r!WVL)Th`B%7zPe)nqQ#Q!uu0$qQ&mp0z-)Rllsi4+_q zR?wN8WW(@azKf=i+Dspb*8T{MMLY>mQ^Nel@Ew*>(5ImR42L5}bRFF*K2@fzS~K%g zu~ec43eJJEe}eufdN`SpAqT3%NwSL;j~Twyz;y)UPVp46;P~?BErK4}Oxy3CnLZ`F zF<>ykoQv!3*1dkj&qk9qMr*Zz)$|jC+aR*L+SsPQ`j1{;3TH=ofPFg^5fsr_l0BB# z&ZE6X4c~;Q(F7T(+3Q?7vMnp7yk^N{KW3$++QcH!(AB*^j_B^g@-wXJuYQj^howfO zwSwFZ_0U~3Z=!_1{EBZfFyjy*<@Z{pU1<#H?s$L!rTUEJ%yK&4hLamNDEV4{(pfy) zHy5SUU~G%{f-z?8bB5KF^(RkK!SA1@wbIE=XwV20<$&6 z9EWclG_6JiYT}VV%}RLg!L%olc$I<^k&1pY3dST&Z_ac4OdL4C8mFUnf%~3NZ^(qQ z@+cE|W#i#ZW!A$fXA@ynF~AucVL!&W!j89E_>JD8QhgM~r{60#cMz4`e_2Cru)8F# zAakMK)BsKW3XyjC|D;}_m)?F)FhW>cmOwIw#+a}xjVf^m?(&w3lrblsHAmB`e5t)0 zwOcC@Z{I3^=a5F=YHrs1WyF!|Vx(Y|B4~?67%_S|OZS!jUhol{K%=5y)a^5oWDYnQ zn7QnANjoAg->`}lWO=;Q`euVKT5YN;#mFh)YIR)fV)40S!awZi+hx#R9!(!1decW7cS^5(E;-VJ>-n`n3g$8XfkV!+z{ z$~Z=Y=L-J5PuV3Z`l9%wi$vM|LSP)$dTBJ*{GrdgzF7hQ;;JbZSTL zejKkH2}WRdRmR@gk*e!6yYH2^DN-z%kvZ)x!3K>ybkR0NuRS;3wCkROi3Tw++mP{P z8+{N47F}>O_LN&c&-U;(Djd=;5BJu!f~Y{9syv4_WFu@KmyimGcR)@sc*k5%I+22N z?W@4Z*Yd_aT=#~PCmfB^s#UF64L+}HPtVy3uNBNz%f;Sdx8-xH${4*I{x5)Ho!0$b z9$$j-_rak)et@a{?G7|kiXUudhb0dLVlLw2@&XBk_{dPZ&nf8=wW%3k-%;toWeG{`t~rk3;#+#M4p*JUnX>Qi)nUMUNAik3 zfA;u%7Eea(MH2txxa{P0W@czYt23S?{fb!sM6y`xeoSLiRKO^{<@zhGpx2+$tZEbM zVX`I?o58Z_>D8=>QEuV9UXI`k!TJbJ5}~14ZkR;RivO}v8S#%bABTo`cU>q@1n+qX zHhh9e#*j*AOW?e^Lz497j!N3JUJlG2UaN6-Q@aCit(0kzTa)ioeEv$3ync92!FfED z!VcxG#1i4n((%0_loftq=x%i)x2=4v@HE4in7*%dKJ(P~*uy8=`xr*Vn@||U@=@T% zKvs!H$*72P3k_GsxfI3If)u&L{e$_cjs@o9G}d8Y_d`wG`kL!YxZKTeMejITrdEh? zd1JanU`|sFDfwD|q&RbA{#OcWX<11(SjRGqqp|4)nM?)m!vQhWs(NFLH;eK3pdqcp z(<9zh__H~4))p@`RD7AzYJ!yyRMfk3KV*X+9;RX4cg>Q>f5b|V$gQyu5xH>Ah2hk3 zk$*{d_VIXM26Np_jk}bUGM(#OQ>;S6Md2m1bU-U= zo&e<5u!@nzToAUwII5CEs3a9CGyQiJ6(nHgdV`BwVlxohR^5;^?=>;CWL?lc88T1Z zpGp2LxEs>#+e7{eZP`mzIC4PFIugfV&v?8}ygaQn>I(&RIZ>dcmnAv#1oKR>nQkP@ z;qnF@e)9|HH41ZbRnlCiFgl7TxKTPdq`u$tjUnRw?yCMloW`xz5+se!@3{myf`?>Q zHsItG*RlIA?!63mv&b%~O{_FnN@87g;$Ni_KJxq$VfIDLfe|+@MqJ#~`5$wJFi!wj);b|NAn4!1;ZP8YGh{jnrZU+&jE*i)kwD1|I25&W)jyM4Ea10qweAa&Vu4O+Db zhKJ6U(^fY-ag`bdV(JB+O3NdErt{!9=~g^zI5cXmE5TU{QQI3NFL4*l>C(=>K4eS8 z2q(r27!>6%8Yf_Na3qFlYwqp`rsgGfEl3<^iUCiyLzW8*3M!HmE`D?bHzn}P4*TEN z)oF-9zkxj`eU^e6ksv*Urxh7##mT;Xf}xwo$h0g}ag#Cos@6BYkE=nylRfnV1tpEmLk4oXxNgF(|0G5!WSz zaq9?5LyjdJ4C3W>yzseq*o-~j-8K;Dxy1;8iy#`gMR|*QzR;I)e`dX_)EXVMrV%~R z2PwW^er}d`+uf2>ti4s`o#&Kyc6Od-fNYbXzn{bq8XS?xB&8w);#0w3B6E3|8=GJg z%uqHXO&*wj*l$h*fZzhKH0 zyAdw>sefZlP!n-G>g;;Moa@xWw)D?A)Q=r7gJOUF7t1w1W#)ho50F%r-o%_gM9s|z zJy{|Qk4k~3Qfy8~P6pFBqWP=Zqs)Z?0RU5i%?+Xm|UsFe6URTC~c|=>_`B z8R`#@D@r=*0=BlV)41pps(NR$1k&ZjONg>d#nzeRO^T^@xsJJtLn7@LEBpC&BqSuB zcPz>&cTI@F@}B6X@_*Z3a3x1|>~FZ@9CrR&O|<$-%&M8}IR5$6 z@#Qm*LVQZbXjy|dJ*b{1-aC#-l0GcQgGoa^TZB|{xq~X5oOj{RC88uU(e^iW!I&1% z<3-9$lPl7`0A z+(JmZ0qRxHxyhN{$dgLtO%vAa@g;C&PwKAo2Ie`^b2?ZIjes^Owxzn7rj8Om-tK&F zFJiJ39-9QinBo$G_;8Ca7&32wAL_bQGv9b~(0j!Uwk-Wy7 zgf!MYjhHQ|oA+T7DmecR4U2!7DmA;{XE2;VNyD-eGehoK)RkB%Gf~JEl2`D>=5HqK zc|E=e?;sSFA}u7+7uEibrA33{Bv6fQvqy_YDfhPfXf zqiR*|BRZwb34KH;iO4z&gN3NJ8{EH8u{z$M=J$0>!F^zicJX9i7?dl@tf}pbn5Fm? zWLO{tcl~!mcOrex`q-1GC0xe(t`O}Z%)7=}RV6M*UaJ}JeV8^RIL*A2xd)XsU2{`N zW>#?*jzlpimq0?2VIJ(#;7kCAm+~#HC_q$F@yBX06^Acv7qRx5cK{snWsl0Lq^u1d z?~%uxI}&iZpZ0jPZVD!rd~Na*w-WY>RV3}`BvthvSvo*`B6dW?vWf*(1%OAiTqx?- zU(%QLGiT_+o&=3RUI)sn52o=j3RLe_!7YE99#C=drIRWSi4?#TA_cQETJZyAmar5d zC_NgB@>;fB13=D(lg`U1+)>&Kb?x;~7MVhn8|5s=q?bRYEAnJPL17Ko!Ittov*?{= z6FlGR7g=^hI#|O|Fe*2`DXP$6k>{Anw2NhNy3@#+oG)osAbE&nyh>r4ACqdV=7oZRs3d-`hhs4y0#`UEHy(vX&^~;r6Uxb1RR?A zy)by> zNGKrYQjDxZo<;nRx!n%`1|5ar`~Rb{Z`vKyYgGJ8XBy~Zy8i5*_rJ3G)Pn7LW-z6; zL>D+$gkktQjbX5=lQ&s*G6Uf|C85lFp;79(HG~hZ>ZLLYh+dU+rQC~w*F^YNsK&hl zQ8K?pr9au8W{uvL|4dUngkd-JY3N!yDHtfO`6&{cAFNC%V-lRrR`&gYV&^!bqy@08 zu*|*y7W>|oxZd>1fh4N#TjizpxxsNnyA|2W2frfRS!kGcp)~O$u%`1yF$3P~st=3A zVf^=B;0sV2X%F-_fu)yXKrTfQ2v7y*6xD)s^BK$Yd6Flg`9-{9quWNwl&|R}2Y24D z%GzNB@t|YcBbsXs{BVpSYdR0+8LhRZ4!hQ|=o`_tMDXD$ao zwmoU+mn>NTbW1^RHiJCukI@jsZeihMHsRrkWXUQPSO_$i3eNQR?*8+yovL~cDg!~( zDjnnFptsbHzo^#zSuQ3eoo15DN+Ex1S5}30Fu#_^GK`+ro${6OPafq1IyJMGhIbck2stwBP`9vN zl6^1!a}20@%(kBW&}X^2tDF&xaQL=Uo>P+<9nozsEOO6&_+Nz)Z4MCDh<%!J>yokPu{Mdcv2c2{QW}cJ<=+03_virRD?QX#l`dg z@3JgCF_?=!Ui;xrBcR4iuoxHT31&B-X6PgDxpcVG`(v=kk@~a9%CN0Ua%6}^d0}n& zYTKsN5uae{o0%Ib+VBfr7WaFFb!(gXd#wOUmwE|5PR>8pk{eBHC?zE&Athz-XtpG| z`+bpulQa3{#T&?0M)>AT_CNpMoQZa5a>hTie{*IwzZ?C~xhTzWwQWy6t5L#p|C=A_ zQ1;P{<74dG=z>K_Nu~eVF03@ba*%n5{kC1uAPIh%^hJG#+Pn5%In6Wd=Eah)0$Hm~ z5BVJ+B}~YbFo2Ew7rrl|2mV$G7-5X6_H>cb!V=0@`Tyi#whc|DV(GXbTz{$tx@S znmAGzwU`+C;?ot{p%4Q&Jv}Y#=*Vho<12b=iz@|X>ze-~cAj#yH~h|Vyq!CU_%ch& zt0_-zKHOah%70J(lDlLdAUNsdue06UGcDS4WTK$v960hx7==kse%^#gSgcVfgY4?V z;iTJT>ZQg(!?d!B$bLHFOr{)SI3&1Bfercm_YAg}x!8X>61-*k?-}okd%wKQ+$g+K zgvXE1V5Q3&X4LegAS*?uHi$+qEn*!LB~ez+xSp0$!iln;(ijrL!rpRifarrKE{f)> z8I{^Mz}ju%{m(J$g#6dq6q?*fSi>Xfdy=HUH#m|-n8`LO5}1kkb$mM95WRd zmjJCs_9+rmOcP6LMt#MHP1ngi0ORDC$y;LB_I&LZ3)zuC5u9J{xPI8JptCHh=SZ}n znPCZ~Lft=zZqJ%6*pG}DZN}DG^utKykN3sI#N6856%`Zvys@$I`AfJbD~IX>mb-o^ zrknE8Ewr6}H(pRs@axyFj|Q_MmhffWZ?j+ps1%k7zYy2=+ z44Xd;Z=%X%Dp#)&EchBZ61nvsz`Mg6E<&D^jui&w$-IKLxN%WJMILK@-lgH5cRGEY zl|XFmR8JKPM@3&v)W(NhP~np)HyH~*{fJOgWVFtGUA6MiR6pv=+S*lQ6t#ntfUhYU zNoe#$6O3i~C|&uVqOQE0K_S7njq{xzhZ!vm1r6Ti~g&-A~<8|MOya8HPWlf69s!9%c<44rFD0 z{`>F!Mq2EIJhv#rRANAGZU@xPyaM6?X?L72he0{OjT^;q=KvPm@ zhZb6n8&1L+?4iN@bNa<23UOvSzCP6DmQ|OVKP5*c)7{57yiQ0zmnncuR5AethyKd_OoxG1s*PSmlAX>~Ek%YU^)7S~6Q<~U zwzb#t_~3FLz*l7n1Z)LZBWt)Cl}R5YHVd0-c*djZU}Y_JB!J6Z9rv8^d1>x1_c82h z+Y3`xZcG%g=T#PeNLrcUtP_oMaD*4shGzsAd%x^VYUKh4Ow3Ksa(#!5Cw+R~Za&W3 z`Ap2XZGtzc+N{<8#Ml7GVL?gbuTJHlGTM=?YmMBU#@l6)zqj#CPZt8Wd-dLRU|O>Y zLgV+0dykzXl#!zvI+Q^i)Z6F3V+Op5jn&O4ZrlKGAGtYVEf4{K*?6_q8NwhtBG8q{ zDZ2^2043D6pU|#6^7(nZ04fC2#0{m9)NYZSof~IYmn8~Xs*4vq6{@rck2@coSHxQk zke_vaK|VIRD8<)hH81Yh9Hv~b^GbL#!6%o;6>@!2X`x*li%`YuBNETiwf{Uyiu$zsFvgeiuI zzqlnaUtUXVyPMR6>QBuxAfFLn$Yy+JPw~U7XJ$cUG$r=YTNa+`@zKQWKv^?GLi?Dk z4kA-(aa>%?l3L76uxsZRms!%!W;BL4h$u_$Fh^-BM?4wS{}U*e#Q0ODldjkP_=Zxh zJ>m;Os{Mi9BHO}dc1jXrglB_0<%G#d5-NRA4P#YlK4tr_wHcVKu3AJQ!F1NXP;`D* z?8OP(h)iPO(N}&xLL{hxX7QTZmOvdo-*qzW6qT2-6uJ&8itKjl`*}l}IQe;|_r;7a2Ji$@zAWmE2b2ShHyX+iN!TJDpjida zW$SqA@G-B;MFIC&%?|KR(@xKmdfqg&$R?lpnsm}PWnzisB`A2e&jAPAOG;DbKEUGf z2A3}|x^#D6;to0LzFxB;iPtt(8;ubwcPnVVL*!5C95TyfGaSo)xq)6$?5mN|d4^pU z@QU*%+7q}4??wW_tILyu(+A(X3w~+iYMc#yTklJJf{tnYB6hF;GNsCqAT@-2)EOwfA2|NOWm#i|$h+=um6D=uR@MU091 zOM1e2Ze+O_n`~;u+@=gX%&&MAXizCmAei7_EQyY_!?XrcC!qVa_g>W<=%d=ENbsl3 zynfooacF3$F}6aYpigj^B=#J;?WxdrhF0$+=lpzBPJ0=@(5Y!=jyzSJaIXM0S3CP_ zZk#!~WEAkJf_Lo})O|f1sDU=4EpA&t)LGr`{!^D7*l25;)+yf7q^`}kcdPIs#&bUS z{dpN#gd(C*$yG4(W@oWkUSYUyLDKlh;?5fa(~fdb_f##sJ)z?_L38x%zMDSe;dAS- z5@_bQ80*_xfZ`Jxp1(Gp#ucAdV-ZEX6Byc_2-(fO9)-eeSsD z-1U&RjAX63=KSpwv`O)o4lZoTAM3*|220k=mR90fyM9jD;ZJU;0&!i!2*gZKelQ$RegYE*2*8JYhqKF##h9Iq?DLijpXym3y z|K{2BdTsc$m}2y6$tWX}2E8b{*GFCCD$1`F-|L3ULvMc+!L4y#jQu}8zLnl!ev zxIQ8cjPTr@%LBUGzQoj%CAf%(T-LYJ+@lEYy0Mx)g@-$*#b0&5e}iYfKShchN8VE` zh^p^9C$blZ9A53h0kcm2NeELvuAN-uJ=p51zG{ICFj>*l2`Q2;RfDAYd0>&>Lh=d-rcAmI0ni zbwJiZBLYIv85tQ|391P-Dck!bBqRq%M^x&w-3JQ4&YG@43Hfu853|4Z#v^lYnR_@+H4TIs4AfyJz?W zrHIw+HNPtoVBdJHP)mP5&Ko1W;ZsU6%%I{#xltY5)ohg!3TcjY_T@~ zpX1_R`rR#w2we*+KOmKyP#J)O-pa|O@B|RmZA#pOvN-LX8wvN5rgtY6Tg+Gj*WS`A zzh`2RY*BhY)tM3TS&K|KO+nR$Ezn)p9pYnyeN<4=-1JWBK)sM!@&ebrQNQv=KTbNH zQcd#Ha2f+ntF)3U{~2sLEF1;k=xvb}+9(|jwCj{75>Gb+5ohUV73YdcX>{UC?FhI$ zPKa2DdfhbgZr-Sv*#*#eROpORv^av?f9PuIY06{>{-Y(sme$4*5e4E1JQg$E0n&w~ zYpB-nTY7WH*2op)kdjHO=E(p)(yQJs^Q?!)Z7xd2B90AcmvTYjSvBxrZm1zZTA^ehk1_N4WHuY5TPyC`uir5=G0P9uRkbk0Z?V>O9*hAvRzX z=V4)wGv?g_n@xZPL!N(f-}h=QjfZ)v<3}a)tFRj-SUN0$m^;FLwv^GZM3IyKlhK59 zLPh&=b$bi!@tBy`A(aYhHJTeYH~4)u zaGYU;wPNVgHF0%5LbAzQJl~t3%t$?e{s?6pHdD0PR)8z1Qshb#H6v1aQVwZgk~e(Kq=Xu1ZQ2v??@UtSnp$sd&b{U=~2Uhvqnp}6xT8$5W7W_lNscHYNo_=5pmqpq$l#`I0RrY1x_88X6L!?0FYFQ>4srKA*V0U4rBWQfFJ;N%^1nG?kLqQo-uUM6Aq7seSop_!Lo>OqS_*}h@vGIq{Xj1b zvzWEGiaW#F_ct#6rmckgpB|PFKeS~8LE6)__m)r$>(cjTKIXNYOq?MyPfVU-uLR$i z(rc`av@k@N-slQaB7xKc5F;x-Lf@PXU>+{C9wQz=rYW1(j%YsZO(2;gXJCXUIi=0d&<3A^7-Tsck=wDV&3|vudQ~ zfmlM|27Fv`-U;!5todC33B|m+&VK=CW)hVQsG*2FK)OTztNaangV1KWYxHWVifM3U z_|mi9QQx~&HIpMG8ke5S`$SLX_i(kX{l?l_;1AL}i{|z6-ZP7WWXo&>K8=N<6s5$W zOApf{QgKQc`$8V($j_%>u3tx*a_h}T6teW!O3<{2zt}c7So{62)XTv_uJn}m#b%@e zJJ8R;UTEHM)r8^WUH3Y5+W`}|{?4eE+%=UG6PO4ohAnW;jyk7~W+P!oYLGV)g4AQu2m5fXq4XxR!(LCkko zWfnD1cfc58B<~-ci7hWZkR6-A*pD3^YYF{B9pr6Inbn+$>A`YirH2zY#)zoou`UlW zppCMXXWackZTpqv-}ck)N;F=PRvFx$u~J`=umU{r7%V88KsG#<#hoP|+a zE)A!IpcWu_+F*XBvQQxTGF05!5OsUjvuvWGdPMP~>xw%s=-fFd=o!=3-Wb7n!X+W_ zkp>fXf#K5eAY0uD3BI2bUSV)-uwWMNHO&i%StH%p#>5mG(qc}~nx2tTx^qbvy+(Dx zIdkpW)v12i+;$puN#as@5V9X%8qEoQ5QKX{ziD3gf`8|diV;08lb4(<;3*?uKfy4~ zvBvL0VSObi`Y~aky=H?x)8lT)9q0x_ZOr@UXPC zDR(txFwE_WhJyzu*b-Cw-GJ5JL2K{>y@6Oid?N=@%}Ejx^<&zUYHk(zWWBY)d-vsR6DNj~Wt1Hg`N0qnMKIKFeLY($ zQZ;HdsQEwlZjzc;hZY?abCkYP@A1_N5G}6tQFU*USgj=oJvW0= z;hKPJdGb@&5fbI;f#ry^E(g;HWrMcbRBfFym?zyloVb{$l}nLrBvv)DpaEQjh-!Bo zZ$8#Bj0Q=!#7FCA@5p<&LqLfg75s5cgdS2vENsoAfE`3MCJ`n_%Q@zs#LstAcd$u| zcF9xN6m!hh4psXK1 zlk&aV7xRi};F&zF!?3ZYsJ51mhk z$j|j9Swk&;zD{KR24sVyZ%xR;ru-cpYg2cgGqcVE1=E&XQI+0$hjae8JL_=ZH8V!; zs}!Ws>3L-k<>IOcc7}pV*?TxBxgtJ&p6$_zDvxbj3B|9bG>Ilc?)K|K40MW!qos9w z)Be|>F|~B=Anl^+zq0=x<%MuPn5iKUUNBkiEtyaYe*UEo7ws=4Y#mK$yGCyVCJ)Bp ziDE&ISHLf;we15q$GMXe`0Yc^)ny%2iMViIEt6@5-?z=~&$a*X{E)?9+mMbPe=R0O zgl${c@CUDaP%UYF@k8J=@sFUcgoNmYi`>yNY)aA(r*-jUqeFDfEtyxn+~5he9vmP! z(6V0dc~3S5-a13R7B%#qJ;?ZZ&%DpYIi)HE!@isI2cClKtb(ra*aJ*t|J2e*LPa^E zG~LRF$r@}qvL9Kz$pvKWods<%$oD)IC?5}-Jr*j}3w#kX0{&gG7fLJR7Zou6lXj6E ziaWHd!9p8eMNS>4yp=v}sFXC*JmBa!D1#vqlTX4|iimJk5> zA2^)%aXYZ2?6K}W4r2>A^EsI$E0f_Ob?S_*_w>`Nn2j`Y(#Sqp*gF)o6G8`B_dpBd zbU&@6&dG-}hl`>we59DK`b%%=-a9cAMLy#49>LY&PUH-YNk!MFPNuK3#9irdw`5Gd z4xErGSZujje13Crg9$K+YP&!9AQC3fdE=pI6+f>Gy)Q>Yp4&V)l-*7n3d_m>_NDc? zH7w8F3H^O9Q9o54!|w|=*OsMy0 ztyZF!ka$Hy*UuPDN4Wi@E2)w_Dpifx;CZO&()D12gM)*Y>|2L`9pr@+O@o3f*%;_Y z+!&(r;=b5zM!%4(MSze#Oh41tM0p~J=&_n-Vnk1GJrpRg8v*l({t}|{Z0%Du?yVZt zLa>@f+QdwO;;`)lPa%`~S(@mcVHQzDVw7FLE06#EUmCqu!de zOHMi^e+->}uty0+Yu(eII=%TUg@-^Kv1QV_7h9#oMb>^XXzeQOliP@Ej^5?+;kN=p z*!G`|m(o?^*DW(M^Z7b&UhDlQAjac)dT4C*_DXsHf$WPK+S)Q|YKc@N>@@#%DS052 zH}}~Y!cL$Rua0Wp+S+=V)i5wngcs0*3FJkEg|9<qZt?RtN5AD)YTOsJ@CQxqg%(Q~^?+7DeD+VFs&_&tBqC_+L*gEp_#zKH*iYs$v^ zL6cDxXbBO}$4B?q>F_0pE+zWx%mx0-L&L)WVc{J3NXNm!VItu&rC0ro2heVu#tF|j zZ)3Ut$o4xC^z&m{hM@M{4`ZWcBPXWCdl>5K7 zE>|xhcn%(dX{Duf9UUD}@$uSx4~em{T5nBVU2C@Xx&a3W|Kr@^M`ifu=;(-nf#GXa zm5O~Dsa+Q7fk#z!b!kV3kv_`54Tir^vcK2F8^-mW2(~m{tql!94DL=r4(#4gVxn2rb@mi#5Pi0j;+4{y}DY z^;uX(u^iNm!g~~+PQa{gg!3989o4=<*Pi3#&3}A$*1r8B=woB~LFonO{bAsjc5dKq zONZQA*Dj^ApqPlw0m24$mQ2x9B{)vYdv!2iIL@s{5 ziTRcy>g&;C?l-h9_%QF}@833KnepYzRn~Ze)_+rMI1x7_#lpEa3|Zu6N^0cM^Qsxo z%VWHK#Rc9;qzq8k-;>4|4bu6a9Dc?w+-u>kx2L z1V(Q)z%#Rd<2U>x|DPpl{>QB_GLN+D!=1ci4}08Jtjk9G*_Ml5R0Vl?^|Q47l8clD zE4B3l!va=c>)axgN#&KH47Ss3m;t1|JmFuC@!I6 zR{ZFHw@t=8Ia*Xu5W>F^pmq2ob$etmnRKdwO{>8b%Lqyr5q_pN zRR2DhLZ)v8_tKJ-yOdn_i*DUpOF_VegSGMD(sll&UEJQ1qdEiPYe3LFpr6LksxX*UXb1o-#6N!k{mzq>TMwe3F!;7u7q74%R~pK zrJyM`%L&In!3lU06PqU43DtY$kY?nDHO2QqWHU?)AGn3rK_P^uCKEj|ItaN`k}y<$ zD1QsNP6VRA{V6$tq#ly$X52{Us9rl`Vni1(0JXFhr!V=Vd8zGNtQK~+O2rncd3 z)}SL?ci~*>NZK#-s!{-tJMElex_DZ^e$;e)MJY!JsXN6R;I|8j?z!mDb3Kz z6TI~sMs807mIXkJ@HPgxM{@tOOI~u~569hTCYRBHb#?|SE|kJ)gzEJ@G1R*Pm*4CJQZ&q`7ZwJmi{yy;*>e5~%`My> zyijWWR6c9NAw~-}E3k-{9N;_g&0at?R-PDEvDn`dzxXXIEZ7lD zXt?sGHNb#idEUq*_-s<-x_6Ytpe^@vn>m#GR}zuH&-Ct~oZa2ij+a3~1~Lp9Cc&8Z zrqq&Wn?y&YMOW_~9iAU%ya=arUf5h~mKD!_%ym4DFtZpmC1$^RlN`M%;9;`onAp`{ z@P$b+^2W+Ko_b#7=O!=vHMBwP>V`Si&-Fo3%4 zJ_G+_d*M3*cIT=;Lyo~a(S#E0EJkJH}NS{vQmyyyPm z!TvG?ruZgs3yzvgR1yzy6i>< z2W8O*dr(_4Zl(>I7XEhlT2}uF+^6I6@{|(rbcU*c%u(PT;47A^Q#2qrGh7XspP~Ta zZ@fHj2b_MFmW}yw(UaicTYXOu{L;AEK+@{n=vVIC2i%PunhSVZ@0Bi<$2D3zxN{g)7qY3Ig#9aJDsE&dTg*B2y4ITz77n! zH4)EvxtJ7r8Z?xjn!AL>oc{J+AwHu3Y<>}bSaEc{m`4?-ZUT{xE}Rul`_S=kK*(X| zn=6?fvub|(hwyRXFJ-wvY_D7?0bZREK9;Rc>jxg`)t>9o4cpxqT9It8)N|Oq3KL=_ z+HG^K?KsBr8(WVRYPE~@NOns*2u}JbiySGLilzYzOjZpukLl10CSD7$VhC06Xu;na-~orj8V{LX-`(~aPX@Ww=#h_JUBxHa zjO0olQ!=S7;?R&dB?1n>YMch7MkZ#~hW_DmY!<(0PVu7rm#wYnyW6tnY6S)xQUCMW z5><8svRz@lU}d%6jl^R)If|dO5(VEUFrRlNPf0zMli{2#5X)x^CL#}WhUM_K3^b(w z;h-~WPl|@I1=QDPQSgR_>rPMscv8de@yuOW#7OAZ63iSU}IT>n3b(jhj;n zBuJ^f5!rIxBDrK)#L@_bL@e}~Pkwvi*Lx+p0qqbn*0^${H(km`BeNjueZRk3;x#L9 zgNr9~2f@U+#2Hu;R!&sgpP$QXoPMQx^KRUCuMm^ENV6}a+LkZ;o20_~Hdo+^q|*=Nt+uK`~a)YNJ1z%QTR&+Po>Pg^UWC31@9(Bg{R_r+<_Q{}93>uv8 zo5qjT_r|L3IF>l;1Oc{FUUMJ=@f-RnCv#do0?9);bn|WsoBudAZV?@nw2wy2TlG5e zZP_^%7*a-c*XStx<8KWs(BYgs^+s-RT6BU-OPfEoA=V0ZdjDTb!GMB?*EfsEuQss? zhv9y4OSIAnSWH)IADjCURH7IkP~F!7LBhLU0O=c9+>mMj(~nB4;T{L7z15zQOKm5E z8-!7vD)Y5c-b%gJJe784x17e76P=T*(>Y8)YLdDJoB5A98%PvshLj(zVVjgmic*b0 z*wcw7xuQ?>F<*{b#%KcI0mY?*DeMdk@w+|T_d5>VWeGl4F)=b30-vv`whc#X)frav zRp~M00XOl2elYGKhkXJrOA`&1=&a6&UbWTsu|>w*-ally=~WDgXZFo|RV=bVf3I7o zVKQx+;hYf*wj|K5V9fIU!3wHFh8Va%B<|NA)8QU7Seo@F?!|wV$EV{gf zXM0(RR`WRSkaQB)Fb;h-=kMOU>^S0C$ml3Paj>L68^uNhEgMV3 zjSg8I$pE7-ea!IpAed5Sp06#-lxdcW`{-GsQ{z|)U!!Ywfu;56BH37b>fiy0o|%oT z!Ifh=nwVxlZj(8WSMPO{ygV&8b9knk_?VbPzisgsFjh>!GgVNpQ9XAN(iGa%{A%p@ z>0skZ*Wh?cXqeu+{3HRK+4?B-+di6J4OuTf=zAFSJRip3D_`XJUWuN z`v~de^mJtpCl*G_hG+~jJR6_F=*;2xW}{y>jFt*0m{c4zaY^?yzruy>j~7ysh~$)& zafZwFw}`m`(YQl-JP|iUz#gd`;7!eixZj+_B_IddZH;@`Ky^IY)vfeS6PxE zTW(k;!Yi6@P7yFt*-Tk^jtJHmpne?mY^HCso z|8WYhZXdS14-rkX?N|+-&1CPz%&R?fT67=hb_q6Qz7BDGtp3mDg9iW2d%Z%oCUNzF z`NF7pO42_SU(pUMXGv5dVaY5qh^wydORTb251UH~N(=cXlJ%w{%TZuN%KcU_lC%qK z{FWjQ_prlzE&D(_E+{h=htjW6P;4YF^IHM0SxDrL$ve@2CCM8UkBJ{<*9nV-mCfvESy|huoZ7-yY%FOhusv#_|R| zA93p9{~Z&-uYHvK?*HdBs`2m<-rUuf#^@OVd=&h_9$B4cOuGY!l<8DT0TVrn6gl2% zNn}^e=I$Xpf9uTWBRMS7I=!N}0&~4RA?C}F8nY!N&f}`=>`tw{8>=A_#q$9>+XnQg zm!bqHQ>EBzDuk|Ypo|D&`*5M>M@g}-x7>y84wqvV$+wG`KX2aODU%YZklHe`{!L?` znAfe{A^?cVQ_It&y^*)UcNE5oZv{WPLVoS(oFIsMR+~Q>kd!+fNDz{RP0vdKLG&a= zln5Hr!?a4NURTlw?be@Of)U~?KkO!uRNeA^)Qv6rkr46ACi}^lYU~Z?@L}pY=*4iy z;Pc%&9n;7tK8Pg8(9XrBu&ztzz9CDe9TU40n<+74Ch=YD07F=>zMWRo&3-NV^t`50 z_e%ahv3bc8{v)Hz<=?B}I5!F8&;%HEBg{PP(Jl>edu?DG)xrsfz1mk42I@sl+X(<> zM9?t-T_=H!JWU}o#d1|}s{!_j+gT%B1#4^Gc=Bg7N0zX6*>1x;f~$%>bvO3EyPF2`qKi(@zSfdGIAIi{FxSyZd;3Lfw4jvd+QUw416uXO5&stG*&$$b{-$8=pu^+es=8kGY2FMk`iLWk-`V^H_FQRjM|WPc(%eQQ_&fZ@MOS;y(k8E(H(;MTCm59#6MHr)as4NM zs<$I0lE?bO^4YKVvPHP|Hl#c9Q9B)@LXS7BF0XD+#)kp>QvkkGwjOa1$#ySGYS%T5 zn(JiAcai+u9LN-x865{zg8C>2`EI-K)+POtq59-yhjXRqjJ%#x;ngpYsSF035t%}` z{`l!C0pmwyK>po5qjCZY*1I{sj|lL$H-M&ISu=bMz6j*n<`6%sX9h9wGpl6BF0hB+ zbT<-nb?8>tMAF6yD~Nzw!hJX{OC&+slv_$gZb^T&KeIdo+lAS7_G+MV!nsiQSk6=W zeNa7pKc~D_Ai7G`si!w)A@5U+a>0Pul#Hnwq4BenC;tzwV$SVj+tksmf;rSWZQ!R) zavM6MAVTq{b)S~QD?g(H(~0wSHml_UZX}Pp*;&!ol9`9$Qy%(}LFnG&|3mReXbb!$CF4UxpHsFl9Xo&Z>)L|(^FLfcVqKN>f z+UhJ!4;mO}2l_s=)|8=bn7D}noc3P*xtc@xg~+Uo(}yuOBR$!BF2nC42NQT3hQ$*9 zq<q zIMhkXiI~v|(?E_Y#Bzx{nr@Y!Rt?Y_*s_#7T9VtINByoTD;U0=^%MYS4UK*kPY&AV#f1p0ix*tsWW;xEABFe09;@e$@7I)Iq_GBGiQjh$U4 zb`Ip!5P-KPnH1l0i>7n-r<^``@GQneHsW!yX-7@uGDH0G>U$uWaQbBWLh!^w_a*bX zL2%~w?gLBUkq`8_GZ*g%x`lJi&QK}DZ!g{pZ+=cowzD^4O< zeA=k*ZV*|AfypIs@{64-bo8t%dmUNGsV zf^sKXJUB8dIfTgSyhdavXDWzO+0ac`9JUK-b(AG}{JB|D~*wju%Ju%f}`4k zsrR~1AwNl0{sr5iy)lgL?XZ}s-Cr*fGv#@JQXw{Ii34ctlugC=& zle30uPIbyj_;H^;OSV2m;EEnOCwvl;T%uLT23b; zJ1<=wpO7@n+rx+&hRMb8@ZaZMvMpIOC^Zl7>a5aC!o?*}tM|JQ3BGVFsyXW8YdfQ- zp51>U%n!;g%MXeeV7@-^YzybO_m$c47~R!zqG%5j<%`ez+3&90ZuP2p-CwkM4a6E^ zeOqkgLCtRzjEKoXCZz@>jQ6s}BU}9iiq+9toKmrMX7yU@^P~W!R3RQ65LoC}Uqhm? zdu83rmLd<#P;W3S6!m{52EA}JXnn4;+j$IJ2TgiOLywgu14wsW7%9|p@0m#`5CB8t zHq-wkkFGK757=Xic_*`-1QB>5OpoAq?}CLp6`*{E#C1Y$OF2u;PK@Ur&3RX1gs@kD zw-0Y|iBf)okAHF2LhxbGr|!!!ZuVO5U_ocTtL$}eWcErTNXk;3zhO{m#gq6;+Q##d%U-d}CiRn+xNM~FBWo(VBBTyz z_9^eX!S{fa;gL8h7Mie@%7@jb+jF%eWy}i9yUKf$ruSdvp2f~|0$0%QJ zNMZM(Ih;GL7E2){Cqn=^`~1c+U^|(j?)=O(3QuRxhmW2#vJZS!_tjnyZV`^5KT#A7 z-Qs{=6MG-GPv34zIA4Ca++{K|ySLgp%O{CTyb>EROfyKiKO2up=J*Yi|+%oI8H7l;2K} z3m$cSxpM3h5)Z47C)IECq`WOf;@V#u*cN|*Z!)SVg(zCyKt9WqS>%%u^V9FnCr$~Q zzf8q?EQ6uc!7oRi9wslm%pNOsf+Br`|6PFCp=UEW*$B6#$hrhQ_aPHj>pHW^*FRA_ zu+3UO)!iQw6iTsI>$eNrJDz^k-B#-l6Ewnc>B9pLpTx4;oPimO2WfFOU3nI7;b2+i;Q6eAt9;QC`|$W&eiCrV$VYbiVSm5xYg2Svn}Y+>sDO!YT!-au89c1y;MPN`5+E(zT*_V4}~Z{e~URtY%gkLCiGCP+069@Nxh+tVk?nktwrOc*+wd zs9LtFwdmMd3oNe5N&lgfZD?p;&P*HpVq+3?9oW{le^oL%D0Pj^$FiZI{e;B_@nbl9 zt7sHtC4_xha`QVz_EQvUFDB7+1fs_gyxVWr+=}r!6w8H%fCOPASu);ZjNY! zmzizT4^Lkgz?9b{e_>T!NZ;7i0+!{)V=$Zh6ysME{?^hNRF$F4nx$hB{D|iK`NMAlt|?KGOT6GA!w|2mVQe%#{TCbSu!FJH#!kn z*7bD29*KrQEakV`1430}UnqEcpUAFk_UNMhic8c-Vo}uXxmwnzoRyCra|@ykC9LrEaFn0OlrEN6lX@dc6uKQ9twJ@UTTEKpC+qO~6+tN62OZgz5ku|( z|B#twn~HAWfpgVFssszrR5E}^Cfb|)*BQ{j%cUkKA{JzAaP8YpGrgsq+-kV(r}%&8{~q!kT$$i zUp58|;#n0zVANFwQ|=b^s%2B1YbX;e$epW4P_I$=#Ak2TX;7(+jLtx{*3P{`c}}TM zgz&9h4K5EaQ#y1hw!m8iYS$l@%Q%kM+*LSD7KI;IaM@zw*N^kcb_C;paXUc)JHVOu z?kW>xTB{y2Ozy^(Muu57;6Oi0V#g9vpnJhulo4~ejwR;J{`1?BR|^j%O? zd@xS&K@``?Y3Tx+*jVeRTh}*%9s@oaJxsv04#<$&(nvDIj}Ip97j$#a02k|m92zSD4&`$afEH-{Y zTxkc&RHf>2aF+GtjWZe0$o>gedjiJ;T}aUVzP~_JaR0*T{eA<(=x=cH46HlZUe`}} zkH#b6o5dg@m8)Mj{JDJ#koa4QCNLZh1VhvjNp-r$s$*QN)2H{fU&%YJjNCQct`Yj0 zPZKyq@Emv*F5}~iJ>NR5bcU{8**wbbKxI1*Pn?($mLKq{)O zribO1R1{FVhOqo%;+g!Bc&2#`h*ZVUR;&o@Q#4In8`jV5zK3T4jq7!CKTY+8`y0#S79HM=-Bf~g zur}6oPDE*09mfs$ZVA*sKQ4=9E2ZHul};#+8uYU!cy0z>qw`->nLek)%aI;7-_B^(NApv>u&F^GIM2E-bx-Wh`i`13?^ew&07Agm zx-1O>F*07!8{xroh2o($>pg$F0xwu9|{oxD$L@&DZZt zg0}5p7ddkG56`HrrwJh6o!hmKd#wBI%^M@V?@ag3nK9MH%?LmDL=_pHIX+Qs1pbkA zX>$i)2A%6)3CVaI4{r|Si%$sWBxs1U;CwY8&J(p-o;5^L8MBz#QBa=9Q?SW~hogA& z9MsSi2_IuI=KOmmR2hSg%eE(9Z>6+)oi94B#Wha!u40$eXKh}9=G7p2)4-c|iil8- zwx^|skwm{gc`GfOkL?cw+{}xn;$gF5@}OzD_4WF27=W}Q?*Sp$*i;%4g=K1hm?lVh zad-T()2gCvr_45@^BiL6(wdb+us$}Kr!SR^m7`jcTsR;&CF8iRs`E6yJ72yT1*Y!T zV-;R!rDb~ZsBZCPDhRA1Th<+^T`iH`;m>sg?iZ9mcSs>_$K$B2Po&~|`4yPcB2LoW zi(_}T-95Mb(T$xK20_nv<^~8&i^3y%Pmh!jccJ{iYgWj`&jm_b(=uDXuwHBN?O_>a zzvuG&%g~zjiC$3GAoXNb*)Jw(;Db%jL+l1zW_bU8TDN<`@|?1?d@w>nWeT45<#WSn zaA?zZYkE)4_tG}*yO7|~QP<81pg6cEoj>2^G+C$668Dhpd*Szj6ca;wXYIkox~2p{ zU6r!ST=C0U2tw<1GQHp7?qJsbMsLqJ>0+j#gqn}=yPUfzieUW2?q>!<8AP+IWk&bW z0xB&cz;^Y{zIe{Bb=`b(HHGGSwuFC0Nu=f4~Ms4^L! z5e+oDU$fPR-YKn;==O-i?&wNFWnULjAzh^i+xo7SdHirIYKCaFx}u-68~0YYvX&N# z=ez@!CFhzITWkpFbkv7=JsSGiUsA0eP0R$TQB*A;g|Xrb2+=scNwSI_jOyHy!4 zy_hcfu{8~$UfnMM*B|41px{SDSFvYa3q#;ittTxgoCA2nr*2>ztKvw-C=_uN_>Sjh ziRh%Fkf%HBhYr2vY#`&~e$B&DI#$p#^tj_;G9Oo`Ef1d*!nCCdXY=w7uo$lO_Zn6M zMhfMqNl*iy78)kMNJ5M4jd+966fRvzn1JOD_>yCCa@S{szB`G+!!6H*BG)6M(A(t5 zmH-d5&XRWh=S4N&dNT~QPKcP2=>z$Kii+$)-rx#*XJ1{2RrOQPY{&f$`~6j_3G8vZ zThoDi#x#HM3$4p|TWsk+efd6X9HJvlngEkR%k`tE;V(x~n;0CyES{1&I zUleyCruYl-m_%xFcpgh)^%LgPSi1Ysq+aL6ThsN3aEv)`Mmaqt>O>y^4WN6+JM~d_ zxTjNa1Z63H`)sdt2qnFvJJDPYGjg7N`?MtI8wJHL`l-(~cs4|rN+VVi;H>_8J25WJ z-5(k*RSC7k@XiToukWcVdu?|cV$Lkx41$!I6w;PcyOmfP`L=vM)RwSWHg+24)6yWLw2s)_BB!)W`1XeBuVks# z%4OZi#H!2^_U zf-axByBYoYDT}PFv+eOnsGY5GUx}6$GA0T=lM9-C50&u(+2-k+kkyw1XPQ{2Z|GS= zm7G0jsZO>pbp|7&F^r2%F|?yHeZ?z7_h^7A1mmy#oTrbGEkUYu?h+w1%GtxdOR}B*EXt*xiL{p;xL$xHhCFi$*>TlN5OVUwn)@(V`QR{ZU-7)hFCN#PI)v*G*fzT)d@$N?*gR~rcsn`-!F-V$sz>;qSfA#N{$ zm>2Qq&tTV85cl<Vr5!r>g$_Ep_t#ZegtpCEXfS`z)qvw}fzBYlb&WOGJ3) zV}D4zuwFChQ*^U<{~O50Xq=U}z8bT6@7uF^f6@-0` zz)CVL;D*#gV25JSJHQXz&!E7X3q9Yi0Co846RM!G8A|G85ar-o5xeU7qj zsu4QNpSJ|mx|lw=LDMMEj@0(bl}pRqNXXyHf> z_EgVkPlkrPr;DGY0>Fo@!DNTT`eVa94S{Pm4l>(A76dL7B)w-d3@eECyYp@ylm@x4 zC;?(mAZN)6Vons%y`*S0M=B165Jp0io^jJQwXh!D`y>9~A1hDT zM;A}oP<61eXOpM8a|~ARbo)WmMa=~BNf(mq;lCgn&_K|?#VkafFh{3LwTPJ_e^ci> zv!nevX=!_1`uv2>axRrJ@AJ;N-oT2XP-f6=iL!hG?bw2Z7EI`l->}ZcxJN3(%Hk@T zimfr%YqC=zSM8sK9)c@i!t^TK&m-)L#9>E%!rfwTLq_N8X`>0pVfv5neZP75xbZ~u zm1Y8JTb~tjQ&k3k4Cv-cD0!#T%eWPeCQjT9!&02vmcm4yLo*O==Y^3~#R|f=I(I{&= zXbdr$1T$_A$*WLvb4RzBAr5AU40P3k9jFkJ_7+@O6Rz#Q= zy||9GvF(HezhmdaHZva11hm<8reVN6!}YJE`;6u~FZw zS)b^&hjhwFDYqPpxsXwhv~MEJch*IBVTlI>d`7-jBDHQnb|2xLr4DXuXdW;-10FPgA4RY z7x$iDQgD$tS|$#VXU%Hw89%eoa)!8xcMj>fc-okL8C0cX1)*rsTP0W0NDr^TC60~?#Yo|Q{ zi#IA%#s|oX%G6>kN#CN>x47w}1+x13GsV6uE*~6_P`S*@SPj0#Axi5B8@88zXLsm$ z_!X!wrG7*7%Qifj@0p~O25oBnw~V17r5M#|NumNhUxEQ6!=C{x#YRvoh z9wM{0DwdKCG%(piHttP*I3;0D+SnfV^tAJyE)gJ18@ER-Tzjf)?>NAy7HjedtzK}1x0x?=x+rY>H9xt&LyqdskTDFbmRGQh244Cq31JcUhLeG zm2sZ87KvG7Cyq7y6M~llq-C>cK3sOO9vpZ{W$wEPRs7bOHkw z7vICjMSIh7lwPiIZRV$pNyR3*->bu#3M6;{lr46d!)R_tH?XGJ;jNIvF-cep>3b28 z)W+Xdv{R2yPidc^3_E^)JUl!XdpWKiqpZzI+1cNt`V+||MQoGtGhvNLN!P18uriOg zMqLl|?753Yv!{gt`;L_xT8b5baC;z|1?-09v&x?v@1EgZiX9S9lwLCZ*62a&pD~Uk zlOk=2NU{%i6*%-R_T7-;5Bd{5PvAyNPhx`I0kKVrG7iHE_gLRF(;a{FEpz)Ci|Ctt zd3LG^e7Fk)MT5vw2+C}#FZpd*z{DY5T7jVr7x6~##+8Ym$}Y<$i`h=jJXcUVs-1T#F%GhzB-do#M`Z})Ge z-hnb`k{62G!*cU%i-p6)J6*ho8yO}O#n@LjZ)w>8%N&_Y*E^CrPr*4gru?xy02m%5 zmcuPBqU5J#=|wKbB;)L}eFEHYL=ayebLrH3cXnZcuwstsYHVqoXNHZDYTTw_2D{1q z8l#>|D=IEdeIyt7N}n%UGdcpBKe(oW+G@$(PWoZ-hb{F4xJp?eR(F3fSJdjAxh~G- z!Ddog{x`hh_du`!J+qS90I4WU(WT>jCE%%`y~RToAw(7sp;|7z$~LHQExk)!!}yXK zb6X^nE8WU=A~L}6uH?&Ab`g{SA}F_Zl9cwXl0_81wL`a@Moo|E*(WAztE2KploY~D zuXVx|}`y5E)pIOUQ_byV{9x2F)v1`3yG6iECid(>})TT$r3 zC>b4}xSQS?Z;#o2)pDa;o|DHRLYeYFawwBGXBduB;)#zD8deAfn}@Z~jQb!p$1evv zWMA(vpQp{P25dnOu8SrY!$r3~&$?J&iB4V=k(Obf*7P|vFuI6n!y8@=SAu>p<(I!L zs{jhP*e+@qEkib(fZH1yAPV&Q9V02Tdo5ul2K?|A5VV)lx$}2iu>TMIu#F9{gClZK z1^d6FY2z-=*t?7I&B6?rz0hf);mommn_7S1N4M(-H-p#;}_IwINyC zgw3%FniEiYGWTj`R+MEu9p6e`yk7Tbyrq(w8cZ8STT4WEaSEzk4v~o)QVf!e$_&fb!XuN?b_ueIrR)Ro~ zY3usmu|3}j<5HOedwMD%KY>aH1^^8RZAutxlk;@!l|q@CbEn*FWd7Jjr}Jk$9oG2{ z-%;Qn+f5Hsw!~ie4|O)iJq>uPhNxi44~92_kCwl$;J#GP*BrxlTy-lHD7J=BgD~ye zpETCLHz&Nm&sR+(f=CG?;V;-`XUmCR65uM_xP{+P)>QU+84AMt;3Ozl?vEw&FVH71dOXofD>bc{);@c}?Qq8x8_6XZy`Sx|OY(kC zmg(X`w(_#P*SM{UHmTq@=_kI{eIPX96e)}A_2AInc)l@^6sVj?e zttZ`y1RvAdZgO$^`;o}c@KDk zu;R8OL<}C!jlWMR#IVq6K`P%pf1m$h3E{g$ZCg`8HS(06_Fx#My|V>%Jc3vY>iSF3 z-+v{NJX}g3*f=zgxGxw~6vv>w@R#jIVz=OvXQJlhp@Z83(C3Nz@oVV;AyE#CJz1q4 zJ%G^~VeRo{h>p*z3M?Lrk)NAy!DRh%Pyab!mu)F_WF(wRNocEgUbCl*;gNgY4jc8u z&4WPOLz;edAs@kQNLtm7#Z#mcJe*>3qZ&k6OHU?)ElS#Oa#~5+*O%@55}TQ8X1rr> z-N>)+O+}FyTEJRUOVq`p#zwEt0sT9xg|o&DL2rq*Y%r&b*#Qsg=W*Lf8+;NZFh!-5X8N*>w$d~VA2$V+q*vNn8_9C>zUj4ho$ zWQc2?%>vFK@0?mz|MfFIvO9|rVRk+A%~1oiFt110LxjN4rP_Lku8em*kO=?!b7R$u z5??`xLwC;;iwq`1k3QI0|K2T;xY2R$DLi!A&9SHmqmUvsFPXZV!A@d_@=iE(l%R4m zfXW@k^ZWxISEYeH5cxw8Iyx>1lpBIL<&0o@k54+e5?#5QAnqyG4EZD{X$6fI z^u*q-x@&Jd5#>|&Nw?or8fjV5D4CN><+%EvgNSbMLF%~raUwQV1oq*-g%v78{7dWs zHlyL^N$rZ_v_Zmm4HPG^-6!*!{@Ck|J)^uLWvk18n4ktdOdS@uWEc6{-aDSlaOLhY zHN_;RK0^BC;^vqB>|nNTPY7eodD7aSjK(pFu8F~+DK$i`Ms#aQLQ}rP^KPNn?#7O5 zgf1@ctj9faRFipwMy-VMT!}rsX2`Rsx+(nUBwHN+oD`QXwN;m+@>QoL1m#G(s8gD3 z$(gYi@yg3Bq1U0WOl>{uMoZe%zp@6Uh(o!L>!O*Bl4P^sMs(buyyz`=HWf_|lqcT% zM2z9r*pWd}W;$N)-Pc^{YHI=2H?GR6dcrDGR+-*jYyxC%yjofZZdbtOS6$Rk*L8^L zI=Rp|(kIHK#gGV!P+zZ4PbprP?^pdMFy$1#3R7(zMkFwd6Pj$&fV4)CE*i!8q}z`8 zR+-sw{W6H+mauDm!8z~KmK^e8qw1{h9x|{|tx-13nKzADsXzXPafQN$n_+Q<N~Dyfl9Et#04T3D4Dtn3o1va_Q(A7h#z z)hjEl1v65nfAb^zl#w#a!&U9Dc|AH3)kR;|7F|iaNh%Tp*X86@5A80VG7cRv>t7Sv zhS>$T519I@uI`bk4~W(E3~<`@9ZQ}7p!J=?Z%CD&;GISN-!bDN;#^HXp+0~>I7F!B zB)NKZZ3x4p8>|WbL(bj^h1?2ZeBpg^E+#k~W&(Ht63N8!E*{i^TaChXRS{0H=H=eF zMn5{joWfkDdi(CE+rclf=-==Da5b4Yu^RTrbzkM8Vu1vx1H%D&;D`DIqC#@YfF=j@ zmlt0E!C1Ef4-_U>SW*4OTf zs@ERWJpUr}@Y3jEv-D}+?+ii66IRLls8?$KD+t)b`{#&nf|4P)xKA&yOMoP?eb$a= zvDBt#^GQ$qKdyq-)JBQ$1D!pTG>aCGu@!E>G~oGT!;M7aovVoL`LE~>A9|g;B3!!H zd?PY=qUo@7`U0JInFTpAi@xO+4F?v*er@ti#{yyzH5fKVWxHBRbskBs;&!Gb>FLM| zmm`YC1ZBcfv8+ohZOiga^pS$ow5s8|XectF9f|K0tq4tpwVP3@Wp!r2Y)1{Crqh?t z9)EwPB`08t{s1Bkd7Z>LBVhVvI3&f$4vP%HcCwhY{NW^YgL^to)k|>!FEuNAjCQ5h zhyZpFqekyHgHduu&8i=CmB|Bnqx43iK2hl>`+o54&0f6HieQMWa|L4{phs8I;n1ey`CJz2eQN1@@tk!r zI6=IV17^|jS+iaB-s^cfobZDXPYCs7`CY5{KE&BOKL*Yua~?@_c&)kkdn4-A{%czq z=a}Vj%i^4lzEFWHzX|g$DNUoH8Qh!v?QQk&6cT|<#%~aky2X#QM_9Oq`^~|G-MHU8 z4g*Wfq$;yNjF$I$GjB9yB4Ilh+{6;gZix1B+`3e=#~keB#H~E{v!5$|@a$W}3F^Zq z9dd=1A2?Z4ghXv{0|>XS%v-E~@wt93(fnLIC#4ZcO$~U&y^=NWhGIncAgV%z2B*R( z9}v61pC#BVUrf3)1g@66rKE^u!K?NzMM} zAt1`p$L{(VS9{I|7aVdadYpi8R}dSEp%|kV!cdCh+c6cPsMx=-pIusk2~d{8KDk_2 z*+0P*+eVkuk>SUe1x&f4HN_g`oF`XCgCq)D?Mde1uRF`SH6{VBsZ&2 zqM0~Nt|Nb=BRiFXC%nO7?095k%)+7iaDZa^cne(r-Ni-kKgcXJb;!ff zmnG}bFu{6%x4Cz!XkdUM+{N2c`bj#OFR858LFC=j+4WZvW+{TV9WbN+lthH_Zk>s@ zV18rXKN<}M@x-x1g4S1pVj2_Myc5jFkKaDs6mJ$&Bi~=(kXuyeAOW6vPCSn)6D(#EZ!D zFfe9f32imUw>MTH7bQF~X{0Rz|zH^rQper|to8l9PN;@BN-FtPy5{t4WX5J{wYm1)(WM(Pu#F zXkg!%-ef`)OiX#a21`^5@>M20ks_7YJndg2^q+iiZH2d+uP!|0!dbQ*JV22bzJM2Els^WM89)lbKHu5h}!lM7t406*N{JHkLjvFYjF>mA&`|MlADIPqQ_t1eY< zdm73@Y|c_TF!{nToMH0Xe^%~APp2%)DP*9tan9FpSOv}4{eNC;Rd4+P7~1_5@bN2bksRH`S`)IE#DxWA{J&DOT^aCZ|B=DX(t385hglnLfpAv z%g2pSJ&>E|_bt#Xl!GUS$gRKiDtwQl{Hx(#glL7uIqY+BFg$C#qI@XikKV zA0*ekqjJUVos?T{Jc)dKKla(GzZ2;>pF6@iu*h$3eV-KKj2m1Scy1|m?rN3nSrLw+ zA*cxO15Jb?Lz1-lw_V^J&3mESl0P~tQJlR-%Rk>8>#rN=>vHvsvyGkq^<2Ny{pXGr zhj{-#o?un6^%)|QjJ?ts<|#$lA9?{J&RW8BV#@aRSvAEKm6gb(q+K$BHn0G3mclf) zFaWf-KDOUmo!HWB{G-M%3@Zt@{U%e$35?yWG5QnnwAy6b>gVR92d)+Ohh>eez^W z`7Ghecta#{m6t41uygc`s>Ywx3*ml>J_A;`%l4b5viB}-oRgf>V_+6dsGjGK>?IXx zgsZM4Z}9OP=N9@54)#%WeR+hykw%Tnn%m9sx~O5Ro=$l0ME388Guj&nfywKpQ55w1 zL;*vZ1uMnhqSc`=ax?TVpaUslzwrM%yg(}Eap5KOY9}h3k^X-@z^;-1@c=(e zvU5gG8vn-wjHR{nm6cFBVE%75jXi!ER^?7W7&VsQm1)P*6K1|lxkhuIJT;kq2 zQls{{2oP{|+7Z`UnIU!5A>LNS8Z5k$!chwyo5{Wn1zbLyp7qe--92v0TH;mF`45x5 zfrOM}w#o+9#x?0&Ip-y2!=0a8O& z=4(t98S^;?20f4LpYDD5Gz892^gE8e^!En+Q9=)Fb%wzU4WuYl9!Y!<`)sr|db7La zpEnV`t7wTghOnKw`cy*QxPXa`!2SU+Y0}@|4^)n0N%mC5 z**^{ozBoCxoWrO58Rc=tNsIrc`XG1Gv8lY(bJZkhCMS>kGJ~7qyuj2vULR+kNSI?e z$=FKJCytFLn_aY;D?QzKezV~>koD4#+#SZKwE}+Q0Ox6QPR0mAi!&cJ@vmY#o~BFL zi|cKpGegH_5ZqJjStvIxYR&BSe_y8Gn(5!O;(37V_xINCf$C8fSxJ2^g49mX-TT@xWbQ+$nH!QgS2Kw5^UeDSfW; zta0FFP=9@0%2!j6uwIh8tu-0>2GRK*`P583FXXaUb2KAeDkKZ5e77f{n#vKK-fQNEggtKKX)MH5x|T%57gHak+(&c45OP;&>P%wn3z2E z#31~)U3l&B_U%@Hqg&!Afh~aXdkep&GxCYvpgueXPvIcqMDp4MyyuSax@tgu2=cNZ zCNlVQAX2)JgZ|Fa!Q#VX=h3^kt#PJ=RzDA_UBYn9mKSQ*cDE}DY+cCX_vbC=r>CJ@ zxsGG}r?Vq>777NGjQLBVa)sP3z^ZxTT9fh{?u@2-VG(vI*)^Gk3T?7p@JQ%P#Q;ux zH@MVpTU+RkXybX_{q8zW_HHa7=@-ghlcL6?F2hI9d1ES&(AuJ85DsO$w8lmsvhOQZ zhuuKy4w z{}3Fa#Dh3N)1xZkPf+R}RyQ>z-Z&uhQ78_0;C6l3%ogK(x|7zz>##4K!Wkg-b(V0c zCsE)tbqPn!-=O0Ca=?qK+Q0FRPMK%TaC}QbM)u`quMLQ0n(e7`rCd%`OTqEQDRR-4 z#w&3XXUog3W!kqyl^r#K*?}4?ls@#Aj0!!AYJZ~g?ayx>OTTw|eLS@rDlDCNHjI{H z*>f>yT#4t>U)yT+8|Lud#=qRBTT)!A)_QnM7l|3tS_>T?5cYFskc=k!T~(KW+FEo5 z!6fB|y0tQkzMuuK1loFtg&;wapcUO_^{i#cWUhy*jOl1YgB6%%0^h$`-m|zthYRaL zA>&(!Fmi*nchxa>h8?Nd1P+;y`P4r1LCaG8jqbYlG2uGs)JMHyd9;Hp@(RCOdPsr9 z>%?|7bFDw>cEPErDVgkJFn7GRM2`{)%}k-gnm88H6U4o($&2tPseSw+BOk#c2R@2; z%VQl&onCABkORLrRy0Yz;~20d4(C(abKv7C9>PajMTmr|!CGVbVb~ zC(xKk0e22vUVuN}Hxw}a2Evn56`&ajhp-_EPqFm&QO2Zl{FFAHmX?m9qNPL-@}c73 zVBqd4aD2Y5l~$A{qv<9lt|i`dJm?(|Lxtv|8yfwgB2S%#xBP%B4tD_a9QVhj5XgIr z&`RUtMkr1zdA3D0+}PE{4$0xfNn`^9<_Y9fy%A7$=n75k)SF#6~C&g8a-!mNB zx?Fuf4<{agmSQ_xmx;**8BmU=`d2sp3hH;`1(kyfOhP?E$tY=qz>YJ6QP5ovM|46T zJfrDaDMfixXtJ2MF4-05?e2Lk6WsF=ZE-P+T|1E~dU&EOcEnr+I z;BCPwpvLdMtc*~c!AIFnDgXc`x&I&BkBr#AxF3?{KGNKSWh zxk?kfLBLH=lOz|eZm+cNpjN?MHvIMTMVqlw*dM)5lHh?=w^adG*n(djaN?QFG^Wr; zo<9xG^@TKlE);HV%gM{@I8XQDSi8L|MED5nW(ie22Q$_VWv{n1^bLpIXE&am z(zvhd!};9lGO%MAfHTIME;8vA1RtpHa>29tIZ5`sRox!r1e+?~MfRAo~G_Y7c*8%b$up-m=Mu5#laRuwCdC6kQ1 zBQl+d+m$cDBkpY( z`Ylf2p)=yma1qsbWa{_%2$7j7=B?dRS2r*{A0iK=$aX>^oku(67uM@0>gdF~M%j>zO~atz zAROf=R2z{GgV-diIYw^Fl5KmzIMtrJ--amU2zmtS=F}Y8&fq*h4$xS*I6~Zg|GdY} zGfw2Vw{#@$3pA%zM@3$*Rd(S%R+kX_z=vVFi(6A4<#AlQoM3LF91}94K>7kjqWP9r z6vtg1=>c1`A@#|;B?AYGg&|nJ6g>t93JiOJrWrUZQGh4>(I_JF9p6}-01CmlsD|Vp z69I?h0B;+zt%s_;7B%ovQH65%C?^!L)(|x_)6k(2CD`pKgjprkTn*ebcBnKOZ%7}k zYf3;bKeB5|Nwe>W#kXq;J4iv@H&xv5EKF1tM9lj;qvemwwyj*zaV1hTqE5?);YBJ z)@!=$L_hV}QObFTp!)0e52@?~<t=kjrcA zS;JCpJpYCKmWJ94bXj*B?|)a$2P}m3XqQxH@o%YC$)ngtzJ{Vv%4D8patBN?^H@f` z?6m9o`RVWvn+rhB25>5z^v-zNFzL`bySfdI_2$dg2Q%OE5HMDlzWE9pao(l4SXB=5 z1g(Pon(lF08&7lBj>G#VkcoRje@S4l<2~R-*BHvOEdO z&IcJC%BR4pnO$x>$iFrIG$2&acc*?8ykFS3kwmK|^)}i7;nLY&FZt+CY zhySLr|BBymVxsTMlc64a^WGo60Zu3ys~3>DPj7lOh2+h^xLgul<-VZc2Ic9E-A=f= z>-~jl2izqcxw1mJH_JZfp1Ur;TD%&58RLzO<~OsPY_*+DBF@cQ3!R#h9y=E;Td7J2 zXqFtRBqre$RM-)Kslg=5jt6*}obmbG3A3vT;@;Z6ag6oNG%W#ZN`%K|4(kl#Jqp`* z8L@=d^oEs}29>AHSNq()MIscGvoodI{iF0w9FJ`EezrsK6}}69aJiB;Azgw^_sjB_dl|>FEGzWE)01C5k!S& z1;mREafiWYs{getXQLtDZzsvrL!2r>?@X9qv#^%3%ui>xudB~lJw48k9k8%gYDg4p zfRtR2y1=#~rrI7a$en+q?QO_9)jM#H<+T6^95=pB8!wnb9=;Thbgk9RE_cCVaKcny zwScuAYQrgxzw_SXW^J`mDJb?A+9YH)-PSdsO=MV&?|WJ%aye%;74$Y1g&;5<-q4#5 z@qM6f9-yQx$RMWQOo>du5hE3{iqIz08WzYe^ErCIz7eCC>(Fvltgtb%+xZ$V z>HGLak`Kxa#@C%Ui#pcn8z18} z&Ybsl1)s)l9tcoHv0a9<-)@j@>^Qk;T#j#Bz}qVYN*ufmOU-Y&zm9r5Cc=gtcn^ z^Q`Of?pa%##s;rDpC!BYmgX^5sJ;4)r~^AZJbbTsV3_%p%(4S0KO(}a(I+`4-|z3j z1fh6VjDM~Pi(-3i&}xZWN^!y!>1EjG43u(pr1sknov-)$npql>jk@4yGjLRk&id;k zlcwI0q*G2E(}&t$nQiwv-))X8^GXcxD|fVqq~yu<;1-inNWCDgh8o&kyn2t@?swBZ z`rDGxog%X*rLjxbfc+14?UV#ajj+7@d66L}C*Hb; zr-i$r6K^V_e@$0Ww3d6=T5NMhVWA4YQ;B$$Pz^f4BPOl+vA$dY=UJSR%L>=3wBYHE za6sX3Y{m{CSetP>@S;)sJn5Z0;Ck-{%xyD8`tl?V$Z8UMkElUtiK zKCg9XWd);U<$^0AbBuq>rF(6=K^fFLf4 z>x{Vc8Sts)ixbe%=j63%9mwNwhTb8uv#I)pASYJtS>&cPS)xlL;T2r(E6m$1_pKkI zc9V&QApB}~=oSK~BtNmU?-Bnt7YnEH5agX_AQnu8lD@brg9lKL$s66~LXJ6~f+6@6Ld< zy=3w1-vg78x_9uhJ311hgbS665gX!bsS3Y=)i8bV{QLu+6mBZu(z^*G=O_qbHZ_5w z#J+&a$ME6WtkhrpQJ92FVy`d|1x$ELI=8rnf{!%blL z(9JDR(vbXX)|t?{84c|}99{N4_?Jb zho}ja#8{5e)r4bPs+EFkh zV%!BrZ-xnwAjE}rHGww;PGKuSRa$^%3pw^RwVVhGM>GPWkQlaUzCA3FH=1RpZ8v-J zAM|~(8#g?7E_Y3~R@Q|jJ@Jn_P$Oi&qAN@E>i1w}db9_7HtKfGI$D~TMH)iy;7!a; zViMxNtyCi~+7pkMs*vsT*Tt?K{{}xcpWTL1va@DDN2L%vu&@@abX4v1yIU^U8MT?i zE#qnj2MI>Nj!PzH5vJ;L$cl^%2Ggc-2dm8?83W!;XZ_mEc3s~6L7^U&g5$fox^iva zoDHIoSvEx`Emekwhe=2!O!|K#X_Z`hc24&;p0oyp8iV;%w&5;NMdX{h(6w2E z2p1)+0#Tm7vTW#db5-C>M5rP@ZqN!76Gsg#C@9*ZAFB(HcI7ZmF45?p<4w%DZ0Z+M zT>3ZX6-sWFtdFeQ;(Knm^7uW@*OM2*HRkoB8B9-Z=t!&CQuQ#thpDq^!;n?boG^u& z964!Hj0YpI4kYcrZDL{XMqah0_0hBs<|ocj7A6Cow~4!-q{KTK%|r8SMj9H%6`Q zl4(Og&il#b*2PvkijTHGdnsC|ef-3cQG5Ox`d;PSb2k6_p{J`uZYlCZ{7wOZ8 z75Ig^*chI;t8a9Vf*w)NYCaa-12GmBW(zR3C1mYAm>VT#UmVi;&GOlph^DZnJbF1+X*c40b5MIiCEf?0s~0&&<8%OgzBvo^&dPl++&kJ7 z9}f6L{r#L;kpO=7m;R2!tA8&h=kKqF8W9pH(H5L^(0xjyh~<0W;iT}14o zmO}$9nf(uG3xZ<=VH!<$Y2_cCmfdewI?(+Sn5FBTCkixhg=W%J@uVm?# z{K(sv8${oBZ!j*ld|%}r&XI;~wyDF9{w*iB@>Ox4@9d~#$1WCu+POW|gUgCYJeo&~ zokk4STm<=QaAywI!4CG!)u>uGoi}JJhh-LG`FTghyUB2!qL>0=k&0#>D9jbAAHb5;oeZa733) z<*-eMe&>fT>CB2$7P*YwC}_!EYIghv$IF^cw!VCPseX!qn?#X|P*QREk$$LG*EOUQ zODM6_fV`+_OAc}hgR69|@{Y;HL2xixAv%1AmYkmOExU^r&kV$)rze?25vPfcel}BA za~SAuIn)yJ(YXdL$^W|`0(}wkf0cv(bQN8 zoe-hPb7>+&V>6(7$dkV`d!e!}eC3Z{Wz^d>ss$K2eYMTWuWBH$ncXxZN2%O_Ik$(@CvhHLV}ji3$C zxrwbQP#?J91<9H4~>bjJfW1ugSDq|u^U2Mo6=hpXI7%fW3ACP@Mz6hZN0$QV6)oYFAz-4QwP=!ROr{e zH6`kJMN{sP+h5z;Y;iV+Pa2V0F0+ zo)OtKop{;3P7~_HVnx(8L~RWt1zqQuYH57aoMGO^5*(a6=$Jj$npmeKW@T(iY&~s> z#J6wyxpLAH8!neKRaJ`PvxQ+6F+$E@isoEk&Sv}I(r>1S8fe3NzHL_fx0~KOGS?Zn zlUD!9s6UEK%ih%DRLdz$R#OkKIwofoP0RYGmX9j^sPlq^OV6Et*Mq{E1f859`YIz{*t+X%Ly`?A09_DyB$DLo69Zy(%WwOmRjpbkcWt z#EP16uyCA6(L(ME@F$rI7ja=pSwz*>&fe~&ln+Oy=cKE&8KqpI^mB^QO@+TJQqI1f zLi(GH#ok+e^z(82$me!q^tdZ;vkdyCs`p4ev?4P!wcU0;?MAP$`m<|75~C!{U5H27 zA*5f&T3S$ceT>YYOMu_y5|O^?;SFyT~TLPbNFQ;$vr8)D+_nK?apx1A-~k! zwll4pGQK08uimYdRuOn54ZNI!p8jh1ZLJ+s)M-ASqrX!~EPbEltus+;)WM1z7OU%)?{j{W+}>fSQ~Nq(0tH7< z-$n9-oSiS6tz^B11rxVLGwH|4k68iNPZ@tZ{wYxP2mBst6&Dwhay6zR6U^x{t7T!` z>R+A{-K)wBDaLl*_HlO@DRab=++<;u*$k+Eul z>DajT7T^v+st2Vh);g(8(##lpp~$OA4xFyu(v#hl&L^JeC+ObO)1Kc>`Pk$AW}DKe zpy1uZ@I7Ld>{)tklQ{n!n1ao)`@6rS*3!$3^7`7+5TbswUL6`FW)(Lul)imOq^I4d zZjmfBlx<{M9>c~9Vg264sn3CjR7;`6eM#Kg&4tAT>5qoOmqgSO^aY44lE`c;;wJe- zbB4LbQ>3QPipSp)K2KXeo^snQ-14HLQ75Mk3^l+<+|j!faa!DlEhT8Y|JY@*s@#Rj zA`=~T{x9CSgRNG@I}g@c02~`;mG3cQyMl=FVyK5C!)94FxG%95~*<2^pfK>72g4^ZD)~p+}@DUKt>!xRX|3-IB zcd?skw=3%fEa`g>7yYz_{PcXEOIpL*C%pSmk&w4#f;X zi=kq+#ayAxnD<%|fw`r+{Co+4$bP|D0uNt_Ja>S;uZu$8+n|JYNF{|;&BRHa(bKGM zBdmk;Bbc=Sw>*5rZapF5nLU*szO*4%#}4SJz8uj{5T>Wy#?H-Hd;UL|&StSF*pfy@ zZ_IdkstV&{21k+;2*ad1d=7~693HKooQFQ!G)BVa9K`4C^Kz9^aC-}qZ92eb$Vwsv;547nl!3euHtlMHNdn4o?x)E zQeXH9kp&3fJ@`Dyx+ymuh_^k4Jwf(}Wwv^YKGnBC<285pJ+-AY9jB?^J-C-x~s67zL4ljad^IrB9I(b>?d)(Ys3iC{)F0) z)5F{e%0pUI-)`|&q614*J5uQ-9q+xy`)elO?yQ#!s*daYkx*<%it=z6X!PxrNz@3X zfLPDVg5GW)N2HGPMm_m3k!-Xy?H)^(A%QHM@6(k-Qx_N$ps3eq?Cz^)C>VP5>ChjSPL>sk6mULseIMp z5hbc!H2{pjCY3!=2NBk|!outcpDax6XeA2TW`DBaqDeF7%?Rd*F;fh}L_cj74N90A%?vuEoY8V-3aiHBPPJBjX7T=XZvQOtxGo25rE^Ja}_ z@0`8CSV2I%s=9KMAF`*bz`n7ubm%;@Qg!rLLWf)@1jO%BET2~`yhW)d=J_ z)8w_)h2(1f0eKNO?K&0-TdE z!`CSQrmQSoB0nU;)SEj4){c-3!on#8$U;eeuVOgo6Uw|vzv@)R9e&mGGh#+%K9FII z8Zw>(foNa>((HcND@X*n4b7iz4G>T@?8qvzz5lCkl> zeid% zJqIAia{y;ugWZ>f_MR;@&#O?0kY6to!WgzQE7FqsLOlTjsyjQ%^dno2DRL8V#znMA zQHky};e!n!iA==+-F)`u?$ za&!b5T;L%pl*}}o@8Sr$-5Y8jkGU2-vN3ylkDAQ2;1FT7c8KIc$E#_at` zQlzkL2VeL;1}wAHrkL3uzg65S&J)q68A&fBANYy}#|&S8=g!W>SG!-!AR!-y$i%dR zMHZ>=bqttuqC<^sls>m|?kcGR6*kv(<8K~NakfSrXZs2{;tYc)xLts2@kU8k=zm^Ink2l7?JINsf}`sLy*3Hqw4!xCC`}>_pW@j?5P3(1tI5d+n;o&}eYakAeb5!mOZ58y~RN#FTReR7L@TH2O|6zX~B zpohZUpfa2=1B}Hfh!{6m(GQq?3F2zsSz=*&%9l$C9jhBrjhfw*4dn&GPi-uXP7wgJ z!?|Zobo%6z;DAY)eTxxNrX6O+t`r=I$90G)$zI0{I_ZR=dQEGPS-41CNhcZdw}K+s zDGVPz-5a0S=9%@%Y3by-Giftv#m;*_!$(SyFbc*sV^5F?jE1NjNqT^BU$b4zbeYqt zrDN}geWJzJW1LZ+a|W0>8Na*XZ{cUkDT}bbVBPyiVaY0SSJM=mm_(Xx-AQ>3hZWh{ zWG`WgXr)Tk8rMpPMpFqB7#Ap#T2w{&UufZ39af2t{VgdqkHf?d5w`BKs6oLs?M-+4 z_|<$MrxuI`!6WrpRvXPomdmS*j4Jp<8x~fKVc9t#sXDu$Un(aQ1G*pPo@)uREUnDX zX#&#%C9WP#X>U!)DSip?Ahw8`&XH_oH^d6I5_JxWp@FmIQdt8&h%&Iy7=yDE34gr8 ziKQ4|SoV;DHetYWbTe0k5GN|yjFij0Uk3}~dcRSSTSZBB<(cv1yny~kdv>sT3dt-ia#7b)xlLtReuIMOY8|D>+ zxi~V8SEKKPDUT}z`$UROrNHY;76V6o^S#bHs=eD8HWno!w%Z7B!MV0}5*eS>K*NJZz6@J0Qo! z?R@1091^}qK=^`M$!6ekHBGYhJ(U94e@0q%0^?w9^qVBQt6C%iPPcT5EBwN^^bM4g ze7Y!Jl+jQlrs(spIMX$QUR%QK%KR{Y|7}$+_DQ4by)EsNovm}n4`~qQyn)D?#toG8 z!E_!+mt9Qdjb$m@xQr`VyR8czV|eo)nS%Hqz_BO?RBfk9y(O~o*mjLfEXHD*SUa*m zP`<~8T9PMg4bov*mixwB$=X9|Ea7oJEu%=IZ=e7v4}&e3gk*%p+Xri}o8p*uW!-fo zyox?H^TrPd0d!mh?}9@lHhZhVsp3m6G8Y%K<#yiwf!X1*q=JioHO(Z1!9fmbEX=9k zCJ#W5D2z}509X-Vk7o4eT`>cZMq&~De*IDo!Lrjx;^X0psb+*ZTr-RdJ+G!D*V3HA z2VWqy%H^T#&aA2V!l)96`eD=P=JS8KDLxM7zx|KfUxz&VKW=}BGPe2R11hxuMwl*u zCHzsqIeLfZUR&?BPHV@N24HHs?YO+}levL+zS>zQk5gdsf?h5e?KAAzhp^NQL{NXX zr=OaCLA)JWuJ{A(01y?QSQ3&J9jSrq=VT$@Ux@a5xGhWN7}qv-*mZh`*CotT=HWaK z_x?coGiwLrI=bJuK#tF;NcHJK>a(Y<;N06+4!zcR8L?EK!*pe289c0oc!wAmpI7|c zGu0l0i^eZL3k{+-p#kxPWYvi*lQICuGrB`TVje@>v75V|-+B|MkoY(06g}l{)}2#% zUcWfz4j@gSQ(YAD_j)F+I)Bf^zE?TVIJ;h9 zBJY3qd_3lIeZ^vfZub3i@lr=Bq}}-bI@diePo?a-X#+%kBi%}I(aK#2uDor#9lj5| z%H;+Jx1ZA;{m>%~`s#7(UMl^%mZgajJk7ToN*Id3q_`Lf5S0}4qpZo*?by_X6KyGcc3CnpMXDLkwmZj9Kb}3sXWd4S)Y*OlFYgZ(E67)O zQ4&fA=o6xa<2P%B8E&;+R1XC$Gr2J~w*~TZE;M0Yk$)W`>0hOOlVD3>eM~LPmAZlQ zRINZzGMoZxLav8ChML-kp{Jp^mQ*PL?>9F6fQv&gU;wP>a{dY=X(e#8nMak7*fH#L z6PcA><(_D=Qxk`oV}@U04*vhzO70@uGf@VuqYRg|Q!P%R1+A^YnVEV)$Bd>Y5u3HE z-LfrxrsgIVKgK)WUP%xm;8FQxjMde-!#BEqZG^w2IU;VJ#Fb0FI^?S%76Iq>^N2`- z=m;}(U4|Uc4LMC*jo4F}qk>ZU$CTXh-y=2q<+#5pCwY_ABn9oNPdEeGK;_g&tvtb? z1L%Hsd+rE2^1A2=jTP%-(IY|TWz)WWDW<1w9l;q9fN8ic7u|Az-ktJn{rNQJa!%4~ zdB4#zp6f3^=&c_D>sVMF*W!wBu#_=j4*jngnNLBh-`~+wGr4EN2=U7-v+}aC_!)rH zA#NO;22v5d9R@_v44D1j>inF|_|zKnUO8Nt>EfjG%Yt9H$NX`2VLNU!Uer9v@RK4P zS*vaYg3HX@l!$gA6~pz7=F~_zsknd{{(iRmA`Sf<=(g(_ImR_`Mn*%MtemjNVwBRb zf1ml)JRpK8$@Rxc1=8{|pP2V`7&~9ch(SO7ZP)esZJ=21*taAp(Ev^zn1wtwJu3lZ z+ElC^meF0v2o)PD#SCtBqY`=j2$}m@_rWp|K$vG%j!y=;XY&(>@;0| z$B>zDX@=m0NN!*7E6&k$AXgzhF3uTJnEtxw=s()V7_lb)WGs$aZLAFUtJDru`la~^ z++G@#`>1}t*LM_x=gyL{>!#;-v(V<3hdl5tnwmV7TF5u~neVpB+5ThHKDToBd+=*M zH|hzmWdHsIEidpb*U2tdWm#UHgvok^0`Ts7(tHLL4ND>>`e)`Lzj_-ifKcF4Awt6P#0!}Sept=X{^ zCNL~jI--l6{ucnPKvKW1q7j9Cec=v{Rj?7l10xccFM9wx>N3&qr8DE3Mgsj=t~^3oHH84b?-gOvtECC${Jy& zteix{S1#-;<*w(tFk8M6Ew0Ip=C$JaPx?l(-sngDmdE+i;+=H%4$NH8f0QJ6)rdFn?`I`Rl`kDnCVW!hB2SlA`p>PbWLqBo7n zI8dJTESi2Ye8qK{zPxcD^VF#?!6|ti+>8lWrT82iCEn&WG{IVd#XIZ>cDx zp;NZnMfwtDzfO2vy2&`2zZI{a?(SXxWlpq{9> z2n>!s>W&|!YsgCJq5T{wsHWFt66wc;v#pGrwQur=H};B_jj-DsMpU3E@P)r*f^-hH zQD0Te&XQK9&AEyUpB}dCKY-ul+qwIiifH^3Fgp>@%WoMI>5-o&ZH#-iu zaN}3M!}w5^os$N&kRxNg~VnucH&e*`VMlSFPw`my@s1Eol9n7B!L!D=8QD6 zYt1GO6%Uue6;$xgKWje)i@Zp}c;Wh?FRr_bj87EV9R@5~LI5Lh*4* zN}Cw*4<Zy67AnqQ|Nw%uh6K^k&>0M_9XQwb=Jq zb~U7N`{-idE)EdH|WFj%m6lyWThAp3HPD6eT@#5P22_W(hD{z{`? zBI^~GwV%4GLOQGlGA{ob_g*oXv?MKC-+B#4<~4-0Zszz#&AqX{;-XsjU((pg4Lhe#`Xw{oDU9D)-u z4^(kz|3Pw()YE6z;ujWxN&3rMxM_u88m`^L8?UdSKXx{kUB8fPFPz4>F=NS^FoE>g zP<)MgOqvm@3ih)9;9>HF@UH8&;qnP4Egzvv$C7;v}Am7qA{36{D?Yw z-$4!@K1x+n7d^u^Y{I>ZUVEJtN4hWy@g5l@gtVv!%)t=^2MJN7Y-?txvve2hwjHAI zSTPkNexkAOtBi_$nyA9=3_*6*gq=v-D{|`?H-0Lyfd<@iohl)+hHLh+W6MUK+wbJM zOUL4)A7R@QU+3MnaZHXHX7Bn{Y|Skd1%SvTEwvojw1-kd5>qp+y!y2}cq`Y6L*u6Y z&XO7)1iqmT|VQfN#((rOS>~!o~!aMnWqBTE2;pX>QSM4AnE)-3DK3i6;W!2tFv}PT><)V_D zJPX~C)l?hDlND{CV9O#_ZrD%FNC;Vz(+RieMP3$SsBJ61`Q2V7-18+ao}5gWcwRU} zDI8@_iqT|bxNsB8_8g~AlxHo)qWs7?PKU!RDjoyJ7WJhQ?@WESr zu)l=Xz99x1D=89{>+U8$X3tKcdexu!-RnCTHu>W2ZeYinH+W-DCC#Gjx+Xh}-s7A3 z!_Qx&M2HxZsQk(gY+`Fs7na~Kg4~T9+4vSOKKC}I)@TAlBrQbQT-dFu@$*|jr|ra?22reHTrM$O#2YC&Bq71ar-B8GTD>kD` zn8uixVOIY7E4*`1)GvKP7>0!66yk9IqF?Z*HT}dy`p|M<5zj2yNl|UDs7L#$+`pL} z`K457!?_?s?$#qpIN>h?!yI1mI@{}_xM0DhOdBiWT`rO=uF0}j>FITfbn(_xyu9Wp z-7Yuwp%#wiP50|HchGy~l<~hC-+>Wo>R7ghmpkYbI~`3;gD<%jge? zVx%#TcivlvGj=>l;bs~RZ(z-aZR{=Y6#39b+x~Sd$v`^pB^;7lz1iC7 z@9Cvwz(}yGRWx$)sI>)2&gi?1UtJkifs;ZHag2O`Tm(poB5|)%eh|a~p!F_a% zy^QSsb^Q4q2VeTuRSfNWmzCRU(S;>5W^6iPzQUZ|;}q06m^wX+vMp-}xZ;OAc;~fT zH6w)X(q`%#G-NEego~q{ynoD>@Bi|f%u5uW7J5O+Go!+;uABp>2)o?}_Tr41!PMkX zMcBDqG6Ojn8R?{WQ$Cit3%L5yi@0!3HqpUmk=XyYC5Bt}N(3b`d&XSm%$do!7!A$G zj<9)CA&$fh#>V;Mv^zyb(o6ozwRA?#P=sA%fDWxGfUwl5Tzkm{Or9};h?YG(@p3L< zB95a%{FOZx?VY6@&)v^k`$GBQkFO&_gtsc{&L8A3W!Ldd?5Nk1k)Fkv_;68h$qXv4 z`Nk3(ZV=)vm}p%Sn~w~VB+`yareyW>%_5*BTrnt&|m&kUArkH9uQI z(szExH*UR(`4`L}(p5*th#qr9B6A{odGn8N&?U@z^m})4@vI9(11N;5wRv>oi!nsF zyS<*${%G#~@gv-HB}?PV%SEYGg2A z4EKHQE-sJl<+b1ZiR~Q`%$zR7T5JTa_Cg_YZMe-rM47D=9Ia#8*B;~BBD{heJrv~a zMjJbuwD=%~>x*dYb`yK`clpu1S90MvH!Gh!OzL%6RKCBKdhIx6=ZL#*yPE0QX~b)4 z*;J?J*30J-B*z~GN}XdLroQYj$BT-n>((;VT*{jF*PtJJ8w;)&kE3)w#Y0iVCnS>+ z9gM*eEQF;H6?zNN0Z#G`mtjbnz?>OV5w5}!kiwWbSMjw46A6t;#ILQ6u7G)b_p6s- zso%_^cghHvc`bK;^T(wo~&mCssm1&f&cn2>2 zDc`^UdajrmO2xJcMofVOh(?g3v4RT5@bw@4lv}SH%TP`ZRn`ci&E>3pXEVo|v?NcP zN=9TL{(%mTY}-iOv?=U-@@ZN!Z{Xhh?%>v|FK5Q&NleU$Cq6j?OLr-Cakuij2j&r? zw^DXwJN^D+NsO{EAR0@rzFf@ANB_Y07hb}gnHMl`>sj~yR(vmD||F1qcz{P^J;h|rHd2~kMaR<(ketP>vaEO+_ z+&|B5wPKe&J^zs^5Q)O5!!^)JXIUv_QR5gN?~h+-G|{3^P`b?j*AW4#GY1e6mn2$e zSxlcZpLtWVNim25sk#lDh?9>DB@qu=g9%G;B#EL`mzp}6>+ZOgjKOYEF!wPaDq_8M zn5NR>96we|{DNy3D=O$y8yG6*8zQBM#-D}}tbIki@$<)cZF?=2un3akV+gj0O2};{ zcFKGf-n)?Nr|H=F(&PN-Cogim$F4Lu`|FNzys{goIgIeoP|RA-954l!3zra78GfSS zSKq_1)$N(nCK2{Zk?CvdV*5+ai3Y|V`gHz8#KsaC8i-jm@|;dlvN~*{9C6_kpH7#J zzM5LPguqNnPa!2Pinx@C%vtay;ihjeuD_7HE+3*|{lRI&>M{`)8b)Yv06I|)+Iu@F zsUIddEf$O0E*g(Ebiv_-8-;sBqgi>0L{vyY;o$_Eb>ftcF|()R?`#ob=>Xfe9>wk- z&e%Cq2p8pEM3US#%hQYXNpK7Q1ZQ8!onQVI-~Zvax#y;NLKp_26%DZu=Q9yEBCorh zqC6GPIbBX1qD*!7w^3F*Lezxuq$b1=5f;as8@|ka_ukGGlVUN*9i;t5`4AE$8h9ei zPA!1NcR7E{FEEg}xEM4xVV=u;p5dl0MLGsjRt_*afTS!>G?a)pQ}KlGyRv)f#leEkRt6pfSKUIrZ+VYY#U zKUQv2CenBI zmHhPaKQPzaNNJM~;ps61`3Vte7kNvg$7B-ePvi@m5T7m?ej;6;m^&x(7=yj^wslfI z>`!t=FbFpck2o;LCJ1N!`<`Z%f6wP2>?ERa5G`jPkzsvBh7S;jua8-o$m$;+PkQ!5 zqW3+@)ADDJ(9eL=+f_@evqA0eMD@C}^|}`n%dG%PXbZ zslm@QLf(e86zhG62oPz)V8+>5#qrV>j&(*dcWSgUEUR+9BNCC*ileihLq~>~fB%DA zF*l2W<~lmt`*045O24~>enS|^mp{NGzk86__9g5slY4nONVx1Fe)gR!@GalYvNx8q zy|Q0a_6AQLm5s{a$=v((36w2)iFcOmro7WG$|4_3?qT{X_j0(Zi{iWnk}tiU1sBgH z&NNJCV>8{|L!#v`icBdEdj=UCc8E0WL*#@RBvUIYNKuieOlIcHsbs{3L$B;f%Vcsy zDQj09q2F!5JY2(`1BW=foDX{g=&7Hcbf(Tm3B^mqr|jYTZ~$D15z8WDGX@)Ak5_GNE|=j9Iha)x;J z%rf*8WPiDHU<8{8k73a;(}ZL&Z)Pwp2g@)eXEXhR*`&n?@g>ZX%`lBln57u^FY>Om zPaK}xWaC>1XP*dClc1sK2&LuC42g2Y+Ec@pE!(JW8a^?e!VvwV?CyEW(d*c}Sf9;(GfF8yD_dkz6=kAh=y9*%+65O3ap+=#llu|D(6-xhg zsL@hdtT;44h`YO9a!D?J?(XvV^ZsU^=aPd$-_k+|$$VgQ&+g8S@62~*M`*8Zpt{<_ zfD5kWQy0x7gL;k~sgW?N9~5;TJK=w~jT-575vhqSEZ5w&Xa+D(Z-vK80+n5|+xkJ|8KY zPr7V4-0$4*n-X|=lNg@tA)>pPjzBI`E;yfaCk=%r7nbbNTr|l|;li~XmPV4#BJtH# zPkFTnTelK$l0PI4F@?mcfxMr@W|5wk#kBZ6yz=-)xy!iAB%$Ylv#aj;H&6vQo zcYc;DMBeFS-q6+-j6>^D!##)q{K-csyDB}l+y;55R16DFdO=nV$m7*<+S@`xFyfuFzi&u%LYfNO;#pf|5 zsh%Zozs{nCt0-=j#$aqJdBcY?c+ddSlA@(dYGTWrSD9BE!9^Eb!o)#lj&57Z;(21% z;#F)pP>yxL6efu>8GYUeYL@(+Hy18r{;p~~-O>Px%_K2LD#i&z$(uZ#0bLt;{Fzr- zH1BQJ6k9pxn(Me^#we2LpiT0Bn?Ih>87LZ z81r9PjcMuyj4`_W{yl1ZR(Ev)CEhf~4j)2dv@=|eiI{MA(@s9UI>Mgy zOL=p_8n)~y#%H(F?#SfY3#Jm+_bFD%A+;PyV-4MYD@l1%7?y0o8}8OqpDQ~m3#d0| zkuzX~2=7?zrdl>FeVsSoUO|Z~iR8=_@Y=i5ALhK749ZLte?m`t z1Fg-qc(Tr8MqV`jKr6?#RgrSeRB}^eaJr=4YLdo6{}O+G>1}xj=X20DgYlBbVeBZ4PmU8%UCOGp82T)twg-|{vFbMO3xU|Fq@~X*&xOYqsF&4lS1oa6Uae1b zvb7o799@l#3r`{Ud2p+>^7?x1Lbe)a)r+G(4;ae^$PLwf?DP4Ju72f?*(@ztn`+TY zu^0BUa?cPeV*d%d&SHYn5>wkb8C~wG$5Z0jSVBNmq+v4(^$ADyh^l1(jBFzJ)iu>^ zugs~z>kgYVu~oXL+v<740yQOH$Ml&>Fz7cnnpX`*<9#(y@4On@Dq=>;0=4#)aaENC z>YY`e1C94lH7=ak%_2xt{t~l>Jz~}{qsju4)mTsQBw~l0`lTVNKDmYJe^p-CaN1S= z3mA=5zuYjEQj)x9{HNRw=UcD(yk@fC5Pzwx={L%z&?ih|i4L1opmL+T@i@hmE%bOL zfA_SocV_{;8N-<@!sYy&SfeM!jF;YCwK={#EAH8iWlf}HQ~6)@5C&D{WR>#AMPtn| z4sBe>((-gJyXI16jL9WR!fy0(Nqi`w{GYxmYMV9H19jqk>_a>fQ2WG6*{6zN^?s`~ zFw7~-)pHWJUa1t6e^nf)&u?ybXdhk`eq&2FWmf#9%45S{AX*8C@Qp>TZvcI>bfdf1D&@uTMzH!aDM4I}44N$#I;qs!-u731|HMHD} zaY4!~mByiRN2(vWCims0x@~-JmYXN?o_ang&q{=-`zkLeGd{1%W6J+#Y?2Svaw+Om z-IG9{u+NAG6;`cNtDkaABwXOwL!&gBS2#lO}o%HL`YK(ESYM)#Y#sQf04Ai1UD z(kJ2R+g494C8ETP8Uud9Ka!rIc{O92oh&FWm*d$BkFwOil1mZiL(mhga-Z`Pt=>>w?)Pai@A$jk6CA6+XRJ zY`=i2=+=A1YBUH_#`IaU7&j=LXotlR1ZNs%i=EDjU2NH!Pf<-9F29KA$ON)RoWsSlM-VGP4mJNY zn)gQwJ1y)q8ja>dB#4@Qda}1r_0og}=6?`PcLFI}tv1zL68d_fdP&Y)X(J&shsOT( z^#G}!J=J@pdZj+}t{u%8$=N9E`bry(Mx)Vu=$J&vd2qR0;lqt5Jj~<2LMkGkN9>Ub z%6CSKI)&6;0Y6@k`$YV?)yf7Ee_GUOH1CfVb{dUFqtR$IX9ypgurmhBo+3`ATW2%> zaXg#UU}81U*^giKUi{bH7atPg!MuGV2ttF<)f!fM1kb6Uf4)(lO^jqvX<$r%`Xq2B zSyy2*s(|U6H50NYbjK+0-(hd)yzf%~ zXVfJ%Q_I_4P05b8ca3YtXR2o(n`&Tgw+vE-TL42z_Y8c$7PX~nsj2nzmw@A zCo0}0{e$ggEPwtF{Qc=UtU1z#JtLce8L^nvq^W*scoKCjG;2@gJ0%L$iD6F8)vPUb z&q!SPVVE&4^vhNKuJ_rm?kan|%_S68dx(yXFlIzn=PzN^q9v?81S8HFL{#4lzCOPh zZk^+ zKKjo4T`}UvY_VePspE~89%n^qkm&d{oDKU}_r`O)x!b~o3x^ZcQp&F44r1b?v5Ua# zL+t`&5&>AX`d57ZfnTs_ZsO8%NlsAvr}lF@6tTuk%C;j*c=4&lR9WJP zuy;_peF4wUTSmm73mFt2PUjPG-}ihtCEro5gpJ9C_sb8OPaY}_^_F7&P}%uI6?Vo; zWTv-rC;!}D$~iMGBQMcu6vE0a^_<_;PIE;eI|`0aT3QQnDa2SjR8|zx;Z@6~XDh9i^otEmuY%OYL!a0|c4s6+z$qF1| zMJ5G2R2|(-!NFq`OS%RlV{n)~bTrjc-qeOOG7hI&C&AUi z(c)?v8%n6@!YC^u9YI{3P1H)dci2*ikF?;I247)KCy|knI81IDDvLOB=paXqmr`EU zfHyLQG*OcQe=iLcM`>(nqpYZk=1w;jVw6ba5AiVjv1jETcxlRO#@|LK7$eB0Un)~l3xBI)%63A%cT%p62c zyeMjum!{$}8r9;-5e{r-FKu-VG`IHPvD%4@up9Ayc<*)!kCsr~)J;jr0lK3GGB`&X zZ0YgDWe;NP)CnYXl(F;8Kk&fcc4CipN*NtXwAg7h0_ELRORBUUTE_N>^ZDH`Md00j z6PL{xN47Nn&F&WJ%8NNraDd~b6_W0LQq{I#QgfIr5oC@X%cvoFBm~;1tvJS^%2tL< zyo4-!1I35xF~_S7?alamnyIg8rK2|>4blMZ6-TJ;^-__)pGJQKaS1W_TZ%b!@Gyst zmQvr+MZgh5e3XP!_X2(*(ZcSO2s;z5s(j|dTI*UwQ&V6uRe-1 zF$Qz_HlCYXO3s)#wl8{(o%InUre}~I(N5XE4ZQivo47_?Np{uSJo@Smd{R)G8xFF1 z^$}`(P7>3c1RILjRoc#!8JEDm7kKP%1*A=xNP0p9HfciZSM`5KZNt=2w1E}J-AtG; zkw9EO=|8EZU2~s%(dN{IWIh&5Q5R6VD%h^id z@_+ENU%W%-AA|Z(yCpMdmgig z+bCPVoF%LFaID)zY9q^)xLlsje-u;t5nYGEf6uD*(C zIUDk$?MGj4c}h`Cl)Kl&FowIniB&J!Ii?3}-nE%}vn#Yz5;>|p+r53}G%fW%lU zjR!Wccv}&UtZ_^lJ^-q=uzKOMY~=!GrL=Nj*Cy5;^D%fxHkneEr^H6#6v3s|wp0@( z+K;VeeO)XUOrAib#c#Yjsyb;qzMBIF_Orh^h$GO<);FJLRaX|X#|@-q=kvU{;V724 zEK(x^G}n}Htgee;Q!W-Uxr!%$xRSVwW|A3eqesfA#c%CF+WMqqyV?8qhk0ggH7;vB z$r)KhHE-qRxtl1FMx)u)NX3BzEZa~{!o(3|M<^MoU*=C5XQQw?Jvyz_f{oNruy!qL zmmMQ&#JNlvF`N+>TtHUUGpsH$F*rRFTUjZMRdv+VNK5^2B~|_zTr$3%XMge_pAuJqAdbmfhF?rUG-nu!A$A}xei zG4rWAKFfpmUx&B6gd_E>xT7n>?QJ!v>RQZ)WL6mDeuf@)={u7(Rn5 zFTH>XgVKmFdyQF#-hdaA?-;NAY96uI+{*)>{VaFf{sq2$-?ik{*KuTPA;(i=*mL1&tj&_~nIr*E^``hp`}V!ycBuGM8%q5QdGP#IW4>(D00a z4|l^_o_cf>=@ZUl?1<5foi%}&##NM5*W$8dGs)9P{{9Mr?k2XbFTRGljVG|}0FAy1Hm+)whFzKzgj?9WqlMH_SMtUCzs6mkzJt5(`2v?m zwXK zvIa!6uV62=t!^x8(Py_?8tmbPfTc047GhS5W)(+UdWj!BgIQNx&#jkCV#J6ETsJ+5^(*#J>rvxjJw}JZI~KeT6AVfo z>UA575F6)eA$5=PzbgOLj9Yonb1&e_U%rjm6TPf>axPW9i3}Vzmhn@kGGtIR@ilW< zxUpV5sNZDGCxg>N*h$OX+)zzvWfi-tDycrYiAD40GjHK`qGsI2w7daKnLeJV$YxR7 z``NlpTEw+Y4Eoen`o;aZ7#vi8Zz( zwAh^3rIn@z?zL6!VgA$q;F+gh;MMtyShYEyqtzYZ71`CGYgNdr3PM#zD#wV0VyO~r z{;Fcumj$KrPs3pnx5aM0L6POt=WH1R%E9RgDr@fc<);4;2lzqys zaI|Rt1-18SPs#*t`_2zJCvcE8ue`*ZH3igrC0JEVu#3G-os2nu5}AWU1WdNm)3T3EJL{=+jpxFPui?UoRV-b+ zo&7Ocj2V+lpsa{8uM?8uQTx9eJK97>lbIDqpuUlA7ucN2%<4s-wB4iDFAG z19R*mcsvB`u?!wK5WAEq!H7Yecl}JJj_hLZOTXiXKYxlv+l%o!Vo6C)BGPtxiF}iY zsGh@fd2wkq4TpBJ?5&r1cHRcIZ`()v=7l`DwlwrED6{G%Q-^x>Sh|!odrI*co6d(H{~`+|=v1Xk?Oju>UtJjpp>_;}LeMU{KrSs0vlh zj8t2s#N{%0a2`_!XOSi?sC$0=Lw@wbuXDrfs~DGMCPrF$({f_y+OwF|TZ(Cjy@=b- zNyL*fk*mhW5)(I>+rRcL9{l0A_}neGa^AQh*D)VMFZeWH{o0qfdG=_W zo?h{fpz?rJHlF5ox}_B_n$WP@@SnwwC2cg9PwrvMODieua^o|3sNA`YQokL?fL!w8 zOh#oD+QKe`v2Bo?^m#?|?~pX~xv->;<+g9!$EBm;(BfD4(-ZUA-zoxs#B46lvyd_J zYQFs7_xaxU?&sD^FJr=h6f#8UXO5c1`5nvo-P7}FNxYQvrE%bNCNOf^M7r{~v1`Xp znsSCPW&AYGzdDm=AA6OExIBjDrja#vJemFyD);YYe{l=$fSZoWW8@#HC4KT35*?C5 zRK8RBOb&B&D)FiDq}zA1Y-JH%s|AlVC>LxzM7uOtOzpL}qH-B|&HX%Z|2(xl$_>K?BS#tUAjVc!QAo3Z;)*6b?s^Vv*h%5BDq6*ySv}BKjs&C*N*T?0 zW70@Z7|!e)KhM{H_&pxD_inB^Z#ENhtfBHkqxl4IYK5KgB1-`ol|**iQU3hUm$~E9 zpXT<@JizbXEF^Nu)!h22X+-aQgfHB9GdJD*X&zlugv%4e8;D`TIpc_rO(8lZhl!U> zBg^c=ZO`ML-~5JgjeqBd_uRp)H{Zq&o>|EDvJNR&?AV+!B*v>v|ATZ^7O-x0J~bU8 z>{Kf*qi8I`Pj_D6i}o4@7Rb@dEYc`3qb zRM?4AFXLR-G9LfsADOd8D(OHJ332g6+ie7$Iehw&$GAOX2S5Ds=egrkxATKJ6{OF) zn5(atOs2zzEjo^b*hqPql(;h!8J8gWG%~c?fRX1l?~TehHsU00qa0=&v3Xo@0hlvr7z5Iy$sRhD>^R7pbPnkeCQ`><#$ESbPp&tgfBfh! zZvXUMd{Nxw();=1HN%M%VGtFcOmu_|izy(&E{hSfF5&Jkolp6n@8$MeZ{@Sk7cz9@ zXfh?QS#7->T=g1%`p*5_`@Khb>4=kS@Aw>p0!LZ9U;`yB9uamTZa(&c$7IZ4Z7<%% z+A=Yn?#(`qPj$}j=hxY<2Lie z!$0GN<@>4Y^kFv!429kkYh*l0aWTdxU;}CRn_@?C&a43>_&4#`1NU+JH=m_7c_@Ph zBw@^Lk}^I%Rs_A;U)L;x)fp}4@z^EJVsmHlnY+ib={Mit?mHf1ONX7*!MS8h*`bC3 zM8u^K9~s&Q)@x1YhHw9fi<0&+_pz^X$IZ8L_xFCzUpE{lU~0zMCxee^OED=} z#7wA-rCM`JWXWH-rk+%fs|wdxCP4i@;U_s4FRE6b(FzP-RToXhMft4`^^Cf%o(tQl z%qxGLv|ICGaw2Y3oEvGNVm*AWkaH!=Lg^MVs|=pJeKKw2Ed0E>FX!r>Vd|uLmF7xF z8ODwCuo*cwQdiEE<_q;A_C4Q+oT&@po;Aa)It@K+oQDXzXV`5#ApgtJcVB+1+oAjF z)HsvVux;UU&A-PeFZ$v#e69{7ugDRabQMkubr{CwJm90Jsg%O`f8p2l*YVmTml36U zP7RC14#@yUxnkI3SZtI#>Lipe!fuDtw$F@uMx7X^M#CX|&miPCWyY{W{Z@xzCTvLA zX*?V{RX>gLu3xY2>4F+`9SYyOeI{Y*3%fcCMUg>Y+MK+n;v@8~8NZcbf4emwCMV)nMSb|ZFWwE*eRVB#625Po81zpY^{??cw9kNH_MPTcnv3z1 z^qDbi2%Q^+zB=u@cj8d_McE%Rs(u)LJ7K)fT9Czx(-J^Z(@? zaVeqXX5w1dnz1# z@!uB~^}Elcx+ceo-+l3+E*XFOyK&NS7O-1NA;ay@)a^T|L8@_^4xS4XF@5a~OX1qiAIPP^%H8!Jbh zK&8A|=Emi6%QJx!6++P4OGjsqvDTf=24@FqpHPd*M|XP*O^x-&R&>oR9rSua`Qo%e z{Gw)ETF;cN;?(=*_t0g;djk#i68H5DG_|zT=?P-BS^I@Ew0eKQ(@lFzqhYq8vDsMG zBq+6rN<+Mzv?zNTTj+90IWEtfNIsJpo0?_r?!x5_?I>|-kTes2Ta1Y`rvM4Cs^7Y$ zT$3W~BSI~>@4@ZrmaUI{;^IlZwsqG;Ul91nf-r>tp+B{?UD>_jIfQRo3*4}0GDDZeVr z;M(!&Miw(kdYd|m*}8TmD|a5JJ8mFDQ=QoDKJw>2$~PaHN93rnWTnR8eD~fdnllPj z>H50r*zwP2d3w&9ELydWO>5S(GygCZ!9+%k$iXR%zK^{ukc=C2wbRnnz|mS4Ny*Vz zKH&wF+CaZ&{~LVg=YL??sts)1v{{Z-tlqGN&AV%`+LOr{oPb5dgV_%Cd)D&i3(qoV z@iJDd-ze#{m7P1viJEa9LxT0Z{r87?`mNP0U$~5|C2iQ^lgUm`G?pC+xSBbXznT|* z^8iiH}lC z<%Dm42pElDPZz}nt64h#1&U%WWLlOTukHk1kv`UQaY`o!xXT@+(uB+CHTvwt}_3RjSh5 zet7UmS#V;erHDkIdR}dHWtf*T#IP@X+juTiW+?mBxnFH*C&i4rW9o?$j zm&j5^L+Nrd54gjN6Du160V(Sx{e5byGxe;BZ=+r?VfHk$?w?Qa$9a3GX?KU+6+2I) zzdHKYBXU>mc+$V_Q3)2x4C2PgXZrHt3B-(AJ|!UaTT4f$*crYj&-o>f_T>@v>nIbUcBxeIy+kE^5`Br&A)PLd+g-8$>gW`=w|Y(olH7+ z21yZ;F~u%RXC(#4>ZtQZF=<>Tf&Hs^{OLJtE7;4-!{hHM~irBTQirR{O9NfQ)B`eCwo;jIROK9&x&4-WL-?8o3 zS`PSza_u=o=&Y}%sG*DaygV|ULCW?lWm|A6w@uA5(%RQv%EmQ2sCVQrV#Z7+rdgzN z>}Ho#n%io}asPvtP_=kH-i$#crzaC<3*|-4nT6FFpm_B&{9~Dq+kW_UE*O;sHWri4puLC znR#1}QC?cYzFpf`wO|pe*6*g!AI~{s2GddSPk#CMa~vtFV#n64tXsaE^?OTb2|7tn zve9;U8GrlLCekmTNt)e9)z-Ip^^GFh+%=RJ?_kxcZ5$}6rMuTfeAW=+n)mV68*i{` z+irGkSj(o}Wz_p4NK6XSxb+pD{KsqT-dVwsqDHC?E@Q>k25dzi;&d-d?bT6}$4;yJIVF zui8SFGnY|=<0)G9SDyXnDt6`XWzY6?tXR2*wR@^a9W|D&ZBOyS{B0boY@k`vI5Ra4 zUu7YimM`GV#Vgn@^~;Wpt603dn)IAOq&ZsI_15dWzI;7vH*Dd^krJxR$qdPip=|X( zdHU74Y%M5Y`{p&Q*l~=`U4HJ$9!MwPxhMq86Hzmaw~>!p++$ zs*mB4&p*JozV!uW4)AkWD*ky(_fq9aVd9i2jGs6H4!+1MOZU;y(@S+#D={O^11N7g<5O& ztzchk6iI`}FnxGDUYCa+DX2E@Jj~eZuVL7TOSt*cD2@~!=4eS10m-!QnO!uWVB}p7 zcxgObMoa7nGE!_<&7qz#L&nPw)dTOU+sG5YUQO1uU*&l^EYCLUw@>#R? z2(4nayQzwbKqfbR>Dzqg$9I!gS)%CyW2p5`w-mS-Cgb^=Y7BWe%-2Db?4un>FK>>ueEx2KTmgT z!*HYgK7e@JY}dt-hq2rE@}9vvBZ%+`e{!RZTCGW%X3T6U(+byI4Wv;j6!U9#Qd(XU ztp`PaVFa<|Y2y;->p4P)+bMyhRLKSr3SVF0g9_Y7y#6hF;Z2h{;gS z(V+P8ST;{Blv1tyNP1jSk`T$zJ|j5@FgP@-2Y0=H`;c76_ET0Se_;K%Lhpmsm)H~V zXz!8c4HKm5WUKGdtH-(HnSikQu}*T>)c6t4eqPH$_iWqw{Q1-)&D!%4kJ~|zM#B3U z7rwRq%85;G_JGuWV|&T=)YIc8)U+pwz~H(O5UAzEt~{DLa2Lkgn`E6SRaxSHEzxL~ z&zK<5@$`B1^`^9;`*(R7>dsR%zobgbJppPh{KOw6vtgX`pUO7CxVDn5b^XX8l z&+9>b~`F=XYSI#ZHAnOw)LU6RojY*4}7W!mQUFL66hL)wM_M z&VV_dvXrJ5>}x}F*Y)}BJ9v#QOYIl>)yJ8pyNx1iJu{S8tW;fAL`zKXo)B{{oY+_mLP?$)-|TH{Nh|cZ%!yechDl+qc6r5^GHL^Zq}GX zeZ63orcpYhR(wax_eXR`dL;D-J|2y!Fu`v}TU>8cR2B8=$C^6@M&U^1PEu@;q)Y`9 zBjLph*~uZ*FxK?+2l&UUBfKF8)xv+&jbDliu>mAxidmTL&)tb3NmQ3;mWmGI zfGTl~jq2i}Q~H0lJLoSZsIDYTHi^dmbSLjf#Ve5-CZi_yg)NitHxs?e5Y6+tQ*Yfn zQdDO}Fhbp0=Ftnn31Su4kluH=-hbc`_+o2$A=X{l5u*QSwvWT>XX~d=)YYlp{zw=h zmin8ui@OM2u~x3hC!lmiwR{WX-e>DMkVgka=#cqdLU<@d>i6$%g+?}L9lp=g7Qa#$ z1A#;@h@CDvaE@i(!;A0eI7lY9dQ*E@o0ht7y)WdwZt8;WU;I#PFY7JvF&liFS#G-n zf>xKMg3u*dCmx*O9S?W%g!Gg#*bcsLYNnTj19#tAad>};7+%@RdMxV=M)zQ&oj%ku z$}nW{3yRV)2$jF!XU~ul`l8t!WZ(Jx)mht~7;Cg68Op1QQm2>9$$R*EAF$m_Ce!ZB zP_+{m3L!K6bze8|-okjalt*EzVH0zG`?mG$%3)$=voD_6cRi6LlEAc3-4g$FKc}U1 z#KRWg(tur~WF;Vi-9cunWf=FxW(QuJ=f+w3W|n3PpoHp1}8jBfk;FB&b6 zXAbryXUcib%@!x8XsKc4x>ucd$FcN7<&b4TYh^@a5+h>+6_YRA()LmC%J%Qbw=pHh zEbQ##LaIycIFHf+vwaL9knFUZK)8c6pe-8fpo+eAw#x z8F~2?$*8+YhHIh4_3o*D6bf3Q1jJbQt{d9nh%CVEL2AvJFG3b>5ry7#W-4*lYD7y( z?8Oj$yB%b5SwPVgE%68+)&C8g))i;RMYp!iY%eElSkl>sucgam5aYOKeD0=YGZ~Sa zJC{khRi9x5lN-%(CIyW|X@rcSaQYBx^_QpMvT#(W?RoAQ>@X|&z zu1PjyTihcN@SN59JmyZPc{;mnGbfcK`s1JUO!M>ee@vlH4oZdfX*We>n9tU^c+$Zb zOOf;*xd*+n5)qn}OUsPDiF6ibv>5n0v5{9TL=hdG^6ReLZN;lCIvj`He)=cw&d9vb z$<@3hZi0k>Ka8>jPJ#Pu?b+S8j{EMmWHyV>FmOmZ%JRDn$;pksn#NE( zi#;O=G<4_6!7-Xja$%$?*BI_vIi1q!oK|`uL@ACNNEq$isfNp#>nsi_9`Py+oLHuD zE zZdzL8bZYdG|zX75TsRqeLVo#n1lBS!q>j$?EtjS=23^=YVX*HlS92N$)< z9j=5k%jPG>^_fZ>#@K91Wpfrpz~Xz&+G zzakmZ3UEBZ;cN{LUzV?@``~I_mY*RV2qk0es%CHsn$98dNubectcca>lRSO$FHX|B zYP@xY;YbI2hi50rJO<;5XoFlo#qzYe=;I*unvW?1oM?eMWg7jtj%^$oR95(}Vbyw!fNFi;e*VD3X0a-w z8WuJXt}B^k%Zo-StuLy8gQrw!2+4uzyBlG0ew$~M32Dj8+oM|Qsf()m>H0#R-*mEW zWBdiJPugH@Jcmp@wU~aPJFx;tMKw3PL-1G=0rpR;N)}KW`&vtK$kA+$*miql1X+2; zM~lIcB!Y}5V@Adk7K(z7*7GK?O|N2^T*$gFMkPiU6?C0#wz!E45IJM9A1!Uw$T+Py|6F^U-INYWDT%KoA`Tw@04kiBvYR z2Tn5UtLtd-bP2?UJTSbv01|oCYpOD>-ThQim9azR0}@Gvj2LBATar~(Li5}}oaTU@ z@prWy@Py5K(F4wOX@!~b5SN{tP(*9%CPrdnmiHP6dSx(0EZC&Sv3vY{JQIVQ(Cg*Wgy>0*fz$J z-J&Owm=o@>_FRVCO|WO*u9s|DDP<|RPWd7uV}Od9^U26U8pxK`yc@$kzZ@`ZO-jS2 z^km#MUEsDZzymV-fNJbNS2R+3%>|~=cSd6M8lRlh4_~eW_RzVC@H#2j^hRZzs<2Od zF|6@>AL3r5W>;E8D@iW*Q^GpQe|Zy;wHk!2mcJC4bfFl~x40-B6hAL_ycQlF%h4dw z+#A75OGf9$#r0uMKRCXgX)}&#kzBc8B7wtJ^r`GZvqHb*02d>v^gtW9$RB`mI3GzJ3btBj;?H-i5SpihwUAjIO~ z0lNsiAtq5ezz*uAs%izcg|C3K=V?qa_zm*6&@g`b$Q+p_u_!u5eQ?kB7u-e^Q)j(w zDe4a*rH3n1zNn24K$SDX87?cX$py<uS)wM0f(uisn)8ZUUTA>kv&V)WIzHw0Vn( zATu|7>5}ScIV#-Il5YuOrKoe&_a6w=RY!|>UkUmQ#kNhAvd$fNq2w)vF=5@J1!CM$ zk#L1fE!q;nAZ99t5YaZ(Fs@N*A!IaJFn>rKZ#Sglk*Cj?v!*n_-VypY7GrF+Ia6um ziLUQiqfZBMQI!&`MDVfaQ^sG5x_=0HD~>}&sGuS&sdWg;m4B|7pg?;0I*uuB^(-~E zZIv(0W1y>3^u18TlmX-Du! zL#<5Z+{tQU53A3e(=E0%w~7#L!E<`2gvMN@+m9*8%cpVpLwpDAr!CrAKfNNdMF_|M2=LohNAQHLcbht;uA^qt%+$kZDORelLh8^yQfHH zpiX^p_qTq%v4&QRJG~5mEDdeXE{}H0Fc@ij(w;=xIWf3p_y*>9oU3c=$SIZ1p~-lR zi3XyK5K~ge>KM}r;c0EQIcq}G&Mp0Hm|Y&3%~BIoEF1ome3EF#)_(3z_|#>n;XYZR z;SI^NsDLuO1441*n*5%GWX?9LRtFnqmwp~QFZDxK=b|7dx`)hBXX6YjTPk7jo#&i) z7QzNq080Q0rYVM_;%?o|DBtB_koQj_Lf2^ZN^oi#?=2b|>z&E`C0yry_o}PsJ$|P5 zreUU+B}RW5cd}a4`4WoN?gF0mTI*ruPU`7%f+KvH?L9ff#1R@r`ooCnDM53R<4p6_ z8aYPBpPT&Qd4$dsJGDLT^!0}ik%Y!u+mIMCXTqF(X~MJmTE}B1uD+%IxT+DuvAkI{ z^@cE^sxJn!Ib0vHoOE%3Ax9wA4%(^7yhaRpuz6)7iBpwY7a{`|(*Z4{+F;u*@#QiJ ziRXm^(%Is-(MmD{agC@5;HU7~R80JmIqaJ?mb<4@GgsgirKb8imDk?b4auhM7)0}a zCSUC|#>9AaN%lUnqVzm!8A)b~hb`)T??(~-zFp_1l%Ok4FF663*8OM1q?b56=E#da zM01;nmINY?N3E0g1Hulk(L-Nk>Op&cI1g6o3wnn^QCuA$Hp^$I7#gHX=%s#(8Tg6vsmBvh;Y?NBs8|#ZqP^f({oCnPy956WVlN9= zk~)sp1!@OO2EE4@xAPwa#s*{`!?HqofOC$`{*__Y8y6a&f09eesS0}yyD;~A6f}ix zHL)5Z$!diSn0M0g&2H&+?7es>8jz(y`8DhH{j?iDPtf^MdnS~Gq{2QJJCNP@r0uji zy=AO{Cddd*t8j2;{XL;eA#mh;2jo;zGkTAf3lI$pC9|G$pa;J&FI^Te*qCfSA2C8MSthV`vjm=SFN z#~~|QvL5eHSunWMu^B26u2}ODYr8S2c&RJ&l~d^+)khN^&nJ3cf)xM zato7Y7Kt7Em@6u&uDfwW7Bgy7p!&t?K6h)pez)azoG1K_ExO1Dh-d575*zPg#Qxo19b%6zfZ z9q)-D6P~Y0@AY&t3iFHHh$yGJ_^P`E%Y?5vrK~u46k;^zPi?^E4kgO}@Qe^k2fCBU zX7p2kIU-{MhUK6Ip%NwZ`3%5}xO!n=oM1+t&i8~m!VjiN1 z?HO^4QTjDDS3E3o9C9hiVaUmyIN;{cy781oJrKa!h6C%GnmoQN%dRP4~|9YdJ$k z3CHsJL+X_i2AF>v?Bsva1-A9ir;K1O(HWw%K8i_5Q1)#UmgV^oW@YqTN$Oc>sg(^E zABKK**WqGwX1=~Aw5Wk1SNn95wy?l5p1-9LhJoaoQe;T@{lQ0|T(X?&Mj7a7l6Pe2AE9#SxEfWkwfrpQ8^m9I|g zMJ$*waXzM@c3#oR=6=soO?W{>RXYLE)#+wqjw;S>&3EiZ7_x7@h*`shzl#<`{1Wu^ zB)ytmP|Ol1iXf#UdtSJqw84l!pR+9?V2Y+-Yn6|xUit%Ig0#!!rQ$L*&-p8O#K6{A>EXCN%@MWTWCW z`DfGzF}-wD{*bab5r4s_J6jjYrTRs`IZNVOz5|)|*no&?5ut!C0_x6V0MTnq_Xc0s z-8Avebdp(|;sza)$r1R`wy5M!Tco|EkL@V?{&7PDPq(@54;oW7ppem03)6t3U7@tJ zWl7E7PMO|r?@o?%kt7{nhE>W@-knQ~FZ2J-$*`CQrwN;X^ozr%>>CH;Z8!O}#r63L zaX&P1;#Y=zb~fNbeWox<=ZX)@u{AT}&SvE7vB-Jev&(chBG@4o6b-HR<|YvbMGRWz z8e}DqTQ8z%p4L~kk@)t7%5p-%dSxP z(o%@FGaK9pir^>aXM=mXp4g8@v@P`SX=vS}Quony6Vs?or(en4P&@$6{WA;mQ#d*b zPSJhOY&-3SdF*VW7QXL0qDZBnw%!g}XlWayaa)@A=;3-bmqg`5^vZ%jBKQW&>n7+P z-}H#hXc5;_((KK;K2Y^~smjG-(CA{gRRAnw2m3^*0p_{7x*9*c*+}?~i@1jHrc)U< zg~+)Iv8f*`bH0>9ry1#zhll=Y$g|twJ*xzo47*{FbFI-alaunzMs-Lvx2`e+6jb8T z_tuQ$Ezc+m;c`zFkt-e~+CG_$F~|h9WG9;_s*QasGTAw-Kino%KWFeC-jed=4QCYI ztW@;uO4n_*0c-m6DugVq)8l=N*C0w4>`cWtPLJmBuf;YJRPnvypJz`EPt2<>?#gJX zEsnZqoka4H^!vys2Sc5Li{+VR{O-U*me=k6BA{mNFKn<`p+x6tTubyVyLMp&fD+=U z%}a6aCoEqzo=6FQ&6EJkZ6iS6L-W2c!>rb!;ZCzpPl~@Hld-oh`IuPqb`^Ko(+;XF z^tBQ2D(-gWDmD_PjQnQzB*7hQM<|XvB88dQZn_)AurMdD&vp@b5!huA!(qZ)BkR9B z2eQDTH z`C%X~a5!=n|7pXJwnDeF#HRR+%3TwnJtVzt^lgc+Txh2;I zvO$lApCe0zD|gd=rY2?ya5N&CGL-@vUd^nqM%8o~lgqAp*Ox*JyZZGj#N?nzbuu2iZ z4f|NGEe3Wz>FNJahwvY;E!bAR9#vHT2IWb2zK{EMz!kx(|*Wuqv@x zuuM{=&?}9KTi4fan8FW-uKg4TT6Y-b_27J_9qRef;IuQ=R7<@oV3@HrT>Q`E1!#P* zE*Bg@*k<`i$07d~i3tBQ9T(XM(r=0`vttQVZt%~cz6i`j>l(R5m~*i=u?76QXg}(8 zBjbv8Rpx8whkkh~?VQ$ps)ipFMc7ctlI&hTDXqTf*PctU=}cRszh?IENghOCvQY6k zf}MM)&3KR`g7IY2dJc*J!+$APwbDPgqutg7j2-hJSRD4>X)zz-+8EX$sMQ1*`g7X!yjyYAug0-IxbWd7LK94;k-j6Z^&$&if@CS{RbKVD6tw4@vqjHTeNoK4pe{!88 zazB)1UDRoNL?*Hm>1*jSYt>vnJA{5<7ZLhqNy}<~{k*z;==`xz_Yf0R=DJ5ZeK4YF zrLP6X$ZprUqubc1K(_vjQ%hy0Z?5cQ9sc#!+{^8hRWhn_Jw-%2r+PA|sw|a&_I54Z z7UtID8Ln_!_AePq;5w8~*`pEg=JU-VH|KW}<6t6Qy;okTfPZ3`CFwpx2 z5?czSO~lTp2LHz<4{LE4nJ0Z5j2DHm&I4Q{O*^_>ZBL-~!@=?rFKfh2>n1);Ngrv+ zf}IJnz1E5^&=E81`37>g9YwfiK8upK*3!wy-kF(Q684NYW0%jIBEk2lc+%pE#269q z#lxJ^vStv85EvVdy$BC*q>MKHLXxb8P|<#2Oo{T^Gblsobaum5_kQD_6;DiY38{Kl zNtT4re^d>LokO=m1n^`!4RpH*=m{S>wK^O=u$(s4@WYBLwuRWCGMghxE!{;!gZLB! zjk^T+Cm)&4<%o7eqPb4R8Jt&lcP=MknjfzXz?2&zAzDr^%Y$VB{2`=RueTEHC|ao5 zrbQ9nV@R9PMxEm!MVj`-7=Ud5@km zIAt?|qIGF4VK)>-Wu8utep{Tq({)ZzBPOEYkgnb-P36Tm13=wO-_n+({o2#5Tp73> zC0t!6b);~E!#n-Qj7}NpCp|)c!%z};x-~>BgwHEC7ISX)$n+B-0JOR)R_WJ_!7Dus+%N+PMUtW z=1{ZvNYWa~KPVtlmqLGrNJz*w~j_P0dW9B6{SV#NR{2kH`UlK_b{R zUSQ#qr+^=jc?njG%#6c&m$IKEN&@Mz5lisY8p-!8c~8f)wC zen0(a^f8uwczA2-AKPtAgwRp+lZLMk0z{+}y&eWWIJ=M7?Bf3F{=a!$;f-ij$d3-} zOG5p4i4EnD(OU{T93=8kv#@F@;F`}gI)9sU+I))!o!c8HyjMlFIlWU@LfOs)1aBHY zCUc7RDDPvNW%;6gg?tcT~4`aZ=1( z0`H~AK(9Qdi?Dy*G7~$yl`VMdLHoK&qT!WE!-f!qXvnbC@{66e9sMEc5sXzTLK?e#LcyPxdJ7xnU@ z>~S9ZyGN*aKY_-qr=02?If*12ZSFgnPb{h-;kIkX#YF`bwCL6(YER3SQ_ij-(&3C_ ziq2N6#`ff9&u^lFQ5ZT_2+bshOb=dO9o@lv2l9pr!ak;TU=903-){|Y@ zFJZNJ2}*dvMlIY8eeGeO!Kc|t;7ibv*FT!l4eq)XB>X-<7!1Rys3+?wr?h$G8=F}| z?PavOx1NU5cDJk#e$t9u730=Q#=~X5W3c`AQHk_YoGcNPdjDPjyj_mDD2gj7rselW z92Fpz2`47aR}40x|1c3@ILPzv+T&i{6yIaB>S_C&@9eSPyMI+%eWBJ}A$uxaD{3}5IeTo{;C+)sPgL_}B=!ihv$mj7uejFB<0kjb9nt;rCggl45g=#X zk{M>N53+DUYMWjuB7Thjrf}nmyk5+r_|40GNo%u%senSs1;l#ihYA7-#iTBEbs(3e zTu$ICozmnq2p+{P@L^|2hKj+StSGiWEu?(`&iRUJb@Q+@hJ!CCj0~amE?y>|UYw&Y z9{FAq_;|136a@=ykB?9}5`b1s?^|qC$Sut5f*_NAonRk6uX|v-RyMC@S=#HnWeQvr zwdBWkKfb52U#H%uYXL%-rCgwYkk6QDW+dg)QV>vg>IxqtR%%1oTRHg_MkKs#&z^=q zX1cA6bv0lP;Z0$GK(!@ARS^G8)uTu)UphJhE!e2Acaomgz@l zbW_oAelhux@HNh_lh@GL)X>MhbF;uW#&4DPWKBkf!}aO|kUZv1pT@D_kPhGO>OpUN zcb~NvIV8AKOI4TkDGy}$s`Zt;HhrGA<3b9hGQ#QQsW^@=6zKhu=l^=jmWY+w{6ff% z75?2I`aVvd{$i$}7fhKrHV(Y`4v3&;x?&6mWbIM?g5aNMxw>KgOxFEKybDxS_C;FU5~^8ZMNnU= zxZ0ES1|UwXvCX7{%0NPwz)J*kvX4w|a$jdJ+aZJ<$a75|kC`O*TbJ1Nj*J2{V^hrP ztLw@M;vz_PKjd_~`$Vo7aRrMHBFksi9a5;xdunz|rKT&Yvm#xN7L_9pg?!JV3LkZh=+XdKNh~n= zv!9*cTyMBq-RP{D?kqhsGRZ$M(%4_8Ald1kQAu>ndOCC})BD3btft{vK7f6!NU*I zsJa_odcr=xHpa$5EtI(RV((be?FaQ*vz6K#MBc2Y z@}f*>ryZdz4^|1Rj@^A&k_T&0y4}DUCXsW)$vi8;_MUXeWDha0wN#zFOCU-!!&>#JyL zlEq;5KdubF-(Awv^v`cghn}MZ=1j*tc!^JkA9HJ~0S1}U%mo+}Zqw@IJ!J0&N8W$Z z#bO5Z$*6H$mzDfB8Kd|UM&^QJNkt(b|I9lWgbL>h#5W^ow)LWrLLd-?hYinQe&8Zm zJ)EDshem^;c6j_OK{>#|< zD;${p|5rE}T9G|wZRp7_{C*IP%84BXm^0 zDB^wbgS*@EL02b)N?x~5KqVyHYO$-%*+e%lH)M!szl+*l>Xyw#vP>$kP(;BBqCCnQ>AY|>kOM5N3o%qv*HNI{FR4Jmf80q$^EL2vd)W(Fn{}0mvR!S=Q~|s zK-RavE&U(Y^%#2n9~$1D7H|rVcl~>}h#e$;MBsnAzzq90(cj+|e)@kB=5^35YQ&az zuh|zgH~On>C1U0SWmJ@&`pm0q)f{j9?o?qbJPM(~^TYMrvD4-PrKLu$ZPvcEYgyl&bmr!-!q3y* zKr^x_l_k)rH;ykX4E2PdMZf|V{UZ>pot@c-lNfe89#0Up|GcC^_0|iRno{GjS*+C# z(=$7C&j(HjZ*OlqI5=Q$SRKvPG%uf=EqibKA+$vu$(J91<-H+&f&rSnet#E0s8fX`|?5Nx#=-t;~uDU9ZP< zq6ovVmSAjav^3i6i?BP|u`wkeAne3+`Ku+pfodJDBa_W6>|(x|-_$?CV!FC*lOlhIdqIw+%+5R=LaDzck&0yZa;Un;Q|Wze}O9 z>DMe&&kF9X3$wy{8@x0&>zwR*WHH4hf`)jd z+3|^K!SCd<<3XKeA%guhdl&HAssB#NBx>EL=d{e7n>MuRwJ+r)y@@TqT3^r?q z?80Tzk0IHJS8}f9J_L)6)%v%@Lx)^vA>+UdK4-Q6y$l6YZbUw$Q-y_`|2ERApwPdM zyUjbrb2cO8Tpr+u>Kk1KERK=SkULpdYBe_k9LB^&<)>Z(0xL$dyjWmd{xMJ9t*AF_c<~fU}NUW8h4;sH>qBi1*1sNQ-EUhO&qDR zR6q%QLu0*@wC3b2@901|+=SnSpTr;A^23uhsm5lI?W429CZ|Jk>QoF;)V^MK`>aaG zE=PnEa{Te4#IGEh(r3nvTZJR9-{iX1o}Uzw7Z(>J$fa}h@}RLxX4t*Q9Q2S0Z35o8 z6~b=@^T6-gRBg1OAC!_}W3Zi5L!`xQ24|hVtSv4vje~yA2#A+1p3gz?^`rWCEz0(@%eUtZ)*e}>%e?XWRdj`1 z+uTORuxD%v_W8}>g$IBc{5sohR;(Dbf?Uw;{NMA;enFQ__hdh}VKJ~DM@qq0${+GL zJ+Ft!N1!M&*JjFWPGi@6x}Ftkbcc)bvWBOTv9U97(~UmMIypBZ6gAxAV=Lc$V!pZ| zzqwJea)Ap0cSP)HF&mk~It2waJ_vj~T@ZFngGnPl8ZqrNok_zcGilTb4JV^z_FXxk zapS?1Em}WaGqXr1Gs|v^i%euwBb6HzwOhj?-eU&_%LMlwIjvv2duiLnV@(E$#!U9V7gTHmmvH-R~az1KfKMWi%mC z&%`9ZydPp2RXJLQiV>a?s)i>KlGLxynPbum>RfxFV&rryfif(D-~H9}EXWF1w0va+ zTlU5vXZOHDz12>iQ?G0O6qF;gZ7#>QP#ki^1ObrrR|PenN|??DEn?H+vFO*A#=PD#P9frX?k2 zp6l<1OS%92^UgvH#IHb(&!OgLzxI!uoPN!HYcVabtI`sW`ndknRea4!0jonqrl@dx zz}@;J4wkHl^12!({#7*Bh6Wt@{rPL#>FB?EG%xR4ul5^B3T@s@7Gu`M)zofv^QaA` zcM&o*nWdWO3T?I}6}X?IbQ?cGStL$c2sH)fD&Pu)tZ9(QwCqh18ye5oBv^S;%M7g% zLHg|(2Coo?%*nnR0!6Z@6mhFlSup-^n8Z;?F;zY@xcAaP z;K1}6TC7wP%{t9FiR2&X6ahVDykHtuie0ugdDt`!6qotV8&@a73KEX{v?U<9FMU+8 zN)SvD_u;--VNH&&=HaZ|O4_%vEAtjZH5zEbZD=;cCD z0pifmP&n%@edm*%zVLy!gsA@AxjVPZgPY+98wtKr3*qO_U9|PT_)TzF3(UAl3Oxdi zzUpI1=_I%hm9OshQsREj?%P&9<~Y{%9^|Q_yb4zn>b5ZX#M#sOs>D$Il~%W`N7K#i zVZT%PC@3WLLzocB91cIoA72{2@eG=o;~RC2F$N=6>ux+Of~NBC=wwdc^}NEbOmqU} z-yy)7vH}IN-))Bko4D;Q~P+3Ww9B z&nkj6RQWgp1m8T}1g>GOP2s|VIfHbA(1J$s*@yu4;>H{@OLc*n%oaR6_XGYJa{WZJ zIWw7q1oo(P4B!Anc#$GQIv{@S$wm5;`_o)u?6-oi=#M!F!0q|mT#}oU<*@Gc_p6+3duX*Zypv9rW&LqCl6HXb`J~rlvA~`hPKM zp>Ct{ITlu0wr=6bOpLO>R-LfDxNKS19Vo3twZ@z3R_{?e5h$Cs+P7{j4DxYNkM>!b zSop6sJ(caBF`;eAi&ob9MF;sfXt5t2;6%~zZ28$|u!?=)uki(i-ZX!uR-_=I&#qVF z<5h|J&zn}nPQ4Jr_wxVTGte%#-|C3eJC3>F(&4`%qm*y*`mHwYJb=oKrZ#u-M;p_4 z!C7Csv9pW*=M{_+HZEnQ)l82kLo)3v1=&%%R+fhM?33!hclC8SCjP+{wZbhriY8%SP4Mdfm^pGW!eAJgq3MOPg{%gJ$aYc$59u1sZxe zAB`Lelp=8JPv#tQ99)+1HrJhB%)Zij4|@Af<+E_q=}rM4#}O9loXnU@89_a69| z%cPxY^F%?#pZA>#J+!G80${-n$?ytdj>?@9U-Iy%o z1ERE=z^vFWBsDCx0D!1CeM@Gnh7%9}`&4qzm!H){l%HX(FK_& zbz1*?UuPn2)q}}~T6`Qj+5sDu=a=sydg{ROmZpQoIsTy7SZ-kj?nOo7uUhp@b}&4* z*9H(7@e4QClU1Kp|7=%Hz((%9*QJ4z7K(k;T)c*iq*(vy6Ib9h>S^OK+kVx^otOOo z%w!TO%PF7u_|to8Q`LNO%1^fw*BpSj$$_CUVp_WS%?F6!2iyRGobT;)@!9vpr=anH zpN0koCW2~2G)%<*)sn3+KG0a$&bBAWp9${>t+9A3Kd#Z~l~JMIw6VF_4R*ifRk2#_ z7|j(5`_Eq(A}!Q08MMk9ShpMai4dX)dGr<=Ej7Sy*UtbJ3MhrG`YUt`8h&|xIN7INA-&bE}XSfDC$pucsp{5!S+IZ({X-v${nI392Mz%Y zECX@=l7R?P7p2noV!nOA&q<8D)RN7pgLj9h|50)ZTO!nlAVty;QlxZ0NXpXP>$md8 z)dimBj}GW;kmh5$3XO<*wf zYY0L@IttAJTmeVYu2v}0})vGsd|LU%&DF4czUn>3n z-CjGZ%79)~kCPqzYap46D~P{(RTqc;XoUQ)jphJ`I=^~FNcW%XHAEHg=hdrjPKczq zx`)AWC-T?q1>e&r($E~JnOUl41pyG4L9(^@yH|m$vw7@kd40FZ(vAz_y~3kF4S5^O zWthAK(}A$C0k=5)UM|P08xl>yTLQ7dah=OKz&+7F1AEzNE?*uui3;D$Dv>$%;>i5B z_?|m?biLp8Cxk;X&vTa~Gb^hxP%sewEmj;Pp`DF0gwKuCv)3v5Kx6>13v8jKre$04+5$Y`YaPzOc z>>w7;kuuP=oL;C+N;@^Y@G+LYn>{2DirfZ3tr`;xICp45bc7&yx zXB~AKwa<$wtJtbKp*_SAxM*RfNv*(cT&HbyQ+}Q9WEH!N=$DUBPbTfIt zMLf2DUAL^`Ds^m@pLC|-DEVHZyVeaX`TX{}`Qges7E1DxMm1oyAZ#$#-#F|?F-rat ztI#pRzT14MXlrov*E(kJWMtdC>9~sXrRC-QZfsuTu7KEnx;^Rl(u=Kd+E@XK+X zvKh4B+(wO1t`&@Z44e}l78OymD73=4;Bk}qtkaPX)LPfjNA4VzDY^aPJH3^ORc!fBH)C$2ebhScA+moX`ioVC!<=*kT9@A zGb>bk@Y!pyaw>|?$qkOa`W{^xFRKRPzHdDk{If0*UWq}YOBa?$T0ogl)d%ag;T~p4 zsa0>KNLq?sVtv3NtR{FO8s&V-aH5pO7dolX}& z9IwgWHpcN*yR1t$MyP(Gzpsp$Vr-mSEgH4K@l21=@l7(Sp5T`tx9=#=%X>FGokMcK zs;&LmR*Dd^NqI)(;uUn)zdE5ip%OHDNfa<;LQBV%bJc)vL-W_&T-^RON#u0#$NG=n zHq^IR@#ngDWZKEp&miniN!leoeO8TDd>2s=`dER@@T~>(&_?S8zdC!1$g5Sd@{wUi z)`@P4KU_QSf5}h4%eyiI3uq9wDkThXv|u`y_xCDwI-(R(#a-d+l5R^hR?MkUMgl~L`*My z0x90p*ooApK3|%rUwJgXu9#_6p^ntqOfdO|Y|E6yK4{PpaFn*~^eitdR)&L#oA!t-jNmI#AQ<(iU zUc@4)+7=%Z!kbJ;uxS{X0HO4vwqh0xm5^1bbNo(#>x|H@D@s1RkaxoExx(@YHmndc zhL1IRmeEI}l$T$Gd#$x}7};iPHCOhg#cPem&Mie_%I7;5O(|#fjt=rT4Hon5?J`!z zhW6vW!82}ooc@|zj89bO24%XQYsD}6NJ8e8q^>>K&s&^~UouqiBi4FWYBKZl7J@mI z2VYesUXo|u*k`zgjVgJRCbPgeh+7~@dp(_Di})vb_%-EU*&+R1X8#JcCoazlqfzpj zL#ZjK)*Ozwr$Fy|7wCqZG)kHkU z^n%SK*j%|1^2x2M7qpIcwDa-L4cYTGhR^W@F17 zv7WY-UlzWqB}UYL%hW(WB<@-iAA1;6Co(hSS%DBD<~KeCGXP$5GpneI7g!Su()&{j zyW7GURWuJ2g%x#!pQ}~Wt-urVKWQS^u%oeY6V2VsRCDc%J6*B!HiGIMaGK9_210ht zR@sRJqul@edce;W69T)5^Uarr&8KP}@JCN&f~~CHGaZxxge#GJ4bT>G;I_l-{+4%u zMhP9^Q^vR0@tKHD#hK;OlwocKeO05II;4vTz2cjm!9^Vs01-pv6%+g=XzubXLNpOa~Cj zKx#x3GZQ|Irgm5GLjl#;p4VW7&M=5toJ2}aTi1STcB)=d^?k@6b=;iP?PJUi!F#4b zljvAUH&jpkFByyvyop~d;MWe6V)Ypvf$|sJc;R=C9<(TtUG_ zZ0i%ltzEGJ2;g#}VQSsjE6Enxb-%F@qE_0p&W~UGhAmr<{Y#RhqAz^W6}-aRJX}Wz zWfZ_Y-tUVGGEyn+mX2T@re9HV*t8Lz=^_?vU?_=a^eahg0!_yuNIUz)of7e~SSdh8 zmTC{c$QL?DM&CC)-4AGW_2Co<#_!6q@{2QM9 zyiocAdWPL!NL4w$b;y?4i+%re5v7wwuj0ufrXmtJ+U>IN%rA{7Hn#4x>1e7sn+9(6 z8fZIlnUp6waz5|pL!Hlt8*g0UoP$k_wv9VV#CKA#>=f{FcXR7m+#2;eK4ZU^SXvjQ z-F`)`+&y_b-$;->@XO$2;Dc2p5t}a8xsr1Kc~(EODXjo}{h>bcyK|s0y(#4ujF^F&6C(8__vI zCRXjvz=O*$0k>TdHa52Cj|gpOR`(DsL%Pe@q|ZL)_|?jyry(+V&8GoFssJhLdDXOp z!EFahH9sSTWwBvXNxFP9c8g!TI}wk2pG3#hIP{BL0RYIHoVYPTdo!Dfr5d#qA$9zd z*!+ohcN2jWK=2s9h}goC9Jb72B7ICH(oS0Z0IsPvgk+=)X;SNSBYiBF?>Gmsc(PG}+jxx{Da5h&O%qkbaVPW}mqxrCDu%dAX(%EyNj4Wh=0F zboJXC3FAyrN3a5aMAbAq?oSFP60sIs4-MQ+9Tft0lP`V*WkFSPB*zN45o52VCA-?) zSYe*NO>S*`Q)b@^)eZ>>9DlmXm2phq!?L9(`us*=M|mxEs$d&r7NWEy(_2mgLS23R zff8gsp-j>A8Tpoypk$6}v!hJe)XM5_LXd&hRGedtlvUqv2~yYh$wm9Ei+n{Ve5dP; z>3!%I+D%kR>zBUK9wtmKn4$S5B!3e=9D1LpWDKFnqe0|vbGJ-ZYVos}s;$1MgH5fP zSf#UtLI?Cs2sPxOgnUu)^jQgIWso{YS}B6L?GYFi%UFcg_UZdWriw4}j&95uOUOlw zZ{)oS5O;}vQg-xS)b)pvVP6-**r_uR)7(y%2(X52Ik_v8j6icvEg?-haBlEwmd7Y4 zC9(V?6tyTR;ShiGwCBVPC^Q)))<|qWfi~_MhfX3_+~mlGY{{n@QcE96DgVzu#OE@I z=}-^QCuN$L!#)!dNx$1k(NIkVL=~E>ssR_dBg@zzW=<}dqr)NFf(6lWkQc7=F;F;M zG^I}i+Ho`M?y-50Cg9g30nQO37ty8rAI~d+@lWIb%+YaWNc<&jK~gdy$5^!HWyeV_w?`>2HeU5@ z1}nG*<~R=_TUqypXDYvee@v99u}2Af60TMIjT>DChIOCeRwC+mLC8wK!8vrkV6ZnB zVJ0mzAn^PUrFTrRd3-eSXHiXQX8Ek7(vr3!G8!~(P&k(|R8qw<#KuU&D-t@9A(zh< zsFf#W7yDL5hdoNG(tItEMp}o1b0?OYi#wbJR?^h;WA!=OM{|Jde^(D$^e**RLrVz7kMPochbqvdHyS4OKM~ zI-tCOj1nfZZ}t82Wr(7gh&b7S6uzl23B@tP;b?vbr$jp;pCAjR^`ey4M$4l5N65G& z0wHy)_|6i#WMWzZOU;c&JCHPgI3UfSru`HrS&!rGhV0sEwyc|JX?fPowk^g~6S@56 zoy3!9FzXNqK<77@jtQegF;cTSKKv-0vkvmIBSe|tBwB8-qel~LK=Z6D>*1X5FWbGu zQ1mJ?2i~W+Zl~+JxVz#tn5iYxZo8SF=J7^7Jb1ka9?QqZ;rY}9==zb)56M_{S~EKT zy4Bk`ru0@Vas1DJ^)o3I;RWEAZjv(;VMAiAg+FsYyp?@Qu`@ZM^rx5f1mRUJLY9s*m_;pA7GML9NN9OcVo5R%9`C zunT#cGqP0xr1ZntBiIeowi9=$cv-@FTu5p0@PZ%3*gU*NsT)1TdGOoQ{c2AD@QLOb z{*!K_#)S07uSFL8L|H58PM*BDB_qt#8{FW_2&^`pW#R?lAq>UIlQ>m9<%!J3ia`aw z-( zT7uic%(Uto|$h50Ny%Z$RUKgUk>x9co0!6W);pc0p=Z z9%~VQiU{@MTQPEEH)6^hm{tG4k?BZ_lnhK!{0zxA ziDs_{P={9+)(c{mt15!S6Rl=`r+F4hK4D-eqP<2#JtsCdoGm;UHo;c<l_o6plFTEG}Y~Amt|WpC+5|V_R72Tj|W@5=XfsHADn()K@=k?TO~Wa zrou$&)KK%(!kZApZ!Ik|f(P0UNOSsk&T%7&9o~zp@izkKiox>AX>+oA%KoU5!pruU zo9*HY#A~8!(NSli06T3P5bFswijZjljj`5NYRapjA*?!MAPEUbT0$&_EObqx!CgU3 znN4y`RQ~(EhKO&|xnTIJ2p*Z=7HXlLDAWDis>5xLddYI5+U)-XC|}62<$$;@Kc7jw z9#8~)uXwv&j;*871?vxj8ghMNWc+VF0@3JZx9MQXzbZDH$Y?&PVBm7<8yf@Cv=Z}j z!3DG#9gm>Oenx6)NTVE)YHkYE0J6qvA3oOP)D(yjn06um?(UIlKs#jd3Nr&*%bE36 zj*f;j7KueO3bVbTQ1itqOo<~xo}qBwz=h>)gksgjwk#|ZfIidZed1aYYb zo)}7&BuV5_9iDaw^mH>cuQ8|@8_AD&Xo^}aCI%f3=wX$dZ{p$5I_9IZM!=Bk96 z7FAqIzb1lz@d!;DZ!Az^H-s3IqoHKTT|x_5(V?w8dAapO=b_ipO=LS6X>pUl9k^Ye zbfjr+F13U2WNJh6gw>m@ug*Y9P07x`e3>O+Ld(ks7Ds~(3UHZq2z z4#_FuWz}Uh;M?K{nkp%~1K)QyW;Qyq`2J;(5p-{gVxagm91-hyvdr7Q7OAjnT@Qu1 zs}2+MLd&>Hw`T3{IdI?O@#zjiny?B{;d*L*s<*#DB27`XSKGu9WJE&E;hN^!r%=vJD2%x zhxE(3g1p$UtyqFp4}Cg5YUW5o3a>_m!59KKcCrce%}+b2H-U+IqCAz_g8?z7Ao-A5 zWS?wd#{}~{;gR3!lmD1f>7aag+K-z zM9clqwyp@Tqz77Hg$Rzys|zk?M9oWvY}cWAAo@)(U~shd9TEvA*H4k;SIAU`cAk#LFGoPa$Cl z7F0yLIPNoQ-ay5gMkS!w<a_~+Hl)g-Nnoc>H%cyb$| zLJSuZZCv6ie#{`!8`y@`fO_nC1V+%NR%C-bdW8HKb5RGQ61XlPqs}h0zk^#5N|tf8 z9D{ZE``7Ebs#+(ij6&(fhUdafU9mEtoL|x8UXox~0da_+mn5GNwT`hb(Z2|WvWli6 z#INa2J~<*l5v4!mPnk>m`>8>98$Y~PHY#$?_G_l+gCf0`R2a?s5~(EAu)bVlgH8EAT58uN^s zOg7rYlR0m@^}}_+d8?$)rRxd_E@RGvp!^S!I^TF5>UuQqS68JGu5={T&tTpljG_UX z$*L?eH?eTfI|#HJr|`-EespY&Ttw@rMhhL#ORqviVtMUb2`Zd5w1GvKSsqAG9v(6r z{x+Hv__=_b=zFjZBU$xCX2$QX@O?#3uCU%y6Cc7G8{gJ&LE76LzWKlUKG64L5|zC< z>mUM0S{h!Y&#^^IJAD?PYH?D6%?6*dtY;7H58FTa*prwj=}?d-VNXUB$W04?#FDi9 zXmu8ij>epx;*T6kkd?Ng2?c*`s)t*iP)vsx%G%*THbaB)aSPZ(8G?#TBSZjGEdzfA zJP{d8)Cnq;v#ejjo;Q^|n>;_4n9~aaqmq#-3SNWOu^j8n_2kU9eu6Hd`B>XH3x5V( zv9uy#aw|pAJ5OwLKG6i7PpO2O+DQcYVqiqcOZRiq1JKd9@Ul;LQi#47S)kbThY!Lq zl$7WYyfnUO_EeKh^(F7Kgp4BX+fWk1Slj?xSs6HMw{h0n z;y5@`plCkQdxUoS@nM0z`U6?UtYT|yoc!dRaE$I^l6OzvHzCZUi|Lh5v|g!xy?$OO z{RdW*eb$bs=bVED^u1q`73950$jQ>`%8oi<%85~-fzcmgW|sIRKDXU^u0|`$1UqD8 zeB9q^)LOATB8N-({50pZE@EbM74qs2ZV3MrK}olyfGUdfiP(6Q0Qb8`y&_Lu(tV%X zN8>zO(9KT+B6jEx$u|b{QuLA9|1A|8;n(-xS)?TFFLCO9xxlyn%I$9gr)26G z>oyEPhIjBm5rL`hiQEUYPP}0^Glu^G%IDOfZJwap5Dp*ehf$!C^WiKBWcE;~X~~{0 zAk_3))cswh5M7BPP8Y!}Q{SRsh*^W~eT&9>abbENGtnEFCxQSQ4 zuR2B1aGxrxE6t(QsLtKU7abNKQ=!uobXy142_%8BY4`-I5{g<-P++H2k(#*jL5w*IcX4^?`Nynmr%xy0x%%-MO|aIuzC7pmlN=RR@&H(VGSM(O7fyC^E*?Ci|?wd+g#j~d0N zQj=Tp*mmab(kq^{-d(EupyUD}O&-E6JL}!+q?3gXKj!}!|D*o@$n?`!8n;ga&)wb_ z(2R;14@wuBA~)n}de`@nZVDO& z>~V9+T7VPi_em@-?#J9lr<^1$^@;X1_tO^!$sX!QZhL>uqRy)qQ5hcj&qMQ+RAd<& z-IeS;2}=`>k6yI00DJ&`*K~LR>`TDpJFNkn^OavBD_VZXw^5&v0#$F;1%eZ!c8vpW z*9Ve)=2%|Vm3j?;jCH4?xg#9!72GqkH-y(Z7nINWsJ6WAc?jvqaG$>5Xl;2kPdeox zQkEtt`6L@xz1jSgTlpE?E{}4&F|8M>pJ3kJ!ar&4QtdW=ZjzCc=lqns@^Zl~avA?O zpbvT0LUsNRJ_+5I^i8kKo|0`FV>fz;w1`46|;+<2dB zwhNVDC(pj>!oDsy(M;k4Sdm+AV@4hb$PKuKA)G>ZeIxv;dw-_+xoIEpPvq9Nmm6&u zd1vT^Vr7@SV+8-c)ZBem$Ay`l(`a%q8N(bAF^R7t zC`}H>ifIIXk%E0~?Q^4CpH_ggavlVHCFq_OYZw4WNC-C$PQl^U9r=GZ|rnO}vO zgy1J`cy)?rrNf@Y{a;DUNsBcxMWubn?O`E*7xcP}Wf-`hV8;_mCWRsXtRajvc&@c4 zNRVAwhP>+X0&jJkAe?8frr}&tf+L-TSH{mV3*zJM4Aup|1%d0A8jaDna?H~&AVtO>pC zI>VkSxCOi$kn`T#z({4y18M`7^_%N^Cx0fO2L;bssc1%8veazt4pVV-P04;{mAWJ< zmJ^((deGpjv9TN1O71M9a)j)u)V&?6Hm;C24YLZ84dIpZqHg~5$MVL;pf3{H)I&yi zpF9n_>R4l`7C{uW7huCm~=Cfu9$+Z6!@5aUdevdywp!q0k` z`pq7f(+MInNo(e-ci*PvzcBz!S@|8!@WaTCii{;E4r7iW(a~H&>~*wN*;P>p&+AD? zkpPpXRWF8$OEUpKzu=O$w{_J&K3nS&T??NYS;9ErLiCM*>Rs}AAI;tT?SjWI+W~hC zY_7=e{wB1A3?HUNw@fZE-5o}rZ7X%_Q?01I*%E6z>YvNDKjOSBfQuXETFlU;ZY+iV z4kTEVjIkBCPz$MDs$Hm@!VhFpn3l%oe;yki>|&aDOPl7-WR6ycCWiH8jJw|Yre@vR z8Ldqt6N?7v9Va~}i|qAr=Zs33J0e^M*!6tPNp6F=7&{@tb=oCYG)>gpTJ6{ik){b2 zT>L&)C~s_QCRdmLfu3YH!cA4OR4*OwM8}Z6&^KCr2t)8(mhe{M;Gu7GeJ9^=-Hh+7 zjg~)rdTxoWEy=G~UxA?@taj1lrodKjVSjsZ$u1(GT!Bt5!f04CnViKt1yTE$pwXGw zNg65ew8=$ZjL0lZl=*yUDO^*()$xYgT*iR*R?Ojp?m~_6B|?^7#)~-nt40=o0jYhl zgi{t+E$XM!*QO+Rj5D8^Y|rE)BxT_E_9?P35<{{!wPrWp`^@mNT$-%S@}G8=@^^0H zO{;);s-6JK>a5%6EHoHW2n-ZFSM);? z3u`lzVFp{~rDg4Q{|~8Cn#+AJ8r2%-qJ&{mr-vR@>y`epD|O^vq7fv#t5=h6kM-IE zA2xYVyo88TM7}?S#;J^Xj^DIO5taKF=LvpE7~~SBRN!DP0e_)UsH(|UcKFm-r^%~lNv363|&dx`y=>+u+z=v^cZL0%#gx&ta2kWp2-t7@u19Lui0 zq$)W$r8`)W94*)y&a@FM#w4nbwn1Tp1uo~(sdI#Z_Mw((@0@jTOfv{o|0(BM#*DHd zv{kzg`B!~pi@$yi`9DSQw4>&!$!yI{NoQkHi`xdRN46~jWbS~~gO)zR6LOAgE zO=Bs9)yiyI zD&OZfZYCkGa=MwBlTA1nM$JM*==7(I^3U*;*@H~q^IPg;CMc_ZW9Ws*JK)>GJ6vZA z{O?0dWi$*dIR$|jk9dXqmxoZjgdxKL&*g_um8`j`uUU}hyvRcxFI`1W5j^VlhRlLq z&aD}P;{)X6aPqb_JGNI7;+y=jkJ2|A9Ragbev0nV%FQlJ3FmIqHaYS-PTFcY{VX-) z{kFrffpN^_9UXzEe$I*yHguSAy`g~lv$kAhD2TW+1F$dR;SzzrC*UwKirrAGqLLlr zZ}ssLnoY-v8Mlsqe_>erzdS$-+zTF;3;5&qA5_wtv%Wdk(66FNfFQ~=rEo)O5?(0? zU`M^y_OBbW6K)+{+1VOKbi1P&zAUS*w1N>0UQpp3ozZe4LK|>dT2n8jF!v*|xk*46M13Ay}AY+8-)oio660TulSXtPc{9zotx=3q=%%%&HUM<&x3F zYyT*31ZmILbXyYYn9iYdskL3HwK(L&-{4;P@v8wTFos%_&4s~icHi;=F$YW$rnp;g zVn5#4j%>EtKYulYqE;Z;Dvp{B4ZErn!SR%@0jbEY^cU8tb>(HT81RIlAqeC~xy?d! zghyNyYU&J4X1XE?kM`4^cR7rIEfa>ju+k8MdWWG!@+Et)88tVeXnZ(2`{EVrHa%0VK6S~$1L1-{DOF> z-p`BTC?+CurKl$@T=7RH5($~jHj@$si%Pt(O`SsA;)La#P; z$`L15&Dp!^@Lt@hpz-+6rdz5JN{!paB*X_KczHvGj2wCIBZPVTGFrm^_D-ZBT%kf7 z&&LcMj@w9VIdAvL1S{7NNv<(F#I_Lp;>-h53JLQDm3j;07)*l2Aa-f^V={;SL@wLW zprUJHLZajk(e9${!PyR{)FHCVB)T;8z3>jEA*R3`ld&$*E6PXzj_Ir)v1=^pB7Vt= zX}Qa$))wU)eVe!7@oU_K)rt%MvR*`Y(+ozG{zqI@C>7tq)d$Dw9h$A_8k(oqeR8Rl zMP=1w?c*cr0EkJt%;&4^g%u`7_TG<W)cMs$*p4br*@xCgBw{TPE@+eNMRR;MdG~yTbhP zcti>2YL|1!ZaT@%$P&V@73puxYKua8lS+jzU4tR9p^HcS0SVDhTG~+$pL84K)r*XY zdS_EMOqTh&x-zoPC21#B8n=p+qHTO!yh>cU;MuCxk?X9FL(JudX~as2W8sBPn0e2u zdyCDMBqQ^7DRcFs?q_R0r_bcvH(qwn`!b8mjN)ueVWuo;YT2gn4kN*p1-5^u8a{WN zzPcS0aZ<%~1T30FqI{e`F=~$?FuSv=E=2{SQLD zF5LgC;1so$78^be@^ci+|IMd(9sW!z%LN8iCVy)*+JUL6sR6o)dDct_HS1hwbP&K9 z2qKHlLb?t$V9|d-rp5L4<9p_Lr`yiIOiugICO`B>Q_oG7tQO;2X4^Tv4nw+;lyNo5 zJv2gF83v~BshHNO2?_K~r?uAYT`)+nuN}&}hy4?xPuHQJ!_C$%Trc0ge^J-|z*Ku;0*H{fmL3IR*Xulhg-mcev ztRViPu_a3=_lmoVX@A(lB!G8yS%I-Qd^#GSQ9!3C6**V_$xTR>s$y2zA-L-RL(|6K zYkmz;-VmS*@N5b+b_OKSTr^~i6%p_woRa|dg?Gw2bnR}o01ZONR6WS*y+N+;efC}4 zp^Vr2cNxS7Y3aPf$x0{kq1r7lpf#yngX64SM~JNgaypwE?y=kPxMUS2d@Oh=w>MNF zi)n14$m*K?baB3@s`MzW+E_&)W7l7?9Rf-o6~CJDKWDX*!Er^72$nQk0P*0O=n?(^ zR+C6ehh{k4_ukG3{+Tpi>NE=g6u2JisnB`VCZ;C`u9?xQz@UhIt&_nW9-9R1RuJJ^ zg5x#nV8QP2D&>UW3CFc24b~Kac1tLxg7E1tXG-DEwh(fDkw345i%0F!`mW0x)pzL! zdkQ1SNwv@{c@i6aKHPr!E>8F^LVzx{Y%RQ;puNRzizb^p^xwx_nMRNbm!#O1HDyls zkShjjD>fK{6X-b8Rb>L!D>vv08DlXCu&cK|(LM(8si{GnWV2{CN^JQr|1j7U3)KYA zdE1#uxu!0rLzYWTE6Ct#=24Q;gw#vkHzx(+;Go31vC8jeK57r>9wj6shr2OE21RMA zsdJFTWT}zqK6IvX>+RGh-G6}IZVX3wsWnA*%G3(>24%`b#|ZCM^a>}HKe^6q!WHqE zg^D?<)Y|&AQvzT`RpG>S-vtzT>Tzrn5)xSRNg&}~@|I^?$?B@Oloi z!qvtKzNfl+{uBh?-*bu0j%29WddMrPng*!W!6@73=g{(N%+A)U@T1lV)G;QjyR+3A z;t!D`fGLR^=)jzUyl`v-77dy$T|PD%;8MgItcMDH%GZ5uED^*aZBBnQUqiQ6CUG|S zt+IhEs3OTA0{9$`6}HdVZPkAYrl%7`OIrUdec*JS;%ZVN#Au7#%3hP^SHI-A66A9l z&@!wniaX z*gFW+UQm}-NdIM=)0-(SJ z-S;&NJWm9Sa~JvS$<7!Gh%4Qo2P>@}zY7*Gq!O)(5_TL^H4Xaz91z_d7%N>Y_o<*| z(!ZBGionX-%wVA0IlxOevYdR;-?J4EEy6X$nF11$60rYBOD-=OXH|fxKf66YcwZ!#r3-auCCi@s;{^9Ot0P2Jve7Vh}iLav4PvS~H z-DvKVp8l_iE5*f(*QS(W6V{~TCUUON1(RYEX5?z{KIGe6MU!L`Ul#USX~JWoZ1(!= zHjz4O%{eAnH7BvZr%xhZ9v|1V|6(~;yCbU*Z(G0fJQ;nJA1+k&&hLzv z_BFIBjnF6o$)$07*Vr$5{=kHNip0SClq*+gl_{bIV+2gfA#%$@v@Gm-p8@x{Q3kGm z{>b8X+RNjRto0$MPg%RWU=+YcNH2KZakKxyqpVd4oTAZ=zY~*0M3O^R0);`XH%i^C zG?oG)O&Qp4lF~Dn(8MBKD^h`u7b?$N2@D?h`%sbJHk!6j@n4%29ggZS5=+)n7CIFV z|BWH>%$sU@DsBu((>j(Su?>OIp+Z;?T)Nas2i$NgQj=q2`t4dkN#yz8Q*zYY}2q~ zc=zeo{ZC_cNPz-Z*De309vVq~cX&My`sE)^yqUVbL?KLb4(RB`1?t4h-`l%$H4Z%4 z@nTK}oC-SGl_`e%-&+&hxUPvQmBXwUUwl$!{O<4+u^xto7-0dd>)emFWWtX^G8$qA z%2E(V%!*5p$U|?T$nzZ@nc&8Na@hXfogj+v_#fj4nNQw3NECT_UCuI|za_I+nMX6f z9O9{#mW{ywrtEoKOi`ZCn1_}wwFIkI#GdDFiQF&ZiFo;>mxq4rpcxo2I5Hf&&inoH zc={IfP0az*%}MeYe)0&(y+6kjdET_7Hsj=79Vjyn^E{Xo>^W#nE?Ke=d}cQ9eOdRo zhf+KZp}SzVgGY2Bj-kB+{04=dqcoD`3HU=13k7ag#sEQ484qbD%?Zw`b+Y+0z0V8v zpLWAG?wNdd^$0aeLyCnme3w$yeImUE1l|5H@I>WgL?f_?VCFbIjS7Sk40$gUpFB3< zxIrlA@(s={EHvnM%+q+LD!4f?m$p30m!kzwriS2+r_PtYllD}j3njH& ziHljKykc7b_@o>q+IGMLbkTzsM?qbTkR_DVObp(4?YJ}UdRdG+xK1BpD@_YACVVnC z*pZr2psJ4y2_YfgCG55jO8*dnY`yR%qM^~)r0ex9K9LSPC#RV7Su2q2)BI>HjoX3) ztE+*Bl~4LP6F)l_Mm;ppMw&1ogNr^C&ZAkWKg(DVnjMHcZ@)3o<*Fec*UAL}ImO*r zjjmT-PEHH4%DXrHc7F|t;+}^{_YY*GvYK;#GDm~%`c{B=t=|wf^OUg-LR%{PB za<~7HpT^s);%6eXz8=MMd*l4r$KbKK19WN5-MVYFqlbqI`fuWs_jJ+jx@ewtBnY3i z<=9$hHmK2&mBqn1`~Q;=@^Okk@Shus~fb@lgwQSPO7Y}P%$K3TKSp^h8MPEK9)UtT4S+1{=W zT(6{s*FcHe9l{H9D4I50_}$lPxtj18bGep$L(hDU^6vJ|#He3O>Ek8-*i=|>9LQ-# zbme1Y3A)9E3$1Z+{Wi1mk`}%;;~6TD@L{Cl5^u*AEIk@t z#We=yYcp7BRDG)^Qr)Pq)<5PGHdyE_K2x8>8pm+_6JdX@_2mUce_YBYUXpitSzKLn zbtft<=}fG5WQ=_--mNOCjb5gY+m$V5C_&K=iYa`vKA1~zAB~}Cj0h2U*c9(L;9Yfp zc{+xEp`=acW}7=}SfP!Qrk+_wU8e&OBX*zwd+uR#rwLf|ULYUc&d2wtXvGgCfds#`8oJbYD=#eQ_0F z@7&j%->uBE)ArfLw`559Wd`I{^OXQn%dE=^QcbGz%1yIcPfCuMAhDZCtr@;Rz2i^J z0K5401ojRb;5Zl+yex+;10oU7y<;Bfx$h&eehw> z;4rv51b5egfmxnsw|4i_`~6f`SD!xBr~7wZcZ=rie`Yd1@l_X#P~v)TZs{QhZ|kxd zez%(X={@6-cIM_6Yn+2-Y0vD+c|(I{IVE&CV-ANNVulFrlX z50}5hV7b2c^tDVN>-z2*56+S^xz==UzQz^g80ewD)|#rVxkKN7pH1u^Wo%eF`ZF|X zZNMe)?{m3A)sVAb+B4R@WluDkq(!7_evg$spFz4j`$G z=d0vx1h#k7SW~x(clOR;;M3c{>)71^fLJK-VNRn!KEUhO@df+>)$l&n&I1BY4 zmR5JjYaAW@q$sXpbdkkLM%SirX4IuveGG--7`yfLY``+`5m%FL>h&)NMPYw=qq4k& zHzWB;L5lJ5WA4R9(>BM!x|JqJ@}D1oC&In)SAP57faS@F{_msd$=$tp#B_wfwuzRT z`-RZDXC3k0_~`_K3YJ1lLEOzbK55!X!0uTM{8YO79IDyrbB{NbdiwHy2N&zeQ`9M` zcXe1{FM^Q8#=~~1e`zDtA4ZpyZBPuy;W-=SftR{SL~2JLyOTwYYc${U^gqMoN!D)9 zNTtg^m{yWuOstMO%40PDHU-!{G~FE}6xIzC13mRiT_n38|5F|jOi5;RxQyF;{DtdapD~}#!4p#| ztO926Q2Z9zGR)Jo={a=cdt$n%dB`VC>8ov4O3t z0){T^eHX#j(sP*tqc>Wpzxa~0O;JcSkk`bnYwck(lV7e_PYDzLvv;jUnD{a3w3I?0 zsYM7i7=uTlOz)ODknT@g%BUW+)VRn|KESPMI~?WTp2)daNM)bQz5GoXJKhgIGDDN0G86Q^D$432U(pm?t_7T4AZ`ncKM5jej+5wLdptJ13~ayB6%RC% zu~$SUKO-|JbjFmCHzMDJ0%R;Z&Bei;3X){=v|sFTw>IO@?5H)p?_Ve?GQ<1!==B}f)7H?F*0I>^(vq<#^L zy2V3|mr4Nf+0aJ*$hv1qVoYIxF9gW{F35C~R-z=rY^i+HruA+na7huTVe zjG>L5-n}z46S0{%5n7T=j{jyx#2X8UDeZ9$fbL(lGC zxvEFm+rMIyUC$W-?I;N9uWtKQG2ps|`y+vd*mcb*_h-p)z?Ar78{}LUbt)x1Bl^kG zJmSetjB$H^eyX+vUia}M{?Po2Y9qpSn5%f) z823mL5WA^%pLzLK$-ZQa$L+$1U6OKIAZ1;2O64I&m$*1}W=ZFy$&8zXB$=a>-OBHG zvRyz?wE;ILnSTu#ciyTXybhAZ7`Pxv?J-SfSs$p(2GL zCVkX$t^=^4-jtWe&}+2f?(Lk)I`DGnzczT-uEv4*CE!<*9rI>zCJ#^@`rCOxn2N=Kubm_D$~sHr1;hRH~6 z#eZXzqU9Cs90O)FTbZ$M?N%=++ zy{^59jm`6JbffX%)W*Vs1g%hDQ8qPv%sbIwcHm~jp_CIYcl!R{RVl90+|lN!VU@+y zfnTt({M~|kKO=%Qylrt~^RDo-Wwx%7QeH=He=d?o9+cbX#9l0J7i^LJS@2Zq@4>xF zpXH0qeepgAGHbmW2dO39)Q^%}<(Gq`tHM%hcKX!Wm1I`iWaCHtHs5-^ifkIJW-!-XQzTl_AcbiQV$?iCCy_KQj zqw0f;SwFl`xLZ2Qkq9Q>WPW<$xn+2D*Y_aedcYCF^(vNv;=I-MmzvAF{0XJ&+H1$v zrkvPA-Hmq=qnlE`Av~#M0R{~fC!ENoK*^CNQ=M)?KxkC8TR+gt#YDByIYQb-Op(L( z`-7UN?(uulqS3R11y-+RFDa-IG@7KrF3b1H_k7C4$<;=Y#e61;cM-QuDV4#}a~B0* z3AR#%Z=`@EhZlQi_`jt_tKYg+2@U6M&wQCTF<;bx=W+DpaQ%DxOJNjZgYxvZ9hh~$ z&+FmUPvTniC(6`?eD{@oyUSHiNbIj~V!5*|orj80Vl}XlIYw|8CiN|(g7{bi9vIsT zwYkZ}^yDo7bH$fn;a+4y-ky~v1D;J0{plL+~^4?+xc6P5X%eiLd7;<%w|`h3y*MP>Dc8Z}w2 zfR6j)BZi)~sa)}V_n#dCcqZw3%h}7_zTqU@6uzmMP+0Z*hk1fX0ZCfS2H_QBO36vN zlQQF@<)*Niq15kJH|{q`-@fDI<<>x&!ydd^?0lmm@=nHkMVIBCpzI}mqpg4DbHYQn zD}zpAx{0QGeZi9)eg^7OBDU5mI2iLV?W;7&u0Y_WB62X)(tt^1ZV|-g{RjWRj!VVb zZBF{O#=BooP=Lw(Ol)m4_J*Lf{R7$o0o#W3;m~obYcra$oX8T?F-h{G`n8;hKa$v~ zd+Hq#)_k-4y@AHy^w*Y{QqU1xI|Jop)QF$olDcz(ssCwY4m4gJk({xu8j}swA*HMl zE(0~aJL0L{KFM5Y_j>WHD4kD7+YIW}$A(k4M)z*`U(4EgG(d^e^#4BQB3>Vo>U=fK zh<0)NDX4FBJCe3gd#lq3aiB}UtXbk|P2}tHOqq%o9o|%@>9XM5*mS$?V-q48HJk%Y7owVQ#o~Z6>_J!H?L+)%{F}XHK zg6M?wY#6_GtHw8X&++)$#3(2k`-+ct;v{)(t77Pz+P^W z`kM9C&1-fuh;GZDFP#-$okuz&w4r$$896DRYFE$fj4Bldf#oru#D5p<&9j%tc zhN;4BHAU^Dz2PDH5q_TVGu&18ziSEQv|YR=nEwvA^q>Z%N+i)Ee~fJib-ZIs#mw^13AHq<_pGj2*rBE5sTGrs z!XvdCNvDvXopk;0&j!+F6!Jt9Lc1fo&BxVX=r1MHQ**0L`WP%y%!7g4d|Y@MZTgwv z`q%k-tCxOf&optSG`r|5iYq%$ zS(=~4kEAWy)Yo$T_=hMDg_ZVB^gtQsZ>Mv^N>Y6)KP!^b+34r6HuFr}7Sg}`rs+54 zM7gzCuck&8JC-QA9M#9UGN z0-n@t`0c9h=YMf`E3Sluar3M%H-!s&9GCa?hoIIv zufiQOtw#3TSTE0zXiAQ3j2_&X5vMY4e{(`iy5j2jb7hP=aek-c%B zl=pizgF?D$iwOMKZJkJe-YSk@t^Q`~Rrv^;*Pgsh@*Te0=DB=N<<_afCxA$d>P3OE zWtHPl@j}X$^|_s=bm-#krN41gy*O**hl?Lk5O#gm$C6Cr>4x&=lErj9-h4NJ41ik^ z@MXbpy!%&k^t5?0CE2V(=4;w4Ci0GyjsiT)m!cwG_L|v}-*kT8yDDMh=coAaa$&vp zOw4cgl}3O>87mwIXozQN&%bTHX|BGKpm)cM4j8EM!t&c@-+171`C6C6{sA#rG-!*C zIx2k6qY$SSyKMm(&>Wm&LGVxfF)t!a*kCf}E6W+?@ygTLDDM&U9QngwFd>`QJIY|*C z6^`R$SJN>+Sk5KVbH@%Nvrn|+O_lo8!ng1fiZ9$fH}?up*IwdDA%DcoOI!}~@e2uc zaAL*$j}X!Hnxu^bmlU!zGV2r@BlQ^2eqBd@#}I~u=SRE_Y^wx|NxHLFg`oc8nUE)K zLB8Bsy>p7JSoM@REKBq~UqW?u&VDv~qdSX05cFnf4!6HL+y|cYQy#pZP|&BOF)9(O zRnBz&{$MVJLY#v5*2(gy)k9ocNf;U#Qn`1VB@S6@{qIKSo+9grbdTv!QGX&<3Wd~T zVq*SpdE)%!k3v=jL%&$uLFbh#xaK*YkS{R@f7Yaw)c*5J4!V~STg=A=E5m;adEM(zg*g)VHABFG}z6qL7B=E*{2c9t!C81cWiGCiGC-$_!2^0n=z}6y>r)`@$4*)?s&?~&ft^uyq&IwEY zz!w|;MmncQd5Y`qdKzNOXWxH9CUJ}Ztal)V!rnU8gt)+{=kwbCUuDOXvq1m!+{jD~Xg?*ez= zRa_mUTyxo+_^m=#&kWRa(@&vr;??FOc$Y(R8_8<($O2xS&ta|iiGS76Zn>D@hdaa& z7uo-`?HdAGepIWTnWG!3t!IkD%fyBO{1dsSXEZebuo{Zslu?KMpZ(cx5 z{lmb(8=vcMhre$!-j$XLnG2Q!KTswC3r-!R!v{H>%63Ugb;s|dC#}ETe^kyqP~0Fm zZs0dd`02Nk?bnwC4ilt7s4*2t5GhL#u~H^&&N#SxpmUJcT~+2dF<)v}b$QPKzDZ3~ z`*j6;^=E_n&4B&-QvBFF6?Q87s&oU&$?hGTl+vel$0~Ws=L7};({;HogW|DQe(L)} z3jGA*>sj4()#G(eS^0-0hm;1TM~tp5_yez@)zV8{IDBbc+hC|>#8e^G7rjRH$MS-GRvd~0Dd?(5j*E*Utc+w7#rzK#d` zk36|qr|h&=a|cd%mjGD_6i0~(P60p`UcajuWsIS{HaXhxJszl1Cs}G)u=wrKHh|q! z8(I z0$(2JCr>u-BxV3*d{>XNth`j&YM9zoI>WaRjh_?!!o;21m;CfN(7Z&4TRt1ap;ZRH6+Dhpa8?NQZXz zZMX!>ZEX8C9s!R%@Ncbwi9lNmrIh!xeUl~J6!WJSs!Lx>OK+bhdsh* zY=qUUZ(Jg{)}>qE!U-8Z*agSPP;1nLuy3>_wFQDoBew_BsCocyqm4;aCBLdH3)(ak zb}SNH*~G??>cHuF&N??OuS&$4;hhr49E-lm4av3?56pPB7w~9%F0*h3FijsizYN&c zT+Yb7-37?v7<>G=&OiFJP<=)3tJ(WXRcaDSs{T#NU9bZAtu91wRTuI#dLi@bku*}R z*plJmYXHiqJ#QnQQlKMus6EfzT16@YGT^e!&gN`)4-11BMS-5*UNp#^N3PG7xMlW= z{;|Z&-c9R1J(jsFcgU-9BNCioF75(S28r1nzc2Ec@S|=$_3}C~3M%Z#zHHMX=G0KP zX-^IC7mSDGZVm4{Qx-dgrEdj#xvyZh=-X42sG5d(%kD@W zjN^J;?!%iFsB<0*>!+boFS>%+UfkX!ffr`BwV zkNh-Fz2zeM&(O(q2q$}rGnpwYT%u(*u{`rP42EHYa61Xyd*M6}jYUJCkG2DIzWR|v zm)S)-%<#%dZN`CTuZdDD8;t_-ZdY7iW%lCsnMi$B|BtkyB?lBa>Ky_3)r-y@r6mm?-Q`sjUPW%egKZgZC$ zXWwqwi#ykMk5q>fZli~^`MXKqVkXsb4SSfcEy4{n6kFNU+N;yK$n3auy>ZkJvanBU z%z1$v)i+&$Mt*UKxQV7xp{QL5gxtZMCe<|v+c=$6$}m#O-T*NPOY)fDx@*HOfP1d< zLB@Ce{&t7dB&G}S?vC^SS_CVZmkxF|7Szs@nIsWs{qr3b>^LNmM&gsh^_6K$G=A|* zxJPEkaLs#Aj`@eAp4rS(0#jH}r6K8N$NZNiy@;?8Iw)wl6rq%N2ZzlPxRE+-{0Tp? zK;?`iG5U)5*HdYAemP0d^O_3E=BRX?q;nlgOdIp`ULDI8I<|Q%d+BE?K3csxdLRM4 z{JR3JbyB7}u_)g6h&<(98tJEQ4qp*VH9J23U8uXGRhxt%`GhY-8IO3~FS0hNe5MML zj+ZT1?F^%kf=l0;jDZjM{Xp3^3Z!Mp4$iyl>MNc1+uJIF&~c$nrWyc62O^Wk>Y+%^ zLt@1PJC;z*X{)Z|nl+NyK><%?VsU|9lzV*?6c{B2S(B43OHiBW_2CcYgh~$dpTOdJ zll8GpY^}yCE!JmS?w0#qtX3us0K7L<>*Q|lZ!Zzyr)HTwwXfGcRvw4wMa`bU)&LO_ znL?Twr0W~|IsjHrz!e|OX5WgKUhT)kIQn98GO?zU9E>KzK_@4H&Em{`*G&C}Q(WrS zThd6Yq4Dbm_djE@y=85HjXy22&J+XIF?BW%3S|b}AvCCn`D>j6tR7txF?Hd(3^4}D zRls+l@)XPQn=Z`0-l|pNwJRM`mv)UIQ?W)NLXkid^Brt7oJ`-dKMxBX-U5S(8|=rA zdY7a>PNivfNzaqbqr)$47S9*>M1I`%!%lA`HrNFhK{+-`8IOhi8nQaqYAL5}Aoaj2 z>y$aNkE^qCYv1B)XP{>kxv&sbb}|C0{XhAEMwa#2W2o6zNAuNT{MmcRFL((RjDY(~ z8XMG&>hzYOt;9lCjPXLJ^m1b$9(xM$q&JdZ+H5czx?H@StV%()0rSa;JAV`1xIEl1 z<%c2WRY4$iNgI@()HohT74yv?F@}_t;Tz8DrovNP-H2v^2cNT`mW2if^2Qw8(d*a*jkXL7>U);C z)3r}(wpn$%&Er-{k)u+h$3n-yMLFTJ*E=N2;F!nH)J=z?DLTcI0e2i0T}M^3AUccE z8L_+AwYxWBJ-T_>R333L%9+u!a=BZg$zl?lMn^|PrmQ=o>JgCT>exw{J>j*{*Mp8N z*R<5lHd4__Q_s1aRs;Dqohf37WoBoq>kTEN?BlB#*r18W&oyMM|3a-7E9pANv4nIQ z*4za}$2E_alZkr!iuw{l4WQTnxT?$j*Jr$B%c7pQxuwta%hV`vEo6iJL9ebhnBY8F z5|S?PaGK=v1ItiQfMDMtzhOO=NfN-BcURlH_w3tZ9+> zW|Xt^a$2dOR?q#Q&F}qIoq68dDBn>X5+-V~Zhx3cTsEWq<P?R8g`yv=i7JbM-pXy>W+)z{prk zo!w2O+;rsTL%6sQPe;NeRgC#Vk46-!i&?s-Q9x@a=?35Z(4)G` z_B@rinH?4%cYv1DXtd#643E3#F4Q*`F`PJ&xv5ssrk7ZAGktzKk2eXzwga|7Pj?ra z@@Q0T>}~9TYpJ{LoG{}uF~gf#iMF|T$-=eyc*{6@@e7ndf7MKj-%;vrKAZ6c&9P7A zSuKu(-?z|ID_<+A8o}pXfy-s>=$3q4zFwQ&jKj5iGfXd3j8H2|Ski=)#pU!W~ToIa6zHN;x&1(%m^I<<(Yy>Zr|K5Zt|{CjvLu zNUh1j!2R~vmG7YOd|~WVh)d$-hyNA+Ga?8zL1%Xmadahf>!S&Yx?CFq-1~FC z0D~ic-S|&5{xW?KHqG|i2$po`U{)#fvJE|_=RWl`5UIO%LXbC( zt6&GWpd3h8mxWSWDA#sOH%dZFxtu{tjkIFnlUZ$Zz6?9E@Uz72Kyi-hWz{_<(Z_;` zrh4jd4T)5yckcMWY8so0y+21YS2UJLg%=~DqhxEE52_mfR^XM| z1oxhw{LV4nz3tl)v_Tz+luEj&>`;Sr2c{bWjHxK5LZ&a_8`qiwM7^HMdJRo4qXB-m z33O2t;Lfh1PzHnP?5Mgza}35IZ`WN;j1umVS+_AUTKifJ*zcUYZ}LaDBMzUB1|TC^ zBd#YWW4EtrYrB2QAYjZn&8Yv#%5FHb+V3c278ybu+`ahTOg zPc4&}yW9=lV6M9<6V&LcyU>8qo{=^_3~J_)mWQ zi}P~hul6{srdJ0yCs1(OyR5n4ytdqbVN61h_F1))Jk<);(8e3P_g*W5jk1dMrMo7I z4^i)Ip^{^+24w^mK zZy4W{c5C!h(jeYJ*F1h^53%o`I@|o1r0|c}bj-9DC%}{}REAhg(ec@+)&Ijev~f|^ zwTO(>$Ke%3&ab(gva1zZLT0AobS*kGrIdDRL~CFUR<#CddabFT)5?EGL&ZPr zjvvcD+*ql8e|++9(v?tmTJrMZCz+a zwgb!gaszH92PA}!|9qP3jJz52ZmpDxyQPLRQKio;-;8rwf^MdG1Vbhg;Bki3|8flR zsx2M_%Z{ZfVZtg(KoW1sGdt&{ws(Op%*OP5dReSTEr*HA-j~*dkKIN`l#K5K8@HCe zEdMOXLO((F$iqCxbTlP)MWznv>dY~3fm``T9WKmbf>nJVfnl?s*OGy>7-DW@ZfhZU z&xzS>M@E`|d$GvUew1T)8|r&c1spm2xaeaqK3DMc+%n=Ig0>K2?3!Cw$PxRyNeHdM zBC9O8dDt-es5gmv)Affl1lSd0)P6KJ=nmn%joKQcszNk=@}I8}h+PpnqE(cDy85uq zA_2c%-c33n?wF;zImL9$FtMiugk61O2x;nlSo?d;136aNOD4B*0;XE+n~d`a_d?(M75htv?3#E+vrqZ z2RuFI;BK5;kzj%G>rf8SxQmk2JOoU;z+yFr-mK79&F5W3IXp$qy%m@cGWr7s<*N%@GSj zSwM5q%-mhBLE~!#lX0uWwENNj7V*uYdd}KGiF^>rkxNMH=gVGaCZneXdm8+R57>5v zM+VUN5Kv%dh)Y(HJmn`Fb+d`6*b05UfxEQV8u~##NWu4WoEAmfo~=77SF{bDT#Dba zSXj${wGK0MbsapK7s@%%sp*gEYq<@m@H;FW$(0j@_o}$5;g;e?H@?IRW%!y#wM9k> zX2bB2aK@fxC`)nND&maZJ3JwTQJhD1+WNuX5}aow9c%+EZP28UvmFyWfAZZBUMZGw zKLm|N98%ULj3C?_&gb1zAbHNDYYCEa$W`9DLId*SV^Vcu2?EYFnnO< zw*;dRlZ>-j&@eMW_%J=;w-#zY-nVZD)s*|zfBXh1wD1DuO<-jR+( zQ4dG07SY**OndViA}X7Yy2tr!WUagl4r+_ zSDTYub@YI8B$XaH@uqC|c8tc7{CuP5wO(h71l1FZ@rrn@`4H^{g&@x&L+Y<$99q6~ z)UrMbh1L1I5L$5+b4X1g6!naeZll*DoYG(X+BcXQ2=CMd{iw<}HIE5efv&{;ITY@f zPizW6eZd{{ZZLGt8|4}4+_X4a?#TIrRlJwm6cy9sism85cdeXaK`GwT8OPw<=1D>Y zX@7|pU80(?an1~cYh3?c3UZBHU?Ui%F8Sa(l-?0<#b}*_cp{1^;94j0=H9*HgAgdG z(DE<#9)_#)@aNlR2j^_XIJ(uWh5BpW%5t$B~XKeH{0{+^7W*@{%1z@2w8#RhJp9Y8Lybur?1M;4+Oh`*EkxIWn-12Olc5~66^$m)8)GUg z|1eNb%C+-5BA2HvLmk<9ngDzvXm>y3_p%{8N%(AJ7Tq&U#|tKUgAjlH#g9^PaNbFW zmk~oR?=ztNgJ5xzVwKVm_lLoPDX)x~^bhWug0cvhu#?|1FOBTGmxSS$g(f^L<<_7#igx;r!atz+EgF5+!LJ!z zFg&em-JXB>C3_-MaF+=~Vs97*Z{>nb)}`qnJu=TkykUb~Zh|fyVujP67Z6q}>m3`EhPYQ%W-5Ar zvPhv}i7-3J*5^;MK0ByWcl+Z{+`-TvOfu&_x9XWhyrX3l4_XlFSx}=H@;bJ#vyxP$ zfNEN~yBZNE8^AI^0T-JU2Ab-g&7nJ&WIs4svZbDSxa?D%%pS@@U!#lhJR>sRQm)LZ z(L?$*9;}@SUd>F>jvd<;Mo{-x?5P}o53>IzYj%(L3u&1o$?K@SSiq&Kq%tPFlGc4| zI`5^IWxs!tIY8x`Aa81`b&5w@ULW^Tgvq7XpeW}_o;sinEB|$xF?1PH`BlhKUma-q zeE$XTX2lC{ZlyYt1gAU{FvG*~$g%K%?@gmO@)9#jY?goA*C<%uj|93JKy#?eVfN71 zdzCAywx;r*vL^b_`?9^Zc@>mEWOl{v(E>+_(&iP`*u`S{izr=}{NaE!9b-)ImD~R^ z1uMSWeWvSI&*{(U_~~Rgs|hU$5-6vb@XWI4nd}L{b1vGvGjkJM9(BTrq?DZPt9{Jf zI5G6D_MF3UG)?MDw}61Zdh+EyPFGf#w8UmM3XTV!SoIw>0FJbBtwtu%__vr{Z;pIp zJX;Xm>T3$!a8*Y`*t=*bXm-{0S0%4VnayCv+vdznSF{;>YcH--u{>0me9zqqsz~Hy9x@$ zLhBoOX)hz)gKjBAH7(D1CTCRn`6#-3rzrO+Qvc;BC_3|w$eSeJ&4Y%RpOSROqC)pu z?>1>Bb`;IJJ^dArBqL#tJWkvaT@=Q&@1e(5W_Ju2W7wFv5o^UaDfn))+~=D{hBOud zW+_zjqdogJ?`C!r2Js=(qH1G*S%OOZJ{``uvPW^Y#e=s#hKFKPOA38inO!NsZVhG+ zq`F;m#}F9Bq+L8-QN5txY9%o`Kui`oAKLxd&3^7|0)xhKh-@#6!ZK=Bjx?8lZPxU z2|$}JR9#aVHXP&ORA;Sp*IVBn-y#L1aga?J5~}PKSya~jnCwr}l*^e1nu#sf*UV({ zUC+DOi8OScAA4IfR|Nj1mMa=w5D6XeOpP$ML9w7|t2(aK$6c3`**|kb^P?Y)30ywkQI$mlM5v4KCMvC7`v*%yb3c-F%}=BD+@j^1P`$U=sgR`?pK8=5w- z)_J2u1EH~JJW#RO?}B@O@Dkxj(Y7Dkx9)phH3Xc0f0>Ie{w^`$4tfSvZ{B(?2`0{a z=kOSklaLc3r%aIo*(sv4$uf2)5nt!x2h+RdtBJV^y2Lwcus-81cYti3?uCTsE4w9E zxdj^`{ib^sQ}R;Mi|3F_`8B^#P1@<%PA~Kk#L?1fkGtt3 z;h0Be$&j3mblW29Z3$ynuiV{FB3W;&#&`rE1U?sTahnyJ(hZGI?SuF1FX}XirL?;PJ3xhqVt5My8IfXZXAM zQJzv*_l51b%j(xRW7f$X_3@iS0YfhuD-63A3wvX-TK-zfVGcPAv9LIpyK9k?8WL(* z^na+!Xq~1LtTO%L7aVeSM}V6{IlZb%-ft)kt5O=q@?IWlK9Z#N-D12F@jP0DMU$}W z*0i!Eq$C~_(nIF2CXu5lCMupev5hHS%T@o$vU|lJij3Y;2j-XrzC;M(g^zmJ_izPH zu)(oIkeh2rD)lxltgd*>x|vZGQ!I7ydy8Pka=k3^!3k0+`qtd!^ z>=9!Evml!wXVvQnLJt&Er*UK~S;gSERODD2c%0ilA6a`0pbp5-%&<~^gN+Anab#_O zwrX;pj)@p_IhlBuL0Z6KRf+D@r#p(6f>|)pdHiyd^dcaV8@Nr8<-J`~G&}fHD6|Ed za-QAsw1%9z1**93zOndn$E9Y-65DvzD}_+b5%IunYfEeM*KyyG2aBN|$tQJJ6o9sA z6^mA{$HcqVo;Ew&R}K2V7#DLq`Ag~ba8VWkHa!clbAPjgr4!74@f`;wIR(aFr{p8K z(>JI3Mc??YWCc9xTWcQd``(=14F&pVxO%_I4g?cHBtb%zq}_U0PLG?f10>7loO;LI z!@jzSD6Uh-8S}e8Fhh3lbOTde+QyYuE=ca0L2g?}d|8TQXT~kC-KjE4p59J5-TZ4a9 z=M*toiQkR|c1ofC;lLTu^}|Q)At-+_=c0&guPz~RiNAPH+lR<*)B`$*Ci`EQIv}{2 zKl5%_V3hTVjka@wZ*ouz^!SrT^7`e91?@3omteH4e|pV=eRn}ytDgD*UuQ4Y?zxQ2 ze}r0`aYh%sV13}w?p@;A!|MiF{Q^cf8Cbk{v;#g=ODILpevASSrb!9L9_la@>eF1A2C|CoeRi(-UVA#{JnnK| z&L;q0Rw;`1ehBvCTmA7Sb5Kc1hvyJ)c?5M^D7AZENWQqQ5$^S(dQWqz_@3(UiIeu4 z?x1(my1+QGal3W%2IFp$1`w5j^xy?gi|5zEoy~mMeg#e{kK2DeEs49PePPhXE9(nj z5D(?HOx51dgu6|h+ZJoC3^#Svrs=6^o6)ZSPK{>_S-v8Ee6`*J>_Frzjui7wB%e(%HdZz(2z5bqcU%~R8*=c*Ft%ki z2Y*lx*j@8E(4+b6$)*tc3mVt$8WB&wG3h&W<35%np7XHNF}W$g>$CGA@WI=3^ZBz` ziXlGUO!Thkz1QLXJolDf2Aj0P+LP}$O~_zHTZwTS(l`K;nl>A7pnb1ugaJQyk&*4%`@H1pwX7KW~)d?FAxhB5W3iw zLh!Fo(=D=<2J;4JwKzB+s|>sF#n>`A&00rx8zHvN!EpbPVMN zAV7NhblZw{49u_hPqXmpY-l^}pZ@D(nrM@ZE|Rs9d9-+)FUNKW|40sI;T|r6JQAB^ zlVrjt@(dFd-JpAYEJ_XV))~*Oyw}H}j|ZVBrT!@SJ2`)!{TZwRk|YJ7+vM6}EH^C( zx$JlYJi@yRSwmpYz#{we$ayP{3`Z`Y5HGRZhx6zs zmRcehYu+%ir|+Me`T6;aFsn#1BsLCw-#NMs`Bm+b@sy+1?2n#y9(`u@w(~1~;s_VI z<0NrGj2f$Yf`qDRlq2kZe~)VGng*D?hH6{ezU)ARi!X>X^bdJ|dAj1Y>9Bduf-@B} z;qHH19Dy+59~f33TiJ~}Z{QA0SbI2L+X;N!hT3N0e<8vqY+#P(7_~?mtzvZ7evdn5 zJGWg>WNptbUum>>dU}Tm%K2q@+L8)?Eiq*g;*l#np!;+My6Z-vji;+VBNMrw@PNB~xmzIAIkQUSXLh$T%e+*J z)p|oAJb2p7vipH;f}x!2TMA6f$SoUD za+>rmk{^-hWrt6-r7XjQ#hQoc%zo}^&Api{LbsPaoqWIOG1EAmHQ(ygG^~>i2hFC2RmG^dVsB5FY62MfU*&w>dRaK_fSIa@i?e-}- z>kf(l+z)f?UnpSLX zJj_hQv7xTX{80c7YCk7Kf;yhmFH(=c``WST%d#urE&|#5;GN$%!gN*B?C4HrYSfgq;G6H)c=IU}KN8QY{}N97LaQwR*4bi&pD1 z@;P+ByuS(y;~lBt`CO%$e!zQD!DRNOO1JjnDaKE0LxMj$R ze#4r~K?-Kh>Wt_ZhxH@B( z(R&lpg*VQc2lSSZjk!)7$qB% z;}f>3fP0Ph40X6CHLkKa;2!1wX_R9>JUR%9VN0<_^SK%K-Iq3!Q!uf2rP@~9q!e9^ zqladBtnf3dXLo|3zZxiXCiP6!qXy+~|FN9d(Xb{fFVyEnW?8# z3P`K9*NZ3p*Apoi>_7>YgS^JTm`h!u<~92S~X+O2Sg83`6J)N3wCAc?k*P`l+V9NYY> zIya$bEN2FkRQyAm(bCUN4nrpytk|zutv1=Ji4DlP zkHsZ1o}#20vr8q?2(C#_Y4M9q-FNsHY=-rr+CvTlDJ1aeGg&pGGtIWzxV=x@&K7hc zqxfVkD@hy<40h%}*MBDj^RpYbkum&y&~Nvqi9WE`|CXWV?Ty!2K&L~jFU<1dV}ZhI zh0)A`poBNMK(Cn^b;69ELO^lAb-T1nV~x)Wmsf>x-XQdoj+aF3nZhtDgXn^qVXi0| z5mwQ9{Ct>1xYHq<@AX9SUfNes?~g?7nqYzd5r0?{r$CbM!{bdESt%My)Wd1e*0QG8 zaYs&}0HfvZcKil5?=qQHcdSs2=cAks*`e?K1hY>=B~=K0sh=se5K_Fe8J5@g~qLv2Akg>qzeHG0v;6Di>DZ0?j!1QCfYB8kX$u$Vzo)K;(gm+VXfu>v;Dk@!%0+<)b_&NiQYSsOx0 zb9^_LvnZzP5Iai?&3QqSc>pjYcb3+ibu77liwm@;(vOsQ9`z>cmm`bZ#Ch|a4Mn!ZX&f?JxcP`6^pyX-o6y8-Yu#g&# zX0s1%PBeyylyy;k9^6OQJ$iUcc6YH~sU9@3Fc!-eOj8&53(Lvr zZt8HM%}t~snk=y_^SAqV$}yGr)}rf*)OnK}ht00uOCOJP^SMm@>1qY!2h)gES-IeS z$Hj)6do(LOo{a<1&WV&4ks9W6b(aWjIzn79><3Q61Rr33tfOztL{izHVR*_tV>hlr zquG&}B7;;j!6~n;#ngXT@1v!~N*on`asiLfmhzq$8* z|A=@0vd11{uRXWdn$Mc!^F*$TcT{h+ecGM3BwMEcB?P&7qt?636Q;5ng;33m_kEVf zTs-U{(bRh#vEpJ|?%}Af%Z(o|u%C1oT*e(VSLvzZI4#v+td+BF@(vB3P|EfKyb(t~btl4OG?Fp7 zyflEL0tf}b(91(_s%L=M!HHI!u(m^AjG>`GDB~Mxr(ZC4F`Y#U&b>B~m8D>#gK9Ee zNHU9#RcWdmJxK62ES4IhRkyOeTaVU0SJ+ z6s$GK$%S)rvPW)aNY^%(0l!FGaCn85$~jV_-+5jc^0%1%rm#o|AZindq@sZdc8_E* z4oRM{pUVc`&7zx8K`Fvbm>(6Jg-bVURlD1U_oyvv4N+h%>&s40P>%v=juZV}!YtfO z66@}Y5B3u&5BMo4gnT7JVi3$NEKI&iX5ixlasN$uxZ{jPZd9*Uj8m}-8BA-65P4qE z%Y9k)2dvEfen0OJd>*N??|dYECVL{3p>14s*|5zdd(kHq`o{XqK-mviI$Y#or-oip z)(gs=jj&PTX($-;n$4ZK_(KX_c@_Fp$(2rDbYQy!lke;s6pD%ozH7<&ay|fDEoa3> zg7t~7G0o4s8anR23CtIndGvEKJZ&8+QhcRCF|$sbQck!$W8{o|#G|chJXMr4#P|^= zNX>M$13;_rT&32HUb9(^eRul7Gi+at!rR%(NNFz!vvaz|v4zdT< zB?wd*h0~H|;Si%-emODO2G?)l%mb1d8hccktP2)W2o)K+RIIe6U6=&>x}zzpFfhAE z+b${yNAdUx8DfQr8T+dYqn%@|$(J&2w47RoW+7?}dFjaU^sN~wlzZ1ovws9+XG|!# zIK({0nt>YSm{lh_4$AQy7G^xBpqut%GGbhTNZ$`_kAFL1W&;-)R=I}@qZ(uV&1AvU zjQ2-ysD)jQ)YX37HrX!IAhj};1qRLgGrXL5G91OlCa|gd)7X~nIB@gYcCbwOe6klw zmqB__O~7o-MAJ>mS z4M$7BsuIObUYx`2Ua_zv462HIu?4-M!*CU7AKPHaeBYLtv=-8N=ktj;ZqYzr9Mg;t zSCn2Rw5ZPIe;Dg9py8n);T%!;F_i}5|4|}YER?1^WL~*8a=G4=GR0$L0@fByum~SE zJ_TGFx)(Y4r6RqXk2N88J?|G~pSe$u0b0pQj2GLm4VL1fIq+%h_I|8)&P?<4KEsO_ z)W(n3LAr3~1Au4pM>k@^MtuAhGL^Nza_ug%6o#kA9(9EBK5A!bT{4@*0uSNRUR@rV z{(<-h%SZv($j>2P5INe`T12Z!3yOgji*AOvO;YpSH(}}GRzxv-j0Uj+E;Gu(Oj~(T z!43pXmTslHNv|YPX-!Vw$5>nVPIU@L>{=^otD^quJXOtgFm_ho>So>U=5IT%XOWSa zxh*oZ>(<6Ulqj*FRt49BR=Y6AVK}@yUzydpe&X~m&Xfp^+Srb`G#HaG&8iXA@zYj5 zt8dx4#BtRb@-QCU-lhTNrq0&QIP?c!)1#aJ701W`TK%6C#=C8!D_OL3{Dfu0g~nBe zxCGc}pi0mt{kc2`Zq~AWM=&z$hRmyX?=1w>)047-v}}-i zK^&WujY&OPPMZ5wLj9WeEJ(6$^U=>fEjbg*8Jt1xNkoSjomSRAf5sAwg+a?-$)l5% z6O5iPn9G*bGR9mWku+>%J|f&AoOlPVK5UL!CN~`{)D<-FW>`Ch-pZiO3v)`Cj$&#r z9~8ws9}Bx=H+Ao&5ucnFVAcg@k1xS_ZAz@dNIG&El!1@W*T5acA zGzj=UCu0vFDy6yLKbFUoQ5 z4)w!ZOScpEo8@p#O~68z`FbyM2a|6m3oeBk;C1ZgkEPWA5(Cp6+r+?9}rhj88V*+9|sV&9N+E6}u1vR)w`;2CD zXJR!zRw$}5w>kEb`V0#9RXRVMy0*ff0&lYTZX*YC_zWXS@70h`npWIoPbLN_C(BBh zKZW&SdXbZWl}UA{E)>b1dS_~Cs%OSj8kLG6d`!S=q<$J-gP5oH$J;};AMUD^RfcT} z@v##p%F_3QBPObUX1!!aI8M~@?lWuMHQqQE*3E9C2iM(29*prbqqTZ3dsMoA*+?RP z1V0OFv7|*JZ$-pcc@@4^*)tB2EEH)R0)hUd2AivRro2SMbsN)cXpt*6(+#J`XG42P z@u`{7UpX+cbl2hqRtU+SM7m)=xksNxXp(9HMql}Ua+?w~;mmqr4F z@bxXbbj-wZzU`(mip{FG3;JM#a%*2xU4229c}?IV`O?Tx=UlNEXF)^F z1YmET?Ra+{qYVRD#PRU;$euBMDy4$uv@PjRO1vocT$0wZq|&E8pq6$x(5oIkPfJak z#0bpTcC>BlVe)4GlU-a|8lQYTQ0X(q#7$||y=0A3(Y8|Jml!kC>G$YJe91RZ<_6m| zkU_1Om>;|rn++jjDnG%NU8vxzyK8~oJwRe5janh!u}Lm$sF@fPI8cn7sDah+Z&6&{ zG?9Y-y`cG>sdXNW{Z5)`^aOQg02&!{`HkYfM>}goQ0tXW&9qwLUxP7|e^RIMjmW66 z@~H7p{lm{gcPfVzSFEp$<;-&C&aR5M`Atva&PtwpgxX7ZJDG%LV{fPqrs_`&6gj0* z2hc-9PE}dOmc3s3BTg9I84Gu=i8(-5wNI&4>xzwNuC32L&BJ1DX`% zWlp5}C!)7blMfk1>$W1e^kC6*ncEnqX-_o(&=&ney*wO+?&gU z3W*&x2aAMhyM{M&gcnqj?b?OnP_@P-s5kWd9h3bfV0Wd{vQB1jSdn} zzJ@>kE&M^VeDT6Ef8{qrWCE^(3nu`vc_(ybek9|F!OduWl{qi;3U{-MLW;6A_g2%F zRi1XintSonYi{40_M&knbKG_IBE)KR&6cGmYKIgpIU`S3y8SQ=S*(spI+r?4OY%a* zfyTXYp*NVej0&J_ILT7Xvu_;)#gn?j00hCon9lDScH6HVs6lFrsVBaqeMwul-s#>G z^2~jsx+Ns%P7pdNHp{g1ZxfS;>fQ}n9`-WSk=@O5`$p4OPq;%qwnsl(H|xIeCpZj( zaqKsL~ zjGcZqm3j20*4=`{+qbLH|2WKjd3dwwWmvfJ;dsO}UNX`&UX~+Bk~};c4qtJq!K&0n z<>=z=ryCkXq)EJa61fLiBZuLlmYc)ImG5QEuf9DgyC%HZ9gIjjr>m&nliqlvch(!t zXlUovLn{Y<(DQj0LcT^AObd?7K$GddbM^^k6J1@Vr4XgZv;N9MTMt1k_QS(ZqlwT? zKbWN->#>V&IQ652?Hn!eRvCDwZ5zSd{H@AKQd|3qPTgZ@{(3K-q18yl<}y4EhB36Z z^`1%`$kG2y%I*7ebF$RVD?*kvVw?T3=lixuamH^HgYN|%&CVme+L^lR6@u|izVXgwb+wnxUj6@H+ohl=&27&g9tes&Co{;W_jXC8j}}I{)7Ud%fi_E4x7wy()_S; zb=8Q|Sukry9%fqyjDlrQtA~Bu(JU)49upSRa#SGamKrf$xNAyZT*YW2`(1R(LP^`LJ5=^pVr#1DAk?NncT9$($9tpgs84jIfBRDqHFLomeA5P0zn`3EYRKwzJK1{GDzQtP_2HM`FrHM-74L|YPL(w3UC^B zLEB5!R2_VjRq~JvZwK^8FuJA>^^s$w1CR3TN&Fd?W2UAy%sa>1HF$OBn@%0?lTkwl zg7q5I7PQhi{PrM!d548y_!d|fdi)iD9)pkQ!0hCylYAWIajfwt?inOE=VtrWYCrs} zjn-HkKe)<^OQl}Dz66uukB{h$Ln;@w6u_0R zMr}~}j^Yd$V}>~OX*&69`XJ}3L~ul(o*qiwG6<2==fIMyg%>YArE;gjPFg92s00@W z@)iQ{Cc% z6(fD)hqYr>0tUlQJz)ZTJV)XmRSmc|6Mp( zjxo!!MmIf9#iB~gt_8y{j|}$`(SEG~is)3c{U2^h@W71*=@eZ=Z82iia&?i4(11{y z6VMsLxtpNs&nXA+jkxw6)y(Usm@bXwa<1=)(gQ%yFlfVDf7bh+)0Y2Irh_x&B7v9t z(kSfA6;0YQX`jK<$Pc}mLuc1n0+XcwcM!qL<>kOihkLwBYvE#U-`^%Yc0q20E%5-t zX~lFL6=q5`+Xkn8y$KWp@PVE0e(y-?fD3({ttbwHxFy+-NM_tOig0W_4_hKN{nJ20 zCW-iy+%>hZQavQDc?-w*?&;9C@S%C#^sK;=0T6puc{8v|iws)m$pxMFAS#hY?eFL_3(w5lijl zHHv9k^w?SpDp9g#wGCloDxw$uDK{^8%`UVe+WpBg;S^A_{VE|{^U8@=C21)OD$^VM z$J&qGtr@j6m7+^19I-hXvfaG8F2HCf^ow7p{b8u7ot+)7q=Yz&$3gOk8;-5E{qKvK zoEh7dMClhN>n(0ZWR~`$-%!U_siya--7B3jdR}fZD{kAu-*~wkHMvdR*0iX<2p#`= z{K9YdBd9WY)O-Q+U->7wbAZY(8ufnXoNAaovDr+i2#2QST({SfM(d3GtjC?nz$;~j zZa~{8_&HR%`cDs%;XTa^p>2cR7A}6WC$Bz_$#N#YEQQR`)JsEc5r$pcd4FF{Repk; zYMYPhMUroq$w|8dG9oyD#?8Syr-o z)d_BGUI1hO+rK=$y&{mt&dD2?42Gbh@!w$XuG%ZyfK9F|1BJW z?fs(?ymk)fczKvoZlfOz_wWOx#X{>3ka6SU3a_~CJnDI~c02j|98lAY=yva>+j4Jo zc6=o&4TxMFgSH`pn;fMXmVg>78EA;aS4 zN^D9!GyDa|)(eDOt~Km0sd@{SBU$<7&BLEn&he)iGHdkVJD0XS{~ed0;zLtyEoxS) zYoC~Ko!fBmzmvd8Yx06$mZw7HOkDlDHbb>Fr#rRfqJMtXeB!zw2y%KYhkx4J)Ja*C z=wBt-cH^KnL2#x(;G~eY%aV_crZxN&$YCPfxn3}Nx#+%HL3ZS6Hk*G=0ng8?&y%z> z;`A9+5seYXqamAG%EfX<@_4t@Fgx_KVtOl4yN-{_jPE;Rs*>uuA>voll)I*gPNtG4 zFap@z3R=ui47h7%hLvq<2BD0FLu{Lfm&PpZ|ExejMXaa%xfmRZ^;+QmR$$j}o34df ztlNfCg5YI?2+>P+osIpF=*({f$@1jJ{aBza1yH4W->f;6n6FQnqHXU3AWVo7C{Q_GruBq_Iy4U57UEK4BpKn;Xz) zE@N}gZ*T8nQhJFPdX%cVp$n&IIHd4ds1SfdjN#^t^5 zBXq3_A%WE8r0F66zlQ1Zd|;PT@5-H1ihlJ#aTB!gdO4UFoq-QglvIz9`Wr=Xu{{w^ zk%ozN$&reJ^^lo(5bE-3H_`)YfiV0`lj24pKK=ht6kNCwoRZ+=e^r3LKrB_Vc0pn& z+?P8%?4A%!Z(mhZ;S-S#n2SaZx#j2ze%Ot5CgGQOpXV)`OxC{9kH+o{{f7RA!(~lQ zH(LAYDd=>6Z@l}|f0Qty`nocY_RG)522zfLfHOxLpY`1aygO=SSg(U`AHkQ}TfLR@>r@#8)*;jx z&J@c5Lz*0AI(nb}RxFA4gQ<%*jwT^iGA)aCtzPiq9I<6E$4a%dY&4?tP|b056M}CI zC+yN>*Ogb)ZJ&8X0qZPZ!{1HT;umF8Yt{&J=8$4=EO+ChH>wXr4Gt~$EI3MNEV*0G9)E?=Qt4WZ*aKjhg5Q_M+*TKHy)37)CE`WP3-`U4hL7$gE+hgh!r=k0is>d9O6I z8jQN5tc}7sI~hnG4|F1f861qkt_RE zLNV|SpDvS{RG=|+9 zr6V1V!lN6V+OWZmocl^AVWB`p*}s90I;MKss^JN67;5du6^t7u^(UV0_Qcr9C$lp4 zMjV!9$`-ky{3P0FDNYQ>$4%{>Z@m&*g$9F9Ra0XMB8c!&PgM^pL@O49W+w219L-*8 z??;pjr9RTpVk==a^)z^|PmK!&)B-27fF^h;2u<{nSam{iw@@zaUT1uQ*LSza8Or&7 zN&?AyN1wv8e^6N-ABve0NrWN;!VjU>4VkNdW+MG14eZFV{MCQU`{rEPYK@2j$2KCL zop0fm0`)1_n8jIJ!?7HCLfc|{VqA)x>{nzMbCP#R%FaeInh?Z0*>Z+KOg#1I1==`T zvEmq61 z7i?t%5}C{aLytzXuMNcM)QRCGsug$fNo%Yw-X_{d9NgR#UCtKD=?DdAdGle05)dGR z5c5Q(6J1_y$dJ2uM#}4V`K@8L6>kyF@30l zLsvjkupc0z#)g}MvxOJS96ebbGk}rhj@tZtZ|(k_)?Ks)Mad9+R$Z8og_(+_h-(Pm z0iS?$HAg?-i%$>qf}T(`w?G$-UUa;PK{VcT$An6pIun0{4`)<#a*4nx-q2w?mISNS zZs@&;ES1coQLm{Gf(=3_?NPS;R?!xN@2pGtT9~X~`G_>Lq5>X0iE^)=7B`&!$t6^-NNUvFlSzD8buIq}{ zQARVd^dd%b;*dYhRLvmk8y#<=|6yGs9f?ZnfJ5BM`K`_XA}h4kEljI-8cs8HWVY#* zNwB1dvlSaG5N6z$VCGOnXW0jZb{WE#QhcMQoa&G5K++r3L4SIY5GHOOqD(mW7wc$7 z1VcXJ2uVOljO6`LhSca1eAatg_Wm< z;H7rsHMv)vVc%+#m1FRnVLed;`ynorxxTaPY^yvqXz-90VkIDxku93hQUZ~!71#2U zZk^a&5b7DJm@YeUNNV=LssFl9o~W^zh}OVsP(M=GzVtP+dJQp47-mZoU9Uw?SLS|C ztRRs@F*Heag?L88*9stOu1nz<^EtoXDXVi()2+UzHV>%~d$M zG!c7Gm5xOv(JI5JrY@)%Ul~(gSsBE7+K(QAmNNzIxu${=pA{^c&TV#E*Pxa^t|YgF zZ*iKdPkdk=H^w32h|#1#X}ut7!Wxn-$$w{SGo^rwB9v^_6cqhb;k*M6H#%-fp0}LNkg@5_GvVHfx z%hM8<0{fAQt*M}(8|z1|`WO{1 z9nBzP;9R6M@2Z|Rmf}i62#!=f=VE@TWK2W^U-7Q+-6OKv`#+AEt*EGE5uH*H@f#x8AU0)dR!0Y`Q80Pw#U6@-U{Wp#P+b(_FZqllpsM1ZCyYqzB56>YBf z4$SNGWK%fxyrwoD`@yv7!J#y>5pP&RGJeBfz+LR52F+4DgpRtQW>O$6hiaGbQBp8h zWfygQ4lUMMijfDCJ@t~gYLc(HA?r%`q_qzM!$)y_=wESum0_;mDMr6jHu)6q9!&Xh zgV(fUouy#u9R7h|iH{`EN7XupKeWSRCDf&|8WnkO8g8;;7dZjJPeEJ}Sh7`oUziX(xziVQ(p0Uc8LXm*JK!_X9G{<*aw$c?u$x2RF?zV!S9#jkM9CCEiK=Qd~ zP5@ssVO!E`F&UQGe0oOC&~H()+H5bPG`MmImD;(Dg@DpUyN22!2I@aK&~~a!jG5co z|Kwg}6OduaflEalnyg(k^PbuTMGXjxIKToXwA)iLd8)87gh{THnMzre@{z|yp2BrN z;P^q%qO2!_e16*tA@)Jb!iqA$XDQCrJbA2-xrD(iMEV7q{(FF}<_-z%`x`~@H)&hcQHD<7+B^c7y?6$&W{ zpDb_iZlX9IFHJdDbW1V*3b{NNF(x7iGOXxvfPxAX=Z0>hfu2-nt-5X7Fo&% zvP{JY%V_xfAb^oRc;vKV5YUDw@zxSwOl+BM(uM%jee7Wj%;bt ztcRZ0E>^SnMX>~@K0~QqtuLBcnJSUTbTE<@U(;Ta9U-`Rq9NA4^&4V6aLN7cC91%*=hf_b5>*B_4s9 zyr{Vdbe3AR0AtvUR!7_sFzE5@3skVyQVn)g< zZXVP0Q3v-c1GQ>JQ_oC{(axh3c4`^%>@%o2f~g#gMd@n>Be|FW%M75QU-g<94ulF$ zFb1T+YSJ-#=prmEcxD^bEnQmpf08DlXWk+~`$@u#ovV?eqv>c-1W=W$YfZ4Wj&zXt zB*bF84uNe2(6B9-^H9r9zSgAtoe1wcO!#P#fNv-0>6wyxB@(u^a8OMQH*~nw z5|Oq98Nf)kXGW1OYnQT8U7uCb?sq{fjh9q^f`d;$N|}&GE25N1fg^!P$ZJ@Vyd|BE z4U?Dt@4V&MKPt;^kW?V>@9KB;8brVXtbQDGidm8*Zd{iJ`gr;7TD}?9`GNWs+XPkD z0AoBne-jFAH|F&W3smpo9}FzPVhmEW7=!Dtl+K(i(PM(R z!TWLu59A89OB#bJRM?Rcg>$M=LQ&Sts1<8p;E0$h#u6aV;7>0tDgx;5ELT`y_jdt+ z;)`?IpXMZiS`V~7*9kA|?hhPYUY41)WnqzeW(AIz@=!SZkzreS0g`r@wZqSe7O9Zw z-^0ag)TnZz@eT(~!>PeZIR>^7dbys~cd(V!7`BUtCiN>J_eL~N%#cySlJlG^<*Ev@ zzCxE1kL)T<>9D@oXQ&}d#@%;DJ#}SLi(ciqjGTXu07Q)w?!Kjsw`#Qk;0ojh} zr}!eE=Xl*gw!2s*M&Yk$o53D#6$@60NTKE|S%CayQKMTqkT?hH^EYrK-Q$*lxSOND z+WdN01p@O+H5qMISiBG*`2bUVtwC+2(4JV~@;g&1jv3AbEvD~#{#B;+Q&^X#n1wEg zcf;i*B-e9Mr)_8D z$Oy8PyyA*ok`vKPBb`bO&DsCu_=TH-F?9~G8$5}jwU!-_Eve39TupxRw0%|gB^MZ3 ziZr}YG2<6i&y-wx$>%SlQZrkq2%-DV(D*VR#bMp7*T*;1q@Ip!i^;oyj>lxuwmK4; z)L#;69VFyCIS!x!^gmC_1mC734Um`c+p;;Sn&ot7L+t`YeERUYcCj6k`Ty!-sLy^W z#Vcp7UrwUYHcy&3EE(mI9QE(nf?LPELE@_*R4xnl5mVO9`-ZM0O1a$seQb$e$uxJ) zlp%vI&r*{0kj`5fm|BBH8YjVAjYA|&p9>N%!jiU@PMe$2C9Y2pF;|HOQzt?#Y?I4? zFvBtkb19iYBbH&N*j@0pNjThC-ntm9D?SO3+KiWkjF(S}kiujs=ghYh+T~IR6QHlE z`+ML&H7bi2n~>hVl{16|7#b28H2@@zW@<$mYB1yubcqbYnRH8i>g5^a?QAsyYss@d zWDGUR)+^)+VmmMlXO6gOIr*oUNYEJysYS_MK&%U5 zNIiSTKFYcezlUn?h#QQFKx~yhm~_MYPB<(44E(yW!nH~))fROyc?Vc#>Dn~hoSu{X zCq_?(osW*%x&JaB1QK)3icL#x-Hsz&jXE=D1FJ(}F9h-X*bow3`a{$7`6-rY%}|BU z%fy*D25J?Wu7BqhfA1FY*X?FHU5m?^`r`KnMu1+~8QcD6i8nAWA?@%k)g`v%LZlS3s|#kZ zMo%P%yQo%ZYCcLfPclMJ&!X)K-G`X~4eB?fy!GpYd4Bx%?pQqB5KLXgT+1)E>cu;2 z+J*{wWm!4>n z%Jg~{xW4!~shdzg#<rMLfW&`JUM4!4%u~|SV@v#lsgkF z>hYEO=Ry~=xXQH0x7xzkPkHJnHqk|;H^KJY@*^-$Var!yUn3Z;T3m9a1j^n#WibUD^^WS*07cGg51thK<5#lgKMo10e zz?s(MS~HGH&>mA}+iu;*^PlpTC)u-GKGDb0l?(G(-I%YRSG;j=t9X##{IZXV!aI6m0@TT{-n3Z zD4zej0_4OPqRt*N*%QYt3Ap-#8q%s(hrvo`64+nEs()JG;4Zg74@=zNQWIV-k(ef^GAfqZ#NbOSQ$WzD^N>f@Mh3C63{5DfIGxv#w zmL+_yy#JR3*J^V0j3c?rkPH-x?A_3b-6HNqOwdH>){egJ!;n-bz+@pPR<|*qvniJ2 ziMI%9;jIj@ z5!8v;)65K15t`A~l0mVC0^}q@VF{wY9DDCX1n4ppDU(LoTeP|?Ls{8C;mO#YWVG9o z)UFz?lix^&Ye#qYNFXoXjKW{65ojo23>@~ms`GfS`3i5TH4=iGpp$0$_|^#+muBzA$BmsDbF+4+ z9XOj|4~oE+40W#l0o*w`h=P~WVApgvEdgR$;YNF0y$h*^4m;YI5J#B9mfir*)*5jB zJe*1DD8S&#gw>-f{MK9zlIeZQt9RF6N}hGf=G}n8x4l00e{(t8T8KW|#}69f7wjq_ zeUmVwKK|nH2i7%Nj)OA;T*~H)<$w3vsM&imJ%?0gpf?=m)^>d>vHvfU*$Agv8gBna z1D5f}P|-?916Jg~H*rL^hf8Z|Yjbo!1B4yVk3f#j@bq$MxZbB9g6-Z!nM_LQakLF@ zzjd4(mKk^cS}EuYppy=#vqhJl8xQ39{6*((5ny*VL&kMrYCZoGM`Fjn1Jp7(-DHLK zX5C$Xn&lc_a6rb+{=^M)L&hu&q9MSVwlSnq_1S)`d^lmufHKSn?| z;KOzzXe`&7ac75y)N*WY#gQXWWQfN-r)sye@IUlu^9u3`fznqX-6L{qQ)HM)WxnN# zYW<=00q6^4(~_uHK<`HFwR?1mM9(zlzscva60pIAoN#5@wJJC292b=0IBDl z+JrmV5EES;MXI6%wabpe))Vajl*8_E40=RS4SSY+gXO7hyCx!i3L~%JyNX6S zJoYjQC8X*#I5m?kBQu6AmwsPRj)(W+K8Wi`I|BwmQU<(k*xhDd+kq!;f**5L`04P! zn@)^~?H6}-R77H{6c%~w9iZg(mkO%nVNWY_RyGa;S6AWd6i_nc(Yy&Fz$v86cdlkm z95E3I5Q;1z1p%oSd{K(r5m)AHx!(7JnWWFSq~A3lVBI#lCGMgOZ1yv$zWnbCehyI$%Zr_Ic&!il{xwfLw2r0NBJU+X;Ja|pFuyDTFTm& zP&@$h7kPt=dijHqWLN?6e*%Nqn_Zu1DS?4X_e&&ijsKIJylL=@(+}Z?Tq*T@+GNH)j z=ByVPG-3pGq$|Q*k*~bMhS-$7ODxGu5v*;IzgLXTBs)@^NX_9g65*m+elQXi6n=_l>E+aS(R=^;x+)7Na+Ds_eze zhV50y!*3W?2foPF;i+D&^?y%BxDy_%EC~kKd?Iu_Z{!5u7cioqTvSI799I+_JICZa z_Tv%4(Q~IMT9QMl)4~+NA%>VYK7{kZ8#8qqv6EF@^mTPZL-#0-<#L}I_P?R6S3JxR zocKh?@e?WnStf;){+FDfX_v+lCFnYNB#S?=xs#pACM}7Dgt6? zf_bX@o^!L~8$y;CT#9(;`#aLrUxE5wsTjL7pON?gF57SEy;q1vUf1-8bA-tmato2_ z@Cmwit<8NqGvZWo`R*RL5in$%!mqSOetW!|{9C~u>d-0FC>feC5$cme)-&B%`OAN{ zncWJ8G$293kudzVZu3yQ+Y>uS!^)I9-})<3MeSX8108%YSOV2v{~70kD|$FWWY=j| ztANjOqrU_Z%yW$3q6Tj+hHYEKC9V&5KL^#H1Mg|pL?uJRt-SP1DbB#70#F==#4e=|K89u2%SfHKo z`f-HWpFBStyK_^)j}?XE+ouFAoqS3Da5EV?6KzSy>pAAGQ{c{a@T1vBD(!?}cYs-$ zSAwWKzEf5NjY&m0$Ph!4`SN!`-CM&|ac%dv;Iv$!&}&ir(Gqygl$`PugCVw9L#PE< zd!K*fE4?qIKG(V0(b@b#ZOUjANpciInIPXwqxIe%oI=pgY+(iPY&Vv1hXWk9!zZu6 z1NSYE9x{Pkce-Onoo7ISKSV;forh$gkL^r6?I&!U&}McP1?W=b$#JB08`C^5K{<&Q8u9zi;#&d{il`YOv1S?p#b3dK_Gbn=GC)B?0Xs*4 zzCJ>2wqV?oB%&t(%S4O2H_4U6!D+`qNvA`0amaxdtL%u3~fo42B0IMfKlU}yzkun?;lOGX=q)v0D zVQ??~OX7IQIam$m#`TAjHE|t@Fi2{SMV%H}&b*<=+xZtPmZ0KiflrMlb_f9$FXtza z=Xp#LT_9{wj*=yWh0Q4J9BaPe%m*gNI9(!cieje-{UT`q!!S%~qtT}}F~>iu+^qf* zsi?bsO(Yci$LN8*%!xdoIh)dj{8jN_Og?C6z zBcnV?m7~TCm!yOb>%a8dz4o})`M>v03Q^?@m2Bw#bXgADCz*JAU0#enGJ#SonRes( zo$vj^U`28gCeQcm9rdVbc#;m7y@m8(>u$q;kfso>qA}bHVsG_&_@0p0*vFAkjVoA{_!(SoMxVH))Uopz5?fK#e zZRuF3lYdH?3cW9X+>+FiKITK@KoeHF-!CQR{CKdn|6g~=oBfF$q0GZko(RL|FJcx#A-n zY+5CBMyxd>FK0k#K#^9SzkF<>PDFvnmq5QHQMe>lH7BZ6m{rpe%h(+jxTHr+-eBz@ z6j0g0x^9Cn^(Thepxp~Dwp}&cf1P8)mC{Mk&e|>_)L6GKc6#IVxss>g0fYb?MZ7A-pZD4WWIw~$- zMrCCcF6F1gGbA22#^!PEU=&L4&7(6Xk@Ec*bGI`|c#Gg9qB3IZ+5<{3wX%xRgMo0O zzZHJ5XqbJ2Cr$Y5F@gLjcStk}VW!rgQbJ2YS>cHPl z`~UrKTuZdVM55l;!vkm9pJ4U=1vqhhtgLxWs6dZ)kWJYQ40%jf+!fNM&8^a6O=;}dHX$G1H z$MO0_0|I1Hm@K{saB+jh?26cPck%UP9keD3WKt5*A`xV|KwKJ~$F1T>XzcBw(3s(F zb%%?|3a^-KtS*e;RIDfL*zCPI7VT53c(pl-bfa1DrlWMy!s_k^PqPI&vj?v9vbFjL zDL*=BoSjiUx{B_aOt?B*;bt;GM1zxrrZKGEI|~=93oLE{Fldypb4fr4rQ>2^C@yqv z;9*f3PP8v!WKhcA-1PkmWYB*`ta1M(`|6)I~ zgPoz4J3y&$f`*>eP*@@d4U#Jcu`rM$2<1ch4H%w3g#Z$w0m-M(y)cX1Kt22uvd}g6 z9P=~tSRQQ0Ypt5qZE$fkql<-cf#q`2eM44pp3r|J+zyziyr}4#FH>%PP!QiN- z@>P&f*CDHM9IqxWLLn0i<*9J-MtS!r9*xrV)e$^wJOxj>PpVeINufei&?#J>oyYv# z6h_NKVJDSPSe_`pwMgYLi|N@#tX@rn)Flk%^%oFzAOxuwZlf?a7^g~`(NuH@Ug0Td zCb2&;GlRvumywth1UnMio?fTXyEu-=^NV;mIZk1XqV`xE#3a%WUA%^xk~k>s?1be; zPAUbMA9d!9hY9a(k_`wpWt($mLsZ{0QcvkoiDoUQ0f;_L$A2suU#jMYdAO9k&LO1Vr(hm>u|6#ngCOOuH15lL)^8j(mA zi=~h&DGekXWjnsTl{Dax*wQ1WJW#k2Dc!HyTFOIVF;|D8U4GMVTzawMiw`fhfKN4-6Dh1ATfF)EjJtCu11PiMk3c%7WNLzjiarM6%q%?ED>m( zdW`yXUm6%}xl?4W6X|}DNF?0Pmh!MAN891E_3sjv50+l3LMU&RF6RBlR^F5@iOlAL zk(C9NH%mWrW68=>%;Kl|Vf8KCD`tmS*){?zg|cAzauDi>{m#;>+HxZ)VHyI)}sIa5x;!FR&xh*@>gfjo)53{a=Uq2xq>;_xkNKLB)hR z4IXxU!G8oh?KJLuC!T$^fk)MOa3%5kH#-37|1wO3cXoE--~avJ@h|`KFFX9}zy2%c z=jXXd=WsY24u`|}1@@;%{~v-zXN1XQfLdu=HnP_}pDWB`k5;Sw85)gd&-*zX4u`|x za5(SbBK^OZ|E`-TS-w8SUiWi291e%W;c(u=MLLJW;cz${4u`YP*b(U*4u`|xa5x+e dXTR_O|34|Nowj%a<`Dn@002ovPDHLkV1m}q$(R5D literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-firewall/images/QueryUserDefaultblockfilters.PNG b/windows/security/threat-protection/windows-firewall/images/QueryUserDefaultblockfilters.PNG new file mode 100644 index 0000000000000000000000000000000000000000..ca61aae7e28804219b97ac2184ee60ed391b80e1 GIT binary patch literal 186215 zcmYhibyOWOxBpFXcRRSdyB3FoySp9S9a`Mo-JRlEpt!p`6u08;@^bI<+~0ct$eKwe zSu5E)lgXZMJ`qX^Qb_Q4@L*tINYX%Y6)-UHnXg0u3;k8H^)o~D>+;P-MM@N`W{Tk7 zR|e8TL|z08tUeCm%^2z{59bKfb^!y!ru?7uO;IzTyT^Vh`04X5Bc zIBIUksAWS31=J+#Mg=cB`Z8RnH$UO4NuC7-%!-TwK=Yn7236$g*-41CP^Ra}h@ zxqHon4i_O;yzpj&`mZL%pzcG@BsJgZqYdv;T}TEzK`P4N*^qco2SB~h_CP&~5FwkS zlLYKnPouBDD*g3aO+W_vIW1E5KO^(36-7HPesdg%&T0zK42!MQs>L{kOFNE{tXis* zyikLc=-3bRJthfrSN*$qK?_Q|Vcx%zIZn>Q*U8igPyRE6SPRJwh-P6^I7m9u z94UJ#A~=W(O^)6bc^gkaKc`dF`$M{2JNAcfMlF$>ssOw6j2bZV*n{l`3GA@zZQWxz7cXh;ucsJ zjh-Arrazo^=yLw!y!O|YxE$cy^?h=04Wqb8^J)=mwI^6@zhN9Ok?sv04Dg%V!B`o~g7 zB(L1uZ+8b))F9B()HPv?M%q-g5gU*o5~AC$F0uf)M2L}- z$Fs4L?W%ohdr@?WVV5HSHGTsjNdHMNOR}Oagex`iA2bP!DCW)xSAr&@sFxA^KS7bw=CBUiuxv*6u*Lci(ZP_;n6It^2y=V+)W3w26(580Z~k152S<8 zL7|-UIp#fAba}tdJWb*qC*rbYjojkyvQjKS1R9l4pak8;UcA*0Ua>h9sS}+m1mFWs zpxUOdvFCV`uR8o4^`P5Lr-r115|2F0R^>slSlHJbrZKG>6zUfdiuELk22uplOgDFt zML^%h1#C;W#r3QKg5be zQ>~o2rvqs=X%Pv|CPDOaqFlZjEbx_+$n>&j=aJiGA<2#L9eLO)8nfleKA6hQ$--?7 z0=4b3+8@R7mcJ5?>AQA%XC(@WP zcbJP}*ac4_;`_xD@9mrV2KjDr1z83{1Y``#Rprtwl0^_xvo&oIqy?iO4z2XioOY{_!BYuPDu#PjQ2V(G+pwK|E8BcR&S7YOYHac7xLFKP zTuUaI7d^7RsxX|gSPme5l4s6%FxaQcJ}DW7VFj@FB;Z<+)2_o!$Dw5mO~|mL;)p^=#*(@Ho){M!;DX$#azoHrZU zQK64`;yD8#>MGv-C5oB20-qA%{wniyVR1TCtt*BLJ19GFY`I7>k08p)z%Kl{K}Y zYdMkggnC5OKs_p~RU#wty`eWl?yfBy`5fZ`DJ5QztK9nYkBty)I@y++&ZvLZ;aS*N zWK$xw zK0jo|*Rw?ytg3UOzN?`Yn!D$pjz~GRQbi{nQE$apVwEn)6!ZW$l4M5c98uOM^)v}Iq4f(AL5_6KfQ+MVa(lfQFc7S5abBcMc z8C<$bCJ}bHzu9rc6X;^btP$vL^r&QErte9Ks^1$kt0^zVLAm%DR+2aT5pmab$ZRqV zvn>Va__}nnO1S~zH2xCAFutuAX$ZwCI?J&QaR-E2EiLpiD z%+%EPO!N4ngI)0ma0qj-EUTtMDFLBdiiF`VGYSb7+V;kE;c~*0 zL)dRqmzTrDe^rCpx@ZyO>XVU-gLh44=E{qVu+cqd?J{c_3<29A0tmn%PrJg6wiNkt z+R6UD3Cz^@N)B+(EH^SD?I@O{@bx)%C7n!^D_DCZsdo|4Lx?ytLsXVP)R4xzE zj15h1_WLy2kfsQJXD$F|p5(<%>h`(%)Mt@lUd^7cQwpvR6+Vxk5>}CIe4*CKk^Jf# zVyx-xO zAMETS4y!S7zQ+n2M=LCBJn+P)+c+ASU;CY>l7SYxbq?^K7iT0bn;&Qde-jni;)7}? z@pq6I$Ss)$KC&K)Y6NiX)9_&@O`Sn##^{AMe5em^(n(m=zkd)A^KT$iGu}rxI2R9N zv#_z&hNlYLq1VOKz3jA@m_9Ffe;SK0cr~#0P^7pE z{GKO!2E44*4y*jr>}as(d^_vn+l zM{lMfEoRYRETh!L@KhqK!hLj-I4yGrbuit5=8X(>gxI9gn4Pp(Us4AME48SmhKN&L z-qMOe($A*RmepjS@5A8tOvEy(MEW&jee*($`C^G3wH}_$nLhi z?!D!_^;0A9mH}Vd7CMj~O-|971fy@F?q)`4$b~j+tW@X6?k2K0a3Pf1d_pT#?~7{=tuRQhNV@A-QnGVAYqz3g z);AN6Quz(}SOLcVrN{SeZAS)o65I0(ZURx!#98DdcnMb@XCe*WF>#E;}ZuGO>u{oZ@` zyW=mHy(|3V0Bx*|mwZzhY%nhM>wNSXuO_?9w}fDecO@-8d5V!KVS*R+9wDG~imr}p zSGkHQDob(l$)_PI!932?-4~7YqzQ8^GdrDDRjy74_~)}cr*JR7 zJko3EmdmI9cpz|4svr@jf^#Y&sE`RC@77#mcIKh##pMVEtYXlX0 zIE+PrSdtZKcV!oM=;-Hin(kNBa0$?(ocSv_Ld!VVH(I+pkCH1YP)#6z0H|AWQA)TE^x5@#tKN^n(+Wi9gl6s8onw~8+^`v22J}t@@5}j?17<5rsvp`WrXm5 zY=8DKx=CjXunHHF>_c2(FXr=+hkk6riQCyHr=;|t>I^|j^Zi4(8ME0zj5Vb!g1YQJ zqT$*HI6cf!PB1_jwWMtyOZg)FKC|tQdF(=Y)sba!xyBrNgIlog`qurC)g7bz;94+1 zDDrsC4%MInvMy2{E7M4 zeThu4(gs(vNOY$#60HuK5wkvHme;?UYn90ARplUZK7@aL+I>sA(dvUBGnb@=OflPF zM~p{%d8Y@4rTxW2 z8MWif9BS3Skk;q^?zp(WK9KxtQ7o(ch^qHoKi+~Kw|io^ji(QpZ2ztXG(DkDQA0P@XxHwnU(@*AHI1btvVw!TPRjBAestbs!%df3{S6wkP^r)VT?~SD9nRk-b^$h zOB6+aJ-YQbNO5yMSOC2wBp55~axDgBs~(VZe!tQ{n|FWGbJYq6NwI=;&l@!S`2rAl zHeog=?;NKcis|-c{urOcVqu)v9&9XH_zl^xR(X9LXWMtqZ9fopxgNJB00CW=7O!g< z68Aa8^y3D?j^+W61*6{RvdbEiH{kjoZ1e-ihW9#`+7V2>EycHw^Y^Fst<7kN^(a(6 z_Q;45l4uS527LTkZL^`#Wf;~ygi3QN?B6&C_a$}DhmKty&<_&?9Lb>FJ{RV_@o8l8 zT2_>)Mcx&JsCo|+^(pFsQWrB zd9O(Sn9gOMMW@FEm`Xu|U4V2|0WTk)ZgHqVvV|Zg7yS$1-Bx0mPDW6bf{PSerDtm= z-M?~0F!ZkBnaHZPgqf(sK(ae2ZlTL--}VS1*f5c@H3DZhrsvwMgYdiZk-GYTIH-gE zfvX!?7N->ZLC_r2BVBU+bmH_>pzNee0@A^M;%r@cbvD{nii+)>+?GD7 zyqGkDKrkWz3&#HWiFoJp={(NJ&;k&HCv*d>`~HBRH_+*^5sL4?6Rc~$24Cg}eydDv z|1v_n{pfqU$J5@4jv&^bu5|?`PWU39?1`=mDVpnAF zABZ-o53tp&xSotGY190$y+oMYhez_up5cVm8UJDjXtWkWi}^`87iPAWjkv1VY63$^ z)J%ZboOVQXj7Lw3ap>ilM;+hyvSeC;8@xC2cUWY?Fh6HCM(rd@gQX^0%tLb$0p7st zHud&S@{+F@Yq*xC2KBh{h>5(r9Xa+Os+A`}+)Wjs0ZEm|sRo7!y@fCbiN=wV^-pV{ z(tZpf$15TFann-HN=A1$v7jpfy#_r)1TJ_%_=zPVH2n?Tn2`a2=;MLYz=4ws2XdAm zMu|F<7T|Q)Y$Wh)7u*vlezL}0#5Y|7GDwX2$@BBfEgMfu+)kem6w34qdBSXb@WaPJ zYG`2osciZO{?JfRd86F+jWg-@7aQ)Kl-f6_t_KsLy%CW>2xWtx_#IuhPeTxKWQp1# zH-&OqdiKS-Nd(0cj%!sk_GjYWo?roQOa$dz+p>O-k53Op(}fOewa~+!G>AdfVEAkB zERNUUsiJW1RbDGT+VPqi5h}>mm6giL%L_f*#KYxVp^WQX zMi2MIJ5h#SV71x!eK%w9p+0}m>deR-|AjrR`@K>b2y%zx&ea{oqU19@(S0m$`2l)2 z7*~Fi5@H0nx^f;m=4S;?iisHo?1vJ5B1UNX{so==?M5-5qRi%XM=oL?zk&e=X6jiU zuLP)EqEF?X4fQ1w_ow-=TviMw;Q#J#6YwWZt*GKRFl+=>LdoO*nn@?>tyiU|*?um~ zbX`H0~RUsV5PlM*M>aFc|bAu>FUBshx_x@<{y_b1gGQGF zC%*B#BG>nR*DVy4Hk4#(JtAgF8Q!r(wb4Kd!Tj?GcPd1{l8NJ6jowDbA5=xZbK@U} z84_pRB}hXVR(Fa|=77gc3fj7jJzGol*tF9h1+x1BjE)Q+g0I!IfB^YohAm7gc^(crg5So z`GOaKti0T(rI#(WvFragxo39{zVFQ8Z!+h)xtOFfEgNGckIw`8;SWg;+YQL0K1zYt z69De*iE?Vfz``Bbtyd0N0*;n+I>sysI%%p`bZ9{tFx{BY5nG*9 zz&(+|C-RIpJ?pVvHdz-2%tSO zbPc>=#`OdOA2|9V*}8-MhMMxv1s7A>+;?5BIcsY)qBPf3710_ISXVr~dwrG(eUgA& zGYd6DZZ{S#Z@kh>U1OBIo`J_tH2R+wXh>PW7L>jmyS`o7JSi5@q9zvN`Vv~LN_!EI z8&_)HCmr~;j3>fGI75ih^kjgaH{?#&C0XW#L?3srGaMOF{#nBkU(*CxQR3*lY72E3 zKmNgB8|*ZSshKw*;#7|3OIq0L45Ej8nOG%CZno{)5zLyIor~7n6Ug;Gl*sND@R$AB zsTE^pa+}*}$>3t_?MXl%;Ao9HLjn=>#|i;Cnc`~gwyb`{=jJK>JvP$~QuJ8x0X#Md z6&E-*AVI`EJc*5oso95>F+3v&JBZ{)Gd&_@Py<8dRXKJR>bFbqGQ6_0<}#yU7+T+T zo1T8#YdbD#Dhpr|_>kz}lfL=868dX}BGiO)MTs?z`r};!vZJk>Tv-|t*gD^#)%F9= zg1P?o@vw+yJyc6PJeV+LvYKXcEI7wk)HH2|T>wGqfQn$X1!~e9`3@kpqoWhG|zukH{>rjk*KWs_meEXStZQ~1`AA8 zQ~&#+bY~AxVM}NR@H0S5U-b7$i^Npj#IY7$Ta*BBu_KpM9$w0 zrcZdVvZ4_*g>*pU-Vi&DXi7xXlu}mk*vA5WIOxxoi0WB?Izsd|<#0Br|9h#3<*fgh zM5(zGx8~aSuHnPlrg4X(PC<)U9p9#|tq3!xdeO3ivNt_@pd>+kKP~YtIMuPnBQ{hd zdSECv^MP+6o@Zjh=?X!DmAA{^+%S1a7&C-o3yI>Bxr-~{z=*&KY9WjOf#`Y3hR4?l z-ZY8h`-JvN*Pn0eTPII5{gGX3Q6D zZ4fz=2Eo)+S9kQPTKT@knwTao^>Aed!~+CyO^YU>xdc~ZO2tkCcAx*p&;q1^0f7}TNWV>Q3!4@MJL9K z4iAXT%G>&iBDiyo@{K4A9ybv9N9#AL8+EU5O0zT{GK6M_Y56k{68UMhsFnpOH&?x| z2%}aEf-w5{l}g4yl3LQNP?D^CsB|LS5K4BGAm*-c;%q%h4Lc}!MpkjX=M|rFWc*B- zdSfxDu{oqOVvw=(3hS~^FtMNu;HMb-F)?WX-LIjK&XnY4f~@vmvkS=~Kt&;iM`kh# zS?Zc{!qFdd0S`Z=>M9vg#D-%F9IO+daRnK!E+8Al#d;PdShOeb+tlaM;9sa<(F}E= zDP^64g&icct8i)wPzpQh!zIT;odo#O4{-(Q4uFqtTT$Ei|c`? zI0iq_4WGx-uAXbZhqM1oI-5v>RY2YiA^r*Ye5=MWnq(4lOTYoO*Ix1$XTjy1_B$&G zp5W(%*PBLapN-tLlUzQGFKK&WHJ39?g<9ERQ)T!&_@XB@Mvc(ciXab{vhcHdh){u` zU(urZmG#af$+E?x32oKf6T*klk_d^O=;Lw9CP0m2!FO)xE{PCbXEG#l{_~9pN}2Ma zn30Yoldl7f03_E4}rO42vS^1fqNAtmNNjNn0Hd zQtrP^w<}<-`@URI^9K3{4LdmP?`;&z}CH+W9TZOKHU22sfqkmgqs z0j=z1-q-)81!Mf)mea29BD^5AQJm1Xl{Ui1ImAUvc&`qjQ12Lxe9h3Ah2G#lPW*(z z72jtep4N#UjQDKDCxENG-g5><*_j|ppd5485A3}6v-zh9ZbOkrHB{D$N|u-ano*3~ zZF0B>rO@EuxZCf3ns4Jg@`+pQf>GBI${klhIM*njuewhQ4t_{}w@TclMI2Rh4Lk1X zI}EO5e;Xo&tH8K7JF!9vqMqK$40|xhH4Yc$$U}yVIKWM{9<;cOIiplW?`Vwxht(jbu!HSvg6R%&JH4h~W)?&N(w{CS#G{0ZIt>A-B7J(N=gb(E*pPo;7$|1V;WgOAoE zUry+r-mKTMWtPX7zpuIpb#x zw)OFn^z`{Lx_kxm`Tpv;Kfw@qNByUcVgha=I(F|)+vvuW`IBk>H8 z?Iu!LBXhWAtU>Xab*>ffOfbMwhdh(sY&it+jL#L*Emrx*>FHLFi$&-{)Z|^oTEzq>7*1jfS@3O)Y5&$GC_QZM;(E>1}RHAG? zFGOa6XL5mS74B5r=d6)iT@fJJYvR)!OJCHu++gvVrhru#IeXs0p!=C+2>H0e4X^O? zN~xU2$C~jq=qeivmFn3bBlvPcEZz66mi47tXmDb5c@-JAbHu^S;B5~!abifL3@w)k zob4B|WgHFT<{~ZCi7LcKnelPK`qRcKIo^ zp-ec?IIS-(4owc7Xt$0SE0>IQMApI*Wu`;f;&y0ybugdql3G;RjGJUJMVh)CF8KOr zEGtER!zKuPIbvxukyvj*x_T6dLU6%W^RSha&PSQ<@## z#ZVA?ow7ULSP5?@;|^_~HgaT*NS!=~MY%T}O%EyEr7#fmg*)t{I$Ljsx?da|nW!_Z zITDycQlRZ4-FFGuw}zNUejw_X6Tsm|*$S3tR390?b|lH{J&;XfZ6*k%{!K8Ml7TDG zui#;Xhm1#(<#91IwB(J6Q%YXX5rlx_UEhiqI-3y{^T(s0z6tkvlOl8oTAFEow!J=T zpOX+v;+euSN~-}YzoI8#u!N?=%6?!aL04KWaS74Yek-hVovVlo|F~@?CPItI{(1Yg zo;Iw5++Ivup0}!tl7S2f=Asp$`TCo{)q$VX^xHkOpD6UT5^5V35|67T1{Wvmxehlr z^ZmAoALJlo3{4f2u$M17Q!F(GJ8RWkkJZLzK#t0XD|bUK2#dK?yj|^@Mp9uCvnetpAV0MhZb>XZ;C=;BCf{-YG#s%Su_P z)c#OF9)R=yc|;VI+UKY|oT8Be%8IwGb+1LR^|_SGmCLN>JjOVqK|mP;VU(2j01URiTT&xmREXJqS(pacKNH$+tub=K zpzu&tSl0zEQ3D%#Xll8(5j|CXzp|hl4Q?YmnVrV5u(RpYVlthIw-1_wg?(Y=>3|O_ zgVbNwO~~DoFi#~m?uKg|=Qu`OfKpG9(LIn_0dKgWi$7vDGI1t|^3AX(_u4gdtGieX zGsKme58ykqj@+5;z6||ofrQM-@AS6n%QF^flz~5#F$-&*^(!8b*&lHsZI+r=&=nAB zErN$Mi(8sjMDvSAxScdQ_e1+hwAg%M+K42u@Ru{kjDwRCGF_uQE|K8?8&V**b#A#y z`g2q9K_Sa}=xDD9Ly|4tI1&q?QQ4w|NoH>qlB&e?wI(Qk3m0zHoh&!5sQXsxX(2~G z-SdD0S`(vutpkbkkXPXLP8v5-$LZ-18S(okB30F(WevT!FZQi!Lfq9DB6c7&4_g=6D?` zK!+_DU1j_Zi5Qll(7GSj+7E(@j_REKXHx--=Oo4kM%}q6SrawW4+#`W#fe{TjmH-7%4OzZ(~_LuD|cbwuk~z(}Dug zk+B;4J`>@PX{>WwQ3(;06q5=I9_NEg&^QWRcbHSi3<-Dp`GxK9ZT}SR6K9Mr&6^dp zH}hCC^=WKuO;&kP(*XmcQANdI?#Z0Z`GEr)s3@k^Pi)XYs@o2b-NS~xYNJ|{lu=!~ zG|%l0n9Kn9Rszw>5NSDP$b>DWKIgIGO$K9E&u=);nmcKXFyody9H4$QUGd97tff(c!ciJi z^#0M2y9uDq*+?Ox`zKlHp%_hmHk3WYi%;23n%foQ0S)O6!sPU>$rk(&=w}`8-*TI3 zVG(ak7xJiMfKCAQJiHBCY`wG)T#|AE?(g9kB>jVtyBj`iF*5YNkjC3|B&hf_c~K!k z;dpOa(~60Qw#GRn`3Hk!kg%&UGL8?i=G4+hRSa1fD9T8Z z2`ujytpEm$rrEM3DE{zLw7~`$}awV307>usybN-sgXf2@V;}3 zeoA7&i5I>sE+52miX|@VhVot_0_um9H~#2==GxaxCLad$Yi+?|_e-0lB$JLG53?Yd zAdG5=F-p%KxTJ@BYu8TRW%X=8zQ&YLilc+H%-ys2=qERAO??oUjJ%n``_@3sjQRbj zy_TO|u8;ENC7PG86!!KG&@nDvnbeDzgJU;jBi|AvO;^oLa~c{W!hWXb=qfdSD&Ub; z(oy3K)lVwn8mMBR)h>j5emBWhRUw z(KD>7Q>+iNjJl`XzQfM_J*LV~ctS0C(_G5`6bG`&Lo`^g)%)47mm2uNGaF{kz%_k| z`A%;;#2=)HemB&9iEnc_-QjH++UW4~FuBblB%>nC3gGBRfL;;tRM`&3)m<8LS;mEV z#+Tn(`{dtFpm%qXG5(r~w_{T^LQ%yYCOB%HvsQC8Sm@mpz-l`O1V1DsG+!vbjU(vX zIH72l*(6uD?=~c4O1D+Ubvv>oQR3XdK8&SWik8x33wU#kiz=5EfO=EnMY#|siXysi zJnyZ$Y7fPNT4meaV|_`{OM!CVCrCUfI-sVS5Y@Qcj9hd%Q+*V6GBg#OuMTOZk@ZIN z`J5BKrIu;0)Eeopj^>V?khAX^rq&em`AVy{@L(jCFQt}kG_ROR=CRG|+l5d)o8}fr zFST^e?!pg7zr>?#Yb_XIMkctg{hu_u%ih&paFvNAPye0)mT!}n>C{nYw9F4abU}&O02Xz z%QKr%uvfzHKgq*sP-*UZ^g3+`M>RIim*{hc0RjxCI|$*%H5d&(RG5E6I@Fu_x`?=#B8!wGLz|%@_CETcCV09?j zrPXM@(7NT>qmND_F12**>o*|)*6l<4ZA7o;Q0g4tBo?J=N5?T!2-I-7c&$*JqYfmw zO9;uzM`};f5B6yT8{KgPDBG@bo|t~@^`DMydmD988mJS=Mg8>ug^`h?LCD0sq8Z7M z`3KdtzEu4CSP%JVmw#qP;$s=udLsL8wMj1Z66&iB)41)vr!n1=>aUaRoA^MqPda zO6A-PuVK*}5seUBhmqw^GY~sE%CF`d$!ltEEd^^Na#FE8 zNw|eyvYTu+`-b7Hqjq|ra_NgI3S_n{3QQ4$8a8}Jjyf^|3feGK9#R*IIuqeR;F}qh zVLfVW%1z1l40Fx|nss20M7J3sM_VkqFt7?02uGergY#T95vE=WNo$dQ6D(#tCRJ$B z$Vw1HDIK(ILII$yJX@xJMg{D%|26T~W^~sAf}~x5;hf}ZKcRJjP~$X(!NuVw9oNfd z7$(#=<7tOVZ7wnmHRDZ~e~}RJJyuw6C52?b9D;-PLC|zl{>}vM$~g= zipV@A3RV1zh5TP5@G$6{>!Y%~z^5i{`A~GWG&09X(^+lMOtJ-Zs3>tB5YCGfq#{IVG$QTC$tXrfU*Bi~xas6hLW`+k$k8sze(x*5MkRb}Dg!3w z1}Bt#)4|0ec96D}u~79=I~ZqgE0T#-$lNIpd2I_YCuQ$!VC%C@$oMIJixdwhd9RV% zK1Z^tvXwb|EeqLPlToaldwk{T;eQ?oZ7ZHjF`5KT^y~S5pv49I7Mz-8ogyEmcz!adhkH=!mc|{XRPBttJ8M9sruqMDwQC;?fkph ztWRbVL?cfs#L!wWSChykN}j@kRY2K`1q5EYe=321W?T8eV9yGgfxIeJ;PWzUhUZ~i zv z0rG*SL~l6J&9}GS@4E2L&6eij`5hPqJ#;xKKpW=YA-G^VH1( zDA!z4>y1sLv|zO4IiYXyhH)F|fZ^gKl9qC@;6~De)|s=YR-)Nm3L%k?Lz6Lipn%Ys z+^u9x_&>PMmm&ZsA@PMQVY(h`#c}@&(JPI$u}qHNNselt6pDk6!#ddnhfJk@XJU!He_%aaj;iovxxTJF~&(A-t|s4Xp;D?HP* zddvJHY&Nss>U|m0$`#C)=B)k4M8}3z@4op%E?+;w^2S7mjMM>g$m(=N*78?j4YXp) z-hJd34-{5uuvzN=AJ#0^&`D1$-|hG*X30nK>8-ct`H=3m` z=`stui|-@|h4DN2HOt;mDD~8Yu_`jwcnPGQGOvg_%|F0dZxvw~MsokEQBmVDpDNvf zm9lgt`I$Msb`7e+k#IEs?$f!)={b(?5R*q1{$G%)GSCfD2U_c=+QRi-eaqGMNMK(YC)>y<-N>3XrUxA3OkM}Q2@@^_EEHmcP&scLFsQ(wDyXKln zb3A^cy>6VTdL)w2Eoyd%Bfi|D9$swdGB~sGsD1G+bGzNF6#HKyufP;3Qn)g$baMx_ zcCRzW#wtm#TFCW{O=NM5zdV)ON4s+RH~)Xl`pASC@Zc#>QC**$_22pMzgF4=ub?Eb zX`JQ@TKa#aU%}qFQ8J1a0|SHbx`hVy*NO4}hXHmFeyLcq<=wL7|Az&B1^)a2Q`ukZ z^Z&Jfg3HIS{7(n}w~{aTmq(i~TmJpO8edCKwIgG|(iZ8$|26t5vbzqYB>3vb_1@LR z99qHy4)b-EYKp$SFXdI9YW{yZG0cp0$2r623*UhOeUCsEZ4-QfXYxoD=4K&;Ql z45~gCiL^v@MBX1c4CrioM4l$!>R{4k-s7CcVb*xaBKPXHAuQ$n7frlm)sxM?r<~#2 zWZldavGUleQu-{Qd!Rx)zT!HK-!w4U9rpGlr|4-8*v#(cmTY&Q-1@!K<$&xVsAqBX zU_;>P)M+^&Klbl@$+mNn@jpY}>x{L5ZJNq+dmA?Dr0RsIevux{B=cYUrx;0$Z_9Xb zKdifRet~xK5O;m6F?hQd2v_ssWx@FP(zPiq^IuEH-hV|NvBXjI-U)Ja?Il!9wb^=u zFO`+;u0MsKbE^mgo8gq(;ftNn0rmwI@)hwzzR^w^IuGK75&Xo{#lVVb_ zpJQllEuMf1Z5BQOT815py()K~P=u&u<3%az8#>9i)gyWpn@AgcvUCOB?N{YBH;v zY*gH^8_5SnO|w`{ibrYQc7!At=W5f)epvUKADM*BKX>y(EzxVK(R}1*pT%y1(~2uB z4=nd{Ef_3my4VFqH;La`43fNF<}3yo3D`n#Xt|%wN;l)|gQ?A1%|B=r*Zj`2J zcFWu7XoOBs3eZgg>Ic$msPI*RgSGFS@G)yq>+MfVA_(;wFBPse1bnV<*~0G%6zF5X z537XYg6Hx45(i2tm78I)d->0VC)#lZADPs4PyFzW&snlh@%XoQo^QS~-XM_Lwj?QNOelg(V>uq3rQ^NDsr%7_$jP1c~0cDNw9-O;rJ#j0J#P7BuFJf z=3V0mT(~3voKxD>C{4fk=%d^nXn}@oPor4%jZKS#bbzh*sk{{wTI5WH?zGsOj+>?= z5HW7VQN~l``W<@H^yP$#94+Tih`qKN9lw7#k;++vUd~#Bd*~0`(4ZP6>N>>bjZO;K zZbxK=B{~bc0sBEb|FviIfw&(P!njBxb~m&-6;l~ZM%!vKf2v2j&a{d^-&R*}K=3 zY&6``)G4KjL84JkSQbz8Y~AwSi73)G@&=Lx&+1ks8zsIq1Ee3#KV%O|id#?8!ZdtU z!cGqHNnYq?WjmHr<07-3lYSUFrFG~f1YMlYE$jo^t~WFFG|f@-PH(Br%MKLj$KBYX zmLmA4m;cPW$izaL(0WK#Zyf9D+wj#YSkp?~{)gYRkGyaaK@FS2b{R(^|< zvGVDao%zMazpd*11A1hlB1#?K9Nr;;5VD!5hiR8OPjEKjw79A0=jP{l5XD!fqYe#2 z=JX{?a_K%W9ZSvotYRy_Kja7xu_{VJXKO(8?Uc7#a&N+`7;8|o&1Dn7tZa3wLw!KT zcNta3X+=$%)ss)2ns~9qcob>{N86}mF58t|s@Sf#$iv=U2no6r5SMV?)5t5DSd#`v zXQN}{c%ofbJH{_!YE&X%gGGtZH>mZF3aYc51VSU#DUAz4t{1uC*?<%++}xBYG!f%!;Rn8=2aI_&?CZCOM}7- zP!JCymqF7i}^7CBrN6%j|47DA7UH%U~(mmW~hLhIG`MaEfk{~HML z%H4~bIXE$azQJ2!xz+$zjdVZahKFi$bUaooA?w4RX+uA&q8k+`M=cr^#W0UM*ZKbe zyg)<0CD_o>#59BOtwyxAX0Rh-_oBJA2Gv=1_?K1?Vw%|nrD)#Rf!gA9AV>qpnu)5W z2DG%)qqeRdO_ljD$NX6GGrx`k)V0;1lH)~uWd#AF2RU_(=-AMN+IlVC@M;Jl7CyWE zD|({JmSrJjSJSis8`_#tS5-=)lcapBNZP!prXFl)t4EH@h?V649NA^)=;}mEQ$1>G zm}YS%LaWR0hh%U!BBQttn>wms@ULPuKm+T#Iw^e(2k-oHG}M;CL1Q4`4=IBtEth55 zR0&5cgg}r61NF?2QHa*At=Q010k<)Nh4~ejNi14Bw_!tTBPt8h5LjM-FGQVtV|uJ- zS9(4gTH2}4&8RBNp>Y_3pXoXCD$u^6gL!F0ZAA%nhvn%DlBBWxOY6|qT!!SrB78FF zS>32^*@R8)EvT!lL1Bg!%gaj$iJ|$%B&AqQPL$Nup*$}gF~6Vnuat=fl@)nateg4* zL|Ddt#%;1^plQ<g(5WV`R+gh`#R9ir)L zb#%pDT*XnHr_xb=Q|`ptOyin6EKVG{=i{h%OySbd0u5jKBOx(3GO+FNUHHKJZbPMY z2CrWlmuOX*>%(8s&6JzwzFxMq^u(F1lP858hw#4l--r8mSKyUnr?4#jstR!ZF*?b9 zHDXP}rUQr3Rp`dtCrUA2ys}c#F zC6=}D67#kBlt?vandnKN`M`&8V}k(~E>ChC5$#F&QC`+^poNhuo2v+Se(JZeqcDmy zrv})jL~h={Uj0ctB>nNyt@z#hcVeNZA9L(S->4f(U)O~b$o;kJHKSC65l(Lbnl^Nz zqp2Dkk=S=F!DxeA7rdeY+1%0tSyqGcm8lJl5bjjFWPr~hun zRRZ0=gxf#*aU85mNB4b5t z-;K6yyHTENRs$}FYdEOi4jV}^!$cUj%uQPyZlrk}u$htwhe`J6ZV*3|!)15DZM9Ie z7zdUZyfjAZYAZ1C>ce>c!~o3h3T)rC8?AMD@TBLUp^9Y7w@h+jM`1x0ylxL_I(K4Y zxeJ#r_99Z$f!l7n2lw2(6`1Wo&%i7a(ve1tC}`h`kAL!hw0mMW+ua9ieiioLcmwK6 zi&0Woio7&4mPlSRGICIunU1{TT5MrGh8AYgH#UdthHZHNZHG}`XhH9#e#{t(apS$W zV`qV#yrdF2jjZOqxOqo2Oe7r%9;*w}m|BUUv}+%Z+Vq0Af({ZAP#zTg~40~=Z_HJ!M8q3;~$2Lv_CNMdQa84^ec>6wBlQcwF-?7yh zj84v@VB6jJ#0||@Tv}Deq;FvyQ_D{5zvDi1R@;!Uq@%vEfdlIdk{K1)yMHfAv$9c5 z!y&^S!{qED+*yUl%gRDwX)D`+2U8_bfSFXe1vAL4eqV7J*Ak2WhV{g2JzPDxFqvVt zm|(WCe{gUt6n7Z|8K3xdIvtF|%JL>LrI8qOmSA&p7KVE`rbguH5<9|Z5WQz!!kn`f zC8lW{zc{AkmZxww_9HIFVWx`66BBVyQf>$PKnLAr%oRDr-6DOC%L$vz95c_N$cz0a zaC|I+j@km8JaGa`ia_%g<8ZN$kv>hHF3QsYIEfM(@+C%Y!xG8(})tvu0_bLpq$d7Uh2 zv)Wmn<$;axy7iZk(QhrV}CHu{#nwKGNLpzq!dL|e8t85h&yE_0X4a@v31i1jCH?= z;e`aeUJvz)ZIxxP@zzh^rrJ18_s?)_GScvqHq0`j4m!zs zW1?NtIT^d9jAYC+nXO7c?FDt%)trr<6Wy4hv2SsB;8wawd1bbq?Z<94U7eL@z1Uet zGP`bI-MZY&3weR6CmQXwty|FEREC_ATC`MVVv+4=jD4=Nq7981e)Nyb(8yP%srs;l z$qJ8$IzSoCMtMTb_}SOq@yY)am63C}I2DDJ<7Sj&_qyKiU5Tp%`r^W%N zwgFxeY%@EEZHI5c!6UchU~4TRv(p$0n9#JH#A)9~bne-Yy}R0x5t>3IXA5pRyan-* zGnhmk_S|JpVH8oy96xoW*49!%ZmA-K}-i-$f>G^IWi63suLRz--ScB z9wAAog)_Q<;i+X5R@LC(T_42ZLpNZ5brB{9dNGm6!1lxU;LhD`=-Pb{H*T*(d|?tp zldCYevrt}`hSjNF%q)kIUQmOkx)Q8(zlJAY>V_ph11{eJE}cDzQ{88Are_Ao_F`%J z0?zdXQBaVwufK}Zr!Qlg!g=LoKtj~<*#u6;P{20Fd z!zaecBf?_%^JbU=YNDppFPg}F2a#rkB#jWm^%G5 z9)7Ny9c??B^Wx||{VHBRegdaX_mkY_!5kRk^*Jm=tmry)3))L;SXo@gM9&5EPG|&L zDatw+Xe8CNcc}6+_!ltNKY)pa2nx#b$VFltaEv4lz33fZKw9+<>~8hq#fQFxhfmC) zX4`($yJm6rOgGMVpTX%fC$L~IMQ3>$dM{qaayT`hq#y%+ItSr&%MxCF@&`CKV@6?) z6El!SzxRE-NP;@C5P;2Z*~8AE*om{}!(wq;<);X^1%r{NM<#^p2T zFlnpC?YA_d`|Dr91CPIiKxr3tGtD0-+lC33lJI1(Pp6fQO&&ho`ulgdA{W6vGwn#}B^q7-k)%Xs^w| z%6K2k{|wHYJ&l3oB${eVF*`PeoK3q?7wyFZjQ5G5820S#M36*td?kRG(T0MCX5{&X zapv*_%wD#?n|5OP^#|~k?>vRGmxeI68lKl-Ovsm#=G>2pbniW@hf#4w3t7sf=%QAC6A<~#4iO*igA zTSX2+Y@5@*DDpe@;=a3XRdJVlLl|P&McL=>z2$wl<3+R;a!0Px7>r94I>n`kVD#FB2H!e$CjXJUYzTd*VyIRq?e-HNW*+D~= z`Vq~?;X7}JbMZVD?Pb_bV>=%!@R{;)fX403Hyy-=`Xa=a$1p`AUfQ|~x7~3!ZaA4Gf&1Dr*r^#Ocr zn-{O18bCM_Mt0+FeE7%)j7-d8>#ZNc!H#kSrZ404z${!DrPy)sHXOZq4|eR`jZM|L zSezOIn;|wFxRXZn5$xXDiArw(uRMDKeh0_+kA4`3cW=k;gPUOKy@090o%sFRnsM^v zc?9LjXF)aYVI2h~`%&C=D?aeS+pwv%p8cL5Q|#+z=cdtp;&q(u^P{1?9*Na)66gs` zhBB~sPa_t3dok-LZ)E=vr;$^&?_T`gy*FaxmTf3AjiYc;k&7KQts0vvgB?IGzVn5@#n+x4LRot&%1Voo zo9D&!rEWIROpKoyhBc=Md1dXm+L?+Lh%cSj`5k&`??=2N81WcF+pV z&Om0m2Z7KMBD6S#5G7>_TGm;xkEEt-dMIf#%`_LZb%1nr?e@>{GO_}jdB8E6yM8ar=qpS=?o)}Jj^RxK- zfBt7Yexe5^Yd$)5?nma-OZdz`{578N*|2ASCo*jYbE0p{yd&Ob`eqL$R@KAIYt=mNp$Qvf}3_XAur1Y zbA}5Js}*UvMI@d@h)#}Scy<{!Pd22y7M$vI<*q)6GZFNs^S2 z?t;t3I4yQ$S2UxmF%yH`=P}Z@s^W00%;_nWw9UnPbwoWsmglx1szDK&E>>B%A>4#~(WZXmgMKW^UE0RQ|LW*22i zk_81d8#r*@$GC4pM^!f1QR1cVe;=<5jw3|5)|!+&wKIB(u;-?G@SzXfiESSYLqfFR8Y4W4H-ckd+j);WEPc~Op3-DtZ=5=;q_*a zEW6>!$b#KJiKia=4o-~EtM?MF2*PuVjrB)kba8qH5t3?mdK%1Xri}ILpW(o`0#8n+ znw_=f*5any?!o;Zx}T(_7PkeeXkOMH=FfK0HT5uyXr{@yUB` zN3oHE=F|)lZ2KN(KDHdV1^YHNqaf1*r_+SA{8H?^;V#^F=U!l82%{4#h{ag$cFL3H zM6SmLJ7vhWik4CASPVfLo|ZI*XFD@xXClqKjNzUI)-&a18x96ZwAt@OLn{~_7{tWf zqFUQ8Pr8yz8<0%23VrU%Pn= z3Zp~#=D++s{`wz2kJm{&UlfB6}l zp0}aCr4HqFZMb1eEhdgVjKBGd|BcUm{}s%wglMo9W9i((_~*akG^C5SzJxuYLYAI5EpM?s2Gi<$a2@ykZn)t>W8%`Dggj>#Nwby#o#! zKk3=oaIxMDZ2O+{40v2l6xG%t&$5aqzVa{lyMO*NUhbZPC9@ef?(M+H%Majh{^cPg zt2eWcE8^H`6(U;S4+d~yh{JoFFv>fBZ=YR26`09_2!;xF9mYt11 z{{a5tufK)~a{*f0n76EKT5)BOd+wKjHuW%!9Z*N&Pou;=l*)LRR17_{;zM&+zGgpTORa9z{kp3}+G3 z%PPgju4ZI-bJ#E1VP{>|wbo+riErSq|MDO4y=Tv1F_?sZbqN9Xqb21PuqOgoSXfc3 z5JCfIabY_v2L5a0aQzra(cM)2%I z|Ahbf=YNkM9Up;7CP;n-pb=>1C7Fm|Zek4cK069&^%~g$MZ$4pRdnEv4}S_r_mU{M z7 z6$wn@$%np%?>^U!kj#Xn?p+JkU4rC-!>!p6CuxeqAdjti$7FTDWOMUG9#Mr!R{Sus zqjlsKf~ao^ z(P#vrgc%W8r4d~PgCZk0ALT8ZaMzu8;pWXPD9y`54o5(9$cJOEzkp*GFW}-U&*8gI zpT^~p%Q!hWjjXyl)KumpG}?#$ky%*G+KX^PR)kOpX%Z{gWMcm1oN}4tAs%7)#x7%I zK7<`N-i;64b0aDWGGTJ%BfG2=6`S_q9QN>fj}udFlsv z_?d24OY3oH-v*fHCowd&f21itg85!^O)J zNJL^F{Xk}U9ZEATSRH5Q>N6pyqym|CGh!r8^T8O3N?D$sBm%4*9|w?NoNb+hR60|% z(wO#?cH+(t{W^Z{_kIue-Ejl*Ja#Nk4dd7=FXF<`Ec=N@?B25z71>!N&(&z_s08LN z;Dr}n$LO4&T#*VNz#>`4yV-wS6(A-XL`T; zyT6I|-zv*$@|d?8}@8Z5(h(`o$QOfx+*a$JG1+ zY+lwsi4&^>u?Tf!Wfd!{KDAC+dO1m2^hxwc%`Q{llfG#@|HKb*{K5#5)Stt*-;UOj zTzIl7aOlnt<9C1Ww{ia+2T(&}&>+T~ii3Yrh9=TWv29ZgLNrzvg0hsr%>j=x%yr}O z=SR?Z^nU!#?|c-S%QDzDql!qXI2eg))4Y&th15Om9Ra4LF>&QC?Li((3t?CO;*xLX zPu9kV4skn;DrE;>=Rs0mZvut_3h2bvo7Goi!b6l z+oMeKCz+>^ZxJKC{V=ALprpWs%P+owVQUpW_&dLi4;M}8e2yK^V9(}ZMF4od*tub+mc zstvVXhmu`E^1xHci5T`4kB9w03^St>Se%-sQL{)A??h!eiHdI&J)`4T3dl>r63&3| zY8Vw;kK$v$@mn~wfyS9BRi_eTDvh;rlBEk4PYG`R&~M`2TMwXsM9u8VfZbun;`k7j z7THc^?EvL9#8#O0Bu0m)FfurVaT+mJJ4qn#M&%tCGFEN9y()bq*`_YM@;ELpMzFBD zO1};`B~L70dG|#0N?t%s#-kYRzle#j3y1Ig2tItrJ{0Aq!I55uoT6gvy5Uaz+WT%r z84cyqESGvuB|d!t4?X-6=9UNXgD-s!&-SgTzB{SY>@$t!XG?SuKnXV_{~I`Ia%2x}BDb;>>?6T|qa zlj=!OX=EBh5ff@k+i=UhH=`yqm;K=qmZleQ{(KM0x8IH5qV9Lq6|!EXW{t?H@4~)a zby(`{M&HmP^Dg7&EKZ*uLVjZ_^4JH*VAfP$y#-DI|qq8(koH) z>q7=wGY@&2*~Eq;DidB@!P1HeS+q)XbFz`JyJ`Jv>*@llew=>pS$zEqU%=PC`emFS zn^iANs1B43p8Y9x%|pvOOhRKuYi$|a#weU6U0_8i&< zuOouR>1kYk^+`PRzytW~-+cjp`_&gP=1;;BVL3&jNU{^2pPj%Zc8o*ggE)Ee5)#>k z$SAb(o&(;}2GmyOV7})CeCyFiF`V$AwLBl`Y8JZzHF+*k|q$^yoEd+_wLPoifc3JXc*YAB3^GanVT zbx8OpF+Dv=!^MJhlDI08-rEk{gZ&%J(ArpvhN1%1meq7l!iuWKEhu-dVt!&7f#E@t zlSlB)2Oh*z&%dr-VvG5gaOuR0_~8#9!wctzVQ{$MB=HI?&7$Yb3wZjqZiLNN#DXFC z12H(W>d@I-fQjC-7+VR#A!|ixh-K7lQZu<*T3fJf|3P$Arz5i1kEb8`4jy27k3M$- z3nWA?mlru@jW~4Z2JGFw9b30=L1R@8)G~R6R8K=C^Uux0=bOQ)7azuBC&%E*@gT6c ziXaD%rLjwR>PJ5ySsF!VSp|yRc7zv(@#16O!vo*=7Jl^X>lj}Rs#dW)J&4zydmN9y z+Cu`If&6rj+I?VtX$kf384Qp%jn@p@V%!_Bj8L& zLAsM|Xbi7D^)Mdz`Zw{zXI{hTlD3vq3#a`GKauxOEG9dO+IFk;>M~on=g=P17bkK4 znFsJM|NKRK{fCrcU=SC(`!L70w$`a%U1Ke^%5%nNvS*^CtO%xw{|7kMGpk4$r^v0>%R}vnR{JV(=}@;^a$D;}IG(0e23{@-q;b zJ&T9F@Ok{(m%fFk&i7*EL^m$2_*DMmG`h+=>S38YhsT~gjfIg>%mqEDYA=JAhO3Qa zJw2TUC^Kz!W}vpQ0TqQgB$BC8psq)z&g0BD(AZK=a>Kzs5#ktTr$Oz2C$j(rnJz`h z5`jg$^5Ey#w|o|_&v|j@(Su00u%DV9C;5E=4}R?n_{YEfdwk>3S206tz#xQ*WgL$$ zW4NymGs_{&_n*T&$xOj zBT(^bwXPrp%$?DM8xFN#;AQImGc+heao%S>n7)O5pf@WI6~%?{*sTm5DE!P=wwL^8_T77}zX+}nLS?nqXKR!dJfaFkD;i#%-O&FsoS}8V;00^i9fN#=nX(Kl8-H(b~ zCtRh?xbcR)NDRD!$6q*(d5*WDuQE+Ab@3HUTR3*qv79N45Or^H8I2Rmnp$X}?nS7V zE~krSDL2;Ne0M{wfj)b27*(}}Sh;Wly-Q})bu_~on8M|eC1jSApoA7&aX}$m$vIpc z3!o^=jH#Ir3bGs+WhIoAxY7OU6PQm_psB3}xw%ECDez)?Qf9P8sn=9M$1ek<@jKEg zan~n5j;>5UPRjZ#)hMn5I?9YsZb1ps%t?%okE+?H1Q}~leG59-06Q8h;PsM(_)RFy z&%|`k37i?2!XgJ^8Fa67zN+yUNCP=|1%n9sVyHc^6)jy&s4FVL5r>jGn~;GoFAN1>m_9!oG}(=r@735 zcN=Ogqj>VMm*IJQ52!jia@IoI)=>RBD8GYh|b1ZWJKoBefB&InI+h|V=L+# zN>J{wV7{*x=X-nEZKR>3u?9Is6{yblaFAHVxZi;4sv;OxM$kRHL>U-A4aa0O3Nt(8 z@{$|`W~VVRMaT#-d4s6CGGV3?t zhJAa{)zC;{z=6md!sVBq!y`ZX9-evTW%LBoU|sIV55D&_CTRR-R@I?x!v@slc`!BF zgOfd@EYAkCS9mdc{xr@FP9x&XMi=XB?$~qq>^HxMCtm7@tGE_kmT5e#gho{*%4#~$ zQJ=(xW6$8(?s@nlJ}j)Rz_+@Dcu>fm3F(Ek*uMV|_U+n^<{~d92fFe4=`&b~J5kv{ zV&B?`0-F!7zIGhF(=jycJb-5JG+uiC6sA{c5QJ86;W&x*Gf(5$bEEL2TXEsB@8apR zlN=OcG{#nG6s;f-j368iVC2$iyzt!9c=^H*LSY~JPrQm_=f{v$(}mr8cB8AQ2Kl+^ zFou^gN<$*-E=5aQ7v-o!W^^16Kk*tu&NA%3=|=3{wjI0LDzG$o5-*0 zlH80mE9M8N56?WQ%INvt1saq=JpY}CabjqZ`n?A`Hqi)X8???`pr4aih7}!qj^e=1 zjcDTF?XnvY;y~{$tU-Gl4YZnilx0M4{>(`X`&?*jZc=WojKjRxji+8dgJnw|Hf`L< z!MFk~t!*fAhcGt10C#CC8qxze#qmO@mpr*igc2MyYtccHTTxwwEL#Y@ufD`_VhI@) ztt_Wj)aF`ox%&(*jD=9YX&3hGWga)R!4n$6OUKW^Z_dQ#9edD0eW@+7;Vg}k^J5Dn zCnPOq*~MlzGD)(ZKQ)MO(vPUggSKr4sGsGis4Rgkv5M)bMK}wZap%3apwJS;@bCnJ zG}xuR(?Wnh?nOs?HT>fw=nDaqHEhF%jz-i})uT2YICq>znym~6j~t{?UxBZJnsAE{4Y%LGS5P z7?@txI#TvEEAb5M+*XH)3#YJZDaL`Lw_?YJHdN4%up)%7RS8?K%GYEOh(Yc`s73I~~*i?jp z)34)L@3?viU0y<+TTWo(z8#3M?-^VSpzY9IC|o*$??3OuZFe=}dLKpY8saFx?tQyZo|gxEVi6j%R-%#t%r01{mTXNMx(_+@>u|LXaN(`i)ui8OBgM1dAx9%;#giQeG%xat@$U0%xWFf`{!c6JVuVLxW(7nwnMjA|qS zHX);^3Ol#9V(#QiIMy@4!QV)tl!=nkQe-%+@Xg4YWCowWQ0bkgp z>dxg%z)z#XAB-buu_HH=)Jxkfh?3v;8N~ z&*`}(4o2$?Hr7Yd>Qs+bLI3;x_2EItPZ4;6i_L!;wL%GD@Ji{7UX4piiOpg z2@H=+BQ8r?s>_jSjbU`CAEWHFT^aePR9o(u5nG)_Pv3xg(d^A@@(i%K(vV+Ngse0d z4B-`w4U;S_`C%i`Eh)-Jy4$Yy;GQDk7#AHVsYPL?lYA`>lg)sI;UP>eCQw{kg-n+P zF}90-8e$9n82dz-t6K+_f!V=wE0!e!4n-0YF+Zk;$EXiJ8Wb#eDc5W_{2Zv3Ls4Wg zJ(A@NFcuw0}(WiXwE$&-g%5{Gf=FU0s%Vkcnr6rh#{hRdA5 z()2inN2d^GN?8R(D4{_eS)$I4a(qbIQB+>8&5)50j1Kl=lH}9k&O|v0Pqxc|+0lLs zjHh;Cp-~YurQz03{uU~S9>wP$Iie7n(c;Y^ zDJ!8a+1U?_ppWGoAi1xrtVE{AfcXh|Nm^bi_93^n4#jCU$iCAyQv#F2y%?PFA(Mub zY;hS5EVIv;$I{9w!UhM5*$f16Yb#$v@ICJI%a?IZC~unI>6q`P=Tmt>yE0 z;K7#=^X8#i)@ldEI9)}MoMq7$M|N=;iu2j8v8?AOM=&(SGNR5Eq`TDe#D$4L^s%p# zrZ6YgpbF~Xus>D*c5sRUw-5~GHV*(Tph>Aw1N7Nk2$uB zl_ZU}#%j3ay&URskZov)nE_)+CN?6-V*biuZp1m*t(y?CXYTuo#hF zQiPmruX-wLGQ}{@wl*@ww!$_gTl<-cJMod*nsNNQ-^Uq}WlKgGnrRrx&LaM)K6DSw z3Ed!ta5Ha>$g;@tq&^Hxu3RaPcPswz5C2dI^dBd`@P*G~VSWK-c1-g4T-GXyrplum zS@RFRMF{irpaCMz;4ny_`}HZ-~Xc=Evq@!EJC z7Fnkp4=@&OFq1fiL`$ATXJfMQJY$v_YqL>qh>wSY%DGQM0_M??T$G^q^i; zlC~j_{@BSRIOxb5@InCPWs7uAIrbgA16j^qy!yhE7#Rs56tQw(6S^OxyppDbXIqO& zIOc_Mu9cpw8I>)E)BsIaA?0f?xk+Bs2S}JDd1NTLQ6IXH(Kr>4dht-oj7~(DTJ*op_yi8L|Po6etx+rV>)`+D*oGKeur2bPV*@m4R;NP25)Ed|oY zYH_6e^SqkQ(zmi+u9ZW^N~_vdGZKv` zS+w+0{+T8#;ELW!Kc}@HDH72;_63sfwQ}Z|D@zNMXe!U5)6$o`K^NJt$x@QIeB4SZ zkrApsP=(RzO3R+Kd(BOBMeSH5ewiof&tz-AsLbrAAaYnJb3*Em@=JfB_rUE(J+v);~L?arqQaFp2_x~qKgStpYm=6jc@vADXFyA zN?Owct*x-oD4XPo=c-Jl&1-p)`V_3`jEX}mXiW~DD&0`!%RYyH%9~xwov{@~ROpD&je&TETvDR-WNZVpsYV1zM@ovXD0{sOnEy+Fr zTH)!?@r#5uFtF2OqgLdA4fm(gLUv+FvkfH;UD#ObLEmeyC!fbnV_ zrXrIvXiCSy_O1pMcI;}vRK7S+QV!{`r1O=INghQB?TxcD67pC7TuJwV5w6SB<0#$xR6_(aKxxawSpAFE16u(wA8cnFWv? zOe8Lih--fp8CHIImAa?GGtwy2lE;kZgwSgXEqMAhrNXNGNq*#z5UB)p=+MDtA)ktl zviX`I+x@*&lh>i+mkHXg6Y``&n+4YKs|g{{*UY28`zO_P{K6oQky5k8KRrkwjdm0_ zY{t>M?!=J;J5ZVLp}P^DoC<8&dlPQI?FcrvRKjhuz@1TyjoY@Nv7!Lhw|WF5WLsvI zm270sDMD^G$&w-yVn%H#hHQf+k4)on5?PXMHUCSGGRsUyN+w@XA{QqUH}KplkH}Mb zUHdEaS1zvUB-fp*$IFyKmNKcO0%pph#AZlEo>dHl1X>@74jnq=sf>JeO&$^J_|<$h=Avc8R&+Gv!x-@+7>Y1l5{~pjY}mS0 z5oo)b3D$_Hw!TeUtEFhEEVmF{R>^3y!*VK%L}Yz(OqPt$Z$j2t@P^1C%eEw626^?L zfwft2EibYzRUWvhr!x`}f7WKjwSQXExpGB!dEri*nI>sw7|B0lQ@?5^UClZx0SO7M zLx&C>I&|oGx4^V(*RDT3efl&)p^%LGgg%(-xC$YFuJl|~H#DNAyck}G5eb7Cg*9#1 zyJr`w3esV-T478^5r`y_mYs{7oE(%@)}l1mi%4)4{%{|!)DwVit;lMoEgT&-a*XE zKD|PoO?Kp$*P^+h7R7mKh=*3ON;zbyg}fLc(8zF7y&#oSREC=RMwDhc5Drl1t?4K! z%!SQDVsEyisIU-j8U&F<80kfo^xKT8Tn|D%AABV8^3sf=${J7Bn#&swZ2^aNF63De zZ<#_9=hQ77I&|pJp+m>J6S9rn8wj*My6ad6l0U0E6C1W4!k#V7aM`RdL`ftg3FKEa zqP4yn=}vjO8wf7XV=iLDmK*QIJvVeAKc^f`Z7s+#&S7LBfu>E{(OOxE^5!;dtS`ah z#60rb_u_^}(HQu6%Uv+=DIcbtJZh$ji-uF%m@F;zj+2t=QdJkMPn2 zh9+haF<4R9z8iPmup3o5UN~$&{_c;Shsac*D?Gt+aJ znVD7lfR1#(fbaeANn9G9gTdxOZEHK+3+M5`SHF+punT#f5Qc_l5DbSf-gg$4XH95m ztwCtC2LrPK*fVmFT)w{AyeS`cSnd2-RG)Hgmm}qZ4QyI&|pJq2pHzLZGi*1Fb{HdXW6d2JRAH{ti{xEJk zyc0!U6T(3s2F{VJp1q9G(E*%#`4ybH(2J3=L7Y2#R(;^2=iC{!ebw;X5@JSeUrHgr8$HRB9FXmM4=OLwQgD72Q(Xuu$$~Knys*>yOGt{hTTW*#_swm z_*Vm1O2!acT*8ukydxZhe|{C=m=$gs4n;LBxZ%hxI9OK+|56MK@hC}iOnus1uzs>x zVZFn8cO5!(=+L1<$FCHwA<(HgH61#xKsLS)&X3{wA3lWdK7SVG^g@*8r>jlZ!}7V~ ztX$-0XTjsJY2;Pb9?NbMW&;v2`2;hNQ`~^cEFT_!;LG^#lc%v5*Wxu>tcvui!)hfN zmk%9iTUH4vx6sXM6>?5;Y;(esmIjy04UabsZl@iw*eaGH29#8`pfV>H8R;I_WZyc2 z33f{+_TGFqK5_pIC^OsD=clJfdvNwlHy(QEtN8S%KZ9?4?w7piHH&aEjwrJ!6U$oTF=*?YuS=d~20V4D zLx&C>I&|pxmBF=ZpcO5ULx&Ebe+IZSO0eVbEx7s69@G^&G2U|)XD$q4)gMCK=tOnv zMr>`bgEO&=iG?7%>6wVh8s(`4H3KYrQ3Mllc#G<=bMr=&XS)%YJY5A_8)&oLDikeV zytuo2i#x?hkQ52-PO;+d?!}$pF2yCd6RfyfaKG%gyO$rplT7BFIWu$S49V~OOyRB7 zgp@Ewskhxiep-=GmrxYeMP2D@ehj_zzMkQnyL3x8s4>xe2eQ+a1nm&i=Z)~o`j@_k z^SdUlv`UwL+}hbq3RWK9vj9YtKugEteC^_Q{h1;m60x^=EWsC(xQ@j0Vaurb19sFO ztH9YMl!P3QkhP{`wnn&Y^nq5_%{ZgH+okDh8+r?DNck|*!2SoWPxJuoZBERur}Dbw zOZnR)K+RKy&p*0OXU74IYmM7t^svSX^ke=C(IaqKqN1sGOYf#bR#!OKIRS~{db1`S zK4@{t_4RJfSPv2_&Bv2$RIniK4L8$Vz&)ln+Wui>(ZW?0BhN%KsUGLCuO=LvqYHge zg{2~qX_znyknm*Z$rg?vOsE^99x5XbKG#gt`Lvg{IhXD~v;Q+BhkA1g@}2?p6#x@6 zP`SR6V`#?^AF?@Ps+kpBN7mQcj}fEfH5DaYP+z%`EmSx0RH5&=0zt_5@}EwRUhAG1 z{rkF>pJ>FIWcRrJ(wti#BzQ3=f-Cwy&nS@-NbnMURXa*3yY;5?uD8HhNISkL>xz7+7iN*CYk=tkirou2vzLI*1Iz2Ruj}%u$gA0| zFyRvPW*uc3ySaffTR;jIUI9b;thAD730Mm446MO1{C?p2-NySkN#8x5%uT+HDO}@d zTMlvxnHHaz9<2A6RtwL-c4i4u3;VLigrBmXNLr~}xJdsKjRHyNyj*-KIO7-B6n3$! zThOmdb<4DWkonHpb$s>vz^>C;8GXjvfY!iKf;!^k-i^}xgD)fP?NiO)p1kXSU?Ex7 z&;Kb9c3V=^ViI-PQ&h326Ii?avE~f>&QA56RpNU+{`Z>2wOUwlAj*iC(KiDf{U+FO zRkZ0^2mB1jtyB54m1vbM`B$F0yA&@q)+hB_j4nl~5EbdB8yu(y3t*#CO<$6s!PAJPxAd_wYoEuJ&a3B0OyA5@i-BnjE8YyME-BL(KL zrsxg~J5pevkx_T9ehkt9ImxWarUO$gID$`{Ot+rVOrlr6RY=C+Gh+fu7i^vQ0z#!q z8yKW#LY8GHhOERWF(q|wXD~f;M_XSe#9ZI)c5*Go$d>GlM7XE1KfmY<>;-&YdZ*BM zwp-q)zsju!)@J47^WFM|uWi##7{rrkSnu+&-Bo(efmRlPIxQz@p_4=*BN2-^!+BQF z`CXE;7(W6x*XLN0Ao+sDqC~=TFERK$*4kJVb6VbMH95FSUjD+S**v^tfC>jyvrhRx zojB|61kYcnnJPq&^Cy2)uRGAMmz-FH9Z!@w)i*nbt3Vn~;$md}U6j-GpT4Sm_7}a{ z;z9;U^C2$)9C&2E=+Qi!yPn;H`pylh)v%2#6n5zl2gk3jz$nGM5EbO3;Xh2>R;2eV zH*GJRY2{R6vs-Q3RjJ6FNeeZ9>ELwPC^Iu7iMX%r;xyL#VUG0FN0}jTxD-P6&>nGo z05$`%io5=|p*Ve_y{7r*llO-(ttieUiBg*%@c@Ik*3-fVb1+j@N5z5%;x)-~ln&&k z4LAm8fRgt>O2kG|1_$N*;0B*_)s-X}Y0Jzd3}f&MNxVOTJWuss`bn{k1=&s;8rakb zXD6UL#`eox&B{v4pWV^#4WpY0FAS-$B`NjARQ3p6Sy{r1Ae16p-oKr!Fu$pI`4 z`KZ(*l+IXeFRP6wf#?uo6=y`X@p(pyl1xAeo@I^^2&mi6lw0Gf7vr zr?zs!iH{B0Up4>=*vm~G^8)nC=OEUwhIF2XZ;Z;TNVbFp|tYrPohcaLu1 zB1hGVsPAkoa|F|mj!5tQ>+@{_{LEFy^mxf9!<|;jkj!AXznU!$ZY>6OeqEDI39LW< z_Cr`mIP7pA$+G24?-1;@za)u*5<&jSFoYg?9rm(~gYu&N{dcrFJC@j2T@n2iq`asV z_+|B-PNt53Z%P0hZi)E^`I9zVc1%w%fo|WQfw!WR_`{H~r36rI`?554r6Hi(|geD|D-3 zp9qV4nIfAy5`4`?PP-x&&-cXdkIX7)51)XbcYa5VybyGa3v<2APqKA0eO+@dXRB$| z^?1GPb2$F#t^lQ|f<@HQ4DEyFd&U^IvL4H#k_unwc3z~T!Pw}C>1So8Qd)`n{PM;LapIEa5;|psGCrmGW>KqJI|-!PTk$%tb9SlexbzwmwQd=^ny~!o332$8 zlG<-h>!0_vewD(F+D_x3Szip?&wXe~-!uFL{k2(d5reZ~iMM}V2c|YZeN3iqU_qn` zqYkf6j4ksOu~2x~mT>EIgFiI^dgkfdI~q+4@U&mNVJ-dGOf@fZ>qM8-do z`D`Qt%EccHM$h$YqpYeyl$>Tz*~FJ&WRdSQkruNu!$(?r|CSuCwHiEATyyi}(h*^j z7>oSO8t#Ja>=+_X2{u- zTyi={{}(N_jM2lkM|`3YZ8lY8?;c+=2g5g@PM-0{smTo1J`Fb4J#4)n`3PcdJ9gGR z=r(#>vh)PXDt{z2Byj~7nrIn@zb1C)i2s0mt@lEPpsaOzKgfApwLm_f;?|5+tEVky zjPi5mTu-0Ba5+^eJ2te^LBBV5Klb&}u!=tNx;(ue+=edq>Gis=`k${)g!z1!6A$T)z&g;2NC3rDnvtFecwU$8B9ya#Wy>q&I zrgxL0KdgKFRcSR|R^;m&X6q^nnufnB5*%FDnxxK#n&dvE>*l$5Yk-Vu5R^C zGKc@+4(sL$J*&HNH8ewNHR>^AYx5oD&{;BU2k%92uG;c+>~Zg~h_rHqYsi)YXppN_|rL-$VnaEexNkz&osYXOA z^|9O3e=cvxEuRmy^_PKd<};BUz;a#dmXo8&soc}6`=^^{g1uki>3M$`BR%QUp}ks3 z^Hl8olCyhJ(7919Gowo?Ll*BmZv`K;;uvOBEw2cV9a@s7P*>o#YU^fUj|4-yV+a^>c>UJkvR zWTZ-hL!0B0(7R)34JK$szb>2ugaV{l*jqR4pO9_iojBB`dsO$e*N${^Q zNn@Dade{@t3$#>vuf9-_=O^5c8F5h-OwBCBoFwo|4)!P16yW9#Ilpq=-&#{7;`OuD z5%{UDl#%1J^RX+h)}tbz9et6L{K(>hPO&#Cb)QIV$~-2f=SI<-%AlW=RDQ_q?|H7J zi^g6y{2h9){T1aRqALaTR-5vtS;~wWmY=;yXeaU`>(171i-y<>*FUlx`e0`wIXRj6 z5lYE$u{1da3|y|7RB=w$uqvOICy%V(+Yox2VkSSv)CCa&d5?W{4ytUDv+JkvLLlX@ z{-DTat#Ump)_%BiJ@P#^P|fX}nP|QpwfquC+C>|K%uW}nCq{FoWL97fcc*J_RNTys zZ;}Zk@q{zcPlne&g8k}tfsb+$TIGIEVrgC+IH!-BFoE*vb_^8fQ6Alw6yUT60(=>l zf=Y`rPy{&@d&Qfmcf;}ycwXeHW3z-mfU8W@g{Mo;TYav-`=KS72yl{nQ*lBa$Tt9 z{aG7C#HY8_c&W1EeL+H4qoXy-Q}R3HFlcf{Q#f5<1hqWt)Nj^gapX9dTx0CsL1O*? z2jtgv@9!>(p0ZP$cnnmSevuPH z4Lz@6^}fXse4M0ucwV?4qm_w07{z-Cn8h!yn@vf`shyqCEhj`pjeg6!8Qj2Ov+A~U z2&Y)(6EqQNQ);<)Ha1yBLHI1~OG!yauxwiHn-;3H_^o|syYRgcNAIBDx!tPY;E^<%?tnJEjp+m@6~|IkNM2#Cm+ zu3%7Z{)zJ0P&915pI-;Zy2$g%_iX`r)XDp(QOMbu5)6U z*cpcc@RiyUMYKi>I=x;xox@Bt9~vEoht7)GF54893o4|*WRn(Q!=vR|4#V369|7rL z52HZ!rdjy<>jQQ?!c?GH2~&Rx04!`>*!6~IH2qIoHkmOwo$L~GK_JA|%_GEC72#-P zMh&M0kea5?hS}g>V{R}t;Yajwb6>zr_SY-AZlwJ`Au zs%9e8xGZb%63@1`K%^U5z>J>~-fl?+PW)Jd#kkt#eFGxd9CI?{ouhkDIty##Ar1l^5Hg9BWX-%5pBNCREK@E*b`8@ zm6hg>PcxMn;bd!_O;d!{k@fJosEE<){r2WO%casoU#K@dV^kIU22Q4BG5>n1|?MARI@qV^q@{PYzNsXY!4ybcOW0 zXcKBscQ3-C?@Bytts3fePs5zt-f&)8=6CQ7%wXBrxmga%W|gh?hvHa$C}?G^f{hDd z+}%1aCw`f0Zl;M}~6Zm}oSG5@=?x9=A3==SpT-bb8-v>i3$>HYtDVXl0HM zh~g4)9341s@GlCMH)+@NlDD=I5b3ubc_kzwQa?Lx{aJwDnb5&d?8aJW470Hz>+@>) z&GfsovfcC+&y{^wn;YHLmHIxvQJ(x`3U<)N3b#09=D1HV$xEw0PuJ79p$?n?t+-^g z)*G|xsrjEhynioclY1{dLp9mrfrM*=C(jH?CixSf8nQY|Ag=yxW(36kI3eq-;rTMH z)%N)PL6gqcB@fm_r`qwrHFRR9plH6hi6l|*unk%>upCT+J;XCW^PP>O`)>z+-yH;1 zcvWs7mdjl9ad3ZZwqbe@5&}HqX8h6do?GB4hn*mmfELYl6LvS%4rINgalB^&J%WmYCUOa3Jb2UwfNpn-nb4uPWgj@QMVIH%o zz1)K044)Cdi~1RiQ`1;$8gN}iEvLpBo5O#fMOrv!sF%>uX1O~%V{y;YCWrI;%K^q- zxKO=+Sm>OGClpo&PW*-QHScba`ZX1cs|^Fo^o%_d6uGE1fBx>n%65U%lrYKtA%-P~ zShzeyYXbLTxD^asgc>?D?#(_W1O@si}2-54wfLK^}Pcd`vGB zGF{V!J5+oZKSR@0o9%bpr*g2>Dh|YxyLB$BiXKU&m~E5=IX*|SGgYgq%|NRVj=^)^ z1rj7kG`0&nhRt#Ir zz?<*CURQW7Cf5L!Om_Onzg+V~0#Id^A6je7y}!4-_xsyjyu6zdLQY}i*Irk`C9~83 zX@rGZr)Y9*|A`5};S>1~l%aea4DkFQ56Y=-K}=Ft(bJGs9*|kQGD=FcZcX;6;6L=@#NSzI!5%K?s zpGAsFF#EP6Axl!*y_cVtO%<2tphsYYF{4hf)$9F8qSX38G6g*_(g7a|)&~8# z(0=G%^^BTh4#ym8re$X8-jQbI@`$i7tTFwF-zL#Q^TjQHIL-EBA(Na6$d{3*B_Py0 z?Sg^Pp*7w1H&a+0C7>lJ$M#c$*oN57X^>Ft8m$HRS6y&G$~%}d$<7J|!hBnK(s$~i#`pk&hVv#C z;jXJruVw-Ut&H}rY1u&Av9Ik{`BDoUjUn~sB3L{Xm}hmTGmuBR7Uzo^&vQNJ3k`Om zA8$;oNUw=SB(;m?z&$6p+MhCd0J5gV{TRU zD;xVn3snn^RgyLr7Ts)KmaNt~XM~1&Tk|a^-xN8)5RuFCvbNlD3 z-LT&1ju=rm$d5sSjZ~rQqt-u=b|2j)eP;@>ghtW6&a-A+G83EQ)z@eJ0mI8`?CD!HBLlkisu zCEn4~mmHYV+Ocu-hvs?_f^L0>bB`A1o4^7JU_Rq*TspJ8oq-9%!_}6E`XO=yix017 z6i}>5;~!bkF#a$%i1qQy%ejaw)?a=*j(&1)b+wc+0FXW+9Pju%YSYS&Ijm1sGUgbq z;n5a659E5RwZBO$4Pqd!njF{0JzMOtR($KE41VJtxzwNi$Zo>pvMwi;5{bZPyV`wd zX~#xrXTNz4GLW;2CFC(SU2+aaAn}OKSmd5q{6^m88Q<$l|7;QVZ?^knjWwR@c*R}q zb;QWCo%1%V)YP<$N)0Gum>hbW#ZbrT_48dTjzf}V;O*Ku zN^j`=3}95?B-4QFmAdCOJUt1rq} z<6t?5hsE@UJL__DJ>l+|5Fb4OJ7AoGqwMjt&l^W^F0R52 z1%L4b*G2Y`D{5DzpI>qj_#JCw;OEKfB74-$%x^={B!(&-HLyn=bFf=s5Q$CXBYgVQNG8JfC>uuMV+xo30?^yxjmG=XU*TV&2y1+HJ z$n8Xw>r=)x?^zet!=v}JRHlGiMsjVr*%lYG19e6g2%r;>qiFyl+=0!buwjhC3cDhJ zo>OjldL!H>!RwRe1OoT2f7YZHMCKJ)|KP-Af|a*-0@j>T1uT+VJba*2Y)fnJ=}Ro; z?f(e3-=%C!C%T?C>)sgos3gPw$-hrOX=$Y++AR95TvXM7O4{yk2AeE&2nkGn+#o>& zuPLA5<Hl`EfjKP;h?P-JojexZcTOE{-?WhZD^%zwDYZLh1KUj_P{gG8I_`; z;Y?`ktTZC`rA*uCuxuCR9rSb4iX)9sEioDTjOp{sE-Mp^e+`f#n^)3$D4KM#68E}pE1i<*CN02ANb{Inj~kXY+ewuz#mT@v7R5FAH7eP@y03>r;=xGP0aoV!!M~g zs1>kMY+1j0W zbmW>*#;~udZx!tW^===f?O9snHst#bLQULu;D{4im_a0qRelOq3OChq;Y_dvuQ4&A zWiDw|U9K&Ckptw7L=p2wHvxBa>ztN0{6y>1KJB^Fc=h#|^FW$Jx{8wCq)=92VTp^V z@c=QVft4Idl7~2!8oI`=;;C+zOP|>ytUdYI^upkZl_U1ZBeg_VEnR?-8&imY+E>lh z&z{wP>`mqXGC%fK-Gd(m-kVyKd~W0HT$sX34(rJy=0R=Ko}ZmlFic5GSukVwA%K;( z>a;nABxvzxQTAfxwYK|g-|?FdF(C3AgzI(m?H&?zh63r^@TsNxv|{Zj7 zH0-@~G5G7`vu~&(4u!l#?i;Qqzp2Zlw43q^3~oNW_JJ|iqg!X!)RA=53UyS9j_M9p z7+yP=YQKqD!=T394#~Gv{EW-J=w_TljFu!;?!S3F7IzCXQP$MPdlfK5& z*s8GuCS!SCL9_2qtQ=@fxB}#3QBigYr#}?!AWRh{YAkN{qaGSdokF=OfF2rFc`$aH!t20+j9quMb#n})hGcHsjr-RMjHF6( ze9Ygx@Gr8$#yF{|Viy{n7xmrWHpY-rgi`&MNG%RgF2LJ(D`#$MUGX~;XkzXWpI^t= znM1Bq|2D?-waqU?7v|o5;6)S%X3$dg@>X_jHIa$I3=*J-MRg^E2(2LtZVuSRb_<3u zvkP(bmmumT4X1?eo6A0;X{fPEs>G|!eAC$M&Qz%4q{(qI4k$zU!Mu}~*PI9&GO#~D z4i8s|tGuT}Zr0M%qt<6K+O&60ap>Jr(~KWj3dYin_!v@FjjObAh47&fJX&56BVAe( zFgs^T&R)OglqgYD$`G=Mms60PN!~C5n{#93W+OZQ?9%Y4Et1kO#?C#w8>G@`6 zY#t6uI7uZ3EPu8KTnf~0h6S(rz8nWD%Ce`n3V5f=wdrV@YJ90XYVaID$toEyg;A;cAgN~w=d+@*>Fgx*in+&Mp5Xu6;kXN?$_Rhnz0=x9PY zB_V;-Q#ajwLe${Y#;qug73@BG8pFHN$<&>i=RxWnt-WSs!{V*G^qDbDknA*Hu3_!k zRE5Ka#v(sDQhy$*Q%7`6^>)l?Ll-M@!$S-YY{qV=KY3PIIwf*>1k2v7!}4e@u){yS zsQv6#kM>=MmsKt+58Q!FWXvhjx+hRWv)~~enq+0fT^swLbxre3NSB_Ju#+^nCpZ_s zrJ{Mv;yvP_lAUJOiTc0H_0VaX_VcL#{BHWWo5eIs;9J(h>PRegj`X7XS{zFwGPf_4 zdVG*2UB4+`JmjPoc&xmn~$HhzPy9?=6kY%Dv7&Fh8K9 z_g{WLp-;%`cYeys*4Igu8!IfQc%WwvH1uhJh))OU%l1=17R;u<`lp3+^E#$%t@kmy zGvEKh_}~9rn7)jb$fRP__J#wrzSb?UcXE{71RGmAWVF!83!rx!n#4h*6RHk0Jx zo2Y)TO|BgPX*OPhQ>d?%v1>02t6{shk^o&uOyW$!cN8PH9u2m{8H6Fg__~TK$@V=F zsE$=#xzum`5~IZ`shi;mT}zVP?0H;$BafJPaLnwFccpHflWiEeT2Ssg{kp=4Jr_RX zqk#e^?)`1_9d~$8RAAB6ef{I4Z|~oxc(I7Bi#3?MmA(5)NOxHHS~XKhL~Lq%*)hQc zKT9vSpgbaH7%2&&12(ry2uD;%YVbd1TEss*$S=?Ko!&<|SYXXadv9u1k?&HO)l7~c z=YZT3C$rsW^JPQ>XhqTL;fxZ|ac~u6I#Fp%9?TH7)T4oQ!?15wgc2JnA=4zgw`AJC(b#@nUV6;p&yMs$-zMoTE5kH$*eo?0u9X?!zJ))v9H#jOJup8g* zTJu3;jy-;6Ru#ip+M7Loc3K(Z;?G53v5jSRZed(S1$S2@HbV^UUTfl$p9CHcGI3mAZw!3+HJTh;9 zj1r-UDYs?1eEU}v(IHiud<-;CE1869+j8sRx#3yh{y;_C-mCs7rmv92-ikkTc`L{6 z^sjQ1bNHTex-}1uLI#Q>kFtv1S0x)BAII13ZZrrD4VByiG6nY0QfSxFwRlwyauhpR zcXTJ=jBz7iKyn6Es#E30`7_7!@vEbtu;vxri$uvr?!E0!h@hnIXTQ?Mz?Ca%6}i%B zOW0RU;_%V3iMspGLSV1Mr}vQ}cZiP>RyI*V8+Hog5p~D;mO%a5TBy2f_p&s- z!!_eJFQeL?l%rdWF;86Qr8PIBCSi1lSu^prLdSPYohBj;?Ud&E_<8900WWGCyV}s< z_j;YG$Ms2jCwiu98ji`&=Jq4Uw*|Ko-uKkc4=hS-i6~PGs(#3OK|0sYNvKYbS{W_F z93qcot54fXO)>NZ#r2;WREbrdY^$JJRC9f<4<}DbPq)Q!Jz(5VXO{o?{ON(+;-V`# z?G$`&tq%`LUr7=GQUch;pRXOk+3dKSPZE;6yEsgCOqZSgJ8l}hjq@!uCMP7QjT7?% zRe`vjsj=KOC((4(kQrP--RHvPE z0BY|BT{=kwO}Q_?oi6Mx!?CR%dmp(2Bcp^2*vaX$r^Ykt?Fl;Y+t7&F{^f1)hXOp# znBbVPe}h~H^Sf78-Ft9VW!144+Bp7U$#>(Mm)Q(@ol~7!e3CK%AmIe~lr$BwdH~*r zFAAPrOof}2?piU%;c}`-MyEC#^CP(LLL3~PCf}NAV$_W=O~>P6Fqh}FS7T@Kh+8S3 zhV0d}!Y3EWQ|H7REqoIZ#dr$n%q((y5{-<_L-Nm{>1`O<&wswYPa~v7MW_skp8HOs zVUH~LXHnvpi8KvnnNEvrZDZO|%a7f?lkEJ-k(=?i6GoA-C5qgrmWIFDLdYRgnA6tY zAGlBzE^H3+(zyb6awtVUs|=97ZZ5JzFmF03^&Z`cLi?j?;jxzdzsUXqrTqr)zht#Z zn(jUU_^FkI`^Q$ALp!R&?nUltb@Q1m+c8T#=$KbO8B^_K*S$=@?qnw! zYL*(k5@JH!W>uN_o3#PN9lwjA6g`-1+cY$%T$cI=f2d)La#|#OV}q)>yrB#OjA(XX zkKXFoQf0pO*5A!-ff-UR<3N%>eS>qZN1ILt&LXH*%e6BBAtQ?RkFbxWSFCCEFHp2R zq4`Uqs!bc2foJRmX}woH)4~QZw9qYpg}O_e-8f{eHOqG8gf9cPiq2P4!h}E9Yj|HI zjhd=Ujc1}h@guara9BaHrj>ciKC)e{=q#X|J5LWNQBzNLWI>on)BuZzTcWiHe7R42 zBodhKhFv1-5CcDFs5ddRRUMd&VqVeVjKTEfc2*=F2D#MnjPoj-STrnmTWM!`XMP9? zNd&mCw-0qakXsylP_aLZk`ZLM#iK(O`1g$kg2K{pcel2vpakht6qBR-qHEAQUxI;st$RSK=-mYw|X%XTj5`)CZ7T4TFe z)EHwwjJyRir;#@|UoD21P`zyWfJ2&^sAfgppOxiF@JbolsYnVE{tIQi6s((U=ZX9e z+~=#E7#@X=;_=*&M9!cEPtfWu&+K!{_~Lts%+{>4z{9%HmRsG?wgt)TQ|8TF^G#h5 zVYJ$gALUUy=2^mJcDKJ?vHcGYd}n>Ye2E-|ITnQI-fL_mf{kHq_bzPn3&EOs`F%dl z%|bVx!b^ATzmNHDHYe2}|Q1}ovaIwd=Fz)O}7T<~0dQ){#haIQPw%|)+q(nipB zInL=!GV-tt73Y4g&RW}$+W6w`>qK-;PoH{>jBH=JYbH}4JWG52Ms zbcF2!&kIN4+XtGb+&n5IzG^C}&T@VP&CDs36aw5W5w{jB@HiUKTASt=D}j@;CJy$* zRZwR6=2X~SD$QKq%^A-V$Mel*OHUcA&;S1x2pHphvq`wgQB9_naQmYO6SupRIL1PU zL=gx6l+THy!MvF}!vZIEp01IuvjJl-GnzbX96Ws`Dw%?~`6HDA8I4v6HGj`{3^fty zeG!VK5(4t`X<#=#I!&(FBP_AN-s976da6?DW*BIOKK~m$bbi07o8a`L#Irdab>A@+ zxN~d27K*@c^A0qzT<;JdMNrl}wkIZ)h& zdGunQvFTfK?9Zg)bI5rYAzlcj;qWli1_M%zcGD=sSbJ|>u^D?O_0{pwcTeZQnO-wJ zk25N24NTs{hJat(9*4Vds*GTEKK`!F2PFJ+%TY-o5F4`@{)co&;oT1y*n5pyPh}xoe&Szz&mL^Hi zl2SW=9<)WGTlNO1S%`Vi)F^C;Yvsp*;DPI@Tb?dOrU>!CFEe@vip+n}q8G>UH>D13 z-Ws9>%WX6euufE}K=J%W31sZ7%W_Fr%i=k47|@}b^k1zNh@P_ewiZ!ip=Q$VK!f(t z$&NS7^yn~e+Qe*C5Z=3uI#ILnmlWFJOV+)qpI&`Y4AGKQbr90eYWZex(?k2v^F3mz zZ|py)>Ya!Ewl-quSl45(6tu$tdcw?Vdj4p|^%bK9P@RIZ=g5C@?xFgyT|NTLjM?Ce z*#Bt0wg&O=$sA%F%u6i2)OuUntpHGw|a#4`f&ypRRI4LZs1$VZCO-3|;- zi1Y^5hjUf%vmhB3Z!jE{X0^^F4#y1l3Bo>E{!?@Yu8P55!>C_3J4G{=;jZhi&`!fOt_Zy z=RkCPe8!e;Ik4^}TeNtVy`NuQ0wzVOmZ#lC0QWoH(vhW&CV~g5|zhzI-27mR;w$WoA+h6N1xhLz~7*I2L4Y4>HEnX@LZ=SRtE%S9I43Q~p z1vz@oL_(rc>OY5GppE6;Z*J#^iQeR3Fb(P(1XKOwB&DczN4KJb-JSWi{+EjSS8i48 z4P3AkAku=q3_U*5HnoX+y4gtgJ`q%9P`2-L`XeUx67<7>u7@m7sEg3`bRiy5IJ31t zb5^KCa#{vLQr7T3Hl*#2U;~PeKh`FA@khvVRq)Gd!7GApzMSHZ0%*r%*o0tmK+o~U z_0&NadsVvOPF2u+O?lLDrXmpf5FQy>ojCLaM=tp{kY*WhhA%6Snx;+3LI1El!C9VT zSp+@&6OqsrqtF|Kx?08_8CG9*VONHJ(06_18|*tx(R6(%RI;T5b|scuCE~!2huG|n zsh;}1Z?zSrN)}pL2zgxEwUVI=wzoqIwO~A|L9)yr`&77xV3Z5=@zsWm*;r19$WzqA z(Y4p;@+)jjDr}oIbAw--q%E!=;|fH>7PBd)dQB$m{3Ye@R=k;Q6;do zKN`VveOR~-Zt7OUe)r+MpX<`T{7DZX;va|GBD2-*<0o0>HaM2o9UNx}!MUcUjllhG zv`PQpm~#JH;gtgS2>jwBjZ)@j*A^k8gv65cLf15_;ZzM{Z>*8HeAA)z>oo#s&P~dg zpe#rX!&w`xg-DJ$!eRRXJgb3OHd^sjTGicx6ZJ9k4Cf3QNr&7C`+?|$IOD}VuTR=9h#*-c)KuuVJf5RXYT<)~nta|? z!4`Nco5d!eEtt+Uym%BmEy8bj+h}5C?Ym}9e_+1gx$6~qa@3uv)1c!Z9`rASdRWo_ zU@9jV(ip)Q?(p>Rt^!r*V@Me7tn1j7$2wM;B^rjFv->-N>yw^3+rYvskA#?fCo?KY z_YpI?&zI=+5+tDc8+irh*xII3nUt}E&ZEn`}bs9U988nA4L!pXx+IdhllH~LEjdWN&m$C3#vwKsH=1%EqfC%z}O53AoSIy zXxNnQNlZzQn3Z*mNJrexffJY$z;-Q*ew)cv)$?{v4}7v|gQJK%95>wdy;R6!y6Lg+ zQqFmBkN@*a&P4Q!LDj<3c%B-=^S`XD$URc&r6sn51>|VY3dl!bVx`-9)#E*=c#P5Wm4eI`XR8vwwlbse7+gaqDxWYoDY#-~&lgMlE7i z@2#5w08h9fV*ZZ6EGUZ{5~t;u5YHj4pw1_35;>sauSPFPnVR3&99p^R$B|^<^}}~T z8Z%2o-pLb(gbw?Ap9lUjOjfZNNs+dmXai|noiii(k;($bEI zBq90nX21cGR8(lV8G&^T$KCU^4=PIl4X+O=qO<}0g3RmN|qFNga zfnB}tQd5in4yD$Lpp>RGEE{?~fW?^IToV3M6(p~tZ|>})MGox)^Yk@*+#JU|=ccQT zJiz<9I2XDv1p$?@h6J4BY%tjT?^&+pN~*fyy}jT8=;_oN+?4!OCNps1WyGK$=!MOF zaU$5))a6s#HhlmsK*MkqZms%5_sTBSXL!XO0c5+J*f6WtS|Hh}i$A~#c+3ds*EbNb z-ovEsr4O5gp+Kj{yKqVt%MhL&DYf!$=drR+aYFzaRNyk#^lSZcd+DQ(1#w)*l_eU! z^(4EoV&N2l4MT3;OFs0;%L%WWBA63E;9d=N;`$m1INIp|3MAUj!aYW`op6q%)=K{c zLsI@oyJB-s+CmPHQg7v*bm`9t_5%-`)e;9d z>P9?!(sbP@9il_2)oq29sbi2wt4Uktp_~Zkq#u&N0W2`;FF@^p!?XH2pen?6hHZ`w zlaDbi*m~I!10p8eU@4>}D+f z0uC$GqiVlOjbXo$q6%K?2uIx9VpFWUQEYstPN?%@tL(Ed99L`IPloy{$7Ix*$PBhG zZvSQwIu)RcB_?`x|WdXV;$l@FK>(90(_P>a}O%151uFIspzoEC;yNyj|HTBb< zecSo*U00-3PdOfqSp-e{Ict{pp)i4{7yjJaecGJYfaNdPg{mC#L(^EwnX+5DGM41E z>N2HC2+S|k{f|*o)S`l6a*owV$MLY1{78i%N4u*q=Fk5|D^i5SpY;ommLgB!r^k+a z0?^%1(#?JniGF1}W+9LSIc*EVm{sDZhO)&p;|9&6@^l~%wAXiDef~&%3{Y&pX2uIL zkpTpX3#^5{2)v2SzMG+Ow$cww$)^QJ5UVBKFzQoEl^GHq?H8`)iuRgI)?b4fcVlv@ z-$!~MGd%QWc?XExPK}*6ZQPqOF?Ugy@TOHkE5o7{OGR3y8>oYl;ML}`^kG^`{a}#P z67@!EgHCBae|e%MpVCgaP+Y8`*`$31FqsS604&F|=zNr4&&YT#RXz#iVIUWvG1XKxl-mzP0yZlLU4SX?BNNnWM#Vl`fYG`n>S#C{BkWc4Vb1?vJ z68XF!j-`<8&kXH5GaJMjZa!!;B9)6BmK5pA(E9lpyeoxan7P6S63=vxKCu~Mf7yj! zFED-Y#f?@NZpFlUWP$Oms=Jlr+zZwg27hH)s6(hf@;ytZD5q+ z1u;3c;ZepoWzF!eGgM1Hgw9Dxe*S|L-gChdov6v_2`M}7QQ1BPRc!{{w&jb<`ad;t z06{U&6YA#DR>mk42P?7A2lZ$dAz7C74)*kQ^mR;R~PZ{+c)^H$T{t zF|eaCMhF4T&eVj|NnPKUgyzgt?QZ8+z764`gckaAQcZj7fITPKYv9OK$CAsx7&^*V zySP=t(PHR*b8t64^8qgWyXq`YPALDl06O%r)wvxW zo;GUZ5kAb+JFHT)m_e{GSk_z1s|ZY}B_&Kq-O(*`dfuhP`x#M7>A-;6VX?9TrpE+- zes4QtOry!d-p_Y9{Den?s4L^b8CM*EDFB0iQo+V&mR}M-=9l$S@2_l6CUh^AF)5eq@Ld=TB_o*z_))&-&%j(llR``ZefbN++9Nhu&%<*6A3DL2Hz zbiALZb&t zBG54s@5FN~WJ-3sK<4)TFq4X!%FN%}*x8v8Y~C9LHKlwd7K<+wwSG454CFbf5b<1j z=23P+kP%l*er;{=d>8FW+dcKp3!8pMGjk{3Wt5}iIJ=}c3jQl&8cvDKjt~4HV1^oG zCx@p?f5B9hMRDKG^N+PUPuISE9M6e6L<=1m=K*&}Nd zjFpX%g%?975s{(`>RmMw%*R!{FvV0JGF_S}^`` z1U_m=>=r#+@t^FZkC;A~qLyxV5z=C2&wNQ?7)o&&W3MB?Q8rSW2vYdF-&f5@&TSnr zu{=QdWaauGF|Ed<60f_p%#*c!w5A+uh7dD|Q-HgZLd@5jrX)1hGaVbAAPvNqBA!!I z5wERnj-T{A=~+vWv<2m3=^QVQCpHaj@N1@7v|=ZHK0?lXo;pboUegHFY@*9GSc# zi9u3(tU%PB#f^n3=xJ{zpaS)^GreJdyr?{*` z_kR86o^GOYhof0f#nRH4xH||UhfCX;`tw@w|L)*`NQ!NSR`r5`&#selK*e{pFZ%*t z5iuLPx*txe^(w1W)>DvuC{-oP?(L&5+T6`Xl|Gp{f~31&DVdot3w9`}Mu+-SP9*7s zgJ6&4^(K7>2(}vKmIU!T`X9H&qBUyptMXcKTb?^cqCfC(p)p8kW)&=$fv8g*zxtXI zC#R?^ThZ4+92$yjc-r2ZQyA`~HeT%g&}rN#y1q)*kRF#Vl70 zyUoN9fzUuU?XGYX`Sm#@Rthx~HrFKDJ!~zk{W$ ziOKkf#&wmgz2g?6x5Jd!s;U|T+O%a%thhD5QdJ+TJET3Ka`3TI;Wrp#xNuZ8GfR-m zJsMs}u9SKIZ^LyFG?eh%Hvh;F1d=&UH}%OQg7#lQ7v#HvDGgwYo%wSmOWGeY+n~+V zRg@OG3rj1+Mz911>XB`Wl}ii1(h36$7M4A5t&X4&6RUdSywz2hH~m42R85&jtU3(T z&zKVN2~UsRggUlI3odax1^_PqXx=|d9hn}W#ReXoI*^mGdu6Yw=T-yyOSvJKShYp0 zU_o1tZXxZ#=<4sauI?Lq1xz6PnD*kRTCxl%O=+K1TH*S)Jo(2p_eiTRx)xx1!*V3n z=OH2X6w%5L%C>2P(3w=!HpV}u_a+z~C;tX~$+1zEa-QA0!hyee#K*N{-+cGr7tw zmc)~qym;pi^eJ<+YEyf0q^W@HV`!b`<8`UWGa52_EnFXk=}V;(+t%PpkWN$p5o0lU!{L8b_@rvox+L1=R%dk{F5f<0$(k zhHS~Ov@%Rmu@5KP&Lp{_E8EL_f-c6CT8g{IXb1L-Syc=#eh3GWNK1B9&t>sKI5_-H zr-c-3ERDBAUss1skzVrsr%j59y-0dKKu`uXa|Gj;0&(LWQ%R8}(CYWWz0VJ(JY5#$ zrC+5bGsH7LPbqm0QRSkPU`kP1#)}^s*Xi&u4K@`5+gvuSJv@1RDFSXN&q)3uM714@ zGf>jAdc3aJ&=sS3WYA(0XI1o^e#ivwHhinMDkFGXrepFpgXV&5)m=Evhho~*Zl%kI z;vwhS8rhr4uCLzLQ)614mZlLMPCVk6M4S-nxhZO_mM3bV5j>BR9GpC>m)@{l&X8DqLUbjLy z$7o{habwH~gNsj2!msiNnaUffw;R8AE28D|D}_aQ@TmS+MedlpoKOUpG~dM68vkQ{ z)8uu#K(lyMcaOc`y~(qDT%297<974Ux8Z;h_FA*7f zlKr%uN0S>B1s{+maQa{-ixeCwqL45L_jNz^?p}QH6uQ3)h)ev_$G-sa;8o(PrOy_W zHSuJfUm@gHKZYv=Ds^f;DPu5&d^tj=;l5Z{je>j~=V*b?kI7G)84U!P{`+GyUe-N6 zNm3ZCb**wal)YJAHn-P2uP7SAtiHl#TWdtrB7RXH;PGGtl5xZ>psjo}}K^?uDlo{kY?Fj>`Ry*xBy9 zgt@n1x4*mb9mUzsLR*9ZYO>aw?Do`c1%jBGZzLMb%+ zEQ%Ihgo9~>W=P4DUaPmi-(g_Xv&GWY z+xL!BD6k~QPN#WbYrBy)^*E#Mz6rw29<%{Y2|xb(@{()3UpV?oYQI$Fi2+F*CDBDI zM#UY03E8S>-m=qid3`g_@J{de%>V5Cgs{avBw^kw0fP=VbU!l}x!a*sEX^(4p6>sZ zmQskLJzRJHz|$4yleVG4{n>6@yNuh}rnU|uVWb5a_~VGHf#0^EJ7c94!vXGhq?kH=?M`yf zE+*)d4McMC0UrXpYbNgE?+?=okbL%O=68qtm%sPL`|6*c#t`xot@k?|j!Ku|^ewYt zsq30D2?_UZmpAw8**3Musx?}$7}>v_+q9~aY5w{oI8%!|tPy8oWE^ce4tlPa$XF@VeX^0tW?frhrOmMz zB|Dc|Di;HuCFaBB)qYhH+4{v=>fgX!KxFKV zBgUySp#1F@*)1~vo5>MSj2u##OO7p;Hdb$OD~TItpsdF^518UKc2zI>?fYV##M8FD z6ZM5@IY$^Xo|TgixpxtFlD>(DW%6lU?9$N#8&^_lygpp0<22UO5vhWLq*qBy(Sz1; zM+<$2L*o9s5uCB`)tGVYEY}u9=CeH)yPQ6ey5|2TtzIIti1!6VoHAvp%W1AEoII6p zTV)=rJ5ze%Q`clWT2D0x-s&}Axz9;SKSz1dZf$R2&8X2!9aygTk8N_wEd8_RdBW(f}w^fk!g*->1e!7XN#n%AQ^TYUZ(aze4m+F#jy=+X!oL_)*^v=|H z#m%R!nQ`XaRl!kp(^r}2^Efm?VkWMc@MZ9wP=+wq7nStY>&;0gW6kzMTvFq%Z%o$V z)lbu_SE<}2#x%6FE4VxjIvrCjL>PXXhOLMgXl%Zk-+bs)aN+GcU(Vk$3I8j=M4l2Z zcE>V-Qd2(L*ucB4N_l2%z)^NT`(mCi2XBJ3;G{_giN;RWAsU@>?39Z)DYo`|S8uVS zUlm#Sb#J=cA-g)XlakYofa$-|6+TkNhN%n?5W(UUm_W%HCcH^)>A?=Wy>iM1jlVF6 z15=}j%_(Kc(lsGn)C`>7WQ%tCJ@`7i`?}aN}t`BP!xfb1V7%o0{ z6LC#RkE>@)Z7Oc0@JCG;aK4w2j!xa3KSDoQ|DB?q74=kypp1D!P^cGtOG{Gg+j}c( zn*|^0J;rqY{yyI=4#1V@{eK3H#brq_0C9T?zIWbBS-4?Tz{ZB#!NvXC02-q($1ge(#0Z4l%g zNgY+C-F31|Qg2TP+DdsS*B-N@cbdjx$4^1b>7C-HHA?c{L`-kDN022ENXwqRk?*FJ zYiJl$Jcthb=%@oDi=gyTa8h)-!KeeMXu6~zZiiJ0$sDWt+r0W!syYtEj~K|JKNfunNNoC;v{Gi zDZc9f+aOJCN%kIqvTuA>2FuDeneM;IqR$sy^^mV{U*$k_6=N|8r`}6(8(Yq%l)Awg z-N1?H$n=9ndvlZN+BWKZM?35kA&LX5kXHOtkAMZ@@cWV>J}&lWe31>)xe!Gz%xNN6 z7i5-TEl_E$e{rjcI5}5SU5t^A!hLoLCaY2t2ZmN4*ut!<-VN^rUWI)x6(|PYtP^ra-xxBBP)tVVhvB&ti2T{Rl;I|88+YBS&!N!bX|8;JpzkhuXyjvTM z$8ve?{Us1@&rDr~sV2{6ZH+XjL%m+onabzjHN_3HjBQwTy4G0ixowS?swQ#pR^=>v zu1KlT)~E;DHNSy?1BgIH&E`^M9p<0@K5_4BX`CQHk-cPf=H=n?iI&5`*J}%o9xg7C zeqDJmaqqQO@pJXioYR;bo?M>_O46g0)k{_iABM~I{N?D#Z7;HwMBz{J#}S_O`xl&N zw&b~aqq1yOU21H!OXJE~Ym$5nDVT{+k0IV%9pyxiv<#C;ZgsMs^zC9b{Ro$~8ld?} z0k1Nk1d^V+nrH~7ug9rE$Of45!D>>}{edQI;a#+WymdUWUc2MFRD0z{TUXD~mGvj; z(?lO^s(Z&MYc2lolkj5Mm&81ulQGa4^~{q5WjiB2>6t%#mR_9sX4!H4d@lh#gEiX# zCv7R>51ELVs$swn%4ujR2UCg;9fiW;i9d9oIx`3P6l0~3r#Az=s-8D)@VwfvfM!lU zI}D3G`#Lx4dGbz)ft|n@Z%9Xu(5=X-u%PQTW-*=6vLhOh>^QmedTY92!_qdZq4#&g zS=(aP59Kqo^dDzuH4-O614G6nwD5yhVh>3A*u|Zd`nr})fh@~Tbp={4b6zLJuI0=0 zGzqe&3%6}}J&bG#3;FSaB6+*0h>bQjEDAerXlOo&sV1U8qjQK3_8Tt!7WKBgFwg4q zm+^)dsYROO0O&Uo-nf7?ts9F-Fwy3PDXnQiNtMi%mV&oQ8e%cVKlN-t8RAR_qxP=q z+Rhw8_K#t=0anzx#7AYD2NzJY{}Ki;q4y4@f4sMbpO;dvhBY4WaHJx?Hr0QfAAg7K zh#iNpSsWZ!CS)DK2_Fc;IAq)pj&C+|JfUSoA4X7V5iy!&xC7jFE8IJ;Evg?6M%?k` zmm8Qdt{NRb0)*63E76W6H07#+%nQhIC7=>8o*}XG$qkO%S59Q}VKK z<>-$nD78qJw``r7rmEb8)@9fLXVstOtowr&yGB&v7tA6Hwe&QRff{7}s>^3LUmiR} zU15^!-OaW&GiZHhihyvO<3WoeUo3qy#jjP|*ihiX8LA*r<=MuJulVo%DH%scX5gIY zMRhS-+04{zOUl!ZKk212c@a`Gy}J~<>+ua|MtgraX$ zx2v7TaZvw#$FE2R>zbr2+V-kU1{g814!|;dYf|cRUqZ&}$|-pjo~vQvnuD8!kwopQ z^7|9dn}f}fmt~nhJfci~Khb`$T| ztDMD65(AE&6#5x#IWtry;6kJZgsJ}vO+abzmf zDQaB6-v(_>3X4qcDx-a;VCX+COuDP4+k%3`7tX^?HF$OCaHc<+uc}q4?ehlLncAgg6S1vN9bpbLca0E z3^B+A2I|O7>!>gs)=N9-l~Ra3CmGya;UZgb{~nvb^l@7v&u+&?r)Z?KBQ|KfB;UsM zvqFK6P9nq%sKm2K|3;m8x+l7mZ39DUQ!i^crnTEeeU4!+(A0*5ZfmkB`TyR0h>c}7*F zVH-3~G=GJmr%(PVJxmaN{M~4a!gF%eU|@O_H=hm^5)zUt^8PI`;MFJA+y?!PeDj%) z9SMmk2Bxr0A);k$eW6<+6_Gol=HqbNgApQtjS0Z(d(8=djVcA{;x?H*`}&Xf%FDSW z*#RNhpABysW*>h8z*jteeTvHdf`6TiXxYjys{VTPs^K1=des7@niTi4`^+5neiy&pvh?t_Nv?MGgId1H_Nu@#K( z1D-g!sL?v&pb%+}%L5Ij4nkc>UXZ-}8abeWwP@_XC{l=y^gto+;li%F-i$us)uY2x?bXQ+UTa z5WfgjOZM(Jq610@!GR=SQT`F*S`FKwN$C_O#+EUVo=GH(Nwmpe^nwUSMUhCs)P4i) zpHerZ4wiQil^9m?MO9WgNv=nXLbD2cydF}BT!kdd7)Ji zWb+Dz!y#N~VF9QRX-~=$Byez7g}Kp4Sv1^e?liBzt6{U-8-B%XKum(SAk|*T`bh>I zA-O}ola-$v7xjGlBRwVu@+(@$)XR(<6=bRH5?(a*ikItbcQ?(chPQ20(9mn0XL&i4 zSd+i<`X?=4jYcJpQ*uIvZ-PG}FrxVb-zhIq>p<(uEA8KmK>moaOX!-3%Qqu&1$83D z-h!g-t^Dd@RZ=}0Ev7(0SNEWr+<-AO2wTWtlKl2xi{oNWZdA{;FWUQ9@BU3|n@r{N zEJYz1Q)qhpDbH))prs|iEFel#pJBO}jlJB+^%|p5OPR=_ZzWU}GTU}@O0uakI&GCZ zlJs=mP^f@TSy@(n#1a64O{aVE_R>*Rsv)4XNwj3D%`K-Q<9|Oo)o1h z3coFTdAQ~r8(jX5yH0U@5%B6oboAM{I$z__Tx@i+EYXkL5;5|5nv^-|%(p?3zddEQCP`HeIQ!{n-mBX@QCICp*1hY*F(Lr+*qc^Q!kV^9G%S0t6GI#&dU%&NL#rOa9G@$?&-qn-*dRKA9u&J`Ab@u~Hky$4s`?%(&G2%4)glZ#J9d$@oe3tCgO zfeh9lL-Zy)Jy2qE%3$kMDMoRADnWuS_Gfrg!)k&logvG+QD;2fD1_-4S}sM9xvu*H z>OiXW#Fjxjn!S69EB(@KDEX7Lcg=1RPlQAZY&uCe&ha1aC;uu(UQ&f$nlA~n+BSdg zy68>)v0;24trFOlbj}M`@-KfqoYAw-q5-sLt&-&{K)9;USP0kERDLj2ET(b1OXfef zZ82=lAKT-IFWO+&Zwq;1-F|HQB`jE^8ccGe0vzEB#4b=+3lQ;55xMs|d%vwIVGaKb z?+6Ql5+DqV)=%9`+1+!~m82Yf7U{l!pV_RsDZpsS%8yV%&;q5$HM-RhYw5)84I!u3 zU3De;`U`qvPvGf);+8E5CXk=2NgYDY^1f(stN;9;LewVPtHfJOAq(__KLNRly{x(W z0l7-p21#f?Q8rpQxDL03ki)nv0_6G_i@tJ7%{Me+#3cQyjp2j9kGO&CacqaIIUEnQ zpH%2(kYM`yrH^RGafQ&~sOQFd%D~=+{U~oi4yMyps#23`pR7T5c%PLCaN@4ZeL6z_ z$Gd^tK}CUo3uGE1{wD}sU++7IAH}Q(NGh7Q*<-$Z`uZUY%Petk0l~xU9{9e|_ZMXN zpMK~T+O;2ChbZxsMaKM~NS@ZSfI_oHK84M!6=Wj=pS|`BEBC$hY0#6m7gRIlcGt$A zvj)_rWjm&AWoMb0rlgegF=Xp@R9LGO)p|!sK66puaqQ7ol}oEF8LLwfRS>vut^KN{ z&U)ULLHk!Jd}@Pbk&v78x5T6>w71Y>(+ zl=GzNi+L$o{fsIa{FTzet3E5ls<9$Q`z$|-pb1Mw>nT0LXZ}ynCd0I6&+gYoi_|A) zJ9b1G5**;c3_M=5^uejIG5N1CPVU}j*lk?HvQ!#mN5~HUcjR79^N+Cn0HM@ihI~3` z!`WlKlYl=sm&M8d?*xXxsdPm%_Qm@g43??9Cm(^>MDpR zs`M=tPf6Lvr&wtRGVf0Job_9BRdeAFLy`4Y?F;NN3*e3ayoz4>v(Y`mI&&ZVy~ACV z`-3K-nSei?dQ+{<->;#-fTBuOGk7-r_(Wn#l9|0dNQ~(fdD>?vko}5L!PF&;K^xbz z&MBLKvWlD%vm^KN=FyCtBG|-XtS|j~Kc}ua=ImD!)$Gi7Zju5;DG#tVw#_l&pWok~ zTcB7!I!-W7Q}#F)?uC%ftY(Z5WoI{}{}_Hb6b~WQHip+bPwiH1VrRNIaE*UR;+Top z0a#>^eQ1(D{;7Iqv)c~VKxdf*PU^)P-*mpq8Bw6;)i>Y^M^ol{uKyFUH!sB=ZK{c= zmf5HuV<74O8*aHc`HW?e(kE%4M>Lg$t^X>WZkai+j7t#$c@!V$MRjhAWBf?Iny^mhl=>6A|0NjZr-}PwYlMraXXS^M+|w_+xkZjI z6v7}qn>HMbHO=kuBjpDx)#dh3Mu|7Xo%@5CP|PSd{Bv|z#PLPl9p!@imFSY?E|3aE zbgEdph^I9&))L-F&FfYTQp2jjTc^uhakz>BC#TLS73POezYlQaXzFzo_x(yVG0tpj zn~%&24;W_KZ@$D)5xr)yO{F$dT6;dMWv?!NzO!w-wW5F-s=o{^Dj6#~{T*`l*J8UV zfpN`~fS)uqH94JGul{;=7WxyGkJ&(CTuzgKmJtFz+{}j$eR9N0Wlw;3Bm5Ga6>oD^ zL-SI(b62R)Orj1ZMqZLz|UsuADA;-whUnRg*T1w{Uti>WDX+;|-p#BP=D(@H^M zZqVw-u~7hTPRJC|~+*tby6pv?G7&Yn{A9YKt< zJm=QgzQ^pfHN>34EnOa_{-=qNKvdn5V?K0aPC}*TJ5hPsZ@n4$L}vEzGS!)BWqZEX znr)NzDw@J|986Sj@Q|4IsB7Xb3`PQF2ft=wW=#Zp?OA%Ck!TN(Ehr&>M=)u~X-;-8 zUA(pOvsgeR0Y!KHsN}M@+M1Jd@{y5i(=R(tm8|zHjE;Iysni(-`BvDw(nhKyV)CKX zCFSMn`ZJPEj>%*TO%luFl8DD9ihaE=J8v&rkksq3Bgk5S1%^?Ysn!_k*|C56g#ZHfVmu+Sy}dQNujrwqw;k)5lBHzZ34r}A;54SdP}CK z5LWz3zi_aNnM1r?@)>`>qDgvLsVU{DLYbFNzu$C2Wgb9QfwV4RSLEbvF}wUDL$;on z4rVMRg|^9tikP5A6hP8ghaL6-oojn{gjvKEjPHF_u~t{({q&(Wsp4%&){)0nx*L{O zKf}$w^b&yeVxCM8W3xhk=%y3`4>`RLAD1_|CS5X6&%Dh$?c<94fi=0LsH{vhfb8ld zMLJ#aEEhv1etqfvPOdes&c(!2Ci~B3Ai;luR54sk-I3Je359|*LgonBua29ybVz_& z!=@sp+! z@pJuO(-s%?ldsVDK6~!s7S02ogexLyc(ukSt%Ph~lHlvu$^^kI`*dC^>RK;12~jxB zHXEN(zFNJO*u0|;iX66F>(1zVQqpREXSet-RP$*YQzvy%qh{M|Zxv7&UKrgczYPSK zNeaNCR8rD77T!w_%Y>)cr(we^M4&*m#Twf0h)vuux4VlW^Sk17R1Y|fRH&AG%BlC1 zIQ*GShx2%Eyc#CbPhTBmPVGw2&owz78sI-v+l;2FF!tF_9g->O6H1j`j|{Qd7P_>W zD{+;T{`<*9=sncEn~SM!31i6gDdkycxwkM4b`p}7f4pRy@<*Bs=jsR|R4Qlu!k@HZ zWAHKK5gRr`hNaC5oy}5_(8dk{-;e%wu z(3{pC29gr#WMk&TaHaF(j{h363`Uz58>!E;Gyt^OoRDBz=b`#wFXxMp!os&5`^}>0 zKjkvOkmVZt(9r*_=l=L?5(B2 ztBt@0BhwNvkM&t2i~=R{XzB#jIa#qjT<@J17pEmBs$jN0C$1r4TR~g$H_0ze%tern zxea^EnuMoD=j7Ct$fqt|uny&F5E#)dO)oTme|GK^otR=IR%H`RP10%^twHOKDh`Cy z#Cv<=meglONe4KQ{FG7l6+&vAkAU@*pJ5s0)wccEQ>0~9&(NlOqn43%fen+xGW+Vbbd^v(+W-nMP-Fr^QkNvkuSp=S5`fL|Odso%)e ztINfauGul2YADb8qY&=Nj3u8@)AB27woW5zPk4obB2VIVTj008wWzbu=NEG{Z&YA@ z@>^4tw&J&?ygaoh4hI`9$yTWjzGQBzr6XY+`H-E}JL};HgS~;>cyo|~GYq#m>bLHW zK&mqG8A{|{ZEI@_lfQsVkh%CK9>qLR){{SRj;c~4cdSEGNH*27`>dQil#%++aphz; z^3XtIMrQYl;qJQ5w|zCs9-hPO1#qj~5$(x(bp2{$JA1gM6RA#?RTB72?D&D+vs(Ls z+w&1nV}A`L-RKGR+THaYWacw})2We6IX*YP_^)_uGAx&!4wu8go4I8s9dv`mRAWZq zzOdr`9~YMs*FWa*mt(}R?$muWiw0(bY8nfiy-6V5aZXV~SuJ;||Tyxkqh=g&+jx@euWjCQTjp6KQCYR~HjxT`+K z=xQl7<>}o1UynSen#?KtXql?jt4kONS43z%JWxRq;FYa*E)4QRRPU*d*ZThDS*&?5 z$+_b|1b{uYUgEa@+WkO`AW5yIcCu~hf|!8d_xzGPg_XQc@@sPkGjj9HFeTx$O3zFp zZKq^xx)Ch^5vs*6{r3F$G6%J}Wld+TXYAC0UX-QDnGr>I9BNwfFSOBJCnwf>#E)sr zv)s;PW8;QDx;>bcjXQy;5NDEB%o7V+8_qfodVb+$HB zH;F>q-lfts9pI@es19lTb9KH)SK$zmad(0xlOsr2tkAAcJ$wJt2RB|IY?5uKEMi+tZ}_eqtD$9<|AP9AB@e}cceHA>WtOg|< z>rLaEG^UF?m2~s*vHmscrZ`Qf3iE5Tn-SZCfrZQ0;_kaV3UVL;(-Aj`)g4g}zcV|y z>wvxyAiZaR#GRdQdl6>+_h!bkd0}ztuf()eQdUM7UKUH7rLU{`!2@%Kk(G0y>Lmbq z+3!L}mfQC62@kH{OJy;>uOx9E9@bUbUlXMgMSJr5a_Q@tZGF6kIocBOZ`oIQ%Y-4VCH1uDFWI;6#_ zK*AloyE}qT_$YqN1b3%nwH_s;=}PL%J?Sx!akPJbQ*6zV{6|>aC*DGuPCA&mKLgo6 zc}kE^YV21WdWbw~9z1I za^pMS%;z2M*E>&a6nnWi zuq&OE*WUMkut#e>_4x5h^pYaMRx$RY`B7*@3iWUrs*m<>EfCHkk%4ti)Hx=9(N!!L^Y-i;poR z0OI=#@E!Mp?=b~=AooHuWUQunt=lrOju-=6f%t@N^RK=Av29Y(Ox> zXHzjWb?a7`=+{c+o6_fbNlxw-_^zgu%k|+XkT8S)Uod-^Zxk5q1ACZV1lfumb-hzh=c}>SWY`bJ!=*j=Z1c)nX<>||30kL9t29aT`};nB z`8hPCPiQvO{kA*>>vJ-uuNWJ6)H=6_M~c~}udm1_rzIr~=sKpJ^run&9vPJKFD%nw z2M%}2c)`*SgE{rH%#!sipZlW=Ib68K#5&b9M!04yro6rk4l^t3>$NUAsH!eV)QI$Bg882RSC)ED%gm-65luFDavD74O`*ffs=KPl(5ryzgdvkdOk?U zpr9U^L2WSSzAMk09yN^;UsjZtz7wW1(KBqT zHP9p9pvf)j{Z*6zUhTcWX+HAcJ68}+5rVRxa`K8PRTO>qSYRn{I-p3ZrM8B>1u&Wj z5RE0UI{%7a2>Ta+{p$ew!8`N#;nfOezQ>r9oP?n&`FHp~StDIbOiP2<_ymvTk+Y|J zB%CX!nQ$4jpBdb)Fb*8;O>LWo@;h3{a!&N8F13ykXvLDp3~2&bLorB*mqgAbTI$}> zwx(V&AK4hx-ZFi22<{G+gO^6R{YY?-qB{n>O$e5u3o{V??a4I2DTI>ZN;88&)4LA| z%JeBKv$ZX}Hj@rjNu|5;Cr&*Sdi(kaKzf*+6Jdu%Ac9QF#lsx|X~ax-MZ>!`jLo>- zL9#!d&wL#oR94Ex=@jg`Al%kbcJ)!qhsq%t&IebQO;d>p4UsrN@_`tb9kU?au6mO|+0BFEThN zS}Z(5x!bz~6v|flX0;k!oU1MUs%lAizYZqy69&9o-09x4w>Ha0UB0tV18k{Fh51MqT)& z_WulN`9ZnJTQX-QBIzQRy7J?^i15ynnbHtRJNy z@>;bACdg=gRois!b9uXiycPBaMEVrLFnFy`v?Xs@v+A7rkLjH(Ia zPi$v?MU>8!G@jCnd#&QwBhNVWuUy~U?~I1ZULV{|miR!bpgTw$b_4w`__-1M&a#yl zir(uL7uOq)SiQ*^5T?U^nm|<0W+F{FPyJtK+xzSibxZ1mwkaGX}nmf18LaH8e>La7krx)1Y6|41J;H{N1jrfMme+kVWNg z1*^ZW^YF=|lE~)n$PBmdf`S*`}YM%asvHUFsHdpY&w#DmfsHC1M)as`RsK4tsG(cv#P`=h*O?CKi5%Q9UT z?qfY#v*((FyBis|eLQ&GFy-<=gq1~}zo*p4LevwUMKo|Uy1gD8tk{Ik^L>WkxU}+q zc_o6__rPZ_KnpSX`tq?Fx-~2AX|gJ)lPA1zsAIs`hjB1Cl%dp95E{u&FnX1p58o0H z;H{`ZHI5UEk#*BlHi%K`tf8pZp2=2tHum8czmvF1l|uxHTZ6g}}0MY@Idcn8=Hd#V3zWK$Ly7r+lFrU?WWvOQ@PwJNw>A zx!%t08{%aD&(MI#&!)hqZ}Cue!Y9(|26mgG8^-Vb>YrN#S~my;h3;u--Smgrgm7u8Mj4938pv-QI z4X)G3+7QhZXk{mkGN`%6(!GXEpLn!|Kdqq@7ZqET?1DFU|0WQBC%d5No0C&Ca@AR( z0yKfXvpGt_|U@>9JfG)doFDyppv&kz}{1$+}hF&0{BJSweuPZ51M? zL`G|E*C+2@J8Ua_8ty;5j#S0Otj(C^)vi)n_QPGq03|*>pyF^`bQOGkUmHC}qbKzF z^w$T-G2_|J4lPQgt-TijMcT~s>!izO*}?~EGS8zhV^QE~P3_)lPWHj9#^hFYBdgkP zA{L{WU&|s+`vgy)T|wDSD{JfD)5GcG<)ZuZk4%7L)XHS@pA*Z{m23GiWBfZnbRkv3 zwIceJ*)TIyZCOOY8)>GCN6-7(MTmAlaSt?tM7PC8C$vy{H$b7!wttatc zK7ls&r63Dbqy~aRr8J%7{i*OUiqZy#YJv*V&sNRmjGpL!3A;_f;8SvId)uaGxv&V5 z=k0JG&D3EwB`L#-;y4DX(|iAvTbRw9Q9JR)M;q$VrUT7>XL(w1fL6v57K|<2z9soX zjIqLnhU7Dz*Yv|JcQBbjH+a<*X^$6kc5oO8UTNN}tP}7qILR}oYk4a$5s*eID;Alrrt&oaoma~R>I-9&Is39LWf+P z&`vC^@uAsI(q@q4Vo5qSIbYGQYFn1uP;0BK>S}+0dB7O263bF{Lrq}cBX2|vkGi(O zSD+XZKyzh9_6^0@Re9EJa)VG2-ej-^eOzm$a8xKNv}bc~o3380)5Qj zWvcjCbcHr&8q@k6IEL~dfM7%k3*T(e=v>>?yQROU%s0J~=V|QI^0U24<->^Gch72TmX4oo&Q^t2O|nT=+q;MyK+a$+Olb~( zYD>8V#bg*i4bWxWKXj&j)`7tTjVHVl;ZjmM*V08->wE0umW2U>GW$N+7}(b7m&b)L z66kCGvzDLj^xEC;?f@}LWQ1BaYOWXTLSo0Bh+XYpqMuzKB10`^5wQ`20P}K=LHmJ( z%h@tBYs+Be60W*>d8OZPJY8Wq*^Peie2 ziLk;Z#jJ#_Bxkj{N!UQC>QH@>Y|Fu`?|nuDlei~*aBgnCkm~G&KpM=d?6*?qwURsA z%uB;b=ZS_xKHe8ShZ7NxfDG(lg1)0hu28y0OzIwOWv?d0Z)w_m;-splrzCs-ATQg! zAU{7C%{}2hqPFyBCyy3T_24LB)P5iboSQ?7iTHP<>q9&|zS=o*;EUQNE`4HFQtBI) z35nixk0D1S3IgBHo)){k>r|a4_e4VV>^c9dTyxNFyMPcuaHAFnzVB$kpvQjayMVb<~B*=>9!t zj`_mcXdcM2ZpT<1n(VsZ26qh2^ST?jW4haMJRhFbk;OQd7e}c$?k}!y(BdspC5=gE zorE`r92E14BzqtbGX zFLHQAPHI;03iQ#JehD<>!W(~nEPjO-+2Zom@787s6pei2eGccZT%I()xB}nky%wnm zKl&0IU-OD?c|y>0l}%lNb#%fX>#~t6@MuZf93GJ4*sWjX-gpsmJ1NWIaMv{9wvGW6 zsWTvK#AF09%&aLnb!SUUp9KuK^?TU)_x+btQpW(1(tL-CUvhrnCkT7p z^1XeU#cGItD34*B8=#90#S$=KV=oIHRIK8u``Ay`{+p%zX60I6S<7yv`S-;L$Gog_ zFurzX>L)o)Z#~!Qyy}>uXi6z{thK;_Lq~$J`=b@8zOy%#SVdX`A^%|wZ}yPDHd>*C zarYt*9}m@arAW)-A99U*Y-$|8oxuLCp{liOlj&lerb)U-Tg9KF^Wuc9yF^!Sm2pn& zX7Pn(itg0xg5)6ME!Yt5{Eg9qeCcG0RUhS%gdB4o1~KJn!gfTR;=HfVN9J_Cswa>P zD>D*6ZaOuK5@>5*(-j!qul)2dO|Lw(2W*q8Z4%?1BH2Y`(dHgG0}|Gdd3pJ&bVYQ{ zPZ+v@hr{O8%KSBrv1>6KpUiJe7Wh>BMM)P$H*Y|H+T!p5&ZfjA2iHyEU1<@u;dk56^6`>AhS)5Ls1t>z68>{GN)&mVvw!P1QY|O3s20*F2!~@9ZABO> zz62?#s?NwLp&wj76FTtZHzrtLX5CH+=$?ELs$f-8 z&OuN~GBm;a-Wx>TK`V}IuR1Xa+SV>R+(Hi=#M0aak5*t6-W;4Y%$*xxCzLEy4cpJL59oAW<0GoavhW@dH{j23`lVo>sviK*9B=)|p$aG(O?li>;9`0Y^S(IVQy$aUlHLU9ks7>~mnPPZdv-t)_%>#J|Ln4&+n9~ZCq5zF_nUS(+wfRjT0j-CdYfdg zA*yw|Tx3AS_li5+ZBsKqd!nnSq<5pY(fxiJ6>0O~uTvuB)4^9U>2a{UuPp}*26GB} ziRf69w(DOiw=uJu&=Rr~(RaTFDyKJfoy3Ipr=^hZkg4t_E?zQ$%>bmP_iY)AKjDT# zdMt^^6Tb3{dbVtr2t@hUU%TI(YHL-s<4jD&l+Pn_sKgrrzm}Qpur4>=cFyQGRDNm6 z556na+kn2{I@!}}^t2DUOhgmb80_*+uE7)2ntu5gt3NK@HaZj{lOZe3rDBm+KO~Vl z4*9dtwl?q5^N^hJw~UTHT5V`j+84~RTayQPVPXnnCyai=y6eh?+X46{8Z5}JSgxu$ zqv)wX)NC4uBu93xGU%SYHucng#On+sF2z4A7xxW!HhM;eLZ~c^jKVaLRCOGixeVHwD7d}QzER=z37kNPNp@|1B6UwIB zwyv>a*oz`IVe&L-ar^`V8UHM@@_M+J) zcjkbLR7|d?ne~e~H3{f46R6n%?lH5zTiP)=5nIT@B+pzPaDxfl@|G*6J?Qk*ajT0ZV$+p- zk*Rl`V+2z(0+|8=07GEDP`6VO+~s`#$tib*8{Q2SZ33JF%41NZbBcSS20hia;Zy|> z8fw@-3XOfos#;R@-*NVClKfc7Qd+OcJ+d9V6*@#NG4*hfao!4jrTVFTn=^$oTyFtl z1#7wrLBt{=-qHXrrFba^oR-9!`9t~TEVOv3vXCZ}Ao=_9JJj;(MOhQ0Yauru^J{5s z%THkDpzOz+r{M%Z0hk1y>&x;u0AbfnbeV%z>Ywjf8v*MUHs-Vupa{8?aJp+LHDQA} z(;g$N`E-Icp?(r)>VGW&d|Tk3T%#qbQhowuhdDMU?B*TIJaXz*%7@Q~WtLZp`5M7x zzNY~et;2!iyZu{}N$bH~x1Y)fwE4sx##%!BUsq3=QWa}>gnKp6RvhO?{qr;rN5)5< z+~GhhafaO7caMv3ENgc&|8T@tp{F)yoSSwlkB!7;QR717(hE`RFFQI(y}zs#+zS;$ zmcmE3d$%q(uYEw?A}&7O2IZ@O7O-vp7_ewI$l)2@ueONpY$!T*T)90Jv;2=o@Qxq1 zIFFoysoMzW98*=QRLv!bY2o!(>RnfNe^K?gv$yqF&1WHq(U2Xfby+2y^}PnYRNSDv z$DYh_c=S|5xyZ#{u1HmBX4;_oj?U&Ovv%eQ$LwscIqso3ng0+o)7er2jRvvcLu;5u zMwkeF^t0^!W#u{?ozT)zgAR>Y2;qS_uD%wqCq3ra=d&V)tG1b@-F{ztQKfr!)>4R;qoJx;c>{{J{c)(Tt@y>BVjQP7bt%pCVjCHI zUH0?bB~MDjY>4kpR$4=HXJNFq7&*+4!EtrjFisNcEVvvi(nCn$^Wz!urnkf!gRx$1_zeTG73@NgEs8~*fay2wZXsM-AU~#~DNV7k+!(<{(Cu1{AKlL= z_&#B}Y2ksZaAx-Z5W2$J8@T-H*piAnzp$W>gr?Ur3&`4oV6xp${FXwz@5CX~GZ)T< zkd|wTgfrP7vL}KAH_GL(xq=`1QR*uT-RGfV-5bw98)h)4AdkF~l)9@$xY{zCKG9A- z_f}3|hM?#8-v*NKs6=l>kL&m|zk;Zh`J?QqyZiC-?-SAGq7Oqyn<$5qymRN%(~~{0 z>q{k;vJJMwoo|Tl-6L4Fob;^AF*TjcQZwq^lhns$F=L4rb2VO?f?!FV9}!E7ZLdZ# zl*_7ChCdcIxo(`Pmpx7_=U+09mfEAeogx;S-E8^cZsiT1+{u=PD;)gp0Juslw8e0u z-}B=mNVd=Gbjl5Ij`ouC{$|xjyp`Xh)?r-5)|W$^JG8Xv+iK{^_Cj^{(Q19>jtf0= zB)F`PS7w>s&O|%FqOmh15bl;)a6x943(m8szEo^ac%$<(sGz_*XMSxHQQR*glD|(+ zIgb$|waRUt^F+`c@*C=%z{Q@TqaD_pD=@TV!{iRS>Ecb<(i4gK;0KHaolPPN!23jS zOM~-pVi)Mws6llM%77rha{Qj1-5(KBtm4*+l7vE6gJP`zc2R*VX+uEP{1i7ej~S-D z0-MCJMP>A|D2SEyWcS>2t4%Rmf!8u;4CWkXz%$t?RA@Xe%qpW_*1?Z_c;0yTdRnrM z@}4Es+fJ>viVm}xIA+wcu&61>)Fb9Hm5p0ic(kX7$5X-jHfVFjH#Q^$KJZVf%@0+)eY8gE`H>zwUG2wjSg!>iXx&}daDW>fauBococV=H z5iRRN+s3wwk(4u^lR^wqv=+&WzVuI0^MocUjk9Pj^UCRfMUO?F>t+#tWJ3BF0d)ef zMA_`|S#Ojq4naM#=HjB_{1%oTnWdvvz}EJ4Xp!T|PdiOYWw+V86$*oFF0w(v3L_zT zrq9D;h8c_)clj;kjWSyU67Ssxo&S{Ce_7t}3)-o?>?3t@_Oh4R$;jAwc_yPMvwD~k zj#?gG?11~Sf1+HB(l4B~kf~&EpDi}~{J%+)5LM(xggWQx!H-FbW4L)G#ow>G;KSMe znL1g*ziYUa91QW_k}Iu{ghMC`gnO!sYE19@gR= z|M({~^;9!NNhqxmW{IO@B%oZ=7W=lpA+GI?j?l8^&QJvhP+{zOVgn60S0*q8k&SV+ zJT^?OYdO%mOu|_1d%q(c{-6WN$6b4#g>ytzMsg%|^Z_Ev`lgy9-gwr4a@5-`f2ZnE zr{wW^hdp>v`zgf9?TG^0lV7L)oJ~vxgpG^&QsUp>SD;5%L)AJrRKrn{{1@^&Det;+ zC=$*i$D+X(z4Z5M9v!Ta1>90_1#3ja{nO&#&>&Y9mMsQFKpH!-o}9(>!{(QCSGFuU z`UZinY4JNBBO&3yc1L>5fNN|LCP)uAG0r4Xe6yF#n(%Pqcw7Ih+~=`)tD^aa3gdurD9(VX0N_=Owm+R0cO_dG<}LsW|vHd=kl{_RFU9}J%6oNc8D$2i~X@2ck*h8MX-0OT)eOe4$KHq1@2sZP`xy@4{ zI*84tLY$_7-CLOZik^J%mnCUr0oad`f&AV>0Sy@T7LPY#2f{uuaNNO=#v9sE`vdEK zD`Q&XSZozU3l{CPCg+skdm<2VrKf#b{T|w+QbO5?LUdXJeU^4_7n05Y5=PdW3wCU% z2;&>};N@*9JPhnJAvlYCqwkt?PWo4hj@Cwm>gAZ76WGrM+FT5pv!^O48D_i?)`Mnz zu{BA#pJma)Pxd^vGY~qbNOg?D8N{FDZbDvvK${+xH`qs#?Cu^JVfjL60>pObcDp7! zg$RsqdMD_*#@h%ID4P$46{SOTe*tIZz-~Wgd!?Cer9`;8??zC4jHlvPDD~2joI=Fu~2F_gYIJMtn zNKV_$xH}azG6q?H*_=-GI@tEml^22w;}wq$?zW@RrZAu+n+|fOjWl4(_oA*t@N5Bl?|YWajS(6`*Qqg)1g7 z^kwP6tw)TvXU=$v@%0QA{F3J8HTSFIfyO3|R1!?(ev5bi%@FT@f*W7JYYzRp8Sxte z!QsML7h#4wE~h5fy|qm7S4G2XYc<8PYePR>r(RijBQgk`Fl70bzr(2tB+9xb*IZuI z8a7+t>w&0fV|~0iAR4Oc|7?8s`*6OTXCg&jH+a4rweACQ*)ONUv9aA^B*d><8Z+tF%Y7K^wd3nb4}ic18Pk zaFeyXR3!7#wsbR}|oq-r$AFh;NDJjlNypp*Ef#W~3q2w;#Q>6%=ZyUR}(as!UU~d6X#5o2B5COa4KRudP?o(N>X$SITNa7_s zz4*oT@}`-5ul4j)B_AqLQJ-^$k?`A6@^!O1XBOoYa#53j33_(60uY@!z`Y+9LfY5czsQ(xRN+(qx3&F&ugF#5`zUh{Vt-cY11&L*{^8t3} zWiX!0Y?-IK;Ed6{Y3;n&b&CC1q%(7X%;yIp)jY?D@pW02Y@nyi!~9h9Tw`=^%9_(! zLRtUCr2f^tBN?l2waVBjeuqALU`fv$_&T1@_66tvm~VA)gcAUx?@ z#r$*WeU2!B7aUn!QCe6~gV5OWsi>(zn6bQ~usA!$dBUPsvu}g0=olfgxU{lRd@B$#=)4ThX5L)wfq@S2dCc zocuil8W5;qfAi}a_0_Eh=Y+=Zf#lMji1fQno!6vQ;YZ@V)xMN9g&moSYOK*P_ZCBQ zVllQE*+uHDiv{BsQg`iwW@nS6yr|wvZW7C$|6zb9&RmnDvJYr*)StAi-Ne(%aKI$( z>h?{F@8i$Bpv?2;}!Rz{~?km?~8qcWeU9prU15ECi z+on~>VVLycQ?6}44Y{pA(PD5qjVOCVvU*gIM;xBlbV*$rPfXklFzp=*bCQ;k*}J33 zmU+p|wpjDNAvW?nrHfzZcqoe%I-G#B<}k>GTvvjZCP>!PLwn`^R-WzsQO?FxnlY$Q zR$W6uRoO(AyZF%`#MwKB_czsqZ7r(9sQG>Vye`4ZvGEs&+3sXaqupKcN9+JN2m0-L zz%CzhWZbzFq>9FzLq_jMTX!3MnXZ8lqL3JMMh z-}`4Fd~Y%VC(w;&iC{x9fU5A$!kxg0wW??;pvEpzO%7Wm%?S z`4rlri=p>=_rXNnc1`>_0w@ZD+z5IGH>N{uc@^2|_K{eyz4y3@nq~bgpOXnT4fVcI zlg*2hJ+XXTsF~dSnU_NbUKs7Fkv*pW(OmSuU5CH*mWdi^vHfzmv*9uabuu1PeuJm> zAz|T+{%=M>LYHKXLw-`Oe%m&UawkYkWkZ*o6Eu6yd#vozp2Ku%?&H`%95_=rASDiv z?Ke<-AYV!J-(JS7zrQ__Dk{*@RiYcQ1gGDXd_?9>$2-^RSxlmvJ?L~W7a;F&`!0W? z!!@$xr~lHCP|NB`MY6B9yhW%~LXI87vNs4a6mD%hrt|8A*w7)Y+ zA2X@;gIeOH3PHi)ZOq{JS<7xZ@#IeBqRF#$3fn6KO3?G_&#+pJPW;l@@A5N+VRhd5 zKW#L~o!T@1JFRm30B=TofjF~r7FDb~CH{P`LLKyMidhY*mdL^G8; zYAY0iRVc;s$=`ue7SpZD_n9to?PuJIK(*(0DT!zWYS3mLO$9*P7V64EGOc~0hM=u{ zua+l3<$?>)0fy>h19?M*xQ+Fr!%Gis{oRb@x%;7>-@AQeh)!(!Nz$!ceh1Qarpv03 zQ`a~r3##HJGPZYxDzH-|UTxas6q+v@N?)O)X_!ZHG#*V38EJ>G4VI## zHa(%FqeCwpBXHR9mmn|sRl{d2LkR5R7?}^ic_e*()d(ksP|*yVR782*3v2s|ZkvIe*SlPv zG{^HN=2MsL2Ubghc@BKun%4>J81g0Mid8vzdBz~oGVg8}o=&xyE2ZJ+wyxPHK(W1$ z2l?jRH^Uhng80PaUvXjabxlPK!=au(nzW`$OMekXV=3#_ui|=O+`z?wLq!|t#-yY^ z-`sx*u|?1;zg=Bfh41L!vBDoOK1p-yGE|(JzFK4cK1cO+_6eRk(7!k)fb`X2i@#c7(pHPjr zmF z{<#}(H%%_x9xr(|-sz^A#mhhs)2@|vX@-t9!J~Ba+p6QVSQxjELER0ydYWC*Q=`k# z6=S-h3rEIGXf)jjK`DVwCZV=_jg{-yA%Jj7j?fMHlA@$KTd(q45f}3$-$KbvAjd0P zt<($BPo%mAj4NtYkS}cG@FVF60Sa>ua(J2ZP5W)L_deG&^WQGR5xvOO8ft4wU_An} z)V19um`Hq2VBWubCgked5tkieTk`fZ-&Ku=4*M~_yCuEVxy-0;f=NaDBZ>I)WMz}k zZofI-MrPA5JFBr8oUlTjBMu}`eL51$`c8SHBi7CM<&F$r7!Gq9Xno+T*T$fL7HCkN>i=;~(fj#LH=lxh;hh`h`{ zjlVvWy7DAp{b(L4b!r>z=|MYfy8`<^9SyJOE&TeS5Jp`!aCO8o9cg4QO$#G>HhB5t zFlOA**UVjcd30F`GINp7=rc*Vu%6})^0i}*8>p5JtCd7DRT_A>gS(n$t_~>O-}!z# z1`wl%+_&b8N^lQtKcUiVp-!36? z&nypQB>LY32S06Q)(HC1q$FhoLvX7p#}f1Foz^zj9h`6G5ph1@gTb_O+D>OfmC)VI z9wv3(LBV9GIGN66(rnxI=L9w9K(~OXFb{Mmmf%72-y0<+cYQ^4iJ0B9`&@gLnDZso7wGF#qxhC(8#IxXP|GJ^s!;x1kv11C(9#FF`w^qY;}%1o)NYWkup3`qTeFmQUjK<_S@X7_u6fS3 z-1c}&AiUc58m-fFo6AetPvmAMRiGwUnsonV<>OF7)VnnD*1?|dkJ%YTMcx;o)Jq~Z zr4flWX0^gS_u;tc_dkq5W~{~eyD9b{~so+FGYbdCu}6lm*?eWHP}eiB7X6tV3Q?} zBde6+oLa!;G{?ftuxZ&2*Ea>~roA(}y-ahVA%d?+~y}}8h ze#wK^Sk-D_MVzS>zfD>WBF-yExjO1X7(3I~8t5*_-fPo2fvrr_^LfSP!F;@|`>_PM zfAe!kQk2~%*Lm>7D+bj!+c>VI)3#QG28P~DEl z2_Rg|mUdi8qc4!z<4!#V$oEiwFd54CtIFDmAWJzh*y%rvv{>=1M`$O0rAt7KF6 z9&~YiE9yY`KWuV|dW~&j$$Z*Lje}+i`1FxgGUeNn#YB$LXsN}~jEm#Gn!VoQ0t+3L zX@qSdQfQ!5B3)SlO?41Sc*qZ_#&nIKE>0GA`bBr{aNVS$CsW&wvH@+%-Ck2phlpUh zMeBk#H^P1oewSUi&&llp%VZLl^S^0pNe%N>kbr2<7W0ya2IsC+Cl$U{e!nCL(=Q*Ih6w9_VywklFw z6!BLQOFSXtxHB5xYz-YGxnyWabV_`Y&~o@uV^|RBB)^9VuwqYE50;7jQHqG!)&&Y1 zK(gdMPuKp3w*SEl%%^DIUVw9}hZ12yIhJ&8_7bD$b93@*Bw9-2_}UvbMQ)k1bR@R! z)c{M|h_6^cX|ZjC#55)AOS5D$eB)8zn)#^y55T57;c;N=Vr}lb@n8?n?bXP#kQ}C# zmC6Ep>q%OFZ-qg+8DC3Qc7UuOS*nV0uj(%Fo%L%m@N>tkuZ^H;zjCUDokAT7;UbVr zYrt>c5Bl>euY9(gad%^4=SQR%-xgDQ!EPk;b6)K1{;rnl|Ao>FH3aWSHf9Y*9tN;G z;l2%N8ZP?5O3|pB%Ij2~)^l!rDH`&s$ovUM!4^|a`QUU8vmo*B3w~mBF0bpi{x|KX z=PPNEWi~Lq$Y!?yeVH97TEj(-+*5&o;F^M}B0YHpMwG&wwt<`SruAjpDbDuscB^>% zIBpWuAJ2vwnW72gi zRi@((3>>T4_%pqNyZ@i{pRWh9zR6U(G&I9@P>@zSR!b%RHtUY|nL2rC(dnZ?`;<;A z;)}8GA(Pbnf=7QjXK~Ou`Uc{Y)cqhrB~!(T||U zBF24TE{7=nMR^O&dQsr9iZ?y*9dEvKsc6EB3~<&4D4bu8mX9na31n3;)O^;bGXSm| zPtDoX!Oz}{Pqv?w=SJ5%oDIBWbXFeT84bv3kZ#-;9(fhVzbjZW_yY8f6VIy(40(0u z%HZMsA}mDm>6QhxO)$Z0oS`sA75n|s*c)3?lA`jGpJio9n_VJgDfT2S@2$&S!lt+A zu+*n5xEh~2vV~-+RDyYr$%O8S=;7iNXcg5(?xLUhZpIfs2l3E2G+&*FD|!4qGFFZQ z*Kk)amKyrn9QPs_dvRrkNM!HSg`;n7xkzumd$LR|4X#09A`)_rppT8#_!9lkG`4`r z&l-oY#8|Px>Te_~%#mf@f%_T$^hC}CyfvpYxey@%C1n!=(#;85K$X(wUnk{(ogd|4B#^~ z>jn3TxhFPDi$nBvww~6+cr-Z$!{yVh_Y+e}h?cN$GHG905prMt_R+~|o++4mVm)yivCg2@HUTlR z9mcU__h*{b6|xMUKekM_15L&i5$uS-aqAsVW^cNVh&IuHWw$2QJEKJsu3JR|-X-sV zriWkrg)Tp2WBE95hQ{w^fxE#XmAK(ZgNaB$i)3LOiKModpIGA(EQ5b>*P;gHfVw(( zMUWBE@$Xqil&X(ztn7ixN}60#Hg?4Y++g<4{?UB4OYReziJQ-<{-doreR{Zn3NaRy zT|vV+WqS%ci{#D{2TiAg&#*cumxY#v8g}ESRWlEKj;h1I+$xZ`QA;Ik(P26bQ;VOa zzPQPdNd@|8q)I$)_CWniOE$}A9(e6%uAG0%2N5@ zjMoVM^M}FE;W`N}t5nHS)qqX&qi(AG^aJ`iFWjLjzjIyQO8uX-?N7~x;QiX!>FE{G zA=~*e`w_q6I(FQ7qYuGoKTgP<3|6h#zkh6t|$3j24;U}w{+(>e*JE~fib!wdOgccLTXqgcEPVU^=&7m@5B zD@Fy7a_xc?FRP&+Np%ClobLI1h9bw^yk`uq zP&@GX)xi|)J{aK59!~e`#>B)6B+g5hS0=xR9!vb0>c{Ko7UXYE_VRzhEM#2C>+v}} z_c%K|FFvd)67&EgfPs^OjCaU*#n(R?expj5jw#e|L>o09dbjhnUHE*unTL<;#7)( z<5MW#n&J~`T*}VT3-G?h&;;os%3I=38>AIt@7>R$UmS)CaxE!nK+0#W`Q9SNP8&kZ zLGlOM(e_qXaOHU!D?@1uQ;*EgOOjE>Sv}-PrtT?Ii{b-SGqX_9$Ni#_F6I_RUByMe zC%pbxa`UFvkf0g)s-MxaF(+p8@n%=Eb6lS0;tpPnJC-}WFZh!qH1zv|C__Ce6uUFo z>PzXQMU@r5($R3acGQf4<${*hG89WC-|P!2JL(6f;&W(c+7R z39_U->ZAM31XY92)tQNq0uG#vjl(Or2!61GXm1~t_lWXF3KKma%hv%`Z%l8wuDFqE}C1K5}6k%y&WrWyPXD#RnXz{tOY&H2*BsMO9;P zPvZw}dmLLfAkFCAid9pa{?07YyKU#eKp~*ulM)-5>a@u(R6NRmad6oQ>$*nX(Gh7X zad&x8L+4-f3+2@jj-?>}0K=29_)?`MqY6ep5HzhWRv;-x6 zM*U`Vlh44yn4Mi8Y|n?(hbAQgW^te?#=bDc&QUaJk6Y6xsLa|r3bvB~=pYB3ur)V@ zC&k?zJ<-JkoXa0*c;w}F%9~trnSzQwMRUmxUua($_*}}$! zA~)_9K;f(rOya4Dq#mjt0wdVckSC-uFngmRPqSo%l_ZNk! zo*y92bF`pvmMMeHo;tjfTrx6)uTGbwqp3&oG1myYIH`IV8G1>-6p3bS7YmnJ@gpzV z(=+tH)cg$ob}MF)Y0 znxPQ`j9)_e_JgvQJZt+ff1j>?^22!P*4^MU5n;voTpA`3?!~sU`J|wCl9`Xk#FUx} z2t>S%zgVW~U9{*G$23f4hWd#~$YX-(qM*;Jx7bBPhu%Hmin~1eBdS@F5D0I6LQj(c z!CQkY)=fz;`Dj%}Je17O!J`5~%#mBF&$`s)T%<3x?XFs-k}Bn*(U4Mpu)KommTa ztP$>FeKDq#>>XEh#U+MEwjAK+2Oey%lmOC;VyKsN%B@?f^H#({lR(YnkF=JG_9K!K zIv{kirGu)4*?}cW8HaiQOO{9=G7H|W;8{fkE-QwKRzF5dso|FzdC}f82Lw5iD7+-C z>AB9p7=6Ur`3la~l>RYl;o^Z|Z2Fqu6R1pes5HS0DaxQK!=HQ*j7a)7s6w@M+DT+e zZ}uPL8ygImSkmEQ+-Iq1JCpRkczSn1a&vx_nq_L`L;P)9Z-+2dSO3TEO*yI3NI6b; zAJSbeY~GbifJezfoz3fBPil^^PFcN;g5RvM0(?EkL;5?24`_Dj_LGD{JvYQwuND22 z^jjzn>0q1YBV-E#p-nkh@=Dw6@z6~$R3O}^+ zk`;O_<+l4l#ugEgVPk8P*PI`{cEZL)dSK&JL^EFog7{Fm%#dt$+ymR5x`x}HZ!+30 zf8(b-N8~wnoaj)B(#j3oKi`&eI<&^s6r@;^WTfvOo)jpAY58cP2NPIKr-h-|E~#_$ zJk%fpKjA-OkXaVxz5_C`HIUJy)M-vG$jka<@P&#Gn^3`wyUBT{rgyP5wmrF7Vx-MSQwERc81@yxW5$wei3=Cu-chq`Pz;pG?ja4NLz{=u&8 zp)bRL0ykmH$dVSxZFCi_LE9u*gr3!cCyb4h33#w6XfMy4o8wC-IV>UwHIZEUYOYzsT zaIB-3-Tw;B3ECO13Tgi7^X>99b0d1*XrrEg-3(w~*fcS;IeKV-ZRmS;!m9BuKZ$@? z*O+9t>mE6!z!AK$17HMVXlGoDnFV>$^bB?Jphga}jG^dti1y`_NHXSnoby?&2k1aj zmp8u3jurvTO>}H`^K2+mYfRUq3vY078nMYy9AuenrIq%5Y zgf$#g@N~i&`OXTJ%aCGKPuog|Z`!3(TYvO+p1=@W&Cz>_QrxzuO}jRq9W5v!K#ZK> zXMJhp!2wA~XlPL}Lt%4i=7IfSu({;y>@(%*Dymi%9STZB{XYM1xsRJenk)?_oK_|n zN|zU4aoB0+B}#E0IT~*YPG;vAVxuTtvKFVy6DL$iOre4bE*;Ce^JcT?>I!@WlYdXb zyzRvqpQ)oH4PxU9L6vH$6^ zh|iADx6s+r1=*R?UR;#wYB5&WHre#a&xST=dVmAZGHAh}s23~gSb8e~TBUo<+upFG z2p@$R7)ZwosU{`#+US4ni8U4rWzWp_p}LjIVT91uC+z?Snac})rQ-fBrxp8>RNArdW|Om?kAEc=5~$i#H9ly%grq!&rP` z(Nw7|w;+OQXOxpenOtuEdGmdcRFALHYFke->GVkKI;=PAImx))k7CH%69)4iy0Gst z!}cxRgv6|FW*R?-IlZ2}+u=0fEeu02)vdWGVq%-oj=GbZ``ppx@7VSzB>uX6X#fn~ z@Czl{E9wQPgy^?$vLW<2dZ5_gup@HwwZ09Nl*`)F+1JgOx2v)x-CyX@PT<668*d1r zr*-nr3T-YH_C0$*eL7ksZ06zYuCH}EyEJ}EK&>_L_Mo)1$`V=5)>?bIkM-OM=GWs$ zI$ubPozjSx{M8uKzdO%ocG28xqen=Nf~|RNg+nT5I#?E#E#t^t$`!`SK&sa8Q&4XR zqi&Y4M`p&Dw~Yu}*5CfUm7#FpGjCbUs=2@6!3}i?l@>{?yqNEjoaMl2|DjQ83z{9X zc275z?^NHrZaDGR8A@sv8I<_mL0+~#BBYn;h7pk1H8Sh#SdXct0h0&Q%iFM73B~(- z$eyYwNw%L+z&l_K*%?8?L9U-n(#K_dyZtd@^>I~ENjU~|GHZ3$8sHsM?Zz9tCAP@a zE)@hG_scqc*|gZnWy637DO(xFw=j$+F10BfNeR+iXu6fMt{1b&)+1^sntyPRM($Jv zD)1y5YzNL8?e?{)PCxbyk!@|6LHyu4f2jda_+V^aIRI={>!Xc4RZRJ;It7}RF_ZGF zPSH~-1%S$A@+^c;+{?lRiViY3W)sd{9DceJUf%@19y{Hy`7oO*zD?5Chzd9Z1iY3z zov&tf_SF=By|JX4m@14i^bMs9xTW;kPDveVc^?7JTaQOMuVmjaO7Est38WgPd)9m4 z)GqjfPk#4Z<8=RMAKvZncS7&|oEI>X3+`8^2sq-5At%XOATd1{D~k(9uybTz#CISQ zyl3!v$N(+Xa#$=@FSEe5@iZZ{qSbnSVV34*Uh!Iz*!`;Fqg%4@P*7FVz$M?a)OF78 zn@k^bluri~lGY^9x+Zt6pWPhMF4xl_@#ihL`{16lb&Ec$w+xvTxu1WH5f^O_WEq|G zLaIY8>DICP#0-wt*C4OgC)5XqFe$$up#yczoj6=Xo@ZlZ&#nb3G zn&3jPIW*i)i@;7J#d4{<#aC1d?*u&ECu>QGP~eyb!bPX{%km`~OD!g97zV~@WsjDu zc{Ft=Kg#-`T1X4Jv@(3sT?`!h`RU4LkTE~tR=(rz3e3n}bEi-1_QtgH&()56M(Cbj*$4D=OG*nNfmVOZbT-5_(VY(zr@#v4ba> zGk<*EIIpca$Zt4hD9l%0TGdxfnN?Cz$A1=v52ekQM)zU3H^#BMYcJ1@Lk+v@>OBV6 zGwbG4k%@zXf&6Db6m8g4!UK6_b?wY3{u&MGB?#6_W0kPYhemZp%w~|(*RAYKc`~WE z7$U)>zAlmbc*1NZU(YeV*J_UVn5MIqx}A?o0PuhF*^T$hmP*S<22*=JtJ}8RIzQ}v z5+Y@)DyhS-PPv*I&mf69bKV`|b!ds?uKX&Jifg7M=O+c#qxBV*%A(7t+kWom(IE^E zWbuv(kD+}F?^(J9Kq79)A!7bP9R(Us+?RLC(rA>Tzf)geoGpwI_yR0m{%CTU*0oQ$W_# zV^ceD>BJ+gm);iEKQ%BZ+cBWi;RQ*UK+`$7bJp^3xr5oLh+ps&wxBk<-Q%DlGmk#E z3f>QxK^9sgbCNQE+{_C@qzi6mM6q&r*5LTK9WCvZMxw0qX%XLa`YitlQF1}0@Y)s% zjT5+;Ny?icRHZT&w)i-!CozYEf4=g5iN~C2ehj@IOM4%$Fl9&H1>lrj30>!T~X*9({TSs94CJdPbP?l3AgFNT`vhES2S3 zi(ztBw*B00$+eVlO%XS8pg-}f7VT0$OCmozcz;RY6R$5gpz!Aw=9}%ayu29g9lCt6 z`TVzD9D}Q6v7S6pK5l7RprTEQu9;Ba3BI5XcwW-PxAY&yIPT7)K87I9`Ly6sEGsuH z)^`M6AL~o7dp*66PlIUzQh?qzTf zw7loZ4h|WVyLQ6$To_6j@N>TOck+xaVzSr5kbRSK>1HEP@UPI^5;D&=fVZIM6=6uL zXm^MR=0+HH=;*-G5z&0b+81y6?e+fjy{Y5X582A7oC%pgDQOGA;0pU3sEwBjoAo+Y z8CxY5&qDr@p!u@WQUq@8C77lBq1saTH~;WGCOgQ-H$lr-?ZTrnM_F4~I)6JU8E=Cl zD9@L$naK<6({@LVJecwKEsT}TxMis42@na^WI-Vw85^YVRg2Z{SucyeN z>064qxwi|Kii|k@EA2HU4!f0*K#Rs$=MSGOe8d;mhTA|dd)ZPQWL)v`d{p zciw`dZmokG_`OR49(~{GH8$Zc$FOPK7O!?s^`)1#o{^E6Bp2zbu9b~VeA+&-uYB!7 z6KbL4V(~%;OkFf|dAsC^IC|(?aiP?~Al@zL_~~&4VlX!+d*gH$PF!Zb9F5@XxMOLl zck{klsJEH=SMu%J_S8b#p8U2$@M5qLF!=+f;gP54T8LnP;&4_vo91djLT0j<5kd2zNp&mY|E3Em5O@*2?UnC+LsT8df>c>484~Gh^N(qUw3PhJTQ6@v8=m#q)HWZCl zM`4k#!N!@lwhy0eibU+jC4~z0eUPQXKLG=+P1&!_ubEazkhSwx$opySy^jc*LnUJ1K%1AM-5UM2bS<6qT0I_( zPuVz!b*R#`YbNqW@7?xu?$9V{CJrFNeP(9I=H7BzyA<$N_A(q+1UnX;6#G?}ndB%P zs5Cvp0gam$^LdX~=N~kSLE7$oL$LQ{^*5GjP3{~{c}XI)+cm=gFC;}3UzY^|Rk=qJ zkh??_8c+_MN{;1lhHVK=`t>?5SgP7}518x!r>ArFM+mCAL-Hw_lI8hz zxMzNCz-4eqdaFI&@Ni`R#2a<$*c4K_Fo#aPP=A`kQ*FKldUNrvYi>FdCNA@>=U;W} z)U{l8l#0GP(w%eMdm4~SIo4YpJ*1xX0kcoL6$K4%fa)4jyYxM+Jr1pDjZ6{XdozudaTw}2Lh&qKxz$ydQY4^dPw|blV5X#2z(RvNcH%ZvD8`oM(3~p9xYpRYxjaixSc%@+mUEz9w_1}qM|-iTM5@^VL#K=^aNDkp zFsfcirdlQ>dg9~kD&W@9Sg@+metb42dID~iw$^ifmg4$QkS)B#zN149_Wy48qr9YY z5~iml@>Nf9W*U=Un}Zc)BBn$o)lu5+Pc84i5qRhxjTDdWPLLPmYK^#pd`~;!Z@F6a z6vY^t?lk@Q4SZCq`Cz-gXwc*gt`*PXyolzyAxGHgpVD^}4jsMnuOfpAKTjDxaXoXx zsm^Jsgcb`_ZV;pE4=THvwA?w)j=w1lBV_1H@FlUw=^H5O+fY14KQB~2E3$sC-B&Tt zQWCA&u2Og`^=LTt5kJ8{DasqXB?xPo9y-@zCi0W9DsL=tQ#jJ0naJiU;g8$jRkvl; zY^zpVVET{X`@KWPzQAdd{LvMZ!S5JJ6aY0HC&j~6)g2+(1j;bE*Yl;Q-%1WO`)}=a z2tFRL7C!QsqXFzpi2Zc<8M)+2;@|^fk>>>IrVFJA&*DdKWU>S4mVk-MU*rttrV96` zL0}9Twj{xZU5L~sJA1u$Ik`AN((JT)^(T%)fVo|8xr$A4#8WV}6Ub4}=$0*2ZbD8{ zp5z&Y$aEq4!x5qaV|5jJ@)eg0vic!h-HxnZYT?klc~Oer@@Rk_fV8+IK029SEQ{*n z)U1|peSO0UJ4J#%y9Qp<{^QKg10{w53n3p&x`5c3X_(qDJA*yAtek=lRw@`Y-F3fUZG9Z2<3a!w<&}a1p6^uBET^?RRLX63 zwOyU9>}i50@vpDtE2;+VDWr^KkwQpbKN5XG(+Y}Nij@6matq&uT2+TnFON7_R|E$N ztlhz$;;2u__ks<5nl+HW1**81G?+Ev2KB;wxSNmE>Ya1>4<#$gTH{g0H!+s`TT!;Q z+#Jy$1Wc73(yoN>i2874x6}|xAr_8_Lj|FZ^a`STIAWYP$SS+x>>_Qy=!#S8>P(#o zsY@BAI(j5+Hkd&K_VTOMm24IBy-^Yvi48GVy_X7ISZx{M;~&=s%^#uOVFXSS9FUr#IX^ew+`Bt7kgu4&5Cv)! z-Nw&?9igt~jPN>iCn5{eshU_bvWM}H!@bDP5T@QfWYD;&V+DOJWq`ysH6wNYofP@b zb`@;NL9l*JmMRxZEJ zUv?ym_HZskkY-)aw})tm0R`1z<9|fU7|FD{vGLnNaMy&sHJ}>HM@QJ2eLZjW_s@@U zewid40}*|7o!{zo{1gKTuJ*p3Sb~zBqmw_tw9)Hic8X7GPUNb`INLU7PXA&A;W7Bp zgNdG_Yb_U$gJD`}*(6itu`U(a2WN73c2_;!9*SSJmAA+qPfinw0HAayg^MXUX z4$pvp@DLMRwCc?6X@!_vF?V*=lh1qGT7SoHNS%)p?NDLsL|Y^frS0!&gw9V5JSJ2N zlewxW>TC1#scpP9M+g;n4$9W%S7mYIGa$fMR@UqxeRsj0*3g$-6dJhcE{ip1m?IJ= zTyaF89^jw6R`3pNNn0BSGghi& zzWrDH{I1}D;y-RfxHWiY0!kOR0kN5o)$he~^W)bwKlQWlaoEIPc&}!m>UvOda`VL7 zht`~-{B^HJb#S|y4f9-oEcW}0W4~5Va1WR1A#acdl|GafJFfcrcRg?F4nKtq-73e? zpXL@*_E-BoiLVR#MF5l&%c9YO^_^Po)@=+7I5}7se{P^uR%%v6tx>kM>kXa})!EQr zj8)G#Z}I+t7Pyr+nw4bV*;+GgRx`LD=d=Gb`Q6^XJjI7R-D!Q?#%UJp{Mlz~x-|`c zdFg9P)4xUi`YhXggo{U;j<$q1Fy*NU&uf>#&GmDnf?HpN2DS|5|oP{zSzTa{%^|qCCMmgC8&i(X{&J|Wu zPx>PGOdVB4*s|Ybr3Ad$z+6nw(q!5HxhIXqq>Kg&%<{^YGn0#`?R-JSf5+Ag8os6WjtCM z3_jJ*GGW>*$Yo3kTWQik3+Yo;o47O!ky-QfKYx9pQk(#Gm?lubI=f`*FI4@7V9uy$ ze)~;;xnG+)*-d5ScTL~_i$1(k6?<-ZcHTfQ9e?_>r`wl+{P<7g3x_SeEXKkSEqb=i z-HZS{ngWYJ^Vy>RddePN#L%oxDa5#{6RiH3cp(zz^-3OD7;t#r2G(($J;GBL73=Dt z#IozN{;=?P-c9+jKdfly{eax{Fg4+EJ@odM84^9_r9yg3qw`z%4tcbvuAM&|IhbOtLgCanvAj{rRWUrNDME}p)t33Gmcoe zYF578ehBYCAi0uG4Gx#Ow!Y*<)wcKRi1L(%RllwC-}>(UX-=O0vzm6a$;Pz?0;Jw< zvhFF`O_iVDSWA3Zadp7kqt(8@MP4tcin;-USA7Eq)k8FB@aR$faPop(yl`ZE+~51t zj2Xs%^E@u6WLxBPe$$61N7G(;kqVWh_zYF`0D)oLEWD*4Rj>xhCP26h(QA*->ka=d z{X^%|T(yIhHmojp1b50^LLfdjiQxY}`ImL1=J0<2X}%&Ayt(PIr7} zP|t^B1_nmNsSL0YC9pQ(RHmp{E;MT{82jy;r=EnY2S)=|i@Bw~17L;L{vaohQhue` z)MN{N!EOS=c#DtitkEW84=375VgADuh-Xh4-e)R$%3cB8?4!t?=hmcW5bxj<^9sVU8Gjd zfQcgs;&_~Yh(cuxp+Fqj zYavB*aNd7{ZNFOg_!w*uZm65O+nHL@zw2a@zza;{fHY)ugh+?Qbo_SryFkY{i`|h; z5>m`kxML(!)3fD^vGJ^1GT7PCR8cnyW*DLF75trvVze!=@#y92VHX|!2kmI&y1qG^ z5)-d}5#eCPCpNB1k1_sT(Z@DqIC+|=6j!*Km){YQs_=`>78=n#aS#3UiQy(?sFIYjmYN~=_ z-{(RChN&Tl20Obt@K55)gkD(MZADk*Z%fHGN!qtlxveEK4P*k@WqItjN5qK~X8E12 zp}`+XszvS*g`4?lxJzxt*T7Xj8R_IZ3vkdvXc@n#l2nzo%^ZeT1_~}Cdp9w+_r!F* zgWmT1-i;r?B%PyTIzGH*VgGt3UpRiR@l9$n5#p}NdP(C5jV1N^Fi4zGCGHocf-}DN zFc%c}cCRi{Mi9W$>+21nFgcrIyDzkGne~=3mw;8I0!G=20<@8(97Y zZtwO^PMN1gN9T6F)U0Az#Dmt7_kyKbC4=p))03=-g$xTLp^@!eW^_>vg%3q`>@9?p zZ8hm{nQeHsrL)315X=ULn;p7n;?)rcZLIa$k#_e@>a%Z&1#BU2udr0@nQC6K`p(2B zNs3<^=G9f#WWt1k+#iuijMA~mEsF9AvxO)EX0aD_^$jV_nF}l(aD3L7Fjo|QSQP6Z zEaM6O2z<>Kub;)<0^@B@&k5K{n5toA6Mj+;oJ>~lxn%M4zhh*@xi4mb&j_$y8R2eHUrFVU+<>1w57}e;m!+1 zgQcgNgO_F}2OtbD+J0;(E5szva>G%Hcv(?joQbQ@BhW`)0h(;mh{;}m{SSpW^o+R! zTtTe{BU&9Fz9J(}&ZvoZ3yi?xoPTFJj=hP7K&k_t%Gfjd zQPnxrA1Ju-yUTzV|7$_YcDG#_em)PSMoPrOG36o%lMbk0sz#O5 z9jeP^(#7Vmv?(VF^!EK#i@EgZv4~*;l|eU#2jUktSm3DXY6h;Qn)`TU1!;;%>0?WN zVSYI-|4acS03_9~e&^h#r_H6@kff(K2ZEArqiA(of-rHyY=@+K&n--ZBpQ3(?VEA*)()nlg z2xf%gcqg&Z`QQLfYQmN5Zkw^v^WsqwT;+|>7oF&XA20iIBrakv0oS?nr?fyeEnanA zqPV;>XE8IO?h3&m{{DwU=9kiyZ_{O!KjTvX)aYULtPx1s>z7Cxm&HJYpjuG4(= zHjWsvS|sq&Pqrk=o%@>Rvc2#XT1F-+mKEkh$%_hRNL~?-&oAWI|5TCw;~Sp|SeDs6 zQwk&|<3AE=2)?=b+E>~*KRIUrVA9lvnxih+T(iova-yW+p*rA$3Z2Cf-H#jR-y%TC#M zdPbE#86Nvpm0T4>r8TD>?F<4PLbm*dn%G|yY0|R0_dNR#S*fJ^#$@L6Z1<#h$%s02 z_mmM2>sIIb0&<7rn5+5MD?Xiu6WV9lS8pg9+74-5CL;4x7tb>L>3+?8;?GZ-@qQPW zsKeDzw`auEcCYhths^?4U(dJDnZh7aqg5QK@>zpj3y-viRt#eJqQ)*<(hpm;{?IF2 zr3}4W2$eeAN`I_(Xdui)(7w0XmusZf&a+#Btagp<37_)M{+B`kt#77$tFAtl_%=WT z(~x9uB#ZTU7uyKqPMJlWr{#ql^o392lg;6jhojrSbC6${q1lqb-h}>8wQ2NxJBJ%# zso7nd7;J$#eA?f_-igH^$VtF>} z2K)+MbT76gRP*>CQDRjSsRVFF5c7p*93w(liwfcUFRlNNfK@po4W89}@S?uyW2nr`3@MN+8QV5OE1GP5hCjwF+ZGvqi77wd&3allV68l;}nR}3M* zmM&P)Ib|bRjDfBPE@F||l+9ctAY$DGQ`O&@c`cB?Yxbgv z0;mb!qaTwU;I7Mil}b+QQ(-FF7UF2TmhF^DizVqV1=FV_pS$?j$NKVV@#+e+t7?FbvM!PTH< z1;33{KwD*((^wEX+%F8HpK0K6Pi5r$>SL!k4h6}x@p}HmkVctNIm;`lM^9lJ>^_3g zvgFH`j;Vum1%wMyFvMGo#)+HB6JTj_eMLGi;Gg)tyo^s5k+7FV6bXd^j9T~Z!>i6V zC%nG)tv>t(7hx(nf5_81|;kh)E3_w|&6TVlZw#U*r3Ts9%+u#-tz6pQxNo+u3 zdS*8mcAu)ibQfFGyI(X#sj2CLGz3x0W_i;2Ln5m>KiPM1w#KQwhj#sZ0h^z`UGVR5db_tV6K+cCa$b9{ zg@b!yryWOLiP<&t^<<+dppFn@yo?!{1i!F|RhmFlE8lTtfN3t&Mi9MMXL|V0pLv(> z^s<8Gp#jEE>d_7R7)W2j`q6R6l$M|FYwVk`EbTrR1_&J5(b2?3ejlmM?Ib60UZvTY zt?rAl$zNat)$5)*6?ZE%sznRlet`j=1fo-WMho`U=6WiSd)?!_QN16POVf?86#AVz z-rdd5EH4d=cXAWD!B)Ns92{2+*oJ-|uFR{g`$xVzMjB3+(XP<-ftALs!BmcF&>nB| zG9e$69|2eJ22KD>h@V@IEBO1+kZF-o_vFV8_+>6dSKz zoQByWx-Wqj(Pj~1Pr@astK-bT>u~Wiw#I;K_Bl+9Vlvv)jmRr7KzwZ3f&wKVoB-)j z*C=&!K2tZ@2d(bPu>R&N>-2_FV~;3k9~tUHilcB{^7#w@c61ywWn?HDad5eK#w|At zTx5w>67LLhJ%@?2QXpW`I`$tx(gNyxS(gn`kXbJ|A@mVT9RL|Auo0~6KcVNfNkEsT ztVe5Z)B*De6Nd>h7_fX8_~hnXcsRNd=!5|F*inAVzzAsIl~_OclV7jBiykGxeqZbd z3>lPQ51)#YmW1v?Z7{PJq**KWE(aQ#%g(rGIP@YGYtL!hT8Cxv89Bd_Bwo30*0mi7 zy9dWCDd6amjC-B%9pS}7(glu z{N9+HUdu0UWkU-v0Y+;*ykjl_k^hs8BH4 z*_s27h6Mh0i*zubAVqdgd_1JHz{aMlvbNZKaTa`D=G$BQPahJ+^PmW~M&!1n}CCef4VWD?=`j%?L@$Ted567LQbBOweDE2omaE+(l_=jn64H zgN1cRNjML!#jJsB|0Ru+x4(!;S+_9#)BSr>m^{IK(E4zo?m-yGVmq+`W!gl4bFF+t zEHyZ6{YM&!@Vzh@nUj`!WX6lr)mLI8uT8%7F8;8A?7RwV8n58v3l^oigQm&Vg=mn+ zui7t7+(}yrztSZ$B4JZIeWJ>tz?K53H4;vGAgMr8Vq+Gvqtppzil%D1nT3Ug;ZZ~8 zQ9I?ev%D!H7iY4bZkm2!O()*=7FCwV9@buuR>mF@wxBBh)3f7aGH#c1#7Y9>hd5ol z35$IBF{T!msSe5h(+xhiCGy-DQ{s}z=D1?N#h#9?>o%GtJp&EO`OX(3-)qDEJwe`Z z{syl6({%YfDaygcjBt3iD9{U5ZgFp;x(R-@9nm zxM9y;FBrda))%-OjG&D0VT74xpzco@Pfp)V)c`s4ki5j2GQDCbPJdwGW)~$hIq~q! za&iBDtN(H^O5WjhH$_9aQnW`}-cp432<)A=a{sRM`4S}2z_;XUkDA}(KS!RzBN#a` zx_!rT`NwABa{Lx+bjbrVkrrKDZWZ$T;Raevjyb%pzKD6h?Yewjptf3S$lh#}%V@;( zkIK;sF4<82On|KalrICSf;1vK@RJ<5dUu}#EbOwV?geqyJ)r(G7PDG`IpNLE-Dq@8 zy~#hQZLp&=2RMA!s<7ywS6i~M<@%V!#a(#_h@kMBrpF!gKmVt3J>iUJF>pSC# z`OSry_u~*n;*K8IYuQt~jWk{Nak&BSHFnDW$NCt;otv;vvznMi8$WPoNN%mUDf!gF zYl{#<%tWmzHEkvHO>FJ{z0ioT{*MGdUO#N1v*qrol=BVA1#XIbdiwx3je|oWX%v|$irQ}C^bnF-6v?H zO420!z}4lsjc?+NT-EMf1}t+(`=t;SRa>Np_QdP+FM~z+coMGuNrw?D#$kKS_~P{Z z?I+HJfkn@@3CKF&q)u@E7?!RJg#BWz!iq9%VLq!isXdMB|IiHIc6LaShwiC! z+hM~GhTcEiGg=zG&_QERA>Kbggzx?A42Y1?F$L$%7hNO2N2>K7=je!?a8d!N%7uuv z6{);(xekO7R6}uxsEG5fKPx=@bXCASg`>%>!NT^k`1o$`aCte}ac5JsVkEN7?S=8n z%`s~Q-7lE?`*4WSXmYr;WfjGxRmt(~jHYjR7RA_BRWwu^c->5)@-00dSQxI|Q^7`mpLVa??}p3U zJ@y3EZMI~9TKWI3gl3X^6x}1Kr`+8P(5yN8lJ8_s!;! zDNmWtO9GR>)`0mHB|isSV{x;i){030&D=4mL!ySV+)!yDRF28smR#U$g(H+%iK!o; z09UGF^Um)aUP?Q*^|aK4>s(v{JOpg``+P;YnN+denbx;=+#GN3jrxm1S#oqzSlvKu zV;-cxoxoU)dnm{&X74O?*@E)8#Io@xBIzTU0fRbEU`|NTBED>YzL;PB@#{#x=+8K0|T{86bVsw_neKtdj-N zhKluGDdoOXNVv%oWeN#F(dedO&k`FSD!2)98@^bi2rUmX(FO3LBb|u&W@P#h&0^v< zd+#BQ8ygoid;IJPxl`GzH=RJgBD~*5BPyR`xjVxzX#L%NGsa-h!4|}VN=?bFuCXAe zZ1YLU?B`G^o))Dt7D(vE&2`d9U(CuU3?RY_a@?co*NF-h+F8`e2Af-Wh{HK${7T1e zUBMq@mxB8{t#!W$u?gKnz+rH&a=6=K((?JhWM|~c(Q&G{qffE*Q?afYy|}e4#Xk$1 zv6Id5*ShI^cJJ;mbq#yp>{hE(!5sfWZWPkjVVEaa3299|Pk9ELz&^ZL*xdhi=S7rC z=m^s?;ohU8kh)^`3b=(#1QaY7up5M(*p(>J=aPdUaE^_sSaD*5AJbxXC=F7RbwmBr z%W@lMqv0;+cJLGzL2eDb978&ZGK~I0O^LZeAy%V$n=Quezr`j)=i-Tlv_||&PqXsl zvl=N=heJ_$B*z(-2aBFk70@yB>_^n9=hT-=j49J6i#$tQBZ9bWM#@3mIa1_I*pHl970$t6~nY)g_K$JP05G>1vCImIVHxj=@gejZ{TM=eUQ1nCjw9} zat`>1G+d2Dte?{`wbnX6A1J|D3DJ+0W7Xfg@Xe>W64PT>EC3J)yGZDu&d^q)H<3*!M3a^Kn{@?37YnD?sTuuc1UT-sJ`h z(+RAFunmdX__^z4G)UwtfAsWSij}pwdd`@VM1%2I7XU6K3v`|WSNY4ZKM3Lcx5lgj^YE@<{yTSb(#3K z!6QjbSB3Mc<4o1tlcmz7kgAKP3E#0o4<0(n?`LsdJRO{8!!jW@baLs3k2UmpQh}N! zQiI$xoe@lr;QNh)tk&H#A$`CSwRYbIrO4sUj2{ocHW*~e&~XYF3Ir9kJ}$q{{G`tx zo_&3MgVXTUY#%KRejcvX6^2){Jgl?Z@^_qxYYJg-Dxb{_8d5f4sOr{waY@B)$11A9 ztLmODB^<#z)e#sQjDxcO+v%Q74%Y~L@0V1Lh3risZ_}5v9m|K{Sau}88LQ!UB7|yV?~`bgB!Q#@zQKo zVw$$AUO)gd|8yw?+k(zftNEk7Od%dXzLZQg&# zUkaW{ieOmDRUG-Z&vo!%_U(zH8!^QZJ9%b(UJ9g$$K3XzYeAXub_$I{l63?MWSqt6 z>`iC`wzyh;wI|Ipl<&1Y`Eg`?QJrPAIlPi`A-fuac6bxI=61zcmmp;znN(ljIH{to zm_;E=ic9XFmUo3v7s&>a-`zl&Eq4t_Z2PsBtc8CJq#fm!^ArX7p3!_73Yd~|)XYEV zj2pgUF9QNgX@{sb?@=QQg>TX11BSxOb7BqJ!gMIh6n!3izA2J8YSlX(4OL&x=6;Cp z#OueN7ukyak23QAG;h6=YZ{X7`{d2OX1*X4yCo+iX-g^lp)C3GI3t$#)|Z6OmY~T< z9(?_*ZJBlpKD1+mGWiJ(qck{ihn!kigS1`ox>(;29B<|Ytzry_blpVjk3F*2Dn&>GFeHfF6R_?s*ii!(!qj`Eb zNEQn*6llmF4%!z_uT5syzwR;8<1gdko@`IXVbmw;)z>xe7dgP1rrjh)pY55cyQfEj zt`faZjhPq?wNa#{{O;#QgizV`GRRw{?k3fN0HBk9Xkh6gJrWa_Yc;>tCVe(JM`gH6 zht*`2jlUD4wcO``sc(XRP3%09UWQ@59w)4(8qL7}2SoLM`V<^dZJ+f{B^H;JZu&XA z_m?7chL;aY8rcLo#a<8Kvwj?*A)lP}<6YFY*D2AWlP9T5`6Zwp*g#>cq;%@o0W_W6 z6!}Ct3j;r{mm`xy$<=ko@?Yk7x`sD9C}vwtM=NO#)fpUkUq@RpIHA$nUAYfmUk3~{$*0=g+ z+2gFxrIoN?vtGz!vUz(CWCVhjtg*$B-7-BhV6HK@%jtm9%1-S|{SOAIofLW5hCU~J z4w37v1|WHtYOKjGqN`>o~)m<30jEvVrV-0N?bHuPh7#nYO5`fZ?*!PW8cL0Y+ zNpv&E*YX4n8}}YpypASyPk!NeBWXIID9OJq|Qfcg-6I)*_QmVMq=ah2`DtDdydZ7+gT^RawZHE zg0#QSj~KMF^)K;c?>~#Y;+-314x}&ini&g0*7=6q6C>5L?25kO--Uif~Yy380M zct5KAW8W>@Cx#@KnkHm;&#erRN$d$)^d>kcVd}T7o1W}SAyWLZ+TxHD3-SNc>Bisc zc~Hsn{p5AuW3MHpMR=FGI4^VU(-@nnOy1aCk#rALn7ii?`?BV z8TRsw++4RhCf)kG8~L|SpA}l_UEJeR^ftFbv{`YQCO2lpjqOEt-AL>^UeF=6A6vba z>7WW!X_bM?}_t>Tu@Eh+m=GZhPi`bn6~*;NMPXm&Tf~Hm;NfaU zx@45QuCe*&%KktHZ_myS=g2x~@-Q_$s64}GA7Puv-r;N&^AUuE2|$Ej)7h#_G1@tW zoL}yhS3A#`<>r;@gVXE0TzE3qh&UILOkHB&W#7;&?LJ%K2@Yv@xnvXt!vN{)Qd^v& z1bEIJ4l@yd7|zWm;rG>|nwAI821yi!RS_cIN7z@uwfIFX6h@x6KXNzi^)RW8rgf(j}HaT)|#rO0+kKt}B&hk=_dLOS|LMFJ-3Eh254n(XEi8Y z80~iAs@(ov+xKGnix>*7k1y|69RrV@eO(=J`rp02asw>=FpFJPbwg3Z&am2Y5{Jz_ z+?nf<&lK>cxvaAKbOIs4oNig1B}YN0laQjBN|Zd-`*&5ib< zbcmKl*uZDBhD|wgI->|1=3^@l*vEifNWah$X%5j<7-8tOXGH`g2fjTI`frHP@&bQ)rkxXa^ zPifh$Jt61q-7)W%BoCK}mZ|qoy4kHz*6$sOcyUX z41mp)25rhv;SI=;+l$U${J+28y||@e0U_9B)@%AM?^pb+Z=VBDHNSdry1UOzuYWsN z;c?seYAKS@JGa<#*5QSB2Q2r2%%4P3vbF!`t&ZrlYL_F?#6Sk8n+_0%52R_ znxd|@OzXai?pbI#YNFIS7X)9ma=W3-JM0$XG}nFoB;bykin=A(6}Qf&I#@CmC$0*1G@wJQRXWHfq(Qz}GkHBr#&@_)SMiMjcPt`2njI5Db zTKE=&T$YhcPV@V|@di^d#8h?qk~`xxvo+;b;#DL=dUPjBF^CL2&OFAI7@?a(+4InJ zIdutF5D_1Y$o@oj4@QHUmMUGr8naT6|IdZ7aGso~_zmUUIgPlARhZ73>USy%02;Gl z2IW(%sudS(YiEA;W;9GVG#);&j*^=@l;Fzx6jWT8A9OaZ_i=`Y&kqn8S{}K6XLnQ% zEGZqNIJu5j$lG3W9ahlM`(WB1hhBG-4XMR%J`w|G9%{xM2XQhr}3SEjs4#= z&PHw&CU19m6FjzwU>s+uIn$=71ad`C`o@57zu`h+JN{1NTCP9-Je>Q7uMn`4POcEC zyp8gptFPO8s;s7_8MeeT&~WL29`_Fvf>P0@ora%Hwd;V8rigY`31{tsf%Y*IY%EpF zFqGtMi8>z2!4s4BOVHMWZ1)UrUBo$gh^iX3j5lkS>X%LpKKcW+pf&h-GW&6dx0afG z_36TO{l!5cl=Snwc3Ng802=AAw@`-Wc>cuyW+g^|#ogPzJRY%`nDpyK@B|x!?ffH2 z=ktfA{bU_oonA2OR!zEtvf*CR!bBZ>0) z>D0bM%{z{Y`uodP4Wi_MUZAAiU97P49;;d)Ktbw-k=efLiR|gFicN%P!jm$^L?!_!AWX#xe zsNN;Db<9eQecEGP!3*P1(9$Wc#dxhgDeG6DHB{jYOqQVz=eE=dvY!Yrh%@$d=L4k) z%bpXj4Ml-he9Jj!JhbxWTvFN=m&cSMvWJ>7^y;olK!@fF>uZbsM%&q00s$h{Ma`|* z2{F;Euge>kS6E%#g%Sx&Y7MQ!J7k&b&|KKhbaeUCA4MLeuH{5?Z`D`Cl=%+uq1+Eu_FU0(4_|3;mC~OJkVNQM@zF?LM4#enqy7dM0DAM4y zk!S`MW)jE|M{+&(zo(}h#n~T;rda!Lz?e#903s=}E8^N7Zek}7}%`#L_)-Oac zi7zY~-S}8$OcRU}qDRm2_!EntyIAmlnFI$9JB}>=Z~zQ zHTi`3|9?#w`ySOQQ{>b68~4*6Ejl>hG>`9Dv0 zSf!d2%Tf$(`>MCWtT#YSY>r58dz=EV-c0k-#F@Ln^>$7~e_GkI;ZChanc%opiyIcW z+$l_Sm&3k+B>&Fs$is+H69yZ&5%rw&e2!7W0R?&EtNc5= zKS==WkO~iQGfh3Hjh!TG-98|s?>RJb^zn5Q1>spokaArbu$uI|61agh@|jkUR$TC6f+ z*bjp%M`LEn?Xc!V7JMpZP|rC=sYFKVU{vUt?{i&w<5AO;c6jsfbusT&a=dr{cG&3B zC(>5Mh1c^`=@u4d*Q?(viIo84cdyt){xBL}SopN|-tDdckjz@&+%@_ATW8H}24K9w zTUIx|E5fd6e8XK*|)k&5i6J+9S;vXyd<4C70eAfNX1P~6yGUxlJV3lrk&DAV~S@fL@DH{gs4uDSU3+C?PlFj#LkP$4HpbsLHG&; zwIb20%)yM<@anf^H;hE>i=9)nhq5gi9eTZum?oZ9o^sJIU*of6x9mcWen+bDSU{{f z2-M7LDdKFjT^XzqZKh8oh17?UHJas|<2xv_cu)KGUN-pjD?ZXSKiRAQqKM5|MwrKwzF_m6F{*AE^| zK3T!_pB5Y0yovD@x{<`flB&S4pxX;Aysx@nPW(;?ye}7NTj)?Q5RcQ}NKC`JxMr`l zI<8ea9}5ST7UD;u1ZD!w;F;D!#IppPxyOWjIHAEf7j~$sy{Db}iKpPxB*CXK7Im8& zHppM7;^AHT`lXE&FGg*;HfH-(GE$j&`1&SJ!E~IVxV$MsO+SN6`P=fJ(S{iRI*N$$ zz#i%7?-xp&cLV2BX`;)7b5-m1_gzRDnf1|GdBwE7qje&$8Lu!pgpwyv5Yk#9D@TLa z3(ukMRW`ld=FS^)_Xxv7{^e-UJKErNy7f%`zUDGWUzF?F4Jr0(>k^z)J#QDhlr>ny zKGMm>MFZ{N_5E!+6)fF#xld^0?C>^B-eBmpC}a@i?iqetT7QwE&7$V%}t@Bwgf$X6e^aze)_YES=lxOzO+15%YEA4`sD8iRy|tlGs}%}H?@(7 z&tHRXP6>1K3;oY>I|QAMD7~cJCO3>kzpshU8uSlUzriaLZHx?Np*?|zFBHdWup@m7 zKFG^<>w4T~ybbes?DYCd1q%!!+p%`l$muMl>!i0z3e_MSZZ{`ea>bX2R$&*pc3&l2 zqy{oL74mz|9TpFDx_mt%4)duNLioVCOly5&Zl3eW>vsT8hT_Da-7*8{$C}MUp`*%S z9~H`QRun#;3UQ|(idcL7I1~y|K<0=Ura94PAsjjVm+yK6cbP44Or)>y*u6k?B(K4b zBu3~qlymm^u!@1SxltysB#EZ$#Z`%Dz31W^%WgF5OkPCB6_Ma$0}Zd^4ee`#F5|e8 zTn{l-TTzO-vY#gZ#+pmhf{C02t<}=NLgy3avvly`dBp%G3aY|h?fqr!Nm9s=Gr0t;;;US<9mk~7#yP7;b(GonNUoTrA%6z(8x$GoueoD z^5c8SP57B#azj=Ty?Z3=3kPs{SD9V*lGnbUKmYSDb7Ar6cVl5O!bGrN`^O}j5Wsb2D`dU)cCPcTrM!|K8k8=)weU9=7C;q;TIIXK*f zHN4D{-^r;z`xiVd^)a$*4};D5%t`s|ZO8aG|I=65Gcd^RkwJ>HV@%JkNE`W4LX#8% zT3FG_i7!0OfsS%~a|^78B3kF0vK2A<*f;sBr~2?tOtRn&(RSod_!nO}#g5?}40kt@ z^iDJ7NpkQj|CT>{;voHfLWas5tgbGTT{p;=zWNPL?B7MN*o!%~&Wg`S$Ic@>`qZNw z+dGIWxi0!#!C-IX#FwAu)X9?^8mz;+Fv*H1NWz{^_l{%y#lQIy<*T#Y61zxf&xC=( zhMj!<&%a7}2Fq(*To++xCZrP>9Y`;%KN*J?$BlT2}WYh48EAH9aD% zM*WnW^nihS<`Y8NVnRZdO=w|KC(0pEZBlx~GBda!F=CnaL32E$Urb6qYJ2xHSQ+Q~ z&1qsO)h?+TPZ9QeaW#+7>{#W!Ycm;grrH>3N93oOrIaO2x+UL|x0uSWI5O$>P1-=o zTRP8DCTWjUIpRSdetQK+hZ;D0_CwZ#X)>tVC^a&z`ty{WYceEJ)uu&p&?)VEV~#-x z+YFvySZn)~{i*UOXIvW;A(v5Up<{!a-7bRSXUHQ4n)8F|$f!tM5=;C9R|F`c%)q5@E})yehpZ8&bMRi8HTy*zEFt4(}{w{OWD| znf5K2kb9N7lq`YDld>~)&0uiQF7;8ITI2eyIbxE6*2gHh8C|G8Nvl^0i$;Wdm3H&B zlU>YTzQMB8pQcY`i((r_alR#@ls9?TL03FL?o~QbWzpV-NS>8FW3W-%wu{H4{X2Dh zKXtAI^YaUMLJkJ^?V%{X%=Ds%xU$i-G?5V_97#VvN`^`%EIK^?r~fY+qUX6h<&(6; z5mEL1M~*E5eevd;C}bxUwk+He*GLq$(o$<->iRA0)jjM#bVM5HYEm8#K4U(;UG4Iq zjnZ6HNYn5DjrkVVmX}Dm%Gr1PaSrV4z?Jebx9HU#oaZm3L5EeDJAR? zFFYlA?irvVKZVERLz;@a`7l_>FRvF{FCsWU%SymZeS15FmH-P&eu|q1G;%rE)q=~g z!P>e{2%L+qU57ccZwEC6W>$pcMon4NH8xXSTPqI60fw6kr5H>2LXeYRPEAcN^ViOC zb84O3@(y+mHM24KE-$=&6K7=|dGR12Lmmw!7T$mD*Zk_mH@QAOM^IR6et8Muxr@AU zc82=F5lZ6o+*x*T?8{%Gm23RqyFcQCv1L*wJ4L0XSbY<`@UvG~v6a%%T#Z#K)|KmE z@%o#*adDoi#wG{`uvYZ4v(?O*=YPy=H$rrY6Oj~h9?ox~voORnKl%YLz5X6|W>$y@ ziP`L+(omg{mEwvzN?l>e^NY+!TvV6m69^k=?dv7Wdxuxwyh2uO8)aG2pgL;UJKD_H z8^7e$D}MTR4`KFB;I>w?v(C=1e)@f$d--jyPc9OSJZR)Z93JV2O6x^`dv?=QVr6ym z4pS>p8iq&cY;LBm+==(jZEnxGaW(YNQ553U@BNV1Zu;mwa+C@oh!odQv~iOk{M`>Z z?{#tXk^LBEZZN&NAsyv5+tAABpsu-{=H@DL%n_Cs7g+WNsO~$;!M;MSpZPVve&t>6 z%&rQ-Ef+_rmFc&>!%yCrq-%7)IA!y=o%M9PR{80F`zPL8FtF?BKAh{5Of7it9l4VZ zJg1_O!5zc2G}MSqY%p^+(UVHv$y!7S=lKz@JgW2Rc65J9J zG9NFZr!k+ExoILPYF*l6RTj1yF?PV(WonUWE4aJouB=211!o(tRDS%lV znB6BIrL(RO+*4eU{=`vIDbG=eGcW&w7vDU~xY&`ktcydVEzE!T8ZTa0qIsYjhhOaZ z)(x&+zQFru&f&3E(3~IP?GG;E-3YMc-XO27pPJ|_7jMsF61(2}*wZu{Zt~2Jf5G|j zWg!UCK5T4Y$|5|gO1*2@XU*>fJWHtxz+S^*OA&-!7F62TO7sQ z=mu_IoXV~djvqV7U~d-%rgfH9y_g*0IE)28%ejL zk93in3bM2;c@s|2(^5%ZeJ@83?iH>PV@gO{*yG03ewfjMdCpy5A*tyzMOJ<(I}V)W zptLWol{u`8-<0;iLv_yx2M_G0tJZ~Y)k8oWVS8>RBS(&jK6lbtTfoN3G(l4VJH#$0 zFT5drQWeLZI4*6jo7|2AJo(58`kG70Ev%s2nPOJ*;V7tL=l&xiqetvLiAVZUXJxZE zc1`q-h+{j@j&)<1HGi0mjTjBPM#=Y$F}C2B>?SE}9%87*#>|pOb5ycQ8rUJW=?}%} z9z8_0)yK{2*O*-OVadv;w!V$-z8;1~hG;0V<6rk^13iU}{Tw=YfRUZUbd?+U@SSr= z5_F3$j_e(wr=x`Rn-j#!+Sx0|v(j&=H%``^BKmu~iHp5tmvwOX-i%Um1}(k|gi-vV>9^Z0U_+1KS{>h=s95yc*qIg4G(Gydf1qwE+Opwhn1bkHfB z@KGK;d4&36JB8BUy5y;wUGr_bWqlLfD`+=ahlZVhBPiBSBY1n zU7?5Tn@KxbWH;ZVFjkni}W!_$Y7sD;vsLabJK%!PcaDGq@Rk2K^f zc-9vQm~*KqsiUE^L>hoqR)a!1G@Tfqm-VeVv=&J{Hf^> znrt;P5{+uoT9o++z9AlCy(Oa| zLdwfj`A|AgQ%6)C8l>*!R14GUO6*I$EtK%6ZLjF{A?V+A#HTcC^`*`6R|nU zX%f;?U6|nVo9}WZOoauENjdfLI+a)iG zq!cuB@W>u2^B`(3WaQ`(I?J5cO56D26GyOx*O(EKu)Yz+WOdTDb00(E6#HWa+6G2M zel@PLMoxa=>pZ!?kK8=5g(FAk5eK4mr;z8~DmGRZnOhXXDbJ+J$C@}C(ZjCeI}06mp`yF;jvyq@;ecY3`ObEj&lWlEA+rZ*EHMc=E~9gJC+*cG)V2+DR9f9GF5F+kLBW6u}P@6L zMouBWLcn`#vRPSki!+}d!LRQgVc%dI$)Jb4rX3vI)lGJGHa!PVGhFWy-OVw-;z8qq zqA%6fS)6rz`7i&Ju2K_je}tfS4Ua!aaKp>WinO1;ko0X;jP5^3N2QI8xQ*V?J@hx% zQ`bJi7r*{x`l_wi%Gx+_VjtDH4kDguuHFjL+S5UfE&VpYR6E2|#|NdakhmssqN_SN zyhofBgR~hNK60wNgtV7wBj;8}0mFwM;q-w%a_r(5N?+MrTSl=s7mpv?jZ>bj6}LCt zp2V&69QgvL2Fh?RiQ`$bmv1~hileBNCmugQu{`T)YLz3uf?eY5RhH(m>;LR z=EM#{#HGETx_OE77jH-(7|`C3S*&WBW{m0c7YG!z(pKS0Piv9(KUvbjH~!-5v^d1^ zU0xP_Mdg_lBJLJPH4wqK?q+#)jSbbdeNK=j(4v4uEX?x46tS#&sw=X!&LAwtvb4M= zjc7~?EzV$ZzH~q~@ouL%^VUTcX2y8)y<0?WxfIpyVR)!odno+sm3?^=2gRGUrnYys zIz9_fubv`Ohd=($|0{p{^Y;keGxGLZLT*qVq*2Y03<>cvNat&}U=xqFePAyqPaKd= zHOaN>(|98)ZsxuW)EriubcpVtJgCyyrjmZb(t;UHcJ1|AI(qtFv%QGgrVh&UZKNV$ zLIx+zoo&?R+ND8{Gjr_&e*UAM@atFKXI?s%<>~8OTS`#h&`e`xE!l|$Zrqwgy5HZb zoGOm=A=2U4$&r(=dzqOfA1Oy29X*}oS;9iX!bGI=?eFiT(k5iV5ass!Z}8(E{Fs;D zy1+^>Nq(^q|F&jKevgo;kVcRr;*5?>&0s0-;qYE*I3wycm~X*|nYIPv%w`HMgO z28Rb5aH=W9>b0jOn}K5os5LEf@!~v5c@CXsabVWft2ZGxs-xV5suTH>l*UiJ;xpT< zLKrHf;eCQHoZL-;HOYoJ1Ma!&T$u^bJn|@~ch=&Wyvd{|AOzYd4oW{?{Mw)KSAX^m zMmvi!lfWvS#o*{Z4j(?iV0RO_YTmTbLRnKkr=NV9-QAVM!)mnDEJUV)okySG@qO(i zSLRs_#j!Z7xYTrrZ+wG;jaH`aOyk$;IfX+yna98Qb^iJ<|6Iyljl-10-Z5XF*}B|0jl zL&(^n!v}>-v{T};6Y+XjSXyQyBJHOthY+fSC5z61E(|l5cy2S$xnc~)0& zHtyw5|KhLtfBw5aV`pQzlr=%pmdEhH$M}oC_;VgTJV>z+jHJ;@X;U9he)&)MlP^6g zopOmd4QdL4kg&Q|b`MvxHZjfOYEbK})woCfu6>Nw!^ICKwGq(ei3t{jM5wpB8YF*4 zR~b7xE4cc`OI(*>)YQQS*E-iOO$wRO6es10urR)ey}FZKLrpkK@^IObM0~<_)Z0x_uy(if z;@*YpeE)C%j%VMzD9)pDT;;ipuW{+hBzg5MqT?K`?iJL(o5k1)Gm1TlEfk6K5%(=H zKIZ{P6|J4=XFe2&VU=g8qqUA=yICBNCEk7I*Zks{Uvl==f;P`MX)$22XX6wH(7QOv ztXoZA6GtMpz&js|Q$I9FkyYHS2Xu-`2acjr$}4i1J@*#B{NXQo@1}>`3b7Sw?;7kI zy!-acJp1bxcvs4#-cb2hgs87=XpZ`tU!0lx5`>#6VfR73=8v&3J;%D(d_*{mCEFs{!nVJ)+l2 z?5PlbUswpA*krSuOZ{36eqR5{kNMfpe!*)ZJ0bO|9JKYRx4F4dL0?x5%Ja|8ucx*m zi)*hw%S&&($DMgMDPxiLmY_V}LQ))AUm}~1-cD*=(w9gZmTk+zk&rfIW=fnku^D-; zuvhTqfAg~Uwe^ffB0*z zEF>teFQYKq!2FFjc=l({^3(6UPN1lcs^Tmxh5*+tT)MQx$jqA1TlDP&dbqq*-S zfBn@H@~q~I&+Hdx!N-krZ*y^SP4p}+x>B9|jro_jaOOpR^4x3O@y5uNcCw|jAG?2& z_g)s=zkNZ<5g_KQV#lspCSHAsmtK64XTJS9_TfF$hZmTOCaJ33!C(Hx7pciFmAV$E zN!k>Hw9!s+$P*iDEC}xlL?uyqp3SZzb{!hP>YHbBGW`t?8@GA?Mnp(_2U)@=)U=P< z)?wO`H~985&++05FY^A)6_SB9&b|E#x8zwGyYME@zx)Q*rJYcH{O18_0xd8kZh^^gC+BHiez4}he;6(iF^Bush$KM&B>>%tV9Uu0+%k`z%9K%Dk_bikPdfrgPE(Z@$3s92nktYW_*df zmOi>WOL321VPaJ}g)M8}4wV}<8ldLuN%l+Hl1E>ZV|2B zL*k_G;LyH<>>u639wDyXLImv=HNR4HEOof~aiW6uHbKo#G}v+F=ZNF)6~ZkJz1WsE zhtTFC&t)Ot^@+l=C@PoqYN{zOF2HVcQdC+ayKVyq~eW?QkS5Qi*sTn-_B8`}K)!jcLp zUo{n_g=AaPANI+EsSRFea~-2m93_p64ENL8vx}!s9;Lr$2S-mFqNB>e_?tiEfBg^t zKmNb}>wo0`&)$2$N0MA;o?lg#2ddz`_a0~f?G4)ZboWe;pP?I)BIPKpB%XG8+B=E+ z6Sa5RU1?9+lR2%p5;^pK49Vem-`@Lf*oOB&70SD;s(UZ83PAVt7*aFja3=oUiOP(O zjEszUmGwpB%ZSs#QtaQ=jcoQC4LWh+`5)qc{?9MtvFA==&P$g^jR>x*?|ki_@y}oX z0Zw0M!54=mzZyIC?LqodKTe*$L?VnDUQ~v8&D(JIzHUq&dm1NuCrB7;CCa^XT)yo8 ztA@iU?AVE(bxl~aVIS_@vlX3dw_tO36+#o|@x!nD9sc|O`(?a78bV`R8?r+qc5 z=PTdG7_zW=@BMiAuFXidQ6t@Kg*_`D#W`tkjt$`2-~_@{r{SeV%q)4~@eJYRXP(8S z;YIWv`5Aul`W5K&>Tv%jK8c<+l|n4&Nm$QbJ%&-G8XN0!#W}@&j_!kepA+{xDpSpe znV(ujgzZL1BqwxcvYSkplqmh~hBd!oIyMnAP@`iD?%2HvwKdhq%e0DcM%%d;t9NX~Z8S83F!zh@`_MikdBdaCvk0RUbs2IJ%@qWCAt?b;+5}w4X^aOMJG@qw15j& zsZrA0fo!^e>Z$Q#(gm?ZjX)Fqw%Dj~#`VfC@!F{2TUOG=ipcv48$6Q3*3iXZ~H%Y=eKNV$m=HqCP~?()q|Xvdjp%ya)!Puvx8iKO}+6FEmpF+2;+3?`yC_gP5o5!m^{SmIX%-Fc|Anw|~4Y~9kjnh4{Yxf~E zX9jTk$PtV#_~^XcfQe%0(i!NAno(C^qxv@@lYSSKm>b>@-($5hqKHBR^0kW`r@}uV z2peYsY&4PKN4N)M0U1=N8TJh16qF&;5}+T6%a~mVl1Mg)!r(`(3boSt@gYCH<+rlK zi&ro-?8eOW5KbIFhNCaPgp>U<^yBr;di^B7JopFNoL+&4KKJkO*?Ts?N=AJ1dXj5uw!EbB8y|fuPfx4$Jv*k#CN~{I9@+D zfbi|!1SW+VU36k(z>T`CB;2~1(Y>JySqV1=2FH;w*r_$UfrP_mtf?u58E(u@jgoCm z;p&x3IC<*Ui8jhd8 zjzwyz8^w2lzfRhVNKq2D^OOBJeexor_B`Ze+n}dB=wXGKZhB@r-JEPx4pbHv3N_Kf zE*@dJbNcCK7o>7i>84b+@en?K=X!((&tQObUN(ulINgMYoEB`l^FC~8t3y*~H@aKu zkxf7L8F_`MYwpD6b?r#Q5(dZSsIIKY%+3{!k1QL>dGP{E8f^5PH)RY>m{BSM?6=dbpk91`Vw%>6lnlt8b`tm4T^P@QO z>=WXAPrrNuQzYUua&08?hH&=eS-gJiB3y9?$_nYn(H}rzO()i@S%dEGa_E+vaC)OK zkkHD^&O=cVU5CRY#7B%8e|8Eht!%)CZTrzt9K`vnLztf#!%1pje&<`?!&5IF#~6L5 zbSA41)g@F8dHIE+Bf}n^!wWz9E}nSyWt{69#gfN~$?*xe{0XE}x&;)sxTpr@r0Zv$ zPLNin`?5j}gfP_~{isqsrAGF!raP#f^2wHSk#04?=qN$YUH4;su^wY1qli*Nz)k`x zy?Q-9@yQ2}@9M*)F*h}g@?oRzm?a}0mF1Pxh{!@-NhwN8^AYYphJXE+Z{XE4moPj{ z;&pKrv!vK{^uwD|P)K>JK(WI{`S8FO3&FcMi3{g0V2Yn=jtt^z{}=+Q4wV~rV@;+D zr%n&TA7lHZ3!!|giWRjR*1$4*3D3NE0nV9zjLavn_Q2iP+|h`(&Q7#9RfE1x^t;uB zk9_7cxT|LkGRU?yg+W5gKZEmqPLxtZH8;(GU|<$77o)m)JvMFIi%ks$^sS}uuq_id z)rAYEU&pCoieFp;Lu8&Bk?BP94E`I0LoC*`h(t{`(2{9g6j7o6aosH+OU4-E^O;=MV`Yd`cGuxTXInEG^>ja8LNt+%hK}vj z@ZE&&+5*xKMp(^e1Qy2W9(oGX0RsxCfvma*F*UJ3b~uDHr%&R@i!bBU&>ZM410x;7 z0+t(7>_(<}h3e>D6-D30i%<*dQBNW+>{>t|o`tp@o3W{<2kROuV2V32HO9XkGq`s3 zGEN+R9fwa{#IzsOI5K1I#w8p%bsByX*+Z_KZqRfe56fee=-#px?NyoZ&AH+6$B~wqM~&lZY~9`ggL4KW zZfclPy%?j5IC63bLPbZe&;0pmyyB9N4!L^(8qlxu?)K6hr6Eb*Qba!QKb= zA$_)=?!k))8!FMct^lWx4rBf9E*Smu;#~m?!sw;nyUX;Ok)BmV_u?$nZ@m+DZLEfC zq#yH96EYlj7|EcyQRtfJMZd>}wx$Z$3@Rqa`VcGMfSpY(sG)O~ zHlVqRY%#;SBCvnW5ib#*zjTERUd8R_S>qAJ`OVCO`&PKlrNB(gX&EXQ`ocb1$(5_XyJuAANCZ+DY^jS}}3`0?u6-gFc;Z%nfy@D$m2x$Z5QC z_$=mpB+Sjg0*T#uH#pMgHJ1Z^E1Xsx3!Y{HL;dAGQ6hn8kAKI7DS3X<0m3C2)b*NTi_ zFP=Si1>rb_-;@`QM?#T)Kmt(%%IHhqP@ajo{!2J>X&9EG25jEmgSGS{ZCB@U`otLw zPfTHc(T~h368s%)XsIruALm7kQ>&bZ;`7dpVQkh-_MWm%dPXV;;-s~sg73MPi>1{b!Xf^P0rRYiz82XXx9QH;z6V9zN+Wo;wsMO|IRsdE=G zI5C4*IyH=1JJ3{~g^9DT}GyKPc855*86J z78b+EBmq>@)P&M(6=z=hF%Dmvgx*X7pr%T=0Ojdt@Z3+H#FcRm|Los%J|1c!?XFm(1zGdvSx7#JGD*!Vam zoIdEIE?hZt5#x(M^VZ$iwRHp98!NGN%F1Fm(rm~qC_{C10m9QxnCN>}QIbJg!iM6SdQ=tL=zBrmiQ4tp zzkMCDVqqXN2bort#Mo5~jE`Y*dKOE8F#NMOaJg>=ndL3$*|ihvS}GBp?WG0?i6y!} zG_LKzjxFm@keI`f*N@}IEQu^*1{#|i5Ewd)(|xn_UFC0%Rwhxs1r6QnkwXIOeE&2F zvM^?+C!yrjql?Nvj~|zh4q|dK00Rl&;-YK>sj)RRyNC$i5JWNw_yStGYoqd06)FM82885zaPK>0&5%>v%cPWad?b~3R zxrV859(LY+7wV}I3lh`WW)(wJ*K>;zH&NweHyU=`i5;z_h>+T3fgW-3s40^Oo5{vn8>xX2 z!RYmC;=0EdLny4OM@60iv*RNe>>I*@FNomM92UJ1_(%ZG`y%kqjKXay$M&90$Tr4c zrUq4^$%iW>bS;@#2+j0jXqxIFJqzifSzP9!2VqBZTRk#pZRpZet+)}}c5bJ} zK_%3ML7XB%J25>?=hUIPZ4EkFThLOLLErUpEQP5tU`gP{z!1FD=wjE6)c1x(b| zuCxmqN&`55VF>P6I+{Bgs3GLVjs5|Q3=g4qU;;{R8U1!p+6|Sks2=)msA$=?8$BDk z(ArRn`QD>=<=AzEU_eH?86%gD;pD{|$ZFVxqWCcSCcW^IO<613u(q`Z8Hx|ruHAq; zK#iTYF422Eb?pp^<6f9co3O6C85MMI%u%QD%=53)Zv@|Cv^)nFT*&U;herJnE)Gq@ zUQi1E$XT2?GKt*UG@L(j98P^Pb{{%`DhD;v%xOs1hcPkdqy)%@7WswP5UkV)_RWt| zeUCwxTY)aJ0pHvtCP#0exA!_V7^aZj-br@bjw0g(9{ct)81=Yd&Mbu`*oT*&yo&UO zJdB(>jqzXxb{x73o2cxvO(9%9bqs@(Dyr)0P>`KQ4W~TRP}!O3zA-)TLWEz$h=kzL zmiPTx(;;OfW%-MbUi@TCT6*Cwo?-#mR_n(V|QMEI{W z{1Tz=i(mX=;?YOH1`oA-MQee~Q_oFG5*PgFkz1nNv&QS(k`T8fzHsi<&_2XXnjhzI z!;pKW#cwX{;73QP$ElL{AEH%HHTq`b{H{Q)T?6+_axbq|r{a;8IG(kQ=5C?&5>Sf# zxb7WPJKGb#%(!{qz1Y@SjD@iQTt0IWXRnSSMy+igUP-udaANddjKe9;LFXhv#WqLA zC*rNx8U0XE82j8mv{_H;i*%I z7yXjLk_X4v#!tRAAB+we`4#Bdu?4~5lQ?pI2q7`%4?hmnULF!I2YiimBEF&U(}9%~ zD2&qO?^jCvi@bfy>Wk<1+Y4El1BV#RGe9tLNdr^?enTH(` zi6)Qd^|yiZB!-&O3Q0U_RiC_ljmK&KTtHyoj|0TEF-=K4%5m_gi~BDOSXv=Tn0R{#zVjP+b~^x4BvY33N^Sm z9%qGrmpE}shwPb;lHhh>?h#Wx2Di+kVwjs?qgzMuj=y@#omM)^{;?=kJ=>q+KMvjGn0d~jSXZ~Wcnl=#}YV}Y|F>ViI3?$KhUE;=7W(NAUSm`MNEXuDP%t?S% zymTC6vjO^E^7U!wVR$pAt^>8E1)RG!fw+P0i4@57%tOs_+6k&xexY~8HrVb`>2SRz zZJq0ejuY3yE+Lc-SB;i`h_UJUYr<)=pS<{9i+dD**ZF*WEm}QmWzUzX{l;)QqRjXh zaW2}Iv?Gxx&a*9#8nR{70O`fFH-I?1TPD9lH`OhXvdNX-reANq@P#j=1oWeDxm?MD zdWz_usy7@iBz4hK0a0d zB8a!ep0|g-tFW+db5TAlx`=o&YQgChqJh8ETH49DsdI|-wQwyD$vB*t(So}5`*CPz z6Bf?ChNoXRg*m!$yqztIwCOXIE?-D0j0095zuZ8eAlmcBd@RGGon)hZ^BvgIoQb|u zFXGtw0eHDXN~EpDUtMAOZ>gAr`@JmXF)O$Me5r5^s#3+(+l*Q0-h=*iF}>1!(K5Nab&J z+?(=DscOTk(Kd%CLznX*!Z>~^c;(tPw0*axeQVxC_$|k3dEj{3HmO1JR{zHyx(5xm zMLhZK@8bMaU`3oJ)6tGuIWBd++rdBFbRo&}((zm`d@OCPF`3^H=Fh zLMyXd(`G~%$4P#s!c)iGF3;NelJ$^0MoU}EgSIU;1zLP9&T<}zm9#0{Rdu~O&aLn< z+Bn>lR_c7oV^YWQ_O0i_sEfNrELmS$@oAZ}~_pQ#u>TT^)OHZUh+c()3!JEld5kHki zYFi6iRo6r+d>PuwnvZ?=MJR7Cr?FCQ%yL>3c)Rb#uNyZB=%uBln+rxF`6a<$tW@h- z>j}~9P<)|9D1T{1fcOFmJAG4A<(ZRgu$XlS2LlL;xAA|4c1`CNv+@}YqzOX8C!Fp# z5{cyPP>e{kS)q?b5D0|8{nZl5`x<^Cz`eeD?Fojw*MD$f0sY3Nkwo$iU~$WjdHAu@ zzvUjm>F5nsWas7~Cp!aHe))$})G4s0Igp)|1-s2GdY<^@6tmR=qcQcE^>*+Z>|SaR zdJy_mi)V(ePZi@4d&Ib;;z_ndB6)k%2)ynkxOp7tWROJizD7s)`zVi>FU9kR0i~y> z=SvqZTtFzK&CxHBye%XOxmPtOFAwQvJ)%6_=`V1z;76#&^iuTP{SY3ya|>#Ua}aV( zW6rCfx_v9|zVA+KU)zXueF!tNF4#-f;G>V+ixNW!laq4@$Jl4>Ha1IP9R7Z>=Tu(A zk_?kbByYp2?~O$A>w;#p$qmT|mX(guO3ik_I7yeMmb%w)JFQoE|8JVR`Xew6m?4$pLfBp88xHRITwDV9|kq_7P*YW6= zzk;WaT!uRkMbI;cD;F+eXmVb>Vb5}u(^-D0;cZwxw^-NmCXP$yFO^?yzvkPe?M_~Y zL?V$$BoYZBd!Qw6iC(dyx@|M=`{+k-N6$u-W$F>7u#T+S;Qv0?4*`|*(n@583nGN@iR)bt8$-?;@Pb`^0R7k6h5iu4iq zLO^TJLEL};Jz~0Uc$}DVdY2mt5{X12kw`wAa1XQ;(2_SNk$^S30G%5*BF%Xnk3ar1 zT)8oh#YGpKF1L7DV&eJheP5Waq$hqr9@T4hU~6**jy(4i zCe>^-Ru^E7(v8^i(b~QSO*K_8M;6fAKa8xpZnPB}aN@O>Fs0_AwXP8JV-s+Pv@u;J z5{X12k$gCj0$TExB*+}t@xq!@h=!&XH0Ik8^m$37dc_QDrG>eOx~6btXdF&&5C)qA zja4=9^q;`9N6uo7#O%W2946-c$gOS1&Rttj)6j_09N@;OQ+WCC2~7C($iO_F{>Jxk zxOW6I(~}sRm_j5T#ORsBc>0B77|cirfoV5;4RMo3)aG#tr+hb7KwivI|jFTZaNWFm?R`1}5AnYUn^+fr9f# zUdQDL74>VkV*Q#LlopqvvW6!aFk!au8YWyp&Fw=Xkw_#G$%hi@11)(=gpYB+iwiG5 zh3|a(C%Eddp>_Kfv{YvcVH#6-VDuOejgZpTLzhqx;ko+5ekAlUOpRQ`xhoUMuU?P6 zn`&_5=~atcdPUX~9lkF`n1MuJ|O0WdoDU_#i-f^IQONv^7BO>_LV{bz;#a3f z!jwkGS;WjrdY8n{~k#AvH__+h()CNP>J~ zbQp8fGw>|BusH9+3~f&=1(DFl5s!E=H@661AVL|B!S9~IP+u=@jL(B4KLQ>nW}O~7 zho0gF;C3&;;|(CNIE{h+>lmDzz@n4R?Q&sqd;-&pB=mVS4mAw#k`r@uY?O!26Qv`O zNF)-8lFh`)Y!qDr26m~48!4`WNIZgs zLJ??RJQ0IFp@&MxacVkBQy~#+&>LW&kXW4dk$6rh6dsE~r^du+7YW4#Ba3P}J`!c2 z9;Fl#B<2lJ3?|VX9F3`nQoeXfRFgqRX(}Q;9*mBs%;ju~`TY4}IE=3+*^A8fE(E){ zK%ICT6Ho9FbbYkJZYnIG85Z5CsbwV+i9{lie0Y&F5lY?xJa4@s+$@YFPR%TONnMJ@ z7KQOXh1N;Ck~}5h$}0vEo(dny|AZW+4I{;)bSOYf)h!kl$&?0rb0kO{lX#{?D1w3h z^EoL+b_1cfLcmgdg~AnsSu8po#Unwl7)gxNr-9>$Gcr6axR&o!hzO%=U_s4`UR(zY zV@{j%qwUv(GOttG%W+pykw_#GiA3_@=4}NuPa>g4qfklQBs=bYKDd{VU-}A#5mmW& zPx9-8Lb{Rrjk%jyMqC~29APQoL?GLwcc%Zk02uxy~kuXypQcqM+^6En_0+G8sUfvUpR({%91@s zXI91Zsoqc=-Ux*VL#5-@C?Zky7qeT5L?V$$B$78F=>vTpKCf4dfFNd(qaC7mj#dn2 z2de68kYh6-7ziZA$vcEZklvbs)^*#(Bp1e*7xPO&A*|jpEZ|89shk#xF;ZEyO`=L! z>1&j{cW}=uyHmtSK$A(3kmfo5N#L@GrhkS+O!y|V3kSuZ+F_RtttS^GfO(<4noUt% z8YzZeFC00@mRN*GMNhVldx1HWJ`*Ik`2aqH5ZLq&EYc0xD5z{g_r@kPlv;p@8%w?@ zrJs$~&P~|5em#ma4DfoK2t*7ht!+SUaRz)YH;H-{^x~2v5{X12kw|`FlEc{PptIy- z$9LY5`<`;oG>L8w z5XdBzi4r4z%rj824_j6+M&!7GbG0xObAa6D+n;KB~!c#4QEbcJLuQ zuzL+GbpEugX6!kz6-71{c3LlEG)fXHDg3o5qG_ALwfwL@t=J>Z$Gz$Abn531Hd^^| zJ-roLRj}_cl{1$$#plM1F(ViCU0YFAQ9;6(%b&}cL^1b3N20Xw&~tIo;9@~s+O`F2 z*RCT0O?4iNiV-?Qos0B=C}ktMyv^xFL|ySy3$DL}&Vs!14(!;s0X3D`NV8aBV&P5V zxutVA?%3UqoGcS;R(2KPW31@dc`rV4{|@Atl6EW7)*56{veOv*IE&ER!}geZ`jWCC zwkJN0iL-sBY>D=3w#f0{x=bY!i9{li{CcDG^lbmq#ld-O*|Q$8i^p+pGK}Vpn^2w> z!uXUM8F|@=xo6PV*N<73j|34{dt*8irI!Iq zdNFoCa0nZ#3o+As2|jBZ?z*cHQ|HcLHe^6iRU;}(a$z;7@VY}V+OtrYn}f{U0;HRb zBL7MxMETPrGq0G=SDZXwh{Vr_w^vf9P<`d*!EV+e6yi}UZeI{A92K(#IRz!CC@qA8 zhlJBp{g>2W*VavFEU=QGCNWA&AgDs&skqC_P*z-qYzNgP30AYC5bHMYz=1Vo2n75v znhl7A!eS=D%uEOD*|{j9dIHru=fz?%Bfqd5CHZ-v5>>LXX6FVxU1d~T;kKl>OK^8B?oM&H;%+Uj#e#cqC{hSgw8h=EK(ONO6nA%* z$Gz=+|Fc$-b3WNKd-lwa*zbL}0cWVAu`$#N=0Y7!u(L%d?K%}}eRUeB;<7q0?Y%)Y zQ3?t|2$p`R>+F0*j?KO;mT`_F!;)TJ%}sIE>=9sdNq=!xX751^9!!$vu;0pj)EgKS zmQ^`Ld3dM-9KCpZ}i z;44gh870hPeJC39kh_7;8w5D{gm79c^S}IvTUr;#7e1o2v%&g&#`mZ!4fQmGUN7?y zcC+RJbg^?r*XE4YRvro$q>@7?HgGy z)?o|H)#a7965gCKQ_Y$mEqmg(2&Ru48pRYjA=RohI!oVG4Umw1hotC*#J{e0bngVS zvlbS?`_2kYeF2Ozi zq!@h}%~0mhJ*zCTcXaYW(uS9cNlk4j`1{gqZX}UI+CrGz&__Ac-F%-Zx}*8|z^7p) zz{t<4y(j0#pvC$n7t>p9&G{#OclWQ86zBGAoqaGE8^6l!)G|{erGCez!Qtm|IO0?o zibU_)+fp1Y*OJ=_EsehsNDG3th!0BhRlArCyz}g*9A>AoqEUDm_>$Bp*2~_QkDd{FbSz*iO~~eCcyfA0X2LJqH>+^9DCRIfyfzWj^7N{GC;Rb@H*cCf_ACI$xlajvDg?@>fvR0>$Y0@)?UE8`;iPlfD#5>RV6TY1 z`Yi6V;2%dGNJKE0zRm9rV__@9cT8QjiU|o`t~jzP17h$Aqsf zNa)uEcQ3kmc%V#{^?f^of>OL50DW$5grd4ppIW3pypFsu15MCh5a0& zp>}T+{AuzpAoYLtN-A#SxkV=P(TTOqr$FrZbQ1fc{V84d)C}-(6m|KLxFeqJX*8sW zc@UF|W-CjI9Er1%J_fE41203mO|-x(hAtP)MI_iLTEn)RhSoAg{yJs=V?HH~f zNN^GcH$3vVZj>4FzAS`R1b?B|{Y`y9O#V7Ask@{GT?+^g>eqb4gt+6z^1IyM9rC+> zGa_4I$RZ?j>Hg$KF-Oq-bjQBqi)8zO5wUo29{vY=X{gRd}ShP z_3n6VGYR8F%2-=)njeGD3f4d!T==XawLf1)P*2Ux9*HtnvDvqWBz)6z>+B~ANr%Em_p&9#3n?1m(^y1e z5)yT~!1>2Burs4rb9BP(BN=GJ>Fe9&u*M~fBSx7Ghqh2rQW*cpyB>!SWIe8=p1(dl zzXkP_5T$(8l?MxeKVvD^6!87i5AXKVv|^~1imraM3H2lTD_ z-4_y|_au7FBkM^(iy z#2enacD-Bgc!GI3d1Qka{t072gPX3RT$j%?kXH;>UYA#e;z~2-&JCeAFA%JyD8PV_ zo>BfWj)J#Ez0SU4%}85UYb8OKe%K=?CX!@iCyR&>ClSpC!X zfWh8FT`K&*PLX##K9u~LtVGrJx4ij;;#h%^an@dNSYJi?e5)N-$rsWe$L-UI8IbXx zNp~xAuW$jEt1l=ok7E8PR&;*99rZ(Q0HmzHL_?qA(5x#PD38eck9ru;UymN|mOAe3 zo>DvR*zQ)|r>;lWKHC)j0~%f8uIo*_F`%34`346OK?A$o(X6gow(l}jm1wuZXHX60 zc9KT!v|mQdVwCSE>fY$X|FDItlVLHxY0x{|0Imsc_5yD7ybX;Omk%mEvT>V_Y*``A zIWX~0E2ri<2Dl1?@71z$C0EY~G<_&%%U1*A9`rvEQh|v`J3G&~+bChuh0-yzPP)?+ zVa^V@)K+y-SJ$AtpGsPPCc5rLZgqgCtOvFS&Hx?&UC3^DU;xjt)v>QUF~adxDG}PrHl|8ZGQ( zaVHBv=Y#w2oe}aQ?yeaQ7NcR7S|`+#K?}`rcg%W4Ox&h9w?x8S5#YeEPwX|98P#Tf z2qmSp#r}Bg-WI6TweNIYk<~xNnVNlpjb3NZQ^Vx?oYz!FV3UOuqpI9Ru3 z0E@uup3~L_aF_NN9*Z#pnj?eSypLA=5E{xHWI%w<=_9HQkfEEyYUFh}obw7n-!z2E zH+lCd9o>GV0nLDsO_~>%s|EUKxtXvaG9UO9Hl-FVRFyvvlu&BLfj!y{^7D+yz2fCg zHMenu)))=E3QGAea);>~)Lb!nECAwUJ90%QVEV4m-buXq^zr^EEbRU*;^!7fbkn^V z-D$0e@8Wf|>O77zmq?zH$#b{->LCW7{gBPiK_WSRNTvP*@~MWBT1XPrq;K=(V45P+ zQ4A18h#qbfLrH=jj+sk~iP&X48|#Bn(R~$$?{f9TF0qz7pcE0#pb`^m(n4x!geuxW z?xI2Td4_7<@(>60y9|BbhC~Tt1{058kL1ddNN{xmUG^N;h!6UO)xCxWX?y2q1 zFtLwT^>d*}RN^cN=vQlQdP^G8704}%$81?5UGpw`EM6{I)|VHOxE|Q6AR)9RNt65` zeMH>dF_aZcy7Lq?L|y>&-qY$l`VC_F6Aa{*f(yYN1iHQm}Rgz}F!tN(#h?k*OJP1&@;l=D*<1OBNU>hed z$gB~RYzKo3i)i+01KEWLY|r^A{i z!=ziyKR#biDC8}edz0PA#YWm6N>8zIiR$shoT*{4s_lUw|1(!4YuDB09(z9uQ-52P zMeay(TgaW1+~cGBo%ZLhTBsT)FT=uSY6fO?>D-T{QBro`{*waum>?paoW5wtl(R-R zlR_+x^t$^^(hia)FhwFtb-%jrlP9q;^Ofw+huE`xD20!5d!dmBs;cfo-G>QnpBqV# z)#v*oMh9Z4CM(&;t1V%MR$(>2O%@8D3G$?c8d>YeI{VQ(gaR-frS#93gmNfE&E55W z9EGhjcDNt;jAc-XICKOyCb>vQ%#YbbxBt7+K2!zL4J3w2BR`^D7QHL=zt=D;?Y?&v z$n1q?EUof{T74aybMey0NLt_F*7Yrm%SQdNsSUwGvGCXuH1@tg0B-bJfEA*wuy`1= z>aR1V#^bE2YnY6TRsE1D^N%-G<2p!gCDBv6m%hQFNU(B+;m3`=>hiz&&BC&T6J8_B zYiFfrkZY+)O5=zjIjYYxwHEYM; zny92gf0{>LPxA)QZLau={-tfmxl`cWN*a|75`#_&0DL9nQ=8alXG@USSX3pmIbYPwRi#A``aEd>sVf0!fh zKhca{(@WJ`{(wR7>W-eD}EWKH*BV(`}l(g z1uI*h-Nuvnr#@*S1FSe;Y-f-A`%jPij_UoHt4%779(;7x$t*oK-om7R6ocKr^5Rf0 zM8U~$Y}G$b++ljs^NJ-`lf^LaKAqR0qN|MzuFG0}_*&zkf>axt)O zs0A^GZcZIAq$AgP%rIDhS(=X)!Vcb@;eld-6k0C92jKDo^FPMRUj3|qYL2D>_`5Rr zbIqV^U~|kT1qgGG7h}&#AT4jHQMxH15lcv_XS-*7_fTCYICP4v zv-V5Di_D~!#iHh#sEzNDZa5k~@8-Ktp)WUEz}O-mN9-RLIjzP#FY)D;7DH>%dQ~xC zF*Cz`P0$E&N5C+hOBu0d<@76GH}~-`J7Peu6I>iJshgwa-fn%q8eygQjh#(!Y`rp% zym`k%A~X?=bPBkdwRdw|kmj}T(OuOt{0=VcBQ!CBzPZp|cIkhUb1cAyQ^rUu2q{4P z+)uevF;wX^C)(cm+#dC%xA?-Q8X_`z>9)F%MmZ#_Hb#NaM6B5wx&;K#j69GU{vqJTv#Vsmj>Ybd1lG%kY*e%37k~LxfOp)ftPO~m$3AOtI z|5Aibi~H?NHIaY_+m-lrHXaAXi+sTcaLsYxyXNG# z6Y5^%{P4lQaV(ZLHOtya?ux>sv)sY@j1hv7HfUyIS=)~DNY+MvjYmIfLh|dGf1HLU z_J*0;@lUvNZ1Y*nm6@gEJI8o@cJSBlNnsJ5L@?dh1lcZBI2u)syQJ2`&WAiBEFh6-dTjPu-|wbR{c+G{2_m=L-r^A{x3WSw3Nh0xZNCyu zsT&x;MGK(0A2x2jv@cDlF9nwD@Z#X5<*1f+c1hlvuJ#E|RM{RIhcJJ~pTb6oNOPbG zY#q-e?oS(fMwHbAM-#c6owTYIXGpHba&R2qCeq8@8#ur$dzR(YxRXXcc;98ZR_*BI zS9F4^2c$pExaAhM0=z9)d7VrU{%n0-b|$R49B*gfVKxsuYO*^P>=cQs7QncJ)BSfV zk~n4!3U&SJ_ukuZ>5-u9k)zP$cFSwy$HpT&6>y{#p9}>FBgn@vpw6Oh=`ka=7H}L# zK{8X~m9M?{uP-)%2fcGHN5ec#&>ZK`;5@-|$ZbbB`RkD$Nh^Cq;9Clt2W)DkVOO0{ z9hEV_Wf=W?=aiTqva0{7mePJrLMk3){MwZuog&v`8`W6o3+kLKzWh=z2OsbqJ?l+3 z_J%s~o^yM!JwUlPl2Z6K-|GD0vY-8kBe$g(GqRI}HQNhG%!xh%kmCtH7 z%Gmd=wQse+#5lkG;m?M?&v3qv?^k<oR+Coqcj$6*ppU~PyV3i*q2G}G$U2!?DgjN3Cu^2={(CO{!VI9?@P_^CfXz`@@ zNkSHECAC#p?Gp$y1zgav6&+E@o(ahUwxP}Sz5&;gvL#ey1!6$yrO3sZ0k zey9M*=w#eO-;DW_yCFG}e<+c}8Ep z-47qv{-*lb@y8wB+454gHTZyw?tnKz4KownbacCKW756tVbT?hGGFEYXk2z`E6Kq# zNaDhUY93)s z;1*WJ=%9OfTG$a4W8-QdiQj7nx-V1xhY%-L8hKxuYau(CM@~&=kh3#D(h=@(_EcKO zPsH|plo^jL=ZrOX0+i*wP(JTf+ zUkN?T=H)jclLtRCfJ*vU>-eS<<>d35=(fITm^9-f<`8m&?`O*l7fpyQF)Yym zR7GbY#(2%_**ko&kjCO1v0Uc`jA#5NE1HnZ)2Ah_o=5(T$E=%9(z#cJ{SHve9C6M5 zQIbI!Q7c+K?Arwe{D_9VoGz!-pMrfYT?W#8Ml@;MnIZ;8DPwUC+d&1>MmqKm_9&n> z4{!NG;LZUu&ZojR^I?6I>djxOoALgq*t!N;7=AsG`;l0~!^8QNr-G5YN&M~)(0$ar zbteLW^>D_*m&bFaMXNC(OH7#b=VF|k@y!cJnWBF1g>i4{2jVHjzWJ4ZVvzB1-yAmM zpl_je4vHdCHL-hQ*CfUQ?xZLviV^8t6Y~?1qdVSPUz6x;JaegrUt=)nYwvWWWySr}aMolnHU6_Z(Qs2xj zCE^S>vZvpHo5AOvTP{o-ojSJB%M}ulXo?|ZB=>11ueBYE)`mhzKah}%ku9h5DTq^5)$LS}w;i0)b&+fO0ykJ9sdwjV6kgjHu z2)DZoYnd8s{t@?ockMiaw-=Ms++^aJ&W@-BhY0WUZUR!1RiYRVVNSEsvatEPRuh`; zo+w`b%7*xOJlTnJCmaCPvu0+~yZXbE5304nQ{g6EGg$Ei@J{!JB&u7g_GOt#jn$ z%JZ=J1Q_L{&yW=tT0u|~*W(yNZ?JBG%@mWI5*8P8hUtt`l;5XmD4UH$J%iCZb6&*N{-+wJLsUjqEWePpirTJX>jVF*CmlvRtp?@uU=2wp7TJ)%=e3 z(#r_rf5|JVdx~o296cOnwgGmTDP;Nkgk=|vWlht>B@lhs@0z!`YQYK>^6slnB;nf) zj+o(uPW>50usQ8Z`4V6FR8|H=nl+=ucChh#p;FO*~iRW+;_+)k32l zmW$1hDP}G9#k;2s@($R+SAH~J&8(WxF>Lzt!S+paqBDa76XwhWn$m6^*P$Kd^N+3C z3Oxl$5uxt-^BzWa4EfP39Vv zTG%C~tEPXt{$I)CNmx!i1_q_iUeC9CvfUgl2k(>!e|+x(C`Zz*wLL#yeT4D780Xyr z<5HTgFh&AVAL zX-*mW6t!dy&9+-6Z`!-)fUa6!BkD7U2hq!a)eD-mvr{4A4GkH*|FQ8O;`xo%d1AuM zcQzz)TOW-V4ZTrV5RfGe`M{ptRgMo>_Nq69m zb`n#^Qf&*jl>0bct6SST!Ab!wt@nMBg|jdVD@$F7Pafepq=X;TnD}TjaYJ_~k;#rL z{bXc$y>lQ!)p2C^MWg6{+*Nl;aa+H-L3Zq6ydOe5X)C&gI<+8ExwAK5Z^e`R##7tW z#TK?(10~|C+$e)}7fkj8_euLDRD;_r1-m=iC=f2}nfK)FCTzc52^qN-03Wr-^BW95*#lAgt9C7vYv5ERcHg#;F(OdmM+cSj(1D47{nY6 zbLe^9$$iH8>%KdCtv+d&gL6}wze2KqC4Oz~hS&bjtNL6ccW{{_kuEV1(42;w{X5;op^i zI|~XUCcu-WC3`wvg%p_Qq#lS3O7JzmYNy0?)uBn$fM&HkcvL{?^J zONz<&v$jFnyY!IddcW?3_g54fxrJ{vqq#z3xYwbgj)~&UF2oxK^cF3vCTx3J9&>gX zMpJAdg%9&V#GQ6rh`YFB|8*T75b}CHwhGyfq;T^lwryETIBAKfeA?_VXYxbyaIy{M z$o&XeRJ178*vGjk<+a$_O1dk2y=IB&sU4p%hVkPDW!8Mb+1}1;D|jb8%Pz4mz@QSn zu~@G+Uplur`gkJaX@pfqM^RXT(%Qo0a^An%!`1#K$Ed|sjy-g-*1f@pmSe zeNfh&(~c{PvETYM#Y2GRytPHe_a56rmbc_Uacy5L=FKY_`ezO4$Y(Ehf5bW+D!ec| z7c!N~SM7y|hKRf3EK6h6gd>hwxq%%6Iig^Xx|`+;r?Bbj#a#sj-@CzCWReCZ?F)_n zo;{IUf9M%=bn;`tlpeiWu)f9|^}LUic2u-+)xTVw3;5PGvhP`h>+%V`$v{e#;Q>2> z#$L~epog~^`7H?*8}wn}wp2MjBwC0_&IFh+*5IU%p8TF+mhW4attN-71wj%S=|z;? zgl1OUd9GQL@H@eX$%u0X6v0nB?q4HT!YGSJAi09al%3U#=nq7ker4j z*eY&R%q-ndH!sDvQY`JJf@@7YsaTD*x6CGhx^4ICDEwYGOb@Ipok}0#%b2lILAW}> z7*xVIhBWMvRvph;PiMW+hzU%7?*|xdzfzSoSvZ41J0KTD0+ypb>W!(685bv&O%??K zTsA_Te~;oBQWK~`0kY-~4V{V08~nKUTnm2N5O}dvgNii4&QiD>R;;AGb1(Pg=WJp? zq%^zJEy2@~p$y<7Qe1oSgOmfw!F zA*n&&pu~IjuxcA}1;N=I-ssSWJCevXq+zMaiSe(I3on~@3##!Jag&&pVw3k0$yQqL zQVM)rZl2KY+RXMy39I%rX|7~G%}-&XO}L+{*$9#WMxw5++`zHPQ2UKQW(Av`9M}1T z&#~Q`dA=7%q59Rn?74@t?=81dwR8CSU%`v2l2n#4x)1qAPrz7gxniVyCR2uxh< z{9bqbmg<2HJ~w9lDegtABjEx&-NO=yxZe%NYja_EW~6^N5OaJvCy_~2ny(AsJ3y`- zAD;+o;TH3MI8p9ziTGN_<54y8x5B9p10heam0`dNux zqTYn)c4ve;EcP!_Zn{XRU5`5aOZ&aBfB!;kDJozgHn7q z>tqvRwZ{ySv2uQ@PaPN94qGsnPX80!{Nl>L%7>oq^A3AT1Duu?Iz<|66*?7W{>8F!F10_|w z3nY5;8Ug~=rAS5x%rb?&aU{7E&wz%yx`u&ClY#*kG_1F=lnKTWB{ir(OL}(aW8}Cj z!FYkxR~VKoI5)pYAS{X|-t#jbdk4-qo!H;LK2<^+Epv{$$*QN(rW%O{(c|boP%D`GtCiUO%loT`Bfg4MwE`%jz6*3Cikvw)7gO&zp?F{y^}#; zaM-Jj4Z{)FcO@Mlh8lOTwY0bwT1%t7XHBd z65d8Jxsw<~NSCTI$DE?Go8qu*Z+?=^bOhiG$v8 z2IyNxRw|g0NS?%WiA_fDFXZM=o?NSwCaSC81F!ua4w?`PvZy5O9WTr1sZN0}tfVP) zHy%X@*O)(st@PJ=30Z;R!`{1hzDBMU3}fp`*)b^ZW^hp zGONstGsks22=*B!?~Rp8?%zrE#0R;CpZCOPLGBX>rTBH19@u;049XFz4s1oea#Ph_nl(|96T2#F8spAMNO z(Np4MaiT8o;&|O-{#~uuBbV<>qgdR@BFVbv@RV!6Cax_v^0(PA436i>UQLd+?Yhe9+5f(J zDeuaD_59~bG3L#&en?QZADWoROnl@yqteJ|w{|`Jt=JR$&8=I0g9}T`0q0s~x}>oN z#))7R?u^zq-BvGB`^!ymWb&Ftwhv~@dOiW-&c?WvSoF>rLjfA;-RA41YE}IJ=m}J> zYw#^{-OkThR^DxhY}W+oNwX_mFI-miHGH0`|F8DpZM3fcjNN0yPs|PkL)gcFm%=>n zc2;}0Ve-T%>e27L^~Pfkd!uIiBCXyXU=yI}eKnZ@IT)0wqa{jcli3HsV4o%=_DBwj<$Tmt{TZic(37wVZV%W+NRa}e$ z+*n%ejx1(ZLK55A^)pXDy^mz%tBb!~9_Co&L!KZ*ZvAlrv+ZsQ?asl`2!w zkpUiI@>s75zuweBqbq7Yj~n1ZO0wNs-&0Y!EH6LM`{vtx0X`{>eNAOkK= zU#St0JP+GbX3?jB>n}F0r{$R#srkJF>m+|w@ci$5=qO+i5fL#F40vFm>n~JmJ*Hf) zbwXK8M_DKQ1$sHBsBt~k%_Ql*%2QRUN{j%mU(8qEpTIO(oT5()WC9RXbN7kAB@^ zmc*hoIorTuRm5+-WXMPT*?Q3|%iv*mTK27r@Kg*g4ZAFFA8%8=QThvRy*g@bnNDS^ z>*`=@N6<4CBBTu8iV7*36sR#Jf?cz{lyD)%aWNSCeO|ClHW7L!c?5;ZqAW*xf@Q4) zemn(EOw{`6g#r4yr>K6=TlgItfg2+tyssJ~vaABOQL<^=2W=_KK+S?ma3b zRsX_YytH(yFQc=yesOwswJ1g-yEt|!N$}-(^nZWI-%9!eeO>?IdqvJCQf&NM+!by? z(qdYkrqIZ9LSV>ZS=cGg3FY^iY(J#E(R z8H*cYZPEE(a4(X=HIFZ`5wXI*wvYW?eg1!R@x}#v5ldM}(ZgYGxQUfOo}voy(G(Wm zwCH|UX59Eyx(c9vi*YNQ&6P1ftbpr)R{^q<;`UzBts7_WokTnm;VKxOX2LIRaVA*I zuDI<;1#T!T>3%;1zL?brejVS(q83MMCliF}xAY_x!I2JvI1ib%K=Lfi$5gO zkL9{^Eu>83pnWddchX+e95VkOI(m*J2-}48Ml-DXioI;zibc8`*^O%(gyy)CU|*8; zOoR9I;$-CCC3H^Ino6u{&3(I|P4_QH*aYm0foyFEY=BMz& z$J{25{Ce~`;fYQer#*Oh&~o|yO!j=d8^iQln@vEgu4k$sx3kfoJ5d)RgX=nI1F)Ar^) zpu%q)q^l({cH6LnWmrn)-A<{9)0(nGhMf>*)l&K{a!RQ zYvH{ZMu2-ttN`8!OWEOYbBCf7L)uO&1#X;^uPyfo+tbz;RaQzKwm8}!o&<`J1&i5A zYWSfIBe4l{pfD{Rn)1=DdHSf$Ob0pK`XVFD@pW!w^^RXr?YmO*#C&9>)Q3@^*H_5I z)?59%G*<#5irbP7L(yeQVeaqme-FBK7QK0|On_i+$)p@)P$~U*XUh+z$d2FJ9?2M+ zBd4+&NzA5)H2KUC>0)#Iz~wVDa^>ig1*wm_Vw{-hAV_P~_dhYdQ_54~SQxKyB%Yo5 zWDc}PmZnLcYnaP#DnRq`nT6mO_tbZ(H}xWtr&lGm`Os`=BBa>YIjzK@m49Y;Q9aAZ zDdCW^P*+=m4`LVNp%}=hqG+rk3@7`Aa9A2;R;#ty3Hqa}F%x*eV#H9+{UJ34baCQP z*8$)B`IGD;FSWx7Co414yxSV)B2x`!^!tcvRi4MEDj`I+f0x0jYYJSQ3P*lkJ3{vT zk=6N`QLEZ_D;dLB)3#e0W8jI6a6k)r2@k2BHZ`8CY!v}7)gN)Hh{WFmwcR-cnEFTE z8u71CV`A~B1GvaP+NCn{BN|TUPTacObM=LZQgme=mgw0v6_A&LO3gGEu36wC8Qx; zL02A}0boL%zS{tO)BRB!_um>a@m65yt!RUv@Vt_LGI_lh+axD@rmRo_h1%K1NYybJ z<55RSL(7J{xm_RiSHzC|9vcYm{b4N=HwaACm?xIL4~UcVMBQ1SskiV~B)I@7ru93kOEvBZ8J z9ijJIU9#y8BGAUkiSn(d**NvUeFvn?L|;6XahOG{QT%sUHgZcR40D`W<4Ojl24!%3 zdOEaakn>YP0&s@dlxC*djv5MTPElS;Tr+ow?d}}qvrIm;^ni@~=XcPxb1ugRs7l&g zs4^jP-R5Hw((crPe3ktTecYLX%6aq2u_b+$nz*}^l}!Nm?fVa(-fc=ggTEU<>g`gU zUycL}PY?UgzzBq&XRKH25fD!2g9>U$&P*vjvbVRMIlJM>;)d!|dJA zmQhdG|LAxM&OuHx50!QbP6%}ig#>$Z0pL*4qY$pwJ&i(n&{R!Mb?GA9un_rT5}8u+pR#bmcQp_>u1AB{gD z#u+-n$X9kRT~uN(<>!T7(RM?SB_a|P6YPB?>V~;ZNB$%y>*9^-7sAIbxv`*a7>;Hq zq^^?~65)yNCzIF`ahg$Nx^K>fOed|442*nmc0`rjbX9X= z)5=w>LJ3FbtqlgRN?-3tQKSdzsbgWVntOW~Uzs1??Mu+0nk)xj6nJl?bvJpmkhf!p z5bTqSQ{>2QgRXUTOhS--pf9;DofG^b`$-tzjdxv01a<7Da9`7%>`=Xi;c*VJ%* zCU2BU{mUAA@vWyK{y)5BNHHAUKF`qm{)4V{4dG~U50Tlh&X0s>_cyb-b+k~87fl_I zSw;dRsk>$^IaOU3*}rj>`f9U(QROKdlYYaW6|ahJA!`TG3QQ_M!^$@Ku*Hz*nHK6? znhQ{wojRUS|K8_z^r&?G!94wsz?E7~p~7SmX%WpAd3e`tl=$zu5?CBDIH?jnTBj$c2A9GoFBem#i;IGiv_;iZJ73v55uD^AzqNNAHNS({R`FB(JVjcM$w)ee zuPk3W^rCtL$l}jw#$p(1^QciQx8hJ_+~m6|A&k<*%7{E?sq()Hj{qaw#+jXeKh`Ux4~vZZsGxh%YsrK$Z9Y4x&o zNf)vpb0>Ku*N1i9lT9-K`wyM2z-YsAN1{`vXbgR^Mn+eysEB&skV0+OADOkyk5rxv zy@6ONjoIY_?7)=mQ2-RX>13;37+1Aqt>XAcex-`!jkBg8{B7N2#a}VP#OPh!Y`)KS z%iAwcLT@7c*=zVs`YO&W=-lBJ8mF<3S)L&E7CAA8s*XLCUNC1b=_9VSwDV+}mu>Fa z^QkGK)Zt${p>3BLWe-dw&5t9&fFnawQqko4WJuG~^lLw@nSq&E$`PcDt#dV(=qQ^$ zQij9}5Tmmb{PN}E>%Lq_S0_N>!ao$wo*@r1)__H4He55GgQPt>h6I=wc5h4wrw@I{ zK^s*h9==?sgrhrY9S|B?FLABH!{%K%Km`OT)V#|oW+$35l>Y$9_#EE#)x1|)Slc4o6w%)FFLQ^M*xs+^0 z8lOs{@rU=rN*t^W1x!@yNf){Q3FfSaTW%j#=k^PS)J8LKOYB)^d6l4dBELN%eVD;v zAtK)Y344CZ2yS-^O^NwIp1FO>Ro-6@%!01T+n8J5PKve-C&vfBc8!p8q3f}XuWSz9 zu8!ocGPaVMU;8ljHtt+_VidhTw99^YofxsBuKyd{B%8Lu0AK5jAYa5ZO(1WFH^`h= zeBS#qJ6i_5wY4n~2`6tTD;@8a*;A|Vc>h^CUsODnHLR!U21kUn4t1+|y&M-Xw2H~Wj!yv_f_j!-a%#?z^U4#AN!(4fE}zRqqb1}ujVOyF;1 zss0H&8#3uy^}lw>JjswyB2nB3mpvmO>YN`=#1ze1;L!K%N=ZW*n}+J!eU@Nw(NBlU zb4_4KGT&Rib{A(d=9ZwYAlEG4Rt|V;dkGj zbG>|>q^j5jVu-1+5lfKvu4G1VB`e!ai~8hzr#J-h`ZWi<^RtwcWN&_ko7d&kRS*&j zWnjH&dc7m1xJd`SK6?W4*#UqRnic`M5Xc_z7c%8^?{?b&kNm$*7x5c@z-PP3t7^gf zRT{s3DApV(rOlK6e#H6VYHzU`|MBLyH%RETE8U#5ps&#Mw_{g#$F-iY^R2(Vi3!}; zH6=6QF+;gcXCI4l1e&Uuyi*_moyz`wr%3j_XOoi#HI+uHi>?R*4KIV7$bUWW867Lef?EMM(L%~cq1H8NS$5>JbvYYF} zlt&()aW2jvy=NG%&pCY?r`Wkl#++E7!=1?dV!zOe)_Qx|Me5U-(|JU1L@IuG^L)2A z%8El3q4?Z=c5qZ=+=}n%XcOpjhirHQAbFbpZapQ-ejIClo4X1rB)eBWS~f)X>x{ix z<|S#neRniJ85Wn~J-ws1?#_Bau{rNC*WGkVo!ygr0v~Ew$Z_&T!$K)H(^g=&!(6%X zD2?VHc&vaxKhXW`f<)1)a%7;IE3JYBU}BH$z7i62sb&Gu&Y!&Nc-=QD9z7|%&uyNL z10L<#_><#EJsqVSHuaaA1MrCyhbDfxlAi>aiU|&0K+SRc-|Ve!M3(v|<9xDdp9$T& zGSs$5>e)nAAmYnuU5?QSI8(jbrDx48DJ9nO(o_40AiqNE7Eww$tQu!#8zi;&MPxa+ zh??mUtZLAWB@6JmVF7u*s7(x@3! zo+Fw0O>r9s?7=8SHQl!ZA8ZQH@l{E>7T#>iGctPWL@|tbcn$rZ zxgC{QC`g9HWj!e?I-dCbzih#OAx7r7`%}3VAac$LN`2bkk>(*1_rJu`qy?Qnyft89 zMvw(X3e^sS$WGrBBJnM8%0CX~a_XCrl$A${SY1tD7HMNxfh%r#7z1M%t@b@s|6$#u z?eZ_>&QQDt{P@Hn(4254U#MTHPKNCSdmofn!#&qSqq~M-F7~{wBJ9f((l>sZn2TP`x`NrdDLhBiD)B+={*4GKcZmX@ULC) z;mTO~4Ez@tW-(z{$nSpH$qjhbHAs`j@S23g>26lZJg}X1+giKdq$yG1?E+GMJ4dtaC(b(qm4m-VwEGh zYuSVI*@T0f{I1oX?g~{cVnV+#S4jR&&3TBXT+8a!U1e`m6sP%(zVQj)j0Zj7>w%#% z1<_fa)5ox%&CtpV_qxJDv1W~=hmFV5I_(Hzk2ieIR}o1Et8)FIqG~D2Vm`@rB%p*k z15FzYnOKF%uTc75mkz%79nWYlhpT@0g>*Z=c{lP9{1!;{ogWYX?ocW(zHyoLrupca zK1;Br>YJxLHKL4H6$b@NC2H(9FJ~1r3*QwOY06^U3(0Kl_;R1QykbAJhKl#S-|$T! zVe0}?%FVis?by|&_|D%pYGdTbO8bMt$$LhX4=2=8P^ckb20YyD&%Yasz+j^f?0_Wb2cuAv-?f&rn+apDSPeMv&Ns`Lkm-3Z zNkV$JDt=@&?X2kgF4rdhy4f!a|$ULFp+h z^YaU!15`NCThwJr7~~8=wU1hnAc^;rF~&+lsh9;%J-ygyj%~ELzKS9L4mjhgH~P@2 z%TzH$fHS-}3`%ShA1kH-b<47Va!n71DpJzx3ra6o8oChA%Y*9)C4cWY<3q%A@-;7j zUpit;$-ECA5I@bb|9?!qV_;-!v@|>u+fK)}t%+^h#>93ywr$(C?MyV8WMbR?a_>3k zyYK)0(cODL&swXhRu#B~O{I7TJ+;_gm}iNDtwqR?GB~xQ0EPAQvXWDkQ$z4I8u&@k|DUt$>>o zg5^}{*0K;z+KH!#%I~bwZLp${8a$KDHB7*8GCLV8DHl@w9XPszGSm5v1;?JWtTKq> zVr1fsBPg5{LnUVHg6G({YfnGjf9PWDFcWIP7*iD}m6WUKk6iZqBSM(ZD?q$1ElIQ$;ayml%ARod^M*^JB^nRPTCbIWJ~O_#Nx_JqYZ z9GjSTU>`GixG%|BgyD%Ou?&01sPNv6?T|3FQ8-z^6+=lEQRXB}OpYU}ZOc7n?aYqLC(^cU45|i8?AKql#Se zMg;**K9d`B7I+92tE_jV(UQ!$A9N0^7KO5CL7hP@rLz_L-}`3V>l>_v5)KY;^$jjL zGx9*n&;%V!%5a1cV_)B7gS(l;MjWSJHr(jGyI7$jEyVh4rzRFd=whiJK!iAKK-sc! zu4jKK!41AbShTXYHSpD?U2d2HR{f*2Ik?ZMd??|*uzOT|VBH{a&7y#NU!FupC4d`c zh4*(}%*-%+v3rzFNE2geAr^YW_Xbdy!`*gF&02*`nXj$aZ>YyVeI?_9`6YBt;Z20a z?11&Qme_{4sBf!@vVFd^4SvL zHWZA$0}vBI%mi(Sn0}fJBe0ba$17M0NE_w^#O10ebnKLi!YQuDC~!qBt zkd^(TvXj^Z{Q`|}qKQRzQZVtcgUs<*&C!j{W8U4b=JZ%q4-$_&PJ8%VC;u8JZsO2f z?Y>3focaAFaewORoYzh5JX;|0@GCU_E)zMO6FnoVUGF1Iasz0}){c(OeE8xzKyA!u zh%xYtAg1p_g6TNoMOdgbr>P_>ZEH~4Y#^J$u1sQ?N2NlbQvR?c)OCij68zH{_fiA> zmyfG8-2U!9Ei$~Ddmqn!qV?X#^C*}xMGzesG#F36R3F)u2M41yA@wv}DVQqa2gZ1n zP*IkM8PHXXzLT~z(vlXDR3L5B7CxEQzvn)|wJhP}J0g-nCYG5AsK-NOiw~h6J2IHd zKzY*HK9s8tyC&_FJ4Z>qazT&xfhveWMqU;UfDY{V);E&&1|V1wB1+hy?|@@EM4)W!;}XaJsJ4 zKf}!Fbq1q&Knmw00voKB)KUrmlnGNJiDV5h1K3xcV1^i7U5(K`(gL%lZ1z&r2v@8E z3iH0TyP^&ReB-3ykft8z39Otm_=?m+W}eb{Ftpm+=pofCptf8qE35M7_Q9^j>-<(q zpx}ca1z9*&P8%@Z2u!c%0+Ntg2Kz6^Utky;g~4dadHkYsPYz}xS(m$$hb=T!)f=LI z*Nmww?f@K?w6%Im{WAx2{r=(`$J3#_6jhWF-TC*5Ep+`U9=_eh}R&GrQWKFK$l+pD!eE)9%QwvxYWC z2t9EGPPVM$ZbVQF$ z%7hj;?JnIi7$yPN%U5O$h;m}8&YYE`w0;)t9SVyl<6Ot?n(Kcu_dITJfl0>E;||ba z83Yb$L9zUj-Y6YFYY4}LMeV@43ui7)*rR z(YqZu`kt2t`|lca@w6=DbxlVhIM9Qq4icX)ZyVIrR^MmoqK={s%uTD&6dWz8M zz@acYY?$O~>T99z&1H46qux*$_l$j7JV*R^Ze&cOoX}A0P8_vcve0N(Dtud2I%5A` z`^3Wq@Gmr=&o1<%aY<2F58(55d42f#sK1RXz#m2CCo%?L^43tQ9n!?YhN-udrXiR2 zhW&i6{Xj3J&`FAT2vpZlHMBP&9<{+3t-qMBPh%$^jl$RkO&q&982OJTWZX-(0g^i= zZVS{e4u}kmujii9w(}DG6utGq2Uu-}ciX&W67!co*=+bg6*7 z-Ta2)34W1J!^w=*KiYGZ`gAJrj@OjJ)x?zB-ny_a21G-cEU)u|NR_)MHs2L~x@GXe zx4s$RblU+bNezU00)-M!M3rvDi4@(weMUwI-M)W8f`R<&(1{#1V$rK2(+fo_1b+a> z>h|-8xGodi&jMa9m15=tO%T+0#+|oivnU)UUR;Byv!OJI?C}VDT2eDMQd63k1pr4| zNn#5rD=S{6QoGT1UF*&PCvmu``zVj(e{AI+3a;eG6(HxY(;W_Y>k@T1#&j7W2xxca zBnhy3AV}meTo8!JAg`J84JV42=P+2~FE}4!@{y#NYYj6}AUqlu{(gC$@{s|nwgGb; zk6_vY*?iSXN%BFC_=PE&Jr*5rIqa<77|Z(g(zXMe)bm_{gztCfb+~w1PYE4zbL#$1)-yAs_)#>ih9&8N5Tvb-#$b%ngf*)7SW0TN-0 zS0qC_>B)$rkvBF@O*%R|WYV4pls)$5xaY-BfX;>8bof=|?2Bw%*gMcA=;&UR@yh zfF#+e`%N|{T~*rF2ls!-Gu>Ac=Wf!|MG6XiA*iBi+tTOO?R1&q1Wiep!oAh$D>Oa} z8mSa4!YI9Mz#DR$ZYdMPAPAp-Xx#L6eq& z3;VupiO{t&RC-k2hZ?p*6gR)O#WwR5Pm>I^1!^k6+n+&R0_Z`=5T>Hf_Uk2gMu4Z) z((Aq+*|C-z1((a2XHo$HT6Nhb4O+{(;{5@;*1;6(9~%k&I2>V2c`gy@I6S0{Brwd( zIQ6eJ!WOpnbMu~9_v9LA5d@JWRSmERA5iosj;Qad7dIOK>%TNV$}2w%4X+ZhBdlqh5YUtTb?{SQ0@eJLe65%QLC20NJGYYeIS5_`AB9i#1-S)on4yFo+` zerEAQ4$u38P=UU5-p!{?d)4z3tTOjWfa^VWd!OHpH+A=Oqt}OiNVMjyRb&!LC~ z&0`3l17X1=P+mb$O4*RRM12_{Hxn>>8sFHYTu`8i#qLGcu{yA_Y0&&RiUx!aqZ;|X zT4obt+5#6e4EW)(<)>rNHPB)_;@?Kw)k21-fiboe0O5g@@SQg}jk^qs~H924EBV$;U94Z+GPs8czzHCGvoKRO6B3NlGY^QhyV(4V$NJ#t-N`$kG zh!dMWY$n4=!SxHx$n_KIr6f$jaL>Qv+MZvhRCcz_tMcq$f&;^p)GT~-}ZwZ$d6P z|5zN@4c6q=1L}DHEwnnLLvg>*xa)kjOb)l%FB&F zm+WGD*|=^Uf{_FPa_@rnNA7g#mr6P%-hUNo44TMuASe=~CGK4ZKqHU>y{J3=(YY^c z&iJ$vX^AGv4kQSye2i|c1r)ZV!v!I6T6>GCLtU=r6aQJv!8_e4|`hOQvdW*o7= zA?K{qgb(a81b4udJt-XiJ&#y4qfeBTJQHyWBO##h9U9#bFMDyoMFO7v!K?JHup+lX z1Y`JK%Fi9{8Z6uqV?1IQDv>HMZe`HvIgfA}$clQQe*WhmxkojWNtCBLfy2A%AgF;n911}<1kG)&{8FfI<7Hb?Z+ zAJgs;K(E^Yq&b|~US9>6nZGjDFpOqvKjsy-L$ejPGcIV7yxr(;_-8D;997f`+L>|F z9&1w8R)~sfVoy+4DCp`zCAvWf?|M3)ZG^E|^Ee#7^UcY_8QBPmdoYD7@@ni|hvAc> zTp0=9q+E?*q(oVHp9uIu=YC2cE@)JdKmLiBHxcx8z_y}^R8-T7kbh}M3y{4c9k`@8KDXR?25nE#~~Ug;xASGj=ESj`$~y4GP8nHM%_K?tPiWW_yVPs zLTQI1^XI9a-VMRL4fmE?@`{;pzpoGnj_6eVu8X-bD0o|q%NJqf=8wqlq2i>}Qo&^Pat%_9Gw~?Jn;4(H~C>;hBnw}XN9=2QA^hjeo?1NYj3jpHyf{iZirWf zx?X!SDwEt*ocn}lxv(M$hlQMk*_NAA_tqW~RKs!Bc;q;U9zW=(!*>=I{50lUMUBOf z3UA070$-R~ee3{hGnjxd=xlA*`~l?tZOq)EYp21hVHGTvNCoZe=;3}Mot}lr?PE(3 zVf?8n`TpZrLga8mGe?*p<3+}Oj6Ckyknnt5tgcOQ_)03^kb*lm)3g`$%71ty`v03$ z7BL(Q{=kWG6EqCR040W7sGMW<;&$GwR zh}j;!IP2&iwcOtD8#6qs$iI)d!CG2>ZfZlTXh*UKL7O!AyLkzw0<&2E>Ti$tH+6!t z$GwWdLwj{A4a_F+WU0^Ph5QO@YD2>4Ck~!=7z(B_`{*t=lVwEkvaADWCKz!Cp^J=4-HJHzl-WTi(Iix)A?PsDS97k=X;d;_G*78P zvQ6+FtL>>_k<-z5-IHV(dwaxk*sl8yVyE+eH5Jl(8&)4FBbl&%k{(HnB&w+{%`{-r zXywOm@E*#p-dKy^EHhXs$ZCA7yUCn&nm!5Ywl2ML?Do1@l)>#jwKMOz7n%i#Q zJ0mj;X<>Xfnra1EYWRmkvxf#N6WQ?X?0576_V{V-RP5NE{%cw@7M}!nwgk?D5d^%S zXhzA@{;jebbB0VaE+&MX^Eli(zr!s+kojKAafev9*b{@#LPa?7DmgR_8{($ZIi+>d zNypGxWIR!i4Y)%VjCtmd*XXP26tZ#GOo366xUQ3^uVM03S^ogLU5{O-5s4H>VWY)y z&v|_>TJkOxk(ENMm2ZIr^3JHSg4=q>SiNW1qO4-C+(j_ z-0U62{{hP+YS0$GUzy)&=3ZVr-(`qJ$>#4y+_}@LEXV4!w|q?LpMS;8kqEh*!@dsF zCWM!TJ6EEI+yOXmU=3$y{F(j;5o@9smR?~k7CAltn3tZ)Jxdwvo-L{f?jeJgF-qGx zwPD0sOen05D>K`t1**f{}#Q(Kd;;!*iwx5AIGcLSm1O|zL&ygxESKPSDXn% z>YyVvx--MAIK@#+Gu16N-BFO#v3)gU0}9$yHO$=A&3wz!Ro@(W`eUAVhUEu{)~R(# z9hTLK?H~yOmw$mw;Xw?MXPTsYqu4=kjKM2PZWh=evF93VyMWef(myZcv+39NH@Xwf z@|h=A?)#JOQ58*yP(|pw^cr5!e)xkDfpjuh)N%W&(+b~F*|_uzAH>3VRzBq42f>{Qf28bO-_DNf@MdH$L5R&5AkcNs8vYYG(b`tx5FC{4oWrgUA5i}f?z_9_e$|J7meFOOK4E_p5Nos&!e(J%H`sE2 z&iGV1CxAOr0_g{t%ijb)Tu;^Iyd6UB=!{^~bIJ1bXX}mgVzo8>!Gn<(S?IARb_W#^ zFtjQBT36f-=zoTmX@AQwO6V%Bvp;ai6L<*q3&S(*`$bb2W)Diy?g!2%a~w=L#=d=G zEzoxwbUVgC6LO+Cw3h{2GG(-+mNY0J5I+7aN_q!_vtlzK?)&L>J(ulOU$YP~{DI7A zOg-_NV|zFE1>XB5pj$)PWJKZe8(grg1zo+Ni8C~v*X2llvk9ayY8vb(b6cIZ3A=)RoozVOnXklObnt~=Q_e+{(66*)sfwLsfsh%Vr( zBBy;VhCOZAjs_fLNVx447%z%dS=#;3)PoLmGH!Ej$ISU5GR3^6p$PZ6LrQ+YYp>#L zbU5Rx<8@&Dbir~MuhxpL+D=W*i_KZ*$3weP6e%5#bu)4DJboeL(R31m|llx7EMC z2Rp5?K|x%_nx6aekE@Re~T4=B{A%NJhnz&()#4s5V)hI0UjC6wT%A)`+cNA3( zh}ev!nBfIzULw0>Q<;lkf;Vl3FQcD9u6_7}(EyK6AEV1E$M*>5>v_kUg{`)i@;lf* zMieBhg8vD`5a``>u8b@{890L_7zb9@O$ZyFhDd}mb-WgwXNEc;NC2YP0PefUcrtvH zTGbD$;;k?{Y5Y+{{KYi!uDRg92TG#XPB1XS*oY#GxVx&0sWRJ{a?g zKlBxoR98}u^2Pb}_O)5x0K#i8_g`QSMb_REb#{Em4yV!~xXmwWK}dIC zfCwEy-g|^kOi%3MxKakQHpAn;AI%+I4kVPz#S=Md>F(fOZFHA^e5!%S3`qYU0(?J?(Jw_A-W0U?>;`$VCSneNlm2%^Jn zEhuaRZw9wa!^spfv*kH)@^-&p!$h*%49FSL0hWd^?MIV)Wdw)l&!m#)7rXph1bz{f z+4?#wMnV zIrV7UNJtl$4P!#Lojs0LO)f|;@l-}4=0gS=jIaVD)6yIw%GZ8|&Wl`6(8Oma3c`~i znvISy9>Wop)?tYTKiAa&3mz*K-}gL8P5)Qr1)m z`*sB8Ii=VbqebxHray2VP+-Q5QHpEY;dnO=rrm}l&fsc&HkzTVLjjb2{A+}wI-vZ; zJ3kFGkmJ9fsMj6o1P&;hFUBm{1bXJ2)5ZUw<+=mR5>u3Hlt}QJ)nd#nS~zh+o2#N< zgP}<(HXV1Z>1UW18#ht4HtQ+4ZvIs+3Ykb$cKBq@_f#$aaDHjcn#mjmJrs+cDD)g9 zW;`yFEALUQVbMa93e}}6qh{mD^D|sOaL94#0J7h6pTjj+BaTwwvM6-$qIY4vYGQ^K z6yB+XVM=&(xEJ!LljrKc?awaZkcj@PztD%L&12gaA(kRSPEH`>u9qDMB`8dsW5S9e z1x5*3)VpIiqzq~zIpx`L?&nPo6sSQ|0)LTP)i4CcB%hLPU{z zdf1rjY5Z+~uk%ThA;*$6tIijJr&60|vLl=~Dlq;6Ha#22*lF#&uUnF5ER|MkC}oE7 zvq{rX(Mn3?gTdGyd7M5QH42^8rT^Qg)MvZYXeQrb5-F@WVtdO=3@e8U6@m&GR7m7I z6d-{9+GQe65~BoYUie@tJeMotR|CCH{op4OT$o~;;t9Db4_Dy1{K4$9CMW?SVKwnu z5_6e!RSE4^L!^}4Cp-UYPcA}*m z#I*&;xEwzPl_enpeF@%3(b@s%LGa1Z)n!x-gO}Gt10c8WaN(;8w1IUv#NCxaL^%+J zOn936Y)6}Q81Skd3dV-aumnab^j2BAEM+RrOxH~TWOZMA_ovGuP9mtQq+{nE$&?IK z#J`;a#D$^~pO))4FXgJNtAQsu zLwiR4BKkT|B--!f8=ckoJ>$?*^v{x%!xAD1gcy7gNPMAZt<*zg!QuEKM~VwBP=0rp z`29V)opshLayEJ^QLA@^Ux9h^nbprqw}YN9;sshZqpSfF#Mzx=!(0{uk#-l*hd#7d z&u~=zvwX<|=9$Yw?5_?^ACy2{B~JRoR7{NVtQJ>(IvE~xsWPhv8x= zK<*V~ZtY7CD8Bn+tPXY{8OpM^-b`qP)&98YXzIX9KaVJXus(M(i2h_}J^>X&!H3A7 zKm39-;$nJK4}4FGUv7nv^|h6#?N;AVZ*LW<)l^i}4V|p9-(XSGGBia*_PrDQ4{oAD zkugp4=Yr=zK$DT#ij0U9)pc@zow{zv+^b^YwMCHO6J*rHQv26xtfJ_bx>kD+S#3sx z{If+u{QRuRhDro|6as(bJhgke<%g15b8qM1SbVrK(BGMUe5Cx%=IyIMeQ( zVEuZ0c5=W*0Zh^%PhJQpR7hc+DSE_hGNw7<#Un`)BT=fjmxKsX%t-!f!&gjBxJF;7 z#eo0Ki|dj)=3vBEJdWVDR9tdmG^-azMMY)2WyGNLai4*(pe5PKiIqZ}r7$l}(XFV# z%-G6|dIBikV@;?kkoOiV*Qp?{3nO6M8Y|7Y-(-CB;Qcl4@}0lu@y!&?&hy)A##Ed4 z4)uU#ds*QP6~kCyLCD`n2;?iy?Jv_^!`6N_p73%m4m2m6o5;w#N4cGwVH&JL=9q9X z5jbwC!uovVWYgg~T;eN{yD=I{BoZAk5{C(2j0mcC_qo`xl6yY~4OU#bF&cWo646kD zIMH)kB~m7v$?_l4#^5P6fRW^9tO_lu{Ff0XPS&V)e-Lpq{*A^(tWxXkaMuMJ>@qt$ zQCXMoQ&L#`ZX!;TbD9boib2aEjt!VBIx1qv!_^k_bGz%mq{B2|6(n8q5P?X<-)G?Q ziE=DGjAuS%)fxWP*T6a{BRYF3vPm(9m+Encll}aLeE(^F$@guqqvG{*_HJ#{>(ZxL zbfMzWN|N5Ob_oe(0h;tp$d?Ejx_2*C;0jifGCxhvrVj#hqmyo2EmduO(xj zUn$H|$6RZY<0XSSt!^Y-?OZm$+cJWCZlgq%+MhxFhUvU;sK#ndRh_`&gPEeRUCwyw za!(d`m4K|=hvfFS%9h6p_rE4jwbrGW(*S^hZFmE@iK6myIjB2uqB(@AWi%_TjH?IU zkwgk|2kl7BEiCz!c4RHY&5;^-HndcAMeT%0CzCKu{jj1l5NaSAy-YMrfUAL&L~%!P z5MQU8QvA`j%q$eXCTkjt)SAaTo=$6v(3l^D*(aPZY&f9fR<}wrXV2mh@Jrk7VA(b} zOTYs|UBa?BRs1^Df5Bw5SnW0j@q;SU$uEV#g5;q{M+$}|?c6JPGnld5Qj#_*mWits z$j6qtzCcVjH?evb)x?nP!sFIpsSRsd%vSZYoSd6|s%*BeqdTNW zjG?T!hcNw^j77V)BjTip5cM6E7MKG1Fl2Fu{?s6s=W;ZcFC6-X+raAy=Os#Ow;fdY z*sM3jKdkfWC>xWe))tcgnKpj(jvj>sK`YM0CeX=q95e$tyxc$C@=Y@^!_MhRo}h4tr_aSLn!qke>kR7bUl|Xkp`>{38?iW2IVCc0mb~>>c`N==ki(;~fmf%DjymdVy@t68&O zaWKpR-fw9ARbms7(^Kur8e3}PM~hp38@IfojQbAM0QLy0GpKtWFUxC-FMoM6CL~LOzWV^kzDC zYD=hTjNK%M#UOF!W{&6kc9f2`UEK_BIBg}$h%~G^9LWw>KJ2ke#;_$I&R zatR-X?`Gj4IvsWUjfDDsB4p4w)(@LE+HFn0ZRdWHUH0A+?x$a8RM+oV2!IZeyuZ683OsXuZhg)0i8%plY=d1qfkapafei`7N8kI;>otNmFnuxndzWC1Ul4+#j)j5+A%qZ>;MPXW4)l=7weXb! zKZgIVHG!#CA{Wk(boBto6in8A0L>{L%qK7zUqKqsxB(3 z97<4`A$Aj_{ko1Lu z9I7~3Q7=iv(F}u3RMY(c@B~snQUULe!+KN7BqynJ;hu~E|M#v8q>oons3G9qB&Ze%5)-{_xYTu%IF0r9ebX z90D5v7|PU{ykEgHdz_I?BI7(hBN)AeMUDrb3~Am6_}q;;%egoGApg`Y8xG*B_pc7E zDOly49%l&x1E%SRr;L!1&M(x*f9-tK<+p&z|D<5Z!O8c$XGhp_CW)S|w4k4)plgtj zcO!@-b^3eY=6K(7uYt*MH5Qvw=w}AUab3k_kI8|zK711B?%4@hhoO>?ySHB~j$gu1 zA0j*bE3MQM%N2|*md1*%u&cnrJ=&f-VEKQ~Ft>9Tn*uqYUSU)J876XujL5uR;SWvC zX_7Wm;e1s*`}DphCy>bx&+jVds~);@JofSm&4)bRbiTrS-?Qi+49JME2+nclBq76r zE9Q)&CH>|qK2%wkKfi4tSB-B+FKZQR#EwMEYtLKUm>*{Ci(sW%s8}%0O-@<$U$ct* zC2q1-tgB)Y)4Z)Tuap{*RVu2Ubjs>COvJ@NT*lf6pt(3>#a3bEqf!~iadN>-Xc1{* zr~DkAl%2~P|EZw(Osmw=#6@VELVD}CBzoS2WINrQDV6$Ao??A0WtNPuL<7~R7P1qm zMVRU@kAZ=q<@%@p7oB0xeXhQ7pQ)zZX)Oee-Dgtn0Y@OKIvYfy>Rt>O^y}Mt8ji|q z5gof_rlbi%*wlATXw3q#CT`?r!_^^0yYJ2F)gu2}?!Nx&m{ttxq{kcb0p+JIJtFA|$VTD>nmrb?QruTs zXh*1hlIo&x*;8(fRu9-}ws9Tr8^f5#85A_JmkRy;NvNto*Y}%O4*!v4Ag85?uEd|y zMt!-KWE<+wOPz4(3>CyI-A2{=hkRXiiqCRa(7nN9n6|K%I8Vmddj~J$B+0=x_iiFff7MlDLkh@}^c#%iw@79-H3>%}Ufg~CV@=t(ub0u9-%TP_6A-^5lsL|Mk;z=17}jD}3wd)=N| zL|?+T+GQxF%4n?im4m%mCWimIQtnMSO87g|EOq3Rw3$nD!QV26F3kMgQ-Axuk)S$( z`AOaY7X51gli@$9^|WirM{i#B!INBhv7*uk-i#QL9y-&K`0;ZcdQA5;`^${1VX;%h zpuS_Y$IU{RD&#}`oXQfjy+{3!CN)ATfcsGR_N790^zJevFK9ZEsOh}k~W+&KQH^nU$$*lj~z@Z_dJxQ(;#wRvM-hRxKD zXpM#MqR54!%WWb`N{bSbQbT5{+c{f0l(yxf@$A3AG_f>n*=2=aD)X(>q;S|BM|pl4 z3ky@F>@VdKP-nHCZ0RTS_QC=0#DvnOF>EBMib}`a$tW|OhM@K&n2H&2&5aTkf2CU$$G7jtFPU{v-UQX!6)_TbNwNjAxh)Z^L;dTc_EH zrLw~Dnui=K(*-6S1_kN~8cdj2k}E!$SZb|dkPIM+}UL8Qcg zE0h6ArNGKjqM%9i<{4Dz02qzETW;AK;kMBfFt&q+)^xkM)gHt1Y2T}vEp zrJS$0b}W@~5}Ie#+Hk0PtW;AWKq{ittQ{{YD_1_4lOX9U$1I(=D>K7YT)Vfv@BN*M zWSQJlxyl6gukw9)kFqVYW9|CKsSs<$I`XOduT=Gr0N|AO!{!_QrqAnrmHwiPXh(Q@ zIMsm;bB>|uA??kCM)grtDFwwf_D=b<mQa;I~dwGdxTq`}OY~xa|)W*;UliW+iS(!v?^nKyrjFU))zWyW)1v`0;o>j18iO ziWR3*Jh%GF!i2sltlJ(m_KS7Vx3gXElf}<*REBKin=_2~v!rI5ofGR?!^0AYDcHs- z`Vgw0za>N~LN!Bk_bPtb)W{indWH`i+_S1-%+()~KUC8jT3Y#siwcZ15kC<0L=Sp# zC?*)1DLq@Yl+5?sQ`hh`MKTiw+}_$LMNC-OP*aqF^plz?D&>ry4KLnJyO(X+!*l4n zp`U6+*xw^=Lya!B8Dd)FR<3%UH&@k;8}`(~wpRPQXuHkVo1tr)GR4^Fz9_Wo6`Nm!}+2_k$?`vN}38VDmj7<+i_e^19Wedc@`? z4Vh>y>kkK1))rRtX#-asPbnpv9Ui<9VS5lZt`Z zfE-dJHpO0F3P{AQnTG}yI+3R&B&VP?T4t-WXB3Z~x7vTEtbE~7?cfzL;-$KqES-3B zSkp>&7>63O`cKk7Goq4rAWIVOqIWHy@3|Y9sFj}uJe%Bb?EENK9;TkSGPRC?#m@glcHkwj>PAes(n~QTp>sF5LPr8cfa9T;}{Rf4vjh-*UfuqI-P z2nlvFUDA4~`}G<{T1@5kf%Ze3sdT>ST@$&hLNZix1(Lh{(u z6u`8ybxtd1dSQrhkVUQ`lA3Z#?w2PUQz7tNouG(`W#XtQGNYv#?a)kNxg#9(l=?`( zEkslrAHF!8mNvM_+80k@-6655)VKN0TK0PiM_sH!c}9p9l&z;6e{pf~p1HYEBSl=C zwiNZEbFO!cffSi`%TH1|uAHzpmhoUI7Q8T=a41Q3%#^z83ObEY`P;-$f?boxG&Gwy z*PjP-CDdXwytDpfxw5}G;<9mSr-LoNN`we>{=4Fi&cpxB&&%5rvlqb%qBi4u$p?RN zPxr^Z9Lw)OXIX3|3f%9hPa*@eJa0r}_+LTfKlb1xn}6+*f~Q}%jZf4Rlyhdr{qC>& zEu%M#K^<9LRBD!xktC+2%2v4m-}Q9m)^?cgyNv(z&F|&aZGKrv*wB)F^V&B?x?TSB z2s>nuDhZ9;h@CPqF09~QB$^s#2P2MuwP?9cG-1RC|E7qYz650$>~z)k(XD zo@~^pAt5E-XT`ds57@0I@Q%6MbW1YF=Z|h~iRpS`O!T2>yX@TB%MX=X5I7)fWDL66 z;q312j+&*j#64s62!@lp?-?kJ{Q!>Ya}S!#iI@pdTUw?A0o?$vV@W-3pMdsuQ4HRb z0{z$#)it75jMt|LiVu$5mt~f=D0TJ(g_cRPfz?IFuW)j7w@n9F$dzA-mK=;cT%%1} zVhMMqQdzN4Pv5Q=+$Q#OTP)|W`o+F!lS(X|8*ifLk@93#=%8K$A~i}TcOe&BFSWHu4Po6~-K_{ry6K+`=*@*r?VuRQ&poepV!!qoxdf=>ie%o82h@ z?d6(qU)lA(4E?gHa*~h~nyhRVq!Id%#MYWiDvSM47WcS#(lpb>&x!=){g@-+ecq9d z;sFRPoiEk=nPlVnEg@NFtoYDR9J?%M`dWRK3ok}1^fIM~$e%lgp&FnTh*f1q>q=r6 zy9aHFX|Xc&#y?t?hw)cbuX#GPA{v>1zc(~+`SfW{{3FNBcH(d-e6j6qLQjYJV?8g- zPT_X?Ekxm+-sd0_`ylx8o#N|96C6f9^7m&==7~~lw6sT86`>K0Kc^8pC>7nb5jjzu zCAK3I1CsgUzhdJ$o~~Q@M+L4MWoX*;|uNxk++96!HDu0Ed{VMNTGr z#a>Iz0)N1Jm*wXF9gU8j80uy63bCfy7n~w3E$m9l^Hbh{P%J^Wq!=p=cCXwII^EH{ zjj{2l=0_Pac|M1p%T@Z5{npEWPtMKPQRNL4@q3Q-VsZr{6ImUD$K>w1`^JDtY%Bxq zPT9^buFNOw3EEo1(%O|vszL=xJUpBt`j50!!>Ua`FAP?ic_?FVnR%JV_o_l0N@SaC zxyGt_mg5pEeo55N8x2}9S<@*Xqtao3N=J6zF_1Obo(gi~oRm{eU=;98uNoktDoev5 zJj{Ds@CNNRrtK!wYs*GGxGnH7ixJuo(=`LD0zn35zIQOhK*vW8=H#6yuUpb^72j9s zElylS@5ANt&sxm=&=JBhb)l=ew8*1e>+5?0c{nqwsHmW%r!Od|0%k>#(k&Ez-y|3EzMiq@9Azd2kJiRgR)9zF6(_j)?CriC+y0i&Ab(U3 zL9S#A5b@$w3leQC3lmE;iBCYtfi4L(bAVmE|9y@{E2)yArmU?jqh?8j-i%&UR2&zl z^uth%IZ;@gYw?#fN_x=<1Jk-s$Z)v_g!l`W*EVan@gG{SUm(MIc#6%2s<@Wftf&9B z%f3$bR4DlZCWI8FVG|kDQa3D6?IoOk9hk9X$uB8t4QU7ExxA8xSB%1-P9{t23+oEO zorl=ISAP|CN}Soxwq{>cqnA=j94?MuJr4FLH;XmJFl4JX+rkglrC<^Y;N(2YZT<|U z+|wl;7Bg*mWti)E2Y+l!b{(KuWvVF}xZT{z;~&0Vp)EE_lcFantJ~}jG>RYN;27B3 z$Suau%fT};@1ua=Ei#LHN8a7X#A&vMw2U|=$nuATLSW~*8qLy{bazK*49I}sLps4m zPR+_Nb^avD;~pdKo2@T=6PTU>)wVcBg`2;pCpmHG0#RBXo$?G&yJZCOGi9 zqWQRTV|0I)O`rqP^%pu2Kh_K zOBoMT7WDL`jJyHq;IcMr3X^AZn&fy=L9f&d5{+{@cd;{8!243`1XlDT z(j7xbE0sO{AzD~}D1HF3wx<~O{{KhRSFpvgE$!|Qg1fsr4DOmhaCZg`?jGC%!QEkS zcXuZ^g9mpVhTy>+F6TbqKIb2FKfQWY)oZnHJ)vj>@wH@gjiOxDt}Ut4!Bgu)cxadb zrsvRp8#7yrwddv;52E83te5uhN8Tv>3QhexcrepuEOPpZkR~{-hz$OyFjiKhuPBDd;daeuu7h0(XBRdA8&S{oh-$!0|ULo_Pe=t zkKuCb$^cT85}FFJqQF(?1YZ!+kAjt4d7&yib8X`UUYSm++1@X>EqarI;iKjK<)2l? zD+!#wW)jN&0$N>OKCYV1r{^Swr43PEa@~fa2P5j?YZoh zBJ9a|v-C3EHFS+z>-wc#GLg^J)+&!yXDuPrGHILXfn5b^XmXj18UuSYZsjNliVx>& zW=AtE4D)M@QrV#6x(2rNTzuGD5XsPk0X2u{?-|vyW@f`&BJ-179_=SEQq)K6L3i^ zoMyiZY7%^zVq;k%xF;J`9IH3pE&s1f2)Tw{mH(wTQg?WWtilE`soi_wtcVYS|0%x= z010aK`!QQ(o^MipO?KC8{t~`HEAW*S7lTGB+Eliep&((|qC?(Hbs>LjPPDsOXQ#Se zi%nv+su)o~YjKW4oD}(nlzRE7@H*v)y4fjS;?-8go~PoNCaFb0bGBJhnxEuY8rW9m z!Xs5R{y&Ug8-NDueQ8m5qDC^{DknOE2nIo9&1Xi zOj_i2DHTpd+0RIYZp4jmqbJWr! z0W*SiM;%ec-A#$Emq(1?B3YPYT1zk&xi@-4-V z*$N6dQF*IXXfhh!bi}Lqlt2+?nzuiaVxP*4Q*zM3>p6UcwUjBa?f#N`ZHN z?o+d;%6W5y%fr9LdFFyRNIt&{H3Fo8Te9oUk}vN0%!H6dRacU%?@sDZf8KqpRRI_f z_OsxYYO7+@Xm+pjccWfGq|--^x(~kT(UPdX&V=K%U2>hX_i$P2;gxz~W#>KcHs~S1 zfo~ncpPkp08WoUUPLYz`n|A0Gj6p1D{f`XJne3kC?Ia*GU|UrUEsL5 zS1wh(KXR)hBlMX$dpy4jmr@f}Ym<30kE$_)PCGl|;m0EHfORna@b~%3RPBbc7+=+& zh`#b!VvjgUh^QK%P%r2;0^M(w-KiNzgq7r-ehAv2?#U$$+gT0coy2Eii+xr z>&cXE6ylSNetiv~-xJT%q>apDw$hb1=ll_o)lvEICk%b}k6;vAGpN)5056el%Gtq6 zcN8?*>0+Q@RxV+HKSyDESkJd=A+aF3;IKac44$otf!&BkznhyAiWVwE=xxx_Vckc8BR`XM+>hlz$zYo4Ci)_A1LXBBfK=Yh}_( zP}-aRk#Xdckheg>0(>_l`L&bws@^DxCq4FEf|ANr0#sF|49D_~L)IgN+bj8{F$ih5 zpo%{kD8ph69OlE&{68`>e{b@aIqV~MNi-H9Xsdh=-vm|{&DIx94{dY8;Jhp5=hI@s zk>R)RzC?~DWIhi5Z0Ef%-tP8RRGeGVZ^=>pntGnoPyTV4wOiw>mpE`r24-JIOJ|kv zcpOWjzvKvT$+^h#5VtmQUO>8i_rj*@ti}oogu|{+OnA@RGHlV#_bViP7`fOu*qLrV z4J^-IT01gWR-KcWHnQ#_3EjV-umAIrokPK?aq~M9Wz@tfEsr>$uPblbOcbwTDO%(*5%P1g@JUE(Y@arfB!phU5DEWNp zpE8hir&iQmbQ)i5HZP`xmRs#{+pV>Nq>vACo>~R&h+}^#Hh_8Rq#YQd9d_HK;$Sq`KYYZu0+{F3)2=HEFLkVr0LK(@hNu?;KH7wC1d&$iZ`JQq!ADm>Uv(qHlAB{pZv- zB>z)f%NJ!#h{`YNUs)rh36f+n$P$+A12!txibpE)M`{JZ z?qEd=tY~PinqWm2Jhbz4(Sx5?rn?>Fa1@40W68-MOxVt}cpUPT}w>TT$iyw{CZ(h=sYg9Vn; zy(Phn1$kKE5se243_l6Dp0TK(#pC4&PT368RCDQ_4i2sGEZL{kJfQyI6JDQhn)aCpf0 z)!Z&wUWi9vAxJ(+@g-p|(&gyC1VThx^yf-Nmk(WJd}Oup#&P($VnHI5WSNZ70D)|r z&JVdlEQ7qUStoW1;#FOu`yfgM6K~|!&E>ua@_^KUhZB+SfP3ycv)?iZxygs{)3e3E3%jr+zBZgixsdKL`B zDdL$m)b>6|H)cGTva$c+MdIMyL!Y=B6)}RGk&A{591mNt6?Heqe08KZdOKS3Iy<2d zrF^Z3Oy|R(v^}&oqmu%rBV#1HVkQVt+zh8d67k$Q1uDB#@BiLEi&Oj@-;_wzMp&im zNQXy^*<~!Sizw~#V&*eyj0-LnjU_oZ`;EVNQnuw1?n@^RQ{0TIfoFjP_WNkT){qf{ zSKvS|K_7cDNUeO)502t=XROlO_~PvpMDBn3o~PojkI+&uHtQJpgG64usN3`77x7Sr z4+q@Jn=gc~ua2VNjRTkypDiJ)X)aEoW|_OFxQk-tSCN3XrMJRDIZ2T-svt{KFjAB&1r3Pm|k=J}BLt*zwV?J)T z6Eg{QbF-yKp7~TLrXvdHj1Wu< z46jjhjGJvn`4ori*^p`UgBk;vmqV2M$3UXAkGY_!h$+od&E8D@i=CBi0Sy~=R6uGU zSW=jkJfgT#VA*6x&&WHzy)0qa&4(cd?eBbqKZ*tOkR~cliEjGejPjbwl8Uk*B+3|h z?4Js4Ec4Zdit?@>kF_*+$&YtIb03Q|t4!W=M2~DUmzQ;ZtsK0E)`!O}8oaaa+YYNl zwhR*rl)D*bt4Rv-KD2Y$(&<#06_?^vjq3a{5k<5FPE*WR$qYHgl2H7OjPaJ%3<+j? zPhT4z5C6Z)%gK8?``X?Y)mGj{A1P;KfypUp->xQSg?Ob0S)x!ILz1s`kC-dVs##0h zct73Ea{uJy;C0vp-&WqvsTe64Rv=CnL^+9ng0E?hpb?>Fl1^(v1s6tG_b1{0Y}@|Efq`5S4_U@md^d3k|MShtroFpH$tbJ1wg?uB~J6l z+}keww=7?|R|pQSh4CeTeMT&LU~h@6#u7(MEh96OcGvWKUD)qWY_con^LUn+Xl?1a zIV1bJgSbk04K+dcRzKps+0S!!#J3PAC4?pS_aQ~;pj-lTPdhjXUna&2IQ=Qf=V90e zHM=&v^<}Or#t9`%tYY6!(m;&MH9pRmX-Cs5K)|SGh{5wXKG`qahJ?fvWwpV+KPQP$ zNoqzO($4tX;`oT5An`|K*9tag!*6IhuaW{2@3~;Vd?%UEZ@x7k7~A z(Bzh;zet6}ijp_e=al{HqmvFY^Ryvz{0!N+!22CkIasg=_DRuZ{*q!$McbR$Of0xOqcN7? z_)H&nqhOt1&x3ER)(d1-)+{`VwPqhU>c%OM>=+Q2Tw`@_p>??~f5*7^*yxiVWH>V& zeDM{9M>fPf2}`$r4B2VXB1RX|J%? zLeeBK*HRjqzo%#yvmF?LD~qjb#}7gjhGvVq#>Z5wFF=wSxHPU854nGL+c~JjmreGW zo(|K6k&dp48$uw4hDQ950S>;&>#C0dDwq$;ZXeFExRS6Z1cNuhHyrw#(0!LCZH8L#VU=~@F(1Ha!a={C zpBsUa7sRp(BYqRF>X+&}M&5G76*U<;R4`SBnoQ?ai$^b>N;_mxZw1j?L*f=||EsI&rSyzJ3>(OQK7YNfOR?fFvp3{U2k4}Nuh@`^v$b@uQ+}{B zBZO&MIa6CSV(jfV8KH2XcF%S(13G4vGAHHqUe>^HJY(d0%^aiB0Kl!05<~U(6BWj> zmn>boGUnu+5TyNT^SM`~riLbF9xLRm{kslO=)a@_AEDgGYMofPN#c;LQm?eX@IQ$z zo)km-%=#=^ZA)Nk)#{BYD391LeyL+~LpJ^t7i z$Q$}um-ROpoy*-l5nTmpEw%RF>aMu25OJT+a$jke>}u)h3lrUrkDbu6EbS=su!~y} znEmt4A7^sw8KnC*5^ z`nQSS<3o@9Y#U26i-j$V76w9r4e4UQMrHe;onA~!j_D(q*>YyGQK3n*f(i>mMwL&? zO46Mh@HF4+GJU~_Bp(SL(;bJ#!YFONy(bwL`y4iE*E_o5rhdb)El7El?imn!o3r#X zU;S$AzFQn)F1YE-pjf}fGur)jA=~5frrN~`&q_G(MiqZ-GN|k08X?SFHlGsLA7xt0 zbZ0y2d@?APp_KEl#HSaPoyleI@<9g)whpN;LMo-R9<~aTyoQzyF=AzYVL?S*RWeZ^ z*oWim=z*n!L&iTA$xG(@yHgp-67F9R;m@9_Uyr6Y)RWK*y|DfLlk;II{Mp+^!;TLJ_4wUsE-$98Z1yH?5n?;Uba{L zS>thwD0k#6^K84LT5;JN?YRmQnBUCYGM09LyIT38t`b!*@5L(gzxt@eUNQ0q^WdMj z%{!P7c>lO}PFSo^z%5jo+&6eL;*+>BUy|h$A;`VHsckfCI?B}=vz4tVfx6cxL9&*7 z$rm48^n2{&`5XV+t>fFU8bC;+;FkP>!8d3WKZ37Br^Ns6KwqKAV7KuN(eP2fTme0J{WE& zIegq(>U26KpL^UQiWUm5Q=^BtP`%fRU(XR||938SS=ydgpK2zOWxQP{-Sy^+0nX1< z?U(;@eV)YI4WF4pmmT_L_@Si&L{B7zBFtZ9eV(}Tc}p1srpKh4BKu2|4z~QQsLObL zS>uW`V2(D5C1w}gRZdUFXnq@-I{tga1UDV-i?i7N+~XQULW=s(P8=`jOjS|1Pbb{jY(K&r#d>6EzZfRZG;mdG?20WgmW$tnxDq zHIXEQd#_?F(j_5jl(jW_`{%zND(L=ueB33XKNF+q*g4Y_7bRw7h<9xi==>&*|HIIq z&1kba9`?F)K4+NxV5?<1(l4yHhxN6EdzSkl)nJ?P&Wm@gVe)1=lv9EOG?_lxG5do5 zMI)wWDAeFlgoh^rHVIc==5d3$zEQa@KvCyy(f)PH!1Q)1^`-{oZTl32M3mjZM6rmVzx^!EwXbG0t6&F|KUCvO# z@>Q&Ss}24hJK7%q+#GMz9=o>rgm!zrJ{G#5sFV75NR-u=p$Ycc^n=go!6(eRHD*UF z<|=O(xPMX0O|C`An|)uayWi;cq=a-r<_$+rD_ICJ#3|uB%R<=D2IN3A+Hxi zCGi~yZN*L=))D!FfY{5Ex#_8DtSDo;aqGAKTI11RsV?M3SO-B+>+&X^G}od^#c|*G z4u9&!D>X6#OcuyXo~js4=LtL7Z`I!V_Y}V#P~nZ~QP1Fm*=o(8#cz-~BR?|rFI?5Q z7YfSl;M(d^w@Enn^G!)$V(!JE7iVUR>jG3NdhVrbo#)3IIZb_2c4e!_OwSdQje61_ ze&6`r8I%|5IkQDa=&jHe_zZxmb3jj+d6oFSSJuZC8$f*5P}&`xxAaq_Hv>A0@+^<` z+~T|FXh)yTzev)R5!~nVFy9*x15f4^nuCZBLREtT_!@ee17{nMbcrevg+>UoT;x_J z*PTW>R~qYcJm09!WSI17dO(#eHN_nrksXoZ3Y6$ye9&%qJ`upk-|t=Nyj#Vid=Nd@ zV;8%ZT=tsbmm6wgzMf+YaFHE0w8CS~KYyl&)H!eY6E#Ff$4p@+mUQ>HsTQ&rRxH(( z7YFa%`A0a4x?|b`u?Yn(mRZ0>G^?@zHu^q}VdUu?lhK`2mw6Kz>l{-$lCcvB`k8;r zW-D@&%I5fa2;?&j(eMHKwvH1f-V}DO-bBu^<6gxr6&{pozIJOWW6VyN`hcJ3Pf>{% zE{O3$E<2*z=Ht>SP~yuM(WTAr0Lh3?cIz6_a)um$h4!p~%eAigJ@fPGR@K~0aR&o< zzAbNTO<7~%MHAjCBSl4L##7r>hACNGto6Z;VG~Mcv`~5|Bhcq#Sj)TKCA(_jAme0z zKh5ZOQx1Kc@X+2gnYrg`hzM=w>LbyxVSAjZU(|OJeg%8o;4?1zwwVoygTpj0Xo%@` z93Va&C^cT8+n`>Ru6|{u*Bu!&4~w+Q+t^E+i9IbcH4rB%yVNFsoZE_={L%o<5I0!U z)zaKIPMy{ca>;`Cs4aNYBzpOsUbrf3##UWY9|T&Ci@9+p;6wJq$?F^Go9HEgU}JnPR%j zB?m++Rs&LHy}jlqPuN!&J8k;F*7eR zjo`wv9kXVcG$}ZTN#dI8`a8h(w;g^; zt^GpedE@O>y`?z~8*_pZ0?)Au;1-%DFP4K@2cPl-5hek|SQj5_eH?I6(JTmvK z3rqOT5&G20KesXjc}|2ju;HM{6Kmjq<-YS7OKaZh{xO#!>m$h%!U$)9_aZL1C911Y z2o86wPh)!+>oy(ufdoM z+AdALH}Q+)LyXfHIb|l%hXsN^oG5BVzFO`Rzg2>p`WL$PvX>AsHFaev)m^fo0urMY z(|f}JhbJ)TfT=qG%u}Yq_=O&_d4Ke2>(UjXMO`2?i9Qz+Lk~i(aey~gfSMJ$jsJd)pWIa@sEOD zlQQ$Xe}MqHm@?h!#A&-ei{^x6EjgQKm<>xIpl(A_s_{|<57T5xa` z`L!K##ZO|PHg}Riw{VWU&9z)^WmQ^O9!ruiaBT1^M@>#*gsf(zGc7feWP&Qd#+_2Y znG)`C%GKX4Vgf?b-1^u4XLuFf31dpvLG5cG`euF1SL5H>1x3a{62&b4Uc@I+*~e($H5-7+|}g^BaToragm*YU{U7qok@KtqM?1W?T?T0-GILS=U&C(I=^{V7F8iIm zrAwXQ#XYlKqm?Izg&nOzq{Bn2aqthg_`E~8{HS3S4y%rqM?-lk%PJTKcs)XWdfreP z^AU{iu;yGv<+PgTG!kP?ZQ_xsMOg0VfNPsUBEmxv_;DQU9Fxz_RPty4luM?}r(lQSN83LBlb&%k(QpJ9dRGN9yZnUKj^_9; zAkShMSTEVlLYIG{(*JP zMG1?W#P6eM0G90a*hA4BII|qzqzfB_*a7!zE%!HNzVGK)dwY2F?JDBqV z0XsENqo zZ-6&#XyD=klQnIjyEw?T3ZhOYpjP5;k8+fyl=W{X-0SfCko)E}5iG$F0d?MSxva`V zFrNtCySyeaZW$TEEG2b675piSS(a|la9aU#($Sz4w>uq_H|(4Y)yz)fHa{{}3Ul$V|af~a8vN>LQp?J z3bn#lJhl2C8+1U8(Osz_1xz(tHDt^OlJ|wHzl50Ll{7AyPOtWx9#9#YLbYYDkMlSz zfOv=k+RDrt$pdA#^OQ0=NB$zO^sD01n)5STx9(BTOuJ?7&(S4i?iGsTX?%RCB{eVS zcYXWj28JV>f%ItJQ^zrKcs zn0d{`)$=lAQrr)WOrtXoMkwPzm34HQi0vQGabpBzMl{b0FTbzCl+R>*Uw)#y%2Bn< zds2y)NPGeQQ*M>`&J6;U*jezA5bM)T5*Um^G6;?c`#9$n6`*OW`Q;PAW-zjZ;~DnF zlUj!s`__`sV3CmIDw0_jE?EWTckzhS&&wRF1>v%A*bF%Rgp)Vb_@O8s(LjDZJBc$# z>UqbwJ}hM|2horRuOeFA+GV`L6*(7OIsxDz%`lr-MB?olRw8%`Ovx;Qcx($@V}s-2 zvcD*YK=+f9Kyq0(OMGcKUdUk*oF1kn)<|^LM!s1FtA8usUgnO}H$&&s_5q=ZLsp3` ztM;6s%z&64@3-Fym#|0vRJoeEEQ!^R#+bXLNZUqA>c34E9Dlf{di4q7H;rlw$Yz<s@X>v7 zQoNE3>mqF(J5wZt))-})>)E-$&xrv7Bei%oz0yiwFsOTg9=~>d_8K_kb z))ai;Ux{-e%8dSyl9Y5kaED^1RrMI{iCbOWANtlk43CpqbEr6a><`_*H(o#6cLe1^ zYfp_v{3m1JB59aFTQOcIk40zINob0JtKynei@hB+HJFMIv>c~!@;mKAGo#AJKMQ+P zGBgUhvRtj}PVwtz=4)M-d$m*5RaYq`6jBZvgu0A!<7M1akLb&pXgqjnwl@AqoHUU* zBlKpo%RLFzF0Rwla=&N>b;_7k17xUwNi|NOG*UIlU9e~jvd}Es;JFYFlA{bp&hp~2 zF43~Vf!M}KBw|EV-3Y=FRJC@?O3CC{3-wJCGxHd6Od6hGw_Z2>guPr~)8NZDn9K~q zTN70;!7Kx%O$veLrwh1w&~@8Y=JRG?+3dV;O2fSGA{6RkXwK{pUb>(DHD(%MPsSEN z51DlNebkxP13zwV>!mH@UzMZN&E#0sgFBg}RZ}$bc&PcHJ!`r}uK3Is&#{OXlH#J- zlX7cqIbTUv>&;fA52kxyO_Kmu&9eC!X|B2uGS!aZRa&+KE|tbR^>gKx9wC=5v;i{1 z%Lp#*ob7*y#C=wrVK-~M!T*-ENqf8V;Os@B4?{un1Z zq22Q!5__j)OPr?pJA;I(mM*bE=oT6|GlfycIy!^P}<|kmOX%6&w&jz zk*sJbckdF^I*Pe{a%U8|t?=Gfd+Q-fbWoNnwBJ)&tYu2tTGv4zf(^LINa2X^Q{Hbn zx|4T3j>!j8V%fg1^zK!BwN(?WK5nh+X^w=|vkN3j(oCWCDt5R5lFEtRkZNpM7Vj@T zs_q-5N)W%vFTI+m+(jfpQLDyKUGppP!=|NYXo4Sqy~lkt2NiiDTQsM~!pYR=jNJGv zCM1xAP1fADjrvLAt)*0Y)HOF}1$%ZvIW|(`Sms|G7tQ#<=L_2rrHA>6KlRq?Djrk!=l)|`&BcF*pyRX_}~RRlvs7NNxfGvVnN5{+n}8F^_d$z!UGn?w^zXS#Q(; zrzN*}P3@VP)xN0(^XMBl%!$>Br?Zo9&nK!RgwuwAAxdwL#n$oitGrNC8f z!$AO%!sCda?aCx}+#G4ySQF^-5o<=&A~9@S|FaZNbTDKNHoIB0P@DJwg{Ib(;Hqh= z23k6#_tg_lzIOEVu<8&jkn>k~bbm9kM&?7|%MFMn4F zD;_x+OA`h>dg3zC9E{&4ml~Tzb3r*ucrq3nn*&`>1|Ibu<4lRZN){V%M8W)|{NLk0 zYLi<`XAl+CFhYf$?F2oMJ=VRL;oa@1);LH0{^3t;;zZkcc`Y}%JbEE zxZ=JF0OQTLo%fpcB0Lm0jyQgMZ!5h*L|R?HEzvb7G+v`9Y%8-uD%Q59;m_J)V~5pX zVlgeus*tsN3M7o!sXRrGXG}~E?rd$x2c>n%-)pG24;B&T{ z@$t!O6osAY#ZH#FprkmZB#|byL^vJm^s6u4B3V~Ti$0$z@|TLmbBn@J5fM?znT)SM zAmVMf{G%m|<7clKj`(;3Ia67*U_vY&1yQE`fO{<45~XK-j)3xgFq@9N*SKcE@7k{(yirRQc*Bcyvdt zIV4=H&3^v=9Y_02cQarqhNSDp-JP4K{$TMKm_(W{EwihpGWoE71d*9wG(Sf@hh&i2 zmOEORxVfS_WAep*Bf-^dZmM4U)nkkHJK5UA&JL$mAVh?(J5I>4JE78pcaNOhT%iYj zEN|zsy-W^${I1F6=ELTl^!eVAh)@}rcklX>^_na3(%GhrsRS1(;D&}sI9k!CT)#7O zZOa*-Z?h?P_&YN8%YaH#XlCuk)T77}m|%18k@Mq*h##ySQ2(u`cYBH$-PuWx)Kx?z z8Zc&a8`(>${h3>VyFNMFN6$IO3xth7;`}5IS#)=D@*(|6Z?vmmiN4V-!M`Dj6-gAb zYY34y>JBR$nP%tTTjUM5#KYM;dPdypcw=O}j3kn!Tc zdEEv+d3h~M8V99K2Rvf?9_*N|?zK!5;PEz>zRO>zC+L$K-RyDaHZ}&As`FWmW7(ds z#9ZH8=|SJiM(&2qe}8}O$hX754yj^MLYWm4l#p=<)b8+O5Gm)O4D3&oQ>&(=8xEy) z}@ujHmNa`Hg%NpK=Hayi?-q;>kVSk&KsMkwt|xHH!xY@CmcOe^Z#sFKNQKJNZX~ znoB3Ca;3o$|M%Y3&fJzaPVYo{D2kYfh-vMGZS{92N>dog=4MEyNZSA+#H=(4l=g9x z5J2L4@O#AbaUKDPyFeq=P0%=Q&02qT?QsUJyn9Y}m2eFXzV7XbOV(m#Ee==oY5n#m zApGsVA3XxEx{zsOqzt3K&NiB!yd#cGnUhB|F5cG-K<_>zR}s(jiv;c(D`m$#UU7t7*cM$S6y~Czbk`i$Fs>JIN|rCX4(# zs-4K{^*Y`p`kn{J=K~LNh{9G=baq1Oi$@);Uu5m`Q}5+Z`dGwzRCWD1C08$)>GeB6 zYz!4!aWuYMnM&;;9;C zO$B58DPQ>%q$<>GKgsDa42po(`zc~>h|hGGD`+(xA;}5Z%8#3#rf%5jZhUt3Zy8Ns zfgKOw`c`Uf4}VxAO6GeHo7yF=R^@)Q*knxP8`0T&34jwXuCfOYn~#}k)&rrN4DDWr z-*ZXnY1bHv&Zu0^2*BDZ0UuezSmZi&uB8t}9)CpN`DG>Wu5m?L*|1ukt(&gj`LeZ# zc(s+LG2kWY*&gl5=f06xiqP5_>HU(q`zOlqCesV3S43WLt8u&Gjhv9yJ1*vTB@yyY49pfY5@0^GN47N8)89yB98E+*MmNs6qnU&z0Aaq^!Sx}rM_|L7x}CY;lhed1g?w?kKs%i z@Uva@%Q9FMHyI<7k`@=yo2&k=kIAlXSIF%QXKsx3TjN#JrHjgpWWgH_b{dDtH(S7a zzi3tU^=bAnP5d1a!ogC&J)#GZ_Q2a+cFR~2b2HYco6aSbWRR@Cp2Okgg5#H4cdjY~Gu-?auaoGZX89O!VS*Jvll-+?bYeF(H ztn4&Jl%-v%D3!T=fnTyjAM%rlV=42)D;+vwj?vE2GW}U|b{a`UHo|y1gBCP_Spr^J zpW@i*C>0pn-I^AMoga$}C-jhk8!Cf?hkGb2a13^<{ix!?E{Vo=zF5-@ys{&;_!V&j zU+4`=V_l7{wC<}KNPDo72_<10X=A(kk<{!zJi3r+!ls{p(E`xE6Nl&zq`B`$n4prg13=Sr>paZp$CCsWO@)=;ClUv6Z8p#oS{I_mZZm z9#Q_WFTRrTOj=2zH);lW0#HQ3oZS#9=)#rA<4AUeZ3>G$zU*_Vc(TD7ZR;qxCBr??Ynp6c*h3PGE_TKEC_*zmawh7$Tf*;qA%u~?005j-!0+r zgqi8|l#N-5b_9pV#*68b6=MpNHHAf5Ra9WV&{88z6C9Niys{i?Hbc%5~{*YPO0T8fX4gXKEJMDT;bbFZ|MvG>^2_MxgAiV z+1tZxk^CGmz0MIBYnL63$lZILe)lsY_jv@{Y4EmU9Gty-du8SPKLJB&A0MTIzrQWP zdVBXpSc0Pfm5B`s*u(sk2T(>sQSa2^Uk#v1&iSW2pTHW|Qp_49r%Udwr!fx!DnDZd zFrC+zQziUtqEn#B=i?A!@<*}Z%qpjIw zhhkIfd{Qo!`JV|!DSUI$o)W;NG+v&3gXf=RcT{ah>mi~C>?|*# zF$Ir;E@q-PIp^lS>t9UjlkIaYm>5in&v!=}ei7$nnSHOzd|iPRG-GYy)2eqLa9_=^ z0V|@+yj(IXc$$4+K$dM@`T~m9f8f&xg%E(59rLM#z6L1cH=>E{#H*fh0Oo1p{w_=h z5RSTCijn{pPo|J0xD%>FYmFM`{1ErsN7bC>fai5Cvdn^)D6a8$rDu}ad0WhOjNC)!>gyl;eo+?V$u zfJR}|q~C(exD_EV0ceJ&X7A(!A|Tlx*=o;xd%7dvV|)Em_jCI*m*@c_(y!Yu&$(<{(?wzyoexB16oTSvi7rU>#2d?MSEKdP^{aAL)y(FX z6V$#pdSa0I?dV&pbuNKl5=KvaqPG#st|lBYem*UUNvRZ;n`N~{NT55)%#^Gk9GJ!r zm*Y#n^)VoQj{bo@WJ1Hy(wL0kGCSFYD9T^!^Whj10whV)!nf7a7kmM4al*WI7F(K~ zJXeWBD~L*>FVwF$Z%?q~FWcl72jp)smL!HOc>B5QKWG^IsT3% z`Mw&x1}gg<5OUfsHuMyW_ax2s&Yr&qfkBeL&nBL55{;p4P$9?o?iOc@#$C5!XiWMq z<4L<~v09vVo-PI9KH!z|z&vNO`Gv;$K?Z!U$=_n=r?2NcE9jb#@%mut#NI;aEnd&?0)r8)@j!r zy#LgOtQOfcuhdt5R+z0F)9!*|8%|mGj4V9kKhR5sfiNx)5%px{n#Rrz(jgOeyOM@+ zde+7%qAuM7l+H9y&T7)9BFTlKQBznwZRQ*&+*Owl)x z@?~ql1N}4j?U7qr8eg(zNvxhLe8RXR_gVDqzCP}6J9&1I@w?k*5gJidLCWE?lXt{S zD3L4lV~8wHvponuC_4p{?QrZk5rInVNEJj*ppWwXhMk88P~;Zqs{9tO{5mdnRgWI< zL+rjX;Gl|{fm07W3dk>Mi8j+*PRV2mAM;pd^UI_#wSCvQGa+B+MdzzN3U5~6@y)s) zUd4a^;pm>8mgAdFF7g-Su4hKs!5p!iF8xRVY>NJtPA+x<^ReL%acD+{ULhNd;;a3@Lsxf~y!JR9${xPxr_i{OPLOMA53=7z|yohtNyCr@$LCm*;o4q+dpAWsEoe zRd92DR#1>ISno;6J{Ho^%pUKbXCH|D2as87Iu}YuWJ|=@!s2|X!FPC**>=17(zKX{ zMGq-|vZJS-LwksLIV8@CH3B5JFo;%%cD_CIl?zgmKuVyv z6}&e*5NSkRRZS|@IAKQ>e(~AFWw-k}OY9?}q=tizvY#6+fR>k1xKUx+rzs@8!#U2vpnw^^UCNC$F7L`1no$4b+j$dS-)w0IG$ zKvJs@BSAq&7uTm;$ZS>7R+rRMh51mMbm3LI9?s?%QvoQm<`i1w;qrr$JXtMnfNUZN@7Z6! zEXc8>Ro3M+lt+m!(~V|hShK!7ovl@c`E=-S5DI!_BeTstdXC=rNH;S$J-!(gph6JiXcyOK>v6i84jZ=PwG4)7WqJrG zP2j-n3-pWg6CF_!z9(cS&FsUKZc^B|G5g9WYjp_&2Su>+kD+hrZB4>Vkyn2wIPRQ))fI$7%nY?^ zy@_Lp%*b%&>fMAYE2HYA{O$qPIQw*U>>Q&S{4v90zNu1dGa|bs6$Y#8GkIP)qfMTK z8Ty|k_53FFaa^og4(k3B*VF1o>Za)hdoaT9Q<6k@SUMO@rRBIj))9)di$W$93YBHE zEizs6ZaF=nU=tiip6=<-;>le|vDWXJ8G24c-#489kwoi3V(W2M(9w{%2!)#k<~jNr z%2+cAIXwJx-fPQ~^ezKGx*ofGx#^|91OmAGFZHOt3UPC=-eHAdJW=G((toOSuX8&U zTy%7#H7JgJSnS^s_d+>I*Tb}v_x@3-K^VD4`XkIMh;Y@-yEPSGbnyyZc5M=2l&?? znhy{8wM+n-K0IRw6Fj3|L+f4g$V=JrniLQwBZMg|zmG4M1Eh4+y}^T)V=NMjB zxUKCbjcwaDRvI<7wc^IsN|VNEY_Hh1?Iw-g*tTta+2?%wT-W?Hf4x&Ti(3x^IDWOq$)B~QI4g((}r_D zz$YOx>)E5UZirXYlk^+1OLCo5i2AGuh48UQT-QM|iO|-g#OT!*2+nJ!osAml+*emD z+r^z&&<@~b8~kB4Ny&X>IiT6mcieRKbVP`Aa_{W3z){l#%XRSecEq+Ck=wk-`bGAF zWN)TJA2Z}5quJ`|3YeJF{d@H=m^U-hjg4Jpa4eQ~O^b{;gMcYS7Qn6*7+nPDeu)C= zW%j_eNE8GaJ;!ofLv-6P>n8WBZbNa=tH`H_1F=J#9?t$z*49J zZryg8kkQ4dEq|U)n466kLg3)%rs<~TtOLkw{qbB^3Oe|-zn)?@^{{rYf(r<1DZs)Q zGs-}rg-DH|!7twJa}yP6zKw_slBX}!;KAEA-6Gpb%ffq6AW9>{OO{PyBGdE1mrI9G z`XdeM@M}%gw%Zs|(qJ^PuceLGQWtL<;pLvFV3hA@7{74c4qKE~3j2Ej+WHAA&B|2B z#*f@i&+ta&{KHGp)Jwlrmd6=VLgUjywuU@GbVZ#nxAji#ZrF>7iGuMTllQl(Ge$Pr zLN#@;Qr+?f8`oF?lR)IvwZ2@_2&Ab9PUNw>Jd$;QvHhpi3;%j8*)TF_IM)o)j)I#q zq=71hFufN$b|aGU-dVlt!F>5)t@pTq-sigSCX(f`;X>KVoTQK%nhLI#^z_I?XJ6CW zp1n|lk0WM^2gUG^G4YczTNv+>g5yiieE zzLt|6mT9a9aQAI4c1W{~T3KoCbZu-sU(*Y{%)zGK1iL_1{-@hQ$N+BMs{VM+|M#i9 zN>5G2KZD855tLLjC%pE|v&TDTF9m5AJRNFG67A7SFSVDxrrA&rw_u#>I{RX&G&{*~ zmQO7*C_p1AFEBC(f~rlY1t|Mgnfphk{EH8Te>hO6{|Jg*Jv5GqtVY5o#;3*hR<>(X zVfi~t`6Gcq_^CKpZicQrxO%BCIDEo;2+XmS1P#5sA zl)Zf$a?s+nFy*GXU(}cv%3EGv%5%mL8=69G)7Hv}(&Q-&Px&8@A6%$EPFC{vG_F69 z2j0aX#-#$dN(T+0M4T6U#%8PJW~Hzf>(I9pPp%_MjiMxq*mpRqr@4!u2D!Uzs`55t zZ}bykYUhfs6eOKCaDs;3-(zN7?F5V6e;4b2!{S=yZZ4y8#=p{wJI~OPtUkj?#$ujs-c&yd`DndMhAT{UQ+F7a=v?UC4fs(T z`HGL#-m0Hf&E^KEXa);;%Gv+zCT@^uPZczr?mVC@T=pJxk07ckRxY5vn3>*L$= zT(wVPYb)OwtW-$!!gqUtG!)tW;A;^=N^os@9Yr%^m-U=^eJI*uPR7FN{$7W~TG?Lx zey3>B{N9XQ`^RuON2+>mcYp}F9LPjn9I{^FADMz&x&3muIK3K1fC@)>x;Id|c~uV^ zUd^X05h`3&YInbCM4f7L-2WI=R}{x=ueD`>h2vXw`(KZ8a!&B+2+#bi1*gk9m4zqm zW%*OPm%*Se;@z4SA&oQU-^eKWZS>v`a|#TeSPdPCB%>^Yy8;d7{p892(P&Hte9-u5 zelABR#leUPI9EhdDEjZJDUgCXIY+u7uX40NJWjiCm?Ldm6qI-_KaMh74>E~|N_4gI z7`{vM0r9ECnH2V@rtM*m+sOCamIbQ>g=&Sg&D%HIq)%YE^U{y2(fwAkt^@AuI*1?7 zAeb8IPl)0v*(sMm1hxtF2)uE5&eQls$%8*w}=atx`mG4d1=*O~ybq7^#2b z^@D;+T!-^OS!XZwSdA0EU*l)RhP0f1Yth-g2RIq`GE`g!de7FXgjNG?CS!$uFAPa| z0f1LSYp$%PDjm57sb-*9T#59ey!*@CYE3bintUR9NqeBk{PIyW(4Uc~RMwMDSn1fq zsAvR7fwELJ{QhrgA!D-4Xp_UWTp3&_g(5pgIb8a)U&P+bDaRhcU5a7rs4hJvmAKZ@ zFui?#oPMcPxnVRmp~`TmAYVe#{ha9_G=8==Fo`m2IeKl?XMtGH^9QejyLqtGfFm?= zgME8iT7kqf4UUAXnN9O*lB4`dRh(UdO8wd>U6sjAn+AaP8F)G1m0RYcMxg2vpnUJa z=o&Yo$=W0x7WV`s+<>&Si}NwCTEWg)HP{1JZVia73^hQfW(6e8dTfBP5Z4bp(LhXq!b9dz0PXFZQi|r9$v@8ynNYBgZop z14=ooaiwBcpWn1}EE;*eVAkoY08f)ThF-=L1v*Sn?TfdjrbAcSNtONn>aa;9YfEE# zej2PSkC{~Yv*C#aH;%P|<&B(6SL*GmEct#Vm4taiRDG9nh48Fo_w6fazS64aG&4_0 z@HjE7cwFj;*AAs(OiaQ0zY5I{sLuf#i@@&|8kI%t_Tb5lH~r}BuAHF1jeUi&sc{lU zGM`vkz7&6h4tvzk({0Qr(j?z{1ciMv5(M)f15}2yB^7QM%0>}FW89nofn$BtahY*> z65=)$)&F`q7>%*fuj4cH#ZB~?gO=!X1X$d>`U>}zHPk+7YzPp^gxx)oism>={n)0o zeF>VeQi^rR8`JS1R|y$?!n?$vK0>cCW;eEoF}~J#sUb~w?YMms2E0a;C1`~eBQB@ML-{vD`LDaR765ORR?B)-y|uoow~&%?4m2*BSX+3`?nBMU)YoH8 zg0gTKIkp-=y>v!w1+p#}v4}>VymZ5M1_wRqkt!Zzj36vVNr9GcT@--UmzE)6=7NlE zrYhM15wlXMSJl<3+&76)d^V(1AAvM|5l--q6=}}Fkha+1NvN&Do1i9Vs?Hs6ooZt2 zmQ?VHV0~OREYFU94HGIiTv+RZ49inR(GO`Jktj{}TUXjfdxfUT%Jx%*hkw#Obf}s# zyNiTinjvd*Og|*w+uk6}W=z4%nDCkhDJv%@Q_D~dWuJsYgKv190L}_?_DJyygO1uf zz)6g?|LJ&~XmTt6?J^|jOSwcieROZQ4uLhpuuT2V4bv8OZ+5({XysVzY9zp)1r^4V zAxMI6QNgI<%8E({Np!^9E#pRhoHZ^ZPUeS?{Bb%qB(Wy3l)V-5-JDs$a$cHN{Ko15 z%YQ|ihTNYr$Qg@?*jP2$TqpmKY`%&36*)4~T+p4t`qPB2wr;wZ)r>X6r>{Xs0_uT6NoBa4J~ zqYEqH0#_^}6+27Y(Bm#w*6-yqCD=~WP!lOqEsi3iMwWe4q zx+>vXLNSqip#+%pRoeaU#QaOj*-E|((B`-u;uSKpXKjAJNSEmli?FuMAh?9SiPN

    VwVt1VwJ^VZA~+FOFBpid(iSb$+kD|0|8GfRb%MT#0^fGUCA7S`3GIH2oeLoC zphY`yi?MIe8p7&xU^Ia|VU<1v9<95o%I|P|h4ec$pWpX%dkjJSM_a($bGQX-_-Rf| zO!~(mw78@p#f=CldLk~~P}aJyAIvDaR|W%#8*}|9hIIGv$%uS%1Zi`e+A#byNQ?!B zHDiBv$pA+{D3O5Q9UmObOI;7HvnBtCV38j_qFS=UvkNQOGp~2s!V`X+i1}<8=9jT# z*3PgxT2IO34UgvwKQah=>?2{K9HnP)%=7NgJoP$BiXL&P6C9nKQWk=^TL*l)u1l4i z8)!vcOt9~Nqb7`tFCaeL1iVBW%Q8|iv-I`#agn#9Eyq)MIa5X|vJAOBrVxHp`tVOZ z9RobWwx?)c#(@pTHCD7{J{FT7PkBjq6DLGg8A6Mg;4%^d=+ZxAwBc|L3O8McjLC)v z4pRr8dSar7GFZv@$@_NusDzw3G!o4MaR-k`Q+u!sC!#yk;U9#CfBC)&yjOgiSC{TA zZg-Nbnhp4G>}n>&@|%xTOnhS#Va3hw&@(5XZIYQ1(scPhxHN@kk6YH;5zeL2d|~%A>3(yeSFMlq zjdnZURC=e;ua`8UeTcC7NO}TN&1jzp)n>-;1Egvxza9LRwp6r#QzfKkvWQRn3ldPA zMqzLhz>g5AWN~4r*-|Z@a@f;sS6nUH!Pv$d0H>t2UFhe|f+~_0%2v6-rUj+U{$mr! z>=#i#FzT!$2TYLhO&Q8^C~w^S(LO1jA^s@=M!oN`=2|2g5%_U(Prsw3yG`n?oz<2G z8Tn5O0*Nr914iOc`z0KYVX5H{uby01bUTEF59g$hn37+Be?8a4C zwV36tSBz65lsh9!G2y zTF02Cn1VKQ!cLNiTItLQI<8_Zr7}2HPAAG&;ZNkYqiR#SOjUZt-0*!CAhAj(@Wo~m z9WR}&_z9XhV`}Y4lfs{)O@`%%ZyUfPJw7N5>H2Hvd&~N?2`fBC+kMZLU)M4-FaO^t z@_{}j4^YhdCZVT@-R^o}GFf$2VW=Vb!v_zR-jpg3kCeoCI7zG&E&J-7yhz`uZgf-{ zr1Vda%g=Bz&)0{57MtjOZKc)zz{9^&>GJNP`!_9l!a$iQ%r_;rBRETO00We>kx?8t z9C_8_=FV16Lv)C5p#L2GG^iZl_$XN=+>m|04S+d#+qLN9mnIg9>`$NzT2 zHOLyg_*S*CH}LfZ(9)Q=x%x#c!qu8#1|RT-a1)Faem$d2bZ+DbLO1c^A#O);a#Z^o zmjf$jfY{u*L;R`DwQg$0p8D8M5b(~6`9xSIBQD=>3~hC$(oNit1GN1OVFeg?~Qz{q5>N0-lWoE$-RR9h`UZc32xrX<3tIL_t8eyivc zwpYXuHJlr9%SSm|wbaAy*`%8C!_>7UIhUT7ud(uUu|8WtfqLvVdv__>bEsrxtg?As zTFN=o{6Iezuc*B_By0&zp&i9}6nOz;`9cs+aq|;-vScFsF7>}r$PU@8*XZ$3N|@kn zM5~J;(Dn0mN)i){nP083l9E>|U$@j5G0Q8I$Wgmsy@J6GV+qG0p2%4p4dQ|ILWrn2Y#Xi9c&)E)eN=8Yxs56bR(x9splfpv%I94k_B~@!^vHV@r8;=_!yrh_jB8CH3)jeQDKXZu1 z*`_}+kH=>jP*ThQV{DI49m8dStYM2%%C31djbg{Nm*EvXj;fphs!D8!s!O2{U|&cG&-X?4d1DVM7<5(bI2vhu-Rurizu2#@n=tL z>JZem8T8Syq5yJ1$Qv~ov1O?{0-JN$ z7nZqt)elfBLhVEC4LduFgW>6`?2ED4;1F1|Nmjdx_g+YHV73@Y!nYfkRK?;Ofkqkj zIhOV%9EWkbl!|*aWnhVEQGrLM8LpMvlH~=w6s{dw!BNSkYrD9!Q|J(AizuVf)rJgG zL|?8!vl#ZHX9Z&a!k1gn+XL8;=- zYL-e}O>yg2Ly%vCW>z2TjGvNYJV8;7wwib~gY#K^UIg?F2=fTl4wU0^zguUpMkPL1 z!06O~6h+1%>{JRy5>2S}|L=CfvP+hV4HAA=k+*}$x3Uc43f7nvNyPEg$vs_ZR9;;U z|6%4=C!c|RH7DIxho0mtDxa@{U8gHuZxyV@>XSVAb_r+V6ETaa@-yY>NYUqZC_uo| z2q$}gMjNiJO_Et)cdDr3bNuPfR7|>a)-5fEXo3_2fcevnD^<@1BxAW zJ<8RaIpa6v)?E#3co@<`uhe!VSUp0%KAiTM1szloxpb zewjjRDS)Zjcw_fxDQEA@lrcVE|LR6ekb^hPj*6x@J}F63)t}k?Z`rOI%VE-)qOXQB z)UaifK^ZIcKaz5#K{GZZ)vC>Dj!%ENe|lKK`4AKXbPy6Dl;lVCbgt#sUU{dvlxZtM zW(Y=qaQtg&VWQ5|UOBf>rUyG94aWJwn2-`p#mqE6%8vIy4O3Vu!d-N~B(NM|QJ~$1FXu;-HX%z2$^b%6= z#Meyk4wMe^7a`Xe3BnWY5DOGl!I+UA=u6kKq9^woAn$aeiU944BUCj~2<>Gn*5>4U6e>NpLS&>qxcYeyJL z_U<1(NScY(`}d=4ESV=volMi{i}_tUk4=uS$M=Cl^@h(9L98*d!mvTFWe}QRzRjD> zWJajuVW+tp@iLR;o_4wMeA2epTc2(Xg;5 zBt^BiZp{-ewcAn7xnD8KN3oyyaj&3E>6jWhx*;_yp}Wp0q5DtsaPxv~#O>@YBL>lo z@GZC`X-^vfl5y*pRz8BtlmcuxocPl{2H*Imp_| zDxQ?X7R3n^58||GeOmSg7wO=gctwZAAgid({I)t~qJ`DR(&SY|gH5`X)zlDod(DLf z{NoOhk=6tmA-CV3nrt+=h#x%Tk)&_G#tph1N~2yKX`FT+k(r5>(X_{0{pp39cS0uGi?fK{;wYMFGJ-8X0i_;$q*`QMP!*cPYE>%j9>J1sCL$*EQdI)M zhQ`haXYCL5RV*ai6a^o!q$W@?(Y7DV>nz7n ze~O|I^YdT`d-_?#=>1{rJHMk4&zI!5PG796j60e^b@VBXeQW<^e8|^(Q=LIxX-8N& z?$W39>-sW(lI^r!6{w~plIGWYO#ph$7kJ)vzKsqlwO$%3%e0~AdBW#=p+FV(hH~)X ze{rp%UEuAJVG;#dC4iudzB8O^Uca(YV^{E3~Z*OZ(zl#E|Z# zCb!p670$GrdFWgxIA;6CT?qML)yY~~mC^F@$93cp6)6h*O&ElwTXEy&JztS8Gm2Y3 zXPNlqmrQ14&JoXz>3hWwX0?a%8dI>>$8zhsI?qKTo2INrju_V+jG>dbzhn8xp`_oR z7PWFg4_@+RJzmX3itm(`R+0-+$K{oobG*F?ybkT$j>D8#u9IzKYeq&38Mxh3w@Dp@ zmCdF6H;HS;7(pDYgL$TS(s1eHn*`-eN+~)~KZTJ)&g(7fj;6FdBIL(G&hy}G6Oo#D z{EOnQ2S=w7u^1eht{=@r0=&+lBPGuCG%OBkaVKpES{*^`&F}A|Glv2LZ%UnGe-5GK zgb+WWYgR*uGyLc|cKWc|=CGY=EF(dd8W#9htvK30p}7?DHV!B`tACf?OkU2$aegXC zHhFiQXD-%dj{D>U?nltD)2oVlc>0(AeS!6PsBXy}?yIGIGv%!+`co&ar-{Rbdbb+;3&7jJz>bGcLyZvE!0a@WBy^(lqlu)9+Z4###LL+9nn<N z!GTc(Iw7xOxOU!MCDQ#gg+pmBn4060tpjHgA5epJdXl0gy#k5>plbojgnA(7$P#10 z9RIw`22n#Z?^XtZk@>%yB23FYSdW!CSUPqE=k2K1?{eY#I8=oaODzMe9J>u_s_KD! zyS?#R5+*7bYioi~oaJ;AY#dui^&W#RtMq}MEuMHbTRJ)%6t}Gkwt_WEp$`!PPp|MS zDA8L#+u4F%>9E~g^ciU`&<;WlY75P#8;k^(m_WBj2d#_31FNr)B-N;%#*h=kECv8j z#>BbGD^;!Chfo=knt+RWVDEj@uH->V?(cNp1D@;TiL2=#_ha1^c!giiPL^qXvrMm? zf_1+=!q#)0^m5^#=a{)PaDLqKJ2E{PFYo;b?E|ZOsjaDQjOv{d8qKRf(q1>vPIVYz@KJ=3fKXE4_$#OMel;!^F-UizV=F&2`k7WDC z7eoFAf~=GWP_*n9UlwcrOCsJK&d;PX9A4V9)0>MQYwmicR=l5t6H!q?33x<;2V>#> zfESmMi85(;fhwMKnWm>==mrUfpq^4O^7UDMpsC$NU}ZIATuN_U?$xHJhL%XZQ%MEZ!h|8WN`h9yH5r2FJUh)nBaFk`?MEJa z5?O-63>;N^$8Vl=*c@CeE^@pnS64PwWf+) z+P3roS7D<@q`=G9bN5p!dvb%^AHN%BZRN9!vV4xM+N6TMz{u}vIsEvWrdqM}Ws!r< zp{!5npWMS@g}LmNxrkja;?n`&)hT9&n``VQ_Hh08Y0Q~x;9OT)aJcA5S$SwZ%+XO6 zd1Zyj^Qa^j7ENtSY#9@$bACeKf%&li37^mH&HX{WL;f(vW{4yvyRO@ zdZa)T3_P}mQaXz=z$&@wgrMyHp4pb{SuWwp)eo1fQ)HE8Wx4IKFSHX6=-FDqbKHH- zti%=rTm2_GvCvC+1?n}PgCqou(<#|_CVKmBs+uGK7`LND&dA9jii(!FI|Y0_uWfh( zzOg76bPF@zveV4Ud3g-Xq)}zUCUu!yvhz}vB>7aX<|Krk6f@J_+*VQNd!oH_ z-#1vH`$CH$8=b-9aNBJr94=OrGM~ywty;Z2^PMto$xxZu6Qh6SwkpIK9#`zq8HBV< z2O3?WzHwE_+1UQRY4kCq4^!}6?-$vdCfS}Tfn_N3S_eNkE5VE(N!roZbh)QmiIZEK zb=6zg;;%k>LaZd@g$L1sqqU#ZgYEbl?ZoC#Y z1a8nJ?>zLR6Vvu)8=X@w{*=P+5C_jRa6@K3e58rDPip!C&yU)Y2LdU2MgoW|9g?ix z2Qim{1xm=sjvu^TLzo8w1#^b|#NEI63-MhAy2!R_jftJFNFV z7&rR5PEb^|;#mJ$L&ym*xJ8KUr)pGjjAp>$Ge3ee8yvz!$eUt>K4Zg?eLm61J`j<- zI?8km$AI&nih@Dv%=K}c#2DqqGpf+l(gmB*m`N0qEk}YaFzN5&;C0z*t%(_nT(f1! zG5xDh1_>#-Zmi#o(&b|Pfm3i)S_Omn`_Bz+ZFxbdhcV-^;>I@l|2}lf7-%Lg9nQ*-SwEBA;AvIa{2WB3u)i2JN&4d2_48pRSmFDmctJ{->D~1 zCgNjLrL?vAsHvZ@G{FgWAm{U0cbW_zkoC$Z>koIkiYO7jKyr;W6ob4m2qR1rQ*bRaGFp+1z5e?r%f_m;tU9*$8smCf zG(#8!8B!X{eFhDM%=69lBJa<_Wd39Zd1+mM%iI!R$EIcHk7NqpXoQ7DiM3&X)w94s zFcFYRG&-=e-)v7+O+zk8Av8t7o%?D#K|(@Nk!2#)$U{T=Hq2=tP`PwG)PW{f)qr_> zy4>v`M5u2f9?n7$*-}K_M;3;B5`MVV^kBgG{OQI0v7ZHBDZ61ZfSNw&(TzXgty4Z4 znWGjkD!M4?t_^>6ZZr`MfKS0>*V(S2EmQ@kM^3Vjolo z$d7x5;q6Gv$@LRCZKFyIDb#Fbkf4J|s5)DMg6k;aBhgPqWs{RK`u4yGGWy$Nt;5uAZ;@mh~7I9dn zj^p2gTsPC<_RUCXHQfM+)bj;A|`(+i)VKBw?Z;>K7_yzk<^Q2a0OE4|}SGKUzjG6pdfXx($5<{cO_ zR(6&$XA5+K!@t5yD7CX9=MyhHJG;mQP~@t`YF9g0?p&bJQK!6o^Nf9Sbe7sbHZlo9|GMpGtaS@xwMN zcJ{*q9Sr(r9e?{9_TZF=#V|Cqpp+J^i%;8>dT)AaRoq#H!2BbR31;7neG`+SC;!K_%siBUc~rZ zU&dv&dplb0v_6epDb-eIalTyg-*=;0NjR;}rm}V!SL}S1orNuud{jMT3Y}174CMD0 z+5#eEy{GNR-?B9gTFmMLxk~I zb1R~#iT9eJKh&S;7`!dO?`$$Jc`Efh10%3MnPwX~M3Z?C6Et^7RnMAILYvdxKkg@> z0A(k#e|;~Q8}Gfp!sqIX!l9A%8AIW*nX$RakPRTYo~r8&%lFF&aF)tar>4pDr^=gK zbI1s|F2Q3uu8sf#%mqt6jZl*ab`O}0t%Scx&D z0@0n`0YzKNj$_KxGXHBEe`uVo{4xH`04vR%7vPp$c!g{(U`^!F<=~*tUYfy`doXPO z*YE6KT(hK7js*v!7g`M)i|f)4x=&A6ADAPQwromoA7W;Q7hfEh#2pa#de}>-!I@-m z{$#Ivy($0-$ma#eRz2(e)0yC(XsQS!HCyv5v4ZQ7xIUkxD7=GIV|45VN&$Ha_X@9E z8IS27zXK^>BtqPy6UFI|BrtX3YN&=~MKvA>%^^lrfNp=WzAi0Wp6~Xe;LvLKa14U1%6k`vVZTpgk+$OmM+nYPD?GgWvo7|sd9437{L6vMtvNn>>dn) zN1t5aq*2XN>8UXJ!aA{|AmIip>ai_5dma7zvz^NMCSWsK6O{_Z-40c{WH~WvD-zqs z(@ksMmW{ilefT5WQ-P9PzF!>oEr?#2W#PN~jhFDoU(xjZ&`YE`oeo)H^DMq1j>Yf` zuGpymtP8HUSVI20bBEbFv+@Re>>6_wizr|&Db|0rL%_6r2b_hpMpR;@2(+_PB6LEJlA-p}>-}Kfkn7iC?`F$%c z=C)>jO}3LLvk<5Yn=Dpmag)k!#=9X0A=QdtO%f!q>*toklzZ4q;tW%nE0_md*P6$T zqmYgC|FsP6$?^wR2$=2`P?A%l;}C|~`4As|8Ys5s3ZwW8w#-U@qXvCkwz9O)D|r;p zx|sdX_4r>N<+4%;cwnSTBm$dk;jPPM_s6et7wLo9rMw# zj`%yY;N}~6OWxo3_p>pfnBtm}Q}zUg!DCEI5)i~$qSU#e)OQ2g^#YH`JimqXzy!qQ zM?+bn6&@YYV7}h6(77vUr!8ft31Qwu)E>=`FFM^A2TCnFl~qQZE|Gdp=g4afJ)^4( z9`pLf{DJh4_20g}_@5UK?!(vEDF->&ZA`ZjzZ_?moSqU_LAS|x=Gt8v>AIH{NAOfv zwwIb?WwGhQ{q?k#)~RK!uU!00C3WnI6TnJ1nY{N3 z7~$7RTK`o*Lr)s-RyLBsyCLSH`A}P#CLBb`4Qs>W1A&a4y6M)h$Facqocx7FteX>5 z6|UB(!BZyu2(E<8K%v?gF`mdwSKFAMi zT`&>@1|82^d>UU~YKmqZ`W{GHNC_9>feNTOE_9KEJnMdZ^!b35@?85pn2M6Du!06i ztOEka%f{r(k?f70)(Mft8|$l}vtK4>@vU^#84+et5wRr4gI9=u=`z}J9(-R;T3r4{ z0eO63JWxsge%GVn*|@{5=&nUi=k-OG8&UhW;smj^tG)PG_)>E-F%JA3fB7pIP_wUY zA|fFmV9UI(FORTz)3-0Pt?5jpke#b%M9%HA+NBjv?Poge9nBx9q=L;^z<7^ zKkvI z|MJEEW!nY;?Rp&1aMP@^nyM#P~L4L;QqJ#7SP6Zh37ya8LxXc;<5w{c@SAmy$g!9{^+*(yjOFI=u~`wwshg_?dPG zXcOAM8%J?-s952vwu~ZSFlw*o$La7EV|;xd7XZuIVRwW!QyZ&(9naLEgn-|Fi3zT4 z2-$><;4ZjPjnCUwl+n9>7iW85uQy;|gc<>*r!-AdF9*&CFL&h}HuV@l)-YG{jcJ?x1g1;+s^2Y&1&J?!-`clD6~kQZ8`f=w*PqtJbG zx^i~|ib?VPkB3p%AEWeQ2C_sPh_YxGd?6Ou?kEBCqToI1A35c)CPL93PK9Zv!n;*Tf#RMI!>l6%Qau1eQPfYqN zJnOH<^&=vfIkIG%Q8}K^mEMCyAr#@_(2(^1haF~iTofE494Q7(hYytZCr`t{*IkiQ z_XDWcE6vEOb1N}}mStV`O?FD^zbFx57GLl9i*xh@S(ur2mJUuMwWYHFLEf~w=p4uF zF#%mp4b2U`c9Vk{(_VOA^A9@~BXT1wF0a*4cZP9MdcKvzKb)@mm#wO&P_R%{!~lGS zn4p8e4vf*+#6c=Io2UP9Qa}i?Sy;h5ZV;aDEx62?2bcS!?N^!+gsJr>Q$KIc+%9`y zYu(RO!F$Djxt7BOm4qYpyFF32DqvRM_W0SF+px4{L^6bD;Ip;oGdZ7 zpA#K$gwtUwVZF`wcnW4Q-bi=Yx=c-2{CJjI{MA5;;z=a=tov_(pM*f3EyY$^npNCr z&TG}>qxmwkyA}4Xv5;<9@psU(Dd-pI#eW%32ZbnvzY?pFx?Uv~5RDp>QS5`-v*b(? zf=VpuIS8f4f_jP%ouZ=dUwC5Q&)fY**5!5s0^^!ft{KhiOWfL;IAS4wh~vIDyub^5 z>^r%&Dp4-541V`d+A$+6>7;3!G;RJ9pX6uCdFMO{=%w@l=<;vtJ=3*k}-m+v{(^9*A~6 zI9-IWBDb#{m>u-tMHCW_rbyVGq9)yoWUt@>LKCR3LM?&@*yfSExzc09QkogWLX&`w z_b*E@Z0xHj7HsG@I9g=81mCqj=!US?bM1*d4yXm5Ps^!l>Q%srCB2zW(wvMD4&71` zqj1RlTfa=nM$wBvVnbQ%n39ulGy+sjOTW^^)#-M{47CWqwLP=1u7tl;cYcyM4?W#3 z2{-zbK2A_AUD~!tkN(E}`XG!Eeu2HEM66eHBShikP~FK5dJUZ%5^Kv8&zmU@ES|F! z`GPVwq%cD%$#yy_f6x;P`*jWX-yE-h4KoUTX=!La$-WT6qxWSra{kLHxqsfVhf%NyF3DowX-a4438%4yiAKM9I3KHm27 z7CEQ691(WI3%~pE2=(e0s=#mG*S&hc5^t{PpguWm>6Zj<^m@jF*r|zvc>|2>gsqpc zTfHUJKCwv;Q)4KS=Hz8|2vlwWmeMxhG=w{9*=pu+>E(yQn3$#)1(JdAz}gPjT(Uo7 z4%p5G?@988PU5rc{S&pgEae|Wc5se`KMc*zCG6|%`eiVsIxa(sunXzUVUK)e@uBJe zWE(=L6e<8k6G=1V?TnDC^D7dJXc#;hfoB0%FpK4%y16LeIuQ9GXlL<51QvnNzHdM3 zq^6~cAjlmbF6utdbIgyh*?zF7sIa7xPEy1}AZ#9`;o&DmM)w!pq>bNc?k*{rD0-)- zJuR$}kF#F0;DemKOmD!_S^pTHT+LOI0ph4Hi>399IJr<||U4#P&qhWnM>tNSAKJ(&|-j;CrM@7be5M?1Re*ZuY# z<$;lWbx)DPiHfFv0Ca0=3f{M%uj60oQngTb{>X4OxBsYhWHJ?gr6CMw#8vBxDq&{* zE#sUQ5@-+d;ofJ~30+PjP~WG`Ypy2Er;=s98ZIeKM>SkP&p0Pg{UwY_f5i<^B^w363+g|7%-GGfz~uB6P$3)q z0lQ-uwi{Q}V|GA)?Nk&X4FK>b11PjT*s~%cr`tN z>6saHJmMVBuMEeqN~Q$NuBQ9@l(dxi1Am}AJYU$*qs8n|5-sYYzOq7ioS zZ+0W~b`MN@F+lm%#e`q~?y%7o7)gqd#BVcC(PUV*F9xy47(P)Is|uxgqEYS;?B(_x zz=oeR{}^QEynM|U9;_w#3PLzAnjteNZ3)m}!bnBA; z%MmK=nzJ=h+PA>M;?F5Db*`ZQrj)cQCNfmK8fUCr6Hhw6eKY2p;MdEjpjhqLn1-LQ zlKT3V4ky&L_Wnz1LV2g>b>bt0C3ml_PtuUtv~I%pxN@@XH(8A zX?s+D`2J!qm(bQ<*Dj^_zLYsXgEgw-)Dx9;>nBPjK4M#Cqhzf+slqte+Cp8gzx;IY zwG{XA09oEu_BZlQ^>t0rJpX0YzV0c@U&(l0R`!a?Qm#+0wv9h9Z&LHER__gK3ia5& z+jTF$pVQ{HO_KF<;pJs)TlW5wh_g53>z=v&+`cvEVvM!)#q8c^1ymkXu+^`U+f(p< zvB3widnw`-_Cxv?Zdm4ka%602g?p8Z4Aht@$mYgk_!h~PlZ|Y&RV(GPcdGkq>=K))YfkM6>Cdpe$zD~omsd?YXPSZEzK=5V z>Q_rPde|PD`?jL|y|l%3aixpEi-gw)rRQ;9)tz+p>cdYf-pZ@bo4MhZ`|MXaTMwj} z2G6ZXa9T8@PvC0j=M7OgA@f+5tQ1^S!n`#4*|1?$7@dh>QFD$Rq0ja|oChutxHLOSxxcdV1OnJoR_Xp5j@ z)y{7sEBc)rf$Pbxx`)j+HM{h%L{}oHdB$qqiglJ=7dFXnwL9@J{?{YBf5+TQ9xURH z-})$E?n^T-mesc|m!}?>|4Jom(f;z1f_<;#mlmIUB~||^^T{sAkk|8*QzT!U7n*l+ z>#a9g-vW<(zG^7pyW!^Jg!wA-B>kQ{9#2=AH`7yT+SAqR64j@#-M#q5r%3S~I>0sE zVQCXfNE8evKYe)DLgqkb=*Kj$Y2ld4hc$_Y00J zpWWA?7Pd}x&)w~_V#B^~h&>W^Ge+oU)vmhwp4BTe!1Z>^YX-p!ht!+DuKl;L`w_?F zqw9aElmII-v3j>D2C=;_lJ8Cn)_*FzH+;Xn);#^GO5nU(@K=E;Y6hFvH@DQho)=cf zW+k z^c~c=D8seVpgcHjTIY;_Wh$|DpL0q~0?#Y|@&yfFusp1CVcGKGWB^m7{UVKxt1o@| ze9}dI-r|@|y-y5p+Lh^kiiIe%a%0&78G%#qVHUgq4iSzf16~&g$OtIMArqk0kTQqk uvID&p^Vt75$bV>JF*vk={<0H$P|wJ9u~agdxAPJM5O})!xvXPx#1ZP1_K>z@;j|==^1poj532;bRa{vGqB>(^xB>_oNB=7(L|D{PpK~#8N?0pA- zoJINmv%T-$?cVM6-gB2LN$!%%rB@PKLJv(qP>M7~!A=!KP~<0~2nq@+3P_QTln~N; zF1g-&zuVsT|GwYuT`m%B1DJ~A>tH)NbE$25FtW@2oWMq5s1W2ga{EL zM2HX};uOJu5U~p*9R7SKuW-80o0jp9r2RBRWQ+a~@jnZ}4x-=xEuiv4p~&YLdyK~Y zv+R`XDwIX}{qLAQSC(r#`S)lxCV((5Qr2a{e2 z+4K&`^_W(#&(zM8pGK#J*-T}bR8YyKte$@vj+W^&$@ou)6cU9NQl$zKxdt+|mQ_9t z5>ksAGHpyWZn}*0oyON=!1ds8;d8t?ar|+@Pn2dV{OCB&XL{Vp;`#ez@X_g}r}-3| zD9sUh^7m-?6ei=NKLs3>=I;WhJu1yqUMI?LdU?^HBf=&>$4h%0oap+K<;B0J#~l%U zRNQC5(fLi{i13reO$(pG^!RAdF?yPw?j&(Xlyy|xXQ{7{{;0U=X^x2E-;;4i#S7n$ zisML$0ur?mGMxdEBX~q4PO36Ms-VA08Y2`+8V&ySkX2V#-&t4R05y>+l}ZJrLV~a_ z2;xfwatLZQwDjRPl~PW!1_j4;GH|p^sexXrfl{e}OcFxiB#A-+9}-KJV&TkWj1Ba_ z;SEOyMpB%N21|uZLS>R785AawE1_1%$k~Jt^ed6K=xkiFz8t>x4)l$=5I&k6o)F}) zOzBv?dOi%c5e(W~h?eqCft2LTnY$LtvjaHPHZo-&|1z)xSCVrk$H9*HAB9}0hK5M5 zTCfXh`_SRG4~K~mlLKcm&g~Nv2wo(Pzfdb3<=j34NM8oMifmCKv~PG?c_)HIO2kA% zbtbzEeugTCnaEIm)MV$uAQ4kxVnF37iGT#C4$u=AB{WoTYGwoiB>RclmCBMCOsF|y zA-;HVHBPUJ#Yj&-S_ZsF62^ZPBr+&SMjElAwkIX~r{ARe|8E-RaY=55uJ|IDGPMXB zOJON4MyUS)d_L|2BuQ8eW%43eR&0R5tU_S)0Q_!}lMF~ASJQycgFR0UqDDpak|>BE zQvZ|Egg4?0xQ>x_VVe>h2E}t8LOLOs@+0TLW3N;mu|YvGLbz@!KMBQg-(pB)L^#Pl zq>5-+a&l7SoWenlr?gTf*$+D;il;d0BtkHVz;gLh>DZx7%5g%l+%n2fPid%5ltd_p z>nx>74?DieI#Zvb9vW>|2Gv1E;VP;#jnWYU&*?}$BFjP=Hs~oGeFkt^Cgb!~(Cu{n zMP=YIZ#o2h3GpO{l;ohk%xx$mxsK2w+51$xoDei2AYHJJlgg;QCd*>GP#PlPtS7Re zsk}&OQfkY?dZMyePduhjT*Pj;{aJqz`Gg9d2uIr*jlmM~*FriO>*vTep$Pg=GOnv& zH`Bve#z36QyP(3T!xZ@Tx6uDBQ?Q-pkn}|&LG>~@xe;a#2~3)7Uq@YASF2w zdZ`=3!CA(*q6!ZD>!rK56$ z2y)vPWq{Dd&LD9T8kgnl0A<}b9dI`#B&OlCPI?|G?ka)*1 z?(|0TktCyZVL1x2vXEw0Vq#((Zf~UHNMuCjrIhDnai0Ma8Ig#LOq@193;8*T$WAjM zU>n1bJ!)%H^(9b%5Ja6@sW)I|Wg$$SA@ons;6a`3aE*@wqIUw$5T`%3EY^o1B@I=Du?X00)CVGE@c^StNP+1?BLGzKbsoBUt2tVtZNy*T8U`b`gZ7?Ygv%kvRem>-Nyvv%Cnf(x`T0qPPctmim()}MeclY36uL=v z$}gyfDrW(7X?dh0k|ExLFxgVj>y4z5&;-|71YPD#s1tLbl#Rh>_d#K$Hq4qaO^10j z!SKLO{%O+Ej|JI=g4(%|%1b02QhkH&F$8@+B2+Z-%vlM2N;>H_o$~U-&uvT&RHBN7 zCT9_~Wwb1F9O+{aKBtdJi5cqjSs+UOwpoF~?WU`JLOcjrQ%Mz$8mww45G zh;5C=2SYY=*;UXbQ#o;@50efd&nSXq*GfvG%PNAJ(x|No)K+#1cXOsh#Pm?5%!V$# zknD!^q;`}1c1UAqMr@63CO!umvNJFFjWG0N?{i4+1r*Nqltp!R!DplXK=^DuvRNN79hJtGNBy<|l>`lE*=l zG!urxGRQoGaP_p1Y@`P!cB*p3t+*1(@F7SN7QT@$` z=}(9T{mjLe;tLm^jm7gSFlS~lB(??|Y8!;t?}y5;3Sa*I2CSI70P}NoXsthpu3;Bt z8-~Idk61O}AqT+4d=@B7Cgh*B29Mn|4-0AvF~2+k<1J0t)kK|}+f$J5C>d$CXCg9q z-M21AYR49AY$8WR6RfH0js}ecZfy!K|N2F^X_X#ZHa4QQUx$@fpN?zRsBz$}I&}MZ zW$M_nf`I@smoLY6HsoNap#l55{gIVq(nZYtC3x_AXJf;vJXBQ`pr+7>&W08o>~hg$ zhBcr;>HJIt+gh=8?*NgY`pfMaCK-En?!gNm zv_V@m6RP(8_=Jd^jApSRw;K%~Z^y>YAPUm-*uS$yAa+5&0y9@G!w(-i7pGTcVky~h zQH&QmK59pgj|SUggy5p7ERP#?+xFq@b_wR>nb2L^fNjl(iCv`5Q5hrueLj#=l3L2J zc2xxw&H?lekuwUUV8I1M4m#@4L&W?452zfO3F@qcP%GNuc4(oaiKw&oJ-C_JQH^D> z*)WyPgMa7!=>F(ql2b#vqLD_K41MLbNIPRSr1n-gnwt3p20pM zcnOHR^ruLuAm^Dm52hK}2z2a&du$Byj0=&xb_0z0^N3&)S(|ksOo?L{+rFI~mJ!P0 zFCcBjIYfZwL6@**Uh`5jn_E1)H(t538bG`Ja#0dlyUpE?tU>RXY1=1NG% z4#L*dLIlDJUCBk1-+3_Rt%4yz4tM7+np6>)J$`3844S|x3$8-ix(gt8wZhraN(9aV z^LY;s)A6Z5Sv2bfU!!Vi8cpFF?Y%UxhiJ+L$I$fuV!&437|bGr_d_$4HnpoAR4S z1jqqL`ym89MBdCrh(GH`u#&IVW>pdSOM_%=3vAug$KuLhUjAiRX0Jj_&J4)WgNYW> z(=mQ4im)G&xY>w5?ORBws-d==MfENM9CdJZwL_9|4wBFMDl8?DvUFA*eEoaj>X*T^ z_HHCESp$8>ESQQ)$$mS?KD%g$CEGL?!o28u#8)mSyIBCeei-)FCMfd1gp@Njz>r1d zn2z-C9v(-3O|h-%Ctp@Uv(>D zX3Qm7W+10SjT1tJc5{4No>6#+=y7nQUu7q{6A~OD3**;wvbp8PcpZXQ6Q9FSy~-by&adY+P{F&3Iv_ z4f5lS>I9xqDB}un?sd1}ve?bI`Mfi5-ZfvvpIX!?i&vAfdG$gHmDYsV7#cJt$)S{H zujB0)^28vofI6#+^5Tv}@x!Ad)IMsuL{6QAh#i*`^uy!!AS6}7oMb@%mOtRmJAR74 zwGJV`w-KlerQQgWR)-i%91@a}5N|eOa;qCJ|0)d>o|uFrE6t`=ylgGRP#t72#3dk+ z(j+FvLCZ_H1f{_OlTIOgk3a%V3=tSDXDWeO9|J4r$LSKRFephO;7m+Wzdb&&5qYd<#jH3sIb^CNdMitSipMz>_!N;)|}sb8RtL zQJ#$$HRVY*khtth+;qtbq-c1VJ6hk9Kq6P5_{>#!d_xSLy!v~XQT8<~{=zfp)n*}) z+k|?6KF*Ac^f;uY#K5SgHlZ-BIToo&MyRO}joE^dY5N?T>;$xAX9*@ja6O3#$)Fy`57$n3*mhNL|CZCZJj|8(CaV&V-cIF#d4QGr0fRTJ-a30)yH_WiTLy+T3jA z^5T#fbJ)IQN+qmGaYA@{f);XaLy|2fMkm}ho&?{DHpLpLog=l@T1Zc6l!kN>Z&FeR zrv@NhNmWYds6F^DG27l0C{C_Ykt32HOV+5rHNN*AE)|5D8QoWMmG$1ql+~8ZT?vM{g zn$X0kn8b#NfJblNbN^DPp)(j^G#Y89tfrYc2U7pwZ6#Vg^aefDayhhmJv2%M)g_`D zg~k9ArUxxeNL+{h);NbU{pzglY(X(+2k!_A7XCcjkWx;ZU?L7!O zd6kbyVju~Y3-5w<>}j+-unf)b*1|Y*G1-HG;wfL(00#cB9*6Ea6PyB~a6(4FNZT zhaN)RUCStL8JeE?37o_3h&ql3Qiv?31eVpez_;-#G(2<*CLH-lTDcSwUU~@!;63x&U4g{;H4xk{wTWlTtr7j+vm8yodkmg24-xGWSTDZ>{#Qu8yH=s~m3N`4I1^gA zl3S9xkqNqjxsZ4Uqy2>CmciTjD%u~KPcp1T%OBo?wDN1PW{2P(+=!m1E}%ACfV?jEISW9HB-*vXU&e@nOK2jMK0D1|I(TGx*EH*P}Gu zgaDDYP(X$9vv0sHU$_Rh-u-Rd|Ko@8!1um_dF05YycDa_W9ij*IX%<+Tf(!1#*Ul{$93{)d4t2@Rzrt;65@@it zV#TGm;@$@z#)Cil5gxebdsv-EM1dTShX(u)HaDVR#kt4?lZOa+poq&}f?FQ?86N)8 zgLv=gAYa4#S5S%wKmc?)~vk@$ioy z!Cg09gv!Jq&4d@>s++%svzJw2#RWIwfrlQ!&%S*nX6MAf9|$3J<|2IgTT~9!`SC~T zx{7Sbjj33B&Qh0FF>Zfq zQ>7X^etA8f_{dJPNE>>3orud!f=W%qg!D4<@$WI5dm1*JHXq4k@Pe~C2^4XuIK3tg zn}7Ca{OX{e26LLp^$g>cS9YL}^0TC-;JSxy!^?lX34i(R7je@Wx#Y|Zn1A)9_}#-7 z;Pf&xF1h1c{PnqO@uO=>i0HEAoCv%h(1p6Xal|B>h}d!$o|Nd6I z^WxR`>gid+1Yyl}8}Q%_)tEi63}3tVTDQX=Ezgy|nqC$dX9b#gfra{5m8 z#H)Fhr7Q8+6F1@A*S~?=F3uw&!9PkF##}eH6k(G-+LdTrG`prWDl7tHHw6Yq0Lz3$eVk1S`&6hoy6Jp;r*u z*2iMz(sOX;nP=dvwaZbKm2eC}JpweSO9K6{ZM+Zto8E=9{*UPT<0CXaNx3UTK;r=0 zosi8`UP>qo*-#l>aI_wxPC)&KZ)x#(DCmO{6A9%>FNiotR@8a?q?B_mA+p*AS9c#d z5*|BA=azD46Z+xYS5IVv+N5hQ{4z7ty4Z+*DLLyzA{!T0@q&&CN=Fe?29K@0PgJTu z9Wj}G7~TFc#nFT}tq{HgKf?$)H{Ra{zY~r@@2>o6V@wgzlB?i*{ zLYk~@#>Bq82n0sqXl?~k7sDLK`=$9h%8&FJsW-{R8Ip_=zI9eq4B6;**as+_^-6UK z4)4Rr2Tx*r&;yyTn;fehve;B2IW!KP(56_25~!*!B?8a{_rSRD`v|ZM5(hjZeem1H zC`pj?L%zqVfW4^^P^Uwkm_ZXF7KGZB+h5~d^z~=qQ5MhyootJB!u$K=G;5G` zU~J<@keV}~(6WvRf?ZI%vaRulCktmBmoU#}QfE ziJ;3hr4yl_aR;4jcizkA*^YrfejUTLJ7L@W7<%7(o%BLlohHt|0#U7zvGd?S^2qsN zhfn~%-~{^mx}nZL9~+kDA}P@dvtCKgBr5cA5a!M0i8TAQb)e~x8)0e-Mko+KV6w7Q zPQdGd%k34yrYcBUadh^>rHVzWRTBxK1{k;7;iVasKD8X{)}MjOY?@8$^unfT|7a)P z`Tb*f=!H+v=aNFnBQO=iMM=oPW-cm2X!DEs>3u)KN1Y0!W~M+Al%VANui=8Y19<$Q zdvVwQ{SG@@Mg$T@^apEiz7p!~zs3*ly$e5iz5}Hfu0nxPiNSF@3>Gs?Djj0h>5Rx< zxDe@WFXH=@=I;A`h(CVVLc;m1)S&i=+0?ASH>&Sx*xVj{1dtEybA{eE95- z@%`_87Z3jGFW5UIhp&Abe*f#o@zy7Mu<_NW@Zi1Q!#5xKBlfnB!(h$E()nc=-S!;r zzxPi37(FH?XqHOt%y5tP;?)=4p_$NHtY1`wc%9HJCxC?XYCyU+ zfJ03VxI-EwWW*ya#f%u89BLwPE55K63kTlAH8(tg@BCsHQs$K-KR%2d&%J<~?tB&R z){fy-BKKF{{9D}fY&|^DsWQ)0dFClRBtd$gl7W6Zdu@=Vr=WnGy zx=(Q1SAT)8{39E=Y6%8`0@?E#G`fT_~utZclhXyhaeC`htr)Xc{hYxLOo7oiG~XBdf}!? zlEoOg0}zP|L#`+L!6^28@($j9`)%wUw4kIi8)}kW783_m{~k1rNsy46M1yV<{7NlN zOw>p(t45}KH(r0^EqrpI6R~L-!qdVh2bD_BCCv68@*~W%_-IU|Vx$)u-+0WAM9}}p zaVyLgB87u+HV-4Lih+tII7CTizw&L6ci% zIb4RuAdD5lrgP4p#>|jXPd<>wDxpN0Z0IS!*kb6D z!1#a%VbX_OPZP^d-uFcrL=BhkmIzhgIw@kHG^fyqWHcBBQ6k`WVt*3(2=b9^vW$Ev zX`&kp5`oEH26I^%$sEVo&^6>#Rn&&DDNvac$)S@EV7rwlph)1`Z+6)0wvpqW-iN5J z0jdM}E1DfbPJSWmAzcPYPshj*B{w0ejA<#%#cA+1Z-m#uD>;)HMj+KCP@M`$Pf73& z)Y9a2g1Q;WYSBSEV*`@ceFv!*-vw)7y1;FO^nwnRP|ZCJ>dv=e8)c<2j+A4H>}gHZ zHZ;Zx4++q3vYjxu7ZD#JFCs586A{SND!OzS_J*#*QcBfC;;1c2@5&e}ksB(5NQdx1 zfWR&YoF9MH68RC96Q;{BO%85NelS3vAnfH-#wJ2W#5htG$I(Qd?T~C!X^bU3M5UlS zB*owxkh%=!I{*eg5Tqx(J*$7Lp$JcQu`B0nnZ*o z(U?6{Pd1%Qeo{+;M7%U{5nChqn4|DDp}=m8?{9^=;wHqT&4jV21mW(Ta0Ptim-J9) ztb)|BH*za|lIk!xKXojW@iU;!oC{TGD{PIUlqMn@Z=sTr&(x;JBiOPP9uL{3AU9Qk zx~Dv|6l$#(p59KfWtNxoq;yWZaL0hRf<^Spanuex9t0_z^uSzbO7;Ij2({%~7Dkg9 zmN*MaXJ)|D)r9T|KRRnSJ|{1MPsPAB(Ss3}3MuK-ctR-gB2oxHIg}cch`f?Qq$I|{ zNaeUaE(F{*40P0^vArMm=*ImiP~*A!_hQG+J=k~P09r=9Fc}Rr_@|<1RwkTHJ5fjB zwT-P9agZFO?XaZ~vx;SC*}NMEYY$@ghX*j0kc*-u1w4I&a1qP5WRzmryh0dMBnR&+ zA%ZF;LsJ;kP>v2`pr;2tokV~f5n~_<1kY##_IBzqyDFFZF?A|IJSpS`9h5`>f}P#y z?(RbGu#*hMi{ZXz?CAsI9HVfyPdZJN(ecWFWz!zyyW&(CnqQwhz+OG^EAoNY8fkHZ^0< zp?-wi{Ww(L1!s_)G!3j_8ZfOh7UT4F=V8_CYTx|-UtWoJ7McG$=t@CYJ>TBk$2 z)d;KAARN6h>7LpB+eSw*;?toZXL7|TOui=`nQ3}Bdi&7QGJu_XhTu(zL!niRiIy(Z zwvJ+a%!ZaaDr-j@>ZmL~-(C*|;iZ9g?YafH_L}AR!unF=ClIlxHuenfFBge(Qo|ptV>NseN)**i3Wr&}*8k$&U zKQwtwD~B3Aa5Ntfwhu&Fi7?R%&zJ_v6e1-t3D6|w5@9ma7#z_RuefQ8&OzM53lS4* zgR_5Ja8eOa4zf(>3lrdJ+(vUzir^>z)TAvhlcMNlj7j-olRde?0)^fpY()^Bm}Lf}R?+yUgqrGQnOOpiG?LRK`S^Z35k`q27pB=4B7V_@ zh@CkLa+)}Rh$(N150BKrF~FPONgV1o5${Op1bIj=Sw#L~iRbtCL~dEr1W2kj(YQ=< z&_|}#3zrI8fwC&0^0&g#(MZ>l!{xlDY?=5(&Y7@KyK2jF8h<9T=^L z?a)RVOT*C3T}yp$a#W%8@&Xu3;^1Kd%G{E{Bur-(bfKWhhMXo3!t`UD+T9ZeO*YGC zh1!|}g~>?mB?w76F+g8&IV`glLm3=|mnQs?(Uq#EO@^T~VjGq@tDub~8*teXph>1I z-b(o-lFo9WO-ZB_k$)rv5p|Y-bIMX%|dwi5NKXZb!H*>0zIjuNVv`K zZfhofI@zBoJ>sEGD}*#ieU^L(Zxf1ut|2+YAuaVgvU`mx8cy*-{ipr?{{W%as|@kT zEhI0B4|<#u47csad+&dUPG2H&^X6d5^0~-PjuH0z91lEmmul3|Pz9LO z9eWj-n3M?Pq3!r^<8BNJ3ZIIC$329>i6AUVDKHRwo=h*(nvtSY(Re|FJINZO2*c%c zfREVV2IgB|N9&81j>j9e<3Qgy{1oSN4TrDv*BI3W|s z(hjt=IVoHLZ+AP|Juyg6BI6n&qagyEm|lRnRWo2FCtx(vjFtvuzhe|#PC1GT$}ng4 zEX>MJf?|@@(hS_|>p}e?C(G8vg~+9dOI+n&Bx+d6{sl5N4$w<+|nTIV}0cK z#$ZUzLITa!4N5P%dT1s}%@wc>qHn^7)SPn6s~`fA77rf(*l2jamyFs##>>X^;Uh|T zpipY#q0-0^V@*eCc{wtTG(f4eFjHG80wd@p$2Krdow&aV9Ym6NFy-6uJm9HmhLoC- z1+&77AkE%XL|_F_951P-7tcV7Vib+dWAIE4W>jXt){Cv%8z9fE#?s1k=uTqLTn={` zzI`c`YmruvjM;N$V%3riBDEGIS;BD0VlltE5T&{CL~f->*3;~m+EYmr4YmO(&2(k* z$Zb$Yh{%8?Jr(n+^D%#3F3OAIVd7>MVgZMJoa!A!LQX7*!V>Y|{a>VOVpfK@c+9EH z$BYCO{6yNVRA=5wDQEkpvgE8+no$e3!_}fpgGvq3G7~VPFd2CnW|%Y)IoJ*rl#U;? zn6mXrP?=qany{^L0wLEJc5i9I!4W@X2C{#H1SwhRSTMf`NpN5yHV%2RAe;_vA1w;! z7Gv$=G?=7%XjMe)Xl^pzMTEqXMS3d2oHCm22Z>BF;ffabcY_itbb8^Trr9&}7&_2` zo$WM{Il3*mfRh$NGDx+E=dBl{v()SiR9EIAUMGQGuO_k=(be%mX~`*B5)+Y}oJ=1p zOj9cg1WABMx*ZZC@#?9)veX_v58NS|h$W^XEiDZ?8g~TpNpWHS1coO<@OsInsXvYS zseP!w%T%#2YA8IcM>?g6C$dP5O#M%GOw)ZPgn4x^i=1|%K;Zly-nSHqV#lo@nZxce zn#B*pZzsK)k|9&e5%!G0J2pZNHyN6QJm~Tk2u~(T)#QLPG9VpmgnQUVIwclJb|~Sa z7bcqFpoxz(r3kv*InbpOu_HptH5QsiLSrAvqDoAG#5;_TB2nlw5l~+?&LF$@!_nSO zKPd${RN+{M<26krLvkE(RJUBH6S9d+#*(db1p9z=XtQTSmpu!*i~{0_L}oZocDR}p zX!FWx0_T9MZacj02)hh>M`;|Tao3ayb!sULG@;bS#ZsLuP?_}z47L&Bq;_C|sNTX~ z7KHwjXp*3vQ3aK>AD&*Cpz>`ueu_4(Fd|3RENGL{sY=v|)rllmCc^xn!UT~e&Py0C zDK6SJG9&e!gmg$l)GuX3j%7UNk&Z%6xSQU@(1*Xl;HDjr<}IQLFq8g>9J1Kiq(d9& zup<)2kXwidltpxrT>*_XfpkHW`{4%IdxAuADV*ffrDhW`rnYB2aaxi~ZpoqXR!Ng~ zB5W2*L_Cg`6M;9Ao)U6}RW>>AId+rH3=BqYKj!cgsYFbSyz0pd2{bn9)5vxzNCs|~ znZo{Fp`GayX7XuD74lQZr&IP!w4!pz^iY^HNNrS>*(!{^f(%p#sXm3$WI-#BoPr|fg=z^P-TF{ z6d*@D4rmjQ7RURfC^E9?;Dq3Y|i1HM-NTf}R*bcyJ6p8hGRp@64zC*J<+$Iw)+$1S(sfJ@iTfk_)Fi=}2miwx!b5dt99 z^6kxXoPOE0xba4k@9L#UqK*@g)1b=b5$O<~a%OVG))?(jyqB)wuaDr{U%d`@Jo*A+ zOIM+?Ad#-2d_zGR*V8e7>0;Oqe1eAlK}_DH;q-hcV~RnAvHmtl(`F<7xE_K)NdnZy zews;Z$Y$L3y}0A-hjGpAo6*T~#HbKwjK}Kh&%*=vT!?$VwiL7Cl?c$a!qPc|MUH%n zfI6U`9B0|;Ww__Q4S3+*b8+isWyp$5HiZrsaJkUV58EUpAdALrp-&rCi02imYtF*G z_gsuezBwNydKr8Ynz8eeV`ORX$g&vZT=l)R_|C15;f!?;;G$bz!h3Zz*d24>vG6$D zaB>?cd+^lPpU0DXh>Tfv$j&Rmwcj`&_uX|Ne)y$qcw33^Q6Hd5F_FF`%ry+4(NcgC zRTyrM9d?@%$#WOs$3MMTNORxqYjJw9L9p@93tpA&*|81Z`1-H$?A`#1DvMyyL>^9H z%}-U2+KHR$gy1;p&+Opys;cmnZ(oET-g7=~JS&R`KSgRHwtHOgSffrtX=OEP7A(Yq zMYE9=YYsn4m}Mzz&2> zUl3o#=VKa>F^jHWP=o3@#Y8%p(NpXR1w0W*@nM<}mYIz%VG>+sW(xxz& z_zO8lt?&SWOqT<>(S-0=9Y)`{11*nVfu_f}O+WhrTAuqq zxOK~su&5f!*m5Fxdh!i&sN+&-PNNehK1vg>Dv>O_r#0^!#FmsI(C`XeL;d6y$PdYr zpsTnHNhC+|Szm{><}_+va_q@#5Su}|8JiHuj*{9yZle5RcymA33z+!m4zxZ_dfM0r z^O6f-w2;#$J^5{2@Q)4&w<@Jw^>DehM3$q5L^@Q>UIf+H9=OJ)XdO*BN?}=fBkAJn z^tlz5*>fYd8#;i|w_iiJ@arVs_0U=r@DEaZ2`MSPYY@YK*ns9IzkzX28Io!iMcRtT z_p$xx|I61%SC^vocXwl~i;3wFoK2e$(k(;6*|#7jF9F`#?c_r#M~McC)Mbc2{c9w{ zH;}UKT9`7kh^R*NCvi1l^qudb@iEfR7d({Yi?*Zx#aqzy=%r|X;a9K^ zL~h?pXmaV=@dLE|@^Uo2y$iZo>k*Td3OM;JSe8eqegy1yClxaJmupIsJzmHVwlEw4 zx}L};FZ=P4XTJSEL;I6g3wGB2m!~1kUIRT%mLx>dW6%0AO&E8e^A~r(?yo}9%JZNw z#zI+gHT3dY1j30>n~9vOXoA3`RYm0neQ@o10`0%J1g$SUjX>5-NUkg(IY^ce`9d?1 zw;ZZV_kMWE?xti45|vCN!k9w#*xQa^U|JtvBdt&P}Go^-6 zEBx5~x9tcUb5L3lLoD3|pO-o?u|HmVr52&Fh)CecyeU`8=OX8*hAB?X*&{w71t~=K z1XkYMg3h>XUtXOL zkCz8z(ia(%f;WGXF8sn1f?@bZ`_Z!ZT|9EzRXG0~YUgv##fHmo#$R?1z(<7YxaP-$ zBX>BO{iu{G_&r_>xE(MOSyqzfd`c4*Uj7Xfj(vdNy|NMAw!l=Ml~UcZ7MzXSzO)p* zzrPz--1rMLkSxbX7!y6Cs2f+1(@utkMg)a|%Anb+a1e0M5bCItu3_S$OXuAJEN50q_C8oMsXvNmTzbn*H;^$wast zI}8IOxL6k+f; zKf|obuVU6|kK)N)HenT)3uN8!wuZ?)o|6Yk^X-X<-XgZb4x8fyp~wbgN^)X$7dGt} zMB>7^xM_i!%r`)G7KW1TjAp||vk?igG`ZjoMR^1$JwLF+PAbR)0O#v;Vsvy2J70MX zm#zE;)$41d-#f7GYp-K-H{S;llyEG_9;Eg|c;ors;Wxj23Qzs&1#Bgo;5$8$BzzZO z0=;88WTonOHwcv{fh9f-=3oc@`usC^>Zxb(;@$z_>Jx%w4BN*s>ZJbt?(gxdC#kHb zh|vDwWo+-55cK}{fyNW59TOivi0)V3hi1v8Fhx%WU~`d}QiU_)j0?Vp%qt#8Qq=-z zlM;oyC){K_Ddk&K!ksAR5ZO)uO0|^q84vBe8<26;Pmw%t5e#J)BVpkZs7*RZJs+ay z7w6#McTY#>_RR=(Ho$2c#?&?-IkhDbwa`E-yyUdyyeh)NDDq&+&4KISU*Yzy@gCYstmcB2(*Sie8?`ZhEPFa5B$wPLDP2^cy;@5jzRSZ> z)0i~83EjWC00+Ol25oP?iU8@s-*y0gi4z_oM=kfSBpDW?_PZCNZ|4pozmuee{R$ua z%d50h_bEa`rIC$9?1uWf(BGp`6vt&uY$5@9kiNOxVp)SQU~KYb6hxNfVyBlBohtrkJ~97mCuJY(}$1y z33_?YBgtzy8!?G37J3&$JxqWj%9Px?}Ze>DWJBB#-i8a~U$PK0t$bU6I!-`~ zsxz*_Z8u+n0wOUyTbl$A3==f_?y~!knwEn^nkn;Pld-Weh@-|D+24WTm_#IJH#LI&N_4TmkmBCB~ #$jL`h@eJhWWkM@+ zptpO31}5$>GMa^Tp}yCNg8U@(HFZ;Z9zY~e8{&{vSd5~=JS3Q980hN5$hezYQX)Kh zJ>v8tDX$!J3X3p+@3`

    `7j4Ur*X4-U!4t21)$*d#Nr z8X_!*F(DPX1%+e-MW`y9gIsL@9pg3{{K+;}-H2;ybZFXp2=c@{$}hhImEiod zs?q%Cr|>5t1VPR>qKe}pWb4P4EnP@lzY`$pd@GJc6MR!?jROjych*k zMtNyAN^%pRS5v1VS)Fz_I!V_h)w8g$Bn|ng2B8id$K;uxROOGH9fwdFQ7QV)glD{M z0BxP4uoPxON8w)bFug-E%v@NG;<6l+(Wg8=5hkrn(9ux$Fvhg8sIDr;g3=73tjI0a z!@8ReemjRHJqa^QvyhXhM^ai6DhlFYh|113ckIzYG>P&wP&-;tMK;DVl$GV8EGvcv z9zQ1RAr#f5k(0FH;}82W>*8V<2gfl28pLT}^ec6wr+h4}s=?YhMw*!MzDyO;3Nuh% zoQkw~9g;GVQIr`Y$gUu#oHH{E#d%g(<71JNmxA0x>X+1xTxYJABxFb1{{7fB5r@U6 z%|%*h0)u0IWRUF^*38Bi*3HJ6LalHBw?d;uW?mXf^W$KSH6opCuqfLMt-^u2{oPO| zaV5CQXVs z?44Ct99^`oaks|3p@Bw%ySoPu8e9?x?hsrWcXx*XAtbnKSbGa|} zb*&mTMy*;k?VZmY=K2DTF5#l4u)-TJ+9@K%_c_v@!}6YKa>NaX86p;LZw07yApFg^ z%2#Fybpn~rDnKBsS0{%AQE^v2pb@b$9!lt4zN>GwYZif=2VDP`q1X) z-*eA@qiQHTOPd9D$l$U!?a4P>QGF}f$2=#Te?*O)+wW~H5MW%n> z7bg-%(6^zth}e~moe5zf2?E5Ef8wm77|}fEc_9%|HICeq)7$4WH`#w8_J0$-ZfgY? zUD^ZzqsQp=6it{}L!#xQ=Eqc3Pr)_ip}dwnuH=mth{^5xo8+bx*7-km;VK=-`pJZ6 z*JfOy+aH#Xi^-E3#v6!?5$t3+TpzAXS@RGbmW>eZ^9?d!f9~K~f3P08{vJLi4~ZM% zzhRTuS7M0O7Lu@*4-%{-UJCkBHEN8mY{k}(Rfo2VZU>b68BUB!Aw-m~EO z(tseS9?|E-?sP4gFK(YQO+hs=jG&!2F)YR5C788r;I7u)~ElUt&mwN>RLsLR1MV86g7h`}r-uif|r8Z9W zOt*1o#3R{1m&d9uJgIho#%1?26j4IrO?HrwMbEv|*9V8?3EQN%2i`!MDxyDV_>1Lc zG{Kd+U@d-0-|TsVi05vKGV%4K?G}H~6%5Js5{Gnfgz$IXpC2w0vXT&Yb!i&r+@amI zWakQRbn-mks~rYlG1N;VFmSSA#}eB_8Md7{lE{Nwy~RGuMKdss1o_8bE=-|(_Y%FF zVL4d56%~BG&~@GOaz5xSb`wk=I>)sz=bsgXq(@8AA}&>Tc97v2k!*2A;cTDE`hFy9 z0dq6tep1&-kw1C5mo*1k|T=_VAyvM$`G##Oh-Mr9^~#1Qe;*+{(UBApuzljm{q{68(v?LnqT7sMw>C4tlKuU zU0O!V`hYkxVH{hin@K{logh?{JgAGC{X{l-a^9s`gZsTew(X|T?!Y|EoqJn=be8eB z$6Oo@kod4zRtA#PvhAAe_G;^_CKKWI{K{P38!3=cmYWrJNh@$j7BMLpY~j$Bm@hdu zj5eE03)1@6n;P5$we$J=0stE26iU=ueFX(koGg42QYz-gDoOc=GW&Pa0oa(o{73fU zIYU>Fjc9I8MmL?hryx}HdO4hXaYgNO5_=YOe|%Uvax_*XMhc~`)YR$c``$Dbm|I=m z=yBK5!WsCkaT;`Vz?G1Id+F2F?NdyE|2!R6g6|VGcBaIy*VZ;^zIwE2kZNRAJIXK; zYVMi%X;JQx(x1;8N=?##=J;a}mE*q@Y!{<3D#S)s1U&2i;Elvy*kIzO3>g04T;7g< zK)?K_;!JWmowU^d8w=~_#9*Zl$_)3}qV>o^)?pA4L9&h-!qPN)kmxuhyG}R#rD(y` z5##SD{>}h$waZ7E&q%N=bG6)b;Zj0aXub|uDfMMcSj41Ksx)F%QxUvbgqB7v7)Lgo zCNWb~yaEwm1j=IvQfXD}u{yj&4hK_ILiKh+&0>jvq zn>NAiyD)I9LX!6M0u6Aa6v*G4Ekm7dAHo^Sf>=v&(e7BIPaja$E}SwC60feCzh%3M zn~jGtt#a2e1#=W7xl;_<5iV&ywmA8ljkvGaqaXe&_8B==OEf zGzKYVkMHN-a)~P^DK9QiMmM@jQR-lsE6^odXOj26NBv9%)f!8$Ux&GzN6yn#2mN)! z+R&`Wf@arH;}cDvo|nl@h0cIEk` zZkZw*y*C5MOh?u{5jI!qOe2ds9_s~~rDpMWandpsuvn-dVItN~TF!DK9ey>;fSE9n zt&x8`Qal=q%YklXMIar)BjQ}F*2#!mztJl!~SCHq;I7){e(jHElgb@qxAK2cS zX8R4p$bnf&=BhveWM;_&?L7Mu?dCDFa1>rwop&D+Xshcma35%gf-q!R!WPuL=hOYS z?t=Tl?mK0$w?YS%avh$PS%L~)Y-pP4nTND5QGMwsg4SP7;!!OA+cpf#YZkdr8*{QQ zBxW;X+y#XST|;a47i^*DdlBDV_E(#IkF>9EvARTFv>P?Cg5NF3V8~R0dNdYx{!N$r zF>NXS)}rcl4UISfDxz;y3_$NvkqTXqLn&C!<^^{4Zb?@pVK@|?yUM+&s1|51TII&X zMOw$$E+=6@&4wB|#Y=8mv}nH&vUaQOdW$^;Lk4kaB2sn>V?RhlVbi(8^eBuKoZUEQ z2=!i`n&y&>1;GrcVYeXJLhX3n58Xlb!RFiP#HE4BqbYH>43+=(VV8Z!qgSd zX}PUYZh=8mk4*!^&6DKUgG@Xox#WO6%A+ogGC@BFr(opk_}AltK-*-#fuvtbTN>!Y z2|p=%8ctd{n1r2%RlPLy1O*JtXTiaS{B{07tOl&4O?ABj93M*Te^G~fP9{E8S=n}c zp>`@wBHWYe$k_b!Wo;bM*Y!o!!FdgZyrc&`IGDIb`oPbvNE?nzQ!}f`d6MY$z1Tu2 zJPY%ohC=QIHV{m0_*zEs7AqN`Ks!gGzpX8dotqso$c%N4c=NQ7_l&Zn`@V`sltkDa zc`irh+BEv|_}^i7EK8-;vAc;G6t+|ewPYYRup9L{DY|~l!kn@u#{|b-$ju}KgVNb2 zr_#4fWT=wsZvpL2xA;EQqwKp}hkQonOCyeHr5%voaOybw8sEK@o!hoYO-Jk&_Z!JR zJ!!iUzpym8N5c9D)wSU||Mv{I?U0q9BUI2j43!UabP8)sb%W&F#$>4Pf%UPp?-Pow z7jkv0Y4~p%WYxE9-xsS>p-VUKW8!1!_y^u(n`jH-+%6M+>;@iHltv9-i^kT*y9Aa` zS&Tkbi&H_5u%u03AGMM9%3X%IoHxDb;%sE9Xh%D7p-So{UC3r52uw@%4g*jLqJBQN!rQRHwB6{5yMTva%+rf*o3EnHsc z{Z==Ix)h*0#q|9T5=@}AV)ylXl*K_DTkdkS#Mh7)ZdOokC3m-r5IgVq4pgdUVRJLM zoWgu|&wlfs(l6-mi7Re~y13#zzacCCi3J|Fk#vKWkElE*;|^6V;B*a%NGx#T1N^LU z@b>ELJ{YpTL62IFB?11#dMM?yJR}ksV2+d95VvXK3;;!KrV!Prb{BkFM-zHt#LmQ5 zUr#&0{YIScG`xnXbEVxBIwYVfNMv1sBPQ@KUl{q$q|hFFE<@o5xz92mzYoso6oAsJ zFu$!Gj~3klrxXJe!4(;v3uebNXwF_(`2Y_I`!Dld5MCp& zJf9+pA5^NWB~6pQqpp85z@BW{e{b5@{G9YUs1l^|^GuD!_NH~i<*K5ljDhqMBQ-SF z2?41A4W&nNYOod*>6;nHtWt5p3r{^sk~L9C?P_$=8uIc`BaU8S0@s0)>@~Lrwl_S0TWFm( z1x-I1!gU14ddX*g?%}6I%V@1H(HIXtC>8|zP{fMX_=DxSW5Xiakadytg~;n2xkjh z7OHuTrd@y%9nti?9O=+sUMR;gp|;IKH-1D|liIw5X!&uK7ac8fUJBnDf{qSe407^Y z@?m-R_llrqa*lt5Aoo^;r|dP}H?i(s73Y~4zEI#>A6xlL3LIZLTz$~`K3%EXg5vix z*v=h;OUBTV{V+ryN_NX4%~^pIwJY$>pz5KkXg3Mdcf7-?l+xHejvdpnpG>{CXWbRR zIjBU;IOgcn@ASYYEAhQRRh6K7#y|g5BosM+mQCHah^OD#4AHntxuIUl>T~)qjxnt~ z{|I!{ZK{{@FMCDXbf?gx8FOA(<+4a18m*0XO^CDXY#UIL_^QkWrQ&Hwy#}D&zbh~; zG%(gYiuW2>rTx*Vd_#G@CbJlX+;>;rJ9>~A(0a$CTdIYrF{MB&*+@%9!k-4TE;^DKAY(tIe}f)|5h$+UY1=I0-FOzW+puK_R@3@v zjbv~3@XYUrHpQu^c1HS#pROUa#qa`{#fpd0KH7vwR*LSh_CQ)&Ke`c?{Ykcsad69p$tD6~LLs4X z11L2vmh@fN&+)70qfs|R0>i;q^kn(Gds_T{g~O`B-=yhHYj_lUTIfZlbmdz1mOH|1 zM(3~W$k$xliKm{Ml+z(exsas!ILUb1VYyfj#U5O`I_~cqbHabvP%<)))kuS~6aoxn zoa1{?CyT?kKqoTr#PuQ3OG*1gMob^3RY8~4Qu`gF-bQWQI5nrB@MA`^3pBFy1Y`nxk1LSe+&4&&IHDr5vvC;^pHWMDVJq2#)3u3StgNSdh<)4~DenRYs|!2)8*T#KBpmg2jlHSV4 zL38IOXn?_JDRiTOC0|*p_MI>qt`=SJm0EUQ`rAaL)$kUFEz;Rn;xU2_$YoBt9fSeD zv#>;oq9{^u<9`z-B(H!`l(HkHMl)b-^xq*|t^VSeoA8ou zfV4hM5X-iCPPN-3r}ZqdK~Q^ePp~*bNKFY{V>*nIOi|cRaQ=Z#!$4O^wB{mXCz>*E zp$|ZqmhCWoRQ!u7f!aKAp1UG1q$cw4+*#fqH>*m8j3BxdY&=0Ug*YHHQXty<8VV;L zMo;M-i*S_VM$Gte;gi6kQ8q9p1YkHB1~f~zCA+1e<%-iua#og{#Kgl;9BfIcI-W^! z5mwV{!;WpyKv?NdZdAkmduHJq!at1{GjvV=vs59tkb6qR3l4!q!S82Qe6oe z8E$(WJ>(B>-+rSlZ{P8-cm7FLgaGqV6^1cWuqrKEO5U;Ic%exB?Su**ODzmDVG2dA zPCB?$TtxooEHpbg0$PK{{8=|Jc;Xe|&+#cZ?)r=a_doC@JXIWsW4EjA`UCqEZKcD2 z`@LLd#D<>==Lbnh_#1ir1l9-h{7B`XueSu@>h)$DFY8c|?lb<^J6A`r`&*!GAij*I zVYxPXg-99_TM9o&Y5b!@GU=&5_By>8ozPD@eXvx%qnk*Irg3U zlW;G6+*PxQ*+~27nT^Gt-O=-8@lM&iFh)7-e2!$Vr$lMNxm<$0IKM+V`4PMH;XT)L z4I=Zs;o5kP)+62~30mL2Oqu{Ox_CGsYiknG%k9u+*Y~ye4zeic%NxM6&~=X3$(`>1 z?!P}nKD%# zmcr2Plnz;*Tfzh(S$``5(JgjHssBWq+;NZrNR)R^w5Auo?+)j>sU3R8H%af&zFG z!%2-_{9^iV_o$jm4D+-A9NkQ3k%muz(Y1e<#1${jM5iA^D?WJ^EQTY^J_vLtOdjCw z!3-PBeSuZOFRuCb4=yn;OEI zq9!0IJR%8L$tzyT3rcu~II75fLwLZB@-&d%$sIkbI+laT?FK*|4>faopgf|$qsT)7 z%zeL;Qub8;mX$ojO`LfVs^X}F+-o_vt*UU0Vvk|lmbKEO57LafLa+~9*nWGr@W#a6~=Zd@fH&Exb{^;UW_ z+Y3JsS^?MiQ#}@><J*fA@6o)7vXRi7>VcFbnkeKrdL#plXiFDM@y9Gp z$)Rg@V;u}JS%29o%|gt7d-lET_wUf1hGl#7&a1x_#0Nk~4+TWYUfS#jAU5`0%J9R@ z=Y7>&{2(B&nR4E@2(6<9sqLcF*vtW_%05_NwH=>fALP+QBqD{i7tm{|$=+KEqSGc& zP(|qFSPDBejkN6VV%1l;&9(?!5en>hb-EuEp=Oq{HDmfk2#@cFjP&%x&b~>vtkaX2 zj8H4_5i2@deKN4)w`eqf@MH#FylqS%sHK0bx7!>j;s3@Ud~BsvEwB19K!HVWaKBgF zm`#?#Xi!-}zSPxPWpJloAbPw5(BvyUr~;R<6tI(we~_|MCDLQ{jRKN4JyH**rK1)9 zlZrae@sIS#LGBG=d{6(}cXvp}`>>YnZm|1W9x`(cp6|qBI8p=u8Ay)JES#P+`UJ;l4Lz+{r75oUb4aLpUcMo>M~?V zhlmiD^8TZH!oQ|f?;=hM*PM>fWD52#1RB1W#~*IRr{lmA;4#{D;acL}$(OSfea_w5T$wzc+ej@Ec&pI(fW zu(T-b6~t1Aa4n&OQn}?XbmRlTo?P`7m9qjsX zBOpf)4u%IibA~GX^d@gN+%d)n@BC@QpJ(CN?#lYJ6%u#beL-TY_HK;wC>qziK3LdH z@NbV3prcLAXvVDpuxB5w4PIAg04tZ&f(F7>kRp}DZg|-pGHlvU8{&^50#StGoisY+ zDl}XE=(aR+3%x_){h&`j)xLLQmN|7s4!pJz_|mweJj?x*Rl4xZPTeXf$%$SGndu;s?YAi>=9}IMj3?O$eLcJQ_A*k z|1gKltp|-Edlyt$n2x2ackvt%eQGB(_0t3INIg|mG6qCy5p6^nw_sEdvUDXr$b?_q zn7_TU))?2Q+QIE*`;pi`K)sj^+Az3SRLHFlWqcko?x)ju<11O9a5Wi`(!g5^+g=kY zk`LpZ7{+baw#?KdgkvAV{?5d}v%sH!7h%^jjL!PqL0no}$?`eqr*xc&O^-V^H^*Gl zUaXDN?IoRVjRkL=osjzSK9!{MHrJvSLj#=7nkOdfFAkIjUQ!H@-T1$z$Dbdnz6#7W z{y>VjJz1FD2@vie*D>(t85cRJvfoenVNzUzDHZx~e|Vy^RcA%UR+bSK$&5(aFmK*_ z6zt#=Aozuo$$86Z!-T??yA|gp_}w}SpGW4{&Sh$O5RNm!X4*Ja`NscP`oe#dsdwOi zqQ%W`f%4FH?%4*lV>hx-W3+lCJeSdC^bz%hhb0}9I{#FPsbCR50&2wdu_qFSR_5Vg zzH{9`w`*?{()Rk_+x*OIoCigvmam2bC38YUh_ua*RmBEu!ejv`3e+XU8M0x|B}ALt zhGc^E7YFOjh&`e$YdCR*%^wpMu4yTK_9$#uTQI#NXqEWO4ZcR2QVi>4hkd!?G;yvo zpZOt0e8ZsLVGW;(?|HuDGEuaa6Nwo0m1?1#>|~r@Q!CBHcH+wOaWRgaln>cvzqIgX z(vQ2bzUZQh)%JA<&*y%Ptg26kMou6guHiI<&6}XZeOYVJ+K)t4`Z(mbEHbN1J8eL z4fB&M2_bm#9GaIqAav%?yEmrqROJSv0{kPbSfKWG>sY8GRzpVYxu z>#N0SC%Tw#CE4FC0r`viqTl8SZKrOM@jW_Lxaz*QA-duaMUJ)DI6j^(ncm;OyeKVl z95yr7J3?6XMF0L`?$cfNBPWeF|GQLi(YGr*`+CFp{93QPpfw^r8d?nt%53%6NK)lh z7bPoD$U~2*MAXM>nBs>f1z0tILZRM>>>mEJ8benT<9W&F(37eeqa`4ETzLkWA?uab z!Mn9xhr|G5son~s)Q-J?Li!?Vy}Kqizwmv|mw@NPS^h;0ZwTIG-X<~}#G)vV2c z&gZeHg^r29#iM!XdyBJ0Vu^`HsiykYGNAY587j zVX3=ao>G1_8%P~nxV{)zSYHZ;7IMy>yb>#)R9cmOX+T+KCKd;e3O+jq&OtYn(Ax(#>hl|Es>@k9yyJ0?RK3Y zwVz`oflxOz$WUW;JV|-HUXABqw-`d`fU$@FRjTjlV>>H`TVqklccHcQDHKaJCI_RkTo+ z>eM~i*@WnroZviXGG2swGv3jk_O^@Hu(!ZR6tSlV*}=4&nB542O`Ns{SZ+R^MCKdK zeK5vCc)VK4ces>>L&z&EfwA{Ud)fFA;P>#ED--)z;!_&>zXt)e3JZWp zE=(KSgkTYVAEUV848wEVPeK{~jXo=5`p;P&o7=1P#ExaAyx;QURHbEp!?NhF^+ov? z4Q&OsTOI$X^8?ySiC9@vWhjKjumlLnLm;k)H+dU=i{ar2d$i2a}c{E>68Tn?gkJ4yLgp0NC)VTES zS^fQ$o;RzX8MbHQziFwvc(Jc72mWaBI$pU!ZNOa|8CQ^PW1UXTt){Gr@hTAGcEjlI zds>xT9Lxeltv#Mt1c#kZku9?)XGR#5;Bqp3O#1YGJnuG_{&gKtzbqIM-Ia zRsIXDYPgqKy4TYMso}f(_{LByY}OpH@Q_$mWa9=!i*Q7bk3=#`Hua6B<+E72gmKF{|a%qO3O*5Rg_XGL6$#!xB15PsH^TUnHj@*zGo8Kw`v zmS+F#s!J6ZHxNb@=912gC9r!1IJ1$G@)jE$Lt6|nHv^dSP}zD=;avCdEX4VF!#plc&f(F$H6>M2Tx%%y1=MBdD61%Qe1i$FlI-Y^|52|-a)}p5}y@`gP%x;5(K-^ zEhQT9%<N)y7I{P5?li?Rd$lhXhz30I6OF z=q2x+IXLC$<)73vH6V`b5_K4h<=`;3uZHJR+JWLIpADH`DEjUXsLafh3hIdyIIl2# zo}TWuUx7a8mMNt;-?qH)zJ(u7>T)AH{Wh9)i%A^+u`i4{OIR?AQA`F`71tDjbI-9h z6$4;mi;zckc)>lzif0whRN5(x+rn8yL6pHki_aBytj;~y-gQhuz2M;F56uPyZPpk3 zvB40mK_4r{RAct;f(IrL_|+uokd)%fhg=2=8{{sZAddMLQJJ0Xhv5XNF)7C@WD`>! z1T9&F^703z!nYIO$)Me;#A8vM4$f@+`d~^XiPOV!Qx$S8FCQBt3=wxmdGv@WtSkX$ z-qY$bD}7WD&7AZMc}&bs2B=0`Bz~QByH__5CDQ%^_fuy)@OwTWX2oI03xE7K#Lq+w z>lz1E49c(P{`F^WDta~e& zm;7CV&vz%*W9Obt(8Ix9X}Q7s*X=KcU`FJMkw5dTYc%_wh8G9f>c_gX2~mUXD*_qc zS#O{zPfg7h^*(*&hWJzNXV-wsfIb5LK*)KLNzJU=OcyPzwm-Aov z*FvzPI|ogw`jO6GTud)c_X$T2L*jRw+~Stog5yIFNd<4V<$N*N1Do0vbQ+-QIoyqa12Y#mZj(Mif`j`q%)wFXpcsFLFZWAYKRgbHK0yOn zJD;f*Ee2&;{eoiLnu_QeI)0BHf`zJRdFL~~V=EU4fK9;Xtzh#}w%NQqBf1{C)&l1y z{@j)GutO3@r7kj1)?B%O(9x<3$Lj4F}g8hQKb% zCnb}0WQPJ{oyZ$9*8VMsgsqPynV^B+Adl?Mj2p#`+d;#3&=*ySpyZleet-CXXV4kI z%o8dWrWXho%_21lj8YU7%P8#t0iNMbefQgZFH z_1FBQ#jsz6grb6*r3rgF|%a@WYoc zR6?~dA$m?zCvX-HE8urgmlSw<=93ASv#-%dpfz4oA!!zk`NuOMTY4DO0{j`l{-ZMU zrQ*Kn&~%9|e>rj>~zWiG1P>&96#Z4V?X!%J5Zp{>v2^-|4{CxrcP znsS!sw!6Ecau0!)k(_^FAq15zrN>ShA*o`N-7*Cg+l-l2HK5T0=X8*!MqR#uBaNEA zJMj0dghW5eL6#<_jRsgURy5j4EJK?^bY%Qgor>-QX1O+A!o)XTrvHu%aY6!UNAB!h zTENL=^5qN=BAplP;_xWycYDuv9+f8=o<;a+|MrTir;)bJ(fhkeVMgTuJa9r#ioZgwp@nvgs%_NZB+Y~gj%Zdncez>nm2?%=RmYDM&mHZSXh#dRaa022f?NZ7uuuHGLuo^}Ugzu@bK zjq+a|m&jLH&{X^+jgSJGjI43goW)l~?k7Qp6z<+To|M(_bK`)|&+0zkl}RKiDjkQy zvlFf^RIfL-iGV%u9=_-v?bESa1V>d=Y_J;RGzVcF#pEfB8W?q$2`*+eeJUwB`b~ca z0;9=o?gs83RQ(}Or|m?lZEa-1?uv3rG++Me-M`Yj$-V3ld2Z>fcV{pXb`Jrzd!i3z z2GNcO{s5n;b5~ceve>qU=}Gyv_r+Ss?$$iS{O%{?)GY;x(hSuQ&6jMMhl!y!e~zh} z?|rJ}a~}SZS`LkWR@^Cij{ayuxfmR5=Zm5yt@c&&bo%Jx;E#U@eeONU>D%otgU-jz zs3Dox;|!DrI~jAb1Q+*PZk6*GV{nzk9lv|$jm`5xhr{;x{vDP3npd`A3gdACIfzrc z(?jeL>2a#Hp3qm?;`)Mg6D7m33%lo6GehJ3)Oz17U@ByQ9X)OB6<+wYmra34tY7(v zkV@fq5U2^e^Q8}YQ1^{O_%RCE$tx6=l3tY%B;C!k6rAS&f^*t=<=)2MfU@4=3`q7t zLLb1M-@H?O0aAKyzzU!D0Jl!OrbGT9pLJAI^b<60(Z{`zi?!XE4PsM3(scMEMh`FN zH`nsSVvU7g`TcGWRu|aWfTTuVbj$G%6jqD(o*ch|a<9j{o=b>sz@;1@6c%HyE?qV`;ZE+gnE$l{PwEO1plK4DSOS!zUsS z@YxaaY}gLTubi}b)+MQs8Rks2l`*FW#GoGbt$_K}M>pYfZ8_ITi*t?VS)GDy#e0Rt zYE)NOyB@CfHq!YuNBG~Zk5Nsh4agVnrD2!CEA2AbOE}|yE&-U~o`Fdq{5sQt5!KC( z)&|hoZB`X4SIrUt3@w&t==xP?`|J7f%Jb!h@1i%@cmR6IT}*5iZi~1#J{h-aW#mn(;5DE z=Pm4Wy@NDA63v2GXkhGnOT-DEV}3n$(OhvdwTR!E zGt$$Hg9-)qH-tK0@zy+dRqu!Tw8}a*uzcP|qHszt@XDhkc6qSPq`Z)G{ZH8rToVj5 zNG!Th>wNA%t~{35IKA97ZU|uuhpoC}g0Ka2Yif`Z zb7QP%x9E?3X${Mcy)VMTI->wzCBc=05Oh|77pqwgeK*D}u=;jdd1=97dcH?$T zzO{3LmB*Xbi!~~zu5Q0*HL})BqnU~r zVE;W1FOpcZB;M*p0W9_JMt@>n+}NZGwDe_O$&>ZqNBA)-V$kYWu*51SOx7%dO@pxW zNNyK0h8z|}E>fZbVH#@DO2|~M>7h;%ZG=1%V7)0B0YUbWokPiDo-43B(C9kR&Znjk z08c7%>54X}F>g9&i|GD*Lw9`mh@&cUA^PZ|+7n9R#cb3>TEW^0-|74C$Mb01jlCo< z5cqn5-BhQ@7=5-DK~3Gs`q(!AuD7qFCDw%zB?DYlzh=A6cHH5H9^4fh6vX3#dqAV3 zPFp4~uuT!%s)2_;8}>|hGZy*pYvml*+17g)I5v7lQ2$d^$Z^bVOLEt)++0Xlq!6Gz zQPbj5Y;A9ClG{sL+91mg)KqzC5eCiVMhjsaPQ#73bn&W(0rb((YU&QGzR7<4_(9MM zY4colyjmvvF`mZqw7F>?xiMexrdF8Xb06^>sr@#akhz?!}Zm&T)KLJ`g3=gfzc$jp?(W`*hK3 z11z#X`rx@mFQDeI2H#d`|%FJ)HH7`ygrEl(-ZniBBvP<8kpsmty z0x~l()J+yFY0PFn(pH9r4^SQZIB0@`OCSCmV9zVu*K;xM|!o++2OF8Qm zk|%Nty2UP6xGSayQU9VZS&X)*RcKNcHnWiv&xwStNHV-g91IV~+o1tS+!975h!yuu zBvQ%T^p_^ZRCdv6;vw>a03z@&S}6|?U?{x-3W~P)-)#~pRquClEBKd?3sQ^NT9ltC zB-7#?y=9{nnM0Sokytj40>1b<{N+6CM)YA*yoUD=W_xk%UIT0NUS2S|;_-s=2;!;bC1mQWtKGDa{$~~ca{niy27huM&lHy&>)L46)=1P<~m5o z#zBr)j!>6F@Bi{mx6Ya6E2*Sos{wloi|p8_E%8pWPQX%zj=b+T-S4+(y^mgwRbe_z z3TMyfN>nIGZoGfB>5D4b;VbcqSyZH2&hKdlM~5X;1|y_2Q_Z`AZ(IJ;tk|9S#p#}JiqrG zcX@oJLH)5xvj?$IBd-Z4zwejJxOCu9jPIZJP$Vrv!m&U7zXY_>4HM9J7x-6V-Dj~5 z)js7z*9Fq8r;B6X90mq~gqXDx^@1seR8_M3CoWFS2cn{O<% z^h7W(ve&%|XSR}cbQF)%nm35UEM@823gH>lz}yPH<11|N#Zg&Ckv;GNqZ}p+k4|E4 zw>LHx&Ht0IesDJMc_4DSt>L6qM5@}Yj9Hi$iOy%DO!=T)^rHrjAO*eJ+7HRLUjJMa z5D{pCv6t;mnfe23Gs)vEbjeRlfDeqmlWZqdMTW-VaZ9eLJ)hsgOqLrcJKK0GVdP3W zK2F?|m1S+}0`w-fu@L*TZ?2p4fjrAofOpEJ!|>-Hw)K z!*ByYHw`1G@v|OQY5>FnZkwt`gp)g(+7c!;TXLre)8E&e9sm#jmGyH( zA5RKH9uIKD=921UCD_ALN>sr5yAqg*kh%Z4`Kr2@3AJ5_cPq*8hByIideKZ|ZmJ}* z_Wg*aE;?THhrmrZB`8nf{8I*^&F=vMqU^vqbW8EI^?*3uQ|Zz%g|Dg6Tpd2}th%jm zBWWx>w!Y{_UN`W^4!}TYc4Wwxj50BCTJ{=EBG@?=n^!M`j!ofTpBr$rGGLE=PAHDQ zk-=P0!-g$Gc5q0UG0KMnj^C@|qd#pe(nfo5e|m>H;~+1~QFDRK#v@&-Y_%yBD+o;$ z{u>v{J9~qWAmmM*%4Qtk466HRt!P62r)Qaa%8G=f)JY?v7;4R2{#$Zxiy%FRN#dgv zx(Q3)G@XmOh9El6hz>PD{r$PanYn)+F4sP5Z_u#wXu4L&_mn=z`t~>vz7r{rPW&&H z#-SsupTo39(o7|CvD}12dy&1DHe6$9Oh$`@KX8;f!@jTtzmF#Ibo)dhC`ZG~C8%^l zt{?mHE8@lF*_v$Yr^xKX`ljm|^lGmM4Q9O>;-Q8Z&wrH^(u3{s^jh1I72^S3^K9n> z%2FuOm_p22;(6YrzgvpY+Rxs33_NN=6ko1~A-1C|k#bL`zO%8E-E0486DI;4#V?)_ zug-o|hy?sd_4BkMEUU`|9Q+(OJ!zfVOzgJhmSCjY-#zH*wtJcsT8g?Abxt)UBhB*K z(D}A;Bm((iDh3@Fo#k;gTiJXcxdY=nC|CQD4U8n@6po~l+ZSng?+?SR_Mslh>WlmA zNqJBH44IyU03)p$!*=+>n1t048C>=D)nGK3D<~LqVNn_{*kmWCg0rT%$_1uU`gh`$ zi%IImryToh-qT(=p(E2f1OVElH`70_8i8gF#Ec?f7-{PU2E?T9E7b=Pg3NPbK^qVA zt8sAjjGKnLVzuoVj`o3MEbH+~Q%3j}&a<5N)indd{PD@Md$;w1Ra!yf`4)Wo$cQc4jB!(DQ#QW{2W{M zYU7m}+lr>>NI6eNKG^Ucyj113&C7kKN|nzJqNBqKJT+YC=%m0CU7IIliFMQ^nklBz z8(Wm#+2)S_9x>{$9NJ#_;)wSzQPFjfnGvFg2>Rg{P5FrO$JQDji#2svYjPym%I;ea zBnta)c+e#;c#lemk&yF#^K>=JV|_V{!^k&^(7TTO*}ucCk~7^jK;KhFM~z>s8r98k z8z${bjrd0=(VB^X<i8>Y#*(^ni_+EcZg+_=zPKGbp26P>OAkEzJ%|ub(K_A8$$GE1EOclA2^BT1Dh) zb2*y+V2xhdFH|BCdB482Iv3duklk0g%P-hd&4H=t6(U2G9n6e@F-J+t-~bXm&FOtz8V^0@|Vnv7s zE@b(iwD?bmb`fE&%Jw#P8+U7(T6UaZ`)AnAM$LkP*s~BZC5lXx{PPA_()&5Vm~%gA zMTXIq97^C=KoMOO|1R~XvV3spj+=LE6N{T9Bm(2m+36p)edsX}-_|~|RM0A8vV}jc zn1PZw#FiFL{gZq|c6_IHLXkPB-@Si-Q9vO6tXw%LJ5;FvA53qgx+4#0R>Z8#42N5; zNt<{!Tc$6ReS4o9p^5grcOIwQxph$Q>W8ztt~JjMrvG(YThAAi{qO2xlRp($H^)A} zZjK7(iP5&zYSNTO07@R1pD^jWd!>u0C5L?n&p-pmG#SN`t8U&?ek>71qRd9RtEpoL_Zt0z>r3c>;V7R9&R%S6q;-$6{>1MUn^2V1P5$&`BQYGg z-E&JgEgx@_Q&WaStxpX*DP=Q`pU{zk^@Uc9eD)~wTn5Z(zjSZ23_+cpFWNLlwrM-z z^(wW|>?VeuDd~6n;wq)DOEqNIc6y5ErA{UW{+`3LD8{JpyM8{vdhX@_7dbIg^g%&O zTD1N!Ttr>Ps8q_+aTkSMf-dpcJz<t_ZQjOGpA>&y1Hh%={nST${poR+W?Q#-#!iAnLe}FWtTwS zNVBJ`@oaOiY&E|Mh@$3;kgHRRl-D6UJ`Rr`#csfi?> z&y&*{*PE_E6i7BLI*mW0hK?;MxIl>J!dVe_u$5G+>>(!(P8s5jirEh3&3#BG&otid z7Rh^&NOQt$Z{a^MY!MrMU4smYZ63~IS!<+nBl?n!{Qfz!|W#Yqh@bjKvG>GEHUGiIl<(Drtjj!oaMM?Nt65)T1J|K zAmoahn*kT|#RXn2UhbaY<<)J=-goLdRY9VY^Qxi97Nvtp3fVS49!SVlM3YI@libQfhUiPW(`GB9@Wj{zDkG?lnS3hD3&R~v{_{TC^Hb_ zFx5#d6O}8^b}b>Y1#sxS>88XbA^vwUw!2@6D5&by z_Bv`2<({r#TNDE2$;@>|ln~qh=Wb}urzz(m#K^MrN)J&b$j^%3OHLx~eZ@nZ`;zU} zOC8G%A?Bj@*1Zhg$LpX8xb+5<2ayjVp-G7Crf9zl^*`i9h9WzJ{~)^m-TrdND?tt! zw*x6t>X`f)oFK=@TRj0)>gTIq#Lx28>id+zcR2_<2ePuG3>Z1eM?uWVa(tma+7OMI zKChLo8_MzWU4FOuqYMq*52?&3S|a!N@@qbXrR{^7=b2E?Z1F5MnB|Rc9<4XSndjTu z<3Hw#?xDdB-e2`iCcM1q3%BZRDPxN2?6Cr&A8DAbe zo=@v{#M@~?8Z%|GzbkQyA6^O5sCRDEAWit*p{`yI0{0yyNTTqgubYr#sT3P8xp{B) z-5fkkKl_vLQ`%vcKhD!@C?V6fUP|=(A>}zzd@FCoyVFyWL5uKfJ-IhHo()%RJRMOd z<gd6-7491fo*>O0M@lUkcH~k>6~` zgjf|%3|eYG;&Tzk6qb@WByu|>E-li|T|9XWSx$=#Q2dBMQ%91WPd(z*NGKkn6*n$H8~?Lf&jbkW~cvww$6Q+Ew3%(qCiDT3-$aEO0WuGiIY&l^ENf zw?*0)jCU{3sO6Ayz%ai;s(=J2atwRQ<8#4mkS1}6Y7?1};o+JRte=?{7m$jniJTJY z`rv`@cFZ$=G<~vESbSt=I{i#EJA9VQZ2r?QSk?cf&ZV;H!3HypGMd%=(|oC3P|6{x z1_dE}-Cd74LuXEq>10y~vryn<$#`$~mywu!`>$q_!a_#xuXA-RPQM9e@_o8e+cmoG zM6A7*?bNErwNkJ6Dy#a*F;*4Z=BUs8StgB@2k*iu!C)#4mORy1vB`)ew)Mk4jtj8_ z%edCnr&3*=Fs?qe#pXw*(+l~QHQKEi5@8`*3W%XDDAU?#^@OMRmF*%~qk7kxE?pZm z`VlQcWS%zMiNxs!VyF2OBo>ui!qBrMZJt}o3CFU>^!a{g(-7y{!9&Bh>yw6_CTJR` zY0}GUa*x%ZAL1iC4R0EpkPG-ig46d&Gqj5n*9(wScn178R3V3MFz-Ul^Ry8*>X<%!a?xEpqKCJ$kRy4%wT9bh>D(G6vxMLW-B{q zm8~kdNY9I5o*@O;bT!P}U`F!GEKisgP0!lNJ5V_Kh<-4g8Eq$@RZ+9%pAk$oQXa8S z#mnKES6Er(e4nS8Vmgy}=``eena4f`jYjrFkl1D~iHg(>;qI|9QM_2e#p zCK^voe;RDSC8@$Ryb1rQQJa-E*xRI0Wx$_Mt{WiQ2ct03&6JOk-CQ76q<)hlnxq~L z+a$w_v3n+@5#Bfoxkq>x)uhit;0A`EX+ChY)ySmxC|i0^Oj8pFrBR5y*J5!IIZ-h% z0yK8k-~4M92Y$;?O|_T6>)Y3V&#U@dGjQx8irak zMD{0j3){3D>!BgOPlTQXjuKQzK2o@ju-oUiYx@22`aFU0;WT-c@!h{xFCeKkigqh{ z!G+EJ1xH0E2cb7Y*OsY9T{U+2rddRz2@~Z2+?jYS*of%t6!$HyWkrCtJ2{8`~w2a0lZk@ZI6^4ndaH?PWn4}I;{Bg;xU*4@-Iee{vH#pm6 zCyjtT_p;y9brA^n%;;0MYkw!;I}lkjUi?FjJ_?#Y2y<&QRF#*F7p zg8LgNSqqQ7!p6;DJp1hvx6KNk=IrT#EYFujCb#>B`>nZ!t#wDzM=O8!~#5WvN3Sh0N=?o9d_sI%G&<4PgLnK1LeN&#j%wFaf#}8tU&+t-$;TK z2mjqN(o#4Nj9`_UwoheAgE8Z2vuJ60jDk>=^50hvYL}D53~lZ&2PG0dVZLfH_I19R zT@M>YCl2>A2(^MfS5(5EJ;UkwT2YFhs{a7;{zLmqf zD1OAm!aE!!$Y9siFAs=Ti;bE!DXYBDqe(QjUa7g?p?#V~TV>{glYpx>R+KMHPtLRU=M6rHwXGB-2c(iGm%1DVcg(dY-)D-ppEb(0Q z_S;g&Z|v?u@QGOBDD(X^!-{6_Ru22XhN%LLbaWgu2x(*KU8Ejxs>`sp`I#y_@&^ri zpnmQTQ!yMfnouyBWoq*X4VV&42c|u(Li@9--{3eC79kxn++&SN2YG^d(H7qhmEG%^ zu^L`3?(Wy*&$^O-7DLOe|H{8^H6k-{$nh>9149{&IP5g|Mr`oj;b(a5yQcB*!07oQ zLw{siXAd-pzzJIlqN;_@anQ$W7NgRS)sq_cwm4$1r7=datN%&>OCn?XgkakEd<%5} zw#)3d^L-(2cTnSEgDuAiI2y;S=(t3}&1H<{|6}4TguiQ+e7lf1GOkN-@s&wu~ zItqmV^>CkN(Yf~{-g*iZXyQaT@AsB?zs4%Rtsdo#Wku^~0Ll;ZZ-c}0yJA|uEbkYd zc*BfZt$$aHNqYAtk^CR(`7!78GDv~R9gC)cF~tO5t&T#!ngyO0<>r;-=y#t-I2(>+ z67?Vv`l2&h9}D(Xf1#3^l8+&O?I9A4z&xyks-K!f=i2hlNknnC%fu9|*(GIO_20{U zruKcl9$B1cN8}P13q?ML*k(UP43?z9)cCz`YxA)W1aK9@pR?uIa^i?KsUYfpusTgSDj-LAi#`cqMWGEco-&v-MtgtJ=jA;xhmm-ryq zkxG?@yr5Tbr#^cDCp01VyAVTwN`Hgm&hI@`Awj;e_}{ul-%_KyVim(@<{5+v z4rYilkiU|TZ#oKE$qMo=<)qn_NfpuS@a^M3t|YoPUb!U@N2{pV%@psR10RKt5ju%OM5?1x4St!KSeP#ngwvJ*jN=ev&V&cwAgRHCV(U zEvK{<%+eeL?3L&q{n=QL!k^)30v${F)`gE=AitLkc1rk6ufyM=Bg|S z{uVxw^IWZvWE}&08Or)AjBN<{911zUI67YI`%;kT zVEwO6xS*gU5vBf$x!VVr?V28_T%bg=O0qF=w9HGd=Xl`fY&7 zD}79pHZksKX`J!QC!(M{X+LdZyJq7RkSIfqLEwl$YZleFQ@q`` z;0n8GZg?7Q^>BStG6;P)-D*cPmL7S$IwM4d+ZUtQHH%8A&C%A`{OC(kPbb71kvF+I zu+CTK>~<4VW$+1&HTT%(;EdOWsk4?s-Qnb?dZo7{B2?yvkhVBIkC$?i!2D1-76%$t zx@gAPKV=E;#THXMEVT)q^wtIEzGUtdjEtM!9L}ZbZtiW?wZIH|2=r0s#3}NI!^|=0 zX+P13d$t8Hda~xxHg*NODq-pm6jro-ui2FcEY|*1zpJ0oTajDuYq;nunJ}Fj{yBv;g(t}?E$3KcqR&{nO`a@CA&(@w(TneSbTh(bh>&N+kc5HpRj=QR3;t_5-&8STZV z3rG6d^B<)aY(nJLq=lY13%+I)x*Z)qTi8=4U7C_fm<7FzeBU1wvXfrUB0q%j?m(|i zKGJAr;TwjD&_(FEB4EkFTpYjLRo1HskC)=|5cH`A+f*mr(-%hU?5`+z^ucQ|c^l56c$5mHB*9)^%ZQSKM+c|%JuiKwzphUB|M zXke&g{%W^c_MV@Jr0IhyXq=)ugp+yfd>?H)&u%IH zkW0sNu1`gCd8yukh>s*!3ubEp!GY~0Y)>4CZ1&!U3Ek|OPm-T9koFbhwawgZwMITr z5(I}efNY2E8^67UW(b+5Y=yM!)?8pD8-1`}R#R#UIm%A=cyW~e>cW;2qp)fmD4C)c zlkq9ORQcb46Uyd{$+bFOmt>P2Fsd({4QB_+{WRj0};KBUW%AU z*|99Cr)$2mmBm1_hoT|^Shs&MUh3;NrwyC%EDz0Q{`+3gVf%3Wsi`S~O3I(06ZIXb z6LlSN)XP$2s#n4-B|h}!*;Hm5H!?}dq#_bfh5~xlbx9d)fuqoDzDSYPecM}#V!lb0 zEjo?IInN?Ry^X#aDcRMeo6tk~aT-D z2i@dSTgYx$-`BH4;^TlQS(tl(f5F*w(Dn5({7Y(N4`2q@>H;3&yBSL^T9)sI?Ja>N z8F5d9h(kvWW=)@lm3hNTB>;ZufRwJy9i6oxBApP}H&tW+o@=;|sF~mgX{k^+oa2y;e3vQW)WR90@y_I!Ty?lK)#x}e zJs&|KVb{?ODhPJdqa7q;{6v`XkQyXQrjqyu$oVNAAHvdSaeFLArg@POScv zcsaR*)YBfXMVG7$y`~y96@{77JX4dngftOPTL!M=Vhu9>)*no#qrAWRWsG!U;>tk` z{>`Z-R)O!Lkj7#J6(un@6WXjdT2l+&`3Wr!DRQwE2j!#hn8n1zL=eLNzJdzvEj0=C zlEM&TY^#hebw=4E>LfeNxmTaGCpT4yPLxuq4a;J=Ed3KfEg)y=0!GdHbHp`>eXgwT zepC-}UNhP0*7-BXb2>MDrs{&v4?G4wU_Q`{HMf5ZlvqE7F+aqRIa1jENTkzfk9f5^ zRyeyflF`<3fRI#`Ah&fK^#awP-;^{I2Z+Yu?=H}F**A4++Dfs~V9yP2Dyi6xrP!8) zBQ)CvdB*nB?QLg1&~fOuM~_ONF@`ZU$&H&(Z*|N2f}|7Vjk~yLHGI||WE@?q-So*+ z&HW$>aZf0ml4s?l$} zoFcjZ9&%X(=!}rx>FMzun;vT>R#9EDalGsydECbgXw-NRwPjFM#S59~UQ(BjEcN^O zy&kRJ>GLs_fXuHBHJsCFG1?xQ4+Zn0r@}+Xv8Fr=x*S$ek zoZ6zR#;?;VCAWIx?Cc6ZA3SaBU|GG$=(GP^j7jIci=tebKOz-S8)*}G6YzDI(05l` z4dKA1Sae8I*Sn`=^cqgem>yO>a%0^`LW#t%?>fmeSDR_`-tqGt&plekZgI!Foe#jb z4r4w&R#jO-x=iJ19}jTB(c$F#xi^2(g{PG3S{P9f6R#^H=^80(J{%=49 zZLJBywk&94gatzn$Y_)vfWf=JZ?28q05M?4nYlSxR}Y-zz>5&?!0O?o*fgnc;b_Wi z{2@9jW{!E}>Sz558q!myF&qWPvlabDNem*$B*n2hL^&t;!=osM? z_|`4@$T;@PKt+*gW#PE6q$UdVA%t_XOj!fmZyS>+vh=h?c5Ho^-(Ci^|3>4{OkK4u z@9<5;V)cTq<9^8J*y2n%*X3_4h~rZp=RJodmucKoBD-O(3f1N(Mi{;3%GibE)Fohqq1F##(>Ti%h1Qt{=D~1XR5ManxWbku zg#8_1tEkCVLaoW*(qDZhfmQ`c611?1%VU#vO60?9X<;*)H|l9D&3)lB51y>7{{ax+ zRyPAG`*W3;(NO$ovUpv66utJ*fo+BPQEtcY+lh_gF^&z$f$tYofwnhItpGD<_{yW~ zx9wd#JMfVkpZsQgegwTM(7RQHUJ^Y~)d=w+2!!?^21*nQ#`7a7kZHz9W%D3aNyaCD z3)x<0%%hBeP)2iw?dq?+z$<&Eh^C_G958a*3E_JZSsfx#2vWhkLqYfiLpiG_14cm{ zfDRLG#()EQ#e2$G*=Bd8h^m6%=uuIHnA3A~Y6cmJ4{ga+TWw@Gl^l!l6@`AecStQ$ z|I1M>*0UIO+rgmGYm?Rhz$HzB!yE<|8~-Dv@7=c#^?5?O6RAH0e#Pl42w5r;x_ZNZ zE<;y~GIN&wMA0XTj=uLh{Bg0)hBdP7!@fsu5`Wca@fIvMhj)^@|FpdjUXMzd$q)v- zoqN{L-e%*mZv|Qa_w#lVnH^U-3uIEhwyy*(oKfOlPh#1#_>Rk5rU@k-P>Z}Rn?95v)XXF0rvHzdE%n?SMnqb5bQ1+YtNAm`BOknLEt+KN zz%T{%_5Ddi8h?6nzL}o)Hv*^?I+?a}-qM!W(f(!PnCCDZ7QSQzd7C^gWRL)JpEgm&G|K z(QOT0Cl=#@2s0VccU_rhFH7W8K*OFIid5^G#O z+<>yOW;pHSV0q7p2mubd3B`<$JI|B$=g2RPN{gc1YBU9mJ85%p)Xu3@dArQ@lal5$ zB#3T@GJ3V~#m2viiU`Gj>J0?=`NYeHG&85V`1A3(6Ffwu@cstbZak98=FH~LAAdQz=)F8`w>Dluw}<}pS5$Ss;~mLJ zK(5N;?KcTpd_2_S7M5B}XGsa>;frdWW#Z9W5}WzHj8XCz%OlZUm-qPJ9w07@wm?-| z?$F=^?&>(QHRvgF(Zu9he`U{|pdl`Pk#VSh}>TxG%Bo!4H zBOpyKs>p{>Ceqrya2}i-EmoF9{x+Zt0kO?&Bj9y2Vb0l`VuaS>aJnG)$&*3hc~zQ& zm6K9IkXuxefT$Fph7?6Zdh~0TZXK2{HKQrzYJ(p-Rde@ zHCP782zx5$QJv8J%6u=zCNGt8Hz5AXS~PUjnZ!?DBQh3UQmq+!jWK|6S?cv!IH$n4 zY9c1uLP%736p*YpNy4};(di*leQV>Mhfqr!$U!HP*%vXSkm8WDiJUE>b&xV@#0()W z^^B(whsx@AlC|XIz^n*Vc!^Zk3+#gwIz2asjvvI#HO{O6xu8jeV520PgzW|-+V$8X zodz6`Q9VtA(O*!(k}x!n%{60BJ=u4VnUxG|tR6%_6uy{lD2eBsE<7CS-nP(M-8)oh zMRyTvyvCrNZX195CIc%xQu(~)G5p0{$!n;G{4#VwG_=$(N6rX0VV(v(c{PpXss^GQ zqPxT<85W*ttX4GxpD^}>%Wd*IG!M?M7t^WbFyh$I$TqT3{{uI3@6Inkks*ka zt2>l5AG2a%{_eBrlzSf-j%7s1(p%5>14@0$Ml@&({{TNE#o@A}J_dU>*)vHnVdK>6 zoow_D(tZ~}CPv46NOufo{-X5XUtVA)<%tI?P&pq*r{V=0PN#zt)D?9T!ggkVE*_y+ z%HEP+mh>}QK4a6siu(4CuQZ6o*>W$!+h$12>f3g@ue?|JlL7^8vGtPsG?|&0 z#r#Z{byWl4NU9lg6#rPAHIOu&Jr+{q0l%+d*ThC^GTqj+&{v#nvz6-x+H`+{f2&}&-0ignuuOJkAWYQMEQkrR9IrNo@auCL7GZa1|MM<}9X$dWBY)qF zV62h?i?rZinjKC{CT+xf$0CO;=vRKC!`d*8%5GkCe2lPSx!lP(_am>~dlY!T%C6`^ zWjSV`C-yo+ZIa^M_q1k=O~o4fpNT&p+f=PjO&%`lf1YA%{U1-mnrA{e_B@f9J5PReF|XYww-Ioxc4UN9Ox0yfoI(AFB*%{khLi}fA%l2a0S{NZ%%(!rLnw@E^lKv1 z!`K`J_+FKng8I=}8DmK}GgS2tOjvR|v8u}0?g#w7zIXcfdqBn+LTSL_YPdjK#6=LM z|G^gF?zqubsE$xT`gNG+M<0OH9-Z+;DRl&qcJK_xSNY6D`&rqWv`=6$yo1}`P*W8q zJEeE8w}gte+_?amyu7?5>KZfVa+)X&X?or4#z|H90TC@eUju-G! zv@}JfrFl%02tZ_?@(3wR-ABc8em9Dmf_PSsQ&LRXG61!qwMIBGmk@^zd|!^?@sd!d zY+7g0FP8rCq>;m#1Qv#gNZWD4`J8;2UxUa$5d`P4)za$H6iu5{RMfYR7l(kUt}}}> z^7?KZEgW{)U96#H7NoQj{F%}W+I`o|xydYE)K`@1p`IFp1YA)y>Z1lGH_&2oDdW{a ztbxcbS)$5Gj$L)5rO`*%IlY$yPE#IERF#^Qi?ABr2QE6T-`KYYR9HNAM0I%8p~p$? zaKnvzoiD%b+TVQHV_{(pBk`K}e?jC#>DVhHmzz?{a33oB1(>j5 z7JHPFq6_a!7p$#FUSKcZ-dR|#OpGwGb|KvT%1B}b>*0|s#F-+&h$ATJ82GLt6C9!9 zzgEWP{MD?F3Lu*hSZ^60j}><~Yy{~E8~=E;csa~H zZ&!|Hs>+%}j8S7o!o`!RA}-{<96LB9*T?X&WXOcFh8W2!E1jUC-25n;Y7Wi}X6mlL z;U-(OITY@3|BQ&d$d&q!!g!J4kVe2WMPz(=Gl^BZE$8stvSeq@#cIjB5on-M?g@m5 zH!jNKqt2yWh={fu{Rv}u9yax0zZ{;|`fOc{j%l9bky31RGLW1AT017~Ajc|uLKfHZnk+LD`a%2}o!Xsp zA(P6Q>ETqM5O2is+?tZcAaujy@$g`-*^v(_n)~sk_&W@%6wK*zXNq~|E<~@L{5GCd zOZ=&X;gck?Ly1FC!Xjn(bsWXpeo8 z={Hb7;C~FDf`p0iRjxQr}rnE_n*(CLauF#(>JX55>;N>EJSLthqm z-b|6JEXlB8uIFMq9n^Q5+}tIXPeXT06jJOO-;x76Ba|VP&Vs#0c;A~ zYbC!T1ZgS2LAj6^=CVbxfQ-33dHecAXT;bJDZLN*l{%e~NIhDd*2)wVH|H!W3GD{M=@s|}uX{yvp#P-hq96a>^<=w}J|xF^ zTag+>CbZHO$$R}<8UOgU^?+6NuU<9okX8w_RO~M2bzBQ@Zn&Wok{3bi9v5Gej&hvH zT$oBpk=!Y2O7nX~b(}fwcP_)9s#(tKpP5`$v;KH~(-w0VioKa7cM0sK!aiO+{xt2@Bb!PXE3P9gRqgf_jxk z(sj4aG$|qIS~3QmgJ>&mCOtcAP(K9$26#Dx&1H-4`84u;u+Z^4d#`?yAv`Pj@jz4`?$NhKwc0zE8MEewX4D-X~c)mV%`vYI!90sN#a zO^1{d^ah7H zIOs_)i;m(fmL@145L!Guy!h%P91BKMdm@IEv9)7DRM8IUC*_^YlSWg*BB$9fY_^z7BlZ%T)e?V4(wDvMo~AB6T|)}1 z%EX!_1}xMcufqCkZ~*A%735l-o#Kj#wf=CpNWRT#f%uw%+ zj?;n3GW%Ip`-By=?|&w)G%uKk zYs*1VRa4A09AOMX3o0Xi9n$>z^^1DA($Qo>ZrSshbOjqw5-^$rE2a`3M?T$Ne?|O~ zO~vl^x$mbcxcLjOU}USmkmJlMsQ?l}h}-m{RY6v1thM&{e!eHmeH2KGUlcg^gF_6Z z@w4oj!k?#ERKga;UANrzHY*cZWT`BQQN!UXtu~R)cOlS7t_mxQ!H^5=`Pc(P2#-wf zfOuT!as|#J7^WU_DXu5K4XgxE=w(jk)h&T$EID*Qduf7}+b_&XOjkzrLt}WC8RF5K zD-hT}?zwwZ4Tq&}j#McJx0K{y8&%Tgmi`bqRS{EW=#2 z)XZz5zvdt^u`_0z`W`ah&#m=jl(%QLJ-;)XMdJGGgz=^7}#DmiE zsm1q}yz&5?O)R(mYTmpBRAx=8GGq$*$?nqcc z5%3WPvXQl!z~|QV94}s@dT|SBIL8?(ALOd)*-tBUlJZdiE!UiM(`|o# z?enFWZxxq6q%PDjgaDPYsY{9sZ9iLJN1DF&4FI`q^PS~4a*w#%&Hw^T+qWrs5&1JOls7D6qH_M9PGI-Kcc6$=~-g}400A28bJ>l34iAcI8df|}0;_Z=0I=LC+YZY{dGCjjtnk$#?%14c#+6#Dmhw@v*aN z@{nCLbA9;#++@l}s3Ew-aFrnP&p#ksrt!;YHWIq1E?Q8|_PEML*Fn2?) zIO*{Qi7oVEczIi!_m%`Brdg?DPjKJ!c*&&SClVHf4+Gy^75~=vpyC_V!h;c_U<^HA%ROp4D0Bae& z*FX1I+a_hijR_*@%SbIhM?+e6+gB^3iVPdfH9`SpLK0ak~?*H0Y*bF`I;QkbJ~w#Ar@ zL{M(e|KV%%EgkZRz*d%(s!X=+0MWLD9_Bbdx9OE8=SNU6=2j9%RVf3M)66I)XZj4l zFDvNT?i`a6L)7Noi>O8)UfhKprYinh>^^92-S!Sfg zSt(1b0A|-+-rb4hk=6$|9Q}-7O;#YNCD!t4kJamzZg)I$WS03S`2ja*7PVkBbD*dc z;(iYRqP9~i z-iQRAcA_5UPdHe<&fcY*;t=9HE0Y80Y@o`S|S2 z5-cGMM`)MSbt)+23N?giDKOC};vj~c-_ZsdOLd*zg(>>~Gr@d7C-4O)b-nLL8QxN5 zc7k9D7qbs0+2I{CGN^Yg=w_kH+?*g_+OUKnP>YSGJBS^f&uz7_N``EUt?7drAPN=J zGKwJ^P0{fe2QCa6YwDCPwl1i z0)pDQn@u8I{y0C80qc8n3?q8f+iik#)Z?>(Tyuq3D~?gE{c>{08s)(AD^%zQQEnbd zTdd|&HrLK(0y8p3a4IrIh4KzBV>&9 z;~Mi^KFrkK(J#}n?I-HiTY-lzB)`#y*KOGA9>!`zH&$If0_&BP0WjWcqMhH7*f%=C z&rt6zn#I`giR+9IiJlIl8n3J}jnJR&M{0OrQli4d`*6OFiYU3lpixGWt`xiW(flc* z=w+`tj?h;u@cYClc z7gG^uF4N}tU}0^i1W}mM6(6axaIT8ZR^bE(Rk0*9hE>1?=DsnwiZbpj6Ht7uA za;KP5y~${h#!C)9*fBDn@s#VEk-bv}rFY5pT!i1jsX|K9hgXgsn*(os%bvi{C`gRP zSMq#dE;te0W?~^FV$x z#=~%IG{q#CnW+H2nX$)JB+dRuuL4V-n7qM~+(-^1#++QHlZc63_dkfG0vX2gX!QsR z_`X$#4WD$w|&Fz_6w+-&vc+_{QlUx7I4m(-6pE7+Q7G=kmrJzLB}MVCHAeh~q>EJY zc`>_+aSWT3%d)jg&EeT9kOIjQ&^yyZtsJ1P-iOJk6&BX z$AB2&96sz@j7V3ec&nU<+`>z5jj(=?Rs=$jO@4J?b9WQ}< zWVR{StA?NRF2IHt;Yh@ne3HyAuocvYHijo;ZccmY0-Jqi zaIYtRV84!+52t?LSl39n)Hr4VV6UhSFEZ`qHhB4ny}lJmQn`!~Ka=OF+rJxja-^iI zUrcmjIfy+aHPyn_GTVtMVkoWm+Q}ANUt;&$>h2|M;O!OL&F@VO(D)okhEiG%KmN9? z?|vCZ>Ha*`(sXbf)`(`6)BO%@X-@inH(=s?VZ$d;nsPTA?^15LZ>G;-t6W2NmZbX{ zC@`?*=aEuK^nk-rMi@1Q#nzig-xd+I`f5e!`3&=VyREIkM4J3nqpaeo6O~n&?@r41 ze4CNAgB;C?^d2EBc>m0{Fuy5CPd@sqACIhT4#6!Va$Pfy)2og5P56aO^M%{<)mhYe z+*@PdmI>U@C#U<_hW4@i+_rmTwaeYK2`szj?~WzO2A$HkNutjaXPKLsQExGJ8?~`A zT%L(kN`JzQHRj&C09igJdS3x;oixuZwj@QzGFe9J3*1@2#vbk44Z%E;8mrSciWK@} zlq-fT_q#XyBXfa~yEEUE)}=kxd;k_bK54N#8!HyQ+1py?=9Byai`kG83H0_%3ndxq zwF39vd(0@Ns{tbKA9kxPLDk87)y`rhh9q#i6&kW;dqD4P0f7N}H~ztTF(gb==(7(I z!DH!Sf`W*)Bih5rdjk-cCcD6C>GT(OC7}|g1BMQ9AwqK_UOs0N`l2(f#r{d@Tvwv|aqZ~@~ z#B26pWIn&&c-(l~!FzMz!2(4hhe--#8fv)-Ot9j)Rh@Mj-nxDs8XD;$yqsxuqL*)N zjPvojtA3~psC6eJZz&CK2%G%My0XCA>4f*K*r)7W6m7t<%oUzYh$y6)3KdNS`C?s& z&x%{6;hGgbw06<2QOcQEdAag{+kh3$Mmxrk!xbE85s|%giSqm3*`gMU7w`g47eq_* z^COjGQ+C4+6)I`H8&%f^C}gXCNq(z$A6F1(rw-=qDVHKDVvUUyNIzvi%Q?g)vw}+F zU2jYECvI(8mXtQ+Uk9b6NORgK%GLf5Rv9w>V+@$-jRjeAb4p#^HTcgFzN*kI&@W?9 zT+=6CyjyOcgcpz5uPx%g4odZv&gs~9eJa&p3V1fjO~rUi3BC8U;J(L=Tr>3dA$(2} zZRWr>jI+A5J}@!aQPTO6(nmXCxZ`gb{}VGh^QY7|DS(_+=xKtScl&qdEz(3=YW_iy z1G@^-?UIVAU6?eH(KjoLtq(m5j^A&1Kur55W)r*WOPU+z(6tLbbc0T7VYIoS-QC`R z3H_lZT1?jRU(v^_I+tn8bH4w+JcoYL*@XT5$5hQLu<-NiUB}+~)9Yw6nd7$bv%dr< zdS=QTn@9dLNo{K6=%ri0HM&QF!JTz6;f1+ z)fLei3#2Lyq81L`iC`as9G^b%{orT{$?T9J|D^)}Poe)3t%w)56*Jn163k2zX?U7{S zqF>0EmEvL@xCwr_y?!U#@FGX$qPg85Bt?pes(Mld15{tX4-Kay!2aBRjawPX4(;C^IoxFqjf{b{(YNB>enAv70{Ryw|Y^I}W7BA63Gr)t82f zC%B_@93VZ~J@{$id`5r0D`&d2VIAX%kxcwh=;M2Y`{#oQTrNyVu7s6Y7wQjRNYxQg zUw`s3$C!%7erj&Xu(t5^T?O;-e{UdM66C3INohZGvay}vb-H=F@$Ao7!9YwN7+331 zh=kAv!xqQ6kPGj5dodwPF#5WmzUs9h|1kTI?|jNBB5|sM;Xn41BL&#u%;?wnl&Hg{ zw{7?4o^h*3h407y_OJqVKR=ep@>WWFzy7w~HJ}D!X%)xUxMF)E+wp$&>exiOTOY_g zdwyR6z}mtoHSYnr0`z=&?!33(8|k_nbIumRqx*GME$W(>6c`EYdV=F8omnYu-PxDd zCYQf|bgZ<^Dojn(=aRXpd+V9#a3ZigiL7<@j6mSk^=h~rU4Ef^S(R_PL%MU^nCR#$ z9LE(kXw2mKlP-=k)lT@nN>?Q|oaB~wCUEebIhPgnSpD=z$-cZk2HSjAGBRh3JV2<9Bpxo z0g>cAbbI4$wFUw=P;ND<;EE%L;eJqIHSvd<{aX50MAy^xzE=R!LC{#icG^dd*543U3K<7fMaDq6X7Iw(noVrD2N z**(LtBv>bxVml&6ShF5EMyyTbIhqo_4=V1SD)m_|`sf(-N8$G=*HHWh{7&+fY)rl( z)OTDIw9E0DxUC5`lD$B7BX>Yd)j%Bw3d3^t=(fhwADwDzR1lU&SX4AH8ZJmk9Em!E ze0p^#dOw!H*g6S1j?7EE0x3k4&>g}#_4o4!aJ_+o3ODT%Ow&IgVwiot4z8Sm)Y=P=2me{v)#zXna z+lJVG{daJ{T25mu?~f=0F^A|XcFX-qO#hWiVE%>}WP=EFQ(eUI<&`bCKkeTHrkdP` zwPIp?QSABk-*AGxwm2nq5c$EQi+g*_pXDM0(i)y6g9ke3rL*ihJadsGIy z4;+^_cCQ@zPtS#1Zr?Jhte9~fm>dpvydSr*lw$smrK=2xs@tL}D&5`E-QCjNNQcw_ z(%oPXL&wl5E!|xT3_Y}T$k5Hu%^UsRzxg@$+>Ii}Co!Y;h zEW?D@)6HnOHQP-k9BkV@G{_P@0+Tnumr0*GMhA;cU-8aKH{aCh~A^V#?O zGTu`*CsjNq)vVGZ zUi^Ej;#Rw;DXi_^Y$d8Ijiep@KZ|SADHCqjp6ms4YShBV*rr-g`cnwNZ`kwVnBJL2 z&|{@!V!gcUYD}}sr9qTIi!HOkr0G6J6Ha1w4bQhJSKLys=6dTD$pHRreNG@FKTM$~2=i+OM5qX28}~F0?Fa3~<@QZ0lTH z)fx_5wly!*38>-J7WSp1?Di7x`W9|WdfL6Uo4Jq(x%i;0XdjSunb4{d>+}&4#Np-5 z6;=I26jisP^4K@f`f(Kvg)NY*?1b8PbRpoZEj`3^>3#ON65ux(d%G=0Y_ZtPm28}! z#D6fd_vdIjPaK;mqZOlYCMk+HD82ov*x80VE zHvyCywPJxr)Fnipy$_pa^g2lojiZ)FlJ# z(-O}aAy?Y%)gT%+Qxtn<*T~tt^lZGCte+P`mbGN7zrLirJR7lB@HUba(se6i;3}R` z#mgS;(HiDCM0+jUu95$5pHoV~NdwTdAxWD71DzN#L;@(l_*IpD*_Vd#%xR~q{dj%S z6Jn(^i=;{SdUcfKYqfY^b?~|UvF{&)JCG8wX1cu7t>E@(*60tY%9J~E8h0?i_JCfZ zT_e`9qgAh^_xVqr%-xHuVPNF$ysF|%G`Z@JW9#Ggow3rWBmb+njKri1tKr!r$Qq;7($Y?AwjwE( zHkzMy!b!jujo~;4<%&v{?`9XMLK@!o>>9kWGT1lhZhErK#sdegREhKeE<2;Krc`+Hf1wL zBC2}jmf`6%Gq<*F$Hw?76mhR%cj{hv@|ePKE426p`u*{i|5`^JO^VfWj-+rw-4Z^I z>iPP4c&*4$nj?VKjVE;3gX*c41aHR&$=DOKRfBqB> znG+R`Bb21*P&{6NM;K5aaN_(3<(o=r%iRn2iIX)Fzy!ZrxoBa2{P1XY2v zZ%FOA!R91H--Acs<3##-nuMctG8WDZIr4V9r|18}Z;xC!d!B=K!XMTIPCiPuMm+Rz8%vFnJ5mo&o&A2hce0`; zZS)d%XXYctZn5J}nksm-;omEhQZ2f4-ep2r&!2^@va;d&7Vd7qfnD!9Be=557}V5< zru;&qA7vUia?{o^k^A6^f>6HlMPw*O`Zx_= ztl0qRrMDXnMmv6HudGrcY9?5U)+eMYhqG!EFW@DmX*K5BM~R&GaAV{R-U%T9Wq=h5 z%5DAXDpV>DNys9bWH(k@t|iF1o2Iybm=#E2pn@d(s)M1IeuT{ScY|+8%&1qFZILWl%2U z|MZ$0?!sA|u1l z<-bJGRvF4_&=py)n+p*-?+2w@ksAgT-F#1&$M?T+5exjHA+_B7GT&FQfw2<;X}FaN zo3xKI=v}Kz?Wf4wzF-uC#57<=@-r@Kv2K=>cYb@BP_0rC8gL`Bv}a3M*t?{B+JX)E z?=CmC6<7<%AMVF6>;dR~$q$a>Wq9zlmLYK4FXJqafl?iQ$OLx@Y%5vgmu1an% zg5($V0cFUeGlKaD$L4%@Z6wUq<5)Rz;AsVaw-mio`w@R>OvvZDF4GxBUK1cYcIt#- z@5Dr*KW966yX$-yymyUk0^~0L;L+8)?W)?gpl?K|ZaF|TWdMQkd9^JtpOF&S)SDBC zHK?$e$Ql%h)E2nbb(LK|z2n&oJJvCdRGj{WbB*{(waTgn z`?8tsug+ja+x1%Iinc5@IGQ79n|t`J8FZ+`3p%%Ph5b)Nd{c9F6_PCl3wnoV$+}x$ zJ>dRu`K$YEaDzkR0Ga96-#%$1rWjnT4Q<+j4u}k$2COY);g<+7*b@%)K#|M|ucq71 z;Z%KdiI1-`xv3@OKZg*dlbUPaadwKS(lC?S7u<{pQ89u-^SZt{lf?>vT{8pre^hTc zVQ;JnEg5~l1(0lI@005A_lmlVj4~x9_e5aMryZvAXkdVvU+dt?A$@a8Vn#y2k5WeJ z>B?Nc)kq#9q3skI$xDSYW+jE%f#{XV?U`4fK9!X+j{PKwEgOIJZ;e)81YTvedN*8O zX~$=(>gp2gl>%OoBfN$PFBA~EJ)+OK!*0tB(k2H3?J>+J*8<|zQDo~OvH&%TtNC|b zA7|!I|e_A;t`ts&x>w|jf4I4CB zTdl-H4MRQ#GkAt$YOL)gWGHdYNTb4Ng?07(DBiqz1GhKFLmPnlxK~LkC@4{kY}MZj zf5dlm7}sg7$SK)<7yRU!kdZg-=_9e!+}VGOaOvUKLp>Wp!}M+W;Z=eS#-5W%n}*BO z$6Cl<&yia~R)S+vD(IM7?z+NDz;2J&YI_^B?gh$7R@BuMR*TxdSTo~gjiu%0nXaL< zSvyq)BAb_#BpO*1+ilQaQ3y)~zel-eTwevi*@W>XIZ9u!!MyA_NXqmd5(UHHj&VQI z>(k{m%FSQhqNCGBUuP;ZWWT5~3V~w57D7XKrC|oZvYs+{tRiPZ1gKxr;GM8>eR2bo zq+cf$v^|0TTn(a+EhrPjU8%5ans+H|safoK{fP7{h4ytOdDNgOkI*1XHN1zTsFEZ6 zC4tVDHsUm`I3dMI%D|U6nMT$ZRKn$J#l^(VQYu6@6HPWW&ooVBq^Snkom5HV%y4Ly z9hCWf*&S?4YfZpoKBZ7+%%h0u~6Q65gFBbI>plRP^NyCelTX~U_j4Tuj_uq zm+F25$=%Y{GX^K?nT`!e1fpvzFYjjHc%6`P@zCMwx*R;WrzpZRafD)gSSf4 zdl`zoq?%hrq1vO)M-LmFH^G+5Kk9T!;~=A(5_-=#6hlXV^Gc)B}$_&v+a>s|*p*J6xYMVe3Iii@Zc zSY*V4KhZ54j7)cTWE*w+Fa-Ns(*$?JtIz?6**0QuK+4@HH;Q|n=NeVpTbkFInDyuH zDQA0LooVr@*%qve zdL3pVLUoslUC+VY*6#M>Mkpex_3Egk3BZM69s^N0c^BvENj8z|jf?|;&Qoe9h4xv}cPM8*n}9cO5=?uK3e%Z>fv$Cxl=AHUsQ%Ab^I(369LlJeA-ak(`fPtLK}rx9zK znojfK@@>Gn`P!i;5wiU5>hR;wSTR=^{Nhh9#+@DeIEFzY9KChR8X6DD1%eT0cqc68 zR8RMJZ;?r2pllNkn;+CaUUlHynXRaY^U;SGQ;)qzX@?KMYhRfA&IQ=kK}kHKR*Ct~ zw8=$gsn5drTCaCK@NlI)_3~i0wxlYmW$is5tp z^E2oZsmN)Rxb8j^Q)yvWWF&5s0R#P%GA>=%pXpFro{`W~`n>DHo9W4|UDKcP?+VS` z=O-;Ssdlqy85V$V5MFtd65QW!Z~`a@-jxXS7Y9L-kk7| z=;|@I-lhw(mDKd8HIzTa0x&4|dkl5dB+HPLWWWhwk&yXmcLnzg?dI-?pkRd%%ubho z-ya^1<@xUWbBY|l8_b8NxNBJIWsH91lt%=R*9&ZjzT`>265R{nl1cxa@(UQryC@*u zFC82RWXM@lYL{@+(U+w*f0aOVoaB*39fRjHU~Zh+q957u#i{L{n%3GH1g%R*GEh*g z`u1Lru#-Y)mjP__aHl^SvhYJYz>1xMIha%e3gw0w!GiK4ybXH#6blBux-P5c^+(l@ zQusu#PVEa>P5N$hsG#92B2+V$ZQm}qc!O-8jgZ`ZLg1mq6or|zz)bEyNK3`aKvx+1+a=7?{i{F^%qy*CchvBV`)CtT*+Fpb z1ht32AvC>YZgOHrB-EtVRYn<$+T=K1Oc6!s6Cw7AP6Kfxo7~^$iUbv`_#HUb`ky=^ z9F<)rp zN>69bBa8ed0PXG-+#`wjsnO^i9yMMp?W|UWnn}!@c3AAlY1F-n13{Mg^wDJG|!#p@fZwKye|kiz8}Y_>G)OU_-_Y^7cP4( zIZ8>(()hd;lZvO4ilde_mM|ed^6>DOT3C?umnTGcs+r7_`$o|wykzHm^1Z#p3`v0U zmkhm|p8yHQ#N2|Mkw1eNLRZK;T&4o^hi~6*iWGRNQU;lpk-EN62rtTH#8SMq7NVwX zJ?Hv!{s)E_9wDq49Y4;}BQ5h)+z+us>U{_d9pexFD|Oft4u;>}!4bphUD)MYAZCaH zhpH;4#c=?AbSeD`l{ijeYgPq!v0D0I-z&r;bhaDoc7;N%e^sF?nq^G3$2Hwk2SzIZ z;!sQE1crtai`6zMf?T(KT58{p)tGp*;zDQzg!-ljJzeCn=LY#)d#ht`&HTL^vdo=E zRj8dUSC)|n?aYWNs-rr>Z#vO_Yr>w)J8)qXX3sfmFI)|Hp+#QT*bRvhDkK70NbPCy z{=%~rZpA7@(h04gN5sq+rhxyBrD}OLJ*|L`@v96N&Os?Lj{IkCJg)j7H6V+XWF<92 zoNtJ8u>B_ty5)bk$Ooap$f=diYtF=*P7Ocu8n;!F8pwf_ARVOdh%suY6Y}Qt%|;Ve zB|lsfMK<)G-WPtB$CyB`NpYg!zQ(}(di2g}uipGgtf21a8BtfAqz1z+Ss0x3TYqTDQt>4H*ir8IHLVqK4@nzt#{emkdKM^LxNuiIK1ZA zm~_;02OgNV1UF;nWNz9eY00QrAHQX50GAUE##k-ymiJ~9+HE!YEZn!TX~ zRaF(;%otZt38&*CZ?S6jXvh@aS81pk5_3IY6qAj~Ab4Z|%AHl$r3@Ss;46uLIK&G( zX^ij7r`JLqs5^W3pi(~CUm*vdR&SxnlWq<7^*OfLMrjjkCr4dY%5{cV@GKeQ>CD7~ zti+lBiOQ?vZlnK&rkqF~v&(Shu0+{WY6&rIp$Vq%j9Oe2VI>O?Qw&(4j6q~KA>cv7CPB)$~4{lMC=^;kO zB0&cHsNz!ozm4R`YdnyMB2v3S!H`?4q8ba}N{Fz|!i$c-U?cJmr30YX67zH?xFhWP zhY`m@s~l3OwG9C+5uUuh*C)BcNtm2e#Hq$jORTmGMHFfn+RhU1t*d)hmv9s5;580f z&LR(CU2IPRkA9~QvmKLSSll|-`MAX=S%Nk!Ew@Nh+hRfJqmuM|m@VN6p+7S&VFf^^ ziXeC{VscrZR)!M`YY*pbL(H|a46;>Pg;@vs@TH5U<)Tg)>LfjT5}P{ikp%11kQd`p zd#%pK54FJQNtREmW)SyM;+~dT2UY8NkWcnZ~1{7zK25*Z&=)A z`)-wBT;}*V;CyWsi#2=LfQ3-Y;d1Ij@Mm&1gnr&qKodxhCwb@%R;h5f{dl^v0ZBts z(*`V*vz;f+?@GSac2B1aHQR%)iJK^rgo5tX7+En}`)5==_K%A{ELd0R4M*u%4SjR4 zk~WyeMyQ%SXnEweafuJV=dt_*?u{652hu9$z%y|8Cit;E%hRujQ61$o54Ck^U{ z%`~k@p@aQ%rsZ3~=lk=u^NS3 zGwU}?nutB#0v9G*xM2kC7N^&lOdV^d$F(1F;Ri0~DAIZ_tKAI)O)5W68lU}P| zWO-@YB>IGjvC9`-?G}YZ?yp7i0hN7ovFLYLJExFLp1~oWnh6+vE;wXlEJLMOBwX=4 zg}Zc#p?;Xl2u{v%$APEiB0CCR9}!3E`%vsaDCJ|9!XQq))acmC0+#%U zx^`*vE^kjbjnfr-``r%vtoT7Xf{`D}Q+R4czqwfWjb?uUL+Q?mwR1ut6(Am8p>hH> zS_t&J%W?qw{k*(^SS`?_Im)%3fTxQa(fZYq*gF70PcVj_nLj%X4`>qi7lV8+Jjdxv zWv-3ciZW-hC7-PAYFEl;aP0BEiRW9 z%&60{w_dEsmJ9#Ah`GMd?3)2vF+n73{A1hikX$9T*vzLeG12qQHJ{swcl=StCsu`A z6OL-!Zgof}H;C5~59%2HASRYUI-d5(q3LqCm;L%-Ykk1ys?iBW{zHN#A$imCg0L&= zF9eR$pShHq)xp6z*)if4otGVV4{N@@_f!~%`r{H5_o&y;j%@cCZ)<>R?RIm1ImYz~ zZ8;h}QK3oxQiCx>5MaZLrKej?OtA;7;J{5RJKTQFq+_h?PGY^tTImVHrYl2VW{5Hhy*2u73nh zmEtls&}s6!idN-xiat(!TYfHSoYDSy)5=#Enehp^nvok3rf8nz7_F7*L8gekc-7Uj zMj4PMFTk6qr2!maUVLnL6Rr4ZBbniO)QrOaYmC2943h!f(cj(@%+x(=IDtIjkn<56 zRW~y|zBx6e*w4^Eu-~xg2H&;8mdMPTCX?U6YHeNmP(nkw1d(jdIw`r>{5M-+iOnAm zI*_)OOx}u=o1ZwH9sT~b6JR_~IF`2w9#|kfAuX@Xb|m(AaqZz!Se4R??s(xVT}L?p z?+aKeqjpm4aqv%?qpYW7q{b{P4XukImX=pro)nw-EK3;|EAPPm*eyZq+pk^!xUi`P zzBE=V;g*EuU=^JY+CQ9Aa<~I&bmayGF6qh zbHkkKdbpRWl^6F?7frw2TdHzWs$Ld|rn3u9^nVd+pKmTn=?@DU9DFCl6I1cPE6UbL zChU`jP<^!R;vX_oM?G}}gW$RG3a-v>0V47m3rN1KzP&nGf^;EJn^+RI*{WmM)5{k5 z$_O9)SZdB)Y@=z2@aLZ;C@U`hcVDJ$gqUPPx=~y) z^qpvFvZ|YSDHnt+F*AnY(ARFflg#X#Zx6ya3ADyHqn zTG0Oe1Jp1Excj|G!pNPv6}m#({~1fzsQIvXg{9Aj`XVMi6L<5+>M4_vY6p{$TdHmH zz!T6O-IXIFj7*jE6GI(j7ci;2#rvZ}V>%SeK2H-#qWi`Rh<0-d+;$pL=(i64ax8AS zsE2tmy(+FSnyyr*yv-J+lw_Y|-QZOaa|ge098Rd;p%PN^*WnN-3lo=4(2L6imzIQO4un%3 zz<}ERv6+HiZx}yKiCO{oQ_D7UUoO@&AnJi`N_MODMo=&>Fk+mrz+})2ct+=@*X*zs z(gX7>Lgr0Kmj&{h6sI03hRBk;Wt*jGbhq#`?sJ^g0pq9|`~S%cP7vkP2~xTQWp_xB zl56ikgj&90+kPs1aex1v7L+}3j>C$w8S##(MTx;^>Ex#nuJ zUM*8Pp#oR}V%Qh{5w8*YCztpY3|+Yv?5HaTy79`^0=IK9J85B>gdyY5#y>nHZWPAyFI2hi7|?|wS}yS_=X0+*+q?C z+P;aJ0`Pi}`dMUChy|lFUL)3&I#dLSJ|VR&sb2ojI&?%o6knEeu9kB$pkmj?viB02 zE>0r2V_ zCNd)z=$teaah{$q^V7^s^t01wf)X)ZpPnF4tToI|d0WHS5E9L_!K4_WwKVlb9oVY> z2^-X}YQFqqQiY5~_~-Y*>RxA$Cx9LW2mk>DT-p}Lj#5GQzLzfbk0$Tb`GG9}G1c?} z-M~l(7Dva*22Uv%9L!`1JEyvP(3`R=gbv3{@n#r4c;#W>f!|SmxsoFde>*P6YRy{t!Ge1>P-Tx?XFv(gP zc#OSb=9z~3+EG621)2Kn8#K)}6@cr~IK71}`(v>8=(Qb=tsn*JwFO{lxh);Qc!t!% zJc*nYfo8^`i4H zowo<3mgTngrb2hAEvo;=afPk8@D`YmH*e!L4pLZzY~YMz&{rFNz76D0R-4HhS*daj zW=IuR6jY-f9=znmUDI(Zd;K#;Bijf^X*l-lo9}XX#ShPAYpjbcD5${h>q-Q$0NzleY%h_e;e%uR!i@jr>Yt)->IJrZNBI`~OCRnravdd#}Fltz6g zQS$YkRGBwsYJngeF4kr0s{bUC^_R9V7ln3aOv|>%A8c7*3u8E1Kt|g4P-T%qLVc7Q zqpqMO%|$5){+O=2gV@4|ulngDT{t6I#NH^+4}A1Sz29%2sPtMM!pIlTwFQZjT*Dn8 z+uv>q%`Mb50tyTNxao7f@e``CM&O8Q`J#{nR4i0>`)CgL@Q44XmKc5d=IL?IJDMQA zk1;nXL8TwU=S8pYN)?>OzZ_4Whals0|MG0m{Y>6)Jj5+ zQM3(v6O>yL_cCtRO2i0!3AME=&_2dP3q3_g`-7eB7_8pTSRIH}^E0b!Ezr+s3X1=O> zOqf%V_zMfeXQA3HDEw4*))RO%ea?)dU|M}?0X6a4!#gQ$twen`x+5ZhLU;y0`{Yu< zj+YEGgj&1>m?ZR9g?)(3N(Yq2x~4jO7H;f37JIMVj45OMzM=cq z7jeJEOu+_qV0{?9u)pPflAN&1^4ec zUXxdMfl@y7#~T0WLT^&0!-h=fHm0lT+(%aI!aSp`Fa)LM>?Dnt)YHtdZ zJlYiju!p6`QJ*BTrK9$HuTR{R5Kc~qdfKakNWr~CCMPj)$btixOrdD<6Mru?J6Q}i zuIp4-y1{@8GJgQJ|6dV;qQ7N+FuJmy+PaUQ%KV}3q(szRs4TH2d6aC%D3CaxJAW^~ zqpwO4+^)n+M$Py-8%z*P>8z;IkpA7)Il|5j#J(8%n{_qW7Il*I%lilNOcm&31R;mF zI_6OZ|8nY^uX6sNz0JY&<)1W55Dn59YY|Wr5qdtXE}9=dt{&*cDj+`S5hlWkU1S7R zMvKl~oa#)oZ8$S5Shm$zri4Bty0VAv#rumc^jmSax=J_l{XH%^!v7MFw$00K%7<0$ z$4amNw9p1Y?Oi0#zqmn}#L{JDKY-xMme z)1!cmu%hJ9B`W3Ps0w~&Alvx8#7|DvNg_x{xAHgos*+;qUXqxQ5?w3scSphh2heAZ z-WwqjW87uLqpY)70TwrcwmT~|Mc^l=kys4aogTE$Nk{hZUlKduBa#SP>DP0K zTiK@_)E&)_L7lgWxCsD7R>gGIw*6<<$1Jpmymj)*-9k%}<7lOAR+FE=ELs(<*Yp$o`o{mhP==zG3m-haDqBgO8+Ov(WJ(VY0O0+Yzca{f?jP zDvC4sz54f)acwIYPvg3e< zEv{+r8OlLP?Xx(v z@p~RbL&QPcqef=7o-uNf2Qh*hT_1JgLMkb-{ZA2-77J_=tMGsGhD>zL~j z*{Dsc2BuxCb-Ar)bt0!dEM{qk`&FzgtTEblRd`1FxxFU?%IdP=8ZlylAW?jwDs57j zX28!0MGmqdDXJzE5ZORuG>B$Vo;5PKCa$W=OIX++CO0Z0{Vjr@A){2047#IXA5Y`0 zYlC447`F*XFli9Xj;>2kAvgMBWQ<=&ug&R1F#QR|HN%QI!AD;TBuPqgc`GOw88e&o$^(B@fgXB)Js)E|cD}6LLAhLFflf$3^3$VezTkCLHI`*~gp1g+gIAIS#TI{h$`SQsEsnwrbpx=bg*1ARk9VAMBML)iRLEpgWNDzo z7Mn@Ln=)|K?v>DNM_uSQNAbx&8@G0Dcg;R{)AUJLKbFSA#A1B%KQ;UVBqaj$^$ZKpWRTskocw1l%saLJ=FDs3Y)oOldz48uDfi9 zg^qMb|AXCY`H-6PX;&Y_Os~VDqF`GTcDcR`rC({E>hi;Vw_uGOZGdkr#i-Y5%){`E zV5y&chrS6rralpb{D=8ep9(lRNK3ewe+YI0HJZ1OyY7$L=a;AKD+&TwctN52_yXsU z=Xr@RkU=qpQwh<`hug^#Vk6rznfl!T$}jnDWpIkwW}Ay& zA~YMGmFs>WP=DDN$m@l;Q4j=`?#(gmsjJ_H9xwNFUO#{PhMs*>SfiZu*Ybq|-UAN7 z37_w)s?v|9ei^yYA_Th8j2vZJ_~c!-n4IG52EPLRN?lj|3EAOMpAOZU|Q~3JGRi3s3$B zf5?{?Rjg(x886h_n4|e^1}*s_h#ZO>PAwxF&Z;`vKN0#qN!#q@E7Nqn2X4r2BQCBB zbjNjpQH?Y|fm71b=Dc)J7*-Z~bK<-(&{SzO-{On7wBMVgNAM@{fCqPuOqL(T?nEu% z_3Lb}4H6nodT~Kk$p=%=O^eGPFM}9ooHIJC2^x zMr&W>NE_*2p8@!tmIrw_j(Ux`zHm3E9!p{lS@R_sdPoIHJiY(y0-weu#V&pgTuZ;b zo$rx+^+h89B*QAD02J(Ae`1nirGAQ3(?7qMnil>n)E$}cfJ<+K@}XeF)xXVle-gT= zd0AQM9tKs6VI?2!tb9oEKS(&`XN7&@dw#~%Sm$?i@1M`;v-%8uKJej5Bf$vxe)lQ3w zH5M;-SaaStZ8H@1{ZlNexnEeL+N^Q8*y6^C)u&6N$M9a$@i@YK+U6vNa^9oh7sw}& z^R16^6c)ZC1$Aedn#mM4Bx-R+GFjFk`&3%l2*WVYa2gA>`Rq_OWv9Qo3Mh`FYdq9xP*iakEs#uLkxSh*g+ z%5F4%2`V76pKUYIy?>&^PUJFhbuO+AT{=UgG>tnP7RoQ>M*_A^p3xzkY_ueACwat+ z&g}D<#28Rdmn)t+#e9M?2J5h-*6Q!)}dI4CI5U*t?23?_*93+2Bi;!L_?g7@F zGx*GiwsH>hhNdV&ff<}y8!qeLMaJ%6*-=*4cp+Wm`cM1|Ou~IDUNPNg5`FAnB9zP5g1(pzysm@{?b=V4BaPU!r>$U=*bD{!(=)OcX0nE9(t z7Br}ySTGjB{I5WECCPv6UUG_9c^+uryX>z#v(Jc${%YLNMZbvHGoM(`G^q3|-#&~m zvZ_h0O;pMy0z;!&aFCJp-AX<-2HM2(q9PWe0d-)VY*jsuZ=?zWf(dWab>!Gm2oE2q zxC8z&97aihK9nhQ1pXHTYdqd)>~SU&G2uztFgL^evg9M+%86z7gt`miH>X~pLJvw zn=m@4tj}crmf|H0{{pqynwN3zAtv7B0%g^haLorU zH+#>ypX?t}2GNP$a&y2$f(YVLSI#xy!Q$nZx=pG_x?t8QfUevELB| zJw~`Dg2JQD`>F*Qa#+*^Hbule!xsA{5|H?P>RWt-qz58843@EAH+>QRfJg~f3E;n9 zf2sa2^2qJp@wjvTono79b>7_F(`2otYGN3FcM;=iQn2Ja7#Q~Ib?@-&p@_kij49D5 z-uwg1Fx)(61iK`?%^jX-DMa+%@d2u_-e2#2eFTDT9|a4ru9=szVGdwy6tK5*H+lYg zjk$~wvh2T|X_vP7Lqp$iTiqi|ZpSx2laq>vm6f+w*yJpO(2o@ zBL+=AFKOm`%Nr?FS#3Uyv>wft8+5r~ z!$Y?%e=m%r8#|QjOqd!z(qBw_ylf}a+&{7fyn~aBRd0{Y>M=oz(#=+!=MQl%y&qED zQUaPrw&CpB*6H!v2j|m=XnBgLKSvJVr%@N|Fs@FPCH;drYhS(#a~k{De`c*icUf<@ zqUIMeA(Tz{Y)>z+kzzc0IcG8?!~&nBHuOpkfKg{J53;o($@}GGn3)+tph91A{UK*% zGAwAO;JG`DS1n7z4+9s4^>C#=Q@lICs|42jPclONW!<;Os#e=jOJQbO($SIJQ+^*_ z@{z-bzh!9NZ70d=Ov{Fs(LpU_aM$JI%xOMMAqR+xGLOmZkfUxK*cTj6P(5s0)oHOd z2vFqJHj-9*Y{(@2@Hh%r6!g9 zAZMrbvVD)xld?+L0xBN&o6FU#+FuQ}bKAzW>Wy{l6n&iS*GWu0nB zX8J%i`2ivxg zZ}mUJMu|X})dYe`$Jz2)%kz^2YzOhV$G!a?*Fvf{Jw@47u@oyQj3TsZ8T4tEB-Dn+kS zCC+a$9C`0~E5@v*rnD4C61S2y6LTY$=u3vJf^?_qP??zUeNzY%*Bi_u{{~_X4J-Vr ziYkjdu-K;McCU-}&>GbT)iW~Ucyh2&N$?QY>%4~wi!nuY@FG@Sh;FP#x=+`nhs%Ag z$Ug={bFA95&a^6F;j|Nu7;Y%g+hjbOjabB}e7JsG{2^km*AloxTj#iNC3yY3r~YtR zYqO_L+#8}PJ1--q0$@lFE$Vk?W*?*ZZO)gITj4MG2fTxc6V!gr>3yf$}Y2ro)>&qd)C_bBbsUj;i$9#jXXiNkl((&*mVL`vcku8@kUwGf zEyVc-92fkvWW4H^-Py)q>7O%^r$Nf&TfVi#CTj#AZGW&qUUI74K|WoZAq%jQ03ZoYWEX)clU{rF;69q zJY0C+Gjh9`JW{IiJM;w-&PdkCfW*CG0{a`y7e&hAzXXCGjDo!9s&9t}QW6|_NDm&k z2?8=WOyHLHk?tP#U|&Lsy9e1M8<9;A*0sq``M$u%yQ(#pIp^RJLbxW+DMcN5N~z!N zpg9P)do6cuRK?XZU`9=pjfzB_{^RE0hk1#?pC2XIRM{MsOyfj2-sE|@+Nk^~SbHYF z2HM=5i#YEba)s)L$t_p~F>Ep&IB{eT4|F{#2i^BRZ*P<{m=g#C6e?swxU*^N!L?xZ}_kL{|9?71|xOonp$h5i#%Q43Xy@ z`t5DnC`7trMiS~2?OuGd8;b7k9g3jym1-C8C~MD@LB)Fje$*~rw9yb@@DpiQ&%<%CHA|)f!qC!#`#eaU2kqw z_Rg=a;m3eWp;TD%iD=*PH=~>T#TA+Qez&aw3FWP(C4->jt>tdI;mF^p3W;6fMcdHkIvR+?s|opv_jobPsBeLI+}=dwqadfJE>`v>)llQ)mkHredc zsT+GYROxup5CRwSh9zpJ_wXERE*G`%lO;_r1GL;2T);Nf^hZNR`o62+hn?y<&Bg%y z0{0L`J~@zS+>k}Dzpa?W)6`|a0S76ppLN$wP}7*b7K9FDEPBWbhp~adm|D@wxXh@*i)7pSpgc{GhcYJNK+}& z!85Y`vBW^JGNG^!Q_xI-hvblUx!~tXn2Z|`nvBHd9+^*Wl`}Se;iwG5*9%NK3zIk> zQXXHgQ-5OUHd=}m;(8!KwzrBg93802P&^1U+vul!%BFd_WY<2X{kPggiP+`iyXb%| z`we6-d#_R6_O5hqZ%orjEf;}ubESJ%V>}v~rkCahK1)zn!KVmXfpW~ZPsdXC4ol_*n zk9#B`a(!5>&C!PF<*?+U$o+iF#tTOTibLI)vDmkM7dnyk^|c8@X`0pzhX(Q+pQ9o( zL`kllzF++@7Zw&?s42;TkHW3nTK<8B8vBz!$a}|Z!M!FT_E$WXDnK)wsEs9JrtVc@ zd;1>FB_-Z9t35fokMCve|9CnJwl=q>ZP#&k2o~Jkt;OBl-KDrgi+gaF;$8^u6n7}W zHN_o@JAB!DKkqj`AV+fFS!>N)Yv#P5mzzIP6O8bt99DycMpBgror0w8=UC;u_CUmxgXoyCS>JA%PCpS?%RH9zk%@lwu+ea1Tc;FxT9U{u=s(} zh+x3R_k7gk$3q5pFxtay;Pz==Kx(3Y;BNV|iW&XmbwsMU^B?BQg2k@9MiB9jn$qa^ zL}={any;fhmO(tU%Qdqw#xd2-?AP_y`oAYWQSC2HDe+G~ zytOEQ{=2TvhznL?FixB-Cqzg#Zv*e%->%}r zg@67nuBn*||Dl};rIbmO7PBuiRZhl)OHSm*qU-#+=Hh@sQ&}TjO0i-DUD`?VM|&*A zNr52$;`!D4r-Ovph7azEFdK;_8j-1mmq()2fHg$P-NhIc2_-e8a9!Wp<&(vv%5wS} zNLx1+Xcx#u7kiWDei&2(6tFI9i%pl_3L)L$}cW-j#gn zP~l)=c}h)tl)8+pS)C*%6^S0lZdYkeFGU2NSzPyrbbVc0T zyN!@@K_1#dL_ zoh52BieARi+|6{}!ba=QtU&JUVK{qNVV!q?0# zb)DNUWa@5a=BFJaR<>L)&e%P-#pyYIc&vEvKR$2rbugg)`~F}JtY(6gyGNF{^C(r` zCMb4BJ{ix%gw)Y-1B4XYkzd0!%H#dNHWWG<9N{K{$yFJs!EQb{n)T>Gsq%x08PZ`wK~hD; zSK*kA0a&I5iK6-vK_nCkPF6%KJXKp?S3dh;%Zb~mCXJAWUGU-{Q1UIgHkj1wOuL_l znYT(|bc<~Yxm_8%l&J7lgaN9PN=g(vHax8eH8G($kGtHDVHBl_zK2bJA<=eTCMWzi zs6`xY^w34~i;@VU-!XRmpnNNQE)(wd+LfL9c$1o;y`w@4GErSiTt4pexb*`3f2&JH zxJ@hrRX^CMqG%+SM_p1faebJ?DS$PjwoR38N`XW2gi}EZ%XBD{CxxM=E3p`hgSW*3 z>pDjm_n+u@X9Q}Z4Y#}b4F^RC-ry#6vAUx7RWW8B_4`D%R#^gj2?^y zonMl^rsoM=us4c+J}gkA7T;Sv?90uTzbUh?Qi$dB>Im5e`a$2I=;dy%8$E}RM!JbS zY=G{zM0g;FT*=9wlg+WI@iwHyy(1GPGJJE}!t-A4w4OT2BcpMZ`W@%My3zPrJAZb< z1NxK#F6>SXw0s$3%@?N%X*L52O+?@pRw*D6{7)B-x$E;GGLB{YM8>}pB)jB(3dNW> zQzn^%AW%G?PJE2LAvlyA6tvi=K+e^XgT?K*C=+YZ4iEQ649;RT4u8tHF2&{c?csg8 zj`%>NCC9|!VfnrQQG@lEbT2fMa}{*t5Bu1nvy8%&RqU$~0PX~qN~UF-vQkndRq9rk z=aOtgJcn6_^XVCeWk=44rCn+&Ix6y~IP&HW&QtHuw8N*_@$9L7KRnAuihr*>tlmW8 z$e$;~-X+|foD_Ew+ghp{%PCNqjg+=pc(C_GAY^rBcWmc8J#8&Gr=WXiL9cK~po<|o zw}>WnS*I^9B~!$qN)c7Ytkx|~{7W&*dK3-~7JuB*@sFJbwk9kNvNK|;6|tUuW?6su zm3@JylKM1;8)F5XhfQH1!%r`aZ}bVN$7PGlR&bn-kl|yBUiZ_DFHme1MN3VcIFfuPwTs$e}Glu%W^8Ll*n;HW4x-oVenMB!EDC(2%An-g-qO0 zp_Lc#a1_Z3gc1sEiUx&K!+ZO_(%T7lCSN)AUxr!~m(7nbd)u%x5 z)z#s4eCU&wb5SlGH7BJn5uV!5P!m&2$?>k3Grw1)ai&Q!aQR(wyvNSA&k*Dg(e&Bh zYb(FcQRGFxAwI2#BHWro$^4~`5#tBU!$4fN!2j5esHpwu4N8JM`Cz5A!s0QJ4+*A2 zZ4U9&Yf`nxxwFejXpH;4HxVk+zZchcpUFaU!g572Se~HKIhi~gQ*khGKCJK`TxP&Lac*8ulvWqwhxSf8K!Jkip1CcrY5Mi{G3a>+OppBA zpThlqKD;~&KBar120jvXcM7M8yln7wbg>$~)(bW=q_9BmY0*U7D8Mue)AXewV0NFL z#;4<#@VnDSj^S)i4kh7-H_#TB4)E?@bL$d#f2NxAUsLmmFB$D#r{y$v%Q$A<_dO!u z@*X+GYs9XX1-zCsfmhHD!xRj|`o#9?zs6{4f<&=v*av#O;5B+&^k(e5xD@oc^}N5k zkoC*Q_s#Q;=c;a9eL8x)e-z2vNFeo#BCz0AK|@JGAH2SP-=De6%lcb1tL&agDAMy? zYo#vU*}nQ%d=?G0{<#o|*WH=m!yeSRX@_+6`WJP!MI2giF4x8@ST%iI2@DUoG!$LZ_05#!!A?U?*YqyORt`=w+sdTm3^~OLMJ=^TbdUUg2zO3$wjjG&wsd=k3y+Pb z6;Y1A;duGSEfI&BI)GuT?z|r*LVut)H z%LmsVPzqa@KDM^(`0zQG~?CpJHzpgIK%AkyDqJH&4oDZ-FTX#_h{B-fV)N3 zZDpRQIyR>*tr*iJ?}BqUxoE>XeWLVrrf-P zv$i|!strwGf$}DQhlfn0qQmWnB@#GiL z3!eVYe}1WNH~&AW&vVUP3%Fkmn>#8}63$z3O7EQ~UF#8Q7t+?>$qrm|$8HqquOVF? z|9m&wfkL}Z5i-nXrS5v}o~AZ?BX}!(2S5p^uUq=39U11d9)j)h`e2`}e|L6N(6}Hz z-I6h$!;!}4N}ZVR>00zN$ymHR6pheEf@@rtHyUw)EZlQp=722+B8mI&A&y;&_gYsw zQ(*E5&Hhh0@%xzWI}X3oSN}LY5ob0XnBNX$p8rXOE9Lr&sN(n33Bfd?pV~3k!>HW$ zxM#yv>k0oRVOGG`3-#m3e$R|Si=evmhcA}aDOo-;{|PFQPrhnk8uZ)S3h}k}F!F3D z!Zs2=mQf<78K%g8+hgrzQ|Ow2VnNaina9jfbhxLHymS%(w{oC%;nu`h`UeWJQ=}Jj z+d!OHTXMaQ2qgj7>qAg+ zvZVm%_S3(ExdY+I2Oma=9EB8zkJ}SI zU9NkWUSMB>o|(8(bD}P55JFOEy>$;DiUUx}4fzlBNf0IMI$a@vIH+VAat7~9*v2=l z8#%3jdc?Ss*+w4bS#bU*X=r44s}9Fm3@jM{`3!E1pCfJ0P+I#+z>vml6##?bzh7CL zV?-gdqe8iGpd)YJ=DMA^L0ESsk7(RH&UkB3&Fhdtm0?qSXf!T|)h2w~ZRfD#`AaOFX2Qbn zoDsntm{$>R-TB#*tDMk*gvJ%gYJWcWnKOm|kPrwfZvesjUtqp7KZonCJfAd;f1xaC z2@U+a_gEfMm^L;xMbQ*X4pO9tv|Jo<+v*g8OiUk3Conymm|wUKa98Qr75Ht+>00dD zj@7n^J7eS&@SMvj`A&ce$v;FQ5AckJh8I5x2i_y5G8qgXDg}nqc%m9Nr;86c4W=ZU zZl~qu#`FO%u)H(IHM3E(&;tsD>+I{_m(G~TgKTjHnA<j2mU}c-whYmU~!{_#_aGtWEgYfwYuBvB83g82Un(>=kL&~|npf12g`X=H?tmqd2 zoV$SrvQbzD!b%e%6C0SfPJK*yp%HQ}BMBnR+GwSCZ`8Ju2Y^nH&F8%BUVpT;xcGWP>Ia< zeP5Hpk6EGxbY>HEI}2#l==N@U&q$viTWT5bn2>vnTIEi}zQPD~t}ph3+XsLE2N8!{ z?7>MLaqt$p9?wb97|o;o1b#Wp7cEJREgFW$OtE9``gX~ZBj#wu@p#i5&+b8`l`D`d z{U}T*AZVQ=(u>Djp6|XV98@^D#law38!MCs3f!j9Z?H$aI^Hu@W64jCbC{%QxfJ=i z1+z)!=!T5vK8NpFaaVN^3h++Sm@Wr?V${e>~au)J=!)szt@Jp{i#!s7%G$&S|Q;w9Moo z@#wd!RB74mHD@o~m#6DH%#_~=1GoK+UE9y@#&7-iE++-f#&HFmQ?gx8c(hZKe)S&x z+&I4HkiMM*S01wV6k#xSY(M(FUT|ax(Z>n3d(J>kaNar=n!i}J{>h%vZt=pk$_pf^ zm+JrBb!kxH+uL87>O7g&-CMkuGeB3GJE>Et#W85u7bo<1aFzLK5ANj*tjvA{=z31E zxN?FG15E}fHhir7^1;Thhu3oN?tX9i#LMpshLNos6A)(9%~$mVnYuf?AJeIGqbBIm zyg98Npb(z5uHmA~a^9h8IPniZED^@=2Cj-Jj_&1+HA1^m>r+`Q6fKxvmK*Jz&^MS( zeb@Q4oOdkJ>U?&vT_)C!SAE_f+>_5I#QhVKfob~@Yhbo?{g@2CG*u6mv+C}>+rYN8 ziBrVgJpC`G^4#@W%#;>qSWhpW-8)U;hCQ67^g9xCi<@e6S!^lE&r0V<(5J90$Ihg* zrp7)U*zZA zN+xooji-=SZ^DgSFU>T}C-sK!RBRS!BMf4&?A-d9?cLF7y64twZOvKTdu_6LCI;K2 z&bAL?4PqFXsAe#L`fWiqIYMEFd#9Vb(C07_p$C2xVnfll=`9a-$=4m@q>c|vAP2U3 z`+Id$2TOc1rJV%>krrMI?^l&BJw8!t50S1Qc|y5;aTSm$#-f#vqL`f<9;A64 zt_F3>+Wn&2QJbjp5;%JyYBX12?p5jJWVOA(R(-tv`|G6nZ@(@E zJ@MmGm#fHxKdB$b%PXQud0-(z{n8VQ&?cugpnph8k`QatwAi2zzgU5TemB15h&$kN z1?mEwaguAFG;#AVHJ?4j4-xxPMetEQhM{D4r~UrACUAi1R(NDkH&Tg^uf~N0XTtBLoTGOKsttYW$;{=Q}1+9Sn+M zi6wM>s41eeXS*6x8;{maPl&Q?ZU*ABvO*>-2U1dFCKeiCt;6E5p?j@_l zTWtSMb+=z^h!*q5MU+DvX7%NRarUz+9trpk%qO**BF?D@5?j#+7wuixk7u3MhTEFg zx96;&#Y-s)0r^EH$dNxV@=MsOu7cgJ-gox_-KtRQxihclmwA>N3gc=O#D667`d(oV zW}^KKOSU`Fb2^`#B=lK*i;yNY5X07jW^ex3R9yvKmVR2ql#Ht77#uJ@JRER{v2gpI zv&;`FGVQYr|JI!M@ZPtPRj>KP_|gOeje>)f0Zec;z0{JzW2ouglH1uB0J&iQ8exs_ z@MtaE@_oTjcdX4_U>{tXn6*iHd{S((uu=tWO7m!ri2dS#jlq8UlfTJHf9S}`VOP03 zA!c0t7>JX^!Ty))Y&WN|=3;lZvw@RqW_4YzMrlH3CMbXxKd6CZwO1t9J2p7Sp9WAJ z{e$kyczL0Aojo6e=1=pHpbYaN89iCwHi66~7@|Y3$=>4fXRy}*H1dI3mNFIvzC5`-F15-0}UI=yt|Z!SbpMu=&YeM(Ur~GaGdd zF~ARAlgMTm&abe1M~*f4`CG|}?_WyG#KaVFfWqIWJt=$jtP!P z7gmSU(hcW(4jtJ$T-#krq@#v4xP3eASN74a zpx=UR^UT3w$WE!Ybt$G>Ve^JiS~j9e&nj84+>dzevn^%S$uAhnX&yp~3?WM7Z&<+? zsfgqO)fnCP9yxEJWrCxAzbH%ONJf-AJHa%GsXDEYokt{r(6?%)Z#k?cEKgUx$J5#4 z8t}PZXOzaeCT26GSW6nz#RCw(U~~;-WAaC=VtV;lAGs$bYE6bDs$fS=WX{EYV@nAM zq2!WCjyZl;hpB%hLrhIsnpm(}$hQA)_yPEuYLSSvAC$7nuD zMG^Z3lIG~{(Z_vaF*Jg&oRMvLB&&gXGE6n7U+h4iqlkV!As4!0!3!{^n{ClD8w^|U zJdt+aO)s<>t9)#V$B+}nFC38_+O@iSnbW$sZg1jvh`DUBAJNW6W!U|O*6h|rE;A;L zC$vV*#8j{AEq?JsC_(MDY~ApYyv)AQ^EW0cX0q!1$qU@A;NN#}0!cD5U>U%~rj0ZY zvr!+xIVFLrw#N?2>Rln}WqnPqY)SG$?$1@RD|dBpXL-_T=c6_9H5PoCIQlI(`!(h4 zJSp!bne_EfyWizD#)lxO3lmI?(#}8mAF?7AYa@hH6oOUa^olVk13x82@S16F3Vzp~ zi|3V>+zwQzmDmj-DB2fl=?rj*qE5^(m@I-|@FJfyG9C-Pc9muX^Y0TpT%?pODwz?DN@;dOuxxitL4pJYc|RV+d+Uro|mYHB`YPF*N~1 zuPv`8s}_~58+$x16RoZhp6LitYc1QBCiA1w_cx$`9+p5@wK24dc@h0LF5wr=Pe0;+ zA_v47+^Z4T_EZGB(!nABea1rj7PBFc+p4HX|3X7_8S9i$L5?7Thul2%+ zmqX>SCY;S=H68cCJ(xi|35F`QLWD-A52;Aokp#bQWw}%G6%$)>vJzSKwa!oeS5D2U zwr_TM%i$KoqXUP|1r-amYm%lOfb~>nLE#;;YZCF*ciO63GPOQ7uraKCq>*#$F3ukM zZmu3@zl0)v}(5Mhn&rt7_Bps^s!F0w?Y?~=a^zx~k zKfh#9+8VD6kQ2KBcDd|&#jH6raH(I8=ZNfVa%k0wE^X9t-0$Y)?)=ayF8{bN{ZHI$ z7nG9)k0_ej^7FOwZI9A0Frlgi(lm0BAeLw-^8)iQiU$}49oU}*JXC#aQ!{tPOR4}; z9+tQkYNK>xo-So=1|L$RldJSy>g#3XVh3hc6s5BCLS*4!7Piw{q+gb1Wg!p_N_)ac zHsA*^W>WGOMMGvjKE7miY_&g!g|?ndDA#Z{N3r={wgjzwI`Sf}rON4_+)a*)vPvWRyLfR$pCMz4a{ZQ?a+dby zTWw@!R#VghG+9+ujCHD}DlBid&CRU?;Z$rQ&=nLWQW}o$im}fl53sjc{?tdiAVlEp z=yjeSNRKDq73ovKS}6vU{ae0w)s9AIq|e%yUkVPU;GoaUOy(Lkb9b|G2^d|Zh|22& z$`1~T`uPfMWHSnC9BrNAWS=C1BM8iJneFhL1l^FjA4Wi}=kwil?IUv8Gwi$(_Zuc9 z)}sf0XM+qGB_!V^LAmf6%t?f8v!g}JOb>aBNz;IShU*kc9$c)!@uDhPO&bIG-H2)n zt0D|MEQ(WtBAP+z0en_D;u5*eUGoyGJ;WKvZ&@WJ*cD2~Ltl906hLl0LX^EY)|EXm z(mDNAWH#x4X)@kS!_uYGJ}{NeA{09{CcmyOds7{)otwC*9xD5?EfYg3kUDySiRtI- zwOgLXJ3Ae|lJzS+R1IIig%O8}py4$BgSeo9r@wb=}%}HkIKS|)NmrR z>DQoL?tJl(X(E>Mi#CG>FZm+uGC?_#LF(!D(wuMIaSCUr1uXdy<$RLsYjsJ3iZ$F7 zrR0Hv#0ppaDQumloP`Vw1UZByyI+OYNYK`pzR2#5m$+P6(+|a(`DNzC`W{M?aHKtT zDO4>j6(OK;5vGeAn6v8|{<%Lyr`p*nXC&&gE{}dW)P4HSzitSX->CAIr(>dQFUyWn zY2CcRWvN<|_?0@@pCn$iTa>6F7`M62nzc}EGWLS2Z)2wIcFH$SDiAc@z=^RO$@|Q7 z%=`O`>I?n_=HpVm4F}T(wqzVVW$PZ9lS4Tb*bg&lG)m%)RT9k!dm&?1*CanG&#m~y zQ$Bf6b8V0fj?A&{B`Vih{c5Cn++vlAI;F3dLm!FX_qR|J(J->Ekaw1m2Dq^#a*lPx zPLC!YPAhVHyg9JGkFWtOS@G=R#Dq-op!_6ajcQDzk7JWU(cV}LMFxoAYxT=RhBIZB z-laX%1U}tkd(+~@eO{Q0_`sTBDO1XY%A&5)e>oNO3zMg5Ccnc2ih!rqMx7`bI=abr zVfPm6iYK6?a3NTQiTbz}-R)Mj^8m*X>IL6TF78wcr)QbzRs_pEW9{|Z!`2$tw9OKS zNivjz*uG8e6?QuEICa+tqk{TRJZAQg65}(YgpO(U5Arv@ay@1RnQ!kUq!?5DLHcu6 zZ8fIn1a>yU`l6Qp@pzFKfJJ=#zNOq!dXND4kT+WXm1Oq^o%VXUQZK zW(_t4tgboO8{8tUpk8mrOqo1&92DKmE3a%6)_b7Y%{vt|(nJVxhXTsQO50A+c z)0!TFkIPT`?dvgInw9m`l#G4{aiaJugfBuJf0&OVM`0mfU0-h?wb9~h#EcjW{OoM> z3YKJ=B1N^;!9_B05_t5`nBKi9?-|50ZCGUWU0za~@iGV7gR7N?#Y$JCB~^jLx0dCl zIeNEW%kne2YJ-neB>L~$t;=dkOPh^C?#Vq!>@fu7shq@7<9^_Ew?_xJbJuxXlE0J0 z5-!iHZ7^`jZU|(RF6+(-o|^+Wx*zo_{+C)uV|s*D*0j+-mFm5)nkS1ts3qZquL0Lw z(QAgJ$R5HzrKBy@Rbz_3f!IJCD8qq!8on1YXIw!S1Qa?w!r9)KU z{5DAxiD%zYjwcA>v+6l$HxhrMoc+x^Cny*>Wv_a<*9-j6iOEcRufhT> zyFyvEd=85z1&LHmRQftuIgo98Mz}Q05js{6{vN?D2)Jj>JhT zr;YDg9uQ*Y?FOf(Z%JD(lV^d?w2y5-=RoZ;zlSGsMxgiv>1Rf|_P-xd7S&f!u9;D= zHCd+a=FHT&lx?Fr1Wmck5{Zy&R(y+c3%C#Cn~*;~XDUdn0*5q+q$mU9XYMQ zbYP>(fwJQK!hhn@d3)KeCM7`8ML8|t zj~J*a9#XyqR6dT|cg9H*`!H-g^pjtkD6T9E(Mk;{4I#*dEA{YWt5?(yNy|BtAaG6E6{qbN{AB)A#0PEf0s4eV(h%QdgyufmmDx+cBV_&9kCP zmWM@_sA+Q=ZgN~7z5Ofe_iC>M8?2UE??w=u7sqWwm_yp@W1A+0--Uh0Q2aM}CeBf! zPmltWQUiq>+_z>!uD|oyzan7fE#q<4z2xeSG5S1F1Z9RVuFZ?vd6Fd#kz1gCe6Vq{ z{jv6Jgzk?gN(Ri2~&Uc`$6yfR$ksWM&idWQQu&@Ug`h$OLCNGfDCbNMXz$Rj);=J zf;too8LWx-^#K?B9ZNI$jwk(u5+|9%-B0M(()s;0V_#V=RU0A+{u3kDa&??UkcMIUyqn|J z`hI!XfYut=_#?fJt&nb9sSoD@GBYjp*Q-zw60Dc#lF{tKWfiz9$ec?u)P|zRHwy_2 zN+80B{z9{4HmHogRoFR%)Z~R29WBG|v+w?>*b#r){YAT>p21ttsO`Sl&(WOY)yoIT zv0ix3ffpuIEF~w$Sely%dwY8?JEHfzc=!nAn+aEF)3#8ha)$d;|)8&|SKmthBe|NIXTZbJr7JEI$$2QXSKF z-}uM~8}LP#p;1mXEp=EBK3olOpp;q}(`3SDw6W2%k;x|a#Pj9p99iDQr-$^}`+2&$ zCFnH9>3+VTyiZUx+|jB=DV6;GZqSAK>6C{rP?V>pQzw=$5HrpH+LnGzV9D(Vfv57* zgT{Jcp(OoTW}Pz8m0UJ`T$!HsXc4Eld2U*=PMp*#W%#lSV3WFAY*Bhdrli}4;)r|x zj|PD{g}N>Yg?rTi&0FA#jl?GMU7_pctdt%FOXB*_+d0ec-y+yGUUi>|Nj0=GW~R2Y zjCivkn;6NdDQdvYu0l%=I6Z$|{}1n9tk)!$p|mD{uhqKm-3^y?#q1@8t9_yQ73G1- ziztkG*IrS80t$~T7H6AnXR4*KfRz!Rwi9xm=R>8DY^s&e^w$j zJotDZ`u8o_I(sTeh=Kx%S1GW%;->=cMtQn@# zQ=`=6Y~NRd-m$A~{bzMc}RH3QMj6U@}=kWF?c5FhP8OdMNHuLXp#t5w^$9Md_Sub@}NcndM)Yef*ba z>p;Ap0ID?JK+E%%bD5Pq_(mdW(P{DBl17(>XVCfJa`RG)4FlX^G3r2W@?W`8QaPC~ zpKNR*b%k0b{#J&f1_Muf*$&iGK_vcm-*+m=I;|2^i44FQ*P1#|~rS4%d} z9yi3~QADTIigJ8)PLYrjUpkVD*9c;YvT$!~9{^N91&P zO+FwrMYO2rv@8`#h8CP7d@*AjP}^m%VFzia7@Vi6u!ol8Nc79TOmvAIpNy19hv;>z zNh(~R?lL@i1Tc3|~{DYZh5w8R0vECk>+H=Hn=H=#R;< zE4Mb8H=H zLbwgPMmVaA95tKohM&!tj(nD~q+$@E46@AHkQ%>9*y1%{mnD1b7@?Rl@+3g;Q1idS zj&|s~?EDzMdU;}o=g&zK9Du*%sN_|@@GMTx6b9z$OJsvTUu#$R+!?qxz zjSdIfvLr#+_FX-7EIHM@A2M5oa(zved0Z|du?GeMDn^#-_$nka8Mnla#Xeo$;kc?P z-YEWa%!Ih7FPij_Bf9h6IN?N@U&<{uB0~wQ6~r1-Ts)nLPG0{jd;M(KrB3-a2*;Vn z;se_!tPwto@!aNbBNlu`#a67QoBAbjBmMOE90H~?Bg6TA^Qwxu@x?+9(eUk@^n1DE zy*4=578RW)av5aT+YJ#BZq#f(y^I)R-bGe8tN{=9C8;}6S;;3`WWv3YnCw!Kv^mlq zRbtx!I*{-l#=OdMTreH#^dRm0A!P3D$O0HiAUsrAY zAe+YxCuYUVKYF1M^kH(!+tiG4Mkzx)XhLy%ma0mAd8nrQ(V)xqx%qy_=%pv0TLf3@ z9dmn%LbHFcQ^2j{sn-ixYZAjqyy3OBQ*MRWh%+0dcPD3=RMWB`EvcarPuN!gcjbG= zw?0HoU!h8Yk`mtjQ55YwDxyc9Nx5t*V7X;ff-tce;Sx=k}zTcti zUxh?E%@|rs^CTlVC`~8A>4f_yrJOe4p!dRoUKNoLi)fi77l7_1yvY5CQj4nsaX=%U zqxw$SeI$8OnYJ7S$nVnUz63Unvqkph!}W1%@p1d@ir;H#_huyC`kyuT8gP^B zhmF4m6T+GJL2g{9I}==IstZT=#wBB#gXx?|S>(w)4j6N^=J9dbN9V103RV z3)(&4rn)*(%Q4M|~ZN_bC#+=dY5pzVOr4+9w_De@GNfF)^o%Mp&| z7Xc+d?*Mpto$=*rrR)LfsHo9C03Z7pNPe^D?eBFcNCBeGq8&ns(k`S4Imbj6U&lo! zrX-D&=wc8VBB+WqPWB?att+I6O9(|MO4TrRSW!?&ayzEix8kWD%;{)s$~=7b-T&(i zPn(Zkr^0(C$gJ(p&S5o)&K4gn=5RqO(YaQ>>uTdP(ss;?;@Baiq675C63UMh6N@3X z`$e(Ih)Ip9`N$C>-AOQUNcC+$p*E9;R&;VLWGa3tCTYrSmS4E*O#w&E1B}?)#u6Me9>|uzU*qHN>{CxkvM{bR&!DKsv(jCD|Dx9aJ*GqYP{rij~DHHJi%e7^>ik{WvsZ(hw%QrME z0`HG4LBbun>2LDmGwzaATeGMDGg6G|>}TVa>^n zIo#bTRpZ#lcWk^a1YAJ0!qV?eicaFvBT`9RDxpOW(68D|EWq=R$+T*6deXvkF8GH# zamo||o^I$`>Z5n%AFlws;%Ph)bM}$g%kKmXy@Q%>0VVBIOg7q7`rNLm3Im&UR!W5OdjG&yV&GxyX_v+TOs;1_A)*6je#$`4m?09P(5AO zDPq!{g$oXiyYb+c@OykGiE*m~%Qu6Z9@QY!pz~v*tO3oUuH<)EY-On&=VMY6Ibw%A zv>rboT1|7hjiG@r*I!7yorO+kT~g)8hyI-XD6LHCYv(!dodI1gQlPn<<=p;V;1aOG zdwgD02meF$<4>R_veyldP0@%LF`*KHM%Lt9ld@(LDCijJe^_tB4<=j9c;2Bq z2nlg=H=0ZkPw}4D^jefsnQ~NOq~e=y##}Ye&&>Z!6-hwVW)dMk&;~dIKOqe`VLC_3 zY@1soCjOzEU6(fq4xhy+#MjXOwI2meHcz)+4E(lB(l|T(OVDNXSjSxfH@vPUl?db{ypFO)2me@ai7m0Od@F-~&?gaY%jFfMX?)diO&L&h-Mwf03ZgqzS-^Aa!+wq5g3=EIc<=%-vfcjtsG z&r29NNuvx`pyM+^NccW(TUf=TlU8>ANy-3Jw(4X@78REoe{G&&6a_0Si*~+Ms7*?3 z>vOxg+dn-`_Bj1f-CP_ z4dk$`Z8@Gb^mGryT>(s?gF+40o^?)-+=OO>b#6BR1dcR1Gb!}FZvmb(;kth2$&u6k;a_R$@c?VwWQ zRynkuw8zCITKs!qNeG0bw^U)4jAxH^@FnI|8LoTFi5J6zRv`%E*=(_F89-W&u?#+M z070aO!>l4xr}OqRng;c?m{1eg& zOO~BY`XTNPFgT_2E9m|*ovjPsY|q3)qfw^ld6slhi8g>UX^+Kn{Rt)y@FidnfD=Q% zr~a$4Oy7H%W^(%vqQJEDkr7!ME}_^4m^hC-VZW>_;cq689|NS9LzIbabom<#=Y1C{ z^g-UF&9<@(Wt-L6md$2_j`tn$am~7tfiH(bCs;jMD>3tf#@SD+ya2YR*1(OKml8oj&*fXwSPMsKj4-0Dw9>(}eS+seO@| zov`$7NCr=kqP&zTBEk5+M2r5$99gIz$`~u-A8KnoC-jahYfKj6g0He58LcjFGn!a` zwwU|rk#6mQ90sU2S*xu9Go{Js6yC9*=;G^%_Ll4W_q^E%G3lI1BZaQ49)Ru7pq%3m z@55oxuSMctr|>g%P7H9%RA`z+O|@B>?-N-X1O9A#$1r@gHuZ9IrYfeeKZb%c<_!}P zNUu$(M)HA!+^0zrvbV0WK}KzW=qx#)?zBzxGfi z^*K>duo_2KLjwDR3cujJqjGdlMcy)e^zzW0#Cd^=rjY=_a)Zu$zLM z6G|^n**nZ{dgwW8M9Ji??;VFoD8m6r7CAhxin5XR(~VIP5w5`#d(iK?o?-Yad@pqB zR~**$jZh$JyeHb8tAvWNTSI5IP~{{Xckd0oL(Mx68N;Bm+GI|~~0=A8=r;G(8^&46Wn=1XJmLHD5E zO64X>@Q?4)Ece+27R?ax{`8sXnN)go{7ph*E2`LvMwSZ%5l{?;d88+x3S#CR{+tVZ zPa8fUAprkAowL$P{Mnr@M-|2*?}hUy|d!y<`}1@{4Y6_V}Z6SxTu) zsd;^tfRED`C%L6&ZK_0!^VSZmOQkp6kZgpLe__UMrV$OTXp0Do7B9jdUir-HOsd%< z7JnB*&Lc#8-4N!Q-s;CDmzvXmHIi|4ygt4zNw;Dg?cc9rA<*VWL$-OnuNjG6ZV8Sq z!;fD5jC>cfxRk&jM}nIyWDV+QG?o%Y4x2xgc(QgV;QO~OgtZt>Q>vQlQP2F@8xGsI z6}SC0!Mp7hlE0DM-J=W)YS=p5dBgWJc3uJ?{()FV%7KadsyKq;97TvkW-p>yI=2Bj zeHMH^A{Ah&&Z4m$Tg2LxHc`_hqhZ(WwmuC%D~BkRCKhcK@o20+>QtnkZ_ERCt1-P3 zTf&7e6|sK9k2>45g@zU)fZ09z_?sPV*T8gclk{)J1=$Ywy|2ykIW>!u4b{)DoK%H~ zGThDe2NRx)3!z0s*RL2-OW)|H5;DC=7^alf9J|c%ale8`Cl`S>pa%J7jY@n6(y<&U`WLSYNeKwo=n@`L|KdaIm z&Lm)WaQj+%`1ym}Z>ig!lPZHp?sin3X>Fsi??Nj}b(LYLjY|HrrT?Zpu+G+L{GVM9 zhkuDZS23RNN5}w(e=Z-C1-vqdJ*sTQsSj_?Fj3{QbKg*BJqv-v!~$4gB3`Agr-X&`-H|HlT%`B8k?lYBtk7QWuTqkmt*{w{kF{ha;uXAhm;tNuNq6upmFO=aB zTQVA@{iK`X5ZiXkw{nf@9u$!6!Pr*z@18I{?M*6PQnrTe*Yfzdf0U%uo%VV5|2|b} zZ!4G$z@3<`HVNUF+*ozhbln||Eb@6S!;$>&N&T}Rgz=fU;c(PSR5bY$VfLGY#C&8 zPt(>m`b{-2C-ix%xb-6=DXIIn)LqAuY334$DD7hac+D;NQs#!4htOEuDh~nf_Sp26 z515Lr$WCGB^%>V%{JOG##t3{Z=0S54ewQxI zk~pGr^}VO*w)?f6cac*@qu#SI92oo~b0%nCY7(JJS@+!Wzta|>tuAb(p3Myr{U zqW!JpdZH)jzR)Llw~fS^C@twiA6age!Ach#tn`uzN8%GR1m%@>u>r&LwKw5ajMxkr zv}bjT{CzX!U=OquXZ!dwp7~f<20w`N*gNU*G$3=W8YZOi{@+(wHjY{z4>W#MMSdG} zI8wQyq|}WT&XiCmqn6Iu6_WnLpg)hO8!c!(;BfAxxVm$*hO}AyPs89JS^6JjG@-{} zSDmh7^AZpXRSg-a7r$~?5(AXW?coHK)G#0p_i*?V>n>n(L-=ZE_v^q98-6;#3y!6$ zHdSoRR)FUpMH;3_qrG=XlCK|$k%2joqN5ICU|IcwLZf-$xuy6+%S~c*cD5JCL&W^O z)*`y!JR3M%$za>QDpH{;{6Ct`g0Jm0$ilZREu~n2;_mM5#hny)x1zxv(&A2W4Jq#K zPI0HWTX1&|WZAuUzd(}TUo!8^ob#LyoR*Qutz%)_A_*%iM3_v5=>*H?!GZCKRC_16 z_4!F6Dxn5$f;#Y9Gy)--XQx%#2)3*>v_spB{Toy}$iK_v+^bIMlc0(d2jhfs?Q$X0 z>R2klRe*;Tt=K3ZW{vE{$>#6;#3^+`F(ckn|9X?oC39hcZQ7zYja6a1_3g<6%K#sH zY@fRmi@gH3HrS;=$&*lA^xQirEm6Pmr^$I8z|D)Uz}v^LRa(@9zKTxl|6WdVGnA!F z^XN({L6)Ea+&uFGt2Fb)?tbvhuWfk#82P9 zb8nP-1=5oE1<8>51?(C6X9R+OhE+{}Q^=$<`9688#f^WB=W|k%EW@*39tv zas4+qmgrts+_duXU{85I--E5Q`VS^4tO~tE`Yf!SVrN@fUI$ST@OVttUHl`bP_ShO z%wIO{cJMH63{%BY!kN3}secW-Iw)ElKVsG3gkG-8`F3v1i^9pZz?`9Y8LnqGof?H$ z%NyP90ub458r4tz)xLc~pRh7ps{Z}MeE7wtl+Je$l47V6xxOyrqsFPBx4zvs|0*ER z6hyq=w<)o_>Tj=eb)VX@HXR6gCG#KkoE_vChy)ZBv{(&@?OmVV zHZ7;WdZG%l8$#Zp5--JIcbwwbps7!;ob-5_e+29$1aaBY?dP^vhY$p`Y}#ANK14>}Z-3F>W!rT82m+zoulivYM&qSOz;6B?sj#X^ zy5w9T_5A2NrBJpjtSm(Yd{M#aJ6*Vwg`JY zmC;2FnRb)CWhV2FIz-i_go?^8e2;O!r3ql85+D0MCA~SL@MT!I2DMBqhs#8hWY)0y z&$nL4OG7U$LA{n88(o80%tFw=C375(Lwzi1Prqr=Z(47v0Vyg{!&9VT!m0J-FlH+{ zOWt3r{%}y0o1;ul+$e{z{uQwTmd-qRUzQwJG))wx%V#j-cd24(SW9d$^WQn=uzL-uTE>j^V|uAUC1}5(ppA5bHmE;~+57BXA;K*t@lo!PUO)^Jg(+-eop4#f z$6Q`yQ^*_s(^vuvzPu&9C7GC`|I<$IqYMc29MQI%`*Mled17y`RVG{KuTprxa~^3)STQEATr(D(G}}`@zGd zDjzO^TME(ars8<&E`7Cfa`HdqJtXdUF5Vt0`#Qa6f*tP_p>&M3a{tm3h(%@7 z911+u^Va-#ODK@P5RPdwI)zxiJp3J7x!e;hju8Y`!mfSgB|pA@Cn97h>JJe0^J~Ap zx!XdP%u}ZOD`POL0Nd}LaDG0qb<~^H^)M0lucRpvYHz=skJb};ekM6lNypU8{!QB0 zJG;Cr(>V~S+cHN6F9v^VGkoyu?Q}l7gKEWO|3eZRgdUQAg$r3~>+m1a3cFUR$GAlhCu zP-2ScSJJU&L_p}o?$pPh$=N^F?y=HM>d+dyREM3};)!xw6&RIcdI{}=FvcM%B%72j zE4i69&RPCjE(K)R#`HX=P|1yukFuT^GwvFvh!{*3r}S@y;ctbdT=*k7|nH&+&gOLYVeo9piMa*lA5SI?E z^IV!s_)&R&v086VdC+u+;~Oln0fH$*D%aA);~spxg&4ZFAggCZntUuj-n>2HYpL>{ z--{BT*Ir~~5AbK#KCh(%8S-%^zP6L~K{Q39aGa{SG%heSLr(kNq65D3Ivr^Ui@$Ul z)oY7V>reG^ITAyeqtMK1#8kL)*L^}w9RT;C?%~wzojhL?>PP80z0opqqPNOyiO-MR zH7@u2*=}#+wDw&IRKk`Z>W`F?DVp+ij67Xx11!6Sulh;H`O!|iQg|c**fz4+BK`R8 zKwX_mRm(tTeA{{ftz#7J33EKtdK=;)@@LJVQAD@!|4z4@2==|oen_D+W@CeS*C9R8 z2xaViU}M0z$*`Q2)9I+Ed*y1EKY&KfN{Oa#JO6n@b8W3I(0xxQ^zQl5)v=+kU)$&E(B>xR5Qc78b7!flFZuG`?=^B27`p_0yGt z{_(P=6woHPDJcQ-_I1779R~XnwMiC}iCGXOON)2;_rReiRUlkvD?*m5SVgLlNBqmN zt<~9Xy`A8Km{DZdc;ozKe@pZXmpj&{d)ahn8kYq0DvM`AJK=?%*Ti%BG5LO@&cMd` zj-fxvhG?ftgG=1D+O_o`Kx{#iM1Vg{)oRGt%(YH++`YSb>va zh3#3)!1iuNpu=v}yxinRIeLYE71XsK9}(NLPVJVwF!yppwDT zVBDYYzwOTiRSV`lcfikhs+@zeQGaN6^zY_$G2H!T!m51KB-b*Q(X91~@!3oom)X%3 zg}9cT_$hPxl2hgV8zKwr3AL{tkIKBR?9n{%Mf={#n|SM?S6f^;SPPyZ$sDl-?a*|~ z+3|gC|9Dj;Hmir%SqT39Cw$hl-`M?^8czaygGAYSRSFBn*`qP|-}cC7G6+0mLn}g_ zmYDdZUjt{Oc#*POa?BSQdRA<9f^56!)|A{*qI;k|E35ty0ANH_QgXe1%HJZ{Z^>^& zZ9Q-(Hl0qkT+%%(=3n_*I4^1Ei}I&Jy2RrouYxmgtkw4HVgrw85^3w8%xwBm>3Fdg z(sN^f9W=H9Gy@qB#@w5m+9Pf6dc#~vs(HsTb}&nXD2-zu`+HW_pk1)&khGDb7pAXQv98lH( zi}Tp}D12N(NW?wzeMXo+q=o-)Oi?E$15+~jr*U()cr6j|bwj;f(dB2&O5y)1eH)^^ zHof1mobM6*bbDM6G(jy_d42;C5%XIJ68jQeSsbF|b`r!arh6;WchV@NR6ZXyWZwN{ z^%_JM^6j6_LO^d^_^(FN#(5dp-o!ZE+uWNkLov*iY z`WL}FU-|{=o9*LXL~AO`ho}P7M{Iwcer2)py-I;SjJGyj(ay6qQt8B$s*uqqBq}_p z`G9RK5*^QEv}UEV{7Vy(jGp)#*I#7({a^UnCV}!@j{>^i<9&-%GP7bBgt8^2C$bd1s}jC180qYD+Z#VH8{to@if}g5`7_AhxI|c zTmX@`bUG3vHDZKd!iYrK7gSrXnY9`0KRNORADdbiA4iFO;UQ<|Jw`%ecPo{b;92aY zl{Nq)c|BhpFI(PeY^a#S+m-9EAIjY6Nn-Ncdeu4u38^#DS`KI^+5Tvx_k`&7N;@vN zSu)vU3g^!`|E)Q{v?y>i|3Gu4^5%oTjdii;hZfz8qSFRWTPOVF zbb^vQcbgt3oA58O1Le%2(2KjxSh=pi;?9Uw%s|;p>F;F6 z1N&l&y9#@|*C}76#v)!CvCnq(Ng*0mFqYQ&*qQIoA)RmxN+RI8fr4sQyo zVt;(REiTMbY_dd0EhoRZ&NN;(afdzo-%^cPOwOqAiNhabDE>Y0KwP;{tyC%KHwMn` zus)Kcr8=;sSEY`nHxWe4#*L41vhI|Ou$an8@laY;?nX>7<&*W%|5V3I!09({Fvh$v zOYYRH4Sno?COV$jPP}5>;w&7c={xJkjW)=)NUjTEb}Hll`nxjnaaRP&^g&mUfPaPX zGaRR81lM^ITk9gJ(l@En(1SRIRnB}qhAJ3p2h91FS24V@a^eD>jAn3DGCabH_im!PAG##0b|T3_uQPse#n zaR>vWsuS}`LbN3HxWFGT88@;U2b4fEg3Ja=u91%4-u{J#QByNVUthaEn19~mA8aM` zm^!>w7*cFPx8E7_K*w~X{*{$19@Rrb(GW;{v}UeV3eKDPqImj&2e_ad*h}i=NKoML zBsk+LmJ=a3nP0sAt!pI9Uhe=&P|oe9`qjAIR=@Mv!Krr1jEeNYTvlXC74v+)%wOwrelttT zGMinUez1A!j%&2Y-TeRV1+Sv{mT@zbq=gg+GBPg=B~L9wGcEhz{U~{jf={f{J&uhV zJ7O6zDy3%gEeK!*AT_BCVt=Am{M{_cacE8mi0u?6XjJlMv7n%h}A|W2H}NE)SO(&dHdUIApz>%M%jR-dOhuIBDsu6 znZbTb8PzzgdAPI(#gn;cq&a)rKvC(|$R7X`rVjC2A-|%?US5ktbU4%{@%rN54UNLx<7~i_rUo^ zG~X`Svg`ZJzOJp#nk2BS&XUM&95OMT2OKf7dGEV_iU(`GRUl4*FoZd4RZIKQ-^r%_ zG=6urL;;FTN+zJkBFE7hv|?!u!e9nE4m`6?1pu%aadSxA}7(r+qaY)P3D-R;N} zx9`8gE}x6)0y;!$b`1y5Ud~-`sClmXUm1uviB&3hxm#-D#%wKgHY(e9O~kzDGI#_I z|Lg$SGGV;?1yHiHshkml^B^9x=|Fw4z_cfs56I?6Gk`U}O z=eW+?xtII|AHTgNQEr-w__yJY881wYt*cT44tp;jEi_wj3YH%3qqV{Hng5%MfB}r8 z)+U7?OK}N>NZS1UR%-x^J$q}fYi&RaBNl;vJU_QNOhk;2qsR%-ZZ66MVPqehUf~5G~_R z(s$kh!?v1ny>8|zIkM?C)!HpqKoKq7UszkiSRt*y6kDmCH?ZVVf3Sx@gHv4QjUby4 z*0#~y&gPKf_dL~*I~-jDV0rUa^RL^QX$f#Kr0*CS?}MdJv+~YG^8;kCkBQ7NbM^E-5>)oAxDc*DCZFeWTF3 z3)Pg8u*->aTi}o1i3TnN1;`Wwq3lfMKkvn<%mKTw$niX`z7n+WhHfJIk_$R`oM*oN zJ`v@HhG#XJ0XY&@*C++ea|h*I#NP?l}qk?zOedTTbi{tgNdU|N2^2H z`~(k}OiJxqDdx9>J*}>IA3+|jPCPCe$B0w61F~IPg++pAJTnT`W=(r#5VE{GSUuvL z6`v$y8DE(L(Y-T@&=dK6RHuZl&HdFMA&

    }avTFi~(Uaft!9Pxy-n#^#IVn*XWF zY0H%Zk6W+l3Y-hnwB!CN!z2X%9Gv19CJ0^X#|T;4M663IT17?1MJ*zZ^~KJ4nc?kB ziP`l&)NMT&J~Sl%6=HWl-I_zP7Vfaeo-LS{NECVZMOC=wBfs1Av76iRS>^Aj*=HvOk(8-;eQijYV6w zN*3f~p;-f~>+29S8LlfF_9CjJrjZ+ry;#3u|n4?-swI8sWUlG zA<7M%zM{O(Dl4aLDJi_f{jAXH+C$`upCjK>hz z936f?y)=zhu$s!G9!=v3&rwG#2+|*pysCcGEe4(qn8s$CKYqedBpi8-zUW2pu|E40 zufrdju%}e$tcWy3ag53FX($3ob$Ld@ZVsor(x?Aeuwl* ztg>a;VqlXKIZf?Yna@+f!qfWUQWOI9c~JI&Retr`2*1MDq1QB-EQ#H$W4B+68V3jyI( z*IRF?sQc<2faS$^+-085k)ON%Cm-m(eEcQkE#P7`VX7*HR6PEV{S-a=@egON!(G|} zbCSr&aw40R z%+ZA!XL%WH%+m!4Te#CMc`&MWrgh?2W{+%ZxJo1rdo~|#XdzgWK39G@?$@8~;6gSR zDBULxv;9i@JcVI%h4I`vbA*FtDaACNz~P)PD9_O|9*@p^8s(lJ^30Iqzp=%nx$LrAtl%*)j)b3-Z?2ZlUKjDM z#Txume22$?!(=kI?G!(!T~lt))o}CqBdr_>&DMTp;W9B7GoaTh%8csqxF@1=7*@}Eq;qh#s1_JHPv4+m8CypI{u+KK!~);8i!gt`%2Pm zuAvEd3sG=KEtol{w)o;tGxoE!H2uN@foFmNOXG?*{`@XD6IRd#4(XjjlVg5avsfEe ztnlFcs1eTUqa7upOT;``)5dXi`TpdHa<{*8JAX*Ex_XhQo7xQ0%ikxJ?W7`+)U0b(h}cX z97`O|rwxt1@4GHr?3yd65NmZaPiAYTOaA(ZkUW|txmZM@=r<*LeV_jh@Y{D&byrz+ z9&QRfD6FqXS9|eHjvb>aFh#?<;*cE~NpffDpVCxN0PTm#5`UG9olIi7ZH`K?RLWx$ zlnT-a$%OFt1_=}$ajB^4$VD`xN7gM~hwqs4y>)$sGO^~&r^Sy1>Cm#gj0Wd@00_ z$l-h36?@nuiHykw-7zZgVw*8Ts%d`ex5GETH>32yQ3>9*tCvK8%2fq3iFYT5Eo8Tt zj<4vtZzG!$p?R6rQ!&BU#A|(PODypNka7Bitp(VyT3fYAto}gD`8}nY8j7><*-+{paF<`HA{Q6*eR=3+Zt~RwQO=Ay}j12es_jTl4(-)di!|pt&t7>GS z%P@Umjq?FT|1RTuhpwc|p1g-wgvAbhrvGm7QZU;hwuJkRP;yumqikfp=iyLhhckUG zBXSkqC>5^qPF@l+ebm)vZLbQK1&cyqY&SU)!Ev!-W^1AvKoqP7(Cdpo$Ttron}KZm zqr|ngN2yHn?bVLZ%f&qW6T76o$LwA>hJ+#b#ph$uI)!^3p?+@g{iqX@z_Yrto|}Mz zWg-?ZX(VV;Qr@2)Sy?zm4PY>2J%YHo!~39ZJswWV({t7!|dqFU)L6pDj)1 zuuy;NuE&98HG%sED^i6;c`a{}NxLI8qRjJw`5~g89cAcu%MmlUCDo#^V(PNm_s1M`6`tx5nt8qNH#% z&*Dy7X5(w@U}ixxv#1w4r5Y7*fWAh+&TW_NC<ngWX=K%vJ`~&Jmn33f4XbHw!Wz=9IJ%EtiNO!RHx^Q98!1 z0uoVtCaPUU!etKPXNv`_uxCOi06vLpbr#qP8(g|hyNXqeNrgNoq; z2T|1gv>7Wait&9sM9LV`F1wr+UHPjE_n49SBDg9v4VHW+!9;aWV%px+g%)FP8*dgAx&)IyK*VylyUfY?2KQNA8oz~(^1rEic-^( z^~=1#PgZ8^GU0hOgqlDDrm3Q8RXV^=sh?qz3Uy3|SX_085$MQS#AD6sei$y?-+IF%Qdf*E0M}4oP9NKacYiM>NK(ji ze&F|fai-CNZMZ*T%FAN?*_UPBo{6lWw%S6Mgy|1$Ek|Xxxu%D`SGzWKN14IyH#fPS z305a)IDfY7oDkNy7}aMBrSSP`A=GkLMFvu$;WqV!iNEHEeZuj}8lesG+J<+GzBg)% z>6!aP1Hf|{L1aE-K6wo3oXBBD~}N`w;b=}L1OyiC_RysF;T-Y5BTK=>jWz` zI$SdaU3N1oX7dS%@?O9zr;hOkzpTla+!|BXp>ePxb)@W?=j9xH=5nRWx&??I=UkIL zUHC*a3*Tnc^36gPxx=q`x=}l}tHy*FbQecjPCXo+@p;_f!_F(gir5(7Bs*%eVFs40 zq(AA)ue8_+gF#gEvg{sWA(OR0e^wnvmfvLu_!X^}SNfiR_U>Pvm#vSq#wdC7OI|*7 zmo`ivszqd~j(S;*7oPQHG#w(R$Qu|81GCB_>#P@tR;s+e*n+MsSds-`Q@o(zBOmXo z1%uI-l{@W8AKE?n7k}6J(x|NF*IYT=f(5E!t+L*msaK-T+YZm!`R1c~o@R0+(-DT> zH53qB(4EHk)5;!I2juFSr@0_Hvlm;mCECdEM#yrMFZjrzJwt}%fzn9WR$yrJhdJ*f zm-rHG+0JusgS-BWTb%{E&*A8H63#GcM0nE*k+diJRsWji(z9;$df;JGq5d`Ji}Umi z6Me>b38DX=le?9XlScnEdFq&*WG0KlV13^Da3cdR{`D4H!oFG@Hr3t@xfD=b^^?P^ zxR7OcWc`I%IGDn2xQ0y+ydV=j@NzuAV8_z6rrlG}{!Eouiu~X+@tOhe`}^h}z{@%| z49W_!8k_cTzOle{UQ1fvX}~RIS6Doj(}|)d?EBeT3GF^Q%UNR&QRz$T-A#0PjBoZd zgi~8V+9Ql$D~>qWf3obl97YyZe6* zQ-9_KsM=+Dqn+8tJx#p=$}RF(?FB^d`^tr`2f@Bi$HnFX+v(ZCT22vFf(r_k4k8tJ z&DP$)UIDm7RC~D_Y#sib7*oUQbk+mfi32j@`y%tu1t=7IaPxjGcF*6ReZX|~s6MIW zby+@YcRoZc23qHrRJ^Ix&zu>Q_|~pLh05=U`+Lnb0&ng@1=m{3kfaX{vHu6;2SIsw z%YpAG+x_D6uz|A)jD(f=yV&+rXY4|7XJhdEi!VP&+csx?RUuaYcpB{N6q)hWK^nVK zs5Rz?epTb?f(+0bXG>~4B^Z^CKA5!pbA*fpFiEDHS0Sj5ly5JdtW z?KrV5Dz{E-UGnE4Dxx+BQV$Uz%@GOB_Fj~@;TmZ+8DZF)ikvXh_ovrMJ?EtS{ z07c$EN}Fkmj`?5%0%$MWIs0~FQX)>n05z=+`xs9WVLl|2JrN4%&Qwy-Ygq}uvuOgphTF7+0h*S_dAfW(LYtJx~M~H$*F8QSYwINv^9W7oVtNbsT`rT26>G6 zOP4+uNs15pQv;8U-}Il*EE7Lp{;f~UOO(!LXO{jxJ>a(KrEnmSx%{=`W(#1?WiIo( z(BN-uyS}-;ysZe_wz7=>J@u5La(hI^sf1A5Od89}QBD@{rm#;=^=?_;X;Ozt+m9Ii zCOVlgT1__LiZkGA6p)?fPYQ-}Nn9fJ_@b*DPJC}_T+)0dE5AcrISNx^Dg2G8 zzSYdGOof>BewXg+H%V#`6^q=5rKre9b@J?1^uReB` z(~jp@{dRAW;Is?A%wa(95u3Wqx9P76z8q5HRPip;a><=MW`s&^Q_c9q>MX4R>ucVE z9xGn7jfO%Nj@Okg^R_Ej`kcs}&n^zFCljzsXz>)F9YkE3k__wc=P%rD)%TqxBG8!o zL7$c5mEv?IeCIe%3L5bkPiFx4cj4uPHJq}fdrSV4*1GWgC=A=(L$9q}|2ms)r8A$^ zhYNBcM1MZjD@#ugr2X7a1d%m)5U;r3ByBoky>osw)pw1?dG!|d$0eHf&QB=;Qe3~0 zR%Oj*JVZ}C2Ou`)pZ6K9b_tIr2Su7MqG_ItdhDpK z$9YOdo43P$u*hGj)GIiU2*j{g+J6+Q4i|CDim1A5UA?}$83IaAZ)fk4i&z>estLT_IV`{IVUiYRp`b>Ze$HJ`yK8A}K8Ooc z?6@q1?Zk?j&X%b_;j%9=L6QCm4P2IarUwT(%ay~FdomlJ-NuIU@=E>6sYQwHiS|$X zX!nxVuNWF(=M#3weepyIe~wvUzx05u;AQx=4~wY9Tl{bex<1zzVTy<21BU@tHx90O z5u?JDZ}zXMI^@O`J{~*!99BwVt)jGg^q2V3inf4}PDgg$wMKA!{vJm=SETVO56RQb z`~%Fw2s+HjvX^$KjZ>lhwZgm3re5u7juLiln{qh|fxnj-l4Hsg!mQON9ZeQ#XseBz zYj9s_MOR%l?M*uBbx634vr#))otg~SLoqo=3L6g%ac9K6y_wWE>gjm4^*ko6&(l)O zqZ329*R~45t9TU~+zt16AF`V((R0bbV|^ zQ4m&Fm+~f_PW^s>PA@sEH|0i&6LKP3W9gU7IGVN5fN(g)lu6K|xAj?t+4J<>RhI<1 z^E$ZE=?Dy{X%;^3c&pS(nS$K#=kxE*+_c?Yhc?q?6_*)4)6xMk{3CS}zEK55Q1WU{0=QJWDha1bb_AWW4w_n#ui0dM`>?Zy_ zpTol3OAzX8mUj57K94=tMBtXvlC0+`)J`Epxa6oH?4@g~bGKp!+c`z_Dqb3mvS3W( z;rRJ`Wv7w**kVkSWGg$AWOMWBYy$vliMWIp$Cb5lqTUGj z<77(A<=4fF?^Rd_EdIKGFrWVXmO?rAR1Ad6taRe(Ep)9=NLu(MIs`vsHq0m}D>age zj|%6(Sv_h%>ZLa?){YUgwAH>Gh3pPS@4{LPVSRDuM z!=n>R_z`I5C*tYWS;lf2n=Q|dbFJewKNp_i63xmq;M=g>^pf0z0vSsIVI0Vae;_#m}em}an6y7-gbb=ah3sw$yh~U1}bCG#lN7nfj1?dJFq1I@+gUS&-6-&Iwzv^I6sS2m1j}4xU zl9CnTJ0m;J#z(mJy&iR>zi7AX~voq1A<7zGdPQ`bCvqU3AO(TC#ImDv@!{U95{{Q;SPzv(OlX z76X%z)o!G#dvHBBgK@p=PiW9?Le{hvh$9^rm~lO@l&y$9=rK?te;QP*lOk!B^9{U` z;LeE2M3-(>aIin?o?h!JXf)b;Ute^5#d>i&PS7$Nk2CPcct6QyM9$P5lbM;AszmN6 z#!%N=T)RxioaSMnhEE!dUuz@5#>VcQTp#s>IJ_x3R`s)%~2sizez1OgMTpe zy6`ewoF6FaCNd?$DSwChfobZetWR@I+PBP~Qp|PK>@DrWc+lygi15A~gY_Ky(Ae=T z5z|ZQIOZIHt;CpiH^S2lCZ$6g>ay31*U(cW>*Zys?c(YTEr&St#)q#>r^1W1b3DeK z(}I$N!ks2(_*E!Wz-zSez{@*nK5PmNGjB#CffsOn!PHBLS=hn+Nk2cG1AAK&Z-?=Q zRq~QCZe*ayjyc}zt+0})6VUEY4LTk3g(?Z(nc2hm!r>%@rF1bk3T7Aj!T z=?YTOSrF}#BTB|`^YLcaHSL{4bkJ3gnUSr6+$Sh7Yt-+Bk_|X)-+rH{oy2A0e8u0Y}#Ms5-E((XZx+QDdn}pOPnYPssO6u@0 zKEJY9faVxp7ddqjIV*J(yz2)3kh;+E&~SZDC91-L`1EvfZ(V}ieskz*XVRgvwPf=< zYv5T|vS2#qMFIsXUT*mp+oXPE8z?h3H)Ja3B5K&p+J$1KuYY=8Mz1pT8e?ZWpK1i$ zykdYSeC^H+MK6pOtO-!b9pLm+FSulpHtyXGOYqH0$ciJooAKk~9t3CWvMDacjSnEd z`gtv`UW<1reg=-mwtX@BkCr-OKQEt&9c96d{7N9HTfI}_SgN9p{3mN`dMbMI2Y()y zQRJd@Mw+){Rus&osfjRo9L2P*BG=H{kAvn;zkV_8eQiUo?UU9wjnB(JP1h?fwxJMd zO>B#kau&&pXW0u^69mMB4jWUR7|5B&%H}zM-i_y=aJ2hzh0K@<@TYX!$YG=;TEAs1 z++(kLPS&-gqo-DiQ80`T?VT$n_(rd}wl1kGSTq@FRkNhJxxY0+3 zdm6C9Q4l>8$5G6XET9S}EiI9hD}<~h%m+w zqt!tV%{Vxy{gtLAJ{)FUmM%cC^nh@1T$DeXIlOS}TT^$W$8e!s&!a;cibm3%VlX}v zg>vE<5vCNXQJw?(ap=cp*}biQ zDhv+jds_nPced4CV2MI?*)1QMU%JfA~EQ@*NrrEODA8Oj~PgvJ#VK5@5LVzYzGj^&m{EN}moB-5z+MN5aF zVZ03K1aB8u{7TM4NKE@WEz;6`@Fj7_x`F-XdeNNw%)-cQTj|AYdhkyP%O?h!u#*DY z2L%NTy;`ZY2#x2gS)Op@jwfzSRy>8wUKgmh>dxil+$2@^UltzQBua*$7XHKE^%@nF z);m$7qvVBkVNeyM>toTcq3hCi0Ro|_a>_$yzH%7h9Xz)lu2^;aeRHaLFY!BSl2Xc; ztM<_|-tV-Ds-4T@T(rBfcd%7H1LFw+%@^6p&w`~+yNafg?j*rj@`H`8YA!{QhM;X} zN+Oja($7#NZucw^6yvTIV8X5K2+_@IeiC^E zJiY<>!AwXVN6KOMSI9fcPYAhROKOt@FJ*~({NA^b@SNEF{=S&vd7U*fWWP3K%X<8W zk_W6&oeEs>6$QN<7H_AFZ7-3oi~>5EBv}lVZ$+QT?oQmCFVG!!CPPWLH$~x5oK`6) z6@s^hGhrid(g`zr`If(X-+Yd)kkq$7nL!YDz3J$0Sz_vVoc3utdqLj!JH$rw*@5CU zsCDd%`@8KuJ9n&2_<5}V$zKFI&*v@!ekGUGeokI+Rel`K6?*Ji^|e-h8!LK)uIsbJ zum2P7kQ+*1MN{g zHp0LuYYx9VJJLaI4d4~E&T&d~;lXEgkLY_K2z|Quh z0<_q$@$WNdVoO5_gYlIw>C0z6zh2GQiOVdkJAGD$xz$p_Iv=Y~!Ox>D`>jIvt<=YU z8{8#Jvl#&&9&LD>CMXH%AG+_T%StMr?)xM3?boz=2=6X4tlnl`g)V!2J-oPG_k}#< zZk>Crv|Xg=d6w>930(|I2sy3`!ya03f6;s4H6X*r)I;I#I z?^{aTtM*osy=+8M=u1ZDh}|BKgO4Y&ro9ewHHSv*R7Kz|joZP&$<8V``U`VsI_+s^ z#N>0U*Uh3qQ#4Ku17J6!QKdb;VbwG;Y;%SzTyAn{PcdR~f{wcD67o@4sL z58K>Z--^=7rQqev8SJ@PmNND#I>snO5T@lfdF zdE5ZG%BQBJTs93yMeAV8g=!3J1Mhwc!=CfU^1!#uS?VX$UJtX}rGrt8#22C{Lm2}@ zd9(A@g3Q8nCvIl|7Ai+a$_$Sg+gweC7h=}-7{5a=*yHJIK$z8QUJ6cRD^L{f+mQZV z>m~Dv#6JM2%->a60Y~e$muyP*XXF`Qgi* zn^{k!&^X$&trjootd1jqUD+vZr8E9|(*X&I@7Ke#?2I(LwJr%jI~89lG&m^0ad?ql0lQvb|$c7}HPx{&z5Z@;kGmG)IS1aK)#SeUDz z+=P}K9N{}B3V=0Ndq7vt$+abOzy8W)MUrmqIyx(8yDDv>$|2br) zko|{N5VY%KD}j@c!OIw8*hRiG+>1Tt4~NMN4gi}HQ#_k?g$SV_8MWka#5vdK{3q5dpta1C#1o>fdp zTx7~Z!c3(;BBeWySUcIq%zA!P$=#W#a)6s#oe7C#ogU+DHeij@Z#?7#frOoNsvNucfQ>B`vaLIGjq;ad++ru zNe6kj;vcid&%zw%HSGR}|6gzPbfqp5kPg&JfZlQHn}4)P?F)5zu_)Po!fn%#W$dx$ zXQT)wT0X4mCs@HF$)s3O^`aoH)$QXVa)}P`S{FA4soX&)7_`iAQQkrBZ&J~r7f-v* z(oj(5p_Jp`?kp2J@=$!F=IHu4ieytaD4oy7Xin##h$L0Z+o=(=Ym#iR(1a^7Y=L*g z9$^1e(W9qcq2b+WEi)o+YbKhRETC9tSrOlnH0 zP`{%ix9oN{d(g%4kh-U*BKsiM7sBtuuShnF;Q4y+AIj+eVKgVL+Z3Wj3G@OT=!3o= zV}oZjHbJtz%nJ%wFG4>P!F@9Vk&&boyOAa$p5bq940BU&?!t=Q|cZPK!LU5u|#2t-o$k{nh=?zzYtl0dy_NfnRDSiTir0%&8Pe>zBFU|~gFoMm-GkWyA>nrQpKF{)|H4Qxj2Tlk80mj(_iuvn^@!>a^jVbL0RUc|Pe+~VtO?RPS- zV_Qn86WQ0dFWDp8UyY6eb`yS`ds64oke%J5%sgWRie4H^Jq6L$&^W^f>KP{7Gz$0a z7o0xl6uw9Qh5sUr$+89WNq|Lapm`)uf0iQ`H#r_4rm%)zdZD&3J2HawlxMdsFaof9 z&)I4=TsT~Sb`#Q+B}pz$@ZD_TZiFh9#tl8N07GsM7_{Kbd>hJ?eY-j?Xrm#-`;gX(uQ zXeb`qKXzW>&yDh~2hVWySyT5!whhDsLu(QB{k#wr`!^hFu6AjA9ntibv}7sHe2Bc;+&pu0K^ zJH4F9;p#)%<88g&l~_l!A1a*kfo2wXiqz8G2pS0Tb^`40z}((KG_-KmZci-N^JO0k zhv6sWCb@c_{{=0_!k#@WR;?cd^kwT}^!@oCtDN#gG zulIPk<-Pg%`Nx;vwUq~h;}3Kk#xe1xpT0K0GZyfK)#wGMio4PIcnqD`WNkz)pw_RL zYVU8-a#|ev0bvk-R33JX%g+bEg1_5a>GJ>aKn`%D?bfb|`H$B+^N7-MBM0(>Snbo1 zn@?vzj|_{I2FZ+>ei+L}Zp@AJs4QvVTaw*&+{FgsF?+Px29Ay`TjNfXyw9L1XGzSajr(umYwa_Lv(DAydj8rK@ z!!175`z`$vQ&(QX+?1hwwtz#|r?<)E&oMOKXr+0L|AcIM8wNxk2({R99pw6mm9hc* zLyy^WgGyyPrT!nIm?0L_VT&JtmQ0w_w`!BySD{m>?{%cOpE4*br$${!E+vk=+d0y^ zQslnR%1jgJiwbN#`B70r!>m5IJ>zN!K|V^q-3DyLsk$%@i`4XB2)>%!<-=b%yrb6J z1KZY-i-wGG#&I{9U`zp$3AhmRm@A+47kcp|h}QuMf;v5`h>Pd-d8kZ*%ZHFd^atBW zX;w%MC?+d}WFCAxi^v{{Af$W$XS#1&j`B_ZqVLMO37#;sQ!OL~kj}5(uS9Me#_lcfYWlTO`oNPQP2){z4Rf z3w#lDH#($m&T|jCalUPmkX6M1u{VSJzO>aLtJBom3GN=0?5I2FqJuPFh@#HqA;?nk zm~9YNw_Utl90zfz*q0xzu^$3_Gze7-Sxt{Q`~ws6FS>{ShaNjfj)RM1=ebZg)tWm8 zgv$VM>-SaUI)3JjahpF8oB4I&ZP%J5alCc=xxn_9nt+G(weGec`y#b| zNP$@a7-BDvS>8S>=LB~J!zgYS6v^Ww=36d^p(VHAg*b-`8L|cW@LAireu%c%P`rOj z2yHhUR#$UHBTet6sLv*b&v#U^&l>d>EyzL)O!(nMS9qDvnQ2aJ07yOLE|C{iNts5# z4pA*<_}(&Nq58n8n#m;zWcAX|4kgiv-VL%fL?XMOwk62ztAgsM{`_iK5ooVA-AAOo zy32hI+za9CiT`7Sv^ZtBRnV&z)|WUD_MjwaamdkT!TrkDVS8_%(sX!;&~$Lf zv@JC6rJJJB6HC_y&ZGy>78fUGBuW^%i|9(}lRAAWj{{6bmpk$6EZXzBRJP!BFU4k@ z&=%R)naye8xIz{KX%oL#lLG49E)xZ`;FtrIek)$teF&&?_J~@LEhlC|c}|NiTZV0- zf}%AeN=2SdlqPwii8dQY_9k1m6x=o_oisnM5aX6ucH)=LxT9TPWZ_fs!b+!XjWlZC zYsf}S6BkAcJ@LjVHX>20Z{#k&IVTIUF%Z+xj>CP!C z{Bnjf-&9gXN*tav?cXm#Y1tK0#ls9QwxBVy{dN!OJw{F`IR$eXH?&SrybD~FBbv~L zk9HQLS;p(4J3$GO4}m8OKqUhWMt*!vf@YzPwZzY?zs%GN2bd1A0~FQhrkoeU3XRto z*#xn(08ye6j@n0@OeP4qWk1w8S)rVW7RzS0O$Z}XuJR%kxeL*U=F1l-YhqDje44Z| zYg96^V?q`SBJBd@+h`43#ob1HUP-ox<*Dl@Yow90fh;MTik&vQ9c6wys?LuCFm11Z zCd5>lQwhl>ea#{Ird!2maLqrp8=vVlPU2Zx5_6-pq_@9vj}bPPT4nCi(1;?YGjX|> zPa#%L#;K_MB+bMO-yN!PR2fT2%$3cauOR<_2I=+JOhK1f^rNL7uQzLq<_;R4C;Q!T zvf&u+n%$(Kd5A}!{gi>MR; zgB?)@gQww9v7vreM3t2*TI*p}yN*+$Z-E4A9D7BLwY#CkFoo-rgPhGt1QndqUDSuu zMbq7?c{M9DJ2bYBK6RB_D*I)iz|*n6?YkQ~RboLnfa+#P@s**ly>!=A#L{|b|F}U? z+C-a9X}$j<*~a>^<|eWETKhIMbDU#0W)BR}JpOu?Cd%VA)NuLKd*Fcxns|lEWYd_@ z58u^0JvlpG_4KRtx{JZ&EII9uwFy{F`sc94a*bQl>-^9>((yHWFLW?kKQ^asEiSPw zwP~xqU8=Qx?X%_jG!Ef)!B!%iq!MpSPjBJFNlqIc8+ZQALYVvOG8LSWU}N?c@xc;4 zIpGp=!8&$@GfK=IJA_KWNyR-PoP~*{*A>Ik<41MTNoiwY!<-7o!lx5jHaMMl3&k+8 zJ|62B1xyxaw>T1W%MQ(G+z@mEV<>Z4DFz6}2#g2SdOUpQOvM*7R{lTj0#7-hm2dHj|13FDU2|AznJwRoI3 zF-O{MPdRNOPr=TSu-2*K7im|k+p%c%jtECCz}?35aS^>&Sb+*^>j|!1)PsxV^sl7 z?AC+zlZ*ylYL6G4Meu4;jC75k9BKqzh?UebrSdBytAUum37mYIkQV-j+uhCIUy%vR zS(GTd;uL+yf^y-e|9;aq)ce!0ip72k-qyna$NfoR?M#+vx~2mECam=dq(t>9c)FdiwNNsZExHdVb~S zX@!aGl<{D{pk39&31-_(s*s`*YMH3M%FR-9*X^ZJmdg=67?E=dPJwBZ&)a#v(8B}$&O#F*GgJc@A)sIf z<<)h$P^8zJu$^0#A>RYlrR$!{q4o4v5_fKkP0x^zOK@oVcAC)9Ex3$$GEBjbr#2wd ziM-x2oJV4elPnRjY>KG!8uLl=t-Fy)c)qS7&_Z_{bmJktkOsxXTSW#%uuXm>9D+VPU%) z112)@?-{uBE7!j#pI^(3i?o%CN7njpyMwf|yJ9qM2SohlYulY-vo0E0P!>+}D|*0R z1@0-#N}WUBpG2;-?aOQ(jaxY?bJx18D8vJ4^=FiPFX^74&zeh{w-&(x%LC6rlYE&% z8*8tX?Wi1d&f{n8H(RAE(8}M(se;FTPPiw(&3OuGU<@v1Qi z3%As9XBaDs-`S^;nEWOc?+z#2-cq@^E}rT7{z0W1M>gI2znwqNvnib+g@p6h9%sm^ zfsyB|jFIb>4J4yB?MgkqF>t{tAct2NLvwj$P~tEF2M6|N{e~cZD?~iLx8-}w6x?-P z)7f_LTDrQh+n1597SW!D?r^KIt*&-+OX6?Dv|Cy(=a{7X;rxu6OM_IY%l)8uxQA{vD5iV%${MO|g?%!-7nhCC~i*6mA#0pRoG+m-toL zicO4{93Fn&nFExW^+iQ3k7UpO?lmxNu*=7{z~|r!G`j4TN3fCC)_X2Zb55io7aNwG zZi>K{O&&g8r8WYgM`^T(_iOTh_N9W>VAjpEo&joke3;YQ%c>3zq(NIhQmRusBCOXs z{81_<^XWvLP~vT+m=^iY_4V+IqX-BUbQ$=X+dGEIR}mg*7F|A;Z@zwN-F!q|2X?3l z82W@^y}J|JTBR7imJuW>qG%ePv1`XG@oadw5#{0Gb+es*XWxltY2Ar@+dM-}-MLNp zqqH#N@t1YEX{&YT)Gl5F&PfwxMM+Oh?CT0z^c*#ZNZIf;uke=TNoQvnf$&C9SstXo zsQw%0R*eu}_YJelS;fxp$4Tv*C?`vBbq1XgPw4f2qttVu9>i(^2nv5Gw!21%wcr|^QIM)@*;gZ_!ed+#KxS+Sf zLS3=0rW|T~q}HAC*^BWtMP1XWq=J*I1uHK_Mz%m-J|upn{$np)c-OK19%CLBc`PrF zXLQ1;9^Y=?Z`UYvB55OU4O5_0Cxd)jXBN8;7T6deeFvc!>q+C#p6~M;I@YJokx9jp z+F-)ipm%n#GGj0y?-2pk4zK&%djfWo!Cfd%l`P$F8nf=rNwO-JK0<;{+p{96DXPCH zc$s~<^6p*a0lLJfgzV;96HG;eL~iBnwai;(;{U-ba@6=LNNE?`5^N~Dleb@QTc2O| z#V`8B=$s2Elq3FFUPP^Ek;mgu9a*7N!ix^{taAzmRZH>=mC~^s|GLb0U^U}~DIlaq zf2hTbN0y!lHpJ)|08e)heG_9~kJN(RC}HvT;GRS+i1Xpbt>7urE8E;|AhPCa{9D`z z#)wBoYQ)h=(kqTkVNCv`!)$hV9*e|cN5h=K<-iX24;S!kO8U4^zSAlKb7vN?G_h#> z=tt9$J^GSDBZm$VC9ewDrwD#~3h>LPNxu^Bj1qC6t;G((QSU(;wBlSFCE||cRx|D2 z@biFhTYM_yHZDk~IX!Crmj)y=&MN*fuIyMQDo}$Z_9^rBe5vy9xn+#m&Zv?;m(BY_ zYIh{)bJ>rhWwX|xbDi@cpgx|Tbir@S1)g1bWDZXd z84taX8C;o=TQfm^{+8{^P)Tmv78}GFd`JC5yEYQ(P*PgJAYI>a6(n( zOu@7L|7z5eS~T*AC)WB9CS7Ha`de_$E$}Ptr|;9?&f?^r1tVD@9aG}|)CASg0VSoY zL^^71{zB0-UW5A8YDjFbh!`cx=<49=F@nrJ;(Kaj8P2&aY2zCLis!u>qu>ifBiEfF zqreNDjTe93Ac;fd_*o0$fDYTU!>`NRZ-cEhZ4gwBt^`z$ju^_#8?uj`O@{~A@xv0L z=*@~YB%ctF(W?AOG3>V&m2j=c*(qMevv>sE8I?hvRqqblCizIMFK}o2!)1<3xE-d5 z*7Ba1(vAJG(@g?s)J~4bE_I8dkVe5OV`R6OMfgeAGRRS!I)0p4WJR>UY$av2aH;tW zTYE;}0t4Ihc_^7kiO}Qq8M`2T@sfxVA8kb@<^bPPF@OS_KD5df zcH_GC)Rq-bMd;*xU~tTmz+BR?XKQ&n!xgHRa(Ly(B8hL^`AucK--wSkguOu{*+l zN`VzH>U36Q#ebclG~id8!w64tib9Xdx;4Jcr`RSvpPm0p=P*cQzE>hwTzXk*DEgb@ z_d;Vy-CnMX$DvHR>!Q>2?80AR^UN_mZNFV3*9!h`aECsq(LbhYHQj%!%25-lT{yK9 zXMJSo;0KG}PPiZ38rl~RdGOk}?f3Q%rEEg{A3j~|)OI?2Vh)>tAYD@fkQQCP7bD;5 zkW=h0ZL0}oUgIE&p?*Y?29fa)O+XgPjIUb(Git+dFqIE}!~NVt3^}kbG?@itS81iE z)l2_*@$$3Ovagl_XGTETR(A%5991KOvW=t+-QG|;ZF|-I%afgL#4I-aWUNsXg z8)y__n(gBO&Dc~oj0*+P)V;hri-V_=Iz=fQ=10%%F_hxp6ksePaCG6b+)^hg(U7{? z!ia^Zr*xTvZGM?MeKHGk8LQ&_bEbI%Q|dPU5x2Jp0|(nsX` zaTbn##4?9~x%RA!vbg0`MY{(c0%h^6V%%gI1jULZOtlb7UN4nhRp3;1y;aJt&DTbF z%1>2(HA5oGm73LD)lfE<6_2XZj>(590c=4SJ*Qb9olFKsCI(qSezO{z-|Z}wW4`aN z)#vMjWdIAq-b-UiGsuv8O8zIQrvT@y!-XU=+;nA_I zQjDjaWF+!rW;BZm3tODF{(bSDYi&%k92K6^Z?IE{DS&XlOZc3~Ep(6#`#fWWuog#k=$)1X~k*zmHr!WXTgKE<@hJl`w{Wk@x5Hj+vmoYg~g@DzrP78=A}Gu zCTO@Y;~m25+pU;e$t;0E==gr+E4a8Lqm3R9!y$cVfrnRtJ4&W|(;==%N@l#1h`Lh$ z(peLz8)!{`dvRJAMiBHV&oXHK)-kD|t3k(`v@9CQmrN6S2)#$kAM{kLv@d5FrKh4Z z4(4c1AuIxk8_180lqv@EH;3ENmVooLQmY?s402bCl`WioPVQ^4xa)}|paD7BRh8t| zho?mt&gpTu7i=q8O8_oj-?85+<8lrqXsgS%bf$Bkzz|ryq1>O!M-2Cl#|a_45mp1f zdb;}h(S@&D>nl2XYWBV{gn7ZBxC=yO6a%~itGbmC-JZ^xPa<@mgTS!1<95f*?ntL~ zzIlj^m32}2H)0OwS`f6w_;|GkwA3=`$kH&g#f<ZJ(GvIbkDbV%wVmI(<5_RF_N@_PMi|! zX*Nd(rxLn>0U#k#-R^cjW#FDkOLJ7LVJ1_n*ZFrBQI))Pm!_c}M8ddBmE*N7dURj5 z@}A(WLlU!GT5reo@e&mkJS(I>!fuI)qY{sDgfS*m(@A;HIjs$q&8*$RPzhxfG^ILCUs(hA!EKdOUwdF|xqf@^D>b8T>Ii$?ipUfU zhEn!2+plj8WYfegb*k9D6(lL^b_yM4m{Q?HC2)B2+~w@;W`M6TWf;5v@?lR_YwrmP zzO8Y0`PmUQTf-CScJB1cR(%r4(XA{E_YZSXw1668*Q*BtfZw6&$c>_)u25}VBq4(_ z+r8gx>(c)&&L=qSLlaB=j;c)r8FKc6KCa9eF-Qh-Pl6gn?k1-FN-ZL;p}MD!8#b$^ z=`rR1>-{6!bJPr;8s2U=1n{^~{wqc*>)}(7ucFO3c zvz=JSqpZHS8W+hJ^fpJ>&Y8`+yb#mJHhSL0*o-Ra%S%lTkM8m;Q$M$ex_>Ep$la$inviKgP%`eto;!+<+iSM*Z0{t5uMCP*@TVr>pukKre^h$>ToIlp$&)oR;rq7wPIg~( z83h~vT7bPXC3EgQbde&TCHeaLma7Hp=c#gjQAJXA5s}@G34L7#fn~ukCIGl-24}tx zVQh{qCT0RB5BRU0Usz(fj%Kt&*@&8)b0pIrv$o!>Zzz}ssa{3CLWlT?gb7H!O`PO+ zy9nI&GQ}xF`||mcg9e6Gi1Tw;XGRqCN$QF~DRzv)32aFgnry+%_+ek?c5#e`iX+DH zm|+~027$S$hd!CA@`ol}eBy2%u{&yR*i~DQlJaB?Rve^mxI}Yl<4X(8;L!$SdPk%I zy1ooi>Wq3$wQe4#Xa_CM#^lHht2g$%&LZ7l)&QiRq9o$!4+Vs(NsRKZ#W&FX_4_gD zu-F?k&O0hpM&%aY%jgDVwKzaMH1!N*o-9Om_2C*r^*6tjdV6ywYh^}4NO<3=s_gzo zguaH>viWX!zNU%t9BXhI{nH`jI#Ekq-WB@kJF3JY8=F{$jF}m8<@dtft=GtnO|0L~ z7gv`!4I^J%2!oQ@p_=v&&*E=f8Q=rKb#6IZza%B{Ze?~vdHLzWsse-A5GzVGn9zmR1}Zh`{yMa}%TEpUDgo1^GsJBD!AsREHySWBDZy$SI58qN z!3h{l*q)ItXD-5WpPpZ2<3JowN>419wdKjo%5Vw3%7XN~-qgyxJ_dwXO<+fx_gB%! z0*lR%kx*n_&H7x>~)a+5>$hSno*1T`ypQ&S=W*}F^Nei^DSpXNc z>J4p=h=rps>&>7YQsj>>2n!oRUMv<_@mh$cK(`PBY@@0)JOV1oIuv*m-7bw^0SZQ9Z#^?|!T8?=Q%L5iF)|}DHh>lHW|N6uDm_Ga`q55=@H%Ao4he`^? z)K*E9!<()J*COLwgH_$hoy(8XU8B7A%~fk@imRg3UO&bv5y~o97FX7fms_$Q+kOPn zVMTrQlHaVondsptn0jwsXiGjaFDHpGn1*eIsgO)EaFFaDt1G5kNKtD5Z$zuFs;^2- z>3I+>iZn%4d~YuQaFqRTW)^`m^ygV%4&MP&@Fnbk*sEM;!d&X&4iZKp_7ree=l|^D z2d${8Uk3o(H{4N z+~|1+rdQacUT(!EUP<5!Q9Bc7*d~9^MeGP>@cH*<+Sq+-S%jkH(Oiz8oN5J|`%yI$ zb8{~zaecv(u+4)Wck!M^acDjN@LutLrtg9+4@vAkEDp!JV{h&mw?Ax@%-YTW-~4*N z!2BCT9*zEdonLZD5F_;~dM}Q2_^M|s=4WeG`oIu|Qn{&ikfnCMpmbnxZLkn^L}LAX zs$mjz=@w^X@?|pQ|35kT7YEz%!gI&J+b$DMnmaVk(v!)WfVPD|O88a7E{$mjvNO3m z2*B*ond@cy?)G_$@GmsUfZLdP?t~!O{iyLyTO1*o*v6i{*vcve{~$SWmyu=9(W!0@KV@KV-tn+nqthv^zVyYDUm-1wi0xDBI z0QIU+C^RO1-fn<4cI0ETvAyY3QJ112zl+t=(&WNE1ChqVGT{9oJ>guJ6K=Sj8>#NZ zYmz)MIpD8V%rLQqjZ;01{a@zhv2#j`y*&R@BAW%(h-&R029vc2;7O_;pGnL`X7y&A zr{&O%C4yv09S>A=t5pHoy!fQ#)vi+q2bA9TRo=q^HCVl~%jW#|nL`yVLQeuRMN9wv zRl|tmr$J8?pH{LL($Y0GHKk2jQio0zHkNM4>72iiNF=jGJTCzs7Mwa)n{6=tYPdy$ z`~$1MX^NurU6P*dn7+A~QoBD89XwehXB1v+1#4(ehwG5+jP0xNEa|H28p=wTN3}o5 z=mtq-6NhW>m*SjP)g9^WNG!2G>(ES}$dBOHccf-Em`8)bqdb#bJbzzq_8!y_l1F7_ zHF#rHZnV=<)meifBnLLuzPUf{7i!nK6bI=nc`rKO9xELc41b>#>ggvEe#e}1V4gB} zl*LX(w38N5Y73lI=Xt}@Udieo6UwG)&$}~ZBwu_wQBEW*WXmeky;bkA&b9KLav)P< zFU#j*>%T5ISYE0u|L?A;Q80h0-)jjFznRGmIL&9`2R+ZZdv7=ArR1x2$n9S!DV0La z%l$l=k@N)|;X5hKuFcVyn~DElR+d#DqZ|3bL!*|48AGh5{1j$JwZ00=b++*IpX{s= ze;P(fw%>OO*u|7k^^>BB+TAM58N|XIBE4E#bPCPH-0p_9`_mEO#%{TFh&_hR-tDp(&Jyb79j|CbVMG{(%b+Ea_Z+>RQ< z+8zsW>if4M`KxD$?tCU28mY`*4l=wv%^TJ<{dl=DbCSm(u>qe&b!$(sh?l`NNhRBa zvQP1iVZkt`Y|4RV z^W34gK78X*G`0;4jZFITlWg4P^;}IpM|f)Jo8a^1lcpO%b)4tz)*X;cs4l}D+pD;^ zxTwl#_oN1~P}%G5jr6t6?wd{A&2Np17rqtPk;^zlld32G+3+Q|NX+?~cR=-s3no-+ zR2s~nNl7UcGWXx>6lsCn+5OQaXhe8JmgBIaRv#m6l8jPMFMs z`<-f7>4b^*rOy#lza&{pozQAD`(etkF!=3k6wS6l$Wick9E*!-zZLg6cYGW+Ai%e3 zI@$UB4v4d-0$f?sRP&QSy8ZoLD_0=8vT`);24?66;~q{18c6A+A?C5<0L4B2nQqU! z6n{HKF$uomjmtf;*!u9GGkJ+6Y|E^mQ%oh;nerUQ*$8Iw6~&%o$z0u7Qm$U>SYd63AYbT$KBwqOK#0edbAq!&ay`z`a2L8h6CR@Q*FCk{ef zxEX@)37;onweI)l*l|9S#Ie4#j#PzJ-`KJ;hg7Zb_SW?Oc#(rT{oDd)g8W>MJg@7j}-~dpv$9D zgf))at~Y%DHD&}=G1-slHWyb_sm~a!GAB9u6vbNm8-O?TWP$TdYhgy#@vQK<_YJ0D zBIr-zaALEX$vqysa7 zCr1^9#h4qmxD@7hL_;_5lyjN(^`r)^(`M976^@T+ySqQcu$8m5ru+oS4n(`H|ChdYCqZpf5_r@O6pRSZ+U|Ek3h(c z$-r&NZv&EMN~Gw#RvNNa0+iMAIz$}C09n-hN~Z~!3S!|``~vWJ}z z*bal~PV7MB(DHsC1%uW4Xq*$UT%I3foD@qKBklK1lS5G2oN22mxjL3NB^^KU>usID z0rhbdRki$FQkVXxmc~Yfu!2Pz?@J<7g^7C5g0tYyk`8Jv+}&2rZfRGQKlcCa>B--z zj&I4^PV(h_Gsayg&1~7D#tr-OfmeV0cMz?UNd$bCgYChnBP5h!@mYs@vozW_vDF8n}dkLs_Kh)PxpI(cj|f&1;c`z z#d0x!YupvTvk#7AM#ZHz|D-p@0MEM9RqT|SeA>#otuRr>PqMpbCI`FLvAz-j(dbk< zS5}wg-K?ptE8+2;WH{fsJ)_DR=yhDjH$U2@MeuPjq&HkTibxG8v$H2Ry^IH1=^=r1 z)@@nY3iGLRiZ3MS5A@`j9e1YS>pQin(}roBhgs-pIbBtp`R#UV>d;lKdrd%6vCg*P zbQU}iUGtVqNM6ee;MeY#!mnp`bYwY5I-M3k@ndMKul-erddkxfP9dro5$N{7u5fvI zpSPJ3+UWSPx;PxqY8^sEX1U}*)nkt8v*{-cRGd>#iDPKvl)qb{Zn@XyJL?3WRC}eQ z?`vhB;*ny41TaWMl_*iEb)$i&zw?5ES*{3cIXkZV0){dt0C@aPbi*EL12&Nc-jQ`h z{PStOBdhc2G6>D?!<(86)Kk$zs!Z0DFH#m^*~C2C7gl1MnbMkvx+LRDjLPUU+uV#? z0^z^NTRp~ek=(f&M`HNv1(w*wD5wFoNhh6m^-2h;F*YgOqVuw~r1UI^I>5HQ->Qn2 z9wQu#v{Sysd9GBGX@x%nur)(wAK0#@f3;e255TsCcqtSrRD zv+f2QGLm0G_NfAusivxwc}mXZ4J*GtXQQQA7eSxNtp(X_G-FqoKyXu#nM1DlSbSk{ zV~D?PM%Zg{`S@a#$4UI>e#EB+-0CnV(52&{Gy&2dva2Mmo^YwVlYAaw@N<&nCHElz z?p>3mo2J*_v-9G~i@}sLJX4l5E<>V2(yxM+gB}ebxqsBy9snP^5!g_uDNyC3 z>T$Btl>8(}mVQJo{-jRkX2(Izv~{Q{?hufhswb+nB&3fZBFeL}veP9gXBQG)J0#7) z-8uMC)*c(-2{}Id(cSp5RWyEVED$OkxR%sV?z}GJWS@|q3mB>T(eoKm7@&RHlVg5` zVC-J|ZBKfwWhuci`8gC8qZ-brku|Wa7d;}MR+@UiwK~FDozFEeq3=?fxUBsn0Uk9Y z-?Sn>HN_yjO23ro!RDRBqepuwuu>zrs_uKD>NG}u+bgro$6JmX|zc+e_ zb|+j+#={7Y4YFY2Klw2yBr6y2@dcMDS2i)KqQ*;Z z0GHdbQu7FY?%$BnbpsqKxFPIEz%5l4*0V#quC*JrIV|?m+X*Dz6gG~1vQ|>0v0hLI zKMhmVk6qNyop6cX$IUOPS9YBi4yWe=zVh=>|Vvjt-?4Y_;LzRM?AW02*8j4%?`MW6(k;mh| zO=|vy2TVIe7@!%Jg5s92Jr<6u5jDy^6v2c3kqYEC1OEV|^P!>yqP#DLx&)wnV!O6S z$lc^T+ZzV`a$Ufg7{;+Jt+?nGq;MhRma{g;(I&7A+-edOJxmc4ldkI7ND^1-uOvF^ zanf};Xd!Yt2(P)#OF3J;0|Bh0kTo-Z}u`G=#g9M74Qs`OxxlcV6W77&{`!&645QZ~3u;{BqFB?0|-_=nFMN z$APrxa8#6IAuZd_p#in4>+w=zEvvK$fh|bn9iR`-+N>+NFj5WB(y;%5GBhc~8hrml zsyZ%~PFx)Q4$4KPMBoL?tiS6SMCIri0n2enqrx=A9hxts;mfo+jlxFx? zCQ#Of8FRtSC8g|?u;PQe zJo#OEZgHkxo)t_)MMwIhBVV~);4#k4I}~xfkK7ai$0#Pkn*$YU-O`Sw6M()|{@k7R z^!S;BxWXoZbzhMB4JFsK`(t>i-}Qr!zB_GlCM2r!iE&!&2~7{FRN!d|?l8PB6uEq~ zDinEFdv7?5wz{~!+GxY^G_*|SebKi_H>J=`*)1~WIK3`%vkMb><=$K8UV%2+tr*4p zy+;+f2rCl5c>lrzO3}66NqAKE`r-dvq9#Vu+gTVBfitQULnqc9U9yBz689EkV=B_$ z?uN^o#jNpRijwsI55aQ3Aavw;I(@Ig;^PMt&pf@&L%$MBO-mTEl?~y!Dm4nB^meW? zDazTx!;0o&hYGVMsdv(Y(QCdUQ^dHN{|23OxvnVc`tu$3p-dTdgf8!=AQ?%=7zR09 z0XDY!j5u?T7XlR<=FU0L=lOYTSWDXOk7z`wW1(AZ_u zmkW|hKfS%XZvCzklp8ZRZByqE0E&G9^9Q?7m}#N5a(fMp1ND49BpBo zE%M3-Ca_}gW6y%j<;uwFz8fVTZ8~lTUT#Y|t9}wh3{Uwb&2SPTg3PsbK_BuY9wPg6 z+~7MES!h0PwRi&CQWGCJ5c3cZKuz{w5-qfOQl z3r0|u4uwV*7V4w6TnOKVq-}S2d>pdFkme>u{cb+A>`48ZQoBk9&@lDbP0Axy`^*kL zY26qvJ?n^_3-wfN;2ueM${G@nz!dL)5bQxOUB|iyt3#b8!QYxW0sDQ8Z#Rkp;{N|zd!}A z>;>!kT@WAU{mjTkTe~NmFQ0FE-cFz+M3t2=F|{()+^4$rPmb3 zUz)y7hfKdcx-!sx6dTHMdKiQ(Nvf7TjUF)1Ap>crXBKy8nF92~lhrGoV?)dgjS_8| z6bCvd!u4{Y#oRP)D!PtIKz|8hE2}+itB3aUIi|;igS0@hZ-{Xsmu#=Fkmufq+g0D! z-=wBROfsi*@3mH$x^CqYqw>_{k7=#+6l6IKn81ciB3D6!soOK^VLJ?5rEE2L3gVbG++ z)K(%AnSt(TuRZ#T>rdcgt#lPSc8XAgfw=-3YiX4c9L6=_X`CMr463V8vKr9gO>z0v zIMc@xFFxK*Tz)qs5hwP@$v~g)cx6HncplucXi36Sy&W(Ab2ydX?F6Mr-vQ~0Z1b3NG2J<2i;nkPyODhzX?$4EDQBw#Kq(snDFIUWJ$fb|E*#7v;Hz>bMM1k+!*OoUuG7ihhe{tuqxT437 z(k=ElM-0`6!9eL8@ACMCnpy;=Q-sqBplIf-%xEBZ0ZWtBgph?@NA~8AqNhx_UeiT# zgkw$4YdEr$i|CkX(7}4(lkj$8$Xmj|fQg;_2U+64%M1Si-={%=M2K%THB^_N+j8F~ ziuM|oY%}Sysp4!2ITXb9Ex6Uh(Ha!PCbQ$^Nn@zw_#%Qp>xz zvN{00Bk{gu!Sz4T&nCBNJNPvH`f_)F+uA$S`g&P=e+b{4@77}wnJF9X(*5r%M=~0>>m*gIHTh#0~DV1btEajWJwfk#MZqREwYYx{$w3w zq(&@2CyHbTO;oG|hhz}7`6>{}S&V%D3W#d4gqd@dxm43^?)*$lQ1v$o3lGOcsfwR@wKf%Wf;Q= zIe9W&qm$2jF)|1e*b|K`?`SqAhC`!L`%69qUVPKF<}fmIeE9z1 zFmuA36k8oJcfQNrJ)s!C7TExQUd=8M3&ntU0e^_I-khF>CMSgm0@SD8l`rxC%ckwG z20uE~SMq5amrkV^*&AjuPASsRFk}VR?wPZz;TR&erQ%c#e2oYL0JHX}$UL>b;yH%(;e&EeE7 z&#Oui2t36n(5qV5_7fih*Iq3Z6C1e=k!_g#+9+1~rTDk*-q?H5x(8X^S*i$BK}6^HQPHjuc=Dd3HyDJ7ecw`K-r`(6NXx-g{?Ja#xUGMk41x13Rmdnj zKBe+5YL+N>Z2N(8+dm^_xmZNLaD{|eey;^V(kO)uWMVA^yW9HREQ{%OklP{p=h5=7 zko)BS^@4DIRp>W&c)FQoeCDg-dnjAdjzZXs@x0}-(Tg=eom5$*4S#BP4aTaai`$46 z%Cu*Z=dS(@<|xRoi1LjzqD+=l2trlCM-)(&(7YNeXPx+I&%2X*0^7(KzfT&owR0+L zuSwd_9$x#I2HIOScz$PRp;rQN1*vPiuw%5FHY1NL5g6`es-&vYbL8a*`Of}1IakJ* z6>LzJlt8a$V_P7wfpT^d3v5rxGk$CMWo?*wq=2S2vnU#^6y{*-m3v`;9sUcl;t!)k z&l!?A$Qm|KEiX_wU8K%i8WXV~n#@d43sT~qq&Cc=>lU*}^f3|aD`Oa$_(F;MDuA7n zq~{^(2Pn)ITBJEl(oq0sTPJ-JM{lT=@KJjoBk6L84_a@F*pZxMxYx zVxM~0RB#ls<}1l=MD*uJ02AMli%M*YOBvRxS8M@%>QfdtKXvd-oI5O6a+!KrMnkcQc3CV5)hE?t`E{3OQ&>$ zfOJVWNG!XwbjQ-M3*XiE_52Ud{5IE|xn|CsnK}2lUvc}E--5QlEZr$la82MX?40r6 ze9ku>&>VeHv3_X?5{$xl&fqiUe6&p6^CL21t*^LGeD})~pDAwOpsMoclzdEC;A+F$ zV^pph%@=Z{D`22Cmom4|DQ|xPsbx${Nvq2if%2u|+l0ZTh)G97`q+rf;2qaGF2K~* z5z|~?`Jrkeh|=bBVt;tHV0;hGjD zCWYhqwGbe!nSO+FG8n(e2LTbcKjJ-pR!GaT3n=&C~t7K*RDMS5yB-WbB%y~ zZRoW|#KL-X$8E0~8qo^Pk{B_7(YfjnYuAS`HviBzJ!XX#jkBX?%t}V;to$x#1O5D$ zJXUxoD^_kG$lRzwhV#OmslCi~;BF6Q0TKte$ws0 z%JGQ>t&H7DxJ-eqC-a1+{(Os0h|rdTzR3xc9p#e#a2{`5`ns+Mvehu>oo*EuQCn_X zlw6aj(BZT7!u33hyGE@EqkUi8H<>nVj#nR}io^L}kL+?3Q&DgWl$LMa;iEQ?xx8mP zeZfKLn|OgTrgKboT>j7kO!@bJdtFi+cx;<^8gNrvw|G4G8*&wL=8K>?(hM#jfd~dQ*$7GGkr2)Uy`yqUk4yjR#Z51jZr7$lHXe@8foGERBCE0?nO)FqpS>KnW zF}yn7zitl5Tocpm-Di9ZqwVAXa_mN^sxR3{`$FcFCZKdwmHN|6ayIAQzjg(76v}yH zI*$06Rdh#jbNWhE$yzE~Y$~Q-qlDrz-n{TC_OmtFZqsd~)2jY@X%C&! zDAJFaegCA%&h{Uh4OzPv(7{XO*Ned5u_i2VKP4ZKu4xtXkJ0*Tz9) zH}R5hxmN$d3wpdlF?tS*+nu)V=**#t8LbRDxx38z&dkjc=$>uGBf`csCg@cbJl9Tr z=)eKTxDp7r}R?saTx=yAp z15lYRJ!#bTiw4K7aC8fMD>u?-iJQ@K?5uQ^5MJGCa@L!A!2pftI)3V{_5X$(=y#E| z)_)o6=tp~wI1Mx*t-f*aE9^ZcJ=|SMukm^^uYegoXtbQPU=SO40E9hG%yxIw4NFaS zr*~JsxcHOttQ*~cP#`JVaVEl>`o^a^9>4;Qg)@ZD>O%4+Ce|l555o{0V2zYN`*zU-O=&bQ=UJ;kiSx%qwx!2mdZRF+O@-=F6 zT0v6SO1sv+f?~a8;{8<@3Jpyr4^IPQ$;O)3AKrAFy8mT`-1UDC$(goyGB2#db+_BJ z$|0K-zlAOa0r)9-yRs&r6m@KGjCOJ~(lRte&B|IUBY4)i9U@=H3U;lGPe0v~nEl-vesIyHc4t zOxo^UR&L0=)((--mCQvXjS%G}nN(!k?@_)StGM$)GRIj!;|IQt?7u_w7u_OSPb2hT zp>`6)=h^tyxf`V@r|~e^1<60;(!;2ooDSUPv*Ns}`+PZXtyg*nFuN_et$DrpkdIyQ z_w)(Ia1(W?Tpuyk9{~nf<+Fa9)!&QnQGk@MNZ*atDoX{LY_&uP1MtZn5*Ze4ku-$4 z*XoU2(tbK{UN`ri;D7g!=f`HyZ0EgqZ0@+uE0yW@!gSoGvbyozYHWmH7HDQAZ@bc@ zB_5Gw^9fsJmb=L=WSdLMXjtCHl>Z~galhK66L6foSd1shx7C+`ch;Zg)wUE-XlK)K7@J*LhvY+zIHcNVfylf$lL6aM29wbiW^`m#;7RQw~$gdR>k_WOTW~y(sQd! z`Pp59CWQB1tT6YX8%~dXyf#piBU~O!vAJS&A~A{nwNFX(iN;&)Jkuv_>UO3{8@ z|MUwR>ENKKJozUY?sEMk`|-$XtbFrCl%Oh3X_KdS5T2Rf^K+myAqQD+$A}_G0VXaY~%TowXdj{IFUfQyB6B|cON4Hb??kG%4p6mJS zeUYBATB`LK&2-|dMHi21Q%%>?Z8Ja!)y@Iy%r*1Kds zxD1;RQ0FAS%a^`80vL4PWIu;bZ+e7!ct!l+SAo!$?4fRodCf1Nm9(KMsx3yVtn0R@ z8KU}&>Ucn(v)%c_D3#`JXpEqX4A9TTt}ns)_pq!#JfuLN?_l`zMVIInea3uT`7uPZ ziu>xzbVtGd^kIRs2gGbLlKstA>zwyTdc&&t*qep@ryml3ZQ z+aC>Wp44gSzDHf{T)eGg)R_JKNv$FStQBuM>m>MDBv6x+`Juv9D@L3-o>U!Y*!j+3 zi~gxg$dAL@-jBmvWo9oCNBRx8GTr9z`r)&pE{{C4wKLa^Al{zcodS?I+pUdu^{PxX z0usj@9Et*oD@PbWB8R=n4%f=qy_sQ(I8Jb=fg!0LPp;ZO3RM>B*yGZP7ZX4Kr-v*~ zXYbEw3eyfAnms83%Den)02aVUGk&g1z-4PK}l3T8B$Mb);>1|`r{TAgzS~12ntlUFtXxc+0sVw(upZmRt zgLTV^p;~TGnJYOs8*DyL@b>93EVCU^;CllXMJ zre~rh@ll)Y1eGX2u6an?buXxT+{7=oK_`rujLh83EDD&W-)H+CSexCpC?AE1IXv;R zo~P@>?*lr~?sTm1aDw=3tJwGK&Huxe=OgX*QfBr6$e&%BFkaRRc#2WkINYm3M0iGY?#Z3FK$uZuKm~+a9Nvou(fOP8MDP%4!Fhi9+VOSC*=oxTDYi}`+2YHbQg0xcoa#Z3HYg|mnj)F8)9WT z0QHu7+f{J&rcOODHL^Sgl^s5p zVZa&%IkZ|zABf~)P6NgZAhHs(qRTq#Lk2B*OP)>YDY&LiUqhrlpGAuX+28m@BJ8#1 zk{P&{c!%dIhz#uBc?LG6vWh>wmz{jWBgEe`UJ=0)y+}Zl*k;u1qIzCY%~o2}KXN;Q zO;|O;ca*wYkMkRF@*XcsapJlYpSSM}FWF9PxTg1Q$!L3v!cmHiQNE+si+H2~xg*CPN^T)x?NY+>2SM3&qE*WSi{ z?a@Ho;E`ej=#u{b9BtCA(=c{hSWa4e8Mzy1rRvERH1%Yp72YUSn?-M6rG~c^Pj-aV zX>=WmVIQxsNp$>=ce!v_=9-t@JKzt&23cwq3-;Wg^T{xf zK>$Oz(IAqyI7Af3FUshOAUSQ<+*OH}M=1LJ@dj_%sy`LZi9McLj%<}@^7T5FW{%*s?TIiA*oyCmUT70Z{G645&08JMc^WBx5P33zrhHv!M|EsQ!-C|hOy;NG~ zFP{0`6kD$tjzJb3!Q9v)c|5%+yS9fv7Tth#-Q>F8YvCiabN0Z7@7M-Xv7a)vsEWo+ z6OO1{9J$_6HB1%A-H>RyaZD?OtcsK4!GauMhRD znPLD^>`j8WB1*~8-y3z2>wd~D%S3LTRNB4{4CV*-5OPpfU>I1cJ!!FSC@kKD^`%KT% zLLTY@n$ceEAugjb88o!-M-mFc>#$UoxJKQ%=q9Fn!fp=Lve)I z+S3w|m+heZ*tJkS;(hBwyBb23ck}q?6x#6QNRMe$VOwkBpIZ_%1}imb*Qwl{&>^bz zAsq3E&G_6wV|8T@!}nPZOTnGH*0~5+{Oz;~()>m^tPO65x0QRUhJbLPl8D@pKW&Tq z=gn?nLax0KsF7t{f(zhtw4~vbZtrwP%0NZ<8GV=p$(&{hC_TA1j$JsS^Zec8dAQ11 zzsA(rPRgsgU_E2P)P280df=0Dz~!)O$J}dEPB>M{+e(RgVi)?58|B$SzE3+UR&v<=KTLV@mMNRHgg zV2cC1+Ux@h0M}6YZr;{i18r3aL_LvG;W(#zDi6Mp2Wy-!wTNd>X$e*4CexN_@R+rDr>nXWyca&h?8XLw_6 ze45_hE;NdZ`(x-nP43e;J>#kpB;}%oM!V|V&Qc@9$&Q6tFI1D?Zv7$<&IljrzU4ue zo+H@ZO{AjY38PvI)%+Id9GA!~5V=57#DFAZ{;~S*n=nvJZP}0lhA9}Has>IUf&9h-e&?0sy?ZmvhwyfJ}Lt|RpKkERo& zG_%5^ccy8#ktx3qXh5z3>O7lrio-}t28rFfO|}rbupCW9<%~C-iGhr0H^T8zH1N8y z*2&7et-~fk+z z9$^p@V~D6ij9d2hUSitaT~@H**y7jf;a{e4#I84rhZ}OQq-iy9l?WSOXq`uv)tBwQ z1=FC@D-=2lw5F!tR1g$X$}CQ~dVAq^udzVx^fI$dO-+ODaB%}wsEUWu%W#6Wt%WAZ zH)CmQFJ`v63>=nJ+>^H0Z!|h{4{)?{zYnQE3#5$a&<3Ln?g9nzsatBgG)amSA5-X4 z;T4RIL0w~Mds#5^#>i*xQ8{xgn#>)hjP4%=eN<|#5?fn=gqAWb@M~P`yc3Isw}I0J zCh>G=+UZCdF=3wkM@dm{ZCsy15RFZtRhibL%|N9ZLnZXXD2Yp@pJYoaUEZBHq2*AE z(-HgRWi$o?%SFbbgfO7M zAnQvifxc7+X*nAF7L+xrjWT^b&I354Z|I1z!v*k4zGDkdj!E>5_^oS{Zt3O$i>eDO6DJ1YiR=y8|O8+Sj=$spO8-Gq^oJXGalqKa9 zlETCn3S;B^afJOADOEgt0r4VY93W&|1@>a9bdPSM;@TVl`x!82&9ShJ|9F*Vjl;?D z*gxXxf5cPAtIOD4*j_D{CZG!=)YXd(vv3}ax=(QPHN^HNu}NJM8ud6=8|B4&i`zI{ zp|UWb@|#q_M+Qxs9xeFXP+k#rrA3EGFW2Pz%{hs3j^N;Wnsh|oiKQ6)@nf;lZF)}b zpuJL|g8`rp^PQq12cD`&+EclY#{<$RhTE@t-DxSi z#W&pN8U>R@)zNRl3P_1K%-?QK+VzJ02O83Ll9j{F3j>*_~9uh^1rAfSRD20lOkt;FdwCY&i{Jz;D1~2Hrp&_Yh z={H!sd`;gpLSWEOfqbHf(u%UD50ARTHPF%EZueo`Ehm5LRWhwFh2)dEFp_Pu z^YJ9Y%$zU1c}lLX{K~Re`**F$UxYJq^amS-`fh2E$_N^j1vx*ZYIW_-zE^VIMg6VB z2S=Z67K3@2wKEJd&_UoZ_IVPDwv_I7o0r=E&BH*h4Ja@N*JmpC^L*tFv-E?%CTE5% zcijAx$gh>~lRq^}*J}Gm>+7eY122Kgcd~0+CVuOb9{gIW`o;3WC zY%uP1z;@-b>u2$B?3Ixmuw`8C>5%p{3FZBT_=bk(D)YXllW%ZZ-qQ`0v)k9W6nb8* z=G8I(o3(*_14mN>7#+@2bNA+XHd&w|i6>&-3ff?Wo^=R=djJ@-LF5T$+>KGq%O^5=eP?f*PN)g`YU(o z$;a^vNeC)?6h>E zzcbn0b0N!7|D$dAs382CXg5;wusG3W;Gu4px8*k_IJQH4&cD*T>$s+%;g3RsE3gXw z7)MU|{b-)^{HoSJG&t*^yv)|Z%AX_X?j!AISliQok${|Js4zETNgUBIyxzyjJq_tg z@;n|UWpKr_m}tbWSciT}*e-XN%%!3y&r+0=L>XXaiIF94#IbYo{-&VgqX#Hf2dk?z z(V87ye)j6A~ZTm)e?v_k>~;9JiXE{)qWmJ;il< zTdS&X-M1K$lClneavIjbeU^{f#_7Q&*eL-e4gi4Ev?aCVu$>EH4M9fP$D|fu3I#a@ zisA)1sFXIF(zQ#me+c+<0`!|@Q&Fu`fj_b1hXKIS2fDZeimVZL{p7j6pU|m9Oq2x8 zp81^@MfhqWwAmu_6H)oEHkqo*^Z5iwDi`TZ%j4e-p`YnjL-Aa!9aw1T2V<516a5L{ zpTCCHwLaS~2H^Ab3g__3sLTr4ASv5f@);3vGn%ZXdC`$U9vty(62lTQasV)acmFUw z;S(N8XATWMQLHhefdnc2-GY}DdcTZ=Bp0hN8k|2p!Vf)lIW9G-66V$G!Ndk7pNbur5|N9F7l)*l&bwhgCPk_sqUuybcD9*{BkL zM04Sb?3z~c?C2fi@orA}j+y^s5Be4*b8xYF)?&yu#r`&iZN}XqQwo-*Zy^pCc!tUU zBqC}=aT!5HDxv!?(Wyec2Hz3j_TMx?R1U`n+)7I1e|C#oc8^FaL6RfQrU>=Yf zLCGAhWY5CM7+Q4noOUiW;(2sY7C5{6je$mWe$-djDx8V(-PaMriM<*2g7ZFLtlp32 ztUQHSF1ga9Uky%=@zpjiScFHoK|mok_Q3FM(ngFA6J(l)vU9&H7mAKb2vLaBYVzfa z?M@?BHS9SVriw>vu`|G`1*9(8kTP?bPbqt%bH5v-%!$;zBV*^7^ZytB*^IyhzFDi< z;Fe5v{>JQmaE`^)&M3*&I zu#arPJ%#7n)vl@t9jd?$KC0Vf&*`~R-kA4WX=W5*1^ut$X%8rWWYDk7Vw`tg`xQ~? zlj7FLNoO?C&dZ_dfiKMbAZI)XSGp^WiY(hXME!Pt+~)K9AC~l2DfL%6FWdEmI8~7B z5RB|G?oz5>Bw{|5@4PQSrdE}VBu ziE0uWhlEW(Q_V?)hGwTaClgqy)5<%x{H&8}S5(eh+wK8T(@rMrMHpFS8{7>2wc%uH zH$2)}EOaV>rze|?noXoicdVwS)!`dr@q#o^LCobypTxmyweniEuX9j5_MCV-wYzY; zGqLe--jTW23c=UtdC)lWc#x}}>K4>*eL^&7X&9tq?0-h}@Y^6grjy9)n{!bFmPfIM8Q>x>mTDBZ`+E}xZ8HLl`= zTZ|Rr1LjZiPdt%e-`1lJ_ql;MLu~mcGFL;=0YEH%@k^4UJ{pOyJ4J8iDtRxXRtnV}j1}|ozX$Yqb|U6vqlNy0X3ONd zP4-LIzgt~*=aB}Q350+nD|e6V69uc*IV6YZYSK>=HUCcaMVA&5;sSbJ^8{b8h9sYX z+!|H;+W7|l{J{WSP<}H7gNQr-JvJor7+vW*@W`Onsci}oK|yjQ0$cM?0Sn5N(IzCL zNn@LxhJwC9t0Smz+XChMkd*^Cv1DOG7240Tzl=eos1Hd+fs#ZNsP;M8?7`YhrI8wP z^G`Fk9ll@rghJq$SQ&q{e@OHfdJcQ*fz~#(2Z`dZ`FCvrQ7T%~(tqeF@_6|7|Ijid z7^?K`zf8y96#T3I5~zQ>PKT8F|JT|T^#4iY&-b(9h}mJJ76Q`sUq6v{1d(=YT@kX Date: Tue, 17 Nov 2020 16:08:15 +0530 Subject: [PATCH 072/958] name-changed --- .../{Eventaudit5157.PNG => event-audit-5157.png} | Bin .../{Eventpro5157.PNG => event-properties-5157.png} | Bin .../images/{firewallrules.PNG => firewallrule.png} | Bin ...lter.PNG => quarantine-default-block-filter.png} | Bin ...ers.PNG => query-user-default-block-filters.png} | Bin 5 files changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/windows-firewall/images/{Eventaudit5157.PNG => event-audit-5157.png} (100%) rename windows/security/threat-protection/windows-firewall/images/{Eventpro5157.PNG => event-properties-5157.png} (100%) rename windows/security/threat-protection/windows-firewall/images/{firewallrules.PNG => firewallrule.png} (100%) rename windows/security/threat-protection/windows-firewall/images/{QuarantineDefaultblock filter.PNG => quarantine-default-block-filter.png} (100%) rename windows/security/threat-protection/windows-firewall/images/{QueryUserDefaultblockfilters.PNG => query-user-default-block-filters.png} (100%) diff --git a/windows/security/threat-protection/windows-firewall/images/Eventaudit5157.PNG b/windows/security/threat-protection/windows-firewall/images/event-audit-5157.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/Eventaudit5157.PNG rename to windows/security/threat-protection/windows-firewall/images/event-audit-5157.png diff --git a/windows/security/threat-protection/windows-firewall/images/Eventpro5157.PNG b/windows/security/threat-protection/windows-firewall/images/event-properties-5157.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/Eventpro5157.PNG rename to windows/security/threat-protection/windows-firewall/images/event-properties-5157.png diff --git a/windows/security/threat-protection/windows-firewall/images/firewallrules.PNG b/windows/security/threat-protection/windows-firewall/images/firewallrule.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/firewallrules.PNG rename to windows/security/threat-protection/windows-firewall/images/firewallrule.png diff --git a/windows/security/threat-protection/windows-firewall/images/QuarantineDefaultblock filter.PNG b/windows/security/threat-protection/windows-firewall/images/quarantine-default-block-filter.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/QuarantineDefaultblock filter.PNG rename to windows/security/threat-protection/windows-firewall/images/quarantine-default-block-filter.png diff --git a/windows/security/threat-protection/windows-firewall/images/QueryUserDefaultblockfilters.PNG b/windows/security/threat-protection/windows-firewall/images/query-user-default-block-filters.png similarity index 100% rename from windows/security/threat-protection/windows-firewall/images/QueryUserDefaultblockfilters.PNG rename to windows/security/threat-protection/windows-firewall/images/query-user-default-block-filters.png From 5bf03114f68bd029800349fc08771de12fa294ff Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 17:32:14 +0530 Subject: [PATCH 073/958] Update filter-origin-documentation.md --- .../filter-origin-documentation.md | 65 ++++++++++--------- 1 file changed, 33 insertions(+), 32 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 900e12673a..30d3358139 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -17,11 +17,11 @@ ms.topic: troubleshooting # Filter Origin Documentation (Audit Log Improvements) -Debugging packet drops has long been a pain point to Windows customers. In the past, customers had limited information about packet drops. +Debugging packet drops is a continuous issue to Windows customers. In the past, customers had limited information about packet drops. -Typically, when investigating packet drop events, a customer would use the field “Filter Run-Time ID“ from WFP Audits 5157 or 5152. +Typically, when investigating packet drop events, a customer would use the field `Filter Run-Time ID` from WFP Audits 5157 or 5152. -[image] +![Event Properties](images/event-properties-5157.png) The filter ID uniquely identifies the filter that caused the packet drop. The filter ID can be searched in the WFP state dump output to trace back to the FW rule where the filter originated from. @@ -29,11 +29,11 @@ However, the filter ID is not a reliable source for tracing back to the filter o For customers to debug packet drop events correctly and efficiently, they would need more context about the blocking filter such as its origin. -The blocking filters can be categorized under these filter “origins”: +The blocking filters can be categorized under these filter origins: -1. Firewall Rules +1. Firewall Rules -2. Firewall Default Block Filters +2. Firewall Default Block Filters a. AppContainer Loopback @@ -48,22 +48,20 @@ The blocking filters can be categorized under these filter “origins”: f. UWP Default g. WSH Default - - The next section describes improvements made to Audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron Release. + +The next section describes the improvements made to Audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron Release. ## Improved Firewall Audit - There were two new fields added to the Audit 5157 and 5152 events: +The two new fields added to the Audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. - “Filter Origin” and “Interface Index”. - -The “Filter Origin” field will help identify the cause of the drop. Packet drops from FW are explicitly dropped by default block filters created by the Windows Firewall service or a FW rule which may be created by users, policies, services, apps, etc. +The `Filter Origin` field will help identify the cause of the drop. Packet drops from FW are explicitly dropped by default block filters created by the Windows Firewall service or a FW rule which may be created by users, policies, services, apps, etc. -“Filter Origin” will either specify the rule ID (a unique identifier of a FW rule) or the name of one of the default block filters. +`Filter Origin` will either specify the rule ID (a unique identifier of a Firewall rule) or the name of one of the default block filters. -The “Interface Index” field will specify the network interface in which the packet was dropped. This field will be especially helpful if the “Filter Origin” is “Quarantine Default” as it will identify what interface was quarantined. +The `Interface Index` field will specify the network interface in which the packet was dropped. This field helps to identify which interface was quarantined, if the `Filter Origin` is a `Quarantine Default`. -To enable a specific audit event, please run the corresponding command in an administrator command prompt: +To enable a specific audit event, run the corresponding command in an administrator command prompt: |**Audit #**|**Enable Command**|**Link**| |:-----|:-----|:-----| @@ -72,33 +70,33 @@ To enable a specific audit event, please run the corresponding command in an adm ## Example Flow of Debugging Packet Drops with Filter Origin -Now that the audit surfaces “Filter Origin” and “Interface Index”, the network admin can determine the root cause of the network packet drop and the interface it happened on. +As the audit surfaces `Filter Origin` and `Interface Index`, the network admin can determine the root cause of the network packet drop and the interface it happened on. -[image] +![Event Audit](images/event-audit-5157.png) -The next sections are divided by “Filter Origin” type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, “Firewall Default Block Filters.” Otherwise, continue to the section “Firewall Rules”. +The next sections are divided by `Filter Origin` type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, **Firewall Default Block Filters**. Otherwise, continue to the section **Firewall Rules**. ## Firewall Rules -Run the following PowerShell command to generate the rule information using “Filter Origin”. +Run the following PowerShell command to generate the rule information using `Filter Origin`. ```Powershell Get-NetFirewallRule -Name “” Get-NetFirewallRule -Name " {A549B7CF-0542-4B67-93F9-EEBCDD584377} " ``` -[image] +![Firewall rule](images/firewallrule.png) -After identifying the rule that caused the drop, the network admin can now modify/disable the rule to allow the traffic they want through command prompt or using the Windows Defender UI. The network admin can find the rule in the UI with the rule’s DisplayName. +After identifying the rule that caused the drop, the network admin can now modify/disable the rule to allow the traffic they want through command prompt or using the Windows Defender UI. The network admin can find the rule in the UI with the rule’s `DisplayName`. >[!NOTE] -> FW Rules from MDM store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the “Filter Origin” is one of the default block filters, as they do not correspond to any FW rules. +> Firewall rules from Mobile Device Management (MDM) store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the `Filter Origin` is one of the default block filters, as they do not correspond to any Firewall rules. ## Firewall Default Block Filters **AppContainer Loopback** -Network drop events from “AppContainer Loopback” block filter origin occur when localhost loopback is not enabled properly for the UWP app. +Network drop events from the AppContainer Loopback block filter origin occur when localhost loopback is not enabled properly for the UWP app. To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/en-us/windows/iot-core/develop-your-app/loopback). @@ -106,11 +104,11 @@ To enable localhost loopback for a published app which requires loopback access **Boottime Default** -Network drop events with the “Boottime Default” filter origin occur when the computer is booting up and the FW service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through FW rules. +Network drop events from the Boottime Default block filter origin occur when the computer is booting up and the Firewall service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through Firewall rules. **Quarantine Default** -Network drops from the “Quarantine Default” block filter occur when the interface is temporarily quarantined by FW Service. The FW service quarantines an interface when it detects a change on the network, and based on several other factors, the FW service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the Quarantine Default Block filter will block any new non-loopback inbound connections. +Network drops from the Quarantine Default block filter occur when the interface is temporarily quarantined by Firewall Service. The Firewall service quarantines an interface when it detects a change on the network, and based on several other factors, the Firewall service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the Quarantine Default Block filter will block any new non-loopback inbound connections. Run the following PowerShell command to generate more information about the interface: @@ -119,7 +117,7 @@ Get-NetIPInterface –InterfaceIndex Get-NetIPInterface –InterfaceIndex 5 ``` -[image] +![Quarantine Default block filter](images/quarantine-default-block-filter.png) To learn more about the quarantine feature, see [Quarantine Behavior](quarantine.md). @@ -130,24 +128,24 @@ To learn more about the quarantine feature, see [Quarantine Behavior](quarantine Network packet drops from Query User Default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: -1. Create an inbound FW rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. +1. Create an inbound FW rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. -2. Delete any block Query User rules which may have been auto generated by the FW service. +2. Delete any block Query User rules which may have been auto generated by the FW service. To generate a list of all the Query User block rules, you can run the following PowerShell command: ```Powershell - Get-NetFirewallRule | Where {$_.Name -like "*Query User*"} +Get-NetFirewallRule | Where {$_.Name -like "*Query User*"} ``` -[image] +![Query User Default block filter](images/query-user-default-block-filters.png) The query user pop-up feature is enabled by default. To disable the query user pop-up, you can run the following in administrative command prompt: ```Console - Netsh set allprofiles inboundusernotification disable +Netsh set allprofiles inboundusernotification disable ``` Or in PowerShell: @@ -158,11 +156,14 @@ Set-NetFirewallProfile -NotifyOnListen False **Stealth** Network drops from Stealth filters are typically made to prevent port scanning. + To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/disable-stealth-mode). **UWP Default** -Network drops from UWP Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). +Network drops from UWP Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. + +For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). **WSH Default** From b448138b2fe6299aa5e42052a72cd7e6f531d7ad Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 17:41:23 +0530 Subject: [PATCH 074/958] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 3135035738..55c24da4b7 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,7 +165,7 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) -### [Filter Origin Documentation](windows/security/threat-protection/windows-firewall/filter-origin-documentation.md) +### [Filter Origin Documentation](filter-origin-documentation.md) ### [Quarantine Behavior](quarantine.md) From 6fd17826a88b439bd75bff38809c362390e2d759 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Tue, 17 Nov 2020 17:42:54 +0530 Subject: [PATCH 075/958] Update filter-origin-documentation.md --- .../windows-firewall/filter-origin-documentation.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 30d3358139..b87dd45928 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -98,9 +98,9 @@ After identifying the rule that caused the drop, the network admin can now modif Network drop events from the AppContainer Loopback block filter origin occur when localhost loopback is not enabled properly for the UWP app. -To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/en-us/windows/iot-core/develop-your-app/loopback). +To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/windows/iot-core/develop-your-app/loopback). -To enable localhost loopback for a published app which requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/en-us/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). +To enable localhost loopback for a published app which requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). **Boottime Default** @@ -157,13 +157,13 @@ Set-NetFirewallProfile -NotifyOnListen False Network drops from Stealth filters are typically made to prevent port scanning. -To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/disable-stealth-mode). +To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/troubleshoot/windows-server/networking/disable-stealth-mode). **UWP Default** Network drops from UWP Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. -For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). +For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). **WSH Default** From f374aa2abb88c2cd73a27a237219a6b144832664 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 17 Nov 2020 12:03:45 -0800 Subject: [PATCH 076/958] Added WindowsDefender policies --- .../mdm/policy-csp-admx-windowsdefender.md | 2068 ++++++++++++++++- 1 file changed, 2055 insertions(+), 13 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md b/windows/client-management/mdm/policy-csp-admx-windowsdefender.md index 36fb917d07..70f168574e 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsdefender.md @@ -346,7 +346,7 @@ manager: dansimp
    -    **ADMX_AuditSettings/IncludeCmdLine** +**ADMX_WindowsDefender/AllowFastServiceStartup** @@ -389,16 +389,11 @@ manager: dansimp -Available in Windows 10 Insider Preview Build 20185. This policy setting determines what information is logged in security audit events when a new process has been created. This setting only applies when the Audit Process Creation policy is enabled. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. -If you enable this policy setting, the command line information for every process will be logged in plain text in the security event log as part of the Audit Process Creation event 4688, "a new process has been created," on the workstations and servers on which this policy setting is applied. +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. -If you disable or do not configure this policy setting, the process's command line information will not be included in Audit Process Creation events. - -Default is Not configured. - -> [!NOTE] -> When this policy setting is enabled, any user with access to read the security events will be able to read the command line arguments for any successfully created process. Command line arguments can contain sensitive or private information, such as passwords or user data. +If you disable this setting, the antimalware service will load as a low priority task. > [!TIP] @@ -410,15 +405,2062 @@ Default is Not configured. ADMX Info: -- GP English name: *Include command line in process creation events* -- GP name: *IncludeCmdLine* -- GP path: *System/Audit Process Creation* -- GP ADMX file name: *AuditSettings.admx* +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx*
    + +**ADMX_WindowsDefender/CheckForSignaturesBeforeRunningScan** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage whether a check for new virus and spyware security intelligence will occur before running a scan. + +This setting applies to scheduled scans as well as the command line "mpcmdrun -SigUpdate", but it has no effect on scans initiated manually from the user interface. + +If you enable this setting, a check for new security intelligence will occur before running a scan. + +If you disable this setting or do not configure this setting, the scan will start using the existing security intelligence. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Check for the latest virus and spyware security intelligence before running a scheduled scan* +- GP name: *CheckForSignaturesBeforeRunningScan* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/DisableAntiSpywareDefender** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off Microsoft Defender Antivirus. + +If you enable this policy setting, Microsoft Defender Antivirus does not run, and will not scan computers for malware or other potentially unwanted software. + +If you disable this policy setting, Microsoft Defender Antivirus will run regardless of any other installed antivirus product. + +If you do not configure this policy setting, Windows will internally manage Microsoft Defender Antivirus. If you install another antivirus program, Windows automatically disables Microsoft Defender Antivirus. Otherwise, Microsoft Defender Antivirus will scan your computers for malware and other potentially unwanted software. + +Enabling or disabling this policy may lead to unexpected or unsupported behavior. It is recommended that you leave this policy setting unconfigured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Microsoft Defender Antivirus* +- GP name: *DisableAntiSpywareDefender* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/DisableAutoExclusions** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Allows an administrator to specify if Automatic Exclusions feature for Server SKUs should be turned off. + +Disabled (Default): +Microsoft Defender will exclude pre-defined list of paths from the scan to improve performance. + +Enabled: +Microsoft Defender will not exclude pre-defined list of paths from scans. This can impact machine performance in some scenarios. + +Not configured: +Same as Disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Auto Exclusions* +- GP name: *DisableAutoExclusions* +- GP path: *Windows Components\Microsoft Defender Antivirus\Exclusions* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/DisableBlockAtFirstSeen** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This feature ensures the device checks in real time with the Microsoft Active Protection Service (MAPS) before allowing certain content to be run or accessed. If this feature is disabled, the check will not occur, which will lower the protection state of the device. + +Enabled – The Block at First Sight setting is turned on. +Disabled – The Block at First Sight setting is turned off. + +This feature requires these Group Policy settings to be set as follows: + +- MAPS -> The “Join Microsoft MAPS” must be enabled or the “Block at First Sight” feature will not function. +- MAPS -> The “Send file samples when further analysis is required” should be set to 1 (Send safe samples) or 3 (Send all samples). Setting to 0 (Always Prompt) will lower the protection state of the device. Setting to 2 (Never send) means the “Block at First Sight” feature will not function. +- Real-time Protection -> The “Scan all downloaded files and attachments” policy must be enabled or the “Block at First Sight” feature will not function. +- Real-time Protection -> Do not enable the “Turn off real-time protection” policy or the “Block at First Sight” feature will not function. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure the 'Block at First Sight' feature* +- GP name: *DisableBlockAtFirstSeen* +- GP path: *Windows Components\Microsoft Defender Antivirus\MAPS* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/DisableLocalAdminMerge** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether or not complex list settings configured by a local administrator are merged with Group Policy settings. This setting applies to lists such as threats and Exclusions. + +If you enable or do not configure this setting, unique items defined in Group Policy and in preference settings configured by the local administrator will be merged into the resulting effective policy. In the case of conflicts, Group policy Settings will override preference settings. + +If you disable this setting, only items defined by Group Policy will be used in the resulting effective policy. Group Policy settings will override preference settings configured by the local administrator. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure local administrator merge behavior for lists* +- GP name: *DisableLocalAdminMerge* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/DisableRealtimeMonitoring** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off real-time protection prompts for known malware detection. + +Microsoft Defender Antivirus alerts you when malware or potentially unwanted software attempts to install itself or to run on your computer. + +If you enable this policy setting, Microsoft Defender Antivirus will not prompt users to take actions on malware detections. + +If you disable or do not configure this policy setting, Microsoft Defender Antivirus will prompt users to take actions on malware detections. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off real-time protection* +- GP name: *DisableRealtimeMonitoring* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/DisableRoutinelyTakingAction** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure whether Microsoft Defender Antivirus automatically takes action on all detected threats. The action to be taken on a particular threat is determined by the combination of the policy-defined action, user-defined action, and the signature-defined action. + +If you enable this policy setting, Microsoft Defender Antivirus does not automatically take action on the detected threats, but prompts users to choose from the actions available for each threat. + +If you disable or do not configure this policy setting, Microsoft Defender Antivirus automatically takes action on all detected threats after a nonconfigurable delay of approximately five seconds. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off routine remediation* +- GP name: *DisableRoutinelyTakingAction* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Exclusions_Extensions** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you specify a list of file types that should be excluded from scheduled, custom, and real-time scanning. File types should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of the file type extension (such as "obj" or "lib"). The value is not used and it is recommended that this be set to 0. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Extension Exclusions* +- GP name: *Exclusions_Extensions* +- GP path: *Windows Components\Microsoft Defender Antivirus\Exclusions* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Exclusions_Paths** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to disable scheduled and real-time scanning for files under the paths specified or for the fully qualified resources specified. Paths should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of a path or a fully qualified resource name. + +As an example, a path might be defined as: "c:\Windows" to exclude all files in this directory. A fully qualified resource name might be defined as: "C:\Windows\App.exe". The value is not used and it is recommended that this be set to 0. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Path Exclusions* +- GP name: *Exclusions_Paths* +- GP path: *Windows Components\Microsoft Defender Antivirus\Exclusions* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Exclusions_Processes** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to disable scheduled and real-time scanning for any file opened by any of the specified processes. The process itself will not be excluded. To exclude the process, use the Path exclusion. Processes should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of the path to the process image. Note that only executables can be excluded. For example, a process might be defined as: "c:\windows\app.exe". The value is not used and it is recommended that this be set to 0. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Process Exclusions* +- GP name: *Exclusions_Processes* +- GP path: *Windows Components\Microsoft Defender Antivirus\Exclusions* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/ExploitGuard_ASR_ASROnlyExclusions** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Exclude files and paths from Attack Surface Reduction (ASR) rules. + +Enabled: +Specify the folders or files and resources that should be excluded from ASR rules in the Options section. +Enter each rule on a new line as a name-value pair: + +- Name column: Enter a folder path or a fully qualified resource name. For example, ""C:\Windows"" will exclude all files in that directory. ""C:\Windows\App.exe"" will exclude only that specific file in that specific folder +- Value column: Enter ""0"" for each item + +Disabled: +No exclusions will be applied to the ASR rules. + +Not configured: +Same as Disabled. + +You can configure ASR rules in the Configure Attack Surface Reduction rules GP setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Exclude files and paths from Attack Surface Reduction Rules* +- GP name: *ExploitGuard_ASR_ASROnlyExclusions* +- GP path: *Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Attack Surface Reduction* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/ExploitGuard_ASR_Rules** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Set the state for each Attack Surface Reduction (ASR) rule. + +After enabling this setting, you can set each rule to the following in the Options section: + +- Block: the rule will be applied +- Audit Mode: if the rule would normally cause an event, then it will be recorded (although the rule will not actually be applied) +- Off: the rule will not be applied + +Enabled: +Specify the state for each ASR rule under the Options section for this setting. +Enter each rule on a new line as a name-value pair: + +- Name column: Enter a valid ASR rule ID +- Value column: Enter the status ID that relates to state you want to specify for the associated rule + +The following status IDs are permitted under the value column: +- 1 (Block) +- 0 (Off) +- 2 (Audit) + +Example: +xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 0 +xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 1 +xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 2 + +Disabled: +No ASR rules will be configured. + +Not configured: +Same as Disabled. + +You can exclude folders or files in the "Exclude files and paths from Attack Surface Reduction Rules" GP setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Attack Surface Reduction rules* +- GP name: *ExploitGuard_ASR_Rules* +- GP path: *Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Attack Surface Reduction* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/AllowFastServiceStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. + +If you enable or do not configure this setting, the antimalware service will load as a normal priority task. + +If you disable this setting, the antimalware service will load as a low priority task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to startup with normal priority* +- GP name: *AllowFastServiceStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    Footnotes: - 1 - Available in Windows 10, version 1607. From 4dc4089511dbbfdd6260b835f2449f2a4b39ccf2 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 17 Nov 2020 16:55:19 -0800 Subject: [PATCH 077/958] Added new policies --- .../mdm/policy-csp-admx-windowsdefender.md | 1192 +++++++++++++++-- 1 file changed, 1071 insertions(+), 121 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md b/windows/client-management/mdm/policy-csp-admx-windowsdefender.md index 70f168574e..d935313482 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsdefender.md @@ -116,19 +116,19 @@ manager: dansimp ADMX_WindowsDefender/RealtimeProtection_DisableRawWriteNotification
    - ADMX_WindowsDefender/RealtimeProtection_DisableScanOnRealtimeEnable + ADMX_WindowsDefender/RealtimeProtection_DisableScanOnRealtimeEnable
    - ADMX_WindowsDefender/RealtimeProtection_IOAVMaxSize + ADMX_WindowsDefender/RealtimeProtection_IOAVMaxSize
    - ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring + ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring
    - ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection + ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection
    - ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection + ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection
    ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring @@ -194,7 +194,7 @@ manager: dansimp ADMX_WindowsDefender/Scan_DisableCatchupFullScan
    - Scan_DisableCatchupQuickScan/ProxyBypass + ADMX_WindowsDefender/Scan_DisableCatchupQuickScan
    ADMX_WindowsDefender/Scan_DisableEmailScanning @@ -1290,7 +1290,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_AllowedApplications** @@ -1333,11 +1333,24 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. Add additional applications that should be considered "trusted" by controlled folder access. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +These applications are allowed to modify or delete files in controlled folder access folders. -If you disable this setting, the antimalware service will load as a low priority task. +Microsoft Defender Antivirus automatically determines which applications should be trusted. You can configure this setting to add additional applications. + +Enabled: +Specify additional allowed applications in the Options section.. + +Disabled: +No additional applications will be added to the trusted list. + +Not configured: +Same as Disabled. + +You can enable controlled folder access in the Configure controlled folder access GP setting. + +Default system folders are automatically guarded, but you can add folders in the configure protected folders GP setting. > [!TIP] @@ -1349,8 +1362,634 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* +- GP English name: *Configure allowed applications* +- GP name: *ExploitGuard_ControlledFolderAccess_AllowedApplications* +- GP path: *Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Controlled Folder Access* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enable or disable controlled folder access for untrusted applications. You can choose to block, audit, or allow attempts by untrusted apps to: + +- Modify or delete files in protected folders, such as the Documents folder +- Write to disk sectors + +You can also choose to only block or audit writes to disk sectors while still allowing the modification or deletion of files in protected folders. + +Microsoft Defender Antivirus automatically determines which applications can be trusted. You can add additional trusted applications in the Configure allowed applications GP setting. +Default system folders are automatically protected, but you can add folders in the Configure protected folders GP setting. + +Block: +The following will be blocked: + +- Attempts by untrusted apps to modify or delete files in protected folders +- Attempts by untrusted apps to write to disk sectors + +The Windows event log will record these blocks under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1123. + +Disabled: +The following will not be blocked and will be allowed to run: + +- Attempts by untrusted apps to modify or delete files in protected folders +- Attempts by untrusted apps to write to disk sectors + +These attempts will not be recorded in the Windows event log. + +Audit Mode: +The following will not be blocked and will be allowed to run: + +- Attempts by untrusted apps to modify or delete files in protected folders +- Attempts by untrusted apps to write to disk sectors + +The Windows event log will record these attempts under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1124. + +Block disk modification only: +The following will be blocked: + +- Attempts by untrusted apps to write to disk sectors + +The Windows event log will record these attempts under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1123. + +The following will not be blocked and will be allowed to run: + +- Attempts by untrusted apps to modify or delete files in protected folders +These attempts will not be recorded in the Windows event log. + +Audit disk modification only: +The following will not be blocked and will be allowed to run: + +- Attempts by untrusted apps to write to disk sectors +- Attempts by untrusted apps to modify or delete files in protected folders +Only attempts to write to protected disk sectors will be recorded in the Windows event log (under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1124). +Attempts to modify or delete files in protected folders will not be recorded. + +Not configured: +Same as Disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Controlled folder access* +- GP name: *ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess* +- GP path: *Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Controlled Folder Access* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_ProtectedFolders** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specify additional folders that should be guarded by the Controlled folder access feature. + +Files in these folders cannot be modified or deleted by untrusted applications. + +Default system folders are automatically protected. You can configure this setting to add additional folders. +The list of default system folders that are protected is shown in Windows Security. + +Enabled: +Specify additional folders that should be protected in the Options section. + +Disabled: +No additional folders will be protected. + +Not configured: +Same as Disabled. + +You can enable controlled folder access in the Configure controlled folder access GP setting. + +Microsoft Defender Antivirus automatically determines which applications can be trusted. You can add additional trusted applications in the Configure allowed applications GP setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure protected folders* +- GP name: *ExploitGuard_ControlledFolderAccess_ProtectedFolders* +- GP path: *Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Controlled Folder Access* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/ExploitGuard_EnableNetworkProtection** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enable or disable Microsoft Defender Exploit Guard network protection to prevent employees from using any application to access dangerous domains that may host phishing scams, exploit-hosting sites, and other malicious content on the Internet. + +Enabled: +Specify the mode in the Options section: + +- Block: Users and applications will not be able to access dangerous domains +- Audit Mode: Users and applications can connect to dangerous domains, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs. + +Disabled: +Users and applications will not be blocked from connecting to dangerous domains. + +Not configured: +Same as Disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent users and apps from accessing dangerous websites* +- GP name: *ExploitGuard_EnableNetworkProtection* +- GP path: *Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Network Protection* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/MpEngine_EnableFileHashComputation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enable or disable file hash computation feature. + +Enabled: +When this feature is enabled Microsoft Defender will compute hash value for files it scans. + +Disabled: +File hash value is not computed + +Not configured: +Same as Disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enable file hash computation feature* +- GP name: *MpEngine_EnableFileHashComputation* +- GP path: *Windows Components\Microsoft Defender Antivirus\MpEngine* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Nis_Consumers_IPS_DisableSignatureRetirement** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure definition retirement for network protection against exploits of known vulnerabilities. Definition retirement checks to see if a computer has the required security updates necessary to protect it against a particular vulnerability. If the system is not vulnerable to the exploit detected by a definition, then that definition is "retired". If all security intelligence for a given protocal are retired then that protocol is no longer parsed. Enabling this feature helps to improve performance. On a computer that is up-to-date with all the latest security updates, network protection will have no impact on network performance. + +If you enable or do not configure this setting, definition retirement will be enabled. + +If you disable this setting, definition retirement will be disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on definition retirement* +- GP name: *Nis_Consumers_IPS_DisableSignatureRetirement* +- GP path: *Windows Components\Microsoft Defender Antivirus\Network Inspection System* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting defines additional definition sets to enable for network traffic inspection. Definition set GUIDs should be added under the Options for this setting. Each entry must be listed as a name value pair, where the name should be a string representation of a definition set GUID. As an example, the definition set GUID to enable test security intelligence is defined as: “{b54b6ac9-a737-498e-9120-6616ad3bf590}”. The value is not used and it is recommended that this be set to 0. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify additional definition sets for network traffic inspection* +- GP name: *Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid* +- GP path: *Windows Components\Microsoft Defender Antivirus\Network Inspection System* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Nis_DisableProtocolRecognition** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure protocol recognition for network protection against exploits of known vulnerabilities. + +If you enable or do not configure this setting, protocol recognition will be enabled. + +If you disable this setting, protocol recognition will be disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on protocol recognition* +- GP name: *Nis_DisableProtocolRecognition* +- GP path: *Windows Components\Microsoft Defender Antivirus\Network Inspection System* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/ProxyBypass** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy, if defined, will prevent antimalware from using the configured proxy server when communicating with the specified IP addresses. The address value should be entered as a valid URL. + +If you enable this setting, the proxy server will be bypassed for the specified addresses. + +If you disable or do not configure this setting, the proxy server will not be bypassed for the specified addresses. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Define addresses to bypass proxy server* +- GP name: *ProxyBypass* - GP path: *Windows Components\Microsoft Defender Antivirus* - GP ADMX file name: *WindowsDefender.admx* @@ -1359,7 +1998,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/ProxyPacUrl** @@ -1402,11 +2041,17 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting defines the URL of a proxy .pac file that should be used when the client attempts to connect the network for security intelligence updates and MAPS reporting. If the proxy auto-config fails or if there is no proxy auto-config specified, the client will fall back to the alternative options (in order): -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +1. Proxy server (if specified) +2. Proxy .pac URL (if specified) +3. None +4. Internet Explorer proxy settings +5. Autodetect -If you disable this setting, the antimalware service will load as a low priority task. +If you enable this setting, the proxy setting will be set to use the specified proxy .pac according to the order specified above. + +If you disable or do not configure this setting, the proxy will skip over this fallback step according to the order specified above. > [!TIP] @@ -1418,8 +2063,8 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* +- GP English name: *Define proxy auto-config (.pac) for connecting to the network* +- GP name: *ProxyPacUrl* - GP path: *Windows Components\Microsoft Defender Antivirus* - GP ADMX file name: *WindowsDefender.admx* @@ -1428,7 +2073,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/ProxyServer**
    @@ -1471,11 +2116,17 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the named proxy that should be used when the client attempts to connect to the network for security intelligence updates and MAPS reporting. If the named proxy fails or if there is no proxy specified, the client will fall back to the alternative options (in order): -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +1. Proxy server (if specified) +2. Proxy .pac URL (if specified) +3. None +4. Internet Explorer proxy settings +5. Autodetect -If you disable this setting, the antimalware service will load as a low priority task. +If you enable this setting, the proxy will be set to the specified URL according to the order specified above. The URL should be proceeded with either http:// or https://. + +If you disable or do not configure this setting, the proxy will skip over this fallback step according to the order specified above. > [!TIP] @@ -1487,8 +2138,8 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* +- GP English name: *Define proxy server for connecting to the network* +- GP name: *ProxyServer* - GP path: *Windows Components\Microsoft Defender Antivirus* - GP ADMX file name: *WindowsDefender.admx* @@ -1497,7 +2148,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/Quarantine_LocalSettingOverridePurgeItemsAfterDelay**
    @@ -1540,11 +2191,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of the number of days items should be kept in the Quarantine folder before being removed. This setting can only be set by Group Policy. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable this setting, the local preference setting will take priority over Group Policy. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. > [!TIP] @@ -1556,8 +2207,146 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* +- GP English name: *Configure local setting override for the removal of items from Quarantine folder* +- GP name: *Quarantine_LocalSettingOverridePurgeItemsAfterDelay* +- GP path: *Windows Components\Microsoft Defender Antivirus\Quarantine* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Quarantine_PurgeItemsAfterDelay** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting defines the number of days items should be kept in the Quarantine folder before being removed. + +If you enable this setting, items will be removed from the Quarantine folder after the number of days specified. + +If you disable or do not configure this setting, items will be kept in the quarantine folder indefinitely and will not be automatically removed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure removal of items from Quarantine folder* +- GP name: *Quarantine_PurgeItemsAfterDelay* +- GP path: *Windows Components\Microsoft Defender Antivirus\Quarantine* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/RandomizeScheduleTaskTimes** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to enable or disable randomization of the scheduled scan start time and the scheduled security intelligence update start time. This setting is used to distribute the resource impact of scanning. For example, it could be used in guest virtual machines sharing a host, to prevent multiple guest virtual machines from undertaking a disk-intensive operation at the same time. + +If you enable or do not configure this setting, scheduled tasks will begin at a random time within an interval of 30 minutes before and after the specified start time. + +If you disable this setting, scheduled tasks will begin at the specified start time. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Randomize scheduled task times* +- GP name: *RandomizeScheduleTaskTimes* - GP path: *Windows Components\Microsoft Defender Antivirus* - GP ADMX file name: *WindowsDefender.admx* @@ -1566,7 +2355,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_DisableBehaviorMonitoring** @@ -1609,11 +2398,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure behavior monitoring. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable or do not configure this setting, behavior monitoring will be enabled. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable this setting, behavior monitoring will be disabled. > [!TIP] @@ -1625,9 +2414,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Turn on behavior monitoring* +- GP name: *RealtimeProtection_DisableBehaviorMonitoring* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -1635,7 +2424,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_DisableIOAVProtection**
    @@ -1678,11 +2467,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure scanning for all downloaded files and attachments. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable or do not configure this setting, scanning for all downloaded files and attachments will be enabled. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable this setting, scanning for all downloaded files and attachments will be disabled. > [!TIP] @@ -1694,9 +2483,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Scan all downloaded files and attachments* +- GP name: *RealtimeProtection_DisableIOAVProtection* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -1704,7 +2493,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_DisableOnAccessProtection**
    @@ -1747,11 +2536,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure monitoring for file and program activity. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable or do not configure this setting, monitoring for file and program activity will be enabled. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable this setting, monitoring for file and program activity will be disabled. > [!TIP] @@ -1763,9 +2552,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Monitor file and program activity on your computer* +- GP name: *RealtimeProtection_DisableOnAccessProtection* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -1773,7 +2562,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_DisableRawWriteNotification**
    @@ -1816,11 +2605,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether raw volume write notifications are sent to behavior monitoring. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable or do not configure this setting, raw write notifications will be enabled. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable this setting, raw write notifications be disabled. > [!TIP] @@ -1832,9 +2621,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Turn on raw volume write notifications* +- GP name: *RealtimeProtection_DisableRawWriteNotification* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -1842,7 +2631,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_DisableScanOnRealtimeEnable**
    @@ -1885,11 +2674,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure process scanning when real-time protection is turned on. This helps to catch malware which could start when real-time protection is turned off. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable or do not configure this setting, a process scan will be initiated when real-time protection is turned on. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable this setting, a process scan will not be initiated when real-time protection is turned on. > [!TIP] @@ -1901,9 +2690,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Turn on process scanning whenever real-time protection is enabled* +- GP name: *RealtimeProtection_DisableScanOnRealtimeEnable* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -1911,7 +2700,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_IOAVMaxSize**
    @@ -1954,11 +2743,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting defines the maximum size (in kilobytes) of downloaded files and attachments that will be scanned. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable this setting, downloaded files and attachments smaller than the size specified will be scanned. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable or do not configure this setting, a default size will be applied. > [!TIP] @@ -1970,9 +2759,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Define the maximum size of downloaded files and attachments to be scanned* +- GP name: *RealtimeProtection_IOAVMaxSize* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -1980,7 +2769,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring**
    @@ -2023,11 +2812,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of behavior monitoring. This setting can only be set by Group Policy. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable this setting, the local preference setting will take priority over Group Policy. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. > [!TIP] @@ -2039,9 +2828,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Configure local setting override for turn on behavior monitoring* +- GP name: *RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -2049,7 +2838,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection**
    @@ -2092,11 +2881,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of scanning for all downloaded files and attachments. This setting can only be set by Group Policy. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable this setting, the local preference setting will take priority over Group Policy. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. > [!TIP] @@ -2108,9 +2897,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Configure local setting override for scanning all downloaded files and attachments* +- GP name: *RealtimeProtection_LocalSettingOverrideDisableIOAVProtection* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -2118,7 +2907,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection**
    @@ -2161,11 +2950,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of monitoring for file and program activity on your computer. This setting can only be set by Group Policy. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable this setting, the local preference setting will take priority over Group Policy. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. > [!TIP] @@ -2177,9 +2966,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Configure local setting override for monitoring file and program activity on your computer* +- GP name: *RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -2187,7 +2976,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring**
    @@ -2230,11 +3019,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration to turn on real-time protection. This setting can only be set by Group Policy. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable this setting, the local preference setting will take priority over Group Policy. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. > [!TIP] @@ -2246,9 +3035,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Configure local setting override to turn on real-time protection* +- GP name: *RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -2256,7 +3045,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection**
    @@ -2299,11 +3088,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of monitoring for incoming and outgoing file activity. This setting can only be set by Group Policy. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable this setting, the local preference setting will take priority over Group Policy. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. > [!TIP] @@ -2315,9 +3104,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Configure local setting override for monitoring for incoming and outgoing file activity* +- GP name: *RealtimeProtection_LocalSettingOverrideRealtimeScanDirection* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -2325,7 +3114,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/RealtimeProtection_RealtimeScanDirection**
    @@ -2368,11 +3157,21 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure monitoring for incoming and outgoing files, without having to turn off monitoring entirely. It is recommended for use on servers where there is a lot of incoming and outgoing file activity but for performance reasons need to have scanning disabled for a particular scan direction. The appropriate configuration should be evaluated based on the server role. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +Note that this configuration is only honored for NTFS volumes. For any other file system type, full monitoring of file and program activity will be present on those volumes. -If you disable this setting, the antimalware service will load as a low priority task. +The options for this setting are mutually exclusive: + +- 0 = Scan incoming and outgoing files (default) +- 1 = Scan incoming files only +- 2 = Scan outgoing files only + +Any other value, or if the value does not exist, resolves to the default (0). + +If you enable this setting, the specified type of monitoring will be enabled. + +If you disable or do not configure this setting, monitoring for incoming and outgoing files will be enabled. > [!TIP] @@ -2384,9 +3183,9 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Configure monitoring for incoming and outgoing file and program activity* +- GP name: *RealtimeProtection_RealtimeScanDirection* +- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* - GP ADMX file name: *WindowsDefender.admx* @@ -2394,7 +3193,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_WindowsDefender/Remediation_LocalSettingOverrideScan_ScheduleTime**
    @@ -2437,11 +3236,11 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting controls the load priority for the antimalware service. Increasing the load priority will allow for faster service startup, but may impact performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of the time to run a scheduled full scan to complete remediation. This setting can only be set by Group Policy. -If you enable or do not configure this setting, the antimalware service will load as a normal priority task. +If you enable this setting, the local preference setting will take priority over Group Policy. -If you disable this setting, the antimalware service will load as a low priority task. +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. > [!TIP] @@ -2453,14 +3252,165 @@ If you disable this setting, the antimalware service will load as a low priority ADMX Info: -- GP English name: *Allow antimalware service to startup with normal priority* -- GP name: *AllowFastServiceStartup* -- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP English name: *Configure local setting override for the time of day to run a scheduled full scan to complete remediation* +- GP name: *Remediation_LocalSettingOverrideScan_ScheduleTime* +- GP path: *Windows Components\Microsoft Defender Antivirus\Remediation* - GP ADMX file name: *WindowsDefender.admx*
    + + +**ADMX_WindowsDefender/Remediation_Scan_ScheduleDay** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the day of the week on which to perform a scheduled full scan in order to complete remediation. The scan can also be configured to run every day or to never run at all. + +This setting can be configured with the following ordinal number values: + +- (0x0) Every Day +- (0x1) Sunday +- (0x2) Monday +- (0x3) Tuesday +- (0x4) Wednesday +- (0x5) Thursday +- (0x6) Friday +- (0x7) Saturday +- (0x8) Never (default) + +If you enable this setting, a scheduled full scan to complete remediation will run at the frequency specified. + +If you disable or do not configure this setting, a scheduled full scan to complete remediation will run at a default frequency. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the day of the week to run a scheduled full scan to complete remediation* +- GP name: *Remediation_Scan_ScheduleDay* +- GP path: *Windows Components\Microsoft Defender Antivirus\Remediation* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Remediation_Scan_ScheduleTime** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the time of day at which to perform a scheduled full scan in order to complete remediation. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. The schedule is based on local time on the computer where the scan is executing. + +If you enable this setting, a scheduled full scan to complete remediation will run at the time of day specified. + +If you disable or do not configure this setting, a scheduled full scan to complete remediation will run at a default time. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the time of day to run a scheduled full scan to complete remediation* +- GP name: *Remediation_Scan_ScheduleTime* +- GP path: *Windows Components\Microsoft Defender Antivirus\Remediation* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + Footnotes: - 1 - Available in Windows 10, version 1607. From 0e669df0f18f4ab646c2b08ba5f72b0df4c31e0d Mon Sep 17 00:00:00 2001 From: Asha Iyengar Date: Wed, 18 Nov 2020 17:58:54 +0530 Subject: [PATCH 078/958] Minor changes --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 45fc0886f1..92a3e08580 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -17,7 +17,7 @@ ms.topic: troubleshooting # Firewall Settings Lost on Upgrade -This article describes a scenario whereby previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. +This article describes a scenario where previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. ## Rule Groups @@ -29,15 +29,15 @@ Individual built-in firewall rules are categorized within a group. For example, - Remote Desktop – User-Mode (UDP-In) -Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Admins can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘Inbound’ or ‘Outbound Rules’ and selecting ‘Filter by Group’; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Admins can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘**Inbound**’ or ‘**Outbound Rules**’ and selecting ‘**Filter by Group**’; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group ``` > [!NOTE] -> It is recommended to enable an entire group instead of individual rules if the expectation is the ruleset is going to be migrated at some point. +> It is recommended to enable an entire group instead of individual rules if the expectation is that the ruleset is going to be migrated at some point. It is recommended to enable/disable all rules within a group, as opposed to enabling/disabling just one or two of the individual rules to help avoid unexpected behaviors. For example, while rule groups can be used to organize rules by influence and allows batch rule modifications, they are also used as a way to maintain rule state across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the process determines what should be enabled/disabled when the upgrade is complete. -Take the Remote Desktop group example mentioned above. It consists of three rules. To ensure that the ruleset is properly maintained once the upgrade is complete, all three rules should be enabled. If only one rule is enabled, the upgrade process will see that two of three rules is disabled and subsequently disable the entire group to maintain an as pristine out-of-the-box configuration as possible. Obviously, in this scenario, this brings the unintended consequence of being unable to establish RDP connection to the host. +Take the Remote Desktop group example mentioned earlier. It consists of three rules. To ensure that the ruleset is properly maintained once the upgrade is complete, all three rules must be enabled. If only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group to maintain an as pristine out-of-the-box configuration as possible. Obviously, in this scenario, this brings the unintended consequence of being unable to establish RDP (Remote Desktop Protocol) connection to the host. From 6368d5c46113b1277856224fa84ae57d235b6d59 Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Wed, 18 Nov 2020 14:43:47 +0100 Subject: [PATCH 079/958] Update: merge public branch into patch-107 See commit https://github.com/MicrosoftDocs/windows-itpro-docs/commit/f248872c9b4861a1d92ea8a945899fe6280fcab2 (`microsoft-defender-smartscreen-available-settings.md` file link https://github.com/MicrosoftDocs/windows-itpro-docs/commit/f248872c9b4861a1d92ea8a945899fe6280fcab2#diff-12e67b38e445922ed975beb4b144adf92ff9d4bd71fa12a0626dfe435bb0cb59) for the details. --- .../microsoft-defender-smartscreen-available-settings.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md index a25aed7eab..39288a73aa 100644 --- a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md +++ b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md @@ -41,7 +41,7 @@ SmartScreen uses registry-based Administrative Template policy settings. For mor Windows 10, version 2004:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control -This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.

    This setting does not protect against malicious content from USB devices, network shares or other non-internet sources.

    Important: Using a trustworthy browser helps ensure that these protections work as expected.

    +This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.

    This setting does not protect against malicious content from USB devices, network shares, or other non-internet sources.

    Important: Using a trustworthy browser helps ensure that these protections work as expected.

    Windows 10, version 2004:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen (Microsoft Edge version 45 and earlier)

    Administrative Templates\Microsoft Edge\SmartScreen settings\Configure Microsoft Defender SmartScreen (Microsoft Edge version 77 or later)

    Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Microsoft Edge\Configure Windows Defender SmartScreen (Microsoft Edge version 45 and earlier)

    Administrative Templates\Microsoft Edge\SmartScreen settings\Configure Microsoft Defender SmartScreen (Microsoft Edge version 77 or later)

    Windows 10, Version 1607 and earlier:
    Administrative Templates\Windows Components\Microsoft Edge\Configure Windows SmartScreen @@ -159,7 +159,7 @@ For Microsoft Defender SmartScreen Edge MDM policies, see [Policy CSP - Browser] ## Recommended Group Policy and MDM settings for your organization -By default, Microsoft Defender SmartScreen lets employees bypass warnings. Unfortunately, this can let employees continue to an unsafe site or to continue to download an unsafe file, even after being warned. Because of this possibility, we strongly recommend that you set up Microsoft Defender SmartScreen to block high-risk interactions instead of providing just a warning. +By default, Microsoft Defender SmartScreen lets employees bypass warnings. Unfortunately, this feature can let employees continue to an unsafe site or to continue to download an unsafe file, even after being warned. Because of this possibility, we strongly recommend that you set up Microsoft Defender SmartScreen to block high-risk interactions instead of providing just a warning. To better help you protect your organization, we recommend turning on and using these specific Microsoft Defender SmartScreen Group Policy and MDM settings. From 7e0e79d0c793c8062e02938fbedc1d76c4f34a4b Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 18 Nov 2020 14:15:38 -0800 Subject: [PATCH 080/958] Added more policies --- .../mdm/policy-csp-admx-windowsdefender.md | 1369 +++++++++++++++++ 1 file changed, 1369 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md b/windows/client-management/mdm/policy-csp-admx-windowsdefender.md index d935313482..c1aaa52eb3 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsdefender.md @@ -3411,6 +3411,1375 @@ ADMX Info:
    + +**ADMX_WindowsDefender/Reporting_AdditionalActionTimeout** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +

    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the time in minutes before a detection in the "additional action" state moves to the "cleared" state. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure time out for detections requiring additional action* +- GP name: *Reporting_AdditionalActionTimeout* +- GP path: *Windows Components\Microsoft Defender Antivirus\Reporting* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Reporting_CriticalFailureTimeout** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the time in minutes before a detection in the “critically failed” state to moves to either the “additional action” state or the “cleared” state. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure time out for detections in critically failed state* +- GP name: *Reporting_CriticalFailureTimeout* +- GP path: *Windows Components\Microsoft Defender Antivirus\Reporting* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Reporting_DisableEnhancedNotifications** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Use this policy setting to specify if you want Microsoft Defender Antivirus enhanced notifications to display on clients. + +If you disable or do not configure this setting, Microsoft Defender Antivirus enhanced notifications will display on clients. + +If you enable this setting, Microsoft Defender Antivirus enhanced notifications will not display on clients. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off enhanced notifications* +- GP name: *Reporting_DisableEnhancedNotifications* +- GP path: *Windows Components\Microsoft Defender Antivirus\Reporting* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + +**ADMX_WindowsDefender/Reporting_DisablegenericrePorts** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure whether or not Watson events are sent. + +If you enable or do not configure this setting, Watson events will be sent. + +If you disable this setting, Watson events will not be sent. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Watson events* +- GP name: *Reporting_DisablegenericrePorts* +- GP path: *Windows Components\Microsoft Defender Antivirus\Reporting* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Reporting_NonCriticalTimeout** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the time in minutes before a detection in the "non-critically failed" state moves to the "cleared" state. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure time out for detections in non-critical failed state* +- GP name: *Reporting_NonCriticalTimeout* +- GP path: *Windows Components\Microsoft Defender Antivirus\Reporting* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + +**ADMX_WindowsDefender/Reporting_RecentlyCleanedTimeout** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the time in minutes before a detection in the "completed" state moves to the "cleared" state. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure time out for detections in recently remediated state* +- GP name: *Reporting_RecentlyCleanedTimeout* +- GP path: *Windows Components\Microsoft Defender Antivirus\Reporting* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Reporting_WppTracingComponents** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy configures Windows software trace preprocessor (WPP Software Tracing) components. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Windows software trace preprocessor components* +- GP name: *Reporting_WppTracingComponents* +- GP path: *Windows Components\Microsoft Defender Antivirus\Reporting* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Reporting_WppTracingLevel** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy allows you to configure tracing levels for Windows software trace preprocessor (WPP Software Tracing). + +Tracing levels are defined as: + +- 1 - Error +- 2 - Warning +- 3 - Info +- 4 - Debug + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure WPP tracing level* +- GP name: *Reporting_WppTracingLevel* +- GP path: *Windows Components\Microsoft Defender Antivirus\Reporting* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Root_PUAProtection** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. + +Enabled: +Specify the mode in the Options section: + +- Block: Potentially unwanted software will be blocked. +- Audit Mode: Potentially unwanted software will not be blocked, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs. + +Disabled: +Potentially unwanted software will not be blocked. + +Not configured: +Same as Disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure detection for potentially unwanted applications* +- GP name: *Root_PUAProtection* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_AllowPause** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage whether or not end users can pause a scan in progress. + +If you enable or do not configure this setting, a new context menu will be added to the task tray icon to allow the user to pause a scan. + +If you disable this setting, users will not be able to pause scans. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow users to pause scan* +- GP name: *Scan_AllowPause* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_ArchiveMaxDepth** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the maximum directory depth level into which archive files such as .ZIP or .CAB are unpacked during scanning. The default directory depth level is 0. + +If you enable this setting, archive files will be scanned to the directory depth level specified. + +If you disable or do not configure this setting, archive files will be scanned to the default directory depth level. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the maximum depth to scan archive files* +- GP name: *Scan_ArchiveMaxDepth* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_ArchiveMaxSize** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the maximum size of archive files such as .ZIP or .CAB that will be scanned. The value represents file size in kilobytes (KB). The default value is 0 and represents no limit to archive size for scanning. + +If you enable this setting, archive files less than or equal to the size specified will be scanned. + +If you disable or do not configure this setting, archive files will be scanned according to the default value. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the maximum size of archive files to be scanned* +- GP name: *Scan_ArchiveMaxSize* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_AvgCPULoadFactor** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the maximum percentage CPU utilization permitted during a scan. Valid values for this setting are a percentage represented by the integers 5 to 100. A value of 0 indicates that there should be no throttling of CPU utilization. The default value is 50. + +If you enable this setting, CPU utilization will not exceed the percentage specified. + +If you disable or do not configure this setting, CPU utilization will not exceed the default value. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the maximum percentage of CPU utilization during a scan* +- GP name: *Scan_AvgCPULoadFactor* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_DisableArchiveScanning** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure scans for malicious software and unwanted software in archive files such as .ZIP or .CAB files. + +If you enable or do not configure this setting, archive files will be scanned. + +If you disable this setting, archive files will not be scanned. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Scan archive files* +- GP name: *Scan_DisableArchiveScanning* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_DisableCatchupFullScan** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time. + +If you enable this setting, catch-up scans for scheduled full scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run. + +If you disable or do not configure this setting, catch-up scans for scheduled full scans will be turned off. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on catch-up full scan* +- GP name: *Scan_DisableCatchupFullScan* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_DisableCatchupQuickScan** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time. + +If you enable this setting, catch-up scans for scheduled quick scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run. + +If you disable or do not configure this setting, catch-up scans for scheduled quick scans will be turned off. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on catch-up quick scan* +- GP name: *Scan_DisableCatchupQuickScan* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_DisableEmailScanning** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure e-mail scanning. When e-mail scanning is enabled, the engine will parse the mailbox and mail files, according to their specific format, in order to analyze the mail bodies and attachments. Several e-mail formats are currently supported, for example: pst (Outlook), dbx, mbx, mime (Outlook Express), binhex (Mac). + +If you enable this setting, e-mail scanning will be enabled. + +If you disable or do not configure this setting, e-mail scanning will be disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on e-mail scanning* +- GP name: *Scan_DisableEmailScanning* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_DisableHeuristics** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure heuristics. Suspicious detections will be suppressed right before reporting to the engine client. Turning off heuristics will reduce the capability to flag new threats. It is recommended that you do not turn off heuristics. + +If you enable or do not configure this setting, heuristics will be enabled. + +If you disable this setting, heuristics will be disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on heuristics* +- GP name: *Scan_DisableHeuristics* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_DisablePackedExeScanning** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure scanning for packed executables. It is recommended that this type of scanning remain enabled. + +If you enable or do not configure this setting, packed executables will be scanned. + +If you disable this setting, packed executables will not be scanned. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Scan packed executables* +- GP name: *Scan_DisablePackedExeScanning* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_DisableRemovableDriveScanning** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage whether or not to scan for malicious software and unwanted software in the contents of removable drives, such as USB flash drives, when running a full scan. + +If you enable this setting, removable drives will be scanned during any type of scan. + +If you disable or do not configure this setting, removable drives will not be scanned during a full scan. Removable drives may still be scanned during quick scan and custom scan. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Scan removable drives* +- GP name: *Scan_DisableRemovableDriveScanning* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + Footnotes: - 1 - Available in Windows 10, version 1607. From 0c7a4df372f1329b73a2e4fc0f4b52dc823d2184 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 18 Nov 2020 17:09:38 -0800 Subject: [PATCH 081/958] Added more policies --- .../mdm/policy-csp-admx-windowsdefender.md | 3082 +++++++++++++++++ 1 file changed, 3082 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md b/windows/client-management/mdm/policy-csp-admx-windowsdefender.md index c1aaa52eb3..5e550c9817 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md +++ b/windows/client-management/mdm/policy-csp-admx-windowsdefender.md @@ -4780,6 +4780,3088 @@ ADMX Info:
    + +**ADMX_WindowsDefender/Scan_DisableReparsePointScanning** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure reparse point scanning. If you allow reparse points to be scanned, there is a possible risk of recursion. However, the engine supports following reparse points to a maximum depth so at worst scanning could be slowed. Reparse point scanning is disabled by default and this is the recommended state for this functionality. + +If you enable this setting, reparse point scanning will be enabled. + +If you disable or do not configure this setting, reparse point scanning will be disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on reparse point scanning* +- GP name: *Scan_DisableReparsePointScanning* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_DisableRestorePoint** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to create a system restore point on the computer on a daily basis prior to cleaning. + +If you enable this setting, a system restore point will be created. + +If you disable or do not configure this setting, a system restore point will not be created. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Create a system restore point* +- GP name: *Scan_DisableRestorePoint* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + +**ADMX_WindowsDefender/Scan_DisableScanningMappedNetworkDrivesForFullScan** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure scanning mapped network drives. + +If you enable this setting, mapped network drives will be scanned. + +If you disable or do not configure this setting, mapped network drives will not be scanned. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Run full scan on mapped network drives* +- GP name: *Scan_DisableScanningMappedNetworkDrivesForFullScan* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_DisableScanningNetworkFiles** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure scanning for network files. It is recommended that you do not enable this setting. + +If you enable this setting, network files will be scanned. + +If you disable or do not configure this setting, network files will not be scanned. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Scan network files* +- GP name: *Scan_DisableScanningNetworkFiles* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_LocalSettingOverrideAvgCPULoadFactor** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of maximum percentage of CPU utilization during scan. This setting can only be set by Group Policy. + +If you enable this setting, the local preference setting will take priority over Group Policy. + +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure local setting override for maximum percentage of CPU utilization* +- GP name: *Scan_LocalSettingOverrideAvgCPULoadFactor* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_LocalSettingOverrideScanParameters** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of the scan type to use during a scheduled scan. This setting can only be set by Group Policy. + +If you enable this setting, the local preference setting will take priority over Group Policy. + +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure local setting override for the scan type to use for a scheduled scan* +- GP name: *Scan_LocalSettingOverrideScanParameters* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleDay** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of scheduled scan day. This setting can only be set by Group Policy. + +If you enable this setting, the local preference setting will take priority over Group Policy. + +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure local setting override for schedule scan day* +- GP name: *Scan_LocalSettingOverrideScheduleDay* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleQuickScantime** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of scheduled quick scan time. This setting can only be set by Group Policy. + +If you enable this setting, the local preference setting will take priority over Group Policy. + +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure local setting override for scheduled quick scan time* +- GP name: *Scan_LocalSettingOverrideScheduleQuickScantime* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleTime** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration of scheduled scan time. This setting can only be set by Group Policy. + +If you enable this setting, the local preference setting will take priority over Group Policy. + +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure local setting override for scheduled scan time* +- GP name: *Scan_LocalSettingOverrideScheduleTime* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_LowCpuPriority** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to enable or disable low CPU priority for scheduled scans. + +If you enable this setting, low CPU priority will be used during scheduled scans. + +If you disable or do not configure this setting, not changes will be made to CPU priority for scheduled scans. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure low CPU priority for scheduled scans* +- GP name: *Scan_LowCpuPriority* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_MissedScheduledScanCountBeforeCatchup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to define the number of consecutive scheduled scans that can be missed after which a catch-up scan will be forced. By default, the value of this setting is 2 consecutive scheduled scans. + +If you enable this setting, a catch-up scan will occur after the specified number consecutive missed scheduled scans. + +If you disable or do not configure this setting, a catch-up scan will occur after the 2 consecutive missed scheduled scans. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Define the number of days after which a catch-up scan is forced* +- GP name: *Scan_MissedScheduledScanCountBeforeCatchup* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_PurgeItemsAfterDelay** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting defines the number of days items should be kept in the scan history folder before being permanently removed. The value represents the number of days to keep items in the folder. If set to zero, items will be kept forever and will not be automatically removed. By default, the value is set to 30 days. + +If you enable this setting, items will be removed from the scan history folder after the number of days specified. + +If you disable or do not configure this setting, items will be kept in the scan history folder for the default number of days. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on removal of items from scan history folder* +- GP name: *Scan_PurgeItemsAfterDelay* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_QuickScanInterval** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify an interval at which to perform a quick scan. The time value is represented as the number of hours between quick scans. Valid values range from 1 (every hour) to 24 (once per day). If set to zero, interval quick scans will not occur. By default, this setting is set to 0. + +If you enable this setting, a quick scan will run at the interval specified. + +If you disable or do not configure this setting, a quick scan will run at a default time. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the interval to run quick scans per day* +- GP name: *Scan_QuickScanInterval* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_ScanOnlyIfIdle** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure scheduled scans to start only when your computer is on but not in use. + +If you enable or do not configure this setting, scheduled scans will only run when the computer is on but not in use. + +If you disable this setting, scheduled scans will run at the scheduled time. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Start the scheduled scan only when computer is on but not in use* +- GP name: *Scan_ScanOnlyIfIdle* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_ScanParameters** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the scan type to use during a scheduled scan. Scan type options are: + +- 1 = Quick Scan (default) +- 2 = Full Scan + +If you enable this setting, the scan type will be set to the specified value. + +If you disable or do not configure this setting, the default scan type will used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the scan type to use for a scheduled scan* +- GP name: *Scan_ScanParameters* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + +**ADMX_WindowsDefender/Scan_ScheduleDay** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the day of the week on which to perform a scheduled scan. The scan can also be configured to run every day or to never run at all. + +This setting can be configured with the following ordinal number values: + +- (0x0) Every Day +- (0x1) Sunday +- (0x2) Monday +- (0x3) Tuesday +- (0x4) Wednesday +- (0x5) Thursday +- (0x6) Friday +- (0x7) Saturday +- (0x8) Never (default) + +If you enable this setting, a scheduled scan will run at the frequency specified. + +If you disable or do not configure this setting, a scheduled scan will run at a default frequency. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the day of the week to run a scheduled scan* +- GP name: *Scan_ScheduleDay* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + +**ADMX_WindowsDefender/Scan_ScheduleQuickScantime** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the time of day at which to perform a daily quick scan. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default, this setting is set to a time value of 2:00 AM. The schedule is based on local time on the computer where the scan is executing. + +If you enable this setting, a daily quick scan will run at the time of day specified. + +If you disable or do not configure this setting, a daily quick scan will run at a default time. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the time for a daily quick scan* +- GP name: *Scan_ScheduleQuickScantime* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Scan_ScheduleTime** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the time of day at which to perform a scheduled scan. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default, this setting is set to a time value of 2:00 AM. The schedule is based on local time on the computer where the scan is executing. + +If you enable this setting, a scheduled scan will run at the time of day specified. + +If you disable or do not configure this setting, a scheduled scan will run at a default time. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the time of day to run a scheduled scan* +- GP name: *Scan_ScheduleTime* +- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/ServiceKeepAlive** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure whether or not the antimalware service remains running when antivirus and antispyware security intelligence is disabled. It is recommended that this setting remain disabled. + +If you enable this setting, the antimalware service will always remain running even if both antivirus and antispyware security intelligence is disabled. + +If you disable or do not configure this setting, the antimalware service will be stopped when both antivirus and antispyware security intelligence is disabled. If the computer is restarted, the service will be started if it is set to Automatic startup. After the service has started, there will be a check to see if antivirus and antispyware security intelligence is enabled. If at least one is enabled, the service will remain running. If both are disabled, the service will be stopped. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow antimalware service to remain running always* +- GP name: *ServiceKeepAlive* +- GP path: *Windows Components\Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_ASSignatureDue** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to define the number of days that must pass before spyware security intelligence is considered out of date. If security intelligence is determined to be out of date, this state may trigger several additional actions, including falling back to an alternative update source or displaying a warning icon in the user interface. By default, this value is set to 14 days. + +If you enable this setting, spyware security intelligence will be considered out of date after the number of days specified have passed without an update. + +If you disable or do not configure this setting, spyware security intelligence will be considered out of date after the default number of days have passed without an update. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Define the number of days before spyware security intelligence is considered out of date* +- GP name: *SignatureUpdate_ASSignatureDue* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_AVSignatureDue** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to define the number of days that must pass before virus security intelligence is considered out of date. If security intelligence is determined to be out of date, this state may trigger several additional actions, including falling back to an alternative update source or displaying a warning icon in the user interface. By default, this value is set to 14 days. + +If you enable this setting, virus security intelligence will be considered out of date after the number of days specified have passed without an update. + +If you disable or do not configure this setting, virus security intelligence will be considered out of date after the default number of days have passed without an update. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Define the number of days before virus security intelligence is considered out of date* +- GP name: *SignatureUpdate_AVSignatureDue* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_DefinitionUpdateFileSharesSources** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure UNC file share sources for downloading security intelligence updates. Sources will be contacted in the order specified. The value of this setting should be entered as a pipe-separated string enumerating the security intelligence update sources. For example: "{\\\unc1 | \\\unc2 }". The list is empty by default. + +If you enable this setting, the specified sources will be contacted for security intelligence updates. Once security intelligence updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted. + +If you disable or do not configure this setting, the list will remain empty by default and no sources will be contacted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Define file shares for downloading security intelligence updates* +- GP name: *SignatureUpdate_DefinitionUpdateFileSharesSources* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_DisableScanOnUpdate** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the automatic scan which starts after a security intelligence update has occurred. + +If you enable or do not configure this setting, a scan will start following a security intelligence update. + +If you disable this setting, a scan will not start following a security intelligence update. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on scan after security intelligence update* +- GP name: *SignatureUpdate_DisableScanOnUpdate* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_DisableScheduledSignatureUpdateonBattery** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure security intelligence updates when the computer is running on battery power. + +If you enable or do not configure this setting, security intelligence updates will occur as usual regardless of power state. + +If you disable this setting, security intelligence updates will be turned off while the computer is running on battery power. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow security intelligence updates when running on battery power* +- GP name: *SignatureUpdate_DisableScheduledSignatureUpdateonBattery* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_DisableUpdateOnStartupWithoutEngine** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure security intelligence updates on startup when there is no antimalware engine present. + +If you enable or do not configure this setting, security intelligence updates will be initiated on startup when there is no antimalware engine present. + +If you disable this setting, security intelligence updates will not be initiated on startup when there is no antimalware engine present. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Initiate security intelligence update on startup* +- GP name: *SignatureUpdate_DisableUpdateOnStartupWithoutEngine* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_FallbackOrder** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to define the order in which different security intelligence update sources should be contacted. The value of this setting should be entered as a pipe-separated string enumerating the security intelligence update sources in order. Possible values are: “InternalDefinitionUpdateServer”, “MicrosoftUpdateServer”, “MMPC”, and “FileShares”. + +For example: { InternalDefinitionUpdateServer | MicrosoftUpdateServer | MMPC } + +If you enable this setting, security intelligence update sources will be contacted in the order specified. Once security intelligence updates have been successfully downloaded from one specified source, the remaining sources in the list will not be contacted. + +If you disable or do not configure this setting, security intelligence update sources will be contacted in a default order. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Define the order of sources for downloading security intelligence updates* +- GP name: *SignatureUpdate_FallbackOrder* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_ForceUpdateFromMU** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to enable download of security intelligence updates from Microsoft Update even if the Automatic Updates default server is configured to another download source such as Windows Update. + +If you enable this setting, security intelligence updates will be downloaded from Microsoft Update. + +If you disable or do not configure this setting, security intelligence updates will be downloaded from the configured download source. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow security intelligence updates from Microsoft Update* +- GP name: *SignatureUpdate_ForceUpdateFromMU* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_RealtimeSignatureDelivery** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to enable real-time security intelligence updates in response to reports sent to Microsoft MAPS. If the service reports a file as an unknown and Microsoft MAPS finds that the latest security intelligence update has security intelligence for a threat involving that file, the service will receive all of the latest security intelligence for that threat immediately. You must have configured your computer to join Microsoft MAPS for this functionality to work. + +If you enable or do not configure this setting, real-time security intelligence updates will be enabled. + +If you disable this setting, real-time security intelligence updates will disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow real-time security intelligence updates based on reports to Microsoft MAPS* +- GP name: *SignatureUpdate_RealtimeSignatureDelivery* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_ScheduleDay** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the day of the week on which to check for security intelligence updates. The check can also be configured to run every day or to never run at all. + +This setting can be configured with the following ordinal number values: + +- (0x0) Every Day (default) +- (0x1) Sunday +- (0x2) Monday +- (0x3) Tuesday +- (0x4) Wednesday +- (0x5) Thursday +- (0x6) Friday +- (0x7) Saturday +- (0x8) Never + +If you enable this setting, the check for security intelligence updates will occur at the frequency specified. + +If you disable or do not configure this setting, the check for security intelligence updates will occur at a default frequency. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the day of the week to check for security intelligence updates* +- GP name: *SignatureUpdate_ScheduleDay* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_ScheduleTime** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the time of day at which to check for security intelligence updates. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default this setting is configured to check for security intelligence updates 15 minutes before the scheduled scan time. The schedule is based on local time on the computer where the check is occurring. + +If you enable this setting, the check for security intelligence updates will occur at the time of day specified. + +If you disable or do not configure this setting, the check for security intelligence updates will occur at the default time. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the time to check for security intelligence updates* +- GP name: *SignatureUpdate_ScheduleTime* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_SharedSignaturesLocation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to define the security intelligence location for VDI-configured computers. + +If you disable or do not configure this setting, security intelligence will be referred from the default local source. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Define security intelligence location for VDI clients.* +- GP name: *SignatureUpdate_SharedSignaturesLocation* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + +**ADMX_WindowsDefender/SignatureUpdate_SignatureDisableNotification** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the antimalware service to receive notifications to disable individual security intelligence in response to reports it sends to Microsoft MAPS. Microsoft MAPS uses these notifications to disable security intelligence that are causing false positive reports. You must have configured your computer to join Microsoft MAPS for this functionality to work. + +If you enable this setting or do not configure, the antimalware service will receive notifications to disable security intelligence. + +If you disable this setting, the antimalware service will not receive notifications to disable security intelligence. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow notifications to disable security intelligence based reports to Microsoft MAPS* +- GP name: *SignatureUpdate_SignatureDisableNotification* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateCatchupInterval** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to define the number of days after which a catch-up security intelligence update will be required. By default, the value of this setting is 1 day. + +If you enable this setting, a catch-up security intelligence update will occur after the specified number of days. + +If you disable or do not configure this setting, a catch-up security intelligence update will be required after the default number of days. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Define the number of days after which a catch-up security intelligence update is required* +- GP name: *SignatureUpdate_SignatureUpdateCatchupInterval* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateInterval** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify an interval at which to check for security intelligence updates. The time value is represented as the number of hours between update checks. Valid values range from 1 (every hour) to 24 (once per day). + +If you enable this setting, checks for security intelligence updates will occur at the interval specified. + +If you disable or do not configure this setting, checks for security intelligence updates will occur at the default interval. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the interval to check for security intelligence updates* +- GP name: *SignatureUpdate_SignatureUpdateInterval* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SignatureUpdate_UpdateOnStartup** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage whether a check for new virus and spyware security intelligence will occur immediately after service startup. + +If you enable this setting, a check for new security intelligence will occur after service startup. + +If you disable this setting or do not configure this setting, a check for new security intelligence will not occur after service startup. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Check for the latest virus and spyware security intelligence on startup* +- GP name: *SignatureUpdate_UpdateOnStartup* +- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/SpynetReporting** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to join Microsoft MAPS. Microsoft MAPS is the online community that helps you choose how to respond to potential threats. The community also helps stop the spread of new malicious software infections. + +You can choose to send basic or additional information about detected software. Additional information helps Microsoft create new security intelligence and help it to protect your computer. This information can include things like location of detected items on your computer if harmful software was removed. The information will be automatically collected and sent. In some instances, personal information might unintentionally be sent to Microsoft. However, Microsoft will not use this information to identify you or contact you. + +Possible options are: + +- (0x0) Disabled (default) +- (0x1) Basic membership +- (0x2) Advanced membership + +Basic membership will send basic information to Microsoft about software that has been detected, including where the software came from, the actions that you apply or that are applied automatically, and whether the actions were successful. + +Advanced membership, in addition to basic information, will send more information to Microsoft about malicious software, spyware, and potentially unwanted software, including the location of the software, file names, how the software operates, and how it has impacted your computer. + +If you enable this setting, you will join Microsoft MAPS with the membership specified. + +If you disable or do not configure this setting, you will not join Microsoft MAPS. + +In Windows 10, Basic membership is no longer available, so setting the value to 1 or 2 enrolls the device into Advanced membership. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Join Microsoft MAPS* +- GP name: *SpynetReporting* +- GP path: *Windows Components\Microsoft Defender Antivirus\MAPS* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Spynet_LocalSettingOverrideSpynetReporting** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures a local override for the configuration to join Microsoft MAPS. This setting can only be set by Group Policy. + +If you enable this setting, the local preference setting will take priority over Group Policy. + +If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure local setting override for reporting to Microsoft MAPS* +- GP name: *Spynet_LocalSettingOverrideSpynetReporting* +- GP path: *Windows Components\Microsoft Defender Antivirus\MAPS* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + +**ADMX_WindowsDefender/SubmitSamplesConsent** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures behaviour of samples submission when opt-in for MAPS telemetry is set. + +Possible options are: + +- (0x0) Always prompt +- (0x1) Send safe samples automatically +- (0x2) Never send +- (0x3) Send all samples automatically + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Send file samples when further analysis is required* +- GP name: *SubmitSamplesConsent* +- GP path: *Windows Components\Microsoft Defender Antivirus\MAPS* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Threats_ThreatIdDefaultAction** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting customize which remediation action will be taken for each listed Threat ID when it is detected during a scan. Threats should be added under the Options for this setting. Each entry must be listed as a name value pair. The name defines a valid Threat ID, while the value contains the action ID for the remediation action that should be taken. + +Valid remediation action values are: + +- 2 = Quarantine +- 3 = Remove +- 6 = Ignore + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify threats upon which default action should not be taken when detected* +- GP name: *Threats_ThreatIdDefaultAction* +- GP path: *Windows Components\Microsoft Defender Antivirus\Threats* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/Threats_ThreatSeverityDefaultAction** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to customize which automatic remediation action will be taken for each threat alert level.Threat alert levels should be added under the Options for this setting. Each entry must be listed as a name value pair. The name defines a threat alert level. The value contains the action ID for the remediation action that should be taken. + +Valid threat alert levels are: + +- 1 = Low +- 2 = Medium +- 4 = High +- 5 = Severe + +Valid remediation action values are: + +- 2 = Quarantine +- 3 = Remove +- 6 = Ignore + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify threat alert levels at which default action should not be taken when detected* +- GP name: *Threats_ThreatSeverityDefaultAction* +- GP path: *Windows Components\Microsoft Defender Antivirus\Threats* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/UX_Configuration_CustomDefaultActionToastString** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure whether or not to display additional text to clients when they need to perform an action. The text displayed is a custom administrator-defined string. For example, the phone number to call the company help desk. The client interface will only display a maximum of 1024 characters. Longer strings will be truncated before display. + +If you enable this setting, the additional text specified will be displayed. + +If you disable or do not configure this setting, there will be no additional text displayed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Display additional text to clients when they need to perform an action* +- GP name: *UX_Configuration_CustomDefaultActionToastString* +- GP path: *Windows Components\Microsoft Defender Antivirus\Client Interface* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/UX_Configuration_Notification_Suppress** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Use this policy setting to specify if you want Microsoft Defender Antivirus notifications to display on clients. + +If you disable or do not configure this setting, Microsoft Defender Antivirus notifications will display on clients. + +If you enable this setting, Microsoft Defender Antivirus notifications will not display on clients. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Suppress all notifications* +- GP name: *UX_Configuration_Notification_Suppress* +- GP path: *Windows Components\Microsoft Defender Antivirus\Client Interface* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/UX_Configuration_SuppressRebootNotification** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows user to supress reboot notifications in UI only mode (for cases where UI can't be in lockdown mode). + +If you enable this setting AM UI won't show reboot notifications. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Suppresses reboot notifications* +- GP name: *UX_Configuration_SuppressRebootNotification* +- GP path: *Windows Components\Microsoft Defender Antivirus\Client Interface* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + + +**ADMX_WindowsDefender/UX_Configuration_UILockdown** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure whether or not to display AM UI to the users. + +If you enable this setting AM UI won't be available to users. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enable headless UI mode* +- GP name: *UX_Configuration_UILockdown* +- GP path: *Windows Components\Microsoft Defender Antivirus\Client Interface* +- GP ADMX file name: *WindowsDefender.admx* + + + +
    + Footnotes: - 1 - Available in Windows 10, version 1607. From 49526d679d9e4e2949fedbd95943bd660c23fe6d Mon Sep 17 00:00:00 2001 From: hosebei <35492544+hosebei@users.noreply.github.com> Date: Thu, 19 Nov 2020 07:56:38 +0100 Subject: [PATCH 082/958] Adjusted Link The link used before was not working. --- windows/deployment/windows-10-subscription-activation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-10-subscription-activation.md b/windows/deployment/windows-10-subscription-activation.md index fb1755d660..84fa27310d 100644 --- a/windows/deployment/windows-10-subscription-activation.md +++ b/windows/deployment/windows-10-subscription-activation.md @@ -91,7 +91,7 @@ For Microsoft customers with Enterprise Agreements (EA) or Microsoft Products & For Microsoft customers that do not have EA or MPSA, you can obtain Windows 10 Enterprise E3/E5 or A3/A5 through a cloud solution provider (CSP). Identity management and device requirements are the same when you use CSP to manage licenses, with the exception that Windows 10 Enterprise E3 is also available through CSP to devices running Windows 10, version 1607. For more information about obtaining Windows 10 Enterprise E3 through your CSP, see [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md). -If devices are running Windows 7 or Windows 8.1, see [New Windows 10 upgrade benefits for Windows Cloud Subscriptions in CSP](https://blogs.windows.com/business/2017/01/19/new-windows-10-upgrade-benefits-windows-cloud-subscriptions-csp/) +If devices are running Windows 7 or Windows 8.1, see [New Windows 10 upgrade benefits for Windows Cloud Subscriptions in CSP](https://www.microsoft.com/en-us/microsoft-365/blog/2017/01/19/new-windows-10-upgrade-benefits-windows-cloud-subscriptions-csp/) #### Multi-factor authentication From 7415a8e65206ec48f05eaf9099b7ee31b64a255b Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 19 Nov 2020 15:28:45 -0800 Subject: [PATCH 083/958] Added new policies --- windows/client-management/mdm/TOC.md | 2 + .../mdm/policies-in-policy-csp-admx-backed.md | 19 + .../policy-configuration-service-provider.md | 67 ++ .../mdm/policy-csp-admx-devicenstallation.md | 842 ++++++++++++++++++ .../mdm/policy-csp-admx-devicesetup.md | 635 +++++++++++++ 5 files changed, 1565 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-devicenstallation.md create mode 100644 windows/client-management/mdm/policy-csp-admx-devicesetup.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 98251b87fe..0e6ef2c11d 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -181,6 +181,8 @@ #### [ADMX_Cpls](policy-csp-admx-cpls.md) #### [ADMX_CredSsp](policy-csp-admx-credssp.md) #### [ADMX_CtrlAltDel](policy-csp-admx-ctrlaltdel.md) +#### [ADMX_DeviceInstallation](policy-csp-admx-devicenstallation.md) +#### [ADMX_DeviceSetup](policy-csp-admx-devicesetup.md) #### [ADMX_DigitalLocker](policy-csp-admx-digitallocker.md) #### [ADMX_DnsClient](policy-csp-admx-dnsclient.md) #### [ADMX_DWM](policy-csp-admx-dwm.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 365e5a94e6..fe0e5fc17f 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -76,6 +76,25 @@ ms.date: 10/08/2020 - [ADMX_CtrlAltDel/DisableLockComputer](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablelockcomputer) - [ADMX_CtrlAltDel/DisableTaskMgr](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disabletaskmgr) - [ADMX_CtrlAltDel/NoLogoff](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-nologoff) +- [ADMX_DeviceInstallation/DeviceInstall_AllSigningEqual](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-allsigningequal) +- [ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-allowadmininstall) +- [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-detailtext) +- [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-simpletext) +- [ADMX_DeviceInstallation/DeviceInstall_InstallTimeout](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-installtimeout) +- [ADMX_DeviceInstallation/DeviceInstall_Policy_RebootTime](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-policy-reboottime) +- [ADMX_DeviceInstallation/DeviceInstall_Removable_Deny](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-removable-deny) +- [ADMX_DeviceInstallation/DeviceInstall_SystemRestore](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-systemrestore) +- [ADMX_DeviceInstallation/DeviceManagement_RPCInterface_Allow](./policy-csp-admx-devicenstallation.md#admx-devicemanagement-rpcinterface-allow) +- [ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-classes-allowuser) +- [ADMX_DeviceInstallation/DriverSigning](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-driversigning) +- [ADMX_DeviceSetup/DeviceInstall_BalloonTips](./policy-csp-admx-devicesetup.md#admx-devicesetup-deviceinstall-balloontips) +- [ADMX_DeviceSetup/DeviceInstall_GenericDriverSendToWER](./policy-csp-admx-devicesetup.md#admx-devicesetup-deviceinstall-genericdriversendtower) +- [ADMX_DeviceSetup/DeviceInstall_RequestAdditionalSoftwareSendToWER](./policy-csp-admx-devicesetup.md#admx-devicesetup-deviceinstall-requestadditionalsoftwaresendtower) +- [ADMX_DeviceSetup/DriverSearchPlaces](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces) +- [ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_1](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces-dontpromptforwindowsupdate-1) +- [ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_2](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces-dontpromptforwindowsupdate-2) +- [ADMX_DeviceSetup/DriverSearchPlaces_SearchOrderConfiguration](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces-searchorderconfiguration) +- [ADMX_DeviceSetup/DriverSearchPlaces_SearchServerConfiguration](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces-searchserverconfiguration) - [ADMX_DigitalLocker/Digitalx_DiableApplication_TitleText_1](./policy-csp-admx-digitallocker.md#admx-digitallocker-digitalx-diableapplication-titletext-1) - [ADMX_DigitalLocker/Digitalx_DiableApplication_TitleText_2](./policy-csp-admx-digitallocker.md#admx-digitallocker-digitalx-diableapplication-titletext-2) - [ADMX_DnsClient/DNS_AllowFQDNNetBiosQueries](./policy-csp-admx-dnsclient.md#admx-dnsclient-dns-allowfqdnnetbiosqueries) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 6431d07b97..b1a2a67b23 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -377,6 +377,73 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_DeviceInstallation policies + +
    +
    + ADMX_DeviceInstallation/DeviceInstall_AllSigningEqual +
    +
    + ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall +
    +
    + ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText +
    +
    + ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText +
    +
    + ADMX_DeviceInstallation/DeviceInstall_InstallTimeout +
    +
    + ADMX_DeviceInstallation/DeviceInstall_Policy_RebootTime +
    +
    + ADMX_DeviceInstallation/DeviceInstall_Removable_Deny +
    +
    + ADMX_DeviceInstallation/DeviceInstall_SystemRestore +
    +
    + ADMX_DeviceInstallation/DeviceManagement_RPCInterface_Allow +
    +
    + ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser +
    +
    + ADMX_DeviceInstallation/DriverSigning +
    +
    + +### ADMX_DeviceSetup policies + +
    +
    + ADMX_DeviceSetup/DeviceInstall_BalloonTips +
    +
    + ADMX_DeviceSetup/DeviceInstall_GenericDriverSendToWER +
    +
    + ADMX_DeviceSetup/DeviceInstall_RequestAdditionalSoftwareSendToWER +
    +
    + ADMX_DeviceSetup/DriverSearchPlaces +
    +
    + ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_1 +
    +
    + ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_2 +
    +
    + ADMX_DeviceSetup/DriverSearchPlaces_SearchOrderConfiguration +
    +
    + ADMX_DeviceSetup/DriverSearchPlaces_SearchServerConfiguration +
    +
    + ### ADMX_DigitalLocker policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-devicenstallation.md b/windows/client-management/mdm/policy-csp-admx-devicenstallation.md new file mode 100644 index 0000000000..c52d3a4656 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-devicenstallation.md @@ -0,0 +1,842 @@ +--- +title: Policy CSP - ADMX_DeviceInstallation +description: Policy CSP - ADMX_DeviceInstallation +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/19/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_DeviceInstallation +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_DeviceInstallation policies + +
    +
    + ADMX_DeviceInstallation/DeviceInstall_AllSigningEqual +
    +
    + ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall +
    +
    + ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText +
    +
    + ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText +
    +
    + ADMX_DeviceInstallation/DeviceInstall_InstallTimeout +
    +
    + ADMX_DeviceInstallation/DeviceInstall_Policy_RebootTime +
    +
    + ADMX_DeviceInstallation/DeviceInstall_Removable_Deny +
    +
    + ADMX_DeviceInstallation/DeviceInstall_SystemRestore +
    +
    + ADMX_DeviceInstallation/DeviceManagement_RPCInterface_Allow +
    +
    + ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser +
    +
    + ADMX_DeviceInstallation/DriverSigning +
    +
    + + +
    + + +**ADMX_DeviceInstallation/DeviceInstall_AllSigningEqual** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to determine how drivers signed by a Microsoft Windows Publisher certificate are ranked with drivers signed by other valid Authenticode signatures during the driver selection and installation process. Regardless of this policy setting, a signed driver is still preferred over a driver that is not signed at all. + +If you enable or do not configure this policy setting, drivers that are signed by a Microsoft Windows Publisher certificate and drivers that are signed by other Authenticode certificates are prioritized equally during the driver selection process. Selection is based on other criteria, such as version number or when the driver was created. + +If you disable this policy setting, drivers that are signed by a Microsoft Windows Publisher certificate are selected for installation over drivers that are signed by other Authenticode certificates. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prioritize all digitally signed drivers equally during the driver ranking and selection process* +- GP name: *DeviceInstall_AllSigningEqual* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + + +**ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to determine whether members of the Administrators group can install and update the drivers for any device, regardless of other policy settings. + +If you enable this policy setting, members of the Administrators group can use the Add Hardware wizard or the Update Driver wizard to install and update the drivers for any device. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server. + +If you disable or do not configure this policy setting, members of the Administrators group are subject to all policy settings that restrict device installation. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow administrators to override Device Installation Restriction policies* +- GP name: *DeviceInstall_AllowAdminInstall* +- GP path: *System\Device Installation\Device Installation Restrictions* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + + +**ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to display a custom message to users in a notification when a device installation is attempted and a policy setting prevents the installation. + +If you enable this policy setting, Windows displays the text you type in the Detail Text box when a policy setting prevents device installation. + +If you disable or do not configure this policy setting, Windows displays a default message when a policy setting prevents device installation. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Display a custom message when installation is prevented by a policy setting* +- GP name: *DeviceInstall_DeniedPolicy_DetailText* +- GP path: *System\Device Installation\Device Installation Restrictions* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + + +**ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to display a custom message title in a notification when a device installation is attempted and a policy setting prevents the installation. + +If you enable this policy setting, Windows displays the text you type in the Main Text box as the title text of a notification when a policy setting prevents device installation. + +If you disable or do not configure this policy setting, Windows displays a default title in a notification when a policy setting prevents device installation. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Display a custom message title when device installation is prevented by a policy setting* +- GP name: *DeviceInstall_DeniedPolicy_SimpleText* +- GP path: *System\Device Installation\Device Installation Restrictions* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + + +**ADMX_DeviceInstallation/DeviceInstall_InstallTimeout** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the number of seconds Windows waits for a device installation task to complete. + +If you enable this policy setting, Windows waits for the number of seconds you specify before terminating the installation. + +If you disable or do not configure this policy setting, Windows waits 240 seconds for a device installation task to complete before terminating the installation. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure device installation time-out* +- GP name: *DeviceInstall_InstallTimeout* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + + +**ADMX_DeviceInstallation/DeviceInstall_Policy_RebootTime** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting establishes the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in device installation restriction policies. + +If you enable this policy setting, set the amount of seconds you want the system to wait until a reboot. + +If you disable or do not configure this policy setting, the system does not force a reboot. + +Note: If no reboot is forced, the device installation restriction right will not take effect until the system is restarted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Time (in seconds) to force reboot when required for policy changes to take effect* +- GP name: *DeviceInstall_Policy_RebootTime* +- GP path: *System\Device Installation\Device Installation Restrictions* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + + +**ADMX_DeviceInstallation/DeviceInstall_Removable_Deny** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent Windows from installing removable devices. A device is considered removable when the driver for the device to which it is connected indicates that the device is removable. For example, a Universal Serial Bus (USB) device is reported to be removable by the drivers for the USB hub to which the device is connected. This policy setting takes precedence over any other policy setting that allows Windows to install a device. + +If you enable this policy setting, Windows is prevented from installing removable devices and existing removable devices cannot have their drivers updated. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of removable devices from a remote desktop client to the remote desktop server. + +If you disable or do not configure this policy setting, Windows can install and update device drivers for removable devices as allowed or prevented by other policy settings. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent installation of removable devices* +- GP name: *DeviceInstall_Removable_Deny* +- GP path: *System\Device Installation\Device Installation Restrictions* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + + +**ADMX_DeviceInstallation/DeviceInstall_SystemRestore** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to prevent Windows from creating a system restore point during device activity that would normally prompt Windows to create a system restore point. Windows normally creates restore points for certain driver activity, such as the installation of an unsigned driver. A system restore point enables you to more easily restore your system to its state before the activity. + +If you enable this policy setting, Windows does not create a system restore point when one would normally be created. + +If you disable or do not configure this policy setting, Windows creates a system restore point as it normally would. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point* +- GP name: *DeviceInstall_SystemRestore* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + + +**ADMX_DeviceInstallation/DeviceManagement_RPCInterface_Allow** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to allow or deny remote access to the Plug and Play interface. + +If you enable this policy setting, remote connections to the Plug and Play interface are allowed. + +If you disable or do not configure this policy setting, remote connections to the Plug and Play interface are not allowed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow remote access to the Plug and Play interface* +- GP name: *DeviceManagement_RPCInterface_Allow* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + + +**ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies a list of device setup class GUIDs describing device drivers that non-administrator members of the built-in Users group may install on the system. + +If you enable this policy setting, members of the Users group may install new drivers for the specified device setup classes. The drivers must be signed according to Windows Driver Signing Policy, or be signed by publishers already in the TrustedPublisher store. + +If you disable or do not configure this policy setting, only members of the Administrators group are allowed to install new device drivers on the system. + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow non-administrators to install drivers for these device setup classes* +- GP name: *DriverInstall_Classes_AllowUser* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + + +**ADMX_DeviceInstallation/DriverSigning** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines how the system responds when a user tries to install device driver files that are not digitally signed. + +This setting establishes the least secure response permitted on the systems of users in the group. Users can use System in Control Panel to select a more secure setting, but when this setting is enabled, the system does not implement any setting less secure than the one the setting established. + +When you enable this setting, use the drop-down box to specify the desired response. + +- "Ignore" directs the system to proceed with the installation even if it includes unsigned files. +- "Warn" notifies the user that files are not digitally signed and lets the user decide whether to stop or to proceed with the installation and whether to permit unsigned files to be installed. "Warn" is the default. +- "Block" directs the system to refuse to install unsigned files. As a result, the installation stops, and none of the files in the driver package are installed. + +To change driver file security without specifying a setting, use System in Control Panel. Right-click My Computer, click Properties, click the Hardware tab, and then click the Driver Signing button. + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Code signing for device drivers* +- GP name: *DriverSigning* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceInstallation.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file diff --git a/windows/client-management/mdm/policy-csp-admx-devicesetup.md b/windows/client-management/mdm/policy-csp-admx-devicesetup.md new file mode 100644 index 0000000000..d82cda8513 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-devicesetup.md @@ -0,0 +1,635 @@ +--- +title: Policy CSP - ADMX_DeviceSetup +description: Policy CSP - ADMX_DeviceSetup +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/19/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_DeviceSetup +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_DeviceSetup policies + +
    +
    + ADMX_DeviceSetup/DeviceInstall_BalloonTips +
    +
    + ADMX_DeviceSetup/DeviceInstall_GenericDriverSendToWER +
    +
    + ADMX_DeviceSetup/DeviceInstall_RequestAdditionalSoftwareSendToWER +
    +
    + ADMX_DeviceSetup/DriverSearchPlaces +
    +
    + ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_1 +
    +
    + ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_2 +
    +
    + ADMX_DeviceSetup/DriverSearchPlaces_SearchOrderConfiguration +
    +
    + ADMX_DeviceSetup/DriverSearchPlaces_SearchServerConfiguration +
    +
    + + +
    + + +**ADMX_DeviceSetup/DeviceInstall_BalloonTips** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn off "Found New Hardware" balloons during device installation. + +If you enable this policy setting, "Found New Hardware" balloons do not appear while a device is being installed. + +If you disable or do not configure this policy setting, "Found New Hardware" balloons appear while a device is being installed, unless the driver for the device suppresses the balloons. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off "Found New Hardware" balloons during device installation* +- GP name: *DeviceInstall_BalloonTips* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceSetup.admx* + + + +
    + + +**ADMX_DeviceSetup/DeviceInstall_GenericDriverSendToWER** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Windows has a feature that sends "generic-driver-installed" reports through the Windows Error Reporting infrastructure. This policy allows you to disable the feature. + +If you enable this policy setting, an error report is not sent when a generic driver is installed. + +If you disable or do not configure this policy setting, an error report is sent when a generic driver is installed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not send a Windows error report when a generic driver is installed on a device* +- GP name: *DeviceInstall_GenericDriverSendToWER* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceSetup.admx* + + + +
    + + +**ADMX_DeviceSetup/DeviceInstall_RequestAdditionalSoftwareSendToWER** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Windows has a feature that allows a device driver to request additional software through the Windows Error Reporting infrastructure. This policy allows you to disable the feature. + +If you enable this policy setting, Windows will not send an error report to request additional software even if this is specified by the device driver. + +If you disable or do not configure this policy setting, Windows sends an error report when a device driver that requests additional software is installed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent Windows from sending an error report when a device driver requests additional software during installation* +- GP name: *DeviceInstall_RequestAdditionalSoftwareSendToWER* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceSetup.admx* + + + +
    + + +**ADMX_DeviceSetup/DriverSearchPlaces** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This setting configures the location that Windows searches for drivers when a new piece of hardware is found. + +By default, Windows searches the following places for drivers: local installation, floppy drives, CD-ROM drives, Windows Update. + +Using this setting, you may remove the floppy and CD-ROM drives from the search algorithm. + +If you enable this setting, you can remove the locations by selecting the associated check box beside the location name. + +If you disable or do not configure this setting, Windows searches the installation location, floppy drives, and CD-ROM drives. + +> [!NOTE] +> To prevent searching Windows Update for drivers also see "Turn off Windows Update device driver searching" in Administrative Templates/System/Internet Communication Management/Internet Communication settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure driver search locations* +- GP name: *DriverSearchPlaces* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceSetup.admx* + + + +
    + + +**ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet. + +> [!NOTE] +> This setting only has effect if "Turn off Windows Update device driver searching" in "Administrative Templates/System/Internet Communication Management/Internet Communication settings" is disabled or not configured. + +If you enable this setting, administrators will not be prompted to search Windows Update. + +If you disable or do not configure this setting, and "Turn off Windows Update device driver searching" is disabled or not configured, the administrator will be prompted for consent before going to Windows Update to search for device drivers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows Update device driver search prompt* +- GP name: *DriverSearchPlaces_DontPromptForWindowsUpdate_1* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceSetup.admx* + + + +
    + + +**ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet. + +> [!NOTE] +> This setting only has effect if "Turn off Windows Update device driver searching" in "Administrative Templates/System/Internet Communication Management/Internet Communication settings" is disabled or not configured. + +If you enable this setting, administrators will not be prompted to search Windows Update. + +If you disable or do not configure this setting, and "Turn off Windows Update device driver searching" is disabled or not configured, the administrator will be prompted for consent before going to Windows Update to search for device drivers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows Update device driver search prompt* +- GP name: *DriverSearchPlaces_DontPromptForWindowsUpdate_2* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceSetup.admx* + + + +
    + + +**ADMX_DeviceSetup/DriverSearchPlaces_SearchOrderConfiguration** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the order in which Windows searches source locations for device drivers. + +If you enable this policy setting, you can select whether Windows searches for drivers on Windows Update unconditionally, only if necessary, or not at all. + +Note that searching always implies that Windows will attempt to search Windows Update exactly one time. With this setting, Windows will not continually search for updates. This setting is used to ensure that the best software will be found for the device, even if the network is temporarily available. If the setting for searching only if needed is specified, then Windows will search for a driver only if a driver is not locally available on the system. + +If you disable or do not configure this policy setting, members of the Administrators group can determine the priority order in which Windows searches source locations for device drivers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify search order for device driver source locations* +- GP name: *DriverSearchPlaces_SearchOrderConfiguration* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceSetup.admx* + + + +
    + + +**ADMX_DeviceSetup/DriverSearchPlaces_SearchServerConfiguration** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the search server that Windows uses to find updates for device drivers. + +If you enable this policy setting, you can select whether Windows searches Windows Update (WU), searches a Managed Server, or a combination of both. + +Note that if both are specified, then Windows will first search the Managed Server, such as a Windows Server Update Services (WSUS) server. Only if no update is found will Windows then also search Windows Update. + +If you disable or do not configure this policy setting, members of the Administrators group can determine the server used in the search for device drivers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the search server for device driver updates* +- GP name: *DriverSearchPlaces_SearchServerConfiguration* +- GP path: *System\Device Installation* +- GP ADMX file name: *DeviceSetup.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 0c6e72110a34a29ba0d126976ba964d3fa058a6e Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 19 Nov 2020 16:21:06 -0800 Subject: [PATCH 084/958] Added EAIME policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 12 + .../policy-configuration-service-provider.md | 41 + .../mdm/policy-csp-admx-eaime.md | 971 ++++++++++++++++++ 4 files changed, 1025 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-eaime.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 0e6ef2c11d..90fe63842c 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -186,6 +186,7 @@ #### [ADMX_DigitalLocker](policy-csp-admx-digitallocker.md) #### [ADMX_DnsClient](policy-csp-admx-dnsclient.md) #### [ADMX_DWM](policy-csp-admx-dwm.md) +#### [ADMX_EAIME](policy-csp-admx-eaime.md) #### [ADMX_EncryptFilesonMove](policy-csp-admx-encryptfilesonmove.md) #### [ADMX_EventForwarding](policy-csp-admx-eventforwarding.md) #### [ADMX_FileServerVSSProvider](policy-csp-admx-fileservervssprovider.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index fe0e5fc17f..3822a4815a 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -125,6 +125,18 @@ ms.date: 10/08/2020 - [ADMX_DWM/DwmDisallowAnimations_2](./policy-csp-admx-dwm.md#admx-dwm-dwmdisallowanimations-2) - [ADMX_DWM/DwmDisallowColorizationColorChanges_1](./policy-csp-admx-dwm.md#admx-dwm-dwmdisallowcolorizationcolorchanges-1) - [ADMX_DWM/DwmDisallowColorizationColorChanges_2](./policy-csp-admx-dwm.md#admx-dwm-dwmdisallowcolorizationcolorchanges-2) +- [ADMX_EAIME/L_DoNotIncludeNonPublishingStandardGlyphInTheCandidateList](./policy-csp-admx-eaime.md#admx-eaime-l-donotincludenonpublishingstandardglyphinthecandidatelist) +- [ADMX_EAIME/L_RestrictCharacterCodeRangeOfConversion](./policy-csp-admx-eaime.md#admx-eaime-l-restrictcharactercoderangeofconversion) +- [ADMX_EAIME/L_TurnOffCustomDictionary](./policy-csp-admx-eaime.md#admx-eaime-l-turnoffcustomdictionary) +- [ADMX_EAIME/L_TurnOffHistorybasedPredictiveInput](./policy-csp-admx-eaime.md#admx-eaime-l-turnoffhistorybasedpredictiveinput) +- [ADMX_EAIME/L_TurnOffInternetSearchIntegration](./policy-csp-admx-eaime.md#admx-eaime-l-turnoffinternetsearchintegration) +- [ADMX_EAIME/L_TurnOffOpenExtendedDictionary](./policy-csp-admx-eaime.md#admx-eaime-l-turnoffopenextendeddictionary) +- [ADMX_EAIME/L_TurnOffSavingAutoTuningDataToFile](./policy-csp-admx-eaime.md#admx-eaime-l-turnoffsavingautotuningdatatofile) +- [ADMX_EAIME/L_TurnOnCloudCandidate](./policy-csp-admx-eaime.md#admx-eaime-l-turnoncloudcandidate) +- [ADMX_EAIME/L_TurnOnCloudCandidateCHS](./policy-csp-admx-eaime.md#admx-eaime-l-turnoncloudcandidatechs) +- [ADMX_EAIME/L_TurnOnLexiconUpdate](./policy-csp-admx-eaime.md#admx-eaime-l-turnonlexiconupdate) +- [ADMX_EAIME/L_TurnOnLiveStickers](./policy-csp-admx-eaime.md#admx-eaime-l-turnonlivestickers) +- [ADMX_EAIME/L_TurnOnMisconversionLoggingForMisconversionReport](./policy-csp-admx-eaime.md#admx-eaime-l-turnonmisconversionloggingformisconversionreport) - [ADMX_EncryptFilesonMove/NoEncryptOnMove](./policy-csp-admx-encryptfilesonmove.md#admx-encryptfilesonmove-noencryptonmove) - [ADMX_EventForwarding/ForwarderResourceUsage](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-forwarderresourceusage) - [ADMX_EventForwarding/SubscriptionManager](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-subscriptionmanager) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index b1a2a67b23..e068d6a883 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -548,6 +548,47 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_EAIME policies + +
    +
    + ADMX_EAIME/L_DoNotIncludeNonPublishingStandardGlyphInTheCandidateList +
    +
    + ADMX_EAIME/L_RestrictCharacterCodeRangeOfConversion +
    +
    + ADMX_EAIME/L_TurnOffCustomDictionary +
    +
    + ADMX_EAIME/L_TurnOffHistorybasedPredictiveInput +
    +
    + ADMX_EAIME/L_TurnOffInternetSearchIntegration +
    +
    + ADMX_EAIME/L_TurnOffOpenExtendedDictionary +
    +
    + ADMX_EAIME/L_TurnOffSavingAutoTuningDataToFile +
    +
    + ADMX_EAIME/L_TurnOnCloudCandidate +
    +
    + ADMX_EAIME/L_TurnOnCloudCandidateCHS +
    +
    + ADMX_EAIME/L_TurnOnLexiconUpdate +
    +
    + ADMX_EAIME/L_TurnOnLiveStickers +
    +
    + ADMX_EAIME/L_TurnOnMisconversionLoggingForMisconversionReport +
    +
    + ### ADMX_EncryptFilesonMove policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-eaime.md b/windows/client-management/mdm/policy-csp-admx-eaime.md new file mode 100644 index 0000000000..3cd05e398d --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-eaime.md @@ -0,0 +1,971 @@ +--- +title: Policy CSP - ADMX_EAIME +description: Policy CSP - ADMX_EAIME +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/19/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_EAIME +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_EAIME policies + +
    +
    + ADMX_EAIME/L_DoNotIncludeNonPublishingStandardGlyphInTheCandidateList +
    +
    + ADMX_EAIME/L_RestrictCharacterCodeRangeOfConversion +
    +
    + ADMX_EAIME/L_TurnOffCustomDictionary +
    +
    + ADMX_EAIME/L_TurnOffHistorybasedPredictiveInput +
    +
    + ADMX_EAIME/L_TurnOffInternetSearchIntegration +
    +
    + ADMX_EAIME/L_TurnOffOpenExtendedDictionary +
    +
    + ADMX_EAIME/L_TurnOffSavingAutoTuningDataToFile +
    +
    + ADMX_EAIME/L_TurnOnCloudCandidate +
    +
    + ADMX_EAIME/L_TurnOnCloudCandidateCHS +
    +
    + ADMX_EAIME/L_TurnOnLexiconUpdate +
    +
    + ADMX_EAIME/L_TurnOnLiveStickers +
    +
    + ADMX_EAIME/L_TurnOnMisconversionLoggingForMisconversionReport +
    +
    + + +
    + + +**ADMX_EAIME/L_DoNotIncludeNonPublishingStandardGlyphInTheCandidateList** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to include the Non-Publishing Standard Glyph in the candidate list when Publishing Standard Glyph for the word exists. + +If you enable this policy setting, Non-Publishing Standard Glyph is not included in the candidate list when Publishing Standard Glyph for the word exists. + +If you disable or do not configure this policy setting, both Publishing Standard Glyph and Non-Publishing Standard Glyph are included in the candidate list. + +This policy setting applies to Japanese Microsoft IME only. + +> [!NOTE] +> Changes to this setting will not take effect until the user logs off. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not include Non-Publishing Standard Glyph in the candidate list* +- GP name: *L_DoNotIncludeNonPublishingStandardGlyphInTheCandidateList* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_RestrictCharacterCodeRangeOfConversion** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to restrict character code range of conversion by setting character filter. + +If you enable this policy setting, then only the character code ranges specified by this policy setting are used for conversion of IME. You can specify multiple ranges by setting a value combined with a bitwise OR of following values: + +- 0x0001 // JIS208 area +- 0x0002 // NEC special char code +- 0x0004 // NEC selected IBM extended code +- 0x0008 // IBM extended code +- 0x0010 // Half width katakana code +- 0x0100 // EUDC(GAIJI) +- 0x0200 // S-JIS unmapped area +- 0x0400 // Unicode char +- 0x0800 // surrogate char +- 0x1000 // IVS char +- 0xFFFF // no definition. + +If you disable or do not configure this policy setting, no range of characters are filtered by default. + +This policy setting applies to Japanese Microsoft IME only. + +> [!NOTE] +> Changes to this setting will not take effect until the user logs off. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict character code range of conversion* +- GP name: *L_RestrictCharacterCodeRangeOfConversion* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_TurnOffCustomDictionary** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn off the ability to use a custom dictionary. + +If you enable this policy setting, you cannot add, edit, and delete words in the custom dictionary either with GUI tools or APIs. A word registered in the custom dictionary before enabling this policy setting can continue to be used for conversion. + +If you disable or do not configure this policy setting, the custom dictionary can be used by default. + +For Japanese Microsoft IME, [Clear auto-tuning information] works, even if this policy setting is enabled, and it clears self-tuned words from the custom dictionary. + +This policy setting is applied to Japanese Microsoft IME. + +> [!NOTE] +> Changes to this setting will not take effect until the user logs off. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off custom dictionary* +- GP name: *L_TurnOffCustomDictionary* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_TurnOffHistorybasedPredictiveInput** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn off history-based predictive input. + +If you enable this policy setting, history-based predictive input is turned off. + +If you disable or do not configure this policy setting, history-based predictive input is on by default. + +This policy setting applies to Japanese Microsoft IME only. + +> [!NOTE] +> Changes to this setting will not take effect until the user logs off. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off history-based predictive input* +- GP name: *L_TurnOffHistorybasedPredictiveInput* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_TurnOffInternetSearchIntegration** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn off Internet search integration. + +Search integration includes both using Search Provider (Japanese Microsoft IME) and performing bing search from predictive input for Japanese Microsoft IME. + +If you enable this policy setting, you cannot use search integration. + +If you disable or do not configure this policy setting, the search integration function can be used by default. + +This policy setting applies to Japanese Microsoft IME. + +> [!NOTE] +> Changes to this setting will not take effect until the user logs off. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Internet search integration* +- GP name: *L_TurnOffInternetSearchIntegration* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_TurnOffOpenExtendedDictionary** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn off Open Extended Dictionary. + +If you enable this policy setting, Open Extended Dictionary is turned off. You cannot add a new Open Extended Dictionary. + +For Japanese Microsoft IME, an Open Extended Dictionary that is added before enabling this policy setting is not used for conversion. + +If you disable or do not configure this policy setting, Open Extended Dictionary can be added and used by default. + +This policy setting is applied to Japanese Microsoft IME. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Open Extended Dictionary* +- GP name: *L_TurnOffOpenExtendedDictionary* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_TurnOffSavingAutoTuningDataToFile** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn off saving the auto-tuning result to file. + +If you enable this policy setting, the auto-tuning data is not saved to file. + +If you disable or do not configure this policy setting, auto-tuning data is saved to file by default. + +This policy setting applies to Japanese Microsoft IME only. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off saving auto-tuning data to file* +- GP name: *L_TurnOffSavingAutoTuningDataToFile* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_TurnOnCloudCandidate** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the cloud candidates feature, which uses an online service to provide input suggestions that don't exist in a PC's local dictionary. + +If you enable this policy setting, the functionality associated with this feature is turned on, the user's keyboard input is sent to Microsoft to generate the suggestions, and the user won't be able to turn it off. + +If you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on. + +If you don't configure this policy setting, it will be turned off by default, and the user can turn on and turn off the cloud candidates feature. + +This Policy setting applies to Microsoft CHS Pinyin IME and JPN IME. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on cloud candidate* +- GP name: *L_TurnOnCloudCandidate* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_TurnOnCloudCandidateCHS** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the cloud candidates feature, which uses an online service to provide input suggestions that don't exist in a PC's local dictionary. + +If you enable this policy setting, the functionality associated with this feature is turned on, the user's keyboard input is sent to Microsoft to generate the suggestions, and the user won't be able to turn it off. + +If you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on. + +If you don't configure this policy setting, it will be turned off by default, and the user can turn on and turn off the cloud candidates feature. + +This Policy setting applies only to Microsoft CHS Pinyin IME. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on cloud candidate for CHS* +- GP name: *L_TurnOnCloudCandidateCHS* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_TurnOnLexiconUpdate** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the lexicon update feature, which downloads hot and popular words lexicon to local PC. + +If you enable this policy setting, the functionality associated with this feature is turned on, hot and popular words lexicon can be downloaded to local PC, the user is able to turn it on or off in settings. + +If you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on. + +If you don't configure this policy setting, it will be turned on by default, and the user can turn on and turn off the lexicon udpate feature. + +This Policy setting applies only to Microsoft CHS Pinyin IME. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on lexicon update* +- GP name: *L_TurnOnLexiconUpdate* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_TurnOnLiveStickers** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the live sticker feature, which uses an online service to provide stickers online. + +If you enable this policy setting, the functionality associated with this feature is turned on, the user's keyboard input is sent to Microsoft to generate the live stickers, and the user won't be able to turn it off. + +If you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on. + +If you don't configure this policy setting, it will be turned off by default, and the user can turn on and turn off the live sticker feature. + +This Policy setting applies only to Microsoft CHS Pinyin IME. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on Live Sticker* +- GP name: *L_TurnOnLiveStickers* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + + +**ADMX_EAIME/L_TurnOnMisconversionLoggingForMisconversionReport** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn on logging of misconversion for the misconversion report. + +If you enable this policy setting, misconversion logging is turned on. + +If you disable or do not configure this policy setting, misconversion logging is turned off. + +This policy setting applies to Japanese Microsoft IME and Traditional Chinese IME. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on misconversion logging for misconversion report* +- GP name: *L_TurnOnMisconversionLoggingForMisconversionReport* +- GP path: *Windows Components\IME* +- GP ADMX file name: *EAIME.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 473f10c9a902fc4c24cefcd9d31dc0a6e5347d1a Mon Sep 17 00:00:00 2001 From: Chai Wei Jie Date: Fri, 20 Nov 2020 10:50:46 +0800 Subject: [PATCH 085/958] Update prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md Fixed typo. --- ...h-installation-of-windows-10-with-configuration-manager.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md b/windows/deployment/deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md index 4dd8344c5b..116cb87a9e 100644 --- a/windows/deployment/deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md +++ b/windows/deployment/deploy-windows-cm/prepare-for-zero-touch-installation-of-windows-10-with-configuration-manager.md @@ -129,7 +129,7 @@ In order for the Configuration Manager Join Domain Account (CM\_JD) to join mach On **DC01**: -1. Sign in as contoso\administrtor and enter the following at an elevated Windows PowerShell prompt: +1. Sign in as contoso\administrator and enter the following at an elevated Windows PowerShell prompt: ``` Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force @@ -389,4 +389,4 @@ You can create reference images for Configuration Manager in Configuration Manag [Create a task sequence with Configuration Manager and MDT](../deploy-windows-mdt/create-a-task-sequence-with-configuration-manager-and-mdt.md)
    [Deploy Windows 10 using PXE and Configuration Manager](deploy-windows-10-using-pxe-and-configuration-manager.md)
    [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md)
    -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md) \ No newline at end of file +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md) From f67d9d52480b0ab60c5f7d971786f4622c769e45 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Fri, 20 Nov 2020 15:19:42 +0530 Subject: [PATCH 086/958] Update filter-origin-documentation.md --- .../filter-origin-documentation.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index b87dd45928..9f32d988b7 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -19,11 +19,11 @@ ms.topic: troubleshooting Debugging packet drops is a continuous issue to Windows customers. In the past, customers had limited information about packet drops. -Typically, when investigating packet drop events, a customer would use the field `Filter Run-Time ID` from WFP Audits 5157 or 5152. +Typically, when investigating packet drop events, a customer would use the field `Filter Run-Time ID` from Windows Filtering Platform (WFP) Audits 5157 or 5152. ![Event Properties](images/event-properties-5157.png) -The filter ID uniquely identifies the filter that caused the packet drop. The filter ID can be searched in the WFP state dump output to trace back to the FW rule where the filter originated from. +The filter ID uniquely identifies the filter that caused the packet drop. The filter ID can be searched in the WFP state dump output to trace back to the Firewall rule where the filter originated from. However, the filter ID is not a reliable source for tracing back to the filter or the rule, as the filter ID can change for many reasons despite the rule not changing at all. This makes the diagnosis process error-prone and difficult. @@ -55,7 +55,7 @@ The next section describes the improvements made to Audits 5157 and 5152 and how The two new fields added to the Audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. -The `Filter Origin` field will help identify the cause of the drop. Packet drops from FW are explicitly dropped by default block filters created by the Windows Firewall service or a FW rule which may be created by users, policies, services, apps, etc. +The `Filter Origin` field will help identify the cause of the drop. Packet drops from Firewall are explicitly dropped by default block filters created by the Windows Firewall service or a Firewall rule which may be created by users, policies, services, apps, etc. `Filter Origin` will either specify the rule ID (a unique identifier of a Firewall rule) or the name of one of the default block filters. @@ -96,7 +96,7 @@ After identifying the rule that caused the drop, the network admin can now modif **AppContainer Loopback** -Network drop events from the AppContainer Loopback block filter origin occur when localhost loopback is not enabled properly for the UWP app. +Network drop events from the AppContainer Loopback block filter origin occur when localhost loopback is not enabled properly for the Universal Windows Platform (UWP) app. To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/windows/iot-core/develop-your-app/loopback). @@ -128,9 +128,9 @@ To learn more about the quarantine feature, see [Quarantine Behavior](quarantine Network packet drops from Query User Default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: -1. Create an inbound FW rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. +1. Create an inbound Firewall rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. -2. Delete any block Query User rules which may have been auto generated by the FW service. +2. Delete any block Query User rules which may have been auto generated by the Firewall service. To generate a list of all the Query User block rules, you can run the following PowerShell command: @@ -161,11 +161,11 @@ To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.micr **UWP Default** -Network drops from UWP Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. +Network drops from Universal Windows Platform (UWP) Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). **WSH Default** -Network drops from WSH default filters indicate that there wasn’t an explicit Windows Service Hardening allow rule to allow network traffic for the protected service. The service owner will need to configure allow rules for the service if the block is not expected. +Network drops from Windows Service Hardening (WSH) default filters indicate that there wasn’t an explicit Windows Service Hardening allow rule to allow network traffic for the protected service. The service owner will need to configure allow rules for the service if the block is not expected. From fdde5e4aec9afc274d6346cfd5361aad51fa4987 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Fri, 20 Nov 2020 16:33:36 +0530 Subject: [PATCH 087/958] Update quarantine.md --- .../security/threat-protection/windows-firewall/quarantine.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index 3c2c94f178..7ebe7fac5b 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -23,7 +23,7 @@ One of the security challenges that network admins face is configuring a machine Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are part of the domain. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. -To counter this potential exploitation, Windows Firewall will "quarantine" an interface until the system has successfully re-categorized the network and WFP has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. +To counter this potential exploitation, Windows Firewall will "quarantine" an interface until the system has successfully re-categorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. While the quarantine feature has long been a part of Windows Firewall, the feature’s behavior has often caused confusion for customers unaware of quarantine and its motivations. @@ -50,7 +50,7 @@ These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and thes 4. FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 >[!NOTE] -> Any FW rules added by the customers will not affect the filters in the quarantine sublayer as filters from FW rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. +> Any Firewall rules added by the customers will not affect the filters in the quarantine sublayer as filters from Firewall rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/windows/win32/fwp/basic-operation). From 0c929a927671fe7d865feb1071f3a0e7ea106879 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Fri, 20 Nov 2020 09:01:06 -0700 Subject: [PATCH 088/958] safety commit --- windows/client-management/quick-assist.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 windows/client-management/quick-assist.md diff --git a/windows/client-management/quick-assist.md b/windows/client-management/quick-assist.md new file mode 100644 index 0000000000..a40a1bbf2f --- /dev/null +++ b/windows/client-management/quick-assist.md @@ -0,0 +1,14 @@ +--- +title: Use Quick Assist +description: How IT Pros can use Quick Assist to help users +ms.prod: w10 +ms.sitesec: library +ms.topic: article +author: jaimeo +ms.localizationpriority: medium +ms.author: jaimeo +manager: laurawi +--- + +# Use Quick Assist + From aa96b6d2f12ae8c24261592399ddec66050c231e Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 20 Nov 2020 14:54:18 -0800 Subject: [PATCH 089/958] removed deprecated policies --- .../mdm/policies-in-policy-csp-admx-backed.md | 9 - .../policy-configuration-service-provider.md | 27 -- .../mdm/policy-csp-admx-devicenstallation.md | 223 --------- .../mdm/policy-csp-admx-devicesetup.md | 447 ------------------ 4 files changed, 706 deletions(-) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 3822a4815a..fb21f97424 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -76,7 +76,6 @@ ms.date: 10/08/2020 - [ADMX_CtrlAltDel/DisableLockComputer](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablelockcomputer) - [ADMX_CtrlAltDel/DisableTaskMgr](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disabletaskmgr) - [ADMX_CtrlAltDel/NoLogoff](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-nologoff) -- [ADMX_DeviceInstallation/DeviceInstall_AllSigningEqual](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-allsigningequal) - [ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-allowadmininstall) - [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-detailtext) - [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-simpletext) @@ -84,17 +83,9 @@ ms.date: 10/08/2020 - [ADMX_DeviceInstallation/DeviceInstall_Policy_RebootTime](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-policy-reboottime) - [ADMX_DeviceInstallation/DeviceInstall_Removable_Deny](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-removable-deny) - [ADMX_DeviceInstallation/DeviceInstall_SystemRestore](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-systemrestore) -- [ADMX_DeviceInstallation/DeviceManagement_RPCInterface_Allow](./policy-csp-admx-devicenstallation.md#admx-devicemanagement-rpcinterface-allow) - [ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-classes-allowuser) -- [ADMX_DeviceInstallation/DriverSigning](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-driversigning) - [ADMX_DeviceSetup/DeviceInstall_BalloonTips](./policy-csp-admx-devicesetup.md#admx-devicesetup-deviceinstall-balloontips) -- [ADMX_DeviceSetup/DeviceInstall_GenericDriverSendToWER](./policy-csp-admx-devicesetup.md#admx-devicesetup-deviceinstall-genericdriversendtower) -- [ADMX_DeviceSetup/DeviceInstall_RequestAdditionalSoftwareSendToWER](./policy-csp-admx-devicesetup.md#admx-devicesetup-deviceinstall-requestadditionalsoftwaresendtower) -- [ADMX_DeviceSetup/DriverSearchPlaces](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces) -- [ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_1](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces-dontpromptforwindowsupdate-1) -- [ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_2](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces-dontpromptforwindowsupdate-2) - [ADMX_DeviceSetup/DriverSearchPlaces_SearchOrderConfiguration](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces-searchorderconfiguration) -- [ADMX_DeviceSetup/DriverSearchPlaces_SearchServerConfiguration](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces-searchserverconfiguration) - [ADMX_DigitalLocker/Digitalx_DiableApplication_TitleText_1](./policy-csp-admx-digitallocker.md#admx-digitallocker-digitalx-diableapplication-titletext-1) - [ADMX_DigitalLocker/Digitalx_DiableApplication_TitleText_2](./policy-csp-admx-digitallocker.md#admx-digitallocker-digitalx-diableapplication-titletext-2) - [ADMX_DnsClient/DNS_AllowFQDNNetBiosQueries](./policy-csp-admx-dnsclient.md#admx-dnsclient-dns-allowfqdnnetbiosqueries) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index e068d6a883..83c2c8ba65 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -380,9 +380,6 @@ The following diagram shows the Policy configuration service provider in tree fo ### ADMX_DeviceInstallation policies
    -
    - ADMX_DeviceInstallation/DeviceInstall_AllSigningEqual -
    ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall
    @@ -404,15 +401,9 @@ The following diagram shows the Policy configuration service provider in tree fo
    ADMX_DeviceInstallation/DeviceInstall_SystemRestore
    -
    - ADMX_DeviceInstallation/DeviceManagement_RPCInterface_Allow -
    ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser
    -
    - ADMX_DeviceInstallation/DriverSigning -
    ### ADMX_DeviceSetup policies @@ -421,27 +412,9 @@ The following diagram shows the Policy configuration service provider in tree fo
    ADMX_DeviceSetup/DeviceInstall_BalloonTips
    -
    - ADMX_DeviceSetup/DeviceInstall_GenericDriverSendToWER -
    -
    - ADMX_DeviceSetup/DeviceInstall_RequestAdditionalSoftwareSendToWER -
    -
    - ADMX_DeviceSetup/DriverSearchPlaces -
    -
    - ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_1 -
    -
    - ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_2 -
    ADMX_DeviceSetup/DriverSearchPlaces_SearchOrderConfiguration
    -
    - ADMX_DeviceSetup/DriverSearchPlaces_SearchServerConfiguration -
    ### ADMX_DigitalLocker policies diff --git a/windows/client-management/mdm/policy-csp-admx-devicenstallation.md b/windows/client-management/mdm/policy-csp-admx-devicenstallation.md index c52d3a4656..5f9d502f36 100644 --- a/windows/client-management/mdm/policy-csp-admx-devicenstallation.md +++ b/windows/client-management/mdm/policy-csp-admx-devicenstallation.md @@ -22,9 +22,6 @@ manager: dansimp ## ADMX_DeviceInstallation policies
    -
    - ADMX_DeviceInstallation/DeviceInstall_AllSigningEqual -
    ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall
    @@ -46,89 +43,14 @@ manager: dansimp
    ADMX_DeviceInstallation/DeviceInstall_SystemRestore
    -
    - ADMX_DeviceInstallation/DeviceManagement_RPCInterface_Allow -
    ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser
    -
    - ADMX_DeviceInstallation/DriverSigning -
    - -**ADMX_DeviceInstallation/DeviceInstall_AllSigningEqual** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to determine how drivers signed by a Microsoft Windows Publisher certificate are ranked with drivers signed by other valid Authenticode signatures during the driver selection and installation process. Regardless of this policy setting, a signed driver is still preferred over a driver that is not signed at all. - -If you enable or do not configure this policy setting, drivers that are signed by a Microsoft Windows Publisher certificate and drivers that are signed by other Authenticode certificates are prioritized equally during the driver selection process. Selection is based on other criteria, such as version number or when the driver was created. - -If you disable this policy setting, drivers that are signed by a Microsoft Windows Publisher certificate are selected for installation over drivers that are signed by other Authenticode certificates. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Prioritize all digitally signed drivers equally during the driver ranking and selection process* -- GP name: *DeviceInstall_AllSigningEqual* -- GP path: *System\Device Installation* -- GP ADMX file name: *DeviceInstallation.admx* - - - -
    - **ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall** @@ -613,75 +535,6 @@ ADMX Info:
    - -**ADMX_DeviceInstallation/DeviceManagement_RPCInterface_Allow** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to allow or deny remote access to the Plug and Play interface. - -If you enable this policy setting, remote connections to the Plug and Play interface are allowed. - -If you disable or do not configure this policy setting, remote connections to the Plug and Play interface are not allowed. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Allow remote access to the Plug and Play interface* -- GP name: *DeviceManagement_RPCInterface_Allow* -- GP path: *System\Device Installation* -- GP ADMX file name: *DeviceInstallation.admx* - - - -
    - **ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser** @@ -752,82 +605,6 @@ ADMX Info:
    - -**ADMX_DeviceInstallation/DriverSigning** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * User - -
    - - - -Available in the latest Windows 10 Insider Preview Build. Determines how the system responds when a user tries to install device driver files that are not digitally signed. - -This setting establishes the least secure response permitted on the systems of users in the group. Users can use System in Control Panel to select a more secure setting, but when this setting is enabled, the system does not implement any setting less secure than the one the setting established. - -When you enable this setting, use the drop-down box to specify the desired response. - -- "Ignore" directs the system to proceed with the installation even if it includes unsigned files. -- "Warn" notifies the user that files are not digitally signed and lets the user decide whether to stop or to proceed with the installation and whether to permit unsigned files to be installed. "Warn" is the default. -- "Block" directs the system to refuse to install unsigned files. As a result, the installation stops, and none of the files in the driver package are installed. - -To change driver file security without specifying a setting, use System in Control Panel. Right-click My Computer, click Properties, click the Hardware tab, and then click the Driver Signing button. - - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Code signing for device drivers* -- GP name: *DriverSigning* -- GP path: *System\Device Installation* -- GP ADMX file name: *DeviceInstallation.admx* - - - -
    - Footnotes: - 1 - Available in Windows 10, version 1607. diff --git a/windows/client-management/mdm/policy-csp-admx-devicesetup.md b/windows/client-management/mdm/policy-csp-admx-devicesetup.md index d82cda8513..77264647f1 100644 --- a/windows/client-management/mdm/policy-csp-admx-devicesetup.md +++ b/windows/client-management/mdm/policy-csp-admx-devicesetup.md @@ -25,27 +25,9 @@ manager: dansimp
    ADMX_DeviceSetup/DeviceInstall_BalloonTips
    -
    - ADMX_DeviceSetup/DeviceInstall_GenericDriverSendToWER -
    -
    - ADMX_DeviceSetup/DeviceInstall_RequestAdditionalSoftwareSendToWER -
    -
    - ADMX_DeviceSetup/DriverSearchPlaces -
    -
    - ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_1 -
    -
    - ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_2 -
    ADMX_DeviceSetup/DriverSearchPlaces_SearchOrderConfiguration
    -
    - ADMX_DeviceSetup/DriverSearchPlaces_SearchServerConfiguration -
    @@ -120,364 +102,6 @@ ADMX Info:
    - -**ADMX_DeviceSetup/DeviceInstall_GenericDriverSendToWER** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. Windows has a feature that sends "generic-driver-installed" reports through the Windows Error Reporting infrastructure. This policy allows you to disable the feature. - -If you enable this policy setting, an error report is not sent when a generic driver is installed. - -If you disable or do not configure this policy setting, an error report is sent when a generic driver is installed. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Do not send a Windows error report when a generic driver is installed on a device* -- GP name: *DeviceInstall_GenericDriverSendToWER* -- GP path: *System\Device Installation* -- GP ADMX file name: *DeviceSetup.admx* - - - -
    - - -**ADMX_DeviceSetup/DeviceInstall_RequestAdditionalSoftwareSendToWER** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. Windows has a feature that allows a device driver to request additional software through the Windows Error Reporting infrastructure. This policy allows you to disable the feature. - -If you enable this policy setting, Windows will not send an error report to request additional software even if this is specified by the device driver. - -If you disable or do not configure this policy setting, Windows sends an error report when a device driver that requests additional software is installed. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Prevent Windows from sending an error report when a device driver requests additional software during installation* -- GP name: *DeviceInstall_RequestAdditionalSoftwareSendToWER* -- GP path: *System\Device Installation* -- GP ADMX file name: *DeviceSetup.admx* - - - -
    - - -**ADMX_DeviceSetup/DriverSearchPlaces** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * User - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This setting configures the location that Windows searches for drivers when a new piece of hardware is found. - -By default, Windows searches the following places for drivers: local installation, floppy drives, CD-ROM drives, Windows Update. - -Using this setting, you may remove the floppy and CD-ROM drives from the search algorithm. - -If you enable this setting, you can remove the locations by selecting the associated check box beside the location name. - -If you disable or do not configure this setting, Windows searches the installation location, floppy drives, and CD-ROM drives. - -> [!NOTE] -> To prevent searching Windows Update for drivers also see "Turn off Windows Update device driver searching" in Administrative Templates/System/Internet Communication Management/Internet Communication settings. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Configure driver search locations* -- GP name: *DriverSearchPlaces* -- GP path: *System\Device Installation* -- GP ADMX file name: *DeviceSetup.admx* - - - -
    - - -**ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_1** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * User - -
    - - - -Available in the latest Windows 10 Insider Preview Build. Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet. - -> [!NOTE] -> This setting only has effect if "Turn off Windows Update device driver searching" in "Administrative Templates/System/Internet Communication Management/Internet Communication settings" is disabled or not configured. - -If you enable this setting, administrators will not be prompted to search Windows Update. - -If you disable or do not configure this setting, and "Turn off Windows Update device driver searching" is disabled or not configured, the administrator will be prompted for consent before going to Windows Update to search for device drivers. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Turn off Windows Update device driver search prompt* -- GP name: *DriverSearchPlaces_DontPromptForWindowsUpdate_1* -- GP path: *System\Device Installation* -- GP ADMX file name: *DeviceSetup.admx* - - - -
    - - -**ADMX_DeviceSetup/DriverSearchPlaces_DontPromptForWindowsUpdate_2** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet. - -> [!NOTE] -> This setting only has effect if "Turn off Windows Update device driver searching" in "Administrative Templates/System/Internet Communication Management/Internet Communication settings" is disabled or not configured. - -If you enable this setting, administrators will not be prompted to search Windows Update. - -If you disable or do not configure this setting, and "Turn off Windows Update device driver searching" is disabled or not configured, the administrator will be prompted for consent before going to Windows Update to search for device drivers. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Turn off Windows Update device driver search prompt* -- GP name: *DriverSearchPlaces_DontPromptForWindowsUpdate_2* -- GP path: *System\Device Installation* -- GP ADMX file name: *DeviceSetup.admx* - - - -
    - **ADMX_DeviceSetup/DriverSearchPlaces_SearchOrderConfiguration** @@ -549,77 +173,6 @@ ADMX Info:
    - -**ADMX_DeviceSetup/DriverSearchPlaces_SearchServerConfiguration** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the search server that Windows uses to find updates for device drivers. - -If you enable this policy setting, you can select whether Windows searches Windows Update (WU), searches a Managed Server, or a combination of both. - -Note that if both are specified, then Windows will first search the Managed Server, such as a Windows Server Update Services (WSUS) server. Only if no update is found will Windows then also search Windows Update. - -If you disable or do not configure this policy setting, members of the Administrators group can determine the server used in the search for device drivers. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Specify the search server for device driver updates* -- GP name: *DriverSearchPlaces_SearchServerConfiguration* -- GP path: *System\Device Installation* -- GP ADMX file name: *DeviceSetup.admx* - - - -
    - Footnotes: - 1 - Available in Windows 10, version 1607. From 144f8311ad56b1c5e57fdb876307401d6efa8b31 Mon Sep 17 00:00:00 2001 From: Chai Wei Jie Date: Sun, 22 Nov 2020 18:55:02 +0800 Subject: [PATCH 090/958] Update windows-10-poc.md --- windows/deployment/windows-10-poc.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/deployment/windows-10-poc.md b/windows/deployment/windows-10-poc.md index a956b7fa4b..9d18365b39 100644 --- a/windows/deployment/windows-10-poc.md +++ b/windows/deployment/windows-10-poc.md @@ -214,7 +214,7 @@ Starting with Windows 8, the host computer’s microprocessor must support secon 2. The Hyper-V feature is not installed by default. To install it, open an elevated Windows PowerShell window and type the following command: - 
    Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V –All
    + 
    Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V -All
    This command works on all operating systems that support Hyper-V, but on Windows Server operating systems you must type an additional command to add the Hyper-V Windows PowerShell module and the Hyper-V Manager console. This command will also install Hyper-V if it isn't already installed, so if desired you can just type the following command on Windows Server 2012 or 2016 instead of using the Enable-WindowsOptionalFeature command: @@ -542,8 +542,8 @@ The second Windows Server 2012 R2 VHD needs to be expanded in size from 40GB to 1. To add available space for the partition, type the following commands at an elevated Windows PowerShell prompt on the Hyper-V host: 
    -    Resize-VHD –Path c:\VHD\2012R2-poc-2.vhd –SizeBytes 100GB
-    $x = (Mount-VHD –Path c:\VHD\2012R2-poc-2.vhd -passthru | Get-Disk | Get-Partition | Get-Volume).DriveLetter
+    Resize-VHD -Path c:\VHD\2012R2-poc-2.vhd -SizeBytes 100GB
+    $x = (Mount-VHD -Path c:\VHD\2012R2-poc-2.vhd -passthru | Get-Disk | Get-Partition | Get-Volume).DriveLetter
     Resize-Partition -DriveLetter $x -Size (Get-PartitionSupportedSize -DriveLetter $x).SizeMax
    @@ -551,7 +551,7 @@ The second Windows Server 2012 R2 VHD needs to be expanded in size from 40GB to 
         Get-Volume -DriveLetter $x
-    Dismount-VHD –Path c:\VHD\2012R2-poc-2.vhd
    + Dismount-VHD -Path c:\VHD\2012R2-poc-2.vhd ### Configure Hyper-V @@ -712,7 +712,7 @@ The second Windows Server 2012 R2 VHD needs to be expanded in size from 40GB to 
         Rename-Computer DC1
-    New-NetIPAddress –InterfaceAlias Ethernet –IPAddress 192.168.0.1 –PrefixLength 24 -DefaultGateway 192.168.0.2
+    New-NetIPAddress -InterfaceAlias Ethernet -IPAddress 192.168.0.1 -PrefixLength 24 -DefaultGateway 192.168.0.2
     Set-DnsClientServerAddress -InterfaceAlias Ethernet -ServerAddresses 192.168.0.1,192.168.0.2
    @@ -749,7 +749,7 @@ The second Windows Server 2012 R2 VHD needs to be expanded in size from 40GB to netsh dhcp add securitygroups Restart-Service DHCPServer Add-DhcpServerInDC dc1.contoso.com 192.168.0.1 - Set-ItemProperty –Path registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ServerManager\Roles\12 –Name ConfigurationState –Value 2 + Set-ItemProperty -Path registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ServerManager\Roles\12 -Name ConfigurationState -Value 2 10. Next, add a DHCP scope and set option values: @@ -886,7 +886,7 @@ The second Windows Server 2012 R2 VHD needs to be expanded in size from 40GB to 
         Enable-VMIntegrationService -VMName PC1 -Name "Guest Service Interface"
-    Copy-VMFile "PC1" –SourcePath "C:\VHD\pc1.ps1"  –DestinationPath "C:\pc1.ps1" –CreateFullPath –FileSource Host
+    Copy-VMFile "PC1" -SourcePath "C:\VHD\pc1.ps1" -DestinationPath "C:\pc1.ps1" -CreateFullPath -FileSource Host
    >In order for this command to work properly, PC1 must be running the vmicguestinterface (Hyper-V Guest Service Interface) service. If this service is not enabled in this step, then the copy-VMFile command will fail. In this case, you can try updating integration services on the VM by mounting the Hyper-V Integration Services Setup (vmguest.iso), which is located in C:\Windows\System32 on Windows Server 2012 and 2012 R2 operating systems that are running the Hyper-V role service. @@ -917,7 +917,7 @@ The second Windows Server 2012 R2 VHD needs to be expanded in size from 40GB to 
         Rename-Computer SRV1
-    New-NetIPAddress –InterfaceAlias Ethernet –IPAddress 192.168.0.2 –PrefixLength 24
+    New-NetIPAddress -InterfaceAlias Ethernet -IPAddress 192.168.0.2 -PrefixLength 24
     Set-DnsClientServerAddress -InterfaceAlias Ethernet -ServerAddresses 192.168.0.1,192.168.0.2
     Restart-Computer
    From 7b653935e4bf100e3c31ac18eb1f687f53695bb7 Mon Sep 17 00:00:00 2001 From: Hiroshi Yoshioka <40815708+hyoshioka0128@users.noreply.github.com> Date: Mon, 23 Nov 2020 00:18:46 +0900 Subject: [PATCH 091/958] =?UTF-8?q?Typo=20"**pass@word1**"=E2=86=92"**pass?= =?UTF-8?q?\@word1**"?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bold with escape characters https://docs.microsoft.com/en-us/windows/deployment/windows-10-poc-sc-config-mgr --- windows/deployment/windows-10-poc-sc-config-mgr.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-10-poc-sc-config-mgr.md b/windows/deployment/windows-10-poc-sc-config-mgr.md index 87baccf225..040e519e97 100644 --- a/windows/deployment/windows-10-poc-sc-config-mgr.md +++ b/windows/deployment/windows-10-poc-sc-config-mgr.md @@ -283,7 +283,7 @@ This section contains several procedures to support Zero Touch installation with 3. On the **Network Access Account** tab, choose **Specify the account that accesses network locations**. 4. Click the yellow starburst and then click **New Account**. 5. Click **Browse** and then under **Enter the object name to select**, type **CM_NAA** and click **OK**. -6. Next to **Password** and **Confirm Password**, type **pass@word1**, and then click **OK** twice. +6. Next to **Password** and **Confirm Password**, type **pass\@word1**, and then click **OK** twice. ### Configure a boundary group From 915542fb1350de920c3e95e94817b8c4fff80f76 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Mon, 23 Nov 2020 09:57:16 +0530 Subject: [PATCH 092/958] updated-per-4650392 Rebranding update --- .../deploy-windows-10-in-a-school-district.md | 2 +- .../hello-feature-conditional-access.md | 2 +- .../hello-hybrid-cert-new-install.md | 22 +++++++++---------- .../hello-hybrid-key-new-install.md | 22 +++++++++---------- .../hello-identity-verification.md | 2 +- .../hello-key-trust-validate-deploy-mfa.md | 2 +- .../hello-planning-guide.md | 6 ++--- 7 files changed, 29 insertions(+), 29 deletions(-) diff --git a/education/windows/deploy-windows-10-in-a-school-district.md b/education/windows/deploy-windows-10-in-a-school-district.md index 280778ccb4..3a2d13b9b9 100644 --- a/education/windows/deploy-windows-10-in-a-school-district.md +++ b/education/windows/deploy-windows-10-in-a-school-district.md @@ -678,7 +678,7 @@ The following Azure AD Premium features are not in Azure AD Basic: * Allow designated users to manage group membership * Dynamic group membership based on user metadata -* Azure multifactor authentication (MFA; see [What is Azure Multi-Factor Authentication](https://azure.microsoft.com/documentation/articles/multi-factor-authentication/)) +* Azure AD Multi-Factor Authentication (MFA; see [What is Azure AD Multi-Factor Authentication](https://azure.microsoft.com/documentation/articles/multi-factor-authentication/)) * Identify cloud apps that your users run * Self-service recovery of BitLocker * Add local administrator accounts to Windows 10 devices diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-conditional-access.md b/windows/security/identity-protection/hello-for-business/hello-feature-conditional-access.md index 73e734e99b..470d856d45 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-conditional-access.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-conditional-access.md @@ -32,7 +32,7 @@ In a mobile-first, cloud-first world, Azure Active Directory enables single sign To improve productivity, Azure Active Directory provides your users with a broad range of options to access your corporate assets. With application access management, Azure Active Directory enables you to ensure that only the right people can access your applications. What if you want to have more control over how the right people are accessing your resources under certain conditions? What if you even have conditions under which you want to block access to certain applications even for the right people? For example, it might be OK for you if the right people are accessing certain applications from a trusted network; however, you might not want them to access these applications from a network you don't trust. You can address these questions using conditional access. > [!NOTE] -> For more details about the way Windows Hello for Business interacts with Azure Multi Factor Authentication and Conditional Access, see [this article](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/why-are-my-users-not-prompted-for-mfa-as-expected/ba-p/1449032). +> For more details about the way Windows Hello for Business interacts with Azure AD Multi-Factor Authentication and Conditional Access, see [this article](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/why-are-my-users-not-prompted-for-mfa-as-expected/ba-p/1449032). Read [Conditional access in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-conditional-access-azure-portal) to learn more about Conditional Access. Afterwards, read [Getting started with conditional access in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/active-directory-conditional-access-azure-portal-get-started) to start deploying Conditional access. diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-new-install.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-new-install.md index e5664fdeb0..ffbe59648f 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-new-install.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-cert-new-install.md @@ -100,12 +100,12 @@ The next step of the deployment is to follow the [Creating an Azure AD tenant](h ## Multifactor Authentication Services Windows Hello for Business uses multi-factor authentication during provisioning and during user initiated PIN reset scenarios, such as when a user forgets their PIN. There are two preferred multi-factor authentication configurations with hybrid deployments—Azure MFA and AD FS using Azure MFA -Review the [What is Azure Multi-Factor Authentication](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication) topic to familiarize yourself its purpose and how it works. +Review the [What is Azure AD Multi-Factor Authentication](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication) topic to familiarize yourself its purpose and how it works. -### Azure Multi-Factor Authentication (MFA) Cloud ### +### Azure AD Multi-Factor Authentication (MFA) Cloud ### > [!IMPORTANT] -> As long as your users have licenses that include Azure Multi-Factor Authentication, there's nothing that you need to do to turn on Azure MFA. You can start requiring two-step verification on an individual user basis. The licenses that enable Azure MFA are: -> * Azure Multi-Factor Authentication +> As long as your users have licenses that include Azure AD Multi-Factor Authentication, there's nothing that you need to do to turn on Azure MFA. You can start requiring two-step verification on an individual user basis. The licenses that enable Azure MFA are: +> * Azure AD Multi-Factor Authentication > * Azure Active Directory Premium > * Enterprise Mobility + Security > @@ -115,7 +115,7 @@ Review the [What is Azure Multi-Factor Authentication](https://docs.microsoft.co If your organization uses Azure MFA on a per-consumption model (no licenses), then review the [Create a Multifactor Authentication Provider](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication-get-started-auth-provider) section to create an Azure MFA Authentication provider and associate it with your Azure tenant. #### Configure Azure MFA Settings #### -Once you have created your Azure MFA authentication provider and associated it with an Azure tenant, you need to configure the multi-factor authentication settings. Review the [Configure Azure Multi-Factor Authentication settings](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication-whats-next) section to configure your settings. +Once you have created your Azure MFA authentication provider and associated it with an Azure tenant, you need to configure the multi-factor authentication settings. Review the [Configure Azure AD Multi-Factor Authentication settings](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication-whats-next) section to configure your settings. #### Azure MFA User States #### After you have completed configuring your Azure MFA settings, you want to review configure [User States](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication-get-started-user-states) to understand user states. User states determine how you enable Azure MFA for your users. @@ -126,12 +126,12 @@ Alternatively, you can configure Windows Server 2016 Active Directory Federation ### Section Review > [!div class="checklist"] -> * Review the overview and uses of Azure Multifactor Authentication. -> * Review your Azure Active Directory subscription for Azure Multifactor Authentication. -> * Create an Azure Multifactor Authentication Provider, if necessary. -> * Configure Azure Multifactor Authentication features and settings. -> * Understand the different User States and their effect on Azure Multifactor Authentication. -> * Consider using Azure Multifactor Authentication or a third-party multifactor authentication provider with Windows Server 2016 Active Directory Federation Services, if necessary. +> * Review the overview and uses of Azure AD Multi-Factor Authentication Authentication. +> * Review your Azure Active Directory subscription for Azure AD Multi-Factor Authentication. +> * Create an Azure AD Multi-Factor Authentication Provider, if necessary. +> * Configure Azure AD Multi-Factor Authentication features and settings. +> * Understand the different User States and their effect on Azure AD Multi-Factor Authentication. +> * Consider using Azure AD Multi-Factor Authentication or a third-party multifactor authentication provider with Windows Server 2016 Active Directory Federation Services, if necessary. > [!div class="nextstepaction"] > [Configure Azure Device Registration](hello-hybrid-cert-trust-devreg.md) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md index 51e6922080..958991988c 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-new-install.md @@ -110,13 +110,13 @@ The next step of the deployment is to follow the [Creating an Azure AD tenant](h ## Multifactor Authentication Services Windows Hello for Business uses multifactor authentication during provisioning and during user initiated PIN reset scenarios, such as when a user forgets their PIN. There are two preferred multifactor authentication configurations with hybrid deployments—Azure MFA and AD FS using Azure MFA or a third-party MFA adapter -Review the [What is Azure Multi-Factor Authentication](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication) topic to familiarize yourself its purpose and how it works. +Review the [What is Azure AD Multi-Factor Authentication](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication) topic to familiarize yourself its purpose and how it works. -### Azure Multi-Factor Authentication (MFA) Cloud +### Azure AD Multi-Factor Authentication (MFA) Cloud > [!IMPORTANT] -> As long as your users have licenses that include Azure Multi-Factor Authentication, there's nothing that you need to do to turn on Azure MFA. You can start requiring two-step verification on an individual user basis. The licenses that enable Azure MFA are: -> * Azure Multi-Factor Authentication +> As long as your users have licenses that include Azure AD Multi-Factor Authentication, there's nothing that you need to do to turn on Azure MFA. You can start requiring two-step verification on an individual user basis. The licenses that enable Azure MFA are: +> * Azure AD Multi-Factor Authentication > * Azure Active Directory Premium > * Enterprise Mobility + Security > @@ -124,7 +124,7 @@ Review the [What is Azure Multi-Factor Authentication](https://docs.microsoft.co #### Configure Azure MFA Settings -Review the [Configure Azure Multi-Factor Authentication settings](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication-whats-next) section to configure your settings. +Review the [Configure Azure AD Multi-Factor Authentication settings](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication-whats-next) section to configure your settings. #### Azure MFA User States After you have completed configuring your Azure MFA settings, you want to review [How to require two-step verification for a user](https://docs.microsoft.com/azure/multi-factor-authentication/multi-factor-authentication-get-started-user-states) to understand user states. User states determine how you enable Azure MFA for your users. @@ -135,12 +135,12 @@ Alternatively, you can configure Windows Server 2016 Active Directory Federation ### Section Review > [!div class="checklist"] -> * Review the overview and uses of Azure Multifactor Authentication. -> * Review your Azure Active Directory subscription for Azure Multifactor Authentication. -> * Create an Azure Multifactor Authentication Provider, if necessary. -> * Configure Azure Multifactor Authentication features and settings. -> * Understand the different User States and their effect on Azure Multifactor Authentication. -> * Consider using Azure Multifactor Authentication or a third-party multifactor authentication provider with Windows Server Active Directory Federation Services, if necessary. +> * Review the overview and uses of Azure AD Multi-Factor Authentication. +> * Review your Azure Active Directory subscription for Azure AD Multi-Factor Authentication. +> * Create an Azure AD Multi-Factor Authentication Provider, if necessary. +> * Configure Azure AD Multi-Factor Authentication features and settings. +> * Understand the different User States and their effect on Azure AD Multi-Factor Authentication. +> * Consider using Azure AD Multi-Factor Authentication or a third-party multifactor authentication provider with Windows Server Active Directory Federation Services, if necessary. > [!div class="nextstepaction"] > [Configure Azure Device Registration](hello-hybrid-key-trust-devreg.md) diff --git a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md index a5a6d5a9a2..97593c468b 100644 --- a/windows/security/identity-protection/hello-for-business/hello-identity-verification.md +++ b/windows/security/identity-protection/hello-for-business/hello-identity-verification.md @@ -41,7 +41,7 @@ Windows Hello addresses the following problems with passwords: * Windows 10, version 1511 or later * Microsoft Azure Account * Azure Active Directory -* Azure Multi-factor authentication +* Azure AD Multi-Factor Authentication * Modern Management (Intune or supported third-party MDM), *optional* * Azure AD Premium subscription - *optional*, needed for automatic MDM enrollment when the device joins Azure Active Directory diff --git a/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-deploy-mfa.md b/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-deploy-mfa.md index 6377afa5a8..ce54bf0ffb 100644 --- a/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-deploy-mfa.md +++ b/windows/security/identity-protection/hello-for-business/hello-key-trust-validate-deploy-mfa.md @@ -19,7 +19,7 @@ ms.reviewer: # Validate and Deploy Multi-factor Authentication (MFA) > [!IMPORTANT] -> As of July 1, 2019, Microsoft will no longer offer MFA Server for new deployments. New customers who would like to require multi-factor authentication from their users should use cloud-based Azure Multi-Factor Authentication. Existing customers who have activated MFA Server prior to July 1 will be able to download the latest version, future updates and generate activation credentials as usual. +> As of July 1, 2019, Microsoft will no longer offer MFA Server for new deployments. New customers who would like to require multi-factor authentication from their users should use cloud-based Azure AD Multi-Factor Authentication. Existing customers who have activated MFA Server prior to July 1 will be able to download the latest version, future updates and generate activation credentials as usual. **Applies to** diff --git a/windows/security/identity-protection/hello-for-business/hello-planning-guide.md b/windows/security/identity-protection/hello-for-business/hello-planning-guide.md index 3fff407e34..9f8e5333ee 100644 --- a/windows/security/identity-protection/hello-for-business/hello-planning-guide.md +++ b/windows/security/identity-protection/hello-for-business/hello-planning-guide.md @@ -104,13 +104,13 @@ The built-in Windows Hello for Business provisioning experience creates a hardwa #### Multifactor authentication > [!IMPORTANT] -> As of July 1, 2019, Microsoft will no longer offer MFA Server for new deployments. New customers who require multi-factor authentication for their users should use cloud-based Azure Multi-Factor Authentication. Existing customers who have activated MFA Server prior to July 1, 2019 will be able to download the latest version, future updates and generate activation credentials as usual. See [Getting started with the Azure Multi-Factor Authentication Server](https://docs.microsoft.com/azure/active-directory/authentication/howto-mfaserver-deploy) for more details. +> As of July 1, 2019, Microsoft will no longer offer MFA Server for new deployments. New customers who require multi-factor authentication for their users should use cloud-based Azure AD Multi-Factor Authentication. Existing customers who have activated MFA Server prior to July 1, 2019 will be able to download the latest version, future updates and generate activation credentials as usual. See [Getting started with the Azure AD Multi-Factor Authentication Server](https://docs.microsoft.com/azure/active-directory/authentication/howto-mfaserver-deploy) for more details. The goal of Windows Hello for Business is to move organizations away from passwords by providing them a strong credential that provides easy two-factor authentication. The built-in provisioning experience accepts the user's weak credentials (username and password) as the first factor authentication; however, the user must provide a second factor of authentication before Windows provisions a strong credential. -Cloud only and hybrid deployments provide many choices for multi-factor authentication. On-premises deployments must use a multi-factor authentication that provides an AD FS multi-factor adapter to be used in conjunction with the on-premises Windows Server 2016 AD FS server role. Organizations can use the on-premises Azure Multi-factor Authentication server, or choose from several third parties (Read [Microsoft and third-party additional authentication methods](https://docs.microsoft.com/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods) for more information). +Cloud only and hybrid deployments provide many choices for multi-factor authentication. On-premises deployments must use a multi-factor authentication that provides an AD FS multi-factor adapter to be used in conjunction with the on-premises Windows Server 2016 AD FS server role. Organizations can use the on-premises Azure AD Multi-Factor Authentication server, or choose from several third parties (Read [Microsoft and third-party additional authentication methods](https://docs.microsoft.com/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods) for more information). > [!NOTE] -> Azure Multi-Factor Authentication is available through: +> Azure AD Multi-Factor Authentication is available through: > * Microsoft Enterprise Agreement > * Open Volume License Program > * Cloud Solution Providers program From 3b423db0a6c6b3b3c88080d68d5bbc4ab03a1b90 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Mon, 23 Nov 2020 11:14:35 +0200 Subject: [PATCH 093/958] Update windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-smartscreen-available-settings.md | 5 ----- 1 file changed, 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md index b7b275e78a..ef53ba233b 100644 --- a/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md +++ b/windows/security/threat-protection/microsoft-defender-smartscreen/microsoft-defender-smartscreen-available-settings.md @@ -41,10 +41,6 @@ SmartScreen uses registry-based Administrative Template policy settings. For mor Windows 10, version 2004:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control Windows 10, version 1703:
    Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure App Install Control -patch-107 -======= -Windows 10, version 1703 -public This policy setting is intended to prevent malicious content from affecting your user's devices when downloading executable content from the internet.

    This setting does not protect against malicious content from USB devices, network shares, or other non-internet sources.

    Important: Using a trustworthy browser helps ensure that these protections work as expected.

    @@ -222,4 +218,3 @@ To better help you protect your organization, we recommend turning on and using - [Microsoft Defender SmartScreen overview](microsoft-defender-smartscreen-overview.md) - [Available Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge](/microsoft-edge/deploy/available-policies) - From 20e961253826447df56cf7c09fe8a46d46242295 Mon Sep 17 00:00:00 2001 From: Hiroshi Yoshioka <40815708+hyoshioka0128@users.noreply.github.com> Date: Tue, 24 Nov 2020 00:05:35 +0900 Subject: [PATCH 094/958] =?UTF-8?q?Typo=20"**pass@word1**"=E2=86=92"**pass?= =?UTF-8?q?\@word1**"?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bold with escape characters related #8689 https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-cm/deploy-windows-10-using-pxe-and-configuration-manager --- .../deploy-windows-10-using-pxe-and-configuration-manager.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/deployment/deploy-windows-cm/deploy-windows-10-using-pxe-and-configuration-manager.md b/windows/deployment/deploy-windows-cm/deploy-windows-10-using-pxe-and-configuration-manager.md index a5ea3f78c2..bbc562e930 100644 --- a/windows/deployment/deploy-windows-cm/deploy-windows-10-using-pxe-and-configuration-manager.md +++ b/windows/deployment/deploy-windows-cm/deploy-windows-10-using-pxe-and-configuration-manager.md @@ -51,7 +51,7 @@ All server and client computers referenced in this guide are on the same subnet. ## Procedures 1. Start the PC0001 computer. At the Pre-Boot Execution Environment (PXE) boot menu, press **Enter** to allow it to PXE boot. -2. On the **Welcome to the Task Sequence Wizard** page, type in the password **pass@word1** and click **Next**. +2. On the **Welcome to the Task Sequence Wizard** page, type in the password **pass\@word1** and click **Next**. 3. On the **Select a task sequence to run** page, select **Windows 10 Enterprise x64 RTM** and click **Next**. 4. On the **Edit Task Sequence Variables** page, double-click the **OSDComputerName** variable, and in the **Value** field, type **PC0001** and click **OK**. Then click **Next**. 5. The operating system deployment will take several minutes to complete. @@ -99,4 +99,4 @@ Next, see [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Ma [Add drivers to a Windows 10 deployment with Windows PE using Configuration Manager](add-drivers-to-a-windows-10-deployment-with-windows-pe-using-configuration-manager.md)
    [Create a task sequence with Configuration Manager and MDT](../deploy-windows-mdt/create-a-task-sequence-with-configuration-manager-and-mdt.md)
    [Refresh a Windows 7 SP1 client with Windows 10 using Configuration Manager](refresh-a-windows-7-client-with-windows-10-using-configuration-manager.md)
    -[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)
    \ No newline at end of file +[Replace a Windows 7 SP1 client with Windows 10 using Configuration Manager](replace-a-windows-7-client-with-windows-10-using-configuration-manager.md)
    From 4e6e9cdaa7d939250441c427a5ba8544bf99d371 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 23 Nov 2020 11:21:59 -0800 Subject: [PATCH 095/958] Added EnhancedStorage policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 6 + .../policy-configuration-service-provider.md | 23 + .../mdm/policy-csp-admx-enhancedstorage.md | 476 ++++++++++++++++++ 4 files changed, 506 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-enhancedstorage.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 90fe63842c..f48b6b25c6 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -188,6 +188,7 @@ #### [ADMX_DWM](policy-csp-admx-dwm.md) #### [ADMX_EAIME](policy-csp-admx-eaime.md) #### [ADMX_EncryptFilesonMove](policy-csp-admx-encryptfilesonmove.md) +#### [ADMX_EnhancedStorage](policy-csp-admx-enhancedstorage.md) #### [ADMX_EventForwarding](policy-csp-admx-eventforwarding.md) #### [ADMX_FileServerVSSProvider](policy-csp-admx-fileservervssprovider.md) #### [ADMX_FileSys](policy-csp-admx-filesys.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index fb21f97424..89cd14d38c 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -129,6 +129,12 @@ ms.date: 10/08/2020 - [ADMX_EAIME/L_TurnOnLiveStickers](./policy-csp-admx-eaime.md#admx-eaime-l-turnonlivestickers) - [ADMX_EAIME/L_TurnOnMisconversionLoggingForMisconversionReport](./policy-csp-admx-eaime.md#admx-eaime-l-turnonmisconversionloggingformisconversionreport) - [ADMX_EncryptFilesonMove/NoEncryptOnMove](./policy-csp-admx-encryptfilesonmove.md#admx-encryptfilesonmove-noencryptonmove) +- [ADMX_EnhancedStorage/ApprovedEnStorDevices](./policy-csp-admx-enhancedstorage.md#admx-enhancedstorage-approvedenstordevices) +- [ADMX_EnhancedStorage/ApprovedSilos](./policy-csp-admx-enhancedstorage.md#admx-enhancedstorage-approvedsilos) +- [ADMX_EnhancedStorage/DisablePasswordAuthentication](./policy-csp-admx-enhancedstorage.md#admx-enhancedstorage-disablepasswordauthentication) +- [ADMX_EnhancedStorage/DisallowLegacyDiskDevices](./policy-csp-admx-enhancedstorage.md#admx-enhancedstorage-disallowlegacydiskdevices) +- [ADMX_EnhancedStorage/LockDeviceOnMachineLock](./policy-csp-admx-enhancedstorage.md#admx-enhancedstorage-lockdeviceonmachinelock) +- [ADMX_EnhancedStorage/RootHubConnectedEnStorDevices](./policy-csp-admx-enhancedstorage.md#admx-enhancedstorage-roothubconnectedenstordevices) - [ADMX_EventForwarding/ForwarderResourceUsage](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-forwarderresourceusage) - [ADMX_EventForwarding/SubscriptionManager](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-subscriptionmanager) - [ADMX_FileServerVSSProvider/Pol_EncryptProtocol](./policy-csp-admx-fileservervssprovider.md#admx-fileservervssprovider-pol-encryptprotocol) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 83c2c8ba65..19db657bac 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -569,6 +569,29 @@ The following diagram shows the Policy configuration service provider in tree fo +### ADMX_EnhancedStorage policies + +
    +
    + ADMX_EnhancedStorage/ApprovedEnStorDevices +
    +
    + ADMX_EnhancedStorage/ApprovedSilos +
    +
    + ADMX_EnhancedStorage/DisablePasswordAuthentication +
    +
    + ADMX_EnhancedStorage/DisallowLegacyDiskDevices +
    +
    + ADMX_EnhancedStorage/LockDeviceOnMachineLock +
    +
    + ADMX_EnhancedStorage/RootHubConnectedEnStorDevices +
    +
    + ### ADMX_EventForwarding policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-enhancedstorage.md b/windows/client-management/mdm/policy-csp-admx-enhancedstorage.md new file mode 100644 index 0000000000..4e1cf740ae --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-enhancedstorage.md @@ -0,0 +1,476 @@ +--- +title: Policy CSP - ADMX_EnhancedStorage +description: Policy CSP - ADMX_EnhancedStorage +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/23/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_EnhancedStorage +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_EnhancedStorage policies + +
    +
    + ADMX_EnhancedStorage/ApprovedEnStorDevices +
    +
    + ADMX_EnhancedStorage/ApprovedSilos +
    +
    + ADMX_EnhancedStorage/DisablePasswordAuthentication +
    +
    + ADMX_EnhancedStorage/DisallowLegacyDiskDevices +
    +
    + ADMX_EnhancedStorage/LockDeviceOnMachineLock +
    +
    + ADMX_EnhancedStorage/RootHubConnectedEnStorDevices +
    +
    + + +
    + + +**ADMX_EnhancedStorage/ApprovedEnStorDevices** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure a list of Enhanced Storage devices by manufacturer and product ID that are usable on your computer. + +If you enable this policy setting, only Enhanced Storage devices that contain a manufacturer and product ID specified in this policy are usable on your computer. + +If you disable or do not configure this policy setting, all Enhanced Storage devices are usable on your computer. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure list of Enhanced Storage devices usable on your computer* +- GP name: *ApprovedEnStorDevices* +- GP path: *System\Enhanced Storage Access* +- GP ADMX file name: *EnhancedStorage.admx* + + + +
    + + +**ADMX_EnhancedStorage/ApprovedSilos** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to create a list of IEEE 1667 silos, compliant with the Institute of Electrical and Electronics Engineers, Inc. (IEEE) 1667 specification, that are usable on your computer. + +If you enable this policy setting, only IEEE 1667 silos that match a silo type identifier specified in this policy are usable on your computer. + +If you disable or do not configure this policy setting, all IEEE 1667 silos on Enhanced Storage devices are usable on your computer. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure list of IEEE 1667 silos usable on your computer* +- GP name: *ApprovedSilos* +- GP path: *System\Enhanced Storage Access* +- GP ADMX file name: *EnhancedStorage.admx* + + + +
    + + +**ADMX_EnhancedStorage/DisablePasswordAuthentication** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures whether or not a password can be used to unlock an Enhanced Storage device. + +If you enable this policy setting, a password cannot be used to unlock an Enhanced Storage device. + +If you disable or do not configure this policy setting, a password can be used to unlock an Enhanced Storage device. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not allow password authentication of Enhanced Storage devices* +- GP name: *DisablePasswordAuthentication* +- GP path: *System\Enhanced Storage Access* +- GP ADMX file name: *EnhancedStorage.admx* + + + +
    + + +**ADMX_EnhancedStorage/DisallowLegacyDiskDevices** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures whether or not non-Enhanced Storage removable devices are allowed on your computer. + +If you enable this policy setting, non-Enhanced Storage removable devices are not allowed on your computer. + +If you disable or do not configure this policy setting, non-Enhanced Storage removable devices are allowed on your computer. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not allow non-Enhanced Storage removable devices* +- GP name: *DisallowLegacyDiskDevices* +- GP path: *System\Enhanced Storage Access* +- GP ADMX file name: *EnhancedStorage.admx* + + + +
    + + +**ADMX_EnhancedStorage/LockDeviceOnMachineLock** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting locks Enhanced Storage devices when the computer is locked. + +This policy setting is supported in Windows Server SKUs only. + +If you enable this policy setting, the Enhanced Storage device remains locked when the computer is locked. + +If you disable or do not configure this policy setting, the Enhanced Storage device state is not changed when the computer is locked. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Lock Enhanced Storage when the computer is locked* +- GP name: *LockDeviceOnMachineLock* +- GP path: *System\Enhanced Storage Access* +- GP ADMX file name: *EnhancedStorage.admx* + + + +
    + + +**ADMX_EnhancedStorage/RootHubConnectedEnStorDevices** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures whether or not only USB root hub connected Enhanced Storage devices are allowed. Allowing only root hub connected Enhanced Storage devices minimizes the risk of an unauthorized USB device reading data on an Enhanced Storage device. + +If you enable this policy setting, only USB root hub connected Enhanced Storage devices are allowed. + +If you disable or do not configure this policy setting, USB Enhanced Storage devices connected to both USB root hubs and non-root hubs will be allowed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow only USB root hub connected Enhanced Storage devices* +- GP name: *RootHubConnectedEnStorDevices* +- GP path: *System\Enhanced Storage Access* +- GP ADMX file name: *EnhancedStorage.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 0994f74a6ec435bd52e4043d30c2718dccd5b187 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 23 Nov 2020 16:32:24 -0800 Subject: [PATCH 096/958] Added ErrorReporting policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 29 + .../policy-configuration-service-provider.md | 92 + .../mdm/policy-csp-admx-errorreporting.md | 2202 +++++++++++++++++ 4 files changed, 2324 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-errorreporting.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index f48b6b25c6..559f7b27a5 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -189,6 +189,7 @@ #### [ADMX_EAIME](policy-csp-admx-eaime.md) #### [ADMX_EncryptFilesonMove](policy-csp-admx-encryptfilesonmove.md) #### [ADMX_EnhancedStorage](policy-csp-admx-enhancedstorage.md) +#### [ADMX_ErrorReporting](policy-csp-admx-errorreporting.md) #### [ADMX_EventForwarding](policy-csp-admx-eventforwarding.md) #### [ADMX_FileServerVSSProvider](policy-csp-admx-fileservervssprovider.md) #### [ADMX_FileSys](policy-csp-admx-filesys.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 89cd14d38c..4d5d2f3728 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -135,6 +135,35 @@ ms.date: 10/08/2020 - [ADMX_EnhancedStorage/DisallowLegacyDiskDevices](./policy-csp-admx-enhancedstorage.md#admx-enhancedstorage-disallowlegacydiskdevices) - [ADMX_EnhancedStorage/LockDeviceOnMachineLock](./policy-csp-admx-enhancedstorage.md#admx-enhancedstorage-lockdeviceonmachinelock) - [ADMX_EnhancedStorage/RootHubConnectedEnStorDevices](./policy-csp-admx-enhancedstorage.md#admx-enhancedstorage-roothubconnectedenstordevices) +- [ADMX_ErrorReporting/PCH_AllOrNoneDef](./policy-csp-admx-errorreporting.md#admx-errorreporting-pch-allornonedef) +- [ADMX_ErrorReporting/PCH_AllOrNoneEx](./policy-csp-admx-errorreporting.md#admx-errorreporting-pch-allornoneex) +- [ADMX_ErrorReporting/PCH_AllOrNoneInc](./policy-csp-admx-errorreporting.md#admx-errorreporting-pch-allornoneinc) +- [ADMX_ErrorReporting/PCH_ConfigureReport](./policy-csp-admx-errorreporting.md#admx-errorreporting-pch-configurereport) +- [ADMX_ErrorReporting/PCH_ReportOperatingSystemFaults](./policy-csp-admx-errorreporting.md#admx-errorreporting-pch-reportoperatingsystemfaults) +- [ADMX_ErrorReporting/WerArchive_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werarchive-1) +- [ADMX_ErrorReporting/WerArchive_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-werarchive-2) +- [ADMX_ErrorReporting/WerAutoApproveOSDumps_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werautoapproveosdumps-1) +- [ADMX_ErrorReporting/WerAutoApproveOSDumps_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-werautoapproveosdumps-2) +- [ADMX_ErrorReporting/WerBypassDataThrottling_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werbypassdatathrottling-1) +- [ADMX_ErrorReporting/WerBypassDataThrottling_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-werbypassdatathrottling-2) +- [ADMX_ErrorReporting/WerBypassNetworkCostThrottling_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werbypassnetworkcostthrottling-1) +- [ADMX_ErrorReporting/WerBypassNetworkCostThrottling_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-werbypassnetworkcostthrottling-2) +- [ADMX_ErrorReporting/WerBypassPowerThrottling_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werbypasspowerthrottling-1) +- [ADMX_ErrorReporting/WerBypassPowerThrottling_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-werbypasspowerthrottling-2) +- [ADMX_ErrorReporting/WerCER](./policy-csp-admx-errorreporting.md#admx-errorreporting-wercer) +- [ADMX_ErrorReporting/WerConsentCustomize_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werconsentcustomize-1) +- [ADMX_ErrorReporting/WerConsentOverride_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werconsentoverride-1) +- [ADMX_ErrorReporting/WerConsentOverride_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-werconsentoverride-2) +- [ADMX_ErrorReporting/WerDefaultConsent_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werdefaultconsent-1) +- [ADMX_ErrorReporting/WerDefaultConsent_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-werdefaultconsent-2) +- [ADMX_ErrorReporting/WerDisable_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werdisable-1) +- [ADMX_ErrorReporting/WerExlusion_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werexlusion-1) +- [ADMX_ErrorReporting/WerExlusion_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-werexlusion-2) +- [ADMX_ErrorReporting/WerNoLogging_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-wernologging-1) +- [ADMX_ErrorReporting/WerNoLogging_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-wernologging-2) +- [ADMX_ErrorReporting/WerNoSecondLevelData_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-wernosecondleveldata-1) +- [ADMX_ErrorReporting/WerQueue_1](./policy-csp-admx-errorreporting.md#admx-errorreporting-werqueue-1) +- [ADMX_ErrorReporting/WerQueue_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-werqueue-2) - [ADMX_EventForwarding/ForwarderResourceUsage](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-forwarderresourceusage) - [ADMX_EventForwarding/SubscriptionManager](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-subscriptionmanager) - [ADMX_FileServerVSSProvider/Pol_EncryptProtocol](./policy-csp-admx-fileservervssprovider.md#admx-fileservervssprovider-pol-encryptprotocol) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 19db657bac..9a2bc98925 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -592,6 +592,98 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_ErrorReporting policies + +
    +
    + ADMX_ErrorReporting/PCH_AllOrNoneDef +
    +
    + ADMX_ErrorReporting/PCH_AllOrNoneEx +
    +
    + ADMX_ErrorReporting/PCH_AllOrNoneInc +
    +
    + ADMX_ErrorReporting/PCH_ConfigureReport +
    +
    + ADMX_ErrorReporting/PCH_ReportOperatingSystemFaults +
    +
    + ADMX_ErrorReporting/WerArchive_1 +
    +
    + ADMX_ErrorReporting/WerArchive_2 +
    +
    + ADMX_ErrorReporting/WerAutoApproveOSDumps_1 +
    +
    + ADMX_ErrorReporting/WerAutoApproveOSDumps_2 +
    +
    + ADMX_ErrorReporting/WerBypassDataThrottling_1 +
    +
    + ADMX_ErrorReporting/WerBypassDataThrottling_2 +
    +
    + ADMX_ErrorReporting/WerBypassNetworkCostThrottling_1 +
    +
    + ADMX_ErrorReporting/WerBypassNetworkCostThrottling_2 +
    +
    + ADMX_ErrorReporting/WerBypassPowerThrottling_1 +
    +
    + ADMX_ErrorReporting/WerBypassPowerThrottling_2 +
    +
    + ADMX_ErrorReporting/WerCER +
    +
    + ADMX_ErrorReporting/WerConsentCustomize_1 +
    +
    + ADMX_ErrorReporting/WerConsentOverride_1 +
    +
    + ADMX_ErrorReporting/WerConsentOverride_2 +
    +
    + ADMX_ErrorReporting/WerDefaultConsent_1 +
    +
    + ADMX_ErrorReporting/WerDefaultConsent_2 +
    +
    + ADMX_ErrorReporting/WerDisable_1 +
    +
    + ADMX_ErrorReporting/WerExlusion_1 +
    +
    + ADMX_ErrorReporting/WerExlusion_2 +
    +
    + ADMX_ErrorReporting/WerNoLogging_1 +
    +
    + ADMX_ErrorReporting/WerNoLogging_2 +
    +
    + ADMX_ErrorReporting/WerNoSecondLevelData_1 +
    +
    + ADMX_ErrorReporting/WerQueue_1 +
    +
    + ADMX_ErrorReporting/WerQueue_2 +
    +
    + ### ADMX_EventForwarding policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-errorreporting.md b/windows/client-management/mdm/policy-csp-admx-errorreporting.md new file mode 100644 index 0000000000..5b37b35bbd --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-errorreporting.md @@ -0,0 +1,2202 @@ +--- +title: Policy CSP - ADMX_ErrorReporting +description: Policy CSP - ADMX_ErrorReporting +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 11/23/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_ErrorReporting +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_ErrorReporting policies + +
    +
    + ADMX_ErrorReporting/PCH_AllOrNoneDef +
    +
    + ADMX_ErrorReporting/PCH_AllOrNoneEx +
    +
    + ADMX_ErrorReporting/PCH_AllOrNoneInc +
    +
    + ADMX_ErrorReporting/PCH_ConfigureReport +
    +
    + ADMX_ErrorReporting/PCH_ReportOperatingSystemFaults +
    +
    + ADMX_ErrorReporting/WerArchive_1 +
    +
    + ADMX_ErrorReporting/WerArchive_2 +
    +
    + ADMX_ErrorReporting/WerAutoApproveOSDumps_1 +
    +
    + ADMX_ErrorReporting/WerAutoApproveOSDumps_2 +
    +
    + ADMX_ErrorReporting/WerBypassDataThrottling_1 +
    +
    + ADMX_ErrorReporting/WerBypassDataThrottling_2 +
    +
    + ADMX_ErrorReporting/WerBypassNetworkCostThrottling_1 +
    +
    + ADMX_ErrorReporting/WerBypassNetworkCostThrottling_2 +
    +
    + ADMX_ErrorReporting/WerBypassPowerThrottling_1 +
    +
    + ADMX_ErrorReporting/WerBypassPowerThrottling_2 +
    +
    + ADMX_ErrorReporting/WerCER +
    +
    + ADMX_ErrorReporting/WerConsentCustomize_1 +
    +
    + ADMX_ErrorReporting/WerConsentOverride_1 +
    +
    + ADMX_ErrorReporting/WerConsentOverride_2 +
    +
    + ADMX_ErrorReporting/WerDefaultConsent_1 +
    +
    + ADMX_ErrorReporting/WerDefaultConsent_2 +
    +
    + ADMX_ErrorReporting/WerDisable_1 +
    +
    + ADMX_ErrorReporting/WerExlusion_1 +
    +
    + ADMX_ErrorReporting/WerExlusion_2 +
    +
    + ADMX_ErrorReporting/WerNoLogging_1 +
    +
    + ADMX_ErrorReporting/WerNoLogging_2 +
    +
    + ADMX_ErrorReporting/WerNoSecondLevelData_1 +
    +
    + ADMX_ErrorReporting/WerQueue_1 +
    +
    + ADMX_ErrorReporting/WerQueue_2 +
    +
    + + +
    + + +**ADMX_ErrorReporting/PCH_AllOrNoneDef** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether errors in general applications are included in reports when Windows Error Reporting is enabled. + +If you enable this policy setting, you can instruct Windows Error Reporting in the Default pull-down menu to report either all application errors (the default setting), or no application errors. + +If the Report all errors in Microsoft applications check box is filled, all errors in Microsoft applications are reported, regardless of the setting in the Default pull-down menu. When the Report all errors in Windows check box is filled, all errors in Windows applications are reported, regardless of the setting in the Default dropdown list. The Windows applications category is a subset of Microsoft applications. + +If you disable or do not configure this policy setting, users can enable or disable Windows Error Reporting in Control Panel. The default setting in Control Panel is Upload all applications. + +This policy setting is ignored if the Configure Error Reporting policy setting is disabled or not configured. + +For related information, see the Configure Error Reporting and Report Operating System Errors policy settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Default application reporting settings* +- GP name: *PCH_AllOrNoneDef* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/PCH_AllOrNoneEx** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Windows Error Reporting behavior for errors in general applications when Windows Error Reporting is turned on. + +If you enable this policy setting, you can create a list of applications that are never included in error reports. To create a list of applications for which Windows Error Reporting never reports errors, click Show under the Exclude errors for applications on this list setting, and then add or remove applications from the list of application file names in the Show Contents dialog box (example: notepad.exe). File names must always include the .exe file name extension. Errors that are generated by applications in this list are not reported, even if the Default Application Reporting Settings policy setting is configured to report all application errors. + +If this policy setting is enabled, the Exclude errors for applications on this list setting takes precedence. If an application is listed both in the List of applications to always report errors for policy setting, and in the exclusion list in this policy setting, the application is excluded from error reporting. You can also use the exclusion list in this policy setting to exclude specific Microsoft applications or parts of Windows if the check boxes for these categories are filled in the Default application reporting settings policy setting. + +If you disable or do not configure this policy setting, the Default application reporting settings policy setting takes precedence. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *List of applications to never report errors for* +- GP name: *PCH_AllOrNoneEx* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/PCH_AllOrNoneInc** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies applications for which Windows Error Reporting should always report errors. + +To create a list of applications for which Windows Error Reporting never reports errors, click Show under the Exclude errors for applications on this list setting, and then add or remove applications from the list of application file names in the Show Contents dialog box (example: notepad.exe). Errors that are generated by applications in this list are not reported, even if the Default Application Reporting Settings policy setting is configured to report all application errors. + +If you enable this policy setting, you can create a list of applications that are always included in error reporting. To add applications to the list, click Show under the Report errors for applications on this list setting, and edit the list of application file names in the Show Contents dialog box. The file names must include the .exe file name extension (for example, notepad.exe). Errors that are generated by applications on this list are always reported, even if the Default dropdown in the Default application reporting policy setting is set to report no application errors. + +If the Report all errors in Microsoft applications or Report all errors in Windows components check boxes in the Default Application Reporting policy setting are filled, Windows Error Reporting reports errors as if all applications in these categories were added to the list in this policy setting. (Note: The Microsoft applications category includes the Windows components category.) + +If you disable this policy setting or do not configure it, the Default application reporting settings policy setting takes precedence. + +Also see the "Default Application Reporting" and "Application Exclusion List" policies. + +This setting will be ignored if the 'Configure Error Reporting' setting is disabled or not configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *List of applications to always report errors for* +- GP name: *PCH_AllOrNoneInc* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/PCH_ConfigureReport** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures how errors are reported to Microsoft, and what information is sent when Windows Error Reporting is enabled. + +This policy setting does not enable or disable Windows Error Reporting. To turn Windows Error Reporting on or off, see the Turn off Windows Error Reporting policy setting in Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings. + +> [!IMPORTANT] +> If the Turn off Windows Error Reporting policy setting is not configured, then Control Panel settings for Windows Error Reporting override this policy setting. + +If you enable this policy setting, the setting overrides any user changes made to Windows Error Reporting settings in Control Panel, and default values are applied for any Windows Error Reporting policy settings that are not configured (even if users have changed settings by using Control Panel). If you enable this policy setting, you can configure the following settings in the policy setting: + +- "Do not display links to any Microsoft ‘More information’ websites": Select this option if you do not want error dialog boxes to display links to Microsoft websites. + +- "Do not collect additional files": Select this option if you do not want additional files to be collected and included in error reports. + +- "Do not collect additional computer data": Select this if you do not want additional information about the computer to be collected and included in error reports. + +- "Force queue mode for application errors": Select this option if you do not want users to report errors. When this option is selected, errors are stored in a queue directory, and the next administrator to log on to the computer can send the error reports to Microsoft. + +- "Corporate file path": Type a UNC path to enable Corporate Error Reporting. All errors are stored at the specified location instead of being sent directly to Microsoft, and the next administrator to log onto the computer can send the error reports to Microsoft. + +- "Replace instances of the word ‘Microsoft’ with": You can specify text with which to customize your error report dialog boxes. The word ""Microsoft"" is replaced with the specified text. + +If you do not configure this policy setting, users can change Windows Error Reporting settings in Control Panel. By default, these settings are Enable Reporting on computers that are running Windows XP, and Report to Queue on computers that are running Windows Server 2003. + +If you disable this policy setting, configuration settings in the policy setting are left blank. + +See related policy settings Display Error Notification (same folder as this policy setting), and Turn off Windows Error Reporting in Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Error Reporting* +- GP name: *PCH_ConfigureReport* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/PCH_ReportOperatingSystemFaults** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether errors in the operating system are included Windows Error Reporting is enabled. + +If you enable this policy setting, Windows Error Reporting includes operating system errors. + +If you disable this policy setting, operating system errors are not included in error reports. + +If you do not configure this policy setting, users can change this setting in Control Panel. By default, Windows Error Reporting settings in Control Panel are set to upload operating system errors. + +See also the Configure Error Reporting policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Report operating system errors* +- GP name: *PCH_ReportOperatingSystemFaults* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerArchive_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the behavior of the Windows Error Reporting archive. + +If you enable this policy setting, you can configure Windows Error Reporting archiving behavior. If Archive behavior is set to Store all, all data collected for each error report is stored in the appropriate location. If Archive behavior is set to Store parameters only, only the minimum information required to check for an existing solution is stored. The Maximum number of reports to store setting determines how many reports are stored before older reports are automatically deleted. + +If you disable or do not configure this policy setting, no Windows Error Reporting information is stored. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Report Archive* +- GP name: *WerArchive_1* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerArchive_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the behavior of the Windows Error Reporting archive. + +If you enable this policy setting, you can configure Windows Error Reporting archiving behavior. If Archive behavior is set to Store all, all data collected for each error report is stored in the appropriate location. If Archive behavior is set to Store parameters only, only the minimum information required to check for an existing solution is stored. The Maximum number of reports to store setting determines how many reports are stored before older reports are automatically deleted. + +If you disable or do not configure this policy setting, no Windows Error Reporting information is stored. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Report Archive* +- GP name: *WerArchive_2* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerAutoApproveOSDumps_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether memory dumps in support of OS-generated error reports can be sent to Microsoft automatically. This policy does not apply to error reports generated by 3rd-party products, or additional data other than memory dumps. + +If you enable or do not configure this policy setting, any memory dumps generated for error reports by Microsoft Windows are automatically uploaded, without notification to the user. + +If you disable this policy setting, then all memory dumps are uploaded according to the default consent and notification settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Automatically send memory dumps for OS-generated error reports* +- GP name: *WerAutoApproveOSDumps_1* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerAutoApproveOSDumps_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether memory dumps in support of OS-generated error reports can be sent to Microsoft automatically. This policy does not apply to error reports generated by 3rd-party products, or additional data other than memory dumps. + +If you enable or do not configure this policy setting, any memory dumps generated for error reports by Microsoft Windows are automatically uploaded, without notification to the user. + +If you disable this policy setting, then all memory dumps are uploaded according to the default consent and notification settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Automatically send memory dumps for OS-generated error reports* +- GP name: *WerAutoApproveOSDumps_2* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerBypassDataThrottling_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Windows Error Reporting (WER) sends additional, second-level report data even if a CAB file containing data about the same event types has already been uploaded to the server. + +If you enable this policy setting, WER does not throttle data; that is, WER uploads additional CAB files that can contain data about the same event types as an earlier uploaded report. + +If you disable or do not configure this policy setting, WER throttles data by default; that is, WER does not upload more than one CAB file for a report that contains data about the same event types. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not throttle additional data* +- GP name: *WerBypassDataThrottling_1* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerBypassDataThrottling_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Windows Error Reporting (WER) sends additional, second-level report data even if a CAB file containing data about the same event types has already been uploaded to the server. + +If you enable this policy setting, WER does not throttle data; that is, WER uploads additional CAB files that can contain data about the same event types as an earlier uploaded report. + +If you disable or do not configure this policy setting, WER throttles data by default; that is, WER does not upload more than one CAB file for a report that contains data about the same event types. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not throttle additional data* +- GP name: *WerBypassDataThrottling_2* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerBypassNetworkCostThrottling_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Windows Error Reporting (WER) checks for a network cost policy that restricts the amount of data that is sent over the network. + +If you enable this policy setting, WER does not check for network cost policy restrictions, and transmits data even if network cost is restricted. + +If you disable or do not configure this policy setting, WER does not send data, but will check the network cost policy again if the network profile is changed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Send data when on connected to a restricted/costed network* +- GP name: *WerBypassNetworkCostThrottling_1* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerBypassNetworkCostThrottling_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Windows Error Reporting (WER) checks for a network cost policy that restricts the amount of data that is sent over the network. + +If you enable this policy setting, WER does not check for network cost policy restrictions, and transmits data even if network cost is restricted. + +If you disable or do not configure this policy setting, WER does not send data, but will check the network cost policy again if the network profile is changed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Send data when on connected to a restricted/costed network* +- GP name: *WerBypassNetworkCostThrottling_2* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerBypassPowerThrottling_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Windows Error Reporting (WER) checks if the computer is running on battery power. By default, when a computer is running on battery power, WER only checks for solutions, but does not upload additional report data until the computer is connected to a more permanent power source. + +If you enable this policy setting, WER does not determine whether the computer is running on battery power, but checks for solutions and uploads report data normally. + +If you disable or do not configure this policy setting, WER checks for solutions while a computer is running on battery power, but does not upload report data until the computer is connected to a more permanent power source. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Send additional data when on battery power* +- GP name: *WerBypassPowerThrottling_1* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerBypassPowerThrottling_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether Windows Error Reporting (WER) checks if the computer is running on battery power. By default, when a computer is running on battery power, WER only checks for solutions, but does not upload additional report data until the computer is connected to a more permanent power source. + +If you enable this policy setting, WER does not determine whether the computer is running on battery power, but checks for solutions and uploads report data normally. + +If you disable or do not configure this policy setting, WER checks for solutions while a computer is running on battery power, but does not upload report data until the computer is connected to a more permanent power source. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Send additional data when on battery power* +- GP name: *WerBypassPowerThrottling_2* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerCER** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies a corporate server to which Windows Error Reporting sends reports (if you do not want to send error reports to Microsoft). + +If you enable this policy setting, you can specify the name or IP address of an error report destination server on your organization’s network. You can also select Connect using SSL to transmit error reports over a Secure Sockets Layer (SSL) connection, and specify a port number on the destination server for transmission. + +If you disable or do not configure this policy setting, Windows Error Reporting sends error reports to Microsoft. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Corporate Windows Error Reporting* +- GP name: *WerCER* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerConsentCustomize_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the consent behavior of Windows Error Reporting for specific event types. + +If you enable this policy setting, you can add specific event types to a list by clicking Show, and typing event types in the Value Name column of the Show Contents dialog box. Event types are those for generic, non-fatal errors: crash, no response, and kernel fault errors. For each specified event type, you can set a consent level of 0, 1, 2, 3, or 4. + +- 0 (Disable): Windows Error Reporting sends no data to Microsoft for this event type. + +- 1 (Always ask before sending data): Windows prompts the user for consent to send reports. + +- 2 (Send parameters): Windows Error Reporting automatically sends the minimum data required to check for an existing solution, and Windows prompts the user for consent to send any additional data requested by Microsoft. + +- 3 (Send parameters and safe additional data): Windows Error Reporting automatically sends the minimum data required to check for an existing solution, as well as data which Windows has determined (within a high probability) does not contain personally identifiable data, and prompts the user for consent to send any additional data requested by Microsoft. + +- 4 (Send all data): Any data requested by Microsoft is sent automatically. + +If you disable or do not configure this policy setting, then the default consent settings that are applied are those specified by the user in Control Panel, or in the Configure Default Consent policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Customize consent settings* +- GP name: *WerConsentCustomize_1* +- GP path: *Windows Components\Windows Error Reporting\Consent* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerConsentOverride_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the behavior of the Configure Default Consent setting in relation to custom consent settings. + +If you enable this policy setting, the default consent levels of Windows Error Reporting always override any other consent policy setting. + +If you disable or do not configure this policy setting, custom consent policy settings for error reporting determine the consent level for specified event types, and the default consent setting determines only the consent level of any other error reports. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Ignore custom consent settings* +- GP name: *WerConsentOverride_1* +- GP path: *Windows Components\Windows Error Reporting\Consent* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerConsentOverride_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the behavior of the Configure Default Consent setting in relation to custom consent settings. + +If you enable this policy setting, the default consent levels of Windows Error Reporting always override any other consent policy setting. + +If you disable or do not configure this policy setting, custom consent policy settings for error reporting determine the consent level for specified event types, and the default consent setting determines only the consent level of any other error reports. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Ignore custom consent settings* +- GP name: *WerConsentOverride_2* +- GP path: *Windows Components\Windows Error Reporting\Consent* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerDefaultConsent_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the default consent behavior of Windows Error Reporting. + +If you enable this policy setting, you can set the default consent handling for error reports. The following list describes the Consent level settings that are available in the pull-down menu in this policy setting: + +- Always ask before sending data: Windows prompts users for consent to send reports. + +- Send parameters: Only the minimum data that is required to check for an existing solution is sent automatically, and Windows prompts users for consent to send any additional data that is requested by Microsoft. + +- Send parameters and safe additional data: the minimum data that is required to check for an existing solution, along with data which Windows has determined (within a high probability) does not contain personally-identifiable information is sent automatically, and Windows prompts the user for consent to send any additional data that is requested by Microsoft. + +- Send all data: any error reporting data requested by Microsoft is sent automatically. + +If this policy setting is disabled or not configured, then the consent level defaults to the highest-privacy setting: Always ask before sending data. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Default consent* +- GP name: *WerDefaultConsent_1* +- GP path: *Windows Components\Windows Error Reporting\Consent* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerDefaultConsent_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the default consent behavior of Windows Error Reporting. + +If you enable this policy setting, you can set the default consent handling for error reports. The following list describes the Consent level settings that are available in the pull-down menu in this policy setting: + +- Always ask before sending data: Windows prompts users for consent to send reports. + +- Send parameters: Only the minimum data that is required to check for an existing solution is sent automatically, and Windows prompts users for consent to send any additional data that is requested by Microsoft. + +- Send parameters and safe additional data: the minimum data that is required to check for an existing solution, along with data which Windows has determined (within a high probability) does not contain personally-identifiable information is sent automatically, and Windows prompts the user for consent to send any additional data that is requested by Microsoft. + +- Send all data: any error reporting data requested by Microsoft is sent automatically. + +If this policy setting is disabled or not configured, then the consent level defaults to the highest-privacy setting: Always ask before sending data. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Default consent* +- GP name: *WerDefaultConsent_2* +- GP path: *Windows Components\Windows Error Reporting\Consent* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerDisable_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off Windows Error Reporting, so that reports are not collected or sent to either Microsoft or internal servers within your organization when software unexpectedly stops working or fails. + +If you enable this policy setting, Windows Error Reporting does not send any problem information to Microsoft. Additionally, solution information is not available in Security and Maintenance in Control Panel. + +If you disable or do not configure this policy setting, the Turn off Windows Error Reporting policy setting in Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings takes precedence. If Turn off Windows Error Reporting is also either disabled or not configured, user settings in Control Panel for Windows Error Reporting are applied. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disable Windows Error Reporting* +- GP name: *WerDisable_1* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerExlusion_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting limits Windows Error Reporting behavior for errors in general applications when Windows Error Reporting is turned on. + +If you enable this policy setting, you can create a list of applications that are never included in error reports. To create a list of applications for which Windows Error Reporting never reports errors, click Show, and then add or remove applications from the list of application file names in the Show Contents dialog box (example: notepad.exe). File names must always include the .exe file name extension. To remove an application from the list, click the name, and then press DELETE. If this policy setting is enabled, the Exclude errors for applications on this list setting takes precedence. + +If you disable or do not configure this policy setting, errors are reported on all Microsoft and Windows applications by default. + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *List of applications to be excluded* +- GP name: *WerExlusion_1* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerExlusion_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting limits Windows Error Reporting behavior for errors in general applications when Windows Error Reporting is turned on. + +If you enable this policy setting, you can create a list of applications that are never included in error reports. To create a list of applications for which Windows Error Reporting never reports errors, click Show, and then add or remove applications from the list of application file names in the Show Contents dialog box (example: notepad.exe). File names must always include the .exe file name extension. To remove an application from the list, click the name, and then press DELETE. If this policy setting is enabled, the Exclude errors for applications on this list setting takes precedence. + +If you disable or do not configure this policy setting, errors are reported on all Microsoft and Windows applications by default. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *List of applications to be excluded* +- GP name: *WerExlusion_2* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerNoLogging_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether Windows Error Reporting saves its own events and error messages to the system event log. + +If you enable this policy setting, Windows Error Reporting events are not recorded in the system event log. + +If you disable or do not configure this policy setting, Windows Error Reporting events and errors are logged to the system event log, as with other Windows-based programs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disable logging* +- GP name: *WerNoLogging_1* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerNoLogging_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether Windows Error Reporting saves its own events and error messages to the system event log. + +If you enable this policy setting, Windows Error Reporting events are not recorded in the system event log. + +If you disable or do not configure this policy setting, Windows Error Reporting events and errors are logged to the system event log, as with other Windows-based programs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disable logging* +- GP name: *WerNoLogging_2* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerNoSecondLevelData_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether additional data in support of error reports can be sent to Microsoft automatically. + +If you enable this policy setting, any additional data requests from Microsoft in response to a Windows Error Reporting report are automatically declined, without notification to the user. + +If you disable or do not configure this policy setting, then consent policy settings in Computer Configuration/Administrative Templates/Windows Components/Windows Error Reporting/Consent take precedence. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not send additional data* +- GP name: *WerNoSecondLevelData_1* +- GP path: *Windows Components\Windows Error Reporting* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerQueue_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the behavior of the Windows Error Reporting report queue. + +If you enable this policy setting, you can configure report queue behavior by using the controls in the policy setting. When the Queuing behavior pull-down list is set to Default, Windows determines, when a problem occurs, whether the report should be placed in the reporting queue, or the user should be prompted to send it immediately. When Queuing behavior is set to Always queue, all reports are added to the queue until the user is prompted to send the reports, or until the user sends problem reports by using the Solutions to Problems page in Control Panel. + +The Maximum number of reports to queue setting determines how many reports can be queued before older reports are automatically deleted. The setting for Number of days between solution check reminders determines the interval time between the display of system notifications that remind the user to check for solutions to problems. A value of 0 disables the reminder. + +If you disable or do not configure this policy setting, Windows Error Reporting reports are not queued, and users can only send reports at the time that a problem occurs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Report Queue* +- GP name: *WerQueue_1* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + + +**ADMX_ErrorReporting/WerQueue_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the behavior of the Windows Error Reporting report queue. + +If you enable this policy setting, you can configure report queue behavior by using the controls in the policy setting. When the Queuing behavior pull-down list is set to Default, Windows determines, when a problem occurs, whether the report should be placed in the reporting queue, or the user should be prompted to send it immediately. When Queuing behavior is set to Always queue, all reports are added to the queue until the user is prompted to send the reports, or until the user sends problem reports by using the Solutions to Problems page in Control Panel. If Queuing behavior is set to Always queue for administrator, reports are queued until an administrator is prompted to send them, or until the administrator sends them by using the Solutions to Problems page in Control Panel. + +The Maximum number of reports to queue setting determines how many reports can be queued before older reports are automatically deleted. The setting for Number of days between solution check reminders determines the interval time between the display of system notifications that remind the user to check for solutions to problems. A value of 0 disables the reminder. + +If you disable or do not configure this policy setting, Windows Error Reporting reports are not queued, and users can only send reports at the time that a problem occurs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure Report Queue* +- GP name: *WerQueue_2* +- GP path: *Windows Components\Windows Error Reporting\Advanced Error Reporting Settings* +- GP ADMX file name: *ErrorReporting.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From bd72e91c53680ab17b9443e579760e4333f4af45 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 23 Nov 2020 16:39:28 -0800 Subject: [PATCH 097/958] Fixed build warning --- .../mdm/policy-csp-admx-errorreporting.md | 58 +++++++++---------- 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-errorreporting.md b/windows/client-management/mdm/policy-csp-admx-errorreporting.md index 5b37b35bbd..1cad07a317 100644 --- a/windows/client-management/mdm/policy-csp-admx-errorreporting.md +++ b/windows/client-management/mdm/policy-csp-admx-errorreporting.md @@ -115,7 +115,7 @@ manager: dansimp
    -**ADMX_ErrorReporting/PCH_AllOrNoneDef** +**ADMX_ErrorReporting/PCH_AllOrNoneDef** @@ -190,7 +190,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/PCH_AllOrNoneEx** +**ADMX_ErrorReporting/PCH_AllOrNoneEx**
    @@ -261,7 +261,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/PCH_AllOrNoneInc** +**ADMX_ErrorReporting/PCH_AllOrNoneInc**
    @@ -338,7 +338,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/PCH_ConfigureReport** +**ADMX_ErrorReporting/PCH_ConfigureReport**
    @@ -428,7 +428,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/PCH_ReportOperatingSystemFaults** +**ADMX_ErrorReporting/PCH_ReportOperatingSystemFaults**
    @@ -501,7 +501,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerArchive_1** +**ADMX_ErrorReporting/WerArchive_1**
    @@ -570,7 +570,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerArchive_2** +**ADMX_ErrorReporting/WerArchive_2**
    @@ -639,7 +639,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerAutoApproveOSDumps_1** +**ADMX_ErrorReporting/WerAutoApproveOSDumps_1**
    @@ -708,7 +708,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerAutoApproveOSDumps_2** +**ADMX_ErrorReporting/WerAutoApproveOSDumps_2**
    @@ -777,7 +777,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerBypassDataThrottling_1** +**ADMX_ErrorReporting/WerBypassDataThrottling_1**
    @@ -846,7 +846,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerBypassDataThrottling_2** +**ADMX_ErrorReporting/WerBypassDataThrottling_2**
    @@ -915,7 +915,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerBypassNetworkCostThrottling_1** +**ADMX_ErrorReporting/WerBypassNetworkCostThrottling_1**
    @@ -984,7 +984,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerBypassNetworkCostThrottling_2** +**ADMX_ErrorReporting/WerBypassNetworkCostThrottling_2**
    @@ -1053,7 +1053,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerBypassPowerThrottling_1** +**ADMX_ErrorReporting/WerBypassPowerThrottling_1**
    @@ -1122,7 +1122,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerBypassPowerThrottling_2** +**ADMX_ErrorReporting/WerBypassPowerThrottling_2**
    @@ -1191,7 +1191,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerCER** +**ADMX_ErrorReporting/WerCER**
    @@ -1260,7 +1260,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerConsentCustomize_1** +**ADMX_ErrorReporting/WerConsentCustomize_1**
    @@ -1339,7 +1339,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerConsentOverride_1** +**ADMX_ErrorReporting/WerConsentOverride_1**
    @@ -1408,7 +1408,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerConsentOverride_2** +**ADMX_ErrorReporting/WerConsentOverride_2**
    @@ -1477,7 +1477,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerDefaultConsent_1** +**ADMX_ErrorReporting/WerDefaultConsent_1**
    @@ -1554,7 +1554,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerDefaultConsent_2** +**ADMX_ErrorReporting/WerDefaultConsent_2**
    @@ -1631,7 +1631,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerDisable_1** +**ADMX_ErrorReporting/WerDisable_1**
    @@ -1700,7 +1700,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerExlusion_1** +**ADMX_ErrorReporting/WerExlusion_1**
    @@ -1770,7 +1770,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerExlusion_2** +**ADMX_ErrorReporting/WerExlusion_2**
    @@ -1839,7 +1839,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerNoLogging_1** +**ADMX_ErrorReporting/WerNoLogging_1**
    @@ -1908,7 +1908,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerNoLogging_2** +**ADMX_ErrorReporting/WerNoLogging_2**
    @@ -1977,7 +1977,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerNoSecondLevelData_1** +**ADMX_ErrorReporting/WerNoSecondLevelData_1**
    @@ -2046,7 +2046,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerQueue_1** +**ADMX_ErrorReporting/WerQueue_1**
    @@ -2117,7 +2117,7 @@ ADMX Info:
    -**ADMX_ErrorReporting/WerQueue_2** +**ADMX_ErrorReporting/WerQueue_2**
    From 82609ee37dc9717083f5188d3aa24d791e389058 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 23 Nov 2020 16:45:10 -0800 Subject: [PATCH 098/958] Updated the scope of a policy --- windows/client-management/mdm/policy-csp-admx-errorreporting.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-admx-errorreporting.md b/windows/client-management/mdm/policy-csp-admx-errorreporting.md index 1cad07a317..a220ae0692 100644 --- a/windows/client-management/mdm/policy-csp-admx-errorreporting.md +++ b/windows/client-management/mdm/policy-csp-admx-errorreporting.md @@ -1159,7 +1159,7 @@ ADMX Info: [Scope](./policy-configuration-service-provider.md#policy-scope): > [!div class = "checklist"] -> * User +> * Device
    From 0ddd0680a8d51c6585cd7c50895068e37e229292 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 27 Nov 2020 22:58:34 +0500 Subject: [PATCH 099/958] Update windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 563ff883be..635c9794d1 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -75,7 +75,7 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput > [!NOTE] > You can also setup PIN recovery using configuration profiles. > 1. Sign in to Endpoint Manager. -> 2. Click **Devices** -> **Configuration Profiles** -> Create new profile or edit an existing profile using the Identity Protection profile type. +> 2. Click **Devices** -> **Configuration Profiles** -> Create a new profile or edit an existing profile using the Identity Protection profile type. > 3. Set **Enable PIN recovery** to **Yes**. #### Assign the PIN Reset Device configuration profile using Microsoft Intune From 51b02368410101d8d2d6b473cfbfc70a8f1ca539 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 1 Dec 2020 17:39:21 +0500 Subject: [PATCH 100/958] Update hello-hybrid-aadj-sso-cert.md --- .../hello-hybrid-aadj-sso-cert.md | 78 +++++++++---------- 1 file changed, 35 insertions(+), 43 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 1df6239643..fd03a08fc9 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -532,15 +532,12 @@ The Intune Certificate Connector application enables Microsoft Intune to enroll ### Download Intune Certificate Connector Sign-in a workstation with access equivalent to a _domain user_. -1. Sign-in to the [Azure Portal](https://portal.azure.com/). -2. Select **All Services**. Type **Intune** to filter the list of services. Click **Microsoft Intune**. -![Microsoft Intune Console](images/aadjcert/microsoftintuneconsole.png) -3. Select **Device Configuration**, and then select **Certificate Connectors**. -![Intune Certificate Authority](images/aadjcert/intunedeviceconfigurationcertauthority.png) -4. Click **Add**, and then click **Download the certificate connector software** under the **Steps to install connector for SCEP** section. -![Intune Download Certificate connector](images/aadjcert/intunedownloadcertconnector.png) -5. Save the downloaded file (NDESConnectorSetup.exe) to a location accessible from the NDES server. -6. Sign-out of the Azure Portal. +1. Sign-in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/). +2. Select **Tenant administration** > **Connectors and tokens** > **Certificate connectors** > **Add**. +3. Click **Download the certificate connector software** under the **Install Certificate Connectors** section. +![Intune Certificate Authority](images/aadjcert/profile01.png) +4. Save the downloaded file (NDESConnectorSetup.exe) to a location accessible from the NDES server. +5. Sign-out of the Microsoft Endpoint Manager admin center. ### Install the Intune Certificate Connector Sign-in the NDES server with access equivalent to _domain administrator_. @@ -639,47 +636,42 @@ Sign-in a workstation with access equivalent to a _domain user_. ### Create a SCEP Certificate Profile Sign-in a workstation with access equivalent to a _domain user_. -1. Sign-in to the [Azure Portal](https://portal.azure.com/). -2. Select **All Services**. Type **Intune** to filter the list of services. Click **Microsoft Intune**. -3. Select **Device Configuration**, and then click **Profiles**. -4. Select **Create Profile**. - ![Intune Device Configuration Create Profile](images/aadjcert/intunedeviceconfigurationcreateprofile.png) -5. Select **Windows 10 and later** from the **Platform** list. -6. Choose **SCEP certificate** from the **Profile** list, and select **Create**. -7. The **SCEP Certificate** wizard should open. Next to **Name**, type **WHFB Certificate Enrollment**. -8. Next to **Description**, provide a description meaningful for your environment, then select **Next**. -9. Select **User** as a certificate type. -10. Configure **Certificate validity period** to match your organization. +1. Sign-in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/). +2. Select **Devices**, and then click **Configuration Profiles**. +3. Select **Create Profile**. + ![Intune Device Configuration Create Profile](images/aadjcert/profile02.png) +4. Select **Windows 10 and later** from the **Platform** list. +5. Choose **SCEP certificate** from the **Profile** list, and select **Create**. +6. The **SCEP Certificate** wizard should open. Next to **Name**, type **WHFB Certificate Enrollment**. +7. Next to **Description**, provide a description meaningful for your environment, then select **Next**. +8. Select **User** as a certificate type. +9. Configure **Certificate validity period** to match your organization. > [!IMPORTANT] > Remember that you need to configure your certificate authority to allow Microsoft Intune to configure certificate validity. -11. Select **Enroll to Windows Hello for Business, otherwise fail (Windows 10 and later)** from the **Key storage provider (KSP)** list. -12. Select **Custom** from the **Subject name format** list. -13. Next to **Custom**, type **CN={{OnPrem_Distinguished_Name}}** to make the on-premises distinguished name the subject of the issued certificate. -14. Specify **User Principal Name (UPN)** as a **Subject Alternative Name** value. -15. Refer to the "Configure Certificate Templates on NDES" task for how you configured the **AADJ WHFB Authentication** certificate template in the registry. Select the appropriate combination of key usages from the **Key Usages** list that map to configured NDES template in the registry. In this example, the **AADJ WHFB Authentication** certificate template was added to the **SignatureTemplate** registry value name. The **Key usage** that maps to that registry value name is **Digital Signature**. -16. Select a previously configured **Trusted certificate** profile that matches the root certificate of the issuing certificate authority. - ![WHFB SCEP certificate profile Trusted Certificate selection](images/aadjcert/intunewhfbscepprofile-01.png) -17. Under **Extended key usage**, type **Smart Card Logon** under **Name**. Type **1.3.6.1.4.1.311.20.2.2** under **Object identifier**. Click **Add**. -18. Type a percentage (without the percent sign) next to **Renewal Threshold** to determine when the certificate should attempt to renew. The recommended value is **20**. - ![WHFB SCEP certificate Profile EKUs](images/aadjcert/intunewhfbscepprofile-03.png) -19. Under **SCEP Server URLs**, type the fully qualified external name of the Azure AD Application proxy you configured. Append to the name **/certsrv/mscep/mscep.dll**. For example, https://ndes-mtephendemo.msappproxy.net/certsrv/mscep/mscep.dll. Click **Add**. Repeat this step for each additional NDES Azure AD Application Proxy you configured to issue Windows Hello for Business certificates. Microsoft Intune round-robin load balances requests among the URLs listed in the SCEP certificate profile. -20. Click **Next**. -21. Click **Next** two more times to skip the **Scope tags** and **Assignments** steps of the wizard and click **Create**. +10. Select **Enroll to Windows Hello for Business, otherwise fail (Windows 10 and later)** from the **Key storage provider (KSP)** list. +11. Next to **Subject name format**, type **CN={{OnPrem_Distinguished_Name}}** to make the on-premises distinguished name the subject of the issued certificate. +12. Specify **User Principal Name (UPN)** as a **Subject Alternative Name** parameter. Set its value as {{UserPrincipalName}}. +13. Refer to the "Configure Certificate Templates on NDES" task for how you configured the **AADJ WHFB Authentication** certificate template in the registry. Select the appropriate combination of key usages from the **Key Usages** list that map to configured NDES template in the registry. In this example, the **AADJ WHFB Authentication** certificate template was added to the **SignatureTemplate** registry value name. The **Key usage** that maps to that registry value name is **Digital Signature**. +14. Select a previously configured **Trusted certificate** profile that matches the root certificate of the issuing certificate authority as a root certificate for the profile. +15. Under **Extended key usage**, type **Smart Card Logon** under **Name**. Type **1.3.6.1.4.1.311.20.2.2** under **Object identifier**. Click **Add**. +16. Type a percentage (without the percent sign) next to **Renewal Threshold** to determine when the certificate should attempt to renew. The recommended value is **20**. + ![WHFB SCEP certificate Profile EKUs](images/aadjcert/profile03.png) +17. Under **SCEP Server URLs**, type the fully qualified external name of the Azure AD Application proxy you configured. Append to the name **/certsrv/mscep/mscep.dll**. For example, https://ndes-mtephendemo.msappproxy.net/certsrv/mscep/mscep.dll. Click **Add**. Repeat this step for each additional NDES Azure AD Application Proxy you configured to issue Windows Hello for Business certificates. Microsoft Intune round-robin load balances requests among the URLs listed in the SCEP certificate profile. +18. Click **Next**. +19. Click **Next** several times to skip the **Scope tags**, **Assignments** and **Applicability Rules** steps of the wizard and click **Create**. ### Assign Group to the WHFB Certificate Enrollment Certificate Profile Sign-in a workstation with access equivalent to a _domain user_. -1. Sign-in to the [Azure Portal](https://portal.azure.com/). -2. Select **All Services**. Type **Intune** to filter the list of services. Click **Microsoft Intune**. -3. Select **Device Configuration**, and then click **Profiles**. -4. Click **WHFB Certificate Enrollment**. -![WHFB Scep Profile landing](images/aadjcert/intunewhfbscepprofile-04.png) -5. Click **Assignments**. -6. In the **Assignments** pane, Click **Include**. Select **Selected Groups** from the **Assign to** list. Click **Select groups to include**. -![WHFB SCEP Profile Assignment](images/aadjcert/intunewhfbscepprofileassignment.png) -7. Select the **AADJ WHFB Certificate Users** group. Click **Select**. -8. Click **Save**. +1. Sign-in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/). +2. Select **Devices**, and then click **Configuration Profiles**. +3. Click **WHFB Certificate Enrollment**. +4. Select **Properties**, click **Edit** next to the **Assignments** section. +5. In the **Assignments** pane, select **Selected Groups** from the **Assign to** list. Click **Select groups to include**. +![WHFB SCEP Profile Assignment](images/aadjcert/profile04.png) +6. Select the **AADJ WHFB Certificate Users** group. Click **Select**. +7. Click **Review + Save**, and then **Save**. You have successfully completed the configuration. Add users that need to enroll a Windows Hello for Business authentication certificate to the **AADJ WHFB Certificate Users** group. This group, combined with the device enrollment Windows Hello for Business configuration prompts the user to enroll for Windows Hello for Business and enroll a certificate that can be used to authentication to on-premises resources. From 100d52533ac403847775b07c99b9d4088b797ff9 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Tue, 1 Dec 2020 17:42:55 +0500 Subject: [PATCH 101/958] Add files via upload --- .../images/aadjCert/profile01.png | Bin 0 -> 148568 bytes .../images/aadjCert/profile02.png | Bin 0 -> 56028 bytes .../images/aadjCert/profile03.png | Bin 0 -> 39460 bytes .../images/aadjCert/profile04.png | Bin 0 -> 22987 bytes 4 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/identity-protection/hello-for-business/images/aadjCert/profile01.png create mode 100644 windows/security/identity-protection/hello-for-business/images/aadjCert/profile02.png create mode 100644 windows/security/identity-protection/hello-for-business/images/aadjCert/profile03.png create mode 100644 windows/security/identity-protection/hello-for-business/images/aadjCert/profile04.png diff --git a/windows/security/identity-protection/hello-for-business/images/aadjCert/profile01.png b/windows/security/identity-protection/hello-for-business/images/aadjCert/profile01.png new file mode 100644 index 0000000000000000000000000000000000000000..46db47b6f00fa41afa58502726713d3435db0f80 GIT binary patch literal 148568 zcmZs?19V>D)-4>{wr$(C(O8YuIBA?ljh!@UY};yVCymwEY3$tH_T29~_aFZl!FciP z{a|6PIoJNGq9lz7hX)4&0)i+jBcTQY0%-yQ0`3k22E2m}vjzkF19ef876Yl8Bsc7&N$1gYT`ZQ8S1I@BV5A%1LE&$|zMkv|$<@VZaa$lNTVDy76|gQE&Hi zwS|N%;ks>#&&B;|-0<#u=C_F<7KFb4zaR1(@)zN=+%03AP?P`s>~{|)(DCe1bN|r=8zFj%F zLP$(`Z*3l)5kzb*u6@GNJ6O=9s?D7jyJ$OcV*aZAW6Zf2$ey zPXXp(ZAJnD6Z#`4%p`41G^8P*i?-OdP;kx;csIZpCWa zXYQTr*S&?%Ori)Kh$?x>f^c1Eo$$F^=QtCg5?l=hM-@f&vOMsA_U<~{Oob7?Ct0c0 zG{r*zs$=uEZ{;F0g}4JVHI6}FMw%C{kHrY0SfhH>+AoMYk%TM{o=CGMI^aJC_vX^@ zi33Z&?4iinN!)k9Z7e;X1tF20L$=e1ic#fKrlyIbT)omqx){pUN4;AYcD1*+F;>(S zu^!fQO6)(U|ET`~=a2|TCC}?9s?oN&{$fANi{4X6SQegs#uBM;eARbiXP7WmiPQ4l zo+g}vqPPh2`w^q3P+(QE0`x-D4YD$UKL^f+CZWBY?y>!EIN@DFMNnrbI;rc~I!Fv` z!+wWbIN`KFiuV`-Rca3w0tr5Z!3n#NErE z&u7ZE8Iy|94i)?9t>~RTBfjcN^cSMWA9FVAoD_TV zgEz~!q^C4quKEw=Rx4MZ@|g*J;xF(pxS5waBXB2!vPaO?qKpX6!TxS>Lr;$yvM$Yy z|Ewf)N4TojZj>oP4n8q~3K^RaB_*dK3ax5a3+80)*9c~!#0BXYv@(n9Tjpj@$tYp8 z;9de86|w!xh{HC)AG0j}lMUjFaz#7@DNhw`XmV%B&>ib^W4mG`p(DN;%D1YmvL>yw z1CXh7a>+HUY}42RXmJ>57y@X{D^fN29<{>H$(N@_Vwe8B`%QFcZ1q0Jd86AdbT_3A zOftgkmZAIwj8#$fTT^tc#kk$>`;ANqH92ZqH_nXgtz9wgf6pWhp$FWuUQLRU@uoq? zHV(Yv*h;%4+#YyrWV(m zy7O?~XqG~-Yp+P&q23g7jHbch?qEDg2{!w6FWD8&^VQOizshihn7a!iVl=CFvIdSq z)b~hT^@a{OQ_ zBBAD&=|g^^BSc`dUlkcaNf5vxTNduA65R!}!fnb)#9Pwv$_;eJIBPvQKD;+;oe+%B zZ01CfII5?Ei0udlLW;+{K%yl!%@+GO74^7H0C-rM$xf`!yeV9`&O0Ip1ZEAL@LHb9_(Le3y*19NuR(1Q_{}n3<>h=a5NFSlkpcVRbRDE9kE?@wL}xFX z593FVzl0A*#CtZDv64>rW^Wv>&z4||&0b+`Y5ajDf5ZGw-q@GVVSkNZUG~6!HFb7o z7jtv1{OG6P z1x+)%qxG+VkU%C3X95n}fF?5$5Qw>%c*%I_SB4y;es|-v>JU@w3y8%bjPYR+5RPC~ zC9YLFh}>G*mQH@HheM0Eri!m7pqUT5$_A}TXNUV!VcA*p4L&olr9m?Ay}#7-V<0p= zQomt-+QK$!xlB$>OTbEwv$50#@#lqz{|>~D>yzEFkoAALGI6Nond;5FC4xJ6IXonn z>FleBK79D=S@x%%e8@jxpE?nt%D(kj&Pu{(RP@5i$vkj#zRsZ%e#euyk)Z=+Rudw_ zd!I3HIDenU^Qn{Cnk;lg6JxS?MFtx`o1|qP{Z{mBqWrrZm(SwX_$O#;=^e`p^fN{{ zC@CtprC-S0yNIWV_cx3tDk9Wew2euH8yC&JVHf`5fm2U|4J$Nyj{z+8x>%1zN%3C| z-x?Zxls705p000yHA$lGe|JP6Yhttnlg?0ld$rYld5Csv6?=MubWKp7BkETCaOZIt z!(aDA68~5k$>qc%X4rDmY*djb;N+$X7{7YyaJM(tgER%^aCUXta(Bj*SGQtG$5rcA zJbSfUeCY&SXQV7q%RT2PxyZ?Kvn2nxyiY4Zfa6GaPs59`8_fa&PgU( zW4$q2b^S98@xM!H7&ZOPJlaj%7*J1>rosSRz<}tcx(Obe*Dd@I%7Bem#$YeSO1S%M zfau}^zJA$~RM||f0@W6LDPbzNG8=henf*2#rC9l!gs00{^~(upZM6R_Id55gQ9UDE zlvX3#Y+*Qh#)nw@kD9$5#(^(&WZSXJNjs#&+Tyrz7=HHH&9u4`TAL*~6{%nH5>t&n zcmHyxVfyM@TwVT!Ce?7TiQbW{slL?DFDX}^Qk{av9+b6xjM)tOXWgY&w#vl1wxJEE z+g?AVhP%0RhNB!V{XsaZNN4Mjmgj}dzN8{tKV|WG3%b`dzm1o7hI7bAc2ft4K@%Ku zTgG+~t@K#Y!ZlsYBRzwZu9z6Rz15fci)p-hxyA_G!=qy#8HLUVvi+eQQd21_#Nhrj z;}0bM!(qGcuZ*@LA@MJKbg+#rxHzeeQf7bs&4r~|GafM6^lJaF-M0tQJkuVaTZ7{9 zd`wT~zH;4AR(qwrQK9JKa!s_BWS;XbSIc2d*(|=!n$j6n$rFRbuw>wYA%RtZ$%?=E zC~g4xyZMG;zh*uROY}#3UH%#1k56o-G26yEmobs~ALv3y>=ER6tDGxAABy~d7_`hq zeB5$y_Dm;pi+}#$^I6Yr6*lYiwW=qhq~OOe#mZ?Wg#rDyUW5k_`0dnAo5mkJ;CylhWV1&xt-IIq;TIKw!8niYjSgFp!JVInlnCIqa z5$@%7P!ng1RqiTzIs30p!dHHuf*RxPh(bbXls73mB9auDBIINSD7$O=haAxh(IDcI zMQn5WVr?l_*LS_F$c|^rqDESz>J-VJG`Kx3tki$%Uf3(Z*+6I37=DeVx(07p0^+qw zhVKTo81Je21VVRioGp#8qz1^-r}uQM>imRw3_o`OTLdJ$(~%vi%82Q!+1Tg`ZBF+? z_xx_5lXyrgzChm`qR?i@W3IwF`p`44ApE|U%1WEiZG1+bmVR<#=!xpRrHT=u0fb}M zY_MeWfR4g^r^37^6|EUjz;l<mZ~_+DC-LU%=xYk@2cR^_lrn2=eby8 zB7{20*>o{*ma_f?%Sx^;0^K1nxy46p*1gnc4Uc>Krj4oRN`-}BcSOSWxLOAV zwc{X{i>Fhhip~{}-~)V#MU(-rp>lO0ViYKy9kobAX1(_}H9Aoc9oQrq3$07LC#dMz z%*))5S)Nb1H*DF?W4=m4&meo{hOpl-i~SK@=*bOsBk4$%v)TCzjTFANE8Dm9EpHuaC1X z?O4#ERa;pdLR`M`s^gvX`C(4(v(XM3o7mIlVsn|k2C6Ra<&UZN- zfp&#n=q<@PC3-xM71?zj#wSdw_A$XEMgl!9W8Mpc(wfv9Pf)vN?0nex?O&HQ;I*;r zL4K^8=i;#u-47yVuG$g)ki<8D;H`y8mywjf<+_QV zAW`2F4DMm)eAYj8TB4bVc-JMFl;sn72>8|a>=U7h6do z?T!&H*P;wq2XuRG_I@;`F`axQBXpS=^0&Q2diA5>dK*e4y9E>5`7$4H$nlC z)xq1pFqmMd-$Ra268f!Raoa(Ja?huBR|xe*;oQvQ#oAR&PM47%{D#E$@!dqGw=XXC zO%76$n$bpmx95S)q@I4<)&OE5c#^^4rlbnNuzF`DiM{nr{Alaj-V~yT$O1~ah+n3h z1I%kjS#-~wtoa<4c1*e+D!7zxwFm16J#(1aDqT+1 zca@9nlzq=<#f~&`(mN`f-(nj^Fv>;rFNF#UvVEJ3GXfNn8B8VGy(nh4zgL4Pu{Yt# zS|ymJkX*%CI|apagF!i=A2Zf00=^A6aW61_xlKOG6f4|IaG{G8Yb z7IQV`D@E*+xF-lxkW*B$9tVsG#M)?g{FR#$*^btGW?TwQx&|O|^z;u0yFPG9XK^p$ zQ9;=z&Xll^LQlA=TUE`~oAi?8+WJ1djjJ2E+hv;0V!X?z4XCGW_^_3AHBNz(n2Od# zPe6oe;0|O{vB;4W5Anm!e>!n`LzTr?>=nUIr?_bu_7tUtzHuN}!P8iVJlK2=rTTU6 z@%dT|d5E9sp(%Wyh7MD}KBu{HVGkdx>FsrI;s;NHJbO^6EFHBbii6Cqwgz~nx?NsD zQbPmBvbP<2r$VYxx{`j1JMP*$%c!tGZ9(Cf8RpgcYPG~W9@bB(HsGx9 zH)5aS9#j|RlT9`~DE(|yThvfr1Huc0&!ry=FNVH!_30Q`!{d$#m0s=|^xpBK&hA{v zZzC@}FC~%3YAQg@sVGhGqRmd4Hn$oouv>Os|-*Uk9*HzSf5z5DFUPG@Qkfzg%O3X@7X7^pB5#USUpWovQ} zfRqqfur^%5!E@FSJ1%sckib2Zk)^FWTINXA1ApiYmzR^2DH#f)F%qH|Uk7`1%NfhO zj$U@6&KsW+%17#G#l~q~ zIBAOht@f#n&w%b*GIIg;73t&4PpFOYo<-<@=1F*JzmbLN5#&vJvmHf2fc@krv-q2h>lji^v1k7l_ZJT z@-UHtdg7$x<*LveS(!!X*@`=JuzHGD6(QA$3-rs@v3s9W8TywMjIY~Vp2 z0x!3Q5ao@5hFsWe;FSnP3=ngmYYhN0i@v?`D7TY3b}b}(nvlmApJ>CzK=y!sM0-Ny z?xQAx_e0MNjvFa`smJe>HIpl({urvz^Dp$Hw1teW7tMhK*FTsVO<5 z|CCx0baRE!J#_|j^w=}S(KxDeDKUdqtZj14<73#fF7X%8u+v}}pE1arp*WJ}4m#~9 zW!&(;2rZbm!_w`hf$JlOM=L9p>udP?nB}U0aNfqoRVqF-RlxG42MhbDTQ#YhINK`! zU-$WL`7*OL{4n3s$k?vMb&ag7)k@(u_otf{*_sk z`#k{W+vthCQ?r8-@&EoF`^5r9ghnq`W%X+72O4u9`iM;&`|e09zQV>%<7D?rprT1R z-@+&^-b=Xw7EO*`tG;aUASZpQ3ypRgPYm!$vz>l@%b7G^$hWVm`MSvk7GTzO5`%n( zMFCo{>uTE4&=C>63U1~<4Uyra6oS-TO=U))cgD6_E{;nC;)VD~-CmxuhWj@D~Con zI-|DV%`%(^r<+4;kAK4|!bHl~vP>JyHXR$-)v#-{PdqGYuTZSSP)vxQ#;9!Z$p9w5t&Nh$THMT_*_$Y3d!rzM3Jc4j@ef zX;H_P<1hatgzmA~&q;6IQI|iFqsw-ySC-NTZ~lQuu81XZhg}umy016&(6(~tU zB!W*r;Gvlwr76hLP)OTLx6f_2?+Q-tKuWJRI~rK=q%VgJ5eLZvPWj_c%!%2iaHkk8yz|t|jS3R56a(b&&iJm7Kp2b_dB55{xFg;Vhq+|( z%w5#z&K6_UF#zr2v6*<34U{!>2a`HAY+3k{rcw1wQg zsA?@mStp=Q-TLqV7@>90s!^2{pORL6J4(^jPyfX6FwzbIlwX+eC%GpcYhO`ry^?%x zdbl|v@RsoXc8r51rWIW^!SO~*d4~uXsws19l#?6{Hi4?}L5FPz13nfaovds1{E8IO5Bx#D498!#f=9Em? zQ)Udayvcl0nmlf1neIF}PD@E~Jpa}V+Rh3=E!LLWcR zjHRw|@42$de+g}*gUzeBx{ro-%ujSbX;K=eu7F6bEr3&67LE-tsgnXSfc@AvjN$6* z8v`(Wn7{b&F_xvJX~1#?QUn~x^V9u--#Jh~4&RaFvlV&p<}2%#0h(hac55r2#*?(a z@H;okxVM?gEudcWN1RQz4b_s5a1Z;q;br)x0NDN*T4o#`My8#a zZcci%XmZ{Yq?=n6bU)(#M{v-;1vGG~Q8qcNMn2E7tC3`FaNweR0>BFYF6htSE-IPu;fY{zJ2(~F*3+9P#{7_L7Z?6J#_RWf!%>!<#E>O z?oBYdi1)u56fnED>r21?nn_>y|MMvh?*C|If7T-fwfgU%{;e*)hwGnA@^7sl|35=} zo00SL$wqoujA*T$)zsAsEni~&-Q5R*MgBU%F2h44L(42G<*!X!U*9vKwF$r&eUw~X zKi+|6N&nbYoXwWT$d>Gs%p_#Vq)RMzb1YiqRNFb{q5k74!TPR?Cmb+ZlqN(`xNyb`7w<- z#0n#hj1wjN8Fje&&wy4iK;HC9yeUS*RHptnT^2R(zz|HqmV<&E({6S-ym*S3cKY88(OGKwH@4ydC2e@24+8L8;`2J*-7c8Mg!LGU5} zT%H#=r7kuhpNCJs`eB`g{oi~xyIyy(a-os^Uj9x{A6^Ge0)qC>9pHgGTyy^3?hE6z z{mErL3vqrhm0fLE-(W7ea&Hl(9fj|3;NvDqyZYgdaymK>qK1(Kyn;mp;S| z!N9`$UF|x_$wh2Ug^!0?;!r{VnUhS!L)2^N~dZVRY3RhwTC40C>8@rL$u|4yXZE%o<=Zp#}+J~ z(xqkScvI!@h$V5s1bp?UKvl?<1M~}$wFFFUfdhAowCbey7B}O@FzGX0PJVZ*i-QB| z@OhYSvW||9rurIa0XybvB^#7>wL?#mH@KSE{ z(~i<8BCUTON$*AH+A>WbG>BK^c!EhD6hnz7o5y1EJ1X%z=j*vI8L^NLkN?|R(nzB0 z>mX=Y=9u6Z)SM0PyrI_JoW?}KO+=JQ0#YHrod9&T)Ld&~FT2c~|MkUAp z9n|(`6`_zR#oBSNC3ALrH%n->LHkO(_7t(-!`pQ37b}8<{H|ulO{p&JDt#*14XXP! z?D670F0g%DF>iL!$tmI->nV;A0wgDsUcjoh)_-A&rgjPANL0&?(EIApCEM~sKhI4- z00s-s>?!sw;`*_4oM(>G+N~f2V~?WX5p1?V=KM3o0|2BXaxs!iQBBq0Tu|a*@)!i( zW2$=Tn>t*bKs5u=3TU2*rBpFm>YMH3$J$P|nW8JAZ#CZYA}ISwE2&0QS!z-Hf9JH0 zo9@V{gNI8x6Ue}YP4pIPzna;4K17f%V20{OLD4m~rlq%O;+wK2=@D7(^?;KU)5Mj3 zw+wV8ND+KKISOmacr6@>@Y)t3qev3FMZ=dHm%%d>FE2xw0t(J8TW*wq=lcs}LN*+^ ztJKU&6ny-4(}Am2mxDNK5IT=nq_v}IBNU;lDV7qg!YK!0nt1J)Z^&vpLg zKX9ujr~GE+woH*1U9M+C%<;;I6vKc$+muSA*82iUfPEa47ix+DSyFpGM#X|ggV~?q zzNgaEx;)5bs)PLTdb&SLbD}g3KxdK8Tc0UfY$?@;l@Vxp-`DslkTM^awh~JA0f{7z zp4na{6%V5~AY9@jBJb?WZ8l2+x(bQn?X|kpFa~3Hv7?ixw+3sr6PrZgTP%%b)({Co z*&`Xl(Y@YwFJ!dUa#PRDh?Z0v=cz`u?X&>bkHasHSdFw1^0U7|=99l+c(OL;J{zhh z&lnww>YfI~hf?)^3TjrBCHEv&W>B9m2uJ~UGtkzHf?#bF2S23^!04wlF$|dfwoq5o zu(yCnRIu#tNCNkT23v}cp|iyF+}uqMT*A(110qwtTr!R!$xA=41BLJ_P04SVFYZ53 zdOiC}`ZS%^p?lkj5Tyoa3r4jDG=p=4wxf#je<1XIWVUvOh+Qk+GH!q_J8H7myFcAP z^auoll!_vFT>Ophf4a`^`xNEG#DvfF=J#v2blC+^QBG7JnB~R9Ozjj92vSl~K7Ve_ zlUW7}J+C#BUaZi`{Lb(!zcR7>co|RreCORZk@4P_#!5s~9-GZ`bbfAPYAUylyKftq z9h_Dji^pjLQx&`3ZwUa!3*)(ZVtv8SSMtkj0uueWQB{s!!aRm$vNj-Pr$E%toq+SJ z6s`5QGM0_J%M}qb6F6jK&}aBq0Y89wjD>V~H@zeao}`o;cE>at_@SB#N$NHNU#*iP zpN*5o?!c&D1$Tb4rL%tl@M@2id@BO{P-7-?MgPd7*G5t#H$nJBsC<*NnO z>eSTKJyR^Y(~Y)^Kx~F1(%ho!g~^%%{{yFFpXk5Zd2^~(#R+w$U?ATs1%-lVLg=at zkiD-A3b(6iqDBpAmoFi47E3wiv6-8 zI^Zsd#?bgVoX?*$AFO~4Rb^HJ@$%zS#c5N9xub_9#&KcQ6C6!(sP0a6IfutY5_17_ z%RG5md+>(|gqb?~!ZUKoj9OAg{||N%OGk8LQRP5vm2|;mqzpj$EcDC9p#cG&{OktL z9jXKas-PF&oA!PdyUe(S%tN%y;&LlMJY!M~WI){tj)Ls0r`2+^x4qd2Rs-5_6sGTM zI?Pb@d+^sLkmO3;LEWid5@Ec#9s0*v=)PS_XJfR$8#B6YU8r~A6R{E~;7!8XjU^W!h6DMVy z1p4J=c)QOEnsF5ulE>#E?&hb6jf^@kzqRB>r#H9R6GxK$n*cXlsS29h!BwF=1~)Q` z$GJYD1sEF&Nz~T6z{_(67@9JNL!%AjD!uH~CXvtpPK^=zXLJuoH>+^;gV&C_!N42}?kg2=Cj zu;6{ND-tJdD{$Bvf&HvkGi4`LVdbknfk0R0kJV;JYQ^uDV=Ijf0q?gbi{;wh3_2Y$ zYpTR}*c!hso^IDWtmnp3nPp*yO4X_R`Wkf$-0#mbCo}mfKXefs>zn3{gW+Rhx&eqa zo?M!M*ZG5J{umo6DQPURcb{tA#}TbcJzHxM7dVt$_}q3lJfA@1 zHB`)CK?MW@JVcdO zhNS-iSI`DyG;}mCPUY)R%;Wa{M21*+?8v7Q^uznN&07}_qrIISaAvhG|M$0X+&NYy z7F`;I?f0ua7@w zd-;PD9!hz>tFv}@M(?V>AJQ1j#3T5;gT?YoDd0my7dBosa=ol~0L=%Ej5pj9=n*08 zjIcEuBvZJ#(!<%sK6n9Vv`o+O1h^BKXpC^0M!a!1I<|82ZJ~B>S_C#adrg(G{=zsN z2-(t8Ie?gOC(F;nVoC#6*79jP&*weHt8B)YK5%Co!y zd8I5q->30qBR?JOdJ9H4m0~4>{!AWgG_TbLYjEb6i>?!+8e>rzH8r*CgT(>ymnTGg z)cYl)A?c_j`z>Td%d!25Jf(-P9Y_cTi;J4&T8wH1FtD89d(*xPqwv^FIY0BI{bPf2 z-RFv@YMPp))biM9AwTbT`990MQpKfatag~cKev9A{iZ`~*`n$Tvw$gX5ZUOsnME;5 zK}A)i+v*Giz2TMdal6YcQUK;lCJo4^%$Mk>bA*R$H#@Al->rE~fkU_R@{7luuiiXg zsK(a`>*3yEyV_Yzh6gbj-k&(iSRPavOz1WIC=_h>$QJUIBU0vc6c+;n2j8aAYqFz- zhDNgqb&t;}OQumZ9UT8g6V=`>T|Ak|Dx-pcv43Zed6%wUtW>4bi8mmno-<)BLe^o& z_cei3JR=v$$Jh5@DkE$|TGr37i=YqFekorXISFECH&)PFMHlX?jnX%^ZwRvHqe+FP zJ0g9$I-^=&ES4sRZL=~~%eAZHc<3VOcIakBf3`%N3J9!ep1X$2FIF3%3pneI1cGOw z^hTd=Tn`z#F6Z`14@TkI8t0sWk7x(Vv5Usw!u%ynpkB{p-r*C(uVJMYo7e7H)V?Px z;^%TY4fmH>K!lo-pPxh7Th2WCH-l@8039GOA*Ow~CZ@b`WnMJf5Bcxs!#TL=GmM_I zs;RoTwt~{-L3vrBgD)qgMQXlCY^zNGFBnQhzfS#bsPclvyzDcqOpLEKOhoE{5`Nu# zeep>vj{Ls-tylbu>ubmrOS!;3Dy8cCn#Te=uKVfbSH)6OKymeRmupFY{RF zBlcE|jz@KP9Ri2>^Xm4tP(C$=NDvOu{weB61y7X)qfvS)E0IdMNAs|-c@|%EcdfPl zVx#lbcdjU-xue5jQ#3j%I@)%z6g;f7^fVuqr!V?gJX{__9@LF-|3eXiY?7!f5+NUq z^erBz`{^3z8HQQq`d^n7&iWb*d@7_e$F4rivF);~5!V~rbE4}aPni>hs zYwgY>BRBsUTtYK%Ix<^$d%Pgd2P0s4_r1;Sg!JWicT8fXC?&C}>ET&(Wo2bnmsZhx z7&7rJ6WXxT&P7I>$3+=T3XMWK)Q5ax z7z&U);_sb-4R5$lp)Gv6@+h9_v8L1Pv>|lmSso=h*4S(G+Eqz3s=w3`AV3B-X3ASy zoL6^jN-WkfL-gm1Xd0LyLWQ^*bx5~^q&{o27bl;=MRqO}LhCnnm2X+!+p|~^$anJxnt{Rz zWCL?lrF9@4QCAYAtGCs9Z;0zKLl6kkSk`R?-KxE6OAZl5Q17$_9J^BJ%gTaM%Oxuf zvRE4tY?1Z*rQ8sB*`2fz<~8;-Lt!P{uR&1^3{RkSQ^Swoy(2;$iFshKAz+E>(#A0D z2g~^4*pI+3IXH>fL#rI=X=yx3NjfMwZQ_B{xlle?!o?mt>)tmQ z&`>Pw+|s{3K|nxscvt^I7tjHp@IIQ|RN2akVNaF7DK zhY|vXze**y7pL=+NVGPuyl`Lc+tcj{KKEN-zW7iK;E5?AiTTCF+MQBvJUO#-Z!kSQ zJpi2(ny*!<`}&MLy*PCWLlx_-+5EqyGQNn<9EYX0bpx|qfV#dw+95(VE+;Ldi%vO*1 zU~5a93dF5gdMuHk&-wMs$Q(6k59zd}ilTnHprukOQ?J9W2HoL7`CNnqRB zfW>?O2O(tt#|6$LFqKJw9QFA1;B-^bK4fEl4Sg#_U|MAQjDW*4z2MfN(XNHW0N03n zY`V=U(x-{QYcc*|;^KIrv3?&TX$&g&1HXqyEWquJg2Sz~IGG*Cs^{(Uqb4!v)Y&dN z5c0WeJd{WinT@3|iiaXB12xiC&lkv>B|Nm~DJ>->B{BT7M@Lt8R?R&* zhu>kdE4u1vIlp~%t#z8(alL~U52k_Qhp@;e^RHq+_Fy(7h$&Xi4(;%j7enkH8iMXh zI5RS~v&(a~4)q<0waAf~nW(1cM6r^}$R)ygko#mV@u|jc0JMfFNm5XMT;3e+(8~72 zzgR=2wyus&|HH#ot;~9xTWa+OouVi^hnVi}?)K-hyR#K0gE|QEFtA@jJ zEh%YFy~V5R!KA&d?Fp;dpu=YE^~)nXx5EZtcrhqs88!9vQjT9cJ39w3_wiV`xx=WS zhMG5$^b1sfhelCOPe2Hk`o^KC zv~)2L8rttqmpcz)9VRC&EGz&5!~6cNmMs55#V0!48wG(#APtLfH|-msgD7lJyn3V; zqyI4|ghXBi1qFbhuCsrR0g%G9lJiguk!tCptk>n%_8hhHRvL%b=(I^6oo3lb3kM`l zeojfJ#SP{Dm6bN@ImfL4_nR?h+oL`=JeKLj;tM2^My)qL(W>75rL;R~&znQlAM}lU z*9-L8K=!r#Xm`rx=y!iENI*z9Ge1qFuExG3q8;%N^VIX@S$7gWK4`7m`e)RdUb921 z-)s851Yq116(3XZjEsQNJUdYZ;>lhlprWf#F1fC@mUR1|Z*4rvoyPNWD{wzBS}QNE zxx>NtAud_4U;scUU6mDs(2$TbZ}2gNgqRf?c*EJk{;ke?eoxjvvxMJB_$PrXAxqF( zPWu`PE(0UN8+|wG-}VF_AphGNTD84rTv(!3qS+b~aA@e|E|3vg+7>zI!`g!D;IJ_H z+wwFV(JyRVPafdLC7P*wdR^w^ZEbCn>zUS;-v0jYtinG250|8nip->>+Wh1C50u6x@2$`H@>9s*T-JX|5}w(Plv_%Q*XN2@`-j`n)`o*}?~V zZt`E;@`F2lqwzSmMI>Y1Z&M#cCCuj=>(jvK!foWP#mIALr%3?&ayuF6qRhqZ$8;3W z1ERlUSGo?zaG|^85Gi!NK116C$GXq+x)(9BOYX z)6f@2Es;_$QpnXl&&|zsa5-ptY`R@yHS^PHcW(?Ex-{ua=eFgVnqVXqRaxk=p9@W) zwp(j48BH1iI2;5dBq`X=jt=+pwe9n+h^F?%P%udNS)uEO|fO3{4Z>d~%lFxbo@ zWz=md0J^%AvrbowrvMJ?J>KQvGB?{VT{Z)0`g3qiO-(YrHbBBaV~TEFNXOo3H&O<+ zz17v%pDfj)?|!sg28y(ejg3POBO{|=i9~=2Fv<$hokn8X(WldnUp4}=>dz{JxjIRB z4xu&>!oYK@z4_UNg}pxL<>DaGO5MhlMn`1mbl-=XTtLPU?_|+fTia*SuL03@7)hY? zzCX&}yJrxFR99C&aG2zfw)hqNm4+o9^$ZsWC;Y17L)T0HS9A+K`2$`>E9o`MD3qnp0R;_^ z5C`K#h;xfeHh~BeEpOG9CuvUXHws?Dfr7$oLG?%RUEF&8C#;Wvm6lp#PiBXyLHn+j znnwzCdJ|sW1OrKJf4z-2GGkDb9ZF0Jp8j*tCWo2({X9#NA*`wgSDd*^C zkq_SqpE|Xti2kU0J`XBtY6%QoQgVDefbf^6dGd2tvOfR!4CEn+wRlBs_MWAr2kj`BLC~e0-BeH7ZYnK~r*(DU3rggkgRX-ILk2RB(>P zgf74Pxw9LgQLU-u>}9SF>5qQdM16hz1|vA69K*?s?tnX233p67jRNf9WythNGtP8h z*)O4p@j?_dHhrPd`uYa4$P(s@Z*?(E6vc7 zatCw;V3Pc1G5|dDe6dWkJVAmz1RmS4?&Hx$r#})An}nU-_pv0}$n6HV)h4A(K6M#m z2L~a`stgWk4HN@*%k#C$)g}Obe+$|Ju?lMmh$LJPP@x(Cz>SEnRz=1=K{P~C zV7L6UqBc0k{2pfxb4Afs1J5fn#v~-e3M8IF$YSbJ(t8tAk}U6pv%AxBV!s*487C&0 zV$(4HJnc?(|3$bbh<-h~9_)siPe;krlYn5*MJ%Ubs_yf&(J4w{td_f z>Dl-bkJBoE<`*i*1fl4F{~&=sJsDQ=z%vLz`3a#8UP1L+mTAmz|2jl~0f2zQuxv&S z6C-C+_i&Z{F3|IB0%ANhKw>hp6QB4@__H>9cxw?&K7w(>*~stod)11G^571j9P$E z9c=$6M*UfSofMWmL@|*x4`VwD5&CL_)GL}~Bz19NQ9;qRLd-A8NX`m1eC_gafsi;c z0!{{lw$s>7Z^&2zPf`p4ghbi@o@_-tCVr3XMR-@YzU)})&w|h3^e!hrk9<;t&yi)1 z>U^8k&M_hi6sfYsM=IkqyRbhSCPfI;G8G2pMX9N&Tb6$}&t!I_AzH+OpMRhgx#JSmoJ%VdL$&#k-6TbEgBao6!oe zFuZ`mU#jjOy!KxBhjo@f2Tu$eS$#$okxgSWcdj-R^nX5E9Ev3dbVKp*>+1s{pmbSk zw6zoy0}C1N6Vda2ed7Gr0|JwkpTyg8TL-f4;ro0e)xK@0-g2Ro&8OH?7nzopCg^?F z(q65WhG}YRtJkhXC@nn%@D>1(?s2g(K->a|2S9LbwO_ph=que1ACdsTuC(3;0J$J> znAG*)(9o*)vt~v;E_lEFL|IwcR`;{x@4WTN#Swp?u0l+_HGYpov8gbhPV=XEOiRRJ zMesbmo{W{=T99648%>4q>Ik40=>Jf4mSI(PTid1^1YM*wh>PxSkQQka1Qeu8y1S)Q zq@=r~8>G8Sx{;9X{w6;A+3)^1@E^#%?pb484SH_f-hE{EGR7YdII9i6|7NZod!72gJh)mQUBGxc%{9a!F#d zYPJ{0YjoU{$i@{YwlHfquiD>Wg}>LS8BP}DHrm&clar$`<~lmxn*$`q3d7|%D=Vu; zt<~tF@I@ShhB9`qGbJ}ZV8$i}23}+LVxqO&RePKzR$ZRF3@T5GXZ~;xsyd@eqduuu z`q9zRKoH%r-&Hp?Eg*kf9p8vw(!1jM0Ppjc;{>>JTiL`d^~1J1+GnZhJ8NIMM@AwW zt$xkSULhkyzC}n>mI;jJLBF@dwi(YEln9;;8h@s9-2^FNbxvulA@c@v`PTWw$H!;6 zL@OKZ`~4#cuu^s%$ogr1b8x9<>Evgt_(p$R?jwU53(JYT(dS&2=8KJWQBgSB zW22*Gm6d*O9_;iZqWgT8!eOq(nHVpXrAzD6c$4looa zbB4R|1Sfdf(VjgEMNquS%*a?>T}5a~jy^y4p{K$=&P`y?W{2dwxl^j`TGux2*eFxG z0wH)3*WH^61yClba5+olv)|p>*%?!VvF}`5^jJ<4MM6UI3DW(hAl`TofI-4%erY8r zD7XUm_z*0w7bTqL(C!k5HCNAQu5QGY$~l)5JMHYSE~eO-pj!3#(OgHW8BQkJM&q*% zh<;`T@9OOm#AyQ;n_N)u-LCF`HC$vb$!(pidLU%YeQ5C@@%DUh&y0)1od?;jM!8d2 zdb;krci-k3oox+=1CldN_r`NYeUZSATdDNDCZ&-NpQk%JAbeO$O-aegW}1z(F%Z)< z|FI0K@1^*yFp@JpO5VGReuGI~tI5T_&1rglT_3C~T>7^_*3hbr!~tJ{Pe}Oecd{ZP z%yFu!s_ge>?Oo3H)tX$wZm%9VaVWnPhV%n4ZMNEs+idC&_vc0P`5*T{OvultjiXZ| z64KLe55UY``9~<5nVNC{^9`sbvkey!!smZbF)CzA4tINwHMH(mGzDWLoff3L7 z187vF)1!lSOOE)hKnb)x5KGwQ6va6qAwjJ~3$e;_BrV-1@ntcXD!qNU{lnh{=gK~H z=a1)5Wr@k4L7n zEL<@3sNjV^cLe2EurDmuJF|OwEV!KQh7t3kg_XuMS0Rb2iMtAW+`dy#XfYY50V20= zyTSasEb)ch5_3HVA7K*zsdfw7gT;j=&p&6!_5MQHnw~cnNkiK8@7}#rBv=Lc^2z-C z^1Bw@PkXafG61sSH#nx=nlwHK@CMlB1*6T_Vc6!#HTKEr>MDQH)q#!hSJ@}oSZJBe zMqh@61%ipBBK-bh)$Uk!f1U|QnHn7Saz77w%* z0V2gMtt`bt2gcZRkQrq-tLhdhe*=GpuF$KPTD%EPo)WyzV z_fx6X{(iIdpq1JP4+8eh%cHfHBJJly*NcM|q#l%3xZG?0=)b`fr(O&N8E4m%qBfo@ z$cXztk>!?6>2vbn|l zB1^$ri7PaCY5Tl(!E))mO$9P4)XJk3M##Y7EjMrzayYFi~5M6pnhIzPT{cjxrJ4&MnxgDeOr3| zuG}d~Y*klRcRW`)~ucN#E(P|EaG}5UGVLM9O>1%E-)=xi?f& z*ZO@Ga6C_Ldt-yPtn0Yqb0zF1Oq3Y#4)OLfjcP>wV5#Nh7f9t^6jh*91d;!_C=>L2 zLoUASKM(*4ZxFxpF|{gYrx$)JkalnGwnpEU>L0bU_Vu`!UUP(EbMTzeP7?VaJZKC1 z4=E$P(5lyGwG)F1Kcjh5^uC6vw~7qLj|($;18a=5^nH!qCp{1sPFs0-JbZ}p zfA;p6bsB>VXX-v7_lf9oL`FvbaM&Z-(Q=~of6x8-JHI2>Bks`A(J_$99nn<)7#{+| z>q?VnG@);uGt*giryl~yDu4Z|1q+gpU~3JFNYFH^FT&B3kl@o<>h3i16QUrRY`x`~ zHLu*?hbz!uwA;fun_W`)nVF+&TaLA?NZ2rezmj5c?y^4p%#^MTP7nXSGuqTWnkkj- zj1x)B?_hT?P!k#XQT3&$$8Ng8h>-D%RHNa(uk<0rN(6hJA3=Wh?E$VW^<-d(sut%P zhm~ioTe%lQSdzH^S;De|)lS|g>(y+FA-uC-xz{KdC(b|HvAs-R3ieCO-JCijSnuu~ z;}>U6w^7}FO_yRFEhbm3MN>t8HWVR`S!ckZeAF2QH==Afc)i``kM3l3YjNk|&p0?~ zz19_$FZ{;ar6@Od2{6F*XFHq2r8iqE?SifjG5g#urx#!o&g8aP74V^y2woPg2620F zvZkoV@-pl!CC+dZy?P0qRxQiC*CHhm;q&((iqzDkaF?SmoU3W7wpc*2$J)@U>my0T zMeJH*K9v+`%b*7I*4{)NI~=)&fM+H(&=fVx?FeakM@l{JmmUrYFu6%%K_EDt{~ozB z0Pf*p$rD8EaEMOFm)5WJ*Jn8k(}TV;XxI$=vZkS-LA0}{S1o!(x|=&B@xZw!#fY}E zjfm7d+idX{Az-jc<+7;1jMhk&8Y!?h^P`|>3iAYn9@zCqE}gKY-mB#)!e(yoFEjwP zIEigT3X^$$Yj58+^>>rYMFEhVf`Ncl!D*(Rd1QSCLM;GzOLA!*Rq>*E)q{`|bpgR& z|Dr@Yi?_ynd!6euDWjKEx!hLqVjF*#f=Q9J z-Tfly|5L3%HQO>QEDZ3()E4Hp~Sp;9nwVFvroKUbD}h@ z4~rqg($#G`BTPhqbH>r}!g#DQpL`O56H`+YZFaw=Mue$mNhA0(Ei5>S4TF<@6i2yLNeADWBIY{NTh#Q|w6rU^>NFJAIMJqAc zAQf=sHWJjoX#LVPQYLtk)pmrHo>q7{vL4qD?d>Gm_|vs9Wi}>bJ>{{R3$|j?C-Iw` znuCa)tfxb$g>l-64&C2QT{;mAT@FNb2(+HF524L_Osk$IwB=fBI|I zerK8Y*Mw@dC;yNY6^vi4U+zE(zeA+=$4v#{!31`EwV#vw3$Et3?#~1T$sTr@*P;Ed z+W_hM$UbOZbha=%FEm$Jtx)FSf!cDqPc2$pGnl68>grG~NY>Q}{i`__sY%fyZDK1IaeK*@r0Pe zxF<3_<4wjL4EAV_X!*RTCfo+yp&B`Hz;+VEuxEF=6x76!YX*4m-&$iLPW%A>x%-KH z1qk0n#c3#xPPfO!{LwK9`BY8GFWu7A9)4BK_4F8@C)b4~aZr%p5)ctN>`lp6qNwI8 zS3P*aX5d2@O~*xrx=3AJV_w0J+>IF9w(8I{1-6c=l16hDf*qRugKv;du441)7a z$p}eF9i5ukmse)b2wHeuA0h`4+cBB&aDSUl7M$(P4Np&Bj4gTg!<)`s?uba%o{hMG zAOPfrA;#$C$Wm!I};`1`#(iy zT%8b+u!s>lL+72?N;EQ&ijmN;P`lcp#5@mo7ZN-``=4yousyOSi=}@%G&O~X1@#!A z2N^ktB9fAm&GpR%z+tAzlphI)xz`oux$Gr0RiI{Oq64K4MnfKJalBwcl_2l1UcpFVlF|HxL7Nj#y;ZYJU+vjOMZ;_?HS$koSc@k~bB;WFcjtGbTLu z4Sb>}smIv-7x6HJYOja<9 zgQ8o|VhKrJjU+K@Rzg143=e`-zp<$)&huGiy3^59o{)uU0>p=$_?wQt zv2rkLbyrqKN0oe_Bo=VvpWp29*%K2Bx%_@Yr(O`$Fm~b3%ou(d+l3q(bu9lX4aV5& z_Iu_6LKN|a&d)HJxcZ}E;V)mlQ0qS`g^1(9P#y-14#Y76^{nrgx(@#-bpHoGJTsv)UN~Cg@0^(GzP4FSZwd z_Oh7^M-7mW$Skgd&eID-J2Onkl?TAr3$m_ZB0YsT2fNBLrTNq+8nJZRMBz0Q6zQ_A zd;;#*>z@5zMUBKm!fdVMxSG%5MM$;C+mT>Xe~A+MybhCRGjc{fj32B@_`OL}OhW?b zjn?dM-y#O+x8yf+?%hThVB%U((b5RP-pHiWSPOC$-U=fCMmzrb#@bdD8Wa>H5(w&w zEpaMx{*qhs`I$fs9tb4BJV9aknD$n@At0PFC^l`bwXd&FbX$kKCnMc0cP&>TegBHJ z5(AUf?r4oJXl#^*X$D`3YGXO1)gu{wltgEwA$)M`9Tb!a~czAZ0nmjKn2S+8n zIs*%fqAosCH=6-uKn>KeKw{qgxu+}aInpU8d>p1fDR}Jx62$?}WQJLkpP@OM<4K95 zGx?$UDumCjW-84LRJLDGaI~*8%-j&MGIGkV2>wPsKxd6$He8W*yEtez0M)~M&0i>K z*1SADr2a?WF4wo80cO<>_oIo43>K|ZwYrlqP4oxuX9phvrHf-UP(URhAi$y8xvAUt z>My#&H7J&VjyKRpL$mrCc~`8B<1?-F)U4)F9F;dxx<8CE8ZKR>)#xgh#Vk-f$m!^I zymE~IH7ylRAbNvnN)9l}Z4RKxW*5TrP00RS<2I>CnH|KK@5-i=E@8V-)FLOCs?y4706={&<93cmT63A6)l>Kwq_VqVH{T>Lk`DlH& zH*1AH7lXZRIQJKL6sT7Ma9Ipa6OSNTy3e8P-bB8NQWW6<3*CNncH=2Y(7~K73@|CW zFg%7A@uga4_3lzvX=e`s0RdUeo!y<;rdlOMSnuEKDvO(k25Xurs!!5Bf2_P!I`w|& zR;aBH&#k!t>hE{nPxYmx%!rCKjEsZh}Y$|rJZm)T5~wS)sW;ObA^iCTg2 zY_2@J;uyom+>kE0;aZ^$t)4=@`NQSqu2aG+@kdqX&o8N)LNj3)s9R2t z7_!NeSo&GbgRj%Yuba$L_$;o00f)0T_)0yc!pl9tEK^u#8IAUmQp%4Wv=*iuM*1u$pQ0p z_dqNFuBhbEkUV=SAI-!+Hh)R@l#F>mRuN39qq`f&%Q%rR#3;$4qGF&~*jx`J@Y?>y zW7O0?$&rtFsnAy@jP|IQ?g#$$Uh61kx8(FKTf}|M%E`*k_Ry!Y`erv`J>}0pEYUEG z8$IGe3Tr&_gQ5wq!DDY0oH^`TQgqF@EzT!7$Lt#+c9;cv*|O`GZUkGq__WFhkBFAB zN4zC)sM)*y#d13DaH?7#`5EzA_nYctA0q+SaXszsvG9a3X+YH?V-Z#Uj%aERjPROX zT6&o1jj@vRtRa{1%w720(}>`iP3U;k^6*0S~N=N z?n>tmZRNu*_h)J7QxXyq@>JT7AIh_i(X3{2_Q!L?>Ay+$Leg2a1Ed4`)O{jz*mLHHZ!O;B0t$T%j*Z$1*;pk>4ydo`hw_-s<~=P zr;d}0i;JE8XOllOk@nq>H2*qhY3V}{*&#+fg&=LOIbgpc^JVo)e^;L6+g43J zgXK|mm~;ZtL5yPQS&n8TDAk80d^$&XaKfRYpg=(le5I}2RbK8e20TlAN`nK)s8;~& zQTc-IQQ7_vrJMVsNFa=s>b==vSs1zN&-M(5;Sek=tUF{3>I<+d<|w3|U!O@OrLNRH z8xESQw#+^Qbg^n4_4EVCgR>4fKLfG})U;Y*H*$U4N-u}eCf54m43Z32^6!A@hp6Z| z%FJILs5g@`YA0823zy-YbaNs(AD`^Cu}<6KcOeW^#=C)p@iC*Li-V=lGmWUG@Rji( z^G8(pYd_W#uO^)&{+?DpF(9a<_bHHaca^H*#|QvT^h`S69GHMT>s@qol+V_@b>3 z{w!VOw(Yp!4C(?nTp@)o`!404_CN3v$cthxq*O(cy70e*1}o3ki`}m|{2tmv$7hDt z(4l$FRj3!wX4t=T1)rYZejg*yZcPCMF`L3ze{Fl`17y<3!}=OdzXq`rHbnWy;lEEm z5{7__Io9FvY_`pPvyjrjsMEML{b71AL9h_u84L9e=@FW+0<`AB{07L z?AX`C!Vl)xcNYK&@~IAx19PFLtp>jQXN|?|$o)F-s)NEHn_cnp@<)Lg*T0U$_67I2 z+R}G`12O5l?u~hQbG}_+aAFus2n>N+xv7TDZnWkb@ zZVgfnOYH>B7lW&}SGLbyzWMdTLvVd7B|L>Me~vcIa-kli9vvfMeE=E4JJa7o7Rl++ zL^eR1s077QK+U(gbDVY45-2I83gKEj%Rdgg!y@JR@#)4P8pQd{AU0D-70{?Oj+zJ# zgw|Lt&R_ga^%17pQoBX}@BvX}`K5Bb-FC@BeY&G!6nMffEhZqP7hyEUiK&Vk@UXkR z{GfO7f`&%#n`qsOQiw|(<{k&bpCv*{M0C7AW7+h54|AovR=;J7#Q-(7WepKIEKCQ1 zpv7FZ#4v#06lURo!2uL8$-}+^LwJ?h5~(g8vnI5v$Im~2>BIdA5R5BZ#{cE5tN^`x z*|*WZdW}-aD0_c%@EkZCW;uk?XrGp`vOXcZe~vT~@q7rl#~vMHW1>OA$N=!|jNmOu zUTOT2l|?;&Jcektl?HSjEU7n^sl8xRS-1HInk%Do<#Yi(8d2YtbeJ!OQmyQ$MF+iF z;B#t84c}awEcNvtA!i?dc4)V?!v~a*FD@=^ea>40BYbI%qM45cWmJi@xmzB4I=GiK zH0BHS1|V7l0<_ECET_}!K7?T^O2DFxl=vJ13c~F*~u?jiL%D z1@PG3Tnz-{KirhE3fLc9s*w9a+b#Czfo2q>?e%*(N4~|I3GD(_K|$4GE#T~Qhak}x zRN|(lrVdGY-F{6@B97uSYN3!2tOR0^(A`T_7{E_&qQ1VY1rwe1wqN2;_5H z%*M7s;ZxGxZ?JmM5g)7L@k1$Af9}>E6|j&bS$#~7wRKwI3{xv%x66;41B9woK)@Wh zHTinJ#5pqJGIC)!_+5UF*^t$FjJkkleT!tnABmFS4S{N<6-nP55VkTL8y}Uos4A>J z24MIFnic$h!!1CeGOo||R7x#LW@||wYCccnxtKfEnwQFZRg>_Vssi3f>1p{YCNWRi zhn8k}B5qPnQ))*0QKVBg&F3pEWP&at4+oMFL@$VXgb+h-K^Y<49kA>?RwACEujzC^ zyoE)~)GWTF)^C1P#pq4y{ZV&*Y!H~Gcc;BEuy;39`7(eWc=bv| z2T)ZqF}WSxF9&RG#qFql3RC#)Z>#O;=g}c=;meomkDdX}oynpL)JX0BjNF4`2GaHO z=g-bgTwPGc8fn(%XMNq^U~%Lc#FvqyxwxGw4K^0wkMSO|u_m0Z9;|^PVNDRdXtCJ{ z#+GjA%KgY8p|=sd;qG!FIevFG&06nA2GlsCpRBG^Me1)D^VOo(vScnZ(*pV98LSh5 z(k6OSX*`;&iGi$X4?J-eb5&;J)y3FBk1^%&Ul#j__na!yE}harF@mkAFW3X z>Z>SZY+LT}OkbiCZVm10)#u`JuAr=%kE&%;)O4!)t7*5obmq?Wp9+61diV% zbM$t0O4Rei?5vi#oUOi)OEZq*M4(X8z<>L8y9ikzei(3OLQz2<60=w1D1-t zJKIza=2vzO`^{$4`+(M>b4yf$SEGBoJ(gYgjh6V(^7igRCWb~uXJ>09y?uw%Y@WiOVLT>H38mX7EbQz!aGxZeN2uhYEm&9zdA9nHb%oMu)ndm!fGUellPj}Ed8PDdMywAc zD}dA-G)A#IMMjXM$hWnAu7~kwuI0&vcB>Df5~7yGb*5z4qvx=)ArA(xO6Ks^A7{?Sg*bKmzIUsy6kT|(txzUui}SkC7(HS2@5>b61u zD4A9c-+kkyX5U|WP}3QkjYC&{qaiI5!bei$fyW04m*niAgFWDiD5_~IUVb6I>8P9c zPB@``XkW!>0(p>=F|t(oc!(ua63;LtWM`{C)Xd~4Unx+0)zag~VoS@%uQXN7H&xck zhk^}tbmwV$1e+(;TO+N`mX-i*9QgC{jv!zZ=@t=BYuhpzH%)l7*9O$?w^cG9)8BZ1 zLqZ@c1H4Y~1bM90_I2NeaeJcSrl3Wy2#g)ZaneQkWT`nplPRuD+rwhUk8+VKr@BUZ zM5N=~tk(no-Y5gsQxRxM)oV5~7c%gAW!i^lp)&qU*P#B=qzX)%pY3nu4Kn+RTf-l1 zeQ+D?x?`fjDC?!l;0SpnFCJ3~OVDcMwa%LDAE`)Yb%$ICG)HgJPPC5YMd3}!-(JR# zKekT#c<9KFEe#nBzrW@XoC(ZPUM#$Pc+pJ#B$45%iKkz`f z3RO9tfdn;Cx~;sH{WEFRG+SlAv1H%R0f^E^jR<_xa8np7-)h5engvds_t(heJUpDa zUpr#Ld9u-AzvtSs3N`7bq$$3?6S@slImmo)F%vLT^xiQTTiYhR!Y}*Ryk6CoV z{{X$=0dyF6T+Bn{cUIXA*6Jen_=zoM;KRl=q#Zmq1?!~>8YUiNzwd4_|A8|Q>uEZ- z#PWa{;sa8QuN;2N+Xh<7@5D@-4&Ba=4k@LQtv|@@!Ofz`F@&}!JU;9((y386`D0Ds zL9*iUnj0F&M?_MALdX_Hfwaw&tvh!PMM&#?{L>RGXDyQYvY>>h{3s7o8`;yq%L{AN zFs=ycmWcI;SGA>nMpVUq^)wQ%i9DF`9}Ow5bznTb5#QE7H$vP};P~5w%mx>{renw| zd*CSp6~8$GrBnz$zSg!K1_ngy@A&=gMz&e#Z;sGtL=iKc_VQWpiA*()%UHn z=-v>07gAA0H*+`H^5sz?cx~T(M0n|p5g&s9pHkjLflckr(Yyf&HmV_vFo!NF@U z=w#Dx$caC_936J#+In%nt5X1H(Lp2kH2m~L`18{3$v);i0r<36MUUfG5&EYZ2XZh| z(bX3xqog$LavF4eZU~eLF!=xXLz{G%-fL3=zL`eT>?lNGE@V8M&QFqp7 zY;4}2O&X_lL%4GM|NiPaX1N|!1!J*! z*SDPb>T)?Ec(;y;d|}`nad9C99m`@~j3Fmi!$LnxNp1amSnb+@bIJb3VUcZy^ zL&XhfVp(-{7cU0~pbH3T-2BHBhT5$$Ws8}cd_Ch`IKv_7o^K% zRtJlM8gy637PFOgp90S#xs6AbfjJUb_A-4K-&fmBmuN!*dNJLa|A*y0<^q&wRu8U6 z@2qzv=)&~m%NK>VrE%-cxC4roTm{OWn|%u{3<(?`qi9f1)X>mqRVvZqMVCWoBZhhK zf=RZ{f1SWaePy!w+W5dqwN$4GBrwdFz3xY=OYYa_={|9c@24gwQkdTst1ukDMrj%95;uv))18mR0jEy zKSIHMbZ1EVj`+8kQdDwz6%}@#v@1ZWQqV@X>lzwLUIED#@VE-QD8^Vma43f~TkuYV|)m&a9QzD1S+O$nW01yIPH*6|R6DKD#jj-QCk zRa+Dn6}h>&;W6sCo%Y})UVUhGb4G)STXdhKLs=P$O(5ss;Nas!!!o`cIWe(@)ipIW zw6MVJt=t~JImekIzvZyavC@FEsi~-X_8Z?T-h&wtKgMkN3jT5NoGi5t4-a=5XuW#n zw`^1isAUfj(^r{Ic8r#ZyK-b&i7sYELbamNtjU>_BWWnnXrs(w7lMc4zJ?thA3tU9 zge`@}f7Jz6pEPgy&NA3i0z}KFt8{IVibU_c0g$jN(ifD6jnw(R(JAU%ex-bQlW3M= zZ)d#<@=C4e!FSamY0-;xGDHOjFC9hRSFmgux;Y~%%Ge^r!F7J%<)rPseDNYXCwmxO zx*z$oO#urK&SzTQoSlEzuFr0o|vD z5(MQmV8tbT#C<&9w=A}``NVRd;nTuVRQ=N8=6?Dng^Lk@PZ{*s*Fu$=RXeJj zWveh~IuZLrAmPToy*d_jIh8hl$I%mTw(E~R<6Rk|R0>QIlc39hCB%HK3)AvslS~l! zp>`%E>duXYok0Icr0+LT=Mc?z*Y7#7Nb&J)em`ZippurBW*O;y;G@$!h;ik?682Ob z7+IIs??_eHABT0+)63XuB0DBhBF9-R)Vn;y;izemR(ig5xL>FqrR_EK02&Se3^d&t zq1NvAJ_(xV*^U}VJ_G7mrTKQH;hrV})3#!P!jjOc4m{{ZgyYiuZ3rx(D7JNw@)xT$ zVEF+uvxYg}MO5@arwLqE_KJmCNbeG51uh2tUptd78$#lbI{&)NOe$wNz;os+zu-wT zaoxX|FSEs`Ud;ymWMcTmk$TP!lgn^|()_3-!!a=2UR-V{N<0Sd*8+VfEf0*g`}+)P zT>w;pA7o@;D0=nfX?1lq^((3%+;|^|o}L~9BO|bWrc(uR!Hp?R0|&AWTtQl1s^g!D z-rsc!SkOhNE(qNBzICyrise`!SX&>p;;hW=&;N4yO~&Vn+;a599l84}|FkuNUvorQ z2o>`X_lKre5NW?l*%2v(4qrPbI9dK;+Mlr9o4|zpm9dbV+6*q%A&V+ZVq2v7ep zM%PLv5ldUl)K_&dPzn`z^86y9lVzDwN}{hEO=sZz(+m5QQ1Tk0aH2+>5Iyw{No1;u+nWe z!sA%~l%7Mdd>Z^oK^$LYM)9dXPPm=)8`@<$&hl>zOi^#?ln4Yw+Am>)e6$p~5Yieu z^s_I5D!IAu?i<>gXfVaUz{G7sAxPGvI9m{DXvXFkoiEFdWEzB3gIEuh6GN%&P@3hm z=|@C!{dXU&Su7}w-j~sQ0SNv^mfRTE)oXolV_u%jZt4zaszzx-Uq!uKNRk_UhtW4; z?|+P`1D<$!m|;ZR=k@MJcL8C~r%Jm|?DCbfL8FaH0MNVN2xhadt7QKNUA1g7vabQpJd84|Fl1H(z8hzh>gh*?V{8hI;jIz!$e^qpvN*MQ2Tj2cze z7flGWj!$D>vJ_0zSsueggtedT+Z^!0lME4+g1qA+2p)ySY_JA-II0#vQsCZcj>WmKz9h9 zmz1nY_{&GiiZFx{Vg$7M2Bryo>I#+cUcoj(GloHRaoLyBj;)}nirnF`S(mQOkJr}H zrVuSn-|bLJFA3SE8)0dS>H!`IlMNI--14vPyo=r4fk;R@8+A+1G&1?nXfr)O&)15I z6N!hrNWo%Ee{Qkxg$XJ-CWTGdlLsUG#1LY0p3FNz+oOGA{5G%;2a2fC-Pxr?Mb3Yk z)A+`e{sp7JKC|D;x}bpXV{S%u7vSU5WPn+Zjb#gxE8Ha^CWf3kc)e5P zPmh)TKw>6YPbM1Aq>X6O>_#Pp@vC#ow`)}fB{@6VHj!&>q zCE@8BPsmuT$k|@hz$q#|=Qa&`4ID&kn_LR!ek@nheH}DFLicdJ!9oj|h{YruxsF7n zlP)a+VOwTv8aX0tn#?SuDvApN>yIZWx61~@A$f{*#wLkReaOel`$cVJq?6F*v?mH6 zd@6R-A&tvv_IOsHuS5oZY|TfJ6)+s$Z$zhmhU|+ReB>Eb!@+n<$D-&QVZ4+?xwFqX z=u4f%L3dG))Dt($Me{kNvfZ%%2(-&e)(itBc4W~#k_*YY+!^xBVghg&7 z9FlA$*cx3RG|lZpQqqv(XfQrY3s8P15`}2IMW=uvdSvV)C|T5pe-lJ-NvFthNB*m+ z!7)xA6}%CgJ=Yk;_%{K*8vUc+5qqTl;7N!GDQ?QY*URRcSupm_THNzK+IPACwZ`=_ z9sUS6a#X_1@!cenrZBJpZUx)T0TA$sq|l+nVI(pV1C`lT1fGJIg_U*G(2)=NW+XNJ z+NHL^Ofgwe^yth3z8T7XFO>dZdiUC&!(^LH)Z zO+otwbbC4H6GTMpLg2jYqj?JXdEsB0o&5sBwJTQ6oMwX5^e9u3@H^5zc`BAY2-ozQ z{dcE$N~?q``0NwX45Z~he<@z+k>LPv^oK%ofe#jEuPJk<8du!2#@i0WX zd)!tyA!CGS6K@l{pfJ|P%&4y~W@AoZPWSJJ|0gVMH-@1r%md_jHDf#H*hq4^ldug@Px1Sj4(EOVa6bCih->Su*N}kED{FIW z3k=2Kdhas`QaC8|1-(Bigr|k)QH)-F5e&K*WJ@IUhBb~5ainhN{s%-d#G zz>ps2OZFCcykqn259khXFq^)7edSIo5WpcR)T@?5tBA#vaZ1f(>ipuQh`((ht;^r37EV9y}5!s`bLG<6iRYcc!mZpR{SE7ZZ6tvt8 zCM<~pHj8RoM_NoP=4a&T(z0w&V)>l5*PGkWh}|t1wjEY0mI=<&x0M>v;1JQ#qhAr31cqZ=BD6F$0C6HACrV!x z$ac&e+d-i=#?MYaf)iEyZujy-WEx9l2sP>?qh^#t8Tl9r8t8Y?%)^6;f!T}k%6Dnp zw&hnNI9AFDydfA;0W%a-8?LX!KU2D;@YzG%w9JVmo1t&tNNs$yoGQ8kbBp}di7Dxx zhU5TTU`-A8Ak~N>El1+JOW?OTJ$M+^Rv@oGt&xs2+~j%*ExEiJGk@hYM?~_XA_#O$ zl1ogUm{8sR>wMB?rNI6xTci@+qW+^-Mm~hSk^dU=?VGWYk<`iq)pD=L{jIZNQrsj# z9^c3e2R#zT$=OpJ99Gx!BGhLzU;B3OLPJqJnBd?)M42!*j6{9j>3Z}S%UrLa{$FxQ zQ>p|kHh(}H`o9|C|2F1N@Si4PaYpE!m$-iTKvv56x8XW5yrmCdg22 zURF*$_9!70b=!>mekA;8Vy+`Xu5uM(Cp%(W({2TK|9AoCbI9L&tUus_ITsTz<0)`; z!Rr5CwPY0Iv962yzXoWHzoj+ffK2`GRR7U%STHjG{<;+QG`H;VBJV8L7v13!{8nwol0hCzgQ1AYtGVq)`))^6W1)yo_T{4YK>_M*CN+{nvhMg9?g8v(*;-Lp~2D@OPNk zS$PliEUrVurE`u}JdTbI_SQJQUu=l0HY!cV&p{Aohih^zaFGDeczAgDXg5kU*#jOY zEv+8+<8{=e3@)f7hy=227_U}$ILLPcmV4<^dj--3$Gr7*b<6DMxI)ot)4MI_Yg;WA zZ!^2^3)GwHq0`^zN2D~U-n*!KE6AwKO3ffXzWe{0&oeQBlvAu&Cg$W+yZlz~=TC3Y zno}M1)7L0!f?0+vg5Qu0q<8bQy za;Iq7*?Y2T#^-;yv$#AO`XN~E#sshSc10KcEApuZ9@wQ2!1uQf(hx!8lyo5lXCdDJeUSNOl%}F$ib z`=^VEQSMQpoo}NMK@K!}-1dT8$x-7#jm1>#I)ZT61BD z+|kocqrt?m$jCWJm69~3uHo=^PTjUwu?RDwWWWwcB^zSo0!6C$Js`>lEe>pGXb41> zMZD<2X$Rd*#kNN>h38{Szcq89MK1t8K@Be+vI9lTpNX%`b)lF7o2Q};nEd%#Xa+6^ z``WD5h*_N?&DPe|K&ru;3(QbCP;AQE4}x0YIc1ZiD@sQf{)q*&L2DR7J{33wdW$2= z-^sIbLb^aqfeKngDH+G$<2E&`DkL+8Q?04f+!6g2M4Hkh}qVXQjm)9<6jpx}s{F zJ2i8ISKp$r^ReG=4+U1yGRYnks<3?qhzaPG0#p{2GWN-UzCCr24VWB3!OfONba7(8 zS6_2RbFG0sxzTjrbL%?k;k0`C|IaDcB<7`9M-aXDrth~h#8rbSIcXKLV&2D zqynA5#M;G{T0Ae#7v?~pl(aN%U`54(e3ugPK5HpCIdf-n0yPoevS1u~CmZ1xgAalP z|7?_F4__d>pyL#%4L{;jsHjf2owg33uaupgos-igsMsFnY6e}Q&ez+Ub%kzA6aIu{ z_Hzmlayo=Tgwgv36oAm@+<0{{#Jbqg^OSlYTTA^2(6`Asvt(@IaI$r?W+)DS!oufK zkFlVA2|`qd)>W3HRVkv-BDR`N7KsLO;OA>G;HGJjXN5u{zly%1aMa2!r=38D?Vy7< z!Cm%>pU=>usAtn-FzG{k(ec8`I^dP2JZ9c&yr2!GgxE?x<&Lf>yw|UT+k&L$M8)^V zYEhUaDY6K^j&`aiwy^_u&n$5q2aIB+$^HF4r#%P|O%or*!foJ-;x z93X$jGwnhDd8vK2I*&}|3J4tmEJxkl(UAr0YruTnO3~UG5|1sm-fslr8z6Hl?g)$u?qy#R!AA%*mfV|DWy;z?PJV@6+q`a?_@mBL;-$^fF_&+~Z{ z*%48M%VgwQF`4BNY@u<8kx^~(QfczWmcof!{-velacLzHe*HGFt{>`jdicz!@;QeFxBLLsYs*L5rEB4Ij{rmSlh!K*ibk8}Ck}8e!#(hpt;0;jg z(TEk_E-OOg%4NTXiM*Tv?$PcyDRgg3Fb)8KCC%h>uBslaI7BMwssobnS+qbOR!TFd zBicMie~JyEfK!l_DBLkP*4moyzU%3Rliq}E*7Vb4FEv-V49^X^8BcvHdN_U*NQxlOFL3ycmO~ zSimNxm2;}*lzQ3ZgY~4Eh^t7VipIFSvj3fv-J6RsK^urgR$T`*liWykOIz{Zo_hB8 z?{*C)%@PX<4f|hW#871^Q1whbhAZoA;6!B!MLGS&4q#A0*J_Q5O=^>g+9ROi%ILO> z-vW}P#|?1SgoHTT^q%N}g(y@{?s3Ay!@W!4B;p8Yr2w5m=p_rotlR(+9qsGafEiC# zpH=DI_Jsq2rlMx`=Q&B;G!wAQ(IsAdt`^q-G(E`<=Bx$KZh=Act)dr2>DyA$3DU|Z zjkP;_dto*nmxrP=X@_5+jqaG1d9Sl9Hw zPEU@78><-vpkx1{GlDUms+R9;{@)kLnZ->~-e7aZW@nC}S-@|}7x%ek@+=CnvDmGl z$(+0*3A;Yc9@safIAdui^D14{>f`#S+nBcqv?{C86;5APsRtNlE5YnCc`mAGETW}< z+;DN=+YV>B_)2AQYSSrdbZ~QR&6l(ZRNa<`52>&R#+M3P$6$XB`PZ-g(ozGf_hvzI5G{*!_W1APRM8CB4^-)lnJY~Q zC8FSpN#$2gP2Q)(oV~jJ3OiQxKDVTtGO(Q2(NR(dItJDb1}3J`5Uq*_xX3o<}SeQc*olKbdShF|`VzDitL)5ukWtHU_LC~u-QD59eO(V288F0xG zvFS^{yoRkVSV5H=X9N;{dogBX9Zc`OA$!{-c2~UYQnnv9WG2th^&QA%KJ#_3v2bJ& zLMJYPSH81mY4-H*FtEf-p&QNGDF#InPE-ZhG>Ag?H2jsn%rW(;+~I?OPd3>jC>EVo zUIm*rz2rs3hT&V0k*tiW`x5VqB>LQ@npsVr^8$8GIy%|6HC|StR7gnIpjhf7g`43a zWWN)!9uyLi#O3Y+YIQ{5W&mKeTL7)^G#bD01?a}6TX3yEryhNHxE8u=Kzevz@6hCHTS&P+Xm;p``IryD z{+m4c4^_!Zej`GwlH-0i|n@+pceP~Yj59o ze<7T=OWjxK-~TMnR2Vr_JAfYE`HIbLd;E?F`FOWwj-~ktyy2D$$tJ?6n&8F|YfCsr zwM&yJbCieqn$JBW>8qR1K<#^7LRrtrgmRS#nOZDbGVFOs0LCjNl&id_fNFLaaGOFG*^?fAhpmr>hUbr$Jh{4%8iP`k-HD6|B~P=(0+Co&1=uY5%sP)Z z9y`3VphO|E`B?oL(S@Y+zF42Xh2=$V%IxMY!xPxXD6xR8TUMgn8Z_Hl0m$OI1uzJ2 z4e6%cE?xe13Bh}_u5-~ptCZRN(iK)DpU-|j+P{4CHLN|CKe$Ap%5njzR~`Cc1z^Gg zasQ94w~p#Ei`s_i5Ku~_TLh&1?iGT8U*Q(?(X>Z z&zX6i=UwYtYu5ZRtbseuz0W?^zJgX0Y)pzxev;V1M zL?E6~c5(TO>iM?t2nm*l7VRLfpEH5=T!xBKCSg;?)X8bx_FzPxav4py z&zGzDl^Ezz8pG|?)YJ?NXmvZIwu`p=lti{PgLiT07De zQi+*bo<`i!%(u4DLi-T@#-s`3EkxX9VU>A$J*3xmZ zZ*v-9#l&=xiAD=Oa8;2=`iizX*Aq9~bDFB)yodb-%R6y1ejH>q&ovDHnl6V_ORDJhr%ugF=Re_y}4EPvfM z(-;xb!jXBj;_a_$7d0~zBxx}FUlwhnd8UTD88@nXxVedbMEGG?A;IIdZP@B@s; z*>yK=OrFJ;<(a2k6|V6aB}AWI@G@puO`b9aT)*lK_h$C!3QE}C=4=O*2z_`c>MTpw zh5HdME*{+nKJQsD=8ZczNt>aK4S0D?c2ec>?{N;DiVB6%5?SLP%^k!@EPUnz#4MVh zwd4HEu{$Gmy1Gn~PU%@HqB(Sp>R63wpOsm}1qPy%VS#B%0>#u%T^E8sPKO_NZTmS$ zg8ZT)aO*=zX=t`KHgxl~9Z^r(!VB~&={rI5kBRL`C&0uceO?2ZCYXrf4NZj;Fgdq+ zMdc9Qc)%4iZ7&T^%l**gjQ5g{Z5(wI1-{3!f{ch!7m% z^x+P<3;jB&-+x}^FbcA}bn}X;s)2cL!3oWL6|Y)r6B85DR|r~&ZMc6dm?&L)j}A|L zKw{3U50YzUagT=Cp2HkCx*M(XE#*{X+N;|)pWk@B^OjWSd5j%;3$@@?6XsD{_=WG{ zd_5j^NO*X@zS5_uN3K9X>E0MG;kb~HvWDX^cAi>3$^IhGM8ogqgkdZsnv-jZ)^+C6 zdbT?fFk_bsmRudq&r_i&?;gmZi7MF*Lq*vCz^)NSEpQHo7cYAgKXZOYz77~eixKKP z`*84y-@G;|GTrMp1;MWeqGrxX=@Q+jh20pvnk!)5FVgF2Rw=HmtnA=WdhB_CjEXt1 z6gan#`pDU7^T{`Fkf#Z|Y~#D)|GTgsX&kb8kU2gS5^<+qHg`l~Ir}7s80yGE z12WZAUDoRXt~qHL87dJwNiSWZ?nKXT?!76ngtN4WqR@^pgG0bn11kCTS-_t@8B{jh zF2Q*Qox8TyyC^7(03_<(OX|;)PgL}IF!8*Gp6i^EV(1u~=uRa0!9|t+u(VXC%jTay zt6cBjW3XPiYMGfan~#9phH18dYMiA2W%U!1@wMj^&+oUf4ptqMCoQN_ukxAkTVG04 zw0y>#v6RK?DJ}KwQ2(l3_5~yX#>Br%On!nTjD4hUnydMX3B^vCy#Z-{;s6KQxACvcXsP;XA(@TS)6U@AqRG4EdP1UC4sk+QgWQdWDofXTylQl~fK=}EfQDA`EJ5k%R?EmSvmE$yeBMb7f&EhOJxiv+&-O7% z3?}yvAeaFqlX>|MP~d_>1z)c!_6YQ;+pe46tn2TvF*g)@HMN5JWk%`7++VQqf6PiPPxrUcipj{C4m&Df$hCyVlcBL z(tWMRcpYyEJA*s$5NpbqmY=_`?oEE&L&U7pc*VCP;aUs_rkKggK%I-U{fxas3|wYl-|{wDbMl$PF-4ab4j z|6r9bLHO0D3QOd9aC;r#`iz@CdCmMjx;Rh9*nRzEAhPLH*obozHAHK6qt(^bDIc4s zBmaB!CngT47Xj`AcMcL<2BSiqKmj}<#ita2MjDHNrFMVFpSA^YfXYi-dV8&B8j$&M zyqF#;o2hef6pocyTqoz>zN~c@=o`xu7P7&je$zn&P+zHzopJD1b@i>3O?HdLzT&YX zmnQ>*gGB6RjNX@DSuG4mH=;Sjp2#aIX4{{7a|KP_sn5Ke9%xbh^yHQhVHO68coq*d zn}nKpzsJVFeA@qT+n=P?cqao;A_wp-pn(!~E!^{@x8#OLVnU)uflf<%yUk1*9ag1V z*;#|HzkItWK2nzL^U~KLoWU-q`yD_$&pbNhrV&3cpi58gfi}eNeZ8V zu#QSR<|}b)J$dz`UU9$kpExk?iT1*zGcCC++zH`D0kkG?u{%)lENgRpN&Yuh9XTA{ zJw7608H^~zzyIJxVObpj_RVv^4!~UbTTM1X%67$N%rG-@2GPAK3XHvXQbUDa&>~HH z46*`kbF~V>z@S?NA@@74YqPWdm`lAW8)Lt;wjWete11CffE>Z`EzwgqnYVaF}K{d4yRILto}!|DLu9Se(Ox&e|EA=r+-*qM`ZkkciJWsSp= z2$1<2K{Xai`1l%Gh%GkS^8c`d!k9~!Ssl@vZlj5v@~gTqvg0wlS4@m9 zRcz)`RWTDB!ik8xrvcKJ@e-47+=>L(6j&P4l{tz{xN}&(-<>GM%vb$M!koh#Z+h_5 z{;6E^;}F7T73TcX2rLfy<5i=CnB2qg!r|krJ|xD z@UuGHuP$qWY4QH9`n9)%0B@T)58Tr%L=QrfSO1C|5*F-nv`IA=A+PT@Keu{q3&0%k zK#@fyR4`X}ko;a?SgxY7TDxrnf}O+ALMr5P z?DJO8aIP8hD8cL>&Cp_`Kv5GL?Ngk7tVHM{8?EFA;fcxq_9&p-*24vD3lwCiJ5fzxgdFv!utnY2S03I9?PGE)4gmot+&YEAK!q#&YGfYAHk74h4^u z!Y7(q|%!3JOP+)ArnvsTjYrgbt<_gzy%y|3OK%H*1*md zM0xl2hFXR&43e_vSQvkO)v{l9$#|bj$oA?M0NVk;%gboyLHd|X*j#D#u_~9L<0;3O zyHp}U8TJUr!J8R5a5UODo2pITXNjMoDPS4{|9`on60g!V3Tr{lVx5jZX}u(B$c zIQBixMR7wWG!FPKA>TRoKw288 z4XA}wrR+XVEkNK<#sP09N7W9iZ4|NpzF!6;Ke}51-q9i~(zoyC`Da-cL zBxbX8n8kl6Nnp+qJJ7B-%=~?wf0^wxC#_F40DO`mflnLD=RIG!a`Em{lX{#Hwe*QG z?eC)O`8t(GZ9TeJ9)}Yr0}&BF(A9IlUe~UZ=}l3i5;RkMYxBX7>u)}%bi}_zY=zDA z7dcNrg(m_ikzzRpaOp@!tRE3fR@kC`xB+xb1_pZbD-<0mQdb*ApdU?DIm#RQ^0Abb zwjxi#Fz6!ypX?^QIE;ZMawAiw!Bu1Z>L_>;$ja1-@dcFzM!L$XLz=GvNLEr7gtIsG z<|g+NjV0mnUHtfFPT>~&8l36j+fwwph#SD_AADEi@2WqxZ~UV1`SI*i)uCIya#Iy@L};HJk_p5vjc5?m4WT1558qV*DDB=Y`hs0Q2IiaBC33TJT_hhBy4rBvlk9siu}_`x|18g(dbF2p!Fy zIzmH(JUUid1a4Q;JcK%?-3ES69rgCDXEqD5h-&nvgQQ)$!JUN5m8kKw<$t6p zW_W*R_qDZAHBJ9XxS-GU`^(+1-OK<*k*g@mo0GS)Po9u~O39<_znmzab882S$B!RF zdLq!aYiorA5w7NSv`DD z4;7`PTiRy+LzlG8kc?9gF+itKe|UKwWt3Cd#4fRxs3H^1J}{&YxAvS!0^ zt#9^G#s?(j#EL3|S&4xYY-91+Xske6{j$ymF`D?Smg5&&dW^va+kiT2zWq7x^&cw* z9#6toFqdgeaQmeBW;9_X?@8lS4N?Jp*i0`jh(VQCbai!s{bF~p`V0IB!7c*4b3n)I zcLe$%7x3RIb?>DPK%j(1Afh38n)d5n&35_s?*-arZ@tBQW=0YbdJ@e#54dirQ@@~& z$^XkV()trKOs;lMyU#t$lE{6O!i9yZlT43FgIE*2o&=a?63GKs(6c`?xZ$DinfyneM64RFPy+^8h2RknWlobWyxm?i3wDCm;mimA@E%_S?|i--#nhCt5F`x^4b1B< zDI$(4-0I9}eUCln-(;qx?0?l){Uu0Jgj!}KILoIvEz^<*G>I6pZ> z#C7-b;tWE0usJ%)Kvz@T=atxnG=#sf6hmorQU!4?t^Mt(ey`EE=3E> z&z-hLRm&`HzIycv^fE{T3mE*(ff%*!2ZElf#%tE&35g$m@?N)b3=Cio0j%{)Tue-L z^_jf4w|Ew{c8bp*5a59|*JHt0KZ=zrZhIzA8{ZS{_SOq5U_Mx=74AUl3;2AzYuH#@ zI|FyYsB&w$T`;vIJUoPfDKr8u>l;)AWO8=@)tiJuEX1~@Mxvg0MkjZ>+wrCoO>mgf zL8L;*P)Z=~UPxAloT6gf|L$dR-~(P=6}C22D>LnNF*6B~LwBA~M!tP}x{{*>CQ9Mq zAs=|w?m((&NDLDgx2q6u?CkAP@Huq_M>AAAtlSMoyw1fubZ@`^9LrdZUGTD&X+J+AytKmZ=3e)#=8Uyk~KA^OR+n<+xBVM__W6B3{`5-hV& zue4jJKH8iUzavEdV|u#&W&Rk<>IMQ)`I{~fN!<}-s`Yx4WP>>&d76HHeqPC3WIw>n zV6w_JCIIO(^k6TBa-%DTGF-nch+a{Wk$rggZnxeF%t0SSc3qTY>7GLegw-MY0eEkR6?6@vnMd4<{R4@hr3-);iLITa{E zxZnc2Tx1B2sDq{o0Q6BmbV~m4VFi*&+4ZZqfqEwiFhmc2&cePY7)*zxMpldrrIIwOdwIfQ^~3LcB~ znY6^*%EX6EIM zas2vQ9Qz0R5Mi%ZD~*@CLuWlL;<23u*8v59!0&P2;0O)BS<#CRT;1R*(U+FKg)+`QqFdD&Ghy6cNE^6umXP4 z8;!`J_PiXxU5_g&G<|)Qx5C51mQ}zL6?C#9&CLx@i&btLQ<0LISy+r!*#1dNOY`yZ zS?Wd1iJui2G(s#TIK92z$&i}>M7}?H^4;%tJYc)<9q1Hdt{7uPrYJN5Q-gOeY0wcOmm( z`l`ff1JEI6^#6(k=?3gK2||7qbx+-Tpw=|NtRtRH*TTYLb#wD+odmk9)7IF*Uhfrx z-(B6dYSdy}$-FL8WO(5=mO~3_OQ8B+U-}$3(imjJuMSMg-IoB+B_7up|9jc$;6$^Xr8lSsp4y`RM`~*K!xV%K~0{!yh zV#g%D-uCw8A18ZogE#ML0PvC85=z3RQ(6K0tZXvk%d{gs|4jJTGXXfr!&ahxkt3Z5 zg?#GU)9GhZkv<(ivqV#jmmK`AE!-2M;MiC;yTga+0}hekNF86O+&DIt$T$Yid6w*f z_rSeeK8yKw-G|PHo0Dxib=1hE4tCmy^{IurwW|~PYml%3$%b5pbCQrqp(F7r`*FOJ z4YP^<4{B%Y@KqkL*?jfuixdvgKHfff)vpefv=pulD<%qMg9ZHV{(qIkkPEpN*zH(z z?$|3@(%RZi-C%F980znS3fv9~zOP4zhi^tYI?P+UQh}ngd^b~APfrh|G}e7Zvk)ZI z-PJAUvfL-$dy%q9O-({llP478xP9jz4+Cgp|FIwDK!U$<`Km7_Wd0<;FrlWY@|&r5 zGFK&p)#go1!iWJ(KRqoTUz>-dus|Vti5PYQ3ZidDCkP-0;9vc^wUL4g$8&yS-bO^# zhGQQ!V&URd?#T0pK7c*Dg94_P6>vra)f5Hq>!B?3L2zvJo${^U_9P(Oeg7ku;XVsQ zVz~q5%rCVgz7XCRIDom&uH8F^Dg%hlUvC%dcb6(*`VsdPQhxmYeGEY>N1M|``ks%L zQU&Z=-?Jsbo;Cx|(c(rV2(e+Ze{fZx55$+}+}7V;jXaSBwlu9cX+Xe){B;3lDoILi z8w2pXfrSfa<&V{lE$YdsLaqwPyNr|W`>guuKMtwJ;}q|Ja!R+zK!hBBgVSw@`6`}+ zPVy`*PJ>lHLZcrL>`UdVaO$TII~g- z)~1b*Ft(=3a1_Ilpf^nxex(7_v@1cc4A?|MN!X!T&8qm@-Tdnph3LCGnx1KCb*I)F zob29g6mJ9y`b4p(yM@JFVqH{EuwX!0TwIiHZH4a=e7L?SryD_m1UD^h_>dYJG+}$L zc*}`pZfN+l$UvM<>HzX(9l`JhQpEj4BmJ&Q8880qNkuW=vmhS zcF)F0xiv7gZNwkm)%eQoxLQgz?#y5Iy3%5yv!a53R)SgzGEwd0*%4{Xn&;m1!FJb4dRgt zE&uM%T6ojQk(rl!dTv3fg`QEeo%v-I>W8W9&8NN?HR zE}D-emId<~h%lk=VQ4SR%zQ3(v>;y(j+ihL{{m*;us0vuPp5*pb*hl}CqmrywufQGQ z#D3{rOicefC}fHXviR(O2YxZte{n{{37e@fBQNij#mg$__i5^AgiSh$J%wu_eNd2} ze@5l(aKrNTYl!w+URd~5WSIF$F|i9;U0?{oFp{B%fs^OK+F(wvKjw|r>MAHLzeh*I z$%V(3J}6yXUR<1?kCookbD$t6wVM83=6Ek>W$@GC^5{2MDU7}2X_lC{q{^^=?q=kl z9&Vg1_h(X1R!`UNc^~$m)8^4{U8Q|WOVhdQi+{WM;JpUvtAT0@HSHB`1CweKjn&Pw z_kAY6I&Y$A=vtPe>|JbKi!;xDE^+eZ^DB$ZYgLR>WrPGb3A-vXY3)wDQ$4p%HHZByxf?5! z+BPyWUvS%Yo3kK0l0Z)!a!pNzuaa|?4tB7yt*qWqyqv7+eeuF*roj=~1%)Ktv{&0N zX*Gq1Q;Q>76({*4eH;{4^_BQP`ru1o(S3(?i&b^O`^+t|9u@f;nR=7f9^Xx~C}h8T zvY=;IRn3|6c|^3*AQg-3_j1738be||Xb(#kQ`|GYFBNa-7mqhJvLJ4^lx$nJu*WU> z00*Q#^j8ILd_7FEw2?)^9MO&L&Z#TEm zz)@kj?|E~Pq_U3AI%ww^f5GD@9a1|8oERT>UwQcR8V*kSV@5H>{Brv+vB&gQCKhiO zSR{C&p6ckl&QI=CIaph}gMHw-Qnq4xDgU|oqNn6)vdFOZ%jb}n1c~wUA$L+d{)FE? ztx?ccNNk6rQn4Fa@t(;&t+>b2Mt4Jo7AlugrYr4ptZAk}g(Y$|aV1OXV+OVbnvXE@ zGz!#iVy>3lwOl;08ZFU^(^r2y?eo~I*u`z1&tIg(I6y&t*zRUYNeRA;`n0y4f!9_C z`8Cg|OO(%CKLZ=6(9=7ytR%R#o$|$3vd5lZy*Kqbw|X?IKhS9-RJvFr*Ozd^%jH16 zntC&!6swiu`NO=YobVz8bW|Je`d8k5N!aty*$Z7}Zg-(`qD@Go|=lS`<36u+y@^V-=FEO zVX?%w9(|J=<}LEvqH}f(QB`@@Kf}DY^|FV%GCO)cWcpINj6%Y8JTwXaq4@-S3YUMb;xWG%bKiX*XtcBFVpIS`!bm{kU~!~ zRAlM(SU{WE(e1PT`c^MFAq|;h-jy2%o?o6p-D8Q!4R@t4v@Px39a6uXHqTdsZBMZ+ zd}%9vZAEF*CEt(Dx@l1&(>0STj(#h8zVt-6%E@kJY}97+CI3VHoXVEG8(*@+r3=uK zMa2;7tFLP;K#5W5$rf z6cQ3SJESA2GeaDH0AbI?@Z;&>P8@Bckw7@zb-mhJd>Y31O=rBtiGu8 z@TTUo5>k+iPI#dt_Xdxm!1e1Ow{R|Tmp0lgp;?9-9pwX41sTV#90N2=%t!T$=7c1B z=<-B_^LK-$gonq}0x?2OQOIfHk*)KqW{dXZpJQhtcNH5;|OK$M!&lJ6WP2U7g&hfG$J^0`zkWf z8RUlTC&f40hzWvfymAF@vvs~_35E>PVLp#U7#=l2BEk!L;*UkB;5K5UFvLGEUzR8X zKT^a*Lu<$ic)1*epAN}e+T?#^)^k2R3CxswJWxuW{?Xsxe>RF^mEXyuEK~Es)ahwp z)0h&)-K>bU^-CU^(38he9_D=0Uy$0nmDSXSa_1UFWbR5n@^As&R^i$Jy4-%{@#$f7 z2$D+l9j~*bs#K0J%b{9GF18_a6C<4GGCicBjqTu4c_{FDJzXqVDv>)fZJ1MmHfV}X zujysk_3L+VERL3jH+u7hRdq~%8%&+bOoCXa;&44XqWzX$pXks!rkjl!wOzNWcblys zGCU9oR-|uEtz92%!l;F%J-<0_jH-4?K)@BTZL{Sa3-M~&R9D4-!B4_$@^d`i48FW( zeL@EfR##`c3tvh(2}~~h5<=ALfm3}ZL(iKV-{+*wb^^zooppS)7MEw9 zEh%G0+uac!km622YN|{1u5Y9ERC673DGO_& zly2FNN3)i~lqf6Is&QI`5mpHY+u3-KUm}+Q|H#EWiM6AyuA-%`qi+7rdCYV934Hsd zo{+FG1-TQ2J)!~G`R?Y{p__ldBKQ}H`ECk~VbcvAX6}^tKUWRPyuL{uBv|`g{xxR# zw9|O`wC6q1gQriQ5}f?NDZv$gPYB48$VJzK)gZChBbro?jA8O+)z2+B!L;v!Xs)Yv zL^m^%SB{zcUtmEz%wf;NEy(sh-}1gXTV%UxPTyqy_YYUPfs__yO~z93Bd@>M)-d6? zZ%)pg9&~hc&M|%014P<&T-^I}8}_T$Q=_2jJ3c)HQurP?G7}2iUih~2r|oCrJ@M3Q zZJtL{IJ2T6CyZ=tc#mm6>>kHT{`taa=Kq91rj@zvUgM2xq}~sIDjcH5D`4L zqtf;Cri68M{kBM>FU!8)VMDAeM6s~WYC zX3#qv9`Ca+%?9ygCZ~I%Uawpkh+;0V#0(8*e|jG`y(+A`cJxCk^zt;mz8xP);q>Ff zD<0=fO49S35~ap;BRD!DP<(tR(q(a}*jFMu3nvSuN*o)kZK;!oRTP77@Sciaye?>?P? zs5}yf#>Bj-@Nagqw=5mZ&IokCb8NfMuyy&sMifN?%UqazEV5x+)NF{fQPdPeZ={ll zdb3p+$J>d$?%COu6D`HJS^ui4*gMs)?s`R>kcz*2`3V=V;Z6Nfoo(V!`-5H~ygxL& z^<29qLrCHlVPXP|*vzb~9*3hV`c~tgPN*oYDot`W_Kd=3YgBDW)1Mux`n}rMGELn@3b+%4u)*VwXX@;9F= zj8&~_|Iu1PEDUXtnUxhXGBTD|$n(JvatY-d?ZoA*9jS4-zkcA|ufdVtt=Cgp7mFye zT*k|No@DNEDbQw;5s(VlG1kz0eFi%GWXP-yQ7W(qNh&qh``DH`%)joYk= z<+%mM(xRN+carZW{kG#)?6_G;^3O6Vy&X=?a6Dt!yX2Q_BV;XN?YpPNxbINf0Xe5^a)v_bnZ1`-Wz7h z@hGy(PD-NqYP9Ezi)8rtv7N=(W|-%hEiO5CZb=ED`O~TO_1A1FKMhsxDvrr!WMpQS z!WQ(b%r2X$Ea`jwe|LW$?jDO`=)!QV%@g^FdRdt|k0ZZ6Z_3(anYNp}LaN9kFP)jz zDLq*F^fBnPZ32RKExK2Ez%U9JU+*L_P=G^hQWuBBxK)>wr2+#7VmE5{{iih6G|RWr z&r$qxa+Ws48D=27>B{+msa?LfOh(J%jZ&uD+1Z?)-%3ij>um{FA)VGWmq@PYIChk1fOC&9%3wFs3AK zIC;18bwV5W0R*>YzDJsgvP8ehc`SOy+9ISjf2xZ+qv4Lftjdxu!a&d|fhwS|ds~yE zFP!~)~~y7V6X(8z0LfY?X)X-26J%CO? z;U(tr!GXMz(n!*1@OHDcw|{A0nqBcT>JL^$FApqk58Z0@81t)BTij8f&Gt+q$yP__ z#I!4QefF#Z4y>_~>Ud9GOMEB^9oZOv#Xm29jHZr+%~cp&c{j8l(S1l@RnC>} zlZtF}^%ESwuemNqpzt%SzNw`HmAMs&x&Z@KJb$CI!=4FmA!=~!)EEg;`+xeeo^AP)`60AeP3E<(NeYRhrnm>n$7 z&uSifKji0uwwi|$ED2CBY7(W1bVs^sj5f;HyLW^yjQ(WF?)raqQ@*6q-w>0|jkl)J z*QzuqrYBLStBa-SKt)x&r9kj^E3?Zs+i^v6)GPStRxLQ^QLPl8mQ)oy{`25V!l|O* zb+$Sh@q5S*NnUzuTil%}y7NHE7=p2-{S=~X17Ok>s@c6k<9&7U=nXCb-F{bsfNGd) z08Dc8lrAa-D(5)E#Q6n4Cec`;J{DyT-kW-QDJ~mmi-HO|#)cw4#fqM$=vmb=k(N^- ztB`&UOiFrgX0{CTjN9$>-*GsI(3&m%py(GCriO=Lyq%b!On#aL;CzUr?=I|vsAO`r z#tVMoZxiwa?N4!gWFzj;6aKS37x1$QN!zIQ_N=AajBf`#>>0GO_p()Uwk`Dbdx-Lm zci}F1tY1iyD?Je}?|MhWr7tH#nNKPz!(d+dErrM3))=qVo_(pS^Mp^aA1})}-8sVA_uwl2=byGL-ip?}&_ zvb>xNMb6%`=!0R?s}yNMeEhzj`SGvsnk)Uh8TIDO0BK2r;%mG$%Yht)5jfH=S5ON?P7Ad_&7u}Ip&^>>RF!Cihhi9fC2 zoR#wK9p!J)KI86s>ff{Qx)E~mE%*)-Dc)yFND#(z#D74+f&)%$9C|RT1az1matt!? zB6fG}NVn(8f16cL9!|ael4e0c0ha-C&{r%m zN5Z*3w^1f?(<&}bPeU@rSv8te`}KD|D-fIFhc7KHDReR)LrAm>q2VkS4_@{V zS6cqP6Gr&d<8Nb|39^KI^84G&McsRQ7+3bSRFX14CwqwObAJ9W1Qhlc=Ci=ae7`lU zGrVJO->M%QwCDJf$s!30vG_;G|F^v^;8jsqUjU`)4$tYz_eFt&Z{1e#n7D7P^*)pN zWBj@Y@m}v$(}*{YJ~-N6`|OHE$EN7ybQpk1!#PT41OVU0v^F8_rF!{u#=F!6_vJ~B z(@Mg>aEO^aH96DVM_lE6V&Dt3tjvBWrCHrI4^DQ*r$2C_wbk6eNX6T2*;!WJ8n1Eh z^yQzVWUoJwZEq^K2^65q4~CaA;$Hu~mbQgAhDo^8pix3=uK)K=;3wp9Y7#H|&ab8< z4xh`VxsQ>td(D|Hj-`ukjxNj%yVa1{@K{rkl_J4Rb&F!jrxj;`x2^8jBd5tmCosv6kb`#_Qve4<|I#@0P(1 zHlMEx?Vze@mz6_o1=-#$Z;xaG1H?p(nuGhQ+ayqqcAFWOW$wCY=IfA=P-7TE1Juxf z+$u?ad3j0WwQt+5>zuFnB%0?svx>uzhs$lR%SsP>e;s|&X5iu2$Q7?_{vdfE#eMRb zpdI!Qy~v37gm=NMr!|7?-e-@q^+wq&W-qBkATky@s zN^_vf&XC?Dzx@Q$w`PTH&9XSO0G zH~lT@S~p@La1?*IY_U*=mq7AvSz-e@mQ=JdXSelGh*46OgduF}A561y8Wo}`A9F`u z*W#mdBo2Wc&fuy6f$sGdzi4ApNM^SCyB=QsU7P&gK2g_ibd3eKw+9>_`_bS?qQpRu zN*REOH4^^szoR%+e|@Mdlj$Xb6dldT&(F`!KHSRb`+EZ}FL64!yu4hFPEndqnPsmG zqrvG@lvv2(XH#IqpWMpI}BBFJ)PsfSB@>(QEl<+VRn0Xhmj#ga$eis!q$aEvbN?-~IOChnX(Ga>M0OcgMs3{!I zEcs<5r8`AXhNIANf|H}8XBQU_-N0;S$m2th^^OcOD@y1oI1-h}($R@{9j*(&xs*HT z&6_XNJYvyCMt^3cJhHA`zb;)|mV0n~cE;gp`hghZKCqHrmC*Q>DG+SDp|JA7mw9aW zR?cwdIu1@M1k~j^+S>M`goz{CLkAmNEUZ4szpMVRk2SYM1?K@NcIDgL2P)5>-&;EM z#=TCHnp7$qfIpDV!pyN_a*}(kSInNdCK#whvj*!k0Yw5<{It~M_7x3E}7ZS%-$EtpomBrf@-0xygw!-Fm zjH`FEJ0T+KyV#p7eom=>e`C1R+1OaFFpj9Onx!lzMVE`0@w50;#)kgc=;u`)ZWY>6 z_#yYZ?tb|2K}j*`a8dtC5C9EDN!b_5?zAh2$(n61;(2Fvi{1KKxjM<8WU!uDX-WrG z99#QE?~g|(JVA~@QXR8Gsv(vtDk4eyYjO{rFXaKN5`qbsmz&~0M>D{=l0JnIP`2lZ z*nD^MzR=(3y_PBn&b02i0R0P)xm|10?;)mE&qYTTjE z-}LCO%kC3M8u|Zei#&5V+uxe@p5egQ9Iw|80DLr>qo&BS?Rv7V`{9pbz%j7F~>&*#)ca)|T1g5hYQr;Io^&zwq$Pc~`I2XkPMJzls zFDIaZP}3M$AlAPe`5ZbL7%yDqOt!GZecWnQ@Z=-Et8dgx7+R)RV$o@`L4yqG73 zE7y>>w1jf6BBqKs0RK6;;q9{VOA{=?Ou}Y%SX77D-@tvYEKP3}%h3F~aeJ8udc<5? zG&zX^sv(@9!?E;>7dG79VMxx0*{fAJ>SZl)JaDstJ!&P#N) z5C8W?hkKqK73wBUl&99e>eb_K`uJ}51IeNN>B-Tcj%eH9;5SpHCZRycf8v{ZwmVd6 zuAEK66!j|ReOX`Lmo<^!n!9JcyD!Rb!Yc0?FZ=nY$^CG7Y{lR*8!kKsqcULM5gzy3 z`txc|ql+8%d>=U~jgJ+T|5n69W8V-dvYK297_SHP^z?XnUW5^J@B}IB7N)LF8|`5WJ`_BxC>SghZLhq#NDe5? zNPhPdFs3IX0*4N(I(q6!c3JB?Jf>Uj97{pFnIayf=DUM#m9e`yp1v11Mp8H(5y zNfc&-vAPGD(u8O{ii|AnIx+8QR#jFu+I@d{bD9#r2xg54_>0!dVdxx#%{yTMkRsJV zr*hluuFqe;o-c`(2TVAQq(6Fd2U{#!nIP5@Mw=W;3VzSEk;K1z;?H5su}OgO{TLlr z1DnhPnT+Sy4m7J2Vn0#3RTfCd9$7E7|E~3ltuIci9Lmqw8eDi7E*BM|ypVTQYH;@L z8l5JUA{m2^xx?pABuihko3t3`-qZRwFRS;5t*}PD+Z}Dt#~s>Y#oF^4%6*zQ@--TB zIlsvouXc%gB&Al*?PTG$JV{b5xZWrT3ZkTRPHw!cUQLVgl*dv@arIl5*-%{VccTawg z;w(KjcK-i?*CtzD-TAjgUJOwfr*eXUwx%@)?6uwA3++FDHn~Cv(iLR>dS-Evgn-Ny z`q6F>zGZnL*53K8@|Hn3UniGj&NqX`AFWP)%-&~|yJjeg zX52(JS}}j&83U}D$wx7~7~D*!wv|dYP5aAJkLH=j=eLW1Fn&|bwpe15o|fi@&GKIO z+XxcFXD-i-CDDSgVU5bYKr6Zm4>H7RFuS@}P8qda%Vl8@U1`76ZcVi8+emYDIKGQS z#cgJwZDFBhj@`rbkf6tXLtQH+jk{d}m7p^hx$>oX@d>K5pn#ym#`-f|)ur*hoWKWs z?mB#D^+KqH^#xVm3(g$h;1;f}|E`RA6j|`G>i1C)y1)HujOxylOgCCmuK~H*?g1TZyU&aMjKHXNHSbsYPiIKd83WLSM}gV#Ryo|8K|rv5NVggqxU=CT zYx>={H@Dhan}0vhj$B1MyrGu5pf0!1u&In5h@Tj%(Go4_Rq2=)tC(6?cgoVyK~Ma3 zMeCaz5960kH{~8^GvV;w4Zy&uVIoFHcXz)I?2%)5MW+UnEPH3r@LS&a)1TEM9;BzC zF+8u&{%H5y{si!d=FlXx@@teXIBvp%f=s+t@J7}8V%uoS_t?q#tj-(6Q5WvvK>h*j z(G81yl)rf9IAvESMde~gNR1U_WS{qupAj@1A1zO@R4?xah_lnL%r9@ZqVhRy&f6qK z4o>u^6inhKIiDV`&dn^(EKYoWW$NC>{AS7yrw54fH@CoN&9Fj{%)6)wZQsJyw%EeO zeLbO=e!9kd(DNwVpOKjv>ysUPsbw83+n<17z`;zTL>o_b8Fh77t|aDH$H_%c&nl!) z+PKq7As>YvOX~`!Im_|7KP~Zk+C>Jla72`mk{K7!-WnNEsw-w_3pjT9kQzzN$HGF; zX(}Ztc9U3wIh!Yv!3~&uH&dgK1O#=XQ9Td9oW-VOs;E4DX*;?pH{wKwLXzKU{dbXJ z6J1abj3L<4==!XHxv@G4xP`c0lusy>-4lgE3+5b?CJ*JNHpdZ?)s^3`iD)unA6C}K845y9&PH-e-zX6e z8OZFN%=%4FtWF>F;%IZyi8qlu_L3;r=baGX31X=Gw0^~O-km?Pa%CfEYw^>jk5)HK zrnbNk@#Juaipw~7(VCI@O_!3So@$QB=icb3yl8ld6GVOa*IK>vzjAO!U=39-_(-}E z1RS?I1eBuZ7t@H}kqHv#b9(qx`9S|7+1-KX{1?CeQpHAd;7=aM6@i=HV^3`gYRCm@ zIXnNzdZ~N&7W9map2cUEKkWw(;dV-4w=lF1w12RQKD6Z3MTOO0dHu>3?+yF#pd~@Z z3@~ap!_MxGn?Z)SKRV=2C9?58ypM~MI~t}>V>FyKEJ>hg0Z9G6rWL~zN#m^cI||9c zesUu?K^Dn(a-P%*(27m)?x&$=#VLrrcpo3{?(W_s3{z?DYPa;__KvTtHGMM|sHU-O z%*=4qg(h7j0fxc9y?|1o=ERh8#l$dK#G4<^(v*@c;)yX2SoPeWY3ax?T1hc(tmx*! zK~M-1qt@=XB>gQ z=Vb$5EW+HHA-$y#y>*$SlWF(ny(yZTgeU@bN;-8qVTMCgTNJx2D6qP8{y)yXGAgU+ z-IMMHY3Y&%N$Cy&Nl8IUx~028x)GG_21)5|3F&T;l$2)ntN!o3GiyG~8a}dK;BfZY z`#jID9%Rb+RIkOx!}`SoJFa_rtT-sW9!!xNLgFo0D4GG7**7&Ey{Y&5b6JJl``pU0u5JGc*qx}GH3;h}UR0DR2kDA(qK6{3p94nNBu0lau zCK|`GEAg3{B-vl2SLkeUg4pf5o8zAPNmpM8!lD5xb27R@`ep5Tpn1o7!^#H?&AkeQ z?QFz*PD{hX#gHzS+@B);S`uyKMIMyGmU%OnR8|QS(9pfW9zpr_0vsauWr&MK_ekdn zxYPTHjGVqccv}Mw+d~@oXS7?4IiO|=s`b@*_uz*ycJ$d-Xkgp-H=dA7#C|0rFc@vk z70x=psvI3={TewAJ?pA?<$N52nT*z!y`M!w!s~$W*$4nY(SX>tSq#b0N=Sp=B>!Bo zmp3Xl2KQyvq^<>E8s{dv6BE@e-e%hG-{Y-38L3;>C>|`mg>#4R9QIF?yeM!?O`QQZ zI=4@tCqk3z=M+gPA_e78(@Z0k1O|=Fv2CsmKsxlEWU2Wfo1F@2cSx*!<1oFpVJ-@o z4qbtco9=P566JsK%$s-NZKVzNTrvko^_L7^jE_3$A$}_^0S@qzyUWJYH3ExTq-J)- zmGDKzwn`N@Bhji)1?{1hYlT*M(&o+SE&^cr(^`BD!fJFpy zMLucK7sTM$fwq7Do=_x9#_xyo*yC!`>~WJ}kD^j~8NuJ>3&^=IcJ$t6|8lR#D zX?c0sw01?3gw*oL`+G;}2q-8DGt%g8RN}!xE*hU*_NZiS0laJhw;P*G8OmKlU7 zfZV7O?`9~6`&U|ya0aA7DXG5le}g9L*_SvSGfRPNEg~7Xc*zcJltwaF&thV=ruY^} z-nN(;uGyhI&Kg!c&bniSrHip-Sem~?4e~XQs~Vsx_xlGT?8&T{diVyuc0D5*)oJBQ zdAbI#!1YVf4@>9|sQ|z?(cPKelS<6h2%c>vTc6~I=#?&+3E!Wh@R&n{}B|b3Sm&R>1_0|C}>v9g^*D+TM zglezbIpDr{fdSHhNEGARO;rA<{TBB8*{*gXI9%(O%XQ(Jh8v;qZZ0{>R=C9;w@IgK zoyhz_?2_sr4>X1IENfy_ej9!kI{=twjF8K-ZXdJZ?5~3 z7L#vN9=Ft&_72~(S30i#PGWl;+D!3olmYBC(2|7 zQ#kIP?C%%)Fsb;300J#FRV(3=KF{0mo@n3vZhQy;q+-g)q&HvulgX%|L=rVC`PDC{ z2P5v6(9-cR&h{>QY+4cYR_lCDVIYX=VE~X{*R2zZC2&+bBU9#Wejg`kzgqWk%mjy<@k0tR2#Uh5QOFSfPJfmG={e zhUEYl(Q~pdhi>ArD8GjNhbv7wtpCC6I|20j_wPUM` zfUIhQXzbW%=+? zN#s`xD>k9J%Tud#tM;pcij5k4$$_L`2-x}On!qO={(O>Pb*lBQH(%u8R`2wLyhffa zQSbenTMMhL?qSAv(q|N!IRE3%N&J<^MTAoBzeeTpQOG{R-j4iq(Sp|3^s=F0&TtpX8lbD2C$jwuEI~q`=o82LZ`P`m@BF zx^?>^hXKZo6g|h@qV{Vy++B3Mrh|P2Z&SQI0_xv?Jcuhf znTWcmytG+etu%VbvU~oUO2B`#g+NYb4(;Ms`*^j5JNjKVmi;uCfRT}r%U2*5K#A+2 z-Ne(xlCihZ#_IoBSS=m%$c|1i5ou)&CSy1q^FSI}+T^6<0S*Y#xiBPnxtn`p*M4|# zPl#)uI1f446fxq^9c2L7x62A8*QPoSuZu7fQ!`gyd(y1ug9PV z@CV~Gki*no>$8eqPqqQ%@{A@&F@ASDjM)mk%(TJnBp%SGcNU#6NTWaQN@;O&;Bd5` zQi$K9Amu%w#AsBcgHOfVy#KA41!a%-M}e zy;)A~xb442F!U_U&%d{4B|q&iR0xlWNg2p$EFyGirg1;3^!@zY zj8&a-nyIpFZ}X5El_*i~Wp1}%Gw9R7t$%P>5kyjaE!x2;lJ5HY!^y$(F>#pBW5NPY z;oRxiF=qd~R$hJvkI=urME~GiV*sIYB_*68T2hBHzvj)J4J`$? zvK&=ag&IETHb(>#u^<|#bfga3P-weItB%oSo5A?rc$2GN>j3nMCKtibCAI(_XI6(q zy%vv=FSt$IKmbhb5Q5$ezwNJN9^xaLWp;OUa(j6!6Etl#!!TNPi9H`X_oBpQ25bA- zv&_ynT3T0!uB$6Pi#9ltL7-g7vXn8o2p_ZL6zOkTaGP1e5B`{Gu)y*1fB%OF7gr}* zZ=LCk;hZnXZDcM7eDi;=@OrtxyIg12e+3dXUz$R%sd6BjwVGOZnqQhtz(CNvFdqzPvYr07!(E`$xlPVroR3p zy@w6Um*6UaCIm!ydjUiqd|5(E$_yXLD647Db90@19p9!iixB^0#YjR(K>c@%#Jb4l z_9F>43n-B7Zq5BPBf%=lWaraz5c>A*b4m02{fTB*yN_aP+tZ7Lb9!&ryVpYJ+4Qy6 z%+9`jScH25ce~`JDrz7iGCGY0u2B26&S~d|Cm_%l?9w15?WC+|@T{fcHRc1vGI#;- z1;!*0cD;AsbRCH^>0t$sCpBG2ySVn*7F3t$BU9e4Oat>5c+7UEq%H!yA%`XZ-* zDlS>FbISh;2R${2QOKhy+z~zqsRn^rS@Yk`ltc3SAdURU-Ug}As0l5PD1e$cRB0f7LK;X9(BkkGQw(z>6L ziY?l#s6Q|Q*14VF%tJ%V0i!=NEFyRaL*X2Qh&Op)%-y_(5=9=}9kkt>%4{h-bc{t{ zOwS%0e;$@Ka?C`3YFA7!zl?mA`aWTQ#=F9owA2=jt6n0QG2+!-v&*-?^(5LuJTh1 zk|U>xg8*{-erQt-3%#qbK+(y?MLaIU_o(UW%1t)I+XW0q4Pn8wq4vZYI3^zGHt+C* z27?D0mN@YiXfRZ2`+VTIrx!9vW>+7@JMJpWo_hPVi|0(w^f!nBIkd?yq%0XZKx@0L zi2{9@ESSt}?*bx^5x@66wT$@gVT`X?6NU{8Px;{^qHjE!E>Mt=u-NoP z5HQJ@ZQ)mT0TFS~z>Q>)3GsrsxwwWQ9}+Ljq9-eB-21?JmcTj*_IIo3sb7uquI~KE zO!x`wy2N3$(SsaflI%BMnVEx`OYCBIw`faB9^$Kh;p$DoA)3^N)r@h6M`%;i5v{;sMfg%r9#2Sv+;U6QK&uoj4^!yFQ>nJB9e z*VxqT&>&6%iZ}C*KjDndG)+y^ZI^YNUhA%_`W%!x4RX+h!cEVeEM@{ZG0yBUx{A>AlS!pPn~uI z&>R~L?Q+X?R*r6|3PRsys(d+#b0}-_RLQ%yH-7*YL%T=gr|9o{b6PZZl?cOJZV#vu*P> z-Nde0S6kvIpz<)v>Lk%cV?(X#W7rAJUHop)U;WmNt4D{o~YbP zRRlwgWOmku8%z*h(u{o5Rirnf_Vdhpf0P#+ms`9wFHKb^kGr@mp5zNBSFnD$uvJo= zyOS8J;)m{yx<4pmXE*5^_rA9KVcZ0WxNpUBdMF8?nOFd=#y}%oJ3f8{`qfZCDJ^W_ zee^)U#e2s>Wxd!&%}f6q=s|KudEDLIjr${?)U|ngP50Z+)e5vNKyOpY9AV{{fdI`| zJqi)8E%qEaFQMI#w{LO@!w}E`eHO1g6ayO#_|2TJO(0yjm!3vc*mmhEFHaI8%Z$aU z3&crqz&|&4n-)6?i+L@sYXLnYMmd%#5_6@TUkQ_Fw^*;3HcOgl2)3~53Bt**Ukpr4 zYTRi+*KyuHncm#g)Jlen`;>ci;brjPbPx^D)BqJIN;owg&(X!Mc@h>IKd=;6Imy8| zrqH6P8q8z80iGxt8`cx(qkO>DxK~RSct*({0j+ynibCfdU64KC=Rm|{Hc=O_nGXwu zqmLZBkZ7)wM))$+Hb8OB6X zDm|W_OaETxRmur>U2XIJwITZWVMw0qo+&^UYAWsb=bPV{>iu{3q6UPdZp{JXI*duj z5p1nNWO(2yQ}_yoOIoT@a}rY#jeg?CwT(D-q9fiySvbRx1f5~4e`wP=JWvx8`Rtcl zmQXNreKHLHIHry$OI7?ft_$MO$8NG2Ct7woZnY0HWzhE1w+$g*48RHs4j%3gFDqj{ z7hp*0k%5y;xI&Ta-iLcZ@o^IAo}rvZl7P(t;w#jr_xm6SGC^ANZ7>4Hr*i}cp6X8# z*wBjch*D;2FWoRwd>1j`+cqX;)e@WZ08O!|n|emDMa_}hPb=%{L=WLg&v-VDw!Fy2!^Qe0yQu*fhs9b2C$Zu?0 zD(FO3`C`_b6C|jL3}EY^$=m^cIFY|@7*&D#yQ;ZaAj2E#KD4xy$=aEvBpM+z+bwa7 zJuRz4$ADG)EY`6?)D^Pg^wI>M1n{mr)x6nr7(eWMV+ioI$Jjmj9a5ftV zze+xclBCHZv|m&r(e2(UCH%(R3L{hDV%XY@v?O3GNf>0eA^>a}ull}{5Pl%nxqO2RxI?_|UepCsyj{*GCycHqJCW7J+ zh^^hE#7s@CVVuRFl^ragxq25~iEuaJ@AcxaVFFt4moy@xK8rG%yROyPoElh$+73d0 zsT)K%LGBB=Q3=^}HM`t~k@o>#_e)ui9xMhGM&TP+c|v{mr^fsjdVs6-E7!#Z*_ag( zx9B5uZgnTCe5_efr5*WbWw*3JbeZ9&?weK+=bTz?oDB_P?ycw8yLU69cvIgA*I=u? zE|5F@_`E!9zFr)_bi+RBAPfYap_NKYkV1-N{f3h2!b%uV5;^89q-IX~mJGE&_}J#Hdg6!k@tg#Mc{%2n95xki;1d@&AH)%a;wm_>@{ zx)X1BoxVHI@LmEQFmn~?xg-_W`?f;}j@c~>0!dGa%#IYS6dshNzw6q8lJ+Dn zt6?^-J9Kz>c=}uS%*xxe>jCMb1af!Dcc;VIJIC`-uU~j*j~c@>aQqYi$t;aL{8FYS zZChh4-jLhL+(tWhCOkXmN&(s*8`z9>KCYPMENZPU9(C^#@dZ5KiZKs*`?$BL8qig< z1#pAyH(A8DX8axk5itf#Ui4_b#Jk9n=n)VVzqj=T?lw0O|IZ)O6Pitj--W{>u8=Y- zdDfy^&tg+cQy5tMeP(fjbc#&R#w)kzvS`9))~MX!OP+h*pl!KL4n+qJoB%J-26}%V z6FTwwaJg#KR zeKF0hTV`Iaoxgoiy*K4=?~1`}wU2*R!t6*cZ*o#s=0%L@@QMl>ikoHT{ex!_F5H$`sBEyP2~w;9JZs0`RrlwjUhgi^}V>+}P&iERF$3af=Ut z?B+Ixp}Psgrl$G+A>zsAak~Lzv1+`t5_>Wfk1rxPo>=az0o^w`UK(0YsWRzq1Rz{A z%XMh=69xJB2o>|B>fm$`4g-($3~VcV!R{g<R)6uo7bh{0#-$6@y4qW7dT!wHZ!mwj) ze4F@dkGA>obcb>ef(}lBWtwrSrnlKo91kKB7KGP9KR(%mW!tUWnUb1 zD6Q;j3U&D2^2C>%+nDeuTpNa@GJnz+=lBu#ABQl)bokD<{ks6~^PGnV!$N~7nVybP z-GGKd{Cz8+s!H58dUd~nV>Xze5~Jir3HQ1Fxy!(tHlE$mVn&!m93fD9BJC6_oWf5U z*{^Yz0(tWjec!0_r1<@OHppnzlT&Cm6mnpk+O5}kdNE2%v`ysdC8}UjI0PW&L)?Ex zQRF`1uk{PE8X8Gp=0?x#ZsESG(n+8pV*gfB2-f7DmT%t+VqWJ>0AN!TxndlSO5FCZ znHO^e1k`d>o@~anJ$Rr-V`D|6q7gwDuMZGO9)R5s-U6OOEne;5x=#tof{2)ydQAs* zlEVUMCgE0P$eO?)x5uB~ed|mk=pbP$NR&}#;0H`$_%Q%{Ke_Tp2R|^2y38Ayob5?& zW9sv2`S|P)ULV`X37$ktffdm8Z$Uv*9->rmgDetmR~6sBc9uGbd=X3h0Q${;T&6KQ z5HP<9=MQjS>?>sP^XGp+*T2|(YAx8$|KQfi^}jnDqQL)$=KuW;A;E;X**AJfa0~?U zyM=r#^&ePYD+Eq1Trw|FpJ_}Cw>m%RfFOv1BA!iA)=&J?Z27Ghh(KUuVveHEQ*$J`e#6+5n5ZWAC6NGJ=)Zk zCk7!i=>En*#PT5Yt(5)9)CHW;wT1{^jnb#_t^+6@LawmI)m2}>D)V)tOE5g@`2g#J zHa7OZmK_MO!r#$r4x!j^-V~S<+uGU!ij@ctFYnqn+GdmdFjC@-3ujl-a(DLb@Clcl zyga8ZW0NMRoM>QQ8F_Y7I+F4(x#gB90S$b7Y5h}RSj#c9ag+yYoBHZS8v}z$g+GML z60ib5-UgToxxj`26bo8to>2Y3ZOL@B6PupCIlWj~y$KUEw+4u(&d$!gg03hOS5wn% z5<6yORLt*~aS9(f;Srj4s*!E4h`@2~GJUsI^2Z?aPjNeW2}A&0jWzES%fXqc&ye~p!lS{925cD?l`Nej?7a>w_q}eh29cascH%~D&OQ2sIp$v4vgBKApSYl74HHhZL=(#{L#%nHF4jQXgr3h0V zvCP+|Hj^11Y(u&43B#}`9n7FLW`h1rot^EWDA*7wAsp~qt zqZwsYq^P9oX6VpYlyW2)P4yM?<$VXwi;(!HoTrReQt^XT1+SSN)byB_7&%Wh^v_OZ zuP;VH0))Q#IbmnE6Oh$5P0ej8$kioh#PayxVnbFZZ?uC6;#&b}uxXD!I%@rd=+3IU zySjnyWKYs4rAh6q2z%E)5jYcw2m6BsVhe z2Nj^S;}kDROf->I;Oa03U1(TXWRUA3NS>>=`C=~FIsRGLI|Q%K=-Tj-rl(&5HVF7j zDA?r8VIw^3Lr8E2U||vY`1wC_1Bz+3&E0}({PD?u7W$2$fxn#9}(iUi`6afxIk^xnLg-hy#5GB#3(G!bfy zYg@U!04*PPdo-|!zO?FI-r}kDZ%gygFmC{DGgl&hWd_7fUM0x!jF!JQkF^Ntfpw3& z=R;Lz`-aF!M&Qiw&=Afw5C}*}NGvZcStrVHM?~?oQ*n7jQfw{X-HP00SIZ1E|EL8~ zImrJu_9fH-bSl2lK&ODmIpLg?Q37!9aDzU}xJ(-MIUT6y68iEtp&*!YGkIXS;Dz1t6ww^=G7Sk6R+SD3vA4Qu? zaOf#0I;0n)fk>-qW@qF>m|t&1(2Q_>I<7`LIk1jv%3nhtoIxZ5%RY}H2P5A7HhzPXeT@_S@agW9xz+zEpW?e|mRT_x&)c&X>6a#00>QlJ&F}0AF z;9fnmw&OA_7hBGuj1v05WL4J_RLl9FlLbxxyw$@~TQ3}apNf~>btm%YDKro88X{tn zvNy;PN7TJ)Bf9vK29j-(@KVfGpEBfe?%DVB^`wqr&Kg(WU3c8HAV+9fA!^@Xgx3+x z@=$eHz2YDq=~CKav?3Ge;Es1jR5hJ?gZ9#M$lB5Sf|rna(zri5n+jwiC$df3^B$4~ zF2JMWm&l<2ixYl-l6CGSGgoG?p_0==57}0-^4U}S%u1kKGAV(dO?dNoOU*DS_eG3+ zii(cT1yoOz0SZo4UxKIS#DMw%+}qviFM@|rGs`h+T1nmT7#Okj!T&btA<+|@c-#68 zk`6QyKJztz2wg*26+WA$z#rwGd;aVqeVV!-SbuAwo>ujkEc?Ic391k2J;fyD8#htt zxfF#3E6xDb0&Xl26YQWPl}U~3eha8G;z|t`qM$qw8Z}02l!ny$tf8dr1BR1}YVRUu zHOtI_8TQjF5J-G5$8oK?JmRU~{WA33z4i4>7Qc-VrsGQ>Xj8p$NGAJR;+fS^+u=da^J z{Ut;9!YFrmjAo`Qp%gvnKjs4Hch~&!dBpxKPdDB*2=E~U4LoLjBg0qzF#bY( zslua$U@t?{P71N;Sb(vPZwSH=LZYFPDswO2mfwK`bxPcJ>OB}IPbK4pr$E2()mKDKok%kuvdxtPZN@`LW-1997*bHnSI;mtJMVP4I=C6x*m&7g15FX= zW(j6dHPL4=Y%S#GWkmZ>%id6vfLKCl6sWh~bJC8Ej>d8E@r9lG-rv)~-=vNfR@)dI zy3{~NI!S&}d3R5WKDB(ekX^Tp3FiQee;>NP;Y%NZ(hkrO+eYC%F76AIisaO8U*^_x zIYZMu-nUg(93A@ZyjnaD95}NgCHv;Y=QB@P*|wB3M1h7#PW8zwb;&p`aemocvTo24?t`d>DaDLWD>jd@A-XfEi{YK&nRk zAHt8^aAUZP&*(p3QzFR_L!TOCGTeNtl71_z8H%|4wdL3P?1Sm{tEuFd=HH8oio(3s z;k5&+00)SD1TYLR@75)Z)K)Tq!rSXUE!fxVbddaq3?)+6tJ#WHA@d%fCh)$!j!+7c zhvWoVJqjq`+^+w3v8|QHC(T}4+Fia(`k-?VtF>3vIAEwrU-;j=&)2;h-jew{%EnQOFUe}xbJ-&2tHk^tXzc{X#{@GCIC4@ zuZ_5hVH~r~?rOV;E5k0~pSZLE{Qo=SpS_&(ucL8%GI7oka1@R4+>^h>Gq+oJR$yuI z4en)gr|AeqrA0eR>~jp+TK4_Fk{9dyAIab-8tC_(JFKA+?ZY@~wOa!B+)~@W3u31l z%dn>qCjItp0Rh?m%Iy}|H9L+i0iEA=(iabiO9_0-3>Xj(1>jaoMyBQvI(>q#OIy|| zVNQysNy+hldo1w^vNU1ow<5hseNQn+jPl~ZoT)~`I~i%|2YXh78H_bZ2oN`176bTV zVF`vkS!XAb+};0C*i?o~NSKx|p@&vGPNt_$|y&}|gJkm!}Ii7~R0DM0S6VrYB1wOuW`|p)oL`<@v+?;6|jK$Lg_Pa%(h#?I_p5&3=JGP(P2!ekJf-hdfM~HX+Rm;Ma`y2*l#RTwu z48`2Q=;Z>pmft4O33%{Bt{c#-*x0haViPD4m*}$jV&z}j;cDFi z0LcC4c8ZgeQ*Lg~Oqo8l75cdqbcXxRPYD0L1#)+USA=7PZWw~tPapp>(KzlW8?+#7 z$Hc+cADGVk+X)%ktw7{bc#Gt85eVXnCM^aP+jEHOU(vaoucG}i*zejvTj1u-Cs?wy zJjO0i*!!l)h8qkb|Ni|uCK+FBN(y~^4pnzd_*XFR;r13xB||ZbYd{3)H-cbJ4Y!Re zV8QqRKa&^2vjCO40mKq-Gp!!#r81k-(-%QOi2x7Z8HFz^FCQ5m)&1RK?$^4!t%zp5 z{@+Iy$)~|8GY3vJ7cB#@m^dzi%rxD=jUg9|@Sx*DrBhK@_=? zQgmoxAu%`K``x#oV$;gru+ao98XX_s+~A;G%kL%6N=Jh)zyb^m3fiP8G~hh2nN&m zWSVl|xfFaSYPQGwF7#1LmOwz54z<{w?eB+f$T^B-1nv#e>eJu_8`v&?2+b{0P17*+ zV{8!?;2U9zNd2$WqO!dNEE*>%#ala3IA z*i@pGWwT_qa-g$Sz4KpZIvei;|8d@OfSGdwi-O;e_C4=&g|zeW0C?0zYd*3!I4iGI zzq^cm2s7U-OAl#_H5Z+ZT9Cty*D?kZ)j{uRrJe%H*8+Y?DVgCQWm3=+{vw+UGFqdv zcwob0eWeg@WIcB!)ttt^NMX*w<#+ugbPE8;5CLs#a@&^?ul;-J?9Ao`9>8XFw#PhP zO&n$Vh(X!Pa$!9q-JQiC#lUl7h?+*975XBzW+BuZ#mG; zPM4y+*a4jCeJ#>1Fgl_w0jWA5iK}_|;So_HPkR9OTMp82KMS zAL@YTOpI;yTR;2)z4y&|TnfXe?}eXh3;=v=t7>scEnwVokG5w}j~BscqYW?tqu0A` ze2F9Ac6I5ZL$_IB2U|2i;;exI_^4~IfH{BxqAm)ZWL<{wGzS@dti1Y~37K|(*8zL) zU|HP8d8LTF%GNd1tgan!4s?!u<>=50=XjiBN;+JMl8D7$x#AjQd{uD;A|r>xzB0Y z4Geoq=GBy=b;5Mpm0@CJ3FpQG_p&-vmD~(FUgEzUN_>VxgsIk((n{#pJG58KrPPRo zikiZiiv}8li45R#3)a+FGU0{;15{{0OhXC2#MAupSZtbDkian1i0qd^7h{>*jE;$! zvZYJ{0A72o(#kHKR+>bJwG2)u%SVYQV~fhblIIpvEG#SY8C^VZ8G*nJj?Cmw+3EL) zv^POGVlhKXQlgG=Ys%y!wEb)iwn@nE8Pz03iIj1W;*>M%+U8`7+I*~7223L~p`FnP;4Ag{1+w_`Zn(_MG~QHDkvRN8tH-+)RGgCJEp6Lz?qVVX2(Lgg7* z+j$Jv2-sFkeOhkTL|I>eVjQB3Jh~}~X!hmYvSe*^uD0NsnO@+QT%VoAbg8-Vz-(5L zMt5{_I!Ar52@HinlZBvX2BCw6P<#M9>YbFH0ejp{=}n`(;mBO|I26df3?YNbK7B^= zib&8lYc+Nb&0M$Yt)YVT(*DH6crHrJ)%bIO?y%?!g~fDfF&BDFu2XtWPM%E>4>0`$ zHWVaJ0a=zMWaA4f#&~8yEL#Io)Bwuzfw6_7h%%DS_;8X-%fRYlG62|fYDMl?MxQ;; z#6mO#*_I%4jZ*!~Uf#>kJcmDl2Y}>zd7Kvs`!~sm@Tlp$7dfb zW#gZE(6(MzTTYh%lnpM5gjX1N9$PW>p_CC4;l%HI-ogE(-}OEl<-I(g-PJkdq7%6f_1wV4?m`vvki zJ%CJ?oS2xATo5kd&B4otwejtY^8LJQl-IU z#P|sAN6zP((Ak5e8s3|wFAI8Y8Apk!celNkebF0N7W|c2$S7@;TBBBAz9U->o$lLy zy)u61Vz}`!{?+N}%FR*0qOarQZv68~nQ!EtVcqsKO;7hM<3LsRl&EI8+PfJ%Mcc@eK7i(m5nWh3}($R z6cL?_*KK!~J2mSOCt8MH-sf~nu5luTu$u(o)mK0x;dvV`rX6VEU=x;lvn^ zr7ST|$axc(6Y*WwTy!KHSSp{eDG*5dJ%MwQ^}sSAz{jr`!OSX{f+SJT6h|GAg)mVu z=)yP6eK&{!7~#h(#B(Py${tkY_Y1lBa>SqR%wcc$8NeeksdxIq(6}a>zi|TuM=GN- z!h0)9Jtvk7z(b#zx|~-3jv1WOB|bM&^=aBZ{IeD_BWa^%{zxOTL*bw%ZE)|iPxx$K zCC6b)byr-@VM%9LKa~_DsxAK-kFhd2`Q8e{o0o_cOwRef$ZNcdsr06tgM?sVW3>j| z{^PIH5S?8!qPg+PJyTAGf_FQNBR`53oLsq+ljpz0#$HOJ9?6W)PY-+AzMdBP;%au+ z=qcmV=Stx9*f7ppQ9G77bkma*4p~y~oeW7vmR4sIWfu_hGZhAvp>5XwNap*)O*E{B z?Cpph*Ibbjw$fn_?*K}V85^#e3r)H4Ih10N5cT8S19YL#Kc=~`R7mQ%R(12h{ zr!a1F0IwVv2oSt~y!#;q(FO@^kicPTa|QH-)=Q64i!z?4?Q~DlJ$VF}m^WOWxJY5& z)r1k40wIB8l>nO#OZ?iKPu!)r*<~KGx`0`mYG}PP%>Zmiu}S*VPXz-nZn%nJ`&UOytEpYE9-hh?`#oj&fS$81!9en z1_G_|rox86Tx#{#5&Hc~^_UV~0G*wAx_LY^0#Y{2 zQ{7U=$&8JS|3noNd47Hli0LiE56{b#w}MI6rFa7~&=AVuJ_Fn;!+<>xbg9&Gc;CJ$ z?QsMl4T#G#y?FYRl!Uv3GO#%Q4ahwWT%{eS&-PY^B1+UCVUTy1G*>;bYrF2tL%G54 z9!~!9<$3%-8M_=6>U8bg3k63ztaEe_Vwf-?N0NfZ$1k8;S}F8r37|WupB7|!@kM=@ z@xdNc8rKFjXK($X!1!Yt8g8m?VqG<#0fq`Op# zL)MBc%qEKoNUhVv6)4r${4G`C^ZwdSH-8RBIZ@UFnR7 z_2CGxnL35Gl9Iwgi3RCl@0KidU%tjn8|Y!JbD5}HduQy^4U4|QW&v4#-QfadckM`aqaGyM2?8?F z^0p3D+2Szs!0wD8`4jabw{2x{@7^Tkn3CYMKDMa0R8s^Ju?O}uDe?wt36ouvFC02- z%G*ROW<0?MAuTXByTz25Xd~z~rED>Yq}N0>Hx~OfgHYyhK&pYI+C3oW-rDUKexVf5 zD(AF%voRMF`A~X&Rz;7BT1&1I!d?2Vh1%8X3|a+;JMb0s_lCU2o*W&aBH}8(YZar8^2B(EtpPOPg6`#}_%aB}d>)Bcr&F{gD`xkU`3fGjmi z^F@=YV$l^`k5qxJBf4acc;~-124^d9k!#7f*`?jm zcC!d&6Vd*jB&F=X6Z+=f!~CBlxd`H`(yc9%1b!9J{SI)$pfv$~UBW6iJG9*$NN}r> zBQg5g*k}&jhrH)@(ZCaj4lLFKUJVdB1`)Be(;PbO$5>3jJss|N+uS)kO;~Qh7r7ES z7i$AEj1mz1h4z7d2m;IQbcP!~!(Bah#8n2j1v8Wjdus2;z4puK4_fJW=3ToJ#%}|~ zlJ4JS2+8H$peylA1#*H6Q3(|06%glAlvZ+}a747oZF4ZKt~t7aUTgsG=jkYR?@DbY z1<#4)=asEZgYuu(H;X?;9Y}V(Wg|V`w{yE6nW3X*dG{E6*}&O4wY=;NhQZ}X`sN=@ zu{Cryta>r&qNQfFqnkvRM7^9bsjVzC&8OX<*ka5F`VE`%2kWegZ~Z^$Sa2+!{_2T| zh*$=B5Fo`*u!-v##FUBiAF;##ZpwVmc2lUcO-*Bg!EU_*s>Qjv#&>BZL9tAM7iML- z4xBtcz(MraZzx;3sV?H1@h65$w!dJKZ@9JElO9{Vg6a?FUEc6lcmSeQ@*M`hDi~vc zzNsc;Qb%*&lo(ulm12 z-2UPnTHukt1pNSA!Y6pFHFI-uagpp{j_VKtfx=s}aN8h-B-Xrx2CpOw%P}ul3HyU% z9_L_wwXDiT(_;5z5S)f!!fDauo>;n8Vgs%Dbg^1ykM^0tXx6<004@S+8>!M{LYLh5 z(q`lvZ*FwOm(}T9;T>mJYi~T|G=}b86EqZGMX3LSP8-lPCMm0WV1QoYlyWY!J zsFB#}GyHe0jo-Jvyb*W$8sxjW{rJT7t5zvI_T=S1!G#`nz4iRT^r96AA6av8a42>v zT5LLFLgxIj49>*(>CJqYIp_7s&ck;$Iz;W{Xz z@SSMv#Hkk}FJ`YdCzXDbqOXu!k=fV%fEB;ZX#t@?orL&B-KsQ^vMk;O5Dd~1B)BLeJIEd(dH=T&~XT=x9;&(~JSo0s+YWjdkj4LG$ zjIsCm)%gK*Rv+yG1e*TpJa9_-7s@MQYd~-{F0V9*M=<-A8l5hgRM;tp4;JYv!D68- z*(&Ir_Nj=vfHh-9d8^(VU1uVh(fpFMmnrsB`d`n-x=OyJTqFMv@-zdiS>=j8T}VGj z>~;8)a$vIw!fZZj(0{3Udlwc=mz>ew?rXAzx)Z|SDA`6wZXFDQ;Fn!j8-WrQm;v4j zOUaBHq<@031L`4=`r`qsD*6e~x!RjpxFlvjc0-T{ra*tiMZu=N)Dsz0+=Onf-D5fF zF(P4jASEROneanX1dq1%H)GWe8{Hx45XA}GY@mEv$*>u%3k+s`J4yvpk!6Xvs{nF@ zgZR3m76wUUW1Ek}y;&*>{nmv5C-Sia6CGrpa*`OZ;7n+uh=sd-X|11xsi-Jw4_lrk;NP^mX7kU`QFbxs|8cp;!gYA0+qXq-*E# zER&!Ws9G$=KA=l1gIh1ki025r^Gk$dLcd#<=6Hs3{klM^6~N9Sv~jbwjp67S_bp3H zd|dQy20stlAP*$@{blC2K0r|$I8DO}z+F-*aGM&;hx>@Y%&$QaD%^YD8m_}4+DZ!VOoOVJ}-ZmA;1kj!x!p2Rb5JVgr$Fm(# z)h2O#)!3qbOz0bhfx;6nPb zBJd-R+L-`~;g8>1LN);smI}BG3(O7$lml|}vHF0jvr!qM5r6kwVI!-Y5I+kzr>WV7 zm>piFANb!j&u07M_!s%!rh`bB?|}beX$%&%>UbXn9nL&5Y$t#R;^i2a@DSy#9PHuh zKrGON;5)9=2&r*ly5Wn7408@|k_7|~Cnrb4dHHn^LGJmh!ygOa`Wxy`c957YvD}BOwQB(iz&9D;+l;CjI(fXujdDxJLrPP7p?0N378k$R#sL#(&aY>V(^N(GX@u<;0vhHWaoU4PfqYd zk*$Nem{Wdk?^T%}clJylTi8V(>M;jg`p;W)nolw;l5qfmHp7>VZ7hielQL*+F3WO% zGO*aHjwV3|JvQhO2rWL5#mH*~-XLS!;o8x{-s;vo^{r1SYREMK{TG0Us;~i57Uvc0Kjdao^wXpgaXG}kUe0Kr3${#GTj zi^iL!oClvkju~(o8I4{BPIK`K9uyZAP!`Z}!aDRc!m!6eqRDwk90BWKH|_(HS76Q* zUKdi!sj5OyUd0359{*9a?X*>-c!ke5c{J9-CHMmi4KbBSPwFMafSQYu)jxes z%dkvMc{mY|^iqY9l9HA!$T*5c$Q22R!Y(X%r63Y+0XYz#$2r3ilDwQ8KL0O}O@Xgi zrqgt4B7tAmdnwii=zy%(=M=f%^plI_?(x%1Fv!BP%+_mB>|0$Gq2pnFVJTdJCm(FZ z1rd0t27svbEW@Z-nNpaRz1Op9>gss*PEZf}01!MNYMHC@@di6Is+}#TuqpF~`lg9* zR-L3D9_uZB(wB6!fb28ANIULTT$^Z|)y1KfkD)46i>NccOe~GhpwRy+T z(@AbwfXzn}Jt&R<9sRa9y9<~>kZqd8|8T@@?@GwrZ@@) zDo)jni1pd5`;YOqSXNux?LoS`5s(t4ky1obN)S|(25F>21nKS+2?=RI z8U$&O?v{{{4nayv`rME1{k`vZ&iQj+*OupDvDRF3-eZj4xQ4K{>2D=+cgZA|?C``E zi{jMLgy#9bmC!SO&ifL4h9$(;{AMs|wht00NAXY252dzha8`u;*u>2BGc+PM`6iG! zKTOJcVyWDmNIm2T4n$AbFz56-BSz*}&EDpSVU*~C5#y)_YS|~>R(gK3!9F}4V~fpO z?2MAjNpXpj@PzZs!Lb7o%5wqm{OC3jKS}un;JqFxX)9G3-|$}Y0nHSv8Wxs=w4wK} z4>g1bvtH>+R7A+&3*buh4gnZ=nDwDqSMe)tk0SHgcl65V>d#EiUT&<;-{G1&c~M_m zGr@a-^aq~m4r$|PCRuaF#VT>JOAmy&*?S6c__NnTjHafmK#RseKa@Q)O-;E6bv&*A z8(WI7X;e7^d-aNS{livdD48Btjfudq7E}4ZaKx}+84sfT+nT6jm6ey*-O(YtV6i{) zjxmS2a&$KKUqW$veoC?2ht2Saub3t4vwx2l9~H;-;ysruM|w(B_A+Qx4bB{?`1w+f1WE-g=%zH`jP?kJE&aMKPh){=qHFT4*Wi zghc%Q<|;QkCWH4fu&yG2ohATn8~V?nTALu_lo+b^_gQ z35+_I5R?D%MVx>j5-_5T`@edKH3}sLealY?eyUAA=QKlJ(#&WBrvnOVM3Ixo%j%(_ z*SVRQi_0TQjkSB%8!nY^s4R2`WbCf|B-T2eqOlG31-fa zhap~;eo=?=fNE~IqxZ-#`3A!tTC022T=UREcT5{audiV8Ez3J*C>kmZvJmy|LGli! zwI%{*$%pI@A%ytfa&`bX{4^B*t0W4oi`5c!y1*e*F6Xx_6GCBKC#W;9#!qpjjws`d zSAJM1dK8~}Rg6_ZamxANuo;hItFEptIhmF~Sy{l`7F1S9jU=1=rP^Y?cmVBvI|q>z z8@LXr<)ui=x+i_N>(#1{$hE&dCLTUPI0>Gb>h^K`9?g-Rz4O#9kTox7Yd=1opzdQt z;`VIr@kOM$coRAZz`q8Td-#9D&Ot3X@1CiPK*daWiOpvSsP*W*=!>s)_B=$q06Lw)&0e?OR$tdUishI zLb(*;*K_~)Qz5sIRb}gJIMk)s-t&pA!~=ObErh#3_32Zc@o&$^9XBoYABP#Prbg5> z_eY&Mm(J@=Lu~E;BXFZLi$?_p2DW}hZ;Ve*8H5PeA&)>LH1sWcuB| zhHv{iNCkEka9|Bn@WBfk1gmJ4PTGWTK-wgxGOaQeMv}kD^^8HU6AbK+p2&GsC@QH} zm_K!sys{8RBczM{{LNvKO+#rMxttN4naVtx48m<4!HqvJ?pE%(65I>UNk$W}$=^7% z@jUf2`^y~3x;p%p_sSx_cl%XM1wI!}uTyi>E~21mtA}qvU866Lp4; z8>!!}H{eu&g+K{ZuQ?k@PklTr15~kXXMs4Sp&) zYtwN$cGKBp2~2!U+ZKBdBjl2;BjQ#uT`lEl+wO77-4D5&w=Ch@O3?lpBr}UAe}q@) z)Y&X&-aU*0%q8MzFpex*@*uVIHI3gA~Mac%rUs4T4v z>cUmnWXV@p;w9VLTRYuOVJun%{_GpUw}WtNb;QE2R6N<><6F-;QpP7>zae;5q8ks4wBm-KDS)@VTiiLN&yL%joAXMGP==A}T7EBXw7D4a9OgChkVZpP0ZS~L%wa-JVE3d5Em3P`FPRV_z5OX;$#1Z^6BuSu%RbXGQV)&ar?=jQHS zk1o^6Bcb!{Rp2`P`ppPnFwwDHEUuN3EK@pc#~e*N40P&=8muBAdr7>1&FIi^xVb*X zr|3kv4zCw-D-RG8zth29l;87Q)+0@*5Dk)irS&Wu^?IJ+wDsaP#Y}+&@$vDswKN_^ zq;s68Hq1OuP*8M0jcSpu!Zo|vrUkUPBRb)%C?FF=DO}~d)=Vq?%#aG3>L&~Y<>ck# z9S%q0sz(I&7 zAfD4zHXQRy-QCmkqY~#>s}}^$u24Nhv`Buq8poM*AD@NCE0zM$g=BDzNTlZ zTe@&QkwEz_fVBrt+E=$QYxsdtyg~GufZQ0dtXKtJ;sMruIm~L4KT)%C=(zF0C9&*F zJRkkIiXYb-k9>u*K)$mQdcJHPFawN0Kd;TQ^rhQI%=0 z5~?-cvi>`A;u&K3^-oS`iG)@0H}tE**~G%iK19<1Y0k^(KZ&GSr?t@qN)ZzdKfq$x z%E>?s#%b#eYKH7(XRXSnxI*gj%$n7^e88WZsqxr2J7B;L3O=C-N`L{{JN9;8bd7RR zaA^xWZB4@sS#T_mab;WHrvAXh(o#FK-K@9ifjStmsG|`o0`|*)(2nhN|2s12ikVtt ze$N5|e{jeY0vmARY=M@cvNU))`e*!Z*z?Lb)55QIJnm>ic2-F6M9&_S)V- zRk7-TdVj0CTj8x$H)+eA?!V+je0>u8!siHbqIOB&YeY8`K*-j93}s?qVBTSN)>2SV zu>8r4@34~>Pe{*QOJ>dpJEyBxUosw>Xkmgh|6yw~+a$R!nRmu0HSL3b+4WKbXs|IN zr6GYzXgRDtr>TRZqsZXk6d3XlntWAuV1SP4KkYeC`gLXaS`$u;W_@raOPzg}T0E=o z(XBe10RO8t$*UKF~gIlAB zO2!}fA$sqvrZG$4!U5OQ#%3EH@ru{B58yZ11qu$Mh(Kt1Ss9Sy9Y@J9^i6`0vN_XGVfL0H9MFlW!w=~Oc3UUsmU=JN@(pSyt*ML z5h!HzH3i}|$r!SjLk*wp2PEw)G7rUvQ+K&9EWU~2AU@Xsk#FAq8CyM(203rWxZr~rm=RfZKa70kju=ziHO7;KF zWWvu)lmU%pNmb;1U2pN{tokqiRbm1YytzS^j@e}=j|I!soV`1N?z6^wX#ENdn`r;2 z3oD=CL?Tf+8(`S%O8`AO7LOm$_U6~kE6?6(a8bRg6%lWtUnnlA+2rZ@KIe6!x2Q{h ztXkk1Ck@%xGb?;-p0z%bJkjirc9sJ*Y4I^}Xn3Jhl$>FQrT>W*To+eh=6 z4Xc;JJ6m3KU@dm(Q=_nY{b=xB>D0iYpbSptd2#1?3I8>HuxkqtypRGrdX)CM?MEQ{ z*L*0dsX6>*-15lr^=PC3@kt~T#q6|B;)Q#xGuDe+{{)#dQH6vmZ#?-B&Wudm%Yyrn7V(bYQo@hfN3X)>NNAR%~K#s=xN8ICl2vk=Mjd!r|Ua9o` z&ZQIZ`u1jT1B33nYREtfVpCnCrd`j#SrLf+&8V7q zP{_};TySqg)Re0^6jR1MAT-}b#%|+5kvVE$O~aee*ZQQt9g>8$EB?A2AN9EL@$nhW z6Cm=x#3QH`!k8Ef7LTvqY)1I%%Ne>J__+74Fg~ywQgW)=j$4xxN+ z#`v)qKJC^fs{VXiqB22za^fu{|Hf~NHRFwU3DS)U%YJvHKaMFw=B3WIgjN}uDyytX zmkhW0s_&iqjj}Fjg)#@55tx_T>8X?2CZ^!kCVf09>-DDN*{a8}rPw3aCj%P{y}uhI z%|kw%db);0322T=-{L}@L_Lt?FMqG96nVc-4$VJfI?Y^}=&jrtcLTfA<`|Z}QTd@< zuvK-%*q|P3Yh${sX-ufWVhu{dQI-0N66$%z9)07kKk6?1xp2ooVLsdO&ZF5I`3_2& zH+XwxQxD`Cw=mDo)T!Put*Bk+p7TP{onEhcG|yx63e&r$fvs`V#L3?NKh+L46Tkf% z8^v%h{`SxE9d0Ts{b`_mw}GvGN=Cs>7$Pi}@a7F}Fu4gT`k7#fd!XHc3I}r#Aq52u zOqsuScV01&`LlJQf*$Jn)dLx{X9!~3$v)L%RZ6T!Yn{9Y49yZ|LGDrqk{{!2&fq<3e11hFIpGo5RMv zeWDGgyTsFMSc-gdb26`0ZVFSkX1bcHJF!)hUMSj;Vc*cmR1HG%kHp*f$f|_Nqd>5% z*5DBtcmMa``ydmh(WUhItl-2ivlmbH#h7MTZhvLu7S^S4_5Dh^8Fn*)|Ef5r?KKsq z((ECZ+{CgMXbydEumkGZI;fOxn%r`pqu{c?9fd0J#-x(9a)Nr0fJF0$tXsl{?OLhb zjCWo%78->`77?st61NwaVr#_N&|gY^axU~1`IJ?L?(cVVTCMU}xXD{aYNYGjvhdsJ zK}F6tCAkMmDZCD>9JW=vrj+F5_#)Frm`J}6=UdOLmH<3%cJ^DrNHA3k4Z&SB0E;8! zWB`C8RX&v2A6B1L!t0`sYU`!BitZGPN72w(nuzIHZbi<%L`g!cU zcyErilkdkHak`!Zsr9N_C?7tgYN;6$N~R}0xn9~GRh%euQF%!k(wfEGhpgebt5f}8 zU+B&Kr4zSz{ORJnDwH2HGn!PDzG&9tj};T`XztAHx@hSTa5cf|u{b-fi8VCr!2VVV zhr?WOmIRrI5HDJwaYo$|&*6M!qH1f*%l#slt<@s`j0N=y&gq5%gQv0Z~95 z%q5DR_ukrWY;3MDErtwR&=OFTjYO}|?&O)N7%MK7fGx0-LKmWqUZ?b_Za#j(4~QRK z*>@qlDLKshuVzWKQ$r8S0Yrb{Y)B%2ejIW!QKCz(RNP=a-Xtg$)jR$Dy`z4)XQY;U z@^kYoF|BVsA3yP3S{hoXFme_M%h8<+UpIK0qsVl5&W$H>BOyNP_TlZa0L>xpKo1=x z6{%~9vvR&46TRBVWlk>#YU-G{_hreC_dIyN40mF3HCf$zh!JKXzNFH_jvAWCNxc+g zvdS`ISSs+7_jjR=6VRGe@yMht>PoJ8_UzhQP{=uGq*vNyhU3k~&95|F4LyA|@Ghi& zRt>jih$nB9vCrBESjcKN#edu$ty5E44WsPO4|B4ZdzdeQzfeEz@&fq|uvGy8VE|AE z5F>*i0mpkBEz2BC3$f#u4i2{l`X8!fL03U{BIa!)WFK<3*uhp_ACjjLk?ym{nLRT( zXh+I5PCHXh1e&jA2M=_n=|!eqPsV45I>k1K9e+4bKE|sV`cc`17TB*d_U7Fq6_r7# zWivI+cfbn?4e|Uv9|*I3kRHC2cpiTH@q{jw5d^cK;PBW|BpL+NI+^G)(BT-czTH7y zin@gJY2LnJMDl??|0L<(LDvlFDnf}@E9Jk|G#U2-oAP-jtI_?LLZuoHvy%Kt1*BIq z7Fzw``wrwW#H?f9bsSV8<-dLwn^oyK`hV$`E{bZnmu)_C~^^~Vt9P_?@nnsAPVn9}tFfB}E1Y?MAKe(Ub0;Y4)P)KqOpFfRnsOLN<#D?6 zvu%A*sQTsR5Smj$r3J;bQO<)r`rm7TZxm{|8Yin&+;^NDoN#bl)u*9su*3iOpfz}* z9%|nd9z1{*xXmIQuV%}gwzojc>-Hfe}?!qo4Ihx@~`^e|P@;@Iiw!*5#6rdm8qyj(~%=v>hB`EP~g>8xZ@fZY-uvf5Jja z*0YQFEuOGZ@_lj%atpd6_k|ekuF1Q6A>Pf&H;Ue1Zf|n>{Fr!tQ@^Tmgope3+b5SK zNP>fvJddw2X)JM%{Iru_d8BTESAXI9 zU6kc0;37l4c1xx(Zr6U3k*e!zP|MPl`jTt(chWT;q_r%0d^r!U-QPlLNke+OZ@(Vq zs*a9RAW(~iCn$nw)y8!^F7^6z#I5R@*Z+O1HPy)0b_cYq7rW~a_3s7q!LstfM5*D* z9ws=fAoIbFH;5I3Xm^F-&>QSPT*kFeIQ6atF}pE`2=7oFMsu2kuQfg<51RlA+TQwR z_InzV}HkzbJLsLv5r^o&Dk+s<*E-SZlSS>372;HTCwMG=tZE>1qiP^bH)o_dOUx(SQIx5T2(~n<=v#Grw=Y3Qm*`Y`E~T@ zlRkJci%KuT9QnB>toQHwxEqgB`I8C6KCOu78r9}Y9>HN(*2%r2@ff*MLS19|=VPtm zw)q2Y&%t3~VM}4_*Y~}Oi)~-_T zZf?QS^)@yxj9OqFiaxDuo32!c{PQ+}8No0=5WGw7HAR^j;R~aq9{{-#I-wk(7sT z1ClU-zP^6CW)4HaX`^FVN;<0OJ!9-?cthqjHKy9_ zhP>IyUB6@eF#VT8RG?O0{^jVCtNGXUinE27czA4~zXc3%(J7d=Uqm5*&Z!PZ&5qh_ z){hCG_m(M&qf;*|E?#qkC3+-BET4tP{%9tBn?oxgt>OGE=k7h@rOxP}%N7E$>4_GKbeX(eo&3i}$ zBVg&rh{2M5xc9hM{!B*usiJgi!GeKR(Ju~XM#fep%xagvL*w={@5IE!uR50vd;O1Q z-A}C`#>~p{=S%rTMO=Y_lWgX}Arp{0dOAB3_>2{RLwn?LUh((;`Ix%eXmYR)R3EL_z|bumcIxck;gZ+vZY*o>ZVjg%Z==EGxJgrKn`W^5yjF*N^K= zjki^BmNQhy6r->rPwG_3_TRv|1mP6GQ$H&U(2hkuW^@WJ4!L$4QB;Wf&PW0C#dRps zEj%ys?&0)E42^16@%SCKV$S~cUf0R3i#AWrgIaX0&z2Ia2*QT4*s+mKyDlPmcP)^| z?)ca7qoIv^mzEIwt(&%SqcW%O$IyTjwNCKK6#N=i?YMB6qw)#%E&ew8Am(@HMaY&bV1R>? zz)XkuhluZf8w8yh1K^ za5Id{+ge*Qkb*q-JEOrXsrkvI58NNw*e3~p=hd{+DjDX?+1NM)QeF39^(iusPl{ph z+D$Ynjq-~c^KY~eFH(XoWlhUFO>LnRP<=&~QW_fiV29gR*~kQNKaX)7Y}sybp4*Og z%hJ34-0q22(#3_s3U5)FP4ivMeP<^MYcHvzV*y)6gNgBig`A- z>UoyF*b5TbQm=Y0VQpPRj?m7d@&gftM%Lg5f3DLKon)c@4$urRM=Dr@&Dh+1MsDr_ zLM>S^cJ(_;A(c$&$H4Tu+5P84DMUeAkZDA~)%11_*I&g#aec6-a2yPeZJcfw-%Rl) zzq3hcXnX^{a0mt3-sWObY%JOl(6(AyS{|WQMN?p-bU>pUvlA)VZE`ZQCM&!(Z^0MX zJiygj$~G^&>0=-jF&UgpIQ;NWIS&E?I15BOxIf@(3c|&1yyqb_OS`k}d71z4=%dj| z*gMR&-QJM_5Qo^V%O=U&wH%B?_F<6%1><7e^L#y876j|xJFw0(V}e|6HC;j{0c$XX zUuFCzCnsSWX4Zsw^r{oRk#QYFq2SJB1{4>E&79Qci*cU~B15_l0-zr_&AKlFkfbg5 z@bEBzcw!ia?Cn+PZtkbzh4(jH_E=E>uTgq#M`vscerdb8o%PMwq$DP^0FP+)vJEwQ zzwe@lS$1qq=z}O$F3`GKHwK0ZtUr%>>><6pviO4~!JM zU`wxep(d)6yf>d z7Bq=3)9qt4^DgbPHVnhU^Liv2&G1({qiF!*@7mj@D@sPvW2A22K4d$CoRqa-ze|bt zF(LYQ|9wMR_-z!K+A+HcQsnI2Kqs8J&wUaR@$%Dtc+d>ZArpz3*XRVQ?pOzriqjsNHaPsw#-;Ud9~>xyTg51;jjvjVCaW@pr8O9A87$Ji1(I#1qmrBYN#ks)yk&D&mT4+ zqCas`S59el69yrA*F5E)u<(A|_0ApPkRg0lB^S9HO&Wq6Zy7=vE`a<>_~dPpulCAc z?_c)gDMCifL_>o`1T9hbVShh(8@%tr4n8U?iy6x4{|c)_vggU(NTP#rklyPyZjt;* zaV_gS)7`jY)d_EMAkbj=UUivMs9loL9>kui5|3-q1q1}vgpW3Roc9VVZK~$ci6k$} zjJGXkKXdB;5TT-S1*$^oJ;N1Xs6w3!E*_ryZgxBiYfbO|{-vL?htcuurLL;#{#s^a z|Jls8%l=w);i(SF+HCoY5!Y>2Ko(9y7spTsohyi_-y)%Ns#-yU;^Uw4dIp{Hc{RK{ zgWJ@Q#u}B7YP9$QVH|_<7~U%*k9hDXMP|~uc0zIp3E%)y+w$)=0?O*R< zAM7*;?a|CmE70k$)|9NxW+w(l3Cey~e7OyEDStN~KQqwUF&~b;x@b7OF4{P&QnfS7 z64+1WK^PJBIq*MH(}>v^@GbI-Pg8M<_P7t7mopxy-j5^^NTImU()t8HnuR5{V&~q@ z5P@w_RFq(*2Q_jI$v+=Jkv|jptT-Mis&3=!9=y-BUc}i<0d6YJ|UK zcS>KhRY{KKAEj#eF^7^IX3e=EEg)AJL`1Yeva=)n^hiEYQAVb{?sf6gXV1(p;y&Cy z8M6LcVP3P${4&EBIFsSG9M@wCC#6@??&Oko|EWLkB!&Sord2?B0xfyc{>>}?vSdZ; zHT-*#%}ejR$b$g6M4UXDDTRN0i|DI6d*JYhg3=^#lBBZZxpbAjOKem^xTV3sqn#ojLnqmj=ALNztfEQy zN*O4!v!C4qrymhTM}q-LQ$1;<_e8;>k&cAP@!e@RJEEUHfhCH<{_9<}2-Y*AZ%9t3 z@O~ADq!PkF&9$f(yv=gQyg?oZXn=42)avB53w}I@yCKctzVWDkcU~x2JeR6=jrwb> zEgUkPyz)Y9*V~SoZp9+BFypy64`>d57Dv;YB9c>3z67%yL`nIWr?vO#r-8?CJ}sYn zHU|T^VHd$_EN^e`RL={l{=`{gGi2Jt4qQ?)w6VK~>BVWHXluFu=q~&u|Eg`!^$9wd zU^^!0Kabx$xd(VcD6(@E$#(U~=XY{Y$42eF9jvz2i}UG+UtojT;IyrKj*4uNX1BwGu<{!^ zXB;G!gQ3>xWg%}b6Pr*!6WjO-(e!$jzt83RloBmGqddl&kqfL@R{zwel`|lw%y@WD z#}aP?Hv;@`V~k(EKiTse?NC3KK1SF}IwtYN#IrV@)Hn|6X9dn;u&)qfI)NINk$f^0bfU!Glra)w14Ba(h=(q zGUcQ4;z84UhI_s|QSVwQ@2Q6gz2A? zD2O0i{ecHro*9QWFHz2{Py^NM)+N&wrHjm+y6?9b`S`Bg(;aO?cTRx5^SeMfT@h-L zi4lz9nrsYT-KDAB?B^aRuG3aqRWa2*bC1s%siNVSZk^*2v#R?-2QFdV*9W6V-(Bgq z5Ob!~Z$}{9x%4G!1y?@R83bw(y8xRq|*UxRhzwNa+nec}Qc_hwIs3X#Fx>qQW8&7oTG}wo1;GS%2?=_SeY?LW6nVx> zN*<9XBd?^yrt_Z_C6f_dqek+R+Zvrh1Ob;q)xJTvLc$6_U!4?fQfTSq-Nsk$=Aj6E zzX^vVJ|W|jT9KAkC3$%|J|j%Y^lJdPWokcCcG$l|L}D|?CX8@tI7o5ry!G+lkE5C<@hfDE07p4~xO`B=G5F&XxW-0lc zxB4x1@$6$u?GJFENYWkw*GS!W3y-Vz!NzTMzC+B`AP+eh=pobrG!YKLj ztD7ozboN~{2glmHd{$j#UM40zuTs&Ai_-(4uzTE9%daF!t`!4=v6Iuh_I0#&p3N{R zw#5;OPk}(Z7hlpDk@w2kBP40Wv93!mRUnIqKhoFtZm3szdIhW1JrIuA)`lG?yppsX zJntSGzPK*iA@P07Y5$-~U2Syc(XIZt?D+ZVPg*%MBd(_hWkO7)T~M?}c6m6p5J1Gf za_6T$zmvubc|a6C8Tk-Sch24kG0lx0oRQ$=~97q;n5!>D+#bU1ey)0V^8J->7#J! zI-BbjSjnV`ea)HJmJ&xT9;SB3@xF!7#rN@n0htzsynG^A*%l=4tEc=Z?9^3Cdi4W>XMAqq&Oo8S>)N&DF@(Z8_+xWZ^lVH^-&KxZ zc>go9<#XOgwhe}@S7EZPN{$1Q3}4aPaKx)h$BwHWE{-zD-5w6YrJ*@|V`PdqLATf* z9*FX-DLN?$rQ(E&q~!AQcz~15tKn{lmlqPLqNJ5#tN6FU&w0VpWPZZ=S4@qKj}Lca zn~~mn!c<|9gQPI~xg5TwkTZ$OIHon#fjId>1x9FB_8l`(%tw;tVO;_h-rCmcvk zxjvE~)7l=GC|Q?Mnmyj@(Z4e30Qo;+zdZT+ucMFD`cRjG8d=qULIq1$NJJbj+NsU; z(6rb3U-FkuJ`h^Y5{xDGp!c0+A}K#ip(Ya$6A_u3fj;_Kk6ziE^8z-*DC;#=+>>-*L>c4_h$X_yyj;tH(rbL`ShJBF>$2l zd+~8`2r)uJV zQ+orV80l=@$9P(rJ{&$~%3`8;rd9g&nYcm4+_(w6h9}$}yEt|zPw83->Q51<%K5{C zgUzX88wm+--tK|li*>IJT!C1579q056Y2Y29Q(HA1m|O75|tZWXzKY@_tOM9Ijy#) zZ}U+G@4fAyF`LLwIq~);PkD&wz>TsXQU z8mB*UPPQMrJm+irISmOeuzG>(TfYTYZ?2cuhS6d0vl+ed>*o3O^$@rD1Tise83t@7 zlE%IY4a*&NoV-u3M_9|>^D|985o1PGMFZ{>CQ+6RtOUBg>Krn@@lspJ=k+0-at5Y2 zEfF)H-DMT*6$0$;2cK6y@s)dG_THs8e`MiE%FyDPCxtxTrZ=|j?cU4peM3SYSG< zP{tq~4lK#i$%BbPfBHLZ2ZZgF_FF`32ftL5Fs?6lj;(2y%mh(=I8=*oY0nu4h5d`0 zg8V~#hNRO_t5lp%orO=bfd`t*Zvb^*=LOvffeit4zf`mAi2`1ZoA$5cQpzDRYdr&#d2w{LUh zX(Bm#;@ysne>yq{DUwR)8%cV%!rYAQrsccYn3B%UXr|~>4EAT8=4eXh{xVN#@g_jt zjCqFx98NrZPwj9-f&_7Ft48nQVcdesv(=R)bX3$Ycv7m3YVR0GK6?r|nAn|L8#%Wj z=syz#Jcq>VPB&VpwjMou#Z?lZs1k^>jIiVee?!_UsH>x8`Fa*7&I{#=mIFCG=o0f! z9jQ@2;PhU9>*-@RmUmw<5p(ku0KTyvr!5a%|AdL2!utezjHHr>-l7Xab@N zkjgWGa9LTqL3?RT+>v^EmQIbzZeMGeYP$pXE49q_&BX>>Mrr=)TQs3<1``gq2jAy1 z`OL}e+Um`3NlIc>1eN~OloX9+Bm=Jw7LPn4Bf^rBe#S~Oz>Q)MEF+%&XxRIPuPw!n#^{Ua*bX$bo*Y;Niq zbZ(zK_Zoz-BoI?9c9?ub(O7TS>?K2)(a_LfY@B^*3gnT4FD_6I{JA)F-VVu0Q!}wM z=?fInzU`~C0Y;T9@J+Ego-KYrXJA?WMBjhOutjbPFA4BsP&wO;db{PZ2aVTqYl8|qaxWw5vYzIgz%w$Hj?Fi zUX&laywXC86n7Vwhlb`83aPH1Qq1N?pLajZetnGdk2%wAGBgHg#&9f<57M~IJfC*# z@4x&;bA|Svn;e$0d{7GB*7i32gcuG|;}SmWg`4Kc4Mr z*JhsZyVz|0InA68n}RoTG}--7`V0!?lOjzdVyP;dZgnijrH+Zcr5EhA2rFl6-v&BiPg@BgQ*Wjc!!hXYCah#{bUJthPP#hh-d{Xi}6)I5U zr#{Q)p0#?ptzJR~(LS6l7s=KzS*KUP} zg`HiTPB&gGbDKHUyY;O{jm%GD0Yfh)qZ`_UK20XwJc?$LU*brt*B=E4OK2qK%j~1*GAOY11;9 zVZp>HNI+O-P#Su8%=R^Xo6Az;$SC0@eci_TMc@o>Sc>si3ZPL5JG zDTm@|8Wc8}&R*;^UfzD9`(nJPnQ2>u-;a@79Nb;5l0CN=urzQB7=Yu}Q# zQETxhor?H2Cw~+)MC)tU4^-c~wfPz-jq4*0b&aQanPSOY^~`TrKY=s&`=4eX0nZqS z$do*h|3lI#SXf9^Vt?EUQm#-tBBn^(WpbFpi*)sH?jhT`makItYm&`g4!Np#TTC zP9nFd#-1Pu6A%WcIz22_dKes$Sp3t?!u}eFQWC-$8JRgsuA0+lET)LNZ>9{)+kKY` z`uIS5sJlKly`TZJH1RG0-qhQ=rn1Sv*{B+1_I^W1HV2RD(@zT7Shjyn@+O-Ts9KG)g5{Wryc_VRyX z7KyIppP2!*@K@kUPD&~|(DX(ZaY^_Fg%)s157@>Ce=Sx@GO-Dk6^;f!etK73L%CDG z@ggGl;`V=HzGs`_7e9s{2)%6F>Z_l{s1Xspy@c*K{bMojei_Zn41nj+K;$g~xR2%+ zjf!oul_wxxg2i1BXh>hn-R@o({nlpP)1v+UOloe7k)akMq5=-rfOG>g31TYbvXeWi zE!L4ZP5V@p))xH5xvV}gY$S`nxxw@x)-IuQh}DdWNWmU)=S8h}3DGt-oJlJbIU+=1 zR-kEn@2q^^zI+?!0HzN)`tjY1t#!=JsRyC@LI&9_!tuwKC8PK8;nWUEr9~2A@T>mQ ze-qA7puT&rKMK~Z?T{uvJ5{uj(km+f(| zK8~LqsK+GvmSr>NK&dQ>e-o8;O!F6-s{)Vu4o$}+f# zqPUe66|@^@?MX!-V9Ci8Eh>ul=`P~eVGnAHw%&iq_=xF(?=6VM=5lk+09`%MsdmHi zYMHD$&bW^gt#Emc#1Q`<>GvMNniyq*^fLys1qRk%AwdZTh*8(?2)9u!40}=*M!#PW zi`wsrl1nXOWD6F}HEBvOPH8K?BEIZ%C0>thJWEVg&-f#S-^s!afAS6Xu15l@Dw>Mj znQuCm#R-YK#~z9|Hoh@eu8JO8Quz30ElEur^-*peRC3+;xQ~~OZAh#a`y?;Tn)605 z!~F{9V3yc>IQ1UML>ff}t^AGME_gTfp6b!sK2Wr1D`Aaia8}w!a_{*P{w8Vq-HD%z zzlynXxaPN)N63&}f`KJus=T!r*G945q%eQ&pb)f~B;{Lw zcvl(5G}?-a1)BKJm8|g~$5?WlO)ebhANT_&#&JQ~?Q9CF`dIT+BveUa!PXCLL&l^i zY29TN$dZAxE*4+|f$;!dk0@a^Fl87K%U=;G%xa{SuN&@rd!sOT7rucEk>N7H3&Ady z*K^NpX$M->VE}YtzHc@f+hPC%&fteshhY_VdqCCupqyF?nVypf%6jHG&aNp)w8myj5^dr(op?nox*CwgA}73-H#2gdD~a)67t=b0h_f^En_EW z*Iv?>x!82xYD&%Go!C_JME{+v$?k{VN=`0|B#@mb93?*}D;1 z$)t@B4oBV>y64N{#LUw6oV|BW*bhG4^b3^VyQ$bfHh;bvLFB|hrof*1I12kkUn8!D z^o(Y1G%KIMF7d{cQknRNlV5XgOP%_!J!3*?pyc;c#xbXjl=UWo#AUocGni~xojx$X zZIq?`!`*gt&^%*ebfKnXViR)|67@8yrXtF!j}_G0o10;)OrW+{5*xrhF6ai zRlX=P)DddFmS+!BFem+3m*tt_8{5bHEvq-%?_>K1dsOeQHP}5F=WEJ&~fc-%-bF!Tg!;tF-vCD#8~HKL<<-D^d>%ObhD=G)^^KHyz*J z6h1Sjl%#HLqQNtZd3S4Za7OYmUOovdXcXi>st4r{HpU5%ouAo0%!=8B)`=R+gA95% z9lQBCJNd}4lJ&P&!;&H?dCQt~)#;EFLqgu<&g=Us-Enma7)OmkvV3wbV66suHo~>h z{P+uN39p@24Ek2Od2bYqbd^2MKqc0P$!wDNLQL-{d@lyCIrrj!N)4u7#`~^?*@Jl6R)TN!})G3Gc zH@~i#J!0e&hWR~fZLSaQL_yhwMs!xD3hLZmPYmVH9A(d%1tT=SA^a*P0c~`p(O-fi zRvv^=5uYEQ4Bh)>H^M{}`*giQEu-Hph|69$(yNN5uZGV1y?e*QO|}9Rt;3<3cQ!i3 zRoW4PL2j>u$2n;lO1@t8qH`l#2z?xSM!TOvMkbbIhmq>m?0)oPG!f$sa>G+QieEnt zH}mMt?NxFir|Yu9on}E~I7m{r(;Rv-D~pNylPj~)+@WqAcR$UXP%5DXaa`mQ9=7uT zs$3bjr6r1sNn?Nd>u6T!WvKY}@lWVB0SL96<=3ies<%E|>IWB?X_sX2#gD#3D#*zt zAO1EhkvJGfkK&Sf7*sC2_fn^`P*0W3!1=dCpf80PxwF%WEWV(`=2y{x=l!{!&xY7~ zyJ^rAdcnOa>KMXLnpbDB`cQy_F*ltNafm9WtbWdEImTRYjOl-%ECCJ|gqrdNdq=D6Q7|ekQ@QA!JyBjl8FH!w#tfGstz=ZG(udEb>`h+2U#C zAz9%7XVa_Pf?pKgDINtyL-<0d4W?3_4cJHxuSR!xT)vIwKa)QRz}qN|=T!~veu?5{ zm&1IWMke(9{G9#fP3BNTmFc?I+!-T$y;K%ApOf9h#4*m&E*N#H zdG)iz3C93wGLBP=RlkT6(VXqi!^z5ey2m|u&cZU<*BcoBriMo;+}$uHa0wk9pSIj) zwgFTi#xM`s)AooYnvx%i>-9>jSlHN_^(LDiA_X%^gpP*fx;o|JuaoqQ+)933gKtZ- z2RqTmgF}%{w7zlSIs#s2r(DuHC9Dlz*L1-d$#@<2di%AP9{i|jtsAGhk%x~=NA9vb zq5J;xdp%B)3lZ5^^Y|!p!Q3zL8uAy|wjU?lJ~JDVi`+Xc09vbuhX>D(kdQas+*V#U?8Tc{(QpW?uwQLO_Mbkq`~q-PjY&d<-Mss5yN)HB;;EJ#Ty9$&{;U& zfWr7BGqVB(ZrV*TKl=VVs)R@2*%lHNg?hEUzi=R?koojfA@L?_oSTyhQr&vR(fhsp zMNID*M#(eIZm+sQ2DPBbNPdA*L%6miNk#7)_kH z(#JD9bZe**vc`jRzY&wByy4T!if;^SX>#P zQp_))0qzWiVK5V;S0SgE;K5(=dJzitDt#FE95e5H+ftMwdWb ze;+l^1?g&B&g0*|84B7<_W3P(q^kP}d~`3%JLoqC(@}^I)IK!jL6?IYV{iNaq3x@} zs!rQ}K~hOUK)PE%5T&K1q!Ezr?vU;hP)ZQ#4ygr5w{%EKH`3j;sQoORnRoX4?Sp-= z_Z*DZrNmn6|HOU&>c;gjlh^E%=QLf z-qU_1RYfM{% zH_Ni17>K)&5U)Ku7Ib)R&lC`_mhSTmwjlL)OWHc5eH(!yz~jqgTkdgEer&mQvC`bm zv;qC_>?i2Vr`!a&gAh%RmR-S%IeXI=k|H{NQoq~LS)>FWa_BK_P9kE$W5{?K)ylnA zH^g>Xg+bbrD_#rBL9gFUwn#Ffb}4=VmZ7aso!J02MX|rqcI2+lP%fY+Ra;t>qOt1`g&um zfkU|-4wZN;DA4;?N-g%U$7-FZ^K6#K)^Yf(MI}i>!Pe`HEaKf41$N8d4SmSRe2yrH z1#_h(9ozn8Y}NuJa0E4pkF|IGep;8_)Ynv?DrU!EO^R*F>vQ!h=)c~m}HTlY*&f19+pRnt+{C#B6N zrnuPmbLm`|JeQU)tf9WWUeD{3kG-+0IN)k_Gg|g}L2>;Zg%IGA)B5MXf(Udx&l}Ha zX7l9J@R(n==wuSy2QMx1dX1}JfTQ*FZ)s5bbMRgdnj3a2m}kaSfV5mdQ(2qqmG1!; zeW8!f!O0r6aVR;tYnOxaLJ0;Ib`%|A#JR3XXM(A`R)w7aOeXys^LWBq^7cX~UWVYL z;rivi%-+r<-G#&UHnOQ@)6L<|hy4QG>ef=# zi-F{?#U&-?E|<(*+xSn00<~7NB3}sHP8w=Hdj=-NrMaC=!QJ^D;Tlis+|Dd4S}^U; zk=@;%6Q>z_(Y=l0qBU-MmrllAcMyd|-iw!lrsILZ%FI6xYFn9K4Q|sL2$C`$H>VRn zqqz6(IzwqnP4PGdFGrQrO!tMLSQ2Q>Y!_shj(~-X(e*lIduEcI!y=aR1M-+((Bo_< zqgm+l$GfShG5Inc;58ieB9DibPWa}~=9qDrV|W$o zZBs0UNh^kE5J`NVm8(ccEO#2}sGu($}4mE$y1@L@pg0~G3TSI%d zDy(ZmfN0WV%c(!%*(7GH+Ku-@s3QrTFBfZslehP6C@y`jTng1@05Znb@V73m1y5>4 z53t}O+uL7%D(yJxgEZatJ}o-vp}$MHSQLAE0ms|ez?(r4C=(_VK`s~}v_IcCR*vd( zd;Ak8nCUTs&y3%jArfL@=FT<@Z@XV&7nj`zcoluRCO>L+t7fo$3p8zNkzP=saZuG? zjBr07EZiCN{qowhhR4Xx!Qtr5-1SN1AqL4nUmKaT@GeaU*%{H$Oc!xUlLgn;$}a^P z_dP0DrZZT-JxAk|ytr=p*OnMC|F9@#eClPpdoe?gA|oxAI-TO^=Iq>`ur>W`OgHY$ zt&O~tn=>wdPf+#jS7rLsAB28zcW{T!DcLgdtV8MIMJ;(ZO^a9HcIs_+y#R)5MQoBQ zw__bo*CQjEg096EWu|dvdsA5<*$A<$Z4WeN&7+VAqqW0l;Kk{ip%#~+<%8c`+B-XY zvjb4}nsxcKu-b2VU0C_uRCa@)1f0q3v%dbLMDX9fn!#5DpjFz4Y_YwR`)7o>sXdU* zi5WYuB&F@%mK5dItywvLr0u?12=IjD^JsDd5c6^O1fMNxmbf<3+UK|t+ zz%Qd3D8BySKfS{44Q4J?nV68hj75`}{{GZYpm0>r@3YbBRv|)ki8zs{xfJ7v_@}-8 z6D;}@z8D;dzIIu`_kUn8Fnmg{RnC*^Re|4K)F@7R@GtMhuV0Ua-x{B?-KA8n*W*@> zRX#VhqLn*YD=W{!L%iq*c5Ai5SAh811~sraL=DX0&c)M zGBqNYl0+S;-$EFk@g|rUxn_~2ZE?n?-g>j#m;=XeYlC@GUE!yA_{SU{Jlw<1NY7Q*ei?)m^& zEFNxba0Bbxki5|52LwbXJ9vR7Q_kDAT8LuLSQd&6A2l=!ke6j2!Pu;3xi$jmMrC;%7+k-=kr>UQco(C(AD`c5Exv zJ!nY>5l9wYMOM(gcJgYnl475jD^IiY!$wb<*IEcNM!jv{a9?w{N4%a{RV2Mn^}xn{IWrDPSend)S%XkM6F=qC(y|@9Q)? zrV2)y-n+M@$_)+Gnb&|LVH&#!uBSxAtA#S_Vk`~q1c`%nkCMi_&ceaeuiszXHTea@ z-@~?d&TCJ)0eX@W9&P8dlg<6!#O=_-j>|IO=ypEv@`VwuG#`Ryx$eJmy4Pf_0|rO(@r?$`c4$sJOK35tTY+9ruh z&xQwzVPBYix#*6#@+;%^Ebu2RO$+vY?QdZ}2=_lf2$uTNJ_o+=_df?>|02=?pv3*H zn^!lf+rYYnO1Vzx^j#zW<%dRiOLA+U-!%cjJ@5kns5yiCuTu#CoA&bmxmGywBOYSA z1pN6K;D^7rgf*1JF&d3KKddt`Ggs2&fhljKj{6&N z%xY%#^kAuJ*T0ihQZf)15BjVUi8lTB`(X#Q=bn_~4{~mgGpn`FcXQrXQIKZn7GTXa zEF6`Tm5;S=T_(Z0src>c18>Ou1?(gExTYBi9FIT-?D4BT6b$5?J)ANH-{G*C6EF8M z;&vS{dfVHDv@r4wyn4xRU}VBC8_orHL;xL~?vCWZcG4Br#lq*ixcGP(C@A|oXZfJb zcQ-4CU1asoPd=}wdgTIS6BF;zBYuG!c}dSjpaE-p5VLx7K2I#TcL#bX3Z$4p!L&y& ztr!A$jahRW?*0xogZv9m>->@dS4%QVR6}@-@ku&a)RFY z{A30J1(S?FpVabaZhpSmY8ak8|Dl+O$S;uNuj+XKk0T!&_kEX*-`(lfe*y;wx5~)I z?-Sb*+!C0i)_gNCV$RMESd8$JC!5g1y$0{Qy6QGA_}%V|gaAKJjmv&UTkzbw znOzU14{wpV&^3?V-$1gGz@W+Ma;=Ik00JEEYu9d32Gb+L%5q0Ab*jFTR87 zs8=pIs??86z=K3U164m%RYfH>K20c73~9acuVwUS6VS`nlL_x-i0b;>jO7n!*%q6w zd9z+DIk5yZZ`BWh1VGblH8VP*JF}! zKlSnM199tpDp}*Pk>EsceXPX`NH}EI{MDfyvWa^xgV>mUAh;)r5eKg9K)5C6YD0|IdiMK-o&Ig12eY3AkscCe*W->&?PgZY5FjX+53EE;gxKn(=Eg&l}gGX*LRHg*mjk401pd{GC?N&({i>3^Ox^xzcxYv~e!c&zsx|CMX?zn`VBt^M!29=6s4|2esS=V{r?|CPuNUK&yO znp9jG!zVb(;#hzZIKx_Ccz88Sk&+l-#|%QX*A)>FslcWTOhy15v4YoQ4}@{Dy4-2$ zH*eku3Hf#d{JYk-qOz&9AN*pvd=JbUvb#f>+I-<#r1&+3>AiSV7md)Kg;Lt za8EP!Y5kizXZyoL0Ju#krO^Fp^1+EDslq4>Wrj2)fBCYqyZezruD^A3^b$?y)3eNG zX%zGtN*-DygI*jO=+zaoK0^JloGmkW?)AZf1AL0zu5+7qU9*^V{zuTXWi%zA?Lk^`{p6G`ldFODVaJ*`9!FcbX ziMxtL^bPw$Jx z<8hYU2~{g4uN2l)kK|v0hC+GxcJ)h{kJUuH^ zwtGH4CQJ39(GAxOL6=J@cocL$RO;KWWn$-y>9$I=3oW}PERIf;+WYhXu z=1L5bX{^j10P9{GR*=T*gX@`<6*W^@n*94n0A{<3ODrHe4N+%gWZc}D4C@d zS9)-|q{_LkW##3&2%mtk1Sz>Hbt<;1eO%a95;fu8TH}Fjul9bwZz%FoK0hN5J`fJF zXq>z<5NZA5A+h|9JQPstlw1pevN`Y7*FLjM_EC1L68uGHjJcMKL@>RiG-7Pb$fcjFf+Co?u9>Q*bwJ ziDoyZFDgXHIC#eAv_TPLqTuA_RtteZ@F#{RnfgKlM0|bgd@1P|QIpu#DDB{|c1+1ZHJnc`M{-`@2tYN|ps zPJ8IdvB>x@s63fNU=>$slUUa79~oHfW8b`$iGDV#?%m!ozh}q`=0__MzkV$nKVT=h z|NJK(B|9UFb;gnU;%6{72X7OQ12La;gFXd_V*5VEiOvBn0u^J6sjtx_smo$iL(T_> zXCu$Vc+OC>xF1$^#n8&cC@WD28njEYBd^-rOAHE)@^hGs)SwV2i37#Md!emX&e+Uk zW|S{+aE_Z4jEwA@oR31mPQ)W);Z%di@9gU8*F7LI((8=VE{WCRFegvaH@Sj3Z}Vym z!*80EU=WWp2fg^Yn?iAjEbimvzE=VUi5|FD1SNQ1Xwjf4D@VV# z0Fk}wR4g$OEr8MKtwm1ItP;W-=xa3WOdsD;Hra=c>b@}R`S8JMco|N8GS7wlIYArU zr_4+RHqP+Zyfu?R4E1+K>!1kFb}v;FOzFOr%1td!NH}=a&c3nG+zfJ2HS93SzScNS zE^u6Y26dHG9Y4vd&pM6nQem=-jp?&rCe;-q1RjXkJB*S^djn$4j-o@t|4Kzk$sbNS zHVYX>Qf`7I$dpFD@KUrdG7^>)Pn|ZN(zJ$yP1*m(*Ab79kkLA5=U{;*{wNFm*^ER4 z5mMemcq3sU0juf+n`6W!6|##n-;qe1{(k=tfGX)=D$^4Dn*BZWSA;w{5uq%NJ_3rP z0~HAUpY_B&>$Y*7o?S#r_g%FM%@7u35%dW3@Tz}<*K z4|4i<#enXLd0EW_ekxkn1u7HxI{T`KU#liU6*KHbh3!>v0?t z!dZ#@&X{q)2TXiSq52*tguv4_awcuTpTgYU*I)X`%TzJ`b0K$kAoGWSIL*go#%MLC zA=~%vq?6$HuUCj0BJ1n{B*$HAMdbUJp`qa?&5=QkO zEUGCm4^pCeBEP5HasASg`zh<(KUsoAq{g4Ir)N#yUu%1Rs}XR6r4Kj`6e|&A;rU-B z^p{La>~p}Iiw4};{-ksnG5ty1+fSb_9I}x623TbWxL(pEZJjVixqt`jvNK7EDVUj& zk%2Mr1e?8WIs|TPq1u)_@t&G9OxnbWek3)XR$Xyk4#&yq7DtTOxvWB^M;3W-ax#jg zKH0u@3LF*I+*fPkj_{r*c6-5?q`?^Q9tiJj(82Sq2MsE$3Jm{f-1qrwC;|@;k8zGM zlsp7CI56n@VHJ-kA2qc$KmIDQ5IXOwS-_xVN2PLanS^>{${s(1cEdvk^c^yWQ1`{r z@0GX`m}6GcZiokkfT4Y1r4H$^_LF9LEgPrCqtO3@MKcPGj^%BGI$}2b7}L$i*0uW_ z8xo<&@afeL*4bIC^_#tKl3iTD`zG|g;$^0U5ANZ?vsD&MnscxErhf()Kj{aUKtq!N z;mY=ScOs^|cyGgDb?|d%Y3Q|0jDaGg);;6J)ai$FhvtB&XRoCL`c?q6QgWC!AK#9m<)#> zlYH7O=Pb+n9uxdvDNx0XsOIOQOwU1;UM&ra^kmvzcN!dn{Q%Lf#%IKSk^I&;jx*)c z_9bKD%1Odk4>uZiM)$2)(1)kX&TBPH4%U_Djv|?2(~ov_nfAoc#uyB`uB71O286XS z(HA1GYvBd<^FM@rVtSyf0WKNjuS8p{omsp!lB03Kg9LJA$*KrYc|t@hoiu0|0J}Xm zGNfWAp4;{GC!J^BR-+q*Vmz02j!qXaW)W1RgBQ_YtW>qIu=q`9A>1n&4}{hIBR_y@ zROD2D2SbuT+d2n?^H5L-tqcm<-8WKw=g2J?sP&^IWUyPZdj0OxXDQ8XBP&qaa0$B% zQr`K5rCdG!4w}Q;n|+@&ZhMh%zH9(#HedGJ+BDz1W08Y(9zPoa4s%MP#!hIW;Vj57ej??{Pu2x&Vl;(STL%wO@n)1Oqm7w>a1V8r0z1ZG!67 zhxYg@e4PEjw`~k(*&KdBlIfHhWsj8C2=&s@K`1O(TU(R!xGwuTJRE%9yJCXmhkq2O z@eielUVf@sd2tq*$}1jTVgAhRi26)*$Ti9l@%tnbiVf&B4=!35%KF+xq@r{L2ozvmYj!*X?GJq2AFFM;!SM-!Bz$QygKs58j zHD1_tE602qV?&_!72{rUI1zbBK+bjsmS!0{JHZU^UjrYK(O}(WFn{BaK%1F#!QicH zK|#yBsyEchE$LliK5lFZH$2u0iSssbyV7SIBVc%)Sa`Kw`L}Oqk@&aF&)*bl7vayv zZ6KMpzmJ|cZ=654nuL9L;F+TQ0f_E%OgFi$;Xb}R{E>5sx9dWFJnPb6XuP|sQGnY5 zMq)gQQ@l(10kE4E;IRjxE1ww{SXcmPBJKT4{6-r0+A$DTE^a~>zP$yy02+gUFEmsH zE3}7gABhbOa#uBcL?43+a&;nrMv*NoI+Zol-RMc1L1+aRRr*Bw1iDJ-D=xA3UJ#7*fSx`s0&tXZa0!ZRI`W9CW(JY+(kc>0OJG zIqla8HZpPP0`OFbsX;WxAi9E)n4~lhK$L=kfuS*-&uz3PZLRlQ9j2O-5cKHe11O@v zWQDu4(a1cGY8z2^EzgDzFMYGK+rg;T1ixmVyW4=%X9Q6)jZdPYzQlg68hYXbCV10A zd|&@nuHNxveupHbnfb20Jv{t%kkx)slTb>yS^Dk3EW>q~n}`^f`gzB2Ke;U{^K;gi z%y>UwuCyM(68Lfn8kN7Qs+u@|fByshCE#f~7wQI6VAIP10Tu^W@B)-0p?~^q2SpeT zmdd$s?MFvQq_9D%;@W`HB%pU7Ct5_Y2po2<2aDI&)G;p|M)N@@M1}q6QJ`TC4QXqYlqca6%gq5BKGoe>J5Bd)} zSK}VUazE$Q_$(Nhf-hsFs*3-iU9nq8X(aD;!t_+VqqYgDJK-eB!-r)a=d3*0^z4+v zAN)*?>mnJTCH4ES;5N-J8`_*@WHQUm+z9P`2VOQ_NhbYSZVqMtKzggz)4R-jlQg0T z?y&(DKly_0iq<*{@vcbIXHUU-?Dj}kOKWF!)z~f$o|Ax#MTN|HGHNEi`R--lZqN32 z*z3upq@+B$)+O->Kt{Z-yIfr-kH$ejsF&eAI6aN?LkEJ8Wf976-gCT@jL2;chX)w> z&(Q$WX{fw(9s4LpSZQd@%&kK3$yBxN!k02b+7tj4cXWb&e`q(8Pw277rhoMNCeb@@ z5_i`86O`y9lEzPziT^Q)aN|4bi zXqZ98@T&**e&2#>tbdftyj)r4 zy}uoU($N(u^Ekp@+M!$@wWX^Ih0wZpn~>drrosKRR2<9Gij55dN-h~rK0e~l;e-tK z`W6MVVU&g%)2(%<1pNF%_v+v6#g5@eMU3b7T{@=2yQj;BbCH>;;u2yH^!CO$Q9v}V zPa%%`wWfib6tIdWxuMNX!2N6p3`utw2H_oGJM6k69vGJSxL<4jWZCcjT$|0m-WE|# zSu{e4(BrXJ+m$%@)<_oqVo;-jEWzL@

    P21gEOs96}|+yT`mvj~mPqB%5s)UM5Ju z(SrVGF+s*1Bx;R8?}2soSyBcx(>yeof-9etl{iM8{Wx+5sn4kbU0}y2USsi*d%JR! zFAo7d&Os-w04)#UgXjn?26jqzDT}}lpuPj(j|8s<+$NA%y-x)jeC-r9o9fX1nRxNi zI!-ct@Y^TR1&@H7c-Qw7d%$7lg|+dM004OxBBb1_L*Arb*%aV?e%h4ku1qlloe=^S z7~x-AV}<03oR^u+J66e}Zn8$O&85aBR)fDi4#1Ba%YGjPnjAQ`jtHF<7UA}#!CjFFtz3H2%_2ItMg6)JEU zgW>~i2BzcrxTYSN4o-5m=IbMH=N>0hu&@+&U}7)M(}E%uO}Co7+Oj6R6=VF8grcS2 z*xj91jhQAeO0{?EO(7LEbqC}XIRTK@LDM#)-Ha>ioT1z8aH>aJ`U zBx={l``Pu5s{^rLLDWElDFo4Jw0l$l#AB`S_e8ppz+eMFBt)E|YA|xlDXy^xW7N(; zl628LRU-JZL$Wg4yWcM@)r807v980Lr`?bKJUJdql zc>*Bi^tRWEFFP0IKb93t%#wK0P8qG(OdIG;Pf2MHq(qeLS0wneV8hV;`K^hU2sZG0 zh9-ll)XbNLmI;oVjg5^9S`F%iZu7{fz82&OPSSw18uPPtxY!L|=s!F?O|e_>I?@y@ zpSqHref9A1EYVBsCQkD-gJgm>9OWxCn}P>0QtOWO9R{5J&6aU39J4-Z$11 zZfR>1Ri%4{S7Sm+xzgGS!-qM${%~aGJsUn;^aidq5+RrebubY0=5=Ia&-MJNASF$+ zLVC_L$`MreZmQWwP-*AJYyceR1i87rkjE_|$F}z`q0rv_({9@vyH~`N*|h0y3fI~Q zBh!l8G?s<5mUoG3E?}ZJVBu&s{QdyPBjQ|3u&5wZ9+!)Hf`)H3aB8{#g)WIC23|5U;!?5T;bHJ)PUuWE*>yTsI$jyh5aM1Bd0fi= z>eR*7bL$;n)>siKEllUwNvr*p^6t37>h4pcgw}TGK~F*A`U?`T?c0{jW-USfnk;D- zvc|RXj!S+W37uO0;)}7gmH+9@G@k&-7@XG6Ogr6NUCpHE-r=d->KhApiq6%$-L9zK zc#8`!6i#=bZ~7ku+cLdsvR5DRaVgvv?7X5*Cy<e%evKy;<y znJiANZR8Y9;l;a3n8bv1p9`4uqvmTt#dz#R-E|J*@2-9GnOb#tODBTemDOHvMJK)~ z5@Zax7O+Zn;qhYF82hoD;YT_uMeyVK^E4Z?aRPx={Iq@fWW{@hneH@RDu~oM{q_!J zYW={~^s>IGcJwk%=|`u!m~mr+*6y%qd&$2(ZX?ev0m| z?ti#nk}}gwm0_!6jz>b19l5_ABzo|(loIZIb7tB3NSB-sgZy;^ANM4-Xy<9WJ4|2+@fM?!zFgiCaicew3h=ud zU@ZfKD<0LEILLFC9qfhOItY03(BR*>p4|u-hom;)cj_*CToz%4M=^*OQq9kKwep*b zcuJP-UV4;>ObVBLTu}W%IE)c=d;3DS0*^!+l|h%Ndj~yxnc>5zN3+6F%ZMj;TISi7 zTs$@VRlTy3GUuFNReZWxMS<`$IoP}k|Hm5g1-V_hCM*6TiaL1~9`|G4^Us4K?+F}^u z2;-s%Dc(mW)$$8a16Km*Dw+Ag*iQ`j`P;AL@=FXxQ6QOSt~3~R_EvT=s~=lZ^0inP zI(A@iFjFOiB+c^j^5OwC>5;wM8l zXr+%;B$6)d38{HBPx^#l`B=J8FZ&TjAq89z7W&SK)Sgr{!D8$lYf-XuysFrWuN<~x zlx3^$z=#;@!Jxd%tzA;2QHVxtP>bV|c22IDsmk{uC%DR%P@#|Q@vpWsEPC_sek9To zkaz%~KT&1Y#xsijIy=(jjJ%f;IINJdC*%be6*C*xMUHQH&HLcS7?RMGPbic zC&v@0u(4|&>T1kzJ}(}!DuHiQ)jSpB2rmw~scU`a-TdfbeSrdbt3W{E$*0**%U5o5<5>vzYJ8*Bf{_Or zr!ZO$gY!rM`4C=h4!jPQj;KIA#J94RR4V(vA~ud_Avc6LEh>t8_ppls44(x(^RsHJ z(8pw~wV8Qx598+*l8;-mLCHBp{UE~)m`gaAhQltV=s#m~3H`2Crx23`Jl=sO>Os?; z_hAezh{5*iN^zNY9DFZ$dl)L0!e@!Y5*fgQ5=mCZ2ZA;6*3vEd1e0&>M8)ZW6jp9I0hA^ou`hjoZWyg73iU8}Iy)?rg^NdHW;i6#; zZEQcg!9~l4nZUwBa7Q98TD%c2d#3}NC804Z9Z;*)Vglw_-IbOv_6eT7dKmPqq<(z7 z8&&SREIb)s@xE_&t_}p-%A#sBO7usMa&DK2CHL~d4Bx&+J7zu+)BEv@<*imwC{6MS zYjk7I@v{+ctd~Ix9klps4D9D@2Kg$N>y^DA1;k?(F(zD#OG`_D3KhJ2k6-<3f8W-1 z52;!Z5CwFXZ1RH}JJ!pu1Q;01P7^Bu$DbUNjP9nZy8t*s`nN_&0v-|7)z!7!^nOwR zSJasgjgr+78p5o`ffYKi=8J-jZGX8xiQMx*%?o-m9J9sv8#lB#J05Jlu5SK#)m&Cv zTML+gyNj-c{o1RNs3cqWjfv*zDr?JP=l0C}{0%mr1p6!NYJC|w@6#U%&w!p|zu~w_ z5{QtfEHfF>Eq*j+0a)mE#;HZAp*exu$p#G6G`SV_lX5=4yd zdtYfvW=4QX2tKD{Y6`Om=L^k_>jW|3pnR^)7jj{2c3Fhu*5k@uX~&qL(*_r9&SxB7 z-SgSttm@MZ3RYUJq7ML2XX!Y8px{x+ z@xk{Rh0fQYwnQsK-nXT$>ee+m@Pq|xxKUZ-eu39jYqUtcUA-SWqsKY{#ui8mzlDaZ zfK$2RQiwPYj{aU=+xJIs-%M7B?2GAVt;}ETJbZT>yID3xgnYx`zP(geNpmvEw~teK zUpm@3Y^Ko?Dt$x4|Zwo&-b*~+z_W!v3+0bo!8+J0mrsr1ws;y+4c}}n+C7$U1rtW zW}CUX#_Q^Mz#P0_rnGl+?>zOodU?L{4dhE+COk8}J%#v?_3)Li6w~fM(cW6!M6$gD zvbcS)cOwO5)0&n9iGlMv?WOfH-^tDS!v4zG=7Q~$2Uz659N`nU|6Cvhlbr0i`$=M@ zrRiWoxWm$XwdKTKf@vxc(+7B6o%LVni90z}yyP`#?*{(8j;{VEOib?2c~$`-$yUEp zPBp-+L6f;yTyj9`Jzep|WkLI_Yx2uBr2e)NysnWxRBF$dk9G%*gdGcu$ z1f!SidA`*wL}8F1MwFZG8g5)Xlc}{kHe&S17JORzDVF=mY1Bm^+$yM|$jfl$rpenl zpP^sxsgiSdYNy>vdm1LCzcoYChfOl?A}{iTn{{oGbVf{ zwnJ8?hteK-tj`sUz3|qFmlAeBGI*ApE?C0KdEMmOYA3J=ZGXedUt^;HC(Y}j6=n%$ zVeCAw_d`x1{XocvA5r(D6%Pj|Ch804ADm8K)CNRt#__!o0F$L>$_ztZA9Z0AyOH@p zAZ&YnamX8iGJ;;vpM;x)F=$D%R@>p>kID9ifwjz@;G@71)x-0#GcAP2YZLwQ?WNDT zQz!2YrQvh7ht7P|hT~N^Ray5P*=q3$8 zqGUt-?F*xBY!U%Q)w7eI@+c^}&sgZra^lxWFV=(rUGSRAVy0?0S2hU;$D}`*=NZ2z zH;MD4XAiBQ*SF;vJAlXBj2Hlli!A5>SVG|Lt_S#h4zC2S^+7jy(HXm-I-I>dVJt4> zop66a;^MPPb5&+!$=h#rd+^=<6Gj?hz%KfuqHDi?{}#pPlsVhysHdxk@fgxnS2C4B^}Cte2{*?b2U?r!n+gcc|Yl2L|I%rl@*&ycgjZN!_s zB*CIXxZV{7_$jC$Q%U)tP$(JSyVv1K8?#@JSK}uz27S)wTwcC>d3!r;>AX8#z3*Tg zKT=-DUL!%CGEzMArrF&NDCOz*W@~X7UFO}^vzpzU_L6zdXT2u)_8UH4(OBlD*{{Z_ z^_o@!`Eb1M{J@jrIhV`h^*oqu<$7U~{iv@5BgTarqRG`g16y1xBge~9)*L<{Lf7r`e&ac2SXfx<<#C$)jVtge)yl*-@;Qt$?D~qjpX~UB zQ9#7RpW)B~+zj@rYR&$kqxzlvnM-O6lvGBsBqHV9H!^_hh8!dj-VFM@fT7v)>h!1^ zwR9Va#I|+!IW((n1UxSenr}}BA)tk3-nSS#3M>ZflfL zS2yk5t`&s+`1WcaXmHagmNUg|uR%Dv%k3|MX?SKy9uV+P8?SS(GR@ey2dnNuy!N}P z!{x4~*>7D9<%{XUT;QjefA_zvf49qPx7c!h$%u`4pRkCO?$0NyRrE&(`pieD3z+GE z@C_QCA-Vuu13*~qVLspRF1|XzvY50aPkDVnDpV=}88h*4_8V}oFAXiVq3K**`NAWx zHlB=tWP~0pi8(%Z6&ss9$7i=AKTIAU0w>Fj(%D* z#*E$ub6Iv>JMfyXc5SohWb001WU$3E-+h6hS%4!b189lXx2TGDPL>osKq|W4WU_=L zJpLq^h}2rAG7fx|c^QmuhOyb|9%d!5Ij<~e;E&l)plbPB#>$Eet7AUpYX9qRE=u6- zaYtvxZ<-=huS$NWDG~i`1BhZxgyDvg;r`%{bFsbGPUn9}O9CVS#5^1{g@&EW(uuSa5fwW-j*Y_~;@8AxZroG6LJ1Iz0E_l- z#CO3XKxRuU*f0?fhNCIsQuh)6NX!MBCj@2|P_5C}96YQ-`7iWRL*VjK0&r{3$HS@H z$r>_Aem9?Xw{WnvKS0mH?mab<12l<7UvMHtW4J-jd6bMVfs2a+N-Ts>?gF3DuW4sb zcxgX4Df-La@B609IC>z7I}A|oQBm(_zvqn*(ouYPu~ zwPIP1deIqSB=Txhh60LEaZ_!@Xj*lo*qgU6lF&Lf>0fSOjAsopcZ9B*nNB{Tl@9Bk zRQ7ku>COGn6sIDdt+a;Lqr)59eeA>DqjS8)^02J}L6zci2;vj;E!45#$#8Xmu#SQ_ z^@qkflkDLij8KPDH$Nts6k!A?GM8q)L#T#%j+%})VN8vc-JzsqzKDM4ZP-0&`WD3i z4KL;Vy2m9_k_F$s7MR-vs>1*4u{a2;H`{23F!LJu+;;rMG|TvUNjn^Y%mHeF-`YY- zt!Q8b04m{6^n(8FQBhHU2t7#@)Sci4&2&7is48i?jkpwQNIzxjM7!Kb%0c?Uh{T7-jK!3j zm`^$5KTqe%+S%Cw(z^n0GBF{vT)`Nne~hAZ{V(EN=TTyGbjg!hAURZV1FH!&>(tJI z0zrziQufAD zxNq;e*uBW{k6`0@#(-qJ#DufNs$KU*nNv}7qrZ(%tK78=m_E&vF(Ozz)wywYSC!J< z)2DjkIDa<|IIaQc%MIVdvl0g1LCiBH1t%xYR)#rGsmGk%&mjYA;Fdn%u~4C|VE7l( z9fj7~t(dj=g%Zvd5#IFzmAMOV>GtNz!`+=JO%-03z{B+soHw6V<*#1`f#K|7Z@|M4r5x4xRt03iZa`g#gAX%)@Q;AB6_OuW!59Z6^y1=DkAjijVFmVu9sETm zWr)0eitGnG3(}iU@n}EC#!^^e{h4wCxc)|Z2-Cf9(Gk;9b!bBJVq%EsuO7=y``Kb~ zPHJKJze)o2=!nx$ZuO8sXsnaDz$lu2HpN`7H+K|_XcRKii_0iKVCfJJiUxrfpV5#f z8=^?Ex7oSagob-v0o+hj{x15-M{ChCl-5S~)AD$OPCYUWJT(Zq8l%yPn6{$JoEO*G znL~o$!vTaYGPP)^*5a>_Lx$FQ+KebmvNYvvMEMF4ob| z(R3Rvmr_=<`P_M3+)XdJx8L|C!GjCaeo%mVF)~zncYhy?)=tLL%d5ED84>wih{m_9 zd*hHoLm-P2&lAuK04XXl!Yz;_@?=8x$52}BjNI1}=vabgq|$b9CmRbVui%UmEazxi zOaqir*0E(LfOeF7@S_E5lF>x7Iy>cvlB&fr!7oJuw;qvpP}!L)2<`yG&L|bgJWmv~ z^{!e_`9hp6Of(bB-2w3M@8%NXD?AN69b`iZJ~ZUk;Cfe`t8~oM$L_Tghc|Vo^<8qz zFgu9x4Z7G^LSQwx=w1h0XVXIsB3KRb7ZI}Jk3bLKB)ipGVYNMKJhd`hM)p1^IM}BD zM_?L49v3(F<6HHC>IL_AC+(DaXJr_ypA1&=c?}E=(B%yCF ziC-Y=n~UkLFXpH*2&W1CV1-c~&5)pY;`LMPWzrpZ#uzyEm zg+(xp9WsQPkJ@VSr6tM$_r3PQxjScN1;UFq5BL^Oah^|oNLJpg$+a|k84WJ!FWlg} zdS02CYcbuyT!X-PQt-7{^!D!2@zIu%zy|My1p`I<+EF zr`i3qK!&w(1z3puB)l$$GUD!RS3%T!B%7&Oem;ZlNhg)!y>&tT@h2Dg+=!+o$7}u7 z3*Pl02qgABM)S??{&Z#ibzHpe3xa}`B@K`PbE790@z_^01?%O-qFVFq^A*L}1s(Uz zGfL5PU^LpFw9l=BE`Co2DnpX#dY63^!cE{jVwM295PY(iTGEQo>wbkX&wHF}Px@|A zdjSv*Ko;loe8@|{kp2m1(xf7@%Be}n$wPR<8blVdgV&T6qW})*a8#JW=W^S8M;yXX zI-v!OTiS=;!z>|<`1)T?Je8DyH5-Fh5ICr;PN$x3+aVOqU3Ls8X1x;5n?J%NTr)1O~ z9P*S;HJGJcQ%k&@IV5BXY5+A~YbCqWNoJ%t#59UW<{W*gEG;JXpl#Xk`PXp+7eOk5rlc(b~? zS|G+~{D-+|X$8`gqYITWx$^f?zxNYe&q-i=I}ORmgmwlbLZ=p^V1xK(6!Ju_1{1kjJDDJoL#;sc4_+NQi82hJ|}q=14(%Y2X# zn>ORg`FZtJ19vghkp&ljwBxJ9j^cWs4lxtDcp)?5)WfIQLK*WP2y|Qz?~0*5!D#p4 zDdIl`;z5zs?ty2q7Uxva2J%%z^?>OR81GI#LP{9CX0|>)>WemLq8Tdar7zW(v+{;`kor2VZjRlhQ8vIL%5 z7Buk3|3l~Nf7{eXR*q40T$h4EtR4~)*4oVR{&7KPQ#v?0W@XapLplcGFAoK$*7CB= zzN(&tkVS+sv9O3!8L3dc=zdJ|=2wsbXy}z5J|@9^R@|d0r7MhR^24>Hyj&@hLG5|0 z*c<$@DiEb0HHt>;YtnPHKcUN|0zVAM?R=4kz8IMbwm*3MO{_$$`w{UupuDD#|?Jqw<$*D$5HD#}4P0Zh|@UvnGFaeqD{`D2090ftR;opu}~U=c9+#Nc~wIxigy`? zQrbKGzC>Pzr{kr3WzRm}Mm~fI3&sP?Jjf3MH#d{u0niqGE}fr?6ScD%wevMx+-m9Y z4=?PP!%V{a0fGkqq;7Fi%npO>i3%|d!0noa%v2O0I`X$IIfwUXs+=hu>|Qy>H}72 zqQ)A02#T&h=rr@_RHqOY0?z0bGf-mWP)T(H+!5Jd$u7iTRE4sy@9O(cq0@)I@}ew4 zb_bMT)N$l(bXF6Bc>Ims&5qON`5Ssx19F>LhI<@d(*^06s4}dZQ~l@Y0LJa^?d5Pf zc~5ny#h(LCMh(f3Cj70vR;}kqOqpb#!oE}lFMqa2UWt1G)q-liN46zH$KwYA)g)V1 zX*sEfreqObV1*84w5{Zm)!ax#kofuHR|n00YB-zr2eMBqR0h7h3~{GrOcTK60FkU! zDz{nGG@~`#b8*9g6h4&DV2wV?iYm^Ux=y{+Y>J}h`E=zHcE)@9QYhdk+{`or4XJ{E z3y5$_{t{JcHcTA#P-Z7Z>kXpAo8)Wrmq7xHAD5lX9%_PJF$cUuAeqh!z-pjquHwR{ zTSp=;is@4tlc@|?mhMqRgc|_%cF;DqW#CVroUd>*SnVTSnMTQ$ z`a|AboukVozx1fO^+FaDZ2lp-|2fs-gc#*QX$AzAdCD__HD7-_i_dLVio$^)10boS zn@a+)$VZJDfMnA$B#FrLeCjH<9td=0Kg3S?ZiSDKU8J(`YoI0(Yg)pNW&TpY|H@<| z-4N9ky!0v=Q*wUtwj2?Y3Gvm3#|fXSu;=gL3@f&d#gn;#)I<`zhvNaM(?DkiRI{gz zOyzBP{#=C}vMsw0A)-7o?u%QVRm3IAj&wt&IpeI41Z~_7Y%a~ zq*cL;SEw?({s94sPFAl!jD+%0ts3*J0hGw0&^PJxhZFP-Ke-A`5rdfgt&yB?Itw&W zq^09KfOn<2{*pSaSn$h=xXSroq`h@mR%_eFNrNJdfHX)eptN+C(xD=uAR#5Cl!SnU zsC0v*NQctWpn!BEUD73;GS>t8?)|+p^UWMH|9b2VJnLEOURRvw?*vU-{TFW`=F2y| zzYvVp-YHubEmD9HYTH}Kx%U?@f@pn*NQzjXCL^e1(VW*Tu=ahj-{2M$LgBIORr2q6fjL@O$c8Z29{I@c)Dap+1mWf z=%gyR%X;e~zOOiV`)I#R&1vM5a8U_5h^HL9<~0-V2I#85PH>29x&nMknqJL z>%1|u%MW+6e2Mpk>3vVY=zljpN4&~r#9N<25g%)XdZ@<31B;gYT-9wcfD!!U6blU# z({Xn#M;k5plTF6meErarCVlik2m>E)NkJw@R`Scb;%kByj}nh1Fty=M7aSdo4-&=p zLNZjdD^3AsSGLT&bT2K@*HOEtUV@cws;mNqpzJ5q_%CplEAIG#DT(Tpdq^EG(}$VS zsbQ&P0Uxh)S-HSU(XrUnw^fU5d@6aGjWOBeNn?*0upd>?S@W2Z0bGa~@@+L%rZyg$kZ=AI`S}~I!LOl!0P7ajTqUCar!-3j=AT*Y%|VhwmC3 z(W=v|s}D>9E-t*B9l?)F=4a#Jh`c3#D1_P^omiEMwMERt%z86|ez;Hfy0q2OAhRMS zD{CN0)l2=}m@ij&)Dp+tG&>WlVlVrCx@14n#-*Oo9uuEswR2M1E`9ceH#SI=(u<@s z2x1t%n@3rAd3pn!*FKGD;4fGx!Qa{3tf%sNK6I<^y5#+f%D4NI*L(ZZFq*WmFRkDv z;xpBCULm1=M?5-Td+^fY^$lH@pQT1pPpzHMYpE9+yCbfGqItu60Fymq6I9DA*a5rN zb}L#oU2plT_opl2Ier%S$|Nd;JYX2DdOJN)tdlh9%AxTg651qcs_MzTH%h9ha6mix zx|rU3R87`Z0Agvi?S&txaU_L!uN$aXUyDnyDBpgTXY1J>W|8NQ`uI0GpHv*!?_R&z ztaLMXD00{FsTaN}y@a0KC_Gete6mMz6mruj-)rvL0MhHoJ>16kAefpxuGr}B);t?W zw--{sR8_yPXLNhHC97vCmW_Ry2i3X^*)^sBbEAI%Ua@$~jSR>lBrdcu$&VM_ephT& z4-GSZo>IXbEQPUAY-oQmENmzq^#Xh!K2}Rjx#If;HVWZdrawh7^q4ACTpj5!y24tN zP#t1TUrmi@h~c!Qzgf6Bh+^;~&XXyg#n8-V^l`Hl+9AcZAiP7t2XM*dn!~jPmYr)w zLKsz*b~?f6ZrMJo$<%5o*)kGKw;qQfp+3A7f3FWE?)R^J@2on8vOE8vKg${pz^MB= z?DDj9-B$S811pTDT}%sK44i-dEFE{p++3*3zknO*P+liaU;oyP1O?MwTe7~sPqW;$ zyM}QJX||{HqiPZXbP;}n)4EC1E`xncS+ZP84VQSLG2LQaF&JNGXJm*Iur#a66{&d3 zj0l(ez80|85<=}5hU4?xDtIfvrEP{>os)NzHm+*dky;8J-Sut`^*t8Ok1R%gSpL`s zR7#LE4TRS_%LMTmS)xW3K1qj`{Vi;FsRd@X@&)Z)1WLVi zW>sNnKIJpA+(~)oksZbsrM$vj`@)q)JYZ@puYF-8=y%vW@Dxev9nZP(3iV1{G1!M9 zt{A{5s$T7hjTUDgRu$<-LYT_iV(iPQ|VePRc2|L!v`!s&KkO@Gk6!qaF2v#2{<6h@y|3f`cw^UkV)e*Y4(# zIn2EE2X+Sww>>t><`*O|{_=?kHq|0)bo!_nJF{VjbrBEDJPRUW=wh*Hf-NL54L=dT zksUJ;oMy52kO4~B%xo6$Qf>#{4<{4{Abg{PZ&#hgtOw7F%au zys$>9jC)5wZ&Q)#jD#FV{wRzTS_@dPt4TGZu1^Y~=x4t$SP042V>d)GP~rP{#59AU9I`Wai!G6WQk_%nxMmm zY653C^I(2k&`De%>C89rPe$HGOq_nG{c48xJrkai`-PysZ6>53A{r9G59rXuc|R0D z^mBuZVE5NAiF?k`UAMqEYF&OW#e=8|Ssj~|I3o1pC)G0WXLg50L@+81-m^IjCV1A! zj$9v?6UHyY%*Vrf=^J|t7a2QVP~Y*!6~oOoO27E~S@;W`SbW|VI7v-le6qL7AGK$O z`FBqbi6Q}u^6OerFl{J{#8QbCR4KMJhYvknpG`6DGk&t3^_+UN1RRp|q7GTSvoSG` z2w6J5!r56SLu@pV_u!hT94{-MYuLd~L{BJXikL=O!%A1Ocl$MxNe<%Dli03qe=y0wvQaFW#?9bJ;(ZZ~*(V=@rx z2Z_nYTA7as>vF#EKcPFC{IUsxFy%XU>IYd|7G|2>t&bKXFsO}pF{(*77`^hj{agA( zcgFmr_7%VKTY^tgcl1t(oM81}I73lgeqLOhX8y;dq=!E~eZc=V_;#Vt?>l{{OR+y& zoNZsQwT4*r&gA%QgOnVuwB_#7fLrM0HrdIsl8?G9BMa|hYh5JQ(4P3ZCxELIzn@gZ z23sIfg#Ypn0*m(#EDS~Z{ZM092tm*6!g{(qI7SNM#10qugG95w#`%>D$c!Nv+{`;)%@UaSx?=6>unnaH`9^1|(#9W?x^9JP*8O6+WM?MV{Du-H^;K&Zf#&sEj zx^|Q2J-(eS3V(7rCKmCT<|Hg%&gO7?F}7Fi{lS#~uwXG>PG;`S8so0kkKG!c8!as4r-iv|q{3?%n-tnUI?Og3PbW6ZfD?5ZJ$k?K1GM+Fx z<1@WX-PWSERej!TYwXA*)!l#8(ah5KMj}Rt89ljfCyaZZ-)`(GJW^>2_cD*Pu5K4B zAs}B*tk1TK4)&x!PgM$;oChB+bS3L#yobg5)_}p0$$WnIw6-wEvVikOtGj+xu>fM# z8S)bMFYh+_0I`rPx{mlMDmkPjB~R-Q(1@7sbV=?ULo)ivmrv&Mdzi&eaeU*{V*=uc zoHoQJvqoey1NJf7{3wsdqv(okSv@$5ss?cKad6>L zE=L1`gsR{@fx;k753^yIovp~5a>pXY#>_%CGp-~tCX?84K5k`wKI@<&Df@VI(z90W z4^v2*fS9<*=@;Qjahbiq%nYx57|Rp2+B#7=Ib06gsqXr=+z~`?ukcnP) zwWvnmo}W}4Oi90?;Mc!hVRL4<{X2pxdc3(6R7Qfb*cq0cm}s-L@LCn*vZ!f+eM zoRr<=Dv*iD(?oWzL`dG!xPfHoTjF)I8J98G&n|5t@J2M7Ru?}N*fT{SlNDkHNlLxw zVd8u}Qa;L$8m@#H9o6A*=IbE~{iLW@u~{dwf&AccEO|VodJ* zFzB1A>ZQbaiLy^7fwYP`DZF+L;yCEPOof{DUAXLxL;mo6&%+zfAe>NMQ)!U$teX6D z&F67EJUlo#Ie9Z-RHIjVshSbA`g^~?niuua6c)BJa|2eu{^?(J_pY^Ha5wMsR*=i3W}p9M4|sC>pI%^)>fEbF`9$Oh;R0}t&o-liz-18bw?mce$%)D zjH?e#r1ezYG$m#)`!3y{J_p|fa{>59*DnKGb+Cpf@Q2A3BVGC99#KBsPGC7bifA6G z-0*C#c$lv&vhA-WPr9eSEhmRqwv5{-&>E#Gv*h7;V>I2}5!rhqUJ=$SrR$A2BK{bM z;`wc&o)$`*JWhL{7gy0#K5b#u-UgzMw{h-_-cr*~c>D#7Y+@K(0P-Y-s!0c~6`RDq zwvCSQ1TZhZmiAPij1=HN#|_vgJ2~2;fw~X?&Y>JCp)k;N-C1H}bqSWSlX$o>S;t2s zB;;N0@PudQ(hJb$WO&)F`oOSAMpjnQsNNH_+`+mV^2X*OyEfh3bK1Wu2G>9A1fwGx z=eC!4F;hZ8vn!6|LQhW*EUs4$@fsg!Tn=}ZP5XZlg{mbm-NTjB6PdcpYv<`5h?f5D ziqHU?F&Yk*9Kj&csQXVZLD?GWmqlU%(P2b4g@qAfXE`OU3KZ5*f7z}?hq(6ar?P$M zt8du)6!?A2ANP^s_%Eg65Qw|dtHsJB+<$ct8mtRM9ciScpS6hl1?jFv9;-U*YV|l^qtPjp{m;Zf^91~GeUhkmu6nc5&G`iey3N*Vs zg?k_U15Z=GQlZFwox8Sd{@&hD(krr$I4KGC-jng-pWW$;sPBoUx|8gII>{_k37Kb} zrUgM!2yZYz>{fOB@S-V*XbDy`J?wB_Vl>HFdJPPSnaGXIQFU-H^BV~$VL1UaX8yB8 z+m3mk443t&(@uPOp$xWpyQFJS`lEm?=CN^^Wt0s6$`pE;nc*Ap_w9R;XC<#Ls9>%T zB-W_;+v#Gc3v#^qxn6_!6XV3BO`CVg2SuK*Uu%^M@y`Ea+-p97fbcKS8^E%!9??cR z5%8T5!Lfje>q{N?4!LprH`kG*ToCq;;-`s2>89#tbtS zh1kt)V%gZG#FA@KN6512hg8asYtP%|WGqr;vm7jY4Gk@q_#cWYL2>ZT@ACFgPSh6Z zh1yrlL3<&LJUo5J1t+>@D+>HY7_lA4c`w6~aF|CO6Jz&1+c&=Zwx@qy3~pd!pXEsr ze)cGqjp~8Cyu3GVjZ!xGGfBE1nsWc^aph=+?VlzZU!m%j~b>M4(?O~O4aydXRMN)i9pqjeX#~^<2$+(rl(%$V^cn0-T zNhcuEgpM;LDRsdf?P=Ts1rY|U_`GyCUIVh?XD-?b0bh;U`Xw`~KKZI0cCzi%1z0Jx z(7l@Cp;J{;OLn)dy|SXmVAsb~pb^71FPV2y*9mKxl(p-2g}9N5AcN!TC~JNT?NeFV zinK3C!}#o(D7WwB=-?dAJYAF&(Wj2yKJX3$Z%D)?U zVbs%P(4@J!?5X9m`1$xSFff5LpxMEA^sqH3QHqv{Pdj~};gu5rPw4Y8xxjA)qEW69 zXXsbu3-8f0k~#o~(mVx7K4Gx9ybV?xMDRrj888%^7gXO&ZcmlMWT1~??4jrGDJ(sZt>R94ex9eHxM=R|T=g4hNdrI^ zgpvOg+Uqw{Jjshd6SNea(7gbrIIAvyw*u3kbiyk!Sl{6`Nhk$kXoG zQlUcN8CpiWqxg5I&6E$hSyuM2F^@{tu}@%_IMx%8u4HB+Hu(Quz5Y`~{tZn)^M7H1 z$>DRSO|+AL8(c#S|Lrs@r){oW*eY0pGL(k~@qAr4H^w$QUj^tP=<)%ImJZ=OYFlj= z=+Zva0e~7!fhY;q|kh#ZlAXM;4?G4L_(+1$AAy`OY_o@W1FVBd*7{1KpscijtC?ES*3e!h?`B za5scn!Lo4pB?;=C*u>BjnRtx*y72R%YJa}6vmzf95TmW5!={!dbt!K5QEa z3n6pr3itak>8b+c*$B}+*!Wuqzoa%(eT5P}l2o6L;+yQyCmBd2sdE|eYZXp-yyjw* zRaJg0F4@Nv*eKa-fbh%|D37~v^LOA8k*)FR5cfX3f9DMe9d6wfX$#)Hx8#T|kgT_e zP`qgxVj?XeA>m)&paNr!>q7ugvA4795<2D+gkgGkBS0&Ko-Ktx<_}KvcnsSHT~M*9 z9PaO%We!Yvg3c34o8q$Krd!Xl)QOoGm_U&Bbn^>V-`4}7E0XfJf$jr_`0)c&ZDq}b zT)`0@BYf~cma#Vr#ee*I=1+?)1WVoA920X5f*mDC@Jde4sc6F>Gm{XVP8-6fAdLza z7dH~10!fJR_)zWt*t3O;TWM<#gqDu`5-K1I2-;3dU)Wop5G!y6>%lwe3v`W$2%|6E zIS^r_tTh-fY_A>2gAO`JhNMLMjBhgpklfV)X1TZJj@z;Q+01{dVo@^-=h5^tv;3L2K%T}b;yC4`osQ!PQUC@e$hzN3Zcj@wKv~ z(6aXWNR#D$BwaKw=#7$$7`jDb%1z+P<3+spLOtd8dxob2a3In@Vxj1QiCZ5ihNh!e-u=hT(|IL-7DNS5|tTf{Yg0~im4T6k!tcChFK z`g)aPTlCMxD~}vUk#F*5djQu8PUmJ`uv$Q%Ob=?ZU&DzU6yx%x(mIjX^{>~LZLvU& znlkkP$-&b6+f0s+4``qi{7TM|J!w)80Iekt@Kjf4=S-n!M6o6TzSt~m9J&Y0_X5v_CMiJ}FF(&Tmf-sVa>kU3)8p zZv*2FHX6c=J&}@H3+6LYxn(#h@tni>^ThGqtr>w(EBQ-6V36EXe-4w;vR}iG{E|8) z@!q-X1`c|!;ql$xdo5C*MXDi^wC$2*N-PY#ln|x&$5_|v-oEbZHVMjEf1%b0@A*DY zFHaW2<#i%L#=<&f4|9iYANkgSwmYnApQ#c9bOv8rZ0s(o^d^=#WBUjWe`)yv3eCl} zb}31pBJnd_^WhUTCGLbtFjYY~=103d_k-z~PgF-o8cj+gnL!iTnVByOB6I0*=Vrkw zg;##Sw9@?&gaNdmH4m760swkg4(S3PJi-cf-eBxrw8ZlkUXzu3qxMNED2JHDVBPR; zWgBDblg!~5>6Dm%U9GyEbbY%l6qklVFd6v~rjq2s## z%A*qLbzo~e?k4SqtrSpFSV)o4+v2#4*?eq|xE8)q$mqY;2;*BV?g5EHn)FbRr*MM= z*@vr1cfInc9B&m!^r)q@wK$Agzr*?bLlp}(&KJg)w%kz2UF>J&!4kw480n(5$0+V| znf&pt+>xhp8Y)H_zS-SIA0OC3P+nqL2zlwb*qaz>txPwTSdmamJr>V(Z^yIeOR}j? zCFLi-_ID~12Ps%(15iR{g$=yakuM$3zRP(ty-u0Nk@f`hQm`wx8FX?3 zc7oEmmOe^jvhq!wrKDy3!P2DS%uyg&kxk^`=Ah@?dTQj;BNTLO9NC zz9jPt=YwXs{_DONLT)rPiLf4DzH3FS%hC}ug7mN&T~anpz#~lR{B1F22KbcsFE(2; zncRo&>VMkG`D)lby(7HSr!lDKm=O6nB#HFJANAzugQUTxT;JzOzb5Bq4yy;j!x$`d z+0y(lQK@k~;*q<=PHLG^@Q*i&5qBaRs4zYyIgZB0WTtDdwe69p`?UFK#!X!bI!WAg7MahUu2hDQRog-FZ38=b+AWWA1aihbeHb`Y=-F{ zUH2J%p$4&{amQS8Pto=d8Wrt0~ z=5WSi<+pjm-uhQJO{a~I{lCf44^6hadT3H-ZbdnxsrEp36UTWxg8Ht=r5#Ui6NXWY zV-piKDJhaNJ4ps@&GLSqb0ZD3X&F!DtH196E4Tn{bHV!qR@4*CYssq7%$>&s2qM!q zjAmDd%Qf`<#Vd4P)V+GHAz;P=Zzi;NKj9pPspn?13$)1)($|%5La#{kNZy0_^O}{{8Yd5r=1%v}RZDjyn|G7rNLrCgBhorZ$U}&A zz)SmbUb|$0`KO2r(J?wZIV&rpRIeXM)I)#fw~2i&g5nx4djFY|%1g^)-r~WD@z&P8 z*M6aEdZ(PG1_C^^38i;lOEnoiEf7A(I1-eMtMze1O9`qY^VbPRkC2>ir^%#$Pjx(l zA-?-<2SQ{7#TSpSf9$(B(i&UaXOfW6_|OzPh{>dJf!&8D!I18Q$-x$FLe&h=)rMg} zZ6GWn!boKm9UPt3)8O~2)del7a5degOO;Q82wp!)4n^LPKxS{uRjWb(AiA)D_g`4u zB=ON#wBrxU(MxLKaeE*E{d!R}+2Xwf-7HnHW$L(c$KDByhfnoY>TUwFQZG7I@Y_HT z3G2g>>rE_t(XU`C^D{$}5`!nJmw!^yR^DNgul5CY-}wzw^fBira}j#gg(n{nm40UT z`f^4t4nk&Wu8zC<+x>ozZ!dFpk&{S`GG+14lY}sXeKB@r9aNh++xeUJCX{QXXTc2| z5ZC>uI(I0JfH((FPoxm=v)Ca&u}FAx#!+8byEO}wY7_FSH&mTA1VlB&DB0GAdmWEn zkIf|J9A%32u(1^X<_l%)nVwB0gZl+n9Pz<cmJSrzTL5?Un{*4(MVvdovv@>9j!~RPNHx zcI%=AXwDFLVG&_r1{vfL*p>6U72V(b*7$91cGj$kyuOPV+yseW>Lw0JNPv?2hW&C0 zxKs`u=AT%m)G7mzu2OA|I*UE z#sDJ5Q6MQofrT5dUKR`82aw^FRaJx2Xl-CbcYEK^m`CMG8P zPV+0Te+>+I=xkQcrLnew0$5#3%kpqufL2PZ*(+YJ>Mxq+-BBsw@L@wjH%8*kej zop*jBW{)+gJSj;$a0unCZ+a`3cE$@)yAe{C3Ka75F}Lgc%5wdl63G6Mnch+e@J;tT zAr$|hYS2e+D6hHL{mo=1iPeSEI|>O*;!aN)2Ja-C2zc;p!qf6$6vynS`izrmWJAAz7?yIkKu;v zueq@J&wBemvorayEugAHiG6T%WbrG}Tj&TN7B63p74LVx^b3a6fv{Ns3YRkico@p; zN?{Sy5lA^0g2;pLa9F9Je8EhS4nek&Oowso3O;!H`zM`Kw$Dp=ELzU%FMmT*2XY9+ zhBjDcuCw8i(=agCUu=TZ*y12p9LW%bU4*1GHDLFN!6`iFc?R1-8Ud$?QU2U9GXv9y z59~h3+EgXBqYhqgu;qE%QIWgWA9{Y%uj(oRi>Lf?YnyEvO?~>2_j5dmoo|AjeLFuWHt-E&y&I{`jlJm~qPwI0;zs zZ+J9HlO=|@u3dS#{bj8J+f-YLSEtH6qRs!w#$jKnZ~L|H`bu$l{~F?^Jt1gnnY+D- zgR+i7jdIKwV@TWC2J89n-7pUSdd(MG1S)A;EENBGiWZ@GW-cV__X4Z`5Y>}Bc-~e* zIA%{iK6hWL6IR2IV7XXavRmfiPU|eBFX1V~S~k72y*@F~+uJ+G^Rm$g&3QAx&a~r= zhSJBL_D-i{OpYQFTU^W?$&s@WcfT2kAOovnyAhARlo+{$KDESPh6BScrb$Vj(3(y6$)44|jUnj7zWsdJnVcKJ6|R9;E=*TT6VT zGN0MiXrRR>Uo;bOrMdY+HZ5JgNsDf=`CYp2rhSblRbSD;*{<*p*sX(VG_W)J7o~0z zsO)ze3|U0HlBd5KkG2&a@z`iB8jKjCv|poI7w zcG4pGu|F~|T5wocFBq#9UbdC%CeG_?44z$vKP%IDEbGSem=lbTvfi-n;!9lrvAu11 zn5b;{ymXQeq3Vojv+QNZ^w$SVQB2|WIG5xkHSr*UEk(Q%dtIR${QUePB5vTA+Z28d z4R&arc=FPP+?VNDQOI%CzrYH+pRKM4ve3w^hL~@^_Vxxlb*T3~kQjI}a3JYobg{}&r6%Sh zqqc2f<=oXy_!WF%h1%bfo8~66Z=I7an;DvP@)Tu$r+sGT*@l7Q&)!t&mHT%dzO61# z6vtICcNI$O^!dz!Fwy&IIl3Q$kKR)l6!6w+#e0teV-#?!UMsLtg(wxWaToD!!0IHx zyWyuH5gw)?Xr|0tT%wT&<+Ykj^uE2J!uD&N^E$prmY<(K{?rkf*ssdvf>`t6@A4lX zCG`-K@uy*6Vx23(>iv0Rg z2|(YICREJ^ItOjd;7WP2vG^RZ1y~H`%3Qq2tIP1VLOVG*BSW5?#=Sb{2XaE0qHV6C z#FAZo%PO?XebbZ@mN20*K4w}B>FZ5!&%ZZsQP1r(|iv6 ze?>Nl{7ng7II}zYrgf}t&cQDgGRqQnRzq~a2 z7NL$f?)y`I=-4FUxg@0xz%+916xlOF=(uL5r6%qwA`+5B&;9DH{~C)wpHDu?#^z}u zL!`qQIBlKedB4rh^6Kq3y~dV}pK(je_K30Rz4P1^1%$PoL$V9if(~9fAPDh-^d`r2 z5O*y6Ka9oyfXrpHEG$~HvWm|td&C6X?#!CIjCRFp!gA{Z&v)g!Uxdj*;^Kr5zH+I| zA?-ZfWU4X&akroIkGgTy)WT-(+9T%0@R3Ln$#;8c5O^Xux+r-5W9Bi>evI=xUeOc#tctnWn9n-1 z@xOL=-$91af5y|p5Ptp@Cd66*r~H*JrBr>5o&9Y<%s^4tdidrXQtnH>kb_W`4+j_N zeR$~puZN?vgouH2a6*EWJ2LW1@B$@8A(HnH)C2z_*s>Ac6sB~`-L3`?#=eav@h5R{ zk7ds{DHr8_I)56~zy6?tIAAW1+_|3u|FDNqCJ{?WEpH)2GUBIVZul#QxRMKpBUC;z zgmD$^J)~)OaVZ~UXXP|q`TSC`F@5mT6-!@-I1|(l(u$ggkew%^24KOvQ?xfzsmL^6e!Q)(-AlkQwa6V z%M*?Gve!yV69uJ2qM-G#vfHt~k`j(jv86I<6X#VCBiI+zBi!hu`0AwTbZXA!HoH&^ zR=BheyEeVK|NcDz0C({<+*bdH2`r#NfOz|_N?)T~wY9bXJrIT(6H(9cIP`Da26)~a zrxT7}((!kWyYvK#4}E_pUz}G5qb^p!_ch67I0DUbvmsgwA z=!JxZ5rHlP{U0eUgqKMf z1#F*I6*p!jS$qD8@j2(eZ>?V7Ms#5J0r{?u5r>0);lfP=!~@fOz_4zkAM{?N2>R8C zbCw^FtZkrz9kOZdbcQIzbjT6~eGI$xPcTn?HfcXRT+T0!$G!EB9Kde|^CK=8$(6Tv zcV%e>1j;@;&IA28+mb@y6jy&(?raV_1QUOO6r}M_Fsi`g0r@Y6qvi{}j92&cN)kW2 z^k+3U%d?^nPwKxW{6Og{FutLeJ8cD?O7v`e;DM{2BBM%wtf}z;yMAC`U@rYL<90>) z;1y6!;H^+&1?k|%NMOrf6?X@zgt_%AHmnjl+Qr?R;`_!T9nn_n*YCVP_P^&}ajD{$ zY)I)7KAj6zjEWB#M%~fGfsUt)Zz)Cgyk2L1ghaDCH9E0DNn$Lrs&izP0`_nD6okNYeD>NjQP zD}RNm;0#WAk;k$!kV%zX%~h_F#q>jsS5s9-d`0cP<_zuCPq#gAkc~fPM5Ifl#Hwbh zH(p}xh?SCh9l5KirnX$`{_Gv?)t!hph#oCDlpaMK_lNLTJ9z^%+{}xHLDvoA`rXEOiF;|;LX@`==d5ai8I>1v;tRX10Gi#1s1;$0 z!h0}tQ4!hcdp4-|@u!2o&S(5M0Vi=cxig>pM1nQ`i- zOrRVB_iJB*XH|gZyC;3y{ADl9(?`xXE(8Op7X3N=mIz6d|C@8&6s=5peZUM32=Mtl zDzEqjQxA#Qv`l|p*alZ0Y*@Tt+tV*L@9Au=L-`550gI-UR3=Ty%io{fu)>#Vu;WF` zmz}2?TK5z&Sd$=$dm0k0Qdm9KXDM+m)pC~gI*Bq^BN(B5;|3&(gglpR@`CcNP23)< zSU(3{GT-tT-)kCN-z}~VUE-G7`6#O{Z*dm*g%}%il+T9hGjRxw{BAPR(n-6U--G&5 z?03^zKHrN|{ZYABm{xc#{8-hge`NS_)v5Uh&ZXTfU111Y{G#$>`{OZo+)5V*PFjMh z*r{Zm#%!fR1Uh+^*44nV-MzbF?Pa zbbWIu-ou&qM!}cu0rQ#LpmXdoys7d_ip)CVlKxDG#5?i={*d;YZ)1O(JWY?Ic7CdC zQu^}CS~Z2LKq!6{ctV38mf)bF|GLLq?;x zvfaTo>`J>mH$m6cD`&`xd0bOfSrJb`-bSmlDOs%1|1xK_TBs;Y+JgA#r&d0{+Fd!e zu#ynMTXQQEQ-lD8nky;49c1l_UD+QPm~RgTiqwCy_6iG+h)kXd*?{*+VU#NhcLC8@ zP}_ZR2^bv*JGc%Nl@w}~D5Q3HDSiGh))z)e#`+8s43&VqWgBL(na4cgnq5cPS|$zm z6@dbv!0#9L(nkZx$#`NtDaXhFfcoRY;KPFvlZ~G%^$wEr_ET{*Ybot9)-IFZ$*C_y zbEm9J;VnoeT4;~6s2Y0rVoWXUE{>Uk5)gkJa+qH1GZjrB@0wtz=sN9`U4xA@|Mg01 zbEHb^{rNf9EE6l|xVbtuZ+Gs)2Uk5k57cmMna?(9KnSX3s-SR5k4lS0@tMH zwYa-ER+qRe>D`pcc3-^PcayJLksIj zPva{Qu9kTIjrK}-{elZvSwWf4<8c^imD2`oy`d@5@KZdebv{#U3{1?1>Q*pvL@@T+1508&i(? zN(Fal))q&)zr;l`J*IImVP)O=Rh9EKcXFB9U|{J11xn9+3nxav8&8(U1yR?(KjqK3 zeDjAiDlTiWNs?U4wFH*2cz;g^S1hTI+c&W&R**}_pU2I*+5a*$j?M}hr`Ez}NJdj* zSi(kWW?V$_lctVi>()iQ!`L5ndwRBiPKtuJmue(!A+!tZD{lztSp5nD2u&}c7N9vw zhN_Jb{@}jkk7GyddVzLu`s?ii(nrQOKuBT2IC2qX|FHNL@pwjnL9vyoy1jh36 z9*X>);XKPYk2g@feS2owMD$l<*k;*L3JMk5nmfbF`ns4$odxNmtI*acccELHVe@j_ z9F+c9evr~F+yt-clvga(oc&|i0YIu~pQezcymwJC$I>@o<|CqIS39JR?jpqI&{Wus zi{qVbJjhe}4u$-IwPbXgG%3z5proJg$ z*@B5Ro4bFW3t{K!iBCEy48LaK{q1JpnnB3L*%RD_Y(duns`_AUbXbw>HM%^qaP45G zJ>O;E&!6u%XdWGJvv~gzW z&T|6(KU4kT*PI6=)Stz(A^wuI!ZR7;|JK$bI;j7ST=?(M^F5#c?0n9D;@`0aT!AwI z@tE1#4%YY1fjqWc<&&wlCg!Z-zv1Mz*gSYy$I>xqSbz3qA#Nu%72@ZPoGmDPHT_WbHU~C%sLahRzyaZ73!iDe&9>DsmOM0z3{eRkuz7#} zyo96_mS^Nd-0b}Pq{e_9FGBruA0WPAcb;VzG^&w-l3T7NyOwXCNhNU{?{<9BFfF=y z!DsJ8mH%^+#6R|QXb2+8pHb99LpTVI7a+w!whg?-4qtjgxGl)&p+XDib={?GHpAo~ z?_&udIS1bPES#0Vh?K5h4qm5Q<(0A&##9ZF8$C~-I$3PJUY1krEV|ZO_2R4kKWLAYBdm-=6asao_yzl(McG0 z5a;&+%D!(XrI4oV+$$INS?rYlJf2pd5Yb0BLWTq^*1jX_7cIPnp{zWOu#*jJe&CbN zKJx};Z#QCN(;A5JEM~bb8TM@cbWhJc4v#P%)5e5_p(3x;9NTq*atN#|z^pnnGBO0k zUkElF$3+Tnv1(Bhxr~>Vcr767nn9*((AwEW7IGD(0~mX}h%K?&AVQEBS#wo26=VR4 zHSG@jyBX<~pO8gvlW@wWRGSZhdUbE9e>t~w;sO{T$ROJZ-a@x?>Zu=HsYLqI!zV)8 zHtYFaS|)NfGC_RhgYi9#2S1BVE!+jPit~>h;)aKV0+su<@6w29Y5mv=ogR+8`oZ+~ zmX*wtpFiXxJ@x?7uT%03NsRJ$ZfPlhJ-mVTwztCv(GYpB0X7{%u8sf+%?z{dHG%d9 zHv0IUox+g907@mPA=*@Ze$R$WoS<;zsWkJH0t!$lsUIy8_hTD`FQ2e5QS@XH+`C;c zBZpXRyl=GlAXJc*MCyh@jQ7DKm{a(6BYRfD(*aU3bpotyNQw>@*MIyF^}57`*;7 zC796C<`mV`ahZO1nk6Ra@~Na`H?^J!YcM|3`oRM?tqtST?`-#r4USeD?s5m+ zu63Twum7xcM?P3#9iX}fz(JTMgN5ezAX?CLiJ7^TJgprZ+yk8q1?5BJ@qKphr!P@C zjgY}2JN(i`RT{?2UDtmCYa508;hl#M9rrsoineg)aj^5_(vWaA62Zey7Y`y(2ril!^nb8V`&TTN(9JWX2O6Gnz z)QLYo{{kidq%G=lWis ztfUvsL^NXz!*vy8{XdD zQ)27;E1$s`eRy!Nvpk4L&ZeyGFNb5`0=I@HiRC-y*^%wjcHDB9E;UkE+5aJPx zF{i635a;*3ZPd&2x+ziuv`nh`Yy4O%z)IFC2A=3x>C;5A^w+XTkz|p#Z7^8Y!A7Q2 zE%B)96ofq($lh9@w)q@^cyR%^R{n2;=k-ZLi;L&sSe8XrR;x-v9`;?joDT*rKYlzK zbO>LS^|(td4Z?cJq%`aMmDVFl$W*LLF*V-oq0DAOTk5 zxXt4!_C$f?s`rS1-W$5MS8_c&?q9e7(*nl8c7vNYZh#O+>kC2}pDcyRqM)pxCSz)B z+#Y|0`H%uT{OH-1#=2-TCjl9(7i(y~hma8vB)boaKfSyQkJhK5KOzlM=2%QE_mn#* zK1J&0xqW?o&DFmR^k@+^UbB|yN%C}W%Ik_?Yj+gIE=g_r{6)f{!YUHPhv(4VK1uZ{ zzW zu*vQy1}c6^cgN{6iauKtHtFn7QCPiWQ_Le&36t@#TETq-8K#X$fUkPH>oYD#k^2Gt%cpMOZ4-|nFsk=N*&)EXw-sM=&>m&Pjh{|EP5F{}uXI&pE&X7~u@o<+sV-{uhZ0*5_H z$Y&ZV445=7AspAWG*fjc7?IBbX>Wqq^> zYxv_t->=e%Cj`s_2c4e1M9<9$Bx6w!|E&)8KNpbB2o08VXHIIdvGjOs)9em&y7>&z zUIAxBK^cD)N+E#rGK|1tmA$yQ(C+8OxNoV?|8j^EYF}MfM!|mY6q`tr{46i7+oYL? zz;xN|H<6GwrILzGLBP-tZeBvO;L6HMKY%PBy(fSS98IAv`C!}OBC-gP)t$j){G%NT zzP6KP0~lMgBkU6X4^RdLuU-`a@z6?VP3=JGQv=LuTX3S^X)78X)n#|Lu6-c8sMDx) zvuKD%+R%{U4wkLh+3F`|DkE-w2#qDNrg!q!7?}xyE)tTou!6LNCjAVRC4KrgVoFrZ z-{n`h=i1&^{Su=nptAw`{%SN)Grp&f>-NG;5BH0^SO7uzl96GylXc4fvs+H?9oerH z?#`m86Z(zuXy(bffko6{r!YA-PH&yL4u7r=Cp2-AQc?(26v8){jcDLy&u+wf1}WXU zO1z0l>EFIpdS<0aG4FX84$Z2r{_yo3M2zX=RQbLFV=F*j#!onT`DITG*W@Gc_T2V6>;FHW}ILpnP;Wbe%_NvVH| zn_msw0Ph^oRKdv1!_&I8YkWH@YdUxnlyGL^NNNgwVv+nc#7JQbf$gj(>Uk342Ep$7 z4ItjXA&(NLja+4tNkB+d6s9EA_P^pV|LYi8V#&^4F{X=OjmR-IF zT7A=LNyG|uY76|P{G@1BU`9}7$=Yte?f(GLCYIpWbk|tWuG22`XL(8MKi(z}Mp0-Ed=p## z5Gj=YA$JrTZZiYAae%rRCl&4W02h%A;w+{`tQQb`6eRLnz#5+>flEv4zHwtZv81=T z0`dHvRk-zwY+xh34xuKN&8se_IMjNeQa3X*gH7OL>oIMoB7AFoRn@KsPiu%^+0@$0 z4b-R^r;0jo*NUDV+dF$8A3}bhIc5$mCl72gDgybQNZ$8j6>@KFV+hZRI>2@OrWURoN#=R?3zB za6m{Rus-I>{)yR6q(r{!S?|rV`yL%)$ z{PT4!m2s!iAZ}lT(a@3^xc-Ijjf$h~BZOS2Dm#Ik)%U8FPOXkReO=e7PJVCx40Q*k z|4dWR)n6ch=oH;*L&Y0C?bA@HE`A&k8-SE9e8@s*i)9EkNuPRdEzLLmaf|5fu6zRD zE09eU>J@C!K3pt+)65h5Br3*MBFh0VQ*qlwd!Xyz?=N?jifFAH3Z8SEuV*^AJ< zLCrdZzkek5o6cRxX>V*#5`+bd9sr*QTKos%;X9D&q`I?tEq~OZS1CozvN;$QMl~f5 zk=NKCdRFScd}A??b2+;}?j8oGr@4YA$;GeA#I|pDcHhB+Xn`hrYqS|!A!nAi;lM)& zN<9E+>E2Yg7zTj)`$@#JNPtr*6(0sa1Z@hixR6ZMQ+5|t#;$}CcC@s-91#Xbb3i@e z5NbAqc~DCj4PtJKV)*%yyN|cxPpZ6S{tyK4PvPZ>y5R8(G;p%hT6VH^3$wB*_JB+Q z?GYCsJJVAq^^Dby+h)%9CwE7zA($o9Z$3frS;hR?mt6I?7{8xeuO%Nb z-3exSu?Td%RDXkaG@R%=%Oj;J(`n9Rzkx4{jQkrk_Eh!FcJm32DqBr-`@v&@DqZ0PuE3+`bxtSiKmt=K+rosKOc&8l0w6L^-un^>U|C_u0x+M(k7|+ zMLRXW{i^E2EntvuZ>c54i@pHRS3N-Deb@%82Y?iUV{UPCT)T$NddSa12r#=%jmrGk@vd9UPKW%sGusau_fM=ZzZ39#&*!kujVW>U8{ zH}s>aoc+_>aRMiY?|rbIHOmxyI4ehEMa{i?D!ua5!}Y$fIr=5v)AiNW+^@N01JdH< zELC-;oF*&9vfdUP(YY5l_Bh$t1g#DO{8)oTUyFn<8+?Z$UXRNKT->#lvGTMuG~8WS zDz)aE7NT0tWo~w$zJfkgr|}jF>K6)G#>ow^3{Rukn87y<1Zd0%FQK<^?wJ7yx>^-= zHwPsniSDXTvFg=s(w90zu7l!JFRD5UwN|z45lv6`&|^y!jM_`m1ami#%bm_AIBwhN zG0HYAIAd%Bmjgca9nNoncs?(Q?DYpuQ4^?m#N1IHh@E)eEB=Nn@@&;8u-xho0>NC$JD3`0+9 zF9;~5@{OYqSzmxY%MBpX=&MMBh7~+}{C6m+8q=g2q7j+b`KdPU*9n?@@(^`sj9GtT z(cv9{o?LVPWRyJERYItr+ZVn*^?*6ti?Iw8T(U1jUBTgyGGSlK>44T@q_BmBkB<*1 z9JqkI0JdaU*3HeW*V;KgHTDY&3{2;m9x{I}eJ|>BX82Qx-Bhz@fPS-32~=q;JiMs0 z^Yaw=cEGp-tK19_vA=DEsLot`PtP67)bWGgn%hjn7;Q2s6c9viiRZ|hwJmkKAGQh+&G zyBnyh?Jdx=cQ5kVM|%Lfr@#Le__i=}FD!a*rsaRo`2JxRAw!GxeRM*CnJY=F?W1?< zDU$oeUc%sN5do}W8CeYN-_Jhqg#bC8-Ny1Wg^UL$V0@En zg3Evvvb0~Kej_0+4jC{_LjqFP3YD{QDep2Ktwr6zg9WTkraiGC6hFX{7^g;ZSHfaZ zM#wx(@*%8E4640JRE^86*){6#A=ITIs{>&*42^w!Q=^Ou}^BNLvwoZ zOqT0>!rS_i5RFB_tBSL3P3<+5J|F9^^1BZ&uwE#ILEU>r*MbYz!Kmo(2<(l2+8ZBt z)MnRiUhS<-vg^&(N?F&Q!67=kgVM#yWyq7;K55`{4>;Q=51unXmvwvK5&O^vd#UJl zrtI3lKIpMsH=;WJ1;%xCXdv0I?aOpcjNFr;!Mi(8w;6VB_;k+|o3J+9zO+ zp#Vxku#H0NRT8WaL01h4E2v472|!63~IC%WYkLcsBAKp`i7#rTLsG1O@OumVu(I5o&HviAlV!I&w0l)VBHCMo8V7ZF8*}!fAbx|5C3)^`OhzmzWJXo@$YtZ-|C;v z5^{g3=0MIM3{3e%;ND2T4l35@Q$Dp~c+mW=|D&xj+|T*1-u|D_LADJfyd0cUT!sJ4 za4i0OrvD~QKZ7vd{_*_*Z#MKDM43)scu9KhVeyv^Uk3MIM`?gy6SXYh1?(+$Y!&~1 zu*Co8Q=*sunJhuhO!t9MTg zzIr)Vc*{)#%aOgO!$-IH@Y<5yAawXZ&*{okJ%YdmhOoLG>J_IZnYt1a(r#*xVeB$v zt?Y~Hl1@ikb&ocjDH^FZoK)6D`DaGJvec4}%?Rz-=wsef2Jefk#XLR+^R;A9)X zryE;9hNo(B1bfn*8h-Hffufie9(}gxK972Ot*Ipk?jjTKOTAC{Wq1A)O9Zs{ zQ))kdFnga4NP+$XkX)x`XLaP>$Nb~g9SHJ(O^ow-oRxAOeW4$(hY&h?<^h}NZav9^ zHk?3IAP_iopWOlNs5=m}O=tLU0z_?cXB_80sGhpPz1?Fqdv@ZXvv~mR+Sf0T+uUlP z2euayI!%X;v*+Qac-U{@^(Gfsx^%m49F;%b)dCd`pO$)@rZ!JYMv|n!x9_G7GL8)` zw?2hC9_j+Dqb~q{{!W&Hf+DO@2$Z($j8|3<@J+|BQ=h*E>~B_YD!`eT1iDGq(YOC; zLR!r>$eBt6?e229NolDn)@z5rbOxBz#(CH9)5+4aq-|=cK;9fSFx)a6qmGbF#~)hI z{e3ar%oRt*?+zVP$K^Mafb;uCjhFR`26>k9K3C9|=onUizp z*A<=Odx%Xp`x6}^3(2u2m8!>gLYiKlN4f5*ZJZJTFF@R^S`f+B)Iluy!oJ2H^W=*2 zaB6XB^>wg+?M3#UiW{%w4)gTmwUzx|v3OBYlTBu|%Ba!-(>6BK_w6d2pjS|JMbFP=vaiRX?rEGjB@WET)5@OqTYvMdWUS-0Y6ZSjInogzI5vU6 zc8s2Zp#V75+~1tX6+V^AW|W)vmM9<_uM5Zxg~Cx62)%!rLn~gEYlvGzcl#G|KzR#X z3*JwZsQ+hdP*Ae#o>Ew{nCi8!YkgX-xHUF1!sy#0U=G}&z?~BVJgdMi{#mE4H=cH% zi0VSws~9rI8}(;;IJWlI`mjIu@JMusX<_?jCu?zWgJx_48^YZ`7Neyx00|N!TXIh)Ge?Zubl1-nQ)`i6nb>eS1#%AU zRz^LMFi$S8PNJGa&YECeO~@Z0Q|QOneBye{2)$+?b&)s~%OoGDx zL!0y0s^8g&1d)sNkwP{}Lu`Ed#8e)WVr-uRPNbV#H5F*8FEV0nck) zUaT>)1s~rxMYlY}q{~v^_eKX&)6$xP=@)Q@w!X1E1%k~v4!{uy(0F}sXK)+PqP0ii zF9Q;r-x09j5)||eY+X# zt_P4vYCZ5v@(mgi21Yq*I!*`xmg77z`Sye@flDz&?J#@ zL4Cfust0Bq0Sb6dW=YI+dS7AN3uBt-4a>|&ORrpOsYa84al$}o%Eh)LtBTSz;QjP4 zh7~?Ql&G=8+(3d10;uYTT3vn-IW}vf{+YX-mPvDL6k{Hq-Q&%cEf}1&_>%)`5G-+$ zw#$!lAhY)QF=-36;HWg>yAebLXSTA^>kHQe$$jW<^$8wdhA=2Hy>(6)(-53O@i%b4 zX)f9!-VljUCU= zn`zHk{dR}D&DfhCsIj>cC3EGQ^3l~R^eHd*os4KMZa3ZSN3vve-N=Ua;F~Qrvr}1W zlPIfw1Mb2WS#+7(%o`*La^e_041TDA5(JWAyy{ArU!tipHM1SZQvRRB)PAH7w_&_B z{7HZG3-&u=BoU`dHkbf1v$Jb*pRy*(SiD5UJ4#%a3I+-xHxCa9%vv!9l}yALQzTKp zPB5K@D4$Fq@ss!r%u8JzPp_8I%M+j!btbSue#m1csVxgzIVlr2tPn6Inr`+WYzGhY zPx6xqnwJ_C+CT`x)K5W4sOuuDxlhTHf`?DHJsdC*$B7Z`!iVW0(?<)h<_ye|E#r2; zK&0rHkk=Pr!+%7wgQRa~V!i$2$UR`*zDP`gGEawwKU(K8>2icP^>gP(voRsfGGixO zBvIvzhULUYLg6G-;z04eP0yh_nL^vfDx6h*v-k^P2D9vv=e}j9|eo^t(Cai%=J@)#X2NfAJoA}5aQcP9Sd#> zZFoBj57)YY3?}6v=OkAT-Ib{U?xoESS{6|m{DnO&=SNZAHLZyjhct_PEaVj|z9D!# z#|z{arR~8`*|8YVq5K!N=pdssqt%w3Q*ie=4J&00G8q)2$75VG`p`JM1iq-0I=b$= z=E2=^>qA$THgfaz2>75CmLB9-Eh-GY%TJQfLu3o}d~HyWF{8)eHuewha(zC-`@UV7KrQ|?12U|DHY=w5r;bRu!9ifHDMXFF z9C3%Z(38P9n;5Ia`gOa_#RibG?gh(pftgA0A&CdfiaIs64hWN#NwE+eFRH9I?TrOG zmaXY36GYts&=`qZg9-8tVIy8o=%I@nX*-UUR<$c9PQgoQ35Hicc)41VfSRVq6@m{N z+A`vCf#fzY43m-0iq;Ik-Uu@-#NG*-3A0OL`=F>`J!1&Gk*!a=Qj# z=L+xuKK%kp{@imVUC_~8U9@d@K6f&KFnJ3#vnxf4P!oUAxgfe1j`QFJe z_7Yf%$ckZ{q@YVM+ylpxz!ZL8JZtYdH_~yPZ8vyJXa_>1i+Fw5ANw-6|BJbtiy5Pf3OnmrV&!x zDutVGmz;OO@@lFdK-}D6i<#=(LV^U*h`v~{LBF&PP5BBWud`(7mU({$Py?JkOE`;R zNlv$8H`O6NTYUQuVv~zx!^pEaRDPHGljDme&2Z0@lYB3c5Z`>+2eERi9=ZdFxYj6b zww*57Da7!H*f7yf9Iz;CY^H5XKLQ|;d&Wmn=uePE@rcJ+SUgX~5xlFnfJMV&x5xuI zHZ~PW8}Oa$0ZEDCX2q%U_u^TPt<9&e8ckP8e9{*@+x$>sWzhS`ddY{iQ0zz8VLw?ieN*jal%^^;Yq!6vvb{XoPX z<{sJgca0DA#3FcnCKvTR3^;h%cpo3r1TVU6=Jv*62gd?Utx9xMt@n!=AX>7r=p5?j zJ4%g-5es?hbK{tGd?5zab^6|`F-+`MYnw@uyh7lyYP;#EFPT|hjv<7_Uki61oi60@N(9}jY_F6h zjNKss3T_x%9O{~qH=%)U%jt*vV!b`=4F{j3G^2)z z0$9a~tvSlLPb`BPOE8rSZHF>iS7w)=45tDOA1sd4};AG<4^&dFyEFD-R3IdWXp zSudak(c!9z5$~sGQhy>WAi%>DRcSO3cB+Kq7v*feK@sdT!3~ty}R(6KN{P?QYGo@4M>Q$2ktk+skdB@{8yBfp>XW|OXOlQFINZuS#q`ny ze3TJ*@u|^70t2YCAZ?B_gkVex;r*)al~rk?ZVl1Rv+!S5Oc;e9{rwwBQQe+q;?E#@ zaTF;yYY=EF3iGL}smX{C#1!%vpUvgIW=SG%ZFkp`3a=>p$^fgc6c~;1Q;HWI9sP#< zan-=o)JLK)Z|*W9!{m@0wf-!YxkA9B^uk(lD78JnwphSrxhp%CrWc%U3|;02WH&ax;Q7G$l#$C_qDbW|cyztFD61|jR!r3AXLjTXN>OofEWv~h z=2qE9@g!Cc{0aibOv2pqNTxF0pYjQGfzgo&`afP4GKDuIUkWrXH>CnI1Yq>~QIP5h z8PWc9zIEzBXmaRYs(aIDO2rFeGP0fPW4#>ONNG*wf1tOqh#Ia%3jmD@$ zrlzLa+r{7XQ?HWJ>ekt$1^(>*k&5A$Euae=r>`z(M78<|VV40*GAt^JqRL~EO^c84 zxbl&1fg(!4R##RVf?(B>a#T`%eA?U61tC!)x>M@$_+DbvERd z)MCphibJ6R9$ivc2?qytQ!I`y85|tUCaXwD$YWjI)GA<$ znt2E2B9b_X*MgTgK*JnrC)z^|6N_wp`(p<4)E$P0EE4bYlCOEZEH2c!R7dgE@oE>a z&xyY5ULA}T9m^IP*Vei!TVcCLtv@eW7qjOZQ`0H97Qg$l&vrO8XB_B&9#*{1he$#4?sULV5ld z1Lz$JK*sjuRWH|6c!Q#u3mO~UFG{tzXhb(u?EpI)avi3SZ?LgaGh5`gZeMDf{K<$G zzk{nVr1_24wGh~py$ylZo}hqV@}L&NE%Sl=4df3y*#W+|7wmD=KgFy_{LfDZ0QPFE zm@X{wnKx+|#o+`n zDfL}PJ==2qCnCmyA1^6{HZOo&y711`?O||;kS|R&UtX{A4FBO3C)ERh0geA56Un?& zR#y-50;8Apqm<0jJsHoI>7I{M1-3Y91i!`R3+;FYJqmR)Em1g_i%qKN~)_y?l}uuXZ-Rs8RY$tHBt)bQqi&h#`s9 zujKQFa`Wazp*R{G^Y_jg8Vd!pSQ+UtV5J&0y;)?^VMBqwwgVtUFmZ4w3hkc=Xs z#Z~UeWf=$-9vcqW6!i2_`3hx<8X(BR@{7+#oc~Bs&i=RBBvBQ~uwDPgfRaRK=F~C; z2I*##uZm#@DI!UJAN6pJg`!XKM%imXY#trsCJ?-olgy?LenyoBF--Z_Az?dc^{cp~ zb$89UuScb&q&jXA6c7AGinM+6#4x^tlaSDW0GsNd!(?Muk7ib_hj zF`fxBlai6`@mnv4MLiD-3!6S$mUhdq=^yM{;eg(*1#QFB-_nU_j6q*N*m%Nw0M%h8 z#LG1CzGR^L;e1||sBdj;JsneBrc>9m%s}B2{wwwMIESiHmYmU%XyU6K7j#p$X1)bX(&yH8)}^6tG*nbSVpe2Ye46-rJ=i9r z?rN%Q^cvW(uQpO`4G*5Dz9JHECM$J8diJgj6|4m6(`>E>NkDd}$#2Na#-`y7=RP=W zC+qI6yiPxHB}d_+j(t zyL4om^NpI`b{3Ac%bYM=NJlXGPb~?+VEMB_l)r{tyO+16(i{$JJ&&CB#U0D_*Bhx3 z5F#NC~d?_--!;ob(i6L+Vj zUL5Xa#f6twAGUhkf@#v9?M!LD9G1lV!DO2SE{@h>^Io_rRDQ8sClZ{L+E zzV7saoLkw{E6n=ohkO3LM}5bKrKrsZ{V~25M~er^%(V3M8$iLpZ+9drO;k`?QDN|H zPhI+>1aD7)Vg@-0$y+kWRZ4?ux;navI|96!oa`LnRJ<0ACB6rlQO;ZLo+Gt4x}YDr zbsRnvExxaF>c1&Ciq0$#x)c;AyQ^nJauu&`%sj`2W!ccNSh4F>GeEANA9 zZaksymE2?o(|P2ODSaiv9#1~8)2eKO@SLw-fn{1GcO;MeizOvvT3)Ys&F!dag*#WP zLVflpJF>aqSSDku$}t5Q?p!|Ik)SbPlB1B(Q195-b}-jMfh+^YM#te*BH6vU8FvWYCN5)cv}4OX%D5tCFkyTMEBbvk3Jcj z*w&Ae77~V0YVISAJ}sSh+x>k(6!9f%SkY)zLf@B@Wm1kxlc3zf)FLw9g+gIqTTN>` zEyFntuY%*xY_XJ36IK6>|dh}hQg3Sq)n1}V#-`pS>$|Fnuh21DYD0{ zJg3+)^VyGl&9NFfDoW0sSKBheJ1y;5oiaG;_WdM9UtY%!YvJeqK4n3&xc@zI(ulfs zWtLk|p?w~_un0Ub;%(CF6dX)0)pj$Va{8jF4`Izq%^Rqn>(McfZ^F?bVp8LN5pO7# zE?fO>;64DkQ+a3Hh5WZ&5a=YGJ!~Yd_gtbLcJo(dVg1P|9G07Q^LoZHAMdXp)OS_U z8wfZJmwdrO^b!g)3H0}$!=nEb2RMo^Vy17;7eMupCue|+f)bk?8X5|KfMRyiRNzYm z6adej;VG5?V%l9=1`V$CN0Wh_alTKRGvWnf4R%!2_9zYGYNG+HyEk5uHpV?8P{EeUMahVJW zcbA%h?*yOYO}H8>4=eh0$pyBOmYP;A3D=r4O(M8`t(Y>rzCB@=ZgPw;dGtMo%_(H_ zn)zxCiX=f&kfDhmO{iizS#S@>$z3%-}L^11`G%EJ@ zLgk%Kf@YOM4}&q#S@T$7`(@oZ`4y}I+aGi?Y_h}vne4r%iSgt6pVR0+zamXG)I1?} z+ZOsXn$^L6fF9tE|7ful8cO+lW&5(vncpOa>Y0eHmx5L-itRbhsY?9yfJEI#+Gk$? zCL<~AtcgU;I*Y=|C`WBTzBtL%g_uyl-qc!$@EYa%hY>He;!rVhwuURcG_AJ7+{Z(M z3_J|@K7*Fkc_D_^iTrOvQ2opa{X+G5DMzcFp`_x+zeumWlBOk*EJvC;zPH-zMr*Ww zZ#|SKnch017O8?2fYUrryVD~6=Br@5m>e~tq&S5oT};l6i!|CwYV%6^7H?(7O!oP3 zFwXTsobrJ+TUFb(q@wNM7mMK{Rb1=IQmwdzw1{M6TzYNiSnQXGJWU3Crj^&+$})%F z0sZc9sY}bzZ-MR>2#4=gyuOU|NM^i`*}C)+^_1}PV&W&bpD@z-LfT>x(Qb*I>Gx*!q<3Su!#nOp(xqrG zIA-7Ou#3umA;Fq?&2@}mJ^AzU68{s)wWy-nfN7-m1S-K&`iXm<$+`0W5qjQtoz?ppKZJpB0O)WBpbR~Ch7C6(ivm6fORwiz|M)J zXT{Jf#jvKxT5hMtps#)2p?}N5~ehumPaY zbA`;JfEQ!UwFE~N+0k_^%%YmaPt4cQl;GTd=i4x>r0yr_>s;OBP_ND80c?*?#c?@8 z&w_-_nRxE@CWC~nr8(y;m}b`FYtx*%qHWU@Qq-U;FwZ120jN3X*x-+uQFv z8^ucQo(M!Y#QU#EqVMHoXQNZ0$G4cBn*WwrQT3n^d@EY0<;S+S*$ zffQJoOLYF4$O{^vtz^9jcx;Od;t@DT@2C*)+1)GJW|I-e56v`2y2jN#FDXHCSd(JPkDjP1j(D=N~@R&zJpP^rcLxj z6N2<}E+!gL;zHW4+@-QILxxsiCbEz|o_X&4G`|yy{R&it+m~v3S7HrsCQ*LxHZ$bp zF|Fw|MhS=^BJhW==}D7@AP+AY_c9CWsFb7PMO$Z$&dl?qPwy=44N@pbK+D1;m@chG zsggc1#mb?_xN`g1yxjV&@ccV>Hu=@*WvFBh@u+5SFC78&nfC~4f`nr3;rnTqbKJ%I z(RY#k54y-z(C?ec#VRt(b8>9ebi~gF2-)i?k}SOU9I}r0XV<&>o7(RRKxf?c1Ge&F zUF@5&S>%;;@5b#V>hL?USnx0H`Z^~r7ArtL7=yG?crwpn3bYwu7UX)jOjY>HTu?%Y z!Zg1ZRTv2sHT7c3WJQN=b~LXdlvla2!M79^`o~}%-;KixMN!<7{ z^rMzcy(Au%Gkz0HSJ+D2h3^DNv!@r= z+qKC3ywr1lePU50JsW?R?{h^czV@$=~DS@8=tT^4S=-wLzEbCiNsG zCO(DU(s=VGw6D+T(?~Pb#oqLLk`2-3i84KA{8kVo1}P=U-1PeJ_|w)8J~&6f9=0+1 zV;}HK={|mZ(AqB2xTJ~xfcQJyg-CA}Gc9%w)NU+&xSv0b4{5?wCD3ZF9w)Wqpdh8N7P(dh4SEXj41oLco!ThaZ%R18qtSd$$l#H zxTI91kP}1)p?1oIxVIEi%=eBC8p8KyAWaiPZgecq$@+$?CQ($FpI_^~+z)#b&GLPBd6g*nl<|JAAd?g7RzU{@EwsRt89WC^6I3#^&z_TGd1W@bIZE|g1#ra=8{79`k%M9`PZTGe?2bOehE6i zrHDF{$Tiy+6x+a(Xsgwxsy3w>1{2d-9 z^w{~Q{Z0b%{jhr|McvA+K~%Gp!*j4o)+6U}=HXetBzRq@pYcfXdH7hTiSO&3Ys1}i zHg9r58teTOD2*Ie5B#^%PjwZb6)dno+ch2&Yu>b&(tj=T88 zC7oaQ`P)_ZKeh6|aO(RkR0@Kr{ujKTa?k;^o!@@YTU!ViD;hXq5|C!K3cdIiI z4PWCybI*1Zjnc`^V}#ep;vd8z^uCRG3dug)7t0|+NlopU&w?(pw4|gH@Hz*?En{Z2 zjE*fgqDLNt86)sJ;4{E1w7m>90c2H&*AU@fP4pD5$=RQjBM3CH_y?M}cF*$a_{a5Q zg%C3S>)59>+1vgPZ}Sge`(HE}^1=^)0Ol!EfD1fZg9hxPDTFSt=NIBc0VYReSChCn?ZL_lH z0T8W5Qrij1S6GL<@PG|~Iyk=|lo3FTulz7FZb_rb-qWPvGxriFoZprD@8+PTW%ecg8 z@5S0*qtlt6Yc<_BZlj`Zo z$&4dXKEBwh03n;?E^&9@75cxB_8E}Hmkmzac3rC%9XNGAhsZqauQk|qSAx=8O+xsF zm}QLsPLC7z`tk02Q?DOIQFOo!M`Z1o3Rw^9^~3SWzVZp7(Y&Jmj z{DX&a-HK7Q)wP)Vw%+IQ2GyYkR+^o+-e2gD72mCws?Cv_nMuM^1{8FR@(#4xk9aIfmKb4@#X#OCv!qL7+=(%w3f_lOV_A0q*x^q`Rh=!ZNB9F)f%De-_U}CijPbMUsHzp%;Am}!*&CBVA!|nA)C2bzw zksSjczFGlT*m!@k*sgHDJD398YYTJpP@NXMMq1X_)A+CI5XoId>pYCm9<6^5nQr*E zt9%C5H4j2jQqX=UOkec*&dqDh;K@T2yH?Rk4PW66OB3jD4wA zvo_anzd?{p2>^CV%mJ5;O;Uy?sI)AqGs*ONMw|xoft1oc>rVM(4(0NeXHqqUGV6xL z55rj!AIvgR7_y8mB}ROJ7dsL z)eG1Rn4{YHm~2D47WQ1)#^y5`joEj|O83u7Q;vd5;q3}$6ga`Gh|J<&_OXdU24xqK zuPh}3>_z2}QSy&=zt=D(^1xtT+YG&Z4j-2h$izl52sVxG70Hy_KR zi^UMFURuKADr;?j1cMNOy#2V5;uH4n^b0@~G)s}y1 zlczYvMmi)suwsBchb9L6sZ@DYiaw%la?v++V@{a~^3>7!$s)GphoyJWy)nqOT#>1w zO;?E~akf9{DV3aa(O!h2)y_1(OPVr#A#i#M2qNJn2*jV^00(O}!co)rk+6rf631w~ zKU2lt{urFx2wV~n^?6MYK}4~>av@=66q^3x!`r#5V@q{PVLU!m;&F^AI}wj^8{ats zc7-5ibZA@eTmOuR!?5~9N@O-Ru9%+e{4l|KQ6OB#DGDgQt_g>?(Yr$?LbSOX8Oz0~ zY@)iCEDyEM#Ky%1gt4ln27_$Mb+0kuKckr&OvvuH_LeH`0l;RRYGdfnad+O)mhz2J z!Z?Tu!pMZK_4_=AfXGaW4!FeN#=QA#`Pb(^r}&n;>bMd?p-&mM9-?H)1DF_{?{%IZ zU-K%|A<=4Tl*8Z;{rY9cr;;1b@0iZ1U`e?=Y$P$c*%;52uCTbk05q^7z#{6r!S(c@9C!9t{KtOkcr)1Sc1i_e9IjLx|RgLuim^Ny_kSXEJvj?8@_ z`XPV>V28XIY>4aGXHANAW)@~&H#s0qaQ|6jciIvq>J~;5v|neuENHE)wA-7q=a4hB zW^~)bPGo`tT7;@_)HdtWeQTEB#uNe8&)r>JeOY0$aSSw@O-+LFHj+Hc62!KY$l<5g zryDz}-zUp-LTZOmo=*X1>F_BHn43ba14cR@5cpB#;3JB*b3o99wna=xSWtn!3fnXLRR4bn^lTMoefucvlx zMqTFJCTsB!smD|ZOZa;s1F@5-etCz^OAJ(8Bgw&Zq3$yw+z<&HQh(L{ni?Y+F#FQ> zZqj`fcnq+>{r7L66OAgOvHFqs+fuoNeMQqfK1eV<(YZVj>mk!-)jrE6x3zNI!RO5O z^j{g}=2Gv6`*0Xp9UB)%XP!02^c-L5*a2CICpoFlXF-h&PPcpxT>W`VNsM81f+y6Q zgK3DWN*|K}sfcPh{VRqe$#LRWT$o1DkKiKZNb-!qeQxt_F7N;FfXQ~nsOiv==6eer zVq|2*C>4PyhH%MnpdxF@KMT*lH~(E44nTw(0~xkoD%)LFb^Pyu#FQ5KS$A_F(fG{N z$4{SN&uIY0OwV8e!hQyScpbRe-cI~Ev7^x!Fir=vbrqmb$LNJSzKICzr;3QGwo`n5 z%RBXvh(K+>x9z0?(zfNFqMq_L|B(bXCgvWU3OtU1wVbZ7q*?hK7xZiRUjG^TEnKw0 z;rm=&>>cQg+CQW6tNv>Q_|55-VPF(nyW$Tc==gM~b%{S{x!5u7R)YEdzvPEd-lhiL zI1B~gNnvACzWz1{m~lXA<$p3pU148t0GIjSq>ze>vwDd5F9Gqd+?*gfy}LwR53Wg3O%$ z>ueXD_-EiS7iSqRbdUUZG5*(J>hEAx2#zWWxf2=ADE_YU|N8!4Zg<)U|9XZY)15!; ri~pxz0J3cV>0JKxB|32=um2J8u{W3?&TGOH3jC9mQjjbcH}wBMG~bNf literal 0 HcmV?d00001 diff --git a/windows/security/identity-protection/hello-for-business/images/aadjCert/profile02.png b/windows/security/identity-protection/hello-for-business/images/aadjCert/profile02.png new file mode 100644 index 0000000000000000000000000000000000000000..215b22ec23a3ef8cf27baa9b255f4182d023445e GIT binary patch literal 56028 zcma&OcU)6X5HE@q6#)yqD zc<(0eKeo)yrMQn9&Z;sJcoicwo4A|X=I@o>#I*J;UD;IG#PKbVh|=APgJNb0utUKyuscT{F=WjI8M>I zr|g50tQ5@uL+wMb>~ALS=W$*TfBZvle~N`ALxVtN%!B9m(B2{N~rgu;*9p znFyDW=Ap9i<5cH8O25S3rbjqV{X9uq~-F6FP*MlZNV`5^K@Oy}l9vs_~ug;V4mp=Z- z2#-6PW(Cz15ZlK#lZJ)>6J8tsX2UzkXpo!s>>NDabuw7-t!99laqp+s%Y zg^~Z|JSFoF^@WXoHjOvj+}qInp#ib$1y?)|3E3Gc*IJK}qSEFsLzMt`LW zv~bM@?DcQYF#Mgj`0?snFCI>o*{h2=IuYT?gOrp(>RaNuQn3#3!p!{QWcZzO-G&{D z@sT`hbC{ihVyo*ObfC!9`o57?=eIp=r6}ppKXU%IHq_gjkVw+fh6YcRexg76H_q}4 zOY8AdOK>NnEkf2S$(4F^-4bE$P3+UqxLfO6hSo)GO}8DZ(dyQXhWEO-dp$Dz6g1uQ zXFV1^ZBMkGF%R8TQdGnVF8t(#n4DuF{%$Q6?iUys2vS`f52Vy$_FWx|&}xQ4q1Bun zzuD@IZEcs|dWDA+56BRRWliu}!wotB7>AwglM^0Czd*^#ndN%;1`|81Gz`62DC3ZS z!h-U!rD;<|hr_n=!^i_lk%_6PY<75~;)<6Kp%neL7E@g{LB*z#d*w`4%(96I33DLd zeF;s}9Ox!8@1qYEc}f603Vrb3GDM~zrnG`@OjES9yJw1eyX~XDoY|$k&>+8c3z{t% zG&LpZ6LeQRckblO?8FCcX{hDA`&AL?Y;sw@u2BI32|LN$uH1lF59-k^8;YSWAA7+S z6%{W}_c^0w-@b(+Q@LU*MBMkvnsg*7M9hYN5Q~O~&NO;yjAn?mGLCfQZ6Va5E6lm$*Z1Zum^E%yNY3i^0S(8)Yvj$*K zsn4H3j~1KYQ)LU)Sr4U>Jk+JAvz!aPcAan5`lx9*qIZX#$#zhlZjj*E)8GbU%OAyE z;Cj@`v`ck`fXI^<1;yy(Jc(8)_QbJvMXd z>v_wOoUc4g((nx|zH54)?!~5h8_+ni+ZaLuiRl4LA7Z2%YtL5$-u-GtdV03Sdo!NF zzL_r3j*C-ovbNlq3+KNvp2;U|z>4Lldmlz-tJi2(ym~@dQJ=@8G$v7?DM>6v+|Tyl zbb{P=W?qB6Dp|Q?Bh`PSy=q^7`VX~pJNCs1{e|+#;5tcfbe(#}OJ%?Hn0+AHQ;YD+l*_MDtNk#ujD{WmIJ0u+Afn$N zRhO3$kF0zaaf-q7^f96XBCC@7M+S7uy<-T5yP)psYUA9N&RVu~5+#jlM?wo#TE1Dp zxkC`{EtQhmT`p(M0iYc_@#&$qhSX;*9@h?-!M2Rjod8WKKbQTxO@dFK#*UfvmRqYoW(-q8iAqOF`98G&@l?o+A~e$*y-4+A@e=mPlgY(D5xvHv$-~ z#e!(e*p}OyZSOAi|9uAy5=KvKc1A9PYY2qAK?_~>3Yz8GWLE^>1Q8{K7IiKiQnbws z%<4FOBFWz2SXK@OREE2yR~^V0mWNuZ#1d_p_gEWa-y}WsFj!SEOl`c2Vrbk~7iI&G zC3xCZaJHkW6M!95`VpMMIOAw0K~pt1YSK{3Wixf~R4&B$VrQDWqj!gVXd*XtEW%TY zo`(&Z2D;c*+J_`@6ijdKgRk~3@3klb?eCUDrCUPn#A`9ul@nP0y(I=u!%y#@UiRF5 z$N9&Yd5(%xFS!rVwp?jd0Qip=|S7=2}OGqCB)nc`AT1 zun_>g_EZJcLq(k}GFNcx8LdrW_2P79#WfeIht5R`KXudVp$)*7u&pIi6QUXZFmmR4 z(*s}GGFPFK4&y(xEa6<>YAQ2 zCthpdh4tX;;P!Z}dz`5SZ&7qOZ^ej5MfAu07Aa~8cqY!t@W_AQa;t^1a-&#lUsO|* zZ_xRhrT^Y&Hs+FhK35@#h!#|E@Cod4YXVF~6)`$F$)^i*r9Iu76B1Ect%`5OlCaCk zg%FNW5`p!HGIN32-%}m?|@|6NP<-Jws+_`*WYHyLCkoCNIOhn+6;$R4i(=AWr&)`*IQQk=HHe=K)f`Q%I`!Y*UM%LuK zrY>I-yD;ehfA^(>bY*3q2`T%?dkv1A*OqZ>0(hCO`^UsiC@bbVd&e3WBIc4VZIyyR z&9bull4AM-bL}!gmpaUwr-qwHF(L}`tTRL&JvvTn7CuWx@Ku#l8eXN@Ava{rok~Q~ zlP?<{gBs8afiq8q0&7Bt-!?@sHLWL+FVotX?6KjO!;!WDLQ?b&tLY_6$}7FF2tl#4 zC)k89;kSG>E3RGjPjxo2;g+2}{syUhJMzuSiZ(_-YquWTBA>Rno^N!t6@|O=4Q7b% zVRvY~-gOA5op1eix%zR|hq6?u$P^(1u5e!9dBNj)%P}?uu>;-Q9kz%nwhO^(hm-;* z6{XB=Pe;Tn`#?1^1EedyVQW}3Z7%+0E84_-FHYVooCcfF zTYQ-|S*Q`exou6>CYonndPzQ|a0uBZM!0%*W#qRNa%dbg{Vwp(b0|VP0)s0B$1`;3ArZE-3JtwP&oq@`o_0+sOG=M z%W=-QakNFXsA=aO^qjzv7zd4W$k?I+KvW^p0t(Bh9CK?MZx0ZSHS?)qIqI)iAjLK- z%aW_HO$rb6G>9~(*L(>*I9J5HKIF4DRWyfcoBVvoSBnRb_^T2)3QzQHXg)#T_RmhNrlX|VRG+=8Q*Y{*4z zuB=r)dB(wm4(GQvUZ2k)(MGS&zax7`d}*aaWEfVgR2LE$Paflf5(^HC0-Wo$fnKth z2mpt;Za$gM`EGm9V4vTfgZ(S^IP%STZ5){epdg}tFF=!Zl)Wq^DM|Q8y9HHt;+@-o z^F@5BjPmUVu~&4=b#yOnY!>aPa8Cp3%tUGEFQx#o+a6<1tSap+l0T zJkqP(UGHLgg;0a(8{9h;>K;=Yf~d1`SWn4WFYmB4mvFjnWC?<+jTjc{jBFH(`v1-x zh>5Kr%DhIy_^q!DHyzUH`j9_pj|VgH&nE>C6|*@ZMYlwx*^5Rv5@LF&HxHe$Y-Y`Y+!--wEAk0e&S+C6 zp33&SQ(4;V>Y1oLkFLLB_=Nyy0amlr+8UV)LRiJlqKcZLZuAkH6#ex+jaSO3`t*9d z?NZ|t#Ply$$&jNGyY;GqKuTw8n0G)n8 z#PkVqaiiGKRbprRxq)|?I@+%i>#U}sqfvIl?rKFoztHkyFLp0u$rW%ms~1v7&A>y5?}4v(9mN|v)abSCD!E$2q1#we{E&IeOws`41?_CJ9p`ps`S;B_CW4pK zXPXWpr~QyrI8CYGnx&$Tro)=dwMXdCn$dYEtGai$i%(r~kP|plrjj?Ft=s{Vw3V() zTEqCga@0Wi$JXP?viZ(+0i36A0kz=cBRyzY0KD%EA|MBC@=9IpGNn}FWa)>YgD$7~ zm$k2~8LE&2DD}$huDxKG%d_rAnNg{-&|RG8qN8dYqixI39Ym}Gk+mN++z2D*)J0S= zM~lX%wxe|!Wno*1sqJK$tBc*c)W%-i7HjgM^aoEOTG@5$EZH}q0~?!kFCn5Phn%q$ z?t5fugXi<}*ft;0<4mj}n)!4;jB@?0rPJO-ZL2HR5a-$FV1fOI=FZ87V zwQ8-!XYWlZ0;ly#KM=KA>W4|Lsq9FD(~j=fE=$Q6@0UW4Qz)VHbt2C$8aYRIzFN60 zHY$b9r>~&omTaGI3VbFJGlRSjg~@|`yxf@bs3ooD2(uFAD>%@=oGGRO)MiyVqbsZZ!tl{~PlJV=-fH4a@&_B3&C%KpW1=eZOfHQw zg(g5y#oJxW{!3KA>eo~I1Px>r75#1?gQyN>0=T7b!NUtg+4Q7`swl#?S6_mQe~P%sPUDw;$emlO>_C6j!DFw~X|ScQe@>3@K!m@38ToiWHgZC_keAe7iChpsggW>3Jav`SK9y4XT5BpOV&a1 z2uPQvxhX+_3-AHYSwbpuG>9YNROo97ZuKh$mDi*9Fmaz+uYJ9Us`n6;TEyH>EwMnc zxkmR$BHEd?IiQ1@+u7P~D^q^{+Dn6ST<)m)4R?Z@SMQOLU&c19uM6bc$~QRQqe}O& z_*#|cncfpfKOxhTZUp&H7HLguXW#Yjb>4Yx5h^Qz@$`Tui-DHiPO7Io+}=RNmgoFC z$Af|8nSiE^Zc;rlDogpj{5`B_{3D2p<+38=Q>N%=eveAb8aiU+v&I(NLZ0JWV4 zyIM6YDWBmLMqPVrXmanTF{$WfQ3(_#%0WZftJQvXnC`m@KW7d9vojdr+As)Uf9ILs zm{7IHbm8%=XR2muWG4Fyo?v8i6a$gHreJDc`y*aYyIqhcpj4|p&vU3gij?Gm7CL(# z)MMmHtol<;8N;;u;F-Y=c@1-zXf`*Sronu?(|hHXhskXs9)~;0+~n*!wWq116Tt7P zr-Y@4V|MqJVkf#?Hyi3tJo7lE+%C_mlM%no9gxG*$D;bpj&LvbN@Le8PEec7bqlz+ z1x9`hn&w_-N4s>}*#ht3av(~Ym4k1O zUs~P*bT#v(n%|4$gdBcQHTLpCx42r@UspY~oxQ?kiuCRR+Z*Ig+G;Zk4XYMz>5>84 zt()3>&(9vaWCsKX?=HFH6NqY4P*Wpr?{V_*1zdD(rupL%R$H6EWHn+N`Ma;s^KBAH#WR?jcf12OG&(ROD@rlm_0zGc#S+LieF zDms1A8{<~I8Kvbbdg9o)sqNr~4dk@o(4c{x2n2l^A;KU=QLdR~LM(Lh-I13|oKOmE zxSy{Pi@hrIW~Uv6(az z

    xS80acM`0>_^cVZPnq8!XT#Q;z8+}g}4Smti&aNrk7Xg+*NXF@5#6+m#6=$0g z9I^wuvRX#BfIF@l#f{A_mnh6*+3u$_>W8%%?Ff3dRY}^L!^v%BCEhBH=+CrhEV95? zZKq>-^AM*-{u&o&Q*~e9{P=)s>@aP!B{q7m612sW*SLZLmL{p|XKzt!!gA*rNK_I+ z%0+xdrd*=ubAVF#q8DHFmL_hZAGV*DT!#H@C^+NDTt#TfEeD(-YI+t!wDuIdh#Xyk zJre`Hc?jEue z^4_;dUJ@;-h}Z9re%X%{8`g2zrskRy5R*1O>>?y0SyL5X51EHi2#buriEQ0H+s~u+~qc5&J8sxRF}-nRNSHm@T_2@i$z@ZzG! zLDmoe&kMxKetvY6tGb~fV5<_liUcvXdWjk(fb~eDa;TM^<;Msb_Uc*Q9Vfn-@Yv6m zd@UFy#N3for)~030LP+uMBJ?s`uCxL6N~UXO6c$3C*1)A7N@b_#8X}X(UwM%nWbef zMt)r1Ysr;*`SK-QWt*L?39M9$Q@71!Q`JjXcU(oxn1P?C4tPoptu&f9f9*Za`k|J- zQ_y?y2#CF$-#NxEDzW~@ihV^mjX9#(?@gh$WoLRAv%8)4=@2kL1IGxiMQWy^Xw!`V zm`%EZ`UhiqX;H&$@SikOS}sP;R$LEQsQx{cl0rx3JKGnrPKuG*zg)CRKvAY|xw>)v z`}UjkH?xI#V1fjpkePGv@vT6~BZ# zT?-rxwF5cK4_o+T$NoJx$|KTbB1+@*cxxPMYw@9QiU2#nPY!q>CUL<0{As< ztp7uh@Wf&8Wy_%qvNpw*RM)N9e5KTey8NP|gS~V_Gu)}-t3ivGfZA-C^#2?jucd3p z_&uuExVur({{yh)H#@6uc-tZ_JR-vL{@?Bkj*>?I|6o|2#eZ}R{)4;l@HYM* zS&D1@za0I4u(8M$91=1BffU~Hk{dE+{5zQVau5k&WC}%UM0mJ`|MgNBr}R%6mWID* z8XgZocI-eln~{!FSn*YDmxq)tUJ&%%Pv&Jf@`HqVA# z=EGDyG51P%4dUj^d^<> zQgwfeYVo@L-IZ66b=ShWHD?2v-oxkj=pXM+Y=L)4Egj@oFJdC1_e4e}tBhyQ=NpkP zXbVJ#tZ$|WU@yi{MoURsFZ3oqaGRfvH(Z5Ei_vfpRaf}z@)jFJHSqAxy0=Be*Uh#T zrqRvM{Y5V=(xP&*i(5S}j>GwsjZxkWn9$UK!xrMt?K&|mSMw)2YAIcoRP_8U+i$W1 zgb}Xz#qY*L$uB&+3N&r|OlQf3K2M_>(#J>W$$o4kDyxLle^GX+^gb-kCv6pS)yF$@Zr1d`6#c6w1sh&_lEyQ-B9dfg z$QKIFf15x9kX=D_`Otd!4#K`;7tvVR)+SQ9{qopr^Bt@~1IK{-e+)4HuP`NUnLXUi8hhRjPn&XFNoER#8da6>|>?A_g6>)_G&v4=GJZ~DW6wpjP)7(0ai ziaUZ5os(T%s$g^y(%%vElx6?D#sbXf!ZozAoil|`nk1x$)DRS#uuHASS~n&>^?oW} z)u_&+4c=3KvwqpgXrNbspzPe%1YsVm6e?{Cuh76Dg*bH9>tv&Id*U zP9FcP7G73JNe~I<)A(xCJXDgX07&B+!2cfw9;v&{&CMWfwo0E1_&^x;WDDt+z-iEm z_Q|9hG)db?%K;pvqc`eK_LPUDq;hZFy% zho_{#uI6Hg?5<9|mTx|X9Aj)V>U|3G%F4>pgsl(lbwxZE>03hW@&7$O>OXGwfj?q& z_5fMO4@3e8DCd{^n*vc^5vUbLoOV)*Z0RC<=x17)=vcBaXQHQ zZeOO7c%0D3;*0s!>GuQXS^g>3=-s2Y5Ywrw?|!tR?_MoOj7|+GOTRvK%Y)2hMeEfA z9;Z_C22~hfKY;GyB)%|^WfV%+E*K)c@eD#}i>UAe)rFgxE!LDdH7g;AB+CPl>>djw zXjA43C8WdgyJ~Tw-Ny_Po=-fycY5IEzmNe(HCwj;52L$ z;$q9RpAdJ7#8M4aJm~Wkj_rFFOgz`m4-!4!3GyGl3z(8s9>=%8 zl(`CeNGS%kR@YLMSfSJtroAf&a9J227;nZW6C|YJ^Hj(^r^|mYB1?RjPWL3%a+A+= z%Y%9n>a+Jp#f3%D`5Rz+!rAM+1AcsJk(KJ^I73YhfOFIsY7=Fo==F2IjGHRbmlNIh zf`ISo{KZ(PN_Di%fbk4jt^e(2M7er`RtR-}&iZ8xxXWtsqJAHZkBuA7}CbX@vfDz^%s$ZH)y-R?e}MZLH73 z-mzmX5l$V+VSI}9OS^xxf>6GLM5M(?rciVj?aug`H8JG7PSdz%L8`#1rBH#9OnYs? zixhv2bLk^gI4xT+_PKkpcC9BYlSXNUb|^#CM5orJXxU-nD5Q)=S03^B!__>A7h`aB z+j3QzqKi!TGVkZXL8a6VvP8}VF#W#GbO`SdM20={4arPvD!*uitl_+ zxV5eg$6uNDo(KKTTR%+s5wbmV4r6vx_O3C!fsRdA5tRw{!(fYrrNFE0I6vgqa^BgF zvAT``3oA=(VgfmAsOG3-&~$ax2Y)y4QicH2tDnSdU-~SN5K`I~gNAlpPpdcA5t9Z$y4P2E#<#^*v{>IT# zO-)XWs@H}3cFiFqh98|6mY6;RWdP4?no`b#$kbb-O_Rxk^jy~CsXPJ>WjT@%7*4{{6E4y0wMJ^^BZO#GjXmw1Te9;ds@V~26XVZuHLmjW= z@uNo{HKNEEdFH;sxAn?Zc?g-AOr=as1DNvD5%JzSlwLa2p^531p=2{*@ZIdq?nKmBIX`tx4^0&?H9KGW5I8om-#d%UpnCRM@5WOWAY|_ zv@SfPqsF8|?EKq1@DXi}v;PQ0K3H22L&&^n_K@o0ZX0Fa+v5rEm!@O2n=_Bl?X0t$ zjwXGM^!_x%>do+_?p4~(L4>crOdw=kzh`!Y6%sv{<(C5x{`h@8_w4!#l* zLAX8en@le*rOwJ);`C>2af!YKrPJ~R-!YySFa`tt!4cqE`AuC?M3}t7kQI53Wq3wB z&7>X|-=$Dk(xV;$C~sBD)7?y7gIVxMg|YHmi}pR_g!gb=etv#ztlIiWx@9uiT|%n7 z8ISc5+ApOoT$D>ZA6~8GnX(!coSneHuD4I0vtOS@G@Y^noJVn1v&nF*^OfKNZ!H9>oDhzRAKeJTTvRc_sThh)^5pY?XNC6u9L?4*Dliw6%Kzq;@0!gXXY%R zULmVR-$Xw<@n)kdmZWL;0Pkrtq2cE z!j<)oQ#x)tH`!sGw+>6{^OkCT#7yf%{=?K~q1f*`^6!IJ@`F573^9ej0arYn{MIp~ zldFe z150EosQK8=pRt^x4aJ>5PekdOr_k7!qp2&aW}aapw8+%A=eg|lX8fm2iy!Q)`4`PD zm1~R9ZK@uCKCljOfre7>yRER}JppeA%nrXHW`QA9TSC$hEo~3swS00JqBfsLtZe4f z)UkdwmmE)TXv@*#b1=A~5z;}3EUUGvW%lPosi}(|& zfxRDXl57_m4zG8!6Hu7#>G}~Rb(Ir`ZS{GV=V(`P{wThDk`<9tH z@K0i~;wuxJZTQxkG!*brRaaY8o-=Ghji)?xH-Ks4OiE!+^2gkSS5o=f z3&^LD9Z5f)!tl}Fz0N_x5;nGtl(rk=!QY$JnE8k)*dNlo`_6n9Ey4K3~=J=5pR0e>H6D@%*F7^t87Vx=aR)U zQ)@;QeM~R(9og87j`tmZnLc_UD&T9u=N4v}lS_ABoc+SzuW90_PDhN zd&lmXi8tI=*tz$Td;0$RrB;jHS|1uh2&Z|`(FfElfM4e>zCShxi2*&&$3y^=dGAao z_CC;U4ySKCHdB0}S_l512>`CW+KqhCW(7DxWp~@CZcqZ)Iz)UdY9)<5Nak}ARzeny z)V!Pp>d7E&f6o)#$WmAd+fG8pqPlO0R~Oe+(`GWXJw^3 zcKQsyfRNMS0~47u-|NSS^X2->pHldq+Qyy(ZjQ)O~bv+HNA_-mbYiPl3}Y;g==v(PJMhO88h>>e622)FhCU zKb&&m{>D7A2`g;0oAcVGN=^Mq2EbJxM)Z1(wJ>oyXaOJGH@Pu^?sip}yQHLqK4Rjc zzc?JE+>!KlJFjHn0a2iwDVTi%A+oZMjmsIhO*^94q=gV#@rMc!Tci5a{7g3@g)@JM zdn4ce*RSIP{XXBe$D5aKj~|hsgj8JoLNe`rfWgU+!h}v!A5{&9#6LmNd}(CIN;gns z@ASP(3X`m4f_kN%S!XrdU98MzoZ_$i_S8AxsUQAoaUFy0dpZ+6Y@a)2l0V44;e6=$ z^fdXMtuV$&J*D?EI)$Y|P<(gAHuo98T8zZWem7n5jgOd1@5kb;k2gzMuHv)C`#N3m zp5epd<~CY{Iyn6!l8tH{OX78*JV47anONP}GWK{n-pKg(bZdjw{B>yudmqr)A{W|` z6-YD!ShvA6A348bw z06buLI=rGhiR$V?F>wmEX7CD;xe*1wN2zd9u32%FQmC8Wn;YvGT*)ufwfF)*Hv zY$sdMvY)&vs&{s6n4rmIz-@Qm_cAhyMW4?suab}3$6P}yk^ZGo;Xs|;d}Y@y{tu@L z4+v5dXQFrPwQS`p_7esFX#a&(Y>u}J&(%oVayx$p+R~?RVN6={<&zd|g2YY}kIM!v z!N2m2l+!0}6oRN2ep1=U{^QSWzYvO5VKB8s#$z}yC4PJqY4$05qY~qk+-_jO$w4O8 zcjn+gI$|grF2d2fu@h&cQ((d0=_(t)Twb;rf!Lj#q(+VzXv2#R{ z-KO3@bqlGxh=??dxbhh{-w&rn{TNECl6O{{2#gj`;xvEj?6PS>;&ty*H^sWGaV>#o zgLHkpn6}88AG|SDz=RO$_y`dNQzvfteVWjKgGbxrgL>9~vuE0@zZA@VKqX! zM2=^Vly6l8T-i`{;A@BaJ>+rS?^!xDIF$kCL37Py{bkrY)?}2nt8RAl?HnmK%xs&= ziV;Ml=3$RZ`4?GN7Li+=t}WqemoYi9we#j`=$Mmo?mi;w-EvbZKAc!Bc;ap~_t07D zuCh@n+Tzl&;{(b5nE@kT243J(W7@6Xx~K09UuPyob-nyLs5}c2jqxr!*ugiJ>D$dwrA$rvD9SMt#> zvMDtpgneOU#5onHbaYSqpZ$wwin5u-LR5^fsbQuOU=x|5D%9h7{`~&qn)(8ngR7KC zk~MZ%jk@CK%lfmhE6hQ|Hx^Vmq}FoEkfKqTEH(@mDf0-HtV^&3x$(RFsnYkTljlD3 zLFFHOnRS{emFy8`*yU0`@92i!>bg>mCv#k48tfm@p;)1H7iP-TS9OK}#`(6Mk)tM!^XQ7gDMeXHj>+Izf?Xav&s+wKy3T4Mapzl+fW z5K!7QeP-$?+8`fRJHyTsr`viNKqo6oby)4&I$RWKCZoS#ja$f;p+#M!-s;{b~AD@YGKGT2`)|d0^eg^F=Mb zz9fzp(DuC{Q7^Su>v`!KVqiU^Cqnb4jC!%Ze>GFrUs1%Qh<1Hg75mVmb$y@P(@Wom zi|g27qnmmwSxOA`=926{&(H#12sKeTLqeLR)$=hkB#j%#W`VEt!~-n z_Pu@B21SSQq~;=XaeNJN1)4`#@9mLqMG_ z-eZ5__c!jQ#^p_gjM|UNnm|{IQbw6IpG=bN?K>Nb0=RKebJ}%A(|P63;KxqyTLE-8 zgc{jhE6(F-rMId#oQd5uE?9QHE=P9}o_vIw1p?2~?v0<9P@L|9@J~7q1 z;epkNqvP%6+_{)JnMl2+ts$lDD_{NHS^kFWDf^rA9|rm_*im4qF7wKtCpuK1 z&C-P)B;y?8@H*skcB2{2o<+Jc-)-lb^ga|^Bx+Gs@mX9xn~qE@jV5xbDyVjy`0B=9 zYG$wDFRt{mBGW!?GBMBoh;H-Uo*$%Lb=Cu0w9^jb!w(Vj&{WyMh}K+8^i2fJAG+)J zD$Zw2SImz`08(Ja*2niUjL_>8Y4Ql&93`kioQrJ9&2$Xx_o73x-t1CAZ=2ouQ zfWEEL34*=|ACozOf&R$0l8jzr+?vx>mpreNeFz1q&f^f6Y09sYpY&U(HHKaDY{s>( z*=-?>Mbsg39qqX<0VH+Dqx(X$ZX?c=jd86(u|oHn9qV;LUIw3JX{R@J zfa%n;O}W{09zdU*kfd|rH{YOkgEiigOm)S#yLme(5U+%zh1|S*7xC`Hlr6sT7;OJX zYs-0n^0FAw+&bGeRZVm~z5xR6FJ>W4hDie@+6qxET!}Ur)91+9-T522_56Y3_wbq-8_f<{!=IK*EDB zyedjvx6{t)8*Cy3;HUYf(PF@BRnB%pjd^#sUBZ;5ukWEI4fb<~*2<8x#sJ_>nMq+= zcC*arNIY_6t!ES8-R9zA->yOdB{f1j_PtVb%w%ajb-s~58fHBWcnv9Hx35q%z67j9 zE-JL8gC9Ia`P)vnFg}}yTC)1Smj+cH=4!f{@fd4*tORkah)VvU1KqfQ2irxD<7CwRGbTQgd{6ge2xPg5+;$FMyrR7o91pxE7 zevX_FjL%HMy}#egh8g%9?aX;@^1S&26+q{!z|0m;u8-o)d$xu*I#i5?gt&Z@wCA3u z5h%f-wi^k?xvZ-RIcLC&OGsMi+` z1vJLjYjKI&f}j2r7vKp~;?8GMP$k88*yXp3Zzfh`g+!a%r3ko9Z8+}Ve<}oQ_8@eromFfh}E`JeYyg!iA zX;RMiz5j{{{ufLMmy90@xKpovKJteFTvK_6k#^ziNYXVlwEO(|BiIzqw`)f#^3nDp z4eBwkMp zL5q&H%vBCu{TZYr4aS+Iym!vI8?%zMw*2IRCO_E|Es_2m!UAxjJZ4PH&F*ds)6`Vg z=BSHo+`&qmWt75{ubjmq3pO4Xh>&B~i>d-gcM~zK*J?Phqt%v-tJ5SO#1XZ7<~(#H zmtoqoeagl@zIR>}DELmjoP(vMC~s#t0xeva)!`V_z|NKWmzel*zB}C`d`s#^Tk-jH>15KrO&VJjzs!o5x=+1;gf80tWVCN6Md5ssChP^kV-FAHM|97!0 z)=qxjHa4oOb43UpDAHv7rTjvFJp2yMo~}QNmv@ycjq_q^*JXNjn>73nyoLn)~|f zoL*zt0|i|2`s9b1WlDj<&>*2+RfXkDmwUx`T+%u(m)SBYp2() z{e_~1f@TImdYv(~&Tri=P|Oe1D+xRQ{piPCZe!OvFwYjVR-+U0$YfCR`O$Eiqdz@& zZ|3cC^}yrc+^#R{+SOmy+rQRU$sH9j!Wb|9N*5PV>u)CJD99@~KRB8!cIuX%7!XbqFb^ zV{_Z9XVkHgRIaN;-b=4U=_b)Xdf-$X&d8Cd5Zw93f`mnvxuqu)x0#a z4O2O}`|JnlrS6Pgdj9LLsGmsy&9fZAx+r#kXZ1H-m^Xj4b7w`Fd**wEyFFy#&2r`b3 zXa#R}i?qom^cZ{bAm4)_iED?3O~#Na@b9yCtz2CXJY2#f*aDaTaVTtvvy~n8o7L6O zS_37I`{Ka=iik!%HWG7g(24v9wd25LA)6BpEqKgFHU__soM|EFpuTz%E()E8V;n6Kq9N1#9j9i{LQt}FNk`hWL}0sq_L zfZDM4CR&NpJ=cS>VqPb*i+=bZqS2_C2J7{WcUuB%)`mczH+>V!KV)#H^RfiQLj!v& zI9R-v15fQiT%C2^?uPglvhYd+M5{ZbY}(lqbND{NTmPURCqy26iZMbZ9o&e)qX+$? zx}U0S z>nujxOuy~zk;M}|Z1ZTW;@M`b=VU12>`j684htQ@8;ll}4pux$A{I9V+AR4h9J6uf zVJ~oX2`cy6%*k7|JdTSS<~;I8EY#ifzC2D4?hEC=$F3tfP+Jyvr~PJ1>D}EhDl0TC~LrVM3v~rMJmWVb&d#H3D7*}dUjbn$6ub+*D zZ7sfKaH_hi3&wUNOI3MGSpJjw(I$RkRP|hByY>6TW|V5=ex+yz?7)uJaEBHUszoI( zNl%|u93=&z6Si1bnEpg=@x?7JoNrYcOi7Z)QBgs>8h=1KQBjh6a(Zk1L#;QgX!J}E zEqXQQ;apw9E1_ltGDgo8xANE>dZmxa_=yZ{TOXDc1U*cl4VdQ}yP?#>Lk;uS2S3%? zz6ZWmre1?Q#S@poY0=dGpzJNfqKeusU=$UQl15Ubq@`Ps?uH=;>F#b75CH+np}T9O z8>D0Ck{r6b8@_`+@B2OPzwbNOkw}(65j~`pf>v_G- z85ioxD=8zvS?fOze+ZPGTy7JO__}5)H7n-e8@zLOKJ}i&t{NG%YdLljmB{}k|IN}! zJHNJKX8-M4{y`t;rTo*d;nT4s@eK{b*n0-D#Zephy_KOlYMgl9<#*Z3*YL~Dx!bid zx= z_*V3O*2^zj3rIh6kQCBp7Du{$5SwC-&pmM#4Rt*V9Moeq1C#{X4D;PHy(8ac9n^D% zBV-cyR~#IRi*Q~j;&bX;$rNp6^n}e|e=wO%%TpZixfR+2g9=*lEe zW&wXNPRo>6#NH?1{@P_>EL0=hw4L9{5Yb1?w!hk8`sNgU=yYH0NL+YuON^}_eiAJ{ zPw6Xuah65VwXTrDH-ao^2N%G^#4Nk(?fS6b6>X=Omgx}4jO5wL+1#vT!|0W8s6yGD z8EBP^GjO|1DR4G=p{N}oH9(hnP~WJ+6k*0c$)Vhccylf4{;v8A1+DnL({v%!&5!#D zeChW2;l|cgbz{jgGS7^)Ke~nD`h&H^O zEKfi(+R}7mxK3DYkQ%C)@3iACF@I{-Ur;U;HK+LJL3MBSX*aVSp#4j_}nCQI|>*Dec( zi7ZKfnNM@_VQUxtNX{eX*|JpyG=i%sa*3AoA10IB`_1f1+dfa3Pkx~}X9AtF0b;+x zQ|L=U+2YV%+GMI1weR>Vt9Em!!VlHXN9eddH55l+dop(V=buK0&i*28qU>=cU#do# z1@XCef~!a-iR~}Hb+t=Dh(H#R#CU|C>f||>7Ab=IB~&wWum0Etu1tC(n7!}K~^)=85I243Xf&|!HJcWIS8lgttGn4e1i*~lSCRya9`}^@>-iOu48R;x&e|~p# z{AO({k|kVu)wwUyx$?#qO2U`1hXGc#)~LDnOQbr$j|I$4X7Z~}GzfNsRp;nk7pB>B z?&k{TOgk%zT@TdAqQi<_)G;bjVIBNxy0pAg#~8hq*zBXf^BBF+bWmm3Z?-?cWpQ6} zQ1Uo=f{>4Try>S9H_f{CJY%m~Iph18B9NH9`MNrBQ87laYa+5fC?ImHZP;?HU>vKt zP1CB6JIdI^^4wzVJ9Dy|yy%Vi1GknrDC*zI4HWY>aD{!0vbR$%VUi(`HmyV}DGNe& z7$V|AEACcRM!6JwZD)6XyhUHGwD}5bmewdNaBQZBVgjX@^a)}r=oB>DTULFEw+ zQH#a0`u^HoWo;q}+}-l~lp+3uKif~In$akhdNi+aJSPR(bsqHBj2uOT??b_Qc5Lxv zaeB|Q9K-l-7}jEz7yXeMR#)GMa~DhCWr*K;>vC2q52?DUVoFZ&M-0PFVtxsXt&OMU ziCW|$CXwJ)@fDG-8E4E3DJR_X;)pA9!*JpZ{?iijAyhSxV7`^%d_ zs|$m8A8)_p@~bHCT>8=JtG>)?+Y8Sxf?OO{SFg&7G>(*}u2cAa^}~H%``mrk=c9U| z>zGUYYpL}#L-lmePu5$LaLf})oh+#1cm3(Z(9PO)zFj%TSB}397JtsDTrf3d0(7V` zbT_glV`~yz#v`y!Xz%z9^*fL+6zEP*x}zF-`zuAMI% zFxlnV+$W#o*QA~5DX}(ygph6voX$b0qZqn+PS^N1GUaOA>fXpdsk^AvpMAPW&&K)4 z@7$NK;WX7_Nn~}`@o}*o@_hv=-r9(&9T;m5=S1J@m~I|zFkMqvU%Cet#2Yd1tcgYy z^QU}Otj@a=3ROixzOD%^589t))!CO_z1E`lDthRvnwMLA=Or7vQI_I5ci~#RjCUCE zYfR2W(YF3UXIL+PB>aI1T$g9po8vFQ*6_-NbuYoYJOs?3`)3ogx>qR?2?+{g=Nh_M zFX4*KZv<$;wJe1xOU2#%R>?{3D=4g-+zq!qNTuyYYmcu7k2>cJKf1r047!oS&1vDX ze_{Km^fIj%#h%<6EjRrQX3oB^K)YmIB-)w!qa?g8iPCF3*?=?6F{tXoOfQa2~IDJM?3w|w&#@_~KlD+JdI zO5Z=MyNU@k0&hk)Qufqg!4TXCX!|Jja=Y!`t~?ub7)frXC_*zohk$W*XKG7^yP|-? znR@t;Rzm0iRvLT|j#VH@Berg*P)$H=lG z4f({TM3ZJDQA&m%rl{xaA-}yZJmNO(wHI6`RQ*vNhv7oSpfUN=dfMZUq^mJjcgAwd z8yOX^jit!3*ys>(vtRhwm4$_0J`m2#XAch<17~C%01_hhj5OW4x`FchMz0ChI-RwC z`o+B?Y^tTrD|c;JYZ%AU;zQtZZL-0H8Wu{)j7(h6TNkHpgSKy)yO~;QFQ~&gFqspo z*@#-)JuAKYeqr!Lz=eS+LG6cjkmTZC%|b3@!RJCRPa&oGayiuFWIfpF2j_DF<}GZN zDP*~$_9OmTyoPt(!=94Jvue3EP^JKZ6m>yEJbG+8pS?0W>B1KOzU~ZHV5JCLmx_Dv9!ckaXJ{eHPfb-6MEINvtm09PrjTQp zoQ~k1`O2G<`m2kU310!#7zY8zTF;^P1MTfrsYZ;VtQpm_${X>#Tmgg)NOsl8jvFO- z6_!N?{`HhBd^4bH1${m)9#iSKDT;l3$^L-2U+|B%BB<18OQp^^hpVcoF?frHazfC? zPt${5_IcyHO@c27kC+NMr}*7Tqy?xk>NSj&P2T2Uc{&Wbm(`CJWwL0;!da)rb$RJ$ zt<#&dyk$iDZ>akjOtZQV?ea0@*`+E<8*5iM-6k~pkvs7n)b`Tf%fbmuOIQ*M8$lDL zdNSiP45f)oPAn$dJo7Pqath8PsVar)`WxaEV8h9*{6Otb`P=({h`He4p^O#0^=a7_ zsm7ACxle%A)md=OR#zjKX{T-pykrnk;T>348!Iax?N}tnS^r(McE=gXDjRL|6k{~7 zT1L`LQ|Ma81r9AYOv!q%)XnADw>G| zrx;puWqIyd8$}u-R+oMKnNX!iC(z5W&WZKSwFc_pJgvWkN0~OQ)hDu4N8!H$D){l; zv~*2Z$(eIOz(qt>zw(top4U9zZRqvBdVTzW(4n)->kVi3tnCA#B6#(T>L5d|y&(UF z1$)4@q%hhjhd}5@KKjCQoGT8ZNxQN!D|H~*9`v5ysB%#X2ze@zz@j+aU^h=zKH*vyK#~2Du14A>IyuVc`H~ z^`!f@O-p+75kzE)>ramaePgHYozOdCGo>r(jaKrWvL?8@{IeW+*_vDCZm4MbE_cc?F?OI=%Q zNYF>>N^@k*jlfk=UOH2awpT7z#s{v)jDhD58WDy>BOa^x)-OVj&&;X0M*RQZY_Id{#5 zXru=I80*R#=k`I(%7Qyozl{u;HNNC4xQ+5+w7pQ`kIjWmJRGT%JR>osomETQB#NBN z=T(>Z`U2Dv;m!Ur%klS867U}3U-)>vjX-&H$9tv?e8O>y)K3r0eKAUBJtSUkt7R?h z2tRBWe{sJPY>Ks_)HP~^&$Q8SpAiJb%HoJrkGGT@XLGO>W~la@u+U;LFO=}+In-(< z_wt)*PZ{VYk;e6DzF^|d7DB5;zPyW+w$U2Do?NX^=1SqByp7Y`qD0F83?6UM#)?>i zqoN|3Z!~6WZ9q~WRdX{GfUXQlX zKoZv@S&}cw1r}XCe-opu%v#CcC?P&Rt$Po_IhvEIG-X2_>PQ>G(PH*5yC{7R5=Fv zr5^;cWv8~~$UiS^U7WhHZcNjmC&R#$A3)T+A^#>Tv!Ut~}Lh^5|YvPvnNdact zs!NGEnJZ@bRI)(#H}0PEo4S%;$g^_Zd1hCVV;l^jsR#ICw?-m!C_3WiS!-nc3!%k< zIkp)G+W9lIqfA~wBLV%GQ3BmEdzWn)0q9eKOuk;a*Jt0Irm9cXe~ypbo6R1)o-{x(V^w->v)jym<8} z{^G!!pCR^Lx7=p0#ewb=h{N#3AmWJfJxAaaAEfFv7re^I(n1Om1~CPKZ^{*{Q{^4C zRLh)weWo$A(l2L3b+XR~+k1nvg1My>G_YT!8WQDW0}Pv`h?^$D|!3L%d~h&E=nXrGHSF!5@q^Fay2h8als4`t3O zU6E16ztHX|(!9=aZPt>#Wzu+tWgsiQ;e_Wig2T4;u_r2iu}tM`1vE=g^5)d2B4gg# z&75N!PO!JNbv3T4IP$xA7Fn($ zT9Q_Hw)d$>lMs$ik<7?6PH5ytUVYa$Gw_NgIT&3&Y-;v)0;I1_);M2bHWUyL0E4h_ zr;=G{o$j_)WYJ@OfBafN+?%ODcMW#9Y7N~r%Y?KHe|g*uE0r}1Ab=F9gLPIU41Jp> zvU^%>mXS*poOSueCW)8B=%jV3&(;i2qoQr<^P#%-3sb8_q%zcj+Kl*e9Ugv9R=&)n zpI#UHdsAip66Rn6=k09Qdr@O!s`+oWy*m@IutawA#ZS%s;e}&T7);sw#0oZtzhz$$ z`2$bT_i7E|wBDZ}=;iw9(-yU`b->fvifkmslcx>t5x^!AYOU9Zy%N45Bl*Mi`(=ux766DCpCZ$R zPQq7b$MWt4e6~M3H5R=+joLe+`ph**&a%(ImD?St=%BGPrhw@X=EV1A_nzq}<7(PC z0B30yR{F~8re9Ws_wHg3%%WL=Ei5Q4CzpLyr`O=xSo+>#G+R=z^k#CY6TXz^E}lfh z{n*reyG`zIxj(v$z=awjB2QV=p^8u$GsYyHnTiMLG`H#&d+E)0aikH{3PZBemY0s@ zyG*QvV+h5_O#yNVT^sQ=uICCpjWoCxVi&H;VQr5=x}84!V4(au$NKHw1TDoqrYCiq z`VShztI_9Sm*|SW)aDOMh~*3nGRg_G)dBf1;KkC%P^cM`vP{XmWadr@G)fo;aLSfX zsH!@eZSm zAga*O&^=q8N-|XK99TgDS!X#4yWYx#0Ua6+0L}%flfVwdz2NOMk}2NET z>wD02;Y@gAbEkozwO@F=qp=(_FMElp3QPo=vL%PUqY1_%PmmmMZc0_f#d)oscGP=* zZDHXY{ZY1>%AvV(PJsT*H0Gm~5JrZS4>~_TXG>sYWsUsv92n)PCa;SkXmj6=jGoP| z)TQA7g2xF&5fm9Hf^^1rv-;dnMbPOhBX)hUe|O{|3!XG5?OQKGo7;dcyF}$!FApK6 zQko#{RHC=l@tqIpXsh(N#KY}iaOczaP0~%6X^RxM>jgN*$+HM$nK3v=hzWGgsr;ny zcks&=l^BrxTP`~2_l3qoaUk%!a?g7Q6Igw~YrYJ)lbNjb!N)3nWE~|wT0Ja(xW6t|Irr%qxbXn)9WoHQlQXy{*GBYCQv3J2ng-{t*o zxWq+r-6bLD+Zcc10;ZoW(*Nl+TQU`d2Zw}P?GP~HbRMlDoNaGUJZ@$(GBVf4Fcwu+ z)uA*Ya#B)KLP8#gG4bR8UT04GPS%}AfS$?4ohBTE4sDbdgiKGQ=j2c4$QoOb}nE=zk%l2 zjE+Tbc4m=oZ@<+#gUHHaEAwjk`uy-s z%5Zf2>s+7s0T`F-x0IBCPxsd1qVSkw=2IpeU>BEqg@cm?6M!d|r1ibC5;{{&$RQ(E zNJ}glm5Bc3xPmSM;j~g-2qpdXHl!lGRN(8j3mwt)i{*@W)nB@75b_y_G63}?kJV&x zAS%Jk%nZ2BF)(+t+Gdtnr&?|&#wfED-pH=OtCpmT228p2nuE8BEq$#+{|i)^m`;X) zDmVXPRZ#_XgysV;W^nNHr2pogBv^ZNi94A^9_o%?oY3ecYcuR~cAD)Oko5rPqI7A| zkZ-0-D-l8pQc~$!*ARVQl$S3vA(h^@mq&n+#|~D;lSDp~0Q{R|z;9swd6r~E>1{hG z7X2K+<*^lmjWSX?T4%iz&PYOsL!G)pCt|_C`J-@q2IBP>A&3iUsQ=-W2*>71p0)kN z*{d5YVcr5;>Chn-P{?7ar}62cGu1FcC5AlmM&uto1PC~ohT>WMyVm352>}ZezGPJN z;UDH==6ZK{U{>_0l1k$;f{Qu|JTnXiU07ZEre*Gu1^`)13wyDzfom`xGMl|7Fb-DC z0Dzh$>~%^nH11oTEC9hKV*}eN<1ofZ|^3aU)uXw3zg}d=~bzxs;gVdP3C|EOVU}T z<8FOl?D+ofN=;&q2VY_ro7WeWXi#_CB9BlV=c#PM#t!r89eY zan27SCIN)u@y5Hy`U1jZqZ207xiH{wKfmz*KeZXcNKFa+ z*B7ydm`xj(b!*Oiu#GdeJlzIiP>{bVzxnVknU^td7gHXt^mZH z0H5Qro9-%`e+cHC+DpdBPnYnXi>iQS(6pnDqe9#VNE%KTAwqV*hEEFobNc+ZkB8aA zH;tR4Y$_VI>7H~f?CFqBlNVQj$u6v~67%Fggf4fHt(45bpSlVxvH`La$520fKbQQ& zpa3L4y?1?=b_Vbge8sBG#$_pnX4=Ot03vf7g%(^r1u1C@4~v9XsW3E-KIgr8BohML z*oR}#);+rkfnDrtLc%_>L!TWz!1@5-*8OjId1(2EKtAA5w@w$__01asi3KF;-n=YU zl%c71dGs7%(BYJc;?-3xjsN$KQ@IgFva#RAcjcAIF)^{RaS%w%7%YTs0W@a+uxT9l z9w3wcog}~%n3~9BNsNiJY{4B2r{UnT(%t@Tso)rI)=|AlY{*F&`+(U%!KA4#WjbCx^vFY@_pr zwaduE#W5G88Xmnnf{pz%;<|kgf-!b~(GmnDoF>&%9}lgic1O=E;X!6~*zu@i9pJW@ z%v|*DM9?ZKI@WkZw5N^s>)hp(6+j7-*7{=}4J6xpC@li!zQbLWBg^WNi*fMdx*9Wo z;;xqRbcAG65v7IA`*Y*yPyXhs$>3#R%z&!v>BrSSl2jT$=v66Io&NmTI$@U)ZY%Vj zD)#TfLs%>uqZD6YX55+UT1-hH@OjHp4od-yKCXm7s4{A873KXGP_nRYtkkRy_g!j? zuJv`~Fbzrp$_TR_1v2WvbHkd7ml-YEVRd+<&#i&0=?e^be|V|;VQ zL!>Fj)x3v8lkwN*bCcX!Ds;#G++Bf=>d~fiyAatKq%t zXz9YM(UZE#AvES4&R->G$Yo`w1woXJdh0Fksh8aZ;Z~!6FiGSVMmU68e~rwDG+eUA zGzF?#3kx0fhews!#E`25Uho(YTu)1xkMKOD^v1;}IT)c*t}pKhH%_1ole8Y;_T zFAinLX-12Hjc&{%o@QQnj7+#|YJk=H+MJR!*5dTEznggWf{Flw0nsNB^G>`E-e?A<3lrj``uJ|l`KnwESa!$64WAGJbyr0*fk#5^j zIv|6Qr%y0?<~XCIi1qx8pbR|jgQ(pzef6XjdW~m$8kKa`+KzJFVJ-{x>5a6TTpqw9 zLm#-1L*H6L8U&qUZ*)IYHY6qRLbqT&9u{q7Ih0|V38Z7?`s9?9D6B+PyJEL&UKy{6 zM0|41JuCpb6b4EY!~yN*IgsI}-+h&V0OmGFFS$7ilp(-Q(a)??)@jS*si=r4Nom4a zei&XOZa+Oh>=~677}g#_zrdFLo8PYKz)6*t;F&f9_fbElt66lhG3fcpWRp`tSBp_z z0;!BTT`gke=jqRFB;U+?P1AzgKx0Zm+HM@%#>Te%4sbNkRcmdGw?lUOb_stje+VLj z%*mMF;e`VckNeNRW*vIz84w@XK8}Kv;Ub{{G1sfCW5~|c*7El;gVKtcT=P4AqV2Qw zpMphPxoY>wQAw}LKamiZa+zlj74kR~C)zX3VtyMUTM>@f@_SGF(5OVV%ONPjyL`0$ zWvEdSgN$Q%M5nP}KqrS56nHD(qdjeIbN&nk^UV#uoyS{>C3q$4s?>P$$6eIc4g`V^ z$O1w>Ln;Pn8J67z?*lF?>}pyh^(l77IEPbmrUE>=C@a?o`1mc8* zMNyhmsw-*4M(Y_EqGJ$Z{bO>2c+hm+-=|?>3AsD&$X%P6aGS! zlJz^J`9^$CyM!b)_qt1SB`IT>1pT`BE@pan;Y|^(P>a_Q|1Qh-=9K{yg2DJ<@2}$v z>%DCEFG%$#S{b|= zN=3Wcr9E$5wVhk;{Q`)}NaR0Md&r$1*Z8X*27gSyUky1vnQ6N1b?a83+D%%ZrC4o0 z7{a-(+`lzPJ|Oj3xL=DsBBmLpy=qU9Trtx^RWz5nhb3W>@Yl1ar+Ic;sMU{*YOW2( z3m&mW47rVNPy-U>5mZI~;;9{yGpn@f0mmne$gu0H2i+z=gyjdnAZA6q=^ z%ZC{U@F-fzBaO(*u6NC^U);q=>r^(shKHegbMu&uZ;TwVGVIz>=YHq+cfE4sYrgH> zU%rzQ(LhGh1LT5c;@%kP!QTJ1I zWVbTCbKrjYULgRyC;zHN!#LFHlcC|_MQn@yxX30o{uXX)O}J5i^I z=j5_(-q$%2zqeNeS|{i7Q^YI}*g||0>C}ozkK_JGIc1RzmS$OW8ueZJszm!{NuX1| zo<7|y@5uKzZmT@H`#~k)qnEr#E|xPqB$$4+8j>wKN5Uvi73CT?m_;h30A}_15LPcu z)##@7Hj>a~TgocRb^ZsRbO3GT!mS6+O(NmzGyC`gc-k|?aa z-#gq3T+><@e{c*T2=i0oEJ!J83RD|aFytMbPBq@Z8;vi#dREY6W_cyM%VWG-Y1?q# zv0#G5{o$?O%v1)RUAuZ?!Q?GR75nx~coTQU5><$hio~qGVCrdo(GV{B@Koc?enS!7 zWQh(z?r=2|@!O+c#f@qgP_F>2@!J?9172Ju2O_75si}jthD+0}hNn24*!&eU4aaZD zw@wDBxCHjU^4RJ=pZ~!6UWv6p6PHQN;h6&A%m56biqh9?mE#JgqbefgtbU8gvh={U z0p`2-jJ8$6!!VSu1DcT2;nZ5^<(1alr^m>8W%@GT@`Z9}aGLkKFwH7fJr^bO`#OL9 ztCkJUD|Fg5M#QHm7VWYDXuH%jHC#+r8{cOx>%5X?NoP zARQg;gd((XOlYBVlue)dp>sj|eA-B?^s+tyo!Li;vC`jly4zQV${}E~ zlZw%kEuI2fE{}=fKX*Z%-r))lJ`GJX&iZW@{e1nbrh*rTqo}u(;&Z4WCz-*2=@1K8 z3nOX@yheX9&83wtbWQ@yTuczZt?{W7w5B!p+ zwm?^A*TK?I-#w{5@y^YV+oYOJTA>07k};8)Xx|wp@N4~}KsEEu;>bkCZX|Ex%Db_{ zl@R-%O=gp;@@^>*TeJmY=&e;@LR}6btCtX4&azC>&CoB<-D+PnC?X}{(+8K8^~3fX zL=tzaiR`#LDk^GKR(efu3g?~vA|O9X>vEOW0jqG+j%{TU*7cs{PseLTv>3IchBGU~dd=Or)Pq=1fzF+z7*8KQBmXci* zZh|8y`$7&y@TWIN+n>!K%n$teY~Jb7F(0xvpvM`D$2Xkb(V1rhN|uJAD$Hw#Lt^6D z>vl$otXI85;I!0Xr~8`Kh^sCFfZXLB;-oN@vp4|9tKB0w6hqvAg1xr<5!dY@mB zIiZGk_NN90_y}Ncfx%?0>+q^xu;Hb+mIp~j#xYjM(ww#O{&OXrHYJWT1B1fil!Y>Z z7FPG6*IM`UyB*MG0dv*?^|KWh^%u4737s}qZ@0Z|Kg_cV-U_==@}V)&KJ&H4tv11g z!ff@j(=@beC^~^jyq1E%_i4dn&06bjpm!IrJg7@Rx}e@Xew{~Gblp1uF&R@-#SRXb z<0T+~3aBfLM!u*N8XH_FIaRj$e8LgxM4`WHs<=53Ag@pQ>(oaJLhy7vo%Qw!J-Yol z(W@$Is_@3`VUUUYb}H$v2P9>hwEQS}jel^mEkfQn2s#s!oZ`o=ALsIBThr-5wP+A9 zI&mV|P2)CGUGJL8GF{SIYb>l9@=P_4zY_3)2?>wua+>c zofx|o0rxL=Pren;4$Ky%pA8Jp&9p{YFH}Zy^$i}pyjr$vX0`A1I6Y%zK5i)AMcPfH zkhZwLqI9@rQi0*9oq6ScjcnSHeXUbXh8uKRl)o%rb*>m){lDuha&=IMJN%#p@+u|m zGPJg`zIY4?1wmy^}Mzb?i8kd6Hd? z`$Ji{0;T>%D8u{KH0@ZGbGu%$#ZOtsu{Gl}83+FJUdtyr61)`fA?D)j_ zq70{n`!t?QX$}|Hbs!gNW^nXSHFtGahp{mk;Y6~LHfr(CFLeC)nfhI7fiXv$k&0Ds zHi|-uJ0fTz$+9Gk=HIdBQKz2!qyQlzwv5$xkvOp#C|l~8kXSet;8I;}%^}hq9%}{y zNJ6ish1?qs{CN4i-zv`6DLd&RGPT&8(@Ju%T_FkCpF)c71f^KR_z*a7Pybb-#gkbp zXKxVF@w=ynLR@xgze&>jNG_(TaRq$fcex-~=#ZxI;CUm0$RY5LWi-s}vvOhtN2hFF zU?L8)pCpvd=|sYB+6O!+=Iz|zsKn>YgdwW*2xL!wYyz|&%K8l6-+vu%Khr+{|E~Z0 zAH(_o=JSl+KuYn+E!A}`mHx`Yhl`xF$Stny9;`mX3}Kreav-)fwQnd5Wg9eJz$9T; zsR&hH_3OW`BeXaJMv6d9;Nb?A>w8fZ6%7py1r``g%0r7+PqQvYZ8Bz*xq_NmB2{HUx`V%K- z050dPf9z%|uIGig5F-Nw0(gp0TTARaPT;#HI=^NKg?Mw9jE0MO0_2G{_G5Q(JC2yIpAVy(m6$XQ4LiVeV$%~^IuASzuWh=9kb+_iB(K2IPIqG6-rtSn6z)_qzYa3%l= zH7QG}?t%5G)hsoryZ#d+bN!sPi~)^~MAHlQf(^Vs*OWCVb`~z(ht74TTXVMhxp!a@ zW#tGm_H@dfeiY@b2CVB2gGh(w1lxE1eg}d}x?9M3CEIBwSMsecs^`{RQDBucY8hj- zPC}*qRwvAmf1w0>x;IN2oK+maCf`ZLtZYTdRY5o?Tlj;CspIQFGT}y+t*fO`;}bRc z6uz^ZBfI;WF$A!kfMeD=pe4*%_{R%FIE)9dcE$CW+|`(DT_ebbZLG-#B-rGLjkaZX zu0&-5zd4CU%TO0P_z+LgqS^^lh7YUKKkaD=&7;IyGACn(o2}xTRy>OM*3{zas&QOS zAS)b!h>e}y>7mZ>^r!qh$7p6~7h8|q#Z`i_as?7bDyjO`O(Fm|BW{c@Tai2pTe#ih zhq3t`zbjP8{9OpYjdI;WJ{(2db_h{FGS(n|3ygJ%Aey-7((>~nkDN+nMqqAoqg(KQ z{qFa}U8LfTY42eOZ&ys7bY9@~vGRhN$}pJ&qSk5Qn`LWgVhL*{aUnK2x!-li(f-9l zhDp}sx3s1ykPBALNP@p0$}L!Mzb~`>tvlA=u}=h+83+GtU8NkjPr=t$v&(c9A7OgRD9hGs4?rm!@Hn#n{*Rj|{aTEJ>e=lT4;?2fuwoX3(-P)G9o35a*2-_-VNUB0Q zxtorwOeSONG4XgC?4FmIm1N68_R(l1e{;H0+4^r2KX;29;11-XX$_ zX_3#o0!+n&+(Ao?9J(q1@dv1PSD1)8^+DhD#{2MFhj|UHju}&nJD293noPY=!XYP5 zi%WiUF0QI`e-g3%mTP;-;~IX7FvoSu5*2C@RA%PH8dS9qpdU)bKu+{^LwWt2b_$9L zVQIX(-WEPml0Rr*Zo#aYt^#q4DaK4OuPM}mhHCJvR3ZxSNdKHadD2EV+;JU9x7wCd zIP^j4;lpP}y|!fzqn)Oh4$_SbpFWNsHGjv>eGb?oHcXv+Q)kt6&zq0NpEkJm(d(I? zb#texXbcVf4)S&HPfkv@4hpNCyw`68o2j_zLl4^-N%Fq29IP;y8c}=6I)O9mFUp}L z@fMUU>Ye4FPS%{JYbs;#%0E93_g&yS(8JJ2HPEIs3^*l?oVh>S0*m}wM-bo`p6NVE z(8(Ojsx~cj6$`~?ukZ-2ccm*+WVvgR?rT&#Isui-5|A)9ocv1(3AlzaizAM+(9+T- zdG3YgW)Ja4BOI)Ccm#M#a@f>hUT7qvGKJ36&+j}Rh}XlhGCK%ZW5C@I$@>Os#{bvl zA3%CDxT3O>;|?@*t5FY>kj9V`$o0U17KBtlVuAB9CL_#SG8sHe?X+zH`1elW45n-J zkJt!aoK}DMV${J~Uvth!CCB?On;91H(bl$eQTek(&s42~=oLW0(7yb|v6gCZCgh5@ z!=CM*O$|j5aP;u7&TJT0J4>U4el20T@ys>q_Pn!2er%F6U`b=XoU4#>ZFqMF{#VX~ z!|5*zIsB3B{OsQ`L4fWr`S|gUbcX+?8$VKsfb0KPS(E>~W1ZD+aD9$kLw|N?sAl#N zkVO^Cnu`~C|J&OEu9SMxrYz#g{%M?(QRr7iJ)szn(3q&Xr~c4~u_!KZz0Gg#{}6l4 z9nl<}oII3~$nPfE&d!0P-E^#1;PcKL!xf#o{?4ait1p zpA9>&t*wo~#>dslv;_g)hv#&ek!0E5Cmj(5)J5S9#8icDq|_;={}_IYh?s#||04$S z%3sAllP%-l{eH}1^4-P=sNLv5osvj=9}LfTzc{|52UI6nxN2^3)FNf+m`85$=(R8urO z>@hke$iq9;lvrV9!Q)q%paBSOcsum^LUuEd<#DwC4Q9GSQChP(ern*yc|)z5=1stB zqL*YS`rqdwgeCgY)yvM}4>{XF%Zv%|MyT^@d4j+%*UFD)SP8D-!EpH^Hs315@YHupW|d4mI(7*Rsi>jfd>tKAn*(8HMxFcDvhPD*Ww)XhF^U zKAm?YUu;!JDwsl3S>Oaqg%=g*cjvH7h!9O%0;hj?BdQY=WaJe~}G4Q|C#Q<=vSidnood(1cQ ztSU>I |eCzAli)+tB|i3*Q4{m28oNx{%KhZ*UQ3z41HF7ajoEa*+v_GhMwY(Mrm zyT92{^&q2)&wIIsD{q%Qrkk4U`cC0Ws~XH8->$%@bq_tAOL zxjjjDnojCt;$&B|+$(onqt=(~nX@f`y44?A=E1(L zVX8g@Ol`bV@TEWQ8(x&iAQgk+%+B0*;Da^4L9!8q=M3z zQDsKYkMy$%$!$+^g?JP5r&IWK%Yb}4OO#8MN?+-xNBQ;+5mc%CZk9f(WZ<2mFRH~{ zNiFrhC9iI~{R4^!AvEMT{xtPbIIq0d^mH+{C0v}_N#caC06@fBea!B?R->bn+#hb zw<1}eb(FsignS=kN7dWc_|X_t@l7ZGsLDm$-)9xeRqwSVAUszmcw{62*COk%mus1p zD0;n%xjJh~JRtCzDgRDTuk(Xk2;TNJXEEt%S<^YQDg8~Tg)vaHlvhg{U$CQiAgbgm z006d zcfLV(I%=sThm?v#1Qqol6oW(l-fgF$^6>WelT*jv2(HqUr-1xndRyDbKiS{)uyhfi z21IpWQYWYv+9ftYERUgd2)sDtGIFzhXC(WDR z4TIwL_(s|u?k|MaauN~}f`X8AO2j)oMz&A%tbQf7(_rFo^Rvn9HJVG7%b2I8u8}hh z-isHTQU{%xR@ksFXmxB}5^L|GZTC4jGnm0$`L{{h2fevmG2zzA4i$lP&01N<`1Rz} z#XGax1Jq)3*3?Hw0!f&*^?RUZKCO&9LVuMWYJT_~ve|+&jvQvlTnY>jpL=jZl}`jiaJ0sMcu76Ce-L=5`yW^bk`CW(NQuEce5NT2s_5J$kS z|NV!1q!^+8II?@!o(;vpB-dx})smnn|JQ zE5xm<&PI{m&|nj&FO39HKH^{7{#M_5@i!AnMY_o9z!AC8bKF~3VuXaDlQ#Hg9dIb& zaNT(g#>oysBjPcW6d4ccZGVC8d(nv@3%ILUsP07q?Hs9krwF~P;fv% zM7lxgMp{~>yE~6vFhI})0Qr_;9UG3^Pdw4~#i9{U?{w-_HX z>!y!65v^-bgb#j6zBbDkRAPL)sdmC?polt&oKj$@(~l<(S!;g&RCw_p)}@?h&sFPJ zKQWr;b{USI-Nnune}4YFhX1?%v&>xCW`=Ux^2#tNgd~fE05WpDMpP8>iWUx;9`BAxPJV+5yo?&I97gt12TbDqhTac{|*G*V^bXVtk z>YnUF%*Gsg9qheTM2DCXT9{O)++U%#lP5acXLz%Mb4&>!&v-33%I8MEurP z4yOo=%7ZieHsSVsmF`J@_%5S9i1}_Q4<2S6>bwe2Ul!Q$^z5PzUOI91bwf`%!&yir za>lT2wJ!wL-ORkMKXZn#HwnUYw+K_w*|>?52`T?yf~@0K^I9~MR#4FRnljc!vs zv{ylYyKVgXzgWUtcX1HryAmP*u(hFNN~#;nQK^>Ukai)(&ud@t%L_oZ?r2HR^B321Jt&tPcw)0-C%q%(qC1)0>WY)61vC(Svc9ky z?=j_;OjLVN{4jNrvqt4;Yk6XA{r~}tWI`&%QM3L*@3ZJ-B+p#j7QnO?2mZJO%j31y z8?YhFspj0zSs!#X556i@bD8;4dSPl_e;5IgDV|ABwExY;*wJIZZZ$tXQx-7MY8;>~ zNpcH@yDL6W0PCfF{0;#eH=tLshLKr_WuKLthxe6%hD}L+n!srJ z6a8)l7E!jK&1eHJ*amHH;`VTTz$iAKaei)5;eRY>(#ivQXFO$&zd)7Hh z8{EkeVr}`;q$yjmMeg$-JR`4XzD_0Il6z>mdeL=WR-u2#OJbGFb@M}EmCs5A!{IPU zw>zbpSN1=uUwMGG3%{3@-2y(`vmu28XDhZzG3v|OvI2A)ni~T|i;)l;FIt(VK&Opz zry&p3g>WufWIgL3^ZW6@2xvX}iIe7?v8dS4iZGV)bs0#}JcSA7*#cA`2vBQo#vksh zA6cs3KMXZIZ~Ck)`NoClMqF6Oif&m&X(E**o1wB)EzA8t3|b`^0ra0S!6T}@x>}=q z4RQa`ThUYk7@%eSn*36ylsl$cDy>zk@PcH|5C|LY+92a-D9I^C1^t4dBrjZoeA!F* zXv?aA@=Zd)T!4wnI4?cgvZ^eoY~{@7R+HIcU|!x9Y;D%J3mTsrTM+U%^Dn7&}q7oL`A+;;syoqK%8H zYztgH6Ci|_Kdmz+i_Vwo1_6XNZt*ZM$}o{17@cVQ?W&pJHwLhlgdH{)*S{Mrz^jap z(1V9!9l49QY`&}V5c?T?lfe6HlYkQ7U@a~AJ=kU)Gsh~T>)mOP}lB!JY8(}S`WXKnd_?q{l|FW{RO->qdc)q zG{va|o#wCQQ$L~?g*Q{A&P4^6J7%>d`-TG#`IVb$b!|7vSn&oHihZf_Cx ztJ?#zab|OZDA}!CZmP`n2P(A)^g@~SY#j{$kqimQ@HYh9zQ%-ixj#hF0;+x8BoBy-!Y(G!XAl}7V`G@lHX*#(^Bui4f%YFo1vByW@KWAz` z9>Sx$j`^sb09$mh*&x}DaL=R@7xXLPxh~y{+^7XcxR;)kO9Ks(qB9EIUVrnw%iJ&Y zo=r2oQI&*}WDd>DLqHg6aO0sUdIb?Zz*p*+vnw~VLdTEC*R;@<)D)*Kle=ns3S=T2b7WI zPU|^^rv7c}1dc*V6bdqHgZLSeXVfcPih{t9(jHy^`3CbFiRnRlch%m64@S3>7WGZa z*RU=2Tdy6P^YQi$Hkk}wzdP@M7R045%N$9eLVCJfzdU$jje?a(>%2dxvTyG={^QLt zB6{v*L@-;MLzC` zoBBouhaH93bpnfu5qJV8HW3ap@1|{!mk&{g#qf}GdA&}7s&K0uYzH4sxfLg#6$42> zs(NdKdHj>YMPL@0C7M{DOoTn*yz4L7SP77gWpA89$^un%e=OpPelY~i-Sxt|Ba1gj zXa{Qv6&9)=Y%#prRsU;%gX4HiM8>VBR|^ds>5r}4A=YMl)Eymv@9VAE@b2#JjM%(9 zf#fAiv+g>+6-*rr#?*Y1z%&4WK{Jhk{2ixb z6qi+yRZ3G3_8jFRoJ;SjI2P-wzyiKM;nF z9b~{P;EwCi_WkMyeb_uz_mAd?6L)2w)Vsl^mVS)7!qng4+6USONs{zH29591)paE$ zmC>3JS=_T`I6ZfjjQcIj4?rVL-0R(b+{8ejuKOfi&+_oPx}~M=1yH9jy(n29Phe}` z0M)R2s4C0vDAYAVVTDJdC##kmXK$4s0?gL(CM{^jfwZ|~EK<&!5>qUuq^MQ039TME3Yw3$Kcg>AJtVUa#>x=bYs=yl%Ydh}h1>tk%69 zng=}$R#WwAnxe5HmPEM~z9?aq7k^xobpMiYFRwiP&cHa2?f9&DLY5N~)dn@|{V@{n zEq4>8!IDP12i=1KggJj-veo2iM(535U)^_0^+c?!x^He_v0~63qErXN0P@$( z1A<^AHJtn9)6Ap|sjhCx;KiFbgmnzB3ju@nziY67ez@i71g-IKsP>@Nzjbu4Jx!mH z?h|%{`8o2A*&Y8d@#XfE!6fPB59^F`Vzuks(E`P}YnG$uIa7iIIXIz|*Kz?MO`T)> zO`>3f5iyPCh7%`#1y9MQ9wYQYJ8wBzeS+CxiZ-_TQB(`kn{&@rKsy#s5o9{|tf8xB^18`OwU3@J2z?zTsVU*{bL0zUDzt(D+hW?qkv-DU*&ThDZd;u&??Ti)P$yR- zq`KuM0BR&#k4%a0c5AgZB7y3T)^&rt#`#$^Fq?sNHOkY#QCmLe^6xPV00FPz&)lQW zeZ4Mt(o#;fABe=VM}9Yski8jm-k8gJwow&kQ{Kz`T)vMjo8V{V0RfIx>WT7tU^c<4 z;%$P!PS>}N7M9o4#4zB%xZHe_-*1o*?MS)(PALnzS(V$9lMJMg1v#HKGuJ)gZ&ALup!018Ulik&`vH9Mf?ZrWb`-#3c^c(Yi_UYT?J zidEDzL3V`|kH!KGA5!OHZm_vdmcM+QC>v$5W>KwVPQe#<-amYsrhk>M_;K?Gm%67( zJwnExDCXP-s?03Fp^Cj(TX96V#f%xQ z)K+XxTE<>HQoClSuo9}&vzPr&Be1~)+KdciQtAbD%#3WPzfJ^8MxIq+@4KtKx}u`G zqNe&g_CP6IT&rnzVfojV!Y^DKikV1@FGXf*_3@);lXB z6aDXW8TY=@TP~bEXF|qBSQ%*x8|^5XJln$)CUc^Au5wD-y0!> z*DetWlhHF(bR4 zpZ#Efcbue&=Vw>ST2QdVPm_X%ipjV)`LreBm4W?Je-G3CVH-i%gH%FKR0dH%-M!k-MUa8peJ@S1v=QNFd{Rp zK(4bBBlLO3I&9$$jvLpaM1LKwr4=$GopaImswx30?P%DW=@A;P$mA^mW?#ddW^l^&4(pYKEO53^zFnSfp zWvWa4%_QeOIG5jRMAADQIspm1YA0{TO59M*?wrL};IfS!_GbHb<{y@WBE+Q*D!-pB z0`paAMLMgUfpXNZ{#~6?5Mc6PbCG0g8;|IR95rWmuIDeW-tLBO_$J+*ogL+dn^vbp`!t$ii0OoP zznR1vqWp44U`wK&ufue1-284J*FZAvcU$udG2xwsLtDe8b;HQ@=aJuNI^Cy>ogSc) z_-zdx%r1|XlHwl()Qsw+4EYUJ=lKUZbOgMz&b#Q^@QmkR7PTEBOx~ojEs&(F|G3G` zVHUglWCc5(gHt)rTT)Fe;6$9mx(HGFWq49AkOWPH;{zYTvEH{UPt&^laLI$y&b76* zRoALSbGQ5{ZapWoNhP9eexD!hVn+ z$LCWA#-!(L(QZ8SA$p*5Rq<}jo&XFRVfuBs-wamUW`iCQ`}P0B2o<9RHS5LTl^sQceWeDL!`SG-czr?@#;$$^ zT&5f9r;Td7UHAG||Ndlmdf-7B`**FPfG7QK;}6ETs!2hMSEGYwDLZdass*PjDxE4R z=bhfO*eqmmzJh>}?*^7TfX(1XFz1iBMOPdulYlg$=|KWagVk9Y2Kimk@e$#no?VRE zQKseEJXa zvBkkxo4(4Uz)%ASHhC@q$ZyLr;nNF8D|1FCJ=<+^4QWV=yL9L2X&FpZIWL1IhP}l9t%RTFvOCX9 z|90miCLZqR2~Qsgrv$lNs9LXN>xq~{i1SbXw4S0-;%{~64${|6N!{McI`z?8vrd2L z8(0k?tni7iZcu(E&35poV*KR<`!hxbmlx{#CY1(rnA1Sq1Xf-UNX+eiLEJS$jHuI` zI#r<%-tWzP-~BUk#?QtAHj1js&`g;Sr4==b-y@zng)C~?dG@TU*PuUWEx9SEh838+ zjnNk7H|=1eZtJ?YB3@3HsTeA>Uiy9 z&7T^0vHpHh$1&PnNt6Csa%#sC8c|<%C;7y^*C1OlZllsN*$G&_{VWy^hj&* z`d<|+`>=lk1FZCGmw~40<&hE4-W@GEMU~XtJwdlAZd%bmk`fQMnOpcj!N&-;vxqCz zTG}6D$u8EyZKPWfFdEN0kRH|D7p=|0$SUagldt14+NHQWXU~a~V=L!-^4rRb@5w%w zWyy8tN1qJeFTGK-Oj>>t>GWEe%%(sxShCZ;17TphwHOx{8$9(Ccm!CpJ0_9=Y{hwu zBJ54OPWYMKZ@q+d)Su7q9pgGCoV5;kk;CFP>y?S>n2Nd(9&b|9iWqq5vr~q-V?ieO z9$Nntr`=e5`E|5NtJE?!+ULiH%uICn<7Z~}lpW?D8j5z+Zi`f#jYWDIU{EPmzq)!v zx{G#}SCr1961C(&WxBFEgQP#Y*!RL^CCBC!0 z_Gkh#dr)Z~f9zTws<9_-JJ5kC-*DK$)`aiJtf^gM9f@b=Qc-7tg~+V3gFRniw9r)H z$F#jO*HuzWqP#ezDS@0tJ9zI)T{&M!405l{n4m9 z=2dPm7)(c{6W4Rz07*Qoxj1RCoD$R-;Z4(MN^=J}kJPaqlyXL=rsffOpGns8$gF1Z z^31(nIy#dxD|cF9F@Q4DZm3p?9%qd5nT*)Q1L(hCnQ+_;#T1xwh_Kya8TcIc%6g^f zw%IRG&{JKs-9(kyUd2lOUdS)XzYMc7IuR@FUSKrHHXnwB9vltzlTQbcAE6!(p{9!5vY57de|-a9Z+&$AR^nk_K*~9` z;FO^qEh7AM>6d?Kmn+}bg%(P0hVt}RXA?#QwO{)26s>@ZOw@B|`K46_UCUo*T(o zp&44a_y~*3f%tqYkFQ0L>etgFUyM#?2O^`IipgrPSfz$I!<^+-6qHI(N6ukG^!ON8 z(BnmMUQtDqVs7yhK^5q+W^V*LQ|grK2c5oiCF_w@IQy#6lb?NitA+(TkN8e~pai8* z3UyBRxrY-AeT6x^DdKmywc1kYEx+Pb!qv&^oocG|Jr@^KD57xN^(Kv4K{oa1r$fPl z_hdT*y7y%~s4>TgB?e#$yy#=K!0wSdTEFVF%+FVLN0df%*}E3ANWm~0>Co@Bg6veJ zTXydcQ*S#!S;v>f239BY>U`8t=-N?rEGiv7@MihJM9hL1J6%;TYib2?*WhAi(L9L? zks8z=CmQUfjn7p7;84vvbTX%fvO=#}?6m7jM>z{I(+=np(U5Z}QVj0b^|)y2+=LVJ zNrm!D?NuAsx~(o#5n7^8Qk#n=PRH$iRP2DK!W?*^uOFezuU4h^bs1>QD;KtD!Uknb z5q~V?JQxDr?E2!eH3epUG8UH|>yZCsn!nj~_K!F!y&UP_W`#4Yo*5KS8^pPa+4?sq zu=mUTT45B+Kc$oP&dZ6;tP*TdozuPec2>@#!K=9W_Q5p|%(f!ce&X(jz)7dak2LK* z&SxN)8&}!V5BQp98OHiRJX&T!$6xg$IU9PH)WxVc#X1L#5F_nz$(zd#q)A6TrQSQr z6^wm?+Xre6BkopKK1KV&zL-IwSXFlJ4lpf}2ai>@WMpK5Q&V;5PQ!|lZQTbXQm`~3 zv!AlZ2DXVwNds$JbqDf;1O5CSoi;Qebi{#cU+0@lYwqo(I>535ZAv}%pW5sEDLKm* zzJOdO6)B~6m(stFwrg^^-mnGQL1Cf6r5;xaIV`MHFo3*b!oxWl;taZDI&Cp)X%JMl z%P53J5l>Z4JDYv{f^x@p?tqel8TyoBv`Y2bLl3cy0s!ypO3ykpE;tNEVVowrI|T&59th-qX#ux7N3d8aGVP z>J|hLp{ca~-h10{^FhJHUQVzJl*fx(Y?H2{)#kn1>)LheN0>uUxyMLW*GinydSEZ9 zA{UJlRAQ;dzf$ytUbiQ6y#P_hqR)VuDfif{J6{`$x`o^Ou)H%NJd8RvhiAi0*@+GS zMzWE~#X`&og=S)3CqoFUMFzrX=7Lyir$7@utUir{*})fjUsTAj48Za+85$wf2>1m)VKU;=X2uy^LgGEXj6<4ErTE zna&VD?;9bg5)|{qTxrajX?*0B_`~NbQa?1Czrtd?NS~qGD2{N6l&I&@C1dk3^Y4-8 z^R$Vvt>Y4*W8&7Q)*9xjwf*MCS7%n}O%xo$^7LuiyzYLRl14=xOvBul*KK#oNNZ0f zYG2%1ac^Y|@ZUNX`}@x58-{KgsXR^RlzRKQ(l9OfhkWVAa#0Wfeu;ZhH(f~(Q0KZ= z4warP6C=T5twkB9BGF`P){glEl8nIm}nNE-A+f0Jb70$ByYaLhZO~G0`Q# zZzp|3BVNTOk~}je9K($^Nuf4*C_52rAw`}6x2pe)P`#{7d+-3`r_=V2CeYKOSpCm$ z;^1`4OQR>N6=G_t_D40av9S$qRS^UP2DVP?a_osM;N!2t){jB~pfelr6byVIdqfY) z+%VkJw}T(V*Kdz7t6R^Jth5erkoV6 z#JnP+X~9-VohjXwpIs=(LTfiKQ)_S)*I=P_x)tp3>Jy%Ty57>DG*P?U?#>x(s9gn@ z55$+Kup48C%e0BtH@r+pPQOICqV$M&Sbz~p+#@5XU(tHR<%}oI9;uzjXNkNUb&Dz@ zYjoGYUw#Dq9IxAOi9(wRLJ zbY$~>mCU!GDydH%Xs z0@PO+()Derf?a5SRK1U)eLl&YTFZ)*g^vB6=sxwmZll6e-PWTwGUCQG9D1=#jvHSL zbYqm?*Ym!k5_7}hRIm|jn0bs@RT{RjLjZ~8o{BIRV=+*Egw6@bi=@iQ7iQfg;xO;; ztxXK+Pcgy$Z9A6P*3$9hgFU!xK{Jl^WOzwZ!cxj~!$eIkDzfj`;!r%+GyddFWk%8V zRCXiiLHcyug7D|**@G7PHg-f_K>|Ku##E-6f0dYPZY-X_sS6oD{o!oFa74 zIxIv>b9mn%yNG{$cF4akuNueHs@WcA6(nt6S2E09y}Br`eJ(wPca;qjPN!#7cT^x1 zDFF?f>nESxN?K~?@E^UvnQvfG=|J*@ZyX!$Iad9OA+kzO}XF7bZ zc;1lwMMh{=qqd#0oP?LFN zF6mK9ohd4PTRpGQ)jn)RJZmez?Xu~q({X?gOt@nfXXzpQ_$ck&l2uVcm0gT$rXZhn zS0-Z9_NWxkaaN)hW6IMcS>F%Pipn~-pG?;1c7Woch`q73Jj;shy-A;0A`I z#-6LQ4J!(kGC}4;niL>|MBJ*QsP{iPRt5Aea*;-b!7~Ls&Pj_KED!f zuTKpkae2JEzN4k2pd>evVVfhzs|i~+0zs9OhNDyzqhpIfP8-J_ z#NE@ZnSGB1`OVu`7og%!t3r}&vZI|QpII}0sX+&3G7vxeCrncBMlUpVlb1y*?W5*fasw(?0_J;&9-{VoXVU98WPil3OkSAV;#gqN3BW;OPKeP%S@%m8e!=Ct1m;nq3-z4bAW;U!LJN?G&q+3&h%E{f*A zdDNf^Mad2YPVNIA(7A@~O_h5u3M$r;wJfPY97fPeuN7;P%0MU<>_F2ZZ?~gS+p3tq zEL^37)G@hFD?Ec(y|29N^yK51DH=O|Xv$}QhqyWg%W>htB%FYnJo6@i@pZVHk6Fr` ztq3K$xzU(K&#nQsa%ktmert_-?~a=cDt|hKf@7Hhv?nHlTXhnhD?FtiR(Diiu{q{C z)%0YgQPz|lHc0Zhz2*s2xvt4{s~OG|NH9`?ie|L+HPPa3PJM8$x|Ux@0vO7o+wiVr z4L&hJ7Gvouvza#_F_ZoonJ>D|=;}YX)X}@++Lp2|Ul6lq`K=wR8g*s(7n$$3_cY6f zX4SMeKb{X5PTA2*Yiy!xa6TiK3nU?_vy04R!ebLP%i?Y~?PJ{0rQSp3qj4=wjIbp5 zyRm_!YZF81ojPS13)Tx@SH9p`8-mM5-*kYTP!FYBp~;`(@tv=&x3*Uz`cxFhUT}xv z-E%sN5#GV75j?W#X{R%Id&%Lqt>RT=v8B4-_+0tEGTs1pe;pWk>_))XqqIW>I zWO<|w{PwM%+ow-y+Q4W3+RXGo)9%w)-=@rIE9JRM-C>;X9oDlNqp>VHF_@B)U2ze# zn_nilEmyi&jr%G~fPO7K&E{ZH*+(tJu~4xFdTTt@pgmO~{HSFA0ttS@^D||rx{rI2 zgM;%PYROsi`XXbEgxYj+V}pOEEh4I~Hx(YiPVJCH6r?xxE>X)QF66I^F*zRG)^oHTgr zlO1+bj%m$#q1k6sG9j7ub>|LUg`+Ad6sM`D5-ew*dObqfIp8{Z+9gtyy{>Ku5eGNO z(&0Rh!pyl;it^UQjiIDVwa7@aI%YTbBAFF8_^#FE3{AjJgR};(mGdjj0}Kj%8lFC9 z_RqNshjV&So3J zzPV>?J}G>`bNXaLV7W1qM%`Q_>Qa2Jmr*v)?Vpp-qfiEduCc|nmFYm7=QAF*A3J*Q z>PfuF5~F%YHBf9+U&Uc9Wg<6lcw$WV++W<|^67rSD7p_x@yf);{PJ7co5Pk?CLN+= zIe}xGy>(jQQjbrsU&|iCF>n2AaDY!S|DWHCvcS+SN*DGSSSC5)a%sg0D1X!H@V9GtVos@0gNnfPsg0@T9l!2 z3CfUuQhoR`eaNlNNu?OCrpTIYa$tSN6hO$ARnu_R*146b8c9I#eDKR;dZEi9Iu;p` z`IK9{9n?QnbNbD|rD&(2>ZiS-p67|b!U2Uss!vSK{rN#SmuU5cWBvhO=ms*CfCi77 zt;4Rg9@4&~>8NG1q`{$@strMCzQJy>XcMW=JK%XmIAw*w`xt9;^bIl}QA!W?btvvm z;IPbgdWT5I8Rnl({1bU<;S8E`?f6MmUZCmtac!L%KQ`C(Y-dJzgCCvJs4iWY_$Mc^ z?khh!S_@2X6j;!`TQGgw`W}={_+WvYy`~PfY%b|PRk7iT7H4q5X_dtVMQjfW>WoWE z)gdmr@}06*4u{pWrdd4O-a~~igJXMEjpzGHTa#VJKu=%G6{J!#n%J#k&Sy&ov(6Dt ziPow3qoc`s>L*7YGt*)5ry#beK$LGoX#!Bwo zx}VTwCdnR0f7FWUaS~GN92F~SmQR*>tK{}*H+ zUNG4qFOaPQRy+L1s1j*_Zyfo*XK0Ozz@rq zmad8*{(I{W`~d3{(f{0mT+un-c^EP2f&{D0=~~Fmv!nEk41>Jm>yYxldP*R?1y~m# zs3iSQLFNC*UHzX62C^0~mVYedzkK=4!mT4E)fLZaqz~RroH-L;7de{sjAW2iR#I9C z_V@P(=9>(3HxSEdYO)-V1cHls*l1}**MTs2p9#39I^aYtrm`}ZeRDu^pijRGs`x!h z)?xFukn|UoQOO-$T@l2yQdh+UWuyhm;y5bjyPqFaQaAaiJfO<38sU8qt#yTy0ln!_ z5^nU!qS6S&rd5?Q-7ult`{`(Fc&QDgdIo9C-g2w58c##GAg6P7^#DHRnzBcL>qBWe zDQ(S#p146*E4$`qMk%1hK%xeA4otC$@vQ|qS&NHH@K^FsD0mXYu4_dQJ-aHEW@7+6 zt+bPUuXn(&=`n3W3VT$ZWn)FYGeTg0m0~wvY;j6Iv@Pf>o7LsC8$$d&CQ@-F0PFy* zIr`Mv66W9oexBmgHsXsL0G@cVISRh_Ln9@+VMhIrcglhGDLWnau7_9)2C!RA71b$#!I z%b-zo?A0b3*Ie(do}q4-t|WD=q54nwCseDIRBmKI?Uy*C=gi&vPMaLZ3MyTO9K$|G z`-qRsQTp8JzCl5OTJh{NYwP0`Z~S4+ZXud2dMG}p-S^JYqV7q;8FiZR=|$3x^`jA) zkI+KE(y+9{(g(J^*JnUSU*4b+eg(`&B&H-Vs=wtoM?p7yMT&prRjZl^fvt4H(%=)& zT09nhLGbwq4gGS+(fE%)VD&`kfs1IB@|U>S!lW`GrQ#Pfl0y+%KgR^65B@QjrbGM= zAV`6@LX`V`oZlBc!>c#5`7Wc$YP>LxUqOiI9j~;IpO=8Pf9h_dK%xDm8Ne?>CNXr_ zD<+Ac_{`}qAID_^C@?R|YXuP$B*3)_B=()a&0binbkC zeP#=y`HaxF5~F+XW+1t2WaBg4Hbu0wUA>l+_o_`oRx6JJ#CDrtMQh@>3{gQoDlzGa z28!=3h_0ZeN|TXQ5b|YqU+Ptw?JGcdN;r)5cid2k)pAktE@19j zc|dL;nOh{RGjLDDseH;oD#nWz=`e&9dZU_+m1gbj;~4tGu|$6vk7l)w4nBI1#HoZ- z5Wn^Zow32C{53xrq^jT#%_hpIvbRwqEUc-?nEz)MNDNX=0CO8InsC{JK71(JTg$AB zq7Wz`Wji`ft=~o|adSKGOJo#P^~J9O9Gazjv%+Yhtd<$*a`RQc`ejOm7PH^aN$Oe$ zIV5l4w6Qc5-B_?-USLmYq!v3dr$(9oS{WC6@gqGG40qhm1u%(qex3Df)B@_tT(pYR zp=54Lqez3PTm&k8tyTbr|HfZ>G-o1v*@&JZwE}(|WT)4pu(LF=Fpm!2-l;aW&n4#V zrDm{dIPSAxWo4dVmT}~M%=e6Oi2H+R-Jpt@n&q!^qSgEwGY=e>fC%*GtgC_$UUvt< zdUMae$<{YA_WN!8m-fz663Jcc$~uIf)~HXECbe=XjPjFh2b54AM@CEk)ZQEHcU!;+F}L;c5@5*vhYBVsU?h>q*_N2v4RuP4 zl~1d^;`VA7$&3^Krefh&6;l77yuiPO5x{Z&|L_*y0=em!Y?O<{qNG?hYa(1SHLb2* zXTWR<@Bq9uK$}+tKjypw{6hUzR(Lg~J7^FXa`hv?P6~f&is((OSgI2OnZwWgad)Nl z&Gg=PQm?zZKqN;odwvaQQgH0<-d}#w&pzLnlk)C`PHeqI%knRRH5c0)Aa0Oo4N5%u zacq2Ejs(2G0B7$i!m_c%Wg=-NXwb0qvc`S};zH-kTCplY1cYD1wcQUpf#-zv?O`a< z1M0ynmo)7oT0y6-`3SFAUd!pdi<(47_ODzPLu%*mu(L*kRye0~p$xmtg^4pCIF+Wp zINE$Yb|EiRT7A>baD2=2dHaLGE5*vz4Ztx4l}b!&ork<~SO~*1yRbnvFep$zCL-!D z)mbO3hrzgH6Mr70Wqz{%@Oe;&R0emG`cc0}3wDO*N$Vt`Hq-Zv(dn=dgi1cKaWQsO zQ`)abHI{&nPc5W6H!R4T2z5_79Wdu842-UzPOH^2-;I%Vs7odz&wN4inb%R}fTFZB zgWjl4Da!rL4T!o*y}MWxNaEhw+x2hb1KTddJ32kFQ20_qa|l!q-29t?Wn$G9&3880`dLPvN* zZne;ZzAUFc;dipmkofv=2D2~$Ac}S!Xjmv1i-6UfE&%xNuvf$hZl+d`dq|N^O#f`I z*s70QS2{KB3#wN3tTZ!r6z*X>>BU}vLr9=|7n6|sX0=_4L__YBNj5e%LWX^!HjlfL zOQU*N>#0{+-LQM*|1&086hr~`zCR%@@ODC8O{THgNvevD2wLSWCgN{Eg{6Ntw2nhf z#>Y8)?MRIk;`w-0!?8sP027U|=PGvCu}_#Woy`!q{}f?Mwt#rf>{lX$1S0r#{LlzylnSo1~)FKL_B~w$Y^Vk%&=*I1a?+a04SoE|Ez}_&} zZBCke+}yajHMwqYoT&?&l}EsdHiOJNd8u?^$~B%hh3su4!`{6sOOx^HFldvS)-5y( zOh9!+U;FSaX|1Pn8Jk1Mrlv$8dyzv0tT?TxHvay(jM6HfbD(dhEk{#8e#Ppx+`S7a438HTath6n;}H zD(Qgh%goDYl5Xvm0C`GdQlK62KgVJpz!aL zoM`-=&FeNG1)BBF3{mH0B21s(yhyZe5nA&jv{Y`s*U{o_)v?d_(mySq^jkV%sE zJ6wez0Klmp+B9y{qJJ;{)^(^-z9Z#qZu181zwed92MeYU6lFG!DBbtpMsR?K9eJ1l zAss$#x#8k7px-+q0L~O$R@6&OO!^*n!dr`aDwmD;+XpsSjij4R%w;^8p)&n(P<3T0@6RnN6tw&fsEbCmBow1q{qtPOd2Y1m9~&Q5tMtH(`GWP$YqsMPe8)jg`KjK42*$V?$Abhn63d`4$54|<W)wS_8 zDVP`0&SY$GZ#gfZDrOqfyU$qSZ2dsoDDNBdm9j3u>Yz<;#`#!oS?BE8C-D~9J(JY} zm`66lsNn*WV8{=bOI|0g{3QH-sDQOw4BzNK-tE7e~=#lLe4>Z`MPn%k)--aDHQleJIx z4`EEd*!{#6`j`9HbWb&H15H~zU}orC#@nyL_8Up#-6zDKB|`xdk9%$6Z+i?t*g~Qx*`m3dhmJ6(l@JIpxdhHy z>tf*(_~*})m>3!J3!(~ppUxZWmrV|`OE)Na|26Vb4|jVy?xS4wkJis!jC{K>a-eTK z7_c)~s&T1oKG;scT`rnE&tSHh@9i!7Z^v zlKKSAXKHr4@oswuMHGswab_b@x{;~r!r{N}N=ixIAC$5r94@*wzDkR>%O|TDIZ!Ki zLXJ#WFllTSP?43Uz3z-Bdjc9_`S6>q2s98bsGyzhU{O)=0ZH38f>_g3-&7MUM2ACl zH8=CLKB&0R80j^WjQLYp%1-;N=|LhWfW=S((h=cjkQuM3HkorRbnZK#wTrlgYL%`qs}Q2G1=ad<)yYfF7Gdfqn$-^wxZm~ zQv;Qr`#+S9*!#w&HrSpOuiU}EbtH4Q=w_W;<12#{L<)#ePz~M_A{)}aXab6r?Tbfr zKy1zGA_}KE+fY%*yX8od&tE4o@xQlnkdmO2dHlQ(hh_8Q{q*^RB)2m9}1DiK4%L!$>(HCb?OmWApi@lMsN~ewyqv) z9F>I_8SdnVv~rHUTDLYqmiy3Zd}l1^8@6sH`F#50rkm@2%Rd_7Ck|zRJ1qx)aPx&L z=j4HLD&w7ilS!ikqQXD88`k;bq&h66DG0lcI`E9}`Ks8t@urz&Kdy}5W6r#%9*OM| zu2Vzh=T)pc1*rvJ=SL^3o1RO{3}r)-1I&>!*frkP_&-bEp9E~UO$7IV^QFrzhRQ8Z z$8xF(s?cB0;p4vzAetIQRwrH#Z-1$isHqDJV&Z=ad$wZ?dK9>aiN`sxQwxg@MC^+e zs7K2#5ig}?E}-<1A_-@Kv3sHlP1KSKB+sg9nY%6fI_!;C)P)sURIirD4_rTTzG`ML)l1l{e1GMCRd(f3O`TbM z)GFE$IS7J)$e>az2sFqtAR#JHYAK|m?2vSjC|Xtn1VTa_78Ow_OT{7(7DIqQKqRIt zfkAXskS!ocLJ}lkfIuP%Awagi;7rfyIWyC|dfuTV0`4Q3l`)u=V+!j62iQKLoYg zWpP4atd;p$0T$VCW9?#Lc7R~RQJqwUDMx{8X$d5xHiLbW{7K*CqGgx zwRe;|VAut4{ry{=dF=GJ9Lhwf-SB;2DG&g{zWOxY@DB+^;2{5tI{|T+Ia~fow)?nx|Noi8RPXrjc)}U}43Ac>0Y4Bi*Fvwg4r`YSvJG0cx3;Sv%>EBa zUA1=&I;!n#VNoB;>Egc3n~)+9h)){YWKVzz8wWqay_-Is$DI6}5F+fl1udmZf%+_- zCn|a2S9q?mw4Z>l%Oc=kkDK&U`Q--EP&Tz?d~+Y7&Lk;n{BM+>5(8T?(h($DP3uMG z1&-W%D)9ABfUI}JV;gj+Uc}Z4H5<=!Trrr=H)50W5bdy)7~U!|St@;w{Fh7t9dhNWT|f96^2ZA2>i9=X@}qfU@$ryFK*6hJ@~+@rv4Ae*2PRFV}yP5^0e zx{hAfCwkn`LrnPl`kTq@-+!c!HTec$?YIs>0cZ}GTTE*$2z}IO6E+^aN*HT0@y(zz zly~n_wGawXk3LG67XK_T{u?kUsgV-8aUuYnQ=Lw#*l)Z#$Eo`G#*;s0>H0))imD^2 zHkb_;F8rlGvmU@1u%jWJQ=vR&idJ-_@Wz zX=RdCo*Id9iUx)~oBXh|;LjuK4;#A`3#TUhvX-OdYV6|sLCitQ zGNvI02BaxNE{WlT*Rbj6$0A^=G6uIcn9pcPydw&4f0db0gIgUet#o@kDA9Ks@`uqq z54Md`!ly_qoAQHSIzw>M#J=~@qUUexzWry;44n$LwsyQ27Ofl++s^VkIlNS8v{8*i z*GbQFL&H_c;K6<2vpRL;xQdLuR8o{a9)tJuGBvz$3sm&$j!L8eb@OA$Y4 zw>h&6&-KQ_RcHT{2_*we+Yy8ceKs_-(W zL3Lt`Hkja@_+*Ul1Q?Vio6El63FVV)!j9%>N7P+Ca+W0Q7}xXYK1m#Di+pc8MHCHW zvvzE@+2|H8en-jiIm}z;8~AT}-P*+ac5I`w ztd0sfWlG5PJ*@|OoQU$mZEkE%jk$W#h@#xT*6X<+@7PBvJ}NrFdec`Rrum63kf`yT zSG%;FfND}sYM%j`LSXck$W2Kw)YQTpDC&Thy6?#_Q1LOcl3lvg_vUMk*@xGO-J#8< zG~A{;@5t=lxikrg8*;e;clE|5Bbu_(xQ)c`8twn-%xC~n&y|qZ9Q}ab7P-9b5_Uj5 zn4cpoZWQeDMuj;m+-s56!C3UZI1Vp;X<@*Ku8sXtx_WYqCQO52S00RCnab4B zN=YdT44aXK9;)x^3F$Vo%EaNNcN+%%Vb^*b)j(MO?%#Pkp4a+?q23>%2_1~#4SkDx zjv;5(t*3E@nK%@2962lcUV9IT!+`AfP2m4dQvpi6^cDL6BL+Dt)3wN~7?fx1XbLX+ w`Hk9|m@h&B3dsTFwpae@6JRpYom1`De*3l+`Mb(iV9B4(dHA@K&;F498)I^|IsgCw literal 0 HcmV?d00001 diff --git a/windows/security/identity-protection/hello-for-business/images/aadjCert/profile03.png b/windows/security/identity-protection/hello-for-business/images/aadjCert/profile03.png new file mode 100644 index 0000000000000000000000000000000000000000..91dc9f58bab5107e4db76398a710435e3253e962 GIT binary patch literal 39460 zcmc$`2UL^k*Ds2daTHNOQ4mm(s)B-mw4l;!=tzx7lN#v~0*oReT|hb^^bkT(s+538 z?=?WE(jk=42?+`3)tUdyeD|Dn&-&K7-@0psMP8CT&-3p3+rPa-u$HD0!|$xW)6vl} zs3^L5(EYB`fDqnN*LSWi))-lDC=UAG` zFCI%itzi7yho^3KAEh(~CLW&{{bMvLtB1H%kO#r#l~uuZ^VSJC;_$ZbXr6IhRRQhG z5YZB6?29)%B6Kh-X#e@pt5ASv@Pz=6{@s}5qxtz*AyH0QzcwuS4f@3U+M z|9S_ZLxA67KAj`vVGf`DjUn-(gP@gW>hp0%Xx%h#Ox;ltW3JB6Pw6o#urA)2VfwX2 z0Ja=^kRzWhtryTLz^uTKMy9OPZiA0>HmUwpqc=JXdL^wPm4BVVUd!;!il$)U6Yasr z`E}IhTo>6Indncyf3nXv2zG3|_n$Q@{9L!|l%+4B^87a-VMP6k)?1v&fQ;NX`oo6} zFWq9y`EF2u?D41nE^ALXR`$Y5*Y6_o*FCb<#P0X&s_pLEIK|j8vZV3Z)5W%FMw#xE zYO}fHs z+TmOnUFO&>@)$I%9lO3WtHLNl8mT!5#b6+X1x96iP5KTjLXd;jn9z0jkErDJ1XjCz zgGg*>BuW0K2J|4qj8L+liAnOiXlYNehw?+JnSy3jw<+7$-P~F)p~e1~3|1urqTPhw zSV37)O@Hs_hVDE!y%PKMsT)`wAN-CYHE?@TA01qaU-qK8sPCTbU}TqmiF_=YZiD-- zED|E%J?}TU9OR|x`?7nWr|8*sf0BnYmb5k69@sPGa>Nz2mp7<*D_Q?97338;^nE{- zEQU>2+z2|)4x8Dmw7;d}-~dsP0->?F%oahr5A;5epLon|=?cxpNIH1big2VBc55Qa z1b{8UsgAk>QO()+%Hq$m2<9Tcl-Lc5PLXp|Rqcfc`TEA?XL0Y6^v~kt^4?4(WT=|> z`%ie?da^`c0j^xJjTAIBU~1FMGsrjE|K4uM;qBTNxt?;xNKJp;Yx6G+5>|99U+UXG zwZ47Xay-Zpt)v?c7Ldrj?M9sQ*_x~wE?etMAq{pU?++##)NQ;?(rSC6@LQAOZR{zrR_Jcrpu8k<$s`7 zBwri@IU6@L4hTy2t4wK}KpDEVIW!FHkhI#Nyh4_0U<}7dyexbJ8QFZ7ignZ1wKZIf z()ar6M9yoLsVZDHb4wsPBV)E-=BAGL)j!;6+vFA8es|p@rbOCB=F6_5;V}MQY~Q>L z+Asni05$VBA*HVvjyNnVR_xnT64AF(*V+qgs{|2vvb?(l;83{zY*+1M3ls$eLd)c> zTD7c8K-j-@jaQ)>;oIhY5cYJ3vA6T;5=P?)}UNLU7BXJcob^IzRW4u~oW2 ztc6a9lK^*KxY89xRngBD(SRDJY8E(eT~x*~5>v!b_AXs{Rm%2T4tBd8`#tb2Ksmwr zxdK}(9zNHQRmS4)6bZ967i$_L>BY;<2}Pub3iQ#1+ZrarIH-B{%)lXe=q$q4v+;bI z2AtqHT3qXlD7YLOb+TV$R}v&MJc70~_u8~E_Z>UvF7ZzC2KyO~HTN=soMR8GPP@Qi z=CXB*v;Gu*!}JIxZDvtEwfU2xNfjr^e!*a8$JT?Ht*0TB8Q0_?J-yFf>k1tD)1n+^ly-lu`7o9!M ztiKgP<*JmevCOL_f06~=^PZlk*c{#x11Z!#&Jf>R9y!mhl@dj6Fd4jn^%&;h4M~{x z8xXL&zuvb?OsRZcH@(n*&}?lUz%*7-?m>88l*>IV`xWkk8U5@sy_0%bx2OUWnQT1p z+L&Vr?nQxDcWp)%%DUDLIG1e0b*VL+=)mdZO~KWXtjNLmZht%$=o>v=j&DSnu4I94pr&Y>RgIZXG6b6oMhLi3L)rCE#M2yZ{r83jX*s zHErhDqN;E(Iu3R$;x2w~A$h?=LI`)GSanOsJAE(K@DTGr;C^mcmW@98jI3R*5iWns zXHr#v*>|sviXeP;U;22YWfd&>e&?yM=*yM&NcD(0PJIEEt^|tun;y_TQv*kXl4lYWlx$W~weQYPBnkrNz;aY3gQq|-!)&$?<23#_QLGb!p~sysDV0CRq`O zV$xB;;`TLcA-6Q)#(s}AJjFl`MWXO<*VBIo@>VkbV!^(~x#8q{DR^?)u=(kI z`??%Z;XO-%Fe3RN48&&6Jr32HCG0>OO?ma~lr&DqbMoRahmQWc3mpP)r)GDn zkfxFwHA!OhiOG6y?Gm3)_LRc|+cIPbm3vUWvbtIxM8D;XZf6lLpL;j$z`D$v+7)-e zaGKhc)l!m-l4or28(CeAqt_^T)gmGz{dFFf|I)a*RCQe@X!j4%88;-29d|^U+6BzL3NGqK*2ltTIuN@un?h-S|{0lgOI$_&tA$SD{GV#C8+YG58y^ddJ6KzGmmxjrn3(3fJy?Z%@mDO`ZmVKp#SM-O$LA{NDiI{8F zChj;PTfDfj=s4qLGs5+?37BU&IgrI362-hAPwXx9W@Zfg<9T`YvsY{n?hS)RvFCfxCaKw|{|WL5c_0SrhTEyrT0ofBlPhw)EcF zSk4Rthp%7Zfd43WIXEAX!IyVkEj&SA`LjelyFI496c%1uvhLod<|Of#Yz3I-{XE|J zo<3Z)QWFim%kPag%c5=yc>FGQ8UsN}wkW^VDRFXg+7rhlW&73+-nhGu;c~9BBy@Sn zK6Gif99Wd5HXdf{+RAvW$cR7>mcu9nFAh)dSo`n?v$EkQ&S&f*+HUwi(fQ4Jxew7_wMvN-M$VBP{G8qPIFi2q=*;1QYl%e`Sn1z zN?<$t=9mdLuH@!^@ToEXS0&OuRf#fN&U=)Ufo8w&U4?$h5;PH-Q^?-U?T0Y0MhOTV z-(@y6^?8}k&Pb=DGyE3t;=25t4X<@2{{TM)Nt2gibkWWP@JMq3m9fm6((sS zNb^dFX<>hqUI^_#N5>yE%?n6P9DL&v5Y;cr7ZqQ{{S3;y zEYkY}%Wlx>{l$uL5jh-X^j0>M@D* z?vyVBp~80HPP&lXwqmL0>rszsMEG9MV|<{_Lc&BHrPS}sksWQsr5yjY@n7J}=I5NjsEt zy4N6+Kjk7z^+oR(6pWF(uWd8loU-_tK5fw#4|Bu`N4w=FgU`u8(UN<{gm810b@@m= zb0_qb*DcIW?cl+r)IloeVTh=HkKj?0NQd4%)A9_PSWOM*WEMyvVmDOb z$aP=NQ;Perq|zK-9H4LnE?Wo%=lPMx4WJui9<)vaUtJ@s)^G>$GY5`i?LK78*nEHtZ8%@bAu+Ry#d2r$Hj&cX<1Ba`x!N~M%+{KB z_MZvy+L_KnRd{Rz6al-TU7f9|0{+Au!UXp4In6*qgDNw-aFZy+4>|gw=F^=-gIKtQA_B#2P<|zoF zMQ1TvI9*k1?<80DuY!6+i9c_D7hrqRU-UHcN8a9_}aTdyOA`82vD+XEm$P z%q!rppx7UPS{3(AE@BJ@{bEK`FaW*KE+X&6zrM1Verv1uxa=3dP^m2=@0rn$sjFL;5}$amOG^YR3f|!sDw~mE zl%WNTp>j18#5Cao-V8aUo%SzhoqTqj;wG^lx(!`*f08l}vZpk{TDP|NVmbA!w(6Xn z2Xe#*^O1t&H1fiNOx@4gQcp(`fbdjA-Wk!3MMN$rmyI@G7_`_8`68JVdMVC$v%Y14 zy8TXy>nF4F=SH1zC5zbVUO|K`rCX8`xb-Ii$Bc{I?b4otos0)MKg!uXSF6%HW13ybFX$<ie93 zZ`rG)XI>noVvX9IZ5g|+|Ht2-UOFq&r5W<~rLx&Yyh_yHo1<5HNbZECiuG~oH|Io= zNng+R6;}K89X8jUL}Tn;npKEn*M^6N#6(5g)GZcNzILKFn4dFa8v0S7NQieOUogc&>d`syz$S!K}_8n#5)^E&y053@ifbfG^exrQA4fRfHEw`Fl z;&)cpp#?s}f@+tLdOnpsUH*DypQNS^2QA7=x=q^>U0y}hX>^S#yrjS^tV+n9kMNEc zpfC2!wf3X9ctC;3m?gXfI4bVT0HB~H*~ME!RsrP@ltOIHs=&CFf3YSw}T7k&dQ z-$>|3;NB#5y+P3wzV%eQwxna@C%eDH`OBDIMrGiegD;$!iODwX3-A+CmY-XF>ZB3) zJ7oa!qJp!8s|;2zKfQ+i+!V@EN8K9}jsZKvUE}5?s?QUj@BY&>aB zK}6&JE$R$MnAif5)q9rWJQJhAQhqp>HoSWUhM8;TErECiq_3^C-Za^W(5Q&K8#d;X zKXc^h+|A#DK*aU^YnA_lXZ(-3+}{f?>BGrwZ`WjvzM9$m5&f6{DsFDtjSH2Vi!EH! zpQ1J;7yrh`{+CZOUqjLkQ7d|{$RkcG0MFe)G!kN@8N~Jr<3*{D=9+KfPbE zpEUTqc;JXA)pNcMO3CE~`){`mWD0bFZOLHbSRre!P2Lx?J4%-GOAlhJt(tQ&S9P>` z2OdBED@Fy+#DvJzL4g&dW`7L(yAb>jXY^{3hTV@y(Aw>M`xM?M7m*)ilZfiWbYMyR*DqJ)~tJY50$+FyB4dNxge_g4~&q1RjRX*Jr)-Bd+Oa8;LgG z9b6HU9N;Lsc&FIq+;bo}p-U>$ZT1?I3#lQjOBk1<&*@yXur-egb+h5ykwK>RQx&kb zQj@~ik7k0XqP3$P^a?G!MT!x=_TZf=&7((NuQ9*JO<^6% zyhao$Rg@z32dg12;P-`~HB8m$^`rUO1!p_ZaG#5|(CT=_4~ilB5p0<7un^=Smdqzb zK&MOrndq@Bq25p_e+uW>l*vo$AL8QO(!kghKRw6p;X3jy)AdtweofjuPsWIy>`S}K z&2uMWcX~6*3X*QPEN!ikJZK?mXSS7 zd{?T-{Lsp}@#S!^rA>ah$=SSg{MqY%@TBte%vn>VZ4T@}qWE(1jC**E!-Rw#KC;F^ z=?S5u2n(x`*}BFMZ>2qYxOiWD2}rCvnH-I%Duk22*ft4yR8zUpQ-vrfej0Y%5c$+= zliwqzQ#AYbCck>2yu}|e9LD(#p+#l0#4{bq*4iBGWnLHdpDL2IHZ>9cVjZpyxC2_(IZe6>*0NjkdUDb3=wUwnNg-@Jt>i+)UuCOm=XIlZKg zH?)BEdmrp>-*HRMsdI&slVi#>G z`W-jgwZ%14>ar)WCC-#{KIh0j?4uRZ9^3JX=h!4?JbhU*IPW%C*WJ10`gYPW%VxRU z8(dNy0G%?ISzKo;q7ddicU$Wz$qa^k3m&T`qT5&Sv=2q*K4ba%6k!_TI*{H^eR;r- zTg}?J0V){n+wwnJ{a64sV2_%!$~7XU2jnH@U&z#g>%4_dZoBF2Z?#VV7mMz)OZUcqFZV=yPsn86 zip*nmSzA55oqaxu6M5y{reIN<1&R$>B}Lkc{j&UW=|eImS>r815EKZ?y)vj@k+a2c z1vul_Eerm&KhHSsH?vQiI6|&Z6#3D*VuEf$%>ZgyIN*yFUf9Kn@ zZ(A_RLhXK!1)Di>BEE?B#ow9>X3A5~_`KDG^3{*_b~ZsA8MkFOsI|0<6;)b4p+@aR zxUsW41yu+p*J#zQXOvhJPITu|?Dsr#8)^sfH5Pd?14R`7qP9>lm!dgnW`R4MsV=v! zH-q-1I-V_leV~MWaTV4FA3<}DR_`d5Y$%qo4~)DkO&D0E{n#}&oP3xG^KlEBn6AX) zE}asJUvnpzt(w3yCnBh127QE>X~A`9am>N_$0dOgGHP>DPk*;DrlZp;JZzlIQVMC$N`9caGdzA@>J!A!Bigtv3%JG1Ekpyf3pM z1;wC<6*G}am|{0Fi-9E0)OH^3=ThjgGE8oI%s~BjOX_ z|4#JAw4AMPtrC>F`xL~3(DOrU(uMW~2NE{vcaKJO>Gl4jBrkM{_x9UhODvIrQ*5Vw z%n(m$42c8-Y>MBFuW56PRLi{NI?7-z*=EdGpRZ{Kb_9ZR%2M)&wy30{S|!#nrJ{m+_1ZROqm zgqNY=y2x2po3;YqHpNMqP%v%L^DuJV9W_21vtJRW1ozq_$aJyqZG&knmo6cJfX}FK zOPBLD5O;w3<7Ke7%C|ZbD0qH&?T61CX=&}%1K1Vhc)GuEP<+ILF~em+@VLFXbDeH_ zb%!j>oahjj-vksy28%r*AsxcYSnj^ZHn*0$3bA$pz{;+uL`mB*<@fuLe)a5Br$nk znuSpaD?_rceL3HZ`nnaMS~L?wa}8{Fp~d$}Ty|WOpYVM$c~<{ITvaI8j3R)L4apYR z>sc@ko(0b5?_#+j4$oHX$~XE*!SnJ4NN}t708K8=qA5?x8jZPF&Gz$Gn2Wb}Xd8xCt>;uP3_cu@?XllcfcH!8 zTuvtXD7nt(vhjACd5loEHR4Bs=mr}roAes;4jNr=`R)wNV00J6RbOXCXGPdll}Dniz@qX$p3#X-?_Bmqp%&Vi`;ikDEw7PD`t=$`VHKXg;{D$ zBll}|VOGKU=a?1#LCWna&icjR70u1w^v9hsN2)0|r|xE6;`wZS`lh;^zec ze|QY$4hLXA#7VAC2I_Q`cq(hyI0CJqKJi6G14G(zUJUZA6u_Aq2%@W0^ncIcnIsdmR;s|zJ7o|Z=6-JIJxmIMEQNUnx>8`r)t*DX4~!TN;gCpsyO_5Z2US5 zZM&(mwzD29e+RG-=iMKK7*+ZGT56T?Vt7o8Q_|?sWa3!)Al{A*dH5+?)!@8c{&kr~ zeeFApx8>oi(vI}^qGRaY9bdmFlx3^EA1kkFh#coSvzD=_bT!~7xcc}$)yy{uyVwQD zs1)n}Bs*vEJkjj+^LVpDzdVwA;dTJhc`PjlwKkIF*WP|p02GcM=N1uQ(9iu17xU^V zutiqT75?9DLuJx=4voAjHTa=jSc`QNXixa$qs4ob)4{P%${(;4-yIYFAla?Yby=_G zp2;M^LQ`G1- zk(iaz5Xl)`*(eUR+krrL*vcW=RS*fqfIS1alzj^q$M3m4;mPs+TW8| zv%MtaQlX&{-TU@yw9*!7&dm$pHOr)`*=42+a=`+{Q3+jny4%F7VU?1LN?i#Bfc2cy z1d1(2bN_=>afoh#7g8oWr>@RozDQH7!dzN5-LEW(R%@i=wu30)^m|1tAJ+enRBfAV zeCtjSP_iGr)v=tveMUrbGNCcr$EXdE;?vwjWRj@$Td z5>G?B%CzMd1!Y4TmsH^W#}pH0y~bV-O!|e7hd)wt@4e(_`pE+k6qbSlFu`*zp!9Nn z?a{PvZuY>J!d3w_c0jrL8*olyW(H(TATs;Y^pR_$8F8)cHy>=OD8w&OU(-$@Z*2c2 zJ!YhP z$_5J|RN3YpwihDv;h{iWr|*kG2Eacqjt0giTiq4sL5sN>bxxGc-|e%wOT_W=vMe`r zcx{_6wYn98PF2793cg53_bn}s4`fyc!_RfC42iRc6eL4T(5%uG{=<02sXDjWJA}o~ z3Igtuk;H9Y(6Y~(daFy(!QAaDvXi%i!RG2Ab>ulQgMkTi-w?;^zKXDyLMJ!B_152z zP8J8@J?;U`z)tGxI3zs7sAEjw^C?@Dpg0J`2Ysu{Vi=cc`wA4*9mStR8B@h#}X*p<%SSiORU8%Uk5;HiJI}LDh&iZX zLi!TC{^D?znUS@79grp1&|#;DZ&$H*)O@k)2hF?Z_ZO;uq=%@u?zYX{x}z-bT?oPx zyL6u#R=B?{KD=(t6eX7PLT4Pu+cYN`0G(VB|7X1+BHl>8t^Kj~U)*pMALy7b`2WKF z{$H}ve}`1oAnu<02`eT5wt`MM=47VTFY5B=knrQA+gG`NF_B)Ufy@5e^?cWU0>dg1 z;OZmK8O63=P!j>z@*fXX?yJ84$z`vf176Hhd8;k_6Y;s*0#`RQE`_ATpIQ z%PGWJZrKu%*ml>XT;1Sw$gO{FPws*ciKfRuL;5 zgp{_cN6h=IQtPZI|J>7U>goV3v)Ve3*(bdpKmVlOPbys* z$zdwc5FRk`xGX0iz{7yfjr9&Bz58wXZ?VPjf$oh;F1OqP$z-pu07Iz8QJoG&Se`qJ zc?G@4+GslfSp`JKYcITq^IhW-F5kJMw8CAN@X$(KKhr3GsWfMFu<|T!GO(m-o+#sm zT9WJkTg*J#@FcVS1~wKy*Fz!MI=98{%C@_ZT2q7W^cP{3>sdNo3GHT{M$;r_d%H(! zdKXyD&^l3VvVDQVPGVOZc@c=iK|M5Y%AR@2I3ff5w`BPe*XiVHq+ zkp8Hp8T0c3SCOoDlv<{iZCjhNM*?B()oQ&{h`L6m$=b$(CC$E;f6Jx^6syWNm&-SA zw#|PP$$UAe)6AWxXG!cPSydy#X0`k!@HZLMFi z3uUbWgLD`!#J=9lkUmZK2k)hOr{&uIJjrXdk%@aF);D6h(orvO2bCpWcQtg z$fZK$1JnwX)VZ|??l66#p`kH=0vDmto7>SqcTGSE9khChjxJxhlrO_s#$Bb{`k`~E z7@r0%6-xb)>2b#`Zog*k@xRU~82!6|ToB{7J=~-EF5?{)_iHJec4Kk^kJgfCiK1hk z`3G}y)mC=q0#Z%Qx658_&9w=ip!?%u@D+tm!C*v3JO`%}!J#CRK~;AQv`VOwhYOsz z6c+ufWg*4FFPJ-b3v^lS6iNYk&b~{`hyznwTbq-kXw#X0OT^5KaMSAw-5)>CstzY_ z@O!oSmCaQo+wbnk5-GWumCSf#%%|P0G0s#<_$0A%*0$DWOx7K~7ZnM*f3_O5WLhzu zi*Lm%;uZ$!gK(pqreF1Kc_Wi{J@ri6JbVAqg`keJmR*8`<5K6EjSg?zCT_)s6p!K= z9Kq;Tg&WNjIFy9{uAFWYGSx3lXyKihG!YD~8g*#)!H5GOV<9BbD?Q&LZX#k;uj~DO zs*h(qhrZ>ax?IaFbO?J3nEI`pn9%Glxi~~V)ChI{YInd3&4b2rAE>8Fpzp7rQhdKk;ogUi*&Jp87}>3!lcI@73^+VXhQxhTrYd&k2c0fkc>&UJ%0@69(shc<|wq~(rv zM>Evc0J=ns$M@Chr-?ypwVn!3k1{ciNI}D3iWU-z8L`@|CRRHcoH4Y`vw@rg5IJRmGfxFI-F1P4v5>k*@I8s)O-yL`mjrFXJ+3ki9|0? z)nZ-zJ8h95@&;O<44*VVbyd&4uOaKTL-#xO|;JX*;bVz1<~tiXN{mRRCio+iPY9rJ8Xeong# z=%p@mdyY=Tr^Z=+@DYPq01@X@?bmUv*eSZlw~d*##aK>hVkzGq9I@SSlq8ta!m{!` zD6;)de%oUW;RRa^7Z}T=$2?VPy@}t0dTL(|Xlue@xgKUgPHxjmwC@@1j;E-K|1z`J zKgNB;GV8mU8mB^r0!#t^mizDZ&iT+kKO-A9w@th^czOE`zz~p)|Mv_8 z6q~|PFCSc0?Y>Tx|9j#8XKLFK0Ifmob-6_ztNfKOiL}xO(Sq&Of9K2`!_8$HPKndV zU;Sq*_9y&2o#;K*&5(NX-}xGL83~fHoU*l9jk%VV^)JK%G;PP;TwzPXy}PUW!f-y} zW@=w-xQ)@oZ5i<#)gDm;bW4lgx-eskWB&CuQB1-8m6zq&(u8C^RD9x^;oy5toxx0r zYB5Ujq0Fs2|5~6roXQDx1V#>Hfyf9$4LuZn~Dn$WpN`3RyN!> z4hDeP9k?)>|2MM*Z7Ai*iF-R*ua#Ok{=t$1C8W}|#~mo!)eQdq2Rii@6l(=IGdL4UT2GofWpH1S?sZT)aoI|}udF#9i5ui&@G zADtF$!^^#QN$Z>G6Jc$8b^UCzorx#F={h!I%Y^!Hypasr<4y6R|LmXBO4`vU27t>4 z^QC(WUcKKGdT6)Mar13W7XIO7SnCZjGq6ig9*6kOoFYqP(YwxWR@Z-^cR{9G&0cF7dT$%J2 zWcg36@&Ch?>KUY+?k{4At|^ipsyVKujSuNzivLtc?wrWI>vmMH%RV651}(B@gD_1+ z`tN+}5ijkW8r^Fk@OV{{4;I}R&8UONjIQy;{Uc8m_ub{G2`p-JqFWiey&gnZ^xGaN z;GG01!JiWUh2OI_?S}E)6N`TA6gM>!RJGN5c}XMhPU^o_VnwocA68APqsWyFhwdn% z5pJ`An>e}MUmaReTk*QXXJDvC3T94u$8BqEoyPZ%9Rjrzxx$O+y`r}`hVrNG*-=G= zsRR1#nTrVa?Hviqwoj;)v4LP2z>dCG&x^VCNeFPm=$Dw(`#)iuFw2s3jWg{nnMpW4 zWKHBfBO7Fb$E|63q}EEaYf@8WqSChhU6HwSIlk|+qvtM1_0`s*G0oRN-|^EI!}DyC za09u;sH(tiaWP1=Qb->LGNT7wrEybEzWj&}nd5kkv z*1oaq?D>_p_Yzz|e$?skwZ%a+yZIx+*2C8neJ?g| zKLP?v%gijnSW@RM8fp|0>+6EAH}a;f{w!vU;CUn4m>~$%j^eS}BL#sGiK+HS6jZnT zzernN@DRY-Hf7&#j9NE+F=?_p!X1P?+Es>sf81v(;@9}Oqo~?ng}QLhM7#(_$hiZ^ zT+|k&qIEE%+aub^DhY>s5H|UV$3(tf*XwlH3Sg7!_IL<|xK8D!bFJsy;Td*kL#k3F z!SLhl5degVZboU`tDAJ68U7**#dzH|CaF1MCmK=^GbStO@vxKgC^m|Gl&bmKRm}&w ze&*QL^0=_m+|RL?lNH5g_Cr+f)k_nxPD*A|pS5iBfQggsx4wHvGu8arnHJMs5#DI!dUGOnyz37wh?+jx3Hi)g?{6`F5rtJf0tVoCRZGFiu3(mNJ4 znPXMHwAK5##Cvzp#SlGjNE+trG#0rs>A&`2rloiZvLNam=Z=XOt$xo~?O+zP=BSG_ zcF!bOR_!;}HuJ2%i!x{5nH%Z0oAWHMsb=y)R>78rk>hvVl;TXqR|%-SMl9+iR?>Yv z-5;WX>AcB+bzL2__X#}EaiiYdK6kEqhBa19;|?7+z$GODjy}5y85Z|vrfkQtOi{-m zDdaKUKebW0*%m2Bt_4-bLk;Jz#(dHoG9XndgOd+uTX+$n0E3auyK|{cd2(p{-t)&l zO=rs!SLx9_j7vryJpQnqgRAwJZ*FixAb|duepg}PI4Ul2fB2%f5Po>578+&meel5n zH6-rwun0-swTK6g4&p|?Cq(+-QDF?c7}}X73y!VX{nO^Ur)W1Dkv)P%VTXW zFyMMHrd@^T!qH zXO1h8NtLnnbKfq9T*#57Y%aSV`MWmNHt(e|nXisikQ8HE2pUBZji{H4odft8uf-8V zkFpvEcMo=R_}az;weu~tD8OO5aT?dX4^HlaA5-sWLnXOT&SfpqTZK3cm@Z~Mg4dc@o=;U`i#lZE0@ z`RY1jV5Perco$mYcd6kq*FE57%3b5(xeGQ?;tu76bSk*o4HMXgM$9{-6(Hnbdu448OJ7on7?E%mMUl ztj67O=O|Nx{=yDngp?(lBkHOcfIXiRxv?c7Rh<+cE;=24q)V5j@Ta8m0uUHR4+4_@ z=S&@?2XWA!G9=VvM=3s726z1GK)6PQfGzx<^)m^alBifrBr)H<6X{PxwwMP;-($)+ zeRa8;d!fe6Z2Xba+&q(gQu0Ivu1hUv!gbAKcrC2`@m2^0DQLDd_l04in~1X`0BCD%<&k^JY1WD(x0 z?JdT%DJ7FZu!*Pf5Mx^~c-+Y&Teg zlrQmPC5Xx0SmsBy$F2nBtCCRZQJr+JFI+g@eEwGS%n_0_V%8X`#nn+A4kkmKH|j4j zZrc42DQa85aE(_hOq5zyKiLs2S3=ycsVBwnr@1wIl*6mf4h(;2HWbfYOLo3?lzM3$ z*T6aX!a#JNmUy~q9v4gbexxhso_E2c>~P?;mJT2U00E&T#D4dt%~!_NCEyMNl{6EO zU9?i^>z5+Hl2UE@JU(l!$)3wvdJp)Yb%cUpx3=)S*xOV4a<5pXe)-GOO%?iFezF{P zD`(!nq+onBb(@y7ZSF96T#C)cOa?wUXTQsVu9LQ}Cm_m?X}#D>-fxyMWruH1Dj)oY zTua&0y}srXr>^w`(;jwos5yqezfDLV9@i~kbx(0{PN-A$B6h!*0HPXceYJqhq{{#< z80^@&?>sl?;lz%ZK9(XvTY2WyGv82DtG0iT6E0G;3!=YN9ZI^Gry0N$#K2zh5~{Sp zec{wh44%^Z#Z62c<8QsDWS|f2JsS)@0htpudW6sj_6=WC;XMbvpU^!ZF)L}3I-!uT zqB+~FIuhy+c7b^`ZqiZ34&xr$+$zL%yec>{)6XAX<#a2D(Qg`evaUOm@c=5pZgXZ5NRZQz; z-bAVCw@LzL6}N3rAe(h(6TLEHPVv<+oGg7_MvME9^2?^K&6(Mo-VKDDVLgTQup@qNtcRAhOS6BxWEAtqaQg6ZpR#UZ$kZ>=E2dY?6ei zly)=RZfF44>PY2}a&2<*{(FchpyaSPb zFmj)eG;B2qmAqC;=4S+^7}n3FiO`@?ZKu|F6xY|IsSR^b=4j>-_p&3qx=8F$QwT-_#dS z`u%r%Vmx;6DvN2ne~SM)8MWKvW8Zx@A6hZ6xA>O4*LJ6ytmbU$u4!;0@7D7zsf&nlc6?>_Q- zk<$fML~`a@%9Z;++c}zMgdFYzuB~)`QJH*ij`rN`(7q>q8s}ovATW`A*WT1JaM`=X zsg;?;lU`74`$ku=tf1?*2AMNQgW6t;l18e~ZcOn4(bw1KOL($HFYjP>sJ}L7mb5%j z`+CbdD9k=rD0H&!?vE$6>#2sxGV*f{Y6t$m@eZa&%=@sePsON>zxeI%^ITb>x| z_MnP=+~mwm)*9`p33PItnA6c&w2W?7B13Ym5% z38^3}((GV+f~ti)GnToVqJ8vcua8fyB}rmC>YZ9rf7|e5d(H$URguCk&UNP-ZG}qd zWco6YrIR0b7HG86rSmZu!;bfznMLXyTZ#>X!GgvD+Gwk(FB6&QsJ>K@|C#yD9L!?NKF zZCrKihzgJWkr-LkvAil=iA-I(a#$yEHkJU*ZX)jJSVqwygXWn&?4`gC=NW^D@tx0 z(Hme4Uy~jU8Xl)~IZG6SdNkxDq|RNE9lkxL zuw5RZyJ9W3YOmqlUzsl;`x{ zLyr~~*1I4hJaH#g?}jtr0@--3 z2bPrqhTH?5D3>jUpG&9b+da5j+Td|KuHIjhMthXmoJM=Ls%ru)9NSk7}E6cG`sA6#(|a^884_#dl0 zGfJ5bRkjM9Y( zyjasS)SR~xV)bKUE*X(#RJ%#Tx8tfV9db2aeg-Deaa)<((ciW4wsO$&r7gyvBQ+N5 z1kT71z0FU@E+%d3F58f$Pe+-?ePT|)AoV>I&_>ZmqaSnbE~u`MdRUDV+%Qj$mvLGV zpRsIpXLQm}-&AlrbV_M-?s92x$l&0&oN%!eqkU5$kU4lLJ>g$DF6-T>@2I&KEeV>PoIeo`f;J$lS;*$3Fwo$<&|T#j4Pj#m@&^2_{1o(=vm6kziNtVeopzF$9xi zHKUZ_l|H_hN7K4m%Z=`|JH{#5EgNg)#zwkEVu_(a9p_YS_g@z>jde;NmD!bN_Yh79 zm0si%cAx>oLs%<@qTek`fC1pUQi5)P zU4n0s!f9UhZ|`0bFmS0_J?6N2blcI0eBy`~KN%BdJxAWtwpHnspUyq;#_!P1@8Yt2 zzDek6Z*Nsf zCFKNHm2)@1$JFmoSJV1?a2MtQ*(CecPX|)(F&0LGTfuR=93%Ja#td6?4_C^}B!%cO zNtnzMQ4w(bgl%57+MP}?xO4Vw@StLgUhm);!kH@n*JC{Dw6kC{B#(uTSsrp0+j>rl zmh@Ix&C_~B2Rdq(Y!d3;xbUfi$N#L*f}%u{-u)#Beb{;J`XhV4@>SrO;ErqzZOWrLeMo zWM2!B049KOUvlgKW^ycFc)&#`M3=(@un+ar?$V*W<4$MfEu}Sfoy;(iZDCs66USs3 z=@^JbT*cTi)9@$D)?r_a-z}TqT7hF>@JseEK0Eeuum=^az{X>{I%Va{jc4DF6vKnu z{t|UFSu^r+&BJB%Y}(cHjVH1^0sck9jcK}69Q@1JXQx-|*^MdHFv84uLvi8})aa_Q zRdis2qh7i5vU<7Sjyleti(9e&Bdt@SnL88a<(}IveVYrx6CAT(eC`=e5{<*_r8p)# z57lIKVHY^ZK$1w!+$jpqf2|N!%OBq>HRk7nPk@)2Ly?DO6Ru5@h>#k80pJ+4z$ptTlQN5^6^I`$1CXnUA}51E z%trO90>*7Hq1;ejB$Y-+^_&rC@F%|G|3I>YY8uht_LKUK|HoO?gwD)+QhZFcILDzI1SgzK`*Y0~|Pdxg>=xZ!~M zmX#3^$K%pfVLL^in?=tzF{<5XZ(al!<1{_yr^Jn^f9XbG0^hKAN|tU@Xw~PUlujJ4 zo6sPg=f-n6>981=EvMDNY_D(*N@VKg_=EQMc7{|5UwdVh#7blsRW&ilf`@eA+&BspZDChY7a#U z?(sm(An+U!X6`xI^j*BP-SdjmU2b>zyCkmzvotZ;1Hy+AX00`a1%Gv#cPGeaeP5i+ zq}`l)Jm@$EjyDacv=|o=H&%flhY29q8wyspdTGl}`p8i{0W2K^`tlLPn9Ed{w#{ zjoJCOTW{}gTvL98Scn?3sPdscQd8?~K4&Wn+O;A~Vpm*svB=qH4HWyzb%g6}PS~=3(j-X*r~jNV|X~eH%TLQzAdZh&~U9pAm1?rxZFxS zXLmk)1n9b|cWHJI+2gkVT!80cIt3#IO?iVHxoVtmQ#th>EmeKcdDS;=jm%0X2 zwsDDvjpL$vNKpon&{3PqsE2=P^EpY~^EaTRP%y@9)p+-|s-_Z7Wzc_dnH28pj&r0b z-@XqNWn;DbSk5jS=E^uD#q7Z>qrWG{~91`jOs#UtA^cCAB{nUYpk+ zlVB|WH3uZLNa>*2qVQI^qn4au^LluOX*Bf~@>H*6=%o`MECAkrn}55>H)QG?gU_OM zcB;DvKy8n8@MeCn3PWF;hH7g*js`$Xz}@_8bJGJ$;^0;;Gge`O>PxRz`F58m6PSx(Y)k^RK@i-vF!f z66yVfyGR&b-=x3+te?X=KH3D2#-e%h&Cb0l(Pu7qzP+J-A?Pi`VGr;qO1Kx|gskjR z?Ts+itvv9B$;bCsC97^0?-px@Fo0ZDQQY-1GRk2S2@TeulRKsH)-(g&4d_#e>e~UL zqG0?1{=PPLXPi6s*nY-l*JSER@9c{Ea;QMnGb^hohY7$C(|gg?6Lxb;N#coV#Z|Ly@yA-a|wn=s=eckXJ&1;Ay*UtAM!rG?n0=!QB-ZA#GVRFKFk)dh0n1D`a#r1lZJ;J0F17-hP>$`m^r!u%Z?KK|U!*d|R z_{E2oP;C|du@)DwYNOxo*uC4I=dcy`sk~uil|jpLQC`H%M7^z*`VL`;tEkLML(jCn z7FYT3isc|C6?G%#UQe95`Ch|!YdbLo?|cl5p34l`6f20l@G3*epav8iu7W_lY?bbFrZ^gEtq>#}Dc{rlUCPm6BC)J|XW z2^U_MZF60ho$zJ8&ICtnd~2pcQuOH+%1W)?ldxtR@XNzur%>s0{^yKOOd%n@5;qI& ztY^Ad&{?;Q`HSceFt2+^dYfo|b7qDYvDZ^dl;Cdcg5t78JbR}-oe`PQLf)F<$j}mV zJ4aw0lK!v`ywI4_6KCiFs2@9?M&TZZd@x(OpV||Mj5XVORbH#rl1gKu&Aa%>op?eO z`{nRj1RwN_Y?HwE@5T4SM=bEeQ~cm*VVsN(aS0J#x)k1CzY?)-a9rKe49xlachB`^ zV-(JLmzNfKnNvSAHuq7fiUOx@nf>m{sAJv7#99bs0BczjG}=3E^=()l%yn3i*G_O_ z=rgn*+*P+o_!12vA2_y7W|ywy%vUaMxlL<^jk)S)&i)@KHFYuf?>w9ck#OU}E9!A1 zS#gSP`mEZ2XoO|b8sqRj!J+#4Mf%#XuW92|;T-Qb%gPclne4F8d2T?0FUMX)=&zKvPezag*+nAUD5#aT7U`2`R(9TJXm7(Yz%S1@8$F zLZa6au@T(he>cGFmRF#nV3x~a3Tdzsua!!8OkUO^pj(tEtUlWo_bC`jI`IgaXSS7b zA&6bij+95>WTlgtLr-T7U})PREL3~Qv&3l^>*QJYCc|kRA{sAw>Wc)xSNc!}brS1M zBF>DqQW!lYIbKnPL}7u)jw;PFXD&;IgMHR95nf<5JD*JtTQ7%=?pm|cNVf|l{}qXT z+>sU~v#3H+7qT(&O7IyNRI~e4&;_AbTkFSSF077tu?}09>Ll>~(ux%Fy5~4@(U~4m zJvp1O2M7e$;{IL(Vy8)WA}3N98uMk6qqheWpm;$=Cwvuo7R87j@z;9|Wwh>}S@MIM z%6N=6(R6~5J&ECM@k3b;f)mTuqfzRXu;+4Zx3xdXOs7%lIg6e_rO8Ks;In86V;{p# zJ#zHEe&XG^OVm>e;hotBP6i(h(qiGPm`~G{<2Gx0y0jYkR|@)N6<5e_t=p-=C&Cko zb)Ez8phfL%WY-0d3A8y6jhLul1~SW1Yk!fPI6maaCxdVi^k%yd7c#iu4Sc8g>l*2+ zYtYAc*c|bQx2meU+|-Q%5EaDJFQ^`#xHCrUL^nCWUaMPV){WVIDv-{9o=k8xq{Am37lXFDxcr6_!p;w^I5rqf4Fadrw;H( z3`bl8&aopFS$~8_|M~rDNur9@hnkYaCvX3G-~T@0CD68VQshK#{(Z(NZLTCy{eOU` z|Bu={AzF;CkoQ^h>}K?`6>$B?r2I-P0PkAYadw5>(jS)WBL975?u%k z+twPiY&Om~Je}t{>b^A*f_dg~Fc%Y(y)(cJuvuZtGAFr_EO0&O@y32yLiD$xmTrH# z2(R2sJ9E%it5Du<33E+f87Rl4jE}lStvVOwt8=uHpAbvPh~9j#h?r*9;4^J}mlaVQ z1byOqGK@d_4J0AT26&2d7gNR-+z zuGe@S8hL8813djA0uYkGeP{k?%yHDYV6lDY1M_UThwYR%ZaV!b$E;A_MoYc0;beG% z3_TKnOF%ln1VWo#-^k2r?eBlz0n^83lB*l3*K>_=z7L`vTVJAh{`PbAcb0wXjX8xE zjS^Q{PQJMLe*#i*sR+#t)`$8?JW zo+?lgs?U5&qO?+TU-5LeWx(hCsjlk*4TDh}&U)@^J<7ahY zaOob0%*wZ_pWcA3PTjjRMmwICbnPO@JFb(2YW>b%o!pI9aeG>{$YX;VF0Ed4qYq1h zr^V9U$Fc(wM%{{OyJ;?ADfedMb`P^+(k%jaap#dcC*=i%cz- zB>T?~?=}7bCZumbS-ORIjMJA|c5oCai7*Apy~O_OKb}meZqvFM24Y`b`UB=#=ea{9 z6Zso*_qyM}Lz}}l!gvw?M%uOsx$eMsD`1FS zNgcu*lp6Q-R?5FbW2!{CAt7Uf(vp$c7I>^lDt`w)FBu_`&`^#0~_rd~4 znutfn(WZ3*-Tt@I4r?K9`{BV3OH170x1A14fulVR6vHT|qtSeL9&88VAgzA1KE&u* zu+zxUPrpAo^p%YFYV`l*kv3@^XwkwKlpY3`89la_5}CDg)Fq#_<6$c~S^pK1s;mb% zef4T9VbqoY4Gys2T==JdV}KuoOonfKiSvc6*L;BA8p~Xm?BGL8?7a@*9JX1_JKy}( z2OK%SS&t|9kv@CQ*Edr9nPe@mw36)9nDs$1pl*t4)79RS97RlA*P+Y9^O! zZ)L`vFaV$WXg~R;Quys1+l_~%AR+(vHU|P8zQc+^!((?5yLIe4m1EdrYdx#-jI4F< zvBRe+$35^}I#8@fU zQ+Qpj0d=A076tOK{NSwew9M~S19HuzZI;Nv&Rd=nO^1NKPNn4NCyJ<|i5&E16a3?I%0{r0sG>HB*-`dhJ{FGkiBMuKv(yS1(J*U(8IuDZoIkrgG%D)trtAtZI2_c1$?M-27m+INoFCd()`2 zcAm$=7o4C=ho>jP^9Xa*1`zI19} zdCF{YfEQZ4jS8t?WXD5a`{T8a+w%)S(zwq%YYbJkb0Pg#)wVPH2u}=8fqNUSB~`=& zq2jRSJbtjZ!1kJ-rLXD9m+OB#ei=ElY_^{gTMt)TJvQ22fmeK74Ch>;Q7_lzs5;Dd zI$YYyC)^IJ_z|2;eXlX2m}rp`uQqrSNb>z&Rlw<^vl7});b?#!9R`OS*$y`(x^J52 zEx8|MRCa!PZr6j`E=02l9UZ#|73vEa(>7#gU-=R1d==xHwdIg`S6vVe7%=fq_p&p1 zDUXY?%49EnwQrGiF#EPqsP*y8?dPQT|2T*V*G;?f3pJNY?*Q}EFLXN>=5Etco&bXa zi-JCG?1 zr|&B{rQ!3n?zqH&d(}SI!lUoOX!bN?fV)}FhuxFS?CgUSK2UAh-p;;e|M>nN=ROF) zC4UQN!Lz~i+wuVqD=#H}FU-LcHK*QuifOosZ{-LC;4THy_N# zyl_gpNr9vw54Z(6Y&>$_muIQbM6#(DaE)Aj>cboOQmo7_zxfVy+XBE$K<6doKm>m6 zP)Gdo;esJa$vLf$b%$?|dc})=Ih`dB5EC0J;2?aI^BHTj8RChHL*8!PprO3;+I5d< zhrSf>4ON;Q3s>%xOMB|_eVB82>Ro7LGhz?eyN3vEEyWt>0r<9Rz`<%N#>m2%IoZM{`-A+fsHB&{NptyAuMZ z8!oBxHVvF(%#`ALd)6q5kjl|sY_0I6;zh;6&)BJ4_GIRP=#tR6PosWqkZOXXXKLT& zLP^D{lg-*M#+v%yXX&rgcPB>rc^1rIy$v^aCqCKOs=0l2bO8!@2KT`@HuF!YYK5&l zx@D5IYWKwZ5>vq1#x)u(kMl&R^QM#O6r*3pOy3&au#w3%j}lUrw&B&g2BmhbyY}6O zOphT%m(K=atN6{W`^NCO#0Loi3G8ZM={+^*tb?53UFz5bp+2fX6EK=MK`~az<$K0L zS^1AnZ#L)X*dw@lJuKZsE@CQ05;3)?wX$m4m>oC(04ANgfK)o4Dnyk%hoz9Em{E>n zexfSvg-vy&pyG9wLYy96NNcuu$$5`ho8+kNUw zX_|r*4s53PU;T4vU%eXW4F$S6?F6F(fX#a7O-9eNbxNA=iI3tp9eHd0HrIw#i^2n} z(J+>FD_Te>fW#SmKK_LtUEv0p-U@J8y2Qv8^N}Bl7!n9EfnP*2f9xyUUncSaYm2 zX(4YnQFB|<4HKv1`A9_2Q?N{~&O%>Rn2`i5Wfy(~J)M&3Q<5I9;%rz_k@eXI1G^RM|xqeMn@>4b!g z3~c$30?)rLTUyOM``Ay|c%TD17$#W?jz(F&G{9W`d-z%FQIrR9IQzazn7hmBT4c~y z%@yk6C%YTyWNUxy)*E+Tp-dvJ2==SUEqALZCmrq4)a!;>3l;L}qVn#GvD0-SpQHAR z1w+GCY)g``B9y_ z!t)M~X0CcyX*nI#p!bb7!jOJ6*=$RW@pL}zl9n)j3s1&sg0{y(JvQ)~7k{rXw)GRm zaEM24)$`R_YbPg1x+!?}ejePH%aD5j=5yZ1sDe)h4uZerjye17H zCi6f9n8$EJ&s1=nW^Gg|?6QwA5qx;X?VPAtvxtY2e;kweA)|i~eC0Z8mcmxX)*Cki z{2wwFKo};o7RA7@fQ>t%s@iXt+%DWun|(>C5$1XDM)Gv*k^zH^!xl`hm()@YO#qIu;LF8sECh(Taojqi;1DE%CN{^_uT7pX^ z$%+(?Wzy@cW0w!(Q&6gba4>XK$Pv@NbR`6r?}9bcz_s<0h~HccXwY-u`C5nGAkM@b z!@9OvzU`apP%;v45dNZJ=GDOcCj~EgfY#7>Hk{Xk|CD&GMfD6h`+l2S8c39gVNti- zdLgtPY+m)@Y+l2g@pd-5l)~24re(eWn*m->rU^!7kBSCbf{-3Z>bnTw7+n8yRs88w zo_x)q&aS81bg*^ah)3?RDZ60qkc|01mW<6EC|v%{)BKOw(HCAIF6<0q$vr5AVw3m`FWsN%gS_(I|~ z#`weB6DVC+Ex=PUc7D9-_N$x36S|l2n$K}Axrh8T8pGwy?4{b~CRKMrB{ z7h&k~C*7mu*68U5v-dlZJXD-|5e?tJ|NCK=Yv%8G?8OwyTWd}8s9^{V*2?%#xvn)I zsb%>hQ2B!IYNUs0eWR)}JvD6U@C!M z^)o1M{npEYqcRf0`v{ew<##$kh0DqNXrXtLblRf;eGpB;m#Y z7|%Y=ThY|q*y^~QMc_5l;n&YlZdUd%raZhpDdY)vylIfr^iBMv>x?BQ)-UKXS~N9x!2N>Hr)j^Ev5 z5$$#{&np}~GhOR_q&6Vccg7*3dVF3X(~c;SU3{7S_%F5LsN6v49yO@ud3l;|e#L*q zBwmr0%W!2PPH_5E%*)U%-EXU3#*^ZDifsIG8+CFBU*CB)cnL9-*;V6Z1ge)&))HPc)cR@ zls?u~adkS5vLj4i5sT|w%0Cm@DiNzhYtoW#qo|b6+Q{3}v(xomCc>bq?4^jaiO_h0 zYdk^wcO4#*?g;Va8&1h80BO^275j1drKx!y?!&ESPN1U#im#3aDiiOnN;0`dle+p0 zr`+R-+jJwui)c+O)_mHmd`*b87F7ul1+EioF$!&{<*hg3Ca;&Btsjc}HY+>&zgOvL zFsZ1pZ8#M}=qg=i7iw?&Hv6_{_u8cI`1DJq#?W4h;ci*Z6Lc=y+*9aRPeFjR=-jv@#*=6Io_t}P)?iKR+b3-+m&cTVTc>g1y-@RZo>#<1-p3X?|l zH{%n4p6-}DGgJhTbj0ZtuVX*8<$f?MZ3PorTDB7(6LiZ^r|%n_ACKm{M<2BZRsNBg zkcwGf&brE-`d-nvjH)VBPl@&_7wg_}Xte$8jm-SY)bl)oTLgg~cx%mXSjE3eH(goh zV5Wc9!g&n$WXdAU)N?DZPOO8#vR@Uv)t9MTkd)@03T1TO+jhY7~+HN-BkfR zOIG*CItQ~QuNQQLw)!BEu~1(3r(sKK0g4WJ0JbYdErh$W zqz8ocK~}q`8#<)KEe>Pqu_cS6eRX)s9B`?uUaY&IF1HJS!(OWCIP*-0kmAnh;pY-joSnQ4G@6btGyMi7a*fnwa>=Y2k5A6VN19)vcRr)}z-VCU}A%uJ;qX zGj;CrcRnd){>E(db(=5|6`!&LsOkynQ4?Ai6_sBd`Nx^KokA37~6Mmh$BLAq60 z_Ih13KN&sdhxVxt5FSY0a?tK*; zjCYinniPq_Q3&jmQSP8SR+W9{sA=EOvtVTa)z45qy=?4qjfijj-K}xyvm%JyhUp?o zuH2#1-rGuGx$I@-j~aipnHBUe>6D@=l=)2C)w7Xt9)jVCG7wt#rK-GUSo2!XB1NV> zfTe7}@I2Bj_^)-=PtuImhya&>*1EdeFvu2f+ zZHvUOn@*Nk+H;n*LRpPbeHK=TZp#|m;a45HO|-~(<71oGaEV|J`^$1pw6Y2ICR=>F zUOIaF0UD;aMUqj@(Pv(8eFbiZ{9S0~lKq}|HV#)Jvb&1gcGxJYK@Ltw(8i3+KPON!I-NHJq&DK~9U1qv<^1Tjq&&+Copw3TDGTsF zK^6jKDQ|1|R_7DgFblFEgd=lmnPr5Mo5kuSQmdWzzj`71)o?_Yvd8ze7 z3-Xf=Jl|lg>w|D&B#N&>ef*e!80V^Xv2|u!J*Xt`;w$8a37sGbGfqmZt=rIz`$f&~ zF<=H`ur)^Syyr<@HRYN3QR3)u%-Zd^@3r_&^1gQ)Qg{DbgGcGIVMk@AhoW;)`Q0ke z6H{&#GOG`pR%v#=2ZA2XJ!SbNAM~tf32D{Lry1tlXvv=9b3$W+u!{sQuXl|5T=J=^ z2GOA6B}uBnXiOc%)2aP#2L9%G=rJo-#~UXL*Sha7j>aU{?!89dm>_?9_xGx~gsc}{ zU#L2$=CnLI4vEgS=D$gHg_i7|yKD8#NlYFmn5TD?{v-qeHU zGj3B}Sf;VFs5;BeDe}j~Gu92(49x^t=qgncT|SOl`b33Wj{a5E0Dd!2pYC35jbXoU za%FtAW-Mo~3wD$q$89jqeX_~u4`Uab6~EOx1s~Z=o8xvzwmt7SjUMGKN2T3t z>=0n}XJL2@z=4~38b8|nkU+W+t66KfzFBg;?JNP&^Hui`CE|jKmQZsCa5|Ep)DEnDBmx2TpkLf z;%qhqHB=t`t<`n?XJiaH%yYyYn7;Zp#w#{9HXV-CQ&pXuWd>SS>cJ{xgUsL&wG%-! zUw!?J)*f{abngXArC7mF^FDPQmi$qL6|*ODV?c`?1j-(L`h!SmM#_CO{nhv#AqZ?A z$b&ey{^*A&OXS5{)Vx4vvV_F0zhGDv3C&!q?6qkgES;T>x9z<4^4oL^YW11>ar$(} zYDU#~`o4x%d`Pom{#{v)cwv_Upe5HSej)%EgWZ})FOHf_A8MDPjYy}_bDf!IUIY|$ zh9B2LI~)7fvs`fTAX$k3B1!I&Vd_x};~-awGs*EUrqa)&HJGl=FWnQ(Gq=bKZqa0& zV}b6G&3_H=S&~JlRGW4|V3YkP%9r>yU=YpC%#7+=*|>W8(&%kXPT|SizQhr5lN_n% z+M~PiT6<$@NZfTFn?9QugBz(Q@3#0F939=B=W2X>nC4JEWO1;ojq$MDk?{;eJ_tb@7aKR7z1t0w;fYW;iDb=3A{%2BXxZ4`}W{godh`%2y705&yERwbhPQ? z=0v;fw+2UF*5GhIde@(`5Y6tnt*Fx?WL^1rZayovWT|nv=_sXY|)%WnPC!l0{!WF3^f#4#7 zgc&V~X~{FZC_OeTkh2HOs$qMv1gBTVlQx5ZgGFr3y(Rp);q9XR5vd^me2Ws_El$L$ z-qcP7jkxi-l`(ug3ZQHna5FBjBJ5xhWBI6XZr;RPPkW4qa=fqoj}p` zlb!eA6kaF!kLCJk%5!Ia%9Kc^floLOU%hRo@I(!=FMnHJ0U@|Eq|#^XtDDh0Qi#ga z*dxb?*P{OJhq<7{;9828M92r|o+*mqVJI;%ZYfXc>eGnaws4o>KgY0BTLCO!Fgm?Ty2Yy<_P}kg++R zbM&;2+uX5E&)xO0j?jAMo1f8;=oiS~8d;XN5NI92JAMogGwjRf8$v|~#M-Wlucw0G z0;umfD@&saS}t%2-;6`2b%(sl^1R@T+}ub2?sB~W<|AXR4;3|uY99iX;VFa!Cz8OanzfLJe;=p@Z~Y|#tCehL<{j{Uc7~=;zx-N$NU}Ps04%<;;%bv7yo&5ngXfVtLSKW->CQ*{tf8%jFG&p zSDI^a;1ne4)-~vDznNIT34LbOiJ4~yWe(r$xqlth{xaq_U$*n{==K5}IOC#-Unx#mN`!l_ zw}Z)jYIQceBPste%~Gwrc}RB(SCi~_4BaPaGc?tws`OS8@^K^TDb<_#=Htl zd`eh7`;Q+FTrVH>N!)2~7g2O_Sv$uM_fe7;Ly=Pp?#{hk>Pe&h+~Z-$!LKFax9jW+IQh_ObRGHBK90_#%cCy1$V;tQbFZ%4LHB$p`j{y z^}b`M5xYirI> ze8=`K6`kiMfkLT>p5$=#VWKGW@u&stw#{p**NFr15CQvUGf9_w_Qc~RLOZ*2@N$x% zxo~oqoeFMZhKCtJg=co38KP3EVlgm7?Wz7*Yi^tt{(V4X{CfqD)}r!vJeXKbM&{qV zD{8cO=)5#X<|uBcRH9&%lWF|aBCDZt;ZDt@8{;#>&xHb$lkv>?;zn8-{0-E%K6$+? z7uMYAnk&4RdOkZtyqRw~(ZXK3_~~492HCAouJ_JKBpNv|wU;^{5Gy{iL0a-G!zB08 zNuZj?r%q2VcZu-K;*IDBxP3a4zHPj`P$y#8Rdk~Y>iG?3zPokG;Mz6l%O81z($q4b zWR-MBBE-h~l>Ia3SVm#TEyBv=Q#O^!#g|0hG=3;*e9n6>TVt1SSHsAEC?STFEVPfh z=`QG`KwErrm4$%otM-RuHy7R#KRAHULeI3h_fnZ&-j_U!qj&-raJG%;yuEQm&se3( z++jz#nL{(~Z9kN;e0p|*-m=nEK8oV#4JFoxAn2&DUBn%)k#~aJ0wL%3qcX!Il{5Mb zeHXa7K9NcVxW1VqrQZH@4sIv?wJSdbwsnrwFGbvvFJFT1COZMZ`>YJybK)I{-Af8B zXX1aec0pjk&n@0e@XAeTu8;}3Fc+~3!?h4@`!6EURN3h1y6_h5$P*LGr~>#88uop z_s)CNh2lT&xa(N9W*6C0q&DcD$xLqE?+Ons)WVe{l}ghJ(QPsfb90fPch)=J?Na(x z8w33Ti&xede5LdMVmruf?Po}(rP0#uSmb2B{&@Uc!@o7E!~-^1DTGIktoSmiOyYel zI{n%A(=TkL5htXnpOrb7)x-Lw-E)&(dAHElLHY*J$DqcG^^r$`yEC56dS+@e`q~8f zi|W_d(*Vc+i)x%T*Wd8{HM@Emo%rre=;P;p=>1+3P&S2tc7hxrIDe9^Z?oz#fJ$VTg9JBH#f0nSjIdPNcb#G5)gE z;3FuO@h7u`GxS#i?`D8X8UcZs^ELc4=QRGA(*Fh?_#drCGW$M$)j8yZxN+0$Mbx=x zotpoA{0}_G|D?jne+pQcXk8!L0KWQf6bI840VZx2qs$*g!~fxeJP1?e2LbDUl~|cN zNeKM+C0PDb9sIGT%ukBGyg5O|PvK66?mtx2{6ARO=HJ!Q{|5~}Q~o3Wtd@xq6S=<8 zOL6aaWsutkDyU3F4Mkc|>gMjx%8ANq2G2m`E=CkCLb*T`8skME>sXNXU;gJuV*1V{ z==IPS$~(*`Qh*l%C}xqW7Bvvo113o3&5uI!+7WsUsGWs% zP-}ymXG4B6U5%mgCK*La%1ULZ=157hxbcBFtPWK;Q@$)14I{sWSWwgKC#13>9kSP_ zJb()JcNMB%iV`pdlTZJ%BHrb+d+YPnL3Fc%u_c_P*1eqqWXcD6QI|)Zr#~ihmpD1- zE0rvVkFT1W97QC5wbt+J(h#XG*6d{is=H2oo#S6`jN z8Vqy2B%=f?AK(`8EMY(uc7Fl`%@DyCW>9{+M1lTBP72N^pIC1C$S5 z-f&k>c^wj~?fJg2FxP6RPrQM{d}Sdcj^ARgR-4>GkWZ18*IwHl6&Jk4#@N6)+JmwA zP{6TQ}aeJi}#2&`J)%Hxi!`X3aJyaUNNMUHbJyS^o3 z!~dRsm3ow&8&%f)ux6%=Q64n&zR|r_Y5{w(pw!scTH?NA6V!t|v>fDj*8<>F!$0`I(#a z#zh!S^qebYdCCuY|LrE)RbZqYkB#QAw(u(pR_0lCidzTDT=$1E>^R>6l4 z9B9n}5cwGvt|xh`_?+h>J59-~cP*YwRNJ|%P~ zHI*CB|JtW=$2CHt7DvnT@S# zZ5AlxOEm`gjN8xWemJ{-sP4>@7zZ^_7s$@RWLE%hjc&-3{TW8vi3;m%0@4kvUI^LX1p{@}uP#@-Wuvfu=j9&rubXGcL+4pyFl zRheNCgM7epkp1vw!~?q*v1(TPtk9?EsZZb(y2J<$AyDtp2TLJ}2>AEvx(=1RfP5nV zFU#x)zxZE`B7g&&US}=-zirOt2cdO8?~JH2+{abSC_M?(hB9O_h_J~FkNlUF)fJ*u zGk6EJBum;&$G8dZ`Bk?h-rxl2na|N-^gkb z5ZtgQAh<4l>pJjFS(6h4__*exsqmVhxQ~7vX#4|_R+R=$Mcg@mPYAScJHF9(As`@a z{qyfyheMtP0fGKIMOkTW4-*{bj?aV9pI28DAMbHrbCvs%S3}P6I_&95rrC9~TO)7K zJe0)FE_dFXv0cAks`Dja`I=lB^xjA4isjQ!i+0L#Y)_G|Gj5UnGajrbc*p9Ikq&nx z!L^>No}NiVcj36l(vQ;cHjnuseaQ)vo5HI-wk_=J?Ee6Ldg~pBOane&agnoJBOrKp zU*kT|V*UR?!ylxrou{bfE6ze17ZjaawI0a2xQEREYr(Je)$i@?Y2~V=h`7kB3ER)q zSP$ncEG)D$6A*kjeJ80DOHXkn^44i1)M{ug)K;D&|CSgWIad|MTPEJm)nkW#-lB=F3>AANIjx!#sbK9iiGI%%&jO0da7hCOx_k!r9mh3U| zH!B1bX?U_O{|udEU|=+cqXm8Pa$6fn2l^vqHznXOYeZR#Kp+@IoS%w|pLcVVXv+Z) zaqCctnJKSd^f*bN>QzIYybDjWnqqEn!iT?yG9E7d_;@4E*j;~AQNyw~&G&RYzo1xi z|Ick%V{sTC_^We0U(^Qu^Dg4@#KO>1m*d~>PyDJR!sQ7w`GARM$TyA=_cZWvc`Fc+ z$ErYUA*erD!%XD1y){{(5W!fq&{7nGiT#>-gAlkE zK*kgsfuYnjO2;1l+!mhoSo#%2QSNyBdjX-Aa=sA2)Y8(z-F)sW$n-rc%VMcLtetRP zGk}!A3%_lrGCqK^n?Bl^o6A*aDyAnQ`2I1^xMaD>oN^(I!;ODKL{nAwZ--St$%KBe zr-wML%P}IuZjeTAO#RW;dADcY!SxM$4imA9h|g4_BSwvpk!3^KlfVQvU0t3%Q%!uj zzZhrgi&Vl`tdy7Y2~xb4mHp-5yPuRU6VQDH)Btr)#VL!Tscct+ZvmzT$0Toj3rkO&`zPL_i^!WkkM#B#8Hl5@UixBw>KJWB$C zAB5OX$2P*IloKI4>%)zhBFqjshpq!BsO_~+HFk2aOJdP%i6UB|apA7PVmuukQylV? zz&MFoDxV7%$tUTJE5GejMxj$%xd>WXT56w`>Q6J@q-26AG%LixvlS#jO)Pl*MxTko znZ=4W&kDQ7Fe>*N8M}mG$>}j3jkz^jeFcs?vsmA=FE0&IM#(;Dp3 z(qTj(9GwTObLjTXLLo!F z>j9PC;?h=MoB7r8xP-(rF3+orxUckvwclTHy|DFM$nL)nX~Z85Ba4JAB#+wFK%D3~ z_naPsvV+L&K3J~GIp)eXNYzimTV6BsT%^BAmoqMn3#HB=>Vod&*Xaxk4>OVgo5l9m zA*LGkW^?zjB(cidY54cEU!AH0hZ-g`vD;gc7Z+svvscPT~ev;$|D`T~_;?4X|7Rt?%#pbhNcmQc-ocxZ|eacnr+T_`QmeH?FF^@G1VO zu(0k}WWinfm%smPAaW6JY)=A{@3FMbL_KV$EBe{Wm9s%kqh)X6N$P>V%N5@5YP`%` z!JNZx8iimfzpyE;ZD$J#3_R}lyQE-bWOQ}75uv<|(jX!r7) zBX*O5>2gO=7)kh*LqU?S_^gU*Q{st&D|MT{7-qW0IScnQ-X_yb{;ncr%Ord`%ezp+ zSTo?jfnAbkY-6ibs(zt60CFL+F!e?`?(vemf=JwQo%)x%Ruvi^7D+l&@4Sa~BJG%4 z;l=+zX=z3;(ks28u8nSC0`@bXBfBROaWpxMsqx&$!q1M@jRQDBi+?GF$}exo z$0E*r&|K9IS)5Bkv!(GuYffF(faP_m3W;Jc@JFN}S;LQ`5G(9Z)|#PnkV9<9dBXFl zdyYOsBjS&VXS)XLZpf`h^7K6Pv0W%_s>Y)vDs(n~5OeN2<0kdF>*g%no<&)zUYIA1 zn(?wSe=)UkiVN5zFRi_7cAtF@yU2AE0avv7F{JO97;TlFv}N>A%)hQ$r%VtySqUht z9rnX46))e`4;Q7Mv!89KB}a=lU7p&|e8u)A;kPRK?J;#AL|s>RZ=#?U|Ko>o7+|fv zRl7QyyNbPvi;F`~;74^$Y2I(Az-C1}et)-BViiibgWs9s*-t2ZmnBc8FC9yV)Q)m` zI~J*01szqo`LcHHV0{>X{7lXmG0v{M+%eba+dI|G7r23R8Haitij+aL^Y;2zI{UXF zm{6OZ6;^SX)gb`+tZa3Gm3hCWIvv>dWWcu1bJy6LLbnBJsru&U#gLX9kG5W1Z@&FT zCmI+`kVsUsWlP3Ur#*#jrq^F;W(t47*nzt4f{o_6v z8l>|W^%9TNUl7fzb}Hr^>sx3!{T)TZg!QzK7+E|Erq!>DNU7e=BtbLPdZK5f&Z}an z^K_-#%gsB&FAk#d?0Kda8@dtoZ5TpDxeO|;rcp(qSy2CUnJ|v}uvzKc;ph0}V2@oJ;y%fC9uS(SMV)p#@ip^(spC%Ggse;-#ove{oliW&Th>~pq=t!R1<``hKHTOYLqZZ)W;KUNOvm>0C`<7L*B%4fp z>%t590C?Ad`{J*ltMgT<_Rex18Vc|$fm1;^&92jUv9Y{xmXU@U5$hmr6tJgq(`Zv7 z_tuuL0M9L|-a-ZKOhaGgRrjNj#Lb9+;5!yd&5})5a-XY}jzLO8H8F%eX)5AB}VSOI-*T7oM9QF;oESX4+axRBfK8w}frnuq#?2z`L*_1V_B;Hja@S~$v=nh?pkSZ-@{;~7kci$7VY4?@XQyKW;CM^5Ze; z@C&{rMLCd@F$bzqarsTk2>!`>pBA4Tj`#%P2L1d%lAr|}w8gdis6=6w2RLwQ)h48Sx z?gGQ&DwjD5*x|Y_{5W0p2x7_QJo9_CI!+)^D$nEp;6lsm&a4mTs;7#3PJ-jA0MHp? zY6IetJPvGT)i zBWO;J(a~<13#uR?(Xoh@NoqXZGJiFmLU^{xv=`{v{Hol)J!Jm#V}E2N$|}P3JnP}F zjcgm-(FZi&#^fsxTPBWo-RBk@uOe-(KJMTWpop5Du>8(P!dV9UG=_M4vzB~jkWNB% zUovi1+7ZsQb;_I;^+EN^6ex41KDb(K-~xyqtsJ2f90^h`W$|T2j+?0D_1kE9l(^KA?kXQk3gv@6JN>Z(SBdizyG3b;JW69c z!ZbyaY4Uu-VkOwR+{Xke#zlLiT%E6Klk}$eva*lU@avoL%~h4FcFTVhI*gL|F%w38 zpT}tqfgenpK`Y<&YkgRgYw8P&ThE(a)krEN3ex+4-}3H2h<_l>JMFx$OPS!?>!^q3 zImR2I2eRgxw*6gd@w=~t%~`P@T_f>G<*m7R-4}b({j98(VJ~ugK*k+HI$z(U*eso% zlPeF6(puotJ02+S8r{0ZChI+h5w z&Q3>D*rMJFb$+E)JR-9XX@rm*PHD*~3?f|DhZ=b{!!=@gv#Vpl1wMOb^;QLXsLqNY zVLtKqeagjpb_`+Jkhx!5gQ+%O>0RV`=$zt&W*DHlg8Fwbrsl|Trf4WR_nDDf)>JSs zIV2MzvWn#Vip?Hv52F}Y4t5qcV^Je0+n6Rcna~vbP!ja9;Jev6*IW%oDP{3B5nW9b z%JQpACGEVssSB<;Xr}&C3J0=;EgzY=J6-7;)c;g*F`G6>c(jpKIpE zZf4t%r=Y0J17H%O9_VOjq_gsnoZ%=mgBfSAwGHj!xL}7>J-cKEpi4iKl}nZhJHcrP zjd#kd7r-t~CW?C%bKooG>0`9lqo#lG1lTyqOmQ;=e^8MUIvy?7)pPefVERt{j2M%7+}smD9S1V?~a%KZyVZpjiD;2&$&mv za_=>gRv-|oQ3*&ydhdY+-&2;b0|8=gA{%n0#lZKK!Ofm&QJ&EZtjc7n;=?xo*XY2q z-F7>B21~g(xX)HH4tkT|Lx}dM#?Y=oo!b{XeQqWXt9XlWl`d5Sts1u^cS9)GqA)!{ zT>Qw$2yVLIG(Jul%piEv_S?$FP^7sQnt4WSC$8Z6r;J$^^xHAUmVqa%m#80&Vm?bj|5gXdw2o1vk)-+bEE z-437zA5A)@cXx<)rw+D*atUuvepFWX^75jz9_oxN4^Jez4*GI5c?ZLHrz$O>ETTcz zEQY~rhdgtj==VvD!mL=9r9i;t<(rv1Y1UejA(gLTPs;V1tuxDc=7d&UxAybpyS$eq zhF>w9%t2Chw4|-nk3Zz*^%wluPd<sN2YG?O&v5GG?Z8o#N`28M>vC6_tj{FVV<)osL4M= z`WA+xcCLxd#v;w$nLQ_hOKL|eQ@G_mM)4*7_&~)qP>qd^cnrK)&SN5E7P`?^cK1zM z>UZ_^`^!78ywufujGwd#gYMF9gmEfr`C%%IH$I1=mKw^l`Z$c(Z4J_rS7p0!`uuI7 zM3r%0ebkOrlpLu}Tvh6HxOz}wf~m6^hI_Y`M$_GXLsT^jvT|rC7=O|p*yR32PIz~~ zjsdgfP*h}ljQ#TG8=<~;`xm6 zB17SNOlo2x`<1TT_T?LW=D2+3NAce@h7PUmKXOfWI`ZQC?*V|C#==YC5;gYBJD_eV zyQxMtbdN!7U#U{(Y<11zK1eJ5Snxhr_25qVtBa6?yfn7wH?kpb^`x%JFzu_R>VMmr zfyC5-*9W!gC(Hd)@8Dlj6ly@N-~Oa6w4_98xsnt+RLIv8tsR;Y-Z&C^io?sRR#&>g zU8*okW-sT5z*${$SC{ybrqldn7KIG#YdOX7_QR7|^esaLoqQL&94 z=3<5_L+)FAFFaRVI!gy_alX~6TE=(jZuL}~=zdmL|6bf>n$ckFh2mU#O}~^=M~AsT zzZo$KWJ5-z6z!kb8pfrr`R%G!J;B7L!YL}K3mlPQ zW9t-ES;Bl%-bEk0dl+8wpden&C6KFj@ul%}`>rSDw&_hB9nRiNk*Ox@2K4&z^ZMXs zjEObo9mz%kr#8;2-v{0jC*-w#LfF4+;8j|POiST&i9Lgf+} z(oFY>hbltjl635~-OaP;YL;oNo!5u5|Mc)T+xoGU{_DBarbfSQG9euLcW8092J>dy zH7cCgBTzrseux&Y7$%DT;HfNzd|!W;cMNaT1$C`ZrQRU6pX>xIg5(EoVU2@%p=MQr z!-AyVIz5SnLrBeF+e3cq-n*+-Fwg8h4_pk{X3qn>W+t6Fm6wiU7o~x2+8-YPPdNju zSvyFq$BW-aip^Edr^hKA>y-Ru1N(fTru2g!Tu;;t#>7(@3EvT-Eh~UHidIO2$4Qe)d2*D45+1E~~H){YJ<+%P> zDI?uxtiiLZDbd$XnBa#@lV^AJTfxs?gRj{OxL#e(>@EaciE8NNV6PDfK5?^BSO6{GTkz|G}*Mf2^TBr!mC)jN841Jub0;D7?08cL{g+XDA51yyH`f z^{cS#TR!vZXlw6iJ8E)Bkf9v+*X&sA!gI|QV}XktfAUeXL@ZmL`$DCczfoT`Ewnb5 z9J?rGv6oPQ<F#GsAGfXpCAZW#4x}y>vhoRinnV&*=Jpb%a&#j0YbM{_fe*m+^kcGPlw{ zNEe}Aw^QbyWDGfUtA==OoRJP}ZgO+zA$U18#;PUioAgTFUXB`S9e%FMoLdu4@dARe zS2y0XE4eE&x?Er(&ma@9nEdyg4BdlMY)reV)qF2^y$fT7Vw1MjgRCDgPUcwG%)Bn>>=at~ zIXyxwrtan1sfuIfGX5HRUNrTAOkw-}s%k_Q$+lUL?YQUf-#_yw2EcEiFgw{<&^uE@ zA&a5RAPu`p_x7-G=cc49gvPU&V(W<6IsNI;xiET8Sk3^*R};H1B-5c5oD&;AD5Jf@ z2~1M!yS;Kc@<|c5so;p&tLaWECUFs0=q&ky^EM~-3BOk59jC=5+sX29UX#KHeznpu zkjaDWvWua8xyk3XeGqRsyr~`tK_ETtii`Be6phn@WQW_KEoe|fg^FwQPmC?ap;m2! zHOB>HSNJ5udvz0RKWglm4cd}$SL*e@$IToXB)m6kmX)Y%sc_vyRX$XXF@m70 zANRkwJC(D-u73(3gPUesY*XQX7lvQf6gN5FRRv3X>fAPZ*!svsBi<{;)A2oc)a;+!p!3e zT$?K%*(?yXculKP4YGLt8m$d6DfO#rt~_{CCZqGVisX;!3#qWYa?^5JkJKD57Ca*1 zb9dY3A3GgAcWo@4D3dkK_RQ*W3FmQ-jkSITzG+>tUxe%x=1C}_q;lv?-cOxvD3KSQ z6aBs(%W`MTSIgkk_%eBQPJ88&^EMJM;OEkJ=cLWq&%L4cU03>-^e(>7!K8z?&0LNQ zlZ+LD@0jSvKt_aYJ-NI;qY4OlEQ)PYqY~da6&Y7L2Nay!4#(Oh=8OIr>aR$)NvzWD zdduxUBoa+xSvu~spW(}l=z9yi(I#GXXQ?O6>g%It<0ujD)=X`?wxO%_Z1ZWX>V?}* zmdTA_XFuC#6y_d1OjJ#_HsCboI{|%8#6@)c<*VNU%#!=ba2SV=Pppz6;f#JPxYHKM z*X)Bd9gpc7(tU_fmDAyZXi>YqhclbP!$Qw4-)FHGXQ`&ql=Q7N@x$M0miR{a+&j#r z>^~f@*O(Mry+{Y*AKc_yYdD&|4*GjW>%XswD(^^?b{KytRCAaaUz8G zp8`(j@yA{M4be8bvL`tJD(A!ghyMH%0~BW`6Q{0to&FJ|r;Bt0l&QRn^HPFYD(dA9D+tH2be*yYy&K z@-a;FFRemb8;SuHZ*{8bQcZAc6G>sCJ06Qi_uQb7Ku=yeVKj7JiajaR4S>&lI1JHr6mlMlRhp4p9iRjFOYz$`@s?GSIc z8Xq0?-dGce1{+qM7O9hVs_=cB{F47IS;4H#pcJ>KB+(bt zX5N;~hw!oWq~BZ3JML#b7U;1lU><7pQl`Pem>~=M0)ZZ!LDh@tSV3eGFGP`npYQC6 zLt3(>_m~Rr(lwAYb`S_m+J%IwQY6#I6BhdX{tYa25?Cm5)s+RI=$@&ztUS&1R07T?Uz7o2DKY<-@P}<4XI9y>h zw6)qyFrDh4{G9==iJ>2XThE+MY12Sh8i|-bX7#PuGh`0Xb8e+oMwZbR_`Cxj^FC+q zv@e`VXGSvcWIXqk-WZpstaQ6g{--5De6a6e_Ko#zjYYPZ;xw>u_2opm7hG4B)cdkD#n_hJIft(Fz6* z?5B{o#XxffN+aHrn8xwO-&?%~f}(}dT_`MV4s=SJ+*Mw#$Nqrm!A1?g4LkV28| zO-nPzH`MKVE?*ytNl5byKUJ&7J~T|8e2#Wu2`lqDw<^iQ|3iuBJcjXkMt-6TB(PC>}qudxq!kLja4My1Fztm{{W4+x%)L@{01VX+ zx%E}1KS1$AZex}4--D38;1WH<_NRj;gecXy%0B=_h3z}Np2(D_fC(SJrQ z*VK&VXXxgK@i6UPfu}5jNfsRN5JoDOfT%U4v_1rN;Dzf+Fj?mu|29X$;5<(@UZf=^J)`DU&u&&s!)j-oXmH{B{U--%1Cv~P zfPABvpOb3>~Sicz&7%9KP+R9(`a;+lTcuo;ov|(+a zJ5_C9zqy=}Ry6?4sd})9U&k9}o0oj#X~LB@CX}@iE_OQNQ%nyrq=00>1knC8st4TM zD)X(jk?Gk)duIL%ohL5?2CFk$?>ha zJTj~5)w-k%??1!S&IKoB98K1TU;4)i{_7KEyE4&n-eNe(lb)9@W$+=cXFGRknm=*j zrp(5EGIbya_oG%oMtm9LMun%6%2Xv%HYz94NiW5G61+Pqd3P-p?Z6Xuw6M2fl5xwp z{bVz?#`?=|PPL(bXpsW@EU{lGXmPiBHOgUGZIwkGNg-49bJO}t+mN$Mj88Q!Z`&S7 zx5%R&mG3%I|9WolYpm5?!aQ02xxU-1qwU0Ws2PKich5cb?-QK0RXi;y} zn)f5n91hsOhmQ+0GG42i*jmifJrn&$>T^ZAr2b`_3$8?@LmoI!nrDL!L4kcMM!Pzv@U%<_O@${Hog^>Awf^|1H7&pTX*X z?wJRCN}|~I_6|=6Ku+7Eb)4)N&u>B%{Z-ivfOvk9j{)Gv2?(T;^1WCnhFnng90K;y zb;#GicRzmo^*vScj9 zeb}0duE>*Pb2DGH=R}*5aNy<`CZ$hxF z%KVee7xyhc!$R7tyj%UWHYoPmeyn?U=YUx>y2)cQkY!(UdR>H%Mc6uwmoycTrBn1( z#qweduMY`Ljd-4zklkHHFJizc*d3<_>EnwkxN9d=_G>~m+zl@O(PTXBZXn=_jRyLp zMc7W}8^s|wa=M&rTMeobQp!W2Q>>a$$0=|umrNF&VcKO_@2&9gTA^IgYmZicZiadR zJtI*j=|`x93@V##r#&93*eVzT)AIMFx;8x4(y5DmF35|#!P%~jFrph@jd&QHpYN`0 z2<6ZD@>h@(GB?cl%Np01V$sQ4Uuekkq6N8-!ugi6FTCXa= zt16pfl&VtoDJQzxSbC*67|h z7Nex|C-lEr;l5k?SQVYP`m^?P0*V<$v4q;-^SVU4t$*b?{&Y~WWzhE1WN#?HIOg%x zt#V$9J8{HGsI*jRKfsTw@#gT;D)-(dROX}~yOC(xyP$uKP2gnj}2+gWQ_#J*uhCLtUuMS*@uH*T!GMl!tjtc=IQd zFC~0pudNTu$xAi*&(t@p@<20NQ?xzL6}nPgSim-$Ln)b|&Yt{UXMZUCKVqInJa_v) zV!E2!Ly0skjjc`7dl1ExTw~G9sd4UIjogo4r$Avv5%FMK|vATRH2v}AXG zaP$guC!jGB7{}iuUtn&COq6SV(4ZRyNPh(RteKzg-nE+lq@egGxipXJdHxsDPhWbyR*kR7URw@U54W4qM{N$!hB`XyQwg<`Ofedy>Yb%V3 z>i75gXKV>arysMK7(o1&@|aOkmt)W$m^3;Mj3O~&Q0S6&32|v=)8c|pY(*t-67%Zm*5`jGwsNG<(~?3EP;V>mwGky7jAy;D&rBWY;9AXpCbPX21<+^b<82q4b>2!Za1($%xjdATWXB`>9H;2z!r+A8pJ(x$0v4!LQI>m|3f4st;4TWw3DY>l4Pp!2{szXWaYh* zI?BNvMnmROk;>u|~S3~#~fo_}xNCYtTfClt(LQNGUfys<<> z@}5_EZtsUB#3-Xaw~nOt$>SqCE$^+Fv$yLeQ3VAGIyRFIfxXog!~8gmXO*&an%myb zy-7$|bz-jg@injQ0zx`a5EJa;OOI;4?2{zEv7v~zvn@oZ#5lg&<2sS}+GRwzlsb54 zzhdv2mrlvv$^4n42P1wUiPRZ(B7QKnF}m{=-^8cH-s|PbI5Qs+c;zl3ZgZke1pjb- z+l5CRj^BUF(KWLmNv{s~Y}kfw1{fXWsyiZJ&}49W3u4>=G=mD@&NBWYE8ylg<+6?Ve4zH(sZ` z>#=o^>C!AhMKHFm^!jaX*`zryl8|Yh-gF;E?IFyERc$xKu@D z=dN4k^V6Z5LZZIFDNjAkgpHA>hodurnNJ7G!*QaiGOoPLr7WH`D}N*ZJ4w}%mfGk}i}al_ z?DuwPw_mz+vZ$@z9uAoY*NzK0ugEW%3~!%5Zw?up^Y<@P_S`v~JT`Qb0wm)s2x3*M zNCer+!4TAv#H3h)+d%7D$28bz;rzYXZ{>U^(`}&&QOT4- z#?3hS;+{QaF5~vDZ2c+2lZx^cXuvEz2PPs=(u96PUpEVfn)^_`GP@cE6=`?rxwlNf z9E_11~BX8GdVM@fU@nYr+t+y!> z`VEliLoYn!2Tp7Fu>S^{K{2SlIhx0}R^Y03j0l?fBjJ%N$QRykxb_vk%=jR9ve| zR)pX!%A5Wv&^tr(4E#6gI1mqRyM2gq_;9Pe(d~qn-+7{(WUmMbKfs}7n%tn`t3^-< z?Ln=KFXI_~W_1etMJbDJO+<_8h0spZw4gN8b3Dq-iv&HVrHNiTMA5im7`D&!8Ox7a zb$k4})aU*=aay#lB`!yTBRsrGUrTJVGnA;cGZY!@xg;H!4}#o2@S>i>)+kKcyuX}D zkB~}fqh0ltx&}AkPE;nYOo*X8Jy_exD2m%iPI` z+z;c-p1plR`l8cYS#dBoiSOn*S;p90PMQ(7AMbWTTp^2XBk~%b=|vI3ENy`Vvc zLxy6tfoh%A@~$bx*q^>dBpycjp6i638eitmz6EhNC#9RbL=ZZ>=rmvTbQ#n3rN2OC z?2WQE?A|H% zJzCy?s>jeHeOJfqL2lw6GsUN52T8ki2nYXD<`kdmy|3d?#Fl2Gte}qSS^3ZKaWARE z%~W?{p9OPf<0dBm<3I#cfZ7R?Qz}4oDu1)<*5i3Li*O^4l);5v&6R`m{aaByGK1b| zMryyvo%#H<@0R_dG@<1gb7KX)OgY`xt$!9169u~$AeHWeh@yOlC4)*fCbh&`^)`?8 zU6*Y>xzQ4OQnFQfUnUKJlV_~tha^|p&itMYPyXHO;~ zG43*wuO6p8rRDtCR{6ZG>>Pe5|R3mOI^%hC+9TVv!nf;!h#r84tyqGJ@QBQ=q;~? z)$ZLrhY06QxF1)&tBQv9s!Lhao9Plk^NlQVADHd%1_KUa8UHh21x1 z3|<|CUZPut7yW0e@jBT7{mv!5b-P7{VS|?vP_H{pnG-)v2pLDkrLuvo5L%)06xX$N zQS}1bT(isH5AD)sH8@!e+;WxstI2&-Uzx5GOdF$#IjTB#<(EbD= zslvXy?mL8Vo2qahlcu}THttx{QJ%){Ji*^HiuXO`wmdjmFVeLXzumMso=9L8UTyR{ zH|6>Ij>zMOHzT{FFW?DoF*5LO6pul3l*$cyuO3z(nV`Dp9#oQvr%k@mZ>-OqJ9 zCQ5B%Qc+3tjSA+K|K9j`1M=0HsnOV1*t}Ylj0d6=Nqf2P_jy=eH*5jXyj7krSrlJ+ zG6;=d=gCn2c5R#BG{~!6GB+ga19u&iE+zrXQUHnRc-hQ<+@uK8!;2S;kMvy(DTItX zG%KVfjNXy`SgY?VN(Hu6aV85pnYB)JKX@#c>G=7U^MhH?@{*?8NUTJJ2I|*uINvSgZE3gs*+JJF85ns-$pbloF2&pj&@~-?|hpoUD*wRh2RZ;d)HJ^zOvb zRNr$ba;7jyEc|Ixo0xL@GUNAv8YWVCC8@zwY@=c5-F3Rcb#qAY4tA!5T56R3k)z4T z5|dg(o$3kMOiK`H|J|{N<>PMH3W;b*@bRE(0YwJlf-peW!)8l*Cu1IHck#f<|yW?LO zJ(2ukLZT&i8jgk{50ia=lF*{+L;=0eF(_}zM6oqCBbq}}1my%t*u97xH=V43tYT%n zEAvlk+-3G#H+DbIn6C3p;Jx7_L|f|TLNX~^FFDayQGo`0!$>4twcRC2zOVV-r6{2< zDX^bxKAR}c56P5R+|cFuld&prPqyo3aX8VR)R_Utd;bgSd^LZw(d7670qqyrcdvkB z^1f(*+|!nmC!~2e@Z;Y~Tp+0XF7#3t=+FNz%8N%~F|Iv9At|NZ+1QPb=JvMd9^Mjv z@~a3Q$A?C(%oQf^pES)nmF+r}HSQQ<-?q7>kCb`r!9%JGM1YHoN>${#p48Gbry1N6 zS#E1~IR3rEahZG{*}W;NKM1*UX4C>C3W6HPgy5)pNkc>T=|HKwLA64BdsBV*P}MNr zZe@na2v&Sx2vE`KyBqt+ysynBjRx_6j%nOx#J0Yohm8YP>}9Fl%>aNpPIVQ?5snGH z{vqIC|O6zw5MwJF7B-3yAZ3j}0)& zcfn3v4%(NZx4mr_EXVcX7+gZ?Y155^(>gS<4*0He%%NR>G0zxBjNjpy_Qm(@HQ`g$ zToXWx8h8byau`Q-7&V_vcF`O$WarC@*1MGTS~iPb;8cMMz1+O!D_*-57&Iu|^ zC)D#hObKSqJ~MlQo4V(Z&nxIhn@UQ`+oe!-qpg!7nH%KPnz#^7hU=ub%J z!WDIYZU`>I%!yz@cO$lvhlI;~Mq^XVR;P6LilWo}&KV1`!&Y+6w9IJz6;Rf++|>i@ zeC4VhzlEw=`l1;boVDuzls`W4D-fD*jjaFWIsC->bG;t(v>T(iPbs^QD^1jtF(j*F}P zKFj#zo?R#Z-OniNS|uu9P+=eVL2h5(?GhoXqIMYj1cHf2n3X+fBZdvNHM3&kvGz^N zHOSfYm3FbSNzXjn*Y|)uj>mF~Bj^t&JK~u~v08XFgWGt_u zQ+o`SCRW%nJDi;c#~({)-J|7P6&an}wlk==OmRG15}I4zD7EcA|EZN&ES&ViXd8KD zja1o$!9Rx@r<{dW`3g!I^KiOz4(eJnKHpDX3Q5TZPbnryPi^_wK!LJ)tc`yg9p7q0 zuJBI5U~e_4RUNqNQ`KBdtZ$su>WMI@R!aHxhD7gN^8RbzvY9jn2W~xQw)a-$J>N5A zTt7`DUyNCfM=pNSrCOn>A~7^U&wj^2f8I&pNXpG()ibi8E}B_jmzu5wC*|Y=O5>}~ zKoTLUR@0}>u?61MsP)y-*6M72jw*cZsjNp&R$S_K6XbG7%j@v6%C2wrHyg;X?7+`! zeFEhPWSEN~$A47LFiiu+{*3zp{yftLlewKO=`P8yH`_zEM3&PZuI|ft;|=F;O<7u` zb(kvFH~mg{|NJ7Ca`x!eHy4&C(U%7sS!zlAH}R*vmAyfJ50Swf*29qY0{*%k6{eVx zg1IM5vKQ8EE*FRPBkp)0CB}KHNb0EGVFUYx=v=K*5ZOjslTMNm$UWJAGUd3{QnW@oHcK%aoL)F<4@7qqe_nA z1|`*W>BSNZ@aP{;|7HaLzx&TR3g-Vy$=Jw^N#7h9Rlr~y`Si#s0#zY^EdvTmphgAl z>Ut}N1NTI*?alxb|KV$^Yl(%~r_RntLVznF@D58<6P*LrA0GZ3akX8o9vBif?(o=a zo!&*;U!~)y=eTz2MTyPm@o}wtQL`4wnb*cIT1tU(u!BP$T5|T`hcShW>U!agVdIVX z0)tyKVL#+R+OeOwM!g}Rg>h#u?O3)q>h3$uzOtv9JC|pb{E&Kf;I%bxQqZ+gywS0M zmbFKR9TUN3S?I+*u*a}Eh$wDG-{6Z@c_)<4{&Y3mBqun#(1=%+DyMDDEqPtUD+MU5 zqGFEnTJAUEw0wvV10T3RhBcVcRto@-WTrlLj8s?r1}8;nZ@+goF*PTvi26l|+$WBk zlKq70cfRtUNS$%I z37^SY5iK~*VOuk}7D8W=9kPzMx&4-VYf^ZywgcAqP8sjev%mdbCErhb^b>Xw{G`1G zwhjnHeP&ngvOT{F$=iXvk{@mBGZ|T_0oMa+|CB%|ZQM(_7r!bhr>kTleLQAOZO6qH zrC%s-0XEMtoT_W8y;x*7eVlc>oXyWNnAU3>sMC8UWqM5+Pf4i_doYC3sSC{$Kp18uxiD1Kfy`mwCHa09l6-qm@}yEp62Wx?YlqRv z%a%{8pd`5#BF{bAkuqwRu_5Mq2PN==`AjjnsU3pwlqbus=%lD$@y-8}hZizbtDq>@ zBf%~)7hf?m`|L3qD>?p_X|)k873-$VsPSz#F@N5pw=sjMF&wfsvn&5~ZCWeD%m8n( zEiVyPtCQW&Il$_A!aw)oemYtbZ9G|Y^9hC*Zi|*D{H0p`PWj?!;C+b?du}$wl-!XS zY1>heHYM!|V*)lPvo^Ix`H;0APSezgzZKc;9-U%Nj9FFn`lYg`)49InU7V%clVzu` zgM(TXO)=YqpVcMA6Ak(EjwL^CS5qHA3j_@piL_He+`IRT6wM16r3^ShDW8<)Gvb3p zhMUWfEgu|M$xtIOGP}ObN^F&jC`Q-O@Mh02H-TnB-ewhix~nn71@O;*v~m5_WiC}L z^3nI!5yhp&EFH-;{$qmsBP?RT47}vo$k82YxHt-RjdVS$UH+3Sc`oi7%eKCcS(*}l zJCp<%Do2gelmD%nGmUC0+wypoKDD}pLJJWUkR>Xp3{fE{0!bAz6d;qzlweR1kRgOI zAwZxM6$Au9re=!FGl9qyLPE(PLVyTD7?Kbf!Vm}`5W<{y)%T&^>h9I6)~XNP-_E)p z&b@1&bN2b)y?=Xu75(1vo1|}p-v2Gt1$dqP)d6!hV8Brxf`x=Mrs;*Z3cn@G{syN5 zoR+`nwK5COZFDSy_D=!1rlLnMwiCc7k%9peZD1;_ZYpL~D#b8+xCgAqNaUBfN>#^z zy>E$3RKZ^G!#q!`xbdt+`)U4tv@JiGaYNRU3z+HQ4?Q)uzKnAI!0o?}LZWpSLvB-| zt6C`msCM_r>mSzM^ilT>CpZ0!Yp+hnpx81A5uXq=csG>1C63rS`IHe`vZ!I=pL7LK zla{ES^CoNc;QKH%*9UprnRO>=P>i)piRbG)R!!QN-@-K9$(4rfkD6-fYX}XAt|t&w zNZAopX$l?Vi>{fH5gQFxN_GP(r=aN5Sf@FlqLc6CZlKjWc zd$SBVY8S<6BsK6&UhU<1%@^85hIrHEHF04F64+3a)Fo$p$-E8wH%ufFTVu{sY?NYE zi`Sr5CMz}HK%hDJW1j|ll(3-!E~JsX6N&Kk-yq6!z(1ng(0G_Fd3TCL7d$_d4#Ge0uUC{i2hk&V2qtfSsmSioXs8aB8yeeq;hb8@wT1zsqq z5o3kw$E?oV(dq?I9^5v4rGGVX{WGWTHFKF;epfd0B__?X8%Uj`t=W8BG{&`GU^~4) z$oI}?hDGgrXQP7&WhTpGv_EIe+|77oiS=8c@c@s;W04Fx@JV7J6ReF64SXw*3IBbh zIM?qiy(ygBUM{^Cb!rcw|F%8VD$dPrgf4@cFNej*+!Kra3PAb%-yos>Uaso@^=$X% z1_`#WfRpnJ^2ygGa=`Gl=HE~c@Ym7Yf7$Wd`DpJeH&QGc5jt&H0BzsOoY$Q}Kh0dc zKz)%W!RO$$A=^uiN}Zkk+h@z|SEeYzoE;kc{+F(8^?&>$E+Jl>dd4Wr^|D#A3#-gU zFCB_nc>QZQ6EpLA3gq_ZLUcd}?U4-mJzW;NJFo|3-zIWWSi3_r|s_z;nHGF+#NBJvO|Q z*NR?IEvZ*5P#HR`$<{LH&Lo#&x)!Q`GrQu?WlD?5thXCfz~w_XQ6P~3Mc4J8D?ZJ2 zKmKJA`&|>aXXlrjb7@eP_7apkPE@?Y$xCWe3{dI(K)#?36sE2*vv{ye+2PiX*H>$@ zQrQ7aRI_w`KzXXq&I3x>@&&`p-A&@|mG{dzZ^wN5t`*&Co0s8`tUv^D4}u5g#z$sY ziD_>ogLtO6DF9El6)e^NB#dH|7NW~jM|@(cnqLea?OteD6s8(RAL6NZ;ua*O*QU5_L_GGhRcFF^PH+HwSjFWp_ve#N~&J zfDszYdMk$*6QKcoUV2Mg?*t8cRDn8i00&1PmRrIPHihl}lADK+Lo`*LK{XxXr^S67 zOdTk;*T)VY5G~D~Iq2X#_#71WGo!S|yvKeJoFsxX9Z!kmKWaK8CO56r)ZRqe9c8n5 zQ|eIjU?fH)-X7<`0G_aN#wX0SHk)d$g!UbC z!So+ZTQBBz98C3~_xSd*gUZtc_hv_-y(4Nmjiee2j((MJ=)ASsehGOXnE1Ykyhwrn zFufbDH}9}zLJe46iQ_ocR9CV5!%SklrOFVeL$9E{Q{FGV?>Uc?q}d{eiy6S3mO|W& zNjM-8p)1^34wph!cqREK*&JdP#J`O9ih`h7O;6Vj6mr)F2G&Q{96*|J#PM0a6a^}_^zzsc@+DaVDr$FB*~(hFk2qGA4Upo*ny*uOC7s7fibD@BJ(NR7xma>u-C+gqOHqSw|A0gr)Y56=o=iHg={myQ9gRZfo#N zkylvF)lTu&f-;pGM0%MCua$Rw!_U!)ZS8J@pI2X%reGhR13YNrfNNr+gAve-&hp%w zPpArtZ6wH)9)&ko3p9`Re^*Xp68jzv1S>04xKn4I6&zNgjdrLrZa=OdHqP`P?yWan zEMT-0CQql}>`!``dG?JJ-jXNSdJIJQwJgjWcNE(Dbq%ZBXAvrnUO}w%pkSPk?U}?n zj1d76sy}dzde?%~MR2-*x@`RR=;nl8#t7zSBo3-i#;D9cN1eQ#1iG7vq8NGhgwm|s zzH12isNNKM73$u#-Q>(|#Ag+mgcJ2Uj*z(U2{GgA-%2^}&(-P)RaFgD0b!Ct42n%i zD19)Ja`}k?1mhSz-K2w^Bu0*%CSWhu3M#b;Fx@rS#F36dD#Yh<&c>3*iKKbRCIF=$ z4v|uYXhu;K8}laZvaVK6R7O&$*e7$Xdz>;yNShPq2O(HLNuTlg4)vg4neS3)B6@}{ ztA2J8u5g=>cL)o&xN7imt3gw0D;AnB@N9q#1>5*Pqy%}xcM?Cul3J>7X@dNLYDRMl zl^&vadZQ=5pc}4ml3R_lDrx9m&Gr>u1QzqmKv?3D@o+A5GE3yUzf{`Xr|l{zX4+g-JE37LI}jbClGma0tkpNOh+XNofHLti_bjCeCygfjZi zCdwT>^zkgn;lo;UkLLUq$*iCp&$m!vRGb85cV}30unvd&V2#PT%3nx2GCtRWe<&mM z)I6msdz!70tEzl!;X;YK_t>Q{yLDoD60VaFtR$W}apdSJl^s0dS}k()wtb(+UD!e# zU%~ng5DPFq_zga7&RW+q8`CLCWm}s)T}yFwg|4kjx)*%^@L~HwAnw2oS^XNTO!%J_ z+z}mjStxKLJspff5K;IvQh&$kr1nx5;KqNdw4U<4Dm&;wa|sTbEXtd*qCbcY z@%bgf>T?!IUt;#(l#1EZ`%%i`E?0GX7P$4*EZ^pS0dg%>_Y?nmq~O2lSsZmp1WnG` WI3iZ{$QzjVJ7WWL{R+LikN*kl&7P+K literal 0 HcmV?d00001 From cc0364cdc2779def4975a6fa82910a63f1f08af0 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 1 Dec 2020 13:13:20 -0800 Subject: [PATCH 102/958] Added DataCollection and EventLog policies --- windows/client-management/mdm/TOC.md | 2 + .../mdm/policies-in-policy-csp-admx-backed.md | 22 + .../policy-configuration-service-provider.md | 76 + .../mdm/policy-csp-admx-datacollection.md | 114 ++ .../mdm/policy-csp-admx-eventlog.md | 1588 +++++++++++++++++ 5 files changed, 1802 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-datacollection.md create mode 100644 windows/client-management/mdm/policy-csp-admx-eventlog.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 559f7b27a5..5bfb5277ba 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -181,6 +181,7 @@ #### [ADMX_Cpls](policy-csp-admx-cpls.md) #### [ADMX_CredSsp](policy-csp-admx-credssp.md) #### [ADMX_CtrlAltDel](policy-csp-admx-ctrlaltdel.md) +#### [ADMX_DataCollection](policy-csp-admx-datacollection.md) #### [ADMX_DeviceInstallation](policy-csp-admx-devicenstallation.md) #### [ADMX_DeviceSetup](policy-csp-admx-devicesetup.md) #### [ADMX_DigitalLocker](policy-csp-admx-digitallocker.md) @@ -191,6 +192,7 @@ #### [ADMX_EnhancedStorage](policy-csp-admx-enhancedstorage.md) #### [ADMX_ErrorReporting](policy-csp-admx-errorreporting.md) #### [ADMX_EventForwarding](policy-csp-admx-eventforwarding.md) +#### [ADMX_EventLog](policy-csp-admx-eventlog.md) #### [ADMX_FileServerVSSProvider](policy-csp-admx-fileservervssprovider.md) #### [ADMX_FileSys](policy-csp-admx-filesys.md) #### [ADMX_FolderRedirection](policy-csp-admx-folderredirection.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 4d5d2f3728..a866b983b9 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -76,6 +76,7 @@ ms.date: 10/08/2020 - [ADMX_CtrlAltDel/DisableLockComputer](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disablelockcomputer) - [ADMX_CtrlAltDel/DisableTaskMgr](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disabletaskmgr) - [ADMX_CtrlAltDel/NoLogoff](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-nologoff) +- [ADMX_DataCollection/CommercialIdPolicy](./policy-csp-admx-datacollection.md#admx-datacollection-commercialidpolicy) - [ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-allowadmininstall) - [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-detailtext) - [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-simpletext) @@ -166,6 +167,27 @@ ms.date: 10/08/2020 - [ADMX_ErrorReporting/WerQueue_2](./policy-csp-admx-errorreporting.md#admx-errorreporting-werqueue-2) - [ADMX_EventForwarding/ForwarderResourceUsage](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-forwarderresourceusage) - [ADMX_EventForwarding/SubscriptionManager](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-subscriptionmanager) +- [ADMX_EventLog/Channel_LogEnabled](./policy-csp-admx-eventlog.md#admx-eventlog-channel-logenabled) +- [ADMX_EventLog/Channel_LogFilePath_1](./policy-csp-admx-eventlog.md#admx-eventlog-channel-logfilepath-1) +- [ADMX_EventLog/Channel_LogFilePath_2](./policy-csp-admx-eventlog.md#admx-eventlog-channel-logfilepath-2) +- [ADMX_EventLog/Channel_LogFilePath_3](./policy-csp-admx-eventlog.md#admx-eventlog-channel-logfilepath-3) +- [ADMX_EventLog/Channel_LogFilePath_4](./policy-csp-admx-eventlog.md#admx-eventlog-channel-logfilepath-4) +- [ADMX_EventLog/Channel_LogMaxSize_3](./policy-csp-admx-eventlog.md#admx-eventlog-channel-logmaxsize-3) +- [ADMX_EventLog/Channel_Log_AutoBackup_1](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-autobackup-1) +- [ADMX_EventLog/Channel_Log_AutoBackup_2](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-autobackup-2) +- [ADMX_EventLog/Channel_Log_AutoBackup_3](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-autobackup-3) +- [ADMX_EventLog/Channel_Log_AutoBackup_4](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-autobackup-4) +- [ADMX_EventLog/Channel_Log_FileLogAccess_1](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-filelogaccess-1) +- [ADMX_EventLog/Channel_Log_FileLogAccess_2](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-filelogaccess-2) +- [ADMX_EventLog/Channel_Log_FileLogAccess_3](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-filelogaccess-3) +- [ADMX_EventLog/Channel_Log_FileLogAccess_4](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-filelogaccess-4) +- [ADMX_EventLog/Channel_Log_FileLogAccess_5](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-filelogaccess-5) +- [ADMX_EventLog/Channel_Log_FileLogAccess_6](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-filelogaccess-6) +- [ADMX_EventLog/Channel_Log_FileLogAccess_7](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-filelogaccess-7) +- [ADMX_EventLog/Channel_Log_FileLogAccess_8](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-filelogaccess-8) +- [ADMX_EventLog/Channel_Log_Retention_2](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-retention-2) +- [ADMX_EventLog/Channel_Log_Retention_3](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-retention-3) +- [ADMX_EventLog/Channel_Log_Retention_4](./policy-csp-admx-eventlog.md#admx-eventlog-channel-log-retention-4) - [ADMX_FileServerVSSProvider/Pol_EncryptProtocol](./policy-csp-admx-fileservervssprovider.md#admx-fileservervssprovider-pol-encryptprotocol) - [ADMX_FileSys/DisableCompression](./policy-csp-admx-filesys.md#admx-filesys-disablecompression) - [ADMX_FileSys/DisableDeleteNotification](./policy-csp-admx-filesys.md#admx-filesys-disabledeletenotification) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 9a2bc98925..4a90062fe4 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -377,6 +377,14 @@ The following diagram shows the Policy configuration service provider in tree fo +### ADMX_DataCollection policies + +
    +
    + ADMX_DataCollection/CommercialIdPolicy +
    +
    + ### ADMX_DeviceInstallation policies
    @@ -695,6 +703,74 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_EventLog policies + +
    +
    + ADMX_EventLog/Channel_LogEnabled +
    +
    + ADMX_EventLog/Channel_LogFilePath_1 +
    +
    + ADMX_EventLog/Channel_LogFilePath_2 +
    +
    + ADMX_EventLog/Channel_LogFilePath_3 +
    +
    + ADMX_EventLog/Channel_LogFilePath_4 +
    +
    + ADMX_EventLog/Channel_LogMaxSize_3 +
    +
    + ADMX_EventLog/Channel_Log_AutoBackup_1 +
    +
    + ADMX_EventLog/Channel_Log_AutoBackup_2 +
    +
    + ADMX_EventLog/Channel_Log_AutoBackup_3 +
    +
    + ADMX_EventLog/Channel_Log_AutoBackup_4 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_1 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_2 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_3 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_4 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_5 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_6 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_7 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_8 +
    +
    + ADMX_EventLog/Channel_Log_Retention_2 +
    +
    + ADMX_EventLog/Channel_Log_Retention_3 +
    +
    + ADMX_EventLog/Channel_Log_Retention_4 +
    +
    + ### ADMX_FileServerVSSProvider policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-datacollection.md b/windows/client-management/mdm/policy-csp-admx-datacollection.md new file mode 100644 index 0000000000..06baf9787a --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-datacollection.md @@ -0,0 +1,114 @@ +--- +title: Policy CSP - ADMX_DataCollection +description: Policy CSP - ADMX_DataCollection +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/01/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_DataCollection +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_DataCollection policies + +
    +
    + ADMX_DataCollection/CommercialIdPolicy +
    +
    + + +
    + + +**ADMX_DataCollection/CommercialIdPolicy** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting defines the identifier used to uniquely associate this device’s telemetry data as belonging to a given organization. + +If your organization is participating in a program that requires this device to be identified as belonging to your organization then use this setting to provide that identification. The value for this setting will be provided by Microsoft as part of the onboarding process for the program. + +If you disable or do not configure this policy setting, then Microsoft will not be able to use this identifier to associate this machine and its telemetry data with your organization. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure the Commercial ID* +- GP name: *CommercialIdPolicy* +- GP path: *Windows Components\Data Collection and Preview Builds* +- GP ADMX file name: *DataCollection.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + diff --git a/windows/client-management/mdm/policy-csp-admx-eventlog.md b/windows/client-management/mdm/policy-csp-admx-eventlog.md new file mode 100644 index 0000000000..97b2384e47 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-eventlog.md @@ -0,0 +1,1588 @@ +--- +title: Policy CSP - ADMX_EventLog +description: Policy CSP - ADMX_EventLog +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/01/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_EventLog +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_EventLog policies + +
    +
    + ADMX_EventLog/Channel_LogEnabled +
    +
    + ADMX_EventLog/Channel_LogFilePath_1 +
    +
    + ADMX_EventLog/Channel_LogFilePath_2 +
    +
    + ADMX_EventLog/Channel_LogFilePath_3 +
    +
    + ADMX_EventLog/Channel_LogFilePath_4 +
    +
    + ADMX_EventLog/Channel_LogMaxSize_3 +
    +
    + ADMX_EventLog/Channel_Log_AutoBackup_1 +
    +
    + ADMX_EventLog/Channel_Log_AutoBackup_2 +
    +
    + ADMX_EventLog/Channel_Log_AutoBackup_3 +
    +
    + ADMX_EventLog/Channel_Log_AutoBackup_4 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_1 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_2 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_3 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_4 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_5 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_6 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_7 +
    +
    + ADMX_EventLog/Channel_Log_FileLogAccess_8 +
    +
    + ADMX_EventLog/Channel_Log_Retention_2 +
    +
    + ADMX_EventLog/Channel_Log_Retention_3 +
    +
    + ADMX_EventLog/Channel_Log_Retention_4 +
    +
    + + +
    + + +**ADMX_EventLog/Channel_LogEnabled** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns on logging. + +If you enable or do not configure this policy setting, then events can be written to this log. + +If the policy setting is disabled, then no new events can be logged. Events can always be read from the log, regardless of this policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on logging* +- GP name: *Channel_LogEnabled* +- GP path: *Windows Components\Event Log Service\Setup* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_LogFilePath_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators. + +If you enable this policy setting, the Event Log uses the path specified in this policy setting. + +If you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\System32\winevt\Logs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Control the location of the log file* +- GP name: *Channel_LogFilePath_1* +- GP path: *Windows Components\Event Log Service\Application* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_LogFilePath_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators. + +If you enable this policy setting, the Event Log uses the path specified in this policy setting. + +If you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\System32\winevt\Logs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Control the location of the log file* +- GP name: *Channel_LogFilePath_2* +- GP path: *Windows Components\Event Log Service\Security* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_LogFilePath_3** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators. + +If you enable this policy setting, the Event Log uses the path specified in this policy setting. + +If you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\System32\winevt\Logs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Control the location of the log file* +- GP name: *Channel_LogFilePath_3* +- GP path: *Windows Components\Event Log Service\Setup* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_LogFilePath_4** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators. + +If you enable this policy setting, the Event Log uses the path specified in this policy setting. + +If you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\System32\winevt\Logs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on logging* +- GP name: *Channel_LogFilePath_4* +- GP path: *Windows Components\Event Log Service\System* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_LogMaxSize_3** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the maximum size of the log file in kilobytes. + +If you enable this policy setting, you can configure the maximum log file size to be between 1 megabyte (1024 kilobytes) and 2 terabytes (2147483647 kilobytes), in kilobyte increments. + +If you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog, and it defaults to 1 megabyte. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the maximum log file size (KB)* +- GP name: *Channel_LogMaxSize_3* +- GP path: *Windows Components\Event Log Service\Setup* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_AutoBackup_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the "Retain old events" policy setting is enabled. + +If you enable this policy setting and the "Retain old events" policy setting is enabled, the Event Log file is automatically closed and renamed when it is full. A new file is then started. + +If you disable this policy setting and the "Retain old events" policy setting is enabled, new events are discarded and old events are retained. + +If you do not configure this policy setting and the "Retain old events" policy setting is enabled, new events are discarded and the old events are retained. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Back up log automatically when full* +- GP name: *Channel_Log_AutoBackup_1* +- GP path: *Windows Components\Event Log Service\Application* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_AutoBackup_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the "Retain old events" policy setting is enabled. + +If you enable this policy setting and the "Retain old events" policy setting is enabled, the Event Log file is automatically closed and renamed when it is full. A new file is then started. + +If you disable this policy setting and the "Retain old events" policy setting is enabled, new events are discarded and old events are retained. + +If you do not configure this policy setting and the "Retain old events" policy setting is enabled, new events are discarded and the old events are retained. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Back up log automatically when full* +- GP name: *Channel_Log_AutoBackup_2* +- GP path: *Windows Components\Event Log Service\Security* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_AutoBackup_3** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the "Retain old events" policy setting is enabled. + +If you enable this policy setting and the "Retain old events" policy setting is enabled, the Event Log file is automatically closed and renamed when it is full. A new file is then started. + +If you disable this policy setting and the "Retain old events" policy setting is enabled, new events are discarded and old events are retained. + +If you do not configure this policy setting and the "Retain old events" policy setting is enabled, new events are discarded and the old events are retained. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Back up log automatically when full* +- GP name: *Channel_Log_AutoBackup_3* +- GP path: *Windows Components\Event Log Service\Setup* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_AutoBackup_4** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the "Retain old events" policy setting is enabled. + +If you enable this policy setting and the "Retain old events" policy setting is enabled, the Event Log file is automatically closed and renamed when it is full. A new file is then started. + +If you disable this policy setting and the "Retain old events" policy setting is enabled, new events are discarded and old events are retained. + +If you do not configure this policy setting and the "Retain old events" policy setting is enabled, new events are discarded and the old events are retained. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Back up log automatically when full* +- GP name: *Channel_Log_AutoBackup_4* +- GP path: *Windows Components\Event Log Service\System* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_FileLogAccess_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. + +If you enable this policy setting, only those users matching the security descriptor can access the log. + +If you disable or do not configure this policy setting, all authenticated users and system services can write, read, or clear this log. + +> [!NOTE] +> If you enable this policy setting, some tools and APIs may ignore it. The same change should be made to the "Configure log access (legacy)" policy setting to enforce this change across all tools and APIs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure log access* +- GP name: *Channel_Log_FileLogAccess_1* +- GP path: *Windows Components\Event Log Service\Application* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_FileLogAccess_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. You cannot configure write permissions for this log. You must set both "configure log access" policy settings for this log in order to affect the both modern and legacy tools. + +If you enable this policy setting, only those users whose security descriptor matches the configured specified value can access the log. + +If you disable or do not configure this policy setting, only system software and administrators can read or clear this log. + +> [!NOTE] +> If you enable this policy setting, some tools and APIs may ignore it. The same change should be made to the "Configure log access (legacy)" policy setting to enforce this change across all tools and APIs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure log access* +- GP name: *Channel_Log_FileLogAccess_2* +- GP path: *Windows Components\Event Log Service\Security* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_FileLogAccess_3** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. + +If you enable this policy setting, only those users matching the security descriptor can access the log. + +If you disable or do not configure this policy setting, all authenticated users and system services can write, read, or clear this log. + +> [!NOTE] +> If you enable this policy setting, some tools and APIs may ignore it. The same change should be made to the "Configure log access (legacy)" policy setting to enforce this change across all tools and APIs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure log access* +- GP name: *Channel_Log_FileLogAccess_3* +- GP path: *Windows Components\Event Log Service\Setup* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_FileLogAccess_4** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. You must set both "configure log access" policy settings for this log in order to affect the both modern and legacy tools. + +If you enable this policy setting, only users whose security descriptor matches the configured value can access the log. + +If you disable or do not configure this policy setting, only system software and administrators can write or clear this log, and any authenticated user can read events from it. + +> [!NOTE] +> If you enable this policy setting, some tools and APIs may ignore it. The same change should be made to the "Configure log access (legacy)" policy setting to enforce this change across all tools and APIs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure log access* +- GP name: *Channel_Log_FileLogAccess_4* +- GP path: *Windows Components\Event Log Service\System* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_FileLogAccess_5** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. You must set both "configure log access" policy settings for this log in order to affect the both modern and legacy tools. + +If you enable this policy setting, only those users matching the security descriptor can access the log. + +If you disable this policy setting, all authenticated users and system services can write, read, or clear this log. + +If you do not configure this policy setting, the previous policy setting configuration remains in effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure log access (legacy)* +- GP name: *Channel_Log_FileLogAccess_5* +- GP path: *Windows Components\Event Log Service\Application* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_FileLogAccess_6** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. You cannot configure write permissions for this log. + +If you enable this policy setting, only those users whose security descriptor matches the configured specified value can access the log. + +If you disable this policy setting, only system software and administrators can read or clear this log. + +If you do not configure this policy setting, the previous policy setting configuration remains in effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure log access (legacy)* +- GP name: *Channel_Log_FileLogAccess_6* +- GP path: *Windows Components\Event Log Service\Security* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_FileLogAccess_7** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. You must set both "configure log access" policy settings for this log in order to affect the both modern and legacy tools. + +If you enable this policy setting, only those users matching the security descriptor can access the log. + +If you disable this policy setting, all authenticated users and system services can write, read, or clear this log. + +If you do not configure this policy setting, the previous policy setting configuration remains in effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure log access (legacy)* +- GP name: *Channel_Log_FileLogAccess_7* +- GP path: *Windows Components\Event Log Service\Setup* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_FileLogAccess_8** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the security descriptor to use for the log using the Security Descriptor Definition Language (SDDL) string. + +If you enable this policy setting, only users whose security descriptor matches the configured value can access the log. + +If you disable this policy setting, only system software and administrators can write or clear this log, and any authenticated user can read events from it. + +If you do not configure this policy setting, the previous policy setting configuration remains in effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Configure log access (legacy)* +- GP name: *Channel_Log_FileLogAccess_8* +- GP path: *Windows Components\Event Log Service\System* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_Retention_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Event Log behavior when the log file reaches its maximum size. + +If you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost. + +If you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events. + +Note: Old events may or may not be retained according to the "Backup log automatically when full" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Control Event Log behavior when the log file reaches its maximum size* +- GP name: *Channel_Log_Retention_2* +- GP path: *Windows Components\Event Log Service\Security* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_Retention_3** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Event Log behavior when the log file reaches its maximum size. + +If you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost. + +If you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events. + +Note: Old events may or may not be retained according to the "Backup log automatically when full" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Control Event Log behavior when the log file reaches its maximum size* +- GP name: *Channel_Log_Retention_3* +- GP path: *Windows Components\Event Log Service\Setup* +- GP ADMX file name: *EventLog.admx* + + + +
    + + +**ADMX_EventLog/Channel_Log_Retention_4** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Event Log behavior when the log file reaches its maximum size. + +If you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost. + +If you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events. + +Note: Old events may or may not be retained according to the "Backup log automatically when full" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Control Event Log behavior when the log file reaches its maximum size* +- GP name: *Channel_Log_Retention_4* +- GP path: *Windows Components\Event Log Service\System* +- GP ADMX file name: *EventLog.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 1d464ea3686bdfa9eb7f09facedade47ae51ebd4 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 1 Dec 2020 15:01:48 -0800 Subject: [PATCH 103/958] Added SettingSync and Programs policies --- windows/client-management/mdm/TOC.md | 2 + .../mdm/policies-in-policy-csp-admx-backed.md | 16 + .../policy-configuration-service-provider.md | 58 ++ .../mdm/policy-csp-admx-programs.md | 568 ++++++++++++++ .../mdm/policy-csp-admx-settingsync.md | 706 ++++++++++++++++++ 5 files changed, 1350 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-programs.md create mode 100644 windows/client-management/mdm/policy-csp-admx-settingsync.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 5bfb5277ba..639e9356c0 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -213,12 +213,14 @@ #### [ADMX_PeerToPeerCaching](policy-csp-admx-peertopeercaching.md) #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) +#### [ADMX_Programs](policy-csp-admx-programs.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) #### [ADMX_Scripts](policy-csp-admx-scripts.md) #### [ADMX_sdiageng](policy-csp-admx-sdiageng.md) #### [ADMX_Securitycenter](policy-csp-admx-securitycenter.md) #### [ADMX_Sensors](policy-csp-admx-sensors.md) #### [ADMX_Servicing](policy-csp-admx-servicing.md) +#### [ADMX_SettingSync](policy-csp-admx-settingsync.md) #### [ADMX_SharedFolders](policy-csp-admx-sharedfolders.md) #### [ADMX_Sharing](policy-csp-admx-sharing.md) #### [ADMX_ShellCommandPromptRegEditTools](policy-csp-admx-shellcommandpromptregedittools.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index a866b983b9..b04813d319 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -482,6 +482,13 @@ ms.date: 10/08/2020 - [ADMX_PowerShellExecutionPolicy/EnableScripts](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enablescripts) - [ADMX_PowerShellExecutionPolicy/EnableTranscripting](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enabletranscripting) - [ADMX_PowerShellExecutionPolicy/EnableUpdateHelpDefaultSourcePath](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enableupdatehelpdefaultsourcepath) +- [ADMX_Programs/NoDefaultPrograms](./policy-csp-admx-programs.md#admx-programs-nodefaultprograms) +- [ADMX_Programs/NoGetPrograms](./policy-csp-admx-programs.md#admx-programs-nogetprograms) +- [ADMX_Programs/NoInstalledUpdates](./policy-csp-admx-programs.md#admx-programs-noinstalledupdates) +- [ADMX_Programs/NoProgramsAndFeatures](./policy-csp-admx-programs.md#admx-programs-noprogramsandfeatures) +- [ADMX_Programs/NoProgramsCPL](./policy-csp-admx-programs.md#admx-programs-noprogramscpl) +- [ADMX_Programs/NoWindowsFeatures](./policy-csp-admx-programs.md#admx-programs-nowindowsfeatures) +- [ADMX_Programs/NoWindowsMarketplace](./policy-csp-admx-programs.md#admx-programs-nowindowsmarketplace) - [ADMX_Reliability/EE_EnablePersistentTimeStamp](./policy-csp-admx-reliability.md#admx-reliability-ee-enablepersistenttimestamp) - [ADMX_Reliability/PCH_ReportShutdownEvents](./policy-csp-admx-reliability.md#admx-reliability-pch-reportshutdownevents) - [ADMX_Reliability/ShutdownEventTrackerStateFile](./policy-csp-admx-reliability.md#admx-reliability-shutdowneventtrackerstatefile) @@ -508,6 +515,15 @@ ms.date: 10/08/2020 - [ADMX_Sensors/DisableSensors_1](./policy-csp-admx-sensors.md#admx-sensors-disablesensors-1) - [ADMX_Sensors/DisableSensors_2](./policy-csp-admx-sensors.md#admx-sensors-disablesensors-2) - [ADMX_Servicing/Servicing](./policy-csp-admx-servicing.md#admx-servicing-servicing) +- [ADMX_SettingSync/DisableAppSyncSettingSync](./policy-csp-admx-settingsync.md#admx-settingsync-disableappsyncsettingsync) +- [ADMX_SettingSync/DisableApplicationSettingSync](./policy-csp-admx-settingsync.md#admx-settingsync-disableapplicationsettingsync) +- [ADMX_SettingSync/DisableCredentialsSettingSync](./policy-csp-admx-settingsync.md#admx-settingsync-disablecredentialssettingsync) +- [ADMX_SettingSync/DisableDesktopThemeSettingSync](./policy-csp-admx-settingsync.md#admx-settingsync-disabledesktopthemesettingsync) +- [ADMX_SettingSync/DisablePersonalizationSettingSync](./policy-csp-admx-settingsync.md#admx-settingsync-disablepersonalizationsettingsync) +- [ADMX_SettingSync/DisableSettingSync](./policy-csp-admx-settingsync.md#admx-settingsync-disablesettingsync) +- [ADMX_SettingSync/DisableStartLayoutSettingSync](./policy-csp-admx-settingsync.md#admx-settingsync-disablestartlayoutsettingsync) +- [ADMX_SettingSync/DisableSyncOnPaidNetwork](./policy-csp-admx-settingsync.md#admx-settingsync-disablesynconpaidnetwork) +- [ADMX_SettingSync/DisableWindowsSettingSync](./policy-csp-admx-settingsync.md#admx-settingsync-disablewindowssettingsync) - [ADMX_SharedFolders/PublishDfsRoots](./policy-csp-admx-sharedfolders.md#admx-sharedfolders-publishdfsroots) - [ADMX_SharedFolders/PublishSharedFolders](./policy-csp-admx-sharedfolders.md#admx-sharedfolders-publishsharedfolders) - [ADMX_Sharing/NoInplaceSharing](./policy-csp-admx-sharing.md#admx-sharing-noinplacesharing) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 4a90062fe4..8a993d4783 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1740,6 +1740,32 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_Programs policies + +
    +
    + ADMX_Programs/NoDefaultPrograms +
    +
    + ADMX_Programs/NoGetPrograms +
    +
    + ADMX_Programs/NoInstalledUpdates +
    +
    + ADMX_Programs/NoProgramsAndFeatures +
    +
    + ADMX_Programs/NoProgramsCPL +
    +
    + ADMX_Programs/NoWindowsFeatures +
    +
    + ADMX_Programs/NoWindowsMarketplace +
    +
    + ### ADMX_Reliability policies
    @@ -1848,6 +1874,38 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_SettingSync policies + +
    +
    + ADMX_SettingSync/DisableAppSyncSettingSync +
    +
    + ADMX_SettingSync/DisableApplicationSettingSync +
    +
    + ADMX_SettingSync/DisableCredentialsSettingSync +
    +
    + ADMX_SettingSync/DisableDesktopThemeSettingSync +
    +
    + ADMX_SettingSync/DisablePersonalizationSettingSync +
    +
    + ADMX_SettingSync/DisableSettingSync +
    +
    + ADMX_SettingSync/DisableStartLayoutSettingSync +
    +
    + ADMX_SettingSync/DisableSyncOnPaidNetwork +
    +
    + ADMX_SettingSync/DisableWindowsSettingSync +
    +
    + ### ADMX_SharedFolders policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-programs.md b/windows/client-management/mdm/policy-csp-admx-programs.md new file mode 100644 index 0000000000..97697da52b --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-programs.md @@ -0,0 +1,568 @@ +--- +title: Policy CSP - ADMX_Programs +description: Policy CSP - ADMX_Programs +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/01/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Programs +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Programs policies + +
    +
    + ADMX_Programs/NoDefaultPrograms +
    +
    + ADMX_Programs/NoGetPrograms +
    +
    + ADMX_Programs/NoInstalledUpdates +
    +
    + ADMX_Programs/NoProgramsAndFeatures +
    +
    + ADMX_Programs/NoProgramsCPL +
    +
    + ADMX_Programs/NoWindowsFeatures +
    +
    + ADMX_Programs/NoWindowsMarketplace +
    +
    + + +
    + + +**ADMX_Programs/NoDefaultPrograms** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This setting removes the Set Program Access and Defaults page from the Programs Control Panel. As a result, users cannot view or change the associated page. + +The Set Program Access and Computer Defaults page allows administrators to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as specify the programs that are accessible from the Start menu, desktop, and other locations. + +If this setting is disabled or not configured, the Set Program Access and Defaults button is available to all users. + +This setting does not prevent users from using other tools and methods to change program access or defaults. + +This setting does not prevent the Default Programs icon from appearing on the Start menu. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide "Set Program Access and Computer Defaults" page* +- GP name: *NoDefaultPrograms* +- GP path: *Control Panel\Programs* +- GP ADMX file name: *Programs.admx* + + + +
    + + +**ADMX_Programs/NoGetPrograms** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from viewing or installing published programs from the network. + +This setting prevents users from accessing the "Get Programs" page from the Programs Control Panel in Category View, Programs and Features in Classic View and the "Install a program from the network" task. The "Get Programs" page lists published programs and provides an easy way to install them. + +Published programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically, system administrators publish programs to notify users of their availability, to recommend their use, or to enable users to install them without having to search for installation files. + +If this setting is enabled, users cannot view the programs that have been published by the system administrator, and they cannot use the "Get Programs" page to install published programs. Enabling this feature does not prevent users from installing programs by using other methods. Users will still be able to view and installed assigned (partially installed) programs that are offered on the desktop or on the Start menu. + +If this setting is disabled or is not configured, the "Install a program from the network" task to the "Get Programs" page will be available to all users. + +> [!NOTE] +> If the "Hide Programs Control Panel" setting is enabled, this setting is ignored. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide "Get Programs" page* +- GP name: *NoGetPrograms* +- GP path: *Control Panel\Programs* +- GP ADMX file name: *Programs.admx* + + + +
    + + +**ADMX_Programs/NoInstalledUpdates** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This setting prevents users from accessing "Installed Updates" page from the "View installed updates" task. + +"Installed Updates" allows users to view and uninstall updates currently installed on the computer. The updates are often downloaded directly from Windows Update or from various program publishers. + +If this setting is disabled or not configured, the "View installed updates" task and the "Installed Updates" page will be available to all users. + +This setting does not prevent users from using other tools and methods to install or uninstall programs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide "Installed Updates" page* +- GP name: *NoInstalledUpdates* +- GP path: *Control Panel\Programs* +- GP ADMX file name: *Programs.admx* + + + +
    + + +**ADMX_Programs/NoProgramsAndFeatures** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This setting prevents users from accessing "Programs and Features" to view, uninstall, change, or repair programs that are currently installed on the computer. + +If this setting is disabled or not configured, "Programs and Features" will be available to all users. + +This setting does not prevent users from using other tools and methods to view or uninstall programs. It also does not prevent users from linking to related Programs Control Panel Features including Windows Features, Get Programs, or Windows Marketplace. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide "Programs and Features" page* +- GP name: *NoProgramsAndFeatures* +- GP path: *Control Panel\Programs* +- GP ADMX file name: *Programs.admx* + + + +
    + + +**ADMX_Programs/NoProgramsCPL** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View. + +The Programs Control Panel allows users to uninstall, change, and repair programs, enable and disable Windows Features, set program defaults, view installed updates, and purchase software from Windows Marketplace. Programs published or assigned to the user by the system administrator also appear in the Programs Control Panel. + +If this setting is disabled or not configured, the Programs Control Panel in Category View and Programs and Features in Classic View will be available to all users. + +When enabled, this setting takes precedence over the other settings in this folder. + +This setting does not prevent users from using other tools and methods to install or uninstall programs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide the Programs Control Panel* +- GP name: *NoProgramsCPL* +- GP path: *Control Panel\Programs* +- GP ADMX file name: *Programs.admx* + + + +
    + + +**ADMX_Programs/NoWindowsFeatures** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This setting prevents users from accessing the "Turn Windows features on or off" task from the Programs Control Panel in Category View, Programs and Features in Classic View, and Get Programs. As a result, users cannot view, enable, or disable various Windows features and services. + +If this setting is disabled or is not configured, the "Turn Windows features on or off" task will be available to all users. + +This setting does not prevent users from using other tools and methods to configure services or enable or disable program components. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide "Windows Features"* +- GP name: *NoWindowsFeatures* +- GP path: *Control Panel\Programs* +- GP ADMX file name: *Programs.admx* + + + +
    + + +**ADMX_Programs/NoWindowsMarketplace** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This setting prevents users from access the "Get new programs from Windows Marketplace" task from the Programs Control Panel in Category View, Programs and Features in Classic View, and Get Programs. + +Windows Marketplace allows users to purchase and/or download various programs to their computer for installation. + +Enabling this feature does not prevent users from navigating to Windows Marketplace using other methods. + +If this feature is disabled or is not configured, the "Get new programs from Windows Marketplace" task link will be available to all users. + +> [!NOTE] +> If the "Hide Programs control Panel" setting is enabled, this setting is ignored. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide "Windows Marketplace"* +- GP name: *NoWindowsMarketplace* +- GP path: *Control Panel\Programs* +- GP ADMX file name: *Programs.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + diff --git a/windows/client-management/mdm/policy-csp-admx-settingsync.md b/windows/client-management/mdm/policy-csp-admx-settingsync.md new file mode 100644 index 0000000000..42b649433b --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-settingsync.md @@ -0,0 +1,706 @@ +--- +title: Policy CSP - ADMX_SettingSync +description: Policy CSP - ADMX_SettingSync +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/01/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_SettingSync +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_SettingSync policies + +
    +
    + ADMX_SettingSync/DisableAppSyncSettingSync +
    +
    + ADMX_SettingSync/DisableApplicationSettingSync +
    +
    + ADMX_SettingSync/DisableCredentialsSettingSync +
    +
    + ADMX_SettingSync/DisableDesktopThemeSettingSync +
    +
    + ADMX_SettingSync/DisablePersonalizationSettingSync +
    +
    + ADMX_SettingSync/DisableSettingSync +
    +
    + ADMX_SettingSync/DisableStartLayoutSettingSync +
    +
    + ADMX_SettingSync/DisableSyncOnPaidNetwork +
    +
    + ADMX_SettingSync/DisableWindowsSettingSync +
    +
    + + +
    + + +**ADMX_SettingSync/DisableAppSyncSettingSync** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevent the "AppSync" group from syncing to and from this PC. This turns off and disables the "AppSync" group on the "sync your settings" page in PC settings. + +If you enable this policy setting, the "AppSync" group will not be synced. + +Use the option "Allow users to turn app syncing on" so that syncing it turned off by default but not disabled. + +If you do not set or disable this setting, syncing of the "AppSync" group is on by default and configurable by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not sync Apps* +- GP name: *DisableAppSyncSettingSync* +- GP path: *Windows Components\Sync your settings* +- GP ADMX file name: *SettingSync.admx* + + + +
    + + +**ADMX_SettingSync/DisableApplicationSettingSync** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevent the "app settings" group from syncing to and from this PC. This turns off and disables the "app settings" group on the "sync your settings" page in PC settings. + +If you enable this policy setting, the "app settings" group will not be synced. + +Use the option "Allow users to turn app settings syncing on" so that syncing it turned off by default but not disabled. + +If you do not set or disable this setting, syncing of the "app settings" group is on by default and configurable by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not sync app settings* +- GP name: *DisableApplicationSettingSync* +- GP path: *Windows Components\Sync your settings* +- GP ADMX file name: *SettingSync.admx* + + + +
    + + +**ADMX_SettingSync/DisableCredentialsSettingSync** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevent the "passwords" group from syncing to and from this PC. This turns off and disables the "passwords" group on the "sync your settings" page in PC settings. + +If you enable this policy setting, the "passwords" group will not be synced. + +Use the option "Allow users to turn passwords syncing on" so that syncing it turned off by default but not disabled. + +If you do not set or disable this setting, syncing of the "passwords" group is on by default and configurable by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not sync passwords* +- GP name: *DisableCredentialsSettingSync* +- GP path: *Windows Components\Sync your settings* +- GP ADMX file name: *SettingSync.admx* + + + +
    + + +**ADMX_SettingSync/DisableDesktopThemeSettingSync** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevent the "desktop personalization" group from syncing to and from this PC. This turns off and disables the "desktop personalization" group on the "sync your settings" page in PC settings. + +If you enable this policy setting, the "desktop personalization" group will not be synced. + +Use the option "Allow users to turn desktop personalization syncing on" so that syncing it turned off by default but not disabled. + +If you do not set or disable this setting, syncing of the "desktop personalization" group is on by default and configurable by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not sync desktop personalization* +- GP name: *DisableDesktopThemeSettingSync* +- GP path: *Windows Components\Sync your settings* +- GP ADMX file name: *SettingSync.admx* + + + +
    + + +**ADMX_SettingSync/DisablePersonalizationSettingSync** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevent the "personalize" group from syncing to and from this PC. This turns off and disables the "personalize" group on the "sync your settings" page in PC settings. + +If you enable this policy setting, the "personalize" group will not be synced. + +Use the option "Allow users to turn personalize syncing on" so that syncing it turned off by default but not disabled. + +If you do not set or disable this setting, syncing of the "personalize" group is on by default and configurable by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not sync personalize* +- GP name: *DisablePersonalizationSettingSync* +- GP path: *Windows Components\Sync your settings* +- GP ADMX file name: *SettingSync.admx* + + + +
    + + +**ADMX_SettingSync/DisableSettingSync** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevent syncing to and from this PC. This turns off and disables the "sync your settings" switch on the "sync your settings" page in PC Settings. + +If you enable this policy setting, "sync your settings" will be turned off, and none of the "sync your setting" groups will be synced on this PC. + +Use the option "Allow users to turn syncing on" so that syncing it turned off by default but not disabled. + +If you do not set or disable this setting, "sync your settings" is on by default and configurable by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not sync* +- GP name: *DisableSettingSync* +- GP path: *Windows Components\Sync your settings* +- GP ADMX file name: *SettingSync.admx* + + + +
    + + +**ADMX_SettingSync/DisableStartLayoutSettingSync** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevent the "Start layout" group from syncing to and from this PC. This turns off and disables the "Start layout" group on the "sync your settings" page in PC settings. + +If you enable this policy setting, the "Start layout" group will not be synced. + +Use the option "Allow users to turn start syncing on" so that syncing is turned off by default but not disabled. + +If you do not set or disable this setting, syncing of the "Start layout" group is on by default and configurable by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not sync start settings* +- GP name: *DisableStartLayoutSettingSync* +- GP path: *Windows Components\Sync your settings* +- GP ADMX file name: *SettingSync.admx* + + + +
    + + +**ADMX_SettingSync/DisableSyncOnPaidNetwork** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevent syncing to and from this PC when on metered Internet connections. This turns off and disables "sync your settings on metered connections" switch on the "sync your settings" page in PC Settings. + +If you enable this policy setting, syncing on metered connections will be turned off, and no syncing will take place when this PC is on a metered connection. + +If you do not set or disable this setting, syncing on metered connections is configurable by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not sync on metered connections* +- GP name: *DisableSyncOnPaidNetwork* +- GP path: *Windows Components\Sync your settings* +- GP ADMX file name: *SettingSync.admx* + + + +
    + + +**ADMX_SettingSync/DisableWindowsSettingSync** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevent the "Other Windows settings" group from syncing to and from this PC. This turns off and disables the "Other Windows settings" group on the "sync your settings" page in PC settings. + +If you enable this policy setting, the "Other Windows settings" group will not be synced. + +Use the option "Allow users to turn other Windows settings syncing on" so that syncing it turned off by default but not disabled. + +If you do not set or disable this setting, syncing of the "Other Windows settings" group is on by default and configurable by the user. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not sync other Windows settings* +- GP name: *DisableWindowsSettingSync* +- GP path: *Windows Components\Sync your settings* +- GP ADMX file name: *SettingSync.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From b2bd84c7a89fc81a53887155b9036e1502e29ce1 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Wed, 2 Dec 2020 21:39:51 +0500 Subject: [PATCH 104/958] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index fd03a08fc9..6855688598 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -652,7 +652,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 10. Select **Enroll to Windows Hello for Business, otherwise fail (Windows 10 and later)** from the **Key storage provider (KSP)** list. 11. Next to **Subject name format**, type **CN={{OnPrem_Distinguished_Name}}** to make the on-premises distinguished name the subject of the issued certificate. 12. Specify **User Principal Name (UPN)** as a **Subject Alternative Name** parameter. Set its value as {{UserPrincipalName}}. -13. Refer to the "Configure Certificate Templates on NDES" task for how you configured the **AADJ WHFB Authentication** certificate template in the registry. Select the appropriate combination of key usages from the **Key Usages** list that map to configured NDES template in the registry. In this example, the **AADJ WHFB Authentication** certificate template was added to the **SignatureTemplate** registry value name. The **Key usage** that maps to that registry value name is **Digital Signature**. +13. Refer to the "Configure Certificate Templates on NDES" task for how you configured the **AADJ WHFB Authentication** certificate template in the registry. Select the appropriate combination of key usages from the **Key Usages** list that map to the configured NDES template in the registry. In this example, the **AADJ WHFB Authentication** certificate template was added to the **SignatureTemplate** registry value name. The **Key usage** that maps to that registry value name is **Digital Signature**. 14. Select a previously configured **Trusted certificate** profile that matches the root certificate of the issuing certificate authority as a root certificate for the profile. 15. Under **Extended key usage**, type **Smart Card Logon** under **Name**. Type **1.3.6.1.4.1.311.20.2.2** under **Object identifier**. Click **Add**. 16. Type a percentage (without the percent sign) next to **Renewal Threshold** to determine when the certificate should attempt to renew. The recommended value is **20**. From 2b6d30b03dbab94a9086e0569c22e3d06db1fe39 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Wed, 2 Dec 2020 21:40:06 +0500 Subject: [PATCH 105/958] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 6855688598..03d0b013d2 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -667,7 +667,7 @@ Sign-in a workstation with access equivalent to a _domain user_. 1. Sign-in to the [Microsoft Endpoint Manager admin center](https://endpoint.microsoft.com/). 2. Select **Devices**, and then click **Configuration Profiles**. 3. Click **WHFB Certificate Enrollment**. -4. Select **Properties**, click **Edit** next to the **Assignments** section. +4. Select **Properties**, and then click **Edit** next to the **Assignments** section. 5. In the **Assignments** pane, select **Selected Groups** from the **Assign to** list. Click **Select groups to include**. ![WHFB SCEP Profile Assignment](images/aadjcert/profile04.png) 6. Select the **AADJ WHFB Certificate Users** group. Click **Select**. From b3a265a4f386127da605d632a60240c23a048c23 Mon Sep 17 00:00:00 2001 From: MaratMussabekov <48041687+MaratMussabekov@users.noreply.github.com> Date: Wed, 2 Dec 2020 21:40:14 +0500 Subject: [PATCH 106/958] Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-aadj-sso-cert.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md index 03d0b013d2..95638c7735 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-cert.md @@ -659,7 +659,7 @@ Sign-in a workstation with access equivalent to a _domain user_. ![WHFB SCEP certificate Profile EKUs](images/aadjcert/profile03.png) 17. Under **SCEP Server URLs**, type the fully qualified external name of the Azure AD Application proxy you configured. Append to the name **/certsrv/mscep/mscep.dll**. For example, https://ndes-mtephendemo.msappproxy.net/certsrv/mscep/mscep.dll. Click **Add**. Repeat this step for each additional NDES Azure AD Application Proxy you configured to issue Windows Hello for Business certificates. Microsoft Intune round-robin load balances requests among the URLs listed in the SCEP certificate profile. 18. Click **Next**. -19. Click **Next** several times to skip the **Scope tags**, **Assignments** and **Applicability Rules** steps of the wizard and click **Create**. +19. Click **Next** several times to skip the **Scope tags**, **Assignments**, and **Applicability Rules** steps of the wizard and click **Create**. ### Assign Group to the WHFB Certificate Enrollment Certificate Profile Sign-in a workstation with access equivalent to a _domain user_. From 09626aef250487ee350be0f3eb43b3fcf6401d64 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Wed, 2 Dec 2020 10:17:57 -0800 Subject: [PATCH 107/958] Update filter-origin-documentation.md --- .../windows-firewall/filter-origin-documentation.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 9f32d988b7..931120538f 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -1,5 +1,5 @@ --- -title: Filter Origin Documentation (Audit Log Improvements) +title: Filter Origin (Audit Log Improvements) description: Filter Origin Documentation (Audit Log Improvements) ms.reviewer: ms.author: v-bshilpa @@ -15,7 +15,7 @@ ms.collection: ms.topic: troubleshooting --- -# Filter Origin Documentation (Audit Log Improvements) +# Filter Origin (Audit Log Improvements) Debugging packet drops is a continuous issue to Windows customers. In the past, customers had limited information about packet drops. From b934aa913d7a799d5f26a20114ef0bbdd254db52 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 2 Dec 2020 12:12:37 -0800 Subject: [PATCH 108/958] Added ADMX_MicrosoftDefenderAntivirus policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 93 ++ .../policy-configuration-service-provider.md | 284 ++++ ...cy-csp-admx-microsoftdefenderantivirus.md} | 1407 +++-------------- 4 files changed, 569 insertions(+), 1216 deletions(-) rename windows/client-management/mdm/{policy-csp-admx-windowsdefender.md => policy-csp-admx-microsoftdefenderantivirus.md} (78%) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 639e9356c0..d30cc12164 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -202,6 +202,7 @@ #### [ADMX_Kerberos](policy-csp-admx-kerberos.md) #### [ADMX_LanmanServer](policy-csp-admx-lanmanserver.md) #### [ADMX_LinkLayerTopologyDiscovery](policy-csp-admx-linklayertopologydiscovery.md) +#### [ADMX_MicrosoftDefenderAntivirus](policy-csp-admx-microsoftdefenderantivirus.md) #### [ADMX_MMC](policy-csp-admx-mmc.md) #### [ADMX_MMCSnapins](policy-csp-admx-mmcsnapins.md) #### [ADMX_MSAPolicy](policy-csp-admx-msapolicy.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index b04813d319..f2b1c25bd5 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -232,6 +232,99 @@ ms.date: 10/08/2020 - [ADMX_LanmanServer/Pol_HonorCipherSuiteOrder](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-honorciphersuiteorder) - [ADMX_LinkLayerTopologyDiscovery/LLTD_EnableLLTDIO](./policy-csp-admx-linklayertopologydiscovery.md#admx-linklayertopologydiscovery-lltd-enablelltdio) - [ADMX_LinkLayerTopologyDiscovery/LLTD_EnableRspndr](./policy-csp-admx-linklayertopologydiscovery.md#admx-linklayertopologydiscovery-lltd-enablerspndr) +- [ADMX_MicrosoftDefenderAntivirus/AllowFastServiceStartup](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-allowfastservicestartup) +- [ADMX_MicrosoftDefenderAntivirus/DisableAntiSpywareDefender](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disableantispywaredefender) +- [ADMX_MicrosoftDefenderAntivirus/DisableAutoExclusions](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disableautoexclusions) +- [ADMX_MicrosoftDefenderAntivirus/DisableBlockAtFirstSeen](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disableblockatfirstseen) +- [ADMX_MicrosoftDefenderAntivirus/DisableLocalAdminMerge](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disablelocaladminmerge) +- [ADMX_MicrosoftDefenderAntivirus/DisableRealtimeMonitoring](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disablerealtimemonitoring) +- [ADMX_MicrosoftDefenderAntivirus/DisableRoutinelyTakingAction](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disableroutinelytakingaction) +- [ADMX_MicrosoftDefenderAntivirus/Exclusions_Extensions](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exclusions-extensions) +- [ADMX_MicrosoftDefenderAntivirus/Exclusions_Paths](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exclusions-paths) +- [ADMX_MicrosoftDefenderAntivirus/Exclusions_Processes](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exclusions-processes) +- [ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_ASROnlyExclusions](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exploitguard-asr-asronlyexclusions) +- [ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_Rules](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exploitguard-asr-rules) +- [ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_AllowedApplications](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exploitguard-controlledfolderaccess-allowedapplications) +- [ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_ProtectedFolders](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exploitguard-controlledfolderaccess-protectedfolders) +- [ADMX_MicrosoftDefenderAntivirus/MpEngine_EnableFileHashComputation](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-mpengine-enablefilehashcomputation) +- [ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_DisableSignatureRetirement](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-nis-consumers-ips-disablesignatureretirement) +- [ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-nis-consumers-ips-sku-differentiation-signature-set-guid) +- [ADMX_MicrosoftDefenderAntivirus/Nis_DisableProtocolRecognition](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-nis-disableprotocolrecognition) +- [ADMX_MicrosoftDefenderAntivirus/ProxyBypass](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-proxybypass) +- [ADMX_MicrosoftDefenderAntivirus/ProxyPacUrl](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-proxypacurl) +- [ADMX_MicrosoftDefenderAntivirus/ProxyServer](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-proxyserver) +- [ADMX_MicrosoftDefenderAntivirus/Quarantine_LocalSettingOverridePurgeItemsAfterDelay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-quarantine-localsettingoverridepurgeitemsafterdelay) +- [ADMX_MicrosoftDefenderAntivirus/Quarantine_PurgeItemsAfterDelay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-quarantine-purgeitemsafterdelay) +- [ADMX_MicrosoftDefenderAntivirus/RandomizeScheduleTaskTimes](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-randomizescheduletasktimes) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableBehaviorMonitoring](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-disablebehaviormonitoring) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableIOAVProtection](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-disableioavprotection) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableOnAccessProtection](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-disableonaccessprotection) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableRawWriteNotification](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-disablerawwritenotification) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableScanOnRealtimeEnable](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-disablescanonrealtimeenable) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_IOAVMaxSize](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-ioavmaxsize) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisablebehaviormonitoring) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisableioavprotection) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisableonaccessprotection) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisablerealtimemonitoring) +- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverriderealtimescandirection) +- [ADMX_MicrosoftDefenderAntivirus/Remediation_LocalSettingOverrideScan_ScheduleTime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-remediation-localsettingoverridescan-scheduletime) +- [ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleDay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-remediation-scan-scheduleday) +- [ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleTime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-remediation-scan-scheduletime) +- [ADMX_MicrosoftDefenderAntivirus/Reporting_AdditionalActionTimeout](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-additionalactiontimeout) +- [ADMX_MicrosoftDefenderAntivirus/Reporting_CriticalFailureTimeout](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-criticalfailuretimeout) +- [ADMX_MicrosoftDefenderAntivirus/Reporting_DisableEnhancedNotifications](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-disableenhancednotifications) +- [ADMX_MicrosoftDefenderAntivirus/Reporting_DisablegenericrePorts](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-disablegenericreports) +- [ADMX_MicrosoftDefenderAntivirus/Reporting_NonCriticalTimeout](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-noncriticaltimeout) +- [ADMX_MicrosoftDefenderAntivirus/Reporting_RecentlyCleanedTimeout](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-recentlycleanedtimeout) +- [ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingComponents](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-wpptracingcomponents) +- [ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingLevel](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-wpptracinglevel) +- [ADMX_MicrosoftDefenderAntivirus/Scan_AllowPause](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-allowpause) +- [ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxDepth](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-archivemaxdepth) +- [ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxSize](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-archivemaxsize) +- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableArchiveScanning](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablearchivescanning) +- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableEmailScanning](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disableemailscanning) +- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableHeuristics](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disableheuristics) +- [ADMX_MicrosoftDefenderAntivirus/Scan_DisablePackedExeScanning](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablepackedexescanning) +- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableRemovableDriveScanning](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disableremovabledrivescanning) +- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableReparsePointScanning](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablereparsepointscanning) +- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableRestorePoint](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablerestorepoint) +- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningMappedNetworkDrivesForFullScan](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablescanningmappednetworkdrivesforfullscan) +- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningNetworkFiles](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablescanningnetworkfiles) +- [ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideAvgCPULoadFactor](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-localsettingoverrideavgcpuloadfactor) +- [ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScanParameters](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-localsettingoverridescanparameters) +- [ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleDay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-localsettingoverridescheduleday) +- [ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleQuickScantime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-localsettingoverrideschedulequickscantime) +- [ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleTime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-localsettingoverridescheduletime) +- [ADMX_MicrosoftDefenderAntivirus/Scan_LowCpuPriority](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-lowcpupriority) +- [ADMX_MicrosoftDefenderAntivirus/Scan_MissedScheduledScanCountBeforeCatchup](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-missedscheduledscancountbeforecatchup) +- [ADMX_MicrosoftDefenderAntivirus/Scan_PurgeItemsAfterDelay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-purgeitemsafterdelay) +- [ADMX_MicrosoftDefenderAntivirus/Scan_QuickScanInterval](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-quickscaninterval) +- [ADMX_MicrosoftDefenderAntivirus/Scan_ScanOnlyIfIdle](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-scanonlyifidle) +- [ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleDay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-scheduleday) +- [ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleTime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-scheduletime) +- [ADMX_MicrosoftDefenderAntivirus/ServiceKeepAlive](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-servicekeepalive) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ASSignatureDue](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-assignaturedue) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_AVSignatureDue](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-avsignaturedue) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DefinitionUpdateFileSharesSources](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-definitionupdatefilesharessources) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScanOnUpdate](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-disablescanonupdate) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScheduledSignatureUpdateonBattery](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-disablescheduledsignatureupdateonbattery) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableUpdateOnStartupWithoutEngine](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-disableupdateonstartupwithoutengine) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_FallbackOrder](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-fallbackorder) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ForceUpdateFromMU](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-forceupdatefrommu) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_RealtimeSignatureDelivery](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-realtimesignaturedelivery) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleDay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-scheduleday) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleTime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-scheduletime) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SharedSignaturesLocation](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-sharedsignatureslocation) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureDisableNotification](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-signaturedisablenotification) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureUpdateCatchupInterval](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-signatureupdatecatchupinterval) +- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_UpdateOnStartup](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-updateonstartup) +- [ADMX_MicrosoftDefenderAntivirus/SpynetReporting](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-spynetreporting) +- [ADMX_MicrosoftDefenderAntivirus/Spynet_LocalSettingOverrideSpynetReporting](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-spynet-localsettingoverridespynetreporting) +- [ADMX_MicrosoftDefenderAntivirus/Threats_ThreatIdDefaultAction](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-threats-threatiddefaultaction) +- [ADMX_MicrosoftDefenderAntivirus/UX_Configuration_CustomDefaultActionToastString](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-ux-configuration-customdefaultactiontoaststring) +- [ADMX_MicrosoftDefenderAntivirus/UX_Configuration_Notification_Suppress](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-ux-configuration-notification-suppress) +- [ADMX_MicrosoftDefenderAntivirus/UX_Configuration_SuppressRebootNotification](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-ux-configuration-suppressrebootnotification) +- [ADMX_MicrosoftDefenderAntivirus/UX_Configuration_UILockdown](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-ux-configuration-uilockdown) - [ADMX_MMC/MMC_ActiveXControl](./policy-csp-admx-mmc.md#admx-mmc-mmc-activexcontrol) - [ADMX_MMC/MMC_ExtendView](./policy-csp-admx-mmc.md#admx-mmc-mmc-extendview) - [ADMX_MMC/MMC_LinkToWeb](./policy-csp-admx-mmc.md#admx-mmc-mmc-linktoweb) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 8a993d4783..1e3e29a308 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -940,6 +940,290 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_MicrosoftDefenderAntivirus policies + +
    +
    + ADMX_MicrosoftDefenderAntivirus/AllowFastServiceStartup +
    +
    + ADMX_MicrosoftDefenderAntivirus/DisableAntiSpywareDefender +
    +
    + ADMX_MicrosoftDefenderAntivirus/DisableAutoExclusions +
    +
    + ADMX_MicrosoftDefenderAntivirus/DisableBlockAtFirstSeen +
    +
    + ADMX_MicrosoftDefenderAntivirus/DisableLocalAdminMerge +
    +
    + ADMX_MicrosoftDefenderAntivirus/DisableRealtimeMonitoring +
    +
    + ADMX_MicrosoftDefenderAntivirus/DisableRoutinelyTakingAction +
    +
    + ADMX_MicrosoftDefenderAntivirus/Exclusions_Extensions +
    +
    + ADMX_MicrosoftDefenderAntivirus/Exclusions_Paths +
    +
    + ADMX_MicrosoftDefenderAntivirus/Exclusions_Processes +
    +
    + ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_ASROnlyExclusions +
    +
    + ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_Rules +
    +
    + ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_AllowedApplications +
    +
    + ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_ProtectedFolders +
    +
    + ADMX_MicrosoftDefenderAntivirus/MpEngine_EnableFileHashComputation +
    +
    + ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_DisableSignatureRetirement +
    +
    + ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid +
    +
    + ADMX_MicrosoftDefenderAntivirus/Nis_DisableProtocolRecognition +
    +
    + ADMX_MicrosoftDefenderAntivirus/ProxyBypass +
    +
    + ADMX_MicrosoftDefenderAntivirus/ProxyPacUrl +
    +
    + ADMX_MicrosoftDefenderAntivirus/ProxyServer +
    +
    + ADMX_MicrosoftDefenderAntivirus/Quarantine_LocalSettingOverridePurgeItemsAfterDelay +
    +
    + ADMX_MicrosoftDefenderAntivirus/Quarantine_PurgeItemsAfterDelay +
    +
    + ADMX_MicrosoftDefenderAntivirus/RandomizeScheduleTaskTimes +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableBehaviorMonitoring +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableIOAVProtection +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableOnAccessProtection +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableRawWriteNotification +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableScanOnRealtimeEnable +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_IOAVMaxSize +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring +
    +
    + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection +
    +
    + ADMX_MicrosoftDefenderAntivirus/Remediation_LocalSettingOverrideScan_ScheduleTime +
    +
    + ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleDay +
    +
    + ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleTime +
    +
    + ADMX_MicrosoftDefenderAntivirus/Reporting_AdditionalActionTimeout +
    +
    + ADMX_MicrosoftDefenderAntivirus/Reporting_CriticalFailureTimeout +
    +
    + ADMX_MicrosoftDefenderAntivirus/Reporting_DisableEnhancedNotifications +
    +
    + ADMX_MicrosoftDefenderAntivirus/Reporting_DisablegenericrePorts +
    +
    + ADMX_MicrosoftDefenderAntivirus/Reporting_NonCriticalTimeout +
    +
    + ADMX_MicrosoftDefenderAntivirus/Reporting_RecentlyCleanedTimeout +
    +
    + ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingComponents +
    +
    + ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingLevel +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_AllowPause +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxDepth +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxSize +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_DisableArchiveScanning +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_DisableEmailScanning +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_DisableHeuristics +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_DisablePackedExeScanning +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_DisableRemovableDriveScanning +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_DisableReparsePointScanning +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_DisableRestorePoint +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningMappedNetworkDrivesForFullScan +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningNetworkFiles +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideAvgCPULoadFactor +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScanParameters +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleDay +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleQuickScantime +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleTime +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_LowCpuPriority +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_MissedScheduledScanCountBeforeCatchup +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_PurgeItemsAfterDelay +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_QuickScanInterval +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_ScanOnlyIfIdle +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleDay +
    +
    + ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleTime +
    +
    + ADMX_MicrosoftDefenderAntivirus/ServiceKeepAlive +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ASSignatureDue +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_AVSignatureDue +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DefinitionUpdateFileSharesSources +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScanOnUpdate +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScheduledSignatureUpdateonBattery +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableUpdateOnStartupWithoutEngine +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_FallbackOrder +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ForceUpdateFromMU +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_RealtimeSignatureDelivery +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleDay +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleTime +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SharedSignaturesLocation +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureDisableNotification +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureUpdateCatchupInterval +
    +
    + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_UpdateOnStartup +
    +
    + ADMX_MicrosoftDefenderAntivirus/SpynetReporting +
    +
    + ADMX_MicrosoftDefenderAntivirus/Spynet_LocalSettingOverrideSpynetReporting +
    +
    + ADMX_MicrosoftDefenderAntivirus/Threats_ThreatIdDefaultAction +
    +
    + ADMX_MicrosoftDefenderAntivirus/UX_Configuration_CustomDefaultActionToastString +
    +
    + ADMX_MicrosoftDefenderAntivirus/UX_Configuration_Notification_Suppress +
    +
    + ADMX_MicrosoftDefenderAntivirus/UX_Configuration_SuppressRebootNotification +
    +
    + ADMX_MicrosoftDefenderAntivirus/UX_Configuration_UILockdown +
    +
    + ### ADMX_MMC policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md similarity index 78% rename from windows/client-management/mdm/policy-csp-admx-windowsdefender.md rename to windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md index 5e550c9817..a582499424 100644 --- a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md +++ b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md @@ -1,344 +1,305 @@ --- -title: Policy CSP - ADMX_WindowsDefender -description: Policy CSP - ADMX_WindowsDefender +title: Policy CSP - ADMX_MicrosoftDefenderAntivirus +description: Policy CSP - ADMX_MicrosoftDefenderAntivirus ms.author: dansimp ms.localizationpriority: medium ms.topic: article ms.prod: w10 ms.technology: windows author: manikadhiman -ms.date: 08/13/2020 +ms.date: 12/02/2020 ms.reviewer: manager: dansimp --- -# Policy CSP - ADMX_WindowsDefender +# Policy CSP - ADMX_MicrosoftDefenderAntivirus > [!WARNING] > Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
    -## ADMX_WindowsDefender policies +## ADMX_MicrosoftDefenderAntivirus policies
    - ADMX_WindowsDefender/AllowFastServiceStartup + ADMX_MicrosoftDefenderAntivirus/AllowFastServiceStartup
    - ADMX_WindowsDefender/CheckForSignaturesBeforeRunningScan + ADMX_MicrosoftDefenderAntivirus/DisableAntiSpywareDefender
    - ADMX_WindowsDefender/DisableAntiSpywareDefender + ADMX_MicrosoftDefenderAntivirus/DisableAutoExclusions
    - ADMX_WindowsDefender/DisableAutoExclusions + ADMX_MicrosoftDefenderAntivirus/DisableBlockAtFirstSeen
    - ADMX_WindowsDefender/DisableBlockAtFirstSeen + ADMX_MicrosoftDefenderAntivirus/DisableLocalAdminMerge
    - ADMX_WindowsDefender/DisableLocalAdminMerge + ADMX_MicrosoftDefenderAntivirus/DisableRealtimeMonitoring
    - ADMX_WindowsDefender/DisableRealtimeMonitoring + ADMX_MicrosoftDefenderAntivirus/DisableRoutinelyTakingAction
    - ADMX_WindowsDefender/DisableRoutinelyTakingAction + ADMX_MicrosoftDefenderAntivirus/Exclusions_Extensions
    - ADMX_WindowsDefender/Exclusions_Extensions + ADMX_MicrosoftDefenderAntivirus/Exclusions_Paths
    - ADMX_WindowsDefender/Exclusions_Paths + ADMX_MicrosoftDefenderAntivirus/Exclusions_Processes
    - ADMX_WindowsDefender/Exclusions_Processes + ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_ASROnlyExclusions
    - ADMX_WindowsDefender/ExploitGuard_ASR_ASROnlyExclusions + ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_Rules
    - ADMX_WindowsDefender/ExploitGuard_ASR_Rules + ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_AllowedApplications
    - ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_AllowedApplications + ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_ProtectedFolders
    - ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess + ADMX_MicrosoftDefenderAntivirus/MpEngine_EnableFileHashComputation
    - ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_ProtectedFolders + ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_DisableSignatureRetirement
    - ADMX_WindowsDefender/ExploitGuard_EnableNetworkProtection + ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid
    - ADMX_WindowsDefender/MpEngine_EnableFileHashComputation + ADMX_MicrosoftDefenderAntivirus/Nis_DisableProtocolRecognition
    - ADMX_WindowsDefender/Nis_Consumers_IPS_DisableSignatureRetirement + ADMX_MicrosoftDefenderAntivirus/ProxyBypass
    - ADMX_WindowsDefender/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid + ADMX_MicrosoftDefenderAntivirus/ProxyPacUrl
    - ADMX_WindowsDefender/Nis_DisableProtocolRecognition + ADMX_MicrosoftDefenderAntivirus/ProxyServer
    - ADMX_WindowsDefender/ProxyBypass + ADMX_MicrosoftDefenderAntivirus/Quarantine_LocalSettingOverridePurgeItemsAfterDelay
    - ADMX_WindowsDefender/ProxyPacUrl + ADMX_MicrosoftDefenderAntivirus/Quarantine_PurgeItemsAfterDelay
    - ADMX_WindowsDefender/ProxyServer + ADMX_MicrosoftDefenderAntivirus/RandomizeScheduleTaskTimes
    - ADMX_WindowsDefender/Quarantine_LocalSettingOverridePurgeItemsAfterDelay + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableBehaviorMonitoring
    - ADMX_WindowsDefender/Quarantine_PurgeItemsAfterDelay + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableIOAVProtection
    - ADMX_WindowsDefender/RandomizeScheduleTaskTimes + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableOnAccessProtection
    - ADMX_WindowsDefender/RealtimeProtection_DisableBehaviorMonitoring + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableRawWriteNotification
    - ADMX_WindowsDefender/RealtimeProtection_DisableIOAVProtection + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableScanOnRealtimeEnable
    - ADMX_WindowsDefender/RealtimeProtection_DisableOnAccessProtection + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_IOAVMaxSize
    - ADMX_WindowsDefender/RealtimeProtection_DisableRawWriteNotification + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring
    - ADMX_WindowsDefender/RealtimeProtection_DisableScanOnRealtimeEnable + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection
    - ADMX_WindowsDefender/RealtimeProtection_IOAVMaxSize + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection
    - ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring
    - ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection + ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection
    - ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection + ADMX_MicrosoftDefenderAntivirus/Remediation_LocalSettingOverrideScan_ScheduleTime
    - ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring + ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleDay
    - ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection + ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleTime
    - ADMX_WindowsDefender/RealtimeProtection_RealtimeScanDirection + ADMX_MicrosoftDefenderAntivirus/Reporting_AdditionalActionTimeout
    - ADMX_WindowsDefender/Remediation_LocalSettingOverrideScan_ScheduleTime + ADMX_MicrosoftDefenderAntivirus/Reporting_CriticalFailureTimeout
    - ADMX_WindowsDefender/Remediation_Scan_ScheduleDay + ADMX_MicrosoftDefenderAntivirus/Reporting_DisableEnhancedNotifications
    - ADMX_WindowsDefender/Remediation_Scan_ScheduleTime + ADMX_MicrosoftDefenderAntivirus/Reporting_DisablegenericrePorts
    - ADMX_WindowsDefender/Reporting_AdditionalActionTimeout + ADMX_MicrosoftDefenderAntivirus/Reporting_NonCriticalTimeout
    - ADMX_WindowsDefender/Reporting_CriticalFailureTimeout + ADMX_MicrosoftDefenderAntivirus/Reporting_RecentlyCleanedTimeout
    - ADMX_WindowsDefender/Reporting_DisableEnhancedNotifications + ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingComponents
    - ADMX_WindowsDefender/Reporting_DisablegenericrePorts + ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingLevel
    - ADMX_WindowsDefender/Reporting_NonCriticalTimeout + ADMX_MicrosoftDefenderAntivirus/Scan_AllowPause
    - ADMX_WindowsDefender/Reporting_RecentlyCleanedTimeout + ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxDepth
    - ADMX_WindowsDefender/Reporting_WppTracingComponents + ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxSize
    - ADMX_WindowsDefender/Reporting_WppTracingLevel + ADMX_MicrosoftDefenderAntivirus/Scan_DisableArchiveScanning
    - ADMX_WindowsDefender/Root_PUAProtection + ADMX_MicrosoftDefenderAntivirus/Scan_DisableEmailScanning
    - ADMX_WindowsDefender/Scan_AllowPause + ADMX_MicrosoftDefenderAntivirus/Scan_DisableHeuristics
    - ADMX_WindowsDefender/Scan_ArchiveMaxDepth + ADMX_MicrosoftDefenderAntivirus/Scan_DisablePackedExeScanning
    - ADMX_WindowsDefender/Scan_ArchiveMaxSize + ADMX_MicrosoftDefenderAntivirus/Scan_DisableRemovableDriveScanning
    - ADMX_WindowsDefender/Scan_AvgCPULoadFactor + ADMX_MicrosoftDefenderAntivirus/Scan_DisableReparsePointScanning
    - ADMX_WindowsDefender/Scan_DisableArchiveScanning + ADMX_MicrosoftDefenderAntivirus/Scan_DisableRestorePoint
    - ADMX_WindowsDefender/Scan_DisableCatchupFullScan + ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningMappedNetworkDrivesForFullScan
    - ADMX_WindowsDefender/Scan_DisableCatchupQuickScan + ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningNetworkFiles
    - ADMX_WindowsDefender/Scan_DisableEmailScanning + ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideAvgCPULoadFactor
    - ADMX_WindowsDefender/Scan_DisableHeuristics + ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScanParameters
    - ADMX_WindowsDefender/Scan_DisablePackedExeScanning + ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleDay
    - ADMX_WindowsDefender/Scan_DisableRemovableDriveScanning + ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleQuickScantime
    - ADMX_WindowsDefender/Scan_DisableReparsePointScanning + ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleTime
    - ADMX_WindowsDefender/Scan_DisableRestorePoint + ADMX_MicrosoftDefenderAntivirus/Scan_LowCpuPriority
    - ADMX_WindowsDefender/Scan_DisableScanningMappedNetworkDrivesForFullScan + ADMX_MicrosoftDefenderAntivirus/Scan_MissedScheduledScanCountBeforeCatchup
    - ADMX_WindowsDefender/Scan_DisableScanningNetworkFiles + ADMX_MicrosoftDefenderAntivirus/Scan_PurgeItemsAfterDelay
    - ADMX_WindowsDefender/Scan_LocalSettingOverrideAvgCPULoadFactor + ADMX_MicrosoftDefenderAntivirus/Scan_QuickScanInterval
    - ADMX_WindowsDefender/Scan_LocalSettingOverrideScanParameters + ADMX_MicrosoftDefenderAntivirus/Scan_ScanOnlyIfIdle
    - ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleDay + ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleDay
    - ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleQuickScantime + ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleTime
    - ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleTime + ADMX_MicrosoftDefenderAntivirus/ServiceKeepAlive
    - ADMX_WindowsDefender/Scan_LowCpuPriority + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ASSignatureDue
    - ADMX_WindowsDefender/Scan_MissedScheduledScanCountBeforeCatchup + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_AVSignatureDue
    - ADMX_WindowsDefender/Scan_PurgeItemsAfterDelay + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DefinitionUpdateFileSharesSources
    - ADMX_WindowsDefender/Scan_QuickScanInterval + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScanOnUpdate
    - ADMX_WindowsDefender/Scan_ScanOnlyIfIdle + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScheduledSignatureUpdateonBattery
    - ADMX_WindowsDefender/Scan_ScanParameters + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableUpdateOnStartupWithoutEngine
    - ADMX_WindowsDefender/Scan_ScheduleDay + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_FallbackOrder
    - ADMX_WindowsDefender/Scan_ScheduleQuickScantime + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ForceUpdateFromMU
    - ADMX_WindowsDefender/Scan_ScheduleTime + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_RealtimeSignatureDelivery
    - ADMX_WindowsDefender/ServiceKeepAlive + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleDay
    - ADMX_WindowsDefender/SignatureUpdate_ASSignatureDue + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleTime
    - ADMX_WindowsDefender/SignatureUpdate_AVSignatureDue + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SharedSignaturesLocation
    - ADMX_WindowsDefender/SignatureUpdate_DefinitionUpdateFileSharesSources + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureDisableNotification
    - ADMX_WindowsDefender/SignatureUpdate_DisableScanOnUpdate + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureUpdateCatchupInterval
    - ADMX_WindowsDefender/SignatureUpdate_DisableScheduledSignatureUpdateonBattery + ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_UpdateOnStartup
    - ADMX_WindowsDefender/SignatureUpdate_DisableUpdateOnStartupWithoutEngine + ADMX_MicrosoftDefenderAntivirus/SpynetReporting
    - ADMX_WindowsDefender/SignatureUpdate_FallbackOrder + ADMX_MicrosoftDefenderAntivirus/Spynet_LocalSettingOverrideSpynetReporting
    - ADMX_WindowsDefender/SignatureUpdate_ForceUpdateFromMU + ADMX_MicrosoftDefenderAntivirus/Threats_ThreatIdDefaultAction
    - ADMX_WindowsDefender/SignatureUpdate_RealtimeSignatureDelivery + ADMX_MicrosoftDefenderAntivirus/UX_Configuration_CustomDefaultActionToastString
    - ADMX_WindowsDefender/SignatureUpdate_ScheduleDay + ADMX_MicrosoftDefenderAntivirus/UX_Configuration_Notification_Suppress
    - ADMX_WindowsDefender/SignatureUpdate_ScheduleTime + ADMX_MicrosoftDefenderAntivirus/UX_Configuration_SuppressRebootNotification
    - ADMX_WindowsDefender/SignatureUpdate_SharedSignaturesLocation -
    -
    - ADMX_WindowsDefender/SignatureUpdate_SignatureDisableNotification -
    -
    - ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateCatchupInterval -
    -
    - ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateInterval -
    -
    - ADMX_WindowsDefender/SignatureUpdate_UpdateOnStartup -
    -
    - ADMX_WindowsDefender/SpynetReporting -
    -
    - ADMX_WindowsDefender/Spynet_LocalSettingOverrideSpynetReporting -
    -
    - ADMX_WindowsDefender/SubmitSamplesConsent -
    -
    - ADMX_WindowsDefender/Threats_ThreatIdDefaultAction -
    -
    - ADMX_WindowsDefender/Threats_ThreatSeverityDefaultAction -
    -
    - ADMX_WindowsDefender/UX_Configuration_CustomDefaultActionToastString -
    -
    - ADMX_WindowsDefender/UX_Configuration_Notification_Suppress -
    -
    - ADMX_WindowsDefender/UX_Configuration_SuppressRebootNotification -
    -
    - ADMX_WindowsDefender/UX_Configuration_UILockdown + ADMX_MicrosoftDefenderAntivirus/UX_Configuration_UILockdown
    @@ -346,7 +307,7 @@ manager: dansimp
    -**ADMX_WindowsDefender/AllowFastServiceStartup** +**ADMX_MicrosoftDefenderAntivirus/AllowFastServiceStartup** @@ -415,78 +376,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/CheckForSignaturesBeforeRunningScan** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage whether a check for new virus and spyware security intelligence will occur before running a scan. - -This setting applies to scheduled scans as well as the command line "mpcmdrun -SigUpdate", but it has no effect on scans initiated manually from the user interface. - -If you enable this setting, a check for new security intelligence will occur before running a scan. - -If you disable this setting or do not configure this setting, the scan will start using the existing security intelligence. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Check for the latest virus and spyware security intelligence before running a scheduled scan* -- GP name: *CheckForSignaturesBeforeRunningScan* -- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    - - -**ADMX_WindowsDefender/DisableAntiSpywareDefender** +**ADMX_MicrosoftDefenderAntivirus/DisableAntiSpywareDefender** @@ -559,7 +449,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/DisableAutoExclusions** +**ADMX_MicrosoftDefenderAntivirus/DisableAutoExclusions**
    @@ -633,7 +523,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/DisableBlockAtFirstSeen** +**ADMX_MicrosoftDefenderAntivirus/DisableBlockAtFirstSeen**
    @@ -708,7 +598,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/DisableLocalAdminMerge** +**ADMX_MicrosoftDefenderAntivirus/DisableLocalAdminMerge**
    @@ -777,7 +667,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/DisableRealtimeMonitoring** +**ADMX_MicrosoftDefenderAntivirus/DisableRealtimeMonitoring**
    @@ -848,7 +738,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/DisableRoutinelyTakingAction** +**ADMX_MicrosoftDefenderAntivirus/DisableRoutinelyTakingAction**
    @@ -917,7 +807,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Exclusions_Extensions** +**ADMX_MicrosoftDefenderAntivirus/Exclusions_Extensions**
    @@ -982,7 +872,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Exclusions_Paths** +**ADMX_MicrosoftDefenderAntivirus/Exclusions_Paths**
    @@ -1049,7 +939,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Exclusions_Processes** +**ADMX_MicrosoftDefenderAntivirus/Exclusions_Processes**
    @@ -1114,7 +1004,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/ExploitGuard_ASR_ASROnlyExclusions** +**ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_ASROnlyExclusions**
    @@ -1194,7 +1084,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/ExploitGuard_ASR_Rules** +**ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_Rules**
    @@ -1290,7 +1180,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_AllowedApplications** +**ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_AllowedApplications**
    @@ -1372,127 +1262,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. Enable or disable controlled folder access for untrusted applications. You can choose to block, audit, or allow attempts by untrusted apps to: - -- Modify or delete files in protected folders, such as the Documents folder -- Write to disk sectors - -You can also choose to only block or audit writes to disk sectors while still allowing the modification or deletion of files in protected folders. - -Microsoft Defender Antivirus automatically determines which applications can be trusted. You can add additional trusted applications in the Configure allowed applications GP setting. -Default system folders are automatically protected, but you can add folders in the Configure protected folders GP setting. - -Block: -The following will be blocked: - -- Attempts by untrusted apps to modify or delete files in protected folders -- Attempts by untrusted apps to write to disk sectors - -The Windows event log will record these blocks under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1123. - -Disabled: -The following will not be blocked and will be allowed to run: - -- Attempts by untrusted apps to modify or delete files in protected folders -- Attempts by untrusted apps to write to disk sectors - -These attempts will not be recorded in the Windows event log. - -Audit Mode: -The following will not be blocked and will be allowed to run: - -- Attempts by untrusted apps to modify or delete files in protected folders -- Attempts by untrusted apps to write to disk sectors - -The Windows event log will record these attempts under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1124. - -Block disk modification only: -The following will be blocked: - -- Attempts by untrusted apps to write to disk sectors - -The Windows event log will record these attempts under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1123. - -The following will not be blocked and will be allowed to run: - -- Attempts by untrusted apps to modify or delete files in protected folders -These attempts will not be recorded in the Windows event log. - -Audit disk modification only: -The following will not be blocked and will be allowed to run: - -- Attempts by untrusted apps to write to disk sectors -- Attempts by untrusted apps to modify or delete files in protected folders -Only attempts to write to protected disk sectors will be recorded in the Windows event log (under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1124). -Attempts to modify or delete files in protected folders will not be recorded. - -Not configured: -Same as Disabled. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Configure Controlled folder access* -- GP name: *ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess* -- GP path: *Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Controlled Folder Access* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    - - -**ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_ProtectedFolders** +**ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_ProtectedFolders** @@ -1575,84 +1345,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/ExploitGuard_EnableNetworkProtection** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. Enable or disable Microsoft Defender Exploit Guard network protection to prevent employees from using any application to access dangerous domains that may host phishing scams, exploit-hosting sites, and other malicious content on the Internet. - -Enabled: -Specify the mode in the Options section: - -- Block: Users and applications will not be able to access dangerous domains -- Audit Mode: Users and applications can connect to dangerous domains, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs. - -Disabled: -Users and applications will not be blocked from connecting to dangerous domains. - -Not configured: -Same as Disabled. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Prevent users and apps from accessing dangerous websites* -- GP name: *ExploitGuard_EnableNetworkProtection* -- GP path: *Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Network Protection* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    - - -**ADMX_WindowsDefender/MpEngine_EnableFileHashComputation** +**ADMX_MicrosoftDefenderAntivirus/MpEngine_EnableFileHashComputation** @@ -1726,7 +1419,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Nis_Consumers_IPS_DisableSignatureRetirement** +**ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_DisableSignatureRetirement**
    @@ -1795,7 +1488,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid** +**ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid**
    @@ -1860,7 +1553,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Nis_DisableProtocolRecognition** +**ADMX_MicrosoftDefenderAntivirus/Nis_DisableProtocolRecognition**
    @@ -1929,7 +1622,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/ProxyBypass** +**ADMX_MicrosoftDefenderAntivirus/ProxyBypass**
    @@ -1998,7 +1691,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/ProxyPacUrl** +**ADMX_MicrosoftDefenderAntivirus/ProxyPacUrl**
    @@ -2073,7 +1766,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/ProxyServer** +**ADMX_MicrosoftDefenderAntivirus/ProxyServer**
    @@ -2148,7 +1841,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Quarantine_LocalSettingOverridePurgeItemsAfterDelay** +**ADMX_MicrosoftDefenderAntivirus/Quarantine_LocalSettingOverridePurgeItemsAfterDelay**
    @@ -2217,7 +1910,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Quarantine_PurgeItemsAfterDelay** +**ADMX_MicrosoftDefenderAntivirus/Quarantine_PurgeItemsAfterDelay**
    @@ -2286,7 +1979,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RandomizeScheduleTaskTimes** +**ADMX_MicrosoftDefenderAntivirus/RandomizeScheduleTaskTimes**
    @@ -2355,7 +2048,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_DisableBehaviorMonitoring** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableBehaviorMonitoring**
    @@ -2424,7 +2117,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_DisableIOAVProtection** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableIOAVProtection**
    @@ -2493,7 +2186,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_DisableOnAccessProtection** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableOnAccessProtection**
    @@ -2562,7 +2255,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_DisableRawWriteNotification** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableRawWriteNotification**
    @@ -2631,7 +2324,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_DisableScanOnRealtimeEnable** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableScanOnRealtimeEnable**
    @@ -2700,7 +2393,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_IOAVMaxSize** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_IOAVMaxSize**
    @@ -2769,7 +2462,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring**
    @@ -2838,7 +2531,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection**
    @@ -2907,7 +2600,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection**
    @@ -2976,7 +2669,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring**
    @@ -3045,7 +2738,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection** +**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection**
    @@ -3114,86 +2807,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/RealtimeProtection_RealtimeScanDirection** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure monitoring for incoming and outgoing files, without having to turn off monitoring entirely. It is recommended for use on servers where there is a lot of incoming and outgoing file activity but for performance reasons need to have scanning disabled for a particular scan direction. The appropriate configuration should be evaluated based on the server role. - -Note that this configuration is only honored for NTFS volumes. For any other file system type, full monitoring of file and program activity will be present on those volumes. - -The options for this setting are mutually exclusive: - -- 0 = Scan incoming and outgoing files (default) -- 1 = Scan incoming files only -- 2 = Scan outgoing files only - -Any other value, or if the value does not exist, resolves to the default (0). - -If you enable this setting, the specified type of monitoring will be enabled. - -If you disable or do not configure this setting, monitoring for incoming and outgoing files will be enabled. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Configure monitoring for incoming and outgoing file and program activity* -- GP name: *RealtimeProtection_RealtimeScanDirection* -- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    - - -**ADMX_WindowsDefender/Remediation_LocalSettingOverrideScan_ScheduleTime** +**ADMX_MicrosoftDefenderAntivirus/Remediation_LocalSettingOverrideScan_ScheduleTime** @@ -3262,7 +2876,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Remediation_Scan_ScheduleDay** +**ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleDay**
    @@ -3343,7 +2957,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Remediation_Scan_ScheduleTime** +**ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleTime**
    @@ -3412,7 +3026,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Reporting_AdditionalActionTimeout** +**ADMX_MicrosoftDefenderAntivirus/Reporting_AdditionalActionTimeout**
    @@ -3477,7 +3091,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Reporting_CriticalFailureTimeout** +**ADMX_MicrosoftDefenderAntivirus/Reporting_CriticalFailureTimeout**
    @@ -3542,7 +3156,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Reporting_DisableEnhancedNotifications** +**ADMX_MicrosoftDefenderAntivirus/Reporting_DisableEnhancedNotifications**
    @@ -3610,7 +3224,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Reporting_DisablegenericrePorts** +**ADMX_MicrosoftDefenderAntivirus/Reporting_DisablegenericrePorts**
    @@ -3679,7 +3293,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Reporting_NonCriticalTimeout** +**ADMX_MicrosoftDefenderAntivirus/Reporting_NonCriticalTimeout**
    @@ -3743,7 +3357,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Reporting_RecentlyCleanedTimeout** +**ADMX_MicrosoftDefenderAntivirus/Reporting_RecentlyCleanedTimeout**
    @@ -3808,7 +3422,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Reporting_WppTracingComponents** +**ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingComponents**
    @@ -3873,7 +3487,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Reporting_WppTracingLevel** +**ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingLevel**
    @@ -3945,84 +3559,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Root_PUAProtection** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. - -Enabled: -Specify the mode in the Options section: - -- Block: Potentially unwanted software will be blocked. -- Audit Mode: Potentially unwanted software will not be blocked, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs. - -Disabled: -Potentially unwanted software will not be blocked. - -Not configured: -Same as Disabled. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Configure detection for potentially unwanted applications* -- GP name: *Root_PUAProtection* -- GP path: *Windows Components\Microsoft Defender Antivirus* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    - - -**ADMX_WindowsDefender/Scan_AllowPause** +**ADMX_MicrosoftDefenderAntivirus/Scan_AllowPause** @@ -4091,7 +3628,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_ArchiveMaxDepth** +**ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxDepth**
    @@ -4160,7 +3697,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_ArchiveMaxSize** +**ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxSize**
    @@ -4228,77 +3765,9 @@ ADMX Info:
    - -**ADMX_WindowsDefender/Scan_AvgCPULoadFactor** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the maximum percentage CPU utilization permitted during a scan. Valid values for this setting are a percentage represented by the integers 5 to 100. A value of 0 indicates that there should be no throttling of CPU utilization. The default value is 50. - -If you enable this setting, CPU utilization will not exceed the percentage specified. - -If you disable or do not configure this setting, CPU utilization will not exceed the default value. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Specify the maximum percentage of CPU utilization during a scan* -- GP name: *Scan_AvgCPULoadFactor* -- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    -**ADMX_WindowsDefender/Scan_DisableArchiveScanning** +**ADMX_MicrosoftDefenderAntivirus/Scan_DisableArchiveScanning** @@ -4367,145 +3836,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_DisableCatchupFullScan** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time. - -If you enable this setting, catch-up scans for scheduled full scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run. - -If you disable or do not configure this setting, catch-up scans for scheduled full scans will be turned off. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Turn on catch-up full scan* -- GP name: *Scan_DisableCatchupFullScan* -- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    - - -**ADMX_WindowsDefender/Scan_DisableCatchupQuickScan** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time. - -If you enable this setting, catch-up scans for scheduled quick scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run. - -If you disable or do not configure this setting, catch-up scans for scheduled quick scans will be turned off. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Turn on catch-up quick scan* -- GP name: *Scan_DisableCatchupQuickScan* -- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    - - -**ADMX_WindowsDefender/Scan_DisableEmailScanning** +**ADMX_MicrosoftDefenderAntivirus/Scan_DisableEmailScanning** @@ -4574,7 +3905,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_DisableHeuristics** +**ADMX_MicrosoftDefenderAntivirus/Scan_DisableHeuristics**
    @@ -4643,7 +3974,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_DisablePackedExeScanning** +**ADMX_MicrosoftDefenderAntivirus/Scan_DisablePackedExeScanning**
    @@ -4712,7 +4043,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_DisableRemovableDriveScanning** +**ADMX_MicrosoftDefenderAntivirus/Scan_DisableRemovableDriveScanning**
    @@ -4781,7 +4112,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_DisableReparsePointScanning** +**ADMX_MicrosoftDefenderAntivirus/Scan_DisableReparsePointScanning**
    @@ -4850,7 +4181,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_DisableRestorePoint** +**ADMX_MicrosoftDefenderAntivirus/Scan_DisableRestorePoint**
    @@ -4918,7 +4249,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_DisableScanningMappedNetworkDrivesForFullScan** +**ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningMappedNetworkDrivesForFullScan**
    @@ -4987,7 +4318,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_DisableScanningNetworkFiles** +**ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningNetworkFiles**
    @@ -5056,7 +4387,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_LocalSettingOverrideAvgCPULoadFactor** +**ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideAvgCPULoadFactor**
    @@ -5125,7 +4456,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_LocalSettingOverrideScanParameters** +**ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScanParameters**
    @@ -5194,7 +4525,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleDay** +**ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleDay**
    @@ -5263,7 +4594,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleQuickScantime** +**ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleQuickScantime**
    @@ -5332,7 +4663,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleTime** +**ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleTime**
    @@ -5401,7 +4732,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_LowCpuPriority** +**ADMX_MicrosoftDefenderAntivirus/Scan_LowCpuPriority**
    @@ -5470,7 +4801,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_MissedScheduledScanCountBeforeCatchup** +**ADMX_MicrosoftDefenderAntivirus/Scan_MissedScheduledScanCountBeforeCatchup**
    @@ -5539,7 +4870,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_PurgeItemsAfterDelay** +**ADMX_MicrosoftDefenderAntivirus/Scan_PurgeItemsAfterDelay**
    @@ -5608,7 +4939,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_QuickScanInterval** +**ADMX_MicrosoftDefenderAntivirus/Scan_QuickScanInterval**
    @@ -5677,7 +5008,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_ScanOnlyIfIdle** +**ADMX_MicrosoftDefenderAntivirus/Scan_ScanOnlyIfIdle**
    @@ -5746,78 +5077,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Scan_ScanParameters** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the scan type to use during a scheduled scan. Scan type options are: - -- 1 = Quick Scan (default) -- 2 = Full Scan - -If you enable this setting, the scan type will be set to the specified value. - -If you disable or do not configure this setting, the default scan type will used. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Specify the scan type to use for a scheduled scan* -- GP name: *Scan_ScanParameters* -- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    - -**ADMX_WindowsDefender/Scan_ScheduleDay** +**ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleDay** @@ -5893,80 +5153,12 @@ ADMX Info: - GP path: *Windows Components\Microsoft Defender Antivirus\Scan* - GP ADMX file name: *WindowsDefender.admx* - - -
    - -**ADMX_WindowsDefender/Scan_ScheduleQuickScantime** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the time of day at which to perform a daily quick scan. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default, this setting is set to a time value of 2:00 AM. The schedule is based on local time on the computer where the scan is executing. - -If you enable this setting, a daily quick scan will run at the time of day specified. - -If you disable or do not configure this setting, a daily quick scan will run at a default time. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Specify the time for a daily quick scan* -- GP name: *Scan_ScheduleQuickScantime* -- GP path: *Windows Components\Microsoft Defender Antivirus\Scan* -- GP ADMX file name: *WindowsDefender.admx* -
    -**ADMX_WindowsDefender/Scan_ScheduleTime** +**ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleTime** @@ -6035,7 +5227,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/ServiceKeepAlive** +**ADMX_MicrosoftDefenderAntivirus/ServiceKeepAlive**
    @@ -6104,7 +5296,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_ASSignatureDue** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ASSignatureDue**
    @@ -6173,7 +5365,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_AVSignatureDue** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_AVSignatureDue**
    @@ -6242,7 +5434,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_DefinitionUpdateFileSharesSources** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DefinitionUpdateFileSharesSources**
    @@ -6311,7 +5503,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_DisableScanOnUpdate** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScanOnUpdate**
    @@ -6380,7 +5572,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_DisableScheduledSignatureUpdateonBattery** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScheduledSignatureUpdateonBattery**
    @@ -6449,7 +5641,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_DisableUpdateOnStartupWithoutEngine** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableUpdateOnStartupWithoutEngine**
    @@ -6518,7 +5710,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_FallbackOrder** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_FallbackOrder**
    @@ -6589,7 +5781,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_ForceUpdateFromMU** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ForceUpdateFromMU**
    @@ -6658,7 +5850,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_RealtimeSignatureDelivery** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_RealtimeSignatureDelivery**
    @@ -6727,7 +5919,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_ScheduleDay** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleDay**
    @@ -6808,7 +6000,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_ScheduleTime** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleTime**
    @@ -6877,7 +6069,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_SharedSignaturesLocation** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SharedSignaturesLocation**
    @@ -6943,7 +6135,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_SignatureDisableNotification** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureDisableNotification**
    @@ -7012,7 +6204,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateCatchupInterval** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureUpdateCatchupInterval**
    @@ -7081,76 +6273,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateInterval** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify an interval at which to check for security intelligence updates. The time value is represented as the number of hours between update checks. Valid values range from 1 (every hour) to 24 (once per day). - -If you enable this setting, checks for security intelligence updates will occur at the interval specified. - -If you disable or do not configure this setting, checks for security intelligence updates will occur at the default interval. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Specify the interval to check for security intelligence updates* -- GP name: *SignatureUpdate_SignatureUpdateInterval* -- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    - - -**ADMX_WindowsDefender/SignatureUpdate_UpdateOnStartup** +**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_UpdateOnStartup** @@ -7219,7 +6342,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/SpynetReporting** +**ADMX_MicrosoftDefenderAntivirus/SpynetReporting**
    @@ -7302,7 +6425,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Spynet_LocalSettingOverrideSpynetReporting** +**ADMX_MicrosoftDefenderAntivirus/Spynet_LocalSettingOverrideSpynetReporting**
    @@ -7368,81 +6491,11 @@ ADMX Info: -
    - -**ADMX_WindowsDefender/SubmitSamplesConsent** - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting configures behaviour of samples submission when opt-in for MAPS telemetry is set. - -Possible options are: - -- (0x0) Always prompt -- (0x1) Send safe samples automatically -- (0x2) Never send -- (0x3) Send all samples automatically - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Send file samples when further analysis is required* -- GP name: *SubmitSamplesConsent* -- GP path: *Windows Components\Microsoft Defender Antivirus\MAPS* -- GP ADMX file name: *WindowsDefender.admx* - - -
    -**ADMX_WindowsDefender/Threats_ThreatIdDefaultAction** +**ADMX_MicrosoftDefenderAntivirus/Threats_ThreatIdDefaultAction** @@ -7513,85 +6566,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/Threats_ThreatSeverityDefaultAction** - - -
    - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to customize which automatic remediation action will be taken for each threat alert level.Threat alert levels should be added under the Options for this setting. Each entry must be listed as a name value pair. The name defines a threat alert level. The value contains the action ID for the remediation action that should be taken. - -Valid threat alert levels are: - -- 1 = Low -- 2 = Medium -- 4 = High -- 5 = Severe - -Valid remediation action values are: - -- 2 = Quarantine -- 3 = Remove -- 6 = Ignore - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Specify threat alert levels at which default action should not be taken when detected* -- GP name: *Threats_ThreatSeverityDefaultAction* -- GP path: *Windows Components\Microsoft Defender Antivirus\Threats* -- GP ADMX file name: *WindowsDefender.admx* - - - -
    - - -**ADMX_WindowsDefender/UX_Configuration_CustomDefaultActionToastString** +**ADMX_MicrosoftDefenderAntivirus/UX_Configuration_CustomDefaultActionToastString** @@ -7660,7 +6635,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/UX_Configuration_Notification_Suppress** +**ADMX_MicrosoftDefenderAntivirus/UX_Configuration_Notification_Suppress**
    @@ -7729,7 +6704,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/UX_Configuration_SuppressRebootNotification** +**ADMX_MicrosoftDefenderAntivirus/UX_Configuration_SuppressRebootNotification**
    @@ -7796,7 +6771,7 @@ ADMX Info:
    -**ADMX_WindowsDefender/UX_Configuration_UILockdown** +**ADMX_MicrosoftDefenderAntivirus/UX_Configuration_UILockdown**
    From 10c9e4a62e5ad199ee047b3288a0750cf495000b Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 2 Dec 2020 12:50:39 -0800 Subject: [PATCH 109/958] Formatting --- .../mdm/policy-csp-admx-microsoftdefenderantivirus.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md index a582499424..f01f693b6e 100644 --- a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md +++ b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md @@ -1053,8 +1053,8 @@ Enabled: Specify the folders or files and resources that should be excluded from ASR rules in the Options section. Enter each rule on a new line as a name-value pair: -- Name column: Enter a folder path or a fully qualified resource name. For example, ""C:\Windows"" will exclude all files in that directory. ""C:\Windows\App.exe"" will exclude only that specific file in that specific folder -- Value column: Enter ""0"" for each item +- Name column: Enter a folder path or a fully qualified resource name. For example, "C:\Windows" will exclude all files in that directory. "C:\Windows\App.exe" will exclude only that specific file in that specific folder +- Value column: Enter "0" for each item Disabled: No exclusions will be applied to the ASR rules. From dc3d2ee64ced0a08d1eaa5f74f61aa66743b525b Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 2 Dec 2020 16:53:27 -0800 Subject: [PATCH 110/958] Added desktop policies --- .../mdm/policy-csp-admx-desktop.md | 203 ++++++++++++++++++ 1 file changed, 203 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-desktop.md diff --git a/windows/client-management/mdm/policy-csp-admx-desktop.md b/windows/client-management/mdm/policy-csp-admx-desktop.md new file mode 100644 index 0000000000..11256a18ee --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-desktop.md @@ -0,0 +1,203 @@ +--- +title: Policy CSP - ADMX_Desktop +description: Policy CSP - ADMX_Desktop +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/02/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Desktop +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Desktop policies + +
    +
    + ADMX_Desktop/AD_EnableFilter +
    +
    + ADMX_Desktop/AD_HideDirectoryFolder +
    +
    + ADMX_Desktop/AD_QueryLimit +
    +
    + ADMX_Desktop/ForceActiveDesktopOn +
    +
    + ADMX_Desktop/NoActiveDesktop +
    +
    + ADMX_Desktop/NoActiveDesktopChanges +
    +
    + ADMX_Desktop/NoDesktop +
    +
    + ADMX_Desktop/NoDesktopCleanupWizard +
    +
    + ADMX_Desktop/NoInternetIcon +
    +
    + ADMX_Desktop/NoMyComputerIcon +
    +
    + ADMX_Desktop/NoMyDocumentsIcon +
    +
    + ADMX_Desktop/NoNetHood +
    +
    + ADMX_Desktop/NoPropertiesMyComputer +
    +
    + ADMX_Desktop/NoPropertiesMyDocuments +
    +
    + ADMX_Desktop/NoRecentDocsNetHood +
    +
    + ADMX_Desktop/NoRecycleBinIcon +
    +
    + ADMX_Desktop/NoRecycleBinProperties +
    +
    + ADMX_Desktop/NoSaveSettings +
    +
    + ADMX_Desktop/NoWindowMinimizingShortcuts +
    +
    + ADMX_Desktop/Wallpaper +
    +
    + ADMX_Desktop/sz_ATC_DisableAdd +
    +
    + ADMX_Desktop/sz_ATC_DisableClose +
    +
    + ADMX_Desktop/sz_ATC_DisableDel +
    +
    + ADMX_Desktop/sz_ATC_DisableEdit +
    +
    + ADMX_Desktop/sz_ATC_NoComponents +
    +
    + ADMX_Desktop/sz_AdminComponents_Title +
    +
    + ADMX_Desktop/sz_DB_DragDropClose +
    +
    + ADMX_Desktop/sz_DB_Moving +
    +
    + ADMX_Desktop/sz_DWP_NoHTMLPaper +
    +
    + + +
    + + +**ADMX_AuditSettings/IncludeCmdLine** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in Windows 10 Insider Preview Build 20185. This policy setting determines what information is logged in security audit events when a new process has been created. This setting only applies when the Audit Process Creation policy is enabled. + +If you enable this policy setting, the command line information for every process will be logged in plain text in the security event log as part of the Audit Process Creation event 4688, "a new process has been created," on the workstations and servers on which this policy setting is applied. + +If you disable or do not configure this policy setting, the process's command line information will not be included in Audit Process Creation events. + +Default is Not configured. + +> [!NOTE] +> When this policy setting is enabled, any user with access to read the security events will be able to read the command line arguments for any successfully created process. Command line arguments can contain sensitive or private information, such as passwords or user data. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Include command line in process creation events* +- GP name: *IncludeCmdLine* +- GP path: *System/Audit Process Creation* +- GP ADMX file name: *AuditSettings.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 0b4d83779cabda4f371efca225c1fb9a465bb00a Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Thu, 3 Dec 2020 07:05:08 +0530 Subject: [PATCH 111/958] Update policy-csp-defender.md as per the user report #8740 , so i added admx missing information after clearly cross with on my laptop runs with windows 10 20h2 64bit build no 19042.662 . From this editing , i struggled few minutes for formatting the line in correct and where to add those missing lines. This editing of this article is too complicated , editing needs too much concentration with dedicated experienced skills, I knew all the contributors and all Authors , how are spent time to edit this article to make perfect. --- windows/client-management/mdm/policy-csp-defender.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-defender.md b/windows/client-management/mdm/policy-csp-defender.md index dcea40a888..6387efccc5 100644 --- a/windows/client-management/mdm/policy-csp-defender.md +++ b/windows/client-management/mdm/policy-csp-defender.md @@ -2317,6 +2317,15 @@ Added in Windows 10, version 1607. Specifies the level of detection for potenti > Potentially unwanted applications (PUA) are a category of software that can cause your machine to run slowly, display unexpected ads, or at worst, install other software which might be unexpected or unwanted. By default in Windows 10 (version 2004 and later), Microsoft Defender Antivirus blocks apps that are considered PUA, for Enterprise (E5) devices. For more information about PUA, see [Detect and block potentially unwanted applications](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus). + +ADMX Info: +- GP English name: *Configure detection for potentially unwanted applications* +- GP name: *Root_PUAProtection* +- GP element: *Root_PUAProtection* +- GP path: *Windows Components/Microsoft Defender Antivirus* +- GP ADMX file name: *WindowsDefender.admx* + + The following list shows the supported values: @@ -3112,6 +3121,7 @@ Footnotes: - 6 - Available in Windows 10, version 1903. - 7 - Available in Windows 10, version 1909. - 8 - Available in Windows 10, version 2004. +- 9 - Available in Windows 10, version 20H2. From 5080987f600dfead75cf88f14b45647587acfb51 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 11:16:53 +0530 Subject: [PATCH 112/958] Update filter-origin-documentation.md --- .../filter-origin-documentation.md | 78 +++++++++---------- 1 file changed, 39 insertions(+), 39 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 931120538f..2d813af334 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -15,13 +15,13 @@ ms.collection: ms.topic: troubleshooting --- -# Filter Origin (Audit Log Improvements) +# Filter origin audit log improvements Debugging packet drops is a continuous issue to Windows customers. In the past, customers had limited information about packet drops. -Typically, when investigating packet drop events, a customer would use the field `Filter Run-Time ID` from Windows Filtering Platform (WFP) Audits 5157 or 5152. +Typically, when investigating packet drop events, a customer would use the field `Filter Run-Time ID` from Windows Filtering Platform (WFP) audits 5157 or 5152. -![Event Properties](images/event-properties-5157.png) +![Event properties](images/event-properties-5157.png) The filter ID uniquely identifies the filter that caused the packet drop. The filter ID can be searched in the WFP state dump output to trace back to the Firewall rule where the filter originated from. @@ -31,29 +31,29 @@ For customers to debug packet drop events correctly and efficiently, they would The blocking filters can be categorized under these filter origins: -1. Firewall Rules +1. Firewall rules -2. Firewall Default Block Filters +2. Firewall default block filters - a. AppContainer Loopback + a. AppContainer loopback - b. Boottime Default + b. Boottime default - c. Quarantine Default + c. Quarantine default - d. Query User Default + d. Query user default e. Stealth - f. UWP Default + f. UWP default - g. WSH Default + g. WSH default -The next section describes the improvements made to Audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron Release. +The next section describes the improvements made to audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron release. - ## Improved Firewall Audit + ## Improved firewall audit -The two new fields added to the Audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. +The two new fields added to the audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. The `Filter Origin` field will help identify the cause of the drop. Packet drops from Firewall are explicitly dropped by default block filters created by the Windows Firewall service or a Firewall rule which may be created by users, policies, services, apps, etc. @@ -63,20 +63,20 @@ The `Interface Index` field will specify the network interface in which the pack To enable a specific audit event, run the corresponding command in an administrator command prompt: -|**Audit #**|**Enable Command**|**Link**| +|**Audit #**|**Enable command**|**Link**| |:-----|:-----|:-----| |**5157**|`Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable`|[5157(F): The Windows Filtering Platform has blocked a connection.](https://docs.microsoft.com/windows/security/threat-protection/auditing/event-5157)| |**5152**|`Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable`|[5152(F): The Windows Filtering Platform blocked a packet.](https://docs.microsoft.com/windows/security/threat-protection/auditing/event-5152)| -## Example Flow of Debugging Packet Drops with Filter Origin +## Example flow of debugging packet drops with filter origin As the audit surfaces `Filter Origin` and `Interface Index`, the network admin can determine the root cause of the network packet drop and the interface it happened on. -![Event Audit](images/event-audit-5157.png) +![Event audit](images/event-audit-5157.png) -The next sections are divided by `Filter Origin` type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, **Firewall Default Block Filters**. Otherwise, continue to the section **Firewall Rules**. +The next sections are divided by `Filter Origin` type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, **Firewall default block filters**. Otherwise, continue to the section **Firewall rules**. -## Firewall Rules +## Firewall rules Run the following PowerShell command to generate the rule information using `Filter Origin`. @@ -92,23 +92,23 @@ After identifying the rule that caused the drop, the network admin can now modif >[!NOTE] > Firewall rules from Mobile Device Management (MDM) store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the `Filter Origin` is one of the default block filters, as they do not correspond to any Firewall rules. -## Firewall Default Block Filters +## Firewall default block filters -**AppContainer Loopback** +**AppContainer loopback** -Network drop events from the AppContainer Loopback block filter origin occur when localhost loopback is not enabled properly for the Universal Windows Platform (UWP) app. +Network drop events from the AppContainer loopback block filter origin occur when localhost loopback is not enabled properly for the Universal Windows Platform (UWP) app. To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/windows/iot-core/develop-your-app/loopback). To enable localhost loopback for a published app which requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). -**Boottime Default** +**Boottime default** -Network drop events from the Boottime Default block filter origin occur when the computer is booting up and the Firewall service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through Firewall rules. +Network drop events from the boottime default block filter origin occur when the computer is booting up and the Firewall service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through Firewall rules. -**Quarantine Default** +**Quarantine default** -Network drops from the Quarantine Default block filter occur when the interface is temporarily quarantined by Firewall Service. The Firewall service quarantines an interface when it detects a change on the network, and based on several other factors, the Firewall service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the Quarantine Default Block filter will block any new non-loopback inbound connections. +Network drops from the quarantine default block filter occur when the interface is temporarily quarantined by Firewall service. The Firewall service quarantines an interface when it detects a change on the network, and based on several other factors, the Firewall service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the quarantine default block filter will block any new non-loopback inbound connections. Run the following PowerShell command to generate more information about the interface: @@ -117,28 +117,28 @@ Get-NetIPInterface –InterfaceIndex Get-NetIPInterface –InterfaceIndex 5 ``` -![Quarantine Default block filter](images/quarantine-default-block-filter.png) +![Quarantine default block filter](images/quarantine-default-block-filter.png) -To learn more about the quarantine feature, see [Quarantine Behavior](quarantine.md). +To learn more about the quarantine feature, see [Quarantine behavior](quarantine.md). >[!NOTE] > Quarantine-related packet drops are often transient and signify nothing more than a network change on the interface. -**Query User Default** +**Query user default** -Network packet drops from Query User Default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: +Network packet drops from query user default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: -1. Create an inbound Firewall rule to allow the packet for this application. This will allow the packet to bypass any Query User Default block filters. +1. Create an inbound Firewall rule to allow the packet for this application. This will allow the packet to bypass any query user default block filters. -2. Delete any block Query User rules which may have been auto generated by the Firewall service. +2. Delete any block query user rules which may have been auto generated by the Firewall service. -To generate a list of all the Query User block rules, you can run the following PowerShell command: +To generate a list of all the query user block rules, you can run the following PowerShell command: ```Powershell Get-NetFirewallRule | Where {$_.Name -like "*Query User*"} ``` -![Query User Default block filter](images/query-user-default-block-filters.png) +![Query user default block filter](images/query-user-default-block-filters.png) The query user pop-up feature is enabled by default. @@ -155,17 +155,17 @@ Set-NetFirewallProfile -NotifyOnListen False **Stealth** -Network drops from Stealth filters are typically made to prevent port scanning. +Network drops from stealth filters are typically made to prevent port scanning. -To disable Stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/troubleshoot/windows-server/networking/disable-stealth-mode). +To disable stealth-mode, see [Disable stealth mode in Windows](https://docs.microsoft.com/troubleshoot/windows-server/networking/disable-stealth-mode). -**UWP Default** +**UWP default** -Network drops from Universal Windows Platform (UWP) Default Inbound/Outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. +Network drops from Universal Windows Platform (UWP) default inbound/outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). -**WSH Default** +**WSH default** Network drops from Windows Service Hardening (WSH) default filters indicate that there wasn’t an explicit Windows Service Hardening allow rule to allow network traffic for the protected service. The service owner will need to configure allow rules for the service if the block is not expected. From e18b035f23063077024c946f0fb892ac7a465410 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 11:31:48 +0530 Subject: [PATCH 113/958] Update filter-origin-documentation.md --- .../windows-firewall/filter-origin-documentation.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 2d813af334..28be4c5d70 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -1,6 +1,6 @@ --- -title: Filter Origin (Audit Log Improvements) -description: Filter Origin Documentation (Audit Log Improvements) +title: Filter origin audit log improvements +description: Filter origin documentation audit log improvements ms.reviewer: ms.author: v-bshilpa ms.prod: w10 From 47418abb63ee1aaa61e23c80d7e689cc1656a185 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 11:50:21 +0530 Subject: [PATCH 114/958] Update quarantine.md --- .../windows-firewall/quarantine.md | 50 +++++++++---------- 1 file changed, 25 insertions(+), 25 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index 7ebe7fac5b..6e13094d17 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -1,5 +1,5 @@ --- -title: Quarantine Behavior +title: Quarantine behavior description: Quarantine behavior is explained in detail. ms.author: v-bshilpa author: Benny-54 @@ -17,27 +17,27 @@ ms.topic: conceptual ms.date: 11/17/2020 --- -# Quarantine Behavior +# Quarantine behavior One of the security challenges that network admins face is configuring a machine properly after a network change. Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are part of the domain. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. -To counter this potential exploitation, Windows Firewall will "quarantine" an interface until the system has successfully re-categorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. +To counter this potential exploitation, Windows Firewall will quarantine an interface until the system has successfully re-categorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. While the quarantine feature has long been a part of Windows Firewall, the feature’s behavior has often caused confusion for customers unaware of quarantine and its motivations. Ultimately, the goal of this document is to describe the quarantine feature at a high level and help network admins understand why the application traffic is sometimes blocked by quarantine. -## Quarantine Filters +## Quarantine filters The quarantine feature creates filters which can be split into three categories: -1. Quarantine Default Inbound Block Filter +1. Quarantine default inbound block filter -2. Quarantine Default Exception Filters +2. Quarantine default exception filters -3. Interface Un-quarantine Filters +3. Interface un-quarantine filters These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and these layers are: @@ -54,37 +54,37 @@ These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and thes For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/windows/win32/fwp/basic-operation). -### Quarantine Default Inbound Block Filter +### Quarantine default inbound block filter -The Quarantine Default Inbound Block filter effectively blocks any new non-loopback inbound connections if the packet is not explicitly permitted by another filter in the quarantine sublayer. +The quarantine default inbound block filter effectively blocks any new non-loopback inbound connections if the packet is not explicitly permitted by another filter in the quarantine sublayer. -### Quarantine Default Exception Filters +### Quarantine default exception filters -When the interface is in quarantine state, the Quarantine Default Exception filters will permit new inbound connections given that they meet the conditions of an exception filter. One example of the exception filters is the Quarantine Default Inbound Loopback Exception filter. This exception filter allows all loopback packets when the interface is in quarantine state. +When the interface is in quarantine state, the quarantine default exception filters will permit new inbound connections given that they meet the conditions of an exception filter. One example of the exception filters is the quarantine default inbound loopback exception filter. This exception filter allows all loopback packets when the interface is in quarantine state. -### Interface Un-quarantine filter +### Interface un-quarantine filter -The Interface Un-quarantine filters allows all non-loopback packets if the interface is successfully categorized. +The interface un-quarantine filters allows all non-loopback packets if the interface is successfully categorized. -## Quarantine Flow +## Quarantine flow The following describes the general flow of quarantine: 1. There is some change on the current network interface. -2. The Interface Un-quarantine filters will no longer permit new inbound connections. The interface is now in quarantine state. +2. The interface un-quarantine filters will no longer permit new inbound connections. The interface is now in quarantine state. -3. All non-loopback inbound connections are either permitted by Quarantine Default Exception Filters or dropped by the Quarantine Default Inbound Block filter. +3. All non-loopback inbound connections are either permitted by quarantine default exception filters or dropped by the quarantine default inbound block filter. 4. The WFP filters applicable to the old interface state are removed. 5. The WFP filters applicable to the new interface state are added, which include the un-quarantine filters for this interface. These filters are updated to match the interface's current state. -6. The interface has now exited quarantine state as the Interface Un-quarantine filters permit any new non-loopback packets. +6. The interface has now exited quarantine state as the interface un-quarantine filters permit any new non-loopback packets. -## Quarantine Diagnostics +## Quarantine diagnostics -There are two methods of identifying packet drops from the Quarantine Default Inbound Block Filter. +There are two methods of identifying packet drops from the quarantine default inbound block filter. Given that the network connectivity issue is reproducible, diagnostic traces can be collected by running the following in an administrative command prompt: @@ -106,7 +106,7 @@ The characters in the application ID name will be separated by periods: The `netEvent` will have more information about the packet that was dropped including information about its capabilities, the filter that dropped the packet, and much more. -If the filter that dropped that packet was by the Quarantine Default Inbound Block filter, then the drop `netEvent` will have `filterOrigin` as `Quarantine Default`. +If the filter that dropped that packet was by the quarantine default inbound block filter, then the drop `netEvent` will have `filterOrigin` as `Quarantine Default`. The following is a sample `netEvent` with `filterOrigin` as `Quarantine Default`. @@ -195,11 +195,11 @@ To enable Filtering Platform Connection audits, run the following command in an Auditpol /set /category:"System" /SubCategory:"Filtering Platform Connection" /success:enable /failure:enable ``` -Sample Drop Audit with `filterOrigin` as `Quarantine Default`. +Sample drop audit with `filterOrigin` as `Quarantine Default`. -![Quarantine Default](images/quarantine-default1.png) +![Quarantine default](images/quarantine-default1.png) -Once the drop’s filter origin has been identified as the Quarantine Default Inbound Block filter, the interface should be further investigated. To find the relevant interface, use the `InterfaceIndex` value from the `netEvent` or event audit in the following PowerShell command to generate more information about the interface: +Once the drop’s filter origin has been identified as the quarantine default inbound block filter, the interface should be further investigated. To find the relevant interface, use the `InterfaceIndex` value from the `netEvent` or event audit in the following PowerShell command to generate more information about the interface: ```Powershell Get-NetIPInterface –InterfaceIndex @@ -208,8 +208,8 @@ Get-NetIPInterface –InterfaceIndex 5 ![Quarantine Interfaceindex](images/quarantine-interfaceindex1.png) -Using the interface name, Event Viewer can be searched for any interface related changes. +Using the interface name, event viewer can be searched for any interface related changes. To enable more networking audit events, see [Enable IPsec and Windows Firewall Audit Events](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754714(v=ws.10)?redirectedfrom=MSDN). -Packet drops from the Quarantine Default Inbound Block filter are often transient and do not signify anything more than a network change on the interface. +Packet drops from the quarantine default inbound block filter are often transient and do not signify anything more than a network change on the interface. From 5b63646c69615a416b184bdc1b0a9326cd649384 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 11:55:31 +0530 Subject: [PATCH 115/958] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 55c24da4b7..0995b3cbdd 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,8 +165,8 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) -### [Filter Origin Documentation](filter-origin-documentation.md) -### [Quarantine Behavior](quarantine.md) +### [Filter origin audit log improvements)](filter-origin-documentation.md) +### [Quarantine behavior](quarantine.md) From 7033ac7932f5c85d6002061c1f5b00aadeb47277 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 12:05:46 +0530 Subject: [PATCH 116/958] Update firewall-settings-lost-on-upgrade.md --- .../firewall-settings-lost-on-upgrade.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 92a3e08580..8948b3b3fe 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -1,6 +1,6 @@ --- -title: Firewall Settings Lost on Upgrade -description: Firewall Settings Lost on Upgrade +title: Firewall settings lost on upgrade +description: Firewall settings lost on upgrade ms.reviewer: ms.author: v-bshilpa ms.prod: w10 @@ -15,13 +15,13 @@ ms.collection: ms.topic: troubleshooting --- -# Firewall Settings Lost on Upgrade +# Firewall settings lost on upgrade -This article describes a scenario where previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. +This article describes a scenario where previously enabled Firewall rules revert to a disabled state after performing a Windows upgrade. -## Rule Groups +## Rule groups -Individual built-in firewall rules are categorized within a group. For example, the following individual rules form part of the ‘Remote Desktop’ group. +Individual built-in Firewall rules are categorized within a group. For example, the following individual rules form part of the Remote Desktop group. - Remote Desktop – Shadow (TCP-In) @@ -29,7 +29,7 @@ Individual built-in firewall rules are categorized within a group. For example, - Remote Desktop – User-Mode (UDP-In) -Other examples include the Core Networking, File and Print Sharing, and Network Discovery groups. Admins can filter on individual categories in the firewall interface (wf.msc) by selecting and right-clicking on ‘**Inbound**’ or ‘**Outbound Rules**’ and selecting ‘**Filter by Group**’; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other examples include the core networking, file and print sharing, and network discovery groups. Admins can filter on individual categories in the Firewall interface (wf.msc) by selecting and right-clicking on **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group From d8a85dd2b752ddf3e0dbffb84600c6af6b7a13c9 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 3 Dec 2020 12:08:13 +0530 Subject: [PATCH 117/958] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index 0720ca4cc1..6d788f1ee0 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,7 +165,7 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) -### [Firewall Settings Lost on Upgrade](firewall-settings-lost-on-upgrade.md) +### [Firewall settings lost on upgrade](firewall-settings-lost-on-upgrade.md) From b998faccc7005b45a562178805e8551813a9eeab Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 3 Dec 2020 14:17:40 -0800 Subject: [PATCH 118/958] Added Desktop policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 29 + .../policy-configuration-service-provider.md | 92 + .../mdm/policy-csp-admx-desktop.md | 2006 ++++++++++++++++- 4 files changed, 2115 insertions(+), 13 deletions(-) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index d30cc12164..3c50425e06 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -182,6 +182,7 @@ #### [ADMX_CredSsp](policy-csp-admx-credssp.md) #### [ADMX_CtrlAltDel](policy-csp-admx-ctrlaltdel.md) #### [ADMX_DataCollection](policy-csp-admx-datacollection.md) +#### [ADMX_Desktop](policy-csp-admx-desktop.md) #### [ADMX_DeviceInstallation](policy-csp-admx-devicenstallation.md) #### [ADMX_DeviceSetup](policy-csp-admx-devicesetup.md) #### [ADMX_DigitalLocker](policy-csp-admx-digitallocker.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index f2b1c25bd5..39282f0498 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -77,6 +77,35 @@ ms.date: 10/08/2020 - [ADMX_CtrlAltDel/DisableTaskMgr](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-disabletaskmgr) - [ADMX_CtrlAltDel/NoLogoff](./policy-csp-admx-ctrlaltdel.md#admx-ctrlaltdel-nologoff) - [ADMX_DataCollection/CommercialIdPolicy](./policy-csp-admx-datacollection.md#admx-datacollection-commercialidpolicy) +- [ADMX_Desktop/AD_EnableFilter](./policy-csp-admx-desktop.md#admx-desktop-ad-enablefilter) +- [ADMX_Desktop/AD_HideDirectoryFolder](./policy-csp-admx-desktop.md#admx-desktop-ad-hidedirectoryfolder) +- [ADMX_Desktop/AD_QueryLimit](./policy-csp-admx-desktop.md#admx-desktop-ad-querylimit) +- [ADMX_Desktop/ForceActiveDesktopOn](./policy-csp-admx-desktop.md#admx-desktop-forceactivedesktopon) +- [ADMX_Desktop/NoActiveDesktop](./policy-csp-admx-desktop.md#admx-desktop-noactivedesktop) +- [ADMX_Desktop/NoActiveDesktopChanges](./policy-csp-admx-desktop.md#admx-desktop-noactivedesktopchanges) +- [ADMX_Desktop/NoDesktop](./policy-csp-admx-desktop.md#admx-desktop-nodesktop) +- [ADMX_Desktop/NoDesktopCleanupWizard](./policy-csp-admx-desktop.md#admx-desktop-nodesktopcleanupwizard) +- [ADMX_Desktop/NoInternetIcon](./policy-csp-admx-desktop.md#admx-desktop-nointerneticon) +- [ADMX_Desktop/NoMyComputerIcon](./policy-csp-admx-desktop.md#admx-desktop-nomycomputericon) +- [ADMX_Desktop/NoMyDocumentsIcon](./policy-csp-admx-desktop.md#admx-desktop-nomydocumentsicon) +- [ADMX_Desktop/NoNetHood](./policy-csp-admx-desktop.md#admx-desktop-nonethood) +- [ADMX_Desktop/NoPropertiesMyComputer](./policy-csp-admx-desktop.md#admx-desktop-nopropertiesmycomputer) +- [ADMX_Desktop/NoPropertiesMyDocuments](./policy-csp-admx-desktop.md#admx-desktop-nopropertiesmydocuments) +- [ADMX_Desktop/NoRecentDocsNetHood](./policy-csp-admx-desktop.md#admx-desktop-norecentdocsnethood) +- [ADMX_Desktop/NoRecycleBinIcon](./policy-csp-admx-desktop.md#admx-desktop-norecyclebinicon) +- [ADMX_Desktop/NoRecycleBinProperties](./policy-csp-admx-desktop.md#admx-desktop-norecyclebinproperties) +- [ADMX_Desktop/NoSaveSettings](./policy-csp-admx-desktop.md#admx-desktop-nosavesettings) +- [ADMX_Desktop/NoWindowMinimizingShortcuts](./policy-csp-admx-desktop.md#admx-desktop-nowindowminimizingshortcuts) +- [ADMX_Desktop/Wallpaper](./policy-csp-admx-desktop.md#admx-desktop-wallpaper) +- [ADMX_Desktop/sz_ATC_DisableAdd](./policy-csp-admx-desktop.md#admx-desktop-sz-atc-disableadd) +- [ADMX_Desktop/sz_ATC_DisableClose](./policy-csp-admx-desktop.md#admx-desktop-sz-atc-disableclose) +- [ADMX_Desktop/sz_ATC_DisableDel](./policy-csp-admx-desktop.md#admx-desktop-sz-atc-disabledel) +- [ADMX_Desktop/sz_ATC_DisableEdit](./policy-csp-admx-desktop.md#admx-desktop-sz-atc-disableedit) +- [ADMX_Desktop/sz_ATC_NoComponents](./policy-csp-admx-desktop.md#admx-desktop-sz-atc-nocomponents) +- [ADMX_Desktop/sz_AdminComponents_Title](./policy-csp-admx-desktop.md#admx-desktop-sz-admincomponents-title) +- [ADMX_Desktop/sz_DB_DragDropClose](./policy-csp-admx-desktop.md#admx-desktop-sz-db-dragdropclose) +- [ADMX_Desktop/sz_DB_Moving](./policy-csp-admx-desktop.md#admx-desktop-sz-db-moving) +- [ADMX_Desktop/sz_DWP_NoHTMLPaper](./policy-csp-admx-desktop.md#admx-desktop-sz-dwp-nohtmlpaper) - [ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-allowadmininstall) - [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-detailtext) - [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-simpletext) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 1e3e29a308..84380cee7e 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -385,6 +385,98 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_Desktop policies + +
    +
    + ADMX_Desktop/AD_EnableFilter +
    +
    + ADMX_Desktop/AD_HideDirectoryFolder +
    +
    + ADMX_Desktop/AD_QueryLimit +
    +
    + ADMX_Desktop/ForceActiveDesktopOn +
    +
    + ADMX_Desktop/NoActiveDesktop +
    +
    + ADMX_Desktop/NoActiveDesktopChanges +
    +
    + ADMX_Desktop/NoDesktop +
    +
    + ADMX_Desktop/NoDesktopCleanupWizard +
    +
    + ADMX_Desktop/NoInternetIcon +
    +
    + ADMX_Desktop/NoMyComputerIcon +
    +
    + ADMX_Desktop/NoMyDocumentsIcon +
    +
    + ADMX_Desktop/NoNetHood +
    +
    + ADMX_Desktop/NoPropertiesMyComputer +
    +
    + ADMX_Desktop/NoPropertiesMyDocuments +
    +
    + ADMX_Desktop/NoRecentDocsNetHood +
    +
    + ADMX_Desktop/NoRecycleBinIcon +
    +
    + ADMX_Desktop/NoRecycleBinProperties +
    +
    + ADMX_Desktop/NoSaveSettings +
    +
    + ADMX_Desktop/NoWindowMinimizingShortcuts +
    +
    + ADMX_Desktop/Wallpaper +
    +
    + ADMX_Desktop/sz_ATC_DisableAdd +
    +
    + ADMX_Desktop/sz_ATC_DisableClose +
    +
    + ADMX_Desktop/sz_ATC_DisableDel +
    +
    + ADMX_Desktop/sz_ATC_DisableEdit +
    +
    + ADMX_Desktop/sz_ATC_NoComponents +
    +
    + ADMX_Desktop/sz_AdminComponents_Title +
    +
    + ADMX_Desktop/sz_DB_DragDropClose +
    +
    + ADMX_Desktop/sz_DB_Moving +
    +
    + ADMX_Desktop/sz_DWP_NoHTMLPaper +
    +
    + ### ADMX_DeviceInstallation policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-desktop.md b/windows/client-management/mdm/policy-csp-admx-desktop.md index 11256a18ee..3cabf5f777 100644 --- a/windows/client-management/mdm/policy-csp-admx-desktop.md +++ b/windows/client-management/mdm/policy-csp-admx-desktop.md @@ -115,7 +115,7 @@ manager: dansimp
    -**ADMX_AuditSettings/IncludeCmdLine** +**ADMX_Desktop/AD_EnableFilter** @@ -152,22 +152,19 @@ manager: dansimp [Scope](./policy-configuration-service-provider.md#policy-scope): > [!div class = "checklist"] -> * Device +> * User
    -Available in Windows 10 Insider Preview Build 20185. This policy setting determines what information is logged in security audit events when a new process has been created. This setting only applies when the Audit Process Creation policy is enabled. +Available in the latest Windows 10 Insider Preview Build. Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional filters to search results. -If you enable this policy setting, the command line information for every process will be logged in plain text in the security event log as part of the Audit Process Creation event 4688, "a new process has been created," on the workstations and servers on which this policy setting is applied. +If you enable this setting, the filter bar appears when the Active Directory Find dialog box opens, but users can hide it. -If you disable or do not configure this policy setting, the process's command line information will not be included in Audit Process Creation events. +If you disable this setting or do not configure it, the filter bar does not appear, but users can display it by selecting "Filter" on the "View" menu. -Default is Not configured. - -> [!NOTE] -> When this policy setting is enabled, any user with access to read the security events will be able to read the command line arguments for any successfully created process. Command line arguments can contain sensitive or private information, such as passwords or user data. +To see the filter bar, open Network Locations, click Entire Network, and then click Directory. Right-click the name of a Windows domain, and click Find. Type the name of an object in the directory, such as "Administrator." If the filter bar does not appear above the resulting display, on the View menu, click Filter. > [!TIP] @@ -179,10 +176,1993 @@ Default is Not configured. ADMX Info: -- GP English name: *Include command line in process creation events* -- GP name: *IncludeCmdLine* -- GP path: *System/Audit Process Creation* -- GP ADMX file name: *AuditSettings.admx* +- GP English name: *Enable filter in Find dialog box* +- GP name: *AD_EnableFilter* +- GP path: *Desktop\Active Directory* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/AD_HideDirectoryFolder** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Hides the Active Directory folder in Network Locations. + +The Active Directory folder displays Active Directory objects in a browse window. + +If you enable this setting, the Active Directory folder does not appear in the Network Locations folder. + +If you disable this setting or do not configure it, the Active Directory folder appears in the Network Locations folder. + +This setting is designed to let users search Active Directory but not tempt them to casually browse Active Directory. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide Active Directory folder* +- GP name: *AD_HideDirectoryFolder* +- GP path: *Desktop\Active Directory* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/AD_QueryLimit** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory. This setting affects all browse displays associated with Active Directory, such as those in Local Users and Groups, Active Directory Users and Computers, and dialog boxes used to set permissions for user or group objects in Active Directory. + +If you enable this setting, you can use the "Number of objects returned" box to limit returns from an Active Directory search. + +If you disable this setting or do not configure it, the system displays up to 10,000 objects. This consumes approximately 2 MB of memory or disk space. + +This setting is designed to protect the network and the domain controller from the effect of expansive searches. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Maximum size of Active Directory searches* +- GP name: *AD_QueryLimit* +- GP path: *Desktop\Active Directory* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/ForceActiveDesktopOn** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enables Active Desktop and prevents users from disabling it. + +This setting prevents users from trying to enable or disable Active Desktop while a policy controls it. + +If you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it. + +> [!NOTE] +> If both the "Enable Active Desktop" setting and the "Disable Active Desktop" setting are enabled, the "Disable Active Desktop" setting is ignored. If the "Turn on Classic Shell" setting (in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both of these policies are ignored. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enable Active Desktop* +- GP name: *ForceActiveDesktopOn* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoActiveDesktop** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Disables Active Desktop and prevents users from enabling it. + +This setting prevents users from trying to enable or disable Active Desktop while a policy controls it. + +If you disable this setting or do not configure it, Active Desktop is disabled by default, but users can enable it. + +> [!NOTE] +> If both the "Enable Active Desktop" setting and the "Disable Active Desktop" setting are enabled, the "Disable Active Desktop" setting is ignored. If the "Turn on Classic Shell" setting (in User Configuration\Administrative Templates\Windows Components\Windows Explorer) is enabled, Active Desktop is disabled, and both these policies are ignored. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disable Active Desktop* +- GP name: *NoActiveDesktop* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoActiveDesktopChanges** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration. + +This is a comprehensive setting that locks down the configuration you establish by using other policies in this folder. This setting removes the Web tab from Display in Control Panel. As a result, users cannot enable or disable Active Desktop. If Active Desktop is already enabled, users cannot add, remove, or edit Web content or disable, lock, or synchronize Active Desktop components. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit changes* +- GP name: *NoActiveDesktopChanges* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoDesktop** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Computer, and Network Locations. + +Removing icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent. + +Also, see "Items displayed in Places Bar" in User Configuration\Administrative Templates\Windows Components\Common Open File Dialog to remove the Desktop icon from the Places Bar. This will help prevent users from saving data to the Desktop. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide and disable all items on the desktop* +- GP name: *NoDesktop* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoDesktopCleanupWizard** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from using the Desktop Cleanup Wizard. + +If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workstation every 60 days. The user will also not be able to access the Desktop Cleanup Wizard. + +If you disable this setting or do not configure it, the default behavior of the Desktop Clean Wizard running every 60 days occurs. + +> [!NOTE] +> When this setting is not enabled, users can run the Desktop Cleanup Wizard, or have it run automatically every 60 days from Display, by clicking the Desktop tab and then clicking the Customize Desktop button. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove the Desktop Cleanup Wizard* +- GP name: *NoDesktopCleanupWizard* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoInternetIcon** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar. + +This setting does not prevent the user from starting Internet Explorer by using other methods. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide Internet Explorer icon on desktop* +- GP name: *NoInternetIcon* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoMyComputerIcon** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This setting hides Computer from the desktop and from the new Start menu. It also hides links to Computer in the Web view of all Explorer windows, and it hides Computer in the Explorer folder tree pane. If the user navigates into Computer via the "Up" button while this setting is enabled, they view an empty Computer folder. This setting allows administrators to restrict their users from seeing Computer in the shell namespace, allowing them to present their users with a simpler desktop environment. + +If you enable this setting, Computer is hidden on the desktop, the new Start menu, the Explorer folder tree pane, and the Explorer Web views. If the user manages to navigate to Computer, the folder will be empty. + +If you disable this setting, Computer is displayed as usual, appearing as normal on the desktop, Start menu, folder tree pane, and Web views, unless restricted by another setting. + +If you do not configure this setting, the default is to display Computer as usual. + +> [!NOTE] +> In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Computer icon. Hiding Computer and its contents does not hide the contents of the child folders of Computer. For example, if the users navigate into one of their hard drives, they see all of their folders and files there, even if this setting is enabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove Computer icon on the desktop* +- GP name: *NoMyComputerIcon* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoMyDocumentsIcon** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Removes most occurrences of the My Documents icon. + +This setting removes the My Documents icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box. + +This setting does not prevent the user from using other methods to gain access to the contents of the My Documents folder. + +This setting does not remove the My Documents icon from the Start menu. To do so, use the "Remove My Documents icon from Start Menu" setting. + +> [!NOTE] +> To make changes to this setting effective, you must log off from and log back on to Windows 2000 Professional. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove My Documents icon on the desktop* +- GP name: *NoMyDocumentsIcon* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoNetHood** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Removes the Network Locations icon from the desktop. + +This setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network. + +> [!NOTE] +> In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Network Places icon. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide Network Locations icon on desktop* +- GP name: *NoNetHood* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoPropertiesMyComputer** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This setting hides Properties on the context menu for Computer. + +If you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks Computer and then goes to the File menu. Likewise, Alt-Enter does nothing when Computer is selected. + +If you disable or do not configure this setting, the Properties option is displayed as usual. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove Properties from the Computer icon context menu* +- GP name: *NoPropertiesMyComputer* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoPropertiesMyDocuments** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting hides the Properties menu command on the shortcut menu for the My Documents icon. + +If you enable this policy setting, the Properties menu command will not be displayed when the user does any of the following: + +- Right-clicks the My Documents icon. +- Clicks the My Documents icon, and then opens the File menu. +- Clicks the My Documents icon, and then presses ALT+ENTER. + +If you disable or do not configure this policy setting, the Properties menu command is displayed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove Properties from the Documents icon context menu* +- GP name: *NoPropertiesMyDocuments* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoRecentDocsNetHood** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Remote shared folders are not added to Network Locations whenever you open a document in the shared folder. + +If you disable this setting or do not configure it, when you open a document in a remote shared folder, the system adds a connection to the shared folder to Network Locations. + +If you enable this setting, shared folders are not added to Network Locations automatically when you open a document in the shared folder. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not add shares of recently opened documents to Network Locations* +- GP name: *NoRecentDocsNetHood* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoRecycleBinIcon** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Removes most occurrences of the Recycle Bin icon. + +This setting removes the Recycle Bin icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box. + +This setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder. + +> [!NOTE] +> To make changes to this setting effective, you must log off and then log back on. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove Recycle Bin icon from desktop* +- GP name: *NoRecycleBinIcon* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoRecycleBinProperties** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Removes the Properties option from the Recycle Bin context menu. + +If you enable this setting, the Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected. + +If you disable or do not configure this setting, the Properties option is displayed as usual. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove Properties from the Recycle Bin context menu* +- GP name: *NoRecycleBinProperties* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoSaveSettings** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from saving certain changes to the desktop. + +If you enable this setting, users can change the desktop, but some changes, such as the position of open windows or the size and position of the taskbar, are not saved when users log off. However, shortcuts placed on the desktop are always saved. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Don't save settings at exit* +- GP name: *NoSaveSettings* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/NoWindowMinimizingShortcuts** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents windows from being minimized or restored when the active window is shaken back and forth with the mouse. + +If you enable this policy, application windows will not be minimized or restored when the active window is shaken back and forth with the mouse. + +If you disable or do not configure this policy, this window minimizing and restoring gesture will apply. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Aero Shake window minimizing mouse gesture* +- GP name: *NoWindowMinimizingShortcuts* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/Wallpaper** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies the desktop background ("wallpaper") displayed on all users' desktops. + +This setting lets you specify the wallpaper on users' desktops and prevents users from changing the image or its presentation. The wallpaper you specify can be stored in a bitmap (*.bmp) or JPEG (*.jpg) file. + +To use this setting, type the fully qualified path and name of the file that stores the wallpaper image. You can type a local path, such as C:\Windows\web\wallpaper\home.jpg or a UNC path, such as \\\Server\Share\Corp.jpg. If the specified file is not available when the user logs on, no wallpaper is displayed. Users cannot specify alternative wallpaper. You can also use this setting to specify that the wallpaper image be centered, tiled, or stretched. Users cannot change this specification. + +If you disable this setting or do not configure it, no wallpaper is displayed. However, users can select the wallpaper of their choice. + +Also, see the "Allow only bitmapped wallpaper" in the same location, and the "Prevent changing wallpaper" setting in User Configuration\Administrative Templates\Control Panel. + +> [!NOTE] +> This setting does not apply to remote desktop server sessions. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Desktop Wallpaper* +- GP name: *Wallpaper* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/sz_ATC_DisableAdd** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from adding Web content to their Active Desktop. + +This setting removes the "New" button from Web tab in Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop. This setting does not remove existing Web content from their Active Desktop, or prevent users from removing existing Web content. + +Also, see the "Disable all items" setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit adding items* +- GP name: *sz_ATC_DisableAdd* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/sz_ATC_DisableClose** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from removing Web content from their Active Desktop. + +In Active Desktop, you can add items to the desktop but close them so they are not displayed. + +If you enable this setting, items added to the desktop cannot be closed; they always appear on the desktop. This setting removes the check boxes from items on the Web tab in Display in Control Panel. + +> [!NOTE] +> This setting does not prevent users from deleting items from their Active Desktop. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit closing items* +- GP name: *sz_ATC_DisableClose* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/sz_ATC_DisableDel** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from deleting Web content from their Active Desktop. + +This setting removes the Delete button from the Web tab in Display in Control Panel. As a result, users can temporarily remove, but not delete, Web content from their Active Desktop. + +This setting does not prevent users from adding Web content to their Active Desktop. + +Also, see the "Prohibit closing items" and "Disable all items" settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit deleting items* +- GP name: *sz_ATC_DisableDel* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/sz_ATC_DisableEdit** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from changing the properties of Web content items on their Active Desktop. + +This setting disables the Properties button on the Web tab in Display in Control Panel. Also, it removes the Properties item from the menu for each item on the Active Desktop. As a result, users cannot change the properties of an item, such as its synchronization schedule, password, or display characteristics. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit editing items* +- GP name: *sz_ATC_DisableEdit* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/sz_ATC_NoComponents** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Removes Active Desktop content and prevents users from adding Active Desktop content. + +This setting removes all Active Desktop items from the desktop. It also removes the Web tab from Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop. + +> [!NOTE] +> This setting does not disable Active Desktop. Users can still use image formats, such as JPEG and GIF, for their desktop wallpaper. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disable all items* +- GP name: *sz_ATC_NoComponents* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/sz_AdminComponents_Title** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Adds and deletes specified Web content items. + +You can use the "Add" box in this setting to add particular Web-based items or shortcuts to users' desktops. Users can close or delete the items (if settings allow), but the items are added again each time the setting is refreshed. + +You can also use this setting to delete particular Web-based items from users' desktops. Users can add the item again (if settings allow), but the item is deleted each time the setting is refreshed. + +> [!NOTE] +> Removing an item from the "Add" list for this setting is not the same as deleting it. Items that are removed from the "Add" list are not removed from the desktop. They are simply not added again. + +> [!NOTE] +> For this setting to take affect, you must log off and log on to the system. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Add/Delete items* +- GP name: *sz_AdminComponents_Title* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/sz_DB_DragDropClose** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from manipulating desktop toolbars. + +If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars. + +> [!NOTE] +> If users have added or removed toolbars, this setting prevents them from restoring the default configuration. + +> [!TIP] +> To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to "Toolbars." + +Also, see the "Prohibit adjusting desktop toolbars" setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent adding, dragging, dropping and closing the Taskbar's toolbars* +- GP name: *sz_DB_DragDropClose* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/sz_DB_Moving** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars. + +This setting does not prevent users from adding or removing toolbars on the desktop. + +> [!NOTE] +> If users have adjusted their toolbars, this setting prevents them from restoring the default configuration. + +Also, see the "Prevent adding, dragging, dropping and closing the Taskbar's toolbars" setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit adjusting desktop toolbars* +- GP name: *sz_DB_Moving* +- GP path: *Desktop* +- GP ADMX file name: *Desktop.admx* + + + +
    + + +**ADMX_Desktop/sz_DWP_NoHTMLPaper** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Permits only bitmap images for wallpaper. This setting limits the desktop background ("wallpaper") to bitmap (.bmp) files. If users select files with other image formats, such as JPEG, GIF, PNG, or HTML, through the Browse button on the Desktop tab, the wallpaper does not load. Files that are autoconverted to a .bmp format, such as JPEG, GIF, and PNG, can be set as Wallpaper by right-clicking the image and selecting "Set as Wallpaper". + +Also, see the "Desktop Wallpaper" and the "Prevent changing wallpaper" (in User Configuration\Administrative Templates\Control Panel\Display) settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow only bitmapped wallpaper* +- GP name: *sz_DWP_NoHTMLPaper* +- GP path: *Desktop\Desktop* +- GP ADMX file name: *Desktop.admx* From a5138b7534fb0c94df82070b29037cb898e1fc38 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Mon, 7 Dec 2020 14:49:22 +0200 Subject: [PATCH 119/958] add link about AD config for BitLocker https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8621 --- .../bitlocker/bitlocker-group-policy-settings.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md index d9658a3113..91bf628e8b 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md +++ b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md @@ -37,6 +37,9 @@ Most of the BitLocker Group Policy settings are applied when BitLocker is initia If multiple changes are necessary to bring the drive into compliance, you must suspend BitLocker protection, make the necessary changes, and then resume protection. This situation could occur, for example, if a removable drive was initially configured to be unlocked with a password and then Group Policy settings are changed to disallow passwords and require smart cards. In this situation, you need to suspend BitLocker protection by using the [Manage-bde](/windows-server/administration/windows-commands/manage-bde) command-line tool, delete the password unlock method, and add the smart card method. After this is complete, BitLocker is compliant with the Group Policy setting and BitLocker protection on the drive can be resumed. +> [!NOTE] +> For more details about Active Directory configuration related to BitLocker enablement, please check [this article](https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/set-up-mdt-for-bitlocker). + ## BitLocker Group Policy settings The following sections provide a comprehensive list of BitLocker Group Policy settings that are organized by usage. BitLocker Group Policy settings include settings for specific drive types (operating system drives, fixed data drives, and removable data drives) and settings that are applied to all drives. From c0b156672b92c55252aa453bb4ea52acf135b384 Mon Sep 17 00:00:00 2001 From: chblac Date: Mon, 7 Dec 2020 11:37:15 -0800 Subject: [PATCH 120/958] Update bitlocker-csp.md --- windows/client-management/mdm/bitlocker-csp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index 07f3aa7f0f..652a24f8e4 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -1126,12 +1126,12 @@ Supported values: |-----|------------| | 0 |The BitLocker policy requires user consent to launch the BitLocker Drive Encryption Wizard to start encryption of the OS volume but the user didn't consent.| | 1 |The encryption method of the OS volume doesn't match the BitLocker policy.| -| 2 |The BitLocker policy requires a TPM protector to protect the OS volume, but a TPM isn't used.| +| 2 |The OS volume is unprotected.| | 3 |The BitLocker policy requires a TPM-only protector for the OS volume, but TPM protection isn't used.| | 4 |The BitLocker policy requires TPM+PIN protection for the OS volume, but a TPM+PIN protector isn't used.| | 5 |The BitLocker policy requires TPM+startup key protection for the OS volume, but a TPM+startup key protector isn't used.| | 6 |The BitLocker policy requires TPM+PIN+startup key protection for the OS volume, but a TPM+PIN+startup key protector isn't used.| -| 7 |The OS volume is unprotected.| +| 7 |The BitLocker policy requires a TPM protector to protect the OS volume, but a TPM isn't used.| | 8 |Recovery key backup failed.| | 9 |A fixed drive is unprotected.| | 10 |The encryption method of the fixed drive doesn't match the BitLocker policy.| From b67aca1f618e292254193280fa1802c953477255 Mon Sep 17 00:00:00 2001 From: Brian Caton Date: Mon, 7 Dec 2020 13:35:35 -0800 Subject: [PATCH 121/958] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 8948b3b3fe..8a7721f432 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -21,7 +21,7 @@ This article describes a scenario where previously enabled Firewall rules revert ## Rule groups -Individual built-in Firewall rules are categorized within a group. For example, the following individual rules form part of the Remote Desktop group. +For organizational purposes, individual built-in Firewall rules are categorized within a group. For example, the following rules form part of the Remote Desktop group. - Remote Desktop – Shadow (TCP-In) @@ -29,7 +29,7 @@ Individual built-in Firewall rules are categorized within a group. For example, - Remote Desktop – User-Mode (UDP-In) -Other examples include the core networking, file and print sharing, and network discovery groups. Admins can filter on individual categories in the Firewall interface (wf.msc) by selecting and right-clicking on **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other group examples include the core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the Firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group @@ -38,6 +38,6 @@ Get-NetFirewallRule -Group > [!NOTE] > It is recommended to enable an entire group instead of individual rules if the expectation is that the ruleset is going to be migrated at some point. -It is recommended to enable/disable all rules within a group, as opposed to enabling/disabling just one or two of the individual rules to help avoid unexpected behaviors. For example, while rule groups can be used to organize rules by influence and allows batch rule modifications, they are also used as a way to maintain rule state across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the process determines what should be enabled/disabled when the upgrade is complete. +To avoid unexpected behaviors it is recommended to enable/disable all of the rules within a group, as opposed to just one or two of the individual rules. This is because while rule groups are used to organize rules and allow batch rule modification by type, they also represents the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. -Take the Remote Desktop group example mentioned earlier. It consists of three rules. To ensure that the ruleset is properly maintained once the upgrade is complete, all three rules must be enabled. If only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group to maintain an as pristine out-of-the-box configuration as possible. Obviously, in this scenario, this brings the unintended consequence of being unable to establish RDP (Remote Desktop Protocol) connection to the host. +Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the ruleset is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking RDP (Remote Desktop Protocol) connectivity to the host. From 5ca4a3adb87afcc87c1aa3941aefd2b6382ead21 Mon Sep 17 00:00:00 2001 From: Brian Caton Date: Mon, 7 Dec 2020 14:34:19 -0800 Subject: [PATCH 122/958] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 8a7721f432..4d978ad0fe 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -29,7 +29,7 @@ For organizational purposes, individual built-in Firewall rules are categorized - Remote Desktop – User-Mode (UDP-In) -Other group examples include the core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the Firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the Firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group @@ -38,6 +38,6 @@ Get-NetFirewallRule -Group > [!NOTE] > It is recommended to enable an entire group instead of individual rules if the expectation is that the ruleset is going to be migrated at some point. -To avoid unexpected behaviors it is recommended to enable/disable all of the rules within a group, as opposed to just one or two of the individual rules. This is because while rule groups are used to organize rules and allow batch rule modification by type, they also represents the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. +To avoid unexpected behaviors it is recommended to enable/disable all of the rules within a group as opposed to just one or two of the individual rules. This is because while groups are used to organize rules and allow batch rule modification by type, they also represents the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the ruleset is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking RDP (Remote Desktop Protocol) connectivity to the host. From c65538b1cc6fdddb94903fe04e7a95d05f00e095 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 8 Dec 2020 11:29:25 -0800 Subject: [PATCH 123/958] Added SkyDrive and Explorer policies --- windows/client-management/mdm/TOC.md | 2 + .../mdm/policies-in-policy-csp-admx-backed.md | 6 + .../policy-configuration-service-provider.md | 28 ++ .../mdm/policy-csp-admx-explorer.md | 400 ++++++++++++++++++ .../mdm/policy-csp-admx-skydrive.md | 116 +++++ 5 files changed, 552 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-explorer.md create mode 100644 windows/client-management/mdm/policy-csp-admx-skydrive.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 19328d6086..86bd94db0c 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -193,6 +193,7 @@ #### [ADMX_DWM](policy-csp-admx-dwm.md) #### [ADMX_EncryptFilesonMove](policy-csp-admx-encryptfilesonmove.md) #### [ADMX_EventForwarding](policy-csp-admx-eventforwarding.md) +#### [ADMX_Explorer](policy-csp-admx-explorer.md) #### [ADMX_FileServerVSSProvider](policy-csp-admx-fileservervssprovider.md) #### [ADMX_FileSys](policy-csp-admx-filesys.md) #### [ADMX_FolderRedirection](policy-csp-admx-folderredirection.md) @@ -221,6 +222,7 @@ #### [ADMX_SharedFolders](policy-csp-admx-sharedfolders.md) #### [ADMX_Sharing](policy-csp-admx-sharing.md) #### [ADMX_ShellCommandPromptRegEditTools](policy-csp-admx-shellcommandpromptregedittools.md) +#### [ADMX_SkyDrive](policy-csp-admx-skydrive.md) #### [ADMX_Smartcard](policy-csp-admx-smartcard.md) #### [ADMX_Snmp](policy-csp-admx-snmp.md) #### [ADMX_StartMenu](policy-csp-admx-startmenu.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 1f50c812bc..862afe663b 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -142,6 +142,11 @@ ms.date: 10/08/2020 - [ADMX_EncryptFilesonMove/NoEncryptOnMove](./policy-csp-admx-encryptfilesonmove.md#admx-encryptfilesonmove-noencryptonmove) - [ADMX_EventForwarding/ForwarderResourceUsage](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-forwarderresourceusage) - [ADMX_EventForwarding/SubscriptionManager](./policy-csp-admx-eventforwarding.md#admx_eventforwarding-subscriptionmanager) +- [ADMX_Explorer/AdminInfoUrl](./policy-csp-admx-explorer.md#admx-explorer-admininfourl) +- [ADMX_Explorer/AlwaysShowClassicMenu](./policy-csp-admx-explorer.md#admx-explorer-alwaysshowclassicmenu) +- [ADMX_Explorer/DisableRoamedProfileInit](./policy-csp-admx-explorer.md#admx-explorer-disableroamedprofileinit) +- [ADMX_Explorer/PreventItemCreationInUsersFilesFolder](./policy-csp-admx-explorer.md#admx-explorer-preventitemcreationinusersfilesfolder) +- [ADMX_Explorer/TurnOffSPIAnimations](./policy-csp-admx-explorer.md#admx-explorer-turnoffspianimations) - [ADMX_FileServerVSSProvider/Pol_EncryptProtocol](./policy-csp-admx-fileservervssprovider.md#admx-fileservervssprovider-pol-encryptprotocol) - [ADMX_FileSys/DisableCompression](./policy-csp-admx-filesys.md#admx-filesys-disablecompression) - [ADMX_FileSys/DisableDeleteNotification](./policy-csp-admx-filesys.md#admx-filesys-disabledeletenotification) @@ -461,6 +466,7 @@ ms.date: 10/08/2020 - [ADMX_ShellCommandPromptRegEditTools/DisableRegedit](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disableregedit) - [ADMX_ShellCommandPromptRegEditTools/DisallowApps](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disallowapps) - [ADMX_ShellCommandPromptRegEditTools/RestrictApps](./policy-csp-admx-shellcommandpromptregedittools.md#admx-shellcommandpromptregedittools-disablecmd) +- [ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn](./policy-csp-admx-skydrive.md#admx-skydrive-preventnetworktrafficpreusersignin) - [ADMX_Smartcard/AllowCertificatesWithNoEKU](./policy-csp-admx-smartcard.md#admx-smartcard-allowcertificateswithnoeku) - [ADMX_Smartcard/AllowIntegratedUnblock](./policy-csp-admx-smartcard.md#admx-smartcard-allowintegratedunblock) - [ADMX_Smartcard/AllowSignatureOnlyKeys](./policy-csp-admx-smartcard.md#admx-smartcard-allowsignatureonlykeys) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 99fad505b6..9c50187fd7 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -633,6 +633,26 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_Explorer policies + +
    +
    + ADMX_Explorer/AdminInfoUrl +
    +
    + ADMX_Explorer/AlwaysShowClassicMenu +
    +
    + ADMX_Explorer/DisableRoamedProfileInit +
    +
    + ADMX_Explorer/PreventItemCreationInUsersFilesFolder +
    +
    + ADMX_Explorer/TurnOffSPIAnimations +
    +
    + ### ADMX_FileServerVSSProvider policies
    @@ -1717,6 +1737,14 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_SkyDrive policies + +
    +
    + ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn +
    +
    + ### ADMX_Smartcard policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-explorer.md b/windows/client-management/mdm/policy-csp-admx-explorer.md new file mode 100644 index 0000000000..31c5d764fb --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-explorer.md @@ -0,0 +1,400 @@ +--- +title: Policy CSP - ADMX_Explorer +description: Policy CSP - ADMX_Explorer +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/08/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Explorer +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Explorer policies + +
    +
    + ADMX_Explorer/AdminInfoUrl +
    +
    + ADMX_Explorer/AlwaysShowClassicMenu +
    +
    + ADMX_Explorer/DisableRoamedProfileInit +
    +
    + ADMX_Explorer/PreventItemCreationInUsersFilesFolder +
    +
    + ADMX_Explorer/TurnOffSPIAnimations +
    +
    + + +
    + + +**ADMX_Explorer/AdminInfoUrl** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Sets the target of the More Information link that will be displayed when the user attempts to run a program that is blocked by policy. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set a support web page link* +- GP name: *AdminInfoUrl* +- GP path: *Windows Components\File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + + +**ADMX_Explorer/AlwaysShowClassicMenu** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures File Explorer to always display the menu bar. + +> [!NOTE] +> By default, the menu bar is not displayed in File Explorer. + +If you enable this policy setting, the menu bar will be displayed in File Explorer. + +If you disable or do not configure this policy setting, the menu bar will not be displayed in File Explorer. + +> [!NOTE] +> When the menu bar is not displayed, users can access the menu bar by pressing the 'ALT' key. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Display the menu bar in File Explorer* +- GP name: *AlwaysShowClassicMenu* +- GP path: *Windows Components\File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + + +**ADMX_Explorer/DisableRoamedProfileInit** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows administrators who have configured roaming profile in conjunction with Delete Cached Roaming Profile Group Policy setting to ensure that Explorer will not reinitialize default program associations and other settings to default values. + +If you enable this policy setting on a machine that does not contain all programs installed in the same manner as it was on the machine on which the user had last logged on, unexpected behavior could occur. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not reinitialize a pre-existing roamed user profile when it is loaded on a machine for the first time* +- GP name: *DisableRoamedProfileInit* +- GP path: *Windows Components\File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + + +**ADMX_Explorer/PreventItemCreationInUsersFilesFolder** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users Files folder in File Explorer. + +If you enable this policy setting, users will no longer be able to add new items such as files or folders to the root of their Users Files folder in File Explorer. + +If you disable or do not configure this policy setting, users will be able to add new items such as files or folders to the root of their Users Files folder in File Explorer. + +> [!NOTE] +> Enabling this policy setting does not prevent the user from being able to add new items such as files and folders to their actual file system profile folder at %userprofile%. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent users from adding files to the root of their Users Files folder.* +- GP name: *PreventItemCreationInUsersFilesFolder* +- GP path: *Windows Components\File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + + +**ADMX_Explorer/TurnOffSPIAnimations** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy is similar to settings directly available to computer users. Disabling animations can improve usability for users with some visual disabilities as well as improving performance and battery life in some scenarios. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off common control and window animations* +- GP name: *TurnOffSPIAnimations* +- GP path: *Windows Components\File Explorer* +- GP ADMX file name: *Explorer.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file diff --git a/windows/client-management/mdm/policy-csp-admx-skydrive.md b/windows/client-management/mdm/policy-csp-admx-skydrive.md new file mode 100644 index 0000000000..5580f6e4e4 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-skydrive.md @@ -0,0 +1,116 @@ +--- +title: Policy CSP - ADMX_SkyDrive +description: Policy CSP - ADMX_SkyDrive +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/08/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_SkyDrive +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_SkyDrive policies + +
    +
    + ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn +
    +
    + + +
    + + +**ADMX_SkyDrive/PreventNetworkTrafficPreUserSignIn** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enable this setting to prevent the OneDrive sync client (OneDrive.exe) from generating network traffic (checking for updates, etc.) until the user signs in to OneDrive or starts syncing files to the local computer. + +If you enable this setting, users must sign in to the OneDrive sync client on the local computer, or select to sync OneDrive or SharePoint files on the computer, for the sync client to start automatically. + +If this setting is not enabled, the OneDrive sync client will start automatically when users sign in to Windows. + +If you enable or disable this setting, do not return the setting to Not Configured. Doing so will not change the configuration and the last configured setting will remain in effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent OneDrive from generating network traffic until the user signs in to OneDrive* +- GP name: *PreventNetworkTrafficPreUserSignIn* +- GP path: *Windows Components\OneDrive* +- GP ADMX file name: *SkyDrive.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 2c7249b47e5711800c79f1a88b12498c33af251a Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 8 Dec 2020 14:02:31 -0800 Subject: [PATCH 124/958] Added LanmanWorkstation policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 3 + .../policy-configuration-service-provider.md | 14 + .../mdm/policy-csp-admx-lanmanworkstation.md | 279 ++++++++++++++++++ 4 files changed, 297 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 86bd94db0c..631c73eec2 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -201,6 +201,7 @@ #### [ADMX_HelpAndSupport](policy-csp-admx-helpandsupport.md) #### [ADMX_kdc](policy-csp-admx-kdc.md) #### [ADMX_LanmanServer](policy-csp-admx-lanmanserver.md) +#### [ADMX_LanmanWorkstation](policy-csp-admx-lanmanworkstation.md) #### [ADMX_LinkLayerTopologyDiscovery](policy-csp-admx-linklayertopologydiscovery.md) #### [ADMX_MMC](policy-csp-admx-mmc.md) #### [ADMX_MMCSnapins](policy-csp-admx-mmcsnapins.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 862afe663b..b834641841 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -181,6 +181,9 @@ ms.date: 10/08/2020 - [ADMX_LanmanServer/Pol_HashPublication](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-hashpublication) - [ADMX_LanmanServer/Pol_HashSupportVersion](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-hashsupportversion) - [ADMX_LanmanServer/Pol_HonorCipherSuiteOrder](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-honorciphersuiteorder) +- [ADMX_LanmanWorkstation/Pol_CipherSuiteOrder](./policy-csp-admx-lanmanworkstation.md#admx-lanmanworkstation-pol-ciphersuiteorder) +- [ADMX_LanmanWorkstation/Pol_EnableHandleCachingForCAFiles](./policy-csp-admx-lanmanworkstation.md#admx-lanmanworkstation-pol-enablehandlecachingforcafiles) +- [ADMX_LanmanWorkstation/Pol_EnableOfflineFilesforCAShares](./policy-csp-admx-lanmanworkstation.md#admx-lanmanworkstation-pol-enableofflinefilesforcashares) - [ADMX_LinkLayerTopologyDiscovery/LLTD_EnableLLTDIO](./policy-csp-admx-linklayertopologydiscovery.md#admx-linklayertopologydiscovery-lltd-enablelltdio) - [ADMX_LinkLayerTopologyDiscovery/LLTD_EnableRspndr](./policy-csp-admx-linklayertopologydiscovery.md#admx-linklayertopologydiscovery-lltd-enablerspndr) - [ADMX_MMC/MMC_ActiveXControl](./policy-csp-admx-mmc.md#admx-mmc-mmc-activexcontrol) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 9c50187fd7..1bec41f8c4 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -783,6 +783,20 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_LanmanWorkstation policies + +
    +
    + ADMX_LanmanWorkstation/Pol_CipherSuiteOrder +
    +
    + ADMX_LanmanWorkstation/Pol_EnableHandleCachingForCAFiles +
    +
    + ADMX_LanmanWorkstation/Pol_EnableOfflineFilesforCAShares +
    +
    + ### ADMX_LinkLayerTopologyDiscovery policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md new file mode 100644 index 0000000000..5a9ce576f9 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md @@ -0,0 +1,279 @@ +--- +title: Policy CSP - ADMX_LanmanWorkstation +description: Policy CSP - ADMX_LanmanWorkstation +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/08/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_LanmanWorkstation +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_LanmanWorkstation policies + +
    +
    + ADMX_LanmanWorkstation/Pol_CipherSuiteOrder +
    +
    + ADMX_LanmanWorkstation/Pol_EnableHandleCachingForCAFiles +
    +
    + ADMX_LanmanWorkstation/Pol_EnableOfflineFilesforCAShares +
    +
    + + +
    + + +**ADMX_LanmanWorkstation/Pol_CipherSuiteOrder** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the cipher suites used by the SMB client. + +If you enable this policy setting, cipher suites are prioritized in the order specified. + +If you enable this policy setting and do not specify at least one supported cipher suite, or if you disable or do not configure this policy setting, the default cipher suite order is used. + +SMB 3.11 cipher suites: + +- AES_128_GCM +- AES_128_CCM + +SMB 3.0 and 3.02 cipher suites: + +- AES_128_CCM + +How to modify this setting: + +Arrange the desired cipher suites in the edit box, one cipher suite per line, in order from most to least preferred, with the most preferred cipher suite at the top. Remove any cipher suites you don't want to use. + +> [!NOTE] +> When configuring this security setting, changes will not take effect until you restart Windows. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Cipher suite order* +- GP name: *Pol_CipherSuiteOrder* +- GP path: *Network\Lanman Workstation* +- GP ADMX file name: *LanmanWorkstation.admx* + + + +
    + + +**ADMX_LanmanWorkstation/Pol_EnableHandleCachingForCAFiles** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the behavior of SMB handle caching for clients connecting to an SMB share where the Continuous Availability (CA) flag is enabled. + +If you enable this policy setting, the SMB client will allow cached handles to files on CA shares. This may lead to better performance when repeatedly accessing a large number of unstructured data files on CA shares running in Microsoft Azure Files. + +If you disable or do not configure this policy setting, Windows will prevent use of cached handles to files opened through CA shares. + +> [!NOTE] +> This policy has no effect when connecting Scale-out File Server shares provided by a Windows Server. Microsoft does not recommend enabling this policy for clients that routinely connect to files hosted on a Windows Failover Cluster with the File Server for General Use role, as it can lead to adverse failover times and increased memory and CPU usage. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Handle Caching on Continuous Availability Shares* +- GP name: *Pol_EnableHandleCachingForCAFiles* +- GP path: *Network\Lanman Workstation* +- GP ADMX file name: *LanmanWorkstation.admx* + + + +
    + + +**ADMX_LanmanWorkstation/Pol_EnableOfflineFilesforCAShares** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the behavior of Offline Files on clients connecting to an SMB share where the Continuous Availability (CA) flag is enabled. + +If you enable this policy setting, the "Always Available offline" option will appear in the File Explorer menu on a Windows computer when connecting to a CA-enabled share. Pinning of files on CA-enabled shares using client-side caching will also be possible. + +If you disable or do not configure this policy setting, Windows will prevent use of Offline Files with CA-enabled shares. + +> [!NOTE] +> Microsoft does not recommend enabling this group policy. Use of CA with Offline Files will lead to very long transition times between the online and offline states. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Offline Files Availability on Continuous Availability Shares* +- GP name: *Pol_EnableOfflineFilesforCAShares* +- GP path: *Network\Lanman Workstation* +- GP ADMX file name: *LanmanWorkstation.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 2d26392f0ac86aec91def4ccf5d274972721b5fc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 14:24:06 -0800 Subject: [PATCH 125/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index f5e542e2f6..ecaa7bcca5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -14,7 +14,7 @@ ms.author: deniseb ms.reviewer: sugamar, jcedola manager: dansimp ms.custom: asr -ms.date: 11/30/2020 +ms.date: 12/08/2020 --- # Reduce attack surfaces with attack surface reduction rules @@ -26,17 +26,17 @@ ms.date: 11/30/2020 * [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -## Overview +## Why attack surface reduction is important -Your attack surface includes all the places where an attacker could compromise your organization's devices or networks. Reducing your attack surface means protecting your organization's devices and network, which leaves attackers with fewer ways to perform attacks. +Your organization's attack surface includes all the places where an attacker could compromise your organization's devices or networks. Reducing your attack surface means protecting your organization's devices and network, which leaves attackers with fewer ways to perform attacks. Configuring attack surface reduction rules in Microsoft Defender for Endpoint can help! -Attack surface reduction rules target certain software behaviors that are often abused by attackers. Such behaviors include: +Attack surface reduction rules target certain software behaviors, such as: - Launching executable files and scripts that attempt to download or run files; - Running obfuscated or otherwise suspicious scripts; and - Performing behaviors that apps don't usually initiate during normal day-to-day work. -Such software behaviors are sometimes seen in legitimate applications; however, these behaviors are often considered risky because they are commonly abused by malware. Attack surface reduction rules can constrain risky behaviors and help keep your organization safe. +Such software behaviors are sometimes seen in legitimate applications; however, these behaviors are often considered risky because they are commonly abused by attackers through malware. Attack surface reduction rules can constrain risky behaviors and help keep your organization safe. For more information about configuring attack surface reduction rules, see [Enable attack surface reduction rules](enable-attack-surface-reduction.md). From d3ae0137c435263d5e85e9d4a028c7acfd085748 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 14:33:41 -0800 Subject: [PATCH 126/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index ecaa7bcca5..46951dd11c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -109,14 +109,14 @@ The following sections describe each of the 15 attack surface reduction rules. T | Rule name | GUID | File & folder exclusions | Minimum OS supported | |-----|----|---|---| -|[Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) | `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) | `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block executable files from running unless they meet a prevalence, age, or trusted list criterion](#block-executable-files-from-running-unless-they-meet-a-prevalence-age-or-trusted-list-criterion) | `01443614-cd74-433a-b99e-2ecdc07bfc25` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block execution of potentially obfuscated scripts](#block-execution-of-potentially-obfuscated-scripts) | `5BEB7EFE-FD9A-4556-801D-275E5FFC04CC` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) | `D3E037E1-3EB8-44C8-A917-57927947596D` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from creating executable content](#block-office-applications-from-creating-executable-content) | `3B576869-A4EC-4529-8536-B80A7769E899` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from injecting code into other processes](#block-office-applications-from-injecting-code-into-other-processes) | `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) | `D3E037E1-3EB8-44C8-A917-57927947596D` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block execution of potentially obfuscated scripts](#block-execution-of-potentially-obfuscated-scripts) | `5BEB7EFE-FD9A-4556-801D-275E5FFC04CC` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block executable files from running unless they meet a prevalence, age, or trusted list criterion](#block-executable-files-from-running-unless-they-meet-a-prevalence-age-or-trusted-list-criterion) | `01443614-cd74-433a-b99e-2ecdc07bfc25` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block process creations originating from PSExec and WMI commands](#block-process-creations-originating-from-psexec-and-wmi-commands) | `d1e49aac-8f56-4280-b9ba-993a6d77406c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | From bf1dd1f078d9209b452fc11ae5b7f13b851e2d8c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 14:35:43 -0800 Subject: [PATCH 127/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 46951dd11c..e0b1a68177 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -105,11 +105,12 @@ The "engine version" listed for attack surface reduction events in the event log ## Attack surface reduction rules -The following sections describe each of the 15 attack surface reduction rules. This table shows their corresponding GUIDs, which you use if you're configuring the rules with Group Policy or PowerShell. If you use Microsoft Endpoint Configuration Manager or Microsoft Intune, you do not need the GUIDs: +The following sections describe each of the 15 attack surface reduction rules (in alphabetical order of rule name). This table shows their corresponding GUIDs, which you use if you're configuring the rules with Group Policy or PowerShell. If you use Microsoft Endpoint Configuration Manager or Microsoft Intune, you do not need the GUIDs: | Rule name | GUID | File & folder exclusions | Minimum OS supported | |-----|----|---|---| |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) | `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block executable files from running unless they meet a prevalence, age, or trusted list criterion](#block-executable-files-from-running-unless-they-meet-a-prevalence-age-or-trusted-list-criterion) | `01443614-cd74-433a-b99e-2ecdc07bfc25` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block execution of potentially obfuscated scripts](#block-execution-of-potentially-obfuscated-scripts) | `5BEB7EFE-FD9A-4556-801D-275E5FFC04CC` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | @@ -118,7 +119,6 @@ The following sections describe each of the 15 attack surface reduction rules. T |[Block Office applications from injecting code into other processes](#block-office-applications-from-injecting-code-into-other-processes) | `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block process creations originating from PSExec and WMI commands](#block-process-creations-originating-from-psexec-and-wmi-commands) | `d1e49aac-8f56-4280-b9ba-993a6d77406c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block untrusted and unsigned processes that run from USB](#block-untrusted-and-unsigned-processes-that-run-from-usb) | `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office communication application from creating child processes](#block-office-communication-application-from-creating-child-processes) | `26190899-1602-49e8-8b27-eb1d0a1ce869` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | From e66d6381b38f28f20b88652ffe5d178230ca6520 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 14:37:02 -0800 Subject: [PATCH 128/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index e0b1a68177..8acd90b68f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -117,13 +117,14 @@ The following sections describe each of the 15 attack surface reduction rules (i |[Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) | `D3E037E1-3EB8-44C8-A917-57927947596D` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from creating executable content](#block-office-applications-from-creating-executable-content) | `3B576869-A4EC-4529-8536-B80A7769E899` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from injecting code into other processes](#block-office-applications-from-injecting-code-into-other-processes) | `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block persistence through WMI event subscription](#block-persistence-through-wmi-event-subscription) | `e6db77e5-3df2-4cf1-b95a-636979351e5b` | Not supported | [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) (build 18362) or greater | |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block process creations originating from PSExec and WMI commands](#block-process-creations-originating-from-psexec-and-wmi-commands) | `d1e49aac-8f56-4280-b9ba-993a6d77406c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block untrusted and unsigned processes that run from USB](#block-untrusted-and-unsigned-processes-that-run-from-usb) | `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office communication application from creating child processes](#block-office-communication-application-from-creating-child-processes) | `26190899-1602-49e8-8b27-eb1d0a1ce869` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block persistence through WMI event subscription](#block-persistence-through-wmi-event-subscription) | `e6db77e5-3df2-4cf1-b95a-636979351e5b` | Not supported | [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) (build 18362) or greater | + ### Block executable content from email client and webmail From 03600bc363aa8c36917be87c4dd185eb3af0a20f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 14:38:05 -0800 Subject: [PATCH 129/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 8acd90b68f..0a1b17df14 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -117,12 +117,13 @@ The following sections describe each of the 15 attack surface reduction rules (i |[Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) | `D3E037E1-3EB8-44C8-A917-57927947596D` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from creating executable content](#block-office-applications-from-creating-executable-content) | `3B576869-A4EC-4529-8536-B80A7769E899` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from injecting code into other processes](#block-office-applications-from-injecting-code-into-other-processes) | `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block Office communication application from creating child processes](#block-office-communication-application-from-creating-child-processes) | `26190899-1602-49e8-8b27-eb1d0a1ce869` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | + |[Block persistence through WMI event subscription](#block-persistence-through-wmi-event-subscription) | `e6db77e5-3df2-4cf1-b95a-636979351e5b` | Not supported | [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) (build 18362) or greater | |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block process creations originating from PSExec and WMI commands](#block-process-creations-originating-from-psexec-and-wmi-commands) | `d1e49aac-8f56-4280-b9ba-993a6d77406c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block untrusted and unsigned processes that run from USB](#block-untrusted-and-unsigned-processes-that-run-from-usb) | `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block Office communication application from creating child processes](#block-office-communication-application-from-creating-child-processes) | `26190899-1602-49e8-8b27-eb1d0a1ce869` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | From 146f9a79bf75a88dad2af071012c3112c0b7d370 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 14:39:16 -0800 Subject: [PATCH 130/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 0a1b17df14..946f52908f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -108,7 +108,8 @@ The "engine version" listed for attack surface reduction events in the event log The following sections describe each of the 15 attack surface reduction rules (in alphabetical order of rule name). This table shows their corresponding GUIDs, which you use if you're configuring the rules with Group Policy or PowerShell. If you use Microsoft Endpoint Configuration Manager or Microsoft Intune, you do not need the GUIDs: | Rule name | GUID | File & folder exclusions | Minimum OS supported | -|-----|----|---|---| +|-----|-----|-----|-----| +|[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) | `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | @@ -117,14 +118,12 @@ The following sections describe each of the 15 attack surface reduction rules (i |[Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) | `D3E037E1-3EB8-44C8-A917-57927947596D` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from creating executable content](#block-office-applications-from-creating-executable-content) | `3B576869-A4EC-4529-8536-B80A7769E899` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from injecting code into other processes](#block-office-applications-from-injecting-code-into-other-processes) | `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block Office communication application from creating child processes](#block-office-communication-application-from-creating-child-processes) | `26190899-1602-49e8-8b27-eb1d0a1ce869` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | - |[Block persistence through WMI event subscription](#block-persistence-through-wmi-event-subscription) | `e6db77e5-3df2-4cf1-b95a-636979351e5b` | Not supported | [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) (build 18362) or greater | |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block process creations originating from PSExec and WMI commands](#block-process-creations-originating-from-psexec-and-wmi-commands) | `d1e49aac-8f56-4280-b9ba-993a6d77406c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block untrusted and unsigned processes that run from USB](#block-untrusted-and-unsigned-processes-that-run-from-usb) | `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | + ### Block executable content from email client and webmail From c1cdaa7c498d5384b3ff48e91c77b68467549992 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 14:40:26 -0800 Subject: [PATCH 131/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 946f52908f..eb9e2bead0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -119,9 +119,9 @@ The following sections describe each of the 15 attack surface reduction rules (i |[Block Office applications from creating executable content](#block-office-applications-from-creating-executable-content) | `3B576869-A4EC-4529-8536-B80A7769E899` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from injecting code into other processes](#block-office-applications-from-injecting-code-into-other-processes) | `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block persistence through WMI event subscription](#block-persistence-through-wmi-event-subscription) | `e6db77e5-3df2-4cf1-b95a-636979351e5b` | Not supported | [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) (build 18362) or greater | +|[Block process creations originating from PSExec and WMI commands](#block-process-creations-originating-from-psexec-and-wmi-commands) | `d1e49aac-8f56-4280-b9ba-993a6d77406c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block process creations originating from PSExec and WMI commands](#block-process-creations-originating-from-psexec-and-wmi-commands) | `d1e49aac-8f56-4280-b9ba-993a6d77406c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block untrusted and unsigned processes that run from USB](#block-untrusted-and-unsigned-processes-that-run-from-usb) | `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | From fa2360cd600701b4866e3f6e7aa39e507118d779 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 14:40:59 -0800 Subject: [PATCH 132/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index eb9e2bead0..a50eca6244 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -120,9 +120,10 @@ The following sections describe each of the 15 attack surface reduction rules (i |[Block Office applications from injecting code into other processes](#block-office-applications-from-injecting-code-into-other-processes) | `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block persistence through WMI event subscription](#block-persistence-through-wmi-event-subscription) | `e6db77e5-3df2-4cf1-b95a-636979351e5b` | Not supported | [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) (build 18362) or greater | |[Block process creations originating from PSExec and WMI commands](#block-process-creations-originating-from-psexec-and-wmi-commands) | `d1e49aac-8f56-4280-b9ba-993a6d77406c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block untrusted and unsigned processes that run from USB](#block-untrusted-and-unsigned-processes-that-run-from-usb) | `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block untrusted and unsigned processes that run from USB](#block-untrusted-and-unsigned-processes-that-run-from-usb) | `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | + From b7061104398b40c1c4c0601fb67cdf568ea87e0e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 14:48:28 -0800 Subject: [PATCH 133/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index a50eca6244..ae43672ba2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -105,11 +105,12 @@ The "engine version" listed for attack surface reduction events in the event log ## Attack surface reduction rules -The following sections describe each of the 15 attack surface reduction rules (in alphabetical order of rule name). This table shows their corresponding GUIDs, which you use if you're configuring the rules with Group Policy or PowerShell. If you use Microsoft Endpoint Configuration Manager or Microsoft Intune, you do not need the GUIDs: +The following sections describe each of the 16 attack surface reduction rules (in alphabetical order of rule name). This table shows their corresponding GUIDs, which you use if you're configuring the rules with Group Policy or PowerShell. If you use Microsoft Endpoint Configuration Manager or Microsoft Intune, you do not need the GUIDs: | Rule name | GUID | File & folder exclusions | Minimum OS supported | |-----|-----|-----|-----| |[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|Block abuse of in-the-wild exploited vulnerable signed drivers (NEW!) | | | | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) | `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | @@ -118,6 +119,7 @@ The following sections describe each of the 15 attack surface reduction rules (i |[Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) | `D3E037E1-3EB8-44C8-A917-57927947596D` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from creating executable content](#block-office-applications-from-creating-executable-content) | `3B576869-A4EC-4529-8536-B80A7769E899` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Office applications from injecting code into other processes](#block-office-applications-from-injecting-code-into-other-processes) | `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block Office communication application from creating child processes](#block-office-communication-application-from-creating-child-processes) |`26190899-1602-49e8-8b27-eb1d0a1ce869` |Supported |[Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block persistence through WMI event subscription](#block-persistence-through-wmi-event-subscription) | `e6db77e5-3df2-4cf1-b95a-636979351e5b` | Not supported | [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) (build 18362) or greater | |[Block process creations originating from PSExec and WMI commands](#block-process-creations-originating-from-psexec-and-wmi-commands) | `d1e49aac-8f56-4280-b9ba-993a6d77406c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block untrusted and unsigned processes that run from USB](#block-untrusted-and-unsigned-processes-that-run-from-usb) | `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | @@ -125,8 +127,6 @@ The following sections describe each of the 15 attack surface reduction rules (i |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | - - ### Block executable content from email client and webmail This rule blocks the following file types from launching from email opened within the Microsoft Outlook application, or Outlook.com and other popular webmail providers: From d73ceb1d037b841ac58a4c029e427d6ae07c40d9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 14:59:41 -0800 Subject: [PATCH 134/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index ae43672ba2..79f641e58b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -110,7 +110,7 @@ The following sections describe each of the 16 attack surface reduction rules (i | Rule name | GUID | File & folder exclusions | Minimum OS supported | |-----|-----|-----|-----| |[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|Block abuse of in-the-wild exploited vulnerable signed drivers (NEW!) | | | | +|Block abuse of in-the-wild exploited vulnerable signed drivers (NEW!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | | | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) | `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | @@ -126,6 +126,10 @@ The following sections describe each of the 16 attack surface reduction rules (i |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +### Block abuse of in-the-wild exploited vulnerable signed drivers + +This rule prevents an application from writing a vulnerable signed driver to disk. Vulnerable signed drivers can be exploited by local applications with sufficient privileges, to gain access to the kernel. It allows attackers to disable or circumvent security solutions, eventually leading to system compromise. + ### Block executable content from email client and webmail From bdd276ef6bf647dd8cc781a979284a29b144734a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 15:29:55 -0800 Subject: [PATCH 135/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 38 ++++++++++--------- 1 file changed, 20 insertions(+), 18 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 79f641e58b..96c3a4434d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -26,7 +26,7 @@ ms.date: 12/08/2020 * [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -## Why attack surface reduction is important +## Why attack surface reduction rules are important Your organization's attack surface includes all the places where an attacker could compromise your organization's devices or networks. Reducing your attack surface means protecting your organization's devices and network, which leaves attackers with fewer ways to perform attacks. Configuring attack surface reduction rules in Microsoft Defender for Endpoint can help! @@ -126,6 +126,25 @@ The following sections describe each of the 16 attack surface reduction rules (i |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | + +### Block Adobe Reader from creating child processes + +This rule prevents attacks by blocking Adobe Reader from creating additional processes. + +Through social engineering or exploits, malware can download and launch additional payloads and break out of Adobe Reader. By blocking child processes from being generated by Adobe Reader, malware attempting to use it as a vector are prevented from spreading. + +This rule was introduced in: +- [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) + +Intune name: Process creation from Adobe Reader (beta) + +Configuration Manager name: Not yet available + +GUID: `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` + + ### Block abuse of in-the-wild exploited vulnerable signed drivers This rule prevents an application from writing a vulnerable signed driver to disk. Vulnerable signed drivers can be exploited by local applications with sufficient privileges, to gain access to the kernel. It allows attackers to disable or circumvent security solutions, eventually leading to system compromise. @@ -381,23 +400,6 @@ Configuration Manager name: Not yet available GUID: `26190899-1602-49e8-8b27-eb1d0a1ce869` -### Block Adobe Reader from creating child processes - -This rule prevents attacks by blocking Adobe Reader from creating additional processes. - -Through social engineering or exploits, malware can download and launch additional payloads and break out of Adobe Reader. By blocking child processes from being generated by Adobe Reader, malware attempting to use it as a vector are prevented from spreading. - -This rule was introduced in: -- [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) -- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) -- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - -Intune name: Process creation from Adobe Reader (beta) - -Configuration Manager name: Not yet available - -GUID: `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` - ### Block persistence through WMI event subscription This rule prevents malware from abusing WMI to attain persistence on a device. From e3a8eb5cc0bfe9e7fd82cc237cb1bb411653bfec Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 15:33:16 -0800 Subject: [PATCH 136/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 74 ++++++++++--------- 1 file changed, 38 insertions(+), 36 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 96c3a4434d..a1f9ff2328 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -144,11 +144,48 @@ Configuration Manager name: Not yet available GUID: `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` - ### Block abuse of in-the-wild exploited vulnerable signed drivers This rule prevents an application from writing a vulnerable signed driver to disk. Vulnerable signed drivers can be exploited by local applications with sufficient privileges, to gain access to the kernel. It allows attackers to disable or circumvent security solutions, eventually leading to system compromise. +### Block all Office applications from creating child processes + +This rule blocks Office apps from creating child processes. This includes Word, Excel, PowerPoint, OneNote, and Access. + +Creating malicious child processes is a common malware strategy. Malware that abuse Office as a vector often run VBA macros and exploit code to download and attempt to run additional payloads. However, some legitimate line-of-business applications might also generate child processes for benign purposes, such as spawning a command prompt or using PowerShell to configure registry settings. + +This rule was introduced in: +- [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) +- [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) + +Intune name: Office apps launching child processes + +Configuration Manager name: Block Office application from creating child processes + +GUID: `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` + +### Block credential stealing from the Windows local security authority subsystem + +This rule helps prevent credential stealing, by locking down Local Security Authority Subsystem Service (LSASS). + +LSASS authenticates users who log in to a Windows computer. Microsoft Defender Credential Guard in Windows 10 normally prevents attempts to extract credentials from LSASS. However, some organizations can't enable Credential Guard on all of their computers because of compatibility issues with custom smartcard drivers or other programs that load into the Local Security Authority (LSA). In these cases, attackers can use hack tools like Mimikatz to scrape cleartext passwords and NTLM hashes from LSASS. + +> [!NOTE] +> In some apps, the code enumerates all running processes and attempts to open them with exhaustive permissions. This rule denies the app's process open action and logs the details to the security event log. This rule can generate a lot of noise. If you have an app that simply enumerates LSASS, but has no real impact in functionality, there is NO need to add it to the exclusion list. By itself, this event log entry doesn't necessarily indicate a malicious threat. + +This rule was introduced in: +- [Windows 10, version 1803](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) +- [Configuration Manager CB 1802](https://docs.microsoft.com/configmgr/core/servers/manage/updates) + +Intune name: Flag credential stealing from the Windows local security authority subsystem + +Configuration Manager name: Block credential stealing from the Windows local security authority subsystem + +GUID: `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` ### Block executable content from email client and webmail @@ -169,23 +206,8 @@ Microsoft Endpoint Configuration Manager name: Block executable content from ema GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` -### Block all Office applications from creating child processes -This rule blocks Office apps from creating child processes. This includes Word, Excel, PowerPoint, OneNote, and Access. -Creating malicious child processes is a common malware strategy. Malware that abuse Office as a vector often run VBA macros and exploit code to download and attempt to run additional payloads. However, some legitimate line-of-business applications might also generate child processes for benign purposes, such as spawning a command prompt or using PowerShell to configure registry settings. - -This rule was introduced in: -- [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) -- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) -- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) -- [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) - -Intune name: Office apps launching child processes - -Configuration Manager name: Block Office application from creating child processes - -GUID: `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` ### Block Office applications from creating executable content @@ -325,26 +347,6 @@ Configuration Manager name: Use advanced protection against ransomware GUID: `c1db55ab-c21a-4637-bb3f-a12568109d35` -### Block credential stealing from the Windows local security authority subsystem - -This rule helps prevent credential stealing, by locking down Local Security Authority Subsystem Service (LSASS). - -LSASS authenticates users who log in to a Windows computer. Microsoft Defender Credential Guard in Windows 10 normally prevents attempts to extract credentials from LSASS. However, some organizations can't enable Credential Guard on all of their computers because of compatibility issues with custom smartcard drivers or other programs that load into the Local Security Authority (LSA). In these cases, attackers can use hack tools like Mimikatz to scrape cleartext passwords and NTLM hashes from LSASS. - -> [!NOTE] -> In some apps, the code enumerates all running processes and attempts to open them with exhaustive permissions. This rule denies the app's process open action and logs the details to the security event log. This rule can generate a lot of noise. If you have an app that simply enumerates LSASS, but has no real impact in functionality, there is NO need to add it to the exclusion list. By itself, this event log entry doesn't necessarily indicate a malicious threat. - -This rule was introduced in: -- [Windows 10, version 1803](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) -- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) -- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) -- [Configuration Manager CB 1802](https://docs.microsoft.com/configmgr/core/servers/manage/updates) - -Intune name: Flag credential stealing from the Windows local security authority subsystem - -Configuration Manager name: Block credential stealing from the Windows local security authority subsystem - -GUID: `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` ### Block process creations originating from PSExec and WMI commands From bc44d9d509c5a8f2e84552e9573a7ed6d224c5af Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 15:34:16 -0800 Subject: [PATCH 137/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 50 +++++++++---------- 1 file changed, 25 insertions(+), 25 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index a1f9ff2328..260513eca3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -206,6 +206,31 @@ Microsoft Endpoint Configuration Manager name: Block executable content from ema GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` +### Block executable files from running unless they meet a prevalence, age, or trusted list criterion + +This rule blocks the following file types from launching unless they meet prevalence or age criteria, or they're in a trusted list or an exclusion list: + +- Executable files (such as .exe, .dll, or .scr) + +Launching untrusted or unknown executable files can be risky, as it may not be initially clear if the files are malicious. + +> [!IMPORTANT] +> You must [enable cloud-delivered protection](../microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md) to use this rule.

    The rule **Block executable files from running unless they meet a prevalence, age, or trusted list criterion** with GUID 01443614-cd74-433a-b99e-2ecdc07bfc25 is owned by Microsoft and is not specified by admins. It uses cloud-delivered protection to update its trusted list regularly. +> +>You can specify individual files or folders (using folder paths or fully qualified resource names) but you can't specify which rules or exclusions apply to. + +This rule was introduced in: +- [Windows 10, version 1803](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) +- [Configuration Manager CB 1802](https://docs.microsoft.com/configmgr/core/servers/manage/updates) + +Intune name: Executables that don't meet a prevalence, age, or trusted list criteria. + +Configuration Manager name: Block executable files from running unless they meet a prevalence, age, or trusted list criteria + +GUID: `01443614-cd74-433a-b99e-2ecdc07bfc25` + @@ -303,31 +328,6 @@ Configuration Manager name: Block Win32 API calls from Office macros GUID: `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` -### Block executable files from running unless they meet a prevalence, age, or trusted list criterion - -This rule blocks the following file types from launching unless they meet prevalence or age criteria, or they're in a trusted list or an exclusion list: - -- Executable files (such as .exe, .dll, or .scr) - -Launching untrusted or unknown executable files can be risky, as it may not be initially clear if the files are malicious. - -> [!IMPORTANT] -> You must [enable cloud-delivered protection](../microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md) to use this rule.

    The rule **Block executable files from running unless they meet a prevalence, age, or trusted list criterion** with GUID 01443614-cd74-433a-b99e-2ecdc07bfc25 is owned by Microsoft and is not specified by admins. It uses cloud-delivered protection to update its trusted list regularly. -> ->You can specify individual files or folders (using folder paths or fully qualified resource names) but you can't specify which rules or exclusions apply to. - -This rule was introduced in: -- [Windows 10, version 1803](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) -- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) -- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) -- [Configuration Manager CB 1802](https://docs.microsoft.com/configmgr/core/servers/manage/updates) - -Intune name: Executables that don't meet a prevalence, age, or trusted list criteria. - -Configuration Manager name: Block executable files from running unless they meet a prevalence, age, or trusted list criteria - -GUID: `01443614-cd74-433a-b99e-2ecdc07bfc25` - ### Use advanced protection against ransomware This rule provides an extra layer of protection against ransomware. It scans executable files entering the system to determine whether they're trustworthy. If the files closely resemble ransomware, this rule blocks them from running, unless they're in a trusted list or an exclusion list. From 7b364be416e98bdbd2a7aa13f46c92289cfb9511 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 8 Dec 2020 15:52:16 -0800 Subject: [PATCH 138/958] Added msched policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 2 + .../policy-configuration-service-provider.md | 11 + .../mdm/policy-csp-admx-lanmanworkstation.md | 5 + .../mdm/policy-csp-admx-msched.md | 191 ++++++++++++++++++ 5 files changed, 210 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-msched.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 631c73eec2..a12ec58d25 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -206,6 +206,7 @@ #### [ADMX_MMC](policy-csp-admx-mmc.md) #### [ADMX_MMCSnapins](policy-csp-admx-mmcsnapins.md) #### [ADMX_MSAPolicy](policy-csp-admx-msapolicy.md) +#### [ADMX_msched](policy-csp-admx-msched.md) #### [ADMX_nca](policy-csp-admx-nca.md) #### [ADMX_NCSI](policy-csp-admx-ncsi.md) #### [ADMX_Netlogon](policy-csp-admx-netlogon.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index b834641841..5fb786235b 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -296,6 +296,8 @@ ms.date: 10/08/2020 - [ADMX_MMCSnapins/MMC_WirelessMon](./policy-csp-admx-mmcsnapins.md#admx-mmcsnapins-mmc-wirelessmon) - [ADMX_MMCSnapins/MMC_WirelessNetworkPolicy](./policy-csp-admx-mmcsnapins.md#admx-mmcsnapins-mmc-wirelessnetworkpolicy) - [ADMX_MSAPolicy/IncludeMicrosoftAccount_DisableUserAuthCmdLine](./policy-csp-admx-msapolicy.md#admx-msapolicy-microsoftaccount-disableuserauth) +- [ADMX_msched/ActivationBoundaryPolicy](./policy-csp-admx-msched.md#admx-msched-activationboundarypolicy) +- [ADMX_msched/RandomDelayPolicy](./policy-csp-admx-msched.md#admx-msched-randomdelaypolicy) - [ADMX_nca/CorporateResources](./policy-csp-admx-nca.md#admx-nca-corporateresources) - [ADMX_nca/CustomCommands](./policy-csp-admx-nca.md#admx-nca-customcommands) - [ADMX_nca/DTEs](./policy-csp-admx-nca.md#admx-nca-dtes) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 1bec41f8c4..7c2741bcb5 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1150,6 +1150,17 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_msched policies + +
    +
    + ADMX_msched/ActivationBoundaryPolicy +
    +
    + ADMX_msched/RandomDelayPolicy +
    +
    + ### ADMX_nca policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md index 5a9ce576f9..a17e77a476 100644 --- a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md +++ b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md @@ -90,6 +90,11 @@ SMB 3.11 cipher suites: - AES_128_GCM - AES_128_CCM +- AES_256_GCM +- AES_256_CCM + +> [!NOTE] +> AES_256 is not supported on Windows 10 version 20H2 and lower. Additionally, if you enter only AES_256 crypto lines, the older clients will no longer be able to connect. SMB 3.0 and 3.02 cipher suites: diff --git a/windows/client-management/mdm/policy-csp-admx-msched.md b/windows/client-management/mdm/policy-csp-admx-msched.md new file mode 100644 index 0000000000..fc45989368 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-msched.md @@ -0,0 +1,191 @@ +--- +title: Policy CSP - ADMX_msched +description: Policy CSP - ADMX_msched +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/08/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_msched +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_msched policies + +
    +
    + ADMX_msched/ActivationBoundaryPolicy +
    +
    + ADMX_msched/RandomDelayPolicy +
    +
    + + +
    + + +**ADMX_msched/ActivationBoundaryPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure Automatic Maintenance activation boundary. The maintenance activation boundary is the daily scheduled time at which Automatic Maintenance starts. + +If you enable this policy setting, this will override the default daily scheduled time as specified in Security and Maintenance/Automatic Maintenance Control Panel. + +If you disable or do not configure this policy setting, the daily scheduled time as specified in Security and Maintenance/Automatic Maintenance Control Panel will apply. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Automatic Maintenance Activation Boundary* +- GP name: *ActivationBoundaryPolicy* +- GP path: *Windows Components\Maintenance Scheduler* +- GP ADMX file name: *msched.admx* + + + +
    + + +**ADMX_msched/RandomDelayPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure Automatic Maintenance activation random delay. + +The maintenance random delay is the amount of time up to which Automatic Maintenance will delay starting from its Activation Boundary. + +If you enable this policy setting, Automatic Maintenance will delay starting from its Activation Boundary, by up to this time. + +If you do not configure this policy setting, 4 hour random delay will be applied to Automatic Maintenance. + +If you disable this policy setting, no random delay will be applied to Automatic Maintenance. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Automatic Maintenance Random Delay* +- GP name: *RandomDelayPolicy* +- GP path: *Windows Components\Maintenance Scheduler* +- GP ADMX file name: *msched.admx* + + + +
    + + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From a3c8fe9118ab0835248a404d15cc86cfee3b1e95 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 8 Dec 2020 16:07:36 -0800 Subject: [PATCH 139/958] Minor text update --- .../client-management/mdm/policy-csp-admx-lanmanworkstation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md index a17e77a476..d3c1dfcd54 100644 --- a/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md +++ b/windows/client-management/mdm/policy-csp-admx-lanmanworkstation.md @@ -94,7 +94,7 @@ SMB 3.11 cipher suites: - AES_256_CCM > [!NOTE] -> AES_256 is not supported on Windows 10 version 20H2 and lower. Additionally, if you enter only AES_256 crypto lines, the older clients will no longer be able to connect. +> AES_256 is not supported on Windows 10 version 20H2 and lower. If you enter only AES_256 crypto lines, the older clients will not be able to connect anymore. SMB 3.0 and 3.02 cipher suites: From eab2698824cdcb936d383e05679727d741fd9e21 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 8 Dec 2020 16:40:40 -0800 Subject: [PATCH 140/958] Added RPC policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 4 + .../policy-configuration-service-provider.md | 17 + .../mdm/policy-csp-admx-rpc.md | 394 ++++++++++++++++++ 4 files changed, 416 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-rpc.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index a12ec58d25..2e828a600c 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -216,6 +216,7 @@ #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) +#### [ADMX_RPC](policy-csp-admx-rpc.md) #### [ADMX_Scripts](policy-csp-admx-scripts.md) #### [ADMX_sdiageng](policy-csp-admx-sdiageng.md) #### [ADMX_Securitycenter](policy-csp-admx-securitycenter.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 5fb786235b..80ac1e00c1 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -442,6 +442,10 @@ ms.date: 10/08/2020 - [ADMX_Reliability/PCH_ReportShutdownEvents](./policy-csp-admx-reliability.md#admx-reliability-pch-reportshutdownevents) - [ADMX_Reliability/ShutdownEventTrackerStateFile](./policy-csp-admx-reliability.md#admx-reliability-shutdowneventtrackerstatefile) - [ADMX_Reliability/ShutdownReason](./policy-csp-admx-reliability.md#admx-reliability-shutdownreason) +- [ADMX_RPC/RpcExtendedErrorInformation](./policy-csp-admx-rpc.md#admx-rpc-rpcextendederrorinformation) +- [ADMX_RPC/RpcIgnoreDelegationFailure](./policy-csp-admx-rpc.md#admx-rpc-rpcignoredelegationfailure) +- [ADMX_RPC/RpcMinimumHttpConnectionTimeout](./policy-csp-admx-rpc.md#admx-rpc-rpcminimumhttpconnectiontimeout) +- [ADMX_RPC/RpcStateInformation](./policy-csp-admx-rpc.md#admx-rpc-rpcstateinformation) - [ADMX_Scripts/Allow_Logon_Script_NetbiosDisabled](./policy-csp-admx-scripts.md#admx-scripts-allow-logon-script-netbiosdisabled) - [ADMX_Scripts/MaxGPOScriptWaitPolicy](./policy-csp-admx-scripts.md#admx-scripts-maxgposcriptwaitpolicy) - [ADMX_Scripts/Run_Computer_PS_Scripts_First](./policy-csp-admx-scripts.md#admx-scripts-run-computer-ps-scripts-first) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 7c2741bcb5..b43c6f5515 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1635,6 +1635,23 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_RPC policies + +
    +
    + ADMX_RPC/RpcExtendedErrorInformation +
    +
    + ADMX_RPC/RpcIgnoreDelegationFailure +
    +
    + ADMX_RPC/RpcMinimumHttpConnectionTimeout +
    +
    + ADMX_RPC/RpcStateInformation +
    +
    + ### ADMX_Scripts policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-rpc.md b/windows/client-management/mdm/policy-csp-admx-rpc.md new file mode 100644 index 0000000000..2845ab5077 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-rpc.md @@ -0,0 +1,394 @@ +--- +title: Policy CSP - ADMX_RPC +description: Policy CSP - ADMX_RPC +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/08/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_RPC +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_RPC policies + +
    +
    + ADMX_RPC/RpcExtendedErrorInformation +
    +
    + ADMX_RPC/RpcIgnoreDelegationFailure +
    +
    + ADMX_RPC/RpcMinimumHttpConnectionTimeout +
    +
    + ADMX_RPC/RpcStateInformation +
    +
    + + +
    + + +**ADMX_RPC/RpcExtendedErrorInformation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the RPC runtime generates extended error information when an error occurs. + +Extended error information includes the local time that the error occurred, the RPC version, and the name of the computer on which the error occurred, or from which it was propagated. Programs can retrieve the extended error information by using standard Windows application programming interfaces (APIs). + +If you disable this policy setting, the RPC Runtime only generates a status code to indicate an error condition. + +If you do not configure this policy setting, it remains disabled. It will only generate a status code to indicate an error condition. + +If you enable this policy setting, the RPC runtime will generate extended error information. + +You must select an error response type in the drop-down box. + +- "Off" disables all extended error information for all processes. RPC only generates an error code. +- "On with Exceptions" enables extended error information, but lets you disable it for selected processes. To disable extended error information for a process while this policy setting is in effect, the command that starts the process must begin with one of the strings in the Extended Error Information Exception field. +- "Off with Exceptions" disables extended error information, but lets you enable it for selected processes. To enable extended error information for a process while this policy setting is in effect, the command that starts the process must begin with one of the strings in the Extended Error Information Exception field. +- "On" enables extended error information for all processes. + +> [!NOTE] +> For information about the Extended Error Information Exception field, see the Windows Software Development Kit (SDK). +> +> Extended error information is formatted to be compatible with other operating systems and older Microsoft operating systems, but only newer Microsoft operating systems can read and respond to the information. +> +> The default policy setting, "Off," is designed for systems where extended error information is considered to be sensitive, and it should not be made available remotely. +> +> This policy setting will not be applied until the system is rebooted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Propagate extended error information* +- GP name: *RpcExtendedErrorInformation* +- GP path: *System\Remote Procedure Call* +- GP ADMX file name: *RPC.admx* + + + +
    + +
    + + +**ADMX_RPC/RpcIgnoreDelegationFailure** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the RPC Runtime ignores delegation failures when delegation is requested. + +The constrained delegation model, introduced in Windows Server 2003, does not report that delegation was enabled on a security context when a client connects to a server. Callers of RPC and COM are encouraged to use the RPC_C_QOS_CAPABILITIES_IGNORE_DELEGATE_FAILURE flag, but some applications written for the traditional delegation model prior to Windows Server 2003 may not use this flag and will encounter RPC_S_SEC_PKG_ERROR when connecting to a server that uses constrained delegation. + +If you disable this policy setting, the RPC Runtime will generate RPC_S_SEC_PKG_ERROR errors to applications that ask for delegation and connect to servers using constrained delegation. + +If you do not configure this policy setting, it remains disabled and will generate RPC_S_SEC_PKG_ERROR errors to applications that ask for delegation and connect to servers using constrained delegation. + +If you enable this policy setting, then: + +- "Off" directs the RPC Runtime to generate RPC_S_SEC_PKG_ERROR if the client asks for delegation, but the created security context does not support delegation. + +- "On" directs the RPC Runtime to accept security contexts that do not support delegation even if delegation was asked for. + +> [!NOTE] +> This policy setting will not be applied until the system is rebooted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Ignore Delegation Failure* +- GP name: *RpcIgnoreDelegationFailure* +- GP path: *System\Remote Procedure Call* +- GP ADMX file name: *RPC.admx* + + + + +
    + + +**ADMX_RPC/RpcMinimumHttpConnectionTimeout** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the idle connection timeout for RPC/HTTP connections. + +This policy setting is useful in cases where a network agent like an HTTP proxy or a router uses a lower idle connection timeout than the IIS server running the RPC/HTTP proxy. In such cases, RPC/HTTP clients may encounter errors because connections will be timed out faster than expected. Using this policy setting you can force the RPC Runtime and the RPC/HTTP Proxy to use a lower connection timeout. + +This policy setting is only applicable when the RPC Client, the RPC Server and the RPC HTTP Proxy are all running Windows Server 2003 family/Windows XP SP1 or higher versions. If either the RPC Client or the RPC Server or the RPC HTTP Proxy run on an older version of Windows, this policy setting will be ignored. + +The minimum allowed value for this policy setting is 90 seconds. The maximum is 7200 seconds (2 hours). + +If you disable this policy setting, the idle connection timeout on the IIS server running the RPC HTTP proxy will be used. + +If you do not configure this policy setting, it will remain disabled. The idle connection timeout on the IIS server running the RPC HTTP proxy will be used. + +If you enable this policy setting, and the IIS server running the RPC HTTP proxy is configured with a lower idle connection timeout, the timeout on the IIS server is used. Otherwise, the provided timeout value is used. The timeout is given in seconds. + +> [!NOTE] +> This policy setting will not be applied until the system is rebooted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set Minimum Idle Connection Timeout for RPC/HTTP connections* +- GP name: *RpcMinimumHttpConnectionTimeout* +- GP path: *System\Remote Procedure Call* +- GP ADMX file name: *RPC.admx* + + + +
    + +
    + + +**ADMX_RPC/RpcStateInformation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the RPC Runtime maintains RPC state information for the system, and how much information it maintains. Basic state information, which consists only of the most commonly needed state data, is required for troubleshooting RPC problems. + +If you disable this policy setting, the RPC runtime defaults to "Auto2" level. + +If you do not configure this policy setting, the RPC defaults to "Auto2" level. + +If you enable this policy setting, you can use the drop-down box to determine which systems maintain RPC state information. + +- "None" indicates that the system does not maintain any RPC state information. Note: Because the basic state information required for troubleshooting has a negligible effect on performance and uses only about 4K of memory, this setting is not recommended for most installations. + +- "Auto1" directs RPC to maintain basic state information only if the computer has at least 64 MB of memory. + +- "Auto2" directs RPC to maintain basic state information only if the computer has at least 128 MB of memory and is running Windows 2000 Server, Windows 2000 Advanced Server, or Windows 2000 Datacenter Server. + +- "Server" directs RPC to maintain basic state information on the computer, regardless of its capacity. + +- "Full" directs RPC to maintain complete RPC state information on the system, regardless of its capacity. Because this level can degrade performance, it is recommended for use only while you are investigating an RPC problem. + +> [!NOTE] +> To retrieve the RPC state information from a system that maintains it, you must use a debugging tool. +> +> This policy setting will not be applied until the system is rebooted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Maintain RPC Troubleshooting State Information* +- GP name: *RpcStateInformation* +- GP path: *System\Remote Procedure Call* +- GP ADMX file name: *RPC.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 485dddd1c66c9cd61a59118e75676a7ed86ec05a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 18:56:42 -0800 Subject: [PATCH 141/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 36 ++++++++++--------- 1 file changed, 19 insertions(+), 17 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 260513eca3..93847cb984 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -231,6 +231,25 @@ Configuration Manager name: Block executable files from running unless they meet GUID: `01443614-cd74-433a-b99e-2ecdc07bfc25` +### Block execution of potentially obfuscated scripts + +This rule detects suspicious properties within an obfuscated script. + +Script obfuscation is a common technique that both malware authors and legitimate applications use to hide intellectual property or decrease script loading times. Malware authors also use obfuscation to make malicious code harder to read, which prevents close scrutiny by humans and security software. + +This rule was introduced in: +- [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) +- [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) + +Intune name: Obfuscated js/vbs/ps/macro code + +Configuration Manager name: Block execution of potentially obfuscated scripts. + +GUID: `5BEB7EFE-FD9A-4556-801D-275E5FFC04CC` + + @@ -292,23 +311,6 @@ Configuration Manager name: Block JavaScript or VBScript from launching download GUID: `D3E037E1-3EB8-44C8-A917-57927947596D` -### Block execution of potentially obfuscated scripts - -This rule detects suspicious properties within an obfuscated script. - -Script obfuscation is a common technique that both malware authors and legitimate applications use to hide intellectual property or decrease script loading times. Malware authors also use obfuscation to make malicious code harder to read, which prevents close scrutiny by humans and security software. - -This rule was introduced in: -- [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) -- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) -- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) -- [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) - -Intune name: Obfuscated js/vbs/ps/macro code - -Configuration Manager name: Block execution of potentially obfuscated scripts. - -GUID: `5BEB7EFE-FD9A-4556-801D-275E5FFC04CC` ### Block Win32 API calls from Office macros From 2b89caa6029ad823779b0565950d37d6bf06f995 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 18:57:37 -0800 Subject: [PATCH 142/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 38 ++++++++++--------- 1 file changed, 20 insertions(+), 18 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 93847cb984..cbe1e8f611 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -249,6 +249,26 @@ Configuration Manager name: Block execution of potentially obfuscated scripts. GUID: `5BEB7EFE-FD9A-4556-801D-275E5FFC04CC` +### Block JavaScript or VBScript from launching downloaded executable content + +This rule prevents scripts from launching potentially malicious downloaded content. Malware written in JavaScript or VBScript often acts as a downloader to fetch and launch other malware from the Internet. + +Although not common, line-of-business applications sometimes use scripts to download and launch installers. + +This rule was introduced in: +- [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) +- [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) + +Intune name: js/vbs executing payload downloaded from Internet (no exceptions) + +Configuration Manager name: Block JavaScript or VBScript from launching downloaded executable content + +GUID: `D3E037E1-3EB8-44C8-A917-57927947596D` + + + @@ -293,24 +313,6 @@ Configuration Manager name: Block Office applications from injecting code into o GUID: `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` -### Block JavaScript or VBScript from launching downloaded executable content - -This rule prevents scripts from launching potentially malicious downloaded content. Malware written in JavaScript or VBScript often acts as a downloader to fetch and launch other malware from the Internet. - -Although not common, line-of-business applications sometimes use scripts to download and launch installers. - -This rule was introduced in: -- [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) -- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) -- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) -- [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) - -Intune name: js/vbs executing payload downloaded from Internet (no exceptions) - -Configuration Manager name: Block JavaScript or VBScript from launching downloaded executable content - -GUID: `D3E037E1-3EB8-44C8-A917-57927947596D` - ### Block Win32 API calls from Office macros From 54caf7a6057c09e89b23686073aea776d1423f4f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 18:58:13 -0800 Subject: [PATCH 143/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index cbe1e8f611..1c6113b283 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -267,12 +267,6 @@ Configuration Manager name: Block JavaScript or VBScript from launching download GUID: `D3E037E1-3EB8-44C8-A917-57927947596D` - - - - - - ### Block Office applications from creating executable content This rule prevents Office apps, including Word, Excel, and PowerPoint, from creating potentially malicious executable content, by blocking malicious code from being written to disk. @@ -314,6 +308,9 @@ Configuration Manager name: Block Office applications from injecting code into o GUID: `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` + + + ### Block Win32 API calls from Office macros This rule prevents VBA macros from calling Win32 APIs. From 7664f71e2fc5125b730cd5469ddc0b7c812b7344 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 18:59:04 -0800 Subject: [PATCH 144/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 40 ++++++++++--------- 1 file changed, 21 insertions(+), 19 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 1c6113b283..7142e05183 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -307,6 +307,27 @@ Configuration Manager name: Block Office applications from injecting code into o GUID: `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` +### Block Office communication application from creating child processes + +This rule prevents Outlook from creating child processes, while still allowing legitimate Outlook functions. + +This protects against social engineering attacks and prevents exploit code from abusing vulnerabilities in Outlook. It also protects against [Outlook rules and forms exploits](https://blogs.technet.microsoft.com/office365security/defending-against-rules-and-forms-injection/) that attackers can use when a user's credentials are compromised. + +> [!NOTE] +> This rule applies to Outlook and Outlook.com only. + +This rule was introduced in: +- [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) + +Intune name: Process creation from Office communication products (beta) + +Configuration Manager name: Not yet available + +GUID: `26190899-1602-49e8-8b27-eb1d0a1ce869` + + @@ -383,25 +404,6 @@ Configuration Manager name: Block untrusted and unsigned processes that run from GUID: `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` -### Block Office communication application from creating child processes - -This rule prevents Outlook from creating child processes, while still allowing legitimate Outlook functions. - -This protects against social engineering attacks and prevents exploit code from abusing vulnerabilities in Outlook. It also protects against [Outlook rules and forms exploits](https://blogs.technet.microsoft.com/office365security/defending-against-rules-and-forms-injection/) that attackers can use when a user's credentials are compromised. - -> [!NOTE] -> This rule applies to Outlook and Outlook.com only. - -This rule was introduced in: -- [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) -- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) -- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - -Intune name: Process creation from Office communication products (beta) - -Configuration Manager name: Not yet available - -GUID: `26190899-1602-49e8-8b27-eb1d0a1ce869` ### Block persistence through WMI event subscription From 1f2925545a996dee46c4527106688ce68da3f703 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 18:59:48 -0800 Subject: [PATCH 145/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 36 +++++++++---------- 1 file changed, 18 insertions(+), 18 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 7142e05183..0ea54f5923 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -327,6 +327,24 @@ Configuration Manager name: Not yet available GUID: `26190899-1602-49e8-8b27-eb1d0a1ce869` +### Block persistence through WMI event subscription + +This rule prevents malware from abusing WMI to attain persistence on a device. + +> [!IMPORTANT] +> File and folder exclusions don't apply to this attack surface reduction rule. + +Fileless threats employ various tactics to stay hidden, to avoid being seen in the file system, and to gain periodic execution control. Some threats can abuse the WMI repository and event model to stay hidden. + +This rule was introduced in: +- [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) +- [Windows Server 1903](https://docs.microsoft.com/windows-server/get-started-19/whats-new-in-windows-server-1903-1909) + +Intune name: Not yet available + +Configuration Manager name: Not yet available + +GUID: `e6db77e5-3df2-4cf1-b95a-636979351e5b` @@ -405,24 +423,6 @@ Configuration Manager name: Block untrusted and unsigned processes that run from GUID: `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` -### Block persistence through WMI event subscription - -This rule prevents malware from abusing WMI to attain persistence on a device. - -> [!IMPORTANT] -> File and folder exclusions don't apply to this attack surface reduction rule. - -Fileless threats employ various tactics to stay hidden, to avoid being seen in the file system, and to gain periodic execution control. Some threats can abuse the WMI repository and event model to stay hidden. - -This rule was introduced in: -- [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) -- [Windows Server 1903](https://docs.microsoft.com/windows-server/get-started-19/whats-new-in-windows-server-1903-1909) - -Intune name: Not yet available - -Configuration Manager name: Not yet available - -GUID: `e6db77e5-3df2-4cf1-b95a-636979351e5b` ## Related topics From d089263968e2480e06633e890c1dd73185924b7d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 19:00:29 -0800 Subject: [PATCH 146/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 34 +++++++++---------- 1 file changed, 17 insertions(+), 17 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 0ea54f5923..8d6ba4c1f2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -346,6 +346,23 @@ Configuration Manager name: Not yet available GUID: `e6db77e5-3df2-4cf1-b95a-636979351e5b` +### Block process creations originating from PSExec and WMI commands + +This rule blocks processes created through [PsExec](https://docs.microsoft.com/sysinternals/downloads/psexec) and [WMI](https://docs.microsoft.com/windows/win32/wmisdk/about-wmi) from running. Both PsExec and WMI can remotely execute code, so there is a risk of malware abusing this functionality for command and control purposes, or to spread an infection throughout an organization's network. + +> [!WARNING] +> Only use this rule if you're managing your devices with [Intune](https://docs.microsoft.com/intune) or another MDM solution. This rule is incompatible with management through [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr) because this rule blocks WMI commands the Configuration Manager client uses to function correctly. + +This rule was introduced in: +- [Windows 10, version 1803](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) + +Intune name: Process creation from PSExec and WMI commands + +Configuration Manager name: Not applicable + +GUID: `d1e49aac-8f56-4280-b9ba-993a6d77406c` @@ -388,23 +405,6 @@ Configuration Manager name: Use advanced protection against ransomware GUID: `c1db55ab-c21a-4637-bb3f-a12568109d35` -### Block process creations originating from PSExec and WMI commands - -This rule blocks processes created through [PsExec](https://docs.microsoft.com/sysinternals/downloads/psexec) and [WMI](https://docs.microsoft.com/windows/win32/wmisdk/about-wmi) from running. Both PsExec and WMI can remotely execute code, so there is a risk of malware abusing this functionality for command and control purposes, or to spread an infection throughout an organization's network. - -> [!WARNING] -> Only use this rule if you're managing your devices with [Intune](https://docs.microsoft.com/intune) or another MDM solution. This rule is incompatible with management through [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/configmgr) because this rule blocks WMI commands the Configuration Manager client uses to function correctly. - -This rule was introduced in: -- [Windows 10, version 1803](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) -- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) -- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - -Intune name: Process creation from PSExec and WMI commands - -Configuration Manager name: Not applicable - -GUID: `d1e49aac-8f56-4280-b9ba-993a6d77406c` ### Block untrusted and unsigned processes that run from USB From 100a71a76311e5582389479daf7c1e542a149ac1 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 19:01:10 -0800 Subject: [PATCH 147/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 32 +++++++++---------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 8d6ba4c1f2..7ec2e7d5af 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -364,6 +364,22 @@ Configuration Manager name: Not applicable GUID: `d1e49aac-8f56-4280-b9ba-993a6d77406c` +### Block untrusted and unsigned processes that run from USB + +With this rule, admins can prevent unsigned or untrusted executable files from running from USB removable drives, including SD cards. Blocked file types include executable files (such as .exe, .dll, or .scr) + +This rule was introduced in: +- [Windows 10, version 1803](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) +- [Configuration Manager CB 1802](https://docs.microsoft.com/configmgr/core/servers/manage/updates) + +Intune name: Untrusted and unsigned processes that run from USB + +Configuration Manager name: Block untrusted and unsigned processes that run from USB + +GUID: `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` + @@ -406,22 +422,6 @@ GUID: `c1db55ab-c21a-4637-bb3f-a12568109d35` -### Block untrusted and unsigned processes that run from USB - -With this rule, admins can prevent unsigned or untrusted executable files from running from USB removable drives, including SD cards. Blocked file types include executable files (such as .exe, .dll, or .scr) - -This rule was introduced in: -- [Windows 10, version 1803](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1803) -- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) -- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) -- [Configuration Manager CB 1802](https://docs.microsoft.com/configmgr/core/servers/manage/updates) - -Intune name: Untrusted and unsigned processes that run from USB - -Configuration Manager name: Block untrusted and unsigned processes that run from USB - -GUID: `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` - ## Related topics From aee396ee5b7dcc4c63afc32bae55e88f3b66f726 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 19:01:53 -0800 Subject: [PATCH 148/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 7ec2e7d5af..022ded468b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -380,9 +380,6 @@ Configuration Manager name: Block untrusted and unsigned processes that run from GUID: `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` - - - ### Block Win32 API calls from Office macros This rule prevents VBA macros from calling Win32 APIs. @@ -420,11 +417,7 @@ Configuration Manager name: Use advanced protection against ransomware GUID: `c1db55ab-c21a-4637-bb3f-a12568109d35` - - - - -## Related topics +## See also - [Attack surface reduction FAQ](attack-surface-reduction-faq.md) From 32870ff648a54e7013e66ebe0c345c619f27fce1 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 19:03:11 -0800 Subject: [PATCH 149/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 022ded468b..a4b6de8412 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -110,7 +110,7 @@ The following sections describe each of the 16 attack surface reduction rules (i | Rule name | GUID | File & folder exclusions | Minimum OS supported | |-----|-----|-----|-----| |[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|Block abuse of in-the-wild exploited vulnerable signed drivers (NEW!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | | | +|[Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (NEW!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | | | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) | `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | From b5963c80a5e67dc11f907fbb98b6b92fb515dae7 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 19:05:07 -0800 Subject: [PATCH 150/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index a4b6de8412..c5af8a7084 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -126,7 +126,6 @@ The following sections describe each of the 16 attack surface reduction rules (i |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | - ### Block Adobe Reader from creating child processes This rule prevents attacks by blocking Adobe Reader from creating additional processes. From 808a5d8aa56125f51f92e4caf42c4c96cbf64961 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 19:32:52 -0800 Subject: [PATCH 151/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index c5af8a7084..5c8ba4c01b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -52,6 +52,15 @@ In the recommendation details pane, check the user impact to determine what perc Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduction rules would impact your organization if they were enabled. It's best to run all rules in audit mode first so you can understand their impact on your line-of-business applications. Many line-of-business applications are written with limited security concerns, and they may perform tasks in ways that seem similar to malware. By monitoring audit data and [adding exclusions](enable-attack-surface-reduction.md#exclude-files-and-folders-from-asr-rules) for necessary applications, you can deploy attack surface reduction rules without impacting productivity. +## Warn mode for users + +(NEW!) Prior to warn mode capabilities, attack surface reduction rules that are enabled could be set to either audit mode or block mode. With the new warn mode, whenever content is blocked by an attack surface reduction rule, users see a dialog box that indicates the content is blocked. The dialog box also offers the user an option to unblock the content. The user can then retry their action, and the operation completes. WHen a user unblocks content, the content remains unblocked for 24 hours, and then blocking resumes. + +Warn mode helps your organization have attack surface reduction rules in place without preventing users from accessing the content they need to perform their tasks. + +> [!IMPORTANT] +> Warn mode is supported on devices running Windows 10, version 1809 or later and [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) or later. + ## Notifications when a rule is triggered Whenever a rule is triggered, a notification will be displayed on the device. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. The notification also displays within the Microsoft Defender Security Center and the Microsoft 365 security center. @@ -214,7 +223,7 @@ This rule blocks the following file types from launching unless they meet preval Launching untrusted or unknown executable files can be risky, as it may not be initially clear if the files are malicious. > [!IMPORTANT] -> You must [enable cloud-delivered protection](../microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md) to use this rule.

    The rule **Block executable files from running unless they meet a prevalence, age, or trusted list criterion** with GUID 01443614-cd74-433a-b99e-2ecdc07bfc25 is owned by Microsoft and is not specified by admins. It uses cloud-delivered protection to update its trusted list regularly. +> You must [enable cloud-delivered protection](../microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md) to use this rule.

    The rule **Block executable files from running unless they meet a prevalence, age, or trusted list criterion** with GUID `01443614-cd74-433a-b99e-2ecdc07bfc25` is owned by Microsoft and is not specified by admins. This rule uses cloud-delivered protection to update its trusted list regularly. > >You can specify individual files or folders (using folder paths or fully qualified resource names) but you can't specify which rules or exclusions apply to. From 00a45c74efca525a2ece151d6abc9e10c9abd6a2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 19:34:09 -0800 Subject: [PATCH 152/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 5c8ba4c01b..21528e4f76 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -59,7 +59,7 @@ Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduc Warn mode helps your organization have attack surface reduction rules in place without preventing users from accessing the content they need to perform their tasks. > [!IMPORTANT] -> Warn mode is supported on devices running Windows 10, version 1809 or later and [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) or later. +> Warn mode is supported on devices running [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) or later and [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) or later. ## Notifications when a rule is triggered From 4b09543e092a79668803673823cc84928df9d32f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 19:37:01 -0800 Subject: [PATCH 153/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 21528e4f76..c626505f1c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -59,7 +59,11 @@ Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduc Warn mode helps your organization have attack surface reduction rules in place without preventing users from accessing the content they need to perform their tasks. > [!IMPORTANT] -> Warn mode is supported on devices running [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) or later and [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) or later. +> Warn mode is supported on devices running the following versions of Windows: +> - [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) or later +> - [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) or later +> +> Attack surface reduction rules that are configured in warn mode will run in block mode on devices that are running older versions of Windows. ## Notifications when a rule is triggered From 91b2f9dcd4daa90b372909a08a6b819c914903a8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 19:37:33 -0800 Subject: [PATCH 154/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index c626505f1c..2864b35d75 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -54,7 +54,7 @@ Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduc ## Warn mode for users -(NEW!) Prior to warn mode capabilities, attack surface reduction rules that are enabled could be set to either audit mode or block mode. With the new warn mode, whenever content is blocked by an attack surface reduction rule, users see a dialog box that indicates the content is blocked. The dialog box also offers the user an option to unblock the content. The user can then retry their action, and the operation completes. WHen a user unblocks content, the content remains unblocked for 24 hours, and then blocking resumes. +(**NEW**!) Prior to warn mode capabilities, attack surface reduction rules that are enabled could be set to either audit mode or block mode. With the new warn mode, whenever content is blocked by an attack surface reduction rule, users see a dialog box that indicates the content is blocked. The dialog box also offers the user an option to unblock the content. The user can then retry their action, and the operation completes. WHen a user unblocks content, the content remains unblocked for 24 hours, and then blocking resumes. Warn mode helps your organization have attack surface reduction rules in place without preventing users from accessing the content they need to perform their tasks. From d5f7ee335630bb348d0c04ba54e08d4a3073b658 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 8 Dec 2020 19:47:49 -0800 Subject: [PATCH 155/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 20 ++++++++++++++++++- 1 file changed, 19 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 2864b35d75..1d817cfb03 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -123,7 +123,7 @@ The following sections describe each of the 16 attack surface reduction rules (i | Rule name | GUID | File & folder exclusions | Minimum OS supported | |-----|-----|-----|-----| |[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (NEW!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | | | +|[Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (NEW!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | |- Windows 10 Pro, version [1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) or later
    - Windows 10 Enterprise, version [1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) or later
    - Windows Server, version [1803](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) (Semi-Annual Channel) or later
    - Windows Server 2019 | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) | `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | @@ -160,6 +160,24 @@ GUID: `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` This rule prevents an application from writing a vulnerable signed driver to disk. Vulnerable signed drivers can be exploited by local applications with sufficient privileges, to gain access to the kernel. It allows attackers to disable or circumvent security solutions, eventually leading to system compromise. +This rule does not block a driver already existing on the system from being loaded. + +> [!TIP] +> You can submit a driver for analysis at the [Microsoft Security Intelligence site](https://www.microsoft.com/wdsi/driversubmission). + +This rule is supported on all versions of Windows where attack surface reduction rules are currently supported: +- Windows 10 Pro, version 1709 or later +- Windows 10 Enterprise, version 1709 or later +- Windows Server, version 1803 (Semi-Annual Channel) or later +- Windows Server 2019 + +Intune Name: Block abuse of exploited vulnerable signed drivers + +Configuration Manager name: Not Applicable + +Rule guid: `56a863a9-875e-4185-98a7-b882c64b5ce5` + + ### Block all Office applications from creating child processes This rule blocks Office apps from creating child processes. This includes Word, Excel, PowerPoint, OneNote, and Access. From 92779ec0840a7b397e3f1abc7e37964ccaf05f17 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 06:41:34 -0800 Subject: [PATCH 156/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 1d817cfb03..3b653eb7af 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -123,7 +123,7 @@ The following sections describe each of the 16 attack surface reduction rules (i | Rule name | GUID | File & folder exclusions | Minimum OS supported | |-----|-----|-----|-----| |[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -|[Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (NEW!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | |- Windows 10 Pro, version [1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) or later
    - Windows 10 Enterprise, version [1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) or later
    - Windows Server, version [1803](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) (Semi-Annual Channel) or later
    - Windows Server 2019 | +|[Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (NEW!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | |[Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) | `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | From b6d3059c29c6d2aad1df0a842034642b1c10e6da Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 07:50:07 -0800 Subject: [PATCH 157/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 3b653eb7af..1143c590b6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -17,7 +17,7 @@ ms.custom: asr ms.date: 12/08/2020 --- -# Reduce attack surfaces with attack surface reduction rules +# Protect your devices and network from malware with attack surface reduction rules [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] From d71aad7c7d42f1800fac43fe95fcfd290c1d342d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 08:25:13 -0800 Subject: [PATCH 158/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 1143c590b6..45872223b0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -17,7 +17,7 @@ ms.custom: asr ms.date: 12/08/2020 --- -# Protect your devices and network from malware with attack surface reduction rules +# Use attack surface reduction rules to prevent malware infection [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] From 3ea6c40928d08f57ed58463ac810a14a4603503d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 9 Dec 2020 09:25:36 -0800 Subject: [PATCH 159/958] Added MSDT policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 3 + .../policy-configuration-service-provider.md | 14 + .../mdm/policy-csp-admx-msdt.md | 288 ++++++++++++++++++ 4 files changed, 306 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-msdt.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 2e828a600c..2a7a434c65 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -207,6 +207,7 @@ #### [ADMX_MMCSnapins](policy-csp-admx-mmcsnapins.md) #### [ADMX_MSAPolicy](policy-csp-admx-msapolicy.md) #### [ADMX_msched](policy-csp-admx-msched.md) +#### [ADMX_MSDT](policy-csp-admx-msdt.md) #### [ADMX_nca](policy-csp-admx-nca.md) #### [ADMX_NCSI](policy-csp-admx-ncsi.md) #### [ADMX_Netlogon](policy-csp-admx-netlogon.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 80ac1e00c1..40e0c3cfd3 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -298,6 +298,9 @@ ms.date: 10/08/2020 - [ADMX_MSAPolicy/IncludeMicrosoftAccount_DisableUserAuthCmdLine](./policy-csp-admx-msapolicy.md#admx-msapolicy-microsoftaccount-disableuserauth) - [ADMX_msched/ActivationBoundaryPolicy](./policy-csp-admx-msched.md#admx-msched-activationboundarypolicy) - [ADMX_msched/RandomDelayPolicy](./policy-csp-admx-msched.md#admx-msched-randomdelaypolicy) +- [ADMX_MSDT/MsdtSupportProvider](./policy-csp-admx-msdt.md#admx-msdt-msdtsupportprovider) +- [ADMX_MSDT/MsdtToolDownloadPolicy](./policy-csp-admx-msdt.md#admx-msdt-msdttooldownloadpolicy) +- [ADMX_MSDT/WdiScenarioExecutionPolicy](./policy-csp-admx-msdt.md#admx-msdt-wdiscenarioexecutionpolicy) - [ADMX_nca/CorporateResources](./policy-csp-admx-nca.md#admx-nca-corporateresources) - [ADMX_nca/CustomCommands](./policy-csp-admx-nca.md#admx-nca-customcommands) - [ADMX_nca/DTEs](./policy-csp-admx-nca.md#admx-nca-dtes) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index b43c6f5515..5ea40c5c67 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1161,6 +1161,20 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_MSDT policies + +
    +
    + ADMX_MSDT/MsdtSupportProvider +
    +
    + ADMX_MSDT/MsdtToolDownloadPolicy +
    +
    + ADMX_MSDT/WdiScenarioExecutionPolicy +
    +
    + ### ADMX_nca policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-msdt.md b/windows/client-management/mdm/policy-csp-admx-msdt.md new file mode 100644 index 0000000000..c22b9c6437 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-msdt.md @@ -0,0 +1,288 @@ +--- +title: Policy CSP - ADMX_MSDT +description: Policy CSP - ADMX_MSDT +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/09/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_MSDT +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_MSDT policies + +
    +
    + ADMX_MSDT/MsdtSupportProvider +
    +
    + ADMX_MSDT/MsdtToolDownloadPolicy +
    +
    + ADMX_MSDT/WdiScenarioExecutionPolicy +
    +
    + + +
    + + +**ADMX_MSDT/MsdtSupportProvider** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures Microsoft Support Diagnostic Tool (MSDT) interactive communication with the support provider. MSDT gathers diagnostic data for analysis by support professionals. + +If you enable this policy setting, users can use MSDT to collect and send diagnostic data to a support professional to resolve a problem. + +By default, the support provider is set to Microsoft Corporation. + +If you disable this policy setting, MSDT cannot run in support mode, and no data can be collected or sent to the support provider. + +If you do not configure this policy setting, MSDT support mode is enabled by default. + +No reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider* +- GP name: *MsdtSupportProvider* +- GP path: *System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool* +- GP ADMX file name: *MSDT.admx* + + + +
    + + +**ADMX_MSDT/MsdtToolDownloadPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts the tool download policy for Microsoft Support Diagnostic Tool. + +Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by support professionals. + +For some problems, MSDT may prompt the user to download additional tools for troubleshooting. These tools are required to completely troubleshoot the problem. + +If tool download is restricted, it may not be possible to find the root cause of the problem. + +If you enable this policy setting for remote troubleshooting, MSDT prompts the user to download additional tools to diagnose problems on remote computers only. + +If you enable this policy setting for local and remote troubleshooting, MSDT always prompts for additional tool downloading. + +If you disable this policy setting, MSDT never downloads tools, and is unable to diagnose problems on remote computers. + +If you do not configure this policy setting, MSDT prompts the user before downloading any additional tools. No reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately. + +This policy setting will take effect only when MSDT is enabled. + +This policy setting will only take effect when the Diagnostic Policy Service (DPS) is in the running state. + +When the service is stopped or disabled, diagnostic scenarios are not executed. + +The DPS can be configured with the Services snap-in to the Microsoft Management Console. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Microsoft Support Diagnostic Tool: Restrict tool download* +- GP name: *MsdtToolDownloadPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool* +- GP ADMX file name: *MSDT.admx* + + + +
    + + +**ADMX_MSDT/WdiScenarioExecutionPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines the execution level for Microsoft Support Diagnostic Tool. + +Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by support professionals. If you enable this policy setting, administrators can use MSDT to collect and send diagnostic data to a support professional to resolve a problem. + +If you disable this policy setting, MSDT cannot gather diagnostic data. If you do not configure this policy setting, MSDT is turned on by default. + +This policy setting takes effect only if the diagnostics-wide scenario execution policy is not configured. + +No reboots or service restarts are required for this policy setting to take effect. Changes take effect immediately. + +This policy setting will only take effect when the Diagnostic Policy Service (DPS) is in the running state. When the service is stopped or disabled, diagnostic scenarios will not be executed. The DPS can be configured with the Services snap-in to the Microsoft Management Console. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Microsoft Support Diagnostic Tool: Configure execution level* +- GP name: *WdiScenarioExecutionPolicy* +- GP path: *System\Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool* +- GP ADMX file name: *MSDT.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 262b0e754031dbf1c98974f59a292dbfbb529354 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 09:26:05 -0800 Subject: [PATCH 160/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 45872223b0..9d66ce2298 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -14,7 +14,7 @@ ms.author: deniseb ms.reviewer: sugamar, jcedola manager: dansimp ms.custom: asr -ms.date: 12/08/2020 +ms.date: 12/09/2020 --- # Use attack surface reduction rules to prevent malware infection From 11f0faae52716f09f6ec1f828a9101ab5fd73bf0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 09:44:42 -0800 Subject: [PATCH 161/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 35 +++++++++---------- 1 file changed, 17 insertions(+), 18 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 9d66ce2298..d577b90969 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -122,8 +122,8 @@ The following sections describe each of the 16 attack surface reduction rules (i | Rule name | GUID | File & folder exclusions | Minimum OS supported | |-----|-----|-----|-----| -|[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (NEW!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | |[Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) | `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | @@ -139,23 +139,6 @@ The following sections describe each of the 16 attack surface reduction rules (i |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -### Block Adobe Reader from creating child processes - -This rule prevents attacks by blocking Adobe Reader from creating additional processes. - -Through social engineering or exploits, malware can download and launch additional payloads and break out of Adobe Reader. By blocking child processes from being generated by Adobe Reader, malware attempting to use it as a vector are prevented from spreading. - -This rule was introduced in: -- [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) -- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) -- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - -Intune name: Process creation from Adobe Reader (beta) - -Configuration Manager name: Not yet available - -GUID: `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` - ### Block abuse of in-the-wild exploited vulnerable signed drivers This rule prevents an application from writing a vulnerable signed driver to disk. Vulnerable signed drivers can be exploited by local applications with sufficient privileges, to gain access to the kernel. It allows attackers to disable or circumvent security solutions, eventually leading to system compromise. @@ -177,6 +160,22 @@ Configuration Manager name: Not Applicable Rule guid: `56a863a9-875e-4185-98a7-b882c64b5ce5` +### Block Adobe Reader from creating child processes + +This rule prevents attacks by blocking Adobe Reader from creating additional processes. + +Through social engineering or exploits, malware can download and launch additional payloads and break out of Adobe Reader. By blocking child processes from being generated by Adobe Reader, malware attempting to use it as a vector are prevented from spreading. + +This rule was introduced in: +- [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) + +Intune name: Process creation from Adobe Reader (beta) + +Configuration Manager name: Not yet available + +GUID: `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` ### Block all Office applications from creating child processes From a25ade57d6338eada08b865841c9e7fac3928edb Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Thu, 10 Dec 2020 01:21:18 +0100 Subject: [PATCH 162/958] Update respond-file-alerts.md Changes proposed: - Whitespace standardization and normalization - MarkDown table extended to simplify future editing - Use MD H4 instead of **bold** style paragraph headings Whitespace changes: - remove redundant end-of-line whitespace - whitespace indents: use 3 instead of 4 blank spaces - add MD indent marker (`> `) compatibility spacing Ref. my own comment in PR #8726 --- .../respond-file-alerts.md | 92 +++++++++---------- 1 file changed, 46 insertions(+), 46 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md index 354a099a61..bccc623abc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md @@ -13,7 +13,7 @@ author: mjcaparas ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: M365-security-compliance +ms.collection: M365-security-compliance ms.topic: article --- @@ -25,10 +25,10 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - + [!include[Prerelease information](../../includes/prerelease.md)] ->Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-responddile-abovefoldlink) +> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-responddile-abovefoldlink) Quickly respond to detected attacks by stopping and quarantining files or blocking a file. After taking action on files, you can check activity details in the Action center. @@ -46,12 +46,12 @@ You can also submit files for deep analysis, to run the file in a secure cloud s Some actions require certain permissions. The following table describes what action certain permissions can take on portable executable (PE) and non-PE files: -Permission | PE files | Non-PE files -:---|:---|:--- -View data | X | X -Alerts investigation | ☑ | X -Live response basic | X | X -Live response advanced | ☑ |☑ +| Permission | PE files | Non-PE files | +| :--------------------- | :------: | :----------: | +| View data | X | X | +| Alerts investigation | ☑ | X | +| Live response basic | X | X | +| Live response advanced | ☑ | ☑ | For more information on roles, see [Create and manage roles for role-based access control](user-roles.md). @@ -60,8 +60,8 @@ For more information on roles, see [Create and manage roles for role-based acces You can contain an attack in your organization by stopping the malicious process and quarantining the file where it was observed. ->[!IMPORTANT] ->You can only take this action if: +> [!IMPORTANT] +> You can only take this action if: > > - The device you're taking the action on is running Windows 10, version 1703 or later > - The file does not belong to trusted third-party publishers or not signed by Microsoft @@ -71,35 +71,35 @@ The **Stop and Quarantine File** action includes stopping running processes, qua This action takes effect on devices with Windows 10, version 1703 or later, where the file was observed in the last 30 days. ->[!NOTE] ->You’ll be able to restore the file from quarantine at any time. +> [!NOTE] +> You’ll be able to restore the file from quarantine at any time. ### Stop and quarantine files 1. Select the file you want to stop and quarantine. You can select a file from any of the following views or use the Search box: - - **Alerts** - click the corresponding links from the Description or Details in the Artifact timeline - - **Search box** - select **File** from the drop–down menu and enter the file name + - **Alerts** - click the corresponding links from the Description or Details in the Artifact timeline + - **Search box** - select **File** from the drop–down menu and enter the file name - >[!NOTE] - >The stop and quarantine file action is limited to a maximum of 1000 devices. To stop a file on a larger number of devices, see [Add indicator to block or allow file](#add-indicator-to-block-or-allow-a-file). + > [!NOTE] + > The stop and quarantine file action is limited to a maximum of 1000 devices. To stop a file on a larger number of devices, see [Add indicator to block or allow file](#add-indicator-to-block-or-allow-a-file). 2. Go to the top bar and select **Stop and Quarantine File**. - ![Image of stop and quarantine file action](images/atp-stop-quarantine-file.png) + ![Image of stop and quarantine file action](images/atp-stop-quarantine-file.png) 3. Specify a reason, then click **Confirm**. - ![Image of stop and quarantine file modal window](images/atp-stop-quarantine.png) + ![Image of stop and quarantine file modal window](images/atp-stop-quarantine.png) - The Action center shows the submission information: - ![Image of stop and quarantine file action center](images/atp-stopnquarantine-file.png) + The Action center shows the submission information: + ![Image of stop and quarantine file action center](images/atp-stopnquarantine-file.png) - - **Submission time** - Shows when the action was submitted. - - **Success** - Shows the number of devices where the file has been stopped and quarantined. - - **Failed** - Shows the number of devices where the action failed and details about the failure. - - **Pending** - Shows the number of devices where the file is yet to be stopped and quarantined from. This can take time for cases when the device is offline or not connected to the network. + - **Submission time** - Shows when the action was submitted. + - **Success** - Shows the number of devices where the file has been stopped and quarantined. + - **Failed** - Shows the number of devices where the action failed and details about the failure. + - **Pending** - Shows the number of devices where the file is yet to be stopped and quarantined from. This can take time for cases when the device is offline or not connected to the network. 4. Select any of the status indicators to view more information about the action. For example, select **Failed** to see where the action failed. @@ -118,9 +118,9 @@ You can roll back and remove a file from quarantine if you’ve determined that 1. Open an elevated command–line prompt on the device: - a. Go to **Start** and type _cmd_. + a. Go to **Start** and type _cmd_. - b. Right–click **Command prompt** and select **Run as administrator**. + b. Right–click **Command prompt** and select **Run as administrator**. 2. Enter the following command, and press **Enter**: @@ -130,26 +130,26 @@ You can roll back and remove a file from quarantine if you’ve determined that > [!NOTE] > In some scenarios, the **ThreatName** may appear as: EUS:Win32/CustomEnterpriseBlock!cl. -> +> > Defender for Endpoint will restore all custom blocked files that were quarantined on this device in the last 30 days. > [!Important] -> A file that was quarantined as a potential network threat might not be recoverable. If a user attempts to restore the file after quarantine, that file might not be accessible. This can be due to the system no longer having network credentials to access the file. Typically, this is a result of a temporary log on to a system or shared folder and the access tokens expired. +> A file that was quarantined as a potential network threat might not be recoverable. If a user attempts to restore the file after quarantine, that file might not be accessible. This can be due to the system no longer having network credentials to access the file. Typically, this is a result of a temporary log on to a system or shared folder and the access tokens expired. ## Add indicator to block or allow a file You can prevent further propagation of an attack in your organization by banning potentially malicious files or suspected malware. If you know a potentially malicious portable executable (PE) file, you can block it. This operation will prevent it from being read, written, or executed on devices in your organization. ->[!IMPORTANT] +> [!IMPORTANT] > ->- This feature is available if your organization uses Microsoft Defender Antivirus and Cloud–delivered protection is enabled. For more information, see [Manage cloud–delivered protection](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md). +> - This feature is available if your organization uses Microsoft Defender Antivirus and Cloud–delivered protection is enabled. For more information, see [Manage cloud–delivered protection](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md). > ->- The Antimalware client version must be 4.18.1901.x or later. ->- This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including _.exe_ and _.dll_ files. The coverage will be extended over time. ->- This response action is available for devices on Windows 10, version 1703 or later. ->- The allow or block function cannot be done on files if the file's classification exists on the device's cache prior to the allow or block action. +> - The Antimalware client version must be 4.18.1901.x or later. +> - This feature is designed to prevent suspected malware (or potentially malicious files) from being downloaded from the web. It currently supports portable executable (PE) files, including _.exe_ and _.dll_ files. The coverage will be extended over time. +> - This response action is available for devices on Windows 10, version 1703 or later. +> - The allow or block function cannot be done on files if the file's classification exists on the device's cache prior to the allow or block action. ->[!NOTE] +> [!NOTE] > The PE file needs to be in the device timeline for you to be able to take this action. > > There may be a couple of minutes of latency between the time the action is taken and the actual file being blocked. @@ -157,14 +157,14 @@ You can prevent further propagation of an attack in your organization by banning ### Enable the block file feature To start blocking files, you first need to [turn the **Block or allow** feature on](advanced-features.md) in Settings. - + ### Allow or block file When you add an indicator hash for a file, you can choose to raise an alert and block the file whenever a device in your organization attempts to run it. Files automatically blocked by an indicator won't show up in the files's Action center, but the alerts will still be visible in the Alerts queue. - See [manage indicators](manage-indicators.md) for more details on blocking and raising alerts on files. +See [manage indicators](manage-indicators.md) for more details on blocking and raising alerts on files. To stop blocking a file, remove the indicator. You can do so via the **Edit Indicator** action on the file's profile page. This action will be visible in the same position that the **Add Indicator** action was, before you added the indicator. @@ -215,10 +215,10 @@ The Deep analysis summary includes a list of observed *behaviors*, some of which Results of deep analysis are matched against threat intelligence and any matches will generate appropriate alerts. -Use the deep analysis feature to investigate the details of any file, usually during an investigation of an alert or for any other reason where you suspect malicious behavior. This feature is available within the **Deep analysis** tab, on the file's profile page. +Use the deep analysis feature to investigate the details of any file, usually during an investigation of an alert or for any other reason where you suspect malicious behavior. This feature is available within the **Deep analysis** tab, on the file's profile page.

    ->[!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4aAYy?rel=0] +> [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4aAYy?rel=0] **Submit for deep analysis** is enabled when the file is available in the Defender for Endpoint backend sample collection, or if it was observed on a Windows 10 device that supports submitting to deep analysis. @@ -232,7 +232,7 @@ You can also manually submit a sample through the [Microsoft Security Center Por When the sample is collected, Defender for Endpoint runs the file in is a secure environment and creates a detailed report of observed behaviors and associated artifacts, such as files dropped on devices, communication to IPs, and registry modifications. -**Submit files for deep analysis:** +#### Submit files for deep analysis: 1. Select the file that you want to submit for deep analysis. You can select or search a file from any of the following views: @@ -242,17 +242,17 @@ When the sample is collected, Defender for Endpoint runs the file in is a secure 2. In the **Deep analysis** tab of the file view, click **Submit**. - ![You can only submit PE files in the file details section](images/submit-file.png) + ![You can only submit PE files in the file details section](images/submit-file.png) - > [!NOTE] - > Only PE files are supported, including _.exe_ and _.dll_ files. + > [!NOTE] + > Only PE files are supported, including _.exe_ and _.dll_ files. A progress bar is displayed and provides information on the different stages of the analysis. You can then view the report when the analysis is done. > [!NOTE] > Depending on device availability, sample collection time can vary. There is a 3–hour timeout for sample collection. The collection will fail and the operation will abort if there is no online Windows 10 device reporting at that time. You can re–submit files for deep analysis to get fresh data on the file. -**View deep analysis reports** +#### View deep analysis reports View the deep analysis report that Defender for Endpoint provides to see the details of the deep analysis that was conducted on the file you submitted. This feature is available in the file view context. @@ -268,7 +268,7 @@ The details provided can help you investigate if there are indications of a pote ![The deep analysis report shows detailed information across a number of categories](images/analysis-results-nothing.png) -**Troubleshoot deep analysis** +#### Troubleshoot deep analysis If you encounter a problem when trying to submit a file, try each of the following troubleshooting steps. From f4f563de441c1322b9cd38e07d53f3c78d5f703f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 16:34:00 -0800 Subject: [PATCH 163/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 35 ++++++++++++++----- 1 file changed, 26 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index d577b90969..a36f13ab7b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -58,12 +58,26 @@ Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduc Warn mode helps your organization have attack surface reduction rules in place without preventing users from accessing the content they need to perform their tasks. -> [!IMPORTANT] -> Warn mode is supported on devices running the following versions of Windows: -> - [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) or later -> - [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) or later -> -> Attack surface reduction rules that are configured in warn mode will run in block mode on devices that are running older versions of Windows. +### Requirements for warn mode to work + +Warn mode is supported on devices running the following versions of Windows: +- [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) or later +- [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) or later + +Minimum CAMP release requirement: 4.18.2008.9 +Minimum Engine release requirement: 17400 + +### Warn mode is not supported for some attack surface reduction rules + +Warn mode is not supported for the following attack surface reduction rules: +- [Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (GUID `56a863a9-875e-4185-98a7-b882c64b5ce5`) +- [Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) (GUID `d3e037e1-3eb8-44c8-a917-57927947596d`) +- [Block persistence through WMI event subscription](#block-persistence-through-wmi-event-subscription) (GUID `e6db77e5-3df2-4cf1-b95a-636979351e5b`) +- [Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) (GUID `c1db55ab-c21a-4637-bb3f-a12568109d35`) + +Attack surface reduction rules that are configured in warn mode will run in block mode on devices that are running older versions of Windows. + + ## Notifications when a rule is triggered @@ -118,10 +132,13 @@ The "engine version" listed for attack surface reduction events in the event log ## Attack surface reduction rules -The following sections describe each of the 16 attack surface reduction rules (in alphabetical order of rule name). This table shows their corresponding GUIDs, which you use if you're configuring the rules with Group Policy or PowerShell. If you use Microsoft Endpoint Configuration Manager or Microsoft Intune, you do not need the GUIDs: +The following table and subsections describe each of the 16 attack surface reduction rules. The attack surface reduction rules are listed in alphabetical order, by rule name. + +If you are configuring attack surface reduction rules by using Group Policy or PowerShell, you'll need the GUIDs. On the other hand, if you use Microsoft Endpoint Configuration Manager or Microsoft Intune, you do not need the GUIDs. + | Rule name | GUID | File & folder exclusions | Minimum OS supported | -|-----|-----|-----|-----| +|:-----|:-----:|:-----|:-----| |[Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (NEW!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | |[Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | @@ -141,7 +158,7 @@ The following sections describe each of the 16 attack surface reduction rules (i ### Block abuse of in-the-wild exploited vulnerable signed drivers -This rule prevents an application from writing a vulnerable signed driver to disk. Vulnerable signed drivers can be exploited by local applications with sufficient privileges, to gain access to the kernel. It allows attackers to disable or circumvent security solutions, eventually leading to system compromise. +(**NEW**!) This rule prevents an application from writing a vulnerable signed driver to disk. Vulnerable signed drivers can be exploited by local applications with sufficient privileges, to gain access to the kernel. It allows attackers to disable or circumvent security solutions, eventually leading to system compromise. This rule does not block a driver already existing on the system from being loaded. From 09d352cf07be43b378d26bba38139a0c84c40d12 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 9 Dec 2020 16:36:13 -0800 Subject: [PATCH 164/958] Removed extra
    tags --- windows/client-management/mdm/policy-csp-admx-rpc.md | 4 ---- 1 file changed, 4 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-rpc.md b/windows/client-management/mdm/policy-csp-admx-rpc.md index 2845ab5077..2421a28191 100644 --- a/windows/client-management/mdm/policy-csp-admx-rpc.md +++ b/windows/client-management/mdm/policy-csp-admx-rpc.md @@ -128,8 +128,6 @@ ADMX Info:
    -
    - **ADMX_RPC/RpcIgnoreDelegationFailure** @@ -291,8 +289,6 @@ ADMX Info:
    -
    - **ADMX_RPC/RpcStateInformation** From dceb30e4c68e788afa800c1ddfe3a13ca61374ce Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 16:38:09 -0800 Subject: [PATCH 165/958] Update TOC.md --- windows/security/threat-protection/TOC.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index f9ae070935..79487e7cc2 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -185,9 +185,7 @@ ###### [Report on antivirus protection]() ###### [Review protection status and alerts](microsoft-defender-antivirus/report-monitor-microsoft-defender-antivirus.md) ###### [Troubleshoot antivirus reporting in Update Compliance](microsoft-defender-antivirus/troubleshoot-reporting.md) - -###### [Manage updates and apply baselines]() -###### [Learn about the different kinds of updates](microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md) +###### [Learn about the recent updates](microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus.md) ###### [Manage protection and security intelligence updates](microsoft-defender-antivirus/manage-protection-updates-microsoft-defender-antivirus.md) ###### [Manage when protection updates should be downloaded and applied](microsoft-defender-antivirus/manage-protection-update-schedule-microsoft-defender-antivirus.md) ###### [Manage updates for endpoints that are out of date](microsoft-defender-antivirus/manage-outdated-endpoints-microsoft-defender-antivirus.md) From 2f324dedd1f35b63694716c8f260717aab8bd94b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 16:52:59 -0800 Subject: [PATCH 166/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index a36f13ab7b..e10bf2816b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -64,8 +64,11 @@ Warn mode is supported on devices running the following versions of Windows: - [Windows 10, version 1809](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1809) or later - [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) or later -Minimum CAMP release requirement: 4.18.2008.9 -Minimum Engine release requirement: 17400 +In addition, make sure [Microsoft Defender Antivirus and antimalware updates](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus#monthly-platform-and-engine-versions) are installed +- Minimum platform release requirement: `4.18.2008.9` +- Minimum engine release requirement: `1.1.17400.5` + +For more information, see [Update for Microsoft Defender antimalware platform](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform). ### Warn mode is not supported for some attack surface reduction rules From d9d0388a5901654d0278d9f800aa2dd44fb46ded Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 17:01:26 -0800 Subject: [PATCH 167/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index e10bf2816b..6319fcee8b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -68,23 +68,21 @@ In addition, make sure [Microsoft Defender Antivirus and antimalware updates](ht - Minimum platform release requirement: `4.18.2008.9` - Minimum engine release requirement: `1.1.17400.5` -For more information, see [Update for Microsoft Defender antimalware platform](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform). +For more information and to get your updates, see [Update for Microsoft Defender antimalware platform](https://support.microsoft.com/help/4052623/update-for-microsoft-defender-antimalware-platform). -### Warn mode is not supported for some attack surface reduction rules +### Cases where warn mode is not supported -Warn mode is not supported for the following attack surface reduction rules: -- [Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (GUID `56a863a9-875e-4185-98a7-b882c64b5ce5`) +Warn mode is not supported for the following four attack surface reduction rules: +- (NEW!) [Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (GUID `56a863a9-875e-4185-98a7-b882c64b5ce5`) - [Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) (GUID `d3e037e1-3eb8-44c8-a917-57927947596d`) - [Block persistence through WMI event subscription](#block-persistence-through-wmi-event-subscription) (GUID `e6db77e5-3df2-4cf1-b95a-636979351e5b`) - [Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) (GUID `c1db55ab-c21a-4637-bb3f-a12568109d35`) -Attack surface reduction rules that are configured in warn mode will run in block mode on devices that are running older versions of Windows. - - +In addition, warn mode is not supported on devices running older versions of Windows. In those cases, attack surface reduction rules that are configured to run in warn mode will run in block mode. ## Notifications when a rule is triggered -Whenever a rule is triggered, a notification will be displayed on the device. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. The notification also displays within the Microsoft Defender Security Center and the Microsoft 365 security center. +Whenever a rule is triggered, a notification will be displayed on the device. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. The notification also displays within the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and the Microsoft 365 security center ([https://security.microsoft.com](https://security.microsoft.com)). ## Attack surface reduction features across Windows versions From 6085c05391a266f9106c57e06c2a417248bbf80c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 17:21:39 -0800 Subject: [PATCH 168/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 6319fcee8b..6e9d5e5bfe 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -52,6 +52,21 @@ In the recommendation details pane, check the user impact to determine what perc Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduction rules would impact your organization if they were enabled. It's best to run all rules in audit mode first so you can understand their impact on your line-of-business applications. Many line-of-business applications are written with limited security concerns, and they may perform tasks in ways that seem similar to malware. By monitoring audit data and [adding exclusions](enable-attack-surface-reduction.md#exclude-files-and-folders-from-asr-rules) for necessary applications, you can deploy attack surface reduction rules without impacting productivity. +## Silent auditing + +(**NEW**!) To add security value, a sample of attack surface reduction audit events are now collected on devices that do not have attack surface reduction rules enabled in either audit mode or block mode. + +By default, attack surface reduction rules are not enabled in audit mode. Silent auditing is a new capability that collects events for the following four attack surface reduction rules: +- [Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) +- [Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) +- [Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) +- [Block Office communication application from creating child processes](#block-office-communication-application-from-creating-child-processes) + +The other attack surface reduction rules that are not configured will not have any auditing events collected. And, you can disable silent auditing by disabling the rules. + +> [!NOTE] +> Currently, auditing events are not viewable in advanced hunting. + ## Warn mode for users (**NEW**!) Prior to warn mode capabilities, attack surface reduction rules that are enabled could be set to either audit mode or block mode. With the new warn mode, whenever content is blocked by an attack surface reduction rule, users see a dialog box that indicates the content is blocked. The dialog box also offers the user an option to unblock the content. The user can then retry their action, and the operation completes. WHen a user unblocks content, the content remains unblocked for 24 hours, and then blocking resumes. @@ -140,7 +155,7 @@ If you are configuring attack surface reduction rules by using Group Policy or P | Rule name | GUID | File & folder exclusions | Minimum OS supported | |:-----|:-----:|:-----|:-----| -|[Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (NEW!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | |[Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | +|[Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (**NEW**!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | |[Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | From ccbddd6847d80b675c6d40bfc3e606ef73174122 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 17:26:39 -0800 Subject: [PATCH 169/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 48 +++++++++---------- 1 file changed, 24 insertions(+), 24 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 6e9d5e5bfe..6a73600f8d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -174,7 +174,7 @@ If you are configuring attack surface reduction rules by using Group Policy or P ### Block abuse of in-the-wild exploited vulnerable signed drivers -(**NEW**!) This rule prevents an application from writing a vulnerable signed driver to disk. Vulnerable signed drivers can be exploited by local applications with sufficient privileges, to gain access to the kernel. It allows attackers to disable or circumvent security solutions, eventually leading to system compromise. +(**NEW**!) This new rule prevents an application from writing a vulnerable signed driver to disk. Vulnerable signed drivers can be exploited by local applications with sufficient privileges, to gain access to the kernel. It allows attackers to disable or circumvent security solutions, eventually leading to system compromise. This rule does not block a driver already existing on the system from being loaded. @@ -187,7 +187,7 @@ This rule is supported on all versions of Windows where attack surface reduction - Windows Server, version 1803 (Semi-Annual Channel) or later - Windows Server 2019 -Intune Name: Block abuse of exploited vulnerable signed drivers +Intune Name: `Block abuse of exploited vulnerable signed drivers` Configuration Manager name: Not Applicable @@ -204,7 +204,7 @@ This rule was introduced in: - [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) -Intune name: Process creation from Adobe Reader (beta) +Intune name: `Process creation from Adobe Reader (beta)` Configuration Manager name: Not yet available @@ -222,9 +222,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -Intune name: Office apps launching child processes +Intune name: `Office apps launching child processes` -Configuration Manager name: Block Office application from creating child processes +Configuration Manager name: `Block Office application from creating child processes` GUID: `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` @@ -243,9 +243,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [Configuration Manager CB 1802](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -Intune name: Flag credential stealing from the Windows local security authority subsystem +Intune name: `Flag credential stealing from the Windows local security authority subsystem` -Configuration Manager name: Block credential stealing from the Windows local security authority subsystem +Configuration Manager name: `Block credential stealing from the Windows local security authority subsystem` GUID: `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` @@ -262,9 +262,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [Microsoft Endpoint Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -Intune name: Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions) +Intune name: `Execution of executable content (exe, dll, ps, js, vbs, etc.) dropped from email (webmail/mail client) (no exceptions)` -Microsoft Endpoint Configuration Manager name: Block executable content from email client and webmail +Microsoft Endpoint Configuration Manager name: `Block executable content from email client and webmail` GUID: `BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550` @@ -287,9 +287,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [Configuration Manager CB 1802](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -Intune name: Executables that don't meet a prevalence, age, or trusted list criteria. +Intune name: `Executables that don't meet a prevalence, age, or trusted list criteria` -Configuration Manager name: Block executable files from running unless they meet a prevalence, age, or trusted list criteria +Configuration Manager name: `Block executable files from running unless they meet a prevalence, age, or trusted list criteria` GUID: `01443614-cd74-433a-b99e-2ecdc07bfc25` @@ -305,9 +305,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -Intune name: Obfuscated js/vbs/ps/macro code +Intune name: `Obfuscated js/vbs/ps/macro code` -Configuration Manager name: Block execution of potentially obfuscated scripts. +Configuration Manager name: `Block execution of potentially obfuscated scripts` GUID: `5BEB7EFE-FD9A-4556-801D-275E5FFC04CC` @@ -323,9 +323,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -Intune name: js/vbs executing payload downloaded from Internet (no exceptions) +Intune name: `js/vbs executing payload downloaded from Internet (no exceptions)` -Configuration Manager name: Block JavaScript or VBScript from launching downloaded executable content +Configuration Manager name: `Block JavaScript or VBScript from launching downloaded executable content` GUID: `D3E037E1-3EB8-44C8-A917-57927947596D` @@ -333,7 +333,7 @@ GUID: `D3E037E1-3EB8-44C8-A917-57927947596D` This rule prevents Office apps, including Word, Excel, and PowerPoint, from creating potentially malicious executable content, by blocking malicious code from being written to disk. - Malware that abuses Office as a vector may attempt to break out of Office and save malicious components to disk. These malicious components would survive a computer reboot and persist on the system. Therefore, this rule defends against a common persistence technique. +Malware that abuses Office as a vector may attempt to break out of Office and save malicious components to disk. These malicious components would survive a computer reboot and persist on the system. Therefore, this rule defends against a common persistence technique. This rule was introduced in: - [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) @@ -341,9 +341,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [System Center Configuration Manager](https://docs.microsoft.com/configmgr/core/servers/manage/updates) (SCCM) CB 1710 (SCCM is now Microsoft Endpoint Configuration Manager) -Intune name: Office apps/macros creating executable content +Intune name: `Office apps/macros creating executable content` -SCCM name: Block Office applications from creating executable content +SCCM name: `Block Office applications from creating executable content` GUID: `3B576869-A4EC-4529-8536-B80A7769E899` @@ -363,9 +363,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -Intune name: Office apps injecting code into other processes (no exceptions) +Intune name: `Office apps injecting code into other processes (no exceptions)` -Configuration Manager name: Block Office applications from injecting code into other processes +Configuration Manager name: `Block Office applications from injecting code into other processes` GUID: `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` @@ -383,9 +383,9 @@ This rule was introduced in: - [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) -Intune name: Process creation from Office communication products (beta) +Intune name: `Process creation from Office communication products (beta)` -Configuration Manager name: Not yet available +Configuration Manager name: Not available GUID: `26190899-1602-49e8-8b27-eb1d0a1ce869` @@ -402,9 +402,9 @@ This rule was introduced in: - [Windows 10, version 1903](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1903) - [Windows Server 1903](https://docs.microsoft.com/windows-server/get-started-19/whats-new-in-windows-server-1903-1909) -Intune name: Not yet available +Intune name: Not available -Configuration Manager name: Not yet available +Configuration Manager name: Not available GUID: `e6db77e5-3df2-4cf1-b95a-636979351e5b` From 3fa1f0577656d6f052b3d9e2e44448a3999d2fef Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 17:27:58 -0800 Subject: [PATCH 170/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 6a73600f8d..8a4e322ae0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -420,7 +420,7 @@ This rule was introduced in: - [Windows Server, version 1809](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1809) - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) -Intune name: Process creation from PSExec and WMI commands +Intune name: `Process creation from PSExec and WMI commands` Configuration Manager name: Not applicable @@ -436,9 +436,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [Configuration Manager CB 1802](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -Intune name: Untrusted and unsigned processes that run from USB +Intune name: `Untrusted and unsigned processes that run from USB` -Configuration Manager name: Block untrusted and unsigned processes that run from USB +Configuration Manager name: `Block untrusted and unsigned processes that run from USB` GUID: `b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4` @@ -454,9 +454,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [Configuration Manager CB 1710](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -Intune name: Win32 imports from Office macro code +Intune name: `Win32 imports from Office macro code` -Configuration Manager name: Block Win32 API calls from Office macros +Configuration Manager name: `Block Win32 API calls from Office macros` GUID: `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` @@ -473,9 +473,9 @@ This rule was introduced in: - [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) - [Configuration Manager CB 1802](https://docs.microsoft.com/configmgr/core/servers/manage/updates) -Intune name: Advanced ransomware protection +Intune name: `Advanced ransomware protection` -Configuration Manager name: Use advanced protection against ransomware +Configuration Manager name: `Use advanced protection against ransomware` GUID: `c1db55ab-c21a-4637-bb3f-a12568109d35` From 9ad86a573616ec14810c9b9b576ee5ce9e815a16 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 17:34:22 -0800 Subject: [PATCH 171/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 8a4e322ae0..b67df3ca92 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -44,7 +44,7 @@ For more information about configuring attack surface reduction rules, see [Enab You can assess how an attack surface reduction rule might impact your network by opening the security recommendation for that rule in [threat and vulnerability management](https://docs.microsoft.com/windows/security/threat-protection/#tvm). -:::image type="content" source="images/asrrecommendation.png" alt-text="Security recommendation for ASR rule"::: +:::image type="content" source="images/asrrecommendation.png" alt-text="Security reco for attack surface reduction rule"::: In the recommendation details pane, check the user impact to determine what percentage of your devices can accept a new policy enabling the rule in blocking mode without adverse impact to user productivity. @@ -54,7 +54,7 @@ Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduc ## Silent auditing -(**NEW**!) To add security value, a sample of attack surface reduction audit events are now collected on devices that do not have attack surface reduction rules enabled in either audit mode or block mode. +(**NEW**!) To add security value, a sample of attack surface reduction audit events is now collected on devices that do not have attack surface reduction rules enabled in either audit mode or block mode. The collected events are throttled to 100 events per device By default, attack surface reduction rules are not enabled in audit mode. Silent auditing is a new capability that collects events for the following four attack surface reduction rules: - [Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) @@ -69,7 +69,7 @@ The other attack surface reduction rules that are not configured will not have a ## Warn mode for users -(**NEW**!) Prior to warn mode capabilities, attack surface reduction rules that are enabled could be set to either audit mode or block mode. With the new warn mode, whenever content is blocked by an attack surface reduction rule, users see a dialog box that indicates the content is blocked. The dialog box also offers the user an option to unblock the content. The user can then retry their action, and the operation completes. WHen a user unblocks content, the content remains unblocked for 24 hours, and then blocking resumes. +(**NEW**!) Prior to warn mode capabilities, attack surface reduction rules that are enabled could be set to either audit mode or block mode. With the new warn mode, whenever content is blocked by an attack surface reduction rule, users see a dialog box that indicates the content is blocked. The dialog box also offers the user an option to unblock the content. The user can then retry their action, and the operation completes. When a user unblocks content, the content remains unblocked for 24 hours, and then blocking resumes. Warn mode helps your organization have attack surface reduction rules in place without preventing users from accessing the content they need to perform their tasks. @@ -136,7 +136,7 @@ You can review the Windows event log to view events generated by attack surface 5. Select **OK**. -This will create a custom view that filters events to only show the following, all of which are related to controlled folder access: +You can create a custom view that filters events to only show the following events, all of which are related to controlled folder access: |Event ID | Description | |---|---| @@ -212,7 +212,7 @@ GUID: `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` ### Block all Office applications from creating child processes -This rule blocks Office apps from creating child processes. This includes Word, Excel, PowerPoint, OneNote, and Access. +This rule blocks Office apps from creating child processes. Office apps include Word, Excel, PowerPoint, OneNote, and Access. Creating malicious child processes is a common malware strategy. Malware that abuse Office as a vector often run VBA macros and exploit code to download and attempt to run additional payloads. However, some legitimate line-of-business applications might also generate child processes for benign purposes, such as spawning a command prompt or using PowerShell to configure registry settings. From ecfec7b56dc664418fc3cf0e4c0af9cb105b87f5 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 9 Dec 2020 17:36:16 -0800 Subject: [PATCH 172/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index b67df3ca92..9cbb770158 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -232,7 +232,7 @@ GUID: `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` This rule helps prevent credential stealing, by locking down Local Security Authority Subsystem Service (LSASS). -LSASS authenticates users who log in to a Windows computer. Microsoft Defender Credential Guard in Windows 10 normally prevents attempts to extract credentials from LSASS. However, some organizations can't enable Credential Guard on all of their computers because of compatibility issues with custom smartcard drivers or other programs that load into the Local Security Authority (LSA). In these cases, attackers can use hack tools like Mimikatz to scrape cleartext passwords and NTLM hashes from LSASS. +LSASS authenticates users who sign in on a Windows computer. Microsoft Defender Credential Guard in Windows 10 normally prevents attempts to extract credentials from LSASS. However, some organizations can't enable Credential Guard on all of their computers because of compatibility issues with custom smartcard drivers or other programs that load into the Local Security Authority (LSA). In these cases, attackers can use hack tools like Mimikatz to scrape cleartext passwords and NTLM hashes from LSASS. > [!NOTE] > In some apps, the code enumerates all running processes and attempts to open them with exhaustive permissions. This rule denies the app's process open action and logs the details to the security event log. This rule can generate a lot of noise. If you have an app that simply enumerates LSASS, but has no real impact in functionality, there is NO need to add it to the exclusion list. By itself, this event log entry doesn't necessarily indicate a malicious threat. @@ -373,7 +373,7 @@ GUID: `75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84` This rule prevents Outlook from creating child processes, while still allowing legitimate Outlook functions. -This protects against social engineering attacks and prevents exploit code from abusing vulnerabilities in Outlook. It also protects against [Outlook rules and forms exploits](https://blogs.technet.microsoft.com/office365security/defending-against-rules-and-forms-injection/) that attackers can use when a user's credentials are compromised. +This rule protects against social engineering attacks and prevents exploit code from abusing vulnerabilities in Outlook. It also protects against [Outlook rules and forms exploits](https://blogs.technet.microsoft.com/office365security/defending-against-rules-and-forms-injection/) that attackers can use when a user's credentials are compromised. > [!NOTE] > This rule applies to Outlook and Outlook.com only. From 429f29a6d0e7fbff0c19d41c046781583c39ca92 Mon Sep 17 00:00:00 2001 From: Sunny Zankharia <67922512+sazankha@users.noreply.github.com> Date: Wed, 9 Dec 2020 18:36:42 -0800 Subject: [PATCH 173/958] Update windowsdefenderapplicationguard-csp.md --- .../mdm/windowsdefenderapplicationguard-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md index 377215d1a7..6699a32617 100644 --- a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md @@ -125,7 +125,7 @@ The following list shows the supported values: - 1 - Non-enterprise content embedded on enterprise sites are stopped from opening in Internet Explorer or Microsoft Edge outside of Microsoft Defender Application Guard. > [!NOTE] -> This policy setting is no longer supported in the new Microsoft Edge browser. The policy will be deprecated and removed in a future release. +> This policy setting is no longer supported in the new Microsoft Edge browser. The policy will be deprecated and removed in a future release. Webpages that contain mixed content, both enterprise and non-enterprise, may load incorrectly or fail completely if this feature is enabled. ADMX Info: From dd1e87ba6fade6496022039ae50e60043fdfb396 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Thu, 10 Dec 2020 10:30:58 +0200 Subject: [PATCH 174/958] Update windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../bitlocker/bitlocker-group-policy-settings.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md index 91bf628e8b..f6f72e035f 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md +++ b/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings.md @@ -38,7 +38,7 @@ If multiple changes are necessary to bring the drive into compliance, you must s Policy settings are changed to disallow passwords and require smart cards. In this situation, you need to suspend BitLocker protection by using the [Manage-bde](/windows-server/administration/windows-commands/manage-bde) command-line tool, delete the password unlock method, and add the smart card method. After this is complete, BitLocker is compliant with the Group Policy setting and BitLocker protection on the drive can be resumed. > [!NOTE] -> For more details about Active Directory configuration related to BitLocker enablement, please check [this article](https://docs.microsoft.com/en-us/windows/deployment/deploy-windows-mdt/set-up-mdt-for-bitlocker). +> For more details about Active Directory configuration related to BitLocker enablement, please see [Set up MDT for BitLocker](https://docs.microsoft.com/windows/deployment/deploy-windows-mdt/set-up-mdt-for-bitlocker). ## BitLocker Group Policy settings From 80871aac40a1f430974a6c33eae3ed5a8b310281 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 09:58:06 -0800 Subject: [PATCH 175/958] Update respond-file-alerts.md --- .../microsoft-defender-atp/respond-file-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md index bccc623abc..766691ac1e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md @@ -232,7 +232,7 @@ You can also manually submit a sample through the [Microsoft Security Center Por When the sample is collected, Defender for Endpoint runs the file in is a secure environment and creates a detailed report of observed behaviors and associated artifacts, such as files dropped on devices, communication to IPs, and registry modifications. -#### Submit files for deep analysis: +#### Submit files for deep analysis 1. Select the file that you want to submit for deep analysis. You can select or search a file from any of the following views: From eeac52a8eb5b05446a61c9b4e4727dccd7f892bd Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 14:47:58 -0800 Subject: [PATCH 176/958] Update attack-surface-reduction.md --- .../attack-surface-reduction.md | 43 ++----------------- 1 file changed, 3 insertions(+), 40 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 9cbb770158..fc88435234 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -52,21 +52,6 @@ In the recommendation details pane, check the user impact to determine what perc Use [audit mode](audit-windows-defender.md) to evaluate how attack surface reduction rules would impact your organization if they were enabled. It's best to run all rules in audit mode first so you can understand their impact on your line-of-business applications. Many line-of-business applications are written with limited security concerns, and they may perform tasks in ways that seem similar to malware. By monitoring audit data and [adding exclusions](enable-attack-surface-reduction.md#exclude-files-and-folders-from-asr-rules) for necessary applications, you can deploy attack surface reduction rules without impacting productivity. -## Silent auditing - -(**NEW**!) To add security value, a sample of attack surface reduction audit events is now collected on devices that do not have attack surface reduction rules enabled in either audit mode or block mode. The collected events are throttled to 100 events per device - -By default, attack surface reduction rules are not enabled in audit mode. Silent auditing is a new capability that collects events for the following four attack surface reduction rules: -- [Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) -- [Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) -- [Block executable content from email client and webmail](#block-executable-content-from-email-client-and-webmail) -- [Block Office communication application from creating child processes](#block-office-communication-application-from-creating-child-processes) - -The other attack surface reduction rules that are not configured will not have any auditing events collected. And, you can disable silent auditing by disabling the rules. - -> [!NOTE] -> Currently, auditing events are not viewable in advanced hunting. - ## Warn mode for users (**NEW**!) Prior to warn mode capabilities, attack surface reduction rules that are enabled could be set to either audit mode or block mode. With the new warn mode, whenever content is blocked by an attack surface reduction rule, users see a dialog box that indicates the content is blocked. The dialog box also offers the user an option to unblock the content. The user can then retry their action, and the operation completes. When a user unblocks content, the content remains unblocked for 24 hours, and then blocking resumes. @@ -87,8 +72,8 @@ For more information and to get your updates, see [Update for Microsoft Defender ### Cases where warn mode is not supported -Warn mode is not supported for the following four attack surface reduction rules: -- (NEW!) [Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (GUID `56a863a9-875e-4185-98a7-b882c64b5ce5`) +Warn mode is not supported for the following attack surface reduction rules: + - [Block JavaScript or VBScript from launching downloaded executable content](#block-javascript-or-vbscript-from-launching-downloaded-executable-content) (GUID `d3e037e1-3eb8-44c8-a917-57927947596d`) - [Block persistence through WMI event subscription](#block-persistence-through-wmi-event-subscription) (GUID `e6db77e5-3df2-4cf1-b95a-636979351e5b`) - [Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) (GUID `c1db55ab-c21a-4637-bb3f-a12568109d35`) @@ -148,14 +133,13 @@ The "engine version" listed for attack surface reduction events in the event log ## Attack surface reduction rules -The following table and subsections describe each of the 16 attack surface reduction rules. The attack surface reduction rules are listed in alphabetical order, by rule name. +The following table and subsections describe each of the 15 attack surface reduction rules. The attack surface reduction rules are listed in alphabetical order, by rule name. If you are configuring attack surface reduction rules by using Group Policy or PowerShell, you'll need the GUIDs. On the other hand, if you use Microsoft Endpoint Configuration Manager or Microsoft Intune, you do not need the GUIDs. | Rule name | GUID | File & folder exclusions | Minimum OS supported | |:-----|:-----:|:-----|:-----| -|[Block abuse of in-the-wild exploited vulnerable signed drivers](#block-abuse-of-in-the-wild-exploited-vulnerable-signed-drivers) (**NEW**!) |`56a863a9-875e-4185-98a7-b882c64b5ce5` | |[Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block Adobe Reader from creating child processes](#block-adobe-reader-from-creating-child-processes) | `7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block all Office applications from creating child processes](#block-all-office-applications-from-creating-child-processes) | `D4F940AB-401B-4EFC-AADC-AD5F3C50688A` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Block credential stealing from the Windows local security authority subsystem (lsass.exe)](#block-credential-stealing-from-the-windows-local-security-authority-subsystem) | `9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | @@ -172,27 +156,6 @@ If you are configuring attack surface reduction rules by using Group Policy or P |[Block Win32 API calls from Office macros](#block-win32-api-calls-from-office-macros) | `92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | |[Use advanced protection against ransomware](#use-advanced-protection-against-ransomware) | `c1db55ab-c21a-4637-bb3f-a12568109d35` | Supported | [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) (RS3, build 16299) or greater | -### Block abuse of in-the-wild exploited vulnerable signed drivers - -(**NEW**!) This new rule prevents an application from writing a vulnerable signed driver to disk. Vulnerable signed drivers can be exploited by local applications with sufficient privileges, to gain access to the kernel. It allows attackers to disable or circumvent security solutions, eventually leading to system compromise. - -This rule does not block a driver already existing on the system from being loaded. - -> [!TIP] -> You can submit a driver for analysis at the [Microsoft Security Intelligence site](https://www.microsoft.com/wdsi/driversubmission). - -This rule is supported on all versions of Windows where attack surface reduction rules are currently supported: -- Windows 10 Pro, version 1709 or later -- Windows 10 Enterprise, version 1709 or later -- Windows Server, version 1803 (Semi-Annual Channel) or later -- Windows Server 2019 - -Intune Name: `Block abuse of exploited vulnerable signed drivers` - -Configuration Manager name: Not Applicable - -Rule guid: `56a863a9-875e-4185-98a7-b882c64b5ce5` - ### Block Adobe Reader from creating child processes This rule prevents attacks by blocking Adobe Reader from creating additional processes. From 423558a767557cf82ff659b6de501ab668f43e83 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 14:49:49 -0800 Subject: [PATCH 177/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index fc88435234..3456c7128e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -14,7 +14,7 @@ ms.author: deniseb ms.reviewer: sugamar, jcedola manager: dansimp ms.custom: asr -ms.date: 12/09/2020 +ms.date: 12/10/2020 --- # Use attack surface reduction rules to prevent malware infection From 792cee0b921da14f53d254ec41f7b0ddd50e4001 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 15:05:43 -0800 Subject: [PATCH 178/958] Update controlled-folders.md --- .../microsoft-defender-atp/controlled-folders.md | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index 272d1480ec..ae6fe0d261 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb audience: ITPro -ms.date: 11/05/2020 +ms.date: 12/10/2020 ms.reviewer: v-maave manager: dansimp ms.custom: asr @@ -44,6 +44,19 @@ Controlled folder access is especially useful in helping to protect your documen The protected folders include common system folders (including boot sectors), and you can [add additional folders](customize-controlled-folders.md#protect-additional-folders). You can also [allow apps](customize-controlled-folders.md#allow-specific-apps-to-make-changes-to-controlled-folders) to give them access to the protected folders. +By default, the following Windows system folders are protected: +- `c:\Users\\Documents` +- `c:\Users\Public\Documents` +- `c:\Users\\Pictures` +- `c:\Users\Public\Pictures` +- `c:\Users\Public\Videos` +- `c:\Users\\Music` +- `c:\Users\Public\Music` +- `c:\Users\\Favorites` + +> [!NOTE] +> You cannot remove the Windows system folders that are protected by default. + You can use [audit mode](audit-windows-defender.md) to evaluate how controlled folder access would impact your organization if it were enabled. You can also visit the Windows Defender Test ground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to confirm the feature is working and see how it works. Controlled folder access is supported on Windows 10, version 1709 and later and Windows Server 2019. From e5ce0046d22ffd7543e4c6d582387ef1f820d3cc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 15:27:07 -0800 Subject: [PATCH 179/958] Update controlled-folders.md --- .../controlled-folders.md | 69 +++++++------------ 1 file changed, 24 insertions(+), 45 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index ae6fe0d261..b6163d243c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -40,11 +40,20 @@ Controlled folder access works with a list of trusted software. If an app is inc Apps can also be manually added to the trusted list via Configuration Manager and Intune. Additional actions, such as [adding a file indicator](../microsoft-defender-atp/respond-file-alerts.md#add-indicator-to-block-or-allow-a-file) for the app, can be performed from the Security Center Console. +## Why controlled folder access is important + Controlled folder access is especially useful in helping to protect your documents and information from [ransomware](https://www.microsoft.com/wdsi/threats/ransomware). In a ransomware attack, your files can get encrypted and held hostage. With controlled folder access in place, a notification appears on the computer where an app attempted to make changes to a file in a protected folder. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. You can also enable the rules individually to customize what techniques the feature monitors. -The protected folders include common system folders (including boot sectors), and you can [add additional folders](customize-controlled-folders.md#protect-additional-folders). You can also [allow apps](customize-controlled-folders.md#allow-specific-apps-to-make-changes-to-controlled-folders) to give them access to the protected folders. +The [protected folders](#review-controlled-folder-access-events-in-windows-event-viewer) include common system folders (including boot sectors), and you can [add additional folders](customize-controlled-folders.md#protect-additional-folders). You can also [allow apps](customize-controlled-folders.md#allow-specific-apps-to-make-changes-to-controlled-folders) to give them access to the protected folders. + +You can use [audit mode](audit-windows-defender.md) to evaluate how controlled folder access would impact your organization if it were enabled. You can also visit the Windows Defender Test ground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to confirm the feature is working and see how it works. + +Controlled folder access is supported on Windows 10, version 1709 and later and Windows Server 2019. + +## Windows system folders are protected by default + +Your Windows system folders are protected by default, along with several other folders. These folders include: -By default, the following Windows system folders are protected: - `c:\Users\\Documents` - `c:\Users\Public\Documents` - `c:\Users\\Pictures` @@ -55,13 +64,9 @@ By default, the following Windows system folders are protected: - `c:\Users\\Favorites` > [!NOTE] -> You cannot remove the Windows system folders that are protected by default. +> You can configure additional folders as protected, but you cannot remove the Windows system folders that are protected by default. -You can use [audit mode](audit-windows-defender.md) to evaluate how controlled folder access would impact your organization if it were enabled. You can also visit the Windows Defender Test ground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to confirm the feature is working and see how it works. - -Controlled folder access is supported on Windows 10, version 1709 and later and Windows Server 2019. - -## Requirements +## Requirements for controlled folder access Controlled folder access requires enabling [Microsoft Defender Antivirus real-time protection](../microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus.md). @@ -90,19 +95,21 @@ You can review the Windows event log to see events that are created when control 4. Navigate to where you extracted *cfa-events.xml* and select it. Alternatively, [copy the XML directly](event-views.md). -5. Click **OK**. +5. Select **OK**. After following the procedure, you have created a custom view that shows events related to controlled folder access, as listed in the following table: |Event ID | Description | -|---|---| +|:---|:---| |5007 | Event when settings are changed | |1124 | Audited controlled folder access event | |1123 | Blocked controlled folder access event | ## View or change the list of protected folders -### Windows 10 security app +You can use the Windows Security app to view the list of folders that are protected by controlled folder access. + +### View or change the list of protected folders using the Windows Security app 1. On your Windows 10 device, open the Windows Security app. @@ -118,39 +125,11 @@ After following the procedure, you have created a custom view that shows events - To remove a folder, select it, and then select **Remove**. +> [!NOTE] +> [Windows system folders](#windows-system-folders-are-protected-by-default) are protected by default, and you cannot remove them from the list. + ## See also -- [Evaluate controlled folder access](evaluate-controlled-folder-access.md). Use a dedicated demo tool to see how controlled folder access works, and what events would typically be created. - - -## Default folders protected by controlled folder access -Windows system folders are protected by default. In addition, there are several folders that are protected by controlled folder access by default. You can configure additional folders as protected, but cannot remove the default folders from the controlled folder access protection. See [Protect additional folders](customize-controlled-folders.md#protect-additional-folders) for more information. - -Here's the list of default protected folders: -- %USERPROFILE%\Documents -- %USERPROFILE%\Favorites -- %USERPROFILE%\Music -- %USERPROFILE%\Pictures -- %USERPROFILE%\Videos -- %PUBLIC%\Documents -- %PUBLIC%\Music -- %PUBLIC%\Pictures -- %PUBLIC%\Videos - -You can use the Windows Security app to view the list of default folders protected by controlled folder access: - -1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**. - -2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then scroll down to the **Ransomware protection** section. - -3. Click the **Manage ransomware protection** link to open the **Ransomware protection** pane. - -4. Under the **Controlled folder access** section, click the **Protected folders** link. - -5. Click **Yes** on the **User Access Control** prompt. - - The **Protected folders** pane displays the folders that are protected by default. - -## In this section - - [Customize controlled folder access](customize-controlled-folders.md). Add additional protected folders, and allow specified apps to access protected folders. +- [Evaluate controlled folder access](evaluate-controlled-folder-access.md) +- [Customize controlled folder access](customize-controlled-folders.md) +- [Protect additional folders](customize-controlled-folders.md#protect-additional-folders) From 3ca7c1e48fea27de53a415d1eeea584992d1b7a3 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 15:31:10 -0800 Subject: [PATCH 180/958] Update controlled-folders.md --- .../microsoft-defender-atp/controlled-folders.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index b6163d243c..e034c4b032 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -74,7 +74,7 @@ Controlled folder access requires enabling [Microsoft Defender Antivirus real-ti Defender for Endpoint provides detailed reporting into events and blocks as part of its [alert investigation scenarios](../microsoft-defender-atp/investigate-alerts.md). -You can query Microsoft Defender for Endpoint data by using [Advanced hunting](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection). If you're using [audit mode](audit-windows-defender.md), you can use advanced hunting to see how controlled folder access settings would affect your environment if they were enabled. +You can query Microsoft Defender for Endpoint data by using [Advanced hunting](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection). If you're using [audit mode](audit-windows-defender.md), you can use [advanced hunting](advanced-hunting-overview.md) to see how controlled folder access settings would affect your environment if they were enabled. Example query: From 5372f7c669a3b4de919b62e387111d50b8242ff1 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 15:46:11 -0800 Subject: [PATCH 181/958] Update controlled-folders.md --- .../microsoft-defender-atp/controlled-folders.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index e034c4b032..7919059f93 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -36,9 +36,11 @@ Controlled folder access works best with [Microsoft Defender for Endpoint](../mi Controlled folder access works by only allowing trusted apps to access protected folders. Protected folders are specified when controlled folder access is configured. Typically, commonly used folders, such as those used for documents, pictures, downloads, and so on, are included in the list of controlled folders. -Controlled folder access works with a list of trusted software. If an app is included in the list of trusted software, the app works as expected. If not, the app is blocked from making any changes to files that are inside protected folders. Apps are added to the trusted list based upon their prevalence and reputation. Apps that are highly prevalent throughout your organization, and that have never displayed any malicious behavior, are deemed trustworthy and automatically added to the list. +Controlled folder access works with a list of trusted apps. If an app is included in the list of trusted software, it works as expected. If not, the app is prevented from making any changes to files that are inside protected folders. -Apps can also be manually added to the trusted list via Configuration Manager and Intune. Additional actions, such as [adding a file indicator](../microsoft-defender-atp/respond-file-alerts.md#add-indicator-to-block-or-allow-a-file) for the app, can be performed from the Security Center Console. +Apps are added to the list based upon their prevalence and reputation. Apps that are highly prevalent throughout your organization and that have never displayed any behavior deemed malicious are considered trustworthy. Those apps are added to the list automatically. + +Apps can also be added manually to the trusted list by using Configuration Manager or Intune. Additional actions, such as [adding a file indicator](../microsoft-defender-atp/respond-file-alerts.md#add-indicator-to-block-or-allow-a-file) for an app, can be performed from the Security Center Console. ## Why controlled folder access is important @@ -48,7 +50,9 @@ The [protected folders](#review-controlled-folder-access-events-in-windows-event You can use [audit mode](audit-windows-defender.md) to evaluate how controlled folder access would impact your organization if it were enabled. You can also visit the Windows Defender Test ground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to confirm the feature is working and see how it works. -Controlled folder access is supported on Windows 10, version 1709 and later and Windows Server 2019. +Controlled folder access is supported on the following versions of Windows: +- [Windows 10, version 1709](https://docs.microsoft.com/windows/whats-new/whats-new-windows-10-version-1709) and later +- [Windows Server 2019](https://docs.microsoft.com/windows-server/get-started-19/whats-new-19) ## Windows system folders are protected by default From ec1510a6960ac6c68a40bd44553e72b61bb50a69 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 15:47:04 -0800 Subject: [PATCH 182/958] Update controlled-folders.md --- .../microsoft-defender-atp/controlled-folders.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index 7919059f93..27801e48ad 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -56,7 +56,7 @@ Controlled folder access is supported on the following versions of Windows: ## Windows system folders are protected by default -Your Windows system folders are protected by default, along with several other folders. These folders include: +Windows system folders are protected by default, along with several other folders: - `c:\Users\\Documents` - `c:\Users\Public\Documents` @@ -113,8 +113,6 @@ After following the procedure, you have created a custom view that shows events You can use the Windows Security app to view the list of folders that are protected by controlled folder access. -### View or change the list of protected folders using the Windows Security app - 1. On your Windows 10 device, open the Windows Security app. 2. Select **Virus & threat protection**. From 4d545467ba94a4463f74498184a84d778a7a184f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 15:50:20 -0800 Subject: [PATCH 183/958] Update controlled-folders.md --- .../microsoft-defender-atp/controlled-folders.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index 27801e48ad..80ec62a312 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -28,7 +28,7 @@ ms.custom: asr ## What is controlled folder access? -Controlled folder access helps you protect your valuable data from malicious apps and threats, like ransomware. Controlled folder access protects your data by checking apps against a list of known, trusted apps. Supported on Windows Server 2019 and Windows 10 clients, controlled folder access can be turned on using the Windows Security App or in Microsoft Endpoint Configuration Manager and Intune (for managed devices). +Controlled folder access helps protect your valuable data from malicious apps and threats, such as ransomware. Controlled folder access protects your data by checking apps against a list of known, trusted apps. Supported on Windows Server 2019 and Windows 10 clients, controlled folder access can be turned on using the Windows Security App, Microsoft Endpoint Configuration Manager, or Intune (for managed devices). Controlled folder access works best with [Microsoft Defender for Endpoint](../microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md), which gives you detailed reporting into controlled folder access events and blocks as part of the usual [alert investigation scenarios](../microsoft-defender-atp/investigate-alerts.md). @@ -101,7 +101,7 @@ You can review the Windows event log to see events that are created when control 5. Select **OK**. -After following the procedure, you have created a custom view that shows events related to controlled folder access, as listed in the following table: +The following table shows events related to controlled folder access: |Event ID | Description | |:---|:---| From 3b7c523096c9671083fd656ddcfc6da580cdb9ed Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 16:02:47 -0800 Subject: [PATCH 184/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 3456c7128e..a512161c89 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -80,9 +80,13 @@ Warn mode is not supported for the following attack surface reduction rules: In addition, warn mode is not supported on devices running older versions of Windows. In those cases, attack surface reduction rules that are configured to run in warn mode will run in block mode. -## Notifications when a rule is triggered +## Notifications and alerts -Whenever a rule is triggered, a notification will be displayed on the device. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. The notification also displays within the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and the Microsoft 365 security center ([https://security.microsoft.com](https://security.microsoft.com)). +Whenever an attack surface reduction rule is triggered, a notification will be displayed on the device. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. + +In addition, when certain attack surface reduction rules are triggered, alerts are generated. + +Notifications and any alerts that are generated can be viewed in the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and in the Microsoft 365 security center ([https://security.microsoft.com](https://security.microsoft.com)). ## Attack surface reduction features across Windows versions From e005e8860f8dbefc1b992e0861b6ccd5ddb9ea78 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 16:09:10 -0800 Subject: [PATCH 185/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index a512161c89..b1e863e72f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -82,7 +82,7 @@ In addition, warn mode is not supported on devices running older versions of Win ## Notifications and alerts -Whenever an attack surface reduction rule is triggered, a notification will be displayed on the device. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. +Whenever an attack surface reduction rule is triggered, a notification is displayed on the device. You can [customize the notification](customize-attack-surface-reduction.md#customize-the-notification) with your company details and contact information. In addition, when certain attack surface reduction rules are triggered, alerts are generated. From 3ddc1b52199709a15a64aa29c69dad5fd96138e7 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 10 Dec 2020 16:25:01 -0800 Subject: [PATCH 186/958] Update attack-surface-reduction.md --- .../microsoft-defender-atp/attack-surface-reduction.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index b1e863e72f..a0586d3024 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -88,6 +88,14 @@ In addition, when certain attack surface reduction rules are triggered, alerts a Notifications and any alerts that are generated can be viewed in the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and in the Microsoft 365 security center ([https://security.microsoft.com](https://security.microsoft.com)). +## Advanced hunting and attack surface reduction events + +You can use advanced hunting to view attack surface reduction events. To streamline the volume of incoming data, only unique processes for each hour are viewable with advanced hunting. The time of an attack surface reduction event is the first time that event is seen within the hour. + +For example, suppose that an attack surface reduction event occurs on ten devices during the 2:00 PM hour. Suppose that the first event occurred at 2:15, and the last at 2:45. With advanced hunting, you'll see one instance of that event (even though it actually occurred on ten devices), and its timestamp will be 2:15 PM. + +For more information about advanced hunting, see [Proactively hunt for threats with advanced hunting](advanced-hunting-overview.md). + ## Attack surface reduction features across Windows versions You can set attack surface reduction rules for devices running any of the following editions and versions of Windows: From 1ddf6337cb3bb2cc5385ecbd625d35c72b02229d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 10 Dec 2020 16:40:03 -0800 Subject: [PATCH 187/958] Added RemovableStrorage policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 32 + .../policy-configuration-service-provider.md | 101 + .../mdm/policy-csp-admx-removablestorage.md | 2328 +++++++++++++++++ 4 files changed, 2462 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-removablestorage.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 2a7a434c65..22dc4936a7 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -217,6 +217,7 @@ #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) +#### [ADMX_RemovableStorage](policy-csp-admx-removablestorage.md) #### [ADMX_RPC](policy-csp-admx-rpc.md) #### [ADMX_Scripts](policy-csp-admx-scripts.md) #### [ADMX_sdiageng](policy-csp-admx-sdiageng.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 40e0c3cfd3..850cba7f7b 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -445,6 +445,38 @@ ms.date: 10/08/2020 - [ADMX_Reliability/PCH_ReportShutdownEvents](./policy-csp-admx-reliability.md#admx-reliability-pch-reportshutdownevents) - [ADMX_Reliability/ShutdownEventTrackerStateFile](./policy-csp-admx-reliability.md#admx-reliability-shutdowneventtrackerstatefile) - [ADMX_Reliability/ShutdownReason](./policy-csp-admx-reliability.md#admx-reliability-shutdownreason) +- [ADMX_RemovableStorage/AccessRights_RebootTime_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-accessrights-reboottime-1) +- [ADMX_RemovableStorage/AccessRights_RebootTime_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-accessrights-reboottime-2) +- [ADMX_RemovableStorage/CDandDVD_DenyExecute_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denyexecute-access-2) +- [ADMX_RemovableStorage/CDandDVD_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denyread-access-1) +- [ADMX_RemovableStorage/CDandDVD_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denyread-access-2) +- [ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denywrite-access-1) +- [ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denywrite-access-2) +- [ADMX_RemovableStorage/CustomClasses_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-customclasses-denyread-access-1) +- [ADMX_RemovableStorage/CustomClasses_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-customclasses-denyread-access-2) +- [ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-customclasses-denywrite-access-1) +- [ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-customclasses-denywrite-access-2) +- [ADMX_RemovableStorage/FloppyDrives_DenyExecute_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-floppydrives-denyexecute-access-2) +- [ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-floppydrives-denyread-access-1) +- [ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-floppydrives-denyread-access-2) +- [ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-floppydrives-denywrite-access-1) +- [ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-floppydrives-denywrite-access-2) +- [ADMX_RemovableStorage/RemovableDisks_DenyExecute_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-removabledisks-denyexecute-access-2) +- [ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-removabledisks-denyread-access-1) +- [ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-removabledisks-denyread-access-2) +- [ADMX_RemovableStorage/RemovableDisks_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-removabledisks-denywrite-access-1) +- [ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-removablestorageclasses-denyall-access-1) +- [ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-removablestorageclasses-denyall-access-2) +- [ADMX_RemovableStorage/Removable_Remote_Allow_Access](./policy-csp-admx-removablestorage.md#admx-removablestorage-removable-remote-allow-access) +- [ADMX_RemovableStorage/TapeDrives_DenyExecute_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-tapedrives-denyexecute-access-2) +- [ADMX_RemovableStorage/TapeDrives_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-tapedrives-denyread-access-1) +- [ADMX_RemovableStorage/TapeDrives_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-tapedrives-denyread-access-2) +- [ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-tapedrives-denywrite-access-1) +- [ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-tapedrives-denywrite-access-2) +- [ADMX_RemovableStorage/WPDDevices_DenyRead_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-wpddevices-denyread-access-1) +- [ADMX_RemovableStorage/WPDDevices_DenyRead_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-wpddevices-denyread-access-2) +- [ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-wpddevices-denywrite-access-1) +- [ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-wpddevices-denywrite-access-2) - [ADMX_RPC/RpcExtendedErrorInformation](./policy-csp-admx-rpc.md#admx-rpc-rpcextendederrorinformation) - [ADMX_RPC/RpcIgnoreDelegationFailure](./policy-csp-admx-rpc.md#admx-rpc-rpcignoredelegationfailure) - [ADMX_RPC/RpcMinimumHttpConnectionTimeout](./policy-csp-admx-rpc.md#admx-rpc-rpcminimumhttpconnectiontimeout) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 5ea40c5c67..e446aa1591 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1649,6 +1649,107 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_RemovableStorage policies + +
    +
    + ADMX_RemovableStorage/AccessRights_RebootTime_1 +
    +
    + ADMX_RemovableStorage/AccessRights_RebootTime_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_2 +
    +
    + ADMX_RemovableStorage/Removable_Remote_Allow_Access +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_2 +
    +
    + ### ADMX_RPC policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-removablestorage.md b/windows/client-management/mdm/policy-csp-admx-removablestorage.md new file mode 100644 index 0000000000..eaa2b417ff --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-removablestorage.md @@ -0,0 +1,2328 @@ +--- +title: Policy CSP - ADMX_RemovableStorage +description: Policy CSP - ADMX_RemovableStorage +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/10/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_RemovableStorage +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_RemovableStorage policies + +
    +
    + ADMX_RemovableStorage/AccessRights_RebootTime_1 +
    +
    + ADMX_RemovableStorage/AccessRights_RebootTime_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/RemovableDisks_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_1 +
    +
    + ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_2 +
    +
    + ADMX_RemovableStorage/Removable_Remote_Allow_Access +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyExecute_Access_2 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_2 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyRead_Access_1 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyRead_Access_2 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1 +
    +
    + ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_2 +
    +
    + + +
    + + +**ADMX_RemovableStorage/AccessRights_RebootTime_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the amount of time (in seconds) that the operating system waits to reboot in order to enforce a change in access rights to removable storage devices. + +If you enable this policy setting, you can set the number of seconds you want the system to wait until a reboot. + +If you disable or do not configure this setting, the operating system does not force a reboot. + +> [!NOTE] +> If no reboot is forced, the access right does not take effect until the operating system is restarted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set time (in seconds) to force reboot* +- GP name: *AccessRights_RebootTime_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/AccessRights_RebootTime_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting configures the amount of time (in seconds) that the operating system waits to reboot in order to enforce a change in access rights to removable storage devices. + +If you enable this policy setting, you can set the number of seconds you want the system to wait until a reboot. + +If you disable or do not configure this setting, the operating system does not force a reboot + +> [!NOTE] +> If no reboot is forced, the access right does not take effect until the operating system is restarted. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Set time (in seconds) to force reboot* +- GP name: *AccessRights_RebootTime_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CDandDVD_DenyExecute_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies execute access to the CD and DVD removable storage class. + +If you enable this policy setting, execute access is denied to this removable storage class. + +If you disable or do not configure this policy setting, execute access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *CD and DVD: Deny execute access* +- GP name: *CDandDVD_DenyExecute_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CDandDVD_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the CD and DVD removable storage class. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *CD and DVD: Deny read access* +- GP name: *CDandDVD_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CDandDVD_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the CD and DVD removable storage class. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *CD and DVD: Deny read access* +- GP name: *CDandDVD_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the CD and DVD removable storage class. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *CD and DVD: Deny write access* +- GP name: *CDandDVD_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CDandDVD_DenyWrite_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the CD and DVD removable storage class. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *CD and DVD: Deny write access* +- GP name: *CDandDVD_DenyWrite_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CustomClasses_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to custom removable storage classes. + +If you enable this policy setting, read access is denied to these removable storage classes. + +If you disable or do not configure this policy setting, read access is allowed to these removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom Classes: Deny read access* +- GP name: *CustomClasses_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CustomClasses_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to custom removable storage classes. + +If you enable this policy setting, read access is denied to these removable storage classes. + +If you disable or do not configure this policy setting, read access is allowed to these removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom Classes: Deny read access* +- GP name: *CustomClasses_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + + +
    + + +**ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to custom removable storage classes. + +If you enable this policy setting, write access is denied to these removable storage classes. + +If you disable or do not configure this policy setting, write access is allowed to these removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom Classes: Deny write access* +- GP name: *CustomClasses_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/CustomClasses_DenyWrite_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to custom removable storage classes. + +If you enable this policy setting, write access is denied to these removable storage classes. + +If you disable or do not configure this policy setting, write access is allowed to these removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom Classes: Deny write access* +- GP name: *CustomClasses_DenyWrite_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/FloppyDrives_DenyExecute_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies execute access to the Floppy Drives removable storage class, including USB Floppy Drives. + +If you enable this policy setting, execute access is denied to this removable storage class. + +If you disable or do not configure this policy setting, execute access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Floppy Drives: Deny execute access* +- GP name: *FloppyDrives_DenyExecute_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Floppy Drives: Deny read access* +- GP name: *FloppyDrives_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/FloppyDrives_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Floppy Drives: Deny read access* +- GP name: *FloppyDrives_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Floppy Drives: Deny write access* +- GP name: *FloppyDrives_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/FloppyDrives_DenyWrite_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Floppy Drives: Deny write access* +- GP name: *FloppyDrives_DenyWrite_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableDisks_DenyExecute_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies execute access to removable disks. + +If you enable this policy setting, execute access is denied to this removable storage class. + +If you disable or do not configure this policy setting, execute access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Removable Disks: Deny execute access* +- GP name: *RemovableDisks_DenyExecute_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to removable disks. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Removable Disks: Deny read access* +- GP name: *RemovableDisks_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableDisks_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to removable disks. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Removable Disks: Deny read access* +- GP name: *RemovableDisks_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableDisks_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to removable disks. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + +> [!NOTE] +> To require that users write data to BitLocker-protected storage, enable the policy setting "Deny write access to drives not protected by BitLocker," which is located in "Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives." + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Removable Disks: Deny write access* +- GP name: *RemovableDisks_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Configure access to all removable storage classes. + +This policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class. + +If you enable this policy setting, no access is allowed to any removable storage class. + +If you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *All Removable Storage classes: Deny all access* +- GP name: *RemovableStorageClasses_DenyAll_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/RemovableStorageClasses_DenyAll_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Configure access to all removable storage classes. + +This policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class. + +If you enable this policy setting, no access is allowed to any removable storage class. + +If you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *All Removable Storage classes: Deny all access* +- GP name: *RemovableStorageClasses_DenyAll_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/Removable_Remote_Allow_Access** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting grants normal users direct access to removable storage devices in remote sessions. + +If you enable this policy setting, remote users can open direct handles to removable storage devices in remote sessions. + +If you disable or do not configure this policy setting, remote users cannot open direct handles to removable storage devices in remote sessions. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *All Removable Storage: Allow direct access in remote sessions* +- GP name: *Removable_Remote_Allow_Access* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/TapeDrives_DenyExecute_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies execute access to the Tape Drive removable storage class. + +If you enable this policy setting, execute access is denied to this removable storage class. + +If you disable or do not configure this policy setting, execute access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Tape Drives: Deny execute access* +- GP name: *TapeDrives_DenyExecute_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/TapeDrives_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the Tape Drive removable storage class. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Tape Drives: Deny read access* +- GP name: *TapeDrives_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/TapeDrives_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to the Tape Drive removable storage class. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Tape Drives: Deny read access* +- GP name: *TapeDrives_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the Tape Drive removable storage class. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Tape Drives: Deny write access* +- GP name: *TapeDrives_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/TapeDrives_DenyWrite_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to the Tape Drive removable storage class. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Tape Drives: Deny write access* +- GP name: *TapeDrives_DenyWrite_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/WPDDevices_DenyRead_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *WPD Devices: Deny read access* +- GP name: *WPDDevices_DenyRead_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/WPDDevices_DenyRead_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. + +If you enable this policy setting, read access is denied to this removable storage class. + +If you disable or do not configure this policy setting, read access is allowed to this removable storage class. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *WPD Devices: Deny read access* +- GP name: *WPDDevices_DenyRead_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *WPD Devices: Deny write access* +- GP name: *WPDDevices_DenyWrite_Access_1* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + + +**ADMX_RemovableStorage/WPDDevices_DenyWrite_Access_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. + +If you enable this policy setting, write access is denied to this removable storage class. + +If you disable or do not configure this policy setting, write access is allowed to this removable storage class. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *WPD Devices: Deny write access* +- GP name: *WPDDevices_DenyWrite_Access_2* +- GP path: *System\Removable Storage Access* +- GP ADMX file name: *RemovableStorage.admx* + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From e677c22cc87807790efe918f9bb0ad6d59748f39 Mon Sep 17 00:00:00 2001 From: Ikko Ashimine Date: Fri, 11 Dec 2020 22:55:55 +0900 Subject: [PATCH 188/958] Fix typo Micosoft -> Microsoft --- windows/client-management/mdm/get-product-package.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/get-product-package.md b/windows/client-management/mdm/get-product-package.md index 7f75857534..662580acde 100644 --- a/windows/client-management/mdm/get-product-package.md +++ b/windows/client-management/mdm/get-product-package.md @@ -1,6 +1,6 @@ --- title: Get product package -description: The Get product package operation retrieves the information about a specific application in the Micosoft Store for Business. +description: The Get product package operation retrieves the information about a specific application in the Microsoft Store for Business. ms.assetid: 4314C65E-6DDC-405C-A591-D66F799A341F ms.reviewer: manager: dansimp @@ -14,7 +14,7 @@ ms.date: 09/18/2017 # Get product package -The **Get product package** operation retrieves the information about a specific application in the Micosoft Store for Business. +The **Get product package** operation retrieves the information about a specific application in the Microsoft Store for Business. ## Request From 135f0882817e1737c676eca4d43864311033eb09 Mon Sep 17 00:00:00 2001 From: greg-lindsay Date: Fri, 11 Dec 2020 10:06:51 -0800 Subject: [PATCH 189/958] ltsc name fix --- windows/whats-new/ltsc/TOC.md | 6 +-- windows/whats-new/ltsc/index.md | 12 ++--- .../ltsc/whats-new-windows-10-2015.md | 14 +++--- .../ltsc/whats-new-windows-10-2016.md | 16 +++---- .../ltsc/whats-new-windows-10-2019.md | 48 +++++++++---------- 5 files changed, 48 insertions(+), 48 deletions(-) diff --git a/windows/whats-new/ltsc/TOC.md b/windows/whats-new/ltsc/TOC.md index e49aee21fc..a16525cda0 100644 --- a/windows/whats-new/ltsc/TOC.md +++ b/windows/whats-new/ltsc/TOC.md @@ -1,4 +1,4 @@ # [Windows 10 Enterprise LTSC](index.md) -## [What's new in Windows 10 Enterprise 2019 LTSC](whats-new-windows-10-2019.md) -## [What's new in Windows 10 Enterprise 2016 LTSC](whats-new-windows-10-2016.md) -## [What's new in Windows 10 Enterprise 2015 LTSC](whats-new-windows-10-2015.md) +## [What's new in Windows 10 Enterprise LTSC 2019](whats-new-windows-10-2019.md) +## [What's new in Windows 10 Enterprise LTSC 2016](whats-new-windows-10-2016.md) +## [What's new in Windows 10 Enterprise LTSC 2015](whats-new-windows-10-2015.md) diff --git a/windows/whats-new/ltsc/index.md b/windows/whats-new/ltsc/index.md index b1464088fc..09f32c39f4 100644 --- a/windows/whats-new/ltsc/index.md +++ b/windows/whats-new/ltsc/index.md @@ -22,9 +22,9 @@ ms.topic: article This topic provides links to articles with information about what's new in each release of Windows 10 Enterprise LTSC, and includes a short description of this servicing channel. -[What's New in Windows 10 Enterprise 2019 LTSC](whats-new-windows-10-2019.md)
    -[What's New in Windows 10 Enterprise 2016 LTSC](whats-new-windows-10-2016.md)
    -[What's New in Windows 10 Enterprise 2015 LTSC](whats-new-windows-10-2015.md) +[What's New in Windows 10 Enterprise LTSC 2019](whats-new-windows-10-2019.md)
    +[What's New in Windows 10 Enterprise LTSC 2016](whats-new-windows-10-2016.md)
    +[What's New in Windows 10 Enterprise LTSC 2015](whats-new-windows-10-2015.md) ## The Long Term Servicing Channel (LTSC) @@ -32,9 +32,9 @@ The following table summarizes equivalent feature update versions of Windows 10 | LTSC release | Equivalent SAC release | Availability date | | --- | --- | --- | -| Windows 10 Enterprise 2015 LTSC | Windows 10, Version 1507 | 7/29/2015 | -| Windows 10 Enterprise 2016 LTSC | Windows 10, Version 1607 | 8/2/2016 | -| Windows 10 Enterprise 2019 LTSC | Windows 10, Version 1809 | 11/13/2018 | +| Windows 10 Enterprise LTSC 2015 | Windows 10, Version 1507 | 7/29/2015 | +| Windows 10 Enterprise LTSC 2016 | Windows 10, Version 1607 | 8/2/2016 | +| Windows 10 Enterprise LTSC 2019 | Windows 10, Version 1809 | 11/13/2018 | >[!NOTE] >The Long Term Servicing Channel was previously called the Long Term Servicing Branch (LTSB). All references to LTSB are changed in this article to LTSC for consistency, even though the name of previous versions might still be displayed as LTSB. diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2015.md b/windows/whats-new/ltsc/whats-new-windows-10-2015.md index aace786788..0fb947167f 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2015.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2015.md @@ -1,10 +1,10 @@ --- -title: What's new in Windows 10 Enterprise 2015 LTSC +title: What's new in Windows 10 Enterprise LTSC 2015 ms.reviewer: manager: laurawi ms.author: greglin -description: New and updated IT Pro content about new features in Windows 10 Enterprise 2015 LTSC (also known as Windows 10 Enterprise 2015 LTSB). -keywords: ["What's new in Windows 10", "Windows 10", "Windows 10 Enterprise 2015 LTSC"] +description: New and updated IT Pro content about new features in Windows 10 Enterprise LTSC 2015 (also known as Windows 10 Enterprise 2015 LTSB). +keywords: ["What's new in Windows 10", "Windows 10", "Windows 10 Enterprise LTSC 2015"] ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library @@ -14,15 +14,15 @@ ms.localizationpriority: low ms.topic: article --- -# What's new in Windows 10 Enterprise 2015 LTSC +# What's new in Windows 10 Enterprise LTSC 2015 **Applies to** -- Windows 10 Enterprise 2015 LTSC +- Windows 10 Enterprise LTSC 2015 -This article lists new and updated features and content that are of interest to IT Pros for Windows 10 Enterprise 2015 LTSC (LTSB). For a brief description of the LTSC servicing channel, see [Windows 10 Enterprise LTSC](index.md). +This article lists new and updated features and content that are of interest to IT Pros for Windows 10 Enterprise LTSC 2015 (LTSB). For a brief description of the LTSC servicing channel, see [Windows 10 Enterprise LTSC](index.md). >[!NOTE] ->Features in Windows 10 Enterprise 2015 LTSC are equivalent to [Windows 10, version 1507](../whats-new-windows-10-version-1507-and-1511.md). +>Features in Windows 10 Enterprise LTSC 2015 are equivalent to [Windows 10, version 1507](../whats-new-windows-10-version-1507-and-1511.md). ## Deployment diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2016.md b/windows/whats-new/ltsc/whats-new-windows-10-2016.md index 63e15a057b..3b3891912c 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2016.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2016.md @@ -1,10 +1,10 @@ --- -title: What's new in Windows 10 Enterprise 2016 LTSC +title: What's new in Windows 10 Enterprise LTSC 2016 ms.reviewer: manager: laurawi ms.author: greglin -description: New and updated IT Pro content about new features in Windows 10 Enterprise 2016 LTSC (also known as Windows 10 Enterprise 2016 LTSB). -keywords: ["What's new in Windows 10", "Windows 10", "Windows 10 Enterprise 2016 LTSC"] +description: New and updated IT Pro content about new features in Windows 10 Enterprise LTSC 2016 (also known as Windows 10 Enterprise 2016 LTSB). +keywords: ["What's new in Windows 10", "Windows 10", "Windows 10 Enterprise LTSC 2016"] ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library @@ -14,15 +14,15 @@ ms.localizationpriority: low ms.topic: article --- -# What's new in Windows 10 Enterprise 2016 LTSC +# What's new in Windows 10 Enterprise LTSC 2016 **Applies to** -- Windows 10 Enterprise 2016 LTSC +- Windows 10 Enterprise LTSC 2016 -This article lists new and updated features and content that are of interest to IT Pros for Windows 10 Enterprise 2016 LTSC (LTSB), compared to Windows 10 Enterprise 2015 LTSC (LTSB). For a brief description of the LTSC servicing channel, see [Windows 10 Enterprise LTSC](index.md). +This article lists new and updated features and content that are of interest to IT Pros for Windows 10 Enterprise LTSC 2016 (LTSB), compared to Windows 10 Enterprise LTSC 2015 (LTSB). For a brief description of the LTSC servicing channel, see [Windows 10 Enterprise LTSC](index.md). >[!NOTE] ->Features in Windows 10 Enterprise 2016 LTSC are equivalent to Windows 10, version 1607. +>Features in Windows 10 Enterprise LTSC 2016 are equivalent to Windows 10, version 1607. ## Deployment @@ -71,7 +71,7 @@ Isolated User Mode is now included with Hyper-V so you don't have to install it When Windows 10 first shipped, it included Microsoft Passport and Windows Hello, which worked together to provide multi-factor authentication. To simplify deployment and improve supportability, Microsoft has combined these technologies into a single solution under the Windows Hello name in this version of Windows 10. Customers who have already deployed Microsoft Passport for Work will not experience any change in functionality. Customers who have yet to evaluate Windows Hello will find it easier to deploy due to simplified policies, documentation, and semantics. -Additional changes for Windows Hello in Windows 10 Enterprise 2016 LTSC: +Additional changes for Windows Hello in Windows 10 Enterprise LTSC 2016: - Personal (Microsoft account) and corporate (Active Directory or Azure AD) accounts use a single container for keys. - Group Policy settings for managing Windows Hello for Business are now available for both **User Configuration** and **Computer Configuration**. diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index cee461354f..d04340e9a9 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -1,10 +1,10 @@ --- -title: What's new in Windows 10 Enterprise 2019 LTSC +title: What's new in Windows 10 Enterprise LTSC 2019 ms.reviewer: manager: laurawi ms.author: greglin -description: New and updated IT Pro content about new features in Windows 10 Enterprise 2019 LTSC (also known as Windows 10 Enterprise 2019 LTSB). -keywords: ["What's new in Windows 10", "Windows 10", "Windows 10 Enterprise 2019 LTSC"] +description: New and updated IT Pro content about new features in Windows 10 Enterprise LTSC 2019 (also known as Windows 10 Enterprise 2019 LTSB). +keywords: ["What's new in Windows 10", "Windows 10", "Windows 10 Enterprise LTSC 2019"] ms.prod: w10 ms.mktglfcycl: deploy ms.sitesec: library @@ -13,15 +13,15 @@ ms.localizationpriority: low ms.topic: article --- -# What's new in Windows 10 Enterprise 2019 LTSC +# What's new in Windows 10 Enterprise LTSC 2019 **Applies to** -- Windows 10 Enterprise 2019 LTSC +- Windows 10 Enterprise LTSC 2019 -This article lists new and updated features and content that are of interest to IT Pros for Windows 10 Enterprise 2019 LTSC, compared to Windows 10 Enterprise 2016 LTSC (LTSB). For a brief description of the LTSC servicing channel and associated support, see [Windows 10 Enterprise LTSC](index.md). +This article lists new and updated features and content that are of interest to IT Pros for Windows 10 Enterprise LTSC 2019, compared to Windows 10 Enterprise LTSC 2015 (LTSB). For a brief description of the LTSC servicing channel and associated support, see [Windows 10 Enterprise LTSC](index.md). >[!NOTE] ->Features in Windows 10 Enterprise 2019 LTSC are equivalent to Windows 10, version 1809. +>Features in Windows 10 Enterprise LTSC 2019 are equivalent to Windows 10, version 1809. Windows 10 Enterprise LTSC 2019 builds on Windows 10 Pro, version 1809 adding premium features designed to address the needs of large and mid-size organizations (including large academic institutions), such as: - Advanced protection against modern security threats @@ -85,7 +85,7 @@ Endpoint detection and response is improved. Enterprise customers can now take a Some of the highlights of the new library include [Evaluation guide for Microsoft Defender AV](/windows/threat-protection/microsoft-defender-antivirus//evaluate-microsoft-defender-antivirus) and [Deployment guide for Microsoft Defender AV in a virtual desktop infrastructure environment](/windows/threat-protection/microsoft-defender-antivirus/deployment-vdi-microsoft-defender-antivirus). - New features for Microsoft Defender AV in Windows 10 Enterprise 2019 LTSC include: + New features for Microsoft Defender AV in Windows 10 Enterprise LTSC 2019 include: - [Updates to how the Block at First Sight feature can be configured](/windows/threat-protection/microsoft-defender-antivirus/configure-block-at-first-sight-microsoft-defender-antivirus) - [The ability to specify the level of cloud-protection](/windows/threat-protection/microsoft-defender-antivirus/specify-cloud-protection-level-microsoft-defender-antivirus) - [Microsoft Defender Antivirus protection in the Windows Defender Security Center app](/windows/threat-protection/microsoft-defender-antivirus/windows-defender-security-center-antivirus) @@ -239,7 +239,7 @@ WSC now includes the Fluent Design System elements you know and love. You’ll a The security setting [**Interactive logon: Display user information when the session is locked**](/windows/device-security/security-policy-settings/interactive-logon-display-user-information-when-the-session-is-locked) has been updated to work in conjunction with the **Privacy** setting in **Settings** > **Accounts** > **Sign-in options**. A new security policy setting -[**Interactive logon: Don't display username at sign-in**](/windows/device-security/security-policy-settings/interactive-logon-dont-display-username-at-sign-in) has been introduced in Windows 10 Enterprise 2019 LTSC. This security policy setting determines whether the username is displayed during sign in. It works in conjunction with the **Privacy** setting in **Settings** > **Accounts** > **Sign-in options**. The setting only affects the **Other user** tile. +[**Interactive logon: Don't display username at sign-in**](/windows/device-security/security-policy-settings/interactive-logon-dont-display-username-at-sign-in) has been introduced in Windows 10 Enterprise LTSC 2019. This security policy setting determines whether the username is displayed during sign in. It works in conjunction with the **Privacy** setting in **Settings** > **Accounts** > **Sign-in options**. The setting only affects the **Other user** tile. #### Windows 10 in S mode @@ -251,7 +251,7 @@ We’ve continued to work on the **Current threats** area in [Virus & threat pr ### Windows Autopilot -[Windows Autopilot](https://docs.microsoft.com/windows/deployment/windows-autopilot/windows-autopilot) is a deployment tool introduced with Windows 10, version 1709 and is also available for Windows 10 Enterprise 2019 LTSC (and later versions). Windows Autopilot provides a modern device lifecycle management service powered by the cloud to deliver a zero touch experience for deploying Windows 10. +[Windows Autopilot](https://docs.microsoft.com/windows/deployment/windows-autopilot/windows-autopilot) is a deployment tool introduced with Windows 10, version 1709 and is also available for Windows 10 Enterprise LTSC 2019 (and later versions). Windows Autopilot provides a modern device lifecycle management service powered by the cloud to deliver a zero touch experience for deploying Windows 10. Windows Autopilot is currently available with Surface, Dell, HP, and Lenovo. Other OEM partners such as Panasonic, and Acer will support Autopilot soon. Check the [Windows IT Pro Blog](https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog) or this article for updated information. @@ -265,7 +265,7 @@ IT Pros can use Autopilot Reset to quickly remove personal files, apps, and sett ### MBR2GPT.EXE -MBR2GPT.EXE is a new command-line tool introduced with Windows 10, version 1703 and also available in Windows 10 Enterprise 2019 LTSC (and later versions). MBR2GPT converts a disk from Master Boot Record (MBR) to GUID Partition Table (GPT) partition style without modifying or deleting data on the disk. The tool is designed to be run from a Windows Preinstallation Environment (Windows PE) command prompt, but can also be run from the full Windows 10 operating system (OS). +MBR2GPT.EXE is a new command-line tool introduced with Windows 10, version 1703 and also available in Windows 10 Enterprise LTSC 2019 (and later versions). MBR2GPT converts a disk from Master Boot Record (MBR) to GUID Partition Table (GPT) partition style without modifying or deleting data on the disk. The tool is designed to be run from a Windows Preinstallation Environment (Windows PE) command prompt, but can also be run from the full Windows 10 operating system (OS). The GPT partition format is newer and enables the use of larger and more disk partitions. It also provides added data reliability, supports additional partition types, and enables faster boot and shutdown speeds. If you convert the system disk on a computer from MBR to GPT, you must also configure the computer to boot in UEFI mode, so make sure that your device supports UEFI before attempting to convert the system disk. @@ -293,7 +293,7 @@ For more information, see [DISM operating system uninstall command-line options] You can now run your own custom actions or scripts in parallel with Windows Setup. Setup will also migrate your scripts to next feature release, so you only need to add them once. Prerequisites: -- Windows 10, version 1803 or Windows 10 Enterprise 2019 LTSC, or later. +- Windows 10, version 1803 or Windows 10 Enterprise LTSC 2019, or later. - Windows 10 Enterprise or Pro For more information, see [Run custom actions during feature update](https://docs.microsoft.com/windows-hardware/manufacture/desktop/windows-setup-enable-custom-actions). @@ -332,7 +332,7 @@ SetupDiag works by searching Windows Setup log files. When searching log files, If you have shared devices deployed in your work place, **Fast sign-in** enables users to sign in to a [shared Windows 10 PC](https://docs.microsoft.com/windows/configuration/set-up-shared-or-guest-pc) in a flash! **To enable fast sign-in:** -1. Set up a shared or guest device with Windows 10, version 1809 or Windows 10 Enterprise 2019 LTSC. +1. Set up a shared or guest device with Windows 10, version 1809 or Windows 10 Enterprise LTSC 2019. 2. Set the Policy CSP, and the **Authentication** and **EnableFastFirstSignIn** policies to enable fast sign-in. 3. Sign-in to a shared PC with your account. You'll notice the difference! @@ -428,7 +428,7 @@ The following new Group Policy and mobile device management (MDM) settings are a ### Start and taskbar layout -Previously, the customized taskbar could only be deployed using Group Policy or provisioning packages. Windows 10 Enterprise 2019 LTSC adds support for customized taskbars to [MDM](/windows/configuration/customize-windows-10-start-screens-by-using-mobile-device-management). +Previously, the customized taskbar could only be deployed using Group Policy or provisioning packages. Windows 10 Enterprise LTSC 2019 adds support for customized taskbars to [MDM](/windows/configuration/customize-windows-10-start-screens-by-using-mobile-device-management). [Additional MDM policy settings are available for Start and taskbar layout](/windows/configuration/windows-10-start-layout-options-and-policies). New MDM policy settings include: @@ -467,7 +467,7 @@ You can now register your Azure AD domains to the Windows Insider Program. For m ### Optimize update delivery -With changes delivered in Windows 10 Enterprise 2019 LTSC, [Express updates](/windows/deployment/update/waas-optimize-windows-10-updates#express-update-delivery) are now fully supported with Microsoft Endpoint Configuration Manager, starting with version 1702 of Configuration Manager, as well as with other third-party updating and management products that [implement this new functionality](https://technet.microsoft.com/windows-server-docs/management/windows-server-update-services/deploy/express-update-delivery-isv-support). This is in addition to current Express support on Windows Update, Windows Update for Business and WSUS. +With changes delivered in Windows 10 Enterprise LTSC 2019, [Express updates](/windows/deployment/update/waas-optimize-windows-10-updates#express-update-delivery) are now fully supported with Microsoft Endpoint Configuration Manager, starting with version 1702 of Configuration Manager, as well as with other third-party updating and management products that [implement this new functionality](https://technet.microsoft.com/windows-server-docs/management/windows-server-update-services/deploy/express-update-delivery-isv-support). This is in addition to current Express support on Windows Update, Windows Update for Business and WSUS. >[!NOTE] > The above changes can be made available to Windows 10, version 1607, by installing the April 2017 cumulative update. @@ -485,15 +485,15 @@ To check out all the details, see [Configure Delivery Optimization for Windows 1 ### Uninstalled in-box apps no longer automatically reinstall -Starting with Windows 10 Enterprise 2019 LTSC, in-box apps that were uninstalled by the user won't automatically reinstall as part of the feature update installation process. +Starting with Windows 10 Enterprise LTSC 2019, in-box apps that were uninstalled by the user won't automatically reinstall as part of the feature update installation process. -Additionally, apps de-provisioned by admins on Windows 10 Enterprise 2019 LTSC machines will stay de-provisioned after future feature update installations. This will not apply to the update from Windows 10 Enterprise 2016 LTSC (or earlier) to Windows 10 Enterprise 2019 LTSC. +Additionally, apps de-provisioned by admins on Windows 10 Enterprise LTSC 2019 machines will stay de-provisioned after future feature update installations. This will not apply to the update from Windows 10 Enterprise LTSC 2015 (or earlier) to Windows 10 Enterprise LTSC 2019. ## Management ### New MDM capabilities -Windows 10 Enterprise 2019 LTSC adds many new [configuration service providers (CSPs)](/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers) that provide new capabilities for managing Windows 10 devices using MDM or provisioning packages. Among other things, these CSPs enable you to configure a few hundred of the most useful Group Policy settings via MDM - see [Policy CSP - ADMX-backed policies](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-admx-backed). +Windows 10 Enterprise LTSC 2019 adds many new [configuration service providers (CSPs)](/windows/configuration/provisioning-packages/how-it-pros-can-use-configuration-service-providers) that provide new capabilities for managing Windows 10 devices using MDM or provisioning packages. Among other things, these CSPs enable you to configure a few hundred of the most useful Group Policy settings via MDM - see [Policy CSP - ADMX-backed policies](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/policy-admx-backed). Some of the other new CSPs are: @@ -519,17 +519,17 @@ Multiple new configuration items are also added. For more information, see [What ### Mobile application management support for Windows 10 -The Windows version of mobile application management (MAM) is a lightweight solution for managing company data access and security on personal devices. MAM support is built into Windows on top of Windows Information Protection (WIP), starting in Windows 10 Enterprise 2019 LTSC. +The Windows version of mobile application management (MAM) is a lightweight solution for managing company data access and security on personal devices. MAM support is built into Windows on top of Windows Information Protection (WIP), starting in Windows 10 Enterprise LTSC 2019. For more info, see [Implement server-side support for mobile application management on Windows](https://msdn.microsoft.com/windows/hardware/commercialize/customize/mdm/implement-server-side-mobile-application-management). ### MDM diagnostics -In Windows 10 Enterprise 2019 LTSC, we continue our work to improve the diagnostic experience for modern management. By introducing auto-logging for mobile devices, Windows will automatically collect logs when encountering an error in MDM, eliminating the need to have always-on logging for memory-constrained devices. Additionally, we are introducing [Microsoft Message Analyzer](https://www.microsoft.com/download/details.aspx?id=44226) as an additional tool to help Support personnel quickly reduce issues to their root cause, while saving time and cost. +In Windows 10 Enterprise LTSC 2019, we continue our work to improve the diagnostic experience for modern management. By introducing auto-logging for mobile devices, Windows will automatically collect logs when encountering an error in MDM, eliminating the need to have always-on logging for memory-constrained devices. Additionally, we are introducing [Microsoft Message Analyzer](https://www.microsoft.com/download/details.aspx?id=44226) as an additional tool to help Support personnel quickly reduce issues to their root cause, while saving time and cost. ### Application Virtualization for Windows (App-V) -Previous versions of the Microsoft Application Virtualization Sequencer (App-V Sequencer) have required you to manually create your sequencing environment. Windows 10 Enterprise 2019 LTSC introduces two new PowerShell cmdlets, New-AppVSequencerVM and Connect-AppvSequencerVM, which automatically create your sequencing environment for you, including provisioning your virtual machine. Additionally, the App-V Sequencer has been updated to let you sequence or update multiple apps at the same time, while automatically capturing and storing your customizations as an App-V project template (.appvt) file, and letting you use PowerShell or Group Policy settings to automatically cleanup your unpublished packages after a device restart. +Previous versions of the Microsoft Application Virtualization Sequencer (App-V Sequencer) have required you to manually create your sequencing environment. Windows 10 Enterprise LTSC 2019 introduces two new PowerShell cmdlets, New-AppVSequencerVM and Connect-AppvSequencerVM, which automatically create your sequencing environment for you, including provisioning your virtual machine. Additionally, the App-V Sequencer has been updated to let you sequence or update multiple apps at the same time, while automatically capturing and storing your customizations as an App-V project template (.appvt) file, and letting you use PowerShell or Group Policy settings to automatically cleanup your unpublished packages after a device restart. For more info, see the following topics: - [Automatically provision your sequencing environment using Microsoft Application Virtualization Sequencer (App-V Sequencer)](/windows/application-management/app-v/appv-auto-provision-a-vm) @@ -546,7 +546,7 @@ Learn more about the diagnostic data that's collected at the Basic level and som ### Group Policy spreadsheet -Learn about the new Group Policies that were added in Windows 10 Enterprise 2019 LTSC. +Learn about the new Group Policies that were added in Windows 10 Enterprise LTSC 2019. - [Group Policy Settings Reference for Windows and Windows Server](https://www.microsoft.com/download/details.aspx?id=25250) @@ -579,9 +579,9 @@ Miracast over Infrastructure offers a number of benefits: Enabling Miracast over Infrastructure: -If you have a device that has been updated to Windows 10 Enterprise 2019 LTSC, then you automatically have this new feature. To take advantage of it in your environment, you need to ensure the following is true within your deployment: +If you have a device that has been updated to Windows 10 Enterprise LTSC 2019, then you automatically have this new feature. To take advantage of it in your environment, you need to ensure the following is true within your deployment: -- The device (PC, phone, or Surface Hub) needs to be running Windows 10, version 1703, Windows 10 Enterprise 2019 LTSC, or a later OS. +- The device (PC, phone, or Surface Hub) needs to be running Windows 10, version 1703, Windows 10 Enterprise LTSC 2019, or a later OS. - A Windows PC or Surface Hub can act as a Miracast over Infrastructure *receiver*. A Windows PC or phone can act as a Miracast over Infrastructure *source*. - As a Miracast receiver, the PC or Surface Hub must be connected to your enterprise network via either Ethernet or a secure Wi-Fi connection (e.g. using either WPA2-PSK or WPA2-Enterprise security). If the Hub is connected to an open Wi-Fi connection, Miracast over Infrastructure will disable itself. - As a Miracast source, the PC or phone must be connected to the same enterprise network via Ethernet or a secure Wi-Fi connection. From d8be4c67adca40545b40b280aa796b71ba879b85 Mon Sep 17 00:00:00 2001 From: greg-lindsay Date: Fri, 11 Dec 2020 10:10:58 -0800 Subject: [PATCH 190/958] correction --- windows/whats-new/ltsc/whats-new-windows-10-2019.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index d04340e9a9..abfe43e940 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -18,7 +18,7 @@ ms.topic: article **Applies to** - Windows 10 Enterprise LTSC 2019 -This article lists new and updated features and content that are of interest to IT Pros for Windows 10 Enterprise LTSC 2019, compared to Windows 10 Enterprise LTSC 2015 (LTSB). For a brief description of the LTSC servicing channel and associated support, see [Windows 10 Enterprise LTSC](index.md). +This article lists new and updated features and content that are of interest to IT Pros for Windows 10 Enterprise LTSC 2019, compared to Windows 10 Enterprise LTSC 2016 (LTSB). For a brief description of the LTSC servicing channel and associated support, see [Windows 10 Enterprise LTSC](index.md). >[!NOTE] >Features in Windows 10 Enterprise LTSC 2019 are equivalent to Windows 10, version 1809. @@ -487,7 +487,7 @@ To check out all the details, see [Configure Delivery Optimization for Windows 1 Starting with Windows 10 Enterprise LTSC 2019, in-box apps that were uninstalled by the user won't automatically reinstall as part of the feature update installation process. -Additionally, apps de-provisioned by admins on Windows 10 Enterprise LTSC 2019 machines will stay de-provisioned after future feature update installations. This will not apply to the update from Windows 10 Enterprise LTSC 2015 (or earlier) to Windows 10 Enterprise LTSC 2019. +Additionally, apps de-provisioned by admins on Windows 10 Enterprise LTSC 2019 machines will stay de-provisioned after future feature update installations. This will not apply to the update from Windows 10 Enterprise LTSC 2016 (or earlier) to Windows 10 Enterprise LTSC 2019. ## Management From 90051194a0f8d1763be12f77330764e0bae17242 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 11 Dec 2020 14:09:39 -0800 Subject: [PATCH 191/958] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 355486f404..72c13de8f4 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -13,7 +13,7 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: manager: dansimp -ms.date: 12/08/2020 +ms.date: 12/11/2020 --- # Microsoft Defender Antivirus compatibility @@ -78,7 +78,7 @@ The following table summarizes the functionality and features that are available - In Active mode, Microsoft Defender Antivirus is used as the antivirus app on the machine. All configuration made with Configuration Manager, Group Policy, Intune, or other management products will apply. Files are scanned and threats remediated, and detection information are reported in your configuration tool (such as Configuration Manager or the Microsoft Defender Antivirus app on the machine itself). - In Passive mode, Microsoft Defender Antivirus is not used as the antivirus app, and threats are not remediated by Microsoft Defender Antivirus. Files are scanned and reports are provided for threat detections that are shared with the Microsoft Defender for Endpoint service. Therefore, you might encounter alerts in the Security Center console with Microsoft Defender Antivirus as a source, even when Microsoft Defender Antivirus is in Passive mode. -- When [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) is turned on, Microsoft Defender Antivirus is not used as the primary antivirus solution, but can still detect and remediate malicious items. +- When [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) is turned on and Microsoft Defender Antivirus is not used as the primary antivirus solution, it can still detect and remediate malicious items. - When disabled, Microsoft Defender Antivirus is not used as the antivirus app. Files are not scanned and threats are not remediated. ## Keep the following points in mind From 063e30cc429762a1d3828a623882e408cd1ff469 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 11 Dec 2020 14:19:20 -0800 Subject: [PATCH 192/958] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 72c13de8f4..bb9e88a2d6 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -104,4 +104,4 @@ If you uninstall the other product, and choose to use Microsoft Defender Antivir - [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) - [Configure Endpoint Protection](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection-configure) - [Configure Endpoint Protection on a standalone client](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection-configure-standalone-client) -- [Learn about Microsoft 365 Endpoint data loss prevention](https://docs.microsoft.com/microsoft-365/compliance/endpoint-dlp-learn-about?view=o365-worldwide) +- [Learn about Microsoft 365 Endpoint data loss prevention](https://docs.microsoft.com/microsoft-365/compliance/endpoint-dlp-learn-about) From 95f1084e6f521b245cb378ed09cadfbc05aadc24 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 14 Dec 2020 18:20:45 +0500 Subject: [PATCH 193/958] Link update As suggested I have updated the correct link. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/7896 --- .../microsoft-defender-atp/basic-permissions.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md index fed2ad3911..af97cb1355 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md @@ -47,7 +47,7 @@ You can assign users with one of the following levels of permissions: > [!NOTE] > You need to run the PowerShell cmdlets in an elevated command-line. -- Connect to your Azure Active Directory. For more information, see, [Connect-MsolService](https://msdn.microsoft.com/library/dn194123.aspx). +- Connect to your Azure Active Directory. For more information, see, [Connect-MsolService](https://docs.microsoft.com/powershell/module/msonline/connect-msolservice?view=azureadps-1.0). **Full access**
    Users with full access can log in, view all system information and resolve alerts, submit files for deep analysis, and download the onboarding package. From d8ee7f5e43c8023078e163c1a0df8b4fd7444973 Mon Sep 17 00:00:00 2001 From: Crimsonfox89 <40465227+Crimsonfox89@users.noreply.github.com> Date: Mon, 14 Dec 2020 14:36:40 +0000 Subject: [PATCH 194/958] Update related topic links to docs.microsoft.com links Updated related topic "TPM WMI providers" and "Prepare your organization for BitLocker: Planning and Policies - TPM configurations" links from MSDN/Technet links to Microsoft Docs. --- .../security/information-protection/tpm/tpm-fundamentals.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/tpm/tpm-fundamentals.md b/windows/security/information-protection/tpm/tpm-fundamentals.md index e2ae8c85e5..93210372ea 100644 --- a/windows/security/information-protection/tpm/tpm-fundamentals.md +++ b/windows/security/information-protection/tpm/tpm-fundamentals.md @@ -151,5 +151,5 @@ The Windows TPM-based smart card, which is a virtual smart card, can be configur - [Trusted Platform Module](trusted-platform-module-top-node.md) (list of topics) - [TPM Cmdlets in Windows PowerShell](https://docs.microsoft.com/powershell/module/trustedplatformmodule/) -- [TPM WMI providers](https://msdn.microsoft.com/library/aa376476.aspx) -- [Prepare your organization for BitLocker: Planning and Policies - TPM configurations](https://technet.microsoft.com/itpro/windows/keep-secure/prepare-your-organization-for-bitlocker-planning-and-policies#bkmk-tpmconfigurations) +- [TPM WMI providers](https://docs.microsoft.com/en-gb/windows/win32/secprov/security-wmi-providers-reference) +- [Prepare your organization for BitLocker: Planning and Policies - TPM configurations](https://docs.microsoft.com/en-gb/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies#tpm-hardware-configurations) From b05d1d1cd24d7b3d4772f0a4ce93a11a157c1694 Mon Sep 17 00:00:00 2001 From: Ben Date: Mon, 14 Dec 2020 18:18:12 +0200 Subject: [PATCH 195/958] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 0372ef6ab9..68186e67eb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -43,7 +43,7 @@ EDR in block mode is also integrated with [threat & vulnerability management](ht ## What happens when something is detected? -When EDR in block mode is turned on, and a malicious artifact is detected, blocking and remediation actions are taken. You'll see detection status as **Blocked** or **Remediated** as completed actions in the [Action center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#check-activity-details-in-action-center). +When EDR in block mode is turned on, and a malicious artifact is detected, blocking and remediation actions are taken. You'll see detection status as **Blocked** or **Prevented** as completed actions in the [Action center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#check-activity-details-in-action-center). The following image shows an instance of unwanted software that was detected and blocked through EDR in block mode: From fda3bc6f9afe2918232d30af06b75cdbf4acde62 Mon Sep 17 00:00:00 2001 From: Ben Date: Mon, 14 Dec 2020 18:20:13 +0200 Subject: [PATCH 196/958] Update review-alerts.md --- .../threat-protection/microsoft-defender-atp/review-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index 28ce3b1696..d32c73580f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -46,7 +46,7 @@ Clicking on an alert's name in Defender for Endpoint will land you on its alert ![An alert page when you first land on it](images/alert-landing-view.png) -Note the detection status for your alert. Blocked, prevented, or remediated means actions were already taken by Defender for Endpoint. +Note the detection status for your alert. Blocked, or prevented means actions were already taken by Defender for Endpoint. Start by reviewing the *automated investigation details* in your alert's [details pane](#take-action-from-the-details-pane), to see which actions were already taken, as well as reading the alert's description for recommended actions. ![A snippet of the details pane with the alert description and automatic investigation sections highlighted](images/alert-air-and-alert-description.png) From 65c0aa67f3ae30afdbd21ca091c5cb97d46dc911 Mon Sep 17 00:00:00 2001 From: Ben Date: Mon, 14 Dec 2020 18:25:16 +0200 Subject: [PATCH 197/958] Update get-started-partner-integration.md --- .../get-started-partner-integration.md | 14 +++++--------- 1 file changed, 5 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-started-partner-integration.md b/windows/security/threat-protection/microsoft-defender-atp/get-started-partner-integration.md index 143d90bb1d..f0151a49db 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-started-partner-integration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-started-partner-integration.md @@ -52,16 +52,12 @@ To have your company listed as a partner in the in-product partner page, you wil 6. Include the User-Agent field in each API call made to Microsoft Defender for Endpoint public set of APIs or Graph Security APIs. This will be used for statistical purposes, troubleshooting, and partner recognition. In addition, this step is a requirement for membership in Microsoft Intelligent Security Association (MISA). Follow these steps: - 1. Identify a name adhering to the following nomenclature that includes your company name and the Microsoft Defender for Endpoint-integrated product with the version of the product that includes this integration. - - ISV Nomenclature: `MdatpPartner-{CompanyName}-{ProductName}/{Version}` - - Security partner Nomenclature: `MdatpPartner-{CompanyName}-{ProductName}/{TenantID}` - - - - Set the User-Agent field in each HTTP request header to the name based on the Following nomenclature. - - - `MsdePartner-{CompanyName}-{ProductName}/{Version}` - - For example, User-Agent: `MdatpPartner-Contoso-ContosoCognito/1.0.0` + - Set the User-Agent field in each HTTP request header to the below format. + + - `MdePartner-{CompanyName}-{ProductName}/{Version}` + + - For example, User-Agent: `MdePartner-Contoso-ContosoCognito/1.0.0` - For more information, see [RFC 2616 section-14.43](https://tools.ietf.org/html/rfc2616#section-14.43). From 6c4c19be6022ac27f32d2a140e05eae27b6ce54d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 14 Dec 2020 08:49:04 -0800 Subject: [PATCH 198/958] Update edr-in-block-mode.md --- .../microsoft-defender-atp/edr-in-block-mode.md | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md index 68186e67eb..f519113f0c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md +++ b/windows/security/threat-protection/microsoft-defender-atp/edr-in-block-mode.md @@ -15,7 +15,7 @@ ms.localizationpriority: medium ms.custom: - next-gen - edr -ms.date: 12/10/2020 +ms.date: 12/14/2020 ms.collection: - m365-security-compliance - m365initiative-defender-endpoint @@ -83,11 +83,11 @@ The following image shows an instance of unwanted software that was detected and ### Do I need to turn EDR in block mode on even when I have Microsoft Defender Antivirus running on devices? -We recommend keeping EDR in block mode on, whether Microsoft Defender Antivirus is running in passive mode or in active mode. EDR in block mode gives you an added layer of defense with Microsoft Defender for Endpoint. It allows Microsoft Defender for Endpoint to take actions based on post-breach behavioral EDR detections. +We recommend keeping EDR in block mode on, whether Microsoft Defender Antivirus is running in passive mode or in active mode. EDR in block mode gives you an added layer of defense with Microsoft Defender for Endpoint. It allows Defender for Endpoint to take actions based on post-breach behavioral EDR detections. ### Will EDR in block mode have any impact on a user's antivirus protection? -No. EDR in block mode does not affect third-party antivirus protection running on users' devices. EDR in block mode kicks in if the primary antivirus solution misses something, or if there is a post-breach detection. EDR in block mode works just like [Microsoft Defender Antivirus in passive mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility#functionality-and-features-available-in-each-state), with the additional steps of blocking and remediating malicious artifacts or behaviors that are detected. +EDR in block mode does not affect third-party antivirus protection running on users' devices. EDR in block mode works if the primary antivirus solution misses something, or if there is a post-breach detection. EDR in block mode works just like [Microsoft Defender Antivirus in passive mode](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility#functionality-and-features-available-in-each-state), with the additional steps of blocking and remediating malicious artifacts or behaviors that are detected. ### Why do I need to keep Microsoft Defender Antivirus up to date? @@ -99,9 +99,7 @@ Cloud protection is needed to turn on the feature on the device. Cloud protectio ## See also -[Tech Community blog: Introducing EDR in block mode: Stopping attacks in their tracks](https://techcommunity.microsoft.com/t5/microsoft-defender-atp/introducing-edr-in-block-mode-stopping-attacks-in-their-tracks/ba-p/1596617) - -[Behavioral blocking and containment](behavioral-blocking-containment.md) - -[Better together: Microsoft Defender Antivirus and Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/why-use-microsoft-antivirus) +- [Tech Community blog: Introducing EDR in block mode: Stopping attacks in their tracks](https://techcommunity.microsoft.com/t5/microsoft-defender-atp/introducing-edr-in-block-mode-stopping-attacks-in-their-tracks/ba-p/1596617) +- [Behavioral blocking and containment](behavioral-blocking-containment.md) +- [Better together: Microsoft Defender Antivirus and Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/why-use-microsoft-antivirus) From 7855a7fa32f450dcd3a25e30421f687b6b3cd9b5 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 14 Dec 2020 11:23:43 -0800 Subject: [PATCH 199/958] Corrected misspelled filename --- windows/client-management/mdm/TOC.md | 2 +- .../mdm/policies-in-policy-csp-admx-backed.md | 16 ++++++++-------- .../mdm/policy-configuration-service-provider.md | 16 ++++++++-------- ....md => policy-csp-admx-deviceinstallation.md} | 0 4 files changed, 17 insertions(+), 17 deletions(-) rename windows/client-management/mdm/{policy-csp-admx-devicenstallation.md => policy-csp-admx-deviceinstallation.md} (100%) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index eb36dff859..d5168b9828 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -191,7 +191,7 @@ #### [ADMX_CtrlAltDel](policy-csp-admx-ctrlaltdel.md) #### [ADMX_DataCollection](policy-csp-admx-datacollection.md) #### [ADMX_Desktop](policy-csp-admx-desktop.md) -#### [ADMX_DeviceInstallation](policy-csp-admx-devicenstallation.md) +#### [ADMX_DeviceInstallation](policy-csp-admx-deviceinstallation.md) #### [ADMX_DeviceSetup](policy-csp-admx-devicesetup.md) #### [ADMX_DigitalLocker](policy-csp-admx-digitallocker.md) #### [ADMX_DnsClient](policy-csp-admx-dnsclient.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 309fb143c2..8771145e8a 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -150,14 +150,14 @@ ms.date: 10/08/2020 - [ADMX_Desktop/sz_DB_DragDropClose](./policy-csp-admx-desktop.md#admx-desktop-sz-db-dragdropclose) - [ADMX_Desktop/sz_DB_Moving](./policy-csp-admx-desktop.md#admx-desktop-sz-db-moving) - [ADMX_Desktop/sz_DWP_NoHTMLPaper](./policy-csp-admx-desktop.md#admx-desktop-sz-dwp-nohtmlpaper) -- [ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-allowadmininstall) -- [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-detailtext) -- [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-simpletext) -- [ADMX_DeviceInstallation/DeviceInstall_InstallTimeout](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-installtimeout) -- [ADMX_DeviceInstallation/DeviceInstall_Policy_RebootTime](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-policy-reboottime) -- [ADMX_DeviceInstallation/DeviceInstall_Removable_Deny](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-removable-deny) -- [ADMX_DeviceInstallation/DeviceInstall_SystemRestore](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-systemrestore) -- [ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser](./policy-csp-admx-devicenstallation.md#admx-deviceinstallation-deviceinstall-classes-allowuser) +- [ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall](./policy-csp-admx-deviceinstallation.md#admx-deviceinstallation-deviceinstall-allowadmininstall) +- [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText](./policy-csp-admx-deviceinstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-detailtext) +- [ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText](./policy-csp-admx-deviceinstallation.md#admx-deviceinstallation-deviceinstall-deniedpolicy-simpletext) +- [ADMX_DeviceInstallation/DeviceInstall_InstallTimeout](./policy-csp-admx-deviceinstallation.md#admx-deviceinstallation-deviceinstall-installtimeout) +- [ADMX_DeviceInstallation/DeviceInstall_Policy_RebootTime](./policy-csp-admx-deviceinstallation.md#admx-deviceinstallation-deviceinstall-policy-reboottime) +- [ADMX_DeviceInstallation/DeviceInstall_Removable_Deny](./policy-csp-admx-deviceinstallation.md#admx-deviceinstallation-deviceinstall-removable-deny) +- [ADMX_DeviceInstallation/DeviceInstall_SystemRestore](./policy-csp-admx-deviceinstallation.md#admx-deviceinstallation-deviceinstall-systemrestore) +- [ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser](./policy-csp-admx-deviceinstallation.md#admx-deviceinstallation-deviceinstall-classes-allowuser) - [ADMX_DeviceSetup/DeviceInstall_BalloonTips](./policy-csp-admx-devicesetup.md#admx-devicesetup-deviceinstall-balloontips) - [ADMX_DeviceSetup/DriverSearchPlaces_SearchOrderConfiguration](./policy-csp-admx-devicesetup.md#admx-devicesetup-driversearchplaces-searchorderconfiguration) - [ADMX_DigitalLocker/Digitalx_DiableApplication_TitleText_1](./policy-csp-admx-digitallocker.md#admx-digitallocker-digitalx-diableapplication-titletext-1) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 6483b2b718..2efe519667 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -651,28 +651,28 @@ The following diagram shows the Policy configuration service provider in tree fo
    - ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall + ADMX_DeviceInstallation/DeviceInstall_AllowAdminInstall
    - ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText + ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_DetailText
    - ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText + ADMX_DeviceInstallation/DeviceInstall_DeniedPolicy_SimpleText
    - ADMX_DeviceInstallation/DeviceInstall_InstallTimeout + ADMX_DeviceInstallation/DeviceInstall_InstallTimeout
    - ADMX_DeviceInstallation/DeviceInstall_Policy_RebootTime + ADMX_DeviceInstallation/DeviceInstall_Policy_RebootTime
    - ADMX_DeviceInstallation/DeviceInstall_Removable_Deny + ADMX_DeviceInstallation/DeviceInstall_Removable_Deny
    - ADMX_DeviceInstallation/DeviceInstall_SystemRestore + ADMX_DeviceInstallation/DeviceInstall_SystemRestore
    - ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser + ADMX_DeviceInstallation/DriverInstall_Classes_AllowUser
    diff --git a/windows/client-management/mdm/policy-csp-admx-devicenstallation.md b/windows/client-management/mdm/policy-csp-admx-deviceinstallation.md similarity index 100% rename from windows/client-management/mdm/policy-csp-admx-devicenstallation.md rename to windows/client-management/mdm/policy-csp-admx-deviceinstallation.md From 383591b44cb0bf0c64e321ba470e79d15fbc5e0c Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 14 Dec 2020 11:28:58 -0800 Subject: [PATCH 200/958] Fixed Acrolinx issues --- windows/client-management/mdm/policy-csp-admx-eaime.md | 4 ++-- .../mdm/policy-csp-admx-microsoftdefenderantivirus.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-eaime.md b/windows/client-management/mdm/policy-csp-admx-eaime.md index 3cd05e398d..433116e5de 100644 --- a/windows/client-management/mdm/policy-csp-admx-eaime.md +++ b/windows/client-management/mdm/policy-csp-admx-eaime.md @@ -419,7 +419,7 @@ ADMX Info: Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to turn off Internet search integration. -Search integration includes both using Search Provider (Japanese Microsoft IME) and performing bing search from predictive input for Japanese Microsoft IME. +Search integration includes both using Search Provider (Japanese Microsoft IME) and performing Bing search from predictive input for Japanese Microsoft IME. If you enable this policy setting, you cannot use search integration. @@ -789,7 +789,7 @@ If you enable this policy setting, the functionality associated with this featur If you disable this policy setting, the functionality associated with this feature is turned off, and the user won't be able to turn it on. -If you don't configure this policy setting, it will be turned on by default, and the user can turn on and turn off the lexicon udpate feature. +If you don't configure this policy setting, it will be turned on by default, and the user can turn on and turn off the lexicon update feature. This Policy setting applies only to Microsoft CHS Pinyin IME. diff --git a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md index f01f693b6e..69f2c6624a 100644 --- a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md +++ b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md @@ -1462,7 +1462,7 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure definition retirement for network protection against exploits of known vulnerabilities. Definition retirement checks to see if a computer has the required security updates necessary to protect it against a particular vulnerability. If the system is not vulnerable to the exploit detected by a definition, then that definition is "retired". If all security intelligence for a given protocal are retired then that protocol is no longer parsed. Enabling this feature helps to improve performance. On a computer that is up-to-date with all the latest security updates, network protection will have no impact on network performance. +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure definition retirement for network protection against exploits of known vulnerabilities. Definition retirement checks to see if a computer has the required security updates necessary to protect it against a particular vulnerability. If the system is not vulnerable to the exploit detected by a definition, then that definition is "retired". If all security intelligence for a given protocol are retired then that protocol is no longer parsed. Enabling this feature helps to improve performance. On a computer that is up-to-date with all the latest security updates, network protection will have no impact on network performance. If you enable or do not configure this setting, definition retirement will be enabled. From d7b37a96848ecd758d484564e1dcdd9e912f4c0d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 14 Dec 2020 11:36:15 -0800 Subject: [PATCH 201/958] Fixed typo --- .../mdm/policy-csp-admx-microsoftdefenderantivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md index 69f2c6624a..5862dadff7 100644 --- a/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md +++ b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md @@ -6747,7 +6747,7 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting allows user to supress reboot notifications in UI only mode (for cases where UI can't be in lockdown mode). +Available in the latest Windows 10 Insider Preview Build. This policy setting allows user to suppress reboot notifications in UI only mode (for cases where UI can't be in lockdown mode). If you enable this setting AM UI won't show reboot notifications. From 133936c6fbadddc60128f1a6768e8c42e0e713b5 Mon Sep 17 00:00:00 2001 From: Shari Kjerland <30906736+SKjerland@users.noreply.github.com> Date: Mon, 14 Dec 2020 12:00:22 -0800 Subject: [PATCH 202/958] Replaced microsoft-edge-faq.md with .yml file As part of the FAQ-content-type pilot, I replaced the .md file with a .yml file that uses Google-defined schema. --- .vscode/settings.json | 5 ++ browsers/edge/TOC.md | 2 +- browsers/edge/microsoft-edge-faq.md | 58 ----------------------- browsers/edge/microsoft-edge-faq.yml | 69 ++++++++++++++++++++++++++++ 4 files changed, 75 insertions(+), 59 deletions(-) create mode 100644 .vscode/settings.json delete mode 100644 browsers/edge/microsoft-edge-faq.md create mode 100644 browsers/edge/microsoft-edge-faq.yml diff --git a/.vscode/settings.json b/.vscode/settings.json new file mode 100644 index 0000000000..f66a07d2e4 --- /dev/null +++ b/.vscode/settings.json @@ -0,0 +1,5 @@ +{ + "cSpell.words": [ + "emie" + ] +} \ No newline at end of file diff --git a/browsers/edge/TOC.md b/browsers/edge/TOC.md index 3314f77577..0f0c4989e5 100644 --- a/browsers/edge/TOC.md +++ b/browsers/edge/TOC.md @@ -28,6 +28,6 @@ ## [Change history for Microsoft Edge](change-history-for-microsoft-edge.md) -## [Microsoft Edge Frequently Asked Questions (FAQs)](microsoft-edge-faq.md) +## [Microsoft Edge Frequently Asked Questions (FAQs)](microsoft-edge-faq.yml) diff --git a/browsers/edge/microsoft-edge-faq.md b/browsers/edge/microsoft-edge-faq.md deleted file mode 100644 index 632905e3cb..0000000000 --- a/browsers/edge/microsoft-edge-faq.md +++ /dev/null @@ -1,58 +0,0 @@ ---- -title: Microsoft Edge - Frequently Asked Questions (FAQs) for IT Pros -ms.reviewer: -audience: itpro -manager: dansimp -description: Answers to frequently asked questions about Microsoft Edge features, integration, support, and potential problems. -author: dansimp -ms.author: dansimp -ms.prod: edge -ms.topic: article -ms.mktglfcycl: general -ms.sitesec: library -ms.localizationpriority: medium ---- - -# Frequently Asked Questions (FAQs) for IT Pros - ->Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile - -> [!NOTE] -> You've reached the documentation for Microsoft Edge version 45 and earlier. To see the documentation for Microsoft Edge version 77 or later, go to the [Microsoft Edge documentation landing page](https://docs.microsoft.com/DeployEdge/). - -## How can I get the next major version of Microsoft Edge, based on Chromium? -In December 2018, Microsoft [announced](https://blogs.windows.com/windowsexperience/2018/12/06/microsoft-edge-making-the-web-better-through-more-open-source-collaboration/#8jv53blDvL6TIKuS.97) our intention to adopt the Chromium open source project in the development of Microsoft Edge on the desktop, to create better web compatibility for our customers and less fragmentation of the web for all web developers. You can get more information at the [Microsoft Edge Insiders site](https://www.microsoftedgeinsider.com/). - -## What’s the difference between Microsoft Edge and Internet Explorer 11? How do I know which one to use? -Microsoft Edge is the default browser for all Windows 10 devices. It’s built to be highly compatible with the modern web. For some enterprise web apps and a small set of sites that were built to work with older technologies like ActiveX, [you can use Enterprise Mode](emie-to-improve-compatibility.md) to automatically send users to Internet Explorer 11. - -For more information on how Internet Explorer and Microsoft Edge work together to support your legacy web apps, while still defaulting to the higher security and modern experiences enabled by Microsoft Edge, see [Legacy apps in the enterprise](https://blogs.windows.com/msedgedev/2017/04/07/legacy-web-apps-enterprise/#RAbtRvJSYFaKu2BI.97). - -## Does Microsoft Edge work with Enterprise Mode? -[Enterprise Mode](https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/enterprise-mode-overview-for-ie11) helps you run many legacy web applications with better backward compatibility. You can configure both Microsoft Edge and Internet Explorer to use the same Enterprise Mode Site List, switching seamlessly between browsers to support both modern and legacy web apps. - -## How do I customize Microsoft Edge and related settings for my organization? -You can use Group Policy or Microsoft Intune to manage settings related to Microsoft Edge, such as security settings, folder redirection, and preferences. See [Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/group-policies/) for a list of policies currently available for Microsoft Edge and configuration information. Note that the preview release of Chromium-based Microsoft Edge might not include management policies or other enterprise functionality; our focus during the preview is modern browser fundamentals. - -## Is Adobe Flash supported in Microsoft Edge? -Adobe Flash is currently supported as a built-in feature of Microsoft Edge on PCs running Windows 10. In July 2017, Adobe announced that Flash support will end after 2020. With this change to Adobe support, we’ve started to phase Flash out of Microsoft Edge by adding the [Configure the Adobe Flash Click-to-Run setting group policy](https://docs.microsoft.com/microsoft-edge/deploy/available-policies#configure-the-adobe-flash-click-to-run-setting) - this lets you control which websites can run Adobe Flash content. - -To learn more about Microsoft’s plan for phasing Flash out of Microsoft Edge and Internet Explorer, see [The End of an Era — Next Steps for Adobe Flash](https://blogs.windows.com/msedgedev/2017/07/25/flash-on-windows-timeline/#3Bcc3QjRw0l7XsZ4.97) (blog article). - -## Does Microsoft Edge support ActiveX controls or BHOs like Silverlight or Java? -No. Microsoft Edge doesn’t support ActiveX controls and BHOs like Silverlight or Java. If you’re running web apps that use ActiveX controls, x-ua-compatible headers, or legacy document modes, you need to keep running them in IE11. IE11 offers additional security, manageability, performance, backward compatibility, and standards support. - -## How often will Microsoft Edge be updated? -In Windows 10, we’re delivering Windows as a service, updated on a cadence driven by quality and the availability of new features. Microsoft Edge security updates are released every two to four weeks, while bigger feature updates are included in the Windows 10 releases on a semi-annual cadence. - -## How can I provide feedback on Microsoft Edge? -Microsoft Edge is an evergreen browser - we’ll continue to evolve both the web platform and the user interface with regular updates. To send feedback on user experience, or on broken or malicious sites, use the **Send Feedback** option under the ellipses icon (**...**) in the Microsoft Edge toolbar. - -## Will Internet Explorer 11 continue to receive updates? -We’re committed to keeping Internet Explorer a supported, reliable, and safe browser. Internet Explorer is still a component of Windows and follows the support lifecycle of the OS on which it’s installed. For details, see [Lifecycle FAQ - Internet Explorer](https://support.microsoft.com/help/17454/). While we continue to support and update Internet Explorer, the latest features and platform updates will only be available in Microsoft Edge. - -## How do I find out what version of Microsoft Edge I have? -In the upper right corner of Microsoft Edge, click the ellipses icon (**...**), and then click **Settings**. Look in the **About Microsoft Edge** section to find your version. - -## What is Microsoft EdgeHTML? -Microsoft EdgeHTML is the web rendering engine that powers the current Microsoft Edge web browser and Windows 10 web app platform. (As opposed to *Microsoft Edge, based on Chromium*.) diff --git a/browsers/edge/microsoft-edge-faq.yml b/browsers/edge/microsoft-edge-faq.yml new file mode 100644 index 0000000000..830ca09109 --- /dev/null +++ b/browsers/edge/microsoft-edge-faq.yml @@ -0,0 +1,69 @@ +### YamlMime:FAQ +metadata: + title: Microsoft Edge - Frequently Asked Questions (FAQs) for IT Pros + ms.reviewer: + audience: itpro + manager: dansimp + description: Answers to frequently asked questions about Microsoft Edge features, integration, support, and potential problems. + author: dansimp + ms.author: dansimp + ms.prod: edge + ms.topic: article + ms.mktglfcycl: general + ms.sitesec: library + ms.localizationpriority: medium + +title: Frequently Asked Questions (FAQs) for IT Pros +summary: | + >Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile + + > [!NOTE] + > You've reached the documentation for Microsoft Edge version 45 and earlier. To see the documentation for Microsoft Edge version 77 or later, go to the [Microsoft Edge documentation landing page](https://docs.microsoft.com/DeployEdge/). + + +sections: + - name: Ignored + questions: + - question: How can I get the next major version of Microsoft Edge, based on Chromium? + answer: | + In December 2018, Microsoft [announced](https://blogs.windows.com/windowsexperience/2018/12/06/microsoft-edge-making-the-web-better-through-more-open-source-collaboration/#8jv53blDvL6TIKuS.97) our intention to adopt the Chromium open source project in the development of Microsoft Edge on the desktop, to create better web compatibility for our customers and less fragmentation of the web for all web developers. You can get more information at the [Microsoft Edge Insiders site](https://www.microsoftedgeinsider.com/). + + - question: What's the difference between Microsoft Edge and Internet Explorer 11? How do I know which one to use? + answer: | + Microsoft Edge is the default browser for all Windows 10 devices. It's built to be highly compatible with the modern web. For some enterprise web apps and a small set of sites that were built to work with older technologies like ActiveX, [you can use Enterprise Mode](emie-to-improve-compatibility.md) to automatically send users to Internet Explorer 11. + + For more information on how Internet Explorer and Microsoft Edge work together to support your legacy web apps, while still defaulting to the higher security and modern experiences enabled by Microsoft Edge, see [Legacy apps in the enterprise](https://blogs.windows.com/msedgedev/2017/04/07/legacy-web-apps-enterprise/#RAbtRvJSYFaKu2BI.97). + + - question: Does Microsoft Edge work with Enterprise Mode? + answer: | + [Enterprise Mode](https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/enterprise-mode-overview-for-ie11) helps you run many legacy web applications with better backward compatibility. You can configure both Microsoft Edge and Internet Explorer to use the same Enterprise Mode Site List, switching seamlessly between browsers to support both modern and legacy web apps. + + - question: How do I customize Microsoft Edge and related settings for my organization? + answer: | + You can use Group Policy or Microsoft Intune to manage settings related to Microsoft Edge, such as security settings, folder redirection, and preferences. See [Group Policy and Mobile Device Management (MDM) settings for Microsoft Edge](https://docs.microsoft.com/microsoft-edge/deploy/group-policies/) for a list of policies currently available for Microsoft Edge and configuration information. Note that the preview release of Chromium-based Microsoft Edge might not include management policies or other enterprise functionality; our focus during the preview is modern browser fundamentals. + + - question: Is Adobe Flash supported in Microsoft Edge? + answer: | + Adobe Flash is currently supported as a built-in feature of Microsoft Edge on PCs running Windows 10. In July 2017, Adobe announced that Flash support will end after 2020. With this change to Adobe support, we've started to phase Flash out of Microsoft Edge by adding the [Configure the Adobe Flash Click-to-Run setting group policy](https://docs.microsoft.com/microsoft-edge/deploy/available-policies#configure-the-adobe-flash-click-to-run-setting) - this lets you control which websites can run Adobe Flash content. + + To learn more about Microsoft's plan for phasing Flash out of Microsoft Edge and Internet Explorer, see [The End of an Era — Next Steps for Adobe Flash](https://blogs.windows.com/msedgedev/2017/07/25/flash-on-windows-timeline/#3Bcc3QjRw0l7XsZ4.97) (blog article). + + - question: Does Microsoft Edge support ActiveX controls or BHOs like Silverlight or Java? + answer: No, Microsoft Edge doesn't support ActiveX controls and BHOs like Silverlight or Java. If you're running web apps that use ActiveX controls, x-ua-compatible headers, or legacy document modes, you need to keep running them in Internet Explorer 11. Internet Explorer 11 offers additional security, manageability, performance, backward compatibility, and standards support. + + - question: How often will Microsoft Edge be updated? + answer: In Windows 10, we're delivering Windows as a service, updated on a cadence driven by quality and the availability of new features. Microsoft Edge security updates are released every two to four weeks, while bigger feature updates are included in the Windows 10 releases on a semi-annual cadence. + + - question: How can I provide feedback on Microsoft Edge? + answer: Microsoft Edge is an evergreen browser - we'll continue to evolve both the web platform and the user interface with regular updates. To send feedback on user experience, or on broken or malicious sites, use the **Send Feedback** option under the ellipses icon (**...**) in the Microsoft Edge toolbar. + + - question: Will Internet Explorer 11 continue to receive updates? + answer: | + We're committed to keeping Internet Explorer a supported, reliable, and safe browser. Internet Explorer is still a component of Windows and follows the support lifecycle of the OS on which it's installed. For details, see [Lifecycle FAQ - Internet Explorer](https://support.microsoft.com/help/17454/). While we continue to support and update Internet Explorer, the latest features and platform updates will only be available in Microsoft Edge. + + - question: How do I find out which version of Microsoft Edge I have? + answer: In the upper-right corner of Microsoft Edge, select the ellipses icon (**...**), and then select **Settings**. Look in the **About Microsoft Edge** section to find your version. + + - question: What is Microsoft EdgeHTML? + answer: Microsoft EdgeHTML is the web rendering engine that powers the current Microsoft Edge web browser and Windows 10 web app platform (as opposed to *Microsoft Edge, based on Chromium*). + From bb7869b07535f9201647ead2e0c07eccfefb26c9 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 15:04:37 -0500 Subject: [PATCH 203/958] Updated create-base-policy sub-topic with spelling/grammar suggestions from acrolinx --- .../wdac-wizard-create-base-policy.md | 40 +++++++++---------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md index 0d1d32ff12..f532ee4e59 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md @@ -1,7 +1,7 @@ --- title: Windows Defender Application Control Wizard Base Policy Creation -description: Creating new base appliation control policies with the Microsoft WDAC Wizard. -keywords: allowlisting, blocklisting, security, malware +description: Creating new base application control policies with the Microsoft Windows Defender Application (WDAC) Wizard. +keywords: allow listing, block listing, security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 ms.mktglfcycl: deploy @@ -24,19 +24,19 @@ ms.date: 10/14/2020 - Windows 10 - Windows Server 2016 and above -When creating policies for use with Windows Defender Application Control (WDAC), it is recommended to start from an existing base policy and then add or remove rules to build your own custom policy XML files. For this reason, the WDAC Wizard offers three template policies to start from and customize during the base policy creation workflow. Prerequisite information about application control can be accessed through the [WDAC design guide](windows-defender-application-control-design-guide.md). This page outlines the steps to create a new application control policy from a template, configure the policy options, and the signer and file rules. +When creating policies for use with Windows Defender Application Control (WDAC), it is recommended to start with a template policy and then add or remove rules to suit your application control scenario. For this reason, the WDAC Wizard offers three template policies to start from and customize during the base policy creation workflow. Prerequisite information about application control can be accessed through the [WDAC design guide](windows-defender-application-control-design-guide.md). This page outlines the steps to create a new application control policy from a template, configure the policy options, and the signer and file rules. ## Template Base Policies -Each of the template policies has a unique set of policy allowlist rules which will affect the circle-of-trust and security model of the policy. The following table lists the policies in increasing order of trust and freedom. For instance, the Default Windows mode policy has fewer allowed signer rules, compared to the Signed and Reputable mode, and will offer a more selective circle-of-trust, less flexibility and subquently higher security. +Each of the template policies has a unique set of policy allow list rules that will affect the circle-of-trust and security model of the policy. The following table lists the policies in increasing order of trust and freedom. For instance, the Default Windows mode policy trusts fewer application publishers and signers than the Signed and Reputable mode policy. The Default Windows policy will have a smaller circle-of-trust with better security than the Signed and Reputable policy, but at the expense of compatibility. | **Template Base Policy** | **Description** | |---------------------------------|-------------------------------------------------------------------| -| **Default Windows Mode** | Default Windows mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive and Microsoft Teams
    • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    | -| **Allow Microsoft Mode** | Allow mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive and Microsoft Teams
    • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • *All Microsoft-signed software*
    | -| **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive and Microsoft Teams
    • Third party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • All Microsoft-signed software
    • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph techology](use-windows-defender-application-control-with-intelligent-security-graph)*
    | +| **Default Windows Mode** | Default Windows mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    | +| **Allow Microsoft Mode** | Allow mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • *All Microsoft-signed software*
    | +| **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • All Microsoft-signed software
    • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph technology](use-windows-defender-application-control-with-intelligent-security-graph)*
    | *Italized content denotes the changes in the current policy with respect to the policy prior.* @@ -47,18 +47,18 @@ Once the base template is selected, give the policy a name and choose where to s ## Configuring Policy Rules -Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. Hovering the mouse over the policy rule title will display a short description of the rule at the bottom of the page. +Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. A short description of each rule will appear at the bottom of the page when the mouse hovers over the rule title. ### Policy Rules Description -A description of the policy rules, beginning with the left-most column are provided below. +A description of each policy rule, beginning with the left-most column, is provided below. | Rule option | Description | |------------ | ----------- | | **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | | **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | | **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | -|**[Hypervisor-protected code integrity](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. This provides stronger protections against kernel malware.| +|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| | **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | | **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | @@ -68,15 +68,15 @@ A description of the policy rules, beginning with the left-most column are provi ### Advanced Policy Rules Description -Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of the policy rules are provided below. +Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of each policy rule is provided below. | Rule option | Description | |------------ | ----------- | | **Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a driver fails during startup, the WDAC policy will be placed in audit mode so that Windows will load. Administrators can validate the reason for the failure in the CodeIntegrity event log. | -| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flighted builds. | +| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flight/preview-signed builds. | | **Disable Runtime FilePath Rule Protection** | Disable default FilePath rule protection (apps and executables allowed based on file path rules must come from a file path that’s only writable by an administrator) for any FileRule that allows a file based on FilePath. | -| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically-loaded libraries. | -| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically re-validate the reputation for files that were authorized by the ISG.| +| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically loaded libraries (DLLs). | +| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically revalidate the reputation for files that were authorized by the ISG.| | **Require EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All Windows 10 and later drivers will meet this requirement. | @@ -88,29 +88,29 @@ Selecting the **+ Advanced Options** label will show another column of policy ru ## Creating custom file rules -File rules in an application control policy will specify the level at which appiations will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports 4 types of file rules: +File rules in an application control policy will specify the level at which applications will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create custom file rules for your policy. The Wizard supports four types of file rules: ### Publisher Rules -The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specifity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. +The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specificity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. | Rule Condition | WDAC Rule Level | Description | |------------ | ----------- | ----------- | | **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | | **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver corp, is affected. | -| **File version** | SignedVersion | This rule is a combination of PCACertificate, Publisher and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | -| **File name** | FilePublisher | Most specific. Combination of the file name, publisher and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | +| **File version** | SignedVersion | This rule is a combination of PCACertificate, publisher, and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | +| **File name** | FilePublisher | Most specific. Combination of the file name, publisher, and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | ![Custom filepublisher file rule creation](images/wdac-wizard-custom-publisher-rule.png) ### Filepath Rules -Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, simply select the file using the *Browse* button. +Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, select the file using the *Browse* button. ### File Attribute Rules -The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (eg. DLLs) may all share the same product name, for instance. This allows users to easily create targeted policies based on the Product Name filename rule level. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name parameter. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. | Rule level | Description | |------------ | ----------- | From f039be808ff15bafce5f18b910d642bc1c21fae8 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 15:17:46 -0500 Subject: [PATCH 204/958] Updated wdac-wizard.md to fix spelling and grammar per Acrolinx scorecard --- .../wdac-wizard.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md index c21368ab72..89403445f6 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md @@ -1,6 +1,6 @@ --- title: Windows Defender Application Control Wizard -description: Microsoft WDAC Wizard allows users to create, edit and merge application control policies in a simple to use Windows application. +description: Microsoft Defender Application Control Wizard (WDAC) Wizard allows users to create, edit, and merge application control policies in a simple to use Windows application. keywords: allowlisting, blocklisting, security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb ms.prod: w10 @@ -25,11 +25,11 @@ ms.date: 10/14/2020 - Windows 10 - Windows Server 2016 and above -This topic describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security administrators, and system administrators with a more user-friendly means to create, edit and merge application control policies using a GUI desktop application. The Wizard uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/en-us/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets are identical. +This article describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/en-us/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets is identical. ## Downloading the application -The latest version of the application is available for download from the official [Microsoft WDAC Wizard installer website](https://bit.ly/3koHwYs) as an MSIX packaged application. Additionally, the source code for the Wizard is also available as part of Microsoft's Open Source Software offerings on Github at the [WDAC Wizard Repo](https://github.com/MicrosoftDocs/WDAC-Toolkit). +The WDAC Wizard can be downloaded from the official [Wizard installer website](https://bit.ly/3koHwYs) as an MSIX packaged application. The Wizard's source code is available as part of Microsoft's Open Source Software offerings on GitHub at the [WDAC Wizard Repo](https://github.com/MicrosoftDocs/WDAC-Toolkit). **Supported Clients** @@ -38,16 +38,16 @@ As the WDAC Wizard uses the cmdlets in the background, the Wizard is functional - Windows builds 1909+ - For pre-1909 builds, the Enterprise SKU of Windows is installed -If neither requirement is satisfied, the Wizard will not allow for creating, editing or merging policies. +If neither requirement is satisfied, the Wizard will throw an error as the cmdlets are not available. ## In this section | Topic | Description | | - | - | -| [Creating a new base policy](wdac-wizard-create-base-policy.md) | This topic describes the how to create a new base policy using one of the supplied policy templates. | -| [Creating a new supplemental policy](wdac-wizard-create-supplemental-policy.md) | This topic describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy. | -| [Editing a base or supplemental policy](wdac-wizard-edit-policy.md) | This topic demonstrates how to modify an existing policy and the Wizard's editing capabilities. | -| [Merging policies](wdac-wizard-merging-policies.md) | This topic describes how to merge policies into a single application control policy. | -| [Deploying policies from the Wizard](wdac-wizard-deploying-policies.md) | This topic describes how to deploy application control policies onto target devices. | +| [Creating a new base policy](wdac-wizard-create-base-policy.md) | This article describes how to create a new base policy using one of the supplied policy templates. | +| [Creating a new supplemental policy](wdac-wizard-create-supplemental-policy.md) | This article describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy. | +| [Editing a base or supplemental policy](wdac-wizard-edit-policy.md) | This article demonstrates how to modify an existing policy and the Wizard's editing capabilities. | +| [Merging policies](wdac-wizard-merging-policies.md) | This article describes how to merge policies into a single application control policy. | +| [Deploying policies from the Wizard](wdac-wizard-deploying-policies.md) | This article describes how to deploy application control policies onto target devices. | From c96a8ddee724d98fb665ca7ca9c8e62994dca78b Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 15:35:18 -0500 Subject: [PATCH 205/958] updated wdac-wizard-create-supplemental-policy.md for grammar/spelling --- .../wdac-wizard-create-supplemental-policy.md | 35 +++++++++---------- 1 file changed, 17 insertions(+), 18 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md index 77ebccf335..6dc20f1ffe 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md @@ -30,27 +30,26 @@ Prerequisite information about application control can be accessed through the [ ## Expanding a Base Policy -Once the Policy Creator > Supplemental Policy type is chosen, a policy name and file location dialog will appear to name and save the supplemental policy. The next step requires selecting a base policy to expand. To expand a base policy, the base must allow supplemental policies. The WDAC Wizard will verify whether the base poliy allows supplementals and will show either of the following confirmations. +Once the Supplemental Policy type is chosen on the New Policy page, policy name and file dialog fields can be used to name and save the supplemental policy. The next step requires selecting a base policy to expand. To expand a base policy, the base must allow supplemental policies. The WDAC Wizard will verify if the base policy allows supplementals and will show the following confirmation. ![Base policy allows supplemental policies](images/wdac-wizard-supplemental-expandable.png) -![Base policy does not allow supplemental policies](images/wdac-wizard-supplemental-not-expandable.png) If the base policy is not configured for supplemental policies, first edit the base policy to allow supplementals using the [WDAC Wizard edit workflow](edac-wizard-editing-policy.md). ## Configuring Policy Rules -Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. Hovering the mouse over the policy rule title will display a short description of the rule at the bottom of the page. +Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. A short description of the rule will be shown at the bottom of the page when the cursor is placed on the rule title. ### Policy Rules Description -A description of the policy rules, beginning with the left-most column are provided below. +A description of each policy rule, beginning with the left-most column, is provided below. | Rule option | Description | |------------ | ----------- | | **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | | **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | | **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | -|**[Hypervisor-protected code integrity](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. This provides stronger protections against kernel malware.| +|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| | **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | | **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | @@ -60,15 +59,15 @@ A description of the policy rules, beginning with the left-most column are provi ### Advanced Policy Rules Description -Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of the policy rules are provided below. +Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of each policy rule is provided below. | Rule option | Description | |------------ | ----------- | | **Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a driver fails during startup, the WDAC policy will be placed in audit mode so that Windows will load. Administrators can validate the reason for the failure in the CodeIntegrity event log. | -| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flighted builds. | +| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This setting should be used in scenarios where organizations only want to run production binaries, not flight/preivew-signed builds. | | **Disable Runtime FilePath Rule Protection** | Disable default FilePath rule protection (apps and executables allowed based on file path rules must come from a file path that’s only writable by an administrator) for any FileRule that allows a file based on FilePath. | -| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically-loaded libraries. | -| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically re-validate the reputation for files that were authorized by the ISG.| +| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically loaded libraries. | +| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically revalidate the reputation for files that were authorized by the ISG.| | **Require EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All Windows 10 and later drivers will meet this requirement. | @@ -80,17 +79,17 @@ Selecting the **+ Advanced Options** label will show another column of policy ru ## Creating custom file rules -File rules in an application control policy will specify the level at which appiations will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports 4 types of file rules: +File rules in an application control policy will specify the level at which applications will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports four types of file rules: ### Publisher Rules -The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specifity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. +The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specificity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level, and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. | Rule Condition | WDAC Rule Level | Description | |------------ | ----------- | ----------- | -| **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | -| **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver corp, is affected. | -| **File version** | SignedVersion | This rule is a combination of PCACertificate, Publisher and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | +| **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This certificate is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | +| **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver publisher, is affected. | +| **File version** | SignedVersion | This rule is a combination of the PCACertificate and Publisher rule, and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | | **File name** | FilePublisher | Most specific. Combination of the file name, publisher and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | @@ -98,11 +97,11 @@ The Publisher file rule type uses properties in the code signing certificate cha ### Filepath Rules -Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, simply select the file using the *Browse* button. +Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, select the file using the *Browse* button. ### File Attribute Rules -The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (eg. DLLs) may all share the same product name, for instance. This allows users to easily create targeted policies based on the Product Name filename rule level. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. | Rule level | Description | |------------ | ----------- | @@ -121,8 +120,8 @@ Lastly, the Wizard supports creating file rules using the hash of the file. Alth #### Deleting Signing Rules -The policy signing rules list table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Template signing rules and custom rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. +The table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. ## Up next -- [Editing a WDAC policy using the Wizard](wdac-wizard-editing-policy.md) \ No newline at end of file +- [Editing a WDAC policy using the Wizard](wdac-wizard-editing-policy.md) From c70c8ee8812de16b0c4c8b9f52202ebfad5083d2 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 15:49:59 -0500 Subject: [PATCH 206/958] fixed grammar/spelling in wdac-wizard-editing-policy.md --- .../wdac-wizard-editing-policy.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md index d3ef342f31..ec71f80aba 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md @@ -18,13 +18,13 @@ ms.topic: conceptual ms.date: 10/14/2020 --- -# Editing exisiting base and supplemental WDAC policies with the Wizard +# Editing existing base and supplemental WDAC policies with the Wizard **Applies to** - Windows 10 - Windows Server 2016 and above -The WDAC Wizard makes editing and viewing base and supplemental WDAC policies much easier than by hand or using the PowerShell Cmdlets. The Wizard currently supports the following editing capbilities: +The WDAC Wizard makes editing and viewing WDAC policies easier than the PowerShell cmdlets or manually. The Wizard currently supports the following editing capabilities:
    • [Configuring policy rules](#Configuring-Policy-Rules)
    • [Adding new allow or block file rules to existing policies](#Adding-File-Rules)
      • @@ -34,21 +34,21 @@ The WDAC Wizard makes editing and viewing base and supplemental WDAC policies mu # Configuring Policy Rules -The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains additional policy rule options which are less common to the majority of users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#Adding-File-Rules). +The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains additional policy rule options that are less common to the majority of users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#Adding-File-Rules). ![Configuring the policy rules](images/wdac-wizard-edit-policy-rules.png) -Hovering the mouse over the policy rule names will display a short description of the ruleat the bottom of the page.For a complete list of the policy rules and their capabilities see the [Windows Defender Application Control policy rules table](select-types-of-rules-to-create.md#windows-defender-application-control-policy-rules). +A description of the policy rule is shown at the bottom of the page when the cursor is placed over the rule title. For a complete list of the policy rules and their capabilities, see the [Windows Defender Application Control policy rules table](select-types-of-rules-to-create.md#windows-defender-application-control-policy-rules). ## Adding File Rules -Previously, to add rules to an existing policy, users would be required to create a new policy and merge it with their existing policy, or edit the policy by hand. The WDAC Wizard allows users to add rules to their exising policy seamlessly. +The WDAC Wizard allows users to add rules to their existing policy seamlessly. Previously, this would have involved creating a new policy with the new rules and merging it with the existing policy. Selecting the `+ Custom Rules` button will open the Custom Rules panel. For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](wdac-wizard-create-base-policy.md#Creating-custom-file-rules). ## Removing File Rules -The WDAC Wizard makes deleting file rules from an existing policy quick and easy. To remove any type of file rule: publisher rule, path rule, filename rule or a hash rule, simply click on the rule in the `Policy Signing Rules List` table on the lefthand side of the page. Selecting the rule will highlight the entire row. Once the row is highlighted, select the remove icon underneath the table. The Wizard will prompt for user confirmation before removing the file rule. Once removed, the rule will no longer appear in the policy or the table. +The WDAC Wizard makes deleting file rules from an existing policy quick and easy. To remove any type of file rule: publisher rule, path rule, filename rule, or a hash rule, select the rule in the `Policy Signing Rules List` table on the left-hand side of the page. Selecting the rule will highlight the entire row. Once the row is highlighted, select the remove icon underneath the table. The Wizard will prompt for user confirmation before removing the file rule. Once removed, the rule will no longer appear in the policy or the table. ![Removing file rule from policy during edit](image/wdac-wizard-edit-remove-file-rule.png) @@ -66,8 +66,8 @@ The WDAC Wizard makes deleting file rules from an existing policy quick and easy ### Policy Creation -Once the WDAC Wizard finalizes creation of your edited policy, the new policy will be written to the same file path and name as the in-edit policy with the new version appended to the end of the file name. For instance, if the in-edit policy is saved at MyDocuments\BasePolicy.xml, after edit, the new policy will be saved at MyDocuments\BasePolicy_v10.0.0.1.xml. +Once the policy is created, the new policy will be written to the same path as the in-edit policy. The new policy file name will have the policy version appended to the end of the file name. For instance, if the in-edit policy is saved at MyDocuments\BasePolicy.xml, after edit, the new policy will be saved at MyDocuments\BasePolicy_v10.0.0.1.xml. ## Up next -- [Merging WDAC policies using the Wizard](wdac-wizard-merging-policies.md) \ No newline at end of file +- [Merging WDAC policies using the Wizard](wdac-wizard-merging-policies.md) From 15ef5a5dcb2e6dafff3de6cb9a0624fe81d356e1 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 15:56:08 -0500 Subject: [PATCH 207/958] fixed grammar/spelling in merging policies article --- .../wdac-wizard-merging-policies.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md index 53f2c6162d..eca772e093 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md @@ -20,13 +20,13 @@ ms.date: 10/14/2020 # Merging existing policies with the WDAC Wizard -Beginning in Windows 10 version 1903, WDAC supports multiple policies. Before version 1903, however, Windows 10 could only have one WDAC policy. Consquently, users were required to merge multiple WDAC policies into one. The WDAC Wizard has a simple to use user interface to allow users to merge multiple WDAC policies. The Wizard can support up to 15 policy files as input during the merge workflow. +Beginning in Windows 10 version 1903, WDAC supports multiple policies. Before version 1903, however, Windows 10 could only have one WDAC policy. Consequently, users were required to merge multiple WDAC policies into one. The WDAC Wizard has a simple to use user interface to allow users to merge multiple WDAC policies. The Wizard can support up to 15 policy files as input during the merge workflow. -Simply select the policies you wish to merge into one policy using the `+ Add Policy` button under the table. Once added, policies will be enumerated within the table. To remove a policy from the table, in the case of accidental addition, highlight the policy row and click the `- Remove Policy` button. Confirmation will be required before the policy is withdrawn from the table. +Select the policies you wish to merge into one policy using the `+ Add Policy` button under the table. Once added, policies will be enumerated within the table. To remove a policy from the table, if accidentally added, highlight the policy row and select the `- Remove Policy` button. Confirmation will be required before the policy is withdrawn from the table. > [!NOTE] > The policy type and ID of the final output policy will be determined based on the type and ID of the **first policy** in the policy list table. For instance, if a legacy policy format policy and a multi-policy format policy are merged together, the output format of the policy will be whichever policy is specified first in the table. For more information on policy formats, visit the [Multiple WDAC Policies page](deploy-multiple-windows-defender-application-control-policies). -Lastly, select a filepath save location for the final merged policy on disk using the Browse button. Once at least two policies to merge are specified, and the output file location is set, click Next to build the policy. +Lastly, select a filepath save location for the final merged policy using the `Browse` button. If a minimum of two policies are selected, and the save location is specified, select the `Next` button to build the policy. -![Merging WDAC policies into a final WDAC policy](images/wdac-wizard-merge.png) \ No newline at end of file +![Merging WDAC policies into a final WDAC policy](images/wdac-wizard-merge.png) From 8b9615cbda25ba0463eed6623c22bd0889c70872 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 14 Dec 2020 14:27:54 -0800 Subject: [PATCH 208/958] add note --- .../microsoft-defender-atp/configure-endpoints-sccm.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm.md index 38ec7959c3..aa7a4c498f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm.md @@ -50,6 +50,11 @@ Starting in Configuration Manager version 2002, you can onboard the following op - Windows Server 2016, version 1803 or later - Windows Server 2019 +>[!NOTE] +>For more information on how to onboard Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019, see, [Onboard Windows servers](configure-server-endpoints.md). + + + ### Onboard devices using System Center Configuration Manager From cb480eefb414fd2b68e0478d268aa73e21770c97 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 17:40:26 -0500 Subject: [PATCH 209/958] Fixed broken links for edit policy article and deploying policy articles. --- .../windows-defender-application-control/wdac-wizard.md | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md index 89403445f6..4e765e5339 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md @@ -25,7 +25,7 @@ ms.date: 10/14/2020 - Windows 10 - Windows Server 2016 and above -This article describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/en-us/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets is identical. +This article describes the supported scenarios for the Windows Defender Application Control (WDAC) policy Wizard. The Wizard was built to provide security architects, security and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the [ConfigCI PowerShell Cmdlets](https://docs.microsoft.com/powershell/module/configci/?view=win10-ps) in the background so the output policy of the Wizard and PowerShell cmdlets is identical. ## Downloading the application @@ -46,8 +46,5 @@ If neither requirement is satisfied, the Wizard will throw an error as the cmdle | - | - | | [Creating a new base policy](wdac-wizard-create-base-policy.md) | This article describes how to create a new base policy using one of the supplied policy templates. | | [Creating a new supplemental policy](wdac-wizard-create-supplemental-policy.md) | This article describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy. | -| [Editing a base or supplemental policy](wdac-wizard-edit-policy.md) | This article demonstrates how to modify an existing policy and the Wizard's editing capabilities. | +| [Editing a base or supplemental policy](wdac-wizard-editing-policy.md) | This article demonstrates how to modify an existing policy and the Wizard's editing capabilities. | | [Merging policies](wdac-wizard-merging-policies.md) | This article describes how to merge policies into a single application control policy. | -| [Deploying policies from the Wizard](wdac-wizard-deploying-policies.md) | This article describes how to deploy application control policies onto target devices. | - - From bbb3142a8b02f6e0e02df4dc8573202e581bb2d9 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 17:43:08 -0500 Subject: [PATCH 210/958] Fixed broken Multiple WDAC Policies page link in WDAC Wizard merge policy article --- .../wdac-wizard-merging-policies.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md index eca772e093..1b7d604a49 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-merging-policies.md @@ -25,7 +25,7 @@ Beginning in Windows 10 version 1903, WDAC supports multiple policies. Before ve Select the policies you wish to merge into one policy using the `+ Add Policy` button under the table. Once added, policies will be enumerated within the table. To remove a policy from the table, if accidentally added, highlight the policy row and select the `- Remove Policy` button. Confirmation will be required before the policy is withdrawn from the table. > [!NOTE] -> The policy type and ID of the final output policy will be determined based on the type and ID of the **first policy** in the policy list table. For instance, if a legacy policy format policy and a multi-policy format policy are merged together, the output format of the policy will be whichever policy is specified first in the table. For more information on policy formats, visit the [Multiple WDAC Policies page](deploy-multiple-windows-defender-application-control-policies). +> The policy type and ID of the final output policy will be determined based on the type and ID of the **first policy** in the policy list table. For instance, if a legacy policy format policy and a multi-policy format policy are merged together, the output format of the policy will be whichever policy is specified first in the table. For more information on policy formats, visit the [Multiple WDAC Policies page](deploy-multiple-windows-defender-application-control-policies.md). Lastly, select a filepath save location for the final merged policy using the `Browse` button. If a minimum of two policies are selected, and the save location is specified, select the `Next` button to build the policy. From 4dad3db2b6a37a505eb22ddb2d77aac2bceb63ac Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 17:51:25 -0500 Subject: [PATCH 211/958] Fixed broken image link and page header references --- .../wdac-wizard-editing-policy.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md index ec71f80aba..a239d415ec 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-editing-policy.md @@ -1,5 +1,5 @@ --- -title: Windows Defender Application Control Wizard Base Policy Creation +title: Editing Windows Defender Application Control Policies with the Wizard description: Editing existing base and supplemental policies with the Microsoft WDAC Wizard. keywords: allowlisting, blocklisting, security, malware ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb @@ -32,9 +32,9 @@ The WDAC Wizard makes editing and viewing WDAC policies easier than the PowerShe
    -# Configuring Policy Rules +## Configuring Policy Rules -The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains additional policy rule options that are less common to the majority of users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#Adding-File-Rules). +The `Policy Rules` page will load with the in-edit policy rules configured per the set rules. Selecting the `+ Advanced Options` button will reveal the advanced policy rule options panel. This grouping of rules contains additional policy rule options that are less common to the majority of users. To edit any of the rules, flip the corresponding policy rule state. For instance, to disable Audit Mode and enable Enforcement Mode in the figure below, the button beside the `Audit Mode` label needs only to be pressed. Once the policy rules are configured, select the Next button to continue the next stage of editing: [Adding File Rules](#adding-file-rules). ![Configuring the policy rules](images/wdac-wizard-edit-policy-rules.png) @@ -44,13 +44,13 @@ A description of the policy rule is shown at the bottom of the page when the cur The WDAC Wizard allows users to add rules to their existing policy seamlessly. Previously, this would have involved creating a new policy with the new rules and merging it with the existing policy. -Selecting the `+ Custom Rules` button will open the Custom Rules panel. For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](wdac-wizard-create-base-policy.md#Creating-custom-file-rules). +Selecting the `+ Custom Rules` button will open the Custom Rules panel. For more information on creating new policy file rules, see the guidelines provided in the [creating policy file rules section](wdac-wizard-create-base-policy.md#creating-custom-file-rules). ## Removing File Rules The WDAC Wizard makes deleting file rules from an existing policy quick and easy. To remove any type of file rule: publisher rule, path rule, filename rule, or a hash rule, select the rule in the `Policy Signing Rules List` table on the left-hand side of the page. Selecting the rule will highlight the entire row. Once the row is highlighted, select the remove icon underneath the table. The Wizard will prompt for user confirmation before removing the file rule. Once removed, the rule will no longer appear in the policy or the table. -![Removing file rule from policy during edit](image/wdac-wizard-edit-remove-file-rule.png) +![Removing file rule from policy during edit](images/wdac-wizard-edit-remove-file-rule.png) **Note:** removing a publisher rule will also remove the associated File Attribute rules. For instance, in the xml block below, removing ID_SIGNER_CONTOSO_PUBLISHER would also remove the rules ID_FILEATTRIB_LOB_APP_1 and ID_FILEATTRIB_LOB_APP_2. From 70d27f25c9e3799da866eb66563bb3ce73a6ebf9 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 17:55:11 -0500 Subject: [PATCH 212/958] Fixed broken link to select-types-of-rules-to-create.md#windows-defender-application-control-filename-rules and hardcoded locale (en-us) link in HVCI article --- .../wdac-wizard-create-supplemental-policy.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md index 6dc20f1ffe..4383ca390b 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md @@ -34,7 +34,7 @@ Once the Supplemental Policy type is chosen on the New Policy page, policy name ![Base policy allows supplemental policies](images/wdac-wizard-supplemental-expandable.png) -If the base policy is not configured for supplemental policies, first edit the base policy to allow supplementals using the [WDAC Wizard edit workflow](edac-wizard-editing-policy.md). +If the base policy is not configured for supplemental policies, first edit the base policy to allow supplementals using the [WDAC Wizard edit workflow](wdac-wizard-editing-policy.md). ## Configuring Policy Rules @@ -49,7 +49,7 @@ A description of each policy rule, beginning with the left-most column, is provi | **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | | **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | | **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | -|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| +|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| | **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | | **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | @@ -101,7 +101,7 @@ Filepath rules do not provide the same security guarantees that explicit signer ### File Attribute Rules -The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create.md#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. | Rule level | Description | |------------ | ----------- | From 1a31685da0367b6b2f3866ecebfb5b17f321ea47 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 14 Dec 2020 18:00:10 -0500 Subject: [PATCH 213/958] Fixed more hardcoded locales by removing "en-us" from article links. Also fixed references to the wdac official docs (use-windows-defender-application-control-with-intelligent-security-graph missing .md file ext) --- .../wdac-wizard-create-base-policy.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md index f532ee4e59..d9afb2c2a1 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md @@ -34,9 +34,9 @@ Each of the template policies has a unique set of policy allow list rules that w | **Template Base Policy** | **Description** | |---------------------------------|-------------------------------------------------------------------| -| **Default Windows Mode** | Default Windows mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    | -| **Allow Microsoft Mode** | Allow mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • *All Microsoft-signed software*
    | -| **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/whql-release-signature)
    • All Microsoft-signed software
    • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph technology](use-windows-defender-application-control-with-intelligent-security-graph)*
    | +| **Default Windows Mode** | Default Windows mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature)
    | +| **Allow Microsoft Mode** | Allow mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature)
    • *All Microsoft-signed software*
    | +| **Signed and Reputable Mode** | Signed and Reputable mode will authorize the following components:
    • Windows operating components - any binary installed by a fresh install of Windows
    • Apps installed from the Microsoft Store
    • Microsoft Office365 apps, OneDrive, and Microsoft Teams
    • Third-party [Windows Hardware Compatible drivers](https://docs.microsoft.com/windows-hardware/drivers/install/whql-release-signature)
    • All Microsoft-signed software
    • *Files with good reputation per [Microsoft Defender's Intelligent Security Graph technology](use-windows-defender-application-control-with-intelligent-security-graph.md)*
    | *Italized content denotes the changes in the current policy with respect to the policy prior.* @@ -58,7 +58,7 @@ A description of each policy rule, beginning with the left-most column, is provi | **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | | **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | | **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | -|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| +|**[Hypervisor-protected code integrity (HVCI)](https://docs.microsoft.com/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. HVCI provides stronger protections against kernel malware.| | **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | | **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | | **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | @@ -110,7 +110,7 @@ Filepath rules do not provide the same security guarantees that explicit signer ### File Attribute Rules -The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name parameter. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create.md#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (for example, DLLs) may all share the same product name, for instance. This rule level allows users to easily create targeted policies based on the Product Name file name parameter. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. | Rule level | Description | |------------ | ----------- | From 40a0800099f88755a4f244bdab4eda45a1af4ae3 Mon Sep 17 00:00:00 2001 From: Shari Kjerland <30906736+SKjerland@users.noreply.github.com> Date: Mon, 14 Dec 2020 15:21:20 -0800 Subject: [PATCH 214/958] Update change-history-for-microsoft-edge.md Updated file extension --- browsers/edge/change-history-for-microsoft-edge.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/browsers/edge/change-history-for-microsoft-edge.md b/browsers/edge/change-history-for-microsoft-edge.md index 2529a88fea..af27551fc8 100644 --- a/browsers/edge/change-history-for-microsoft-edge.md +++ b/browsers/edge/change-history-for-microsoft-edge.md @@ -60,7 +60,7 @@ We have discontinued the **Configure Favorites** group policy, so use the [Provi |New or changed topic | Description | |---------------------|-------------| -|[Microsoft Edge - Frequently Asked Questions (FAQs) for IT Pros](microsoft-edge-faq.md) | New | +|[Microsoft Edge - Frequently Asked Questions (FAQs) for IT Pros](microsoft-edge-faq.yml) | New | ## February 2017 From 669d17a35bfaa6589494600b796412c82770d98b Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 14 Dec 2020 15:44:37 -0800 Subject: [PATCH 215/958] Added Globalization policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 26 + .../policy-configuration-service-provider.md | 83 + .../mdm/policy-csp-admx-globalization.md | 2040 +++++++++++++++++ 4 files changed, 2150 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-globalization.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 22dc4936a7..ace9da625a 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -197,6 +197,7 @@ #### [ADMX_FileServerVSSProvider](policy-csp-admx-fileservervssprovider.md) #### [ADMX_FileSys](policy-csp-admx-filesys.md) #### [ADMX_FolderRedirection](policy-csp-admx-folderredirection.md) +#### [ADMX_Globalization](policy-csp-admx-globalization.md) #### [ADMX_Help](policy-csp-admx-help.md) #### [ADMX_HelpAndSupport](policy-csp-admx-helpandsupport.md) #### [ADMX_kdc](policy-csp-admx-kdc.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 850cba7f7b..eb920b0fb5 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -163,6 +163,32 @@ ms.date: 10/08/2020 - [ADMX_FolderRedirection/LocalizeXPRelativePaths_2](./policy-csp-admx-folderredirection.md#admx-folderredirection-localizexprelativepaths-2) - [ADMX_FolderRedirection/PrimaryComputer_FR_1](./policy-csp-admx-folderredirection.md#admx-folderredirection-primarycomputer-fr-1) - [ADMX_FolderRedirection/PrimaryComputer_FR_2](./policy-csp-admx-folderredirection.md#admx-folderredirection-primarycomputer-fr-2) +- [ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks](./policy-csp-admx-globalization.md#admx-globalization-blockcleanupofunusedpreinstalledlangpacks) +- [ADMX_Globalization/BlockUserInputMethodsForSignIn](./policy-csp-admx-globalization.md#admx-globalization-blockuserinputmethodsforsignin) +- [ADMX_Globalization/CustomLocalesNoSelect_1](./policy-csp-admx-globalization.md#admx-globalization-customlocalesnoselect-1) +- [ADMX_Globalization/CustomLocalesNoSelect_2](./policy-csp-admx-globalization.md#admx-globalization-customlocalesnoselect-2) +- [ADMX_Globalization/HideAdminOptions](./policy-csp-admx-globalization.md#admx-globalization-hideadminoptions) +- [ADMX_Globalization/HideCurrentLocation](./policy-csp-admx-globalization.md#admx-globalization-hidecurrentlocation) +- [ADMX_Globalization/HideLanguageSelection](./policy-csp-admx-globalization.md#admx-globalization-hidelanguageselection) +- [ADMX_Globalization/HideLocaleSelectAndCustomize](./policy-csp-admx-globalization.md#admx-globalization-hidelocaleselectandcustomize) +- [ADMX_Globalization/ImplicitDataCollectionOff_1](./policy-csp-admx-globalization.md#admx-globalization-implicitdatacollectionoff-1) +- [ADMX_Globalization/ImplicitDataCollectionOff_2](./policy-csp-admx-globalization.md#admx-globalization-implicitdatacollectionoff-2) +- [ADMX_Globalization/LocaleSystemRestrict](./policy-csp-admx-globalization.md#admx-globalization-localesystemrestrict) +- [ADMX_Globalization/LocaleUserRestrict_1](./policy-csp-admx-globalization.md#admx-globalization-localeuserrestrict-1) +- [ADMX_Globalization/LocaleUserRestrict_2](./policy-csp-admx-globalization.md#admx-globalization-localeuserrestrict-2) +- [ADMX_Globalization/LockMachineUILanguage](./policy-csp-admx-globalization.md#admx-globalization-lockmachineuilanguage) +- [ADMX_Globalization/LockUserUILanguage](./policy-csp-admx-globalization.md#admx-globalization-lockuseruilanguage) +- [ADMX_Globalization/MachineUILanguageOverwrite](./policy-csp-admx-globalization.md#admx-globalization-machineuilanguageoverwrite) +- [ADMX_Globalization/PreventGeoIdChange_1](./policy-csp-admx-globalization.md#admx-globalization-preventgeoidchange-1) +- [ADMX_Globalization/PreventGeoIdChange_2](./policy-csp-admx-globalization.md#admx-globalization-preventgeoidchange-2) +- [ADMX_Globalization/PreventUserOverrides_1](./policy-csp-admx-globalization.md#admx-globalization-preventuseroverrides-1) +- [ADMX_Globalization/PreventUserOverrides_2](./policy-csp-admx-globalization.md#admx-globalization-preventuseroverrides-2) +- [ADMX_Globalization/RestrictUILangSelect](./policy-csp-admx-globalization.md#admx-globalization-restrictuilangselect) +- [ADMX_Globalization/TurnOffAutocorrectMisspelledWords](./policy-csp-admx-globalization.md#admx-globalization-turnoffautocorrectmisspelledwords) +- [ADMX_Globalization/TurnOffHighlightMisspelledWords](./policy-csp-admx-globalization.md#admx-globalization-turnoffhighlightmisspelledwords) +- [ADMX_Globalization/TurnOffInsertSpace](./policy-csp-admx-globalization.md#admx-globalization-turnoffinsertspace) +- [ADMX_Globalization/TurnOffOfferTextPredictions](./policy-csp-admx-globalization.md#admx-globalization-turnoffoffertextpredictions) +- [ADMX_Globalization/Y2K](./policy-csp-admx-globalization.md#admx-globalization-y2k) - [ADMX_Help/DisableHHDEP](./policy-csp-admx-help.md#admx-help-disablehhdep) - [ADMX_Help/HelpQualifiedRootDir_Comp](./policy-csp-admx-help.md#admx-help-helpqualifiedrootdir-comp) - [ADMX_Help/RestrictRunFromHelp](./policy-csp-admx-help.md#admx-help-restrictrunfromhelp) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index e446aa1591..58bfd3a1a2 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -713,6 +713,89 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_Globalization policies + +
    +
    + ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks +
    +
    + ADMX_Globalization/BlockUserInputMethodsForSignIn +
    +
    + ADMX_Globalization/CustomLocalesNoSelect_1 +
    +
    + ADMX_Globalization/CustomLocalesNoSelect_2 +
    +
    + ADMX_Globalization/HideAdminOptions +
    +
    + ADMX_Globalization/HideCurrentLocation +
    +
    + ADMX_Globalization/HideLanguageSelection +
    +
    + ADMX_Globalization/HideLocaleSelectAndCustomize +
    +
    + ADMX_Globalization/ImplicitDataCollectionOff_1 +
    +
    + ADMX_Globalization/ImplicitDataCollectionOff_2 +
    +
    + ADMX_Globalization/LocaleSystemRestrict +
    +
    + ADMX_Globalization/LocaleUserRestrict_1 +
    +
    + ADMX_Globalization/LocaleUserRestrict_2 +
    +
    + ADMX_Globalization/LockMachineUILanguage +
    +
    + ADMX_Globalization/LockUserUILanguage +
    +
    + ADMX_Globalization/MachineUILanguageOverwrite +
    +
    + ADMX_Globalization/PreventGeoIdChange_1 +
    +
    + ADMX_Globalization/PreventGeoIdChange_2 +
    +
    + ADMX_Globalization/PreventUserOverrides_1 +
    +
    + ADMX_Globalization/PreventUserOverrides_2 +
    +
    + ADMX_Globalization/RestrictUILangSelect +
    +
    + ADMX_Globalization/TurnOffAutocorrectMisspelledWords +
    +
    + ADMX_Globalization/TurnOffHighlightMisspelledWords +
    +
    + ADMX_Globalization/TurnOffInsertSpace +
    +
    + ADMX_Globalization/TurnOffOfferTextPredictions +
    +
    + ADMX_Globalization/Y2K +
    +
    + ### ADMX_Help policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-globalization.md b/windows/client-management/mdm/policy-csp-admx-globalization.md new file mode 100644 index 0000000000..e471cdf6e7 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-globalization.md @@ -0,0 +1,2040 @@ +--- +title: Policy CSP - ADMX_Globalization +description: Policy CSP - ADMX_Globalization +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/14/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Globalization +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Globalization policies + +
    +
    + ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks +
    +
    + ADMX_Globalization/BlockUserInputMethodsForSignIn +
    +
    + ADMX_Globalization/CustomLocalesNoSelect_1 +
    +
    + ADMX_Globalization/CustomLocalesNoSelect_2 +
    +
    + ADMX_Globalization/HideAdminOptions +
    +
    + ADMX_Globalization/HideCurrentLocation +
    +
    + ADMX_Globalization/HideLanguageSelection +
    +
    + ADMX_Globalization/HideLocaleSelectAndCustomize +
    +
    + ADMX_Globalization/ImplicitDataCollectionOff_1 +
    +
    + ADMX_Globalization/ImplicitDataCollectionOff_2 +
    +
    + ADMX_Globalization/LocaleSystemRestrict +
    +
    + ADMX_Globalization/LocaleUserRestrict_1 +
    +
    + ADMX_Globalization/LocaleUserRestrict_2 +
    +
    + ADMX_Globalization/LockMachineUILanguage +
    +
    + ADMX_Globalization/LockUserUILanguage +
    +
    + ADMX_Globalization/MachineUILanguageOverwrite +
    +
    + ADMX_Globalization/PreventGeoIdChange_1 +
    +
    + ADMX_Globalization/PreventGeoIdChange_2 +
    +
    + ADMX_Globalization/PreventUserOverrides_1 +
    +
    + ADMX_Globalization/PreventUserOverrides_2 +
    +
    + ADMX_Globalization/RestrictUILangSelect +
    +
    + ADMX_Globalization/TurnOffAutocorrectMisspelledWords +
    +
    + ADMX_Globalization/TurnOffHighlightMisspelledWords +
    +
    + ADMX_Globalization/TurnOffInsertSpace +
    +
    + ADMX_Globalization/TurnOffOfferTextPredictions +
    +
    + ADMX_Globalization/Y2K +
    +
    + + +
    + + +**ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the LPRemove task will run to clean up language packs installed on a machine but are not used by any users on that machine. + +If you enable this policy setting, language packs that are installed as part of the system image will remain installed even if they are not used by any user on that system. + +If you disable or do not configure this policy setting, language packs that are installed as part of the system image but are not used by any user on that system will be removed as part of a scheduled clean up task. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Block clean-up of unused language packs* +- GP name: *BlockCleanupOfUnusedPreinstalledLangPacks* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/BlockUserInputMethodsForSignIn** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy prevents automatic copying of user input methods to the system account for use on the sign-in screen. The user is restricted to the set of input methods that are enabled in the system account. + +Note this does not affect the availability of user input methods on the lock screen or with the UAC prompt. + +If the policy is Enabled, then the user will get input methods enabled for the system account on the sign-in page. + +If the policy is Disabled or Not Configured, then the user will be able to use input methods enabled for their user account on the sign-in page. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow copying of user input methods to the system account for sign-in* +- GP name: *BlockUserInputMethodsForSignIn* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/CustomLocalesNoSelect_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of locales that are installed with the operating system. + +This does not affect the selection of replacement locales. To prevent the selection of replacement locales, adjust the permissions of the %windir%\Globalization directory to prevent the installation of locales by unauthorized users. + +The policy setting "Restrict user locales" can also be enabled to disallow selection of a custom locale, even if this policy setting is not configured. + +If you enable this policy setting, the user cannot select a custom locale as their user locale, but they can still select a replacement locale if one is installed. + +If you disable or do not configure this policy setting, the user can select a custom locale as their user locale. + +If this policy setting is enabled at the machine level, it cannot be disabled by a per-user policy setting. If this policy setting is disabled at the machine level, the per-user policy setting will be ignored. If this policy setting is not configured at the machine level, restrictions will be based on per-user policy settings. + +To set this policy setting on a per-user basis, make sure that you do not configure the per-machine policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow selection of Custom Locales* +- GP name: *CustomLocalesNoSelect_1* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/CustomLocalesNoSelect_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of locales that are installed with the operating system. + +This does not affect the selection of replacement locales. To prevent the selection of replacement locales, adjust the permissions of the %windir%\Globalization directory to prevent the installation of locales by unauthorized users. + +The policy setting "Restrict user locales" can also be enabled to disallow selection of a custom locale, even if this policy setting is not configured. + +If you enable this policy setting, the user cannot select a custom locale as their user locale, but they can still select a replacement locale if one is installed. + +If you disable or do not configure this policy setting, the user can select a custom locale as their user locale. + +If this policy setting is enabled at the machine level, it cannot be disabled by a per-user policy setting. If this policy setting is disabled at the machine level, the per-user policy setting will be ignored. If this policy setting is not configured at the machine level, restrictions will be based on per-user policy settings. + +To set this policy setting on a per-user basis, make sure that you do not configure the per-machine policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow selection of Custom Locales* +- GP name: *CustomLocalesNoSelect_2* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/HideAdminOptions** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the Administrative options from the Region settings control panel. + +Administrative options include interfaces for setting system locale and copying settings to the default user. This policy setting does not, however, prevent an administrator or another application from changing these values programmatically. + +This policy setting is used only to simplify the Regional Options control panel. + +If you enable this policy setting, the user cannot see the Administrative options. + +If you disable or do not configure this policy setting, the user can see the Administrative options. + +> [!NOTE] +> Even if a user can see the Administrative options, other policies may prevent them from modifying the values. + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide Regional and Language Options administrative options* +- GP name: *HideAdminOptions* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/HideCurrentLocation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the option to change the user's geographical location (GeoID) from the Region settings control panel. + +This policy setting is used only to simplify the Regional Options control panel. + +If you enable this policy setting, the user does not see the option to change the GeoID. This does not prevent the user or an application from changing the GeoID programmatically. + +If you disable or do not configure this policy setting, the user sees the option for changing the user location (GeoID). + +> [!NOTE] +> Even if a user can see the GeoID option, the "Disallow changing of geographical location" option can prevent them from actually changing their current geographical location. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide the geographic location option* +- GP name: *HideCurrentLocation* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/HideLanguageSelection** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the option to change the user's menus and dialogs (UI) language from the Language and Regional Options control panel. + +This policy setting is used only to simplify the Regional Options control panel. + +If you enable this policy setting, the user does not see the option for changing the UI language. This does not prevent the user or an application from changing the UI language programmatically. If you disable or do not configure this policy setting, the user sees the option for changing the UI language. + +> [!NOTE] +> Even if a user can see the option to change the UI language, other policy settings can prevent them from changing their UI language. + + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide the select language group options* +- GP name: *HideLanguageSelection* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/HideLocaleSelectAndCustomize** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting removes the regional formats interface from the Region settings control panel. + +This policy setting is used only to simplify the Regional and Language Options control panel. + +If you enable this policy setting, the user does not see the regional formats options. This does not prevent the user or an application from changing their user locale or user overrides programmatically. + +If you disable or do not configure this policy setting, the user sees the regional formats options for changing and customizing the user locale. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Hide user locale selection and customization options* +- GP name: *HideLocaleSelectAndCustomize* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/ImplicitDataCollectionOff_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off the automatic learning component of handwriting recognition personalization. + +Automatic learning enables the collection and storage of text and ink written by the user in order to help adapt handwriting recognition to the vocabulary and handwriting style of the user. Text that is collected includes all outgoing messages in Windows Mail, and MAPI enabled email clients, as well as URLs from the Internet Explorer browser history. The information that is stored includes word frequency and new words not already known to the handwriting recognition engines (for example, proper names and acronyms). Deleting email content or the browser history does not delete the stored personalization data. Ink entered through Input Panel is collected and stored. + +> [!NOTE] +> Automatic learning of both text and ink might not be available for all languages, even when handwriting personalization is available. See Tablet PC Help for more information. + +If you enable this policy setting, automatic learning stops and any stored data is deleted. Users cannot configure this setting in Control Panel. + +If you disable this policy setting, automatic learning is turned on. Users cannot configure this policy setting in Control Panel. Collected data is only used for handwriting recognition, if handwriting personalization is turned on. + +If you do not configure this policy, users can choose to enable or disable automatic learning either from the Handwriting tab in the Tablet Settings in Control Panel or from the opt-in dialog. + +This policy setting is related to the "Turn off handwriting personalization" policy setting. + +> [!NOTE] +> The amount of stored ink is limited to 50 MB and the amount of text information to approximately 5 MB. When these limits are reached and new data is collected, old data is deleted to make room for more recent data. +> +> Handwriting personalization works only for Microsoft handwriting recognizers, and not with third-party recognizers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off automatic learning* +- GP name: *ImplicitDataCollectionOff_1* +- GP path: *Control Panel\Regional and Language Options\Handwriting personalization* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/ImplicitDataCollectionOff_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off the automatic learning component of handwriting recognition personalization. + +Automatic learning enables the collection and storage of text and ink written by the user in order to help adapt handwriting recognition to the vocabulary and handwriting style of the user. Text that is collected includes all outgoing messages in Windows Mail, and MAPI enabled email clients, as well as URLs from the Internet Explorer browser history. The information that is stored includes word frequency and new words not already known to the handwriting recognition engines (for example, proper names and acronyms). Deleting email content or the browser history does not delete the stored personalization data. Ink entered through Input Panel is collected and stored. + +> [!NOTE] +> Automatic learning of both text and ink might not be available for all languages, even when handwriting personalization is available. See Tablet PC Help for more information. + +If you enable this policy setting, automatic learning stops and any stored data is deleted. Users cannot configure this setting in Control Panel. + +If you disable this policy setting, automatic learning is turned on. Users cannot configure this policy setting in Control Panel. Collected data is only used for handwriting recognition, if handwriting personalization is turned on. + +If you do not configure this policy, users can choose to enable or disable automatic learning either from the Handwriting tab in the Tablet Settings in Control Panel or from the opt-in dialog. + +This policy setting is related to the "Turn off handwriting personalization" policy setting. + +> [!NOTE] +> The amount of stored ink is limited to 50 MB and the amount of text information to approximately 5 MB. When these limits are reached and new data is collected, old data is deleted to make room for more recent data. +> +> Handwriting personalization works only for Microsoft handwriting recognizers, and not with third-party recognizers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off automatic learning* +- GP name: *ImplicitDataCollectionOff_2* +- GP path: *Control Panel\Regional and Language Options\Handwriting personalization* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/LocaleSystemRestrict** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts the permitted system locales to the specified list. If the list is empty, it locks the system locale to its current value. This policy setting does not change the existing system locale; however, the next time that an administrator attempts to change the computer's system locale, they will be restricted to the specified list. + +The locale list is specified using language names, separated by a semicolon (;). For example, en-US is English (United States). Specifying "en-US;en-CA" would restrict the system locale to English (United States) and English (Canada). + +If you enable this policy setting, administrators can select a system locale only from the specified system locale list. + +If you disable or do not configure this policy setting, administrators can select any system locale shipped with the operating system. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict system locales* +- GP name: *LocaleSystemRestrict* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/LocaleUserRestrict_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts users on a computer to the specified list of user locales. If the list is empty, it locks all user locales to their current values. This policy setting does not change existing user locale settings; however, the next time a user attempts to change their user locale, their choices will be restricted to locales in this list. + +To set this policy setting on a per-user basis, make sure that you do not configure the per-computer policy setting. + +The locale list is specified using language tags, separated by a semicolon (;). For example, en-US is English (United States). Specifying "en-CA;fr-CA" would restrict the user locale to English (Canada) and French (Canada). + +If you enable this policy setting, only locales in the specified locale list can be selected by users. + +If you disable or do not configure this policy setting, users can select any locale installed on the computer, unless restricted by the "Disallow selection of Custom Locales" policy setting. If this policy setting is enabled at the computer level, it cannot be disabled by a per-user policy. If this policy setting is disabled at the computer level, the per-user policy is ignored. If this policy setting is not configured at the computer level, restrictions are based on per-user policies. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict user locales* +- GP name: *LocaleUserRestrict_1* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/LocaleUserRestrict_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts users on a computer to the specified list of user locales. If the list is empty, it locks all user locales to their current values. This policy setting does not change existing user locale settings; however, the next time a user attempts to change their user locale, their choices will be restricted to locales in this list. + +To set this policy setting on a per-user basis, make sure that you do not configure the per-computer policy setting. + +The locale list is specified using language tags, separated by a semicolon (;). For example, en-US is English (United States). Specifying "en-CA;fr-CA" would restrict the user locale to English (Canada) and French (Canada). + +If you enable this policy setting, only locales in the specified locale list can be selected by users. + +If you disable or do not configure this policy setting, users can select any locale installed on the computer, unless restricted by the "Disallow selection of Custom Locales" policy setting. + +If this policy setting is enabled at the computer level, it cannot be disabled by a per-user policy. If this policy setting is disabled at the computer level, the per-user policy is ignored. If this policy setting is not configured at the computer level, restrictions are based on per-user policies. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict user locales* +- GP name: *LocaleUserRestrict_2* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/LockMachineUILanguage** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts the Windows UI language for all users. + +This is a policy setting for computers with more than one UI language installed. + +If you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language will follow the language specified by the administrator as the system UI languages. The UI language selected by the user will be ignored if it is different than any of the system UI languages. + +If you disable or do not configure this policy setting, the user can specify which UI language is used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restricts the UI language Windows uses for all logged users* +- GP name: *LockMachineUILanguage* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/LockUserUILanguage** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts the Windows UI language for specific users. + +This policy setting applies to computers with more than one UI language installed. + +If you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language is restricted to a specified language for the selected user. If the specified language is not installed on the target computer or you disable this policy setting, the language selection defaults to the language selected by the user. + +If you disable or do not configure this policy setting, there is no restriction on which language users should use. + +To enable this policy setting in Windows Server 2003, Windows XP, or Windows 2000, to use the "Restrict selection of Windows menus and dialogs language" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restricts the UI languages Windows should use for the selected user* +- GP name: *LockUserUILanguage* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/MachineUILanguageOverwrite** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls which UI language is used for computers with more than one UI language installed. + +If you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language is restricted to a specified language. If the specified language is not installed on the target computer or you disable this policy setting, the language selection defaults to the language selected by the local administrator. + +If you disable or do not configure this policy setting, there is no restriction of a specific language used for the Windows menus and dialogs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Force selected system UI language to overwrite the user UI language* +- GP name: *MachineUILanguageOverwrite* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/PreventGeoIdChange_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from changing their user geographical location (GeoID). + +If you enable this policy setting, users cannot change their GeoID. + +If you disable or do not configure this policy setting, users may select any GeoID. + +If you enable this policy setting at the computer level, it cannot be disabled by a per-user policy setting. If you disable this policy setting at the computer level, the per-user policy is ignored. If you do not configure this policy setting at the computer level, restrictions are based on per-user policy settings. + +To set this policy setting on a per-user basis, make sure that the per-computer policy setting is not configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow changing of geographic location* +- GP name: *PreventGeoIdChange_1* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/PreventGeoIdChange_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from changing their user geographical location (GeoID). + +If you enable this policy setting, users cannot change their GeoID. + +If you disable or do not configure this policy setting, users may select any GeoID. + +If you enable this policy setting at the computer level, it cannot be disabled by a per-user policy setting. If you disable this policy setting at the computer level, the per-user policy is ignored. If you do not configure this policy setting at the computer level, restrictions are based on per-user policy settings. + +To set this policy setting on a per-user basis, make sure that the per-computer policy setting is not configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow changing of geographic location* +- GP name: *PreventGeoIdChange_2* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/PreventUserOverrides_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents the user from customizing their locale by changing their user overrides. + +Any existing overrides in place when this policy is enabled will be frozen. To remove existing user overrides, first reset the user(s) values to the defaults and then apply this policy. + +When this policy setting is enabled, users can still choose alternate locales installed on the system unless prevented by other policies, however, they will be unable to customize those choices. + +The user cannot customize their user locale with user overrides. + +If this policy setting is disabled or not configured, then the user can customize their user locale overrides. + +If this policy is set to Enabled at the computer level, then it cannot be disabled by a per-User policy. If this policy is set to Disabled at the computer level, then the per-User policy will be ignored. If this policy is set to Not Configured at the computer level, then restrictions will be based on per-User policies. + +To set this policy on a per-user basis, make sure that the per-computer policy is set to Not Configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow user override of locale settings* +- GP name: *PreventUserOverrides_1* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/PreventUserOverrides_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents the user from customizing their locale by changing their user overrides. + +Any existing overrides in place when this policy is enabled will be frozen. To remove existing user overrides, first reset the user(s) values to the defaults and then apply this policy. + +When this policy setting is enabled, users can still choose alternate locales installed on the system unless prevented by other policies, however, they will be unable to customize those choices. + +The user cannot customize their user locale with user overrides. + +If this policy setting is disabled or not configured, then the user can customize their user locale overrides. + +If this policy is set to Enabled at the computer level, then it cannot be disabled by a per-User policy. If this policy is set to Disabled at the computer level, then the per-User policy will be ignored. If this policy is set to Not Configured at the computer level, then restrictions will be based on per-User policies. + +To set this policy on a per-user basis, make sure that the per-computer policy is set to Not Configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow user override of locale settings* +- GP name: *PreventUserOverrides_2* +- GP path: *System\Locale Services* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/RestrictUILangSelect** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts users to the specified language by disabling the menus and dialog box controls in the Region settings control panel. If the specified language is not installed on the target computer, the language selection defaults to English. + +If you enable this policy setting, the dialog box controls in the Regional and Language Options control panel are not accessible to the logged on user. This prevents users from specifying a language different than the one used. + +To enable this policy setting in Windows Vista, use the "Restricts the UI languages Windows should use for the selected user" policy setting. + +If you disable or do not configure this policy setting, the logged-on user can access the dialog box controls in the Regional and Language Options control panel to select any available UI language. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict selection of Windows menus and dialogs language* +- GP name: *RestrictUILangSelect* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/TurnOffAutocorrectMisspelledWords** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy turns off the autocorrect misspelled words option. This does not, however, prevent the user or an application from changing the setting programmatically. + +The autocorrect misspelled words option controls whether or not errors in typed text will be automatically corrected. + +If the policy is Enabled, then the option will be locked to not autocorrect misspelled words. + +If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference. + +Note that the availability and function of this setting is dependent on supported languages being enabled. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off autocorrect misspelled words* +- GP name: *TurnOffAutocorrectMisspelledWords* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/TurnOffHighlightMisspelledWords** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy turns off the highlight misspelled words option. This does not, however, prevent the user or an application from changing the setting programmatically. + +The highlight misspelled words option controls whether or next spelling errors in typed text will be highlighted. + +If the policy is Enabled, then the option will be locked to not highlight misspelled words. + +If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference. + +Note that the availability and function of this setting is dependent on supported languages being enabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off highlight misspelled words* +- GP name: *TurnOffHighlightMisspelledWords* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/TurnOffInsertSpace** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy turns off the insert a space after selecting a text prediction option. This does not, however, prevent the user or an application from changing the setting programmatically. + +The insert a space after selecting a text prediction option controls whether or not a space will be inserted after the user selects a text prediction candidate when using the on-screen keyboard. + +If the policy is Enabled, then the option will be locked to not insert a space after selecting a text prediction. + +If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference. + +Note that the availability and function of this setting is dependent on supported languages being enabled. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off insert a space after selecting a text prediction* +- GP name: *TurnOffInsertSpace* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/TurnOffOfferTextPredictions** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy turns off the offer text predictions as I type option. This does not, however, prevent the user or an application from changing the setting programmatically. + +The offer text predictions as I type option controls whether or not text prediction suggestions will be presented to the user on the on-screen keyboard. + +If the policy is Enabled, then the option will be locked to not offer text predictions. + +If the policy is Disabled or Not Configured, then the user will be free to change the setting according to their preference. + +Note that the availability and function of this setting is dependent on supported languages being enabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off offer text predictions as I type* +- GP name: *TurnOffOfferTextPredictions* +- GP path: *Control Panel\Regional and Language Options* +- GP ADMX file name: *Globalization.admx* + + + +
    + + +**ADMX_Globalization/Y2K** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines how programs interpret two-digit years. + +This policy setting affects only the programs that use this Windows feature to interpret two-digit years. If a program does not interpret two-digit years correctly, consult the documentation or manufacturer of the program. + +If you enable this policy setting, the system specifies the largest two-digit year interpreted as being preceded by 20. All numbers less than or equal to the specified value are interpreted as being preceded by 20. All numbers greater than the specified value are interpreted as being preceded by 19. + +For example, the default value, 2029, specifies that all two-digit years less than or equal to 29 (00 to 29) are interpreted as being preceded by 20, that is 2000 to 2029. Conversely, all two-digit years greater than 29 (30 to 99) are interpreted as being preceded by 19, that is, 1930 to 1999. + +If you disable or do not configure this policy setting, Windows does not interpret two-digit year formats using this scheme for the program. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Century interpretation for Year 2000* +- GP name: *Y2K* +- GP path: *System* +- GP ADMX file name: *Globalization.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 6c088caa45a70bb004c68ec7af18508b1391d04d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Mon, 14 Dec 2020 16:12:44 -0800 Subject: [PATCH 216/958] Added RemoteAssistance policeis --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 2 + .../policy-configuration-service-provider.md | 11 + .../mdm/policy-csp-admx-remoteassistance.md | 205 ++++++++++++++++++ 4 files changed, 219 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-remoteassistance.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index ace9da625a..7068f51134 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -218,6 +218,7 @@ #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) +#### [ADMX_RemoteAssistance](policy-csp-admx-remoteassistance.md) #### [ADMX_RemovableStorage](policy-csp-admx-removablestorage.md) #### [ADMX_RPC](policy-csp-admx-rpc.md) #### [ADMX_Scripts](policy-csp-admx-scripts.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index eb920b0fb5..2480c5ab09 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -471,6 +471,8 @@ ms.date: 10/08/2020 - [ADMX_Reliability/PCH_ReportShutdownEvents](./policy-csp-admx-reliability.md#admx-reliability-pch-reportshutdownevents) - [ADMX_Reliability/ShutdownEventTrackerStateFile](./policy-csp-admx-reliability.md#admx-reliability-shutdowneventtrackerstatefile) - [ADMX_Reliability/ShutdownReason](./policy-csp-admx-reliability.md#admx-reliability-shutdownreason) +- [ADMX_RemoteAssistance/RA_EncryptedTicketOnly](./policy-csp-admx-remoteassistance.md#admx-remoteassistance-ra-encryptedticketonly) +- [ADMX_RemoteAssistance/RA_Optimize_Bandwidth](./policy-csp-admx-remoteassistance.md#admx-remoteassistance-ra-optimize-bandwidth) - [ADMX_RemovableStorage/AccessRights_RebootTime_1](./policy-csp-admx-removablestorage.md#admx-removablestorage-accessrights-reboottime-1) - [ADMX_RemovableStorage/AccessRights_RebootTime_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-accessrights-reboottime-2) - [ADMX_RemovableStorage/CDandDVD_DenyExecute_Access_2](./policy-csp-admx-removablestorage.md#admx-removablestorage-cdanddvd-denyexecute-access-2) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 58bfd3a1a2..de3ab67cea 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1732,6 +1732,17 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_RemoteAssistance policies + +
    +
    + ADMX_RemoteAssistance/RA_EncryptedTicketOnly +
    +
    + ADMX_RemoteAssistance/RA_Optimize_Bandwidth +
    +
    + ### ADMX_RemovableStorage policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-remoteassistance.md b/windows/client-management/mdm/policy-csp-admx-remoteassistance.md new file mode 100644 index 0000000000..6d1135eab4 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-remoteassistance.md @@ -0,0 +1,205 @@ +--- +title: Policy CSP - ADMX_RemoteAssistance +description: Policy CSP - ADMX_RemoteAssistance +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/14/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_RemoteAssistance +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_RemoteAssistance policies + +
    +
    + ADMX_RemoteAssistance/RA_EncryptedTicketOnly +
    +
    + ADMX_RemoteAssistance/RA_Optimize_Bandwidth +
    +
    + + +
    + + +**ADMX_RemoteAssistance/RA_EncryptedTicketOnly** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting enables Remote Assistance invitations to be generated with improved encryption so that only computers running this version (or later versions) of the operating system can connect. This policy setting does not affect Remote Assistance connections that are initiated by instant messaging contacts or the unsolicited Offer Remote Assistance. + +If you enable this policy setting, only computers running this version (or later versions) of the operating system can connect to this computer. + +If you disable this policy setting, computers running this version and a previous version of the operating system can connect to this computer. + +If you do not configure this policy setting, users can configure the setting in System Properties in the Control Panel. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow only Windows Vista or later connections* +- GP name: *RA_EncryptedTicketOnly* +- GP path: *System\Remote Assistance* +- GP ADMX file name: *RemoteAssistance.admx* + + + +
    + + +**ADMX_RemoteAssistance/RA_Optimize_Bandwidth** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to improve performance in low bandwidth scenarios. + +This setting is incrementally scaled from "No optimization" to "Full optimization". Each incremental setting includes the previous optimization setting. + +For example: + +"Turn off background" will include the following optimizations: + +- No full window drag +- Turn off background + +"Full optimization" will include the following optimizations: + +- Use 16-bit color (8-bit color in Windows Vista) +- Turn off font smoothing (not supported in Windows Vista) +- No full window drag +- Turn off background + +If you enable this policy setting, bandwidth optimization occurs at the level specified. + +If you disable this policy setting, application-based settings are used. + +If you do not configure this policy setting, application-based settings are used. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn on bandwidth optimization* +- GP name: *RA_Optimize_Bandwidth* +- GP path: *System\Remote Assistance* +- GP ADMX file name: *RemoteAssistance.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From e3711ba7bdcac9dd396404ee577a587a9b83b077 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Tue, 15 Dec 2020 09:31:45 +0200 Subject: [PATCH 217/958] Change product name https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8758 --- .../enable-cloud-protection-microsoft-defender-antivirus.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md index 0d113ddeb4..2dfddb6de2 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus.md @@ -56,7 +56,7 @@ For more information about the specific network-connectivity requirements to ens For more information about Intune device profiles, including how to create and configure their settings, see [What are Microsoft Intune device profiles?](https://docs.microsoft.com/intune/device-profiles) -## Use Microsoft Endpoint Configuration Manager to turn on cloud-delivered protection +## Use Microsoft Endpoint Manager to turn on cloud-delivered protection 1. Go to the Microsoft Endpoint Manager admin center ([https://endpoint.microsoft.com](https://endpoint.microsoft.com)) and log in. 2. Choose **Endpoint security** > **Antivirus**. From 8c6f6eb20929200bcc2c06bae033bd8374e5044a Mon Sep 17 00:00:00 2001 From: "Trond B. Krokli" <38162891+illfated@users.noreply.github.com> Date: Tue, 15 Dec 2020 14:00:38 +0100 Subject: [PATCH 218/958] Important -> IMPORTANT (consistency) - Add uppercase for the Important blob. Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/respond-file-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md index 766691ac1e..ef8a82a89f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md @@ -133,7 +133,7 @@ You can roll back and remove a file from quarantine if you’ve determined that > > Defender for Endpoint will restore all custom blocked files that were quarantined on this device in the last 30 days. -> [!Important] +> [!IMPORTANT] > A file that was quarantined as a potential network threat might not be recoverable. If a user attempts to restore the file after quarantine, that file might not be accessible. This can be due to the system no longer having network credentials to access the file. Typically, this is a result of a temporary log on to a system or shared folder and the access tokens expired. ## Add indicator to block or allow a file From 3429575d8635b71b09b230c891b0516067c34453 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 15 Dec 2020 06:15:44 -0800 Subject: [PATCH 219/958] base updates and images --- .../images/autoir-action-center-1.png | Bin 0 -> 29810 bytes .../images/autoir-quarantine-file-1.png | Bin 0 -> 25900 bytes 2 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/autoir-action-center-1.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/autoir-quarantine-file-1.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/autoir-action-center-1.png b/windows/security/threat-protection/microsoft-defender-atp/images/autoir-action-center-1.png new file mode 100644 index 0000000000000000000000000000000000000000..bc928cd15779c56bcbd2316f1c5fb14dcaf8f1de GIT binary patch literal 29810 zcmeEtRdgLou$?Tl*kWd8X0}+en3V`xl8@vsS!>Rm zo?bIO-CaFZyLMHF$V!XCLSaGy0Rh2^iwVgC0Rh|oDKCBp|8tfb>2mw?_sv0G^e0f| zB=*Ul3s4gQDFGm$nkeXZJ+MF5khWrK4nRO~egFKv4cQbM0s%QfhzkiQx@uo^KzJG~ zxgGK}&TX*ryg0{6?OL*?xz?TCJ9RoCa@`o$Nv};w*C27x+K0GfMC4;g;l=jBIU@pj zTy;D_J;M2cLaPG(=T^iLHGl76+X!QUGp8J4>l{;BE?RD)op1B0^J(Yf>Pt?O5*=#NjsMYQ=kXkr?DtLW9lOI}cs^Zw zEW$6Zc5FA;;b3oApPQkssI2$tD2caQf4o;a&-bS<^p}X$ZTTp`9tfXi=f*bj-=S?y zaWjJ?-JNc2FslB<`#N)Q{n56wf;lu`(gomq>DwA=&{v{InRYJN+3KK+eyXcY)ji$o z%RL#=`Pih}ate1jJxk*9ljPM*r$S=?npe3l`MQDZUyOuM!1!kpU%U@@(Am4-d|uA@ zq(u%Pu7|STi9C~GCLp|b*{0jPJwPui^f4n_j6x?>CcqRxEXPZySNQ^my!vjJTl}Vc zc8{ztmTY_;vk2%YMI}8TFwG?qJT9Q1EXe#N`84lYAe$Po)@qS|8T~V3hi@rC`rGwZ z6wlXhliOZ=FI#fzY5`{!hM0!Jecbfv$AhsDYE>kM^$LLWR; zZHfF;rdX`#+}7Nk4ynGIlGWDf4J?MjzHE^z2~I4W(vH!a*@vZd<%G4{YB9?Fyg$>k z^=5-;xe{LU3;vsSw-k_Uef1t+A<$!cbpGm^TM;m z*O}S6ULG-EbniyT`?IeJW+p_vaOvh1jqelSn3F_>riV4r&hp{u=tIxOsB(Mv92oVv ztu+SyaX$136zJ81PzJ)|ePw_bJL_|^^acENZIab&v6A)GL8m+5yr#P`Py-_4dHNNT z=#|E5cHHEjVUrTSWWui37{Fz{4&cRv_ayaE<=3wkS3yklS7i(D#m|B!rhvcSMuEc& zK=^#J-K6e&W=eIZR&+{UXmyi1_zHg%RFOJR#j}3gWi61RruWHQU z#WkfEJ$w*NcU_rq?Vd9U5B9cgSA9{R?>5`+`l!3wKEQY{Jx`J+UGIEdP-qv8>I>n` zN1fq#35h)Zbe+foM|sGSBJkmHO3yyL__IEsI$en&2`o6~bCY{R{k43L4EN}dKu6fT zA31o@iyzlfA3u1XW3mRwyx*E`_9w8h`PP#H{(jnS;ht0A)}_1Z+o)R*UqtHlhM2*9 z39Rq8LBPiQSTj!Ysr)y$I^t#~y!T_n3RYkWSA*P%_&kDS;fn>SFS?Y~^D)kA-6Rkq z+4`N2W)xj`uQy)-j|pp4zrvBV`ryItg3Hyik>Nk7O}D*Ym%d;uda9x=pT=$!`0x|C z{JUg|VTm`x+%U6VOMd&lE$jFk!4ieK?CPBL4f#+fZ#jgh&YNbFl4N{9Q(TbwJX8@_ zFFqb+#uZMbzYw(Na$`tw_cQt2W)<8=y&q=jax@bdcv13F(s+Q^Hm)^^Dr7>ZkKsK( z`2=GwaHGzf7ekcYwBf;|KdFQs{pO+JMPjx!;eE9r$JmTs>n;G_9DHBuddH#Y`npcrYNz6xQY7-0Qh$W$q(K_Ad`k3v ztB~pX{d)qmy=>uG=8Lv^eM^f9vT)O1C2ZUS2T0v=w*es%PD!UulGt|g;+ zQE;GajnTaI9CYWa^jG+hZk=QxO+|RUHXrv`S$u7heD8R&ELKGYQ8%MUKEe`j(>7jk zuW#W%G|mAVjJ8K();_Fz%pgzuN8U1{S0>&UchwRU-z@tMp54q=m|QvX;^g0(VAhAe zp4H5de{HLmb`SZ1Uw&y*!4+(VIXKG{RIQEM;?r} z8@FgT-$pdw={p}KfKSgX)ci$)$xl%5mfPhD3D0ID0qH$HFKa3`JSxs<214E>rec%t^zy49 zTh?{d_uFSaZ+tg(WbjLIyw7uZfYlFf=zSw^zG43Sh|03O6U{k? zY#*=YR1Ku_JaoCv*=G3u(JktY`Q^^=Tr}7?bi?O&lJ$Oiz>oPCX%b9#M zPH%2TVr+!Gv|^Qci>GdFt^!X0NRlyiz4RnfmsYsGZ!}URyJPi@mNWZUdPkJwSMM$V zEE+EB02xcO(exJN@`q#Sk^$?u$b`Scz0%Wf))|#y=?speYr%Q`g?^0cHp@_M4WZD5 z6{NZ_o-4VUL>oRy-M!m~p2|G(i{{6F8^4K0hUC_M&@?JKgff9#&@eeJ2V>NQkP_ zc{YV4xbTB2{s$bK3lF{8h3i_-_&+j+xkGg$2CtMy_3xFYd3!oiQrRa5wnAY`W+76XP?Lp>A#v z-8aS)@l_$-2ACq(gNf8ywwf_oQw+z9-K;yHF*F_w8hXIiqrxAmQ_8BUhK?&@+>UYC z@{hGOu?$a$0SGmGkNZKxE4d0haWUJ{Tt6MML=~M`IJvlHW;DZX-uF}(YA%LkwHPpi zRJL=y#6p^blPX2>TpVGNx?a1kgR(xU5z8QK_v>=V8DOUPo|r3#j(Tc9%B5I$+|4QF zcagHk4L(pFq!^No|fyM$zvcw)uR|VE-w=i(Pl9gNyC?%446AB za@!#{M;G!vr$ml`W?yF^Af<*$eSqCB5H+wL^9Q*irER~aB!!`!C)F9~4n=vmN&2C} z{=3f$Z?;OSe?Apg$#B*EXo7v+Vf!{rCdYFA$GU$|f95y3_XC~nFYkvm*PDT(n{x%7 zKArc0F8;lBLA_-)Vr95o(pR_lzNRXDVejUBL*vFu=RGrrX68$*L;9#@&IV(~MH5p_es zn4&B8_`74tVKhmek4aNalR@tbT9(j2eY2+@sZxEInQL;ryzmCs=8MUQqw8x$s_l*QMDe0i?-9Xj0h#veP zmclg~+JW!;_YXs&&zHL|h^fGl9r(h337K|`f0O|;i>{bgPzvX5UR4RQI3vcbS(SQ`qhoV zcN$#R7z<)iVIp=$Jk}!VqI2cqsbAB}Oak64s7NmDfvIWn0VqebuVuG0%*BJMCKQty z9vE^IZp-=iUQ3w0Q#@hMv$)u<735-YePML%-_@L9+abD7O?e2z)<9mwU9T^?UYLkk z$03UTqHMj*^gr^zg&(R;yI9`X@}H~sn_pHnogi!C6a?vVz_KzLd0ve>sy;b{kNQ_l zEq>PnaS14?RL?IUCZr((@pp-Q4*b4$s;$ZHf*>gA%jWza4MP$9cdDwBPw#(2X?W3iN6KC|A8_4uguy_H@LNr4_+G=*Yd`O zQH?4!YS@52j|fk-ufwv{w2f7->2%${l{L6|tA;9pP$(m8_#k?Um`P2&*o*CxYlIJ>)b z2iI49>V12TRuN^tlPw}%9!vnKKhnR}Drd}q$#%sk%x0$hVt26R?0Dt7G-BGB#WDwC zSETOxV&BPK-#Er2sw2T+x;e8S6B2qNmR4f>8rpkYd?20aF7R%=dVo8AclrW z`+vX%Isj5@GZ5SwPtQb0#84VZu~g4;HG^E*8yAB{VHvx)HzJ?%-uY-J`hggB9rq#!(vs&PBr zfKyxRHq*kQAz#eSazQ(}-k2lXLnB4Y@=+DwSUc}=RTbzq6QEUP$|TL|X7!L5scp0U zE6MM7VzBFvsoxL+&C8e1i>)*RdkzD0UBR`~Wo$#{mW7|o^p4k{q$RM4c2?;2>ZY{g z3c<}$f-RDxy|1bocUq~zAy1NGm|7_cdN{(0w4-yHSm6UH669lDtbmSYL-V)(LmuNq zU4gAN#X}M6a@<+mkz*WnrV3pC4wpl`w7d_hR%06d`6)y9#Rz zrZoYkr{Br27OIT55Z-?^$IIt_3}*9Qp24#-{LThft0crb0qeg85aO_g`#*6o_y5Pi zw*M|Eg8xdL{U5{={%6f4yU_3kLB{P7p=YW7o-iLs+zj97z**MH+(z625q+y(!C_~I zlm27p1AauUbmR0MtwDZzH)E?hk&lc95wUx*1=(I*&UL+^Y=| ztm{N^CNI;R5%s^|j&!q5*c|fh7YC+w=Z4O?!n*{22{y zU_^W7o=>0m`|h~9mi&P7|A(3fXgNh9n{hY_uXR;cJNYqMh3p@mFEgrKrX zqQo5~7uK@_>3X>wY+VmWCrYZnVG3B$4agb~iD+ct;PIsi!dn|-N?thilf=`rvj?4% z#OgVD+h)oxtbuD3-BYrunb!E-`e}FmvQBR$H^j~hKK1zx820#@4vqzXHS&<&`sPjxi;}BniGa0dL~eBzw01FQE6HFlu{N^V zHHV$u#t2InL?&+ggpP@4&+x$F+@`N3>2YMX*%>#n)HsySF~uFe<)JT{08P-I$mLqktX zEHn>C2Ua;;ZV9a9WeFb>6r;#H6CUiUYXlnYwJ%?_aRCbZup*zJ`y8swv3!ymu!gJ8=R|Dma#e@uTKyg7pL2* zj=zaH$ZUdfg6F4(Gv+Q*nO?(c4qI}8?$gGwuL%yrl8&&*hA#d0t)ch%@5V{MUQ4g% zpn#)#MhBEC18?w zdF0g4LWd3&4`M2ZIW0xdAXW*kpZ4gei?GGCu?E^rp{eaKiYm$iG1=LUOr`q>^Bjo; zTqL+o{^}I)0zTf1sjn)&8#MFt@%&s&0Yy_#`y7`->42I3x`T&9pPhtY8%$({m&osHrj{0f4}`YZf*$+( zaXS4%R(KU!lDt}a|3{DSI4CQonZ!)3ETMj*;J@zcvuksq+$6xjMFDaNDZ#UYxZ`wY zF<38%jHTe&Syuvf);x)a0D`!qyqfkONd|Y@XooiTKMq#x4Ot)c-O9ho=(NK%NNY|x zj#pIVH2$t6JE+P(D=9ov6D)iwtwrW2VVu9G1A9VM#h?*A%STO9U@^tage`21)=2kv zdUC;g^N4?LOqyP-=$+?h!UPn<;9lgCkfCu52p{7p=WvSx?n+3O)zgIZ#3@*Ak%nWa zchE6^i}Yi#_JCFWG9S-(3r9c`TTvwxI@-7l;*3lF;Z@Y z$hn>QKyCvYs&kXs#mq^S2H!%>!LJy*u0U}XB-%YWuu~E$mZ!sscw2BaTJ8218uJ=x zv2GMis2KNtq-Z)=>^E{yz=*f-*mAKIM^e^Ya``#ygR0fY4VR_)DX<0RmP?;st^M#m z;2fkdHKh>~YzRH&=;JmX^e9D0)AG%kp*Ov^4-7=&? z#}#W9?8>`RhThFa$EypG+-4Ls)T9G{!|~*5yFMn3NuHs`X!a|0-!B{@YH3FB;^|0k z*_#Q>Y)8JI025gZGq;$g7!{P_p+ts?kC*ALP|3^jOh4p|NmRm*7>;s^&uLbnspzAR ziVMk<(9G+u>nwmUZUPgQi&0$z8SjHFHplh%)(7^dBocO|3J#%yTo-U(s_{SXKP$e( z`wPHBDMuhb&=%5l(l2sXUEAbKg%A~^|WXbAv0g066 z^5SIgTwJ!z z2>gG=q-~!B$AQ&SwhEsRTSyuoRlt$<5__b9NdI{^b|Oxeo3|EPq@2$DZTM zKn~3Vpxb!S(s}vbwc*vFW93%aA(Ya9`_8OglUk#b)cgi_3Gc_(s;^{;MC1SkB?7~9 zqq^&!E9gv+B;vaM|;B+||*19S61-lCp0J1~ac;E;!rhBaAo3R=G1IKs8Hw&e`x1ix+n zc!TgrKCcqK{GI3-gt-C+c5F&3BpgMbqbOY(pPZS&Z|+=a*!p^EFS{RWgu6EFEmLJ>C*RSqO1ASG+q@R1|U9arOYA>hfn^OvuhSjqGk> z1tjOYTb9ERb+n_*8A_mlH6*8|^rh}Rb~>Ak7JtU)R#n7~E`1002qU1g5>k<4wGRv0 zDf&%8!3}HCYD7#?SF-p`Fye*$*cjv=NYG|3hZn30iFQlaTO&bhRnZ1C&;X)(c_pMZ z2fW}xLueqOYp15$$hE_mrsv|W$BI$h;bn3W<>dB*;f7+~nI$hrD5SYxe)*jjy&*0* zT&BBy20qIBn;C=IvALC?rAW;@d^0!ibNJmboop}8c$nK6cdbS-X$CkBO+~WW4ByW? z5$qN@4Mj+W>UZ4KL%EGbNm6_46LGc}jZJBs80dnNk>jk{?5Yk_@Fw^;8WOQs62hWZ zf2c2B_cg5SM(pk;7XQ)67=Gh`rBVSAN9J351=*Q-K*Wn&yE_RKRA74Uo4`39t}XzE zUmt)tI<9#?X``#O06;!PpLIZ)UVYTl!Tf12fh(-yJa1S;L?IA)X@?W(Pj+Z48m>-~ z=b{g_!2-LyKAn@Bn|6MPpxCiMuOQmS${ySz%yoX27dLOC_;}i5jX|=Yu&8dmbhgfMZ?H1_n?0Mp zL2q2<#|TtDnLj(hjMWG$|XS)Q_4LT*@EX*3u#-vG}(-SJb04 z6sV^1{9!&30R`*>CG6udCpk@y<1sHJpM{HAJr zIM#@Letv;KgLz-hROs%wD{+yLuA%qc%;HAV?-k2{1teGTgJ{3R1}7$GPq<^4UAGj2 zarvXg zUOh7(Qgo*!s|mW85FLhJokuK)pYpw#fJ_~P`o=~A^y}-{1T$$x8_Z!+SL6&yi?Z{} z;aP)_KAeQ32S{^U4KUlZ*(mK}Jio|U0y|0e-pLhdO-LZaC5E;UKa(p{(jnjKWC3PJ~J24l7o|21Ncoz z;m-Yu05flRbUtpKKET-jS~7Hbx;%Td-v2$ixFdJH90hNaFo3jq%P`%lL4_nHG0|O4 zdkritoP$VH_o}gU5b%~TBdc560vtE?_$QC9{SC5SxQ)HN$v(?g6c3pZ8*ghtrZZRd83phUG55dAQ2Z03hI@RfX=)?# zf=L?C|I4I4Jl}VNPhL27>(BO?ZyNuP?CM=}db}?JYgovCzZHD|Jo4W%Re%3~S-dxe z)w~wq3Yvgv+5k@4fN5JGF34!*KI29hE>*(N7cfcFsvM$Z~`vaBVFlw+qW* z86#RPXwc)K&V7K$gpB|(eZ0|+2L(n>VZPHmjy2bWR!mf|tqfTuM-<`tKSZ`mFE!S8 z#F@<)d#pR3aBp?2cQ9@?NX?+BZi?u7A2DnuNWa*2b-Sy!>SWs%VIy}3`xeX{cC0;! z{TYUhbdi4|r_e?|Y?h=>j}Oe!c9VY6wdMqBJu0KqP@CAHv5eDd1GwFh=G-ieTO zAtDM&!mt9ltnxxQjf3uHniGsZad&fT@JkEFvZeD#F^3g+@sV+{1M!@3Q@3QsSgSLf zgTozt8i%@1m89b#Z4&fb8}G9wTqp#NDJ50^_BbUs9OKhGTuVmpxJI#*ee_LJ_tlf$ z)KTmxVD6-Mvl5TDDFV}sYT~Z@%1JCsU=?kvww^W*zX`oegbJJR`MSAyTuv>&_S`Nu zCZ`?;!E;qbHd7leLp)x<1YZX2KpbG=;)0iWz<`Xr)F*u>gweESiQN2LP3MPZev}Re zVYTGnfrHmx-?iJ!joaj?xy#<~{O)az){!<$L)p`t29zhuH~eC)+ze}EYdd-*4jZ|I0~c-=|gFN zycjEoHOtS5lP*^a%~x~#*>6a44#J~t*{M8_p6Od0l`-~Z=yqgf#*pAfAku;o$#IUw zS`}16eG5)~mGg-zjw4P-&sqK6lflwe zY$9Jpc@1u^5XN2WRZLiAl4vV$ZWp^#NA@}Luul{JPf(y-+^{x}C#H`lXk=;P@U=v1 zFn9kOWqL#jcVci_`djB}=y2;&f==`F>o3N#M*^0N~-plqtv8##^ zN=%(qGI$o<*<(Bw-rU~HE7t-M8e3nG6JMyyXiU8s{^nxe@0$DkeP?&FdH71M=D$ni zppm2bK?oLC3jADC?S8m{Vk+@D7k_Ja!6=c-1B}XmDWr4FG@r{GG)rboU}2)DFA79_ z(z5KrtyXn2tQ71a;EapsAP><*DlnTrQT0a&?zXSoOBRnx3QG%MxI=)`&u@jrhE1LJy~OLVi%SU+TvBo%TDw^?l7h$Z)kCAg6g>84<* zoa8#4$cqaa{VlQ(89vWk4;!9sQw^~ZQ9xd5?e8-MJt0O{Xxw0%>XeL*6VTHfxHxKQ zh_=*g>hP0oE8;vH#u2tmZ%tc7MT!Kow2hn`UAU4EMXQv-QTZ@i&o(nW6vJQxM|FkS zz{3f1PeDPks&PgHP(!Z~(qCrH#ZMAC1oXf(Q?|YA-f?ml8OmQPdp`g zfmT1e0V)Ev0zE5pa6SO4qmPn(7?egDMql3=g{sb9c65%OyCa|`5>c@MzDKf9_S`|n ziva2tSu9pqcjbIwR1EC`&&tCd0e6j5J=8v0YvoVS+dE%`nBQdir-=bHrUcVeEKqY68pmZ-0Og_~As-N^TKgXeX}@tF zP`TIC6%Wa?smX^zd;D;U5VRf!#KvTGH9NqI7;I@Q#x!cInZ*y(if{!R8DTU0ksKod z3_?TZ>RAFZSD==KMv7=g+4;FRYl=ggQl!%6eO|rgZ~6Et_foytK5P!R)(Om~MykRx z8X%|U7Bi|UE|L!mO2;^uK?$pIZ(v)!?P_ew*@b6Eh2Dy%WWrezAGOI>3E}M!T)9@N z$%DIxte(=GGEKMmbys(L(@bZT9la^C;(!kK-__0dTqu&$j<5RfbK$I^!kvrx zHjzHK8sfB1%LZ8Ny867%(oS-)*!7qr;hY)h_2815l8$T-6S5~`d_6M9*W(nPr{vVx z--DK)Kyw>B?%d9DohUH5uG?}laeDf9IfXUh&=bjIW8(tC&w;6}K?xORAk`f2j!!VN z$?G80C_;v*^T8MSXQ-V-dR^6*GNcS)BR=X1+24=cOXX*ZGmu-$b?vnDo`sL~?!tdS{iBOQJVd zirKNH(dQ}SRpNizpiITC=*>nFHRbOveo9QGs6Cigj1GQhG0&CFEdOdgaCFPYp%&Kj zf>=ZYk4dE#RM6m(V2qVp;Rd=8;)8N1)q{-;Z)bpK1X)X~ZhZpELZ#CT7S_=rL5$nW zzfH_*2ZVNhGaMW%AVNV?XuQ==U!))5lWoBby<%^ol|CzH(JU|s+<6J>eY7?DnBCx zd)ye zCP;>ntJ3KWM^xu94A~Wu9?D5wS*hn%j-3;Dv>dkz33ZT|DUdri0Va;&RkdeHkgh zVK?%MseTD!Oi(51^pdPDL5@C&SduC;@5#n~Yj}m9)=Bg$q9fC@E=OaCnMo#eV3k~> zkq8q|Ri;Q3d5y*{6Ur)usH@u}j~^n`hyfE8AUOn_BH&~JZf3j#bfS8<&$%TI?8t2} zetIaO+J~J@DQ#vkYyn${RcCMo` z9}MoC>9|8uJ^Yp~6ixLUW#8F;Tdpr^*|cS$#7T+D=_`TiqS=D6Ye=D-rsU}Dq8h#70k646=q}G z0S$FtnITIj(N|VTZ|(TOX#SlHqIG(aAsCSE8nB@#J5(enqDrj(78H$p zhgqAZh>Q@Nv)%2@KD>~IsuWygv>GHT%by|bcE=6}?*c+Zp@{#Ok>>jHQ+y?_C*c^YQleXV}aTzM`# z6PT2OyLr$=F_m0)r|O+ z>WZJ!1^(=??F+?32WNQhIW;m`VV;{~g1qH$MDAUKHNS%!FE}bIy<$w*xCF`sNXmjK zvkQDq2|3z{qIECRtz2eY;3#ba^Ve`GmnAX=9@!Xc4vb25y+fAdGH=r;=nOfK~p zj5w&XZy9iP;3ya|-}9v1g)9n;xQnBY@=6+EZl7V2KRlL;K8-DM5vo4c=7y9uvPO7#wj^=F7H+l<9rU)6B@K#PnOfNAKtOc`_4{_TpotxQ6?Pxf0wFL8273uVp znBYGS!9!7Q$WJo|VzzM04MhHI4OsJ6zFF=)b%oXzFYBJ%!FBd)l69eIzQ!CRNYeVf zxZhUg>(FM2ZbKosuLP#-bT=%8Z=fw7Y07v=l29NP-0I7^knVWKq=OI`Un;E{fh9Zj zOFpeIsI&w*x8U_mutcv+FMDdc;Uxc}y5B5t7T-e+f>`!Kk4yPbIvRBPB5Y90OtTOULfo@16%*rJHpua{V!4TM=0(25%A zk^ZsvH4cseDCYAz&x34s9IPOuO?YqKSf>Yau748tg{+>!ncuyyUfeWeMYfMMou3*M z$O`+HQ*j`8+2D$iN~9)5HMIEDOVu~$yE*#F_YzU_J}SgQ+k|jR!H{rJn%(Y5X|+Rz zjm4p8hbzU8ng~b`ZaBP_iHJPawR1?}!QlNHO2nvadUkp$@0$Qa8h6o&I^o=>`zEZG zvSq0;bIhQ1iNFEl%>ASC*(~U?M9_T=VI|4vSfVb147>VyGyFK8rVb2~S~=jfj4-3A zxZ@A|J7GF+sHGkNSq0*u`&r;xS{)&Md&J&KfWc3TKfafrq8le;Y#ak;QJi&xyCs#F z>xr9Y*n}t!MuzV<6nn(kX|B5Pnn%oh|SP3#;L9Jj5^_K%W6z3ZA8?6G8WdWmseH_ zaw$eMR~sgeB-7GP=vC(gk19ZwcY49FCFSNAAWMO<$*pt$PAnf2i$=>Wkq-$kr5%^! ze_n+SnWl!r*G3IW2}CKctkM%$2q+6#nGL?K912f;w=5nkluJjAD$Nv!afv6Ws)w{f z85u4+^OxZZ=@-J_EcTa>-#4&w!Z-ssImR0j=4F2i%ZqS*v8NUZ(uj$U2MziP4wr>O zmLjr^6KKD_SDU{#*VVZcwbW!RL{q707X#1W6mzlxDaCr7QOF3I9|t!TIkP=zSfXd2 z_XTau#Jr$XUP8^*)*PG_g4d@L&8z4DJ6Wondyp2CHiKqG14KLWKtelu@7Jn2hEL|z zv5I2)S`0^sNND4r0@9+>W1;;mAjbS*i!IOj;ZypLh-z!N`TWMQNjR}aqkm)ts+reS zj@W0PmWt@R!yO)yv#X{9xOXTSi@hXAX!~R>z%F!X6VU)SuPp0*Ac18aIp2JdpXZ`HrPIPv2o{eqa8w3i0#np75-vVV=l4p%X7OiA zJ}wbTJI7b z_idQLRos8-uH^_{(td@jEyfv_H8wEyM2tAF&o?^KA2Stn09lw>fn`q;jlsnW8m#n2 zHZIC>w#+C8;5;CA&#M^iEZiOCXH)SsA>Y*z4UfrZx7H^EH|xb48Rphj;;!77Rfm#; zLlnz&hA+_x=Mw9PA5?<7*L}PVbg$T+Zw=rH#hH0n`(!rc)?>|$;nKHSot{Pd<~nD*#a?Q&RsIN?3Bp&W#o zw8%9&4;Z5+e48)%sbSk78Ub!Ss#^;WZt+`bwDx)=$Pgi6rKsLSP1HgsX1|Dutbqqg zM4rWbHar078s>SCL#8akER5oyRf4I}B+jkdbIRl^ z2WX}6eD%d7hWRD`KsA)yJnfufzSXg;ko zk2@%yl$|xZJYkH8(L}lP*Z$*D2+6z(vB_Z(M2!3rC$2+?Gm6!7z*@1egA{LN$0M~m znXw$E9Y#Y(Sa&6ef!CkS^c+#HBq@J_Ho*3PZ-AL~vr}VORu(3u{pM9_=jg0#;5-owvV;o7BtI>h;nlz> z%-Es@0-~CH?$1pD#}eUXE1QviQYD~|Exa|sv#g%-hs2;uP@;0TfQpW$ENU$!h?DT0 z8%1Z_Uzxq=pe|J?ICw$NkKAhMi1a&$**8SVtMI+OZ>C?7dZ4GpO|Sx4R?o=0Whakt z4Yer5Dfe&BhFd!`Cs#m`++37ROtgFIrm{WY50fF(Ov&1oC!g?2Q}(o zU(?(eTDWUj|2U;*V24f-aw8kR*uDFZ%|QpnP%C6eG0Tvn9rp^9r4+Uv?pW{gm|b4~ z-Avr<5B(Id)DifaOT9mQC%44|!=^Q~`ASV3or9T~+Gp!ScE3hiA8*9Z((&6HihGvH zK~`?d&!_{8^a7Mo-cW3UuIH8&Y%Wo09+_03I);!3#6%-YP{n}^Lxl|djEcT3KghWp zB;=-s-1@kGn4byU7*$tQF{i-+RAhs>R>1&&iXz%NDMUs+L;Dc7Zn)bG)}h({0N8qv zB*)1WaiT>6d7*4tNTj{I5ekhiQxGmC%EDwSr`90#G#?#{pKe^4m9To1;|DMgIJBJNT<<*+p%?EdoH1hS|-eU%Z=lv^V>4W|{RI{>x*;L5UuJOs1nxVA2uOM5+T}Rh2KCUVCNCZ9z zTcB4}7}OAF?Ov}fk>6wJnTzLd^ESGaUM)Sk@dCXKO zAtfuv{dtmiH@FC%;{~>xNYxC4eeG(D=mm5 zTx%}>ryf=6t)h`AYg@oQDyrazmGxWeREi@?Qf|85j#RdqUsO|+x0s6U6}S24Z2gBu zqEzB&fJDE!M6F!sPvQVOy(1`%dJ_q4Q5Wt|COM!GuShSLTB9g=9^Gtvl1bptB1DsY zK;$qvD?ci2kC25;U+;x559UOsm_jG-)agJ49cUMc2uMccK-@W2eRxdrB7a{57KfWF zF6>Y(ksLQvo0i>xX+0g~KY_S9PO`iXMrSwH!ZsL0&1aYf&3Zz=t=e;Z0OwBC?C=Ma zz1Rk4!V3cl`KRmImmX4X`e0}q#<(g%8U4?$AKnZv5JY|5JeoT6~LWkcE z)2>41O;>nO%0p@zQ9?Q-s#1@}B z7jpZKhCozwt51}WyBKoJUgM>S#O)Go3z#u}1WQY3R^1&{i}>!54XTmipkRO*J(YmY zKMe9#gegI&Yoh`b?oH<_^3me#^cho8P=oy}>wC@CRu7+Be?i#h_=j>QMp_qY}) z*v3X5piT|E+X)KB95+>24IPzA4HBIY(=bzU z!G}N#HnpEu$DOhX2aKpd4-F;m;A+53gwx4(n z`+g#BjTp#=DM84Jk_&x#M29ii=rbRZ9`5} zCkL#e$b3jgv}9uZri6~vcArQ)3HTyIMS@h>y9cey;*Sycsy2FZ0iJ%#c+!F$@UH+j zD(Z{JUCC3P@&&P#^}@(p^|liMtubZ>Mhle&@;RC1Cy*S)K?CV^ja%=Rh9R6g1G{$| zN|9~l=m$b~1zJ#=5_SS&`9p93ZrrKIN&eOs>lV_+l{dxqgYSx(kTw_fM=PkmB8r1(C-C6qVlauq!SsnR$spvy1CZ7FH8q+lC4Q9|`^y2)Bs?IIOw#>J?- ze!{yrPI#*bHMKc1%k*e}VgT``{^|?zq+sF5Xn?JUN~3#BhYj`npdQHbv@1cx&|}Gh zRQ@7`dq+Bol4xZ*4;3ZCy99=ek?3{-I)%frMQqM(?lzr;sc0qgo1fds!dG3y7V-aO?AU+j0v zB1r3%gMpLfY7#_}{~{PUx3* zMjK?csr#V!7{5Pt>LAVpr)5cq<9uSQ2<=dQ(7Y||4PR2L8oX|Jt6w3ky(&dcg(33i zw*;3eJ&9f+bYg*JdQA3t2XOHX{Hy8E*cURL+h*S;A{_D9?s$htrz`8i068TJ2z0kJ zV8ljH2uzS14XUAMXE$vLc~@uiWVe*SFmiox&lGF)gs1dCt#R;y%}5v$4(#8B7w(iOH|7N3UN4X9k5;isB4O;< z*Q@VF@3DfhekE1E?^j-H;3dGs_G8{OKo0}E!+ugr%LWt>BUTI?C8Fmo-%9EsrN_(& znOs8rVo5Vt@;DKuf8qP7iP+~y6Wq7qucl{apLB^bax=rmY{Eud2Y(~TmhM3p?LykA zrjT}fTdR|__+?jK8-4z`u~TCs7AO2V8cHE=9x`m5yuF!Aqn3)I;&HaftRenaSjl?4 z>1ku-(JHj{-`7pg^+JZe%e+o!3lFA7JqsV|fEP8HI`%*)!2WX~+mz(J3rRf=N(6}z zzb%dD`&v?S&r^OH+)lvjtC)1DP)E&A^~fdX+)|wHr2bix9>$N4jMbo*HPz~yXg(3C z>ojq}Cu9b=YhzOqn&N+5sQe&e^yOf0;oK}0TP@oOY>4aYZCxgMrrR>;e%V5Ekepw# zXyMirID+L~okcYO+BJ?Y*$tS2IOPdF9ujjXq3mR=yZ zeAm~ngwzEZzfY;eP=RBbO9aF~uYx_}T+?US^>+Sw{Ac{~YOmkS#J4HaH(SS4#ev0l zeGkQfp^sagIRD{BZ7}-oA}NPV3dp2#Y%drrU*G?1uoq7d_I%PgC9T0sZ}*>`)dr&k z-Gr^a|7NTjXew9!XB?67{~gk-^tI>W8mXi5dF*lO{?|h}miFggk~OYGW4>qn z-#cf&%#N1EzVHw)krtTxFVbr$An=LCt?*2Xddc>GFfXxdHSGU>wU#I-&Ien!AH}GDywA_{=(Cm#B7gam zMV}iiuF$ccch}0oUPB+mKkk|qoZm9p z-MGHh_LeRoIe_EFqtpC{e+~j~wz+Y1e3H_ zx*6HL|IX@aQIolo0B5~>#OIkY>sH&5<51UNvJ(H*ayRlXi?q-e@bK_^3WC>9Qe@?J zK>koZBd}~hc0v3{NA-LYy~w5KYVqm9jdk}=yD}N=QF~q+YipWprQ0Cnuw?u1IX!}w zS)}T%##X{-Je~FE?BwmH6B|V`!ORP8lg|dh^WPVaH?z`$dp$(0=dr8Qj4X@_`GP-L zBAuFWaMvV#EAnEU5syEX!gOB8E}IHJd=#xd5!$UsnZGjohqGX}rJh}7WHQ^Yw2pOP zJve_S0bLI{G}rqnP=tJPem*pKBI4Dw9qWYS+;r9bxHzY9YwIGe{E}g~XJk1f>b?kiZeh}|AF_YIGS^LVWGpmE zlpG9pfBIXSe6x~VC z1TY#-$RGM5mee4p^9?THL)m9avuV}W2@8!l;wYk}j~1g}W9l#ORE}3KKdL;7&uPcO zyKsNu2F|NwsXA+2lr{B4K*^~|FQam&6Gj&<;X$Sr;y7#yELLB7ruL|;Vi2L?+N8?dpcOJ zrcsEa36{foj9c&PwdF5~i$n#s6>(Z3=38)5f^9e|WMLGaD|lP`6mG-UeWSr?H-xp@ zb^ISuB2OQ@rx z;Zyr^V) z+pf4nHm;&vI-v&&eDtB1GtP^yuUFA)@q#zO@g+B>MmftvkF7`tnj^sHnUNDs;YX2d z9N8RcH@ zAS)kFxWEoNIero07b8}qxfq6&=~}x|<9)HF7C&Zb${w#E354N5dI4d>9X@&hCiy&? zSjdUOq}y7(*d~s>oB#l&c?D4i*CU8Z3HM`QVxncX3_0Ju&M+<&>y?UtZ@ejHIFzd~ zm3IkddMaD4|L$wkSVYwbCb!{^Dl8Agr+LPFuR}!OFG;u<7e+>TA~SPB=%wqTGF=;@ zUngs9OV4(zi}XxLj5k&KI@PhF{L1u;H829PLbd^omjB*F5+6qnU`ry%hkpTWhBrqW zFenVs(sCfZx5sJ`Vk%INmiy0CnRQsMA@cTLsi#;wzrEsp)f!v`Z z(c8B<}FRy_|LpM+W8$jB^g`8+fZ ziJ7Q5pAN6go07??E*u63szVIxv}51>Y2rGhzaje5mbpZb@a9d6bvjZ_->YOJ(qt1~S<&hkmX%vz_83$o#C5eQw&kQueCh_zMqZT4+ zR;2&{gjGNn+E^otSqDLgfzunjZjuzXy1n;CfFwd9UbqE}t9Io4+Z#b`Vw|`Wjxoi_ z`*VoabbrSxO1>?!;0++$yfeP~1|)Ktvq4S`!RnS+icDDnZ?t(3HwP^wMH7`yYf*cv zsd8{xV9DDAa-fz97*Ty!kl@VD$_lSKo{rCwCLuWCJ+>%EmQRz#0Apyt`>i%746+bQ) zo#nSwx}L?RtMG$wm(Ca3w4bnV+a->3Uqm@kIciVJFEVEr5uuOzl0N0%i0E_oJkVHY z3H+afbe>dq_CLl3@PEl^0w4qs^76}#we@f0ZxL4WJ(u%6kefgU_Zyyr8^3~6c6k#e zTxykQ4_F=6&{lY(bX8k>7K}& zGaIwON5Zp8HIK_7bTTu8gD7)lS8udxAxsGpmcCK8@UXQnlkB8C^;X}8!Ni$Ee0m3p z^irJ!u51qSsqb?-$y7m{IO(;_1zgh9Fang7dvg50PYd8|W983^e3%pg*8FF)#^#V% zZgcq=8R@+NZX2HZm070HyYv0_H_J5nDB*4o+2kX0u(WtKMZi& z{s#5SNf}k4@rmbIGlD22zN}C28i3LLlKnC68f9Nw)M*RIH+MrKHa0eV%D;SPO6j~h z%*v{^?3FJ^_nS*$RK{;m1wdqrn<^T5eKH`~Mf2E`3GTw;Qryf60y1+U`AuL5l|8#& zE_oYOwkj&(O|L&j`zmI6oGTf~1ZHaV>h=iy>XOpdL0cTSIE3b_zs-Z$v z9g3}sFAa^pR>e%iB#>PW80w;rTgq$c0k=Azd)htO0o(_7@3SjrGhN8eon&lus4AUI z=5#DWL5p-gP|tFX8UZO%PYjb8AA+mEA1s| zY|Dm3YxU>2QtD1ILVCzzr>{J)eMz(fIPR}Kz=kMKA9(xt71psjJ;;XuUe26a^!#y8 zyV(TbtNaLA{_s0WUX>WAyi*oo4Af{teXR7=%^c;ADCeD)u^gk2ZplCJWeyz`kJsX_aZPhb7xG`54^@om?I^lr2qAPj_MCl-06$5 z*Jro*v&_Al-}4)jT(QjS)8KdC!e*Y={`#9nIk|mjEyP*1ggMsfAN4XxqYd5MtfT_)1VApv-bimD8++q zO+2gSMsKUWO#uG5nQZFFu6buAW(E`2d=0R&^vYu%u?v~$i9CQ%g5O%gT=~_8J*zRe zyJ_%>KI7@e`P;dV7gD?Q{rkH=^RCDuLQ+hK+q;XuCi7R7^s^@dXTGN^;&_@SEr$!Q zsq($ogZ6%2S>KB>^VxzqepkUIP>O>6)2z-S5`W3&OrQT~p!!de-QQR^CWm)7%fwxnbSUxc#jkHi%Q1w~v{wT%vleWLF1R0C|yWVQ% z*(2@!b8n!-k*{rA34SwjvYl%ZaFI6-`5Y-_>>4rqVzM@iY-cu;V}WY5%~5u?@QCpc^}L9lw2uH5wZv=>Y7EgsGU}5MCmW@JEn{)*P(yCZmlzfN zfG1Qd#)0ib51Q?sMD<}itOkdC`sCHPkS$GhE^rAjbz!{!lY!7#uh%{Vm`M9@wU>yr zLCj`)etym}l~h>$`L%eOJ;D%B_{l3WwAuG_-&yfrC-2aw?K{k0KYdGN(Xaa_;y*_r zC3~;$T*&ON1+`V0$D}c&b450g9^FvBsIXHDu8qV}U_r@{JI`1eBZuD5Nsw!v% z3)|o*g7(HN)gRXexZ^~l4PxtInNj+c8RLPse*j2hb-5SGaP zvP4;q!Eyma)$9X+M8<)W>!KPK!gc^8`nYD9`O~}D$zfD~$}>m{G6*E_c5}hLV#G z*OTc4f$XE(`7x_XJLEc*Q;)r_D9FZ`LOo!gS4u+C3;DPJ@-X@}Y&*sv**|+=Ih)h3 z#hq9>z=I%y@>%5Ja<48~ASvY82_=*C;!R#i8+(2$7jL-JT%C;CoSCsT$NNuZqrIZ_ z73PEEzgbdv9RZJ7y9Dx$Pokr6HyhCAd!-57f74Qvo|k@?S=gwtxE^(qu?mU=sF9%J z^+dR?Ic1%4pbiO#7jTGo-;Y!y(wyG&yPX-P5ZIuX7lGgpBgf{ z{O@iu?=3_x)=dV7l&oCk6E1#yg}k3sa9Bpqx%$#@?H826Z0o0+h7mQxT=H^4F1i&O zyZaHcELZ(C7ZN)@!r;A>Zs|uZ4BxMJy|qn%S{mF5=6pW27kHRKqi^Y)SuRR?L1Qa1 z@8Yows%2Dy6>gsZTDhbWF=BPxSbfD@2*-XIj9Nl z(I*3e*O?NE$Ebs|DKZ|kDQr2 zTK%3QPH?Avxz@@ZL?JpxKn9$leW)lK&C#P{lt9X@^!L&S(Mi^kk@GGCH$`#ZD*mHc zX1a0RkWmVzXVWeE4>7aLPBdWHK|41$rW#Jjpwl-eT9}FyzYzaj*3MU?80KK?jLnCo z#=}z}XWUL@%MKD*Vge=_zC;X)ZD1$J8EXP+x1s$fCuF(VNX1GewtjY05vL7^6GM3C z3%@XcqY^XzB`&mjYsn-^SjJ{|~PfRopy$<2hO9#<& z7NYCg2B~O36*YpWhe7EtJZXG&7s*9Z$VB31U-edOGzjHpd>mK|Rg(3`A+$&+e%i$G zcj8zCvY#cTkmarR+qsGInMUz08%Gv5c?k%;EMdVYpX`{#$G^^sia?PRB@Vn?2+MUx zImr8N1ez6jF<98Ai#`C6s+Pm%v$=Pi3@E*d?*0BAsv*Xl>6x!lhrPHay$=cs8YvFR z-y`lci&~kmJnY_ie$;vKok#hI)u!ZN+A&xv8mkFY#PGAcZMjXIk)!2IF zS!-jQfXGOmjm=jm=4#gN6DH5I8WRlmB=CxMa;%QH?`p`$b2B=Bx?kG|^C}%7z?1O4 z0#``rmOA1NyRd@=XQ;%k*e$ZiH!1W<92H|Lju6!~`Kdgea4ba(X-4{eg0oRI57)yx zjR!HWmd%%JY*5OuV&SKl-yv>s;x*&pm`pI492U&cQO(`VJz|L^hOy-_xv}#T2S@M~?Kw zr)o2~4Wl{DvKbq0@=LYsv_AnL> zX#DgOWk|9D(-n9mc76jrB{5{(bCqFXUzqzHr-Uk>duK4W;z)$bcx}>_*Iht&{dp;Y zTCSzz@*71AgO9gCV3%sSl@E1rxLel4dQ=t^3=q;~*umP!(rE_lq{e!z)Spx&GQwk_ z(nb;pNc@8CNXLJHsahg){)6HqO4t}(esWH;Xtg9^B((qSm4}uM8t37 zYsYXd)`YbU^OTPcB?vul=L}4sO)=I^Zw&FtQ=?NC$&1qw{g(~e#Q{WYd>@Uit!F!M zc}!hN7-BB^<=0(&XBaF50y3S?XWLYCYOS8H8DyX%jC>5D6;Yow{4u5e@ z5q-li(2h0O028VyJ&cA=9w6-U+17*5ySX`I8C+Icefp4!Qxu$%lWlP}hu)Dvn>8K+`(++1>6&u$w=kp``*E^t51I*hofnpqce zR(CI3`zGS?4JV^PFj$_RY1pAbcH*fEw>+v7xGwWtL)yCGvSMV>M|b&ks*OqVg42Q! z|JjDexW2n5d~uPunv>JU#go#aQ}Ny{62b`cevt-kjOF4c=!7Y+t>;d(D|UmRmrr4%=eKeTz|hZs zhkfzMDI?0uAzy6hJZ_&R{BBN02v5>Yq@-=C26o_-b9ukyC1fQ||ic=y$k;D+Tlyy{=eqv*rlNJdLy;G@7 z1|(v~+txRrM^}uoOsUGsdZQu2yj5U_x|U6-@~gU&dF1(DmHF4)WQa{Su-2?F8xC>zy(mE{a&CF){2fQ+kk3aq4%1+jE5YKr|v=^m+uA zBP(n*pPH2Cq7>Jz2x__|&7%za>8!7>208@7&kueqb7-ET;K8DJ+#^qMC4Tm!=n1yi zIP1i14g^g$1NK33qD>1g0;V@W@7*&fT^r_(q5qPeh_TO=_v~0P86lS$mA55@?bG~@ zRfvk0m%*5g>1eq)N=wVsGQ*uTb1&qE{`FCW$VUtAw*7HJscMExYyEh4h{d?}!@Y z*9m7HqFa^ST(Vo3(}>*sVjQpQyI0a!X6CW9?c4|X!*sGTl-KWd|L*M`_o?aH^t4Uy z9pbI!asF5;@he|b%Y~uiBX76x54f%k#u(tl#|-{JUhF$L(rOsdQ`bz z&q+Z%eQu_N2xMYB3H^}Mp#;>ucQ3jl`{|?78rt<upjFq+2sGm@W_BC-i$^&Lq zUeDYNlL)awOypN@(ySI(-2mKIu+*z8y$aBUsjhm*>M9#GD~Wwii~ zu(!pnX}a{dzDG_VPDY*ryPo&AEWXYTPDLW)Tx6whYLX^d`!}U;qUBb=N3Ao{2P+<) z3qk%z^OwyL*r6YAbU_vTn=iAKbgZje;plRVHL!gNo9g?3M#QzXSAQoB+D)oq;;)9-kYOxk;nDCqF+gtsc!IUj#h860-|rA zQiR4la#R5J_iQ3?;AZ;P;Tvx5^b%WiG9z%be}BHZBJD-@xUqa)Lt3;eeMirHp_tO5 zwMp^qlLR4-gm<0=sX=L!c1neUs;cO`Zt^UD&pSzV?mTP4BDS(R?(q;~r^%m#@;~P( zW%kneG<2g_#X^&D{S%-MW4?Qu6U=&yXDI;%G!56+01>nP+nHQN@0mBC=W_yTB4kC7 zkV&LNy$AyOYmlMXo|UJ$c*x3|mr20X-K7$io`-I%gn1^`$-A`~F>JwiL&7;8Luplj zS}MkmF~n(p;#ArHdmb+Ez7^ylyQv#{)x+w{RgO4dOUjf{wmxorCLtK5vLg(FFW zXe*@*O6x|=?0>lL$q*wxalLO9N>>|7Wc76^Th#5!H-)fU1qw_B(e$eSac01@SK0a31 zAwiEH6jqX)KMo6@!M6uaV!h#Gmc`7KZ-A0@p`%LZxGUTiH?pr`Ig(>O4aORNlTr+* zvVi)f+tZ4Qk~0eC@)!>}gd%;L9cxkKp}(Xgm!4ZjL1J{GSKL-QrDK6137S|yBlCTn z@pSRF`(T62yhy-nE(;dK?#OhK2T?wrzcq>UN7*n36PJ1Pr0x43V%7wk_f6?=2PfVi zRJi60$1NmrCC#(CDZ2U8aiOUC?*dxRw6pNB$h|{Z8_5`s^=$fSn)--J>qH72U#N8 z^d*$$(tI{qs3#m-HH_U-!0zF5_u2!^%_7lPf2~(W`(j%QC0t*?c(!HDPK36fqcL!L z5S#?DQQL>ocA4L86~8bcRgKIn}diJ0|C5FdnLbz zI+*8*1TdNA!KQl)5;l6uT~geoL)l9mA&EEugY%%m56r6NvLA8`b68&oaoD?7TLR)s=iXIddXH=Cbp-@-zO z2;WWsinv5J29ma-UJ5WLQVFB_E2I(eAEJ{{d+4DNTxW8s|7ogZpm>;VJK!-&E2wVsb`^2_C(q*zR|f5b zGZ4vf`OJJ6Y1pQ9+|~d^&np&ttcfMa%_o)#yq9GUf6smT->=^Fp=t)cl!P@=i*|PZ zgB<-wZvXn`YKYcvYRS5&{~IlJ-}m2bHY5EV{+B+RtY7}UCHKkxCNR-3`O+u!m8znq KLam%t=>GvI;yhpg literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/autoir-quarantine-file-1.png b/windows/security/threat-protection/microsoft-defender-atp/images/autoir-quarantine-file-1.png new file mode 100644 index 0000000000000000000000000000000000000000..64feecb7e55891393d7499c8b62b44a46e26509e GIT binary patch literal 25900 zcmc$_Wl$W^`zD&;5?q682yP(+4;tLvU4lDhYAAy{yC_u$Up1RWS4SaA1ke*535 zt=(I?aoBKE3sf@}{sK(G>35PkKkCKmm{1Q9q!b&}R`ef0{n_vQ9_(6QM3)hqLE83|E! zFT=x3WOc1&|DCkfLUS&QadS(B!go4}<_b!+mX;NCiRPAuh7cci&|&9t+k(qs$2BIJ zEV4@6S9k>VILp`g5;h+tL_hZjlB3_HKi)cHUbDv@TpB(%jvj9=x$Fzy|Es(9eD=S8 zfUHqNAFp_~eV~txzQ+Pk+?1~K3XxPt@Hu2#5Bd=5dk!(U8F-#K*@514`E5MwR2z5q zEN};B2>ECpt+mj4vS?Qun}mnOF>6(Zn-GUm!ceTxPd%YXp<#^4&ag+$pWq+3O<(Zqey^*WMLp-&YMg{ z-VV@CR=&mMt%=O#wG{RNgei_FqJfgXmW)G?#NIGW8H;}ZMK!~B$;kw3YejiQMPD{M zU5f^n&-#B*k%XR#Sqp>28tqqEnjBUWW>{HOYrxqK>`W`$63$(MzBkGXT}H>j!-pt-+3@+;rA`OlBH;t+jcTKC`i zYd$(vC}jXuiK_yqlaN~YIK&)*$^P>toC4{?ze)b+64LrwiY2RK6Y(^@+}QzD_5H7h zV?Of8*vQm0U0s}zO8C2QgOBVQh;_iY^4J)?UK?&6ZbMUf3TwJf%|1Jo>KdAYHN=6a zxxhaf_W$vAkei_I=*XeP`?9p@>a5NRLLnnBKl}DM2(=DuztXH?3CUuusHjj?R;Efz zOXI)SGBC(w(XE$`A>)IQ+Y=8&!qQM+l?H8F>ClJ5hs&;~g>A>D@h(R2DG``jLqlV2 zEfv1-vz@hdTu)EWlMU+gh0?RSn3&ks$wqH0#T)De%7=Ail4Iz-4_K-H1p3$pE&}!D z^Ex{_w>lm!HLSe_{^0k4Y~jm|_A?_-RnM1QDchr|qYt;|+sDt3UF^?W*$;Rn<>ePK z-lxV5k4sgLKhc^Xr<;QX&CNG*5ajz$6B&GYf!BGIk3-8ess;wE_t(b@+rhyIs}Q4J z4nr1Efu1BKDUrJ`(<>|g>R? z`N9JM&!Z%h-q2ysu6qMiEUaTslk>B)i%&380gv*nzkf#xV4s^%{qi{Lk@SRdZW+p2mBjcIT^8q*+_&1)L9`351TXl086f@$0aUSh@NPSj~eXbL^=k5?5 z4Sy3j)Yx^(`xN>R1U|uXYbh&}>pagq-sKFplavf$Gn0JEem)0pY58w!xe4*`Xv`!e zCDDNo93NS4AED2Fw;j-Xp=jIlzvHctqQ*u|{~b^NFOd6}FL&S<4{aWM-Zy$=7P5T2 zyKJR230BFIvS~-zb9@+Z+!Z1h@>aio8+vMoT1u6YlJa%?X#)$qYrh8{e}4#lvcH`( zdems~e{4k~8>IflVcLgcaD9J-{VgMdEFvNz9{dD(Zqe1k#=*%MyoEyzCtVmH8j8DK z^HI8HU|=}td_JLk3VNsmUqQBD{gK{eu&_8dO)A)J$FZN%LVz2suXZFd7R78cw#+Z1 zBzKmfwKc=rRp_IE5alQv6O-&U^$5J^*5dWl7s@?;H5!-7Y)m8UnVFgGe~WdkQA4%D z&M*ms!4aM}n~QkrqJkd(erT>gKS7_{fWL1=;tmHGv?oYwO!9#9<>h5-%uw~jZTJTG zA@*6NqSj(Gr6fcWOt&uVO2)>rZm9V4gN*+fqj>D zp~wxhjkVq9{z0Xf#wB?@H#@s~x9r$eVS2~@)Ze9yesQ^Aq;*Z&-Rn+?!X~)Waevg- z8pAB|gUVs4UIvrw)34Fz?XCx++eL_fA)COdDJp5`=|5o5&l*!?3RkVP^xZ4z8{CEg!Sv|Ecc`S zChQ2vG4pmtw}0hk_O)c-u3q>Se9GVPbYA!85Okss9ib+IK7mZ(-+r68s|@d05gpij%K#Ao&&7BiyG4%3_ z5yj{eIvUI8@-Lr_!_kRIRB~hEQw7Ol3&IElv?+6s_s>Wr=Rs5O+9htUtE2B9!hkum z&k27Dxj&5smmgf@BxnXx>=GJ_IPi}B;1pj#1z#UO8QeNPA9mSzzv=b5LNLJgla-ad zKprg9tWZ4&M~k^RT^4!I&aM@Z2gRORXW-Wk{tPBR;t~nkKpu;ak8dS!N!rC$B zGvzts3h{d2t*fc2c|78N{LxMy6B~OBRvT-v>z(VD-KyZ(ldPY}6ewDN3ID3AQ(M?u zzMv*2gOHl7aUpjGT%AHTufx8%M;PC;s|;aXox|H_1DDRPYw>JHi_e+)KvhYxdKV7A zvBMmWoRVrnJTN-siYEaej#ToOyEj<>KX3b}zkXrohuVML$G+;S?q70btBP-VZ8F6C^YkJyE6M zQ3C0z!ClkNlB7YW-(~KK8yH@4AB2P_u?adILpU`&7Ux@8r2R5+DSaFiwx+phVfu^8 zuxpy0XAmMQdTG=27}$qTk(j1)S^K_Cr8K5dCKhktbB?!RH^P*cp&*{tO?4KVM+51BhArY@^6OT z3cXVaT!Cd*Z{>TMA3md_`Bdy$4u)O)yPW<2z{?^6F6alI6hm%S z7-vMLrIkaKcz!7xA*9z9DR?8x*LPPK=I4b92`MS>?yn9LFD~2+zDQ&tO|Y}Er2sep zq}R#61IbPu89_5(V`opDm{2r$qKP3ZNi-Xb*>lm+(NUhpWkEut5nBKqwg2OH({0qu zn(k_zuc082PeO8}G81vy^&r$O^EheF#KfhrK<8+sld;Ls zFttsnN&Qm`1sqD72ma8VJE}LP^GcViUMxmbx^bYjAUjZ!8pwreEuSqM6}HX}4R_d# zoN~Ry7Zx=2Q#Ogfx9PKg6B+2=y&KRw2)f)Ogk-6~RY9eFmlaG%NJv%!@r(t>fcL4kufdBdYS|wvE%8Mt>G|RQw z(Emab8yi0g#kxAIwK6Wdx*F&2Hze|@w%bI=P^T^@22pQ}cDmz@dn z=sd4$hsFJg!ro#(X`8F3_Ure zE|W{B%#c6B_^gNigshK+Q&`c1=ulNu96OJ8LH0btOtl4EwPo(;-jn*C+)B^=xwB*Y z=tf(IfRHI|uf*k8F*d2$ttuKNwZ}lfe|Yude@&VFD+*LB?7pmftU156c`t(noIW$6 z<6Rf3HiPZ8zf3+qpj`- zbc~EL21goYJ$I|BEPWhSB~&D?f5+lg89s%ydB|v5rj+F`s_Lrd4$}7xmNh%b%fu%t zX5it%=Fp;IVx|w=>zhXX847{&?Xovb9})9ivu47>+4xdJOKbEGr`c?@RQY0~Q#Tv| zT}(Hu0{|=n?6OM+`r-I+x*HOSww~_p!@;PV1xG_T!((HU4)EFY^O|WwK80)S%QLDo z>e#W(W-^X+J)0!o^Yh)k$IiA#>FDWoboG1VTAlM8^x8Zs>a6dBx#PMKoQ>BdM;k_o z%u`%bd9^Y~>am+ESxev z^s>_B*fseRC$;E;N$=eyQ|R`#MXmdRrcS3_+IMSrh3N0u;IS+rAG%)De5C}u^U_kL z;gOL^cNSfV>75Ikolb|<+)>ZtwPY`bc|q5uuu96MGD=uwvjg-8XkybaMTAj{8P6FgPG9;~d}GWf$ojsO@!mcwKzUW1Ez1< z;ZA#+RcPBg9X3+=)lb!5UoCKPa;g|ipjh!4ZyOT;MWT4F*?W$OZ$|=a6paX1YtgeP zFPDZArw=H}w!YeNWIm@bNu9cPV%KIRK~P^zqD~I=0}g=Re(3KO>!e63x%% zP=0gF&+ENDiZ4PH-m?kcp`fmAHD&OS1~SxSN8 zioeM_+D=+FX)Nl);{M8GSjROTt$m&k8zV^(WfyAhX*)_Qm6+m;ds-aWQ0!ViVS78( zJXdecy|#+-^!yjB%9VzAdu4idHhOyRGI|5objoDU#DKcyBD-JWOId&TocfWzy1vSg z2LT?=D+zOegM4ivz{lUMX>QO~_`Up3dPfm1H}o@&vNi~XAvZJ*MnP+wUr<`A%Bl*J zD8{k7gG>E%a0V>5rPwfyh_+|}CEZCEI22B{t%~%Y`Z)^`LPc` zZUjZ!_k)jnLe9CYD+`#towyyp%XS!*tEE8fA7rP*^XCQe|)obj)0@pQd3~?QR~A2dh%dI z4&_bDc*D`COJg$c%+6&$%Cet{IKIx`PhvjHZ#^G7p=>S`;N_K;r>Eb|3IIIm=f>+Z z{`|Nj84eA*sSU9Bp8TcjUCMIZE6=7}7gMGA8vK1B*cGZh+=1VyA@#J3k;T+q@i!GX`@kr=#W~q7$`l^-SfactKGUB3TQk4sti?kx2jdBCK*XB0n!O88OFa-g(r z!By{_gJY@)rU)aLZ0=#S+dkWHvNCt*RGo&&P(h)=&C^pP{*}`kf-))*C6fIE_uKOr zAKdPI7p^d89h(xg-*x51`jNx?X>r-x-7%-ViTTeu2qUj=<6Ai;8U9?)$mn8sKHgu+ z*xOfdj5FGpvswEOju_1&M>+yxUqW&kbr{yd{?;>no9Fc)=ZP0Op`n{o;GcE0qnSrc zoPdK4SG^~etE6CG7j3bDc_9)h^7yz|+iigeR+{TOgwv--!wrG`cv|83pZj0Qk7Lk= zj3CxCvQh3NIT>;S9IjOtE)1vm03p7Tlv338+Uhtg6iw+m9jJgChI4-X6H_tJfu^ zB<*s6VB8!c4;N0c!a_pX3YEu3P$jUjH%frB>lvb6p87X ztUlNOrnZrf4AY3S1-BfHDei4rJuXWnDh-$y40@ZOsP?wDW#;(>SJ3p-5O4AcRQYs7 zbat9gqJq0<&od44omBpw26EZ26m4!;qN-AjjNIh?-KFv#j2~@4yQnnDe7wA08tvBT z-tO7x>ZJX9R91-ox748KfxlJus-8b`f4w_MvA%Y0=@-o2jquHVEV)1_0k$oYoEl=U zMx}yI8kfZxT}fHl%!sC@X6Z5sDd~k56Z8DuzDCa1OqWAz1_XJuSnO)7(V~2>rthMz z=Q4|p_O@LXy-&HhVvAdS7fE>TmCk<-nOPZA0A;8Fu7zUn3Ng{l`W3%`z}DE_jLWZ5 z+1e)inFA+KKF;^Z8^L(niX9x?4%~)i`2^s(FReg5j{%&5{ zF7SvnI;_&XP=c5k4}!bzkM|dMMXQ&nB{D|h^q9A0}Gj1R!)15@3uil;p{P= zkf5*4^H@5yPV8eLo$YoX?4b3}Ho{KaSh~O$#f(pEHYKF=B93iaE!a4~1#|p8gYMiM zvc>sdmIit4ojdye{{6oy!^M3l#u7J71fNz8SoJ>IhR{>o$=4|IIXt#XM0c&B?!Y9` zGpRgFf3L$$q;bn#C8f%knzpkTHA?Is9GGip7vt3{E;hQC6&{AW!Y@=tC`USMJlrz< zd659!BT!u)Za6#G%Z;FSa;wcMSFL8)b=8x}KMNahHuei~vEX98sLRV~@loF2YlT!K znOa@CtR^$3lr>kmIM-(jF{i!V`?{SV)yP0k&(CR}khFy{p~{x+F&pg5onWI)~PCmM(1nUDJa}J*JNMS3|{k zgi0X(r_r5nWuKLGYK$tV%HIg{t+ZN1syEwf|InriCrd#!t+p6_XAtXQI=Sj634ttk z8nEL2>M^UqM%Faew~Io<-l-NE)-aCYTQ4W;dppnfx`2{(__1SCUu|e)Ox;re)axxo zWNSUu1B`hNvsST2h=$ysq~vY=K|j^4#&`#5=N*&bsZUPiEIelcZm(ehzXn?`sC~Ea z2nq9Bq<&F}7{Oqs7oD$PXC3sBjm97u-(Rgf-3uI%kOZRz4D@XN6y8!37w^C;LKsIj z!d_l+{Z$k2&@Slt?6)9gH)_MNa!O84PC~S-{a3%o!m8!V7s(R(w7>cmEdMg>7nyF# z#Kh@)SFs=o0~@7njuUUoeRZl&+5!A}`aF=C0M+)DC&c#{X);rkv0iKu=DfJWeI7xj zaZEpM`5qeCx)4F5Nmgm$W}g2Pt=lHWOm;+`j40Zd96T2FhJcLeeG0mts$F3VPh%01?1ZqIkN%Inr1h@?)*^R_S~2)ock%+Q5h*Vv7)>qRj>D$hVcJI|2%JnFwb&dGM*r?# zFKBhS{Fxw0UBB%<55c1r|5nWb0hlf^|{3}G2 zw|oo^`K0J6!U9K1$CS47JkqB}!cM24Me(I!bcAV05vd|aODYVu`jvdX^}^ZyD7xOV z&DJ=xsKDNB{s<}cuk83B#WfilpB%T4kimI;XteN@=}yl~(=v<%pCm~AS{{`0LCPOg zYrG-(0*SH*KFAGK_wG|1q+2}2I0s61|2E^#oI>Ia4lawZM z>~}2jdPigx))N{)30nEvhq@vDYH>cB!tpJq*v%&*x#6Z)kDJvoe&TCl}e0G9xt587R_I5y+l_53s=w6tQ$olC%z(`0fYA- zX<QXD2u7u z!+%Ggf&YzuyqnyuAM81UOg%AbZ8&E-hdqvv5r3K&$?Ed&C-aIj5=CC-bpow70;nq$ zIns0e&T5&0KnC2_b;OQ*blrr^CQ?h` zsMF8q#0@9}G=X@1`$dEjBF2xyL0J$ihv#w8iF0^OT21-&kMkl`b(x3othfN4)xIh1 zMuklo;ZnaG5P$DR&5iajdx5wJcoHwCP5`^~1^9XaS}1UqupJQ5ULH2&5UmIBFCzO7 zD&7A_ARGsXkq0}De$eEX$9pC*sG|<7h(k@n|6{zy{$JX!FudOxlk%n_Ni80SKbtP* zPKy$GqEeHsXu<_N{>A0z(*geCbt6J{7#3xza(9k+SbkofcxsS>r)QIdl$5NYVV1hO z`q1UUg2ig9``vY!%hf*}KChEsO;=kVK7N$7u_41A7;^8taQyFI5-=n~fTYpRsw4&AVRH)$kgd`Hpa|yI)=uk@ zl6C#lZ*~&RKKQ(}w6rx8PrJ4>Ivj+Ib$1{N0^Oq9*iBDQf57sSMz??g6jqn5Sj6Z0 zC^;*OLV-O)1Z)@!dJ8x_Tv2~YHOf9Dz8?bI+n9@9&m>3sF1-=Ob--I{t+f38F<#WkL`>==pQ9(hW)^eQ0 zU}9oo-WSV!qbDRGE2|PBASkH+(eBUsAqb!33rRA&oV$C&M`@$b@Nks3ybc*FU0~?) z*{I!Ott4Xbh@f_-N>-dC`1s9K2+vvHu)lALIF15?+vmgIikr0Xhz+q?QPiA9bkq7Y7rMI?n_y^dq zIG^`Lu_kfMc?G#H8w)!^Sm1V(Ihj%jcr%)}ejSG)<IHe(fI$yu7Q}j=y>M-anFtkm+*9J| z8Vb{?v$Qe1cVZz-gRHc;^03q=kJk`?rm5Q(wg-}TuO^s_Cy{Y9^JnY>1VMU zpY>M;uMU?lbytuc30l_%^TAXs2af=MaNf`Nf? zwq#pn(?ZwL8Rx1naXB-l$=5<&p)|8+sDJfwxN1;_#DgL0Y$Q2VNDks+6 zH=Xla_0y1qM1UD2Q-I;P{XB-S7Ffe&UU4~nGKeqYDn*z1Fs|P(^-oN=&Z^kOuk09D z?Y`jGxcP2uZqSmUEQeA07l$lBCmv6*LDlCwkcE_3WT}964o3{a!cXz{h2Mw>3HP~@ ze}0c`lfElK2xm`@M-%Y9ajNjzdL8n!M{=7UqpItv6|D%%ftipPF}&WDrIHEMBjoZd z2wAMNvVBb#jq)qo;V8R()7x&-dkdK$39XwS5@hweu1}+Y>wbq;TU{!6I;{PKng3)A zo9!uqu&X)|b6T;J-Jn(dIv%XPUSl@+wV>cE-ss<^Zhm%q(Xfz#L_Egg%N>;Tz%KWx7?PypnQA4 zBz=U$_)_^Lz3z+Oe19BHXYeYCdW7CR>VYex}rO~nv zi%-y3A3k0~7tFjA^V4@kAGR28w@A@v4UVz}b3|#naD=W-1*PGy`?w3T;PR3$7p08m}M|;0LT5Vmm;^s2t`?K8GXj#K#IccF7}(WdPoV%2Yp% zD2sIL@jf2%^}u=IMnU%mMfJQ4d!UlPiZh5}D-8N49xF-mb92p-^*@}v-%9;PHVHiPei_^1ccN(dgH;H2ya?GS zw=oFT7x5S^1X?F${45+#*oCPq1;~BtZzm^JEU`^VID?~oFIa6S7#{Nj+C^V+zQPtL z*Mj}7{xzm*RdVlUe`AwZu7U*M>s#p-a2Bv!aUzEk8EmNsF7q^YEIG#+^Xt9UU!i?S zla$Q)ZG2@W6fg5zSXY?>i4Y%a3OtGb3XN??MaF4RduKy=@&PTfL4tm#HJpx>3M-^u z*{kGJ=ZW$z$oexnsdc3q2ctTQ%&!885K(i`i5;yWC7N(Znph}RqUBkTtM%)M#K4&M zYVW_*tDO$92Pce-wA42XlZgk=8g)J%I@*T7)`r;2ada)A+v~nZsc`b5NPUDk?<%xK zS9s?M2qMIWE^$7bh0Oo#nW&SH?yd^&q(}IGtDktE_uCaSS9DF85r>2X4~-v^wIdHN zCP@w5y{9wCk1%T?It%OSi}>s!vVuI%ajkg58uPneIRYfL!W(cFj7=@Qg*9l}54@T> zi`?Qh=j*fJo#U=wFvB5Q7Mk@ZXFZ&6o=`t6QtGqsW;l{v%Lwt3c0+n+N$pe=U2K!u zP9k22eUcz*3>1o7l>EepJPIdai)lx}VXVpsubK6!A14pRqqC^<>-A3Y@AeH|JpZhFW>H~HLy!K8K;2Y)I34N{hY7ckzX7|w!B{+}DGo$2M?j2>%A1t`!6B;W%0$d7Q>e`MUf!H4Br0&Q z_xe5w?po!?;?8wCwHH2a@FbBU8v2g$p%aS}210~ipQL0Fjd5E1M~M-3vT$UA;E_T2 zvx--rv89O?^5%+al|{7~99GcK^w;&Qf}u^8;dr7&T(lJ7G}oUuiW2Tp=t8~)iXrAu z#WRF^{F0P{57LH9L0yp0#wK}65M~l02pf^2-tju4^yMt7P4HmisNi3&{`fvhU2$5* zUnQI|NuB@qBdjxg5ZU&1JcH6OQCEBpjcT_w@ep(0NRy@4$Nbmm!B)XTwEo)recfCO z42oIkAW2>8o8m1&tE{)z~G=D)zKd6iS5Z9GNe>PslE4+eb5$!EuIQ7j*BtO>uEWK8g zWEdURqq|M~q`Cl_U`fP0dpo3r5ObiG#aNcaLxNb@FO;AN%&X0!=rehJV(u*gi`j+X zm+XKum3r`J=0Pt(6#kG1I3-b0x+pCorbb6l$5*N-_EPp^${0 zuEJ0N4A+s<%dNf%oz__d706Uh&&_RD_<_9qvJw(#ij=ai8U^1rIYLuPM`T~&G^4VE+AKPqaz)%7VWU>!+fZt~Uh-7@=qm1_JBLUnos2PyWeQ5S>(6b!RpiZx? zZD%#g`~`0H{5$p*xVqFvk@HGj9jzYN6Y%|$h(n+h_SKe(A*Ke>UZG?n{`&nV1D6Nh z@{;}j!$Z>l$yZcWRi);Ai5Qr`v=?@hAZql1v zZ#K98CY05Urm)4Iow)$%*0}M?N)ZfEqQ0ap^Tkdft5Bya8uPZOyjF8RY_4d+2l4)fDwN42;V)92!(q)LN5AZ-Xoj|BSkot09KoP?;h;QSE(v5mwgm ze$G1R$ir_`Q$XrxqmAkf_4}tA7TGFncIS2&N%l0%p;K?2^W8#SJ?YBA|6%Hj_ZTC? z519!`L%g;0JCV&)g{tT0hyzpiD0_0~69oE_zad0+N{Qz=W02uL0+JMMNFU+QB_}p(>Yc`0P#%C6awmx^{u(!7t-!P%7-)!93 z+K?wgUck;f5KCH=vIT(gOp8ydvU0NKOZ6oa(Up@#3@8=s;TH-tZUqJOF2G>AckQM2 zO^*VSse!3sLWXPQb?oy#`{fVR&B3;VO6Pf_G`R)#{5hSdLBO5YwYfFvEx z_#W*K;<@Ut;463AgEgaUhsDnpi6QBafk|z?4BM2+)nQXT{CSH?e7=VrU4xr z3Xzy?bW8UUHMjq&s{piwm1#F~Js);O~x-Lf?>|ReONKX=zh}gvT>sNK= z_*9nWzkQsLmI-ts7UddA4y_6_wNdQ&J|PkCQ~S@==CPa{W(_(Z>v^Hy%MnT_N+7Ye zk4fi5YFWwtq2q|12`hkB2|?E~U>QEuFMK%`0)-g)tKy-gyniEaw9fZ!oA2c1b(o^Z z;vaw&uK`5Q-t?Zl1l|9~7G(o@9H?%gczs2WF@J!V{z2gXdAXy0A`W_K63E1s`U#XU zpl={02?0zpJ=pyx=+Fux8yhVEGzZ8@q0lNIqxV%7JEh8J3d&fH|6sEZYTkTvEM#`~ zfp2Mc%l_6>mA7yxi~YwLceLNSULiEni;U&=ec5=N$WD+_?8jej?OBS__*fBN zBfueiF#`DcmpX*9MPH|J`=orx7QF52y~wt=o!LVQfFsu)B1TNN|A&Qt-7R%Y5v7-)8u>%UuKX#?lKDyVU87NMC%P+_lwJoHXAF| z!ZL*lX)HkUWafaJ&qYF$MUP3vc44SI%}*`v&goxM*DXfJ8ZhJO7<|$d9h+CkDFG$c zwFRHxFhLT1XLN*M)Ij&RG^EB`<43uEr+jKO5jw1|ZqY#f{rTUq`QaWaZf*n8HuLMK zw8|?1=$&iCcYRtOp1Fy1={Ym6wV5J?ITuk{zsAS%@A|&_cY*vyx#K9pqjJwZJ^PJ^%Yj zjz_AflEV;FOcA+0sry&sRb14QTRvW1%QRq@80-jbTQG&Iy;GQd64xh1L#en5b~Y;j zEYpE#a@K7Ni(1zmOwd8J(I?v~1#}`;*1-WO0j+jrN&5)qsBp4#7FT_sO(Zjnej&nI zUq6aaQR0otsI*d|Mh zTASEfaFt;JtI#}~4J#|72Z2SqW>gw?;qXI?Yx|EVB18)lpe5z&tMQrL;hGN|hMHse!hZW^X74yjUk`R&RIUB$Ex7@T~VB1=8eAhl>brhzm1q>#;nT)XE>Obx zM_B{$cIhU9qotDEZC5CWOHvU(%{AlcFS!8P%F|q{V-0f`8Rg#*6xf#_K@(r27TNGv zH6;WNd`z<9X{pT3_g$Tmw(VX(uyQblA{j75zEbz>=T6$mFaBb^481(q>hN5f-xFcr z(+UqJuAGq%I-bqzI3F*q!6&^fzX2HpDe3-fnZU^9h^Q_ZfmO(U{9NcXdCeo1wE zY7AxW;XJobZH~4NNuIE*eF2+Z{y$qGwhvN7%0KfC8VsUfB`rqXT~7KYP6fBc!hx_hK7` z4d!nZGrwxuVt57>dfuZ*>$UdZVV4$;8xSanA zIS^f96uRUswG-9pycyd1^tm{JvQlq$pU!;WQXUguHDF0Mgj@$=|da7D)3V zJsKK1CCiNPDDg^8*89iZgMm&{l z7~F&m+reky3t~q6*jQN@Hk)J;>7aqV-gnXZO$Gg(_&#aXO4q;HAT$+%Hu z9$bZ%U3n%Mc?x^!Zb+{l8fv%;(gJtX=SxuDB=$Hq-Y97b@o*%QnsmK z{byGSX!}6_z{uWA?2|{l8#d7bqQ81pQoUlA`CDS5YonuS_wxY^M>(h?ZCx!F<*i+$ z5>g%wEzdaMHcYaEZ~V-=za5VQk;RJTXm+eF9oF~n<8E#~$>=sIie&oedJzg%1)SL3 z-t9*sIj!SOU9P3F3`EigQ!*i=Q#`TzpZ*N4I=at@FgmCki!I)eks_F)bm0BCk5#`= zsgsu%Iy*Zn?ch+ECGw-$u*+Y8xFIZns;5Wn61g4(0^LFPZeq4SVjExiJEH=)gnvlrDHa()nBfK)0i-^9J zhb1!ka3Uieo{F{F_*t~PxOnn#VbwWYLA$vAMGZ6-^DVb3z`v^+aWoi`zm5L$0~_4Ito7tlb8t87MNVV^&+1( z54<_UR!5JYPeCKc!=sJr8}E&EAAOL_sP+YP{rrv&1CgThu%!{tkcb{W>~d~l(_--L*v652d1MycCaQH zWc2YQ1U`f!lCWBSGxGdmVdZ^WMiDL!MP)P_EG0R)VEda(Klk>%RZPwX6v%FPV*=*FB)eIt-$RX^%iwv& z?Nu5?Bl7!qbz?@zEGiQA#@#?9LvdhuKRyvrSqKtyc`s_Wl-92pa)ClZ0=WJnFKrQ^ zCvMg;>>h!x68inZgw7F`i&y|gtoe;*_B$+~q5+GI6OovidoH4c-6>*1>_X(%7jtLF z8}rCOjBvsQ5T7xxHo8ZB}mkd?IMA9uZ{qXM0~-dskLLPRhG=p!ZLX7Zor(yMfK~ zq#BmTYaO)!4QwsY4!W&Oxaar{7u5NV!BLsB+X4eYFwo=JgCb|f5%NK9B$9WXB|D3*Y!K5gq5(%{pG`){c4)&t47?$d%IoKv z&w~>5?h1^ivbsXL94Rq=Lb2p~ZP?BMV1XE)g0nE+w4TDILqi)1&YdS_d+q0}>m;Z} zaBXo>lwCTvB@RYoqfVilC%*S85zE=4M^B+l!E?T)VnR2F96PNa(GJ%J3uMv{88?Je zvGZtFpw0Arp`;>YOcB-4C}^DTuXNwx59kHejCn=8*{}A0^d`_?!UlzYn_h@;m-{Kh z9)zSkS##kOS;OR4jaf}n^TxTm#_O#{L0w(1fY|JJ;`fCagRh#1GQV{JoqGEdoHvN@ zStJv!o<}F8XBw(gOADES#ISc*_~O4z@{S2o8~TOBNeD+Um#xRJ-w(`fwV3w98!%pM z!!A$C-&&imt+d>YIj7rTzjee*O=H7Eh;#YvDrIc*P$Tws_w`iXJwi@?`E-|}&hG=A zX5#=uh*!;v{!AlPbBb6~cb?HX1s{w?J?5Gc^K2SykD@`PRjEJU6JEWp>h#8@&tQPH zzyH@U{Ru0xSi8;4yTh^^M5#aTqZStz_YHyetrX&eD7ZF@QA@vWQE!{^xBe83%?BTO zc=oxRFe~`>T0onHh0EDVkvLA(#Ka(EY|(N=up(9?@`SZC{ie6@*3|D?5$uBi*KsF` z6y6)!s*~yPLn%rv2c!7OTA;Kvs^VhO2?B$Gpt41e;y32MxNbpwU}rV*Iy5+s8bKnF zO9p;vQn?C){LvqfH0Ej*_{@^%VC!jI^+XnPO%DeL2Mx9;n5H@W?ES|MIprpMYRI1^ zyiS1;$R?`)4M%I8WYoJ4`2ZcQVxs;SU1&lqMM)hLJq;pNn8o$Y;b|_5GhNu+ekv>HfEV$jPJ8z&Q$1D!Wm_Vx6TR41?g9 zEn(>=NoEfX0F7C6n?GxYRLpiKMyI9&=2>o7T*vj%@>lw`;|_L!swGV)n7Stq#**jt zUPH2Y)NnHqhcm{rW5{yy&|}F?Bl3$1WPN?h+wZT^YaNd%(f}zd#xzP}NRSW&TDIsr zG11*UUp=di6;YRS?Y*P>4?TwNDt-CdzBv$+a(2d*Ic2w(AZdsu8MaP&HHBR3`X%6n zhj14v&E>4`Or%xJAFS}zxf$Yb&IR)MJ{@O2MtCd;Dq%~E82+MSGisFp;BWmYc=K{W zUp%{F+x>=t@&F%kV04rlRMHbHXg26uiUl5qg#evtq+EWXuE{uk08`yJ(r$FCQDm-m zdJ=RO`cY>(vK7(F4$$SW2PNrnHRhO&6+R+BqiC=Q9aePPG&P%DGEcZiU?@dBb#BG- z6i~)an=vhA{w)lMRmuSv=myknk>4}sZWc2*2Fl>qUa5&sR&%b1B>qrA0_2mC^0XOu z5;Vcoz8kM$fU)Xu7s}eJ6Z_`eOzXSWH`gMz$8 z8A(45omt4aVG>vd=c{1gOSHN)wo0Yg;|;`Wn7ul2v#vf~IZS^T^SXVRdCri=3cXn_ z(w%bAzw|L~4r5GKEd&HdE-6qwmm~cmUH?<(8vfMbBHFNnl~FYYrRf%NC!T?rC-qIU zlomHFuZ7C!xYaiF5Re1ZbAHEJ%PCC_K`yDwmZoPe(^6OZFL_DvAND+{H(J-8{j~*O zMzi^RB`<<5&S7FM}h9rBO&nxKETIXDm&SXDM=sAAv z9iIKA{p5w`w#QL~N&)A$*jyv>yr@(^=HMRqy_q^{N|6e6j5{mkXYRJ;-wT_iZ804w z>@Tq-B?o}i`k*h`r)H95|BI7?+dBzws?&XQo3_vKG4OR=1ht~Jb2BOmMhJmcidYM1 z=3N5?$TrHh!{wIC-Z|j0zOnvabM0?)ReWtU=Ev{t8ijL3>uau~@_!Q3;w#U~IMB%* ztC%y1;rvo@CJZKqCsM?;zWFr^Kc=GC7yq};&N?c}x83(jC=ybFC{iMzNQVeROQ)dp z&>)fnLyXj*bf=UIrF4f#gGh%UATuJ}B?ALU$G&;r-#+V{v-V#5tn<&nS_AV8GsFE{ z_cuNdwH7-Op2C^uNvR0q+J%q_+3Nx1Uci?9!N3sm*m6@fC(d}*lll$g8wQ~iSJa!U z*3_Es?(9}@UggE#piFr{N=^_H1P{_tN+wGfQB*7&3-+5#8J^~f3m~~)&1J!I%%~`X z%ozOKQxlb(K=F!_ejVi&l+hQUYSm=8J>qy;$A7F%W=|GDQF{x6Sll-MebDsFAWGj` zXmF2dRDU-fzuZ65buRtNXje3&u&n9N@2>Y#Gp0oj{x;QDFKvpa(9A-ZMNBzQ-UM44C z^5W{BQE86mGrkGFVD?L8wg}fn=CYIB8qB0r9W_I>Bl@CZj(ZlA{`L^2_$MKUQ**$> z7_YL9_%m6*8&~`8owLbYnXwmi*4f;Y;64h7D^pXN=O^+=&HDT%XnA|S=_$pp>oUto zaB@2j{QPC#SN1mPVLJMt<%HpkxFdvD@q9;7>Zf__&Bk!XL+?^EN~YWS7H!voa!_`)t#jYVL(=RHPQccbM4*BYh|y?> zd~d9Is4Z|>kgdcyLH4g+S%I~xU+5;1ZU7?~6cn`Xu^S~cqo}8&vnDDzsTnt+;X}d1 zRE`go_BUFNAa3W&kYaIncb}dgZLjSC;093h;P0?R;h2GOyLVrolEb*}qJKiv~-RX5-)ICa3QEb-8tap5SlN6W45gZxy@ z7dzCUi|@sRmNdoa$gyNMUI%-77@dCv(T;bGI~D~`L|UBdQQvG7zHiVlrt)MiNo_J@;EZS)%r)dq;oOiMH8e4$3pk=sCsLcpmE-vY|I zebTwSQlTZEL zLV$H55CxKt*xfTH$o0)!Dl6e#2C@36NL0Y;VYe(CUPTNGKZ%HCvGe4KmIkf#clg&) ze{0o2gO_C^Azr9uwcw$9txGfPV6VsjXjfQ+Ao|RQQ~52JcEWnw-@kV!w6n&Bj*0e^O#vK5-|(IiUI> zB}uSrcyzS3h#=@|ma20V*VtnUfzgGen^T)E?f$tbFRK3Za$#kLNAwIbZkBw}pk0tN+;FaM!B;w7)9>7wO-}LxupGe9jzT z7J}y}ePnzNV=sVzZ#K6?R`jA(4O9xy-|68sC*jb>-;S3?Kd+;7K6a*Y5+Z&A0CSW04V!*utcKFh&-eK4A`Ps>F?Z!7k zQJ2YJVZq33*-N0oo?9Tw&K5_T$r$*jom?swgFF|!!|zk~6NBk3(lH+yA7)`fZofl` zdyYVMa6qlsREWMeS1Lh_S#`#dDS(FTEgBjC4S-npE%r|9w)3?Nx`9Ub=fW3O3thKh z{dydWKMP-g{hWeEPEv6@G1LN+=jG5XG z4<}B2>f&EZNZB;c9adu8s7pJL$tzKNVn{%+10t&pK5YiUU@sbXdMchO?3(A~y*>Mm zareg=_&9BJ*1N7)fpYLAI0-DFn%v>wJlL`IU1U0Tc{u^3AB1T>CO+1E{ZTRM?jxIY zvnL`V{ozafR?Crhs(ep8+>5UwM1+K1D)@=17iI~Q)WJu~{ zR4NgmM3i)N5+zy;g3z30ccd;qiqE`> zgxacWZ*8aTWUIIaa0vcriO{or@9p)t|HK&d7nXQiE+lRk*J~pW1DJY%y7j<)LBUv2 z2|y9jiC*=9*^C;TRFdj`=_@1f40UzcAM0`@H#KeUBxIiIf0%UHyNpKsodql4r3B>B zPxgSHUxt_j;c0Ig4R%7`4)%>;y`Wq&7S;R)_tDTxKN@UVwAe0IKapF5bi)W>OSS3k zID*aD?`QJXL54vfWh&tCtJ_PGc6M{3mW_u;H;5cOdau+WK3fRx7 z5=JqP0K>wZ$?pN-ARK_sHm**yPT6O6Ut%|Mc@>`%R@T&v8Q4p0YLfateYN+RrX@!5 z^!Y`ZY32h~1=8did-N&^MP{|r41IYk4^Vs(ZAbIOBH)q4f37n%m1E)BBVwBg9V(~8 zF-TxDNM=8~Cw07yZ$M4SGCZthCquh6%?)1f*neRVI^<}^z+|wc0(R>G09mv+b^w40 zXN6>DY>bX}Bb)jm=fyanx2YgaGKgO>6LI>7*!xbNj1L5ntgv}cJSi-d$Z-;&W%CWp zNvr*CZJj%^ST<*bN>5LRAC0g@1sv9{Ecb!bybupS%yd(Ji@5%8q2R@fPyehXmC0n_ z*uH_=qjZ;dT`pChm{tT<{=wT(Age4u$p5L#=gcYab&v8V(<^!qwdlJf&zZmZf4K$H zMhv4w(I@E1=Pwy?2^<*?(<>eb6ImY=w82eTMK$8YX5^&7xxP%J!T6j2zPYGeKXTaL zUT$pflr##UUdO%Yg)}G-h68=KY7G-R7F1x|c?e|IW?9 zyM=Eubaqaohw8je>)etOJ?(?d2_j-S(#6k}pL%~$2g7}?YbJCPn*^r4-Wq$o-2LZK zRcLrd=M-=F6HhIx8wkL#4iYi8L~m1To&c4hjJgNx<&SWt zXG-X@upevcroz!|Y`s{FNkV@{XGo3yF}868mBB;q?Y*R?5iJBbY9i3~ADcV5`~uq8 znWk}=jt7L&Av8Lv8iMF^#5^=J{ub1yQWz1DP~CX^>P|aVv+sEm4{J%su#PdeI~Zox zw#}!U=(=VD`3{u$Ql${lgML*A&3d`O@+8pAwE9qeDyzqpti>8!Z1g?nc?9hsqWe!A zi0LSeG!W2;C27|0sbxHs;W2IbLjaF1xk-}9KzLLIM)7IS6Lo~cyrs>Amw{+f%0qR2 zez=gN2_~l8ls8ICi!+oQJCzV2EUdkSCg;}A`sl&MB2xz0Xh#0EtH<7r|DCJ4^sOym z-6C_U^4SN}SC@N9i@Cwq3Q5Qkqo*2$HRPz)zkS>LwO;SK)E7n#KijkY*Iz+!maF3A z6fLJHU-VT+SGR|g<2A|c0ZeZOXmdhj9O6Ngp!hFlm2>Bhf#6;f$zV~NtXvjlzpwW} zA853?WezPWQ|DBFYB%z(d7ceV!fBO=+AIm@=k^|j6N|>7xI|F1m1n;|<;tv!RJ7Hv zmH6RAC6{J{<%9$Yg_!Ze+bpW<=m%!}Xi=OvHoDbkG1TeBu$yP(Yjn9Gn}o4(!xUd+ z+l>Zh6KCus(4TVA%)AP~13|gh$pU;=K98X56IKVnW^|iJXb1ZVsC_U78L4KRvj8v9RZzC7iK z$CMk7p6yW%e&9DYHpini14#wldC(N^eczk#05nGHJ$Hi_#fDSXqUGI8h2PlwbQ;*d zbwAi{!}kq{Tnc&Y{lg$Ql<6uM$r^pJsLyq~jFYY9vIys1D%<}47kc$$XU%>mUxefp zRcq{>DU{H#hOSTW9V^jgs4MhUiG0UlPhTQ@IL}fzvU^93VEAxn+k!C8=bnB@07C%9 zO#+hPe2hWHyA43@jQ-#2N7Qm@vS0Z~@ntoHrN;B!!SZH`kkw%Ljs0h4(qMr6=lG;i z^J@hPe!vWtn#n35Az}KoWW4y0W-xi~a%}l@a{GoYC=+3fyuBp1Ql}6T-d@Nfk&o~8 za+h$eQor4riUqwIx;WS)T+8H|iRS%2;ULEKucJ;66GXawAg9^tLxQr`IvoTXPYM>aqS z{c*+wjl@&cZ|0Wf9cOu8Yh(Dav=Mk?-t}#{Dlv%^J?hH8^;)eocon*r2^{eq8GZuZO#GG6`v(Ow%8G80@l7 zct(@y$XzDDP*C)94l_wB>U#Y7C6o9nLHJf*nzg29>dh(I9uVux$;&h3X6Ufaq;})_ z2=bIb%__%0e*b&`;D@6N-ridq`(CgVK?Ux4$vd|b>JE9*D|wD|(}$z$OkA|$03d4p zU=ws5b4xydZhdFAm@_{mAD^6De2_H(MLLc*DUbI1f)4*Q!;HuSsF9KB^w)+C0-*W+ zu$Fr>9^VOHbS`Ba;>gk8fEG_r;UD>I&t7#5r6{_8(4>*+G+cLgvN=|lAoXe_;x^6t z5BKH+Z#Euw!%;ui+{n z!5atr`$eld^)?0@WC4ndNr_24XzsMXjeaBFn=_vxp$CFyDx2BQ&MZUYUnzwAPKp1x z6mSZ`cHE+SwWV`Ua?8`)|L|VcTPK$wQSS*|8ggRZ#6;p}o%Sw6Z~en*+J438hm{Dv z#wMw!ecmZZoHNkkLNut*-=;5}S6<4ZV!idKcVi4M%b%(h<{KM)SVspkP^AL~q+^5H zU;Sk$D#Z&N2njvyVZXh;DWZR$Na^ zJu^zrI+jHg1fNW11q3XvEEOv4PC>}xHz(0&nNe_L^yR&G{Q%EGOKMVnKv}_!J6!YNBD~_ zVfH1zf+=(%ECV3U*xv&pT2{|S#AviSMur3lqU>2a8q=>NDB2c2;;eAN*58jlujw_N zceHbG!-#)8(9_labGMtPS#e>PU&iOA8OwYN%7uo=1u{=;yL5imz&k|a(edYP@tX!L zCy9j|TL?%BKSJDh-Tr#j_&O)ErJTTPr%Pgzk3NlepQ`bax_jcmXG1dxG4Ub@GI`xh zx^8hTna3oa3W4R}usFcZyr6vcwL+z!hlmbmVZ6L@aK>f763w9T{Fs20Uxv$R20PrR zMkvQeAszhYne#z?cvR<$RWhSsnqV_3-o$%XpQ%yA??>MhT^~`ktmI)aDb+Vs)TESkkg9$5C76HzfUB@ zsQua7dVR|g{$Vs4jI7&>FPIl+j&mM3Itxs?vd!$I2dSTn7xqiMynIc8 z=%V+M$I!mRQPUu`Ap^v}(JGa_I`6UA$MFf(>LE%Ke~1Mw-l{Ut)a%NRtW>#9e3R8H zpwJS%`&0JOSoqr@13kU+GFF<{aD08eNVRBp`A%s*UwaC@yDqZ&cqcrCN-xd0^ex77(;x}$y6A(*cD`3y=LF1d37 zJIH*`q|_qe)Rnpp0M{KB=jNO&^n~wpD6j0mbP;K8uEv4kESnT=T;0bFV&iji-~DVo z7L`i7lxH5T%*Ky0$A(ODOkct45y0)7{!VxITI#c|LF@cTKh)J@`mtN-Tp8|bzZcqX z-$yV+(mzsrvr<7>imaU`Ib@vY!uD3LYlHdeLS!3wZ8gkjv{uO*ziAT6{wZj3+h*0R z3nFS4)q67@O(JJ4cS^xFV@#0b5+NF`qQ;hW5hdASsZqB|E$8DBaVC;=FM{59xrCjI zAuE2mc>=Q)IGYHGQwa5`yScXem~v$}IhgtWwT|z;KQud^;B{N5voxVJeM(rb>38e5 z=OouXy;dB#;EbcVL4X$#s&JKpM>I-AV zA1?MD-8ZTGz9@`goq6lcPBt*(3P9Mtl*@S~j1%01Z%y!m9StN;Vh-R3TEGOaib11%QqCmUvFtdwzY;<)Q|K8kh{fdr> z5exUT2tFB~uxtT~dP3Uma$^5bv+aY8Yfh}jL@ji8y7W2;aBN+$zfs-0?zcP_Izip} zzZ5tq_rlhJZeyY&t8wkLVH$wJA6oKM1JCro150;5W(z$p;Ox>{IS)7)nX+VMr|&WY zd!0KY57{|YmWR?)w!mer8@{@~%`1YI2&B#0f{~Oj-0n@GtSW7m(VQ@Jy zFtYNmyLZqkNZuqjWlQEU{uvj0J)lkc&LcXyo>3+kR=&F8b@rmrvXT)ZO|2)LSpsaUhUR`BZi~a0_m!lwll^ z^q&%A-)ZRumAx-1QCr!c9ueiFyXrZ2>M3USsGnr{`xwgxB_I37++klh@!F-;^JSiN&u@igF{;|J8bHK0C;z)qQKh1q4_h8ynb=vQMVZ0VmuHg_k*4Oi$Xbnv6 zRww&V30_a%_&iJO9|N%u+tt_lE53Y!jbwFpMl6|4$b=O~CgcPt!{@pPdmRT7+2mEN zRNHCCec`o#Y}Zt&ldS)a+mS^ec$0d3(99(cP8J4;(Z$oQp~;lt(6$2Ug#w zh2i-J(GF!3ToDnps_3|uHfz;1RcnJ@fm8#&7kSI-V|9Qu{yz3kNfgkJ0=$p06R^Hj zEmo_^U&CTnkY}}iJ2*uukOsEsq*wCAtP!x)UAdM%-Q#zO(ni`eVw`(9VGHhz(KsGoQX^CSIshZSGbOcmQf(o>Mhu8K*$?h1#lHV=tLB!} z!0Gc&$E~$yyBc?sjrVJWqkn%b<@S%A$#+mx+a8VXp|&OFs7z^i1w960=My^N=f|F@ zb-o`b>s+779~ce^OCV*2@z(0lEYz+XeZlKwRJye6wOdn3@yk?q(j?HTiRN_g0@X~9 z#-TKtB(CC@>Egi`5c@8-bQUh}4c$~R>-a(GuGsy7ztT*s?HPiB%`hzsT&LJD3SyIF z2qSt#jV&=~HsqEw(?9r?@|uAM=_pq>==EhXjG;O<>aHl11E!)Dnhb>r&cJ~)%4O(!QIX2gVf%r*NhHP(=bG+~k4W1vPq$zZ(7SfO;q@F|IvzN`+z>PR z{a%^cy-#_W@6PU8felaS9?P*4pOC3Tl6>Py$z&0lGga@Y=AcLB*p<5Pes#;_ORGVj z;D7gZYA6hxT7UCM9C-i4b7=gX*S`SoTH_}{@V@`Bf45NlMIpw1%Ofhfnra9t`AOGm z;Yh&%VV2&Ma2{;}bRxwYwxZ|bdr6uk34RMyg2QCY{sV}%4zap{Mvp(wG4IDaoNZIB zqeZ&ksz&yc4BWfTM85!CYw3+mVT(p8u%l%LQY-_rKg^+1pL89}(fFbeq8@g`irpt!ef@03<2KT5feDA+O#n`L)Kw`GuhhUjx zdymG+#4OK!#gmb)r>b^h<*YDO6IPE~*zT`-OlP&XIV9bYLloJU%J zJFFZ*|K?m7NH3mP-W$5W)K^V z1HkgN^#H_T&1EBUfI7+a#hxl@> z+4`~$e}1~LWg~U;xOS8E%)v=frUeP_j>$=#v;+Bwol&NX+;iGECd1uLf!2JZsyEpv zJEtU2dN_k$f~&d!hy%xU!;8tH*fpW@_)sOVTsn!@v`8u=82@_F-gPvr`KSSD>`zhV zd_vg6@|u%Zzdz)c??{}e2*BC7%iT9 z?B$C+#s7G?)U@Y%?MkM5jM|xV!WnV>&w5MptCN7^=BP-KvR-Fn(cN z%K8&PvtE{}9W#ORaR%F^pDe&62`w(;ouR>>5#Fs@0*v!xbSf-PGgFcqglo`eq-UK6 zgKvqRWQsp>baXsU=bvF^Dk$<=e&z};iy%$JD+1p1NSp0Tb7w)P^HSq{MtO80ccVW4 VEv8)vT;b%3vb=^|nXH-re*l3hE`I<3 literal 0 HcmV?d00001 From 601df53a55f9f4017af3e45a75be9ee59fa6b461 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 15 Dec 2020 06:18:42 -0800 Subject: [PATCH 220/958] draft --- .../manage-auto-investigation.md | 31 +++++++++++++++++++ 1 file changed, 31 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md index 501b9ea75e..e3d24311a7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md @@ -97,6 +97,37 @@ In Microsoft Defender for Endpoint, all verdicts are [tracked and viewable in th 4. Select an item to view more details about that remediation action. +## Undo completed actions +You can undo actions that have been completed automatically (or manually) from the +Remediation actions that have been taken automatically or manually can be undone from the Action Center History page. + +Supported action sources: + - Automated investigation + - Microsoft Defender Antivirus + - Manual response actions + - Supported Actions: + - Isolate device + - Restrict code execution + - Quarantine a file + - Remove a registry key + - Stop a service + - Disable a driver + - Remove a scheduled task + +if you’ve determined that a machine or a file is clean, you can multi-select a list of actions and undo them all at the same time + +1. Select the actions you want to cancel. + +2. Click Undo at the right-side pane. + +![Action center](images/autoir-action-center-1.png) +For a single file, you can roll back and remove a file from quarantine in all the machines in which it was located. +1. Select one of the actions related to this file. +2. Check ‘Apply to X more instances of this file’ +3. Click Undo. + +![Quarantine file](images/autoir-quarantine-file-1.png) + ## Next steps - [See the interactive guide: Investigate and remediate threats with Microsoft Defender ATP](https://aka.ms/MDATP-IR-Interactive-Guide) From 32274198ec5a3a29ac03277f0a01d9bc3d9285f1 Mon Sep 17 00:00:00 2001 From: Crimsonfox89 <40465227+Crimsonfox89@users.noreply.github.com> Date: Tue, 15 Dec 2020 14:21:33 +0000 Subject: [PATCH 221/958] Update windows/security/information-protection/tpm/tpm-fundamentals.md Language agnostic Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../security/information-protection/tpm/tpm-fundamentals.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/tpm/tpm-fundamentals.md b/windows/security/information-protection/tpm/tpm-fundamentals.md index 93210372ea..462656a2ad 100644 --- a/windows/security/information-protection/tpm/tpm-fundamentals.md +++ b/windows/security/information-protection/tpm/tpm-fundamentals.md @@ -151,5 +151,5 @@ The Windows TPM-based smart card, which is a virtual smart card, can be configur - [Trusted Platform Module](trusted-platform-module-top-node.md) (list of topics) - [TPM Cmdlets in Windows PowerShell](https://docs.microsoft.com/powershell/module/trustedplatformmodule/) -- [TPM WMI providers](https://docs.microsoft.com/en-gb/windows/win32/secprov/security-wmi-providers-reference) -- [Prepare your organization for BitLocker: Planning and Policies - TPM configurations](https://docs.microsoft.com/en-gb/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies#tpm-hardware-configurations) +- [TPM WMI providers](https://docs.microsoft.com/windows/win32/secprov/security-wmi-providers-reference) +- [Prepare your organization for BitLocker: Planning and Policies - TPM configurations](https://docs.microsoft.com/windows/security/information-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies#tpm-hardware-configurations) From 2f11e48f564852ce231c4ebcc62715212253e654 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 06:36:56 -0800 Subject: [PATCH 222/958] Update manage-auto-investigation.md --- .../manage-auto-investigation.md | 41 +++++++++---------- 1 file changed, 19 insertions(+), 22 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md index e3d24311a7..0891731c3a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md @@ -17,7 +17,7 @@ ms.collection: - m365-security-compliance - m365initiative-defender-endpoint ms.topic: conceptual -ms.date: 09/15/2020 +ms.date: 12/15/2020 --- # Review and approve remediation actions following an automated investigation @@ -98,33 +98,30 @@ In Microsoft Defender for Endpoint, all verdicts are [tracked and viewable in th 4. Select an item to view more details about that remediation action. ## Undo completed actions -You can undo actions that have been completed automatically (or manually) from the -Remediation actions that have been taken automatically or manually can be undone from the Action Center History page. -Supported action sources: - - Automated investigation - - Microsoft Defender Antivirus - - Manual response actions - - Supported Actions: - - Isolate device - - Restrict code execution - - Quarantine a file - - Remove a registry key - - Stop a service - - Disable a driver - - Remove a scheduled task +if you’ve determined that a device or a file is not a threat, you can undo remediation actions that were taken, whether those actions were taken automatically or manually. In the Action center, on the **History** tab, you can undo any of the following actions: -if you’ve determined that a machine or a file is clean, you can multi-select a list of actions and undo them all at the same time +| Action source | Supported Actions | +|:---|:---| +| - Automated investigation
    - Microsoft Defender Antivirus
    - Manual response actions | - Isolate device
    - Restrict code execution
    - Quarantine a file
    - Remove a registry key
    - Stop a service
    - Disable a driver
    - Remove a scheduled task | -1. Select the actions you want to cancel. +### To undo multiple actions at one time -2. Click Undo at the right-side pane. +1. Go to the Action center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in. + +2. On the **History** tab, select the actions that you want to undo. + +3. In the pane on the right side of the screen, select **Undo**. + +### To remove a file from quarantine ![Action center](images/autoir-action-center-1.png) -For a single file, you can roll back and remove a file from quarantine in all the machines in which it was located. -1. Select one of the actions related to this file. -2. Check ‘Apply to X more instances of this file’ -3. Click Undo. + +1. Go to the Action center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in. + +2. On the **History** tab, select a file that has the Action type **Quarantine file**. + +3. In the pane on the right side of the screen, select **Apply to X more instances of this file**, and then select **Undo**. ![Quarantine file](images/autoir-quarantine-file-1.png) From 65c260ca419992190cdbdb8492d97c2988fd14a4 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 06:40:02 -0800 Subject: [PATCH 223/958] Update manage-auto-investigation.md --- .../microsoft-defender-atp/manage-auto-investigation.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md index 038fce62dd..28ec738f87 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md @@ -115,15 +115,16 @@ if you’ve determined that a device or a file is not a threat, you can undo rem ### To remove a file from quarantine -![Action center](images/autoir-action-center-1.png) 1. Go to the Action center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in. 2. On the **History** tab, select a file that has the Action type **Quarantine file**. + ![Action center](images/autoir-action-center-1.png) + 3. In the pane on the right side of the screen, select **Apply to X more instances of this file**, and then select **Undo**. -![Quarantine file](images/autoir-quarantine-file-1.png) + ![Quarantine file](images/autoir-quarantine-file-1.png) ## Next steps From 97ab69db292c8228cb2f16495085d6c5272cdc02 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 06:58:13 -0800 Subject: [PATCH 224/958] Update manage-auto-investigation.md --- .../microsoft-defender-atp/manage-auto-investigation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md index 28ec738f87..04f3a39dc6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md @@ -113,7 +113,7 @@ if you’ve determined that a device or a file is not a threat, you can undo rem 3. In the pane on the right side of the screen, select **Undo**. -### To remove a file from quarantine +### To remove a file from quarantine across multiple devices 1. Go to the Action center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in. From c6e7c5f14f0a56101f0a13aad3fdf7d392d23897 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 07:11:43 -0800 Subject: [PATCH 225/958] Update manage-auto-investigation.md --- .../microsoft-defender-atp/manage-auto-investigation.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md index 04f3a39dc6..a93b36c298 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md @@ -107,7 +107,7 @@ if you’ve determined that a device or a file is not a threat, you can undo rem ### To undo multiple actions at one time -1. Go to the Action center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in. +1. Go to the Action center ([https://securitycenter.windows.com/action-center](https://securitycenter.windows.com/action-center)) and sign in. 2. On the **History** tab, select the actions that you want to undo. @@ -116,7 +116,7 @@ if you’ve determined that a device or a file is not a threat, you can undo rem ### To remove a file from quarantine across multiple devices -1. Go to the Action center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in. +1. Go to the Action center ([https://securitycenter.windows.com/action-center](https://securitycenter.windows.com/action-center)) and sign in. 2. On the **History** tab, select a file that has the Action type **Quarantine file**. From 574aa0cabcfa5f1176e8e9594f0cdbe02874a211 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 07:42:50 -0800 Subject: [PATCH 226/958] Update manage-auto-investigation.md --- .../microsoft-defender-atp/manage-auto-investigation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md index a93b36c298..b0ca7217c9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md @@ -99,7 +99,7 @@ In Microsoft Defender for Endpoint, all verdicts are [tracked and viewable in th ## Undo completed actions -if you’ve determined that a device or a file is not a threat, you can undo remediation actions that were taken, whether those actions were taken automatically or manually. In the Action center, on the **History** tab, you can undo any of the following actions: +If you’ve determined that a device or a file is not a threat, you can undo remediation actions that were taken, whether those actions were taken automatically or manually. In the Action center, on the **History** tab, you can undo any of the following actions: | Action source | Supported Actions | |:---|:---| From c7f2ac583862855ddb60d3594e32b3ce347ac885 Mon Sep 17 00:00:00 2001 From: mapalko Date: Tue, 15 Dec 2020 11:23:50 -0800 Subject: [PATCH 227/958] Fixing hello PIN reset missing image link Removing reference to an image that is missing/not available. --- .../hello-for-business/hello-feature-pin-reset.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 635c9794d1..e4e7af1253 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -104,7 +104,6 @@ On-premises deployments provide users with the ability to reset forgotten PINs e 1. Sign-in to Windows 10, version 1703 or later using an alternate credential. 2. Open **Settings**, click **Accounts**, click **Sign-in options**. 3. Under **PIN**, click **I forgot my PIN** and follow the instructions. -![PIN reset option](images/pinreset/pin-reset-option.png) #### Reset PIN above the Lock Screen From 58799fe56a4dfeba12628766831fc0192babcffb Mon Sep 17 00:00:00 2001 From: Sunny Zankharia <67922512+sazankha@users.noreply.github.com> Date: Tue, 15 Dec 2020 11:55:49 -0800 Subject: [PATCH 228/958] Update md-app-guard-overview.md Added more content pertaining to Microsoft Office --- .../md-app-guard-overview.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md index 03930690d8..62c8df613c 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md @@ -22,9 +22,12 @@ Microsoft Defender Application Guard (Application Guard) is designed to help pre ## What is Application Guard and how does it work? -Designed for Windows 10 and Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting your company while your employees browse the Internet. As an enterprise administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted. +For Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting your company while your employees browse the Internet. As an enterprise administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated Hyper-V-enabled container. + +For Microsoft Office, Application Guard helps prevents untrusted Word, Powerpoint and Excel files from accessing trusted resources, by opening these files in an isolated Hyper-V-enabled container. + +The isolated Hyper-V container is separate from the host operating system. This container isolation means that if the untrusted site or file turns out to be malicious, the host PC is protected, and the attacker can't get to your enterprise data. For example, this approach makes the isolated container anonymous, so an attacker can't get to your employee's enterprise credentials. -If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated Hyper-V-enabled container, which is separate from the host operating system. This container isolation means that if the untrusted site turns out to be malicious, the host PC is protected, and the attacker can't get to your enterprise data. For example, this approach makes the isolated container anonymous, so an attacker can't get to your employee's enterprise credentials. ![Hardware isolation diagram](images/appguard-hardware-isolation.png) From ac09e26c58d592e3d9b93acfe91f5246b3813d31 Mon Sep 17 00:00:00 2001 From: pianofab Date: Tue, 15 Dec 2020 14:00:55 -0800 Subject: [PATCH 229/958] Update whats-new-windows-10-version-20H2.md --- windows/whats-new/whats-new-windows-10-version-20H2.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-20H2.md b/windows/whats-new/whats-new-windows-10-version-20H2.md index f1046db593..ec7ffb671e 100644 --- a/windows/whats-new/whats-new-windows-10-version-20H2.md +++ b/windows/whats-new/whats-new-windows-10-version-20H2.md @@ -104,7 +104,7 @@ With specialized hardware and software components available on devices shipping ### Windows Sandbox -New polices for [Windows Sandbox](https://docs.microsoft.com/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview) are available in this release. For more information, see [Policy CSP - WindowsSandbox](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowssandbox). +New policies for [Windows Sandbox](https://docs.microsoft.com/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview) are available in this release. For more information, see [Policy CSP - WindowsSandbox](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-windowssandbox). ### Windows Virtual Desktop (WVD) From fa7ff33a3ae22711e9040bfc9958ce7299d727f3 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 14:54:58 -0800 Subject: [PATCH 230/958] Create defender-endpoint-false-positives-negatives.md --- ...nder-endpoint-false-positives-negatives.md | 33 +++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md new file mode 100644 index 0000000000..6ea027c1ee --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md @@ -0,0 +1,33 @@ +--- +title: Address false positives/negatives in Microsoft Defender for Endpoint +description: Learn how to handle false positives or false negatives in Microsoft Defender for Endpoint. +keywords: alert, exclusion, defender atp, false positive, false negative +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.technology: windows +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: deniseb +author: denisebmsft +ms.date: 12/15/2020 +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: +- m365-security-compliance +- m365initiative-defender-endpoint +ms.topic: conceptual +ms.reviewer: ramarom, evaldm, isco, mabraitm, chriggs, yonghree +ms.custom: AIR +--- + +# Address false positives/negatives in Microsoft Defender for Endpoint + +[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] + +**Applies to** + +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146806) + From 6ce84f2c4dbacc71486731a580b322af7bd12486 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 14:57:19 -0800 Subject: [PATCH 231/958] Update defender-endpoint-false-positives-negatives.md --- .../defender-endpoint-false-positives-negatives.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md index 6ea027c1ee..b3098ec0dd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md +++ b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md @@ -20,7 +20,7 @@ ms.collection: - m365initiative-defender-endpoint ms.topic: conceptual ms.reviewer: ramarom, evaldm, isco, mabraitm, chriggs, yonghree -ms.custom: AIR +ms.custom: FPFN --- # Address false positives/negatives in Microsoft Defender for Endpoint @@ -31,3 +31,5 @@ ms.custom: AIR - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146806) +Did Microsoft Defender for Endpoint identify an artifact as malicious, even though it wasn't? Are files or processes that are not a threat being stopped in their tracks by Defender for Endpoint? Or, did Defender for Endpoint miss something? Use this article as a guide for addressing false positives or false negatives in Defender for Endpoint. + From fda53f2bd94c7d4e2691922fad5982a7c5b08a0e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 15:10:19 -0800 Subject: [PATCH 232/958] Update defender-endpoint-false-positives-negatives.md --- .../defender-endpoint-false-positives-negatives.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md index b3098ec0dd..72ede58c51 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md +++ b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md @@ -33,3 +33,6 @@ ms.custom: FPFN Did Microsoft Defender for Endpoint identify an artifact as malicious, even though it wasn't? Are files or processes that are not a threat being stopped in their tracks by Defender for Endpoint? Or, did Defender for Endpoint miss something? Use this article as a guide for addressing false positives or false negatives in Defender for Endpoint. +| Step | Description | +|:---|:---| +| 1. Identify a false positive/negative | | \ No newline at end of file From db4a4458509396d7319faee1d787ed2ec8b7f626 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 15 Dec 2020 15:12:33 -0800 Subject: [PATCH 233/958] Added Printer ADMX-backed policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 27 + .../policy-configuration-service-provider.md | 84 + .../mdm/policy-csp-admx-printing.md | 2027 +++++++++++++++++ 4 files changed, 2139 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-printing.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 555d34e037..5082f05ed7 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -228,6 +228,7 @@ #### [ADMX_PeerToPeerCaching](policy-csp-admx-peertopeercaching.md) #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) +#### [ADMX_Printing](policy-csp-admx-printing.md) #### [ADMX_Programs](policy-csp-admx-programs.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) #### [ADMX_RemoteAssistance](policy-csp-admx-remoteassistance.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 8acefc3442..ec137198dc 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -687,6 +687,33 @@ ms.date: 10/08/2020 - [ADMX_PowerShellExecutionPolicy/EnableScripts](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enablescripts) - [ADMX_PowerShellExecutionPolicy/EnableTranscripting](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enabletranscripting) - [ADMX_PowerShellExecutionPolicy/EnableUpdateHelpDefaultSourcePath](./policy-csp-admx-powershellexecutionpolicy.md#admx-powershellexecutionpolicy-enableupdatehelpdefaultsourcepath) +- [ADMX_Printing/AllowWebPrinting](./policy-csp-admx-printing.md#admx-printing-allowwebprinting) +- [ADMX_Printing/ApplicationDriverIsolation](./policy-csp-admx-printing.md#admx-printing-applicationdriverisolation) +- [ADMX_Printing/CustomizedSupportUrl](./policy-csp-admx-printing.md#admx-printing-customizedsupporturl) +- [ADMX_Printing/DoNotInstallCompatibleDriverFromWindowsUpdate](./policy-csp-admx-printing.md#admx-printing-donotinstallcompatibledriverfromwindowsupdate) +- [ADMX_Printing/DomainPrinters](./policy-csp-admx-printing.md#admx-printing-domainprinters) +- [ADMX_Printing/DownlevelBrowse](./policy-csp-admx-printing.md#admx-printing-downlevelbrowse) +- [ADMX_Printing/EMFDespooling](./policy-csp-admx-printing.md#admx-printing-emfdespooling) +- [ADMX_Printing/ForceSoftwareRasterization](./policy-csp-admx-printing.md#admx-printing-forcesoftwarerasterization) +- [ADMX_Printing/IntranetPrintersUrl](./policy-csp-admx-printing.md#admx-printing-intranetprintersurl) +- [ADMX_Printing/KMPrintersAreBlocked](./policy-csp-admx-printing.md#admx-printing-kmprintersareblocked) +- [ADMX_Printing/LegacyDefaultPrinterMode](./policy-csp-admx-printing.md#admx-printing-legacydefaultprintermode) +- [ADMX_Printing/MXDWUseLegacyOutputFormatMSXPS](./policy-csp-admx-printing.md#admx-printing-mxdwuselegacyoutputformatmsxps) +- [ADMX_Printing/NoDeletePrinter](./policy-csp-admx-printing.md#admx-printing-nodeleteprinter) +- [ADMX_Printing/NonDomainPrinters](./policy-csp-admx-printing.md#admx-printing-nondomainprinters) +- [ADMX_Printing/PackagePointAndPrintOnly](./policy-csp-admx-printing.md#admx-printing-packagepointandprintonly) +- [ADMX_Printing/PackagePointAndPrintOnly_Win7](./policy-csp-admx-printing.md#admx-printing-packagepointandprintonly-win7) +- [ADMX_Printing/PackagePointAndPrintServerList](./policy-csp-admx-printing.md#admx-printing-packagepointandprintserverlist) +- [ADMX_Printing/PackagePointAndPrintServerList_Win7](./policy-csp-admx-printing.md#admx-printing-packagepointandprintserverlist-win7) +- [ADMX_Printing/PhysicalLocation](./policy-csp-admx-printing.md#admx-printing-physicallocation) +- [ADMX_Printing/PhysicalLocationSupport](./policy-csp-admx-printing.md#admx-printing-physicallocationsupport) +- [ADMX_Printing/PrintDriverIsolationExecutionPolicy](./policy-csp-admx-printing.md#admx-printing-printdriverisolationexecutionpolicy +) +- [ADMX_Printing/PrintDriverIsolationOverrideCompat](./policy-csp-admx-printing.md#admx-printing-printdriverisolationoverridecompat) +- [ADMX_Printing/PrinterDirectorySearchScope](./policy-csp-admx-printing.md#admx-printing-printerdirectorysearchscope) +- [ADMX_Printing/PrinterServerThread](./policy-csp-admx-printing.md#admx-printing-printerserverthread) +- [ADMX_Printing/ShowJobTitleInEventLogs](./policy-csp-admx-printing.md#admx-printing-showjobtitleineventlogs) +- [ADMX_Printing/V4DriverDisallowPrinterExtension](./policy-csp-admx-printing.md#admx-printing-v4driverdisallowprinterextension) - [ADMX_Programs/NoDefaultPrograms](./policy-csp-admx-programs.md#admx-programs-nodefaultprograms) - [ADMX_Programs/NoGetPrograms](./policy-csp-admx-programs.md#admx-programs-nogetprograms) - [ADMX_Programs/NoInstalledUpdates](./policy-csp-admx-programs.md#admx-programs-noinstalledupdates) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 9b53413efa..a1a5453c94 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -2428,6 +2428,90 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_Printing policies + +
    +
    + ADMX_Printing/AllowWebPrinting +
    +
    + ADMX_Printing/ApplicationDriverIsolation +
    +
    + ADMX_Printing/CustomizedSupportUrl +
    +
    + ADMX_Printing/DoNotInstallCompatibleDriverFromWindowsUpdate +
    +
    + ADMX_Printing/DomainPrinters +
    +
    + ADMX_Printing/DownlevelBrowse +
    +
    + ADMX_Printing/EMFDespooling +
    +
    + ADMX_Printing/ForceSoftwareRasterization +
    +
    + ADMX_Printing/IntranetPrintersUrl +
    +
    + ADMX_Printing/KMPrintersAreBlocked +
    +
    + ADMX_Printing/LegacyDefaultPrinterMode +
    +
    + ADMX_Printing/MXDWUseLegacyOutputFormatMSXPS +
    +
    + ADMX_Printing/NoDeletePrinter +
    +
    + ADMX_Printing/NonDomainPrinters +
    +
    + ADMX_Printing/PackagePointAndPrintOnly +
    +
    + ADMX_Printing/PackagePointAndPrintOnly_Win7 +
    +
    + ADMX_Printing/PackagePointAndPrintServerList +
    +
    + ADMX_Printing/PackagePointAndPrintServerList_Win7 +
    +
    + ADMX_Printing/PhysicalLocation +
    +
    + ADMX_Printing/PhysicalLocationSupport +
    +
    + ADMX_Printing/PrintDriverIsolationExecutionPolicy +
    +
    + ADMX_Printing/PrintDriverIsolationOverrideCompat +
    +
    + ADMX_Printing/PrinterDirectorySearchScope +
    +
    + ADMX_Printing/PrinterServerThread +
    +
    + ADMX_Printing/ShowJobTitleInEventLogs +
    +
    + ADMX_Printing/V4DriverDisallowPrinterExtension +
    +
    + ### ADMX_Programs policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-printing.md b/windows/client-management/mdm/policy-csp-admx-printing.md new file mode 100644 index 0000000000..628d572650 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-printing.md @@ -0,0 +1,2027 @@ +--- +title: Policy CSP - ADMX_Printing +description: Policy CSP - ADMX_Printing +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/15/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Printing +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Printing policies + +
    +
    + ADMX_Printing/AllowWebPrinting +
    +
    + ADMX_Printing/ApplicationDriverIsolation +
    +
    + ADMX_Printing/CustomizedSupportUrl +
    +
    + ADMX_Printing/DoNotInstallCompatibleDriverFromWindowsUpdate +
    +
    + ADMX_Printing/DomainPrinters +
    +
    + ADMX_Printing/DownlevelBrowse +
    +
    + ADMX_Printing/EMFDespooling +
    +
    + ADMX_Printing/ForceSoftwareRasterization +
    +
    + ADMX_Printing/IntranetPrintersUrl +
    +
    + ADMX_Printing/KMPrintersAreBlocked +
    +
    + ADMX_Printing/LegacyDefaultPrinterMode +
    +
    + ADMX_Printing/MXDWUseLegacyOutputFormatMSXPS +
    +
    + ADMX_Printing/NoDeletePrinter +
    +
    + ADMX_Printing/NonDomainPrinters +
    +
    + ADMX_Printing/PackagePointAndPrintOnly +
    +
    + ADMX_Printing/PackagePointAndPrintOnly_Win7 +
    +
    + ADMX_Printing/PackagePointAndPrintServerList +
    +
    + ADMX_Printing/PackagePointAndPrintServerList_Win7 +
    +
    + ADMX_Printing/PhysicalLocation +
    +
    + ADMX_Printing/PhysicalLocationSupport +
    +
    + ADMX_Printing/PrintDriverIsolationExecutionPolicy +
    +
    + ADMX_Printing/PrintDriverIsolationOverrideCompat +
    +
    + ADMX_Printing/PrinterDirectorySearchScope +
    +
    + ADMX_Printing/PrinterServerThread +
    +
    + ADMX_Printing/ShowJobTitleInEventLogs +
    +
    + ADMX_Printing/V4DriverDisallowPrinterExtension +
    +
    + + +
    + + +**ADMX_Printing/AllowWebPrinting** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Internet printing lets you display printers on Web pages so that printers can be viewed, managed, and used across the Internet or an intranet. + +If you enable this policy setting, Internet printing is activated on this server. + +If you disable this policy setting or do not configure it, Internet printing is not activated. + +Internet printing is an extension of Internet Information Services (IIS). To use Internet printing, IIS must be installed, and printing support and this setting must be enabled. + +> [!NOTE] +> This setting affects the server side of Internet printing only. It does not prevent the print client on the computer from printing across the Internet. + +Also, see the "Custom support URL in the Printers folder's left pane" setting in this folder and the "Browse a common Web site to find printers" setting in User Configuration\Administrative Templates\Control Panel\Printers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Activate Internet printing* +- GP name: *AllowWebPrinting* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/ApplicationDriverIsolation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines if print driver components are isolated from applications instead of normally loading them into applications. Isolating print drivers greatly reduces the risk of a print driver failure causing an application crash. + +Not all applications support driver isolation. By default, Microsoft Excel 2007, Excel 2010, Word 2007, Word 2010 and certain other applications are configured to support it. Other applications may also be capable of isolating print drivers, depending on whether they are configured for it. + +If you enable or do not configure this policy setting, then applications that are configured to support driver isolation will be isolated. + +If you disable this policy setting, then print drivers will be loaded within all associated application processes. + +> [!NOTE] +> - This policy setting applies only to applications opted into isolation. +> - This policy setting applies only to print drivers loaded by applications. Print drivers loaded by the print spooler are not affected. +> - This policy setting is only checked once during the lifetime of a process. After changing the policy, a running application must be relaunched before settings take effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Isolate print drivers from applications* +- GP name: *ApplicationDriverIsolation* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/CustomizedSupportUrl** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. By default, the Printers folder includes a link to the Microsoft Support Web page called "Get help with printing". It can also include a link to a Web page supplied by the vendor of the currently selected printer. + +If you enable this policy setting, you replace the "Get help with printing" default link with a link to a Web page customized for your enterprise. + +If you disable this setting or do not configure it, or if you do not enter an alternate Internet address, the default link will appear in the Printers folder. + +> [!NOTE] +> Web pages links only appear in the Printers folder when Web view is enabled. If Web view is disabled, the setting has no effect. (To enable Web view, open the Printers folder, and, on the Tools menu, click Folder Options, click the General tab, and then click "Enable Web content in folders.") + +Also, see the "Activate Internet printing" setting in this setting folder and the "Browse a common web site to find printers" setting in User Configuration\Administrative Templates\Control Panel\Printers. + +Web view is affected by the "Turn on Classic Shell" and "Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon" settings in User Configuration\Administrative Templates\Windows Components\Windows Explorer, and by the "Enable Active Desktop" setting in User Configuration\Administrative Templates\Desktop\Active Desktop. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Custom support URL in the Printers folder's left pane* +- GP name: *CustomizedSupportUrl* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/DoNotInstallCompatibleDriverFromWindowsUpdate** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage where client computers search for Point and Printer drivers. + +If you enable this policy setting, the client computer will continue to search for compatible Point and Print drivers from Windows Update after it fails to find the compatible driver from the local driver store and the server driver cache. + +If you disable this policy setting, the client computer will only search the local driver store and server driver cache for compatible Point and Print drivers. If it is unable to find a compatible driver, then the Point and Print connection will fail. + +This policy setting is not configured by default, and the behavior depends on the version of Windows that you are using. + +By default, Windows Ultimate, Professional and Home SKUs will continue to search for compatible Point and Print drivers from Windows Update, if needed. However, you must explicitly enable this policy setting for other versions of Windows (for example Windows Enterprise, and all versions of Windows Server 2008 R2 and later) to have the same behavior. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Extend Point and Print connection to search Windows Update* +- GP name: *DoNotInstallCompatibleDriverFromWindowsUpdate* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/DomainPrinters** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. If you enable this policy setting, it sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on a managed network (when the computer is able to reach a domain controller, e.g. a domain-joined laptop on a corporate network.) + +If this policy setting is disabled, the network scan page will not be displayed. + +If this policy setting is not configured, the Add Printer wizard will display the default number of printers of each type: + +- Directory printers: 20 +- TCP/IP printers: 0 +- Web Services printers: 0 +- Bluetooth printers: 10 +- Shared printers: 0 + +In order to view available Web Services printers on your network, ensure that network discovery is turned on. To turn on network discovery, click "Start", click "Control Panel", and then click "Network and Internet". On the "Network and Internet" page, click "Network and Sharing Center". On the Network and Sharing Center page, click "Change advanced sharing settings". On the Advanced sharing settings page, click the arrow next to "Domain" arrow, click "turn on network discovery", and then click "Save changes". + +If you would like to not display printers of a certain type, enable this policy and set the number of printers to display to 0. + +In Windows 10 and later, only TCP/IP printers can be shown in the wizard. If you enable this policy setting, only TCP/IP printer limits are applicable. On Windows 10 only, if you disable or do not configure this policy setting, the default limit is applied. + +In Windows 8 and later, Bluetooth printers are not shown so its limit does not apply to those versions of Windows. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Add Printer wizard - Network scan page (Managed network)* +- GP name: *DomainPrinters* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/DownlevelBrowse** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Allows users to use the Add Printer Wizard to search the network for shared printers. + +If you enable this setting or do not configure it, when users choose to add a network printer by selecting the "A network printer, or a printer attached to another computer" radio button on Add Printer Wizard's page 2, and also check the "Connect to this printer (or to browse for a printer, select this option and click Next)" radio button on Add Printer Wizard's page 3, and do not specify a printer name in the adjacent "Name" edit box, then Add Printer Wizard displays the list of shared printers on the network and invites to choose a printer from the shown list. + +If you disable this setting, the network printer browse page is removed from within the Add Printer Wizard, and users cannot search the network but must type a printer name. + +> [!NOTE] +> This setting affects the Add Printer Wizard only. It does not prevent users from using other programs to search for shared printers or to connect to network printers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Browse the network to find printers* +- GP name: *DownlevelBrowse* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/EMFDespooling** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. When printing through a print server, determines whether the print spooler on the client will process print jobs itself, or pass them on to the server to do the work. + +This policy setting only effects printing to a Windows print server. + +If you enable this policy setting on a client machine, the client spooler will not process print jobs before sending them to the print server. This decreases the workload on the client at the expense of increasing the load on the server. + +If you disable this policy setting on a client machine, the client itself will process print jobs into printer device commands. These commands will then be sent to the print server, and the server will simply pass the commands to the printer. This increases the workload of the client while decreasing the load on the server. + +If you do not enable this policy setting, the behavior is the same as disabling it. + +> [!NOTE] +> This policy does not determine whether offline printing will be available to the client. The client print spooler can always queue print jobs when not connected to the print server. Upon reconnecting to the server, the client will submit any pending print jobs. +> +> Some printer drivers require a custom print processor. In some cases the custom print processor may not be installed on the client machine, such as when the print server does not support transferring print processors during point-and-print. In the case of a print processor mismatch, the client spooler will always send jobs to the print server for rendering. Disabling the above policy setting does not override this behavior. +> +> In cases where the client print driver does not match the server print driver (mismatched connection), the client will always process the print job, regardless of the setting of this policy. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Always render print jobs on the server* +- GP name: *EMFDespooling* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/ForceSoftwareRasterization** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines whether the XPS Rasterization Service or the XPS-to-GDI conversion (XGC) is forced to use a software rasterizer instead of a Graphics Processing Unit (GPU) to rasterize pages. + +This setting may improve the performance of the XPS Rasterization Service or the XPS-to-GDI conversion (XGC) on machines that have a relatively powerful CPU as compared to the machine’s GPU. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Always rasterize content to be printed using a software rasterizer* +- GP name: *ForceSoftwareRasterization* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/IntranetPrintersUrl** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Adds a link to an Internet or intranet Web page to the Add Printer Wizard. + +You can use this setting to direct users to a Web page from which they can install printers. + +If you enable this setting and type an Internet or intranet address in the text box, the system adds a Browse button to the "Specify a Printer" page in the Add Printer Wizard. The Browse button appears beside the "Connect to a printer on the Internet or on a home or office network" option. When users click Browse, the system opens an Internet browser and navigates to the specified URL address to display the available printers. + +This setting makes it easy for users to find the printers you want them to add. + +Also, see the "Custom support URL in the Printers folder's left pane" and "Activate Internet printing" settings in "Computer Configuration\Administrative Templates\Printers." + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Browse a common web site to find printers* +- GP name: *IntranetPrintersUrl* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/KMPrintersAreBlocked** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines whether printers using kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access to system-wide memory, and therefore poorly-written kernel-mode drivers can cause stop errors. + +If you disable this setting, or do not configure it, then printers using a kernel-mode drivers may be installed on the local computer running Windows XP Home Edition and Windows XP Professional. + +If you do not configure this setting on Windows Server 2003 family products, the installation of kernel-mode printer drivers will be blocked. + +If you enable this setting, installation of a printer using a kernel-mode driver will not be allowed. + +> [!NOTE] +> By applying this policy, existing kernel-mode drivers will be disabled upon installation of service packs or reinstallation of the Windows XP operating system. This policy does not apply to 64-bit kernel-mode printer drivers as they cannot be installed and associated with a print queue. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow installation of printers using kernel-mode drivers* +- GP name: *KMPrintersAreBlocked* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/LegacyDefaultPrinterMode** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This preference allows you to change default printer management. + +If you enable this setting, Windows will not manage the default printer. + +If you disable this setting, Windows will manage the default printer. + +If you do not configure this setting, default printer management will not change. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows default printer management* +- GP name: *LegacyDefaultPrinterMode* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/MXDWUseLegacyOutputFormatMSXPS** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Microsoft XPS Document Writer (MXDW) generates OpenXPS (*.oxps) files by default in Windows 10, Windows 10 and Windows Server 2019. + +If you enable this group policy setting, the default MXDW output format is the legacy Microsoft XPS (*.xps). + +If you disable or do not configure this policy setting, the default MXDW output format is OpenXPS (*.oxps). + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Change Microsoft XPS Document Writer (MXDW) default output format to the legacy Microsoft XPS format (*.xps)* +- GP name: *MXDWUseLegacyOutputFormatMSXPS* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/NoDeletePrinter** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. If this policy setting is enabled, it prevents users from deleting local and network printers. + +If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a message appears explaining that a setting prevents the action. + +This setting does not prevent users from running other programs to delete a printer. + +If this policy is disabled, or not configured, users can delete printers using the methods described above. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent deletion of printers* +- GP name: *NoDeletePrinter* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/NonDomainPrinters** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on an unmanaged network (when the computer is not able to reach a domain controller, e.g. a domain-joined laptop on a home network.) + +If this setting is disabled, the network scan page will not be displayed. + +If this setting is not configured, the Add Printer wizard will display the default number of printers of each type: + +- TCP/IP printers: 50 +- Web Services printers: 50 +- Bluetooth printers: 10 +- Shared printers: 50 + +If you would like to not display printers of a certain type, enable this policy and set the number of printers to display to 0. + +In Windows 10 and later, only TCP/IP printers can be shown in the wizard. If you enable this policy setting, only TCP/IP printer limits are applicable. On Windows 10 only, if you disable or do not configure this policy setting, the default limit is applied. + +In Windows 8 and later, Bluetooth printers are not shown so its limit does not apply to those versions of Windows. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Add Printer wizard - Network scan page (Unmanaged network)* +- GP name: *NonDomainPrinters* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PackagePointAndPrintOnly** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy restricts clients computers to use package point and print only. + +If this setting is enabled, users will only be able to point and print to printers that use package-aware drivers. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers. + +If this setting is disabled, or not configured, users will not be restricted to package-aware point and print only. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Only use Package Point and print* +- GP name: *PackagePointAndPrintOnly* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PackagePointAndPrintOnly_Win7** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy restricts clients computers to use package point and print only. + +If this setting is enabled, users will only be able to point and print to printers that use package-aware drivers. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers. + +If this setting is disabled, or not configured, users will not be restricted to package-aware point and print only. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Only use Package Point and print* +- GP name: *PackagePointAndPrintOnly_Win7* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PackagePointAndPrintServerList** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Restricts package point and print to approved servers. + +This policy setting restricts package point and print connections to approved servers. This setting only applies to Package Point and Print connections, and is completely independent from the "Point and Print Restrictions" policy that governs the behavior of non-package point and print connections. + +Windows Vista and later clients will attempt to make a non-package point and print connection anytime a package point and print connection fails, including attempts that are blocked by this policy. Administrators may need to set both policies to block all print connections to a specific print server. + +If this setting is enabled, users will only be able to package point and print to print servers approved by the network administrator. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers. + +If this setting is disabled, or not configured, package point and print will not be restricted to specific print servers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Package Point and print - Approved servers* +- GP name: *PackagePointAndPrintServerList* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PackagePointAndPrintServerList_Win7** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Restricts package point and print to approved servers. + +This policy setting restricts package point and print connections to approved servers. This setting only applies to Package Point and Print connections, and is completely independent from the "Point and Print Restrictions" policy that governs the behavior of non-package point and print connections. + +Windows Vista and later clients will attempt to make a non-package point and print connection anytime a package point and print connection fails, including attempts that are blocked by this policy. Administrators may need to set both policies to block all print connections to a specific print server. + +If this setting is enabled, users will only be able to package point and print to print servers approved by the network administrator. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers. + +If this setting is disabled, or not configured, package point and print will not be restricted to specific print servers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Package Point and print - Approved servers* +- GP name: *PackagePointAndPrintServerList_Win7* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PhysicalLocation** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. If this policy setting is enabled, it specifies the default location criteria used when searching for printers. + +This setting is a component of the Location Tracking feature of Windows printers. To use this setting, enable Location Tracking by enabling the "Pre-populate printer search location text" setting. + +When Location Tracking is enabled, the system uses the specified location as a criterion when users search for printers. The value you type here overrides the actual location of the computer conducting the search. + +Type the location of the user's computer. When users search for printers, the system uses the specified location (and other search criteria) to find a printer nearby. You can also use this setting to direct users to a particular printer or group of printers that you want them to use. + +If you disable this setting or do not configure it, and the user does not type a location as a search criterion, the system searches for a nearby printer based on the IP address and subnet mask of the user's computer. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Computer location* +- GP name: *PhysicalLocation* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PhysicalLocationSupport** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Enables the physical Location Tracking setting for Windows printers. + +Use Location Tracking to design a location scheme for your enterprise and assign computers and printers to locations in the scheme. Location Tracking overrides the standard method used to locate and associate computers and printers. The standard method uses a printer's IP address and subnet mask to estimate its physical location and proximity to computers. + +If you enable this setting, users can browse for printers by location without knowing the printer's location or location naming scheme. Enabling Location Tracking adds a Browse button in the Add Printer wizard's Printer Name and Sharing Location screen and to the General tab in the Printer Properties dialog box. If you enable the Group Policy Computer location setting, the default location you entered appears in the Location field by default. + +If you disable this setting or do not configure it, Location Tracking is disabled. Printer proximity is estimated using the standard method (that is, based on IP address and subnet mask). + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Pre-populate printer search location text* +- GP name: *PhysicalLocationSupport* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PrintDriverIsolationExecutionPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the print spooler will execute print drivers in an isolated or separate process. When print drivers are loaded in an isolated process (or isolated processes), a print driver failure will not cause the print spooler service to fail. + +If you enable or do not configure this policy setting, the print spooler will execute print drivers in an isolated process by default. + +If you disable this policy setting, the print spooler will execute print drivers in the print spooler process. + +> [!NOTE] +> - Other system or driver policy settings may alter the process in which a print driver is executed. +> - This policy setting applies only to print drivers loaded by the print spooler. Print drivers loaded by applications are not affected. +> - This policy setting takes effect without restarting the print spooler service. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Execute print drivers in isolated processes* +- GP name: *PrintDriverIsolationExecutionPolicy* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PrintDriverIsolationOverrideCompat** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting determines whether the print spooler will override the Driver Isolation compatibility reported by the print driver. This enables executing print drivers in an isolated process, even if the driver does not report compatibility. + +If you enable this policy setting, the print spooler isolates all print drivers that do not explicitly opt out of Driver Isolation. + +If you disable or do not configure this policy setting, the print spooler uses the Driver Isolation compatibility flag value reported by the print driver. + +> [!NOTE] +> - Other system or driver policy settings may alter the process in which a print driver is executed. +> - This policy setting applies only to print drivers loaded by the print spooler. Print drivers loaded by applications are not affected. +> - This policy setting takes effect without restarting the print spooler service. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Override print driver execution compatibility setting reported by print driver* +- GP name: *PrintDriverIsolationOverrideCompat* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PrinterDirectorySearchScope** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies the Active Directory location where searches for printers begin. + +The Add Printer Wizard gives users the option of searching Active Directory for a shared printer. + +If you enable this policy setting, these searches begin at the location you specify in the "Default Active Directory path" box. Otherwise, searches begin at the root of Active Directory. + +This setting only provides a starting point for Active Directory searches for printers. It does not restrict user searches through Active Directory. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Default Active Directory path when searching for printers* +- GP name: *PrinterDirectorySearchScope* +- GP path: *Control Panel\Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/PrinterServerThread** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Announces the presence of shared printers to print browse master servers for the domain. + +On domains with Active Directory, shared printer resources are available in Active Directory and are not announced. + +If you enable this setting, the print spooler announces shared printers to the print browse master servers. + +If you disable this setting, shared printers are not announced to print browse master servers, even if Active Directory is not available. + +If you do not configure this setting, shared printers are announced to browse master servers only when Active Directory is not available. + +> [!NOTE] +> A client license is used each time a client computer announces a printer to a print browse master on the domain. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Printer browsing* +- GP name: *PrinterServerThread* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/ShowJobTitleInEventLogs** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy controls whether the print job name will be included in print event logs. + +If you disable or do not configure this policy setting, the print job name will not be included. + +If you enable this policy setting, the print job name will be included in new log entries. + +> [!NOTE] +> This setting does not apply to Branch Office Direct Printing jobs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow job name in event logs* +- GP name: *ShowJobTitleInEventLogs* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + + +**ADMX_Printing/V4DriverDisallowPrinterExtension** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy determines if v4 printer drivers are allowed to run printer extensions. + +V4 printer drivers may include an optional, customized user interface known as a printer extension. These extensions may provide access to more device features, but this may not be appropriate for all enterprises. + +If you enable this policy setting, then all printer extensions will not be allowed to run. + +If you disable this policy setting or do not configure it, then all printer extensions that have been installed will be allowed to run. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Do not allow v4 printer drivers to show printer extensions* +- GP name: *V4DriverDisallowPrinterExtension* +- GP path: *Printers* +- GP ADMX file name: *Printing.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 8fa2680c62c6564809b0c4f23d176aee3537ca8c Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Wed, 16 Dec 2020 01:17:52 +0200 Subject: [PATCH 234/958] Update get-device-secure-score.md Add US Gov API note. --- .../microsoft-defender-atp/get-device-secure-score.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md b/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md index e14a6859a7..b06c301776 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md @@ -23,6 +23,9 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint(https://go.microsoft.com/fwlink/p/?linkid=2146631) +>[!NOTE] +>If you are a US Gov customer, please refer to API endpoints listed in [here](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/gov#api). + - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) Retrieves your [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md). A higher Microsoft Secure Score for Devices means your endpoints are more resilient from cybersecurity threat attacks. From d964bd716dc34301c8533d3b53e0a6e03815a4d7 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Wed, 16 Dec 2020 01:22:08 +0200 Subject: [PATCH 235/958] Update gov.md Add API section. --- .../threat-protection/microsoft-defender-atp/gov.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index af348b95bc..ddff7ba6a2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -40,7 +40,7 @@ The following OS versions are supported: - Windows Server, 2019 (with [KB4490481](https://support.microsoft.com/help/4490481)) >[!NOTE] -A patch must be deployed before device onboarding in order to configure Defender for Endpoint to the correct environment. +>A patch must be deployed before device onboarding in order to configure Defender for Endpoint to the correct environment. The following OS versions are supported via Azure Security Center: - Windows Server 2008 R2 SP1 @@ -108,4 +108,8 @@ Common URLs for all locations (Global location) | ```crl.microsoft.com```
    ``` Defender for Endpoint GCC High specific | ```us4-v20.events.data.microsoft.com```
    ```winatp-gw-usgt.microsoft.com```
    ```winatp-gw-usgv.microsoft.com```
    ```*.blob.core.usgovcloudapi.net``` +## API +Login endpoint: ```https://login.microsoftonline.us``` +Microsoft Defender for Endpoint API endpoint: ```https://api-gov.securitycenter.microsoft.us``` + From e83b43d3171de86637b2d61fe9ba106c13e4653e Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Wed, 16 Dec 2020 01:56:09 +0200 Subject: [PATCH 236/958] Update get-device-secure-score.md Fixing the Gov API link and the applies to link. --- .../microsoft-defender-atp/get-device-secure-score.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md b/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md index b06c301776..1e76593b6c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md @@ -21,10 +21,10 @@ ms.topic: article [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -**Applies to:** [Microsoft Defender for Endpoint(https://go.microsoft.com/fwlink/p/?linkid=2146631) +**Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) >[!NOTE] ->If you are a US Gov customer, please refer to API endpoints listed in [here](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/gov#api). +>If you are a US Gov customer, please refer to API endpoints listed in [here](gov#api). - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) From 131da8346ac47dac17b151b7ed07ff7c81cfd056 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 15:56:57 -0800 Subject: [PATCH 237/958] Update defender-endpoint-false-positives-negatives.md --- ...nder-endpoint-false-positives-negatives.md | 23 ++++++++++++++++++- 1 file changed, 22 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md index 72ede58c51..7a8b28a303 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md +++ b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md @@ -35,4 +35,25 @@ Did Microsoft Defender for Endpoint identify an artifact as malicious, even thou | Step | Description | |:---|:---| -| 1. Identify a false positive/negative | | \ No newline at end of file +| 1. Identify a false positive/negative | | +| 2. Review/define exclusions for Defender for Endpoint | | +| 3. Review/define indicators for Defender for Endpoint | | +| 4. Classify a false positive/negative in Defender for Endpoint | | +| 5. Submit a file for analysis | | +| 6. Confirm your software uses EV code signing | | + +## Identify a false positive/negative + +*How do we know something is a false positive or negative? What do we want customers to look for?* + +## Review or define exclusions + +*Exclusions are defined for AutoIR and for MDAV, yes?* + +## Review or define indicators + +## Classify a false positive or false negative + +## Submit a file for analysis + +## Confirm your software uses EV code signing \ No newline at end of file From f23271508637a8da03b89b90f47391a2b144ac0f Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 15 Dec 2020 16:01:44 -0800 Subject: [PATCH 238/958] Added Printing2 policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 9 + .../policy-configuration-service-provider.md | 32 + .../mdm/policy-csp-admx-printing2.md | 740 ++++++++++++++++++ 4 files changed, 782 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-printing2.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 5082f05ed7..a37aa5159e 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -229,6 +229,7 @@ #### [ADMX_PerformanceDiagnostics](policy-csp-admx-performancediagnostics.md) #### [ADMX_PowerShellExecutionPolicy](policy-csp-admx-powershellexecutionpolicy.md) #### [ADMX_Printing](policy-csp-admx-printing.md) +#### [ADMX_Printing2](policy-csp-admx-printing2.md) #### [ADMX_Programs](policy-csp-admx-programs.md) #### [ADMX_Reliability](policy-csp-admx-reliability.md) #### [ADMX_RemoteAssistance](policy-csp-admx-remoteassistance.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index ec137198dc..1e240e7969 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -714,6 +714,15 @@ ms.date: 10/08/2020 - [ADMX_Printing/PrinterServerThread](./policy-csp-admx-printing.md#admx-printing-printerserverthread) - [ADMX_Printing/ShowJobTitleInEventLogs](./policy-csp-admx-printing.md#admx-printing-showjobtitleineventlogs) - [ADMX_Printing/V4DriverDisallowPrinterExtension](./policy-csp-admx-printing.md#admx-printing-v4driverdisallowprinterextension) +- [ADMX_Printing2/AutoPublishing](./policy-csp-admx-printing2.md#admx-printing2-autopublishing) +- [ADMX_Printing2/ImmortalPrintQueue](./policy-csp-admx-printing2.md#admx-printing2-immortalprintqueue) +- [ADMX_Printing2/PruneDownlevel](./policy-csp-admx-printing2.md#admx-printing2-prunedownlevel) +- [ADMX_Printing2/PruningInterval](./policy-csp-admx-printing2.md#admx-printing2-pruninginterval) +- [ADMX_Printing2/PruningPriority](./policy-csp-admx-printing2.md#admx-printing2-pruningpriority) +- [ADMX_Printing2/PruningRetries](./policy-csp-admx-printing2.md#admx-printing2-pruningretries) +- [ADMX_Printing2/PruningRetryLog](./policy-csp-admx-printing2.md#admx-printing2-pruningretrylog) +- [ADMX_Printing2/RegisterSpoolerRemoteRpcEndPoint](./policy-csp-admx-printing2.md#admx-printing2-registerspoolerremoterpcendpoint) +- [ADMX_Printing2/VerifyPublishedState](./policy-csp-admx-printing2.md#admx-printing2-verifypublishedstate) - [ADMX_Programs/NoDefaultPrograms](./policy-csp-admx-programs.md#admx-programs-nodefaultprograms) - [ADMX_Programs/NoGetPrograms](./policy-csp-admx-programs.md#admx-programs-nogetprograms) - [ADMX_Programs/NoInstalledUpdates](./policy-csp-admx-programs.md#admx-programs-noinstalledupdates) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index a1a5453c94..c27861fc1e 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -2512,6 +2512,38 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_Printing2 policies + +
    +
    + ADMX_Printing2/AutoPublishing +
    +
    + ADMX_Printing2/ImmortalPrintQueue +
    +
    + ADMX_Printing2/PruneDownlevel +
    +
    + ADMX_Printing2/PruningInterval +
    +
    + ADMX_Printing2/PruningPriority +
    +
    + ADMX_Printing2/PruningRetries +
    +
    + ADMX_Printing2/PruningRetryLog +
    +
    + ADMX_Printing2/RegisterSpoolerRemoteRpcEndPoint +
    +
    + ADMX_Printing2/VerifyPublishedState +
    +
    + ### ADMX_Programs policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-printing2.md b/windows/client-management/mdm/policy-csp-admx-printing2.md new file mode 100644 index 0000000000..6da824049f --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-printing2.md @@ -0,0 +1,740 @@ +--- +title: Policy CSP - ADMX_Printing2 +description: Policy CSP - ADMX_Printing2 +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/15/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_Printing2 +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_Printing2 policies + +
    +
    + ADMX_Printing2/AutoPublishing +
    +
    + ADMX_Printing2/ImmortalPrintQueue +
    +
    + ADMX_Printing2/PruneDownlevel +
    +
    + ADMX_Printing2/PruningInterval +
    +
    + ADMX_Printing2/PruningPriority +
    +
    + ADMX_Printing2/PruningRetries +
    +
    + ADMX_Printing2/PruningRetryLog +
    +
    + ADMX_Printing2/RegisterSpoolerRemoteRpcEndPoint +
    +
    + ADMX_Printing2/VerifyPublishedState +
    +
    + + +
    + + +**ADMX_Printing2/AutoPublishing** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines whether the Add Printer Wizard automatically publishes the computer's shared printers in Active Directory. + +If you enable this setting or do not configure it, the Add Printer Wizard automatically publishes all shared printers. + +If you disable this setting, the Add Printer Wizard does not automatically publish printers. However, you can publish shared printers manually. + +The default behavior is to automatically publish shared printers in Active Directory. + +> [!NOTE] +> This setting is ignored if the "Allow printers to be published" setting is disabled. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Automatically publish new printers in Active Directory* +- GP name: *AutoPublishing* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/ImmortalPrintQueue** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines whether the domain controller can prune (delete from Active Directory) the printers published by this computer. + +By default, the pruning service on the domain controller prunes printer objects from Active Directory if the computer that published them does not respond to contact requests. When the computer that published the printers restarts, it republishes any deleted printer objects. + +If you enable this setting or do not configure it, the domain controller prunes this computer's printers when the computer does not respond. + +If you disable this setting, the domain controller does not prune this computer's printers. This setting is designed to prevent printers from being pruned when the computer is temporarily disconnected from the network. + +> [!NOTE] You can use the "Directory Pruning Interval" and "Directory Pruning Retry" settings to adjust the contact interval and number of contact attempts. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow pruning of published printers* +- GP name: *ImmortalPrintQueue* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/PruneDownlevel** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Determines whether the pruning service on a domain controller prunes printer objects that are not automatically republished whenever the host computer does not respond,just as it does with Windows 2000 printers. This setting applies to printers running operating systems other than Windows 2000 and to Windows 2000 printers published outside their forest. + +The Windows pruning service prunes printer objects from Active Directory when the computer that published them does not respond to contact requests. Computers running Windows 2000 Professional detect and republish deleted printer objects when they rejoin the network. However, because non-Windows 2000 computers and computers in other domains cannot republish printers in Active Directory automatically, by default, the system never prunes their printer objects. + +You can enable this setting to change the default behavior. To use this setting, select one of the following options from the "Prune non-republishing printers" box: + +- "Never" specifies that printer objects that are not automatically republished are never pruned. "Never" is the default. + +- "Only if Print Server is found" prunes printer objects that are not automatically republished only when the print server responds, but the printer is unavailable. + +- "Whenever printer is not found" prunes printer objects that are not automatically republished whenever the host computer does not respond, just as it does with Windows 2000 printers. + +> [!NOTE] +> This setting applies to printers published by using Active Directory Users and Computers or Pubprn.vbs. It does not apply to printers published by using Printers in Control Panel. + +> [!TIP] +> If you disable automatic pruning, remember to delete printer objects manually whenever you remove a printer or print server. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prune printers that are not automatically republished* +- GP name: *PruneDownlevel* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/PruningInterval** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies how often the pruning service on a domain controller contacts computers to verify that their printers are operational. + +The pruning service periodically contacts computers that have published printers. If a computer does not respond to the contact message (optionally, after repeated attempts), the pruning service "prunes" (deletes from Active Directory) printer objects the computer has published. + +By default, the pruning service contacts computers every eight hours and allows two repeated contact attempts before deleting printers from Active Directory. + +If you enable this setting, you can change the interval between contact attempts. + +If you do not configure or disable this setting the default values will be used. + +> [!NOTE] +> This setting is used only on domain controllers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Directory pruning interval* +- GP name: *PruningInterval* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/PruningPriority** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Sets the priority of the pruning thread. + +The pruning thread, which runs only on domain controllers, deletes printer objects from Active Directory if the printer that published the object does not respond to contact attempts. This process keeps printer information in Active Directory current. + +The thread priority influences the order in which the thread receives processor time and determines how likely it is to be preempted by higher priority threads. + +By default, the pruning thread runs at normal priority. However, you can adjust the priority to improve the performance of this service. + +> [!NOTE] +> This setting is used only on domain controllers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Directory pruning priority* +- GP name: *PruningPriority* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/PruningRetries** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies how many times the pruning service on a domain controller repeats its attempt to contact a computer before pruning the computer's printers. + +The pruning service periodically contacts computers that have published printers to verify that the printers are still available for use. If a computer does not respond to the contact message, the message is repeated for the specified number of times. If the computer still fails to respond, then the pruning service "prunes" (deletes from Active Directory) printer objects the computer has published. + +By default, the pruning service contacts computers every eight hours and allows two retries before deleting printers from Active Directory. You can use this setting to change the number of retries. + +If you enable this setting, you can change the interval between attempts. + +If you do not configure or disable this setting, the default values are used. + +> [!NOTE] +> This setting is used only on domain controllers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Directory pruning retry* +- GP name: *PruningRetries* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/PruningRetryLog** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies whether or not to log events when the pruning service on a domain controller attempts to contact a computer before pruning the computer's printers. + +The pruning service periodically contacts computers that have published printers to verify that the printers are still available for use. If a computer does not respond to the contact attempt, the attempt is retried a specified number of times, at a specified interval. The "Directory pruning retry" setting determines the number of times the attempt is retried; the default value is two retries. The "Directory Pruning Interval" setting determines the time interval between retries; the default value is every eight hours. If the computer has not responded by the last contact attempt, its printers are pruned from the directory. + +If you enable this policy setting, the contact events are recorded in the event log. + +If you disable or do not configure this policy setting, the contact events are not recorded in the event log. + +Note: This setting does not affect the logging of pruning events; the actual pruning of a printer is always logged. + +> [!NOTE] +> This setting is used only on domain controllers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Log directory pruning retry events* +- GP name: *PruningRetryLog* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/RegisterSpoolerRemoteRpcEndPoint** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy controls whether the print spooler will accept client connections. + +When the policy is not configured or enabled, the spooler will always accept client connections. + +When the policy is disabled, the spooler will not accept client connections nor allow users to share printers. All printers currently shared will continue to be shared. + +The spooler must be restarted for changes to this policy to take effect. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow Print Spooler to accept client connections* +- GP name: *RegisterSpoolerRemoteRpcEndPoint* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + + +**ADMX_Printing2/VerifyPublishedState** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Directs the system to periodically verify that the printers published by this computer still appear in Active Directory. This setting also specifies how often the system repeats the verification. + +By default, the system only verifies published printers at startup. This setting allows for periodic verification while the computer is operating. + +To enable this additional verification, enable this setting, and then select a verification interval. + +To disable verification, disable this setting, or enable this setting and select "Never" for the verification interval. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Check published state* +- GP name: *VerifyPublishedState* +- GP path: *Printers* +- GP ADMX file name: *Printing2.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From ae764c12b4d5421861690c50422d036e3e37cc7b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 16:02:50 -0800 Subject: [PATCH 239/958] Update defender-endpoint-false-positives-negatives.md --- ...nder-endpoint-false-positives-negatives.md | 22 +++++++++++++------ 1 file changed, 15 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md index 7a8b28a303..40bb2b65ea 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md +++ b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md @@ -35,12 +35,12 @@ Did Microsoft Defender for Endpoint identify an artifact as malicious, even thou | Step | Description | |:---|:---| -| 1. Identify a false positive/negative | | -| 2. Review/define exclusions for Defender for Endpoint | | -| 3. Review/define indicators for Defender for Endpoint | | -| 4. Classify a false positive/negative in Defender for Endpoint | | -| 5. Submit a file for analysis | | -| 6. Confirm your software uses EV code signing | | +| 1. [Identify a false positive/negative](#identify-a-false-positivenegative) | | +| 2. [Review/define exclusions for Defender for Endpoint](#review-or-define-exclusions) | | +| 3. [Review/define indicators for Defender for Endpoint](#review-or-define-indicators) | | +| 4. [Classify a false positive/negative in Defender for Endpoint](#classify-a-false-positive-or-false-negative) | | +| 5. [Submit a file for analysis](#submit-a-file-for-analysis) | | +| 6. [Confirm your software uses EV code signing](#confirm-your-software-uses-ev-code-signing) | | ## Identify a false positive/negative @@ -52,8 +52,16 @@ Did Microsoft Defender for Endpoint identify an artifact as malicious, even thou ## Review or define indicators +*Allow indicators for false positives; block indicators for false negatives. https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/manage-indicators* + ## Classify a false positive or false negative +*Need to figure out where/how this is done* + ## Submit a file for analysis -## Confirm your software uses EV code signing \ No newline at end of file +*https://www.microsoft.com/wdsi/filesubmission/* + +## Confirm your software uses EV code signing + +*Some info is available here: https://docs.microsoft.com/windows-hardware/drivers/dashboard/get-a-code-signing-certificate* \ No newline at end of file From 6f0d2743d8f9af3db4ecf0c3660c6dc8de24ea32 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 15 Dec 2020 16:06:40 -0800 Subject: [PATCH 240/958] Fixed warning --- windows/client-management/mdm/policy-csp-admx-printing2.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-admx-printing2.md b/windows/client-management/mdm/policy-csp-admx-printing2.md index 6da824049f..817a528bac 100644 --- a/windows/client-management/mdm/policy-csp-admx-printing2.md +++ b/windows/client-management/mdm/policy-csp-admx-printing2.md @@ -180,7 +180,8 @@ If you enable this setting or do not configure it, the domain controller prunes If you disable this setting, the domain controller does not prune this computer's printers. This setting is designed to prevent printers from being pruned when the computer is temporarily disconnected from the network. -> [!NOTE] You can use the "Directory Pruning Interval" and "Directory Pruning Retry" settings to adjust the contact interval and number of contact attempts. +> [!NOTE] +> You can use the "Directory Pruning Interval" and "Directory Pruning Retry" settings to adjust the contact interval and number of contact attempts. > [!TIP] From fe4c83039bc4c7431f25a5f3f975109743b011ce Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 15 Dec 2020 16:08:27 -0800 Subject: [PATCH 241/958] Update defender-endpoint-false-positives-negatives.md --- .../defender-endpoint-false-positives-negatives.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md index 40bb2b65ea..2d4e5efdb5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md +++ b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md @@ -35,7 +35,7 @@ Did Microsoft Defender for Endpoint identify an artifact as malicious, even thou | Step | Description | |:---|:---| -| 1. [Identify a false positive/negative](#identify-a-false-positivenegative) | | +| 1. [Identify a false positive/negative](#identify-a-false-positivenegative) | A false positive is something that was detected and identified as malicious, when in fact it does not pose a threat.
    A false negative is something that was not detected as a threat even though it is, in fact, malicious.
    Both false positives and false negatives can be problematic for your organization. | | 2. [Review/define exclusions for Defender for Endpoint](#review-or-define-exclusions) | | | 3. [Review/define indicators for Defender for Endpoint](#review-or-define-indicators) | | | 4. [Classify a false positive/negative in Defender for Endpoint](#classify-a-false-positive-or-false-negative) | | From 8efdb0a237bee0fe88c864d2c33930e7775151b1 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Tue, 15 Dec 2020 16:10:51 -0800 Subject: [PATCH 242/958] Update get-device-secure-score.md --- .../microsoft-defender-atp/get-device-secure-score.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md b/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md index 1e76593b6c..7b6d923818 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-device-secure-score.md @@ -24,7 +24,7 @@ ms.topic: article **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) >[!NOTE] ->If you are a US Gov customer, please refer to API endpoints listed in [here](gov#api). +>If you are a US Gov customer, please refer to API endpoints listed in [here](gov.md#api). - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) From b440abef57809fa00c9823bcd14a4de7ef330e5d Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 15 Dec 2020 16:22:26 -0800 Subject: [PATCH 243/958] Removed two Globalization policies per owner --- .../mdm/policies-in-policy-csp-admx-backed.md | 2 - .../policy-configuration-service-provider.md | 6 - .../mdm/policy-csp-admx-globalization.md | 144 ------------------ 3 files changed, 152 deletions(-) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 1e240e7969..26da44ce91 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -282,7 +282,6 @@ ms.date: 10/08/2020 - [ADMX_FolderRedirection/LocalizeXPRelativePaths_2](./policy-csp-admx-folderredirection.md#admx-folderredirection-localizexprelativepaths-2) - [ADMX_FolderRedirection/PrimaryComputer_FR_1](./policy-csp-admx-folderredirection.md#admx-folderredirection-primarycomputer-fr-1) - [ADMX_FolderRedirection/PrimaryComputer_FR_2](./policy-csp-admx-folderredirection.md#admx-folderredirection-primarycomputer-fr-2) -- [ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks](./policy-csp-admx-globalization.md#admx-globalization-blockcleanupofunusedpreinstalledlangpacks) - [ADMX_Globalization/BlockUserInputMethodsForSignIn](./policy-csp-admx-globalization.md#admx-globalization-blockuserinputmethodsforsignin) - [ADMX_Globalization/CustomLocalesNoSelect_1](./policy-csp-admx-globalization.md#admx-globalization-customlocalesnoselect-1) - [ADMX_Globalization/CustomLocalesNoSelect_2](./policy-csp-admx-globalization.md#admx-globalization-customlocalesnoselect-2) @@ -297,7 +296,6 @@ ms.date: 10/08/2020 - [ADMX_Globalization/LocaleUserRestrict_2](./policy-csp-admx-globalization.md#admx-globalization-localeuserrestrict-2) - [ADMX_Globalization/LockMachineUILanguage](./policy-csp-admx-globalization.md#admx-globalization-lockmachineuilanguage) - [ADMX_Globalization/LockUserUILanguage](./policy-csp-admx-globalization.md#admx-globalization-lockuseruilanguage) -- [ADMX_Globalization/MachineUILanguageOverwrite](./policy-csp-admx-globalization.md#admx-globalization-machineuilanguageoverwrite) - [ADMX_Globalization/PreventGeoIdChange_1](./policy-csp-admx-globalization.md#admx-globalization-preventgeoidchange-1) - [ADMX_Globalization/PreventGeoIdChange_2](./policy-csp-admx-globalization.md#admx-globalization-preventgeoidchange-2) - [ADMX_Globalization/PreventUserOverrides_1](./policy-csp-admx-globalization.md#admx-globalization-preventuseroverrides-1) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index c27861fc1e..205815ffba 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1148,9 +1148,6 @@ The following diagram shows the Policy configuration service provider in tree fo ### ADMX_Globalization policies
    -
    - ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks -
    ADMX_Globalization/BlockUserInputMethodsForSignIn
    @@ -1193,9 +1190,6 @@ The following diagram shows the Policy configuration service provider in tree fo
    ADMX_Globalization/LockUserUILanguage
    -
    - ADMX_Globalization/MachineUILanguageOverwrite -
    ADMX_Globalization/PreventGeoIdChange_1
    diff --git a/windows/client-management/mdm/policy-csp-admx-globalization.md b/windows/client-management/mdm/policy-csp-admx-globalization.md index e471cdf6e7..ad421c4633 100644 --- a/windows/client-management/mdm/policy-csp-admx-globalization.md +++ b/windows/client-management/mdm/policy-csp-admx-globalization.md @@ -22,9 +22,6 @@ manager: dansimp ## ADMX_Globalization policies
    -
    - ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks -
    ADMX_Globalization/BlockUserInputMethodsForSignIn
    @@ -67,9 +64,6 @@ manager: dansimp
    ADMX_Globalization/LockUserUILanguage
    -
    - ADMX_Globalization/MachineUILanguageOverwrite -
    ADMX_Globalization/PreventGeoIdChange_1
    @@ -105,75 +99,6 @@ manager: dansimp
    - -**ADMX_Globalization/BlockCleanupOfUnusedPreinstalledLangPacks** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether the LPRemove task will run to clean up language packs installed on a machine but are not used by any users on that machine. - -If you enable this policy setting, language packs that are installed as part of the system image will remain installed even if they are not used by any user on that system. - -If you disable or do not configure this policy setting, language packs that are installed as part of the system image but are not used by any user on that system will be removed as part of a scheduled clean up task. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Block clean-up of unused language packs* -- GP name: *BlockCleanupOfUnusedPreinstalledLangPacks* -- GP path: *Control Panel\Regional and Language Options* -- GP ADMX file name: *Globalization.admx* - - - -
    - **ADMX_Globalization/BlockUserInputMethodsForSignIn** @@ -1223,75 +1148,6 @@ ADMX Info:
    - -**ADMX_Globalization/MachineUILanguageOverwrite** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -Available in the latest Windows 10 Insider Preview Build. This policy setting controls which UI language is used for computers with more than one UI language installed. - -If you enable this policy setting, the UI language of Windows menus and dialogs for systems with more than one language is restricted to a specified language. If the specified language is not installed on the target computer or you disable this policy setting, the language selection defaults to the language selected by the local administrator. - -If you disable or do not configure this policy setting, there is no restriction of a specific language used for the Windows menus and dialogs. - - -> [!TIP] -> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). -> -> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). -> -> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). - - -ADMX Info: -- GP English name: *Force selected system UI language to overwrite the user UI language* -- GP name: *MachineUILanguageOverwrite* -- GP path: *Control Panel\Regional and Language Options* -- GP ADMX file name: *Globalization.admx* - - - -
    - **ADMX_Globalization/PreventGeoIdChange_1** From 58dfa1011e20126d36d1dab037708ee8218d13d6 Mon Sep 17 00:00:00 2001 From: schmurky Date: Wed, 16 Dec 2020 12:39:54 +0800 Subject: [PATCH 244/958] Update review and investigate alerts --- .../microsoft-defender-atp/review-alerts.md | 37 ++----------------- 1 file changed, 4 insertions(+), 33 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index d32c73580f..4ad850c886 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -41,13 +41,13 @@ Clicking on an alert's name in Defender for Endpoint will land you on its alert 1. **The alert title** shows the alert's name and is there to remind you which alert started your current investigation regardless of what you have selected on the page. 2. [**Affected assets**](#review-affected-assets) lists cards of devices and users affected by this alert that are clickable for further information and actions. -3. [**The alert story**](#investigate-using-the-alert-story) displays all entities related to the alert, interconnected by a tree view. The alert in the title will be the one in focus when you first land on your selected alert's page. Entities in the alert story are expandable and clickable, to provide additional information and expedite response by allowing you to take actions right in the context of the alert page. -4. [**The details pane**](#take-action-from-the-details-pane) will show the details of the selected alert at first, with details and actions related to this alert. If you click on any of the affected assets or entities in the alert story, the details pane will change to provide contextual information and actions for the selected object. +3. The **alert story** displays all entities related to the alert, interconnected by a tree view. The alert in the title will be the one in focus when you first land on your selected alert's page. Entities in the alert story are expandable and clickable, to provide additional information and expedite response by allowing you to take actions right in the context of the alert page. Use the alert story to start your investigation. Learn how in [Investigate alerts in Microsoft Defender for Endpoint](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts). +4. The **details pane** will show the details of the selected alert at first, with details and actions related to this alert. If you click on any of the affected assets or entities in the alert story, the details pane will change to provide contextual information and actions for the selected object. ![An alert page when you first land on it](images/alert-landing-view.png) Note the detection status for your alert. Blocked, or prevented means actions were already taken by Defender for Endpoint. -Start by reviewing the *automated investigation details* in your alert's [details pane](#take-action-from-the-details-pane), to see which actions were already taken, as well as reading the alert's description for recommended actions. +Start by reviewing the *automated investigation details* in your alert's details pane, to see which actions were already taken, as well as reading the alert's description for recommended actions. ![A snippet of the details pane with the alert description and automatic investigation sections highlighted](images/alert-air-and-alert-description.png) @@ -55,42 +55,13 @@ Other information available in the details pane when the alert opens includes MI ## Review affected assets -Clicking on a device or a user card in the affected assets sections will switch to the details of the device or user in the details pane. +Selecting a device or a user card in the affected assets sections will switch to the details of the device or user in the details pane. - **For devices** the details pane will display information about the device itself, like Domain, Operating System, and IP. Active alerts and the logged on users on that device are also available. You can take immediate action by isolating the device, restricting app execution, or running an antivirus scan. Alternatively, you could collect an investigation package, initiate an automated investigation, or go to the device page to investigate from the device's point of view. - **For users** the details pane will display detailed user information, such as the user's SAM name and SID, as well as logon types performed by this user and any alerts and incidents related to it. You can click *Open user page* to continue the investigation from that user's point of view. ![A snippet of the details pane when a device is selected](images/alert-device-details.png) -## Investigate using the alert story - -The alert story details why the alert was triggered, related events that happened before and after, as well as other related entities. - -Entities are clickable and every entity that isn't an alert is expandable using the expand icon on the right side of that entity's card. The entity in focus will be indicated by a blue stripe to the left side of that entity's card, with the alert in the title being in focus at first. - -Expand entities to view details at-a-glance about them. Clicking on an entity will switch the context of the details pane to this entity, and will allow you to review further information, as well as manage that entity. Clicking on *...* to the right of the entity card will reveal all actions available for that entity. These same actions appear in the details pane when that entity is in focus. - -> [!NOTE] -> The alert story section may contain more than one alert, with additional alerts related to the same execution tree appearing before or after the alert you've selected. - -![An example of an alert story with an alert in focus and some expanded cards](images/alert-story-tree.png) - -## Take action from the details pane - -Once you've selected an entity of interest, the details pane will change to display information about the selected entity type, historic information, when its available, and offer controls to **take action** on this entity directly from the alert page. - -Once you're done investigating, go back to the alert you started with, mark the alert's status as **Resolved** and classify it as either **False alert** or **True alert**. Classifying alerts helps tune this capability to provide more true alerts and less false alerts. - -If you classify it as a true alert, you can also select a determination, as shown in the image below. - -![A snippet of the details pane with a resolved alert and the determination drop-down expanded](images/alert-details-resolved-true.png) - -If you are experiencing a false alert with a line-of-business application, create a suppression rule to avoid this type of alert in the future. - -![actions and classification in the details pane with the suppression rule highlighted](images/alert-false-suppression-rule.png) - -> [!TIP] -> If you're experiencing any issues not described above, use the 🙂 button to provide feedback or open a support ticket. ## Related topics From 15a4b4c989298d4cd0f3b0aa767659749a25edd0 Mon Sep 17 00:00:00 2001 From: schmurky Date: Wed, 16 Dec 2020 12:40:15 +0800 Subject: [PATCH 245/958] Update investigate alerts --- .../investigate-alerts.md | 68 ++++++------------- 1 file changed, 19 insertions(+), 49 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md index e9ad5814eb..a18c5676d8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md @@ -20,7 +20,7 @@ ms.topic: article ms.date: 04/24/2018 --- -# Investigate Microsoft Defender Advanced Threat Protection alerts +# Investigate alerts in Microsoft Defender for Endpoint [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] @@ -35,70 +35,40 @@ ms.date: 04/24/2018 Investigate alerts that are affecting your network, understand what they mean, and how to resolve them. -Click an alert to see the alert details view and the various tiles that provide information about the alert. +Select an alert from the alerts queue to go to alert page. This view contains the alert title, the affected assets, the details side pane, and the alert story. -From the alert details view, you can manage an alert and see alert data such as severity, category, technique, along with other information that can help you make better decisions on how to approach them. +From the alert page, you can begin your investigation by selecting the affected assets or any of the entities under the alert story tree view. The details pane automatically populates with further information about what you selected. To see what kind of information you can view here, read [Review alerts in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/review-alerts). -The techniques reflected in the card are based on [MITRE enterprise techniques](https://attack.mitre.org/techniques/enterprise/). +## Investigate using the alert story -You'll also see a status of the automated investigation on the upper right corner. Clicking on the link will take you to the Automated investigations view. For more information, see [Automated investigations](automated-investigations.md). +The alert story details why the alert was triggered, related events that happened before and after, as well as other related entities. -![Image of the alert page](images/atp-alert-view.png) +Entities are clickable and every entity that isn't an alert is expandable using the expand icon on the right side of that entity's card. The entity in focus will be indicated by a blue stripe to the left side of that entity's card, with the alert in the title being in focus at first. -The alert context tile shows the where, who, and when context of the alert. As with other pages, you can click on the icon beside the name or user account to bring up the device or user details pane. The alert details view also has a status tile that shows the status of the alert in the queue. You'll also see a description and a set of recommended actions which you can expand. +Expand entities to view details at-a-glance about them. Clicking on an entity will switch the context of the details pane to this entity, and will allow you to review further information, as well as manage that entity. Clicking on *...* to the right of the entity card will reveal all actions available for that entity. These same actions appear in the details pane when that entity is in focus. -For more information about managing alerts, see [Manage alerts](manage-alerts.md). +> [!NOTE] +> The alert story section may contain more than one alert, with additional alerts related to the same execution tree appearing before or after the alert you've selected. -The alert details page also shows the alert process tree, an incident graph, and an artifact timeline. +![An example of an alert story with an alert in focus and some expanded cards](images/alert-story-tree.png) -You can click on the device link from the alert view to navigate to the device. The alert will be highlighted automatically, and the timeline will display the appearance of the alert and its evidence in the **Device timeline**. If the alert appeared more than once on the device, the latest occurrence will be displayed in the **Device timeline**. +## Take action from the details pane -Alerts attributed to an adversary or actor display a colored tile with the actor's name. +Once you've selected an entity of interest, the details pane will change to display information about the selected entity type, historic information, when its available, and offer controls to **take action** on this entity directly from the alert page. -![A detailed view of an alert when clicked](images/atp-actor-alert.png) +Once you're done investigating, go back to the alert you started with, mark the alert's status as **Resolved** and classify it as either **False alert** or **True alert**. Classifying alerts helps tune this capability to provide more true alerts and less false alerts. -Click on the actor's name to see the threat intelligence profile of the actor, including a brief overview of the actor, their interests or targets, their tools, tactics, and processes (TTPs), and areas where they've been observed worldwide. You will also see a set of recommended actions to take. +If you classify it as a true alert, you can also select a determination, as shown in the image below. -Some actor profiles include a link to download a more comprehensive threat intelligence report. +![A snippet of the details pane with a resolved alert and the determination drop-down expanded](images/alert-details-resolved-true.png) -![Image of detailed actor profile](images/atp-detailed-actor.png) +If you are experiencing a false alert with a line-of-business application, create a suppression rule to avoid this type of alert in the future. -The detailed alert profile helps you understand who the attackers are, who they target, what techniques, tools, and procedures (TTPs) they use, which geolocations they are active in, and finally, what recommended actions you may take. In many cases, you can download a more detailed Threat Intelligence report about this attacker or campaign for offline reading. +![actions and classification in the details pane with the suppression rule highlighted](images/alert-false-suppression-rule.png) -## Alert process tree -The **Alert process tree** takes alert triage and investigation to the next level, displaying the aggregated alert and surrounding evidence that occurred within the same execution context and time period. This rich triage and investigation context is available on the alert page. +> [!TIP] +> If you're experiencing any issues not described above, use the 🙂 button to provide feedback or open a support ticket. -![Image of the alert process tree](images/atp-alert-process-tree.png) - -The **Alert process tree** expands to display the execution path of the alert and related evidence that occurred around the same period. Items marked with a thunderbolt icon should be given priority during investigation. - ->[!NOTE] ->The alert process tree might not show for some alerts, including alerts not triggered directly by process activity. - -Clicking in the circle immediately to the left of the indicator displays its details. - -![Image of the alert details pane](images/atp-alert-mgt-pane.png) - -The alert details pane helps you take a deeper look at the details about the alert. It displays rich information about the execution details, file details, detections, observed worldwide, observed in organization, and other details taken from the entity's page – while remaining on the alert page, so you never leave the current context of your investigation. - - -## Incident graph -The **Incident Graph** provides a visual representation of the organizational footprint of the alert and its evidence: where the evidence that triggered the alert was observed on other devices. It provides a graphical mapping from the original device and evidence expanding to show other devices in the organization where the triggering evidence was also observed. - -![Image of the Incident graph](images/atp-incident-graph.png) - -The **Incident Graph** supports expansion by File, Process, command line, or Destination IP Address, as appropriate. - -The **Incident Graph** expansion by destination IP Address, shows the organizational footprint of communications with this IP Address without having to change context by navigating to the IP Address page. - -You can click the full circles on the incident graph to expand the nodes and view the expansion to other devices where the matching criteria were observed. - -## Artifact timeline -The **Artifact timeline** feature provides an additional view of the evidence that triggered the alert on the device, and shows the date and time the evidence triggering the alert was observed, as well as the first time it was observed on the device. This can help in understanding if the evidence was first observed at the time of the alert, or whether it was observed on the device earlier - without triggering an alert. - -![Image of artifact timeline](images/atp-alert-timeline.png) - -Selecting an alert detail brings up the **Details pane** where you'll be able to see more information about the alert such as file details, detections, instances of it observed worldwide, and in the organization. ## Related topics - [View and organize the Microsoft Defender for Endpoint Alerts queue](alerts-queue.md) From ffd10a882360db6234d7979d8d2382e63c4d2aee Mon Sep 17 00:00:00 2001 From: schmurky Date: Wed, 16 Dec 2020 13:05:18 +0800 Subject: [PATCH 246/958] Update 2 pages --- .../microsoft-defender-atp/investigate-alerts.md | 6 +++--- .../microsoft-defender-atp/investigate-machines.md | 2 -- .../microsoft-defender-atp/review-alerts.md | 8 ++++---- 3 files changed, 7 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md index a18c5676d8..541f45d7c4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md @@ -37,7 +37,7 @@ Investigate alerts that are affecting your network, understand what they mean, a Select an alert from the alerts queue to go to alert page. This view contains the alert title, the affected assets, the details side pane, and the alert story. -From the alert page, you can begin your investigation by selecting the affected assets or any of the entities under the alert story tree view. The details pane automatically populates with further information about what you selected. To see what kind of information you can view here, read [Review alerts in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/review-alerts). +From the alert page, begin your investigation by selecting the affected assets or any of the entities under the alert story tree view. The details pane automatically populates with further information about what you selected. To see what kind of information you can view here, read [Review alerts in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/review-alerts). ## Investigate using the alert story @@ -45,7 +45,7 @@ The alert story details why the alert was triggered, related events that happene Entities are clickable and every entity that isn't an alert is expandable using the expand icon on the right side of that entity's card. The entity in focus will be indicated by a blue stripe to the left side of that entity's card, with the alert in the title being in focus at first. -Expand entities to view details at-a-glance about them. Clicking on an entity will switch the context of the details pane to this entity, and will allow you to review further information, as well as manage that entity. Clicking on *...* to the right of the entity card will reveal all actions available for that entity. These same actions appear in the details pane when that entity is in focus. +Expand entities to view details at a glance. Selecting an entity will switch the context of the details pane to this entity, and will allow you to review further information, as well as manage that entity. Selecting *...* to the right of the entity card will reveal all actions available for that entity. These same actions appear in the details pane when that entity is in focus. > [!NOTE] > The alert story section may contain more than one alert, with additional alerts related to the same execution tree appearing before or after the alert you've selected. @@ -54,7 +54,7 @@ Expand entities to view details at-a-glance about them. Clicking on an entity wi ## Take action from the details pane -Once you've selected an entity of interest, the details pane will change to display information about the selected entity type, historic information, when its available, and offer controls to **take action** on this entity directly from the alert page. +Once you've selected an entity of interest, the details pane will change to display information about the selected entity type, historic information when it's available, and offer controls to **take action** on this entity directly from the alert page. Once you're done investigating, go back to the alert you started with, mark the alert's status as **Resolved** and classify it as either **False alert** or **True alert**. Classifying alerts helps tune this capability to provide more true alerts and less false alerts. diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md index c08d0c02f2..1a47eaf935 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-machines.md @@ -132,8 +132,6 @@ More details about certain events are provided in the **Additional information** - Suspicious script detected - a potentially malicious script was found running - The alert category - if the event led to the generation of an alert, the alert category ("Lateral Movement", for example) is provided -You can also use the [Artifact timeline](investigate-alerts.md#artifact-timeline) feature to see the correlation between alerts and events on a specific device. - #### Event details Select an event to view relevant details about that event. A panel displays to show general event information. When applicable and data is available, a graph showing related entities and their relationships are also shown. diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index 4ad850c886..aba99637cc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -37,12 +37,12 @@ Quickly triage, investigate, and take effective action on alerts that affect you ## Getting started with an alert -Clicking on an alert's name in Defender for Endpoint will land you on its alert page. On the alert page, all the information will be shown in context of the selected alert. Each alert page consists of 4 sections: +Selecting an alert's name in Defender for Endpoint will land you on its alert page. On the alert page, all the information will be shown in context of the selected alert. Each alert page consists of 4 sections: 1. **The alert title** shows the alert's name and is there to remind you which alert started your current investigation regardless of what you have selected on the page. 2. [**Affected assets**](#review-affected-assets) lists cards of devices and users affected by this alert that are clickable for further information and actions. -3. The **alert story** displays all entities related to the alert, interconnected by a tree view. The alert in the title will be the one in focus when you first land on your selected alert's page. Entities in the alert story are expandable and clickable, to provide additional information and expedite response by allowing you to take actions right in the context of the alert page. Use the alert story to start your investigation. Learn how in [Investigate alerts in Microsoft Defender for Endpoint](https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts). -4. The **details pane** will show the details of the selected alert at first, with details and actions related to this alert. If you click on any of the affected assets or entities in the alert story, the details pane will change to provide contextual information and actions for the selected object. +3. The **alert story** displays all entities related to the alert, interconnected by a tree view. The alert in the title will be the one in focus when you first land on your selected alert's page. Entities in the alert story are expandable and clickable, to provide additional information and expedite response by allowing you to take actions right in the context of the alert page. Use the alert story to start your investigation. Learn how in [Investigate alerts in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts). +4. The **details pane** will show the details of the selected alert at first, with details and actions related to this alert. If you select any of the affected assets or entities in the alert story, the details pane will change to provide contextual information and actions for the selected object. ![An alert page when you first land on it](images/alert-landing-view.png) @@ -58,7 +58,7 @@ Other information available in the details pane when the alert opens includes MI Selecting a device or a user card in the affected assets sections will switch to the details of the device or user in the details pane. - **For devices** the details pane will display information about the device itself, like Domain, Operating System, and IP. Active alerts and the logged on users on that device are also available. You can take immediate action by isolating the device, restricting app execution, or running an antivirus scan. Alternatively, you could collect an investigation package, initiate an automated investigation, or go to the device page to investigate from the device's point of view. -- **For users** the details pane will display detailed user information, such as the user's SAM name and SID, as well as logon types performed by this user and any alerts and incidents related to it. You can click *Open user page* to continue the investigation from that user's point of view. +- **For users** the details pane will display detailed user information, such as the user's SAM name and SID, as well as logon types performed by this user and any alerts and incidents related to it. You can select *Open user page* to continue the investigation from that user's point of view. ![A snippet of the details pane when a device is selected](images/alert-device-details.png) From dd2a871f780d22b99ff9c119e2f92f5142c59686 Mon Sep 17 00:00:00 2001 From: schmurky Date: Wed, 16 Dec 2020 13:09:44 +0800 Subject: [PATCH 247/958] Removed en-us --- .../threat-protection/microsoft-defender-atp/review-alerts.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index aba99637cc..ebe2923713 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -33,7 +33,7 @@ The alert page in Microsoft Defender for Endpoint provides full context to the a Quickly triage, investigate, and take effective action on alerts that affect your organization. Understand why they were triggered, and their impact from one location. Learn more in this overview. -> [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4yiO5] +> [!VIDEO https://www.microsoft.com/videoplayer/embed/RE4yiO5] ## Getting started with an alert From c141e22df8e2a08ff44272429585002e1d512549 Mon Sep 17 00:00:00 2001 From: Asha Iyengar Date: Wed, 16 Dec 2020 21:34:10 +0530 Subject: [PATCH 248/958] Minor changes --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 4d978ad0fe..232e9788e4 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -17,11 +17,11 @@ ms.topic: troubleshooting # Firewall settings lost on upgrade -This article describes a scenario where previously enabled Firewall rules revert to a disabled state after performing a Windows upgrade. +This article describes a scenario where previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. ## Rule groups -For organizational purposes, individual built-in Firewall rules are categorized within a group. For example, the following rules form part of the Remote Desktop group. +For organizational purposes, individual built-in firewall rules are categorized within a group. For example, the following rules form part of the Remote Desktop group. - Remote Desktop – Shadow (TCP-In) @@ -29,7 +29,7 @@ For organizational purposes, individual built-in Firewall rules are categorized - Remote Desktop – User-Mode (UDP-In) -Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the Firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group @@ -40,4 +40,4 @@ Get-NetFirewallRule -Group To avoid unexpected behaviors it is recommended to enable/disable all of the rules within a group as opposed to just one or two of the individual rules. This is because while groups are used to organize rules and allow batch rule modification by type, they also represents the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. -Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the ruleset is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking RDP (Remote Desktop Protocol) connectivity to the host. +Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. From b82c0899b4481aae6be519a8ebd689b93775a2b4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Wed, 16 Dec 2020 17:07:26 +0100 Subject: [PATCH 249/958] mdatp config requires `--value` MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Thomas Sjögren --- .../microsoft-defender-atp/mac-resources.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md index 11549d3a62..b62abb198b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md @@ -13,9 +13,9 @@ author: dansimp ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: -- m365-security-compliance -- m365initiative-defender-endpoint +ms.collection: +- m365-security-compliance +- m365initiative-defender-endpoint ms.topic: conceptual --- @@ -90,7 +90,7 @@ Important tasks, such as controlling product settings and triggering on-demand s |Group |Scenario |Command | |-------------|-------------------------------------------|----------------------------------------------------------------------------------| -|Configuration|Turn on/off real-time protection |`mdatp config real-time-protection [enabled/disabled]` | +|Configuration|Turn on/off real-time protection |`mdatp config real-time-protection --value [enabled/disabled]` | |Configuration|Turn on/off cloud protection |`mdatp config cloud --value [enabled/disabled]` | |Configuration|Turn on/off product diagnostics |`mdatp config cloud-diagnostic --value [enabled/disabled]` | |Configuration|Turn on/off automatic sample submission |`mdatp config cloud-automatic-sample-submission --value [enabled/disabled]` | From 1d6498affc9bbcdc4bcc5a345883c280e4b272bd Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 16 Dec 2020 10:32:54 -0700 Subject: [PATCH 250/958] safety commit; I think about all complete but for updated image --- windows/client-management/media/image1.png | Bin 0 -> 63557 bytes ...-assist-for-it-pros-draft - Pauls Edits.md | 103 ++++++++++++++++ windows/client-management/quick-assist.md | 111 +++++++++++++++++- 3 files changed, 212 insertions(+), 2 deletions(-) create mode 100644 windows/client-management/media/image1.png create mode 100644 windows/client-management/quick-assist-for-it-pros-draft - Pauls Edits.md diff --git a/windows/client-management/media/image1.png b/windows/client-management/media/image1.png new file mode 100644 index 0000000000000000000000000000000000000000..1f6394616a568cffc40a1922625ed723f4ddd3d6 GIT binary patch literal 63557 zcmcG$byQVt_cppW-6^HOraPsj6(ywvq(Lbu>5>K!kVYB=1d;A;5CI7#C8T51-OYDz zeBU#^zs?!woZq*`@Y!pR@$9wMJ?|OUyso(jRaKV7#k!9Lfk1HOJ=*Zj%hEa;{<`=bs+vhyY2E!A&}F* z@-osI?uJ`4s9y1KGW0#ZvGBhkL)ncvjf^$~tjJFZw=SkQT?6UpXppejGU;e$W@ZG) zt9NE^c6YbD7ar~ev|pUUog}xqcA5)My?=ZBcA^e84J07EJJkHOeq3dQ{5!CCm>~Z> zh5ny91@}JZB_vcU2~$x>X!|KsKgrB&A&buXVpL5sGF&mXY=YtX%$#kJM*XilF0+@E zjEqcNHxCqidi1s{IyjCWRT6!&cT!Q|WNYZj=wJ&qA&glUeGHGtfv$)PMdf-DCW|&z zjP5xK+R@U{(e;WZL1^f*#LNcHwJk*#;$*t#rbk{h7VK2GYG^ueEYc7QqV^@Va;Kb5 zizQvp@%)wDh;!im&rc_i{r=e_kH8oeLP!W_ts#N1Ou=Tp#d!=IV}~fj;lD&xaJNxU zA%U2QQNpWBa&qbv#~c?uxqkH4MYLb=vLg)2!fk>CE_85j3Z+dPH>@vhA->T2i@}9I*J{!i-=Lgda&`57Ev7wK{H}P=e-(BxdjQdK5L5X5zAH6D8r(p`o)@v5 zs0oFi0^J)#d-vPiDFipuoRjQzpZ#j4F)G51wG%?=o9aXQdV0^uQsgF1Z0}M;1eR{> z!-TkPd&j@q_H@B(4PFhOT)ued=3Do^lWE14UwAt|s=RzM&o1ehs061A&mt(8l` zR6o{3afL=_ZyvS^cgDCx0%4=p{{8O$av8;#y+{4NR;%DD5sWu00(V#NM_i$|k|;Ko zk&a8=V&9g#X7g-6DU1;F;jQs|*E1t$;m46EKYGGHzgnTMKpSxTDXAGCc$HDHsQ*JcAe$IooCAI6 zsgiUiYnZ&vy`U@e;ARG6X&oNi*w>d`tROF?k%g1tqI|2u$ zR?6NsbS}>Yvu$=~l;Fk5>peMMs&a22iqoJ=)NmX@tTT{vVa$CmOL2zg8 z>QuvHA(^>f?;zLv@_AP*H~?uFbQG)VJGH3Zm7_1GZJQ?K$KR@^Dy%su)>4q_A4=;kX8LdE6G#=(^2T__9>6^e%igR2?2jAv~SHnaqtdE3ujEH8=Y7FSa_X7j0>A z(QzDokxw_epZ7H?P~gjY8}0lSxs(8|7E6Z8>O7l-&u6Lh&?Bx4aGc&h! z-R3vF@s#&IMaKrbS=(moqn7tDg3YC<$KREK@w*#)Xt4^(S{e>L=f(}soZ9Fz`XOyP z>~|odYqh(wOjA3~?s~q&M52G}{Y8Wp;h8>dcU!Eesqm=pqT749g^981o}}o)dB*yD zjwm9c3E?kokU;A5_-ISq=6RnqQKW-?z1y<=?-lk!XvNu^ulg8@Ja)|C~ zn+>X%rLAtM!=tBsMG9e+m^6rMnEkV@V>71TbQj{5gm5x_B*cRwHWlM;Q&GoqLS!gJ zR-2|pM^p@rwz%cZe@!jY$Gm&MrE=x1_Wkv*ZB&Gj{#D|o^`!(w48B_#iHgNNe&tgR zEf=p2o_^Ksd2)RkR-{k{B5$zRImrno!HB_98~lN{{%*0qo+u9q3Cj-jNh1;N=wxER zR(9SlXz2T^rWvv79F3V8VAelJcFc>{HPU#$)c>}Uj+d1&6p|D6sQ1H=gnDjxnBf3- z!+#wubZe?s<-VZJ8$)_Taty3!$N;6b*gfQPDi82Qq~E4U zgm)p1tjB(ep!l+=OnPuV<9g4WGX9oY<&!uIE ziZ{KbPMBcZ)E4d>MveBax`A(u|I_CE-}fq?L$5|jIYYu0u|zsH^1G~}@3L83s}Rqo zd8A%x{@i0dCvkbY-f5+o^|gtK*=&=?aIv0{_q1*83=@dQgdaa-4hiXGqp0K6vY)Lx z@!L$OO59#KVPazP?l$W>I#y6hcxl6SmzL;%r3ieoYrWQb{N%~;O)&L4xdbkQ0>t(a zlH9xV-V)tL*WziP%k76IT{!29Vce!W)AbKce-dEg@4V@2$7TLJ--}g^}-dPW#Qb=c!-c9dA^49Gb7sHaA}Fcf*EDjU>HsC?7e?^(Jt# zgS3|*;e8Pj7#QeNQdn3x3nM0`XMb4|*W!J-;i9OmorHFqcP~lA>04c0-P(5E!-)o$ zLg%$XX*SIQhTZ1V^l(ZM_1#8lj0>3O7O#lQMjVH3m0a5A&%ZnmxV$7))m}~3+GS{| zAxc#H_kY#z<2_co$jHbGNn`UCuo=2Hc7=w`@9tk^$H6ME^N7jQeZD_>;7>f|jg@EfU<5Z%qN*0@Hvr&#-9GGn!Vq0^qMorDl z0tB__@Y}(xr`Xq$^zIT;F4FHLF4pMtb*l@`E-n-X(#7GS%<0jJiCpX6c@pjy>$w8S zWp2BM+X8#PMR(r}LyeGQA=`heM=o1#F08L95#jYO$H5!sd~Xe?J(dYSbJ`7N`kx@# zJ30}&l^l5;@(G_7Q*`(YrjNtfK?#{mh)9U+ADRru1* z&Q*eRGC_VWuvm!uZrQKT{)hcTKD#Q1N*G}H(aOKx=by=ij z;ZEzV&$eWl&-J@vRjD9EdIy;2uClOp1mll)`P8+Qz3TWeH)qthUv3MVznHRXj0XWn|vBkX@;O1QJJfS5WG)pq1Mf-u-9vWnG3B zs*SF;+XYd!8@e?%`A|uK)$Hbc>i6ezGkgk8aqsiXi5@OF@vut*FE4y_jXbt?d(g*y zQU69Tq}v2nGUeixsB{xq;n5sv0a{TDRPLGa=3{>JAEZJ4{{An$apib2%V}r3!?;`C z%qk!rp^-ASoFEqLQlfFIZ&6>V>X!fy#oiJ~l8D_{QL;za8+0G%`@b0DZ4v6{o&>nt`?bJ7MNOTB9gD^8&k_ff)Bgshe zb+&BO#%colOXazNPLNP`KS!}4ZQb*mfkqqWX_sfsroVLA{;NsMLAv$U*qakPmWKVE zWi)>NgDJxHh@_4<)M)P#`~SyNxco#8spsbI-)cqIooUw9fsFC%<4WZ8aj@g3mv`M& z-akl)-hK;G6yxVdF0mm0$j!BQA3GkcsT~puk;P&gG&skgVw2t>TS5}Cf0%)ooScQb zX)j>fWA(G+)tQ5c_eE7WOwv#xk;_(MapmCXC@#^+M<+$d?(Hn_0U3?Ge-KewNhv%5 zUi)@NS4>Ro$Dco%k6gD{%zEQ^VYEc|?lCy6{*IUb#MJYVgq?wlOW98LxUE35&=fdj zh3%AJ@*|gmv-9)yC7uyG>;1*f3X1`12YY)0GBPp;CnvsL!g}ZRSdh+TzbPftJrJ~s zK09+iq>g!!tK1V#!FSXGTs8@Tp$Xx(|5g#0e6#VVun+i0p4oZ+_=*WDBo_G-v&vXh zhQ|tp$I+0i0A_Sj5{u;3ULX!Y*4!AQ_*9P=ByX=O!>L5Ih*1bAC|H5lkIFojlMB(J zq!e+K*%h^)_p7oVSBBkgmbPv<(NjRc<9|BYp6VOUQ55L0Kb>*w8#nUxKKHn5WZ3TV z;DCdh+jv{ESzp4zd?3CRPm3d50e5HNlZr%)RB!<>+Ox+&DEibi0f9; zEPftc+cw510J#M{e#e{RiW(Ymvy#3yUiljNu@X_7C1x)vtl#*!XybdE;(3_|c{$_Xw1L5)*zbyvRi~SpFYip-nr)>X{ z6YxBM5fXmkI|9YHMk!VBxy9{3nn?EPlhd7<9O*zb^{;Y-4$jVTdUnm47H4WLQI0+g zIFFpyXr6|V3P{pF1+|L_i`so2%BoeA#D%|ia1cwxs1Q;tZzvo-Gbt2WhqG`hmJBchWh+!W30HaHn6g?5^Xo(k;}%K zlko~QXoOd1&5GZa~W8ec@cp_GYT4*kgbs>9`wJ5syPoIMcDM zyIVGqIn&K=dozp3?+(57ZvMNb1xSCo0Z{@sZ>mnm^z1C9ZYE5k)~{8>_TRhCcdPq> zyt`>KNJhiYud%D5n5+DmK}<}4)^k^!LeOSHpz_x5GsMsXPLeF_kR^EfB&RJ?I`HUr zu`|s247?cXZ-RP04>@0;^g&>-tZQ|aC(ItJNMlO8C?6Hg)IFACLjJ_;Uoq})J}(UNMvaR{)0 z!mV|`4HUVf^Py#YdGsTg6cJ<~g2I>op4W1WtTQ@&D-`0~Mk zNUPM)){qzhF#w<&YS9EfhB^Dj((UO7iC)t;G}Kut=Q1Y-DwY|vFK=eJW15Zw(M0U|!=*uE+>kPH>07_BXv&C(55 zKU4E4XwLO=Nv&0?>(isWdki+7fB)-yws_~*R#+a#?kN|0yn^t$tt`@_>Hd&h^VTC6 zyYf@=Yw)ln40jJo@)&G`B09_sGfY0VoE`b={y1~a4jJ>;fjGW*mN(n-tf%d22)4jR zgxJ=H6f6vG@$ZM~ijmJ0I!aZ3rYa(v&UI=ZjAJ4RrRe@-GaKT&Q1Y698%;FmzL!+yRLoRG-K-y=PKd|&nt z_A*u(#RPkr7){O`6R5-Dm~ZM?Fy%c~t)C3S?%!t{$yG`8+^LtLJ)7J zcckGOT4z^R??Okg*>s)5aEXDaR~z5-3bj3j|0%RFHbG|tNE`KL?P-0rH($4%itjlL4)SsxtBBXs})}W5f0XKGpx*{ z0?}}n;fY3LrcxRjztMkVoT;F7_O&aP6OqTWFo#F2!a{gSyaEU|P#XU{ zbU`U`*%*xhMoT?4|NWmByRLgq;%2Efq$ydWaq65fv@MpCq)5oQo6*9j(K2_BBR7DU zp+|VeM6b0VC(W$&^9SGY?Dy7$ll#stfScrKq1``N-=Oin8Lc_*{5e+1d*SfJ?&YLd zm#kR$X@ZWty!`#?-HGxiH)l)u=b)rBaBy&R9NaKHPx%Ro(hneBGzEdcy(PK|BeiWJ2nm^Zq`*suMUvW$YX*W*1lNDygB^9!}7{*&JPN1|>!(=Ns97KniV zDRD=#_r7{Vc|e0Zbr zMZ<}tX!B%qc++@cxX;ztFhu7azq+Kdq6@c0vRGz7ov2a1V@O!o$iWQ&nTTHL*n}>t z>K?1QOoPiN6Q6m1^Z~ptwU%h;*cizV>%Gh7*t!j&MQBJ~raizL04Vl0pU$#JNnGTO z7VC}I{gEcxPOG5`_lq$!hD2A|{3A8zh8MHP5kZLmejDQ;-*5x_C>$b4uEbOF*VDHS<-zVuFQL1qr{eX+ z@$n|RW`V|sX8e#48-phIp{tOP5;As3o|JZzd->7&NOx1hux;a;p)5elXKe*8)5k^& zVM({9rluxbo2Yme1(t&5mwEuwev+B&<2b17C%I5^Fq|71?0T~+*z>aH((G29g+pj> z-#NiQ;$vUf=cXTjdZd-nx)n<^yj%*~MuAKe<8k^jHtYAx6>6SC--Bg&oqER{r3?v! zL`bIO_Xxb_s^V%*?hc3d3E^(}QI&7fKQeuhalTFhjzH^zWV|=uegJyJs%W`F z%Yq=S09-qEQ@O1*`1XfSr4q_o-2Nt3*}Q){>hnNf4NZviOXWc`Q$|cg%g~Crh>2;T z`oYZS*$ZA*R&9Hh$C5Si$p#SD-Pz*HtJ}i?$%&?UV96mx<$@u#}T)q-DK0i?fVt|;wqnIJ zu1@%o+-ZtVX^Yk0s{E#_gTBAxsPRz1=d>Vb69h9N3$o5o1aK`-KGEY?Upzxld6GA0 z*$6Bjc(a=Bsm%7WBrPZNwgjyc$P>MrIWA^ywm*V%&yC2qXHvLxsRR?55HZV?vb%Zm zuJfp7GiVq60=a3w>p{iqPOKR$`>l!cVZdbU@9puxo`O6&9(GqrZ2SbS4Gj(NA7yK} zT%K$<=wnh{525Tnv#8d4>F`O-R$)EI&H&%`2Rf*J2+n!k#!K13$uaswf)#!uk&_1J zJ@lSYU+*d;ER)H49E5f7*SfUlZ?(1Ac!|Nm$&}q@2}b8fGtPD?(0*zECw0^A$xdG2 zOI~GeP9$>becRNueQ;qWgfb_GM8h+Hc`C^D#rmr9K}zFTfu`cD$12rx6b_>neRkwB z13EV%1V|vi!#6@0zg7_W!pLhsh*H>IYP?L(^E8{@TltAV8y}UJ+4UQkM}B4EQQkW3 zc45QZkz(S;Q+VoBli9F1+^K32Qba|pN@2e-%K98FoLXFWV>I7HA^>c$`VtpJgT|f= zLf6ZAb92-1*`VGLULi1{(u~~}T$>R8vN2&SiZ5&Gz-(l4miKf1d$&Z?pQ3%pM@#)% zNcP!0U*(mQ;;t`G6|1Gcq9A3av*E9m_&{JWw_!9eNbY zaN2r$uWOu z;{CrZJH}_6kBPY}Mt9}8(k(c-_GAA;i7wkZuW~`TS~3Q3v4A^$4OD#u!F$&&{Qo}9 z@?w$T)yZ1?RN)mWFP9KrbEfi;+IZKA&oi`}7&x?A`a-k~k0euXEh)Dlhxf%1Z)qr^ ze+4wD5D0Fy8#2;VhR@9D2{WrE$M4{=%IaV0J^`di=pgU7rk=(GeOAlLI5($hXy@xS zi<(@=C?m$Y}5Yw|74LAL3I$QBZ{dq>AF&ycrxAc+BJ@4vik8X6Jt=QcEi#VyB$ zL&AM;9)7te84Jzd7giPuxXTLqL?k3RX6b;hjt50e4sfe9yu7?C&B??B1T>)6kNx_U z;gIwa5AYBI)?;x12d37V{{AZeX&GRXgpd%7!-OJ46cp>#DyXVPdtd{3;621=sVkxa zK&ZmV8NdT2@>%>&8dpyfc6c0>kpRR-of?}-fhhW3j=KkSY@coR%mF;i!Nq22-_A^< zfUwU&4|5JEm5w{pB8O@em*=Y)@O00eA=Ah2c>J1Xb?BR-5)I$U&(X)?2q6vp$yI^r z)Y*UW2=jK&xV=8j_#FVSIzPtQ%VJ$dkih>eEsz;`eW|<>#s}5sI>odE5CI5QArdB8 z(%rSc)ZKS+ya}(J^C6a$lsr_EN&cs7;5{jma9ozN9LI$&!&PemZQW3P2B^>V@ykiT#KN7P0M=K_kI;bopOGd2b>z~u z+Q;1*r=Ft_3P^hdXaU871Hr8n>DQ~Hd-+k^1aEKwepJCF)oJOZ|ji3dV2 z?V69Z>aS0xs^ds90x7(3Og&F`IBREIQ+IO?j5gyAP?i(5!YGQo)tgp@{5h^v5^)$!oPr-^nR{z}$ z2utuQ(p+G&#ib>aSx3|aRO3vy{l%xvJ^(&!quFA^Gsbj%;>PIRyXFa@!eg7+4UqO* zz+3RkbuZZ>*nKp7>LMu6J^uXCEB#QNmnvj8=GO$6>qis%Enf8=rE7wkc@pHjuiyXP z$c}=Ve=QSq0V=`4Px`1e>n52i}`CM4tDIM#zdFO4h@kmOO~suu;)eJ(6n zUwjMKqDE9(U2iEFjc9iO)$W98ofkDWI;?70?>!<|4)1!(-dEalhJbMXe6CXLzQ1_C zKR75Txz?2WBnN9uMohT?*8~Rri-HywQ>`P-0=YN^#Fp9MOj&SMf~LxK#Y$S z=a}}ys<(J~!1K}Ib;5} z)7rqNnGrx$iw)>EZx)gID6B^FzJx*nJ+2WwKM}QLs%wwK0nkQWLqkffeqUeTW(pfp zR{uYA68zVa@ot^P#^=ntSN32AM;g-`L;*$!m|c>zXJSKb&u0eNe( zQWlVQnYbm0U*~dap|@#T*v2B##>SZ~ zb{r&UE2(x>mLwNAnG2d$+8chhWjupVx!;4Oad!xmfqRk=eUrtKTd?64HW+N3KI7fpt_)*fK-W%qsq=l^a z(B5mQK#m?r1xjG|?zCQ?=$&s>4wwRWTq%CpQG!xC?HKm9v-gQ5XhvQWJ?Q}4b;tzp(6aAY0=%L7vo#m6x6+2L)S3eJq~T+ zsHwpTe0b(sT~yl?HGjh6(A(7v-x5*u`2cm#ekL7N13xM1Unga*lE)B&)kFZCpCDwX z!-RX}URn7t^X-_tw#)V%$l7pJ0TKg$854;fdDd%)y#MK}r-~=eX#R_CuLSnJbMDrw z3LpGv4Cz*AlaN>oXq_KAttef$Xg5+30J28T>f6iaFoD~o{aW-M|Dy}&d_5ua*Y3YM zU8GE;$)=o$RR!+JhEqH!?BJV^A`av)Wap>xtOd;Sp>D59w1Ix5`7f7ZOa!(IqDcSp zB)AupIDv`oed<7=ICwVS4Impz8IR>IvNWh8t_bv(uKdhBCzx9;N4{O?gWNU3c}tK< z@7Lvxk;2ROUIr>brijNg71;*+l`~&lJ3IW$TX=5bI}soMNyldH2lD`yKeY)2G-XB= zrlGEtUG+fAbl-hrA5x4{s9E^!8kwi;sS8rgWyhtTip06h^z^iIs+3J=HE90%OB z>S;i5n`O4DPK=B*^MUO#*H1F#!gp@2< z)Gl+7$@340<{7ieVM4Ikpk?oSscrszG|$tHH7iwzl!+SydDW~doWeEnhA!EU&42Vy zho$s)Xb-aIfM&irBL%2q5+4pEPk=v`bq(ugCu>SbNUWFeA@DzNzTg7GsTRZhFTvP5 zD(q+IMeDLzG{x|iJnEk|d-!X-#@uJ!MUpj6W_w2VJdgVW2dgllUb?F3fq28~sAp?b zZ4asLuG572ywUc7hXrcQho^pX`7f9c6Sn*(eW$3QaksqC=x*buXf>xDi~<^{N1Nj+ z;Bm7zFA*~VxJTO}4vRkotPzYAf-p8df#F^bZ*F8zXjA(&Uq1l())xARiMag5bKNOo z^_w3kQq=x|&=eW(j>7>`bL#C30EOz+R+`>8HJgfdwLI8N_sTVe(}{cDhZ{RS z;0^}8`%ptzT97%AsNyI&0|lGhrDF@;0j8|S@w>1~uq z>7v}+TpX%L{4-2CLP)DpTT$KsZh7t+23F-Gp?Bdw%BlLkzXNy_2&Nslr!LZ&X=4(DH9W}2(@q1) z;|F*Qh2>kgm0H30u(951FtxI_E9ELpH2-XTorusN3iLEdu$=G(!o8_LC#2sl*5f75 zPbVVZBgH0bGx;sEF5+$mu)U@{9P$(6^gP*$c@m75^B_$1<~zbkw`RRhXL5C^dHCX1L7@rnin$^qO~T?D&^Y-u9t*V(tfC0c0nM;^Z_UpgM-Ha^*! zY|!_Y2fTwV21avJQxztWdA-B*!SS)cZu3LA?+Nn4K9gv}?Uc_DRr`ZPWtB2JfXw`+3`imvtdalOzZ135=r2*IG4nSKi*fti{bM za{Cm;D42w0iT6zGDkJ4sykp#dw-$8{#_+ai_oZ&%z}^*kh{W~L2x9yu->9|43p8x+ zW~=6{D_XkU@oQF}UE$4p>lp=WuA4uYU)mqLe3J1Q6u0#Q(Xj2qCGjbV)?=?a)0dh^ zgd|>hNKzKQ;S0dT`AZ&p!iMw<5lbV>J)g{gI{K0-%;r^?lt$MAWisgzy%ghPU3=>G z;dz+vmDs`wF^s^m$ZM`79!-KdHTrT4D+?6=NQ=rF-)O zwcC{6v6Hvud8*(ecSY;~b)2oT!#>X1=`49P%2G~@*SrsA%S~iC={xH?-hF;)Sh6iKCdbx9@0Qac3mXw=x zZ)_13uWpkGjtrA>ER&Q~5Za~L%6&s5Nwp0E7=%#NTG z@oab@)#>=iZ@g{*t91N`Q0?tRg;`km10m&E_a$6hYTiEEcqKY=qcUTECXSf?A3H3< zC$DOW+Z?vQgv5xs0>+~loVLUHec`Uxg0Q|X=KV=uqGabI9OY4xFoX$F=*zrMCM}M& zF97Vb&Wvg!EZqnGVHI!+q=b?2?s-f;A>s5zr(vtXk5l{ZC=1$+q2E-rb&VOhRQ-ci z+yC}2bw^o0gzWhc(3q@4W<^^_!;b6yDCot|?+?<&gs-TR&o5jCLCBF+nr^^YVJ0R? zKLMwHohmHKiD0aA$r{;<`uCGF>R)LhFDzOKms<~ii|QWxnezE?xf^;7?A4#W+Y>pv zzegP-)^^$Ef!BTt+$3wj7CWa7+Wc~Up16`!qIY*}df>;M@<5}}U#XgwGQbGVOvaEx zAvmfd_w_UTNdl9qj0rr&eVbTpt2igC;tdZU1O38v@dqZZJE7O>4^$Bm92i8r9T6sU zNQMkLyzb@O4gvGH(xOO8{Y2T*M4?FiRwg=7b7!?-e7OcX9+}Lj123DH_c|^p>0>tb zR>D4XnEuAZe_qIG8-GBLNE}wkr2EK)TYXzwB!1J^MB6{hK}|>hgPIp0 zrH*RE9ZLw(Sh>#t;2E;{_T4FGB?I0xSzLKVQi*;e!Iu;K`auST2;KdA?6LH?K zR9Vz6)Vy=gyUj(646X9aW2u@`PG;USv=p^8suWuixo~I>v^dqP0br2Euy)?_y%QJP zBUN#~4BS}0vvZm?*=k4uY|k@@0gZ@8PHg@(GK8g8e?VKZSpkVn8`0D7Kosn>sC_eQ z_=r!8c>>swaEvR76~cJtnE*qMu|^=575AW>GC&yHygP={eI?m~%ZPx$#Jd*NpC$n0 zD^Y!p8pVpiC{%gq6a@)N%A042V_NcZ8?P;qkW4qljce{p3kNKW?zwAV(5!!qJe5=M z0z*&t_w@XEkyQGRvQwaZn@JS1uaO5r*|<>(<@D!Wwu)uDN!3}Fs(MfMeRZvO9e%ev zqQ*6W-srOXR6t;gNgbnXU%YdbPPqGYN;lyZwmjCfowt#_G$doJWkgE=$$U=ji+`*p z$GDUw+pJ^?qwYW;3iP*HO{H$#+sn$XQ#^xeH5WfD5e7qmTTNy?QGJ-sB>tWtm(6=c z$ej1L;!SQ01P`%ENZj$JWKasm_grXr{W4;Xo9c{7sdkyg-J{NYOzI!7 zaS;5Vw+uA(I~L0mYrECfN+iX3T|N!%iT+dg(t3FMuWlb{%bYu|hQ0Qls2`SaVG6Rf zWAXU2T`GojVL7I(R9sC3VHm&lm{OGZdi)tZb=gJRSJY5l%G%)qwk{9UZb_xHS3*#Z z;_nWr2Y~84An$)T@mmb4KtBY3#EH?SR`N!)&>tBIjcM&7RJmsoT4`JdT6B^;G%2YN z2sxtrH#oILeT(szz&)4CXn=zs-a&&IfyBERmV8}1`%ba%d$AP@N=_YBsXvi@zq-i@ zCH!P8#TTcJXDa;mg&t5OeelrS-=LTo4Dz+dwpp7N9kOn}R=EY$_( zsJ?LwTls3)zJCd{^P$7nx@G#9iiyJkKZMw_%eFADZPmM3<8JT#(>|y=iN*JaG1~L@ zJePsrw8$afK5W4n1Wn8_t+mU$?jft;1jGop%?}%%=ZcftXH^aB3MCWT&w`Y3`>RB?FfXZQE z?H>1&;K_R=^$;mgs?bRS$qi*g7-o$7=>FuF?~p*jvg=0#ZLfnNVz30PdGRG*avozp zF8U{`VH7SnXZBp*BQf2@n}nu%gQ|X$jSZl;^VLK>mI^<_X6sgcXH@TK=DmC7VVsZD z!tCzDzxw3qQ!C+BnzgP|N_hvAoe2rDRaq}vP;tl2FwSlkH@`bA2(p*Iy7YXF9Z!$3 z!)qOt%o(;l9t7p~*~!yxJ0-oPk9nT~H6#`%iymyRe^45Mh3V;y6B6>4iPEH;pS9TR zh2Iapg7(3_u9LLDL)3R)uYk<4eu7o@u2Hpp!T5@UR#IbZox!F^9R6<^_i_8{8JWO~I*B+T+zFi6*>RZtAd7=qiJk#M_SXu+{dZ zJ%M@OCJU5{F%N8Mp>&ue@@Dzi=EC*7M{)O}#HMw-NpS|VL`_ilg6GHXh3l_A)F4pm z?InM!xl?a$$_}H$rfy2Ki%M~g0#OJ2Tkzy`wRcfVBUZazrgk~!n->C3Lo=vaRBCo3 zLMrgYH3o@01E};=U7oP2(grQ_L`qt=^HO)4YV0naeUM>~oDpWuLG4yl;{PVmt#;D| zc;o;{tvE?K7W96JS2ak1(W86XIP+!reC7hf0o9ShnYzekdS`#yaL`k%7tXiZ!^aRk zE%MhY^OufDclxvpDlsu+y!W_G+GU){sMAh)Z#IuXl6%k|tU9VwMd$(ZK zByVn50Vls@PCyW*pBI|7*C06-*%3xr5Ye-^OM3Ed!=d%!RcKLAXTSHmXq2{;KS#af zYDA&ml=GC^h){PtfglPb(QDP>)Y+2-A*_K6H6`hDFcXFvQtc{GS%$`Pd|%PCY_!ew zv&p;Y_w&+pPFKiC@Vy~xQ3J$)-V8=~=Lt+Kmb3DEoSX3n>c%go%ttCZtv<~j5m-n} z5Ule4^m`9KF=Y0KMn=XgF{|{wmv8+!K6m|feBTKJ8=I`viEMbQ8Ytp2ap_;bnquN$ zC7|ANCb~&pC}z}evVg|7$O)<< z_msOvJm{%C~bC~Yp zoPvKYH~Lu-Z_UWSukn$Lo#_;xB2V*!QN*p9>&~p(uPtADxjae{*Y8cw&PlrFfHIo^ z*b{4-DDrvGhkgPbg6b#8n`Lp(rZ}4*Z><~y?d#3bZf`t$A9z9IND$>_;y#I}^{YO6 zHsK@)i_~6llmSxoenibI6iT2T5fr5ZjRYa18r*ER zL$mDWT86>+E+^IN^;;6&^74btEsuk#-9v_HVQD?KmjyJnr`wDVgzOTZcQJBWT>rMt zfhh0z_Ful7y*#rPkGV`2@BYLOM19&-x0?Vi*6HfgHaOe!@Q#h~Li*aOH(7mn~eg3*Unt0#tYoh6c>QTS*n}`>zo%Gaw}I)UdCpIXBhTo|$O*W?# z2Lh~;0voZCK;Cx$C$cUlvnj{5!jDK}pl&DenVAGSl|D`l#AxD;Zo}PA^!1z4L_C$5 zl#^*qB(Js12R?I4x6`KCvqaaYjDZFATk|k!P%;L4;zF_OGd2oWGn|oujtf ztMNc}MGkl1GNZPF*SmUwKJc6RgzRa|?K>dAk^r zW0H~>)P{zL5<{1fz}q-@&*r0jA_(AmU^pNFa7_a{;rtI}ZIf$@Ws z+U3Y;B?zUckGi1Ul$l|r-CAbj@?s7|r^V_s7>NnosozeqeZYKm6lOEiBKj-iMWJ3w zPqW);VuhJP>OUj;@!cjAi!M)uR(W#O*Vp&@iC$Wg(2Q;8<~%Q4Q7?QZ0D?5`C_7PA zw-1fy?bcX*^YmnEZ5&ICr{4FwnJ2J_w$2|veuB4f;b6=hK?@_s%t!OomJV#Z!C;V5 z3cvg()DxQM6200T@J^cpMooDYWC}9tHs`HgpuyVAEd)15nn%>|+3Vnb>v6ViIBQ0P z_Y+VZ*eh4BIOXLnZ+pCN{{%1Y_#FEbF{_;S${KkkuJlYc>g#wctatyL<2Qc&+5{dL z)jH&TJEGpG<>Im3nQJuo7T`9xzj4y8JWdq0IzOzE0%|+?cwlsmYn!*ORBw?!gsu%}pbq(ct;H z>9Oe4?ldYWxAm;T!Wwwg5>|$dq%Cg8n}5b`-F9XZ-|l53D3Gv|GaJDUbw9qQrdDr# z+dHtm$mn~1l^W`J^PRC-8ALoPGScB8*@#4IcCyhSQ^e7d_qx)vujuknv8dt-Gev7| zXxmtz9MSurpiLLLyOfUt{^CMaxMZ<_-UK@Tu|EuIohoQsf_1}LhnO}=!C~2|*_p_R za2O6iO6?`-Q+)h7>+G|lsAmQ>8JWfUZ1oa6gRtdx`)^gWMVA;I)l~J^6xTWW&zDQg zJ@toVfCU8#t=&E*W`i>iE9XQXO7b{m>5;9Dm(});cNdTqarpjtSo(_=H|fH z<R{>i|UKF{s2QuOUIxz z(j_1%sYs*JAgMG+=KxAbHzFM>UD9m~-AGDzcgNg4zxRFa{TF%UIWy;+z4uz5wZ6zC z&g2wcDQ^Q-|LaQE-G6hl-`&ijNOmJXd)X<=p@YDc%o%feP+zrc1 zOMO20SiX_~;~Ql#OBMR9we+Kw{#$c6E<_85UE74+FEpBA@ZkExbtSKK;|1&NLLkZD z$39<@C*|QgNG76t$!GQkTW)q@^`28Uw;-Y(c9d1^zuq4+vSty9pPrG<{O|~2y;5mM zvV6~n=}X#Qzm?(8kS$LPwe+K;Q`)+%PS-!c9AzVtJc&iQr~>Xgy42v5FEYrZ{0xpF zv4OwH3{=%jSekIyDQJuNo_K~d5&SLI-gc2|D|tEzrw>IB4$61_btU$SU)*s{0xVWO zeYOt)HdOH2r;RBz-qDZ@oAvE{fWHX-2ZA0 zI(5El$fEYkZFg72o}Qjv<}s42sDydvn-&InLq^i#bDj)zsqMx)5SQAV_P0B?cjSuV z3Im2=;lW|LO? z9Ji|1s@Y$u`fUjPaS(I0?9}xkJ*+{%LsWZzJ4iAq5-eebGhAgz7pkx@rW++B7f?!#z2 z03I3~S=O{SvI+&9=R`idMg;Z}GcGRf2ox0bf|3!-$%;2eAn2yz>U#1riBAg_Pf`GD8s zset#%+gWmm?FIL%1;BS-Kj^uBhGB-68Ato+O9jRqnr%Pt?G zMHm{?Z~?z&kz@kK19d+COjM%*grRORC=(6b=_$Di+K436YbmX3aAm>|0_QMNZ$U;M z$lQg4f^U98RXH{00IID?LC$OZ;>&(M8xN0hZX_c;_ABfspT|l#msbmsp_XRl$Z6qX zS~k+VLZD}@vPIEa{i z(s-uPB8~tQ6=-xRm8syFMDSLt<{23px*p*YU>q6(PI+ts2H+UjH z*Za`oQGBVxUp^JO*Mc(=;pIt%-TyO4WonQ80js{ zTkHzD9H3ZuODB_S%mKZX5F`du%jP>Ur$p^AwT2etKa{FfJbnwJoj=}nZ;pQJ_ra&I zP_ccb9zZRlrIibXVuf25lBV(1Qxo@I>lEg1m)zWrszd5&*n-zoX;JyGF!na~-Ivd4 zcM90VSzkSTnCIZ>(>7M5Q^sz6Gw@7HTyR3;>kqaRnrWF}X`$b8?CZsn^?mEDU3tiAB}T3`xPp_j}nRbd-Ir4HILuBf1=@R@n0aVxi?tue1>D4|j_8BRBxori`u~JFZQDO!^9Tb8|d+RWl3n zFpXSjxY#>5aDQlGoiinzZmiMGmV3PeMm2u2KtzK50o4X%ZG(^Q%KJwud-4?&`?19X zO_!5FX=G|l7ehlOJ|zA0NjbgCsEv0}mTkF1hD8@R?3EHpfsDoA=kv)F5OAw->$`Sr z%~!#fy0SBD^npIM9nr|7J`VdYZGM#SQRP(+?EU(eiL#HTyB#?g1@Aj+k8X-l=ueo} zV2wZ%K0H)O^YUo9ZngL@VP$C1e64ii=aAb*5rwE&ue678QNo} z;b0qd5TROHd1pVAK%v9FAdl*7xzuhN=l(s*y-SEp)e!eR`QUHZw3alrM5|fpD+cny z&mVt=@bHvr%~Q<~Yoa(To{k-9fzOizOd=w$9G|#u#B%9Y$RuEZlwgwmOzq~b6X4sp zYdZ946S4J-WHt4L08QT8uTXJ@y((Fo72zj-=;e9Osz~$eF-Z2k6Zz|H-@g73-Z{=v zPh=@eAq12XpITO4zF#p_%sw=a9ZISXH8nM-`=I+%oZOt>#edjZ`deg`i*1_}Te;mL z6_YsiMyT%9_f(R7<3Tb^YFEiS&%*xO{jv$sI_S1Vd-b;h*JT2T!!XE2=Kw>LNWY8m2bj4~L6C8r%%*Qj2fW0J&>H{2xStLB$z zoP9sq*yM{=q4w}1NR5al99uXqOETb%JqbsO&kQP){jHMJ)d zorCvh%_{eKz3=5?{>3VsNCgKa&AT9e#m4Jm+I63ko9?#~L8psUN?#L^-z0B3&H2W= z-u9VADY>AhppM}skghkn_%RD7pw}YlKOnx(JWCzlYPRzA2G~NZ{Gl`%gI}Fam`qsF zgTj+hINdW0+hiD;FHl(AOw?pzWA^guiK?$fNfxrbX6)-W18K;ya8}}=?X4Ma@1xh# zhvPJ3k={o&zyRTUds|=ZA+$ntVM%gw&)TLV96KB*{oWAc3Ti{ffQ@6L>5QT`(_*-E zopOJR_;ftTd1nm7#*=Fp1IfE{|LvfCH(k&A+3ON~wFR6zjNqW1xfm4-9id=Qx|WL$ zS-%CwN7K4b3pDg?w-kbj%5l;!(z((b>*I&%w)w_|Q{cGl&RH8B7>beKkPY|$!GqI% zz=QOSn}4OBcZV+E)PoomFOa8)KKm!$IZprBbU8Q!tuC8f;^;no%@{%6uE+9b5CUlB zAe+?=$?s+J9eQ!=0XjVpdBHjavi%6W4XpcD(na?wl5jF94Z=*ndM>mFR=r~(o&@*Pma_62Ol*k`?&OWR3R@GI6}MhcZXkn&)8Ok;awC{Sp9*V7BbPi^#;lD=PSm z1R!sphOI(29>WXJbxGl${Uopg^Io2P#3%fr+vdmuJqYlw?m^Y_I4A_kqZLseNTWN` z{Q&Hbq!Xo(<#V5RZ2v%g%I7-6-HUMTMyocH{XMPe-rnZZD^uDIN~AnSd)VJE?AOAspgsj+uR)?;%gfaLv7 z3JoIrd~Q}+3EWkU4S?6N1SjEfx9fMZK@g*pVc)?ZH{{#CIyb`D9Lm0Y%xES>EpZ%&N4H`4Emb(21Dhua9DX({OkCSo+ubK7O*V z>RDx~9rhURFPcGgL?ugF_{C8U-sH@T0qljh!xPha~(gDE7e zLGKhR_Q55{)BRn8vv(^MN@q_o#-lklABIRV1e|P$!Dm3@VwvR?in;F0R!2oUc>^3! zNqWNumn&!e1BT(p5NwtcQW+wM4up{!jtHDQA~sQxoha+)KDuB!r=71ZPQj2@Q0Q%o zNPfN?a+>efYvm&OZE)$&r|#Wb@9vymN~>MN%daz150A@C>XIdpW9C{7X5&SuLLBz} zN5*|}omBSvB5kb1O7B~fY()n6WuN50XM-On^~yL0^?RZU+gHKav zq3q6O9zIipmt7%)g&xqeG=1NV=@^o4l4I~Nt6%cgYaMO*2~GXP`8V#Gu^8_=ew#mORz9n-a65Zt)j0A zu^s>ZHR_Y*mGm%G-G`4#8@tN9^^FaiM~W{DSHAvxiyp>Ety;(55kmc5r`F7jhY4K6 z7%rcVw#C}v1is)-YE7qnE~qHt!9;Ao3F39r!r5;ETdL{EndvBe*(>057d#2c(G%r# z8;)%T@};*lxi4t&@Wp80+)0FEeJbSLFfzqgA=;57Od=4CU5C2f1so??=le_$>WgFZ z^H&~S{|h*Q-0mbW6?{-750%^~aPpZq9?7v+xm=%TX`F!-+fAHu1Zy9|G ztv>pNJWYD2K2;7}6cXcTf ztZA0TShj#q6$Uc7jJ>Hg+5#f#ieGQgKemBrd=haL8{hs2(_A@DF zs!Y(7bxURPxRy^TMxgm|GpjoXt)%x4DK_^z@6*4pPb)WGhjivFdV(f9*AYBqUe(W_ z9#dwb)Dw-V-+RbDpi%dFFMJ^I+uL>(@r-ZDyz5 zl41{=q&G5WRx&0`Vh8AFtghgwtvV+50CIPxcI>dd#bcfaPz&RXcFW1T`t(CXR3@fg zrVUk=eS`Jr%aJxxFIO;^@9Hl^FW0WKesGd>Slo)&to)_SO6*j;H?i_mt;3e`(W}0_ zi+&LZR$|SJ4_(i6DPrO=dP^hmPVV}v&S-kx{U4Scx~@Pq04mK-G^9B-H~J!P>%~)8 zFnwL@_x4G0a@u5&va{*F17g^TIE|%xx~Qfj_Q}c5^~F=QbkQ8uADTZMORtq+g(z7Q zcx!C)e&-o`tZQp)U(YR9fWCBPtT_c|`BV6S;|(`=h3QTt{(@hQ5>>Jg3^a4p-R~r| zwiAq=SK4-luXnhZH@5+T+xScBvi~F5pmOXdA;3_0mW5A__sS8y#~Af>1jVxmN%rBT z@02j$is6>O&S|cbuuivdj#o^`sHkxIENU5YUrNxi15PkAC{-JJOvTEC7kL#oDq^S^t8h_2%08`MSj3k z77uhSOX}{!mR}lbwPk@KR$Dhn&mLNM@X(M(sgMjL+6GN%0Ac&URLR_tS;8*ZJn=3M z4_Y32_lCM-IzZ=sc7tdUbwxUwWP2H<)hYjR41TKv6bTAA^eb(MTK%CH7t^t>?OM< zYg;9SIRcMv8*6NBlIQwGHKYzFsb%K%>3a|BQOTVxZoPy=qiSKMhd^TB3fnZH5P zNN#hfEQX|8&V9n>;DnIQ3}`dv%8GS=oz_^0@yBnC)a9k$^-flM3YShwK0 z{`h5o>bUC7C?PP!sCcvU0suuNK=;HmD2dmX>|NHCwt*o$`j1ia>~z z#?(BSjtDd?+H3So9Pk$5`|%n_+kqjqMkZ3|G1ATWhETdj7`_87ll<;x39!p zb`o39{;0e@^98}a+-CgsLj}a8-_nYncWd40)P!`mG=B1z2`xJ5#Yb7bmw9Kn&jT?|1u6jxwNKocJK(C%H~T{Kk_ksrPE?VHfi*hh}hjdBtb_ zTc77&KW3U#sq>#rb6Hs64_AMA1s5fZATZ$nicvtTok84L)m z*!0PUYxr2%OV#Je?5x39Ckc0T?)>}xepJdz=zRD_ywslLuqpMG8S`nMWIU;|X?9y6AO%|~ zx!l^fA)J)p2)&Q?jHvHl-Vypl$C;a!bRGAkbA?kB(Z%m@xN?{m8W_;L~$%6 zUOtQ5ysR;?MB@1Tvi-GYN(V z69t*Jqfuf@(Ahbe{)9awMAwZ-oZ8EMCrgTE5RrX?qpIvMma7mUWRN2WqL0}^@@zlzHou?;qDnNxK^dX=lY~RfaSaMIbAxlBu%k4_I=C4!nvwu<1 zpW=S!%kSraHyrVT9_t?kV}t$3^rT6h7JA0dNYzP=cDWPIQihv@z} zdolH33cjwu68xn&;?94;hmxE=54r5Ed7hZX&k))X9(wpBd_rL#ol6h(;_mz9b(K)= zpZMhZJQhK)y=8Aux1aQPTZDEwl-cXzE->w1rNcBfXUCY<@M&bx&yyo}O_T*S<<1h>`HzU*!%D4ti=aGT7ED z=`mMi9>Z>K2Zs#)rGh~an8U-B2qc0EQBOY@_23@s(|=KiaADA2hs$6a709O@l^-I! z*3s$gjG!95FtjZ}A4W`KsOv&w!Xpw$|CDpjbQ+)Q8e~p6Gawq-L)+pGMH#yg7nEqt znft_9G2NnEkK3u}tM_!>;S<$<45C1C_b)Hm!oc@u^&C{zntXJtjC|x|`chdIhfM%&Ve8l9&u&`y%ebv|nFO=s!&nqMfj>2CN zVsLu0*nbtRZD9(;#S0AweqAr*7mkRYIe$>;`B3I z1xcFn!O^sViahLSPsNCP-a=SZCVQZ(DuuzGw*3TWXY!`e!F{0QrUaYM;<`c-`%F-Q ziFDgE>*YnT(lg4tg}C8nP2J^F(4Vl4CLjp7@*3@5-S3bc<|A9lh$Y?pFn_vt=?h>m z!1w~4!O0^0Q`KFXaMANp8Y%srI@dqmpWB=o?B;7sL>y=Bp}l*+`0WV{__L+Dw5q4I zcH1H^;yBMl`*?pW*f8n&YPq;>aD;P}r0dED*82zl;ADsKtJ?*Z#|W*di*$TS-tHJ} zYn5+j9R0qr`4?_y(v4We<-0y->0{-uwQF}Lzp?o4&U_UTm+-iYCuDE#O%_q(Dge;# z3s&ku?QYKjGX@3AyIk_Bw}&*#wv*p5Nc+SSId%)#Jh{Z$eeQN+F2!-a8#Faau>tMW zGCI$kM9g{QHO8E`o9&kUqj9?to2LOtMvi?W#fgPHQs>!_U4X!;rR@+A#U#$J^9V6C z=?xCDPn2sF24VGlXB2&Z7W9F3xky1}qKnm>uEMsCM1JXxbOLJxfG<^k>r(G@+mi1K zH?_hfe4naaXD01s%-ArQaiQVh;!Zddmgu&C#I46?J7Fou2>$2}D+m?kE#KwiXCikm zOAR$)=QA*Tp$Egw?=a{E?dBUyz&3+jm3D%x?U>SXZRfJexmV4+q)J8Y@@jJ;iuo7p zJ!N;GTxaC^9Ct)=N!$RvzKNi0uydw8wXZi{?NhyG;ja;s$K_@bw;%d&{%icz=s=p4*!HJ^gupNi|A52yh;yPkOUo&2%l?|S*+h=F-hn{II|8Jh`CM8hC>VGb(noQ2m<~(=FYaxP zr@`^`(55cDJQcP^KQrm!lkq+xFqHsk>^YWF=7`8)Nrhp%6|1LK#MBBUzuKssWEz02 z*k`->E0EM6Vp2QLn>;)sCgoVM;@&k8!{7LN8bv;T1d(l8ys#4?QB17<+P&LMztEMg z%7mkft_MeL)=JN_j591ZdrnDdye)UhpI;&*M0AY3*GM+!>xwg9$UQB)&3s5}Qs+)E z)v}&#rN4Ni5D+fn?;k~DobdxC4mDg7(2AhPG9mY7-e<31 zQa5x2W7}#+pxT{4YwK4_VRqP0QuIC^^V?p)Jd|Zc2>3w{Y6nC86f~!yx=J4$z5ow- zsESU4ttS#veS*q`@?f+h+4tT~lx2u;c5{`yetHD4d{X#^HXaEEBCH8B$=t&k(qdw! zh7_oNXZ&u|RLejWJNz4s&e9N$aRQ9$6Y~=CpOF$p4>auIolCZrq(tm`KjYEp3=jP1 zp17B^^5UaUfiPm)#7OA5J#Q0U*Vnvsg6doL;!b@eE5Y`2zvbVlrs?eiRBSfIN^p;< z#F0Y#CucUSH$jJ!fM2r_p$!z2njb0ErtNom_+ecoVI{`3UQ^>`tLzG;r|Y61!pL6>u@l;=i0e{zvSdfVWJUqR%1q4*>AZfq{? zo%y;i(fqOO?eg-vy7kd2TED0;1&>mj+jW`v_~bFp39V|fxg*is_a)h17V8Kgq~3@R z$b>&mhR_Kk@cPrn9wYo^#d89|@+Od}Rb+vCNQ5)qX;i^pA%L#O3MwrBo3=p|E~(*b=&OnjaGY2&XLMJrHc>@;u?LOHK;URLDpp0Bo!5!sOmzc*eF+H)?C zVE1|^ofn`M!y1~VZb$Mmk@;v+M6zO58*yF+V5)}5d^?Ph#!44kr=-_wuVLMF92TWe zQTNq;Q`Ngd3U~FDGLNafwvA_&F0ExpIQsr*BY|x>n1REIPr)?=;?GZLa&@csb>%Ed zSARCLl{|YIk8a>^N;HNlV!Gyl(3CJ92A&6(lVycMgSmAiOe2y{vOnP2c8x6U?S1|H z-lEyhZ;+bJ#KYO`{csga`j25*kNLnnt;(ljOdD!q4W_daYMH4DotUf600uXDDfQ9M z)&9+{L3;mABX{Eb%Tj$!^`nlC9R0?C2om2JGRJ%O`E+H@=Dcqs?gFp8bqzv~8b=Wm z&fU^o7nv+7q3+zE5%c-PX3kBS!YJ021p9Vp_sp5C%%%xR=c7>QJycC1`!=6{J7^Jn z3vEw&@MgPt*pk324VT6?mQ=A^>lE> z~x1S-Zuz=1X+}*Dm~V4z5DH_8xT_? zfK%k0{nROZ%Bf`e89|4@*^PV>#1uhSy}3~l4xy2RRt$9OzyEN0UEhya;>`Ew>_IAb zr|qQeMI247s_e3~jv!+WD9QP(N;5ePn8&hXrI(PPfDiTuE@%M>jcL$3zC-ef>HIdw|6n@6t4uF|bX3TJ3#T5$)!q z%dp_H)|{EDd1mD-jP92>Aj!8OY;&-b=#jR^B+@8DA_q zKK8@7GU7>6BArjW2&_0z&S3sYD($1;4Cn7TB>QH$o*At5?UgV+c78|?dZhE#SegG{ z+hwgms`G4V*-ID8mEVQcE;se%LXP?-Albu0$phUuQsA;}_mR(fATe=py;r{_=CD25 z@5{1_mij{uS`PM`9GkbhG{8D8Mc%RFYRSHyT0_cncbSP8T9R+b6DA z-%tIDiHpHZt|1bWJ!eA|_8ZNZb}#@)neSer@!-tGS=OjQac<`Quk8tnh9yzh$k@#2 zXsx}0Dou7X%u(#UeV zA96Bi$t~E~H^fuus4))5W^VoEjL38T`STeG%z%0m0Oht;Qk();M^^!F|5ZfqOnK~5=j)mxh&@k$UgNONHqZs(j zauqzer@so^OA`;F=uTOnx<7<|^D$mlP|c z3?qoi^-pJO*2W!}e3AIg+=^z~v?2;qpheU)Ctd2%L4)oqfLc`_>N>znFAti>ufDRV zB)`QDFg&1w-d;$^w8t>sg~I%YxWzTN;h%y|O!d&th!xa>B5UV?R3Nf#hkyO`p{~*? zy49U#YXGXT{@fUrIBHIfS!*U653#)Y&ZkVU`sO=v1$F^w>$QNEfBcN3V!}a`)MEyU z_H4!G)YXm$8$^<^2`rF(>x&<3`^>e>`eGs>4+IS)R=4-Rb$>HKG8@$H#x*(aTRxs~ z=qQmA*h34HO=-HA3FgL+lU2%vl;2*~CDd@3rZ=!K>XaKRJY>rI)B8`QUhAU^P~LJ) zVqSjzo3qQkw72!O3A*5gK#IzxJVBLT_rGlX@huvScq8v*b|hcZX!a7D+$VJm0v-Ck zg-=M3px&C6zrK<6^)@HUhnq!(Vq!JO#P^9pD-E)m=eQ})p4E~=XWgJ%-H$I6`IJ82 zr=v^%2SydF0Nddws4vyh(sBXVZi0#D;>VS)uC5h_*+v#12J?yu2?>b-h{kImU920` zQP$}X9Gq?t=}`xR&&Kgjc4r=67Ni)D#B|_fCPZb6Tn;P2R2}A;8>FzIn3ycr7Z)4v z7la>(h=^Q*C;zH4E6cDzt=CsT*(~Vr z+yx})#dgDuR2Jx!Tmdr!HqOyZ)`5GKXa^naCS!dubZt9cQdnLCCNr!6_Lvza>clAa z@Zr;a3<-BoT6V>MS8mu)B^C1r=OQ5rZrt{@+Io-`8w%anMP)trJ5lc zUzni(fF|O6`f5u5pjr?MXRRi2zK&{H%$b(QbHDaL!qa}+>p*%gbl2y@#Rc>>t=yM@ zqm5~N8T2-9AQqcH9ougmewcGecU)f5LU`3W(eC}aq{>Qpn>otQ`eR^fTok}Ikqb2k zUWJ|a;OljML{uKS=2SN@M?wFJR*IR4-|I`xg^M)@bmO|1S@=}HCVgPazJ@lkZ(YhyNxHM> zqn^zF6Uy@pdP4;BHcjs0qt7dHzDr217D2$H2fjyAx8&nJ(qmXa}0E z9IGvp8o#le-hRJd?|GQ(ue$LJzV=}fYuKBvl|hHm6c^$yP`_Q)bP{BQ+kSQ_;BBu% zW~%oS6$2KlAml3DHQj4IR%?>PuMiHep?s$p`?=ErQkauYNbjosYY=+==8NQw<836Q zF6U&falTf})O+X;EW=$p!13TZ5DyK1uaiddUx><954r@A@r*aaP0ab5YX;eCT*Fi0 z{2K=S7%&zrmp1g6bD*xUlgzuxx%E#Pa_s+qr`E!^a(}+L4b&pgME9-1YizLkbyV2@ zeWfvT@)X;)m42$eJPau`#`uG8qFw?OoIkSVJdVOOQ(ZCy?Ih!;ixwx{Qk0XU_1oN& zSt<_t35BkW+2N`Stsp}ovkoUF3V9X?&xPo3&jT$a)azY9){}lyp?KiJklyo#h;x zh+zyaSaZBSXuB!dc#(HPXL+!360?`8YaSEg3y08mh(2E#{sEQU1)VG>kn!9ce>;3%0Vzf)q1(ES(IcU&(yul^1?8_6^YOwTfSH&$3G!s78?kvC)`~OP0P&;d@>FY9pV`L*;uFa# z@1#9mudIE_1W-)r^D2yl$bE6POr8)kjSl?Y?$iSll`WiDtS^fyn>@v>O`20-D-BSY zM3M`pjeu*7lCs5m28L)tm#o8Jzv8mui~Ie@e+V#pK=HQlBod%VJdW3)E0DD6Y|V%0 z7dt0ltfr0S2h6DZaS&5;s{aV|T`+!eXt#!YGMcs}hi_OBb0#i~nYvO?Uj%Bj>EXs? zL;2`owLV1>1xtA;CkNNji^NDSsDHbkh+8g^U#w4*Lf0n7$s&H1yi&U#{ zaUiG3)7XtBl>Yr#fJM_BTCLZ_Rjp_}&50sEmdBKdKP04}mj2Kg*^V^q>z@kg>y}*^ zw&6L_!+3nyPTu1_S%%e%SK$iTZmuXnQz6qj7wsbSROR|6!-8&1TaDbPM)f4fU(&ks zwL=rKva+HdRld0Y5~AaDNzMOe!Y$5)OTef0JJ0SCqpdha0@fdVlfRys7oSot*t%|K z@*MOJh;$hQ4lU9pD%ljTaW&3_Ht56gj)Z43~Lh* z96)rZbS`T-WTWqb=+&4@#f(E!zeAla__hG>#W(P)OkJ1IbeCNQbM&P8P(L?owie3P zbCK|oSFP_aRHlR^N4oLR^SYy6p41!UhH^>C!Qh?A!yY3r({&`0j}(IX6m*=x&cXd5s6=e_Jk6%aUL1BWx*H86m zYlh$aclZvB9&jD9bAhoqD={sLN9H<|Ue20us3LjUi~r`<$&xdCVHWiG*qxuccQhR@ zgB!gjTF&^??IPcBvU?YMS(piLSl+pe1rj@Z*#GlYz~iNI{KILwSiIzyY`OUpD}n-c z<6_S5os-MQF`qTzep@Za011C^tA(*k>$`JldEcx&V!D&yRWQm}P52u)GDo$}El&4F zDhTgWLR|O~Wx{bsT7X?u2`-n!vjW3sknBgu6G1U)+BRWP&1iW(b6sN7;~x5Tvy~j_ zf!fv^CJAm8^sVp9@d)3|6f_0pr}cbdLkKbtSKwwNtsKd%1oPnZAFTI9CQwcIFq zKeE4G?ZP@nw=Suvde_(%KNmBzpXvWfoij4- zA%9O=d>-(Fzm~R1K&Dj>R$|^7SNgo?k&#M-I!E;JQ8f`^XU~^Vvp!ofTT=z=&$CtE z?{h$DU#vVwH#IU1ay6#>yuAHnVcbQnD!VjP)a5+ZmyJysBaE!+sqdPo^HQm!QTX$Bb2`x2EWT^FU6k4~@_0Nenv~bv?%e8J;7BGSUTefk zE9@wy(?bdD78*vYOMQSPKho;-JFFodlDb99Mzr6T;gUhYLT{go6`;Aa*j2fnZ#N(T)myM%r}`eTlzVV zf%;Gl$;h*q6Y4^G>Z3Yb{^4x!2aZ;zHT6;HX!=SBW)3S=EfgrESS+m(XAs-ycc@D7 zA-q~_yf#wfj$*KDmAX%=8%E>Wf>ZKJ_H;`$m?17Kl54a{)%{4jH%7PuA&Jsl(hM9P zcP_6GH-55&#-9>w5aEmi7t~TB=RpiR>X_dGVr8hO1d%jsAGtfcwNNw6uXzwQ0dSwM zSxI0#NWT(lV5X*;zKf8S!}Vo}#Pz;{7zHs~jY`wTF0GnUZyrLIH%~DDo99oDHqtQh z-He>D(=X=1f%p6)^PU5!8QX3AYk4=n#3;A-ckh3`ult`J^}bI43Dx_el0l);B-*76 zqjWY`I#15p6bWw) ztSe3g2+sGF57jxiM^~f)Mr#eTyo&ldt_h9~=gGX+DG7>*)cqfa>5rlYvuq-d<>~U> zsVO=3dYp}o>$sWuCmIhQ^DMHQ!-yo!e|&>$k7acSe2vA&taT8 zB5{d>e(Vv|eoMquue9mEnHw$ewe*|B%&_*vu7PyThkT2SmH_WNg(+_l#q>yXaWyJ1 z*(=dfDbF<`bs<&0aB=ftxd$)zIrVwN)J>nJ!om8Slh=%ADVePE^oxUEbC#B#$D~V^ z&0xA3C=oJD9rNnN`B(Y!y^e2H;-OQb^|ViS!mgy-Y^$(V#AAdP)x0EfpM~Inf52xW zIbNVhl|#>oU8~iQmN};~T&ojjXMW3AanDBgrpVdY?rGIc?UNUCCM4PBy=FWLD+#Tu zk%y+vXMsJxDqh^gWehiruP)XZ%u5hsHf0h`YLD@D0<*=b! za5i{0@$kqhMnK@lJKRIXiAfFVWB}I!)sHIA;$}mFuEC!^fzhl&-L4RaEsQTA0IeiZq?wXk0=01tISQ z!tv*c!Ka>zo{#2~;f94D3wK`0r@!BHEc54AN=B|f*y!XlxBl*WIsAIgkcKfD;g}zh z5Nxdf+Icj-^u*s#AtOSW$?^5F%wCzSl-hmK;cS;|Fzk-QL}GUVCK1)?R`N>cOP^`+ z=N3w{f^)EpnSRYmC+yB(Wk#*Bn6g3q17DiC<;7JcxXoWi&zA$&TV5_{FU5 z?JSxmX-;h&@!UZ?GlH+v3+D=4Yl_+d(Ij>Ddjg_DosmtK)3@i(S_Le|#f*5Kd#SW6 zDY&qx{rc@xC-Cu`0P|~ah$u}!NA=ATi_nA42%?qGX*?s%%qjs#L8ssHEGKu~PoI(( z=*QF@CYoTs9uv4R4?H{q=>6rn#s?kFMdq4FGWji;xj|7U^Q_71sP##6=-z2>W7p)I zCFV1^lIyHW!52g)Z*hWK%(Z9Sq!f+yR(N@Nn)4^-H;na*d>Y=8F0>bjqDBOz;0cv) zxWCk+M%~*5j;G!1)Z)GB{*$D+veyZ_5|#)*@|t_F<&yFV%-)~BNW^i24_|LNGq9Q+ zq+%mQzxCgMmqrp%B=Gzr4F(Whyiep#z4%Bz6hI5#Y(fy8U|QmYQP$j+rXpvG>qzAT zgtvC>$1wiBQRmDSdn}Ii1`6lc*b56iSYovwWUpj_E9N3!D4XjZc-A3zlY5hN9QeFz zc59{i)xmUonug6rmr9uie9JNI*Db4P2w7>Z3D;T8w$#X$nv$^}Vi)Ej{+pHT)W;K; zhr()*78{?gVj~rm^(_S!K2A;lS#s8_GTgDM0E?K)vjB@;ttE$>$SC!snr|Ql&T==c zP#bob&t#C4NZBtSXvZ(uElTZI$008<8_{*J#=-Jdmn=j&gmL+D-f)Ze{aJ|ZCRIH4 zTh8~^!F~2mP|K$d)th9$FC^)0K%oPZC&$`-Wb&4d{L8CoHVl}YBpd?y34PbHB3wj- zjISmhv6fRUH@m-_b@O5kx*nW>ZdPgN1m}_nc|#aAl;|q2kvF!<#!&>?!<{7bPR{1MpOCv zG}So}ML9FCmIW_98}YaQz>4mIUK?UEJtsHqMV^Vf1om9*h-~@IW}c@mRX7WocmqdD z#krfwG@55(=FshZ-t&|xpPw}!@K+6&_YcMgO5c^%5%ClD@gmoG1ta0GwxSEV`2|nz znIjRx$zN$neCXFB`sm5}Kb#jXu4U?d>p3+9TM8mEq&cMO4@ZBVBSyWc# zOCeSl@r!!fj~ocMb0Mxwfo(^LLE&Wy^X$-8D69l$$SSa7_}P`zF!rZgG#5(NBV#FI zrYu$a(uA7#UX%FTyO0=DY)B3E)#ls`&VSV#AZzt5ToiYw-sEo7{s9nFTA z66~ndQ^YAS6)Ary+WUNE-pNocXPq$`&woNkHCbQ(qPa;T1rt^E_BmuwiVf`4Hz&6m z)QpdEon@KUB261uYAyYbvLeLSFrY`$^9GAWTSGrgpS;z$50Bf_$+5X@cCHv;L-7{yW^uJ2gkOvz3R)NsG zv5<>}6mHS7+V-ICxY&-k6|@^e%}g^X#gEUb`?&QCvfcSJYK8&19n?1iE2CaGF>RvZ zVwnu!SL>ZLq*D;NR5VeOM_q56a-?2W6cxkjb7bSXz+aqadL~rp_+k+!1N=3jhiv3~+;h>cli;0YVqzd6qnvGCSCn2-)$P3j+ z5K$D+PhG0WQ-1+N>;^(ux-tkpMVP#8-VqGidiUgM4KpkWqMPL?8yh`~HWU@mJ*-@4 zfOt8#t*7WurvaAWM}{)X>I2);p>orIA83IBwIhB zoAsO)yLL+iC;PM*53|7gb3?7DyGQMhs3Dxj}Mo1AK7n+XA2u-IeU{_#uR%!!S*?M zO0k(yES{#e5VZExhF&g}pZZd8-g&Qap!*A3898H+o#jiP7cwvi7U40^jFd)6`9mR9 zjHp!&t%$tO+c4cG=~Jy*ToG3jRbgnV2!jq}{e8l?oxCR7wkP6jN%e^@%%WDtxy^EK zS1fx6dg@q^Q~I)u_IGb_jQ8hoi?ruI4xLp}3^$&*xLyi+Yx}Fz##K9Ax7XVSm%uu) zEjrmZNuxeDoG5p^9aYSDrFq zg@y#=tTus}7MG#XpL)5OKD<}&EkhZnfGJE7M;kx&-dIG&B#5V8GJpHm zhv*Z+#LbKShCx@Yg@@lcR6#PfXEC;{}&hP$*!PXv< zhFEZd6yTtT8!i8ViRmoylWC5lr=ZE-@YH-^9vs(pXZ2l`+?_A$rGH4nPYHUBBj2s_ zDgOYqxgJQbHy~K&V(}#{$(yG|&h!MJV!p&}Us9U*q=Gl5nx9u4aei|5dsv9rPz1Ow z6ZHh%cVilFl$p&D#UyPaoFQFlCfLO>;WtWY$`^?6oLdiIwa;yWx86$=t+Bal1o;mg zZYSP{C$^ihW`)7O^GFTP_=+E&JS(bfnVlx#9F^>=$0c{4AqT(*s<`613_jTdsd&i-scZl{>4A%e< zEo+76E&a5JUzTj(9)(TR&Z3s$VXs8|Bcd`EQ6*|&A19XW{b^HK$z#Chv-=F@bGEX# z#vV^`mf4eA&7aQ(y%Y03QmF14rA0-(cVLr4g|5|$PQW0bTk(EwCE#;m?(^qipV`-5 z5G{7+*`FTr+)LGftl+Ri3wtN4;s!QW}V)f)@ z-xTYN3#xk*^Np=cPz`~%(z5zn63Y_3u72EYJW;-dO;{cpFlIkprcGzo=>&{Q&Zk?f z?=E&(E$7*J9QWc}Wk%`rABKrawn(YmuoG!UmW+iynx>z8lKD!Oaj<_#p2=kw3%3-y zpW;o9MvX=Rfy^Zpd}|mKSpRWR7#aG9I_0)rb@(Q~p}M8|VQF5}WLZhMShsK6MBKyHN1IU%XDuTztOgVOXfrW0=!L>B{+YdAfhJevGbY4iQeI{h^%9UtZEM2B5ra5xthp1`Xi=~g99Pa0;(LO z(8e?^5|}f35BOSnQ0B)6=OcRHLh#oJLRo94L~~7gb{`dTw!a!OZ($AK?XE7Pu7~$V z!7RP5NwZ&hp5j_6PGaKN1x&lNH;t!~zMa_&DOIg@#<39lxgN0El%En@w)15hHs9nK z5mM!l*7T9<;yup1_yn)#{Y(+5{1;wK4*B)#c+k=7rz>wE1@@i^pdUE^>^{=UDKVgP z7=YB#@bDCkA_PlT;O!0hv_xFIN7`ObPg~%QlgQRc*-b{38t^se7V* zj62Uyug86U&!qXo0mV-h+#gaEpYy(1<#zlMEpV4bDe{T0U5u0!+Q* zZO5gMP~_q5yr;KD+X60qu+$de*YRK1VM5-y7*U3yIBDErH@Z4nE>dl3_<2-u7kZDl zL_a*uen}XV&wVE=?w>m3XR~M|pNByG%D@n3g`U>m6Iy>x;zzo0x4Z&CZ!S*HS z^(+i*CBog--*0!qk^{ASQ3pRN{v9|+)$V^yAKCBVNp27ih)z;4{ushi@(Y89d$(BV z_OHt)9dIpFZ|)vZ`==&ENv=a8Td$6jT~+E$ z2au|2;6MRLl+5K=vAQq~O+F3;#gd`6RJ9@`moE`!6a}WgJ<#0tbF=6@;t1gIBG>%U zhFctwn8!&?Djk7qesIw!L7X>8Pqwui+&PD)*=KBF+grew12ksaM>n7jL1$pcHT!KQ zUNQERMM*(Ei!@yM@*JaqiG{>dcJPuxJhOhN}Wp~gdY0B<`qR9H<*!l*utNYS6U{m*zY znA`PID2%U-S0m6OG^Ud?vCrw_&`_^uCQ*2Nvgx|9qn;l@uw;yKyZCpNHZ@ouLAwjM zAa<{B(*aDZI6Jf&!-@`gLM9|w&S1O|$~=Am;)E*0KGar*k`-8jH&7Po>D3jd^+4vy zk2_%7HUu1G0AZMTIt*->(tu1`K!sBJvg`VV`7pg2Y{i*a9Fd+a8|*pA41Z5FoOw_& z0W!fsf6qK4Oa+I%X_Aw@_L(F$!-|L@Zt0;!ywLId$IV=U%{+Y`)l=lqMAfJB8ELpQ z=8D7N&xib*$*37_QG)m>B%hCe=?U!rt$^2?K4M<_{8k3Bg7Cc?JbTGbic&c9ZXs|r z)a<=vh%T>-pwVq>F)^~v`vC{iXk)=)qWinMlo_jtM*Ho(VFwj;^EUU(z5F3z&3da} z=53bxFFRD)aTzitzHg}+4s&>#7DmkI?j2CrUw@R0A=j;i?|7S_ZlLOOi>8v0-$%Nc z|NY5sRjKsKOk|~i_?Xcee&@)Jl6|@1IEIl+5;R%jr9TX?9ky-+J7qMzfegKBYwdoT zC6IxPOTNQWl2od>woPQZON{MZF4LfycR#~hdi&uL6H>a{*R$5*dcFZ3!I@-B<$e?F zgc&aYo0_c97d=mCdEL%?LpVtL@T4at1>9lT<%A~lfO+7Zr{vfRGDdDQ_#^Mk$i&ye z!FD8kQvbplUi*6N4Yb#+a=lJoB*gARs1{mU%R4IK#qJ->C)XI(du%9yFJgX>SfgpL`rHmagCpqHNq7!Qk7*F8 zzPKB)c2{$H!I?)0pvoA z0{!dX?@ol7CXw^3jPlKf1gqqp6cIs$U>b%9pWrywN6kvUD&uoi}N`UOaRQ z;nxA1S;X(wTgv{1>Y!d!dUS$RkwE*)zuYc%s~fNp)G*=Fl33v1Do*R!RRBB9d3yr@ zR%z0Lg!gJMEt0doSASTKF?Ke~8RqbNGJblAX{Hr9q&Hxr636zhPbEKXBfEHXvUf_c z9#71>v5Q0%3*w>=e{myBHmkdrNexoPO&6mWN|>s%-Y5kz&H{}I(#a0*%mcjZrh}DM z89!LK5eWr3I|qk9#;{OGc$(!^Ug@>y78eDKUZ=0yND;N`&Di-r{Fo>uf$4?-gjJ+} z3`JOwgmq!tv#UvnC3Dbrmp1ivUuQep)n&bF1qd68;VYJg5$WJ+%u5rSb4yuta(zz; ziW(cR<8Nlo0K#&z)!o^WTNFfUu2_SI6Jm_*9o$flUskhm5+3Dkmbu+b4<7L8+{kQq zkt2;+zRk`o5_rokc`Xao!(XZopdX(LV|x||dKaKlu z@)xQ7=v92AD&nraD~^4PW3Ff3&zZl~V=Az#25O~?IM<28$sD2pC)tzVIagYW@xW!V zsJs{9s_GPHMgM~=rsj;73Qk#`>_p-rsMv?9q*?OuUxWsWfDo!kCRkV!lM|{-~1yI zicZ}xVUk-FbH#U?3W1fjs+QJad8Pzhk`)JEo*bU)($8}DPiV&yNzYG#)HH1D_Y_jcz@i%3`~NRLN+;x16%mFo?L_dY2r#IDLU zNH^J%xRnQq*e%!{F*ZNm=HJ$EjCQL`Ky4bimR&^Cv<{p-ommi6_`@r;ImlMU$Cn!2 z6fNPG3>In9eFn^EL74<6nLjVb>LrqP*x1U07{{*K;oj;>1_xDc-q;_uvz-=XrTnOgD8TCt? z05_q#Q;_6p5i5ZjOa8Z1^%smuE6V^6Z&tYyv{yLh&kL5ZimTyKmYgL!WG zeo9Jt01?=5`};0_DRbf7=C>+C%QeKw}e;%xw7{3 z2oV*33mJ!PbYiwWFwA{4)xpwsuKhYi2?(!X^*MIh1cABNd5R?P1F30w63>QN04&>K zbM^J3qq4^UkbIV|^BtrZ^Nv=#LGsEVkOfN!SJ+iFmhkD>Vtb;|?^DV2irZP-ZA%_3 z22fUu`hyL5TYCTOVHtJtYyCa4_^dYyEd)s3GvEqQA03^O*lCYx%kkD*n(^PxRGRHs zLKx~~AQtYBtV&$~429a$US9~hoMZvgsqpa-E%}=!hh4kRUUfV$&;zIm<0fSv{tbLk4B%vGcXTUNe56}*&6*;nCR(e zstp&ZAKJZ%2k2Nd1Ey#)Me*&D2S>FrZ(MW?49m)EngJ2F=@RjS)|RQ-RKPD8kcR6o z$MBdv{HT4rG3?dww!jG5H`~!)co_5ZKRR2d`2;B`plz=D1X240v4!Y5(GPM9YyGj* zqkTt(#eUH|0pF2lnH^))LQ)J@fxWtJDJ>=Cybf=&7)j~#l>$G-Yv;&Q)LntnMoJ=BPJO-J#S%E7%q{dmP z0$z-=U(`EeO59T|H=Zai?6PD(d*QfsGQS31oa)<;=cuF}`bQ#tx{h_>)A`HVPhXtX zZ_U0~5_}#+d7AQjgXe~&Hv`<|p?V?OAm-f2-cI0>JiRqHdxR<#1PndZ0ofFftbl8@ z89ll%mIh?jCfuX;9IzL>dpNP-xg`Vkg#6(w203z70q=wQ{Z3}ddGOv)2`dIS5t5`x z3(idJ+nr>-h0g){pV~8r`^JmZ2mP3#sj1Icq_gjAf!E*%yqiCt<+bG^-k1Py)bW)( zDXdQ)EN3f(IV~2+$yT1kmcxo^mf}fGx6(5);cf=w^~{M ze2wp4t4votogOh+`?N!2qw4<;l*f#VG^Z(+I*7Z%Vh4Vdz~*RJ~3S)jpc>7<8 z5vi#vH|8AVHgNzZw1+8TF%w8DKdfT<_QP}Tn(o4}{1BP_=zgAz`1r%^qmJ=rtyTVJ zmUmhW=p@C~1?<=xPZwh;0!&SEM=WQZ z?KwpZ9bTC%7&MN?VX!>G22R{Lbe zABDO$4;Rl%K6M69dWzfLFcHfZ@a?b1VOKtnI2TQ)c_)Cey653Ot;?sAAr>a+kS3fxE zviG;WK{vcsP>>PY|Fp0a4{3fgar89%VQbEtNeU^QR)3%qsP)NB zN7E)4szF6SzX&WsQ}x5HFtcF8*O%IXJf5aWf9@UvJgPp7Bh|1GZO7X<#=XT}%KJt` z1uY3$0_8m1l>bsH*u5!I3Lzb=<2j?C`Ql$sOqfZ|<`gJhKrCktVw(IyaUtEp(yjyV z0=abHZ7C29IKo3AX}}RC0fMy{VnY_BvUZx@P=3h!BgQuAf+7Kmo9S zWGA`0OoA333KK!nPgZKM0RY3t}UGdG^2l?AM&?MsWzfmehwmGB0Yx}l0LsPY&~BKp4^nsbzQx-pJyNE z{L|GlfiLrrf9YIc^gCGc_GG%MsjS`gBiA{`S7dg9`t!&F4qKZZT)`{QL@*~hk6!tq zGO6>KO9t#Zo3%4KQ?FErN6YnJq1K0i0L>72juZdNB&-N3J?3p(yr2pLZOai@n z)$Zy(DV}Xs&Zb%3W%zsX<1-yjilG>ZZ0P+O=w(Yt_*!RpwWjfUE#8g zeIKvQ$Q3V|8wrYubB*=|HP$OSLqE@|LDfrpD3aBieXqYv`p2JU$f{4py;fLD)2yya zX4s?&GxtfZukK?NyCP7mjb?`@bk5oc705y#tU<}wyX#-Nr&Dg5_pZRUM!Z1~)tKU%Q)lh%Do01vnEc4qoO{%zR?9*k)z-dPuYH9z$zbyXa zCu!ExvNNR-w#~e#x8y`ol0pftxwd{HyR+MmLjz5U0<3vogNHi*6Nh^RR9PIDM%tP? z!9QQ=H5%^^TAgJA-P)s&@em;US*tysIJ5p`RyKg7D!?{yVqS@+e{s3&vV(S*4Aj+3_tj3X zm=UBjV(xtvBpp{igD4YvT2Qm1BwpKJE8W~*?oT%eL^L~&VR)7K4v56g&6)xWBK92u zpMhE0IU{JZ#n}=uCUJK$Dmd8dFFi*VuzcAVtGfzMuYO;0WwoHyb!1_-7|O!aYaJgkjo ztVtOlDujwsEy)}Hxy1cp+NWhh_!76Uzmmpb1HA-?+LZis;}L3NhGs#$H%!ppRz|ER zX#XdnG(Wkg!0@KR&BWcjxZv8=}Kg)TVGaZCzF&kbXnWwp@%W*om&(FUb`;Fp+Nw4WA# z>(5-`9Bxl*JQ^AMJ$k~EL5^;P=Pdp680oJu;>yzQFHb}Sc3P{jbMEmWIo?+j8#dp5 zbf3$A@kqdgNRVPW4z+h7#6FujNvit?(nZ@!L5mM-L{Bajktsy;6PM>+n?2o)L1m90 z@ZXlZ51LS12WZ1Zy!buz{RCdy`O2(BsmduXl5c96t~=1nr5PuD<=(z`-&8>h+8a{d z(K`sNOwd&m39POB5jki@xgUm>qp zO;e;h`o&HDG=2ie8#u1sO*8=zsVjF!;;QQE zYPRas5q{7ql5pQiR;mH$*vWwbSFerCjJoxH%B7-kj6 z(fbm1O{Fk!Y8>VhR3b!DjNgyhHy#u{I> zqMWX>(zn;K3(yA+m-;ltBNfvGmKx;Rn(fwmrs3!^7gSYJbWa*o_RHO^C5y@<260N5 zc8!=>XwrDTwbEB-z|(y3r`rcbQT-wk1zt zYE>h%h*15B~2dQ?_j-`?yitZd@8nl1$dDqc$g?7I{-3nwJq)mviXTL0u%M*1o zTJM|U*caq;r?saCN0PEURof-M(OA|^z_Pjw@ScxJ{u=1JoE)C$+{|Q|Zl8|BvYSHL zDB1i(gFSq;W&c7c*^z zTeX66L6{jX$O)II6IGQPIhfXMe9|F2*ptI9?^%spRSr)xxqL7B`$A zQs;ykb;@KEtMxTj(;Qm!i6%SVAet=D5P!M%S!kIyRZc+1NjM~en|{TrwHU_D0o~qI zZj&Z-WtgEorM|jzP08{fi|b**XS|^HN5mLJOO%{JU-QBvA zQVRiBYlPXP5c=`^h@k;`>r{z03q7m#6NVygPD%HD{joW88f&kjNG*5ultfuN^A9&N z<)*AVmk+rzJO4=GveyE20@3r$8}>Tn8SMHa%Qxagl9g;^|5NItjBAOcnu|S_o+ZwW zcB4F)sUET}n65b=*VgCwI}w@e>wXn*F2n;(a1u4x5vS!YZ>ybkP5JLT%)Y1i<^8F~ zlLIMNPxFld8=?*ePRqBeHoFE#k%^50lw=QOuBe2VgHA+^$k6K&cEy&y->&bHt!TX1 z&Q%r3ewL#)Zj{Wq8y>>%)PFHeA0^G1q~L38;RBe~)FC*S`@ zei}r5!cpT#(qZ%D|Av{|9~H+DIVw|Hw|)DC(dvPx)PJ$XvvFB4x%Wux`gw0-9Q*vH zch)@8Y5AWgS6*+P;iT;oUb=#tYJJOOk%8N3=-Mj>E>1f%fYYWP`6}C)v zX1G&<(6L=dEmgwCqC~wgDYr~_7+&cP8`tC{y`So`1pXy(t7ttxonbdpDd!w}{~Kxx z5&YT`JK(cD?4%Rv@gWYYTad-beyLKkGKGJ6Y%l3F+?eFP5}pZ8vrBfrqUaj(I__m^o67;t6d}#HK-~t#L5G z@PpJvOG2YVAq^uO;gkXlsWZU)P)H*6Ae+c$``#X?+7AY<*KbV4<81cSDx}|Xybb>M z-0;>;6;-Q+Ec6PD77Q^-Uz@V_S8=-5%#-{KHiR}fslBq&RmtsNwH8l>soM2diE?e0 z)FwJG77p23Y-_iAs+PZHb{}(W9lmh?%Q{HBb;UE9NzFfC2r|wLMe)U@F zDl#^d@ZMGBk0ofvEIw>G-Dld5&o)3#v@Wx(J5L}$N|=$(k8hv9m5DTEmF$g68w>8o z17@exBno{vw;5Kh`C5#`yR|zl%J+9kI`Z&rKFAFDEpo-<9d7d6y&?{!~;^ zpJ0sSQzePlNeG0lFXmg6=d{aja<@Yk)k`ggk|Wj;10`%nBXFB)Xg)(oZPyE~FA4DT zr2NY9O{exoi(Nn42~g$Wf@)(hYTK;sZsKq2tr$G8h4rr2=l^RUNv_>b5oo)&2ts&T zpVm#t_`%ZJU2AEw?`{ z+kF)9;LI)E$0cFNl*TEcgG0vvOB%FR@%n!?+y-VCbpEN+JhnhA1zUSEh)%@r_pjI87``-YpNj~7K zHK9!i=d51rPN6-x1$Tn)P-gb&Wb_rYcDt9h*UcK@Kss-|(P-M7#+@F(_c=669eSF; z`uwv14jhxfN9R!qN`NHbcLS_u4GI7$jDE|Y(bI%U0{p+BaPY6=S-!R8PpimoKpWbW z3EYnxj`!eAXZrw0I0(4H*7npweFF^w@Fc;#kPZXRt_u*&p$n>7*W z8=yi=4lh}DakQkl&^iiiMQ8wsDXP-2ua_q3_k9>AdtGeQA$Xmxj+W?v01Q)JUfz7S z9cqXUx?3?Lsa%>ePsmc~;0HrM9C7&+NAo$)?Q-v~QC^zJ6&8XgYBUq2nB9X+al`L^ z^=J7B_}s|=DCF<%ZqaHh&w&Zp$i2T?7cwohoJa(aN5d(6`C}3=HrAu;sI72J}`i_jfw|M^o>SR zzAOk(mlLrV1TYe_8U@u^k8_If_E-K2^s$|<`HBHUHSZH)$-!p|P-pX_BD{ORltz@_p4)aR!Ah`7@BfsmxBRNRsN zwaR^80z)v-JQUZF>%UI@oR0B+KNWgb1iXZHa5&p6mR+|AwO0bO?)=dN#>Y_F(oToW zOlMBMYXBqZ-RWPcP{B^hU$Nd%jJnXn_Pf23JL7O&7gHB)^7jhaK7v~1EoUJSukBE_ zDxbT5pv?^W0ELO}Gj2dYfSC!tx9qt8bNln7{54z@IWCV~o)z5w8h13Im;vYrj$*}vgE8eA7Ad?pAAN^ zK#NbE6>!^|u>DRBAp*?J5-1@hah*q!6+%lWaDTw&$!L%SBpcr(rq;TD)M_`GjuG)w z@&z7df$_i2kCBMWh$u4R*mji$zf1F@q1q(7t>Gfe$E++8^RGrbX+5SdMTxQiI%)oA z-!=(Na6LQ(HXmyJ5BdW?H>aV#JfO#?(oRCa<|oB-z9Dy#@h@~{Wo1PJQ$2&v^#Z4N zG|PA0op@;*!vA!CbvPwU;Wnu#7n$K8akKf6XA1cBkUep8cPE08ND@K?w?I}(CqOsl~$%fm=_9HLUeZ|$^xlt81z>Df*pKgUz``usc=?6O}Gl?=WcA^7R16@YVPmnZyFX`m6B z^brQ~s=ZH-r0kf4^@sTx7Y2v4IYK*52c#T3_+zwXUW;R(@~fODCbx=$7y4nSY-xqE zzq8m_ts+GdVdDgZX6fB1_F5#0kRW69*ja2+&I7CuXo|jmp5lJ}r_L~fhR-Z{9T;`~ z_M6|jq)U&}k~*A#CL?bfWz3!<4lmQW1xHeHt;Jv|Dez~H3@n5S2Ih@d@~KQ<77|z7 zT`u|JXpiEgeq^`^`r)fKc5nhQEH5ul$INyo3cwzD+@9@vwy6A+O};P{LI<|V?vE6` zT5yVwIqNbA?bQA7{}TDFms^?`t0sMzjtVlpG-AIbEu!i2wY9Z1tswn7&5vO6d^l_T zfJ!eKgB%M>x*xRS-$1|wPB=vozdD>=Mc%7DUXk%1S1~1fK1n3~;3P|QO3Bg=tiz(T ztX{B3GJ(3d5VBBjM--?3i18q&8P^fxEw@?gddD{(j{vBNGd{%Fuqz(t;ZD+P4dc_@ zYTn8ehPZUFeP9dUvnR+VL+m7>MUE=%@XC{n?s8*471bpCg3B#V&cQqbH~(7~KnA@1 z>`l3?3#Xy5`#kaRcXus77rfgJyrm-E)EH`-$s68Zy*@Wut0koCinegwD=KiHhO5&C zEczuA2PsN?>3bFeyoCrk@LEs+(%y%I9-c~{2qE|#Nzz$ts-2)7f%g@4?{|H1aVkSR z`M9lm$elVOAq0_zz>k51yYFf|c(;MTS1=)0bRuwtU$!aOa-rP+`sMw`jn;6v@4#$y zUe`9^_G=bdhku~EgyoAu4 zKt_4P+8_1a-|@ITD!!WuZm>3ou3X|)5EF7^AcBCu$=5HC(}Ea7C11Agp)mRVR2z!b zB7ggYu3!2lkUHyKHV{&2ux_FBMRpKpx+-Jn-S@*oi(3>XNJkT+!pujn=6ThtjDkN4 zg$WT<`j%9A2|2>R;>9hKO`v0gH_;~h@w*ez2jg-3Fvy#zG$`e_b_(ew1YX=MGsiL{ zyI`kAtQqYTnHD`Q`&XzQG9iBw8jKX&MK7f?x9Zf-Pg5WZuvXhbfgukR%bI%K$>)~I z!b3FrKCsQ8(8>Y*KD&>=auqace&tkbUy0a+>e%8Z+(%p*gitUqzCE<{Fk$BU=zyLpaN2{FLT-1E-gn#K9^Qw6HfzIo&I=N`oZ4P`MT|iiM$+yZkXVVsK)NxJ_OI*k({DY@B1z6lGV;L^oq^)1S z9uxKm?+Ml(L2)7Sl0Oyr#}j0Eq8^^$+JQFA#}n8nDh@!&uh~|s5}HghlylW84SGRH z`r4lAH8C-9_X8&Lu-*{!ijX-&H#1rp{vs}`l3 zPgop4Ls8BXSD061bCrvf0`X??05~JLHc&sQy;K}vLteAl{5jMU9N`*dZYMA0KdLNx!ecf-K%%!S;GEd z;IiEm^R)f+!Qzl*2!3hNbtJVY|9 zEu5N5BoV!&2+&>vIsk=c2*Ue2?)f=0!-YeM(srjq4a>1)-yFqyEA920)Aji>k%i$e zyvHE#5(g@uFwl7v|F+Gb+qQUee$M7}wD|RxE1Cgz4PGjTxd}rf;vruT$;Xg46Ze4D zKBESE_*tUi`1sg543|aZcr2A`jM@KVHwx+H(|Vv&&13TE$w`nyb>d99uI?CI5==WI zo4+SNB4>}d8P!aw`jm!&St{Z7Jc{@)ioglzCX6DR!cH@JzCE0ryYPEmE#ey27Uv&( zi(rI~`ymJa52u5m2DJOou@HL;3_`Y>nOSQPmQTm*=x0_&2EDKhg2QNDJ>P1`G&%XT zf3(y*qhWvx!gG#S*tB`4p=1Qr0Dz^BuMAFpW{-r3YR62wzZ({6GuS8qcKuvMj$X2qDJm?lpH~eFEb_bH!)=vfWrzRG5p%* zijj|j8|zDt#7Z|Sz^dUyiAF(m<#vOEhZh$>vJkLMl8d`!+rS$Zi8y@kL*x)v(8(GW zD)JUJUrq0cRR)R-rRVD%Ff3JeVEbu+`to8imz{WyQTC4?{V%e(koRn18MgqS_ejP2 zV>{ac8Ov++{Od}E{EJs_#%14E*(E^`y1y`+(^FQ6@w^+fIZ5uWi^dagM6LQhs?Zg< z2V*3A+9GX71mRe0-sn zkRz<#^Z0p~w4ys~XW#4AnL>pQFP>$sFAS@mumo7eIxKJAauFcUSGYtNqSew-=S!gY zIJLc2MeIIjaauvit9?UMiCb*WqM!Ttp+Wx!ffC!4vVJoD= z6!AEnaC_}M#0B%v+an^!j|UZ9P_G|}7MCCru`kr6r!1m(6Ham0V2sOWjL@o(x%YIg z8=ZL!Vt^iZvmp8n{TR0Qnzt>GzvV@yltf{KxCg%Z7IGi5{WgcW9|{SpgbBnfsXgs^ zm*(RO2&;I1Aqf_2|3i{*tUiJT1|FA@?l2ZE4crgoop6p7-1XT?!zL8OY;~0cu%HTYbO5mqLY3=62>wEh3QnvMKi`y{8NN2051zaUUJ&P$ zzUd^&LpYS-mGJJK9m*2-Hrhi#BeKwHb^DSDO$hewPaC^Ui55hD;?4;f-JNK4Jgu=9 z@!QIsG)2Ax2v89ACI%?O_|zfK>zWZ~^9R&@pe3b}&nUGdzWBqa)u7k%Nvz8$mbID?R)sT>>=e~5H@Ue2z7Bn%JAiK}~tjyJ^T`Z!Uz8BU0c zS#uM0pJU9d@;GVvue*V%pc?H^r``3ySCE?4!*!d0We1N00y@aJ_-|HaiFJOPwzbyE znebxR4wQ><~Jb1M<&j zkGDB~>)+<8@~>`km2fg&_K@GuXL%m?H^M?PKVR&TnK(M~6@~#lLTXv)7_kA0a>Y8^ zk3BtQs`XPaPKp0J6lZ3p_ZVFV?h8d7z;*Aks+RlW3nX&(s21i`80OCgf#hd3{0ZEO za2y>MVdr<7NI(u2LA{BPh6HcnBxKx;6Y?m|-JR--6$#uP>nt4?oLs-BLxgy~8%hb1 zBy|V(CSnNqxU_kSHuBW@Grg_Ag52agqrTgH%4SE_#l0~O`KpG*Pw-#ii-Peb4GelZ zC}ZIP($ROtGOfnG4~x-9!9crYt0{X#1>-X#(V^MwWa-Jk3)1CTmKQs=QV@^Z&BUfh zzynp6F))34xV_Vm$3kpm{wgt?Llo$=dU~%Xhnw(gxEU_*O>5n${Mq{+cNY(B+ zX#~cYvnmrgA00{IRZl#&Et9B}WO$kRAQX$>GR>EoYRmj5aU_yX{D}yp%@zLnu_o_O zUO+d-oSql?Bh=-6=+e#f8JK8s1#p3SNy6n%9_`Fp_}xZ?`rI!93H5@Iq<1mkR?mIk z;|2}X?wAD*u9DG&`v_|;%94w!{w&#?ziWYmKe7W7JD2(E~{?+r&D(y=!Y&f+p+y&R?e|`;$ z2s<8cBckX#w49MHFcu7mc&XJYvM3pBuvxUShk1xB{}#uO?)tb+F*CtkVU<_AU4Bc) zd3{YR)@s5DW%OJp z{F~AG9ZEN7Qwkhn{pe)xf7<@_4>v}NB4jG~kvY*Bg1P{TrPTjEJb{pHDtNA3r}f(} zS8HvHZr6pKrM{kBkn?%SB1H}m+TwkHZ}9Q#GFswyyBL>w@o#d`g;2I`xzXPA6a4JK zW2mJ?V8m8bRFvA~Vzb`>WTH7jss&@Xc|OqdAY$2N{dKx5kyJR?$ahZl{<+A03x4Gy zvGcd@1JV~RXXWSt!kXJ6XG?wA za^{YU9)ZuLeVRV_#RMiNJ+hBC=%lF=MW3nCZ_)9H;y58yBs;EsQr+~2oWoi{`%I+G zzDgLwi@|7{n%1rP$utCS%6x;2AZ4UJnTmsvc9<=ctW4l8{NWWzfR}geKeUARp8x+#~f{8s;j|%M2ss)GhE~1W5FHx8JCG zi5`5XGt>7R?v333&|O#g8oq0m7^SiIX_Xc$Xapi!&(h2v=$UIr@?loD#=MfKY;ZGa zF^Hij%7ySC^mjgI+^r!s&p*}sS(vfT%GJeH0@9$qs7p}!l%U;2B>x<>BeW|x zn(e8>q}xUhMWoxWH7sIa!WTMpaH6;WUdD|4|Hn)C))J z00kWfJN`JwRgJ8q9yDVLrxP^lDWO|G`>cooROr~eR3c;gvIHs2g6Jv{I(il{qgFNM zCT-y>p)I(mQ(;G#-mHefCz4nWpz|C-U2{bWVm>n7=#Nfutc3GyA<`kf_Y$Od1MN_V ziCvgwP2sYTQDzq0Q5Tm6r`4+U ztEbA*bZ{l$%ix75gt>3w|GN9~Xe$4=-Mu$LnKhW_q{$pI3mH;|uQIcR%8;4Z$W*9A zrl@30NW4H7TY>VpUW5A=_}zZ*4(VnzM^82@i%mH+?W){jk?cwIpE+$w2U?Cyah zALs5-?%US_2<2^nMk3qu8XjTJ*x`?JpVLE@t&JorOUYHE-celDTzM)@xza<;FLbSK zbkf=y%+G0bAVtbReZQN#hje2&VN&4oOHcp@%aZA+A@YaP(yC?hmv8#!Ya{xRsw(VT z=VW%ucdDc$ZATBmQKJOz8yWBAWaHzef!YTT!OEVr9ksFDi?IJGjTs8uNn37vtvDKZ zfkbq?dECi5jYl+{bAU5o3#eq4!whIX-7GoE5RoYlE=d!4rHcCErVuuFdZb$~M`5ia6O9e}|rQ&$h@3bbUmfhYK@e+n=5>$~Tpm z>Mu-p8TfcHyz|bSZwh~5yW-I|bJ->;je(aC0Up1S+)nsuo}$W!SMeCRbIRhQ9&`d0 z@tOV}H&E(k5eo!d94PR}r(xpZ5ruiX72Iyr1kU1tnn(`HZ`WUQq+Ja*ol~PW# z4jZGYMI}P3pXN9gYlp?YmJ`ICn@7DsMJHZtUJP#NKgG| zvTiZSsw?YB20z@lue=y2km8TSYzZcxa~O;`xwx7Ct;cUu2fPib(dM_z7_6%7-ZIP9 z&erl@cN;FO9AJ|Bl;VIzG^@Q`?Gqa{asZdkDSZR`>p@y%WF*Xm*9AB|4ucEgA!nM} zMj!v@<%hngp(>^RGmoe(vs9jxD_O{=+e^MRV|Z;Lmn4jS=~8~;*O9bd)UO3brL@J2 z;Ejd6lS8Y?*D-*EjfSD+5RpTDRJd6tlAE+pj#P=iWJb`96L{2`hRR23WTM zeQQ7c{k11t+4R_@NAC4&&kG9+OYVqx-1wiB|JbO>`n}#>lgw%z+-fs5L0carGeF-p zDz?{|`c+wqR74e6-rG5~MUyWfJX}+9dg55gft;QugOS~iZ7I+81SW|@v+7#Ls zS6>JjTUhE@Bp2Jov?N)GR*a2yQ+HmAk9E4%lU_UIr};50`gY&WjAO!u;XL-w3LCXe z;lebcnNg&Z%QzVHZ4$$ER-nFqO+_s;`}^yEh-+5G_A?V1jSc{&&1bLLQK6VW%R*?0 z7ny*Ce3S=NIP)*oh1Ntf>O zV&%s0{_2w@FH;{~)|yM2P|=&E*s-tkdLraJJqEgp+Iu@7<0Sp&vCo+n)F8me=Z!Td zv;t-7!@w($wf>0`ZtC6hD~K3gyS;cI0i|(I8z{{ZT&_-na8JIORP*E0&p^vK=Nic_ z8909QtjFo^=1VrSEnCh1oDKB;R67k}?J*m)nO9%5=NTc6^V8pd`Ph)YSQnyy@$M(? zjjJWZ>2NN`_zP~4{HS&7bFY`6=7bM~uSo%>GhT;dbBFNU0R zw%QmjmD{Na*TI!lCL9FiGx-5)j5#|g+1aY082Qy&=vxE+h}GRTY%J|go*qp+cdmN= z(cPyzPL~{w6dw-mKl7p^akO}Z*%&34XCYV8=6^bOkXH7^;yPb7SLXZ40*w38pNojK zLl`4`DOF^m<9Py+t8za@6lG%PRzL`Cs=os?nlN7TVtW6=)>qwSTI7 zGL`O@1htxr7)4YIN-wX><%i@GMgQWC>z=iK?5Yq5`{k5G!O|-jhN`{#`95NI_)+2W z=F)9w9wJL`ntgz5RUf^3XmNddHV|xSLyVtS+#c)Pa=WWVle}etn;$YIZ)zG{&~&c# z%&Dy1K%*uyU49hHlhC5cWv;*E{Xq{$qEsIToDv63_E-QV4UykSub@k~$RU@uX(enO z>iHl^t;%Xh|4Qw1Ew|kOnFPGa0S&^#vuJWPeyAaGf5_l%>rJoTs^bnxB{pwc*Qbi9 zL%n3LHq!h6;^WFbY#EiX+-EjN_&OCTd)N3ZrT6o4O`!kA^qWF^Pz)A9-fe;TqGC{8 zGcq;h_;v-$G#~IZPS%yCj+_3?GtIR2^hK3c-pBDjf~4oEn|6v5SQgOeT_~YCo_+oy z>|?OqXd|L(RW0oIlEaYiXh!}$sqWBLx;NK=sMZYPg999d@@KK|bdTz%DaHn#!kLro z7rowCN>&(NSy)?&Pqc3K{z6`_$&q%W+0K>in#P zSTVDS9^c*rqUD1JM4{@q3BC(aXam*fF}={+Kx*@6snd6Ic)XV9@I5^{d|{)q^Ul|| zU6p!agSnF(7zl2^TC+^4A6i)O;eTmw2NUP@8HGT{C%?uT|;$w_E0Q;LI1$-Tq%WrQjWq*MBQh_zRNZT{8;q4kn#o4YO~WVyfP?3^g`7 zT4w_Ia@3?@>{+|XSiz6|lT4Gx>}#?J41Ofi$Q?tC{9{ZT@~^!*`uFC+{ef%-QYipubq^J8<@C0FLtvP* z&bEKK2FFImdEp&@LeBw7uYQEGIrMe%s7g(|x)JUj31HQv$KLG{VXosPT4dhxX}cY` zr2B_|sF_5+%t$LGw9H>c^M`rSJ)yAtA?^7NHLs_QNXBU4{-^Lg3m-fH*SM zK0IvW)R&J;oGjagd_zEp}XySV~?H*6q@2)O`4G_jZlyZgQp;mId zU3NH;K)^b`)gnRjp~nK6_f6O4hCyXpDZ5f&`MSwxb;b-%xCem?pO5r_t1T*RDUx4A zL_6R&Be%T$>3hL)GF7)4BIqCZ4Hw%t3qUkTIB-PN)cG?#%Q=Jt0~8SzwfC@eJ&Uh* ziryUfm;`&h89rrxj(|y_brN8T=J=x*>>=2&@bDD0#+|}LNZ>l_se$yOtKB76!i~`k z|7Q@)Wqe5KH5_e|n=*=|^k8y#V*~to96-!R9%iJ(Z>Z}*Y?G|(Ae&)J@OaB1vua#P zO$YQ99Zj{q`g3K`8?=0}dp9g~A9r-)IF`P(yii6Es^5?(TjEl~;JR z3TsBoKW)_pZg?t*8edXuqojlQr*12A9&Q~=2^beR;P?}7%eY7yuJZpj2~UHWjqOHC z=sQstfb!A-)F(>AhEr(;}hf}#>ZEeq7q!Atn4wO5tIg&KVXLs zG|;)wOJSuMcoc6Wp0?P;a_7}9?(UxLWgO0|CN;6h{r z$B{Gu?wkqE!Z=ws>uivIzCiio@>y82GF8>p4*@nzZGaOrLevJPk-Ab$P?Ok)z8$d% zlo*j>Ie5@M@ubNmn*#%%afl0!hf~=?&Q+0d0M5$Dv?Hl@elSSwA^0w*Iw6eF9zu?k z#K|Avqo|{?gn?&{g2CkNFBLvSkomJ=vz!NGsI&G2G0DO-yGCD9A-ZcOl2lSJ~s9p*tvgw&;P3n6<$@C^3MG`Sa__2HpH zm6?kxA3Y1BeKTW!`*o%%y-^vU4S{wAPDKjt1XZQONZ1iZfr9=ThGebIKJ7v#e)%Z5 za1PXw1x1>6AU9JhMpqd(tm^KQ(>dcK=66@989H?zQ~|rB4OuT z{3OWyxZU~R4Y-C)Z5r3Q2TS^cKu&ZlQCywp!GU?teH$ZtD4gEnQHZ)#XoRfV{V%%7_G&X_JN zEq$}4x>l5zvnuZONAI{<@e9S>?Il27uZbCoyrau&vje$AxrW=B2YI(70#;p4k2V=l zO5Ny<-@t!bAVi$xt^?4X!Ad#8_U>Y0?lbg>?xQ8@RY)*$1S;Z(8NTc9Zwu|05CA5B1RCbUo`zG%UjzG8CHS`gc#?@U+ef#_vrRb@BN(OMlfCB&PU@Ws zm`{8DJMgRQ^hXd_)h5BV$m6I|16}5RS-WJIqk1W5io3(mdl-t zXi#u)^==giU3jcl8rq17r3?F6-dHNbX__Gvt|js2H+#VrGQbUOnSw@ zCUq@(^>%jdk>v7c@;*+9N?#<@R#3PsI7bVme%nQC0*Te)Tv&aW`HlegeAm5`bQzI6 zv?$9FhRgdwVts&Tq?4+fSu(6YwNBIZj>H={ANsg)R5E0;dY_PjFsR?Xlz8C+`;bf& zjr+n97%WSUa2AF-z!x6xcy0mbhmgw7a>5W3YM_@Q#gG@Rh#7)#Y*^Y2O<1e#d1KHH z3nIU?975L;0A36_ZgTjEU`vMS^V+2Iw(h6uaN1QGG?veUGLOy|?C{sPE1yd^qH;DjsRQ2=RRy?~(XR@R7PFO17!k*Im?3 z3+qUo9D+qU9pa8FF0Yr~=sp*&miT@^JXRI*V{fjiYAzU?i!Ktw#{wbf{AkYU6&go0 zlnANg)VYgvo)oi+l$d90btUOn`p$mHLk)bE0V`}lFO8gVDuoNLQZJry`FnOQFP9Cg zIt4=hfM*IuIA5ANt5%FIg-Ghm6sv(|p~Oc*hCW5a2GBg^F1_m&I!$BDN7&|z^5t@} zeIKxG#a&6?M5040#B(4@$x@g-O;~U$HD{O)|_yA!iRn8;pwkR~h%(yHd#~`FT zGku^<5IgM7V`v+4^QtK|i;#91LD4qI@~S6v)MZ{eUiMQTZrGhK4MoI31d8*ZaNpvV zZ@@g!EBlbXBA-4XPu(O`h&pH0LCV;xASZ||GlCP3fTHAakn8wc6skth*|*nf9!pya>CBm8qp3+ zXhvW|e{EA+X(`)KN&I%DkuI z^`6OG{OC3;3S?H&pY~@L;siAFwMP3v{T~Of430ccMn3zpDH58-&Vd;&8rqILm39;W z0Qm^Ags*^SMFLi5x>a{pX9pI+tk?3Uu*OMA-5%)MMaT=B#P9ncup3&oK0+MlU9Qid zao{PN8q1y+I)Z>C5|HYeG>CTPxRpHRA!sv(P!0lf3JRWMQQPwkj1{qd&%tc(%(M;t z1;&tPe|T-GNZ`^5{HXdG*)U5Gv?(zhN(P+ zP-&2Pjw3^%!fPUC-wP<`NQAl>;yM|um=>`WSHQ(``X8+JdCR%ITu+I!!Ep+UX8c3Jt z^1zK^VKk~a91NP%egSo4EH~vm(1sOl5u>Lp%ZkVf{)_hXUuSokYPHYt9S`lVui?j& zpfW@`LX~?W6H?2?PY1*%-x0X5wXooG2SUIhuG#;2d;cpLIp_r>suhMg#GI0w35n>_ zG9(??hR1+YOnHD-7cH`3d)x)(Qc9xm=u5AXyN|+8>T8eO0N{7PcdUd=0&;iz6!h_| zA5j)Sn?=JqH+N=3%&GKZVq&9{-PusmV!H!8mUVD}MQH&u6B8Dyng+zfJq4k~?Vj;h zDx<&27AWD07^I|p&Ng!O*O7p8XlXUhi>oHub=}Tkw0b*Ukw#p zt&k*)e?DUKofg$S${;e_M9xm;R9Y{~yw07x<8^Ah)RuRC8)PP@jX>ZY-)d<{UTYH( ztKBY!Ecbl+7SNx%p%|(ckel{##63|f>v%X1%S{_fWV{*fp0@aS<1R%6HNlB$RT;qZ zrOxotE-K3;lsdHw@Sfj2gO*3KjnGXG_M@+}=|cWYg*4VJ8MBeoFT+s?>wd5afD|$= z;xK&Aatb7oh)N~&1jZ!Kdfg#NLqQ#fkl-VY*Fk#X%+M2d%6q$<-tN0Z907{T&V<}L z6UQCqIKfX7QzVumh8kZM>9zq)O|+?I)E}`Ihj7a#_6XAWp0Px;u4XFo*2@UOe;NE$;hY2Lq1jq#C`MA1B!z&e*jkw`7t+G?Jbu{gH6whfWjP2(E|`(v$F zCNWmm;low;6<~Z#nAil%hJb8Z{QzW^F>Y<{t<*4Lnv|y`K#F+lhdQWUUT=B)fYkR1 z(&LJvjHIt$gxLgH3A?sYs>b(d^TTzRCG1hOjEPHjhl5ioEOSs3RI+;WkwL}%4;VVw zBP97!nvyV1-(T4(v9PnqSXFp;FGbr@BSoO2T30im&S-N}JD$)&fneV6g*NF3gF5D` z*sgMiB0n7f$k%v~e11gnrqx% by using the Remote Desktop Protocol. The traffic is encrypted with TLS 1.2. Older TLS versions are blocked. + +Both parties must be able to reach these endpoints over port 443: + +| Domain/Name | Description | +|-----------------------------------|-------------------------------------------------------| +| \*.support.services.microsoft.com | Primary endpoint used for Quick Assist application | +| \*.resources.lync.com | Required for the skype framework used by Quick Assist | +| \*.infra.lync.com | Required for the skype framework used by Quick Assist | +| \*latest-swx.cdn.skype.com | Required for the skype framework used by Quick Assist | +| \*login.microsoftonline.com | Required for logging in to the application (MSA) | +| \*channelwebsdks.azureedge.net | Utilized for chat services within Quick Assist | +| \*.aria.microsoft.com | Utilized for accessibility features within the app | +| \*api.support.microsoft.com | API access for Quick Assist | +| \*.vortex.data.microsoft.com | Utilized for telemetry | +| \*.channelservices.microsoft.com | Required for chat services within Quick Assist | + +How it works +------------ + +1. Both the Helper and the Sharer start Quick Assist. + +2. The Helper clicks on “Assist another person”. The Quick Assist on the Helper side contacts the Remote Assistance Service to obtain a session code. The Helper then provides the code to the Sharer. + +3. After the Sharer enters the code in their Quick Assist app, Quick Assist uses that code to contact the Remote Assistance Service and join that specific session. + +4. The Helper is then prompted to decide View Only Mode or Full Control. + +5. Then the Sharer is prompted to confirm allowing the Helper to share their desktop with the helper. + +6. Then Both Quick Assist initiates the RDP control and connects to the RDP Relay services. + +7. Then RDP shares the video to the Helper over https (port 443) thru Relay services to the Helpers RDP control. Input is shared from the Helper to the Sharer thru Relay service. + +Diagram Description automatically generated + +### Data and privacy + +Microsoft logs a small amount of session data to monitor the health of the Quick Assist system. This includes the following data: + +- Start and end time of the session + +- Errors arising from Quick Assist itself, such as unexpected disconnections + +- Features utilized within the app such as view only, annotation, and session pause + +No logs are created on either the helper’s or sharer’s device. Microsoft cannot access a session or view any actions or keystrokes that occur in the session. + +The sharer sees only an abbreviated version of the helper’s name (first name, last initial) and no other information about them. Microsoft does not capture or store any personally identifiable information about either the Sharer or the Helper for longer than 3 days. + +In some scenarios the helper does require the Sharer to respond to application permission prompts (User Account Control), but otherwise the Helper has the same permissions as the Sharer on the device. + +Working with Quick Assist +------------------------- + +Either the support staff or a user can start the Quick Assist session. + +### Support staff starts session + +1. Support staff (“helper”) starts Quick Assist in any of a few ways: + + - Type *Quick Assist* in the search box and press ENTER. + + - From the Start menu, select **Windows Accessories**, and then select **Quick Assist** + + - Type CTRL+Windows+Q + +2. In the **Give assistance** section, helper selects **Assist another person**. The helper might be asked to choose their account or sign in. Quick Assist generates a time-limited security code. + +3. Helper shares the security code with the user over the phone or with a messaging system. + +4. Quick Assist opens on the sharer’s device. The user enters the provided code in the **Code from assistant** box, and then selects **Share screen**. + +5. The helper receives a dialog offering the opportunity to take full control of the device or just view its screen. After choosing, the helper selects **Continue**. + +6. The sharer receives a dialog asking for permission to show their screen or allow access. The sharer gives permission by selecting the **Allow** button. + +### User starts session + +(I don’t think we need this since the steps are included above) + +Next steps +---------- + +If you have any problems, questions, or suggestions for Quick Assist, contact us by using \[Feedback Hub\]. diff --git a/windows/client-management/quick-assist.md b/windows/client-management/quick-assist.md index a40a1bbf2f..aa7c26cb84 100644 --- a/windows/client-management/quick-assist.md +++ b/windows/client-management/quick-assist.md @@ -1,5 +1,5 @@ --- -title: Use Quick Assist +title: Use Quick Assist to help users description: How IT Pros can use Quick Assist to help users ms.prod: w10 ms.sitesec: library @@ -10,5 +10,112 @@ ms.author: jaimeo manager: laurawi --- -# Use Quick Assist +# Use Quick Assist to help users +Quick Assist is a Windows 10 application that enables a person to share their device with another person over a remote connection. Your support staff can use it to remotely connect to a user’s device and then view its display, make annotations, or take full control. In this way, they can troubleshoot, diagnose technological issues, and provide instructions to users directly on their devices. + +## Before you begin + +All that's required to use Quick Assist is suitable network and internet connectivity. No particular roles, permissions, or policies are involved. Neither party needs to be in a domain. The helper must have a Microsoft account. The sharer doesn’t have to authenticate. + +### Authentication + +The helper can authenticate when they sign in by using a Microsoft Account (MSA) or Azure Active Directory. Local Active Directory authentication is not supported at this time. + +### Network considerations + +Quick Assist communicates over port 443 (https) and connects to the Remote Assistance Service at `https://remoteassistance.support.services.microsoft.com` by using the Remote Desktop Protocol (RDP). The traffic is encrypted with TLS 1.2. + +Both the helper and sharer must be able to reach these endpoints over port 443: + +| Domain/Name | Description | +|-----------------------------------|-------------------------------------------------------| +| \*.support.services.microsoft.com | Primary endpoint used for Quick Assist application | +| \*.resources.lync.com | Required for the Skype framework used by Quick Assist | +| \*.infra.lync.com | Required for the Skype framework used by Quick Assist | +| \*.latest-swx.cdn.skype.com | Required for the Skype framework used by Quick Assist | +| \*.login.microsoftonline.com | Required for logging in to the application (MSA) | +| \*.channelwebsdks.azureedge.net | Used for chat services within Quick Assist | +| \*.aria.microsoft.com | Used for accessibility features within the app | +| \*.api.support.microsoft.com | API access for Quick Assist | +| \*.vortex.data.microsoft.com | Used for diagnostic data | +| \*.channelservices.microsoft.com | Required for chat services within Quick Assist | + +## How it works + +1. Both the helper and the sharer start Quick Assist. + +2. The helper selects **Assist another person**. Quick Assist on the helper's side contacts the Remote Assistance Service to obtain a session code. The helper then provides the code to the sharer. + +3. After the sharer enters the code in their Quick Assist app, Quick Assist uses that code to contact the Remote Assistance Service and join that specific session. + +4. The helper is prompted to select **View Only** or **Full Control**. + +5. The sharer is prompted to confirm allowing the helper to share their desktop with the helper. + +6. Quick Assist starts RDP control and connects to RDP relay services. + +7. RDP shares the video to the helper over https (port 443) through RDP relay services to the helper's RDP control. Input is shared from the helper to the sharer through the RDP relay service. + +Diagram Description automatically generated + +### Data and privacy + +Microsoft logs a small amount of session data to monitor the health of the Quick Assist system. This data includes the following information: + +- Start and end time of the session + +- Errors arising from Quick Assist itself, such as unexpected disconnections + +- Features used inside the app such as view only, annotation, and session pause + +No logs are created on either the helper’s or sharer’s device. Microsoft cannot access a session or view any actions or keystrokes that occur in the session. + +The sharer sees only an abbreviated version of the helper’s name (first name, last initial) and no other information about them. Microsoft does not store any data about either the sharer or the helper for longer than three days. + +In some scenarios, the helper does require the sharer to respond to application permission prompts (User Account Control), but otherwise the helper has the same permissions as the sharer on the device. + +## Working with Quick Assist + +Either the support staff or a user can start a Quick Assist session. + + +1. Support staff (“helper”) starts Quick Assist in any of a few ways: + + - Type *Quick Assist* in the search box and press ENTER. + - From the Start menu, select **Windows Accessories**, and then select **Quick Assist**. + - Type CTRL+Windows+Q + +2. In the **Give assistance** section, helper selects **Assist another person**. The helper might be asked to choose their account or sign in. Quick Assist generates a time-limited security code. + +3. Helper shares the security code with the user over the phone or with a messaging system. + +4. Quick Assist opens on the sharer’s device. The user enters the provided code in the **Code from assistant** box, and then selects **Share screen**. + +5. The helper receives a dialog offering the opportunity to take full control of the device or just view its screen. After choosing, the helper selects **Continue**. + +6. The sharer receives a dialog asking for permission to show their screen or allow access. The sharer gives permission by selecting the **Allow** button. + +## If Quick Assist is missing + +If for some reason a user doesn't have Quick Assist on their system or it's not working properly, they might need to uninstall and reinstall it. + +### Uninstall Quick Assist + +1. Start the Settings app, and then select **Apps**. +2. Select **Optional features**. +3. In the **Installed features** search bar, type *Quick Assist*. +4. Select **Microsoft Quick Assist**, and then select **Uninstall**. + +### Reinstall Quick Assist + +1. Start the Settings app, and then select **Apps**. +2. Select **Optional features**. +3. Select **Add a feature**. +4. In the new dialog that opens, in the **Add an optional feature** search bar, type *Quick Assist*. +5. Select the check box for **Microsoft Quick Assist**, and then select **Install**. +6. Restart the device. + +## Next steps + +If you have any problems, questions, or suggestions for Quick Assist, contact us by using feedback-hub://?referrer=resolveUpgradeErrorsPage&tabid=2&contextid=81&newFeedback=true&feedbackType=2&topic=submit-errors.md From 05ae433dfc05d6897123a98259b6f241445cc058 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Wed, 16 Dec 2020 10:33:43 -0700 Subject: [PATCH 251/958] deleted unneeded file --- ...-assist-for-it-pros-draft - Pauls Edits.md | 103 ------------------ 1 file changed, 103 deletions(-) delete mode 100644 windows/client-management/quick-assist-for-it-pros-draft - Pauls Edits.md diff --git a/windows/client-management/quick-assist-for-it-pros-draft - Pauls Edits.md b/windows/client-management/quick-assist-for-it-pros-draft - Pauls Edits.md deleted file mode 100644 index bdd037b8a7..0000000000 --- a/windows/client-management/quick-assist-for-it-pros-draft - Pauls Edits.md +++ /dev/null @@ -1,103 +0,0 @@ -Use Quick Assist to support users -================================= - -\[a sub-article under Administrative Tools in the [Client Management](https://docs.microsoft.com/en-us/windows/client-management/) area\] - -Quick Assist is a Windows 10 application that enables a person to share their device with another person over a remote connection. Your support staff can use it to remotely connect to a user’s device and then view its display, make annotations, or take full control. In this way, they can troubleshoot, diagnose technological issues, and provide instructions to users directly on their devices. - -Before you begin ----------------- - -All that is required to use Quick Assist is suitable network & internet connectivity. No particular roles, permissions, or policies are involved. Neither party needs to be in a domain. The helper must have a Microsoft account. <Sharer doesn’t have to authenticate> - -### Authentication - -Supported methods for Helper login authentication are Microsoft Account (MSA), or Microsoft AAD. Local Active Directory is not supported at this time. - -### Network considerations - -Quick Assist communicates over port 443 (https) and connects to the Remote Assistance Service at by using the Remote Desktop Protocol. The traffic is encrypted with TLS 1.2. Older TLS versions are blocked. - -Both parties must be able to reach these endpoints over port 443: - -| Domain/Name | Description | -|-----------------------------------|-------------------------------------------------------| -| \*.support.services.microsoft.com | Primary endpoint used for Quick Assist application | -| \*.resources.lync.com | Required for the skype framework used by Quick Assist | -| \*.infra.lync.com | Required for the skype framework used by Quick Assist | -| \*latest-swx.cdn.skype.com | Required for the skype framework used by Quick Assist | -| \*login.microsoftonline.com | Required for logging in to the application (MSA) | -| \*channelwebsdks.azureedge.net | Utilized for chat services within Quick Assist | -| \*.aria.microsoft.com | Utilized for accessibility features within the app | -| \*api.support.microsoft.com | API access for Quick Assist | -| \*.vortex.data.microsoft.com | Utilized for telemetry | -| \*.channelservices.microsoft.com | Required for chat services within Quick Assist | - -How it works ------------- - -1. Both the Helper and the Sharer start Quick Assist. - -2. The Helper clicks on “Assist another person”. The Quick Assist on the Helper side contacts the Remote Assistance Service to obtain a session code. The Helper then provides the code to the Sharer. - -3. After the Sharer enters the code in their Quick Assist app, Quick Assist uses that code to contact the Remote Assistance Service and join that specific session. - -4. The Helper is then prompted to decide View Only Mode or Full Control. - -5. Then the Sharer is prompted to confirm allowing the Helper to share their desktop with the helper. - -6. Then Both Quick Assist initiates the RDP control and connects to the RDP Relay services. - -7. Then RDP shares the video to the Helper over https (port 443) thru Relay services to the Helpers RDP control. Input is shared from the Helper to the Sharer thru Relay service. - -Diagram Description automatically generated - -### Data and privacy - -Microsoft logs a small amount of session data to monitor the health of the Quick Assist system. This includes the following data: - -- Start and end time of the session - -- Errors arising from Quick Assist itself, such as unexpected disconnections - -- Features utilized within the app such as view only, annotation, and session pause - -No logs are created on either the helper’s or sharer’s device. Microsoft cannot access a session or view any actions or keystrokes that occur in the session. - -The sharer sees only an abbreviated version of the helper’s name (first name, last initial) and no other information about them. Microsoft does not capture or store any personally identifiable information about either the Sharer or the Helper for longer than 3 days. - -In some scenarios the helper does require the Sharer to respond to application permission prompts (User Account Control), but otherwise the Helper has the same permissions as the Sharer on the device. - -Working with Quick Assist -------------------------- - -Either the support staff or a user can start the Quick Assist session. - -### Support staff starts session - -1. Support staff (“helper”) starts Quick Assist in any of a few ways: - - - Type *Quick Assist* in the search box and press ENTER. - - - From the Start menu, select **Windows Accessories**, and then select **Quick Assist** - - - Type CTRL+Windows+Q - -2. In the **Give assistance** section, helper selects **Assist another person**. The helper might be asked to choose their account or sign in. Quick Assist generates a time-limited security code. - -3. Helper shares the security code with the user over the phone or with a messaging system. - -4. Quick Assist opens on the sharer’s device. The user enters the provided code in the **Code from assistant** box, and then selects **Share screen**. - -5. The helper receives a dialog offering the opportunity to take full control of the device or just view its screen. After choosing, the helper selects **Continue**. - -6. The sharer receives a dialog asking for permission to show their screen or allow access. The sharer gives permission by selecting the **Allow** button. - -### User starts session - -(I don’t think we need this since the steps are included above) - -Next steps ----------- - -If you have any problems, questions, or suggestions for Quick Assist, contact us by using \[Feedback Hub\]. From 089f72e52c9aa7cbd3b48c5a5a63b9221d24f478 Mon Sep 17 00:00:00 2001 From: Asha Iyengar Date: Wed, 16 Dec 2020 23:13:49 +0530 Subject: [PATCH 252/958] Made few minor changes --- .../filter-origin-documentation.md | 24 +++++++++---------- 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 28be4c5d70..5d43155670 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -45,21 +45,21 @@ The blocking filters can be categorized under these filter origins: e. Stealth - f. UWP default + f. Universal Windows Platform (UWP) default - g. WSH default + g. Windows Service Hardening (WSH) default -The next section describes the improvements made to audits 5157 and 5152 and how the above filter origins are used in these events. These improvements were added in Iron release. +The next section describes the improvements made to audits 5157 and 5152, and how the above filter origins are used in these events. These improvements were added in Iron release. ## Improved firewall audit The two new fields added to the audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. -The `Filter Origin` field will help identify the cause of the drop. Packet drops from Firewall are explicitly dropped by default block filters created by the Windows Firewall service or a Firewall rule which may be created by users, policies, services, apps, etc. +The `Filter Origin` field helps identify the cause of the drop. Packet drops from firewall are explicitly dropped by default block filters created by the Windows Firewall service or a firewall rule which may be created by users, policies, services, apps, etc. -`Filter Origin` will either specify the rule ID (a unique identifier of a Firewall rule) or the name of one of the default block filters. +`Filter Origin` specifies either the rule ID (a unique identifier of a Firewall rule) or the name of one of the default block filters. -The `Interface Index` field will specify the network interface in which the packet was dropped. This field helps to identify which interface was quarantined, if the `Filter Origin` is a `Quarantine Default`. +The `Interface Index` field specifies the network interface in which the packet was dropped. This field helps to identify which interface was quarantined, if the `Filter Origin` is a `Quarantine Default`. To enable a specific audit event, run the corresponding command in an administrator command prompt: @@ -74,7 +74,7 @@ As the audit surfaces `Filter Origin` and `Interface Index`, the network admin c ![Event audit](images/event-audit-5157.png) -The next sections are divided by `Filter Origin` type. The filter origin value will either be a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, **Firewall default block filters**. Otherwise, continue to the section **Firewall rules**. +The next sections are divided by `Filter Origin` type, the value is either a rule name or the name of one of the default block filters. If the filter origin is one of the default block filters, skip to the section, **Firewall default block filters**. Otherwise, continue to the section **Firewall rules**. ## Firewall rules @@ -90,7 +90,7 @@ Get-NetFirewallRule -Name " {A549B7CF-0542-4B67-93F9-EEBCDD584377} " After identifying the rule that caused the drop, the network admin can now modify/disable the rule to allow the traffic they want through command prompt or using the Windows Defender UI. The network admin can find the rule in the UI with the rule’s `DisplayName`. >[!NOTE] -> Firewall rules from Mobile Device Management (MDM) store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the `Filter Origin` is one of the default block filters, as they do not correspond to any Firewall rules. +> Firewall rules from Mobile Device Management (MDM) store cannot be searched using the Windows Defender UI. Additionally, the above method will not work when the `Filter Origin` is one of the default block filters, as they do not correspond to any firewall rules. ## Firewall default block filters @@ -104,11 +104,11 @@ To enable localhost loopback for a published app which requires loopback access **Boottime default** -Network drop events from the boottime default block filter origin occur when the computer is booting up and the Firewall service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through Firewall rules. +Network drop events from the boottime default block filter origin occur when the computer is booting up and the firewall service is not yet running. Services will need to create a boottime allow filter to allow the traffic. It should be noted that it is not possible to add boottime filters through firewall rules. **Quarantine default** -Network drops from the quarantine default block filter occur when the interface is temporarily quarantined by Firewall service. The Firewall service quarantines an interface when it detects a change on the network, and based on several other factors, the Firewall service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the quarantine default block filter will block any new non-loopback inbound connections. +Network drops from the quarantine default block filter occur when the interface is temporarily quarantined by Firewall service. The firewall service quarantines an interface when it detects a change on the network, and based on several other factors, the firewall service may put the interface in quarantine as a safeguard. When an interface is in quarantine, the quarantine default block filter will block any new non-loopback inbound connections. Run the following PowerShell command to generate more information about the interface: @@ -128,9 +128,9 @@ To learn more about the quarantine feature, see [Quarantine behavior](quarantine Network packet drops from query user default block filters occur when there is no explicit rule created to allow an inbound connection for the packet. When an application binds to a socket but does not have a corresponding inbound rule to allow packets on that port, Windows generates a pop up for the user to allow or deny the app to receive packets on the available network categories. If the user clicks to deny the connection in this popup, subsequent inbound packets to the app will be dropped. To resolve the drops: -1. Create an inbound Firewall rule to allow the packet for this application. This will allow the packet to bypass any query user default block filters. +1. Create an inbound firewall rule to allow the packet for this application. This will allow the packet to bypass any query user default block filters. -2. Delete any block query user rules which may have been auto generated by the Firewall service. +2. Delete any block query user rules which may have been auto generated by the firewall service. To generate a list of all the query user block rules, you can run the following PowerShell command: From 5bf7b35e59dc74a916cd1c3ceb310edb0e13f282 Mon Sep 17 00:00:00 2001 From: Asha Iyengar Date: Wed, 16 Dec 2020 23:37:43 +0530 Subject: [PATCH 253/958] Minor changes --- .../threat-protection/windows-firewall/quarantine.md | 12 +++++------- 1 file changed, 5 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index 6e13094d17..a7d55f86ae 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -25,7 +25,7 @@ Network changes can happen frequently. Additionally, the operations required to To counter this potential exploitation, Windows Firewall will quarantine an interface until the system has successfully re-categorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. -While the quarantine feature has long been a part of Windows Firewall, the feature’s behavior has often caused confusion for customers unaware of quarantine and its motivations. +While the quarantine feature has long been a part of Windows Firewall, the feature behavior has often caused confusion for customers unaware of quarantine and its motivations. Ultimately, the goal of this document is to describe the quarantine feature at a high level and help network admins understand why the application traffic is sometimes blocked by quarantine. @@ -33,11 +33,9 @@ Ultimately, the goal of this document is to describe the quarantine feature at a The quarantine feature creates filters which can be split into three categories: -1. Quarantine default inbound block filter - -2. Quarantine default exception filters - -3. Interface un-quarantine filters +- Quarantine default inbound block filter +- Quarantine default exception filters +- Interface un-quarantine filters These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and these layers are: @@ -50,7 +48,7 @@ These filters are added in the FWPM_SUBLAYER_MPSSVC_QUARANTINE sublayer and thes 4. FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 >[!NOTE] -> Any Firewall rules added by the customers will not affect the filters in the quarantine sublayer as filters from Firewall rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. +> Any firewall rules added by the customers will not affect the filters in the quarantine sublayer as filters from Firewall rules are added in the FWPM_SUBLAYER_MPSSVC_WF sublayer. In other words, customers cannot add their own exception filters to prevent packets from being evaluated by quarantine filters. For more information about WFP layers and sublayers, see [WFP Operation](https://docs.microsoft.com/windows/win32/fwp/basic-operation). From d679d931a0f0ea9b232908091ec7c2d73602c99a Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 16 Dec 2020 10:29:18 -0800 Subject: [PATCH 254/958] Create contact-support-usgov.md --- .../contact-support-usgov.md | 43 +++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md b/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md new file mode 100644 index 0000000000..4fefe095d8 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md @@ -0,0 +1,43 @@ +--- +title: Contact Microsoft Defender for Endpoint support for US Government customers +description: Learn how to contact Microsoft Defender for Endpoint support for US Government customers +keywords: support, contact, premier support, solutions, problems, case, government, gcc, gcc-m, gcc-h, defender, endpoint, mdatp, mde +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: macapara +author: mjcaparas +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ROBOTS: noindex,nofollow +--- + +# Contact Microsoft Defender for Endpoint support for US Government customers + +[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] + + +**Applies to:** +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) + +Defender for Endpoint has recently upgraded the support process to offer a more modern and advanced support experience. + +## Using the right portal +In order to open a support case, you will need to login to your Microsoft Defender for Endpoint portal: + +Environment | Portal URL +:---|:--- +GCC-M | [https://gcc.securitycenter.windows.us](https://gcc.securitycenter.windows.us) +GCC-H | [https://securitycenter.windows.us](https://securitycenter.windows.us) +DoD | [https://securitycenter.windows.us](https://securitycenter.windows.us) + +If you are unable to login to the portal, you can also open a support case using the [phone](https://docs.microsoft.com/microsoft-365/admin/contact-support-for-business-products?view=o365-worldwide&tabs=phone). + +## Opening a support case +For prerequisites and instructions, see [Contact Microsoft Defender for Endpoint support](contact-support.md). \ No newline at end of file From 1996207706b189166c6bfda64acff38b9a3c48fc Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 10:32:44 -0800 Subject: [PATCH 255/958] antivirus updates per doc bugs --- ...rosoft-defender-antivirus-in-windows-10.md | 11 ++--- ...fender-antivirus-on-windows-server-2016.md | 43 +++++++++---------- 2 files changed, 25 insertions(+), 29 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10.md index 3b56a59a48..23c85194d0 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 11/12/2020 +ms.date: 12/16/2020 ms.reviewer: manager: dansimp ms.custom: nextgen @@ -20,12 +20,9 @@ ms.custom: nextgen [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** -- Windows 10 -- Windows Server 2016 -- Windows Server 2019 +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) ## Microsoft Defender Antivirus: Your next-generation protection @@ -56,8 +53,8 @@ For information on how to configure next-generation protection services, see [Co > [!Note] > Configuration and management is largely the same in Windows Server 2016 and Windows Server 2019, while running Microsoft Defender Antivirus; however, there are some differences. To learn more, see [Microsoft Defender Antivirus on Windows Server 2016 and 2019](microsoft-defender-antivirus-on-windows-server-2016.md). -## Related articles +## See also +- [Microsoft Defender Antivirus on Windows Server 2016 and 2019](microsoft-defender-antivirus-on-windows-server-2016.md) - [Microsoft Defender Antivirus management and configuration](configuration-management-reference-microsoft-defender-antivirus.md) - - [Evaluate Microsoft Defender Antivirus protection](evaluate-microsoft-defender-antivirus.md) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 0b7e4ccdd6..86b682c59e 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -10,7 +10,7 @@ ms.sitesec: library ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 02/25/2020 +ms.date: 12/16/2020 ms.reviewer: manager: dansimp --- @@ -19,15 +19,13 @@ manager: dansimp [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** -- Windows Server 2016 -- Windows Server 2019 +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -Microsoft Defender Antivirus is available on Windows Server 2016 and Windows Server 2019. In some instances, Microsoft Defender Antivirus is referred to as Endpoint Protection; however, the protection engine is the same. +Microsoft Defender Antivirus is available on Windows Server 2019 and Windows Server 2016. In some instances, Microsoft Defender Antivirus is referred to as *Endpoint Protection*; however, the protection engine is the same. -While the functionality, configuration, and management are largely the same for Microsoft Defender Antivirus on Windows 10, there are a few key differences on Windows Server 2016 or Windows Server 2019: +While the functionality, configuration, and management are largely the same for [Microsoft Defender Antivirus on Windows 10](microsoft-defender-antivirus-in-windows-10.md), there are a few key differences on Windows Server 2019 and Windows Server 2016: - In Windows Server, [automatic exclusions](configure-server-exclusions-microsoft-defender-antivirus.md) are applied based on your defined Server Role. - In Windows Server, Microsoft Defender Antivirus does not automatically disable itself if you are running another antivirus product. @@ -52,7 +50,7 @@ The process of setting up and running Microsoft Defender Antivirus on a server p ## Enable the user interface on Windows Server 2016 or 2019 -By default, Microsoft Defender Antivirus is installed and functional on Windows Server 2016 and Windows Server 2019. The user interface (GUI) is installed by default on some SKUs, but is not required because you can use PowerShell or other methods to manage Microsoft Defender Antivirus. And if the GUI is not installed on your server, you can add it by using the Add Roles and Features Wizard or PowerShell. +By default, Microsoft Defender Antivirus is installed and functional on Windows Server 2019 and Windows Server 2016. The user interface (GUI) is installed by default on some SKUs, but is not required because you can use PowerShell or other methods to manage Microsoft Defender Antivirus. And if the GUI is not installed on your server, you can add it by using the Add Roles and Features Wizard or by using PowerShell. ### Turn on the GUI using the Add Roles and Features Wizard @@ -74,7 +72,7 @@ The following PowerShell cmdlet will enable the interface: Install-WindowsFeature -Name Windows-Defender-GUI ``` -## Install Microsoft Defender Antivirus on Windows Server 2016 or 2019 +## Install Microsoft Defender Antivirus on Windows Server 2019 or Windows Server 2016 You can use either the **Add Roles and Features Wizard** or PowerShell to install Microsoft Defender Antivirus. @@ -121,14 +119,14 @@ The `sc query` command returns information about the Microsoft Defender Antiviru In order to get updated antimalware Security intelligence, you must have the Windows Update service running. If you use an update management service, like Windows Server Update Services (WSUS), make sure that updates for Microsoft Defender Antivirus Security intelligence are approved for the computers you manage. -By default, Windows Update does not download and install updates automatically on Windows Server 2016 or 2019. You can change this configuration by using one of the following methods: +By default, Windows Update does not download and install updates automatically on Windows Server 2019 or Windows Server 2016. You can change this configuration by using one of the following methods: |Method |Description | |---------|---------| |**Windows Update** in Control Panel |- **Install updates automatically** results in all updates being automatically installed, including Windows Defender Security intelligence updates.
    - **Download updates but let me choose whether to install them** allows Windows Defender to download and install Security intelligence updates automatically, but other updates are not automatically installed. | |**Group Policy** | You can set up and manage Windows Update by using the settings available in Group Policy, in the following path: **Administrative Templates\Windows Components\Windows Update\Configure Automatic Updates** | -|The **AUOptions** registry key |The following two values allow Windows Update to automatically download and install Security intelligence updates:
    - **4** Install updates automatically. This value results in all updates being automatically installed, including Windows Defender Security intelligence updates.
    - **3** Download updates but let me choose whether to install them. This value allows Windows Defender to download and install Security intelligence updates automatically, but other updates are not automatically installed. | +|The **AUOptions** registry key |The following two values allow Windows Update to automatically download and install Security intelligence updates:
    - **4** - **Install updates automatically**. This value results in all updates being automatically installed, including Windows Defender Security intelligence updates.
    - **3** - **Download updates but let me choose whether to install them**. This value allows Windows Defender to download and install Security intelligence updates automatically, but other updates are not automatically installed. | To ensure that protection from malware is maintained, we recommend that you enable the following services: @@ -162,10 +160,10 @@ To enable automatic sample submission, start a Windows PowerShell console as an |Setting |Description | |---------|---------| -|**0** Always prompt |The Microsoft Defender Antivirus service prompts you to confirm submission of all required files. This is the default setting for Microsoft Defender Antivirus, but is not recommended for installations on Windows Server 2016 or 2019 without a GUI. | -|**1** Send safe samples automatically |The Microsoft Defender Antivirus service sends all files marked as "safe" and prompts for the remainder of the files. | -|**2** Never send |The Microsoft Defender Antivirus service does not prompt and does not send any files. | -|**3** Send all samples automatically |The Microsoft Defender Antivirus service sends all files without a prompt for confirmation. | +|**0** - **Always prompt** |The Microsoft Defender Antivirus service prompts you to confirm submission of all required files. This is the default setting for Microsoft Defender Antivirus, but is not recommended for installations on Windows Server 2016 or 2019 without a GUI. | +|**1** - **Send safe samples automatically** |The Microsoft Defender Antivirus service sends all files marked as "safe" and prompts for the remainder of the files. | +|**2** - **Never send** |The Microsoft Defender Antivirus service does not prompt and does not send any files. | +|**3** - **Send all samples automatically** |The Microsoft Defender Antivirus service sends all files without a prompt for confirmation. | ## Configure automatic exclusions @@ -177,7 +175,9 @@ See [Configure exclusions in Microsoft Defender Antivirus on Windows Server](con If you are using a third-party antivirus solution and you're running into issues with that solution and Microsoft Defender Antivirus, you can consider uninstalling Microsoft Defender Antivirus. Before you do that, review the following resources: -- See the question "Should I run Microsoft security software at the same time as other security products?" on the [Windows Defender Security Intelligence Antivirus and antimalware software FAQ](https://www.microsoft.com/wdsi/help/antimalware-faq#multiple-products). +- See the question *Should I run Microsoft security software at the same time as other security products?* in the [Windows Defender Security Intelligence Antivirus and antimalware software FAQ](https://www.microsoft.com/wdsi/help/antimalware-faq#multiple-products). + +- See [Microsoft Defender Antivirus compatibility](microsoft-defender-antivirus-compatibility.md). - See [Better together: Microsoft Defender Antivirus and Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/why-use-microsoft-antivirus). This article describes 10 advantages to using Microsoft Defender Antivirus together with Defender for Endpoint. @@ -185,20 +185,20 @@ If you determine you do want to uninstall Microsoft Defender Antivirus, follow t ### Uninstall Microsoft Defender Antivirus using the Remove Roles and Features wizard -1. Refer to [this article](https://docs.microsoft.com/windows-server/administration/server-manager/install-or-uninstall-roles-role-services-or-features#remove-roles-role-services-and-features-by-using-the-remove-roles-and-features-wizard), and use the **Remove Roles and Features Wizard**. +1. See [Install or Uninstall Roles, Role Services, or Features](https://docs.microsoft.com/windows-server/administration/server-manager/install-or-uninstall-roles-role-services-or-features#remove-roles-role-services-and-features-by-using-the-remove-roles-and-features-wizard), and use the **Remove Roles and Features Wizard**. -2. When you get to the **Features** step of the wizard, unselect the **Windows Defender Features** option. +2. When you get to the **Features** step of the wizard, clear the **Windows Defender Features** option. - If you unselect **Windows Defender** by itself under the **Windows Defender Features** section, you will be prompted to remove the interface option **GUI for Windows Defender**. + If you clear **Windows Defender** by itself under the **Windows Defender Features** section, you will be prompted to remove the interface option **GUI for Windows Defender**. - Microsoft Defender AV will still run normally without the user interface, but the user interface cannot be enabled if you disable the core **Windows Defender** feature. + Microsoft Defender Antivirus will still run normally without the user interface, but the user interface cannot be enabled if you disable the core **Windows Defender** feature. ### Uninstall Microsoft Defender Antivirus using PowerShell >[!NOTE] >You can't uninstall the Windows Security app, but you can disable the interface with these instructions. -The following PowerShell cmdlet will also uninstall Microsoft Defender AV on Windows Server 2016 or 2019: +The following PowerShell cmdlet uninstalls Microsoft Defender Antivirus on Windows Server 2019 or Windows Server 2016: ```PowerShell Uninstall-WindowsFeature -Name Windows-Defender @@ -212,8 +212,7 @@ To turn off the Microsoft Defender Antivirus GUI, use the following PowerShell c Uninstall-WindowsFeature -Name Windows-Defender-GUI ``` - -## Related topics +## See also - [Microsoft Defender Antivirus in Windows 10](microsoft-defender-antivirus-in-windows-10.md) From e703de61e2be347117c995e48740b3ae3fa66b3e Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 16 Dec 2020 10:37:36 -0800 Subject: [PATCH 256/958] update URL --- .../microsoft-defender-atp/contact-support-usgov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md b/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md index 4fefe095d8..8241f211f4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md @@ -37,7 +37,7 @@ GCC-M | [https://gcc.securitycenter.windows.us](https://gcc.securitycenter.windo GCC-H | [https://securitycenter.windows.us](https://securitycenter.windows.us) DoD | [https://securitycenter.windows.us](https://securitycenter.windows.us) -If you are unable to login to the portal, you can also open a support case using the [phone](https://docs.microsoft.com/microsoft-365/admin/contact-support-for-business-products?view=o365-worldwide&tabs=phone). +If you are unable to login to the portal, you can also open a support case using the [phone](https://docs.microsoft.com/microsoft-365/admin/contact-support-for-business-products?view=o365-worldwide&tabs=phone&preserve-view=true). ## Opening a support case For prerequisites and instructions, see [Contact Microsoft Defender for Endpoint support](contact-support.md). \ No newline at end of file From d94c12b784c6559a0ff9b194ba5595e9154cdb16 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 10:40:25 -0800 Subject: [PATCH 257/958] Update configuration-management-reference-microsoft-defender-antivirus.md --- ...ement-reference-microsoft-defender-antivirus.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md index 2a0313ec61..0b62bbc7af 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.date: 09/03/2018 +ms.date: 12/16/2020 ms.reviewer: manager: dansimp --- @@ -27,12 +27,12 @@ manager: dansimp You can manage and configure Microsoft Defender Antivirus with the following tools: -- Microsoft Intune (now part of Microsoft Endpoint Manager) -- Microsoft Endpoint Configuration Manager (now part of Microsoft Endpoint Manager) -- Group Policy -- PowerShell cmdlets -- Windows Management Instrumentation (WMI) -- The Microsoft Malware Protection Command Line Utility (referred to as the *mpcmdrun.exe* utility +- [Microsoft Intune](https://docs.microsoft.com/mem/intune/protect/endpoint-security-antivirus-policy) (now part of Microsoft Endpoint Manager) +- [Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-protection-configure) (now part of Microsoft Endpoint Manager) +- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus) +- [PowerShell cmdlets](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-powershell-cmdlets-microsoft-defender-antivirus) +- [Windows Management Instrumentation (WMI)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus) +- The [Microsoft Malware Protection Command Line Utility](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) (referred to as the *mpcmdrun.exe* utility The articles in this section provide further information, links, and resources for using these tools to manage and configure Microsoft Defender Antivirus. From e84ce686e509adfbf921ef7c9d3f0eb05596d460 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 10:42:43 -0800 Subject: [PATCH 258/958] antivirus doc bug fixes --- ...t-reference-microsoft-defender-antivirus.md | 18 ++++++++---------- ...crosoft-defender-antivirus-compatibility.md | 1 - 2 files changed, 8 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md b/windows/security/threat-protection/microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md index 0b62bbc7af..756111f940 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/configuration-management-reference-microsoft-defender-antivirus.md @@ -34,14 +34,12 @@ You can manage and configure Microsoft Defender Antivirus with the following too - [Windows Management Instrumentation (WMI)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-wmi-microsoft-defender-antivirus) - The [Microsoft Malware Protection Command Line Utility](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/command-line-arguments-microsoft-defender-antivirus) (referred to as the *mpcmdrun.exe* utility -The articles in this section provide further information, links, and resources for using these tools to manage and configure Microsoft Defender Antivirus. +The following articles provide further information, links, and resources for using these tools to manage and configure Microsoft Defender Antivirus. -## In this section - -Article | Description ----|--- -[Manage Microsoft Defender Antivirus with Microsoft Intune and Microsoft Endpoint Configuration Manager](use-intune-config-manager-microsoft-defender-antivirus.md)|Information about using Intune and Configuration Manager to deploy, manage, report, and configure Microsoft Defender Antivirus -[Manage Microsoft Defender Antivirus with Group Policy settings](use-group-policy-microsoft-defender-antivirus.md)|List of all Group Policy settings located in ADMX templates -[Manage Microsoft Defender Antivirus with PowerShell cmdlets](use-powershell-cmdlets-microsoft-defender-antivirus.md)|Instructions for using PowerShell cmdlets to manage Microsoft Defender Antivirus, plus links to documentation for all cmdlets and allowed parameters -[Manage Microsoft Defender Antivirus with Windows Management Instrumentation (WMI)](use-wmi-microsoft-defender-antivirus.md)| Instructions for using WMI to manage Microsoft Defender Antivirus, plus links to documentation for the WMIv2 APIs (including all classes, methods, and properties) -[Manage Microsoft Defender Antivirus with the mpcmdrun.exe command-line tool](command-line-arguments-microsoft-defender-antivirus.md)|Instructions on using the dedicated command-line tool to manage and use Microsoft Defender Antivirus +| Article | Description | +|:---|:---| +|[Manage Microsoft Defender Antivirus with Microsoft Intune and Microsoft Endpoint Configuration Manager](use-intune-config-manager-microsoft-defender-antivirus.md)|Information about using Intune and Configuration Manager to deploy, manage, report, and configure Microsoft Defender Antivirus | +|[Manage Microsoft Defender Antivirus with Group Policy settings](use-group-policy-microsoft-defender-antivirus.md)|List of all Group Policy settings located in ADMX templates | +|[Manage Microsoft Defender Antivirus with PowerShell cmdlets](use-powershell-cmdlets-microsoft-defender-antivirus.md)|Instructions for using PowerShell cmdlets to manage Microsoft Defender Antivirus, plus links to documentation for all cmdlets and allowed parameters | +|[Manage Microsoft Defender Antivirus with Windows Management Instrumentation (WMI)](use-wmi-microsoft-defender-antivirus.md)| Instructions for using WMI to manage Microsoft Defender Antivirus, plus links to documentation for the WMIv2 APIs (including all classes, methods, and properties) | +|[Manage Microsoft Defender Antivirus with the mpcmdrun.exe command-line tool](command-line-arguments-microsoft-defender-antivirus.md)|Instructions on using the dedicated command-line tool to manage and use Microsoft Defender Antivirus | diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index bb9e88a2d6..a51058e86c 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -20,7 +20,6 @@ ms.date: 12/11/2020 [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) From dd3475c9697b77740af8ef0db151c4ae0b77648f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 10:49:18 -0800 Subject: [PATCH 259/958] Update microsoft-defender-antivirus-on-windows-server-2016.md --- .../microsoft-defender-antivirus-on-windows-server-2016.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 86b682c59e..1f0746dcb5 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -36,7 +36,7 @@ The process of setting up and running Microsoft Defender Antivirus on a server p 1. [Enable the interface](#enable-the-user-interface-on-windows-server-2016-or-2019) -2. [Install Microsoft Defender Antivirus](#install-microsoft-defender-antivirus-on-windows-server-2016-or-2019) +2. [Install Microsoft Defender Antivirus](#install-microsoft-defender-antivirus-on-windows-server-2019-or-windows-server-2016) 2. [Verify Microsoft Defender Antivirus is running](#verify-microsoft-defender-antivirus-is-running) From 73f976d35a69412992eaade9620dcb1f5893ded0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 10:50:29 -0800 Subject: [PATCH 260/958] Update microsoft-defender-antivirus-on-windows-server-2016.md --- .../microsoft-defender-antivirus-on-windows-server-2016.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 1f0746dcb5..2dd55a5ef2 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -15,7 +15,7 @@ ms.reviewer: manager: dansimp --- -# Microsoft Defender Antivirus on Windows Server 2016 and 2019 +# Microsoft Defender Antivirus on Windows Server 2019 and Windows Server 2016 [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] @@ -34,7 +34,7 @@ While the functionality, configuration, and management are largely the same for The process of setting up and running Microsoft Defender Antivirus on a server platform includes several steps: -1. [Enable the interface](#enable-the-user-interface-on-windows-server-2016-or-2019) +1. [Enable the interface](#enable-the-user-interface-on-windows-server-2019-or-windows-server-2016) 2. [Install Microsoft Defender Antivirus](#install-microsoft-defender-antivirus-on-windows-server-2019-or-windows-server-2016) @@ -48,7 +48,7 @@ The process of setting up and running Microsoft Defender Antivirus on a server p 6. (Only if necessary) [Uninstall Microsoft Defender Antivirus](#need-to-uninstall-microsoft-defender-antivirus) -## Enable the user interface on Windows Server 2016 or 2019 +## Enable the user interface on Windows Server 2019 or Windows Server 2016 By default, Microsoft Defender Antivirus is installed and functional on Windows Server 2019 and Windows Server 2016. The user interface (GUI) is installed by default on some SKUs, but is not required because you can use PowerShell or other methods to manage Microsoft Defender Antivirus. And if the GUI is not installed on your server, you can add it by using the Add Roles and Features Wizard or by using PowerShell. From f802ff7f95b75e873ede4499870d7c63fce3d9c5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Wed, 16 Dec 2020 22:48:59 +0100 Subject: [PATCH 261/958] rename .PNG -> .png and minor linting MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Thomas Sjögren --- .../sync-browser-settings-gp.md | 8 ++--- ....PNG => allow-smart-screen-validation.png} | Bin .../{sync-settings.PNG => sync-settings.png} | Bin ...re-windows-defender-smartscreen-include.md | 8 ++--- .../configuration/images/configmgr-assets.PNG | Bin 133738 -> 0 bytes ...{mbr2gpt-volume.PNG => mbr2gpt-volume.png} | Bin windows/deployment/mbr-to-gpt.md | 30 +++++++++--------- .../bitlocker-recovery-guide-plan.md | 14 ++++---- .../{rp-example1.PNG => rp-example1.png} | Bin .../{rp-example2.PNG => rp-example2.png} | Bin .../{rp-example3.PNG => rp-example3.png} | Bin .../{rp-example4.PNG => rp-example4.png} | Bin .../{rp-example5.PNG => rp-example5.png} | Bin 13 files changed, 30 insertions(+), 30 deletions(-) rename browsers/edge/images/{allow-smart-screen-validation.PNG => allow-smart-screen-validation.png} (100%) rename browsers/edge/images/{sync-settings.PNG => sync-settings.png} (100%) delete mode 100644 windows/configuration/images/configmgr-assets.PNG rename windows/deployment/images/{mbr2gpt-volume.PNG => mbr2gpt-volume.png} (100%) rename windows/security/information-protection/bitlocker/images/{rp-example1.PNG => rp-example1.png} (100%) rename windows/security/information-protection/bitlocker/images/{rp-example2.PNG => rp-example2.png} (100%) rename windows/security/information-protection/bitlocker/images/{rp-example3.PNG => rp-example3.png} (100%) rename windows/security/information-protection/bitlocker/images/{rp-example4.PNG => rp-example4.png} (100%) rename windows/security/information-protection/bitlocker/images/{rp-example5.PNG => rp-example5.png} (100%) diff --git a/browsers/edge/group-policies/sync-browser-settings-gp.md b/browsers/edge/group-policies/sync-browser-settings-gp.md index cdce19d2e5..d948b2c862 100644 --- a/browsers/edge/group-policies/sync-browser-settings-gp.md +++ b/browsers/edge/group-policies/sync-browser-settings-gp.md @@ -6,17 +6,17 @@ manager: dansimp ms.author: dansimp author: dansimp ms.date: 10/02/2018 -ms.reviewer: +ms.reviewer: ms.localizationpriority: medium ms.topic: reference --- -# Sync browser settings +# Sync browser settings > [!NOTE] > You've reached the documentation for Microsoft Edge version 45 and earlier. To see the documentation for Microsoft Edge version 77 or later, go to the [Microsoft Edge documentation landing page](https://docs.microsoft.com/DeployEdge/). -By default, the “browser” group syncs automatically between the user’s devices, letting users make changes. The “browser” group uses the Sync your Settings option in Settings to sync information like history and favorites. You can configure Microsoft Edge to prevent the “browser” group from syncing and prevent users from turning on the _Sync your Settings_ toggle in Settings. If you want syncing turned off by default but not disabled, select the _Allow users to turn “browser” syncing_ option in the Do not sync browser policy. +By default, the “browser” group syncs automatically between the user’s devices, letting users make changes. The “browser” group uses the Sync your Settings option in Settings to sync information like history and favorites. You can configure Microsoft Edge to prevent the “browser” group from syncing and prevent users from turning on the _Sync your Settings_ toggle in Settings. If you want syncing turned off by default but not disabled, select the _Allow users to turn “browser” syncing_ option in the Do not sync browser policy. ## Relevant policies @@ -38,7 +38,7 @@ You can find the Microsoft Edge Group Policy settings in the following location To verify the settings: 1. In the upper-right corner of Microsoft Edge, click **More** \(**...**\). 2. Click **Settings**. -3. Under Account, see if the setting is toggled on or off.

    ![Verify configuration](../images/sync-settings.PNG) +3. Under Account, see if the setting is toggled on or off.

    ![Verify configuration](../images/sync-settings.png) ## Do not sync browser settings diff --git a/browsers/edge/images/allow-smart-screen-validation.PNG b/browsers/edge/images/allow-smart-screen-validation.png similarity index 100% rename from browsers/edge/images/allow-smart-screen-validation.PNG rename to browsers/edge/images/allow-smart-screen-validation.png diff --git a/browsers/edge/images/sync-settings.PNG b/browsers/edge/images/sync-settings.png similarity index 100% rename from browsers/edge/images/sync-settings.PNG rename to browsers/edge/images/sync-settings.png diff --git a/browsers/edge/includes/configure-windows-defender-smartscreen-include.md b/browsers/edge/includes/configure-windows-defender-smartscreen-include.md index c17f639024..375951a25c 100644 --- a/browsers/edge/includes/configure-windows-defender-smartscreen-include.md +++ b/browsers/edge/includes/configure-windows-defender-smartscreen-include.md @@ -2,7 +2,7 @@ author: eavena ms.author: eravena ms.date: 10/02/2018 -ms.reviewer: +ms.reviewer: audience: itpro manager: dansimp ms.prod: edge @@ -25,9 +25,9 @@ ms.topic: include --- -To verify Windows Defender SmartScreen is turned off (disabled): +To verify Windows Defender SmartScreen is turned off (disabled): 1. Click or tap **More** (…) and select **Settings** > **View Advanced settings**. -2. Verify the setting **Help protect me from malicious sites and download with Windows Defender SmartScreen** is disabled.

    ![Verify that Windows Defender SmartScreen is turned off (disabled)](../images/allow-smart-screen-validation.PNG) +2. Verify the setting **Help protect me from malicious sites and download with Windows Defender SmartScreen** is disabled.

    ![Verify that Windows Defender SmartScreen is turned off (disabled)](../images/allow-smart-screen-validation.png) ### ADMX info and settings @@ -40,7 +40,7 @@ To verify Windows Defender SmartScreen is turned off (disabled): #### MDM settings - **MDM name:** Browser/[AllowSmartScreen](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-browser#browser-allowsmartscreen) - **Supported devices:** Desktop and Mobile -- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen +- **URI full path:** ./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen - **Data type:** Integer #### Registry settings diff --git a/windows/configuration/images/configmgr-assets.PNG b/windows/configuration/images/configmgr-assets.PNG deleted file mode 100644 index 2cc50f57583ea09b84461c323fb12beaed610afa..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 133738 zcmY(q1yCGK*fol4u*JjTi@O8}?ksM>g0pC_1%d?@S==qS6C?=)hXBE4fuI3iSll55 zcZZ*^{`=LvcdDjlx~Hb9tK~UQpL04!M@xkO?=>C@3JQTLSWyoJ1p|nJg8CT;>!l_` zR)F&5f$F8FB9Br%4%~YwU^vKW%AugtCE-6Rr?+8thC*Q|(MftN#0t zt@_@H|u^>p^(9Uj|{=ivsI@jcHIka zjJb>(+z1S7c0Fikt4)(G_eHEX+jx+*ZVd%Brawvc=iK#NlD+V0fXRVrymlgZB0pBE zR3a82=DxKFC`e_Z+TSkyZA~<_J_)jk`?J5_Ods5pA0P;PXi?AS>hlsV!)Gk{F7x?e zxHp=UtoP&?9FQAi`if}HW8hq-^p4}*#Epd;PVGuxnN*K<>b63 zvV^`fGAb(nj+Xx4HhU$9LPVaCfniB?J)vg0reoCyS(pLszwaL=bJTKCN z>Rt3TJLvuk9sL#UF;c zYB{?yB67gBXN<46UBu0L!$SJiYchaWNx9racJ(QlrQf@mkHy*kIok9;?seE;-+p|Z z`f_Cy=tgX*u=!7f^^=16kA6KJQ?9zII;*KXoUzK9v?qM|k(qaK=5kFp<^~+n>cOvR zUN^ZUY#AAy(y8Zd4PDKR=t+n<=npq)Jd zlwqOT-x2UD9!Gzti5TAt$8?zbq7Y8C`|r-&{x9Yh542Xl2TiCP``X5v8EzNozd>$! zE)%+PcH2dgeH0iyg#1QiHv}X*ap?QgH^WWDXVt)!*8Lz<@(R zaeT*LwbAy{5Ixc#a%9h4pRtEJ{PpkpzPwbeSceI`PSNoP`$<$YgoM@!O5cTCZA=pPZjn<77b1$tm?Xl$cGskG zp{|-qaTU@HZFUN`iC(t#fM1Y%i!rYsq*HTYq0P}s>-X?AmtDv1#zlu{nSYCfG>AcF z6o;-DZQlbTxN}f=pdr&%1Ct65pB`^^$`? z2lJ=|g$Sq3uOXduXnBtxl^WF-ibE~~y6gX%amNi0oFUtfl8-%hsQFzZ0xM`R&Yb$X zb*0&taUHUy87AG#aQ=pEd2{gv(E>DrWmG=yC(-Kv466Pd>|lhTv@!@Rj=-PbT4f!sv7PTvcHXOsc|AjMEX?^VOv`90Kf1^6^5^#1=YThK-l~&1* zm`>hdwI5-=XB&=0nl0m3iO4X!JkPN%T3HgJIow_jvlu%hzhm;JKyzZ;gTZI^xZn$K z+0}@MI65GYBq}Dy;KM|MXTWDua6|2>P%kO4t;bwZjI0F@U#dq*<1hY_VkCo$+Q0z; zM;1#~DFui+Z)?M80%VwCsWCS>Y_m=B*e z|4}13qg7rNm3n*G>Q3Gs$){4$k3+H0+Dgohn-T4bJUaiefy*Y&6<=^8sG(!H$Daf@twt0~{^%MyupI#vi$_;BlnrRi<4Y>@Pt_3DX2_puV7YYdMh$=39U!4$K zNIotiOd&5u?M$c1-3XH?VabPGrPTp0qG2E8(x!ItTfPg^Ocfv)_BD1(zJ7iRO zR&*mSV4fc3y?fRe)Fhf$CKT{-<{E-5<=$0Ie#ioF8Ue^RJ5hJtiv zCBhE^;C+nUq`*5IN`YcNC^Bv+ ze0;JsPlcmw74ZkUFLC<=79B`(9MmL0@R#r{ zwWH;ESXB#i(J35CY6teNb>RKf6OC{OLo2V6q6282LTx5%tU_8nnoOYn%5uOWmKXttlWHr)f8yIVln>fm@YE ze3o;ohBTR=Ae@=ASTl@tYJ?!-5b!OnjWJ_>Wdu=ykmhmBXX|z_;6M6Q-$nP!O6-<& z0jDSeQ!)OcnqsGpo{NO7>EwBo)^uskI`WMMfng>b$y5x1ByVA506Hm~l#Jpef+UKE zj(x9bm}SC$B5#v}tQZaTeyDB7tM|)7>P3;Dh>1`0W+Q0`4{tc!+cCF})nnVYrpNwv ze6}SmB=rFAkKMw~I~pJ9!7|3uc9l;P7@%$q=FsvQxn!SvG;)5&Oo$u;b&=qPZTDiB zL!6(kiW0Z%Zk{Op2Hbp;dM>g0nf6md_umbgdz%CfH`YgJ{Y z01Cs-tW(nq|r zKR1PA!k5xz>Z^UOMsj$Y219W}B$B4p>BNcG*A&VS~?yt>Gq0$7MiwDn}xgOET*hFYf5|f(e9J4A6z)NN+a{uO|Q_mEI8Lw>m3*>QpTu?NlnPYkSX+95m zt2Qtd5TjKQKW~(^8&vB~7DY3M+YaK@C8bLb)YG0yM7mB>F0x(9SmJatNG1_a@v4+J z(6jPU=_wPF$Qqd;Wk|WmoiI{t_{4vaC~TPWOV^<|wH`)SB@1o{!K}FROX9tG{qYcK z0u-yIKlo9TE)*8M8(qWm*yS2S>g>8UaZbY~snWsmgz%P)I}|{iIEm?OY?hvk&*w%+ zfNo_h4jBzQ8P%Uqr_nF9-OlCi<4yfhCmSM|=eT%O9=EP|J2iY&O15rnk-sUaVty~x zKB}P@9U@~+rzzI^r^oy127ytVN%yaVt_Qm|4pY)DDScS%LCW%4;P_qFm58^wg73ha z0-t4R^hQK7RBWB37OYGo&9K4Epa1jHU)7SJGB(6Sjaut&bBQWJ8@>x!r{8dpxqo|i zxnFU!P81w|Ul_zZROnXZdbbAlN`tsfeT{WRGK-*|vZ6G*{M6e|{&?eJ?MsEdTa4O|#{1q0zU;r{@-&xfM_P zaq(+;jT^s)RF&pUyv5m`1=hwY^<@-mpYCK!KmZ%-xMkcqZ`-R~OCKrwnuNJ5A;V>> zMQe#qD+<(`zfQvx(`=7pjIf;Z3jNkK_ZiI=L@+XTK}-{!cZ5OD_cDKPJYxyvYKKJ^ z_hZ5(V1jlUrsH?jw~f}B0#`5Lynxm&>4Rgi|0`%okZ@7zgi{~iKxPw|8A zg7QGU2yC`*gh;zK*Raww`M%Fexu@NveE(p(Z_d$NV>HR_Z3BtNeH!C|1jQn***>pk zB8d-lr!zN>D+)#x5ip!>{5`xY-_u^_es0OL=D*0#_$*VOctwyZOtM$1 z1q$6%RJwf}P>yVSYP$U7#>uNZ|M9?|ca2gG=4jQw4ucZbD;9k|Q;Ln@KUhE<@uj#DA% z$a0d+)psz<*2tF0dbP^0!PJ|3r$+(naWxn6-cC&%pO%?IF<+LWfCrZN!VbMVR@=<2 z<*NY({z|!+_Qpa(ctmd6>6%c@W?kmWA0O}8&}2J>>U2l!p;m=gMIlyJ6&@U6z17Y< zu75cPonx^JU9@^Gf69dHV~_#FAaaXMJznT{jjj&VJ43sVC0y0hPpiJR)<%qYcUZQxTi-Sgu!IoB#0u9Sycms`hK$@-j0$J)*P}bpP-CIak7$ z*U&wAB7G@ywwX}k^87jA;dGEl6H0ZnF4F$^hp=71hh_yxA329`={Z-J+ng`nKk1Do z@bjNxeN{-8kRk*T@XUx1@Y*m!xF&H$Qc8aYBk z$Ha`q1a)Un$kMR?iDjuw`=_c;k}ix-fJd%MJ+?hmLCuSSSpn|lco8EufPU_XGUq^ zG5LZVK?vn{{GhkdOT#Hl=rK37s&UZWFm3Cb&)VrAq19xq0vdr58r*bYwiLmwp%A+n z%F~``!iyM~jWm7R@u$B|FoyDE8=UUi;kc89HC#^c*P07CIy(O`NH^tXVSYvUaI!Ee zW~g>^sWVOB5bNH%^`3R+eG-Iag}J`+{W`}~C^Sm#y24PTvb zXBG>k^B89jeHd@u6YH~6Co|>vH(!Wn- zEoonaEVhm4x7%uD;S{Ttx>UDX5P>#p7W!L`!9d`xSEv=1Img`0yZ;(A5B%Su_I&o( znT}*$O%6`nH6W2lXQ-zK)wVkz24zh}vg|i(4<@nhC1HCak{2^0;v!C_xQ&g&_1xE| zZN_84|H^(g($fCC_^+8Xq||w}tiUV&B&V}O1|o12{D7&E^Ak-sn*~Yy(@2%)xTp8O z#X3KAfLrGyomtQ&fjB;oO$7^ge2y^vbf!zg1G&xh#lC_!x4vw^-F9e>a*6W>b;zc4 zYiQ6P%R9vVb1zNUX_U+Z$#G(KY;-)+W7(&L)E`uW*5yIh^}!e;)08iWkdIo=v&)*a z>K^Ka3UOFyJ@~#~=cy8jSPdllZvK`nM#QOcP{d#Owqtv*=H3UUfSAXQ6*`VDD1j7q zCeP4#gkWTBBad^BgD}o#6|MDqgCuXZ)LSmc?}>8_s;{{|W+<>zR}lS+TK2tEx*NU! zqVjDptNyut*UL!d{S~OtJ1=|{x5;kK7Y?(2B(mrG&*O4E&+Z@dB9ap$&!4-m4Xd0k zslD8_Lo`19#`>%&{!ny8?0yg9ag*=1y+$b0eUK&7@(U!5NpQ1;C0~eKtuEWv6zA=* zw?+n$X&T{Qsn+#G?2qLNSzA0SsU>q&!BcwSDx zTepC%R?(9!u47IQww}2%{P4V7XXjS;T3qal2m;yk|ySu4yF{S5e|GJO&7xQ3e2&59 zr}pVX$okFhf1(h(ezzvo!o7;hp*4(=3z8mqZ_gU97#SH^U^Q4)^ z$LODaL;_9S$2~o6vpQAGs0C%2*tj_J5jssBV=>#F_1hk2fs-#_Nohx^l~2Jm%46|} zaDR_1ei;(TE{jcnJbU~zh@75VYcNV(=;Tj*epY)RrC~UIH>rCt=hiAI@KbnP)+A*( z-mBuQPH9s8IXfG~U4B*rBW)iOS6yo@)*{}A2n_v?j>I;1?vd!xM~yDEjClOoo*1%Fqqz9N`HFb^CW(u>OI%BE)V z!5?1_#1}GUk8ekzhj}{SEk9F9Y-*U)|3PL0HWtk+VAvxE7L34ST#ngrE+M{dJR`K7 zMgNvgyQUF?QSw#a*2F@r)LF$L{7lWtR-U znh7UFv*fsOazOVy%~WAaDn);^j6{89owoxnljnC9tg%@@>ce}GYL_7ALbAznjFh+R zCp(%{qzw9AO-XyJ5kIRI$VjI)#qal92g!bl;YZKWkhLZf>iDnS&JDJ3r$x^X#LC5r zHi}{cQ9lOqto0+Zfa*}=Mi2TOcMZhZSY69@fr`ia8(*8@SzDIsK>jraR$S^~oC#G8 z@QG@CD~7_zJkcSDR88d7ZL+hpaoWM^{a>#v{!M*YmT0N=$fCCJWkl}5A zcYa%>nH$bX9DX`*k?+LqOgFlRe<%*Kdky2i)Qq1Ofk5bP^6h3s@9CUizX%-KHR3g2 zkG!sT?k8*(2zC`Npy8K~_yx0lVD&4!)%{=Ymn3e7Zf6#b z2k-wVc=Dt_td7-geNX%qJ@>rB*;?yZ{^2Sc@Ie~GLY zgsomLg5oDYwxHQ_BbR|M6P@L!)^rf_>Dt_x%cuImE=Ek$*ZOP zf21S)T2Y*0e_s)urq^xURG6n40t^wx$6?Fb=hRlOGozAJUVS@Gcp`}|C?n&;nk z%!CCwbrYNUA8H!YbeQ7SQ%i7H*v_+#BCwlyTu;PhOKJVXce2~i^bw8Diiz9SPOr6h zHPEi&m@Y=#2?m5}+J9{HB5q)uf~WUP_S)HZhmGo4LAfm_3$hMXV3Vr}+#vd{iydN? zt+?5vN$0~#SRpxMbC!e4+e|-VP%Bw2d!mL(ts2ZBhXb;qG#LyCXkt`3OuG5zQ37i< zLUeNUeZ1?Ij*KM;Cjsubf~QQ#)HX)h~8GqUUd{%N&sgS62Fl*GXaT1Nk4y_E-`i5ALqU?fO^bmP#~vI_zrT%=4=p{ z-3H~csplkV8jQNFWIp}tM2>tYVF91jXm% zCz1$F3;5azMviIqf4v>1`o)jADWlqVUsyhZuE2W~WS#N<&+M&n34fKkVC}eo`=Y;c zx^UHrypCu8+INIybzUv$!czC6y6+CXOg@n-!ciZ3Qu(#k9DL3?Y{~VUeCUMMd@!nv z47!Cg$x)^bOHsGHgO9v!X%7`50;q{C7U@QWePpctCU2D%UiDGIf8x<-smZ3 z5(hL*u69(8Way|O`L=PqbKzoZ*jyx!VBMc`t0(q~1yJji%T6(W=S+FW0{i}j=>dEq^aHh_ugz)Us6%sl~k zO(kQaQXByd#UsT2Cm`HOO%I~5Qg^~H!Q*Ngi$>oDS3CEW+Y~k$B?ylT&+qolN+Pm^ z)IN}mZ8Mf#36h@LY1)YBl`g{)WE+vuX)Ubahx!j8S+MP)l#Av64u`&OX++tF_LsNg z?~xP4zOsa%u=0?RF~mOPM~`z1tlasKQ&B145i92vtr2IlopOHt^FVdSy{qhpOksYU zH!UeiBB86IdS8N$89fFd!XrE$mO%sUw|%yTRY@mXc#MQ)wfV(K%W|m3&WHU+@{2#{ ziqi~s-OzG;D`!kvoRU}f9_unSuSy$u z7dQK^K5L6&XRs5Czk#WzUb!zdYBvV=$FLQK3Qe@4Y*M=D6@r6Q7i1ocAG(&$3W;t( zhoDon#JA3}<0j)b$7Y^#&te1xrC|+}V)q+om2Q)rS%MmyVgF{df3B6N|9Y^^vkY*+ zI10G9m6f56!`!!NOyn30=)-m)tqf&mTTiXrUU&apfqEL+01<15=z{aD7DNWn`5R)A zNjsj+%?@s(4v$vz`#cBzHpvq6is3!>xKlUt*}lB19k~0~CFw%5nkRz9e!3f#gl|TM zM-VyL--#yW)sNq#xHxMlU__nsb(+yf6P)S**o<4G36mrrIjdXO4LfAWfH%nChCS%-|L3g*& zKT&DHnuc3}afJ9!2r-kiAO%9EH<~OSwZd)njyBpZ{sDsQrokMAsFd{>U7@W*bTpP@qbeer=+}u5n zwj*@5N&l>PETP(kr|GHv4jSErk*7PIf%U*j6`Ub-SX;w75m@1*L0h8mbxl@pVjdp@ z6B`dohAm@39w~9;uQQ4uxiU0kuyRI%+qfAGg3_=1oTGH-2%qUpmR@+Bx@<^B9_8@f#DX zid!KSjvPH8U>VyW9l+h)jXzAxZ<2@f2)fK|k+kzgLK`}>F;9A`$_$^kytI2lAGh8p zS>X|aj>#zV;0gzHjB%;T0WK4PL8D>}Hzpqu&`G3|TpYwbg=oRx=BP_z{EN%<> zZ`XMZoJgbd>|!3FFOkhR$2ndP`eNJlm5SN?)!VYY~8A<7;RtO(jejW4=QrP38-dXz@Ken_U9*8wb7n1?T(UX3LWpQ`H8D2S z6Z{JNfiz*X`~B#70WngFll_NVUuxEzycha~Z9PAQ-nx)@b$OfTy>v&t!pH$nWlzoX zi9_Id%jTcs{Z+*-_aMs3&FK_wSJs=?C#p8$TH?3zAj3Jv;&$bSD!_&ri)|~OHT8Yj z@v2<>%}SFsQ^oT+r9b0uv{+Q@SY;Q|-gcf$j9*$xv0yw=G zn_z0Dkq;z%0vbHd{k$=KjoP9cS8SFl<^7HhcKB1@G1AAt=eShvJ>$Pw4>+6;vC6vy z9N$gK&|xVIYRT&v)-83tC#Ui8z*6#-(Bm>Sur2y3Tii1WkKTxV@H>MpC51G1X_++i2Ve%jQ-h zqr>yXJA9wcezY8an>*d9B|7Qla_7w6LKg_$t00!O>3GAT;vkaja>|(Kk5N%|-cz6- zc8fABokmtaT9SY(ZjeR9ub>=UN|d>S8tck!+)Ch;;id?b{i~{leoY)(dg&ofWP@ZM^cqPP76&cPu&m(HM!Ko@A@$;d@&Q>>w>L z#qIpo&AL?4TKCQJ$GJXE*<`3kyLhJmi^ZWz#YQFg(n2+F-e^S|5e}!>9QRO2)u@+a zQVgCK4I+9)Cn^Q4K}H#vk~R`P784|rAW~Mzb0I$eF1!_nZp>{qMzcmu$cvxSfP%AH zdPB{(^TN^`x@4w{qz!0WalHsQ`QpX-__lI8o4rYxP$X)PTq2PE&L4p08jf=1yi(8e zA?kFkX^-o%^sg*jOWr-YLm$dtnsMWp_@*-SI(+WovJmobR^muM7c_bigORO{;`gp_ z%S(YIs&Fo3Z7pxz3ZJ&>OK&IvIbF1|a}4=o$)uX;febF64Bx1bok^1PWbl=V11k6c z=T05fX=;gF?Q6nwyy!8l%4R)PqxDWop?9JYAQ+Fioygur z_f_m7*MvLJ^2}V#6bMl^vocXY-nzd|IuPw*W}C45=3Nog{(g{I=9hh-S7cu*fvz~> z7WQ=`HrX*XAW`&x@X>*HF)@XHO#j#EeIO@8uJI(@q0G|-{v9)FO{=Q#pd@5;f-=*{ zGk#AhB{+ckeE8h(A8b8q*7@|ZaawC|ucEN{su@H(`II}6pNLP*Wp+lwDGnvVP9(zP z%hT*;5z8}w>)XU4X6&B8Zdmf-Jy?}UlDx-Sp_MR?krw>~3f+xN$vf=MCLjZ$sdL7! zC4)B2#^361=m*?lIw-m%3lMkJ0BYKW05W&O+6K_*rOoMiY={GQPYFRC7-<=iLOl{F?Gq$12hnlUq1m}ELcnWz1%;bcrP-y zTkE~GD`b5EycF~d@ssQPndbGqPWnRyZ(+-Ab(ChT~qDspL?sF|gL=+Hniv*@%V8`OF-mhF=1bk!5 z^BR9!?X7TXf`MH)5miwb^!~aCXAJWC+?Z8(f*^`TO!DE*bLsLoXI{YmJ8t6+qMD?b zz7UU7<3=BPH~%0Z*0CgIMLphBAM*9-gls=24JrgLxQ8wG+8^H6v&O`Ffmw{Ezz(+; z8@fChdXd8Pes#2j5S)NjR7(a-G_HOWXyb7oqNXD->vB$7w?j6DO>MPn^0-1 zQ66d`_Sx$j|L)VDjNy>UR9pq9+i-|a4&rTyCjTXww8MA%fN6Pf>YYYL*XzAGZ11vc z6rq%oE%rF&T=!<~cO3irBGYS<{Ke?vm>_asb2`2%-wzTAgREatxVx)?LbJP{ndOK4 zW0%5)mc;wh6|Oa+Ki>n)brO(yY9O_$*7mL2YgU`dn|W}07RYFZS!pBn{Q{H6htGUZ z|FxXQ7}ZYf4${T=+OupfhX~i@GJ4oP2vwF<;n#zLu=Y0Yue+Yn559j;_7+NR>v}a0 zNNV(qF|gzEnf3XX(g0+a2W8GMeB4wW4_woT@+hq8KRn}?)9vN1Tq{q_TkZ}VPsHKk z#>XK9nc({v>vyX1gW2gn9q}v+pM5^B?rm&UfAu}qsx_r0$w!12sIzsUaiuWq*U~g&)qO(boe!cYJbCpQ`hvY*20)z#g=4t#uha!g-(%GZn5K&*xJ%Fg!D3) zKUeK|2pIg|D5eqBD)Sd7DMO2hJvV8I_B@I4n8~P+GR$I7pFS0Q(Y44$`WeffTa-a; z$zB}Ez$`oNyHr4mTF>QHMlP~E_MBQe`XEj2+mMN<+(_@OMdH^J>It6~Vh^QB25D86nNUG!cq7h(DITCpeU^gla><~6G!q2u-X z1OahnFh$;V;b8;)PNti*Rf8)Yx=Y%1KGF7p5H9l|;BYcY$=Sz|nw0cz_*0|xKOqVb zC7Ez!LVkR@>Bf(Ve%Dzs$fzI4$*vtd^OtBO?Q3!iv2$PAn*>E`Z{rdGF7w~oLQu<# zDQB%apjY!>W0#=FsNat9ng%AoIAdBIAe3qVaE;}Oub|eyn0RP&2A_X-&G74P@r*xx zN|6+djAWnkP2~y_P3w)rTRM){9;13+OV)-06m^i&N=(iFOw0k0?T;g~n6T>@5C?oVTvJ>(7r(v7J{S!+vS4lo%kP!JK67p=Vu8+;3 zA-iM*W4q}Bxa2Ra8XlP-D^lcf{m+Y6s_;=r9w&k&p>pPr;8gI7PCCIbGHFzhi_E?s z8&gTw=z25C^aJ0JD}{yXTt_ZuE}rsSRp;$UKaN1-2(uDaB2N(8G*(x`4QyO|Cn(pB z{b5OL-xK&Xq?S`J6H5oQCS}_$me$Q7Ry*ImbS&(}8*GXNdh+>e zTE3-;y1ht(X%aKF%N1naj7Z4%lD&Ev0fFCk zQMashi0er}Oy^lnoxr^|KO&w|Y1Y}jU327gm3QIGL_7y)}GLT_!45xidP(D_;nR zLB^wZL(P%y(30Kq42?QC?7_gR(7wZV_Otbr&|!=7qor()5hz;B1S?9h4)XbXarfXf`izS=d}VSUHjcQ z*o@_}neABRy&Hj^SEaz+m$#hq+$&^pZ%C-cDGJhpciB_>hrReP6R`&hdj4+?yG670tv)&QYWWaJnQ&%b(u)Sr$= z*Q6cF@Vvjpmk{M8%iWWQU#rdkDhwjI3{@I`0zcosDtu+lw-P!9~6|PY`1~tdo!2jBD8{ zA;6Wt+4S0?Un}7R;rvM=(HnaNGT}c&^Zrvbv(6pG4u0$n@#6X#GrdSZix=&ws^ zipL!CsW+**f8cD`iM?yr4os#tbro%>5?nbc@0nof_o9!REG;Te#UtsR4)-~=6GlTz3eMzilGqAjLKP57XF#%53tis5FyYv^6!e6*-4kAT0%Uqr^mo=lhoZmwX{P?> zk(1zEWrN^W{;_!RM6in0ixC_`GL6471FxU(G+)dqQ0Vx}F$b)L^{`sTJ2TdvC}sfD zIev9EYPU3$<5kUG*h`v9RPad&lNg|s`ayw0M7eCgua5CDUZRIZj8hM%M*yRM=%!s8 z1jK;t!q@}^^o!nPSUZVJ8%J(Mby0|ChEs(`^~VQ@oy>VRYd)*)An8*hT~B8Z0Fbo) zSf5*l5o~J(A9gV@2fW%Om$cKeuJ{_pNlr1GZ#zgESgdQF(+i)>#hnuRvW-k@o~aJG zo_$+p5j;k2qbT1S<*^{#OB6#gNciaR`d-3!ey5wv4nAGHC$lM6(t~YvSF;fb+>1(! zPixO^)8e;KhOWWb7}ty$=WV;@gU8<)1Dn+cMPpK5%s5g4LckmUDNRny2fI8-)^(1L zL7-~g?8vmrIImSaJ3})6d8X-#Oe%LGjga&nr78g?cB*PB1v6nvGJisUE_{YB=yb&G zQK*4c%uw}Uw<><}%AXH6k>Gq@_>eS@1n?nl?Ny{Gb`s%|P$F|`06cg3+obSsMll?J zwsrf!kJ_IrczQxt6F|Rr&in6OGCoXFUzUD*7M>eb@9tWdAgh7_%L{d;Wri76gsk z{lgA$(S7NnCJNQnYoD!!%D8b*&dkJa`?~|I~?e)GM8_3Q~=z-g1`?(Gg zVoubwJ9AjTd^tD+FC9;RGD?2n<8Ad9Jc9Y)V#O1l|1UbpV@B#|;FAEA6%Cj*hSslA zSr6FVdjIN@o^~8x^i{+-fw{jUt{%_qj3-M2n7Ik!6ke!D>_H#|hP(Y=qs?Ndq~ytx zb5{Gu{N!=0##=^z%R$lmN8;x{$M?o{_7brRp;BdUTF%!UPW$Mes8&<%_`1$sANik= z1J9SA*|xh9;;LH-_U_}>ot+fBHV2+WlQJ(h>m+`X1>nQjf4D1kz04E$2if2B_XMwK zB}l?l5)@LB7gIT9Z@AAmA6j;c9qRn%Uq^EdeRovKsG$uA%>U|KX8EXtT+6HjMx>3m zprEV7|7k3I-bykSbLP2H&u5VUKznZ~8NZd_>Y7AQiH*LuhaUWVCY@WlFMaw=Z}KkY zW(%w-v*SFtCt&epeK1$!yf8hJzEAQ(ZDS@xk308HDw;ys&zZ|x-cMEX2Lv!xw_Mq~ z41Mcv8%0w*xMnm692%+|^!8l}3mPDBqnb-EbJfIM9YqXM>zCQcW{>VaG5aB}?aOMwV-%%j1c;}`$uG`xaWzk^5 zOn;RRM;|#Eiqd`Bc%kN_Gg7SwYj#K3IA*b({gInB+j#{OELefjJAK0RNO??b_^z2= zPn3f+e;TpaHB_gUx8L)uq`HjgPQ6sJkw#uEt7#)JprQ`UL5L=`66NpczZBZUnFef z@H#NIu60a~$wmNcrJ6P2{pJ@5YqEu^%IrEiP%G+K_Pljjc)#W1O-Kz$`EKN1?gAtR zmCO=6sK|D*4jQvty2$iw4OVY<`2Gws2s9?hS+5n;fCczoynC_d&{bdeYeM;LVqb8B zs%!$aXT8mIMpSwW5Kj>N$LnZw?M2!czq<=8TsGGc?l`!}W5qCYMOUp`IOE$}m z3c9O+D=bM@KI>(6X{9x0)%6J{zPaICNSF=!Fwf#vN7>rYy;}Y6`f%QgWWQ6d;m$0} z4wFRJ6N&DZDD%Gm%Kur+-ZA$&&Gqd|O04kkU%@SgLo5H-%f|(~@~~X#*C$VA9!i68(V%`S38tn!IYa18TrffHD(e8}9)~Gqseq)@_3J@Q^)^Q49~`4M;ww z0vIErn_qS(6BzsAnAm^-p`gE9U2NW;x;7ie?+1cBIWQMDt_AN0?bI$39%a6+O%75M zVz{0boCyt2bOO{7CjY1ljVIoYgau_IU)qPr6#|Y{(F05o^Gl=viy*>_f=C>~9U)R; zAgG$G9E`X%v3fhZ?YF*y!)aBOG~=AHE-hEp*Y*PNQiAZlRG#4@co@+C_@)(dtJ4#@ znRR#;^hacnFUg()t&15vYm#xDz8UX&CXtLG?b<~QANnYHzv2Ay&&5lB*k7Rz5_YlO zxa6Fti6gFEcj$0BXf~(SpT^4!ZV8st{kYmVC)2*L+J^f9{1!# z+*Sj<#wN^4W9%AbIQZ*dD-3KzqUq9AZ$zzS@`ukB#Aq&0Eo`ZT!6TlhUQ<;^T=KI{?>q!2M+p zM8IZ)+uY4#5tg*~gxjbR$|y1dU0vTZ z^7=~r<+Kdd|DKkC*9_#<^O8=_IsCo++ww`#$d{p{QE9cgR_Z57!&Z-J%)g&qQKhNk z<`gGR#%NDIR}o;IEx~ZDK+rRI*?V;pscR9NdlW=QDq|6O@lTm0*TY~bvzRc~M$hB- zfDr>@4N4dyIDGNgA9x@4&!d~Q?pFSvd#7n9DAQfh$sn%CWZ{vJ^E<-{v$PYN)^RZE znL4M(LMx?B|9x6=x>0=n0@j7Zj#xbKSz7J;`v@y^r6ySqW@s;m1Jj!~1Ow>=NXyyy zM*~`siC{OL8O(C8d8vwVdxG4 z>5x!bQb1tnPNjvRTT(jS@j2%_@!|b8Ke(>_Veh;4z3;WweNR(kC3#(6j+lPJo_R6E zrL!iM&uZXw^&aK%-L{x&`RUsB!Et|(PG@z!lJAEf8%K=C8{-3(-ELN7c^^XBBjX>i z+az8<&UxM!!!Klfj#};Nn(#)b@@Z= zQJvE}_l%m=gzl__e{jDnq0L(@QV}!z<;QGwEC;WWwR!+EOb$8Sj7hs9w}$(*+n+nq zYJcCPc$Mb6i`H|kRB>`Q!>44ghF3af4h=Z|PL%!n<-=pc%oYlVR)#)E$lF@W@&hj6 z(#Sq>_S_d}Pvw|dCU?F{^=meg=Lj@F^qALiN8))+07I=IlxX214E@j9NcCh1arShO z`tHr-5H)^8mnSE~46^WA&=A=Vi%v1}k7A|X3B#fPgp*>XO~Rr!SVCGJQQ>6k_@wtw^TK9OQc8Za70kBT)ilX)b z(F4M%UrfSMz6`IkvBF0YeVulpUrr1REZ;=q#VL*<5SenYa?I$&tao3&gG%dR7p`vq zDFOhlTeUW1qM7J7)rj{*<@Dv@un}c;0E8mybV;nfiGvp+M4Kb!jtHe(%|+&UWD zG35~?i|_6gw!}~osdk-%BIEBuc)%c*=VkJ%JRj2t0fsp2H302s&9{rNZtNvGar+eM z+B1|aSSr!Vy>RX+J~m+jHQ`|*WBjjl!$E~g#&m9nUSerkpiKkB_MI`#{z%3(g<;ZUgKdb6ew`Zc zGPWBp8bt|{6h~q9ql2Zz@a2N&qx{4I7RcqLzT8tOK7~1*4aYD5 zbV+Igy?KdSsKIHxq``?!I{_d9N6cR_z~%Z0MahM2XJoHce+f|b-qU8irk-%2T8x&-6p$att;9lP&9=K3~#W~%;V=Z61 z&i&z($hn&Ff++b8=r^k`=*<3BX5ibneM{HZVxStX-c}|nT%=oW7e6vD-LN)~gvoF0 zm<-oFN3UzlLabWttJtjHs+I+lw;F~L3-U=(25YGYZUm{t;7pKPk+_VN$LaL)qaXDX z4HnEr<-~}XWFbeUv$wE%K9@*@Cw&YtxBHpDwmEvA*ki!x1kr{AI##{mPJssJ;juk( zSWn_SuBEGk)INlS%v_Kc%*y@`vZSe%#E2BDIHV?wD8O^tW=&|#u~jLZX9{h)awtGB z>;TwVM=e9|o`tB1dK<#!N5JWZs)txuJfF*T<)2QGuTs9N#eTp4z;BON6g;h3elT(@ zEpn~R5KO(J2d{wZySR&6&RWf1;dgRA@k)J?M_bjD>z;W2QoBw$&w%5VERjnN)H+BN> z(t9_;_Lk}-G^87ro}W%+mm!ifO#J@yLZ$5iC&*djfBlPB1A;K;EOLf1h%&yMzfFKD z=MHxkm(wMO2gjMWkUn%gOhx?Rv#Y|Puga972o*?x^?Vu#O2pv zXOr<1t}hK>cLd_@>S2g#tomofmM12-UU3B0NteTezV6tI#OKD3L}ooE>uF( zhDKBQsuu}wuzXQ0{R7Zrg6OViqH~mkXoF7-w68vxK0Bv3{pt(s-kA27Qlc!bY-$9m zJKy8}o|A=#u7{D(X-glu37$6##Fy_04z@J67KmF1--C2gh-Cf+(qx9l;5|I-nU*v~$m!g3~M z9ye_{C@d2QJS$UgQ6s%sR2_$8wn^(LVeX{hr1*C1twA-aCl@F{k=r)8O)U~KHQ(;T zV9)@CB-NSbIs?itHOemw%H?boZBL!%waHO4l^MIzrmQ%&Y@q8<|A6qDtz3aMd;(nj zI4mVHa@vUC0(6s%fcb1Q@eEDP7cF{6lOY}9@9UWLb`G%?*TrzEy=GKnghBk!F1eYse6IB05gogXMjgX-Rkwo{s1Pia14Fz=8eQ~$Zl zOxZSgOmv+fI@TW;O)BeeEeyOk4TdPA(W}Pu%L0`l*1(JKBXE$Nw2eJqEuo!lHS+1h z!fRE{*4sdjS_ib8<0QWpclFUjcpV!D^XeV;pZKefL}#=T+NbY#UP{a6UyqdF@?NGO zJBC-&qv-|Olv{vf|N zi2*@7xitoUidTn8uf8A{9!hs**N0Bw&4wouuuri;Y+&>7jkpd^%_Nur=Kbh-efRTw z&3e}u?Td`7m~|*M*>;w6xy5H4rcvhvlv|xMx#XA)v!RMK#yu}wleprTf0j+;_9uTk z-dv?TdinyE5J3osR9NDjMqFMU_wF-+%Zp^YO0lWzGRW zKP&Hgm7DgYB*AphNgTb5PM`we(b=ylvgzPK*w z*z$ol?N}<9{w!yenGc_~B={>`0#1s2f5g!g=EIs_nT~jD^xgNUst+C*`(Cn;S|zNR z4g*JBo9=PDHrh62*t#ER>eU@6@jj34^3jFM_c`IbLkwPA?u-nn&yH|LS5l?{xUgkl z0_B)*1dM^5;vF0ew)CSH>-gAzs{K{NBe|ZPN|4l<)H7HFj29K0X>~rf6Xz4Js}dSz zizWw;*@#m~kn5j3;vsj*kUm?rTx7v18$9%XVL* zW4cw3OprN**3!+c#Sz7z5#cO+deWFx*&CI|rQ)8DiXX*HqBQ{!%^s;vb?k9}z2QO= zB%$Jp;f_l*fLI?=S#6&S!Y6>?jQ!J5H~{*bQ+s-B^7X^#4RY}9DazHUiB{e!hzr9I zH4$xO9FePT`^WFdcQ}SjDIy9t^?sk{{nZ%`IKPPGre`tHBbmtQTS7Ol&A7ZHdSGG| z7vc=+AhT>`eVFy(4J)==KULcto5zT8=vpMH=s1L7Dr9Qq+GD5`?4mPf^b~RzDPvdL z8(mL@&6|6@^I>kIJ+?-d5sKQCl^L|&;~6Lv(uhmAjD3bgCG?T;bvl!URLEq{+?2){ zF0)HR($O4@bT1I3gtvXp9pBcG2nFvj%?@F^I!Ob``$Hh7A#&@o{X$oD*Q>4G+zh*Jo#-7k|1xCzo`1VI>*|LXQ5o{C-@x?i9pY zdt25~0_{PYaMx{@WXF$9XWJ!kJ>G?_u2%18ja7jU&gxqJBxB?uAp9*+NRF25K}4@% zB!WLcfhI!P*w(HvNt$squt)KglLQmj`@t0ZUJ4OJLYv#blGm)==HXV$&5BBGXFCQ) zJZKNpTcyh9(#>-vok(pcy5YNVui>WPn@4}=bwB^MEAa~^gUKP?)%Oiu!)=vdr?42j z@DAm)xyFslyZkP;5z&HAUrF?$sjm+>917J`eRBhezr5MkGgyUPjB>w(?2(tdIw|?u z2n>HY;D6JNMJ0I3T(_F==5)YhmE+SwVj=Uu8XSvW+5a`&epcw$Tf$AFW+q-czQ^GH z1@_NQN~VX;a_$o=bU_^@IHxkYdjmdKQqkWknrzG!QE&6#u|DU@IvF*nvD;=lNCpLM zvL;AyE+$)Gv|rxeQGtD>nM#QCIw%zH7D@DeM2XpOAYZvsYnjXR2fc-xw&rZ_LSMj+ zD|!m%l{KSMBhmW7HK-)tjP#`mp1?brp8z;&d>MXoLQFTf6kdK}NV7wPWj1pj^=rKO%~ zDqPTBO5M?FY^YvYv|(TfDKB>?lJ~bT{|AE{SxLnZvHawjH#bUj=KW@T<&5z6btUtC zO}Qb{c_($4F(Dd45ViE7W`woLA)^8TIU8a-=wZKNY1x{ZtL>~KyQLY;H3MJHZ$K6? z<`_6S&8|G=_10&!n6X$WxE5I8Tm7+DG7p%yK^s`$-}4(D%c75HPp9AM4=UrGojEb4qJeUgi1ou&Uujw|-X8 zwYH}F?K#%0^U`PLSEw0|g7k|hiD!PK3Np8fedwi9x7`xp;BlGEol;E9(t|KB$ zFq|*fBH7keQw7!Dl23ho2+QVneD6{@Q@~?pUc(%ub(r|MX90hiI~6@Y2+|>v>chcw zn)R4^O{|Qtp|*>BrG=Bx8wtB!uW*}fN~^_b`LRuUC!80kfu|-ag9Ug-RXkw1zeo=g zSobV;u%wS*%L_43W1YD+W9BHVnxyjJBTLc16$Q!Iv*Kf5EpC1<_9G{*=+^fcP0p#8 z#z9v@yFx7hcSrh;Ul$Zu->Q*zPf#CYWE7mtDW=#r*$orNQ649LT~@)cHt3_l%a$`5 z=g)Y@G9xE*?@}21lV7uQf*%k&30L9LU+I`_GXoPM1q9P8=o{e92{s89i^Wf%{!+=~ z+!*$0dR(qbBmoV8hW!P^r5=BPGP;HF5VRME5&m3zOSBtZjm?V0sb8h5=HrMkMLYeQ z0l7nt2#-L1iuUdA0)iZVW7OK?9y+@&`CDr=cnNxf&Ni2eek>oBy&^q?nbgXWVXpSs z-6%Mf`z*uT;qH)cfM8=d5ZB_cY(^$%i#@vKJyRBmDwX>R^Z2$M%?Ndo+ixNz!W8ph zzSHFe-f*#WqCc_uEHO9{RKTg>O)u`uEk^W_6R*69j{FdNbNrAC zp}MI?Lt6sTT!3z%wSWKB?*YpnqRyu;lyK6MMKr0$Ju|;Qmpr*u>o`jpA$sOB`plH| zDoZi%M&|ZZ$4436fimen_0ZrY;wx^44Rl0sR{3~p3m>46=U;r_ll8>Xl>g4Bws&~3 z2Y#qlCr|~*ciCQg{>*SU4g(%}ZnAb<<`bm+7<{{s$^VwTX(-6Ffdzv|`ds{3$c=@o zL-zbjV0Kl2aqXcPr6ud?NL?o1Q$#&qSpQhk-GJ{1C?T#-uIqV_;#<8!(Li4~qm+~s zF&SI%&4^WN`r95#GYC5;XLsYAWkpcOMuLQ)HG|){&~{y%`7hnS10N4)^`{{Y-(y$v zo-@?Cqj~h@#)d1tfQFqX28iWcPUy8A3pUEsl1src<1wch?zqy|I9t@@VL_#Klsgc1S5#D}V6^lt z*0@NoTBCx-2jR9%lOT0RSYXz#5oCb(y{gmQT{1GcjFM((ykY)yV?`zQh-Nr@ z$0$i>^vCt&XH!AZ7sA!Y%eMlKC;SaDW6-Z}K)=P`Z*<%-Yi4(vuC@}BWQ4j09kXG_ z#wj@Ykad&!?pu<66Q)xgo{xPj%a4}opunfTK?#0pejMbklvCCtm2Y2Y9q7?4!Mz#H4An&#Hh1cfAv&TB3V-5x3;lQtmPS9P-Mh2ID=yWH>kjdK zg}9I6L{4Vm@(eKSF*DYnwBR|k&WD4&Gu;#3Vdo_eGZuZcM;ZLn4v5nCWOqe;*mu znIfLSS+2_PD#Rc5=T_}mysGTUa+)xD5|Vz)@*nwrHB=)&T{y|JKdywHhD9KRaI|<| z1jdptRy1LQLdZNOj#~j;-I(NUkC1fNfx`DR<|)zOEM_~0DC)b?pf$aMARC}OwrK`G zEQ{!2QAUCl^535xGekTR^>UOeccd?~4p!ED3Mp&;xvxiL|#zgfNc<{8D~k{Hmai@i3=YKe72`Nn+R{dOW?Q1Z_zZ_n-c zCC&qeMVHr%3|c&;>ta45k6m+3lJpy(yfLarinm?%j;4XkmSg`1LFxSf)%G8G?{_ps zg9Y;U0QBDWSR?bUoE{l<*8SudD7Td!)=MrL<6}PMblWoyG1&c>$MKiH5(pC82}gyJ zm}@?&WH%_StJ@BEHTC)J;bU-&*jayuee&`RTYN4b7CJ9Ywaa!4bp6#M+B|bw}1Se4yj04eeL@r7x_KDJ}~S`9G9&)e6y!ZFJX`) ziCo7Tf#DLO_o1ygG%_-9SZUPBb`_^w0PwOLVhNB?yVhCUNp zBBkn2RD#i14uq!l7{h-Wvp{Drf6G4CK?$wLZpnckCe~`nl1>QKAEQ|%4wV32K8I5S zB)`VJo*`w-bh~-=CssqL{*?eB;XNN|o#=hs=8W4NfGxFD24nOPeH}SE4>v`-6 zH(Qr@iDB4n11OjOI}OxfV0A=8RYdWDB8Ofiv?A^+mF`6lb9p#2@@qQg0sr2K{+#-Q zH_oQ64`fz)E--NXPJe0n`F4p*KHSo@3wvX%r+C5;w6govOrM6(hSV8*L)suzrX_7ak|ExgNN_AqIlU@x+?m9!=cO&=0<%*MEOhctu z{$w^n#BS;Ca%ESti~A4wj;>_xB};=^Y1+QfkYs#xos%JaNRYrJlDw20u6Q4lC33&D zDG0f5?qn0`h`v(RGW;qLGDO31MR$KW!B$w*L``j0$>)KHXT_)bak$5Tr-I6?80OGNEM0EJ zcE!NBXdU?K)8*S7pZ%dX$Jg$`L~ExX2R|QnrPH16hHQVleK8*N`e(~Qa@i#EzX!@6 z22?wXe19wC5N}4GQ-1yxJP<_o&~YjSqBLY;8erSFQ|EZ1!@su{>Bh?@hBq5+3ax!_ zVU0@^d(Wd3AH`ECZ`eWP)y#&-c@$-+?oMp^YTTRAz_^s>b6S=<0gxaauuB+F+p&Pf zt>eBj7C{{07znKQEU;HPDr;LdUZ2oI-Pf*bp4gP*Z~mE(eByiqe4)pDy~N?L*5V#$ z@^Ih(HuxW$)Iio5BZ&2APPwa#(McX;0uwpRM$gHTXJqvAor=3 zY_?Q*V=8+13wz?K`{ZNxr(FL|42dopW_<+^*-ycJqIQSm!sL#f4`cE8=yy@%7jgcd9OU z!ZrJa^0<-9d}|xtlCSye-UP-JkO@kP&fP_rw8jzuz%GB{7+9FNy?dcClUwUbwKRU| zIMV>Ebz=Sz!VCs0VKr(<5S}v2k}jlcNJrZ-tfDyNqx#TEOW54+NU;jA!V#V%+VP?q zoTD{Mqb33h)-YlW42tX@oQ^ZSa$R1x!&bAoMUgQ~sHyJ5RPy$V&wc&Jz00Dk&$I$Z zzsc!lU5G-gsDRr`uE6}<4)kdkU_ZSA1vL?xC9rb=%V5@Q?jk;jZSC#soU{2M1NDX! ze-Tj`|2d`CqrT2pdl-6(d>)yk$ydizTQ4DLSby)RXJ#X-wnOr6TpGcUTrky=q(fF} z!yD=$K_*zV96PE&p^m2(>LDy$&{yI72CtJxk$p4A2}uu>lj=-c=8xkz!J$xN z-)+Jp2lC8tDLlu86zp?v#wE+796I33KGEV!5w=Tz+3GrOM>2=M7g;s*e7$dm)?0v` z6&xJrdl%j_p^b<=FyXL{3X`1lQLq>$)g5HDV1&Nz<73+sEyA1`6PwAsK?(3R|AmMO zuOoBpxd!aVlIiO#Y4Yd`M2v9wjlV-;lY>~fr@Ba~P?Ma=aStyVQDd+p}fsp&`5v+8rN*%)Lg-TQ9}JII>eDW~l_a}!L7G7Ocym-W=Ktr^+eu9^}G z!VCYgB~2h%#@@wT6aU^;_K=tf*%SZ4| z_sHq^{NDVRdd}fbN7KB>VtjHy`oHkJ`4$i`DVX-ZK)o2@E3#+5jYR?ZK59yyo?o5C zr_3$c|Aym-A&i#W$GsNBHqpu9(#Xj=;)7q%HBCF%5yLIWh1HU-mBu~6G*VQ#dcf=4qSz}3 z_J7?VhY4a~(=?yRjqDs=18rlnYul6)0=$yV=b$Y?{_IXzzDBbQ!Zm=qPs<%=n1@wv za;3!Xk13Wf<|5GKlj?DueIgW$wJ|tZn9IshZ&-}jE8LXb)Ea+J=z@+;Yg*xn-CsGc zB|<5H(w_}xMx7pi64#fXzb#Nmz`~8uwU{gavrm(Sp;cbvo?;ivJAkm#^N;^=r9sC~ zrZ^51N3JdR@mJnONkJthk7tKq8|pXm+%3a^=<8%7% zt8K>CA`%vT2OSUL=jdwFPnl58Pd|OEw^q>R_4w+@Jn1bbqoUg1Dbkhq1$YpM_t@Bx zSe2P2px04z_-tIJGgr6cc$8>G@ugo!2`)D?zR{76$revGdl}9oR=WM6@TF~DODDFN z{5ExL&ewNAcgn>LADWzHIKMS1KE63HPqH#C^(e1&l8sGsdb1~M;~}=6y+lsnsg>#6 z%^{n)K=ji#7Mx^Nw2qcx4vA1u*XG3q(j;4%)Ce+AS&c^x@>Kl{qW7izv0IvqzWOei z_wpO{YrhUjp)?A{(*7D-w2V^-J(ggP%~XGoc;6Bdh}4B5&kf7y&6pYbmX|gn@_08F zG8+%NsqJgVua&f_5RRSKu95S7xii9yivpDG>ze`qTzba!;9z zKA&5^kL4r6eu+*$C|30mmI7Li!v19))h?Bn^LRRVpC?mzzDU*1B`zy{FBQRK_Y^$`bur{+h~tJ(I}UrnrYfRo|6z% znb<|5P#WXL?yk$TfsB}9Q#FN};RhpRQDi4Hka3_NYsO8qlXgzK4OWk=V;EOpDc%xN zy0bj_1D3>!m0D7zGYMJ^1oBG+;ZAKpT3=1`(p=rlGs(*|6$xckT>-`>ECD$0s@*f2 zv%7ze!bk*QQCRRxW}($2Ux#4g!BOqwB9buPbuLZF>Yc@EmIvl8Ar z@+^Avjp7_bhM zhvNbxV8HdtdTxCU0mvx+{nf-1C0lN=h;(MNID-g(z91FA*S|_bqT#cAG(j5=@NN$6u3y8BbyrHspUlxzz^So7G+g0 zsial(%^|Vq!04n&PR46;VJ-Fwmq`}lZacl1L93~3y%~gxf)^LfLvCxkd<)l?aQ3;g zc7+63&KzDAb_g&lJ9`SrF|MuZt`LNlMUy=_`GeD!=j+QCtI@b?2mtjP^l5x`=NHM$ zK|@zJdWIv0-7bf3Xrx@6kk=3n?R;1(`IV{iG-&!ak53|)%rd^BQNCvXx!XWqxO3X zsh)JSzrU32$Ucdcej@si##N(j;&mE)PCe!*mwZ_Pp7_vVPn$&L@L|^4q)=zwqHJBq zLxGDkTSAxRv?6`pGXhI*brQ-NtrWY=)!C`gvHU`p>(M#T0s&yisefkZoz!Ba7UzAb zK<7;qiRLpl_(9~nuc7h5Z zNfbVWCs$JhPgZo4*j|j-3vg_eO9DgK3oM#1bmxz*(3t@(TO_Qj%WV_5EbE@D{u5$e zUH7(XCpk_aSVV(?BEK|vA^=JvdW+xWk%r(z-Yc3I)-Ypm-1fdRGRT8%@K8W?0CK8; zb39P=KOtK7;^+Q+Ir69zxpP=y9Q4ElE}qU&okPchF3D@U1*kn!sCORN{OfSNFuK)= z7`JZtTDOwvE?1l>BHe+Q7;uYQMm2@^4#1Dj3AkXivgt+7mdy4d=Q_OConpl1J^+x? zGO1Xt8Bcur#)v3(5=H;M^#`LrIG@o2oAvg4ECC#wf)*dD2vZ2{Nz^U>ha^o|rVVM0 zrc6loq?C6S!G*ojewbk-!U>hp{S~_Wg>civmq};vU0%|kK(XyRab0fo z?>X)YN$=1_{WpPJUuePyXPXOKr{(rm z*`|=8$qs)hdgo&>t;{$N8gG>Et^h8T5LD2)YUmn|Na4QFWe2sCx6-k!+xer_dT-c2 zeE8ia^T09u#k_>bb)M~E-khg=uPZN0KAPVW%yi4?PMEZ z;>z|MiFaZZ7)v_{@(h;kYF4C8x~t6xy5DAjnt}myO@%o?8Qit2pSOBOJ1RawT>GFr z0#g2Q7su1L>N%S)*Jlb>Rp+rN7)f$GVaS+Q|52jeTP&23%8F}inz=s0NklrI&-S0=R> zz|+_g&ml3G`8b}P1a+*`o1{4PFQKrwPbvPiWa9$UCf;NKLd-~6$R`pI=z^TE4x!qG ze8qrYr+(U>j+n3BqCgU1&$LszF?AO*7;^I~O0hraTE}8XLf?ZSLc~l+JN<^5r7Ho7CU}3j>Il~$(C74Yv<6!c+3aWN!Au#8N9-}1&_dBDa zBEu<>)&cdeKFp%*q)8KW99%4gT7@QG@KE+G;#zujG^c_ zWtD3_QJSedH>}$N!T^707jR#ZB&YTC^0GKj6tN%Ap$36n7QXg1E>HC{;t{5rl-XV{ zW8+_2qpkRLx>K>gRvBAOP~%F4-3LGw5+NjHx2U4Y@MtIJw`%ylY74oUZH#ElOgAHe zJl(NCViuUFx~i?WQ+AS#%({AZICe9`w|4T+@=P<~y1xO3q=(f2Qp=yA+$o+YL-xKb zNjxw?^Wp95#c&3Lz+KtGG_EhdWuprW2ffX5lLE)N9nk{;wCG0nEEd?FxdnCKw6MP> zS%+{fM$H;Gkhv-X7nhc%R;CKwWu3Onbr-{Rn|%sC8zIFI_KqA5|OnT81r-KY*&1m|59`I{?F8|fXy z$#5JKIfNs#qAr-K6$f2~#zqAbiG*_qCBejJBw`#?pKYeko0t8+Ucq>JT?rwh$>9gB z5IeH$rIbQZMqt?3kueN^-Gve9H*%=(DP?CeyV_|LVMP%zl6pRZlE<}Aq1TY_t@Ax`{pH5B%ct2+8wMc)!fA9py(R2KwlrTVN? zqRPdopzI;$i|hNrkinp~%#dM#8@^(Tck{uA-I>^v^TdNFlvU;nhVWSM5AiN%t}1dL z=2O$o15UdP7n1n6iWol39J&(}jFD4ogm>LUz6}+_-Lz)AwOo z8ShONeimB!8%I*6U)WY**NgMKppIvEB{g?=8g-p5hPQ?hQcw$)twG{Xc+;EWMrZml z>LA_{Rlc-&fU&hhDA8vOa?)l`(546jZyQ;%zbiJ^rQP~CMV#6f+46OVe!_aI z`d1TP?7ht`u)JMi@NiDc6jp100WyBn)^OR~-Bom814zEbCDNXPk9zWJaIu4lLz_*0 zco!73TEG`5ze#uE5&#%RJ#p)Mp{QsMB9I6)_yVCv-)x2Hw+3jc6cex|SKus1i;@2kKiPwRcndDiu|u75KMo+kdYOxL=0YpkkjD5?0r9hR*h_>$Erd= zYn+@Hm?n&cHP=@FT5J=PHC+-W23pRJU8q8S(zL`Zy+_)ggde{PASXA)%ko(m%(S$; zlJG*{vJ$eOsi>VK`)}jAoDIsP%!@V4zO=pF&!r-L`_IgVx`1>Ox`J&Czfh^B)dw-o z4vMf1uG2hgReACVRzo{ed4dR*S?d;SMSTKg)}NfpETqCzEH}&>75q%q`U3j<38Zlp zaU{>hwE0s_4zbN-W^xC(}eo zhQ48UK)w-0RfJ-f8$|(x%~R8{1S>_$=xtFwGy3A15L2Zq)34r{DdHG_5}|QRwb!G1 z8sO(Graa`)u$icy_6RbzYq@w^e&JJ28#&l0e@2~1qUJ;OVfnoPhZYs%z*UMfOATs| zEuMgMA-;hD=V|BFM zDrN7&*uX6~NC}wN-xUTskllP#q#gWEs=RTwt+TeErEpj8&)FiOYV(vp@|<>G5DaB1 zR_gR_`ru@KE7F{#NmsKOcV3rLhMZiaav$R@=WbmdH)F(8Q%{n(D`pNpXAE24aEMUan zhdI&sTNx!0MIxnB`<`4Pbv9aO`q`bR(tQ?Zhqj%}=50@-$9lzee@AVi=Q#629{0e| z^p0A})f5FvqW&?n+FjHGc|NN~rM>HDZ>3gb!BEAF5q2c3Ux7UQ|8`;{)m<*+zKi-n!?LYU%=G?BX@!)aM|Piy6GcX+oMnZGsRt3T zQ&`1t?GvXaCG1{%12Sd{8yZlyO2*i^lArgz)-P4B=F&6XS8$3BCq+}^2b4rynk&L>7y~++fh)NGk~kcm2tLZt8qW+rDoTI3MA9c&5P0X1)6ZgrA)iw>G0MV5>}{ zJU-Y}ZYCk{#+S8!bb)8Ed*0uSO4Oace_}Ne=e!;{Qi$Zri1@poPGL=ssZ9%*OSaiA z+0v7gw~DK~%t0j+7r8-xcAJ=SSv1u_UU>b<(4~yUop`2OCdJICIGvsZn8je#g`I;9 zo$aNO_0gkXYq9+$CIC>m#R^d3sTr;rXj}oPYwlUN4NklBBhT|v(=QEu# zJ+v#>j4J;J6h|%i=m|-kqkpAPcdAzukA84nXzilO91(6}=jnn&QL<_4Y%i6iu{3GA zr4lU1G5!2&trU}GUqZ|S8=r#$@kfI8&67$G4)pU7^6ymu#t96pYzZMLT6cZK*O)!XER9 zUTM0f{i`^J9bCjT;gKrMWEN{Yp3dR1lcry0BRf0o;;4Jh6JS(K;SNi-xz(9I&I-pxFs{xbLWPbm8AF|wxv-7K&dPk;~no_dG2<}xXkoej(-N!UT#4%RHDciM{ zr)j7OIRsFM)LN3BHo4VYU5NB@%Y*G;R&^&4HMe3Gmlv%FKj^MqmRx>=v+~`r{6rPQ z75GJx9pkFjR#!uaJyO+w|B05?abFQ{acX&6#m=EVo>jCb z4!otNfr8o=(k)Q2$gqoEC}?REpM(2zgYFwTAK!={T)dZib%V5K%Hz4UXI1UC0m_lW zZ9VeM9v;NyCsSzP(wsQ}4tAetFG1TW=AK4;B_NL&SWBeT>dJo~UeE#U!CvLFB!|+msTF7T2!kvh!iiZ#!-CUp=?-mbl#J9jAiffgzE%gNSX9VkbxM?tyq|-14-_8Z$u)c>+Ug%?KW_6Dy)FQY|^zD}# zYhp9Esqlj2qskF5WDl#61eoJrEkb8a+u{w|NfuD!M9$AO<=BQ@YTd3^I&>W%GVkx; z*T2jy3*zV$*yKlA;A2f>??Q5%8jjk1L(L`rrH|Z`L0vd;jQqVzoqTrKVZCM>M=+&?US1Me;RgKutcpcvq-{zMEskA1Ct#1EiM9XbwHX1`>*joGY? z#bN=^;wRT8n`nH423Nu2Q0dQ;4F7gbtjnz(hxRa&h-y!Q|HSF;vv+_y8a;-AlX)RU zMYiJdT2!)W+{qt=jPpm1ZeQl+)S85v>ClgY-kVE7FU_ZDVNKG7Dgjy+(sw1UXsNT@ zH@Iz58(~Aogq=kn9Z#J#vlO~+gE^Ks;m%|YcM_9RD>xzMKxO5*0)1)0@V?io$cY*p zLQ?17baG$IY@wv;-$X$Z($vi4up~!0k8c=WznBjLDtrN&%+x!X_2XgZM06N%JkK7%RyYt|0nLi{6sYc1rCsIO+6I$`zR4n}&r`sJFRBBUj1glA=dp05r)>Z#2;rSWk6 zi~}s^AggJTjHodg>x%CEDd^+dy;}Xzm5y#_)Q*~GL>zUowl{p}jX4IUQ>^P(*IQYu zU9zC!#ETEoGjA_LgKYBWMVqZ@Ia-1~2d(Uq((WUX351OP;Vk4-`7h#22@Ae`P;A2) z3ufHq@%#<58VraH{ZRTE2Epq6M~kvZ2m5B*CspgLZP;us%l>fC->#TAP|V%+;73yf z_c<;9RsecX?Nl)s+4Lp9n1JHq2jlUe&ur~xcvdNTNi1ebOs>4aA*?z&q9Pv&aC3e4 zvBN7-ss~O=>&KV&<8<(V0Rowm9=nwEU#& zHSSX|Iuh%C7>P@GnvUp_%-ue|Hj-|rCaZK$sIGOr*O;P|k$;c|v@9Ipxc#vprg8X} zxcJ%#VY7oD^0#*=YInn4y@1oSkjn~1*ymWm)5!v;1 zB3}Pej6{;XSWp$f9vmFn>HlRn7LP|jyX z2S+;x{5PA|l*e)Db#Dxi~cyE&EFsz4!flE7(?IzDhcojANqf+3v*% zw7xoY=m5Ifn1iuR-O$ufjMNk>Bs-c8Z5k(xi*}c_)GJKdSATW52sG7~6L^2c#2|uB zoTFXWHQcO-iHmhx(Lq8BO0-o#xpE`69rw2KVScm!@PfCwK=XX;84iG@EKy9gR9yHXk@w*?24B_j}aNtcuykhX^ykAGVk- zGEcGeYUv`hW0FnOD);&gHlh6Qz(4GO=OYUQYjqrhWbzUs-znmcA_>RZ5;q5=3pMAKq8{7+HFP6Ih zdBE*@Q`7h>i?Pr)Y`$UGd%kw~P5$96rraL%efi{mg0cK?BZoLTvc8$*4cd1c*o9$k zQjp`4h(HzMSismrB1H=9sPbV8A#yWS-*H9=cxRh{zuV ztzfg%U(8?=k_bd2-GYSzKug=%8@cEa&IU$@Q^$57ROkPb>36Y%f{}%u0%Z#yS_YC} z)$)9O{ug)yp4+niP1De@xv2OTQ92BT>^D>sKF%PmHqt!?$iR@fN+C-j+j}?#yfkU98X}CtD+N74kaOA+cfqzBR2O z{%bGSMk2CqDYhgeTeq$--7tq9sJD^aOZD_>3Qt&Mkg1L6%+`y49&dIrm+y@6_j{{5 z`x0Y+TSZt|i37t}-KNDW4;p+7(IZ3N27W-o#u&eX{MPFBz`84yPz5{SkPn-<3tTR` zqXJ=_9JHM}IPzpf>-ga*EzJnhQc&6?mq`BMr??$b&t>rw!-25y-B0O*lf)bUn{aXF z&=8}ajqKcJOm3=Y^tu=zD;Lww1PzP1w`FM|ji3cgD-AtE&_<@^;8?PbrgdgL%7dm8?o zKmQ+FZyD8Q*KL8e#oax)I}{7W-6_Q>5~NtM;10#zS_-tdOL2Dy?o!-?ySv}K-}jy~ z&basf${5L?C(qb>?X~BeYfg_dSQ73(>v4S;o|b?4Zs3gwMaf>LfErk1fHAZu_Z4Qn zc-StV=6B2gbRSxGHyEOH)<8zM+4%zaVzIsMo~+vYaXdZRhC;u{Rd>$%aLot|T;HGu zJ|9eqY)t==ZJIsA$kYM@udjHpNs>tu`CYbjeOl+M5C3T>rJj+IF%@98v!O?SWupg~ zB%R3yT^K(+SBBTH^Q#%FNpc)z^uzpv?&~d#M_G(B;_vnC+sL0EuJHgttmUnr5kmQ^ zJ(6%tSLdg5%@2xzMbib*LT0b>0 z9sLl>FfG7uHoACyw`;CbR8eYqPz^YoVtg$_$x26Wm zzf_KgR$}RQn+Cy#^*!^t2m#F!7rLs$Xo9;J$o9g;WRfLk#sQD~%bvGExR+*pH@hH@ z;^_+Yw;P;{89DEy&0WoOynUrV=4F}&1t&0q|Cp#zDdz5kCHUY0cQ|FANkEg~p?5)=ms6y}s~wSAW{tl%~}j#mB6F z`1A3(4veyPh7f@Qb2iion0|kLDyp&s7GZc3!tz3H;*S4_^<{{(NML?8I^=32s%344 zM=H2q`V0$QDG`O)?Uc8mU_hWFh_w8b!j{}>nspVeH0%p(d2KpF;r^(o2&tPh2rDQcbV0qhZ0qZ@@O`EO2@E#R+QJQoR`uTu zv$8n;9W3nha?Piw(UpXoEZ%^h+QT|Lt7t3JsIdNVpC$vT#wU-q3#n(0Z`X$jUhv82 z+%O^8KLe#qMJ^)I=vQUI;fD-Brsx52C-#1h0LUj<<00azfO`Tb&i?2}?A*TAxcAii zX)|h?8#QVN-2uxqX^yi^@(RO=7h$Ta82bWQ#A0Bc_q>kw~k$VIYGGZa?sivd`%V^WC|i2A8!FJRwI^ zPiA>a#FT?xu=9y-Xw9i^z$3`;@t(aHno4tpLAVT57l_+BqeOz=E}^yN9`sfYH>3uU?-_xF2rCS4sZAcd2I-T(dbw(0ymvpItv&TUMY|SCDz!Z7yi9xmU0Gcj%$fz4R1*yQZ$U7-cU>?MfDI@UdIB}VM0B11)kL|Q z?$3Nf$t2xWp^XsMwSh`~_>)EaXt9lwG1H4Ma=Qj%vpY|X``!JZalT22OzicZvpK)e z;>-SZL;EA>?ta`aATe45)-%AWeBd{zakt=(S9bzFz-pL%<$q4_>4F4I?)9qx7W6Ya+}9=l_>dZ;O`YA=Fc6xb^NAYTD{5qz47-Ti)l^b$Ri1uL7MltoQLMSH* z<_aD~p#`ehQjHLi${;w8Iw!@%DoxsCqzZqRriF>srV&lbu@IHOR^p%Z%IJaMse!)? z(W6ZD$(jSBgnp_tbnnSorI)!4LoK>W zM!P#Z>z1#V&R;Ak#qCuoV9SII14Bh#S-wk#$PnFMi8YB`KUQE3khLx7Y;ja#vy}G#}z6-fDh|I+#(=>KvsFH zC&H*80q>+7j7iv8dkoZ0{v^NfWd+7x9;KN+J#W>-Csq$H!qQh3Hv?)&e6+5=x8wOg zFBQ-GXT8bfFpK~x!5mD6XR11@EXoB#W#eACtV+3F$NfcQLNZ%heb@|}(Xqr{&@ZA` zzdXqc5n#NX%;tm<3RDv?kGiXF9Dp!Dud#RGzbohNJ?+)~YET#_Ty&>#PiV$p%uxBq zx|Gxg*^QDg3usGWZ2#>?vbf8WjG*v6x*q!DKK5~22#J7QcayvH21Lir__?o0%AdUe zhY&dYjRy<8sR2HOnuS3PT`d6`_$gA%h?msA*$Vx|whvFok+*di_2!HDFf&)tNr4BL%NEckkcZxu zdc$fQ3{H&^&lxr=0(Vx+`ambA%}Hh*Vd`1{IzAv0E>P+{%qu0HHqX)4i~aZFaXup5 z*m1f9jnqf38ZuzbI;Xz~4hBYyy3R##JRUx|{D#=G3%96IrP}c9oPgD;_bCSCYM)0< zS2wukF*9iK_Xj$9JsyCS<-iQ=&=8tLgFr$a%z+SFi02j-)1dm}riRPq&Wg>jio;4+82lRa+rmN= zc=_w5>~-&VLf57zkzs*pP$VjcWDwq%n^z#NKBz1yE>cMw5->-x@bBeT_=y$j6Z_8< z%iZT`5Lfv(F9unC4|E8rV1x0we|=eK*X;6!H_u`V_Ep3BmQ9Z1s}i?v700LHYSp52 z7=||&T5*C)G)BIGO(?s8MdTKNivNzy1nT>AeGvgXzrZ?gU={6&(D4iI0P!hskuVyH z$fW&>`~lAhQc~7Pb2@g>N%2XV`B2LGA1GaaDZYNbfL>i$4Wzk;{SUFiCkg*(ERB4_ z&WjxuIIaW+Ckbg5LDkl=0UH_#`g(Cy*5p>U4$`c1ngg#2(4cTPBx-AsZ#iAQw<~da zH5ROnmg(B*`<)F6wamq!yK_kbvb(wE<-jVlKGX9J`VXvuTOHNasDp#djVH~Abt8>c zn_T<33bU*%wkARTr|m-WmSSr1P*JQM7}G#vnUSCKwii3e^Ll2E_jGp2Ue47OgOn__ z)<`AKi?_fi0ZL2yBf={082n2k-TfL zkCK%Lz{))dFf%g9dKF`4vS{KTDm4v_sEZOW0{G~82k{%@vI%914+WYk^E!h0{+n80Jt%9Akt=6^4T*{Axb4=DSG{*XNW2PYKtk}}@uqU5aYK^Wt$w4hPb zy?euGbdK}lcl{;J2Lk~?NgR0HybpYSfTe?k>H# z%`bZ#{9NPTI(Eo%GSa^1wA-z=>Q(#_bKX%7wnOU1&XpQknka*vz)cz>h70iV4?mKf8@Ri;L{N z)Af^bUm0%f1J$HhOjlP-4Y*Im8JvWQda1<*+^r7*?#71P^`}RHR}G^aUksPkOi?%* zy_q>0ElD_9lXYXGwmcFjU_{gZWn%t+3D`;tiRh{JCWPFIz2Slcd`$TbWLg?*Ujl%# zo>@>9vdINzs4#VNlZ+@n>aTDWWjSd{QcUDu8j$Q796KKsgoqm417k-C>Z6qi!VZvv zunf{pa&q!!q1bcrgR63f8JE=r6((hEUERJqasj3P)7;g-0{YYN;2=cL@>)(x3I@RH z7#Yup_SxynBV{LdKOiauO>9yG$;j(|`&;~3 zzt{^-KZSSNY}3UM>x|`C`+T!2>#E~+H`>3rKMzvdU@z*Oi&fTMy6Fg`PE zInXq(;1qIm2EVoQ6K%-la)8PaX7`j6)J|BFQqfzxs%|138EyD@-qG=b_dtHBawT-5 z?{Sw<=t?L(+b;aHKh8+)JpOiNiQ45TWt2L7AJ!1Zb$a}IJU0bg);Z*^ov;1PXFqKf zc!xkQihzJb`+<0p3i*9sG}SsjgC@+q4}kzr-ku&7v?y#TYN-J~B>(wS@jRHO=SBxX zRiZOu^&og??^hEf5T=ss>9~iFT&niCVMVJ5k?68g0YOSav(w1hVQ z1ydhnDfd}@3r>^nxD+0HVC!a69&)U7d?_0cKjlMh)Bc-*9^d;?$x+;g?1xcM0jAjE zhhRP-1SEaky`#4V8PMCukm(7I&kvv@^bYi7-UECfI&2_c-EwQzO@i zjQN2Uo*c&B2QPO?;wL5M7D|`AK9Sf;QO6f(aU-^~dI1)pl z90|yE+lV|<*(LQP2rxa}E@8|6knF-9cf$YjMYR9uEF>s{4_8qN4FoU>4F#r*C?pb0 zM8}#&aY@E@j}Y{Y8}Hf)SdgDCAu~yp;*-#-n8t(i(Z+*_(Z-#@vc{cayT+4!E`!@6 zH-lH(#*NTjH+V>14f=33=HXvNyUG7ndYWK%@d=`byp5ncdC)$OuO;O?(M`nvRZ~!V z$VeihDgH?W?x3EJGCOq58_HOnSk2Mn(T$~dHT?Ty<1>6>s)iIg&6WX2vWA1-RY|QKikH%QKZ}Z47xs$D+gI`!=eQ*Uh{xIgoLK< zE=qPwQeQ^7c)}$M8Mv%DQ9rQ;Nr$phE(QO|oX?Sj)Q#Kf;H>xU(mGC|eQLb#C0>4T zDy70~Xd{hVGE(R~u0Ra3h7oZ|=H#>a{{r8(thzqXqp^3VoUsA-)$gftX0stYRUryd z%9O{g{}(CxpGBVigT}E>rN-4Cer4d??PRdi98bw5E+py{6re<5085dMb49_J6D2R; z!MFDr!zIx)_MoS5Z%qmp0)6aTaVXe0d28KxTjsJXzy)`UwH)!dTA#K1{r_;%1e87e zOUC+d*Cl-ZkBFe<NGZbWB{R1_bzL5A!#= z2VTb2H}y+v{J6G=g#AERM~T>4us4CUF7bi~3(TFJRpo8qH}lXW8Tzdc&U!mgVK0jk z@(xso-Sicv%|V_N1r9|h7E9fgTn*TSY@K5e%cQxgX;a^@@|9I5IeahrJIeCw^v}*t zl-B1lSLLgB0=SEKX&d4nxy+fHuL!blMqQcGj(rl=XB*nH!X-_Smxstvm-~YM+k2jw zhc5BJ@LY;mVJ{p&&Q%%qa^mD-A!PB*MWA=mA`h81%-Q?HpY?O&s`Ucca=t{HY~0?~ zO|Q$648kE=vhUhuHpdy6ps>p$b)3zx~Z<>n2D?j zmsA_)c;Ji2s84%uU=Cbdc21yuxs`?B1YwNei-({gT_9T=mc6h^7=|y8-ZJHxy%&$_aOCOfF7_#5}@`?GPffiX(lAvRdGr-BL z4Q}d%#DkRasVl;nYN_UwYyP5Ls}KucG-uVq%b4eTWzg;m6DpF%Er0B?Q@#pa?yAmx z*Z#GJ6a42e+xtoR^GDAxRE;^i|1BmK|EHLkjCGk4CmF1-b8*pRUw~rQ2l*mRm;XDMFp;q^-&4pp-19RFyn1Nx>%3%d9B1|5ygI3GWp~0RkY|mDp)MG z#Cn>{WJH9u7V!^g_e9bA=;%L?`8>jC6lpZPn-tIe^MOfD#gqbfgq3b9H>LT=~=p^RLb?CDtgkFV_%@9311>BrrI@Yh;O zt6ZVwhY2#xEXQw>${=X%deW;N_Q4N{kLGFnulC@Fh18BQVLY9$hGW3nU^TKfNTO@a z=D$Uc0D5D)_m6@yDhLhpMyfcBlcMpLiGC_2d6^$|-@6)&clXsGCYwKMv;5Qmb^esB zAK^mA4zX6{>2OR%%Mjxw2l_liil9aG=K3siaxg32+34K@?ef8As2_SccFWs&>vVOa z$>rd&W){JE#Sgc|Z$3YfpVc^!6W$$svI*^jm{_>({f*ZS0JQvNgZHTq`MwI}XYi5| zkYsu0@;qv&Da9KDhU|naqE`>+X6a|puKn7T{%99GdwTu>AJbb7V1JB~=BHoDFGAnQ z%rfQDdVa}Lh4AW-IaSVcqAXyR=&9PWEY>SN1q(BuKr#yol#L(%m&y32>HyvXG{Iol z1qls!j`#%Oqws@e|LkU+Vk zL#{OkA^mioer*Vv`WRL*)=unFn_W|eL0)EO4mTsb@9nhrX?%4PHT90 zwAS|b4f2T~ja($DEOB)YBHEKP8Q%ZCWsr8``CBYG3M2wRv!C7#Ov$cl{h|XI<-`){ zW)B6?>w?;y?4jDBmHyO>lK!7g6{qNt)9i98 z4}o?-?7dX9=AmEBnFJiiDed#m)U~B!_Io9TuKCJ;Ko14rjD{SUSoX5nzhpK|!CLLZ zp%^hgd)jhGKNQ-L9KMw&;R&J{5cpSQqZCuVi--j>{NJY>xpKt~?-O z3KERa(>>`Q*tkYW1GF8{`uf+dKMcA$>EA8qW+@tsv99$NZ=)y;mR1q0buQj1 zu`W|dk2nPFDm(W{Oxe~(#98abFA@> z-VfJba?EqIbtlP!mzVGBhg*N+--DLE88#x1AKu83*!|e`V%Ey3qSETHK{mB@nf>SvwgvNiYPxAq6wYhUtRe5I=NOIm>C3#Gk0ywG zUz;sz-SQVxtR+Ac*6l*1#w**$g?&D)yM6QyO2xpUXm^R<&92~GHg&=WgCUU7CQf3v z)4?u*RWaCLEzHo46E*`LJ&lHAeIYQ+Cs1@KU4xzOMa?xTxtACI^02@x9imaM4~$8D zMOGk1Q8!ac#r|tNDUtmuk5YwOZ5M7_0~&~XksPkq>wp`jGn2FxTxgLASCew)xuF>7 zE4{xwfBI9g5x|(y8ER)zRPG?|t5JhnPIw-aS2EKnK>_z=IzZe%Ca%C1yOg&p9R004 zxtSO-LwXh#zdWjE?O?jh-I0fU>Au)y%GhPW4g>Z5s8!NDDRowM_FJtPEh}5wM5n72 zj>7Z8@QIu`MGghgpVEKZXF_M%d(yf>=1nPHbz}MUbWZahOdqL(>#MR!u3ckDSzqqA zjb;So^_r6OIqDZ2`leC(Dh?Ni8cY?>GW2$}OW|mO49DV+IUreD;R4hzcz@k$n9U9j z<`b(}Jg+z0;d~u#hCT32%PS92m|XUi--O)Ze!J_bB7Rem&b9w{b)5#AsLHIfD(ji| z*Kzdfs(Gjx%l$1;{9beHNfT z438{b>Ev3GHf}a#Z;H>(25*uaWKA)*!);qkQoiYdOU`A<6O2 zqfB?p66@Jwfm3T!Z&(XaGPHCscXhXx3pNoKIhehJgW9Z{NGhbL@)`uM0L}hZE&V z#|diM*)2~MC#%vk6%K824ss6NQoNjk4TE*AFKjb%M{rL44wfc4`z;-NKjuM_83d0Y zG|K79J09w1rJP}%DLsZlJu++IhY#pU`mU_RRwWI0=$gkSxA75@T|9{URu?wCq2Hk$ z6~}_Cd(XmvebfQa;*HPk>u%SUFZ~RAZ~;D>51{SA_kQ&iqSdVkH@&}C#GP1gf~}lG zr3?*o3v6Eb?9)ljaJ^#E6VcvH(VYl8Xmbz6iouZAzA=Vo;X-6{2q|S6_Y_^bUS)-K z*nMC9w1Bap(wEAi^HzyPn=fLv6LC8hT?ZhgHyd%1M?)#oRb(ztrSX0@G~&A4n~n7I zNN{6D2`R%Oxxk)N=-Vd;R-X z&DrLe1GIy-J>)gwf!`13k@8OK>GmwOhZ1@cILr=#=y0<297q~FFmjo2o`K=P zFGo&K=86Pk55z!|0?LlxtC5+}ERr4B^gut%iBmX8rG<~XE!;!f_gKGi^GyNw3UL)y zHQLQ=Rb4MBGX&M=J>9g9z43Vi98UNO%ooHgDO5EVH5xh7+^x_(njg}>ZSfY=p5%6& zv!m;KiDqW{B0k3mR<=bFg%xlFHoIL!M6n}vv}a>wI#8kxQ4}=G@$c2giVO<6_x%l` zx?k34Mq*UhC2L7*4PO%E`H%xj9BluB!aP@*;L|$JF2+eX3&CevNdDXQUvqlsZrhr* z<3@3pEF#EXzkdDNGNk?n_q%O5Tn_q_r11ss8b^ia&N9O1)$6wl?|jvloW?G$`a9>{ z3It7_9+uaSQh5lev*M0G3JNIIHEz@l41@}LpTZS~qzz_`j+UFyiiOM)ngmE%BHaeL zk?0Ww2S!E`o0GVDpGkmbVaLC3?h3v6oNm+pPdDdrH`hI=)gB3s8l3EuKtK}MZMVuw z0b76ef9eQ#ShxJN2H`a8hywNdQ+6ml!K_vuG=x8SmHoGNTxSv*dt-EZzQscgFnRpe zKR2_{j-lcqg5yDl-sq19?q?Be7aR-oqnycJvl7H)>B3^1Ue|Zng{C_E+-$hzkVuF5 ztF1F*NPZ?I`|5aE^5fj^8L83vUI6D4VN6aE3o<3ag(({5(~Pcv9f2gCc(TLOc0*l0 z9&1v$>?aA7n^|+{c{o}8oLY3Cujf3UH`P%0F75pf0q*q(8}NgIe|MzTA6VgK6Aj0} zWujJ}t>`HOzCNKj9+ovY55UxCZ%3aI?{3d><2DHgd0^D%Qs6by2jJ$mtfDCAND4Pz zVVV;QDVbm{HSiQk?2hy5a1M)^xfmI3seG5M#d>Oo;tb(hT1C;2^pkJsz=l~Y!3o^?}celZrrHE$~r z5ky3G4sUxC-9attO98%VVN7ZNt8@I3EP3!Oxrl#jmw<|cpW?Lj*SFo(g$PLQ?<$sN zIHaN9RYLu7S8&JjLx`s8PfToViB;co&W(LnT)t-#otr%u9DDe7QYC6nf3{O3wVbU~ z*|f>^;gD++BZrM9NZfWBzjWp6R(Y8x%|9RA11@V`%^~g2 z3m0v30VB&!c@#`@m(L4G?~L2^MFe1A=lZW?q|JmvB&MXY)uYd2-H`Jst!J+4EAuqM zd)nwVfswiq9Tdm&2oKA%O4>+roKNL;p8xbGnc1z|tmq9X00e*m80>t42JGZ&)#J2i(ji4a_DwFQA_o;8Wr)qq>b0}QI z*ZKNmkAvbuIO!O_vEO|9m!lP%h%9fAQ&!d1ip+TpH%47>^~VySf`#6P>NpB!O%D%< zWtM-L^3E0&I#u*2tlbxD_lX7UTjP&t+ANySBer2aZ-)~Z=X%HL9$DlKFG>%S-}Lq2 zFQY*cqSdii*|mA-lb^VW&sSAjxxWytQfPk@WF=G6TnLVAcEg{0d+&NZpSl(cgX{?a z(cuzg__0H*huqc&wmw|eh)LzTM2QvWPRRT)d3*1i=Rb1~Veu}gm{PL-_>C4#BsF4~ zESE5uqUG!GJ6Ohf;J$s)kMW|^^g6OGtuF(t@uvntcKbsrMMb43EW6nbcY~3B#EGx? ztE|3=$%Pr;kkl(A41ahZb)aU6PYj&;+^g;omloTIYpIC%Xw@;@&Sd4aqRN>6WMVp} zt|$TsBA5@1arV9};~tGN%gzSS91U{x#|_Vx|a`{0y+8U?MT+dz41w>&ywz zhTF{F*UoJv{}`pDjMz1f!!RBFlO9@chraklq;tism3g%blp9S-aiy?$ z;Gb_~GZI=}Vv}!M?aj@yajgu%vebILxVfiX zky%U9;UBgXye%L|ByHePmZk%V-U_+LWNNg`G6?ce)NAwCPI_&Ec(^Q7nX4}r;|&*sM>Yua2XEi$6i*rcz}t!y`bApA}xIj!10mg-F`NWw3{kN$+k1$*WI6QY0X;`-IQ*@ z9(Vf(ejW{b)~yCEShDv7>N z|8seG+lGcosUIjMl}itt)&N`O5Kqwat9|1F((N8Q1w2R+OPTO%@R0p+lxjqjXcJ%i z4sBRXf~8X;KGS^IN}D>fnOsH&T&_DdvR?w8`1cv_IubLXiC3@MRqGd}Ynw^W{=JQh zVOn7D<$6>op4f66*+u|lyAyArlT4;_B~|}ioQ+HMZ(rg&rPKhD?U}nVP0DsryuDjL zo(GI!Nbev2(8(sebG3({#+E%<;WTgVj8$(IieV8-EPPOizS3Ct&wR$sfM!c4Leo1*t&owsNu!mB*-#7KM;mxor&CgR6~#NUXO$wm^6tbYjRc)vala%> z^?lh>L@Ws-QzNTPuD=L7KBEv{4lEG+&!G^Dm$fyTOmI`pHND@8xr1Zqq#6 zQW5WJ@XjwwlfQX`0o!me2~9w&ga6}Fz?J!MlFbJRiO#$!!ep^{AWxk1%9i7P&^>|} zeys`2F;B>@=H-4DgxzSNU;FXAGZALjA2D%bWDkua@sCur?;=c_ncxD3mHhD{U>`F`{z%s`8IE?F_^Gj zTo9F`Fx{;g6}@%mD8lbKcCy)h)ib#OC)v&oSf|wPJciRKkb9N=eEhU0hx!q@)zNS!dR7(+13>(p34(AP&s&uMz`whX|}l zP_fPxNIagJ1kUz&DoplL6kv+-YiH-nvwvb5-$&@Il7{Zr5Een9M{o)8tr`f3&UV2l z&TaN)y2ec*HGrk}`vt8vqZ3yRt7K@I71c|1f`$I2-7g`FCZvax0yUb(LnAT)rz1LR zq$KidIO+ITz7H~;8Euc66Bxa#&kG_2+dJF2CFLB(v_>bJ6Q6zr9fg|S1a1ca+uj?) z53&5=^BoO6CLRBTX90iVjH)J*l1~l>9CGsbHJ4MavU(#{BrQkH4W0DI4_R_g z+)}+HJUQDwzaFI{`2czs`Vi=_apkF~QK$!r{xYGYPf*uRcq2_gT$DLcR*XA|;rjUN z9lP6ZSG`ZQs@e70((GkUAZAMPVPiozVR*#P#tt@7RMs;_L zLpR>6rA;Re=;4Jnvk^w+ugX(a6PS_y@a?2PK;nqdF_m&e0ZHv5V{&JUcLGsyybPXA znmm}Oh;cqn^h&G#sR;CtCBm9rp0_6o{>Yl(pd9a@0=;@r*9;BlZWjW?(HRCz@jqei z+P%=0D}TUguoWY@Jr*Xnn;P%G&3220QXN?Br>%&f=#0HtoriC&oD~!mT?u2{OR7`x(cQot9a7x(KeAmqqI53uy)&CHftW%<(8*DO9FY)S)Xx*6TSIPRNL{1MubQx&3(SbC8b3qEcNB&=|+3&0^`#nI_E@WnK!Ep zfO_W3t=xex8$n5_nQ`sD4>|L@{R7;z*rmv(Pl5R!n=@{E;3<^5ryH^Lx*Jf|ZS71- zn<;CKgL_Z;_ctswKEB3$_RaU0w)2eyr~VTZxw0`o_tA(rV5vd%{b_=iXPs~^Dd`wk zXsB)K!f5bOW|-|x^*`T8AQ`#$5h$i)NfiM+8pJy*IS`9@&6i?0-ZMFh=Qj<1Qqygi z#gSYNggex>9w|K9<6k*;LIV`=m-w-`&51TNnvjzDqW>xgbGICK5xIJ@Z(&a_)5oiF z+Gar~5!O5z7C+C1ff08bOMD)uKdzk$x(9w4u^H$^>kTXB-EsN($paVmxvP}Jyjj4U z$Qe`X1$Uj7SG@hqI`7~@;6CiKj5wXNvXtfyF<%MelQF>;RhF!=t7E%+BQJGwP33i} z5fcDvD~s()(opf*PNgGQPxx`CeCq^%q@>VUV%aGT%b9+q;LqDK>%DnL$5=RUS3LZk z%kLcK_&iESpseG|9}|SxAD5Ge%F}_$`YB@AaoPIoFU)bz6%vPoZpgr?1s!xMQ0ELZ zZst*V=Gc1Z3!r?==+?<@0NedtJ9oVa>vKY4RRj}rdwpiN;4o;>UzQA#M8ynkz9BEL z)K$9dad~D-TAT>88%^o^0#Yl4VzUrpkx0o#_5lOmA%y+za}1T#bO|q*3q4o;a9Lcb zj7Ko1@T=%gDWG?I8~GrlsJ@=IfN56SvyhdZQ6o3cb;y~&)|C^yK^&q zW?3MyL}L-4<8FtzcEwFlb?t)4pzZmzQSkc9a;hs!#t@LmAdpxh*-V7KJ;ryiMvE_r-Z`nm_^Pv;Mg?m#n6OZRZm_*xur{l8gRHe`gHA90e#kz6J(0PRmY*$GXiff;%JWVfGyAOwUAr8&l@6zz}L^E&!vCFI#mTvOt~z5IPqHE zUU~k~Hd2U&Cr#vjKzi7G#2v?h%)I<;LGJbV`Ta7Ti@6m;=)(tjh{spnRzhTG3gRCbi5Yrbj2S%CT@D(1=I010}tSw)!Vi5u5XJXOYwU9aCuCOUik zg<~m1I+VkErtl`|igXi)0(D_GntrJ0At6R26=5sZC!(xZBm}58VfQmlL;BAC_9RRY zNDMAu8LW*ni4fM@rvf=29vX>_+8iP3D?Y3(?&f1NFud;5nvjq6d(XTzKPbW1GY z7IkUE_f+FMR%Aw>PQdNCc;8Qt_xB9=ghH7s&0KZG^f_pl4`QLNI1qNOBLy(mOkG9% zI4FrQVE;jnO_q19Ov@Bj+r?pN>>!UyTDds6qTn&ZL|wRCkd@%5RYt(W*X?cO)5-epG4-Fl>Yu zdpuzDu;29u8~tT&Fo{Vde=g@`WbP#@>z1Z z_Jq!$?M&6>8l$UQ3=kG!tpP}o5FT&>D0OQw5tym7EDqG&nv8j2_d8AAK;S~NnZ$xm z+8$`=IkA2)#`PxBA98#A#6nB5#lh5O5n zXuTjUHL9VQnaQbWSmgjrzF1A|Q2PawLnP8P68D!X#3=kX6zJhBj+5GCzp&#gPJ#H=8vpPRc`Q)i2CKWxnp>ihJ~+5UUy(2UmSm6 z`;nx&y1LSO%A)o5#HaQ8T+-9$F-Xhm^_b9S$`a|r^=ibJ@6=iEEwegUx5mOQtxQ5n zZqBJ1#ZtHjAi>^&3osokOp?|A%RILcE>uwsxojR{nn$dc6MQ+jnZ^a62AeT#TvrN> zPIKlo3kb%BA{I02#Z)%<9i0&Mo!iO?)oXl}c{3l1eeCb_wH`kp zuP7@fiiQDbfOUP zuxz*AH=d)YKdfr_H-n?J!_ut-9E){m`4AROui;M|e(|tub>P!5d~2d3?MvIHa;?HW zQHD|*_N!6{I%S?=6sC29iS516opm843X&)m0s-~iP*;xX2@;jxnaqm0Df$qciF8R9 zlLUPBK{y~8tU$n`m`+d5_pD*Jlk#)WkB|K85%5NH6&GW4ESXFkRsKYia zIPT2Zuc@S=53V4>&$;cgMK`R)JH;>xm9R-dNs1DJE;0gG0cYW)>7@umoM^;5(!C3gl5-YEwPXgk_o@$S@!i#Ruwp>Bqec> zEB`Ei`P*T&f1s=9T7IEUtmcN#CMTzkHMPLT#FQ9Y^kHszujrx#Q;TtODJ%2PO)oYu zsHFQ#Smm0RkP1`(g3qa4JD3FXb_=Yb(;CPVe)ZxUy*&5l<16+15nfa!mJGA}u9L&k zLYyRW(XW93{ZJKOD}c)L-s}KNLS(YtM07tJ>L(KKkG~*n6WooO&Rh9{Et5 z7B)yd9_dU{pJMnVy%LIYdgzbYdz58i7+tN#>|UI9;vooZBrMyU8_&)(ianz)r#?6c zCwMU$jkRDkn5PFU1PoSjPjS~-pDu`*6>20yCsO>Ip~fYD_CIarXF%9SDR22|bq}a^ zI_lJw&8o5HW1!f5jS*AOIe4UyDe*{jK1n!BDlmUAp0+jSNvmVHYzlm+N7{wU$)~a6 zht7BvGe@6(Jh1#O<$9%qe;}p5J3i*VCoitoD?sev9_{I>#q10Z$KPWYp3X&~^Yy~M zH|SS#b{Vv;^v{{eP2HY>2T?ngNNB7~9CSWgZao=95lP!e4^1%%+YEl`hc>p$ZSJD+*67KgyQ?kQ0Ukjem2Y)!@M2jMW>jPSws$#yP)5St361#$UWC?Ok6ydwIoCsy} z=-4ccgOym~H9kjbh<*+s(t#8C9^kA`N5-GfEk947cOsGiCu_F`8SDAp6)K&} zN@(VFbk^aPWHdRD2#(+9TT6k#x3EH^=)yu!XyNV?**IG(Aa1ms7)x0Q%g!PrmXoKw zt8CamD0V-0!hY;NCGq`R5|fI?7a3$Uxr${_Ks9yDNhz zPhlQ!8n+AdE3MW|HFeHM@d$v&nU{J!rO@& zj`!O-K-gsPv;+n!k{0Y7bKV7Ryv@#Kl?kL-2S)k0>}V|#k*BNBYW;SqCfMvl4Kun~ z32@8bEbT4!*msF)&X;08DydC@VviOMwOsDQLRPI@YhrBUs=HfDM1RWlPpj5THB{Vc zER>zj3!nG=a5QtME(F2l9G!hA#t>=h5BR`XLe5SAOWeHzLjptORaB&$oZh<~%~PjK zp|a@L+y3<3(N_X)20t6tc$MLkxfSH~9rXmi8Lf{@9y4jDMK03A8d=(35{=EJ7%lvp zk{P=TTbnUA%hwaJE*!mr=_=-76Ych?@{_b*mEz_Or(gyFXoa`WiYy`p;%XcdX&OrA`~2uEqBi@RvR4Ze6^@dA~HO6>|tN znGHFtjyL+Li)zgFm2)}X<*hyFnRB`M+;%z51+iR71W9Mx;9IH_2V_MsdDHQH^Tla4 z<}P!WP`K&FR=8nPy_L=HZtZ+Ic>Kaau5elC%=IRH!-Gh4w1ccoF_Uojc6~E2_1u2) zrf#!8~~=9H7d-^q5Nc;^Z)Sl z7Jg0t(f7D?cXyXG2#ju!7C~B4K&3{HmhKWM=@3+q7C~Z+8UoVNu`#+wj{ffb`FwuA zzhIBY>v4CV_ndpqx$632^F$kYuM%#a;=C$XA|!E$JhM_Xq6eH+XzpZ@3TaDeQDfL~ zV+HDy!qyu*fOm5RKuC;2XSQvuOb({n;&T(jewMVueU$+SxS>1|cD9e=@F%v-ix5#lA9XpK6VcSwdOAE1ZQTAAD;GpA zd&bGhT8M392nl2ET@K`;9=z(hDUEoHL|u-Eif`N=i#eRX9WCm>FA5=nhO7+2Mkw5n z_X;I%%{hLLot2*Dk$`TBZ1cbh#$#3j!nB6(6ZB->nuqdgJSK0RG929<*S4oBHfR>k zah=w$o~jzg{By%Ez~p&}9nFDOPirPpRkc*bpo1&89dw&#;tV-sad`kj)~yOTgZCo* z(qbNH`{$`JNwB5f^ouj5ISH|gNPb9}NS^1@xflF^^8@AHJS~0za4?#%;AVopaLwG; z%0vwUAGjccXJ-EzOe7KIR^lIs%MDmfcAfTuW?9PU7^|u_s-j(c@ItqZgSgu%kzB_< zkM--#L4$4BqW}7W^99ZnFHRyI;c*mS#@YtrOEY-T5XudBc3$!yO!_x7lVX17`{RqO z$*r7~P!1OK2q&Jv1Wu+&&M%TGJK^1{ItmfVE!R*Xf^u}<9Rad)nN)FO)D7QQHLCM- z!;Jd{COOy(Ln89&EWfbcp>DAYi_ZD({Lwez?(Zs2YO=NAk7kdQj~2cPW7fA3ZI1VA zz>&C!^1p-4NS85x6#pY_XGw(QDn;nW2&V4S<;424BbD4j`4i1CkGCbhL`njkEM9N! z@Wx$VM?rnYAg^~Hdw%|j82q9W(cfN>4qeN=XHIwTz>1*vf0h*M#6+3qp#o@l$)9-1 z$BN|QiTL^%muCjMA4JXr05Cag!GtkHP(Wd=1EGP-=Tf#ywkd*CU2X2~ImYr|L_Y5S zrg=Q*rbw?RMeP1mQ5z>_zEUSw+^%*!y4yu>5on&HR#fgb*nE*SdadvSrsEyEX61>Bf*VtLF8x>`~KZJuF(t`TX^ z1$EVRET3!+s0v5}55ejdNhAXUwe{4QQ$9%cmrs?Hmn)kvU%l$saC?=k*B@PwfUtgQ zy7U?I!8tqvaAZId`{coY`P1wt3rLy61i^+oZY(7;Ag;YV2;J7RC0Y0tfM!^BMZ2vI z-^e<(^TqF9NV|^SCl4LV#K!)10X+M66=4+BN4FN9-bhuQbXLV;r{tTrUcg95YNK10 zOyZGsG)N`y*{?3}2#NkaMj;Ryh+ zxyFR>;QhwT33ROd68QYmZNNZ&k=HpDh=V9c^&t*w>YZ}+N@h)G%@fl%gwR$>wspE0)Rbzzh7mBh-we28>=`H+-MY1H#>KOOR?COl19 zRFP17RHrAJ$*Ye*Jw0x@RN|!oZf06UsNFwzyjW&Y0r~@;N$2~)KV&kW5Ps!0DifJj%4-~VJT^EDVuaNP))?X*-?3(N0tdG!)Ff1Ir zqotFL-yJ7IgVx?_Tl>JP96j&tv}Et`v61zD+$18;#z^G*wYUxwk!;64gM#tYL=rj? zS)A>0If8BdTcWYTJ3fW3bBa5!5#P2780QA{CgW0z%)xl$^n$r0v%bF+4-!H1SnK+3 zEU&(L;3d=acD0lPV^)>xuc*FxbWg2tqAS{j!SHc~Y;xyc5KVHRug8Cy<0PlV79=Oe zcU=@M-CGTxWWkh}h)@DZjyZh-EoE-lqN8G(XIyPjj67Zm%8EdSv@HN9j8>|`-s)fmF8zE!JeD6m6hpmJ#CYH;_ z=H)K&*S9r=MI4i{2`E)B{4@YUEsYDx!x`bH9`&Jz4r46XN!-(l5+b}bj7w~Xic2=)7npo_XCf%(>q5Ep*IH0B&i*U?gMA}C zmg}^EtYC#kN)~<1@M{&VR=h8p|L|jVW2qQbGUv!j=J;@;K2E(yk`tSnVZD17#83Jv z5k-h9$23i(AE$JPZ{}AUxKl_P&uBmpC5%_2Ql_+?SDMVgG99`_S_%sibIcL};jNtf zr-=bc3WQlEj*S+ihUdo*kg;0XGqJF(138D^-)!_$k!W0-0wZNy>2tQAZ z=vRh5vKk2o(bt2Hpe&lM4o8bsV69u<13!IqFd7VeF9Ohj>P4jeeCDM;H{~eqaC6tf zi^hJUUrm4~gi!Z`7&Iew;++!>JiR-Ov%akw0m(&Bnp+8_>u(zyv!(<2?;(Vfd4$*k z(kN^UxGCBht{0vV0U^7ElZ8~mGA0x;0zEpZ!FD%zcVYL(z}eO{*xJ%#LP6GJoV37W zf3y5JM2~?E{`Wxeqz(mtY&$U%0EA`)a;=WEV;sME9X~hF*PHw&TZrozL5$=7}cafkb2=!h;1U5du-+6&mXks6hCC~-eCkqmb!br6W0j&?#$+f z9ZyJY0wf;-h);|WXLe~Yg|uf@xA6{8GbJS(YYcy&Dq)M4bitCTG)I(wv9$sJrraJE z9a!Vbg^6-WoK$!310fkd+QR%K>KHN;rS&2so6Q`?YI)i&S|0!#4aLt*!3&gqXm{;M%3%bdqb3jRDE$u@okQl31l{-9%>~3GW$n7bTBId3a zB9hRPYaJWI8o%DX5rG)j;e##rKlVvkKXQgo7!C9ZxFXtHl22S_U!lBae}Y7BwOZ&x zc~SiPjGb9QIIE+bl=UvQvD=cO15}pVi0+wb@99=BVz`pZ8#1d5Ye@w|65Y}v$2pJ0 zU@H(HTQs?F=d(!HIWv1*9x*Ytof5pxB5Z}smr2KF_3AF{ z2?uwS8!p+7hf(?TG6CXs9Rc)d*Z#`f%u93x5zNssR9lD!gbX}$Zc6OE6%KA%sy&Jt z>7>j;FH5u|Ka@^jlIsAO@-IKa$6RML24);m8G<{HCf)4%-NqX!kT1y-SY<;r2}#$R zH64$`PXV=`_qjIcDh( zE5BOY3Bv{kQB_;6PNZ3S0yCqyNhChUakVvp9Vt1SGcm9VU{G* zm^CV}Q2xFi;579JZ_2N(xZg5IzW;OR$NpFfNHvViE0qt$zzr=t!B`Y89`gN2&08y1xl=?kH;QfI6l>hc2o-d!6d5Vv}X>-H4xC zDrOM{6bFtuIeGtyAzp5jh?9lm&iiDBF$*;N+#uPGoKlEIS&3-~AKEvbDY6S23 z@|}K47>_MnDJ39%`nptU+3<5#UBs-ZQu2UfV~Ymo&=v0HWZ|mcosS>pBJT>ib%;W+ z{^TOcW(1LMxBh_?wv|CszQV;rU|J)spk7}R))BO!d&4GHn!y~_J)`G6mqz4my&lx& z-M7#daIxFwxGT{1=3x!^P)p@K`)Lhv*=~*=i`_t-C?BMP55=J2=Y&H6hQZcnB)47% ze(3Ez4)(+CBxBImpE{LH4<^oj5QwSyw2%GZ$bU~L?$lXzWEvgS zGYy9H`4&Z6ZA{I7H>3k#XXWiOw2g>$JLjrbPTx-SwDhhZ4lJ zqPMDApCmI$C+fs)+dDIyh8kMKRrDDt6BVjY$U(LtNu!)~gwY&SuV!*@r8oa?S zEH%dNN~70X-Fv8>7qM}cTehMtkDP*9f;Oi^I~N3^=#-wSR*P8X$$ALP*6Kwmt5K-f z6gXD@@H@W<@T~>aN#kXYFmL$3icIJYI`KEM%N0lf<=U9xN>4GMDf&H)eN-nz-r?tY*vwLwz&pQXW7K93cHzWsI_lr( znqwZA>fzU!V`pBt6sr*!|Ej7e)-CHX?TjiSJ$H%~daU(;31$j>W|$XB9WJx$3J9Od z1caCO9rHezp5BUUBhvfQ2L}HM^g_0&A0*lv%j{b64+F3MJR>DhQz8dYQ&7-F>yfp2 zMSf@|Op3uO&Sx7`E@4abb-|pgGKFWC<1gw9sPsl`!7{Xet$)IsL*K2~M`|9YfkO5L z@&L}yw*HnxM^@lfsBdec7RHwl^J{_qM&V~Plxf$r1mK_Z>yp(N zc{}~yKCfF~A5}XFHS#x4(VwH$eI=2zTT=sly`2#o1Bp=q;#PWNxFpNF&aVs_H4#aF ziJcLa#MUtn(sG@B?%2#%ULGB%#Kh@hl3GA?Ph{U{A(WGY!vbE$d}NK?snWk-g^B7>p8TRA0KEHKhJya?^B%0?@*c~n@V1>2 z2T5HxEVt}3+x)sDw)uI-*5(Ia^M({EBi5P?A&;}l$$`VHgRdW^k=MOs4WNam8+6{S zmF+AB0}ssdMd)}^sSt=_1%%|01s}rU+1c+K`z5yYbss=K=t`z4;80ZmaA7TP@h4d9 zXZ24f#_BMYl_)G%z;j4ho0i|i<7YOHuSZYx&H+VVVLc2OKjGo{X)xF*GrQlqER7u? zo$!GNTuHAKK_7W1L0yhtwoK?PGS$iXLo7v2RaI5?^sI*bJ8`+%`S#Z`WeDsp{lxJS zd;)9r1#Y)ad-q+Mc)wdu1h|bLK^*tSgUW17Ne302atFL7Nzsl%-I9SDd;7gv8%|ek`|_2%D1o7k$+szP70jlIXU2x z5OctKgXeRAM#cn*^8G(hVZcIYVPGGnO~BPtn-yN1YTItsV}G0UAfjz9Sw$??$uvw^ zTtj&Q06@}A!vb)vtN)Qxy+Pl0P7N6(Kt1=d1miltoSywgwXv*cTgZe!tIZB8mH-+z zDtIY$Y!>CB#JK%&C>!MCI+7;Nsy8#$j&8xi?v99ZbBz)`NQzHg>3LaB@W$sxY=RwTH zBcSJF?ir5ijIfa(pY(K@HI}fcnI!a18@m)}WGO_W2C`vGQePK=Lgz^1XBV+E1955? zEc>B$FH)$AeBp1<3t4j*)jhtc{n0F^-{v5ip zuTY6d`5r;sd9nLm$V#3rKUQ|=6qIRAuYv*9vk?>^*TlioW_DoHg>*6SOK;rvVopAk zuYY~pqsWTlrA(q27(xh2ChJkuk%uLkzP+cp9%z$Dg)4ZySR_qIVfDh_UBEe|PdGxd zUqvMlkSWNi#STm{TQ-GZ*fIxD9qophMZcA~a}k=Cn|nL$C_4|67;rbrRQNnqfJJwF zCuKVyUQ)OKye`iI!VAH$Zl1aIkzSb-3nUn6Kj=)a{O)P%@#wRhHFM^#jlM*rA!l9@ zgrwexfo=K=ch`5T^mSh}Z2PcMzP-LBG6}i-zdj)TKg^-`BHn=+kY3TV35d%Qp8@Dq z?=)eFj`)`L@N+TYIl``#hx0%slY><*Q!aSLCpgRkP|VZIAxz2+MQ9Io=ygvP3l#HF9*kR?U5k1rz28q+v^cq2VnRb(*xOd{VkTET?nS3?Y&@O+umD+_OtLp zvEAwu8Z%C1Fs7{+LufC@<#j*1Ch~^sBnESckSM;DoBuKD2+-*F^_3m*eGWd;MGu9! zO+xYpEhC|3QKiaE!MHe45)yupu9E#$5_aXQKa4|xJ#azfQ@t6A?t3t46dJiZg_rt!ldey? z@9WY_f5Ad@=2*KXH#=-mRUu@=j7p4a7uOhv%KItZ(OT?0l14cf!`{^-NwnpL4kZQ8 z@5hy3pJ%quu0VBPagoUGb}@$ijAPYgTr7fPX10cjn# zf0OW^#H9qa>rWMYB0i3awU7-amabcJADyE_YxMH>v(cIuUs%%&0(mgofjrjagEs~7 z!LR>$oapQl`GDi*WE9dEn&}dhs2N9&^hjssccauz&}6j9YXhA-PLxZlgfDas%_(k!2bdVVQSWODmCF5r$y^V^4(S^yq6HfZAe zjbmb)i$s}^F(>mwCt2lSO`Xcz)faSlg2=N;ZN&baxwrQo0l>A74Y;?5@LoT)gJ0>T z_j={r(WkqEiNFOXRPVSd@}&FlHFAwn_s%Ce!?9Eb)!C%=Adnz!7`b7188uURgWaBj zu8FO_fHXc~KbalIWAAtcyIl*PT@@0q(X>^DebIKKo-!y2^o;BDIVAEn%Cvv+P2)2efVG3?-q}va5$XABQH!%D;TDs$S*?CO z!zq~-ALYo;K885;|9*6s*$Nc%Tnfo+LvYpp+2~2MB+giJpGLwiPw`zJaki5+W z2*j0e9oNtb_O$7aYH`P=9aCRKHCl*!ah#ssd+!R9i~;q=1v37pijvN$CIY5e+5+H~ zC_p32gY^yj(Rp!Ny-QdmkKn9aGX}}#r4-)#gHJG+%hzff3Enlx_7xY8lrZUF(5ZrV z!$CL&^Er}o9F#*F1-GJ<3b|2nd_VWlJ5zk0`d<%o3ehhqnZ<_MD>vXl96tJ8?w+4P z8(jufXUevWOJgwc;@qa*pSGRl|KTfFdJP0>;8i692uUH18#wBxJ7qoWi<~%k#_`%4 z@Ni7lh!?XX=I##xqm3xBM;x0x5VN7}mGxZ^&p@2h$x^KLdaf^7pL$~8dLUIA^)=T} zc>>3Q_ZqImpR+~1;Avp5VAhl9v&f`@d_IscH8XV_nPuS@BDFX4OkmUT z+g+Tql;9fnwozP{%-kn&-2HxmI%Io@iiu$(pcH%44>CQ#RJz+B^4ni95~+Vd7NDSu z!5Lt{2py^K7TJFpdTOcd)Lm5?Qm^#(Y=UdBB@TGd2pxV`b_5Evi%Vq|M4%JBRg4%M=1llCsBCMZvIq<v zJsqkL=#mA#nq@=oZ9$RFm)39T+HnGd#s)KxT#cSGbM_Iy(m_K4(t&jby=@sLa=d|9 z9g~5xSX_j(=PG6V|3Ez+Z^RenCCkq;ac%Q& zrBF?m=~W0Bs_w`2_Eg)GE!k zA*$(YE~*Z-Q$f1EXav2xK0}u>VXYmQ)|yJjX>-^=Pu`UVmxLj59DI;K$^!0zmV_me zDP7Yy(~YSaszx@us!@v+yg1A_bh#yr9-ymRJOpyYE~`#of$=m6pEX z(qvG#3M+jpCcI1FXXz*J;<3*QCfZxe=?t>SSCVG*dGHv{k1lgl?wP8sOM{gzFiM0z zTLtL>`mAi!--)vBe1X|NcY7aTp4%aMwX#-ad}!6;m(A5lKeeZBlCs;)`3_;`&LBk@ zv=$!ME2`WxX1m7ezid$%e#s$ye$C3T^f7glnwoh_$cBa}y+FZ;kWA-KzW4R=a|k@S zc<>p^ulugZg3B+J+r$4;x#~xDNS(`M5VxNI>zX&qpwZ_vmTwD#owr$7QUTO>{LIgI zUjC1KbqB4ad$m6pwA#oF(x3a7cY5Tdf4FFux7hrDyo8Y(^qJvp6gph=eVnQ=h6;5K zXHR%s#FuTmUuW2-Hp?5?upZyR?dzx^;nNZD_uI}*)ZfYy*q7Q?fdBm@z+qSPqyPsk zj`L0H7dMHBDM{B;De(U#kLENqa$FT-*9%RMEc50hmx@Q)T1;8@A1LV^6MnO31XH&b zNJ_NjVzNa1^AwQ{y8jV4`D=~6^Lkbuw3}@{d9*o)Ji=p{=s12dnkPlqygfRw=)d3a z?u?h)gDUN@O4y<+m}|Cn$rzVxwc<0+8ps0zW?HtaZ=}9=$kh#uuNMb zV=Jr3x|N$GJmSgldb=_EQdrgrqJ&d$Exjn8bt6cfd~!$_zqGQJ@pZ^KB>vQ)l78vs z6uAi1MYXG5yrq}96G#WJt{yvWW8NmK#=$W%akX;c>|x4oFB_<|d0x{%KuF3Ku_!K* zCOwY!#BL1#O6=dR7rpp)t0KvXuVW^7PTbiyA;^T0)6lp&5w3|S5d*S zy%u*MOW(HlT4;2Kb7Zd-SG&kbv99bSvb!31VDQf1@6n#m)tAOFYqXU||J_BIz@VSq z$1FCL(qYnb< zPKz&i2`zs}8k0}2I^XIkT5yH8mPf!MMoOS5vP7Br+frLgYiQK6)EyRomnOqgV_q*k z`|neKDqYE$kT6!?&lZc6|Bq4skMD|#B-bKlBS@Fw_i8!K&RFkczcIr|ba!t|G3o8^ zj*Ixg8_c{!;igBu1-ENi*mB~1z!p6Ur3BjrQm2&!J`0yUd(NzQ0c2LZd~p~07L(P& zzW^O^-$`*j8xv~yC`zd;LJ8l{jZrt!P;}Wr&Dk>^RP{8n+5OUPNuFsD?G|-VPYw)S1 zar%zApF5zLlm44V4yfVw=r$aMYBq!wi24vEog53+50=G0Vr$=>Z_~@E0mjM=+++Zx zKR;LfSg+QnGektAIsVIo=5d3ByDTQ zRf62sWN5I3vTIO|Q^5tmdD=rgJ@A(?{3uyoUp`&oMx*w}Q(L+Fk(g;Vk^RaAd(Q}`!7jnIRUnbOKU5Jk=d?z+WYW(|l^QEr2sq9K~ zbFMymsg)oJePc&4)o5!uN}LI-^6J&AlxzkQF*oRkwzi-@eJ6+Iu3}QxCfdLWcM?`w z|FoZgUc8Iqu81Ci>Id~!JvrE93wosXUapT2Mi?nwQ+HktE=kmXW1gOFI(2eB?gAUs z*8etmHTFh*)2Z|6eyiSc*koVrFOzMNrrPh&nVeWXvw`)YbIUWg%~zWQ`!A3!W$`-e zm*;KW6#vlngj|1OMhOY&)~fv}(~aZjeY0NjTt7@gHp2h0%Hy7^2N*_**Be6XZ|yIm z(0`GFtSO}DtyljA`PIr>)}I@WsCfnn&&kuTFmmAv7cFv{`dkz5mis9tHt0H4;G04B z1A>R2LDoK1XXdWz!M^q?s$_mkH#}RSRva>t(wnm6EisL5hC7JO@XMxWcIXbhGyVmS z(4^y%uIlpO|629`!ZJjQ===|u7-*gzL>PVg1M4LkqVZ(I*n81OdFD$iWbbc3y$$=$ z;>rJPW8>B_s*g&*<0L{bB2B$2F&?55gzdh41G|`(GwlhHtZ1JAwl-1-6HY@$#ZQuS>=TN!au?+X$cAf@x0PaG5B4D(}R$Bc_jfW`{3Z z{`U_e`H2AiOs-%37J&!Q#Owpalg5mrLSbvB;9sr z)V3x5JgddQRI8tT`aB(qWn5khk2KVJx}7u_d(Z9o!#5-zxR71;p#95d3{_bQ98P)>QECk%R*^QF7gLArMqGjCw`|uy zkhHt%`#Hm*qe~n!61Fs{3a#F`O%r!U`NcdtZ35EZ<*LeOozo9YlSffjyI!5QIITxR z{k@w^Cx7S^-z?An@!d?p&#oTtX{1*Q_^mKEvLC=O>oJ38#~;l{l}kD+5LO3BuH+yv7k{J)*vOx0=>7K>i-$i+!{>Ct(OC7#cg>a)6Ull#Cqo~4S- zSKg7mKJH_SQO$hCNw-;E&@gMyfiO3(-msdZ-un^O-Y}x$UPWKe-kN0F{t~T6M%Kw~ zkIi?_MFlbpn{ArlH<91ST*S*;saApIt>vu-{(7Av<;XihqFm;o{T-4huL;;HQ6Wc0 zHk*o-A;(Jz-^}6yQD#BIM`8~0Ev4)aeHuZ{d@W10R1 z%;rPya5y#^4Z2_Y9WPjiE`Dd9Q!^zT{*Wa0qTz2cOY@w=*#`lBW@#d~TLTE{2w|Kj zvUt2{Eif$Zyk)a|-@}D(e(hfb|>e1TOKnGhGCo78ZWMqvwT|GQB z=8QaI9)9|@P;(RbbcgwOk(SKwtUCFE7}6@w^aha}V}HtDST*un=(aw$&r`efnr_-s zYg~KJCv@e0Zt3e(N$6fape&jn&vtx&a77enq)AwRZlCx4^2*^qk8i(&ik2@gLWkp& zW^dZ%m5p1o#o(SL?|<29k)eO#YW|Qk3HPWD(vt=W>9uJc=5>nK*Rtl zT)cC=Tn;%}T&HE`r`!o3@c8#H2fYQEp5OIvU)muRM9E%XZJG}U6b9Tdc;C-c75~+F zzI%hy)crs&h)b5ECV`MK$otS+$I|$2;Ioyp-yS71{kSh7@q6j0sB8bm517&N>6Gk# zw?c?9?OWXs^Hj?{UL&o~(4}a-H<xGrmSFZx`}yJ6 zZ<{w`Sza}bOcTezZ^Bh!h=-+Iziz0&guM4e+(a{!0XJ#fJW}*Sc7e3h;FL4}u;^fa zH&w%%AtCOx*C|C#xn-cEfJ#!U4=jqV_LG5#j6NRfNU>QD-F|T>OS*lfS`sl2O-FK&GOOuYB#b%jRw>6CRSj~0#{fo-&4NiIybr;X@+Si9Mk}KWnP>Vd$r!u95&pb$3 z$qg%#0{eW_`VVnLDCw%w_Fw69aBujx11 z!x-y(xAnNbJ`~Ru5y!fARZmk4wg3#xt(m&o2DTgMq;Y{Irzx00&%PXv4IWMT?d=h@ zUv*38$@$s}b#}D2-J&hUBbO}}7Vy?@z+dV=^Zl27kFmUiE`Bdx?ll>;R&T-9^+ft^ z{w}5N@=CN;b538lt^z{?vBDWN1B?Ar^nQ+@9$NW;4(N2H(3)>KqaV&rUFDHg)X&&}8^UUJ9~ z+L&a-%y7c}d{)YLKmpxn=0Tp{^Z15csHr)sGYq9<(u7p&fK9%!uiFWDB21T+pLr)h zmZ|C@*Z2~G=ZlxsC_idzgI>Hdo>Waq=e}{u7rbTCvZYQ3?(lrx`8d)v8T{4Mxb~}Y zU3oKod6c?=;&+eUx`tfAv1TIr@h*vBq`}n#s_xkS{9uMkG6a3*J5KlS*-TylR5kw-6Dsq zBGK#a{n#tzqYs!7=!qNz>SV}BVFeUuisWahCozk68i zK_mUsnCzIuvOM)qUp)I^fl=fA{&-{X^`cb}z?Z%KD$qjG`TdV)I5?5{=pyay!b{8M zRM&M;73vB(hBx{RL^-E{dd|eNwg$5&Cl9@z>#KLjD5cfZbD)y-8a+n>{{J?cz$AKc zKpk>9oiT3W!bF=qF!f?RbcnwyR5(@+C;kI)<`b+(k!h!Yn-=9X@^qOr+yp^Ozo$mW z{D!&u$b=r=D8{}t+Qr-&$c`bD1%eo^evozBPmqlB9$$;y)t@R zK`YTMUJy*}9rJ^^RWqfr`YW|{;2REV3<(LshJ*NT7UK4d0s1y+qYV2m#FQyyo2kUX zP(S_aU_f!#mQv{L4c`#uoM3LVX!%^%w9Lwv>CYKJ{P4SJJ9}i3)O@QXm0jR|BKke= zOKTBocSPiZWmUK2*S|WkxGwhvhK;A?7?2yT_ob=lneZbR(vG!B4sFB#dTUg`U+tHt z9aADtgnC;l4!-}UH*z%_2t?iKL6K6Gij$WN*GVdaf%iwZ^X(nBfwH}qHJwk>Heaos zH=zg7s-(d5NY?E-^Pk4?9&=~pflSLmrfAn{TC{xeb7OY7*&8XpZ4)%7i?rHB)TP%C z*Spv3e|N9x?igw7+q;=gd$1HsZDvZstxpRl4~&SA_B{4xWIYHX=>B}JT>0gT!$z+X zD%?doXf@(;P9ilZFW0#e&5D)#*6#66MUI`|^Ie<3@vo9Mr~A%meTkJTK;xp2kQokRa$lQUad%|HT)+W>W!x$(w_Th^h)-+%MG5Q~4G?@hA&`6fH) zM~Hbti6_9>cDgh2w6Y;1(~b+Eadyrs#yd7PdM)UDm#5?V#$wZ1RaIESzZL(UBUm59m$I04AB=%bu&iZng{VLaUMEMs>%WRLBL`;@TpP|%tOHkS%i96sekdwIA*ky)7Xd{ z2g9{b(9qe`>nn_v!tZUqh~2ordb{LPL{X}^`e`a7GE7mdmU`>}9D^tjV74;}c8gDw zyP_8VB85$ee-?}I(sfIF@eJfJgwcYjs(fIK;5bl)o0JIou{bq%$tHO;cMUhEwDE zSElMG_s*Sn>qkFKlHHu&jZSl7>w|i9%#L{@mO`|8PTsdKxoq?bt_tLyPRJ3vDRW!|uyw0@-U)S2^Gy77mN};KBp`R+ua%I{62O2+WXpy`lyG z!L+pgrG|Ad*DF9HyqjNe*fpWaQpiZY1$xupF4@=nE#ALoSKB8*v*m%=flGcZ|Bp{; zW>jAg9lPYXm%i8Ga|lPldZuibl769_^_bW@9Va22_((EDo#*!YrHCsm$ICEl`Rov< z?QuyDc>Ie_$5a6=B^-GUf!H^HLzUiFqw36+ojz~&WE5G)Y!FaoD7T5e>^_VcO|?$F zrq+>{XmGr-akA3uwR;)2=_Wl=A+YjN=6}bD8_CSz2O#Y1`FVRky4)F`kBZM7DJEGx zeB!hkd{fUs?{SQ^#|Oa2OE(NjgYq%UxLRtyevtum8aB7{i-e?7Gk1<{Wx88y1z;rU z)x2TK`Z(?6i1nw^_kg6L$1Z6D9X5nB(l2Z0yK(nZan3wRD3ecdJl=jmMD~`$hG2JS zi?AA?EjKGQ16VWAJBT0AY}EjaYTV5mlf$|RGzT_M>#q-pZa1C5n9f6V_oEbtV?#uM zds5Q`pvAe7jdt$gmWoR&nKi9vZ_}!Y7bp6KGIItDiz1!xpb^XE&XE|W|o?bDW z5j9BQkCafvs6F>J84Ll*qvVaX1*^$lZvj9h;Y>oFC=A-6tml7A#qtP%f-?(wG5Ud1TOY1o9TFYw%&lfa?JXVl;JFVkqY<1oiv?u2vWWd)y z#67&w=*&xaT}Ws9`ui4x;3c%QZCeUW6?|j!1RGIon=no#{;^dTTe-T#3E=_smk|;9 z!=EB(g%ae+Mh0TAgo{Vyn|ub+!EdR~fNQuSU)r|ftdYGVUa$hsuF5B6i+b_$iq-h? zF%^Ye>ql+37^C@M(-{F=wNKSq#rf9UY^zGg%QSY$r`Hb+^xR+GBqx`b2^u6>v0-F}lsTp$%cc>hxJ&ZSxX}{FX3H`?t*tea|CDZeUO+sJ@ze&^1 zX}EJR+x#96%|S_33A7%jBoQadBgPDZ{;P)t$QR2W4AXfnDp7DBA&cKytOmOV7&!5= zL^%V!DqAoo%5cs)VFh%U=3Rb_ajwje#)0iGsR8I?s!N)sB>C$Yb)rpo=8DY*CTUbP`A`hUcCm=GYtmWUMxdPz~$BMcyyTRILy z>Dbt)zh#Y5M?ekfnDycJe;%lq-~actERX**P(5@-3(2P#C&IvSj!kpq`d3|HsukGr zdF(3XyQ>-9(J{%$K|r<+1yE;p4^I(8<(qC_=1Y6Y6i?f}u2HZr zd*8b0#G*ga0o6=c=TCG<6z%ipfQaU8(X9Vcbl7p?V@KB4&3+ht0*AbR7u$VM{#Xi^ zFcdBTU8Ft^PJLpz`ba3E^CD;{?OeeUI;qVjJpM{)w&LJeI7BkwrTs*X@mHWvoVJLo zJ<3)2Hva$%ao)YVdDMN3LCmHoo)hrbU#5Rb!lx*o>Z!q4DLGP^m^ISX4y04{I^a6n zJIFTZ-lM%z?N?vx&TdC@m;5>MI}hONHjKCTZrK%GuUNcxK%=~aXVm`{>qMIYS8QLs zX9n?zGm)_|IyX9j5Kp|^`MFSf1J9aIBNHTYJ<1vglXaCAvt6XVHhO?sq8aLn(3(MQ zmTr}CC9F5y!o38K7sn4VnNEBVx)l4H(V*vmb6~B-Ptx7|cEEjYM41s-b%?4}+G8aW zk@kqyy}!a{YXAhY&c3%h;N`dxvuGv-k`3J%Lm+fH%H>M}Pi*{T(Ps_PDvKBZ$Vw9= zN>X(A3+GvGUBB}9HQkiY>BJ9nw$Rh--161WWEh!}%sKTxXzHsiArQ2S;cfZVqFM4g zeJl2|=dxAfuQ~rKV0)veX!-kJ&_}~0Y-*aF(LKzV#Ya^-=A94ww`x1r{AOQIJu{uW z777}taqtKUJ-t?rGzvzt| zt~hlYQqX-nk(jeo1XJNR6&r1NwJ(kM>{h3#qeH*2Ae$%d#Ov9OW6DO`?vxOuYv>L^0qGb( zO1i=Q_^!3~w~u45?+?F#ndg4)E6?*fFK43>u+!hkF4z@h#1Rt&*ma(O=<44wp1P-z zAtxf%n`r;UAYcreQ0g{SqPR2X&oh!uk8umeq2#P*n#gy{iLo)YMt!-cd7AUrd#48I z@;KPd{7<)UTj+ci=k(CtD`{HE zvs}{OU)sn4AOC6MuIJj~%aq1HZlw(qw4{TwM_Wa-gakDAVA0(bm66t>0&QDMxh7>Y z%O8i_lUxQCYPkY?gw>@0E$ByKw9eRC+Ea(V9WtH(Dz2gRDuOnaqAAelw?DSaCSTv0 zbve9OcLvF|7cyK{BgjJW8*zx^eMOv?XILLht^)wh;&(FI%GIW z(Z&|j-}9;{vUaQmBfVk2=e$lOgTpU;#$h1_&6Eu2T4z!wh=o0|sg8#z{yn=!{T3{+U{;wx71JZ92=$7f|n~A9x z+SuTojPviB;|(G}m};^CLqBQ3C-%3W=m0-kG`j{5j-i05E5m0O1s&u{?xNoSwod9G z?d*{{B!czV)~h`N(I*`meY#wO7D<)fXoz^`?Gyp4p|v&Omv`Csp{fysvrU4!V{c1J zO5|_O8P?NmvU<-m(_njtEHyl$WC{T!Dw$G-x3jd7gHx|_Cn&li{3S7`UXLZXJz_0h z56_QLsPYR6b}=BAU~A3e*AK4xR-ki1S@nCq zQ<4FAaQ&ouDmn_k;F%PuunY3`2pJdu&Ol7OXwSR7+PN6OH$Msfd9m^%1n>jQtc7Hh zB3|`>sl#XuD^CNSnxY|Hr$*2taa~_0J@16erRbELo@e_Jr)y5?0B8GM53V6dmMEw0 z)Y(=bOF>9kWSlgvqbLU?j@p?sA@e52+v}{Dpd*Plf9>K+)ugXd2*>i0#otCZ^&{9o z8+DJWfWtUu$Zj9kIDyw`x}EQ2FP5yhJzfab7kSvw%(813VhUrv?6oAfek)0Fwwsie zN0IqTT>Kj7kpK3QUAlj?VKJ!Xzz18~W~{qD5#L@(MW%~Mae!e!I@^_6YHtF^)a{O* zroN~L4_t#+5cL4}0yBC%eH}Ftc-aWUl}9{`<+W<&r1*o(+3uV%adz)cerMZw_@%t& zwIzu&E&_I!aneiZ{2*ffBp!vcws*qU)rBhGm=~EuD5;!|~n!BuQ$WkO=8xcIr z$?x6u51xeyflNEHHr*_N-l8T`bYT`U#6=^id?!1$;@>16cPMG2I4nveyrpCnKcy>< z88k|e&p`gZHf-?G(IC~8CNh^T#?gJ^rYNQ5rd`;xbziXNN&it*O<{^laFE3l z+1CjSlGb56v48QCqc_Yr&(w89`|+`S3j%r?reJJAByZq=k=WZF0XNT4p;Zn}pnv*0 zk-NR4Rf80NhXfQ3!A{LaHzM6M;DhYk_gQQ=g0o$7kF2zs(2`g2K&}9Jxo$_n=rRSyJPvKNcqX?SRN}*Z!tU zrvtD^TKp$Qa3YacfW}9Tc6KrnjCameVbQG*06buj!7&nNCn-6DwKE`24dJS>(VYf)&}bhp zCb_QM6JPQKbxCT&2P{n_=}FLoxXXiVO_MZHc01(;j$D2Si~5Xf%YBHgfsrEgrAv?5FkN2I}ASwaV5V>Jh_MPToo>#QdEP z;&gDUudWT%n_}8+V3W-y6=XCgZ^k+97Zi0T-@hK|U zJE5^GoDAu5>TE&-=t*!3OUBXy?%z%zmZ*hpz9`Iar194fWsi4+g6I-R}s3rQP{^Bh{8 zwnfg~NC|bz{6M-soX<_M)Q8n0MFP&&BI zs6%4YljSk5BJ6;BYXt~b&#>9E$2zW=n1y6z2)q=^=)tWl)UZ?x&`=@2(O3Gy6bw?lz-7!k%^EdxN71Um4)Y6j&{I=bZB!{I-QH$jh*LEAHEn+ zfMns-Pw1}il-UJ@2y18ddT#PxuC%7$Px5fHX6HSWsvxJtKp{jS2D@{P zKneH*Zc25Zy5YwLO(tGro@ZcSsNs-lM01V^{}oi-L0Myke?X0pEE>&- z+=*m15;%3us6T*ZNZh1Qc6?=U*Y&O`&wILptURWbVRKI^95w(u81lS;uXumInU|oY zkT&13H(*x)al!P%n=d#vKdble$|bMv_|3zYQZ0=5eJI8<2{HunV0KvWzPh&((pGdN z9-H4e?Jz;ZNF^8eCqvGE_0IlDjFS5%9|3;1QG%IgDu`oh3m8x%qCL*fUW*Hsi~lqz zNg7E@{2tY-Y7qGVbF3)#4hz3q@XP;X=4UWNR5d z+}Jl>x5SpFTpRI%0{Y3r%%=um2o;oG<8S~n_BNSuS&w^9fgiE=<`JzQHVN3NNQ+Ou znFO<)Kg;_-7oSq>+0VwkV=e*vX$-G+Y4dr1eNm#B({}884Qk%sK5S~2_t-`YzjYQa z&vY-Fr#h+IX~T`JOJ{XIeS-ox=fd8{sXI}yLs&NIyX(ogxG$;8^sl;d&n~g)FAvE? z-lPh~KuC3rjANuu_&ZwK%6yx{Wr$_xrcz!t0$aCt+_+kl;AVav)B<1ia5&VZXLyrM z`KqpW9D-UT=F7&!J+3NWdJShqELLHd#+n42c(bnW30ON*VTNFJp&&NuJl#|*-7vSO z^!GnI9$cInaV%Hor-HD%hmaevc)H?1pJ0*yCh-&{V zExt!Lb>HD$pRf1jOb)B2*Oul*SU=Y12B-~7J`J9pdF?v8w##}Yx3`-?VK#$iqj^_C>8*ST*VM)p_$JTW3vTfPd zr|H4LUTI;9eJ-TWBk>^gI&MfTVFrk79F6vaqGMI zm0jv)&Cc?bZ>pFZXW3BH1~({7Rwrf4QqPOtJ;^%1nVW@Ec#r7O;H?AA88PjGTFZgN zF51I)X&C6feeZojgGfkpOxhgilE&XfIbuw{)3TpXAeQV{qF_}jX|^>*XGG&6ghKKdfc>c@V5Jg%vSnM1cbC;mS1-vW%DU-{>o7W zN1>KI3>9W{`_&Fh?Vy=-+?6t%PQ2Cvg@XwKf;FoYl*uBik+95{E-@$Pc)KfDtT?s8 zUfW8;JZrZrG;`H#ZbrYj>1ejbj`G^`1u|gV@Yt*J^#Y zU&UGR77uMW_f*D{to4PRe5eCi$)3L$mVp{^><*1^B)UT%N7IX7#!B2rkJP#uaz?gF zS-rMm;+qK?8saplEGv6e&!;e*jyh6`HwSit!M02(I(JE>DX*lC^i%n-Uc@K7qMN05 zvnosw<~ocffUqXB;}-Yo3iHtOGV<9NBlP1hn`}353~Y^^d7Oz-%04&)N8s(o8;L7< zLkL9*BNrEqy3`zb7~Oe(DxGP(X?@|vg)e+ISGr46TAX_8ZWmz?qbv-T+~B9`K+NHC zm}#_{(GGju)f?LX=;>CMiZZ=FCw$!QGcE-KmN03o5InOn)o>-cBk@v~-ja=`6~UAP zhB2#R{z%h0Uuu3CStHv8eh0qPn=;IQ!*6>{%VDLG-u582-WM#gJG0epYgK$sBZ{pgda<x8bTaREF<@Vld| zN8|S<5((FIwwkB8Gbo3@b+)#T>blIEs2TmQi^e7)XUA-YFX1K93sI{-P0CU91Y6u_ zl~?9uOM8;^a{X%E%{@;}Gpe;BiP_zUyGt`?@`pQL9JiNe_+&2PfFY!w?+nvd%&u$R zsiyW7uzn-S*bHOvd3-MZqO#-YwPpLAsxoEEX0VhA0YK|tmI0s;TeZ{!pPN8$Jh0Ih z#tS7P!UhN-WGDBd*Y-k~GIQg`N9DpPY0pba(fj~w$M!pVZo_7yF$5Hxw32E{%VqOO zC6%A}T{Z%jiYm?XS7FLz`OF1&NaX4TCj1v`iuqZY(8qkgBReZAiUD8d#uPd8019n3 zK=g=EGH@Y7LNsBuv|c^maOMCTOBTv`y!tVUuXmd21ekTJa=P+&kjLr`k>L9&aT^Sw zl?d^(%qcLs$2>BnFbO5I6OKgW{SFM4 z^NW7kNGqrKfs_y;-E}!A7~;z?CUGNcgc$q|Jx#F~Tl>zuPb2`QkC#%O^^w7)&A^H0 zra$oQO@b0#H8NSheJNGHuhRW%Dz>T3BZyk&H#i9iX;et3$?C2 zCthm@&0AbZ^RA<=E%lW@T9ZeU5NGJ7H3JvKxmUI7v6v0C3QOJ7>l}l6O;Y~ zJy!B4QNsWHDy1N&8o7Sih^qrxrO%9w3S zVhVCNTj{>D8e-CD8n=>v&((e0F^@%O5c!Z(1(c?JKj#tpi)iZV7^s?el?oUtLmV41hvz_wZrFiY2Y!{l${rT%Bj)@DE&ntHtN_^NAG2y70QhvR!g?^ysTUJ7){!q~GWTv~op^tNAdB|Muhh>4{y@2)uWaL^_bwM0;% zw?E47+5?lg*gHAgK;;*}qPcov#fM48ye}usrTc;h1&?ME#&P;>1cmJvndaNwyI(ei zq0bkd!zXND6-EsTx3Ej=KMa1iwiw;0fkD2H@1)jjIy%*3#GchBtS0RWTb%ZAcy0_9 zhww}~PF5CYd*NuajU$VCbPA#vpbkrvP~QFp%whSo?uq=12UbpV&oKeD0YFU3yy?jD z)yn{*bEkWS6!YWLIqXE8oJI)q;vl<7Y&37FS*jy44%HiLRP5-z(yiW}NTdIFq`?RV z$nL&g?VcL%2qd;-8^o)^0O8{Ag~gCCLSgs}LNZw`-9B8fXevRhq(ZL}PPd-Wq34`s z%!4Jkj&iz#c6B^JUK7_W2yRL6Q}*?WHq! zjSZIQIDITc3T3K{w!WyNsgrF#IG&>Kw!9F}TuPW(85-YGV)~xB85+~!NB4JxgM;MI z2nWOHm5kH-JTx1ak;md$&24k%QzzNp1d}%J!5azDvuW-4#5x}GrDh@Gemakgk$%sA z^6T6}*eGO&uYKcj#o{cY9mHe3_X+RX^H*Sy3dOiyO)CJ2D5CyKy1Y~ZlC03H2W8{V zj0=_ldEMuUDxxj{;zfVA@$q%so7xD!_q^QT4*2$*3ilWf#f>$ll?pQ_$@06Vva$x` zMg_G>*1xvP=Ey3--T}4ylX?zTNf1SbKhsB&1}46778^p8Cp!@hUfTC|~uM)w58N(8Ju$HeuO znG0J$IB5JLMM1SZ6%6tC-&{VIxF2z0ULwq{J{ss&H(%H;%{$!W>f#?^rS z)S@lzp~!4uUaii?zR8b|H+*En3{z(9%8NChY|w&u4hOe|Q-)c9j`C5VsK$uGleZ%e z01c}MJl;0yU!o>}28P9g@7QfmJ`th+hf!4pXtif9uH4ofSOdM z??La=tt{n7+XE*bh=UzVawdQsh&|g8&YKUWIxfq&4*a*Bt|q)zS@rTPw;XGDSmkg@ zmb#b+C*s$GS#I+n%vqk-m<#ipng&^d#M`H}4i4Z!1H8IYGao2S;^dY~U~;|5y$Z)> znPc4DIcN}2&0MAQ4+1gxyy7(&AaWvGWcFgekcHOTa#sa*fOHZItnf5l3*$HJfQ zRu#*2s!M_w>^DmA9PEEJlm4e{IU*DXl-o~XK#noT<=HWplDcE>O)b@(+sT(DtFnChP~kvl8+juk+PJ#pooT9+P5icvM$vE~ zX&CKase&N_Hc~&=MTK`Qah%fTL&}Un zSBm1VgnVH9BQ8bS;b!!}13ekzHZ#E`hCnw+B1-ggk58cQ$i%uZ_XT3Sbc~(VgY)9* zlyA8EZx^})tgqgx&{F~1;|Mr8aQO*)qoOm=sKzBASdZoJna#NrVZWBls6I{|2g@&}ZnfF>_c8(3@Ht%0w$BOrQobgGQalecT=a`3d(w7p-Js_g?JV55OCa#tqc7wbN z+C)6hAc%xnr%fX~p%NHfx_KFmY^-FntvtFJVOBnwGwwU}VEo^$Cu%_gbAWdtSKjUV zzwMaexenwb*tELq%6tzn@L}zddO!z4KO+Ya73KIGeny1{qQf#hlWFYH>&Li#{Wzp+ z1JxuXi5f_jVZqoh6v`C*(!&Dn6Q(4je3U;hiGG@;+Cmt0s0^eyod?{N6z8vMaMBMeEXu{4i@=vcRWyb?IX_-awntTDKCf> zg6)LET>T34MdELS!{Oahu4;=yusrm6MVSycO-iTN(nRc%$)B5in%-0zW>MDOyknZI$^Z-l#R+2?4)vmcASZFD)nCO5ZD7ruHOnSmHPoREg! z29Qt;e1KZk)V*|GE7?~OBG)!f4kDd8bNr{evB=!)v+S=l-(J^cfx&DAkO9j)7bl+> z@0-THEok@!a(ostyJ7gvCoEJXwi|Rq?^-><|986K*Gw;3gn3R_2P%@PaKNr1uugsCbia%yZ|M&z^^ML~Iw$Paa?L<>0r*Va^G_jT@H5M%(Y*;jJ z4Q<{1^`*lGt`coCpZtLcC9GEh*Eu~-N))*+n2uc1U5t{Q?6%FPONTmsj7yVo!c z7!jcjbBrJfu6(MZ=(@~CigkWq(5KZ-mR>AdzUJV7TG~{;WrpM}?(xSEL8!zbDDtXt zIj};xAPoaVa&u&n&XfEy8baLT!2~8VRs5uVzS0(9NR1{9`iFQXQ8BgPxi>3>|1W}w zN0if7v({&OK5uNnPzGe;59;c>ncE)U_oZXkOn}ueeOT&d0t-|-5I@aZQ(=D3xjw{@ z(yyyn5iOgjX%WOLmOA8O5cG39j4lP-F5B}Rc0Qsl$4#h!MMvE48i@&^eS5C5qJ^)i zh9cgo(8D2*ULOJB5(=$_vAo}A4#K(Ut<`_U5|f(KKBd;kCM7j$`~%?2ApYk&7OXJ( z8NSV8+2w$hNF=`wIVMxF{rqs=zxdA$u6E{`+=4h*_R}*s5tO)d|5o|odoLpj*`g+l zpvGJ314)*(A#xav%8xHd@4DmbSd93;U-9HKN%I7e+-$^f`RYdQ+P*#YVE#gez{@_4 zafDVlkz(JjAP+5)>8*Bs_XjAcLI<2&xjbZw08h>#X{JoqfZnk zdM3h!nR}D~6`T6)6?*+2wLceRzsK2Nq-P11y=Oq|6_FIb^unT*<506FI4QPrv5QMqh8b%}bso z8to8Yc-H{XC~jj0T=s7sX)Y7+@UjULwb}DzxB`K}`G4ZY&jdgeu$t6162{&InA&~7 zKc;57&T@dK;`W1Z>)yF~(i16zUo?-54MKY#lf2muJyU2fmqj@-M7&ymM~%S>-3BWg z_uxI?%#saamWmyrpxA;*3psve^!8p%op-3I1HY9I+V%d^v|I~5FHf6IZ;-2kznr`SPZAL7Tn zH5r)|KnE$EG8;`kX6fQbY7s!w#cMholXJ`k2%n1ul}ct?A{7CdDY_o*B!F|JsLwn9{?_UtN~wHae5K* zS2;N-B{#o#^_Tna-shv-{F_s@%QfQU-1Cg%^KC~?Z9{tzLh0@+S9(&BwY_?S*UDuZ zG$xNFCub(e#g^aoX$B7r@O)GZJ@LKns~9O}8s=Ert=H!sO%H_y+=WHQwiHXAe7n)F z5gtr!Xg{Ps*&Ak{ocbj0v;On~n5J;x4*QViFyg_u;;7LgA}vs~Pv9eHlDw&EcR^_X zXZ^0Hs87enuE-=%E_c~r*8rC7=xp(Ng0BC>@_k* z7#Zeg^TBAeWg-f-hm|EB7!)Kp6>y{}PtVR!Y8(rk%+iw{oPrg8v)KZD&$&;ZzZqmn zxHuWLhfXYDf;_U_&iew2R&wM+M-_QZc zMAVaG4h(o8^;lp7sw~DqKS}uAmMm&uBN+{VjcJ&kr>rpchU8UCh^4#th7~drL*?3~ znaAybTAZX6gq>#*!~#p*1=5ax&W>#>J+Ip*+chG}4*MmXKkR}XzzO$wJ}*jF-^E^# zrc-NYeoni_0asFi4`klqq>2GomA2Ve8sCy_RG^3h%2rZZhnUbg0-D8d4T3rI@ravw zk_!pQiVl%q5UCq-tS2s|{XmBxe9Od-X5Ykz;#ZTOr(BYL4KJ~&+is9dH~R`uqbSU8 zne=}9o{lP9XRawn6k%4KvmXE-jIPJhGQ)V#>9>Y#zHCzkM={|was^kto# zcDe#5@*Eh5q6%mlDmTveOGo|Mj#(MlM+?-yD7%>0@?Em&(gN_Px%ue7umv6D#)$x&Nr88m75&7nMR34 zZ^Ed%7^t{?R93tAe2b-H-|)9q+x`0hz$CN(nxy?GAVde9#t1{}KzuJS)-tc5HQKXv ze~5`@9B1Z7_G6e6U^h~33qnu7h&9u-0UchcN3SU$`HUJdy<8%zi|3iuwuV?QE0;sr zvwc)0tYUk|xcRQZ)FH8eQt>SO+>sv-Eac`5Q}VCPFWfLj{Ci}9C!xxE%pri}wBGx<@v_g$B8(&lybqIX-}=bjJE*DAox`|-cB zG70}-W!}Foxu$gA0yvfp{IWL{>B5PZz{Psq3f!3=2Mn|K{WlS+A4cSmF^i+{6?Efb$D97%CQOWml}=YF_|9Q~%hgZ$tGJS2?7!-<^&gIUQSbZpLN}si z5r@BK^qal$UOFoE-DD#|rfC^Cd)lI$vfXz=?VCD+YDWUk7kq>@-e{BnRo=J9Z^B9S zQ%>%d`eWABY?ghiEc_a3)f0InKja0@w{v9kl5cN$`;l$7sZ+4ICQ5oxN$#ml&C!5f zWeYt`e4m4d9(-ZfU|A)8qx3+-R*73fHYA3GYQX||0Prb1=5rq)C3cMF=1Bh8*?*q@7}>D=ht^iqZ-Y!h-jn_Q25FO*VJfkAa+VsC zlY11MHkb`1zF7R{t1Bse@iein(y7gQ`YStM|(4f0==X6S+*_TBU{-;^Ql{eY|x!OY;(G90($q5!yXCv^zfcMHMm-JA zd5UcA{`1iPd53DLKNmig0_!=hZYlY#9(|Ei5U63|8lSgN0G;hfMD=Qk?2G%cGeB?{ zZeiN*kL-k5l^@C!p3(CQS4Oiy5`j@1SuZJ$SE@~X>`f;OP_f^b zv*&fM$WdqhI8aG1$KME9c?SY64#%;5{-MDY)1^{bjU*2tgX=bTmkf{$8h}Fr!fUgG z8h>e84U7@?gyb`PSF`@1WuOF>$?Ok_QHeozI+ZD72QF z#o(ug)4}tze?ACCVv1nPfZtj*xk(a&jOn4qc-N+1;>m#%nt)mcgZ%`0&# z5ttaUmhPG(Kx#eLWFmSP8Cf2ekrn&YGX=r(+B}Drs!6J8My?Y31gkh%tz^cs%m7?7 zNATz^KnJSBU(0wZ=dB&bazOCST%wNF2xALnW7M@rNXxb1#Yf9HAEu6K~ghX|NDjWd7+SlAs6}q`Qu$Fpv4sl zLP&o(MmVeH-g4z4Qvn*^p5R7wNVO4fe6n^hx4K5((Fcf;H`15pOSlmy5(SYFjS5g4 zn|6k;Wj+B}8Usc;_eDCR6L1Nz+T7CDFP@N%A_M9Jg9Cty);kc9bpo=NxcS zufJvRe{B+~HAI?E#KluSaZNOP0*q;eFknTUm|F_CZeSQp0JZu#MUbLOXZ2))fY~xJWHu8_}%(%yCkac>Wk;qC$|6c zv|lX&0k2%Gisfpu-5-v-*kB~$~6b#l;AS`P7l zi81ccfpYQE!4(U#Rwyr?(QuVm1_QLFh~i@Gv^DC&EeIpeymmTw*z{t~@ia*LDwN1( zd_wKxr=%@rsW#EogY2%vhNgt9Oa>20i@R`R_M+c7y6%KC{I9jyU-=PMXZ{ks8X(H{ z${d+(dQR#UK0*_+TG1*C$T4kPu(8bS#_8$oiogEnp#Of)PvHC&B5aKKY}5Cxf$xLG zk%nLiXAfV;=j|Ll-NqVi3#H4kt+Ltg`=O7=VvQmQn=my!c{OdpPS(4f#zlQE?;_?b zZ}RqqQ7#R-j{O07tG@0-srEwRt!q99_apM-nWx@FdiA_d(j&#}zsvUc$cvvuJtx8x zYu7k6DiDYr*v;vBnAT5&jVCT+wRsiy>xhYK+3_~(KUWX>$I4OQU)P=T-|vcD<(IED-GRlCGi11Rz%BOqaV*tVRGGv-4w z_0!0Bn-GaV#;XyWXCFiVh_9~kkt*bOU##Txa5Wr5UW)!I3vtzskO}Q!A9~B5q4x-j z8#|Vd*4M+PX0vm*1R1R;dIot$TWr|Fm4}9IezVa;`5=w$c<6XiCVoF9<^$9d&_3zBfn%kv(Vj>2XMR z_7<0-a}kBD=tHZG8ncL}untXUywMT^Os~LCbD+Evv6_cY&xengO<}VTTG(^fmCO#a zA8|ZbGX#7}MFYx@J*`r&IK1CHUk%#grYO%A1a0S>SRCcy`c&uD37oKZw4qvbs z$0h%kYYr0>$U`|dY0}2xiwknYF0Zu!KrTma%?RcufO@Kc3EJv<7J^mJBTb|*&Cne& zpLKu??QvaQ(81m+QZc&J(o_dzQB%3PMDu>nEn$Db?H(WkYlfE0Gi`K56!RmmMOkDc z!PG))A-rPP>|Egfxo>>!z2DYWYz%O*3FNu@(?vs`-T3}aGYV{tD-;R#@N*L*Ai&ib@xM6#~poU%W0S1+T~e8 z+hn1kG{8RxA*Q|(HbW_)9q*VAF*2;iZzMj?o7@$99Gk6F0%i=6f|Gk73`Bc8*PYL8~|L z(b0>w9h%=re}`6zKTR)smbs6YhHfvSPJ|yH9NRgPU8U-EKE~BdzTINeG=ZO~ddv*! zib$K))ah3yXFC!cWk#$jX)lBPJWemUDqD0B;|Gb$;@WioSg8IdzMUqI|Ke_!NM{x~ z5z@%Bh6RpBnwh8*nqUUc?$3nbCpYr6QwK;lk!4mycMF{Z*}^7m6`A?qC^O;kl3xe6 zqG`f-YmwN6(2xh)CM#J0k@LwNpcwcu(zce|+(nBMjTHs`{J=c|p&J{gV|^qyAo6jB`e1c)R$SktLrgBsjb%(n z;<(>@6e#6YuF7itS3I|BF9Lry#f0-shpTUSgezw#^<0!f=#Lf!zXRRae=->oD6b>Q ze@QZEW|r=sXZ*1T7VzA$4h)^)_KSq)J;i9d#+Q%jAGW$u7rSgJ)6~=rI39YO_)?yT z7cU=1@~ohh7NrXzcF%3}q~I)&?cFUMxBz6aI8`m@M zf-NspU(y(N$l_<02wYqU>l3Gdo*xVH#SQRlyo+~@tMwpaDCX@dC%^??B}k4q`hcyp zN(PPzJC)3_f%%-ir|ww zt8~`UO~GZCj*cuN(Uie1Bx8~viV6`_7oiWA=UnB%A3piyzo%0Oh-c^}<$w8tMkYU7 zM5L*!`yqNnWn%+1xX@DOVV)B1QbMw-BomTjRF^BO#j#hdibCbRD>T=MaygRLiLf+C zdt+KyqI|2@G@P3!h6^&87Vudm*&8`$l$^oaa`XB+vou|i<`j&{3TspdrLGA`cMXn< zr|5ZiArbo2RtRmC)5)9*5HT@Y(Gb1OeS8^+hD&h&SXA&4w-k&u-Z?n6xRFGmS9dM% zD9A9fnsQv@#iMg3pw-NBEUwe_TkG_ufEeN=b0nECz`uTFTt>9q;0!ssVQW|S1Ed~4 z4_MFtO;gF0Px?1Dg#KM#{inom>6+dw3bjDbWid4cA|Hev&Lvr z>@w@ibK!A$UmMU5Q)M_5_gP%R?}QtXIH@~Ot_o#%VsgHYYh`Pz4(zHBS{@G5IUYy@ zXGlMIE0(m@4Q(&K6A< zlq-kzy?KCK*)Bkqt`~iak}yQ#N^*_BG*qGWvhu3;Ze*8FMnF3A~S9T zw2uGQ2AdHF3;P8B>O1|v<+dt;&2bB6$aQBLSb*lIm+y16ak*j{?Py!v>jR0Uy8%3> zc7ffc+Lgm@jYPcP5?U`K;05@raCur~g+}~B2mvRI)iPxvj7g9^oWk^;h*08`B+KjE z_mqL3p0!sON<8KYGvZw_-OW7ymMlNJ@+Gp&cwlHyA$Oc_3ME}x8V8_xC?eKoXdoV! z`@u+OV(E#1_lOai zp;gTqq}S&nLsv#2AL$LxtDQD2fJRgf#n&C^C_1jHc8!hgF$nVT1bQ~b`2Y6#A z81GSr!s~Hzf1Rg;_X4NiZ89M_gWCjEwgZm?EKH0y(X#KMo)WTf?J$rS^j@{u8`kyI!x z_(0GML!7L<(1k-dDJ=%`N7xA|6!yUGhXb-g)K0+i$IB6eMmoHg1)UU?mE1S>5YaaB787SQ+|bG$4tbf72|*dsgW`p#8(+JPGVg_C)6V)hm210ps!)w z3F93Bh=cD$WyG`y=RsW4KL*e>mcy_R!AE_?IgPl(GoQQ0V;LeD7{r0KZjPNvdg#gt zEYC-Hdz1H^5zFN^pQG$*>d0Z%aV*2IU$i=z%4IRNXfGaX~+FvZnLVT4XoN|q>uhJOeNzhM%8(GNEp`VuAuIj{LxhTg)fb07cq08 z1&Q32RMsb}HcKU8D?~)#+J0i1%c978^swOuwZvqxS{hlT#ij2(ur)=tbj(0Sa6q!yov*OHcaSc9cctp}*Vz=!E#nc2e3- zlC^8@A<@q!UIi6?=5UOQ?tJa8rir2c)dw%@!JnNSn6xXRV4H|rpRa696c`QA%f3Qi5Mk+X3V)bj8i2qy^ zlg59{vQcs5sAdSGbJyQTMe2he3=ZQu`{QjA zN7+=wMpFJ1yssW)hzmsvKJ$j3Q!<$Bh-$XuBaL6qA=Y~Td{>7<2l!kwY*yd=;eQhh zsHF`Ryy@wIlcR^+nh#h3w)>;ytT`^ z#mYxXsl3M4?s3fRB>$sZdtSfWUC6?#&iVV@WN!#O@)+oXj6DfMUe2I=aJxrazG5`V=dLvT@HGdcYWq1eRAZb z7Dn&I(JdaIY>I>X4-H>{FZ%oAJ-QrnC8B=32W7Xim~>z7j3V5umG?0~ z;-ya~(Ov`EPLbpe$ZjB1fyw`S)$Z_i`%iOk@O7uN0F4_qc>hMVM`-=7v3lm!ZSk)C z!r`KX(GMFTHR?@dgs;}ojlvDo~mn%ZPWRy1lHGZ*#4Y`0!# z?%7x}<3gr(mUa&u2VB-+&t(GzrVDz;n(osb_f||_Og)wqV3Or4PSDi|l<=oALC8ty zgenytcDcig6tkq&=|$xp@$e9Y-BqxV#29>FxMQL!UNnm4xoW8vS`6E#N}8=ML|gWt z3h6NUf+5o0h@S0xZu>dP(DY^1GABc@sx84PFwrd7Cqf>HHnZ$m>)LmfBBPzv_iX{d zaJfLvFJ+X0%`VxsT~BRKTc5cerf7Ud+1YSe2BM!h#bU9F;nRxY>Y2DCwAwf&yo>}x z9wbb;ptkZ0$E8Z5if$`EVSr>O&A&JEI63iz6t$-ii`@WPJH5si3+%C+?NY$fEgZ~$ zhDAYw4xp-<|Gz&eA_UMeQ(IhlDtGE3zuoDg0hKnq4iU!e(wmsfh=gYthclHg8k_GZ z5mSzd3-aHLP391*qp`c}FbMfHY&E|>qH$a6K_q4dsuM*a4dHqD#ML(f{0S7`EQYDBfOl^Bt<)@Evu;iVdEOcN~PIxsbo`0j7@tHh$i~ zZi1{VFo0%M`G4qo>!>Kdt_@hJA%~D=C{aM9b7&9{m6n#4Mq)_m8d6F`q*EmX1tf-s zVFZ-!8iW~;?r!*Qf6w!L>wUlPeb!2A2zn6l)I< z8ddvo0pwz`s<$RE6>GKqMp@mYo+ZVeFS!u6Gx~iEu8LQ_QHz^9qJ}VQrB)R&En2&Al$b8+fO?FArmN|{_iCN1pTkGV} z5)iuP(X>cx|IU-EDGLmHX-eIv?cU$6Z&bdW`i+FGW{}}7k49bsQm(|e?$@8GN!81t zEeczuSfMXFGLshzETER0ZBg6NAald(#`AK!R}?{#@oSl41Rq|949F}rt!<9B3#x$9 zFce-z;WVcl3(|%_W?jGM(p}N`Yk!tHZC+(1wVKA`1FBi&;cm42HS2`i9RK1^-9Z^v z6OTRpwCyT6*^>@6;Y9H1{j_V7<;8bIA12crDoO3NN&@|x(I3p|4mQ*T)7z@l!7FlngwDU$txNX+HdDjxP zp;=IZ%##8eKi(>EVaZ0s@NrR@!C-@=H|{);sFUsX-f1H9;-FEimv#n;w?mVZ9I*sD0o zh`I@sWR?XbDMjsO{az!sJxF~mhpxu78J$Ea3I zLcn$i;KX>CnLXWppXNmNT)xI{L3Z}$Pg(s+RoXrEklkbnn;B+u*`&1jbHY*vzY)h` z5p&GL4|kP(3^dhY+J*4U-|ZUn+;{ton+=FbZ036IHMpT7rXLE~pBZF4Muv&-`es-8 za?tY5$GCJzekm`1x5N9n1&U-BFo&@@J$@XWXz?^TOy<q{_nrGKeZZ-Qow^cxnBwYgGqyfXofoCODprQDRo75*6 z_UM+xUn0wUv|O#xpBI|?@6&0@_5i9#w-*mH$o-ph^T5LB;vb>zDMj6Qc#qiOI0Od| zkOllE{xXBci0@^aCBkG#(WnF!I^sj$y0k~3(m|Jh7=#MK7DA~g^n!CYfY@3eiTj4E z*}k;0rvg32l<5%|!+&q+>13Mzm@15|r(u#gfSB_9If+<6A;0uFDd@Gdmq}moy3WzM z%haNi}|KcEOt3PQC%4>x+kyoNKN$bxql;!qJP z0~htKOBJ-B<1lS}7J|L&M`YI0bK(cWeP;ZTQO0T#YDIi#&J%CU2(f*Ua;Z!gUi9Z$ zd{FHJ8#`BaVGrWn?PzA0TbAnHrCJ3CUoQts-@dKPfqNj7)2aMB3D8f*F4mp&TJD+( zyKm-^L@cSK41K&YIoLgTEp;pUDwvZh(IlyQ=k~-FH)O5j#!Rt1+>){La?-x|VM$1kOQcBfb0*%cTOYT&Cm?iw$n#q=$1XW%K6v zAE{3ALAix2U-vS;_pH#?Y(@JSSj~9F(Q~Szf741(E6r{_2R8>~&vwL`=QX+3X(d>h zosHFVtK&qnOt`EInjt=-owyqlrdD{Vb8-}l#sAPkzC`Hu2E3`qMwe;d-R4qs=cPIe zIAn<-ms^XFajQD8rr?b>{O~$E7$K;zr$BT|eG>gBy=aB2@d;A&L_OwwrtzpwdN>3l z$e@*l`0Z|3o)}d)S&f+2uhXHUruMpiK&)*!w86pC#t#{4FkFCBQFysOie7Wg@;7Uw zAEx(e3Xqoj(GvfNd=d~<(x%sbdCOiH#+xdbkB2A5(ZNTsiUVk&eeBsdJCxFsybrBx z;VnMt|C^;z|F^5$6^Yz9dgiWp^R;cagCw$TJGK|Wg+%_S%UPCqo~|u^bMi}qj1B@t zh2j33Ci5!#igKP+RL}2l3MQD3u+tHZw=TlbtMb5UOmVSYLPYfEyJC; zIuUswEOWVO;=A};Yxv_ltU)PwGf+ zV@isc=SS@fXsT9FM$$_N#AJ|^30i92Zwwh_n3Na84{5bxl=5PTej@bt-Dat`6%%UC zm8DefXNdfoP5E@XO`opCDs;mF9ErBF%igwps1vHWvkf_G92u(#X<>QPbk2+WyQ-r1 z%t!jBsM$Zz3=G|Z5F*3Y8eM`ugrh$YXPuW9H!U*3&v{q#M1rHa*~WOw@-Z0m=Q{k% zFQ_nR_a1h82~+Q@uT#01WEE|AoypJe)XEl=ab^swi4KkNooK_I(mDVs$y7rDpcziR zF6PC|-oOQGX9R)SsRL<|kTdV!t~|R(W`(zP9JgfxGOO}Oe(w?2&c1x@=cB5dn3Tzm z>AENUH+(g+wF}D_s=k(+_>6ZOfyp0C94f8A&9}0(7!>2h=8K6JqU9BJ*8VO+3Dtw%etC=hq|>nBnim5 zBqhmFbq|>7Y~#MUD*5*Z^NU=VIjkr>+}T5Wt*`OMf7_=%mY;Jd@z?FS9C|B{%-;hD z*U8@oG(K_E&)9?{=ZZw@;8sOzK3+}00QIaR=WWHDjm7@G1?Oa0BCvB(X%h8AbrDuZ z;6|j4*Ve;$5CSu+wdn&UJoI)lqp~XZ0f%o6?dL?T)FSky9RTkVyJF#|7O2{J(p*Ux z`{04cJpS*3V))=rRI6zCK&6Qh8z(Z%otpU2n8?4i(YaJ~;wv7}n>&}A;y#l2jy*eH zo&vloV0c>ONgmah9a0Cs8XZl|*ETdJCiae{f7AHm&H2##MQbWb?nm697NB^D9&C&E zTs~@Ha)`rehm*@Yc>$wRjc@ZKC`LCUqKLuD0@eV&3BpN9nfwpO`#(B&vKU+OkbInP zx6p{i5jBBM00xO)2*d-ufJQT*kYWZ^JTn||KnWpAWr@t z(>b(&t-W8BZ{+tg_Z4#>Xw^I3D;7G)PDF$cK=DDX%nPZn+W-(q=4v*&ekay&cSyvo z=RSqWJI_DDxZCy$(K#Y`genA)FIw5=Ns|HLQP99+?Lyp0f&mXe!tZ^SDi1ds1%DDZ z@lHn%Uxr5mzCEV+A7^+Hc5Su~%76%^- z!g0|q-**POJ%cu(+b6Rp?JW49+=qM0sk)Dd4$>Ex-kf=MT`>SQ8HYvNE7!tRqFgyy zkNtnVPG9N#-1PQ-Yg?yn6Cj#KL^PW|G@U&piw;dJ4mePKv|@1-Tc2jR3M&fde+ii7 zI+q5X+a*)WuTycYtLeJNlqlbB+1k!{?o zkqXSe=kJXAqh1lH!I=|)KM$r<%~fh=eII^Hrw})GYl9*v0Dq8S(9rqY?{_?DTIxoX zPx;F*4}~6(YTLY30e zd!pOo_ZKTfe6TwQp>67*Yv>pHww*d=^1!L$f&Tlc{Q?1`f3sS*2&j8c`IN_-8ucX8 zV}<&#yQpkzrEH7B8Y>RA-_7?h`km{Y2BeU;gl@=pI=nx?kzPYUvz2%kTID~h!U#K^Fyi zmZuojp`(r0yXT;sJ=@{|k3rIbcuPrv8z&|zaZ|d9m+qcG%XXxxCcEpha#!q5N;X!( zCOhN16PsS68cQ5%fIM9O`~xxI=G4vrI_D+$OKpCwXKn@@oc?Ll{hvLnV?%k~aYRR9 zOE1NFoJhbnb0f7-KVLb`Oyh)Vf_sZKt!P*mq6}sht+Og+Sz}t~%%l3gpT8wqTpgB= z+g~~=v%-s~xuXSW?|3+g`)u}g01Bkf6@KnL{*z0F+uhfJa5p<%ejsv4+Gq^=atM} zo8v&PC7d{<&3H!u(2&oqru;-j`chdUQV%QDNuV-D(483cq?aUrg`DHhDLpPE<4h4_S}K{SieB<2lFw<^Kxzs=^cy8iO5=`Sx8?v zuD!&M4xNIqa3z`4-MAgPc|AbQTdkl#(CAHecs{@hJ~xOA{n_2Z;)Mn#cp^oZHtiAs z-gx1^m0hFM;Y!BL;kakM80u`P&(tWcz8_sba>A+qTpV9UyV+J>kbea11YnPGneDgR z1U(1tG89d**^ArwJ4Hm-I6r`Bd;R3&QF-Bd%ffpn36$qcndh~hIG*+Vr5cZyQIvLk zOn+uftLrK*!eAvaw&)0`?ORJKoe(U;#>EZ+N>)7-?WkkkNRK6 zC}(@{geXrHm=V)71*qXCi_maGsV8E{sx$<=3lvrVEOxz{^?G*!v}($5imQdGHu&Ak zDb!{FCj0@(#OZXXJJsVvNF)*-jftyhe8wITU?)i4`?h1@xiktnvi@Kpxi?PqQ@cXP z8y9BRx?659`Pe7Z2y$qLM`n|U|GPlYH^=F^-xlK0d@n~ppJ1u3Y-*S>{5a99CWtcoOz$-C>N`co+iTlJ+$B%b-Sy76-Q@V`A7+ma{9p38OiMxTn_Y8*uCD~^po8c~Vs6U|!hc}KG|zg= zvhZez2`xUs4zfX29>yZV0O5Xp!=GFto9NS zy*|JEfoOB&aYJ}K%m;lU3e4f~r04r0GZ-N$?xV}S{(z99d<3=jsR0?FS4T^)iVWM* zDTGt8r4LMlJs#sRmsSFkYhRfv@&%2yDV}Sa#zedKeZ&Lhs_EP{<#Vf?oev9;PXB+Y z<>8#BmjA0MStxKJJBkP#0R%8XnE0(U!}<&{HzB(LvwKMZ@}9ghYA^6sRX14J{`&bZ zK##?S;X@9>p}};a((>0cKe>=$;yw#grlJjA)9+t6o9j7qmmEX3J8TnWbw2p%%h=mF zYyEm3jx(>P$j+|m0BG|6xG(+#kN7pqZHaM+guB!-uhE;~#UjhT(^7hAs~4nE`m?7` zMQqG7#N9JxR>~fpJsTNbEVlfCN0}?b{IQttZ{rdNS6_?}PnUXhETb@g=IiF3olhEh z)%16Y2k*>RXLL#Z(~eUmYSE=h(}vXu{r@-Qz4~Mo4wvA**&j?`Zuq0HwZ*olg58h1 zn{4q%Owq*keLAJmpO2&bX%B~z=@R9Vs+LH4GAeL?@1@1;_xPxbQux?F{RgbegHyG* zoL(W081}!1n9>%0_`J()A0ERYF*LRzny5l8W?(w;h&X(q#7qVVSjmRek8=fZk}AfK zT0Qs9n!@~y`3>J|0nMJH9IX{M^K$|1-R?Onb2X!_deWMZllrAOXsl<-tWn)39l^BQ-4AOFfcJc8tSM>a-D8|kHU$bcVkB|+y%~O=s;1SP zt+N47pTUJqB(J{-Cg{_Ro4sb1NOd**Ku$*Fj^oj66dPeU8{uNwDScp!Z*2~-?^dtn zu9Gy)?o8TVgkc_+bZ(TAuJvKBXqX%sXwE|cg~UUO(mR``uqUdrZN>61k=Y)yd3B$-!v@K^yu(J6tn9>FzpZNqY%7BuU-^|-j2)U9`qYn4u(TZZMqkW|S)Iv~%~ggwzQHm)kjbo7 z;N_8vdeEIdvvb`q!0nA0$86nV9?5 z6nNN>9@7G(KSBLX3b(Y`BYXn!4S-7l|OW`R} z;8}eiw(gU^bvPfAB(6(Tam7e#?oy0nej%K@yMAEPJqmMp<&q@-Q^=LOL?H)(w~LKd ze~snC%PrYwe8^Ye`ccBiFY6Op7`-=Tj>9uJ3n**)25`2JFKn6ke$a6Ngi;C9`o%9g z-q#L~0+Ym;_2>npa?5ZMrlf_xd;W)pxihSg1FG$7#0S($N~%o{+@X-qm|b^j zh-6s!$Isk)ZB-o{wotFl_!aTL>#0cJwkviCUt+VS{=XKKs}$Ql>A$O=z`Q~cT~X@w z^urvTPZLTdq;7b!E}#s}s(ytn(y0CIecNFR`j9Y%wsqk9qRdd?H;uqax8idR(K?}) zhngwpNC!PXB@P|OPo?^)!xecgm!C6ZrM~yda7!#twV( zT?V{BmfNf>8S%sxE;#14qSus#@@S8dBRRh%a*=ZFS4QfUo~3m`15NI?!J%`$gkbFJCi}X^3n_DejMH-pR}BK;NU1<292IL24mnt$UFgsFw^xI0?( z-h)y5dFI(G7Kf{AZ5jvdun$gX4#GPTzrrg%kiT@5A5KoOZR=E+Q9+a z7g;@{7vrHhN_`<(Q&)zmz2cpj8T2El>p1s|Cg{5X@KO6JqHyoj`@y@aby=nQu{6 zd?#q_sNkVLChY*usRF9tdy!^a>4N1iqTLLzC?s=SA-o!rS(~ijiM>0cFD3t5F-jZ) z9aZED_~)0e!T5g z$YR_-+}Kjv&wt(@Iaa&o(!_7R-gDnYCcD^wBu{pB zm9KEr8FE;~pbW;jCSw~`YajlAJ(2A@;rjc^xT>TeMf!*D7{R0-N1jaOD-gjF@jNMR zLuA0)owlS5@Lp(>KzZnlC1@M|S$=Ce3a(k5K&@-B)Y%_upl~N1V+DY;aEg!~f&B~ht zO9cFNoc@goY*3cB-QkV|C{Z>q3e(8~xGlldo`P{uW0;3UdYvjsCgJ6nTS!a>ek+VA zoXo5wL3HD4+>yrubnSE#FO+}riWF`ntuKb%meBo?s90fS7cRsc|I})~|JcjiIg3V2 zlxaNx&oW#v0|N+^8X%(|FVirqDD@g&JyUOG6!9nN#CPG@O-Yw;V@f>bW29g%EyVV!kIKuh{w0ixdNz;0$|FE9HD%_qV z3&qmo;ts>O^-Mw@c)!jla!l9Hxw!6| zafnA-f2+v+oPqFW5F#o1*Gd(5ymoc)%M9)NNznzb)ENV9QjnF0H52$urTZ}J!Rc&N z-M6@Nnv5L#u*7d9yJhq4zp6(4m*MBE!QN!AoOcw|R`5$USYFJ0Jn;a|VM?qqiNQkc z+JVeL7t_B#0eap`5MhOvB1Kf*rzl*w*>h&6am5Ov7zRE0%dy`21Ejq-n=_6JT3Ilx zTH_JS1%J9_oPo$8cQ@rq{0}vx`!~=8wF&QTJW)N0z0e>|%torY^>yT&$VKJNojkl; z?{tI)jzoXaR%_en!fG7Cs zn(+^9_9|rzQHKrNIWN%kvHk*9c?w<6l0HH|@Fh`c3Rd_dDO&5b{~VZV55`Aa9-8Cb z&CymF8k-Kgid5Y_0EI-lG##&zu!Rh&8Mqyj!ZL#AIR@8-FZ%}g4tXVVCH1!_ujaqY z{uY^!vfT+el)PF?m7k~&Y5pe_5FB!jk(>M_Z9x%%yD3+UOB6NTEZEr zv%wT_ng6gJZ2poKlq{Z8Q5x5gaT`)2USb*An=O_PccKa0Fkzrp=gJmp$7EKMIJgR? z=OJvEd%oNyl*sEYU6*Px)iEoB@57YJu6ZlKkL_to#Gy?2PgSUA#nI9pmo;++o@hz4 zylRGeje+Naw_7y~<|t*kSBkUJGE55lX|{Kc<7GarP%oC!75RT)CYo^3Oghs658_5<0|9gzg^E)XTW!90 zfUx@{!dVY5vxXAswVY;%zbJw?r5WUTC`sjzWT8c|*Yxc!}@)J0*@e<7@^3_5VUpn_z#W9xgFw9-8IWMt*X+zgF)k=y{BDxzHNz z-kU=nYKQNpV=1j`-&*Wujd3CFop2prbKapNzj{V)6LR)PZN|njCxA7W;6(P6-mc%6 zK4&feTm?4_KIhF;w=Q?JT70tZPs);*1GZF|@wvQ277JeezV9z3iZ-k9(3N?+qL3j% zcUqCoiwdiJ1tzQ~X|_4k~3F1r}!NG`X>D14l@df1)occ((#B-Els zRCh&o|4qUL`yYIb5^YU@)@F=^bo4uM?NI z2zvGHdh0ujy*Thif5#3br_4ZXCBGeH{@9>KPghB+6}Pl`BQ&`Jst=BiGX^%;H>!Ez zuRY7Ut1Hx#PCBC|!Hmq!kB_@ynD3LMpr&s*TJ=G?lk~*LQb{yvj&|uw1(@r-zc)_= z^6nsvB4QZG9ozHg=)n<#ck+kZ!(c&7+T}Qgnl#Jp`!=>vDa_>=su5z(SxM^Fkbef- z-F3|7t{5lJu#p3Gc+ypj_nP?ZOb&8mwuniIw;OldnbSQDa6nt-gDx4t6a#ve6zv%_ z*^cdwlLbYdjWX~6*H>E?0lO(pEMvG%1AV?hU4gScCjxiEPfuRkEqd8%1ZwXvg1bav zqhw5VTjOVC65AtNLs0B_?q;E{nJeN@FZJ3+Q23%n-~TFh#e5QpgRUY2)uFUT6J4O2 z{nFW%(9Ic>lEffB&5OII<8dN;=jb?ZDYEDQ)*yxePqj*cn-X!lWxn4f2f4v#%re)r zUVmsmIO$r=Esz0R{g-}_wQ%2yN&<4(vqp2;h~bD8_I?84km(|pv*4>2eRdIyQrdxs z)S1%!s|*@ZMRf;L)hD-Dd`}&(U{69ymDjU}!PXFWZ4znBy}?Qjql< zxvP;Z|0cj=Y*++U&urf7+eF{HXFxt$L|3OHXoN!ca$A~gR+!Wwyd~T!|9$HKJG-X^ zB&YCz0oQz?_WYbMN&9=iKqgQdA42F4j7dZ}pw?lEqO4v&(QMF*Fh@wuXkb3&+p3$l zEa{^*mQ0B2O?DUIN^st|f^KNnZF`MBY1t#y)KE{$#be$eHGH=M%odd>(-c=-cZkp* z&->fH7>3K$Z>lwC?fZ!N145szheMA+WHIRNpl4aE*=APZLGSvEERBmsjVedUT%{v! zsGi~?Yo4M)*SesVS*G?3nP9t&3x^rDqHiux8)lggmeBIK8jx1&uK2d!>HVDR850s< z3qjS+6Z6?ErfykF;ybgfgS}EPGGlC?YRz(5vLt`j2XX*0AE-ATo)|RsPwN-GlYaqxZz`R| z)*rRnS3WE|G2tNJP2yx;tyuo6QQ!Dup&K4U*Ukm8T|3|hA1anKv!S=Kw z+?%Dhx33crvtQwE1Z|>s9E69UKc)4G+)6Q|_;T}MH$0E;w9m>R8E$FG-9!bCq6+Tl zpJH83ELY~>GlUpt!q#{100~4A{C*-i)^NY<`$#m$oJs5Lli3@>+<-l?D~zffD(s5q z!Pkjp{2TA&C5HOZN{mlGn)y2*alQiGH2`Ja-;}mzf>F4J2guRCgIi6)*pe>SX<7ta zr3$c?2qk(#*sZ)inBbBrD(py|C6CT(os%AXrdmU(fU?@y#`VwWP7b3di<%<^ee)EL z`If@))jA)$8y9V^{^U+XRX9Q)7Dc8Jy<_@XbwLF3QUu}z6nNS3j9})Kp&y{fb-Ck3 zsD8vXsr2Z{;_5G_>@V?_ZrhZmuSd<+8OLLkK8w{aw%S)ctPY8SV<+7PhHuNKosr_q zJwsaNqzh*^{Frae`1M0n02Ky^eOT`bLpC!gyI>e$4T4Ovz_)xAOrq@SlIHT8_WV;* zoDl^ADE8?C+S%_xUzwsj0wVu?QvyiC%{?&)wB+*|Ft?PgQ_0D9F5o&tuZ@($4IH?K zY3n8#Hf>^~`c?n5l+{EqySjg$sHINecw=oUum;^%EivM5~q`~DZEE9%4q+oIg` z)Vm*uJ)3Yre}E#Y!6p30H*6=`(y zyLzlby{YdX(tU8wSd^kg6mA;B&kPeDBe$yw-k^v0X#dwbnXR($wPjjTpn{ysY%$F_ zP`xwaAg%}ELls;>GNlI#63O3webu$F^lERcT7ZMX^|3A*|0;Awmxf*DOZe{BrsJ}C zHOXL~`Gcv3;@7CK$xmi$)8}L~%|T(4atF_AP{ z>!Xd)y{@dCRTEzNRZqblghI2N3un<_cHFcl9d?*2cO3CV=BQ6i3c7;J+;H7@&^F<> z7U1b^MsSub2^&B8Hra(ckB8iX$ln=5ih~-+<%@7$>EF~z2ZwRx2Hz%^+rQ^yzr2dD zAKJyBCZP^X@Oyb7Yu>XL?H{F{V2+_8;RL_PB(CtfwG13M;Dc{4n?wZLr0b4Ouu4r- z#EC{$e(uFmM+Rh5pqGMxba{es!j?(hzD;6ls(2J+4ed*>)(iPA`}cZ+NCk7cLRVMB zf3Oh$(vrLPT|NqzjCd{z>3^)m;TJ%lK~i);n~=Kkx^si1s{0lF(4_^50j#N%w`JfjgZuhg^qp}ciRol6#lsYLoT(Kq)YbYsA)sI;e}tpA@4t7c~)jackb zDp72E_x)Ry*@{rkSyv_IyAWY|vAyaKQj(YE`oC&?8=X?t2#O5HBd{bBYcdBf)a&$_ zSH%@J#nsJH2EI3LxyJ}Wn)jW1{77Ztf{N)7J^U=4rvOAD3~3xt3d-Mjc_<0)*81@A z^CE=NM5C-O@<`s_93zJ1uj|iHQq(XF7{vf4v_M6$zKUW z=rETgopPwZdultnTa3w5m>|O zy~k!IP5;#5!laE2cWfcamZZ_sq_`5yM3GZ;F^psZ$={1Vj)XA*7t@W9skB> zAv3ndlYN1e*p|K{4Q8o9m$b8Tds2Kepp3S4^r+>V~5LznBS9X4cG^E!vdW@3-O z#mz)u>{EE=X_?Y}@#|WUXo&Aa_!TFyl~?5r>@Obq=)LERvx6gRA$Djxho7)xXe|w! zk84g-FS06u5TS4Z|8R925+Q!XL!n*C+fQK4SegBe>7l(KdT3cONX<(eKFW`98QDDd zG5ePFU4609P`2nZ4{2Rb8PmU@mZ2ym4P2aLT55<~SQH?};+;Jng$si8Z#iX%u#9<_ zaM=r$h`K14Dy&GZ4%XFa%JzoQDO9u@(C7U-HA1G7U0w_t6U*B1cu8$MjbWrU_f4b2 zE4Vpygr+kP`B3Z>!e1WDMoy`NbSK1_HusBo$;g7&kF7=SQK=_b4mJ|}j)G5%yKk&r z8kv7VT5hPPzNP?>?I=rJo>%LX$kYB7y1P5lHvbB65chiUI{0(T7Qj&iQH8TNuE669Kf!TGW>jM~Dh%@!svW zuChd)R|w_`>&a>|__bxN%Iwy(Unw5^>;5_|*C|!RugHoz%JKC~it<-o$ajkldboIu z;IDx`O3wMiUkI4L+F|ku7_+A>nZTkg)WT z;kX5$-4Pa7*Fozi6eX`7oA2pdkw#B=(hd6`zdSr6T`!y{B49e#B@-46VuN*{hZ1`}LOA<_t& zsipYaFPXsZ)$CE45}c2PUwZ435tz`7yU5}IkxhLJke^(C4T%xODqyXyUZ}f>XXB4e z-QF^zJKV%4%iGDHKo9V|EW!oRyFm1QT;E4MtfcAU`d12Rl-JU_F@zvh@ zYE`ND&YH0*MMRh|8w$ybo>Fvo^E0nsa`9rgR^z;|>Q{$pM6q~ta!VKTd z8f}^0c0?GSOz?+}_3=kW(p?5H-B@iLd5Mej_7A^W4^8*uz%j2O#EV@Eo|kkjnv4{7 z(;R6n%OFD&igu&rIwjh*+AgJ!ywJL&oHew;TSpNTyFR)Wp9m+x};h|MRUB-8l9 zOyw5W%e)6rPV|f%PSE-@fI@NUYBv+h>9aVHqOKZN&lM<6Z}{0s{}`gT(>Xl&#i9{c#PR*N{{=7hFp9^7>SB||0s2H z(DnX^(B1u@R+svuMw5JI@I(;u!o(yx)#moW6X#cV??$0cU(%C;sQO>SgR*?zT7AAh zG72jJi+z-u#mVbnbsXO4v(J^EC6$+V6knB7UYmB6@L_#U$;z5ehrM&oq}$mpbFNT&ynd?Dtby|G^XjXgBxnY?~5 zan8yqjJuVf`i}ARMJ|YM(Xt=Y>5>mVU&(ObNIX= z$0x$e*1w1}Qv1%I`GXint+7(?BSc{lElq0h`Vqt=TV#D9vvLmU(TH$Qr4k8n_fcWLw>;ME#fn=mb?7+S!7+Jm_C9>)de(R=RQ{qz%8OTH2wvr z$ZovtnhE^lQ0%_WJdwSJV9BDKA^s`bFFQRwgi+0LqQJAyZDiwN;M4G&y&62Kbrtki zy|r>f{m~-%r}%rx4lN$~iK|kr+^OzH@-vUA^#|G;zo<8SF*N@TxrpCNaYffmme1&v zTyg4uD!L!GPEWK}R8Hq=Og5T=)eolLO_>t<1Nc67LW+Ye6U)wW&x>5rwS&fgoIj`0 zfrm4m2Fl^#>c=SKI5@po9SnUz9*w&$MXhM|iMF;@jHiY6h>UV9N~!_1 zD8gLt79Bs%g=bP>3-gzLPEqk}R0BW8lnYj;w3N3v{?#OK0RH42RjhL17){>fkG2)M zae9S{GMaCm>Xu&H&5WSzrV{zmgB5`;$ug>pf&KE1M*eRArAPM9Vm4wi2`<2ZyaK+@ zy&oB5LiH^1uDx^%B4mYOuM4r5x|Eo;GB)+c&B1p#R5vA@uRa{@WFVB+Lfi>ER!$1U z_2SOY{l~^1+&uzlVP$=Nu_CQJuthDonVFe`gM&g#Pm=Pf00X-|f)*49-k3D4rSKN& zoqc`lsGs@VLKs?KPr<}(szi;D^sVk$XU-)Xr>%eB7ENNGn1 zQ`8sCZiC6?YF6=eh)#$s5}K60gx1v5wC|iOj;(pTH#~vS4+nmhU#KgKh3$GHYpicbL z1}z=yBc?p5-+qd10n#GUsEayzQXu z6=z#$8XxdIBtfBAd*W;Ds1r{A$*B>-#V}y-G@d!Wdq8ONTc^u z+JIYrM>c@~g@I>m`wPKCmlaEl=f$y$d^AYTY~G5lxlKr4fSV9Y(4}MZZjW9w!kG_D z4N>_lUwG5`e$aD>JgsKtxZ|I$`Aj2F(d1n8cPQmhO5^fgC3su*lsQZJ{B~V1LINlE>uh?`yMNzK!{#V^aOhyC zRS44PS#J~b+detpVNRPY+EOs)s|n)e&Rh%k!-r}=7t0407G7>nRVl5Y{h|u!0fF{g z(`PDBz3GU|F0g3r>w?x=lCUlxh#a$W!Hl@Qg73JuakH;bZosxASz1dEDOdJy|II0( z!R9cwzq_nX3X;AxLLNP~rc)iZ8}_!=+vN*+|1SP|a!wAME;ocKN%mN9yX8bKa05M$ zoV=M2u|&QbhwAFb@#q(Ec0{X*bJe+E8(b9AZKm2#$u@#fxbrWnT+re&H?s$S9Zd}? zUL<5^L#SzK7gmP>Gt-+GQE_p0NFoNXFPnj3cmXV4a{6NUr+kT+V)m9)^ufv?7b)#r z;DN^F<%)cg$UCW^bJ1M?_0p-#e;rh;ftGYThsyoE56`YAb+gYfsRN=)g+P@H^I868 z)>IjE;bUWGxA5mzid2rB($l9zBcr2Lw!O48i#8`EYEdtt5V=6Yv(Jj}Cw$nZhKNFf zxCSDmV4RR8g<(oPeSQCl+UZIwrSMpqS$Yla#`!Fd)ob-OB{OjYtFUhaq+J5lt_puy$MQj@L5bI-tQ& zKAzMC7Nh+4Q)FcDdx6h0+zJo3b%53*ER>gI}D%@eMcZ92~(YP3gS;19?Xb>T?)l zZ^o2KCaTuF|M<OC5Wvco-QbZelep; z1OkY7TYDbX#ik1ZT_5kF;7%exw=Pg6-^!8LaELhAJJ(Aa7Tp|4 zvay96Tsn6gyBxi5mynKi&&12=jr4j^MEr`M+;P9RT7lKp)x9GD5%sRpQZX}Q?!Z%Dv42)8vv0qK zLT^D*j6iVV`5}8Ui&p67IBa)9As1_z1_f)e0h_bexUc`t3 z)0ewjgyLTL1r4~#oB)t|P8$dB4ua~L{xP16LIms@5DVajIxZWKyd04vxoh0`OQf1} z^E+n(P>+IBifYoljX!nt2!l=!g3~!W&BI&`|F1zx>Ls8Izqhj`$;a^=bbGHjQ)XkE?6 zg8NQVdXu%*^I_p~2)D`veCdR)P~&1D>`@><8>QPekxf*g1qJ&*Ww|ujo}(JeHnxTeGi}fEGDvYg=5O`(6D?Rs};Wt+?EXL2=rxVMfDLM1+RS%R}(&Ju4t`H zh%>!AgF1lZ6_q+Tfc4$c=h9lWERwqE-9Nf*Bg?6VXRY+sD0Zpd0yHEB=suCq);rzM zE-l%gv|hySZJEHP zbqxF{c6oVLCJEQEDAXI8hli-UTG>#n@thzvDr}Kk?uMVjRXdD>EV^Wk!qEv;uvna& zl~vYlZ0?<6WhXt=D_-YkS&Xh`*qkQ*5xx}}YD0#>O(@cQv>TwiGgdyMOZ z@gU!ZEz~!IUc3+ChNvVXuDG5W3>Fj-j+eCB_s`NFM)M{%Mj5yW4>{NGT!Sd|R#FTb zu7?DGuGXDl%MO`Wib&gsKUYb9Cu&TE-<+4$=`-XHQy?8JZgG{BX`4;F3IDwzcoge~ z{d(c59Y{X9bE8%6yP==WQ>q`-a?2v9S}I+?r1X`df{w`~V@Qlm>WpT?x;;J`JQ0g! zQ+H|(PUDC>Cwuq*@b%{LP>0{&aLAHnkdU2}3fYY*dqQO`dv>zLF!r4ojj|?X-xabA ziLq~E$-WzmZOFcdvGaV?_x}BU&wW4l^Lq8_FXeNcbDeWt=Y7umeQ8RhG-%N`$rR)ejUrT?jBdVYkRw2v!vC%jOzJ+EQ|s7nd!n=L*S%hct#&XwL=#hd$l2hLkv2=L84wzzuuFS;uk=+dsSS6bSDR z^+|>QdEQ_X5V!)wI$`LhnH3oVF3$o=`C^tiVZr%Qk&tTpyI7zx-L1^syhr}mRjg&B zLId}lyf(2M?R*zIxn2hgzOX!7)FZDE2;1gkgN$q6M#>>tbpC2Nj><2-Pu!WbR{Ofe z1X9s0Y`qh2lvTA7DslI-@Jh7I`Db;$17%n%z20(dmp~2cxOZ!{zm~cxrFkuGzlPP| zScugxAVk4jOdM<{8bm@wMXK;5P)QBAd_+>U!SY(0ve3?e)cFR#2%fE9t1dY6k@P*7 z6$y9SZCE5RcM`cZ2~q1G>nZV@4wg;tts=eUou}+2|0O08WB>qa2&`iHYr5PmM|*OG znH-D&1pa-m$gffA2%{gbKLmIXr5AmSj}LWU8#UjYta`LKSI{t3{kjC0(2IzRi{p}( zCOSD-njPDjzsJk}L|#59K>F^9_(wg9i8ab|J4pW(AXfpwx>g7@@n%J^qHBm!G1l(x zD~!xnOv7CJo5t^2aNsq3W<`K7RV9eU%#H5bG*LH>*0*1qr%Kejh%1}9|v7cGf zJDWlqiLo+Z9>}Xls>DWkdk9Q#1P@xPAdoMOf(liVApTtfGx^R@)7OW3)1w8n#AqRC zuJ46P0zRip`3-P6bP~5oCJv5iKKwk9+u|~!S zW~u-gZGmBg+*i7C_a#l(97H6XSIBilSL&qTWV=nv6L(}2_)c$ev-Q({xtH%aZEaZ& zje#=SR`ZOyB1MtdsjHtl<~KiS1&6rE>6`Rp;IT8m-d82N8wM04aT21est+yY5}0U$ zg{HTUjX`%iP&jkQAssO7uiGTsVxk16>cU)AxF_YNEsM@nJj3M<$f1L%tFB$;_9f!?1xqzSQuy2%@3)iC@fAuL1DqW;bz|ouj`eLr9IlWr-PM``c~$ z593b)^BiGHeYgax7YmUM7>0mLh6l~3Ha9<(ZkvTNc%+$UAc)#uEG*Ciz{U!=AU|KK zOO1iV5^_6PxY3Pdfk#e4lw&ef=|@Uxd^e1f@>I>hq5_+Ylj{aYJTr3|y2)L~1j5Ud zNIB6lX`$t1m!XwZq->|{WH%3$!t!vlNT{M(rExMujE@Ep~``dnT|OT!#c8k zc>k`DyVbRTeGleAJbO##kjx0`QF#%`NZPnM9j~7|#Mq#q=L+`rER<&Ph=M0_45ioq zal2aQRw7RBH=f*FY7WSrhK4fx zaNF7Kd#Rj#JMplDJ13tc2b;0n`1j}1_cXalr2karkl zWxQm|{6w)Vb8Yfr!ZXm44ja*$>CYU6CqsRAXW!H^gIF~Hl0G#lh_&DH9#SOsnlNh{ zRIQ=!q7V!Ab)Z&%1wML5oit$ocN zZ+W~(r~jfq!rQ>z%YNut?azCRo-)!b_W0j8FCDTkK_y_e2mpPxZAn}uQ;#Fv!`pEt z7;?W)tdonyonTBDHBdJ9#(;tV-Ym{)D^h8tn#LJHS{nc;0AFC2({QuY5?nNn!+que z%#q1MGn}I^Y&%;ZRD>}H*sDFHRFR=RI$(f|JN3qiKLFGUJ`;lPl_>`AA!xv_G)WuFJriwp)xJ! z2ndV>voSM!*(<`qY`0<_oi%a?4BE~*geraE04Zu}(aF7dQ3_@`WDPBLZCos>85kaX zrYGlt70Aa)du!^ms8%sACC`D3A9h%47*VA7MvcN4+HomVL30u zwqlodfrw81+fIr$3{`HQcE*pv+_qZ*#xuR)%@w|mo>I)9$F~4HQ}EadqJ8z|&$~$= zv^iv%^S07~11U3!JJ~3TYtVa(cKW_r5Z&T0Oc+&!$2QwM=>|#zkDyb}OtGHp_95GWqyS zklB6zf$f{k_XANmaUd~1=8+#5Ma|3E&X8evAm+olFY>%s`C{5Lt7^aS`IhQE%eE_# zJy7RWmRJ4#Eeo3>0(kt~dz{cFE!x~qm>(Dni)guGIs2rCWE#sR&gvx@A~+cg>mt@h zU}H>uu5T@UwQTycaJa9cwbQABoF53~XdgnVwik}nz$DMDIgzI6GK4w0Qf`V!4<#Pr(9%mp#sUc-t!~PVCva^K%^6*wP zx665R(%WBB5zegdfK7{v=w@A?E(7@58?D9C24k@?(9A!B2bX=wU?JMs8IOHWS^uqo zvz+{?m2rlFhNDxghDViqV!N;c4_0&kU@>3Jx0|N5$Pz{s8q)|GQ}QvSqeaf&ji3U$ z{XfUem_QQ_Fv`&LIT8WqIfMe6Ul19uA6H6#zM^;JL;zHj`Bjjp&8nset-MuvFwf&W z9ZV7BD6W4;i}(G9#@q=qMDmMlLKYdi;3Il5w)gq-BXy%e@fyO)D==V9glhm_9o}D^e7C$o@8@+peQS2ko%Y5h2G6xW```=Ps#8F2 z)>`esjMw>wO@J?^b@@>{sc-_j@`z_UWhyyJ8W`PGM{R>s%wGd9G5uSjLdmJrcITeW zs&YFeVtK6T0Uud&BU8p@$C@9_#r}FsURkg*NJXa~XdMQZvH1CovB<*ReNJknZ_(H( zCw@U0Y>%Z2N#N=Rv=amz85J|zQ_0qU~t^0IQD5DH7g?#|o; zs?Q}s#bu0E;X=q=6Do>ac0EqkA9U1 ztvq|5L@(^-%Nr^G)BynxP?oiMln32qxF!>x$uk*Y=FfMUsid7>`<$68KhOuE@T8np z7h2HRhP09RS#Tv+ZT}rY!FAYylii;d=t4u8DTx8|A2Z99$!GQ;MjeN@Vh(kf>g}?! zvRs}b(504uEQ-$KCIZD|Fzb!epSI!@n?AhX!=ZvDYHIIu6e!ekC>i2JYv#zMAv3fqX8vM3-%nJ`Z z=g@AG#(y@=X-&PQ=jV+Y5veXAjc5Xo&+vLjZ}49Z1My1d1qwe$mElF?P2q z$1*NQ$nBd{-~l}Yr59_}em@_O2vt*;x5d?DAkXc=4@=r1#bG>gu4I$0v0+H@B>B-*g%n%8HBGW5{g4 zPc#i#nm^Ee^IA&v+@lN~%I%w7SDdZArQ^Q0{30^XbLSKSo0W4=8;<{7n>3c>FoR6# z%g*kArL<#V^1aZ3*P0EKr1cw3Al~bQASgeC0MYhae8upVk0@(*0k{U2d^bzVVo~}`UB%>APCD)_Fq*5$Av1k6+iwifGk$)?#-!J6UtkDjZ0=Y? zv~^dQC~W%DMldM|1PN52U!Uw0OgLY;>%im`9 zzazo=c=Q21uh%k<^-X=dYXr*aEfJ*5w3&IdG!o3iEZBJa?B|hAFg1He8dRBgt|3Fx z?_Kvh`s?pW1~rm>DC8cm{l+-yRErI-Em79pimH!?g6Wal?~-3=Ve$u)_t$vsgr3;k zdXkRT{1*H<>Nuuv5&5}r9bQXdY!WJZd!K0S>KGf%+D^`^-p z1+8B(4!cmJn?%^!GGCX(80BiDx4HI7=SGqw+oXAuXyvMpEJge>{NERdszWvGIHTqL zd17vYZVmj(*8s{eBYtY|8(YdJJwemLsOPq2LFqm`M7tJ9%JKJg$t_CoAa6? zW7`br58o}k-O)w576b7xcA-aPCH|_?$Zx57}B*knj0DW;r<{FnGg!aV$9b@ zsm7|k>3-~b%%4f~!SavA{PG`E(7ylKO2{dnkmAKes?cQ5@?p#xz0C|vBPGnZZ>H2I z*xeCj-7`+EqXf4Bi=&AQ`JXx9ns>^H6=W|)Hu#gPp%~L}0glE$^((-EzYg)~F@fVh8kAiEmM=ztS`wikNsbLTyUF zD5!>}H=TMfd)&{idX!CgI#fi^-SbBAl?RJ1+f{~KB3B8*nmIS+LGyb5$H#y0PI*YOY{?HWuAYiz zt&YHiL|G%4Xe6#`H}*pzEvlrBFINfs@^QAsuA@buE8c4<<-72Q5CV}QK7Q(^J$e;G;ne|0sK?dS4}TQc}}Od zpzY~?4zlMfch#O^NwwqMIkzZb+c!0}y+Gfr2-bW2IYvepaat#H6gyC+2VT%sHzSvh zJI(?%>n^XC=nLe2@tLhAOB;}0f^}Yt*P6Z1U1B#uwG|6iU>Zw^wvI0KIE*tjKY%)M zC8lCUND2O-{x+Oy;OW!ef)7O<__NL387#AWE$blhmqpjnI6UxV)5Y(QE_p{Xed3*9z`U4=ABu{JbYdr9 zQ?a(;Kx%qs{9P8&9j`zPx%NrsF@wMUZKr|^oX~vgL!Z=sp^Tjp4|JSY5~r%RQMOs- z%5)rRT<(qbIqW8AF*AnE*cjpjkcbE2p%klu6iL*V(f7Y?&<@{}6QSEmnl6svJa8Wg z*5G}hIooK+dbq8mAO_PUKv+H+bNad+noLW!>+$|kiU6{WPD47J#pzhMxC&1KjMmP2 z84&Yov!@fu1FbXaIBoYs2hzYN<;dW$uvM3@HXG>jjfhd9llaWthJFpn$>Sz zg++M5b!~^#RO)T=CWXcMsBSH)l)@F`ZZX;k`t2|kxxliRzo9Twok^6cX-JI@>UXQW zgk!&6Yktzwb^E4cH7Yltebo~h0idm+Pb(dNA&5AbpFz+~0Wh<&H+*0I52t>bmpcAr zDUd`7_%q}U8Xz45S zWJh^dd&bjDl40=AroK?6KbfDzSZ#Gf3>vO|i6Qxn8Nt;lCU1|jAm{7b1A`xg|M*yT zhfTKH{?Ykqmx}NL9mV!Zx_Udx5rW9gNpEs>8kw(3+^D=5Az2^${O+6KjDpTrwgvJ0 zy0@!ks}1qEMyzb{Nz?w0A>TSy02mgypL%g-k5ow@HlJ|rAx8-e9ez}ewVr7%ecd|Y zReh7a*>={7hEiex`h6z(SZ&vU|2ELZYH(!+jp)>Kv4Gm6*px9t*96WKsU?*q~0C&3S|GE+&Zql#4YP$N61n%tdQ2 zOxulaCy}iV!8oORNUl?uS>(V?B&^}VWo(C(p(pGpR+X9876Drt*V;M}kVwbgd_ty6uj_FWZ3$2As=rPqUflj#x09|(i9%Cq`6lSc*M)AlKXLKVrkt-f&?KOP4E0VYoR-SX_#hhVVX zt-1>?s8~NMfXf;x+8YLn@_+>dlWo+5TDqrbjf zsGY0O&uN&s-$jLggm!&%`(iQ4vX?dt2z7wrFJ4aNoYePh2xX$mixSJq&!i1!v@)BC z;?}Qrqy<@Tw&lFD-}w^gb&ccrjB)tg7VYUM>Ef(w`tOPhC?L=nX@8e zuk#`{{c7iH`M1ndzS}7&%0U%2lts`u1dG!kkZ-#SiHN$eZ3JpWmNH`qxbWRd2eW!? znqBC^LQrh8?OYNOx4awBRSt>A2^mpGN;zj~54oQc_7)T{0kUd}8g3-<>_?5AG=xpe z{KgeGeGjb6HdBhmYJEl3b+_8nq+5SU>PKYX4R>BXl)1q=6_%}xpY4ue{ms$c4A!YX zw7rI3dY%34jI|f$0Vj7GlLh*bX^FE|%r{ljjB}7o6ct>!cU4naD3M?xqlB41Pp?nu z?!Cf6A!49#fPDt(w*@Bk!|}zg0~E=}r>o!M=f`$l{w(**DlZ~xI5KR2-{&~YU{ATh zA%j@N3)Jo`8v0B%iZ%N&GkDa07oF6^U+L?yk*(aoZdIxrw5y}y)npBN)lD1hT$^Qt zW(t#C99ar2m#%#${jy#=cVM4>S3s(-yQ<9ve`MB6YjF|v{$Xf$m0h~8hc}}q%VMqg znnSXce!91j1ax9yeIrpuRXb1nC?J%Gcl`Xi+@zM(K;gQ;K_N% z!4Fu5t_g3Cy3*k1?{>rNas)Rk-k;P>v`;vMb}bG~BkcNyEz`cMjM->m8o^UCdyJi| zyEzrT0YeiL;Qw}HjvkuprsLof8%QO=yHp@5h-?H?ia{$_URwd%d9Dg0! zjr-`tLT=(7nfbB1g%e<$3B4L?n2)(t{b2ghKn9WZs{x|10Q7@Zo1-{@nQUDu3~%F9xWC88gg5Fm$XvX`!b&xgB2@Rde6|z^X9g zC9d`d*0alHydd3!&EnYV0IQC|mY=AtS4`Fh0fD*sC7lvk8p=s|1Ll61}Li+swCqNd?YP|{OAzx;>*U&XJAEFeGMCwH(T`;?Kq8c>O> z;HYCx1_6_|P;7T(3jlfi@Qwmwab9aRR?clqyd_Td za}=klb|)$g5~lSfKsyvW0)FKtYe()iHEo7wqU4zYbK6pG<6@p&!0?ZB+TM+1Grh z{K7l41(UmjHD$zOQ#7nED%bHNQ+jhI2b2Du&V9-!tnRz(6$wj@*gaSNOu#oHP_LpI zZ;}%u&YYC9RNv|Y~s&CReLPL;I$9^`t%KCtcgI407`lD z5P$9NulJm@D%1 zLl|bvj(>X<=+lkFmo^qSaVx$=H<=nzo0h06SaLqUh#<{^gP^y>vPI-v<-fICKYg;b z6cx8(2N6Rf$)3D=VK{?0BULGJ(_yymF$}@v)I~15shZ$u=5i+h0QI1KmcbI+0l!*F z8&FQ47b!)2;o}|L5SfGxS}n?r!J1;+Uq z3i(-HK3`yZ#vH}|5D~YidphcL4z6$*PlCm4ti^@xyn!SHMKk?|y9Fw zKZJxcd?b-xy<#p!w`5Gn3|Bs15ARmCYY(hzzMHKzf3fw{!>NtmhKci6O5NpTt z5$$h(uT6sORZ+*Zd1xO$KGsPc5$7srmHX0%%u~t$M*x#V+DF`EA=v&gAKIpB&cPVZ0DUL;y$?b9R5~`ApWSM>0Q%T*Eo2p<7$)*ItcdG zk~(1B-z<$ud)$4BAXd7P+k<7Z@%dBfyy;%P=B=6Y>7FW!bQb(ki(gGGlWon?r<%=* zEej_!VkvVf>S5>yy<~p-LEvvX;(sZ56&kqV+FTz{wG@ZdE884(HJ9`-knB^JXpg9D zACh+TNdNGRLnUt~z(lym1T|DwuQx;;;4qqL(}$Y$Rx6PhRFg;KqEmy z`KR)S!L(m;R{!XNOxe6Bl=Dg{&Y$w}YMb)C@d{V2D`S(VQ6fKKo@;%|46^)yc?V|F zHYJjhzj;qPKV6S?77OSHkH9MbRI?jnRV%0*a*Y@e{(Z{&5}@0DFs8p zdyWvdA=Y-P=UI@AtI6f^u$)K1yl0f}t%sky+JiEP;~0iRUhUPK`sZ`_oha&Lm<0aG z{5-;2^m62zoqSo4D9_<)5BUfPyEk3WNrsN}r`mZ;Ny;>PjhpC8=Mwz|{Qz5cIIf>c zJh7N%`1Qn0Y4E4{Nm6vJhbzK(r>Ahe3A z(mQ|BYQHXanZd=jSG)9QM^G^qGzg-|%NbB8*q(F+9<-5O&+H4mUhzKuSV56x6 z4#fn{)L9lCs^9hyGnUG1-C{tF4_E@yl9W`J5euMFDL+OA27-!j z?i}2dp}zY@`L7RvWlrNBFx8*hb5#J7=7jlB#cx@+GL9MYLynW$GD4l_U!5GSk1N7SFmY@xCQL~AF6#{F#%q{=6f{#r%B`KUGV~?>Hc*QhgPOs}6 zCK^oDbFU!3ZQA(Gy&l;x?y7J1y8GmGH?7xYtF>kxm&!oJ;{;8E%ME!yR-6zn)}lIG zC4rT*|6Mr~2+)ZBG#9rbAnYi4(`F?=r4=vNs}(z4dEq$oNo8 z_Gt6n#h$c{z2~`?%~W7J-SUd8BMH_^{vLvnp}L9$D}M|EZnRgj$!{aj4kbI}x<0wI zGHNK?WiE~DgW5W^4h$*pXvA-}kmmlLqdtcOBTdGGP@YCDCsvGm4{oT4_5yAE4X?v0 zzsX}5RhmygVmmmi7VQ4W@fg>0&2HhGthjP6jJ-?XVETeapz8N0NJr;>=yZjs39dAG zrSRpn_)sg&O6d}9yq*ipO+&`E(!uL~TZp2BKkaKf7ydan(=SW|YHKSA6i1-P3}F`Z zM!;o}e&%F{;dEZ&V1AQyI5W>2pGMeIoVxE_+ztW*||hLXBv=KOl4*KORy#*GBo>39} zA%{tsL_FnYeKoYSR&ORGsL66UjhbgljqYVMfLyyYtgj*bjej6rJEA`LvR#Tek!S!- z7eFs7f}zJbOJ0>bAI_`!;&4o`d=n$a)vzoS7R}xilYIx`Tu2rQTI80smlg4JLRS>= zm734L0Zd3zAfad8il<1B4y2p*SyNL@Jti^n!oBnQ_!=F!V{N9I-3a8-}ab@f6l_8qipsl?6oZrGm#%gAbLukwew4ii70QGcEiYhIAttmLj&&4O>B zeG=iz%W~B<#hJbzr&8N04m*wq8gG|IO|hdoL>wP3V$YmQv7CiYouX4ydRlS*VI-8E zUU;>eHy3MM8~7ep(82#&tlPcMh_AAHEwrjQ(cO34NNXJsD7GZpCoxF z`}LTiSkFIS!3xS2{H4(rc84h9$I?%)!;XHJQ@t{8o;Kos?;@Go6d6) zL^(rd&ZsqZ77Hi1zwo{>I#-bH*E##f!gR%gdqi#2_f+sr?l)4FrV6z;1<;vAMMZi5 zs2lXqb#bmn&$x&x^qWfj+>eWz8ysh+xBRxb`L=5=pt9_~*(AH8V2jl-hVEzf?G$Cn zKXD~43(xz&?c|{Mb%Ru_{JUTpC5)D;(RoF z&&d2EA`i(!D{1V{65uKI=(UcL6SS39`)0U-hg$4w1VWf$-LhQ_`?MtT3Oiry(q`Fx zo2Z!YPN?>PyC-S2QK-l>>BNQlOGB%s`A2-(x4UHq*cq5Iii=~Y1rYTF>E!OV?nF^x z|6{k>-Cjxk5;KA*4q2QXC81r!v3e?Pg{7++`}1Ue4&PCDVDrx(=oBKUMf`y|hvDuN^W<*C znu)hZwV$3PTC-tB8@-OKaqLx;>}xfG*Z#S@b_B&fMi8N}gr-nniUoZ2@kZW@vz^dY zO}1hMt4g4JJ~}*CTiYJ!D{6BJuwazg`KEB#TIQ}_A|A4z*qEedoUlJlZnTev9)>zC z%-T?QKUOz+@%ZiQ`SSu)og-;j9dTp_knVGMXv8n7p=REWUHsVnn=KPfd^_azQ?uh& zt4#dW7#zw9rv%Hk9KCCxSpIF^HR2Qd+s_qtm70wc4nO^^24P_bRczgU>$zhc zAo4`=B&FX{Zs^Vi zM{1*|lO!Bzk{lgOG=7YyK!SZ0H`<>H=}-lKsB;X4Q@!Er`H6LEkWN!lH9$!TL#q~4 z&oRTCscWGiwlG2L*clFA1&wtSOs@AfN6A+jJNBt*DE%jJ+COzIN(!x<{;p2ljGO;) z)O+Ng?1T4~KR&4=M|b^o*tF@1-)(Et56{YCT(xOlUO|>(N%Z;xWIe5ZU;pRwtuGHXuGICzRjNGL4tfB z6D~3B*!&YUI=_!GMe`wRBY;5>&^ReM9pP;jlDH1S=aR4k@;NFKK#5761XcWEmUsge$%AIiohA%C&`;VJ$L_DfGg0*=CO@`5j$y%FMB{OF znML!V!l0^x&!vBvvaWQPSg#K zmfloJ=Y^52ImsE*JlTugeEQ18QRv}{e`1p1W?xee_2w|p6BJq*S=0v@m;7F?gSqND z@^zi_BD+0*F!dgGe&e6Ht*07Yd|;a~y&8*&RxCBrD5o4Xl#_La)9TL9S6Z!6s323v zF%Ko>32RAo-NOo1(V4`cHJ-?s)Kr_%sjc|EC0}|(d}ctycanoHnWfrJSbE)`m);G4 z5_B8)eK4BKL**TqZ34FhWoSAcQ@EY{(a`Ir#FP+6`o)~X>8P@`c_#;dYdrE-(-#!| zY%m#WjbmJ=JMc`^R{JSUQB5H5nR9K$t zOkOQ2#x>54fGHey-*!8EZ2k_SX|>g&YooxvgtR#%ToZ-_&19qjOFqd?_<#m1nC#0(dvYCS*$@3|D9XDvN` zz!xE)a2B9NC`?f>YY=&B6?!CN+-!_!{X6UOK5EopDEuDGy3xo6TnDr$_n#729KLIs)d(Y z*?+pMP+%{6Vg1Nfv8yb=7!mz%7ty%f2f)i3_X?k4-`!!snBh~7^o1-57S#h8%VvC7 zkPTq!zWU?mNYo2eHy=^utLBye3H+1~jRs_Xc^F_;&3W$0{mxGH`<+0?Q%$X>u318D zJ1)$7chMZ+tNXNF9pa98ba*B{R_)HW*qd6wL6ey5E0qH~ProK|x?aRyy8GU){inI*1UEnW$7ID++IO3S_EtwU1**?ssCTKlhNHO= zC+rseph4qg?2qry28t8kg=zy2%+yv1YFGXy6XN(RhuP#rCBb?t8&jT({AU57mz^*G zc-97F4Cvj3%jEaf7Dhr0>D9=##S_H|w6(ujVy4}?Ux{%fdq9XT(IHP$d$p0Qf}B>|@>R!RVBG=;`&dv5LDyc7_$^E30C)HL&|Ge^fMevRA)D zRdsurpLyrLm1U&YuS+Z(=M(>$TUrU45I|69>JexJqit*){3_xJys_6J}Kh($LblMeZi z(;9)edRR!Z-{G>ZP)R%zqkGmdP6deAKl68~AhMAe=DT$~lskATcE`;?C)%l^q~bnV z^Dpy%H#cB{a(HBfn>C8_26=XEEnz4%hrIIu7ps*1TcRp&XXlH>+JB=e%a6-~EcdFb9|^Mp|H>Hnp$z@# z&HK3y|8Z5YPzB6Ey)5YYGc@jrBH0Njt)(|5do0aepC-haEHK@Gv*=gxcDoH$SZ|Nd#QoiBj$v<+B$ zSgeV|k?txNF|b?ZkAvo~HCO_(cK--PPqIEBKZ~+L)Ub?i)Mn2^*@q%93-*EAraniJ zDCwgR4T>vh3 z0;h~x$z1{sS;|R09Y0>OO1{i{X!P=JR`A(adhCZiX>2KUji>Nc)nwW9YuvtsjW-~! z3=;-mcheE3^`1$#yL_&U_>C!e%DS5(a3#1=#q`E75m4lSpPo+YtNoSlxcrS`n%}iv2M*>EN?2dKr_Z{n8*&I*CbybtgIFdb=ET`~dpQWpBNL;3KltP2>B&g)HcR?g#Qk*s7RHMz23NgQg=b8#EOPziijgv4 zC!^6`qO3C8*aG1NG!uY~SRQu7F2x{=i2;@yTj*Qps_V|??mdC-wv*)1_WzeX?@)#Q zNy@n@P#q651?p0{yCyw?{{s~@w?o_CPl*TbWX@|Y@}Xp@181S2+o54Z%G1R zhPGa6`ahSY{g$=(wwq-AIkaTrqXW;73^!7*kas+r&3ohF*+hJUaTAT$U$ZERpxziO zCDO`K{a`8Py4W4ESF=@bm>d7)3+_*sAf~HgEb6{xi;pU!n#>NXb02Bv+9d6_w7&)3 z4`gU9h1fzB7AF6b~Jdk-ORkQJ=gUjzuTi#~~`^L0XYIfuyb!sHz=wC^q zA>F{AS>J;+O^>>$URezJIT$7cz)*qv`X1vkY2hjYRZq~e7EBKn(-zv2?2GG~M2%?> z;Q&|l`Sa%`0ceu$1OQ=(x?#36_wEpjENTd|}QoT4c;-Z?)bkFG|{>WF$dCK>7>MnTTPDZMX7mRCCUN{^_|gsZOURu)|u~ z$HblU;iYNp#>qlJqJ5hG)Nk=YFw?p{PkfJizd9qpTpZ~C@(F>qGqpsfK)kashWElW zj9WUz4R`7|oSI|4f)vl7y-3W%HsX`l5}PqxE+ z^Ha*u4nDewYJ%k_R8Q|F|MQ)iZrOCYeF|p(=e6A9LCKaK`>j7~i~T*%h2Xqp>29{S25Yh3VmUG7e`E6UP? zq@A$xAr?S~6#c*4HaIvaWP@2d+(Zht4xmX(efFRG9TiaQj5nl3&m8{pJuK2#Z#i%h zY(?gb&H)$A?cwAHhXdI<_xOJ`4&G6@+@b^bwwWnw;IDlfdo(0Vo?06LR3>jL($|~b zuUq`m0)bw&@Za)wD$RCJYP6tBV4j;&pm)5YiW&Z4}9LDx_w~$_#J(AfDE!bW_ZlOH`U2e?O zA6+f3E@CyU$+<#II#lYllcmo$ugoe{LjY`HkCItX-Ufk}h^73cgHKLN`Z#j5j6D1J zd{eum0`H|MqW@sJnrIU4y{j8$EGc>nEz^}!N2 zj5Pgzv-^SeY)merWp9e7u+zEkuU^@S>^g2MdFbr~cajwqJ*U-}r8rmNrZX0&p3$}T z-jE$&VzIrrj@ZY4I!niEIp%I`MVYq^$ng-#(Tdp!7=xCk)Um~tojlb-e=ft)g$$S# zQiT>4@~fuHuqi+PQ{s!!HF94dG}^CItbFNja+E4wxp`M|d+0>edF{-ga^swJ($BOS z%*ycK)lGY=(+@<}mNaAV*9WG;_a$Y=#`kj&yg^MI zg!9E1g<@t>iZG_9`^h^CHCx^^D!S0H_)I1uASD<=c0kS_(E>}T{Xz7yGllPr z>gm*OPa)RoiDmBPy`BfCn>yB#?k*Kx=IjO_XU{gQV*#Bi=`afFS$w)vWBSF&<5Rq{ z-YlF08|5_Z#oE{R-fT6v;t+ZR*>KKm;=N!cb#dxC_9YRM{Qy06Al1)Z0<<)1KMgYX zElhg_w#z`tV2SRP4l+|NFBE1!uAco+)A*}^@#ods(^m=^fcwDtpRiv%JyhB`Hsw64wIE23Wjd<;J5IYn8c{F z6W5Qiv61WR{t)+7?ZPjmjHGS&*#!99YXm&irbXV%iO5-)l?OSw8{D<%C%h&`yDozF z5kUtn#U|fn_W!#}s!r^GyQ|#*2r$<_D4E>1gKV3w8-o@XW|P+RW-UzWHS=UO_0naJ;{50R)45s&*jo0wXF+~#Y&CS11cx#9M(bX3)0KA0#09~;z zR$>BhJ-57v*xlc&$fQygLsY@P6Ys8EGKdpUv zJk(wPcO|B*l|=R~l{I_ztrRVUHe0qVL$*N%S;iKXt<9D#EfTVuk!37n$*#m0V=#m; zmLX%9!E@Ag-FMy3{XDv=u>=a0TKbI$pmb3X6Sd+}Yr14EmAZj3iSIp^8Lz`!0!^6&d`ZYAuapg%hlN{O2M$Me?;O#;u8KbowdjsJoGEq3 z*#hD2tw{Gpd(4KfS%tSM*iS-L7rR?xkM{kVO!Y4uKXSE?oHLAT)m+g_lPuZ_gH{Q% za)YVZyJt5jc0{{V6`*%F9&+j{uCGHLCnmmc>+b%7y86rS3hbw^vL(T#O;l4n&PeaM~8Cj-oW2Q0&ZSEdw7QLgrK)30)kYFmSidO9gW=?_+mJLSIWFA$t+N+52gm6>p38%cJP4$^s~k0#R%+T7X`mLypxoFoc8)tmodJ*Df<=wx9RDYKW^I%Fcm=U zw!p<+cq3RrWcnJ(JC^T$&arrZqQr&VFN&|#-WX?nUL`h2ioIu7!f;2=#YxnToMk*^ zaP4|YLfFacV(koFxw$5Dr{i*$fapykGN;fd*CS8Y_YM1vuzTq$^SV}-xr2y1?tpss zc=NB3ICLKbw5~Hs37niHjN&@_}04}LB6#v(od8wAX zQ_Y|fiu+)x^v5>`;;-x>3@n$q`N2CjfufghEZng??6;h3UKQI!IlnMUT+7!Ym#Nj4 z=3S{|46D*h&r^w@lk8P)02(4mMCDfcyTP~uf$9?I3S7!OHLA2dbchKb;|_>R2kpU0 z%|WMtrY?*rCy34yvivRJTk`JzsdBla6Q%q0F3)*P7?2LBpR#yoV$TXeRPJxMz_RBU zSLfavqy657_7Gk*3$O9cWAsJDQ0(Y>7i-XWqfP2iqM^U*HSU2U>CLkd)5RWrS3p*m zi8;ocbKoZzLk|?)E+*LU7rbn2(dT1EFwt5SdxYqHYd~ePPQ`BDIrDk{%g5<^ZAwSso3Y@*TyS{O6;SdYRxsE!cj*axnXX8RJxA7JZRy)iW)Y1w5ibA zOfWLJuAyh$>QsY3z1ngC>PU)b=8~FY(?l_T0weu!ehYg(m;>Q>u=f|kE9 zYiwJeV!p!AnlE#^EiZ0q26ymb3y5G9!8r4>pEz;Ctj>E}24%eX9;ZmVHcaS;W428gzJST3AM%1vfJ@ zNZA6#eFdwllGKfcCh-D-*Abr)%lqvwKz@PRAtca(f3n>HnuASybbiy|=KZ*-sHk{{ z^RGki`}EGayIg^dZ*2&yZv$s5?Q?@#ss+-q+#!v4e-iDi+cgGpA1CHhs;Brfvk2j@8Vvxz@E4eJu7vZR3=Ru*M-2iWu5*5d@pzu8{XlkB zDb`-_Q?;(M{9LbyL)$DQyGy-T-J&mSRAuhK8O~#~;3OUif51Bi!ASUHIh@>nDDg!B zF`0GP{?9#*4^r8I(-W)G9OT?hh~*eZMFY26sLX+IZJx%GFY-at8=5K0)hDPCJyGO@ z(S`b$%RP3jZ7XIrd!-2PE_7gutUqBg>R88`ZDfpBtBuY3o)%jz4}G2aC3;Gvi2yc+ z=x14e;n$&;N* zoi7Q}t&USAGC78~X9r9B<~Jxx<}HHMG>wp<;F69(Z`4e?mJ{5(kK>sq(zPAe+CCqX z(dugnPI*S~J3Wp#Q^g!CAA zrlerj6Z(gp_s!uta4IA2QSuxKuc~6&tGg&%eMOx@RRhNAP5WgA)HBYSAW80LZl7`|~C=#QIGg zf6m7O$R%mLGIsRatPm~JhQ+nluRuO{clr$X~-|Y zs{0|Kb?RMu8`Nn$0wF6PM8({oE@Rh-)!M3$JV%4}m=bQr7g=2k4Ud=sFuzGbBKep) zOm_F~K2m*H$H^Y))-Yr;$Rk2lvQ--noOU!D`G%V$g=usQo{16o4#SNI_H|Ve^pUPZ zNSgCIpFnHcBxRHfQOZkf8vP6CN1S zvueb1)srVPO0gf^Hr#|R2ik}UUh}zi{_lwiM9i-|k*8g%IX<2HvvL5jGvMBJdnM^q zZoa3E@b&2S7qSu&Y``2hf|);xv#36@G731o_@_lPhvd6j5@YUWtJpK%i9hnX{JZRx zN%MiN1kVh?%*vhZc1B#m3>l%q zo@2OlDRp<5I_!#4Jv`#1-2quqXc9HxnK*@;)k^`UD3Q@FDLS(zNn4SmU zA_c$hR9l(f{42-(^LLk>TKyr-G0Vq#Tq|($?Q%#ASpWWs(Zph|)z!EmSnd+`mAqL( zUNQ4hYaH?AzR!1G;trhgHS7N{r!(dtj^663pw@3E-yfy+U7{CBs>=pm=2PNgm}9@y zv}`zURvE{M<$gvSjQQdXNTo~|z_(AC8=UT2)Uo<_h=x-%$3Ze6nj+68GD zo7!U`uHpNW=BsW^#qJpyu=|qy;Zh8?1bU=bSZ=0iB;MTVXmy>FkYRCmX~A5D(Hj{| zWGiMNVkQfaK%}d0EoNaUgYT4~oddM_MCf9fIdr>A$q?VEJkNP8!BHrH^q%TfL36`$ z>BSRe`I!?k9$K~B!~UP@;Bg&~lci;TA`15E@?TKLG=o_{BP^CsJj;2>=o4W;GM(C&q=j9CRNaEA*Y|$E_lSq&!>8mwDD7-eI&J8 z$h8J5WpA283?4R@0)J4e>7x-xn*WGLt|{Q;UYoW2=qj9OmsWo2y%sSyT&N1HEE9G+ z3MD(xW(Czh{|&GZMje(ng4Rz@u!MVt`5Vd9|&lnlDM9pkag* zISRURu0>HUfKmcq>vta|nA#oYDFu*wb?mBiH|$eK2PVG={b+cYA8@t=-@a{y(FYGc z=a*<~iJL37ZP1Xis^U4CIx|?O4N+Caed->G23`iu7Dt8T8C;ZYPlquy+xEB?&okXe zra(DraG9FluN*P z&BujW%=m&G-z4uoz$Qq&(@t!d-j8~#Re?M3R)RQ;J~AHE^_2@fgx8dk-S6`D+`+Hz zJ6)dF^Ihv>Lw>DRdQ^lt5^HG1^c^ltLe4OK_ULun zT6mbchd^IE-mg#eS~vTK6+^vNi$`Xy$66|Wf~=sx%}T1qqKBrUWiQ1({mJbLzT8|B zuu|-|XuZ?pf9H4iE~xu#X-LBq?L{jvZTkR;Z>O!bK4Hi&mA1Q#PZ$>3={wH;GA7A>YX{0*F#g+J-xR#IezTBdGv>T(HEiRTW~u* z*4xkCegqbk+_{(v3A3#*=3XHL{h_~BUux1b)35d!XI9h~J0B&V01Lj)CFj-@T7w`+ zqho}&#Io6w=iNWfF(GFXuY4)<4*Zr1A4Zo+(QMmO(N!Hye@`5akZD*NJVBoBgcPYY zE-6?VTn>HVANT^xY?#eUwvy%ZLs31+; zPe2bWo?O3GS^kmHnxjwDI$*ZNz%QjG!cpbxpi?NbpkDf3%o)bCAX|r*H&;bsZQlsG zDmf7I7Q5@YwUq_xHZ5hw80zYF)os76ppvu~G2H0P1VoJliyuKdHTJPaU_nlz5U|5W|!Gy_vKdo?l7@@hC0F10ZvMCd+pxd2DQhkPxdO~OYlTENh@WHFz*V&`??MmQRdxO{J*Hkt;Q1V;>++xW!npA zufUwx+EaE8M^Eh-_J{+B7VMtQI+I@d|&a<#4K_tm=V(2KmDA7lW4+`K5U<+0wvz z;dR&7!9aEeXLi?-B>{9nx^( zLyUexe(4$DsPpx7#jBGqhsI9*73TC6HV}0O1QA}R<$oc#Grx`pz$U}*jqDGCQJ9>r zv>Rg{N7*HK)|xw`zD4P7iq)gfq4@TlZg##2i#p4aM?aWexRhP_O^o6QwWq~rm?a|x zFDHMf9}ZX~_7d&$;?xL9HrlKT15OEBX^M6Q2QYTtJB}!S_uv&v`hgg`(}Smm*el?` z`j84&l?+pKbyoY1R}Vkudqy&j(0pYM*XaL@AM4-~qda~ESp7@m^IcRj$` z{~G-R4?xy~A$4XnR*H!s<*p6NS$q6vFT zDO>5w8=EJ99 z^VfV~Jagf6OCxOQMn=O(C&8;!-p_7yMDtVI6;lUcW&I~t?9hT`ua69wW1u1d|0OcJ3MK6VoTE~eCb=N;n5W*N`Y9!F* zZJ~0-69EdzeRp##0X|5&Oo9emIyyR5(w95zUEBIcz3s&*J*2wotXH}IfF|DMzwL2;vky2h&5vpj zecL~wZ=O^?X^p-3vvY4f(gQP&*cfqAaR#%u*KS{I64ChT)$mooIctec1tYmDhFhj- zG{l!HWO1THZqi^b*V?pWyK!zv!GLHs>o_ERv&g6 z@p9LREEENcfP4uss4~eUw3LHWiO{`XPu^Ig8xsQJQ$Zou_+WQ9@ z)sKMhFbK`hC-+*-2I?kEUb54=J#nRZ*6*!5K z5@=TO*u|TQvcQNendVp+_S}52XR*8X7o_xkS&9GaOKU#%W34b4R8_Xf=#^fx&V}Kq z^Nj_M&M~t*T56Xp8k^0pi^hA<#6#9QY{u_%TlXSVZWi9U4=8`PX-EMO7FLfgaQn8P z{gUkw2%z^ziUK@M9;_b=3*ITxJ%Q29)we45sKOvP=AjJ2_m~z9yF%s@3gD<)eV9Sr zntw~}|7t;Bp4^vtuZ&UqUil@fYx2c++n$<9+RIpXxY>s~?SXuT3)}JSatiJ8O*%bk zRe~l+JEC+;q&rgK0QDgVt_&LWos{!+!_8O+zcc#>^SOA0zY>49`CblNb-_$@n==0N zB*}h~(%d~!b*e1WZPf6ExPGdAeYpcomH)Q(V6;PPx;M?adv|+5;3RGa9{B2W-wwa| z8O}ze>?b3gE1~DY*1*o4PhR3Z(b)AUJ6b1VS_n`6+HjK$8pZ z4$)kaH*I~J(<;^1nE5r+i#(rEKefJ_Fw#=s6rxAWQ0s*X85}f2s(HS8i z|BcHa{)NlH1w>HWg_VZtqXbc;%NllsDY**(XxWu+6x@7rZMTx4DyoQrUheDW6ZhhC z${OB$-6hr@WYu;MM%uz{Js9vl5=;Ovg{C>I1TaGqv9n1Axf~ zeC&iuu$6wUjmvC_@LM{IA+{!rgd1(Pz9X;a*M%C@P%Z{-aA!447jA28ZIV4F@}TJa z^{KScMqi`tUE8bQ3@aBCXU)$7HMc^qRkVN;i*bN^+at^12Tl zajxGCpp!+PPSvh-OZC(|`L;z9dLT3^w6&z4>Btnm-d&khJHL3L3^*Ct;e;4^1QxI$ z`QzTV8ymV8S6b9xyQqK|7`u%hGb&e~MiZ)$<9U+YV|k0G8WU$%+7}BNd_i+NYb5KT z<00=g@k-MX$*r5J;w^;*_g!#P;*tQomJvcq{}y? zOHp<3D}zA51C69Pw0ozzfW{}di|bj_?ljF;`WmP=Exg{TReVtHi_lVgz0}P&)HV&i zvf%3B3+*EufkFn_DNaHR?OM_lw24#3Iwj;_AM$UeNz-O&kE)EJzHNQOu!3Oe*X>@mTVvcmSpnq-is#CHDvM=`NaEe$onpVW)FA>RKZ znLy~{nKX50B?c#DSWXSop!MXiA}Z4ysw!P31zFOA8|wxz0-AhaPWp_tcB&JWD8CXr z>??vY0*fCN?-D(TS7`0~G?H2E9;p3HK;e<2!6-?skmM~Q?x$VZJ^x~&-jT**O!2yi zELtexjEmc$+P)axG(1@}nw(y?(+j1~0yn|?53P4M`k!3X(em)8>jkan)HOp3H+_PZ z+l*YaHZeV89jMJy=vAOA=98gIqRXd>mI$qdEvGqxh3fptf&vfxE2g<*6YkooTEtcm zWe?%gzDHr=l(&+Vj*!fi&^j4crpbrFNCE4A85xcu^o9fwA{4vy-Fu!Sh#}kS8++&O z<5Moggfp%b-<`Sb;E-d#y~Xcq^+^v-*@@zj0DXqXM=#(R9CL6C4x9#+9a7JviXB6p zIcf+>&lsPRSURrmU>YdLqLsdGA6he|v&v-@L>Y<}jfLYK0EyotW{$47nPWCkkmk-? zQV=Xfn)kwWDYVvGD+SAqZ>4A;CnlslWE{alg|fH z@_L9po?B8|%Zunpnc&T$>$Y$a^!g7JY{oK~I152XyCUvoDDhKBSJvEmB*mOUp^#uH z4C1{g9SfbZ37q%c-;m|fD)|XDC*MWy&@S;LjvWquw!nn+$QquZb7)Z?cbC!ZhW;W+ zt^ifwwKW1E3MYDP-ZYR%HDNMGE0TOp1qTx-{x)Xmc%S$+;5Q1bz^ zg(mq*8)a$fV(kM0tEXt>S;-Du*}h9rrq`sa24! zs3ku?LCuo66}~OEDYUe9tu9tCOp8uDQCzz2jyN#rmIwrJF~c>wP86y1OM8 zo*))CIhrH7^o0<4`s+JhihUfO12aLb=IM#DOGe4zrX(@Y|f)@*tcjxe|Yn*-Kc?0W%sgEMhB}$7r7$gHNFssuI9*L zEAtRi_si&5SaT?@gRc1x1-N0PI4KqLQdt;M_KBtdZ z#r<8diRJCLS8+oi__pTj&~ZIBE2Cs`vQ|Wo&GLyLB4Ue6%WvIg+$UMWdh4$(BDrV` zq2<3{D}!Pl6f$cwzLBbIx6%@JlpW}ZpIJNAH`ljEP0qi3+>mT)Jj*5gLZ_>x9J5@@ zICHXo68Vvhk};3Rqt<|=Fb!IiMln#6^PLxdHnUKLC9gvNxsSn!O#O9XdxfB;RzQs2jJ)oZh9q{l-fI?JU6~2wm2d^vvjRT>#7%SyhBY) z2|^<9GRcB<6DIQfX7HX&O|R~B)z^I>I_Xtgk9KH5fq@|$o`g<3dwe$GUmTEGE6x_! zV5JiSdaG|cBEfoPe-O1fVf>jkm0!!3FioDBLx=XOy?P9vtcVMtkU zAY$14Bkj%ruCTh+fkrG06wqc!xLjI8RN}9R&nGCa1(svy9XTDUN8eQ&=zW37c1X=p zp1I@8bPcpC)7^f(!A~t;tSa*OjTmO*J=fJtiy&D z7&KJ`ZZP!K>7~zgTZ&txMXiVg#AFZo{q|}=5P7sNvaWKrh|G0zzr8V^AKs)Nh4Dd-m=rRizFujy(3%v|M1nj>39$41 z#a#O9bL2pz96va~BS2ICn5!ofp!wZ@+mS?kYiiv>SR+KtA?|Xb$wJ#vhz)I<)@|yn z>5?g8O?#=W2f^;A?Jon=qw(H0Z}bCMKk?WeCB5vdf7$U3-;itia)IeK+={cZB=(}h zOwOriQ(TV^F@1#7NOb}ShIYRroMdQsXb?*_eCbjQ1f`dKFiN@xnOHB8+KP_gk`>ZR ztVfTv-wG+XnARrWMo9>uTX#|b{GKE3%6AF;ST@KS&8P0QLo1<0({B)M)jeNE(C$~ zLPG=Lif&yuPG>mc7)$paRe1MZo{bVgM|L5o425cxpL(Z*OvUrq}Lz*S?wQ2%J-d{`jo7HAG{J#}8k`e*Bc?CnH!x z<})jG*x!AfNuvX}lxY19BT_G!V;Y7pkz;IzBWMeBxsmnBHSz+>+K$b6&vF!P5wXiv z+3n(mG&Nt|kpSq;vqLZ<%U2>0_hNSPymkr^jSk!!=;U~`Hr*s)GP`k;)I(vkdjlfx z{)Y38zo1^S!ZdtL98dDxWUvlc);fITa6poBYz}Z`2|XE6TkDwr^Ai=G4jRBo3&!< z6LX*SY@#qvxm+hu+Jg;h9hIo_*Ee)`Xd-t(lTp)mMfDx-fwX{52bP?WuP? zu-2l(P^=lTM0R~a30%DtLL@IBkTUxi&iow)w^Ln@OTJ}=tnGfHUA^J0fta_M_-M1m zy67(1@M_aHCGBW^hb#NUTfdvLrVdr^Ag*mGfJK|yu-dNp*TG%8n6F$scjmgLN5B&E zR~(ZeBh!d=naIWqE1j|irQ>EJ1$bXzPOw4b6>OT1u*&jv$AkueTR{$R>SQj`!QW}-OifKTD@V^z zn2V3;D=N$-K?zvv8=(2FD|FHG(P5K;EcG7#tPQp{lT|8%38%C}Y`x6{!w%8L$FP)WFC`$=21{Z8-()((G zzVKggH91i}N;kmwfaF?|-Q3ofNOLx$?v8qqGWdA^YU{n)#Kx%I<-wNWsi$q7PNdvb z|Ah2}$~FWe!abNab29Nc1P;9H1t*mQMIo{oOi>q=gG<+xnLJJR;Tkp>?>Ex2AGR%p*96Nif7qDX9P- z_LP$=mpQ&}i-q9N__Fca*({dd7lehly-IrCBirs-0(G^K)qvoCsLzj4);I8Uh^i}O zB&C{}F}g!zZvO;F(XQ($x4!%QzOc_qItpeZ*x}h}~E6|EK=~0Cwv$K)}oe zRD-|6`8!*?Y#tb5=d#~_U*pb)U*E~^{B1wu2Y%O05#e5)|99bCrYzE*F}v~Gu@LFs zr_LE{&r93r3a&bGHfzul=AGA!-;gY{kI_xK^1*5VcZq)&d(XYb!Evrg=4a8={}?}T zX4Ki#?yn<1>`GZ~I~zpKa+UMzSAG6`w`g8yg^Q);+@+iX}Ovw}wyR$xA-#m8(Qvja7Q7p!<%o(N7bj zWGlF8>B^(P=W{ZFrR-ymBny{1`B*{Vqk!?K1Or>;0t7qfO(`|Sg&8j-u&xjK6S+c} zpT$tu|6CW|QM#TeRU z+E(;V4HaM1r{nL_LW-1^#yG05zBB*KXT3XD_Tz)BKQ=v!i4mAA%J_#bU-N9&4YQKX zJx)ENk*JY-oY&r=!$8VKwtiqCuuM@K4BIl39n=Ez^@f+c(tv>h6`(3e)3)x~TpLZ$ z7YsPJ9pBg2_ZvC;s)4wj$`7FFK}{tS@B3Mh=UiNi-Jxpni8tO0SE2O-t)n9N-0&!? z9d9SKZIDftEX&eZKEccAVU^&nVRYiZiDDxkZt+k-_vdKNSu*1 zIy{7+M;=o+U%8OUtg-y#HgHaXtZ>&vhd<@i99m%}&Fc`lrrkj*77vV%0hqb)u}e*K zUxhLFVPDFo%va7drLdhG2InyHI=UDL=PHeJvDV6Mu)(7q~fy zg`#uCw>!)?Pcr-PHQxY9APDMB_7FR$y8m;h9-qGd?*#;kA~0Fr zYm3bY`m{z6)yTS4DCGNTdV^4HM8Y;okv@-A`0-Pj1N7TJz}I0h+)YzrP=Bl>tD>|H z?_J<3sNRjV!lpo^?7xui%8)iZ9s`79<8ddWV5RXboquG7} zA|hJoGaGiza)$rm}X@D_x%WX7~-k;n^ZT|Tlkyn1-?stx}XwVuL5rql? z9!Pw7d4*Y(+r=-YHp~;;|MmIL<@h5XhJgWm!(LI5y_?vt_n({S9Tk5@V41N`w^`|B z)bCp|^=CQq<~Z;w{c+ylpWE`GI3u<}u zIlH+5J2D=w-v;XHwFr6sI}zFYFU#^6)aS>70x0_5Giq`t4-fO_*w%g`ACY<8|GU*L P@bBXJE9VN&+J^rxj}NS2 diff --git a/windows/deployment/images/mbr2gpt-volume.PNG b/windows/deployment/images/mbr2gpt-volume.png similarity index 100% rename from windows/deployment/images/mbr2gpt-volume.PNG rename to windows/deployment/images/mbr2gpt-volume.png diff --git a/windows/deployment/mbr-to-gpt.md b/windows/deployment/mbr-to-gpt.md index 4551b08e4a..c5312c0bd7 100644 --- a/windows/deployment/mbr-to-gpt.md +++ b/windows/deployment/mbr-to-gpt.md @@ -10,7 +10,7 @@ audience: itpro author: greg-lindsay ms.author: greglin ms.date: 02/13/2018 -ms.reviewer: +ms.reviewer: manager: laurawi ms.audience: itpro ms.localizationpriority: medium @@ -23,7 +23,7 @@ ms.custom: seo-marvel-apr2020 **Applies to** - Windows 10 -**MBR2GPT.EXE** converts a disk from the Master Boot Record (MBR) to the GUID Partition Table (GPT) partition style without modifying or deleting data on the disk. The tool is designed to be run from a Windows Preinstallation Environment (Windows PE) command prompt, but can also be run from the full Windows 10 operating system (OS) by using the **/allowFullOS** option. +**MBR2GPT.EXE** converts a disk from the Master Boot Record (MBR) to the GUID Partition Table (GPT) partition style without modifying or deleting data on the disk. The tool is designed to be run from a Windows Preinstallation Environment (Windows PE) command prompt, but can also be run from the full Windows 10 operating system (OS) by using the **/allowFullOS** option. >MBR2GPT.EXE is located in the **Windows\\System32** directory on a computer running Windows 10 version 1703 (also known as the Creator's Update) or later. >The tool is available in both the full OS environment and Windows PE. To use this tool in a deployment task sequence with Configuration Manager or Microsoft Deployment Toolkit (MDT), you must first update the Windows PE image (winpe.wim, boot.wim) with the [Windows ADK](https://developer.microsoft.com/windows/hardware/windows-assessment-deployment-kit) 1703, or a later version. @@ -32,7 +32,7 @@ See the following video for a detailed description and demonstration of MBR2GPT. -You can use MBR2GPT to: +You can use MBR2GPT to: - Convert any attached MBR-formatted system disk to the GPT partition format. You cannot use the tool to convert non-system disks from MBR to GPT. - Convert an MBR disk with BitLocker-encrypted volumes as long as protection has been suspended. To resume BitLocker after conversion, you will need to delete the existing protectors and recreate them. @@ -96,11 +96,11 @@ MBR2GPT: Validation completed successfully In the following example: 1. Using DiskPart, the current disk partition layout is displayed prior to conversion - three partitions are present on the MBR disk (disk 0): a system reserved partition, a Windows partition, and a recovery partition. A DVD-ROM is also present as volume 0. -2. The OS volume is selected, partitions are listed, and partition details are displayed for the OS partition. The [MBR partition type](https://msdn.microsoft.com/library/windows/desktop/aa363990.aspx) is **07** corresponding to the installable file system (IFS) type. +2. The OS volume is selected, partitions are listed, and partition details are displayed for the OS partition. The [MBR partition type](https://msdn.microsoft.com/library/windows/desktop/aa363990.aspx) is **07** corresponding to the installable file system (IFS) type. 2. The MBR2GPT tool is used to convert disk 0. 3. The DiskPart tool displays that disk 0 is now using the GPT format. 4. The new disk layout is displayed - four partitions are present on the GPT disk: three are identical to the previous partitions and one is the new EFI system partition (volume 3). -5. The OS volume is selected again, and detail displays that it has been converted to the [GPT partition type](https://msdn.microsoft.com/library/windows/desktop/aa365449.aspx) of **ebd0a0a2-b9e5-4433-87c0-68b6b72699c7** corresponding to the **PARTITION_BASIC_DATA_GUID** type. +5. The OS volume is selected again, and detail displays that it has been converted to the [GPT partition type](https://msdn.microsoft.com/library/windows/desktop/aa365449.aspx) of **ebd0a0a2-b9e5-4433-87c0-68b6b72699c7** corresponding to the **PARTITION_BASIC_DATA_GUID** type. >As noted in the output from the MBR2GPT tool, you must make changes to the computer firmware so that the new EFI system partition will boot properly. @@ -272,7 +272,7 @@ For more information about partition types, see: ### Persisting drive letter assignments -The conversion tool will attempt to remap all drive letter assignment information contained in the registry that correspond to the volumes of the converted disk. If a drive letter assignment cannot be restored, an error will be displayed at the console and in the log, so that you can manually perform the correct assignment of the drive letter. **Important**: this code runs after the layout conversion has taken place, so the operation cannot be undone at this stage. +The conversion tool will attempt to remap all drive letter assignment information contained in the registry that correspond to the volumes of the converted disk. If a drive letter assignment cannot be restored, an error will be displayed at the console and in the log, so that you can manually perform the correct assignment of the drive letter. **Important**: this code runs after the layout conversion has taken place, so the operation cannot be undone at this stage. The conversion tool will obtain volume unique ID data before and after the layout conversion, organizing this information into a lookup table. It will then iterate through all the entries in **HKLM\SYSTEM\MountedDevices**, and for each entry do the following: @@ -299,7 +299,7 @@ The default location for all these log files in Windows PE is **%windir%**. ### Interactive help -To view a list of options available when using the tool, type **mbr2gpt /?** +To view a list of options available when using the tool, type **mbr2gpt /?** The following text is displayed: @@ -376,7 +376,7 @@ Number Friendly Name Serial Number HealthStatus OperationalStatus To You can also view the partition type of a disk by opening the Disk Management tool, right-clicking the disk number, clicking **Properties**, and then clicking the **Volumes** tab. See the following example: -![Volumes](images/mbr2gpt-volume.PNG) +![Volumes](images/mbr2gpt-volume.png) If Windows PowerShell and Disk Management are not available, such as when you are using Windows PE, you can determine the partition type at a command prompt with the DiskPart tool. To determine the partition style from a command line, type **diskpart** and then type **list disk**. See the following example: @@ -400,7 +400,7 @@ DISKPART> list disk In this example, Disk 0 is formatted with the MBR partition style, and Disk 1 is formatted using GPT. -## Known issue +## Known issue ### MBR2GPT.exe cannot run in Windows PE @@ -425,10 +425,10 @@ To fix this issue, mount the Windows PE image (WIM), copy the missing file from 2. Copy the ReAgent files and the ReAgent localization files from the Window 10, version 1903 ADK source folder to the mounted WIM. For example, if the ADK is installed to the default location of C:\Program Files (x86)\Windows Kits\10 and the Windows PE image is mounted to C:\WinPE_Mount, run the following commands from an elevated Command Prompt window: - + > [!NOTE] > You can access the ReAgent files if you have installed the User State Migration Tool (USMT) as a feature while installing Windows Assessment and Deployment Kit. - + **Command 1:** ```cmd copy "C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Windows Setup\amd64\Sources\ReAgent*.*" "C:\WinPE_Mount\Windows\System32" @@ -438,20 +438,20 @@ To fix this issue, mount the Windows PE image (WIM), copy the missing file from * ReAgent.admx * ReAgent.dll * ReAgent.xml - + **Command 2:** ```cmd copy "C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Windows Setup\amd64\Sources\En-Us\ReAgent*.*" "C:\WinPE_Mount\Windows\System32\En-Us" - ``` + ``` This command copies two files: * ReAgent.adml * ReAgent.dll.mui > [!NOTE] > If you aren't using an English version of Windows, replace "En-Us" in the path with the appropriate string that represents the system language. - + 3. After you copy all the files, commit the changes and unmount the Windows PE WIM. MBR2GPT.exe now functions as expected in Windows PE. For information about how to unmount WIM files while committing changes, see [Unmounting an image](https://docs.microsoft.com/windows-hardware/manufacture/desktop/mount-and-modify-a-windows-image-using-dism#unmounting-an-image). - + ## Related topics diff --git a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md index 4f3681db63..eaccfb9c9f 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md +++ b/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan.md @@ -2,7 +2,7 @@ title: BitLocker recovery guide (Windows 10) description: This article for IT professionals describes how to recover BitLocker keys from AD DS. ms.assetid: d0f722e9-1773-40bf-8456-63ee7a95ea14 -ms.reviewer: +ms.reviewer: ms.prod: w10 ms.mktglfcycl: explore ms.sitesec: library @@ -339,7 +339,7 @@ There are rules governing which hint is shown during the recovery (in order of p **Result:** The hint for the Microsoft Account and the custom URL are displayed. -![Example 1 of Customized BitLocker recovery screen](./images/rp-example1.PNG) +![Example 1 of Customized BitLocker recovery screen](./images/rp-example1.png) #### Example 2 (single recovery key with single backup) @@ -354,7 +354,7 @@ There are rules governing which hint is shown during the recovery (in order of p **Result:** Only the custom URL is displayed. -![Example 2 of customized BitLocker recovery screen](./images/rp-example2.PNG) +![Example 2 of customized BitLocker recovery screen](./images/rp-example2.png) #### Example 3 (single recovery key with multiple backups) @@ -369,7 +369,7 @@ There are rules governing which hint is shown during the recovery (in order of p **Result:** Only the Microsoft Account hint is displayed. -![Example 3 of customized BitLocker recovery screen](./images/rp-example3.PNG) +![Example 3 of customized BitLocker recovery screen](./images/rp-example3.png) #### Example 4 (multiple recovery passwords) @@ -399,7 +399,7 @@ There are rules governing which hint is shown during the recovery (in order of p **Result:** Only the hint for a successfully backed up key is displayed, even if it isn't the most recent key. -![Example 4 of customized BitLocker recovery screen](./images/rp-example4.PNG) +![Example 4 of customized BitLocker recovery screen](./images/rp-example4.png) #### Example 5 (multiple recovery passwords) @@ -429,7 +429,7 @@ There are rules governing which hint is shown during the recovery (in order of p **Result:** The hint for the most recent key is displayed. -![Example 5 of customized BitLocker recovery screen](./images/rp-example5.PNG) +![Example 5 of customized BitLocker recovery screen](./images/rp-example5.png) ## Using additional recovery information @@ -484,7 +484,7 @@ You can reset the recovery password in two ways: > [!WARNING] > You must include the braces in the ID string. - + **To run the sample recovery password script:** 1. Save the following sample script in a VBScript file. For example: ResetPassword.vbs. diff --git a/windows/security/information-protection/bitlocker/images/rp-example1.PNG b/windows/security/information-protection/bitlocker/images/rp-example1.png similarity index 100% rename from windows/security/information-protection/bitlocker/images/rp-example1.PNG rename to windows/security/information-protection/bitlocker/images/rp-example1.png diff --git a/windows/security/information-protection/bitlocker/images/rp-example2.PNG b/windows/security/information-protection/bitlocker/images/rp-example2.png similarity index 100% rename from windows/security/information-protection/bitlocker/images/rp-example2.PNG rename to windows/security/information-protection/bitlocker/images/rp-example2.png diff --git a/windows/security/information-protection/bitlocker/images/rp-example3.PNG b/windows/security/information-protection/bitlocker/images/rp-example3.png similarity index 100% rename from windows/security/information-protection/bitlocker/images/rp-example3.PNG rename to windows/security/information-protection/bitlocker/images/rp-example3.png diff --git a/windows/security/information-protection/bitlocker/images/rp-example4.PNG b/windows/security/information-protection/bitlocker/images/rp-example4.png similarity index 100% rename from windows/security/information-protection/bitlocker/images/rp-example4.PNG rename to windows/security/information-protection/bitlocker/images/rp-example4.png diff --git a/windows/security/information-protection/bitlocker/images/rp-example5.PNG b/windows/security/information-protection/bitlocker/images/rp-example5.png similarity index 100% rename from windows/security/information-protection/bitlocker/images/rp-example5.PNG rename to windows/security/information-protection/bitlocker/images/rp-example5.png From e453d38f46297766d53bdbc6418d7dde2dd24bfd Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 16 Dec 2020 13:53:19 -0800 Subject: [PATCH 262/958] Added MSI policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 24 + .../policy-configuration-service-provider.md | 77 + .../mdm/policy-csp-admx-msi.md | 1835 +++++++++++++++++ 4 files changed, 1937 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-msi.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index a37aa5159e..423a233fbb 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -220,6 +220,7 @@ #### [ADMX_MSAPolicy](policy-csp-admx-msapolicy.md) #### [ADMX_msched](policy-csp-admx-msched.md) #### [ADMX_MSDT](policy-csp-admx-msdt.md) +#### [ADMX_MSI](policy-csp-admx-msi.md) #### [ADMX_nca](policy-csp-admx-nca.md) #### [ADMX_NCSI](policy-csp-admx-ncsi.md) #### [ADMX_Netlogon](policy-csp-admx-netlogon.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 26da44ce91..5cbf915a49 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -545,6 +545,30 @@ ms.date: 10/08/2020 - [ADMX_MSDT/MsdtSupportProvider](./policy-csp-admx-msdt.md#admx-msdt-msdtsupportprovider) - [ADMX_MSDT/MsdtToolDownloadPolicy](./policy-csp-admx-msdt.md#admx-msdt-msdttooldownloadpolicy) - [ADMX_MSDT/WdiScenarioExecutionPolicy](./policy-csp-admx-msdt.md#admx-msdt-wdiscenarioexecutionpolicy) +- [ADMX_MSI/AllowLockdownBrowse](./policy-csp-admx-msi.md#admx-msi-allowlockdownbrowse) +- [ADMX_MSI/AllowLockdownMedia](./policy-csp-admx-msi.md#admx-msi-allowlockdownmedia) +- [ADMX_MSI/AllowLockdownPatch](./policy-csp-admx-msi.md#admx-msi-allowlockdownpatch) +- [ADMX_MSI/DisableAutomaticApplicationShutdown](./policy-csp-admx-msi.md#admx-msi-disableautomaticapplicationshutdown) +- [ADMX_MSI/DisableBrowse](./policy-csp-admx-msi.md#admx-msi-disablebrowse) +- [ADMX_MSI/DisableFlyweightPatching](./policy-csp-admx-msi.md#admx-msi-disableflyweightpatching) +- [ADMX_MSI/DisableLoggingFromPackage](./policy-csp-admx-msi.md#admx-msi-disableloggingfrompackage) +- [ADMX_MSI/DisableMSI](./policy-csp-admx-msi.md#admx-msi-disablemsi) +- [ADMX_MSI/DisableMedia](./policy-csp-admx-msi.md#admx-msi-disablemedia) +- [ADMX_MSI/DisablePatch](./policy-csp-admx-msi.md#admx-msi-disablepatch) +- [ADMX_MSI/DisableRollback_1](./policy-csp-admx-msi.md#admx-msi-disablerollback-1) +- [ADMX_MSI/DisableRollback_2](./policy-csp-admx-msi.md#admx-msi-disablerollback-2) +- [ADMX_MSI/DisableSharedComponent](./policy-csp-admx-msi.md#admx-msi-disablesharedcomponent) +- [ADMX_MSI/MSILogging](./policy-csp-admx-msi.md#admx-msi-msilogging) +- [ADMX_MSI/MSI_DisableLUAPatching](./policy-csp-admx-msi.md#admx-msi-msi-disableluapatching) +- [ADMX_MSI/MSI_DisablePatchUninstall](./policy-csp-admx-msi.md#admx-msi-msi-disablepatchuninstall) +- [ADMX_MSI/MSI_DisableSRCheckPoints](./policy-csp-admx-msi.md#admx-msi-msi-disablesrcheckpoints) +- [ADMX_MSI/MSI_DisableUserInstalls](./policy-csp-admx-msi.md#admx-msi-msi-disableuserinstalls) +- [ADMX_MSI/MSI_EnforceUpgradeComponentRules](./policy-csp-admx-msi.md#admx-msi-msi-enforceupgradecomponentrules) +- [ADMX_MSI/MSI_MaxPatchCacheSize](./policy-csp-admx-msi.md#admx-msi-msi-maxpatchcachesize) +- [ADMX_MSI/MsiDisableEmbeddedUI](./policy-csp-admx-msi.md#admx-msi-msidisableembeddedui) +- [ADMX_MSI/SafeForScripting](./policy-csp-admx-msi.md#admx-msi-safeforscripting) +- [ADMX_MSI/SearchOrder](./policy-csp-admx-msi.md#admx-msi-searchorder) +- [ADMX_MSI/TransformsSecure](./policy-csp-admx-msi.md#admx-msi-transformssecure) - [ADMX_nca/CorporateResources](./policy-csp-admx-nca.md#admx-nca-corporateresources) - [ADMX_nca/CustomCommands](./policy-csp-admx-nca.md#admx-nca-customcommands) - [ADMX_nca/DTEs](./policy-csp-admx-nca.md#admx-nca-dtes) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 205815ffba..50e56bd34b 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1965,6 +1965,83 @@ The following diagram shows the Policy configuration service provider in tree fo

    +### ADMX_MSI policies + +
    +
    + ADMX_MSI/AllowLockdownBrowse +
    +
    + ADMX_MSI/AllowLockdownMedia +
    +
    + ADMX_MSI/AllowLockdownPatch +
    +
    + ADMX_MSI/DisableAutomaticApplicationShutdown +
    +
    + ADMX_MSI/DisableBrowse +
    +
    + ADMX_MSI/DisableFlyweightPatching +
    +
    + ADMX_MSI/DisableLoggingFromPackage +
    +
    + ADMX_MSI/DisableMSI +
    +
    + ADMX_MSI/DisableMedia +
    +
    + ADMX_MSI/DisablePatch +
    +
    + ADMX_MSI/DisableRollback_1 +
    +
    + ADMX_MSI/DisableRollback_2 +
    +
    + ADMX_MSI/DisableSharedComponent +
    +
    + ADMX_MSI/MSILogging +
    +
    + ADMX_MSI/MSI_DisableLUAPatching +
    +
    + ADMX_MSI/MSI_DisablePatchUninstall +
    +
    + ADMX_MSI/MSI_DisableSRCheckPoints +
    +
    + ADMX_MSI/MSI_DisableUserInstalls +
    +
    + ADMX_MSI/MSI_EnforceUpgradeComponentRules +
    +
    + ADMX_MSI/MSI_MaxPatchCacheSize +
    +
    + ADMX_MSI/MsiDisableEmbeddedUI +
    +
    + ADMX_MSI/SafeForScripting +
    +
    + ADMX_MSI/SearchOrder +
    +
    + ADMX_MSI/TransformsSecure +
    +
    + ### ADMX_nca policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-msi.md b/windows/client-management/mdm/policy-csp-admx-msi.md new file mode 100644 index 0000000000..0336f0e890 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-msi.md @@ -0,0 +1,1835 @@ +--- +title: Policy CSP - ADMX_MSI +description: Policy CSP - ADMX_MSI +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/16/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_MSI +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_MSI policies + +
    +
    + ADMX_MSI/AllowLockdownBrowse +
    +
    + ADMX_MSI/AllowLockdownMedia +
    +
    + ADMX_MSI/AllowLockdownPatch +
    +
    + ADMX_MSI/DisableAutomaticApplicationShutdown +
    +
    + ADMX_MSI/DisableBrowse +
    +
    + ADMX_MSI/DisableFlyweightPatching +
    +
    + ADMX_MSI/DisableLoggingFromPackage +
    +
    + ADMX_MSI/DisableMSI +
    +
    + ADMX_MSI/DisableMedia +
    +
    + ADMX_MSI/DisablePatch +
    +
    + ADMX_MSI/DisableRollback_1 +
    +
    + ADMX_MSI/DisableRollback_2 +
    +
    + ADMX_MSI/DisableSharedComponent +
    +
    + ADMX_MSI/MSILogging +
    +
    + ADMX_MSI/MSI_DisableLUAPatching +
    +
    + ADMX_MSI/MSI_DisablePatchUninstall +
    +
    + ADMX_MSI/MSI_DisableSRCheckPoints +
    +
    + ADMX_MSI/MSI_DisableUserInstalls +
    +
    + ADMX_MSI/MSI_EnforceUpgradeComponentRules +
    +
    + ADMX_MSI/MSI_MaxPatchCacheSize +
    +
    + ADMX_MSI/MsiDisableEmbeddedUI +
    +
    + ADMX_MSI/SafeForScripting +
    +
    + ADMX_MSI/SearchOrder +
    +
    + ADMX_MSI/TransformsSecure +
    +
    + +
    + + +**ADMX_MSI/AllowLockdownBrowse** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows users to search for installation files during privileged installations. + +If you enable this policy setting, the Browse button in the "Use feature from" dialog box is enabled. As a result, users can search for installation files even when the installation program is running with elevated system privileges. + +Because the installation is running with elevated system privileges, users can browse through directories that their own permissions would not allow. + +This policy setting does not affect installations that run in the user's security context. Also, see the "Remove browse dialog box for new source" policy setting. + +If you disable or do not configure this policy setting, by default, only system administrators can browse during installations with elevated privileges, such as installations offered on the desktop or displayed in Add or Remove Programs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow users to browse for source while elevated* +- GP name: *AllowLockdownBrowse* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/AllowLockdownMedia** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows users to install programs from removable media during privileged installations. + +If you enable this policy setting, all users are permitted to install programs from removable media, such as floppy disks and CD-ROMs, even when the installation program is running with elevated system privileges. + +This policy setting does not affect installations that run in the user's security context. By default, users can install from removable media when the installation runs in their own security context. + +If you disable or do not configure this policy setting, by default, users can install programs from removable media only when the installation runs in the user's security context. During privileged installations, such as those offered on the desktop or displayed in Add or Remove Programs, only system administrators can install from removable media. + +Also, see the "Prevent removable media source for any install" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow users to use media source while elevated* +- GP name: *AllowLockdownMedia* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/AllowLockdownPatch** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows users to patch elevated products. + +If you enable this policy setting, all users are permitted to install patches, even when the installation program is running with elevated system privileges. Patches are updates or upgrades that replace only those program files that have changed. Because patches can easily be vehicles for malicious programs, some installations prohibit their use. + +If you disable or do not configure this policy setting, by default, only system administrators can apply patches during installations with elevated privileges, such as installations offered on the desktop or displayed in Add or Remove Programs. + +This policy setting does not affect installations that run in the user's security context. By default, users can install patches to programs that run in their own security context. Also, see the "Prohibit patching" policy setting. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Allow users to patch elevated products* +- GP name: *AllowLockdownPatch* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableAutomaticApplicationShutdown** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Windows Installer's interaction with the Restart Manager. The Restart Manager API can eliminate or reduce the number of system restarts that are required to complete an installation or update. + +If you enable this policy setting, you can use the options in the Prohibit Use of Restart Manager box to control file in use detection behavior. + +- The "Restart Manager On" option instructs Windows Installer to use Restart Manager to detect files in use and mitigate a system restart, when possible. + +- The "Restart Manager Off" option turns off Restart Manager for file in use detection and the legacy file in use behavior is used. + +- The "Restart Manager Off for Legacy App Setup" option applies to packages that were created for Windows Installer versions lesser than 4.0. This option lets those packages display the legacy files in use UI while still using Restart Manager for detection. + +If you disable or do not configure this policy setting, Windows Installer will use Restart Manager to detect files in use and mitigate a system restart, when possible. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit use of Restart Manager* +- GP name: *DisableAutomaticApplicationShutdown* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableBrowse** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from searching for installation files when they add features or components to an installed program. + +If you enable this policy setting, the Browse button beside the "Use feature from" list in the Windows Installer dialog box is disabled. As a result, users must select an installation file source from the "Use features from" list that the system administrator configures. + +This policy setting applies even when the installation is running in the user's security context. + +If you disable or do not configure this policy setting, the Browse button is enabled when an installation is running in the user's security context. But only system administrators can browse when an installation is running with elevated system privileges, such as installations offered on the desktop or in Add or Remove Programs. + +This policy setting affects Windows Installer only. It does not prevent users from selecting other browsers, such as File Explorer or Network Locations, to search for installation files. + +Also, see the "Enable user to browse for source while elevated" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Remove browse dialog box for new source* +- GP name: *DisableBrowse* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableFlyweightPatching** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability to turn off all patch optimizations. + +If you enable this policy setting, all Patch Optimization options are turned off during the installation. + +If you disable or do not configure this policy setting, it enables faster application of patches by removing execution of unnecessary actions. The flyweight patching mode is primarily designed for patches that just update a few files or registry values. The Installer will analyze the patch for specific changes to determine if optimization is possible. If so, the patch will be applied using a minimal set of processing. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit flyweight patching* +- GP name: *DisableFlyweightPatching* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableLoggingFromPackage** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls Windows Installer's processing of the MsiLogging property. The MsiLogging property in an installation package can be used to enable automatic logging of all install operations for the package. + +If you enable this policy setting, you can use the options in the Disable logging via package settings box to control automatic logging via package settings behavior. + +- The "Logging via package settings on" option instructs Windows Installer to automatically generate log files for packages that include the MsiLogging property. + +- The "Logging via package settings off" option turns off the automatic logging behavior when specified via the MsiLogging policy. Log files can still be generated using the logging command line switch or the Logging policy. + +If you disable or do not configure this policy setting, Windows Installer will automatically generate log files for those packages that include the MsiLogging property. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off logging via package settings* +- GP name: *DisableLoggingFromPackage* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableMSI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting restricts the use of Windows Installer. + +If you enable this policy setting, you can prevent users from installing software on their systems or permit users to install only those programs offered by a system administrator. You can use the options in the Disable Windows Installer box to establish an installation setting. + +- The "Never" option indicates Windows Installer is fully enabled. Users can install and upgrade software. This is the default behavior for Windows Installer on Windows 2000 Professional, Windows XP Professional and Windows Vista when the policy is not configured. + +- The "For non-managed applications only" option permits users to install only those programs that a system administrator assigns (offers on the desktop) or publishes (adds them to Add or Remove Programs). This is the default behavior of Windows Installer on Windows Server 2003 family when the policy is not configured. + +- The "Always" option indicates that Windows Installer is disabled. + +This policy setting affects Windows Installer only. It does not prevent users from using other methods to install and upgrade programs. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows Installer* +- GP name: *DisableMSI* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableMedia** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from installing any programs from removable media. + +If you enable this policy setting, if a user tries to install a program from removable media, such as CD-ROMs, floppy disks, and DVDs, a message appears stating that the feature cannot be found. + +This policy setting applies even when the installation is running in the user's security context. + +If you disable or do not configure this policy setting, users can install from removable media when the installation is running in their own security context, but only system administrators can use removable media when an installation is running with elevated system privileges, such as installations offered on the desktop or in Add or Remove Programs. + +Also, see the "Enable user to use media source while elevated" and "Hide the 'Add a program from CD-ROM or floppy disk' option" policy settings. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent removable media source for any installation* +- GP name: *DisableMedia* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisablePatch** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents users from using Windows Installer to install patches. + +If you enable this policy setting, users are prevented from using Windows Installer to install patches. Patches are updates or upgrades that replace only those program files that have changed. Because patches can be easy vehicles for malicious programs, some installations prohibit their use. + +> [!NOTE] +> This policy setting applies only to installations that run in the user's security context. + +If you disable or do not configure this policy setting, by default, users who are not system administrators cannot apply patches to installations that run with elevated system privileges, such as those offered on the desktop or in Add or Remove Programs. + +Also, see the "Enable user to patch elevated products" policy setting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent users from using Windows Installer to install updates and upgrades* +- GP name: *DisablePatch* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableRollback_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. + +If you enable this policy setting, Windows Installer is prevented from recording the original state of the system and sequence of changes it makes during installation. It also prevents Windows Installer from retaining files it intends to delete later. As a result, Windows Installer cannot restore the computer to its original state if the installation does not complete. + +This policy setting is designed to reduce the amount of temporary disk space required to install programs. Also, it prevents malicious users from interrupting an installation to gather data about the internal state of the computer or to search secure system files. However, because an incomplete installation can render the system or a program inoperable, do not use this policy setting unless it is essential. + +This policy setting appears in the Computer Configuration and User Configuration folders. If the policy setting is enabled in either folder, it is considered be enabled, even if it is explicitly disabled in the other folder. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit rollback* +- GP name: *DisableRollback_1* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableRollback_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. + +If you enable this policy setting, Windows Installer is prevented from recording the original state of the system and sequence of changes it makes during installation. It also prevents Windows Installer from retaining files it intends to delete later. As a result, Windows Installer cannot restore the computer to its original state if the installation does not complete. + +This policy setting is designed to reduce the amount of temporary disk space required to install programs. Also, it prevents malicious users from interrupting an installation to gather data about the internal state of the computer or to search secure system files. However, because an incomplete installation can render the system or a program inoperable, do not use this policy setting unless it is essential. + +This policy setting appears in the Computer Configuration and User Configuration folders. If the policy setting is enabled in either folder, it is considered be enabled, even if it is explicitly disabled in the other folder. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit rollback* +- GP name: *DisableRollback_2* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +**ADMX_MSI/DisableSharedComponent** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability to turn off shared components. + +If you enable this policy setting, no packages on the system get the shared component functionality enabled by the msidbComponentAttributesShared attribute in the Component Table. + +If you disable or do not configure this policy setting, by default, the shared component functionality is allowed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off shared components* +- GP name: *DisableSharedComponent* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSILogging** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. Specifies the types of events that Windows Installer records in its transaction log for each installation. The log, Msi.log, appears in the Temp directory of the system volume. + +When you enable this policy setting, you can specify the types of events you want Windows Installer to record. To indicate that an event type is recorded, type the letter representing the event type. You can type the letters in any order and list as many or as few event types as you want. + +To disable logging, delete all of the letters from the box. + +If you disable or do not configure this policy setting, Windows Installer logs the default event types, represented by the letters "iweap." + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the types of events Windows Installer records in its transaction log* +- GP name: *MSILogging* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_DisableLUAPatching** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability of non-administrators to install updates that have been digitally signed by the application vendor. + +Non-administrator updates provide a mechanism for the author of an application to create digitally signed updates that can be applied by non-privileged users. + +If you enable this policy setting, only administrators or users with administrative privileges can apply updates to Windows Installer based applications. + +If you disable or do not configure this policy setting, users without administrative privileges can install non-administrator updates. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit non-administrators from applying vendor signed updates* +- GP name: *MSI_DisableLUAPatching* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_DisablePatchUninstall** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability for users or administrators to remove Windows Installer based updates. + +This policy setting should be used if you need to maintain a tight control over updates. One example is a lockdown environment where you want to ensure that updates once installed cannot be removed by users or administrators. + +If you enable this policy setting, updates cannot be removed from the computer by a user or an administrator. The Windows Installer can still remove an update that is no longer applicable to the product. + +If you disable or do not configure this policy setting, a user can remove an update from the computer only if the user has been granted privileges to remove the update. This can depend on whether the user is an administrator, whether "Disable Windows Installer" and "Always install with elevated privileges" policy settings are set, and whether the update was installed in a per-user managed, per-user unmanaged, or per-machine context." + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit removal of updates* +- GP name: *MSI_DisablePatchUninstall* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_DisableSRCheckPoints** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting prevents Windows Installer from creating a System Restore checkpoint each time an application is installed. System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. + +If you enable this policy setting, the Windows Installer does not generate System Restore checkpoints when installing applications. + +If you disable or do not configure this policy setting, by default, the Windows Installer automatically creates a System Restore checkpoint each time an application is installed, so that users can restore their computer to the state it was in before installing the application. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off creation of System Restore checkpoints* +- GP name: *MSI_DisableSRCheckPoints* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_DisableUserInstalls** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure user installs. To configure this policy setting, set it to enabled and use the drop-down list to select the behavior you want. + +If you do not configure this policy setting, or if the policy setting is enabled and "Allow User Installs" is selected, the installer allows and makes use of products that are installed per user, and products that are installed per computer. If the installer finds a per-user install of an application, this hides a per-computer installation of that same product. + +If you enable this policy setting and "Hide User Installs" is selected, the installer ignores per-user applications. This causes a per-computer installed application to be visible to users, even if those users have a per-user install of the product registered in their user profile. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prohibit User Installs* +- GP name: *MSI_DisableUserInstalls* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_EnforceUpgradeComponentRules** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting causes the Windows Installer to enforce strict rules for component upgrades. + +If you enable this policy setting, strict upgrade rules will be enforced by the Windows Installer which may cause some upgrades to fail. Upgrades can fail if they attempt to do one of the following: + +(1) Remove a component from a feature. +This can also occur if you change the GUID of a component. The component identified by the original GUID appears to be removed and the component as identified by the new GUID appears as a new component. + +(2) Add a new feature to the top or middle of an existing feature tree. +The new feature must be added as a new leaf feature to an existing feature tree. + +If you disable or do not configure this policy setting, the Windows Installer will use less restrictive rules for component upgrades. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enforce upgrade component rules* +- GP name: *MSI_EnforceUpgradeComponentRules* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MSI_MaxPatchCacheSize** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy controls the percentage of disk space available to the Windows Installer baseline file cache. + +The Windows Installer uses the baseline file cache to save baseline files modified by binary delta difference updates. The cache is used to retrieve the baseline file for future updates. The cache eliminates user prompts for source media when new updates are applied. + +If you enable this policy setting you can modify the maximum size of the Windows Installer baseline file cache. + +If you set the baseline cache size to 0, the Windows Installer will stop populating the baseline cache for new updates. The existing cached files will remain on disk and will be deleted when the product is removed. + +If you set the baseline cache to 100, the Windows Installer will use available free space for the baseline file cache. + +If you disable or do not configure this policy setting, the Windows Installer will uses a default value of 10 percent for the baseline file cache maximum size. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Control maximum size of baseline file cache* +- GP name: *MSI_MaxPatchCacheSize* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/MsiDisableEmbeddedUI** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls the ability to prevent embedded UI. + +If you enable this policy setting, no packages on the system can run embedded UI. + +If you disable or do not configure this policy setting, embedded UI is allowed to run. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent embedded UI* +- GP name: *MsiDisableEmbeddedUI* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/SafeForScripting** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows Web-based programs to install software on the computer without notifying the user. + +If you disable or do not configure this policy setting, by default, when a script hosted by an Internet browser tries to install a program on the system, the system warns users and allows them to select or refuse the installation. + +If you enable this policy setting, the warning is suppressed and allows the installation to proceed. + +This policy setting is designed for enterprises that use Web-based tools to distribute programs to their employees. However, because this policy setting can pose a security risk, it should be applied cautiously. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Prevent Internet Explorer security prompt for Windows Installer scripts* +- GP name: *SafeForScripting* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/SearchOrder** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies the order in which Windows Installer searches for installation files. + +If you disable or do not configure this policy setting, by default, the Windows Installer searches the network first, then removable media (floppy drive, CD-ROM, or DVD), and finally, the Internet (URL). + +If you enable this policy setting, you can change the search order by specifying the letters representing each file source in the order that you want Windows Installer to search: + +- "n" represents the network +- "m" represents media +- "u" represents URL, or the Internet + +To exclude a file source, omit or delete the letter representing that source type. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Specify the order in which Windows Installer searches for installation files* +- GP name: *SearchOrder* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + +**ADMX_MSI/TransformsSecure** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting saves copies of transform files in a secure location on the local computer. + +Transform files consist of instructions to modify or customize a program during installation. + +If you enable this policy setting, the transform file is saved in a secure location on the user's computer. + +If you do not configure this policy setting on Windows Server 2003, Windows Installer requires the transform file in order to repeat an installation in which the transform file was used, therefore, the user must be using the same computer or be connected to the original or identical media to reinstall, remove, or repair the installation. + +This policy setting is designed for enterprises to prevent unauthorized or malicious editing of transform files. + +If you disable this policy setting, Windows Installer stores transform files in the Application Data directory in the user's profile. + +If you do not configure this policy setting on Windows 2000 Professional, Windows XP Professional and Windows Vista, when a user reinstalls, removes, or repairs an installation, the transform file is available, even if the user is on a different computer or is not connected to the network. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Save copies of transform files in a secure location on workstation* +- GP name: *TransformsSecure* +- GP path: *Windows Components\Windows Installer* +- GP ADMX file name: *MSI.admx* + + + +
    + + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From d18b24ccc03763033d4354042c320eacb73dda0c Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:03:06 -0800 Subject: [PATCH 263/958] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 39b6cd2158..9a895ed9f4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -8,9 +8,9 @@ ms.mktglfcycl: manage ms.sitesec: library ms.localizationpriority: medium audience: ITPro -author: levinec -ms.author: ellevin -ms.reviewer: +author: denisebmsft +ms.author: deniseb +ms.reviewer: jcedola, dbodorin, vladiso, nixanm, anvascon manager: dansimp --- From 6647f492e35420993b97e8317e0ee86a17631aca Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:04:46 -0800 Subject: [PATCH 264/958] Update customize-controlled-folders.md --- .../customize-controlled-folders.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 9a895ed9f4..27da90e0a9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -12,6 +12,7 @@ author: denisebmsft ms.author: deniseb ms.reviewer: jcedola, dbodorin, vladiso, nixanm, anvascon manager: dansimp +ms.date: 12/16/2020 --- # Customize controlled folder access @@ -21,14 +22,14 @@ manager: dansimp **Applies to:** -* [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) Controlled folder access helps you protect valuable data from malicious apps and threats, such as ransomware. Controlled folder access is supported on Windows Server 2019 and Windows 10 clients. This article describes how to customize the following settings of the controlled folder access feature with the Windows Security app, Group Policy, PowerShell, and mobile device management (MDM) configuration service providers (CSPs). -* [Add additional folders to be protected](#protect-additional-folders) -* [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) +- [Add additional folders to be protected](#protect-additional-folders) +- [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) > [!WARNING] > Controlled folder access monitors apps for activities that may be malicious. Sometimes it might block a legitimate app from making legitimate changes to your files. @@ -53,7 +54,6 @@ You can use the Windows Security app or Group Policy to add and remove additiona 1. Open the Windows Security app by selecting the shield icon in the task bar or searching the start menu for **Defender**. - 2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then scroll down to the **Ransomware protection** section. 3. Click the **Manage ransomware protection** link to open the **Ransomware protection** pane. @@ -78,6 +78,7 @@ You can use the Windows Security app or Group Policy to add and remove additiona ### Use PowerShell to protect additional folders 1. Type **powershell** in the Start menu, right-click **Windows PowerShell** and select **Run as administrator** + 2. Enter the following cmdlet: ```PowerShell @@ -161,6 +162,6 @@ For more information about customizing the notification when a rule is triggered ## Related topics -* [Protect important folders with controlled folder access](controlled-folders.md) -* [Enable controlled folder access](enable-controlled-folders.md) -* [Evaluate attack surface reduction rules](evaluate-attack-surface-reduction.md) +- [Protect important folders with controlled folder access](controlled-folders.md) +- [Enable controlled folder access](enable-controlled-folders.md) +- [Evaluate attack surface reduction rules](evaluate-attack-surface-reduction.md) From 96031a7053d70c6fcfb01002afa3d4c7c1df311a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:07:07 -0800 Subject: [PATCH 265/958] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 27da90e0a9..83fb2372be 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -32,9 +32,7 @@ This article describes how to customize the following settings of the controlled - [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) > [!WARNING] -> Controlled folder access monitors apps for activities that may be malicious. Sometimes it might block a legitimate app from making legitimate changes to your files. -> -> This may impact your organization's productivity, so you may want to consider running the feature in [audit mode](audit-windows-defender.md) to fully assess the feature's impact. +> Controlled folder access monitors apps for activities that are detected as malicious. Sometimes, legitimate apps are blocked from making changes to your files. If controlled folder access impacts your organization's productivity, you might consider running this feature in [audit mode](audit-windows-defender.md) to fully assess the impact. ## Protect additional folders From cd77fa9eaace9e011cfd7e89e6c8153c4b0f2045 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:07:21 -0800 Subject: [PATCH 266/958] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 83fb2372be..841d2fe690 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -31,7 +31,7 @@ This article describes how to customize the following settings of the controlled - [Add additional folders to be protected](#protect-additional-folders) - [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) -> [!WARNING] +> [!IMPORTANT] > Controlled folder access monitors apps for activities that are detected as malicious. Sometimes, legitimate apps are blocked from making changes to your files. If controlled folder access impacts your organization's productivity, you might consider running this feature in [audit mode](audit-windows-defender.md) to fully assess the impact. ## Protect additional folders From bfdfe38a070ec5377ab366da665047712fd2129e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:09:19 -0800 Subject: [PATCH 267/958] Update customize-controlled-folders.md --- .../customize-controlled-folders.md | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 841d2fe690..dba11d836d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -36,12 +36,10 @@ This article describes how to customize the following settings of the controlled ## Protect additional folders - Controlled folder access applies to a number of system folders and default locations, including folders such as Documents, Pictures, and Movies. You can add additional folders to be protected, but you cannot remove the default folders in the default list. - Adding other folders to controlled folder access can be useful. Some use-cases include if you don't store files in the default Windows libraries, or you've changed the location of the libraries away from the defaults. You can also enter network shares and mapped drives. Environment variables and wildcards are supported. For information about using wildcards, see [Use wildcards in the file name and folder path or extension exclusion lists](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists). @@ -62,7 +60,6 @@ You can use the Windows Security app or Group Policy to add and remove additiona 4. Click **Add a protected folder** and follow the prompts to add folders. - ### Use Group Policy to protect additional folders 1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**. @@ -82,10 +79,9 @@ You can use the Windows Security app or Group Policy to add and remove additiona ```PowerShell Add-MpPreference -ControlledFolderAccessProtectedFolders "" ``` +3. Repeat step 2 until you have added all the folders you want to protect. Folders that are added are visible in the Windows Security app. -Continue to use `Add-MpPreference -ControlledFolderAccessProtectedFolders` to add more folders to the list. Folders added using this cmdlet will appear in the Windows Security app. - -![Screenshot of a PowerShell window with the cmdlet above entered](../images/cfa-allow-folder-ps.png) + ![Screenshot of a PowerShell window with the cmdlet above entered](../images/cfa-allow-folder-ps.png) > [!IMPORTANT] > Use `Add-MpPreference` to append or add apps to the list. Using the `Set-MpPreference` cmdlet will overwrite the existing list. From dfd386dfcacb4d61c7af441ffb094cba72411fed Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:19:51 -0800 Subject: [PATCH 268/958] Update customize-controlled-folders.md --- .../customize-controlled-folders.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index dba11d836d..4a126e8893 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -95,8 +95,7 @@ Use the [./Vendor/MSFT/Policy/Config/Defender/GuardedFoldersList](https://docs.m You can specify if certain apps are always considered safe and give write access to files in protected folders. Allowing apps can be useful if a particular app you know and trust is being blocked by the controlled folder access feature. > [!IMPORTANT] -> By default, Windows adds apps that it considers friendly to the allowed list—apps added automatically by Windows are not recorded in the list shown in the Windows Security app or by using the associated PowerShell cmdlets. -> You shouldn't need to add most apps. Only add apps if they are being blocked and you can verify their trustworthiness. +> By default, Windows adds apps that are considered friendly to the allowed list. Such apps that are added automatically are not recorded in the list shown in the Windows Security app or by using the associated PowerShell cmdlets. You shouldn't need to add most apps. Only add apps if they are being blocked and you can verify their trustworthiness. When you add an app, you have to specify the app's location. Only the app in that location will be permitted access to the protected folders. If the app (with the same name) is in a different location, it will not be added to the allow list and may be blocked by controlled folder access. @@ -104,9 +103,9 @@ An allowed application or service only has write access to a controlled folder a ### Use the Windows Defender Security app to allow specific apps -1. Open the Windows Security by selecting the shield icon in the task bar or searching the start menu for **Defender**. +1. Open the Windows Security app by searching the start menu for **Security**. -2. Select the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then select **Ransomware protection**. +2. Select the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then select **Manage ransomware protection**. 3. Under the **Controlled folder access** section, select **Allow an app through Controlled folder access** @@ -116,7 +115,7 @@ An allowed application or service only has write access to a controlled folder a ### Use Group Policy to allow specific apps -1. On your Group Policy management device, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management device, open the [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)?preserve=true), right-click the Group Policy Object you want to configure and select **Edit**. 2. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. From 120a72cfe44e802e9dffc5f3320f978046c4b893 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 16 Dec 2020 14:20:33 -0800 Subject: [PATCH 269/958] Fixed build warning --- windows/client-management/mdm/policy-csp-admx-msi.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-admx-msi.md b/windows/client-management/mdm/policy-csp-admx-msi.md index 0336f0e890..92fe153f4b 100644 --- a/windows/client-management/mdm/policy-csp-admx-msi.md +++ b/windows/client-management/mdm/policy-csp-admx-msi.md @@ -1178,7 +1178,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_DisablePatchUninstall** +**ADMX_MSI/MSI_DisablePatchUninstall** @@ -1248,7 +1248,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_DisableSRCheckPoints** +**ADMX_MSI/MSI_DisableSRCheckPoints**
    @@ -1316,7 +1316,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_DisableUserInstalls** +**ADMX_MSI/MSI_DisableUserInstalls**
    @@ -1384,7 +1384,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_EnforceUpgradeComponentRules** +**ADMX_MSI/MSI_EnforceUpgradeComponentRules**
    @@ -1458,7 +1458,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_MaxPatchCacheSize** +**ADMX_MSI/MSI_MaxPatchCacheSize**
    From 8dc7756b2b4d3e573303caae6032bf4871a23fa5 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:26:03 -0800 Subject: [PATCH 270/958] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 4a126e8893..bf71dddad7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -151,7 +151,7 @@ Use the [./Vendor/MSFT/Policy/Config/Defender/GuardedFoldersAllowedApplications] ## Customize the notification -For more information about customizing the notification when a rule is triggered and blocks an app or file, see [Windows Security](../windows-defender-security-center/windows-defender-security-center.md#customize-notifications-from-the-windows-defender-security-center). +For more information about customizing the notification when a rule is triggered and blocks an app or file, see [Configure alert notifications in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-email-notifications). ## Related topics From 47104dd15056ee0239198349225a48a6f3c3f311 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 16 Dec 2020 14:27:19 -0800 Subject: [PATCH 271/958] Fixed build warning --- windows/client-management/mdm/policy-csp-admx-msi.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-admx-msi.md b/windows/client-management/mdm/policy-csp-admx-msi.md index 92fe153f4b..cd3f93abd4 100644 --- a/windows/client-management/mdm/policy-csp-admx-msi.md +++ b/windows/client-management/mdm/policy-csp-admx-msi.md @@ -1108,7 +1108,7 @@ ADMX Info:
    -**ADMX_MSI/MSI_DisableLUAPatching** +**ADMX_MSI/MSI_DisableLUAPatching**
    From 52296a3f9dc4356e2b1014d92c8b7f7381060ace Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:29:46 -0800 Subject: [PATCH 272/958] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index bf71dddad7..12b59f2874 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -28,8 +28,9 @@ Controlled folder access helps you protect valuable data from malicious apps and This article describes how to customize the following settings of the controlled folder access feature with the Windows Security app, Group Policy, PowerShell, and mobile device management (MDM) configuration service providers (CSPs). -- [Add additional folders to be protected](#protect-additional-folders) +- [Protect additional folders](#protect-additional-folders) - [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) +- Allow signed executable to access protected folders > [!IMPORTANT] > Controlled folder access monitors apps for activities that are detected as malicious. Sometimes, legitimate apps are blocked from making changes to your files. If controlled folder access impacts your organization's productivity, you might consider running this feature in [audit mode](audit-windows-defender.md) to fully assess the impact. @@ -149,6 +150,10 @@ An allowed application or service only has write access to a controlled folder a Use the [./Vendor/MSFT/Policy/Config/Defender/GuardedFoldersAllowedApplications](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-defender#defender-guardedfoldersallowedapplications) configuration service provider (CSP) to allow apps to make changes to protected folders. +## Allow signed executable files to access protected folders + +Microsoft Defender for Endpoint certificate and file indicators can allow signed executable files to access protected folders. For implementation details, see [Create indicators based on certificates](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates). + ## Customize the notification For more information about customizing the notification when a rule is triggered and blocks an app or file, see [Configure alert notifications in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-email-notifications). From 29b5b35d0c9212f461148d5c57fc560e2a3b8d31 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:30:00 -0800 Subject: [PATCH 273/958] Update customize-controlled-folders.md --- .../microsoft-defender-atp/customize-controlled-folders.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 12b59f2874..45051e6ec7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -158,7 +158,7 @@ Microsoft Defender for Endpoint certificate and file indicators can allow signed For more information about customizing the notification when a rule is triggered and blocks an app or file, see [Configure alert notifications in Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-email-notifications). -## Related topics +## See also - [Protect important folders with controlled folder access](controlled-folders.md) - [Enable controlled folder access](enable-controlled-folders.md) From 70a5286eaf1fa33fc32908ecfb31f79deebeefb0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 16 Dec 2020 14:38:31 -0800 Subject: [PATCH 274/958] Update customize-controlled-folders.md --- .../customize-controlled-folders.md | 29 +++++++++---------- 1 file changed, 14 insertions(+), 15 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md index 45051e6ec7..629775a962 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/customize-controlled-folders.md @@ -26,44 +26,43 @@ ms.date: 12/16/2020 Controlled folder access helps you protect valuable data from malicious apps and threats, such as ransomware. Controlled folder access is supported on Windows Server 2019 and Windows 10 clients. -This article describes how to customize the following settings of the controlled folder access feature with the Windows Security app, Group Policy, PowerShell, and mobile device management (MDM) configuration service providers (CSPs). +This article describes how to customize controlled folder access capabilities, and includes the following sections: - [Protect additional folders](#protect-additional-folders) - [Add apps that should be allowed to access protected folders](#allow-specific-apps-to-make-changes-to-controlled-folders) -- Allow signed executable to access protected folders +- [Allow signed executable files to access protected folders](#allow-signed-executable-files-to-access-protected-folders) +- [Customize the notification](#customize-the-notification) > [!IMPORTANT] > Controlled folder access monitors apps for activities that are detected as malicious. Sometimes, legitimate apps are blocked from making changes to your files. If controlled folder access impacts your organization's productivity, you might consider running this feature in [audit mode](audit-windows-defender.md) to fully assess the impact. ## Protect additional folders -Controlled folder access applies to a number of system folders and default locations, including folders such as Documents, Pictures, and Movies. +Controlled folder access applies to a number of system folders and default locations, including folders such as **Documents**, **Pictures**, and **Movies**. You can add additional folders to be protected, but you cannot remove the default folders in the default list. -You can add additional folders to be protected, but you cannot remove the default folders in the default list. +Adding other folders to controlled folder access can be helpful for cases when you don't store files in the default Windows libraries, or you've changed the default location of your libraries. -Adding other folders to controlled folder access can be useful. Some use-cases include if you don't store files in the default Windows libraries, or you've changed the location of the libraries away from the defaults. +You can also specify network shares and mapped drives. Environment variables and wildcards are supported. For information about using wildcards, see [Use wildcards in the file name and folder path or extension exclusion lists](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists). -You can also enter network shares and mapped drives. Environment variables and wildcards are supported. For information about using wildcards, see [Use wildcards in the file name and folder path or extension exclusion lists](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus#use-wildcards-in-the-file-name-and-folder-path-or-extension-exclusion-lists). - -You can use the Windows Security app or Group Policy to add and remove additional protected folders. +You can use the Windows Security app, Group Policy, PowerShell cmdlets, or mobile device management configuration service providers to add and remove additional protected folders. ### Use the Windows Security app to protect additional folders -1. Open the Windows Security app by selecting the shield icon in the task bar or searching the start menu for **Defender**. +1. Open the Windows Security app by selecting the shield icon in the task bar or searching the start menu for **Security**. -2. Click the **Virus & threat protection** tile (or the shield icon on the left menu bar) and then scroll down to the **Ransomware protection** section. +2. Select **Virus & threat protection**, and then scroll down to the **Ransomware protection** section. -3. Click the **Manage ransomware protection** link to open the **Ransomware protection** pane. +3. Select **Manage ransomware protection** to open the **Ransomware protection** pane. -4. Under the **Controlled folder access** section, click the **Protected folders** link. +4. Under the **Controlled folder access** section, select **Protected folders**. -5. Click **Yes** on the **User Access Control** prompt. The **Protected folders** pane displays. +5. Choose **Yes** on the **User Access Control** prompt. The **Protected folders** pane displays. -4. Click **Add a protected folder** and follow the prompts to add folders. +4. Select **Add a protected folder** and follow the prompts to add folders. ### Use Group Policy to protect additional folders -1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and select **Edit**. +1. On your Group Policy management computer, open the [Group Policy Management Console](https://docs.microsoft.com/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731212(v=ws.11)?preserve=true), right-click the Group Policy Object you want to configure, and then and select **Edit**. 2. In the **Group Policy Management Editor**, go to **Computer configuration** and select **Administrative templates**. From 25f3caf7efddc153c635b5494b174d0f1d4e2f0a Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 16 Dec 2020 14:50:47 -0800 Subject: [PATCH 275/958] Fixed formatting issue --- .../mdm/policy-csp-admx-msi.md | 39 +++++++++++++++++++ 1 file changed, 39 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-admx-msi.md b/windows/client-management/mdm/policy-csp-admx-msi.md index cd3f93abd4..948a93babd 100644 --- a/windows/client-management/mdm/policy-csp-admx-msi.md +++ b/windows/client-management/mdm/policy-csp-admx-msi.md @@ -169,6 +169,7 @@ ADMX Info: +
    @@ -242,6 +243,7 @@ ADMX Info: +
    @@ -312,6 +314,7 @@ ADMX Info: +
    @@ -387,6 +390,7 @@ ADMX Info: +
    @@ -462,6 +466,7 @@ ADMX Info: +
    @@ -531,6 +536,7 @@ ADMX Info: +
    @@ -604,6 +610,7 @@ ADMX Info: +
    @@ -679,6 +686,7 @@ ADMX Info: +
    @@ -752,6 +760,7 @@ ADMX Info: +
    @@ -826,6 +835,7 @@ ADMX Info: +
    @@ -896,6 +906,7 @@ ADMX Info: +
    @@ -967,6 +978,7 @@ ADMX Info: +
    @@ -1036,7 +1048,9 @@ ADMX Info: +
    + **ADMX_MSI/MSILogging** @@ -1106,8 +1120,11 @@ ADMX Info: +
    + + **ADMX_MSI/MSI_DisableLUAPatching** @@ -1176,8 +1193,11 @@ ADMX Info: +
    + + **ADMX_MSI/MSI_DisablePatchUninstall** @@ -1246,8 +1266,11 @@ ADMX Info: +
    + + **ADMX_MSI/MSI_DisableSRCheckPoints** @@ -1314,8 +1337,11 @@ ADMX Info: +
    + + **ADMX_MSI/MSI_DisableUserInstalls** @@ -1382,8 +1408,11 @@ ADMX Info: +
    + + **ADMX_MSI/MSI_EnforceUpgradeComponentRules** @@ -1456,7 +1485,9 @@ ADMX Info: +
    + **ADMX_MSI/MSI_MaxPatchCacheSize** @@ -1530,7 +1561,9 @@ ADMX Info: +
    + **ADMX_MSI/MsiDisableEmbeddedUI** @@ -1598,7 +1631,9 @@ ADMX Info: +
    + **ADMX_MSI/SafeForScripting** @@ -1668,7 +1703,9 @@ ADMX Info: +
    + **ADMX_MSI/SearchOrder** @@ -1742,7 +1779,9 @@ ADMX Info: +
    + **ADMX_MSI/TransformsSecure** From e9fc1184ab24675e7b5c4110f69d3603fc5e2bda Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Thu, 17 Dec 2020 02:17:52 +0200 Subject: [PATCH 276/958] Update contact-support-usgov.md Change URLs from Windows to Microsoft, add "GCC-M on Commercial". --- .../microsoft-defender-atp/contact-support-usgov.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md b/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md index 8241f211f4..a3ea45d493 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/contact-support-usgov.md @@ -33,11 +33,12 @@ In order to open a support case, you will need to login to your Microsoft Defend Environment | Portal URL :---|:--- -GCC-M | [https://gcc.securitycenter.windows.us](https://gcc.securitycenter.windows.us) -GCC-H | [https://securitycenter.windows.us](https://securitycenter.windows.us) -DoD | [https://securitycenter.windows.us](https://securitycenter.windows.us) +GCC-M on Commercial | [https://securitycenter.microsoft.com](https://securitycenter.microsoft.com) +GCC-M | [https://gcc.securitycenter.microsoft.us](https://gcc.securitycenter.microsoft.us) +GCC-H | [https://securitycenter.microsoft.us](https://securitycenter.microsoft.us) +DoD | [https://securitycenter.microsoft.us](https://securitycenter.microsoft.us) If you are unable to login to the portal, you can also open a support case using the [phone](https://docs.microsoft.com/microsoft-365/admin/contact-support-for-business-products?view=o365-worldwide&tabs=phone&preserve-view=true). ## Opening a support case -For prerequisites and instructions, see [Contact Microsoft Defender for Endpoint support](contact-support.md). \ No newline at end of file +For prerequisites and instructions, see [Contact Microsoft Defender for Endpoint support](contact-support.md). From 1b998847b42004a68d934432d6e1772f9e7cfa23 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 16 Dec 2020 16:26:33 -0800 Subject: [PATCH 277/958] Added WindowsRemoteManagement policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 2 + .../policy-configuration-service-provider.md | 11 ++ ...policy-csp-admx-windowsremotemanagement.md | 184 ++++++++++++++++++ 4 files changed, 198 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 423a233fbb..6e91df97ec 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -264,6 +264,7 @@ #### [ADMX_WindowsExplorer](policy-csp-admx-windowsexplorer.md) #### [ADMX_WindowsMediaDRM](policy-csp-admx-windowsmediadrm.md) #### [ADMX_WindowsMediaPlayer](policy-csp-admx-windowsmediaplayer.md) +#### [ADMX_WindowsRemoteManagement](policy-csp-admx-windowsremotemanagement.md) #### [ADMX_WindowsStore](policy-csp-admx-windowsstore.md) #### [ADMX_WinInit](policy-csp-admx-wininit.md) #### [ADMX_WinLogon](policy-csp-admx-winlogon.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 5cbf915a49..8c03c186f3 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -1208,6 +1208,8 @@ ms.date: 10/08/2020 - [ADMX_WindowsMediaPlayer/PreventWMPDeskTopShortcut](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-preventwmpdesktopshortcut) - [ADMX_WindowsMediaPlayer/SkinLockDown](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-skinlockdown) - [ADMX_WindowsMediaPlayer/WindowsStreamingMediaProtocols](./policy-csp-admx-windowsmediaplayer.md#admx-windowsmediaplayer-windowsstreamingmediaprotocols) +- [ADMX_WindowsRemoteManagement/DisallowKerberos_1](./policy-csp-admx-windowsremotemanagement.md#admx-windowsremotemanagement-disallowkerberos-1) +- [ADMX_WindowsRemoteManagement/DisallowKerberos_2](./policy-csp-admx-windowsremotemanagement.md#admx-windowsremotemanagement-disallowkerberos-2) - [ADMX_WindowsStore/DisableAutoDownloadWin8](./policy-csp-admx-windowsstore.md#admx-windowsstore-disableautodownloadwin8) - [ADMX_WindowsStore/DisableOSUpgrade_1](./policy-csp-admx-windowsstore.md#admx-windowsstore-disableosupgrade-1) - [ADMX_WindowsStore/DisableOSUpgrade_2](./policy-csp-admx-windowsstore.md#admx-windowsstore-disableosupgrade-2) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 50e56bd34b..810eacc415 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -4170,6 +4170,17 @@ The following diagram shows the Policy configuration service provider in tree fo +### ADMX_WindowsRemoteManagement policies + +
    +
    + ADMX_WindowsRemoteManagement/DisallowKerberos_1 +
    +
    + ADMX_WindowsRemoteManagement/DisallowKerberos_2 +
    +
    + ### ADMX_WindowsStore policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md b/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md new file mode 100644 index 0000000000..317228c066 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-windowsremotemanagement.md @@ -0,0 +1,184 @@ +--- +title: Policy CSP - ADMX_WindowsRemoteManagement +description: Policy CSP - ADMX_WindowsRemoteManagement +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/16/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_WindowsRemoteManagement +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_WindowsRemoteManagement policies + +
    +
    + ADMX_WindowsRemoteManagement/DisallowKerberos_1 +
    +
    + ADMX_WindowsRemoteManagement/DisallowKerberos_2 +
    +
    + + +
    + + +**ADMX_WindowsRemoteManagement/DisallowKerberos_1** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Kerberos credentials over the network. + +If you enable this policy setting, the WinRM service does not accept Kerberos credentials over the network. If you disable or do not configure this policy setting, the WinRM service accepts Kerberos authentication from a remote client. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow Kerberos authentication* +- GP name: *DisallowKerberos_1* +- GP path: *Windows Components\Windows Remote Management (WinRM)\WinRM Service* +- GP ADMX file name: *WindowsRemoteManagement.admx* + + + + +
    + + +**ADMX_WindowsRemoteManagement/DisallowKerberos_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Kerberos authentication directly. + +If you enable this policy setting, the Windows Remote Management (WinRM) client does not use Kerberos authentication directly. Kerberos can still be used if the WinRM client is using the Negotiate authentication and Kerberos is selected. + +If you disable or do not configure this policy setting, the WinRM client uses the Kerberos authentication directly. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Disallow Kerberos authentication* +- GP name: *DisallowKerberos_2* +- GP path: *Windows Components\Windows Remote Management (WinRM)\WinRM Client* +- GP ADMX file name: *WindowsRemoteManagement.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + \ No newline at end of file From 092152b7dc69556812578742ff03e547865d2cfc Mon Sep 17 00:00:00 2001 From: Shari Kjerland <30906736+SKjerland@users.noreply.github.com> Date: Wed, 16 Dec 2020 17:37:07 -0800 Subject: [PATCH 278/958] Replaced hello-faq.md with .yml file As part of the FAQ-content-type pilot, I replaced the .md file with a .yml file that uses Google-defined schema. --- browsers/edge/microsoft-edge-faq.yml | 15 +- .../hello-for-business/hello-faq.md | 173 --------------- .../hello-for-business/hello-faq.yml | 209 ++++++++++++++++++ .../hello-for-business/toc.md | 2 +- 4 files changed, 220 insertions(+), 179 deletions(-) delete mode 100644 windows/security/identity-protection/hello-for-business/hello-faq.md create mode 100644 windows/security/identity-protection/hello-for-business/hello-faq.yml diff --git a/browsers/edge/microsoft-edge-faq.yml b/browsers/edge/microsoft-edge-faq.yml index 830ca09109..e6f27046bd 100644 --- a/browsers/edge/microsoft-edge-faq.yml +++ b/browsers/edge/microsoft-edge-faq.yml @@ -49,21 +49,26 @@ sections: To learn more about Microsoft's plan for phasing Flash out of Microsoft Edge and Internet Explorer, see [The End of an Era — Next Steps for Adobe Flash](https://blogs.windows.com/msedgedev/2017/07/25/flash-on-windows-timeline/#3Bcc3QjRw0l7XsZ4.97) (blog article). - question: Does Microsoft Edge support ActiveX controls or BHOs like Silverlight or Java? - answer: No, Microsoft Edge doesn't support ActiveX controls and BHOs like Silverlight or Java. If you're running web apps that use ActiveX controls, x-ua-compatible headers, or legacy document modes, you need to keep running them in Internet Explorer 11. Internet Explorer 11 offers additional security, manageability, performance, backward compatibility, and standards support. + answer: | + No, Microsoft Edge doesn't support ActiveX controls and Browser Helper Objects (BHOs) like Silverlight or Java. If you're running web apps that use ActiveX controls, x-ua-compatible headers, or legacy document modes, you need to keep running them in Internet Explorer 11. Internet Explorer 11 offers additional security, manageability, performance, backward compatibility, and standards support. - question: How often will Microsoft Edge be updated? - answer: In Windows 10, we're delivering Windows as a service, updated on a cadence driven by quality and the availability of new features. Microsoft Edge security updates are released every two to four weeks, while bigger feature updates are included in the Windows 10 releases on a semi-annual cadence. + answer: | + In Windows 10, we're delivering Windows as a service, updated on a cadence driven by quality and the availability of new features. Microsoft Edge security updates are released every two to four weeks, while bigger feature updates are included in the Windows 10 releases on a semi-annual cadence. - question: How can I provide feedback on Microsoft Edge? - answer: Microsoft Edge is an evergreen browser - we'll continue to evolve both the web platform and the user interface with regular updates. To send feedback on user experience, or on broken or malicious sites, use the **Send Feedback** option under the ellipses icon (**...**) in the Microsoft Edge toolbar. + answer: | + Microsoft Edge is an evergreen browser - we'll continue to evolve both the web platform and the user interface with regular updates. To send feedback on user experience, or on broken or malicious sites, use the **Send Feedback** option under the ellipses icon (**...**) in the Microsoft Edge toolbar. - question: Will Internet Explorer 11 continue to receive updates? answer: | We're committed to keeping Internet Explorer a supported, reliable, and safe browser. Internet Explorer is still a component of Windows and follows the support lifecycle of the OS on which it's installed. For details, see [Lifecycle FAQ - Internet Explorer](https://support.microsoft.com/help/17454/). While we continue to support and update Internet Explorer, the latest features and platform updates will only be available in Microsoft Edge. - question: How do I find out which version of Microsoft Edge I have? - answer: In the upper-right corner of Microsoft Edge, select the ellipses icon (**...**), and then select **Settings**. Look in the **About Microsoft Edge** section to find your version. + answer: | + In the upper-right corner of Microsoft Edge, select the ellipses icon (**...**), and then select **Settings**. Look in the **About Microsoft Edge** section to find your version. - question: What is Microsoft EdgeHTML? - answer: Microsoft EdgeHTML is the web rendering engine that powers the current Microsoft Edge web browser and Windows 10 web app platform (as opposed to *Microsoft Edge, based on Chromium*). + answer: | + Microsoft EdgeHTML is the web rendering engine that powers the current Microsoft Edge web browser and Windows 10 web app platform (as opposed to *Microsoft Edge, based on Chromium*). diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.md b/windows/security/identity-protection/hello-for-business/hello-faq.md deleted file mode 100644 index 8d7088b7b7..0000000000 --- a/windows/security/identity-protection/hello-for-business/hello-faq.md +++ /dev/null @@ -1,173 +0,0 @@ ---- -title: Windows Hello for Business Frequently Asked Questions -description: Use these frequently asked questions (FAQ) to learn important details about Windows Hello for Business. -keywords: identity, PIN, biometric, Hello, passport -ms.prod: w10 -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security, mobile -audience: ITPro -author: mapalko -ms.author: mapalko -manager: dansimp -ms.collection: M365-identity-device-management -ms.topic: article -localizationpriority: medium -ms.date: 08/19/2018 -ms.reviewer: ---- -# Windows Hello for Business Frequently Asked Questions - -**Applies to** -- Windows 10 - -## What about virtual smart cards? -Windows Hello for Business is the modern, two-factor credential for Windows 10. Microsoft will be deprecating virtual smart cards in the future, but no date is set at this time. Customers using Windows 10 and virtual smart cards should move to Windows Hello for Business. Microsoft will publish the date early to ensure customers have adequate lead time to move to Windows Hello for Business. Microsoft recommends new Windows 10 deployments to use Windows Hello for Business. Virtual smart card remain supported for Windows 7 and Windows 8. - -## What about convenience PIN? -Microsoft is committed to its vision of a world without passwords. We recognize the *convenience* provided by convenience PIN, but it stills uses a password for authentication. Microsoft recommends customers using Windows 10 and convenience PINs should move to Windows Hello for Business. New Windows 10 deployments should deploy Windows Hello for Business and not convenience PINs. Microsoft will be deprecating convenience PINs in the future and will publish the date early to ensure customers have adequate lead time to deploy Windows Hello for Business. - -## Can I use Windows Hello for Business key trust and RDP? -RDP currently does not support using key based authentication and self signed certificates as supplied credentials. RDP with supplied credentials Windows Hello for Business is currently only supported with certificate based deployments. Windows Hello for Business key trust can be used with [Windows Defender Remote Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/remote-credential-guard). - -## Can I deploy Windows Hello for Business using Microsoft Endpoint Configuration Manager? -Windows Hello for Business deployments using Configuration Manager should use the hybrid deployment model that uses Active Directory Federation Services. Starting in Configuration Manager version 1910, certificate-based authentication with Windows Hello for Business settings isn't supported. Key-based authentication is still valid with Configuration Manager. For more information, see [Windows Hello for Business settings in Configuration Manager](https://docs.microsoft.com/configmgr/protect/deploy-use/windows-hello-for-business-settings). - -## How many users can enroll for Windows Hello for Business on a single Windows 10 computer? -The maximum number of supported enrollments on a single Windows 10 computer is 10. That enables 10 users to each enroll their face and up to 10 fingerprints. While we support 10 enrollments, we will strongly encourage the use of Windows Hello security keys for the shared computer scenario when they become available. - -## How can a PIN be more secure than a password? -When using Windows Hello for Business, the PIN is not a symmetric key where is the password is a symmetric key. With passwords, there is a server that has some representation of the password. With Windows Hello for Business, the PIN is user provided entropy used to load the private key in the TPM. The server does not have a copy of the PIN. For that matter, the Windows client does not have a copy of the current PIN either. The user must provide the entropy, the TPM protected key, and the TPM that generated that key to successfully have access to the private key. - -The statement "PIN is stronger than Password" is not directed at the strength of the entropy used by the PIN. It is about the difference of providing entropy vs continuing the use of a symmetric key (the password). The TPM has anti-hammering features which thwart brute-force PIN attacks (an attackers continuous attempt to try all combination of PINs). Some organizations may worry about shoulder surfing. For those organizations, rather than increased the complexity of the PIN, implement the [Multifactor Unlock](feature-multifactor-unlock.md) feature. - -## Why is the Key Admins group missing, I have Windows Server 2016 domain controller(s)? -The **Key Admins** and **Enterprise Key Admins** groups are created when you install the first Windows Server 2016 domain controller into a domain. Domain controllers running previous versions of Windows Server cannot translate the security identifier (SID) to a name. To resolve this, transfer the PDC emulator domain role to a domain controller running Windows Server 2016. - -## Can I use a convenience PIN with Azure AD? -It is currently possible to set a convenience PIN on Azure Active Directory Joined or Hybrid Active Directory Joined devices. Convenience PIN is not supported for Azure Active Directory user accounts (synchronized identities included). It is only supported for on-premises Domain Joined users and local account users. - -## Can I use an external camera when my laptop is closed or docked? -No. Windows 10 currently only supports one Windows Hello for Business camera and does not fluidly switch to an external camera when the computer is docked with the lid closed. The product group is aware of this and is investigating this topic further. - -## Why does authentication fail immediately after provisioning Hybrid Key Trust? -In a hybrid deployment, a user's public key must sync from Azure AD to AD before it can be used to authenticate against a domain controller. This sync is handled by Azure AD Connect and will occur during a normal sync cycle. - -## What is the password-less strategy? -Watch Principal Program Manager Karanbir Singh's Ignite 2017 presentation **Microsoft's guide for going password-less**. - -[Microsoft's password-less strategy](hello-videos.md#microsofts-passwordless-strategy) - -## What is the user experience for Windows Hello for Business? -The user experience for Windows Hello for Business occurs after user sign-in, after you deploy Windows Hello for Business policy settings to your environment. - -[Windows Hello for Business user enrollment experience](hello-videos.md#windows-hello-for-business-user-enrollment-experience) - -## What happens when my user forgets their PIN? -If the user can sign-in with a password, they can reset their PIN by clicking the "I forgot my PIN" link in settings. Beginning with Windows 10 1709, users can reset their PIN above the lock screen by clicking the "I forgot my PIN" link on the PIN credential provider. - -[Windows Hello for Business forgotten PIN user experience](hello-videos.md#windows-hello-for-business-forgotten-pin-user-experience) - -For on-premises deployments, devices must be well-connected to their on-premises network (domain controllers and/or certificate authority) to reset their PINs. Hybrid customers can on-board their Azure tenant to use the Windows Hello for Business PIN reset service to reset their PINs without access to their corporate network. - -## What URLs do I need to allow for a hybrid deployment? -Communicating with Azure Active Directory uses the following URLs: -- enterpriseregistration.windows.net -- login.microsoftonline.com -- login.windows.net -- account.live.com -- accountalt.azureedge.net -- secure.aadcdn.microsoftonline-p.com - -If your environment uses Microsoft Intune, you need these additional URLs: -- enrollment.manage.microsoft.com -- portal.manage.microsoft.com - -## What is the difference between non-destructive and destructive PIN reset? -Windows Hello for Business has two types of PIN reset: non-destructive and destructive. Organizations running Windows 10 Enterprise and Azure Active Directory can take advantage of the Microsoft PIN Reset service. Once on-boarded to a tenant and deployed to computers, users who have forgotten their PINs can authenticate to Azure, provided a second factor of authentication, and reset their PIN without re-provisioning a new Windows Hello for Business enrollment. This is a non-destructive PIN reset because the user does not delete the current credential and obtain a new one. Read [PIN Reset](hello-feature-pin-reset.md) page for more information. - -Organizations that have the on-premises deployment of Windows Hello for Business, or those not using Windows 10 Enterprise can use destructive PIN reset. with destructive PIN reset, users that have forgotten their PIN can authenticate using their password, perform a second factor of authentication to re-provision their Windows Hello for Business credential. Re-provisioning deletes the old credential and requests a new credential and certificate. On-premises deployments need network connectivity to their domain controllers, Active Directory Federation Services, and their issuing certificate authority to perform a destructive PIN reset. Also, for hybrid deployments, destructive PIN reset is only supported with the certificate trust model and the latest updates to Active Directory Federation Services. - -## Which is better or more secure: Key trust or Certificate trust? -The trust models of your deployment determine how you authenticate to Active Directory (on-premises). Both key trust and certificate trust use the same hardware-backed, two-factor credential. The difference between the two trust types are: -- Required domain controllers -- Issuing end entity certificates - -The **key trust** model authenticates to Active Directory using a raw key. Windows Server 2016 domain controllers enables this authentication. Key trust authenticate does not require an enterprise issued certificate, therefore you do not need to issue certificates to your end users (domain controller certificates are still needed). - -The **certificate trust** model authenticates to Active Directory using a certificate. Because this authentication uses a certificate, domain controllers running previous versions of Windows Server can authenticate the user. Therefore, you need to issue certificates to your end users, but you do not need Windows Server 2016 domain controllers. The certificate used in certificate trust uses the TPM protected private key to request a certificate from your enterprise's issuing certificate authority. - -## Do I need Windows Server 2016 domain controllers? -There are many deployment options from which to choose. Some of those options require an adequate number of Windows Server 2016 domain controllers in the site where you have deployed Windows Hello for Business. There are other deployment options that use existing Windows Server 2008 R2 or later domain controllers. Choose the deployment option that best suits your environment. - -## What attributes are synchronized by Azure AD Connect with Windows Hello for Business? -Review [Azure AD Connect sync: Attributes synchronized to Azure Active Directory](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized) for a list of attributes that are sync based on scenarios. The base scenarios that include Windows Hello for Business are [Windows 10](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized#windows-10) scenario and the [Device writeback](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized#device-writeback) scenario. Your environment may include additional attributes. - -## Is Windows Hello for Business multifactor authentication? -Windows Hello for Business is two-factor authentication based on the observed authentication factors of: something you have, something you know, and something part of you. Windows Hello for Business incorporates two of these factors: something you have (the user's private key protected by the device's security module) and something you know (your PIN). With the proper hardware, you can enhance the user experience by introducing biometrics. Using biometrics, you can replace the "something you know" authentication factor with the "something that is part of you" factor, with the assurances that users can fall back to the "something you know factor". - -## What are the biometric requirements for Windows Hello for Business? -Read [Windows Hello biometric requirements](https://docs.microsoft.com/windows-hardware/design/device-experiences/windows-hello-biometric-requirements) for more information. - -## Can I use both a PIN and biometrics to unlock my device? -Starting in Windows 10, version 1709, you can use multi-factor unlock to require the user to provide an additional factor to unlock the device. Authentication remains two-factor, but another factor is required before Windows allows the user to reach the desktop. Read more about [multifactor unlock](feature-multifactor-unlock.md). - -## What is the difference between Windows Hello and Windows Hello for Business? -Windows Hello represents the biometric framework provided in Windows 10. Windows Hello enables users to use biometrics to sign into their devices by securely storing their user name and password and releasing it for authentication when the user successfully identifies themselves using biometrics. Windows Hello for Business uses asymmetric keys protected by the device's security module that requires a user gesture (PIN or biometrics) to authenticate. - -## Why can't I enroll biometrics for my local built-in Administrator? -Windows 10 does not allow the local administrator to enroll biometric gestures (face or fingerprint). - -## I have extended Active Directory to Azure Active Directory. Can I use the on-premises deployment model? -No. If your organization is federated or using on-line services, such as Azure AD Connect, Office 365, or OneDrive, then you must use a hybrid deployment model. On-premises deployments are exclusive to organization who need more time before moving to the cloud and exclusively use Active Directory. - -## Does Windows Hello for Business prevent the use of simple PINs? -Yes. Our simple PIN algorithm looks for and disallows any PIN that has a constant delta from one digit to the next. The algorithm counts the number of steps required to reach the next digit, overflowing at ten ('zero'). -So, for example: -* The PIN 1111 has a constant delta of (0,0,0), so it is not allowed -* The PIN 1234 has a constant delta of (1,1,1), so it is not allowed -* The PIN 1357 has a constant delta of (2,2,2), so it is not allowed -* The PIN 9630 has a constant delta of (7,7,7), so it is not allowed -* The PIN 1593 has a constant delta of (4,4,4), so it is not allowed -* The PIN 7036 has a constant delta of (3,3,3), so it is not allowed -* The PIN 1231 does not have a constant delta (1,1,8), so it is allowed -* The PIN 1872 does not have a constant delta (7,9,5), so it is allowed - -This prevents repeating numbers, sequential numbers, and simple patterns. -It always results in a list of 100 disallowed PINs (independent of the PIN length). -This algorithm does not apply to alphanumeric PINs. - -## How does PIN caching work with Windows Hello for Business? - -Windows Hello for Business provides a PIN caching user experience using a ticketing system. Rather than caching a PIN, processes cache a ticket they can use to request private key operations. Azure AD and Active Directory sign-in keys are cached under lock. This means the keys remain available for use without prompting as long as the user is interactively signed-in. Microsoft Account sign-in keys are considered transactional keys, which means the user is always prompted when accessing the key. - -Beginning with Windows 10, version 1709, Windows Hello for Business used as a smart card (smart card emulation that is enabled by default) provides the same user experience of default smart card PIN caching. Each process requesting a private key operation will prompt the user for the PIN on first use. Subsequent private key operations will not prompt the user for the PIN. - -The smart card emulation feature of Windows Hello for Business verifies the PIN and then discards the PIN in exchange for a ticket. The process does not receive the PIN, but rather the ticket that grants them private key operations. Windows 10 does not provide any Group Policy settings to adjust this caching. - -## Can I disable the PIN while using Windows Hello for Business? -No. The movement away from passwords is accomplished by gradually reducing the use of the password. In the occurrence where you cannot authenticate with biometrics, you need a fallback mechanism that is not a password. The PIN is the fallback mechanism. Disabling or hiding the PIN credential provider will disable the use of biometrics. - -## How are keys protected? -Wherever possible, Windows Hello for Business takes advantage of trusted platform module (TPM) 2.0 hardware to generate and protect keys. However, Windows Hello and Windows Hello for Business does not require a TPM. Administrators can choose to allow key operations in software. - -Whenever possible, Microsoft strongly recommends the use of TPM hardware. The TPM protects against a variety of known and potential attacks, including PIN brute-force attacks. The TPM provides an additional layer of protection after an account lockout, too. When the TPM has locked the key material, the user will have to reset the PIN (which means he or she will have to use MFA to re-authenticate to the IDP before the IDP allows him or her to re-register). - -## Can Windows Hello for Business work in air-gapped environments? -Yes. You can use the on-premises Windows Hello for Business deployment and combine it with a third-party MFA provider that does not require Internet connectivity to achieve an air-gapped Windows Hello for Business deployment. - -## Can I use third-party authentication providers with Windows Hello for Business? -Yes, if you are federated hybrid deployment, you can use any third-party that provides an Active Directory Federation Services (AD FS) multi-factor authentication adapter. A list of third-party MFA adapters can be found [here](https://docs.microsoft.com/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods). - -## Does Windows Hello for Business work with third party federation servers? -Windows Hello for Business can work with any third-party federation servers that support the protocols used during provisioning experience. Interested third-parties can inquiry at [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration). - -| Protocol | Description | -| :---: | :--- | -| [[MS-KPP]: Key Provisioning Protocol](https://msdn.microsoft.com/library/mt739755.aspx) | Specifies the Key Provisioning Protocol, which defines a mechanism for a client to register a set of cryptographic keys on a user and device pair. | -| [[MS-OAPX]: OAuth 2.0 Protocol Extensions](https://msdn.microsoft.com/library/dn392779.aspx)| Specifies the OAuth 2.0 Protocol Extensions, which are used to extend the OAuth 2.0 Authorization Framework. These extensions enable authorization features such as resource specification, request identifiers, and login hints. | -| [[MS-OAPXBC]: OAuth 2.0 Protocol Extensions for Broker Clients](https://msdn.microsoft.com/library/mt590278.aspx) | Specifies the OAuth 2.0 Protocol Extensions for Broker Clients, extensions to RFC6749 (The OAuth 2.0 Authorization Framework) that allow a broker client to obtain access tokens on behalf of calling clients. | -| [[MS-OIDCE]: OpenID Connect 1.0 Protocol Extensions](https://msdn.microsoft.com/library/mt766592.aspx) | Specifies the OpenID Connect 1.0 Protocol Extensions. These extensions define additional claims to carry information about the end user, including the user principal name, a locally unique identifier, a time for password expiration, and a URL for password change. These extensions also define additional provider meta-data that enable the discovery of the issuer of access tokens and give additional information about provider capabilities. | - -## Does Windows Hello for Business work with Mac and Linux clients? -Windows Hello for Business is a feature of Windows 10. At this time, Microsoft is not developing clients for other platforms. However, Microsoft is open to third parties who are interested in moving these platforms away from passwords. Interested third parties can get more information by emailing [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration). diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml new file mode 100644 index 0000000000..d4db9fb009 --- /dev/null +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -0,0 +1,209 @@ +### YamlMime:FAQ +metadata: + title: Windows Hello for Business Frequently Asked Questions + description: Use these frequently asked questions (FAQ) to learn important details about Windows Hello for Business. + keywords: identity, PIN, biometric, Hello, passport + ms.prod: w10 + ms.mktglfcycl: deploy + ms.sitesec: library + ms.pagetype: security, mobile + audience: ITPro + author: mapalko + ms.author: mapalko + manager: dansimp + ms.collection: M365-identity-device-management + ms.topic: article + localizationpriority: medium + ms.date: 08/19/2018 + ms.reviewer: + +title: Windows Hello for Business Frequently Asked Questions +summary: | + **Applies to** + - Windows 10 + + +sections: + - name: Ignored + questions: + - question: What about virtual smart cards? + answer: | + Windows Hello for Business is the modern, two-factor credential for Windows 10. Microsoft will be deprecating virtual smart cards in the future, but no date is set at this time. Customers using Windows 10 and virtual smart cards should move to Windows Hello for Business. Microsoft will publish the date early to ensure customers have adequate lead time to move to Windows Hello for Business. Microsoft recommends that new Windows 10 deployments use Windows Hello for Business. Virtual smart card remain supported for Windows 7 and Windows 8. + + - question: What about convenience PIN? + answer: | + Microsoft is committed to its vision of a world without passwords. We recognize the *convenience* provided by convenience PIN, but it stills uses a password for authentication. Microsoft recommends that customers using Windows 10 and convenience PINs should move to Windows Hello for Business. New Windows 10 deployments should deploy Windows Hello for Business and not convenience PINs. Microsoft will be deprecating convenience PINs in the future and will publish the date early to ensure customers have adequate lead time to deploy Windows Hello for Business. + + - question: Can I use Windows Hello for Business key trust and RDP? + answer: | + Remote Desktop Protocol (RDP) does not currently support using key-based authentication and self-signed certificates as supplied credentials. RDP with supplied credentials is currently only supported with certificate-based deployments. Windows Hello for Business key trust can be used with [Windows Defender Remote Credential Guard](https://docs.microsoft.com/windows/security/identity-protection/remote-credential-guard). + + - question: Can I deploy Windows Hello for Business by using Microsoft Endpoint Configuration Manager? + answer: | + Windows Hello for Business deployments using Configuration Manager should follow the hybrid deployment model that uses Active Directory Federation Services. Starting in Configuration Manager version 1910, certificate-based authentication with Windows Hello for Business settings isn't supported. Key-based authentication is still valid with Configuration Manager. For more information, see [Windows Hello for Business settings in Configuration Manager](https://docs.microsoft.com/configmgr/protect/deploy-use/windows-hello-for-business-settings). + + - question: How many users can enroll for Windows Hello for Business on a single Windows 10 computer? + answer: | + The maximum number of supported enrollments on a single Windows 10 computer is 10. This lets 10 users each enroll their face and up to 10 fingerprints. While we support 10 enrollments, we will strongly encourage the use of Windows Hello security keys for the shared computer scenario when they become available. + + - question: How can a PIN be more secure than a password? + answer: | + When using Windows Hello for Business, the PIN is not a symmetric key, whereas the password is a symmetric key. With passwords, there's a server that has some representation of the password. With Windows Hello for Business, the PIN is user-provided entropy used to load the private key in the Trusted Platform Module (TPM). The server does not have a copy of the PIN. For that matter, the Windows client does not have a copy of the current PIN either. The user must provide the entropy, the TPM-protected key, and the TPM that generated that key in order to successfully access the private key. + + The statement "PIN is stronger than Password" is not directed at the strength of the entropy used by the PIN. It's about the difference between providing entropy versus continuing the use of a symmetric key (the password). The TPM has anti-hammering features that thwart brute-force PIN attacks (an attacker's continuous attempt to try all combination of PINs). Some organizations may worry about shoulder surfing. For those organizations, rather than increase the complexity of the PIN, implement the [Multifactor Unlock](feature-multifactor-unlock.md) feature. + + - question: I have Windows Server 2016 domain controller(s), so why is the Key Admins group missing? + answer: | + The **Key Admins** and **Enterprise Key Admins** groups are created when you install the first Windows Server 2016 domain controller into a domain. Domain controllers running previous versions of Windows Server cannot translate the security identifier (SID) to a name. To resolve this, transfer the PDC emulator domain role to a domain controller running Windows Server 2016. + + - question: Can I use a convenience PIN with Azure Active Directory? + answer: | + It's currently possible to set a convenience PIN on Azure Active Directory Joined or Hybrid Active Directory Joined devices. Convenience PIN is not supported for Azure Active Directory user accounts (synchronized identities included). It's only supported for on-premises Domain Joined users and local account users. + + - question: Can I use an external camera when my laptop is closed or docked? + answer: | + No. Windows 10 currently only supports one Windows Hello for Business camera and does not fluidly switch to an external camera when the computer is docked with the lid closed. The product group is aware of this and is investigating this topic further. + + - question: Why does authentication fail immediately after provisioning Hybrid Key Trust? + answer: | + In a hybrid deployment, a user's public key must sync from Azure AD to AD before it can be used to authenticate against a domain controller. This sync is handled by Azure AD Connect and will occur during a normal sync cycle. + + - question: What is the password-less strategy? + answer: | + Watch Principal Program Manager Karanbir Singh's **Microsoft's guide for going password-less** Ignite 2017 presentation. + + [Microsoft's password-less strategy](hello-videos.md#microsofts-passwordless-strategy) + + - question: What is the user experience for Windows Hello for Business? + answer: | + The user experience for Windows Hello for Business occurs after user sign-in, after you deploy Windows Hello for Business policy settings to your environment. + + [Windows Hello for Business user enrollment experience](hello-videos.md#windows-hello-for-business-user-enrollment-experience) + + - question: What happens when a user forgets their PIN? + answer: | + If the user can sign-in with a password, they can reset their PIN by selecting the "I forgot my PIN" link under Settings. Beginning with Windows 10 1709, users can reset their PIN above the lock screen by selecting the "I forgot my PIN" link on the PIN credential provider. + + [Windows Hello for Business forgotten PIN user experience](hello-videos.md#windows-hello-for-business-forgotten-pin-user-experience) + + For on-premises deployments, devices must be well-connected to their on-premises network (domain controllers and/or certificate authority) to reset their PINs. Hybrid customers can on-board their Azure tenant to use the Windows Hello for Business PIN reset service to reset their PINs without access to their corporate network. + + - question: What URLs do I need to allow for a hybrid deployment? + answer: | + Communicating with Azure Active Directory uses the following URLs: + - enterpriseregistration.windows.net + - login.microsoftonline.com + - login.windows.net + - account.live.com + - accountalt.azureedge.net + - secure.aadcdn.microsoftonline-p.com + + If your environment uses Microsoft Intune, you need these additional URLs: + - enrollment.manage.microsoft.com + - portal.manage.microsoft.com + + - question: What is the difference between non-destructive and destructive PIN reset? + answer: | + Windows Hello for Business has two types of PIN reset: non-destructive and destructive. Organizations running Windows 10 Enterprise and Azure Active Directory can take advantage of the Microsoft PIN Reset service. Once onboarded to a tenant and deployed to computers, users who have forgotten their PINs can authenticate to Azure, provide a second factor of authentication, and reset their PIN without re-provisioning a new Windows Hello for Business enrollment. This is a non-destructive PIN reset because the user doesn't delete the current credential and obtain a new one. For more information, see [PIN Reset](hello-feature-pin-reset.md). + + Organizations that have the on-premises deployment of Windows Hello for Business, or those not using Windows 10 Enterprise can use destructive PIN reset. With destructive PIN reset, users that have forgotten their PIN can authenticate by using their password and then performing a second factor of authentication to re-provision their Windows Hello for Business credential. Re-provisioning deletes the old credential and requests a new credential and certificate. On-premises deployments need network connectivity to their domain controllers, Active Directory Federation Services, and their issuing certificate authority to perform a destructive PIN reset. Also, for hybrid deployments, destructive PIN reset is only supported with the certificate trust model and the latest updates to Active Directory Federation Services. + + - question: | + Which is better or more secure: key trust or certificate trust? + answer: | + The trust models of your deployment determine how you authenticate to Active Directory (on-premises). Both key trust and certificate trust use the same hardware-backed, two-factor credential. The difference between the two trust types are: + - Required domain controllers + - Issuing end entity certificates + + The **key trust** model authenticates to Active Directory by using a raw key. Windows Server 2016 domain controllers enable this authentication. Key trust authenticate does not require an enterprise issued certificate, therefore you don't need to issue certificates to users (domain controller certificates are still needed). + + The **certificate trust** model authenticates to Active Directory by using a certificate. Because this authentication uses a certificate, domain controllers running previous versions of Windows Server can authenticate the user. Therefore, you need to issue certificates to users, but you don't need Windows Server 2016 domain controllers. The certificate used in certificate trust uses the TPM-protected private key to request a certificate from your enterprise's issuing certificate authority. + + - question: Do I need Windows Server 2016 domain controllers? + answer: | + There are many deployment options from which to choose. Some of those options require an adequate number of Windows Server 2016 domain controllers in the site where you've deployed Windows Hello for Business. There are other deployment options that use existing Windows Server 2008 R2 or later domain controllers. Choose the deployment option that best suits your environment. + + - question: What attributes are synchronized by Azure AD Connect with Windows Hello for Business? + answer: | + Review [Azure AD Connect sync: Attributes synchronized to Azure Active Directory](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized) for a list of attributes that sync based on scenarios. The base scenarios that include Windows Hello for Business are the [Windows 10](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized#windows-10) scenario and the [Device writeback](https://docs.microsoft.com/azure/active-directory/connect/active-directory-aadconnectsync-attributes-synchronized#device-writeback) scenario. Your environment may include additional attributes. + + - question: Is Windows Hello for Business multifactor authentication? + answer: | + Windows Hello for Business is two-factor authentication based on the observed authentication factors of: something you have, something you know, and something that's part of you. Windows Hello for Business incorporates two of these factors: something you have (the user's private key protected by the device's security module) and something you know (your PIN). With the proper hardware, you can enhance the user experience by introducing biometrics. By using biometrics, you can replace the "something you know" authentication factor with the "something that is part of you" factor, with the assurances that users can fall back to the "something you know factor". + + - question: What are the biometric requirements for Windows Hello for Business? + answer: | + Read [Windows Hello biometric requirements](https://docs.microsoft.com/windows-hardware/design/device-experiences/windows-hello-biometric-requirements) for more information. + + - question: Can I use both a PIN and biometrics to unlock my device? + answer: | + Starting in Windows 10, version 1709, you can use multi-factor unlock to require users to provide an additional factor to unlock their device. Authentication remains two-factor, but another factor is required before Windows allows the user to reach the desktop. To learn more, see [Multifactor Unlock](feature-multifactor-unlock.md). + + - question: What's the difference between Windows Hello and Windows Hello for Business? + answer: | + Windows Hello represents the biometric framework provided in Windows 10. Windows Hello lets users use biometrics to sign in to their devices by securely storing their user name and password and releasing it for authentication when the user successfully identifies themselves using biometrics. Windows Hello for Business uses asymmetric keys protected by the device's security module that requires a user gesture (PIN or biometrics) to authenticate. + + - question: Why can't I enroll biometrics for my local, built-in administrator? + answer: | + Windows 10 does not allow the local administrator to enroll biometric gestures (face or fingerprint). + + - question: I have extended Active Directory to Azure Active Directory. Can I use the on-premises deployment model? + answer: | + No. If your organization is federated or using online services, such as Azure AD Connect, Office 365, or OneDrive, then you must use a hybrid deployment model. On-premises deployments are exclusive to organizations who need more time before moving to the cloud and exclusively use Active Directory. + + - question: Does Windows Hello for Business prevent the use of simple PINs? + answer: | + Yes. Our simple PIN algorithm looks for and disallows any PIN that has a constant delta from one digit to the next. The algorithm counts the number of steps required to reach the next digit, overflowing at ten ('zero'). + So, for example: + + - The PIN 1111 has a constant delta of (0,0,0), so it is not allowed + - The PIN 1234 has a constant delta of (1,1,1), so it is not allowed + - The PIN 1357 has a constant delta of (2,2,2), so it is not allowed + - The PIN 9630 has a constant delta of (7,7,7), so it is not allowed + - The PIN 1593 has a constant delta of (4,4,4), so it is not allowed + - The PIN 7036 has a constant delta of (3,3,3), so it is not allowed + - The PIN 1231 does not have a constant delta (1,1,8), so it is allowed + - The PIN 1872 does not have a constant delta (7,9,5), so it is allowed + + This prevents repeating numbers, sequential numbers, and simple patterns. It always results in a list of 100 disallowed PINs (independent of the PIN length). This algorithm does not apply to alphanumeric PINs. + + - question: How does PIN caching work with Windows Hello for Business? + answer: | + Windows Hello for Business provides a PIN caching user experience by using a ticketing system. Rather than caching a PIN, processes cache a ticket they can use to request private key operations. Azure AD and Active Directory sign-in keys are cached under lock. This means the keys remain available for use without prompting, as long as the user is interactively signed-in. Microsoft Account sign-in keys are considered transactional keys, which means the user is always prompted when accessing the key. + + Beginning with Windows 10, version 1709, Windows Hello for Business used as a smart card (smart card emulation that is enabled by default) provides the same user experience of default smart card PIN caching. Each process requesting a private key operation will prompt the user for the PIN on first use. Subsequent private key operations will not prompt the user for the PIN. + + The smart card emulation feature of Windows Hello for Business verifies the PIN and then discards the PIN in exchange for a ticket. The process does not receive the PIN, but rather the ticket that grants them private key operations. Windows 10 does not provide any Group Policy settings to adjust this caching. + + - question: Can I disable the PIN while using Windows Hello for Business? + answer: | + No. The movement away from passwords is accomplished by gradually reducing the use of the password. In situations where you can't authenticate by using biometrics, you need a fallback mechanism that is not a password. The PIN is the fallback mechanism. Disabling or hiding the PIN credential provider will disable the use of biometrics. + + - question: How are keys protected? + answer: | + Wherever possible, Windows Hello for Business takes advantage of Trusted Platform Module (TPM) 2.0 hardware to generate and protect keys. However, Windows Hello and Windows Hello for Business do not require a TPM. Administrators can choose to allow key operations in software. + + Whenever possible, Microsoft strongly recommends the use of TPM hardware. The TPM protects against a variety of known and potential attacks, including PIN brute-force attacks. The TPM provides an additional layer of protection after an account lockout, too. When the TPM has locked the key material, the user will need to reset the PIN (which means they'll need to use MFA to re-authenticate to the IDP before the IDP allows them to re-register). + + - question: Can Windows Hello for Business work in air-gapped environments? + answer: | + Yes. You can use the on-premises Windows Hello for Business deployment and combine it with a third-party MFA provider that does not require internet connectivity to achieve an air-gapped Windows Hello for Business deployment. + + - question: Can I use third-party authentication providers with Windows Hello for Business? + answer: | + Yes, if you're using federated hybrid deployment, you can use any third-party that provides an Active Directory Federation Services (AD FS) multi-factor authentication adapter. A list of third-party MFA adapters can be found [here](https://docs.microsoft.com/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods). + + - question: Does Windows Hello for Business work with third party federation servers? + answer: | + Windows Hello for Business works with any third-party federation servers that support the protocols used during the provisioning experience. Interested third-parties can inquiry at [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration). + + | Protocol | Description | + | :---: | :--- | + | [[MS-KPP]: Key Provisioning Protocol](https://msdn.microsoft.com/library/mt739755.aspx) | Specifies the Key Provisioning Protocol, which defines a mechanism for a client to register a set of cryptographic keys on a user and device pair. | + | [[MS-OAPX]: OAuth 2.0 Protocol Extensions](https://msdn.microsoft.com/library/dn392779.aspx)| Specifies the OAuth 2.0 Protocol Extensions, which are used to extend the OAuth 2.0 Authorization Framework. These extensions enable authorization features such as resource specification, request identifiers, and login hints. | + | [[MS-OAPXBC]: OAuth 2.0 Protocol Extensions for Broker Clients](https://msdn.microsoft.com/library/mt590278.aspx) | Specifies the OAuth 2.0 Protocol Extensions for Broker Clients, extensions to RFC6749 (the OAuth 2.0 Authorization Framework) that allow a broker client to obtain access tokens on behalf of calling clients. | + | [[MS-OIDCE]: OpenID Connect 1.0 Protocol Extensions](https://msdn.microsoft.com/library/mt766592.aspx) | Specifies the OpenID Connect 1.0 Protocol Extensions. These extensions define additional claims to carry information about the user, including the user principal name, a locally unique identifier, a time for password expiration, and a URL for password change. These extensions also define additional provider meta-data that enables the discovery of the issuer of access tokens and gives additional information about provider capabilities. | + + - question: Does Windows Hello for Business work with Mac and Linux clients? + answer: | + Windows Hello for Business is a feature of Windows 10. At this time, Microsoft is not developing clients for other platforms. However, Microsoft is open to third-parties who are interested in moving these platforms away from passwords. Interested third-parties can get more information by emailing [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration). \ No newline at end of file diff --git a/windows/security/identity-protection/hello-for-business/toc.md b/windows/security/identity-protection/hello-for-business/toc.md index 8ec19c126f..3913ea8734 100644 --- a/windows/security/identity-protection/hello-for-business/toc.md +++ b/windows/security/identity-protection/hello-for-business/toc.md @@ -63,7 +63,7 @@ ## [Windows Hello and password changes](hello-and-password-changes.md) ## [Prepare people to use Windows Hello](hello-prepare-people-to-use.md) -## [Windows Hello for Business Frequently Asked Questions (FAQ)](hello-faq.md) +## [Windows Hello for Business Frequently Asked Questions (FAQ)](hello-faq.yml) ### [Windows Hello for Business Videos](hello-videos.md) ## [Windows Hello errors during PIN creation](hello-errors-during-pin-creation.md) From 6d992ebbf491e2b1b06dd6996f090bd2820d1971 Mon Sep 17 00:00:00 2001 From: Shari Kjerland <30906736+SKjerland@users.noreply.github.com> Date: Wed, 16 Dec 2020 17:54:44 -0800 Subject: [PATCH 279/958] Minor fixes --- browsers/edge/microsoft-edge-faq.yml | 2 +- .../hello-for-business/hello-faq.yml | 13 ++++++------- 2 files changed, 7 insertions(+), 8 deletions(-) diff --git a/browsers/edge/microsoft-edge-faq.yml b/browsers/edge/microsoft-edge-faq.yml index e6f27046bd..2cf801b44d 100644 --- a/browsers/edge/microsoft-edge-faq.yml +++ b/browsers/edge/microsoft-edge-faq.yml @@ -15,7 +15,7 @@ metadata: title: Frequently Asked Questions (FAQs) for IT Pros summary: | - >Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile + Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile > [!NOTE] > You've reached the documentation for Microsoft Edge version 45 and earlier. To see the documentation for Microsoft Edge version 77 or later, go to the [Microsoft Edge documentation landing page](https://docs.microsoft.com/DeployEdge/). diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml index d4db9fb009..92e87082b1 100644 --- a/windows/security/identity-protection/hello-for-business/hello-faq.yml +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -19,8 +19,7 @@ metadata: title: Windows Hello for Business Frequently Asked Questions summary: | - **Applies to** - - Windows 10 + Applies to: Windows 10 sections: @@ -64,7 +63,7 @@ sections: answer: | No. Windows 10 currently only supports one Windows Hello for Business camera and does not fluidly switch to an external camera when the computer is docked with the lid closed. The product group is aware of this and is investigating this topic further. - - question: Why does authentication fail immediately after provisioning Hybrid Key Trust? + - question: Why does authentication fail immediately after provisioning hybrid key trust? answer: | In a hybrid deployment, a user's public key must sync from Azure AD to AD before it can be used to authenticate against a domain controller. This sync is handled by Azure AD Connect and will occur during a normal sync cycle. @@ -82,7 +81,7 @@ sections: - question: What happens when a user forgets their PIN? answer: | - If the user can sign-in with a password, they can reset their PIN by selecting the "I forgot my PIN" link under Settings. Beginning with Windows 10 1709, users can reset their PIN above the lock screen by selecting the "I forgot my PIN" link on the PIN credential provider. + If the user can sign-in with a password, they can reset their PIN by selecting the "I forgot my PIN" link in Settings. Beginning with Windows 10 1709, users can reset their PIN above the lock screen by selecting the "I forgot my PIN" link on the PIN credential provider. [Windows Hello for Business forgotten PIN user experience](hello-videos.md#windows-hello-for-business-forgotten-pin-user-experience) @@ -102,7 +101,7 @@ sections: - enrollment.manage.microsoft.com - portal.manage.microsoft.com - - question: What is the difference between non-destructive and destructive PIN reset? + - question: What's the difference between non-destructive and destructive PIN reset? answer: | Windows Hello for Business has two types of PIN reset: non-destructive and destructive. Organizations running Windows 10 Enterprise and Azure Active Directory can take advantage of the Microsoft PIN Reset service. Once onboarded to a tenant and deployed to computers, users who have forgotten their PINs can authenticate to Azure, provide a second factor of authentication, and reset their PIN without re-provisioning a new Windows Hello for Business enrollment. This is a non-destructive PIN reset because the user doesn't delete the current credential and obtain a new one. For more information, see [PIN Reset](hello-feature-pin-reset.md). @@ -193,9 +192,9 @@ sections: answer: | Yes, if you're using federated hybrid deployment, you can use any third-party that provides an Active Directory Federation Services (AD FS) multi-factor authentication adapter. A list of third-party MFA adapters can be found [here](https://docs.microsoft.com/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs#microsoft-and-third-party-additional-authentication-methods). - - question: Does Windows Hello for Business work with third party federation servers? + - question: Does Windows Hello for Business work with third-party federation servers? answer: | - Windows Hello for Business works with any third-party federation servers that support the protocols used during the provisioning experience. Interested third-parties can inquiry at [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration). + Windows Hello for Business works with any third-party federation servers that support the protocols used during the provisioning experience. Interested third-parties can inquiry at [whfbfeedback@microsoft.com](mailto:whfbfeedback@microsoft.com?subject=collaboration).

    | Protocol | Description | | :---: | :--- | From fc5ce1e0f586ff8ef5e46eff8bc639a509c51de6 Mon Sep 17 00:00:00 2001 From: Shari Kjerland <30906736+SKjerland@users.noreply.github.com> Date: Wed, 16 Dec 2020 18:03:55 -0800 Subject: [PATCH 280/958] Minor fixes --- browsers/edge/TOC.md | 2 +- browsers/edge/microsoft-edge-faq.yml | 4 ++-- .../identity-protection/hello-for-business/hello-faq.yml | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/browsers/edge/TOC.md b/browsers/edge/TOC.md index 0f0c4989e5..bae1f59877 100644 --- a/browsers/edge/TOC.md +++ b/browsers/edge/TOC.md @@ -28,6 +28,6 @@ ## [Change history for Microsoft Edge](change-history-for-microsoft-edge.md) -## [Microsoft Edge Frequently Asked Questions (FAQs)](microsoft-edge-faq.yml) +## [Microsoft Edge Frequently Asked Questions (FAQ)](microsoft-edge-faq.yml) diff --git a/browsers/edge/microsoft-edge-faq.yml b/browsers/edge/microsoft-edge-faq.yml index 2cf801b44d..751f40f4ea 100644 --- a/browsers/edge/microsoft-edge-faq.yml +++ b/browsers/edge/microsoft-edge-faq.yml @@ -1,6 +1,6 @@ ### YamlMime:FAQ metadata: - title: Microsoft Edge - Frequently Asked Questions (FAQs) for IT Pros + title: Microsoft Edge - Frequently Asked Questions (FAQ) for IT Pros ms.reviewer: audience: itpro manager: dansimp @@ -13,7 +13,7 @@ metadata: ms.sitesec: library ms.localizationpriority: medium -title: Frequently Asked Questions (FAQs) for IT Pros +title: Frequently Asked Questions (FAQ) for IT Pros summary: | Applies to: Microsoft Edge on Windows 10 and Windows 10 Mobile diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml index 92e87082b1..aae7b07f4a 100644 --- a/windows/security/identity-protection/hello-for-business/hello-faq.yml +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -1,6 +1,6 @@ ### YamlMime:FAQ metadata: - title: Windows Hello for Business Frequently Asked Questions + title: Windows Hello for Business Frequently Asked Questions (FAQ) description: Use these frequently asked questions (FAQ) to learn important details about Windows Hello for Business. keywords: identity, PIN, biometric, Hello, passport ms.prod: w10 @@ -17,7 +17,7 @@ metadata: ms.date: 08/19/2018 ms.reviewer: -title: Windows Hello for Business Frequently Asked Questions +title: Windows Hello for Business Frequently Asked Questions (FAQ) summary: | Applies to: Windows 10 From 502d130ba44ff4fa7a87339f3eac1acfc3bc4e44 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 17 Dec 2020 11:04:09 +0530 Subject: [PATCH 281/958] Update firewall-settings-lost-on-upgrade.md --- .../windows-firewall/firewall-settings-lost-on-upgrade.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 232e9788e4..3bb0a16e42 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -29,7 +29,7 @@ For organizational purposes, individual built-in firewall rules are categorized - Remote Desktop – User-Mode (UDP-In) -Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the firewall interface (wf.msc). This is acheived by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the firewall interface (wf.msc). This is achieved by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group @@ -38,6 +38,6 @@ Get-NetFirewallRule -Group > [!NOTE] > It is recommended to enable an entire group instead of individual rules if the expectation is that the ruleset is going to be migrated at some point. -To avoid unexpected behaviors it is recommended to enable/disable all of the rules within a group as opposed to just one or two of the individual rules. This is because while groups are used to organize rules and allow batch rule modification by type, they also represents the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. +To avoid unexpected behaviors, it is recommended to enable/disable all of the rules within a group as opposed to just one or two of the individual rules. This is because while groups are used to organize rules and allow batch rule modification by type, they also represent the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. From 70d8ac48176f2d45d981066522c1332ed422e9b2 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 17 Dec 2020 11:09:43 +0530 Subject: [PATCH 282/958] Update filter-origin-documentation.md --- .../windows-firewall/filter-origin-documentation.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md index 5d43155670..7ef38e690b 100644 --- a/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md +++ b/windows/security/threat-protection/windows-firewall/filter-origin-documentation.md @@ -55,7 +55,7 @@ The next section describes the improvements made to audits 5157 and 5152, and ho The two new fields added to the audit 5157 and 5152 events are `Filter Origin` and `Interface Index`. -The `Filter Origin` field helps identify the cause of the drop. Packet drops from firewall are explicitly dropped by default block filters created by the Windows Firewall service or a firewall rule which may be created by users, policies, services, apps, etc. +The `Filter Origin` field helps identify the cause of the drop. Packet drops from firewall are explicitly dropped by default block filters created by the Windows Firewall service or a firewall rule that may be created by users, policies, services, apps, etc. `Filter Origin` specifies either the rule ID (a unique identifier of a Firewall rule) or the name of one of the default block filters. @@ -100,7 +100,7 @@ Network drop events from the AppContainer loopback block filter origin occur whe To enable localhost loopback in a local debugging environment, see [Communicating with localhost](https://docs.microsoft.com/windows/iot-core/develop-your-app/loopback). -To enable localhost loopback for a published app which requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). +To enable localhost loopback for a published app that requires loopback access to communicate with another UWP or packaged win32 app, see [uap4:LoopbackAccessRules](https://docs.microsoft.com/uwp/schemas/appxpackage/uapmanifestschema/element-uap4-loopbackaccessrules). **Boottime default** @@ -130,7 +130,7 @@ Network packet drops from query user default block filters occur when there is n 1. Create an inbound firewall rule to allow the packet for this application. This will allow the packet to bypass any query user default block filters. -2. Delete any block query user rules which may have been auto generated by the firewall service. +2. Delete any block query user rules that may have been auto generated by the firewall service. To generate a list of all the query user block rules, you can run the following PowerShell command: @@ -161,7 +161,7 @@ To disable stealth-mode, see [Disable stealth mode in Windows](https://docs.micr **UWP default** -Network drops from Universal Windows Platform (UWP) default inbound/outbound block filters are often caused by the UWP app not being configured correctly (i.e. the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. +Network drops from Universal Windows Platform (UWP) default inbound/outbound block filters are often caused by the UWP app not being configured correctly (that is, the UWP app is missing the correct capability tokens or loopback is not enabled) or the private range is configured incorrectly. For more information on how to debug drops caused by UWP default block filters, see [Troubleshooting UWP App Connectivity Issues](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/troubleshooting-uwp-firewall). From 1e719a7bf58532d637567152bbd511aaaa835ec5 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Thu, 17 Dec 2020 11:13:39 +0530 Subject: [PATCH 283/958] Update quarantine.md --- .../threat-protection/windows-firewall/quarantine.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/quarantine.md b/windows/security/threat-protection/windows-firewall/quarantine.md index a7d55f86ae..6cce740d60 100644 --- a/windows/security/threat-protection/windows-firewall/quarantine.md +++ b/windows/security/threat-protection/windows-firewall/quarantine.md @@ -21,9 +21,9 @@ ms.date: 11/17/2020 One of the security challenges that network admins face is configuring a machine properly after a network change. -Network changes can happen frequently. Additionally, the operations required to re-categorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are part of the domain. In the past, the delay in applying security policies during network re-categorization has been successfully exploited for vulnerabilities. +Network changes can happen frequently. Additionally, the operations required to recategorize the network after a change and apply the correct security policies on a machine are non-trivial and may require considerable CPU time. This is especially true for machines that are part of the domain. In the past, the delay in applying security policies during network recategorization has been successfully exploited for vulnerabilities. -To counter this potential exploitation, Windows Firewall will quarantine an interface until the system has successfully re-categorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. +To counter this potential exploitation, Windows Firewall will quarantine an interface until the system has successfully recategorized the network and Windows Filtering Platform (WFP) has the correct filters applied for the updated interface configuration. During quarantine, all new inbound connections without exceptions are blocked to the machine. While the quarantine feature has long been a part of Windows Firewall, the feature behavior has often caused confusion for customers unaware of quarantine and its motivations. @@ -31,7 +31,7 @@ Ultimately, the goal of this document is to describe the quarantine feature at a ## Quarantine filters -The quarantine feature creates filters which can be split into three categories: +The quarantine feature creates filters that can be split into three categories: - Quarantine default inbound block filter - Quarantine default exception filters @@ -62,7 +62,7 @@ When the interface is in quarantine state, the quarantine default exception filt ### Interface un-quarantine filter -The interface un-quarantine filters allows all non-loopback packets if the interface is successfully categorized. +The interface un-quarantine filters allow all non-loopback packets if the interface is successfully categorized. ## Quarantine flow @@ -94,7 +94,7 @@ Netsh wfp cap stop These commands generate a wfpdiag.cab. Inside the .cab exists a wfpdiag.xml, which contains drop `netEvents` and filters that existed during that reproduction. -Inside the wfpdiag.xml, search for `netEvents` which have `FWPM_NET_EVENT_TYPE_CLASSIFY_DROP` as the `netEvent` type. To find the relevant drop events, search for the drop events with matching destination IP address, package SID, or application ID name. +Inside the wfpdiag.xml, search for `netEvents` that have `FWPM_NET_EVENT_TYPE_CLASSIFY_DROP` as the `netEvent` type. To find the relevant drop events, search for the drop events with matching destination IP address, package SID, or application ID name. The characters in the application ID name will be separated by periods: From 8c90da743de4cb4e34dbc49b9f0f5294f0b8ed7b Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 17 Dec 2020 11:46:07 +0500 Subject: [PATCH 284/958] minor calrification Added a minor clarification. Prbolem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8803 --- .../windows-sandbox/windows-sandbox-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md b/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md index e7b8a53f7a..f9ff3618d5 100644 --- a/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md +++ b/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md @@ -55,7 +55,7 @@ The following video provides an overview of Windows Sandbox. 1. Locate and select **Windows Sandbox** on the Start menu to run it for the first time. ## Usage -1. Copy an executable file (and any other files needed to run the application) from the host into the Windows Sandbox window. +1. Copy an executable file (and any other files needed to run the application) from the host and paste into the **Windows Sandbox** window. 2. Run the executable file or installer inside the sandbox. 3. When you're finished experimenting, close the sandbox. A dialog box will state that all sandbox content will be discarded and permanently deleted. Select **ok**. 4. Confirm that your host machine doesn't exhibit any of the modifications that you made in Windows Sandbox. From fbc556f129b74778145c53443ad905fae3d8648e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 06:26:27 -0800 Subject: [PATCH 285/958] Update md-app-guard-overview.md --- .../md-app-guard-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md index 62c8df613c..a8678eba15 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md @@ -8,7 +8,7 @@ ms.pagetype: security ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 12/10/2020 +ms.date: 12/17/2020 ms.reviewer: manager: dansimp ms.custom: asr From 926e4e9fa9eb38b2eedfa6801645652caceac40b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 06:28:18 -0800 Subject: [PATCH 286/958] Update md-app-guard-overview.md --- .../md-app-guard-overview.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md index a8678eba15..2a63557e33 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview.md @@ -24,16 +24,14 @@ Microsoft Defender Application Guard (Application Guard) is designed to help pre For Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting your company while your employees browse the Internet. As an enterprise administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated Hyper-V-enabled container. -For Microsoft Office, Application Guard helps prevents untrusted Word, Powerpoint and Excel files from accessing trusted resources, by opening these files in an isolated Hyper-V-enabled container. - -The isolated Hyper-V container is separate from the host operating system. This container isolation means that if the untrusted site or file turns out to be malicious, the host PC is protected, and the attacker can't get to your enterprise data. For example, this approach makes the isolated container anonymous, so an attacker can't get to your employee's enterprise credentials. +For Microsoft Office, Application Guard helps prevents untrusted Word, PowerPoint and Excel files from accessing trusted resources. Application Guard opens untrusted files in an isolated Hyper-V-enabled container. The isolated Hyper-V container is separate from the host operating system. This container isolation means that if the untrusted site or file turns out to be malicious, the host device is protected, and the attacker can't get to your enterprise data. For example, this approach makes the isolated container anonymous, so an attacker can't get to your employee's enterprise credentials. ![Hardware isolation diagram](images/appguard-hardware-isolation.png) ### What types of devices should use Application Guard? -Application Guard has been created to target several types of systems: +Application Guard has been created to target several types of devices: - **Enterprise desktops**. These desktops are domain-joined and managed by your organization. Configuration management is primarily done through Microsoft Endpoint Configuration Manager or Microsoft Intune. Employees typically have Standard User privileges and use a high-bandwidth, wired, corporate network. From 9405730c99068e667dfedb15035f90f7247e1d4d Mon Sep 17 00:00:00 2001 From: Harun Kimani <52551080+Gental-Giant@users.noreply.github.com> Date: Thu, 17 Dec 2020 08:53:20 -0800 Subject: [PATCH 287/958] Windows 10 20H2 Connection endpoints --- .../privacy/manage-windows-20H2-endpoints.md | 158 +++++++++++ windows/privacy/toc.yml | 4 + ...-endpoints-20H2-non-enterprise-editions.md | 264 ++++++++++++++++++ 3 files changed, 426 insertions(+) create mode 100644 windows/privacy/manage-windows-20H2-endpoints.md create mode 100644 windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md diff --git a/windows/privacy/manage-windows-20H2-endpoints.md b/windows/privacy/manage-windows-20H2-endpoints.md new file mode 100644 index 0000000000..a2c7dbbed9 --- /dev/null +++ b/windows/privacy/manage-windows-20H2-endpoints.md @@ -0,0 +1,158 @@ +--- +title: Connection endpoints for Windows 10 Enterprise, version 20H2 +description: Explains what Windows 10 endpoints are used for, how to turn off traffic to them, and the impact. Specific to Windows 10 Enterprise, version 20H2. +keywords: privacy, manage connections to Microsoft, Windows 10 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +audience: ITPro +author: gental-giant +ms.author: v-hakima +manager: robsize +ms.collection: M365-security-compliance +ms.topic: article +ms.date: 12/17/2020 +--- +# Manage connection endpoints for Windows 10 Enterprise, version 20H2 + +**Applies to** + +- Windows 10 Enterprise, version 20H2 + +Some Windows components, app, and related services transfer data to Microsoft network endpoints. Some examples include: + +- Connecting to Microsoft Office and Windows sites to download the latest app and security updates. +- Connecting to email servers to send and receive email. +- Connecting to the web for every day web browsing. +- Connecting to the cloud to store and access backups. +- Using your location to show a weather forecast. + +Details about the different ways to control traffic to these endpoints are covered in [Manage connections from Windows operating system components to Microsoft services](manage-connections-from-windows-operating-system-components-to-microsoft-services.md). +Where applicable, each endpoint covered in this topic includes a link to the specific details on how to control that traffic. + +The following methodology was used to derive these network endpoints: + +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +4. Compile reports on traffic going to public IP addresses. +5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. +6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. +8. These tests were conducted for one week, but if you capture traffic for longer you may have different results. + +> [!NOTE] +> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time. + +## Windows 10 20H2 Enterprise connection endpoints + +|Area|Description|Protocol|Destination| +|----------------|----------|----------|------------| +|Apps|||[Learn how to turn off traffic to the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| +||The following endpoint is used for the Weather app. To turn off traffic for this endpoint, either uninstall the Weather app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|HTTP|tile-service.weather.microsoft.com| +||The following endpoint is used for OneNote Live Tile. To turn off traffic for this endpoint, either uninstall OneNote or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLSv1.2/HTTPS/HTTP|cdn.onenote.net| +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser. To turn off traffic for this endpoint, either uninstall the Photos app or disable the Microsoft Store. If you disable the Microsoft store, other Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious Store apps and users will still be able to open them.|TLSv1.2/HTTPS|evoke-windowsservices-tas.msedge.net +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available. It is possible to turn off traffic to this endpoint, but it is not recommended because as root certificates are updated over time, applications and websites may stop working because they did not receive an updated root certificate the application uses. Additionally, it is used to download certificates that are publicly known to be fraudulent. These settings are critical for both Windows security and the overall security of the Internet. We do not recommend blocking this endpoint. If traffic to this endpoint is turned off, Windows no longer automatically downloads certificates known to be fraudulent, which increases the attack vector on the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#automatic-root-certificates-update)| +|||TLSv1.2/HTTPS/HTTP|ctldl.windowsupdate.com| +|Cortana and Live Tiles|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-cortana)| +||The following endpoints are related to Cortana and Live Tiles. If you turn off traffic for this endpoint, you will block updates to Cortana greetings, tips, and Live Tiles.|TLSv1.2/HTTPS/HTTP|www.bing.com*| +|||TLSv1.2/HTTPS/HTTP|fp.msedge.net| +|||TLSv1.2|I-ring.msedge.net| +|||HTTPS|s-ring.msedge.net| +|Device authentication|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +||The following endpoint is used to authenticate a device. If you turn off traffic for this endpoint, the device will not be authenticated.|HTTPS|login.live.com*| +|Device metadata|The following endpoint is used to retrieve device metadata. If you turn off traffic for this endpoint, metadata will not be updated for the device.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services#4-device-metadata-retrieval)| +|||HTTP|dmd.metaservices.microsoft.com| +|Diagnostic Data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service. If you turn off traffic for this endpoint, diagnostic and usage information, which helps Microsoft find and fix problems and improve our products and services, will not be sent back to Microsoft. ||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +|||TLSv1.2/HTTPS/HTTP|v10.events.data.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|v20.events.data.microsoft.com| +|||HTTP|www.microsoft.com| +||The following endpoints are used by Windows Error Reporting. To turn off traffic for these endpoints, enable the following Group Policy: Administrative Templates > Windows Components > Windows Error Reporting > Disable Windows Error Reporting. This means error reporting information will not be sent back to Microsoft.|TLSv1.2|telecommand.telemetry.microsoft.com| +|||TLS v1.2/HTTPS/HTTP|watson.*.microsoft.com| +|Font Streaming|The following endpoints are used to download fonts on demand. If you turn off traffic for these endpoints, you will not be able to download fonts on demand.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services#6-font-streaming)| +|||HTTPS|fs.microsoft.com| +|Licensing|The following endpoint is used for online activation and some app licensing. To turn off traffic for this endpoint, disable the Windows License Manager Service. This will also block online activation and app licensing may not work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#9-license-manager)| +|||TLSv1.2/HTTPS/HTTP|licensing.mp.microsoft.com| +|Maps|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-offlinemaps)| +||The following endpoints are used to check for updates to maps that have been downloaded for offline use. If you turn off traffic for this endpoint, offline maps will not be updated.|TLSv1.2/HTTPS/HTTP|maps.windows.com| +|Microsoft Account|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-microsoft-account)| +||The following endpoints are used for Microsoft accounts to sign in. If you turn off traffic for these endpoints, users cannot sign in with Microsoft accounts. |TLSv1.2/HTTPS|login.live.com| +|Microsoft Edge|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#13-microsoft-edge)| +||This traffic is related to the Microsoft Edge browser.|HTTPS|iecvlist.microsoft.com| +||The following endpoint is used by Microsoft Edge Update service to check for new updates. If you disable this endpoint, Microsoft Edge won’t be able to check for and apply new edge updates.|TLSv1.2/HTTPS/HTTP|msedge.api.cdp.microsoft.com| +|Microsoft forward link redirection service (FWLink)|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer. If you disable this endpoint, Windows Defender won't be able to update its malware definitions; links from Windows and other Microsoft products to the Web won't work; and PowerShell updateable Help won't update. To disable the traffic, instead disable the traffic that's getting forwarded.|HTTP|go.microsoft.com| +|Microsoft Store|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +||The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps). If you turn off traffic for these endpoints, the image files won't be downloaded, and apps cannot be installed or updated from the Microsoft Store. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.|HTTPS|img-prod-cms-rt-microsoft-com.akamaized.net| +||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way. If you turn off traffic for this endpoint, push notifications will no longer work, including MDM device management, mail synchronization, settings synchronization.|TLSv1.2/HTTPS|*.wns.windows.com| +||The following endpoints are used to revoke licenses for malicious apps in the Microsoft Store. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft Store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them|TLSv1.2|1storecatalogrevocation.storequality.microsoft.com| +|||HTTPS/HTTPS/HTTP|storecatalogrevocation.storequality.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|HTTPS|manage.devcenter.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store. If you turn off traffic for these endpoints, apps cannot be installed or updated from the Microsoft Store.|TLSv1.2/HTTPS/HTTP|displaycatalog.mp.microsoft.com| +|||HTTPS|pti.store.microsoft.com| +|||HTTP|share.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com| +|Network Connection Status Indicator (NCSI)|||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-ncsi)| +||Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet. If you turn off traffic for this endpoint, NCSI won't be able to determine if the device is connected to the Internet and the network status tray icon will show a warning.|HTTPS|www.msftconnecttest.com*| +|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser. For more info, see Office 365 URLs and IP address ranges. You can turn this off by removing all Microsoft Office apps and the Mail and Calendar apps. If you turn off traffic for these endpoints, users won't be able to save documents to the cloud or see their recently used documents.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +|||HTTPS|www.office.com| +|||HTTPS|blobs.officehome.msocdn.com| +|||HTTPS|officehomeblobs.blob.core.windows.net| +|||HTTPS|self.events.data.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|outlookmobile-office365-tas.msedge.net| +|OneDrive|The following endpoints are related to OneDrive. If you turn off traffic for these endpoints, anything that relies on g.live.com to get updated URL information will no longer work.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-onedrive)| +|||TLSv1.2/HTTPS/HTTP|g.live.com| +|||TLSv1.2/HTTPS/HTTP|oneclient.sfx.ms| +|||HTTPS| logincdn.msauth.net| +|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it. If you turn off traffic for this endpoint, an app that uses this endpoint may stop working.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-priv-feedback)| +|||TLSv1.2/HTTPS/HTTP|settings-win.data.microsoft.com| +|||HTTPS|settings.data.microsoft.com| +|Skype|The following endpoint is used to retrieve Skype configuration values. To turn off traffic for this endpoint, either uninstall the app or disable the Microsoft Store. If you disable the Microsoft store, other Microsoft Store apps cannot be installed or updated. Additionally, the Microsoft Store won't be able to revoke malicious apps and users will still be able to open them.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-windowsstore)| +|||HTTPS/HTTP|*.pipe.aria.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| +|Teams|The following endpoint is used for Microsoft Teams application.||[Learn how to turn off traffic to all of the following endpoint(s).]( manage-connections-from-windows-operating-system-components-to-microsoft-services.md#26-microsoft-store)| +|||TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| +|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled. If you turn off traffic for this endpoint, the device will not use Cloud-based Protection.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-defender)| +|||HTTPS/TLSv1.2|wdcp.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications. If you turn off traffic for these endpoints, SmartScreen notifications will not appear.|HTTPS|*smartscreen-prod.microsoft.com| +|||HTTPS/HTTP|checkappexec.microsoft.com| +|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips. If you turn off traffic for these endpoints, Windows Spotlight will still try to deliver new lock screen images and updated content but it will fail; suggested apps, Microsoft account notifications, and Windows tips will not be downloaded. For more information, see Windows Spotlight.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-spotlight)| +|||TLSv1.2/HTTPS/HTTP|arc.msn.com| +|||HTTPS|ris.api.iris.microsoft.com| +|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers. If you turn off traffic for this endpoint, Windows Update downloads will not be managed, as critical metadata that is used to make downloads more resilient is blocked. Downloads may be impacted by corruption (resulting in re-downloads of full files). Additionally, downloads of the same update by multiple devices on the same local network will not use peer devices for bandwidth reduction.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services.md#bkmk-updates)| +|||TLSv1.2/HTTPS/HTTP|*.prod.do.dsp.mp.microsoft.com| +|||HTTP|emdl.ws.microsoft.com| +||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store. If you turn off traffic for these endpoints, the device will not be able to download updates for the operating system.|TLSv1.2/HTTPS/HTTP|*.dl.delivery.mp.microsoft.com| +|||HTTP|*.windowsupdate.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store. If you turn off traffic for these endpoints, the device will not be able to connect to Windows Update and Microsoft Update to help keep the device secure. Also, the device will not be able to acquire and update apps from the Store. These are dependent on also enabling "Device authentication" and "Microsoft Account" endpoints.|TLSv1.2/HTTPS/HTTP|*.delivery.mp.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|*.update.microsoft.com| +||The following endpoint is used for compatibility database updates for Windows.|HTTPS|adl.windows.com| +||The following endpoint is used for content regulation. If you turn off traffic for this endpoint, the Windows Update Agent will be unable to contact the endpoint and fallback behavior will be used. This may result in content being either incorrectly downloaded or not downloaded at all.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +|Xbox Live|The following endpoint is used for Xbox Live.||[Learn how to turn off traffic to all of the following endpoint(s).](manage-connections-from-windows-operating-system-components-to-microsoft-services#26-microsoft-store)| +|||HTTPS|dlassets-ssl.xboxlive.com| +| + +## Other Windows 10 editions + +To view endpoints for other versions of Windows 10 Enterprise, see: + +- [Manage connection endpoints for Windows 10, version 2004](manage-windows-2004-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1909](manage-windows-1909-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1903](manage-windows-1903-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1809](manage-windows-1809-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1803](manage-windows-1803-endpoints.md) +- [Manage connection endpoints for Windows 10, version 1709](manage-windows-1709-endpoints.md) + +To view endpoints for non-Enterprise Windows 10 editions, see: + +- [Windows 10, version 2004, connection endpoints for non-Enterprise editions](windows-endpoints-2004-non-enterprise-editions.md) +- [Windows 10, version 1909, connection endpoints for non-Enterprise editions](windows-endpoints-1909-non-enterprise-editions.md) +- [Windows 10, version 1903, connection endpoints for non-Enterprise editions](windows-endpoints-1903-non-enterprise-editions.md) +- [Windows 10, version 1809, connection endpoints for non-Enterprise editions](windows-endpoints-1809-non-enterprise-editions.md) +- [Windows 10, version 1803, connection endpoints for non-Enterprise editions](windows-endpoints-1803-non-enterprise-editions.md) +- [Windows 10, version 1709, connection endpoints for non-Enterprise editions](windows-endpoints-1709-non-enterprise-editions.md) + +## Related links + +- [Office 365 URLs and IP address ranges](https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US) +- [Network infrastructure requirements for Microsoft Intune](https://docs.microsoft.com/mem/intune/fundamentals/intune-endpoints) diff --git a/windows/privacy/toc.yml b/windows/privacy/toc.yml index 60bf83c118..52a6ddd6da 100644 --- a/windows/privacy/toc.yml +++ b/windows/privacy/toc.yml @@ -41,6 +41,8 @@ href: manage-connections-from-windows-operating-system-components-to-microsoft-services.md - name: Manage connections from Windows operating system components to Microsoft services using MDM href: manage-connections-from-windows-operating-system-components-to-microsoft-services-using-MDM.md + - name: Connection endpoints for Windows 10, version 20H2 + href: manage-windows-20H2-endpoints.md - name: Connection endpoints for Windows 10, version 2004 href: manage-windows-2004-endpoints.md - name: Connection endpoints for Windows 10, version 1909 @@ -53,6 +55,8 @@ href: manage-windows-1803-endpoints.md - name: Connection endpoints for Windows 10, version 1709 href: manage-windows-1709-endpoints.md + - name: Connection endpoints for non-Enterprise editions of Windows 10, version 20H2 + href: windows-endpoints-20H2-non-enterprise-editions.md - name: Connection endpoints for non-Enterprise editions of Windows 10, version 2004 href: windows-endpoints-2004-non-enterprise-editions.md - name: Connection endpoints for non-Enterprise editions of Windows 10, version 1909 diff --git a/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md new file mode 100644 index 0000000000..6f82f0ddf4 --- /dev/null +++ b/windows/privacy/windows-endpoints-20H2-non-enterprise-editions.md @@ -0,0 +1,264 @@ +--- +title: Windows 10, version 20H2, connection endpoints for non-Enterprise editions +description: Explains what Windows 10 endpoints are used in non-Enterprise editions. Specific to Windows 10, version 20H2. +keywords: privacy, manage connections to Microsoft, Windows 10, Windows Server 2016 +ms.prod: w10 +ms.mktglfcycl: manage +ms.sitesec: library +ms.localizationpriority: high +audience: ITPro +author: gental-giant +ms.author: v-hakima +manager: robsize +ms.collection: M365-security-compliance +ms.topic: article +ms.date: 12/17/2020 +--- +# Windows 10, version 20H2, connection endpoints for non-Enterprise editions + + **Applies to** + +- Windows 10 Home, version 20H2 +- Windows 10 Professional, version 20H2 +- Windows 10 Education, version 20H2 + +In addition to the endpoints listed for [Windows 10 Enterprise](manage-windows-2004-endpoints.md), the following endpoints are available on other non-Enterprise editions of Windows 10, version 20H2. + +The following methodology was used to derive the network endpoints: + +1. Set up the latest version of Windows 10 on a test virtual machine using the default settings. +2. Leave the device(s) running idle for a week ("idle" means a user is not interacting with the system/device). +3. Use globally accepted network protocol analyzer/capturing tools and log all background egress traffic. +4. Compile reports on traffic going to public IP addresses. +5. The test virtual machine(s) was logged into using a local account, and was not joined to a domain or Azure Active Directory. +6. All traffic was captured in our lab using a IPV4 network. Therefore, no IPV6 traffic is reported here. +7. These tests were conducted in an approved Microsoft lab. It's possible your results may be different. +8. These tests were conducted for one week. If you capture traffic for longer you may have different results. + +> [!NOTE] +> Microsoft uses global load balancers that can appear in network trace-routes. For example, an endpoint for *.akadns.net might be used to load balance requests to an Azure datacenter, which can change over time. + +## Windows 10 Family + +| **Area** | **Description** | **Protocol** | **Destination** | +|-----------|--------------- |------------- |-----------------| +| Activity Feed Service |The following endpoints are used by Activity Feed Service which enables multiple cross-device data roaming scenarios on Windows|TLSv1.2/HTTPS/HTTP|activity.windows.com| +|Apps|The following endpoints are used for the Weather app.|TLSv1.2/HTTPS/HTTP|tile-service.weather.microsoft.com| +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS/HTTP|evoke-windowsservices-tas.msedge.net| +||The following endpoint is used for OneNote Live Tile.|HTTPS/HTTP|cdn.onenote.net| +||Used for Spotify Live Tile|HTTPS/HTTP|spclient.wg.spotify.com| +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available.|TLSv1.2/HTTPS/HTTP|ctldl.windowsupdate.com/*| +|Cortana and Live Tiles|The following endpoints are related to Cortana and Live Tiles|TLSv1.2/HTTPS/HTTP|www.bing.com*| +|||HTTPS/HTTP|fp.msedge.net| +|||HTTPS/HTTP|k-ring.msedge.net| +|||TLSv1.2|b-ring.msedge.net| +|Device authentication|The following endpoint is used to authenticate a device.|HTTPS|login.live.com*| +|Device Directory Service|Used by Device Directory Service to keep track of user-device associations and storing metadata about the devices.|HTTPS/HTTP|cs.dds.microsoft.com| +|Device metadata|The following endpoint is used to retrieve device metadata.|TLSv1.2/HTTP|dmd.metaservices.microsoft.com| +|Diagnostic data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service.|TLSv1.2/HTTP|v10.events.data.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|v20.events.data.microsoft.com| +|||TLSv1.2/HTTP|www.microsoft.com| +||The following endpoints are used by Windows Error Reporting.|TLSv1.2/HTTPS/HTTP|watson.telemetry.microsoft.com| +|Font Streaming|The following endpoints are used to download fonts on demand.|TLSv1.2/HTTPS|fs.microsoft.com*| +|Licensing|The following endpoint is used for online activation and some app licensing.|HTTPS/HTTP|*licensing.mp.microsoft.com| +|||HTTPS|licensing.mp.microsoft.com/v7.0/licenses/content| +|Location|The following endpoints are used for location data.|TLSV1.2|inference.location.live.net| +|Maps|The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTPS/HTTP|maps.windows.com| +|||HTTPS/HTTP|*.ssl.ak.dynamic.tiles.virtualearth.net| +|||HTTPS/HTTP|*.ssl.ak.tiles.virtualearth.net| +|||HTTPS/HTTP|dev.virtualearth.net| +|||HTTPS/HTTP|ecn.dev.virtualearth.net| +|||HTTPS/HTTP|ssl.bing.com| +|Microsoft Account|The following endpoints are used for Microsoft accounts to sign in|TLSv1.2/HTTPS/HTTP|*login.live.com| +|Microsoft Edge|The following endpoints are used for Microsoft Edge Browser Services.|HTTPS/HTTP|edge.activity.windows.com| +|||HTTPS/HTTP|edge.microsoft.com| +||The following endpoint is used by Microsoft Edge Update service to check for new updates.|HTTPS/HTTP|msedge.api.cdp.microsoft.com| +|Microsoft forward link redirection|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer|HTTP|go.microsoft.com/fwlink/| +|||TLSv1.2/HTTPS/HTTP|go.microsoft.com| +|Microsoft Store|The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps)|TLSv1.2/HTTPS/HTTP|img-prod-cms-rt-microsoft-com.akamaized.net| +||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way.|TLSv1.2/HTTPS|*.wns.windows.com| +||The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store.|TLSv1.2/HTTPS/HTTP|storecatalogrevocation.storequality.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store.|TLSv1.2/HTTPS/HTTP|*displaycatalog.mp.microsoft.com| +|||HTTPS|pti.store.microsoft.com| +|||HTTPS|storesdk.dsx.mp.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com| +||The following endpoints are used get images that are used for Microsoft Store suggestions|TLSv1.2|store-images.s-microsoft.com| +|Network Connection Status Indicator (NCSI)|Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet.|TLSv1.2/HTTP|www.msftconnecttest.com*| +|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS/HTTP|outlook.office365.com| +|||TLSv1.2/HTTPS|office.com| +|||TLSv1.2/HTTPS|blobs.officehome.msocdn.com| +|||HTTPS/HTTP|officehomeblobs.blob.core.windows.net| +|||HTTP/HTTPS|*.blob.core.windows.net| +|||TLSv1.2|self.events.data.microsoft.com| +|||HTTPS/HTTP|outlookmobile-office365-tas.msedge.net| +|||HTTP|roaming.officeapps.live.com| +|||HTTPS/HTTP|substrate.office.com| +|OneDrive|The following endpoints are related to OneDrive.|HTTPS|g.live.com| +|||TLSv1.2/HTTPS|oneclient.sfx.ms| +|||HTTPS/TLSv1.2|logincdn.msauth.net| +|||HTTPS/HTTP|windows.policies.live.net| +|||HTTPS/HTTP|api.onedrive.com| +|||HTTPS/HTTP|skydrivesync.policies.live.net| +|||HTTPS/HTTP|*storage.live.com| +|||HTTPS/HTTP|*settings.live.net| +|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it.|TLSv1.2/HTTPS/HTTP|settings.data.microsoft.com*| +|||TLSv1.2/HTTPS/HTTP|settings-win.data.microsoft.com*| +|Skype|The following endpoint is used to retrieve Skype configuration values.|TLSv1.2/HTTPS/HTTP|*.pipe.aria.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| +|Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| +|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| +|||HTTPS/HTTP|*smartscreen-prod.microsoft.com| +|||TLSv1.2|definitionupdates.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| +|||TLSv1.2/HTTP|checkappexec.microsoft.com| +|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| +|||TLSv1.2/HTTPS/HTTP|ris.api.iris.microsoft.com| +|||HTTPS|mucp.api.account.microsoft.com| +|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers.|TLSv1.2/HTTPS/HTTP|*.prod.do.dsp.mp.microsoft.com| +|||TLSv1.2/HTTP|emdl.ws.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|*.dl.delivery.mp.microsoft.com| +||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store.|TLSv1.2/HTTP|*.windowsupdate.com| +|||TLSv1.2/HTTPS/HTTP|*.delivery.mp.microsoft.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store to help keep the device secure.|TLSv1.2/HTTPS/HTTP|*.update.microsoft.com| +||The following endpoint is used for compatibility database updates for Windows.|HTTP/HTTPS|adl.windows.com| +||The following endpoint is used for content regulation.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +|Xbox Live|The following endpoints are used for Xbox Live.| +|||TLSv1.2/HTTPS/HTTP|dlassets-ssl.xboxlive.com| +|||TLSv1.2/HTTPS|da.xboxservices.com| +|||HTTPS|www.xboxab.com| +| + +## Windows 10 Pro + +| **Area** | **Description** | **Protocol** | **Destination** | +| --- | --- | --- | ---| +| Activity Feed Service |The following endpoints are used by Activity Feed Service which enables multiple cross-device data roaming scenarios on Windows|TLSv1.2/HTTPS/HTTP|activity.windows.com| +|Apps|The following endpoints are used for the Weather app.|TLSv1.2/HTTPS/HTTP|tile-service.weather.microsoft.com| +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS/HTTP|evoke-windowsservices-tas.msedge.net| +||The following endpoint is used for OneNote Live Tile.|HTTPS/HTTP|cdn.onenote.net| +||Used for Spotify Live Tile|HTTPS/HTTP|spclient.wg.spotify.com| +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available.|TLSv1.2/HTTPS/HTTP|ctldl.windowsupdate.com/*| +|Cortana and Live Tiles|The following endpoints are related to Cortana and Live Tiles|TLSv1.2/HTTPS/HTTP|www.bing.com*| +|Device authentication|The following endpoint is used to authenticate a device.|HTTPS|login.live.com*| +|Device metadata|The following endpoint is used to retrieve device metadata.|TLSv1.2/HTTP|dmd.metaservices.microsoft.com| +|Diagnostic data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service.|TLSv1.2/HTTP|v10.events.data.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|v20.events.data.microsoft.com| +|||TLSv1.2/HTTP|www.microsoft.com| +||The following endpoints are used by Windows Error Reporting.|TLSv1.2/HTTPS/HTTP|watson.telemetry.microsoft.com| +|Font Streaming|The following endpoints are used to download fonts on demand.|TLSv1.2/HTTPS|fs.microsoft.com*| +|Licensing|The following endpoint is used for online activation and some app licensing.|HTTPS/HTTP|*licensing.mp.microsoft.com| +|Maps|The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTPS/HTTP|maps.windows.com| +|Microsoft Account|The following endpoints are used for Microsoft accounts to sign in|TLSv1.2/HTTPS/HTTP|*login.live.com| +|Microsoft Edge|The following endpoint is used by Microsoft Edge Update service to check for new updates.|HTTPS/HTTP|msedge.api.cdp.microsoft.com| +|Microsoft forward link redirection|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer|TLSv1.2/HTTPS/HTTP|go.microsoft.com| +|Microsoft Store|The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps)|TLSv1.2/HTTPS/HTTP|img-prod-cms-rt-microsoft-com.akamaized.net| +||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way.|TLSv1.2/HTTPS|*.wns.windows.com| +||The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store.|TLSv1.2/HTTPS/HTTP|storecatalogrevocation.storequality.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store.|TLSv1.2/HTTPS/HTTP|*displaycatalog.mp.microsoft.com| +|||HTTPS|pti.store.microsoft.com| +|||HTTPS|storesdk.dsx.mp.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com| +|Network Connection Status Indicator (NCSI)|Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet.|TLSv1.2/HTTP|www.msftconnecttest.com*| +|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS/HTTP|outlook.office365.com| +|||TLSv1.2/HTTPS|office.com| +|||TLSv1.2/HTTPS|blobs.officehome.msocdn.com| +|||HTTPS/HTTP|officehomeblobs.blob.core.windows.net| +|||HTTP/HTTPS|*.blob.core.windows.net| +|||TLSv1.2|self.events.data.microsoft.com| +|||HTTPS/HTTP|outlookmobile-office365-tas.msedge.net| +|||TLSv1.2/HTTPS/HTTP|officeclient.microsoft.com| +|||HTTPS/HTTP|substrate.office.com| +|OneDrive|The following endpoints are related to OneDrive.|HTTPS|g.live.com| +|||TLSv1.2/HTTPS|oneclient.sfx.ms| +|||HTTPS/TLSv1.2|logincdn.msauth.net| +|||HTTPS/HTTP|windows.policies.live.net| +|||HTTPS/HTTP|*storage.live.com| +|||HTTPS/HTTP|*settings.live.net| +|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it.|TLSv1.2/HTTPS/HTTP|settings.data.microsoft.com*| +|||TLSv1.2/HTTPS/HTTP|settings-win.data.microsoft.com*| +|Skype|The following endpoint is used to retrieve Skype configuration values.|TLSv1.2/HTTPS/HTTP|*.pipe.aria.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| +|Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| +|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| +|||HTTPS/HTTP|*smartscreen-prod.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| +|||TLSv1.2/HTTP|checkappexec.microsoft.com| +|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| +|||TLSv1.2/HTTPS/HTTP|ris.api.iris.microsoft.com| +|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers.|TLSv1.2/HTTPS/HTTP|*.prod.do.dsp.mp.microsoft.com| +|||TLSv1.2/HTTP|emdl.ws.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|*.dl.delivery.mp.microsoft.com| +||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store.|TLSv1.2/HTTP|*.windowsupdate.com| +|||TLSv1.2/HTTPS/HTTP|*.delivery.mp.microsoft.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store to help keep the device secure.|TLSv1.2/HTTPS/HTTP|*.update.microsoft.com| +||The following endpoint is used for compatibility database updates for Windows.|HTTP/HTTPS|adl.windows.com| +||The following endpoint is used for content regulation.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +|Xbox Live|The following endpoints are used for Xbox Live.| +|||TLSv1.2/HTTPS/HTTP|dlassets-ssl.xboxlive.com| +|||TLSv1.2/HTTPS|da.xboxservices.com| +| + +## Windows 10 Education + +| **Area** | **Description** | **Protocol** | **Destination** | +| --- | --- | --- | ---| +| Activity Feed Service |The following endpoints are used by Activity Feed Service which enables multiple cross-device data roaming scenarios on Windows|TLSv1.2/HTTPS/HTTP|activity.windows.com| +|Apps|The following endpoints are used for the Weather app.|TLSv1.2/HTTPS/HTTP|tile-service.weather.microsoft.com| +||The following endpoint is used by the Photos app to download configuration files, and to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS/HTTP|evoke-windowsservices-tas.msedge.net| +||The following endpoint is used for OneNote Live Tile.|HTTPS/HTTP|cdn.onenote.net| +|Bing Search|The following endpoint is used by Microsoft Search in Bing enabling users to search across files, SharePoint sites, OneDrive content, Teams and Yammer conversations, and other shared data sources in an organization, as well as the web.|HTTPS|business.bing.com| +|Certificates|The following endpoint is used by the Automatic Root Certificates Update component to automatically check the list of trusted authorities on Windows Update to see if an update is available.|TLSv1.2/HTTPS/HTTP|ctldl.windowsupdate.com/*| +|Cortana and Live Tiles|The following endpoints are related to Cortana and Live Tiles|TLSv1.2/HTTPS/HTTP|www.bing.com*| +|||HTTPS/HTTP|fp.msedge.net| +|||TLSv1.2|odinvzc.azureedge.net| +|||TLSv1.2|b-ring.msedge.net| +|Device metadata|The following endpoint is used to retrieve device metadata.|TLSv1.2/HTTP|dmd.metaservices.microsoft.com| +|Diagnostic data|The following endpoints are used by the Connected User Experiences and Telemetry component and connects to the Microsoft Data Management service.|TLSv1.2/HTTP|v10.events.data.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|v20.events.data.microsoft.com| +|||TLSv1.2/HTTP|www.microsoft.com| +||The following endpoints are used by Windows Error Reporting.|TLSv1.2/HTTPS/HTTP|watson.telemetry.microsoft.com| +|Font Streaming|The following endpoints are used to download fonts on demand.|TLSv1.2/HTTPS|fs.microsoft.com*| +|Licensing|The following endpoint is used for online activation and some app licensing.|HTTPS/HTTP|*licensing.mp.microsoft.com| +|Location|The following endpoints are used for location data.|TLSV1.2|inference.location.live.net| +|Maps|The following endpoints are used to check for updates to maps that have been downloaded for offline use.|HTTPS/HTTP|maps.windows.com| +|Microsoft Account|The following endpoints are used for Microsoft accounts to sign in|TLSv1.2/HTTPS/HTTP|*login.live.com| +|Microsoft Edge|The following endpoint is used by Microsoft Edge Update service to check for new updates.|HTTPS/HTTP|msedge.api.cdp.microsoft.com| +|Microsoft forward link redirection|The following endpoint is used by the Microsoft forward link redirection service (FWLink) to redirect permanent web links to their actual, sometimes transitory, URL. FWlinks are similar to URL shorteners, just longer|TLSv1.2/HTTPS/HTTP|go.microsoft.com| +|Microsoft Store|The following endpoint is used to download image files that are called when applications run (Microsoft Store or Inbox MSN Apps)|TLSv1.2/HTTPS/HTTP|img-prod-cms-rt-microsoft-com.akamaized.net| +||The following endpoint is used for the Windows Push Notification Services (WNS). WNS enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and dependable way.|TLSv1.2/HTTPS|*.wns.windows.com| +||The following endpoint is used to revoke licenses for malicious apps in the Microsoft Store.|TLSv1.2/HTTPS/HTTP|storecatalogrevocation.storequality.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|1storecatalogrevocation.storequality.microsoft.com| +||The following endpoints are used to communicate with Microsoft Store.|TLSv1.2/HTTPS/HTTP|*displaycatalog.mp.microsoft.com| +|||HTTPS|pti.store.microsoft.com| +|||HTTPS|storesdk.dsx.mp.microsoft.com| +||The following endpoint is used to get Microsoft Store analytics.|TLSv1.2/HTTPS/HTTP|manage.devcenter.microsoft.com| +|Network Connection Status Indicator (NCSI)|Network Connection Status Indicator (NCSI) detects Internet connectivity and corporate network connectivity status. NCSI sends a DNS request and HTTP query to this endpoint to determine if the device can communicate with the Internet.|TLSv1.2/HTTP|www.msftconnecttest.com*| +|Office|The following endpoints are used to connect to the Office 365 portal's shared infrastructure, including Office in a browser.|TLSv1.2/HTTPS|office.com| +|||HTTPS/HTTP|officehomeblobs.blob.core.windows.net| +|||TLSv1.2|self.events.data.microsoft.com| +|OneDrive|The following endpoints are related to OneDrive.|HTTPS|g.live.com| +|||TLSv1.2/HTTPS|oneclient.sfx.ms| +|||HTTPS/TLSv1.2|logincdn.msauth.net| +|Settings|The following endpoint is used as a way for apps to dynamically update their configuration. Apps such as System Initiated User Feedback and the Xbox app use it.|TLSv1.2/HTTPS/HTTP|settings.data.microsoft.com*| +|||TLSv1.2/HTTPS/HTTP|settings-win.data.microsoft.com*| +|Skype|The following endpoint is used to retrieve Skype configuration values.|TLSv1.2/HTTPS/HTTP|*.pipe.aria.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|config.edge.skype.com| +|Teams|The following endpoint is used for Microsoft Teams application.|TLSv1.2/HTTPS/HTTP|config.teams.microsoft.com| +|Windows Defender|The following endpoint is used for Windows Defender when Cloud-based Protection is enabled|TLSv1.2/HTTPS|wdcp.microsoft.com| +|||HTTPS/HTTP|*smartscreen-prod.microsoft.com| +||The following endpoints are used for Windows Defender SmartScreen reporting and notifications.|TLSv1.2|*smartscreen.microsoft.com| +|||TLSv1.2/HTTP|checkappexec.microsoft.com| +|Windows Spotlight|The following endpoints are used to retrieve Windows Spotlight metadata that describes content, such as references to image locations, as well as suggested apps, Microsoft account notifications, and Windows tips.|TLSv1.2/HTTPS/HTTP|arc.msn.com*| +|||TLSv1.2/HTTPS/HTTP|ris.api.iris.microsoft.com| +|Windows Update|The following endpoint is used for Windows Update downloads of apps and OS updates, including HTTP downloads or HTTP downloads blended with peers.|TLSv1.2/HTTPS/HTTP|*.prod.do.dsp.mp.microsoft.com| +|||TLSv1.2/HTTP|emdl.ws.microsoft.com| +|||TLSv1.2/HTTPS/HTTP|*.dl.delivery.mp.microsoft.com| +||The following endpoints are used to download operating system patches, updates, and apps from Microsoft Store.|TLSv1.2/HTTP|*.windowsupdate.com| +|||TLSv1.2/HTTPS/HTTP|*.delivery.mp.microsoft.com| +||The following endpoints enable connections to Windows Update, Microsoft Update, and the online services of the Store to help keep the device secure.|TLSv1.2/HTTPS/HTTP|*.update.microsoft.com| +||The following endpoint is used for compatibility database updates for Windows.|HTTP/HTTPS|adl.windows.com| +||The following endpoint is used for content regulation.|TLSv1.2/HTTPS/HTTP|tsfe.trafficshaping.dsp.mp.microsoft.com| +|Xbox Live|The following endpoints are used for Xbox Live.| +|||TLSv1.2/HTTPS/HTTP|dlassets-ssl.xboxlive.com| +|||TLSv1.2/HTTPS|da.xboxservices.com| +| \ No newline at end of file From 7aab2d4b96947c5b6b16ade3a216ee10c1c9adc2 Mon Sep 17 00:00:00 2001 From: Samantha Robertson Date: Thu, 17 Dec 2020 09:41:34 -0800 Subject: [PATCH 288/958] Update deployment-phases.md --- .../microsoft-defender-atp/deployment-phases.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md index 9d2261bd59..103eef241c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md @@ -37,9 +37,6 @@ Each section corresponds to a separate article in this solution. ![Image of deployment phases](images/deployment-guide-phases.png) - -![deployment phases - prepare, setup, onboard](/windows/media/phase-diagrams/deployment-phases.png) - |Phase | Description | |:-------|:-----| | [Phase 1: Prepare](prepare-deployment.md)| Learn about what you need to consider when deploying Defender for Endpoint such as stakeholder approvals, environment considerations, access permissions, and adoption order of capabilities. From ef5895a7ebd147aaf01a0a9f8eca2d65c6e424a2 Mon Sep 17 00:00:00 2001 From: Samantha Robertson Date: Thu, 17 Dec 2020 09:57:46 -0800 Subject: [PATCH 289/958] Update deployment-phases.md --- .../microsoft-defender-atp/deployment-phases.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md index 103eef241c..6155038acf 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md @@ -34,9 +34,11 @@ This guide helps you work across stakeholders to prepare your environment and th Each section corresponds to a separate article in this solution. -![Image of deployment phases](images/deployment-guide-phases.png) +![Image of deployment phases with details from table](images/deployment-guide-phases.png) +![Summary of deployment phases: prepare, setup, onboard](/windows/media/phase-diagrams/deployment-phases.png) + |Phase | Description | |:-------|:-----| | [Phase 1: Prepare](prepare-deployment.md)| Learn about what you need to consider when deploying Defender for Endpoint such as stakeholder approvals, environment considerations, access permissions, and adoption order of capabilities. From e68dbc8f3b979714c559bd4cc7855d2fd8ea3da9 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 17 Dec 2020 10:02:35 -0800 Subject: [PATCH 290/958] Update firewall-settings-lost-on-upgrade.md --- .../firewall-settings-lost-on-upgrade.md | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index 3bb0a16e42..c793caf0f3 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -15,29 +15,27 @@ ms.collection: ms.topic: troubleshooting --- -# Firewall settings lost on upgrade +# Troubleshooting Windows Firewall settings that are missing after an upgrade -This article describes a scenario where previously enabled firewall rules revert to a disabled state after performing a Windows upgrade. +This article describes a scenario where previously enabled firewall rules revert to disabled after upgrading to a new version of Windows. ## Rule groups -For organizational purposes, individual built-in firewall rules are categorized within a group. For example, the following rules form part of the Remote Desktop group. +To help you organize your list, individual built-in firewall rules are categorized within a group. For example, the following rules form part of the Remote Desktop group. - Remote Desktop – Shadow (TCP-In) - - Remote Desktop – User Mode (TCP-In) - - Remote Desktop – User-Mode (UDP-In) -Other group examples include core networking, file and print sharing, and network discovery. Grouping allows admins to manage sets of similar rules by filtering on categories in the firewall interface (wf.msc). This is achieved by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**; or via PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. +Other group examples include **core networking**, **file and print sharing**, and **network discovery**. Grouping allows admins to manage sets of similar rules by filtering on categories in the firewall interface (wf.msc). Do this by right-clicking on either **Inbound** or **Outbound Rules** and selecting **Filter by Group**. Optionally, you can use PowerShell using the `Get-NetFirewallRule` cmdlet with the `-Group` switch. ```Powershell Get-NetFirewallRule -Group ``` > [!NOTE] -> It is recommended to enable an entire group instead of individual rules if the expectation is that the ruleset is going to be migrated at some point. +> We recommend to enable or disable an entire group instead of individual rules. -To avoid unexpected behaviors, it is recommended to enable/disable all of the rules within a group as opposed to just one or two of the individual rules. This is because while groups are used to organize rules and allow batch rule modification by type, they also represent the 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. +We recommended that you enable/disable all of the rules within a group instead of one or two individual rules. This is because groups are not only used to organize rules and allow batch rule modification by type, but they also represent a 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. -Take the Remote Desktop group example shown above. It consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If for example only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain what it sees as the most pristine out-of-the-box configuration possible. Obviously, this scenario brings with it the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. +For example, using the Remote Desktop group consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain a clean out-of-the-box configuration. This scenario brings with it the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. From 156e31cc363362da8c52914351ef8a1b7f46caae Mon Sep 17 00:00:00 2001 From: Samantha Robertson Date: Thu, 17 Dec 2020 10:28:53 -0800 Subject: [PATCH 291/958] Update mcafee-to-microsoft-defender-migration.md --- .../mcafee-to-microsoft-defender-migration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index da9f78e5a9..dbb50ab562 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -:::image type="content" source="../../../media/phase-diagrams/migration-phases.png" alt-text="Migration phases - prepare setup onboard"::: +![Migration phases - prepare setup onboard](/windows/media/phase-diagrams/migration-phases.png) |Phase |Description | From 64baf0f2a530948ab835655427c5a7c19d67732e Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 17 Dec 2020 11:54:58 -0700 Subject: [PATCH 292/958] some updates about RCC chat; fresh image --- .../images/quick-assist-flow.png | Bin 0 -> 25812 bytes windows/client-management/quick-assist.md | 8 ++++---- 2 files changed, 4 insertions(+), 4 deletions(-) create mode 100644 windows/client-management/images/quick-assist-flow.png diff --git a/windows/client-management/images/quick-assist-flow.png b/windows/client-management/images/quick-assist-flow.png new file mode 100644 index 0000000000000000000000000000000000000000..5c1d83741f6e97ee1d9833c315f300c43e7b76c6 GIT binary patch literal 25812 zcmZs?2{_bk^gldOR6->wLQg6aNhM3xlqFfGLRn^%Y*{8*#$b##YbXt}%h<9_*1^n} z3aOEOUq=`_!&t|d@qYC@zu*7=zSrAz=`yZ+?&X|wpL0Iv{+w_#6Mg=Jq6a}B5Wm4~ zox30q_aX?y<-30m@E7z&bKnDr%j>TGO;B;msTttIUMFp1Z4js=hHv}PKH&3#XSW}E zfj|OvyFXlw@VqA=&=VH}9qs#m(1l_2yHm8(DI~|5?NfkO((@#gVEd~2+8Y|KdmjF5bTzYk{sQ=~`v!&=boMZfD?>C8L)}`EB?zW365WXKb_*kYr14o% z5fSnkV17NW-9^6XGiRJeyv^z_R*4m=Mp+O`3&9sX3yFk1117Cluth>~Zj-Fzd zwXWXn;)c{(gfXO^B9X|20kr=^EhCeWQPq8B4mwCX;t^W=zRc|~D;padV8SycXkSQ9 zt}lFNNwV66>;6MYEYZJjt^UHkt!`gk3@_ytMqdP&3po1ePmN$)dL-P&+kE&8g`4&d z1FFTh%vVGPjGnrKFv#ZchRas`5D z$9`~z3M_Cgpf^)IQ{7A=Q@!Q}MiK%D`v6IY*+12?)!peZoZ2X$fo@Th)A|4GVGfL2 zuYBy;e}!d@zp45E`TnpjGtsHF&ngvDsUbvr!SFszqo;-~US+>vuY_+o{zK{IhXm;y z0fbyeB+lp5bm(GW)vF^lYBBx5cYw`(@m`O$zHUg)42(e^w7Xal#c1Trb0^qxUKr~j z_x>w~x9P(K1P(?Hdj9-*P|%2Zk)8-7hm6F?5S-%c94AAhj83v)Y;E>?+eg=iH z9I(h*cbM!~C~jcUO*Pm*;(1LA2`haAYS7z5g*hvar6*$~$Qcqx8?-{qb&=_#!}5|l zTOKEaL&m_kPg(Ti0QLF_rd<0Sjgc>oURL(9;>orzzO*zl!|2`RgqMI%t%Bl7^7f zEYg)t7#Z}VK7I`8ZP-Z66ExJu$lqR)fJoeKieZ$o-6xg9n{4l6zZU5pq=x4W8Zor$`Ug;Bi*FE@IMZRa@P z8_gFlUaUf$Kc`I5+WORViHiK414vO9I9oxL#Rz@mVfJatT=1Ab=yI$oc|C{VI<|60 zHAm!u`Ago@Wo2a^J1%h|G;1D|{M1_sNUaB;#(WhD?>Ya@qSMVHI>->H-KzUgl_#|p zrFy!Gt<*FoCL;8Z*m#vS^sv`QO;%P`K|x`#(%rhuF)E-QG|*29zz@E$qNT+N@;TAk zBLLZ`Ml+UK9?SqAX-E)jePKB{2t?`rvrj2Daa1UwD(?Y%$Z!gna-)<}EW(zPx4cA3 z=qtW6_M81wK|`c3BV_wafeU`B{LH^ss)7QRMCWT1cps%rO-|Yf2VZsBu1vjTx_o_8 zXTYK)pm&vBNR$tlf|eQQ(xX0Xl=KQHXh;U=@-wAwm_ll8|Fd&pU8KXtr10})gvu0p zZ#>{7qKRPYFY{}$`#WVg^++@>ZbNt2YKL%7vcNq+fih+UsEhvy4Z;JcOh#Q+5++GC zTVk8Z0B*zkY-V8SfsvIf{&iEZQnfxK4R(m!0C0`T zaVDIR_fMueW!L`RK!Swd0E-KV{j^LT)sV!ofBC^_9RZY$T5U3A*9?^jtJ^co7A#T3 z(LYoDX&5->>S3DxF^I$ot(BD(+p~VH((~S!1i(OH%h?I2$xInGhzr4)L~lvLx}-rst50FY6E1O z5iy|0eDh{s)KAjAe|`F{i{d)_AjIMy3b%Qe5{27#*JIFVv4B!GOuEF5W5tqKFJ&N{4iqTfpYKAD^@WyJ*cK^F+5a`gM|2-2Z_yrJ<{yQ@0 z^5y@P2nfXEsFS&!ZJ2P}KGzht*pzl9>E9CqbLpL>NUHf73Eo&=7@W!n0whyuwbb0e z@&~;^76`4uFChMvk1U0XpPq1ZavDD?dEImDb%CzK5!#^N=AY1onV{*me=HR*0Rj|0 zHAw!o-qmzzuzcrZ!S83!&UjVlOAFM@9Fx1acNsmr_s!*ooiH3HWAI&Do+mTJK4Uw=kECknR7DWu9o zFxpGQGxMli8sMXvZATmqi1{l1$-kqdr6sBVaroZ7ds>l9A&et^gmh;mGBPq$K)m!T zHa?5_^dE}yOtqStT7h(Vvfw(G*Zc!7qN@LDo+zxw`&Y9ikPe;j`K9njQ#q7t*qG%2 z8B>P%V6!>tzvnB#^D-W^syMOp>%4;=edWK%_V1>}ZbZC%y>Kb%nYqJVo#k99%QyGU zloQHF=^yP#fzwpe{~kmpjbfFYUSOvT&|vKGWe&Ag^3mRGN@GpqpIG$xM<{Fa-K3 zutIvWk^bR@eGHg7(MmyhI6D3)ve5<{T-OC9{KOM2TzCsM(A(We=68YSu}c<`kD`*- zMEdFjle>7hCd}Nz)+@gS&6{hV6S$aqP+mdr++kXBjmj0+@IA&&;AGHaRj3>R$0RP* zmM%z9LBu3mbnIm$EA7RGkH>q%gm_cTZpZ3RetOn1pRW7#`B4v z3`S|ZOx;<{eX>B%s=So{5=_NxaJ`qWA2PB7^cgrWeB;-#kGG>D ztO}eUoRm1&E84_pH0(L|9&A=%bL@0_uxpKO$SMwU$r zfA{8YM^A?_jP+wAd`u^JG|22wEt7OjHlVhuef%@FnKuEkt?7JAEE~OX?t)U^mjb|U z1!#$+fQ=v5v){zxU5`9~LVY8xcg+}?AaQn)t{g=D^iWQR`7>NddR6q=GLedh!^W}* z(2x*V;prrI)|h##UjR*JfMBz*A4qnAI~u{SH2?Iwd7Qn{re?3%h`yDA7kQ!~xjuZm zE>w`P?*tHsSe%yF1BoTppL^vz6crU|R#~s782YmTIY3$oI`sB&Fh2n>LE6tqM&ico zgNF}2Bkx_s25xNy(7^aZbvH0EzC}ift)s-4ACnp}opkFrR0TyFAk_r%=$-ufSN_ja zG*MPk0bBM#2r3G(m9`vS;Gko`ey=ZaJ#ceLV`Io`b-KM?_~6WXY?#qOE&uDEoS&rQ zbU%kNsv%HQi{3NuYSTt0beZ0)--2PzTJ23X$_n8B*9x)Oty-GfOLdP%R6NIY#%7Z~ zf4<-lYu^~nyhneUk&;oddQki1`4ygjo_Yc9WFLZbU**|oa6we(5f>mXF{c~m-b?9s zD952kU+~&Q@@Q0d;yiP6bA`7gQL7LQSf@O+qN~ESP4jSNdwEX>pMyp)S1$6e-^3oW zt1CWlW6tbY)_Z>|+~yW~Qf?~FAU;0+>WV)C6U~DzEd`K*vA-2z%C=4_Mtv+Dozzxn z-In1*JpM)`yFb!00GW}CD{#+N@^8+!ZMaD+h=LsyWXzagcx#T1#CV=i{t)h=)IZ~E zy?Enc?ewR$CB(@k>^>eNZqmZ(UCkI$V@msC(A(pN376jd$xZ`7^aoQuI+NtK^NSvP6&&7H z6fk*~jy!FECH__YIcqDch`I(DaQ)!g9*hqpzH;UoWw7&sP;vf~#Duo;>{C>n&`L_IBq%fRo?og_ z==|}b;RP8N?x4T>WYalKiM(2B8=DCM7iP8DRT7P%f+?EBS@ff6b8}2gk&Fpt`3XiJ zm1>%$B)*#1o}3(h?YNTIo94QikJefb(`S2hx*;uyra)Qa@*(w`*-O+arr;%db{;Q)H|uYA+>l)Ohx;w#&l?8ou}6;iSO+&@ zK_6!F+v`pcD2!n;*{$f_AI`iq@|ALJ)JYv8vG3S75i}=tqgAsL$ZqUKY3{whRGi$- z3+PQ%%01)hFFRsT=R7<4(&8kkVXb5`U+&)Hg3!+QdgSmeJFmxl#>Z%Eo?#^`YdrGx z(G3yYdyi_ZdD(ulaiOo5eeiJ6`D<;1UVjA#B;t2g?ksU~0>cdtNcfF%HJs?4%l-a! zgcPu1mGilzD)AKY-ZhX8(g}&|CtG#jTWR}rYbLonEN#_lBAqaBYyMR}DgC45cCwic z^4MwX3BC_bj$LshnSrIs@&dn%ALT?z7-4g+4-X{b1oN>qdRh=4Cy3_85!GUY8V6V7 zF$Dhe#GM(F9|8nxW9Pyc-yt9tD5BJ&mXc*-PF){+dN1c5epDe~eZJj_bNoXRc(cuJ zGU4tg^6m{&l`)m=-I^k$6)yfdQO4>H6LoH{`_}xhPF%{k9Y)X@5wrfG>HL_)&jU#G z=W*ss=g(kKj)2eE;D&`2!ha&b<8>yo(6P|~Mo)yARhq$}TA(#$WHsu4i!9bt@jy;w;CE4;}eMm|>OJH`+v6P?mE|(|x1% z0679OK`BMW^Sk2B>tPICOc(p!J)xO|%ACm<;#rn^_kn0x@#{}o)P zv%Tt_^t8v$o|qVEaeSMPUDF5B^>176^URx^9IYFS-REXFHpVLA%_c@q^q5P_R=PEf zx691SF16n+i_+4+Xw_i3`6kufBk&8M`!$b$z){!l=KQZRZ+qL<&djVLEM)p+j~+`w zUQ~&MJ@bHyOQ?E>MY`X)iGkO_u4DHv=3C7m(-A(#BdO;q(yNXa)h@k}pEiHtdLO6= z9DFAi{NfR!-~j*X-|!L@yQEN>xIW)Mp5*uth!6`5n(l>FAh`YjA{EB_+_J#?v{C?P z_(SH>(k|=cEsay^g!Tminh`VmlLP&JXy|4Rqf#^9;o(q}NV@Z?F ztj9M#|5DW5IZPvzbbUjJ4x(gMrX7M^6L9l$K=J{;Q3>J+*;Pg9zpA)1HVw&IaC#7_ zr3}_#0zijQQdKpb7RQWuT6Du$bu_CYm)n(+fqcoZx@LXJ^+pyhYo@!I0Cg zF;5?Ou1M)g5&pVA?Ad4u-Njm#NAETL!GL>5X-zjUbUkSZ$4QHo=$cAfo#`yLtzC|0 zNGCwqV+lKt$7+&`iH=jGoi*8fLkP8mvwpfrB62zW}^D>aO$7BPz8F>D~TgCLc0M*zV>U*g0lS2Dm|q5lU(vv zQ~|uNf}Q^>#x?*;+msg2LJqfRjRbW|dta<{JW;&uc7?FR5S&lP&jerxW48O3r0>sn3)eaj_{wsW~l7z*3qGspK#|NT# zqUQfKi?g~IA`59`Z0sNMKKrQ)|g3)EAVC3hy=Eyl6i)YhHVb&Yh^fO75HWMY}c zD{V^aaXH$keniW$qqG+$UkE<>@7W<@aPsU{vioM$R*3aAXdYuco!I^KeqfUZVgYTp z%9D*vx}v2cP=JU^DpEhqRd1y196y{70s#lh{yjby8TY;=2+A7 zE!QOoM^+Gp()YePBK|0D#>Wo@=y;InCwrXMnofS!?bF`Q#9Go*supwPgP8KsJ6pnY zdtbFfD#J{LOw^O|;m0!7+YV#~ilnJ*XYm}-@^yZ8eVZ+HXLgzCXZiVY6uh6*>xi%+ z&lLyMu6Cx&KVS#DWZ?foq}Lbf>if^urD+7@9xFomYm-$ zEg|@BuySlEZa2ltORZic;*cy9|Vq_xAua_gWan8u_FhWNqSpgvP>dLh}XHmx8a7 zpw-6%lXM~vUix{V?rY{Yb4A3XcEJP|#(k=FV8MvQ9Tu;T`-r4gD+SY+Pydwg5BeY*ih+Mali z{e$$Et)u|fa*gENxJJ0ogFKo0!~ZYl(R=VM?rW-Rz|Ni3XfRch1jq@k(GP4VeQ_8; zYt)KU37LIRh@I+I9*WJ|fM|Ms78b9^)hteaf~~2Hs75kci96GwmsTX34F5`~l3?xa zV*F<~^ZwIP0*dwtC;gmAiNXh+UxOCQdQ@ysTgA-gueJo#`jMfBs&ca1AHa8$#_qh? ziTHl;vHHONFb1maSL!*nk}sFr3O0CzXq{8T=DT;m6kYpl2}g#D)Q2|cBOybk7mYFE zz4WbZ6ii}CElW`w!^@N7hlqS0$bn88iu>XvH5AfY=0x?cB|S+)SbDln5<3Sk3blWI zqWslU7ITA}^siIPm(QKxm!53W!_Z&7j0q{Ebai3oJWul+rir9!t-lvfHv zZiif)JM~Mt4vgzo5Nv+bt{u3prn|w`K|C*O*lsayE_>xZvMLRD32+!ge9|wjggR_; ziL}*Tpulr1Y7d3lZq87Pjl4fZc|%|2abTp$kI*f^FL?e_L-kLCE_O4%Rt(NInl&4|>+LMjL)!nt zn&8&{wSjP>^*I7RDmBT^u@;YYm`5n{p9)|89uXyqW-FVXpEbYlGM7|IUxoUxn?uRy z`ie_0^pGseU1w?zz(G$L&-KOOg1ijM%dc1^0M*|utGB&qh?V-2Yf4#jq##Dq*Gy%A0(=KZR8%`SXNOYX*d99)h(`b1EZ48|Vl!*X;R1v5Aq;KCM z{0IJnX+pj2Tk{VaCb(JLFw(kT*`O2ruPy8^y9WPfgc@lowCmO}mR1+)S=NZWsLb|Z z1hvTj`8Mb?5yk?K@wfOEzYhJY^9~t?{pv0gli=kfZDE!Vue>y>LTDf%J<;(LP z4bbiGrue2#2O!XP-Qd>G91)rOW=QTVkXT&-y!=9dX}q6H6olu?uFuR*I;uRHmX_wr zcNwT$am^z4{ zHB+~+PLsBT=V0!Ck^OERAWA3-n>T*k?nD@aW(8pT*3}Ru^Lfm%R9SgSdeFie@g75x zu%1KaBuh)GttyAZ-!jgL(;CQ^+pIca>>mx037RXg#fod_x+sE><*iKlpU1y`{X!6K z(o;0%AE|Ojda8NgA8~6|VNrah8=PVy?tbxFhi7e=CAF z3-cKp8#^rO@wX~6#RVLTyDDw+#Y{DjQsHT?=L%u*LT6TI2TQq z`7$eLjh_HG2&-pIV@FKFXI_a8h?@HM*hxd(f2H~rw$uC}QCZ8Z-;-Sogq1q-_9Wuy z+9OX=x&Nwlj4V4;q*3sEGk`UDG6PY-s{`u0iHJDTl)Uc$ZFp=YGcf0JGi>Mc;M$pQ zayMH4XTMcuwF`qpV5b7FT{tzV_|H!G4D^3xPD&)hxBU?m!cAM#$(ApOU>wb28i=>q z%K7X4x24@cXRq_%7!3wk-ah{OHu9+lI=2@BG^d`jLjTse=L)jGIJcr#8PQ)7ckQx! zlH%%nezqu!E=vtpZcQNpw&OZ{)g-ek{^~d31o+T4Z^FjiuDTE^tG8GmbiJI=tiIV_ z-AEqV1$ZZEIP$Wu_=wP}H^ThqR5?4poan!ZpNSEoRZ!KOYv@k*^h6-NAZrZl$it-n zt;x#J3%8eHCeC(-epddidZ$n-CTOz>wXQeCI#*ZGWTENqLgJ z<0mehke`>jE2?;Ot=1dW?O?zS)T4Jx*p>zm4v^=;J|@+oTBoiyVX6K$?zN1zUZJ(x za`z>Ybj&gM&AA_fdqHN%eRVIy7ZjhKokh)j(f)RRv1ZC}sudO{p|5rLf0e}6jY!mW ze-1yT^rtw^v`4uqE4m2Cmr1i*@whoYLlJu39*|z=L^EMUvs=}3!8jKdVEgLkaw8OL z>STO&uE?k!c04)nP*YW-#BPMgJv=KK}DE^+epm`9T&4WIy@|r;&u{u;u=ClUEsgF>Kd$ zq=aO>gnw9|SAY7Z$J7hfRJnq=xS%YiyY+|oF^?~k*tOc=iiFgT{&b}lTfSQx)I<6N zP0)irq9>w6`+&Fn`?lXKbuLhL*xROjdZ&cf%z!slK!~ET^Gz@XLv$-YzZ^xjKkxBl z^fARi%Kp-rc z2;O1uaPUZceDC{>TrC)QlM(|wjM5a9=$`}dhzJdLdW2a*V z5!?rXzJh4)NRk|Zjc!AI(_zoz;L5wde{) z1I3jd!1|YYYFfr*_7&h!=j<$B57*c3ZNW$m}kb-0K zHfZZX=s$DsG6Pd|kG>!%7T0@K-boo#>H zi2r&wt-^f33Zel8t5_Z$zYDE3a*$3^flNntU>BPL97xhUsy9e#O?4Q#!zPkj} zgEU@T|Gu4)tI5u_+LBHuNkibeYgYbsQF!UuqQJE|^e#@agsyznAql%*8Mz9wE7a*V z&xvNrSlXgj0AY-6y!a4#{~E@5nE2<1W`}<_f4}_EV)F8OEv)!@9~hn-p_6zwhu|1rS9{BE^B-NasPg0oy)8-S1U}kGO*cKoG?!raj9d9r zyIzI+0}j(Ft3(Qd%jCLU*Y@I7sL+~4ExQjf?!JEVU*FaX%G?HWHu7vuvJl-WKXCg4 z9!m7Pz*&7dr*AJEQ5;8}OOsEv@n4%QRK8Ua#~E<~fiB<05EXs1;Cav1`0+&Kq}xcY zWyND}#Xv@m(}(q61yyzRnWjcIh?PjPf4|ZI@JtB2bHZS+s=uCJS;1MFjxbhZf}R73 ze7e9E5;CIMp~~)tXVFD}UB zVqFdn%Ef0xb=PJ9(t-|mM93!{_P-#|o0xj{KM&2%u-~nG>;gPmVEAy`#?nU2yfew} zyaGiQx3fCMH=_WaUD;v%D0JTgGUMeHkT6NNv7*(yT@0=;)j{&Biu!lJ;EWPi z_z;UJFEci10lZEBeN=nSfXC@P(~El1eMzsqg*0NE_9$&L%HmDsS&)YNBAN1uF% z==hmgnR+eCgYbu5^U23*@oT$(X!L^?l6tAn=7}#>K#UN5h7l1DtWybUmeyk9_0fS_ z6}>pt{gtqkXhwP!)3ha>{I2Q_l%1zMcN}D%IyL0DNLsa_6 zxc))mibGgph#0?WxbkZp0L|=74y`Fu^bG>eysx}f5Ye9olNBeT%Hcem#mX0)d}B-u z)W~-$aBk_1{Yv#k&dEicK`+s@0{4v(Y_vp>#^O{?Qf`a{bvGFc|lr$@5Pq;Ut*%7f@{K^ZJqQZ(R5GZ$4 zNb=J5`yP_R#z^d<<%gbLFuVkNE>NeWUI*qgbKbrB+`9}Psn~11E?Lnk=qIR$4qoo* zPNG78>b}fmQ1t{N#OUc^9M{hxMV+H_ZJ%p^N0G#a$X<(E;fzW86nfX048EZ&4{x2! zMv5EwEU~A%)lirnpr|miIinFVzbqUDF%fkGo_nYr_`Iao>Kbo_rew1Wd}3i&U6c&N=U@#LLO$zm*FLv4yv754(L2 z8gqdixfm{{e`Q4DBKg}h_d=*~CQ-xKD(&L>{iv?BhPlI7q7Bh+W=4`d0RYRLc30n# zK$cV7BvsvO-Icl-j}q*fT4b*Px60OBrqL9*p8%xK^uMVNI{o1$Q-r)NBGfzVjS4&v z6>@_A3`aKeT9tDcgcP42WhJ0epRB3Jbc}U2Vt#3FyZiq3X%CB?GTyGXX@d_%sk%us zb@GPZVv)Hh-7jZ73e7qPI*ebF9{bE5p^3G|Pb$dxXKqP`2RUp0&C2t3Nq5kWf^*(?Y&auJ#p?EH%K*$i?+?=^T>&t4UHWoadeToFU*ed z1sXX!e|F|S5>?%$nyKpg{-D@NCbnI>Dz9YUM&Hqxe-tQU*3#7n%FQFe)WFhfIijYT zxa`a;<5q-+0nz(JHC#$7%EEelwo7&JC4K{zdkx2a&}#h_3^C}%$Vu87lyLa1|6l6gUI%St58wvN+Yl^>pZ<5#@A6QVbL z`?vG3aYu?vlu+$?FGwFctKGefH4Uk^R6Cnoqqh&D84G#iJA0V6R=;1@Got_lqc2j!IaMUBR%%DzuzvK7reg$QJcu!y(!Zd|F+Uhue=`^1|nOBBypMVs^mmk3$i9F-y^1;{= z?J{e!d*pI+XvfflAr+~b*N1|>f}&P}Z~hxjy2;>l^|zWE#ykIf z+B_B+@ak^k*tE(C+m9!jCr=&5t_MM$4Y|!oYnqRbEW4$eT$^M5bUw_mKy^%8nOdT(PGovp-~d{yjTxNHt~d$F#7AQ?I^ z7y&Sm^(2UCFI) zG-=N+b1jmrsoC0&)wjI|k_rK6OD(Ib? ztvG!IQVWg1mHe3%wZj1HBN>^hA0Y*ZPkD!>(s z{`XhA`n97pyyiCL`)B-cpy2Q?SW!ewcM9&FJN znEY(fHXyDn;E^u6BBFNaq}Gi6L14qX)50;M>~oAq4-r!(00p*6ZvoKb;@M(ADoKwZ zr-qkEUg7g;4|`6jU^i<5J-fJ37a-6BLA~-L6qezP;ydU8asLWr{Qg%7Dml-5_%Ck( zl-*r=C%|p4^ne2F=U=qA^;|39kcgwbeb0QFN99OsBf?snjXGd=>mJP@y&0;{mDsIQ zG~qEkXDM(D_s&wOB~_|T(9q8a&`ieBnn(s^*;+#Vk?e7iHL4O&BjG9o9=>u^Klo{- z6u9!Zahef~OSv;y^Qb>^z3tO8P8jN1B>pHFDechIzJlGEY}h;ybHT=z`~FP?BnV)O zxfhv4kgXj60fxrY4(cnG)UgtwWyDPjVo99+v+g0%MyBq)(x!->Yh(Cy*y|aQQ-`r z1e>CLqx%A7@PtfKT1tvr@(i2x$HrFScH|V*mgR@LK0>J#(O(`4l+4_w5a?YcZB;<9XjzVm%ol$EFQReK&`U{IvfV)ly6inOJL&z+Gwo_h3i z6iHQYXMjWM+FMNf`RdAHJ)~*ez5qP>uaNXkR@4br`#zX7i5ZIfg9>8|rd7Y&)F8-i zS$kzSpYFf%#>@WeX<(P{0g=UH$#7<_4}&DjAC`Qec-N?(G1- zyMF}35KijdAh++Y^}6!Id;9r45YJ6)mDr!MV@_MY!EmQG5fjod?i8++wd685w#$#c z$T%lYk-vCxexRaY^L6&2ixga8VLinChNGk7*hl5l)_9L$^&5+lg0>|_JKeaTIKcdJ z=(!U`ZwJDeX_?y-trkbgP`bljYV`@rT}JZwYELNaVW52${G;kILqkK=$(lcW)9IBb zd!IP^XZsTNk0dZZEJhzpq_VqwmLZxXUD*7&*SX%APpSc{+~5N_XAkcP1uU{*nk!iT zboA%VI@)wXv+3HFK@0KfT}k@9CIv@i1YHlpmb;a`FMU2a}d-8vy?5U58$w zTvev;$F06f_hhxLJ+~YZg8+_$hGJQvjXy3Xcf#Dlr>tpaW+qBZxh9lvH9U>EK8v_q zp3pBQo;tU*N6bf4QPF2&id>0vu|`Z?2?%g+dL@0_gtV}J24gote51z!l@nNuCxCqV}UJO z0do~uwBPNK5SN@kx@`iy^m$NgHRz?ApCV%iGTa6$oA;4kd`wI%;S1oYV+TlCYzrhq zsf&Q-Jv}{owE`|8HIGz$d{QgX0_p$eb&ciFf zUS@jqJ2hq_l-suaBPfjg_^ofXOHmM1*0-RIKb^k+M4dlq0{X2Upx1az{GoTC!71+= z$K1JH&ibV6OK?o=F&!pxFa2SNK;%v0Y{fn4S=L|ntoy)K{Ra_rJFJn`_3ICx4aBDM znTu$Wl->F=YzL1L6H$wWwzuzXzqqzzaeb)}~Q^3wZseTJ6*3|`o{834on(0#7!gm=$nu-Jd{jy}T?2M?Gu$s+uuDd5oO1h}F z4ott$IfvN5S3R1#+5Ki}v>71cFO(I@08!(QX_Py_sV4W|zx|0y-rpNh>E-fsk)|$6 z9Oh$_n=<9+$kyyK2H#W|18ayS2%Pct-VYmN%{d+GS*TOC!2Ri$H2!Yrx_y#eDOnD5 zDWtht9RaEpPXLclabTn@_5QgP0foPe^oVFs@dl5$s$2V0EYS&HG*s#knarCH2ds1< z*!Q`H`o8!R(QL7CQKyAYR~b>X;z4T?c_imUCllO5rC&D2$ObLNcqm9^GzFW_$_3qb zg#Iy^8g6Uey=_Boa_a&4&=eC)mo2_rN-VcMUSX~qLxbu3CdcmW( zvZ;_b5_nBO$r`P49P!0q+k!1;BTKf5Z(nfEyme#Q{aoD&S5NI`HyPd87OhrrXDLn( z(|CKC<@OCltw6{sPdm2-{MvSonq9a8^c?Z0KGHKyS-7(lP94Z?jec`2Clo=xuy`^t zUcT0{qgV2?kz90}Vc{a+{pqQO+mBHf4dI?~eKMP}PV;Yq1~sVZ|9t6K|2Woq_yH3} z-wGYn+@KX%<7>XE)vl`5XmMTMv#nW`k9#%?FuYH5?wk4ELK0JhP>yps9WznfIw20 zX||}fT~uBKQ6!d|OJN;tJ0EP-^eoLk*koSAdJe&Q^Rq=e*^}Q3X4}JKFC|ER=A&h^ zz*>l{yJLts%YM>VJgHKo_KB$^-}d|OXpWwK=&wz_sr%m74&c7F*UYq1H|_6jrI6@0 zk@K(Co0^*36-d@6Z{Xde%^$jBdV}(NCuEYoh>G(UI#$>M9C~X}UKF^u_Jay9y%qEM zMUu;t`wp9FNR`---qz{dsH}X;HvIammbw$Jg&l?quMdk+m!-!u&fPAP)}LER8RjjF z<=l{2fj>8X@cuH!HKB!=X8v93jle;rBNC5~df#U#7p^YwZCUR5as!usaKqx^yO|=c z;Nt$p&!q#~3$3#*-=CJpSVsx$x99{o__M!4=c6{{w*HZChLQ7s1l?{HGhkm(5MD4_ z&q1hUo!{K}#TWAYtdS&rC7ju88r1_dSX{7+Th6YMTKhEGKA}&O6HIevbqvK2WK?f> zk3jV!##&nZ~b=HZXWmoB1Lmr7<)XWB;y_8f8`SZyICPN>&SGHmYkNWv z5q$c6&)Qad2c2UK_j=QU#6Alx$YDhS_qK$%1l-nP3dp4dAQr|+BOjmB`QX)ydPb6$ z0)S`aO?QHPC)zVvo7;X16dP7EpP@L*SykdQ#p0qiSh=DG3NQN$~?;@*Xanp23&83-dRN zX1ISw#Wp`Z>eN%Ox=Lc2mcFSg*U0LYI5_LJyiE|Bsv$;hC2>3HF$)Y?Ui(%moi3dX zTIfE`MkUBsR%;&mp^p>_vgwWx;A$Y?$?JOTzV@>#)8ow6mV%O?S;bppx_f~B1ki$m zg@sxW(Aful;IVF>@*PiRzLw87NYNK`d5!G%m(LwV zkUnfgs|3nE3&&m@3_XHiXR^FjtfSMU8xfa|(3*djIh9*l1B}0sX}<~FR|sU))aK@g z!%zq|HhO;d{BFGWch8RrW9VrQ-K>t-gIKo{d$ zf&?f3S&`3{|8iu}D$9_VT~R#}h_U^s2cTgKyn9>C8Jdn8X2uC4PfcInQ8wgIC zgpywd9Z{xU5f_NS5??z}eNI8Z`1jU|iB5A3=nJV40_Ql>LTQdb1Hr8)gscdty=%-O zann{!oEG=9F5W#7-IxxJp_Hge%}oLQ6a}+Jq4qF82{|I)n~<*GWo!9en%O)uR-QnD zSHuRgru_;vPk~aMrG*8M2~@fd=A;)tE%#xYTF7SWFkb^Aovko|X z`SQu!790uUW2+WWR#knSwKn9(G#0v5!BvTUH^&3Aikw}RBO*x$zNI!aDL@een2wUj;R07icf)29l;YU7_$)3z8l#D3j zd(*v6$jB*;pl<^OZpbB_Z=+SuX5G;bi4l5_@TW8UC28z8xKtgc_sfm^6SSxxkpN3= za;oe704ed^4n+XczBgGK`KSvJ9ZG{d*;~afvf^sj4$b)xN$>F$%N1TpEpHjBdz~SZ zQ7#&5c2jh@MR+pPcv58nOB7@ei~%(*V%^DL&5qiB`(;+`It?gY#jlFJ`Wm*2OSNgQ(S;Pfb?&7X>FCVr9}##Z*2~mSNjJY!xGPJ`porIql*KrE8QUD z5go4(WIavxk&eWXOyc=%q^GdjnPWOgphJK%6E;eBE~tz0-!EGc{t^t&-MhMCHonO4 zE#E4jOO(Kh?h~tdK$ihFgNNJn*JfqvJWub<86&uTx~?x8YQtR|ffIa)!Ka{BH}?@r zUhA1_Id2urqOxxi9al1m?pFd0-bFJ~&-$674{qq6bWh#>;1fF&_tVJ~It0{0REhi! z4|+5_edh#Q>A+QgPa*{FV7IrE>8JeHVo5oW{^zTKo6q&p`UUA$Z=s8?@gI804?_>s zhI}`oV~GZVhesqY5HC|A2Ush6)f~~Ty!(qzq~*81Wi-js`$D=@JZ~=UY(>JL>!v%^ z0fpx}O$s!6+)seaEC~p@FZZqMfjNR$;__6({cAsK20|`Vl9$wzqOu-cN+1HyuoebG zp(FZC^K+Za@hz(n^g;CVM->|e@|PmkIvc6bli45EfPzKDc>Hi&SMRCmX(h~~exNLc zUL_^$Y{=qR(iQ0AmD#y76B83?|Iz-{{*5IHv0mTnC}d=FWv{QE*76USDrL^^k!4rj zW+!tbUJKc!QU9V3$j=8agEESFgrLgsk?nqcbXJMH=Q;{V*wKlske-<0Y`~LD4S!eu zVXR6ictMBNl^3{w0poacmS!cuqMW5$J2N|hZlCJJun5bpYUtVDsh4Wvetrc&r$`H_ zV6&D(UP$=5fNpAavWfqCd#4b~C$>-4L~ z3ZfZJBGe{UP+@Hxe0v>Dbl;+G6L$KPI%DP zRPy_OBwWw;BE+QRL}H1($Q(-re2eqkMEdXIS6lO@L4#C27Yl18t+klCnvX%k5Gd|? z<<7)Sk%TsHSncwlaXK5V%x3L;+&Dk*KyMdOyKG#FX8fQ&(bMN=dslG%D`~UrXnl_J zn0zk~sX=JMcP4^Dw_o|dXMjx|NO%0Wc<6=+6MdeWp=$TH-OBA3b94OZo zy?{!WQZjo_a1(+x5xi}42T1uRzG-y=e=mKe?~_@v_~6xz zkRR+}MW9c+`);K7wGyu>{~7qy0pPAvCoMt`#I3q;FGHa62j<;%=Gvk!{vRod^Pd5r zDce@@}u*NY8??)Yg>@?zK_%oH4x<~w}k??9>+njmv(P=Td+vW(k*6ERh z9Xho=%RW?hy*{;Qwd^#-^*ao1KXo7w)BC!pcs!CMW9FcZ!T*pMNFfb=M5xT|b}WA_ z+r1Jl+b$Q4S*~|_hmpUFpBu!Wl!#U>>r?H=>VcX8rnd>CCOL)6D{-X(uD_H(od)vI z`!0f?Bf&5q;Bt!5f|D*O;4orQXYG0Wb}QjA_Sc%?u~T*MkNJXuZn@h?B1=+8lR}H7?6PGyManjn?1q$m58WCkk%@R*IU#WGa z)z$Y)_}m$(CW{)~8%YHyz%+UD4K00k)E2yAeRE6jx5s{DH;zBxrs+sknw8hl@Wm%i z2D#BFtMNu?xZAofE4QG*UMW~7STfk>g|H@SWv?ZQ1yoR(lq{y6U9<2C>5tpbg%#R3 zy;5R|bhZWub=IY3)7+#$KQTq;bUwQ6=Euk>kb#NBa)cwO$OQb2qkB6ar2(1>?@0m9 z`qo6C5Q&No+}!FH{4E(A6}u#{8&xE0V0x>(s#@iH&$=#J@5Wbmez`SwfTnkB@icav zz0hZK7_oWcmKtB3=LHeKmB>@pr+!yk1M}I)zc@b5qTDonlCxH}(1r~foyU*S4HmT{ z_YjLNx)1%;+mcEsqGTM~xdO5^Q>d4J_K;*dq!HHaHGao98R918N?p~#*Jv`{Ax>82 zTnW%&(X4k)#3xgH~vd=E~xuz^g&?UvXJ}3@wet4zYxP-n$(T6?$*JWb(u`D zKVE)?E?0tyyn@`=(`1#(8(XZ#9GCAAC*f`ZlD+2WZw`~p)lkttzVS>7Zx+Z)|HO}6 z%xyrozmAc^1*DI&KkRcVYZ{v5SHfy;r&>Qc?zOgy(C-1%Ia^EL)i%hq458sfJi4ar znN2-6((l~2QZ-)shFQ%(&254js0HSgx}Fsy;xnE+)1n(!1fQ}G9&-s6d7O7zFA0?K zYf5pYI_NB1JUn~Wl?T;8mE zR~6mA5Z2F!Ia-!DBo6KocC8K2{m4^mD(yN@ zAw90?8=b_{BSZLLO8ler9oWbRUu?7VoL2eH@7-~JF)p@ds-4zvra{?*Q073?&hHzY zu`?A1N6yP{B5GdHd}uiK<0&2FdXlNx0lH~-*s6P37_`dh8$_X8GvqcoPKMA|-WUvB@e4{O)6mG95{-k-O59sF8G|DzZu{cYRvKC;?d*K~Tq+tc`U z;CnG65kAs~n{2AXPn~Uhah-kX^l^g*Tw(61;R)rvs1kUSo);J6n!qR(TP7Rt5^uh9 zLIiR$90?5uFYT0=jYda5k^Q{7R9DjipF^@t#H+8est@m>f7?TEjM!RLvnBDYRu;aR z{6u>ZI?^6zLBr>WEky#9mjic2K*xWaGpjtC(#;5%_@1HMnlC-6>0Vd9Lq*U43Y+K{Wmn}9e6^qf$ZYt!R_rNf3kROo0OXurr*efbs@sve78(f6e)z7q1_xc zk1LY-wn{nKBm@r4MuS#c0$VwmgO39j1Yd5D_!9&UUZypXfmiGSeEMG)58>+ zwH@#ZDH9;@;a1>#cGrTqXXtc2bIHc^r6#!RJ&ldYhz5!*FmnaWg8_0l@QPntH1^1; zY{k5r+3E)+jVcFJ!3Yw|e9q9_zF5O0-A^&6zbZ2R?) zUVrx`;}+#Y%Gub2n0b)lay)d|hQhJgbBp^trd=IFWMwpD#O&Ktu;c;`iB^ldaWhs7 z1S28#BB3u<5XGI#uX&)ZSH3v_MAG7dfb$s9O{j^aEyKq& z=3n}yUs?lkV-Z%T&wpf6pc4;cZnBtl)&+S?&cvQeX#95YbQ>L~4Xj6ERQ}};pJBgU_y6=G<+ck$%==@NOV_4N!Ra@z&@J@b^s^J$ zmr4s?bg3FL=m2p8Q)E8waXoKlFQ7NgSAv_B;ejl+z&l>>Q2pwEyIKEPWXv%LoML0h zwvef-*bOoquyp7pVU0NZ##N^?`J7c;j}F%Qrb=!%vVwfVPad=CBi}p5zGp)W|23*R zBwbm;=opE``7T5IR#(u~b;~GCN_0ZB{f#=Fdsc4=2P$sAso%UdxEm|Ga%n%hcI|Hi zrFrvzm{R(jAiBzJE_AC(j1VWQWV|H7=zHW4ht_4lM}t3+mrICtY!1pw8)31zT4Ve9 zf+tC3>BjDwV+>9?LIb%(s?xAp`kRo%uvuSTX*Xj8T8_UaSv2(mbNBLT@=!&kf&{VP17b7Z-^xu z8DWGsDtc6OEXm8k^#+4&D3#&I7ZzfZR!+Ehkxw6~4NK_PYDddH-wjR%f7(_pjn_+W z?*=;|_;F9l1P84nA5~g}?B4_r4HlFjU@B2idZ{- z60-ENi5ux<9?CK8WdW)~P7j?jeqy(uqjGpca%%Kn#}B6VNk17K_@m}y{^0j573RZN zS4=9%UPsvn#NIN>#e(j~5S}MY_VP{IJ?<|a$C2(VvpKa)a7=7!e9btW>uE}^Myi)y zlonvPhmoG=$-ei@vaKXY5*XqT>E##{1~a!}Ekn9kCW3S=`&^%@iMkcx(wn1!$k*g&@FsLVd8}M@WM9rw|ZmNW5M!e&YN7TlzE|BV|S+*WJWi&b%j7L z7#u%*B;SwC!KGK0QyGUd(4N7msOD zgb2)#$58$;^TUfHdr>#s!zdg4IV``%qbM$%_9Zms?0!2sNlRd7jO3Pz@-~YK_(i9y zb}8%{!&-8iE~wslpJM-59vPCn>K*ctZ`TK158g8OR#08H;MQL0iRironhr41$y<{# zX8YyBeN8mvKa};Znjbz%)!Lp7NMSreE zit_u|D$~y}_k(hqOKq|9l37@TwWUD;-sCMx4!lKl4PVi}_XJ{R;Dhed{T20*bI|6n6`r#sN53BC@>3t3naFz1%;N@7az}ss>W60T}{I#^; za-cAi7ZeA1O!fBf(L&1^pqc%)YmALKuQ}?BeCw%qs4amvp=bGZYvdjfMFqT#Vm03i-K z-M4~-m&~vfg!}4h7$FPriz<+QuwXvrWpRpsg@TC!L^?JVoXtoCd-l{DK(5*bUeMBM zmG8f^RWjiZT9YzO5f+Yp3-%@N?c707TsL&4_#&bUM=c0Mmfn zCDzoq-G7v95}3QNk{?hy3@8moltz%}V4gdy7nViMr?J1(@Xg-=rUUGxiTXOaLafp% z$SuzCY$0 z57hZyZmfIgrm!c7*+ahjiFpgBnuOL$IQCg$ zh#=q%sT2%>$NGuwS2UBRf&jO#s4qx~6Db4Hk0 z_I;JTUzVY}`prnhW9AY293Ckcf{f=Y=lw+cC8Vo=*uJ-+K^iMQ7J@@-kHHk*@mJNv z1$=q~<}L3$SZ~3!__<7wIDF+CoLybgnNc#I1~33WZ=r{Lb%h;NQ8KUmx0V4+#S>U; z`9H?~KWM^(6$~<{MK$Ap;(x-qXPpa}%{9MrqScy;s8@qz(<*J_6G%?oMg4js!_F^N z(N^q#+l7$sFno3x5*Ek4$!4?BMggZ#=T%3Q0JZ%Gzg1={P2aRoB|#^(L46R2FTLZ8 zCtaR(08j-_dw7)KWr0h+2JF%|GvPPC`v2i$CUV@U0BDbE6K{h&QSbhfqR{4Lb3zNk z;?*$Pt%Uzp>dngo?R}QAdiIbeP=-1VR+H(NR3(a7GEakW{v1wm59D(|H2)(?cWTpK zu`){4wXC$ZELZe-4FQZP5Wu*s0#F@!<$rH40Fx0kZeT{?%OG_jAQc=CiTv9O|1Ua@ zfpdgIR>sl2R{5?l6vBGC0MOrno{IhVMuD^$2yTZ=^h-+G(}tJ2r|(FmAp^#6c{2bfiGKs_)xYPf zvH)L=a9T1O2&YF%)dWDxkprm3S`pB$|MmPt+yUTXfFv#R{08Z536_5CWo_D+#)-n; zX1ZV+p5c31*-DmL(Ff_DPs#s2{AtOiIloa1fue)3sW4~%M=zd0+ze$F?G}MU2k)wc z%9+IS%MnkPt5#|?R^sF1e~?g_p8juRq0CTgER05gFchdQiBbAAUkvi>V)<}c_RNv_ z$>OiIIJO==j9F+#a&kY&f2V*vGZ8uGbk`N~LE_LA5|-FCl^e{uR^~ zxFfUEgWm9;NUJFY6yH3h-5HX8M>44Z*(?bpzW||_G&1ZK)DKkp3vEiEY&l2nXFG}a z=dB}>L7K1-f*H>@DVWQz4fO-^^1~|wRzfk zXnd}T`2B$E@iSd>{!^a!J{KIz3KUHRTtQ@-4w+3T+WQhFe<_u<&ZYY!KO?zC%WCV-iF47jf6 zGK-bhKXANUK)|J59o|^AzsAU6SiYgLBiPuzL!)d;uO92n4pbo%` z4GVT$i6&I=k@&r$PxBktMJ`d;IThE%G!0*=GywgDb?gTLC+{B370JETpT^2UU*_!q zf`V|j4r1|an+*_FKJ~RI&4tgc0M;;DNG*_Y)P+EFmFERaXfFUGS4^WX)fymm{nVAT ze2I-Jtgt$8E1CQ|_Lf)NnwkkTs;S+06bE{RSh|~2X~rZF;xmV5yc;|Pia{8BEsOaL zDD&|L_@jw>FCu7e$l0s^fmpsBC>$U#m3F@_1MXmRXZpIC^09i0Xj~=aOgLa7KTVSBNh1rEI*i#pI=BmMtNFpS~%;| zAzSLD%V=hv>)41!qro7;Z1=`gvEW7<%jR*Gx(VRCRlP%9p5GkINb0|Cy&Lov`n% zZ#!Gw8#+f)LJM(Ub%iO`JNdh9#?-XRu(EWwX7SIjgj`H2ltZ-4HlIucbFJaadkUUb znDnx8S8|BuItT88!N5p7j=f8e)RSXzwQI7-=mT&LLgnC(Z4(g=q#8h8XKK zyL=Sq+i9)!U5|4{9jnieF~rh$n%ge$^lFFN6*&wqr~1IzmqslH^5?|HIFlPJ^-#I! zv8q3X5L#}Ug9D<`rXqZK+Fb8xd@%5T1VUU_T%M!Py4r=e{vZ(+>E|_kDlZw#D-y0K z--kN9W8D?c7yC|n+}x=I>+?aR$-%r7g!(X#XlNQ8qo0wp){vPen<8e)&gSm==2Rs| zJkpbEHH1|2AH2Da@0YZ;_ow3Bx1_ zfiA?t0!A$gAD}q-;$8uZMf&Gf=c^r-oddP>NNf&JKQuQ<4C*TFbygwgu*(T~P%>-R z{T@#dd@NcchuGqVw!&0_$%N=XuV#nwo&v3^0@n?DApZ}m`rRDsRHfarCtO>2OL7Yv zXiG)D+708+jLyuyOPZBXZ}6L0ZY6qY;wdjJIAI+idV%c#k*w%6 z<#vdRvV4+OeW@l6eC5U6m_MupQ@;p+dQgD8hwV}o&R=tEopxnxI8QldI*aY+{zU|Pv7BwnL zbUagxr{a5_#)n>FsuOlr!o~s==9E(9q^IR(>6~yGMMeRQ~W_L_PC6HS&&t^;rD?(aup*~VR;dn z7+s%tGyiI0Y}{T{SIrRt4NEJ$jSE$J#yuor%zu|RH#^w4=< zDJ9F9TP86cMAc({XaS^wK)=l!D2p1 VAJ4ZDg +:::image type="content" source="images/quick-assist-flow.png" alt-text="Schematic flow of connections when a Quick Assist session is established"::: ### Data and privacy @@ -118,4 +118,4 @@ If for some reason a user doesn't have Quick Assist on their system or it's not ## Next steps -If you have any problems, questions, or suggestions for Quick Assist, contact us by using feedback-hub://?referrer=resolveUpgradeErrorsPage&tabid=2&contextid=81&newFeedback=true&feedbackType=2&topic=submit-errors.md +If you have any problems, questions, or suggestions for Quick Assist, contact us by using the [Feedback Hub app](https://www.microsoft.com/p/feedback-hub/9nblggh4r32n?SilentAuth=1&wa=wsignin1.0&rtc=1#activetab=pivot:overviewtab). From 474f267b8a7342e5525745125fd67885650ab5ab Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 17 Dec 2020 11:25:07 -0800 Subject: [PATCH 293/958] acrolinx --- .../firewall-settings-lost-on-upgrade.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md index c793caf0f3..c5ebe7fbf7 100644 --- a/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md +++ b/windows/security/threat-protection/windows-firewall/firewall-settings-lost-on-upgrade.md @@ -1,5 +1,5 @@ --- -title: Firewall settings lost on upgrade +title: Troubleshooting Windows Firewall settings after a Windows upgrade description: Firewall settings lost on upgrade ms.reviewer: ms.author: v-bshilpa @@ -15,9 +15,9 @@ ms.collection: ms.topic: troubleshooting --- -# Troubleshooting Windows Firewall settings that are missing after an upgrade +# Troubleshooting Windows Firewall settings after a Windows upgrade -This article describes a scenario where previously enabled firewall rules revert to disabled after upgrading to a new version of Windows. +Use this article to troubleshoot firewall settings that are turned off after upgrading to a new version of Windows. ## Rule groups @@ -34,8 +34,8 @@ Get-NetFirewallRule -Group ``` > [!NOTE] -> We recommend to enable or disable an entire group instead of individual rules. +> Microsoft recommends to enable or disable an entire group instead of individual rules. -We recommended that you enable/disable all of the rules within a group instead of one or two individual rules. This is because groups are not only used to organize rules and allow batch rule modification by type, but they also represent a 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. +Microsoft recommends that you enable/disable all of the rules within a group instead of one or two individual rules. This is because groups are not only used to organize rules and allow batch rule modification by type, but they also represent a 'unit' by which rule state is maintained across a Windows upgrade. Rule groups, as opposed to individual rules, are the unit by which the update process determines what should be enabled/disabled when the upgrade is complete. -For example, using the Remote Desktop group consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group in an effort to maintain a clean out-of-the-box configuration. This scenario brings with it the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. +For example, the Remote Desktop group consists of three rules. To ensure that the rule set is properly migrated during an upgrade, all three rules must be enabled. If only one rule is enabled, the upgrade process will see that two of three rules are disabled and subsequently disable the entire group to maintain a clean, out-of-the-box configuration. This scenario has the unintended consequence of breaking Remote Desktop Protocol (RDP) connectivity to the host. From fcab9bc1756921ece50214580f9a0aa4dc58788c Mon Sep 17 00:00:00 2001 From: Peter Baumgartner <32550988+pebaum@users.noreply.github.com> Date: Thu, 17 Dec 2020 12:11:20 -0800 Subject: [PATCH 294/958] converting faqs to yml for google pilot --- .../security/information-protection/TOC.md | 4 +- ...ocker-deployment-and-administration-faq.md | 101 ------------------ ...cker-deployment-and-administration-faq.yml | 97 +++++++++++++++++ .../bitlocker-frequently-asked-questions.md | 4 +- ...bitlocker-overview-and-requirements-faq.md | 82 -------------- ...itlocker-overview-and-requirements-faq.yml | 82 ++++++++++++++ 6 files changed, 183 insertions(+), 187 deletions(-) delete mode 100644 windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md create mode 100644 windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.yml delete mode 100644 windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md create mode 100644 windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml diff --git a/windows/security/information-protection/TOC.md b/windows/security/information-protection/TOC.md index 6fe54f4f4d..442b60a184 100644 --- a/windows/security/information-protection/TOC.md +++ b/windows/security/information-protection/TOC.md @@ -3,9 +3,9 @@ ## [BitLocker](bitlocker\bitlocker-overview.md) ### [Overview of BitLocker Device Encryption in Windows 10](bitlocker\bitlocker-device-encryption-overview-windows-10.md) ### [BitLocker frequently asked questions (FAQ)](bitlocker\bitlocker-frequently-asked-questions.md) -#### [Overview and requirements](bitlocker\bitlocker-overview-and-requirements-faq.md) +#### [Overview and requirements](bitlocker\bitlocker-overview-and-requirements-faq.yml) #### [Upgrading](bitlocker\bitlocker-upgrading-faq.md) -#### [Deployment and administration](bitlocker\bitlocker-deployment-and-administration-faq.md) +#### [Deployment and administration](bitlocker\bitlocker-deployment-and-administration-faq.yml) #### [Key management](bitlocker\bitlocker-key-management-faq.md) #### [BitLocker To Go](bitlocker\bitlocker-to-go-faq.md) #### [Active Directory Domain Services](bitlocker\bitlocker-and-adds-faq.md) diff --git a/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md b/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md deleted file mode 100644 index 064a82cf8e..0000000000 --- a/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.md +++ /dev/null @@ -1,101 +0,0 @@ ---- -title: BitLocker deployment and administration FAQ (Windows 10) -description: Browse frequently asked questions about BitLocker deployment and administration, such as, "Can BitLocker deployment be automated in an enterprise environment?" -ms.assetid: c40f87ac-17d3-47b2-afc6-6c641f72ecee -ms.reviewer: -ms.prod: w10 -ms.mktglfcycl: explore -ms.sitesec: library -ms.pagetype: security -ms.localizationpriority: medium -author: dansimp -ms.author: dansimp -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 02/28/2019 -ms.custom: bitlocker ---- - -# BitLocker frequently asked questions (FAQ) - -**Applies to** -- Windows 10 - -## Can BitLocker deployment be automated in an enterprise environment? - -Yes, you can automate the deployment and configuration of BitLocker and the TPM using either WMI or Windows PowerShell scripts. How you choose to implement the scripts depends on your environment. You can also use Manage-bde.exe to locally or remotely configure BitLocker. For more info about writing scripts that use the BitLocker WMI providers, see [BitLocker Drive Encryption Provider](https://go.microsoft.com/fwlink/p/?LinkId=80600). For more info about using Windows PowerShell cmdlets with BitLocker Drive Encryption, see [BitLocker Cmdlets in Windows PowerShell](https://docs.microsoft.com/powershell/module/bitlocker/index?view=win10-ps). - -## Can BitLocker encrypt more than just the operating system drive? - -Yes. - -## Is there a noticeable performance impact when BitLocker is enabled on a computer? - -Generally it imposes a single-digit percentage performance overhead. - -## How long will initial encryption take when BitLocker is turned on? - -Although BitLocker encryption occurs in the background while you continue to work, and the system remains usable, encryption times vary depending on the type of drive that is being encrypted, the size of the drive, and the speed of the drive. If you are encrypting large drives, you may want to set encryption to occur during times when you will not be using the drive. - -You can also choose whether or not BitLocker should encrypt the entire drive or just the used space on the drive when you turn on BitLocker. On a new hard drive, encrypting just the used spaced can be considerably faster than encrypting the entire drive. When this encryption option is selected, BitLocker automatically encrypts data as it is saved, ensuring that no data is stored unencrypted. - -## What happens if the computer is turned off during encryption or decryption? - -If the computer is turned off or goes into hibernation, the BitLocker encryption and decryption process will resume where it stopped the next time Windows starts. This is true even if the power is suddenly unavailable. - -## Does BitLocker encrypt and decrypt the entire drive all at once when reading and writing data? - -No, BitLocker does not encrypt and decrypt the entire drive when reading and writing data. The encrypted sectors in the BitLocker-protected drive are decrypted only as they are requested from system read operations. Blocks that are written to the drive are encrypted before the system writes them to the physical disk. No unencrypted data is ever stored on a BitLocker-protected drive. - -## How can I prevent users on a network from storing data on an unencrypted drive? - -You can configure Group Policy settings to require that data drives be BitLocker-protected before a BitLocker-protected computer can write data to them. For more info, see [BitLocker Group Policy settings](bitlocker-group-policy-settings.md). -When these policy settings are enabled, the BitLocker-protected operating system will mount any data drives that are not protected by BitLocker as read-only. - -## What is Used Disk Space Only encryption? - -BitLocker in Windows 10 lets users choose to encrypt just their data. Although it's not the most secure way to encrypt a drive, this option can reduce encryption time by more than 99 percent, depending on how much data that needs to be encrypted. For more information, see [Used Disk Space Only encryption](bitlocker-device-encryption-overview-windows-10.md#used-disk-space-only-encryption). - -## What system changes would cause the integrity check on my operating system drive to fail? - -The following types of system changes can cause an integrity check failure and prevent the TPM from releasing the BitLocker key to decrypt the protected operating system drive: - -- Moving the BitLocker-protected drive into a new computer. -- Installing a new motherboard with a new TPM. -- Turning off, disabling, or clearing the TPM. -- Changing any boot configuration settings. -- Changing the BIOS, UEFI firmware, master boot record, boot sector, boot manager, option ROM, or other early boot components or boot configuration data. - -## What causes BitLocker to start into recovery mode when attempting to start the operating system drive? - -Because BitLocker is designed to protect your computer from numerous attacks, there are numerous reasons why BitLocker could start in recovery mode. -For example: - -- Changing the BIOS boot order to boot another drive in advance of the hard drive. -- Adding or removing hardware, such as inserting a new card in the computer, including some PCMIA wireless cards. -- Removing, inserting, or completely depleting the charge on a smart battery on a portable computer. - -In BitLocker, recovery consists of decrypting a copy of the volume master key using either a recovery key stored on a USB flash drive or a cryptographic key derived from a recovery password. -The TPM is not involved in any recovery scenarios, so recovery is still possible if the TPM fails boot component validation, malfunctions, or is removed. - -## What can prevent BitLocker from binding to PCR 7? - -BitLocker can be prevented from binding to PCR 7 if a non-Windows OS booted prior to Windows, or if Secure Boot is not available to the device, either because it has been disabled or the hardware does not support it. - -## Can I swap hard disks on the same computer if BitLocker is enabled on the operating system drive? - -Yes, you can swap multiple hard disks on the same computer if BitLocker is enabled, but only if the hard disks were BitLocker-protected on the same computer. The BitLocker keys are unique to the TPM and operating system drive. So if you want to prepare a backup operating system or data drive in case a disk fails, make sure that they were matched with the correct TPM. You can also configure different hard drives for different operating systems and then enable BitLocker on each one with different authentication methods (such as one with TPM-only and one with TPM+PIN) without any conflicts. - -## Can I access my BitLocker-protected drive if I insert the hard disk into a different computer? - -Yes, if the drive is a data drive, you can unlock it from the **BitLocker Drive Encryption** Control Panel item just as you would any other data drive by using a password or smart card. If the data drive was configured for automatic unlock only, you will have to unlock it by using the recovery key. The encrypted hard disk can be unlocked by a data recovery agent (if one was configured) or it can be unlocked by using the recovery key. - -## Why is "Turn BitLocker on" not available when I right-click a drive? -Some drives cannot be encrypted with BitLocker. Reasons a drive cannot be encrypted include insufficient disk size, an incompatible file system, if the drive is a dynamic disk, or a drive is designated as the system partition. By default, the system drive (or system partition) is hidden from display. However, if it is not created as a hidden drive when the operating system was installed due to a custom installation process, that drive might be displayed but cannot be encrypted. - -## What type of disk configurations are supported by BitLocker? -Any number of internal, fixed data drives can be protected with BitLocker. On some versions ATA and SATA-based, direct-attached storage devices are also supported. - - diff --git a/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.yml b/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.yml new file mode 100644 index 0000000000..f873294bba --- /dev/null +++ b/windows/security/information-protection/bitlocker/bitlocker-deployment-and-administration-faq.yml @@ -0,0 +1,97 @@ +### YamlMime:FAQ +metadata: + title: BitLocker deployment and administration FAQ (Windows 10) + description: Browse frequently asked questions about BitLocker deployment and administration, such as, "Can BitLocker deployment be automated in an enterprise environment?" + ms.assetid: c40f87ac-17d3-47b2-afc6-6c641f72ecee + ms.reviewer: + ms.prod: w10 + ms.mktglfcycl: explore + ms.sitesec: library + ms.pagetype: security + ms.localizationpriority: medium + author: dansimp + ms.author: dansimp + manager: dansimp + audience: ITPro + ms.collection: M365-security-compliance + ms.topic: conceptual + ms.date: 02/28/2019 + ms.custom: bitlocker + +title: BitLocker frequently asked questions (FAQ) +summary: | + **Applies to** + - Windows 10 + + +sections: + - name: Ignored + questions: + - question: Can BitLocker deployment be automated in an enterprise environment? + answer: | + Yes, you can automate the deployment and configuration of BitLocker and the TPM using either WMI or Windows PowerShell scripts. How you choose to implement the scripts depends on your environment. You can also use Manage-bde.exe to locally or remotely configure BitLocker. For more info about writing scripts that use the BitLocker WMI providers, see [BitLocker Drive Encryption Provider](https://go.microsoft.com/fwlink/p/?LinkId=80600). For more info about using Windows PowerShell cmdlets with BitLocker Drive Encryption, see [BitLocker Cmdlets in Windows PowerShell](https://docs.microsoft.com/powershell/module/bitlocker/index?view=win10-ps). + + - question: Can BitLocker encrypt more than just the operating system drive? + answer: Yes. + + - question: Is there a noticeable performance impact when BitLocker is enabled on a computer? + answer: Generally it imposes a single-digit percentage performance overhead. + + - question: How long will initial encryption take when BitLocker is turned on? + answer: | + Although BitLocker encryption occurs in the background while you continue to work, and the system remains usable, encryption times vary depending on the type of drive that is being encrypted, the size of the drive, and the speed of the drive. If you are encrypting large drives, you may want to set encryption to occur during times when you will not be using the drive. + + You can also choose whether or not BitLocker should encrypt the entire drive or just the used space on the drive when you turn on BitLocker. On a new hard drive, encrypting just the used spaced can be considerably faster than encrypting the entire drive. When this encryption option is selected, BitLocker automatically encrypts data as it is saved, ensuring that no data is stored unencrypted. + + - question: What happens if the computer is turned off during encryption or decryption? + answer: If the computer is turned off or goes into hibernation, the BitLocker encryption and decryption process will resume where it stopped the next time Windows starts. This is true even if the power is suddenly unavailable. + + - question: Does BitLocker encrypt and decrypt the entire drive all at once when reading and writing data? + answer: No, BitLocker does not encrypt and decrypt the entire drive when reading and writing data. The encrypted sectors in the BitLocker-protected drive are decrypted only as they are requested from system read operations. Blocks that are written to the drive are encrypted before the system writes them to the physical disk. No unencrypted data is ever stored on a BitLocker-protected drive. + + - question: How can I prevent users on a network from storing data on an unencrypted drive? + answer: | + You can configure Group Policy settings to require that data drives be BitLocker-protected before a BitLocker-protected computer can write data to them. For more info, see [BitLocker Group Policy settings](bitlocker-group-policy-settings.md). + When these policy settings are enabled, the BitLocker-protected operating system will mount any data drives that are not protected by BitLocker as read-only. + + - question: What is Used Disk Space Only encryption? + answer: | + BitLocker in Windows 10 lets users choose to encrypt just their data. Although it's not the most secure way to encrypt a drive, this option can reduce encryption time by more than 99 percent, depending on how much data that needs to be encrypted. For more information, see [Used Disk Space Only encryption](bitlocker-device-encryption-overview-windows-10.md#used-disk-space-only-encryption). + + - question: What system changes would cause the integrity check on my operating system drive to fail? + answer: | + The following types of system changes can cause an integrity check failure and prevent the TPM from releasing the BitLocker key to decrypt the protected operating system drive: + + - Moving the BitLocker-protected drive into a new computer. + - Installing a new motherboard with a new TPM. + - Turning off, disabling, or clearing the TPM. + - Changing any boot configuration settings. + - Changing the BIOS, UEFI firmware, master boot record, boot sector, boot manager, option ROM, or other early boot components or boot configuration data. + + - question: What causes BitLocker to start into recovery mode when attempting to start the operating system drive? + answer: | + Because BitLocker is designed to protect your computer from numerous attacks, there are numerous reasons why BitLocker could start in recovery mode. + For example: + + - Changing the BIOS boot order to boot another drive in advance of the hard drive. + - Adding or removing hardware, such as inserting a new card in the computer, including some PCMIA wireless cards. + - Removing, inserting, or completely depleting the charge on a smart battery on a portable computer. + + In BitLocker, recovery consists of decrypting a copy of the volume master key using either a recovery key stored on a USB flash drive or a cryptographic key derived from a recovery password. + The TPM is not involved in any recovery scenarios, so recovery is still possible if the TPM fails boot component validation, malfunctions, or is removed. + + - question: What can prevent BitLocker from binding to PCR 7? + answer: BitLocker can be prevented from binding to PCR 7 if a non-Windows OS booted prior to Windows, or if Secure Boot is not available to the device, either because it has been disabled or the hardware does not support it. + + - question: Can I swap hard disks on the same computer if BitLocker is enabled on the operating system drive? + answer: Yes, you can swap multiple hard disks on the same computer if BitLocker is enabled, but only if the hard disks were BitLocker-protected on the same computer. The BitLocker keys are unique to the TPM and operating system drive. So if you want to prepare a backup operating system or data drive in case a disk fails, make sure that they were matched with the correct TPM. You can also configure different hard drives for different operating systems and then enable BitLocker on each one with different authentication methods (such as one with TPM-only and one with TPM+PIN) without any conflicts. + + - question: Can I access my BitLocker-protected drive if I insert the hard disk into a different computer? + answer: Yes, if the drive is a data drive, you can unlock it from the **BitLocker Drive Encryption** Control Panel item just as you would any other data drive by using a password or smart card. If the data drive was configured for automatic unlock only, you will have to unlock it by using the recovery key. The encrypted hard disk can be unlocked by a data recovery agent (if one was configured) or it can be unlocked by using the recovery key. + + - question: Why is "Turn BitLocker on" not available when I right-click a drive? + answer: Some drives cannot be encrypted with BitLocker. Reasons a drive cannot be encrypted include insufficient disk size, an incompatible file system, if the drive is a dynamic disk, or a drive is designated as the system partition. By default, the system drive (or system partition) is hidden from display. However, if it is not created as a hidden drive when the operating system was installed due to a custom installation process, that drive might be displayed but cannot be encrypted. + + - question: What type of disk configurations are supported by BitLocker? + answer: Any number of internal, fixed data drives can be protected with BitLocker. On some versions ATA and SATA-based, direct-attached storage devices are also supported. + diff --git a/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md b/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md index 3679c9fde7..31ee0816da 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md +++ b/windows/security/information-protection/bitlocker/bitlocker-frequently-asked-questions.md @@ -25,9 +25,9 @@ ms.custom: bitlocker This topic links to frequently asked questions about BitLocker. BitLocker is a data protection feature that encrypts drives on your computer to help prevent data theft or exposure. BitLocker-protected computers can also delete data more securely when they are decommissioned because it is much more difficult to recover deleted data from an encrypted drive than from a non-encrypted drive. -- [Overview and requirements](bitlocker-overview-and-requirements-faq.md) +- [Overview and requirements](bitlocker-overview-and-requirements-faq.yml) - [Upgrading](bitlocker-upgrading-faq.md) -- [Deployment and administration](bitlocker-deployment-and-administration-faq.md) +- [Deployment and administration](bitlocker-deployment-and-administration-faq.yml) - [Key management](bitlocker-key-management-faq.md) - [BitLocker To Go](bitlocker-to-go-faq.md) - [Active Directory Domain Services (AD DS)](bitlocker-and-adds-faq.md) diff --git a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md deleted file mode 100644 index 7f9715b9c0..0000000000 --- a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.md +++ /dev/null @@ -1,82 +0,0 @@ ---- -title: BitLocker overview and requirements FAQ (Windows 10) -description: This topic for the IT professional answers frequently asked questions concerning the requirements to use BitLocker. -ms.assetid: c40f87ac-17d3-47b2-afc6-6c641f72ecee -ms.reviewer: -ms.prod: w10 -ms.mktglfcycl: explore -ms.sitesec: library -ms.pagetype: security -ms.localizationpriority: medium -author: dansimp -ms.author: dansimp -manager: dansimp -audience: ITPro -ms.collection: M365-security-compliance -ms.topic: conceptual -ms.date: 02/28/2019 -ms.custom: bitlocker ---- - -# BitLocker Overview and Requirements FAQ - -**Applies to** -- Windows 10 - -## How does BitLocker work? - -**How BitLocker works with operating system drives** - -You can use BitLocker to mitigate unauthorized data access on lost or stolen computers by encrypting all user files and system files on the operating system drive, including the swap files and hibernation files, and checking the integrity of early boot components and boot configuration data. - -**How BitLocker works with fixed and removable data drives** - -You can use BitLocker to encrypt the entire contents of a data drive. You can use Group Policy to require that BitLocker be enabled on a drive before the computer can write data to the drive. BitLocker can be configured with a variety of unlock methods for data drives, and a data drive supports multiple unlock methods. - -## Does BitLocker support multifactor authentication? - -Yes, BitLocker supports multifactor authentication for operating system drives. If you enable BitLocker on a computer that has a TPM version 1.2 or later, you can use additional forms of authentication with the TPM protection. - -## What are the BitLocker hardware and software requirements? - -For requirements, see [System requirements](bitlocker-overview.md#system-requirements). - -> [!NOTE] -> Dynamic disks are not supported by BitLocker. Dynamic data volumes will not be displayed in the Control Panel. Although the operating system volume will always be displayed in the Control Panel, regardless of whether it is a Dynamic disk, if it is a dynamic disk it cannot be protected by BitLocker. - -## Why are two partitions required? Why does the system drive have to be so large? - -Two partitions are required to run BitLocker because pre-startup authentication and system integrity verification must occur on a separate partition from the encrypted operating system drive. This configuration helps protect the operating system and the information in the encrypted drive. - -## Which Trusted Platform Modules (TPMs) does BitLocker support? - -BitLocker supports TPM version 1.2 or higher. BitLocker support for TPM 2.0 requires Unified Extensible Firmware Interface (UEFI) for the device. - -> [!NOTE] -> TPM 2.0 is not supported in Legacy and CSM Modes of the BIOS. Devices with TPM 2.0 must have their BIOS mode configured as Native UEFI only. The Legacy and Compatibility Support Module (CSM) options must be disabled. For added security Enable the Secure Boot feature. - -> Installed Operating System on hardware in legacy mode will stop the OS from booting when the BIOS mode is changed to UEFI. Use the tool [MBR2GPT](https://docs.microsoft.com/windows/deployment/mbr-to-gpt) before changing the BIOS mode which will prepare the OS and the disk to support UEFI. - -## How can I tell if a TPM is on my computer? - -Beginning with Windows 10, version 1803, you can check TPM status in **Windows Defender Security Center** > **Device Security** > **Security processor details**. In previous versions of Windows, open the TPM MMC console (tpm.msc) and look under the **Status** heading. - -## Can I use BitLocker on an operating system drive without a TPM? - -Yes, you can enable BitLocker on an operating system drive without a TPM version 1.2 or higher, if the BIOS or UEFI firmware has the ability to read from a USB flash drive in the boot environment. This is because BitLocker will not unlock the protected drive until BitLocker's own volume master key is first released by either the computer's TPM or by a USB flash drive containing the BitLocker startup key for that computer. However, computers without TPMs will not be able to use the system integrity verification that BitLocker can also provide. -To help determine whether a computer can read from a USB device during the boot process, use the BitLocker system check as part of the BitLocker setup process. This system check performs tests to confirm that the computer can properly read from the USB devices at the appropriate time and that the computer meets other BitLocker requirements. - -## How do I obtain BIOS support for the TPM on my computer? - -Contact the computer manufacturer to request a Trusted Computing Group (TCG)-compliant BIOS or UEFI boot firmware that meets the following requirements: - -- It is compliant with the TCG standards for a client computer. -- It has a secure update mechanism to help prevent a malicious BIOS or boot firmware from being installed on the computer. - -## What credentials are required to use BitLocker? - -To turn on, turn off, or change configurations of BitLocker on operating system and fixed data drives, membership in the local **Administrators** group is required. Standard users can turn on, turn off, or change configurations of BitLocker on removable data drives. - -## What is the recommended boot order for computers that are going to be BitLocker-protected? - -You should configure the startup options of your computer to have the hard disk drive first in the boot order, before any other drives such as CD/DVD drives or USB drives. If the hard disk is not first and you typically boot from hard disk, then a boot order change may be detected or assumed when removable media is found during boot. The boot order typically affects the system measurement that is verified by BitLocker and a change in boot order will cause you to be prompted for your BitLocker recovery key. For the same reason, if you have a laptop with a docking station, ensure that the hard disk drive is first in the boot order both when docked and undocked.  diff --git a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml new file mode 100644 index 0000000000..de4338a325 --- /dev/null +++ b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml @@ -0,0 +1,82 @@ +### YamlMime:FAQ +metadata: + title: BitLocker overview and requirements FAQ (Windows 10) + description: This topic for the IT professional answers frequently asked questions concerning the requirements to use BitLocker. + ms.assetid: c40f87ac-17d3-47b2-afc6-6c641f72ecee + ms.reviewer: + ms.prod: w10 + ms.mktglfcycl: explore + ms.sitesec: library + ms.pagetype: security + ms.localizationpriority: medium + author: dansimp + ms.author: dansimp + manager: dansimp + audience: ITPro + ms.collection: M365-security-compliance + ms.topic: conceptual + ms.date: 02/28/2019 + ms.custom: bitlocker + +title: BitLocker Overview and Requirements FAQ +summary: | + **Applies to** + - Windows 10 + + +sections: + - name: Ignored + questions: + - question: How does BitLocker work? + answer: | + **How BitLocker works with operating system drives** + + You can use BitLocker to mitigate unauthorized data access on lost or stolen computers by encrypting all user files and system files on the operating system drive, including the swap files and hibernation files, and checking the integrity of early boot components and boot configuration data. + + **How BitLocker works with fixed and removable data drives** + + You can use BitLocker to encrypt the entire contents of a data drive. You can use Group Policy to require that BitLocker be enabled on a drive before the computer can write data to the drive. BitLocker can be configured with a variety of unlock methods for data drives, and a data drive supports multiple unlock methods. + + - question: Does BitLocker support multifactor authentication? + answer: Yes, BitLocker supports multifactor authentication for operating system drives. If you enable BitLocker on a computer that has a TPM version 1.2 or later, you can use additional forms of authentication with the TPM protection. + + - question: What are the BitLocker hardware and software requirements? + answer: | + For requirements, see [System requirements](bitlocker-overview.md#system-requirements). + + > [!NOTE] + > Dynamic disks are not supported by BitLocker. Dynamic data volumes will not be displayed in the Control Panel. Although the operating system volume will always be displayed in the Control Panel, regardless of whether it is a Dynamic disk, if it is a dynamic disk it cannot be protected by BitLocker. + + - question: Why are two partitions required? Why does the system drive have to be so large? + answer: Two partitions are required to run BitLocker because pre-startup authentication and system integrity verification must occur on a separate partition from the encrypted operating system drive. This configuration helps protect the operating system and the information in the encrypted drive. + + - question: Which Trusted Platform Modules (TPMs) does BitLocker support? + answer: | + BitLocker supports TPM version 1.2 or higher. BitLocker support for TPM 2.0 requires Unified Extensible Firmware Interface (UEFI) for the device. + + > [!NOTE] + > TPM 2.0 is not supported in Legacy and CSM Modes of the BIOS. Devices with TPM 2.0 must have their BIOS mode configured as Native UEFI only. The Legacy and Compatibility Support Module (CSM) options must be disabled. For added security Enable the Secure Boot feature. + + > Installed Operating System on hardware in legacy mode will stop the OS from booting when the BIOS mode is changed to UEFI. Use the tool [MBR2GPT](https://docs.microsoft.com/windows/deployment/mbr-to-gpt) before changing the BIOS mode which will prepare the OS and the disk to support UEFI. + + - question: How can I tell if a TPM is on my computer? + answer: Beginning with Windows 10, version 1803, you can check TPM status in **Windows Defender Security Center** > **Device Security** > **Security processor details**. In previous versions of Windows, open the TPM MMC console (tpm.msc) and look under the **Status** heading. + + - question: Can I use BitLocker on an operating system drive without a TPM? + answer: | + Yes, you can enable BitLocker on an operating system drive without a TPM version 1.2 or higher, if the BIOS or UEFI firmware has the ability to read from a USB flash drive in the boot environment. This is because BitLocker will not unlock the protected drive until BitLocker's own volume master key is first released by either the computer's TPM or by a USB flash drive containing the BitLocker startup key for that computer. However, computers without TPMs will not be able to use the system integrity verification that BitLocker can also provide. + To help determine whether a computer can read from a USB device during the boot process, use the BitLocker system check as part of the BitLocker setup process. This system check performs tests to confirm that the computer can properly read from the USB devices at the appropriate time and that the computer meets other BitLocker requirements. + + - question: How do I obtain BIOS support for the TPM on my computer? + answer: | + Contact the computer manufacturer to request a Trusted Computing Group (TCG)-compliant BIOS or UEFI boot firmware that meets the following requirements: + + - It is compliant with the TCG standards for a client computer. + - It has a secure update mechanism to help prevent a malicious BIOS or boot firmware from being installed on the computer. + + - question: What credentials are required to use BitLocker? + answer: To turn on, turn off, or change configurations of BitLocker on operating system and fixed data drives, membership in the local **Administrators** group is required. Standard users can turn on, turn off, or change configurations of BitLocker on removable data drives. + + - question: What is the recommended boot order for computers that are going to be BitLocker-protected? + answer: You should configure the startup options of your computer to have the hard disk drive first in the boot order, before any other drives such as CD/DVD drives or USB drives. If the hard disk is not first and you typically boot from hard disk, then a boot order change may be detected or assumed when removable media is found during boot. The boot order typically affects the system measurement that is verified by BitLocker and a change in boot order will cause you to be prompted for your BitLocker recovery key. For the same reason, if you have a laptop with a docking station, ensure that the hard disk drive is first in the boot order both when docked and undocked.  + From 375920678f21238835ab6be53dcc9735eaf3fe7d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 12:40:14 -0800 Subject: [PATCH 295/958] Update controlled-folders.md --- .../microsoft-defender-atp/controlled-folders.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index 80ec62a312..077dae7d2c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -11,7 +11,7 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb audience: ITPro -ms.date: 12/10/2020 +ms.date: 12/17/2020 ms.reviewer: v-maave manager: dansimp ms.custom: asr @@ -30,6 +30,9 @@ ms.custom: asr Controlled folder access helps protect your valuable data from malicious apps and threats, such as ransomware. Controlled folder access protects your data by checking apps against a list of known, trusted apps. Supported on Windows Server 2019 and Windows 10 clients, controlled folder access can be turned on using the Windows Security App, Microsoft Endpoint Configuration Manager, or Intune (for managed devices). +> [!NOTE] +> Scripting engines are not trusted and you cannot allow them access to controlled protected folders. For example, PowerShell is not trusted by controlled folder access, even if you add it as an application you trust or allow with [certificate and file indicators](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates). + Controlled folder access works best with [Microsoft Defender for Endpoint](../microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md), which gives you detailed reporting into controlled folder access events and blocks as part of the usual [alert investigation scenarios](../microsoft-defender-atp/investigate-alerts.md). ## How does controlled folder access work? From 100fa08c85a3cf05ab36cc7b64a095d88d1ab45f Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 12:46:48 -0800 Subject: [PATCH 296/958] Update controlled-folders.md --- .../microsoft-defender-atp/controlled-folders.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md index 077dae7d2c..d01c44566e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md +++ b/windows/security/threat-protection/microsoft-defender-atp/controlled-folders.md @@ -21,7 +21,6 @@ ms.custom: asr [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) From cd5dfac88c943e988941c8490b3751d81cce85dc Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 17 Dec 2020 13:49:06 -0700 Subject: [PATCH 297/958] connecting to TOC --- windows/client-management/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/client-management/TOC.md b/windows/client-management/TOC.md index b99a2d3ee4..26cb9368b0 100644 --- a/windows/client-management/TOC.md +++ b/windows/client-management/TOC.md @@ -1,5 +1,6 @@ # [Manage clients in Windows 10](index.md) ## [Administrative Tools in Windows 10](administrative-tools-in-windows-10.md) +### [Use Quick Assist to help users] ## [Create mandatory user profiles](mandatory-user-profile.md) ## [Connect to remote Azure Active Directory-joined PC](connect-to-remote-aadj-pc.md) ## [Join Windows 10 Mobile to Azure Active Directory](join-windows-10-mobile-to-azure-active-directory.md) From 7da0e93576373c790946af9c819bc4a8c8d5aca1 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 17 Dec 2020 13:54:24 -0700 Subject: [PATCH 298/958] trying to get the link right this time --- windows/client-management/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/TOC.md b/windows/client-management/TOC.md index 26cb9368b0..aac950751a 100644 --- a/windows/client-management/TOC.md +++ b/windows/client-management/TOC.md @@ -1,6 +1,6 @@ # [Manage clients in Windows 10](index.md) ## [Administrative Tools in Windows 10](administrative-tools-in-windows-10.md) -### [Use Quick Assist to help users] +### [Use Quick Assist to help users](quick-assist.md) ## [Create mandatory user profiles](mandatory-user-profile.md) ## [Connect to remote Azure Active Directory-joined PC](connect-to-remote-aadj-pc.md) ## [Join Windows 10 Mobile to Azure Active Directory](join-windows-10-mobile-to-azure-active-directory.md) From ae609d2083a703d1188cb21ea3c5c8d7c9adc80a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:24:14 -0800 Subject: [PATCH 299/958] antivirus fixes --- ...rosoft-defender-antivirus-compatibility.md | 4 ++-- ...fender-antivirus-on-windows-server-2016.md | 22 +++++++++---------- 2 files changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index a51058e86c..e6d8bfd533 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -47,9 +47,9 @@ The following table summarizes what happens with Microsoft Defender Antivirus wh | Windows Server 2016 or 2019 | Microsoft Defender Antivirus | Yes | Active mode | | Windows Server 2016 or 2019 | Microsoft Defender Antivirus | No | Active mode | -(1) On Windows Server 2016 or 2019, Microsoft Defender Antivirus will not enter passive or disabled mode if you have also installed a third-party antivirus product. If you install a third-party antivirus product, you should [consider uninstalling Microsoft Defender Antivirus on Windows Server 2016 or 2019](microsoft-defender-antivirus-on-windows-server-2016.md#need-to-uninstall-microsoft-defender-antivirus) to prevent problems caused by having multiple antivirus products installed on a machine. +(1) On Windows Server 2019 or 2016, Microsoft Defender Antivirus does not enter passive or disabled mode automatically when you install non-Microsoft antivirus product. In those cases, [disable Microsoft Defender Antivirus, or set it to passive mode](microsoft-defender-antivirus-on-windows-server-2016.md#need-to-uninstall-microsoft-defender-antivirus) to prevent problems caused by having multiple antivirus products installed on a server. -If you are using Windows Server, version 1803 or Windows Server 2019, you can enable passive mode by setting this registry key: +If you are using Windows Server, version 1803 or Windows Server 2019, you set Microsoft Defender Antivirus to passive mode by setting this registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` - Name: ForceDefenderPassiveMode - Type: REG_DWORD diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 2dd55a5ef2..b29fd1b0e3 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -1,5 +1,5 @@ --- -title: Microsoft Defender Antivirus on Windows Server 2016 and 2019 +title: Microsoft Defender Antivirus on Windows Server 2019 and 2016 description: Learn how to enable and configure Microsoft Defender Antivirus on Windows Server 2016 and Windows Server 2019. keywords: windows defender, server, scep, system center endpoint protection, server 2016, current branch, server 2012 search.product: eADQiWindows 10XVcnh @@ -173,17 +173,17 @@ See [Configure exclusions in Microsoft Defender Antivirus on Windows Server](con ## Need to uninstall Microsoft Defender Antivirus? -If you are using a third-party antivirus solution and you're running into issues with that solution and Microsoft Defender Antivirus, you can consider uninstalling Microsoft Defender Antivirus. Before you do that, review the following resources: +If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode. -- See the question *Should I run Microsoft security software at the same time as other security products?* in the [Windows Defender Security Intelligence Antivirus and antimalware software FAQ](https://www.microsoft.com/wdsi/help/antimalware-faq#multiple-products). +### Set Microsoft Defender Antivirus to passive mode -- See [Microsoft Defender Antivirus compatibility](microsoft-defender-antivirus-compatibility.md). +If you are using Windows Server, version 1803 or Windows Server 2019, you can enable passive mode by setting this registry key: +- Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` +- Name: `ForceDefenderPassiveMode` +- Type: `REG_DWORD` +- Value: `1` -- See [Better together: Microsoft Defender Antivirus and Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/why-use-microsoft-antivirus). This article describes 10 advantages to using Microsoft Defender Antivirus together with Defender for Endpoint. - -If you determine you do want to uninstall Microsoft Defender Antivirus, follow the steps in the following sections. - -### Uninstall Microsoft Defender Antivirus using the Remove Roles and Features wizard +### Disable Microsoft Defender Antivirus using the Remove Roles and Features wizard 1. See [Install or Uninstall Roles, Role Services, or Features](https://docs.microsoft.com/windows-server/administration/server-manager/install-or-uninstall-roles-role-services-or-features#remove-roles-role-services-and-features-by-using-the-remove-roles-and-features-wizard), and use the **Remove Roles and Features Wizard**. @@ -193,7 +193,7 @@ If you determine you do want to uninstall Microsoft Defender Antivirus, follow t Microsoft Defender Antivirus will still run normally without the user interface, but the user interface cannot be enabled if you disable the core **Windows Defender** feature. -### Uninstall Microsoft Defender Antivirus using PowerShell +### Disable Microsoft Defender Antivirus using PowerShell >[!NOTE] >You can't uninstall the Windows Security app, but you can disable the interface with these instructions. @@ -204,7 +204,7 @@ The following PowerShell cmdlet uninstalls Microsoft Defender Antivirus on Windo Uninstall-WindowsFeature -Name Windows-Defender ``` -### Turn off the GUI using PowerShell +### Turn off the Microsoft Defender Antivirus user interface using PowerShell To turn off the Microsoft Defender Antivirus GUI, use the following PowerShell cmdlet: From 21f2d36419f0407c85390326c27a541c140a8a93 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:26:47 -0800 Subject: [PATCH 300/958] fixes --- .../microsoft-defender-antivirus-compatibility.md | 12 ++++++------ ...soft-defender-antivirus-on-windows-server-2016.md | 8 ++++---- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index e6d8bfd533..0bb74a713b 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -11,9 +11,9 @@ ms.localizationpriority: medium author: denisebmsft ms.author: deniseb ms.custom: nextgen -ms.reviewer: +ms.reviewer: pahuijbr manager: dansimp -ms.date: 12/11/2020 +ms.date: 12/17/2020 --- # Microsoft Defender Antivirus compatibility @@ -51,11 +51,11 @@ The following table summarizes what happens with Microsoft Defender Antivirus wh If you are using Windows Server, version 1803 or Windows Server 2019, you set Microsoft Defender Antivirus to passive mode by setting this registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` -- Name: ForceDefenderPassiveMode -- Type: REG_DWORD -- Value: 1 +- Name: `ForceDefenderPassiveMode` +- Type: `REG_DWORD` +- Value: `1` -See [Microsoft Defender Antivirus on Windows Server 2016 and 2019](microsoft-defender-antivirus-on-windows-server-2016.md) for key differences and management options for Windows Server installations. +See [Microsoft Defender Antivirus on Windows Server 2019 and Windows Server 2016](microsoft-defender-antivirus-on-windows-server-2016.md) for key differences and management options for Windows Server installations. > [!IMPORTANT] > Microsoft Defender Antivirus is only available on endpoints running Windows 10, Windows Server 2016, and Windows Server 2019. diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index b29fd1b0e3..569e75a850 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -10,8 +10,8 @@ ms.sitesec: library ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 12/16/2020 -ms.reviewer: +ms.date: 12/17/2020 +ms.reviewer: pahuijbr manager: dansimp --- @@ -173,11 +173,11 @@ See [Configure exclusions in Microsoft Defender Antivirus on Windows Server](con ## Need to uninstall Microsoft Defender Antivirus? -If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode. +If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode, as described in the following procedures. ### Set Microsoft Defender Antivirus to passive mode -If you are using Windows Server, version 1803 or Windows Server 2019, you can enable passive mode by setting this registry key: +If you are using Windows Server, version 1803 or Windows Server 2019, you can set Microsoft Defender Antivirus to passive mode by setting the following registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` - Name: `ForceDefenderPassiveMode` - Type: `REG_DWORD` From 5785056149205c818309f6991c57d44ca96c9d14 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:29:18 -0800 Subject: [PATCH 301/958] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 0bb74a713b..79b5a1cc1a 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -77,7 +77,7 @@ The following table summarizes the functionality and features that are available - In Active mode, Microsoft Defender Antivirus is used as the antivirus app on the machine. All configuration made with Configuration Manager, Group Policy, Intune, or other management products will apply. Files are scanned and threats remediated, and detection information are reported in your configuration tool (such as Configuration Manager or the Microsoft Defender Antivirus app on the machine itself). - In Passive mode, Microsoft Defender Antivirus is not used as the antivirus app, and threats are not remediated by Microsoft Defender Antivirus. Files are scanned and reports are provided for threat detections that are shared with the Microsoft Defender for Endpoint service. Therefore, you might encounter alerts in the Security Center console with Microsoft Defender Antivirus as a source, even when Microsoft Defender Antivirus is in Passive mode. -- When [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) is turned on and Microsoft Defender Antivirus is not used as the primary antivirus solution, it can still detect and remediate malicious items. +- When [EDR in block mode](../microsoft-defender-atp/edr-in-block-mode.md) is turned on and Microsoft Defender Antivirus is not the primary antivirus solution, it can still detect and remediate malicious items. - When disabled, Microsoft Defender Antivirus is not used as the antivirus app. Files are not scanned and threats are not remediated. ## Keep the following points in mind From fae702488ae56cb2ebbbec22015a5e78e2cf306e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:43:08 -0800 Subject: [PATCH 302/958] Update microsoft-defender-antivirus-on-windows-server-2016.md --- ...fender-antivirus-on-windows-server-2016.md | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index 569e75a850..a4ba1836c2 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -1,5 +1,5 @@ --- -title: Microsoft Defender Antivirus on Windows Server 2019 and 2016 +title: Microsoft Defender Antivirus on Windows Server 2016 and 2019 description: Learn how to enable and configure Microsoft Defender Antivirus on Windows Server 2016 and Windows Server 2019. keywords: windows defender, server, scep, system center endpoint protection, server 2016, current branch, server 2012 search.product: eADQiWindows 10XVcnh @@ -15,7 +15,7 @@ ms.reviewer: pahuijbr manager: dansimp --- -# Microsoft Defender Antivirus on Windows Server 2019 and Windows Server 2016 +# Microsoft Defender Antivirus on Windows Server 2016 and Windows Server 2019 [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] @@ -23,7 +23,7 @@ manager: dansimp - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -Microsoft Defender Antivirus is available on Windows Server 2019 and Windows Server 2016. In some instances, Microsoft Defender Antivirus is referred to as *Endpoint Protection*; however, the protection engine is the same. +Microsoft Defender Antivirus is available on Windows Server 2016 and 2019. In some instances, Microsoft Defender Antivirus is referred to as *Endpoint Protection*; however, the protection engine is the same. While the functionality, configuration, and management are largely the same for [Microsoft Defender Antivirus on Windows 10](microsoft-defender-antivirus-in-windows-10.md), there are a few key differences on Windows Server 2019 and Windows Server 2016: @@ -34,9 +34,9 @@ While the functionality, configuration, and management are largely the same for The process of setting up and running Microsoft Defender Antivirus on a server platform includes several steps: -1. [Enable the interface](#enable-the-user-interface-on-windows-server-2019-or-windows-server-2016) +1. [Enable the interface](#enable-the-user-interface-on-windows-server-2016-or-2019) -2. [Install Microsoft Defender Antivirus](#install-microsoft-defender-antivirus-on-windows-server-2019-or-windows-server-2016) +2. [Install Microsoft Defender Antivirus](#install-microsoft-defender-antivirus-on-windows-server-2016-or-2019) 2. [Verify Microsoft Defender Antivirus is running](#verify-microsoft-defender-antivirus-is-running) @@ -48,9 +48,9 @@ The process of setting up and running Microsoft Defender Antivirus on a server p 6. (Only if necessary) [Uninstall Microsoft Defender Antivirus](#need-to-uninstall-microsoft-defender-antivirus) -## Enable the user interface on Windows Server 2019 or Windows Server 2016 +## Enable the user interface on Windows Server 2016 or 2019 -By default, Microsoft Defender Antivirus is installed and functional on Windows Server 2019 and Windows Server 2016. The user interface (GUI) is installed by default on some SKUs, but is not required because you can use PowerShell or other methods to manage Microsoft Defender Antivirus. And if the GUI is not installed on your server, you can add it by using the Add Roles and Features Wizard or by using PowerShell. +By default, Microsoft Defender Antivirus is installed and functional on Windows Server 2016 and 2019. The user interface (GUI) is installed by default on some SKUs, but is not required because you can use PowerShell or other methods to manage Microsoft Defender Antivirus. And if the GUI is not installed on your server, you can add it by using the Add Roles and Features Wizard or by using PowerShell. ### Turn on the GUI using the Add Roles and Features Wizard @@ -72,7 +72,7 @@ The following PowerShell cmdlet will enable the interface: Install-WindowsFeature -Name Windows-Defender-GUI ``` -## Install Microsoft Defender Antivirus on Windows Server 2019 or Windows Server 2016 +## Install Microsoft Defender Antivirus on Windows Server 2016 or 2019 You can use either the **Add Roles and Features Wizard** or PowerShell to install Microsoft Defender Antivirus. @@ -173,7 +173,7 @@ See [Configure exclusions in Microsoft Defender Antivirus on Windows Server](con ## Need to uninstall Microsoft Defender Antivirus? -If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode, as described in the following procedures. +If you are using a non-Microsoft antivirus product as your primary antivirus solution, you can either disable Microsoft Defender Antivirus, or set it to passive mode, as described in the following procedures. ### Set Microsoft Defender Antivirus to passive mode @@ -198,7 +198,7 @@ If you are using Windows Server, version 1803 or Windows Server 2019, you can se >[!NOTE] >You can't uninstall the Windows Security app, but you can disable the interface with these instructions. -The following PowerShell cmdlet uninstalls Microsoft Defender Antivirus on Windows Server 2019 or Windows Server 2016: +The following PowerShell cmdlet uninstalls Microsoft Defender Antivirus on Windows Server 2016 or 2019: ```PowerShell Uninstall-WindowsFeature -Name Windows-Defender From cabc2351b1b958ef920012c27aab1023f1a82cb0 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:43:36 -0800 Subject: [PATCH 303/958] Update microsoft-defender-antivirus-on-windows-server-2016.md --- .../microsoft-defender-antivirus-on-windows-server-2016.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md index a4ba1836c2..8f3a10623e 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016.md @@ -25,7 +25,7 @@ manager: dansimp Microsoft Defender Antivirus is available on Windows Server 2016 and 2019. In some instances, Microsoft Defender Antivirus is referred to as *Endpoint Protection*; however, the protection engine is the same. -While the functionality, configuration, and management are largely the same for [Microsoft Defender Antivirus on Windows 10](microsoft-defender-antivirus-in-windows-10.md), there are a few key differences on Windows Server 2019 and Windows Server 2016: +While the functionality, configuration, and management are largely the same for [Microsoft Defender Antivirus on Windows 10](microsoft-defender-antivirus-in-windows-10.md), there are a few key differences on Windows Server 2016 and 2019: - In Windows Server, [automatic exclusions](configure-server-exclusions-microsoft-defender-antivirus.md) are applied based on your defined Server Role. - In Windows Server, Microsoft Defender Antivirus does not automatically disable itself if you are running another antivirus product. From 136e0cffd26e50eb9069505bace9d4ca60d4020a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 17 Dec 2020 13:44:58 -0800 Subject: [PATCH 304/958] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 79b5a1cc1a..0a96956345 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -47,7 +47,7 @@ The following table summarizes what happens with Microsoft Defender Antivirus wh | Windows Server 2016 or 2019 | Microsoft Defender Antivirus | Yes | Active mode | | Windows Server 2016 or 2019 | Microsoft Defender Antivirus | No | Active mode | -(1) On Windows Server 2019 or 2016, Microsoft Defender Antivirus does not enter passive or disabled mode automatically when you install non-Microsoft antivirus product. In those cases, [disable Microsoft Defender Antivirus, or set it to passive mode](microsoft-defender-antivirus-on-windows-server-2016.md#need-to-uninstall-microsoft-defender-antivirus) to prevent problems caused by having multiple antivirus products installed on a server. +(1) On Windows Server 2016 or 2019, Microsoft Defender Antivirus does not enter passive or disabled mode automatically when you install non-Microsoft antivirus product. In those cases, [disable Microsoft Defender Antivirus, or set it to passive mode](microsoft-defender-antivirus-on-windows-server-2016.md#need-to-uninstall-microsoft-defender-antivirus) to prevent problems caused by having multiple antivirus products installed on a server. If you are using Windows Server, version 1803 or Windows Server 2019, you set Microsoft Defender Antivirus to passive mode by setting this registry key: - Path: `HKLM\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection` @@ -55,7 +55,7 @@ If you are using Windows Server, version 1803 or Windows Server 2019, you set Mi - Type: `REG_DWORD` - Value: `1` -See [Microsoft Defender Antivirus on Windows Server 2019 and Windows Server 2016](microsoft-defender-antivirus-on-windows-server-2016.md) for key differences and management options for Windows Server installations. +See [Microsoft Defender Antivirus on Windows Server 2016 and 2019](microsoft-defender-antivirus-on-windows-server-2016.md) for key differences and management options for Windows Server installations. > [!IMPORTANT] > Microsoft Defender Antivirus is only available on endpoints running Windows 10, Windows Server 2016, and Windows Server 2019. From 98c877c7f8ef1fcc2ce8ef6f68f6f09913edd1a2 Mon Sep 17 00:00:00 2001 From: jaimeo Date: Thu, 17 Dec 2020 15:21:05 -0700 Subject: [PATCH 305/958] couple typos --- windows/client-management/quick-assist.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/quick-assist.md b/windows/client-management/quick-assist.md index 3fee94cc1c..9fc8de6503 100644 --- a/windows/client-management/quick-assist.md +++ b/windows/client-management/quick-assist.md @@ -45,7 +45,7 @@ Both the helper and sharer must be able to reach these endpoints over port 443: 1. Both the helper and the sharer start Quick Assist. -2. The helper selects **Assist another person**. Quick Assist on the helper's side contacts the Remote Assistance Service to obtain a session code. An RCC chat session is established and the helpers Quick Assist instance joins it. The helper then provides the code to the sharer. +2. The helper selects **Assist another person**. Quick Assist on the helper's side contacts the Remote Assistance Service to obtain a session code. An RCC chat session is established and the helper's Quick Assist instance joins it. The helper then provides the code to the sharer. 3. After the sharer enters the code in their Quick Assist app, Quick Assist uses that code to contact the Remote Assistance Service and join that specific session. The sharer's Quick Assist instance joins the RCC chat session. @@ -53,9 +53,9 @@ Both the helper and sharer must be able to reach these endpoints over port 443: 5. The sharer is prompted to confirm allowing the helper to share their desktop with the helper. -6. Quick Assist starts RDP control and connects to RDP relay services. +6. Quick Assist starts RDP control and connects to the RDP Relay service. -7. RDP shares the video to the helper over https (port 443) through RDP relay services to the helper's RDP control. Input is shared from the helper to the sharer through the RDP relay service. +7. RDP shares the video to the helper over https (port 443) through the RDP relay service to the helper's RDP control. Input is shared from the helper to the sharer through the RDP relay service. :::image type="content" source="images/quick-assist-flow.png" alt-text="Schematic flow of connections when a Quick Assist session is established"::: From 909bf9fe8eac48bf0f619216302106092ea37a80 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 17 Dec 2020 14:38:44 -0800 Subject: [PATCH 306/958] update spreadsheet --- .../downloads/mdatp-urls.xlsx | Bin 19968 -> 20092 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx b/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx index 37a6dacbe81bb80d18c3655023c7cab490bd7abf..de1ec91182b84f43093aeee46bb6ee02d8b3d2e2 100644 GIT binary patch delta 13780 zcmbt*WmKHa((T~x9^4&*y99Rz4NmYta0n9Q0fIXWuEBx^cMWdA9fCu!0KpwDLf(sojLZw=^AH)|s>;1bCC83l$e>mRd&C2cD+@5rAnPkQ?6{AlV zMGN@Mq$!1nfJt%SJ*WD9!VKGG0SB;_P%hKSnDI6v!MB zei(pfE`GK6m#D?YyTj`Q?)Selj*T>368y}YX2CwrQxN&CSaNG+j#0?u$JGE!pWI$% z29XG^+ydoahbjQ=$uahMy&^lbAXxA55Ux5`tD7% zowBvs@@Ev)X7>|C<6~zfnh6VGqfU+N;C(f0iXXrKG--Gd(OyAVH!G`H7R{PQ;`uM> zrySm`$hAi`Z%H(>5Lk_R&nv)r7;g!=8ni>uld1xm4OAVZ{RQ4-cpS!!J{01OOa34= zuf1Y{`QYmY^<+jq-uW7WzROmf;dO^M4m0%&pNQr4E^$iE6Vc*zF!!fLGMKs(@vSW> z2D1eW!m%lt2N-f_05YZk!-3g%9B_>3d_3y*@L8^*EffsK zEXIhXt7*xRr=uyZcW}^SY#z54IZyeqmA>lDmHLBswo(;U4N`j3$RHp|FK<0JdvA6k z{ArDaZav}kR^>1KNN?V@_O#YKEJm^L%*!|nJc17^1zY4$xxdH5bz)_csnOt=)kTBx zf!0{&2`WtsPmJ{n`0PvW1%nykA2VoH5#PoV$3AFGy$@5RnZq{}REKtij5BIdlXL3J z3A%UVQ`M%}l*_emA0T$!QJJ~$t7txC@47a;<3OT~2gyT)c)Afuif=0FP4k`1Wk&h4 zBbU-n*o1B$!A8t*g7fL{;#ux-2XRUiUNe+FlKF8{$z;klt+G=my}#A?B%*Uw9Wi1k zDJj*E>?&JsM&)H`aF+pteJ(n5PW<9OAhCq*S^x$FYD55mFrL%F!Vh3|q;<(W zxauI;>!@jGbZ&}$saYb%;4;_FG9_!C@Py6*W#Z@9pDQgHiO5gAX#rYx-B#B?*wyv$ z{aN9ZGBf$n;w2Q6_|(`Ry<)cNGEw8Rveqw$`eO)d%MNfx|%&oHBxs1~0YLX@N zva~SxV@xVfR2lswsvYZe3?7GRbg9#D#xJWC(sMEIKl-8?jBIs}$F+VF@@vFN1gpa1 z<_X4(9;Itnw;*?|sFT~#dP83Wg}kVvyGYS1O(oK7OYN*PNaFfJlgAr{_0oI9NcG1& z{OE%d_7GBni8>Pe(r$C0~HW%d6T9rEJlYyj}*33 zC>mC1BHk62-8g+ge>we#WI9MOq|aM)Au1Oo(4D0+d@M^~E0hHmdL?zT@wBk=geCIC z8)+q02Y)NDirBtqyfqFe*0$j(PuN?gfR}oA_YR%S&>f_6W@S{#aaRw0wl{pyB8!hb z1aBrMepp@$$QM4ER=LW*LeK-T(`ls9_Q>O(1b%|Bj0$%Te3BmIM*m`IIh|r|9C?gd z(7L7ENqg)25ncJa!KAa~rFnklP))!-g>ky^nRo1;Ej8$otu|Ib_~i4qJiBjklA|Rg zOwy`-g9(f1+zM?fUy?O{CS-lHyVlOU8v22l@#cKGh9K57W?pfQ-iZIB+-?)PeCxFC zEySWZ(kIh*`EB0QgyFA3KkO(p{WBx3V(s{CjPYL;9z-={$TI_GP^)w1W@3?c1Pq^u zMnYu^dBZlpQ~Rd9(aD+Q*1cUo(Pb6C>1-g?>r3O}k-LtAnzSU{<5)T-;~ie^Ye!w- z9^7S`X+Hk;Ooo=1~F}PtY&P zRnvwn2#q{O^lFC=4+PqZg+QT^0U3sdE=z(*-m4`K7;J6*ycdU>8O1$G)L8T1irel^ z$_5n5!tFe1X`8q-?pBj&(r_JbF<}e$SNN@Y(Z5W=hKlC*VgNU1+cz6?mySOVjU5mc zwlCI9@0u6Hj*L21(H{@Q$X7-X2>PdPFPt7)f#ntS$9fU;$I}zzr|s@z;9kDF6RhdQ!e3;BUwy5zq1-d+t0 z9j$nj?MGSeg&kUN5D3`QfveKvio5RH1DBJgryqR>BfZ%n8yzMmPen&xyNU~wmw#1? z9d%@~MGU;P|8alfP;Os7n@)!fJm$Y%xZbaPsAGl`4te$HA~{5-T(&MSznhK9YZs8X zC)oPbBpEsI$v!$JkGniikP}RAYa-!{8h^;I0#PwtR5Rb&X*}3 z+J{4$Z+1G8>9=ZNhFz`?e4p}A>zUFF36{x9DJ&WeMy#(scs2O2&1Z+Zl040!nd_i$ zln@0yU44?mn9+Tj1G;-RFPCn2&i2GEJCc`{uL?CdYEQOZ)n(>?XQO;N+36iF&-m0! z)bLnyd*gNG@u`_KQYQIq&|ElkjP7&9$k?X!)2Y~zT<~SN1xIa(#Yv5QYC#=Ip2Z0c zYkzlbQg3L9Xhin=R5X;h4*QtG5W^eBJnF36k0&+OJ^~r4)xe-D;Zqq`EsJmNwxhQ| zsv*ISMyp9xq!tXD@2uhIr071H9=_NCTS)T4b@PWJ-EWFF1hpAx?ET$?wkw>A%q9u!lUt1fb?^j*h0DMCcYF%OotzWx#1f+% z5TyH%&vi1^I{;B5pz&5Kqn`M+sE|xtT5w!Yq>v@5WM7*ZuDp$Dq(onUS)^p&XEXC& zSGxcui6Md@PBccvAWjrU<{(ZC#wLj-Bu1GWbE-Q0jE#PQhMg@VyjxzXWW`8aPgfUR zC2YPMA#=8Lf{5VNxbfYZJXkXj1iIkAL{vw5i?dz0a zsw?PDLt`+T;7rS^dX@<5j6{f}gP>G;@$+r292Fx6O9Dd@;WNk1qkjk~aG&u=kF*LA znj2+QqFCT=1p0t;2mX1#V6gRHZ5@9_L^Gc0DlRJ8%Px}Ard_7xeqAO#pAyA&0Zcpd z2*Z2N{PWB?52LY_y_Bsd+58QlWuRxFGA^mQ2d&wgNUhxy-YMd$0ht^I^bAbvpcXHCR za0-FZ4OG+lLJTlaJ52x}ddG-KN59SCjZaq=adIoQ;e+Z8Haj{!YUUGV?n{XximzAJ zt|R8<4APEYsSH!~)qB!ZFb;url3?$m_}f{`8^R!bfSgj2y_Ex&Y+M0%^k4*`{)Uov zE@yw(u)2$$xl_nPjknSqJ{j_Gmy-t;MCDT$#@ZPE;2^PzQc|;)Z9RW9l_L47(P(b@ zApyUW?#3)BCA4nOws#Jy15Vt^8gis_F`4qKjZ0jRJeTbe6hoc8AFu>E*H* zpNauPVh-LvW>pc*k{PqiqUpy~ayJr0$PPUT{I0#pzFuJi?JQf1FBTr%`bm>mRG*)m z>IS4D^k=iMDE=I!mZ}UM917=5sG8Rie(waxCBZ7j@VA4__ruH(tHiyRI7N@myA~$< z=dF-N$(}8Aa)`lfXTfRSI0Nh8*I${%({`?!2|s_wA7T~TN7pM0tdO0t%9z7v!}ySf z{c_@RZa(wd4ZlK1kQfy4<4g$q3B%wd$KaS--?5(IfZvSanZ%|VYKF~^Pa<6;3IzG( zxQwXvBdNH`@R0amM0NXvPwU$_aq)-H_;gb#3ZMcJ19SC{g%gmLz1%Yz!OQTzVJAJ7%S`?ddPgPb{(!vDg~Bgj z(XQzm)S%6t-ZBB!nrIX#9Nir?Ah^ranZ$^!#qJ5)r?>ZaG=#o~1BnDBn#wYpv*&dV zDwK-B4-X<}%79eHtMDN(opVJ|j|oRh1e{{e2`_EnRv@7S3#N3SsC39_aqB3N76I;P z1djv%hBSgJPAG+<>oebA=ajuYf3u;nOeC{ICsKyK_!$@LHi0l0i57r&+~DeD=lEj? z7x)Llm$>9&!Jy$;BOBJumD7Sh0z;P{Pw%ayPBltbmrTA-(6cIn)FiPfBN8`&5 zL94h9+VJln7!>QpV)oNGvhWK7GCn16cuk57R_S?X2u^xIra-b-L18RuKf3|A4zvs# z00AS-K=+*d!l3m0EQQ|;8x1FmRiaw=E&3LxhadI}^Z&ln7=O zH*N=iEVaZLcQlpw_)N!_2DHx&kp4En_QPxkb2V9L2TLS^Xwgv;!ARm6?`bLiMGfFD zH?UtT6v6u85O5hGiHC|S>0W3*)1ujaW7tfB7WCh=2=8LZ$pyX8LK=z^nxh~_J-ADe z;VrI*C7mYjcydRey0kz4zuYfvk^okFwnL&d*ALSl@$@qAnc4o?dhf8XnUHsf3H$*j ztWn z+;M}dhZz|WE0ls9S1q`Us?mO9E-8>6d;FPaB5~p*lA&<9q2q1YL?EZ|HBB0NLvz_B9U+QVH$AEi~*UDSBZ$KYo_sM%9NeRPGPKbaNPT&#|p3 zcoFaAXinS`^7l^pENfB+2xvR^>1mo`6w%MpFVA=od8diOQy zKIk-v6E`WS6rC%cHb>8|y_Gg1w)G9w8U3@)tNl{ldk1Kcqmc@=5c?p)X6#naI_d>F zFT+a6ujZl#x#_OKp2Y?_`}FRpjtGpAhi&aLE9b6VzHyQ21MDOe#!;TYL)!7TmW0 zv`$f=0_gTMs6;?aJuC2WYgMi1zzoZ1+H)CzBGb{qr{m)BmNAg}cLn{3L00Ph; zN@%PtQl;lH1su?|&nSC9gM4nN#&JM@*~QY8A7lJ1(8h<5wK=T9k%~=6ih%QjA@D9B z8ipNW3C*w85%*n}*6|cJT7FH(5trkx@&5DxN~oidv2&YRr8MRDsKYt5G{M3)5WNkLpb&W|vHpnv#u?S=ufC%D#{Z{N zNL!zsLfP3#tzrPXH~Ln&v<7i&EzImiC7u32U=c7>3<4WJ%Z7@>?ybFe8VQ}uX@g3x zquoX?Q#zJJlH^4lV?JjCH2fYfX+$b40ZS!^P=OkBB+TUG(U7#ZhSk5si4%`w`j1-k zU&{x4MtIKTpPkfF6alV(o`pRS79ocJBvoAXg74cX*MFIMBHf5}c~`z(`#XBxb5-uF z2z6V=7loaFW^UlEvEe;jsC!Mrn?+#wS1GKDN*vlVoq%kP7SZGN&lPYf=NuP!O~b0Q z!4LOubdwv4W%(Yr2Fk6MhT!1wzq(yq2;9Tv_?R>sKKp2f&FF7)x%k&pqB0#+?mnt4 z#6H;YPK&LS=pkJL-^w`gvA-fsBf|9He0@X36|A@Y;{RA~qFbGFYal=xfxg+ECnJgd zx5bA{!{L!K^M#{7&~;`iqX59z{l4a!HF>bFTcA|9WA8q zWL!4(%E+3?Yy$-bv}%hB=4V$riY~2E?;S7{|CvmxO|JB-tKun+SXVqab00csL`8Si z4i8l*7yFMvL1*GDn!j7o0yX`G&V1 z5jmjkwvOq=-qYxr=R+CgCT6=epD6#8MbNB%6a7`$Wexe&!$iGh8i;N#+^evi1zueui5Y65v*1Xit{MG8|5BvHe9i{STTa zi)l7x%4oIea!N%g_4?4x758hV8|UvYHIcJ!K~jKqazjb-?y9QL@+jSllD>@lMkR4+ zA;V3UX;$KR27KBQhE@F0ZijfnMQ)AdZ{287rNy7 z`f)9nF%-Qu=<52jPV=g>2Df@a-MVk(5y@sjlU3m zto1&yEfj+*raq_(n~8WAid9B-o+c6{l}^YL-zen`H7K@JKx&9Z|IaWzkIleVjPQ8* z(XIVxOs0XJg?5pa;Jtv7*e!j`jxR!D$CE%zc_`#>jwiHUITh95h9IlUu56;?adfp# z(Q3IACAbH1;~HI|G@qTRxI2XX54P$V8}S#5|AHNsCE~`e;0l-CZiUE7+X6oHF$#YP zw$&CRn_1wY85_{*RUunuZ@lWi;myW4yxcM^8cN> z1wurR&D5BklcnJpvs`2K;-m9SCifBpkMJv0bMrs=n@@J0#H$R1|I6nzFFr5i*Nhd6 zKN8XuoWi0~YW^w4M5EH|+@BP$(qM$Opl^iu4^I>(72T8W7nQBHk*S@^0sA8r}?_Q*UYGj(w8Od;f99C`Q zl4fO-c9hO8Me&!&J~SRB4$oF;n^y(JvCrI<#c#Dm1y9F+>_wc4AgGJp`T!#5#x7_( zI?QkjD@)@akt~0fzOtCWXSq<_2^ZO}{Q%G?cq!Y+w_uyG9Q^^MM+s#$g^6zhYS-;W?dDZUf`hE@n^WR;?k1kPu%zn0EkAd-WRRyILuZ_ zCIhqJk3nvG9fG2E4TX0X)(Mi;k@NgMPb{$6p7-riB-F9bz+23^Im&4`yDsH*Qs8zw0XsFRUAYHqzEZ zjKc0u?yn4l@vc{|6ng!4?ivhFoU7J9u8RP67=_Dpe(1;U&ufw0`y9*=Cq2MtMWFmzQh(I+SQGQl$UO>0*b}^;TaZx%vsG9cnpT3N}UIHOAr-s=B`@D zl^Mst#jg|WxO+a0nDG*vh+3qwNz*76!9UpyyL?nr+~jp;Olb!6+o%MDd*1fB@yA|j9%-TwP z;L9dE-P9ZYgUv_!C-zq{+9d6jM2XZ3f)Y5w87AaSn`&y}Vgf=X=`Q`#o9dyNo_}DE zPsAmv0(-x5k|2k`q*u{|jYFH0TmUU#o*jxkBOZq__S=Zu;0^_=-dWe|U5Ab9)RPhI z?m(nwN)F^IIZ()x%Fu{Zz-><9hQ}6jTNJoruGgR77FOWI$U5$k>3Gw{l?Y)poS#2y z6LAk-)N^+;SWeCf3#nhx{CGyLq1GVMTZM--CZAsr9Jpq=9((=vHSXYNY4|59fu^ zaD2)9Xsh%Gd}0-J>juPD*FT~nKfViV`-<`QK{w^g+bXLmB%9xGhlfP9j6S?{gqrud zIj;b)qTQ6$_}B9VLiOT_Q~<4Hm>kzxAAq+T%8sIJj29!;+`$NM`zH38cYCZaRv~KC z7Mv+oll@-62W>Gyj99YdtQ&sjhPd|Xxs&?^LTt_U3bc~55R;JEPoBKC8t^EcOj1YM z@6$EE^*7YUo-ID@Q-#`LdRk*j^QGw)>%}WM#fr6uwL>#+e5YgI*axky{eqP_8yuNbPa=fUGtv0j{^VZqqQh1K^ z{+j%6R@E5O0tiS#gcDfja3IhyWQTuJSqnQ)%)RNDmC&Pd z{Jk05+av7~|3x*^7_g={C5tcQpp<~YcG}3T!h{GJsDPtvkz%&`%k(ESP-aZ>`>li=5(@=Lrd3CMEctIwdIS^X)UcWS>wo z>I%}cYqF8=*TUdONS)1dw%BU2&eY24SruNc=f*} zneiwMtH&o$513biJj`5ta5&*GXUzv1G4`1WZt?$6f7`E>#74yARgpEjF|I_qC*`Dk z7va7r+DnbU2}X8W$(zTS2FTv?6G-1uTw|X;>uT=f^XvD+1O8gMzXXGnSpE zes)FsAV(Y~9Ms~nhG2S#<4TCNTm%j4$3#=(B(V@z+~Ema=r9A#r2u)S$xVP>bV|APdmrjs)wZ*Q(%@>EwG ze$d4KQnT;%I!fUt*jPm+-70QsiY4Dpa9u(NXO_+89m}G;rHL zTO*g8J#7|L3lUQ;jFtTI^qY6yWaGu~rkzVO%92k$rqTt#pUGx~%BIBIq(=%wWh0cS z7I0x&Pu`&W0uN&O-AdXF4k;|}o7jIJNb&rL5VThkSrlYV_24<}8YQNC4x z{b~?0-DH$I?uY9gId1R+Pj_&xGnp^Z`*3|{%;z}KTkEv$fp_=3B~ziD>84~0B_mWU zf5K?N_;9G*7$a-J7KoBlY7}P}jp302K9sr_IR^<7)a-+bQs);l@ho#$HoIPB+0 z#Ok{y9^rV}rN&2FWZ|BqjyR=QhhjTW6LM^y=J3gdr|ihBM(DAYTzKrig zDBfw73(%jP6s@4WwTMb?Nz)?FD*tB=D*Q=^yobziJ=Bh7$fOPCGo z@hZG?qaY$_tfRPx3~_K!??K);1x#a5>+PGcAZe+Q7WR%ym@f7=%u^j>A=~X$j@Q9C z+3khi@NT`0_UCz?{-aBq`j4xJ7q`)Bd`C~r=GJ6cvF=6Kw3Ly{wMX%o)i|EK3#j)~ z)uYlu63E8e?ohv}+zMB?MVG#+9q^&nSn@cP&f4())?4L0X!|}7BpOSHCd}{KscIZIzdApI)^w)&C0=R5;h&5!2WRYAX9HEt7$uU z*iEGy#FarbdXb*K`d0o2ewR-1j9n?QL0t+sCptfErM_?VX{p_wFmp6bKf4L5+8`?$dPJda~k&=AC*Hy?L;w}a5U^@ zw~tj98&4Z5m=x+X%ej2p*&m{6uV=mr2fATSZE#NPlVev3nMhJ=AP`q^?f_zeS+BB2 zg*lA!!_OzHkMIs&tG^+fZP|ZRw*+V05%rgUKJo%qoEn=g$3!yVDprmf*e$9N$dbgC z6%)S+Q}5GY4e7=h1m01!D#Ff3EIg(Xy>&0??F6XyEcFrse4~htb>J*hJvF z_-~jbTN%CZQKF0o7Oy4+hk?Z(q2#IDRHiC5a4{BAJ6$4C^iRWzH^EOR$Kc%!2K1!# zkRf$b1@%v(H40duq&H-II7(#{xEr5Oepoj)qNYwPR-wTpg*x^n)*`uFEAQ#3&e6EB z{3H(Rj1cNWJ0F*~aiwBC{~U#dMOTCVl!|Dnf%VHRY?H?;>c%zv_$P3Lkr-simfSw_ z(Z&Z7v)4YDhKJsmfz&GjYg0~QE%<6#lD|MIMGQW{gHSliS#}_imU_G?hd|S(ilPGf zo%*A8Ms;ftu0ZyPAts9Px^1Z@VVEloOE*mAF%^E8qh+Q(>YiMu?{z!gM0{e{NcW1n zlZe+^xaynGDcqlUsapUi_|-}Sn?cSH5;C)hgEg8kx zG~LFct?a_UgEMF<9r9Z~Mc7)x#LWr89fOqk=*Oxj=cl^9&jmjh4aL0~md-eJn7ov* zuJbhS_$HW=N+u8a5X=}fEHIc!Zo=%Sy={cgv}2}Jg{1y4U?l@H0lio9eoF4KMlEx1 zJ1Qe~CU!8Ig#LsXUH3wJqC0%_Z@u<6+$tXDT4q9=dPg*KHU~q`jJ+i;&=ebL=qx35 zE+K<>q+_Kfgl#UX@a{UgHC71yrX0`2GGCtymmaI%S>dQ%nbx;GTobG~kk_@&NCMZr zEc2De3)jAQB*PFuJti9jWP_AeZ3ei7U)$bHNX?=jgtyu{YIjgw!|F7+&lE(_y!s;` ztACOl3QgOJ|IPvOw7rF^*MImO(@8Cuf@G(l6Nq;9{GcPXFjwWk@%gfNh5D@;0t&a7 zsTMm!sZciZszBNO?}KG7;&S?dG4}*RV)%Voh4w6DU65L#8^(Z)T+_S0EQu)>* z?EI7upoe9kVJ8!!=@slQB68W`{BW&0hLR|y&o8?W6??d!$ecacsusU%b=C)!I?|$T zr3{UI0+;Ku$(+8lDeXlLztB2O=JmjZGzq@7a9I~=pd__vQij_;HFj=PtLrv-bnluy z=gSVU+jXdK>R2dWQ{O1Im!7f?Qq^!haNQ?LWr*(AF17T(NKwfcFs_wzMc&7ujD z3RwYyEuC;~?Or;Ld^i1={G$mRwPa>8%78su#MoyUt%+dE8>p`sAw+v7U=Hp5&@Upz zWf`Nd7tT63&vo$LBNe#>f?!_VHNi+l{AoYfA@g4XhNBmY;KwJ5y+A*)4+x-Vhc3(sAUJr_q3zY_~ zRSB^nI0oTBPPz$;wj%f@4dC_74;#~nH@f%EMx>OK+3HrfqwTIeH|H%XGppy`ICm9+ zf8p*T*s;O8U*Y+KG~f27Wmm$#&-p>&*7Xh*z+_>gP=56_x_!g`z8nVWx8Uz(L=E3n zCxx!|wkNH=@6#+3{LrtE7M6IrQ3hQI58p9S>4bk76xp!mgJ_IWWoIza(XDVxV#ut* z&v>5(mpOgg(Cx2`5b~q)6|7IIwJ+%|hyVDY2L3xI(s&&#{+L<)$q{1X zE1NW^Q{q81^}F!Nb$P)@QI@4vq|izB?%hz@h#(|CG4Z+R^`qiR9m2rK?|)XK`+Y63 zlI`j2j3goguc*6+UB+19d1eD<*Kj6G1&tm2^g2i=KcuTMZT zmo=rdyz`&^m4y)AME^Sb$#k6G4CDVtI0U<>89Sp$YhEhYCF`pxZPzPDdo+QQ5&;eP zawq?LoI92f=P=2tx=y6kPpJYEcefFPqENz)Ig>bVKT99GvXD_|s(HFyScVRR4kmy{ zTs2Kf%mO^*{o&KwFPYjO1MW8AhDd+$ku0g;awBN4Vb~G-ux79!r*W0E9WmIiVA|e& zF8Ni-Uo<1-BAM>Y60-wBW4(35uGWSzavbErhT6e;v)z)iSY{EuRM*7uK0eumy^`xo z_KifV&BIiuea92u^I_1ZCm7JnS!u{HC2~!p;43KPydQVYF;E~7K1@yg8ww~uec1l_ zcxWrZt{7tL@HF)|m@aL<`T<5L?~ro+^Vj6i-!e91o=8%Gb zg~>y2p;ruR^QIxe(Ch@XVm3%V1fsTtsW=ve*2fzvQ;mfy$k+mT1eB|W>ig^r$!sMU#knfau$mHpU5y#Jg3x}#fks^lzVwF|9 zU!w*e%iV`CT=5Xe;iOF}Z7Lej@kcJ_O&?O}2`O|k{~|Kempf1ljgM@ z;q4RkczdnTf+DK+wLUatLXthJ3IkE*;fO;hr2MmaR9c?UtK9A|MVIrQ>z*lx1~wQJ zz?qJ0w4!cUtDvIpaq-lUYkw!~^6#XzW>jVu8Zt`}(^0hf2NB8LzRu@N0GTjJVg+6L*K$dWfF_i{j{t?^6)Nu=Ub4TdAh45_ zXZVnJ!c>61L!J!b%W|R^#Swkh8D)4)fPXQSMJdyQR)ww?N#3iz0H=+j#itbv`p&QG zx%-JHpyM-AWBYcJbi>o%E$!%soV0KGmAzY#51M`SzOHr%QU`@|N7IU0>tv8&((CWeW*<;S9# zm3(XQTf^OMIwSviDqG%*As{^NkMvIVK@PVSLRuP=j%!eYL_il3`>!%KdVX^pT zG&}%(D6v%>FA25jH@2qXO3H;XZtGI`_&eS$M2Ct4-;PovAe+R^w?>J}*{4D|tp~Hz z@Cnn1tYIB)5oKgqg1{R=w%5spPl{5!D14^h*!M(^Owi+U6CJM2Us%Lq?@;+;Xy;7J zZi{&U`P62)qYhFO3mvYLHQEr#$50bJ!cKsOo$HFr@Mk+(B3g^&)a4)($s!__x_HKb z1K((`+40O&8nWa!=@dtQ{z5{F+INVh)jdsS_y?wCD|yFRISW%|gB@%1@HD8B=cAPg zxV7Wx6Y6h}Wf;v91~BQvxhzu#wwfgC!yg%4D>M+ZKBGzsN~GitStw92he@^4pl$>6 zYMM!1jht`$lH8QGV#a%szW>;h6dSv3ivObFsEHX*J*pr_wF%cnG)mG9{uUW^Ytgb2 z(i|0WjB$k%owfO$FjGJeN4A&|9QP)<$sBoGQcuCrCef^H+B6A*+iv{vLbPj$7N;of z^N`~EJ> zhZslA!1SgG*FZuIZ^Ak7Ubo@k&m=u8eS~?6kPc=z63egNzAyp0l%u9Jb>>1Ai_p!V zU7GKsIqmtKQ{$SM5PRY>6f^YI_4Fc7DJ zg4D~S!~MPd0~wSTCjNVqap0 z$^R_L3W7jr|Enu;R!Es5Imy3&w}YN7_|Jzi7X*_FAM&8c1nnaPVN~KF`FAY`fw2A) z3Q87+=qOW@{JWZfK$!mvU?>JjRu;wycmo2NJD7o;9UNWQ%|5!gI@m!@hE)d zpU*G)|JBe<3bH1|$nxJVdQsZZXTP&N-^lvkX2VKD#+1aNVdWuM%A~k(@Gre#K0kS3 LL7>+PFaP}?vZTi` delta 13647 zcmZ8|1ymf{wk_`NZUF+p-3czCad)=_hsL3TyL*t}?j*Pbhv4q+?hq_|l5_7n|Gn%I2cPZ^M(Ga#{*7an6@Fi9ZAC_zK zNCUa@W8p-V&13NvxnH>FsnLLzFO?3g^-mqkUUAp{P z+1uf56RT-;A$43h>$LYRp{|x!r5(?uN0Hfvf2r`v zD5_eNe_|`g4=T0yu#f12)b$k{R(aZYQ2MGr5t8{OPJJ?KvHPAr562VG`^0kO6*=ZV zmVXRm>?(E+Ta`UzVMP&OvHTwMNO>|aY63=2>kwyYI*OX>Ffjm_O!Q{@Mf;Kq6N^tf zgDh91e+?N=nm099$5M7c399tp0F#~UN5w-|PbxU6*kRcALX!nch9Zh=Zm|=>)yug% zy|7PFK4S3QV(+qtoDMD+vipDa>ay*GMd zix5vyAUJadQTsBcIeM>s9kCA0qK51mMlV zVv-V0&-yB#H6ijd#iYo`j4vXB>rCacK}=#HCrB$+Iz^EP2~Wi!Si>ENWw26KGxuQX zx+C#k92(p$-8HUc=GC?F@x6cF6x0iYgoPjrDJ^WKEyF+8g@>U7;?ku4dg;0>jiWu% z>!@@CJ@Ao`P9*_JRzqpZs)?cQouu{+1MZ|qBtQJIfR#~LA&ZBg1G%fE^W1o>)zclG zPxYxxB~!DD8PeBt@g7Y^fLp3nS&J!5Lp-@mRcD)@wzebk6FG-Ovmgy34`QYmS0vOK zI@QD@-IN=|AMSt|<@z&jXb6Z3cnApeS4VKSVR5r}`eb5n|B2b%)}~xtS8byqxGn1LYs`Q&r_s%ZlWK`imX)#SF#g74kfM3>+VhkGccWwTYS!97;Yv`mF zHVyB-bO8mp{%3oGuu6>^VN2XNP}h)S#CWhFTGvyLI$@3#^9*ec6BBBm(M4TB7e@(v?8`7zI0?p54ll$& zdTwn0tj+o^O1WP~a#tB_ptQB^bwwP9j>Hd;GZ`0p*9R%QpXcwJ{ldH5`ZLF9m|GZ2 zWeG7Vc>XZLAVvVn>O9Hw*2E%&tVT5jlLdhk%e_)O*sIZxsM{Zg{V!7$i$G9lpxU}b+k`RHMR3XB<+xT zqPe|U)Z-35F@Lqxr_P(~^%Pi{n7x7Wh2OUh+NaF7vM;QJc}Hf)J()LWIQBmtKaiAU ztdNy7KKV8^3#!~v>94Grn^HbcF6na*^Uua|?VKMQ{`IVcyANn}(@2a^Xy1<*fnpp8 zh|&ZI2m*+N968(s2RT?EKhw~DNhY~>4S)WOVqd7fSw&!;QDnfJ{TNC1phZC1xb&CFSnrp8O2(J-uB+i%B1;(bRC~ zTfQcb>7Q#zNeQ{x+Vuc8&bQea{FH7#z8xzwy&rp?8|pstt@Gryy?%1xYi$0aCtOv} z;-kB9B3#&aI+Swa>D-_T0IRJewsFt9)?mgxzl5LmHlkX-dt_Z z-pSPMul^FNjys^$x8>=fcBxAEebU(Doy|9$JKwdG7vjVh^4abT7or1?men(~7MA{q z+RK7Wj`z<;Lq|h1%_Ti!?@K}4&CB+_HVmKlR07`f6xb|J6Js+M~;-P(89 zliNMKw5J14tb`T;Jl*$Zzb!a3(btA6g_qk1ikg(TERchN1Hb@xuKD}q8R*L&U8 z9d}hLr}qsvrMY~>0xwUx-y@O>Ka}4djsbYEN)z9%uzGn9ujkGi?*cD#Ff zuQ6I(vr-P@xmf}*`oC@J+X+CG{X47JzLhj5Q;j={Hhcv7px^-QxnP>9so%}RqDZD54Ze?4C&n?fVmQ{kE6Iu2*!0M#Ybq(rGAJ2#Y zo+_uhj-;V2$Clr>j+TUUUaQ5+7jx>p=<0*%zV{!JSH(+yy8}0;m(ookRU5yoNO$CB zdD+(-hob$?8tbAjdp~_d@#)X_6zSdH1~%KFFQ;d}W%`OU)YHI-Gc?`6h&wdgupPd$ z*nksGgUwRmSM=oQYg>0!=A~_7KcCVFggu`>m`on~07!uPcfqbkY=ThB%L&gX*>Iuk zdbP(fkl>KOqtX4^RRYdqzg}AKyy$7tI}`MKGo~HKW5L*YalG#Z{HGd^FDgh)I7sva z3>gXTF34c0}p9uo=A~2<6xm(j25l`-Hez%!GAGF67yN6#XHc(CzT3*jNkRL0T6YF0C zwMEA=iRJiuAqOo*3~Ad5$9ZWX5|g#BSAuYx58MSGJzQ^+GP z&}s&}Cy9#nSwt^Cg^at3T_)+xL==sPsff(8sURm~fY)(bx^ z&1JJ%mBqdt@>A-}=8aF*1{k)a4w&RZr*?hw-+%<(xmTNcX3I+&*fD_Jtp_y#zY0Aq z90JZPjPg^fuIy;2vX73~Dan(Qs;9{_O@3Dr+mwg(Y~Rb7(BOhEFVSh1!3uN0x%+%C z*XCRIA8A|-5W2R(3Xu#M!r8%h>_ZWvw(R0aLwtS& zSXDqM0#rZ~a(;bL!vxCwiD zXj#GKnf$ue+5#l$k!IwT^1%mm_Yue4%5<%+bh6g!z9TR1DG6$4@5jd+ULF>|Ww{U4=4 zy%pjj?8|>u+7HAc+TxA2;#!thn{_y5HRi?4LF{uHP0ZiU|LbQN*W+dc*k67C(~xgT zzGMeK<|>%!zN%LYy8uJK|5Y$Q&a2?el;~@mZ8jww{(~IZd!8Sdzy&V$mu!_I$0+fH zFz+MXbd)LONql}U$z>h?&gJjo4au=Z|CpR5b$4nc3@vaH`g!X$Ug+tblTu=*#nC0? z$RLy1qlVl4#uik_mjr&sC$=g>;Xl1PQH(!>5NC-neD>qm+atjqc?v{LUd~RD)geY* zJ6m>~FIGXJni5w2{HG?lMNW2=)-*GpD z^eeVRV$YECQ&^~=NUqA#3>?`l#7_h5G!*^fPhe^hcmEXssJ*A6kz4JoxLr(eI6{oy zs}+&CMw)b?rFJn?vmM}5yU#<*04bxdhBS-aO3|rh{25H<1V@+DTB7QOq=JG23n+L> zv4s!P86AGc9;H+2_EI({E(Zl~%o}$(l)ptOy3N>-q3QR|5D<`gRRiwQUn)H}({pWIq$DBT;8{>;KkZ&9RI`)X|JKQN=KSpBK*N# zAxxjI4+x5-qqK1q;A|!U3KC>~{5jZD>|F`c?teMV$;kQ?Y2t*M%1;;Kj5>WzH>4+? zj-nbpz@*4 z*=dqDhy^R;%NFt*Nw4wDf%jAD&tb7wzQYC>U)c^}kFY2!yrL@jWAW>1`mT#UxTZ_R zA!lW;3W~0nMhdA5E*WP0!%Ag0!&|DlA6lcvQHdFe{~=I2(v%%Q{=*6f^0Wi`r%O}4 zy+yPA5#s`ksj$WxD6k$sd*8sIYOF~%oy(+ngd@o6H5+9*SiNQ=QbHZ8S3}1vfkg^J zw*l8W3LnYP*dKBlGyVzQ(sE3Fb%u|OD~=#L$b>QJ>%4}jk{u3lKKsd%SNg;0D zCR>U_;f=B@b?YkC#`*UPv9VY44;9~CD9->o8vod7H$C zP4VcvFc&+p`w^}B#|tqC8ViD19SxK&rNUqj120_Qu{~7xy#3=%3Egu)7f7R+(wGeN zgl)e8og#js3zZ~v-UDZd{cn?~3O zhlG5*R3xV!4i~+J={P7*ObQy=W~UrU#pxdxl=ReMRqle4Qr?5ui%9!) zf2T$_9q#Y-^yxvyt@jN}F~9~o{{<7%LU(wbePB0`kf8EM+tiZ@eqr$_tYOUu=y3?} z&;8VQV$I^vVxEq(ML)h%v{IfPX@Jg1xR=6mI_&ojutyj1$6m|jOf8f1r(Q+o#QzpI6^3=a*As>wBryb`4k8@JC2W9_w zH4fH+&nPbQPgFE#$lWKT~tOLs^b@7OlxtqLFy8NGr6(kFqS~^w@tK=pw zq(F3E9L08@r(r7uSZFpiGGwg4+iSvITjhu<$^XreVb{!FL{sM7IJC-cn@nqHy=N6M zJLZhRh*>qb=+9BCg3O4X(piH4#7;4)w!y4E&IQ&W+36^EWJJ5{ItD^_qYPH03XBS* z1vM6>MLyxU_5!V_m52Ht;8pMUH z5zVCbd{T~Onfen4{_?|O3=)jxgXWY;G+EON|1mPgNv{)Y091vVFhtc7-vkf3r3!EF zBaHDp67#j)(&HHH6T8AdTF_ysPVx$k&&v3las8><7G588i4~mf&|)jqDepwvf#($M zC}6gO=<#kWS<4{7{5h6$pY$lPy^`vSXM*fqs_ zDji8}R`nlOmudfog~o8VxBHB3N5V<5z{s1kfJsnVYehBN_v-OQFaMmh{l^+y?9O5# zO9B;bZfv_#2I|*P(io2ZrtKsPptrsIY-H8O*I6vj#QKe>c5ccd0TZPF>%aJbOk){E zQL?Rf!jaeQUWL~yDB_<+5v6QD`sJWfi(}Ywr`fP^zDk!C=#KqaTjCr{DFo{gS@w%{ zlK3ob(wzgPLf|dI_Y&A(pT-Bg&E3q)NJXMW83}O)NnRr&ZU6|a{^88jfqmz_N})Mg z=})67S9Ao4ymNWpxIl8I(LeL(R#jG&-cfmL*uWC9I<+fzA6dox^VX^3`9bT&ceyQV z+6n$ws{onX*i8o+Pg%%F`-7&3*>mj@=@F1vS9$omp3fIJIk{aL8FB?)f=Yt zz^AMGJ2MjW?mbg10WVryeCxngS9m_g0+YchaG>w+)CSK1Af)Brp z-7%cXxFfCM5lX_xrH*XYo5St2#ME@n0LCBz21@MQ4V6m$Bw49s4<)P?-=Zlnc9*Ie z2HYiPuvP`HIftklq8u19j**t=sSI^&IxTrz+5s_cNq;t%Y7nAkoo$YV4~Gwt)LXkq zEM5}jO4u`1X^(DWEJV?PjP~WXMSh?veWKO@ckD{n)yegv-5Sj|>Xp$K%E%CXVDNTX z@CWiw;42LaqxNrDyjJX4CSzKCr|PXCglAO$gVs4xuZq(r>)Ec~Hj{@T#vMCj{RzHq zi&vgsp8zXPJty}r3yo;AGK8qM&grW-0is>l>xjC5W_~x25Od)C7h*%B3^WRy2tux; z4GiAng~VRRz}?S|(_b?_jzS(J1H(sG96;9GInM#(Lin-Cvp$J1NBgRk7HcDE*D}Zv zC7FezkWP&TWfe`VyMPJ~;mHllE*W19mv6Tp+VD_5&_8?S;KqyB9SUWIo+*BYiH9>AXIyI6+-KN z+SsgZ!$km-7IT)-$Q@z2CkFL(o=Gc))V>5Go!v&y#r z+T=Hn;V2L>M5=GI>$V}>kR^9bn188lI$bOEdXnvcJ;xFpME%By{_bK+jV&hZ%7NsvCuxE` zvk;s#JzNjDJW?+o_#AGVUOZZV;78OZgR*W{Z%aj@X0s##u78xbCH}GUIwa8idn~js zN^Hj+?7*{j&#R7$Rz@5hrT(eyUf5%Cebv{)iyODHyq*HM<1LvE}y04OL zD?a)G!KaViW@cDq1!Qq>W7!3|G~ z2PzFB1AqjnWS;`ESamKhhYPG*YAvtM7fSELrtnjohJ)}3d4De1aajBo%dY=)o>T7{ zM(AuV;b=+WYGJwP<5-rUZq3{1<2P+~j6tL2N(zB!zyJ+|B$nQLqD|oTZZ6fQum&IaAZj;Oe$z*^8P&wuAf)@B>vjXdcc@aL3T=*f2DI z@c#@m0}gGAh16Vjxt~vn&Db|Ea|u>8v=1@moD-4uHfyI2^zMC^+yvy&eNh|WCBe*8 z+~&$6I$4Bu?5NvE+_5}w8lhlp8)obp1Xc@oP&@D*WXT`0|~kd(Cf}Xx68S7;xlI^rxlkF^~8tHy)II3l(1*s;IKh zZOAjE)-4*&R&Qf`E*Mg0K1A|pvA>f)hBl6ck0yAs!sn_dXm8o=5qgm95_F@^TxCBx zpGnhUlPztO&v+7-j#KJ0pN7AP;G#Pazm5Gdr(>(hzgypjNY^C(R`nV48&9fZBYa9s zHc%h&S|s0LDc&w^+wswCIXRxG;)>dXE*GDH`CO*dWb_TEf{CB(Eyp+AajL;JyGRqm z)(*vAuQl1K$s_-q_>NrJGLO((c?3hkRKO62^nG>70g9z?)ZCN}DL>tNwB|Z!7maNq z+1?I+619bU|IWwwb1SR{7K(36=ru6)xxk`=H=IgR1fE8hSdxtvo)z?0Z^WwZX1|s9 zZ)WBFJ#|#F6l{!<0o$AtdZdv4j@MR-Fd(BW%Q_tMlcqQe-+>#Uu?89@a?*Z4&eCh zvv8jEPW7a}DlE=0X<(DUgeZVrC1|O0(cksmN;nuRLzSuw&rfJfLd}}`E&oQY4h`{y zjBklr+V)rhIog~bpVW3Q^cS|{PF^0xt$Mu-o%$sK&fy1^lFr8{VXtw^nY^f=cDk+o zH?!{(Kv(XriX1-Zs_fvpxXsNAQQ(%3A37|E%){aK#Se{xk#&{TyXJ%8{9a9oR{N?S z2O+WnxZuQnmIaK7(oP{d18+&}Q4$1a9WOA4PRB_ByC!9&up3^!^J#A=U8lYN{3@mW zPN)6jy$(QpecO`xXIQ#}oDupyf5KqNaAmRG5G_mF7C=oiLW)^oY2yK^GLSw&mcd3& zL)|jY7u_leMm!0KaT-)~)+6GU#l)Je{hAa}C1@?NJ-;506@3J8Ri@EX?7C?g)|3{5pq-XY z7umEx<1W+JVaix6h(G?L<64>z@L1-xWIXGLd!fbPxVC_>bnpD@O3`hWA5Po+Oh9gL za?MMKm|3#RHd{64d? zGjvQa`!>*{*9fFq*QD;F#K6u6ROiH%KueXE-mi(VpeUwf5v~=4yVz;J1m6(YiV|=) z9=w#5W@p?XPT2+g_IiKDwY*%r2e~UYXY_Jns&3QOeK?+{wonG2tAJHenwJw6AQ3F3 z`@HF|^tR1~#*5%Y-wP=aaJ-ZZ=0&+>oFy_uD3rF&G}pK2i2)H|vK1|S>1WUN*bwdW ze0(+_z5jYn8^j#FNwG$iQIMZley#A#6||=V=e4ZDdV!R;J|AhR(9L5$5IGxdi(4%b zC|8*;pW4k+VA?hxyHMj`<>nO29K8qM(w8ZC&%;cKyew+3dzwpvj0E*Vs>v#C~3G z7#}&(*(+6zi+jwO+&NQ+{F1POXRUhD`LaNXQ6dmGJug$CD27#m9uqIbPaY&?ScF2^ zw8H2oa@A+RiPEb>C&5IqV?R=|sH>yAzfcKV$NF)8Z%&OMOpuDP8?xG-3NOsTLX{#| zF!wWgpBt@?SlToQ_>f|Xu9YR9GYb15vfaXUFw2U+>7B`b-~lRpX_IApFb+wN-Kji8`$NO8sY&weH)+OVNB{LuU+cN z%K_v#0B~o+P)d>H-k6oS%w9^%Ijyilne` zmtMm0jGeSHX!u62<*ej`wM-M^#zzk&4lO+PnLc7WdC9Z$`|YU{4Gr88Q!1sBNcJH~ zz_FM$Mn2`6%d;4ML3A7yi#XI3mBmdB=Bt+&6daa$Dy5%TvK}v@Sk0D|-NPC5=dNeCXIPaz&YGya4A381xaBBi+r|pd9J~~(XS>L1_T<;8?-;(a z5oH5{nfES=@-A(0sUE10+K6YHyfPp(G)}0!eUWu}sTtyq-#fd@wO`4z7Th`DDRp9p zam|>gWZj@iiUzqymn!U ze2p5l-1OO*^N<6Y3X)B$AimzU6n5!WXmneAQaI*rI;$##Dt@EuJGcGWRn=KLSXX;_ z@UX3Qu7>jnYFox8nv!6T&2fI5D5v{o>;M;x=$Kg{6^VcP;0Cbiw5FRI@_Mk_W2=V^M(2>2k+~V_l_+ z2`RoHhQ-)%{*?ox-?>ngfG0@>=-cN>;rywwyr(#Qn{^gLH;M#Ts6(%-K3M5FvbaSs z!-^M)Ej{!5jx2*KwGUstDiYrP>s1!ZsW54}{^e#%JK7054G*upcMH-{vyVaHT04LK zRDO(lOQmbh&CvD8-9gc#AOeo}8(xI}Q*5Fy#I_)vIg-?a)fI9Osg7lxlV zco|$jj%ptH9{Jd~B8S)LajLHro*^}i9Cn0qs^85S$7tj%Xx98TI6M61I{6{N0{nR2 zgt~$;!!G1HSYv8=VR|RpTB51H-%Y#vd7jFK`{uQR5O*%QXLv}-_1c8KS)-A%Y(5`*EdAx1I`nQk8rjAPc;(D(X6dZ1 zd(=MJTFQ?68z_Om_4GJ-z(dS*bWm<*MWw4abvJOiPzB4QFktQcnRFo%1whu(dG&lh8W69OL5nvZ}^? zj3&SIw#>omjRY@+!uB1p>gD{{v9)|q&MXzEQ6xh(l3j;2P+fa-nJog$W^p#?#-eoG z^y!l2SD0uBR3>3^yg%L|rOvx*qeL;OFcimJUen+(kOFS4`t?|jSGxE)*T8uGn?U+f zy+WAUc$pr#E~RLIRMMP2lEK;B##;If5Xd|VvHL|>&31Au2`1A&&p(#LQNuqh5+A{m z*BM2;o}K&fwOx<=kej((NO+j{fe3!lYST)dq@Ykl5>92eUB6aIueyTD zFW;G&M}#*i!`X*KI6B_`$(27EhiTp+c7}e+%mc~#Ic-D&gW8?ATW_v;$g^5Lc4Vf= z7z7l{A?&@|N=-pU2Bx=Dnc zd};>zxRY3b;+Ubkk2Ip(hbqm?!JfkCrUR;Qvv?K>`eq4*Nf#r6gB2x*`9 zd_b-@mbO3ym?r3>=5Ffw70@<8I6L?Tmf1aj3wL^-3dWTQ2FmLoSGF^To_8A4*Qh;G zyl)pO%osu|47vP+zGLg1dK3?d{lwEvwU{N@~M6E!G#yL$Cj~ErCNH7ZNK-B zyu z{D$w!!1Dd%u|sz+{u*R7Vwx#zwA?B0>1SgOtO-Q=-cXx%`5EZ^A4+~uCya%dy?_C{ z)Iu4$r}?H@fdIE}k?JzNZn!AP3cPM~U%hP}_kroJCmg^g%kWXXTg9yb>+_`=5-o~@ zX1ZYSR2O;W=B({gR0GXGNZwr4b^iVq8b++25c-ecM#~)`5AS!gbTP6ZF(>kPNzAv5 zl*e|r3sJ4^Yp_H_hn&COQx#BV;=2r5AWJ1BjuG*Ip{j@ zdvZu1VdB&4ZjZh-_-FFSRpO=vx;F#wXtWQ+`@7=5jg@*wOPb5dXeJz2t?|)Dx8cHh z39R^dKe>FRK1GWf(Fq-N*Q`$09%Xk}OzAs8u3r+?1I)F>c0QQ51^AOv)(Cjq$d>1! zW4vx080aeSp9wYY^qA!0d^cisY^8EPPnT~BEIS*jOLhM|x`QLR^vGIs;-zTB`gz1k zP`m0lvH9{P*}%>Fz{3j#hOyTNVb&_hMecrOe?Os$_0e_Q2$mcjcEVPqLpne@4Ov(? zJW2yE*^H6F92>#cI#gO|Wpegs54B`O1Rm!@D$P~IEVt!C*@y8BoO1OEx{$z`!H4b= zpq|n=kwv(@fCwUCoq9jL$f=xkZZ{(1D~uW_C{q+&EP#Gab@ zJcOaR`N^dI@tzZsY<%o!I2q>wz6)`STup8bW+xivy_#ZQTY>)kLy{OTJezH}d<9iv z;tIy}I7UpO=(o(lS`9n&9qp^TY%lIH?B}&uo`$+7X9X6MY3!#<ubM<5h`{ugeX{uM^*YUxx`9AIOOR@1}--e+MPZd=P}JO2Cq1 zBKhBa+5ci7AP!Le)1{3|^1oL#{(n$Ei;6H*%M4bB2cCL326c}2|qy?B!B-LyaJYAKX3m9zK(hX628gv{ge7Hs z1QRGE@e;@t-a#pdBv8l_CxGQJNdAo)5D=LE>wHhqgj>)Xl7F250s`ZI0j|Uoxa0+y sen>$;nAw{uIoUfnvzUUNUF>cD6cd!>VB!A2F<#%?Fc1*mWd9ufKc~2$mjD0& From 193579e579888db25219475966dc8ccda084eaa4 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 17 Dec 2020 14:50:01 -0800 Subject: [PATCH 307/958] Added icm policies --- .../mdm/policy-csp-admx-icm.md | 1557 +++++++++++++++++ 1 file changed, 1557 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-admx-icm.md diff --git a/windows/client-management/mdm/policy-csp-admx-icm.md b/windows/client-management/mdm/policy-csp-admx-icm.md new file mode 100644 index 0000000000..82dfc6c182 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-admx-icm.md @@ -0,0 +1,1557 @@ +--- +title: Policy CSP - ADMX_ICM +description: Policy CSP - ADMX_ICM +ms.author: dansimp +ms.localizationpriority: medium +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: manikadhiman +ms.date: 12/17/2020 +ms.reviewer: +manager: dansimp +--- + +# Policy CSP - ADMX_ICM +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + +
    + + +## ADMX_ICM policies + +
    +
    + ADMX_ICM/CEIPEnable +
    +
    + ADMX_ICM/CertMgr_DisableAutoRootUpdates +
    +
    + ADMX_ICM/DisableHTTPPrinting_1 +
    +
    + ADMX_ICM/DisableWebPnPDownload_1 +
    +
    + ADMX_ICM/DriverSearchPlaces_DontSearchWindowsUpdate +
    +
    + ADMX_ICM/EventViewer_DisableLinks +
    +
    + ADMX_ICM/HSS_HeadlinesPolicy +
    +
    + ADMX_ICM/HSS_KBSearchPolicy +
    +
    + ADMX_ICM/InternetManagement_RestrictCommunication_1 +
    +
    + ADMX_ICM/InternetManagement_RestrictCommunication_2 +
    +
    + ADMX_ICM/NC_ExitOnISP +
    +
    + ADMX_ICM/NC_NoRegistration +
    +
    + ADMX_ICM/PCH_DoNotReport +
    +
    + ADMX_ICM/RemoveWindowsUpdate_ICM +
    +
    + ADMX_ICM/SearchCompanion_DisableFileUpdates +
    +
    + ADMX_ICM/ShellNoUseInternetOpenWith_1 +
    +
    + ADMX_ICM/ShellNoUseInternetOpenWith_2 +
    +
    + ADMX_ICM/ShellNoUseStoreOpenWith_1 +
    +
    + ADMX_ICM/ShellNoUseStoreOpenWith_2 +
    +
    + ADMX_ICM/ShellPreventWPWDownload_1 +
    +
    + ADMX_ICM/ShellRemoveOrderPrints_1 +
    +
    + ADMX_ICM/ShellRemoveOrderPrints_2 +
    +
    + ADMX_ICM/ShellRemovePublishToWeb_1 +
    +
    + ADMX_ICM/ShellRemovePublishToWeb_2 +
    +
    + ADMX_ICM/WinMSG_NoInstrumentation_1 +
    +
    + ADMX_ICM/WinMSG_NoInstrumentation_2 +
    +
    + + +
    + + +**ADMX_ICM/CEIPEnable** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting turns off the Windows Customer Experience Improvement Program. The Windows Customer Experience Improvement Program collects information about your hardware configuration and how you use our software and services to identify trends and usage patterns. Microsoft will not collect your name, address, or any other personally identifiable information. There are no surveys to complete, no salesperson will call, and you can continue working without interruption. It is simple and user-friendly. + +If you enable this policy setting, all users are opted out of the Windows Customer Experience Improvement Program. + +If you disable this policy setting, all users are opted into the Windows Customer Experience Improvement Program. + +If you do not configure this policy setting, the administrator can use the Problem Reports and Solutions component in Control Panel to enable Windows Customer Experience Improvement Program for all users. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows Customer Experience Improvement Program* +- GP name: *CEIPEnable* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/CertMgr_DisableAutoRootUpdates** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to automatically update root certificates using the Windows Update website. + +Typically, a certificate is used when you use a secure website or when you send and receive secure email. Anyone can issue certificates, but to have transactions that are as secure as possible, certificates must be issued by a trusted certificate authority (CA). Microsoft has included a list in Windows XP and other products of companies and organizations that it considers trusted authorities. + +If you enable this policy setting, when you are presented with a certificate issued by an untrusted root authority, your computer will not contact the Windows Update website to see if Microsoft has added the CA to its list of trusted authorities. + +If you disable or do not configure this policy setting, your computer will contact the Windows Update website. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Automatic Root Certificates Update* +- GP name: *CertMgr_DisableAutoRootUpdates* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/DisableHTTPPrinting_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to allow printing over HTTP from this client. + +Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. + +> [!NOTE] +> This policy setting affects the client side of Internet printing only. It does not prevent this computer from acting as an Internet Printing server and making its shared printers available via HTTP. + +If you enable this policy setting, it prevents this client from printing to Internet printers over HTTP. + +If you disable or do not configure this policy setting, users can choose to print to Internet printers over HTTP. Also, see the "Web-based printing" policy setting in Computer Configuration/Administrative Templates/Printers. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off printing over HTTP* +- GP name: *DisableHTTPPrinting_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/DisableWebPnPDownload_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to allow this client to download print driver packages over HTTP. + +To set up HTTP printing, non-inbox drivers need to be downloaded over HTTP. + +> [!NOTE] +> This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP. + +It only prohibits downloading drivers that are not already installed locally. + +If you enable this policy setting, print drivers cannot be downloaded over HTTP. + +If you disable or do not configure this policy setting, users can download print drivers over HTTP. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off downloading of print drivers over HTTP* +- GP name: *DisableWebPnPDownload_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/DriverSearchPlaces_DontSearchWindowsUpdate** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows searches Windows Update for device drivers when no local drivers for a device are present. + +If you enable this policy setting, Windows Update is not searched when a new device is installed. + +If you disable this policy setting, Windows Update is always searched for drivers when no local drivers are present. + +If you do not configure this policy setting, searching Windows Update is optional when installing a device. + +Also see "Turn off Windows Update device driver search prompt" in "Administrative Templates/System," which governs whether an administrator is prompted before searching Windows Update for device drivers if a driver is not found locally. + +> [!NOTE] +> This policy setting is replaced by "Specify Driver Source Search Order" in "Administrative Templates/System/Device Installation" on newer versions of Windows. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows Update device driver searching* +- GP name: *DriverSearchPlaces_DontSearchWindowsUpdate* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/EventViewer_DisableLinks** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether "Events.asp" hyperlinks are available for events within the Event Viewer application. + +The Event Viewer normally makes all HTTP(S) URLs into hyperlinks that activate the Internet browser when clicked. In addition, "More Information" is placed at the end of the description text if the event is created by a Microsoft component. This text contains a link (URL) that, if clicked, sends information about the event to Microsoft, and allows users to learn more about why that event occurred. + +If you enable this policy setting, event description hyperlinks are not activated and the text "More Information" is not displayed at the end of the description. + +If you disable or do not configure this policy setting, the user can click the hyperlink, which prompts the user and then sends information about the event over the Internet to Microsoft. + +Also, see "Events.asp URL", "Events.asp program", and "Events.asp Program Command Line Parameters" settings in "Administrative Templates/Windows Components/Event Viewer". + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Event Viewer "Events.asp" links* +- GP name: *EventViewer_DisableLinks* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/HSS_HeadlinesPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to show the "Did you know?" section of Help and Support Center. + +This content is dynamically updated when users who are connected to the Internet open Help and Support Center, and provides up-to-date information about Windows and the computer. + +If you enable this policy setting, the Help and Support Center no longer retrieves nor displays "Did you know?" content. + +If you disable or do not configure this policy setting, the Help and Support Center retrieves and displays "Did you know?" content. + +You might want to enable this policy setting for users who do not have Internet access, because the content in the "Did you know?" section will remain static indefinitely without an Internet connection. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Help and Support Center "Did you know?" content* +- GP name: *HSS_HeadlinesPolicy* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/HSS_KBSearchPolicy** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether users can perform a Microsoft Knowledge Base search from the Help and Support Center. + +The Knowledge Base is an online source of technical support information and self-help tools for Microsoft products, and is searched as part of all Help and Support Center searches with the default search options. + +If you enable this policy setting, it removes the Knowledge Base section from the Help and Support Center "Set search options" page, and only Help content on the local computer is searched. + +If you disable or do not configure this policy setting, the Knowledge Base is searched if the user has a connection to the Internet and has not disabled the Knowledge Base search from the Search Options page. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Help and Support Center Microsoft Knowledge Base search* +- GP name: *HSS_KBSearchPolicy* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_1* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/NC_ExitOnISP** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs). + +If you enable this policy setting, the "Choose a list of Internet Service Providers" path in the Internet Connection Wizard causes the wizard to exit. This prevents users from retrieving the list of ISPs, which resides on Microsoft servers. + +If you disable or do not configure this policy setting, users can connect to Microsoft to download a list of ISPs for their area. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com* +- GP name: *NC_ExitOnISP* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/NC_NoRegistration** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration. + +If you enable this policy setting, it blocks users from connecting to Microsoft.com for online registration and users cannot register their copy of Windows online. + +If you disable or do not configure this policy setting, users can connect to Microsoft.com to complete the online Windows Registration. + +Note that registration is optional and involves submitting some personal information to Microsoft. However, Windows Product Activation is required but does not involve submitting any personal information (except the country/region you live in). + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Registration if URL connection is referring to Microsoft.com* +- GP name: *NC_NoRegistration* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/PCH_DoNotReport** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting controls whether or not errors are reported to Microsoft. + +Error Reporting is used to report information about a system or application that has failed or has stopped responding and is used to improve the quality of the product. + +If you enable this policy setting, users are not given the option to report errors. + +If you disable or do not configure this policy setting, the errors may be reported to Microsoft via the Internet or to a corporate file share. + +This policy setting overrides any user setting made from the Control Panel for error reporting. + +Also see the "Configure Error Reporting", "Display Error Notification" and "Disable Windows Error Reporting" policy settings under Computer Configuration/Administrative Templates/Windows Components/Windows Error Reporting. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Windows Error Reporting* +- GP name: *PCH_DoNotReport* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/RemoveWindowsUpdate_ICM** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to remove access to Windows Update. + +If you enable this policy setting, all Windows Update features are removed. This includes blocking access to the Windows Update website at http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This policy setting also prevents Device Manager from automatically installing driver updates from the Windows Update website. + +If you disable or do not configure this policy setting, users can access the Windows Update website and enable automatic updating to receive notifications and critical updates from Windows Update. + +> [!NOTE] +> This policy applies only when this PC is configured to connect to an intranet update service using the "Specify intranet Microsoft update service location" policy. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off access to all Windows Update features* +- GP name: *RemoveWindowsUpdate_ICM* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/SearchCompanion_DisableFileUpdates** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Search Companion should automatically download content updates during local and Internet searches. + +When users search the local computer or the Internet, Search Companion occasionally connects to Microsoft to download an updated privacy policy and additional content files used to format and display results. + +If you enable this policy setting, Search Companion does not download content updates during searches. + +If you disable or do not configure this policy setting, Search Companion downloads content updates unless the user is using Classic Search. + +> [!NOTE] +> Internet searches still send the search text and information about the search to Microsoft and the chosen search provider. Choosing Classic Search turns off the Search Companion feature completely. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Search Companion content file updates* +- GP name: *SearchCompanion_DisableFileUpdates* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/InternetManagement_RestrictCommunication_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. + +If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. + +If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. + +If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Restrict Internet communication* +- GP name: *InternetManagement_RestrictCommunication_2* +- GP path: *System\Internet Communication Management* +- GP ADMX file name: *ICM.admx* + + + +
    + +Footnotes: + +- 1 - Available in Windows 10, version 1607. +- 2 - Available in Windows 10, version 1703. +- 3 - Available in Windows 10, version 1709. +- 4 - Available in Windows 10, version 1803. +- 5 - Available in Windows 10, version 1809. +- 6 - Available in Windows 10, version 1903. +- 7 - Available in Windows 10, version 1909. +- 8 - Available in Windows 10, version 2004. + + + From 4efc7e487dddc7fd10fe13f4f536496a359c0a9a Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 17 Dec 2020 14:55:05 -0800 Subject: [PATCH 308/958] Removed duplicate of DisableCloudOptimizedContent --- .../mdm/policy-csp-experience.md | 70 ------------------- 1 file changed, 70 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md index 7809027bc7..c7a806320d 100644 --- a/windows/client-management/mdm/policy-csp-experience.md +++ b/windows/client-management/mdm/policy-csp-experience.md @@ -1227,76 +1227,6 @@ The following list shows the supported values:
    - -**Experience/DisableCloudOptimizedContent** - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Windows EditionSupported?
    Homecheck mark9
    Procheck mark9
    Businesscheck mark9
    Enterprisecheck mark9
    Educationcheck mark9
    - - -
    - - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
    - - - -This policy setting lets you turn off cloud optimized content in all Windows experiences. - -If you enable this policy setting, Windows experiences that use the cloud optimized content client component will present the default fallback content. - -If you disable or do not configure this policy setting, Windows experiences will be able to use cloud optimized content. - - - -ADMX Info: -- GP English name: *Turn off cloud optimized content* -- GP name: *DisableCloudOptimizedContent* -- GP path: *Windows Components/Cloud Content* -- GP ADMX file name: *CloudContent.admx* - - - -The following list shows the supported values: - -- 0 (default) – Disabled. -- 1 – Enabled. - - - - -
    - **Experience/DoNotShowFeedbackNotifications** From 05d72aaa5c67010dd2356f8234d200c6d4ffbd8f Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 17 Dec 2020 15:02:52 -0800 Subject: [PATCH 309/958] Update indicator-certificates.md --- .../microsoft-defender-atp/indicator-certificates.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md index f0439ebf7f..35d49a64b9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md @@ -39,11 +39,11 @@ You can create indicators for certificates. Some common use cases include: It's important to understand the following requirements prior to creating indicators for certificates: -- This feature is available if your organization uses Windows Defender Antivirus and Cloud-based protection is enabled. For more information, see [Manage cloud-based protection](../windows-defender-antivirus/deploy-manage-report-windows-defender-antivirus.md). +- This feature is available if your organization uses Windows Defender Antivirus and Cloud-based protection is enabled. For more information, see [Manage cloud-based protection](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md). - The Antimalware client version must be 4.18.1901.x or later. - Supported on machines on Windows 10, version 1703 or later, Windows server 2016 and 2019. - The virus and threat protection definitions must be up to date. -- This feature currently supports entering .CER or .PEM (Base64 ASCII) encoding based certificates. +- This feature currently supports entering .CER or .PEM file extensions. >[!IMPORTANT] > - A valid leaf certificate is a signing certificate that has a valid certification path and must be chained to the Root Certificate Authority (CA) trusted by Microsoft. Alternatively, a custom (self-signed) certificate can be used as long as it's trusted by the client (Root CA certificate is installed under the Local Machine 'Trusted Root Certification Authorities'). From fdeb189ca96f7ca54de6c0efbb53dd06c5381743 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 17 Dec 2020 15:11:25 -0800 Subject: [PATCH 310/958] udpate keyword --- .../microsoft-defender-atp/indicator-certificates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md index 35d49a64b9..4c34fbe26c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md +++ b/windows/security/threat-protection/microsoft-defender-atp/indicator-certificates.md @@ -2,7 +2,7 @@ title: Create indicators based on certificates ms.reviewer: description: Create indicators based on certificates that define the detection, prevention, and exclusion of entities. -keywords: ioc, certificate, certificates, manage, allowed, blocked, whitelist, blacklist, block, clean, malicious, file hash, ip address, urls, domain +keywords: ioc, certificate, certificates, manage, allowed, blocked, block, clean, malicious, file hash, ip address, urls, domain search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: w10 From 1fe446ed76ce210b62a016eba1fe3b157a732641 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 15:21:21 -0800 Subject: [PATCH 311/958] Added lightbox functionality to diagram --- windows/client-management/quick-assist.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/quick-assist.md b/windows/client-management/quick-assist.md index 9fc8de6503..6a50151342 100644 --- a/windows/client-management/quick-assist.md +++ b/windows/client-management/quick-assist.md @@ -57,7 +57,7 @@ Both the helper and sharer must be able to reach these endpoints over port 443: 7. RDP shares the video to the helper over https (port 443) through the RDP relay service to the helper's RDP control. Input is shared from the helper to the sharer through the RDP relay service. -:::image type="content" source="images/quick-assist-flow.png" alt-text="Schematic flow of connections when a Quick Assist session is established"::: +:::image type="content" source="images/quick-assist-flow.png" lightbox="images/quick-assist-flow.png" alt-text="Schematic flow of connections when a Quick Assist session is established"::: ### Data and privacy From 2765cbcb25c78118a1170e2692cd0286d3b8354b Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 15:32:54 -0800 Subject: [PATCH 312/958] Acrolinx grammar --- windows/client-management/mdm/policy-csp-experience.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-experience.md b/windows/client-management/mdm/policy-csp-experience.md index c7a806320d..8550d25403 100644 --- a/windows/client-management/mdm/policy-csp-experience.md +++ b/windows/client-management/mdm/policy-csp-experience.md @@ -1358,7 +1358,7 @@ ADMX Info: Supported values: -- 0 (default) - Allowed/turned on. The "browser" group syncs automatically between user’s devices and lets users to make changes. +- 0 (default) - Allowed/turned on. The "browser" group synchronizes automatically between users' devices and lets users make changes. - 2 - Prevented/turned off. The "browser" group does not use the _Sync your Settings_ option. From d6680ea186ced63062cada328413d599fc6c9565 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 17 Dec 2020 15:49:32 -0800 Subject: [PATCH 313/958] Added ICM policies --- windows/client-management/mdm/TOC.md | 1 + .../mdm/policies-in-policy-csp-admx-backed.md | 26 + .../policy-configuration-service-provider.md | 115 +++- .../mdm/policy-csp-admx-icm.md | 517 ++++++++++++++++-- 4 files changed, 601 insertions(+), 58 deletions(-) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 6e91df97ec..a4329d7e1b 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -209,6 +209,7 @@ #### [ADMX_Globalization](policy-csp-admx-globalization.md) #### [ADMX_Help](policy-csp-admx-help.md) #### [ADMX_HelpAndSupport](policy-csp-admx-helpandsupport.md) +#### [ADMX_ICM](policy-csp-admx-icm.md) #### [ADMX_kdc](policy-csp-admx-kdc.md) #### [ADMX_Kerberos](policy-csp-admx-kerberos.md) #### [ADMX_LanmanServer](policy-csp-admx-lanmanserver.md) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index 8c03c186f3..fc369bf835 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -314,6 +314,32 @@ ms.date: 10/08/2020 - [ADMX_HelpAndSupport/HPExplicitFeedback](./policy-csp-admx-helpandsupport.md#admx-helpandsupport-hpexplicitfeedback) - [ADMX_HelpAndSupport/HPImplicitFeedback](./policy-csp-admx-helpandsupport.md#admx-helpandsupport-hpimplicitfeedback) - [ADMX_HelpAndSupport/HPOnlineAssistance](./policy-csp-admx-helpandsupport.md#admx-helpandsupport-hponlineassistance) +- [ADMX_ICM/CEIPEnable](./policy-csp-admx-icm.md#admx-icm-ceipenable) +- [ADMX_ICM/CertMgr_DisableAutoRootUpdates](./policy-csp-admx-icm.md#admx-icm-certmgr-disableautorootupdates) +- [ADMX_ICM/DisableHTTPPrinting_1](./policy-csp-admx-icm.md#admx-icm-disablehttpprinting-1) +- [ADMX_ICM/DisableWebPnPDownload_1](./policy-csp-admx-icm.md#admx-icm-disablewebpnpdownload-1) +- [ADMX_ICM/DriverSearchPlaces_DontSearchWindowsUpdate](./policy-csp-admx-icm.md#admx-icm-driversearchplaces-dontsearchwindowsupdate) +- [ADMX_ICM/EventViewer_DisableLinks](./policy-csp-admx-icm.md#admx-icm-eventviewer-disablelinks) +- [ADMX_ICM/HSS_HeadlinesPolicy](./policy-csp-admx-icm.md#admx-icm-hss-headlinespolicy) +- [ADMX_ICM/HSS_KBSearchPolicy](./policy-csp-admx-icm.md#admx-icm-hss-kbsearchpolicy) +- [ADMX_ICM/InternetManagement_RestrictCommunication_1](./policy-csp-admx-icm.md#admx-icm-internetmanagement_restrictcommunication_1) +- [ADMX_ICM/InternetManagement_RestrictCommunication_2](./policy-csp-admx-icm.md#admx-icm-internetmanagement-restrictcommunication-2) +- [ADMX_ICM/NC_ExitOnISP](./policy-csp-admx-icm.md#admx-icm-nc-exitonisp) +- [ADMX_ICM/NC_NoRegistration](./policy-csp-admx-icm.md#admx-icm-nc-noregistration) +- [ADMX_ICM/PCH_DoNotReport](./policy-csp-admx-icm.md#admx-icm-pch-donotreport) +- [ADMX_ICM/RemoveWindowsUpdate_ICM](./policy-csp-admx-icm.md#admx-icm-removewindowsupdate-icm) +- [ADMX_ICM/SearchCompanion_DisableFileUpdates](./policy-csp-admx-icm.md#admx-icm-searchcompanion-disablefileupdates) +- [ADMX_ICM/ShellNoUseInternetOpenWith_1](./policy-csp-admx-icm.md#admx-icm-shellnouseinternetopenwith-1) +- [ADMX_ICM/ShellNoUseInternetOpenWith_2](./policy-csp-admx-icm.md#admx-icm-shellnouseinternetopenwith-2) +- [ADMX_ICM/ShellNoUseStoreOpenWith_1](./policy-csp-admx-icm.md#admx-icm-shellnousestoreopenwith-1) +- [ADMX_ICM/ShellNoUseStoreOpenWith_2](./policy-csp-admx-icm.md#admx-icm-shellnousestoreopenwith-2) +- [ADMX_ICM/ShellPreventWPWDownload_1](./policy-csp-admx-icm.md#admx-icm-shellpreventwpwdownload-1) +- [ADMX_ICM/ShellRemoveOrderPrints_1](./policy-csp-admx-icm.md#admx-icm-shellremoveorderprints-1) +- [ADMX_ICM/ShellRemoveOrderPrints_2](./policy-csp-admx-icm.md#admx-icm-shellremoveorderprints-2) +- [ADMX_ICM/ShellRemovePublishToWeb_1](./policy-csp-admx-icm.md#admx-icm-shellremovepublishtoweb-1) +- [ADMX_ICM/ShellRemovePublishToWeb_2](./policy-csp-admx-icm.md#admx-icm-shellremovepublishtoweb-2) +- [ADMX_ICM/WinMSG_NoInstrumentation_1](./policy-csp-admx-icm.md#admx-icm-winmsg_noinstrumentation-1) +- [ADMX_ICM/WinMSG_NoInstrumentation_2](./policy-csp-admx-icm.md#admx-icm-winmsg_noinstrumentation-2) - [ADMX_kdc/CbacAndArmor](./policy-csp-admx-kdc.md#admx-kdc-cbacandarmor) - [ADMX_kdc/ForestSearch](./policy-csp-admx-kdc.md#admx-kdc-forestsearch) - [ADMX_kdc/PKINITFreshness](./policy-csp-admx-kdc.md#admx-kdc-pkinitfreshness) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 810eacc415..13cc28a89d 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1129,22 +1129,6 @@ The following diagram shows the Policy configuration service provider in tree fo
    -### ADMX_HelpAndSupport policies -
    -
    - ADMX_HelpAndSupport/ActiveHelp -
    -
    - ADMX_HelpAndSupport/HPExplicitFeedback -
    -
    - ADMX_HelpAndSupport/HPImplicitFeedback -
    -
    - ADMX_HelpAndSupport/HPOnlineAssistance -
    -
    - ### ADMX_Globalization policies
    @@ -1222,6 +1206,105 @@ The following diagram shows the Policy configuration service provider in tree fo
    +### ADMX_HelpAndSupport policies +
    +
    + ADMX_HelpAndSupport/ActiveHelp +
    +
    + ADMX_HelpAndSupport/HPExplicitFeedback +
    +
    + ADMX_HelpAndSupport/HPImplicitFeedback +
    +
    + ADMX_HelpAndSupport/HPOnlineAssistance +
    +
    + +## ADMX_ICM policies + +
    +
    + ADMX_ICM/CEIPEnable +
    +
    + ADMX_ICM/CertMgr_DisableAutoRootUpdates +
    +
    + ADMX_ICM/DisableHTTPPrinting_1 +
    +
    + ADMX_ICM/DisableWebPnPDownload_1 +
    +
    + ADMX_ICM/DriverSearchPlaces_DontSearchWindowsUpdate +
    +
    + ADMX_ICM/EventViewer_DisableLinks +
    +
    + ADMX_ICM/HSS_HeadlinesPolicy +
    +
    + ADMX_ICM/HSS_KBSearchPolicy +
    +
    + ADMX_ICM/InternetManagement_RestrictCommunication_1 +
    +
    + ADMX_ICM/InternetManagement_RestrictCommunication_2 +
    +
    + ADMX_ICM/NC_ExitOnISP +
    +
    + ADMX_ICM/NC_NoRegistration +
    +
    + ADMX_ICM/PCH_DoNotReport +
    +
    + ADMX_ICM/RemoveWindowsUpdate_ICM +
    +
    + ADMX_ICM/SearchCompanion_DisableFileUpdates +
    +
    + ADMX_ICM/ShellNoUseInternetOpenWith_1 +
    +
    + ADMX_ICM/ShellNoUseInternetOpenWith_2 +
    +
    + ADMX_ICM/ShellNoUseStoreOpenWith_1 +
    +
    + ADMX_ICM/ShellNoUseStoreOpenWith_2 +
    +
    + ADMX_ICM/ShellPreventWPWDownload_1 +
    +
    + ADMX_ICM/ShellRemoveOrderPrints_1 +
    +
    + ADMX_ICM/ShellRemoveOrderPrints_2 +
    +
    + ADMX_ICM/ShellRemovePublishToWeb_1 +
    +
    + ADMX_ICM/ShellRemovePublishToWeb_2 +
    +
    + ADMX_ICM/WinMSG_NoInstrumentation_1 +
    +
    + ADMX_ICM/WinMSG_NoInstrumentation_2 +
    +
    + ### ADMX_kdc policies
    diff --git a/windows/client-management/mdm/policy-csp-admx-icm.md b/windows/client-management/mdm/policy-csp-admx-icm.md index 82dfc6c182..fa79b7acc9 100644 --- a/windows/client-management/mdm/policy-csp-admx-icm.md +++ b/windows/client-management/mdm/policy-csp-admx-icm.md @@ -1193,7 +1193,7 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/ShellNoUseInternetOpenWith_1** @@ -1230,19 +1230,20 @@ ADMX Info: [Scope](./policy-configuration-service-provider.md#policy-scope): > [!div class = "checklist"] -> * Device +> * User
    -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association. -If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. +When a user opens a file that has an extension that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Web service to find an application. -If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. +If you enable this policy setting, the link and the dialog for using the Web service to open an unhandled file association are removed. + +If you disable or do not configure this policy setting, the user is allowed to use the Web service. -If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1253,9 +1254,9 @@ If you do not configure this policy setting, all of the the policy settings in t ADMX Info: -- GP English name: *Restrict Internet communication* -- GP name: *InternetManagement_RestrictCommunication_2* -- GP path: *System\Internet Communication Management* +- GP English name: *Turn off Internet File Association service* +- GP name: *ShellNoUseInternetOpenWith_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* - GP ADMX file name: *ICM.admx* @@ -1263,7 +1264,7 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/ShellNoUseInternetOpenWith_2**
    @@ -1306,13 +1307,14 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association. -If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. +When a user opens a file that has an extension that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Web service to find an application. -If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. +If you enable this policy setting, the link and the dialog for using the Web service to open an unhandled file association are removed. + +If you disable or do not configure this policy setting, the user is allowed to use the Web service. -If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1323,9 +1325,9 @@ If you do not configure this policy setting, all of the the policy settings in t ADMX Info: -- GP English name: *Restrict Internet communication* -- GP name: *InternetManagement_RestrictCommunication_2* -- GP path: *System\Internet Communication Management* +- GP English name: *Turn off Internet File Association service* +- GP name: *ShellNoUseInternetOpenWith_2* +- GP path: *System\Internet Communication Management\Internet Communication settings* - GP ADMX file name: *ICM.admx* @@ -1333,7 +1335,7 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/ShellNoUseStoreOpenWith_1**
    @@ -1370,19 +1372,20 @@ ADMX Info: [Scope](./policy-configuration-service-provider.md#policy-scope): > [!div class = "checklist"] -> * Device +> * User
    -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association. -If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. +When a user opens a file type or protocol that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Store service to find an application. -If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. +If you enable this policy setting, the "Look for an app in the Store" item in the Open With dialog is removed. + +If you disable or do not configure this policy setting, the user is allowed to use the Store service and the Store item is available in the Open With dialog. -If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1393,9 +1396,9 @@ If you do not configure this policy setting, all of the the policy settings in t ADMX Info: -- GP English name: *Restrict Internet communication* -- GP name: *InternetManagement_RestrictCommunication_2* -- GP path: *System\Internet Communication Management* +- GP English name: *Turn off access to the Store* +- GP name: *ShellNoUseStoreOpenWith_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* - GP ADMX file name: *ICM.admx* @@ -1403,7 +1406,7 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/ShellNoUseStoreOpenWith_2**
    @@ -1446,13 +1449,14 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether to use the Store service for finding an application to open a file with an unhandled file type or protocol association. -If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. +When a user opens a file type or protocol that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Store service to find an application. -If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. +If you enable this policy setting, the "Look for an app in the Store" item in the Open With dialog is removed. + +If you disable or do not configure this policy setting, the user is allowed to use the Store service and the Store item is available in the Open With dialog. -If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1463,9 +1467,9 @@ If you do not configure this policy setting, all of the the policy settings in t ADMX Info: -- GP English name: *Restrict Internet communication* -- GP name: *InternetManagement_RestrictCommunication_2* -- GP path: *System\Internet Communication Management* +- GP English name: *Turn off access to the Store* +- GP name: *ShellNoUseStoreOpenWith_2* +- GP path: *System\Internet Communication Management\Internet Communication settings* - GP ADMX file name: *ICM.admx* @@ -1473,7 +1477,147 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/ShellPreventWPWDownload_1** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows should download a list of providers for the web publishing and online ordering wizards. These wizards allow users to select from a list of companies that provide services such as online storage and photographic printing. By default, Windows displays providers downloaded from a Windows website in addition to providers specified in the registry. + +If you enable this policy setting, Windows does not download providers, and only the service providers that are cached in the local registry are displayed. + +If you disable or do not configure this policy setting, a list of providers are downloaded when the user uses the web publishing or online ordering wizards. + +See the documentation for the web publishing and online ordering wizards for more information, including details on specifying service providers in the registry. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off Internet download for Web publishing and online ordering wizards* +- GP name: *ShellPreventWPWDownload_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/ShellRemoveOrderPrints_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders. + +The Order Prints Online Wizard is used to download a list of providers and allow users to order prints online. If you enable this policy setting, the task "Order Prints Online" is removed from Picture Tasks in File Explorer folders. + +If you disable or do not configure this policy setting, the task is displayed. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off the "Order Prints" picture task* +- GP name: *ShellRemoveOrderPrints_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/ShellRemoveOrderPrints_2** @@ -1516,13 +1660,14 @@ ADMX Info: -Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders. -If you enable this setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features cannot access the Internet. +The Order Prints Online Wizard is used to download a list of providers and allow users to order prints online. -If you disable this policy setting, all of the the policy settings listed in the "Internet Communication settings" section are set such that their respective features can access the Internet. +If you enable this policy setting, the task "Order Prints Online" is removed from Picture Tasks in File Explorer folders. + +If you disable or do not configure this policy setting, the task is displayed. -If you do not configure this policy setting, all of the the policy settings in the "Internet Communication settings" section are set to not configured. > [!TIP] > This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). @@ -1533,9 +1678,297 @@ If you do not configure this policy setting, all of the the policy settings in t ADMX Info: -- GP English name: *Restrict Internet communication* -- GP name: *InternetManagement_RestrictCommunication_2* -- GP path: *System\Internet Communication Management* +- GP English name: *Turn off the "Order Prints" picture task* +- GP name: *ShellRemoveOrderPrints_2* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/ShellRemovePublishToWeb_1** + + +
    + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to the Web" are available from File and Folder Tasks in Windows folders. + +The Web Publishing Wizard is used to download a list of providers and allow users to publish content to the web. + +If you enable this policy setting, these tasks are removed from the File and Folder tasks in Windows folders. If you disable or do not configure this policy setting, the tasks are shown. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off the "Publish to Web" task for files and folders* +- GP name: *ShellRemovePublishToWeb_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/ShellRemovePublishToWeb_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to the Web" are available from File and Folder Tasks in Windows folders. + +The Web Publishing Wizard is used to download a list of providers and allow users to publish content to the web. + +If you enable this policy setting, these tasks are removed from the File and Folder tasks in Windows folders. + +If you disable or do not configure this policy setting, the tasks are shown. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off the "Publish to Web" task for files and folders* +- GP name: *ShellRemovePublishToWeb_2* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/WinMSG_NoInstrumentation_1** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used. + +With the Customer Experience Improvement program, users can allow Microsoft to collect anonymous information about how the product is used. + +This information is used to improve the product in future releases. + +If you enable this policy setting, Windows Messenger does not collect usage information, and the user settings to enable the collection of usage information are not shown. + +If you disable this policy setting, Windows Messenger collects anonymous usage information, and the setting is not shown. If you do not configure this policy setting, users have the choice to opt in and allow information to be collected. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off the Windows Messenger Customer Experience Improvement Program* +- GP name: *WinMSG_NoInstrumentation_1* +- GP path: *System\Internet Communication Management\Internet Communication settings* +- GP ADMX file name: *ICM.admx* + + + +
    + + +**ADMX_ICM/WinMSG_NoInstrumentation_2** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Windows EditionSupported?
    Homecross mark
    Procross mark
    Businesscross mark
    Enterprisecheck mark
    Educationcross mark
    + + +
    + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
    + + + +Available in the latest Windows 10 Insider Preview Build. This policy setting specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used. + +With the Customer Experience Improvement program, users can allow Microsoft to collect anonymous information about how the product is used. + +This information is used to improve the product in future releases. + +If you enable this policy setting, Windows Messenger does not collect usage information, and the user settings to enable the collection of usage information are not shown. + +If you disable this policy setting, Windows Messenger collects anonymous usage information, and the setting is not shown. + +If you do not configure this policy setting, users have the choice to opt in and allow information to be collected. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). +> +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). +> +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Turn off the Windows Messenger Customer Experience Improvement Program* +- GP name: *WinMSG_NoInstrumentation_2* +- GP path: *System\Internet Communication Management\Internet Communication settings* - GP ADMX file name: *ICM.admx* From 3ecb9770addeb51cca42a467134fe2e6379b5819 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 15:59:18 -0800 Subject: [PATCH 314/958] Fixed broken note In an alert (like Note), blank lines must also start with an angle bracket to connect the content on both sides of the blank line. --- .../bitlocker/bitlocker-overview-and-requirements-faq.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml index de4338a325..63b1488107 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml +++ b/windows/security/information-protection/bitlocker/bitlocker-overview-and-requirements-faq.yml @@ -56,7 +56,7 @@ sections: > [!NOTE] > TPM 2.0 is not supported in Legacy and CSM Modes of the BIOS. Devices with TPM 2.0 must have their BIOS mode configured as Native UEFI only. The Legacy and Compatibility Support Module (CSM) options must be disabled. For added security Enable the Secure Boot feature. - + > > Installed Operating System on hardware in legacy mode will stop the OS from booting when the BIOS mode is changed to UEFI. Use the tool [MBR2GPT](https://docs.microsoft.com/windows/deployment/mbr-to-gpt) before changing the BIOS mode which will prepare the OS and the disk to support UEFI. - question: How can I tell if a TPM is on my computer? From fcbe8c29cad3bb7dcb615c3313ba6ca0c0b8a194 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Thu, 17 Dec 2020 16:03:13 -0800 Subject: [PATCH 315/958] Fixed build warnings --- .../mdm/policies-in-policy-csp-admx-backed.md | 2 +- .../mdm/policy-configuration-service-provider.md | 2 +- windows/client-management/mdm/policy-csp-admx-icm.md | 6 +++--- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md index fc369bf835..0d38a8664a 100644 --- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md +++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md @@ -322,7 +322,7 @@ ms.date: 10/08/2020 - [ADMX_ICM/EventViewer_DisableLinks](./policy-csp-admx-icm.md#admx-icm-eventviewer-disablelinks) - [ADMX_ICM/HSS_HeadlinesPolicy](./policy-csp-admx-icm.md#admx-icm-hss-headlinespolicy) - [ADMX_ICM/HSS_KBSearchPolicy](./policy-csp-admx-icm.md#admx-icm-hss-kbsearchpolicy) -- [ADMX_ICM/InternetManagement_RestrictCommunication_1](./policy-csp-admx-icm.md#admx-icm-internetmanagement_restrictcommunication_1) +- [ADMX_ICM/InternetManagement_RestrictCommunication_1](./policy-csp-admx-icm.md#admx-icm-internetmanagement-restrictcommunication-1) - [ADMX_ICM/InternetManagement_RestrictCommunication_2](./policy-csp-admx-icm.md#admx-icm-internetmanagement-restrictcommunication-2) - [ADMX_ICM/NC_ExitOnISP](./policy-csp-admx-icm.md#admx-icm-nc-exitonisp) - [ADMX_ICM/NC_NoRegistration](./policy-csp-admx-icm.md#admx-icm-nc-noregistration) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 13cc28a89d..addca8a9df 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -1250,7 +1250,7 @@ The following diagram shows the Policy configuration service provider in tree fo ADMX_ICM/HSS_KBSearchPolicy
    - ADMX_ICM/InternetManagement_RestrictCommunication_1 + ADMX_ICM/InternetManagement_RestrictCommunication_1
    ADMX_ICM/InternetManagement_RestrictCommunication_2 diff --git a/windows/client-management/mdm/policy-csp-admx-icm.md b/windows/client-management/mdm/policy-csp-admx-icm.md index fa79b7acc9..9c053a6a02 100644 --- a/windows/client-management/mdm/policy-csp-admx-icm.md +++ b/windows/client-management/mdm/policy-csp-admx-icm.md @@ -47,7 +47,7 @@ manager: dansimp ADMX_ICM/HSS_KBSearchPolicy
    - ADMX_ICM/InternetManagement_RestrictCommunication_1 + ADMX_ICM/InternetManagement_RestrictCommunication_1
    ADMX_ICM/InternetManagement_RestrictCommunication_2 @@ -762,7 +762,7 @@ ADMX Info:
    -**ADMX_ICM/InternetManagement_RestrictCommunication_2** +**ADMX_ICM/InternetManagement_RestrictCommunication_2** @@ -1092,7 +1092,7 @@ ADMX Info: Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to remove access to Windows Update. -If you enable this policy setting, all Windows Update features are removed. This includes blocking access to the Windows Update website at http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This policy setting also prevents Device Manager from automatically installing driver updates from the Windows Update website. +If you enable this policy setting, all Windows Update features are removed. This includes blocking access to the Windows Update website at https://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This policy setting also prevents Device Manager from automatically installing driver updates from the Windows Update website. If you disable or do not configure this policy setting, users can access the Windows Update website and enable automatic updating to receive notifications and critical updates from Windows Update. From 1ed3377fb1b1e7adfd433197b5fe57c137be6940 Mon Sep 17 00:00:00 2001 From: Samantha Robertson Date: Thu, 17 Dec 2020 16:05:52 -0800 Subject: [PATCH 316/958] Fixing image links --- .../microsoft-defender-atp/deployment-phases.md | 2 +- .../images/phase-diagrams/deployment-phases.png | Bin 0 -> 5744 bytes .../images/phase-diagrams/migration-phases.png | Bin 0 -> 5711 bytes .../images/phase-diagrams/onboard.png | Bin 0 -> 1960 bytes .../images/phase-diagrams/prepare.png | Bin 0 -> 1713 bytes .../images/phase-diagrams/setup.png | Bin 0 -> 1508 bytes .../mcafee-to-microsoft-defender-migration.md | 2 +- .../mcafee-to-microsoft-defender-onboard.md | 2 +- .../mcafee-to-microsoft-defender-prepare.md | 2 +- .../mcafee-to-microsoft-defender-setup.md | 2 +- .../microsoft-defender-atp/onboarding.md | 2 +- .../microsoft-defender-atp/prepare-deployment.md | 2 +- .../production-deployment.md | 2 +- .../switch-to-microsoft-defender-migration.md | 2 +- .../switch-to-microsoft-defender-onboard.md | 2 +- .../switch-to-microsoft-defender-prepare.md | 2 +- .../switch-to-microsoft-defender-setup.md | 2 +- ...mantec-to-microsoft-defender-atp-migration.md | 2 +- ...symantec-to-microsoft-defender-atp-onboard.md | 2 +- ...symantec-to-microsoft-defender-atp-prepare.md | 2 +- .../symantec-to-microsoft-defender-atp-setup.md | 2 +- 21 files changed, 16 insertions(+), 16 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/deployment-phases.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/migration-phases.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/onboard.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/prepare.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/setup.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md index 6155038acf..71da90cdfd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md +++ b/windows/security/threat-protection/microsoft-defender-atp/deployment-phases.md @@ -37,7 +37,7 @@ Each section corresponds to a separate article in this solution. ![Image of deployment phases with details from table](images/deployment-guide-phases.png) -![Summary of deployment phases: prepare, setup, onboard](/windows/media/phase-diagrams/deployment-phases.png) +![Summary of deployment phases: prepare, setup, onboard](images/phase-diagrams/deployment-phases.png) |Phase | Description | |:-------|:-----| diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/deployment-phases.png b/windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/deployment-phases.png new file mode 100644 index 0000000000000000000000000000000000000000..4d2a4fa94646c72b26e978c0c02cad12efb50a7f GIT binary patch literal 5744 zcmb_gXEYo@*A`JDSUu5+7DS2OdssCh(R&TDi!7q|MBhcCTU{h<^cFo>y$8##7Q|w; z=-uc2`JMBf@7Mcd?#wy&oS8fK%slr#PwY#5P4Wkf5Ag8t$bnkwuki5h9o?;MNr>(& z&N$5dZX)&6GK1jZkx~C=+?!koxx&Mv=LD*&y!Ol4frq{`M)~)#MI%M;-LkUua(Qj1 zIp#n3@JaXC1UsYF`Td9%I-ZY?MUV%vueqUL2~RW`OV1rR5M7D<+yyEUi810E^ahUR zJb^vBC01m+30X-hZhcWIu4 zmkMK$T!?=7b`Z81u(I5>N*BZ(1)yeyF7^y_Mgdg2C<);JRgzddT5nYn4lewc zNhHcDymwAcy#JQ-id8I`AiS$f^*aLLXziF39v*HM`l+m}?9TFuN=x(6(9qOg#AlRd za)0*MCi`C@jsMjr8Q{adP)dgsq1Le2P~JmqDCcqfx_0oJ<#V%J`$5=R%>Qy1xs=(V$twhOonSTsI>?aI6V@EUapyPG{oX?I z*2(pacgIADf3S>=ZIUuTlzmC7Co4w0rGPxucuz+g4ZEUY$&-ze7X_T0bhIvz-~$sa ziIBg3AHZ*~l+I7v*G@0XmH0o;kdv9|yC@SK9`Rwuf%@S|x5phJTROwPPGRJOS#8(P z<#!DPwZP#Sx93WU7xWNM-?OrT-?`yl>&D6|?G=H+J?R;d*By*$Syp>u1}={u$PPRP z97gU1rycC*QzRHo-6s*0j`_JXm^spaCJ`5)JfUq~c0MQ%59Zt8;_Vz!q!Be?-?E^D zyEqfZtW$Ux3}vDHbHP3&%7=eo!MFLlyI`|MFr1c_Hp2-SN5>Hi`9)a$OzcN7P|$!W z^om1Zsg{5czD7`o^bd!H-a@&Z;W42yK4#4q6(ZgEonwm4ZiTZ8%B&PhkjAdcxkqjha?V%s?2uULDvH-=jz=}u4GekLeG%12}nzo&)PTx;`0WVdv|w| zjY+!RIKYy6{66%9w_g8Xq!CO_XxOzI6Qf{}rEOfUnwp-@4Cbn34ifgl@N?!e*~sx8 z3!h{;)u2>Y;>>Z?YiyyW*x=yc8rR=n&)Tthp^BS6!-2P*vPypZ)ePiqG-$T=h1cWe zGam+1W1y(uW~CC5$w_+CDS3B1q9$T%E9 zxw+UDSjy6;X+?Ms>>uR!Cq+|3S-`(}tYLNsgsA=j4vx`Kd_xjKzo)pRzglDexw3z0 z{S9620%bBbL|z!+v9>8t*=j%N?&0Cl>iV&mf)MV=a%6K{SaL{n_~-P#BJFpAg?E^S z5rmwaT;{~%o}pFy`$NpZX>E$T{YFZl3KkZYR~8oT>dHuSdwSM`)5#K@7qsm2v(eft z{P(_1*@gQ1`%eb4>s^g~(_uSR4LI*?0S551FOx6QlE@C)&ROmWxeXAo>@lX+vdH=N zCT{;|jD)o|A63mz#x-BQOWv=UscNu_auaPXfe~)L zWdzSSy`DqAeEp>Ixb2Bey*!%r5#geg!l(LxRZohFS_P>r zXMU$gea@52B1}>GN3a(`NnKj&+X-3kzaM==;UJ$ z;vCG4cN|t~AG*t)h5mld;^-{6K|T%9TbE6Ter24izBs*qT?7O_eJa?0u2A0#Maw>D zxt@6GWgV;z`{X)5v_}kCL%8@PyvP-?ytkNI z**fd~BC5OJb2AB1xF%RT`@-4*gk^$qYDY+9Hb8u` zVZ3DwmZ>{Kh#6bDC4Rqxsjn+E!lUDA6>Dwz_HP=Q$%35|us5H`mj-FpPvBS3M}X$I z-QAI*K_vTjFUv7I%+*oq3V6-4ixE{Tsigpjsb}JlcEX!z!b|Gv`946^ne8gP97hw8 zsLWqKBXMRZ;GBh>g~4iwkgg%F-r|!!>u}@Fy5||f^TsO%6iJQWzHtjgXME`+ixE5M zdF&Sh+BPWV{7d_m_j{V1+yeV&uk_2&#v7A{4zFJ%QvxR+}Tr(kFx&AJOYwq!4 zQpDrECCJA*WNZ&KFQly77C%kG*Q0k?jLWjqK3Yt+EBQ;rTX;F#xaEHd^V1w3UhV{tdd zChEk0?p3f|p%>lJtCTx_({87OAIt>v6#d*{A1Xi^H&d4--ap}S|0iZhHb^}9 znPut|X#13GkhbFY!8eqBq66aJRLj zz&0J;H|ud!b)eHPL+hxqfdU&Csf7{Z->-Fyvtu zX>!Hc?rp}k7LDsFYg76_|7@E$OEA43#mhOoCWhVbV?~=Q9^2jLO%!j@RfQZq-w+#z z#Rn}%%x#UiPeeHyE3-k*6)@=25K-qe?@l~!>msNV^-fFfz;c=8=bgD3ksM(jG%#8L z$3WyPJ1w&2-{4}QW^?3mRol@-EX;nD^Jl2bGOxpVATSRtkL4+;UMQF(DfrLt?XD83aN4!cATOMqp^!=z)fA26uX?yjk0wRL+yuU{|VZ?k_h^&Ckm@_1em zxnXbUHG}PBM7bh=_3CThvNA&UMw18k-s_;i(0<~Ox^~kWLF9KyZl3k3;qzn?)}`yu z79~e%5ntMbGq9`+Xs!LQd?hLFBKvpDp!gd852FZ? zsCRQ2@5fe7Ry!z&PFqU6^P%e&WOd8jc+Hte@9V(=RyYK5>$cd{ev4shQ zOoKkYG6Uiglk)Ms`d+<3zGr;xJP&&Id#wwHgMixiLi3UA0nvvn)I;-=c9H_nZ5?vjO1!_N{Nm9rSxp0*UI`bUei=Wtn zGRsg8cFwj^dGCl(h#E*eg04wfSy`>0qEILuv&TgNqyt3!>yJX{j3Gi{ym;2(VlJco zo4-r{RqZGR(cDw^e98p zkBrD?!faL~P4?4=X)4S%(26zz1pPPbLnL8Yj*1`pQX-q%+{0u4%S(?fa&Wn6H13l) z&bLDeMB(!v!igvb6{x9mAOJSHQ%9mQ_c{l2)gnSEe6W){WqI)5D2>m8OV)9BN>GEY(AYQt4zWiyv+<|0~=0(|nn_ z{AE68_|dU6RApZ(_~(>-9t3<8l!;6zrbPdm>&pR96HU^4m!_5%Zf<}5ddaCjWDvy!frM6mhdr1bcNy;$?Vu!ku!`n#_m4 z*BNvxQ0Or3tTv5;0F30tkyUE@99vE4=IDSWbzNini`CDy?^<{p4})p$^Z*|J@KQ>$ zQhjnZt6-A^te&faDUiWuvzlc~_#z*;j#fS+my++uOCq!zk%9i4oF=)lg zd)|Qe+ui0*HvTm>V4jHRFC0h{ky+bQ?WNd%j9g&dKG+&<5|RZ^)XX$B#5q z!n+cYzzp~OD0RA)rw{F0orcoRd~e66n=<07hlPO_r~6-|CLnh62+>7#)4m)ni*b%D z-%w9puu=L-&?Tek&?p$(u*{QfPB&)TSSn}sFS7md)$^3Sy1eFh=+U9|MXqP=9kvKx z&y^n1F{#?O6P&dG)%VfQHu%?LKC1lmk%X}eIXecqd7fmUEml#s%?mY!`y)zS$txsY z_arVVJ5K(5xqrumz%wxUgBYwpB%y&oZqj_jQ!pKgEE?HyU|%^0(KI_a-?yvoejh!4 zyTLSFQ_m5kCS^2E>QxZ>)~&JkPxaV&mTH%gfdY5Bu#Nsjm2m5RgxTtqV^p<*#FFQz z$q7ziZJ zRW!0x5`L|hq+6%l0rN#jFEOiM=NA z&N+_ts!l3`=zB!~w$*pmf$Ihg{V5+0)zZuB#z}#A^IrTLcH}7>zg1oqu@Hxgp4kK+ zzcJssS5#mBhT^V(XhNBRo4>}t9Lz(;GQ;zm8>V|O6WlXadiD!bcs-WH39n8NHhd%H z{H46i_;*;>6c&~x5qP;;ANXS=9tJdhM9ZL?m6bIN`B`77MleMPll18T2c}rrf-nnX zukIQ9>0pshO*)Yji+*RmG`x{Lm5|&}vlAK<5HNbGg6uM;S%6%H^h z$fr>y86aDBZoF?<#JM)8_sj3$U4e-zzW;w}n4S63)FeDSJdU=u7a45}fw5g2d~L^@^YkQ!>}k{0QXVTP0* zP>>E^{_DH_F5mTDoLJ{voU_h8>v{J6ebUiVqo#O3K|nx2t)c!*mw(5H^jH6|mj3&lonn)&e_3w@MTiq3WH!DAWrB{^Rd$ z_NL6JjBSRK|G#G7>gpo>uOQxVARXIXOED=($%|^pwLh~J-tU_La5MEXAv zhHeOmc-@}OL#8u!2NWK6PbpOn#G|7{6D&}SKn+xm+?d*o-sm}O4ks=AR4x&12^GtT z6IO=u`&(>9?;g5BxDT~X-<(gUmq|!^m^@PukFB|?e^-;Y!8fm?uSy#U{CBm&e3%?{`CJvH{{ACiY69)wgnqXg&m`2P+->aj-R)5ETsJZq`jVmVW z!ksWT+=Fta#}DR6`x(N{vj6e_!zJFpKAfu+PSga54sMeG9%<85QzO?I0Ow}cyPNGj ztXF4l9p!WLLh$aJp0IVM$n)&$!8liO@?x^e40-$xi;YVJ!}{(|u;>MyXVoPbuG@xh z7@CxS3gwp}wroG`7L#blR<~P31pq=x$;D5NWNMqFgJSa7bM3!b&|$; zey$CQXTja=wL|5=@u_{h{kvC>2PZ4;651{N`*fiAt+w{{Ta>ZDWRd3MK@(pr<2abv z6o`=+f1bf}h+Zk?s69mTKiuNs&k-4+47v&gi%IV4U0t2=Zf`XWQBe|h$a_vdtL7*6 zmpc}c$g%FBpQXx@|4o~}Z8qe>Gf)jjKhTn@@4vEO3&}*LB*=K8XSgbO| zX2=G#wt;g{s1f0_xc$W@&qep3sW-solzs%WsJ|WwI-&T|DH@CGdw|)QK^VL&r05hw z?&lBK8yH(3GM;15<%_kKpu@%3P14mEd2F>6LZA|h#cEAb46stj4#;kG?5G@tY7Zlp zXwG!3>AWWA=Imz3@3NY!l1HZY_mZW^TnGmSFUA+c7K||%Okq(`Ut~yB9gnd5`auLG z^XG?3jny>CvU)^1CEYhQH8to{rHr%eSE&m75r2z_I108)LPEfPuQ|6K!V4d_wR|h2 z_iA<28+qc2+w(Jx>zGr8)ePC({qJ2mI6ibxnWh_jr&c)JndmlDe7Lh;tI{=S*uCIG zTiTl@94xG^HmPo7(w9u_T{v;_WBBkIJX%yy<&At{rUB=CIt7|i5^)bY`;#T5{W~zv zGKY~sLys)J{YJY7c{+M2r2k-V&U-&9w)Sdm-#R1!S>96sV?+<^sZ;O{t zvmiX(kocx?$;SfS(ofF>x&fx$o;$odJOeQV9J- zFC@fkCW{&;ge#1anfbv%ozk6`$3X%UzLb9SH^R4<1;26T!i^(kYR)dA6N_{8Ybe20 znrP`Tz0#`Y9K{y_SuriXl>&*Dq}q9{t7$23F4NA0yEE?IETLZ_((h2p_S{R4Chba# z+V8k7k|FQXDB|lSo%Fczb&O%F^Jeh5%+Fm#S>|l!@qM8QfvLBaOI38{tHxfR^!ICV zoX(z@Q~-NAledzKtA?t-tL%a|K-h2Yeg{79Uo3$XT7jOI+_6Du#WNq=w_nBn+g~ca z*W-VxU0D2!B=237!EuM?+dC~R1#>RJN-&=Ri1-!0r_E6bEkl+p{xNk(SLu&IU9hVe ztFvsSrfIL=m=Uv%_xEO>{^k7y204*f=FYwumW*bJglYPBHeP?l$=cqCpIo2nXql1= z|2~PCUK3>Zy?z~=^l$5fwRxDR@oMbB5RFf!ZDpjr3VapKHmyq8Xb7l(pNgtr?Eek= zj(}F|TW?14^6U_f^`0<2W2}^qNb3%BG%$85mld8%jp9}K7}875a$szd4Rj*WEvZ9w z#u|!G%J;*9lB6DL9lglUk4MQJpoxl-J4?ETdvDeW{G+1`n>`{m{98k$xwRKV5p#Vv z19}CEM0mbQ38!Kf8$OXO2(xNSC68xzWm|1enj~OjkHs18Qk6|cLQw@5j;+gOw`z4{B#Rks0oLJSSOW*#0Pi=YlO+x`? zNwl*F)X&+sg+fYLs3q^Ce1F~C%!!{78h^RmT4ITWUpn-$m{9}>aF((;8f;QWM@{rW z%vYJje!IjY9?~0*RP{YMxx8wx8yH?XSyS0}I=EudT5*ZvQdDGgFm( z;hxhH2xjPH{bVg>>FEBZ;eGhpSX zNt-ICMPYZF$Q@|^@h(o<8HG?+2F8yxgGbUR!m@~`L{NlI)z>*)QIwO5 zTUEF`<50@5gOQHTr0Ic>=MQ@26-l_Zfbs@)4_J#k-2`j4bykkKZw5xX+m>l{^qZnw z`BtMOtCZ5PjCb~)8u~0}U$SD0Fc7KA3c&;wv%%IbD>6R&@(nev@T;vru%T4NfV{YWo^W&$JCnt=cWQDqt!%my* z5fQyv)c2?rWuja&`N-J?2Y!^ozp`1i74Ob4NTO%1hzb3Uw4;Ok%^#U6UWn(%%H9zZ z5wabaIl!*B3o&YbtyamsdQd%2>9d$K2Wqf~^Dk;%s zC%)n|GZMq{R+_1;QUvGFRAz*HdDp;O@ta6ewioqRAA?hMk27gbWhSX$MUyG@o6s^Q z%8dzFv2D-&-L@R_sfjYAz8zP7diFTsdxrRflAk3!f_8uu$L8WLeIV8QZW8TllKgXMM8geBEiy;SmswU%(#=#hxBs|NjA(H$N7}d;|BL4y z@D-&+f7rV$Eh??V)m6(9QK1}1NSAQdD!GfLPA2t7eb#TePkezzlE9X&3ufE z`J&z_)4yrA#wu?^IMZy#c>_>@^Ollr>-;}S+`&^IJ(Sptt``Uq021+x%WY{E*nn1Mn_LYkGw{+ARg;KXq&w3 z4^6hOYP_~}-*v#+7#K;xk;%+ZA0x`CU+g>!q{8WSng9^Y9?u$A@y}i1_i4nkLLZ5B ztZkOR>dC=U_R*y!x*1MRqv|oYqyvy$XdNfJ+aSHT2Rve<`8-2}4Ia5O0A^!j+qmQ4 z=vatO%Fm=tpw=4_zY;9pFecC@XeHv;&Pt-^*ZP5PSYj_}rH;tSH5c6P3@?4{Vyj=ZfGn9_J-K51kHTqdTqm$)6Ct;K%L zHSr`RF`-*!mr@38ZQZq@`So1=p1p&EM-QuUtKT>v$kkO$`RPC~M_lX8@lB?U-kq z>R*dIfAJz3U0*MYImHE5Zh8+74_|d~hFc@cDFbQ*p5InSKssTsCi>M?tnZSy&v)d_ z)NAeZB}{`W808~ui6p1QDxh+Puji_*g4)94GH+Aq9+lD)x5&ESq2R1bY2sf1P*ZrA zR;2b69e;S-BMA#=f9BdfFq>6oey}nBGib*jP1oa?UBxf&=G_s(vkoG3^x0g9+q!@ASz37+& zRiz5ZbNeBnjkF-rSuT-9;!$f3wE%TEd?wE8dyGp%NuWhTHodYsDjl8EoiOA70~80; ziIisw{3uaZ1o{?mSJ>u?y>6$2PT!cEu>Ym4<*@4)$KIOnysvVVREV~B-C5zw|Jk~H zHYB@=oxg|1j@*{RQ(2uM4V}|cVa%xM3zou)&9H7f+0jBM?bbE->6JPZc2D%zM@jUs zE~kz3qNb9TmS1j`PL`Dl;b82_3FCiH_z%~*uXS~$pBm1-)#%O}pHDUQ|HU|Z8et*m zDWk^=3RgD>TSZ^9D7Sdb3UJr&yJJ_rAikBor?F^2L`OKX&%h+y*irCal=Gjt{`5t4 z!ACaW+yBMd&L`5bbtI51;=a)hZTjX3IJapY7J@JS(Uois~9I8#kEZ;0+h!6}U~y`Yh*pvToPsYiFYVs;l%o=%RJtz=`+AJsIDF**IN&JAkjna#i4 zshC=MxNyAP6y)gvQ*W7m-d4k`sezLa#t}Jn{bhS3J)J1$I?D+%`88aB*fW_)EA?Y< z@5qq9L4IpPd4^-rOOr;oTn0u)6;Wn>k*$1XQx_7whG~kE!T+53$JuS3xItmC>cb#M zVm6r?PH76?bE9$zXvBNRhpV7wc~-z>WU28!AC`|}`&sP**O_Wzf5+7zX7`2t4F80$ zGre>#QyLo=y}_q84`&&@m>fmWM6;#Hh2PYXmsvkG`TNnOD2F~F92Z)ReL!9rG%(9R zn+3bDZ@LxK1w`;l1oO~?&0_8-e93F-)1c#Fas_V~X5U8x5aj(Xw7PFvmt!~Kpg4z~ zj(IuHNcY{t{tH#i^j?><5z#hv-0!@uhys%Fd& zM$E-We$>iwEYbsIe%XeL_VD%AD8NmJlR`{do`7Bz?|vfXldbpKpenvLPB0(}k6Z2p z#N3MU#QeNHlj2Yo1Y@u0`p(3j3xluscvkat$Rd;*aF z&!tZwYFyJB%YVT0v=5%6DtDL2>UYP*P8oXYsp_o+?#umqsisLY+N~_e&~`*Z%pDIkt1dwmU5@6>nlwrhbO7=-g1SSi@3YQw{Q92XzCvJ zUv2M?7k|8271#>rAtYV!nchZ(glFG63J;^RSOb0_ksrBKwTzv8x+icrPGq8mHJSAJ zXEWB*Z^t6r>ZW;l*>`OsO*11$ij2FbBUd^08Cc9g;*@Ad;D~Yk>L_6v^rzQ7kQOj7 z_sNbBdUNyDwjc8N1VqHHX}@nS{eC!)%c|{`J<5VKl!jTM?iEPlqGgP;!>wrry$9J0 zXGm$}=S^ys=9inc8J3oo_U&1XMr@5&HL7RevMd&c$5rrSYG%}GUql@SnrljaxPB9g zUSE3opAUF?9;LBuT}>=zog3}oH6a0@0rsu>q|e-HU(T90yJ-|(o(51U6}I{wfz^aI zgS)N5))EN8^5qu~Zz)qx?@Wc!`EyHv$;N9MXJR#1Mi$B9&O(=##TMPhrF@cGZDP2Z z(0$h)ho{0LEJNaNh(Vy z;1frr(}7*)`+zbu8;6IbC0eMoMJzxs_dg(+PWOG-g}kv(#z=!PmR2hJOA2dFS^#=e{JR}V7j)5Lm=^-q^z*c|NL92q zYEO|P6+{>ASB5aJG*|pM(-9V)nRz@R^HmG})EFysds2NPm;LQv(rt)4x>fpQUsYP6 zy$p;HL~!r&h?Yp?b3puW$+=o~xG^+5+|@?t7$27|2Y@W~{u|NNRaMIR`V-4nE@jv# z&h zfsrNb6*c+d_0Q>1R8z@sz@VY;3~HdM^4WOFv(UW*3gRz*Vi9k`hde3gqQHH5quqPr zUW2Bd$L4$}TIL!gsB!i&$$jeWc-7a6eo=GhwcPrjw$fWE{XU(4T$ruPZy}E7TkZHE0bOM13mltP$_NaN%2Ov*a`;S zo0NUHy_@E88W+b9tz|F>Ii4S5a0F_^T_Il4_Ek2+)us^kMi)1{$K_63-V1qdeH2V4hv8S2&w6{LpbYL(0ZjE zgj3^p=vP)_akfZ>288~Juyb(ej@7$+j8Q#2LXKV8L_>C?`K6)8eKOhw%KkwVW))CC zX%am0IbajTLUZyF25|c6#wY5;hU+*J^d9o&pI~K}t&% z^5i5^nXocG@B4~7DI%a((jBpo#gfhk!k~8b4~UTWX%yAEqi1fdnHPO+(1pQm4Qt+h zj4f8)>kkjlhDuGh--uug{$?rI7o(3Gkg%9$_SdfgPR^Fi>>bOiKE+w%`1ssp=kdn9i#5c*XH_7%7b$q&@2t@PB(v^$K z^G}Z(EashMshn7=C6B&rX*tiS2Y`DeB_*h53$nm7&BZ2z+5pG~&)e>kYHDiPhmqwd zZ|BoKcijJUMN(=he-V_GoP&Z!8opP;UY>wt%=p&;V`k6q@_GL0YAvjc!HAno47!CJ zk`D9_XLEmQbAF=&of6d-T{P&Eg5jd@#EgOL;Gkj81M!_N1GnC+fEwv3LrV+?cY+*T zR`$i--c8o7xw$#+xKK2*^W%L8TC=8~Oc&x5;+68ux4ZCI7*z{CgkinX-}L|E7ck58X!e2RyJr@gg3 z=Ihth5#@FxG3L{o>xS;D*7byYJmB#Duk{%}w{1UBb^MpoeRnRi?|y`sg3mm_%D_>Q zbE~3;v}&Fh@~&=UL7PtpX-^4T!%)yOD2iu@5(yOcn@iI%l@~Z9y>V>cmY0VVdU?oq z-A2~)i5z2^fPKmfOhBI3@EIw9l6!Ye-#5$=rt{9$IX;h64}VS0=qU0(j(|7^HJ+*P zLhI=;MCy_jk4L+Ih@^EQ)_=}4w50Nh%z$6JaY^1SvLS6otxFjesD0^PRr+Xb5)IPR z(K?4xyxB@ XSz?>75Vz#;3%y)s#@0B%&^_iqEKr?r literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/prepare.png b/windows/security/threat-protection/microsoft-defender-atp/images/phase-diagrams/prepare.png new file mode 100644 index 0000000000000000000000000000000000000000..1001e41e0dbf403ec43cf619766ba4096db69553 GIT binary patch literal 1713 zcmV;i22S~jP)h2TO9oLUKx;8<`K z!7YUz0-TC_K+sEoQ$bvkD-{w5sZu~u0p-xDR6x{^3rI$4AQzCyhf|dT<|{E!LiL|8 zmYu}*u0Pi6xAT)$-jA8_c>aDfZ}-h?ireizB?Vi~DQS751ZIvBm^n&d<|u)gqXcG- z5|}wkVCE=+nWF?|PFk#gUT$tKrKhJ`ycY3kUXn>I;A?G)&8)fNnEh*Ii@eh9+Knk-;sQsA_{a149mTGXO|xD zz0m!ww|?KG-kE=tUIwCD;IHoP(e6>?vwZq~-JrR(19SX(3!qEj+bf6k=ac_}UbkhW zQg7`gI{mIRWH~JpPpsbVhM`N~@#WxSZrSAwa&=uH$EP`A%fXl&&WbB4Dkvo-#kVyz zH5uJDEYK`4#@+zllC(1tdNK<)}%i%r4#>PfEJw2t>)m2(tT%@+PHZJXM7@7tC zYa_V0z_oo$Ba0r*^>(_wn$s2*7E*0(EzQi#XwIW}Ny46F!Qvw&CnraA*+oS~zOK8w zyW7{D*VWb0_V%{0dK|;@kw;#W3=9nT@}MlF2PhLm1kxg3u=10E#0mUdyTEApiHQkn zZEX!Wx3I84VVw08%;bD!k>&G>T z92P>ApA2ZW;14oWWBPLnvd@Q2Bb_X4{r&v`*QB@r76mb6T5Pb^U?499 z^38+}fzMINyRj45UYZ%RvZMnBiw8qPL%w}F>j~)060yNjVZAah_N7%vQofnd)kRlC5i1BI{oGcg~O}bV04rQjNMEr%#pV(B`&_Hwx zT>4%r-MN|>k;o8tr15=owE%M>4)`M`eB<6h$j6rw%c%6g`><_G(GA>eDS{jw*Wr*;hB08cKIHpgsFh1wz zUNH5V9%wNJ{=9LXjr<1Cyt7&Iv$9FC(D@&X&C@4s1 z-GZT3Ht4`^w+Dy|aO`k6OkVTIv6R5;>+9kZR@>9l<2ye!HI=|x#TOO=&&|yROz#P{ zNno+Py}i`Y(cwF%Cx0?w>7^^2ohwPg;=%Evxw$#OVS;tf&(Di}*)7A-^8bWqJvurn z_Cw`QMp$^!5TT}~M(oed&iaG{=!*OL`ouosxbeszPfT?mY<3{ln}7v##Zm%GOSBSd zeK2#_TQD9)`j4sMC@U*VR8`{wdx7B*oAoiI5wH~)D=q9}4{7PCSA;Dmzswiwr@-{| zG`ZdGkohsy2V1hkR$#0{hPZUL*bT>%*Yd?N9!-XtMG4y5+gS+A*2#he`{Q}8f5AEj z*b40UEH~iTUTV#Wer&sF%-o#4ULfXaR~No5Hp%etaH6Yc7_7Z$OdIn5v?6Q;c0Tn| z^^l8pyeDE-C#LJl`PhSlgY@9RgOK?f8XBm+zTTkP#t+tB^v>BDWPINIZPO<(#0}>~ zS5{UUQqOp!9#t}juLaj$qPewaJ}dV3s*8(@!{*P+%ZqFMjDoGecxvVRx`*1Z4*RIKXs5z|WKOmkZ81AIGS16DOt( z*x;tXhUeO0x~cWOaJfmG8C}*!c`RVRLqo!M(36T^^NBM^$t+voD|qdsj-3r2c(Yr{ zMaLhCaG83=w%Qoj{$sBXGu3g5DZ+_m^GAw{a9$EgGzxw8hg=tII6d_lP zl`k6_e;jD)AQqG+*{3F(ZF$Tn27wc#boR+obN(8jGksyTEEY2?EDXK9*_aw&;>2dN zkrohzZwpBFoW=^QXbhf9VIb$*D-FKfC!Jf%To|TY)T1Q}t|o5kAxX)g++ATOQ8YYq zxovQ|lw)CVm%nj1D+c4fMCZhVcV3dBazQ$c3wCqktFX#$g)hakP71u=glyx8D9%*` z{W7J=#X`UW?^5jUhJX*g+Kt*SO#b>I3+6D-XetlEh&PILH0SiGL{ghSSkZ&}Ol=QI&=2t6wNm6txGnFfx^ey4bI4#uHYT!kRj8 ziHWf4>gqv(K&Ny#R7F*_*!4uln$l8aLkrM3bM@;JXIurI&Cl z34^`37fVs(!Pt{MgNiz!a^3EBkBRsiuXX+Ui&jq=+eUmuSQs6JLdhVh+?0 zS>S+ym6QcO2cOiE(lhw<9C3Slx^@D9wnESX?GS};%BD}H>wC_-Nx5_mbbJPZS@bn@ z$y{BC7RKkep&J1LUmo`HHpVKZNQL)6sub<~m9eBoTplj1wDU~@&uc@O$$;MC98{0m z?Py@e;+kmYoCuY!F6~RoD;XvR+vFv)DrI5at!uA;w@I7Y8WdkRS~o*0Wl(loA6Jcb zE=w!EC1@eoBcJ=G)-Pn)@Adj;HM>D#z#EG+_V-LpBLv*GI~))-u+Pfc8smF7g&rF) zGe+VaD871>Q{>ER?tNR3^3l_bcA^%Y!-Z;Lf@b;%BSBB%N^_Gn4mfXQ$`NIV>Fw?9 z^w`z7RHTphub=W6SAMb#4(m~(^aV@GHJq^v9XwtCL&733zQ2vW=u;So3u{U zL^T@a9X=xvL5-))Od_-blaFW@8sOWO9v%WO7d28quCR)wu!Ww_JxPxE=~STNLQ9mT)pN7a-6|a z)DQ6+zbBoU+>gg};7a-{;>E0~{MJi9(6I*{6>iJ)Sb?Gj`}~4Ae9ByNbv0y4`n0q) zH8!XcEuW@9_Vc3(K7ERaB$3J4drun?*{lZjo+Lnb5Gy4-KEJvBb+o3F!oRux8~CwQ zaq;sN#MA457Wtg)><2<&>~LgSLJJm)eH%?8HPdJEqjqe)PH?G7 zs;a7wxJye*<#v|-P=9k9ISIApA_xS6smsgB$*G52nl3V})i-055uVX91;EIW(C~0; zH+zUFNh(cotZ!(tC{~Qtf_7}7!|xxeah=`7!NLDcFfNOlMz%pqNW2#{r{B>a-)mPN p(;?_)x+BX^btC^j`7G@bA|PrE{aouA4YU{A04F3GQDcWo{sV3X&OiVF literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index dbb50ab562..6977f6f2c9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microso When you switch from McAfee to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare setup onboard](/windows/media/phase-diagrams/migration-phases.png) +![Migration phases - prepare setup onboard](images/phase-diagrams/migration-phases.png) |Phase |Description | diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md index 703d353b4c..dd52552ec9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md @@ -28,7 +28,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](images/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |![Phase 3: Onboard](images/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md index 4fa7e47e70..886846f36f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md @@ -29,7 +29,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | +|![Phase 1: Prepare](images/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
    [Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md index b9f5ed18c6..432aed7160 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md @@ -29,7 +29,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | |--|--|--| ||*You are here!* | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md index 7c9ce553cb..5cbe6e5c30 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboarding.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboarding.md @@ -29,7 +29,7 @@ ms.topic: article Deploying Defender for Endpoint is a three-phase process: -| [![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | [![deployment phase - setup](/windows/media/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | ![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | +| [![deployment phase - prepare](images/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | [![deployment phase - setup](images/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | ![deployment phase - onboard](images/phase-diagrams/onboard.png)
    Phase 3: Onboard | | ----- | ----- | ----- | | | |*You are here!*| diff --git a/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md index 2db4bdf69c..f93867d6d6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment.md @@ -33,7 +33,7 @@ ms.topic: article Deploying Defender for Endpoint is a three-phase process: -| ![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare | [![deployment phase - setup](/windows/media/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | [![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | +| ![deployment phase - prepare](images/phase-diagrams/prepare.png)
    Phase 1: Prepare | [![deployment phase - setup](images/phase-diagrams/setup.png)](production-deployment.md)
    [Phase 2: Setup](production-deployment.md) | [![deployment phase - onboard](images/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | | ----- | ----- | ----- | |*You are here!* | || diff --git a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md index 801cfd63d9..3f5f8aabcc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md @@ -31,7 +31,7 @@ ms.topic: article Deploying Defender for Endpoint is a three-phase process: -| [![deployment phase - prepare](/windows/media/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | ![deployment phase - setup](/windows/media/phase-diagrams/setup.png)
    Phase 2: Setup | [![deployment phase - onboard](/windows/media/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | +| [![deployment phase - prepare](images/phase-diagrams/prepare.png)](prepare-deployment.md)
    [Phase 1: Prepare](prepare-deployment.md) | ![deployment phase - setup](images/phase-diagrams/setup.png)
    Phase 2: Setup | [![deployment phase - onboard](images/phase-diagrams/onboard.png)](onboarding.md)
    [Phase 3: Onboard](onboarding.md) | | ----- | ----- | ----- | | | *You are here!*|| diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md index 1a9ceac19e..0a7421bb95 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from a non-Microsoft endpoint protection solution When you switch to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) +![Migration phases - prepare, setup, onboard](images/phase-diagrams/migration-phases.png) |Phase |Description | |--|--| diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md index 40074d3a9c..18422aba57 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 3: Onboard -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](images/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |![Phase 3: Onboard](images/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md index 334eb1708e..c55bd95f20 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 1: Prepare -|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | +|![Phase 1: Prepare](images/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
    [Phase 2: Set up](switch-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index 5fef44d9d6..2d0c515fe8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -25,7 +25,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho # Switch to Microsoft Defender for Endpoint - Phase 2: Setup -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
    [Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
    [Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| ||*You are here!* | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md index cd4d8387d3..0fe3fbf828 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md @@ -35,7 +35,7 @@ If you are planning to switch from Symantec Endpoint Protection (Symantec) to [M When you switch from Symantec to Microsoft Defender for Endpoint, you follow a process that can be divided into three phases, as described in the following table: -![Migration phases - prepare, setup, onboard](/windows/media/phase-diagrams/migration-phases.png) +![Migration phases - prepare, setup, onboard](images/phase-diagrams/migration-phases.png) |Phase |Description | |--|--| diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index b78be37a84..a80c0ae736 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)
    Phase 3: Onboard | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |[![Phase 2: Set up](images/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |![Phase 3: Onboard](images/phase-diagrams/onboard.png)
    Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index 86b5570c34..10e8d99bb4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | +|![Phase 1: Prepare](images/phase-diagrams/prepare.png)
    Phase 1: Prepare |[![Phase 2: Set up](images/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
    [Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index 68a0f10921..401eaec958 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -28,7 +28,7 @@ ms.reviewer: depicker, yongrhee, chriggs [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] -|[![Phase 1: Prepare](/windows/media/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |![Phase 2: Set up](/windows/media/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](/windows/media/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
    [Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |![Phase 2: Set up](images/phase-diagrams/setup.png)
    Phase 2: Set up |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
    [Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | |--|--|--| ||*You are here!* | | From b51c5a542168bb6cc519325e9db7dd46f15745e1 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 17 Dec 2020 16:07:21 -0800 Subject: [PATCH 317/958] edits --- .../microsoft-defender-atp/android-intune.md | 24 +++++++++---------- 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/android-intune.md b/windows/security/threat-protection/microsoft-defender-atp/android-intune.md index d899f7568a..52450260ef 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/android-intune.md +++ b/windows/security/threat-protection/microsoft-defender-atp/android-intune.md @@ -29,7 +29,7 @@ ms.topic: conceptual - [Defender for Endpoint](microsoft-defender-atp-android.md) -This topic describes deploying Defender for Endpoint for Android on Intune +Learn how to deploy Defender for Endpoint for Android on Intune Company Portal enrolled devices. For more information about Intune device enrollment, see [Enroll your device](https://docs.microsoft.com/mem/intune/user-help/enroll-device-android-company-portal). @@ -44,13 +44,13 @@ device](https://docs.microsoft.com/mem/intune/user-help/enroll-device-android-co **Deploy Defender for Endpoint for Android on Intune Company Portal - Device Administrator enrolled devices** -This topic describes how to deploy Defender for Endpoint for Android on Intune Company Portal - Device Administrator enrolled devices. +Learn how to deploy Defender for Endpoint for Android on Intune Company Portal - Device Administrator enrolled devices. ### Add as Android store app 1. In [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) , go to **Apps** \> -**Android Apps** \> **Add \> Android store app** and click **Select**. +**Android Apps** \> **Add \> Android store app** and choose **Select**. ![Image of Microsoft Endpoint Manager Admin Center](images/mda-addandroidstoreapp.png) @@ -60,13 +60,13 @@ center](https://go.microsoft.com/fwlink/?linkid=2109431) , go to **Apps** \> - **Name** - **Description** - **Publisher** as Microsoft. - - **Appstore URL** as https://play.google.com/store/apps/details?id=com.microsoft.scmx (Defender for Endpoint app Google Play Store URL) + - **App store URL** as https://play.google.com/store/apps/details?id=com.microsoft.scmx (Defender for Endpoint app Google Play Store URL) Other fields are optional. Select **Next**. ![Image of Microsoft Endpoint Manager Admin Center](images/mda-addappinfo.png) -3. In the *Assignments* section, go to the **Required** section and select **Add group.** You can then choose the user group(s) that you would like to target Defender for Endpoint for Android app. Click **Select** and then **Next**. +3. In the *Assignments* section, go to the **Required** section and select **Add group.** You can then choose the user group(s) that you would like to target Defender for Endpoint for Android app. Choose **Select** and then **Next**. >[!NOTE] >The selected user group should consist of Intune enrolled users. @@ -111,7 +111,7 @@ Defender for Endpoint for Android supports Android Enterprise enrolled devices. For more information on the enrollment options supported by Intune, see [Enrollment Options](https://docs.microsoft.com/mem/intune/enrollment/android-enroll). -**Currently, Personally-owned devices with work profile and Corporate-owned fully managed user device enrollments are supported for deployment.** +**Currently, Personally owned devices with work profile and Corporate-owned fully managed user device enrollments are supported for deployment.** @@ -141,7 +141,7 @@ select **Approve**. > ![A screenshot of a Managed Google Play](images/07e6d4119f265037e3b80a20a73b856f.png) -4. You should now be presented with the permissions that Defender for Endpoint +4. You'll be presented with the permissions that Defender for Endpoint obtains for it to work. Review them and then select **Approve**. ![A screenshot of Defender for Endpoint preview app approval](images/206b3d954f06cc58b3466fb7a0bd9f74.png) @@ -218,7 +218,7 @@ Defender ATP should be visible in the apps list. 1. In the **Review + Create** page that comes up next, review all the information and then select **Create**.
    - The app configuration policy for Defender for Endpoint auto-granting the storage permission is now assigned to the selected user group. + The app configuration policy for Defender for Endpoint autogranting the storage permission is now assigned to the selected user group. > [!div class="mx-imgBorder"] > ![Image of create app configuration policy](images/android-review-create.png) @@ -244,11 +244,11 @@ above. Then select **Review + Save** and then **Save** again to commence assignment. ### Auto Setup of Always-on VPN -Defender for Endpoint supports Device configuration policies for managed devices via Intune. This capability can be leveraged to **Auto setup of Always-on VPN** on Android Enterprise enrolled devices, so the end user does not need to setup VPN service while onboarding. -1. On **Devices** Page go to **Configuration Profiles** > **Create Profile** > **Platform** > **Android Enterprise** +Defender for Endpoint supports Device configuration policies for managed devices via Intune. This capability can be leveraged to **Auto setup of Always-on VPN** on Android Enterprise enrolled devices, so the end user does not need to set up VPN service while onboarding. +1. On **Devices**, select **Configuration Profiles** > **Create Profile** > **Platform** > **Android Enterprise** Select **Device restrictions** under one of the following, based on your device enrollment type - **Fully Managed, Dedicated, and Corporate-Owned Work Profile** -- **Personally-Owned Work Profile** +- **Personally owned Work Profile** Select **Create**. @@ -292,7 +292,7 @@ displayed here. > ![Image of device installation status](images/900c0197aa59f9b7abd762ab2b32e80c.png) -2. On the device, you can validate the onboarding status by going to the **work profile**. Confirm that Defender for Endpoint is available and that you are enrolled to the **Personally-owned devices with work profile**. If you are enrolled to a **Corporate-owned, fully managed user device**, you will have a single profile on the device where you can confirm that Defender for Endpoint is available. +2. On the device, you can validate the onboarding status by going to the **work profile**. Confirm that Defender for Endpoint is available and that you are enrolled to the **Personally owned devices with work profile**. If you are enrolled to a **Corporate-owned, fully managed user device**, you will have a single profile on the device where you can confirm that Defender for Endpoint is available. ![Image of app in mobile device](images/c2e647fc8fa31c4f2349c76f2497bc0e.png) From 258b1b91dc8dedcb54c7aaf414220be440c789c3 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 16:54:27 -0800 Subject: [PATCH 318/958] Indented content in list items --- .../switch-to-microsoft-defender-setup.md | 23 ++++++++++--------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index 2d0c515fe8..c1ad46027c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -87,11 +87,11 @@ The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/d `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    -> [!NOTE] -> When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. -> Example:
    -> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    -> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    + > [!NOTE] + > When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. + > Example:
    + > `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    + > `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
    @@ -227,12 +227,13 @@ To use CMPivot to get your file hash, follow these steps: 6. In the query box, type the following query:
    -```kusto -File(c:\\windows\\notepad.exe) -| project Hash -``` -> [!NOTE] -> In the query above, replace *notepad.exe* with the your third-party security product process name. + ```kusto + File(c:\\windows\\notepad.exe) + | project Hash + ``` + + > [!NOTE] + > In the query above, replace *notepad.exe* with the your third-party security product process name. ## Set up your device groups, device collections, and organizational units From b9b89c535deff5eb59b741a509e2b794b29cf7e9 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 16:59:08 -0800 Subject: [PATCH 319/958] Indented content in list items --- ...ymantec-to-microsoft-defender-atp-setup.md | 33 +++++++++++-------- 1 file changed, 19 insertions(+), 14 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index 401eaec958..04b7812825 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -64,15 +64,16 @@ Now that you're moving from Symantec to Microsoft Defender for Endpoint, you'll 1. As a local administrator on the endpoint or device, open Windows PowerShell. -2. Run the following PowerShell cmdlets:
    - `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    - `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    +2. Run the following PowerShell cmdlets: -> [!NOTE] -> When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. -> Example:
    -> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    -> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    + `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features` + `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender` + + > [!NOTE] + > When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. + > Example:
    + > `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    + > `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
    3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
    `Get-Service -Name windefend` @@ -174,10 +175,12 @@ To add exclusions to Microsoft Defender for Endpoint, you create [indicators](ht 3. On the **File hashes** tab, choose **Add indicator**. 3. On the **Indicator** tab, specify the following settings: + - File hash (Need help? See [Find a file hash using CMPivot](#find-a-file-hash-using-cmpivot) in this article.) - Under **Expires on (UTC)**, choose **Never**. 4. On the **Action** tab, specify the following settings: + - **Response Action**: **Allow** - Title and description @@ -203,12 +206,14 @@ To use CMPivot to get your file hash, follow these steps: 6. In the query box, type the following query:
    -```kusto -File(c:\\windows\\notepad.exe) -| project Hash -``` -> [!NOTE] -> In the query above, replace *notepad.exe* with the your third-party security product process name. + ```kusto + File(c:\\windows\\notepad.exe) + | project Hash + ``` + + > [!NOTE] + > In the query above, replace *notepad.exe* with the your third-party security product process name. + ## Set up your device groups, device collections, and organizational units From 58c113b28788b0b339dab0c1a9d3b451d10ddb11 Mon Sep 17 00:00:00 2001 From: Gary Moore Date: Thu, 17 Dec 2020 17:05:27 -0800 Subject: [PATCH 320/958] Restored
    --- .../symantec-to-microsoft-defender-atp-setup.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index 04b7812825..72385ecf92 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -66,7 +66,7 @@ Now that you're moving from Symantec to Microsoft Defender for Endpoint, you'll 2. Run the following PowerShell cmdlets: - `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features` + `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
    `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender` > [!NOTE] From e25ad2d1521b8980512ad262a3cbbbe6c7491954 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 17 Dec 2020 17:26:27 -0800 Subject: [PATCH 321/958] add to timeout value in limitiations --- .../threat-protection/microsoft-defender-atp/live-response.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/live-response.md b/windows/security/threat-protection/microsoft-defender-atp/live-response.md index 312550fb3f..193c067a32 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/live-response.md +++ b/windows/security/threat-protection/microsoft-defender-atp/live-response.md @@ -293,6 +293,7 @@ Each command is tracked with full details such as: - Live response sessions are limited to 10 live response sessions at a time. - Large-scale command execution is not supported. +- Live response session inactive timeout value is 5 minutes. - A user can only initiate one session at a time. - A device can only be in one session at a time. - The following file size limits apply: From f50c27aad401fbce2471f2a965f73867bab99253 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 17 Dec 2020 17:28:47 -0800 Subject: [PATCH 322/958] added pic --- .../images/tvm-exception-cancel-global-400.png | Bin 12719 -> 0 bytes .../images/tvm-exception-cancel.png | Bin 0 -> 8640 bytes .../images/tvm-exception-cancellation.png | Bin 24105 -> 0 bytes 3 files changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-exception-cancel-global-400.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-exception-cancel.png delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-exception-cancellation.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-exception-cancel-global-400.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-exception-cancel-global-400.png deleted file mode 100644 index 31e2ed052f1f255195283b75a1611f115981af4a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 12719 zcmd73Ra9F~*f)w6x8hE5m*Nnt#oda#Q`}vP6$?^*C;_e|!QHP8HHzG|u~;9ycn!< zATRa+Z*t69YN;hzj3pH@GhK`&nf!xG7zSJG^Xw%bVG5R~C zeS`Lxx~Fw%!x9TBP9`e6@N_*thx@zf$`Pf9zbDg@OcakWg$f;)G&afNjwy1>#ckxK zG7cqkZ)aZo?A*;Q(B#j3IU!!_8R|eexlq_z1ajYd*LJ>D-T_`u8fJK-RCT1N#ED%& ze|@3rTphlrb7x$cORf_x8y$Z2G{^a&0JO8kF7y)xq9-2%`6-~hi1Y37LoU>h9C_|^no%p%9adT5syFb z-1pXHz9a{UjPJwLU%Gb3v-DwmlN_PJC}dyIu@q0Xs`Qq1Nr>iaBoN|OxrPjTGs<}d^700K0levOYE-THc zc8g{Vc#`MRAMOo1d}}-J`myHPKXEvQn(_ziY{lC4MWQalOrPs*C=r(-dEiX0+-s(@ zwFZW>0d+NS=_8-fmM9|T#!wQaEj%bkia^weaFnS++s*X+tqBGalGNVRa?xXH&Pb1V zi)Z%>O}_I(kU(duS-VeIqBu>%oYRre&87I#9uTWO=w09YFOP#toTlx%`SbM|NT^uK z4OW8!pE-=0E96}yBgL0BUG-{>N|Wk3pzSJ>FLw;Jbc4kI>ZIv_p5`8sHa_?uuKKo0D~}Ethsyas0DK5b+kNG zdi*#!IxJ=Kd+IAzbOzq%szAD@8Xgd7EdVTVIfwD*Sk@ zQ=a>2JPf{?!j7uzM?NgJ^O$wEJzW69(#i`1^rl2_P4w$-$9oZxcgD4fy|)$Y++S39 zx+^~Tt~l=Q_MyG910`PCbnCR`ph;)WD9qJQ69s}Q1+T+WHZ6p6${FnA3_t*V*yHL) z?#X!*vBw>--@1nu1X!+nFNi3byvbP}`dI5L;k^2r%l&3J$|Oy^gq~=m7k5m?-i+*^ z2&Uo|m$(58u)NShBauaaN8m9e)=xkTjGM7A^G3qDA>?|qH^|64hsCKD9%uJHGI+8; z!njPMklRVG-Z$Xo8n=zVJ1Wk^W02VMX4(E2dV-Mb)8ODtgxyFlS`$AiCm+fDq+$I&rIFv%^$@yYRO?HzdD*N2p6`Jq3 zj0suP-IEG+C75Y;{9x&$jaGx0&+1hH345N_tH0+OZ8<%Ow@3!8_w$j*pIGHD^ z)9n+T42fVu%>ZbR^gC~Ko8~hTCtQVk-j8x#Eyx^9*Dh-@S)sA?$uPYviTDh{VA#_FW--WdB}@;wnUHNyb(9qe(a4jIV)GgUE_^voNS% z0s$;W{U^n_G3Y$l$-ymz%TTslZl3f*S`!dG3}*xHe9ao_2pPhGf&W$po?SW4+lVI> zFff|02d^Bt!pF%Z0cpcvQY+6sRMMj~0AYUgxQ055hRyflpKf`GJQbg+ zGo9p`Q{EMZR@Gv%vuwGXuC(m-^}H13g+3exQqhrw1oo6oeUUW4^lDmW9;newbo2Y5VmX8``~3BMR+o4>aisb#t)2x{HwWe<|cq)LCTzX+clr*14{a zw(Jfl(Jzu!sx)e;TDu&U8Ut}t*&CCE>d1&n3Da+L;(rs6xfqVd!EN`7WVP+-7?!qZ z)5nyge@m@mIg{_xniPU&ZS-RFY-+?AvXWXGn<@_b)IM!|R$@^Z;QLrnbCG>D$#}mn zRS0~-%)1tMdsSG>6?S_U7ItUpLjmXr>$%Q+db*rGLh;ZpF>LpCtlTcJz7=mD2c12a z?_Roh-#<8=zQ!!n?cUFP4AWQW=O5~mT!vtDy<{X&9E$fX(`i0GTzf4(E1^d0|5=jF zVE?qUuo_xlYgMNd`p`A2QKtT^he^U&VakP$ko>Zpz>~^S7&s?L?|Z;VKqYA#?d2|J zpXX6_Q8~?=-`9OZ}khN8S-I5r<7_;w1PkqoU2-C6C;c^>n2* z3!ZYSo8IJIGT^Ga-iN^BN~LGN-Pd%s25MT{sZss@9(EJ< z@@=cBO!CbAdI%DY!iskfLv0#ElEI4NF*A~_1)y1km5yZ;4|_~Uo4i;aFK|6LPt|C? za}^V?>(sn(_SY+Dv>lhX2h|$)sBfsS>6dLc{QG)p=STfRHIvg&d2wrke>ySqf|x_U zYUw;!163WwT@z5J&HpX(JHD>885Qb5u3LBN?Rt=K)r+n_J3}q+jTa|R=ogM=S<(xX zsQw;{zF@inxBT#gb(RVT_Es3kiUs%=;T^R0H~&O{Bu7Bv2uYeYzH> z{hnp~mH2O+{cOk^L#QCCS+l2Sc_TkSD|NliSe$QvR+PT&l5HPZ^L~$1o-iE>0TE;9RE@y*o5P}B%~VLxIfdMG zl`{@bUdw|I;5I(@rJZH*!1HUwY>$zS@i@~n>N~&5!i~}6v832rH5)vEvO5xX27#h= za@o1RGCX9P44gmAJlx7L%k#n!YJc*?08<(uLryAbdhaqeAEDjzGX{%2ujTgx8=ODUtHD|6&8y(g3r4YW>BSfF;N)TGKk64RVIn=4%(Z}`DU#J zJ(YMw*zpNw&p#CP5ReS%8w7gwKxTith~GaYY{Ec1e8NeBr0T6T@lb+ z>9~U*N&vZ_XNf#rN!U17&$lfG`Og8?=NT~hR*VhjbCZ6$-|2+iU7u$gOY@*c_aeOX zcAQG!g-fS@Qh@H!GD)UFX)d%C!ehQdsMzt&S%d=1= zkn(6NBoo@kZ-D*4mHdVWJuE9Q%|?2Lz{rK?F_R1~HiUD_n=J}0YKPNKj`;O?xNyCd1jAaz{R zbVWmOrdMn1s8SI8atEPu`DBk0vKNOuodAgw5Oo8$w|v$tmiOVJMJE7fuOXX8ns;PM zH2pa{35~sa-9!#4%p33ZtZ}%Y$r0?BlH-|fW8G!DpL7eYP6hf^pidmv-)2~ox0}o(CVtbt#NBnJ-Gw*j{O=(!gt-^{2U7y+abR{MH~o(ZQjh-O%c7tZ^fzQ^ zqpJRdTd;AS#R%I1)c%{m4M|vf!csQQr|#exQ+ewoz#Z(fjYeZq_$C5if~cP@s&Dob z6NiF?l}xwIph{0dg(EUnSr#ifGFyn_@JEeVi&4GIyE@IEk$NH;N-XLZnA}*TZ;#=l*Y#001YsYu7>OQUCTWQ=y)#uvC^C9twUbYTS6 z)C^;qUblaqcSb4sTI;Nt2qG?0T+fH`=DUShUd43AzsJivFzdSq2VzY@$o{aHBiOUp`(PTV1K;&Tt#e#CNtuk5`~&aZm5-FYsXyzrsF49`9B}*ihs_ z?o^^t%hYTg=MT4n2JWFEe1DYqI<>IrfP7x$0Ed;UoHl5kNAZx6UcY;fh*Kub!fJ~X zk3=A#vMD<|rBBGN{`%}W2b=o6?4U41e`KFR@s|Ch*f-|htgj~s>d!Hht~0J??YV`4 z59Dk{HQDNs;hwhRhjhO3bcx;eh-i}vK{OO3-K#jUYVG8Gq3z5O_NrNp3M@8lo~Q!s z&%MEbcv2qb!FW__hjh}R4-$!!_qX~}Uzup53fLL-ynx6PVldRmth<$-z{)sHM6wc_ z@RbDR!T5~kw81YgM>wf6t_B^xNxr0rTLE9U2mc|avr~IVTv+Y%WYhXcKG|uC|Nf*J zVG+o5U#YpJdTPF3%wROn#wH`l&rmVqI84N4#JHj+ZF}H*IVomF=;U3$Rf3C*wu7zk z#Y1EL=l0s%9|lflby*Q+tB4fYJP;<*ah#J;`&P5h4Usihst1WwF6QMhjrxj&lhK*c zgK!i5K5Bpn%!({@3Z3UmtF(Xu(f;k_OJ+wV2>8Zb9Y+q)`qQ0`9gHc1p9%GL7B3)anUk%cX2ql5|Ty zXB;%yD}NTTvZU{WjW{zE$lP-d>8O)*3Nw@5iA}X~hiVVpoUZQt(>F^EI_p*`Q!S{0 zW;Uu`^@n(!)fhH4<2Fs5a7q<7G&^`jfLAzF>CmYhg!h!H%1K`*^6r*h0 z6XzumMW;GoSg>kQ^A&OD;$oO)9)nkvnkBzT?)xc;D((-?_XFPq&RL|M@4gASSLFJ9 zUYxBv*NJv!pqrR*m@9Go3kO-KrPi@Gb3a~e=Njd_$c0Y$L&!y_$`oSkJ)@R){_I@~ zo9UzVssuM}fJ0+3IFS1&FUXyMEq(c7LRq_My1 zk}*X-BebmvXk2P}2z2pJAzWqH+t~2lbA75p(SkD&_ptFC+~aD!I$eUtgJR(OlkQD` z>adjipE~#V&^!-3c2Zmn20YGB0Q%vIhJu~w7}vVa2a~0Oo!@95{&dHo?_$j*5;MKV zlJgaoL6xz}h#$FIEW+HA$BjcdVQ4hp_;C+KTP^-z%vag`^52aoUKuN)7jj!SnTI@| zqw>#t1jI~u2EKOrT~n=leTm6Z*pQPyr>bv*DHFfVBiQ(O-rW`o8Pa!ri8wa(){=Oh z^ay#p%DAXoL)qZ2S-@Lc4}Fvpt3FV)=zVDkdsgYF^X44r(y2r2ggl)|hIGZDZD{kV z5wm7}jK%%e2y)*-dd~F_QJ-=f~F$+QxeIo^Ajxc)Wx=Rxi|E zgON7|uxS8_QhPzW83lp3)4T8YDanqD%#z6^jC!!PC=2kUsA_hRR{ie%mi_ShFo*83py042{I_~M}XcPwI+JrvS73{j8hjRG0r>5J)bF{R* zdx7|%N9ro2*?GCYg_GuAziep#3`P4<)h03<<~jr@#awIL;;sHNFz~Q0(HzX}wYWuf z7CV+m_Ff__^N_1`tq8f5*XKwV^nA0SlCZa^bi7bo@<<()0xb)z-XHw1&I_kVA?lvn zThszYsmxRjDx7MHodJF5iPlOVse?xjbjpmGCnHZ~RvZrrOC3W0D#Bqc(9e;Ph15NR z%P`F}I^lE=<72e*%n!@ve=&q@TQSEzm_o!^{OA<$ zAo!E2Yf^+w^`7@S*P|W_EWZ6nk2g)V1uN>0EyV-4_hc4kav2?L=u&J^Ff}BlByNhF z9sBik$QiZ4WIzvD3B4exF%m7-X)Xo_TbPkw|spO>lU+idnm9PJ#7qCMUb0?Ts)emgC?UL#6FunH0O^StUz!ah=l2u(CY zpypcpm9KxjPUW4~3^qu4L#QH()cGU_#lSr{dEvYa$$q0mXB(iv0I$|MF=Jfw-jX~l z9&EdfLy)+RV13Q}42&J^FwqClD8k~PFb$2=TCo-H%|n~{>;yh-uW_D zLC_BUj;#gkf=v+}tiHO(?hR`&Bhu%; z`zZOZb5`W@GJAHz8`<%J9ylWBu$DS0?xw;>S7RoeD3DMIo0ql<6b!i1G!b@LFM*~7 zZ9UIZU&q4v6t}RT1YfP#aR&9^^``(Mg%0o&U^;Y%-R2SHJ^c{am(;M)+x{J zdNr;31GnrPhe=xsoSQMp8b%hguJ_Fs3j{3gKQGi6s$90LOGp(^^RJwB+)C;v*Ck={ zEHcr{nVe(XVXYG%o?!KMpeIdk{kP8Y9IYS{}I6Y4k znUZ5%%XwJ{R)B@iGvTRD+KzH^+%RaHP!22YT7H)b`&CjsvCmg6g;k{cxQ9@ZS2V1D!C}@8;1P&~Ps{=WTU~^u3h019)?kah1TCCSEg|HYh6DFMQmn)rbRlrfUZ z{PTQH?CN!gv&ZAAAv&`^>D~u3um$!G5{-0N8UfT%t?R(IE*#t$++7iqH35Dq=}FJ7X!( zT_lFgdNF{NqK;Js8K30ix-N`c$K z4)_p9Bk)o0ek~=03;*fGQZQhBx{$=|d-4rarDOEwL!~eJpiMVPc7C(^uX9N@w3<#f z>Sqe!*MVpTHD2C2$RuxK-Z0y2^k6vg>jcZW7XB+U!qmC$;BDW-8GB}^gsK5&=l$sm zm7C11{!A$`+3I}zA0!isvsY(~!g5oGsbGDwV`seNiQPZgsVWIEWWg++mF1EH~lhlVqO1E z`!xU&U4b|>cp#T{;_60Y<_{yX~#Pp+E4>N;1<8Sw`gt%kO<{c^t{87yQCH=?9+3ynou9MnZ|1TG}|9?^2Q=Ntq$zwnNt>6aHQ^KtP z*bv1L!FdctxS~Zbh4Wu|WJECN=H%mkzMt7n`Tv*%$c5hgzu5w)viMTq8^2OxilGZS z{W^=YALbM>9#*1dNRbx)-?Gf!Dk*(E;Y)->aoB@kJ6Z&M@Awi4$N7j;;9`B%=|+z^ z?CE|w&1tKDgl0fQ@`O@MHx0I*1y}6}2?j*^sQ3}z9Z3V=5P~J>_AFxujV7f;F2P2> zR5{J4H2#w_B#dQ_DJN)}hE38ozRrzSKoLgD&KPjHmlO{-FR;W|v(usBQl)@9{Knzx zZt2p-D|bK^cgDXYiqUwddbLHdW@T3@uI>n=``^x~?L3`7j-A#+jWJ0%m{Bo_QUC!k z#j`abolvZ4jZ)ul9j=fyu2DD zD=_xZ>}E%OoTRpn&Tj9~KW%7+zV}9OE2majBBml-Wmc2MhM;(=qDC!jB~y#fVT|Mq zCE4oa3Td~wTM`o#;Zq{>C6l!OI%qG7X!IMzth{`>Y!5M;E?}pVOCS+MgokRvgEZw@ zEobBgm%2IHfc3pGb2Yln^vlOaXzx2E&se7Y(Nh$b#(}#}+rtaKrz=dWzg@olEmbKk z<1mNQD0G7=8QO^N`v2!u!|+$(ESfNgi~FWq4aVED(NSvSjYtjGXYuTvrgRY?ioQ16 z9D1l3R+@?RV2sui@z8mjyTJ8()Dj~gP5U$oJPtI&A-qV1K#M!a&Wn>2@y|Co5_1h< z@ii(Etgnt?WvZa+Dr^uaP1mP?*5#c2{%ZepTR=`{t?}_k&9VpG=Z@QsT93KOvltzd z2CHaHx6bEfu=`21e!ZmSeL2>xV6i4|RnP3r#5%h*$yvIDy4-_0n6WjqS=;sNQtP-51Dh>eO!O+TpU&DXB{kQ4 z)UP*dgwM#4bwaGg=bj!(Ru$6(F_vGS|0$CTelD4cK`NTGHz@(xjJ|z#Asebs_{L4= z{RyX_Nv*C{&%jlrJg)Ns%={h1p1t4W05JpIUJ7bg%1VN|^#~3H1B#QA);yGy0-8<_ zVS0bKeImaRdpBG|H_RpP?-(3cf7h=41tl0A&Xu;9gGX|ru}H>Bl)edgA~DPVr|yXU z$4|CelJ#(_w}+ps1!?NJtd=9C<*{TDX{e`l#MY&0gsm{+B^hzZ!S*wYrs~A1Q)-q& zrAfrJ*bI4bI<4Jw+9R#MCi|x;W3f9`Mji&XFzbX68P*J6^0FHeCR2oXH=*u^rEpE5@)B zDJ|h#Z2lUz)Z;K)>_DeH{2ou1O$j|Y;X(((A=cHiIjjpu8}L`qU_fV&l|BN z;?T~^ub#VOa-qz)>If{+^MjQ{-$k@wA_@)TE$X-b>S}d3?`Jq}pu{fV5KU%or3^j6 z1Vt?tn*H=iXc2a*6rM4Iz8)JR(8N?8a|dTgQ!=ONQ%B1bcZP=9_hv1#r@-RiD~M2~ zE}&l5S4&xbMq}gnpZ+e~o}o1xhc@MMzA1B5A}n4m6gc6q+#M2|7jm=Aj?fj@Rh8@k zT@RVUC>voZ3@*AgX*n{?X%&@vqJtYL(z}9g#^Cy#EnEp@*99cty*!#5wghH4gB#_B zfRy`G&z~!`ip$O@MXjO)T!S;@KQwIij_Pc#>DV01ywip&oG$mbr>hEjbw*68;TE5d z`8A}N1`|lL#xgjnr8^(b!~@rv{iLeF*HeI|$UVQA-U#+ck&9989D_62V!KJBM*j=? zfW7bbHsgDfIqPCsuLKM+)ruF`2d=pShm^#{Z<&-8`#zvDiGsqPAfWw{`3b^~C{g@GC(RV;(M#%tQo`#j`T_&1~oOQ z(AiS~Z9FlK(;^^13AA&gC`{t36g|=L%l&Q?HLVoB3Z-(zerbbC(q>{lM~rZ+|EyuGE1E=hcd|KEkaJyW4@JDsrT?;F+?dzjdbjy!H}PUm23( zHr7283c_;7t-AuR|Fe^55yZfgqEgF|;LZ@`s&ZDHDY%Ph769L^U5XqcX|tNUjzUo^ zhpND7?a&`rkD*Pz_BdzSGNJnQQ2;^Tu9}Si=}@y)<8tp$)?)SI^#-18MzH#~$QAP4zEBXEOoFuTo-s9NNtl|9NGKBj8I+ zh2k~zHDV%1RL8aJT8Nmls04>nSh3cqr3iOj!$oc)j*6r$Qz~GKA^_ZNzBl#n+18XX z5Kg|!y{=(TV{h#m+Mt3BWr_670!sIg+gt}?vW_Jfs5Hk)4S#+>4N>m|vVUUlxY9o~ z=i`NM96jbxOTxWgxIU9)E;75N59Z#CK4)d6^#~TNvS)c$8mk7jvO$x@7~NFCoTkSl zS&izvWQtIJ+i%{~%^$d`4GrKKHFbA9v-}tcj6TaUtM8`&7=t~_o&AYJe{4OZj|}}B zN2M>)F%{QJ2QYW~K5QM3?(+zy`F!b62HzxbNJiVp!$4cob)Dmacx^Jp``yiu|SWd0FQC&*qLdEAU%Tw z%CAqy3!bj0Uf0?5+!S#Vc$Ommykt_N*mD}-jH3drpA~UP(`-P(d5NG%`@@d+h!Grm zHU8}ooPiP1Ja5E4KLOF|U-H!8JhBpJFw4D(EK&ft(S4l}^qSD3T_f#!7%0PM*_kJE zDYQ?Np-|6VJk+LSr(3ND7H#WlbT%BCw`Eb!{xQ`JSMcT@9*#?u=F7Be92!Q}Cw{Kl zKmILkwP)3Qw0RS}}n% zt7%zcJdjr47M~!4`;*bb_ zJy7G+2j2#iPC1T#9>lVFAq{oR=MR6Gjiq(Ok~rBsDELVkpBdVRgnAA2*$VE-75kLQ zV@@N=?lmR#inK4%I-W?*uPduat1toUygVAqo-HoMEqHcX6SN*=CV7(qx2<@87jSG8 z^R%Gqn>NY;1T-c-c&4vCtjKQ-+V7ym;Jr>*?h&tP1D&fa_O6BZQsC6h9E0jZvX?f)*sN>N*=Ua?pq<8VsR*l zlf@noX%RVW`UP;VI{x#+rkb6yvp1*DZTe<(y3!{(&tvaA7UrPG-3^yY!=|$2SU53c%&uQm1NH|L zM`MvHE!LTuN>2TKO6N4xF2}=z)678|^yP)2?W*2TQ0Vgm1)s;-ilEbO*X?@71!VY8 zuq})k4?lv}m)~XOcCJFJ*g>|R$hQ5OyXOgZu%rTDH5bAf=WQe%es;5T>D;4G>N;dT zZIzmnD)aB`#UOCGBazr7BOrnON#wX`Nb2;I5)ljKN6(WA^Av!t@mLd~f<2rQ)F@;3 zrfn%7MczDl(c#n?&WQFV=CRO2&|n~3u7D})pgX`E8a-8;3?V%ER zN=`W0kkTgnQDQ2@Eo+``=RJrJJ0N3)@=FVxtC-y!hEE6qZQgFStw(}x;Vq5Yb5raj zB0~HD5f3=Tz2K7VCfS<~o=F-c9er_fkR3>f#eg^EkN7h+@`AEqvsjiM51VhR_|LgQ z65OwEo?IEO3HmA$2f)XBaYjYz_dV~2oA#-2%%q>*;$yv;Bp~?n<&2}~?f=sNVpRXD zjNEgvpR1DYws8_O)lfsYXOsaQJvy4oF^ym%;WQsHzAVy5*-m%=3*JO)46BGZ|BoV^ z54`__)$z~i-wO4Bd0+H{qx#-2z$4YLlLJrlKfR_USYVe+gaY@43&pYn^qUz1I`3tF2B(%tQbF9E^VOVc9T$RQ?I0$)D@-)XbJfvWxb?b&TV2 zAO$r-mQ4+^15)DLA$E>}+1-85)8e%pc^wp#MC0fE(>2KPsRJ{MB1wgOmT!@Adn;9Y znSIJaJFDvD+D1mpt>@Kd2CH|=tH*}%9^=x45$wWV`8Lc7l(=HRv^gqVJ?j5U>`QR% z+8TFnr3m*TPxS(ir;luAaJx4Sa#9M~n>VbZR$_14qXD)31HRuP>Dj zsov9jQM>jj`3weou)5*&@_K0B1VEBy4E3^{LR&=O@!t{A`&XxmvI8lMUY4_uJlxXe zEbRU)>y`mbCFKZ!a4W>8Fu+MyX>N4%_#@V5^yf~bDBv0p*zxP{#-_<>ArGO$*!x0f zDlGbe#2RLw7pA?O5 zv7%n*NHN%6u{tOz0ywn5QaFylLikTV0tQQqU$r<&32-hq?l;g^sNhLX9^f6W zE37=amvS`!a`dH6YEXzYxEDnC=rR5P^bx3&XZk3r2|u+L#}DYg)Ub~wv7koO+)~TY zvvjBUCl7J+)}u>066JB*Yj^(`HxvjINt;kRzB|r)K<_IN28w0W~Ur$9f&-^Y1 z>6Uqo*?nj?2zlq!U#QBZ8WBTbwF44z2{A%I(e{ohUSZO#Yw>jjJ?p@H>DK@T5aOuN zWO)v|j>X8bfWtHMR}RKRQnb_vXa2KSQt;qWAu0&$;3riMYnTi=`@k_FKI|ekp~Tbv zRGonWOs*bKZu)e~Z(z*>U1FWc64m^e3%K-~8i7^RVn_&{0 zQLIytD4fc5O$rPmhoe<$GzSJj1AQP{>+tLX41)m`dtZiWvg{936PY)j_a^3&If9}2lk; zYC7t2$=eYSL`(!w;4?Ikw9aUG7bxvkYe^2MSpAjKZ{Qh#xV}WkoEvur5VUGzGi3El z=iWyIkZjxRU4F;=>Rc{oU^JtF4JJoW^GZ|p5_ZG~jJ#0RNQt3tNX$MUErnPObghL+ zD-p5)NXenL`0KYEOv7f6So47)A0=#kw;|VR;;(Ko=OV@b<+T)vV4B#($=kI0i zX!|z6w+V-%cQ>$j*fQ5dQ^32)$ z$GexMY`v$X^@cyA14c*Je_RV=-z#>Xx}u}C=bZ+&INPO#0)4smeJO|w&X?(xe{Ya# z@_{}X@%4=>3p%7u;LzmQ(Tdn5wf^Y0!HrvXz8t4<491$uSG|HUL#{EgV$ZPFBM*j zkNHA%BH=|x+c3LcyL>p;(9Ggq+kx|>vFgI$V1dtpqNAOv;QilhQ_$HT*?(w|Z%0zB z+so}r81;E7LUpY1^-f^WFE0!YwAl3J9Qn;3qsWFIsPg)?Xg4vdi4(2SoHzIY4Rcu% zzYltJ3!OADc~ZA`so@ebc~oHMmC=o=A>cr|z6m0X-d<}dAIc_idV>bf=+lI|)I5_@ zVI`cB6q^b)wCURW@5;p1VXQZM6b<%m88qA=jL+DSQzuP&F0sZ>QYf(~>ge6l{;O?H zjn{Z{S_GMT+XB4uy8Sct#mHpm2)$=@nX!rVn6(|hO`O1tXGk&V1v!K=TVCD0n!CvmK2xcoKc@h7mG09o zp53G$2b1Y{&>QT%@V=$%Vxy~i$;%35JjA{UuZY74a>6^%)?-b6aAW_ScrcH$hs=6o z#Ubbd`9SRq7Xcw~Co?et}1o*~0)qqwr3i&Qo@D1BG@OhAq zQYkxRm;d;BSB~-rgPu5vd+j5ZM?I&7brAmD@a<7S=nY9*=!&~T&OWt#7q?1KZ z%MJ!g(?@pXAeEA+&erf>*r!Iy0;wpVRK0!Di57pKJpue7N;nffkTZ#0gfrrK9+#Z* z-OaxF3oj9PFCWDv?SvrTQ8I#cwz_y@6RPaVfo5>JC=sJX-m&~4Y_6*rN|M{;HOm;$ z_nW)~k_Uax$E4selQqpk1KQA2@utzvkT7E0l>K3;RH#W*MBJ;wCpsJqskT+s+i`q+ zo3^^5Zn=*k5)IHY-5hXg(+xY_F(BpNz!1||up?CVD@weQK_ z3f=&B$OYX)XbE(N>*u*Nn1dOiJZHVf+7iQDb@~s1#yaMsj_2r&Fx%pc_Qqk>Dsv+EcyQjSnvxm$G1>R|NG!-$rJpKNQHyp+ z#R;}^7{9);1cStzP77(QH#)Wg0P}u@eFam6NrI*mqHGPE14TsRoVUyM>t3tL#s*#l zWmY5rBF)Iz~3U0yz#i$jLRNd8j6^hpyqW*&f*CJfIVKNL-HW0 zx{JHw=tTGfY9s^AGU(ykJiU$)gPkBP0qq6;>m4HN(Oui;%$ZSD(}e|m;@MwC_WyQb zs;W!dTCGRp#1sOQG=1K#!?U@I*XaURnqp;B;^w78n&-s!Ho}A`>je52=zu)@{EYk` zA4zZC;Fj9w{dqKoifYuNDlA~5I7@|(zR4rcd_mF~+EnhKT zUSe_I?=P2&-`7<5hp&+gA>#s;GL>&xGPlN}h^Y-$`|h)?oCM8SwmB~= zaf$i371lTtpR$@HRd)Bg(Uu`}qW|M_d)K3EHDo*7*jRDxUFd@>Lw1zOL^%s4VYD~7 zak+RwW!aaH?9HKK5Y3vb!enNNHsCH%zs)2Uu_jTdTzZ@_+vBV>eNegrXQ2W}Sg!wr zzwFfFBx_a^;$%C?l^QKY9UoQraR`?>p8MkvH}z0yz7G4lPeeK%((%W8m(yZZ;%Jbs z078uJR6cU0tZ~!;)sJzxy+A#wpFbJ5*ln-Am}5Lu)X9BJj>;+m3+P^)Ekd6x$DG%< zg)bKzb4`(0YfAGPgwQo~$go+}y(}ITdh?ReLGIEIN|d@W#OCwWQB#^x@r3Bq?`sx{*uW}kXp2{Pc=*nL=W|MGoO0!iE&C2k(?|Z@WKd>w-vs(X6`}=`)CXO< zy@nbDIFn-4A(kIFS?OWsR(IZ;lCigF&(}*4$PJ}lg)_2Ukp`9FB`jqHpk{F*Wt)-> zL1Xe4?l@`?6;dLDP^r3)hEe*~yoM>yfz=Dl-Y`hBy^!VMmfrfSL1mq;MBtoF2zZtKGt0WKsYi!p4x^G#zB`X)2wwSc-Xh|? zEie=e@si4NcY4@6f#)Al0e_^vrBxtFpJ(!b?-=B~MhCkh9LZU*C@Db=EL(p6_5p`?T9!*kd10zao_)0M71Ajz9~w*BIt~sbL$+Hh$?7BCea;$@I{X zlGe{lmgP;vax6vLy{yZ>`n3amXN;TUiiJ5I=G^`19aTwB5Qp~fb}4`IeH(4f4v~PZ z1g@OzeSIN4;{1F(dbK_Co>_U|uM(<%oik4;c1c?Bms-`~nP*P4&%vn@sXVuDZ#b3T zWF+|fB;iECAXpj9$^>7hNFhrsU@K3glWi0b67{U8F=>&f6GWU4y;_Tqbf0F{kFo$g zl7C9Tek~Ca>>xR_l0blJbQ}UasmY(Ww74^kaL&dEmc;fBBG)`SN1a4)M;J$nar67? zj34nSDn9rzqrZySBG~`Krk4GG5+jVKmB#;q7ZoY{>~U>t=6IvxusWby*W82=41!5w zLcZMyn;sAX`QJ1Mfde~i;>=T_?Aro_o@$8>tVwa28oG2RdW^3Ju!0cE!dc2+E4C?d zJz9Rv&JxV}V9l*qLcjp0;{E-7fhsXvMRU2c^K*`@k?vCvcs!AnE-^>RZ+nz6>6zi3 z=NJ=sTu4>8NrnbjOkC9V`agO%KsV2>dWsVP73K?s450l11uDxaLlHU)D$U^X=RZcd-X;WlCqbpSUt z(L;pRk-$AF1YS|{BuT%~ithR`@1k*__MeSXF#)YWw?sS~$?ziZ>BC>-Vc0+z;#m|a zO+~J*t{y%HJ>!OWv>P{}<>*t+$2JdH4B1hasHYB8=#@|=_OG=HKaf9(mN}M#WVW{O zMv|ov!fa@N;6IjHa?j30iI0(Cq6LD;B?P&O?hN_dD{mi;CbHfxAN~%W!8NzqCXcpgc5z{5ua>L-M)$ycR#lL03L>k2Fn;sJZS-%qI`q!#OJC~t4b}jU zIeQQ>3oJAiJ_8&;9ba(?-eriPT-WY=zI3-`CE@vX#$7PU2d|tL(p(!N8<=0uHEoYP z7D>TF_5Y)Q%=<919gG*D@9;umm_V3R=aVfoy`y9V>2r}*vgM0A0lMWVjxTwm@`631 zNACHKW(V-xN-KhySIqz6ZdFRB;EYReprJ?S$##Me5`GAi+eT~MGl;(W$;rqqv>J`S zB)uZlHNn>V$xJS$HiNw6Zr;}a)a*-7O?ArpVyeS;O?sy2Gh}Ge{nMg%1;)>|SZ~&j z3=ihbc10|vB0{~Ybxo{C5@UM1-UL0ey;uH9Q(ac0zL(rsk?~dECsY<={`1!U7iRN6 z&81%{J_huzeE7n^*l=lKb9!Yt$vR}17z*V6i(hblF@$x|s`YWV{>zaM%2R3|{fvG! z=tssM4k^Pitobd6OiMmKA}g179{FuT(XxDfVI{HXt~?JA7}4mDX^PBly7jx__6XQ!sMX!|ZPz{qCCmB=Od=zb&iFxF$%%Msj* z8d!f1K)Nv{-rp#Sw2t>zA&+ew1BE-pVBlEphHq5*RebyJ3}Q{E;thT$JMBC5Dz$gu z6<}tZoX?sICg)-_?b^E!i6`O>VqTCm+ud9xT}@0xJb9qX)}_q;oLUvOLo%&?9L-eI zG?{w0ST)1u-rKW>@6sb&lfBE9x4`?Q9RndRBh$L>y(XD=XKiRI*UE&xLC$PoT(IgfJ})neoWedf4}N%rogZAfox{T|KJEOqSPHgn0&?Km?Nr(BZdW+Y&B=Q2OP#re4h;ySJV z!zIq0#L=l9y#A7mf^F?|k}vt2da|eb-{DvaFz7=V*LPR$L!Hw-y!ulbJd%R7`g+Vr z{#;wvoCBMCj=B8@`EDyK-TrE$!7)2lTVHN>8rne@eZl4UEWD{imcVM zWvm)j-^K^;d%`VI$!gN$7wFk!&yHk_FW+;Kwci=N`?trKJ7qZM;j=|+Csziao9#Q! z;b!@NPH-g@?{}+-ZG+;bI61!wIM1-!9OWEh{}AUl z8~4V7xrKeBK6Dx1&H4T+v8njv{E?J)N2=e!xxbYan|$!qQ-qy(8w{3ryxO@snL0kM zy|TPKCXqw>4>~?RM*aEhsk#mX!KCUshI{Y#)2&ij2ioondMBlg)=FIACrWuQz@*=RKs%-oW(G9iB|xesO1jc=XbqFSkyiqVpPCivitFLYgb^ z`A$#qV~X#90{P{*+->~MLbQ+5`?_#N~3!AQ>G^SLJ0IIOzzI;-lI|K5lX_!yVOFzr8#J0r z*DHU|ohY($0f%}ik@{H%Gf=bzP{WTHBlWJek&d&$q=@`P0~+4<>-=-+hfdv}f+U$p zwl|m~E96f1h1XgcseITJjhN;>6((uT{4p&}DY1Ud{eZByQ#BikG#fn~EMc&UE!$RG zTFCE7lv)4ST}%-+ZKVR-no!oT<(mA>e7NaZys*#5 zoDwkd%fIABEz%pLKt-cgy2`k{o&O>dUQ%3P@7Tclf`4C4^cS zmr_xox~1a^5{Imy)HH=MF>EXTEJtmp`W@xZ*X1`Vg8)GJB-o1g_dnq}!?f^|Lv?ZS zmtw^7%!4rIP>HhNg7B0Sp1+}r55DzQbiBW_I}B=`()@OPR5?;6;*ay|uEp3iMf<)n z%S8KEv#LSN>I4-HZ{;w8!+h}t{*}_vS24-Po!=DiBIuy(e3~j+S~R&czg3AtO8tD! zC?~VCR|kvQ(_M8Fr=t`N^s=$#jVqmFIK5*}k{^6c5{15;Lbk6Q6Rsaho$15=e(h60 zxjnd!F%E4(Hx6sA)(ex5uTSrFNk6#a5;iTOm3OeyhK=r&e)>F`Ie(MV>T_5T8FwG- zFm{1H#gi-yT2@_Kvb6R59onUTPIR-D6X|b_ItGgisB1gw6bGZ~MQ?LbbuFyIO^hnZ zViuA=TQmjrhA)jjEdj>d&t2aAA`p;*R{AFg1F zM(cuFvHv4p7!2%pPo2zmng0 zY`<0%nC+UL+TxWVw@Jk0{;kijfyzoUa*0LgGSK-Ay(q<`ZRM{;cMAWd$P!M2L~pNZ zwgjn_nDbh-@CX!nSevkK$7Di5z+(ABCdG7lN3Iae)Qnj66;6{i*G%5*w!jF9)ncU6 ze!`pD-#mxrQ1q}mUq9MK{B*sR-^5Ls zSl{6}_To%&-FqU8%fm*@$$%)i8FVTpEmxV%Ce(GIXWgA<(Q;2U2@JIdKK-0{9uECg zE5T>0sztM6Y9t9}9`vMl==wQvUTHY8z0u$P3SVCBM-|qHXsA7zB4N5!Uax3&Xi<4!_bPT5LkY<76J;cRqxoGb~&;IuGb!Rc{ zd2KXkA$+m*gRewp`(d-aT|q#7IdQ3+=w98so;+uP@Gj(AE|!_a#gU+(AdjoFcV}m3 zYgf@E=ffAXb*d&Ni~}hwiDI?`QEc>F32F|nxZDnzlxE|g-V@7zIc{`G(~B*2%;khL z#~eH!O6P}%i^|L4f%<3>!}@{GMwanEeuyVAJtH2n`%xi6UEJ(J-519j+4OlN-7Q-$ zzdS~mYrKW|6=h#Pdt}o9qw!n(U3^+K4tyI88@T#lwJ9MLTdO~!g}T2N5lFso84G@a zraD_FE7sLLkfONPPkx1FCyIccfRVvISrNj8m{v5zf&x#Z&t_@lboyk4tN+zr4*7I}d&T&q<1px>E;n6{|DYChgvHW@>PY z2A(+uQ|`$J<|!GuL=r_jmP--?k2j`O9#vntN9~!+rJsS?>0th#6ulC)_~_S{pXRW* zJ#iJI#4;$$kah_LjQb*GDSe+vs&s{&LPI-wd~p>i6(h#e_6Dl%C0=ZRWc5#ga77TS zx^NcEjunT4@T-4?F1_`A{X1GXGZ9(_VEw1_);Kk6GiW6_DwRF%@o09)G$BQUCgcG~ z!urm3BPmZ5!H%yinr?C+Rq&FOP~b>IEQLMpRbF~2&rBjf?c>{rSJG1lQUMexd9eNo e9G>obf^nB$2yPk#f=5Am z1+=*HPJaRZAv;OyxPn0Feb0YziHzvPKqI1?jDiH>1`6q`x1^FkjEnwhlF)V&ad)$F zbODuCjz|MduibzqadTI&i?x%RwW9+F8<~O%Xh(T&7jty-cCog!as!oPjPL=i=>N33 zn43Ized}gzZw}(T!axR&AU_{bbF^^tG;uKp88|&XcSrr_;?}NUI}@O*3#hTHE)Hl$ zdT!P-adEJAump7xZ-oJEi2pj@-34q8x_AnP{aZINM|*p72RG2=NKz-z_UgHty0x2~ zIjH3DHysG{79=AsqVAQkzZBp_V&2aE=$YU%rh+*E^)nH3sq7j1b4F6#8pUPbAgxnF zhIH`iy+SRr-F%OVGI3W!7v{GmVT?IEYiKxJHaBtcU;y~DdLz*BckK+ zU%KGl`B%^jsybx}S$J4lcyj%r_MESSbXGFXCXOt-jtgAfUylf||51Vi;fjlkbC?%{ z0-{>Rq>n@1Y;|^tKw}slgZSYTU-;n+$)ASdyJG(j_Uj3y zc%E+;-I&w?w+NT9@@=xu-;ieEBmD4-m*+_BDKOxA$~)yOm+*}?D&*Q|M49U6JhiFD$8Nse#5S%RiO%I z0G=#ei1glFQdof%9)^ne3^|4>?V#)wW&6}|W%lf9MSVC> z;tepgJ0%1+xc)KC*NfE4<(zlDk5b2fSNX3yk4Afh{Qnx!Vk*P6oxaYJ&IqN^8CQ;b zdozjNwxt`1IzHCf5)=ggJc4|Y2ro52*S(KnC&%5cP8S;SNF|ej|IFbRpo^f|^PGnM z7v}Uoob3P81ApmXO;fK=Q}p4AO#f8z%CE^8l188*6IJ+F`b3jIf!%M`_=Uv17v|in zM;csWuw|vXPEql&D=1BASW$(2rI&}D^gYKWLp(ZrfY9Yoc|Dheu125Ee*<1PB8=A0 zR0$Cwj@U46G&BTDET*}NR<)C)zG|}4FukSXljCPqQ!B-p+`<45gx`jO6n0rKci|ZO z0IiVe`TPiXe!<;^0diq%;Ni}#0=l3*${c8kbDSZQmbUE8*TqXdfo^qSU-TKB%=lia z%77~WN?#(&A4($5PsDp0s$YVYM1#cO3!H`#l=j&qqedUzbY(HP3jMGuCmM*H+J1Op zh3rO|u)QO3=nyvia({Oelfb~|1KTX5EwfE3?5h*rScWmm!#Wg-ZC)X{a(RJa{9-0W zGQYHkO1dR-^@9?T#wr7|{FA`RLu7a?;-u%D7PSAs9h`9=M_c-4Oq|Y#oiYk9M}KFh z;T1<=BX&fN60wPV3i;ai$+~^rawOUhA8q^$vx(XZB15z&<|Z-+D^v*uNO84Q$U$kk zXD#&%p;X#2`|jC46D9~}w0R?y<3rFMn2;>RMFM(3x_da~>_#{-=u}@-`gfGKa47jO z6=3Ys6S)W(=$41@I*pV24*f$`B#p1n7xJ1Nc<)q*U3+ktn()jfunyM+bC6aJr zjon=s*CRWO%Iy)c6p*|Zk2P05JNhhY&%#lsF|1uQ)h`@z9U+(rin6X0H43T{w6@PP zJ*FrG=rxLLfk7~~8liFT_j|B!4go&xY{TQx{959Z3b-a8Gz&EcaloQl;uj%l)7|F? z5;39BDQ%k`<67MVu7}LD!Au>CN}_`r9b=%2c#HfdCDfog<3MISdxE)ME+!4e#v-LL zUHLkWOf)(zsR6@3yN_qeubcE=KqEHyiqaF8(O&Iw_g}d;!|70d&vbj(~PuZKgbc=cJ zSU#H1Td^p1-+c$5eZQikFV4A*gIzQ9Zo3t9?n;*G{#vm;c=F`4jCy(w2;gC3$ts*N zo>WL%BqiHaL%q@~>s!}5~fF%oY4U8sJw><7;P zI-vfF0+NZQRe)n?mwyQT))mBR^!8_4Aro(TVWCsh1V+bUMq~Tm65?eCBSV&QE4q3H zu)u|7z0P>KS|jO2_SSksb#O~R(r1NF{8DoAjpq#2G*wce{!@+#-wTHhlT5Sp;Sy5# z-ktSl*OhN?&!burhT0X8iskn!IN>m?JUwWIog1r>I1?oK*z?i|-2 zeYx#-zCjLit$aIuP-;ERJC9p5Xdm(^C!;f zxgwSoqamj$^Z_q!xn$=~OPasx8t^-*cC~Wiua*+BtXD^uYR?%mTG1U8*Y&_@s#v|Mlpj zK{9PA@pT%^s^!SM8RQI{O$RqK1i1rC>>w^jP9;N%NPU!jqmF529?izIBNS>@zV1)O zI1Uq!OEwErkE2q+^u3NT3ot%Adat&5rI7=UzO-TavgsSO^f~{>qfy7eo&4Ja^Y<|O zfQ^{Vh|c{jdae~+uGCLY%o5bU>t1Q_w!D%#W0J#ua!G#zPd~YvgbKFQFvT0FJ$};A z4P@gmF;Kg-nmQ^Iu3=}NQ_R4M(_JX*Q?3Qxq^UFEW?a1tY+g9nIIq_H66Ixn4LV`| zYN-=tn`%!IRNpaKSE<~EV`ZU}ZGCH@gX_tK&E%1xT(R8IA0TKfG}v!_UJKPzuECXKW*yEsI0a*kaXUMV)sFayq<9bDke9>E`9Ja zF^z${ty=-Ss0zH$t37zF6D9db(sjMfE;fyFh2JO_O?2q+H5)D3t|x&PA$H$8nAl#j z>K0X&(WU&GI#ys=DX~j%z_%x@^zN0wj+pt*N&>XWTMqrItLoBr;#JAVh zJn?NY(RBvWk<|-m#a)IyIm+8myws_QwO+LJ$%%Y#)dhJCpFM*ZZp6M>dT4E>@;dzLi1hH2t7H(u6=hs!6Y92!~K zmPc$eM}?$})yI|XgLMMHEzTfFL60^<4aDYH9#B2TGGE?ryw3>2*obx=>+`#5YG-1$9@we_p6#LmrHy79T{-A zUCV<`PrR@bWp@u@&N#!W38`e31MP@b&;2e=!pZv84Bp>MQLSqED;oSCE?2p0%QaV) ze7_nx*ywC|SZAjvL-4bvExI^84>%L2=g;>I3Y+X3gYL9;>{ooXdOL$YMb44w$XYVw=0JU+916!IeoJdcRxss%Hxv;|y)D*tDjwEYAl+8sT+~y}a*GuiB7`wJEWFTAYlRB~=d z0mSD=UieOS*TTXvvsU>8@37n5;rbQ5$VeZ>_^Q!qRS`mZxf~kmdDPWVA<%@)c(V7~ z9w`&m*b$o4-sBq^9hK&L{Hs~=X529oarNE(>sx96BLnU0Yr_x+&LkyqarWW9puK$^ z`ul}DFXE$(fGpCUI3e#>T=xeUb2R~6l&It4*3Ukl=Z z0z+Vi@M8$d{u-QPFG2d@H=Br{{r*o&$!iQ}2OG)$pR(U6iJSebvyrFc#MpSGLO*MROA9|Y5WuM)ybTk zH{fte}Rz#zaOPBF7Yy-w!AG?J#l&+R!kH1D-j>&6dhk7Udeo12D;&g4u z9S?VL*Q)(=Cqst_{w__R+E`H6dt)~wT%iYkho)=!4EWXf%G%?^D3p`Lo9rGs*C{uL zi)o(i$L}Zlm|b%GhoVvU42DT#1F4|8iB;``<~L`<**#QSjXvW7sN3`_gV?^VV;uf} zl08-zgwDWvwd6vrzKDiByw~>j0e7z(ARCj{b&plh z;*49&4Cg&BT!V1EmRVaCjP4Ae<2a>JcIc zd6v_$muYl%BMn!webe)DHL2F6j-t$t#8T)KlHsa>F(!cDw3ngk=R5fEqxwU3lY<5U zDx`=HxB}y@IqcvGKG0<~unMOU?pFF*w4&l{yuSyx@cNIt^GCO&QZ!Gpt{&Xdg&)r& zZ<7&~d~)w)APuZsSvb%IOTf)=wZmYg_)=BO08zXuk-j@3Pr6OOO#Q`F0M9&`ESSYe|ORUQq=#y=ZtVp8e78}Ac2g@bYSosn@ zJbtmMZvQ9$2LJko`I>HkaYNi|5OjM>?DSq&TATyY7?2tI1w@b^7L8eM?p78@%O=@Y zS|j@rp^7df%_iRu%mH4Wa)F9Tl1|VQO?DD*;PTqMr{X-FC`wKGN|dQH-}#EPNP}ZG zo`FS*v6==h2OPttU{pNiQs@4&_`qX>@sBpS5|Xq1rvV?cXlkZmBG0t?0CUJ~3pyx* zHsqtqkJ3%c=pLp6!djM5m#ebE>l&OC%zee-PA)@z4p- zYNZ@Fg60i~mYSyqG};DhR&jM+wrUQvwe7E{!K@91&TjSQzv^VxQ@$-Q=@<`aK29PHaUY5^C?2oD8rNM-o7t%2yFmo77G|S)YT#ZoX5H-*uuPz zO~FMv(A;lB^y`Z+=O>O|Uw|T4hwMVikkEPHiZ7dik1?vH3#oe0#ko8sVzN+8bSx6A zw=qP+GecTk6mY^68K62=6|55*h@0L~q(L@L)-;a}BxR=|A_GpAHTo}WyG=y6xzno;K zLi;acaOc?-Dw=Rv>$Y%7GV0jJ~5W{^H$iTwyQBiUjQ~>_fDh4x{W&} zdbf|pBNG+T$!HU8;d#$%CrQ4;`G0H0mORxf5rN) ze*(Yoe*cbcG~W2 z-ZMA@Y$kYZ=`KWFPW&AkkpM+sV(Iknv!%D1f~Ulwz|+6F`iHK)#EG8{k8({nsk}^3 z+{yj!Y2UZkVmr!LM2HV^QpgNp2wf=XPch`)hU7UZW(cv_kMLqPNn18^!>TU zs>98j<5R`Oxoe(fAJ)(5cq>s5Lahy#sTfH@5PEL$t_{KvbN{#g#Op^_N?irF3{}&T z6LE?cpl{(?u)&dB2Mz-WEBt0uwb>2iT4LrTQM^r;zv$Bb@l^vlyf3%mCt^>s5G)L9 zDov2o=Pc2`L#V7P8w2;Yy3TL9&V;lhPfz=iu4SEXme|nO-g+z(^kX}=htDZQReNW9 zw9WLz>ykzcem^`_^%8IxF*?_{KfVzI)v;+bt^~Vl8HV4`B%8MT?P#CBov6daQn$Qu z5Iswq{C<`OVsMCFOAZU<9p>8DVl!4eu(-ee910SQI_^~hUsW>STPa|Y`JNKCd5p0w z`pSV))S`~|TQE^wnb&5&Y!sVLH=y5pX%SaG1%+#3XBzu6ZLFzP_0L=yT%Y6{^|rCb zR)uogNgj~o>?avCdHx}pr0WzpQ}A3JEo8lK3jiUKL3>C*Pk88CIpoyMHZ{H+Q}zN^8$W<7o?qTSZZ-^Wt%j!mg98eA z_tPI&{K^{_8feF=kIlP&@J_41GiCw%B#d)s!pnPq9Bd z&#B;Yx;lS^1#PwC(-_~2?T2*i;XYNM5lza>yi_(V`B^4p#-TZw6K!-{Kp}O3a78`x zny8d^V&R>M*b`{)A@KJC^7a7SIp_6R73EQI)Q%Tr{)Ae@S|YGv&j!%C=#L;IfhXf` zA76#*z9{r0FdwGVPA8F2@Vix&W;pr6#lvF*1S8ZoJ*}w*eoY%3 zo0j#Yd|;ci8st+#I+4ml;-mr4M#aH3*Crg;tc*!Y60CuZ1?*3_-njB^(eD7Fc&0vg znb{#F4lRy#PkEh!Lo$DWl?v9G9*YLZTHwW$6&}sa^Angt+=@Smd_#wZh{!RK;YJL(a+7WVvD3W>Yp<=fvz1Yc8BTG_`I z4;8{VRz!Z?8F7sn4csvK5^vg7DG2E%CoiFI+?Up`%zLCXbf#|)<_l-GFmn>^{tk#K zA@dYJPz7XzXT4x_FQ>2^0F}4fP$>EUrH$P$2cJZu1EPFCK&~iAN@WAUs-+?o-x%Sb zH0`st5j`$HxL{n)0P%B^*eVL(j%93@zrEg9&A)YCz-68OgF7+oS*miSKgp_-D2QGL zmW@sFES*q)04Bgqew)YW^#C;5XVkm~4^yT}iFx2QWghI{X|X{02U1e+?ckGD`D1Z^ zGi{IKszMwU6{syo4NwuKZS8vZ`T{BLHN`i8#M4W~rEGS?0=6~mvl>874Vo;kbd`U0H zC<(^{LV(Qwno-#o{gwN`%u7uz6%Wb)0k}f9T~|mpSdSG-{mBgeAK0n|gO(XXHgR7IhXnl{aE=B5}0P^kpgfvTXpTX0{7rVW5cgTNV z1d{~2L=W{l=xu(nSdf@Y&zhTwdzo{aJqG_^dGE@Hz>Y_xUj(7A31gN7A+Y0r+L;GSp#?b zIdo$Vol^2-<|chCSvY%~OhK-)0i(@h1|EUioiUA1IirE{{&mHMV(4V=A?6ZS2UYQDEU z9su75LLz(c9)YR%|&mZ3B8dwFCq z{|}V=WeZM0V+TgjDDRNsKIJnjiUx8=N0CY7ikzHP?P$P4Fks@% z4C~pO`5diRR6jSS#bEVnUHaL<5f~H{lzP620npBa-2bVY`#*P#{BOS_)mh}? z$J*@4z#5eY`DzR|dhb^J{lf)Q+wF`|u_}P@RTSZaq0y2+nr?1Wf9}T}o)~xk3Y7D) z887*6@mSJ4=gzl8`v%D{MRW;~yc1dOXupqG&6aXPB|*Gx9?%bNC+W#y9++P<;XzO+ z6dwBR-vDzV@<_vxA;Nm`Mk~g258r}_U6la}%{j>-(ny+F`lX4h&g!rh@_Z!)d1u@!iB!oUFUm02Y{Njkus;v7(K;uuw?}mo)sa6^LH$8`WLW1YK z!8l577nG*lOaohxKoa+S+N`NP>5re?laqUZeB?2&YCUY696l$pwB>=Uy!BLcgryk= zwkh@p=DFj2e+ZtMBe=hK=9hEhE*S@E3GB-J9d%Ab%x@Dxs88r zK_+W%thRjDJ`GpzEG*4$eCbs(QTWN^b^G1pezD^MQ@_)Stc@mly=V|iH!CUEvUFmY*Ywsrz`bYIpUeF`cJ(9=Ka_HD)J^lO*LYB8Z zdeV|F6mSRwm_xF&ytyyBI zugBbFiDTfce?FQrMTc+lp0#+-zx^R=*^6B=Ng#Tu^~x9=5$&6Gjb?%9(8c}K{8CSk zOk%$~pl7tv@bg)+{lKVsSH}G4b+vop4zor?=^yAHtL6xIxp_aAL{r(ABRnq4mth!Lt1S4bHC} zxqG!tB7pkjFZ0e~TZdfmisg6&-U6}@zMgA6T6-wJZ2QD5wIa6i!1&$l1lMZuMcdV^ z5PV9^uuZR5{_cX8i8T{*dL}1TX1Sm*a#H3U_W9!}=lT8v>0`T_;jLH7U8i7N0Q`sH z2bPq(%AkoSK!b-MIW};w4oBgGH)oy(ikBbGsN;kviK4#e_>`OxesoR4S48eY6bje5 zez7cwu=?xh!-B>(|4Q+g$j<`P2CaXEm?;Gx~+_jw09@`!? zv79n@w6&vEVEB<5%H3R@Jg%_At~ti&5Bnb>^VXZcI><=q1z%(j+1`-%m)08fk7L}w z8u0CluQ)yASAY_cC6-nTi>p=aIjUT1xj|CCQ{&4S%b`6|j^7mj=bBwf(uexI-dhD|UT>BSnc=7~Og&Zv>A= z(~mc6T@c*_?PFz|!Myqx0A|;@%;IE6ilA>VnyAx$T=bM5b z6K<#HKjkP5GiCRfXZ|*dsIF9k>*OMGC5=3RG+_fr(|BlMEhM>)%rbs?+l<2pa4Ze} z^2WLIyKSh79@rzWxVHYRNLd_SLfr-inE-UNLnv74h3d+t0I7&5$GgR#1MCc`*v}tY z+FqI<2X?|i*msAA6A5g{nEEb1zvGhq6DKgHu(ROors=@8u=bZCf1>u)9M6Xfh{B;{ zO(hz{gf37QL7anSHcx&KxsfIFebLjUqoaCf3s;QSU#r{5g~vUO&a|0;-&AjTBh##K zI7_X8t*n&I89ZfHDFl(I>Qly!DXhAj98S!iKPqa89v{trVc%EWC#F67wJV9Cku}?! zkTBm}n7qGVEqjxUH+Dd5zO9JSkvDA#Ll&y9X~0HQmi7fOcpV%eJHAj8@X;GNAaG1D zs~gwGKa&QW4ho$x*q3?q+Y$kXNqoun`E4~qLUN^qYfWm{{671*yjeEj4AWVN6;~^4 zK%0c1Pd>g8{phfS$0qMSB(3BaUDObF<25~GNlMo+Tyq%jqORvL(~)KiQMfa4G&)y6>u&CCs#`Q`vopEuCnPvb#L2D-B$VGVd$W4C8Ozkt>^rU%0TBp1u=cv zroAG#njwG5;48^NhAniZ?a^cS=V9%>%by3fulB~JboryZm#IU~$&+f+&K!#D3~a-m^!CW!ln>?%z){5T^E+3pS4j z$Aq6eigwB7_UR8DHc70GKJ)r&tpt%Xgn<4{s)3YWr_& zL1qB4`>^L|5Ei5|Y{eKcVfIpXQft#c;Z+Pys{OPN}kMZ4EGApV9=Fd@hOdOx7Sc)|;rgyBiHiV{%)W-;O2=+B*^raI`n`Yz zkiuQRkXEm{|1^_FE}~sSl@ss|NLFPg~HO;jOb@lJB426PQUqLn(w%pdLGn`wJj$)|o>-@u=-QEv@@ zH-iv|O}VPw_P~hSvkRDE0QcuD;;-2%p>%oIo;5qEIOl9E0aC1*xaxl;RSO2~nSeq4 zTeuL);<6BsK5><2bv0{6g#FrJ&q5Z9%^NIkblvcxBeM0)*&igs>Hhk(Zcl_GMoc+> zs;7XD2IMeT7&+s!0?m4=8xFzI>*&a&OOl}E)`c~WF+Ycf|6Txc^xu2*?t@*&dJ)Bh7CYi1P5a#4LPYIw-=3 z5oY5vTiKRv!!4P;EKE9K_FzkT*-T72CYp{~_Hm1}H)KA+b|r1qSrh>Y;0{giON>ed zib2oHMNR&Ui}DRISMK1(XD!CS=?bPlTE)+6<}hdnW(7fWl)uq%0p)JnO2ss7rJ!Y;D}q6j(t@7fyc@Q z_ZR3ck|FIrU{sJ3*KyrKux9LEFu+OENJw*`<#T9Z+wU2yxfM6se(=JIQ7_cBa}2d! z30ki57rDzIPjuJA{CyQ>{J|YA)j7IZ{}%?F?HP&i4|Up$%lJ(m87Uv3J#G)neczi7 zNFu8vkkPs93pLN18S%_^aCUEmAkis*bK%{Sbaf_f2s_y1kHDZBX8*{Vh1VlzWg>qs* zO3=U|NK_xMiR80OXiyb!<#!f+0g^bJ|2T1*e!a!wo9##1+{qCDefL}Oqep4$Gsz`Q zY^CVoRF~Q*yv*hu{Q%Q$NDdD%Rv!J)x8|6#C)7T?(+zEVboTQ(8&x!loyiD!`I4@O zUvVU$Bm4GILYzGnFk35LnHPi&$rrwQ=p&wl5ltE z+<9W5KHnn>uKbWU{l4Gax)`NfqLrPiW~P?95iZh)Eqn z2YnZ^)qA&5giB25YY<^IknYn#obF~ZGo?_JApdNk`C`I4d@mxB5~(vg7!o^vsvv0Xc>;!QHx&95U<6fTV$fk! z6ap1`QVgSs21E2hds^sJX3gu|k`ypLEZ*PNsR|!nrY=Sb6scSMv0iW?CY8+rSMVEj zP-R+-WtgHmO=}Q7n7{YRxR5pFD2<6!v)*T$bX9O8o^PazpSVOWj2ljn8tQQKWxJ|R zI4^NRRm^A5tR_i_D2*Ri09IH)y+mxZBPu{=+jZaZ^l7 z%v`)U-K7iuq3!`xp}aYhp9XjzZLl{PT__bjtXw{hAxum0ygy!X@hcI;B>vJROg(BL zs&VT^e~h3#lj9 zk@h^4RLjM-CDRxFYqSSm9(}6rrDj3Pj~0L3?77Q$lKLew|Ll-h>eaxkp~@Fr-T|&( zY@B^_*fT-t<4O^Vui4K~Fa8HALyn$_MWa$k*qC@DnVg;CSU%?Eg2S1wF`0C!6f61Z zv-4r(n+chtCZz`tyT8)d)4yEa6H83~Soz{e>rTn{XLRIQ+?;U!T)GktROOiduT?q! z#<8SUi)ciI?LSdGS``m|%ir+7Y3)v^**8<%pmAEFOZ!Q8G5tlpN=kgNC;CB1;~7W} zwqOQcYJ_<|&2}c$yavTy9c8PnQ`GV5#@2F}14}}7?$=5Wi_P0Su;_?1rzMn&FlJhX zL$kQ(Pa#(Pgw?HX>p9YN#@{~)^W|F;CNLNF&YEBPTvFe5syk4AaT#P7Hj<#_vJ%P8 zR?HQI))MRdDI$%}FNu&;0nehV$$qe9Xq`H(?R@oN>2Qx=T}6$EUG8b2kdxgJd&Bld zRN)r?zIayPjuCy(M(NN#;cMWc8(o(J;pM*CZ^GTfB6cMv%!#?8tRq@2C>P+kZ>iWF z-B*p!nXDkRUV}~obh^8js&&KrcMFt+?wb=^tiOZ)B*G#`IO~6A;ElB%-V~CmwNgR{ zxi}3Zhgj5xIKVflwJE=$=7kuw*6D(A2Dgm>yY0`RFsqswGnsYXvfxPN3fbk_)c;&M zy6fXoP%x}bhB+~Tpi;U5nk%+>0n!4|+@9-~_C4>(OKi`3e=*C(%o5UPlPQWsg!5nwIL*XKRd8t`o&BGg?#00$jCNf!LT zC0ncz9Gz7#)3G@GgUdo!gfb5-t*=}!H=RUb$-w%&%$LHi(DUuQw;18RIWWgY3T zN_Q(!>~^?+yIGGv0rp%1VWUnAfue<)`4R5|@US#KxBI2_pvyOuwf!9~W~9FkZak>9 z!ByUPa=M&Afr&?tTdDYM`tOVc&N7 zcld*V?|w}FB9u>f2JV8x4P z#DXO|`2I-hVE|y59S)SVNOe7;&*oz~QOX(%lTwo+I z-TMC`pg?Di-UuFQ*R1WVOr+mz;<88Fw5GLZV(Zs(+w?AOe1#Y+3|0*yz#GR-C8zL@uvMOF!d5%}mMTid@-?UJLj6%x zMXZPj*2&(K^t5191Reo+SDvXeME=)^{I00|`E&|=aF85r9K@0I~? z`^1R7Wjr$CjrqgRdX}!kvnfBqyL|73wAwcp(e(`C;_)08Ra@DnNkq1i$%}t1YuNI% z+0qHlHuV*s^((fn*Ffskpkq2RJ0Q^&vLjPZt+g3r+o2I4~qw8{xiO9aB%DWsv9*rOnXiRewYL>Q^J?pBvr> zG;LP(R8~rN6L$u}K%l^hV8E(!9`IUT@ID^IdIUVSVdFF&DeTJkqpdX2@{jS(pGfGun*qf$PlK*kH*M zlN8;o6Nv5JWL*=VveO6+}qyJzg*mHwlSA7 zAnMkU52{QK7$JZYjL<#d@17Q&Y$O#DT7_t~!iO`!+oaU;sQ&a)Ip6X^Mj`$S|5_{! z)#z#U-t4^4T5`9GSr4Jn;d|~~XcTV9d9)yNGAdXz(~^svGVdp_enkFSA>|M2{ch~) zpE;0>WAROp1ni`Uop+u^lPh)xVG6HHfL9gHqLcz4f&%|xg+Bd<)dI1G%A<*!{Rz2} zvGV~YzLmT2j*$vOEOLAGB&tTsf~nDbYAzYY^;DF6G9x8lp`8>LFA=w**|&BlTb!sa zbkTtzn?Z~?z(g1Fy$;|cs44Syspw16CWBKISBuUqVwQ^5i`)!2ag_A zSyUYpD&CF%-tB(>uBWaGb6l3xBHLvo$-K`_aigdz?w!PZ%DV{wW#_3(c`aHc)O&DB z#<00)>TZ0r0&E^R#gg{56^^n`lVQCKb$wL4}$d3|_-vuj`qzuggjh6o=! z!VJ?vsj;2(xNxZHf+fkZch9WRoO&5Bxpd6%QMZ~4|6>|+`a{j2wT`)uT(>)HFQ#Kj z4XOTOMKsf)-%*eL)4nL9p!8q^HbzAU;39>joE)3zEWqo=)Se138hoKCN$84T1qIqf z1efBs!wFy66c~^}yBwyt+L(%k=EF!v6Reo!bQ{%qnKopt`IypF z1O;v@0Vi9+!C(XGXWG;m#n_%Qqrbq9uD=G=#`#2Ooh=1IJXT z<+K4}m_)59k{5f{8v#XeaVFDksQLt1CgK%Hl|s3&xYV_I^*0~Jn}iu=Mtf3VaESeL z1)m+!_o5JBi}{Zi_J6qI|F1b9uCFX`{&5|aWU3MYsPn|ARSOZpJq+XVB%zIbuV`#* zo~_Cg4rpI_*srfCDSO|E+VHx7u0kBTqPmZAZiCzPKIHkhB(O zBv4i-`S1`+|F;^|_igvgKf(fo|Gnh(FMC`*ucq*olrniGj++`i<9;Nf;3VZ9r0XdJl5E01gDGRjm;aovOV?`t2PC0Q8 z8E_{PR_r`esks$3(uMJmR=+3HQ3XlPtH-skz)!;TZ~f~4zGA$|`k zOYMiKHWy-@YR@Mut=ManZ9~K$>%biV@Z2(MIg2}>V5YfBlib@{w5&X!=3~+nf>2#(xGqszh1U`+v0;_~Ez z&~NC3K{rdzxZl!1c-{N{e!3Qu??qS155u>7g5lnGo|ooL8{M#D=Nmn3&ArdF>=;oU z4rduX{Tsz{X^yO%T0xW==+X; zSL&H~qs%z}XW#$&-wAdmA{wzRYZq2RK-ejGwu5=)pAx(@Eg^)trgL$|s_93B{XS?& zNX);SG%=Vhzevna>SUjli3qD32WSB(n1JdP;T_)FeAaq<`%4;LsQr=tLeE@W{*QSa!eQBI^T&*ZuRoTj;(xeH{Prd+ zR*oP-lbEui&-2)1c=mQlx%l(_G~c_ScordASD5PV6H{S)1ZAoMr5@%Z3%I4KWmGer z;6J$A&t(fzl#={(`f+&!1ACJs?=LX8$|jKQS0XN99B*orw#q-+`pUD|cb+v>+${qN zNz5K`10x&vgKtaBS7!TV?POM_X$RLQH;L#6ZVk4)Blc%v&bM;UIsJhzN0YaOr!qTk$I&|Y2C@ackt}s8vqI{NHOW# zGo5aUl=tjJ)9uPWxX}w z4%8RK4#=C!=d**Sa7EkLKd03nNONfHnb&p1N(~ZD_t#$K?mx;>8n(Y81*%DC`A@Sy z0E{b;FjV(&Faagk$c6p~EKjEZ>KPrJ)9l)w-9o#owNaPEKLWY1 zoO7cGJV4ApqiDf)L!sqOhnMCwiqbT2YJrNB%X1Mmnicy8{U}&P{T^Lm9glE!T|{23 z^(%UNIOlWAu{MKb;&rD*AahH%64IZh6?Q9<$a-XnO!n&QOY}CR|5W!NMy-NYrRkhJ z0Pd|(1W*^7-T;)CK>N?=_^%pLbWXklrz8JQHP_kI)Yf%_h++X7C@P>_;38e6BTZBw zL3;0(CM9&~RqmxIoj^cC2@q-s)r2ZUP(V5a5+HQxgwP2!;mLh|!TaqQ@7KNd7-#J= z&YEYQHK%|!w(0`c3DDqb{a>$!=$s(qI5$B%;Zw0~ItA=5L`qncotX5zL$|RQNF<`k zwk7V=#%^cS^YsnzFQv%jv8pv#0hGhKY;0r}piJkvJ@Kc(|26dxJgw^^!(d_$+? zvy^PEwMUw}&6+a&E1cTApm;g7(e^pv&_}MWUE8Jp(VY8^oYkP~{U^VES>U5y{~=ZTu7 zE8iXI1a&fE97?nD(dg`MFSsDQ514=AKN0HT#n$X&*`evB@qP8?T*^LWE&c)5^McRx zF1}g|?aQ`DVP33>s|fAWG$XH~@Y?rm_eoFc?KF`$#_AZkrY8nleJh)U+#ML``i<|^ z?teRW=FqGQ zCMR|}Y8FnZm_Z33ra>{KX`z}On0c`);akIF`IDbmYL=4O-GX06kt}7m5|o6Xoch5( zp?2JYMQYDNg3|zWDyG#B3DtBE_udt$uSm4`njzgYy*i{Ln`GyHasBY6@~}VS09}9O zA$dzU(~YowQR8!EW; z3jfY2I-CM{}33mD*`J8~e|Tk>e(gD0tP-Lus98qUYm^rS+?g z&HIXh{a`}~GAT<@Ct6auc@m$l+XmLfC>q7BO=_`w@qc`(A1^Qq0|Ftx_eaS5aZt8q zJM?l#Gx{||(h7{+ONT&8q}avye_9kt5H^Qaai)#+(W9A=!p}$KU56z>a5(DraswKu zZ`tX4pwOkDSux4vNLY@2$+`X3cZai!N`hSKrz;&$6*ZMs&eTu(R`VkKY{-_rxDuETUtb47ABcU|mWb=MxWfUVKqvL`_tLtHO0 zGY736_n4L-MKH=YrXPqbmK&OpJ@B2e$%7*7F4n6-eUL(Vc5L2u&3J`8`(RFy76#&{ zUCZ+5zSr9CQ^P^?)rWEXVovIhauuyrazp#Uun}xnLunA&XEPRtsW`kpUNn#fFDsr{ z;n+XpW?1Q%_u_z+S?i%3zoKZHmxdD4zd`mU8tr4Q&1F9|U;=yx#Qtc53tj|#XH#Vd z0A4X0(T&k~3>g4Vqjc%foBxBs#*eB8h2}J3K^k?MW$r405Nz0GJ{c_XzILg~^_i0H z{qqKe&sU6WQt7ua{pOkY?0bseQNY@KGq=fF&E8g$z-&=ahu@0LEw5+H4{bb(l#Wm{ z9<5Kcg5Z5aXPGl=`LA27k0-8EohAg{J(QNEMbZ{i*qAR~STTvO(%4)6_uLeUIMxWq zJB!Wxzdv&kVeBJe4CmU4zO$EM*0lKe0<221YM05R9y$1kmE7!-X?>RZ6&vDj&3bpL zSoBry@Uldr!QAZyFIlmvT~7=0HCX16L<>O#)6!^NKNx6^cc+N>7^LPlj8sGg)<3@{ zJSqar4dw3>h3NQyIm0)JcNal(jmZ%X1)JyY2qW+Q5t#IX8C4F2dDlYSU<7IVt}UaZ ziFcj@!$@Pwy5{Ch`e{>5dsmWSe!5I@gR5i$^~5N+(*J~C%A|CAvkau!{HFU0)2?-% z8NiFCgkR}rlnix77fQDr?%MUg%|ebYmYMJSR1o=&<0POdd&2DRnxHANM)B6+Ru&PV z@g7O=QnbK~ZaH7rJ~BM@9d$rQJ6y#AJjsVI3#`->R;+dEk~=Y)Zvkofxa|I&xo@4t z7leMUWY9rSF>2pX$Aov^NY9qlb4dY1-*% zgjBCZU_B03EF>3{bXAxG-5|?x9Y1YuC$85oTxsAim5g3hj~GsSBTgzR5t4L2rp6_s zK?IplgNYX{NFl3YQk^m)thEw@C$QjOIZBzQ-sV5V3XpObp|0us#Vd}9pMzpOm_^S9 zgin?{5tt3kgO3e9GICC7=qYOh$u}t^~86|Is4)xVk5V4e7 zVY2VzDP-Xh;_GAr7B{kcZ|Kp+j?^=C+7}C`j1(w%g-Nj~EFoiarV5w2H8wkTuN;LJ zqh&_=+zUB4!Fiuh*R62BpSLtpyB^f;9R^!KVv5#>r%y4SHeaM?j!hJ?TVxNS+o;s+ zDF)OVfq29n0y;Ms)=K3SU~hKF?6I*Z_C9ZUgWW6d+TmEtHp^2l))?5hK<>_&!l;N- zJ*TnSnh%|jfwSSz%0{zXmMY(-;Y%m#QH{uAuvW>^?9uU|a2xf#V%Vv;(R`fS?B=)m z$p^Ot1?AOdy$Q(tGO+uzdTjy=V+9;h9BMN%ma%%{QKIoet9KJ7&@gabCke?jT+uxY zVJjIXmjm5TW^3_8-HnlZu6k)SVC9`03;E&&trDXHn?q;fS4wgE-~gEoaIep|qRhI$ zc2GGFo=(&2lIV096;Q`-cfVAWUI;KwwbiDQ8?4TXcbWwC^|Lj-y>U?ypVEC>>*j=8Rt|bWy&Wd?9w?O3wd-o;6T)*u<*$ns}K;J+LGlVhedb~LnKYlOQpjO zps1bCl4jjjoeO5GMd!T9GV8tv5->P7C%PVqiCzCt72l>yMrq;2&(yY@R-Bi?;w~X% zci1B*CNLFF8bxuup)TFnCCs1%y&Tf|0(#Fq16-X--s16N ztHf89CIQ8a(eftvM%z)Ue%YKXD%*LLK;lA z;$;(@vy;-5naV*-oQ9*cs`$avLttNWO4&)rz#EusH6nd*GDOSst|GGbA$+v*6kAj; z(?1ju>RO#;VuJt+vm(D8Q?_@;6RWf%{Is>Mx1MCl`~A31eK&mr_0V_j5AT;55qFmF zu5D*!q20y;4$@F=)2Aa5gypV(1|15YnVbWKaUR1JUnc$fYhxv;O*3HZe8zQ5Mhj2C zI@=q+@SSB5#o*IsbLcv55jEzgK%5DmP6WXMHL%&R%I0|5sGgEP1oyia<7SspcTzR7 ze>tL(!D0(nVStkoRkUKd%#zJIr}{Br>>K>85&q-?G^rQ2P*2skiAv z^-#=Y61(tDi5hY@nCh^3AB|V2FpH-Z!=Xxl$OIIBFPdMpAW8<*Xp0Gr@B*(}TF!8? zc12s#q`K0!a0t&(^{*!Gk98yCXI@rlS|h`5rJn3MM0K8Tdn>-o`+ao>Ge|Fb4V+d( z5hYgv-=Q)8=j!*Ce{>Kr7 zE$!B z(~2(}NxWQ>ipQ1PP)>S9jz%#vIbrfo52f#18uA=8B>AptAm0`3TMEf;w*cn@=38H} zz@9f}=8%-ovyT;a{a+Yd5(~pbe;qjc_|v4&sHlt**Khy8%4CwJ56Z<{HN+^Y`>}Hi zN?RQMOkYpYS?7TJ$s0Z>m+Fg(R3gE358O;9J_Fa?6E0nDZEk1Z73oHB71339BLn}! zOmk#kVCL=La1$#_l-h30hh8mEZp;28mG`!kltx*b_g%!#(FRH;(JAl!RU`21hhn}C zaNWmoO0$u6==aKXc@6 zG%>2tAM+kPd}uodI>1B#8wHdNw7w4R9483a?7^0uNoIXM4Es3(v;3a=iN@7v#%!tB zA3F!JLLcH&{)I$rNNM{VA<(WNns&*hJ;oR>4AKTJ&D?=K_5a2PzH6~n_ctcA*LK<*EY%$J5_Pv! z4>-esYzT=mG!u`FNVz~61d0wLHImnz5w+I9a3IFURrMs$opYwNa7FuhMk^9_R~}z&mCNz3Q_u6AI|wplqQSX zh_s7%TtEIu_9pYivyd}_QvNsE2O^0oQXSM{Bz@C-X7;Any@)B7t`u5S%M87Ls%~~` zwFJvEXH6U)FgxfV-6%D%XThCi`X1`Pl$a^Q{0*y`@SBsnLD`Q zKjSVw5}tF$!Vob2?Av6GXC5Mnvd8XEl}~EyvcHs_&s;Dn-SZ;LvA zSblxyn}9FV`14rbj;e}51Lux`S z)2+6ETuQW}O$+}9DrPDl5);eD`Xw4<;sTTJmnG?}RV)Zd*0m%tyH{rJm!*^IoPG^F zal8TEqy&bLG{bsbmXcWDiZU^TiYNTZFOVfken?N}s3}T<%@1Dwb0APJOlah2&4t~N z+qliT`BMV}u{07=i4zJTD7$_P>rTc1$z$E?n%m5(PU8=xO%HMgt!$EA^wF5t8=QGp zLy;qB82KV}_J9BJtX!6-OK2ky!@VQ@83ka?ub)XeKQKJBDN$ zctV=k_IANH?iW2*WuhU7vSqxc>MU2vEGmS~RUVwX1G|FV@&?sdKIwV{yOlT+2%Fb# zB&V}7Wo}p)(b`EeCsNSo*p$e zV7$eTjeh#R%hZoAsXN=-Wp!R6jSo5Z|H2_8^KqLiBNosQ!QbbZ?ET`vG*v^9If{WkCfA Wc<%MgL%Jh60Qg4xb*1WGfBy#nM?aSU From 8c71abf5f459a3083cb42d4e91f32514de32a7ac Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 17 Dec 2020 17:37:51 -0800 Subject: [PATCH 323/958] new info --- .../microsoft-defender-atp/tvm-exception.md | 15 +++++-------- .../tvm-security-recommendation.md | 22 ++----------------- 2 files changed, 7 insertions(+), 30 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-exception.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-exception.md index 3af172dba7..9bb2ff23bb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-exception.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-exception.md @@ -103,13 +103,15 @@ Navigate to the **Exceptions** tab in the **Remediation** page. You can filter b Select an exception to open a flyout with more details. Exceptions per devices group will have a list of every device group the exception covers, which you can export. You can also view the related recommendation or cancel the exception. - ![Showing the "Exceptions" tab in the Remediation page.](images/tvm-exception-view.png) - ## How to cancel an exception -To cancel an exception, navigate to the **Exceptions** tab in the **Remediation** page. Select the exception. To cancel the exception for all device groups, select the **Cancel exception** button. You can also cancel the exception for a specific device group. +To cancel an exception, navigate to the **Exceptions** tab in the **Remediation** page. Select the exception. + +To cancel the exception for all device groups or for a global exception, select the **Cancel exception for all device groups** button. You will only be able to cancel exceptions for device groups you have permissions for. + +![The cancel button.](images/tvm-exception-cancel.png) ### Cancel the exception for a specific device group @@ -117,13 +119,6 @@ Select the specific device group to cancel the exception for it. A flyout will a ![Showing how to select a specific device group.](images/tvm-exception-device-group-hover.png) - -### Cancel a global exception - -If it is a global exception, select an exception from the list and then select **Cancel exception** from the flyout. - -![Showing how to cancel the exception for a global exception.](images/tvm-exception-cancel-global-400.png) - ## View impact after exceptions are applied In the Security Recommendations page, select **Customize columns** and check the boxes for **Exposed devices (after exceptions)** and **Impact (after exceptions)**. diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index 032da734d3..552d3f6e0d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -205,32 +205,14 @@ The following list details the justifications behind the exception options: - **Risk accepted** - Poses low risk and/or implementing the recommendation is too expensive - **Planned remediation (grace)** - Already planned but is awaiting execution or authorization -### View all exceptions +### View and cancel exceptions -Navigate to the **Exceptions** tab in the **Remediation** page. +Navigate to the **[Exceptions](tvm-exception)** tab in the **Remediation** page. ![Showing the "Exceptions" tab in the Remediation page.](images/tvm-exception-tab400.png) Select an exception to open a flyout with more details. Exceptions per devices group will have a list of every device group the exception covers, which you can Export. You can also view the related recommendation or cancel the exception. -### How to cancel an exception - -To cancel an exception, navigate to the **Exceptions** tab in the **Remediation** page. Select the exception. - -#### Cancel the exception for a specific device group - -If the exception is per device group, then you will need to select the specific device group to cancel the exception for it. - -![Showing how to select a specific device group.](images/tvm-exception-device-group-hover.png) - -A flyout will appear for the device group, and you can select **Cancel exception**. - -#### Cancel a global exception - -If it is a global exception, select an exception from the list and then select **Cancel exception** from the flyout. - -![Showing how to cancel the exception for a global exception.](images/tvm-exception-cancel-global-400.png) - ### View impact after exceptions are applied In the Security Recommendations page, select **Customize columns** and check the boxes for **Exposed devices (after exceptions)** and **Impact (after exceptions)**. From f9a21f66db306575815db5abd9caaee84b123533 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 17 Dec 2020 17:41:18 -0800 Subject: [PATCH 324/958] added md --- .../microsoft-defender-atp/tvm-security-recommendation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index 552d3f6e0d..d28ecadea4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -207,7 +207,7 @@ The following list details the justifications behind the exception options: ### View and cancel exceptions -Navigate to the **[Exceptions](tvm-exception)** tab in the **Remediation** page. +Navigate to the **[Exceptions](tvm-exception.md)** tab in the **Remediation** page. ![Showing the "Exceptions" tab in the Remediation page.](images/tvm-exception-tab400.png) From c1c986e8bd02f979f83d8191d563aa51d44e7911 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 17 Dec 2020 17:46:19 -0800 Subject: [PATCH 325/958] remove duplicate content --- .../tvm-security-recommendation.md | 81 +------------------ 1 file changed, 1 insertion(+), 80 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md index d28ecadea4..3db95062b4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation.md @@ -149,86 +149,7 @@ Select a security recommendation you would like create an exception for, and the Choose the scope and justification, set a date for the exception duration, and submit. To view all your exceptions (current and past), navigate to the [Remediation](tvm-remediation.md) page under the **Threat & Vulnerability Management** menu and select the **Exceptions** tab. -### Exception scope - -Exceptions can either be created for selected device groups, or for all device groups past and present. - -#### Exception by device group - -Apply the exception to all device groups or choose specific device groups. Device groups that already have an exception will not be displayed in the list. If you only select certain device groups, the recommendation state will change from “active” to “partial exception.” The state will change to “full exception” if you select all the device groups. - -![Showing device group dropdown.](images/tvm-exception-device-group-500.png) - -##### Filtered - -If you have filtered by device group on any of the threat and vulnerability management pages, only your filtered device groups will appear as options. - -Button to filter by device group on any of the threat and vulnerability management pages: - -![Showing selected device groups filter.](images/tvm-selected-device-groups.png) - -Exception view with filtered device groups: - -![Showing filtered device group dropdown.](images/tvm-exception-device-filter500.png) - -##### Large number of device groups - -If your organization has more than 20 device groups, select **Edit** next to the filtered device group option. - -![Showing how to edit large numbers of groups.](images/tvm-exception-edit-groups.png) - -A flyout will appear where you can search and choose device groups you want included. Select the check mark icon below Search to check/uncheck all. - -![Showing large device group flyout.](images/tvm-exception-device-group-flyout-400.png) - -#### Global exceptions - -If you have global administrator permissions (called Microsoft Defender ATP administrator), you will be able to create and cancel a global exception. It affects **all** current and future device groups in your organization, and only a user with similar permission would be able to change it. The recommendation state will change from “active” to “full exception.” - -![Showing global exception option.](images/tvm-exception-global.png) - -Some things to keep in mind: - -- If a recommendation is under global exception, then newly created exceptions for device groups will be suspended until the global exception has expired or been cancelled. After that point, the new device group exceptions will go into effect until they expire. -- If a recommendation already has exceptions for specific device groups and a global exception is created, then the device group exception will be suspended until it expires or the global exception is cancelled before it expires. - -### Justification - -Select your justification for the exception you need to file instead of remediating the security recommendation in question. Fill out the justification context, then set the exception duration. - -The following list details the justifications behind the exception options: - -- **Third party control** - A third party product or software already addresses this recommendation - - Choosing this justification type will lower your exposure score and increase your secure score because your risk is reduced -- **Alternate mitigation** - An internal tool already addresses this recommendation - - Choosing this justification type will lower your exposure score and increase your secure score because your risk is reduced -- **Risk accepted** - Poses low risk and/or implementing the recommendation is too expensive -- **Planned remediation (grace)** - Already planned but is awaiting execution or authorization - -### View and cancel exceptions - -Navigate to the **[Exceptions](tvm-exception.md)** tab in the **Remediation** page. - -![Showing the "Exceptions" tab in the Remediation page.](images/tvm-exception-tab400.png) - -Select an exception to open a flyout with more details. Exceptions per devices group will have a list of every device group the exception covers, which you can Export. You can also view the related recommendation or cancel the exception. - -### View impact after exceptions are applied - -In the Security Recommendations page, select **Customize columns** and check the boxes for **Exposed devices (after exceptions)** and **Impact (after exceptions)**. - -![Showing customize columns options.](images/tvm-after-exceptions.png) - -The exposed devices (after exceptions) column shows the remaining devices that are still exposed to vulnerabilities after exceptions are applied. Exception justifications that affect the exposure include ‘third party control’ and ‘alternate mitigation’. Other justifications do not reduce the exposure of a device, and they are still considered exposed. - -The impact (after exceptions) shows remaining impact to exposure score or secure score after exceptions are applied. Exception justifications that affect the scores include ‘third party control’ and ‘alternate mitigation.’ Other justifications do not reduce the exposure of a device, and so the exposure score and secure score do not change. - -![Showing the columns in the table.](images/tvm-after-exceptions-table.png) -If there is a large jump in the number of exposed devices, or a sharp increase in the impact on your organization exposure score and Microsoft Secure Score for Devices, then that security recommendation is worth investigating. - -1. Select the recommendation and **Open software page** -2. Select the **Event timeline** tab to view all the impactful events related to that software, such as new vulnerabilities or new public exploits. [Learn more about event timeline](threat-and-vuln-mgt-event-timeline.md) -3. Decide how to address the increase or your organization's exposure, such as submitting a remediation request. +[Learn more about exceptions](tvm-exception.md) ## Report inaccuracy From 3795ef248c633ef86caac72b27adc2245d848c2f Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Fri, 18 Dec 2020 10:37:47 +0500 Subject: [PATCH 326/958] Update windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../windows-sandbox/windows-sandbox-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md b/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md index f9ff3618d5..ce384ca8d4 100644 --- a/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md +++ b/windows/security/threat-protection/windows-sandbox/windows-sandbox-overview.md @@ -55,7 +55,7 @@ The following video provides an overview of Windows Sandbox. 1. Locate and select **Windows Sandbox** on the Start menu to run it for the first time. ## Usage -1. Copy an executable file (and any other files needed to run the application) from the host and paste into the **Windows Sandbox** window. +1. Copy an executable file (and any other files needed to run the application) from the host and paste them into the **Windows Sandbox** window. 2. Run the executable file or installer inside the sandbox. 3. When you're finished experimenting, close the sandbox. A dialog box will state that all sandbox content will be discarded and permanently deleted. Select **ok**. 4. Confirm that your host machine doesn't exhibit any of the modifications that you made in Windows Sandbox. From 0fd13c3bd81a8f4cfe45514b9011bef90e753295 Mon Sep 17 00:00:00 2001 From: Benny Shilpa Date: Fri, 18 Dec 2020 12:33:36 +0530 Subject: [PATCH 327/958] Update TOC.md --- windows/security/threat-protection/windows-firewall/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-firewall/TOC.md b/windows/security/threat-protection/windows-firewall/TOC.md index b70d686ed5..00a5fecc08 100644 --- a/windows/security/threat-protection/windows-firewall/TOC.md +++ b/windows/security/threat-protection/windows-firewall/TOC.md @@ -165,7 +165,7 @@ ## [Troubleshooting]() ### [Troubleshooting UWP app connectivity issues in Windows Firewall](troubleshooting-uwp-firewall.md) -### [Filter origin audit log improvements)](filter-origin-documentation.md) +### [Filter origin audit log improvements](filter-origin-documentation.md) ### [Quarantine behavior](quarantine.md) ### [Firewall settings lost on upgrade](firewall-settings-lost-on-upgrade.md) From bee7e905a1960daa0ced2c9e66aa1580731d5e3b Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Fri, 18 Dec 2020 18:09:54 +0200 Subject: [PATCH 328/958] add note about Intune Portal link https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8433 --- ...rosoft-intune-automatic-mdm-enrollment-in-the-new-portal.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md index 706b102207..3715d10e17 100644 --- a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md +++ b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md @@ -13,6 +13,9 @@ manager: dansimp # Azure AD and Microsoft Intune: Automatic MDM enrollment in the new Portal +> [!NOTE] +> Microsoft Intune portal can be accessed at the following link: endpoint.microsoft.com + Go to your Azure AD Blade, select the Mobility (MDM and MAM) and there should be the Microsoft Intune "App" Visible, select the Microsoft Intune and configure the Blade ![How to get to the Blade](images/azure-mdm-intune.png) From 0e2b5f9bbe4d2bd1946795efc0f6ed010b9ecd41 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 18 Dec 2020 09:51:56 -0800 Subject: [PATCH 329/958] Update azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md --- ...une-automatic-mdm-enrollment-in-the-new-portal.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md index 3715d10e17..7ec3f05bdc 100644 --- a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md +++ b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: lomayor -ms.date: 01/17/2018 +ms.date: 12/18/2020 ms.reviewer: manager: dansimp --- @@ -14,14 +14,16 @@ manager: dansimp # Azure AD and Microsoft Intune: Automatic MDM enrollment in the new Portal > [!NOTE] -> Microsoft Intune portal can be accessed at the following link: endpoint.microsoft.com +> Microsoft Intune portal can be accessed at the following link: [https://endpoint.microsoft.com](https://endpoint.microsoft.com). -Go to your Azure AD Blade, select the Mobility (MDM and MAM) and there should be the Microsoft Intune "App" Visible, select the Microsoft Intune and configure the Blade +1. Go to your Azure AD Blade. +2. Select **Mobility (MDM and MAM)**, and find the Microsoft Intune app. +3. Select **Microsoft Intune** and configure the blade. ![How to get to the Blade](images/azure-mdm-intune.png) -Configure the Blade +Configure the blade ![Configure the Blade](images/azure-intune-configure-scope.png) -Select all for allow all users to enroll a Device and make it Intune ready, or Some, then you can add a Group of Users. +You can specify settings to allow all users to enroll a device and make it Intune ready, or choose to allow some users (and then add a group of users). From 46f264cf7feb09ca919242ea868e8f38edfc32aa Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 18 Dec 2020 09:53:38 -0800 Subject: [PATCH 330/958] Update azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md minor edits --- ...crosoft-intune-automatic-mdm-enrollment-in-the-new-portal.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md index 7ec3f05bdc..61ff7e767b 100644 --- a/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md +++ b/windows/client-management/mdm/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal.md @@ -1,6 +1,6 @@ --- title: Azure AD and Microsoft Intune - Automatic MDM enrollment in the new Portal -description: Azure AD and Microsoft Intune - Automatic MDM enrollment in the new Portal +description: Azure AD and Microsoft Intune - Automatic MDM enrollment in the new portal ms.author: dansimp ms.topic: article ms.prod: w10 From 83d9bd9b7adc67699c85fb3d590e9d85f421cdc7 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Fri, 18 Dec 2020 20:53:34 +0200 Subject: [PATCH 331/958] API pages update 1. Adding US Gov reference to all pages with URIs. 2. Adding geo reference to all pages with URIs. 3. Replace MDE URLs ending with "windows.com" with "microsoft.com". 4. Replace the login endpoint from "login.windows.net" to "login.microsoftonline.com". --- .../includes/improve-request-performance.md | 2 +- .../includes/microsoft-defender-api-usgov.md | 20 ++++++++++++++ .../microsoft-defender-atp/api-hello-world.md | 10 ++++--- .../microsoft-defender-atp/api-power-bi.md | 8 ++++-- .../exposed-apis-create-app-nativeapp.md | 10 ++++--- .../exposed-apis-create-app-partners.md | 14 ++++++---- .../exposed-apis-create-app-webapp.md | 14 ++++++---- .../exposed-apis-list.md | 13 +++++++--- .../exposed-apis-odata-samples.md | 26 +++++++++++-------- .../run-advanced-query-api.md | 6 +++-- .../run-advanced-query-sample-powershell.md | 10 ++++--- .../run-advanced-query-sample-python.md | 10 ++++--- 12 files changed, 101 insertions(+), 42 deletions(-) create mode 100644 windows/security/includes/microsoft-defender-api-usgov.md diff --git a/windows/security/includes/improve-request-performance.md b/windows/security/includes/improve-request-performance.md index c2499cf092..efaf6664a9 100644 --- a/windows/security/includes/improve-request-performance.md +++ b/windows/security/includes/improve-request-performance.md @@ -16,7 +16,7 @@ ms.collection: M365-security-compliance ms.topic: article --- ->[!NOTE] +>[!TIP] >For better performance, you can use server closer to your geo location: > - api-us.securitycenter.microsoft.com > - api-eu.securitycenter.microsoft.com diff --git a/windows/security/includes/microsoft-defender-api-usgov.md b/windows/security/includes/microsoft-defender-api-usgov.md new file mode 100644 index 0000000000..6f525901c4 --- /dev/null +++ b/windows/security/includes/microsoft-defender-api-usgov.md @@ -0,0 +1,20 @@ +--- +title: Microsoft Defender for Endpoint API URIs for US Government +description: Microsoft Defender for Endpoint API URIs for US Government +keywords: defender, endpoint, api, government, gov +search.product: eADQiWindows 10XVcnh +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: macapara +author: mjcaparas +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +>[!NOTE] +>If you are a US Government customer, please use the URIs listed in [here](gov.md#api). diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md b/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md index 0dfd7bfce2..f9c9891569 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md @@ -26,6 +26,8 @@ ms.topic: article - Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + ## Get Alerts using a simple PowerShell script @@ -95,6 +97,8 @@ Done! You have successfully registered an application! - Copy the script below to PowerShell ISE or to a text editor, and save it as "**Get-Token.ps1**" - Running this script will generate a token and will save it in the working folder under the name "**Latest-token.txt**". +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ``` # That code gets the App Context Token and save it to a file named "Latest-token.txt" under the current directory # Paste below your Tenant ID, App ID and App Secret (App key). @@ -103,8 +107,8 @@ $tenantId = '' ### Paste your tenant ID here $appId = '' ### Paste your Application ID here $appSecret = '' ### Paste your Application secret here -$resourceAppIdUri = 'https://api.securitycenter.windows.com' -$oAuthUri = "https://login.windows.net/$TenantId/oauth2/token" +$resourceAppIdUri = 'https://api.securitycenter.microsoft.com' +$oAuthUri = "https://login.microsoftonline.com/$TenantId/oauth2/token" $authBody = [Ordered] @{ resource = "$resourceAppIdUri" client_id = "$appId" @@ -142,7 +146,7 @@ $dateTime = (Get-Date).ToUniversalTime().AddHours(-48).ToString("o") # The URL contains the type of query and the time filter we create above # Read more about other query options and filters at Https://TBD- add the documentation link -$url = "https://api.securitycenter.windows.com/api/alerts?`$filter=alertCreationTime ge $dateTime" +$url = "https://api.securitycenter.microsoft.com/api/alerts?`$filter=alertCreationTime ge $dateTime" # Set the WebRequest headers $headers = @{ diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md index 605b0f511a..39d611f4ca 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md @@ -26,6 +26,8 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + In this section you will learn create a Power BI report on top of Defender for Endpoint APIs. The first example demonstrates how to connect Power BI to Advanced Hunting API and the second example demonstrates a connection to our OData APIs, such as Machine Actions or Alerts. @@ -44,11 +46,13 @@ The first example demonstrates how to connect Power BI to Advanced Hunting API a - Copy the below and paste it in the editor: +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ``` let AdvancedHuntingQuery = "DeviceEvents | where ActionType contains 'Anti'", - HuntingUrl = "https://api.securitycenter.windows.com/api/advancedqueries", + HuntingUrl = "https://api.securitycenter.microsoft.com/api/advancedqueries", Response = Json.Document(Web.Contents(HuntingUrl, [Query=[key=AdvancedHuntingQuery]])), @@ -114,7 +118,7 @@ The first example demonstrates how to connect Power BI to Advanced Hunting API a Query = "MachineActions", - Source = OData.Feed("https://api.securitycenter.windows.com/api/" & Query, null, [Implementation="2.0", MoreColumns=true]) + Source = OData.Feed("https://api.securitycenter.microsoft.com/api/" & Query, null, [Implementation="2.0", MoreColumns=true]) in Source diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md index fb00021426..6f75ba2ca8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-nativeapp.md @@ -112,6 +112,10 @@ This page explains how to create an AAD application, get an access token to Micr For more information on AAD tokens, see [Azure AD tutorial](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-client-creds) +[!include[Improve request performance](../../includes/improve-request-performance.md)] + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + ### Using C# - Copy/Paste the below class in your application. @@ -127,9 +131,9 @@ For more information on AAD tokens, see [Azure AD tutorial](https://docs.microso public static class WindowsDefenderATPUtils { - private const string Authority = "https://login.windows.net"; + private const string Authority = "https://login.microsoftonline.com"; - private const string WdatpResourceId = "https://api.securitycenter.windows.com"; + private const string WdatpResourceId = "https://api.securitycenter.microsoft.com"; public static async Task AcquireUserTokenAsync(string username, string password, string appId, string tenantId) { @@ -175,7 +179,7 @@ Verify to make sure you got a correct token: ```csharp var httpClient = new HttpClient(); - var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.windows.com/api/alerts"); + var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.microsoft.com/api/alerts"); request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", token); diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md index e2de608fbd..06af8266e6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-partners.md @@ -129,6 +129,10 @@ The following steps will guide you how to create an Azure AD application, get an
    For more information on AAD token, see [AAD tutorial](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-client-creds) +[!include[Improve request performance](../../includes/improve-request-performance.md)] + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + ### Using PowerShell ``` @@ -139,8 +143,8 @@ $tenantId = '' ### Paste your tenant ID here $appId = '' ### Paste your Application ID here $appSecret = '' ### Paste your Application key here -$resourceAppIdUri = 'https://api.securitycenter.windows.com' -$oAuthUri = "https://login.windows.net/$TenantId/oauth2/token" +$resourceAppIdUri = 'https://api.securitycenter.microsoft.com' +$oAuthUri = "https://login.microsoftonline.com/$TenantId/oauth2/token" $authBody = [Ordered] @{ resource = "$resourceAppIdUri" client_id = "$appId" @@ -172,8 +176,8 @@ return $token string appId = "11111111-1111-1111-1111-111111111111"; // Paste your own app ID here string appSecret = "22222222-2222-2222-2222-222222222222"; // Paste your own app secret here for a test, and then store it in a safe place! - const string authority = "https://login.windows.net"; - const string wdatpResourceId = "https://api.securitycenter.windows.com"; + const string authority = "https://login.microsoftonline.com"; + const string wdatpResourceId = "https://api.securitycenter.microsoft.com"; AuthenticationContext auth = new AuthenticationContext($"{authority}/{tenantId}/"); ClientCredential clientCredential = new ClientCredential(appId, appSecret); @@ -227,7 +231,7 @@ Sanity check to make sure you got a correct token: ``` var httpClient = new HttpClient(); - var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.windows.com/api/alerts"); + var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.microsoft.com/api/alerts"); request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", token); diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md index a7584847f9..3e602760b0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-create-app-webapp.md @@ -107,6 +107,10 @@ This article explains how to create an Azure AD application, get an access token For more information on Azure AD tokens, see the [Azure AD tutorial](https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols-oauth-client-creds). +[!include[Improve request performance](../../includes/improve-request-performance.md)] + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + ### Use PowerShell ``` @@ -117,8 +121,8 @@ $tenantId = '' ### Paste your tenant ID here $appId = '' ### Paste your Application ID here $appSecret = '' ### Paste your Application key here -$resourceAppIdUri = 'https://api.securitycenter.windows.com' -$oAuthUri = "https://login.windows.net/$TenantId/oauth2/token" +$resourceAppIdUri = 'https://api.securitycenter.microsoft.com' +$oAuthUri = "https://login.microsoftonline.com/$TenantId/oauth2/token" $authBody = [Ordered] @{ resource = "$resourceAppIdUri" client_id = "$appId" @@ -150,8 +154,8 @@ The following code was tested with NuGet Microsoft.IdentityModel.Clients.ActiveD string appId = "11111111-1111-1111-1111-111111111111"; // Paste your own app ID here string appSecret = "22222222-2222-2222-2222-222222222222"; // Paste your own app secret here for a test, and then store it in a safe place! - const string authority = "https://login.windows.net"; - const string wdatpResourceId = "https://api.securitycenter.windows.com"; + const string authority = "https://login.microsoftonline.com"; + const string wdatpResourceId = "https://api.securitycenter.microsoft.com"; AuthenticationContext auth = new AuthenticationContext($"{authority}/{tenantId}/"); ClientCredential clientCredential = new ClientCredential(appId, appSecret); @@ -204,7 +208,7 @@ The following is an example of sending a request to get a list of alerts **using ``` var httpClient = new HttpClient(); - var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.windows.com/api/alerts"); + var request = new HttpRequestMessage(HttpMethod.Get, "https://api.securitycenter.microsoft.com/api/alerts"); request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", token); diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md index 785ac39e0d..4a8aac1dc4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-list.md @@ -30,9 +30,9 @@ ms.topic: article ### Endpoint URI: -> The service base URI is: https://api.securitycenter.windows.com +> The service base URI is: https://api.securitycenter.microsoft.com > -> The queries based OData have the '/api' prefix. For example, to get Alerts you can send GET request to https://api.securitycenter.windows.com/api/alerts +> The queries based OData have the '/api' prefix. For example, to get Alerts you can send GET request to https://api.securitycenter.microsoft.com/api/alerts ### Versioning: @@ -40,9 +40,14 @@ ms.topic: article > > The current version is **V1.0**. > -> To use a specific version, use this format: `https://api.securitycenter.windows.com/api/{Version}`. For example: `https://api.securitycenter.windows.com/api/v1.0/alerts` +> To use a specific version, use this format: `https://api.securitycenter.microsoft.com/api/{Version}`. For example: `https://api.securitycenter.microsoft.com/api/v1.0/alerts` > -> If you don't specify any version (e.g. https://api.securitycenter.windows.com/api/alerts ) you will get to the latest version. +> If you don't specify any version (e.g. https://api.securitycenter.microsoft.com/api/alerts ) you will get to the latest version. + + +[!include[Improve request performance](../../includes/improve-request-performance.md)] + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] Learn more about the individual supported entities where you can run API calls to and details such as HTTP request values, request headers and expected responses. diff --git a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md index b4a487ffbe..ef758bf348 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md +++ b/windows/security/threat-protection/microsoft-defender-atp/exposed-apis-odata-samples.md @@ -26,6 +26,10 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Improve request performance](../../includes/improve-request-performance.md)] + +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + If you are not familiar with OData queries, see: [OData V4 queries](https://www.odata.org/documentation/) Not all properties are filterable. @@ -150,14 +154,14 @@ HTTP GET https://api.securitycenter.microsoft.com/api/alerts?$top=10&$expand=ev Get all the alerts last updated after 2019-11-22 00:00:00 ```http -HTTP GET https://api.securitycenter.windows.com/api/alerts?$filter=lastUpdateTime+ge+2019-11-22T00:00:00Z +HTTP GET https://api.securitycenter.microsoft.com/api/alerts?$filter=lastUpdateTime+ge+2019-11-22T00:00:00Z ``` **Response:** ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Alerts", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Alerts", "value": [ { "id": "da637308392288907382_-880718168", @@ -206,14 +210,14 @@ HTTP GET https://api.securitycenter.windows.com/api/alerts?$filter=lastUpdateTi Get all the devices with 'High' 'RiskScore' ```http -HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=riskScore+eq+'High' +HTTP GET https://api.securitycenter.microsoft.com/api/machines?$filter=riskScore+eq+'High' ``` **Response:** ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Machines", "value": [ { "id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07", @@ -245,14 +249,14 @@ HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=riskScore+ Get top 100 devices with 'HealthStatus' not equals to 'Active' ```http -HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=healthStatus+ne+'Active'&$top=100 +HTTP GET https://api.securitycenter.microsoft.com/api/machines?$filter=healthStatus+ne+'Active'&$top=100 ``` **Response:** ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Machines", "value": [ { "id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07", @@ -284,14 +288,14 @@ HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=healthStat Get all the devices that last seen after 2018-10-20 ```http -HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=lastSeen gt 2018-08-01Z +HTTP GET https://api.securitycenter.microsoft.com/api/machines?$filter=lastSeen gt 2018-08-01Z ``` **Response:** ```json { - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#Machines", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#Machines", "value": [ { "id": "1e5bc9d7e413ddd7902c2932e418702b84d0cc07", @@ -323,14 +327,14 @@ HTTP GET https://api.securitycenter.windows.com/api/machines?$filter=lastSeen g Get all the Anti-Virus scans that the user Analyst@examples.onmicrosoft.com created using Microsoft Defender for Endpoint ```http -HTTP GET https://api.securitycenter.windows.com/api/machineactions?$filter=requestor eq 'Analyst@contoso.com' and type eq 'RunAntiVirusScan' +HTTP GET https://api.securitycenter.microsoft.com/api/machineactions?$filter=requestor eq 'Analyst@contoso.com' and type eq 'RunAntiVirusScan' ``` **Response:** ```json json{ - "@odata.context": "https://api.securitycenter.windows.com/api/$metadata#MachineActions", + "@odata.context": "https://api.securitycenter.microsoft.com/api/$metadata#MachineActions", "value": [ { "id": "2e9da30d-27f6-4208-81f2-9cd3d67893ba", @@ -355,7 +359,7 @@ json{ Get the count of open alerts for a specific device: ```http -HTTP GET https://api.securitycenter.windows.com/api/machines/123321d0c675eaa415b8e5f383c6388bff446c62/alerts/$count?$filter=status ne 'Resolved' +HTTP GET https://api.securitycenter.microsoft.com/api/machines/123321d0c675eaa415b8e5f383c6388bff446c62/alerts/$count?$filter=status ne 'Resolved' ``` **Response:** diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md index ce6887fc58..ddf250a58f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md @@ -26,6 +26,8 @@ ms.topic: article - Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + ## Limitations 1. You can only run a query on data from the last 30 days. 2. The results will include a maximum of 100,000 rows. @@ -50,7 +52,7 @@ Delegated (work or school account) | AdvancedQuery.Read | 'Run advanced queries' ## HTTP request ``` -POST https://api.securitycenter.windows.com/api/advancedqueries/run +POST https://api.securitycenter.microsoft.com/api/advancedqueries/run ``` ## Request headers @@ -81,7 +83,7 @@ Here is an example of the request. ``` -POST https://api.securitycenter.windows.com/api/advancedqueries/run +POST https://api.securitycenter.microsoft.com/api/advancedqueries/run Content-type: application/json { "Query":"DeviceProcessEvents diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md index cc1e69bc35..ea7771fd0a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md @@ -24,6 +24,8 @@ ms.topic: article **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + Run advanced queries using PowerShell, see [Advanced Hunting API](run-advanced-query-api.md). @@ -51,8 +53,8 @@ $tenantId = '00000000-0000-0000-0000-000000000000' # Paste your own tenant ID he $appId = '11111111-1111-1111-1111-111111111111' # Paste your own app ID here $appSecret = '22222222-2222-2222-2222-222222222222' # Paste your own app secret here -$resourceAppIdUri = 'https://api.securitycenter.windows.com' -$oAuthUri = "https://login.windows.net/$TenantId/oauth2/token" +$resourceAppIdUri = 'https://api.securitycenter.microsoft.com' +$oAuthUri = "https://login.microsoftonline.com/$TenantId/oauth2/token" $body = [Ordered] @{ resource = "$resourceAppIdUri" client_id = "$appId" @@ -72,10 +74,12 @@ where Run the following query: +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ``` $query = 'RegistryEvents | limit 10' # Paste your own query here -$url = "https://api.securitycenter.windows.com/api/advancedqueries/run" +$url = "https://api.securitycenter.microsoft.com/api/advancedqueries/run" $headers = @{ 'Content-Type' = 'application/json' Accept = 'application/json' diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md index c7d5c9e145..ed35434cfc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md @@ -26,6 +26,8 @@ ms.topic: article - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +[!include[Microsoft Defender for Endpoint API URIs for US Government](../../includes/microsoft-defender-api-usgov.md)] + Run advanced queries using Python, see [Advanced Hunting API](run-advanced-query-api.md). In this section, we share Python samples to retrieve a token and use it to run a query. @@ -36,6 +38,8 @@ In this section, we share Python samples to retrieve a token and use it to run a - Run the following commands: +[!include[Improve request performance](../../includes/improve-request-performance.md)] + ``` import json @@ -46,9 +50,9 @@ tenantId = '00000000-0000-0000-0000-000000000000' # Paste your own tenant ID her appId = '11111111-1111-1111-1111-111111111111' # Paste your own app ID here appSecret = '22222222-2222-2222-2222-222222222222' # Paste your own app secret here -url = "https://login.windows.net/%s/oauth2/token" % (tenantId) +url = "https://login.microsoftonline.com/%s/oauth2/token" % (tenantId) -resourceAppIdUri = 'https://api.securitycenter.windows.com' +resourceAppIdUri = 'https://api.securitycenter.microsoft.com' body = { 'resource' : resourceAppIdUri, @@ -78,7 +82,7 @@ where ``` query = 'RegistryEvents | limit 10' # Paste your own query here -url = "https://api.securitycenter.windows.com/api/advancedqueries/run" +url = "https://api.securitycenter.microsoft.com/api/advancedqueries/run" headers = { 'Content-Type' : 'application/json', 'Accept' : 'application/json', From 8dcc5e7537ad168e43797de95dc95dc8fc2f9378 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 18 Dec 2020 15:18:24 -0800 Subject: [PATCH 332/958] fix link --- windows/security/includes/microsoft-defender-api-usgov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/includes/microsoft-defender-api-usgov.md b/windows/security/includes/microsoft-defender-api-usgov.md index 6f525901c4..ff93c71ecd 100644 --- a/windows/security/includes/microsoft-defender-api-usgov.md +++ b/windows/security/includes/microsoft-defender-api-usgov.md @@ -17,4 +17,4 @@ ms.topic: article --- >[!NOTE] ->If you are a US Government customer, please use the URIs listed in [here](gov.md#api). +>If you are a US Government customer, please use the URIs listed in [here](../threat-protection/microsoft-defender-atp/gov.md#api). From e2f3abd0d5bd9277f9c2d9afaa27da70b2f7ee6a Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 18 Dec 2020 15:36:45 -0800 Subject: [PATCH 333/958] fix formatting --- .../security/threat-protection/microsoft-defender-atp/gov.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index ddff7ba6a2..1c89d002cb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -109,7 +109,8 @@ Defender for Endpoint GCC High specific | ```us4-v20.events.data.microsoft.com`` ## API -Login endpoint: ```https://login.microsoftonline.us``` -Microsoft Defender for Endpoint API endpoint: ```https://api-gov.securitycenter.microsoft.us``` +- Login endpoint: ```https://login.microsoftonline.us``` + +- Microsoft Defender for Endpoint API endpoint: ```https://api-gov.securitycenter.microsoft.us``` From c43cdca4ea258efbfc26a9bc7807b0b43c8c5766 Mon Sep 17 00:00:00 2001 From: Peter Smith Date: Fri, 18 Dec 2020 16:22:38 -0800 Subject: [PATCH 334/958] Move "lockdown" security info to the bottom Per discussion with the VPN field team, lockdown is actually often a poor choice for customer -- it's more restrictive than many customer expect, leading to wasted time. It's still supported, but it should be at the bottom of the security list so that customer aren't instantly drawn to it. --- .../vpn/vpn-security-features.md | 35 ++++++++++--------- 1 file changed, 18 insertions(+), 17 deletions(-) diff --git a/windows/security/identity-protection/vpn/vpn-security-features.md b/windows/security/identity-protection/vpn/vpn-security-features.md index d8f4768540..19a298bef8 100644 --- a/windows/security/identity-protection/vpn/vpn-security-features.md +++ b/windows/security/identity-protection/vpn/vpn-security-features.md @@ -20,23 +20,6 @@ ms.author: dansimp - Windows 10 Mobile -## LockDown VPN - -A VPN profile configured with LockDown secures the device to only allow network traffic over the VPN interface. It has the following features: - -- The system attempts to keep the VPN connected at all times. -- The user cannot disconnect the VPN connection. -- The user cannot delete or modify the VPN profile. -- The VPN LockDown profile uses forced tunnel connection. -- If the VPN connection is not available, outbound network traffic is blocked. -- Only one VPN LockDown profile is allowed on a device. - -> [!NOTE] -> For built-in VPN, LockDown VPN is only available for the Internet Key Exchange version 2 (IKEv2) connection type. - -Deploy this feature with caution, as the resultant connection will not be able to send or receive any network traffic without the VPN being connected. - - ## Windows Information Protection (WIP) integration with VPN Windows Information Protection provides capabilities allowing the separation and protection of enterprise data against disclosure across both company and personally owned devices, without requiring additional changes to the environments or the apps themselves. Additionally, when used with Rights Management Services (RMS), WIP can help to protect enterprise data locally. @@ -78,6 +61,24 @@ The following image shows the interface to configure traffic rules in a VPN Prof ![Add a traffic rule](images/vpn-traffic-rules.png) + +## LockDown VPN + +A VPN profile configured with LockDown secures the device to only allow network traffic over the VPN interface. It has the following features: + +- The system attempts to keep the VPN connected at all times. +- The user cannot disconnect the VPN connection. +- The user cannot delete or modify the VPN profile. +- The VPN LockDown profile uses forced tunnel connection. +- If the VPN connection is not available, outbound network traffic is blocked. +- Only one VPN LockDown profile is allowed on a device. + +> [!NOTE] +> For built-in VPN, LockDown VPN is only available for the Internet Key Exchange version 2 (IKEv2) connection type. + +Deploy this feature with caution, as the resultant connection will not be able to send or receive any network traffic without the VPN being connected. + + ## Related topics - [VPN technical guide](vpn-guide.md) From 29512c98818c4f894929e9ff7654ec3bc57146fd Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Sat, 19 Dec 2020 17:21:30 -0800 Subject: [PATCH 335/958] solorigate link --- windows/security/includes/microsoft-defender.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/includes/microsoft-defender.md b/windows/security/includes/microsoft-defender.md index 46153786b9..cdac55a91c 100644 --- a/windows/security/includes/microsoft-defender.md +++ b/windows/security/includes/microsoft-defender.md @@ -11,4 +11,4 @@ ms.topic: include --- > [!IMPORTANT] -> Welcome to **Microsoft Defender for Endpoint**, the new name for **Microsoft Defender Advanced Threat Protection**. Read more about this and other updates [here](https://www.microsoft.com/security/blog/?p=91813). We'll be updating names in products and in the docs in the near future. +> [Learn how Microsoft is helping protect customers from Solorigate](https://aka.ms/solorigate) From e4ac546ec1c9ce15567e482517477b2bfef93c8a Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Sat, 19 Dec 2020 17:36:10 -0800 Subject: [PATCH 336/958] little more info in the include --- windows/security/includes/microsoft-defender.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/security/includes/microsoft-defender.md b/windows/security/includes/microsoft-defender.md index cdac55a91c..208baaefb5 100644 --- a/windows/security/includes/microsoft-defender.md +++ b/windows/security/includes/microsoft-defender.md @@ -1,14 +1,14 @@ --- -title: Microsoft Defender rebrand guidance -description: A note in regard to the Microsoft Defender rebrand. +title: Microsoft Defender important guidance +description: A note in regard to important Microsoft Defender guidance. ms.date: 09/21/2020 ms.reviewer: manager: dansimp -ms.author: daniha -author: danihalfin +ms.author: dansimp +author: dansimp ms.prod: w10 ms.topic: include --- > [!IMPORTANT] -> [Learn how Microsoft is helping protect customers from Solorigate](https://aka.ms/solorigate) +> [Learn how Microsoft is helping to protect customers from Solorigate, a recent sophisticated attack](https://aka.ms/solorigate) From 60657e29b9ff583f429932dc451065288d13172c Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Sat, 19 Dec 2020 17:42:03 -0800 Subject: [PATCH 337/958] Update microsoft-defender.md --- windows/security/includes/microsoft-defender.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/includes/microsoft-defender.md b/windows/security/includes/microsoft-defender.md index 208baaefb5..27394df0ea 100644 --- a/windows/security/includes/microsoft-defender.md +++ b/windows/security/includes/microsoft-defender.md @@ -11,4 +11,4 @@ ms.topic: include --- > [!IMPORTANT] -> [Learn how Microsoft is helping to protect customers from Solorigate, a recent sophisticated attack](https://aka.ms/solorigate) +> [Learn how Microsoft is helping to protect customers from Solorigate, a recent sophisticated attack](https://aka.ms/solorigate). From 26f0d9f08c254cbbadf82372de1931ad52e3242b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Sun, 20 Dec 2020 06:42:21 -0800 Subject: [PATCH 338/958] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 0a96956345..0010e0b826 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -93,8 +93,6 @@ If you uninstall the other product, and choose to use Microsoft Defender Antivir > [!WARNING] > You should not attempt to disable, stop, or modify any of the associated services used by Microsoft Defender Antivirus, Microsoft Defender for Endpoint, or the Windows Security app. This includes the *wscsvc*, *SecurityHealthService*, *MsSense*, *Sense*, *WinDefend*, or *MsMpEng* services and process. Manually modifying these services can cause severe instability on your endpoints and open your network to infections and attacks. It can also cause problems when using third-party antivirus apps and how their information is displayed in the [Windows Security app](microsoft-defender-security-center-antivirus.md). -> [!IMPORTANT] -> If you are using [Microsoft Endpoint DLP](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-overview), Microsoft Defender Antivirus real-time protection is enabled, even when Microsoft Defender Antivirus is running in passive mode. Microsoft Defender Antivirus won't conflict with third-party antivirus solutions installed on the endpoint. Endpoint DLP depends on real-time protection to operate. ## See also From 18c23e5cc0628134ffe21dc9c9ae3faaefe0d684 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Sun, 20 Dec 2020 06:42:36 -0800 Subject: [PATCH 339/958] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 0010e0b826..083cbc45be 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -13,7 +13,7 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: pahuijbr manager: dansimp -ms.date: 12/17/2020 +ms.date: 12/20/2020 --- # Microsoft Defender Antivirus compatibility From d8aee78ad6a711b7f5e55740d446a4bfe070a308 Mon Sep 17 00:00:00 2001 From: Lovina Saldanha Date: Mon, 21 Dec 2020 15:25:26 +0530 Subject: [PATCH 340/958] updated-4715491 updated product name Microsoft Endpoint Manager --- ...ie11-delivery-through-automatic-updates.md | 2 +- .../windows/chromebook-migration-guide.md | 2 +- .../deploy-windows-10-in-a-school-district.md | 42 +++++++++---------- ...d-unsigned-app-to-code-integrity-policy.md | 4 +- ...plications-inside-a-virtual-environment.md | 2 +- .../mdm/appv-deploy-and-config.md | 4 +- ...ollment-using-windows-provisioning-tool.md | 2 +- ...dded-8-1-handheld-devices-to-windows-10.md | 6 +-- .../cortana-at-work/cortana-at-work-o365.md | 2 +- .../cortana-at-work-voice-commands.md | 2 +- .../provisioning-packages.md | 2 +- ...ith-system-center-configuration-manager.md | 4 +- .../ue-v/uev-deploy-required-features.md | 2 +- .../ue-v/uev-prepare-for-deployment.md | 2 +- windows/deployment/deploy-whats-new.md | 2 +- ...-windows-10-using-configuration-manager.md | 4 +- ...-10-using-pxe-and-configuration-manager.md | 4 +- ...f-windows-10-with-configuration-manager.md | 2 +- ...to-windows-10-with-configuraton-manager.md | 4 +- windows/deployment/deploy.md | 2 +- windows/deployment/mbr-to-gpt.md | 2 +- ...are-your-organization-for-windows-to-go.md | 2 +- .../windows-10-deployment-posters.md | 2 +- .../windows-10-deployment-scenarios.md | 2 +- .../windows-10-poc-sc-config-mgr.md | 10 ++--- windows/deployment/windows-10-poc.md | 2 +- 26 files changed, 58 insertions(+), 58 deletions(-) diff --git a/browsers/internet-explorer/ie11-deploy-guide/ie11-delivery-through-automatic-updates.md b/browsers/internet-explorer/ie11-deploy-guide/ie11-delivery-through-automatic-updates.md index edcb50cb9e..bd0befaee9 100644 --- a/browsers/internet-explorer/ie11-deploy-guide/ie11-delivery-through-automatic-updates.md +++ b/browsers/internet-explorer/ie11-deploy-guide/ie11-delivery-through-automatic-updates.md @@ -68,7 +68,7 @@ Additional information on Internet Explorer 11, including a Readiness Toolkit, t ## Availability of Internet Explorer 11 -Automatic Updates will start to distribute Internet Explorer 11 shortly after the final release of the product and will distribute it through the Microsoft Endpoint Configuration Manager and WSUS. +Automatic Updates will start to distribute Internet Explorer 11 shortly after the final release of the product and will distribute it through the Microsoft Endpoint Manager and WSUS. ## Prevent automatic installation of Internet Explorer 11 with WSUS diff --git a/education/windows/chromebook-migration-guide.md b/education/windows/chromebook-migration-guide.md index cbbdb3502b..3cd18bebdd 100644 --- a/education/windows/chromebook-migration-guide.md +++ b/education/windows/chromebook-migration-guide.md @@ -457,7 +457,7 @@ Table 5. Select on-premises AD DS, Azure AD, or hybrid     - + diff --git a/education/windows/deploy-windows-10-in-a-school-district.md b/education/windows/deploy-windows-10-in-a-school-district.md index 2d08a4c82d..7dd7bebd5a 100644 --- a/education/windows/deploy-windows-10-in-a-school-district.md +++ b/education/windows/deploy-windows-10-in-a-school-district.md @@ -202,7 +202,7 @@ Before you select the deployment and management methods, you need to review the |Scenario feature |Cloud-centric|On-premises and cloud| |---|---|---| |Identity management | Azure AD (stand-alone or integrated with on-premises AD DS) | AD DS integrated with Azure AD | -|Windows 10 deployment | MDT only | Microsoft Endpoint Configuration Manager with MDT | +|Windows 10 deployment | MDT only | Microsoft Endpoint Manager with MDT | |Configuration setting management | Intune | Group Policy

    Intune| |App and update management | Intune |Microsoft Endpoint Configuration Manager

    Intune| @@ -216,14 +216,14 @@ These scenarios assume the need to support: Some constraints exist in these scenarios. As you select the deployment and management methods for your device, keep the following constraints in mind: * You can use Group Policy or Intune to manage configuration settings on a device but not both. -* You can use Microsoft Endpoint Configuration Manager or Intune to manage apps and updates on a device but not both. +* You can use Microsoft Endpoint Manager or Intune to manage apps and updates on a device but not both. * You cannot manage multiple users on a device with Intune if the device is AD DS domain joined. Use the cloud-centric scenario and on-premises and cloud scenario as a guide for your district. You may need to customize these scenarios, however, based on your district. As you go through the [Select the deployment methods](#select-the-deployment-methods), [Select the configuration setting management methods](#select-the-configuration-setting-management-methods), and the [Select the app and update management products](#select-the-app-and-update-management-products) sections, remember these scenarios and use them as the basis for your district. ### Select the deployment methods -To deploy Windows 10 and your apps, you can use MDT by itself or Microsoft Endpoint Configuration Manager and MDT together. For a district, there are a few ways to deploy Windows 10 to devices. Table 2 lists the methods that this guide describes and recommends. Use this information to determine which combination of deployment methods is right for your institution. +To deploy Windows 10 and your apps, you can use MDT by itself or Microsoft Endpoint Manager and MDT together. For a district, there are a few ways to deploy Windows 10 to devices. Table 2 lists the methods that this guide describes and recommends. Use this information to determine which combination of deployment methods is right for your institution.
    X
    Use Microsoft Endpoint Configuration Manager for managementUse Microsoft Endpoint Manager for management X X
    @@ -291,7 +291,7 @@ Select this method when you:

    The disadvantages of this method are that it:

      -
    • Carries an additional cost for Microsoft Endpoint Configuration Manager server licenses (if the institution does not have Configuration Manager already).
      • +
    • Carries an additional cost for Microsoft Endpoint Manager server licenses (if the institution does not have Configuration Manager already).
    • Can deploy Windows 10 only to domain-joined (institution-owned devices).
    • Requires an AD DS infrastructure (if the institution does not have AD DS already).
    @@ -307,7 +307,7 @@ Record the deployment methods you selected in Table 3. |Selection | Deployment method| |--------- | -----------------| | |MDT by itself | -| |Microsoft Endpoint Configuration Manager and MDT| +| |Microsoft Endpoint Manager and MDT| *Table 3. Deployment methods selected* @@ -483,12 +483,12 @@ Select this method when you:

     - +
    Microsoft Endpoint Configuration Manager and Intune (hybrid)Microsoft Endpoint Manager and Intune (hybrid)

    Configuration Manager and Intune together extend Configuration Manager from an on-premises management system for domain-joined devices to a solution that can manage devices regardless of their location and connectivity options. This hybrid option provides the benefits of both Configuration Manager and Intune.

    Configuration Manager and Intune in the hybrid configuration allow you to support application management throughout the entire application life cycle. You can deploy, upgrade, manage multiple versions, and retire applications by using Configuration Manager, and you can manage Windows desktop and Microsoft Store applications for both institution-owned and personal devices.

    Select this method when you:

    Administrative Templates\Microsoft Edge\SmartScreen settings\Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads (Microsoft Edge version 77 or later) Enable. Stops employees from ignoring warning messages and continuing to download potentially malicious files. From b21b9769f4a9cd7669bb0996ac3a0da13debac66 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 27 Oct 2020 21:26:13 +0500 Subject: [PATCH 014/958] Update windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 48061674ba..583a595d6c 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -68,7 +68,7 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput #### Create a PIN Reset Device configuration profile using Microsoft Intune -1. Sign-in to [Enpoint Manager Admin Center](https://endpoint.microsoft.com/) using a Global administrator account. +1. Sign-in to [Enpoint Manager admin center](https://endpoint.microsoft.com/) using a Global administrator account. 2. Click **Endpoint Security**-> **Account Portection**-> **Properties**. 3. Set **Enable PIN recovery** to **Yes**. From d38797afa76784287a87789754c4c4cafab7bc75 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 27 Oct 2020 21:26:22 +0500 Subject: [PATCH 015/958] Update windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 583a595d6c..fd3f660e77 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -69,7 +69,7 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput #### Create a PIN Reset Device configuration profile using Microsoft Intune 1. Sign-in to [Enpoint Manager admin center](https://endpoint.microsoft.com/) using a Global administrator account. -2. Click **Endpoint Security**-> **Account Portection**-> **Properties**. +2. Click **Endpoint Security**-> **Account Protection**-> **Properties**. 3. Set **Enable PIN recovery** to **Yes**. #### Assign the PIN Reset Device configuration profile using Microsoft Intune From f4e02ed7264059f2bf0d3016946d7c6ab7108980 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 27 Oct 2020 21:38:08 +0500 Subject: [PATCH 016/958] update as suggested by mapalko update as suggested by mapalko --- .../hello-for-business/hello-feature-pin-reset.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index fd3f660e77..2cc85e4cca 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -72,6 +72,12 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput 2. Click **Endpoint Security**-> **Account Protection**-> **Properties**. 3. Set **Enable PIN recovery** to **Yes**. +> [!Note] +> You can also setup PIN recovery using configuration profiles. +> 1. Sign-in to Endpoint Manager +> 2. Click **Devices** -> **Configuration Profiles** -> Create new profile or edit existing an existing profile using the Identity Protection profile type +> 3. Set **Enable PIN recovery** to **Yes** + #### Assign the PIN Reset Device configuration profile using Microsoft Intune 1. Sign in to the [Azure Portal](https://portal.azure.com) using a Global administrator account. From b69035ebc4644ab790b7a6d124c2cf99704fe61f Mon Sep 17 00:00:00 2001 From: ShannonLeavitt Date: Tue, 27 Oct 2020 13:58:45 -0600 Subject: [PATCH 017/958] edit pass: enable-network-unlock --- .../bitlocker-how-to-enable-network-unlock.md | 44 ++++++++----------- 1 file changed, 18 insertions(+), 26 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 5c7b1190b1..7ba0b08f43 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -1,5 +1,5 @@ --- -title: BitLocker How to enable Network Unlock (Windows 10) +title: BitLocker - How to enable Network Unlock (Windows 10) description: This topic for the IT professional describes how BitLocker Network Unlock works and how to configure it. ms.assetid: be45bc28-47db-4931-bfec-3c348151d2e9 ms.reviewer: @@ -23,45 +23,37 @@ ms.custom: bitlocker **Applies to** - Windows 10 -This topic for the IT professional describes how BitLocker Network Unlock works and how to configure it. +This article for IT professionals describes how BitLocker Network Unlock works and how to configure it. -Network Unlock was introduced in Windows 8 and Windows Server 2012 as a BitLocker protector option for operating system volumes. Network Unlock enables easier management for BitLocker enabled desktops and servers in a domain environment by providing automatic unlock of operating system volumes at system reboot when connected to a wired corporate network. This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware. -Without Network Unlock, operating system volumes protected by TPM+PIN protectors require a PIN to be entered when a computer reboots or resumes from hibernation (for example, by Wake on LAN). This can make it difficult to enterprises to roll out software patches to unattended desktops and remotely administered servers. +Network Unlock was introduced in Windows 8 and Windows Server 2012 as a BitLocker protector option for operating system volumes. Network Unlock helps you manage BitLocker-enabled desktops and servers in a domain environment by automatically unlocking operating system volumes when the system is rebooted and is connected to a wired corporate network. This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware. -Network Unlock allows BitLocker-enabled systems with TPM+PIN and that meet the hardware requirements to boot into Windows without user intervention. Network Unlock works in a similar fashion to the TPM+StartupKey at boot. Rather than needing to read the StartupKey from USB media, however, the key for Network Unlock is composed from a key stored in the TPM and an encrypted network key that is sent to the server, decrypted and returned to the client in a secure session. +Without Network Unlock, operating system volumes that are protected by TPM+PIN protectors require a PIN when a computer reboots or resumes after hibernation (for example, by Wake on LAN). For enterprises, this setup can make software patches difficult to roll out to unattended desktops and remotely administered servers. -This topic contains: - -- [Network Unlock core requirements](#bkmk-nunlockcorereqs) -- [Network Unlock sequence](#bkmk-networkunlockseq) -- [Configure Network Unlock](#bkmk-configuringnetworkunlock) -- [Create the certificate template for Network Unlock](#bkmk-createcerttmpl) -- [Turning off Network Unlock](#bkmk-turnoffnetworkunlock) -- [Update Network Unlock certificates](#bkmk-updatecerts) -- [Troubleshoot Network Unlock](#bkmk-troubleshoot) -- [Configure Network Unlock on unsupported systems](#bkmk-unsupportedsystems) +Network Unlock allows BitLocker-enabled systems that use TPM+PIN and that meet the hardware requirements to boot into Windows without user intervention. Network Unlock works like the TPM+StartupKey at boot. But the StartupKey doesn't need to be read from USB media. Instead, the key for Network Unlock is composed from a key that's stored in the TPM and an encrypted network key that's sent to the server. It's decrypted and returned to the client in a secure session. ## Network Unlock core requirements -Network Unlock must meet mandatory hardware and software requirements before the feature can automatically unlock domain joined systems. These requirements include: +Network Unlock must meet mandatory hardware and software requirements before the feature can automatically unlock domain-joined systems: - You must be running at least Windows 8 or Windows Server 2012. -- Any supported operating system with UEFI DHCP drivers can be Network Unlock clients. +- Any supported operating system that uses UEFI DHCP drivers can be Network Unlock clients. - Network Unlock clients must have a TPM chip and at least one TPM protector. -- A server running the Windows Deployment Services (WDS) role on any supported server operating system. -- BitLocker Network Unlock optional feature installed on any supported server operating system. -- A DHCP server, separate from the WDS server. -- Properly configured public/private key pairing. -- Network Unlock Group Policy settings configured. +- You must have a server running the Windows Deployment Services (WDS) role on any supported server operating system. +- The BitLocker Network Unlock optional feature can be installed on any supported server operating system. +- You must have a DHCP server, separate from the WDS server. +- You must have a properly configured public/private key pairing. +- Network Unlock Group Policy settings must be configured. -The network stack must be enabled to use the Network Unlock feature. Equipment manufacturers deliver their products in various states and with different BIOS menus, so you need to confirm that the network stack has been enabled in the BIOS before starting the computer. +The network stack must be enabled to use the Network Unlock feature. Equipment manufacturers deliver their products in various states and with different BIOS menus, so you need to confirm that the network stack has been enabled in the BIOS before you start the computer. > [!NOTE] -> To properly support DHCP within UEFI, the UEFI-based system should be in native mode without a compatibility support module (CSM) enabled. +> To properly support DHCP within UEFI, the UEFI-based system should be in native mode and shouldn't have a compatibility support module (CSM) enabled. -For Network Unlock to work reliably on computers running Windows 8 and later, the first network adapter on the computer, usually the onboard adapter, must be configured to support DHCP and used for Network Unlock. This is especially worth noting when you have multiple adapters, and you wish to configure one without DHCP, such as for a lights-out management protocol. This configuration is necessary because Network Unlock will stop enumerating adapters when it reaches one with a DHCP port failure for any reason. Thus, if the first enumerated adapter does not support DHCP, is not plugged into the network, or fails to report availability of the DHCP port for any reason, then Network Unlock will fail. +On computers running Windows 8 and later, the first network adapter on the computer, usually the onboard adapter, must be configured to support DHCP. This adapter must be used for Network Unlock. + +Use this configuration especially when you have multiple adapters and you want to configure one without DHCP, such as for a lights-out management protocol. The configuration is necessary because Network Unlock stops enumerating adapters when it reaches an adapter that has a DHCP port that has failed for any reason. So if the first enumerated adapter doesn't support DHCP, isn't plugged into the network, or fails to report availability of the DHCP port for any reason, then Network Unlock will fail. -The Network Unlock server component installs on supported versions of Windows Server 2012 and later as a Windows feature using Server Manager or Windows PowerShell cmdlets. The feature name is BitLocker Network Unlock in Server Manager and BitLocker-NetworkUnlock in Windows PowerShell. This feature is a core requirement. +On supported versions of Windows Server 2012 and later, the Network Unlock server component installs as a Windows feature. It uses Server Manager or Windows PowerShell cmdlets. In Server Manager, the feature name is BitLocker Network Unlock. In Windows PowerShell, the feature name is BitLocker-NetworkUnlock. This feature is a core requirement. Network Unlock requires Windows Deployment Services (WDS) in the environment where the feature will be utilized. Configuration of the WDS installation is not required; however, the WDS service needs to be running on the server. From 5c9fae720f702d3253bc77c2f786571e0ed47a31 Mon Sep 17 00:00:00 2001 From: ShannonLeavitt Date: Tue, 27 Oct 2020 17:55:11 -0600 Subject: [PATCH 018/958] more edits --- .../bitlocker-how-to-enable-network-unlock.md | 174 +++++++++--------- 1 file changed, 85 insertions(+), 89 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 7ba0b08f43..a514c327a4 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -55,138 +55,134 @@ Use this configuration especially when you have multiple adapters and you want t On supported versions of Windows Server 2012 and later, the Network Unlock server component installs as a Windows feature. It uses Server Manager or Windows PowerShell cmdlets. In Server Manager, the feature name is BitLocker Network Unlock. In Windows PowerShell, the feature name is BitLocker-NetworkUnlock. This feature is a core requirement. -Network Unlock requires Windows Deployment Services (WDS) in the environment where the feature will be utilized. Configuration of the WDS installation is not required; however, the WDS service needs to be running on the server. +Network Unlock requires WDS in the environment where the feature will be used. Configuration of the WDS installation is not required. But the WDS service needs to be running on the server. -The network key is stored on the system drive along with an AES 256 session key, and encrypted with the 2048-bit RSA public key of the unlock server's certificate. The network key is decrypted with the help of a provider on a supported version of Windows Server running WDS, and returned encrypted with its corresponding session key. +The network key is stored on the system drive along with an AES 256 session key. It's encrypted with the 2048-bit RSA public key of the unlock server's certificate. The network key is decrypted with the help of a provider on a supported version of Windows Server that's running WDS. It's returned encrypted with its corresponding session key. ## Network Unlock sequence -The unlock sequence starts on the client side, when the Windows boot manager detects the existence of Network Unlock protector. It leverages the DHCP driver in UEFI to obtain an IP address for IPv4 and then broadcasts a vendor-specific DHCP request that contains the network key and a session key for the reply, all encrypted by the server's Network Unlock certificate, as described above. The Network Unlock provider on the supported WDS server recognizes the vendor-specific request, decrypts it with the RSA private key, and returns the network key encrypted with the session key via its own vendor-specific DHCP reply. +The unlock sequence starts on the client side, when the Windows boot manager detects the existence of the Network Unlock protector. It uses the DHCP driver in UEFI to get an IP address for IPv4. Then it broadcasts a vendor-specific DHCP request that contains the network key and a session key for the reply, all encrypted by the server's Network Unlock certificate, as described earlier. The Network Unlock provider on the supported WDS server recognizes the vendor-specific request, decrypts it with the RSA private key, and returns the network key encrypted with the session key via its own vendor-specific DHCP reply. -On the server side, the WDS server role has an optional plugin component, like a PXE provider, which is what handles the incoming Network Unlock requests. The provider can also be configured with subnet restrictions, which would require that the IP address provided by the client in the Network Unlock request belong to a permitted subnet in order to release the network key to the client. In instances where the Network Unlock provider is unavailable, BitLocker fails over to the next available protector to unlock the drive. In a typical configuration, this means the standard TPM+PIN unlock screen is presented to unlock the drive. +On the server side, the WDS server role has an optional plug-in component, like a PXE (preboot execution environment) provider, which is what handles the incoming Network Unlock requests. The provider can also be configured with subnet restrictions. These restrictions would require that the IP address provided by the client in the Network Unlock request belong to a permitted subnet in order to release the network key to the client. If the Network Unlock provider is unavailable, then BitLocker fails over to the next available protector to unlock the drive. So in a typical configuration, the standard TPM+PIN unlock screen is presented to unlock the drive. -The server side configuration to enable Network Unlock also requires provisioning a 2048-bit RSA public/private key pair in the form of an X.509 certificate, and for the public key certificate to be distributed to the clients. This certificate must be managed and deployed through the Group Policy editor directly on a domain controller with at least a Domain Functional Level of Windows Server 2012. This certificate is the public key that encrypts the intermediate network key (which is one of the two secrets required to unlock the drive; the other secret is stored in the TPM). +The server-side configuration to enable Network Unlock also requires provisioning a 2048-bit RSA public/private key pair in the form of an X.509 certificate. The configuration also requires the public key certificate to be distributed to the clients. This certificate must be managed and deployed through the Group Policy editor directly on a domain controller that has a domain functional level of at least Windows Server 2012. This certificate is the public key that encrypts the intermediate network key. The intermediate network key is one of the two secrets required to unlock the drive; the other secret is stored in the TPM. -![bitlocker network unlock sequence](images/bitlockernetworkunlocksequence.png) +![Diagram showing the BitLocker network unlock sequence.](images/bitlockernetworkunlocksequence.png) -**Phases in the Network Unlock process** +The Network Unlock process follows these phases: -1. The Windows boot manager detects that a Network Unlock protector exists in the BitLocker configuration. -2. The client computer uses its DHCP driver in the UEFI to obtain a valid IPv4 IP address. +1. The Windows boot manager detects a Network Unlock protector in the BitLocker configuration. +2. The client computer uses its DHCP driver in the UEFI to get a valid IPv4 IP address. 3. The client computer broadcasts a vendor-specific DHCP request that contains: - 1. A Network Key (a 256-bit intermediate key) encrypted using the 2048-bit RSA Public Key of the Network Unlock certificate from the WDS server. - 2. An AES-256 session key for the reply. + - A network key (a 256-bit intermediate key) that's encrypted by the 2048-bit RSA public key of the Network Unlock certificate from the WDS server. + - An AES-256 session key for the reply. 4. The Network Unlock provider on the WDS server recognizes the vendor-specific request. -5. The provider decrypts it with the WDS server’s BitLocker Network Unlock certificate RSA private key. -6. The WDS provider then returns the network key encrypted with the session key using its own vendor-specific DHCP reply to the client computer. This forms an intermediate key. -7. The returned intermediate key is then combined with another local 256-bit intermediate key that can only be decrypted by the TPM. +5. The provider decrypts it with the WDS server's BitLocker Network Unlock certificate RSA private key. +6. The WDS provider then returns the network key encrypted with the session key by using its own vendor-specific DHCP reply to the client computer. This key is an intermediate key. +7. The returned intermediate key is then combined with another local 256-bit intermediate key. This key can be decrypted only by the TPM. 8. This combined key is used to create an AES-256 key that unlocks the volume. 9. Windows continues the boot sequence. ## Configure Network Unlock -The following steps allow an administrator to configure Network Unlock in a domain where the Domain Functional Level is at least Windows Server 2012. +The following steps allow an administrator to configure Network Unlock in a domain where the domain functional level is at least Windows Server 2012. ### Install the WDS Server role -The BitLocker Network Unlock feature will install the WDS role if it is not already installed. If you want to install it separately before you install BitLocker Network Unlock you can use Server Manager or Windows PowerShell. To install the role using Server Manager, select the **Windows Deployment Services** role in Server Manager. +The BitLocker Network Unlock feature installs the WDS role if it's not already installed. If you want to install it separately before you install BitLocker Network Unlock, use Server Manager or Windows PowerShell. To install the role by using Server Manager, select the **Windows Deployment Services** role in Server Manager. -To install the role using Windows PowerShell, use the following command: +To install the role by using Windows PowerShell, use the following command: ```powershell Install-WindowsFeature WDS-Deployment ``` -You must configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. You can do using the WDS management tool, wdsmgmt.msc, which starts the Windows Deployment Services Configuration Wizard. +Configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. You can do so by using the WDS management tool, `wdsmgmt.msc`. This tool starts the Windows Deployment Services Configuration Wizard. -### Confirm the WDS Service is running +### Confirm the WDS service is running -To confirm the WDS service is running, use the Services Management Console or Windows PowerShell. To confirm the service is running in Services Management Console, open the console using **services.msc** and check the status of the Windows Deployment Services service. +To confirm the WDS service is running, use the Services Management console or Windows PowerShell. To confirm the service is running in the Services Management console, open the console by using `services.msc`. Then check the status of the WDS service. -To confirm the service is running using Windows PowerShell, use the following command: +To confirm the service is running by using Windows PowerShell, use the following command: ```powershell Get-Service WDSServer ``` ### Install the Network Unlock feature -To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature using Server Manager, select the **BitLocker Network Unlock** feature in the Server Manager console. +To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature by using Server Manager, in the Server Manager console, select **BitLocker Network Unlock**. -To install the feature using Windows PowerShell, use the following command: +To install the feature by using Windows PowerShell, use the following command: ```powershell Install-WindowsFeature BitLocker-NetworkUnlock ``` ### Create the certificate template for Network Unlock -A properly configured Active Directory Services Certification Authority can use this certificate template to create and issue Network Unlock certificates. +A properly configured Active Directory Services Certification Authority can use the certificate template to create and issue Network Unlock certificates. -1. Open the Certificates Template snap-in (certtmpl.msc). -2. Locate the User template. Right-click the template name and select **Duplicate Template**. -3. On the **Compatibility** tab, change the **Certification Authority** and **Certificate recipient** fields to Windows Server 2012 and Windows 8 respectively. Ensure the **Show resulting changes** dialog box is selected. -4. Select the **General** tab of the template. The **Template display name** and **Template name** should clearly identify that the template will be used for Network Unlock. Clear the checkbox for the **Publish certificate in Active Directory** option. -5. Select the **Request Handling** tab. Select **Encryption** from the **Purpose** drop down menu. Ensure the **Allow private key to be exported** option is selected. -6. Select the **Cryptography** tab. Set the **Minimum key size** to 2048. (Any Microsoft cryptographic provider that supports RSA can be used for this template, but for simplicity and forward compatibility we recommend using the **Microsoft Software Key Storage Provider**.) -7. Select the **Requests must use one of the following providers** option and clear all options except for the cryptography provider you selected, such as the **Microsoft Software Key Storage Provider**. -8. Select the **Subject Name** tab. Select **Supply in the request**. Select **OK** if the certificate templates pop-up dialog appears. -9. Select the **Issuance Requirements** tab. Select both **CA certificate manager approval** and **Valid existing certificate** options. -10. Select the **Extensions** tab. Select **Application Policies** and choose **Edit…**. -11. In the **Edit Application Policies Extension** options dialog box, select **Client Authentication**, **Encrypting File System**, **and Secure Email** and choose **Remove**. -12. On the **Edit Application Policies Extension** dialog box, select **Add**. -13. On the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box enter the following information in the space provided and then click **OK** to create the BitLocker Network Unlock application policy: +1. Open the certificate template snap-in (`certtmpl.msc`). +2. Locate the user template. Right-click the template name and then select **Duplicate Template**. +3. On the **Compatibility** tab, change the **Certification Authority** and **Certificate recipient** fields to Windows Server 2012 and Windows 8, respectively. Ensure the **Show resulting changes** dialog box is selected. +4. Select the **General** tab of the template. The **Template display name** and **Template name** should clearly identify that the template will be used for Network Unlock. Clear the check box for **Publish certificate in Active Directory**. +5. Select the **Request Handling** tab. In the **Purpose** drop-down menu, select **Encryption**. Ensure the **Allow private key to be exported** option is selected. +6. Select the **Cryptography** tab. Set the **Minimum key size** to *2048*. (For this template, you can use any Microsoft cryptographic provider that supports RSA. But for simplicity and forward compatibility, we recommend using **Microsoft Software Key Storage Provider**.) +7. Select **Requests must use one of the following providers**. Then clear all options except for your selected cryptography provider, such as the **Microsoft Software Key Storage Provider**. +8. Select the **Subject Name** tab. Select **Supply in the request**. If the certificate templates dialog box appears, select **OK**. +9. Select the **Issuance Requirements** tab. Then select both **CA certificate manager approval** and **Valid existing certificate**. +10. Select the **Extensions** tab. Then select **Application Policies** > **Edit**. +11. In the **Edit Application Policies Extension** dialog box, select **Client Authentication**, **Encrypting File System**, and **Secure Email**. Then choose **Remove**. +12. In the **Edit Application Policies Extension** dialog box, select **Add**. +13. In the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box, enter the following information in the space provided and then click **OK** to create the BitLocker Network Unlock application policy: - - **Name:** **BitLocker Network Unlock** - - **Object Identifier:** **1.3.6.1.4.1.311.67.1.1** + - **Name**: **BitLocker Network Unlock** + - **Object Identifier**: **1.3.6.1.4.1.311.67.1.1** -14. Select the newly created **BitLocker Network Unlock** application policy and select **OK**. -15. With the **Extensions** tab still open, select the **Edit Key Usage Extension** dialog, select the **Allow key exchange only with key encryption (key encipherment)** option. Select the **Make this extension critical** option. +14. Select the newly created **BitLocker Network Unlock** application policy and then select **OK**. +15. With the **Extensions** tab still open, select **Edit Key Usage Extension**, and then select **Allow key exchange only with key encryption (key encipherment)**. Then select **Make this extension critical**. 16. Select the **Security** tab. Confirm that the **Domain Admins** group has been granted **Enroll** permission. 17. Select **OK** to complete configuration of the template. -To add the Network Unlock template to the Certification Authority, open the Certification Authority snap-in (certsrv.msc). Right-click the **Certificate Templates** item and choose **New, Certificate Template to issue**. Select the previously created BitLocker Network Unlock certificate. +To add the Network Unlock template to the certificate authority, open the certificate authority snap-in (`certsrv.msc`). Right-click **Certificate Templates** and then choose **New, Certificate Template to issue**. Select the previously created BitLocker Network Unlock certificate. -After adding the Network Unlock template to the Certification Authority, this certificate can be used to configure BitLocker Network Unlock. +After you add the Network Unlock template to the certificate authority, you can use this certificate to configure BitLocker Network Unlock. ### Create the Network Unlock certificate -Network Unlock can use imported certificates from an existing PKI infrastructure, or you can use a self-signed certificate. +Network Unlock can use imported certificates from an existing public key infrastructure (PKI), or you can use a self-signed certificate. -To enroll a certificate from an existing certification authority (CA), do the following: +To enroll a certificate from an existing certificate authority: -1. Open Certificate Manager on the WDS server using **certmgr.msc** -2. Under the Certificates - Current User item, right-click Personal -3. Select All Tasks, then **Request New Certificate** -4. Select **Next** when the Certificate Enrollment wizard opens -5. Select Active Directory Enrollment Policy -6. Choose the certificate template created for Network Unlock on the Domain controller and select **Enroll**. When prompted for more information, add the following attribute to the certificate: +1. On the WDS server, open Certificate Manager by using `certmgr.msc`. +2. Under **Certificates - Current User**, right-click **Personal**. +3. Select **All Tasks** > **Request New Certificate**. +4. When the Certificate Enrollment wizard opens, select **Next**. +5. Select **Active Directory Enrollment Policy**. +6. Choose the certificate template that was created for Network Unlock on the domain controller. Then select **Enroll**. +1. When you're prompted for more information, select **Subject Name** and provide a friendly name value. Your friendly name should include information for the domain or organizational unit for the certificate. Here's an example: *BitLocker Network Unlock Certificate for Contoso domain*. +7. Create the certificate. Ensure the certificate appears in the **Personal** folder. +8. Export the public key certificate for Network Unlock: - - Select the **Subject Name** pane and provide a friendly name value. It is suggested that this friendly name include information for the domain or organizational unit for the certificate. For example "BitLocker Network Unlock Certificate for Contoso domain" - -7. Create the certificate. Ensure the certificate appears in the Personal folder. -8. Export the public key certificate for Network Unlock - - 1. Create a .cer file by right-clicking the previously created certificate, choosing **All Tasks**, then **Export**. + 1. Create a *.cer* file by right-clicking the previously created certificate and choosing **All Tasks** > **Export**. 2. Select **No, do not export the private key**. - 3. Select **DER encoded binary X.509** and complete exporting the certificate to a file. - 4. Give the file a name such as BitLocker-NetworkUnlock.cer. - -9. Export the public key with a private key for Network Unlock - - 1. Create a .pfx file by right-clicking the previously created certificate, choosing **All Tasks**, then **Export**. + 3. Select **DER encoded binary X.509** and then finish exporting the certificate to a file. + 4. Give the file a name, such as *BitLocker-NetworkUnlock.cer*. +9. Export the public key with a private key for Network Unlock: + 1. Create a *.pfx* file by right-clicking the previously created certificate. Then choose **All Tasks** > **Export**. 2. Select **Yes, export the private key**. - 3. Complete the wizard to create the .pfx file. + 3. Complete the steps to create the *.pfx* file. To create a self-signed certificate, you can either use the New-SelfSignedCertificate cmdlet in Windows PowerShell or use Certreq. -Windows PowerShell example: +Here's a Windows PowerShell example: ```powershell New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -Subject "CN=BitLocker Network Unlock certificate" -Provider "Microsoft Software Key Storage Provider" -KeyUsage KeyEncipherment -KeyUsageProperty Decrypt,Sign -KeyLength 2048 -HashAlgorithm sha512 -TextExtension @("1.3.6.1.4.1.311.21.10={text}OID=1.3.6.1.4.1.311.67.1.1","2.5.29.37={text}1.3.6.1.4.1.311.67.1.1") ``` -Certreq example: +Here's a Certreq example: -1. Create a text file with an .inf extension. For example, notepad.exe BitLocker-NetworkUnlock.inf. +1. Create a text file with an *.inf* extension. For example, *notepad.exe* *BitLocker-NetworkUnlock.inf*. 2. Add the following contents to the previously created file: ```ini @@ -208,53 +204,53 @@ Certreq example: _continue_ = "1.3.6.1.4.1.311.67.1.1" ``` -3. Open an elevated command prompt and use the certreq tool to create a new certificate using the following command, specifying the full path to the file created previously, along with the file name: +3. Open an elevated command prompt and use the `certreq` tool to create a new certificate. Use the following command, specifying the full path to the file that you created previously. Also specify the file name: ```cmd certreq -new BitLocker-NetworkUnlock.inf BitLocker-NetworkUnlock.cer ``` -4. Verify the previous command properly created the certificate by confirming the .cer file exists. -5. Launch Certificates - Local Machine by running **certlm.msc**. -6. Create a .pfx file by opening the **Certificates – Local Computer\\Personal\\Certificates** path in the navigation pane, right-clicking the previously imported certificate, selecting **All Tasks**, then **Export**. Follow through the wizard to create the .pfx file. +4. Verify the previous command properly created the certificate by confirming the *.cer* file exists. +5. Launch **Certificates - Local Machine** by running `certlm.msc`. +6. Create a *.pfx* file by opening the *Certificates – Local Computer\\Personal\\Certificates* path in the navigation pane. Right-click the previously imported certificate, and then select **All Tasks** > **Export**. Follow through the steps to create the *.pfx* file. ### Deploy the private key and certificate to the WDS server -With the certificate and key created, deploy them to the infrastructure to properly unlock systems. To deploy the certificates, do the following: +Now that the certificate and key are created, deploy them to the infrastructure to properly unlock systems. To deploy the certificates: -1. On the WDS server, open a new MMC and add the certificates snap-in. Select the computer account and local computer when given the options. -2. Right-click the Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock item, choose All Tasks, then **Import**. -3. In the **File to Import** dialog, choose the .pfx file created previously. -4. Enter the password used to create the .pfx and complete the wizard. +1. On the WDS server, open a new Microsoft Management Console (MMC) and then add the certificates snap-in. Select the computer account and local computer when these options appear. +2. Right-click **Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock** and then choose **All Tasks** > **Import**. +3. In the **File to Import** dialog box, choose the *.pfx* file that you created previously. +4. Enter the password that you used to create the *.pfx*, and finish the steps. ### Configure Group Policy settings for Network Unlock -With certificate and key deployed to the WDS server for Network Unlock, the final step is to use Group Policy settings to deploy the public key certificate to computers that you want to be able to unlock using the Network Unlock key. Group Policy settings for BitLocker can be found under **\\Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption** using the Local Group Policy Editor or the Microsoft Management Console. +Now that you've deployed the certificate and key to the WDS server for Network Unlock, the final step is to use Group Policy settings to deploy the public key certificate to computers that you want to be able to unlock by using the Network Unlock key. You can find Group Policy settings for BitLocker in *\\Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption* by using the Local Group Policy Editor or the MMC. -The following steps describe how to enable the Group Policy setting that is a requirement for configuring Network Unlock. +To enable the Group Policy setting that's required to configure Network Unlock: -1. Open Group Policy Management Console (gpmc.msc). -2. Enable the policy **Require additional authentication at startup** and select the **Require startup PIN with TPM** or **Allow startup PIN with TPM** option. +1. Open Group Policy Management Console (`gpmc.msc`). +2. Enable the policy **Require additional authentication at startup**, and then select **Require startup PIN with TPM** or **Allow startup PIN with TPM**. 3. Turn on BitLocker with TPM+PIN protectors on all domain-joined computers. -The following steps describe how to deploy the required Group Policy setting: +To deploy the required Group Policy setting: > [!NOTE] > The Group Policy settings **Allow network unlock at startup** and **Add Network Unlock Certificate** were introduced in Windows Server 2012. -1. Copy the .cer file created for Network Unlock to the domain controller. -2. On the domain controller, launch Group Policy Management Console (gpmc.msc). +1. Copy the *.cer* file that you created for Network Unlock to the domain controller. +2. On the domain controller, launch Group Policy Management Console (`gpmc.msc`). 3. Create a new Group Policy Object or modify an existing object to enable the **Allow network unlock at startup** setting. 4. Deploy the public certificate to clients: - 1. Within Group Policy Management Console, navigate to the following location: **Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate**. - 2. Right-click the folder and choose **Add Network Unlock Certificate**. - 3. Follow the wizard steps and import the .cer file that was copied earlier. + 1. In Group Policy Management Console, go to the following location: *Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate*. + 2. Right-click the folder and then choose **Add Network Unlock Certificate**. + 3. Follow the steps and import the *.cer* file that you copied earlier. -> [!NOTE] -> Only one network unlock certificate can be available at a time. If a new certificate is required, delete the current certificate before deploying a new one. The Network Unlock certificate is located in the **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP** key on the client computer. + > [!NOTE] + > Only one network unlock certificate can be available at a time. If a new certificate is required, delete the current certificate before you deploy a new one. The Network Unlock certificate is located in the *HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP* key on the client computer. -5. Reboot the clients after deploying the group policy. +5. Reboot the clients after you deploy the group policy. > [!NOTE] > The **Network (Certificate Based)** protector will be added only after a reboot with the policy enabled and a valid certificate present in the FVE_NKP store. From bdc1d9f2181376bcba919db43e89c0bbf07dbebb Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Wed, 28 Oct 2020 09:48:50 +0500 Subject: [PATCH 019/958] Update windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 2cc85e4cca..1cd499bdad 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -72,7 +72,7 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput 2. Click **Endpoint Security**-> **Account Protection**-> **Properties**. 3. Set **Enable PIN recovery** to **Yes**. -> [!Note] +> [!NOTE] > You can also setup PIN recovery using configuration profiles. > 1. Sign-in to Endpoint Manager > 2. Click **Devices** -> **Configuration Profiles** -> Create new profile or edit existing an existing profile using the Identity Protection profile type From 31b03fd5601b727879b435264e0051c552293b54 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Wed, 28 Oct 2020 09:49:00 +0500 Subject: [PATCH 020/958] Update windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 1cd499bdad..b500ad52e4 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -74,7 +74,7 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput > [!NOTE] > You can also setup PIN recovery using configuration profiles. -> 1. Sign-in to Endpoint Manager +> 1. Sign in to Endpoint Manager. > 2. Click **Devices** -> **Configuration Profiles** -> Create new profile or edit existing an existing profile using the Identity Protection profile type > 3. Set **Enable PIN recovery** to **Yes** From 5a7704485c853199dce414bdddff2a53e5d8a5fa Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Wed, 28 Oct 2020 09:49:11 +0500 Subject: [PATCH 021/958] Update windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index b500ad52e4..4462339847 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -75,7 +75,7 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput > [!NOTE] > You can also setup PIN recovery using configuration profiles. > 1. Sign in to Endpoint Manager. -> 2. Click **Devices** -> **Configuration Profiles** -> Create new profile or edit existing an existing profile using the Identity Protection profile type +> 2. Click **Devices** -> **Configuration Profiles** -> Create new profile or edit an existing profile using the Identity Protection profile type. > 3. Set **Enable PIN recovery** to **Yes** #### Assign the PIN Reset Device configuration profile using Microsoft Intune From 00ca5116f571228e0f6379a63128c6e31e21692e Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Wed, 28 Oct 2020 09:49:20 +0500 Subject: [PATCH 022/958] Update windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 4462339847..563ff883be 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -76,7 +76,7 @@ You configure Windows 10 to use the Microsoft PIN Reset service using the comput > You can also setup PIN recovery using configuration profiles. > 1. Sign in to Endpoint Manager. > 2. Click **Devices** -> **Configuration Profiles** -> Create new profile or edit an existing profile using the Identity Protection profile type. -> 3. Set **Enable PIN recovery** to **Yes** +> 3. Set **Enable PIN recovery** to **Yes**. #### Assign the PIN Reset Device configuration profile using Microsoft Intune From 373561d1e82e0e6908a478803e5cac7f5212c19e Mon Sep 17 00:00:00 2001 From: ShannonLeavitt Date: Wed, 28 Oct 2020 07:57:44 -0600 Subject: [PATCH 023/958] more edits --- .../bitlocker-how-to-enable-network-unlock.md | 118 +++++++++--------- 1 file changed, 60 insertions(+), 58 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index a514c327a4..4a7d9d600f 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -252,15 +252,15 @@ To deploy the required Group Policy setting: 5. Reboot the clients after you deploy the group policy. > [!NOTE] - > The **Network (Certificate Based)** protector will be added only after a reboot with the policy enabled and a valid certificate present in the FVE_NKP store. + > The **Network (Certificate Based)** protector is added only after a reboot. The policy must be enabled, and a valid certificate must be present in the FVE_NKP store. -### Subnet policy configuration files on WDS Server (Optional) +### Subnet policy configuration files on the WDS server (Optional) -By default, all clients with the correct Network Unlock Certificate and valid Network Unlock protectors that have wired access to a Network Unlock-enabled WDS server via DHCP are unlocked by the server. A subnet policy configuration file on the WDS server can be created to limit which subnet(s) Network Unlock clients can use to unlock. +By default, clients are unlocked by the server if they have the correct Network Unlock certificate and valid Network Unlock protectors that have wired access to a Network Unlock-enabled WDS server via DHCP. You can create a subnet policy configuration file on the WDS server to limit the subnets that Network Unlock clients can use to unlock. -The configuration file, called bde-network-unlock.ini, must be located in the same directory as the Network Unlock provider DLL (%windir%\System32\Nkpprov.dll) and it applies to both IPv6 and IPv4 DHCP implementations. If the subnet configuration policy becomes corrupted, the provider will fail and stop responding to requests. +The configuration file, called *bde-network-unlock.ini*, must be located in the same directory as the Network Unlock provider DLL (*%windir%\System32\Nkpprov.dll*). It applies to both IPv6 and IPv4 DHCP implementations. If the subnet configuration policy becomes corrupted, then the provider fails and stops responding to requests. -The subnet policy configuration file must use a “\[SUBNETS\]” section to identify the specific subnets. The named subnets may then be used to specify restrictions in certificate subsections. Subnets are defined as simple name-value pairs, in the common INI format, where each subnet has its own line, with the name on the left of the equals sign, and the subnet identified on the right of the equal sign as a Classless Inter-Domain Routing (CIDR) address or range. The key word “ENABLED” is disallowed for subnet names. +The subnet policy configuration file must use a `[SUBNETS]` section to identify the specific subnets. The named subnets can then be used to specify restrictions in certificate subsections. Subnets are defined as simple name-value pairs, in the common INI format. In this format, each subnet has its own line. The name is on the left of the equals sign. The subnet that's identified on the right of the equals sign is a Classless Interdomain Routing (CIDR) address or range. The keyword `ENABLED` is disallowed for subnet names. ```ini [SUBNETS] @@ -270,110 +270,112 @@ SUBNET3= 2001:4898:a:2::/64 ; an IPv6 subnet SUBNET4=2001:4898:a:3::/64; in production, the admin would likely give more useful names, like BUILDING9-EXCEPT-RECEP. ``` -Following the \[SUBNETS\] section, there can be sections for each Network Unlock certificate, identified by the certificate thumbprint formatted without any spaces, which define subnets clients can be unlocked from with that certificate. +Following the `[SUBNETS]` section are sections for each Network Unlock certificate. A certificate is identified by the certificate thumbprint, which is formatted without any spaces. These sections define subnet clients that can be unlocked by using that certificate. > [!NOTE] -> When specifying the certificate thumbprint, do not include any spaces. If spaces are included in the thumbprint the subnet configuration will fail because the thumbprint will not be recognized as valid. +> When you specify the certificate thumbprint, don't include spaces. Thumbprints that include spaces aren't recognized as valid. These will cause the subnet configuration to fail. -Subnet restrictions are defined within each certificate section by denoting the allowed list of permitted subnets. If any subnet is listed in a certificate section, then only those subnets listed are permitted for that certificate. If no subnet is listed in a certificate section, then all subnets are permitted for that certificate. If a certificate does not have a section in the subnet policy configuration file, then no subnet restrictions are applied for unlocking with that certificate. This means for restrictions to apply to every certificate, there must be a certificate section for every Network Unlock certificate on the server, and an explicit allowed list set for each certificate section. -Subnet lists are created by putting the name of a subnet from the \[SUBNETS\] section on its own line below the certificate section header. Then, the server will only unlock clients with this certificate on the subnet(s) specified as in the list. For troubleshooting, a subnet can be quickly excluded without deleting it from the section by simply commenting it out with a prepended semi-colon. +Each certificate section defines subnet restrictions by denoting the allowed list of permitted subnets. If any subnets are listed in a certificate section, then only those subnets are permitted for that certificate. If no subnet is listed in a certificate section, then all subnets are permitted for that certificate. If a certificate has no section in the subnet policy configuration file, then no subnet unlocking restrictions are applied for that certificate. So to apply restrictions to every certificate, you must add a certificate section for every Network Unlock certificate on the server. And you must add an explicit allow list set for each certificate section. + +Create subnet lists by putting the name of a subnet from the `[SUBNETS]` section on its own line below the certificate section header. Then, the server will unlock clients that have this certificate only on the subnets that the list specifies. To troubleshoot, you can quickly exclude a subnet without deleting it from the section by simply commenting it out with a prepended semicolon. ```ini [2158a767e1c14e88e27a4c0aee111d2de2eafe60] ;Comments could be added here to indicate when the cert was issued, which Group Policy should get it, and so on. -;This list shows this cert is only allowed to unlock clients on SUBNET1 and SUBNET3 subnets. In this example, SUBNET2 is commented out. +;This list shows this cert is allowed to unlock clients only on the SUBNET1 and SUBNET3 subnets. In this example, SUBNET2 is commented out. SUBNET1 ;SUBNET2 SUBNET3 ``` -To disallow the use of a certificate altogether, its subnet list may contain the line “DISABLED". +To disallow the use of a certificate altogether, you can add a `DISABLED` line to its subnet list. -## Turning off Network Unlock +## Turn off Network Unlock -To turn off the unlock server, the PXE provider can be unregistered from the WDS server or uninstalled altogether. However, to stop clients from creating Network Unlock protectors the **Allow Network Unlock at startup** Group Policy setting should be disabled. When this policy setting is updated to disabled on client computers any Network Unlock key protectors on the computer will be deleted. Alternatively, the BitLocker Network Unlock certificate policy can be deleted on the domain controller to accomplish the same task for an entire domain. +To turn off the unlock server, you can unregister the PXE provider from the WDS server or uninstall it altogether. However, to stop clients from creating Network Unlock protectors, you should disable the **Allow Network Unlock at startup** Group Policy setting. When you disable this policy setting on client computers, any Network Unlock key protectors on the computer are deleted. Alternatively, you can delete the BitLocker Network Unlock certificate policy on the domain controller to accomplish the same task for an entire domain. > [!NOTE] -> Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server’s ability to respond to unlock requests for that certificate. However, this is seen as an error condition and is not a supported or recommended method for turning off the Network Unlock server. +> Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server's ability to respond to unlock requests for that certificate. However, this is seen as an error condition. It's not a supported or recommended method for turning off the Network Unlock server. ## Update Network Unlock certificates -To update the certificates used by Network Unlock, administrators need to import or generate the new certificate for the server and then update the Network Unlock certificate Group Policy setting on the domain controller. +To update the certificates that Network Unlock uses, administrators need to import or generate the new certificate for the server. Then they must update the Network Unlock certificate Group Policy setting on the domain controller. > [!NOTE] -> Servers that do not receive the Group Policy Object (GPO) will require a PIN when booting. In such cases, the reason why the server did not receive the GPO to update the certificate needs to be investigated. +> Servers that don't receive the Group Policy Object (GPO) will require a PIN when they boot. In such cases, find out why the server didn't receive the GPO to update the certificate. ## Troubleshoot Network Unlock -Troubleshooting Network Unlock issues begins by verifying the environment. Many times, a small configuration issue will be the root cause of the failure. Items to verify include: +To troubleshoot Network Unlock issues, begin by verifying the environment. Many times, a small configuration issue is the root cause of the failure. Verify these items: -- Verify client hardware is UEFI-based and is on firmware version is 2.3.1 and that the UEFI firmware is in native mode without a Compatibility Support Module (CSM) for BIOS mode enabled. Do this by checking that the firmware does not have an option enabled such as "Legacy mode" or "Compatibility mode" or that the firmware does not appear to be in a BIOS-like mode. -- All required roles and services are installed and started -- Public and private certificates have been published and are in the proper certificate containers. The presence of the Network Unlock certificate can be verified in the Microsoft Management Console (MMC.exe) on the WDS server with the certificate snap-ins for the local computer enabled. The client certificate can be verified by checking the registry key **HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP** on the client computer. -- Group policy for Network Unlock is enabled and linked to the appropriate domains. -- Verify group policy is reaching the clients properly. This can be done using the GPRESULT.exe or RSOP.msc utilities. -- Verify the clients were rebooted after applying the policy. -- Verify the **Network (Certificate Based)** protector is listed on the client. This can be done using either manage-bde or Windows PowerShell cmdlets. For example the following command will list the key protectors currently configured on the C: drive of the local computer: +- Client hardware is UEFI-based and is using firmware version 2.3.1, and the UEFI firmware is in native mode doesn't have a Compatibility Support Module (CSM) for BIOS mode enabled. Verify this configuration by checking that the firmware has no enabled option such as **Legacy mode** or **Compatibility mode** or that the firmware doesn't appear to be in a BIOS-like mode. +- All required roles and services are installed and started. +- Public and private certificates have been published and are in the proper certificate containers. Verify the presence of the Network Unlock certificate by using Microsoft Management Console (*MMC.exe*) on the WDS server. The certificate snap-ins for the local computer should be enabled. Verify the client certificate by checking the registry key *HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP* on the client computer. +- Group Policy for Network Unlock is enabled and linked to the appropriate domains. +- Group Policy is reaching the clients properly. Verify this functionality by using the *GPRESULT.exe* utility or *RSOP.msc* utility. +- The clients were rebooted after the policy was applied. +- The **Network (Certificate Based)** protector is listed on the client. Check for this protector by using either `manage-bde` or Windows PowerShell cmdlets. For example, the following command lists the key protectors that are currently configured on drive C on the local computer. ```powershell manage-bde -protectors -get C: ``` > [!NOTE] - > Use the output of manage-bde along with the WDS debug log to determine if the proper certificate thumbprint is being used for Network Unlock + > Use the output of `manage-bde` along with the WDS debug log to determine whether the proper certificate thumbprint is being used for Network Unlock. -Files to gather when troubleshooting BitLocker Network Unlock include: +Gather the following files to troubleshoot BitLocker Network Unlock. -1. The Windows event logs. Specifically the BitLocker event logs and the Microsoft-Windows-Deployment-Services-Diagnostics-Debug log +- The Windows event logs. Specifically, get the BitLocker event logs and the Microsoft-Windows-Deployment-Services-Diagnostics-Debug log. - Debug logging is turned off by default for the WDS server role, so you will need to enable it first. You can use either of the following two methods to turn on WDS debug logging. + Debug logging is turned off by default for the WDS server role, so you need to enable it before you can retrieve it. Use either of the following two methods to turn on WDS debug logging. - 1. Start an elevated command prompt and run the following command: + - Start an elevated command prompt and then run the following command: ```cmd wevtutil sl Microsoft-Windows-Deployment-Services-Diagnostics/Debug /e:true ``` - 2. Open Event Viewer on the WDS server. + - Open Event Viewer on the WDS server. - In the left pane, click **Applications and Services Logs**, click **Microsoft**, click **Windows**, click **Deployment-Services-Diagnostics**, and then click **Debug**. + In the left pane, select **Applications and Services Logs** > **Microsoft** > **Windows** > **Deployment-Services-Diagnostics** > **Debug**. - In the right pane, click **Enable Log**. + In the right pane, selet **Enable Log**. -2. The DHCP subnet configuration file (if one exists). -3. The output of the BitLocker status on the volume, this can be gathered into a text file using **manage-bde -status** or **Get-BitLockerVolume** in Windows PowerShell. -4. Network Monitor capture on the server hosting the WDS role, filtered by client IP address. +- The DHCP subnet configuration file (if one exists). +- The output of the BitLocker status on the volume. Gather this output into a text file by using `manage-bde -status`. Or in Windows PowerShell, use `Get-BitLockerVolume`. +- The Network Monitor capture on the server that hosts the WDS role, filtered by client IP address. ## Configure Network Unlock Group Policy settings on earlier versions -Network Unlock and the accompanying Group Policy settings were introduced in Windows Server 2012 but can be deployed using operating systems running Windows Server 2008 R2 and Windows Server 2008. +Network Unlock and the accompanying Group Policy settings were introduced in Windows Server 2012. But you can deploy them by using operating systems that run Windows Server 2008 R2 and Windows Server 2008. -**Requirements** +Requirements: -- The server hosting WDS must be running any of the server operating systems designated in the **Applies To** list at the beginning of this topic. -- Client computers must be running any of the client operating systems designated in the **Applies To** list at the beginning of this topic. +- The server that hosts WDS must be running a server operating system that's designated in the **Applies to** list at the beginning of this article. +- Client computers must be running a client operating system that's designated in the **Applies to** list at the beginning of this article. -The following steps can be used to configure Network Unlock on these older systems. +Follow these steps to configure Network Unlock on these older systems. -1. [Install the WDS Server role](#bkmk-installwdsrole) -2. [Confirm the WDS Service is running](#bkmk-confirmwdsrunning) -3. [Install the Network Unlock feature](#bkmk-installnufeature) -4. [Create the Network Unlock certificate](#bkmk-createcert) -5. [Deploy the private key and certificate to the WDS server](#bkmk-deploycert) +1. [Install the WDS Server role.](#bkmk-installwdsrole) +2. [Confirm the WDS service is running.](#bkmk-confirmwdsrunning) +3. [Install the Network Unlock feature.](#bkmk-installnufeature) +4. [Create the Network Unlock certificate.](#bkmk-createcert) +5. [Deploy the private key and certificate to the WDS server.](#bkmk-deploycert) 6. Configure registry settings for Network Unlock: - Apply the registry settings by running the following certutil script (assuming your network unlock certificate file is called **BitLocker-NetworkUnlock.cer**) on each computer running any of the client operating systems designated in the **Applies To** list at the beginning of this topic. -```console - certutil -f -grouppolicy -addstore FVE_NKP BitLocker-NetworkUnlock.cer - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v OSManageNKP /t REG_DWORD /d 1 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseAdvancedStartup /t REG_DWORD /d 1 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UsePIN /t REG_DWORD /d 2 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMPIN /t REG_DWORD /d 2 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPM /t REG_DWORD /d 2 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKey /t REG_DWORD /d 2 /f - reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKeyPIN /t REG_DWORD /d 2 /f -``` + Apply the registry settings by running the following `certutil` script (assuming your Network Unlock certificate file is called *BitLocker-NetworkUnlock.cer*) on each computer that runs a client operating system that's designated in the **Applies to** list at the beginning of this article. -7. Set up a TPM protector on the clients -8. Reboot the clients to add the Network (Certificate Based) protector + ```console + certutil -f -grouppolicy -addstore FVE_NKP BitLocker-NetworkUnlock.cer + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v OSManageNKP /t REG_DWORD /d 1 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseAdvancedStartup /t REG_DWORD /d 1 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UsePIN /t REG_DWORD /d 2 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMPIN /t REG_DWORD /d 2 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPM /t REG_DWORD /d 2 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKey /t REG_DWORD /d 2 /f + reg add "HKLM\SOFTWARE\Policies\Microsoft\FVE" /v UseTPMKeyPIN /t REG_DWORD /d 2 /f + ``` + +7. Set up a TPM protector on the clients. +8. Reboot the clients to add the **Network (Certificate Based)** protector. ## See also From 0683698c0e40089c58ede8850fd50ffa8a381ae0 Mon Sep 17 00:00:00 2001 From: ShannonLeavitt Date: Wed, 28 Oct 2020 09:52:27 -0600 Subject: [PATCH 024/958] more edits --- .../bitlocker-how-to-enable-network-unlock.md | 121 +++++++++--------- 1 file changed, 64 insertions(+), 57 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 4a7d9d600f..68ca0dcc0c 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -1,6 +1,6 @@ --- title: BitLocker - How to enable Network Unlock (Windows 10) -description: This topic for the IT professional describes how BitLocker Network Unlock works and how to configure it. +description: This article for the IT professional describes how BitLocker Network Unlock works and how to configure it. ms.assetid: be45bc28-47db-4931-bfec-3c348151d2e9 ms.reviewer: ms.prod: w10 @@ -27,16 +27,16 @@ This article for IT professionals describes how BitLocker Network Unlock works a Network Unlock was introduced in Windows 8 and Windows Server 2012 as a BitLocker protector option for operating system volumes. Network Unlock helps you manage BitLocker-enabled desktops and servers in a domain environment by automatically unlocking operating system volumes when the system is rebooted and is connected to a wired corporate network. This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware. -Without Network Unlock, operating system volumes that are protected by TPM+PIN protectors require a PIN when a computer reboots or resumes after hibernation (for example, by Wake on LAN). For enterprises, this setup can make software patches difficult to roll out to unattended desktops and remotely administered servers. +Without Network Unlock, operating system volumes that use TPM+PIN protectors require a PIN when a computer reboots or resumes after hibernation (for example, by Wake on LAN). For enterprises, this setup can make software patches difficult to roll out to unattended desktops and remotely administered servers. Network Unlock allows BitLocker-enabled systems that use TPM+PIN and that meet the hardware requirements to boot into Windows without user intervention. Network Unlock works like the TPM+StartupKey at boot. But the StartupKey doesn't need to be read from USB media. Instead, the key for Network Unlock is composed from a key that's stored in the TPM and an encrypted network key that's sent to the server. It's decrypted and returned to the client in a secure session. ## Network Unlock core requirements -Network Unlock must meet mandatory hardware and software requirements before the feature can automatically unlock domain-joined systems: +Network Unlock requires the following mandatory hardware and software configurations before it can automatically unlock domain-joined systems: - You must be running at least Windows 8 or Windows Server 2012. -- Any supported operating system that uses UEFI DHCP drivers can be Network Unlock clients. +- Any supported operating system that uses UEFI DHCP drivers can be a Network Unlock client. - Network Unlock clients must have a TPM chip and at least one TPM protector. - You must have a server running the Windows Deployment Services (WDS) role on any supported server operating system. - The BitLocker Network Unlock optional feature can be installed on any supported server operating system. @@ -44,28 +44,30 @@ Network Unlock must meet mandatory hardware and software requirements before the - You must have a properly configured public/private key pairing. - Network Unlock Group Policy settings must be configured. -The network stack must be enabled to use the Network Unlock feature. Equipment manufacturers deliver their products in various states and with different BIOS menus, so you need to confirm that the network stack has been enabled in the BIOS before you start the computer. +The network stack must be enabled to use the Network Unlock feature. Equipment manufacturers deliver their products in various states and with different BIOS menus. So confirm that the network stack has been enabled in the BIOS before you start the computer. > [!NOTE] > To properly support DHCP within UEFI, the UEFI-based system should be in native mode and shouldn't have a compatibility support module (CSM) enabled. -On computers running Windows 8 and later, the first network adapter on the computer, usually the onboard adapter, must be configured to support DHCP. This adapter must be used for Network Unlock. +On computers that run Windows 8 and later, the first network adapter on the computer, usually the onboard adapter, must be configured to support DHCP. This adapter must be used for Network Unlock. Use this configuration especially when you have multiple adapters and you want to configure one without DHCP, such as for a lights-out management protocol. The configuration is necessary because Network Unlock stops enumerating adapters when it reaches an adapter that has a DHCP port that has failed for any reason. So if the first enumerated adapter doesn't support DHCP, isn't plugged into the network, or fails to report availability of the DHCP port for any reason, then Network Unlock will fail. On supported versions of Windows Server 2012 and later, the Network Unlock server component installs as a Windows feature. It uses Server Manager or Windows PowerShell cmdlets. In Server Manager, the feature name is BitLocker Network Unlock. In Windows PowerShell, the feature name is BitLocker-NetworkUnlock. This feature is a core requirement. -Network Unlock requires WDS in the environment where the feature will be used. Configuration of the WDS installation is not required. But the WDS service needs to be running on the server. +Network Unlock requires WDS in the environment where the feature will be used. Configuration of the WDS installation isn't required. But the WDS service must be running on the server. -The network key is stored on the system drive along with an AES 256 session key. It's encrypted with the 2048-bit RSA public key of the unlock server's certificate. The network key is decrypted with the help of a provider on a supported version of Windows Server that's running WDS. It's returned encrypted with its corresponding session key. +The network key is stored on the system drive along with an AES 256 session key. It's encrypted with the 2048-bit RSA public key of the unlock server's certificate. The network key is decrypted with the help of a provider on a supported version of Windows Server that's running WDS. The network key is returned encrypted with its corresponding session key. ## Network Unlock sequence The unlock sequence starts on the client side, when the Windows boot manager detects the existence of the Network Unlock protector. It uses the DHCP driver in UEFI to get an IP address for IPv4. Then it broadcasts a vendor-specific DHCP request that contains the network key and a session key for the reply, all encrypted by the server's Network Unlock certificate, as described earlier. The Network Unlock provider on the supported WDS server recognizes the vendor-specific request, decrypts it with the RSA private key, and returns the network key encrypted with the session key via its own vendor-specific DHCP reply. -On the server side, the WDS server role has an optional plug-in component, like a PXE (preboot execution environment) provider, which is what handles the incoming Network Unlock requests. The provider can also be configured with subnet restrictions. These restrictions would require that the IP address provided by the client in the Network Unlock request belong to a permitted subnet in order to release the network key to the client. If the Network Unlock provider is unavailable, then BitLocker fails over to the next available protector to unlock the drive. So in a typical configuration, the standard TPM+PIN unlock screen is presented to unlock the drive. +On the server side, the WDS server role has an optional plug-in component, like a PXE (preboot execution environment) provider. The plug-in component handles the incoming Network Unlock requests. The provider can also be configured with subnet restrictions. These restrictions require the IP address that's provided by the client in the Network Unlock request to belong to a permitted subnet in order to release the network key to the client. If the Network Unlock provider is unavailable, then BitLocker fails over to the next available protector to unlock the drive. So in a typical configuration, the standard TPM+PIN unlock screen is presented to unlock the drive. -The server-side configuration to enable Network Unlock also requires provisioning a 2048-bit RSA public/private key pair in the form of an X.509 certificate. The configuration also requires the public key certificate to be distributed to the clients. This certificate must be managed and deployed through the Group Policy editor directly on a domain controller that has a domain functional level of at least Windows Server 2012. This certificate is the public key that encrypts the intermediate network key. The intermediate network key is one of the two secrets required to unlock the drive; the other secret is stored in the TPM. +The server-side configuration to enable Network Unlock requires provisioning a 2048-bit RSA public/private key pair in the form of an X.509 certificate. The configuration also requires the public key certificate to be distributed to the clients. + +Manage and deploy this certificate through the Group Policy editor directly on a domain controller that has a domain functional level of at least Windows Server 2012. This certificate is the public key that encrypts the intermediate network key. The intermediate network key is one of the two secrets that are required to unlock the drive; the other secret is stored in the TPM. ![Diagram showing the BitLocker network unlock sequence.](images/bitlockernetworkunlocksequence.png) @@ -77,19 +79,19 @@ The Network Unlock process follows these phases: - A network key (a 256-bit intermediate key) that's encrypted by the 2048-bit RSA public key of the Network Unlock certificate from the WDS server. - An AES-256 session key for the reply. 4. The Network Unlock provider on the WDS server recognizes the vendor-specific request. -5. The provider decrypts it with the WDS server's BitLocker Network Unlock certificate RSA private key. -6. The WDS provider then returns the network key encrypted with the session key by using its own vendor-specific DHCP reply to the client computer. This key is an intermediate key. -7. The returned intermediate key is then combined with another local 256-bit intermediate key. This key can be decrypted only by the TPM. +5. The provider decrypts the request by using the WDS server's BitLocker Network Unlock certificate RSA private key. +6. The WDS provider returns the network key encrypted with the session key by using its own vendor-specific DHCP reply to the client computer. This key is an intermediate key. +7. The returned intermediate key is combined with another local 256-bit intermediate key. This key can be decrypted only by the TPM. 8. This combined key is used to create an AES-256 key that unlocks the volume. 9. Windows continues the boot sequence. ## Configure Network Unlock -The following steps allow an administrator to configure Network Unlock in a domain where the domain functional level is at least Windows Server 2012. +The following steps allow an administrator to configure Network Unlock in a domain where the functional level is at least Windows Server 2012. -### Install the WDS Server role +### Install the WDS server role -The BitLocker Network Unlock feature installs the WDS role if it's not already installed. If you want to install it separately before you install BitLocker Network Unlock, use Server Manager or Windows PowerShell. To install the role by using Server Manager, select the **Windows Deployment Services** role in Server Manager. +The BitLocker Network Unlock feature installs the WDS role if it's not already installed. If you want to install it separately before you install BitLocker Network Unlock, use Server Manager or Windows PowerShell. To install the role in Server Manager, select the **Windows Deployment Services** role. To install the role by using Windows PowerShell, use the following command: @@ -97,7 +99,7 @@ To install the role by using Windows PowerShell, use the following command: Install-WindowsFeature WDS-Deployment ``` -Configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. You can do so by using the WDS management tool, `wdsmgmt.msc`. This tool starts the Windows Deployment Services Configuration Wizard. +Configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. Use the WDS management tool, `wdsmgmt.msc`. This tool starts the Windows Deployment Services Configuration Wizard. ### Confirm the WDS service is running @@ -110,7 +112,7 @@ Get-Service WDSServer ``` ### Install the Network Unlock feature -To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature by using Server Manager, in the Server Manager console, select **BitLocker Network Unlock**. +To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature in the Server Manager console, select **BitLocker Network Unlock**. To install the feature by using Windows PowerShell, use the following command: @@ -119,21 +121,21 @@ Install-WindowsFeature BitLocker-NetworkUnlock ``` ### Create the certificate template for Network Unlock -A properly configured Active Directory Services Certification Authority can use the certificate template to create and issue Network Unlock certificates. +A properly configured Active Directory Services Certification Authority can use the certificate template to create and issue Network Unlock certificates. To create a certificate template: 1. Open the certificate template snap-in (`certtmpl.msc`). 2. Locate the user template. Right-click the template name and then select **Duplicate Template**. -3. On the **Compatibility** tab, change the **Certification Authority** and **Certificate recipient** fields to Windows Server 2012 and Windows 8, respectively. Ensure the **Show resulting changes** dialog box is selected. +3. On the **Compatibility** tab, change the **Certification Authority** and **Certificate recipient** fields to **Windows Server 2012** and **Windows 8**, respectively. Ensure **Show resulting changes** is selected. 4. Select the **General** tab of the template. The **Template display name** and **Template name** should clearly identify that the template will be used for Network Unlock. Clear the check box for **Publish certificate in Active Directory**. 5. Select the **Request Handling** tab. In the **Purpose** drop-down menu, select **Encryption**. Ensure the **Allow private key to be exported** option is selected. -6. Select the **Cryptography** tab. Set the **Minimum key size** to *2048*. (For this template, you can use any Microsoft cryptographic provider that supports RSA. But for simplicity and forward compatibility, we recommend using **Microsoft Software Key Storage Provider**.) +6. Select the **Cryptography** tab. Set the **Minimum key size** to **2048**. (For this template, you can use any Microsoft cryptographic provider that supports RSA. But for simplicity and forward compatibility, we recommend using **Microsoft Software Key Storage Provider**.) 7. Select **Requests must use one of the following providers**. Then clear all options except for your selected cryptography provider, such as the **Microsoft Software Key Storage Provider**. 8. Select the **Subject Name** tab. Select **Supply in the request**. If the certificate templates dialog box appears, select **OK**. 9. Select the **Issuance Requirements** tab. Then select both **CA certificate manager approval** and **Valid existing certificate**. 10. Select the **Extensions** tab. Then select **Application Policies** > **Edit**. 11. In the **Edit Application Policies Extension** dialog box, select **Client Authentication**, **Encrypting File System**, and **Secure Email**. Then choose **Remove**. 12. In the **Edit Application Policies Extension** dialog box, select **Add**. -13. In the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box, enter the following information in the space provided and then click **OK** to create the BitLocker Network Unlock application policy: +13. In the **Add Application Policy** dialog box, select **New**. In the **New Application Policy** dialog box, enter the following information in the space provided and then select **OK** to create the BitLocker Network Unlock application policy. - **Name**: **BitLocker Network Unlock** - **Object Identifier**: **1.3.6.1.4.1.311.67.1.1** @@ -149,7 +151,7 @@ After you add the Network Unlock template to the certificate authority, you can ### Create the Network Unlock certificate -Network Unlock can use imported certificates from an existing public key infrastructure (PKI), or you can use a self-signed certificate. +Network Unlock can use imported certificates from an existing public key infrastructure (PKI). Or it can use a self-signed certificate. To enroll a certificate from an existing certificate authority: @@ -172,7 +174,7 @@ To enroll a certificate from an existing certificate authority: 2. Select **Yes, export the private key**. 3. Complete the steps to create the *.pfx* file. -To create a self-signed certificate, you can either use the New-SelfSignedCertificate cmdlet in Windows PowerShell or use Certreq. +To create a self-signed certificate, either use the `New-SelfSignedCertificate` cmdlet in Windows PowerShell or use `certreq`. Here's a Windows PowerShell example: @@ -180,9 +182,9 @@ Here's a Windows PowerShell example: New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -Subject "CN=BitLocker Network Unlock certificate" -Provider "Microsoft Software Key Storage Provider" -KeyUsage KeyEncipherment -KeyUsageProperty Decrypt,Sign -KeyLength 2048 -HashAlgorithm sha512 -TextExtension @("1.3.6.1.4.1.311.21.10={text}OID=1.3.6.1.4.1.311.67.1.1","2.5.29.37={text}1.3.6.1.4.1.311.67.1.1") ``` -Here's a Certreq example: +Here's a `certreq` example: -1. Create a text file with an *.inf* extension. For example, *notepad.exe* *BitLocker-NetworkUnlock.inf*. +1. Create a text file that has an *.inf* extension. For example, *notepad.exe* *BitLocker-NetworkUnlock.inf*. 2. Add the following contents to the previously created file: ```ini @@ -204,7 +206,7 @@ Here's a Certreq example: _continue_ = "1.3.6.1.4.1.311.67.1.1" ``` -3. Open an elevated command prompt and use the `certreq` tool to create a new certificate. Use the following command, specifying the full path to the file that you created previously. Also specify the file name: +3. Open an elevated command prompt and use the `certreq` tool to create a new certificate. Use the following command, specifying the full path to the file that you created previously. Also specify the file name. ```cmd certreq -new BitLocker-NetworkUnlock.inf BitLocker-NetworkUnlock.cer @@ -216,16 +218,16 @@ Here's a Certreq example: ### Deploy the private key and certificate to the WDS server -Now that the certificate and key are created, deploy them to the infrastructure to properly unlock systems. To deploy the certificates: +Now that you've created the certificate and key, deploy them to the infrastructure to properly unlock systems. To deploy the certificates: -1. On the WDS server, open a new Microsoft Management Console (MMC) and then add the certificates snap-in. Select the computer account and local computer when these options appear. +1. On the WDS server, open a new Microsoft Management Console (MMC) and then add the certificates snap-in. When you're prompted, select the computer account and local computer. 2. Right-click **Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock** and then choose **All Tasks** > **Import**. 3. In the **File to Import** dialog box, choose the *.pfx* file that you created previously. 4. Enter the password that you used to create the *.pfx*, and finish the steps. ### Configure Group Policy settings for Network Unlock -Now that you've deployed the certificate and key to the WDS server for Network Unlock, the final step is to use Group Policy settings to deploy the public key certificate to computers that you want to be able to unlock by using the Network Unlock key. You can find Group Policy settings for BitLocker in *\\Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption* by using the Local Group Policy Editor or the MMC. +You've now deployed the certificate and key to the WDS server for Network Unlock. In the final step, you'll use Group Policy settings to deploy the public key certificate to computers that you want to be able to unlock by using the Network Unlock key. Find Group Policy settings for BitLocker in *\\Computer Configuration\\Administrative Templates\\Windows Components\\BitLocker Drive Encryption* by using the Local Group Policy Editor or the MMC. To enable the Group Policy setting that's required to configure Network Unlock: @@ -239,45 +241,51 @@ To deploy the required Group Policy setting: > The Group Policy settings **Allow network unlock at startup** and **Add Network Unlock Certificate** were introduced in Windows Server 2012. 1. Copy the *.cer* file that you created for Network Unlock to the domain controller. -2. On the domain controller, launch Group Policy Management Console (`gpmc.msc`). +2. On the domain controller, open Group Policy Management Console (`gpmc.msc`). 3. Create a new Group Policy Object or modify an existing object to enable the **Allow network unlock at startup** setting. 4. Deploy the public certificate to clients: - 1. In Group Policy Management Console, go to the following location: *Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate*. + 1. In Group Policy Management Console, go to *Computer Configuration\\Policies\\Windows Settings\\Security Settings\\Public Key Policies\\BitLocker Drive Encryption Network Unlock Certificate*. 2. Right-click the folder and then choose **Add Network Unlock Certificate**. 3. Follow the steps and import the *.cer* file that you copied earlier. > [!NOTE] - > Only one network unlock certificate can be available at a time. If a new certificate is required, delete the current certificate before you deploy a new one. The Network Unlock certificate is located in the *HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP* key on the client computer. + > Only one network unlock certificate can be available at a time. If you need a new certificate, delete the current certificate before you deploy a new one. The Network Unlock certificate is located in the *HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP* key on the client computer. -5. Reboot the clients after you deploy the group policy. +5. Reboot the clients after you deploy the Group Policy. > [!NOTE] - > The **Network (Certificate Based)** protector is added only after a reboot. The policy must be enabled, and a valid certificate must be present in the FVE_NKP store. + > The **Network (Certificate Based)** protector is added only after a reboot where the policy is enabled and a valid certificate is present in the FVE_NKP store. -### Subnet policy configuration files on the WDS server (Optional) +### Subnet policy configuration files on the WDS server (optional) -By default, clients are unlocked by the server if they have the correct Network Unlock certificate and valid Network Unlock protectors that have wired access to a Network Unlock-enabled WDS server via DHCP. You can create a subnet policy configuration file on the WDS server to limit the subnets that Network Unlock clients can use to unlock. +By default, the server unlocks clients that have the correct Network Unlock certificate and valid Network Unlock protectors that have wired access to a Network Unlock-enabled WDS server via DHCP. You can create a subnet policy configuration file on the WDS server to limit the subnets that Network Unlock clients can use for unlocking. -The configuration file, called *bde-network-unlock.ini*, must be located in the same directory as the Network Unlock provider DLL (*%windir%\System32\Nkpprov.dll*). It applies to both IPv6 and IPv4 DHCP implementations. If the subnet configuration policy becomes corrupted, then the provider fails and stops responding to requests. +The configuration file, called *bde-network-unlock.ini*, must be located in the same directory as the Network Unlock provider dynamic-link library (*%windir%\System32\Nkpprov.dll*). The configuration file applies to both IPv6 and IPv4 DHCP implementations. If the subnet configuration policy becomes corrupted, then the provider fails and stops responding to requests. -The subnet policy configuration file must use a `[SUBNETS]` section to identify the specific subnets. The named subnets can then be used to specify restrictions in certificate subsections. Subnets are defined as simple name-value pairs, in the common INI format. In this format, each subnet has its own line. The name is on the left of the equals sign. The subnet that's identified on the right of the equals sign is a Classless Interdomain Routing (CIDR) address or range. The keyword `ENABLED` is disallowed for subnet names. +The subnet policy configuration file must use a `[SUBNETS]` section to identify the specific subnets. You can then use the named subnets to specify restrictions in certificate subsections. + +Subnets are defined as simple name-value pairs, in the common INI format. In this format, each subnet has its own line. The name is on the left of the equals sign. The subnet on the right of the equals sign is a Classless Interdomain Routing (CIDR) address or range. The keyword `ENABLED` is disallowed for subnet names. ```ini [SUBNETS] -SUBNET1=10.185.250.0/24 ; comment about this subrange could be here, after the semi-colon +SUBNET1=10.185.250.0/24 ; a comment about this subrange could be here, after the semicolon SUBNET2=10.185.252.200/28 SUBNET3= 2001:4898:a:2::/64 ; an IPv6 subnet SUBNET4=2001:4898:a:3::/64; in production, the admin would likely give more useful names, like BUILDING9-EXCEPT-RECEP. ``` -Following the `[SUBNETS]` section are sections for each Network Unlock certificate. A certificate is identified by the certificate thumbprint, which is formatted without any spaces. These sections define subnet clients that can be unlocked by using that certificate. +Following the `[SUBNETS]` section are sections for each Network Unlock certificate. A certificate is identified by the certificate thumbprint, which is formatted without any spaces. These sections define subnet clients that you can unlock by using that certificate. > [!NOTE] -> When you specify the certificate thumbprint, don't include spaces. Thumbprints that include spaces aren't recognized as valid. These will cause the subnet configuration to fail. +> When you specify the certificate thumbprint, don't include spaces. Thumbprints that include spaces aren't recognized as valid. The spaces will cause the subnet configuration to fail. -Each certificate section defines subnet restrictions by denoting the allowed list of permitted subnets. If any subnets are listed in a certificate section, then only those subnets are permitted for that certificate. If no subnet is listed in a certificate section, then all subnets are permitted for that certificate. If a certificate has no section in the subnet policy configuration file, then no subnet unlocking restrictions are applied for that certificate. So to apply restrictions to every certificate, you must add a certificate section for every Network Unlock certificate on the server. And you must add an explicit allow list set for each certificate section. +Each certificate section defines subnet restrictions by denoting the allowed list of permitted subnets. If any subnets are listed in a certificate section, then only those subnets are permitted for that certificate. If no subnet is listed in a certificate section, then all subnets are permitted for that certificate. If a certificate has no section in the subnet policy configuration file, then no subnet unlocking restrictions are applied for that certificate. -Create subnet lists by putting the name of a subnet from the `[SUBNETS]` section on its own line below the certificate section header. Then, the server will unlock clients that have this certificate only on the subnets that the list specifies. To troubleshoot, you can quickly exclude a subnet without deleting it from the section by simply commenting it out with a prepended semicolon. +So to apply restrictions to every certificate, you must add a certificate section for every Network Unlock certificate on the server. And you must add an explicit allow list set for each certificate section. + +Create subnet lists by putting the name of a subnet from the `[SUBNETS]` section on its own line below the certificate section header. Then, the server will unlock clients that have this certificate only on the subnets that the list specifies. + +To troubleshoot, you can quickly exclude a subnet without deleting it from the section. Just comment it out by using a prepended semicolon. ```ini [2158a767e1c14e88e27a4c0aee111d2de2eafe60] @@ -288,14 +296,14 @@ SUBNET1 SUBNET3 ``` -To disallow the use of a certificate altogether, you can add a `DISABLED` line to its subnet list. +To disallow the use of a certificate altogether, add a `DISABLED` line to its subnet list. ## Turn off Network Unlock To turn off the unlock server, you can unregister the PXE provider from the WDS server or uninstall it altogether. However, to stop clients from creating Network Unlock protectors, you should disable the **Allow Network Unlock at startup** Group Policy setting. When you disable this policy setting on client computers, any Network Unlock key protectors on the computer are deleted. Alternatively, you can delete the BitLocker Network Unlock certificate policy on the domain controller to accomplish the same task for an entire domain. > [!NOTE] -> Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server's ability to respond to unlock requests for that certificate. However, this is seen as an error condition. It's not a supported or recommended method for turning off the Network Unlock server. +> Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server's ability to respond to unlock requests for that certificate. However, this condition is seen as an error. It's not a supported or recommended method for turning off the Network Unlock server. ## Update Network Unlock certificates @@ -306,13 +314,13 @@ To update the certificates that Network Unlock uses, administrators need to impo ## Troubleshoot Network Unlock -To troubleshoot Network Unlock issues, begin by verifying the environment. Many times, a small configuration issue is the root cause of the failure. Verify these items: +To troubleshoot Network Unlock problems, begin by verifying the environment. Often, a small configuration issue is the root cause of the failure. Verify these items: -- Client hardware is UEFI-based and is using firmware version 2.3.1, and the UEFI firmware is in native mode doesn't have a Compatibility Support Module (CSM) for BIOS mode enabled. Verify this configuration by checking that the firmware has no enabled option such as **Legacy mode** or **Compatibility mode** or that the firmware doesn't appear to be in a BIOS-like mode. +- Client hardware is based on UEFI and uses firmware version 2.3.1, and the UEFI firmware is in native mode and has no compatibility support module (CSM) for BIOS mode enabled. Verify this configuration by ensuring that the firmware has no enabled option such as **Legacy mode** or **Compatibility mode** and that the firmware doesn't appear to be in a BIOS-like mode. - All required roles and services are installed and started. - Public and private certificates have been published and are in the proper certificate containers. Verify the presence of the Network Unlock certificate by using Microsoft Management Console (*MMC.exe*) on the WDS server. The certificate snap-ins for the local computer should be enabled. Verify the client certificate by checking the registry key *HKEY\_LOCAL\_MACHINE\\Software\\Policies\\Microsoft\\SystemCertificates\\FVE\_NKP* on the client computer. - Group Policy for Network Unlock is enabled and linked to the appropriate domains. -- Group Policy is reaching the clients properly. Verify this functionality by using the *GPRESULT.exe* utility or *RSOP.msc* utility. +- Group Policy is reaching the clients properly. Verify this functionality by using the *GPRESULT.exe* utility or the *RSOP.msc* utility. - The clients were rebooted after the policy was applied. - The **Network (Certificate Based)** protector is listed on the client. Check for this protector by using either `manage-bde` or Windows PowerShell cmdlets. For example, the following command lists the key protectors that are currently configured on drive C on the local computer. @@ -335,9 +343,8 @@ Gather the following files to troubleshoot BitLocker Network Unlock. ``` - Open Event Viewer on the WDS server. - In the left pane, select **Applications and Services Logs** > **Microsoft** > **Windows** > **Deployment-Services-Diagnostics** > **Debug**. - - In the right pane, selet **Enable Log**. + 1. In the left pane, select **Applications and Services Logs** > **Microsoft** > **Windows** > **Deployment-Services-Diagnostics** > **Debug**. + 1. In the right pane, select **Enable Log**. - The DHCP subnet configuration file (if one exists). - The output of the BitLocker status on the volume. Gather this output into a text file by using `manage-bde -status`. Or in Windows PowerShell, use `Get-BitLockerVolume`. @@ -347,21 +354,21 @@ Gather the following files to troubleshoot BitLocker Network Unlock. Network Unlock and the accompanying Group Policy settings were introduced in Windows Server 2012. But you can deploy them by using operating systems that run Windows Server 2008 R2 and Windows Server 2008. -Requirements: +Your system must meet these requirements: -- The server that hosts WDS must be running a server operating system that's designated in the **Applies to** list at the beginning of this article. -- Client computers must be running a client operating system that's designated in the **Applies to** list at the beginning of this article. +- The server that hosts WDS must be running a server operating system that's designated in the "Applies to" list at the beginning of this article. +- Client computers must be running a client operating system that's designated in the "Applies to" list at the beginning of this article. Follow these steps to configure Network Unlock on these older systems. -1. [Install the WDS Server role.](#bkmk-installwdsrole) +1. [Install the WDS server role.](#bkmk-installwdsrole) 2. [Confirm the WDS service is running.](#bkmk-confirmwdsrunning) 3. [Install the Network Unlock feature.](#bkmk-installnufeature) 4. [Create the Network Unlock certificate.](#bkmk-createcert) 5. [Deploy the private key and certificate to the WDS server.](#bkmk-deploycert) 6. Configure registry settings for Network Unlock: - Apply the registry settings by running the following `certutil` script (assuming your Network Unlock certificate file is called *BitLocker-NetworkUnlock.cer*) on each computer that runs a client operating system that's designated in the **Applies to** list at the beginning of this article. + Apply the registry settings by running the following `certutil` script (assuming your Network Unlock certificate file is called *BitLocker-NetworkUnlock.cer*) on each computer that runs a client operating system that's designated in the "Applies to" list at the beginning of this article. ```console certutil -f -grouppolicy -addstore FVE_NKP BitLocker-NetworkUnlock.cer From f62824ae2a7b3cdc5adabf2333477400e624b707 Mon Sep 17 00:00:00 2001 From: ShannonLeavitt Date: Wed, 28 Oct 2020 10:10:37 -0600 Subject: [PATCH 025/958] small fixes --- .../bitlocker-how-to-enable-network-unlock.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md index 68ca0dcc0c..092a234e68 100644 --- a/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md +++ b/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock.md @@ -37,7 +37,7 @@ Network Unlock requires the following mandatory hardware and software configurat - You must be running at least Windows 8 or Windows Server 2012. - Any supported operating system that uses UEFI DHCP drivers can be a Network Unlock client. -- Network Unlock clients must have a TPM chip and at least one TPM protector. +- Network Unlock clients must have a TPM (trusted platform module) chip and at least one TPM protector. - You must have a server running the Windows Deployment Services (WDS) role on any supported server operating system. - The BitLocker Network Unlock optional feature can be installed on any supported server operating system. - You must have a DHCP server, separate from the WDS server. @@ -89,7 +89,7 @@ The Network Unlock process follows these phases: The following steps allow an administrator to configure Network Unlock in a domain where the functional level is at least Windows Server 2012. -### Install the WDS server role +### Install the WDS server role The BitLocker Network Unlock feature installs the WDS role if it's not already installed. If you want to install it separately before you install BitLocker Network Unlock, use Server Manager or Windows PowerShell. To install the role in Server Manager, select the **Windows Deployment Services** role. @@ -101,7 +101,7 @@ Install-WindowsFeature WDS-Deployment Configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Domain Services) and the client computer. Use the WDS management tool, `wdsmgmt.msc`. This tool starts the Windows Deployment Services Configuration Wizard. -### Confirm the WDS service is running +### Confirm the WDS service is running To confirm the WDS service is running, use the Services Management console or Windows PowerShell. To confirm the service is running in the Services Management console, open the console by using `services.msc`. Then check the status of the WDS service. @@ -110,7 +110,7 @@ To confirm the service is running by using Windows PowerShell, use the following ```powershell Get-Service WDSServer ``` -### Install the Network Unlock feature +### Install the Network Unlock feature To install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature in the Server Manager console, select **BitLocker Network Unlock**. @@ -119,7 +119,7 @@ To install the feature by using Windows PowerShell, use the following command: ```powershell Install-WindowsFeature BitLocker-NetworkUnlock ``` -### Create the certificate template for Network Unlock +### Create the certificate template for Network Unlock A properly configured Active Directory Services Certification Authority can use the certificate template to create and issue Network Unlock certificates. To create a certificate template: @@ -149,7 +149,7 @@ To add the Network Unlock template to the certificate authority, open the certif After you add the Network Unlock template to the certificate authority, you can use this certificate to configure BitLocker Network Unlock. -### Create the Network Unlock certificate +### Create the Network Unlock certificate Network Unlock can use imported certificates from an existing public key infrastructure (PKI). Or it can use a self-signed certificate. @@ -216,14 +216,14 @@ Here's a `certreq` example: 5. Launch **Certificates - Local Machine** by running `certlm.msc`. 6. Create a *.pfx* file by opening the *Certificates – Local Computer\\Personal\\Certificates* path in the navigation pane. Right-click the previously imported certificate, and then select **All Tasks** > **Export**. Follow through the steps to create the *.pfx* file. -### Deploy the private key and certificate to the WDS server +### Deploy the private key and certificate to the WDS server Now that you've created the certificate and key, deploy them to the infrastructure to properly unlock systems. To deploy the certificates: 1. On the WDS server, open a new Microsoft Management Console (MMC) and then add the certificates snap-in. When you're prompted, select the computer account and local computer. 2. Right-click **Certificates (Local Computer) - BitLocker Drive Encryption Network Unlock** and then choose **All Tasks** > **Import**. 3. In the **File to Import** dialog box, choose the *.pfx* file that you created previously. -4. Enter the password that you used to create the *.pfx*, and finish the steps. +4. Enter the password that you used to create the *.pfx* file, and finish the steps. ### Configure Group Policy settings for Network Unlock @@ -298,14 +298,14 @@ SUBNET3 To disallow the use of a certificate altogether, add a `DISABLED` line to its subnet list. -## Turn off Network Unlock +## Turn off Network Unlock To turn off the unlock server, you can unregister the PXE provider from the WDS server or uninstall it altogether. However, to stop clients from creating Network Unlock protectors, you should disable the **Allow Network Unlock at startup** Group Policy setting. When you disable this policy setting on client computers, any Network Unlock key protectors on the computer are deleted. Alternatively, you can delete the BitLocker Network Unlock certificate policy on the domain controller to accomplish the same task for an entire domain. > [!NOTE] > Removing the FVE_NKP certificate store that contains the Network Unlock certificate and key on the WDS server will also effectively disable the server's ability to respond to unlock requests for that certificate. However, this condition is seen as an error. It's not a supported or recommended method for turning off the Network Unlock server. -## Update Network Unlock certificates +## Update Network Unlock certificates To update the certificates that Network Unlock uses, administrators need to import or generate the new certificate for the server. Then they must update the Network Unlock certificate Group Policy setting on the domain controller. @@ -341,7 +341,7 @@ Gather the following files to troubleshoot BitLocker Network Unlock. ```cmd wevtutil sl Microsoft-Windows-Deployment-Services-Diagnostics/Debug /e:true ``` - - Open Event Viewer on the WDS server. + - Open Event Viewer on the WDS server: 1. In the left pane, select **Applications and Services Logs** > **Microsoft** > **Windows** > **Deployment-Services-Diagnostics** > **Debug**. 1. In the right pane, select **Enable Log**. From bbf1bff0771821a4d0ab178a6d454a0e91ebe9d5 Mon Sep 17 00:00:00 2001 From: Nathaniel Chin <22572406+nathanielcwm@users.noreply.github.com> Date: Thu, 29 Oct 2020 08:04:13 +0800 Subject: [PATCH 026/958] Update windows/deployment/upgrade/windows-10-edition-upgrades.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/deployment/upgrade/windows-10-edition-upgrades.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/upgrade/windows-10-edition-upgrades.md b/windows/deployment/upgrade/windows-10-edition-upgrades.md index ff9c6ae451..033f0e0e0d 100644 --- a/windows/deployment/upgrade/windows-10-edition-upgrades.md +++ b/windows/deployment/upgrade/windows-10-edition-upgrades.md @@ -93,7 +93,7 @@ You can run the changepk.exe command-line tool to upgrade devices to a supported `changepk.exe /ProductKey ` -You can also upgrade using slmgr.vbs and a [KMS client setup key](https://docs.microsoft.com/en-us/windows-server/get-started/kmsclientkeys). For example, the following command will upgrade to Windows 10 Enterprise. +You can also upgrade using slmgr.vbs and a [KMS client setup key](https://docs.microsoft.com/windows-server/get-started/kmsclientkeys). For example, the following command will upgrade to Windows 10 Enterprise. `Cscript.exe c:\windows\system32\slmgr.vbs /ipk NPPR9-FWDCX-D2C8J-H872K-2YT43` From 97929f6f9264c183dc7978818a1965a1883767bf Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 2 Nov 2020 11:20:46 -0800 Subject: [PATCH 027/958] Fixed WDAC typo in TOC.md --- .../windows-defender-application-control/TOC.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index 731cab3d76..b29a8d0e37 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -22,7 +22,7 @@ ##### [Create a WDAC policy for fixed-workload devices](create-initial-default-policy.md) ##### [Microsoft recommended block rules](microsoft-recommended-block-rules.md) ### [Using the WDAC Wizard tool](wdac-wizard.md) -#### [Create a base WDC policy](wdac-wizard-create-base-policy.md) +#### [Create a base WDAC policy](wdac-wizard-create-base-policy.md) #### [Create a supplemental WDAC policy](wdac-wizard-create-supplemental-policy.md) #### [Editing a WDAC policy](wdac-wizard-editing-policy.md) #### [Merging multiple WDAC policies](wdac-wizard-merging-policies.md) From 1539eeb41ff9599f311409cecabc6d3d74473165 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 2 Nov 2020 11:23:10 -0800 Subject: [PATCH 028/958] Converted **Headers** to ### Headers to align with style guide. --- .../wdac-wizard-create-base-policy.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md index 269ee7607e..0d1d32ff12 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-base-policy.md @@ -49,7 +49,7 @@ Once the base template is selected, give the policy a name and choose where to s Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. Hovering the mouse over the policy rule title will display a short description of the rule at the bottom of the page. -**Policy Rules Description** +### Policy Rules Description A description of the policy rules, beginning with the left-most column are provided below. @@ -66,7 +66,7 @@ A description of the policy rules, beginning with the left-most column are provi | **Unsigned System Integrity Policy** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. | | **User Mode Code Integrity** | WDAC policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | -**Advanced Policy Rules Description** +### Advanced Policy Rules Description Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of the policy rules are provided below. @@ -90,7 +90,7 @@ Selecting the **+ Advanced Options** label will show another column of policy ru File rules in an application control policy will specify the level at which appiations will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports 4 types of file rules: -**Publisher** +### Publisher Rules The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specifity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. @@ -104,11 +104,11 @@ The Publisher file rule type uses properties in the code signing certificate cha ![Custom filepublisher file rule creation](images/wdac-wizard-custom-publisher-rule.png) -**Path** +### Filepath Rules -Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a fileopath rule, simply select the file using the *Browse* button. +Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, simply select the file using the *Browse* button. -**File Attributes** +### File Attribute Rules The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (eg. DLLs) may all share the same product name, for instance. This allows users to easily create targeted policies based on the Product Name filename rule level. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. @@ -122,12 +122,12 @@ The Wizard supports the creation of [file name rules](select-types-of-rules-to-c ![Custom file attributes rule](images/wdac-wizard-custom-file-attribute-rule.png) -**File Hash** +### File Hash Rules Lastly, the Wizard supports creating file rules using the hash of the file. Although this level is specific, it can cause additional administrative overhead to maintain the current product versions’ hash values. Each time a binary is updated, the hash value changes, therefore requiring a policy update. By default, the Wizard will use file hash as the fallback in case a file rule cannot be created using the specified file rule level. -#### Deleting Signing Rules #### +#### Deleting Signing Rules The policy signing rules list table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Template signing rules and custom rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. From 9b7fd06c9c07e178ae7b604d10f5ac2d14307390 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 2 Nov 2020 12:13:27 -0800 Subject: [PATCH 029/958] Wrote the documentation for the supplemental policy workflow. Added two pictures - allows and disallows supplemental policies. --- .../wdac-wizard-supplemental-expandable.png | Bin 0 -> 43188 bytes ...dac-wizard-supplemental-not-expandable.png | Bin 0 -> 50493 bytes .../wdac-wizard-create-supplemental-policy.md | 109 +++++++++++++++++- 3 files changed, 108 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-expandable.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-not-expandable.png diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-expandable.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-supplemental-expandable.png new file mode 100644 index 0000000000000000000000000000000000000000..d59559152524da6425262187a27702c8c075aa19 GIT binary patch literal 43188 zcmbSyWmFwO(@=`>Cp@gMZ11!^2?1KtMpiOG=0+LO^^rgMj!1fd2eZa#a6)_v7#hpeQZ` zQ9h1)_;K;oL{L@`0-`Ds_T>-c$Mttx2@L=Q1d7AI{nMH;feQpgp`@gUpt6hZ$tt8a z+6V!}#p3bb98m$rO0APKI#MeUMYLa4ooA|@sz^v^$d%iRtE;palxg$N8Era9RU5n> zUh8fh=i=wa#wH(I1%Kb`KT0$#Vubal3&9||pVZKl zYvv)J{@tmy=^qEn7{kCgBr)6^Qv_ zO^98I!(P82AU571`PBmB|JIE9bQtdpMyr&l8Zkj{ve5luTE87zcpSKdEvj~6PoM8_ z+N~^yt~(_9jX_9y!Wzth8i0y39zx2wY)5?a(?rP4a4jbkU#MU_U7gkG*W{nEYx|=| z!8u`KYs{1b#gcO^X6wrM+ddiP2g0)p0PZtdOFe$~?(%*ACIg#`K*uh3g@VNWOxT*+`w+JtmyBJo*qmA}+)4(28p=+WD*Mur0Z{ap|QRyDaevdOV(% z;E$a7vM#prR$a6jcQTDDCJGe84-OBNoUzGIOWADHogJ$00s;@f-zpRx&2NuGpin6@ zG~jU?8D4Jc3z5t%;f_RXW7+SANw5{6oI{xk>iXQgXyk0}(eMjhEW#EI zTdq?e3zw+EeK8nsU2)pU`MEoS_Q&tzbyQqG)7?;uia$E{H5@j}VAa=DBa9c;9PvnF zMeMw4FT98VnPNEGm6xYhz*7ifyn`OT7t;-R^&5N%Ps^h^)r)(`)_Pza2~hk`hh)w- zXm+vl+Jo&#Sbrhp_EVl|`1SfyqpOEgjaN@k4qp8iQjDzBwx>7!XDJTuI*U9|p@HM= zTifzvdtSi)L|@dahsjC$Vx7||s!gq(zal_D$Av@;m&t5)=zq@6F8Xir;Aq@LRPo|b7V**bqzyfI1Y{mw634hx^=CjtCK^{ zAMq%l6Dl+0VwsV1+=rT%y? zl+SqM^EPqdFlP-l;H^ZEij2Q8MhL0B2rOv(1d-`}ce*@~sy5rHVccZ{H^E^il53J- zq|D{C22A31+Cv@rw&LqtDqgF}Yw~bb7kEOgOlZS9==DIFSmY<16L=p)MA90NVt(s* zhsU%sRKZP0LzC+xZH?h5S4+qaDx7{?z1-z!^BB`F3OUxNNWlX6)hw6iv4|Ho5Sr+Q zI7GE*6^xf}mxiYssx&{JEDl$Fv4ad#9zxO!L%nx)(`Cn{VmO;qCr4bWbxeDQBWcaz zF_%VIwNO58e}Sm7!p(wO?SIrS)Cp{jW}^?%z*^* zVDQ^m@WldTyM|tvOX{pFcbhbB=JH@z6^9i06&We{1D6s?${I~8lrDAm_q>3B*xCc! zCX(!$Pu0g0@6~dDblI4&X%O@3uQp|Q%-PxJmjxCazSZUTvmG`ey@IS3 zAz?@GmcLb1^bI*G^L9boMEGwb^90;~f^fQJ&5loDlRl;yI_qOmLDZ$KALoqC`D2ye zF#)8n%dCa~&iwGB*<;47)w?Xf7bjK%uHq03amA*rswe?-1+NLp`$RZh*EGx>6Qwru za1?5`?C1Q&PYzEidk5ty&Wew9yG4jcQhfQS=st;K$$%{fbmZpSw?Avi!qnHz=b$-Z zB|N(uko*Z99+Q(Q*#EQqv77;ga~1xHd-A+VPopXftMo)G@)}nnnb}fxfkWi{K=Uij z7-`)RxOmDyd8o};Nf;bt9W_RLaHDo?%VFuxJ)W07i&R0AW_*gR+U)w&U;Foa2Kk;I z_g9`QRV&@CQ=UifgTYB0tge;1SnGFHue9u>(Xt#f7HM2r=3W7HPK2*35AoT*+TzI^lfQeTW4TSVY{V2(dr*!%UH#2|q%KbaItJ8e$ zruaDfh0vQ%+r{P!h4CicK`tMYTV7r+qPVrp`f;yQPrySph)~^W8db3VN>i+M2TWQKJS7AiF<17v|S|nPWL!@ zS}}$$aBQtJ*K5b+A^T#xB1vY^2saP-t1DtCTRF9*FZVq+81GRTge|**!JMZTq+NZr z0M%8JN!N(2q^wHmu$`C7ApHqqWBrhyfV+auYP0c4kWEt3<0pT;d_TPi7pMteQ0sE)_EBvEziZiiA6G7@zI_j*1m(D#lo>b{Hepiyqt2<$szfxYDLz2 z&BQymRap3`+^M7Fw{q)pOak&Ljj+yW?)$ZZ>uJeElji1@r{_E(G%lOo$1P(30b+7f zw4_&nd2wUYSWQ5@w$Z{05~;@#7YUqvenB`sGqWvs4fOLk$Hy>te$;`_4HaG`s`e$n zyrX-ERq;-qd=z^Zq>8rB$3g;qbVD7;nXF+RP0ltf`gMx_AlMGFhrj>!N8Mig9Xoj; zthfeV+nr2lUaT$UUqZNcw!V?VIenmS_x6->>$8LD5~|;-cW#JS|K|AVsJ1iV40g0M zFTMrFm_5PXA6|{vQS3v^F4h@R>5cEb4#dD`>ud#!Vn4#q^m)o`@eZb@<_&LLZE?S^ ze@&x5wcd<{3q#L14K1O6#UcoodA8rGh)k;XFR!0jKa0d!ba>*nx5lGy8m?MajC167 zsX{FQIt$iODWKv8(_LR?SHP2hDD?{xsKL6XrYc4%Po}FQRI_YuYHDhFTK`J#+Q}^{ zuS7lo7fQl+ka{A3oxM;3DN<5VujXdFl}>ma$gA^9KpBz9$V7@3JB^8~RO;`pl+~3% zYJM0~NyA+@hSy6~CSL4&%Gp=OBXrJUuGqXCTndNMTtmStjFw^xs#tl|>+f4clEq)3 z92;3_99zEVgc1f>#yGH$YvPl>YI;sahnaVAGw<>)Qd0yl=tvij&&--KKVe&Wt~-^g z^dPDc_sF$*2*eyRFFEnedAByn)Vxp$))LuSum;0`cBzZSkZzr${0lg~R-G{(DyS(z zN(YluA&gL{Jdg<*`9RZ>w!kKlk?{}(0bLA};`#K*v}K(<(1pNoq(jdsePAaeQVn0i zvxFZqf%|e3&SBF#AAZ(-9kV&RyDGE_)^1uv#-QZYMk_vv<`0ZaL`rC^Ndh1d^hlG* z4D%WxoA|Zo&b4Cbl|5>NcKf0iF7LI0#4c46OU6)KRIL3I5RmnxS==ZR6%;sBT zA9O}}QxFougS%gZw(AR{K6D#Kz;Ua{;8gKY`=G%=_g+AIXoBofwPD|^$&`XhsnwyF zl)~`U=n_pg_X0%L0$~36=4^mQpsa+@;X4ss;1CHLCKMYwlPxtuYEqRjRIY9W_l@;2 z)Srq9$Z>l2b}6+L3&?b1%#QdKWvDEZ;P2-hxF#P?H^twDM@g^upQwHa7Hh6K`exCQ z&*WLPxVfrChMMM6CD3YlaqghMJ&P1nbs;^J2;zOyj#PKkSoI)XyGlN)2hEdQ9Zk+m z;dLT(78`F>l&j{kHpvRn8j-=_f!!wpJBvixdt2+7QIo5tB)o!&G`n<$2#pSCgw3(C zd^!#MO4}~m=3W8PacY`3E~z^$KZnbc)`uI$TMZ)Km087ez5q*XHk-5R+wC^q25W;5 z&mD`B%4E0PK`{x-5UA&xE*X9dfAec^y^Lv)lAYIe$x?@uDJ z({ySLuD1u!YGZoj*7;(3qtx4#HENx5U(_@v->XzY5@)E_1chFB9M0le zHT!IPiX3l?cC>u|$~D33I({1BJ42CY+zG%OYp!f&f8|VX?^Wtq zdUg24J^&%hSLLcC?yffDfzQS2@gmqY{DGDNtADn^z}}zw8h>9pTYx*fsfbX|;U^fK z@_asE`RL7iZ^uK1H1Z}T6r5EVnaLgnaO5l+U{%3SXG+1 z=mDDFKQA3BD>*{&G;P8|VQh;do(C3KRcCKmN>cbN7rK2k>C9|=WKP-&Nrhqu>V$mC z^#bZjYrAVpC%kSl`*r}xu?MIF^(6qlJ^U`CL&~49HW~@y=i6DO;1uV5)8eF|r`yR= zRg%HAPW=a|Eb?ns@Z-Wn$C{EkIxaWhkhwPES@ci?%1+^6-*?gIw{$brzjklb2xZF9 zeD7wD#+6Gmp)HwEbw!Z@!;%g`rF>Yzi*J{Szd*9#*?qI`QXI8yg03jpfRPL~1jO4W zp_2~*Hz>31xf`Eci7ii!(fX9d2s`#0#9uEC4ingaaNup(4cI0-ZF}!F|y|{C#R!>fPQ$v>%YiE4n&> zm1h+^HC3eB)|{A#+0M$wwpMSooX+be6)2C(ah)Ei(HM@9!C`By#j)p#?ppk+2x?W-oL6zP=@guvYlBC4=fxoNjYHe$G6<}>~Ea~V5R2CgnKBR0oU->Qs z8{`HD4;8DFq_A4dwYpx%#l=nKh;M79_DhQrBZJ2J9S?@#FfcF4f<#57_+TX;f<}aR zXg#)GAu%!Mu}XwQzman&2GH3_OU6ENM!>nHYAHywI$jOV+98IKen!yKD)c-)KiOh3 z@YgIH@W1%Le;e%AZ41G^#EBzTv&Hcp9sCFxBMG$3Y;66pa_*rsjiii>RaVROjpHVp zv16juZm|?V`6Pxex2+vFCQ>A#+0{C9nlc9}6*)d8Nqs&UEv;5|Qxji|wmNf_)XAyt zLRrMRgg(VYI-GP{N5I5E5{t=vxmAqwx<~=uvikWs&nh<)S8&op(htwTAAkw>!x7#{ z`{aKHB!G;YBtiZNi4X|bA5S};ui$sN*m%6&Uu||Yz##OSY5ba~*JKYl-^H2?sYim6 zLpHO&P}bgV*0;6FuDmy-V3G@6H0f;;nLxL;vG8MT1?YTTj4u5R#P6Ee_9w^g5rbNn@gKg1fXC(T zz~V!P5uM4Gm5kA@{N1%T21=eL{`i>fyheobp*Vdi$Sro=Ci0(zgoLJJ!~O2L#8aRh zpMF`39h3YKSOH7;X*zrl+fRUe@o11g9t*qd~ z!*b6{F?*PIeN$L-e3~&j+gk)!aI()^SrQ*;>!4ZcM2A^EacSsob8j-gwns)HrvGt^ zaOAfq^QU}KLI@lkkll1b(3LR^;hR?xIFS?kc^h+_eJX?e&kG48NJaXvN2cV`%F3wm zxpEzDDyrg-|LlPApLV3ZehrkbqoJS>&liJ1j~R;Ap&v<>i|qrVyHIK&l4pC?MQaa% z`=%1*3TMq%<}xG3=vx&^R~ucA=V+~Yn^AE!rmpk~@1_%btf=HpO*?m_3Dssj9O?H# z6gH^zP>`Y$wIa;{ny*W$+74N!6~i{qTbzlgi{HeA5)q8+0TB#&WCu7T$e2WI@>(}_ z72iJmfrpm3!?E7224-0qnE*H}#R^?sF0CgeAr>PdMPmjtKc={!%%~brczASc;m4@x zs~7`(4BaynkW}EWDX9*Qd=XU~DEqkuo-*fL?+2tcsLHZFm9;vVWwiNJuTsvac|RpF zID6xUyt-T~hkAvJWb)B)7mhV1^cr0*eN^1EX{`DBn8BrHGq3%T*B5%ONkzUWCR{Cz zPtP5Lc_x$Rul*d{&lQuo(u7kFMkSb|h!P5Ep&c1ZqtQD9Ho;~o+4K?NSar4ra|5AkwVHWCK;~?7#Anx zKM@v}D^4{%&O%9vW!04CUywvvguh;D@u8Bj;OKWAib3K?99~)!8 z=eIr&CRM4X=7Pj3*5f(nx#H1l*}EscftDU>F>(E9A_4&~AD7!)m|40ox!#Y;`8qZ! zk2^*ZtqP&tm6@L4`nSdqwm)~(LXOr~BoymNerHI2oF$&GQcVre*|e)-jL~e4EpFxf zQ)}3H14zbr4kgNxE5}00_FcOVjxb$f2dBxB(%H6iv#AFSPj)H>a`TKmQ?ZTFf|0g= z#-|{=CcIubtv^(2L&9bQUsr?mGk!S9haTF$Tc^cowZn@*{;LJJaP#mG3l$Y`xh0Ab zI$Nkf!UIpsm-CFHSTf7S#igmKDf4EL{~C=A;J?3Bh9!UZcaxkZkIjhUPGNeC!M7nf znn+>oQ4quEr9-F<@vI%jmmjV{6v21BdjW$x5e@IY`BXN(64#l*n^*rZRbov#X2{M; zLOLqHyIqWu&;(7w6HPd+geMjyH!jp#nRn;S^499Xx&1g(hD=nZ2=X9pTJiY-3_ZF3 z!#i-DcIB?;V@p1in4*FV#FVS$ksu#HU?MC%kBZonVf^TK8P+D?GlB_jJJa4z_I)Af zBZ>3`%*HZeVqzVhuc~F5{?eY;of=~BR2SRp7!1i3P056!=no%?%7dFd;quztG79~y zYjmc=>-gu)d+2Kx4sa_;v0T8C2eLHXi52L*5AiZ=@D!1FIE|}BD`>2$y4CW4tdw8> z^YWVoFvi}QigkHhx{*}qU~0J)qpYwqn6)BI*NE6@s)|^h=H`x-si0kdgu&S|9pzp< z-JY<4`RhmQ;bC^zVH^W$5I5ZCGgZIDhlM`VL#HlCNaMw2HNI_vo|z79kAm2mW%i`C z$xE$445I1{hu!fdtvSkWJw5px^+HT2S$;SHulKkeQdA^~O<{nlBhRZm_rs9cPoFHv z;ZMZf-)=#*q~zY5nsry$J7tpneXZiYw^5}BHKXQvxGGhG=h;1LN{fJoi0$PxqVd~D zbaAVnuXd&%BQn2Evi^R@+Rx*VvINi9(4Qj{1^YY`k(KZL6u}p07j{8=zOsJzWp|w7 z1vH_YSS)c*WqE?2@*E#rKan2u;G(`%WbW}3X6IGjhG9V}X(Z#cf}^+}Z#QUhYFoXo z=eugFwcV`fR`VHId_{37VK8yfLswu*4r)p6nzf-+&6U1$DqT&$sJna1Vje~v(}$Av z0)O^Ar@fmRxpu_n^S`?q7r!jsVAE22JbfDsI_Sk?94bhhJ=7=C5AjrM8h8m)HJ6kh z{eAV(7SHgs7AN78mtID4J2!16rVZ5+VyO|e-S$Co@)r|NR&y*Se#Lig3qd5^^Ff99 zWSW1{zUuF*iL8u!CQ;2GS3b|7urvDWeFPvNF0gR9H($r6#Was-j&-^^YCio_CWId3 zf5mtHA0gNHd%3Wd4~pljW8Vk~g(G7PX220Qrz_jIe`2kOX&2b;?_o6?C5-JYganc zl}!0mpEOmcx@I)}?i|Qg>QbOTO=i_l&cVTxKEx0M54oDWgGh=bLguGzRIaBuH~sjK z%os=*mh59wqGbWzYRaBlmSgJ0672ndJ@5t7wOyrlV;DGQ2r)ICEJG?SR(nzfK@l!HXHh* zCkpX-AVO_=C@MXIWi8Iu@BK>Xf_q#b7FQqN!vT)p8XWed%|M@nwu{kxc9(BiwzYe& zS-23tg+(BdlY&~|ao|ikK_rL6@5K1{G3h6Bs$xu++d_-Sqy1+C>w-<6$uaK-wp(L| zlT~>OJk4X)h2elDY@n3^>!8IcQS*ypZ|hXK_4ApL1ptY-DE}aRl1px-vAcZDN^PdjqJ1m}7oq4t| zJ595)SLh1pfZ}3MQS7fKmoC5X`X2C{?GRFfFqP5vgX$ijCH0-oGBFBu7c{gYb({aJ z&Ph;dWk;X5;iMZIa>;4?&IIz8rH5**)eJj2(l}z-wi;A{O%d0fxBuK~ie)j20c~D{ zl_DA*%rH$;gnxTn*j)|Z5;+X*b>=->Ak@@hZ?!O9KCRI^zvt}*EvPT+jfi*~KtPql1!si9oNtYoTGL7N?7AEEOF^@c~eExZH(hoEGJ0%tJYG|RgP zcq|omG8Z>Pp;TwUG}creL1po$jp!*X!q*ZtEm7%=i2Tz<>4uwAu<*+b;{)|B3#<$1 zRLL3N(-gD6EW zoLMoXct8~55w&jdl&}>DED|nCM&5d^z%A0+C&4Z3IDm9vd}a7~8#rXCd7IssL8h6r zSK$D4*Fi{z65JkPKlb#y_|3$Ne50Yk)xuOv47k++4n!od2LOsn^xv?hf!LO=y}4Cw zXR^mY>w(~XoB&N5cj>)za}Gn^wjlSm`r)7j3qXsFyUZ?j@Yv;P62`Zpp~P@*`rbnm zXPaNJKZnf6biBR;GbMk!t)$d~98*a%B+Q$)EH97D4%x#rCrBl6Hzqw|!Ya)g>1As^ zOY*HU)IN8Ya9mz&j`U}TaM)S>Y1mvw8Kee`_4{p=%7dCKB&+@F^C_h-zo54lh;Yuq zy361bte2XGo{<(6T382SqMxhfDE!$O6E!yIw*ABHw-%F2=jronOFJew7g4hK@CmR4 z<|OaApSP$>@jhpXv14%wIG2|*<2*ka7@S(g(Cy(AmLrLYn`5dYAL2okq}Nu=(E1c9 zJe^|_%gxH8&>XGY{Az*|5T~v~Y5dg5u`?sayu|qpdN+1wI9)}5dayw&V5a5QI$uz^ zSpM16u>_uv-@VPAqp5&%qicu2yOS7riC`_tQ1x}fxueMf{8)6#y6tO1%hPJwk~XC2 z4#C&pX4!(uKB4}caeIdia92H-ofz`9hELG$m*z7SE6V&<*Da)(YUiYg+OicElb#DTKu*iT6 z$KRuvyfkYXX)&}XL*(*umg4WH;N2fvS}(tymXe)}6-%}{8n?vV0BuJcjQxtR_mwJS zaX!qh;<8ZX{r7R%J+EhDAoYDQGW??q1fxOjtH08(Hh4v&+LZ0HFQVdlNpok^UP%c{ zE;He-8Bea@8pfHFH;5P>trc&N?IlZBNxEa@^H6@&3$0~jbolG>4!^#qlh$OIsy3cN zfYhd2q>(Q4O)~!LQ$N|wo%@*PZCk-PTNGiFjHJ%BveRCB*u`y{!@k{k}t2AoI}_ONSLdZ1u;Q;#!$j9#b0K<*4QoE7wq9icd}Z) zsp678mzjNRX0wEUdb|ijair#%zV?Slt~Ry(LR02pj&)f`HN0P=C}nH{XzOczWcJoa z0oMGXM!01cmC|QipA;JwC6txxdD-aF!MDD#ff4 zGkv=s;97RU4*+!OS6ujWlw_4!T8ryYmMs@{$4+Twm(!)Lq3n}8j5GzP^AtlSsEb2& zuy`$7{={Dixiv3a*s3aZAhB6PzVJx*Zc2kDf`!cqlc~M# zv;$)5YIDh|35$6QUW17wrplPO-Emj{+|#b*h&z>-Os*UwrLz|sWt_i_NEduh|HaJL z-MshZg1AbM49hXNaUu$aa;mY$#m2;FChx>YTamfm{V2PP##l)5Pk%@mmJ_h7A4n!&b=<$+m)f*SQpn3%t-?MQe~lpX2#Q zF`E)6(&Fz@gQ#a-(T=eh%D!Lf6l@`Ee9?^x%n$H-H2Li5jKuwpLctF8?mw!*2gkoE zk!PODfco8?tqcZkDfZqzPM#43d|?%2Bv?^83C?8iC<6e@jc8M$ojIxSnU@i_W% zGo_pfW-3n-)G5X#3idw=-eWPIrk-w0NDs;=cO~BhK>L^5g`3ML;olZ@$0X5KUjmAS z@^jNQs4-8~o?d0IK4YySs9isKEB}(G7EO98OeomcTzR~Q+_ta?!AfCwsow6xI5o$n z)HN%Acs&R%#`aXrzLyWzV^)qQRoKs_)U)wZY$2v5p; zOb(Ji_c`g&m8F%5D&qW#w-hEk%X47Wl$4!vreOFqR!hlSLC7fRS^u0IS)c1ZnmZt# zl{-GSnV3y8m*^#HDECbh8*S^{FiuV2Rxm*=^Dw5~*uivE9lb(E5BYUU$v0m=UNItY z>%+`k!_>8p?xv(?>Nx{3aLn-;PQ%wp;$+UH2bvtIvE8c*)H$ID2DEMq1V>!4^|vY| znQ30{FxxmU4x;lJ)m-TNorozU$j2=R=Mu zt_Vxk$s-!aa^-4@zV~??`F8r55hd1|bq`5^Q~74;T;T=xY@N?o#It*}$+E#&r0VP3 ziuh~>A@A9CcOSzYXRc!b4Cg(8qEU*c6abJkCvkLZJA_cUOIqB`bJXtc=es_)f1OWk zSuT)Gw2|PlV|vls+^mmZezBWfff7_(7|`2SvFa)C6XV@?t7&S(Q40=pCIh`1mqAu= z@Y)c(-oLOQ9SZ{g*ygaGo>Rh6gR@!y2ANHV2kz_4nKa=MdejX_Xv9rFoV<}02EOWi<;ZR2$6gHZe1R|a>2X! zZa0v;FToc_Y}WDf-MrjL!mI>x;#qJ;p0RL>SUew$V%(k8aZm8#nH#hi@3$hT^glm{ zY6GJJslLJ)rgYCxW3Q>E!=W4JF=~Oe&6n#pXYmoPSMOId@)zmP9RqoD*}tR!_BZ z7s@LBGNH!Uk&N<{*T|Zi?Q0iJ5w?!|Oowlj{Q}|Oxb23{@?+H-cZHF|->){OC8qh- zxO6D;XGc$sW?^-ZN0bNX`mvk|5cn)|uy>eh0mK|_?d@Dm8C&7E;EV4U&*Z=JPDJlx zgd^4|thjtafMwr9_9GjghN6G-IZ@Z?uSRBKN`UX+|C1 z0YOGo5m)yzLwW=4zRD>95lCD5w;DBuk9(zWAm|shF((|B#rlch{h}E9Ge|E7pP^)& zZ?~Oqy82@}*9Ev+3dtp`&DbM&jz!Q()f1QXX3DNR8OMtw0@c5vw|NipOs6)F@%^@b zG%erDa*O;4lrY6_1{3&ydwvD|xDQ?v#pAdXMZ`fnEp@~|G0J74Wk8fLpFApWkj^3) zRqM8lU2Dt3p?@@8XQT1PFBbv-4%oe=qcbRg15v9?Zl2C;rZ?L=iEXt^5FCx}wF7dW zA~ZRvZIuni^lG&wG0-ZW9|`uLlx=EwXC`X?)bs8=GnN%`{4}u{Lf9EDlytq!LC{H6 zx+41OsnwfMmQ|mj=L$nL%#PcTfg-C=qePou`(r=Osjyr;B~1A0l*RN|u3%r&mY=4} zr*4%z2wd3>tNE8Ru-q@$AKv+n1YA8{u?;QL3ExiYBjE?mc`Mx5;W2EJC4#(!tPEN66PJFKNVUf-6^gvlBW|=v$BtOIt=N@(O3d5y z_Xp;{rRC)%YmfJ_&fs5SZG!C?{3Hi*w*=#)BS#}*o@pHbExoD1xdQ*Uis$L>j356R zz|ViwnQ;;CN`auv{<-u^^u*L++x>HGgcqMEuzM_ki<`+Rt*3*3UX}!W~SWyBeY0HVI3gVcU>Bi4i!n{R% zf50HxJ^CC zYZS`b=GyKqo|09y@Y~e63viVblbkhNN?(tWY3KwujyEeJo=ksYgd`O#2VDb}G%Gq;4- z(m&6^d}kcE6>fff5PqZ6w%>VW5BV=ZvZ3|>JlTQmEAV{{R7cc!S6uvgA1rsPX|6%U z#IjxBDI!WhZdeuMOb~32u3)U{qzP25(7-9TO5*qGNgD$I_b>(}>!kEm4_|Y%w25vh ziOK~=^Z5SCw{fT3TvQQnR*xJYJJr{a+oW*kd~rKGHU_bmT8s=0i%68KViLw(U8(q| z)bU%zjm4nv?3)O0{0j}g-`_51M8&Sn*{zlHGM+jx_2I2n-^oht!e&@&Tm3eom>5YI zR{6-5Gm9TF=MOCuZGP(~Poztazr)2E0C%`e0K#vWssZ#0Y+66qR~ikPVLe3yKcZzR-+Q!x&qCGFuMtyS{m zLkC+vS_1Ie==6TJCaaME7hAznu+Oi2J|d+RGIX-vyJM+-9-#I82EX(;Wgj36a8@hu zdEr^vc#ga7d4~VNQ~54kt=n7n%+33>P})SmWs~13P=CJH-qhws7c4XQ?$YLx^8)C0m ztVcv0MHL)_vm15AkIcPUBlItPS8n5}Dv=kJ@Ulf7{N+c2ygx5c!46X651(#~+OMc| z^3j-qM3~g1T0(gx!4S}&&lLHpitu|ozrrUEU%G|HoVjMDu*T7c`Q~y64t2fmDPS^Ush4VBtdrwQvymIOIVm;|4htWPVDiCCq z9F~fmqMzy7$v8{jZ)|YFf~Cm=*6`7d!GM0*(Az|9)Oi#jd_ifwe1_^SPTtT!rbxO6kq>}QH@8zaCf0UV<1 zyxk&o8K?5#&AEQ2itx#g*xVxZC8qPDobDK5HG1`0Yi3D|6cRKZ8x);eF`3^htCo&0 z!54su3jYdwhpUPCxIns;|Dvg}BeRHHLG2+CR(2hr$wWpfmlrL_d`)w#MpXXCL?Ye?>kIhVKXX!|Iv3DRa$ z(nV@k4+^xDG#Z~C`X0-!fC6h>QjSc=1oXjY4Y$YhdP`YXtx6I}K+mnteoss#Lz4t# zzwrwz`EUT@A=vRbCoWUwFTZ!{6)4Kk zS+7lc9K4OBgKFdH5C|l!1wCw{SYc%6z{}^7?byXJnOO}CdMv9}gt<<_tn$W1f~9Ww z-q%W#nP(8?p_7=gf_sC)bJSjPeV3HJDNhW=M%bS+Io}!j3}D_SHJKcT9P|(s_Wy;7 zwop4;4Nc#2T?@eWmRr@uFcs>|metC?{CextKx6htVYRi1 z7U-fgQ!(+K?7$9Mu!zlWppEU|skvcRIkDS#O!wA!x$wI|A_*;{l0w*x!&F$-cuvoH zU}*{}kkC_84=Pe~2uGLbhWJ3vabDGd_ha5h{Hb)ZbK#Ey&sX5!;Vq&!YOo2TNB4v) zEyJFbMTWxA*YOGO6Ls0&W{jdHIz&oocjXXL>aFiTg_8Zvam5d->1QpN`8b|S0a5E*VUHrtNZU6ujUrJd<8m(LB= zipuhev{Kd&_FB%#EMm?hsTE-HdjI5XpBKGshSJ+U^rAMqKS|S_H}sKbzG+Gn38h2@ zwL-ZyU~zmN%9S7!K9T!;dn}fI{rO}2lAt`ps#qA8qRHWe5eTTmo)4jM@66(Eb@)3Hjuk;N5hvef z@%RVDW8Lh}9P^zrc5fr)>qEE3PcF8hP(J?5zijndh^~&8*n_DgNMJh8q8SS6jFBkXSv0Efl{3W)0TNrXzi1ervTFTVDI>Qn5&~ajww>Mhji-@ zwXL13iL?kGU0i&Oo35Xji(JsHNWi+GRM7MGEv=cnQqP5QdF?AP(bWU}QB)MrZazt|Ld6d>#+yS%rQ#)iS%I%^DX*K$ zT*LMSW2=m?dMe{>US{WQ^Um%msL&pv+|tLUzHxM_x+`$5|VM( zE{WMlws9oalcR)cTROMCCD#8MD_#f>S|}r?W^VFot^Zo3EnENYrn~n+T(|kXU%qO@ zJ4+6p+qR1d_@<*}T9JfQ;CwI8Thb``MY}ujetJmNC*Uj2>6^rP+cAp2fDcXZx5_sp>m9$`}|B$8`@8`v3t3T{h z`mZf@Ogq!vrA7#-J4v}t>W>-NrEs?$y}Svo5j9g`K;jAu(vH^G1zT3(K2i9 z?TzgEyHc@gbPXnf;;`S}d_rdmnKj#REKCXqI}U@J3|Nt|7QxNly+$TNu|x9BH12j! zj&JQ)tQn802Ieo6#t6vMGZ`M7JCKs~#xd{iX$eumME~LMF%P401DF-X#+ET~P<2A% zsY({5kGJNO5$*?eBi3x?nj^P2+l@ykVJbz7YP6 zl@{mH`enL_C1V{ttshbrcXnp^AT2MU)Dl(g48HQmc(`bdz`eB6Wx&;LhH)B)tyC*H zLRL?KHqo(x8Ry`b3c1>aU-n2ApbV;+!2Ozmp7(sb<^cKi=`O>$v-|J!eZYUby#db` z4Wh6fOcbdip}t;5pRrjC*jXu8UGF$u5&N$WklqrZ1AmH;k6%*pqgmOl>nf6{X&TmkIxKq zI$P4oUwEXj6-DuG-uNJTz#wGAjNZ`T;z6Q#)U%ZApxv7MXHCY&KGnd!<%qOG)b(m- za1k?$H)`yj;Yzx5g~FdbC?S*h`^N>k)BNJYqWjoePF%#inS58?qsH6vhnHQgWC zdOFF@e=dQ4e{B3c367h)1zGr1ZD7S1rv3CXi&hQAb4WZeP)ox24{C9W>>Lc1JEdSE}5@_&j^mxR=)A^Yy-mg}Y}qeL%`$MFpNuMK{Tu zx8xfsvT!k7Q}7mI8Lbu+1cZ_31b2}n#T%4&&5Ql_?%zr>GKSzYD#bma$@R;Z$pD<> z4#Ozwl$5xK_&0fxW--k?`p+afb%qqNFQ5KE8j$!Ie&qR48honw+H-6=N={xMuiIJq z_@^+1$4(OG)DXJV?5I-|=J6kbS#+L`3_kpX#7;f1UiC=ZY@7k)jm^eV7;e)*lfqbg zgz%{eQJijtQyM-7t8;E9wU!BIByL|1s9pmxB=o;;5>amkk5A|KW zC4=$J;AP1c%h>M;v3e{%*QMM&S-hmrGLQNBqO|){Y2<;V>8UdX{%vlj*sSZnGAf44 z|NJ@I-EKRU%I1T`OJ52%ua9MJLvbR}pMtHsySz*ww}NuJDLt&bH9DI;a6ZJu!^6aM zwqMrLW^4!$Mb8K}fcB9PkO(B~m;KT3e06w=bC1r~c}p*w+9)u;5@TJHpG%b{@KaI% zDb_^RO1o!^#qsgnnbiX9)L=7ZbtU-HTITAoTcLvzjCqn4#=SS)2+}zM3nc)D=-^FUmPIv_!bF5-4>IX~2?U$*{9Ce@^kx;nDdvU!~_08X{)NA!JXx z@_4xx5D&5_Z%R?&;q%FcdJewzOd*+eIE^RGFYJxbR?X?bmzBmFu(~88FIzvDZXpqr z-&y(|Z4Lj_bdLM2%Ecg-Dw^|n~1N?p1^VC^L15rIHM2vWzz zDsnR-X5PVcLb3w|`+6ez$wjA?lPM1&X4V(5gr`%GL6JBfFB+^Z1|sY0g@je!{kC9LTLw zzu&_lPzaXwmAO{{jTKuPho6sIWpLZM6g11VSdShzU4Ex?(QW$XI6JyZLi^U}ihjto zakH=3@8$*~+N33yw*Fz*y!|E3-B_P5uGxz~!%BJdl2TTUKhvJ?6uX^B$s9b#!ad4z zgRT;!paYb9+g!Crty}e>;%bvn)R|vFFbUya%uIi-I;1^xBCj1d9mG-2p^7rJhgVwh z%70t!(^)}8i$Y9r&~y>5L3{osT@yq~4|3G{!JV(V<3_~{ZncM@tdKr+6NG2RiIHI` zW71X%Z+(pyn+|zWsxoy%mDT&{GLRfyY8ZKbq-F_jS8_{TIPQYGO+^q3w7=lx)sMN) zEf!=g-XqusZSpShm(wxxS()ppDSXHF5GjU3FuWpj>dig&xqj36&@Ye`kN!;4(7*uC z_M-2ONTp*oZ$oVdycbh8y21QhR{$oO>>LYfhtnz|`wsne{>4h%FHZ8}U#lIJUegz8FB0-KMGX-iDbD#nf(TwHpK#-hHRINLRgDK4=mOQLCLw<^z!+ zQ5{2Brr9>uSLW&Ue!Kt~4JYZ;$y*)tXg=AvdtrJqT!qRX!kZhoEgc1^; zoga8joR@E|>yL6;>tn5(N2jGJ8}G&e%1*i`V0LVB`s&3=&FTQw11b3*M%_4dxkklA z^rS?+T%LYP${~DN;f@TalwchDhLZPF?N(~pG@m?2_wAeK4^hCN=w46(vv2es`gaNe zZ*HtI0(p3u>(-ia(wyVx^>uSWP2c1cD+dEcdR~xfF=rKx4@qwHtr5xD@IR02CZzEc z5kZY9)9b5v>s<1uZ!;exh$;1AA2uJJtSRxN1_#Ykddo59oj0Z)^xqTBt@m9OaV=xG z*}&?wf6OuiM10nB44X~SL5n;ZjSXduU&0%{Ru?*2&d$^cim_9Eu2sB$XDvscAPXlkok=gfC5|_f*>AN$1 zz)$KdKaIx7S?@v(e>}7gTheSL2+xI@7`BIz+8Bcp<=r1P$%Tljszv_E)))54g4`?U z+d6*$S-w;Fos|#DQmt8NI89VoAM5bUt5|YTdtwny0SDUvI#D2Z+rHlusn-3WnMsLK zlsK75XaXd;o`u&8H$9c^i@SqUWk$40JR{8@nopLtxKPlO>1J9+S!^Tar)qWSqjb>h z=b>ToQsZ?kxaM_zfM1KD@G3XeGZe$$%OTjyNG2XDdf1&FLUXr83@tttEr&^{-ecFJ zgb@E~2}$$NM~~B>4?gQHnAxkn)7!r+uD^((l-RoCqO80SvYUd@mNi zk<4ET{%8-dn9RHN^VvPLudJd!uAKin&S_vr`q1(Ekn^%7@87cB?Jq2;WZ-so+;Zl& zh*QdKeP_=0GK*=uOSi9lFC|MC7W<`KWIbMdU*m|3kZp;St#2YjkG{-`UP`BTh9XwF zNz{S)kD&G{aLh%SGoXpOv(3%h^JEpz?l*M5dVgyXtKDiQt~Dv9-M_cZ(~kDriVYW# z+wLH(GJf|5Zk3+g|)m^aW-X&NFK^{5D>Y% zY{J+QYJP!a)#tfKJ%_KfdluI`M@_0I`bwIxk_vV`0(##^vA7nAqE?>S$n->zWZaw` zUf#L1CmAJHM+P)1O!V?`QwTO{@bm=)Ak6cbxHf*4(7^&zeCH|nH9B@}LKcDrSBO(~ zEK4f3*LFFa#lQq`yF@*CLZc0it_ThN2i&I%kbOO~9P4pJ`!b8LI8;jeKZO4#Sw)^6 zz3es5wvyQ^fJx_alj7z1pe*iaaY(O#9sJ@-m1?lwFo>Cr&Z!z?2dmqZxyiiXo@V=7 zUNLDp-4Zu9W!A_IX7DsAn%acZ`5q;6I&lb$kdi-V*e}}9>Cl<*o?AQw76eWZ{x8{( zXV>YC{p$$wXAtxM)E1X0)+Udyqw??{PIu7{;@O@Fy!#I~pTO}4p<*C(wdcltSD-PY z8~${=?fC9dp-*%O>cNiuV*bjnJ-xYiIqY-cxSQ&aC7nZh|4w*#=T}Rvc6acF`ycB= z4XXX?sRO6;PI6I~HI^vDM&GB1@x;XSgLx!}I3b;!)9AO>)7TGsv_15gfIDO?!^f`3 ziM6MiJuE$7Ct*a)7 z_))J2q{QqtTDXn^r>kmPET+AMahvh_(yw7 zUaG4wf+j`nUvjHN>Hln4m)n)wrbJ&R5z8FY*l=r4 z7}t%7JT_9mci}5(Y*oEDcvS?Q z2B{X)i}I$|Xyb2fqaQ_bw>*71uhWw@;O-?a!_N&1@E<@+X#4W*h{f;Tv8ETys*A5f69B!hX(Td?%3UqV*^skN6CD zm}U`1DGFT9l7bFP!apbvN>4{dx6ts0FQ*P}?`|nZ1upsAheL@idS>3;04J#I<@Z3=2qp?7$kP!bKLi^|0;1u^!@t zO@#u#L7Q3uvY#Cled8mo4&eQKxbqjnw>((1k+dANLgA$ZEq*ULG9(!Z`m4f7tL*vd zMr7Cv&r(K42P9gJrtym11=ZBOC(Zd<**}W1^wd|~;d-IfaphKG4_FBrPJ1hXz?1vW zO(Rd%{rkl!{- z)R`32nBr(R*_vpLL%0ij$IzB*YX_OIe+k2b(?r11P1lzSd`=!ObXC)AB@2z&gimiT z0H)HAT(zicZKsOzqjdvqZ#5t!ZTd1q9<~Y$v}U%h6FYSnVJv-A(w9|jW7XXs<)(w} z3w0L1pZy^r(&i@V+$n2HsG{AfH1soHpVh7)CmG|Fk5!ftv>Gr~_K1tCl>L}hMKV3f z$)gofcSK>6>sB7%8R!;I8{g1psFE$Ma74llR=gdWcVx~79jPXZc}ULW8*fLoYB$>jQ(`2uU|JB|iv-S&mw@57HA@Hu*(ZQm;e%;AL(zSJ zeE_rn;ZQ09QI8@?8^H@;nuyFiDaV>YxlL0Uti@Y?>qY7KzZ@>kZ+p0=4hY#6Iqe2N zUo`B7Ma!86iWN7y*(mo|gzSF5}U!L*3+e5|E zhsd zzMRbT{N^7CQhuUW=m)L@!-@hiTZBwjx7P_`0Y`sN?XT9n6m3ieInKur+w>27Nvw(R zkJ4LuDr{2eCB>*CD3l~wd~?P(IJ$0Fd*4Q?O0foN2Pgdz`nh1%iaT-7Z%-v^&}2EG zZ~{~TqcD5&eIj5gmuS*dQZI;-#S~)Y5o4#f^Bt?N#i{W>9Jh3B#IK3*iYOW&PpcUA z2QV&H_|pdOCezwv^^iie%U8D&AlzNT#)G;KmZ0BNK7h6Rkp>B_85PP0{gtfd3)3X! zWZNtN_gaMpiZT?P(k)Sz@^Op%%Qu3296AS9YMe3E7sP3VXp{1S{Uw39$O#| zw@T|79OOjWIFNZITQ93=C)8*rGljRS7Vk|K_ea<3TwQ53*9_h?oCr<0^`kUDhpXS8 z<8wDEN*n1( z8AzTvt&p=FM^zb#?AvEddh<%Z0YzidxJ=_sJL~-mPLC3#jk%rm8!Mc*yko$N(^RT* zJ=lvOJQ_zwC&&zEnkT$pN@YUAs34t%ehrQi7H(-NVDiY@xtY8`$B!UTwA&$KYpm#S zv4DE&GZ~84Opa>3;55m8L)U4WslMFP|J8kw>O06m2L6tx0< zMF}F@F17)`QaRa0C&vnktYJ*ZOYM|3(wGr~lMW@y#SXn-I#u=jy*|*+ZO)#5$vh-?Ph6AVvBdU*={+J37tAbyh7lXZyWQkgI7Z0nN8xf) zQbG~C`e}poTnQUS|K?wz*`&48nw^W1#W~%N&wHv&*5ahV5s14?6VK)9GfOPJqm|+n zn#xM!RRdY}K^*ki{{+~+%tgZKqFxC#%HTTEHJhPJWgYLs_`uWlX=?6QP}`n;olV6( z1>vKM18uKYC&^TeG0)pzm%zEP`Z5*c;;PKa>EH1^SfT*{*0z6qOVH&vkzXC6OYLGt zd{Lctf%3onVx)N|*Z)SPL1?`X%*fS5L@;wQw5zH&XO{b1mXmvL)RpWqd8f@uKiU}l zsOPuW9*6rXJ79D)iH%l#7cI~aK1qDHQc;{`Y_o5>4&f1@qms9uUFdn|X zdx{;S)KFQ}YmUciyMK$xee)rp?!{4BX7m@G|7sD-U7z+PRs|EL82CiJe((Mht$W4i zr9h#ZeVMyZi^ZyUHoLa@bab=X1^;!wey68unSm2&iWb zeJ0ch9wl0%w@msjvcPkbUt3{~94av$-ADBx`{N~}^i})Ji zY-qq$6x}1B{c%Ie8#P_26haf%`7UyB6L(sIxTKW4zl4qRS*Xj}?`*OPNI>fNL%B;{ z_29v99L2su?#1DGOj@Pi2xd@p2HH6V)4o}w{B~h*+MU-lC-&03w&;%&pAta9KN?9t zOND<&TmARe`kzzx>&m`u4P1BXuCPD~qIEVq?`iM)_=>{3>fqLO`v3m}eHhyRr||$f z!vB@-?Y~p~@&BJ38)V%7b!N7A&pK%bUUg*^iuEoMpVOJNa*c?7ca9X}x}d77*{U)2 z$Cl!|w${yV4=>rBp6eKjB4iseYOmI%7kxmm6|CxA=$7s1e3@x`mmVsd8Jv7pz zq9U7}`9HG)I*eLalif{7E`{jJXf2nZ;8J&Y@bDW|D;F0RUS3|s_is*-$b^FY!D-{$ z9qs=A8Y*@Ht)gv)WYxPDeP*n+vQckwBc)Cymk`;yiEJ)hBKo_-CGvC&i)eQ=X2>y3 zSk~0D8Eh>MD+Ok1ST8_;e!`eDChv`yw5T91NAjAHs2rql*;Yu}-S;JPX(Npf;CsR` zz>al)X|>xew^EI!5IB!sX6usmysxyFCh0ysR&6dVp&eq0tSgUuF$_MAXI0I|Nwcez z*4!dKk z>F^i95igDh$}js})gP*imT+z^RQ6tNkaD%=CeY5_nXwv6Pae~I9;Ig2z^ihFEH}5F z6`IKY;eBhzS78pPnhG9QKvrDjU+oQYIUV71$@Zq2>Z}j|2aH>0xwQ*-o+@4r@Ytno z@n&pIzDX2j?Jn`5k5eS8J~v$unYp?s#`qHGc@Do2vZ0%Kvbx1QqDo~hMGK-7rYGDG z(wSGg$)Sx@ws$(PFz^~O>*Jdq6?5h+2{!5;@eoqw`?9qzv-78)4a`R=2dVsX*1<{p@sV|GWfKPj15eXR8 zD~M>SJi_$^vgH{q)mrc7^jZQ2uy{EA#%aWgb{FRxNzHZU196nG>~&#~ zMj4}J587#QS~$xe?bqsdV%9jE4eRhgPq)u(+)VIUa_i|U{34cHWmh=%DErs>vEVNX z6|0cJ*d{*ymgO#Lgy*DK;B!>n^;g!ilt6S%Hs(W)k>=*iLr-~xm~rh22n%7%c-{tm zc)vuZ0CA?uTkR_E5huf1{fcnv@c{w%+`6Y?-BZ2^p}T1>nSnd+Yh5bnQ7LBYA`dV3 zoao(_LEpA(jb49mpBubdnna!HmSM9^ zk4w6AJ-3`1SIwIB#rB7eQK#7zsOmDQbS-wQ0(UWU=n{dWyIY0LUZ(sePl$c9Zd46t zf26Y4?>fG|X~~CRu&v>3OBa6tD;DZIs#;!&v$yv*G3`+%2!&2qP{HnQF#GxWa&Pcc z}2!XfF@x48LcA-d|172icK#k9g$kR?*GJBb1;=-qs z3~mW^rmA-AR13;_)&X9QwRn5?weEr{0~Kz;<~;%?c@te=Xih(;M~E}|>t{ZWvme~k zUWwUcPXD0HX>N_5rH4jIIf@@uLkTshagfmy?^IVR$3K_I%>R~6NDnrK%PScN0^$4d$297c?CPUvXsY4wwNUR+ zV2rER9R#T9G!D@DnllCO%dmd7gRNWoMAWf|YOEFKT`PPEMqBvIP}C>R`U}0wgLj^4 zK_47K@tSUZS=yS%^Qep@)Ha_WUEePn2GhKFxTX7*2l(xCPyWxU*8(kvYc+(dlQJC74qyzcx zqW&SH0wA(O6ecAE;(oaTU5F`ryZV`&?E>+agsSPKet9eO0ORSz3)%%c4#@S0k7eEi zV8%X}ryG2oi^|v=I^Ll(Hh*&NXstFka4*l(i#I(Ww{T!97Q4G<1ZJc-{E0j<;H_=B zi33S+IY$dgmEu_TCQ`P||D-x~)}M$(cIjb~q#RF@@gDWN_N~pXiEe?< zH=SY^=nP4CNf|V@OEVVD(2s3D%p;{Y09&&uG*UXvwvoOdP!OR98+>-;po{nDK{hm*1BWR(tUxv9U^C1#2` z^3I_vEQva(U%)`Jd|E3+3S&0y!g_ma3xA6$eh4QrQ4qQulozZ*M5}M@+pu$ zN4e}*ZlbRJ=UkccRQ1dd|MllcwxjV)&@4E;$d)TrQ~%cYC2 z1A`}CoEct8nw01$QH}Di5>R>8_en59_~j7hV7M}PqpL?#vNY& zuv*yHUYg6{Er}nT+K**Rb`ps<^bx(Ike8(!Uv1d;yoWQs^h5RCg*^*IKntta>rFYx z^E$sV8VHN&f>1~uVAqqDhO0h9=6o)HKdpfp*ZyQe4#Lbu!Gs%SSdJ6!T@-j6xL)sW zzIdEdJB{zwvQ3=)?b-~ttlU3h!@Tsa-9%)BFTw9bx8X*{5H^6qvFeTRsP~UsKUWLd za#y*xA1WjZJ0MTO(8-43(7rY$#qkrm&I7GhIQ+&5t}zOMGHYQyel3YP&;+I2ieJz@ z2I2e5ApJaHp7GNBl3FLZ);C+;(<4E~?~-J!X(;|VSv>~r{9s|6k(j?0H@37$Q?k#c zR<&4F^)p@xPt_FbW-*UP>8uGVpvzb~Jnp&6dW~i7RhE)0aCNtnWHYaAb)7sn6OO+r zePb2(x4GFPDv(OLIC5^5*h0v9bf4d?Y2$evQXqqY7ODD+C_-A%q( z)W>LA_0IU(xB?W~v=S8Z)9%J%&?c~ckZu&l^77;J`3qU|8jDS*{;pvF zSDPOm9a0n*Hj__A$}eMfrbSQ~>PtWbh+a%E0dIcRG0e1IR$Pjaxtw8 z;hE)CD03QMd2f^##2p1xeE*X(R0i`6OlQumX)RZ_tgwseRY$W%AL_H)MfgZ4d^@w& zyoPX#`M*uru>P-1*kEc1Z~SMfB;BtulAlWs3<-F+ET`W*5}c9~y!m&t_AmP7ETaPT zQDgmiMhNlW1mXoasH&xfKgpt64)H6oOY6$3I~TitLln3gq=-bp4lgfzvA3)F+=_PB zllpr6n=a-{r}tfZ7|(#GhZ`&sNuwq5-del|qA)pqlw=hfyUS598&&CcB_|fbPpc0AZnR- z3iukf+d4dNlHhHm%ohcDZ~q^osbQ{Qlx_B=Fca(7yODP$KzI{as#vR0XzqP++Vscc z01?rPI>55;ni>`t$M3x3@M4Vg9uqJe&*r%D*U{nozq?&Mv%um12lsg?InBhyPH$(n z^;!k#$5eAl;fJtRE(|!TzJ0w4#^47os-B+w{DLFFhU1f21BTlXm0DOlhVaetj8=D- zlMB(P!EKz*%y=!W(fNFb0O`>d|McqWItBz?fc)gh!GRK=0Z|wr6GvvnC#0yM*7SY0 z^qmsZO}99#(T`gWpLcX_Zou;d4^DgyIXjgS0^9zo_X^9E@8}Gg9WwoPcnB`mkea)K zPgZQQrm?(0el^EbT{QJ}h&)P+Y<1abA9PM+ZmFo2^Njz+YOcRv@{qbgGO7&q?6c%- zt!e4Hkv*HT41W8b!bjYQJ8+c6z|O91Gz*D#hV~#uZoSN>*UNVQR|dOa1TPwopsXPgiNcL%5bSZuQe`h`ttf=6qMoE9isgy+4DF{w< z*wT{zEH6q^T3VVa!}Qe5HnwKHJ=@9l_S<5kL2wq=(-LRRsGfbTZng?5v%V1?zmG)i zE2f3JDQ1kxtS{vBk-Ou+tJ!!w>b4*7ehR3de_+EJXvcHEj2chhEWPWlVi%fw1b@^EE= z)j)k2iE`@-2WRFan@L z+?J+`e7r({hxdc!_hVEOD;&4n=gEc9LfOSfH`9bK1?S>CKdjMBaC$k`y-wCGs=K2q zeanzi@93YQ*VGKW^GPhRQK$!fiesSZ*!=6HkEOD4Lv-r*Woh5(8k4% zp1bK-My4xi-wODMMJBuk8w2dzuw$7-?|)H)GyvpirTFd=Bd+h)gS6AF>g-hF`JQx>L928Ho$JT zg)`jzoVlU4j>~Bh_71)||5kHJGff>?b8uiSBY1&Vyn>ngtWKfJ_?D<&`MPNzUnmtifzj; z5ai*=H|9^U4tN4*lkRoJ=y@~5lxg+=Gh{k=j&c>gp6uq>yNb|l9gQ|-YE!kAW4+#rgd;X3-N{m7rC5gCFCme5UT62E=Ljf7uE$R~Z%BJf=WM=a^ z`9hXw&AQBOr(JT5YU_JhEZwLNHunYVx0gF$!KsfmuXf2v zO%1Txjyo)`v0w`Qs;@$>#3Em9C^@(!^o^+1`?2{)u-}F?Q8i?`@>f&c@W`K5;LA{4 z>cOJYxrbNz@?`K*c&d5X8Cl435Zz>Zh|O%z_IRqD%1K1Lr{UwqqA@+(LnQ_>U$oRS z0Tx{Ao)UJ>p8v{z`nx05>K$7}Vq)!cOR(}HL%n08z9Yrk%4|M({k>@Q4fo`TjdfD2 z&d&hIl6(7ON?`qkxgDRsSW(;eA*V6nB;EB<%hfU<%Hmp2JIf~}+D5_tpwo%SC z9Na8#Mf8jpP3>;K%uHNYpE2~!KSbx22Kd-J{Mw%Vdz859E5t%iW+{(wtMgh7DTF(1 zw>AEL+|KL2QV-_)%lh;YJAc;rHXgpK4d~yxONK7AU=S{k*onp3SdAPh_>8wUi^k6VCXA7FV#g|7FRTSR#qu={@)UXIeAQ}U%X0rXL0 zhyH{yn0K?78vk=Y8&Z}kl?zf=t!GX(w4F1(eOz=iNwx?w@3z7 zU{Rj3n61x|dmb9M%~v*jFzn%@r(2B3f(E9N!>hf6j`Y`*GN(Q54cFt6)8f zuM<+5dgD#MDx=g6BWv?|OKHg*vl>}t(4j1?ZRM%G6Y+!6;bQ+H@_LBvHSwmGYu42E zuM(|X&1@l6mqc&4$A+0}>XN22tCc#d*xNio-$xDp0%CzIIU~&4(SC=kRD0+D@-<}FIhqB9Wlb)V*In7PMH*D#Nv;`L z=$BDZdL{JpO%i=pF48hcUmX(WhWUibHe0Fr0`sEJMqJ_~r?e$OG zw^HELC=r9h{cpEfZ|RB7EV?~Mm5vaXic9HLf9H9M&EB3TyEzKsC|{_#>vx5QuMCri zoNuxGCM9JetyqPx#n76YO^S$v8O^Es^(8i$cF@U@->(LBTF!Kf@SRx8fHv=q{R;DX z6`duRUbr=^r&%!b(l-5~CB=jy zw}zh5R*pzURUs0OgOB@MoUVGN@oJqN;}*>tXu9@I`c+o7y7rhNjQvLDd1HXzV)w)%Xo1$l-8O7LW|cN-ErgYagkq z=;+i(%p&8I7_5p~bHr7b=gBH{BYgYDI;yB3m*nNbDK_memeE8WLG&7Lr9MIg!tx+7 z?RxUJtg!Vfy=K;(m$8b|!rVx!Xm&ZzShb!Ss?{(gGu~o^uIM+|a(|-RaiwU}!AkxC z;=4bQR8(%L#42FqhpmXM1+VBA&gZ7DOp<-5cFqxMqaIr_Xsv@3J#SFDELAd^% zfcIM8rSHaDB-tTa`Lty9%pC^2#YJL!?X&tuiShgYK#O7OD1ob6MmkaB^zhAoVvbfDxRt#1&$I0Oh zppwYoZgW7nz1ISI@LOmxw8v zi$E)hR9r&7j;Q+$T0M=i^PEX7$-Hgvcva1kZwq>SNhoWjaBG&5949yFdd~7w;d2z^ z)m(2gIb7m@pm|RI!83Ps9rE4XO(#arZ8we#5^z>MZt%_N$VjMF3;45*kJlku&kVP5 zhi!)Q%}bC$$Tu#|X}m609##if)2Y`TlDyV)%5z6`p$MrNS1L_CIcUi$VXLYX$(-;+ z0B5ar+df3%{-4z;cap!JyO3VBdOs@(o-fZPoEMgv=q0PQF;v~bM!Qo&M_X*UvnFK# z?o6&2!pJ$&A$xKTSl%L#*$`Weft&GttG~x@Pvr=W2&5T)Y>uxs5xM%5N`t4o6l;>5 z{nUY(e!1Qoxw2yTxOE$Idu?+GkbCwtGdDjw%6h8t0(rsVTeHPaUjRonv7W`rwY?Q% zZJ!1gwK`(y4q;Be6CU`ngh<oUoXdb;2T>G8RYjoi*MOqDbH)$)O}lcC4b*n_e5ssqMUti?X0qGP2y=N!F0ms zFuUT?H!0=kRI_I#m(I7}sqf+%q1}s6%VB50+noD-dDiB@+_$ZRp4?z((Jv)gVQ@$3 zI^a{i@_5b6*nrPhh0*o(+Re6`j{;5QJ|2%5OT6VuF1~8?2k9g9tX&K8PrQoOjtN`W z91dk?hg*_K&7_>$7$?aV6HF1*0BztRZ=ErF{4m%d>jMVnp%8a89L;6A;=79mfxME4NhSk_rmMOO<;~lzvh0k?&cy`E$JKlDsrM<7Q9xFP4Z>- z0#}xKHeEZN=X|jttw82OdU>tNu&Oh?~J>#S-1X6cLSn4{a9+oYqHSCPo))?yIG-RhxJu67!pwK$p}H0A>G7e5!dB&^PY&V)9jbJO zbw)OMDw&%f|8R8D)AI^&*_Jge!c1!%ua;zQ%XR$h=ht2VgWIABXRmj(1t7AQJM^WZ zSc)q&3yob1c6x{ZQKB~nwRdTKYrlU}!PdSq&m4MF-pEqy?Y`9RYQUCvAZ)`TCRQ=a zeD8GE4?7vt?Y!)p-JkXQ-jxU2eE_Ca8NfRAa)l27ctT$;55RE+G-rS7enFUf>C zRbM*^|l=)h3+$J`sOYl#2(E;{a9-T3*kLv>8qXHL9&y` z5*ugUiN38g{IgT|w7~Y!gVnyDHtp?e55P5grUNJHwNp7@NfDT51fMBsVi((fHO+G7 z9o?0Qs2`lu!<3e_QU0?=8EU&Mokm)V)?Wc($xp9Nmj&NUyvj0P#HXx^6_x>ra43;& zqJFi{O)@R^`Bpe*wd&6l`96vMicJUfJ7LLk^ddBbt0Q%FZ3b5JwZ64xoQw~*E8D=l zRB`~59hfj(@rBM&ri#u_#rC=?e)ZW*jM?+Q4Ia@)>eOKx*2t<0iUem`c${+A^Hr(a zP2`+!I6xjiMlz3iQm}Eq<+eSCTCgV*Ler4Ryh^ZAVt>s~7d!E1>! z7^mkGjZ$yW`#$AUyr&`<0d7>^JGqW;jI3kq_m>mRwLVLTaq3FgvTCYB{`TumZ)%hO z1F}!sB;NQ_KGMOuh~t1Xk2$OiCG0^Hgs-VYU*-NwD1yDl7X4&T-TaR<{Gzlp>*e@z z_Dt@F5J>suyP5B;sc8sIe!;Ek%NGnnx8mx1qpa*Y3Pa*`;? zgiz`J)8+l-WVmQg{*KObyFzI~oiV;%TNZ&Tnk$p;Pg$+P2R2Q|+!D?s^eA$`JQAmBUH*O2al4JaByH9H%!r& zV!+?u+jr&8OZflf3#046>k(mnu2HzaLAudS!M^=3ak7flxz7Q|^}q_MwCDH}BI zY7Y{-GdsNB^rFZS3^XtiTh4RKRm$!KKm&@XM5sNR=DjB-PcfeKJp+^pBUL)})e_R# z8z`sOu0t!caq6Gu?5{{pQfY|RqoUJ0J6-o2f@KX7!_b@Gvl|IcSr6yUg9HU9%&eXG za}m~GqptqJ_6OBoGa2gY&N192(NamQQ(Xnj+FJx9ETYC<}Y{^OGP%k3TY$kN-!!f6$ZC(AlM>yC~NdT+nB z2>@^+CDp+FXY-BsO3xTg@fsIm$dLFD%+{7dT7;NbeY3DUXau1Lg7y z3j9BoNj(nRjnx3_c!TXqftQmhpK=0m7GiNCLlboKeQugR%z=%P|Iv)fWPfrk^K)Em ze&wqFVHr6sEZ5$?P{NXOTxoS&9U)*&S|ot;9B3~m(6Wxzm~PKU^Yi&#AJXsJ=OT@= zJ7xy3)|~%L+rfx@fUlq|2QWbfioXSlI{o|SiR9z6Gw!SVgMj;EYaO0olP~mDKQOjv z$RoFr!890CZa3=s>KbM1VT|c@G(eoa3vQ=76sU5t?0s+aI%reM_N>V>()IXhg0+6N zc+tdgMN8IuKkn=4_-|b2xlfNC^VHVEA-n8?hy`Wwh9r-fpT#6D2Y$@43Yjp$i^P`y zFTh}{`H=-^aLo6*;jvkCFOHIrO{>c6;IuF~b*>l4J42CsdIA8Sv^isNR&6xPA_$*) zOdGqpDq=>f;-`5;llMGVfoNDF58BCvQM#pDgIScuhDV26WUd^E;2p8{y^W2HX5o(| z>_=80{V3J@#v||QeJ%*!wX50qd*7^HfI%JUGGUcAqlu!MyJ5!(s?jU<@#psl?`O4P zjT8_bo#MxnqnR3?Z8VIwwS{PENmFI%i$HTarL5V`2pTE2%r7qLC&nVajg>h$`G0e{ zTMY_89rq0*!|RwI7dk(Q!B*;I9Ly1X#B67@Xeps!4)V#L%o^)Wsjjw(#p1v86GyqS z_k?^DyLKqK>dx{>1kq;bpf2GnmG12VCa`GM@_oZNUB|g8W2R)AxjUN{|EYRvgnH`< zlIdytb4qq^lny0T&1&tAaO2{zAMtKsdXXbnq@rSb&U)d3czs8RfuZuPAW0FcC#t2a zWnv**`+MyQaTH3L1G%JY?5t=OQXI3e;_Ow^(-%^b*DfEeoLrp0sC%isKDSCBxcprDwT-`W1L3jk(?}V?^iCI!^b~BF+w%Nk) zlkj?<=@G>!`JchWAF6EI>7%xHNAGDBUSH{47_tlzZ`OP9^x`scbuOF?`0JS!= z=WD(m&GVJVkRFN07xoU7vZVF*f!O>n@4_qpc*0Q83E44qTSsSb9nhh3<^xs2>Pkr# zZ=v(v=h8_&oSe{lzFB&NcDyA4c#L9=+h=31iS(q2xHNVe`zkfdFlBTOzRVcd zw)m+;V8&3_1GG6Z8bH#*4(hDS&9TyYpB-N8JCP$iH9BJ#@GtJ{2sIfghLB|cI=h+M zdAu&XfC(?zYQlp=6LM0Dwk^y6XCgp9fHS;bzN7HFln<_Bf!}`&f=e?q8>Li#+IQPR z+h_M7c&+spGi)KT0;8b6>E>;REA|dEINpeZR4jEAVa39JBBFQsI(~IZ7I))j4%leyslXjkOOnmXHnnNHo(gAlG9F;>Nchr* zE&;UK5@|_DzO6QE`$J1%?n?Qd$OD30Pv9;cAK1y`i))osgMe~e*@(sKYkZ8z&wqKo5$fi%+`rL%`(GAl zU=X%Y5G81IPUU;jYbOwB{(s8vd?r4>HP5r&$W&Z>jMn<~6zviEmWVOaA~U5qQ16j) z`H{Imsh2g(L{S2j{zX!#%WM$gO&38F5SG_;vI-vV4^Sk!NOJ>oS&~#hS6Uzy9GTM; zKeW6|lkn-0)IXl6H}skqgYODQymb8qP5h` z1nI`(a9pz-o3W&EFMqAGH6ba0Cica>eDrsM822`VRc6dl-?+Q}H=It(d0)ylQ-#ev z|1q?9@uqJx-23CreQza8$A5ogBfN~LEOGd~1d6@e?`({*nyd%h>~0q4_y_&ijFVYL zH1Mk2ZgCiqoK#`XP`9FwUAru)wBbocE3@gf>8}Bbu4dsuCHVdx4Ge4YF;3Ofv z>tFMKto<&`tkC(Fnawe>u@S1p^rk}LxCdw%NUg&@7`-8)#NW*9-Fu(c3#4GSbgO)? zgvBO;?;ifSm)vATb!1zl#R-|uzRkxO7#i9eWiuOYc1+k$%Ph;*0fP6*Wv1>(14LI3 z)qc_=*E0`V!86(#sH4?X)iEcl?E&dNlWowk3w~%-9YZ7y^1L)UR>$XIAxQ^%PR0gr zB20y0I%zEzUx}%lY9B>G?yuQSLj?342}6YJ<;GLkFhVROBhyhOBuFd<`_S!`J4|yH z>oVy*mF^DHF!JpmCQ(2z z*Riu&VJ#Q9oB|(kJRXacOMgZgxU(AOmGpPBFme2K881oKZq9W1H6n~+EAVs);7v72 z*y?*PeOm_Vs5YL87$Ou|TK^7p9kZpYv9Xwt@eeZS0`vRtLMLw#NG97Ry8Fo~F?o64u&z49l zvCK5Ylg$yuPMPGO#*6basTH)s4cjVXDR#@i=_n+u8jm}py!j=gnc_AvjB}J<^iNqN zU4?TzlMP=_SXe{%QAxY*<-SzEjFZ&%(&lAlmV`5z~+@;b8L94z^~|s%Yw4?8v#A z>!54a&m=1;389_kuv3N>h4HwcKzZtRfBcJA{VDhpqRaYN+Rlk=T_8dE|F5#Ij%w@sx1>s23PlPO zFII}TxKp4&@#4k5xCajoZL#9THBj84xCSdy+=7J!_W%I`1R4mF{@$B6^WK^@Gw+|Q zb=S%{_pZCnxo3YqpS|}-Hevc)Fw4itqDzXu{E1j*vSAg~>=*nI|H=SaDI>TG)ZRfu zL2$Y!R=9flYk3;!+yc+paAm4YjnvW%0so2K@yFM@c`e|=!A*XvZ)!yooOW&IQ#7`F zouUT2eU21{M1<{p?OTbYc?Y&JFIrtc!@H*-37}nQ{!KUgN?CojMAgBhOfCNV*GJG3D0 zG>`~cxM(Lg79Ku9IAG67;2C1rx*&cpw0A(TCtUea=J<#+8 zN-JTWC@L#1l{kA}=fS`P)m!(^B!+oZ&xB+nFCS?B4#IsoJsx>Tr!JR1V}0ZgyO_6w`Q??lxl(clb?rDhT2!x zJi=s_!Z+A9Z)T*YoWg?in&KMy&R|Kn zG+UF+W3d2uyHc`!IX}EwwXC{5anNgaa!Xr#$#%+cczJufi^CX#|MF?Z+rmTrO9=z} z&q|p8={DPK8-|Cs(y-5$>7S}}J2Q3|6R^Z*kB5ya-No%K9Bm)!9vubZ^v{b1W$W{6jC-idDVHRq=moI7?uGOU~hXEM@ioyHw_CaenLm z?VYBkCeObO$<4klT)9xt(H*X?c3a`SuE(*^XlQ7}2>&MkdR&;VvwC9w0w$7gAT#u~ zQ$y0mUuIN(wbdJWYbK+;BQdMe8>n1O`rXVkSofEpx0o`7%{9?iOUn!$(VIQ;VEogx z5+Vs+E56|9Iw!YaRa)HfhU$q^L8hNI2YQ^ZbXN)9L~?)vI|iv9d!fO9j1=iVn-N;< z%$pEqt#~T;jhnn(YNvu(4i7W^Z?Y0i{TLqEpJC)n3xt1Yf_ZO}M)hK;McdorclBM= zoj6STqLzH9R?2wyb?9WbR^Gdcjh2u~%T|5RirmOUkP1Xf_e|FjB>gewreE9JGHC|< zYJLPK+;xP`_4K=?>rbwgWL2sy5mD`!>-XnBt8Q8;YWlhJB>U5%qEYbbLy2u}8ew;D zZ_xfo- z17Nh0We2tH9`}(O7GewTyptIgbAyQkEjfYrd1OU}g%16PlPxm5Lo_xL{`nXPknSx| z6wLbUsG2a)1IBz64txHl)g>_}9p*FrI9p`bp#H1ceRX3q=+ex5J!qvYF-(8EG0QCn zvVB`v@_@n{vJUzpgOD~oP8UFYzg}F+Lc5$F%HJenry5N|s+@RsUM73K-CS@qc4zSc zblhE`e8{yJholf$SeyS*0bCi_L#@^0KWmaYlMS1}IVHaY2GQYqwA7Y`HYfzrp6Fej zWvz-2)m^13hwa#<_M~^XJX#V@WY@eP(&O{HV0S za_)LM=RtpU4Oe7^ozYX|48bb(o z`+rTjZ8LK8YZi&lJy{N&ca!w-)5;xhGDYpEMaBoO3fOER1{vi_t2_tpXvk@{A|?qP zL*mrR#kgN3O>FTlQ_<0OdQ^FLjY{;7a<|X9MEUx=yK-j{l2;fumVXb`|E|0bDK&J9 zZk$atLJPYrU$6Geg{RICme0}JB>T`Y7CiZLiI?fsu-wA4yNwbSrd7>l^bkUmm}a<_3<-zU2w3lt`)9BGXiBqPOeD8aZq%f#(^KxC%B>$ zDRGEdNK;jEP;eEzywcnsef0RK8Wjql{JetKH(o<#zjxm+{>9E3(>&r^?$I_+ma@od%dHRU1i|u zQ1iEuEr+bf<9~9U0wiBuE|;ZqR&c{FD1Ug&aHkEv9QucE=gmy_1n@|xra&rbfN1Bt zddl&0m&)Twj?mEli3C~-1O#McNG?vdvMxPf8L255X}&BtQ9$WWnAHhPLRQV}yeAh2 z5oJVj#I7D1g>rbB2z1QD(?xxgh(eu+L`Bpjt&a{A)#hE`KZn{ttxV3hr{0ALKrrha z%h<8<e?ZAs{^06%MCvYL(IE=-;F}(n$y+!io)nzI4$ua>w5N2Ic zvK~btPDsZ;Z9cnPV!>GRGA%Rlhl8Atum(AY?ubo;vst^gewX!!)L;ec$yi^@W~D3+ zB+C7X1n@q7>)6yx$|{pqPXPCnuhr5`^HlagWs4KbCUHL@wG@9 z4dxjk;S!C`$k={*wHDbs)%lKA-Lm`PRpC{S7RLG2%<9}xFrlyF-sl?ayTgss&$Y7L zU|+_O4Zxr?Ls!r2*nsVgdPQ7D^UA476CCGG@(RL&-ePW))q~j<1?XzdT>X`iTA6(QB@{gg*{hrW; z9M;&U!V9LtEn?2!BNqg*#$D_Si+1P)gnlH)zr<4KF2{GMSQ3#l%#w)3%K7z#|By+^ zj5>UH^#<84<@yVhrTM6+l;lhFBPM?F-2VK;Z(}wOVUt24=Fv5Sb^c4V9Mh~_AJ|l` zu4+0gRUnksDhW+Z%KWW!BsR9&JkZ<8ifsb2kuQ9Jkn`wmMffNjQle*Q!(-ZcwNBIV z;h$xqnuT}SSz)XtZo*W2+ zGC7cF?P%t1r>c-chMKdv$j0=Zc*mCJ8M|fQ8}|ouUrf+sRUAlBv!R#3tpi zJk+>+cm&kjITr;}1+_ILJ}h=daDJ<(QR|j)Yt{=Jj zp4F{dHvcioSHMb%+t6=BKjTm3BrTlQCtl)cl-}avd>b{cIpn;f7MtysJg7^FZha?1u|1;llprH5 ztHQT%vNTz_3X-(@`w2>nXx?cH9-CHUs`e-b7H|qZl@Wx{`t{ckG|U>d`bR`szD(lf zE3S#lz3o*lz+AXFbxyhX*%+m{kYhd9)o+$TQllI0MOy6RhB_>!Tbf(Xa->Tw!n3pX zpE1x%nLCNo(Ded!>l}>=ciWO#l7#TZA@fJ(<=pAb_G87d2*74ykh2sa8Q!fKv3QpZ zJDNcVHZ$vYZ=~5}WUeagUrMW(Rx6#$pT3reQE&9W)4a+r#Wv?b^&qc(?D}|Ywuwmu z`jFO-W|4}75z?+=H*HrCHm?RoWbf?>H5uN^)vn#xj@|1xG2nJrCE`ob zgsjx#hm3*!h^_lmLh_~jjv}a_k{k-}ysVItc8_0-7=ROP&gDg*ETb4HWf&=$=^$I% z;o{DGWkN)R;ugm}dbnxk^IH!7dyUy7z{3H(j@nR^zr=vAm-FJ!tIU#fSNcY6asZ{9 zl%S9K&E)qX(4O`Wy=bCv#a1D}+^m}q<~u5tTL%FL7b}>y$M1ml7)}Ttp1r+c?i^FY zc00dSB~?Bw_%-^Wv+W15hJ|ija&k-?+;5C_LC|R#l1dbG)e8+-qG5t)al@;JIbR>4 zve0_~&cmqi2Sp{tLI+Ssh1_blHT{(PyeFqT8ZPlNjx16_*Ofw+dkGC7dLEX-GW$`= zp$o2EMQ@)?Xc9Zaa%W&x!%p|+E1l-0DrnLa47vLpCr2%AF65+ieCuo8o#>oI%?$C; z+MTwZDgH>_X?QtPNv86H|w5<>bF z|DCC4jl`$v@Uy;I*=yzf1DKw!e@iRcR0OzG*E*;X=P=znHU>7?fC{go6jqz>;Ig}2 z8L;MBOoG2)25dtA)X2{am8Xa%XH!qj0VVfDXj-mw6dzIf?-~mh-%pYbO4P2YUi(ZR zNR;zqSrp@Z_+qMGIv7EhmEP`@@p=OTT!ngX-22u) zGsnvZ#A)e$tU=ztO|ZV<*1rs5!&||}J%jXc>EzVy{Dbk^M(-UrO1-`)wp<5acl~X?v6%oqOeb1pD%&)Szs&&>>tvydcn}hptCyNO&Up z$sr9j=0;jfq)bLbScKiLFX{nXQQV7Jqt|+K2`PIXq|EktH>>gbHJ4I?g6A0W3QqcL zypJTm$8GxquS0jv)3Bi((!mEbcVxFxpY2qewga4Z9AwEk`n^6_G30$R;3cF*CuV)D zroGl9{5;qzxD;IFg_v`@@b|^zP=A#~C*k7?ZLp8ys9wAad)75Ufk)4}hnLZrmMnSe z@=W)+m4zZHT(9)5#A7QqJc;21N2^w73cIK8yVR8#TLq2jPC#U*hN~czrVeX@CLa3~wB% zGOni7D+iPsu8g)cJhChXF)%VFUJ@|V9GUBxs*qktPM4`gPkYc~n)y}8b}EUZf)k?X z(59Y{H756D`gL_)(cT_3$gQjj=O+nG<*Sz2R2HHZHZP@a zc*TPHMW`M;F~ZWt*=O zHT+H1fNkO|A+oLZMZMQ_Jk4#W(4q2@>A{8}ZuK8jdHc{ol@serCt9JS+E zEZ90=&>#Q27??ynGYugeVhAO~TD4xCPJsO$j^#&Lf8R9sP3#k+sym56I^Q?l%_H>b^85$en~ z)e9NF(_VF!ps!=I&cO5PsuRrNEK4co;Ha8as4C{LTH%JjORpjSa7$`0M=W<`1 zbxAMjpy6RqtmUgppkAG(ri;L-9XXiQNO_unIKyp2N(89Tg>JBXUQ42M_O038+=}gV z@>frkq$}4x%%cYu!p1-%|PM)3~{}ZD_SEXg{Bnuf=deg!9CvALc#-jDhZ#7#nC?9ldD$IS^Oeb`3QnRa3Vxy6!&aE!n(-as%b`#^^6NXQQ2J8A&hP6GK%pMyU z;NBd&KwOvS0r8YD%&mnKUZsAai8XX*Oyjl9X_{jx^lv>&ac=t_*ONG6N!{jEaM+I? z$C)5kj97(1l(v+O%3(xyLE7#^{WZ*v^^a<zgyhv z>Lyye!Xrbl8i``LJHSS0wW_#A6@75ZiLI*^N2J1QczbN{GNgP8+GtIg`vOy2FIarj!$%QBl*l}Y>!H*I?x}7MX{r%?CxGOBX8476ITZIO)8B>U1_6td`JB4BJwS!cM$AJnL<}5 zo(0=%uN32BGr<@UxrHURTvFetuTmJSzBUyd5ADhM4{RDwmE&wi?tEXN!RBwB@W;<{ zsPR5ykpU-(kWQBip^QuK%3y|6YZDU_5C|0J7j}g-uM;CMSJKZFcu!}IKgJt_ZM40R zj7X8A-iaTHvFFg?+&o2_*p$y~gV}X*!#M>d^Q$RNns+{?_>O6;vNI6jnZD-Kt4cWA zBZIx}UU2}U6X(0`4Z7iWAkPkOchovJdYIp=tOD?Uq*3RbE|%zVn)IJanGU@*PDrj8 zTiIv<;2-WZOcw|0qhj+>fU}Q}SL4S(ju&M*i%no+vlO2(jrD)KOP6g+>gEUaHM z&;N8|bMt+3gQ}5T`y|f0Y&GoU@}RI{bYWp(dn{|d$_NccFK>v%0T8nlibi(gaL%*# z*n}1zpK0Lm(yw#uy*H#83PrBTDGs(};D{vSg7ZoTm%kopivFrVy)rFpNU5gu?KOYw z=skQQE}R0NVi)Iq4Q}}9i?V4;yCCt?jw#G!6X%&st5##TzPZ!XzLE5hZAel?(3(G1 zgF3sS3;U*G)Sw#T+NEx@=}er91Edp!T-aBQF0L*~WyW?bS!rqWl?L@f&d>&zmClX9 z_-4DQ-l?2~1etjdNX%=0v7XH&kmC7s5on4o>=q+~$m;@bsb#DRm zx~xyvoVM4sl05Xv`Thua+esZV7=x(XlL;=&U6S1Zx-8dTs}6?Muu7ew$ByF@ymfBs zp5zq?Dvw4;EXKj6m2M}lQ@{5<$=SO_VtaToLjSQfaXumvE~&g`)w2$JnAVTM6uVQB z5)yas-Lv=IDsPM*Rxi?Ob=w%olZzmt5#nNG#1YkOt*x)Fu0WFhb1N$=|GbHz69=BG z_p7Aw9Ky4tLL!MYTm1^3+8qaiG~!r0^#OcPCyJ1S@31PU%}v!cpi4_m4?kSgJ~${= zp4p(e!3z413tkS%)D8INd2{}byGSpo2aoDnMkbta*!^Aa>mM2 z>lNKJW=5BD@PVY5R03{mO|+Y|10USKzu+X4hvj$S1sMWaBaxhLQ z=@qwOgWYg4yJz4Y0-=%??x`};VBPcefhX^woWEFjx@S=V<#low%UAkh%iZ>N-gHUH z*6^`Exz?f_9(rsmM<;CKffc&~;d)+TCbxgAw57T#6gtO;euYVeRAl;iUq>~)zfT*f zG^U(2&1S$bfc`D5x~Z(yWbK)lQ{%pU+(fT{s+UN?Esf`sy2OOzw(35D!1${UZLV<} zcI~-V)tRa@RUcdDnr%~qop^E*t+X!DG1r5FEVR| zzbN!lh|_pfCPS3NPa^+4u;@2GQf+vIHzCk=k~bHRpp+#!)6D|R_hC2V{QdHju7Z_Tv{v;7wzH2Z%4~sV#AYD51fO+iq<7V zR@5S{tB^8nja;cJtuj77zU!MC`<$u24>dYEimOmU2T#n|ihypp!n?Wy6(@sauR_7w zC`)xjv%e?9iZA}gl$Gjex(qlIf)pGn2^2?RH}jYyN}QzTizAmlV;O&itIykSRwmqT zPX8w59F$Hef_*a9x>#%}WevGe=o<(ZB4Eu~X2IYO)KB5(2DM5%x3}4gXB}Snk>lZ+ zdJ2ftHwDyVs7n$@bXiMMuLJhKoUrTb>yG5^)*&n(&U_pl8fpa|QghS9Dzv#;8DI-k z24(q$h0*)770n?@9N>hm^+K;-X*W@T=a|d**Ot#Hwzt%lY?h97?M}wB=+Bp7Cu9Eo zs%akWokGu3Q&K5Z_7@!z7?a=u4?OP=!CDKS135kHIe0dTQ5_WcW zf%gRk1!QDo_Ftcv(7jN|`^dRTn%YQp=7+6d4b^-dMp4l7kELjtah0Ajw?fF&u)P5F zNMBS4MA0ZC@b^*rQ{MgdM^{HTK{_%|CS(bl>9g5TAEIr3c0|v+Dd; z=+nzoVd%3(-=i9C$|D+ad&)_b?ThbGKAVV6-rRhLa%E z`1z!f4n4WAxU%1JO93rTe|{k$V-8m=d{Y@2{)#!KG$zXQu+gxJBAQiLSeTbL9$=r* z^az916TrC+PETtEwz_ii;*=TprdFLGjy}x#fu^Qc`*NKALS7kXGZ!fB2=Dj|+J!mp zK}=QH2?4&3X*oIH)@ogbLTlahi9w!Y(*&<^{R2FoW!>vcZdTpWZ~b=Gkx4pv-xp$R z^s4kwE7=0n)=x5~{?RJerKr~}NKV;%8sBcat&!4dgQI628~;$josQ2{RJQbbYafEE zbxP`?P68tK?L+@G7;qO^d_@KQuME#|{6HNS>Y3|~yk)>L4n^GB;p}L<-2DbPC8@I; z9p^7jPxH5;g1S&wVYqbB=Prui8sfn^p^C9Tyz;jt?>4m4aa`+evo8kC*b-qmKLSDA zN5-en3voN5ik0Y8O2UhN5d0nY$0k-QB&oySsaFcPZ|!gS)#s6!*a&+W+r<-w$(5a&pd| zeX^6Cm6bK&^0HzGusELP2!z= zRv=6TWCTD!YGdJE4In@3Fm~b^jvydko&J76H-8ekfq?YSN(c)myXl^7KzhxK<3ewL zNVacyL?#Q`ySk?IH3qaxeHN&y1}a+!>{{B}wIKhrEl#k-H))yqJM`Rlc@p}Nri~ag z#&3AL{*p0ngqqkcL!Uybl#Q*9ujP})d!qn8^J1#`t~cbgcG#jU#?r_Sib{uqu@bQH z#Kd8UL0;d&g!h|#V001W&C;b%#1%`4?5@#9MFs|$&t8?pC%^GXN0PFwAvIoFT8Cu} zhHTA^6KcM@eog*}hI}18_+b29I5UDTXaD5eoVKMR7lC28YB-mC!~TGiJfKFNP;5`e zVQ*sWFo*YG%3Svd!bCl5$LBk9rpZer5?Ya@yACsNg` z+am95+5KDiIRM4aHfGjI>=hy#P%qwYQ{bC%U0fj!Ife}Pg!1cy!Tr!wBDc@S%?odD zGX}C4_pczu*Di6x?l00M*T9BMe6!bSCr!oM+X8?fkabk!7azd@b*+~+C@KtOzx_L% zjk{n|s_p#g&aPERZi;_cLyee+7&`K9sGMDpcAl{ayLy>P&0O$q;361omuygo?=u?8GZiLfFo<^iEoJPZLSj3`I?5s*yj@xUhu+fG^#- zLH02Vz18jF+?>F#4#}97QRpFFHu*;6Rmic?w_}Q0seAJWo^diOEwQ*8O|{HP$bw&p zgI?!~X*Xb6lSO_7{jGn$pRNT`SINcvYb?ZJ98PFs-Ema236(PXdTwO?@1~$vt5+4v zt%U?umoC0VAVfs?(t^J{9sh@@H0ocQaXHdZ9GH)h0mfeNpqa{C_UC`>8H7IYG7q8j zlU4qAPoW?_my7hxrP^wXeF1Z_y2I1Rj_=#kM0P`g*i_HT2-G4gE4$+br(o8W!NI`X ztg^!ROm8Xs^)LE&3v1N^p2;prTN~N+H!OIf&_f-N_agtBI4lNStbfX zzS-*cC8*YFrkx?od8BHzTtZx_Gf7bV#yfFTGS3#+z!#gw}g}Uaw=h{)>c4|`Jz!?e8|0_1@aYIZ*XLxyykwCV_vmh`i-Q8 z)f#Ha{xq18u!^)Hp}EV~yM@Kvub$A*?j3-b$I}5m>%#q_AP(s5Rltj9SFwsfm%`i| zM#iP?oLV$7@BTh^WG*kX>`KoqFgF;@VDctWvC$@)8q#B_e!t{saF;REL)f^D{DLEs z(Viz(y=lhggPwsCtUHmO8+>G#SMd?evt0X=1LMpcDoF2n_ir2p-w|}XeWEit9AWof z5f|8vf|WOY)u|M zu&WfO!0{d}h@oGS1%0+;`&ubfEbRrXxW_*lKLePVG2*;=qbO;=Ud$TZs%5p@p$JXf zIa|r>nuegpeAypdyMtQ2xn9Bbil$eUdCGioLaBBUi_OMy(I;88lX|;e@IgL$ z<0tgI>m^Vn5Zux>>QM1rjlr6eR&rQkx~a0A-pO`N70c)91hCRZi#BMvKSBc!w;Jea zw%@WWmC*7haQRt6v(6bYaZp6`B6hqnh+!hlK65P-dVS9%dT&j`^9m*=l6R2hzKtr8 z;vh9U2`?D9`MG%z!;CV znU!9C=i*#Elr;;s>RpQUw*bUFn)#61>^_Od+1 zhjEQ>s8+1fZr6nvZSomniO?cfHs8odnTLbbb}K3sDsZ|h9%rn{R$$VjAjsUJv53B6 zv8tV(I$;O~X)80tC@@~I&3a29ZVVoa?UJ^*)fD3m4Ck$h9Q~PlBC_%vRC<}0@NJy|2>p83E zsdTr4uwH8r+UT^kcYlJ3a+PW8SRDifHbAFO-Uc;PR)QD9(*#fq3DvH}L9vYgiy~;3 zRvd%2K;*3kLsdSy*NRJ(S~c-A9XBLb5sGN**9qJs@BkM;lMSFYFI-||#QbyR_&u}P z>DkSGKYaAoz3VxxUV*+B~yXj)}~=NF3U%3d!7W6XxP_=v6G6GE0932q0p$wc4wZA7%RxM_mDuI zI!Co50i#`!EW)S?0B+!S+Ot?wsT-Gu=WF73Bv%7=6$;{GWFo_(P{4>|HCy94FQ_ZF zS_oudjm3v4WVIru{+y*IJG2tx`B zkBmBlbj2-XX?Gd|J5s82t3L-oZws3Sx>($a`c*y-$r&P}qSH2&WRxe3xV-+b8VW1z zSIf5NC^wipj4n-vva>9eZ1R%+zGixoE^tKCwD)$Z#y#xCk!V#-{h|EY z&1)~)^+jL^XSUI;lt}(d%`>u*FC~gX<%T`yZl1;YGmaPUFB$ z)NCyp)Z%QeNpUPoxi0QumG(ExH3j0cz;Cm^)HP`%<$NnUew|bKESFej z=5t5r!-VJ0?;5Yh13$E|+-G?lm=MQ*u-$^VwCq*yG=k7%HC*eu=0_XLKzPcs)<4${ ztIU9Gt2Zi0bFxC4JPFV?KWStBj5tN#7Lfj2|d?&}+U( zq$J0d%i$mJVW8zKnX?74iT7Hg9G+Do<34H?8TrxL_OSI(Q>p}iH|!T7xnws zn=P}GY070Iv(UZUb_tHZ0Q4zskZwKshUi=-6~%%HdsgdxHK*q9cnf+}let=bIM=fC zqAkzL1pDhzP@G=ahq+lq;J*s;jpg-*0a_u--6fYAJ!1-686#lPZ(f5rRcJ^PZA}$H!f4_-z|DP{{uM<{93V*F2|B4t6 z4i)<6Vw`f&MS|$Ri_dm=|Mw8e{}rO60{-`o^J1b){~6+Sfh0G38i1n=FfO|-nRajx(mVX@7aFB zV;`?{{FEY}ul{O-_hz?^*~$%G#5La6NiVxRygu|YjlTg`$;=@Ei>_}&L8^ENOlMGc ze9cOH#!Wmt<3q0qa50>rVSu9#OntefNP=ZfcaT~a)rN2?7cEf#sGOZI{9Or>Mux`0 zBL{Q)#)DmGa_dVhC@b!jZlv_t3vs?7(y}F7zTw`dk01w7xp9?=@l`}sygb>+$H2|L z;i`=p>v=4oq=p_)GOh1+C|4|&AocM`1p`F4-~Xj&EI}8GGncL7!;36QvPXocZ@G4F zy4jX63Y$xBR7R5eMJm=arKGQZm(Wo4>*P3gxQ*45Ba${6lNVjy#xVLW`|bOkY6Uxx zUlKIqXTwktlHx8?d>&yDgQfQJ5|V4jlDN74W~##RVkhq8)?SQs{x;p-gvBYJ#wf&+~8Vb^k!#E>FJeoarv6Lo5(>*G(BrQ<&aM{hMkNf>u> z!R{T_^?-mK!0U4%_L1}oQ#KrPUAqj8I$_lJPKmI)Xu=*&jD$4gxt6D7Y7(=&v*Hz& z46XyQAsNps+BY4isVHR7e+j{lL#H5*%BVk}?m+gVPP0;IwIgexX{Fr1HHO6~eA0>F z1jpY?Hpv^KwSF4y{5fzHN$f=*w9G6wW`wblaara>i`V*Qm5b zF3fQXWEWsi*O?A1g5ndE^Gf_kc(M1UZ$9EqHF5w z0~;F~6K|buS>5u4o8P}I)&?;mu z*e#h#lG4>5Bx1@6xD3+>J)?7uPd1^{1!VLNWa?j6!bcK19H;3~PQooCY78!h?HcwD z)o7?=Ut%FPQumMOdGseM@GoCnFML-R@*oMtpZFbPq4B!h@DX16@8wCSj}7zYge88{1w-QndIpbQ-)HH&J9M(s zPg7 zFwCbnnECfiuJ}!`7$Wujo6E0s--gt{8jQayh#~kS-FxvBo}{Gj));;8UB7|6kM?|j zr2Cuf!9<^(k1l8I=2h8icZg5Gidx|2_TG8V@gX2W>UjWqsL2!~jC8CnfdYLy6VSZh zC8?7qN|e(@>52pNQ?8Mg8#ht()R@GGo~Z;hGvOR@@*Lih#is_Jl1)@I3J!x#!&e7B zlJw`&A1))xeJ=p{Y4y|fQtpXod=REytb6-uO2>@3NO~KXz@9qgIfGPQOVDCz8A8 zaV4fS5EYEqo=;=mm`=u-adLm7OZOhh3u)f%r*^b@%%j&K+(`bl%QOGGhYJ^NWUzrd?5`4PW@ z&6dN1&eV-e`O4Q~3uyqn+g3h&B-YV>M*-BiM3zJ;ZajKS+`NU9uvf zdwi2e$~uo60dlqXWQEd=U^KERO=Go;_fNN0)Mh)$Oi{i$e}cLqj~{Ar%s{KVGm7iP zd(}0<%Fo}S0an^$w)yN(U2IfzILn|cT-3<7>Mg2eZqNqQuCd`g;V8$RJz$QjVZFAJ zq#B`_dO44~?Dcs<54fo=?GC%TSp4cI3q(QyFq@76asTUz7?-}XLiQ7duQNpMxCB8@Sp z6mL5q68Mre{N^=up{%=U!-O{?__3-&s(v3kJv<0|A14~EF#bcYgl}1YsC7f}&(L=bu@Hx2W~Y|Kzbuar?|V47 zQ`;@q%!%wj&_=s=!uuZ@i}Hs)FW2Ly?+|G#Gx)d?M~qUjZAaQgsk=%s>Wot+q;7dLto6OR?e2ETN^U4SJ6%HtIQcnBLUKyNfSh z=Jkz3UDO}x!LTch7_7v(#@C#YPONBhl~?$!y#f_<+VW42SLn;|)xFV5|MvC%mQ>a2 zWHvMJHX{?0&?kq>U@`xLSU!WpvDhvm;ZkHT)GK}J@%~;U7#2O~Mi0W`6Ka@W>JRhF z!DG>bWP^up$6(adKp5K62|j<7F-YNndqqMDsFbo?URF1VUBW=4)WKYIXEfwb$`n`Y zVvSnlU?{M3ruH_5dI?jiaioM4+3c{3=zt?{kB~RE171g-`^3Afy%FI8k?UBSiB7$s zX_>N(9s|FaQ~vEW@qkO8o;Jnb{gqnHcK3f&*4tf?moQryQrCQpfRCp(q2Wh>8L4gzMzq#5bf&=( zbRzW43Solv-e{_j_IF#rL!}+hgi=n7*kfGX4jl?P$ITXke zST>}-<8hdF$4UO%i-oc8xk8zHbP^0iVq)gEjUNCiVlpd^q)D=%%Jp#Hppq zBMc|K=&03eKy+`9a!Vsj9D6K3%+P4E;S`7krUgRs)BM(ij>V7UB`vZgwoUIa8IX zl#?Csr%tBqjgf~V%|~elg@y`^fl+u<=bDIYy#MfL$O`EhCFU6iSKR@LM8VlN8DkN@ zW$?Pf95Q3BdvY>UEJB;?Tr`@gLsxIKAZ=T!f=p8!!`KbXX-`15mNLzNj`D@`HBRi*<=+C1_>+95nkfk+XKceRFjAd zS`fc9BcLacut=E^SX$5TD4ouTFh@2ua8bo! z|HiNdjv28-BARcTla0l46sNAb9m()HOV>&j+%Qm>4#nuOhEm?kave0pyf$$k5FlI{*xP#$ry%$|5N^31$d*?^^W4 z-fuzIOUtRw9{eoF`N|B-+S*O0Zlwjlu+0&c{B8V0rKgVsi_L{OUv1j}PloLU>&%vgaXc6)z05YCq7YetUDDfq; zD4Knp!2r!TDIHvZH;zLs#Cx&gYGV$)Zd@n$#OnvGQq9L^CLs4jE4agkmXSI25qX92 zheClP?)D6A!>tFAG#nozc6m;5faCPPWDNR}n}nd-;E%i21p3XWLDA+0=viRB)`Z}C zxry#k>2NR_{7KXH4GlpbP32%_bIKQrqvW|x+%+73fWO~S`hx3OT3S*ZorZioq42tr zTsf%Ae&PVvSLPqA`zS3F14WtNxwYXmdTX(`+Q1vMnO$VH!iv`j^{cqHBC$i>G7$Gh z=1{Sku6SB%imX2N`zK5Z6}VHD#~N!ySSwg>`PTrdalg+QZ0&rh?+>QeB~q!6b!Onl zXd^a~RnsW9_d?-P)z+Yc;NaY`V;QCgctT8kh`@L)G^L2b|AxEzW{h-* zkP#5}CZuj>jC8ptW-xsM3c00~1n!^GY~*k$DoD>`czPg1ceT9}=q-WBdhamP~!wn<1V^O9f@tp{UW5Jb_{4us;mcbM0`4X$gBAjXatK zEdq1d$)g2%At_Vv`%Ch8kx!aQKb^?(g6z>fAARH(3=jqJ4Pd8;fu@)0z;F?%$Ch7q zck)2tKZi9PoEOcjrIJE8SVF@GbNbp#r!iq>YZ=v=zH!2z%VSL69J%vtYp#YYd!I3~ z_mPdCtwQT$ECTeVoKqP*2{5QrV+Epd`IGytCBfbbQ6xf(O=haYOA=Qhb6okEpqsD~ z2rqCDIEgIbw$EKEjON@;ZSYV-v=*HN1XM&D^wRI>0{-$(zaUnSxG^HUx*sN(^3S5G zw{(pbS3aGN28ce|zV`TCR(iCE9%Ju)aN8;i0^{>iPi`?gG{fcG%<5h#k?|*Cwep<_ zsA?o_s$*!d}lRTsJgQW;Q%JnRBR;Gr#(7U(Mvu zMDQ_{MF%nXP1TER|0X@&|F)>-y>F7IeKDC3v=dR~9z^_i+3k{PdEg>lDtt>Rx=U|h zk4eb>wqJm#Cb}<}HXd%PGUL)t$NB=?+aLET%}(HJ1%8n49*Y-d7$Hnt&nP1PvtR-k z?L;f|t|mm7b;I}asx?UAiyMSrsn`5QPl|6}}!|NIALgG>J-{1)OzD8&BQ7ozT+=z)omh25Cw-Mzp5`V=ukP8lv{bY(S<>uwpy?4%Q?MuD4 zXM16PNoQy6iap|Dv^Dv`tIQx~>b|$Aq}Rz%(_G5X#AOemp6RAyoTv{}8`-&@kfQ^9 zn>S9lnr|iGX5sW2xQ@fkTZia+p(FCf#~sWlhH)>tcZeEvZTgbZTUi9X&Rq<9vH_jb z=UK|7O6WeJSUppy0B*%g_+7fa!J0Ci#WJFDi5JFP0bZ2V7BM#2X4!*6eH4|4rwIl6 z(N<`#nC42G&Sa1m_0PHoDePd$%eEtv{P2Trtvr@bM;AVqEqT?^cD|3<;2-4lpcJ#2 z2AF3W&L7fyI?L=R`0dU^n_LDp3U%q|J=we>>XIH!sx|)-R-Ql`CqJ~$iG_%@0 z5$*}Sd|J9_F)WtvhNrWb(Vm_X?z?R)2Ip>M5Gj)C8s*E=7`$4nx7dIO2cxy-y{IDf z4vU1;q0~iu7gGuX=+NB0o+rU)`Fu{2po5F-HH2FiUgY9iO!_ml2S?nqP8ULso5H}y zW0x!KhZ5#2TeV&5PoWM}`d*Ka@3=;t=%~rL27BOJwSeVPu^EROwpaCqgi8i*N=zii z#D+a7g!*zh!!xaf`oqyU9^<#}9mwpuYoybX0i?F^ap!@hrlj<$W_0ay&P-JTo&sjiq zUx5Y*Yi#_%aTog{pRdgK&W-oUF58erCAPegmiyF2_V&0eH*5j3k)~G5oE1e*e_)$^ zUu&+u^qpP8D*kA(*>dfYPQApQYvOkPx8hrDL-Iux}ugyz{nW zzic0v^G-Qq`8b1lDHX1F6#giI>=|njO@L2M;^-kpA&1tC2c)+#K6o8=fsbO>yHel+)4HdgR&r-2K6cae*JwY0yaT zk@`##eTM`N2?mEk*mrex-909CKVEJ*qM)Fx^O<;LF|Ut8D+<5#A_g|L zx$?qSsg2ExiDLlZ+sjmIelm9OHIOvsGy|xb~TVB-31I4Tl{*X@2=pR#|;%}BD8Gx1g9U<_X zy&;a3MI#}j*VnzVqrDi5r`mGu?7D(r?s&c-L9h!LzUL+Rs`37@^%5EU)^w$+FG_Qi zku@JI+S$?*EA+n>UP9yarl~t?yx$18cS4kD#_{FqE@H38eCrwxOr3Gq%YhGM?91I9 z4LNN)8>ZIl`-G(n4+CS=hC&IP*2|*;5XUf01zCKe_J(bR7 zns!gF*Va0>9>{TA@IMN!-$i@Pbr?U)F=#7rBmR(=#3pX z+fWwn#g0tHqy)ZE*^9hbV+=rv}{K|IIKOt^^sWvnj~H}X5nh^RyIuJ)D|%KpPU|^=^X_TSLan?KZYY%%RD^& ze9w(}43~Nl(c&Vn*DYR~yomI04XvewQjPNE8>yD2f`3}FDWUOS|1DsG+DVtzH7Uih zk37hgQiHKrZuQd+)Jt?9g;r_L{WW!XKh^8ynWed2Dt=0LFFdxE#g@aycPU_t+eYvk zGeF);Z+$WgSC`@GvFw(R_3r}wBMRgUBOcp2m`_bHRF3^saUG=p0KWsjPL~9Uz!P^b~^I76HA7ADn03f+7rM2`D)U0Ckd(0T0m|iwo+?C zN&X9X)^)U_Dwu^7U^lA{D>A1S`VQ1R<86kvOzG-*7Pn+JP!P&Iz-=;CLV)4tY-Rk>XIzR zeEy5->ni%iREWnh!Y-4!O!L%>R!WV>g@vjww1MV~17vS)U0QuRad*H}c#?+^^YyKq z`VvyTSQg-ZWNzB_4UJgNm>&a^ZGT71vPo=QZ>`qh)I=IvK{S;!_a}Q5KcZuvE=R@L z+49xb%|t6mpV*(&anSW@5B=lcPZtO1d{3U|au&>mC-LmhWpZbZQBX%>MZO_erjX)} zr7__L2>H>x#17a7nqtb{1Ph=1@#mr<00({0V6gGd0Xm=8&Z6S4EeQKF7foLhZ5^2e zv4&eeXD*O4sY$KrMZeNU2QjLeGYa8mIT3=DEb*&0;8Z*)2j&6cf8>(@37KGClm;F% zZ`P=))THBT_|Rr~V@*t+@2#lz?Hq9{1}(c^xs^3>a4ud%6KUrI^I=pAuv?Rf}Ss9(;BYqxmgDri6x z@$fM)Oa4He+E0xd{)PUjyUOVtZuG_hd@INcj|f=}L02{rO}1*JcfH_V zkJ_Ie$99{tzrxn|x=?n9@#kyD)!=xPkiAV7=Blzwh^)3WcUH^?A1#xSV3q>j`m)+X z*$k{QA4d4kq;$dSV!oTA-{eW?2P1JPy=T!X`WdLTv4u)5K6E`M!{E?T=mCX~)=7#` zo!(IUquDi4*^mR~Igz$00UyTm^?rg;hIOe{Il1j)d6A2QOSWVK-I=;xByw@|d^dL? z18*>?PD^0kw-FjJg{N`=-Cjylk$u^cAvivU)7}F0EAo27J=UanB-i@hMLBMKYM{kN ze#cqD^DXE7>eSj8Z$v?U?x7KAYA@DfZ-4Sc^K_c^T#I$Ccehw7Ssj0v6TC9*7WD8Y zQx}g86KJca6(pt;zQ53E4RRkWtLuNauvz7t@?b zrjA8@Eo7=r$Z&o-0 z?x`Ty9cTucN~a37Q9oDeEj}AhX0_zOpbV_+ZtM(z%;3ic+)JTE^ZMrr1@Ftze1_i4vvmgn>PCzN} zrgnE%-e@OT$`-JoB^|D>caoToKnRvD$xc?Tf{&!dWl6!e!(!tR zHL~31J!L;vFLES&8QEdHH3r~du1+V|alMR8D7>E&4kD)xMeXkL*;Flv!N=4<)fF4* ztb%!Jv*otuH~2}Msdw~2J^q#O!5(IL zvI&c7PB!vmhd*4jFE8Z;`8WF3caQT9KjHz0JjYNMtcE`j$rCogfCJ5Z*ZZn3NRfh- zkO}l{X1rEisi5WDn+3v=v}WpK;MKb4g1;%xcV-6R`i`P7|9suQ4J}Y7|n6hBfo|m^zs~1 z8wsSvFE<>`qckl#vfj<+g)%q{jH9@W~X7>bHxX<);GJ~xr z*CdB-2lDB;0v(qvj=#NGwh?3t1^uXQll5%~ZR1OK#*;3t0BtBm33| z2P7a#v1MdhwSFV-i<2RGPj@VnvWT^UE#SLZ?O}Cc^V-(>V{5rnut1*Jw&}~y z{#B*awR)FVR$D`d->R>t#Y!?!YnK6Ek;ufWXSmL!v;Yj$U7`bzQ1M`wx-Ypy{Bj9R z1adz+VbiSI55EMH2Jn&1<9=wOKFIh`+rx$Vp6hBJ!FD&>?xwswoqAcHB3-}qr_h)> zg_oCZHe!Y}WrIZX(#ji3$BY=9rNTdWXY^Zg=gDk2uFu=@K^tKaNN>0L2)KChV7pn_epP}sgQtH34% zWNZ?=-`Bugsw>2okk)6S{CvY{!#hUiDWe$rXt%3tAjmmj9w*g=7v+?SZ^*xt@mPK( zxN}*03-4FT1}j>C z;^N{`(j>Au*@=+@ z`#6yO#zkMP{Syyfsjrt90q@Le=lJ-?U1m6sc^NQI+Tc?%={YpJyw*!>t@$H(PQrn` z&>mTK=GtnGE6-LIJEr6$hR5>}z_i2!ukDR0OKn%*SnID@6co&okwY`)zfkgXOfkK@ zD4WNVeO043BHA{U3lk4lv-T#rDMqh>CMyu1>SOEJnuJ0>50I*QVdv^RQ0BUYIPIs8 zX2!@K&ZgxFkGmj>^Pw=Z@Fpi=eJ-Jkvh@Dr{706<>$%Th7x_o`J5M#qFAvhSgh6Qb zB@E^v!MmY&d*|9}Uk+g6M)0cdLT^B>;+IxujL6va;0b@#R8wAzKIc7pQ6>m-=%0R4 zJ07JPjhu+xk^F~Rm^Hja$idWL@f*eLRggSFR_gH7TbF*7rxbQ{tbi#x9O~ zJ$`Zp^Rks~FLvF#d0V64u$+TxX)&1Xcy7)XNdj(-h+zp}~&s~4Mu7|RcN%?hQn5=t!*B15q zApw4c>65uN_yP|*KxmY*J31?o+Hi-V8dV(_W|nnzN~m=-?)JD1H9o(K1T{`wp-=W& ztV_3k(R=wWbj+tMycA=-bI6Gylq}bCJPJGRrty_3nN}3iMAEO)184=3Ppo^Cbx0L zzj2-74L%hzDCKiR-?anZvm*1BYVO4odSNgpb3zt7kTuou2IB90bBQovz@hD+XwU{Y zbDfV}8gyKAS`g0{7vodg-az%|drR4fbQ)uZ@t&X@m#hP(Ch<$-i1BRs((^nYMSDu% zTJ({96>N%B`TPEiFSl%^SVw*dO#blZ`pbF_cMq!()=Wa{q>XyyYM^KZL4@#^FYPH6 z(g3#fgqxr5>F=Dez0|kx51(*)8-qyjq+0UL1>lr(ykJmoH$?UZqiY{S`1Yy&D7EsK zIh`*S?Jz#}?~>zq;+o z6DifT%5s-Pg^c37XIM!~UMK``-t7GT629GI%9qva0fCt1OJ4R1ZIGL$mUBxAq9IbktLlP4}sM;K6?DKq4hf%l-cy;-XjhFR|!V0+oE zJA@Ranyf4ML!sf%y|Cb>a^x@lC8F~%=pE}|@ zI*RA)vGDi54dQ>kL730~CwD0GI{!~Vv7aMU@*ky)o#xi|@2oVakjx7c=TrYPGnkQw z^?oEK&4nJs`Hy?<`o2ys^BaVE9LOgNRJuW0`_89wr1Kuv*cSd^x!HGQ1MxEx zMzFRQi5T|=c`DFJk>VeD9dDP@pyuy@*HYOZ-!6I9UDRJ63ky5%lkb#})BCbduAQy| zvi?iZjf0vTK)w&!Tm+$+Tqkys{b=`~(xCi|`+8xd+CrEjjDP&7K7%7m=XIEz*KJOnOh>8~iY(1Tjsa{}6&nw@Jr zfSFg_6N3nPt6lWHYm(~?87tSMSHmE2%n($FI+Uil&;FtjE796I4Mxe+RA`}AF6d5; zM*~5l7;sfT;@3c&BTuUJvm=S@jfT>4cy9HRv#ZXIhKD986lTO@0!fynKpFbq8E@|< z3QAW-kj=JnIfDjyVzXAV~@Oh z*l}2o+-?)v3;e^rnByKnb$XO9RH6{}tJqTxKTzKYS=7la)ZLR%qBT5Ag9T2f-K97E z_A=P%ZjP^ZyGMsxgAe*#Y!c<>B3nDa+}>kf9gJuDO#J$Nx*HF zAR`K#6mFqo+*cn=hB8aFsPt}_JULnYr#$Fci0$`xQgzqElAzANvsg~R8@_wESc^Ky zo>`0olLcNB5kI91bhhrtvL?)O1~KJ4$Ro|JdkZAOtWn?oa;vE zh?(L^9I(cV0*iv$)|tnT!e@dK2!+z`b;DrS(5!_8ZXcmT;n(y|i*g_n{1$kzSzs_& zM;;zmsj1+BYFC>Wd=Rqq(~h>Yo%=SvQV;Dm{wUlj=fE2*7_yGvw0)PJrtZ9o)Y1qk ze>gQ^?ALr#Pag}wTsDoG3(BS|@TMhV zz_yO$0l*oB&z3S^aL$msM2+EA=lrX5r4&38L9F>tK+Nfu!NmIY)#e9m->GM=DS`wDXQ6v=}zgp6!KwR$K>afjK;y=GEBrKQtkc$>SB6=b8t_=OCdcWKJPdL6v?pdUd2xrbhIn z9B_9$^z3uAq<*N-3(dnHt>Zt#Z6*nSIx7Kt(yY0^?bS4Y8*(}eb&%lEkE702O zXqvCG6cvs(OU0~FrX!ul!H}RO$uTG`4PIk5b?-P#yEJP}G4-%>jSvpE1amN9uBMEt z4bAZ@7=79}WWpm4=oVeW&&#jyP6qA|E7zOj@CGOh^6JaGb9tbK8Y#5u4u1;dLuEK~ zf3fg&!=F~R@9pkO@^6!4@kKP>enDK0#xNf^VN8P^(hU-F zH)YFZ7#mxXoD0|eUJ(=ge9^)zqDlUH!b>Ly%pXG+X=cMBYkm;yYALdt3~QktWYm)u zW$@o14*cjSqql=o`>tn%1+SS$Qs6VAK2KE1bbL_57&B&?CV}5Wv8JEF}0pDaJXh0Rv5%bFFO>zI!Bsrr5&tg zP|?U$B*3k!21p{23tK#8W0KAmdWUvsi0+QGd(%6_4`&rK+lX}-6Atqp{_XBfYBwaBZ~0G+Tv)&*~tOydHz4v-YP22uIthc?iQeM2qCz; zOV9*&x5C{mxVt8}yCgV8;jY2m-Q8XPdfxYY`akIIvp%bn8sol4?b>_IwdTCGoiCtZ z5)tD0)YS278yKF6`XuOd+e*J;7W9s5u51EB_F2IUMSvhvZ0PYB8vRDBh{W{L##o0| zN;Mm9g5QYOBw-4+v{N6pE}EFGDES~8vLu1UmCG5m*&rS(B7{`>*NLHHKq+ zyYuyMycYO8rG}*HdVqpbdKm-I*g8sLmC*PiJ7uBq2@`$2En3RCS(Hh`@F)P$&<kS}(5 z)|2AyfX4CpEhRUYm;GZ(CZEbbn(m95v}1fRxVGzP@^oVfgb@4eIQV#n9L;;(Z7~5u zPzyz7AY$gU2^M7lU9cU+^}eFeyUl=3;|paQpU?i4VGdfN@}% z5rxHJh@hNU4-)F+J23i;WxW$Gqz9k+=+pbheSe}}#VfP6GAf^|D|}aZyu>c)Bzc1i zSL#|6e9*iL6N&aC_(&ytb7z?5gd{5i&SJ6Xr*K@|fTV@I?+^YcbK)?kDIVZ&d4&BI zN$G#e@-msoAW-=XzU{_jegURm^%Zu8D$Owwh z+Ck`cF*V+=10(A?fas!jwlFI;i z?Z>8W0gQCX>?ilON*YVDfIt|xyo_6>nLqPrN@>&3V@XQCt(;YrCBLSW5sRiZA2hG!I9bI#sfj9QKI|KfcbkY0-OjP1#p3F(31s^V~0Z|D{lXP z1=KHZ65j|%#JjrJ*2V9L%746=X`f5;Ulk!+M3-4HL zRg7Fy3NXn_Qrtr5ogjzUO2)Yt@oPG9tYv-zr5<)GQX9N2M|F)W6YNb>6zwcyp-4hS zFv$DOt^zAzQutL0rj_h*^TU5cZ(Qn88~^UtrEx&>m4UOH=yceo}L>PDp57$M=g9?|n%B@#c{EzK`qcnAP<>R>8jAyD|1wdLdy1DPaEB)su+Wv(Xi`FmVxd z?RUm`lBgC^(-nk=+;e_iaQfcVUjOPBR(S8&efRwh|AElALp8bIuPuhL4*2A{G20~} zJfRLLEO}#vSO4A@N{9~!>vO!tL4#)KpxLwt8SXE;iYxfz)viT`-h~t}nELAD*E{Ul z&78W;$2Syur-Vq#)xKxB&KsWHFiv?$mnH~_@o~+(ZM@{L8{hIG8$14QPf;U(2YC#3 z6BoCi{eFUuB<*gkA4LbpDS!PvOb7Wz*$NIB9ZXvE3POP-THF>^ix8dW&;8ZUjJ4!3 zk#|PJmUx|woj*8O&T6_GvVRzjO6e`u@a1v1AXi6q8Q8ndMPzeEEzgf*)lL!(JT^P8NuOn7qc0Zq=k5*YVWrMx>IWUeu~_6?|% zG&y{*4L*2$A(waNvKzM7QaxR!kPd9%TNp{yLkT7#u(5c=Fp^Zl*(5<`)u#Sn@d=#^1ce|I1y zIx#kCOVj1A!q6_|8USz6S74^je?CkAa)t%^__#a*SNJm3jIKD z)pBGDq4&ayil+W~Gl{H7~TLku;_j~Ag>{^G@9q&;MU5r*FFTf0WI zVc-Cg7n;lYBI2kFu0&7BeaK^_LS;15@=J&#q(tNAi8Zz_jpB0HB>$RORmJ@3vwQyf ze6K4m4!dmj9=&+W?jUpi4e9R~X%WQF(tEip$L8o2vKQjSo0);~!<|{w9+rHduYJc8CLZqFU;jS=pWKhF$pFaDGz6vxlm&S9B*Ig>28CF7kUt&&R*EG>? z!SrX9%*JBps-^LgAY!gUF@SVs63cY!m`pLE%3uI@h$(rO$B#*a%J&s}uS2kcZ{FCC zV_-F7OfAbvZV}oFVAynM zNiub;CCz3vfa-MILb(K+np3aSe)!=vc~NhWKD7o>qs)pD=&djw>?6?b#CK-MBMfLT zuxWDFWzcbVY!`k`#sLqv3q4|k{T^FaW;GoJK8?6!%{qScxF>avPje@{%-#f zIYVE0v{h*WFs3`BpbKnsfky5|T{TDV9;=nXE59Fna;kmYs9jNcE(Szk&2tKba=Ikr zoYDx#u?OHHmaPrCRq&&98oF1(j@ZA=IJDNlK9we-2@L49A!(*3>qDcJZ?{F&3 zrQ4VDd``^;<4?^l7vfcv1sk(G%xmv%7GLR9UFAR9RR@AN4|I)p4T$OybK{i&)l9^S?@<-W+!LQ$04Ba|aC+iQR{g z`bx|_o`rB8*&?*yn~2Twpgi8BwTtE06G6BoK1}K7XCgEs<>e1JE}k_5{VuCZ3dgbL z3f|ktaY=;zhkZg{-n2QCx?d!u?0SZ0Ram_jluq#Vqz9u0z%hdWUIrYG9gLmCv3%T- zs!n3IelF1zFq=ae*&g zEdt-1?P^$jUHkD>ZB}uUhIRt(=kP?=4EE1N%nk61wv&1N@XH_TBtEu00L&a)}q6A~i>(6Y_i~ z$nO{MnnPOjvz*`g&U`vtZW|wNR6Pod5-XZBS?xuSXavh9 zpAtp?Nt6WbK%8Rlc?!R1E@{Kr3sqpN;Zq zuht{-@$cFy3;XuH3o(IyTN_oh9`JN@J&$_r`DvgkBVqgE;QPweOk-3ajcvjWD~-8* z@a3|H2FK72JwlZ6R+-vcYUNT5Uj70&+}aqQzxAU&4DndDXWZVkWUl^UsAltsT&jJ~ zj9p`AP8fA?JXznQ&(xb>BGX3Wr<+9I)ko+>rPT^Dx|Zafh12v*A`*&ry5V|(dnTS8pcA!cA>@F9jKdU{RyjJ^?SrwVzg6|) zCl6P5NP?S#E17@ZG54pa#L?}P*>yMUbWYoV26bLX{v&8@4%@&OFidr&E#D5w1$8_kVeDf&|EiMLc_VYs!Qs^O$udvSK@QTP6WQEwx9H%KR}KhJJ8 zV6ZQFUQD}T`g~N$=|Rb5yEuP+3q0|Z5G$$vZs z4Q=bb_%5PKfiv@_ny;5@GhxC+#onYruUT?NH4+W_ePnnlEfF2sxRCPUSi2}drftn8 z$NPu39`Z2FPT%7apMYKmj)V@H*zAe_;;?h~3)3`n0ZYdDRe+<#j0;Dt8%dD#Ut*Z^ z7`%x*6?bnCBYMaR$G5tHqmUq$>LPxw>bpuO_s*Sbg^zO;=C**vtY`y$EUtms_`CUpBf zhB%#_I3@hKso4+xZ4Se?N8ebp+n&rfA*Y7Xw_U$-*D#?1xiW`82yMUWQ;TKh-LIEu zTkjvra^*uExYjEl?@J*2SzJ2Uml@7-J?dX+u~oMTtnJzv!lJG_#rp~2u6!Jk3{ z$+r#1R6FxaKbWDH&w^3>AS&?9OBtu|@@vX_(6uJmg%!Z0=`RH|tLBi=g(J(&(p@0p zCmY^yzecQVkA3-17cjrZ@=Sn1s~I|jt7711pT1_z@yI&j%)^IK493*~UqI<4lr|3f ziST*1 zMnY3`dU|V3t=}OALUg-qsX9xY-O+GjHl@l#i_kjr7gnd4Z#Nc7xP)y=sq>MqWjIdch@g6KU^?UUSSZ@;meV6oe2$s1 z>E9~`psi(BgC_C>PI>DBKlO}hQBR(jhM~PZN|SCv>D$av-*n1F0%?7t(KX3PJ1%Xs zJ>LuJCLJf+LdMDiErIpD(DUcg4H&gBzlVUyj#{+u70#JtdUkyL*AJTw&k-@DYP5KB zE;QlC8RJG$E34tc*Bpvr5;1IsUwdve=f1!k?bY=5FK^Q9=ZCroYe6LEJ2~4O)UPcC znvgVPNgs~S1v3uzT8P}|AzM%Vj`+NOxKFpI2*O#AIPvAKzCK?#_hfSQo9gemfS^=-l95CHfZV$2XgY$Sl;_Iy7(l zLQ9j|nPv$!J0xc9&xGH`CqOCB=G0KvfuJMnTzMwUc-pcS3l+ST)t?4U7Ee|#JMHnn z4mb~|bEeOq4GjCEZ*81t;J@9z@0Q5b2WY1tk1cr82m9+VH z)jW9MZTzCGD8_(NEMXXN!np&<)c6hiq`y7=J{Wa7uG5I+*v8fDW#eyL>I*;l-;TRZ zJo||>(KfI;EK{gze{?VLo$PhxX7OA{QO$P5ofj*T{XRgT!7{N=dlVxS6qO0J_!M=I zGA-;IFtseSx!dG5$hOTC`n)35US`y`*h1V_>NBqN<3Q^KC|6_jtV6Zm&;qYkY|xc^ zdavYtrjlnfW*0Uw`OHd(Asna9PYS#Md(l*jWV+pLFoNwA6m3@|UU1=F>W}G&sn>cD z!R4RpvOg>#3dGO-cxGobvu!5mAid}C@52*pC9X{ajfNR$$bE^7>j>}Sw=39boo5KD zS3@49viZS;%1qoE+Z~l{*x7t+A$ZP5clt!Lv;J~T^`y(1@6Gha1Dknbf+$zaep-ia zd9!dDx7@Bxd)=i2Db$sPAjJk2xi0m*R2-&q@~d!e}O zua(wP+w8u$K?vz^ zI9wu{3Zq}aDP*ma{AJda21O%8Wyu?#^Ec6(HVf3~)=^I1k%nK3)KO0SpL}+GLFCZ4 z@0ij!<4`CB@0MhtsnG-r6aJX=L<|>$Vbj@*EI-D*c=nw`&B;-EhZr5tKcZ00fN84K z4Yh{750rT}_3e?1h|!a!N0weN)rbI{FUgON?Fzn@zb(86K8DZr<%g>=6zj7bB1b-j z-^LlUt}|l9%2q@ov%%O@^y({zq(NKGoLm?|c`ZLZvQAfE@-06B{qQ&9Dbb2K|Asi% zMdgmZ3{(S8Yt`vl%_li!3Dg1C0?0t!=D3A1fa!iF)G^;~Pl6i(xy*5N6C+AN??Bu{ zt*g72VGw)P)z(d+@&WHFRC&e7M2iI0h~Y3D;T2SlDp#o?ZDpO59d2knqg^fOW;Mri zEtzZ*ZJw=QvS8QE?mVlp2i%A&Gd%Y$3UTxY%_L}RdbdoXz=?}W#WD>@Z@Kw`85Z;bAVD2!$)jUY)4=Pz<4d>>3QVDB!w`hdvusqPnAEub=Z-g{m zn}c8mQ?i&SnRZ|}zMv#VCEDtC%0;RZA+LHzQZWnb*Z6w=kiQI=I=a*_-T89hI5p2! z{A@TFuy8>6EY?G94{as2vR(Fth!tZ;P-^rXU2yHAsiSQOwE7DS)}rrTm5w)Vao^DD z_-4~CmV6m|zB(a9MVC0U18v%Pz~dg7$^o5mO5vy&eTX^K2lbb5Pc3zZ2Ij$`RdK9C zG2P8a(ZmnbKYVLQmC8xH4X*YJO)qTgSbMiPpFhXzdB(f7qjGtW7KVuOwLd2#Y+Gn=q}$f|dO+vy^XyIf_4G;2>-G{wo=zZ3dn3_jvz0K^r<<%>n^sbL;K zhoXe;jY&3TRbdA8OOfs?gN^|&N_q0bN`G+jW3`X0R%`R?_w*rgE1&@j%0qj@ZOZGy zPucv4`*wUR!zeh?A2r}&%DZP;tQ&I0RFL7jGoUOYEJeBzK0&M_iVx(jT+5?ezTKZ- zPNVlX{BrR-3EmT2{>?XxtzVPEs1PAgO5!+y%ZF+wHnIz~ zp;dE^NtjN10NJ!?^pk*UHpaXSL!ql#m&exa#=Ia``S)E`z{lc+vO(>#ggk zbHNyRkSQ1P39xbbIp0OmY$Q7V`o0ih-P++P1}bLNId8NxBlVOV&NLIXM~5eB`>zL) znFx=yw@5HlUzTe41R;b5$Kh0nJ^`W(>TrxC=;SB_f_>(<~Vce%XEVU#t^csDA!jo5&EC zsl~Q6mhlPnNA2UJa&A&8GOshQSk>%ju}MBfp}Ve7JwMT`dXCy+wJs_j^*p;+<6S2{ ziew-ElE0Y5l#bZCtCMaBfumVt zo1!QcH2lJFZrkVC{$^7Y&lv+3eJLo2#FK0e1VTAOI^bfz4DLaPCradXgica22cs2} zm7mDMq4uQV==N)Hq16hcLpCd$SWI7Gh+j&3cdpz9f3A|A(iMj6hf*VQG>HC1-SWI> z%jQC#J5U@VZQ~N?%hpL~Z{ESuERwxN&*K|pp_f6bRz>MtTAx0yIaUM4UnAZr20d&))f`0Vb|-;rYjM@*ZY;kO2N9{0 zc$tEaSgLJSoQZFFZdj0KotM8IGS7~fMxb$1Ts-_jzkjK3y!;wuwaBP6^1U@1lExqO z8(v(F`$W`g0>j;YdoSGbs{;)onh)^ujX|I+wl@bqC3GR29&Tz(oCP zdku`llaoi}sUaVPf2gVn{RSWydeCRnUulKU0!R`(i{Ku~(hM*w^g;hJzV;$7pA!Hv z7K?hAsOGatJL8Tlg#Au{OZL8?Hoi{H_?rtnuHYy$$g$}AH~~>oBacDc)s)6S21ZIa zHUfoOmOB z0}!+M;DB;+x}T6}{u8wxJnu%Zq;01>z%~@FUL}u`d^L_`M)0s(*A``s)lt?$#Hr7g}3uQh7XUPlwLF_ zQB3byktL5lb|u6&(qhbE)zA?ujthh`i+6nbGW?|vbf(#c&L>vRlAQ`skN`xCxSvxU zVUrfYSy?3I6%|FqSMIG4=#WOGZh&%Gq7&kyy@RW3Qa|L4eyGf!$!W#+BPhLLjBQW! zc}*OmmaY|(Me^ZeR&YyG_I^0s>0U!DV?{76h}&)x<4yc)_Btvu3bG4Y^B1kxE->@; z61SB5hkkS|CUalE05-m|N1K7zo|?e+>*yF57_<_Dem#|XEfe_?D6|ld-{0*Z5Kh*a zYHHf{W8dqbY5{k@!aCFIYCK zUTq>qpS0kWuc}q!WQ6_k=q#jWTWVuy#J3Uux1sB`>xDbYCJYDtFLE+W?TF#}S`%8{ z@?g_aAkdCVR>239I$c1d4R#vH4`MD9z)okkSn>GceYcvz)-DnC{dB2ILt1d50~({d zP@GOm@Sic~;C#_TI>-Mb1y&rW%(HA6K-{#87*XAIDA88)+KzQd{5m=1!+^3>_+fMk zkkU3_xYLS@&tir&RkX|Ec<_nA01QiipRG_7p#1@Gay0<1;Kyv@!6?>GuH7EQQ8Z`3 zXrKxyjJ8MWfiSElipBxtuFK{^c43GGUwA_s7!cd3DSh*BnD)E(^d8!%FCgbgp_}kc z57hsN2I~Qe#{Yw8V8I)@Y%{i!kvTD7g^3Ae5?jwMV6nX=Ze6R-gwsl1@Zu%bJ8BW3 z&tl@#D08%WW*f;7Ccz4U?+WUp%WUFg_;_2$%0@YYdS7!UPsNbNLma~<&}ER4v!$Mk zEg4N5(^c_XtYA9IR0X%)T#+%_^>~idJ^P`@%aF3s%}L@ddHRDIACLH%R7qEfqmwdB zqT_L7KIdxua#1h~Mpddatz~q{*DiP!#oI|9T_7!ywe`X>OcXq4r+-(FV!jJ?@-s18 znxG{5jkq?Rc{Dy3w4BUd&rV0+0%+diU@tay)~e?jO{U!dBh40u>*|^KL@l$vDl&1Z z){&s~O!}`0>SMu&m1Z}Ix1rObOdOWh?tYSnqTY3PpLsyA^mc?dI8#qAs=LV33qK2$HgADuGAGtMD6DJZEe{IsB4n@9!YfCynm$QKuXpA0R7gDH4+SOFthF$2Hz z2UFV^ib2kjWO3T~&6|AX49dm|>B#8~VUs0(_A}X)U9sqrttMAOM0R$r> zHXAmMgavPOk$;5#IPM2yFpbg&oIU3Uuu~`+t$i(HQu^l4EScFFNk{2L5v4-dTfG2U zU$LC1>72i~fz?06wbcJo;dx8`CH*@Cww&U_B0TWP_%dp#v0C+n0&RpQV9KsBfq_*gYj3WTxY8%Ox_ zbz!3o8Af1*#c5iil^2AGmVOr!P?fmI-oQ`DNkSdHzScrSpDZUjZT1>+Lo?51aWV-- zB>!Zz3hNHJ%EkDv65vw1bTI|@mrAp=bF_9dlungUR~eSkr&dQBY>q<;cp18SI2#fY z!-4)dh9d;-IIw1GH%iI+_jxaPy@8>Q?5J%jH_sp4)Qa%Sg;Sx<3rG9tIrTygw|f4< zTCk1pYcS>7uEY{!vT%Ogf-VDZ5ctleoqjh0g*Ry+}DX9oeNxFZ$p#YI)6$Za+6<& z6K)rZ9?kP1Z#{4e>IVUo*HT+OK~fBz&w29Q2C^t9DNmZU4zzZ9>qApeHnzPJDpV+6 zH4`)8>P0^y|GF!2)r-NPM=01I;nzG)P#Q|Ye>~j}cV;9lxEpF1B=Lr;mDSfgs{ar~ zh#R(+Yu;7m@tJYR&_DE@1inNBfZ{AJ5o&xjb(q?`qY%7~<)!S)ZL12q0Ct+iQ&N+f_SYKJ`hzl;{np8qNS0j5%P7lt+6LX# zFT!Ep@=?a^yl;h%SIYq}0N{AIq=gj$`j$dPY)d%S6%Z8W0DK^0V20IuKIscQ6`C0N z9n2{I>S$p}Yhu}i<$D~qVY-^cQ(Zz#cPr$dvD{Aq8sRxvRU|1|wiO#-lB;%k_5@WW zAdyg?bjFhKU)X3;w3==vYjwNh2FQjlR&EqT5$QA8hPQCu0dto5XLMdL38t1e3-6g; znkx7K!QhbbJGs)`tzh3aN#tw!gE^Flcsa`rVWc!VvEniwLzNX0hT^a=T1eOibK)8K~wA?n;6M_@Dp9XoGwyO0b`;iO1?>! z6^%)MAa5BFW96B*Wy0PMfB9@O}R@TMz(zOAv=m06~z*>v7gGaKmoMrMg2kUEBf@s=c?k9`KSb`vU`}K!{+ohxfWe^7+*g7VGi0Q*yhVS#Cyh9CQ zWPRt1sAOU)2Viq^Gd%W#r(I68T7mpVRRBAy?Y=`A(? zCft%)_DMQpVC&%Un5U(hjL&^3;%>B7blg<3;-^is9FBT3M$u~`o-dA6t3|w z^7YQ2{ZL^S?vP7oEHy=ev@u`>`R4p=>jP-=gFKVICnhN=D!-0nYrGagD|!o6^mVYy z1i=RO^HjX}Kda^a!`gKuZ4dkV^`s0z+=;$Rm5&x#Aef^f$8jE zD@C&a)Q&b9x}F5h=uH778G9S$?>~j}d{{8IzpQ)%M5hpwx zO=X9V>IrLPU2v|NV%|TCY*SV)BgSCbTz=I+1$nmNr(RlG@;VO3OkO}y8Dz)22Yxus z!Hd38lYCu=wJ45kypvMHyM*r-n09HX9djT9iQ~tmSQ~vTtG#giMCF+yHxmf9=8)AA*tvhO((jS@eheHzGsJz=J#&;KZekF zN$V|zJb*^MiV5I$jOxzKy@G)#8X|ey3$kX{MS?xkOJzzHzK(>3M7|!S{wlBix-*dA zu6u22UoF6dp$?5zYc(3PDqI42R-{>RFC-K|#u$k)6FKrmx+Q>D5M01q^jma)E z6fTUcTe&FsD^U#eErOwH3$pU}D|-<^%i#F)q%CUnmlUP=JLkzT+(+j8?QG1ew&J3j z2*|w;4DfG+5aSGa@Rx`Vkx8m_X3^|6G*dn^I=& zyD^{jA0fMg_Y29L^q(jm!~z=;{rbP5bdxq0g#T5h|Gz|Cj1w???TEDN`il6tX!ihJ zVjzPQXtn77Gp!Jo{N3@zIPX8<)HiZ(|Ni$h`oidU8sFD#FdVt~m+g0mx93?=VQIWi zxF>%5Axs}K^)oax3;m-}Wpp%Cri{*VpO2q=Lr-t|62{mJeP9&Og5U{weRY&f5>p?i)?ZgUY89U6FgI8ZYAJY)!JHk)fUz5Rv|kG+|Lx;{Z*!h;P( zJm2a-GEv82bKTaLMhu#bFb*7s+o3({Sl*Bc>lZF>jYU{*|GoDOfn-L#XbBX&jgx6b z%`zd3e@C&!S0aobP~0Akm*+^rbu$rEm}M3nO^{33lf!g=i9((V)^M}k&_=fbU8li5 zOlQ~0Vxf#_2JlxH^l~;9!gI}~E?qPNI-+z4B4ZtoIU^ZD{LwLWJiRx>O&!-00dZ;Jv}uIpF6LeOJEPRfzU{`|9EK$A_{`4H=w|&7Jki3N`IS{?9wpvs(Agr8 z!)^vYEax!fM%qo6!~QHZN;zPBIwwV;CKWq%!3?GRl(7gE@(%;!z*(9B)EjHfKFJ>q z0dKYoarwJltI5+{S2S-H5bJs#20a@UkH z8WE9o4HkpQrUK>f+2m^H>ad?3MzKo&s||tIA4?WM&;Gn=R0^%G&ZUSHB72kw&EZ^+ zTduh}r~X2ePpmH5W~G^WZTmodd8&?LyxLqpkVXA=L8^&VnWdZ1vCAQngpQu@JZX7h znVC8B!E~iL-$IUi$BmYJq=$Y_SDJ8JOO(_BNAUShR3=WH$N8Ctk3$F1JjI5m$rF?B z?p~Y|(3s9vS8cM)2y7TXR+7|he}*M*vvzO=uP_a2|Hci>Arl!m%RbO-V*spQ_GR(M zv4ULPZPvl~r%!Ki=fK&IOR)orf2Rt9%oTQ+cbH~o2h~G4nL{SYoPMl+!69qM;&&U7 za`W#D*6Kr{w zHp!Z@q7QKNL411t)o|jOVhd(>oPp4QvfU?xZ&y4wEUr2`O>8|fjn;7cz(4WcoqGSH zv}z7*40S*A{dMZfB-CqLlWu6=MMpWQ$F zsU`({4|v5_4Dp&yu}N7%~4LgGVJ z)xQEfoiy(HzOu>zPZBoXee^dw)%607*oKqG`+$y^q-R5^f;72GGmJ?PUd;H=-zAde z=6IQC?Kma>YZ{@)P#U}yUAQ?f^o%J8t0>iG zAerIfs@{_~z8I`?_`V(9Af)0D4>$F_1uh4{wP-h|3!$|qxFfP=x3VkaSZ6c!4_5l# zbT_#I{E4m$;i&F$xAm~J2dEs8Xq)vxAUflonX81DQUY{tU?i;zUF$YOi- z4>pp7bMH^~wP=(hk3BCiceH%De!ew$Zd+ySsf*_DQHKl;d$Ul9Oswg<#XtjMhTz?! z&ml$&#*GoNlmdq9<-%?;nG8FZ2I{gU_oXYLF@j&yt|*n*4D^ZdJPq_IH0}frrkc?E z-(bms8yLFsGC#b|DLcqI^BDJ5V_9gkkx{+(xevEVigCNUl&cd7m1pD1 zq2z|^U^FJtAyzetG^v?C5VuA5CrS6zxpUuS`C*Qcwrwv%?vdC$b7eK6*XF~ZQl$x= z_IAk^j&X`f?rf2BoH^uzE+UySqUPsH=KPyNV>{ZuvG5sFPHw5D)sisLi73QPtv1(x z`4j5dB+?^_7vk^&dr3;;yY|(vA2bTBCbM!gy}m(n;6THCfpM6n$DIiVAJSJp%aNAf z0WnX*qz1mrQB@PlgCXWN574GXr=F9Dg~J=+LNWa0(Qq@5i+87Mby(>sbb+4NXUNWi z`U^N&;DTWz|X%^9?mA@#Ut54lu_>Fb3=pxI+Ri)1H(N>0`VSZ+;!fDhGB2ddH$Dsjda`^^NUYhL8= zcVrR8v(8=k84k5Qx<&nEr^76MZ!Y3Egs^d<<)?c#O%a|`_-P-_LZ3C=sj-t~iDM-R zvNx)R6&&d&kSHW$`#02Q^CtV+Y~QhabFKb%7d7?;etL5$QhG>Wv~FgA1u8iWZbPd8 zVIrrREBnKef+n5!NXl;qX?7!{;eU~NAM}xCX=cHXF*u}h*g@;pX01%<55|^&WB)8i zGiqqJ3*hISI4Gvy)ZQ{}1edzev-tIWTsW*pM2nJk>Fgb+uNPDwfc`FNoY*r0+R#9? zLBApN`25#@3L^aI!`zH-_rLD+Ffve!AWLf)?q?SI~vhAsf1(<%3kF~s7~`fLo{-4_@sI7Yl9Cl6M}YbatnUB z`}hlCv+}57ftx|Ojxci5HJ2DR`GI@)ThcNRVwG94j$Ge|^gTNZOe}9!?mrx_uCi(@ zRf_T32PV}M64W*uN{2zvZs7BwU4-iAC%s@>qve>x1|695Ir;9!(D$<3hzF1^QkoKV z^wJXFX9iv34#7Gq913uc(zox2o68T}LioRE#;qH+cp2uBqz)6hJQ~`Fpee5WnzE*Z zdQTCHZX~YfAsC#zUG8Gr8~`>SC>1=w+WI4xJ*NV6&?zWKg5&3o+RkKNqzSIn5Jy<9!K!kv{3! z;}@2u?AOG%smrrp_r+&7`>30b0UTb8W4JI{4=)JHbsO|QIIys|MZz06;+SNyC|JxG zFsD{Dx}6}3nW)XDV}}bA`y9WvMmWj(LS(dsvh2EqKVv71@0wNLNPszNBph;KEz_in z9`dtoQ+ihu9`obak!LiVv-x(-ZyGi;<|x|J%*lZQK&V|KI(?L1EwvoRJBIHRPZiG* z&#AwTIk(ODM!;wF&5L*Z55hiZF5|wKuFbAN&cMqQLkj7Y-n2}g;7eFfZ`2JK#0aIR zcoD9SN+Y;&e9b~^~&*?oY8vNwOP(8Xb z^5!M)PDQ3DDHWPG->SBe%_zPk45-d*j2q{%dC#Eqp1{y^B-3+hseb&tP@-nM($NyN z>nqB@Kc|U^uu3V!lDx8n{9|=)14JlZEw=z1Hjbvvf|B%-+LQpA(gU{T^>RLH#E&){d|0{m7h zwB_t}%~kU+Ja@Z&q4u%eRBv$1V9sPXiM#F!#g9{N3=W*Nw)nB%BbKnD5%WlZ<%thZ z;D+xo=#vq522C98;fCi>0z!~_2bqud=UE2Lf%&rdpj`C&e)jde@pFtdzV1{q+`^Oi zvKp07RK#;2=D;u`^PXK+l&oKPTZBN;6e`yg53^9#UnIA$TYY94_8lUBmG@ZI^!x!D zD-M>Tw&cQ3#fhXU5f!Ck`BxGsRKCo^8-{Tc=5Zm81j}6CZK*?E?pN$2O)Y~cPy{v? zOQ7^;JcV=njrf|Jt_Z?Y*7Z z&Rbg=K{seBkae8)G#J=NXTP#ghbT6**AuurU+rClQOs}K=Y0p~k9l=G$fGp`fs#x# zSG$vSkEkgQ6*%sz(;!1`WU?$laM`U%}5r-abfS zlNHg^0j0g>g-tW-B~0u|bdYK~?{p*Y!ler3H4LS?Vgg2HFRnKXAx_gjC136BZ!P(V zgFGRg+`=WIkhRZ+#WG?tUEpb0gW+g7-9hyoS8RoL2*&*#((c{rgyH+=_JQ6R^V>2y zr0c3I6*NWw@jyhqwd3WAS-3`5gm!s*(7ky>x7Rc}sLCh|NOTr4yw0khDr9)C0&HSt z{!#Glx!&VppKV0n2Mfd9HK=tDM|?%_19yYaLUkz>e0i(o)ZNEMKc&`6+wQ(+n*LBP z(GH(x=PqCRn^9*0q1>Iz`C8juFFm*{De)$({Z=Q+RYI_!rrfao%M#mc3dTfcr=_T_ev(I$*I1{0xxcyGhcXjGxdQm zcY7=f*XT@wMRfl4hn^LS&WSm}i54lwMwiI$I@7HR(IZsLxV~-q&MDC}i>FgdwMnb4 zFD_#Sghkixf%Bnj7n+TjuTeYVDY2X^p1%mL;LF9wW7}BA_KCet@v(3+F(<4ZE&6i1 zbigNb)*AUTlT!x^m7K+=ZE(Hfk<(fq&W?#9D@Aix@LSxNBp0Vh5fL#YW9GIv{k@;( zMg>E)e2((O_U%fwn}v!`Qe%?^>AEWt>6^LEy7lS3$LrvOmhR1#%LUQP%>#ZjEPPo- zXFeB}=&1iQ!I|a;3m0LF@xBw~(3q>Deu(n5e(XfA51M@HW>Dd6LL1lrWDgc}EPzod zW^J5~bJGDCmi4u#rjcd{=q*qKFeA^=1QgDBFPB|s?Gzq5?n2I&-9?|_5tkbXJ;z(3 zlqu$c-;T*O1%88A*5#`LE`B^CGA>0zo!Cu-YT1^g4PxE+FeDkT-4$_2!remjyH-bG z?DI(>H>V`J*@iwhOCQ89N-^a8#dbaQhd;qz1;CbDo_;`W2{dP~>#V(%*2L#Duq(+G zxg#x+Fe$}veUn}~K%61kfUBY$c6Ww^#(M52Y6DQH^mZ_vEm#Nvs-NxOSHmYH41rZ&50=U(Viy{>FfN@0 zMF*LC+C@rsge;vx2)gz4`;!Z}7sK+fOw(PY>UH^S)_)MiWX$?&^~!kI^2J6zP8qKH z5Ji{%?v)yFqS+!2YV$hpnXTY)ds_J!$~^)4fhN%6g3p>pUm&h;4naU-y9YUmKJVdM zMQ4Vcc(zOR65HF8;tlP{nZxVU1N7OsI*oOOi8Hu}0K0#>1-^xa%AugRa#?AU?3I%^ ztDgr<@==H0l}F+_&wUm(i(?A%{ECa4zQg@s|7d>x3lOcv9&5aScuAQ1j_^MBT$n_o zfzHkB_g1$uv+cFSU16p*BkU-FSoll&U5NEywVdSh=>r)C0TzK-z^s@0R$bloI`s|a zZ!h1@GPJFFR2^*BJ-zNA6BaRFO;{$c>b0OBxg&EEk6<>B8Aw_I?dp3wW=t&cuF6kp%2(S7W zF*-^~pvT(|YcqOA;K-b09v;Ko;JU9EQpMcGq9XH(QIK#B@bM0x&$C1Pc16jfiaCx| zkN%T@_Q@9J5WZ_UsSssY$PzK%oId+oI^eBc%;^qos!;w-n}^dc17j>4KPEeA|9rpy zD^bB?-iH{ef10xgX5jbCD4o`Xz5?vpZ{{Y#3hzX#D|{Hbt6ymzD{_3^dVF2u``??L zcSOl7K-vq*mN9+VF&CRt>MOO@{-JQa&Nm2nw>|0D?f6@5D7cTOMSejM8Kgk(l4hG1 zTq;}7NXM+V51+}p+pazC)>5$e-I+e_3AWiWB$N5T2N@Hb=(2qqeAa>(lfKkgTKipL z|9_2rV{~O(6K&A3(=j`?I=1bkW2@7#*|BZgwr$(CZS$S(d++zgc)wnLos5mO*4}5; zshU+aCj>Qh`8NY^B+qh;Pa@D*v(L_OFc%gy2@F*}GGDxDo5L&xs6Wsr^vsYa61UAa zmpU3qar2uItvl7COJP6gdPRv>@rwdBbRKvGDyIu5Gxu}QsKjlwv<|s+T zSr+_a`d`s5cPbA66gxMv)ks#^kC~#Y-cfx|cG7dP59xn!+nd_!c2U6yaVQ^l2f+VP zY`bXZS>Mio|5ND{wQ00dlWzYH`51A%yc+p`LKYVK1^{Wezp`q1BL98({#^|kze?tB zQ;Y|~e^4^!M={rbXK?&?ulxTi+s3gj{^yDq=wXk$K+x}CfBR*=D~cs=ie@tf3aFOA zQpPt&B_hAQ*^DYvE@2UOYg)j?E0D%XSHS))u`&hd7fb6!z>diM(Y^|8N7MhzN8iLP zy5^rj{7hR75GdzJ29oi!_o%Hz3gX$fajgO(D?+j zK+<%_75DyICiY>Z;3}OWfBmzOB zz9*$Wj)YzO)MQXVzwbb zqgfjuES7^kx(ptE=dvMH4S*PI)PGKKNMg3fi0E*OXmxtG@i;`rX?4ISi&*!|HNfC1 zneV+pJ)O!Q)cr+`8zqAj;Nkwe_xHO36S*R&Ec+~Z5>-`z~8p zT4%`kEP@AzB!Dnzw7tz9(JF^VFZc0lLAg3NC?oj8;GHj>o|SPR8Rwwh@v<)T+}{^J zl2=70O`1r=!~|_}Mx7nW4DAA*9>I$c%**wnJJy8vWY+zK341?$`BX&zb&sTIp$1{Z zsFu&wm>C}5IiN)8CM!jhcaAPKTxm#DTV!d!B4E20JWG*+M20(}JM;8smg}WI#*!y- zit;2_Ze1DM0h)3Z3qrtRgs63?VOPi~yy|y7@&q`Opkt~>K?{Nmf&Jeba|sDco%-Nd za9RN!+@g9bC+yDcX6$2X9~-0FM+%!@>h3!)e;@vb2?g{FTP_kj`~oC&Xh5>_J#XB> z!5ac%*6aXZ?lgf^Y40!%41>Xn%$$WHI<{#2pwjKg)!7;(xB)d)p|N*58n}BIedjl2 z1nyD|GcRj*4QsJ4Gpiaz9HihPL}aMQ$)$5__3jJ>QaZuasR%tJR}_XaGC{#1K0Q3R zumqW^^vTw6DQRFn-gPVadR_x zz29Rn!pkdsOjfyjlX1P?+(&q4#wDV_G|==cTLV-}gHUP}4Db8+b;>^nh4hyY8Ug_c zqi4?qfZ!rRpJ~HIWbSQi&twuj{DWhY>k07_Jy`;nB0!qXC*T7?5upp1}tiY&GV_UP9_4SLOYRNxdF)8}T z;QvQ)`!_?2nN!5xlM2larijcASkXb%wYC>%hqY4!{mbQFtL+5(s=CjdLR?F}!l!gy z3ls1Guc^8;rQf8VU(w*S{1ASc=+3)6RTu635Cj&YOxuN6Ag4;~?0l*f4 z%4~EIC8w{=?!dNu6v#W-WY2T_t~JSb7_4|3{%satJtqrX$F!#)G#W}G$`PD!EEOSp zLt;&d1reFkUnr)m5K1;Ew`e+iANsU%Ntn;STcG&Sbw~rl(YB-Isp**rzpufDCWH@! zKp9vIYeDp$8uPCR%tx6iSD5N~$`DPYO{ceAFrffVVzy=D zaKekAr?3d&#pbg6U>j4bMK4`tGiZCHN+|6viq@Jk+QX@i^7`ru$9PzS=F01Gt4hCK zZl<#Kl-K?C;k$F{`CFg6O|~;yfl$&B!05uc@p^a&;4-6CwF5{20_R+0imE6d0_t=8 z@BDG0PB8!?i7G6R+{W*La03&e9Yb0}{2Yix9lvf@if<9koCCITIdnHRL=|WOChx{G z!kxaL4U|YZ5XhGs92Uc?BjbHK>jzpMou(G#%#$twDHldQmi<5$zporcA`OUr0|vb{ z;>m|RwrAY1cNP%$8U!5wIN|fPXnPH$F~4%|Ks+KYDp(?NeKe~tSW~M;^;-=v<(iOl zfe3Zdj1Mn6mYFU;mX3&eLRXQfUo#^(Jf6=4oW!=Gb&?!uVme-O$UO3hh#xqV1s0d{ zHwoj$-v02~EzN#hta9a&y+uYvwVmN@FluMq&;+A2hP_GSt;)3DxBQXR%XV3Hf{^A$ z@lQBIX;eg#-965(U7+a8Au6%M){N@@0?9WVUPn+;9ZZk@c! zH!X+qv^l|G#-BE4;qiG@RatZ{*C0HG;zS}&q+5D8bRkG_p^-)&OjnSeON>wlVsC%l zf3CE`cu~gi!f$PgvQiT2di!gotsAG?fI~Xw_yL1AWT-BIg@_+5pQmSJtQ)_wPFM;H zqeNe@elEL6x`0!jD0*go;yeCyblf;Q%eWl;DH~VG`IV(VRM&7FB*{4n9q++g{<(#I zSO-xSA+mRhrt*q1Ex$6?TNxBXeNTzG>(#(8r*8-;V`{hA2Rc^Dy@J5BEcFD8X7_=f zQXYipe6;JbhMW|z={l^!JSAP9KPTEa8-=9a5@A#~Bo!eBT-C+oDW4XdzwhkWJ;dda zA|%xG zb+GBgyLz6BkK)VcbH@=&*Vlo`MFDv?tb>TturK-WKB92lS5&a=k|itgY)j--N<2sN z9t#9zR&KB%-4a!xoxwF8@uk|;*T7r%B%3sE}-Q_o0!l;Ht4!0 z>H-NDF{)HJ_b@4$nNd}fMc7N?bTT?qv(D84p-4Jl}45Zi`mm4;o14x#MXlw8|7 z%4mqFf8xLkEEj-4chR|X5oZv#JZt8_%YP9iU{}mc#WTDbEev!QhuWzOCd$RqOXz2M zV=pQx`m6k1=?2o^-WOd*N5Bjw)eP>)o+f!;;;iWkTzG~~*YNA~)GT9HM!dmQ=UwRH zkDWMx{E9q->37^`_z1yLZ9#@6V;brfxv%9e_V*yeQ4`3bx1T0h^?dKYJ9GI`wXg7| zA+YkXLXC`JsUcW1XOre*9`~7N;M#k+2lbA05$o2#mV;m1f3qA-^9j^_OB^kG=_8B|C@Vhk@8~j5DJ7-y|Rf z)!1%j-ba#SGdue%ZRJ8lqN88o@0`2F*Z0L*+u^*O%E}iymj0|V-KCkSyiGdx_5sw? zX%Gu_`lau>X|i*`K3Z+|GHoo{@ZL(?4}Lqikr(22fgD}&NIJO)JMskmUcSpWy>RjS zvqyjqHoB#235h3Y*N8yv#Z3Va(VxS8jRqN6`JE+tzPK3o$7z7SrZc~9BbA18KVdf6 zghtl@GriEWZit5Yh{G&O*efoEEFL>pYGh9oH%^4NlvTaGIBoS< z#>^Ekurno#Z!sEI|faF=vnL%q1)Od{3d$XDwZQpJ;>LMudA6@WUwKfWVdw?y7 z0)@V|cGu;gzG=P~8tAy;o2*-UUN!uo#y|x#(HZW`4DIshwfO=;%|F#0$i|(G7iA4a zqh2>~!8x2W5o7mqMA^Q})voE9jQsfa4QGWze=J1l%47;;c*Uvu*gVM;Pk}z?WU}py zCxR!mZvwrgiKh)=;L8WiBm|4hCFo$cXvubMcT_uHE_klco1{Zrn#(>M;ez>8^yAn}!rgODI zbjHS-U#%*keN)?sIP8!7-U+%wV^@XN$7>HljYzDtcoZtGUY_!P!$Z6_{NmMxmnGBB z*c6d>wQ>T=^A*e%UDUfhn76jJ?h!`l{&~)ZaGNHZOw_~{4j}D&9jOQzJ2xp=C;n6bs7XD|0qx}src-+N^*Ax zUdB=2s^Xt{sn6hE#R}Al$1Qp*-a1XdO8=M#yn+RKD|1r(AiO+0KRd;v*olv;nHpY= z1NTTWi-?FweG|iaPL^s+gZM06Sq@OyeiQ3^b!>Z6sVNGwe%KrS`r* zC-;il4P;^HTw1+lD>TMuUg&1qPJtAU@cQuq_Wd7uFIVi7Djc7(39=p3g90G%~bV*EJHXs<*%mf<5yh zWqHcg^-GY4%ittK=iVU@)cPD{m4BZhMO*zC@)Eu-b{DT2=DfI_`%KC)r0dA&RvXx& z;{lH!vk>x-E3irZ9bXN<-<6Oiu0Q6>_@S=LK3PT?BG{xAn7D+bv(K-E^H zq3xFPfN$LJn+w+f7zg=0o-pkmR|CghPcBu2IF3PV!r7t8QnvE?V=90jxUn36A*&UHDL|8lwoK z}Os}x1(+YeqAyLy)#%i5YVk_<20!gI8ni;5oHxrT5sc54 zLmC(2U)+3T59`TkD`mfwt`@P}VjT5nrAI>SktLtgC4)F!*jXle(KeiA240UDd~mSn z=V7;A98SDlFtC)=fVGYvBG4L>Hm0&TnrQ#L(@=!|z-J7txx^ohxoK%P<9&{eGy-_% zWhX~r4t3}43h|@>D>$_0HI9;J^mthN#bhmor+?|JS5(!7Q?^+Md2lS`bENPw+2MGM zf5{@Dluwj>d}$ggeEG=t+Ezw54p-u!80DvdqI8_axk>=d7Sd)-gR;5oig)Q^9HpFa zymLdE(h1_&f&*3ehg&h_OMMV{Y(%r#a>HI{?0yIL*bMsc!2gWuR7bSeWHWr@G`E@Mw#aVjg zJu)R7y2)QXKecuVdeRci`+(SxRqYlbrVagz+S3k?n9 z!Zdi86$s#0dRvSitG$&m)%IdNT_TBsX?v;>U!h`M#C%Y1X=?#v-!3($#eg#pYhf@c z1!BwA7!f|AB27D^NG~v65qAqw?k zfH!{8`?YKp>{mKK8pe|mc3-eOUv3M@Kn&VmAoHj=r#)hFVDudR;QWJ_4$PjW%)iMI zRJgNHi2lr?04xqSs=PX`&5ZYY!v=eT8j-YjBGloG-IA4Kz6rrUC#?xL9e^96DEc%^ z!z|RE{`Tm0ee40p_@Ia1-+LQ$#+U-zy?;lX>zAUHH$YI%k-Ic@uCprAjAAs1n(YWa zM{dFLZ{Zn#Q1wuJ1)yMV!T^N;c}BC3Zp42@!cY1GBmTjZi|~*0)BgpHi!hIs z0T|m~RCx{&VI~jM6c9i_5(uSFg@Y~&u>$CpY*)@ay{-fIV7s5dy;Nw}1&0u1T5P-^ zOsHI<7JPi_9<#oMBgV`oWGI4})TV$ih}&)>42eNtw1}eSHUH#dO^(6`sA}MQ0oa|y zWMX}oD%bh$el>4F{Nw^ldWQis@yol0T9M#aca)DxsJ&Qk4OA?Y;g^(@q$SuJ+yW>f z6_SgM{^{hcxq&JmGFcYkSD#St^xy_KLEjD`pBcxOFo<KbxDg3<@8TI(H*96U2M;>MXgT zu|J?*$A4-SlrMb9oH+hCf>1dJqK&Ner9 z3h1o^fpWk0YVx8ttjl+v%RmnE{24NKlq~0_DqgkLlE}l#Fd)?SIq-LYOR8YC`GNh|g! zMopc_>JDTjGx&UUB-|azt6$rIBKPfOs%l@=WZILxUAVTMVQ$sGd6vT; z&E_(4y?ylD_rr5-BE7Gt>uQxXs~$x1kYsP#7l=)oT843zqu-?$vS>Y}p`j6q$kW9va#oBvJ^gNV}XO1&!`@z@i?yEw}Dw1MWxgPIBQOV$*8{`6ebk-eXMu53U30cda<- zlP%&8$h7wDwjq2q2Ka{u_$3=Er9CKuOmsjT;N6e`Y|o^0?6+e?;4fDT(a`s;lAx+| zMk|iBTmduVU2}`UigVI`OQrDPXgLeYr}oXL3`$VYJ=)ghI3ko)0Ew#!9_KfEj{P8o zR|UK6;9Ib^cA&MczT^+P6W@^VG`XCrbX5_B;TBrNdQ|Ax1l!?6=3;rUFdlm-@6iO^ zc^wsoZU%hy6mmoy5H{IgffSNY=p_M2H_3+zG+7p2gu>9fT~Bz{7*hz+T7}=9C4g2| z5d>nv!?T6HOHh<;Z}VVF4&HkaRnAsD8nR8E1s?-DIWt)UrKgL2^Y?6htWfv zugU51yDR%-&w8o%5&6qB-xoQ`Ve+}EuV@pGy%z*57}X3QEh{ZaH9xsQl*_u^CKG~! z#0Qr0Pq#XqiSW*911(zptLjWbPo6VE(2%7hvYWz55;*Gm=j;-z42O|5JKA9P&qaF1 z3chfp@^+hOPjcztb%+9iov`apgYc%cyWksh>6oYvV4$U7c zmwGQq*_ zDA+3&qMC^wV{mbzdtvsldb*T$(>R~Se47dv7Jj+sbsn)|0&bhl5TPtob@#e{|0apm zug)ceNjdz!zqp>>_R$@-TuZnr zLRX1BUhhZY+7h|&VxrGfe>)XO_i1T&G30?S+l}A`V*w$BT#F?adMcnI8z|>kXLc(x^f8Bat5N zA|Xa9(wSbxz-~r_kNWG(++!w|kfkoz{rKMX&;h$MZe(K~^Ozcqmi&AMike>~kpy@E ztO^|N06_TyOpHX!V^Nw5V zB9IAzj#sT#0@TWkPBq2b~keVX%1MRQz}ttnm-smTRSt(RuU6M8F&i zAJsi+>!>2vh0`(-G&v=*qU9z>RZeO&;Tdq56pE+3N5Wx3*|1d9C4Ds5qC8I3$O&%> zUEKm8pRph1fetdw(IcSa6zv?{%^DD68?LwkFC0OkXo2+3annc~#*aiiB&f54a{}ox z_tVyM_TL!LAQZ=^$lnz@B#KPlAsOUttaWgKcvYM?Vt$I>nT-sq9lxll?JiWI6EJ zEtlhVKas?K>2$P*FgT|sN#9X`_u;gSFa{+bz6i^s{UXxLKwu5dlDQeS2|?`_YQ_nB zr{mjjPiXz&P5bgi%S%vRR}Lz`fh%X-^&RIe6(vwW9;B77Qvgqqh#sIG9!~T0dq?2z zY%dbV7(w^AtQ+$1RL?XovYY6j(CU@{RUpg89pdEy-z&hbm!8;zMBvp5Y4vH6VERhi z8ds#*mcQAGa3U@}(g=9;%J35WENvaq*OB-t-R4V3m@35rGh?AmY_-j{W!b(bJGEBb z7X+VoYlHF4Bkno^EO=bN@5X!k>Zl|rUTTg_wG-YKnvc{^`FyO=NfHKHtZ|5Ey$d(b zKJ!~Yhgx>}?+o2t9~Jr^#GkcS_=>`LhfT^}m(4l9VlqFkV_bon18{oV0j|Qy6+Dxp z6@syfO4DAWk47dBefi24n1oC3gL)F{OHQCjodNyTU>q(SX-F4P5&o4$MD(x0^4+Cd zooqnu=T(HmeIG-Auu(B8k^UC*v$&MfNGkQsN)|75 zw6C6HNCq!LIb8kCZqq>aVRNrT3S*FCbxl(sBnn<)rsc@5PWC1DXupYua%ILL`nIH# z?KX-lc3EZ)r2i&pLr<&rE+WK@4M7UjiHV9T!iVP2B2iOCd(D}=$$ve=;VyrXUXlrG8Zb=W=8Bd_jxfgUUg#P`~`qVzZ zz`^8<#ZLqxcR{6(aO7xcCEe`O@)hvn;gVe$YNdL+{%fAP3!f{^(kr6HUct$ zH!lKGN<6Djux_+7Mh3Zf4?-Ct``-q@qUGwK(4OhKl5;ubIGm7U6gKe1k~nX&?A6J_ zRIvia@$&a(q{>zZKI{=?j)Z%?K4mptJuzB&vCe6p+S=f)(iXG5OsAO&1`5t zPaFGsK|T3JHL#(exFGjK)F`b*9X!wyt+W&1X>*+RxsLQZL402pL^u_}aEt?c^3gW! zuw`~vcPSFS*z>9Fk`7sw1ww@$>R%J`bWFqMnvQ%nAqwyy_@m@a;|uC&OCXClUHEv= z!mAc-`=ia9W(9oE-aX#+?S&8O;eFDT{IKt;ElMm}Zvo?=O^MtXE$W%VaBBbe`xherzZh=oWg`|Z!!(keF#iu2L_^)IIJrsYbV8%j-QbapHpn6gF?ZI_{w@e z_~j5Bk^?88=Ke&tH)o-$!Nkw9lcn1mJvb;**&QbQL|bL9cq1oz2;m|gzgEWEGoG|3 z=a?^P%z{Y9zdo(N+sFeZinWSrjjOHdHgk1IsR|~{7iW8|72>QN(H^4DD z$S@zorjjst~6dWzIn0RfUANwD4mUT@ z^SW8JptoG-)8#7ocW=$$;ANX(Q=$k+uP4H;*pK+_eG4Wu^7Y<~BCcb8-W4o(+^zvx zK!JA*yeJtVN9dSjDaC*MCfemX=7Hp$RwiYy zMJ<0vd&KI%;0>Ptn9qk?w+r00GGd5MXtUVpmfx2*crkivtQJ}?f1DaD=g{Bfxitfe z8&>6AhRb+g*V7mSF3dPTe4Wv13sJ=7*1DM#cUGqM@3`pHWljyFeY0YE1s<>ZsRC*K z?Dl9AU;SvvmB-5fA6^NcN?KuU#)9eYTVU{(;eMoDOsT20F4w9ro|gR^8S=R;2?V;* zpDNjD5G_bN>oBi<^zk9BE}Mq3$Kp^pF6vfi<#aOCwH1-cgzM|?$LEn}StOr}iBvtz z1~7Lg91*1EA0$vJmBQIl$8Epn^Vl0M*GUpRd6k{sG0{rlbE?x+&=oqNuRZ2tZ>?^( zp1@QWE56{o!?oi*h*+azyG#_OE>-hzRB(=gqT<1>{wD066Z?|K5bb)k+Jf@D@0uBs z5&PhHm-aUV-VhL-@sOg6uG~1PM9Xqd@?l5G5{K^T=y6bOruLxWi#^f>l=reV*!5K@ zZR&WD9_IuArwE-azJf3XcU-{L9j*@A=mg`yP33*!*;75BipF&HR_AN5Za?miR=Yi4 zF2(u&Nfx;w`U}9%9L@OPOX0!dKO69zZ+c7-!dfb-PZ%-VcY~X+v_akHnS}?f46EdW zvRs|ln)sZ|=}!#%BIWLhwz>VhLo^l`3e1{KUlywLA5ohz!6(&ek{ycV)6l>!l+6r? zjEvM2DCA_!olW;M+^=;500GOwfbgBTaGV!RihID9>E#f8prxyb!%Nhm*((Y^Z4#P7 zELOW}BNzZVWdDU6Cb)q=T)rI5sL2r*0M$bS^G*wU`9UfwTki6&fZ*jhZ1bygftg$i z0B-vyD;hVvb0O1W@>i@>sGa_}Ue5lU<_vE-LZQf^)91J^U)9DF>Ej26Uer%(~?uHr=9A3TVEa}q@UG_Flm z$lHl7-szBgOMdJ);lsp@g}0g!9m zWE3gn?2IU~NbQO%CU0^hs)Ip^lT@m^LFe11X^nn+LPD<8Ops(`>hczCd=ei*ZhR+$#+@bR~ycg9eE zy!}eT`lDE-VT490hJhn+tv*HRamj`qYPS+Q=AS|>T@r?IY+oInc^UU_9N-+|1@gDB=?j+1H zejWdHYPKJBl~$xjH59$7%tF#}>@sixes_P(>^)(9trnT{Lo=|!Vs+S{FaOalamaGT z2D`g=#b7z&l#s6ZdZp>;#$kHb!KMuN8|pz`Qa2^ zAtBIaM>#{+Cm>04Q_wP#1i*%-d`posoZ%XHd zOuTxv-s|5kCs>RW+XIEsW0bN~JluV@i>cH~daSf*NQ&`?)N}|=mSV&1y-Tu0k3kCC z7jDXJgCZ;i37D;v`+^r$hCIcFs;VOl#+-tV>`KJ`<(Bbk#~xI|E&3ix={GAb{daSF zB4vvy=;oVI>gLnZ0}ZVS2DNn8q@b-e1F^Cp9IPMky8fk+NXO#$619R9gcN<}xZ}`l z5TSQnDf!D>69#Ff2^`&N^t<{zjgS{$_^v9iIG zE)M5UmtU!!>Z{#e_&8XHo=$4w&qr!4=<={AY4h**cs7iS&!DJuXN2M^&*cN2Z!mvz zml|RzVt;VPV;Zk$*B7K2K?E*D^LCoOyr|fyjYhy$5>*~@e>`){AfGvrQ8oA>Y~*^; zS{0`@Y!cVb_^0=MN3v4AWG`g2a7G)sW4te3@rylsF3G?&$X4?Hl+kT?#(iQ6P)mLz z92qq|G?3tdYj#TqYyM$qxA#uKxf=Bc+KvTfVFdU@sO0tzvyoXOo9*G&o0!f=b2xN~ zFThwO(m6&-K+qP)kU|f{BqTlA<@PC*tT)2`H^nTl_xZgt_uUa;{;_5{LZ}slO7SFw zvU+4o62l_vNX^Ee)}QneO9}pmLvZvnia9!+EaV2tV0f(;f-q#(1oFUil>|?l_o_Ip zq*zD_*-!|N6@=@Jv{kQjCd5p*#5eOIG6UQDp;@_wWH&R@WQu~i*O#Z;^OY^+weR_? zrv0T6#1;w(g6`7MC_iO2g1VNug*o_(p~8&|5!cCc&tp%0tG6$EgV;_&y@?igH$hvs z8LHAtHaRVO6y|=&Q`SutYkkewF+d^1o#)8NFYg_F&)z#l#?R#_Nes~X$Eg{ajQq8;q@CPDh+56SX(sv;bKv=|dY&DPmmICh`& z!n+H1Zt4}^CBn^@+|NHYP-lc{HHaryr#AR4Y_0<(t<{0^`4+F?R9N|Wz6+5xHJ!Mq zh@TJB7?a?Yt;T<>)vj7^F{yDdM(%mz;I+>dSWaK_FCP+8Dc)>a-b{8V8Ey6N^ue5Wl9n8MRKwLA>(Ww5tG&g34-yo=U{X!0FalhcCIpVuTMf8YO(dzwy=D;v;nn(OCcTTm_L zZ%@d`Y|+%uqYD~aSfU6(Ms)%oE&k{^$pbnN{4rTApp5i=(sqG=Y!MQ#H$ms>s1w@m zVhLHQl1y&LnQU5G#e`KEV{U5ORAvyV;{b_M$qw9JIe#;yqFgwSfY*AX*H38t!Cw$8 z`pDX2QAHM_f)&O*x}q1hNJp-dOZ4)-2C)**Tx~69cXu)i@ricslfvObU%St}RDT+t zaIdjluolwSHT0#UcWr8M7(OxeBfzbyi)+xhXk`PA1Uqanct67Vm!H7*tem|9UiNyZn{YsIHy2 z2zLeSynjlfe|s$#TLc`p&-{_J!~^}*hs9+tpo!W5)GreNic+jjT>%F#VAyml^n9=dFf7aEHCu6(TdY-e=%dp{%yt!Hi2|&@%QhS z7Y?(ps$V&NDIUP4y@dDWp^^zfCL2k4CXX$0fK4O7>vw%asBUk#?g+SHkj5UZyT?a! z`=TyBU3m^u;^67IPS3;aZSWlXYuX*nP>nuxIiCouf(vuwE9rM$Z=b6p4aW?Qt z`8*}2wE4$CNEH+m(0~6PBgvC-mjriAD|1Zh?H77TpoLSUlKnlW!2(4wJ*PkV<_-#v zgGF$9H*qh2Zm}i92SBo>Uj|_0SJ2O~9dBFS_SkvpRY?IQ4NSno$a&wRK z))MT(>Vv{xS;@C801Ix2{iw3n`F$a|&2xwIDqpZCe$LXhNip~>+$O8I~NbiMy_qPYG(7Z=2T@}TmZVV{wJ+~c48DD(ey z=vz7ewkOO*#r%8hzL$vUzcCO2Da}8QzG={Z7v^RKE+hZBM-c%aDf{P`&^x^dLhYaB z1BQTxlm72oID@+jnZKje$3`XnZ@_7}|3wwOasSN{+dlyO-=R(drhCo*nbOz)Mi0dM zDfwsGfR+AxOJc;O{$0RH0E6onh`#|6R*oou4(-nh za4Goy<+c(UCqE7c{pZXe8K-|2$Poh&u?378@Ly>3lKtPM{~HxP{oki6_;1IO5Y7K0 zDxMqr!h{60y83!OBO@?C8kiyeMuGj$Bp{#d@p1C@hhrgRGkJu~&8bnK@%BxA1r^67 zj^sc8oyXo+w<999Jffey0dRu-A*k|ozvP>mnyy%qlF+D>rQ#%S^Ifg-ru>4{v>9|> zhK+x|EWnd9)$0{iQXK+ugA)B3j%T)q)r)6Mr2JF#i+HpC>@}M{Ffeem*~$Cya!QAk zl+NJ*EtyD*YGUGgw!{#<(QH>(L^eO^1Mv&ZCH|_W7EN>`55Ii}H~J-jPa1ma>W+yN z>;lC*1trTOi4}!4Cp;_H7}9YL8#>+epKx=pHUE!0?c!wao#ZFfd^A2bKF(lwAa%A> z4LTT!KiD6NE?=xb;zDb^-2-MrTyDAE@@qQBpDpL%?b*(SHp@5-!V|VQL|gRKOG^Wi zoc`d29C2Higx7TV{?u&~xZ}@g)eZ{}FxL#@UuMNZLQH~| z2GaA#N-$JaeZ&9)MW7L4KYxFsc#|L^#{iC$wy^8`*sHr`NsN@F?!KtS-JKk5!tW33 zr)kLw#eT)b6k%aud;h%pQf9M-pjyY7$Hzv#lfvX=%(JsIp^a5fg9jfbZfjrQ%+Qy5TC(6uHT(1wPFCYM`Mi3IB4rY1I6JT8pU1R6nWYkKv1Q-43dFVg`X z#h4(R30;(_)lZq3FvwqbqEk}Bnw)uVk2kAIrhqAOa%ggPEVCK}yhjx>7@3$*7TfZh z?Yq%YSMY#a8=>}HxKAUPuNGTk-6mw66Wq|A>-48P%fQgI_eYPecfN4aJHmft?9=Oh zpiYaF+MHHTl-e|aGXLF>QC5T9z7T+vx(S|H-U!KwG)FH68d`z}(AcV{;)9IS$Q#CqhC7JI zW={s?a{E1Q2Y5xA2O+kLGlyHvZ{YB<=HdR;=fapUoTDmUqNdZW&R%Gxlm_C~6_x={c~%C!e~^s5 zUNH!jJfL%pmtmhls$~FSyJGd6q0s5_7C$vYOio2_a|WuqGSguA>Zc%Erp^yRhjjI2 zU~ew+-_SxLgzU7?BYmoUWVaYpc+LbNxj#hL3}?JswAW3)vG72_ohY}@4VE<#F-;Mw;e4yeRj%!a=WiIIZP$}fo=?Nz&Gp?^D z{nYSwY%G_=sAH%?*ZtGA0hh~-(BAIuZofR;aatwY3kg1RY=t}w6x1+smUs?fPt}7h zbi=rffODUuYJ$CJ-3^nrUqFwsEM>#EL*J-MrLOWA@T-sJm4ZBeBm9KmTIeq!llH#8 z^+kr37Cikh=T@|N`n6{EnAq4Yt~u0awYnyx>>qZMFp_E15^LKu1$4y37O%QwY&;lE*B3ie6d?V zLIg1EU0oCoe&7=d>BY^QP)XB=R3w6sxf>xqH4$-t|F`%?BDgZNxT)YK=tglWIr>f# zc$!pL_r>!i<{B3LSmx})QC=cu;kDqBm$S3%zy1Tjx_rF9%9s2o{?v~8#B(Kesp`Kq z{?&MREyagHJ5j@zPa$D$`3}kGcqsC$If$g3Xa6nu_;nIjb*ainzsqHGE`P~O!6 z85t6*@j^e7JbZO^71qj$UiMn`O`5R%LEQB&0HtbaX=y0G3!wjtgo#NZ+*S0clYTetntIhCmMIPkQs=Jz z{7ImCj_;MEULMU#g0(6my1fkMiKnWz%VFTmR17Ag4CVFPh-4>*=c3u%3VMd=3RpCj zSOJI>S3Wkv)QD%DVn6?;5-Uqwl~O;6q(C;+2P`yE_m^)-CQjC0do>sxgAqA&#nx28 z7G`nb8&xzFV8H`ZhkF=GGV4xnv_wvQwvJhmt2sT$j0kN6lD8z)vcx-h^&}%{3t27r=Nr zmD2__@YampNOsT9C~LK(G#Nhl%%L|NM{<<(hzGqa+jor0h*+7MXy=V(CAM9E<#e!K zZPXy^^ilMW48_g))6#4@@-dbZ@gR{f1-G{#dP_=ikgP&TBTcYqaQ~p7h6?tz4b&9l zl&GyjNK^7R4$=!Ec=zJA=YM1@AjQdWrDFm3{C5(h>tKqg4R$o)T;BJnv za#CuozTqcJf13gUrbTBpu0J*V7nd7{nOrpra;)7Ge;vC!z9~F6o{XvRd_B&kt}-V6 z-MKz~4G4R!JCF3iM@KPlW)pwM&cj>MGyvD0U3tw?8u_8tjs29hzKe^ZAlSw~ohBB# zL;d}c_4bT)f0OcdYz)qJ=0%LhKD~w$KKb>DcKQ8{wf^x#m~nAv%}4X20(=HSjM*i# ztei1pl05q6GFF*075`B?`Sn&g^GR=JXXdc25wjyYAErWsqiIHnCLuU6Q7WyST7kWKXU!ddN@DYJU7b)}rZOGPxM$Mc3$O`gqWEZg ltR{cP(aEpfsbkM;&uh3=LMBaUYaqa%xUh^+g@CTl{{dHF_W=L^ literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md index b94efa4c7c..77ebccf335 100644 --- a/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md +++ b/windows/security/threat-protection/windows-defender-application-control/wdac-wizard-create-supplemental-policy.md @@ -18,4 +18,111 @@ ms.topic: conceptual ms.date: 10/14/2020 --- -# Creating a new Supplemental Policy with the Wizard \ No newline at end of file +# Creating a new Supplemental Policy with the Wizard + +**Applies to** +- Windows 10 +- Windows Server 2016 and above + +Beginning in Windows 10 version 1903, WDAC supports the creation of multiple active policies on a device. One or more supplemental policies allow customers to expand a [WDAC base policy](wdac-wizard-create-base-policy.md) to increase the circle of trust of the policy. A supplemental policy can expand only one base policy, but multiple supplementals can expand the same base policy. When using supplemental policies, applications allowed by the base or its supplemental policy/policies will be allowed to execute. + +Prerequisite information about application control can be accessed through the [WDAC design guide](windows-defender-application-control-design-guide.md). This page outlines the steps to create a supplemental application control policy, configure the policy options, and the signer and file rules. + +## Expanding a Base Policy + +Once the Policy Creator > Supplemental Policy type is chosen, a policy name and file location dialog will appear to name and save the supplemental policy. The next step requires selecting a base policy to expand. To expand a base policy, the base must allow supplemental policies. The WDAC Wizard will verify whether the base poliy allows supplementals and will show either of the following confirmations. + +![Base policy allows supplemental policies](images/wdac-wizard-supplemental-expandable.png) +![Base policy does not allow supplemental policies](images/wdac-wizard-supplemental-not-expandable.png) + +If the base policy is not configured for supplemental policies, first edit the base policy to allow supplementals using the [WDAC Wizard edit workflow](edac-wizard-editing-policy.md). + +## Configuring Policy Rules + +Upon page launch, policy rules will be automatically enabled/disabled depending on the chosen template from the previous page. Choose to enable or disable the desired policy rule options by pressing the slider button next to the policy rule titles. Hovering the mouse over the policy rule title will display a short description of the rule at the bottom of the page. + +### Policy Rules Description + +A description of the policy rules, beginning with the left-most column are provided below. + +| Rule option | Description | +|------------ | ----------- | +| **Advanced Boot Options Menu** | The F8 preboot menu is disabled by default for all WDAC policies. Setting this rule option allows the F8 menu to appear to physically present users. | +| **Allow Supplemental Policies** | Use this option on a base policy to allow supplemental policies to expand it. | +| **Disable Script Enforcement** | This option disables script enforcement options. Unsigned PowerShell scripts and interactive PowerShell are no longer restricted to [Constrained Language Mode](https://docs.microsoft.com/powershell/module/microsoft.powershell.core/about/about_language_modes). NOTE: This option is only supported with the Windows 10 May 2019 Update (1903) and higher. Using it on earlier versions of Windows 10 is not supported and may have unintended results. | +|**[Hypervisor-protected code integrity](https://docs.microsoft.com/en-us/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity)**| When enabled, policy enforcement uses virtualization-based security to run the code integrity service inside a secure environment. This provides stronger protections against kernel malware.| +| **Intelligent Security Graph Authorization** | Use this option to automatically allow applications with "known good" reputation as defined by Microsoft’s Intelligent Security Graph (ISG). | +| **Managed Installer** | Use this option to automatically allow applications installed by a software distribution solution, such as Microsoft Endpoint Configuration Manager, that has been defined as a managed installer. | +| **Require WHQL** | By default, legacy drivers that are not Windows Hardware Quality Labs (WHQL) signed are allowed to execute. Enabling this rule requires that every executed driver is WHQL signed and removes legacy driver support. Going forward, every new Windows 10–compatible driver must be WHQL certified. | +| **Update Policy without Rebooting** | Use this option to allow future WDAC policy updates to apply without requiring a system reboot. | +| **Unsigned System Integrity Policy** | Allows the policy to remain unsigned. When this option is removed, the policy must be signed and have UpdatePolicySigners added to the policy to enable future policy modifications. | +| **User Mode Code Integrity** | WDAC policies restrict both kernel-mode and user-mode binaries. By default, only kernel-mode binaries are restricted. Enabling this rule option validates user mode executables and scripts. | + +### Advanced Policy Rules Description + +Selecting the **+ Advanced Options** label will show another column of policy rules; advanced policy rules. A description of the policy rules are provided below. + +| Rule option | Description | +|------------ | ----------- | +| **Boot Audit on Failure** | Used when the WDAC policy is in enforcement mode. When a driver fails during startup, the WDAC policy will be placed in audit mode so that Windows will load. Administrators can validate the reason for the failure in the CodeIntegrity event log. | +| **Disable Flight Signing** | If enabled, WDAC policies will not trust flightroot-signed binaries. This would be used in the scenario in which organizations only want to run released binaries, not flighted builds. | +| **Disable Runtime FilePath Rule Protection** | Disable default FilePath rule protection (apps and executables allowed based on file path rules must come from a file path that’s only writable by an administrator) for any FileRule that allows a file based on FilePath. | +| **Dynamic Code Security** | Enables policy enforcement for .NET applications and dynamically-loaded libraries. | +| **Invalidate EAs on Reboot** | When the Intelligent Security Graph option (14) is used, WDAC sets an extended file attribute that indicates that the file was authorized to run. This option will cause WDAC to periodically re-validate the reputation for files that were authorized by the ISG.| +| **Require EV Signers** | In addition to being WHQL signed, this rule requires that drivers must have been submitted by a partner that has an Extended Verification (EV) certificate. All Windows 10 and later drivers will meet this requirement. | + + +![Rule options UI for Windows Allowed mode](images/wdac-wizard-rule-options-UI.png) + + +> [!NOTE] +> We recommend that you **enable Audit Mode** initially because it allows you to test new WDAC policies before you enforce them. With audit mode, no application is blocked—instead the policy logs an event whenever an application outside the policy is started. For this reason, all templates have Audit Mode enabled by default. + +## Creating custom file rules + +File rules in an application control policy will specify the level at which appiations will be identified and trusted. File rules are the main mechanism for defining trust in the application control policy. Selecting the **+ Custom Rules** will open the custom file rule conditions panel to create and customize targeted file rules for your policy. The Wizard supports 4 types of file rules: + +### Publisher Rules + +The Publisher file rule type uses properties in the code signing certificate chain to base file rules. Once the file to base the rule off of, called the *reference file*, is selected, use the slider to indicate the specifity of the rule. The table below shows the relationship between the slider placement, the corresponding WDAC rule level and its description. The lower the placement on the table and the UI slider, the greater the specificity of the rule. + +| Rule Condition | WDAC Rule Level | Description | +|------------ | ----------- | ----------- | +| **Issuing CA** | PCACertificate | Highest available certificate is added to the signers. This is typically the PCA certificate, one level below the root certificate. Any file signed by this certificate will be affected. | +| **Publisher** | Publisher | This rule is a combination of the PCACertificate rule and the common name (CN) of the leaf certificate. Any file signed by a major CA but with a leaf from a specific company, for example a device driver corp, is affected. | +| **File version** | SignedVersion | This rule is a combination of PCACertificate, Publisher and a version number. Anything from the specified publisher with a version at or above the one specified is affected. | +| **File name** | FilePublisher | Most specific. Combination of the file name, publisher and PCA certificate as well as a minimum version number. Files from the publisher with the specified name and greater or equal to the specified version are affected. | + + +![Custom filepublisher file rule creation](images/wdac-wizard-custom-publisher-rule.png) + +### Filepath Rules + +Filepath rules do not provide the same security guarantees that explicit signer rules do, as they are based on mutable access permissions. To create a filepath rule, simply select the file using the *Browse* button. + +### File Attribute Rules + +The Wizard supports the creation of [file name rules](select-types-of-rules-to-create#windows-defender-application-control-filename-rules) based on authenticated file attributes. File name rules are useful when an application and its dependencies (eg. DLLs) may all share the same product name, for instance. This allows users to easily create targeted policies based on the Product Name filename rule level. To select the file attribute to create the rule, move the slider on the Wizard to the desired attribute. The table below describes each of the supported file attributes off which to create a rule. + +| Rule level | Description | +|------------ | ----------- | +| **Original Filename** | Specifies the original file name, or the name with which the file was first created, of the binary. | +| **File description** | Specifies the file description provided by the developer of the binary. | +| **Product name** | Specifies the name of the product with which the binary ships. | +| **Internal name** | Specifies the internal name of the binary. | + + +![Custom file attributes rule](images/wdac-wizard-custom-file-attribute-rule.png) + +### File Hash Rules + +Lastly, the Wizard supports creating file rules using the hash of the file. Although this level is specific, it can cause additional administrative overhead to maintain the current product versions’ hash values. Each time a binary is updated, the hash value changes, therefore requiring a policy update. By default, the Wizard will use file hash as the fallback in case a file rule cannot be created using the specified file rule level. + + +#### Deleting Signing Rules + +The policy signing rules list table on the left of the page will document the allow and deny rules in the template, as well as any custom rules you create. Template signing rules and custom rules can be deleted from the policy by selecting the rule from the rules list table. Once the rule is highlighted, press the delete button underneath the table. you will be prompted for additional confirmation. Select `Yes` to remove the rule from the policy and the rules table. + +## Up next + +- [Editing a WDAC policy using the Wizard](wdac-wizard-editing-policy.md) \ No newline at end of file From ad081c331b090d9a1c16c49ae8b6824a124cac81 Mon Sep 17 00:00:00 2001 From: Jordan Geurten Date: Mon, 2 Nov 2020 14:47:40 -0800 Subject: [PATCH 030/958] Added the edit policy content - how to edit policy rules, add file rules and remove file rules. --- .../images/wdac-wizard-edit-policy-rules.png | Bin 0 -> 57280 bytes .../wdac-wizard-edit-remove-file-rule.png | Bin 0 -> 46086 bytes .../wdac-wizard-editing-policy.md | 54 +++++++++++++++++- 3 files changed, 53 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-policy-rules.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-remove-file-rule.png diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-policy-rules.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-policy-rules.png new file mode 100644 index 0000000000000000000000000000000000000000..fbbad28cf2cefe4e97f2058a019238189e0816ff GIT binary patch literal 57280 zcmb5VV{~Or@GpFlOsq*Vu`{u4+n(6AZA~z-ZQHh!iS3-&wsSMj|K9iGyYBsP*4bUX zc2)PTy{mqO4wIJ^gNMO_0RRB-65_&&005{t0080$1^PufX@cJW`U7!P6cYqgP2wDX z4ZfKQ$Or%cwb8I|`ruzE91z(*)lQ0091y5Ef8&(>coo*Fu#-?=iJS zPo^zALu-Fs2@_xWU9j;?ofYX%)I>z7PqiHRr!q7kFVu;x*|2-19TwDJ>oJSt6aOre zgNdu1%hY5tL&jf6_ZSJIXt znfb`BFu~V&=hWXNUKAYZe`avA>oXs-Q56Y8&rngnIDE}d9XK{Qjuzc@iq(frzg`dk zA<2=M4gT>V_%P!&=VH3`qj+8JhfEF&-JzlNhD%9G`|;mw7u7CrfaKFB6ckjBAc+@s zX@cD9WH`F53fls*nfV5sZ-Oq5`O*fqGAJM}yq=Rb+Ry*VTgak4Bf$UY+#4MT;dwAQ zK4(-ia=zdHFsQg)4c6VArPJM9oGzt#S|oOPs5pz9W$S3oVb_}Q$2;!f-BT%7PSHLiKM{SW5Wl>DMw5I5iJe+jGoCC(^OYiKmzDtNS2J4J{O#K*impREne$e z<-a27b8=62p@&EU{MJlKUETq3R^7cQXm~;X?}wOkTp-~(8_pmt9=mnTuivxjCt5Px zEki4ndQiej5o%vbWwL~xz4oVNgT&Ez+@^CX4|n}{275~VRXR`lk>xzv;jwmdzY*-tgr%#>AvRqT zz?XgQ5E>p_liaojyds{WW{Cc$`TKbY zTuUNRt2fy<8(7Ini>MbBQiaf}D!l9b-iG{%$@8_zsm0X~P^}H#Lcy#yFpr+U-~KMK z210s1>#m`=!J=7ILt}b}}?Oa)fWtlz&31)RbH0jZVYM`rH0+GTz7^ zs=PSyV5d{W5VEr^zdbRUU?I@g=| zEn?|=E+@0+w)+{P2j~7U%)2e`TlYO7VxBF2OPFuP`xbBwjqe@rcz6+Ogkal9#9NC7I#v3rH{_*XG%yWjLfzEGo&L$CGVF#UOS7( z-pX{bYyWz*-_#ch)tmc|8uUWodBizBLxm_|5=tAS8%vftD1HX5(%?P8VCcHvq_Md? zK1Qy=1{4!dTMlwG9G&0Be&*_#kdXpJ`_EVX^1}5c_Wsc1plCD$=?%~&U?y=n@63kA zF{2T1+bW20>@N3}a@}k$S))PBF4;RkAk5B-(s(_@P1w*z292PQo9V2VwVuW<7&ATZ zE<7o(H>1j>&M6PJ zEsg^!;%A|;_0`Dd@6+byPaQs>3w;pLVquvX&Q=bE&Z zOiC7*gU`2K2o6(f=n8+7?u8e3erYDpB7@WU4`+4RKiid!abzzTF7A=7D{3H_l zx|4zynQEH78fDRLe>@UXnTsGQ`m{?v6P`juiNYLdqa?-=na0?Wmh(BFF8gzs?g;uf zGPJ(dpPMkpyq!GI@jA_<7p}yE)3zKgU*6nqJiKqK_L>X5jp~vfDRs$KO?xt2Rj8 zSFwin(s?}JJpy0#Qa}RAjr=A;{0|B75aEIyBR=brM!j9mHk<5X3D@NrYDtE(8ZGa% z5AnD73iKm)cJd6!`wB&f7X0wyXpp9xOupeEKx%kb?C<@7b@s0#`0Q6=gCwKlNyKk9 z-z{nhV44%XoMD?@tGTC7m_l^hKwj)0?V$$LAxfjHti(SrK}6cl*l{8ucY9fKgYwZs zLWnG}S-{uFqwmLSCR5JylZ=fMS;dvaEH4ss`HU)<_T|$ed$+WNEuFX=+3~Y^>+!|B z+v7>tgV5tp0_Chop1rw`S}M%Sc$=Sz3}oQ5<^ADkH8CPQ-K{9#o}@SJ-n>f0AUnBh z1xb=aw`5Nqr8}f4!09E==)e5sTdA75`rzPTFF-4)^WoY3sHy)foz+};5Kv+=Fgc=t zhB^ux{wIsHq4l;d39Wp2T2ilI>|{kz+&G}d^4R{)imMU4XZlYR{LupZiy9n6y+S`J z97Mi;{)-dDMuWtyy7yg(bP90ASq6-$-^K-{5dCmUv;Hs}_7Dy;M;13rzrQ!KToW1| z9-`U&`eRn7`S+<8oerxXcyC^Vlbp2>Lr^y$HBC*WYq_hpK`H7j@vD+;goG^=?(x1x3^nha%|u|* zvUfk|DV}Z_Ls87;`TfN zx1-#@7lz<_H|?~GichsXICZ1>h#k>C{3dYos|n@b9F#D{h|7N@1r{@AxKz3SP*)kC z$#5x4UkFmlXKr}U9%pH01_@@2TRZUI9Rr^r_SN5mXO5hPE@3idi)UgCBfsdOz9>ej z|6#)ttpAT?%=v%#FwcTu?duVINn7CmAGx7r{#IoFt?n1titPUu8vK7qp#O&iSC{!8 zrc{PE;`$F={$KJwU+0SSrzpF`x#HIuaNN#pZj4*<9zVijPlRdw!3-7 zK!rY>y6d+lHQ>r!2qTNDi`!Qk(SsL?k-Gve;34Vw!h~caS;x?+D2}@))VrU#Cc9>l z%}|Rn*!pYcY$@Eq?;`vWq9sJSK+M=NkExQYr9-+gNM6zPEJ2b8QLFeb%;EYSN}>MQ z2g$c>pTnPUmYwe$7n?zU#De&&fvp^<&&XPEV?*}5sIS#2bAjj!*EhctarK}2;-cPV z=X-VW2;%=T=CPWzu`IP`)1rQ&#W9R?Lk~}s9Ci1GYpad*x15op(hM`fod)kdE5m)g zIzC8WJG%WSGv+V1E!_@^3BEnfRi7pafGX28HQx(_s{uJxIkgOO=8ooJxB2}9@C`~Kr%GVQ)882Nbj{hJmEJZ~Z!_GR&8K?1pjtL?dDa&ATbOL9B z6QjsEa$U!LPZ0^T#8v^Dn5@5N*b^$Z7Mx(H*vL^`DD5=HU4w?##x!*0Spl#7?#2u5 zls|Y(N%%cE=6)usm9?MKotAz+^dQUEeaSU|G*nxPOfdvQUuJzHf;mpZmxf4~L<_i= zgM`vj@#U&$;8dJJC@8)WTuLSSed&%5(YN8;>tUzSxSLnGARz=>BVsc}IwO1#QThj# z`F#lE?g;@mHBU%P*rp9WW*RIl>b3@ezZ+$Ej=u<_CPJ?X8g0mYgB6L9JC_%Lg9ez+ zO3Y|5a&Y#m#e>68S!(xu=#4cZiK62Fiv+f|LXqZt^2Ftb1seLdv4F4BGmbhUHxF^)UJbaeaid4%hw_G~*kGVibmVgQ2L2 zhwI~DfneC%^2p z-yPheks#jZFrHKU^7{U_nS-_(u1+i|3pyr~Y(}SBII#E?iG$>L4&%*)1WU z`?`5x_|Ct%LNyTfyc{E3V-f_NdWXroS^Ev3oVR1|$%Zn?SkH&=SNX}_yA{Lh3(|@M zVWdd!v~FZz40tnf>cH}VtD#t1X|0Z|B0uS21x89eVgtUv!yHTo zpYp9u>xb@bB_g#zroLxw!lQ=x0AjXUq zEc)ZL?>%}HBqPMgj908okwtM5sPxU8WSOj%7f#lczw_An9AlQ0W=YmM&EOJ@d<_sO zLU~5P_`99tm}{0E&^>HDKPGLnO5a)WNZxSpFH^n;17gt7EoTd1T5OHPNtdh=_(=;N zbb3$@&`r$tglFG;Fi6cj4puiF2Q5$=E~jUA*;7$&2LDH2fB05inzUQserR8X=jFw? zUZRA!oZ5W|VxU4k=F~4B0S3`8^M3W>$mGs=NDhJ|SJom3(hztENvcsgW1@&%tA;}y zXAG4uRsf}I?E7c;Iq`Y0KqtshXX$f<%BRkAVXzuqFh)4yB%u}acD5WYlJ3zDA~0(A z=6m0>3f^wLIt<%ttQ-Wd%-sZW8Na)1dzB-ALHQ<3f^NO9!q%`}p^zcGy3v_`^Fv;h zLvYecoyHUL@D?HY=U%4z@qH$nep$t|iz!u13}A+%(^{!#YL^dP;psH1MK7tlWVaZs zP{Uc;HlOp3tE#~jNdC16-RFl0@ySUN(iHro%t%1vci`|FtU;qurRu3Y)%ZMI#19_6 zaMVsaX1!1UqG2X5=ph{tc_mP25SC)M2DM7pIm=_fVY2Bk(>FLr%G&?5I$))^caf`zP%z*=?b#J&SZ0V~N}J76RI9GE13@CcR*3HAo_)G}8}AB%A|`}8L*^n) znd|LlMCJ5E{<$jVgYR#UzvAUF^fQbT_^b3Q-II>%@}U?uQW$&`~vCE`>M#;@; z96{FY)J%B6hL-lEJW-)?4b*sXmjh2I$0(*f`85ZzxnHaQ+O8XErL|RXu6C4N=R?bK za2#tn@nSoN6HaeAX+545Pr&Uj?p)ryV0~^W`~K4dZeM+N_ZM;szRtLI94W6MMsb0xj57l zH+zARv}+ocX1V=shIi+|)fX5fK+OrC67&}ixK{Gtq`I?pc%3ah=(L9Frgi31@fO63 zQZl9Yg~8KP(}a$4{Bl@RB_0^wADW-njV0{=JYrPNBh35Q-a1E~`wmKfnH&e^&*xM) zvSov{^hL)BUsHC%R!oBOoHMYze=w$()=!m=bPG@3 z)>l=9JCtDjLpwe^A7*PSzh$~c0DZ0Zac|_}9386XH|+^_wgOx!yHu6h)^*(QT=+>H zQJrw9(Lyfg8ow^~FaBYmr@}9@R4flw#__bp&YMDV`m$t4E&SMW%Ly!f%1M^GEJ; zhmVBFF^erfEp%;3;)jJ9t+xI+-vJGWC8Mc$!mKrBOV*=|`p*X>@O@-d9^~s`S^%WS z2M-TaFB#j!r%s;3j4@OY{~k||)V8#$Hq&XbV?yR21+u`Hp7Bh-`vk(;}xFJd))9D6HR*68wum8qRL*E?4H8r?U#0?@BW5zqpV)MQS8I61i*kHKZP76XNK#0iKnMm9 zzle1Mb$eQA8a=i@oZWVvk%Z&Z1+U2DE8V7GT5VO2getUzV16lwauFfVm8UXmY_+3r zHD~8kTq2iF^Vai7MF;3(f0LSGTA-l~a&@CM5&MH8A+)4G1s;W1NC^MscFDlK#rD^r z(-thAhEyFoQaU1`{;9|p^oWb{6aCn2*Z8A2X8S7+2<7`i@!grn*of4)fmJeJQO5v2 zG-K-H=6Oz3=@NL3*|b87k4zw2Xjf>1AeR2@9r#HwbM1$JN1wFm$%Qy zTRwKhFYCc{^@~+TSNC(H-F4b)Xm}Xd;f_Mf0GH0;cyP8-|67nSF)V0kD_kd}0yu?k zW>xIh?dv^aiG;r@%NY;P1pCB2q1p{q|JR7|n;>EIV2_!TKR`nhEfz4A!<36-QW&rP ziQP2On7PLa*Uw%RKlBpR>4VY27Wl-jhN?h<$AyFJagB=lZc%m4A>Fa~02%MT_rydA zr9ff@#FzcujpwoW(8*SEmF(v9CeHhoTWrN=7m}b1lUPaF^FrPJmn}gax<-(FzV>3;+5^cIk2DMl!Ro+&?_ntkfBot5h;FG7d#zLnhP1DY~qvuV?2*{GHDzMy%G zAibMK0N!mib+?$u+B!;j@B7TzS|9`*Cpsh`ePSE>4(<-%W@~H7Wi#V*0LbL{cIE5?q3oJ*L(}hq&OimNsZyHf^)TOSz_ExJJ8YNUWv#HUw#x(_@ zUrrXU)5~jkXtx?96qnhqC-+L45pi#3be9a#wh2?z>+I}0OwNQ#wTl|72!bbWPkWiy zpZTJ3<{pSjQNF0fo{8T+Qhg-|oOnfc;GW6~cyP`zeJ4JnSnpKpcYw(~F zqyzSa++^>2dokB49lH}7q16~5eUu(Jr-UDsNjHyVyy-w}VMQ82TOr>U(w9ip;Tl6& zLeK)I#%L6J$cholUdJbqpNW`76lmz*O|v0aC-_E7<~P39PS+DB@X-Hr30W_e0e^uN zYJ=1Gs0Qf~Sa!;|!-qqm&S4u$s$!nV%jIlP41`I~RsQ+)Y4g!>xn7PZGyUzvzg6~7#~=%0yOc^MuFM>abGcfCW8+>fX30@ zob%URb4*5tma?+2&rvyJoTVzZbZ`@#b;mYC6nd7`i5mgDZ{pGecmZ)w={B2&x{o1A%6AK)5ioeAeMnhz$=Cs zr0?Q`8ERFJy@;EuCor(8UJg&IMx;J5>cVvKu>=j;(Wql=x&jaz%Xb57Eed{tKjU;U z%8YTkWRIiO)@c2v5)Y-mRD7^n%#PQUbDS{-nUUs2xz?A|mUaUiv-bj|uI3sud~{`J zR+DD#5vmSDd^Bv`#*2eQ$yu%vgGX1actFFE4Rm|ATEnO_Rc6W!*_<;m5a17AF5)-% zkHevyU?wk)Yhs0zFf4JhWSP$r@HX+}hXPHtv<-x+oGnOpp0;FBADf6ZNBy15)PuV9 z9l~ad*m_k2SPIXYF;KomH}5S^onvpmY1G508-|b}P^b!~_AMb=x$ETTG$FL>SReDe zVnyj@ueqL5bra%BoHv|YBc{fee7E4U{N7lsuMrPX^JgO6DR4W?yPe$LYfJ1E|J)L2 z2!8F}s+t^ShK(2q;#M%qzPTqWxI_Q^`4buWep=mK^6g*sEQgzj2=u_8qcrI6)^+d6v(z~o?{clr zuMwd{5sxirio2nn)Fry5idEi4Eb7g7tK!F(1tA&(WZ0&u3=Q9!5Ps4F%?3t5bTpr# zQg--9bSxEITO)wKJdFdp+i7>El17O%f{%5vXm2b-@?Q7dvtM@!1b6d5MCEi3x*zXc zCJPmWG`wG;Q{8*nab4D z>S5m!(Z-@_XL`--B`RkVW6|n{<);HGV22LZY@=(!XsNPol{rFx+sqKOr;|(}HtT}6 z3=P*m+p&4&d9f3d>CuHgdpn8S*O^W3O(BfiNlz4PsQey+Fv^ITu*7I@-nM?Rx& zf&AZ+00I~hvdBLh5KbcyJ)NfQ+wnZrBtOCg=8Pw7^f8k9Dx7Z@!Rk!3a4d1zlh`~H zSOFClZW1VQT5QMS3*)y$zp_DuBNr_72r2FJ3lza?cPZ^dY&N!RJ4G9R%(BVps&JE2 zY99MDUzSkH-%ZbVi$vme=BAag)D4MTxk*L6(*zcyJ{~E*#$m;eCGJa-D?OcUCAPD` zXy9`n->HwbTmYP~12;PUBA>*pB3+eOLe>bDyj!WE6v?B;kq6kk{K(%iig{Ds%tp}R z_R_IO=_RD#N^1D+@6mbEcru*|#a#AF>$|xmYkCtzwBP;T1JrV-ad|0lo5gyP8K}tK z%V+JM1J(W-$X7?YEl2j33X*kcFrPmBYtIt5rSjxyY_fLWmvSqL1q1}#B@lBVMjx~h?fa^|QYzF2!Ho_MB9k=4-nG|INt;|9N9bXpV@($Z4K{kp`ePiFsxf$al%^^)3= ze)gi#jqg+;VfRbG2kC9!F9MDs6mdN>V2&6(uc;E8g;}%Knz%!?A~R~2H7tuva`MeO zg^`SSr?-g(;h1C4AxvC4CEF#q&OosnwAFV*dm<@w^5(wENkI6*q7DTDk=0FNKoPZh>d(2cnaA?wLsrHj4ebpn^n{CY zg{S5@HQgoweFn0)76Nkuu^f(sH?~u?4u#KTg+Y8_z{oid0=gC zHDq;b_x-O?=6FH0w~Fr{K|q-WE#z00r@njHRxR52QDWr3J@e(NboBH!=_ZT_{thWH zw=pw_{I{h^sAy<^=ckWB898b$=M1i&R=l)-stjG!m+JBJ5QG>8L6~`u`e{@K8^a&Z zQoeN>lmjQfFlFoANf?7sq0WS_-{f2OaD1)}3J-NySkS(3NRcy7--l!d&%DVIm5Dba zD!n`1lr0XM$=-q5j=^$#dN~9l*4xy*8{nIe*z%njkhJZnp|kQlPl`^z%yI1mfytYt z+&o9qL;4FgNUH5UZwK}@;wB^5ZaCRR&)^lenKvO%n9Kis&8@7YaeQ%JLmqZ?o!@8` zvR1`G^^CLxT099$O?XQyBqz1r0R+lXL_E4XAkmWxJV*9_>==+)^=h)N5E1R;2;pp{lNH60Hq@tO@Pr7ofAWV+H%SRi$xK|B4?D!gDgwAFWlb-e`Wj z4=t}}W@&OVq9Xg0`e(t|jTFNIINxw>eAb5!N>(;Rti`@-f6`LgA%sFpsoqMx zd<5Q3-EgryxK_BD_^ge6Al?9cuGNPsIu(i)=iM1bCn0rZIgq1I9q&M(pd+!6GQO#X zQ8yDl54{O9J`LU&;{_ZQr@L>J< zNh}9Qr@NIubN-&j3ENfSX{K)EU7K_B>}hhgm{s1~ADE9vYHQ#g66)LT)1u*L6^tN( zkAo~YkV_+!PRsk8B#N*7YWdb5XV{SoPrS?XA@|V}hfeYoJ4Mzw(b$D6#lsG`5qWK) zm9XifD|rxz4kmc3_xE;yNX*tiFT3f5HNrK;3p-f#b-lBgcrnoGs?)v84<-bs)t8YM zXm+54alv>V42QmUChNC7!Ig)g9j%2Hxyw-N@|EvCYZbC7IqjXN;bjZ+M7R-26$atM zyYVZGJ31Q(vsB`al~XS(T8DawDYG9jyi5BUc}mGn=WZWUcNu z(DjCn5ap|G)0K@wn$j)&;by#7*I(a3uN?^~@LI_%=3^g~e*l1|?&!8dJhY0J?nGRl z8V6qi2Y@u8Y!$J>_d@dTM@|rn?9iodv9s=@-Nm)CHLGZTeVdxT-xzD*?(ok+Y{;V? z!L*ceysvm6r~|?|!aS8Dhs54RbVNTPi{(e1*&vDP!=}mTgcD{a7V_g^wE16O8pTrk zopst|q3(N??RkLT%h2BzEv$GMn@~C>Xc2`?fRaJ8To7uTme7^%FLw1Rr=LAZYN8Cf%RUxfaDCB|+@tzP{@(hyNKg_(+ky&`y5#0ux_?51>~O{XS< zZ`}|Cnh6EUAOvR7#a0PWl^|CLKApBUr_S#Yj3Sb)f+YT77S8_48}+oF`|wCOzWxb0nXZu6x z4aEe3Q5b5T8z1DxG8>|8eS|W}3SRb}1sdapK~@!m&zG_o;Lcnf#a`;ONd^`PT9 zH2`vQ9x9GDCmO{NZI*SQF8F+!S&;FUMB7ab19=D)*!(65A#Y!!70a3{5ZHeFC_Va% zKGB)D(U7{Ik+csSx(#GU#`r2a-!6gwSKEC$mfvew({Z!a7!~sC#+r8VS-6)S@Ez`c zf>Ivnzhi7p_2ny&e7mae>lx|uD+a%GK%E?(v#j5h~ zehhtk0jj^B=rU>nCEbJ#PLdO@_S8?7I*zz^6huersdqR^%arP%CAQ`$(dmiE8#BR+ zQz?pDDTYJkfZQYGniWLV`ai$&QMRM_)?BSxMSkiIj5-h7+XXzuc|(`Jty~&#es5=| z8K|DXO|STK-Gf+CP%Rf?BI6H#^fCNBvJPp7_1iQrG|G~_?E&PDLQFD=2)2`jEtNX`G&&_x5COz*FP|s8>&e^OCV@2O0|; ztg1PCQ=&$Q@9p5Gm6%Iv4*N3-{_a=u0!p6^&1^)vixv(88Wz4ncRLbqGHw3FEWpKA zTy=+I3F)L#fu5%!NYN7)MDaP3^7(}_{Ie1pN9NOsd(*;lF&+t0ozYx0TUhj!#(7P) zuHGQh`Cn_AuA5yKN%T%7+-d3>Dv5_KO2alq)T&ahdiXW!fXu2 z9ZlJqgrsuAY~__2QkXy~O6CYS!AeJ!s2-${QZ=>5pf17T%$yo9l58v($CQV=hybsZ zZ0vI=pT6XSc1@YpHSL7CGj^DrO(DY(?2cRtlgy7&GQ{rg z{^Bg7KMC!OIW_1OJv6|u$ZB$^*GF>TzFcw|b|=S~5Qs?1mt{brT3S8$%k2>DUw%~O zZKg>nSAGsN&9TWz`)BGOH}+#XSRVBQk)&(9_BNVj##AgiqAYsQ!f58O#6rZ3o!^Q? z5|m5aK?RD3QVScFOk=zm#43V9#X^be{aR`_saKVRg@{t636$z(-+u5)_f}rrUwQBk2*dzJB%rjyLuUU;ue(-(5KzvO%A$wFZ zZ{!ODDBi7;@Xjb1W~y}W0|TkyLkDMU;2JAyCEbLU4^OAmS{e<_lNUt31Pel@Y<&ss z4+B35Q+3sRD}s1|AgOqI{>z!(lZnO>8O(rq)*%?2`Vxr!6i2yEhF6{J5%ByI1v%1t zTU++sp3^0mCLtbNOIZEo^C$jP9XovQz%68+WD6w9SCgZtd%6=@$S z!ySH|4)JSu4Y%Z?_U4c({nTGSEaWFr*b1!Se>t60=G@d_oQ#Za{)P<2C5wY`3}-Rm&6JEpoG{j-smBJ<(NN6(YG(Y_s*cbN;< zmO5gO1ZUR*@k47G$hv;dDb;k4|0)25IM9NZqF)zZJ%yC~Yhf3tg8yCrUo`_k{QndN z%t*4gC?PXPku0|8j}uD1q3Mc+Oa)-_%D!OGW>W|INffh+7+&88;naP@3Y;)b?kL9j zx1La4f5|slvxT~!LfV;R5m>z3)Uvq~&w6V)+a0%Z(K@I2=seJOh;nZoUxffBv-;tu zS`>nQ-1Cbfy=gDOehNfgb=xxr1tU9t;UeyfzN{M65wCx(Q#HgmJaHk+B`TlZl1~^tBH?}j_EP1WE40(+Cbr^;UXe_ zYiNvorOo~oU)8aR@CSKt$&Ggc84J|ArZF6)(6byLX{Z#5eP{q~;fUV|IYxYVic(aQ$5-@z< z?+9+Ck6N4Ayl~IZMt{sip0M88T`uJeTc9Y>pg?%<%#W_gbqXK+*H6ZWo!y}tI*1BN zkh$XsoH%Ja+@+P1d+qjZagK>Bmly9)#Z8kF5_%uiUaROzs&k#Hioh;bm9c5LRuh~o zMJ>u|2UmQPt_pg)^MGY@-LPJ-g%EUQKyUWCL zu-eG8*+|ljyybK2N7HQnEEH__InD8gf(~9`{u6)QzpRQV4F zOva4=YPZm(>n?v_9XTVk@tk(d#Ll^W(39Vkn3z`9ReiAUtWAKx+&& zS{ySN!xXBGKBlo66~vDjn>360;HkHYaGJoMq{Fbkpt;zDmk)xEzYnt^vEi;aCQ{RO zr1dLW;uZ?ZV9B-lrFXbmPM6jf2O_*$x@Ohpky#GR7cRQYVJ*_zDhoxMs^uGB#;($- z(5QKOE^ae%KB`P;c3xgGMX$l!kVuM_AIPBo{am^nu+QkkC@ulQ!7MVC-h;sfeqh{n=?d-N10=! zJmO@aL1Bf66&~8IQ6I-&nfrHc#pQg{_Hm}U`dAtPg}eafZ;pXe5n48^@*lz2AZbMa zX{!IketoJ_qvGhn{&5ZG-VXG$`3i{**>#HKu^~0G0@CEx)v|P}bTCMw)&zmn^qvAL z`X4oJkZ^(cuyA9^jN$!Il7ZIsPn5g!Qy@gD#{1G-5Z5vI*6q&%tm;a#mihHM2y~eg zANLEMXy`6Cl&D;GSuNtSdCszJXi0V;Zb%z*{@M>WQzE$Q@HaSY4{>|1-` zduj*L7zcV5aFiC*3PO*G>Nzl89t-{j-%r9d!2W#96Fuk7b(jA{WD=Sl|c+NQp^vHbrn3*^E=a&802Q)Z04IVltNqF-`wA%-r z@{R96_W}g3$Vq2Tj%TUz9{RV{F^+T>V5Ap?Dml1TlzdOfA_`?^z)&taBz&=CVVB+E zwgC|A@8|3K9^38ct5tavCmC0B#r7LXD3AxPAFfm!8nSaSv}CIrKwatd!?(knz+}aG zRas7`YO=ItY67uNRb>F>9yzbdO=E zRt-NjLZ5LCfA1|2?2CM|89`X_Gf-A-I9j1>yk$J6=-_c}A;U@^pe@&<&&d-y6{ni3 z`(DiAXAE3(IO9N7=&;qq?H^y`nJD^(e_Q*&vZW*S;m`L;ef_e}sqxD_I}Ow88X{0& z4h5z-5@%VckXfU1iocp`f^;{3wwnV}a`T!j< zGYJ!RS)FEi5f#rcf8-Pni}J`J#V`47R2BqN1#X1bUtT-C^{V7Eu7|n}ncc)$oAyjN z_svOgmbscd!<=-K^cA<<+(#Y(pprkJlOMFiuXHci4F;fw6aD3pJt?+~)IvKeWv)7L zCL~)Q9v);75Ds^8102t-tj~(A7Dh^E>l({^**(P#qtu;^!lP|fTGr;>#c~OpP7`uj z`!Dv)6&LIunuN}iA$zuZx9TO>I>fkWC>IO(o7c-4J&pF>ak*RuhPp5HWm96bA?1Qz zWN{6eL4y&^Z=$hxjSuRK8-;|(DU|BmHV)?e%QJ&Hs{)WlB*i?7w-Gi87KMVipYv61dpSivint=b2cw)S? zKfh~AD_|Xk+sR0^%W0)Wg5CFollQ%4eqO}I+)%31_iW~N`2AIy#+;^`ySVDN&}X1P zF^wbsLajQA64-m132BuJ*sH4*P5dYyp7eIgSk9b?!SM<zoGVT^`Iulp zCYr>WKU>an>ni#&rHBhLvrJ7e^@a~iA8Ou@!D0caTiX*ttiwoObIy-S+Rh ztLe&c4n>}>d% zA{0#3>1)Yg)&WM{Za?eH7w)ZlJ+CY*(`7_GPtP+b)M2G81HW1qZ)I4py=pzBhbJ&m zJmxpOj)=38Jxtx(jp14bRa7t@kcTH2sL_XS5!+e27Jj<-jZOAy_pv?9S3q8Qo;IkK zz)aB)h3K=7J!Q=wZ4^7kBQrkGF@2&DDj69|amQB5$S`A>ET-X~Yhbd}=$m#B!rfEJg-- z4_CJMQ9F;U9~nuA?dY5B&?N83s1{q<%FP6>U#FjzOIYXf_+z17Db>MvY~jMxmQX~) zh?Cs?xg}ux|Jc194-wjo&IMv$q>yUJ&Zj3n_&>qhmB(H5JYmnRCajbz^Fg5e%6;F_`4lq;66KmShppZZ(ahHF)_N3~1_EbQ& zva0NWmviB?Mq2+tXO7nmVwhZ!EN&dw-iXbTQ!FSjZb0aSMN?hkHpA*$s|?d$P(w|b zm^P|+rp+7wNA4RTvD-z=M@#EpJJ{};EuD1uO8 z1@0c69XDhXy{tASbUMVITzN}}ctg;G!eKGl3^BkJySK=#_%NNEtiXHf#1;NxV=BS| zy;B_!c`tgkT0PP9vasma?^;9be9)eU`O07%*Vt`WSnMM9)l7~Qruu)-6C@{PE*YqS zYg2%fOALF^PdhtJ7Ao1L@gEGUX?a^;Py)q_MzOUuUU)ny_FOBW{c=3sT@|8vOeZsx zC*~JcQWruQGrqT$h>Hscp>N%51%Nyomig`OA zQRVk0_A4&D-$w*}0~(=)ZqF#iM(Z=FNt={z6U&#MUb9sB{F+=*DFNx(o8GBfs!}ps zjleV@+2*D{${fKG_x?naf+CAAfHAg+>yF*kNy&AO)>-vxist)eYd-jUjkSUivmT$+ zJYB7H0pEszTmW41FLgP($?m3nVgW1FMW6{w#3+c!AqqRGk)bD!3#g%8k$amNvM`Rk=Ct zP}Us98Fek%aKd=Wv80@~dI8%fUX1AkU%>9oC{j^uD|wO8Sxi{?tK6->kLd_QpPdaI z6H)E6h8F7rQYwzmN|!|SQdc|Soe?5wVnY&oF4;&1AF7A}!=0lUMo}dRIZFodf#^%( zOD3^oW0@Lt5fL!?tAV?U_f8n2b8^sI!x*swLiZZ45BN4H)@^iFC*5^%LrG;!W!^|*H8D1GxFudi<+VV;(K zbJdOz+KQ|J%)l)^7MRlIv0QquPC$=M8xZ~-7N)2bTHC;^09vupl2Gms7OmfM2RXdf$6Qf?Y26}6O}ps_sNKz zp$-y{r_Q88z^7I^au=u7=s8M;>#d20x^GxxHhfSS8V*8;77e`&+K`lD@~uJUb*ZO? z`f9Wb3=)-Ht#oXG0e*}CSk_ze$CyqROk}JTPF?8hM3|dF%6R{7NlQSPbw z3Vg~p%Enc3-Q+)BRKL#CW9oj6u0r}1CMn?-&nCIZFRA|4#Q8AkfP4}XY4#gK(CC{Hf zlk-yNaFZJ0fSBDOBT;>a0|p&FIsG9Jt>ER5?c=-iusL&mrP*zs3{0|oe3-&zJm%j^ z{aBqSrb%^Wj%}G=F&jF8*V*jCYZM5_tkm&rcb7fCs8gvL7<^WLM$YRzAU>2Vcjb9l zO2z72A40TfIY`X+Ew4FfLdhJC!s47dG@2iso#mac(?B}g=UkYpw4qt!s-C2S?xbI6 z>uT4`7P=AX_q=~JcgU@b_dHL_x7FGhKI)==Pw9;BM=omz^al)cRaneBy1G_t_Md1V z>q|E%5*10OR~a%KOhz_V;Em~j)S|E&GyE7G#Vo(v{3*p7;R!#l@CQ|$zFR{jgRBs! zy|Pl49B!#gw*;!7$gp0wE*|!OQFhirarF(BMgk;g(BK3J z65QQ_TX1)GcX!v|?$WrsLnFc6-QC@{Uz_>n+ufPnf4i!yy6>&J)%`r@oS(s?-cj$~ z`H$m%$L!O#s|`~PJBk@Nns^&Royz2_eeKzd*rYdV?CTx}UlgIGcNSJi;(zh?flBC@5B4Rd`!HWia zzCmxoRJ`EmBCwRLOM*EwKGBty0b97pW7oHWB6`60Snl$CILovBdS1BLa;@ZRXbbZV zYaw6p6gz>KF15fnn8%_tEhI=*Z?yue7ZpV=J&<-J%il{o+`7Z`UYkUuJs=RM{FI0l zvS%w@mf`6CN#F_d$V^_Ym-b^iWJZ(Q^GIaKORgSABx3910CwCwHq>#l*xgIi+U1TM6*FQ&11LHoNdQ?*EUj#M{mOU;T*(=>Mh$dRgBP2Sok& z>0wt{=K$wGraM}vs#)?Wc$rXFLEi6|<{h&i4`i#AwOlR-igW8a9Grz1Fq`t|GQGJ?^j_+VaImiqZNf^dX~6pi zT~CB8l@d&>2R>zn42k@WE!nkM6fAttQVvIvMDe8Xc`wKFF-%inGi5}S)r$a>y*qHAdE8GR2>qhLI@UQlIx=YkbuJx07+O&O#pDucm!(MKY!8=ewO(5w3-YB1V9be6 z^J?Ad?H#OER#OJQMUaFKa?_{9Vy2~Le(Rw@Xu0EZX5GD*noN^!+o=g{L}pmvO30U~ zK%>f9y4x8YsS5O5W^ZOLoBt}+@3$8>xW~=eK++;AqI_BLV->pM%>Q($4zrGZYGL8P zS6Mk}gUNvBk815@+=b!tcZ!j9Cz`F$#%(Y%K=n3@jmvnF7K67Fi%ryFq)#IiB5F&5 zbkeU_GiO9@@9M4G$=cdreJd@jsrE6KN`Yxh9I@X>{Kz!LG~qEUEBhTu{(4WgtH#C< zTT$b-czsnXOrHplthwNf2$3#d+KkL}3_V@%kuS+znuXOX=%(Y)Rvf8J-L zjo}7V@{O#X~X_TH+Cv+^R~pPQ!{JN zNcdWNgQz+}P=S1n=8za)ze$kVs@*esI#ERSd3zo=G!$rQh-YT+gjWhRW9cWJb2>3K z(NN1P0irkV&Lp9)SLW(Z@%qEyu6HRk2vNU;7U-YCoL?YKGb?CvpdPlZ*ekr#m%eC( z33bjod;WQYB(8Vw7pGFv(*Xl}mfRvR;>%E+C)lR+uz41m@3L5R>`q;-(>1km`w_dl zytATe&?hSS8P_gF;a`fDuTPBb7hi)-mT5B?@^c{Q@&uf}u;4GQMHI?xVrG=nMpxTv znXZ`bbo3Eh;jfUJ?v}keSUdS6d!{PFX)$m9&WMPSconYKZ9Ln&+}P^AS>ZRcF8Sz| zb$TvRCtBEh8NCiAJtb)WMsT^DtxzIYYtLYJWq36-Ku!~^Z&qZT3y{e3ERp@{MFQfr z@-=qXVPRlzlZ(Q*69-J(ITItjGF`7R+^^>AP)MU>+S@!sBt*shfs-j}9yBtP;b8^1 z_!2~ki7_F%RzziTXki8(IegTpaR5s!3!1_Jb9wD?GG$rH-9EkVDFKXZ2GEGoU3wEU zK2GMQl>&}0pd1jISTSm+BGls8zW`e82eqt!0Il%gC#2rW;r4y{?l0D)g@zk86ZyIX z-p#1FO50UpGxc;h#?!5t1z4a*xL=oRto1~S2z|8>(I>p4)|$$(?!;_`VuwJ#G3r#w zszU+LBXz=Q3I?IUbfF4=#Z+7gt4Zzqbaud~0xB7i9Tfa`bnMc*A95(9J53N3{2npM zeC4@wg%bvG=1OF7;*8|zc0^*N^#_L*%fDVngHZjp*@A(()g5M-Kij`J(3iHDx-A@j z$mlnEKb?PPb+fcsFW^RhRDK+a-Ruq`IewiFezd+6ref{5A`&YBljOKGJ&t}C=lwOD zy-T5>zGlEQvCFbYOmOpM?_|`SGb$*w0L4d_A3TdGoeME-RIetP;EhRESWEYEH)LRs zG-$6sXy@piyLVupv#x-L@bMP!NS^yfapCOwsKpWCZ6dn(hkLWlamRu4Cko~e|U{7gF*WHNk@u+r13 ze!)=0Fua+WSEuIaAO`fr?FZb#Y5xZ*S9EM?MtGbP_Emis^^O!6k|zoU8_D+<>W!ge zI2G>s&pG7Q@aBM+_U@{?OLxoGH+yAN#acQ&H|3lE!j(}!$-Eh_k=*kzGd^q~K>M@( zV71)&Ogm0bxia8jZCNhUgXPp$0jbz!Fu`sy_aC%ZjQ7y*GF3X`WUbJPx{-T6dq=|a zN4?%CC{c1KlZDMX6~(D<*+Z_+m7Bvw!Vp%!0Do?Ed{g+_ov7eD4%z|mBJ%Er+5zn4B zwZXWh;JMsbq>Mjky_R1dJNE%NufU7EmXC+h`SmDqMpFL;rU zI2}V)Vadh3U0%c=968ene;`*`>w6$->wl>EiyH^#j0^w}Kb$yWvQSY$r!ODr>Yoec zL)r|#pMzR60_$CRB*!dSh#IF%Gq&jQ1h7154nX&lg9KHq`P0*k^pjI!yPT#v0|chR zZM{zF<*{dkHuhtNlf+MdlV&uRDypy62OGP)6Q6~FNHq3#4!G4s*}#CG`S}K|f-ob| zAM2d`@Vw11B0QW~NQ_WB1zIW<-4^VxyjQsY^&>U=M1&d`w_ihDh z;HN{eb1Wh657X4E+dw%Wn5<+$=4Sy7de5kSNPGqv3`p_vqnabcJa?i4y#eH+VtQvp)70M^OeOHOsjf{F%X=1SIv%7lQ zhP%!FLGT@J4y1=?3Nj>0%j~pnZ`mjhOrOCEfbjnZH(!xY-tUe#fJpN`9FE0}Dw968 z?wa@}>@D%U)1n;P-A?f~aUFe(DKpakql}lyDd^`o3Sal`s&m-ybiU5YxmQP)>B2LP z`?-nVH)2)yqk_5PC)(8**o)}fL9>@P?A$_ThuCEDTI=dCQe>(Vfe>9` z>n{tT@*>fMFH0a%^P`|(30`i_~D=1##(cgpViXF%X=6}E_U`ikar zL*Rfcu_kyrNpHsT0Z!(#SJLav{;0p7zwu&S7)L#ZIFChRv}^~3k~81$$?UFQ)R3r* z#Sooj<|uYufVCM>jaM0wx~i@O*g#n2BHIUffiB0gLbz%Cz0e{HMZUVTm`618iy8ON zijeI$8!`$&gNMs)!ei*EIsC{dxLfMdUDGjn-39YDJQjmdi)A&8m;QXIH2C$3@1ON% z0w1w4P=3ju4q?1{-goVG0f8b;eWoMVX@Hhi${y20CXQ z`tGlDg=-7d&syCh>w~MizAG_9F9E8dbFU<#vO=keQ z@zT{9^c+<04j!K>)Wb*va4)qOMt5;MuiqoS*oMj!NRmz$OS5VqIF^57s*o}H^pK&> z5<|(X49V*!4E)C6decfF8S^d#>h)qZ*d2y=vq0ocmf%Pf*kG$NNOphP0kPVSaJB9W z;iN)!{P`0_YQ&<7!;v;TZ#S>a(Ft(*ff#n(&fndai>K7*Wv3OEt-!XHPr+iCLYave zFS>K)+DO7JQDe<6*i}tYQb3&%OP|?67xc7Y$UkxEG}j8iqVtjMYZeIo$`mZ|Mof{;Z$VtQPBh zVJB|uA9-LZ<(EgtxZete!`tLDL|R%-hAd45(VjB~sXhb6NYNiLS^WD9D2Ag7%pAE# zmvMi9P%>=2VnywqZt_ALDiz9i%-|7qr=10IKTjmhGVW@Lt2TW{0Zx%UCMoJw&1<*~ou>Jbz! zpKowOX%^c=Xi4#shIjleEp_T*nmR{{!5&!NPx5eev7 zU06 zNM6ve-jR7fJi`k%)puGutZ0`w`zY!ihrmY$P<>-v$IxO!Bohxb(~D0+Gxowf5ejXJ zAxW3)uK1{5U45v80ZLmSER-GngQnr75yXZ^5{5%d@yxF7DC@EFCKv1mukg~G9xUBe z0;22lzl1Z7H>oK0siRb1!R%pct)H*P<^R{6ZP^Y{n`I2&l z{-!=Dhf6Joi>Z(X^2E^^!d&OsJ)uc`A+vmG@n$Yb>4@fi;{*GCB6+`Hn&CO_4rdPu zup`Co!4(T~C$T)N2u&lrdwysulV?ww$at!-50MGPUBIbUh(|CgE)6OQa?3UoRVhU!b0?$$bcz znMFp{Ppx;dwLLXiC5PgZ5Yu>+9}bI?XIyA!DI};RU|e$_2xZq?f=^@X+igk5oMg=J zJ^EI&wNf{NOQE+{2iWavkUFb3kLqxDcNV^SW`J>DpI#bT?Q5RvI#iQHk1vaC60vL) z+WwH5*+H|uy84=0b-(3n*m~`(mstRgi&iWOwSg%PXdcL)N|7Xm=hx1X@&`_h#d{L+s$aTba^knI**hMXP2Ndt1g=?LeV#|qfIn}xl~APy!Ui83 z8kki;sYfg*JO2Z(TLim#+5yNq!?o($w*@YJy18W%MHflC55lgXe zxd7v*OD&7_-}E}ZqVz>yrE?7pdZ`aOR`LeSMIQ4lyY6;RH|;1Csk3GFK;2MEYekZy zh3cXtRKibSB@Ci#s-YyjAm}t*-9@qQwDVs&DbL*j42_J?ikqDi8|#mDx0dG3#k&eM z)eD^|rssDm&s(CitW24Ye)OhB>;%~14YaHYd{V68Pe*#jMh7>m>CXSs580k$CG>o< zTF5rC&|}E(r=8FnOG+agh16MW)53e=JZ1ZN_I@j@<=tiW(B zJR%60LfbXFbZFalqebE6`ATuz`K{$;VxKc%X|EhMwkXY-c<$!T8m&fuf{fQW>;Vl* zJYnon6s&z*I-@z^JE_fFSu| zIopMkQTvq-Tw6C?wA~pZ&YTTLHqNHY(|8qSr}Dcn{Uvp7YvD2zE?;kksHxSzedEf> z=S5idlUjFqz;(MS$C*1^FJ?~b3zPnd#NjQUBd2sBD3;y7Ni~$?tPJQ_1tooU%(Kp4 z9DQ$}Z$aOBS%(U`{pOMuJA;s^TzUQi$qC>xS$xHu7?j za?S7wuve=49!E(w!;onvwbu7k=}S2y$vvFt_`Xf{@h8Xqy!%0iO}pXz=AI(HlsD=J zjf#$jIbc#XMLoyWZENeeeot1L==j)nRdNEh)Pe1kXtJ)8{up-W=d$rR z637so@>20xC0dvLlWID)i=}dRV{evD)TuhD(fRW~z!Bp$?3u9ex+}&j`4d8<@Cwh* zU2@2DvO$BehREaQh5G@DPTs3dlA}I}9cLmh1blRHHIX)OapudaApi%QR74(M3&7;vAd7j(rg+Mm#i4Ci}X0X63`>vX8~SwXj0< zjaZICnDUgQEH7MI zLTFwWBguua&UrkO8LuKa8pR?$Jk++Rm?LL~tiO2s);iRZl$r;N(;e3KiaoSO$6&VN zZiUyM5c5sY1Ri^XF4P@!Q|`Kp^-t~`GJYx2i39#;EZQ3EpSeX4SeJrMqnzn_J4jf; z&B4zS@&~1=OZZF)=_pB_zy#L8+L^%qcuyy^Hb}ed^=TuevU#0|k^$7&H3*-9Lb4`o zNRdVDPvEbbMdzVKFXPGMQ~biwxL!L}4T#Zh;Cav{Y}>cZtG^!q*oEw+?N(kK8|cQt zX+Gz5WU+CDJgwr-jEbtLXpoVXjuskVknKbOADGzks(JrGC4jvGT|}k-a7us z)X7bhW&mkBM zk3}bbOp8o$IdWy#L}^R+D73?|l&t&>Pt_KaSGx3&DH1qRHUFNf`AeHaC zoh;ShmvBujEN;3=OC@a7LLYaknP|*w=e}}lKmRUTq6E$s7Ji!8HlY6m9MrRu9yyyG zn{2j4Qbt9cXiQ+fkq20D`HuX#cIidYG33PGq}Djp?$gy2_`T+G^JUHm^e=nEicS2a zG$;}SOGs;*1cl~BEe@npuFd;JZ~97)&1m6FS?17u-%*VLBXyNM|Q!&(H4b}H{Dv(?V?RudG@Un!n#+tBa8|I8fEx7>rS*-R4Z*lZ+BHYZU^!Z|^ z7?#K6=v2pZKLJulJ8Ubb6aHK5nXhk7xXqkQ*CTzWLoZxglwIq+NUzXXTiVbKlRG0P z3jy&D@iVbi*Dx4*BqL z#s40nhf1di@SyokLaAwp#U$sEbnP;v2Z{CC(L|FVOAN;Ps;Pd9y{vy=%EmxPPqMgE z=R5a%w`{uSB7NBUxsYLlJ7F@xrlf~AYqrqBrwLbU%hG8uZ~y!{Bm+6vAQQ`sA>fQmRhP6BP!lOwxY~ z1iXP*bY&b0GA6dBs1Vq~L46GD>*pFGXru#giqs~Tmu36AJ??Y=f$3WN1BaF<88EU8 z2ad?`-H$FSHQxN-(%}Pv*VBFK_aa=;g-UPtUGhXufp6x0Z>6UIlf{}?@P`_47tU}@kBBjRt_`#4pZxXG2-i|_sX&I;sW zviz-A3#?5g-o5pM?(D`2SDlHqhtS2rlZeqSa&7~-+xc08$IzM5DH5J~GJ?ZBk;oGW zBuAY0N-g$Tvp;`HWKQQL8>O?T8cbnO&kqoWpnUyK7C$LYZ+{IK1rQ5?}g+7ds@(Y zxkQGe9slbm37lJ=9)&-7aw8|AkBUaW&>#& zj~|-L+91TA4AI~%DH-C?*mCDW_!u<6sh-yo^~XW!ZuB}OZ~=H6UVULpygZ;Z<&NK} zG5X7+N8B@$pn4!LLUFl7BJDk)S7+}4EQy=%zC-k;<)aaP`~hSMx_N_4_qd#zMFGO| za*;b@P*oH>hb|tka52L+gMVu3y0x->O(3`fH+b;j%~u|Yw@4u3;%cFkleK(j;&P_B z49Z)e{&!_|u}v7n0MIVW)i09qWER!vJ|wqv2{GOuruHRfz^Xkx;3{b}0ppPAUKHor zYHOMIcQ5RRV$G8H*q_R4i9E|vJgk^rBwmC$-%}PZidyTw|{2}IDo+tL7Zj;ak5DUI@!(h zFC!BRvsHY9mWNh03GBqvW&K7DfjESj1)RS*wBS_7dH${*`c-V~P;3&f;`Ea9Dc@w7 zuBRc8Kx1#`fK5-xhx}KqM-dSX-a(Y}nA?v$U>EagTU-9PxEo1?vKP^gyGu_$+r?y=Gu5SMTlz zGRqUJbhQTmWV%s6a})n$!=HT5PC?MyhGHmtI|kHrbCM;6}LOFABrbdOLYt(mY$7cMC1)x^}g8b2O$$PB|O#$V#>skx19Ud3qV-c+1#LI`#4J{Oy!mt{`oHMuSwk(4%*;;I@1DTdVGsN zr9f;+^j9jK<{{ncCXG?U`PijrormACtd@(3l${)H<0jW#tZ2bi4ha=%);^q`5Mi1aNK_=EiI9n`xU&u@dH$r=U zDRVF(hbg;i738|CT74HRI-enQqSR5jdm0g;ZjNmblxxU%Xovpv#aSf(vnK6?JC4PO zS^`3lLAz@(7hzu3--=*iptZ5u$r)22uf>#E;MM6TPI(H4@3=1NydDpPlRbW#Ju3qT zaj-?yI*!FdnSa=kQ%$~H4c-s^|)|f*%Db<0bsvwrl$g9le)faD{M{ua&$dBwyU)K zXX11o#2~0iO0eya$x+~)RZR10&b!FwB6rj~fD^>!g%50QZ?ZL^d|B}mIexA{vsms) zp1%{Wi~w3ybx{g6;f31@SL~RF`Rr&U>oaXe9d8IfK0b1EFhB+Dnwxe`RjEn@^_))d?VEPCVs;e z3)kAFLhCX2G$O~bzDoATa|h3wQ%WT5w{=ECEdXG)v3iF6*RRTOU0XIQG?r%P-hwC2(QDf5;q`{&QBVpVvtX@&|&T;$e6>zd5!jlQG+L6o0EoSfAWa@RM@E% z?z&e=uBgQ5Yp7xC2X2%cX`I4X4G8GC(&lcPvt5}@PwFUbVLowTZYk}rpgA2Xu@~go zSd(nGt-Q>oi*7+k?Coa)Eeu?&RKWMM>m3JLNOB72)xRMPSZe!<{NG<6qW`FlVFs(YwJUBaWKohNRZ7QfUg`&45}C~JH~o1)L)k4529*0A)Y~m2O_v9jNPSF=i%0nezr_7!ps|+ z@(+loIK=vs``AUU4>6$)-Rm<^hROwS~P0_+0m z(a%={VwIqZoYN%Q&#fCL1*Pyp(GGN>n_U_{1qpR+-{PoU>kxDGly-E?mZpmj z;7&}VFdpuU(T*WEVC@dBFd~($k7%`ll~L461n{TnEHL9%I@{~kb0-#qSM0Rxs$T^+ z%)B0D2jdi*hoLVGPF_ZCX%Ou<8sE&ZaH{`W@iD%YdeI%=uqZeB!m8BNi8;4?D?zyG z&iO0QBg`C$$Qd7Qw@Q`Ael^g8=7w2}J#LT-&58MDj+>@6mJEHfO*Kb>efjQqZ7CJS zlQ!fycg;TVfEX}H4StS4Wz`PI{2J~jUx$mEwYqjSwsh7Hyti2K zVsrt1CbtAh4VA+5y+a5fW_m%*AqAha15pr4BRB?G_PXCDK}8`ys{qB(MjgachKOI3 z)Pa!-6%Y^CGN&!3`GDJkm7*uC?8bAawFn*F!ojrRRkoq4g^?+}gtN3t_ZdEf;qQXL zAh!puli%3Z(lRQie5bm zW?aE6D-CPI1|wdWb1c<82a*?OZl@f~g`>%YN*Ji)%EbycbBKCKWQtQLJ`GG>TXl!b zWzd4VnOW^uM=*xmqq`%)a#4}Du@@L zqfyK#HIJnR>-yn-->kOevT4t!N6QG4FUD~=qWX|M{L%EGnYlIhx8DDuAi;+r!DNAf z2cZAmu#}(pbao0EM10p{bB*8L@dnqO0;OjHRs4IP3X6)gcE$#!X!e%r92{!hZL9&e zNln5;P`}2MZYp0Mwzs=7+RJ0wKd5RGuWVw948Uc=*5#|LtJ4OGC1R7I!#-fYG91@ef`bjr%y`9f zN3hIH(U7w#FD666vS9=}SzPm?H8~!E#o%^rLctE7qvXi^n3lTL;h&#;oTv4RcSl#V z3vBox0>+=6!_S#ht!qAI!7l;#rXwk}*iE-3xDn4@JLsm*{N%S8fEL;}F`lEF+>n?( zV-uT zQMiw{vOkh6Z6ArS>Sl0@Nxw*jCHO8m{7XG`dRCknl&xoNT&`KQE*+U?COJyEfQJ6mS(Pf!r&z7U6aCe!HeFH~3c1I75#;=Lf6BV0B_0;eU;$0`i{ z`b=S?!y-$xfneC6gCW%CMnYW0Lg%1M4vLk%`ZddSzgqs25s$?VP#!v{CO^58RZTXz_i;%UP!8 z3y8FXez<#P!5en|tg={@DUgXRalNG|SDnWGj`dv-JE@?coU!R=w7vCKqs7upicka_ zk;zxxSj2My?xcnfdV;0Z&ck~T_trSIKE;_w{xxMc3T9h%__z!QO3c#|w@^OkM>+k> zRGLosIa@X^Pv(9%6KzyVuTd4pw9&YHtk?M{U_QX0!cjWkFd0hQwOC==X^KqNGE@Ad z94wTCzA9{V23e>;42%h9_sTvJR!6!m1nngXQ&at9nQ$#CVwf7D=1ifV#LTKE*UIBd zj_;JafqU?@q6*2$;<^IFoS z#eob421u`F&o9VSh>m_{rytz!i|tADLeuqBSly9 zGYW$rPK;T_7?{OPbTy<#_`EGEL~#-;oRb#YVY%to6Q7ZQj}W*dFs9I~Qq7o*|TZG(GCou~3+{ z@zNi=!gcpxog!jI;7|1>e8#6_1bsqnrYh^fe{>WQLO-h3+SKG!XB7{z@ljMmUiM$a zm$RKp?%^?S5J&)Z{dgbp2iOi4OMdhR|1wd@<;t8Z^DRhBp@ZS?!hvd_z4PY0M{51y z<{pb_mGzGe8-4ajfs#F+lzAT>;*2TJQw?sBv6b{RT8=hr;lFDXG-Q(VSM2Re_s*~` z)7IXl*XZgHGR7fs5+ZeWLsL+ffrm25T4+cIs}i^M4}wuro%IXPZI5`vOFm1n?gM76 z($LvPZ+Z5wMjSt6gP0&`l8`NpW)6d+!M~ne`>44;)42AXK9k_6v8X6JJGClvYXac2 zcBwH!n>^bn$(eA9K6=`>hyv5;%VvWB)u^d)kvZTuv={Tvs{_)Fb=Z!#FJZg;6~FrM zV`;J1N;{?F;4Cv%%;#}Ew~u&)?+vRK{%WZ__SxBbVJs@y$J!|%1UI3d);gzc(don8 zmu3y78JmIucop&?WVRhr-6bjT8Xz$P{JArr%X`PrwgSo%FfJ1(tbI;JRhB=TB6rC+aZr!BypUJeQcUTj5Lhs95h-e-L|z2 z+MDqg#1b#C{;dkq>MEzU*Z$iCGv_J+W{lI73sEB}%v-xk)BSFF5iwExQ{Ri%%g(s7 zaM|JMI=R8X*HIi#FWlt$DS;L@WRA4<~utM?cCKN>dXZUj3 zCabNKGp5|3KcmZ-r8QEBmb~n}6AU+GPqX6l1ZR322RS}Dn~fS(Z^=*lkF6^d#iMh{ zqAZMV&Mf|?NfVureah};LBN?IUZc3-ggCx8_Nx3GIrcequGBn4YvGyw|5<>QqwvZw z$28*KWztn(+X|hqZcat9o4@c^@u(-k7YT=UdO;{a^0ugSC zM4s>Q;+NuDbqFGI&_T=_wVWpJ!d_2V2GfiR<#pocYydo)%h~iCGWOV(f7UP`ID+xh@Uqu(qvdMN zqml)W_VwNtO7^Cty`75R-{yxOw0M|;`}W$-STVRvoyt2<-Kwa?GciXh3EC(^y=dkF zXR@)tQ2rW#+~FhAc9!CRb;yrri632BK=QT0cM=K$JZX4(ZdTVMb1Iin)%rZMcn;_} zIQ4ixFV&nTy?Fouv1ZV$z%G{cf50eoSg&5>tp!* z+-NGfVa*YB%gpDUpdjIk`rGZXiaU+w0rxY^`O*1I0yQqHwH9tlKm}anG`jeBAos*H zrOnBl^}rY;s;04+YfI3L-}gA~yJu^Hi9!)7Ei<0Q)VTWeR7Vq6AvM+pw-22%I7bBn z(Q)JRm{OS+Yj1sUENAH*3-c3T+C0X4h`j5X04w6_KL#5^2!1D70u+esw3-MvUoa|f zaXcFFlrN!hS%S;M)ZMW-o4oGA7HJ$*pd+mqy~a*%y*s%*arJE$0xadt=MPz|&u%Wu zG3T|#XmC}gSM`S@OyMkA=9Q8>@O}ICw2r5SGw^O1b!N*W+cpfq)6bIwTiG8bnJt0hRSzT#-R>J%>tRCSq2gv#=~Y;Az==PYC*X>%0j!8{P|>6 z&(h&cgAh}P7Pa!iNfQU?!}uP}Jm0pSl{V$H_W4dd^|Tq2W9F6?fc`i;48bM)@AE(H zDAG2l|B?#i1W0|UT7XYwyE65P6L#Cuqn{|QjOrlXzSQDz2fMF$Q;TwOU`Eho!X!;DxKi>6;zM)?VfKoP zIx`EfanY&F#w7yULPL1EFv{yc;pDXXCq62F`BM-R0OvjYBMSR|v%6e8oT@i+HdmS$ ze=ra)G>pU+cxJs^#n-XWdtvft&-S#e=xE0O07Ur_$!sTW*j&PKv zzTV6$ZIiSwkp`ljd);ZQS{`zA-qqo1-<~$wy%Muta127Mzp8zch@)iWy)+(qTB@WZ z_9FZ>^^W_m(?BTGjKi-5hA5SxNx#{81G@=|Z@y?hA~0ZQh@}Id_`V18d>b=jq~kE3 zUvkBr7Pi*zw97m;B$W{$lPl=giIps*s#Tc4qB0?N4NdAl^`38!B3GUCsQwWRsCD+glU~PFLTIt?*OOczgA3q z-^ZO5*tmFtP?gCGP-F*Jd9#AXrnczf%~Za?RtM0fuLr*mI6+erV8|?RkGM0SzlSa! z)Z6ZDr6}w;??kF--3v2iPlt4hcdi!qgIfev=_3=k_4-I+%`^n%#ULg;p?*F%Wz?Bd zAVhz*eEgEOWu1Lvy@zB%Ut zzQt%}olB&>p9V4hXN{p;r;I*mH|~leH&_?3bzL?_+RvR@70O!&?s+8T{;whkB;?h2kC;^+S!&DoQ zBcp%2O1qB?pUXWE#nbuiAkAvQ$I<9{&J!f5a5)!q)Gk{_0g%d^2#y*EaeL#-H*Y<> z&om?uzf7z-XS`g&&Aa(R)w zv}BC_$_{~Gle=W^4fc*cVb6DEm#=7VZ;$f_jyhC%hrWg&6XPnQByQ+jEau~^ZTGvR zG+U^iPJ9;U|HmG|henDg&%63`B!4HSpw7{o7y$q=Nz%mX|)P5Bv7Kgz)7G;}(X3 zbDLBaX3qYz*z;!*L1u9T%wTzOX+e6i%plw!&g*r}h_ zj-GdyHl+@@OCx$UT9zZF)LFMWk7UFFhKd$IGe4%|Lq(Frk$7!wOzl){BYZhOtQLpf zG*`^E*H57Wp&Wfa`aDe0gUfZ)$D50OU3^>k@c;>Z0y;erC3Le=1V4{GoL&VTTiC33iv38_3c3c zF5{ig)aNi&=HqWGE9o=q@jE*^xw%Aamc{XzOI>rGR}a;BL5Qj$+j=TEwrpBxM~j!| z!QX?0rCY!Hxjt0AZn~@yezCv*wF4=Yy-tDYdBk1RS0+z)L4LJcOWoklI?#3T8P1F8 zW%9ye*@n-Wsn3#--mvFV%E68Pvb3bGPUINIO9R5dNTP}sk3bP`Md7n7B$!rr77iSh zh9Am3J9gxSe>Dcgui$OwM+~|$B>0V~2=JN>q)ew*F`CQp?ehjiTqip8PUgz#h+(=X z8_g_2&NUwO>1M#Z0A~FMuru|;YUg{mmYgr{&J@*K_2J#U`hm>v7N)R zUr$mbX_P5<3O1US=o!E@LOy)Sk{9y8QmkJp|1EPQc5ek|wVtv*=x}0%SuV}meTkWE znJ3no9NYo3bQOBP;Z$qw^*aJtOo@xJsaM}at@Q)<{n^^|F?d8h^irxg3Hdsg z)%9^xcb2ysQ+Prjn5Lb;m(8FS`avUNR@(1X1@;@yo>8QEp_Yf>HnIWX{M@b7aAb1K zTuT=EwU1a)s8Vpn6L;Zfo6Z=&O5P`?r~<1N4-#?tkFn-s?>K*zBeO*NE^BQz?#Go< z9h=xim`EcXH)wwF79DY6X6md2>pVZUd=2tNjUB?8ElWU7XHt z|5v?j=cO3Pz6{PrX7i1skb1ROr8r%LuqpcPsqKYuq;etcz-?yno3(|(q>rCPHsKxjYUX!>SoR%1;ScO(_FR6V(q*?DxdS(CvP(wUADaR5Y>x| zeNT{~#Q*HpXInAfL~_jghSTb@8uD0L$?b#i=5GIuZYTPV6AtbG=2Iu*MsKlqwmJAg zh8e`yA}wBa7V%<*L3G#)gN(HcPdWf-fk)N%jV+vWbQ((7xSS2AP4^>woyC$3@GSf$ zIm7BKPTo!k#DpJX>i3Z~Ts6C?a&=YUH&;u;b8f~`#U++cykECbzm z-uZ>ojg`!I;J+MlaO`iHc5QKRAo$Zaf-8}2EA9;61TI0BG_}|1K4&LDb>*wuub%p2 z&*8BdPF5QS(%XtJ5Eb-l=}=X4usA226R!)E>p0{|NOT(02EJ76RCk8Eoq!H2`wL{3 z2_p)M@urSI*zOviiY~xo#1&I<(kuS4-&1=>k=`M{?GOnNTorEdAMKpdDRlDmA%#7)~s zZH5q6l7^L}wL-qkmFXW9rPhnp!<~X~RCP2zO3WG$$NEjSD1@=4IyjC^!8aNxHKD5E z?w)%(`%gm!Hg-tc`m2nm$%wU9ks^iMZ2>iPd6Ug@kRoWwSAdY~0|o;54CW%X?)63u zCPQ(&hT&mH=e5&L`n$HF4{&U#DjJwwc;xYc}0 z#Zm2zR`S>B4Kvc88x79%t|#(HQeQ$16x`{OzWtDP5H%fl3#L~=XOc@!AKHP1cX+T@ zl7kcqM#Kx%`$SiElI?CSaF{IPadgqrK51Z1UusH2!}dix_a4+pVQMC{Fd;T>Y;3D- zXpNc9%+rmQKyUGU<;4X+rozr!TWDpBZgzdn7~Hf^{^P-$BT7Y@c|JgAN$p$nqR3}Y z{3`w`g;JoVNJYAmd5+{JQ-cOy#5Av`NO85rSRn^qs&+U@`;kyIJ~bI4L5(7zNA%R} z=6^BwR#9*+=eu zzE3qqRgHeBRb6Y&wdOY)M3zZ62J=T;td=$#P7P4nfAh^Puag&k{Bf|q?a-AgI4JyE zWwY1h&HaX&u520=j{eWKCdZwl9T!!D=Rq5^RMDq*I*@T_sVXZ4UcaHyOc`wmNUD=j zXSxhfFwi=?^Krv3sc?mh-SIef&ZyTuUx=bxV^WhurTp(`39(2Ye+AG4>XaJAFZfR! z^J6y^;NK{r)Gysci2WugStC#AsllNmbw;>}#4`xL6Fjr_l^M+|&f~LB8a^jl;|g6- zC82Ok3eu>=5c{>uye~}j7vih&)1y~fI9jh>TSfMf=xxY+H&HX z10rK!nqmT&8AnbG7x${(ssVSIeWWHa9fj%yjfKTs4Y;odVLguw%}ol)&nl8kifT^l zyYAh}Z$%m-A;1pY}&dA+?2s;!W9K%LF?HeFd<8EfDlFo$(6w zb@aL@x{JPNKnl9wGa$OFynbsEmkR@UAF6a@OR&u>FxHk16${J+4MZc&_Y5kN=Gb2t z6=Hsz_G1OV$cjP?#@SaJZl2)AX_zZTP7D`n!3WWB(q1XGVI}CyN&i=5XD^GVze|+} zojZGc*-TM|{kL~k{$gcya_yXc#R`%Czif3CfRmaWf6a5708n}Qu-3kW9{#_;M6aKW zzq6$`s}B+rBE|VO#$_jBnC)PWgxO!g!TYUM^3gHWJK0z0I$WpVYuS?d3e}%p<$?{L@DE*Ywx^xNMLc!p!!-n7D;#t(z+c^FWKI&-% zeJ9A*h=r2&9mxEjl%l80fRuMLcz~E%>BB+lq{SIiaj&%-BP}eGmpgt%zU2pc^FZ7K=&bF9+sx`A zuJ%yIC^lp}UdqPfp_UjHhoG3N7mZC!JEh)N2C6Tm_g2I1j1r+>DzMW&q&Z6($;plV zxLbl%6)@ZpXlG*RSEeiT)`^r<7R?XtjKSEC>+Amh7iI`zN-G^d@%vOL`6-U<$QpO) z_!r8gBO|kvAXX8qUM%lfbQm@rPZIIMb*(LI9`7=PCw?i0_mTMTg%5O~i%CrYKRO`| zm$RZbd-2vu9_HPikpVdQs#Ml-HUOTcY- zO)!3)L+!abc699CaeByYa!(6Px$GhI4z%|{h_uvZI$+ILa=PzU#othxB6!i18X&2U1obbsQ2TVy(LX(V_HNB^eEy-)hVQH0+K zRsMfLkQ9pi{)Ql>x{$uX{7(o{s^)V;j_2MBC{v50VNn5m-ltCJZ~ZYmgDG@2LuFk` zH5yE*_}F28BETXr@xkW*8-2tXg%#F|)Yig%bNX&AlfHpis6)=-Z}0GtsbPIZLEw*; zFI3GlrjyZiWr)4@3%cJFp%zA0CEezLz0C9-Ctyas>|Q?|uIvKvU&YBxW}f)?_-75A z_dd9C5-PMt+n49o??vh^uuTL5!27p>`4YnIiR^2i{RJOG@0^d0gi95QbTqyJg%#^% zi$s?bnZI8O8A@%P^8ZS}NakJM%Hnd~o=Szb^Sqm2&$ztQziOjgKmG!Y1zh~9B(Y5n z6fVPE2Tj|z788<-JXe3se^dOfe)$ix*|7*5?SxcUrcx4db93VEbT*SsPX2QCtbdO2 zNdCS4ii5O7<1tTxx^FJQnfh;687&%{#2fG3GWs^lDc4%7rel9B?)Luqo8L;qecq5n z{SU(!(Xs7cyVygh1FZhFo&P-}{U6bZ|K!z2R@7%;XO#MlJzu5?9w1<5e8V=X={QoZ zWfail4A2A1abv1~_q0gsdgT24Z+ER5v?#|tk{sLNcC}~CuRSi(>$T=7#FKQtb9rpl zxgUx|$b0wRQhQa{(R$k8wVXJXW(1eq%6$IvGw5mwGuo)4vX*k6sFgwNZ{=WjF|roKj2pMLc@$_NN9T_eKymT#f2q3n{6I@+ zYBb4+DIea`yTD7w9x;iX>h!?dsK^ek{tTTqLG=`6{qF>dN4u4)2L9P1U+Lrcilx-Z z@Cd`ftk0lV7S-8EgViePr-O%?LRnodlcO=6lil4;0uSUrX)JeJEe#V{h3ou#9*2kF zrAe6whZvmB#|=jNexcQS(80$>m=ZD~h)Vhsa=II|!vAL%G@%F=| zd>f7ds+VOgi?!`P^W`(vYb%G_+DzpgaXOrp1uX-KI5U_FjumC}R~er$gBgD8KK|@o za8WvIEj(^{-;Q|VSL%|nX&<88KFP6r>1yU&j>9?ttX}R`^!>c}+y`yr$67x#nj7bVw#}HW36iEoN=7eToQm0@mOTD9TE+=1Ai`9{Le8 z%B}N=*Qxt!z7}~B3Xy;cbqK=)N)b9-omRmoD+)f2ia`nSuZa@F-s8Xivdq`^>fAwb zJ=vIxRmsK0B4jzo*wk0mjJQsb@j(WQP*9$j!nE}C-}VsB|F|5^bD6YtK^9*N3;qSV z|NeaUSHgzn0Tg0^#lclrjOgT4OQh350o5oKNrN87K89OU#yzgzSm{N#dg8x@Nr&6V z=k`aTq^{2Gut^kwUAN#tq|Ed);>+gye{yL;sEESrVwa2Z;q61xN;`dBLN2B6nNKOZ08Ts#c8jo^{tPD5bWLdY;vwM_q*-yt@ovt^) z@S{g#{oL0`3+hMaQ>FTfR7;zs^5>b0OjmoNUZ>w? z#|(9CoXg7FoK)<)Eqi?v4V>tLP*aVY(k*5tmIjtNmh+xy(+UC&o1#J!2(i$xRV*jV zk*~&v0w~W?8?5w4R>+u%%^W8Z4I>R+(K(|WIPo!$O9>MMpLaUdQqxli(qd4v;!=|{ zAHe!*-o%}Z{J{ZUN4e1<`tjzmw6f)+&%IeprI$cbQg6|J`ry=#7rnJITWnxdoZuc) zudRTE^ms$`1WtmY-JL!uinN~J22xEj+5JDD>$DIZI$_gB{4%M; z28@}>)5d)1DKonK+2fL2EmmG#R*ysCFix>}Tzm^qFonnx&?Ua-IxN!al>LgcEZ+4M zGx^F9Y*btH+oU0q(#>%`X;8rWW~ybwhb>AJgNlvvD&tRJUfwT{2_t`owV$h>2R=kX zM;ejO$2NZP^=rm7-L`TE)v)H~h3I4cCtg3nGopkR&|06lq2w@vtHUb&8t4~qwEmkV z+R!ju1eN<_r!q~MipY0WzgX!I4k|;NHRZ=laGbXbWI&X6;JTzA4cm9n7xhx94)Ibo z6rpdVEJa^atB}J~0c;Up494O#q|4%tXPr)F%I#*xGqhD05)}%yM=&LPE$daAF<*&4 zHgV+(8O+wI^T5yVBU0|vco$Be15A%oe`*D9GAX_ey5Fo_escw=YOUi>v)h`+Z^nc2KE*jh2gNKrm*)AGv25;g1gTiRge(P zfNRTktTMC--y4*^ZNvw~4;b_eQHDQkzVCL~!NAmya<#HCG`D$n@M_?kTpp+vULHoj zP<_rSeY1b>0f?+#!{@F7e$hqgiVxi!#_d z%`{bpjQbCoReNtnzV+V=3^%3Ep#OwcxkKyyza&=l+)lk>XY}+lm`-l02=3RXB zlkZ~yx!AmCc2HFdawjZ_U-IDlEzdUDEk=tr=}RFcvI&E@PQ1l~IwDQ6*%us|2QKP8 zS&*f!Kg@-(X%}sn6)QbGyn*3A%MOhOQ6J2g97;_vRi^#BK)_<9E^IYjuCS~4s`S1$ zz^p~$A*E%LA`K~u@*Mq2DAoX*6rj9H3i=K2w;ffFC} zC^NW#O?6Y~ffILP5-G|Up`n}^Aor`+ogbkv>yGcQ-d`-*2VjWE-)3CCQuC*;L?gPId7IuE~vWX>=_g?@nF)b7q|h`7T{k zDR+AjZS*sWza*VtS6#_h@L9Ir+@yDYA|Q-k;MP=`50(tY|3Pg?8;29s$jNdbJ0^N( zuw$Heu#tjAe2%Uz&o{3k&5F+7a{H$kc+$wmf%jCn#&rctIJMLH6OSQoT|%{xR5X~O z_0eqoV@s(hQPfy! zGVTG0mBp?OZ=u7;GDYUquH#YP!{q~(=q(Jy^Vn^*V=hT@h(GoZ7c9cBCN$L9B+i*` z^*K4dIYkG>3)l;*?i84YSR@kk%WQ8PEgy3Z4&B#^eZ1GB>Cf9z+*o*S(m3i|uZ);d z3`4En4y7HZl9;Uj9EwrDGd(S&2)A?HrQX3lNFG;CO2FOmhaRltZ zQ9LT^uoj#Jh`6BZNH^aZAAEyZ+uFHAe()9eHcj#zFr&{}ZlDQTk~vYPoiQ?vUIdU?5tz zI`s%GyOG?-(}?!bEU|r-5Egya^o^;mAhUQwm8B3uI~ThD8DqR&K222=z!p`ftE@Nu za!{=M29xYjgI-VTT-(12bm;XmhYY;{t?hQ~o(p1FdR^lg098lA~* zVkNYh@REUC$uj#57VxG-<|f+MpdJnH#z{rh)EjPx!op;#X|h_{x zQ7;;|aCevO8l&wB`#{=&2m2 zj7XH>oGDw{{VuKGeJK%oefpTI{LxaTc9f5nxJ0Ev^FZ19@hdXeg!<2TGljm|gpzCq z$KYy`$(PlZy{+4M%dNLm#@3-}Kf+y`^%0>_DOKylPn zG;vnVBYh8bS2`ZQAsAhCKK}Ooy%<4RaP5ulkCE_H8{p63F!H5dOLmb$R1}W}oviFKfHyh@G`~n=(1RrNAEet|YxJ)P7{bb*mKNh& z$mDlj5*zvcxOazW(fYenVEg1AWFqZRM+%K0Tr=V>)b;=R4SjdJ-sd#dOdW1<4-Tz+ zOH-XTi&15v%V{cuO>Nx_%pK}V(`Wb21x>JHLdRO(PXd1XnX!?oP0S zbUgZx0ACpxlwDqhllrN-;1EKG^#wR7;s$q7@$Jab#N61@Yi}mJfvL~lCbJ>LH?0M) zO-|!CeVO5oGwW;k4Pm1xsxIeibFpqD%!k?cdzjIo;&-R|7d9iKi;@$oHdDQvR)b19jgAtP3v1bL*VfwgRw=;xJ|F3V6yKhm z%Pf2yR1bau6T$EtlWPh8$r!g5r?!XJ6eiP!-_c1zJZPQ>h z=A5RJsl4O&puV}J=g%M4m}WF6TNQL$PQ5jU((+C!-Fp9hIIGtXQfhS@?{(CpN7)!fKxB-F^yJ1iA9bofABI=Qw~j)JVe1j@9Bm#T|oV8MEgZicS{6v zv-=Xi8)ZcaLF-P_$tA@}QsB8Zl6<(h!GLEbX&ob$0uK3*@fYAOuC8iZi}%(a(&FrP ze~Ca>S~5lRA~Yj796s%Pb|;DKs?c(3Zu8^zSbE``im`FaZoW%SY2C8w`eY?fcAM{B z@yY?G6CE*m#*?zshHl+LD~+`ceSX_~I)#5XgAQW1TLx+Md1~P!V!!XIHo7ZEUb)TK7&?UM#S<#D~ixqlye6f-epE zU>FL-MonG!a1$%Qk5jsyuGuk))*d;^nm0rO`OLH< z$dX?_@N+8m?CEBT0(vtgmp-b2AZbkCdylT;>9r`@zr{c?FLeoBtcb|^aX}ciYb)SM-$w4#-wSoo#S`itp z=-HTa@VBhz1gNdt4c=4K9F%)nqv$T_8mKxxyJa5z{)v6kI-rlHRyjyGEPh`R9E??T zG~*O_0RX6ZP7X_(h~qPI9v9o!BcA4^#6XS|UN@O0KRi3!3RlfgJX;}--8Vm>P?6jz zM%eD&K?RpWX(kWLaQS*3Cl%Z}34dgDZ(n8t9#JKC7Mhq6bQPc-V=A(feph~>_BF2_DDj7wy7BS4j8Tt@^4)*Vq1_r(Zhv%b1hyB zX11hPi{kJX-*Sj5alaV1UkB8E7)ex0(BZlmT+B^ZDN!+3kNOR5Dk{u`_eJLOT-^6I zKpNiCa{0mON-iW%Wv0`p+mXA}ktIfU-hA>_x%VwTGE5I0N0Ff1Dkj!>xYx@{;y~uK z?kJxpX{n2HcvG|DiWzGqBkH>Rz^-PrL!iBrFO9A$!@%7bKN3mGl5?=ea-1qP8#6{V zi=n`<>er}1p6PMSiA(6cy=s+`l3e&?3fILR;BSD){v}8b zk#^MZSh0+#{%WF*q76Xw(gfvDMB}}$me}bC4%oC@s~KQ&JtxFm1gA{)z}YMf?@)py zyHp(j;MwZ=R$#Q-aOcERog}nu4=LA9A5`;MX=r-^bQ2k-+hq74R~^%?BFu{Wjhj(6 zsef(A^_=iXi$b4`)6~3k7k6VW@jKwu`V)XHyiaLZb+E1hIMjW-x^*ugO8{4YUaz6gIU0`HqJp>Zv^3`-r z{nzZm34@vgx11Q|34$U?$l$2589;Oz_q_EjzoXHbLf=O45KaB)F(nmBHn=Ozmtl&I zlz#o|o#06&Y8%z=H7%VUoGV@G?EMUlb=PJfw2f0R6bvO5e!1BA08FU`nVXG6`dDUW zPyAu{ovKwR4eMK7IsTSjtS-XBjy^n| z4648$5m3w=&D_8BHbf9;l+qCuE*NnylKB02Xy$oAwYNcZV05YA8r`ryzxNnO zV(-QS9ps>35SPSEhm;lbKq1laao&z&I2u)~b=R4H1LT>Bsa)zlR7$~vzKXf8*SXMR zeo081hub#04efZE@4V;^)@9g1yWyTar1ob2y16(zRlXa3$3yEaXf?ugd=3q4yi49_ zVlBr|Geo~jnmxqu*=IFiZ*Pw+ZgKFjRs|W0PSJ2MNLst^&l;iH4On(SW-1Z}6*&ht z&vOv-cG#!0m7-xT-!bO zttWAy%$WCr5$%v@qkBHD<4uCc#BI0|47@| zbRVu+Y)cUGrEn`}RT-}a5IrBY0h7G(BNW-^U{w49)r`4YX`K=5?i>Fu<(OlFBBUn< zGVmkY!TihHcoe*7e0WV@d}Z=+5TWY6>9DPcBOwzId@`7vt*Y3jcxDls-6K|ur1x7P z4i3;XvK!bmq2HnHVb@}VW9{)vExUhmYps_ArGu1BT0jR*PQCc*5#3)UL!V8~rDC#? zO?&_`t>a~-J$bGaYixO8;!)+&C?zrwMUO@f*X6zq&kN6IrEi3E1@JS_c|~UY%rq=| zskjb>0X({LXWeU+S1{gqr8S6zKmmK#$3X-==hXojZ-LbV9pz|y;;=ROCj}<@7_gj| zJYD0Jv|D~1=JMFft#*vloUkci?$NB`WXyy^o#1}8iAF{e&T*xVqnV_9wvDj59&D>T z*XbJ^oPYIJR^i=#1?E$1)DA&^?J-L$?c$X(0Qd2Y{hCRJid+}1sPi&nH# zzpqaO5$%@aZYmybUx+^)Z`>fN(K8V~uJ&Z5q;as@M{1Szrzw9Qz?`E_Od8w?X3%Si zeN3L%{S}qLY5P9UCroOw(kaUR;AH+$s@e9`Q2CAmtB_-5dFS3gD$82qo>M(S+Up@V z^O8!TSQa_|>&oNvN{V)qeMs&uf;c=L`>~Z@?RJK`R6aD7YGIlh(4wTx6T+KnO8YLe z-5n2QFxRw>evG#ff4qhR*g(jgt5V7j2tC>u!zbc?axuqQD8|seCX!ld{%A;f50&2J z?6DhVOf4FxLk~lgwMF-r_seX%g-IDcgwN4g;e6wBys)2yDL{8|@KJVq%_rhe8)jI{cye`WF#GEeTK)ZoMz%r|=nuQ|Zz6CYmf17SS7(3y{uvMs-Yt==q(>0P zFZp)cPcv%{(yaClNRMT?35$1Ls!;bI%0K55CJ`z!#epCA$n^GHn=A*NZU~^465Kmr z?wvM1uCG##pYwQ8btv>2GlEeW+D5_C{lVkxn0xJ~X)acmJ!=;bRcOzKaJ^fjC%kpH z1?$nVutfPwn%da5BjYVD!#{aQ77?>$!~pzFlqM)YYkZe`dwuC4J2*W*$+Xp~DLKmC z3v*_sVt+oN^|=s4?UjRofcP%J>72OxWc2|8!Wa0V3hn*WB=Ub=@jkm{dp`r=30ceY zeh0+M_mfZWhwG33{l+i<=fx^+{w~k}+L{@>xA!~AN7h-+RIXhId^nddvAw9NxsaO1 zgnco~4AGJ2nf>iW*GA8Pm_+(z=VK_gOi)vm9h5eW@GHmb;DbxH2NrLy+y#82Cy&!| zEDHk*vt;WFW5{&JN~i@Z8HvJ87zVVfldXNx_asONZ>akXPSfLd%VOkrCKAQkpumlC zfa{fd@tkRY(AaSkw3}0&^qa#4y(=GWN*lTleMXx|(u=^=MrZ0rWVpl83A4A9kyt#J zwy|*o=9Gf|AYS_5A!FEkUg3}4Lq7dM&|=WfNx&L!{i@gL)2HiB2;VHisHE-0@}^{a z`D~R<_WY`B2yyw=e4pABywCUVZ_iw64_5grVf=5U;)BgM2NOMRag`7gJTHl{OB z+~;xrfKR8nEa$N`h2vd5domf}0(QCLWpppN`7|qEW?RQL7(3j>_@#kUqWY)Z*U++i z>uN;sPqQM^mlfnqbJp0*tfM`%j@RR9j)&{bEtU_NFmT*g@oujamdmj-w3tri6ghXm zn&6u>jQNVX;54QD>DPrDn2Q{Pnq=2_?Y85MmR87Sbl(bv;IGZdcwDt+!h(U>j#KK2 zK4VCJC7$N4lfECkU=T8wCvtC#J~m%!hjY&o`6wlcaj74Jz_9S}Ow7d*4(_LB-cB?P zl!ay{+Z8LrZMQ@{kDFtjjzmBsKR>C+hRbLU2hRhm&TW3zTl?+TZO18}a)bf7`t5$4 z42n#9fC_ATuG7U|nbBPi#WhdwYFYq;QoyR=M%Jo;Q*yS=d!#FWFnSWn3jXU1o$2uT#r66^< zxwPh#FVNR=xz^MhUbAedaJfrYAm#*EbS&AW-L`VKky%~bS4pc`1`F9qzkcI}P*%OX zkZ*D$r+40+dw#Z){lij0xoN=H66urV1_vTI*mt2yI%05sFM>@*>3A6LwrG##a<6Ux zevh_JawxJ9i07l6*c4X8jAtVKBR|7k?wp93K(i2Z?|eKxD@?EcYpwiZZ@`eb4|VZ% zCh33#q8$>83C$?6k3uihR;P(1kovvWeY9yZH~4J<9Pg~>`Sg7MD1A5^mW16T6p*aF z#j#BwWYt|B4@Sc}_x`EiR}r10e-8&JBGKtx#A-3r73$9V436g@ln>ANLzBh4zpxZ& z?Rc17hS$5++-z^6V=%6N2y3nT)a7kD5EyY?qaBZAb$11(UXrT`7r)*cmTOIMIpjnw z-2ZeBb$cDX;w`*9!SI!a^1MGF*cA`B+DSLMUZdpJVy}i72>_)EkVtfHD}fB9y3(3H zB)Kr{dYj4->RzwEqf~h+#N8&uSmH?VKX+e$meeA`UfWb!57)hAUtio?iE{>Fd5jw} zEa55kjC8rK!e<9(_n=L|!?gFnAHqv_Q>S^F$$SxtYi-(Tm;{kF%;{hdXBM9>vTlmD z;|TsLk0GRq)Be)BN7~)uh>x<8e>B&ZS>t46$EtbP`kOzgk(!cDaeP&MqIvG+#qHK$ zF8_fr?fBG1-?F0($<21UPBg<5SLC!Je$rE2TW5dN)S2Fc*bMdTFKOu{j0C z$f1QtiU36-v^4$kXv>WRS2jT@IiT^=Ga0CVQ)sUz4yhqKbTqZ!wRUP){&VGXdgmw` z!(!kaILbDU_~39L;1sJualTffm{orIODexSX6VNbMp%IeFlNx0vy6sTvTVLm^G_X% z_>3DwdmeEYw`9pDiP0^tQey_7nEUvTga!6Rj4UdBz_^@6@~ksI*DIiNH#Aa{K!*B+ z!PQz`!!&kr7uL`Lb8$&ZS#je+=^2hsW0O1HjWX7zyPkvmy_t?9c4vQo`E;$u_7`5m zE>%;~gKRf{m}kQ8V@mP@^^B0^O=0hFEw142gXxvSbX8e6sZ11cY<(QLZ)rcf#t}+Y z##-LN24+hrP2yVQY|Gkq+SaWpZ)+j8G9)m|*~;P#4QCq_r4N)YmleMnGlqES%^vO< zjXn@HusQ8ov3tz;p$(ZaTs7(FN=n{0Y8ERY-yW_k^+eJ?R*=~Q9A}`j8M2o~#27r_ zRuHYu70ton%!%mKZ=$oX(X(2)y4!4K?vn+J5Y z8s$b+0`7lzIJgV{;cygp7KZDL|#Uxc`^JO!Y zjVPZBP1e(MJ-~KOE<_CJr6vq=bWSeI(Fv5ay?CK*Wo#LsZgObe^3cxTjxEZ;U0?0t ze>y_@R{Z!cOM=19SrW2Maod{3bPE4C#-uTZv2x2Hg*Nj;wCw2@goua>BH>d>ssiQh zc{NzRmHRL=JSJ9J-rLdDoz+GiagELui8`LQUOzN5$_WI$_RHI=1)Lsr+UXnLCd6f- z5;>~HKm>mY;lZWuk{$1$F)~U2U80SE8v2AeWI}v5`rqP?FP%32eKXd3U8H}TP|3>2 zAlP(`Y!Uxuu6yk?Y#dA&If8#!A0*i0qQM$SU z2fq`iH31Gw5~kGQhrWsnk@@%>3JS-`pw%=i0*ermB5QO4Ya91pkz`^;#GD>0g_f4Z z7h&1p@oP3mx1R%e-14+IHvUrGzX8#})oc&p)cx~X6m@bESOC+I@e+5P3Nw?g*-hn2 znU`r>6`q#v@(1EvB($GH9or)DYul(%e}n)>D&;l{k;)Y@j~n>W4{eM=Bw zJ)h3^cATi2Mu`HLU(_u5^5}t?G1`Bn~K_*W}bXc_M0TnRP8#;QTBM6ev&1f{go9+LzL_Q&ty05>k z*AzAr6SMJpiYc4I{*~c4(q>`oSSXF{fax3W{V)HeGud?=xM*w(t*Ui>EHg7+pG1cI z94ngwnb-I_9zLCt%>}pTiZpq>4g(`v%-7D-;XJgYpN5~$MDElfZ6by-hB0q^QoLa9 zag0gX>Q*oRDbD7s)7Uaqa8Xkmh8Z01fyChtpB8N-XOHOTg2WIwwSM;=XW2Bwq})W6 z37l}XH zEou3DpjRc(lnIi`U-P{G6gs#y_N*#4zx(TnQ~2(VctwScabwfq@Yx4G^ZeNvt6bOW zXl-ZfI>;jpUw^VnWaP4AcUy;v{$}^d2vm{JT;;;xntvDB{?<0S(pnX3ISXK0ONZpH zFH);&6`>ID1TRI-4tUZRI-d0UDd($QHLjR!3n3yFsX;=lkF8?VVQQ~R!{*hzwPzU% zTmi$^n(waXmP5W1vXwen>~-zhX12Mt+)U!+YuzYHtH1#F?k5*Jghx8%$_{eg6t?OK zWG2q^*fKI~I}1l%J2oChw!xhENEvVCQRTQCKD*92+hN7JBU7RR-_I;1=bU9Nr?~jO z;A7TE_B=YCQJN0!YbRstw%sX|P37hBwYl=#tVFf|Ypz`JZz(@g+SoDUL`->k@i&XW zbqa`6vspO=KhE6x!Q-|w<-2&Hq52ZeQgdbd@z;2g2nkY}iJ7&*Me*|D2Z)YOo}Zq% zX|!o$ryr0vT>*w1!HzB2zN#?Zgy{N?TnHCiYrh^y8vf+|7tCdQ6cDURx6c!T78Yy;k^Z#~^ zS4daD%Z*R;g;Q2)|2oLh;pD3DqM}S+H`Gz<$M@$=amTaeRdU#z{h&gweU2@~?dN$P z-t{fdVmDzkDbCi{yUI<{py1$+YvNQ?3z|brR5zrkb5&2iMDs9N`!)%JmEP z-6{3Po9n0!DLgMA{dNDU%%87(|0SL3(oC^KZ~sU8e|&e*`olf+L3I}bJv@&Jjj8(~EER`xH2E0!sn6WrUk zZJPV>v?AR*p`78A@Gb3)!gim>*`H?7332B_zFGw#Zp?-+?5Y_Wx&ythOda&oC+E)b zgGMaoZz#9qR~$-#CwPFr}4!w_~b7#I)IcWWSpy;F5p z0^?62MIY{IK*;flepKT%(l$6evRwX%G_EDN0F`Te@=1W|*!X5C8NbO+V zH~_b*@Y>odH{ETm*2HYenDXDSYFo^>RK|U9%Jo5O#R9iQK8ljYE@|*tsY2~kXB?KE z{##-y$flv8*|-Kl1)SNXZ(Su&OKVh`4N035Ph@V7(c?IQgW0>TaicxtK2~Fl%*@@N zkGm~Vg0t#BXHb$2UBw?O_n2#b-Pz>AkQau5dy@3ltp!3Qr@4a$a$V&YPSw zmt9_rR(c*Hjo7X5^>`@**!8AwC73$Ba5p6L{q+we`y4iUxJ-lL!5|jafpuJ>;S~V; zZKrQ!g+!cIDsHP*P0{%okEgEw6Y?He5M_Jzxn~@26uL!f?7$h_t;%a1Qg)Kl$6OdI zPrs)>zZ~){Ci}7V3-MJj%Nmr;C}7&3EN@30T-&keGjI&|+DIIa zZ<-xfA$+TI{tU=bh&N>N+o0_$K4#G8*ej{ zO__XA8WOp`|3G=~8C6cUJoo~RElN73#MxHc7;J0qCQ+Gmb`(UFT)T?6j^2YtS`)?2 zQGe&2K0c~-WyxxDR2+5Wxyp^7ha+?GXJ6;hp8@pjqbz1;7r=I*AF#yPD28*zre+Eu zg&vmHEL^=qjfo~CWr*n}`xWwHza~I~eD^VIdUKr1XtpMzY!1eju^5=wvlIC_X;kBu z6czY19ER|Fmf$gI50nsn`qXpH{$zSZ>)oND2s+W)c!e|?^km`$Fd{BQB;o7~z^ctYe5ZvzUx)6ifrfNARmjteb@C?MKN`E>wiHHkH|)5{~dk)xH=tm_9|R?Dtt=SI;0> zperzX27zLD0gn%GzqN&D?MRMBSq}f=HA`8jK;9$BNTeQ;V!tjQp_8qYP@+HZj^jDK zAQX-kkQlILi&gRaqUu*`9~gVk0~WrGdhH_NEyip0x_(s6OuUV8r9PcYjc zz+Xy6$%&W4zP8SSW-3|jR0%B`DFJUhm49fdoGLS(CVVdsLzf6jUTx}YR`P7P%VpSp zvIK2SWwzGQ3+W!+f)fVO$FDW(7Y6<=d=rak{Tr8Y`YGSoD4j^B3CIUkIHR^8@dvbL zzZXS&usr9h<^L882)?;I@*k(gum5pYO~xDMX}qUOklm|0(5Pc`)Xqg&Bmw9!pU%6S zIB=MS@MR8MY->@MHKR-jsZd~x)=Qvvbv)cUGJllYoLsFb z`w*U6GTU2I<}uN=3ZGXENnBW}E`6kgC)8F;-n4iWBk3T#tk$LjfWx7!|E1pH(NMry ziAc-DR8|zaX+}dJJzs(M(_(#Pm0O=oX+Z@z-Kn@cH9ynV9LY>txD8yb3s5=4VqPNI z6#>X4s$N}`@)R5db#IxD8@I4J*VZ4fdTu^Lm9ImT-tz29WaBo`_uB@g%>%B9xfr42G&T`jBDFGlM_tT$xWDUQ(VI_WnBm@U7$woCFS$GeKia=UM$w2ggnd)YfQAEq}39Zr^6 z^hV(H&R8BQ+4RP>p>b<2vmfea#J@a~GZt3v>GlVO>c1b<4IoumR z?@cS0DyMyIH6)rziGHp@{NS4U z-8SG{5xVNVvy({o>b=GkoJCTv$rZn{-F!lPI^ngWb1>BdoIW3^JLk`rAUwGNU)^01 zh0ds>9xgcsFZhhZ9$>Xsw$_<64Nr#(|}USt0# za7sw|)M}OJXgJ#T9b}A&cYU7I1j?Dq?I*rZ)Ei{s4`j z;hB}K1>D+P|9B76Vx{*qwbL}mS(Wt8K2Fubl!QsyezA(#+P2eOZQEWbSCw|oC%(S$ zqP!s$AOdz2t049nb%3Wxcpee5TO*G_5eOG)wTD~b9~E`mf{xds6x|CB_iAjsihc;U z`6|%(yf*I-DF?_Kr>*ijZ}gU{GQsGtuheudw+u{yQdr!*D`|@kduhxJFK<`X?QRXX zvbbU1F8q|}-Im-INYgng~2GQIVd@%y$#vJ`(;UE9Jh zg}4lZ;yv!jY;~uCCZ(!wvT;tyx14;fiDRO?zY=xs#O)ddv&QWBw2lClkITd2Rl3kG zDe`exe2*2Ytga^^#NNft{B@Ylf4JXpC5Mqn)nL+Z>Z?43m3w8Yu$^k!qf1-vu`rE^#lcn!Suxin ztJV4v1eQB(rX5+z{J0tUS=W#l&wE|0#N}r+w(i4VCU0v~-GZPtxATVi0Nb1$V}?76 z!m>Ba^-=h@u9|CdNoU|KxS=P$VS_?4Gfjnb%XX>yRy5v)fyq(Dwqq(7HP~@7isWX) zIjMZx&ak=R2{F)l5S3dc+jP58a3secCR}nlS5r9sbme;6j_ypy#8U}c4&A9FGD(vz zF))Zsf2G;SQ}5XBeBYrA88aor8uQ`TNTFInYF6Q6sO%GayBoVoU=y^$E= z0)DaDiAU!=ugVP)37$Cdd#73KDBOotx)`mMdIy-5p`oT6jc((b6l)$uptX~IF@>bS z#C84>nj9N|G!7Tv!zD_8|81A}1wM~b5AzQiV>rps znu<>?LM@N?oa=uw%&^j}7khOzVhll6*mB6$YT&cdt90K(PHP*}kwk%JZw?a;jml=d znXQINLLONJ^GJnK@7@%npMn@A)VcQTOIYIudzl8qUXsjDK?J3C&Nc}MH!gxp`i4|u zl{81t#htN40zKc#rOE}#DK8g_JI2KVVGvgqCzb^z0hGzO;VMtBJmf+?i|li9wnod# zfh9=ZZMN=Lx7Vu5cv~W;+|?r>peO4hb4r|43AwCRUAIpLKvi*=aJBXBuQ39uM-m!) zRFU$rKf$jtzm)reUmsiiW8jv` zorv35`OW30lFiD4s}9)=f9D8h_J||po!Ym3F|H0#S8r8EhjvGm#kUvF^6M@VOBG7> z9IKf?EmdkYz)Uuw&@RBuc2-He?k)@s0$WBSOoGl2iMDgl!fdjNWtjS`XJ~VVvsAnNU;i!1J^Rd>x7GqW zyOp9eN^$%0t&iM5aFk2I-kyHb`}nY=+OATj!<=H^-pwAB`Rtz9NReS&lxG+Ucb-2B z1vQI^rc|XNTau?#tRT^5psJI|8mQ7qYFW@CXesU!k5`YG1(l{?gglqE!zcJ^m*v*1T*`4>8?P zGsy-vu6M&>=2ign%!;GKbETBB%vA1ax=(86+ZI2^Uo{mPGKDmLmrBvjw1F@kFheNz z)7+746%aiy%JG$8$(f%;^F;YtiCPq<%8N>#xo_M`B0%I6)uF-JMumaLsPk@3saWXf z(NJ%S(ju8I8 z=Vhi(`;q@;7`_u#$neLvja{ct~>->G%Z zS!b`c*V@ms_9nI_Z4En0_D{0Vwb@RE>#a(;%EOvaEHj##(hBlO?{$VDViqyp(~hNI zHS+Q~0nUnkSx?4V3uhZzb>VAmy(8_9#6#1w`VSvdP&umB>YSr2p{nC*xxA?&d!(tk z4tE~g4WImpJmxD)mzQrNi=q^Kw1v#@>6O`jrZ&4iFEco#YT#+AGyFb-QDb)>*N09t zu){$#KEFeNx-st)%*>(6Ewe=u3FQaT#u*`KAVX5huDN2@=0+PEyHC9E290le84&vL z+!@;9nvnmR!Z_P;LP{Jxt}*-!{>6z3yz2Qo+X+GnuL!U(4&sR4ng?}cIxTO4TG|lO zDQ*AwxIC$;u~_SI!N2`uvgy?r28oRECpaewV6Ir3`yM`51l2|5!t3frdA;eM{`vKA zM<2~|iFpRon-qF8v<#JbD|G5ZKaxKil>ot~viO5yqJcQ9g8aNs;$B^LXsZ6y>5ULB zs#V+36-MF8wlLqzQ?C-SQ|yz>41vHr_X&7dJl9Rb-K#EWelDQdAymN z9-BlVlOYxHk05sD!?n>VUbP#B&^dE%MyVHc-|3%K!Fk3RXZ3^5z*H}b-o}TcSy?&z z5@8eE6K!!8-_q$tsOxAM2_Y^Yk zrR7eyA~@1>9aL=wYz{XUkD3wqM>dXaHe&WwJjk)Hx-D&;osZk)o&>I*rl=SP`1=SV z_~J^2>oi6=U!;)q#WSwY>pX&Gk4$K2b&XekpA(Jo$#hP~%LRdHzK~Z;*FeT0hqUIS zAKoVw+bnG5c8kJxj|@WFqH&r8Z_k3yxA1*^g?u)=^Nja8gE#7>ni^j#r(kkv+{R12 zLRa^D>h@~uJA(8Z`S4{+57i019)`Ik!CeUcYy9`Yt^ii>bg!p1BXELj@&~-{MM3jN|6enm;Vf&eo&D^(!mf)Xt=Iyv#PCyi@AI!nUJ7vcF z9Z?qTgaL1{))&7a7(fv-=U;C`3MQ@XpPw*No|3pRiYMav^^MCEXcNmKMy76FFu1rn zsKLwFg!O1*xI)<%<~sf}?`YDjAyH&%e6b%NOhZP2nRy8RBw-!imVlK#nF*Ygn*P0z z9!S_RBE2?t;DR1wcC^~R-<+p}CK(Z{gY*4lVZKGRTwFXu0P*vO81V)OJS{kwX}((h z$#^JT*A(yi?AzKP>gbz|z}?Y*e1djGi?tA0Vsq2uGEM6rsUqg-FNv-4D(sGqW!67r%#&lo`)%o%UV>W*A<*xxx=2}iyhy<>U)4n@q8%x$o1 zD+#C^0wjTHLTWD(%J+UQHP>-ja*?a)?sell&u=jM;gI%$8I#ZUT(=L{(vzgslM8;G+P)DX}#QN%2_ zQ;|DB1EA%HZ}K#+*IwQvvZ%666n%KJ_0*Vqy;w;fWbwOU@!56`!A35zob22W&yE7* zDm+NU%MIh_JgBf;Fv|bk&Gz+*)js^(of)0O&;s55U@trj1C&adGl{A|~zu*R2u! zAKCf8Phz1|l$4Yq6w=HVcK|JeZ{w}cLhm?u#cY>xtX1TOPZU z-oXhArK+;GkbfZPpU00?YY09ade?&1Pq`9QG>*bBm7GEb%3h=qnVRv?A@@vnmeFxk zyhFcnaCR@*T&M1B^$9W$3s!2Ow85xRKWLG&kQJ$)?S{Ia7c4F^{p5gr-_~B!q#hUNI=vbd8c3TK zM#XQSnkDu)-few|C}KAOQK1of+nBueKr{z8&@neXG4nPRvs}P=qPj(R|14p#Odz*FtH--={E2#VEZq`VO*zhL%PsiJpjSBwoAlyJibq=9mWY)vaOP}(1WS=ajA*;FV`$FL$J0|49e1__ zHE4{j?KqkcHS{F`LFa685i@7wap-j2P+7m>uOR(?gWdAa`eBv2cs5t}!BeHZ<%@6P z=)b(R)RV&_!NIwXu6`tSK*B&SDQGHdXVA)*{i8v6qep|Myz<(H446aGe$+yWyhSQq zpSf>1Qe%aqn3$MRr{8HK&uo>_QkI{zT8rO7B-n2(_1)LCq;khPHFN~^|5R=5_D%gP zBPZ^_1_VF14S^LE&FpPy0`>n*G>WU8Wy-6Z$!vNK0;3hG<*Di-(2*ppHoHQ|a|z)h zmL2s}Z#UrgHl(dj1k5L{H>~iz7<)TfTDtUzKhLenM%V*U5arXJQoDld!i64P%rzYGo7C5PkWTwExhE=rZskbeoJdf z9e`l>iAyt~9tE#khHt8LbcxM(l}`1ja?aQU;#=%1)cZ6(wyQNYdr-v~A_2=n@dk@q z0(jrgmtr4w1c^xE-&o-CV+lQ;-7koCTvUzvY;R9Z3lKwcvHmKW`dzKJJ7W9Rk_@Co zJUY@(FZmCYJZq!BI%`M|MvqT9)YFebPb3dS(iXg)v2_`$g8y9+;;FaP|Gl_LMSNti z2i&#yG;t*|E%Svfx^{tjo9Y(Mg%f)B>US50utdRF0E7&*8|mu)Q+kH)lMrt?Q;Zpi z#f_;UoLG5>O|`CP3zjr2I!a)?bTdUDeC zrze0$Fwwn&j2h#S66~qnm>ce9?VYx4yW0E18*2F|aeh9j#8u0<*qds8Co1b8X+_w@ zJE93!i0_CvrPqFmP2QP7P{h_eP}cg%Cj17oy{7g@QCy5{H~6o63Nm>Bv*cT-eq&gC zBhfPWE4o+GjCsp{HBGPh1<&`&>ZUoU&+2@%llNyGtKucM$P%C^cR_!g~DYz_J7BdEGo$XR8u z=DYH}Oc$a_csQtx1z0BhXUYSdUAGCO%MB2&KisBek)^;ax;HsKx#$axQ@sC4-Rkex zlEY{3g|LeY#EGaLeh!6GxPA&*DdYk^N&7zlwwy>UsPgPTUNZ3S;3xrb=Z!Z8+$gZg z|6gOJ|MtfJ-;<}9i7xA^3Fo?;oSe!^{;SsYMN2k(Kngk)7MHWKvO-Hs3oI(cd>0_& z$a&CZ%zGkly6^lRtmkHHWsk>FI|6|){AM1|nZ&}Tw%E^OSUyi~p73Mnl8QC6ojM)P zP*eAWTjo|o7xgXz`K-Swsdy{0nQX!|%ds1f6PAaeu`W$c9{lHZ3kidGn8HdLudxyA z)kg~K!Nuu;xX14Ni)pG8g_DnDn)DjInSms5m$JaPBJ4~E#dAg?Cix_Ig$Xux88NZ7ksb+ zwA=Lvv%H4?QOd#}EC#(SD|jSMALk?4CJ4tkbTnPgdj(fKA= z!di~J>pugOi_{~D&GY%mF}9j`!<_;~;_)`Cb2&A?-Nic+nev3}(7?o@;NGmLsSFYl z61YR`O%wVGs=e>mb~!KW6WOWwYoX%Uu8n}=_Fzx_^*ZN$4UKB$t*{t6@*nkO2!&Ea zJ(J6_XkwFTvMQwx6+2ir2MvDzkh&d?Pl0DUvolOXnEpSr`Q&S zsF-LNslKTm*~ox=xz3+b2F^P)`1$4fxh2@6W*!lR<(VweAD&SzLC&y6m*|IVPofKbem;Mj#Nod+c1 z)}zxUwkdtuan`mN5zN-D#KSJMF`agvJwJ7Jt}^1~Ry_E(nqb%R{Ko`ThYM5dBnIxw zPD)C07%t%leP3&fr}6dm#Zr`dsJXj8*^WDJe!GGHx@zKt@fDa%^_M3RJ=1Rs#>*qs zX!zE5ex*$GTLLK7%;H4068mXsvHV2urF83-xDV$n|J8vMV+k>TErF;Ad z6x0G_td9fze4rSgWS11>xcDl(7JQftwk$l})GF*GKm0)PR)Vs+1tQfkNqtJl2wjZ0 z6D8bE^l`^b#(P?P4uk3(qLZ1^G#O)%ap`Ik?jSO!hmN*w83ONX_lP9hA!aNmL}6co zA*A^di+3VND=UFtf}b7gjX5I3TguPO&AnRbrO!@RFNQCa4eDeF_z?Gg`0!yIW=TV! zrJ0$L=C4uRYA$n}QYCX1&`ggW-{hZG7hGBCvvVwPUPqa*2|Q0|NNhVr zbq6|O9LFFwUeyOmhp_;IDK$Xc7bV@uI?$5gAMADP;6;w$q=+mVC9;r zAbH`Az&9t+|DvnWYP~T?uIL`%{odfQu9GTtM^jjbo;tf86*uYKOjZ7L9)E^t6P{H< zA}aFatRj0{LI?4H6NRe@or3JGb&;CW=JN+Hoq3Fe0?bR4D?h2SVbIqk(_p|}8YK(; z;v_K_N5<3OZeh_mnL?2%x!{0cBeXR{(o5tAvJvFp+B13>QM6EG(L%qY9RRA)ozKsz zzq0)p_+6Awg{vUu!mOR)+1b0Eo}SH$?V8c%0*}E$C2nqR?ObWo8hhdwq}YS?;ZpeR zj8F#gr=L>0TjdLM*oN+Cm6yS96KG`{bF%@se>o|XI^Lb23RDSDe*HehL7UW$SToR+ zJRb|Hs=_i(H%w#T6s7jx`zX37JzWeJ1qp6ye(XLfv)dW|5$mx%h@e1>*(=xBx7t(q zZ7-813v*Zoyq#+wTKV-QWow3>_>r_KXt4;2LY22=K_KyFdGK(P;6Cb7k9z{8=h%!S zM>2;WR#($&h8{L%2s>NCbx%P4yuSO73T74Zp9?*?1IeBd7BiT3Cy>E(goIbe%eY4) zy#9K-^YgXuluHJfBN!LWg107LrKuMi@ObbZY)#eQSp2=2Ez78u(!2GVQPvV~c?AKf zyK3U@W1EujlJ~%(9jC_?W{+>&;G^-jYwGI?E5Nsa8YXcv)JZE&(Drfc^fOM=Q0x9Y1Ig4sA9YDJTDaw zZlVR(r{Lekjc$m)VZ{ZH`!EGyDv|o0RF6f-t5mtjp(BnA;vNXi$A%TDzhETUdADyW zqMG^>nhWScj%d3O^B0%YVg|%c8f}nW5UKS z`=K~DLCeL4G6z^FmMJ(rm91;ek*==XIc)g9!ycWJ`^j`4LB&Rwd3qJ2;=x0fG=M&^ zjIkC!PEP%Uh9rPJoQq0ek9-*1=i}jF#Ir!41{@0$w5l=n+bOwvppf!l`@o+ASPU8m OM@>mf@teF=#J>PSpdu0g literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-remove-file-rule.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-wizard-edit-remove-file-rule.png new file mode 100644 index 0000000000000000000000000000000000000000..74cf1a5f45a32b658a2301c6bc313636ff5bfea2 GIT binary patch literal 46086 zcmd42W0WON^etF+m(k^}>N2}*cG*%je3qh3y z8yPFkIdS&cJ2F&8O85s177P#&&<{}&0XZNb5ECFEU^^&~?<-SewO-#}!1i*&{6JMx zI49pHV8(osd_X|8(Xj8j;NR!aHX^F_KtRY2|31K*M))p3K=tXO0(=TCTIZSI8fcOj z!ADLrKL~UEazeuLR8~Uga(@w!{mRpEc7_ZIQwbphVRrKMUFjl$U>140cs07B3Hi}= z>qT*Qd}U|kWM+J|@s$->Pn0SFfd~Z#;>)`LPk)2q%liuvN`RWTFZ90#?*DE)XW2B> zwufTZA^5iZ&rP65>3yx9-k0tC56!JW*HSSqkcKbuq2T{@#;DUpp24tW8)lsnK#KyB zG(k;xClvwb7nRFR<>)}^8Od{8_6phe&~Cg59?TKPKXGqvZUTsp>i3(U zlWeRk0OyK#1pEwvXh1Pp@`oTZ2`V7GqxtT3i^v+BE@Y4>eqj^FfeMa$PDN`fj~JZp zj|nwqlRVX8ulJXW&Dz}&mg?HqArlmKU*t2E^9ueVo}lzBR|nAoHm&GYl21JNz^ zZr-g%?Oq?RrgVVdY4e~|n<^>b`R*lK+@!aM4W`m9OCls(1Oz-{a(O1D|?CgoD$mHnz zw!Tk{kTv7pTKcm-R1nco&6Z?Zr2CdedND_)#EQ!OCd)8a+3p~#gnVx>bnod_dy92= z-ZEdDT7=ytkCErfG_}G%a5Q{;xTixXMr)OxTrnr(rU;xO=RoW|2Z}>0Eog^RpxtWilyo z5vqZ)ofw;Qcq++S#b0PqYBklK)2(%|zM^fWdw*&1GKvjXUomjTV8LE)QrDWRaFh>RTUKzRo?4+iXtK- zLjy8s?Y*$X#mD!Cqj|hP*9Qj!M_!S%Z&<%vA&P$Bm5-o4q-7iEyY<&P4%9mj5aJNa z&z}!R<8x7-S(sD0zMa4HXDm@C6!?hc17U_Pl-V!$YDHb)bB}kpHFpQQFKc!FNYMj= zxx7nXeLB88oc&TejdzMnWs`|eczCICT+lJ|Dax4M4`Uuh%uRr;? zj_gC+mi%YOYLGD1Y;I4e>KbEdlP?O_x60=*n<=duoBlvWemYmcaSbV(<>8?F9a#3I zfoP-x(e$R+vCJV^-@C9!9J~S_Cr~V$jL5Y-S*++dC1p-1A0cokFBA`*fnMxN$=~!N zQ`37Af74&(0ewZFZN@&!rMMh*Wz&^$A-;;7t%a*?j;^Hz$(F-W%o`sX?!a`)gh-%t z!jlVFdRMq>0puj|e>!7qLB`J9Fh#xYmH zt?~N|7LmIWrh1hAa;tG`kM%TaNOs>o42S#i=fyrB_893Rj5#Ohe00!NBIqx zYn@FKGKLEFC1t+CIXRk^jc$vCww9|xEcwe1m5DLw-7r*fo6qOUIu0$f05ebCyU#e3N8xqeW#&-ceo23w#6e0?~$Xv6Q)mHaOIr*KD6*> z(G!24g#1dvnK`3p>0eg-y{2Wq$ny1${!rf&6&jrT@Kd0N5b+Z3hUeIf5GA6mNBy;k z9wgTM9)6Pm7+EC1M|gOS2A3;it+JXp2a{WByyj0qN%-AMm=W(Y{m!*uSyvUh;wHOA z&bj7V;dp7WwD#dohXv3~h(~tBX3~eJK)6<9_NasphH;3(I!L#zpGROa#<{ zD_Sjyt@62zkol8w0)L@)dA*@|JMd86{kUq2f;q)tVG}3FP zBH8)wyR;dc?@^Ey77VTZ;y+M%N84}v4icHverycZ}swTD@7P81$dj> z?k&A+V5w9M@nQA*U;z#fx52f}I*q5@PNJJNDs=3hKM|q->*|x~7>o43-yMOV|9{drY98&r=r$qM{iq$*?%d_|QwW?KpTU%wsY0#3hng$ilG~e%uPtMel6OvPP z86|C?PYnq6OQAa^_*TnyM1Id2aaG%|a*w3%pDhHaO=9{)3xRS7(?1gesd6gH;Bz*y?pQu_pY=WS6W>~oD%Y+h*` zSfYGojeOu(;I0Nleot|T+Ki6$BFy-KH{83P1<*>uSTOU^Y@#fmFN1MaJnhSfZwPsD z_MOe!K-+3>Z?CzO7NjeNaK&1*F~5|6G~0WPpNI}>77Zxn@8KP2fZ&^6zxx6wEzBDh z+Z+%5=jG-IopU%4SsR1d0Wi>QQPg#M`wo^C#H0IRB3Q!uhaFOZ5v=oV=mZv&*uFRF z!$(F#&uVyeuBN@96U}Y6Iz%*qnM)5Ff|1S{4@aro#)Xv{1yt+~?AgCY%+pfxZ_%I9F|YJ!T*Pl4A~KWZeyoYB~&^ z^;FiP3D0Dw3MY%>aJe_jR}vF|`D3X1g+F#77|$!?Tn0=UI8}PCY|>P_She zEOFKI=A)@qndECtdP)W6)}R-flO5Wl`+4ing!j9HylJ%-c^{@P@`cmc0#qL-rJq*msa+w>MYymgu`mDhiEXPTu8KuHQ@W#te7~0@( zll;JwlbRBS+`IbwKVBbdHZ~ov@ESCgov)UJJY=)DSwe6n&^d(LvmJ9+GcAiTAQc>Lde z*MIfOFOweU#W5mcy@NgFt?o@m7*u>nUPB)ZCW6N(tL8arAoffV(4HLMgmKKj{G=$R zY~spO9Ss&pjEA)18cnwhivfR>vfINoji@}IcSb1Ww>Eeskz`DO41jVD$(K2y@b4^h zStvmzg4RI@kum?&n3sdqNn?=nDzkl1QhNX=PI zIFTX=wZD|IS>rou*EgQ`{5MpAtA!mZ@cJ9=i~H z#pKN&2PlB&1pK7}Wu(y6@f?X&#KbRc6(RXBg2nfx9MR&jH`>*#q9l#mZA%?V1R=;) z5qBZu{S_EUhm^D>E+AuL0RxmY^L+h0hKOAl!}m%)=wkXkvnI!kD$(+OTQ~x|^|%!v zYj3;GmmSz01fEN~qdxMLk~0Ybw5bm|=~sVU8{cO0i?3YZBUAI&9?fSrtZY$})KPTR z?uxRcVQvHp?-KS2bQyr7VFzTICnABbx9(AC$UM9#6JbphG33p`m-xrk8h#B~D~h2f ziy=hW0&Wo+s3jBkoQU~VeB9AK53kYsF-BWmQ8!f!!I^AN@9qEx(6J{Az_T(+2% zc5ye4gJVR5>ncLzJ(^U;x1m-(7`B|-tLCBmoei0O$gzgUi@0IO#Usb>4QI6|iWzwM z7j~{~kW5_VmQX zG4Czj>wZC)be_)D*Y({nji?4&{D4Z$EiV>aX$;QIEtEw|{}P77VX?EnXgU-wVGljJlJ!-f> zuh5F>M#Ytso?7#=tx%=3j7K-WwL|^I%;q|kCJZxs%7YEey2n19)~;=YxBC-x zXXQq~c9if;sph98L|{;9%*a&_hvAEhTEnf+Abe#~v^+QUS^3a(6^y9?+#;mY<+JV{giW1y3_>!|HnH1M@ohzIsySFG=? zI?0gaFxccar8nvnmVNqY37tsBkEtfgY{Th$I1%>Dotesh($4X!c@ZO(tBau?S@p3@ zHrDvmxuNO#{d~U{I9$i68@gQe^;ZX9$KtDwf~^onJ(HUD#uq<(L7!PWYR%~m3=Vcike{<4`<0VCf)=VHEZx+Mk9&X1%av^wG3FKRUGT9z z@G2KQq2JrR0~RlF5ZP>@l*;{ibdJq#qyTHWuRlH(uyan&l=lEpyuZp!L;7AAmCZCR z03ich8YIHQlN%=|6pLm>)_l;o$VC{Enaomv06`}BQ+rcGsBcsJ++w@95lKHhI zH2;B45}l3s_IglMIi7N`2#LpZl(Y_zUn)V*t77i=EcgEq-7pQ0K(lShpdR| zZAG9W4?0bz;HO%?`Rygc(Q9i3CHpNQo%LH{l}h8IdI31B$lTnh&NmHNdFlMu|C=M7 zm~Ii;Et?ba{SFUUNvsYVyA@1Nq7G$O{FD|D5$B4MzHd7wLyOI6i1?lTyQ}NsI?(>8 zJ7F|PA#=V=R)UE5b|0SP*TKP2k>oOR4 zb@u2MB1!)y%wui46c!tr#)S5PxF`+~A=kvxx%#{b&?DXqML{C6g){}Re&1+PHc}!K zPt%NVUKX{xa)WV%?G^a#?N5(fM3^WUkZa)NM6`I3x-qQkM>sZ*r|p$X2%=m4TJE=x zbYoNttb$wR%24oUmyv?By?w2A>7ij-Yh>X8486eG#rK^UAm}Up;RN@<0*qR6y^jHc z%1zKn9M{pLD%mgx%&ti8f+_L#ClRm1W+CnDX=*x=wc)Flf{KXW-mwyQd9?1yEX3&K zJJ~IU97a-B@KrX zOT3$b3TJyTYwEUah5U4%YpkY@=C?#c-^+oG*-a&{9?MuazuEnZgC{d*2aJJz$zn(1 zT>_3V=q!00HyuQ*3S0ppd7#Q!ns)c8HOF_}Kircl+?laGWLrzytm5PAhkWAkXbn;K zz3}OC`Yz*&`l0Zv!9$z-``u|Cp;PJ2j_<^5Wn>_+!-3tanehPc7TG>NG)?{GPg=mf znKydYf<#ubrc;3PnoM({rsJ91KyQV2mA{bDnH7GXSn0iEyXhrCd#WrXpYyJ~xL-XJikfa4BSsCqh<_eq*t|8|o4 z2(Xn@rk5DligRJLk;s!>mDXQA`^yBcL3gJiFf^VTcydWdREu&4M0JQ(?v&TVJ8n9h z$7*S(Caja*^i90u8*udS5^e|>47d=!n3FLxUc04CE)BK}+e1nc{KWEq3UK}2RzSNiqq@x7cIoPJz-dM^= z0`yRiHG?^V%>{eQ6N8^nm&wf_H;+0l zGBugbqD!LD=Kf@*xLDocBqAs;%_k`?F3Be?4^A=)7r1_hJvt*u9IH^_SJLJNF3c~o zU_^bO${}U+lTvSK!avoF!fYSGIOW!(E{<5355e@m+4iFBDi%*mOJiqeudS_}*=uNO zVrF6*yvv>K@^nvW_5SkG)YMdgn;w>(UC`7o4i&`@Eii2sQWgjGK}fP>Op92JwAg2F%a%p#3P!wH3gGO9~GtPJLk*CWQStg}4(Bd)0GYx18W8M5Vb z1#K)SI9R4wj>qlMVlta&yElZ?YNvy2)F()(Too`FqQPbu*cvZ|syFxDT~Ka3D;UqHOeGRhNePtkQ*wE`5eA%k+Ia3O*#-k}O(da*j9B;YY`+j+1^ zTPs=08d8j5-<}OMVBLd2LvZ`z5h}n>1myB?swkNn5UvAEC>!WQimqc_HyjfNwmW8* zvoKvgt1g$%S6>w9kde}$^Kw5{hfF8E8KnT$a*J+&oLT@z_L#nY#3`Du=%Vs`-CHRE zK_e?~q$~c<8GWC*N&uZK;Nakdu^}QJKY*+4a=sFLjbK2IrNh8sj6jQ@5y)sM!@V`T zxLaNT&4s~N`_YXtBN1hHYg^Zh4ohiHp$RN4M#=-HnCxdbKffAntNz8A+O8ZB{^Zelh}XlP9DyTN~S#jIdNO9cUj9 zhOoAhBp_O`n38CnhQzMi#o2YaYWyl>pjlLVE`K=AVZDp9T7TFz*%rHaTgJz=N0#tr zxt0>vg%ia5E_A zjMz>|RVj<-h|1~I?PPZX9!LHjptrZTySu*$3JT+SD?rTmDHk_odWTX2>qt~brC)BW zcd)hP9Sbo7K?4pH3sh-ns>YQCi8McAJjr)vZUme$ia#)AzR290E((EG%N~Rusj&|^ zQR9t8#0*M;mkS<{+FM<)#8^VtEbq%4v6<0fr`_SNec6!AA9Y_=m-XcB6B83v9nLo_ zll6|+Iob<2hZ|b%*SMc_v+(eA!T%5hf0xl!BAgC@IsF^GXr&nyMpVki2a74+eB;f+ zsvAt^a%9?@VY^?+f66eOe-AUebvd7k~$bECW(lrZl09)aJonf*%7Ftpz%&ixvY2tcGv=6DNQtf08~@FAdhNnv z(48{-3N7NI`$9&>IbRK3qo6WKiYO~Z;2jaE2%{g|-|htkB|BQi^ZGnAP%x2mo$Kwt za2WLOvx4ZIvWWP6`|mf>MjfFM6rrJ~>kjNTS!q;t%gLM$x5AHX{I z73^ECz3#tRkVNJdBsC6NN|r9?{)KG*F+-EcDUY3zl2Aiy+aJ@cZC|gIp@JPR+tfz; z*P2VIjQB3My4sqfn9UYi95s~Cn*#C{DnIQvP{6o$`CbwD;TA;cjAVkJ(-W^2x5*bG zTno5Wf^TtR&lB{vIB&6fjwggjvY#Y^&jaYTJ!C@%0tpu=b=5c^?(c8VAPs-ClojK0 zz{=4($2LBlOujGdRZj>;&Jie8{gou*BV2@M9=duq=NzA$KhP&Z} zYT&5?ZZJMgK}q|I@DI6w9m4X>4--_(dt9!dww{7OV8}};MbsQA(a{7e85gvN$?z>6 z^~Q(Kq0|dqU*I62MN*Ixi9qwwaN&mqM{ky$nF3~@kc5Okq$&LR6n{)-bm~)(+G*vo z1ft_5U;@o6tk@``c?@fLI@?RT#0hTAx#H)Q(>gk{iDiq!m(C1KrFn$l$s%% zIef{bfzv^pRQ+0g;Y-X2|eG)(@ICQZpd@X_V3vI)d@q%ej3zr&`pm0cx*z4sv}&`yS#3n(G=vCQTz^=Ul0|Ccv*k(? z^wt@lMt@uQW|SCCu}eny(kgY%l(3k;Ofp@*`Bm7*dG3Q{-Acpbt2?eY$E zw{tb{2#vVCsmKDm+}J4&kjSN|8M{&LSy=zc&s|&(IJYcqMag!H2%!b>d1&M1=C&mc z4M0m6Gms##?oD!3XSVK8rNLe$J8F_}V&hgjsySLoh>oK4mwb+|iAvDs!)*{Fc|+{9 zG$D0VCuU9*Q0`0q%$;C_1WfR18`k85Uzd6nvg5{>J+FI^%f!KwO2ctZ^!5t%Y;%sF z_QQd=qEg8~*o)-w2W1Wp((;$f@jh@|v>+qS!Hu|qPP(rsh#e@d+)9U{9#i@U4s9D+ z&-jAWz4_#E>S!e2^?du}bRGe0F=O;w*IIwL)HIa2J|4XrZ-+%~K9-AOlqSn~r3*M& zXWSc(<(zdxx99jOWVixk<*!bf)Xj%Ib$)G&J2}%UJoYu}bGc+T+(qsEZlKetd`hR5 zXuKmjUC?l$y(IL6K2K(#L06oTY}X9VV{S1%f{9od3hj=GRlB>Ec%e6+8~v${1Eprl z!^FdVJq*gDg7GRh^C?NRYP{<*>uc6&QFAc8)S9~I$+r%)WqObA^Z)~MxmLA^UDp2~=wGwYwdYgOs&N2~$ECmEh>;8)@5}v+W!1zqcgkMl~VngnvkP zB;7rfO34FNI?9vjbHjvqk9zM0Qp5;++1yj|mXiSDWbA9|$}5kVBJbOP1LqDWr0UZH zH$wnApyH#!jW`lmFY-y~Zx_o+9!v?rX0un@D*?oR=i3St;RSMds6Y0~2l0NABTaHl z$m0z-gcw2b-(|J;BR}1r`rrA&tZ~yYeo2doipS^onoC7}O@Fy8rJ%<=zfFb1{O4{*W#y0t1YDJebe0Ok#Q${jV81q3Y@n_zm;YbN7ozJiiZHG3S zuaI{~qnn;zK2<7zPH-*FfFAAe?+O)jd=Pjifjnjlup+~e4x(VGr-{f6l=fB3fjjD| z#7b0JnAzMbSsP5ISYi3;iK-l#pqrZ*97QO9KbD+MZyPFBJYRADfVK^=5)m?Vpf*_3 z%VLif6zq*VZ(*Ku(Jw@AYVCQF)P!F8m0HKMv)hGQ(4f*1^Fo23_EuL78iQFfRA&D{ z@C8Y8=DBBNT%+C^-F^?x4;IUfl-nAxG19MtQCtkI-8J&x^6d~bfJP4Plb+la*WYAe zX5_KDcv?GyVeEvwfHs06B8CHEAe3N)aQ08JZQBdAwL>HIh#l40#ajN` zg4Fg3LT(BhJ!TRryF!<{05lZ`Df^FQOP8P0a0&{kGUnFI696U)zga!biQBPUjtx?? zsc1{)4)nknFN~wK{ z(@1BNNK{tzqrY*|puG`2;#MQe?Z`LZO^z1L&(Cx4kcJ&3SL0Fur0QE^)okC}-9;g3 zQ?H8Xsy8_N6)I2w5Rr#5uz*kx0_RA!10LZ*FFkEgQtx3vNL6uQ6%{g$!lBEMmy1w9 zxiRJ|l+*sMYYj$X}HR{9P}WiO-g1(1)FOlZvV*y1sI?} z{`@5uWU#U#LLhdM$=hrmVg{9*Kk7M^;6!r3`0fZ8Am0PYpUp8KAtvs{7ZeZ>V7uvJ z{q}t2n??D?IesmxQUL`G4GjgAx*e0T4DQKy4|lu-$p>rTO+|DO-v*yMsks$P^=5{k z4NqbA#;n?>!qsb$>ne*n{ohqU-suFtLXBIZX>lKT zk7{IO6<|7cBF=BzQL?I?%<9@rcJ~aIe=b*cj{Oj>#$O(si>X0mwXa<|YW0V)FfsY^ zD=I9WE;rE7&<5zghuM4`IV{_-7+#*m{2g;;V=#KP31Ude2{ueMf`g~GAaKNv=z>&9 zvIfYuqYsLgH$tYdQ-f$L`lK<_c)~lOBV}W7u`&}1I_O8}rO4DJbfd`J*|1#75TX)! zGOcKaa&5@>Qr@9XOOLh*aqV{qN7GOEyhP?UZhK`$z48(vEON`Kb8~V+R9Itj5w#(J{u+vpx*`U!oorbSV>Cz{&Ambf372=n{xCv(lI;08`KR4+}Grn zNB>^MO+=9bl~0witE;K4Xkmnk0P40PDn@cra&qFez%Hrk0=PU5MGL-kZP?3!D|ii| z5OFdsl5KdH*cc_ntv&1jzB<`AwHdrSMok+8aUMb&2gO$SRXglzw>k#C$ATD2F_(O= zmIVwEL9B4M(eHeF?mgI9;P@m4^%h)U740VIa^=Y1VB7RGu(uKO9^2zpsX^>F#BWR?Qlu(N?uFw%LUIXf4wyEgy^Rj6^X}!apmYIOSOytNL z=;zw{@mxG*P}ⅅ%Tfxu@tn`synJyv(!uqOhXy@G+V3N?LvSjrO;qOI8LRcPE_lI z&Q9co%i*CzY+I1n;o6ES7`qR*EE$3;|8I1nZZ^P%Dj>Oja!;g`s2k zgoDu8c|Snsa1NJFjzF6XoL{Oiu68sW_DJ{eC7f0wjUpLcznF*8r7!y$LeK-gQ|t#d z7SpX-m)+v2BxQf!$cK_<^St^@uw_YEq;XXycX>$(?>j>m6iAvr<%%vGFk=veJFq9a3R3t5V?z-Hm%yf&X|o4-BG=JSBNTwb4pjb@XnR z&Hc}*tjE7N?N9idx)Ws#Btq%Ka_ z?RtA{Xtk}Ua}00n<*$sVplqS>0Hdv38jM^Q^()!Ad(F+RZR*c1*=XXJyygwv)IgE^2iaXymi!1s%8|LCTK^GqTg3!jO6T2h zx1Xz;jSmCG&WnVfJUQ)VNFfj){~O+j{4bpI|I|3cz={+qo(~o11a>E&`p2j&F#Ncw zQiFvJe|~m>5B?p$XgvUd97+@`qC=}d(fIk==bkG=_Rz^5Vhw!Mty*t1Ha51k26kMf z_Kn^02w;j!OHb~Orb7j|;r4v4nD`_I6xe^lXO}3~YbWOf>$o1ET~5_3-fA7>+-N-Km5aP){kOnMyWIK&6MK)qgA(%T?hb2RzXmDEF?Y zz8FZ7p!Cf6BAYm7`70h!Kn2uiar@!rFE-~@Am`53{Bqa4`S&e})+yVkX<6yv8IwQ# zLYUre_?b5KUq=%zx!#{IHw$U7A1}ls;%M+V&#+v)Y4m1JJ)xmR;o%S8zaEL}zRQI# z!ODR6%8II@yo!p7yu1Ozy8W^jR^r1o_Y;O?gpK?6FVUv6yIBS~QgGs1TMA;gSUM3QUc#@KKoi-Og8x#n7-A&G-$#BU3RA z>$<9YO(-{NJc5h8z|}oHD@4RCis$ObeFJHbcr0|5O;&vZ(ZC;v8I%iiOS3y$S9;AP zmIof$G06{Dt?`7(2 zZ=khk+4L^wQ>1T?*{eK`{g3I*%)){@mdf3t3Q8IVRv=V~iGTT*Hzlwbz{=^#bo7gk z%@p2%FXQ=*nHZS3@Jynrbr`llf9Z>d1Ajmw(1&wmJ|Ax;GF0Cv7kG23>5XMC+cL#= z-zb#hPuMaHTIg@|X2g|0U1}1RnXt}@?*Tob>aXxP^y>C-as4VT)c-Y`P4*=b(FN9$4%oY#YfQ5;Ny?5!RFLvsoejHJU zS{78$L+JH0TdEZ4FTZYG;H{|hdi~kjIXJj0TC9HY<4Hl&n*d#UAg2^q9^bd{VNiZD z2;OwDjfaD}y|C<#yC6lPE~~2Q8wG3Jlpsa0!{(xHr>-eYtE^nwot2fviBe|NM3~BM z<&jbvx*D4vD8q3um|%(uldg%^N~5ZH02(;=(~LBf-~VL{#)3H<(G)%W5drn*iU^uY!f0%@G>Jqivg`9;BV=c#R;H#$gK;!TbM!F0I`P);FQN&A zWfZ@^ARDCk-C2y$w1u^pHb#n!imU5kb*ZuDDAL)JD%^2na$p8QMQL?